From b160291753d51b983736bdd06aedd03c22a7c7db Mon Sep 17 00:00:00 2001 From: Greg Knackstedt <52809959+gknackstedt@users.noreply.github.com> Date: Tue, 5 Apr 2022 18:34:28 -0400 Subject: [PATCH 001/209] Added install logic for BlueJeans Events BlueJeans Events by Verizon only has one install package available currently, does not have architecture specific URLs. Added install logic for "bluejeansevents" starting on line 1720 --- Installomator.sh | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/Installomator.sh b/Installomator.sh index 3f64473..8a0c79b 100755 --- a/Installomator.sh +++ b/Installomator.sh @@ -1717,6 +1717,13 @@ bluejeans) appNewVersion=$(echo $downloadURL | cut -d '/' -f6) expectedTeamID="HE4P42JBGN" ;; +bluejeansevents) + name="BlueJeans Events" + type="pkg" + downloadURL=$(curl -fs "https://www.bluejeans.com/downloads" | xmllint --html --format - 2>/dev/null | grep -o "https://swdl.bluejeans.com/events/release/beta/downloads/BlueJeans_Events.pkg" ) + appNewVersion=$(echo $downloadURL | cut -d '/' -f6) + expectedTeamID="HE4P42JBGN" + ;; boxdrive) name="Box" type="pkg" From fc58b8e5a8fcb0f35236c49abff7144e2f17e7e8 Mon Sep 17 00:00:00 2001 From: Greg Knackstedt <52809959+gknackstedt@users.noreply.github.com> Date: Tue, 5 Apr 2022 18:36:41 -0400 Subject: [PATCH 002/209] Added label "bluejeansevents" Line 56. Added to call install logic for BlueJeans Events client by Verizon. --- Labels.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/Labels.txt b/Labels.txt index dc91bee..b6e6604 100644 --- a/Labels.txt +++ b/Labels.txt @@ -53,6 +53,7 @@ bettertouchtool bitwarden blender bluejeans +bluejeansevents boxdrive boxsync boxtools From 24bbe426ad967e72c9deb82d41689849839b156c Mon Sep 17 00:00:00 2001 From: Greg Knackstedt <52809959+gknackstedt@users.noreply.github.com> Date: Tue, 5 Apr 2022 18:57:24 -0400 Subject: [PATCH 003/209] Removed version check logic from "bluejeanevents" Application does not have a version number in it's install .pkg --- Installomator.sh | 1 - 1 file changed, 1 deletion(-) diff --git a/Installomator.sh b/Installomator.sh index 8a0c79b..3c45864 100755 --- a/Installomator.sh +++ b/Installomator.sh @@ -1721,7 +1721,6 @@ bluejeansevents) name="BlueJeans Events" type="pkg" downloadURL=$(curl -fs "https://www.bluejeans.com/downloads" | xmllint --html --format - 2>/dev/null | grep -o "https://swdl.bluejeans.com/events/release/beta/downloads/BlueJeans_Events.pkg" ) - appNewVersion=$(echo $downloadURL | cut -d '/' -f6) expectedTeamID="HE4P42JBGN" ;; boxdrive) From 902175fa0944975060ff64690ba3e96cdf675515 Mon Sep 17 00:00:00 2001 From: Adam Codega Date: Thu, 21 Apr 2022 09:49:24 -0400 Subject: [PATCH 004/209] Create installInstallomator.sh --- MDM/installInstallomator.sh | 42 +++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 MDM/installInstallomator.sh diff --git a/MDM/installInstallomator.sh b/MDM/installInstallomator.sh new file mode 100644 index 0000000..d6f4ed6 --- /dev/null +++ b/MDM/installInstallomator.sh @@ -0,0 +1,42 @@ +#!/bin/bash + +# This script is an MDM/management platform agnostic way to install Installomator +# The only requirement is an Internet connection. + +# Get the URL of the latest PKG From the Installomator GitHub repo +url=$(curl --silent --fail "https://api.github.com/repos/Installomator/Installomator/releases/latest" | awk -F '"' "/browser_download_url/ && /pkg\"/ { print \$4; exit }") +# Expected Team ID of the downloaded PKG +expectedTeamID="JME5BW3F3R" +exitCode=0 + +# Check for Installomator and install if not found +if [ ! -e "/usr/local/Installomator/Installomator.sh" ]; then + echo "Installomator not found. Installing." + # Create temporary working directory + workDirectory=$( /usr/bin/basename "$0" ) + tempDirectory=$( /usr/bin/mktemp -d "/private/tmp/$workDirectory.XXXXXX" ) + echo "Created working directory '$tempDirectory'" + # Download the installer package + echo "Downloading Installomator package" + /usr/bin/curl --location --silent "$url" -o "$tempDirectory/Installomator.pkg" + # Verify the download + teamID=$(/usr/sbin/spctl -a -vv -t install "$tempDirectory/Installomator.pkg" 2>&1 | awk '/origin=/ {print $NF }' | tr -d '()') + echo "Team ID for downloaded package: $teamID" + # Install the package if Team ID validates + if [ "$expectedTeamID" = "$teamID" ] || [ "$expectedTeamID" = "" ]; then + echo "Package verified. Installing package Installomator.pkg" + /usr/sbin/installer -pkg "$tempDirectory/Installomator.pkg" -target / + exitCode=0 + else + echo "Package verification failed before package installation could start. Download link may be invalid. Aborting." + exitCode=1 + exit $exitCode + fi + # Remove the temporary working directory when done + echo "Deleting working directory '$tempDirectory' and its contents" + /bin/rm -Rf "$tempDirectory" +else + echo "Installomator already installed." +fi + +exit $exitCode From 3449c24508a000243c034867eaa82c7246083a6d Mon Sep 17 00:00:00 2001 From: Adam Codega Date: Thu, 21 Apr 2022 09:50:11 -0400 Subject: [PATCH 005/209] Update and rename installInstallomator.sh to InstallInstallomator.sh --- MDM/{installInstallomator.sh => InstallInstallomator.sh} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename MDM/{installInstallomator.sh => InstallInstallomator.sh} (91%) diff --git a/MDM/installInstallomator.sh b/MDM/InstallInstallomator.sh similarity index 91% rename from MDM/installInstallomator.sh rename to MDM/InstallInstallomator.sh index d6f4ed6..173f705 100644 --- a/MDM/installInstallomator.sh +++ b/MDM/InstallInstallomator.sh @@ -1,7 +1,7 @@ #!/bin/bash -# This script is an MDM/management platform agnostic way to install Installomator -# The only requirement is an Internet connection. +# This script is meant to povide the simplest MDM/management platform agnostic way to install Installomator +# The only requirement is an Internet connection # Get the URL of the latest PKG From the Installomator GitHub repo url=$(curl --silent --fail "https://api.github.com/repos/Installomator/Installomator/releases/latest" | awk -F '"' "/browser_download_url/ && /pkg\"/ { print \$4; exit }") From 8be5f4866ed0415e89662070ab3b2bb12db8884a Mon Sep 17 00:00:00 2001 From: Liam Steckler <553265+buckbanzai@users.noreply.github.com> Date: Tue, 17 May 2022 14:41:57 -0700 Subject: [PATCH 006/209] Update talkdeskcallbar to use JSON parsing --- fragments/labels/talkdeskcallbar.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/fragments/labels/talkdeskcallbar.sh b/fragments/labels/talkdeskcallbar.sh index fb773b4..dbc9135 100644 --- a/fragments/labels/talkdeskcallbar.sh +++ b/fragments/labels/talkdeskcallbar.sh @@ -1,7 +1,8 @@ talkdeskcallbar) name="Callbar" type="dmg" - appNewVersion=$(curl -fsL https://downloadcallbar.talkdesk.com/release_metadata.json | sed -n 's/^.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*$/\1/p') + talkdeskcallbarVersions=$(curl -fsL "https://downloadcallbar.talkdesk.com/release_metadata.json") + appNewVersion=$(getJSONValue "$talkdeskcallbarVersions" "version") downloadURL=https://downloadcallbar.talkdesk.com/Callbar-${appNewVersion}.dmg expectedTeamID="YGGJX44TB8" ;; From ea6434c4760274963880221bbb7289160bc536c7 Mon Sep 17 00:00:00 2001 From: Liam Steckler <553265+buckbanzai@users.noreply.github.com> Date: Tue, 17 May 2022 14:48:21 -0700 Subject: [PATCH 007/209] Update talkdeskcxcloud to use JSON parsing --- fragments/labels/talkdeskcxcloud.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/fragments/labels/talkdeskcxcloud.sh b/fragments/labels/talkdeskcxcloud.sh index 2326146..889dd13 100644 --- a/fragments/labels/talkdeskcxcloud.sh +++ b/fragments/labels/talkdeskcxcloud.sh @@ -1,7 +1,8 @@ talkdeskcxcloud) name="Talkdesk" type="dmg" - appNewVersion=$(curl -fs https://td-infra-prd-us-east-1-s3-atlaselectron.s3.amazonaws.com/talkdesk-latest-metadata.json | sed -n -e 's/^.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*$/\1/p' | head -n 1) + talkdeskcxcloudVersions=$(curl -fs "https://td-infra-prd-us-east-1-s3-atlaselectron.s3.amazonaws.com/talkdesk-latest-metadata.json") + appNewVersion=$(getJSONValue "$talkdeskcxcloudVersions" "[0].version") downloadURL="https://td-infra-prd-us-east-1-s3-atlaselectron.s3.amazonaws.com/talkdesk-${appNewVersion}.dmg" expectedTeamID="YGGJX44TB8" ;; From 8e26889e298169512fb056fb1bfc24e627eb8006 Mon Sep 17 00:00:00 2001 From: MacMike077 <104210875+MacMike077@users.noreply.github.com> Date: Wed, 18 May 2022 09:54:13 +0200 Subject: [PATCH 008/209] Create prune.sh 2022-05-18 09:51:50 : REQ : prune : ################## Start Installomator v. 9.2, date 2022-05-16 2022-05-18 09:51:50 : INFO : prune : ################## Version: 9.2 2022-05-18 09:51:50 : INFO : prune : ################## Date: 2022-05-16 2022-05-18 09:51:50 : INFO : prune : ################## prune 2022-05-18 09:51:51 : INFO : prune : BLOCKING_PROCESS_ACTION=tell_user 2022-05-18 09:51:51 : INFO : prune : NOTIFY=success 2022-05-18 09:51:51 : INFO : prune : LOGGING=INFO 2022-05-18 09:51:51 : INFO : prune : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-05-18 09:51:51 : INFO : prune : Label type: zip 2022-05-18 09:51:51 : INFO : prune : archiveName: Prune.zip 2022-05-18 09:51:51 : INFO : prune : no blocking processes defined, using Prune as default 2022-05-18 09:51:51 : INFO : prune : name: Prune, appName: Prune.app 2022-05-18 09:51:52 : WARN : prune : No previous app found 2022-05-18 09:51:52 : WARN : prune : could not find Prune.app 2022-05-18 09:51:52 : INFO : prune : appversion: 2022-05-18 09:51:52 : INFO : prune : Latest version of Prune is 2.2.4 2022-05-18 09:51:52 : REQ : prune : Downloading https://github.com/BIG-RAT/Prune/releases/download/v2.2.4/Prune.zip to Prune.zip 2022-05-18 09:51:53 : REQ : prune : no more blocking processes, continue with update 2022-05-18 09:51:53 : REQ : prune : Installing Prune 2022-05-18 09:51:53 : INFO : prune : Unzipping Prune.zip 2022-05-18 09:51:53 : INFO : prune : Verifying: /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.0beFjQd7/Prune.app 2022-05-18 09:51:53 : INFO : prune : Team ID matching: PS2F6S478M (expected: PS2F6S478M ) 2022-05-18 09:51:53 : INFO : prune : Installing Prune version 2.2.4 on versionKey CFBundleShortVersionString. 2022-05-18 09:51:53 : INFO : prune : App has LSMinimumSystemVersion: 10.13 2022-05-18 09:51:53 : INFO : prune : Copy /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.0beFjQd7/Prune.app to /Applications 2022-05-18 09:51:53 : WARN : prune : No user logged in or SYSTEMOWNER=1, setting owner to root:wheel 2022-05-18 09:51:53 : INFO : prune : Finishing... 2022-05-18 09:52:04 : INFO : prune : App(s) found: /Applications/Prune.app 2022-05-18 09:52:04 : INFO : prune : found app at /Applications/Prune.app, version 2.2.4, on versionKey CFBundleShortVersionString 2022-05-18 09:52:04 : REQ : prune : Installed Prune, version 2.2.4 2022-05-18 09:52:04 : INFO : prune : notifying 2022-05-18 09:52:04 : INFO : prune : App not closed, so no reopen. 2022-05-18 09:52:04 : REQ : prune : All done! 2022-05-18 09:52:04 : REQ : prune : ################## End Installomator, exit code 0 --- fragments/labels/prune.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/prune.sh diff --git a/fragments/labels/prune.sh b/fragments/labels/prune.sh new file mode 100644 index 0000000..2b76dd0 --- /dev/null +++ b/fragments/labels/prune.sh @@ -0,0 +1,7 @@ +prune) + name="Prune" + type="zip" + downloadURL=$(downloadURLFromGit BIG-RAT Prune) + appNewVersion=$(versionFromGit BIG-RAT Prune) + expectedTeamID="PS2F6S478M" +;; From 124c0cf85f90272e612b61311047645a76fde0b1 Mon Sep 17 00:00:00 2001 From: MacMike077 <104210875+MacMike077@users.noreply.github.com> Date: Wed, 18 May 2022 11:07:54 +0200 Subject: [PATCH 009/209] Create googleadseditor.sh 2022-05-18 11:07:11 : REQ : googleadseditor : ################## Start Installomator v. 9.2, date 2022-05-16 2022-05-18 11:07:11 : INFO : googleadseditor : ################## Version: 9.2 2022-05-18 11:07:11 : INFO : googleadseditor : ################## Date: 2022-05-16 2022-05-18 11:07:11 : INFO : googleadseditor : ################## googleadseditor 2022-05-18 11:07:11 : INFO : googleadseditor : BLOCKING_PROCESS_ACTION=tell_user 2022-05-18 11:07:11 : INFO : googleadseditor : NOTIFY=success 2022-05-18 11:07:11 : INFO : googleadseditor : LOGGING=INFO 2022-05-18 11:07:11 : INFO : googleadseditor : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-05-18 11:07:11 : INFO : googleadseditor : Label type: dmg 2022-05-18 11:07:11 : INFO : googleadseditor : archiveName: Google Ads Editor.dmg 2022-05-18 11:07:11 : INFO : googleadseditor : no blocking processes defined, using Google Ads Editor as default 2022-05-18 11:07:11 : INFO : googleadseditor : name: Google Ads Editor, appName: Google Ads Editor.app 2022-05-18 11:07:12 : WARN : googleadseditor : No previous app found 2022-05-18 11:07:12 : WARN : googleadseditor : could not find Google Ads Editor.app 2022-05-18 11:07:12 : INFO : googleadseditor : appversion: 2022-05-18 11:07:12 : INFO : googleadseditor : Latest version not specified. 2022-05-18 11:07:12 : REQ : googleadseditor : Downloading https://dl.google.com/adwords_editor/google_ads_editor.dmg to Google Ads Editor.dmg 2022-05-18 11:07:17 : REQ : googleadseditor : no more blocking processes, continue with update 2022-05-18 11:07:17 : REQ : googleadseditor : Installing Google Ads Editor 2022-05-18 11:07:17 : INFO : googleadseditor : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.q9auZnh3/Google Ads Editor.dmg 2022-05-18 11:07:19 : INFO : googleadseditor : Mounted: /Volumes/Google Ads Editor 1 2022-05-18 11:07:19 : INFO : googleadseditor : Verifying: /Volumes/Google Ads Editor 1/Google Ads Editor.app 2022-05-18 11:07:21 : INFO : googleadseditor : Team ID matching: EQHXZ8M8AV (expected: EQHXZ8M8AV ) 2022-05-18 11:07:21.509 defaults[65632:614893] The domain/default pair of (/Volumes/Google Ads Editor 1/Google Ads Editor.app/Contents/Info.plist, CFBundleShortVersionString) does not exist 2022-05-18 11:07:21 : INFO : googleadseditor : Installing Google Ads Editor version on versionKey CFBundleShortVersionString. 2022-05-18 11:07:21 : INFO : googleadseditor : App has LSMinimumSystemVersion: 10.13 2022-05-18 11:07:21 : INFO : googleadseditor : Copy /Volumes/Google Ads Editor 1/Google Ads Editor.app to /Applications 2022-05-18 11:07:22 : WARN : googleadseditor : No user logged in or SYSTEMOWNER=1, setting owner to root:wheel 2022-05-18 11:07:22 : INFO : googleadseditor : Finishing... 2022-05-18 11:07:32 : INFO : googleadseditor : App(s) found: /Applications/Google Ads Editor.app 2022-05-18 11:07:32.448 defaults[65669:615163] The domain/default pair of (/Applications/Google Ads Editor.app/Contents/Info.plist, CFBundleShortVersionString) does not exist 2022-05-18 11:07:32 : INFO : googleadseditor : found app at /Applications/Google Ads Editor.app, version , on versionKey CFBundleShortVersionString 2022-05-18 11:07:32 : REQ : googleadseditor : Installed Google Ads Editor 2022-05-18 11:07:32 : INFO : googleadseditor : notifying 2022-05-18 11:07:32 : INFO : googleadseditor : App not closed, so no reopen. 2022-05-18 11:07:32 : REQ : googleadseditor : All done! 2022-05-18 11:07:32 : REQ : googleadseditor : ################## End Installomator, exit code 0 --- googleadseditor.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 googleadseditor.sh diff --git a/googleadseditor.sh b/googleadseditor.sh new file mode 100644 index 0000000..9c2600b --- /dev/null +++ b/googleadseditor.sh @@ -0,0 +1,7 @@ +googleadseditor) + name="Google Ads Editor" + type="dmg" + downloadURL="https://dl.google.com/adwords_editor/google_ads_editor.dmg" + appNewVersion="" + expectedTeamID="EQHXZ8M8AV" + ;; From 1de3838a9b1dff13f0dab4f84eb19313670f3e48 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= Date: Wed, 18 May 2022 15:02:32 +0200 Subject: [PATCH 010/209] GitHub without API calls MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit I have tested two labels, the first has an `archiveName`, the second does not: ``` ➜ Installomator/utils/assemble.sh marathoninfinity DEBUG=0 2022-05-18 14:58:34 : WARN : marathoninfinity : setting variable from argument DEBUG=0 2022-05-18 14:58:34 : REQ : marathoninfinity : ################## Start Installomator v. 9.2beta, date 2022-05-18 2022-05-18 14:58:34 : INFO : marathoninfinity : ################## Version: 9.2beta 2022-05-18 14:58:34 : INFO : marathoninfinity : ################## Date: 2022-05-18 2022-05-18 14:58:34 : INFO : marathoninfinity : ################## marathoninfinity 2022-05-18 14:58:34 : INFO : marathoninfinity : BLOCKING_PROCESS_ACTION=tell_user 2022-05-18 14:58:34 : INFO : marathoninfinity : NOTIFY=success 2022-05-18 14:58:34 : INFO : marathoninfinity : LOGGING=INFO 2022-05-18 14:58:34 : INFO : marathoninfinity : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-05-18 14:58:34 : INFO : marathoninfinity : Label type: dmg 2022-05-18 14:58:34 : INFO : marathoninfinity : archiveName: MarathonInfinity-[0-9.]*-Mac.dmg 2022-05-18 14:58:34 : INFO : marathoninfinity : no blocking processes defined, using Marathon Infinity as default 2022-05-18 14:58:34 : INFO : marathoninfinity : App(s) found: /Applications/Marathon Infinity.app 2022-05-18 14:58:34 : INFO : marathoninfinity : found app at /Applications/Marathon Infinity.app, version 1.4, on versionKey CFBundleShortVersionString 2022-05-18 14:58:34 : INFO : marathoninfinity : appversion: 1.4 2022-05-18 14:58:34 : INFO : marathoninfinity : Latest version of Marathon Infinity is 20220115 2022-05-18 14:58:34 : REQ : marathoninfinity : Downloading https://github.com/Aleph-One-Marathon/alephone/releases/download/release-20220115/MarathonInfinity-20220115-Mac.dmg to MarathonInfinity-[0-9.]*-Mac.dmg 2022-05-18 14:58:35 : REQ : marathoninfinity : no more blocking processes, continue with update 2022-05-18 14:58:35 : REQ : marathoninfinity : Installing Marathon Infinity 2022-05-18 14:58:35 : INFO : marathoninfinity : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.uxoEpUyC/MarathonInfinity-[0-9.]*-Mac.dmg 2022-05-18 14:58:39 : INFO : marathoninfinity : Mounted: /Volumes/Marathon Infinity 2022-05-18 14:58:39 : INFO : marathoninfinity : Verifying: /Volumes/Marathon Infinity/Marathon Infinity.app 2022-05-18 14:58:43 : INFO : marathoninfinity : Team ID matching: E8K89CXZE7 (expected: E8K89CXZE7 ) 2022-05-18 14:58:43 : INFO : marathoninfinity : Downloaded version of Marathon Infinity is 1.5 on versionKey CFBundleShortVersionString (replacing version 1.4). 2022-05-18 14:58:43 : INFO : marathoninfinity : App has LSMinimumSystemVersion: 10.11.0 2022-05-18 14:58:43 : WARN : marathoninfinity : Removing existing /Applications/Marathon Infinity.app 2022-05-18 14:58:43 : INFO : marathoninfinity : Copy /Volumes/Marathon Infinity/Marathon Infinity.app to /Applications 2022-05-18 14:58:44 : WARN : marathoninfinity : Changing owner to st 2022-05-18 14:58:44 : INFO : marathoninfinity : Finishing... 2022-05-18 14:58:54 : INFO : marathoninfinity : App(s) found: /Applications/Marathon Infinity.app 2022-05-18 14:58:54 : INFO : marathoninfinity : found app at /Applications/Marathon Infinity.app, version 1.5, on versionKey CFBundleShortVersionString 2022-05-18 14:58:54 : REQ : marathoninfinity : Installed Marathon Infinity, version 1.5 2022-05-18 14:58:54 : INFO : marathoninfinity : notifying 2022-05-18 14:58:55 : INFO : marathoninfinity : App not closed, so no reopen. 2022-05-18 14:58:55 : REQ : marathoninfinity : All done! 2022-05-18 14:58:55 : REQ : marathoninfinity : ################## End Installomator, exit code 0 ➜ Installomator/utils/assemble.sh installomator DEBUG=0 INSTALL=force 2022-05-18 14:59:41 : WARN : installomator : setting variable from argument DEBUG=0 2022-05-18 14:59:41 : WARN : installomator : setting variable from argument INSTALL=force 2022-05-18 14:59:41 : REQ : installomator : ################## Start Installomator v. 9.2beta, date 2022-05-18 2022-05-18 14:59:41 : INFO : installomator : ################## Version: 9.2beta 2022-05-18 14:59:41 : INFO : installomator : ################## Date: 2022-05-18 2022-05-18 14:59:41 : INFO : installomator : ################## installomator 2022-05-18 14:59:42 : INFO : installomator : BLOCKING_PROCESS_ACTION=tell_user 2022-05-18 14:59:42 : INFO : installomator : NOTIFY=success 2022-05-18 14:59:42 : INFO : installomator : LOGGING=INFO 2022-05-18 14:59:42 : INFO : installomator : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-05-18 14:59:42 : INFO : installomator : Label type: pkg 2022-05-18 14:59:42 : INFO : installomator : archiveName: Installomator.pkg 2022-05-18 14:59:42 : INFO : installomator : found packageID com.scriptingosx.Installomator installed, version 9.2 2022-05-18 14:59:42 : INFO : installomator : appversion: 9.2 2022-05-18 14:59:42 : INFO : installomator : Label is not of type “updateronly”, and it’s set to use force to install or ignoring app store apps, so not using updateTool. 2022-05-18 14:59:42 : INFO : installomator : Latest version of Installomator is 9.2 2022-05-18 14:59:42 : INFO : installomator : There is no newer version available. 2022-05-18 14:59:42 : REQ : installomator : Downloading https://github.com/Installomator/Installomator/releases/download/v9.2/Installomator-9.2.pkg to Installomator.pkg 2022-05-18 14:59:43 : REQ : installomator : Installing Installomator 2022-05-18 14:59:43 : INFO : installomator : Verifying: Installomator.pkg 2022-05-18 14:59:43 : INFO : installomator : Team ID: JME5BW3F3R (expected: JME5BW3F3R ) 2022-05-18 14:59:43 : INFO : installomator : Checking package version. 2022-05-18 14:59:43 : INFO : installomator : Downloaded package com.scriptingosx.Installomator version 9.2 2022-05-18 14:59:43 : INFO : installomator : Downloaded version of Installomator is the same as installed. 2022-05-18 14:59:43 : INFO : installomator : Using force to install anyway. 2022-05-18 14:59:43 : INFO : installomator : Installing Installomator.pkg to / 2022-05-18 14:59:46 : INFO : installomator : Finishing... 2022-05-18 14:59:56 : INFO : installomator : found packageID com.scriptingosx.Installomator installed, version 9.2 2022-05-18 14:59:56 : REQ : installomator : Installed Installomator, version 9.2 2022-05-18 14:59:56 : INFO : installomator : notifying 2022-05-18 14:59:57 : INFO : installomator : App not closed, so no reopen. 2022-05-18 14:59:57 : REQ : installomator : All done! 2022-05-18 14:59:57 : REQ : installomator : ################## End Installomator, exit code 0 ``` The version comparison in marathininfinity will be updated shortly. --- fragments/functions.sh | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index 9e9e977..5aac377 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -156,11 +156,11 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name fi if [ -n "$archiveName" ]; then - downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" \ - | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") + #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") + downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*$archiveName.*") else - downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" \ - | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") + #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") + downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*\.$filetype") fi if [ -z "$downloadURL" ]; then cleanupAndExit 9 "could not retrieve download URL for $gitusername/$gitreponame" ERROR @@ -176,7 +176,8 @@ versionFromGit() { gitusername=${1?:"no git user name"} gitreponame=${2?:"no git repo name"} - appNewVersion=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | grep tag_name | cut -d '"' -f 4 | sed 's/[^0-9\.]//g') + #appNewVersion=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | grep tag_name | cut -d '"' -f 4 | sed 's/[^0-9\.]//g') + appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') if [ -z "$appNewVersion" ]; then printlog "could not retrieve version number for $gitusername/$gitreponame" WARN appNewVersion="" From b96e1dbca132fb11ed019676d3768c49ff5566e2 Mon Sep 17 00:00:00 2001 From: Liam Steckler <553265+buckbanzai@users.noreply.github.com> Date: Wed, 18 May 2022 08:50:57 -0700 Subject: [PATCH 011/209] Add ipswupdater label using JSON parsing --- fragments/labels/ipswupdater.sh | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 fragments/labels/ipswupdater.sh diff --git a/fragments/labels/ipswupdater.sh b/fragments/labels/ipswupdater.sh new file mode 100644 index 0000000..bd6c024 --- /dev/null +++ b/fragments/labels/ipswupdater.sh @@ -0,0 +1,8 @@ +ipswupdater) + name="IPSW Updater" + type="zip" + ipswupdaterVersions=$(curl -fs "https://ipsw.app/download/updates.php?current_version=0.9.16") + downloadURL=$(getJSONValue "$ipswupdaterVersions" "[0].url") + appNewVersion=$(getJSONValue "$ipswupdaterVersions" "[0].version") + expectedTeamID="YRW6NUGA63" + ;; From 442a4ae0af133a3f602d221efb23d4d90f78d6f9 Mon Sep 17 00:00:00 2001 From: Fletcher Salesky Date: Thu, 19 May 2022 22:19:13 -0700 Subject: [PATCH 012/209] Create duodevicehealth.sh --- fragments/labels/duodevicehealth.sh | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 fragments/labels/duodevicehealth.sh diff --git a/fragments/labels/duodevicehealth.sh b/fragments/labels/duodevicehealth.sh new file mode 100644 index 0000000..c863652 --- /dev/null +++ b/fragments/labels/duodevicehealth.sh @@ -0,0 +1,9 @@ +duodevicehealth) + name="Duo Device Health" + type="pkgInDmg" + downloadURL="https://dl.duosecurity.com/DuoDeviceHealth-latest.dmg" + appNewVersion=$(curl -fsLIXGET "https://dl.duosecurity.com/DuoDeviceHealth-latest.dmg" | grep -i "^content-disposition" | sed -e 's/.*filename\=\"DuoDeviceHealth\-\(.*\)\.dmg\".*/\1/') + appName="Duo Device Health.app" + expectedTeamID="FNN8Z5JMFP" + ;; + From db852958998befbc9226e94d880524f9a898d82f Mon Sep 17 00:00:00 2001 From: Greg R <60526422+imfromthebay@users.noreply.github.com> Date: Fri, 20 May 2022 12:37:33 -0700 Subject: [PATCH 013/209] New Label: KeepingYouAwake https://keepingyouawake.app/ --- fragments/labels/keepingyouawake.sh | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 fragments/labels/keepingyouawake.sh diff --git a/fragments/labels/keepingyouawake.sh b/fragments/labels/keepingyouawake.sh new file mode 100644 index 0000000..6c5aa38 --- /dev/null +++ b/fragments/labels/keepingyouawake.sh @@ -0,0 +1,8 @@ +keepingyouawake) + name="KeepingYouAwake" + type="zip" + downloadURL=$(downloadURLFromGit newmarcel KeepingYouAwake) + appNewVersion=$(versionFromGit newmarcel KeepingYouAwake) + expectedTeamID="5KESHV9W85" + blockingProcesses=( "KeepingYouAwake" ) + ;; From 63423f175ea2b8731902e0faf705fe3adae7487a Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Sun, 22 May 2022 14:56:31 +0200 Subject: [PATCH 014/209] New label A Better Finder Rename 11 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ./assemble.sh -l /Users/savvas/Desktop/Mosyle/Resources/InstallomatorLabels abetterfinderrename11 2022-05-22 14:29:11 : REQ : abetterfinderrename11 : ################## Start Installomator v. 9.2, date 2022-05-22 2022-05-22 14:29:11 : INFO : abetterfinderrename11 : ################## Version: 9.2 2022-05-22 14:29:11 : INFO : abetterfinderrename11 : ################## Date: 2022-05-22 2022-05-22 14:29:11 : INFO : abetterfinderrename11 : ################## abetterfinderrename11 2022-05-22 14:29:11 : DEBUG : abetterfinderrename11 : DEBUG mode 1 enabled. 2022-05-22 14:29:12 : INFO : abetterfinderrename11 : BLOCKING_PROCESS_ACTION=tell_user 2022-05-22 14:29:12 : INFO : abetterfinderrename11 : NOTIFY=success 2022-05-22 14:29:12 : INFO : abetterfinderrename11 : LOGGING=DEBUG 2022-05-22 14:29:12 : INFO : abetterfinderrename11 : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-05-22 14:29:12 : INFO : abetterfinderrename11 : Label type: dmg 2022-05-22 14:29:12 : INFO : abetterfinderrename11 : archiveName: A Better Finder Rename 11.dmg 2022-05-22 14:29:12 : INFO : abetterfinderrename11 : no blocking processes defined, using A Better Finder Rename 11 as default 2022-05-22 14:29:12 : DEBUG : abetterfinderrename11 : Changing directory to /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build 2022-05-22 14:29:12 : INFO : abetterfinderrename11 : App(s) found: /Applications/A Better Finder Rename 11.app 2022-05-22 14:29:13 : INFO : abetterfinderrename11 : found app at /Applications/A Better Finder Rename 11.app, version 11.48, on versionKey CFBundleShortVersionString 2022-05-22 14:29:13 : INFO : abetterfinderrename11 : appversion: 11.48 2022-05-22 14:29:13 : INFO : abetterfinderrename11 : Latest version of A Better Finder Rename 11 is 11.48 2022-05-22 14:29:13 : WARN : abetterfinderrename11 : DEBUG mode 1 enabled, not exiting, but there is no new version of app. 2022-05-22 14:29:13 : REQ : abetterfinderrename11 : Downloading https://www.publicspace.net/download/ABFRX11.dmg to A Better Finder Rename 11.dmg 2022-05-22 14:29:17 : DEBUG : abetterfinderrename11 : File list: -rw-r--r-- 1 savvas staff 13M 22 Mai 14:29 A Better Finder Rename 11.dmg 2022-05-22 14:29:17 : DEBUG : abetterfinderrename11 : File type: A Better Finder Rename 11.dmg: zlib compressed data 2022-05-22 14:29:17 : DEBUG : abetterfinderrename11 : curl output was: * Trying 45.76.0.90:443... * Connected to www.publicspace.net (45.76.0.90) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [324 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [93 bytes data] * TLSv1.2 (IN), TLS handshake, Certificate (11): { [4042 bytes data] * TLSv1.2 (IN), TLS handshake, Server key exchange (12): { [333 bytes data] * TLSv1.2 (IN), TLS handshake, Server finished (14): { [4 bytes data] * TLSv1.2 (OUT), TLS handshake, Client key exchange (16): } [70 bytes data] * TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.2 (OUT), TLS handshake, Finished (20): } [16 bytes data] * TLSv1.2 (IN), TLS change cipher, Change cipher spec (1): { [1 bytes data] * TLSv1.2 (IN), TLS handshake, Finished (20): { [16 bytes data] * SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256 * ALPN, server did not agree to a protocol * Server certificate: * subject: CN=publicspace.net * start date: Apr 26 11:06:03 2022 GMT * expire date: Jul 25 11:06:02 2022 GMT * subjectAltName: host "www.publicspace.net" matched cert's "www.publicspace.net" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. > GET /download/ABFRX11.dmg HTTP/1.1 > Host: www.publicspace.net > User-Agent: curl/7.79.1 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 302 Found < Date: Sun, 22 May 2022 12:29:13 GMT < Server: Apache/2.2.15 (CentOS) < Set-Cookie: ps_Xi=fc3532242f71db63f14eec8e38ba7ddc; path=/; expires=Fri, 21 May 2027 12:29:13 GMT < Set-Cookie: ps_Xt=ja%3D2%3Bjb%3D1%3Bgl%3D0%3Bgo%3D1%3Bgi%3D1%3Bgm%3D1%3Bgj%3D0%3Bod%3D1%3Bof%3D1%3Boc%3D1%3Bob%3D1%3Bog%3D1%3Boa%3D1%3Boe%3D1%3Blw%3D1%3Blz%3D1%3Blc%3D1%3Blb%3D1%3Bla%3D1%3Blx%3D1%3Bly%3D1%3Biz%3D1%3Biv%3D1%3Bit%3D1%3Biu%3D1%3Bix%3D1%3Biy%3D1%3Bis%3D1%3Biw%3D1%3Bfk%3D0%3Bfl%3D0%3Bfo%3D1%3Bfp%3D1%3Bfq%3D0%3Bfs%3D1%3Bnp%3DA%3Bns%3Donly%3Bny%3D1%3Bnt%3D1%3Bnv%3D1%3Bnw%3D1%3Bnx%3D1%3Bnu%3D1%3Bnz%3D1%3Bf%3D1%3Bb%3D0%3Ba%3D0%3Be%3D0%3Bc%3D0%3Bd%3D0%3B; path=/; expires=Fri, 21 May 2027 12:29:13 GMT < Set-Cookie: ps_Xu=bookmarked%3B%3Cnone%3E%3Bwin; path=/; expires=Tue, 21 Jun 2022 12:29:13 GMT < location: https://d3k6s0oeufjjjn.cloudfront.net/download0_41ea57282d185/ABFRX11.dmg < Content-Length: 0 < Connection: close < Content-Type: application/octet-stream < * Closing connection 0 * TLSv1.2 (IN), TLS alert, close notify (256): { [2 bytes data] * TLSv1.2 (OUT), TLS alert, close notify (256): } [2 bytes data] * Issue another request to this URL: 'https://d3k6s0oeufjjjn.cloudfront.net/download0_41ea57282d185/ABFRX11.dmg' * Trying 13.224.194.186:443... * Connected to d3k6s0oeufjjjn.cloudfront.net (13.224.194.186) port 443 (#1) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [334 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [122 bytes data] * (304) (IN), TLS handshake, Unknown (8): { [10 bytes data] * (304) (IN), TLS handshake, Certificate (11): { [4963 bytes data] * (304) (IN), TLS handshake, CERT verify (15): { [264 bytes data] * (304) (IN), TLS handshake, Finished (20): { [36 bytes data] * (304) (OUT), TLS handshake, Finished (20): } [36 bytes data] * SSL connection using TLSv1.3 / AEAD-AES128-GCM-SHA256 * ALPN, server did not agree to a protocol * Server certificate: * subject: CN=*.cloudfront.net * start date: Feb 1 00:00:00 2022 GMT * expire date: Jan 31 23:59:59 2023 GMT * subjectAltName: host "d3k6s0oeufjjjn.cloudfront.net" matched cert's "*.cloudfront.net" * issuer: C=US; O=Amazon; OU=Server CA 1B; CN=Amazon * SSL certificate verify ok. > GET /download0_41ea57282d185/ABFRX11.dmg HTTP/1.1 > Host: d3k6s0oeufjjjn.cloudfront.net > User-Agent: curl/7.79.1 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 301 Moved Permanently < Content-Type: text/html; charset=iso-8859-1 < Content-Length: 356 < Connection: keep-alive < Date: Sat, 21 May 2022 19:30:43 GMT < Server: Apache/2.2.15 (CentOS) < Location: https://www.publicspace.net/download0_41ea57282d185/ABFRX11.dmg < X-Cache: Hit from cloudfront < Via: 1.1 7a18a0a1d9929dae345690b88b08dd5e.cloudfront.net (CloudFront) < X-Amz-Cf-Pop: FRA2-C1 < X-Amz-Cf-Id: U2_dcxL3hiHNhc2e3kxvUwhreA_DhClBfHdIVe1LB-_Gy2QXk3o6Yw== < Age: 61110 < * Ignoring the response-body { [356 bytes data] * Connection #1 to host d3k6s0oeufjjjn.cloudfront.net left intact * Issue another request to this URL: 'https://www.publicspace.net/download0_41ea57282d185/ABFRX11.dmg' * Hostname www.publicspace.net was found in DNS cache * Trying 45.76.0.90:443... * Connected to www.publicspace.net (45.76.0.90) port 443 (#2) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * SSL re-using session ID * TLSv1.2 (OUT), TLS handshake, Client hello (1): } [263 bytes data] * TLSv1.2 (IN), TLS handshake, Server hello (2): { [81 bytes data] * TLSv1.2 (IN), TLS change cipher, Change cipher spec (1): { [1 bytes data] * TLSv1.2 (IN), TLS handshake, Finished (20): { [16 bytes data] * TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.2 (OUT), TLS handshake, Finished (20): } [16 bytes data] * SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256 * ALPN, server did not agree to a protocol * Server certificate: * subject: CN=publicspace.net * start date: Apr 26 11:06:03 2022 GMT * expire date: Jul 25 11:06:02 2022 GMT * subjectAltName: host "www.publicspace.net" matched cert's "www.publicspace.net" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. > GET /download0_41ea57282d185/ABFRX11.dmg HTTP/1.1 > Host: www.publicspace.net > User-Agent: curl/7.79.1 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 200 OK < Date: Sun, 22 May 2022 12:29:14 GMT < Server: Apache/2.2.15 (CentOS) < Last-Modified: Wed, 18 May 2022 10:33:04 GMT < ETag: "21690-d51308-5df46c8419800" < Accept-Ranges: bytes < Content-Length: 13964040 < Connection: close < Content-Type: text/plain; charset=UTF-8 < { [16384 bytes data] * Closing connection 2 * TLSv1.2 (IN), TLS alert, close notify (256): { [2 bytes data] * TLSv1.2 (OUT), TLS alert, close notify (256): } [2 bytes data] 2022-05-22 14:29:17 : DEBUG : abetterfinderrename11 : DEBUG mode 1, not checking for blocking processes 2022-05-22 14:29:17 : REQ : abetterfinderrename11 : Installing A Better Finder Rename 11 2022-05-22 14:29:17 : INFO : abetterfinderrename11 : Mounting /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/A Better Finder Rename 11.dmg 2022-05-22 14:29:19 : DEBUG : abetterfinderrename11 : Debugging enabled, dmgmount output was: Disclaimer of Warranty This software is sold "as is" and without warranties as to performance or merchantability or any other warranties whether expressed or implied. Because of the various hardware and software environments into which this program may be put, no warranty of fitness for a particular purpose is offered. Good data processing procedure dictates that any program be throughly tested with non-critical data before relying on it. The user must assume the entire risk of using the program. Any liability of the seller or author of the program will be limited exclusively to product replacement or refund of purchase price. Prüfsumme für Driver Descriptor Map (DDM : 0) berechnen … Driver Descriptor Map (DDM : 0): Die überprüfte CRC32-Prüfsumme ist $5A82F9A7 Prüfsumme für Apple (Apple_partition_map : 1) berechnen … Apple (Apple_partition_map : 1): Die überprüfte CRC32-Prüfsumme ist $E3975401 Prüfsumme für disk image (Apple_HFS : 2) berechnen … disk image (Apple_HFS : 2): Die überprüfte CRC32-Prüfsumme ist $1B97C162 Prüfsumme für (Apple_Free : 3) berechnen … (Apple_Free : 3): Die überprüfte CRC32-Prüfsumme ist $00000000 Die überprüfte CRC32-Prüfsumme ist $C5263827 /dev/disk2 Apple_partition_scheme /dev/disk2s1 Apple_partition_map /dev/disk2s2 Apple_HFS /Volumes/A Better Finder Rename 11 2022-05-22 14:29:19 : INFO : abetterfinderrename11 : Mounted: /Volumes/A Better Finder Rename 11 2022-05-22 14:29:19 : INFO : abetterfinderrename11 : Verifying: /Volumes/A Better Finder Rename 11/A Better Finder Rename 11.app 2022-05-22 14:29:19 : DEBUG : abetterfinderrename11 : App size: 43M /Volumes/A Better Finder Rename 11/A Better Finder Rename 11.app 2022-05-22 14:29:21 : DEBUG : abetterfinderrename11 : Debugging enabled, App Verification output was: /Volumes/A Better Finder Rename 11/A Better Finder Rename 11.app: accepted source=Notarized Developer ID override=security disabled origin=Developer ID Application: Frank Reiff (7Y9KW4ND8W) 2022-05-22 14:29:21 : INFO : abetterfinderrename11 : Team ID matching: 7Y9KW4ND8W (expected: 7Y9KW4ND8W ) 2022-05-22 14:29:21 : INFO : abetterfinderrename11 : Downloaded version of A Better Finder Rename 11 is 11.48 on versionKey CFBundleShortVersionString, same as installed. 2022-05-22 14:29:21 : DEBUG : abetterfinderrename11 : Unmounting /Volumes/A Better Finder Rename 11 2022-05-22 14:29:21 : DEBUG : abetterfinderrename11 : Debugging enabled, Unmounting output was: "disk2" ejected. 2022-05-22 14:29:21 : DEBUG : abetterfinderrename11 : DEBUG mode 1, not reopening anything 2022-05-22 14:29:21 : REG : abetterfinderrename11 : No new version to install 2022-05-22 14:29:21 : REQ : abetterfinderrename11 : ################## End Installomator, exit code 0 --- fragments/labels/abetterfinderrename11.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/abetterfinderrename11.sh diff --git a/fragments/labels/abetterfinderrename11.sh b/fragments/labels/abetterfinderrename11.sh new file mode 100644 index 0000000..015de0a --- /dev/null +++ b/fragments/labels/abetterfinderrename11.sh @@ -0,0 +1,7 @@ +abetterfinderrename11) + name="A Better Finder Rename 11" + type="dmg" + downloadURL="https://www.publicspace.net/download/ABFRX11.dmg" + appNewVersion=$(curl -fs "https://www.publicspace.net/app/signed_abfr11.xml" | xpath '(//rss/channel/item/enclosure/@sparkle:version)' 2>/dev/null | cut -d '"' -f 2) + expectedTeamID="7Y9KW4ND8W" + ;; From 20e6d0d1225499cafb3b77e9960bbbf7d8ddd77b Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Sun, 22 May 2022 15:18:39 +0200 Subject: [PATCH 015/209] New Label: Carbon Copy Cloner ./assemble.sh -l /Mosyle/Resources/InstallomatorLabels carboncopycloner 2022-05-22 15:17:32 : REQ : carboncopycloner : ################## Start Installomator v. 9.2, date 2022-05-22 2022-05-22 15:17:32 : INFO : carboncopycloner : ################## Version: 9.2 2022-05-22 15:17:32 : INFO : carboncopycloner : ################## Date: 2022-05-22 2022-05-22 15:17:32 : INFO : carboncopycloner : ################## carboncopycloner 2022-05-22 15:17:32 : DEBUG : carboncopycloner : DEBUG mode 1 enabled. 2022-05-22 15:17:33 : INFO : carboncopycloner : BLOCKING_PROCESS_ACTION=tell_user 2022-05-22 15:17:33 : INFO : carboncopycloner : NOTIFY=success 2022-05-22 15:17:33 : INFO : carboncopycloner : LOGGING=DEBUG 2022-05-22 15:17:33 : INFO : carboncopycloner : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-05-22 15:17:33 : INFO : carboncopycloner : Label type: zip 2022-05-22 15:17:33 : INFO : carboncopycloner : archiveName: Carbon Copy Cloner.zip 2022-05-22 15:17:33 : INFO : carboncopycloner : no blocking processes defined, using Carbon Copy Cloner as default 2022-05-22 15:17:33 : DEBUG : carboncopycloner : Changing directory to /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build 2022-05-22 15:17:33 : INFO : carboncopycloner : App(s) found: /Applications/Carbon Copy Cloner.app 2022-05-22 15:17:33 : INFO : carboncopycloner : found app at /Applications/Carbon Copy Cloner.app, version 6.1.1, on versionKey CFBundleShortVersionString 2022-05-22 15:17:33 : INFO : carboncopycloner : appversion: 6.1.1 2022-05-22 15:17:34 : INFO : carboncopycloner : Latest version of Carbon Copy Cloner is 6.1.1 2022-05-22 15:17:34 : WARN : carboncopycloner : DEBUG mode 1 enabled, not exiting, but there is no new version of app. 2022-05-22 15:17:34 : REQ : carboncopycloner : Downloading https://bombich.scdn1.secure.raxcdn.com/software/files/ccc-6.1.1.7323.zip to Carbon Copy Cloner.zip 2022-05-22 15:17:36 : DEBUG : carboncopycloner : File list: -rw-r--r-- 1 savvas staff 19M 22 Mai 15:17 Carbon Copy Cloner.zip 2022-05-22 15:17:36 : DEBUG : carboncopycloner : File type: Carbon Copy Cloner.zip: Zip archive data, at least v1.0 to extract, compression method=store 2022-05-22 15:17:36 : DEBUG : carboncopycloner : curl output was: * Trying 23.203.70.242:443... * Connected to bombich.scdn1.secure.raxcdn.com (23.203.70.242) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [336 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [102 bytes data] * TLSv1.2 (IN), TLS handshake, Certificate (11): { [2916 bytes data] * TLSv1.2 (IN), TLS handshake, Server key exchange (12): { [333 bytes data] * TLSv1.2 (IN), TLS handshake, Server finished (14): { [4 bytes data] * TLSv1.2 (OUT), TLS handshake, Client key exchange (16): } [70 bytes data] * TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.2 (OUT), TLS handshake, Finished (20): } [16 bytes data] * TLSv1.2 (IN), TLS change cipher, Change cipher spec (1): { [1 bytes data] * TLSv1.2 (IN), TLS handshake, Finished (20): { [16 bytes data] * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: C=US; ST=Texas; L=Windcrest; O=Rackspace US Inc.; CN=*.scdn1.secure.raxcdn.com * start date: Dec 11 00:00:00 2021 GMT * expire date: Dec 13 23:59:59 2022 GMT * subjectAltName: host "bombich.scdn1.secure.raxcdn.com" matched cert's "*.scdn1.secure.raxcdn.com" * issuer: C=US; O=DigiCert Inc; CN=DigiCert SHA2 Secure Server CA * SSL certificate verify ok. * Using HTTP2, server supports multiplexing * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x7fd33e00c600) > GET /software/files/ccc-6.1.1.7323.zip HTTP/2 > Host: bombich.scdn1.secure.raxcdn.com > user-agent: curl/7.79.1 > accept: */* > < HTTP/2 200 < etag: < server: LiteSpeed < content-type: application/zip < last-modified: Sat, 14 May 2022 14:52:09 GMT < accept-ranges: bytes < content-length: 20106063 < cache-control: public, max-age=19010 < expires: Sun, 22 May 2022 18:34:24 GMT < date: Sun, 22 May 2022 13:17:34 GMT < { [2676 bytes data] * Connection #0 to host bombich.scdn1.secure.raxcdn.com left intact 2022-05-22 15:17:36 : DEBUG : carboncopycloner : DEBUG mode 1, not checking for blocking processes 2022-05-22 15:17:36 : REQ : carboncopycloner : Installing Carbon Copy Cloner 2022-05-22 15:17:36 : INFO : carboncopycloner : Unzipping Carbon Copy Cloner.zip 2022-05-22 15:17:37 : INFO : carboncopycloner : Verifying: /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/Carbon Copy Cloner.app 2022-05-22 15:17:37 : DEBUG : carboncopycloner : App size: 54M /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/Carbon Copy Cloner.app 2022-05-22 15:17:38 : DEBUG : carboncopycloner : Debugging enabled, App Verification output was: /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/Carbon Copy Cloner.app: accepted source=Notarized Developer ID override=security disabled origin=Developer ID Application: Bombich Software, Inc. (L4F2DED5Q7) 2022-05-22 15:17:38 : INFO : carboncopycloner : Team ID matching: L4F2DED5Q7 (expected: L4F2DED5Q7 ) 2022-05-22 15:17:38 : INFO : carboncopycloner : Downloaded version of Carbon Copy Cloner is 6.1.1 on versionKey CFBundleShortVersionString, same as installed. 2022-05-22 15:17:38 : DEBUG : carboncopycloner : DEBUG mode 1, not reopening anything 2022-05-22 15:17:38 : REG : carboncopycloner : No new version to install 2022-05-22 15:17:38 : REQ : carboncopycloner : ################## End Installomator, exit code 0 --- fragments/labels/carboncopycloner.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/carboncopycloner.sh diff --git a/fragments/labels/carboncopycloner.sh b/fragments/labels/carboncopycloner.sh new file mode 100644 index 0000000..a7fb869 --- /dev/null +++ b/fragments/labels/carboncopycloner.sh @@ -0,0 +1,7 @@ +carboncopycloner) + name="Carbon Copy Cloner" + type="zip" + downloadURL=$(curl -fsIL "https://bombich.com/software/download_ccc.php?v=latest" | grep -i ^location | sed -E 's/.*(https.*\.zip).*/\1/g') + appNewVersion=$(sed -E 's/.*-([0-9.]*)\.zip/\1/g' <<< $downloadURL | sed 's/\.[^.]*$//') + expectedTeamID="L4F2DED5Q7" + ;; From 4040067fc7c67cc76f2fb16ae58b1050c49b8572 Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Sun, 22 May 2022 15:25:26 +0200 Subject: [PATCH 016/209] New Label: FLEXOPTIX App MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ./assemble.sh -l /Mosyle/Resources/InstallomatorLabels flexoptixapp 2022-05-22 15:24:14 : REQ : flexoptixapp : ################## Start Installomator v. 9.2, date 2022-05-22 2022-05-22 15:24:14 : INFO : flexoptixapp : ################## Version: 9.2 2022-05-22 15:24:14 : INFO : flexoptixapp : ################## Date: 2022-05-22 2022-05-22 15:24:14 : INFO : flexoptixapp : ################## flexoptixapp 2022-05-22 15:24:14 : DEBUG : flexoptixapp : DEBUG mode 1 enabled. 2022-05-22 15:24:14 : INFO : flexoptixapp : BLOCKING_PROCESS_ACTION=tell_user 2022-05-22 15:24:14 : INFO : flexoptixapp : NOTIFY=success 2022-05-22 15:24:14 : INFO : flexoptixapp : LOGGING=DEBUG 2022-05-22 15:24:14 : INFO : flexoptixapp : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-05-22 15:24:14 : INFO : flexoptixapp : Label type: dmg 2022-05-22 15:24:14 : INFO : flexoptixapp : archiveName: FLEXOPTIX App.dmg 2022-05-22 15:24:14 : INFO : flexoptixapp : no blocking processes defined, using FLEXOPTIX App as default 2022-05-22 15:24:14 : DEBUG : flexoptixapp : Changing directory to /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build 2022-05-22 15:24:14 : INFO : flexoptixapp : App(s) found: /Applications/FLEXOPTIX App.app 2022-05-22 15:24:14 : INFO : flexoptixapp : found app at /Applications/FLEXOPTIX App.app, version 5.11.0, on versionKey CFBundleShortVersionString 2022-05-22 15:24:14 : INFO : flexoptixapp : appversion: 5.11.0 2022-05-22 15:24:14 : INFO : flexoptixapp : Latest version of FLEXOPTIX App is 5.11.0 2022-05-22 15:24:14 : WARN : flexoptixapp : DEBUG mode 1 enabled, not exiting, but there is no new version of app. 2022-05-22 15:24:14 : REQ : flexoptixapp : Downloading https://flexbox.reconfigure.me/download/electron/mac/x64/current to FLEXOPTIX App.dmg 2022-05-22 15:24:26 : DEBUG : flexoptixapp : File list: -rw-r--r-- 1 savvas staff 83M 22 Mai 15:24 FLEXOPTIX App.dmg 2022-05-22 15:24:26 : DEBUG : flexoptixapp : File type: FLEXOPTIX App.dmg: zlib compressed data 2022-05-22 15:24:26 : DEBUG : flexoptixapp : curl output was: * Trying 162.55.184.232:443... * Connected to flexbox.reconfigure.me (162.55.184.232) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [327 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [108 bytes data] * TLSv1.2 (IN), TLS handshake, Certificate (11): { [4202 bytes data] * TLSv1.2 (IN), TLS handshake, Server key exchange (12): { [300 bytes data] * TLSv1.2 (IN), TLS handshake, Server finished (14): { [4 bytes data] * TLSv1.2 (OUT), TLS handshake, Client key exchange (16): } [37 bytes data] * TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.2 (OUT), TLS handshake, Finished (20): } [16 bytes data] * TLSv1.2 (IN), TLS change cipher, Change cipher spec (1): { [1 bytes data] * TLSv1.2 (IN), TLS handshake, Finished (20): { [16 bytes data] * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 * ALPN, server accepted to use http/1.1 * Server certificate: * subject: CN=reconfigure.me * start date: Apr 1 21:52:26 2022 GMT * expire date: Jun 30 21:52:25 2022 GMT * subjectAltName: host "flexbox.reconfigure.me" matched cert's "flexbox.reconfigure.me" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. > GET /download/electron/mac/x64/current HTTP/1.1 > Host: flexbox.reconfigure.me > User-Agent: curl/7.79.1 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 302 Moved Temporarily < Server: nginx < Date: Sun, 22 May 2022 13:24:14 GMT < Content-Type: text/html < Content-Length: 138 < Connection: keep-alive < Location: /download/electron/mac/x64//FLEXOPTIX App-5.11.0.dmg < * Ignoring the response-body { [140 bytes data] * Connection #0 to host flexbox.reconfigure.me left intact * Issue another request to this URL: 'https://flexbox.reconfigure.me/download/electron/mac/x64//FLEXOPTIX%20App-5.11.0.dmg' * Found bundle for host flexbox.reconfigure.me: 0x6000036886f0 [serially] * Can not multiplex, even if we wanted to! * Re-using existing connection! (#0) with host flexbox.reconfigure.me * Connected to flexbox.reconfigure.me (162.55.184.232) port 443 (#0) > GET /download/electron/mac/x64//FLEXOPTIX%20App-5.11.0.dmg HTTP/1.1 > Host: flexbox.reconfigure.me > User-Agent: curl/7.79.1 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 200 OK < Server: nginx < Date: Sun, 22 May 2022 13:24:14 GMT < Content-Type: application/octet-stream < Content-Length: 86705875 < Last-Modified: Fri, 25 Jun 2021 15:08:54 GMT < Connection: keep-alive < ETag: "60d5f186-52b06d3" < Accept-Ranges: bytes < { [16129 bytes data] * Connection #0 to host flexbox.reconfigure.me left intact 2022-05-22 15:24:26 : DEBUG : flexoptixapp : DEBUG mode 1, not checking for blocking processes 2022-05-22 15:24:26 : REQ : flexoptixapp : Installing FLEXOPTIX App 2022-05-22 15:24:26 : INFO : flexoptixapp : Mounting /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/FLEXOPTIX App.dmg 2022-05-22 15:24:29 : DEBUG : flexoptixapp : Debugging enabled, dmgmount output was: Prüfsumme für Protective Master Boot Record (MBR : 0) berechnen … Protective Master Boot Record (MBR :: Die überprüfte CRC32-Prüfsumme ist $F896513C Prüfsumme für GPT Header (Primary GPT Header : 1) berechnen … GPT Header (Primary GPT Header : 1): Die überprüfte CRC32-Prüfsumme ist $2A26FF3A Prüfsumme für GPT Partition Data (Primary GPT Table : 2) berechnen … GPT Partition Data (Primary GPT Tabl: Die überprüfte CRC32-Prüfsumme ist $C7EAE15F Prüfsumme für (Apple_Free : 3) berechnen … (Apple_Free : 3): Die überprüfte CRC32-Prüfsumme ist $00000000 Prüfsumme für disk image (Apple_HFS : 4) berechnen … disk image (Apple_HFS : 4): Die überprüfte CRC32-Prüfsumme ist $20C222C3 Prüfsumme für (Apple_Free : 5) berechnen … (Apple_Free : 5): Die überprüfte CRC32-Prüfsumme ist $00000000 Prüfsumme für GPT Partition Data (Backup GPT Table : 6) berechnen … GPT Partition Data (Backup GPT Table: Die überprüfte CRC32-Prüfsumme ist $C7EAE15F Prüfsumme für GPT Header (Backup GPT Header : 7) berechnen … GPT Header (Backup GPT Header : 7): Die überprüfte CRC32-Prüfsumme ist $A017024D Die überprüfte CRC32-Prüfsumme ist $00C1C1BD /dev/disk2 GUID_partition_scheme /dev/disk2s1 Apple_HFS /Volumes/FLEXOPTIX App 5.11.0 2022-05-22 15:24:29 : INFO : flexoptixapp : Mounted: /Volumes/FLEXOPTIX App 5.11.0 2022-05-22 15:24:29 : INFO : flexoptixapp : Verifying: /Volumes/FLEXOPTIX App 5.11.0/FLEXOPTIX App.app 2022-05-22 15:24:29 : DEBUG : flexoptixapp : App size: 190M /Volumes/FLEXOPTIX App 5.11.0/FLEXOPTIX App.app 2022-05-22 15:24:32 : DEBUG : flexoptixapp : Debugging enabled, App Verification output was: /Volumes/FLEXOPTIX App 5.11.0/FLEXOPTIX App.app: accepted source=Notarized Developer ID override=security disabled origin=Developer ID Application: Flexoptix GmbH (C5JETSFPHL) 2022-05-22 15:24:32 : INFO : flexoptixapp : Team ID matching: C5JETSFPHL (expected: C5JETSFPHL ) 2022-05-22 15:24:32 : INFO : flexoptixapp : Downloaded version of FLEXOPTIX App is 5.11.0 on versionKey CFBundleShortVersionString, same as installed. 2022-05-22 15:24:32 : DEBUG : flexoptixapp : Unmounting /Volumes/FLEXOPTIX App 5.11.0 2022-05-22 15:24:32 : DEBUG : flexoptixapp : Debugging enabled, Unmounting output was: "disk2" ejected. 2022-05-22 15:24:32 : DEBUG : flexoptixapp : DEBUG mode 1, not reopening anything 2022-05-22 15:24:32 : REG : flexoptixapp : No new version to install 2022-05-22 15:24:32 : REQ : flexoptixapp : ################## End Installomator, exit code 0 --- fragments/labels/flexoptixapp.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/flexoptixapp.sh diff --git a/fragments/labels/flexoptixapp.sh b/fragments/labels/flexoptixapp.sh new file mode 100644 index 0000000..449c22b --- /dev/null +++ b/fragments/labels/flexoptixapp.sh @@ -0,0 +1,7 @@ +flexoptixapp) + name="FLEXOPTIX App" + type="dmg" + downloadURL="https://flexbox.reconfigure.me/download/electron/mac/x64/current" + appNewVersion=$(curl -fsIL "${downloadURL}" | grep -i ^location | sed -E 's/.*-([0-9.]*)\.dmg/\1/g') + expectedTeamID="C5JETSFPHL" + ;; From 0d30b6fb6c7339cb8f008f5119da0f1927540cd6 Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Sun, 22 May 2022 15:41:58 +0200 Subject: [PATCH 017/209] New Label: Merlin Project ./assemble.sh -l /Mosyle/Resources/InstallomatorLabels merlinproject 2022-05-22 15:39:04 : REQ : merlinproject : ################## Start Installomator v. 9.2, date 2022-05-22 2022-05-22 15:39:04 : INFO : merlinproject : ################## Version: 9.2 2022-05-22 15:39:04 : INFO : merlinproject : ################## Date: 2022-05-22 2022-05-22 15:39:04 : INFO : merlinproject : ################## merlinproject 2022-05-22 15:39:04 : DEBUG : merlinproject : DEBUG mode 1 enabled. 2022-05-22 15:39:05 : INFO : merlinproject : BLOCKING_PROCESS_ACTION=tell_user 2022-05-22 15:39:05 : INFO : merlinproject : NOTIFY=success 2022-05-22 15:39:05 : INFO : merlinproject : LOGGING=DEBUG 2022-05-22 15:39:05 : INFO : merlinproject : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-05-22 15:39:05 : INFO : merlinproject : Label type: zip 2022-05-22 15:39:05 : INFO : merlinproject : archiveName: Merlin Project.zip 2022-05-22 15:39:05 : INFO : merlinproject : no blocking processes defined, using Merlin Project as default 2022-05-22 15:39:05 : DEBUG : merlinproject : Changing directory to /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build 2022-05-22 15:39:05 : INFO : merlinproject : App(s) found: /Applications/Merlin Project.app 2022-05-22 15:39:05 : INFO : merlinproject : found app at /Applications/Merlin Project.app, version 8.1.3, on versionKey CFBundleShortVersionString 2022-05-22 15:39:05 : INFO : merlinproject : appversion: 8.1.3 2022-05-22 15:39:05 : INFO : merlinproject : Latest version of Merlin Project is 8.1.3 2022-05-22 15:39:05 : WARN : merlinproject : DEBUG mode 1 enabled, not exiting, but there is no new version of app. 2022-05-22 15:39:05 : REQ : merlinproject : Downloading https://www.projectwizards.net/downloads/MerlinProject.zip to Merlin Project.zip 2022-05-22 15:39:11 : DEBUG : merlinproject : File list: -rw-r--r-- 1 savvas staff 39M 22 Mai 15:39 Merlin Project.zip 2022-05-22 15:39:11 : DEBUG : merlinproject : File type: Merlin Project.zip: Zip archive data, at least v1.0 to extract, compression method=store 2022-05-22 15:39:11 : DEBUG : merlinproject : curl output was: * Trying 83.169.29.130:443... * Connected to www.projectwizards.net (83.169.29.130) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [327 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [122 bytes data] * (304) (IN), TLS handshake, Unknown (8): { [25 bytes data] * (304) (IN), TLS handshake, Certificate (11): { [3047 bytes data] * (304) (IN), TLS handshake, CERT verify (15): { [264 bytes data] * (304) (IN), TLS handshake, Finished (20): { [52 bytes data] * (304) (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / AEAD-AES256-GCM-SHA384 * ALPN, server accepted to use http/1.1 * Server certificate: * subject: CN=*.projectwizards.net * start date: Jan 20 14:50:05 2022 GMT * expire date: Feb 19 14:50:05 2023 GMT * subjectAltName: host "www.projectwizards.net" matched cert's "*.projectwizards.net" * issuer: C=US; ST=Arizona; L=Scottsdale; O=Starfield Technologies, Inc.; OU=http://certs.starfieldtech.com/repository/; CN=Starfield Secure Certificate Authority - G2 * SSL certificate verify ok. > GET /downloads/MerlinProject.zip HTTP/1.1 > Host: www.projectwizards.net > User-Agent: curl/7.79.1 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 200 OK < Date: Sun, 22 May 2022 13:39:05 GMT < Content-Type: application/zip < Content-Length: 40627041 < Connection: keep-alive < Server: Apache < Last-Modified: Wed, 02 Mar 2022 13:12:50 GMT < ETag: "26beb61-5d93c09d87880" < Accept-Ranges: bytes < { [16132 bytes data] * Connection #0 to host www.projectwizards.net left intact 2022-05-22 15:39:11 : DEBUG : merlinproject : DEBUG mode 1, not checking for blocking processes 2022-05-22 15:39:11 : REQ : merlinproject : Installing Merlin Project 2022-05-22 15:39:11 : INFO : merlinproject : Unzipping Merlin Project.zip 2022-05-22 15:39:13 : INFO : merlinproject : Verifying: /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/Merlin Project.app 2022-05-22 15:39:13 : DEBUG : merlinproject : App size: 130M /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/Merlin Project.app 2022-05-22 15:39:14 : DEBUG : merlinproject : Debugging enabled, App Verification output was: /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/Merlin Project.app: accepted source=Notarized Developer ID override=security disabled origin=Developer ID Application: ProjectWizards GmbH (9R6P9VZV27) 2022-05-22 15:39:14 : INFO : merlinproject : Team ID matching: 9R6P9VZV27 (expected: 9R6P9VZV27 ) 2022-05-22 15:39:14 : INFO : merlinproject : Downloaded version of Merlin Project is 8.1.3 on versionKey CFBundleShortVersionString, same as installed. 2022-05-22 15:39:14 : DEBUG : merlinproject : DEBUG mode 1, not reopening anything 2022-05-22 15:39:14 : REG : merlinproject : No new version to install 2022-05-22 15:39:14 : REQ : merlinproject : ################## End Installomator, exit code 0 --- fragments/labels/merlinproject.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/merlinproject.sh diff --git a/fragments/labels/merlinproject.sh b/fragments/labels/merlinproject.sh new file mode 100644 index 0000000..e5e4949 --- /dev/null +++ b/fragments/labels/merlinproject.sh @@ -0,0 +1,7 @@ +merlinproject) + name="Merlin Project" + type="zip" + downloadURL="https://www.projectwizards.net/downloads/MerlinProject.zip" + appNewVersion="$(curl -fs "https://www.projectwizards.net/de/support/release-notes" | grep Version | head -n 6 | tail -n 1 | sed 's/[^0-9.]*//g')" + expectedTeamID="9R6P9VZV27" + ;; From 13b0e99bb8cba16cb120fdb91979bb8046be263f Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Sun, 22 May 2022 15:47:49 +0200 Subject: [PATCH 018/209] New Label: NetSpot MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ./assemble.sh -l /Mosyle/Resources/InstallomatorLabels netspot 2022-05-22 15:46:11 : REQ : netspot : ################## Start Installomator v. 9.2, date 2022-05-22 2022-05-22 15:46:11 : INFO : netspot : ################## Version: 9.2 2022-05-22 15:46:11 : INFO : netspot : ################## Date: 2022-05-22 2022-05-22 15:46:11 : INFO : netspot : ################## netspot 2022-05-22 15:46:11 : DEBUG : netspot : DEBUG mode 1 enabled. 2022-05-22 15:46:12 : INFO : netspot : BLOCKING_PROCESS_ACTION=tell_user 2022-05-22 15:46:12 : INFO : netspot : NOTIFY=success 2022-05-22 15:46:12 : INFO : netspot : LOGGING=DEBUG 2022-05-22 15:46:12 : INFO : netspot : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-05-22 15:46:12 : INFO : netspot : Label type: dmg 2022-05-22 15:46:12 : INFO : netspot : archiveName: NetSpot.dmg 2022-05-22 15:46:12 : INFO : netspot : no blocking processes defined, using NetSpot as default 2022-05-22 15:46:12 : DEBUG : netspot : Changing directory to /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build 2022-05-22 15:46:12 : INFO : netspot : App(s) found: /Applications/NetSpot.app 2022-05-22 15:46:12 : INFO : netspot : found app at /Applications/NetSpot.app, version 2.14.1037, on versionKey CFBundleShortVersionString 2022-05-22 15:46:12 : INFO : netspot : appversion: 2.14.1037 2022-05-22 15:46:12 : INFO : netspot : Latest version of NetSpot is 2.14.1037 2022-05-22 15:46:12 : WARN : netspot : DEBUG mode 1 enabled, not exiting, but there is no new version of app. 2022-05-22 15:46:12 : REQ : netspot : Downloading https://cdn.netspotapp.com/download/NetSpot.dmg to NetSpot.dmg 2022-05-22 15:46:14 : DEBUG : netspot : File list: -rw-r--r-- 1 savvas staff 14M 22 Mai 15:46 NetSpot.dmg 2022-05-22 15:46:14 : DEBUG : netspot : File type: NetSpot.dmg: zlib compressed data 2022-05-22 15:46:14 : DEBUG : netspot : curl output was: * Trying 195.181.174.6:443... * Connected to cdn.netspotapp.com (195.181.174.6) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [323 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [122 bytes data] * (304) (IN), TLS handshake, Unknown (8): { [19 bytes data] * (304) (IN), TLS handshake, Certificate (11): { [4519 bytes data] * (304) (IN), TLS handshake, CERT verify (15): { [264 bytes data] * (304) (IN), TLS handshake, Finished (20): { [52 bytes data] * (304) (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / AEAD-AES256-GCM-SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=cdn.netspotapp.com * start date: Aug 16 00:00:00 2021 GMT * expire date: Aug 16 23:59:59 2022 GMT * subjectAltName: host "cdn.netspotapp.com" matched cert's "cdn.netspotapp.com" * issuer: C=LV; L=Riga; O=GoGetSSL; CN=GoGetSSL RSA DV CA * SSL certificate verify ok. * Using HTTP2, server supports multiplexing * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x7fd99f00d400) > GET /download/NetSpot.dmg HTTP/2 > Host: cdn.netspotapp.com > user-agent: curl/7.79.1 > accept: */* > * Connection state changed (MAX_CONCURRENT_STREAMS == 128)! < HTTP/2 200 < date: Sun, 22 May 2022 13:46:12 GMT < content-type: application/octet-stream < content-length: 14205239 < last-modified: Mon, 01 Nov 2021 11:52:37 GMT < etag: "617fd505-d8c137" < access-control-allow-origin: * < x-accel-expires: @1653227772 < server: CDN77-Turbo < x-77-nzt: AcO1rgUdD4PeTyMAAA < x-77-nzt-ray: 4MvfbNRBJzs < x-cache: REVALIDATED < x-age: 9039 < x-77-pop: frankfurtDE < x-77-cache: HIT < accept-ranges: bytes < { [16065 bytes data] * Connection #0 to host cdn.netspotapp.com left intact 2022-05-22 15:46:14 : DEBUG : netspot : DEBUG mode 1, not checking for blocking processes 2022-05-22 15:46:14 : REQ : netspot : Installing NetSpot 2022-05-22 15:46:14 : INFO : netspot : Mounting /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/NetSpot.dmg 2022-05-22 15:46:17 : DEBUG : netspot : Debugging enabled, dmgmount output was: Prüfsumme für Protective Master Boot Record (MBR : 0) berechnen … Protective Master Boot Record (MBR :: Die überprüfte CRC32-Prüfsumme ist $F3D13A57 Prüfsumme für GPT Header (Primary GPT Header : 1) berechnen … GPT Header (Primary GPT Header : 1): Die überprüfte CRC32-Prüfsumme ist $94095ED1 Prüfsumme für GPT Partition Data (Primary GPT Table : 2) berechnen … GPT Partition Data (Primary GPT Tabl: Die überprüfte CRC32-Prüfsumme ist $1ECC5766 Prüfsumme für (Apple_Free : 3) berechnen … (Apple_Free : 3): Die überprüfte CRC32-Prüfsumme ist $00000000 Prüfsumme für disk image (Apple_HFS : 4) berechnen … disk image (Apple_HFS : 4): Die überprüfte CRC32-Prüfsumme ist $A09406C9 Prüfsumme für (Apple_Free : 5) berechnen … (Apple_Free : 5): Die überprüfte CRC32-Prüfsumme ist $00000000 Prüfsumme für GPT Partition Data (Backup GPT Table : 6) berechnen … GPT Partition Data (Backup GPT Table: Die überprüfte CRC32-Prüfsumme ist $1ECC5766 Prüfsumme für GPT Header (Backup GPT Header : 7) berechnen … GPT Header (Backup GPT Header : 7): Die überprüfte CRC32-Prüfsumme ist $9DC9CAF0 Die überprüfte CRC32-Prüfsumme ist $DF172160 /dev/disk2 GUID_partition_scheme /dev/disk2s1 Apple_HFS /Volumes/NetSpot 2022-05-22 15:46:17 : INFO : netspot : Mounted: /Volumes/NetSpot 2022-05-22 15:46:17 : INFO : netspot : Verifying: /Volumes/NetSpot/NetSpot.app 2022-05-22 15:46:17 : DEBUG : netspot : App size: 27M /Volumes/NetSpot/NetSpot.app 2022-05-22 15:46:18 : DEBUG : netspot : Debugging enabled, App Verification output was: /Volumes/NetSpot/NetSpot.app: accepted source=Notarized Developer ID override=security disabled origin=Developer ID Application: Etwok Inc (5QLDY8TU83) 2022-05-22 15:46:18 : INFO : netspot : Team ID matching: 5QLDY8TU83 (expected: 5QLDY8TU83 ) 2022-05-22 15:46:18 : INFO : netspot : Downloaded version of NetSpot is 2.14.1037 on versionKey CFBundleShortVersionString, same as installed. 2022-05-22 15:46:18 : DEBUG : netspot : Unmounting /Volumes/NetSpot 2022-05-22 15:46:18 : DEBUG : netspot : Debugging enabled, Unmounting output was: "disk2" ejected. 2022-05-22 15:46:18 : DEBUG : netspot : DEBUG mode 1, not reopening anything 2022-05-22 15:46:18 : REG : netspot : No new version to install 2022-05-22 15:46:18 : REQ : netspot : ################## End Installomator, exit code 0 --- fragments/labels/netspot.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/netspot.sh diff --git a/fragments/labels/netspot.sh b/fragments/labels/netspot.sh new file mode 100644 index 0000000..a68c14f --- /dev/null +++ b/fragments/labels/netspot.sh @@ -0,0 +1,7 @@ +netspot) + name="NetSpot" + type="dmg" + downloadURL="https://cdn.netspotapp.com/download/NetSpot.dmg" + appNewVersion=$(curl -fs "https://www.netspotapp.com/updates/netspot2-appcast.xml" | xpath '(//rss/channel/item/enclosure/@sparkle:version)' 2>/dev/null | cut -d '"' -f 2) + expectedTeamID="5QLDY8TU83" + ;; From 650a07402f7677379479b990a683a32978910385 Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Sun, 22 May 2022 15:52:09 +0200 Subject: [PATCH 019/209] New Label: SynologyAssistant MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ./assemble.sh -l /Mosyle/Resources/InstallomatorLabels synologyassistant 2022-05-22 15:50:07 : REQ : synologyassistant : ################## Start Installomator v. 9.2, date 2022-05-22 2022-05-22 15:50:07 : INFO : synologyassistant : ################## Version: 9.2 2022-05-22 15:50:07 : INFO : synologyassistant : ################## Date: 2022-05-22 2022-05-22 15:50:07 : INFO : synologyassistant : ################## synologyassistant 2022-05-22 15:50:07 : DEBUG : synologyassistant : DEBUG mode 1 enabled. 2022-05-22 15:50:07 : INFO : synologyassistant : BLOCKING_PROCESS_ACTION=tell_user 2022-05-22 15:50:07 : INFO : synologyassistant : NOTIFY=success 2022-05-22 15:50:07 : INFO : synologyassistant : LOGGING=DEBUG 2022-05-22 15:50:08 : INFO : synologyassistant : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-05-22 15:50:08 : INFO : synologyassistant : Label type: dmg 2022-05-22 15:50:08 : INFO : synologyassistant : archiveName: SynologyAssistant.dmg 2022-05-22 15:50:08 : INFO : synologyassistant : no blocking processes defined, using SynologyAssistant as default 2022-05-22 15:50:08 : DEBUG : synologyassistant : Changing directory to /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build 2022-05-22 15:50:08 : INFO : synologyassistant : No version found using packageID com.synology.DSAssistant 2022-05-22 15:50:08 : INFO : synologyassistant : App(s) found: /Applications/SynologyAssistant.app 2022-05-22 15:50:08.721 defaults[13210:199987] The domain/default pair of (/Applications/SynologyAssistant.app/Contents/Info.plist, CFBundleShortVersionString) does not exist 2022-05-22 15:50:08 : INFO : synologyassistant : found app at /Applications/SynologyAssistant.app, version , on versionKey CFBundleShortVersionString 2022-05-22 15:50:08 : INFO : synologyassistant : appversion: 2022-05-22 15:50:08 : INFO : synologyassistant : Latest version of SynologyAssistant is 7.0.3-50049 2022-05-22 15:50:08 : REQ : synologyassistant : Downloading https://global.download.synology.com/download/Utility/Assistant/7.0.3-50049/Mac/synology-assistant-7.0.3-50049.dmg to SynologyAssistant.dmg 2022-05-22 15:50:11 : DEBUG : synologyassistant : File list: -rw-r--r-- 1 savvas staff 18M 22 Mai 15:50 SynologyAssistant.dmg 2022-05-22 15:50:11 : DEBUG : synologyassistant : File type: SynologyAssistant.dmg: zlib compressed data 2022-05-22 15:50:11 : DEBUG : synologyassistant : curl output was: * Trying 13.225.80.21:443... * Connected to global.download.synology.com (13.225.80.21) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [333 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [122 bytes data] * (304) (IN), TLS handshake, Unknown (8): { [19 bytes data] * (304) (IN), TLS handshake, Certificate (11): { [5175 bytes data] * (304) (IN), TLS handshake, CERT verify (15): { [264 bytes data] * (304) (IN), TLS handshake, Finished (20): { [36 bytes data] * (304) (OUT), TLS handshake, Finished (20): } [36 bytes data] * SSL connection using TLSv1.3 / AEAD-AES128-GCM-SHA256 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=global.download.synology.com * start date: Apr 29 07:21:41 2022 GMT * expire date: May 31 07:21:41 2023 GMT * subjectAltName: host "global.download.synology.com" matched cert's "global.download.synology.com" * issuer: C=US; ST=Arizona; L=Scottsdale; O=GoDaddy.com, Inc.; OU=http://certs.godaddy.com/repository/; CN=Go Daddy Secure Certificate Authority - G2 * SSL certificate verify ok. * Using HTTP2, server supports multiplexing * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x7f7c9b00bc00) > GET /download/Utility/Assistant/7.0.3-50049/Mac/synology-assistant-7.0.3-50049.dmg HTTP/2 > Host: global.download.synology.com > user-agent: curl/7.79.1 > accept: */* > * Connection state changed (MAX_CONCURRENT_STREAMS == 128)! < HTTP/2 200 < content-type: application/octet-stream < content-length: 19155257 < date: Thu, 19 May 2022 09:02:41 GMT < last-modified: Tue, 26 Apr 2022 18:33:58 GMT < etag: "5f132f58c5ab0b776ef49dbb654c1537-4" < accept-ranges: bytes < server: AmazonS3 < x-cache: Hit from cloudfront < via: 1.1 6c9a2d99a25484f38efa27d58a726b2c.cloudfront.net (CloudFront) < x-amz-cf-pop: FRA2-C2 < x-amz-cf-id: H4CRHnyudj_GtrQCJxMOq7TDWr3nptzEUr3qFy9ezPu3j0UsuyZ_fw== < age: 276448 < { [16042 bytes data] * Connection #0 to host global.download.synology.com left intact 2022-05-22 15:50:11 : DEBUG : synologyassistant : DEBUG mode 1, not checking for blocking processes 2022-05-22 15:50:11 : REQ : synologyassistant : Installing SynologyAssistant 2022-05-22 15:50:11 : INFO : synologyassistant : Mounting /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/SynologyAssistant.dmg 2022-05-22 15:50:14 : DEBUG : synologyassistant : Debugging enabled, dmgmount output was: Prüfsumme für Protective Master Boot Record (MBR : 0) berechnen … Protective Master Boot Record (MBR :: Die überprüfte CRC32-Prüfsumme ist $95B941F8 Prüfsumme für GPT Header (Primary GPT Header : 1) berechnen … GPT Header (Primary GPT Header : 1): Die überprüfte CRC32-Prüfsumme ist $D85F8F1F Prüfsumme für GPT Partition Data (Primary GPT Table : 2) berechnen … GPT Partition Data (Primary GPT Tabl: Die überprüfte CRC32-Prüfsumme ist $0F713C62 Prüfsumme für (Apple_Free : 3) berechnen … (Apple_Free : 3): Die überprüfte CRC32-Prüfsumme ist $00000000 Prüfsumme für disk image (Apple_HFS : 4) berechnen … disk image (Apple_HFS : 4): Die überprüfte CRC32-Prüfsumme ist $0772429B Prüfsumme für (Apple_Free : 5) berechnen … (Apple_Free : 5): Die überprüfte CRC32-Prüfsumme ist $00000000 Prüfsumme für GPT Partition Data (Backup GPT Table : 6) berechnen … GPT Partition Data (Backup GPT Table: Die überprüfte CRC32-Prüfsumme ist $0F713C62 Prüfsumme für GPT Header (Backup GPT Header : 7) berechnen … GPT Header (Backup GPT Header : 7): Die überprüfte CRC32-Prüfsumme ist $0FF7183C Die überprüfte CRC32-Prüfsumme ist $F223F8EC /dev/disk2 GUID_partition_scheme /dev/disk2s1 Apple_HFS /Volumes/synology-assistant-7.0.3-50049 2022-05-22 15:50:14 : INFO : synologyassistant : Mounted: /Volumes/synology-assistant-7.0.3-50049 2022-05-22 15:50:14 : INFO : synologyassistant : Verifying: /Volumes/synology-assistant-7.0.3-50049/SynologyAssistant.app 2022-05-22 15:50:14 : DEBUG : synologyassistant : App size: 40M /Volumes/synology-assistant-7.0.3-50049/SynologyAssistant.app 2022-05-22 15:50:15 : DEBUG : synologyassistant : Debugging enabled, App Verification output was: /Volumes/synology-assistant-7.0.3-50049/SynologyAssistant.app: accepted source=Notarized Developer ID override=security disabled origin=Developer ID Application: Synology Inc. (X85BAK35Y4) 2022-05-22 15:50:15 : INFO : synologyassistant : Team ID matching: X85BAK35Y4 (expected: X85BAK35Y4 ) 2022-05-22 15:50:15.860 defaults[13280:200237] The domain/default pair of (/Volumes/synology-assistant-7.0.3-50049/SynologyAssistant.app/Contents/Info.plist, CFBundleShortVersionString) does not exist 2022-05-22 15:50:15 : INFO : synologyassistant : Installing SynologyAssistant version on versionKey CFBundleShortVersionString. 2022-05-22 15:50:15 : INFO : synologyassistant : App has LSMinimumSystemVersion: 10.7 2022-05-22 15:50:15 : DEBUG : synologyassistant : DEBUG mode 1 enabled, skipping remove, copy and chown steps 2022-05-22 15:50:16 : INFO : synologyassistant : Finishing... 2022-05-22 15:50:26 : INFO : synologyassistant : No version found using packageID com.synology.DSAssistant 2022-05-22 15:50:26 : INFO : synologyassistant : App(s) found: /Applications/SynologyAssistant.app 2022-05-22 15:50:26.241 defaults[13304:200361] The domain/default pair of (/Applications/SynologyAssistant.app/Contents/Info.plist, CFBundleShortVersionString) does not exist 2022-05-22 15:50:26 : INFO : synologyassistant : found app at /Applications/SynologyAssistant.app, version , on versionKey CFBundleShortVersionString 2022-05-22 15:50:26 : REQ : synologyassistant : Installed SynologyAssistant 2022-05-22 15:50:26 : INFO : synologyassistant : notifying 2022-05-22 15:50:26 : DEBUG : synologyassistant : Unmounting /Volumes/synology-assistant-7.0.3-50049 2022-05-22 15:50:26 : DEBUG : synologyassistant : Debugging enabled, Unmounting output was: "disk2" ejected. 2022-05-22 15:50:26 : DEBUG : synologyassistant : DEBUG mode 1, not reopening anything 2022-05-22 15:50:26 : REQ : synologyassistant : All done! 2022-05-22 15:50:26 : REQ : synologyassistant : ################## End Installomator, exit code 0 --- fragments/labels/synologyassistant.sh | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 fragments/labels/synologyassistant.sh diff --git a/fragments/labels/synologyassistant.sh b/fragments/labels/synologyassistant.sh new file mode 100644 index 0000000..ad6e61b --- /dev/null +++ b/fragments/labels/synologyassistant.sh @@ -0,0 +1,8 @@ +synologyassistant) + name="SynologyAssistant" + type="dmg" + packageID="com.synology.DSAssistant" + appNewVersion="$(curl -sf https://archive.synology.com/download/Utility/Assistant | grep -m 1 /download/Utility/Assistant/ | sed "s|.*>\(.*\)<.*|\\1|")" + downloadURL="https://global.download.synology.com/download/Utility/Assistant/${appNewVersion}/Mac/synology-assistant-${appNewVersion}.dmg" + expectedTeamID="X85BAK35Y4" + ;; From 4c2a49af60c2bc1ace4f840fcd1dfa956a7c9084 Mon Sep 17 00:00:00 2001 From: Fletcher Salesky Date: Mon, 23 May 2022 13:07:37 -0700 Subject: [PATCH 020/209] Create strongdm.sh --- fragments/labels/strongdm.sh | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 fragments/labels/strongdm.sh diff --git a/fragments/labels/strongdm.sh b/fragments/labels/strongdm.sh new file mode 100644 index 0000000..5d04dcb --- /dev/null +++ b/fragments/labels/strongdm.sh @@ -0,0 +1,9 @@ +strongdm) + name="strongDM" + type="dmg" + downloadURL="https://app.strongdm.com/downloads/client/darwin" + appNewVersion=$(curl -fsLIXGET "https://app.strongdm.com/downloads/client/darwin" | grep -i "^content-disposition" | sed -e 's/.*filename\=\"SDM\-\(.*\)\.dmg\".*/\1/') + appName="SDM.app" + blockingProcesses=( "SDM" ) + expectedTeamID="W5HSYBBJGA" + ;; From e160bcb1239e3845603ae4645689dffb44e73ae3 Mon Sep 17 00:00:00 2001 From: dnikles Date: Thu, 26 May 2022 10:56:50 -0400 Subject: [PATCH 021/209] add cricutdesignspace label MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Output: ``` 2022-05-26 10:54:52 : WARN : cricutdesignspace : setting variable from argument DEBUG=0 2022-05-26 10:54:52 : WARN : cricutdesignspace : setting variable from argument INSTALL=force 2022-05-26 10:54:52 : REQ : cricutdesignspace : ################## Start Installomator v. 10.0beta, date 2022-05-26 2022-05-26 10:54:52 : INFO : cricutdesignspace : ################## Version: 10.0beta 2022-05-26 10:54:52 : INFO : cricutdesignspace : ################## Date: 2022-05-26 2022-05-26 10:54:52 : INFO : cricutdesignspace : ################## cricutdesignspace 2022-05-26 10:54:52 : INFO : cricutdesignspace : BLOCKING_PROCESS_ACTION=tell_user 2022-05-26 10:54:52 : INFO : cricutdesignspace : NOTIFY=success 2022-05-26 10:54:52 : INFO : cricutdesignspace : LOGGING=INFO 2022-05-26 10:54:52 : INFO : cricutdesignspace : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-05-26 10:54:53 : INFO : cricutdesignspace : Label type: dmg 2022-05-26 10:54:53 : INFO : cricutdesignspace : archiveName: Cricut Design Space.dmg 2022-05-26 10:54:53 : INFO : cricutdesignspace : no blocking processes defined, using Cricut Design Space as default 2022-05-26 10:54:53 : INFO : cricutdesignspace : App(s) found: /Applications/Cricut Design Space.app 2022-05-26 10:54:53 : INFO : cricutdesignspace : found app at /Applications/Cricut Design Space.app, version 7.9.158, on versionKey CFBundleShortVersionString 2022-05-26 10:54:53 : INFO : cricutdesignspace : appversion: 7.9.158 2022-05-26 10:54:53 : INFO : cricutdesignspace : Label is not of type “updateronly”, and it’s set to use force to install or ignoring app store apps, so not using updateTool. 2022-05-26 10:54:53 : INFO : cricutdesignspace : Latest version of Cricut Design Space is 7.9.158 2022-05-26 10:54:53 : INFO : cricutdesignspace : There is no newer version available. 2022-05-26 10:54:53 : REQ : cricutdesignspace : Downloading https://staticcontent.cricut.com/a/software/osx-native/CricutDesignSpace-Install-v7.9.158.dmg to Cricut Design Space.dmg 2022-05-26 10:54:55 : REQ : cricutdesignspace : no more blocking processes, continue with update 2022-05-26 10:54:55 : REQ : cricutdesignspace : Installing Cricut Design Space 2022-05-26 10:54:55 : INFO : cricutdesignspace : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.LLI066bN/Cricut Design Space.dmg 2022-05-26 10:54:58 : INFO : cricutdesignspace : Mounted: /Volumes/Cricut Design Space Install 2022-05-26 10:54:58 : INFO : cricutdesignspace : Verifying: /Volumes/Cricut Design Space Install/Cricut Design Space.app 2022-05-26 10:54:59 : INFO : cricutdesignspace : Team ID matching: 25627ZFVT7 (expected: 25627ZFVT7 ) 2022-05-26 10:54:59 : INFO : cricutdesignspace : Downloaded version of Cricut Design Space is 7.9.158 on versionKey CFBundleShortVersionString, same as installed. 2022-05-26 10:54:59 : INFO : cricutdesignspace : Using force to install anyway. 2022-05-26 10:54:59 : INFO : cricutdesignspace : App has LSMinimumSystemVersion: 10.11.0 2022-05-26 10:54:59 : WARN : cricutdesignspace : Removing existing /Applications/Cricut Design Space.app 2022-05-26 10:54:59 : INFO : cricutdesignspace : Copy /Volumes/Cricut Design Space Install/Cricut Design Space.app to /Applications 2022-05-26 10:55:00 : WARN : cricutdesignspace : Changing owner to dnikles 2022-05-26 10:55:00 : INFO : cricutdesignspace : Finishing... 2022-05-26 10:55:10 : INFO : cricutdesignspace : App(s) found: /Applications/Cricut Design Space.app 2022-05-26 10:55:10 : INFO : cricutdesignspace : found app at /Applications/Cricut Design Space.app, version 7.9.158, on versionKey CFBundleShortVersionString 2022-05-26 10:55:10 : REQ : cricutdesignspace : Installed Cricut Design Space, version 7.9.158 2022-05-26 10:55:10 : INFO : cricutdesignspace : notifying 2022-05-26 10:55:10 : INFO : cricutdesignspace : App not closed, so no reopen. 2022-05-26 10:55:10 : REQ : cricutdesignspace : All done! 2022-05-26 10:55:10 : REQ : cricutdesignspace : ################## End Installomator, exit code 0 ``` --- fragments/labels/cricutdesignspace.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/cricutdesignspace.sh diff --git a/fragments/labels/cricutdesignspace.sh b/fragments/labels/cricutdesignspace.sh new file mode 100644 index 0000000..e26ab22 --- /dev/null +++ b/fragments/labels/cricutdesignspace.sh @@ -0,0 +1,7 @@ +cricutdesignspace) + name="Cricut Design Space" + type="dmg" + appNewVersion=$(curl -fsL https://s3-us-west-2.amazonaws.com/staticcontent.cricut.com/a/software/osx-native/latest.json | sed -n 's/^.*"rolloutVersion"[[:space:]]*:[[:space:]]*"\([^"]*\)".*$/\1/p') + downloadURL=https://staticcontent.cricut.com/a/software/osx-native/CricutDesignSpace-Install-v${appNewVersion}.dmg + expectedTeamID="25627ZFVT7" + ;; From abe2e51f138641ee74572f2c557283ff781554e3 Mon Sep 17 00:00:00 2001 From: Fletcher Salesky Date: Thu, 26 May 2022 12:03:42 -0700 Subject: [PATCH 022/209] Update googledrive.sh --- fragments/labels/googledrive.sh | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/fragments/labels/googledrive.sh b/fragments/labels/googledrive.sh index 16faa2c..6132e6b 100644 --- a/fragments/labels/googledrive.sh +++ b/fragments/labels/googledrive.sh @@ -3,8 +3,13 @@ googledrivefilestream) # credit: Isaac Ordonez, Mann consulting (@mannconsulting) name="Google Drive File Stream" type="pkgInDmg" - packageID="com.google.drivefs" + if [[ $(arch) == "arm64" ]]; then + packageID="com.google.drivefs.arm64" + elif [[ $(arch) == "i386" ]]; then + packageID="com.google.drivefs.x86_64" + fi downloadURL="https://dl.google.com/drive-file-stream/GoogleDriveFileStream.dmg" # downloadURL="https://dl.google.com/drive-file-stream/GoogleDrive.dmg" blockingProcesses=( "Google Docs" "Google Drive" "Google Sheets" "Google Slides" ) + appName="Google Drive.app" expectedTeamID="EQHXZ8M8AV" ;; From f479413f7040f015d6310585bb24fac78610b4ae Mon Sep 17 00:00:00 2001 From: Lance Stephens <4097471+pythoninthegrass@users.noreply.github.com> Date: Mon, 6 Jun 2022 14:54:21 -0500 Subject: [PATCH 023/209] kap MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit λ sudo utils/assemble.sh kap DEBUG=0 Password: 2022-06-06 14:40:02 : WARN : kap : setting variable from argument DEBUG=0 2022-06-06 14:40:02 : REQ : kap : ################## Start Installomator v. 10.0beta, date 2022-06-06 2022-06-06 14:40:02 : INFO : kap : ################## Version: 10.0beta 2022-06-06 14:40:02 : INFO : kap : ################## Date: 2022-06-06 2022-06-06 14:40:02 : INFO : kap : ################## kap 2022-06-06 14:40:03 : INFO : kap : BLOCKING_PROCESS_ACTION=tell_user 2022-06-06 14:40:03 : INFO : kap : NOTIFY=success 2022-06-06 14:40:03 : INFO : kap : LOGGING=INFO 2022-06-06 14:40:03 : INFO : kap : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-06-06 14:40:03 : INFO : kap : Label type: dmg 2022-06-06 14:40:03 : INFO : kap : archiveName: Kap-[0-9.]*-x64.dmg 2022-06-06 14:40:03 : INFO : kap : no blocking processes defined, using Kap as default 2022-06-06 14:40:03 : INFO : kap : App(s) found: /Applications/Kap.app 2022-06-06 14:40:03 : INFO : kap : found app at /Applications/Kap.app, version 3.5.3, on versionKey CFBundleShortVersionString 2022-06-06 14:40:03 : INFO : kap : appversion: 3.5.3 2022-06-06 14:40:03 : INFO : kap : Latest version of Kap is 3.5.4 2022-06-06 14:40:03 : REQ : kap : Downloading https://github.com/wulkano/Kap/releases/download/v3.5.4/Kap-3.5.4-x64.dmg to Kap-[0-9.]*-x64.dmg 2022-06-06 14:40:08 : REQ : kap : no more blocking processes, continue with update 2022-06-06 14:40:08 : REQ : kap : Installing Kap 2022-06-06 14:40:08 : INFO : kap : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.RoYqmJzY/Kap-[0-9.]*-x64.dmg 2022-06-06 14:40:13 : INFO : kap : Mounted: /Volumes/Kap 3.5.4 2022-06-06 14:40:13 : INFO : kap : Verifying: /Volumes/Kap 3.5.4/Kap.app 2022-06-06 14:40:17 : INFO : kap : Team ID matching: 2KEEHXF6R6 (expected: 2KEEHXF6R6 ) 2022-06-06 14:40:17 : INFO : kap : Downloaded version of Kap is 3.5.4 on versionKey CFBundleShortVersionString (replacing version 3.5.3). 2022-06-06 14:40:17 : INFO : kap : App has LSMinimumSystemVersion: 10.12.0 2022-06-06 14:40:17 : WARN : kap : Removing existing /Applications/Kap.app 2022-06-06 14:40:17 : INFO : kap : Copy /Volumes/Kap 3.5.4/Kap.app to /Applications 2022-06-06 14:40:18 : WARN : kap : Changing owner to lance.stephens 2022-06-06 14:40:18 : INFO : kap : Finishing... 2022-06-06 14:40:28 : INFO : kap : App(s) found: /Applications/Kap.app 2022-06-06 14:40:28 : INFO : kap : found app at /Applications/Kap.app, version 3.5.4, on versionKey CFBundleShortVersionString 2022-06-06 14:40:28 : REQ : kap : Installed Kap, version 3.5.4 2022-06-06 14:40:28 : INFO : kap : notifying 2022-06-06 14:40:29 : INFO : kap : App not closed, so no reopen. 2022-06-06 14:40:29 : REQ : kap : All done! 2022-06-06 14:40:29 : REQ : kap : ################## End Installomator, exit code 0 --- Labels.txt | 1 + fragments/labels/kap.sh | 15 +++++++++++++++ 2 files changed, 16 insertions(+) create mode 100644 fragments/labels/kap.sh diff --git a/Labels.txt b/Labels.txt index e294113..402aa2d 100644 --- a/Labels.txt +++ b/Labels.txt @@ -200,6 +200,7 @@ jetbrainspycharmce jetbrainsrubymine jetbrainstoolbox jetbrainswebstorm +kap karabinerelements keepassxc keka diff --git a/fragments/labels/kap.sh b/fragments/labels/kap.sh new file mode 100644 index 0000000..0737235 --- /dev/null +++ b/fragments/labels/kap.sh @@ -0,0 +1,15 @@ +kap) + # credit: Lance Stephens (@pythoninthegrass on MacAdmins Slack) + name="Kap" + type="dmg" + archiveName= + if [[ $(arch) = "i386" ]]; then + archiveName="${name}-[0-9.]*-x64.${type}" + downloadURL=$(downloadURLFromGit wulkano kap | grep -i x64) + else + archiveName="${name}-[0-9.]*-arm64.${type}" + downloadURL=$(downloadURLFromGit wulkano kap) + fi + appNewVersion=$(versionFromGit wulkano Kap) + expectedTeamID="2KEEHXF6R6" + ;; From a6f1224b414a847928b54ee1940739c0c4c527c0 Mon Sep 17 00:00:00 2001 From: pythoninthegrass <4097471+pythoninthegrass@users.noreply.github.com> Date: Mon, 6 Jun 2022 15:36:30 -0500 Subject: [PATCH 024/209] Removed redundant variable and added arm64 download logic --- fragments/labels/kap.sh | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/fragments/labels/kap.sh b/fragments/labels/kap.sh index 0737235..7b6fe1d 100644 --- a/fragments/labels/kap.sh +++ b/fragments/labels/kap.sh @@ -2,13 +2,12 @@ kap) # credit: Lance Stephens (@pythoninthegrass on MacAdmins Slack) name="Kap" type="dmg" - archiveName= if [[ $(arch) = "i386" ]]; then archiveName="${name}-[0-9.]*-x64.${type}" downloadURL=$(downloadURLFromGit wulkano kap | grep -i x64) else archiveName="${name}-[0-9.]*-arm64.${type}" - downloadURL=$(downloadURLFromGit wulkano kap) + downloadURL=$(downloadURLFromGit wulkano kap | grep -i arm64) fi appNewVersion=$(versionFromGit wulkano Kap) expectedTeamID="2KEEHXF6R6" From 2fd262b6cbd885b3b6e7bd9e62aee682bf535a2c Mon Sep 17 00:00:00 2001 From: Omari <20199517+omarirose@users.noreply.github.com> Date: Tue, 7 Jun 2022 13:34:03 -0400 Subject: [PATCH 025/209] adding masv label to installomator --- fragments/labels/masv.sh | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 fragments/labels/masv.sh diff --git a/fragments/labels/masv.sh b/fragments/labels/masv.sh new file mode 100644 index 0000000..7e08fb0 --- /dev/null +++ b/fragments/labels/masv.sh @@ -0,0 +1,6 @@ +masv) + name="MASV" + type="dmg" + downloadURL="https://dl.massive.io/MASV.dmg" + expectedTeamID="VHKX7RCAY7" + ;; \ No newline at end of file From 96521678338303e0e105387c8185a948f0dbf9d1 Mon Sep 17 00:00:00 2001 From: Fletcher Salesky Date: Mon, 23 May 2022 21:19:56 -0700 Subject: [PATCH 026/209] Create tencentmeeting.sh --- fragments/labels/tencentmeeting.sh | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 fragments/labels/tencentmeeting.sh diff --git a/fragments/labels/tencentmeeting.sh b/fragments/labels/tencentmeeting.sh new file mode 100644 index 0000000..bb90f8f --- /dev/null +++ b/fragments/labels/tencentmeeting.sh @@ -0,0 +1,15 @@ +tencentmeeting) + name="TencentMeeting" + type="dmg" + if [[ $(arch) == "arm64" ]]; then + downloadURL="$(curl -fs 'https://meeting.tencent.com/web-service/query-download-info?q=%5B%7B%22package-type%22%3A%22app%22%2C%22channel%22%3A%220300000000%22%2C%22platform%22%3A%22mac%22%2C%22arch%22%3A%22arm64%22%7D%5D&c_os=web&c_os_version=1&c_os_model=web&c_timestamp=1653366550252&c_instance_id=5&c_nonce=DcaDam4y&c_app_id=1400143280&c_app_version=1&c_lang=zh-cn&c_district=0&nonce=miwSceJNQaSZttma' -H 'authority: meeting.tencent.com' -H 'referer: https://meeting.tencent.com/download-mac.html?from=1000&fromSource=1&macType=apple' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15' | grep -o "https://updatecdn.meeting.qq.com[^']*\.publish.arm64.dmg")" + appNewVersion=$(curl -fs 'https://meeting.tencent.com/web-service/query-download-info?q=%5B%7B%22package-type%22%3A%22app%22%2C%22channel%22%3A%220300000000%22%2C%22platform%22%3A%22mac%22%2C%22arch%22%3A%22arm64%22%7D%5D&c_os=web&c_os_version=1&c_os_model=web&c_timestamp=1653366550252&c_instance_id=5&c_nonce=DcaDam4y&c_app_id=1400143280&c_app_version=1&c_lang=zh-cn&c_district=0&nonce=miwSceJNQaSZttma' -H 'authority: meeting.tencent.com' -H 'referer: https://meeting.tencent.com/download-mac.html?from=1000&fromSource=1&macType=apple' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15' | grep -o "https://updatecdn.meeting.qq.com[^']*\.publish.arm64.dmg" | sed -e 's/.*TencentMeeting\_0300000000\_\(.*\)\.publish\.arm64\.dmg.*/\1/') + elif [[ $(arch) == "i386" ]]; then + downloadURL="$(curl -fs 'https://meeting.tencent.com/web-service/query-download-info?q=%5B%7B%22package-type%22%3A%22app%22%2C%22channel%22%3A%220300000000%22%2C%22platform%22%3A%22mac%22%2C%22arch%22%3A%22x86_64%22%7D%5D&c_os=web&c_os_version=1&c_os_model=web&c_timestamp=1653366500890&c_instance_id=5&c_nonce=jA4P4JPY&c_app_id=1400143280&c_app_version=1&c_lang=zh-cn&c_district=0&nonce=tF6Bm4FYHJwdPeGH' -H 'authority: meeting.tencent.com' -H 'referer: https://meeting.tencent.com/download-mac.html?from=1000&fromSource=1' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15' | grep -o "https://updatecdn.meeting.qq.com[^']*\.publish.x86_64.dmg")" + appNewVersion=$(curl -fs 'https://meeting.tencent.com/web-service/query-download-info?q=%5B%7B%22package-type%22%3A%22app%22%2C%22channel%22%3A%220300000000%22%2C%22platform%22%3A%22mac%22%2C%22arch%22%3A%22x86_64%22%7D%5D&c_os=web&c_os_version=1&c_os_model=web&c_timestamp=1653366500890&c_instance_id=5&c_nonce=jA4P4JPY&c_app_id=1400143280&c_app_version=1&c_lang=zh-cn&c_district=0&nonce=tF6Bm4FYHJwdPeGH' -H 'authority: meeting.tencent.com' -H 'referer: https://meeting.tencent.com/download-mac.html?from=1000&fromSource=1' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15' | grep -o "https://updatecdn.meeting.qq.com[^']*\.publish.x86_64.dmg" | sed -e 's/.*TencentMeeting\_0300000000\_\(.*\)\.publish\.x86_64\.dmg.*/\1/') + fi + curlOptions=( -H "User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15" ) + appCustomVersion() { echo "$(defaults read /Applications/TencentMeeting.app/Contents/Info.plist CFBundleShortVersionString)$(echo ".")$(defaults read /Applications/TencentMeeting.app/Contents/Info.plist CFBundleVersion)" } + expectedTeamID="88L2Q4487U" + ;; + From 817a3992b0d80ffddb1a5133baa9155d262de778 Mon Sep 17 00:00:00 2001 From: Graham Williams Date: Tue, 14 Jun 2022 14:15:42 +0100 Subject: [PATCH 027/209] Create sonicvisualiser.sh Output: ``` sudo ./assemble.sh sonicvisualiser DEBUG=0 2022-06-14 14:08:05 : WARN : sonicvisualiser : setting variable from argument DEBUG=0 2022-06-14 14:08:05 : REQ : sonicvisualiser : ################## Start Installomator v. 10.0beta, date 2022-06-14 2022-06-14 14:08:05 : INFO : sonicvisualiser : ################## Version: 10.0beta 2022-06-14 14:08:05 : INFO : sonicvisualiser : ################## Date: 2022-06-14 2022-06-14 14:08:05 : INFO : sonicvisualiser : ################## sonicvisualiser 2022-06-14 14:08:06 : INFO : sonicvisualiser : BLOCKING_PROCESS_ACTION=tell_user 2022-06-14 14:08:06 : INFO : sonicvisualiser : NOTIFY=success 2022-06-14 14:08:06 : INFO : sonicvisualiser : LOGGING=INFO 2022-06-14 14:08:06 : INFO : sonicvisualiser : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-06-14 14:08:06 : INFO : sonicvisualiser : Label type: dmg 2022-06-14 14:08:06 : INFO : sonicvisualiser : archiveName: Sonic Visualiser.dmg 2022-06-14 14:08:06 : INFO : sonicvisualiser : no blocking processes defined, using Sonic Visualiser as default 2022-06-14 14:08:06 : INFO : sonicvisualiser : name: Sonic Visualiser, appName: Sonic Visualiser.app 2022-06-14 14:08:06 : WARN : sonicvisualiser : No previous app found 2022-06-14 14:08:06 : WARN : sonicvisualiser : could not find Sonic Visualiser.app 2022-06-14 14:08:06 : INFO : sonicvisualiser : appversion: 2022-06-14 14:08:06 : INFO : sonicvisualiser : Latest version of Sonic Visualiser is 4.5 2022-06-14 14:08:06 : REQ : sonicvisualiser : Downloading https://github.com/sonic-visualiser/sonic-visualiser/releases/download/sv_v4.5/Sonic.Visualiser-4.5.dmg to Sonic Visualiser.dmg 2022-06-14 14:08:09 : REQ : sonicvisualiser : no more blocking processes, continue with update 2022-06-14 14:08:09 : REQ : sonicvisualiser : Installing Sonic Visualiser 2022-06-14 14:08:09 : INFO : sonicvisualiser : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.Q5vjIONo/Sonic Visualiser.dmg 2022-06-14 14:08:12 : INFO : sonicvisualiser : Mounted: /Volumes/Sonic Visualiser-4.5 2022-06-14 14:08:12 : INFO : sonicvisualiser : Verifying: /Volumes/Sonic Visualiser-4.5/Sonic Visualiser.app 2022-06-14 14:08:14 : INFO : sonicvisualiser : Team ID matching: 73F996B92S (expected: 73F996B92S ) 2022-06-14 14:08:14 : INFO : sonicvisualiser : Installing Sonic Visualiser version 4.5.0 on versionKey CFBundleShortVersionString. 2022-06-14 14:08:14 : INFO : sonicvisualiser : Copy /Volumes/Sonic Visualiser-4.5/Sonic Visualiser.app to /Applications 2022-06-14 14:08:15 : WARN : sonicvisualiser : Changing owner to grayw 2022-06-14 14:08:15 : INFO : sonicvisualiser : Finishing... 2022-06-14 14:08:25 : INFO : sonicvisualiser : App(s) found: /Applications/Sonic Visualiser.app 2022-06-14 14:08:25 : INFO : sonicvisualiser : found app at /Applications/Sonic Visualiser.app, version 4.5.0, on versionKey CFBundleShortVersionString 2022-06-14 14:08:25 : REQ : sonicvisualiser : Installed Sonic Visualiser, version 4.5.0 2022-06-14 14:08:25 : INFO : sonicvisualiser : notifying 2022-06-14 14:08:25 : INFO : sonicvisualiser : App not closed, so no reopen. 2022-06-14 14:08:25 : REQ : sonicvisualiser : All done! 2022-06-14 14:08:25 : REQ : sonicvisualiser : ################## End Installomator, exit code 0 ``` --- fragments/labels/sonicvisualiser.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/sonicvisualiser.sh diff --git a/fragments/labels/sonicvisualiser.sh b/fragments/labels/sonicvisualiser.sh new file mode 100644 index 0000000..eef62d6 --- /dev/null +++ b/fragments/labels/sonicvisualiser.sh @@ -0,0 +1,7 @@ +sonicvisualiser) + name="Sonic Visualiser" + type="dmg" + downloadURL="$(downloadURLFromGit sonic-visualiser sonic-visualiser)" + appNewVersion="$(versionFromGit sonic-visualiser sonic-visualiser)" + expectedTeamID="73F996B92S" + ;; \ No newline at end of file From 1ec9c3f0b010828082d577fb58ab42be2ee8ba91 Mon Sep 17 00:00:00 2001 From: Thomas Bartlett Date: Tue, 14 Jun 2022 10:05:11 -0400 Subject: [PATCH 028/209] Update grammarly.sh Updated download URL as Grammarly removed the appcast.xml feed. --- fragments/labels/grammarly.sh | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/fragments/labels/grammarly.sh b/fragments/labels/grammarly.sh index 4534682..7dfcb93 100644 --- a/fragments/labels/grammarly.sh +++ b/fragments/labels/grammarly.sh @@ -2,9 +2,8 @@ grammarly) name="Grammarly Desktop" type="dmg" packageID="com.grammarly.ProjectLlama" - downloadURL=$(curl -fsL "https://download-mac.grammarly.com/appcast.xml" | xpath '//rss/channel/item[1]/enclosure/@url' 2>/dev/null | cut -d '"' -f 2) + downloadURL="https://download-mac.grammarly.com/Grammarly.dmg" expectedTeamID="W8F64X92K3" - appNewVersion=$(curl -is "https://download-mac.grammarly.com/appcast.xml" | grep sparkle:version | tr ',' '\n' | grep sparkle:version | cut -d '"' -f 4) # appName="Grammarly Installer.app" installerTool="Grammarly Installer.app" CLIInstaller="Grammarly Installer.app/Contents/MacOS/Grammarly Desktop" From ae7db2621c11542cc9976bd184dedc573589571c Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 17 Jun 2022 15:49:00 +0200 Subject: [PATCH 029/209] removed absolute paths from commands --- MDM/InstallInstallomator.sh | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/MDM/InstallInstallomator.sh b/MDM/InstallInstallomator.sh index 173f705..382ae2c 100644 --- a/MDM/InstallInstallomator.sh +++ b/MDM/InstallInstallomator.sh @@ -3,6 +3,8 @@ # This script is meant to povide the simplest MDM/management platform agnostic way to install Installomator # The only requirement is an Internet connection +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + # Get the URL of the latest PKG From the Installomator GitHub repo url=$(curl --silent --fail "https://api.github.com/repos/Installomator/Installomator/releases/latest" | awk -F '"' "/browser_download_url/ && /pkg\"/ { print \$4; exit }") # Expected Team ID of the downloaded PKG @@ -13,20 +15,20 @@ exitCode=0 if [ ! -e "/usr/local/Installomator/Installomator.sh" ]; then echo "Installomator not found. Installing." # Create temporary working directory - workDirectory=$( /usr/bin/basename "$0" ) - tempDirectory=$( /usr/bin/mktemp -d "/private/tmp/$workDirectory.XXXXXX" ) + workDirectory=$( basename "$0" ) + tempDirectory=$( mktemp -d ) echo "Created working directory '$tempDirectory'" # Download the installer package echo "Downloading Installomator package" - /usr/bin/curl --location --silent "$url" -o "$tempDirectory/Installomator.pkg" + curl --location --silent "$url" -o "$tempDirectory/Installomator.pkg" # Verify the download - teamID=$(/usr/sbin/spctl -a -vv -t install "$tempDirectory/Installomator.pkg" 2>&1 | awk '/origin=/ {print $NF }' | tr -d '()') + teamID=$(spctl -a -vv -t install "$tempDirectory/Installomator.pkg" 2>&1 | awk '/origin=/ {print $NF }' | tr -d '()') echo "Team ID for downloaded package: $teamID" # Install the package if Team ID validates if [ "$expectedTeamID" = "$teamID" ] || [ "$expectedTeamID" = "" ]; then echo "Package verified. Installing package Installomator.pkg" - /usr/sbin/installer -pkg "$tempDirectory/Installomator.pkg" -target / - exitCode=0 + installer -pkg "$tempDirectory/Installomator.pkg" -target / -verbose + exitCode=$? else echo "Package verification failed before package installation could start. Download link may be invalid. Aborting." exitCode=1 @@ -34,7 +36,7 @@ if [ ! -e "/usr/local/Installomator/Installomator.sh" ]; then fi # Remove the temporary working directory when done echo "Deleting working directory '$tempDirectory' and its contents" - /bin/rm -Rf "$tempDirectory" + rm -Rf "$tempDirectory" else echo "Installomator already installed." fi From 158a30b6f1fa7b41a632b04c689863b37133cd61 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 17 Jun 2022 15:50:01 +0200 Subject: [PATCH 030/209] removed unused variable --- MDM/InstallInstallomator.sh | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/MDM/InstallInstallomator.sh b/MDM/InstallInstallomator.sh index 382ae2c..9bb131f 100644 --- a/MDM/InstallInstallomator.sh +++ b/MDM/InstallInstallomator.sh @@ -1,4 +1,4 @@ -#!/bin/bash +#!/bin/sh # This script is meant to povide the simplest MDM/management platform agnostic way to install Installomator # The only requirement is an Internet connection @@ -15,7 +15,6 @@ exitCode=0 if [ ! -e "/usr/local/Installomator/Installomator.sh" ]; then echo "Installomator not found. Installing." # Create temporary working directory - workDirectory=$( basename "$0" ) tempDirectory=$( mktemp -d ) echo "Created working directory '$tempDirectory'" # Download the installer package From 7e515b0366fa10db371ff84b246bb268b0af62d2 Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Fri, 17 Jun 2022 22:11:48 +0200 Subject: [PATCH 031/209] New Label: Synology Drive Client MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit "Synology Drive Client desktop application is the desktop utility that provides file syncing and personal computer backup service on multiple client computers to a centralized server, Synology Drive Server." ./assemble.sh -l /Users/savvas/Desktop/Mosyle/Resources/InstallomatorLabels synologydriveclient 2022-06-17 22:04:10 : REQ : synologydriveclient : ################## Start Installomator v. 9.2, date 2022-06-17 2022-06-17 22:04:10 : INFO : synologydriveclient : ################## Version: 9.2 2022-06-17 22:04:10 : INFO : synologydriveclient : ################## Date: 2022-06-17 2022-06-17 22:04:10 : INFO : synologydriveclient : ################## synologydriveclient 2022-06-17 22:04:10 : DEBUG : synologydriveclient : DEBUG mode 1 enabled. 2022-06-17 22:04:10 : INFO : synologydriveclient : BLOCKING_PROCESS_ACTION=tell_user 2022-06-17 22:04:10 : INFO : synologydriveclient : NOTIFY=success 2022-06-17 22:04:10 : INFO : synologydriveclient : LOGGING=DEBUG 2022-06-17 22:04:10 : INFO : synologydriveclient : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-06-17 22:04:10 : INFO : synologydriveclient : Label type: pkgInDmg 2022-06-17 22:04:10 : INFO : synologydriveclient : archiveName: Synology Drive Client.dmg 2022-06-17 22:04:10 : INFO : synologydriveclient : no blocking processes defined, using Synology Drive Client as default 2022-06-17 22:04:10 : DEBUG : synologydriveclient : Changing directory to /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build 2022-06-17 22:04:10 : INFO : synologydriveclient : found packageID com.synology.CloudStation installed, version 7.1.0 2022-06-17 22:04:10 : INFO : synologydriveclient : appversion: 7.1.0 2022-06-17 22:04:10 : INFO : synologydriveclient : Latest version of Synology Drive Client is 7.1.0 2022-06-17 22:04:10 : WARN : synologydriveclient : DEBUG mode 1 enabled, not exiting, but there is no new version of app. 2022-06-17 22:04:10 : REQ : synologydriveclient : Downloading https://global.download.synology.com/download/Utility/SynologyDriveClient/3.1.0-12923/Mac/Installer/synology-drive-client-12923.dmg to Synology Drive Client.dmg 2022-06-17 22:04:21 : DEBUG : synologydriveclient : File list: -rw-r--r-- 1 savvas staff 71M 17 Jun 22:04 Synology Drive Client.dmg 2022-06-17 22:04:21 : DEBUG : synologydriveclient : File type: Synology Drive Client.dmg: bzip2 compressed data, block size = 100k 2022-06-17 22:04:21 : DEBUG : synologydriveclient : curl output was: * Trying 65.9.66.38:443... * Connected to global.download.synology.com (65.9.66.38) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [333 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [122 bytes data] * (304) (IN), TLS handshake, Unknown (8): { [19 bytes data] * (304) (IN), TLS handshake, Certificate (11): { [5175 bytes data] * (304) (IN), TLS handshake, CERT verify (15): { [264 bytes data] * (304) (IN), TLS handshake, Finished (20): { [36 bytes data] * (304) (OUT), TLS handshake, Finished (20): } [36 bytes data] * SSL connection using TLSv1.3 / AEAD-AES128-GCM-SHA256 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=global.download.synology.com * start date: Apr 29 07:21:41 2022 GMT * expire date: May 31 07:21:41 2023 GMT * subjectAltName: host "global.download.synology.com" matched cert's "global.download.synology.com" * issuer: C=US; ST=Arizona; L=Scottsdale; O=GoDaddy.com, Inc.; OU=http://certs.godaddy.com/repository/; CN=Go Daddy Secure Certificate Authority - G2 * SSL certificate verify ok. * Using HTTP2, server supports multiplexing * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x7f88cf80f600) > GET /download/Utility/SynologyDriveClient/3.1.0-12923/Mac/Installer/synology-drive-client-12923.dmg HTTP/2 > Host: global.download.synology.com > user-agent: curl/7.79.1 > accept: */* > * Connection state changed (MAX_CONCURRENT_STREAMS == 128)! < HTTP/2 200 < content-type: application/octet-stream < content-length: 74575228 < date: Tue, 07 Jun 2022 18:38:15 GMT < last-modified: Thu, 28 Apr 2022 19:03:08 GMT < etag: "8719eb20e8d6435edf7dfdeac1cf50be-15" < accept-ranges: bytes < server: AmazonS3 < x-cache: Hit from cloudfront < via: 1.1 579a21a67e4dc50a655a7c0e9675261c.cloudfront.net (CloudFront) < x-amz-cf-pop: FRA56-C1 < x-amz-cf-id: XWM1zUJtP5srb0NPTx7G-SF0nyJTplNgidIVYimK-CjQ-0HmcTVGQg== < age: 869157 < { [2896 bytes data] * Connection #0 to host global.download.synology.com left intact 2022-06-17 22:04:21 : DEBUG : synologydriveclient : DEBUG mode 1, not checking for blocking processes 2022-06-17 22:04:21 : REQ : synologydriveclient : Installing Synology Drive Client 2022-06-17 22:04:21 : INFO : synologydriveclient : Mounting /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/Synology Drive Client.dmg 2022-06-17 22:04:25 : DEBUG : synologydriveclient : Debugging enabled, dmgmount output was: Prüfsumme für Protective Master Boot Record（MBR：0） berechnen … Protective Master Boot Record（MBR：0）: Die überprüfte CRC32-Prüfsumme ist $A8DB39D3 Prüfsumme für GPT Header（Primary GPT Header：1） berechnen … GPT Header（Primary GPT Header：1）: Die überprüfte CRC32-Prüfsumme ist $2BEB5693 Prüfsumme für GPT Partition Data（Primary GPT Table：2） berechnen … GPT Partition Data（Primary GPT Table: Die überprüfte CRC32-Prüfsumme ist $EBAFDA05 Prüfsumme für （Apple_Free：3） berechnen … （Apple_Free：3）: Die überprüfte CRC32-Prüfsumme ist $00000000 Prüfsumme für disk image（Apple_HFS：4） berechnen … disk image（Apple_HFS：4）: Die überprüfte CRC32-Prüfsumme ist $0307F580 Prüfsumme für （Apple_Free：5） berechnen … （Apple_Free：5）: Die überprüfte CRC32-Prüfsumme ist $00000000 Prüfsumme für GPT Partition Data（Backup GPT Table：6） berechnen … GPT Partition Data（Backup GPT Table：: Die überprüfte CRC32-Prüfsumme ist $EBAFDA05 Prüfsumme für GPT Header（Backup GPT Header：7） berechnen … GPT Header（Backup GPT Header：7）: Die überprüfte CRC32-Prüfsumme ist $AFE9E67E Die überprüfte CRC32-Prüfsumme ist $74229A79 /dev/disk3 GUID_partition_scheme /dev/disk3s1 Apple_HFS /Volumes/Synology Drive Client 2022-06-17 22:04:25 : INFO : synologydriveclient : Mounted: /Volumes/Synology Drive Client 2022-06-17 22:04:25 : DEBUG : synologydriveclient : Found pkg(s): /Volumes/Synology Drive Client/Install Synology Drive Client.pkg 2022-06-17 22:04:25 : INFO : synologydriveclient : found pkg: /Volumes/Synology Drive Client/Install Synology Drive Client.pkg 2022-06-17 22:04:25 : INFO : synologydriveclient : Verifying: /Volumes/Synology Drive Client/Install Synology Drive Client.pkg 2022-06-17 22:04:25 : DEBUG : synologydriveclient : File list: -rw-r--r--@ 1 savvas staff 70M 26 Apr 08:23 /Volumes/Synology Drive Client/Install Synology Drive Client.pkg 2022-06-17 22:04:26 : DEBUG : synologydriveclient : File type: /Volumes/Synology Drive Client/Install Synology Drive Client.pkg: xar archive compressed TOC: 6172, SHA-1 checksum 2022-06-17 22:04:26 : DEBUG : synologydriveclient : spctlOut is /Volumes/Synology Drive Client/Install Synology Drive Client.pkg: accepted 2022-06-17 22:04:26 : DEBUG : synologydriveclient : source=Notarized Developer ID 2022-06-17 22:04:26 : DEBUG : synologydriveclient : override=security disabled 2022-06-17 22:04:26 : DEBUG : synologydriveclient : origin=Developer ID Installer: Synology Inc. (X85BAK35Y4) 2022-06-17 22:04:26 : INFO : synologydriveclient : Team ID: X85BAK35Y4 (expected: X85BAK35Y4 ) 2022-06-17 22:04:26 : INFO : synologydriveclient : Checking package version. 2022-06-17 22:04:30 : INFO : synologydriveclient : Downloaded package com.synology.CloudStation version 7.1.0 2022-06-17 22:04:30 : INFO : synologydriveclient : Downloaded version of Synology Drive Client is the same as installed. 2022-06-17 22:04:30 : DEBUG : synologydriveclient : Unmounting /Volumes/Synology Drive Client 2022-06-17 22:04:30 : DEBUG : synologydriveclient : Debugging enabled, Unmounting output was: "disk3" ejected. 2022-06-17 22:04:30 : DEBUG : synologydriveclient : DEBUG mode 1, not reopening anything 2022-06-17 22:04:30 : REQ : synologydriveclient : No new version to install 2022-06-17 22:04:30 : REQ : synologydriveclient : ################## End Installomator, exit code 0 --- fragments/labels/synologydriveclient.sh | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 fragments/labels/synologydriveclient.sh diff --git a/fragments/labels/synologydriveclient.sh b/fragments/labels/synologydriveclient.sh new file mode 100644 index 0000000..430f4ef --- /dev/null +++ b/fragments/labels/synologydriveclient.sh @@ -0,0 +1,8 @@ +synologydriveclient) + name="Synology Drive Client" + type="pkgInDmg" + packageID="com.synology.CloudStation" + downloadURL=$(appVersion=`curl -sf https://archive.synology.com/download/Utility/SynologyDriveClient | grep -m 1 /download/Utility/SynologyDriveClient/ | sed "s|.*>\(.*\)<.*|\\1|"` && appShortVersion=`sed 's#.*-\(\)#\1#' <<< $appVersion` && echo https://global.download.synology.com/download/Utility/SynologyDriveClient/"$appVersion"/Mac/Installer/synology-drive-client-"${appShortVersion}".dmg) + appNewVersion=$(appVersionP1=`curl -sf https://archive.synology.com/download/Utility/SynologyDriveClient | grep -m 1 /download/Utility/SynologyDriveClient/ | sed "s|.*>\(.*\)-.*|\\1|"` && sed 's/\(.\{0\}\)./\17/' <<< $appVersionP1) + expectedTeamID="X85BAK35Y4" + ;; From 10afa45f5ec3d20560c2d3a074895740220e50fd Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Sun, 19 Jun 2022 14:36:39 +0200 Subject: [PATCH 032/209] New Label: Typinator "Have you ever experienced the tedium and frustration of having to repeatedly type your name, e-mail address, home page url, or other words or phrases again, again and again? Do you frequently need to quickly insert images like your signature, location plan, or company logo into documents? Do you often misspell words when typing? Typinator boosts your productivity by automating the process of inserting frequently used text and graphics and auto-correcting typing errors." ./assemble.sh -l /Desktop/Mosyle/Resources/InstallomatorLabels typinator 2022-06-19 14:31:10 : REQ : typinator : ################## Start Installomator v. 9.2, date 2022-06-19 2022-06-19 14:31:10 : INFO : typinator : ################## Version: 9.2 2022-06-19 14:31:10 : INFO : typinator : ################## Date: 2022-06-19 2022-06-19 14:31:10 : INFO : typinator : ################## typinator 2022-06-19 14:31:10 : DEBUG : typinator : DEBUG mode 1 enabled. 2022-06-19 14:31:10 : INFO : typinator : BLOCKING_PROCESS_ACTION=tell_user 2022-06-19 14:31:10 : INFO : typinator : NOTIFY=success 2022-06-19 14:31:10 : INFO : typinator : LOGGING=DEBUG 2022-06-19 14:31:10 : INFO : typinator : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-06-19 14:31:10 : INFO : typinator : Label type: zip 2022-06-19 14:31:10 : INFO : typinator : archiveName: Typinator.zip 2022-06-19 14:31:10 : INFO : typinator : no blocking processes defined, using Typinator as default 2022-06-19 14:31:10 : DEBUG : typinator : Changing directory to /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build 2022-06-19 14:31:10 : INFO : typinator : App(s) found: /Applications/Typinator.app 2022-06-19 14:31:11 : INFO : typinator : found app at /Applications/Typinator.app, version 8.11, on versionKey CFBundleShortVersionString 2022-06-19 14:31:11 : INFO : typinator : appversion: 8.11 2022-06-19 14:31:11 : INFO : typinator : Latest version of Typinator is 8.12.1 2022-06-19 14:31:11 : REQ : typinator : Downloading https://update.ergonis.com/downloads/products/typinator/Typinator.app.zip to Typinator.zip 2022-06-19 14:31:14 : DEBUG : typinator : File list: -rw-r--r-- 1 savvas staff 9,6M 19 Jun 14:31 Typinator.zip 2022-06-19 14:31:14 : DEBUG : typinator : File type: Typinator.zip: Zip archive data, at least v2.0 to extract, compression method=store 2022-06-19 14:31:14 : DEBUG : typinator : curl output was: * Trying 83.164.197.124:443... * Connected to update.ergonis.com (83.164.197.124) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [323 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [108 bytes data] * TLSv1.2 (IN), TLS handshake, Certificate (11): { [5715 bytes data] * TLSv1.2 (IN), TLS handshake, Server key exchange (12): { [401 bytes data] * TLSv1.2 (IN), TLS handshake, Server finished (14): { [4 bytes data] * TLSv1.2 (OUT), TLS handshake, Client key exchange (16): } [138 bytes data] * TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.2 (OUT), TLS handshake, Finished (20): } [16 bytes data] * TLSv1.2 (IN), TLS change cipher, Change cipher spec (1): { [1 bytes data] * TLSv1.2 (IN), TLS handshake, Finished (20): { [16 bytes data] * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 * ALPN, server accepted to use http/1.1 * Server certificate: * subject: CN=*.ergonis.com * start date: Aug 19 00:00:00 2020 GMT * expire date: Sep 28 12:00:00 2022 GMT * subjectAltName: host "update.ergonis.com" matched cert's "*.ergonis.com" * issuer: C=US; O=DigiCert Inc; CN=RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1 * SSL certificate verify ok. > GET /downloads/products/typinator/Typinator.app.zip HTTP/1.1 > Host: update.ergonis.com > User-Agent: curl/7.79.1 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 200 OK < Date: Sun, 19 Jun 2022 12:31:11 GMT < Server: Apache < Last-Modified: Wed, 20 Apr 2022 14:50:53 GMT < ETag: "9934e6-5dd171eb94d40" < Accept-Ranges: bytes < Content-Length: 10040550 < MS-Author-Via: DAV < Content-Type: application/zip < { [7696 bytes data] * Connection #0 to host update.ergonis.com left intact 2022-06-19 14:31:14 : DEBUG : typinator : DEBUG mode 1, not checking for blocking processes 2022-06-19 14:31:14 : REQ : typinator : Installing Typinator 2022-06-19 14:31:14 : INFO : typinator : Unzipping Typinator.zip 2022-06-19 14:31:14 : INFO : typinator : Verifying: /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/Typinator.app 2022-06-19 14:31:14 : DEBUG : typinator : App size: 16M /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/Typinator.app 2022-06-19 14:31:14 : DEBUG : typinator : Debugging enabled, App Verification output was: /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/Typinator.app: accepted source=Notarized Developer ID override=security disabled origin=Developer ID Application: Ergonis Software GmbH (TU7D9Y7GTQ) 2022-06-19 14:31:14 : INFO : typinator : Team ID matching: TU7D9Y7GTQ (expected: TU7D9Y7GTQ ) 2022-06-19 14:31:14 : INFO : typinator : Downloaded version of Typinator is 8.12.1 on versionKey CFBundleShortVersionString (replacing version 8.11). 2022-06-19 14:31:14 : INFO : typinator : App has LSMinimumSystemVersion: 10.9 2022-06-19 14:31:14 : DEBUG : typinator : DEBUG mode 1 enabled, skipping remove, copy and chown steps 2022-06-19 14:31:14 : INFO : typinator : Finishing... 2022-06-19 14:31:24 : INFO : typinator : App(s) found: /Applications/Typinator.app 2022-06-19 14:31:25 : INFO : typinator : found app at /Applications/Typinator.app, version 8.11, on versionKey CFBundleShortVersionString 2022-06-19 14:31:25 : REQ : typinator : Installed Typinator, version 8.11 2022-06-19 14:31:25 : INFO : typinator : notifying 2022-06-19 14:31:25 : DEBUG : typinator : DEBUG mode 1, not reopening anything 2022-06-19 14:31:25 : REQ : typinator : All done! 2022-06-19 14:31:25 : REQ : typinator : ################## End Installomator, exit code 0 --- fragments/labels/typinator.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/typinator.sh diff --git a/fragments/labels/typinator.sh b/fragments/labels/typinator.sh new file mode 100644 index 0000000..648f77c --- /dev/null +++ b/fragments/labels/typinator.sh @@ -0,0 +1,7 @@ +typinator) + name="Typinator" + type="zip" + downloadURL=https://update.ergonis.com/downloads/products/typinator/Typinator.app.zip + appNewVersion="$(curl -fs https://update.ergonis.com/vck/typinator.xml | grep -i Program_Version | sed "s|.*>\(.*\)<.*|\\1|")" + expectedTeamID="TU7D9Y7GTQ" + ;; From 64cdeffb902e8745d3965a683d15ec55b172c48d Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Sun, 19 Jun 2022 18:12:23 +0200 Subject: [PATCH 033/209] New Label: LANCOM Advanced VPN Client MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit "Secure corporate network access when traveling The LANCOM Advanced VPN Client provides mobile employees with encrypted access to the company network, whether they are at their home office, on the road, or even abroad. The application is extremely easy to use; once VPN access (virtual private network) has been configured, a click of the mouse is all it takes to establish a secure VPN connection over the best available connection medium. Further data protection comes with the integrated stateful inspection firewall, support of all IPSec protocol extensions, and numerous other security features." ./assemble.sh -l /Desktop/Mosyle/Resources/InstallomatorLabels lcadvancedvpnclient 2022-06-19 18:09:08 : REQ : lcadvancedvpnclient : ################## Start Installomator v. 9.2, date 2022-06-19 2022-06-19 18:09:08 : INFO : lcadvancedvpnclient : ################## Version: 9.2 2022-06-19 18:09:08 : INFO : lcadvancedvpnclient : ################## Date: 2022-06-19 2022-06-19 18:09:08 : INFO : lcadvancedvpnclient : ################## lcadvancedvpnclient 2022-06-19 18:09:08 : DEBUG : lcadvancedvpnclient : DEBUG mode 1 enabled. 2022-06-19 18:09:08 : INFO : lcadvancedvpnclient : BLOCKING_PROCESS_ACTION=tell_user 2022-06-19 18:09:08 : INFO : lcadvancedvpnclient : NOTIFY=success 2022-06-19 18:09:08 : INFO : lcadvancedvpnclient : LOGGING=DEBUG 2022-06-19 18:09:08 : INFO : lcadvancedvpnclient : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-06-19 18:09:08 : INFO : lcadvancedvpnclient : Label type: pkgInDmg 2022-06-19 18:09:08 : INFO : lcadvancedvpnclient : archiveName: LANCOM Advanced VPN Client.dmg 2022-06-19 18:09:08 : INFO : lcadvancedvpnclient : no blocking processes defined, using LANCOM Advanced VPN Client as default 2022-06-19 18:09:08 : DEBUG : lcadvancedvpnclient : Changing directory to /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build 2022-06-19 18:09:08 : INFO : lcadvancedvpnclient : App(s) found: /Applications/LANCOM Advanced VPN Client.app 2022-06-19 18:09:09 : INFO : lcadvancedvpnclient : found app at /Applications/LANCOM Advanced VPN Client.app, version 4.61, on versionKey CFBundleShortVersionString 2022-06-19 18:09:09 : INFO : lcadvancedvpnclient : appversion: 4.61 2022-06-19 18:09:09 : INFO : lcadvancedvpnclient : Latest version of LANCOM Advanced VPN Client is 4.61 2022-06-19 18:09:09 : WARN : lcadvancedvpnclient : DEBUG mode 1 enabled, not exiting, but there is no new version of app. 2022-06-19 18:09:09 : INFO : lcadvancedvpnclient : LANCOM Advanced VPN Client.dmg exists and DEBUG mode 1 enabled, skipping download 2022-06-19 18:09:09 : DEBUG : lcadvancedvpnclient : DEBUG mode 1, not checking for blocking processes 2022-06-19 18:09:09 : REQ : lcadvancedvpnclient : Installing LANCOM Advanced VPN Client 2022-06-19 18:09:09 : INFO : lcadvancedvpnclient : Mounting /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/LANCOM Advanced VPN Client.dmg 2022-06-19 18:09:09 : DEBUG : lcadvancedvpnclient : Debugging enabled, dmgmount output was: Die erwartete CRC32-Prüfsumme ist $137E58B2 /dev/disk4 GUID_partition_scheme /dev/disk4s1 Apple_HFS /Volumes/LANCOM Advanced VPN Client Installation 1 2022-06-19 18:09:09 : INFO : lcadvancedvpnclient : Mounted: /Volumes/LANCOM Advanced VPN Client Installation 1 2022-06-19 18:09:09 : DEBUG : lcadvancedvpnclient : Found pkg(s): /Volumes/LANCOM Advanced VPN Client Installation 1/LANCOM Advanced VPN Client.pkg 2022-06-19 18:09:09 : DEBUG : lcadvancedvpnclient : /Volumes/LANCOM Advanced VPN Client Installation 1/Uninstall.pkg 2022-06-19 18:09:09 : INFO : lcadvancedvpnclient : found pkg: /Volumes/LANCOM Advanced VPN Client Installation 1/LANCOM Advanced VPN Client.pkg 2022-06-19 18:09:09 : INFO : lcadvancedvpnclient : Verifying: /Volumes/LANCOM Advanced VPN Client Installation 1/LANCOM Advanced VPN Client.pkg 2022-06-19 18:09:09 : DEBUG : lcadvancedvpnclient : File list: -rw-r--r--@ 1 savvas staff 10M 20 Dez 10:54 /Volumes/LANCOM Advanced VPN Client Installation 1/LANCOM Advanced VPN Client.pkg 2022-06-19 18:09:09 : DEBUG : lcadvancedvpnclient : File type: /Volumes/LANCOM Advanced VPN Client Installation 1/LANCOM Advanced VPN Client.pkg: xar archive compressed TOC: 8307, SHA-1 checksum 2022-06-19 18:09:09 : DEBUG : lcadvancedvpnclient : spctlOut is /Volumes/LANCOM Advanced VPN Client Installation 1/LANCOM Advanced VPN Client.pkg: accepted 2022-06-19 18:09:09 : DEBUG : lcadvancedvpnclient : source=Notarized Developer ID 2022-06-19 18:09:09 : DEBUG : lcadvancedvpnclient : override=security disabled 2022-06-19 18:09:09 : DEBUG : lcadvancedvpnclient : origin=Developer ID Installer: NCP engineering GmbH (LL3KBL2M3A) 2022-06-19 18:09:09 : INFO : lcadvancedvpnclient : Team ID: LL3KBL2M3A (expected: LL3KBL2M3A ) 2022-06-19 18:09:10 : DEBUG : lcadvancedvpnclient : DEBUG enabled, skipping installation 2022-06-19 18:09:10 : INFO : lcadvancedvpnclient : Finishing... 2022-06-19 18:09:20 : INFO : lcadvancedvpnclient : App(s) found: /Applications/LANCOM Advanced VPN Client.app 2022-06-19 18:09:20 : INFO : lcadvancedvpnclient : found app at /Applications/LANCOM Advanced VPN Client.app, version 4.61, on versionKey CFBundleShortVersionString 2022-06-19 18:09:20 : REQ : lcadvancedvpnclient : Installed LANCOM Advanced VPN Client, version 4.61 2022-06-19 18:09:20 : INFO : lcadvancedvpnclient : notifying 2022-06-19 18:09:20 : DEBUG : lcadvancedvpnclient : Unmounting /Volumes/LANCOM Advanced VPN Client Installation 1 2022-06-19 18:09:20 : DEBUG : lcadvancedvpnclient : Debugging enabled, Unmounting output was: "disk4" ejected. 2022-06-19 18:09:20 : DEBUG : lcadvancedvpnclient : DEBUG mode 1, not reopening anything 2022-06-19 18:09:20 : REQ : lcadvancedvpnclient : All done! 2022-06-19 18:09:20 : REQ : lcadvancedvpnclient : ################## End Installomator, exit code 0 --- fragments/labels/lcadvancedvpnclient.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/lcadvancedvpnclient.sh diff --git a/fragments/labels/lcadvancedvpnclient.sh b/fragments/labels/lcadvancedvpnclient.sh new file mode 100644 index 0000000..9674336 --- /dev/null +++ b/fragments/labels/lcadvancedvpnclient.sh @@ -0,0 +1,7 @@ +lcadvancedvpnclient) + name="LANCOM Advanced VPN Client" + type="pkgInDmg" + appNewVersion=$(curl -fs https://www.ncp-e.com/de/service/download-vpn-client/ | grep -m 1 "NCP Secure Entry macOS Client" -A 1 | grep -i Version | sed "s|.*Version \(.*\) Rev.*|\\1|") + downloadURL=$(appShortVersion=`sed 's/[^0-9]//g' <<< $appNewVersion` && echo https://ftp.lancom.de/LANCOM-Releases/LC-VPN-Client/LC-Advanced-VPN-Client-macOS-"${appShortVersion}"-Rel-x86-64.dmg) + expectedTeamID="LL3KBL2M3A" + ;; From ae34d5591e916761223fd8a108a4de91a75ac4ff Mon Sep 17 00:00:00 2001 From: Fletcher Salesky Date: Mon, 20 Jun 2022 10:50:20 -0700 Subject: [PATCH 034/209] Update Wireshark download URL Update Wireshark to use version from appNewVersion to prevent grabbing dev builds. --- fragments/labels/wireshark.sh | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/fragments/labels/wireshark.sh b/fragments/labels/wireshark.sh index d293dd8..6932319 100644 --- a/fragments/labels/wireshark.sh +++ b/fragments/labels/wireshark.sh @@ -1,11 +1,11 @@ wireshark) name="Wireshark" type="dmg" - if [[ $(arch) == i386 ]]; then - downloadURL="https://1.as.dl.wireshark.org/osx/Wireshark%20Latest%20Intel%2064.dmg" - elif [[ $(arch) == arm64 ]]; then - downloadURL="https://1.as.dl.wireshark.org/osx/Wireshark%20Latest%20Arm%2064.dmg" - fi appNewVersion=$(curl -fs https://www.wireshark.org/download.html | grep -i "href.*_stable" | sed -E 's/.*\(([0-9.]*)\).*/\1/g') + if [[ $(arch) == i386 ]]; then + downloadURL="https://1.as.dl.wireshark.org/osx/Wireshark%20$appNewVersion%20Intel%2064.dmg" + elif [[ $(arch) == arm64 ]]; then + downloadURL="https://1.as.dl.wireshark.org/osx/Wireshark%20$appNewVersion%20Arm%2064.dmg" + fi expectedTeamID="7Z6EMTD2C6" ;; From 521d6e8672e38d0791ef41e0bc8c9b8a70a4d3ba Mon Sep 17 00:00:00 2001 From: Fletcher Salesky Date: Mon, 20 Jun 2022 15:13:27 -0700 Subject: [PATCH 035/209] Update awsvpnclient.sh --- fragments/labels/awsvpnclient.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/labels/awsvpnclient.sh b/fragments/labels/awsvpnclient.sh index dbc4885..1e97833 100644 --- a/fragments/labels/awsvpnclient.sh +++ b/fragments/labels/awsvpnclient.sh @@ -3,5 +3,5 @@ awsvpnclient) type="pkg" downloadURL="https://d20adtppz83p9s.cloudfront.net/OSX/latest/AWS_VPN_Client.pkg" expectedTeamID="94KV3E626L" - appNewVersion=$(curl -is "https://beta2.communitypatch.com/jamf/v1/ba1efae22ae74a9eb4e915c31fef5dd2/patch/AWSVPNClient" | grep currentVersion | tr ',' '\n' | grep currentVersion | cut -d '"' -f 4) + #appNewVersion=$(curl -is "https://beta2.communitypatch.com/jamf/v1/ba1efae22ae74a9eb4e915c31fef5dd2/patch/AWSVPNClient" | grep currentVersion | tr ',' '\n' | grep currentVersion | cut -d '"' -f 4) ;; From e0c4e0ca266c43df7df42cfdbef7bbaab2561d4f Mon Sep 17 00:00:00 2001 From: Thomas Martin Date: Wed, 22 Jun 2022 11:35:20 -0400 Subject: [PATCH 036/209] Create coconutbattery.sh Label for Coconut Battery. --- fragments/labels/coconutbattery.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/coconutbattery.sh diff --git a/fragments/labels/coconutbattery.sh b/fragments/labels/coconutbattery.sh new file mode 100644 index 0000000..562fdcc --- /dev/null +++ b/fragments/labels/coconutbattery.sh @@ -0,0 +1,7 @@ +coconutbattery) + name="coconutBattery" + type="zip" + downloadURL="https://coconut-flavour.com/downloads/coconutBattery_latest.zip" + appNewVersion=$(curl -fs https://www.coconut-flavour.com/coconutbattery/ | grep "" | sed -e 's/.*coconutBattery \(.*\) - by coconut-flavour.co.*/\1/') + expectedTeamID="R5SC3K86L5" + ;; \ No newline at end of file From aa4b3db04eb3d8c149ba44ed0113b5f44966f44f Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Thu, 23 Jun 2022 16:57:34 +0200 Subject: [PATCH 037/209] added packageID to boxtools --- fragments/labels/boxtools.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/fragments/labels/boxtools.sh b/fragments/labels/boxtools.sh index 11690f5..c6d3cb1 100644 --- a/fragments/labels/boxtools.sh +++ b/fragments/labels/boxtools.sh @@ -2,5 +2,6 @@ boxtools) name="Box Tools" type="pkg" downloadURL="https://box-installers.s3.amazonaws.com/boxedit/mac/currentrelease/BoxToolsInstaller.pkg" + packageID="com.box.boxtools.installer.boxedit" expectedTeamID="M683GB7CPW" ;; From 3cd367a1b0efa8665fa270ff5c8d052d22c92a86 Mon Sep 17 00:00:00 2001 From: duongt01 <92530753+duongt01@users.noreply.github.com> Date: Thu, 23 Jun 2022 16:47:25 -0500 Subject: [PATCH 038/209] New Label: Dynalist --- fragments/labels/dynalist.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/dynalist.sh diff --git a/fragments/labels/dynalist.sh b/fragments/labels/dynalist.sh new file mode 100644 index 0000000..df83b0e --- /dev/null +++ b/fragments/labels/dynalist.sh @@ -0,0 +1,7 @@ +dynalist) + name="Dynalist" + type="dmg" + downloadURL="https://dynalist.io/standalone/download?file=Dynalist.dmg" + appNewVersion="" + expectedTeamID="6JSW4SJWN9" + ;; \ No newline at end of file From 473fcb11d8a38136631e53d7b51d2bf748a97877 Mon Sep 17 00:00:00 2001 From: duongt01 <92530753+duongt01@users.noreply.github.com> Date: Thu, 23 Jun 2022 17:27:15 -0500 Subject: [PATCH 039/209] New Label: Fellow --- fragments/labels/fellow.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/fellow.sh diff --git a/fragments/labels/fellow.sh b/fragments/labels/fellow.sh new file mode 100644 index 0000000..7f8713d --- /dev/null +++ b/fragments/labels/fellow.sh @@ -0,0 +1,7 @@ +fellow) + name="Fellow" + type="dmg" + downloadURL="https://cdn.fellow.app/desktop/1.3.11/darwin/stable/universal/Fellow-1.3.11-universal.dmg" + appNewVersion="" + expectedTeamID="2NF46HY8D8" + ;; \ No newline at end of file From 1dfa162783047b4e29f98a846436630523e0ae37 Mon Sep 17 00:00:00 2001 From: MrAZisHere <hello@asri.pro> Date: Fri, 24 Jun 2022 20:40:48 +0800 Subject: [PATCH 040/209] Update sublimetext.sh download url has changed --- fragments/labels/sublimetext.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/labels/sublimetext.sh b/fragments/labels/sublimetext.sh index 5f63257..1fda13f 100644 --- a/fragments/labels/sublimetext.sh +++ b/fragments/labels/sublimetext.sh @@ -2,7 +2,7 @@ sublimetext) # credit: Søren Theilgaard (@theilgaard) name="Sublime Text" type="zip" - downloadURL="$(curl -fs https://www.sublimetext.com/download | grep -io "https://download.*_mac.zip")" + downloadURL="$(curl -fs "https://www.sublimetext.com/download_thanks?target=mac#direct-downloads" | grep -io "https://download.*_mac.zip" | head -1)" appNewVersion=$(curl -fs https://www.sublimetext.com/download | grep -i -A 4 "id.*changelog" | grep -io "Build [0-9]*") expectedTeamID="Z6D26JE4Y4" ;; From 66133a5520f4d37b676e9b720d9700d5aa93c6ed Mon Sep 17 00:00:00 2001 From: Chriscodinglife <chrisdotorellana@gmail.com> Date: Tue, 28 Jun 2022 15:18:41 -0400 Subject: [PATCH 041/209] Added the Fujifilm label for future dslr webcam fans --- fragments/labels/fujifilmwebcam.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/fujifilmwebcam.sh diff --git a/fragments/labels/fujifilmwebcam.sh b/fragments/labels/fujifilmwebcam.sh new file mode 100644 index 0000000..994d03a --- /dev/null +++ b/fragments/labels/fujifilmwebcam.sh @@ -0,0 +1,7 @@ +fujifilmwebcam) + name="FUJIFILM X Webcam 2" + type="pkg" + downloadURL=$(curl -fs "https://fujifilm-x.com/en-us/support/download/software/x-webcam/" | grep "https.*pkg" | sed -E 's/.*(https:\/\/dl.fujifilm-x\.com\/support\/software\/.*\.pkg[^\<]).*/\1/g' | sed -e 's/^"//' -e 's/"$//') + appNewVersion=$( echo “${downloadURL}” | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)\..*/\1/g' ) + expectedTeamID="34LRP8AV2M" + ;; From a84b14234e02395cf80dda401d106c08a82b1051 Mon Sep 17 00:00:00 2001 From: Chriscodinglife <chrisdotorellana@gmail.com> Date: Tue, 28 Jun 2022 16:36:41 -0400 Subject: [PATCH 042/209] Corrected appnewversion variable with sed grabbing the version number displayed in the package file --- fragments/labels/fujifilmwebcam.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/labels/fujifilmwebcam.sh b/fragments/labels/fujifilmwebcam.sh index 994d03a..ebeaf03 100644 --- a/fragments/labels/fujifilmwebcam.sh +++ b/fragments/labels/fujifilmwebcam.sh @@ -2,6 +2,6 @@ fujifilmwebcam) name="FUJIFILM X Webcam 2" type="pkg" downloadURL=$(curl -fs "https://fujifilm-x.com/en-us/support/download/software/x-webcam/" | grep "https.*pkg" | sed -E 's/.*(https:\/\/dl.fujifilm-x\.com\/support\/software\/.*\.pkg[^\<]).*/\1/g' | sed -e 's/^"//' -e 's/"$//') - appNewVersion=$( echo “${downloadURL}” | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)\..*/\1/g' ) + appNewVersion=$( echo “${downloadURL}” | sed -E 's/.*XWebcamIns([0-9]*).*/\1/g' ) expectedTeamID="34LRP8AV2M" ;; From 3fd88f62075846647e107c2f26965decd68385f4 Mon Sep 17 00:00:00 2001 From: Chriscodinglife <chrisdotorellana@gmail.com> Date: Tue, 28 Jun 2022 16:43:41 -0400 Subject: [PATCH 043/209] Corrected the version grab one more time --- fragments/labels/fujifilmwebcam.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/labels/fujifilmwebcam.sh b/fragments/labels/fujifilmwebcam.sh index ebeaf03..aca799d 100644 --- a/fragments/labels/fujifilmwebcam.sh +++ b/fragments/labels/fujifilmwebcam.sh @@ -2,6 +2,6 @@ fujifilmwebcam) name="FUJIFILM X Webcam 2" type="pkg" downloadURL=$(curl -fs "https://fujifilm-x.com/en-us/support/download/software/x-webcam/" | grep "https.*pkg" | sed -E 's/.*(https:\/\/dl.fujifilm-x\.com\/support\/software\/.*\.pkg[^\<]).*/\1/g' | sed -e 's/^"//' -e 's/"$//') - appNewVersion=$( echo “${downloadURL}” | sed -E 's/.*XWebcamIns([0-9]*).*/\1/g' ) + appNewVersion=$( echo “${downloadURL}” | sed -E 's/.*XWebcamIns([0-9]*).*/\1/g' | sed -E 's/([0-9])([0-9]).*/\1\.\2/g' expectedTeamID="34LRP8AV2M" ;; From 811680083512813a13e673ff5a7db96957a0321b Mon Sep 17 00:00:00 2001 From: Chriscodinglife <chrisdotorellana@gmail.com> Date: Tue, 28 Jun 2022 16:45:15 -0400 Subject: [PATCH 044/209] Added the much needed ending ) --- fragments/labels/fujifilmwebcam.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/labels/fujifilmwebcam.sh b/fragments/labels/fujifilmwebcam.sh index aca799d..26d29a2 100644 --- a/fragments/labels/fujifilmwebcam.sh +++ b/fragments/labels/fujifilmwebcam.sh @@ -2,6 +2,6 @@ fujifilmwebcam) name="FUJIFILM X Webcam 2" type="pkg" downloadURL=$(curl -fs "https://fujifilm-x.com/en-us/support/download/software/x-webcam/" | grep "https.*pkg" | sed -E 's/.*(https:\/\/dl.fujifilm-x\.com\/support\/software\/.*\.pkg[^\<]).*/\1/g' | sed -e 's/^"//' -e 's/"$//') - appNewVersion=$( echo “${downloadURL}” | sed -E 's/.*XWebcamIns([0-9]*).*/\1/g' | sed -E 's/([0-9])([0-9]).*/\1\.\2/g' + appNewVersion=$( echo “${downloadURL}” | sed -E 's/.*XWebcamIns([0-9]*).*/\1/g' | sed -E 's/([0-9])([0-9]).*/\1\.\2/g') expectedTeamID="34LRP8AV2M" ;; From 09a34c05b7a41ee6b8f04307c6a6bf6db7de5dc2 Mon Sep 17 00:00:00 2001 From: duongt01 <92530753+duongt01@users.noreply.github.com> Date: Tue, 28 Jun 2022 16:10:29 -0500 Subject: [PATCH 045/209] New Label: Fellow --- fragments/labels/fellow | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/fellow diff --git a/fragments/labels/fellow b/fragments/labels/fellow new file mode 100644 index 0000000..9fddce1 --- /dev/null +++ b/fragments/labels/fellow @@ -0,0 +1,7 @@ +fellow) + name="Fellow" + type="dmg" + downloadURL="https://fellow.app/desktop/download/darwin/latest/" + appNewVersion="$(curl -fsIL "${downloadURL}" | grep -i ^location | sed 's/^.*[^0-9]\([0-9]*\.[0-9]*\.[0-9]*\).*$/\1/' | head -1)" + expectedTeamID="2NF46HY8D8" + ;; From 05816942ccc3ffdaa46dac28e3cb4296ea19dabd Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Mon, 4 Jul 2022 13:15:22 +0200 Subject: [PATCH 046/209] New Label: Parallels Client MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit "Access Windows Applications, Desktops, or Data on Any Device Parallels® Client is a lightweight software that enables end-users to securely access virtual applications and desktops from Windows, Mac, Linux, iOS/iPadOS, Android, Google Chromebook and any HTML5 web browser." ./assemble.sh -l /Desktop/Mosyle/Resources/InstallomatorLabels rasclient NOTIFY=silent DEBUG=0 Password: 2022-07-04 12:59:53 : WARN : rasclient : setting variable from argument NOTIFY=silent 2022-07-04 12:59:53 : WARN : rasclient : setting variable from argument DEBUG=0 2022-07-04 12:59:53 : REQ : rasclient : ################## Start Installomator v. 10.0beta, date 2022-07-04 2022-07-04 12:59:53 : INFO : rasclient : ################## Version: 10.0beta 2022-07-04 12:59:53 : INFO : rasclient : ################## Date: 2022-07-04 2022-07-04 12:59:53 : INFO : rasclient : ################## rasclient 2022-07-04 12:59:53 : INFO : rasclient : BLOCKING_PROCESS_ACTION=tell_user 2022-07-04 12:59:53 : INFO : rasclient : NOTIFY=silent 2022-07-04 12:59:53 : INFO : rasclient : LOGGING=INFO 2022-07-04 12:59:53 : INFO : rasclient : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-07-04 12:59:53 : INFO : rasclient : Label type: pkg 2022-07-04 12:59:53 : INFO : rasclient : archiveName: Parallels Client.pkg 2022-07-04 12:59:53 : INFO : rasclient : no blocking processes defined, using Parallels Client as default 2022-07-04 12:59:53 : INFO : rasclient : App(s) found: /Applications/Parallels Client.app 2022-07-04 12:59:53 : INFO : rasclient : found app at /Applications/Parallels Client.app, version 18.3.22907, on versionKey CFBundleShortVersionString 2022-07-04 12:59:53 : INFO : rasclient : appversion: 18.3.22907 2022-07-04 12:59:53 : INFO : rasclient : Latest version of Parallels Client is 18.3.1.22907 2022-07-04 12:59:53 : REQ : rasclient : Downloading https://download.parallels.com/ras/v18/18.3.1.22907/RasClient-Mac-Notarized-18.3.1-22907.pkg to Parallels Client.pkg 2022-07-04 12:59:55 : REQ : rasclient : no more blocking processes, continue with update 2022-07-04 12:59:55 : REQ : rasclient : Installing Parallels Client 2022-07-04 12:59:55 : INFO : rasclient : Verifying: Parallels Client.pkg 2022-07-04 12:59:55 : INFO : rasclient : Team ID: 4C6364ACXT (expected: 4C6364ACXT ) 2022-07-04 12:59:55 : INFO : rasclient : Installing Parallels Client.pkg to / 2022-07-04 13:00:02 : INFO : rasclient : Finishing... 2022-07-04 13:00:12 : INFO : rasclient : App(s) found: /Applications/Parallels Client.app 2022-07-04 13:00:12 : INFO : rasclient : found app at /Applications/Parallels Client.app, version 18.3.22907, on versionKey CFBundleShortVersionString 2022-07-04 13:00:12 : REQ : rasclient : Installed Parallels Client, version 18.3.22907 2022-07-04 13:00:12 : INFO : rasclient : App not closed, so no reopen. 2022-07-04 13:00:12 : REQ : rasclient : All done! 2022-07-04 13:00:12 : REQ : rasclient : ################## End Installomator, exit code 0 --- fragments/labels/rasclient.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/rasclient.sh diff --git a/fragments/labels/rasclient.sh b/fragments/labels/rasclient.sh new file mode 100644 index 0000000..20d10dd --- /dev/null +++ b/fragments/labels/rasclient.sh @@ -0,0 +1,7 @@ +rasclient) + name="Parallels Client" + type="pkg" + appNewVersion=$(curl -sf "https://download.parallels.com/ras/v18/RAS%20Client%20for%20Mac%20Changelog.txt" | grep -m 1 "Parallels Client for Mac Version" | sed "s|.*Version \(.*\) -.*|\\1|" | sed 's/ /./g' | sed 's/[^0-9.]//g') + downloadURL=$(appMajorVersion=`sed 's/\..*//' <<< $appNewVersion` && appHyphenVersion=`curl -sf "https://download.parallels.com/ras/v18/RAS%20Client%20for%20Mac%20Changelog.txt" | grep -m 1 "Parallels Client for Mac Version" | sed "s|.*Version \(.*\) -.*|\\1|" | sed 's/ /-/g' | sed 's/[^0-9.-]//g'` && echo https://download.parallels.com/ras/v"$appMajorVersion"/"$appNewVersion"/RasClient-Mac-Notarized-"$appHyphenVersion".pkg) + expectedTeamID="4C6364ACXT" + ;; From face2a7e934508989989550ef086b6a0d77ae6fa Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Mon, 4 Jul 2022 15:46:02 +0200 Subject: [PATCH 047/209] New Label: Filemaker Pro MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit "FileMaker is a cross-platform relational database application from Claris International, a subsidiary of Apple Inc. It integrates a database engine with a graphical user interface (GUI) and security features, allowing users to modify a database by dragging new elements into layouts, screens, or forms. It is available in desktop, server, iOS and web-delivery configurations" ./assemble.sh -l /Desktop/Mosyle/Resources/InstallomatorLabels filemakerpro 2022-07-04 15:35:36 : REQ : filemakerpro : ################## Start Installomator v. 10.0beta, date 2022-07-04 2022-07-04 15:35:36 : INFO : filemakerpro : ################## Version: 10.0beta 2022-07-04 15:35:36 : INFO : filemakerpro : ################## Date: 2022-07-04 2022-07-04 15:35:36 : INFO : filemakerpro : ################## filemakerpro 2022-07-04 15:35:37 : DEBUG : filemakerpro : DEBUG mode 1 enabled. 2022-07-04 15:35:37 : INFO : filemakerpro : BLOCKING_PROCESS_ACTION=tell_user 2022-07-04 15:35:37 : INFO : filemakerpro : NOTIFY=success 2022-07-04 15:35:37 : INFO : filemakerpro : LOGGING=DEBUG 2022-07-04 15:35:37 : INFO : filemakerpro : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-07-04 15:35:37 : INFO : filemakerpro : Label type: dmg 2022-07-04 15:35:37 : INFO : filemakerpro : archiveName: FileMaker Pro.dmg 2022-07-04 15:35:37 : INFO : filemakerpro : no blocking processes defined, using FileMaker Pro as default 2022-07-04 15:35:37 : DEBUG : filemakerpro : Changing directory to /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build 2022-07-04 15:35:37 : INFO : filemakerpro : App(s) found: /Applications/FileMaker Pro.app 2022-07-04 15:35:37 : INFO : filemakerpro : found app at /Applications/FileMaker Pro.app, version 19.5.1.36, on versionKey BuildVersion 2022-07-04 15:35:37 : INFO : filemakerpro : appversion: 19.5.1.36 2022-07-04 15:35:37 : INFO : filemakerpro : Latest version of FileMaker Pro is 19.5.1.36 2022-07-04 15:35:37 : WARN : filemakerpro : DEBUG mode 1 enabled, not exiting, but there is no new version of app. 2022-07-04 15:35:37 : INFO : filemakerpro : FileMaker Pro.dmg exists and DEBUG mode 1 enabled, skipping download 2022-07-04 15:35:37 : DEBUG : filemakerpro : DEBUG mode 1, not checking for blocking processes 2022-07-04 15:35:37 : REQ : filemakerpro : Installing FileMaker Pro 2022-07-04 15:35:37 : INFO : filemakerpro : Mounting /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/FileMaker Pro.dmg 2022-07-04 15:35:38 : DEBUG : filemakerpro : Debugging enabled, dmgmount output was: Die erwartete CRC32-Prüfsumme ist $4150F8F9 /dev/disk2 GUID_partition_scheme /dev/disk2s1 Apple_HFS /Volumes/FileMaker Pro 19 2022-07-04 15:35:38 : INFO : filemakerpro : Mounted: /Volumes/FileMaker Pro 19 2022-07-04 15:35:38 : INFO : filemakerpro : Verifying: /Volumes/FileMaker Pro 19/FileMaker Pro.app 2022-07-04 15:35:38 : DEBUG : filemakerpro : App size: 966M /Volumes/FileMaker Pro 19/FileMaker Pro.app 2022-07-04 15:38:04 : DEBUG : filemakerpro : Debugging enabled, App Verification output was: /Volumes/FileMaker Pro 19/FileMaker Pro.app: accepted source=Notarized Developer ID origin=Developer ID Application: Claris International Inc. (J6K4T76U7W) 2022-07-04 15:38:04 : INFO : filemakerpro : Team ID matching: J6K4T76U7W (expected: J6K4T76U7W ) 2022-07-04 15:38:04 : INFO : filemakerpro : Downloaded version of FileMaker Pro is 19.5.1.36 on versionKey BuildVersion, same as installed. 2022-07-04 15:38:04 : DEBUG : filemakerpro : Unmounting /Volumes/FileMaker Pro 19 2022-07-04 15:38:05 : DEBUG : filemakerpro : Debugging enabled, Unmounting output was: "disk2" ejected. 2022-07-04 15:38:05 : DEBUG : filemakerpro : DEBUG mode 1, not reopening anything 2022-07-04 15:38:05 : REG : filemakerpro : No new version to install 2022-07-04 15:38:05 : REQ : filemakerpro : ################## End Installomator, exit code 0 --- fragments/labels/filemakerpro.sh | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 fragments/labels/filemakerpro.sh diff --git a/fragments/labels/filemakerpro.sh b/fragments/labels/filemakerpro.sh new file mode 100644 index 0000000..f6c7a80 --- /dev/null +++ b/fragments/labels/filemakerpro.sh @@ -0,0 +1,8 @@ +filemakerpro) + name="FileMaker Pro" + type="dmg" + versionKey="BuildVersion" + downloadURL=$(curl -fs https://www.filemaker.com/redirects/ss.txt | grep '\"PRO..MAC\"' | tail -1 | sed "s|.*url\":\"\(.*\)\".*|\\1|") + appNewVersion=$(curl -fs https://www.filemaker.com/redirects/ss.txt | grep '\"PRO..MAC\"' | tail -1 | sed "s|.*fmp_\(.*\).dmg.*|\\1|") + expectedTeamID="J6K4T76U7W" + ;; From 6d7a64667f6185899f7a0e155bc0ae0ec89f758a Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Mon, 4 Jul 2022 23:55:38 +0200 Subject: [PATCH 048/209] New Label: Horos MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit "Horos™ is a free, open source medical image viewer. The goal of the Horos Project is to develop a fully functional, 64-bit medical image viewer for OS X. Horos is based upon OsiriX and other open source medical imaging libraries. Horos is made freely available under the GNU Lesser General Public License, Version 3 (LGPL-3.0)" ./assemble.sh -l /Desktop/Mosyle/Resources/InstallomatorLabels horos 2022-07-04 23:48:31 : REQ : horos : ################## Start Installomator v. 10.0beta, date 2022-07-04 2022-07-04 23:48:31 : INFO : horos : ################## Version: 10.0beta 2022-07-04 23:48:31 : INFO : horos : ################## Date: 2022-07-04 2022-07-04 23:48:31 : INFO : horos : ################## horos 2022-07-04 23:48:31 : DEBUG : horos : DEBUG mode 1 enabled. 2022-07-04 23:48:31 : INFO : horos : BLOCKING_PROCESS_ACTION=tell_user 2022-07-04 23:48:31 : INFO : horos : NOTIFY=success 2022-07-04 23:48:31 : INFO : horos : LOGGING=DEBUG 2022-07-04 23:48:31 : INFO : horos : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-07-04 23:48:31 : INFO : horos : Label type: dmg 2022-07-04 23:48:31 : INFO : horos : archiveName: Horos.dmg 2022-07-04 23:48:31 : INFO : horos : no blocking processes defined, using Horos as default 2022-07-04 23:48:31 : DEBUG : horos : Changing directory to /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build 2022-07-04 23:48:31 : INFO : horos : App(s) found: /Applications/Horos.app 2022-07-04 23:48:32 : INFO : horos : found app at /Applications/Horos.app, version Horos v4.0.0 RC5, on versionKey CFBundleGetInfoString 2022-07-04 23:48:32 : INFO : horos : appversion: Horos v4.0.0 RC5 2022-07-04 23:48:32 : INFO : horos : Latest version of Horos is 4.0.0RC5 2022-07-04 23:48:32 : INFO : horos : Horos.dmg exists and DEBUG mode 1 enabled, skipping download 2022-07-04 23:48:32 : DEBUG : horos : DEBUG mode 1, not checking for blocking processes 2022-07-04 23:48:32 : REQ : horos : Installing Horos 2022-07-04 23:48:32 : INFO : horos : Mounting /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/Horos.dmg 2022-07-04 23:48:33 : DEBUG : horos : Debugging enabled, dmgmount output was: SOFTWARE LICENSE: By initiating this download and installation you acknowledge and agree that this software application is not intended for medical usage or diagnostic purposes. ============================================ Horos is free software: you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation,  version 3 of the License. The Horos Project was based originally upon the OsiriX Project which at the time of the code fork was licensed as a LGPL project. However, not all of the the source-code was properly documented and file headers were not all updated with the appropriate license terms. The Horos Project, originally was licensed under the GNU GPL license. However, contributors to the software since that time have agreed to modify the license to the GNU LGPL in order to be conform to the changes previously made to the OsiriX Project. Horos is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY EXPRESS OR IMPLIED, INCLUDING ANY WARRANTY OF MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE OR USE.   See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with Horos.  If not, see http://www.gnu.org/licenses/lgpl.html Prior versions of this file were published by the OsiriX team pursuant to the below notice and licensing protocol. ============================================ Program:   OsiriX Copyright (c) OsiriX Team All rights reserved. Distributed under GNU - LGPL   See http://www.osirix-viewer.com/copyright.html for details. This software is distributed WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. ============================================ This version of Horos is linked against the Grok JPEG 2000 library, for fast viewing of JPEG 2000 images. https://github.com/GrokImageCompression/grok The Grok JPEG 2000 library is licensed under the terms of the GNU Affero General Public License as follows Copyright (C) 2016 Grok Image Compression Inc. This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License, version 3, as published by the Free Software Foundation. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details. You should have received a copy of the GNU Affero General Public License along with this program. If not, see <http://www.gnu.org/licenses/>. ============================================ GNU LESSER GENERAL PUBLIC LICENSE GNU LESSER GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright © 2007 Free Software Foundation, Inc. <https://fsf.org/> Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. This version of the GNU Lesser General Public License incorporates the terms and conditions of version 3 of the GNU General Public License, supplemented by the additional permissions listed below. 0. Additional Definitions. As used herein, “this License” refers to version 3 of the GNU Lesser General Public License, and the “GNU GPL” refers to version 3 of the GNU General Public License. “The Library” refers to a covered work governed by this License, other than an Application or a Combined Work as defined below. An “Application” is any work that makes use of an interface provided by the Library, but which is not otherwise based on the Library. Defining a subclass of a class defined by the Library is deemed a mode of using an interface provided by the Library. A “Combined Work” is a work produced by combining or linking an Application with the Library. The particular version of the Library with which the Combined Work was made is also called the “Linked Version”. The “Minimal Corresponding Source” for a Combined Work means the Corresponding Source for the Combined Work, excluding any source code for portions of the Combined Work that, considered in isolation, are based on the Application, and not on the Linked Version. The “Corresponding Application Code” for a Combined Work means the object code and/or source code for the Application, including any data and utility programs needed for reproducing the Combined Work from the Application, but excluding the System Libraries of the Combined Work. 1. Exception to Section 3 of the GNU GPL. You may convey a covered work under sections 3 and 4 of this License without being bound by section 3 of the GNU GPL. 2. Conveying Modified Versions. If you modify a copy of the Library, and, in your modifications, a facility refers to a function or data to be supplied by an Application that uses the facility (other than as an argument passed when the facility is invoked), then you may convey a copy of the modified version: a) under this License, provided that you make a good faith effort to ensure that, in the event an Application does not supply the function or data, the facility still operates, and performs whatever part of its purpose remains meaningful, or b) under the GNU GPL, with none of the additional permissions of this License applicable to that copy. 3. Object Code Incorporating Material from Library Header Files. The object code form of an Application may incorporate material from a header file that is part of the Library. You may convey such object code under terms of your choice, provided that, if the incorporated material is not limited to numerical parameters, data structure layouts and accessors, or small macros, inline functions and templates (ten or fewer lines in length), you do both of the following: a) Give prominent notice with each copy of the object code that the Library is used in it and that the Library and its use are covered by this License. b) Accompany the object code with a copy of the GNU GPL and this license document. 4. Combined Works. You may convey a Combined Work under terms of your choice that, taken together, effectively do not restrict modification of the portions of the Library contained in the Combined Work and reverse engineering for debugging such modifications, if you also do each of the following: a) Give prominent notice with each copy of the Combined Work that the Library is used in it and that the Library and its use are covered by this License. b) Accompany the Combined Work with a copy of the GNU GPL and this license document. c) For a Combined Work that displays copyright notices during execution, include the copyright notice for the Library among these notices, as well as a reference directing the user to the copies of the GNU GPL and this license document. d) Do one of the following: 0) Convey the Minimal Corresponding Source under the terms of this License, and the Corresponding Application Code in a form suitable for, and under terms that permit, the user to recombine or relink the Application with a modified version of the Linked Version to produce a modified Combined Work, in the manner specified by section 6 of the GNU GPL for conveying Corresponding Source. 1) Use a suitable shared library mechanism for linking with the Library. A suitable mechanism is one that (a) uses at run time a copy of the Library already present on the user's computer system, and (b) will operate properly with a modified version of the Library that is interface-compatible with the Linked Version. e) Provide Installation Information, but only if you would otherwise be required to provide such information under section 6 of the GNU GPL, and only to the extent that such information is necessary to install and execute a modified version of the Combined Work produced by recombining or relinking the Application with a modified version of the Linked Version. (If you use option 4d0, the Installation Information must accompany the Minimal Corresponding Source and Corresponding Application Code. If you use option 4d1, you must provide the Installation Information in the manner specified by section 6 of the GNU GPL for conveying Corresponding Source.) 5. Combined Libraries. You may place library facilities that are a work based on the Library side by side in a single library together with other library facilities that are not Applications and are not covered by this License, and convey such a combined library under terms of your choice, if you do both of the following: a) Accompany the combined library with a copy of the same work based on the Library, uncombined with any other library facilities, conveyed under the terms of this License. b) Give prominent notice with the combined library that part of it is a work based on the Library, and explaining where to find the accompanying uncombined form of the same work. 6. Revised Versions of the GNU Lesser General Public License. The Free Software Foundation may publish revised and/or new versions of the GNU Lesser General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Library as you received it specifies that a certain numbered version of the GNU Lesser General Public License “or any later version” applies to it, you have the option of following the terms and conditions either of that published version or of any later version published by the Free Software Foundation. If the Library as you received it does not specify a version number of the GNU Lesser General Public License, you may choose any version of the GNU Lesser General Public License ever published by the Free Software Foundation. If the Library as you received it specifies that a proxy can decide whether future versions of the GNU Lesser General Public License shall apply, that proxy's public statement of acceptance of any version is permanent authorization for you to choose that version for the Library. =============================================================================================================== GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright © 2007 Free Software Foundation, Inc. <https://fsf.org/> Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The GNU General Public License is a free, copyleft license for software and other kinds of works. The licenses for most software and other practical works are designed to take away your freedom to share and change the works. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change all versions of a program--to make sure it remains free software for all its users. We, the Free Software Foundation, use the GNU General Public License for most of our software; it applies also to any other work released this way by its authors. You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for them if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs, and that you know you can do these things. To protect your rights, we need to prevent others from denying you these rights or asking you to surrender the rights. Therefore, you have certain responsibilities if you distribute copies of the software, or if you modify it: responsibilities to respect the freedom of others. For example, if you distribute copies of such a program, whether gratis or for a fee, you must pass on to the recipients the same freedoms that you received. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. Developers that use the GNU GPL protect your rights with two steps: (1) assert copyright on the software, and (2) offer you this License giving you legal permission to copy, distribute and/or modify it. For the developers' and authors' protection, the GPL clearly explains that there is no warranty for this free software. For both users' and authors' sake, the GPL requires that modified versions be marked as changed, so that their problems will not be attributed erroneously to authors of previous versions. Some devices are designed to deny users access to install or run modified versions of the software inside them, although the manufacturer can do so. This is fundamentally incompatible with the aim of protecting users' freedom to change the software. The systematic pattern of such abuse occurs in the area of products for individuals to use, which is precisely where it is most unacceptable. Therefore, we have designed this version of the GPL to prohibit the practice for those products. If such problems arise substantially in other domains, we stand ready to extend this provision to those domains in future versions of the GPL, as needed to protect the freedom of users. Finally, every program is threatened constantly by software patents. States should not allow patents to restrict development and use of software on general-purpose computers, but in those that do, we wish to avoid the special danger that patents applied to a free program could make it effectively proprietary. To prevent this, the GPL assures that patents cannot be used to render the program non-free. The precise terms and conditions for copying, distribution and modification follow. TERMS AND CONDITIONS 0. Definitions. “This License” refers to version 3 of the GNU General Public License. “Copyright” also means copyright-like laws that apply to other kinds of works, such as semiconductor masks. “The Program” refers to any copyrightable work licensed under this License. Each licensee is addressed as “you”. “Licensees” and “recipients” may be individuals or organizations. To “modify” a work means to copy from or adapt all or part of the work in a fashion requiring copyright permission, other than the making of an exact copy. The resulting work is called a “modified version” of the earlier work or a work “based on” the earlier work. A “covered work” means either the unmodified Program or a work based on the Program. To “propagate” a work means to do anything with it that, without permission, would make you directly or secondarily liable for infringement under applicable copyright law, except executing it on a computer or modifying a private copy. Propagation includes copying, distribution (with or without modification), making available to the public, and in some countries other activities as well. To “convey” a work means any kind of propagation that enables other parties to make or receive copies. Mere interaction with a user through a computer network, with no transfer of a copy, is not conveying. An interactive user interface displays “Appropriate Legal Notices” to the extent that it includes a convenient and prominently visible feature that (1) displays an appropriate copyright notice, and (2) tells the user that there is no warranty for the work (except to the extent that warranties are provided), that licensees may convey the work under this License, and how to view a copy of this License. If the interface presents a list of user commands or options, such as a menu, a prominent item in the list meets this criterion. 1. Source Code. The “source code” for a work means the preferred form of the work for making modifications to it. “Object code” means any non-source form of a work. A “Standard Interface” means an interface that either is an official standard defined by a recognized standards body, or, in the case of interfaces specified for a particular programming language, one that is widely used among developers working in that language. The “System Libraries” of an executable work include anything, other than the work as a whole, that (a) is included in the normal form of packaging a Major Component, but which is not part of that Major Component, and (b) serves only to enable use of the work with that Major Component, or to implement a Standard Interface for which an implementation is available to the public in source code form. A “Major Component”, in this context, means a major essential component (kernel, window system, and so on) of the specific operating system (if any) on which the executable work runs, or a compiler used to produce the work, or an object code interpreter used to run it. The “Corresponding Source” for a work in object code form means all the source code needed to generate, install, and (for an executable work) run the object code and to modify the work, including scripts to control those activities. However, it does not include the work's System Libraries, or general-purpose tools or generally available free programs which are used unmodified in performing those activities but which are not part of the work. For example, Corresponding Source includes interface definition files associated with source files for the work, and the source code for shared libraries and dynamically linked subprograms that the work is specifically designed to require, such as by intimate data communication or control flow between those subprograms and other parts of the work. The Corresponding Source need not include anything that users can regenerate automatically from other parts of the Corresponding Source. The Corresponding Source for a work in source code form is that same work. 2. Basic Permissions. All rights granted under this License are granted for the term of copyright on the Program, and are irrevocable provided the stated conditions are met. This License explicitly affirms your unlimited permission to run the unmodified Program. The output from running a covered work is covered by this License only if the output, given its content, constitutes a covered work. This License acknowledges your rights of fair use or other equivalent, as provided by copyright law. You may make, run and propagate covered works that you do not convey, without conditions so long as your license otherwise remains in force. You may convey covered works to others for the sole purpose of having them make modifications exclusively for you, or provide you with facilities for running those works, provided that you comply with the terms of this License in conveying all material for which you do not control copyright. Those thus making or running the covered works for you must do so exclusively on your behalf, under your direction and control, on terms that prohibit them from making any copies of your copyrighted material outside their relationship with you. Conveying under any other circumstances is permitted solely under the conditions stated below. Sublicensing is not allowed; section 10 makes it unnecessary. 3. Protecting Users' Legal Rights From Anti-Circumvention Law. No covered work shall be deemed part of an effective technological measure under any applicable law fulfilling obligations under article 11 of the WIPO copyright treaty adopted on 20 December 1996, or similar laws prohibiting or restricting circumvention of such measures. When you convey a covered work, you waive any legal power to forbid circumvention of technological measures to the extent such circumvention is effected by exercising rights under this License with respect to the covered work, and you disclaim any intention to limit operation or modification of the work as a means of enforcing, against the work's users, your or third parties' legal rights to forbid circumvention of technological measures. 4. Conveying Verbatim Copies. You may convey verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice; keep intact all notices stating that this License and any non-permissive terms added in accord with section 7 apply to the code; keep intact all notices of the absence of any warranty; and give all recipients a copy of this License along with the Program. You may charge any price or no price for each copy that you convey, and you may offer support or warranty protection for a fee. 5. Conveying Modified Source Versions. You may convey a work based on the Program, or the modifications to produce it from the Program, in the form of source code under the terms of section 4, provided that you also meet all of these conditions: a) The work must carry prominent notices stating that you modified it, and giving a relevant date. b) The work must carry prominent notices stating that it is released under this License and any conditions added under section 7. This requirement modifies the requirement in section 4 to “keep intact all notices”. c) You must license the entire work, as a whole, under this License to anyone who comes into possession of a copy. This License will therefore apply, along with any applicable section 7 additional terms, to the whole of the work, and all its parts, regardless of how they are packaged. This License gives no permission to license the work in any other way, but it does not invalidate such permission if you have separately received it. d) If the work has interactive user interfaces, each must display Appropriate Legal Notices; however, if the Program has interactive interfaces that do not display Appropriate Legal Notices, your work need not make them do so. A compilation of a covered work with other separate and independent works, which are not by their nature extensions of the covered work, and which are not combined with it such as to form a larger program, in or on a volume of a storage or distribution medium, is called an “aggregate” if the compilation and its resulting copyright are not used to limit the access or legal rights of the compilation's users beyond what the individual works permit. Inclusion of a covered work in an aggregate does not cause this License to apply to the other parts of the aggregate. 6. Conveying Non-Source Forms. You may convey a covered work in object code form under the terms of sections 4 and 5, provided that you also convey the machine-readable Corresponding Source under the terms of this License, in one of these ways: a) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by the Corresponding Source fixed on a durable physical medium customarily used for software interchange. b) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by a written offer, valid for at least three years and valid for as long as you offer spare parts or customer support for that product model, to give anyone who possesses the object code either (1) a copy of the Corresponding Source for all the software in the product that is covered by this License, on a durable physical medium customarily used for software interchange, for a price no more than your reasonable cost of physically performing this conveying of source, or (2) access to copy the Corresponding Source from a network server at no charge. c) Convey individual copies of the object code with a copy of the written offer to provide the Corresponding Source. This alternative is allowed only occasionally and noncommercially, and only if you received the object code with such an offer, in accord with subsection 6b. d) Convey the object code by offering access from a designated place (gratis or for a charge), and offer equivalent access to the Corresponding Source in the same way through the same place at no further charge. You need not require recipients to copy the Corresponding Source along with the object code. If the place to copy the object code is a network server, the Corresponding Source may be on a different server (operated by you or a third party) that supports equivalent copying facilities, provided you maintain clear directions next to the object code saying where to find the Corresponding Source. Regardless of what server hosts the Corresponding Source, you remain obligated to ensure that it is available for as long as needed to satisfy these requirements. e) Convey the object code using peer-to-peer transmission, provided you inform other peers where the object code and Corresponding Source of the work are being offered to the general public at no charge under subsection 6d. A separable portion of the object code, whose source code is excluded from the Corresponding Source as a System Library, need not be included in conveying the object code work. A “User Product” is either (1) a “consumer product”, which means any tangible personal property which is normally used for personal, family, or household purposes, or (2) anything designed or sold for incorporation into a dwelling. In determining whether a product is a consumer product, doubtful cases shall be resolved in favor of coverage. For a particular product received by a particular user, “normally used” refers to a typical or common use of that class of product, regardless of the status of the particular user or of the way in which the particular user actually uses, or expects or is expected to use, the product. A product is a consumer product regardless of whether the product has substantial commercial, industrial or non-consumer uses, unless such uses represent the only significant mode of use of the product. “Installation Information” for a User Product means any methods, procedures, authorization keys, or other information required to install and execute modified versions of a covered work in that User Product from a modified version of its Corresponding Source. The information must suffice to ensure that the continued functioning of the modified object code is in no case prevented or interfered with solely because modification has been made. If you convey an object code work under this section in, or with, or specifically for use in, a User Product, and the conveying occurs as part of a transaction in which the right of possession and use of the User Product is transferred to the recipient in perpetuity or for a fixed term (regardless of how the transaction is characterized), the Corresponding Source conveyed under this section must be accompanied by the Installation Information. But this requirement does not apply if neither you nor any third party retains the ability to install modified object code on the User Product (for example, the work has been installed in ROM). The requirement to provide Installation Information does not include a requirement to continue to provide support service, warranty, or updates for a work that has been modified or installed by the recipient, or for the User Product in which it has been modified or installed. Access to a network may be denied when the modification itself materially and adversely affects the operation of the network or violates the rules and protocols for communication across the network. Corresponding Source conveyed, and Installation Information provided, in accord with this section must be in a format that is publicly documented (and with an implementation available to the public in source code form), and must require no special password or key for unpacking, reading or copying. 7. Additional Terms. “Additional permissions” are terms that supplement the terms of this License by making exceptions from one or more of its conditions. Additional permissions that are applicable to the entire Program shall be treated as though they were included in this License, to the extent that they are valid under applicable law. If additional permissions apply only to part of the Program, that part may be used separately under those permissions, but the entire Program remains governed by this License without regard to the additional permissions. When you convey a copy of a covered work, you may at your option remove any additional permissions from that copy, or from any part of it. (Additional permissions may be written to require their own removal in certain cases when you modify the work.) You may place additional permissions on material, added by you to a covered work, for which you have or can give appropriate copyright permission. Notwithstanding any other provision of this License, for material you add to a covered work, you may (if authorized by the copyright holders of that material) supplement the terms of this License with terms: a) Disclaiming warranty or limiting liability differently from the terms of sections 15 and 16 of this License; or b) Requiring preservation of specified reasonable legal notices or author attributions in that material or in the Appropriate Legal Notices displayed by works containing it; or c) Prohibiting misrepresentation of the origin of that material, or requiring that modified versions of such material be marked in reasonable ways as different from the original version; or d) Limiting the use for publicity purposes of names of licensors or authors of the material; or e) Declining to grant rights under trademark law for use of some trade names, trademarks, or service marks; or f) Requiring indemnification of licensors and authors of that material by anyone who conveys the material (or modified versions of it) with contractual assumptions of liability to the recipient, for any liability that these contractual assumptions directly impose on those licensors and authors. All other non-permissive additional terms are considered “further restrictions” within the meaning of section 10. If the Program as you received it, or any part of it, contains a notice stating that it is governed by this License along with a term that is a further restriction, you may remove that term. If a license document contains a further restriction but permits relicensing or conveying under this License, you may add to a covered work material governed by the terms of that license document, provided that the further restriction does not survive such relicensing or conveying. If you add terms to a covered work in accord with this section, you must place, in the relevant source files, a statement of the additional terms that apply to those files, or a notice indicating where to find the applicable terms. Additional terms, permissive or non-permissive, may be stated in the form of a separately written license, or stated as exceptions; the above requirements apply either way. 8. Termination. You may not propagate or modify a covered work except as expressly provided under this License. Any attempt otherwise to propagate or modify it is void, and will automatically terminate your rights under this License (including any patent licenses granted under the third paragraph of section 11). However, if you cease all violation of this License, then your license from a particular copyright holder is reinstated (a) provisionally, unless and until the copyright holder explicitly and finally terminates your license, and (b) permanently, if the copyright holder fails to notify you of the violation by some reasonable means prior to 60 days after the cessation. Moreover, your license from a particular copyright holder is reinstated permanently if the copyright holder notifies you of the violation by some reasonable means, this is the first time you have received notice of violation of this License (for any work) from that copyright holder, and you cure the violation prior to 30 days after your receipt of the notice. Termination of your rights under this section does not terminate the licenses of parties who have received copies or rights from you under this License. If your rights have been terminated and not permanently reinstated, you do not qualify to receive new licenses for the same material under section 10. 9. Acceptance Not Required for Having Copies. You are not required to accept this License in order to receive or run a copy of the Program. Ancillary propagation of a covered work occurring solely as a consequence of using peer-to-peer transmission to receive a copy likewise does not require acceptance. However, nothing other than this License grants you permission to propagate or modify any covered work. These actions infringe copyright if you do not accept this License. Therefore, by modifying or propagating a covered work, you indicate your acceptance of this License to do so. 10. Automatic Licensing of Downstream Recipients. Each time you convey a covered work, the recipient automatically receives a license from the original licensors, to run, modify and propagate that work, subject to this License. You are not responsible for enforcing compliance by third parties with this License. An “entity transaction” is a transaction transferring control of an organization, or substantially all assets of one, or subdividing an organization, or merging organizations. If propagation of a covered work results from an entity transaction, each party to that transaction who receives a copy of the work also receives whatever licenses to the work the party's predecessor in interest had or could give under the previous paragraph, plus a right to possession of the Corresponding Source of the work from the predecessor in interest, if the predecessor has it or can get it with reasonable efforts. You may not impose any further restrictions on the exercise of the rights granted or affirmed under this License. For example, you may not impose a license fee, royalty, or other charge for exercise of rights granted under this License, and you may not initiate litigation (including a cross-claim or counterclaim in a lawsuit) alleging that any patent claim is infringed by making, using, selling, offering for sale, or importing the Program or any portion of it. 11. Patents. A “contributor” is a copyright holder who authorizes use under this License of the Program or a work on which the Program is based. The work thus licensed is called the contributor's “contributor version”. A contributor's “essential patent claims” are all patent claims owned or controlled by the contributor, whether already acquired or hereafter acquired, that would be infringed by some manner, permitted by this License, of making, using, or selling its contributor version, but do not include claims that would be infringed only as a consequence of further modification of the contributor version. For purposes of this definition, “control” includes the right to grant patent sublicenses in a manner consistent with the requirements of this License. Each contributor grants you a non-exclusive, worldwide, royalty-free patent license under the contributor's essential patent claims, to make, use, sell, offer for sale, import and otherwise run, modify and propagate the contents of its contributor version. In the following three paragraphs, a “patent license” is any express agreement or commitment, however denominated, not to enforce a patent (such as an express permission to practice a patent or covenant not to sue for patent infringement). To “grant” such a patent license to a party means to make such an agreement or commitment not to enforce a patent against the party. If you convey a covered work, knowingly relying on a patent license, and the Corresponding Source of the work is not available for anyone to copy, free of charge and under the terms of this License, through a publicly available network server or other readily accessible means, then you must either (1) cause the Corresponding Source to be so available, or (2) arrange to deprive yourself of the benefit of the patent license for this particular work, or (3) arrange, in a manner consistent with the requirements of this License, to extend the patent license to downstream recipients. “Knowingly relying” means you have actual knowledge that, but for the patent license, your conveying the covered work in a country, or your recipient's use of the covered work in a country, would infringe one or more identifiable patents in that country that you have reason to believe are valid. If, pursuant to or in connection with a single transaction or arrangement, you convey, or propagate by procuring conveyance of, a covered work, and grant a patent license to some of the parties receiving the covered work authorizing them to use, propagate, modify or convey a specific copy of the covered work, then the patent license you grant is automatically extended to all recipients of the covered work and works based on it. A patent license is “discriminatory” if it does not include within the scope of its coverage, prohibits the exercise of, or is conditioned on the non-exercise of one or more of the rights that are specifically granted under this License. You may not convey a covered work if you are a party to an arrangement with a third party that is in the business of distributing software, under which you make payment to the third party based on the extent of your activity of conveying the work, and under which the third party grants, to any of the parties who would receive the covered work from you, a discriminatory patent license (a) in connection with copies of the covered work conveyed by you (or copies made from those copies), or (b) primarily for and in connection with specific products or compilations that contain the covered work, unless you entered into that arrangement, or that patent license was granted, prior to 28 March 2007. Nothing in this License shall be construed as excluding or limiting any implied license or other defenses to infringement that may otherwise be available to you under applicable patent law. 12. No Surrender of Others' Freedom. If conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot convey a covered work so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not convey it at all. For example, if you agree to terms that obligate you to collect a royalty for further conveying from those to whom you convey the Program, the only way you could satisfy both those terms and this License would be to refrain entirely from conveying the Program. 13. Use with the GNU Affero General Public License. Notwithstanding any other provision of this License, you have permission to link or combine any covered work with a work licensed under version 3 of the GNU Affero General Public License into a single combined work, and to convey the resulting work. The terms of this License will continue to apply to the part which is the covered work, but the special requirements of the GNU Affero General Public License, section 13, concerning interaction through a network will apply to the combination as such. 14. Revised Versions of this License. The Free Software Foundation may publish revised and/or new versions of the GNU General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies that a certain numbered version of the GNU General Public License “or any later version” applies to it, you have the option of following the terms and conditions either of that numbered version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of the GNU General Public License, you may choose any version ever published by the Free Software Foundation. If the Program specifies that a proxy can decide which future versions of the GNU General Public License can be used, that proxy's public statement of acceptance of a version permanently authorizes you to choose that version for the Program. Later license versions may give you additional or different permissions. However, no additional obligations are imposed on any author or copyright holder as a result of your choosing to follow a later version. 15. Disclaimer of Warranty. THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 16. Limitation of Liability. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 17. Interpretation of Sections 15 and 16. If the disclaimer of warranty and limitation of liability provided above cannot be given local legal effect according to their terms, reviewing courts shall apply local law that most closely approximates an absolute waiver of all civil liability in connection with the Program, unless a warranty or assumption of liability accompanies a copy of the Program in return for a fee. END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms. To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively state the exclusion of warranty; and each file should have at least the “copyright” line and a pointer to where the full notice is found. <one line to give the program's name and a brief idea of what it does.> Copyright (C) <year> <name of author> This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see <https://www.gnu.org/licenses/>. Also add information on how to contact you by electronic and paper mail. If the program does terminal interaction, make it output a short notice like this when it starts in an interactive mode: <program> Copyright (C) <year> <name of author> This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details. The hypothetical commands `show w' and `show c' should show the appropriate parts of the General Public License. Of course, your program's commands might be different; for a GUI interface, you would use an “about box”. You should also get your employer (if you work as a programmer) or school, if any, to sign a “copyright disclaimer” for the program, if necessary. For more information on this, and how to apply and follow the GNU GPL, see <https://www.gnu.org/licenses/>. The GNU General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Lesser General Public License instead of this License. But first, please read <https://www.gnu.org/licenses/why-not-lgpl.html>. Die erwartete CRC32-Prüfsumme ist $2C68A922 /dev/disk2 Apple_partition_scheme /dev/disk2s1 Apple_partition_map /dev/disk2s2 Apple_HFS /Volumes/Horos 2022-07-04 23:48:33 : INFO : horos : Mounted: /Volumes/Horos 2022-07-04 23:48:33 : INFO : horos : Verifying: /Volumes/Horos/Horos.app 2022-07-04 23:48:33 : DEBUG : horos : App size: 146M /Volumes/Horos/Horos.app 2022-07-04 23:48:36 : DEBUG : horos : Debugging enabled, App Verification output was: /Volumes/Horos/Horos.app: accepted source=Notarized Developer ID origin=Developer ID Application: Nimble CO LLC (TPT6TVH8UY) 2022-07-04 23:48:36 : INFO : horos : Team ID matching: TPT6TVH8UY (expected: TPT6TVH8UY ) 2022-07-04 23:48:36 : INFO : horos : Downloaded version of Horos is Horos v4.0.0 RC5 on versionKey CFBundleGetInfoString, same as installed. 2022-07-04 23:48:36 : DEBUG : horos : Unmounting /Volumes/Horos 2022-07-04 23:48:36 : DEBUG : horos : Debugging enabled, Unmounting output was: "disk2" ejected. 2022-07-04 23:48:36 : DEBUG : horos : DEBUG mode 1, not reopening anything 2022-07-04 23:48:36 : REG : horos : No new version to install 2022-07-04 23:48:36 : REQ : horos : ################## End Installomator, exit code 0 --- fragments/labels/horos.sh | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 fragments/labels/horos.sh diff --git a/fragments/labels/horos.sh b/fragments/labels/horos.sh new file mode 100644 index 0000000..26b8523 --- /dev/null +++ b/fragments/labels/horos.sh @@ -0,0 +1,8 @@ +horos) + name="Horos" + type="dmg" + versionKey="CFBundleGetInfoString" + appNewVersion=$(curl -fs https://github.com/horosproject/horos/blob/horos/Horos/Info.plist | grep -A 4 "CFBundleGetInfoString" | tail -1 | sed -r 's/.*Horos v([^<]+).*/\1/' | sed 's/ //g') + downloadURL="https://horosproject.org/horos-content/Horos"$appNewVersion".dmg" + expectedTeamID="TPT6TVH8UY" + ;; From 14fc1db433a4f30cab8eeb082b2c9ec14c3af680 Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Sat, 9 Jul 2022 13:02:07 +0200 Subject: [PATCH 049/209] New Label: ChronoSync MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit "ChronoSync is a complete, all-in-one solution for file syncs, backups, bootable backups and cloud storage for your Mac. In use by thousands of photographers, video editors, filmmakers, musicians and other data professionals. It’s simply the best way to backup and sync your Mac. No other app can compare! Whatever your backup and sync scenario, ChronoSync has got you covered!" ./assemble.sh -l /Desktop/Mosyle/Resources/InstallomatorLabels chronosync 2022-07-09 12:56:22 : REQ : chronosync : ################## Start Installomator v. 10.0beta, date 2022-07-09 2022-07-09 12:56:22 : INFO : chronosync : ################## Version: 10.0beta 2022-07-09 12:56:22 : INFO : chronosync : ################## Date: 2022-07-09 2022-07-09 12:56:22 : INFO : chronosync : ################## chronosync 2022-07-09 12:56:22 : DEBUG : chronosync : DEBUG mode 1 enabled. 2022-07-09 12:56:23 : INFO : chronosync : BLOCKING_PROCESS_ACTION=tell_user 2022-07-09 12:56:23 : INFO : chronosync : NOTIFY=success 2022-07-09 12:56:23 : INFO : chronosync : LOGGING=DEBUG 2022-07-09 12:56:23 : INFO : chronosync : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-07-09 12:56:23 : INFO : chronosync : Label type: pkgInDmg 2022-07-09 12:56:23 : INFO : chronosync : archiveName: ChronoSync.dmg 2022-07-09 12:56:23 : INFO : chronosync : no blocking processes defined, using ChronoSync as default 2022-07-09 12:56:23 : DEBUG : chronosync : Changing directory to /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build 2022-07-09 12:56:23 : INFO : chronosync : name: ChronoSync, appName: ChronoSync.app 2022-07-09 12:56:23 : WARN : chronosync : No previous app found 2022-07-09 12:56:23 : WARN : chronosync : could not find ChronoSync.app 2022-07-09 12:56:23 : INFO : chronosync : appversion: 2022-07-09 12:56:23 : INFO : chronosync : Latest version of ChronoSync is 10.2.0 2022-07-09 12:56:23 : INFO : chronosync : ChronoSync.dmg exists and DEBUG mode 1 enabled, skipping download 2022-07-09 12:56:23 : DEBUG : chronosync : DEBUG mode 1, not checking for blocking processes 2022-07-09 12:56:23 : REQ : chronosync : Installing ChronoSync 2022-07-09 12:56:23 : INFO : chronosync : Mounting /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/ChronoSync.dmg 2022-07-09 12:56:24 : DEBUG : chronosync : Debugging enabled, dmgmount output was: Prüfsumme für whole disk (Apple_HFS : 0) berechnen … whole disk (Apple_HFS : 0): Die überprüfte CRC32-Prüfsumme ist $09AFB4EC Die überprüfte CRC32-Prüfsumme ist $A77D4F24 /dev/disk4 /Volumes/ChronoSync 2022-07-09 12:56:24 : INFO : chronosync : Mounted: /Volumes/ChronoSync 2022-07-09 12:56:24 : DEBUG : chronosync : Found pkg(s): /Volumes/ChronoSync/Install.pkg 2022-07-09 12:56:24 : DEBUG : chronosync : /Volumes/ChronoSync/Remove.pkg 2022-07-09 12:56:24 : INFO : chronosync : found pkg: /Volumes/ChronoSync/Install.pkg 2022-07-09 12:56:24 : INFO : chronosync : Verifying: /Volumes/ChronoSync/Install.pkg 2022-07-09 12:56:24 : DEBUG : chronosync : File list: -rw-r--r--@ 1 savvas staff 85M 18 Mai 16:02 /Volumes/ChronoSync/Install.pkg 2022-07-09 12:56:24 : DEBUG : chronosync : File type: /Volumes/ChronoSync/Install.pkg: xar archive compressed TOC: 8245, SHA-1 checksum 2022-07-09 12:56:24 : DEBUG : chronosync : spctlOut is /Volumes/ChronoSync/Install.pkg: accepted 2022-07-09 12:56:24 : DEBUG : chronosync : source=Notarized Developer ID 2022-07-09 12:56:24 : DEBUG : chronosync : origin=Developer ID Installer: Econ Technologies, Inc. (9U697UM7YX) 2022-07-09 12:56:24 : INFO : chronosync : Team ID: 9U697UM7YX (expected: 9U697UM7YX ) 2022-07-09 12:56:24 : DEBUG : chronosync : DEBUG enabled, skipping installation 2022-07-09 12:56:24 : INFO : chronosync : Finishing... 2022-07-09 12:56:34 : INFO : chronosync : name: ChronoSync, appName: ChronoSync.app 2022-07-09 12:56:34 : WARN : chronosync : No previous app found 2022-07-09 12:56:34 : WARN : chronosync : could not find ChronoSync.app 2022-07-09 12:56:34 : REQ : chronosync : Installed ChronoSync 2022-07-09 12:56:34 : INFO : chronosync : notifying 2022-07-09 12:56:34 : DEBUG : chronosync : Unmounting /Volumes/ChronoSync 2022-07-09 12:56:35 : DEBUG : chronosync : Debugging enabled, Unmounting output was: "disk4" ejected. 2022-07-09 12:56:35 : DEBUG : chronosync : DEBUG mode 1, not reopening anything 2022-07-09 12:56:35 : REQ : chronosync : All done! 2022-07-09 12:56:35 : REQ : chronosync : ################## End Installomator, exit code 0 --- fragments/labels/chronosync.sh | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 fragments/labels/chronosync.sh diff --git a/fragments/labels/chronosync.sh b/fragments/labels/chronosync.sh new file mode 100644 index 0000000..dcec55a --- /dev/null +++ b/fragments/labels/chronosync.sh @@ -0,0 +1,8 @@ +chronosync) + name="ChronoSync" + type="pkgInDmg" + releaseURL="https://www.econtechnologies.com/UC/updatecheck.php?prod=ChronoSync&lang=en&plat=mac&os=10.14.1&hw=i64&req=1&vers=#" + appNewVersion=$(curl -sf $releaseURL | sed -r 's/.*VERSION=([^<]+).*/\1/') + downloadURL="https://downloads.econtechnologies.com/CS4_Download.dmg" + expectedTeamID="9U697UM7YX" + ;; From 72d2c4ab7444a597ef1fc6318bb71358f6a14dee Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Sat, 9 Jul 2022 13:05:46 +0200 Subject: [PATCH 050/209] New Label: ChronoAgent MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit "ChronoAgent is an invisible app that runs silently in the background providing ChronoSync or InterConneX a direct connection to a remote Mac. It provides a much more secure, reliable and higher performance connection than standard file sharing. If you’re synchronizing or backing up files between two Macs, ChronoAgent is simply the best way to establish a connection between them." ./assemble.sh -l /Desktop/Mosyle/Resources/InstallomatorLabels chronoagent 2022-07-09 12:55:23 : REQ : chronoagent : ################## Start Installomator v. 10.0beta, date 2022-07-09 2022-07-09 12:55:23 : INFO : chronoagent : ################## Version: 10.0beta 2022-07-09 12:55:23 : INFO : chronoagent : ################## Date: 2022-07-09 2022-07-09 12:55:23 : INFO : chronoagent : ################## chronoagent 2022-07-09 12:55:23 : DEBUG : chronoagent : DEBUG mode 1 enabled. 2022-07-09 12:55:24 : INFO : chronoagent : BLOCKING_PROCESS_ACTION=tell_user 2022-07-09 12:55:24 : INFO : chronoagent : NOTIFY=success 2022-07-09 12:55:24 : INFO : chronoagent : LOGGING=DEBUG 2022-07-09 12:55:24 : INFO : chronoagent : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-07-09 12:55:24 : INFO : chronoagent : Label type: pkgInDmg 2022-07-09 12:55:24 : INFO : chronoagent : archiveName: ChronoAgent.dmg 2022-07-09 12:55:24 : INFO : chronoagent : no blocking processes defined, using ChronoAgent as default 2022-07-09 12:55:24 : DEBUG : chronoagent : Changing directory to /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build 2022-07-09 12:55:24 : INFO : chronoagent : name: ChronoAgent, appName: ChronoAgent.app 2022-07-09 12:55:24 : WARN : chronoagent : No previous app found 2022-07-09 12:55:24 : WARN : chronoagent : could not find ChronoAgent.app 2022-07-09 12:55:24 : INFO : chronoagent : appversion: 2022-07-09 12:55:24 : INFO : chronoagent : Latest version of ChronoAgent is 2.1.0 2022-07-09 12:55:24 : INFO : chronoagent : ChronoAgent.dmg exists and DEBUG mode 1 enabled, skipping download 2022-07-09 12:55:24 : DEBUG : chronoagent : DEBUG mode 1, not checking for blocking processes 2022-07-09 12:55:24 : REQ : chronoagent : Installing ChronoAgent 2022-07-09 12:55:24 : INFO : chronoagent : Mounting /Users/savvas/Desktop/Mosyle/Resources/Installomator-main original/build/ChronoAgent.dmg 2022-07-09 12:55:25 : DEBUG : chronoagent : Debugging enabled, dmgmount output was: Prüfsumme für whole disk (Apple_HFS : 0) berechnen … whole disk (Apple_HFS : 0): Die überprüfte CRC32-Prüfsumme ist $46C474C3 Die überprüfte CRC32-Prüfsumme ist $40A3C999 /dev/disk4 /Volumes/ChronoAgent 2022-07-09 12:55:25 : INFO : chronoagent : Mounted: /Volumes/ChronoAgent 2022-07-09 12:55:25 : DEBUG : chronoagent : Found pkg(s): /Volumes/ChronoAgent/Install.pkg 2022-07-09 12:55:25 : DEBUG : chronoagent : /Volumes/ChronoAgent/Remove.pkg 2022-07-09 12:55:25 : INFO : chronoagent : found pkg: /Volumes/ChronoAgent/Install.pkg 2022-07-09 12:55:25 : INFO : chronoagent : Verifying: /Volumes/ChronoAgent/Install.pkg 2022-07-09 12:55:25 : DEBUG : chronoagent : File list: -rw-r--r--@ 1 savvas staff 35M 27 Apr 14:37 /Volumes/ChronoAgent/Install.pkg 2022-07-09 12:55:25 : DEBUG : chronoagent : File type: /Volumes/ChronoAgent/Install.pkg: xar archive compressed TOC: 8440, SHA-1 checksum, contains iAPX 286 executable large model (COFF) not stripped 2022-07-09 12:55:25 : DEBUG : chronoagent : - iAPX 286 executable large model (COFF) not stripped 2022-07-09 12:55:25 : DEBUG : chronoagent : spctlOut is /Volumes/ChronoAgent/Install.pkg: accepted 2022-07-09 12:55:25 : DEBUG : chronoagent : source=Notarized Developer ID 2022-07-09 12:55:25 : DEBUG : chronoagent : origin=Developer ID Installer: Econ Technologies, Inc. (9U697UM7YX) 2022-07-09 12:55:25 : INFO : chronoagent : Team ID: 9U697UM7YX (expected: 9U697UM7YX ) 2022-07-09 12:55:25 : DEBUG : chronoagent : DEBUG enabled, skipping installation 2022-07-09 12:55:25 : INFO : chronoagent : Finishing... 2022-07-09 12:55:35 : INFO : chronoagent : name: ChronoAgent, appName: ChronoAgent.app 2022-07-09 12:55:35 : WARN : chronoagent : No previous app found 2022-07-09 12:55:35 : WARN : chronoagent : could not find ChronoAgent.app 2022-07-09 12:55:35 : REQ : chronoagent : Installed ChronoAgent 2022-07-09 12:55:35 : INFO : chronoagent : notifying 2022-07-09 12:55:35 : DEBUG : chronoagent : Unmounting /Volumes/ChronoAgent 2022-07-09 12:55:36 : DEBUG : chronoagent : Debugging enabled, Unmounting output was: "disk4" ejected. 2022-07-09 12:55:36 : DEBUG : chronoagent : DEBUG mode 1, not reopening anything 2022-07-09 12:55:36 : REQ : chronoagent : All done! 2022-07-09 12:55:36 : REQ : chronoagent : ################## End Installomator, exit code 0 --- fragments/labels/chronoagent.sh | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 fragments/labels/chronoagent.sh diff --git a/fragments/labels/chronoagent.sh b/fragments/labels/chronoagent.sh new file mode 100644 index 0000000..124238d --- /dev/null +++ b/fragments/labels/chronoagent.sh @@ -0,0 +1,11 @@ +chronoagent) + name="ChronoAgent" + type="pkgInDmg" + # packageID="com.econtechnologies.preference.chronoagent" + # versionKey="CFBundleVersion" + # None of the above can read out the installed version + releaseURL="https://www.econtechnologies.com/UC/updatecheck.php?prod=ChronoAgent&lang=en&plat=mac&os=10.14.1&hw=i64&req=1&vers=#" + appNewVersion=$(curl -sf $releaseURL | sed -r 's/.*VERSION=([^<]+).*/\1/') + downloadURL="https://downloads.econtechnologies.com/CA_Mac_Download.dmg" + expectedTeamID="9U697UM7YX" + ;; From c04c591a03b8294c5207b37ac229931d69b63189 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 11 Jul 2022 16:27:51 +0200 Subject: [PATCH 051/209] relatel label MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Output from DEBUG mode and full installer (with force): ``` % Installomator/utils/assemble.sh relatel 2022-07-11 16:23:16 : REQ : relatel : ################## Start Installomator v. 10.0beta, date 2022-07-11 2022-07-11 16:23:16 : INFO : relatel : ################## Version: 10.0beta 2022-07-11 16:23:16 : INFO : relatel : ################## Date: 2022-07-11 2022-07-11 16:23:16 : INFO : relatel : ################## relatel 2022-07-11 16:23:16 : DEBUG : relatel : DEBUG mode 1 enabled. 2022-07-11 16:23:16 : INFO : relatel : BLOCKING_PROCESS_ACTION=tell_user 2022-07-11 16:23:16 : INFO : relatel : NOTIFY=success 2022-07-11 16:23:16 : INFO : relatel : LOGGING=DEBUG 2022-07-11 16:23:16 : INFO : relatel : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-07-11 16:23:16 : INFO : relatel : Label type: dmg 2022-07-11 16:23:16 : INFO : relatel : archiveName: Relatel.dmg 2022-07-11 16:23:16 : INFO : relatel : no blocking processes defined, using Relatel as default 2022-07-11 16:23:16 : DEBUG : relatel : Changing directory to /Users/st/Documents/GitHub/Installomator/build 2022-07-11 16:23:16 : INFO : relatel : App(s) found: /Applications/Relatel.app 2022-07-11 16:23:16 : INFO : relatel : found app at /Applications/Relatel.app, version 1.3.1, on versionKey CFBundleShortVersionString 2022-07-11 16:23:16 : INFO : relatel : appversion: 1.3.1 2022-07-11 16:23:16 : INFO : relatel : Latest version of Relatel is 1.3.1 2022-07-11 16:23:16 : WARN : relatel : DEBUG mode 1 enabled, not exiting, but there is no new version of app. 2022-07-11 16:23:16 : REQ : relatel : Downloading https://cdn.rela.tel/www/public/junotron/Relatel.dmg to Relatel.dmg 2022-07-11 16:23:17 : DEBUG : relatel : File list: -rw-r--r-- 1 aa staff 83M Jul 11 16:23 Relatel.dmg 2022-07-11 16:23:17 : DEBUG : relatel : File type: Relatel.dmg: zlib compressed data 2022-07-11 16:23:17 : DEBUG : relatel : curl output was: * Trying 13.33.141.16:443... * Connected to cdn.rela.tel (13.33.141.16) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [317 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [122 bytes data] * (304) (IN), TLS handshake, Unknown (8): { [19 bytes data] * (304) (IN), TLS handshake, Certificate (11): { [4960 bytes data] * (304) (IN), TLS handshake, CERT verify (15): { [264 bytes data] * (304) (IN), TLS handshake, Finished (20): { [36 bytes data] * (304) (OUT), TLS handshake, Finished (20): } [36 bytes data] * SSL connection using TLSv1.3 / AEAD-AES128-GCM-SHA256 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=cdn.firmafon.dk * start date: Sep 29 00:00:00 2021 GMT * expire date: Oct 28 23:59:59 2022 GMT * subjectAltName: host "cdn.rela.tel" matched cert's "cdn.rela.tel" * issuer: C=US; O=Amazon; OU=Server CA 1B; CN=Amazon * SSL certificate verify ok. * Using HTTP2, server supports multiplexing * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x124810a00) > GET /www/public/junotron/Relatel.dmg HTTP/2 > Host: cdn.rela.tel > user-agent: curl/7.79.1 > accept: */* > * Connection state changed (MAX_CONCURRENT_STREAMS == 128)! < HTTP/2 301 < content-length: 0 < date: Mon, 11 Jul 2022 14:13:48 GMT < location: /www/public/junotron/Relatel-1.3.1.dmg < server: AmazonS3 < x-cache: Hit from cloudfront < via: 1.1 7e5377bfdf5e6ef7597f63d6648e4e9a.cloudfront.net (CloudFront) < x-amz-cf-pop: CPH50-C2 < x-amz-cf-id: thNWMtxDW2IJefosMKa0ESJTenG4AC9I5aZrCy-sTD9YSiGFtVRqgg== < age: 569 < { [0 bytes data] * Connection #0 to host cdn.rela.tel left intact * Issue another request to this URL: 'https://cdn.rela.tel/www/public/junotron/Relatel-1.3.1.dmg' * Found bundle for host cdn.rela.tel: 0x600001f207b0 [can multiplex] * Re-using existing connection! (#0) with host cdn.rela.tel * Connected to cdn.rela.tel (13.33.141.16) port 443 (#0) * Using Stream ID: 3 (easy handle 0x124810a00) > GET /www/public/junotron/Relatel-1.3.1.dmg HTTP/2 > Host: cdn.rela.tel > user-agent: curl/7.79.1 > accept: */* > < HTTP/2 200 < content-type: application/x-apple-diskimage < content-length: 86919409 < date: Mon, 11 Jul 2022 14:13:48 GMT < last-modified: Fri, 06 May 2022 12:35:41 GMT < x-amz-version-id: efBkRS8bwIqXqI2Z6qnBgVxSZzwUHByN < etag: "7d26b868f87f72b3fcee9788f1cd512d-6" < server: AmazonS3 < x-cache: Hit from cloudfront < via: 1.1 7e5377bfdf5e6ef7597f63d6648e4e9a.cloudfront.net (CloudFront) < x-amz-cf-pop: CPH50-C2 < x-amz-cf-id: 4tPa-qwrw0EK3XG2vb6eQrC9cV8anQvW9yNcjKvgtWdXk_-3VjWkyA== < age: 569 < { [2896 bytes data] * Connection #0 to host cdn.rela.tel left intact 2022-07-11 16:23:17 : DEBUG : relatel : DEBUG mode 1, not checking for blocking processes 2022-07-11 16:23:17 : REQ : relatel : Installing Relatel 2022-07-11 16:23:17 : INFO : relatel : Mounting Relatel.dmg 2022-07-11 16:23:22 : DEBUG : relatel : Debugging enabled, dmgmount output was: Checksumming Protective Master Boot Record (MBR : 0)… Protective Master Boot Record (MBR :: verified CRC32 $B84BD009 Checksumming GPT Header (Primary GPT Header : 1)… GPT Header (Primary GPT Header : 1): verified CRC32 $06438A51 Checksumming GPT Partition Data (Primary GPT Table : 2)… GPT Partition Data (Primary GPT Tabl: verified CRC32 $1232986F Checksumming (Apple_Free : 3)… (Apple_Free : 3): verified CRC32 $00000000 Checksumming disk image (Apple_HFS : 4)… disk image (Apple_HFS : 4): verified CRC32 $D4C0AB37 Checksumming GPT Partition Data (Backup GPT Table : 5)… GPT Partition Data (Backup GPT Table: verified CRC32 $1232986F Checksumming GPT Header (Backup GPT Header : 6)… GPT Header (Backup GPT Header : 6): verified CRC32 $A2E62118 verified CRC32 $B53E5AB9 /dev/disk6 GUID_partition_scheme /dev/disk6s1 Apple_HFS /Volumes/Relatel 1.3.1 2022-07-11 16:23:22 : INFO : relatel : Mounted: /Volumes/Relatel 1.3.1 2022-07-11 16:23:22 : INFO : relatel : Verifying: /Volumes/Relatel 1.3.1/Relatel.app 2022-07-11 16:23:22 : DEBUG : relatel : App size: 195M /Volumes/Relatel 1.3.1/Relatel.app 2022-07-11 16:23:23 : DEBUG : relatel : Debugging enabled, App Verification output was: /Volumes/Relatel 1.3.1 1/Relatel.app: accepted source=Notarized Developer ID origin=Developer ID Application: Firmafon ApS (B9358QF55B) 2022-07-11 16:23:23 : INFO : relatel : Team ID matching: B9358QF55B (expected: B9358QF55B ) 2022-07-11 16:23:23 : INFO : relatel : Downloaded version of Relatel is 1.3.1 on versionKey CFBundleShortVersionString, same as installed. 2022-07-11 16:23:23 : DEBUG : relatel : Unmounting /Volumes/Relatel 1.3.1 2022-07-11 16:23:24 : DEBUG : relatel : Debugging enabled, Unmounting output was: "disk6" ejected. 2022-07-11 16:23:24 : DEBUG : relatel : DEBUG mode 1, not reopening anything 2022-07-11 16:23:24 : REG : relatel : No new version to install 2022-07-11 16:23:24 : REQ : relatel : ################## End Installomator, exit code 0 % sudo Installomator/utils/assemble.sh relatel DEBUG=0 INSTALL=force Password: 2022-07-11 16:23:56 : WARN : relatel : setting variable from argument DEBUG=0 2022-07-11 16:23:56 : WARN : relatel : setting variable from argument INSTALL=force 2022-07-11 16:23:56 : REQ : relatel : ################## Start Installomator v. 10.0beta, date 2022-07-11 2022-07-11 16:23:56 : INFO : relatel : ################## Version: 10.0beta 2022-07-11 16:23:56 : INFO : relatel : ################## Date: 2022-07-11 2022-07-11 16:23:56 : INFO : relatel : ################## relatel 2022-07-11 16:23:56 : INFO : relatel : BLOCKING_PROCESS_ACTION=tell_user 2022-07-11 16:23:56 : INFO : relatel : NOTIFY=success 2022-07-11 16:23:56 : INFO : relatel : LOGGING=INFO 2022-07-11 16:23:56 : INFO : relatel : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-07-11 16:23:56 : INFO : relatel : Label type: dmg 2022-07-11 16:23:56 : INFO : relatel : archiveName: Relatel.dmg 2022-07-11 16:23:56 : INFO : relatel : no blocking processes defined, using Relatel as default 2022-07-11 16:23:56 : INFO : relatel : App(s) found: /Applications/Relatel.app 2022-07-11 16:23:56 : INFO : relatel : found app at /Applications/Relatel.app, version 1.3.1, on versionKey CFBundleShortVersionString 2022-07-11 16:23:56 : INFO : relatel : appversion: 1.3.1 2022-07-11 16:23:56 : INFO : relatel : Label is not of type “updateronly”, and it’s set to use force to install or ignoring app store apps, so not using updateTool. 2022-07-11 16:23:56 : INFO : relatel : Latest version of Relatel is 1.3.1 2022-07-11 16:23:56 : INFO : relatel : There is no newer version available. 2022-07-11 16:23:56 : REQ : relatel : Downloading https://cdn.rela.tel/www/public/junotron/Relatel.dmg to Relatel.dmg 2022-07-11 16:23:57 : REQ : relatel : no more blocking processes, continue with update 2022-07-11 16:23:57 : REQ : relatel : Installing Relatel 2022-07-11 16:23:57 : INFO : relatel : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.l86iLb4m/Relatel.dmg 2022-07-11 16:24:00 : INFO : relatel : Mounted: /Volumes/Relatel 1.3.1 2022-07-11 16:24:00 : INFO : relatel : Verifying: /Volumes/Relatel 1.3.1/Relatel.app 2022-07-11 16:24:01 : INFO : relatel : Team ID matching: B9358QF55B (expected: B9358QF55B ) 2022-07-11 16:24:01 : INFO : relatel : Downloaded version of Relatel is 1.3.1 on versionKey CFBundleShortVersionString, same as installed. 2022-07-11 16:24:01 : INFO : relatel : Using force to install anyway. 2022-07-11 16:24:01 : INFO : relatel : App has LSMinimumSystemVersion: 10.11.0 2022-07-11 16:24:01 : WARN : relatel : Removing existing /Applications/Relatel.app 2022-07-11 16:24:01 : INFO : relatel : Copy /Volumes/Relatel 1.3.1/Relatel.app to /Applications 2022-07-11 16:24:02 : WARN : relatel : Changing owner to aa 2022-07-11 16:24:02 : INFO : relatel : Finishing... 2022-07-11 16:24:12 : INFO : relatel : App(s) found: /Applications/Relatel.app 2022-07-11 16:24:12 : INFO : relatel : found app at /Applications/Relatel.app, version 1.3.1, on versionKey CFBundleShortVersionString 2022-07-11 16:24:12 : REQ : relatel : Installed Relatel, version 1.3.1 2022-07-11 16:24:12 : INFO : relatel : notifying 2022-07-11 16:24:12 : INFO : relatel : App not closed, so no reopen. 2022-07-11 16:24:12 : REQ : relatel : All done! 2022-07-11 16:24:12 : REQ : relatel : ################## End Installomator, exit code 0 ``` --- fragments/labels/relatel.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/relatel.sh diff --git a/fragments/labels/relatel.sh b/fragments/labels/relatel.sh new file mode 100644 index 0000000..91cb609 --- /dev/null +++ b/fragments/labels/relatel.sh @@ -0,0 +1,7 @@ +relatel) + name="Relatel" + type="dmg" + downloadURL="https://cdn.rela.tel/www/public/junotron/Relatel.dmg" + appNewVersion="$(curl -fs "https://cdn.firmafon.dk/www/public/junotron/latest-mac.yml" | grep -i "version" | cut -w -f2)" + expectedTeamID="B9358QF55B" + ;; From e90dfd6d82a8be416dfdd2882ff9426f612390fb Mon Sep 17 00:00:00 2001 From: David Champion <dgc@extrahop.com> Date: Mon, 11 Jul 2022 12:25:56 -0700 Subject: [PATCH 052/209] Add Tailscale label --- fragments/labels/tailscale.sh | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 fragments/labels/tailscale.sh diff --git a/fragments/labels/tailscale.sh b/fragments/labels/tailscale.sh new file mode 100644 index 0000000..02852f5 --- /dev/null +++ b/fragments/labels/tailscale.sh @@ -0,0 +1,8 @@ +tailscale) + name="Tailscale" + type="zip" + appNewVersion="$(curl -s https://pkgs.tailscale.com/stable/ | awk -F- '/Tailscale.*macos.zip/ {print $2}')" + downloadURL="https://pkgs.tailscale.com/stable/Tailscale-${appNewVersion}-macos.zip" + expectedTeamID="W5364U7YZB" + versionKey="CFBundleShortVersionString" + ;; From 9fb414958a998279909afdd04307ebf4c585747e Mon Sep 17 00:00:00 2001 From: Tadayuki Onishi <tt.tanishi100@gmail.com> Date: Tue, 12 Jul 2022 10:54:36 +0900 Subject: [PATCH 053/209] santa and nomad are forced to ignore blocking Those applications are forcibly restarted by the launch agent, resulting in infinite blocking process processing. --- Installomator.sh | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Installomator.sh b/Installomator.sh index 54d2fbb..d93ed3b 100755 --- a/Installomator.sh +++ b/Installomator.sh @@ -3724,6 +3724,7 @@ nomad) downloadURL="https://files.nomad.menu/NoMAD.pkg" appNewVersion=$(curl -fs https://nomad.menu/support/ | grep "NoMAD Downloads" | sed -E 's/.*Current Version ([0-9\.]*)<.*/\1/g') expectedTeamID="VRPY9KHGX6" + blockingProcesses=( NONE ) ;; nomadlogin) # credit: Søren Theilgaard (@theilgaard) @@ -4248,6 +4249,7 @@ santa) downloadURL=$(downloadURLFromGit google santa) appNewVersion=$(versionFromGit google santa) expectedTeamID="EQHXZ8M8AV" + blockingProcesses=( NONE ) ;; scaleft) name="ScaleFT" From e4cff5821d8cd5b30bff4908d209f3128871fff0 Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Wed, 13 Jul 2022 18:05:44 +0200 Subject: [PATCH 054/209] New Label: Archiware P5 "Archiware's P5 Software Suite is ideal for businesses in the Media and Entertainment industry. Four modules in the Archiware P5 Suite secure data using the A-B-C of data management: Archive, Backup and Cloning. All modules can be combined to create multiple-step security concepts to achieve maximum data protection. Archiware P5 secures data to disk, tape and cloud and has integrations with numerous partners." sudo ./assemble.sh -l /Desktop/Mosyle/Resources/InstallomatorLabels awpst NOTIFY=silent DEBUG=0 Password: 2022-07-13 17:46:07 : WARN : awpst : setting variable from argument NOTIFY=silent 2022-07-13 17:46:07 : WARN : awpst : setting variable from argument DEBUG=0 2022-07-13 17:46:07 : REQ : awpst : ################## Start Installomator v. 10.0beta, date 2022-07-13 2022-07-13 17:46:07 : INFO : awpst : ################## Version: 10.0beta 2022-07-13 17:46:07 : INFO : awpst : ################## Date: 2022-07-13 2022-07-13 17:46:07 : INFO : awpst : ################## awpst 2022-07-13 17:46:07 : INFO : awpst : BLOCKING_PROCESS_ACTION=tell_user 2022-07-13 17:46:07 : INFO : awpst : NOTIFY=silent 2022-07-13 17:46:07 : INFO : awpst : LOGGING=INFO 2022-07-13 17:46:07 : INFO : awpst : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-07-13 17:46:07 : INFO : awpst : Label type: pkgInDmg 2022-07-13 17:46:07 : INFO : awpst : archiveName: P5.dmg 2022-07-13 17:46:07 : INFO : awpst : no blocking processes defined, using P5 as default 2022-07-13 17:46:07 : INFO : awpst : found packageID com.archiware.presstore installed, version 7.0.6 2022-07-13 17:46:07 : INFO : awpst : appversion: 7.0.6 2022-07-13 17:46:07 : INFO : awpst : Latest version of P5 is 7.0.7 2022-07-13 17:46:07 : REQ : awpst : Downloading https://p5-downloads.s3.amazonaws.com/awpst707-darwin.dmg to P5.dmg 2022-07-13 17:46:27 : REQ : awpst : no more blocking processes, continue with update 2022-07-13 17:46:27 : REQ : awpst : Installing P5 2022-07-13 17:46:27 : INFO : awpst : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.rwTUoQOZ/P5.dmg 2022-07-13 17:46:27 : INFO : awpst : Mounted: /Volumes/P5-707 2022-07-13 17:46:27 : INFO : awpst : found pkg: /Volumes/P5-707/P5-707-Install.pkg 2022-07-13 17:46:27 : INFO : awpst : Verifying: /Volumes/P5-707/P5-707-Install.pkg 2022-07-13 17:46:28 : INFO : awpst : Team ID: 5H5EU6F965 (expected: 5H5EU6F965 ) 2022-07-13 17:46:28 : INFO : awpst : Checking package version. 2022-07-13 17:46:28 : INFO : awpst : Downloaded package com.archiware.presstore version 2022-07-13 17:46:28 : INFO : awpst : Installing /Volumes/P5-707/P5-707-Install.pkg to / 2022-07-13 17:47:06 : INFO : awpst : Finishing... 2022-07-13 17:47:16 : INFO : awpst : found packageID com.archiware.presstore installed, version 7.0.7 2022-07-13 17:47:16 : REQ : awpst : Installed P5, version 7.0.7 2022-07-13 17:47:16 : INFO : awpst : App not closed, so no reopen. 2022-07-13 17:47:16 : REQ : awpst : All done! 2022-07-13 17:47:16 : REQ : awpst : ################## End Installomator, exit code 0 --- fragments/labels/awpst.sh | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 fragments/labels/awpst.sh diff --git a/fragments/labels/awpst.sh b/fragments/labels/awpst.sh new file mode 100644 index 0000000..876d176 --- /dev/null +++ b/fragments/labels/awpst.sh @@ -0,0 +1,10 @@ +awpst) + name="P5" + type="pkgInDmg" + packageID="com.archiware.presstore" + appNewVersion=$(curl -sf https://www.archiware.com/download-p5 | grep -m 1 "ARCHIWARE P5 Version" | sed "s|.*Version \(.*\) -.*|\\1|") + downloadURL=$(appNrVersion=`sed 's/[^0-9]//g' <<< $appNewVersion` && echo https://p5-downloads.s3.amazonaws.com/awpst"$appNrVersion"-darwin.dmg) + pkgName=$(appNrVersion=`sed 's/[^0-9]//g' <<< $appNewVersion` && echo P5-"$appNrVersion"-Install.pkg) + expectedTeamID="5H5EU6F965" + # blockingProcesses=( nsd ) + ;; From d0d3510689fd0d35e50ba0d01b6721346b4d877f Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Wed, 13 Jul 2022 18:14:42 +0200 Subject: [PATCH 055/209] New Label: Archiware P5 Backup2Go MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit "P5 Backup2Go is the ideal tool to backup workstations – regardless of their location. In the office, on the road or at home, P5 works cross-platform and allows mobile backups of laptops and desktops on central disk storage." sudo ./assemble.sh -l /Desktop/Mosyle/Resources/InstallomatorLabels awb2go NOTIFY=silent DEBUG=0 2022-07-13 18:11:07 : WARN : awb2go : setting variable from argument NOTIFY=silent 2022-07-13 18:11:07 : WARN : awb2go : setting variable from argument DEBUG=0 2022-07-13 18:11:07 : REQ : awb2go : ################## Start Installomator v. 10.0beta, date 2022-07-13 2022-07-13 18:11:07 : INFO : awb2go : ################## Version: 10.0beta 2022-07-13 18:11:07 : INFO : awb2go : ################## Date: 2022-07-13 2022-07-13 18:11:07 : INFO : awb2go : ################## awb2go 2022-07-13 18:11:07 : INFO : awb2go : BLOCKING_PROCESS_ACTION=tell_user 2022-07-13 18:11:07 : INFO : awb2go : NOTIFY=silent 2022-07-13 18:11:07 : INFO : awb2go : LOGGING=INFO 2022-07-13 18:11:07 : INFO : awb2go : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-07-13 18:11:07 : INFO : awb2go : Label type: pkgInDmg 2022-07-13 18:11:07 : INFO : awb2go : archiveName: P5 Workstation.dmg 2022-07-13 18:11:07 : INFO : awb2go : no blocking processes defined, using P5 Workstation as default 2022-07-13 18:11:08 : INFO : awb2go : found packageID com.archiware.presstore installed, version 7.0.6 2022-07-13 18:11:08 : INFO : awb2go : appversion: 7.0.6 2022-07-13 18:11:08 : INFO : awb2go : Latest version of P5 Workstation is 7.0.7 2022-07-13 18:11:08 : REQ : awb2go : Downloading https://p5-downloads.s3.amazonaws.com/awpst707-darwin.dmg to P5 Workstation.dmg 2022-07-13 18:11:27 : REQ : awb2go : no more blocking processes, continue with update 2022-07-13 18:11:27 : REQ : awb2go : Installing P5 Workstation 2022-07-13 18:11:27 : INFO : awb2go : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.Lw7ac9Pw/P5 Workstation.dmg 2022-07-13 18:11:28 : INFO : awb2go : Mounted: /Volumes/P5-707 2022-07-13 18:11:28 : INFO : awb2go : found pkg: /Volumes/P5-707/B2Go-Workstation/P5-Workstation-707-Install.pkg 2022-07-13 18:11:28 : INFO : awb2go : Verifying: /Volumes/P5-707/B2Go-Workstation/P5-Workstation-707-Install.pkg 2022-07-13 18:11:28 : INFO : awb2go : Team ID: 5H5EU6F965 (expected: 5H5EU6F965 ) 2022-07-13 18:11:28 : INFO : awb2go : Checking package version. 2022-07-13 18:11:28 : INFO : awb2go : Downloaded package com.archiware.presstore version 2022-07-13 18:11:28 : INFO : awb2go : Installing /Volumes/P5-707/B2Go-Workstation/P5-Workstation-707-Install.pkg to / 2022-07-13 18:12:01 : INFO : awb2go : Finishing... 2022-07-13 18:12:11 : INFO : awb2go : found packageID com.archiware.presstore installed, version 7.0.7 2022-07-13 18:12:11 : REQ : awb2go : Installed P5 Workstation, version 7.0.7 2022-07-13 18:12:12 : INFO : awb2go : App not closed, so no reopen. 2022-07-13 18:12:12 : REQ : awb2go : All done! 2022-07-13 18:12:12 : REQ : awb2go : ################## End Installomator, exit code 0 --- fragments/labels/awb2go.sh | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 fragments/labels/awb2go.sh diff --git a/fragments/labels/awb2go.sh b/fragments/labels/awb2go.sh new file mode 100644 index 0000000..d626313 --- /dev/null +++ b/fragments/labels/awb2go.sh @@ -0,0 +1,10 @@ +awb2go) + name="P5 Workstation" + type="pkgInDmg" + packageID="com.archiware.presstore" + appNewVersion=$(curl -sf https://www.archiware.com/download-p5 | grep -m 1 "ARCHIWARE P5 Version" | sed "s|.*Version \(.*\) -.*|\\1|") + downloadURL=$(appNrVersion=`sed 's/[^0-9]//g' <<< $appNewVersion` && echo https://p5-downloads.s3.amazonaws.com/awpst"$appNrVersion"-darwin.dmg) + pkgName=$(appNrVersion=`sed 's/[^0-9]//g' <<< $appNewVersion` && echo P5-Workstation-"$appNrVersion"-Install.pkg) + expectedTeamID="5H5EU6F965" + # blockingProcesses=( nsd ) + ;; From 18638141b6e10026aa6684810bfab5732f673fab Mon Sep 17 00:00:00 2001 From: Bart Reardon <bart.reardon@csiro.au> Date: Tue, 26 Jul 2022 12:26:56 +1000 Subject: [PATCH 056/209] Initial go at integrating swiftDialog into Installomator to give progress of downoad and install of applications --- fragments/functions.sh | 113 +++++++++++++++++++++++++++++++++++++++++ fragments/header.sh | 6 +++ fragments/main.sh | 29 ++++++++++- 3 files changed, 146 insertions(+), 2 deletions(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index ddbe70f..e0142e1 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -14,6 +14,11 @@ cleanupAndExit() { # $1 = exit code, $2 message, $3 level printlog "Debugging enabled, Deleting tmpDir output was:\n$deleteTmpOut" DEBUG fi + # If displaying progres, quit dialog + if [[ $SHOWPROGRESS == "yes" ]]; then + quitDialog "$DIALOGCMDFILE" + fi + # If we closed any processes, reopen the app again reopenClosedProcess if [[ -n $2 && $1 -ne 0 ]]; then @@ -112,8 +117,10 @@ printlog(){ while IFS= read -r logmessage; do if [[ "$(whoami)" == "root" ]]; then echo "$timestamp" : "${log_priority}${space_char} : $label : ${logmessage}" | tee -a $log_location + updateDialogProgressText "${logmessage}" "$DIALOGCMDFILE" else echo "$timestamp" : "${log_priority}${space_char} : $label : ${logmessage}" + updateDialogProgressText "${logmessage}" "$DIALOGCMDFILE" fi done <<< "$log_message" fi @@ -868,3 +875,109 @@ hasDisplaySleepAssertion() { return 1 } +initNamedPipe() { + # create or delete a named pipe + # commands are "create" or "delete" + + local cmd=$1 + local pipe=$2 + case $cmd in + "create") + if [[ -e $pipe ]]; then + rm $pipe + fi + # make named pipe + mkfifo -m 644 $pipe + ;; + "delete") + # clean up + rm $pipe + ;; + *) + ;; + esac +} + +readDownloadPipe() { + # reads from a previously created named pipe + # output from curl with --progress-bar. % downloaded is read in and then sent to the specified log file + local pipe=$1 + local log=$2 + # set up read from pipe + while IFS= read -k 1 -u 0 char; do + [[ $char =~ [0-9] ]] && keep=1 ; + [[ $char == % ]] && updateDialogProgressText "Downloading - $progress%" $log && updateDialogProgress "$progress" $log && progress="" && keep=0 ; + [[ $keep == 1 ]] && progress="$progress$char" ; + done < $pipe +} + +readPKGInstallPipe() { + # reads from a previously created named pipe + # output from installer with -verboseR. % install status is read in and then sent to the specified log file + local pipe=$1 + local log=$2 + local appname=$3 + while read -k 1 -u 0 char; do + [[ $char == % ]] && keep=1 ; + [[ $char =~ [0-9] ]] && [[ $keep == 1 ]] && progress="$progress$char" ; + [[ $char == . ]] && [[ $keep == 1 ]] && updateDialogProgressText "Installing $appname $progress%" $log && updateDialogProgress "$progress" $log && progress="" && keep=0 ; + done < $pipe +} + +killProcess() { + # will silently kill the specified PID + builtin kill $1 2>/dev/null +} + +updateDialogProgress() { + local progress=$1 + local log=$2 + echo "progress: $progress" >> $log +} + +updateDialogProgressText() { + local message=$1 + local log=$2 + echo "progresstext: $message" >> $log +} + +launchDialog() { + # launches a dialog window to display download and/or install progress. + local name=$1 + local log=$2 + if [[ -z "$log" ]]; then + log="/var/tmp/dialog.log" + fi + # check for laptop or desktop + if /usr/bin/pmset -g batt | grep -iq "battery"; then + icon="SF=laptopcomputer.and.arrow.down" + else + icon="SF=desktopcomputer.and.arrow.down" + fi + + # launch dialog + /usr/local/bin/dialog --progress 100 -o \ + --title "Installing $name" \ + --message "Please wait while $name installs..." \ + --alignment centre \ + --icon "$icon" \ + --iconsize 100 \ + --height 300 --width 550 \ + --centreicon \ + --position bottomright \ + --button1disabled \ + --button1text "Please Wait" \ + --commandfile "$log" +} + +quitDialog() { + # sends the quit command to dialog + local log=$1 + echo "quit:" >> "$log" +} + +enableDialogButtonAndSetToDone() { + local log=$1 + echo "button1text: Done" >> $log + echo "button1: enable" >> $log +} diff --git a/fragments/header.sh b/fragments/header.sh index 9f4a7cc..f467954 100644 --- a/fragments/header.sh +++ b/fragments/header.sh @@ -34,6 +34,12 @@ NOTIFY=success # - silent no notifications # - all all notifications (great for Self Service installation) +# show swiftDialog window with download and install progress +SHOWPROGRESS="no" +# options: +# - no do not show download or install progress +# - yes show download or install progress +DIALOGCMDFILE="/var/tmp/dialog.log" # behavior when blocking processes are found BLOCKING_PROCESS_ACTION=tell_user diff --git a/fragments/main.sh b/fragments/main.sh index 9a665c7..94fef76 100644 --- a/fragments/main.sh +++ b/fragments/main.sh @@ -194,8 +194,33 @@ else displaynotification "Downloading new $name" "Download in progress …" fi fi - curlDownload=$(curl -v -fsL --show-error ${curlOptions} "$downloadURL" -o "$archiveName" 2>&1) - curlDownloadStatus=$(echo $?) + + if [[ $SHOWPROGRESS == "yes" ]]; then + # pipe + pipe="/tmp/dlpipe" + # initialise named pipe for curl output + initNamedPipe create $pipe + + # run the pipe read in the background + readDownloadPipe $pipe "$DIALOGCMDFILE" & + downloadPipePID=$! + + # launch dialog + launchDialog "$name" "$DIALOGCMDFILE" & + + # curl (extract - line in "# MARK: download the archive" of Installomator.sh) + curlDownload=$(curl -fL -# --show-error "$downloadURL" -o "$archiveName" 2>&1 | tee $pipe) + # because we are tee-ing the output, we want the pipe status of the first command in the chain, not the most recent one + curlDownloadStatus=$(echo $pipestatus[1]) + killProcess $downloadPipePID + + #enableDialogButtonAndSetToDone "$DIALOGCMDFILE" + #quitDialog $DIALOGCMDFILE + else + curlDownload=$(curl -v -fsL --show-error ${curlOptions} "$downloadURL" -o "$archiveName" 2>&1) + curlDownloadStatus=$(echo $?) + fi + deduplicatelogs "$curlDownload" if [[ $curlDownloadStatus -ne 0 ]]; then #if ! curl --location --fail --silent "$downloadURL" -o "$archiveName"; then From 84e0d5d26366cdb896b011b92eb91a28c8585bfb Mon Sep 17 00:00:00 2001 From: Bart Reardon <bart.reardon@csiro.au> Date: Tue, 26 Jul 2022 13:12:15 +1000 Subject: [PATCH 057/209] playing with the look of the dialog --- fragments/functions.sh | 24 ++++++++++++++---------- 1 file changed, 14 insertions(+), 10 deletions(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index e0142e1..913aaf0 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -118,9 +118,11 @@ printlog(){ if [[ "$(whoami)" == "root" ]]; then echo "$timestamp" : "${log_priority}${space_char} : $label : ${logmessage}" | tee -a $log_location updateDialogProgressText "${logmessage}" "$DIALOGCMDFILE" + updateDialogProgress "increment" "$DIALOGCMDFILE" else echo "$timestamp" : "${log_priority}${space_char} : $label : ${logmessage}" updateDialogProgressText "${logmessage}" "$DIALOGCMDFILE" + updateDialogProgress "increment" "$DIALOGCMDFILE" fi done <<< "$log_message" fi @@ -949,20 +951,22 @@ launchDialog() { log="/var/tmp/dialog.log" fi # check for laptop or desktop - if /usr/bin/pmset -g batt | grep -iq "battery"; then - icon="SF=laptopcomputer.and.arrow.down" - else - icon="SF=desktopcomputer.and.arrow.down" - fi + #if /usr/bin/pmset -g batt | grep -iq "battery"; then + # icon="SF=laptopcomputer.and.arrow.down" + #else + # icon="SF=desktopcomputer.and.arrow.down" + #fi + icon="SF=arrow.down.to.line,colour=green,bgcolour=white,weight=regular" # launch dialog /usr/local/bin/dialog --progress 100 -o \ - --title "Installing $name" \ - --message "Please wait while $name installs..." \ + --title "none" \ + --message "## Installing $name\n\nPlease wait..." \ + --progress 150 \ --alignment centre \ - --icon "$icon" \ - --iconsize 100 \ - --height 300 --width 550 \ + --icon "$LOGO" \ + --overlayicon "$icon" \ + --height 350 --width 550 \ --centreicon \ --position bottomright \ --button1disabled \ From dfe9860848057cf36f86740683a02f463bb901db Mon Sep 17 00:00:00 2001 From: Bart Reardon <bart.reardon@csiro.au> Date: Tue, 26 Jul 2022 14:00:13 +1000 Subject: [PATCH 058/209] fixed doubleup of value. added dialog complete action to cleanup tasks --- fragments/functions.sh | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index 913aaf0..138407a 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -829,6 +829,9 @@ runUpdateTool() { finishing() { printlog "Finishing..." + if [[ $SHOWPROGRESS == "yes" ]]; then + updateDialogProgress "complete" "$DIALOGCMDFILE" + fi sleep 10 # wait a moment to let spotlight catch up getAppVersion @@ -959,10 +962,10 @@ launchDialog() { icon="SF=arrow.down.to.line,colour=green,bgcolour=white,weight=regular" # launch dialog - /usr/local/bin/dialog --progress 100 -o \ + /usr/local/bin/dialog -o \ --title "none" \ --message "## Installing $name\n\nPlease wait..." \ - --progress 150 \ + --progress 120 \ --alignment centre \ --icon "$LOGO" \ --overlayicon "$icon" \ From 2a1b7056c91d56e64197d77eaf17df5a1a14a158 Mon Sep 17 00:00:00 2001 From: Fletcher Salesky <fletcher@salesky.dev> Date: Thu, 28 Jul 2022 11:19:42 -0700 Subject: [PATCH 059/209] Create nudgesuite.sh --- fragments/labels/nudgesuite.sh | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 fragments/labels/nudgesuite.sh diff --git a/fragments/labels/nudgesuite.sh b/fragments/labels/nudgesuite.sh new file mode 100644 index 0000000..1a50da1 --- /dev/null +++ b/fragments/labels/nudgesuite.sh @@ -0,0 +1,10 @@ +nudgesuite) + name="Nudge Suite" + appName="Nudge.app" + type="pkg" + downloadURL=$(downloadURLFromGit macadmins Nudge ) + appNewVersion=$(versionFromGit macadmins Nudge ) + expectedTeamID="9GQZ7KUFR6" + blockingProcesses=( "Nudge" ) + archiveName="Nudge_Suite-[0-9.]*.pkg" + ;; From 0460aa2724e3a4501fa09cf6c1f01bdc5afbc599 Mon Sep 17 00:00:00 2001 From: Fredrik Larsson <fredrik.larsson@uu.se> Date: Fri, 29 Jul 2022 08:48:27 +0200 Subject: [PATCH 060/209] Created Zotero label Output: ``` 2022-07-29 08:44:17 : WARN : zotero : setting variable from argument DEBUG=0 2022-07-29 08:44:17 : REQ : zotero : ################## Start Installomator v. 10.0beta, date 2022-07-29 2022-07-29 08:44:17 : INFO : zotero : ################## Version: 10.0beta 2022-07-29 08:44:17 : INFO : zotero : ################## Date: 2022-07-29 2022-07-29 08:44:17 : INFO : zotero : ################## zotero 2022-07-29 08:44:18 : INFO : zotero : BLOCKING_PROCESS_ACTION=tell_user 2022-07-29 08:44:19 : INFO : zotero : NOTIFY=success 2022-07-29 08:44:19 : INFO : zotero : LOGGING=INFO 2022-07-29 08:44:19 : INFO : zotero : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-07-29 08:44:19 : INFO : zotero : Label type: dmg 2022-07-29 08:44:19 : INFO : zotero : archiveName: Zotero.dmg 2022-07-29 08:44:19 : INFO : zotero : no blocking processes defined, using Zotero as default 2022-07-29 08:44:19 : INFO : zotero : name: Zotero, appName: Zotero.app 2022-07-29 08:44:19 : WARN : zotero : No previous app found 2022-07-29 08:44:19 : WARN : zotero : could not find Zotero.app 2022-07-29 08:44:19 : INFO : zotero : appversion: 2022-07-29 08:44:19 : INFO : zotero : Latest version of Zotero is 6.0.11 2022-07-29 08:44:19 : REQ : zotero : Downloading https://www.zotero.org/download/client/dl?channel=release&platform=mac&version=6.0.11 to Zotero.dmg 2022-07-29 08:44:22 : REQ : zotero : no more blocking processes, continue with update 2022-07-29 08:44:22 : REQ : zotero : Installing Zotero 2022-07-29 08:44:22 : INFO : zotero : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.2kvEQHFJ/Zotero.dmg 2022-07-29 08:44:26 : INFO : zotero : Mounted: /Volumes/Zotero 2022-07-29 08:44:26 : INFO : zotero : Verifying: /Volumes/Zotero/Zotero.app 2022-07-29 08:44:32 : INFO : zotero : Team ID matching: 8LAYR367YV (expected: 8LAYR367YV ) 2022-07-29 08:44:32 : INFO : zotero : Installing Zotero version 6.0.11 on versionKey CFBundleShortVersionString. 2022-07-29 08:44:32 : INFO : zotero : App has LSMinimumSystemVersion: 10.9.0 2022-07-29 08:44:32 : INFO : zotero : Copy /Volumes/Zotero/Zotero.app to /Applications 2022-07-29 08:44:39 : WARN : zotero : Changing owner to kryptonit 2022-07-29 08:44:39 : INFO : zotero : Finishing... 2022-07-29 08:44:49 : INFO : zotero : App(s) found: /Applications/Zotero.app 2022-07-29 08:44:49 : INFO : zotero : found app at /Applications/Zotero.app, version 6.0.11, on versionKey CFBundleShortVersionString 2022-07-29 08:44:49 : REQ : zotero : Installed Zotero, version 6.0.11 2022-07-29 08:44:49 : INFO : zotero : notifying 2022-07-29 08:44:50 : INFO : zotero : App not closed, so no reopen. 2022-07-29 08:44:50 : REQ : zotero : All done! 2022-07-29 08:44:50 : REQ : zotero : ################## End Installomator, exit code 0 ``` --- fragments/labels/zotero.sh | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 fragments/labels/zotero.sh diff --git a/fragments/labels/zotero.sh b/fragments/labels/zotero.sh new file mode 100644 index 0000000..ef54e67 --- /dev/null +++ b/fragments/labels/zotero.sh @@ -0,0 +1,8 @@ +zotero) + name="Zotero" + type="dmg" + downloadURL="https://www.zotero.org/download/client/dl?channel=release&platform=mac&version=$(curl -fs "https://www.zotero.org/download/" | grep -Eio '"mac":"(.*)' | cut -d '"' -f 4)" + expectedTeamID="8LAYR367YV" + appNewVersion=$(curl -fs "https://www.zotero.org/download/" | grep -Eio '"mac":"(.*)' | cut -d '"' -f 4) + #Company="Corporation for Digital Scholarship" + ;; From ef3113a05f61fdcc79bfdd2eea72311e0f8cb088 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 29 Jul 2022 15:20:22 +0200 Subject: [PATCH 061/209] changed variable names to match standards --- fragments/functions.sh | 14 +++++++------- fragments/header.sh | 21 +++++++++++---------- fragments/main.sh | 14 ++++++++------ 3 files changed, 26 insertions(+), 23 deletions(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index 138407a..79c1aa2 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -895,7 +895,7 @@ initNamedPipe() { mkfifo -m 644 $pipe ;; "delete") - # clean up + # clean up rm $pipe ;; *) @@ -907,7 +907,7 @@ readDownloadPipe() { # reads from a previously created named pipe # output from curl with --progress-bar. % downloaded is read in and then sent to the specified log file local pipe=$1 - local log=$2 + local log=${2:-$DIALOG_CMD_FILE} # set up read from pipe while IFS= read -k 1 -u 0 char; do [[ $char =~ [0-9] ]] && keep=1 ; @@ -936,20 +936,20 @@ killProcess() { updateDialogProgress() { local progress=$1 - local log=$2 + local log=${2:-$DIALOG_CMD_FILE} echo "progress: $progress" >> $log } updateDialogProgressText() { local message=$1 - local log=$2 + local log=${2:-$DIALOG_CMD_FILE} echo "progresstext: $message" >> $log } launchDialog() { # launches a dialog window to display download and/or install progress. local name=$1 - local log=$2 + local log=${2:-$DIALOG_CMD_FILE} if [[ -z "$log" ]]; then log="/var/tmp/dialog.log" fi @@ -979,12 +979,12 @@ launchDialog() { quitDialog() { # sends the quit command to dialog - local log=$1 + local log=${1:-$DIALOG_CMD_FILE} echo "quit:" >> "$log" } enableDialogButtonAndSetToDone() { - local log=$1 + local log=${1:-$DIALOG_CMD_FILE} echo "button1text: Done" >> $log echo "button1: enable" >> $log } diff --git a/fragments/header.sh b/fragments/header.sh index f467954..1be0c2d 100644 --- a/fragments/header.sh +++ b/fragments/header.sh @@ -7,7 +7,7 @@ label="" # if no label is sent to the script, this will be used # 2020-2021 Installomator # # inspired by the download scripts from William Smith and Sander Schram -# +# # Contributers: # Armin Briegel - @scriptingosx # Isaac Ordonez - @issacatmann @@ -23,7 +23,7 @@ export PATH=/usr/bin:/bin:/usr/sbin:/sbin # set to 0 for production, 1 or 2 for debugging # while debugging, items will be downloaded to the parent directory of this script # also no actual installation will be performed -# debug mode 1 will download to the directory the script is run in, but will not check the version +# debug mode 1 will download to the directory the script is run in, but will not check the version # debug mode 2 will download to the temp directory, check for blocking processes, check the version, but will not install anything or remove the current version DEBUG=1 @@ -34,13 +34,6 @@ NOTIFY=success # - silent no notifications # - all all notifications (great for Self Service installation) -# show swiftDialog window with download and install progress -SHOWPROGRESS="no" -# options: -# - no do not show download or install progress -# - yes show download or install progress -DIALOGCMDFILE="/var/tmp/dialog.log" - # behavior when blocking processes are found BLOCKING_PROCESS_ACTION=tell_user # options: @@ -144,6 +137,14 @@ IGNORE_DND_APPS="" # example that will ignore browsers when evaluating DND: # IGNORE_DND_APPS="firefox,Google Chrome,Safari,Microsoft Edge,Opera,Amphetamine,caffeinate" +# show swiftDialog window with download and install progress +DIALOG_PROGRESS="no" +# options: +# - no do not show download or install progress (default) +# - yes show download or install progress +DIALOG_CMD_FILE="/var/tmp/dialog.log" + + # NOTE: How labels work @@ -190,7 +191,7 @@ IGNORE_DND_APPS="" # How we get version number from app. Possible values: # - CFBundleShortVersionString # - CFBundleVersion -# Not all software titles uses fields the same. +# Not all software titles uses fields the same. # See Opera label. # # - appCustomVersion(){}: (optional function) diff --git a/fragments/main.sh b/fragments/main.sh index 94fef76..4e44ccb 100644 --- a/fragments/main.sh +++ b/fragments/main.sh @@ -195,21 +195,23 @@ else fi fi - if [[ $SHOWPROGRESS == "yes" ]]; then + if [[ $DIALOG_PROGRESS == "yes" ]]; then # pipe pipe="/tmp/dlpipe" # initialise named pipe for curl output initNamedPipe create $pipe - + # run the pipe read in the background - readDownloadPipe $pipe "$DIALOGCMDFILE" & - downloadPipePID=$! + readDownloadPipe $pipe "$DIALOGCMDFILE" & downloadPipePID=$! + + # TODO: this should _not_ be part of Installomator. + # Also there should be a check if DIALOG_PROGRESS is set but dialog is not installed # launch dialog launchDialog "$name" "$DIALOGCMDFILE" & # curl (extract - line in "# MARK: download the archive" of Installomator.sh) - curlDownload=$(curl -fL -# --show-error "$downloadURL" -o "$archiveName" 2>&1 | tee $pipe) + curlDownload=$(curl -fL -# --show-error ${curlOptions} "$downloadURL" -o "$archiveName" 2>&1 | tee $pipe) # because we are tee-ing the output, we want the pipe status of the first command in the chain, not the most recent one curlDownloadStatus=$(echo $pipestatus[1]) killProcess $downloadPipePID @@ -220,7 +222,7 @@ else curlDownload=$(curl -v -fsL --show-error ${curlOptions} "$downloadURL" -o "$archiveName" 2>&1) curlDownloadStatus=$(echo $?) fi - + deduplicatelogs "$curlDownload" if [[ $curlDownloadStatus -ne 0 ]]; then #if ! curl --location --fail --silent "$downloadURL" -o "$archiveName"; then From 0063c0e025d366a778fbbbd798981a2cd81305c1 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 29 Jul 2022 18:47:28 +0200 Subject: [PATCH 062/209] created swiftdialog_example.sh --- fragments/functions.sh | 15 ++++++++------- fragments/header.sh | 6 ++++-- fragments/main.sh | 10 ++-------- 3 files changed, 14 insertions(+), 17 deletions(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index 79c1aa2..a60a6f3 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -14,10 +14,10 @@ cleanupAndExit() { # $1 = exit code, $2 message, $3 level printlog "Debugging enabled, Deleting tmpDir output was:\n$deleteTmpOut" DEBUG fi - # If displaying progres, quit dialog - if [[ $SHOWPROGRESS == "yes" ]]; then - quitDialog "$DIALOGCMDFILE" - fi +# # If displaying progres, quit dialog +# if [[ $DIALOG_PROGRESS == "main" || $DIALOG_PROGRESS == "list" ]]; then +# quitDialog "$DIALOGCMDFILE" +# fi # If we closed any processes, reopen the app again reopenClosedProcess @@ -829,10 +829,11 @@ runUpdateTool() { finishing() { printlog "Finishing..." - if [[ $SHOWPROGRESS == "yes" ]]; then + if [[ $DIALOG_PROGRESS == "main" || $DIALOG_PROGRESS == "list" ]]; then updateDialogProgress "complete" "$DIALOGCMDFILE" fi - sleep 10 # wait a moment to let spotlight catch up + + sleep 5 # wait a moment to let spotlight catch up getAppVersion if [[ -z $appversion ]]; then @@ -951,7 +952,7 @@ launchDialog() { local name=$1 local log=${2:-$DIALOG_CMD_FILE} if [[ -z "$log" ]]; then - log="/var/tmp/dialog.log" + log="/private/var/tmp/dialog.log" fi # check for laptop or desktop #if /usr/bin/pmset -g batt | grep -iq "battery"; then diff --git a/fragments/header.sh b/fragments/header.sh index 1be0c2d..e2ba549 100644 --- a/fragments/header.sh +++ b/fragments/header.sh @@ -141,8 +141,10 @@ IGNORE_DND_APPS="" DIALOG_PROGRESS="no" # options: # - no do not show download or install progress (default) -# - yes show download or install progress -DIALOG_CMD_FILE="/var/tmp/dialog.log" +# - main show download or install progress in the main progress bar +# - list show download or install progress with each list item +# the `-list` option requires the DIALOG_LIST_INDEX to be set +DIALOG_CMD_FILE="/private/var/tmp/dialog.log" diff --git a/fragments/main.sh b/fragments/main.sh index 4e44ccb..7c41a20 100644 --- a/fragments/main.sh +++ b/fragments/main.sh @@ -195,21 +195,15 @@ else fi fi - if [[ $DIALOG_PROGRESS == "yes" ]]; then + if [[ $DIALOG_PROGRESS == "main" || $DIALOG_PROGRESS == "list" ]]; then # pipe - pipe="/tmp/dlpipe" + pipe="$tmpDir/downloadpipe" # initialise named pipe for curl output initNamedPipe create $pipe # run the pipe read in the background readDownloadPipe $pipe "$DIALOGCMDFILE" & downloadPipePID=$! - # TODO: this should _not_ be part of Installomator. - # Also there should be a check if DIALOG_PROGRESS is set but dialog is not installed - - # launch dialog - launchDialog "$name" "$DIALOGCMDFILE" & - # curl (extract - line in "# MARK: download the archive" of Installomator.sh) curlDownload=$(curl -fL -# --show-error ${curlOptions} "$downloadURL" -o "$archiveName" 2>&1 | tee $pipe) # because we are tee-ing the output, we want the pipe status of the first command in the chain, not the most recent one From 19e59fc36cebef6671601d01d255c81977ef5d46 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 29 Jul 2022 18:47:51 +0200 Subject: [PATCH 063/209] created swiftdialog_example.sh --- MDM/swiftdialog_example.sh | 278 +++++++++++++++++++++++++++++++++++++ 1 file changed, 278 insertions(+) create mode 100755 MDM/swiftdialog_example.sh diff --git a/MDM/swiftdialog_example.sh b/MDM/swiftdialog_example.sh new file mode 100755 index 0000000..33088d2 --- /dev/null +++ b/MDM/swiftdialog_example.sh @@ -0,0 +1,278 @@ +#!/bin/zsh + +# runs through a list of Installomator items +# and displays status using Swift Dialog +# +# dependencies: +# - Swift Dialog: https://github.com/bartreardon/swiftDialog +# - Installomator: https://github.com/Installomator/Installomator +# this script will install both if they are not yet present + +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +# MARK: Variables + +# set to 1 to not require root and not actually do any changes +# set to 0 for production +DEBUG=1 + +# the delay to simulate an install in DEBUG mode +fakeInstallDelay=5 + +# list of Installomator labels + +items=( + "firefoxpkg|Firefox" + "googlechromepkg|Google Chrome" + ) + +# MARK: Constants + +scriptDir=$(dirname ${0:A}) +repoDir=$(dirname $scriptDir) + +if [[ $DEBUG -eq 1 ]]; then + installomator="$repoDir/utils/assemble.sh" +else + installomator="/usr/local/Installomator/Installomator.sh" +fi + +dialog="/usr/local/bin/dialog" + + +if [[ DEBUG -eq 0 ]]; then + dialog_command_file="/var/tmp/dialog.log" +else + dialog_command_file="$HOME/dialog.log" +fi + + +# MARK: Functions + +dialogUpdate() { + # $1: dialog command + local dcommand=$1 + + if [[ -n $dialog_command_file ]]; then + echo "$dcommand" >> $dialog_command_file + echo "Dialog: $dcommand" + fi +} + +dialogActivate() { + osascript -e 'tell app "Dialog" to activate' +} + +progressUpdate() { + # $1: progress text (optional) + local text=$1 + progressindex=$((progressindex + 1)) + dialogUpdate "progress: $progressindex" + echo $progressindex > $progressIndexPath + if [[ -n $text ]]; then + dialogUpdate "progresstext: $text" + fi +} + +startItem() { + local description=$1 + + echo "Starting Item: $description" + echo $description > $currentItemPath + dialogUpdate "listitem: $description: wait" + progressUpdate $description +} + +completeItem() { + local description=$1 + local itemStatus=$2 + + dialogUpdate "listitem: $description: $itemStatus" + echo "$description: $itemStatus" >> $completedItemsPath + echo "completed item $description: $itemStatus" +} + +installomator() { + # $1: label + # $2: description + local label=$1 + local description=$2 + + startItem $description + + $installomator $label \ + DIALOG_PROGRESS=main \ + DIALOG_CMD_FILE=$dialog_command_file \ + DEBUG=$DEBUG + +# if [[ $DEBUG -eq 0 ]]; then +# $installomator $label DIALOG_PROGRESS=yes DIALOG_CMD_FILE=$dialog_command_file +# else +# echo "DEBUG enabled, this would be 'Installomator $label'" +# for ((c=0; c<$fakeInstallDelay; c++ )); do +# p=$((c * 100 / fakeInstallDelay)) +# dialogUpdate "progress: $p" +# sleep 1 +# done +# fi + + completeItem $description "success" +} + +cleanupAndExit() { + # kill caffeinate process + if [[ -n $caffeinatePID ]]; then + echo "killing caffeinate..." + kill $caffeinatePID + fi + + # kill dialog process +# if [[ -n $dialogPID ]]; then +# dialogUpdate "quit:" +# kill $dialogPID +# fi + + # clean up tmp dir + if [[ -n $tmpDir && -d $tmpDir ]]; then + echo "removing tmpDir $tmpDir" + rm -rf $tmpDir + fi + + # remove dialog command file + if [[ -e $dialog_command_file ]]; then + rm $dialog_command_file + fi + + # remove completed Items file + if [[ -e $completedItemsPath ]]; then + rm $completedItemsPath + fi +} + +checkInstallomator() { + if [[ ! -e $installomator ]]; then + echo "Installomator not found at path $installomator. Installing" + + installomatorPkg="$tmpDir/Installomator.pkg" + + # download Installomator pkg + if ! downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/Installomator/Installomator/releases/latest" \ + | awk -F '"' "/browser_download_url/ && /pkg\"/ { print \$4; exit }"); then + echo "could not get Installomator download url" + exit 96 + fi + + echo "downloading Installomator from $downloadURL" + if ! curl --fail --silent -L --show-error "$downloadURL" -o $installomatorPkg; then + echo "could not download Installomator" + exit 95 + fi + + echo "verifying Installomator" + # verify pkg + if ! spctlout=$(spctl -a -vv -t install "$installomatorPkg" 2>&1 ); then + echo "Error verifying $installomatorPkg" + exit 94 + fi + teamID=$(echo $spctlout | awk -F '(' '/origin=/ {print $2 }' | tr -d '()' ) + if [ "JME5BW3F3R" != "$teamID" ]; then + echo "Team IDs do not match!" + exit 93 + fi + # Install pkg + + echo "Installing Installomator" + if [[ DEBUG -eq 0 ]]; then + installer -pkg $installomatorPkg -tgt / -verbose + + # check if Installomator is correctly installed + if [[ ! -x $installomator ]]; then + echo "failed to install Installomator" + exit 92 + fi + else + echo "DEBUG enabled, skipping Installomator install" + fi + else + # update installomator + installomator installomator + fi +} + + +# MARK: sanity checks + +# check minimal macOS requirement +if [[ $(sw_vers -buildVersion ) < "20" ]]; then + echo "This script requires at least macOS 11 Big Sur." + exit 98 +fi + +# check we are running as root +if [[ $DEBUG -eq 0 && $(id -u) -ne 0 ]]; then + echo "This script should be run as root" + exit 97 +fi + + +# MARK: Setup + + +# No sleeping +caffeinate -dimsu & caffeinatePID=$! + +# trap exit for cleanup +trap cleanupAndExit EXIT + +# get a temp +tmpDir=$(mktemp -d) + +completedItemsPath=$tmpDir/completedItems.txt +currentItemPath=$tmpDir/currentItem.txt +progressIndexPath=$tmpDir/progressIndexPath.txt + +# setup first list +itemCount=${#items} +progressCount=$((item + 2)) +progressindex=0 + +listitems=( "--listitem" "Configure Tools" ) + +for item in $items; do + label=$(cut -d '|' -f 1 <<< $item) + description=$(cut -d '|' -f 2 <<< $item) + listitems+=( "--listitem" ${description} ) +done + +# download and install Installomator +startItem "Configure Tools" +checkInstallomator + +# download and install Swift Dialog +echo "installing Swift Dialog" +installomator swiftdialog + +# display first screen +$dialog --title "Configuring your Mac" \ + --icon "SF=gear" \ + --message "Setting up some more things..." \ + --progress 100 \ + "${listitems[@]}" \ + --button1disabled \ + --big \ + --ontop \ + --liststyle compact \ + --messagefont size=16 \ + --commandfile $dialog_command_file & dialogPID=$! +sleep 0.1 +dialogActivate + +completeItem "Configure Tools" "success" + +for item in $items; do + label=$(cut -d '|' -f 1 <<< $item) + description=$(cut -d '|' -f 2 <<< $item) + installomator $label $description +done + +dialogUpdate "quit:" From 720128f23a0ad91e0293780574d266ed2f932239 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 29 Jul 2022 19:34:21 +0200 Subject: [PATCH 064/209] does not download swiftui if it is already there --- MDM/swiftdialog_example.sh | 34 ++++++++++++---------------------- fragments/functions.sh | 27 +++++++++++++++++++-------- fragments/main.sh | 2 +- 3 files changed, 32 insertions(+), 31 deletions(-) diff --git a/MDM/swiftdialog_example.sh b/MDM/swiftdialog_example.sh index 33088d2..7b2174e 100755 --- a/MDM/swiftdialog_example.sh +++ b/MDM/swiftdialog_example.sh @@ -24,6 +24,7 @@ fakeInstallDelay=5 items=( "firefoxpkg|Firefox" "googlechromepkg|Google Chrome" + "microsoftoffice365|Microsoft Office 365" ) # MARK: Constants @@ -66,9 +67,6 @@ dialogActivate() { progressUpdate() { # $1: progress text (optional) local text=$1 - progressindex=$((progressindex + 1)) - dialogUpdate "progress: $progressindex" - echo $progressindex > $progressIndexPath if [[ -n $text ]]; then dialogUpdate "progresstext: $text" fi @@ -78,7 +76,6 @@ startItem() { local description=$1 echo "Starting Item: $description" - echo $description > $currentItemPath dialogUpdate "listitem: $description: wait" progressUpdate $description } @@ -88,7 +85,6 @@ completeItem() { local itemStatus=$2 dialogUpdate "listitem: $description: $itemStatus" - echo "$description: $itemStatus" >> $completedItemsPath echo "completed item $description: $itemStatus" } @@ -138,15 +134,10 @@ cleanupAndExit() { rm -rf $tmpDir fi - # remove dialog command file - if [[ -e $dialog_command_file ]]; then - rm $dialog_command_file - fi - - # remove completed Items file - if [[ -e $completedItemsPath ]]; then - rm $completedItemsPath - fi +# # remove dialog command file +# if [[ -e $dialog_command_file ]]; then +# rm $dialog_command_file +# fi } checkInstallomator() { @@ -199,6 +190,12 @@ checkInstallomator() { fi } +checkSwiftDialog() { + if [[ ! -x $dialog ]]; then + installomator swiftdialog "Swift Dialog" + fi +} + # MARK: sanity checks @@ -217,7 +214,6 @@ fi # MARK: Setup - # No sleeping caffeinate -dimsu & caffeinatePID=$! @@ -227,14 +223,8 @@ trap cleanupAndExit EXIT # get a temp tmpDir=$(mktemp -d) -completedItemsPath=$tmpDir/completedItems.txt -currentItemPath=$tmpDir/currentItem.txt -progressIndexPath=$tmpDir/progressIndexPath.txt - # setup first list itemCount=${#items} -progressCount=$((item + 2)) -progressindex=0 listitems=( "--listitem" "Configure Tools" ) @@ -250,7 +240,7 @@ checkInstallomator # download and install Swift Dialog echo "installing Swift Dialog" -installomator swiftdialog +checkSwiftDialog # display first screen $dialog --title "Configuring your Mac" \ diff --git a/fragments/functions.sh b/fragments/functions.sh index a60a6f3..cac412f 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -117,12 +117,12 @@ printlog(){ while IFS= read -r logmessage; do if [[ "$(whoami)" == "root" ]]; then echo "$timestamp" : "${log_priority}${space_char} : $label : ${logmessage}" | tee -a $log_location - updateDialogProgressText "${logmessage}" "$DIALOGCMDFILE" - updateDialogProgress "increment" "$DIALOGCMDFILE" + updateDialogProgressText "${logmessage}" +# updateDialogProgress "increment" else echo "$timestamp" : "${log_priority}${space_char} : $label : ${logmessage}" - updateDialogProgressText "${logmessage}" "$DIALOGCMDFILE" - updateDialogProgress "increment" "$DIALOGCMDFILE" + updateDialogProgressText "${logmessage}" +# updateDialogProgress "increment" fi done <<< "$log_message" fi @@ -830,7 +830,7 @@ runUpdateTool() { finishing() { printlog "Finishing..." if [[ $DIALOG_PROGRESS == "main" || $DIALOG_PROGRESS == "list" ]]; then - updateDialogProgress "complete" "$DIALOGCMDFILE" + updateDialogProgress "complete" fi sleep 5 # wait a moment to let spotlight catch up @@ -911,9 +911,20 @@ readDownloadPipe() { local log=${2:-$DIALOG_CMD_FILE} # set up read from pipe while IFS= read -k 1 -u 0 char; do - [[ $char =~ [0-9] ]] && keep=1 ; - [[ $char == % ]] && updateDialogProgressText "Downloading - $progress%" $log && updateDialogProgress "$progress" $log && progress="" && keep=0 ; - [[ $keep == 1 ]] && progress="$progress$char" ; + if [[ $char =~ [0-9] ]]; then + keep=1 + fi + + if [[ $char == % ]]; then + updateDialogProgressText "Downloading $name - $progress%" + updateDialogProgress "$progress" + progress="" + keep=0 + fi + + if [[ $keep == 1 ]]; then + progress="$progress$char" + fi done < $pipe } diff --git a/fragments/main.sh b/fragments/main.sh index 7c41a20..ec92156 100644 --- a/fragments/main.sh +++ b/fragments/main.sh @@ -202,7 +202,7 @@ else initNamedPipe create $pipe # run the pipe read in the background - readDownloadPipe $pipe "$DIALOGCMDFILE" & downloadPipePID=$! + readDownloadPipe $pipe "$DIALOG_CMD_FILE" & downloadPipePID=$! # curl (extract - line in "# MARK: download the archive" of Installomator.sh) curlDownload=$(curl -fL -# --show-error ${curlOptions} "$downloadURL" -o "$archiveName" 2>&1 | tee $pipe) From 49050919082e8fdfd6f11ae640f032cb38570623 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Mon, 1 Aug 2022 08:39:03 +0200 Subject: [PATCH 065/209] list item update working with swiftdialog Alpha 1.12.0.3169 --- MDM/swiftdialog_example.sh | 6 +++--- fragments/functions.sh | 8 ++++++-- 2 files changed, 9 insertions(+), 5 deletions(-) diff --git a/MDM/swiftdialog_example.sh b/MDM/swiftdialog_example.sh index 7b2174e..2b72406 100755 --- a/MDM/swiftdialog_example.sh +++ b/MDM/swiftdialog_example.sh @@ -24,7 +24,7 @@ fakeInstallDelay=5 items=( "firefoxpkg|Firefox" "googlechromepkg|Google Chrome" - "microsoftoffice365|Microsoft Office 365" + "microsoftedge|Microsoft Edge" ) # MARK: Constants @@ -97,7 +97,7 @@ installomator() { startItem $description $installomator $label \ - DIALOG_PROGRESS=main \ + DIALOG_PROGRESS="list" \ DIALOG_CMD_FILE=$dialog_command_file \ DEBUG=$DEBUG @@ -186,7 +186,7 @@ checkInstallomator() { fi else # update installomator - installomator installomator + # installomator installomator fi } diff --git a/fragments/functions.sh b/fragments/functions.sh index cac412f..27c2214 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -916,8 +916,12 @@ readDownloadPipe() { fi if [[ $char == % ]]; then - updateDialogProgressText "Downloading $name - $progress%" - updateDialogProgress "$progress" + if [[ $DIALOG_PROGRESS == "main" ]]; then + updateDialogProgressText "Downloading $name - $progress%" + updateDialogProgress "$progress" + elif [[ $DIALOG_PROGRESS == "list" ]]; then + echo "listitem: title: $name, statustext: Downloading... $progress%, progress: $progress" >> $log + fi progress="" keep=0 fi From 32c0cba0f200308b1dc990023cc2fae8dfa50d8c Mon Sep 17 00:00:00 2001 From: dnikles <dnikles@gmail.com> Date: Mon, 1 Aug 2022 08:10:20 -0400 Subject: [PATCH 066/209] Fix download URL 2022-08-01 08:09:07 : WARN : cricutdesignspace : setting variable from argument DEBUG=0 2022-08-01 08:09:07 : WARN : cricutdesignspace : setting variable from argument INSTALL=FORCE 2022-08-01 08:09:07 : REQ : cricutdesignspace : ################## Start Installomator v. 10.0beta, date 2022-08-01 2022-08-01 08:09:07 : INFO : cricutdesignspace : ################## Version: 10.0beta 2022-08-01 08:09:07 : INFO : cricutdesignspace : ################## Date: 2022-08-01 2022-08-01 08:09:07 : INFO : cricutdesignspace : ################## cricutdesignspace 2022-08-01 08:09:07 : INFO : cricutdesignspace : BLOCKING_PROCESS_ACTION=tell_user 2022-08-01 08:09:07 : INFO : cricutdesignspace : NOTIFY=success 2022-08-01 08:09:08 : INFO : cricutdesignspace : LOGGING=INFO 2022-08-01 08:09:08 : INFO : cricutdesignspace : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-08-01 08:09:08 : INFO : cricutdesignspace : Label type: dmg 2022-08-01 08:09:08 : INFO : cricutdesignspace : archiveName: Cricut Design Space.dmg 2022-08-01 08:09:08 : INFO : cricutdesignspace : no blocking processes defined, using Cricut Design Space as default 2022-08-01 08:09:08 : INFO : cricutdesignspace : name: Cricut Design Space, appName: Cricut Design Space.app 2022-08-01 08:09:08 : WARN : cricutdesignspace : No previous app found 2022-08-01 08:09:08 : WARN : cricutdesignspace : could not find Cricut Design Space.app 2022-08-01 08:09:08 : INFO : cricutdesignspace : appversion: 2022-08-01 08:09:08 : INFO : cricutdesignspace : Latest version of Cricut Design Space is 7.13.105 2022-08-01 08:09:08 : REQ : cricutdesignspace : Downloading https://staticcontent.cricut.com/a/software-su/osx-native/CricutDesignSpace-Install-v7.13.105.dmg?Expires=1659356347&Signature=BlbBAkkEVQCEriXctLh526YzkJFGAEw85lAp30VW3YsjM135dLYVtk0SzPKOCZwVOFD0Dj6H6JgKCH-ZyGt-kCih93IMhAclNPkxWWvCPUDMNgk9KR201OarloRoW8RgDfotP-q9pRkH8xbnBIQXfL2ogxeNDKA00eNazmUJJ7EqjGIwG7CFM3MUVaIaZiqBcpn1wo7aXvdvsY0y066RMRhA8RsTTKTBilc6z8Ah7TnTZZQLVtf9pgpCwNXk6L6eyoapXbnikkJW4gZqx1o7rKSatLsi7jj48LAi-LQprIfykt-dBP7wUFl0SKcQCuad~XB0Nh0qeUoTQXbjrS5Znw__&Key-Pair-Id=K2W1AJ47IQWIOI to Cricut Design Space.dmg 2022-08-01 08:09:14 : REQ : cricutdesignspace : no more blocking processes, continue with update 2022-08-01 08:09:14 : REQ : cricutdesignspace : Installing Cricut Design Space 2022-08-01 08:09:14 : INFO : cricutdesignspace : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.vbh4immF/Cricut Design Space.dmg 2022-08-01 08:09:17 : INFO : cricutdesignspace : Mounted: /Volumes/Cricut Design Space Install 2022-08-01 08:09:17 : INFO : cricutdesignspace : Verifying: /Volumes/Cricut Design Space Install/Cricut Design Space.app 2022-08-01 08:09:18 : INFO : cricutdesignspace : Team ID matching: 25627ZFVT7 (expected: 25627ZFVT7 ) 2022-08-01 08:09:18 : INFO : cricutdesignspace : Installing Cricut Design Space version 7.13.105 on versionKey CFBundleShortVersionString. 2022-08-01 08:09:18 : INFO : cricutdesignspace : App has LSMinimumSystemVersion: 10.11.0 2022-08-01 08:09:18 : INFO : cricutdesignspace : Copy /Volumes/Cricut Design Space Install/Cricut Design Space.app to /Applications 2022-08-01 08:09:19 : WARN : cricutdesignspace : Changing owner to dnikles 2022-08-01 08:09:19 : INFO : cricutdesignspace : Finishing... 2022-08-01 08:09:29 : INFO : cricutdesignspace : App(s) found: /Applications/Cricut Design Space.app 2022-08-01 08:09:29 : INFO : cricutdesignspace : found app at /Applications/Cricut Design Space.app, version 7.13.105, on versionKey CFBundleShortVersionString 2022-08-01 08:09:29 : REQ : cricutdesignspace : Installed Cricut Design Space, version 7.13.105 2022-08-01 08:09:29 : INFO : cricutdesignspace : notifying 2022-08-01 08:09:30 : INFO : cricutdesignspace : App not closed, so no reopen. 2022-08-01 08:09:30 : REQ : cricutdesignspace : All done! 2022-08-01 08:09:30 : REQ : cricutdesignspace : ################## End Installomator, exit code 0 --- fragments/labels/cricutdesignspace.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/labels/cricutdesignspace.sh b/fragments/labels/cricutdesignspace.sh index e26ab22..486d2fe 100644 --- a/fragments/labels/cricutdesignspace.sh +++ b/fragments/labels/cricutdesignspace.sh @@ -2,6 +2,6 @@ cricutdesignspace) name="Cricut Design Space" type="dmg" appNewVersion=$(curl -fsL https://s3-us-west-2.amazonaws.com/staticcontent.cricut.com/a/software/osx-native/latest.json | sed -n 's/^.*"rolloutVersion"[[:space:]]*:[[:space:]]*"\([^"]*\)".*$/\1/p') - downloadURL=https://staticcontent.cricut.com/a/software/osx-native/CricutDesignSpace-Install-v${appNewVersion}.dmg + downloadURL=$(curl -fsL "https://apis.cricut.com/desktopdownload/InstallerFile?shard=a&operatingSystem=osxnative&fileName=CricutDesignSpace-Install-v${appNewVersion}.dmg" | sed -n 's/^.*"result"[[:space:]]*:[[:space:]]*"\([^"]*\)".*$/\1/p') expectedTeamID="25627ZFVT7" ;; From 1d49c08344515c89348c345fc442d21412796d10 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Mon, 1 Aug 2022 14:44:51 +0200 Subject: [PATCH 067/209] now displays installer progress in list and main --- MDM/swiftdialog_example.sh | 19 ++++--- fragments/functions.sh | 101 +++++++++++++++++++------------------ fragments/main.sh | 2 + 3 files changed, 65 insertions(+), 57 deletions(-) diff --git a/MDM/swiftdialog_example.sh b/MDM/swiftdialog_example.sh index 2b72406..e962785 100755 --- a/MDM/swiftdialog_example.sh +++ b/MDM/swiftdialog_example.sh @@ -14,7 +14,11 @@ export PATH=/usr/bin:/bin:/usr/sbin:/sbin # set to 1 to not require root and not actually do any changes # set to 0 for production -DEBUG=1 +if [[ $1 == "NODEBUG" ]]; then + DEBUG=0 +else + DEBUG=1 +fi # the delay to simulate an install in DEBUG mode fakeInstallDelay=5 @@ -24,7 +28,6 @@ fakeInstallDelay=5 items=( "firefoxpkg|Firefox" "googlechromepkg|Google Chrome" - "microsoftedge|Microsoft Edge" ) # MARK: Constants @@ -32,11 +35,11 @@ items=( scriptDir=$(dirname ${0:A}) repoDir=$(dirname $scriptDir) -if [[ $DEBUG -eq 1 ]]; then +# if [[ $DEBUG -eq 1 ]]; then installomator="$repoDir/utils/assemble.sh" -else - installomator="/usr/local/Installomator/Installomator.sh" -fi +# else +# installomator="/usr/local/Installomator/Installomator.sh" +# fi dialog="/usr/local/bin/dialog" @@ -99,7 +102,8 @@ installomator() { $installomator $label \ DIALOG_PROGRESS="list" \ DIALOG_CMD_FILE=$dialog_command_file \ - DEBUG=$DEBUG + DEBUG=$DEBUG \ + LOGGING=DEBUG # if [[ $DEBUG -eq 0 ]]; then # $installomator $label DIALOG_PROGRESS=yes DIALOG_CMD_FILE=$dialog_command_file @@ -211,7 +215,6 @@ if [[ $DEBUG -eq 0 && $(id -u) -ne 0 ]]; then exit 97 fi - # MARK: Setup # No sleeping diff --git a/fragments/functions.sh b/fragments/functions.sh index 27c2214..ffddba3 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -648,8 +648,32 @@ installFromPKG() { # install pkg printlog "Installing $archiveName to $targetDir" - pkgInstall=$(installer -verbose -dumplog -pkg "$archiveName" -tgt "$targetDir" 2>&1) - pkgInstallStatus=$(echo $?) + + if [[ $DIALOG_PROGRESS == "main" || $DIALOG_PROGRESS == "list" ]]; then + # pipe + pipe="$tmpDir/installpipe" + # initialise named pipe for installer output + initNamedPipe create $pipe + + # run the pipe read in the background + readPKGInstallPipe $pipe "$DIALOG_CMD_FILE" & installPipePID=$! + printlog "listening to output of installer with pipe $pipe and command file $DIALOG_CMD_FILE on PID $installPipePID" DEBUG + + # curl (extract - line in "# MARK: download the archive" of Installomator.sh) + pkgInstall=$(installer -verboseR -pkg "$archiveName" -tgt "$targetDir" 2>&1 | tee $pipe) + pkgInstallStatus=$pipestatus[1] + # because we are tee-ing the output, we want the pipe status of the first command in the chain, not the most recent one + killProcess $installPipePID + + #enableDialogButtonAndSetToDone "$DIALOGCMDFILE" + #quitDialog $DIALOGCMDFILE + else + pkgInstall=$(installer -verbose -dumplog -pkg "$archiveName" -tgt "$targetDir" 2>&1) + pkgInstallStatus=$(echo $?) + fi + + + sleep 1 pkgEndTime=$(date "+$LogDateFormat") pkgInstall+=$(echo "\nOutput of /var/log/install.log below this line.\n") @@ -920,7 +944,7 @@ readDownloadPipe() { updateDialogProgressText "Downloading $name - $progress%" updateDialogProgress "$progress" elif [[ $DIALOG_PROGRESS == "list" ]]; then - echo "listitem: title: $name, statustext: Downloading... $progress%, progress: $progress" >> $log + updateDialogListItem $progress $name "Downloading..." $log fi progress="" keep=0 @@ -936,12 +960,26 @@ readPKGInstallPipe() { # reads from a previously created named pipe # output from installer with -verboseR. % install status is read in and then sent to the specified log file local pipe=$1 - local log=$2 - local appname=$3 + local log=${2:-$DIALOG_CMD_FILE} + local appname=${3:-$name} + while read -k 1 -u 0 char; do - [[ $char == % ]] && keep=1 ; - [[ $char =~ [0-9] ]] && [[ $keep == 1 ]] && progress="$progress$char" ; - [[ $char == . ]] && [[ $keep == 1 ]] && updateDialogProgressText "Installing $appname $progress%" $log && updateDialogProgress "$progress" $log && progress="" && keep=0 ; + if [[ $char == % ]]; then + keep=1 + fi + if [[ $char =~ [0-9] && $keep == 1 ]]; then + progress="$progress$char" + fi + if [[ $char == . && $keep == 1 ]]; then + if [[ $DIALOG_PROGRESS == "main" ]]; then + updateDialogProgressText "Installing $appname $progress%" $log + updateDialogProgress "$progress" $log + elif [[ $DIALOG_PROGRESS == "list" ]]; then + updateDialogListItem $progress $name "Installing..." $log + fi + progress="" + keep=0 + fi done < $pipe } @@ -962,45 +1000,10 @@ updateDialogProgressText() { echo "progresstext: $message" >> $log } -launchDialog() { - # launches a dialog window to display download and/or install progress. - local name=$1 - local log=${2:-$DIALOG_CMD_FILE} - if [[ -z "$log" ]]; then - log="/private/var/tmp/dialog.log" - fi - # check for laptop or desktop - #if /usr/bin/pmset -g batt | grep -iq "battery"; then - # icon="SF=laptopcomputer.and.arrow.down" - #else - # icon="SF=desktopcomputer.and.arrow.down" - #fi - icon="SF=arrow.down.to.line,colour=green,bgcolour=white,weight=regular" - - # launch dialog - /usr/local/bin/dialog -o \ - --title "none" \ - --message "## Installing $name\n\nPlease wait..." \ - --progress 120 \ - --alignment centre \ - --icon "$LOGO" \ - --overlayicon "$icon" \ - --height 350 --width 550 \ - --centreicon \ - --position bottomright \ - --button1disabled \ - --button1text "Please Wait" \ - --commandfile "$log" -} - -quitDialog() { - # sends the quit command to dialog - local log=${1:-$DIALOG_CMD_FILE} - echo "quit:" >> "$log" -} - -enableDialogButtonAndSetToDone() { - local log=${1:-$DIALOG_CMD_FILE} - echo "button1text: Done" >> $log - echo "button1: enable" >> $log +updateDialogListItem() { + local progress=$1 + local listitem=${2:-$name} + local action=${3:-"Processing..."} + local log=${4:-$DIALOG_CMD_FILE} + echo "listitem: title: $listitem, statustext: $action, progress: $progress" >> $log } diff --git a/fragments/main.sh b/fragments/main.sh index ec92156..864f671 100644 --- a/fragments/main.sh +++ b/fragments/main.sh @@ -203,6 +203,7 @@ else # run the pipe read in the background readDownloadPipe $pipe "$DIALOG_CMD_FILE" & downloadPipePID=$! + printlog "listening to output of curl with pipe $pipe and command file $DIALOG_CMD_FILE on PID $downloadPipePID" DEBUG # curl (extract - line in "# MARK: download the archive" of Installomator.sh) curlDownload=$(curl -fL -# --show-error ${curlOptions} "$downloadURL" -o "$archiveName" 2>&1 | tee $pipe) @@ -213,6 +214,7 @@ else #enableDialogButtonAndSetToDone "$DIALOGCMDFILE" #quitDialog $DIALOGCMDFILE else + printlog "No Dialog connection, just download" DEBUG curlDownload=$(curl -v -fsL --show-error ${curlOptions} "$downloadURL" -o "$archiveName" 2>&1) curlDownloadStatus=$(echo $?) fi From ddf5e6da29468684208c050967575d9eac23f165 Mon Sep 17 00:00:00 2001 From: dnikles <dnikles@gmail.com> Date: Mon, 1 Aug 2022 13:28:26 -0400 Subject: [PATCH 068/209] use getJSONValue replace sed json parsing with getJSONValue --- fragments/labels/cricutdesignspace.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/fragments/labels/cricutdesignspace.sh b/fragments/labels/cricutdesignspace.sh index 486d2fe..e512bba 100644 --- a/fragments/labels/cricutdesignspace.sh +++ b/fragments/labels/cricutdesignspace.sh @@ -1,7 +1,7 @@ cricutdesignspace) name="Cricut Design Space" type="dmg" - appNewVersion=$(curl -fsL https://s3-us-west-2.amazonaws.com/staticcontent.cricut.com/a/software/osx-native/latest.json | sed -n 's/^.*"rolloutVersion"[[:space:]]*:[[:space:]]*"\([^"]*\)".*$/\1/p') - downloadURL=$(curl -fsL "https://apis.cricut.com/desktopdownload/InstallerFile?shard=a&operatingSystem=osxnative&fileName=CricutDesignSpace-Install-v${appNewVersion}.dmg" | sed -n 's/^.*"result"[[:space:]]*:[[:space:]]*"\([^"]*\)".*$/\1/p') + appNewVersion=$(getJSONValue "$(curl -fsL https://s3-us-west-2.amazonaws.com/staticcontent.cricut.com/a/software/osx-native/latest.json)" "rolloutVersion") + downloadURL=$(getJSONValue $(curl -fsL "https://apis.cricut.com/desktopdownload/InstallerFile?shard=a&operatingSystem=osxnative&fileName=CricutDesignSpace-Install-v${appNewVersion}.dmg") "result") expectedTeamID="25627ZFVT7" ;; From a308ccbc2908e49472bd9b9364639c9bbc02c5f7 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Tue, 2 Aug 2022 14:51:18 +0200 Subject: [PATCH 069/209] code cleanup --- ...tdialog_example.sh => swiftdialog_list.sh} | 4 +- fragments/functions.sh | 79 +++++++++---------- fragments/header.sh | 26 ++++-- fragments/main.sh | 5 +- 4 files changed, 60 insertions(+), 54 deletions(-) rename MDM/{swiftdialog_example.sh => swiftdialog_list.sh} (98%) diff --git a/MDM/swiftdialog_example.sh b/MDM/swiftdialog_list.sh similarity index 98% rename from MDM/swiftdialog_example.sh rename to MDM/swiftdialog_list.sh index e962785..1cd7f21 100755 --- a/MDM/swiftdialog_example.sh +++ b/MDM/swiftdialog_list.sh @@ -100,8 +100,8 @@ installomator() { startItem $description $installomator $label \ - DIALOG_PROGRESS="list" \ - DIALOG_CMD_FILE=$dialog_command_file \ + DIALOG_CMD_FILE=${(q)dialog_command_file} \ + DIALOG_LIST_ITEM_NAME=${(q)description} \ DEBUG=$DEBUG \ LOGGING=DEBUG diff --git a/fragments/functions.sh b/fragments/functions.sh index ffddba3..2c4b35a 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -117,12 +117,8 @@ printlog(){ while IFS= read -r logmessage; do if [[ "$(whoami)" == "root" ]]; then echo "$timestamp" : "${log_priority}${space_char} : $label : ${logmessage}" | tee -a $log_location - updateDialogProgressText "${logmessage}" -# updateDialogProgress "increment" else echo "$timestamp" : "${log_priority}${space_char} : $label : ${logmessage}" - updateDialogProgressText "${logmessage}" -# updateDialogProgress "increment" fi done <<< "$log_message" fi @@ -649,7 +645,7 @@ installFromPKG() { # install pkg printlog "Installing $archiveName to $targetDir" - if [[ $DIALOG_PROGRESS == "main" || $DIALOG_PROGRESS == "list" ]]; then + if [[ $DIALOG_CMD_FILE != "" ]]; then # pipe pipe="$tmpDir/installpipe" # initialise named pipe for installer output @@ -659,14 +655,11 @@ installFromPKG() { readPKGInstallPipe $pipe "$DIALOG_CMD_FILE" & installPipePID=$! printlog "listening to output of installer with pipe $pipe and command file $DIALOG_CMD_FILE on PID $installPipePID" DEBUG - # curl (extract - line in "# MARK: download the archive" of Installomator.sh) pkgInstall=$(installer -verboseR -pkg "$archiveName" -tgt "$targetDir" 2>&1 | tee $pipe) pkgInstallStatus=$pipestatus[1] # because we are tee-ing the output, we want the pipe status of the first command in the chain, not the most recent one killProcess $installPipePID - #enableDialogButtonAndSetToDone "$DIALOGCMDFILE" - #quitDialog $DIALOGCMDFILE else pkgInstall=$(installer -verbose -dumplog -pkg "$archiveName" -tgt "$targetDir" 2>&1) pkgInstallStatus=$(echo $?) @@ -853,11 +846,9 @@ runUpdateTool() { finishing() { printlog "Finishing..." - if [[ $DIALOG_PROGRESS == "main" || $DIALOG_PROGRESS == "list" ]]; then - updateDialogProgress "complete" - fi + updateDialog "wait" "Finishing..." - sleep 5 # wait a moment to let spotlight catch up + sleep 3 # wait a moment to let spotlight catch up getAppVersion if [[ -z $appversion ]]; then @@ -940,12 +931,7 @@ readDownloadPipe() { fi if [[ $char == % ]]; then - if [[ $DIALOG_PROGRESS == "main" ]]; then - updateDialogProgressText "Downloading $name - $progress%" - updateDialogProgress "$progress" - elif [[ $DIALOG_PROGRESS == "list" ]]; then - updateDialogListItem $progress $name "Downloading..." $log - fi + updateDialog $progress "Downloading $name - $progress%" progress="" keep=0 fi @@ -971,12 +957,7 @@ readPKGInstallPipe() { progress="$progress$char" fi if [[ $char == . && $keep == 1 ]]; then - if [[ $DIALOG_PROGRESS == "main" ]]; then - updateDialogProgressText "Installing $appname $progress%" $log - updateDialogProgress "$progress" $log - elif [[ $DIALOG_PROGRESS == "list" ]]; then - updateDialogListItem $progress $name "Installing..." $log - fi + updateDialog $progress "Installing $appname" progress="" keep=0 fi @@ -988,22 +969,40 @@ killProcess() { builtin kill $1 2>/dev/null } -updateDialogProgress() { - local progress=$1 - local log=${2:-$DIALOG_CMD_FILE} - echo "progress: $progress" >> $log -} +updateDialog() { + local state=$1 + local message=$2 + local listitem=${3:-$DIALOG_LIST_ITEM_NAME} + local cmd_file=${4:-$DIALOG_CMD_FILE} + local progress="" -updateDialogProgressText() { - local message=$1 - local log=${2:-$DIALOG_CMD_FILE} - echo "progresstext: $message" >> $log -} + if [[ state =~ [0-9]* \ + || state == "reset" \ + || state == "increment" \ + || state == "complete" \ + || state == "indeterminate" ]]; then + progress=$state + fi -updateDialogListItem() { - local progress=$1 - local listitem=${2:-$name} - local action=${3:-"Processing..."} - local log=${4:-$DIALOG_CMD_FILE} - echo "listitem: title: $listitem, statustext: $action, progress: $progress" >> $log + # when to cmdfile is set, do nothing + if [[ $$cmd_file == "" ]]; then + return + fi + + if [[ $listitem == "" ]]; then + # no listitem set, update main progress bar and progress text + if [[ $progress != "" ]]; then + echo "progress: $progress" >> $cmd_file + fi + if [[ $message != "" ]]; then + echo "progresstext: $message" >> $cmd_file + fi + else + # list item has a value, so we update the progress and text in the list + if [[ $progress != "" ]]; then + echo "listitem: title: $listitem, statustext: $message, progress: $progress" >> $cmd_file + else + echo "listitem: title: $listitem, statustext: $message, status: $state" >> $cmd_file + fi + fi } diff --git a/fragments/header.sh b/fragments/header.sh index e2ba549..b8baf3d 100644 --- a/fragments/header.sh +++ b/fragments/header.sh @@ -137,14 +137,24 @@ IGNORE_DND_APPS="" # example that will ignore browsers when evaluating DND: # IGNORE_DND_APPS="firefox,Google Chrome,Safari,Microsoft Edge,Opera,Amphetamine,caffeinate" -# show swiftDialog window with download and install progress -DIALOG_PROGRESS="no" -# options: -# - no do not show download or install progress (default) -# - main show download or install progress in the main progress bar -# - list show download or install progress with each list item -# the `-list` option requires the DIALOG_LIST_INDEX to be set -DIALOG_CMD_FILE="/private/var/tmp/dialog.log" + +# Swift Dialog integration + +# These variables will allow Installomator to communicate progress with Swift Dialog +# https://github.com/bartreardon/swiftDialog + +# This requires Swift Dialog 2.11.2 or higher. + +DIALOG_CMD_FILE="" +# When this variable is set, Installomator will write Swift Dialog commands to this path. +# Installomator will not launch Swift Dialog. The process calling Installomator will have +# launch and configure Swift Dialog to listen to this file. +# See `MDM/swiftdialog_example.sh` for an example. + +DIALOG_LIST_ITEM_NAME="" +# When this variable is set, progress for downloads and installs will be sent to this +# listitem. +# When the variable is unset, progress will be sent to Swift Dialog's main progress bar. diff --git a/fragments/main.sh b/fragments/main.sh index 864f671..6cf93b9 100644 --- a/fragments/main.sh +++ b/fragments/main.sh @@ -195,7 +195,7 @@ else fi fi - if [[ $DIALOG_PROGRESS == "main" || $DIALOG_PROGRESS == "list" ]]; then + if [[ $DIALOG_CMD_FILE != "" ]]; then # pipe pipe="$tmpDir/downloadpipe" # initialise named pipe for curl output @@ -205,14 +205,11 @@ else readDownloadPipe $pipe "$DIALOG_CMD_FILE" & downloadPipePID=$! printlog "listening to output of curl with pipe $pipe and command file $DIALOG_CMD_FILE on PID $downloadPipePID" DEBUG - # curl (extract - line in "# MARK: download the archive" of Installomator.sh) curlDownload=$(curl -fL -# --show-error ${curlOptions} "$downloadURL" -o "$archiveName" 2>&1 | tee $pipe) # because we are tee-ing the output, we want the pipe status of the first command in the chain, not the most recent one curlDownloadStatus=$(echo $pipestatus[1]) killProcess $downloadPipePID - #enableDialogButtonAndSetToDone "$DIALOGCMDFILE" - #quitDialog $DIALOGCMDFILE else printlog "No Dialog connection, just download" DEBUG curlDownload=$(curl -v -fsL --show-error ${curlOptions} "$downloadURL" -o "$archiveName" 2>&1) From 719ca81bcb09d6b76fe580dd44a55421169a1015 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Tue, 2 Aug 2022 16:51:56 +0200 Subject: [PATCH 070/209] fixed wrong status icons --- MDM/swiftdialog_list.sh | 45 ++++++++++++++++++----------------------- fragments/arguments.sh | 14 +++++++++++++ fragments/functions.sh | 21 +++++++++---------- fragments/main.sh | 8 ++++++++ 4 files changed, 51 insertions(+), 37 deletions(-) diff --git a/MDM/swiftdialog_list.sh b/MDM/swiftdialog_list.sh index 1cd7f21..0b96869 100755 --- a/MDM/swiftdialog_list.sh +++ b/MDM/swiftdialog_list.sh @@ -27,6 +27,7 @@ fakeInstallDelay=5 items=( "firefoxpkg|Firefox" + "error|Expected Error" "googlechromepkg|Google Chrome" ) @@ -63,13 +64,11 @@ dialogUpdate() { fi } -dialogActivate() { - osascript -e 'tell app "Dialog" to activate' -} - progressUpdate() { # $1: progress text (optional) local text=$1 + itemCounter=$((itemCounter + 1)) + dialogUpdate "progress: $itemCounter" if [[ -n $text ]]; then dialogUpdate "progresstext: $text" fi @@ -97,26 +96,11 @@ installomator() { local label=$1 local description=$2 - startItem $description - $installomator $label \ DIALOG_CMD_FILE=${(q)dialog_command_file} \ DIALOG_LIST_ITEM_NAME=${(q)description} \ DEBUG=$DEBUG \ LOGGING=DEBUG - -# if [[ $DEBUG -eq 0 ]]; then -# $installomator $label DIALOG_PROGRESS=yes DIALOG_CMD_FILE=$dialog_command_file -# else -# echo "DEBUG enabled, this would be 'Installomator $label'" -# for ((c=0; c<$fakeInstallDelay; c++ )); do -# p=$((c * 100 / fakeInstallDelay)) -# dialogUpdate "progress: $p" -# sleep 1 -# done -# fi - - completeItem $description "success" } cleanupAndExit() { @@ -227,7 +211,7 @@ trap cleanupAndExit EXIT tmpDir=$(mktemp -d) # setup first list -itemCount=${#items} +itemCount=$((${#items} + 2)) listitems=( "--listitem" "Configure Tools" ) @@ -246,10 +230,10 @@ echo "installing Swift Dialog" checkSwiftDialog # display first screen -$dialog --title "Configuring your Mac" \ +$dialog --title "More Software" \ --icon "SF=gear" \ - --message "Setting up some more things..." \ - --progress 100 \ + --message "We are downloading and installing some extra Apps. Hold on for minute..." \ + --progress $itemCount \ "${listitems[@]}" \ --button1disabled \ --big \ @@ -258,14 +242,25 @@ $dialog --title "Configuring your Mac" \ --messagefont size=16 \ --commandfile $dialog_command_file & dialogPID=$! sleep 0.1 -dialogActivate + +itemCounter=0 +progressUpdate "ConfigureTools" completeItem "Configure Tools" "success" for item in $items; do label=$(cut -d '|' -f 1 <<< $item) description=$(cut -d '|' -f 2 <<< $item) + + startItem $description installomator $label $description done -dialogUpdate "quit:" +# clean up UI + +dialogUpdate "progress: complete" +dialogUpdate "progresstext: Finished" + +dialogUpdate "button1: enable" +dialogUpdate "button1text: Done" + diff --git a/fragments/arguments.sh b/fragments/arguments.sh index d600180..ebe30bf 100644 --- a/fragments/arguments.sh +++ b/fragments/arguments.sh @@ -7,6 +7,20 @@ if ! is-at-least 10.14 $installedOSversion; then exit 98 fi +# check Swift Dialog presence and version +DIALOG_CMD="/usr/local/bin/dialog" + +if [[ -x $DIALOG_CMD ]]; then + # Swift Dialog is not installed, clear cmd file variable to ignore + DIALOG_CMD_FILE="" +fi + +if ! is-at-least 1.11.2 "$(/usr/local/bindialog --version)"; then + # list item progress is only available with SD 1.11.2 and higher + DIALOG_LIST_ITEM_NAME="" +fi + + # MARK: argument parsing if [[ $# -eq 0 ]]; then if [[ -z $label ]]; then # check if label is set inside script diff --git a/fragments/functions.sh b/fragments/functions.sh index 2c4b35a..864bfce 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -14,17 +14,15 @@ cleanupAndExit() { # $1 = exit code, $2 message, $3 level printlog "Debugging enabled, Deleting tmpDir output was:\n$deleteTmpOut" DEBUG fi -# # If displaying progres, quit dialog -# if [[ $DIALOG_PROGRESS == "main" || $DIALOG_PROGRESS == "list" ]]; then -# quitDialog "$DIALOGCMDFILE" -# fi # If we closed any processes, reopen the app again reopenClosedProcess if [[ -n $2 && $1 -ne 0 ]]; then printlog "ERROR: $2" $3 + updateDialog "fail" "Error ($1; $2)" else printlog "$2" $3 + updateDialog "success" "" fi printlog "################## End Installomator, exit code $1 \n" REQ @@ -846,7 +844,6 @@ runUpdateTool() { finishing() { printlog "Finishing..." - updateDialog "wait" "Finishing..." sleep 3 # wait a moment to let spotlight catch up getAppVersion @@ -931,7 +928,7 @@ readDownloadPipe() { fi if [[ $char == % ]]; then - updateDialog $progress "Downloading $name - $progress%" + updateDialog $progress "Downloading..." progress="" keep=0 fi @@ -976,11 +973,11 @@ updateDialog() { local cmd_file=${4:-$DIALOG_CMD_FILE} local progress="" - if [[ state =~ [0-9]* \ - || state == "reset" \ - || state == "increment" \ - || state == "complete" \ - || state == "indeterminate" ]]; then + if [[ $state =~ '^[0-9]' \ + || $state == "reset" \ + || $state == "increment" \ + || $state == "complete" \ + || $state == "indeterminate" ]]; then progress=$state fi @@ -995,7 +992,7 @@ updateDialog() { echo "progress: $progress" >> $cmd_file fi if [[ $message != "" ]]; then - echo "progresstext: $message" >> $cmd_file + echo "progresstext: $name - $message" >> $cmd_file fi else # list item has a value, so we update the progress and text in the list diff --git a/fragments/main.sh b/fragments/main.sh index 6cf93b9..66a8200 100644 --- a/fragments/main.sh +++ b/fragments/main.sh @@ -168,6 +168,8 @@ fi # MARK: check if this is an Update and we can use updateTool if [[ (-n $appversion && -n "$updateTool") || "$type" == "updateronly" ]]; then printlog "appversion & updateTool" + updateDialog "wait" "Updating..." + if [[ $DEBUG -ne 1 ]]; then if runUpdateTool; then finishing @@ -257,8 +259,10 @@ if [[ $currentUser != "loginwindow" && $NOTIFY == "all" ]]; then printlog "notifying" if [[ $updateDetected == "YES" ]]; then displaynotification "Updating $name" "Installation in progress …" + updateDialog "wait" "Updating..." else displaynotification "Installing $name" "Installation in progress …" + updateDialog "wait" "Installing..." fi fi @@ -295,8 +299,12 @@ case $type in ;; esac +updateDialog "wait" "Finishing..." + # MARK: Finishing — print installed application location and version finishing +updateDialog "success" "$appversion" + # all done! cleanupAndExit 0 "All done!" REQ From a094ffca67124e9f7452e733fa7b169b487d8bdd Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Tue, 2 Aug 2022 17:04:35 +0200 Subject: [PATCH 071/209] now shows verifying step, code cleanup --- MDM/swiftdialog_list.sh | 108 ++++++---------------------------------- fragments/functions.sh | 4 +- fragments/main.sh | 2 - 3 files changed, 18 insertions(+), 96 deletions(-) diff --git a/MDM/swiftdialog_list.sh b/MDM/swiftdialog_list.sh index 0b96869..9f3b8a7 100755 --- a/MDM/swiftdialog_list.sh +++ b/MDM/swiftdialog_list.sh @@ -44,7 +44,6 @@ repoDir=$(dirname $scriptDir) dialog="/usr/local/bin/dialog" - if [[ DEBUG -eq 0 ]]; then dialog_command_file="/var/tmp/dialog.log" else @@ -82,14 +81,6 @@ startItem() { progressUpdate $description } -completeItem() { - local description=$1 - local itemStatus=$2 - - dialogUpdate "listitem: $description: $itemStatus" - echo "completed item $description: $itemStatus" -} - installomator() { # $1: label # $2: description @@ -110,81 +101,13 @@ cleanupAndExit() { kill $caffeinatePID fi - # kill dialog process -# if [[ -n $dialogPID ]]; then -# dialogUpdate "quit:" -# kill $dialogPID -# fi - # clean up tmp dir if [[ -n $tmpDir && -d $tmpDir ]]; then echo "removing tmpDir $tmpDir" rm -rf $tmpDir fi - -# # remove dialog command file -# if [[ -e $dialog_command_file ]]; then -# rm $dialog_command_file -# fi } -checkInstallomator() { - if [[ ! -e $installomator ]]; then - echo "Installomator not found at path $installomator. Installing" - - installomatorPkg="$tmpDir/Installomator.pkg" - - # download Installomator pkg - if ! downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/Installomator/Installomator/releases/latest" \ - | awk -F '"' "/browser_download_url/ && /pkg\"/ { print \$4; exit }"); then - echo "could not get Installomator download url" - exit 96 - fi - - echo "downloading Installomator from $downloadURL" - if ! curl --fail --silent -L --show-error "$downloadURL" -o $installomatorPkg; then - echo "could not download Installomator" - exit 95 - fi - - echo "verifying Installomator" - # verify pkg - if ! spctlout=$(spctl -a -vv -t install "$installomatorPkg" 2>&1 ); then - echo "Error verifying $installomatorPkg" - exit 94 - fi - teamID=$(echo $spctlout | awk -F '(' '/origin=/ {print $2 }' | tr -d '()' ) - if [ "JME5BW3F3R" != "$teamID" ]; then - echo "Team IDs do not match!" - exit 93 - fi - # Install pkg - - echo "Installing Installomator" - if [[ DEBUG -eq 0 ]]; then - installer -pkg $installomatorPkg -tgt / -verbose - - # check if Installomator is correctly installed - if [[ ! -x $installomator ]]; then - echo "failed to install Installomator" - exit 92 - fi - else - echo "DEBUG enabled, skipping Installomator install" - fi - else - # update installomator - # installomator installomator - fi -} - -checkSwiftDialog() { - if [[ ! -x $dialog ]]; then - installomator swiftdialog "Swift Dialog" - fi -} - - # MARK: sanity checks # check minimal macOS requirement @@ -199,6 +122,19 @@ if [[ $DEBUG -eq 0 && $(id -u) -ne 0 ]]; then exit 97 fi +# check for installomator +if [[ ! -x $installomator ]]; then + echo "Cannot find Installomator at $installomator" + exit 96 +fi + +# check for Swift Dialog +if [[ ! -x $dialog ]]; then + echo "Cannot find dialog at $dialog" + exit 95 +fi + + # MARK: Setup # No sleeping @@ -207,13 +143,10 @@ caffeinate -dimsu & caffeinatePID=$! # trap exit for cleanup trap cleanupAndExit EXIT -# get a temp -tmpDir=$(mktemp -d) - # setup first list -itemCount=$((${#items} + 2)) +itemCount=$((${#items} + 1)) -listitems=( "--listitem" "Configure Tools" ) +listitems=( ) for item in $items; do label=$(cut -d '|' -f 1 <<< $item) @@ -221,14 +154,6 @@ for item in $items; do listitems+=( "--listitem" ${description} ) done -# download and install Installomator -startItem "Configure Tools" -checkInstallomator - -# download and install Swift Dialog -echo "installing Swift Dialog" -checkSwiftDialog - # display first screen $dialog --title "More Software" \ --icon "SF=gear" \ @@ -244,9 +169,6 @@ $dialog --title "More Software" \ sleep 0.1 itemCounter=0 -progressUpdate "ConfigureTools" - -completeItem "Configure Tools" "success" for item in $items; do label=$(cut -d '|' -f 1 <<< $item) diff --git a/fragments/functions.sh b/fragments/functions.sh index 864bfce..66f95ff 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -430,6 +430,7 @@ installAppWithPath() { # $1: path to app to install in $targetDir # verify with spctl printlog "Verifying: $appPath" INFO + updateDialog "wait" "Verifying..." printlog "App size: $(du -sh "$appPath")" DEBUG appVerify=$(spctl -a -vv "$appPath" 2>&1 ) appVerifyStatus=$(echo $?) @@ -575,6 +576,7 @@ installFromDMG() { installFromPKG() { # verify with spctl printlog "Verifying: $archiveName" + updateDialog "wait" "Verifying..." printlog "File list: $(ls -lh "$archiveName")" DEBUG printlog "File type: $(file "$archiveName")" DEBUG spctlOut=$(spctl -a -vv -t install "$archiveName" 2>&1 ) @@ -954,7 +956,7 @@ readPKGInstallPipe() { progress="$progress$char" fi if [[ $char == . && $keep == 1 ]]; then - updateDialog $progress "Installing $appname" + updateDialog $progress "Installing..." progress="" keep=0 fi diff --git a/fragments/main.sh b/fragments/main.sh index 66a8200..c9bdc8f 100644 --- a/fragments/main.sh +++ b/fragments/main.sh @@ -304,7 +304,5 @@ updateDialog "wait" "Finishing..." # MARK: Finishing — print installed application location and version finishing -updateDialog "success" "$appversion" - # all done! cleanupAndExit 0 "All done!" REQ From 629aa2201743539d57ba98fc05c88ee201d99c13 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Wed, 3 Aug 2022 09:02:38 +0200 Subject: [PATCH 072/209] added single app example for SwiftDialog --- MDM/swiftdialog_example.sh | 153 +++++++++++++++++++++++++++++++++++++ MDM/swiftdialog_list.sh | 7 +- 2 files changed, 155 insertions(+), 5 deletions(-) create mode 100755 MDM/swiftdialog_example.sh diff --git a/MDM/swiftdialog_example.sh b/MDM/swiftdialog_example.sh new file mode 100755 index 0000000..72af118 --- /dev/null +++ b/MDM/swiftdialog_example.sh @@ -0,0 +1,153 @@ +#!/bin/zsh + +# runs through a list of Installomator items +# and displays status using Swift Dialog +# +# dependencies: +# - Swift Dialog: https://github.com/bartreardon/swiftDialog +# - Installomator: https://github.com/Installomator/Installomator +# this script will install both if they are not yet present + +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +# MARK: Variables + +# set to 1 to not require root and not actually do any changes +# set to 0 for production +if [[ $1 == "NODEBUG" ]]; then + DEBUG=0 +else + DEBUG=1 +fi + +# the label to install: +label="googlechromepkg" + + +# MARK: Constants + +scriptDir=$(dirname ${0:A}) +repoDir=$(dirname $scriptDir) + +# if [[ $DEBUG -eq 1 ]]; then + installomator="$repoDir/utils/assemble.sh" +# else +# installomator="/usr/local/Installomator/Installomator.sh" +# fi + +dialog="/usr/local/bin/dialog" + +if [[ DEBUG -eq 0 ]]; then + dialog_command_file="/var/tmp/dialog.log" +else + dialog_command_file="$HOME/dialog.log" +fi + + +# MARK: Functions + +dialogUpdate() { + # $1: dialog command + local dcommand=$1 + + if [[ -n $dialog_command_file ]]; then + echo "$dcommand" >> $dialog_command_file + echo "Dialog: $dcommand" + fi +} + +progressUpdate() { + # $1: progress text (optional) + local text=$1 + itemCounter=$((itemCounter + 1)) + dialogUpdate "progress: $itemCounter" + if [[ -n $text ]]; then + dialogUpdate "progresstext: $text" + fi +} + +startItem() { + local description=$1 + + echo "Starting Item: $description" + dialogUpdate "listitem: $description: wait" + progressUpdate $description +} + +cleanupAndExit() { + # kill caffeinate process + if [[ -n $caffeinatePID ]]; then + echo "killing caffeinate..." + kill $caffeinatePID + fi + + # clean up tmp dir + if [[ -n $tmpDir && -d $tmpDir ]]; then + echo "removing tmpDir $tmpDir" + rm -rf $tmpDir + fi +} + +# MARK: sanity checks + +# check minimal macOS requirement +if [[ $(sw_vers -buildVersion ) < "20" ]]; then + echo "This script requires at least macOS 11 Big Sur." + exit 98 +fi + +# check we are running as root +if [[ $DEBUG -eq 0 && $(id -u) -ne 0 ]]; then + echo "This script should be run as root" + exit 97 +fi + +# check for installomator +if [[ ! -x $installomator ]]; then + echo "Cannot find Installomator at $installomator" + exit 96 +fi + +# check for Swift Dialog +if [[ ! -x $dialog ]]; then + echo "Cannot find dialog at $dialog" + exit 95 +fi + + +# MARK: Setup + +# No sleeping +caffeinate -dimsu & caffeinatePID=$! + +# trap exit for cleanup +trap cleanupAndExit EXIT + +# display first screen +$dialog --title none \ + --message "" \ + --hideicon \ + --progress 100 \ + --button1disabled \ + --height 40 \ + --width 500 \ + --position bottomright \ + --ontop \ + --movable \ + --commandfile $dialog_command_file & dialogPID=$! + +sleep 0.1 + +$installomator $label \ + DIALOG_CMD_FILE="$dialog_command_file" \ + DEBUG=$DEBUG + +# clean up UI + +dialogUpdate "progress: complete" +dialogUpdate "progresstext: Done" + +sleep 0.5 + +dialogUpdate "quit:" + diff --git a/MDM/swiftdialog_list.sh b/MDM/swiftdialog_list.sh index 9f3b8a7..cb48483 100755 --- a/MDM/swiftdialog_list.sh +++ b/MDM/swiftdialog_list.sh @@ -20,9 +20,6 @@ else DEBUG=1 fi -# the delay to simulate an install in DEBUG mode -fakeInstallDelay=5 - # list of Installomator labels items=( @@ -157,14 +154,14 @@ done # display first screen $dialog --title "More Software" \ --icon "SF=gear" \ - --message "We are downloading and installing some extra Apps. Hold on for minute..." \ + --message "We are downloading and installing some extra Apps..." \ --progress $itemCount \ "${listitems[@]}" \ --button1disabled \ --big \ --ontop \ --liststyle compact \ - --messagefont size=16 \ + --width 700 \ --commandfile $dialog_command_file & dialogPID=$! sleep 0.1 From 92a4c4f3cb64d6b4e05664a5c2ed5650a318e79d Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Wed, 3 Aug 2022 10:46:47 +0200 Subject: [PATCH 073/209] fixed dialog check --- fragments/arguments.sh | 22 +++++++++------------- 1 file changed, 9 insertions(+), 13 deletions(-) diff --git a/fragments/arguments.sh b/fragments/arguments.sh index ebe30bf..c993777 100644 --- a/fragments/arguments.sh +++ b/fragments/arguments.sh @@ -7,19 +7,6 @@ if ! is-at-least 10.14 $installedOSversion; then exit 98 fi -# check Swift Dialog presence and version -DIALOG_CMD="/usr/local/bin/dialog" - -if [[ -x $DIALOG_CMD ]]; then - # Swift Dialog is not installed, clear cmd file variable to ignore - DIALOG_CMD_FILE="" -fi - -if ! is-at-least 1.11.2 "$(/usr/local/bindialog --version)"; then - # list item progress is only available with SD 1.11.2 and higher - DIALOG_LIST_ITEM_NAME="" -fi - # MARK: argument parsing if [[ $# -eq 0 ]]; then @@ -113,6 +100,15 @@ if [[ "$(whoami)" != "root" && "$DEBUG" -eq 0 ]]; then cleanupAndExit 6 "not running as root, exiting" ERROR fi + +# check Swift Dialog presence and version +DIALOG_CMD="/usr/local/bin/dialog" + +if [[ -x $DIALOG_CMD ]]; then + # Swift Dialog is not installed, clear cmd file variable to ignore + DIALOG_CMD_FILE="" +fi + # MARK: labels in case statement case $label in longversion) From e1ad0c01322cc0a96b25bc71b3222209ca5a2de2 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Wed, 10 Aug 2022 14:54:51 +0200 Subject: [PATCH 074/209] fixed logic error and added `--mini` window for dialog --- MDM/swiftdialog_example.sh | 6 ++---- fragments/arguments.sh | 5 +++-- 2 files changed, 5 insertions(+), 6 deletions(-) diff --git a/MDM/swiftdialog_example.sh b/MDM/swiftdialog_example.sh index 72af118..ee48ef3 100755 --- a/MDM/swiftdialog_example.sh +++ b/MDM/swiftdialog_example.sh @@ -124,13 +124,11 @@ caffeinate -dimsu & caffeinatePID=$! trap cleanupAndExit EXIT # display first screen -$dialog --title none \ +$dialog --title "Installing $label" \ --message "" \ --hideicon \ + --mini \ --progress 100 \ - --button1disabled \ - --height 40 \ - --width 500 \ --position bottomright \ --ontop \ --movable \ diff --git a/fragments/arguments.sh b/fragments/arguments.sh index c993777..29d81a5 100644 --- a/fragments/arguments.sh +++ b/fragments/arguments.sh @@ -25,7 +25,7 @@ fi while [[ -n $1 ]]; do if [[ $1 =~ ".*\=.*" ]]; then # if an argument contains an = character, send it to eval - printlog "setting variable from argument $1" WARN + printlog "setting variable from argument $1" INFO eval $1 else # assume it's a label @@ -104,8 +104,9 @@ fi # check Swift Dialog presence and version DIALOG_CMD="/usr/local/bin/dialog" -if [[ -x $DIALOG_CMD ]]; then +if [[ ! -x $DIALOG_CMD ]]; then # Swift Dialog is not installed, clear cmd file variable to ignore + printlog "SwiftDialog is not installed, clear cmd file var" DIALOG_CMD_FILE="" fi From 52a9117de8a7c9952c792b43a9297d0ae0acd356 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Thu, 11 Aug 2022 13:13:57 +0200 Subject: [PATCH 075/209] added sample policy scripts --- MDM/Jamf/00_Prepare_SwiftDialog.sh | 60 ++++++++++++++++++++++++++++++ MDM/Jamf/zz_Quit_SwiftDialog.sh | 46 +++++++++++++++++++++++ 2 files changed, 106 insertions(+) create mode 100755 MDM/Jamf/00_Prepare_SwiftDialog.sh create mode 100755 MDM/Jamf/zz_Quit_SwiftDialog.sh diff --git a/MDM/Jamf/00_Prepare_SwiftDialog.sh b/MDM/Jamf/00_Prepare_SwiftDialog.sh new file mode 100755 index 0000000..d8c00cc --- /dev/null +++ b/MDM/Jamf/00_Prepare_SwiftDialog.sh @@ -0,0 +1,60 @@ +#!/bin/zsh + +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +# MARK: Constants + +dialog="/usr/local/bin/dialog" + +dialog_command_file=${4:-"/var/tmp/dialog.log"} +message=${5:-"Self Service Progress"} +icon=${6:-"/System/Applications/App Store.app/Contents/Resources/AppIcon.icns"} + +# MARK: Functions + +dialogUpdate() { + # $1: dialog command + local dcommand=$1 + + if [[ -n $dialog_command_file ]]; then + echo "$dcommand" >> $dialog_command_file + echo "Dialog: $dcommand" + fi +} + +# MARK: sanity checks + +# check minimal macOS requirement +if [[ $(sw_vers -buildVersion ) < "20" ]]; then + echo "This script requires at least macOS 11 Big Sur." + exit 98 +fi + +# check we are running as root +if [[ $DEBUG -eq 0 && $(id -u) -ne 0 ]]; then + echo "This script should be run as root" + exit 97 +fi + +# check for Swift Dialog +if [[ ! -x $dialog ]]; then + echo "Cannot find dialog at $dialog" + exit 95 +fi + + +# MARK: Setup + +# display first screen +open -a /Library/Application\ Support/Dialog/Dialog.app --args \ + --title none \ + --icon "$icon" \ + --message "$message" \ + --mini \ + --progress 100 \ + --position bottomright \ + --ontop \ + --movable \ + --commandfile $dialog_command_file + +sleep 0.1 diff --git a/MDM/Jamf/zz_Quit_SwiftDialog.sh b/MDM/Jamf/zz_Quit_SwiftDialog.sh new file mode 100755 index 0000000..eae10b2 --- /dev/null +++ b/MDM/Jamf/zz_Quit_SwiftDialog.sh @@ -0,0 +1,46 @@ +#!/bin/zsh + +dialog="/usr/local/bin/dialog" +dialog_command_file=${4:-"/var/tmp/dialog.log"} + +dialogUpdate() { + # $1: dialog command + local dcommand=$1 + + if [[ -n $dialog_command_file ]]; then + echo "$dcommand" >> $dialog_command_file + echo "Dialog: $dcommand" + fi +} + +# check minimal macOS requirement +if [[ $(sw_vers -buildVersion ) < "20" ]]; then + echo "This script requires at least macOS 11 Big Sur." + exit 98 +fi + +# check we are running as root +if [[ $DEBUG -eq 0 && $(id -u) -ne 0 ]]; then + echo "This script should be run as root" + exit 97 +fi + +# check for Swift Dialog +if [[ ! -x $dialog ]]; then + echo "Cannot find dialog at $dialog" + exit 95 +fi + + +# close and quit dialog +dialogUpdate "progress: complete" +dialogUpdate "progresstext: Done" + +sleep 0.5 + +dialogUpdate "quit:" + +# just to be safe +killall "Dialog" + +exit 0 From 8862c4a1e764da8c0a5d02fcafe9e1e66f02308e Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Thu, 11 Aug 2022 14:05:39 +0200 Subject: [PATCH 076/209] added ReadMe --- MDM/Jamf/ReadMe.md | 44 +++++++++++++++++++++++++++++++ MDM/Jamf/SelfServiceProgress.png | Bin 0 -> 589664 bytes 2 files changed, 44 insertions(+) create mode 100644 MDM/Jamf/ReadMe.md create mode 100644 MDM/Jamf/SelfServiceProgress.png diff --git a/MDM/Jamf/ReadMe.md b/MDM/Jamf/ReadMe.md new file mode 100644 index 0000000..ef9e0b5 --- /dev/null +++ b/MDM/Jamf/ReadMe.md @@ -0,0 +1,44 @@ +# Display Installomator Progress with SwiftDialog in Jamf + +Installomator 10 has functionality to communicate with [Bart Reardon's swiftDialog](https://github.com/bartreardon/swiftDialog). When you set the `DIALOG_CMD_FILE` variable Installomator will write progress for downloads and installation (with pkgs) to the command file which allows swiftDialog to display the progress. + +However, you have to launch and setup swiftDialog to display a window with a progress bar before Installomator launches and also make sure swiftDialog quits after Installomator has run. This may seem complex at first but allows to configure swiftDialog just for your case without needing to modify the Installomator script. + +Here are some example script that would run before and after Installomator to display a swiftDialog window and quit the process after. Since Jamf Pro executes scripts in alphanumerical order, the names are chosen accordingly, to ensure proper order. + +## Setup in Jamf Pro + +To show Installomator progress with swiftDialog from a Jamf Policy, you require three scripts: + +- `00_Prepare_SwiftDialog.sh`: Configures and displays the swiftDialog window +- `Installomator.sh`: (v10 or higher) +- `zz_Quit_SwiftDialog.sh`: quits swiftDialog + +Add these three scripts to your Jamf Pro and create a policy with these three scripts. The names are chosen that the script appear in the correct order. If you rename the scripts in Jamf Pro, this may disrupt the order and the workflow will not work anymore. The "Priority" of the scripts in the policy should all be the same value. + +The different scripts require a set of parameters. We will use the `googlechromepkg` label as an example. + +`00_Prepare_SwiftDialog.sh` + +Parameter 4: `/var/tmp/dialog` (Path to the swiftDialog command file) +Parameter 5: `Installing Google Chrome...` (text shown in the swiftDialog window above the progress bar) +Parameter 6: Path to or URL for an icon in swiftDialog. This can be a path on the client or a URL. See Dan Snelson's advice on how to get icon URLs for Self Service icons: https://rumble.com/v119x6y-harvesting-self-service-icons.html + +`Installomator.sh` + +Parameter 4: `googlechromepkg` (the label to install) +Parameter 5: `DIALOG_CMD_FILE=\var\log\dialog.log` (the swiftDialog command file, this has to be the same value as parameter 4 in the previous script) +Parameter 6: `NOTIFY=silent` (disable Installomator notifications, optional) + +You can add more configurations to the Installomator script when needed. + +`zz_Quit_SwiftDialog` + +Parameter 4: `\var\log\dialog.log` (the swiftDialog command file, this has to be the same value as parameter 4 in the first script) + +Then setup the remainder of the Jamf Policy to your needs. This works best with Self Service policies. + +When you run the policy, the first script will configure and display swiftDialog. Installomator.sh will download and install the app while writing the proper update commands to the file set in `DIALOG_CMD_FILE`. The final script will quit swiftDialog. + +![](SelfServiceProgress.png) + diff --git a/MDM/Jamf/SelfServiceProgress.png b/MDM/Jamf/SelfServiceProgress.png new file mode 100644 index 0000000000000000000000000000000000000000..1ab305f0e61a668f0d8ff58955cc931bdde75569 GIT binary patch literal 589664 zcmZU)1yoy6w=N2WLR+j9cP-H36t}cUacOb40>xd5B*h&{p}2c-cL-A43GVJ5B!Q4T z{&Ua0=f3wc#u`heWz9AAm~(x5?g({NIlNbtuh7uY@D$`_zM`Q$&p|`O2!4U}w4$Su zH2u_}yM2|DLaQ97K75*(Tk0xUsi>g6e;U6)Ll3h-!~74+Q=@!pXlR(fL(#CG`ZrHa zJqH~P<Ecmg4?XAE|K@z2lY{ZU#~8s+bhJ+z(h3Ssy@rLWrKO|WcPDqN8!we7!Fd}^ zU3Xm-Wl;+!2QIU3PUe<e-VV<H5kV987JV8zSh}0hdpp=Wx`}#AF#Z>Z=+pQ=%iN6g z|Ha~NC&8$zqE0XE<Z4MT$i>6O!zlTRo}OOZ^_!LGSDDZME&eo<VEpdx?kvj9?d9dg z<@JHf$<>;hS42dFn}?5^kB{?-gVXJYqq~_mr=uIw|5Eb5^~hMdS-9FbyW2Q9(*H-V znYojPy96WSe+>Pf-~albmfkl1W69C&zqj?YLGJ%hxOusFxc`stCsFbLtct4Jcw5@* z$=EnNx#!7-qzDg>_<!;L|0w@s@&A(4{U1qQe*XWL=>J9f|B7n4S-MI)IXu~Pm;9fj z`ER@bH}Ss(#kv2p_5aHi|I5$+wff{}$yegs|L4#oUztQ|xTB$cL{pIYr0I=*;*Xuf zEIaFQ`sS_T8$xDz%`d+)NIi!{f-un)vUi^R;P)c%8RHw`_=7-ty_bPI)XX^HfiIt9 zG6yMI-2wJje9KCGeb#)-agI=WJVshV8E#Hm9%J@u;4HJa4jxZ?N+}Ag^cwMMcW+!O zLBW_Ytm=4a@-U_cwrU!zWqfjo7d3zfN$vF^9Ap5D6N&@<qigs~L38VNc{w4d_vPeh zC|B(MhmV2iSKL8B`6qn7i)}#n#iaI!j9<Q-$W1N+3A?*7L~i~m`4L9=D{hQ(K*%dH zpV<)pOnBRui;>vcm2k`zb*%wdn?Eke#4v8aX9=V&w&86r9Gk!+^S6R?;sDlnSo7Pl zBdK*Zl3*EC2n63ZT}8UYzmLu(#3i;~*-iULet!-djH!Q8qu5j8Bk|tX{<l&0OFcai zJ{P%Lh$y;YT7N2{P{FWqZaL_7`~zLLc~;Q;i^vS|#Muj5jd3YMay+W>oCV%>j<8y5 zB>H3nYIymQ5pap2VII_^`%e@9aSk*JMyrJbnveppfZfYTfIMY){)c}zbia%|B#_hC zVO0C#i%tiWG);{k{-ouSs?}Bf2m+hkpa@ZDL9dUwi?bZWuFmU_yXlX7UkNn^rUhJ1 zpZ|7gg>M@QbRDHUzSrY#gY`<n+~`yzA@E)u-CuoHEa~(gX*?U+`wMK8iY4snk+D#2 zB0_fI2%5J$9!4Fg`G+Fqz-%P3<~ho<@j1`YQsbMl!xk(~OWSQ8(v(+!9NHN<5ABp+ zncDFRu7gS#!MCWcA`ZnUliNuJ4%e3Cch0_*s1%K>Gz|9brmmm@3zSE4b<|~pcV-;{ zz#%LsI~yg!B7xvl{}h*U?~ing6z>cmIeaejZ@`;k`(iKwOAASToCWuaaK-7;Hj-8+ zL3sG_YEN5FzX#oaQbk(*y{aN^&>{ewFd8q(ime0{>yXKt4Yj6&8@<m@xoEey*!YzI z%SBphRYD@EFF0A)GHM+L5KRufVGR$ngrCJ4mGOat2YH@UM8b`q(-HNL=Wvq>un)Zm zKQ$e3OlBNI2<003EouQYN-^;17F9U`zOqCM|BD~x0Bom)u0O7a4h|I4R>2TApH5L} z^jI4>EVqC@;)G&R(P>z&KB&R_r{}}<nLveisg>K?5S?E7VAQu&f;y$Ow^Uv}xi>U9 z_?4ZFLH{<~Ry}}w69Dwhecpj}D>32{?5%S*q*64-@n!$Hq1Lz0KN-s8IF~Zd0bSJ{ zzg1~XJ*!RsfS(Z*@l+dbQI{$}_u124HwHTG&>@!SA1*93zE5J4SGTD6nyDLq8>{}Z zqM=V)OL0wNyS?QmqiZPxi4Kd#WeJ+?a)i+hS24#Yf8FlJvT5Htr=|qaNzrj$)Mz63 zw@|My3;7mc>0eU0uUlRi*}p?C=S5{%^O{E$><wD50!Sj+1M?Y-Uk|V8l)%`D-iP%a zg|yco59AHd>tTyD5PeY3>?g<mT_)Qz+(Di(Wg0qtoz&czgaOt1%1dl835J{6u1bW0 z5m}KjyFg<q;7HxKeora$#m^~g#NXI2lRVuJ^4&pnEvAdH&I?|}qsY#BMvPwWbhXA3 zQjNjEwT(ODgCLVnhm-YOIEllPHCzZ+CeuD{3fcP!Uq+AU_h>O19~1JYck#as%h=L( zsfpcR_I<s?4u<7hd=|aGewk(4w}E$58)XrhCxGIs^7nuA7z4w5h4%nN<U(-H7|CO` z+sUC9dOv=hq~k82{@s(cygAy#ZVl(K|E)h_RImq=!++ylUUbcLB{Xp|t$vIsW5zqq zU<+VJRy#qJ90@~S%C&Tx5U<%Dx0Rz*;PI)J2K$B$e<JtyZ4?Yrzx$OYQau2s>VhaP zOGpWVV!*f$7yIOszl@Z_yjHw;fY4!6+~ELqj|(LQqRzk|56=X3t2c_V()Mpo!Ya;5 zWIr~ki^^PM2->FQN@%mzFQ&c6Wy9f^0V0R^qI#3=c?jO#f6Z6>(mr4<#?XzWIDhCq zA~Ln^Us!Sr+9E7&K>aGVM%_J5nDYX*Kc$Dz^w}6yz9Z43r1~3EEocV~s|;HosHT<t zLdjfGExB2q5~%ytGbf*h*Ob_Ev9SXMA#QY!PruW%1iID`U=$5ghbU1P0~?z`hkeP} zn>ZR6)u9<~<(hCMPIp^i%fH+`Yvr47>T+V}%ZMiUkcGXrK)=cR-q-jK-*+1CIsGf} zfR-AUkhs2i#go9$WoyJ36P*oJO&txdEV5yoV=S-nEoi~gG<oK+i>tQP@`dbIgRoc+ zPJ-iKAvC*M2Day6HX}0myP_YQD26k`ju5O^V_Sw5!c<VFpY@KxRlAA3GWnklX*45M zj=JF(d2}FS6mCcgRs^jT_4v^TRf164!<iiE0XWKd&ID7Qs}}9|+4(V?TlGzV)6d83 zR%(qb4V>xzmuS_$Vg@SlZvnP48(I^vfqg)qxd;w~+JWBCT7B))Yy(Pz9f!8`j&6wl zXmcMi&5FCQ=dG)FMZOQGBX|H{5CRy@4x3PZuO9%cA7CW778d!qNimkAG;@&xMmg^j zrO-?<YV0X0SuE=6SriqQQZfeY<L7N-zBC=K>=YO1E!|SkSmjz6jbJc*Gn4zVdUh06 zHM_KJ$XuVHak|{Cwry|VrtN^ifBizhw2p$Z@&hy}_r%*9b%(+Nd-w@sZ^lieP``P! zerI5;NWU*1lT`O<I6ofbj)~6Hvc2&DzW+TX&>!g&^ad1;5#%wbUZ#L6NFIHxd`5Fm z-ZHzBJlc0M^I)=quJYp_+3nR#1UakyTuC=x31x4ddo}Q$*P_2*vv)hQZ$(lb`R2O~ z-tfBFBsYLcXq3QDbf9>0PaC^k#W@;8E`v9LCArH{^RZcy{&<HVx^&OSb`;dV{W%<7 zWgjG+=RABH-tEv=l~dZBM<?)TmR+-=^Q>_Iw~OFWcXgNAv?OAn@VN*e$9>NvRmk=4 zu01y3&0lC-jcqiyy$zRSqePV|kU|u=6PGq-$Y<<?+?w!l&OPPnKu}C>Su}MA;XmdF zbIDl5cku|7c-TXVjEGpjO<9e-Ntv@-3W@fBtX~m`9FJ1PB&qQ_%NoQ<DvepZ5wjAx z_ya(n4b4&^AH;GH&`phCH>8z3sGT(Id)y)VR^IW={`%o6Ar5A^Uv9>(D+ue(*q60? z)R_4C<u614RsX>+9ThMK_I4RW*!zB@`*$A~PytW<7LDU}Xdtc%_oRT|J4L51-`r5- zbrv1R?e2pd#AOi3ln&EJ2UG~+l`R_Z09)TA4OJO&tg=4mXkZNW!c{l%YdS4+f?gks zfyc`?;?g8f1uZ+Xs04OBUV=SW8_i5GaC;j$A2@hBJ;03uWp8w@^JBdi?*!k8c<xXi zpQADn^_O=j+}=<ys?3V+?Qw;{H=0O}S3s=ZMvHiD!KrYdX;}MJZsb<$w=Df|&!my{ zInZ8MIS@6aI~C?Scec`i`a1FTe3u!b3yBjg!?f}SBL8B%wY{t>l6ch9d8{_eyj;jJ zYil+nUn4Erj`?IQOnscPjOgyQi9;||ZJg&NkCJTNE!Y}#qVNaMzVwqREqKn(2qE5G zNckpp)fl_!+GcLvoq>$nyBCk?I56e|7VTz7*6pB@3dEY<=DMf24}Qtv&2uGkQRvlD zBPFuIIRp#0Kcrg}1#>_z(xJ*Wd+%6mEq{;!zM-tgK|7*Y51@5u_O`|;3XZsY1S9WE zXd$-cZ{42fT>VIO2sz&eENkWjpI#^?`M<}gBnZyNc|4lF_)DzEg+Tc}fHKIbtAtTl z%P0{)D>}Su5uhfnreF2$vSpaUJ{Z*Ie19)IZhFtvYOH6B*HKC!!-s}~DO9sYjlMvn zplF$1y+@vCj659Dly7eHY3mt7%N*?9bB787ua`Yy6rRn`i&NA!h8T^ToT9^WS?%#9 zyYzI-Ka_ssY_n&tMu+{~FIxhM!DAGCi`Te2CL(86O10brAJ~M27IUElAO{-$8V0IB z0<_bE(4KCKms_kzgzl2v04L;6vJu-4e;7TCBuZYQ>;2D9aHiy?;^!9ISh*wH28_FE zZ;coGDMLeVf5F+u#gYF44N(WC7Cb=F);R2$5pLY2zAzAU$Si+3Ia`mHHBMIYtmM5| z8qJuj^~;?b#=wo@=NWb!{;-@6IJ1~T+2iDNn2BOSWA|6-fh<<Nq5Xe{vqfFKhY;6= zhN9FbAk8=A0EY`c%E47ua|i-sWsEw=lLQ3A!DPY8wo$?mUF_=mOJ18kGQ~hlwR>9% zdz=3Ob{Ng%-=p@Xw9stgl^Yiy6c=zz_;>JdR?RWZ5!go<JMN(SdI?n$6>zdznE-w^ z+ITU4=S5r+<404=#~nm(%p~+d%rzEXE5bm$llVnNWc&Bp>7ty5i#C*-y6MkLK~Qrl zz-X6CZkv$+S&SDoW4l0I^S8M~gW57Sq)fQ%M(zRk8C@qlhmCu<u(um2_clP781o}Z z)V`VkTrZe6_IMrb1tYVE0yEGxMP^`>u69FbeH$+m`}=ewK8$5}4ofRo1Z7WHL!7Rj z`Y-ma@$JZcvBT6O)rH)Jaoin3plkaVn84`)Dn|hjD%omss}n$WPyF+%#ij%WVSK*u zmA1=>U8KNjId#2Ro%)$U^y<jGW|n0tDNE4(AH&X6j-)YPz$aL>)t5{f9Bq5i9Rh<T z2>&RCl0O-iv4b=qX)xrJ5+anmK=i$s8-T%XpMU!($Fs8;MUKc8+=(w&NSF_y9xE6J zY)~PhLoTjAeKERBPt+afMjtZ6vFNmqX~DCcZq4v{ZZIUEYKbcJ_eB+sx>^SPTtzVB z07piYNyyU2x$&<Z$OE2Z^jaIBq@$!L+h+=hmXFeTF4*!#e`|?Rzf0;e`ZUbNeNyc# zejNvLdlQ<LEA)QR)^Ont-4@ywb<wuBo=>Wcl#36fD*{>YQkoOfFvq92pX8)Wm0t!f zf2;q%(O8ndV$8yQn~2|uA~8%6t7}ju@=nxiJ2Y$D)jh%9E0%NmTXXE`AR^OJ1%jSj z9KL=B8Z3<T2n|+LmH9C6>u<5DMkO>jYX&{)&uE^Y+qEM6;{@n}ouB4)&{lUhk{}?{ zqI&AbsCsJD1HvF16$!bcV+l#2@Kl!aLnel|KrN|~PpvaRts&WMo>{18EFV2$=MnZg zqK$UI`<fYOmEgCP3I6ddXR6_y07)wE5dWkPK(+!e;QHE*0&poU3op{88YO)}Cxp^Z zkED&ru{ch07|~JCAo#*%4<*4M-nMaERJJe>Q#7q~agRs;ZL;Rc(Mk%k;t}&)hNh}e z*Iego`Kj~(c^W-7A(eJ*twzguTB>d6FflV*vsGGA5YOJDP9=@*AGQZ)`%@I(Cw0<} z38lADP_<aC{?zPoAX1=+3x=W8P68s=P{Zw1uSW$FJP<2d|8(5Ta1<s77|B)yeW0SP z`2d*hMD_&*l`mYn$+^CSO9s$B-$`aPmo@T7{$Z~P68RXsjc_*m3lCeQnOrd}BT^X` zZmx4U>c+<u#L!JFVhVJC6xgH`3a$G|_`BrKLfj@K6UN&wO0R45tOS^7)<HlVau@BI zWVHVHZ0D4eL6QA)YL)l+<TUDi&3tG#VS{v?TAZrOxiudZId)!rn7-bjQ=BCM*>7Co z3;m4Gza?am4XJa~pxH}uVn?Z$Vga<9@S<oMmKGDK@C5)UlGj$>ucHA&UjlpVH-D+I zK$O<{)F?U*rH;Hi9nrKsERX`8u6uBOm@GCrvuH$wp4q`ps48ii^nP)e{c7%$dcxgV z;jflo%ND0rey-$wus)UU;n?ODE2%5|`6}#3k_7;1PFNAnc3;>?5k2^Q;EjJ{IwJSo zbWt#EM<3jVlGt&kms^;+XPkv$LQf(r14V5ofLav7p5BTRmdA(|Uz0?&a0^jan^M~K zyFA2zWJu1GLqYgtH4up~RUq4FnCFZ>QgLV=6tw=55#&*Zh@g2#nHE=zldhWt;H}@# zdq5CPBMS&)(Fd1s@{5F&hPo2XD*t(_Ull>(gZbXW-7?CBBkX%7wX|mU;&i|NhFh-F zN$-Q>P~cz_rtkUly#V=>?YAf{;JB7@2&E)lMS%YVVoc$SC-WBE%3V0JbgN1Bpt0nc zw1-61nx}tCs)a^!cPkGY(@P`WKmgit+Go$6w9Mxwet75uq@b91p=bNQ3Gmc+_NW`; zY<jzV$KyTzc%uPNLGTr3EX7e!l*vOR7)50;rq_h`SuS!&ZFI0(meOh+^^IMu(NrGL zX^zS#m(7(LH;a3m;OBRANqIIPDLQ?@b^ac->3P{JXqq=y8WJ@5Z~}JE&)5DD5?`DN z-v)P?R)~8izQ%Ud?Bt98gF8AOH<LPJ>ltngo!8AkHIFPv1S?Y;-1k>8FeJTYj=f); z$O_oG>I-n$krw{iFZH$>YfFgg194Kz<nn417c7d)UfDc<wDC_@*&T?A^@wvQ1AMnC zpu=0aXI4{9Q!yI<Hq>y(iU#VG722Qw=VKJmXukF7DXf;zq&Za=)>%8b+?{kk3hkP@ zAR)>*N<|M1?c8co7);dv%(G2N%e@cI28mE^@r4ia!We#+mp1HqJ4zMq=iG~Kwiu-j z)kvZ+xmim&P+g`DYr=}*7$Rvu9p7RQj4Wx&L<xx1s2<ng<c~uq_5oEOyhf>p0avty zg>yI}j#`|HDr^oZP4!MaBKVtN|Fm$Z)YeCccHeU4U8%;tR6ZQg`2_1^;|a?R^w&$E zYOKr==0>SuF@U%^Fa8&6z~eFZs~Wk&V{S12<LMur74r?-$iGF3?BzA8_u1U%2`p*e zza{%6_owF^M(E9J<jphdb8W#F&IW&NA5A-@H_35>?kV>lch46=vII!-NZV<Wm(tR` zd9_SNQs$?(Q>QCJb_$Rs5a&%K;MT;e^sc%edG2||YLp+14U98FbP38(H}Fb-M5YJ{ zQuTSngS3RM$gpT^eliMCH=}O02@K)}smt=s|H7o7PX*7hG{=YQ;+us~juLVg@@Zj| zDh@Q&w90f5ulqgD9#&0=|7l$CES~GL#_$2d9j?1($5qe?egobdjG8#h79-euMNyrI zNb7I}tuHO;D(Ks&*m=Pwk!tviA7Zt#dwqJ>g*-glIZ!6Hgr?C8X*AzE0b;u{cr);E z<kbUaLI&fG8af7k-ej9o_+dWcFE()hJ|8~>K*>xytGXvj(JYU+xsP-5%$X+-)GWFv z^tC`3$^BpgEn$H(VwAIW<nblm&T&JzaRYPNtnVz-Wu;~8J?Zm1%F+;yN_Ev1kle*l zX-*6qVS;CWj8y`tu+y)({rIDdBV?%^b?fJBFCa91lcx@BK1DSaJG#}j4lxG(fuy|J zR;Oz(=*?e<|9~T+*l{yhpkd;+hrV!;;zTQ8YO@in6))%|&^MOT$4r{6{a;+#YV@H) zLSAnt$4s^4Tz2)dpwh0-V%ZwkWmo$mN?f#q16b^-ngRm6f=@T33|Q$r=wA{%m(|Mm zk?P$ibz5K`y6+5O*tPHr?7eOV;O(j$mM6XKyWB9<hd6usXx=<y!H}SF;t++M3E*Ba zA!cf}KgQRx{htxvFXpkfhY6y?r#3J(nRK4gT}uIcc&{3KpMH%AbZdde35>0XXuAU) zsq=wZM&VS=R&oe*0O)!<*_Vb&_@8C7^j4e<0zvdqExKaC&fg-w;e?Si!l1S5>Cm_~ zkI#lV{N6Ev=6*0;`=O|M9ze98Ob?a#?xC{6pSCt8edydfvIvggRD}$?A#~^9QW~^S zE1bbDX72{n;iYU2K2msKwH<A;A7cc;GmTWsvPCuYeHU#BVLdtFB051Eel8;O6F(as zp#YdKyF%Ec-DOYu>f`eA+@FFykj!5yuc252kt$MlCGzqTxaQPtu(58~VcsNlIIsuf z*Db(w7f#@}Bt=KPlPG492p$tj*4z2cd@!PO=JN5BSAENe@gI^M_qhUw?{h~yG8X>4 zjK}H(eC(?*HEC>vq>H+b2Ytdly*Edc*#4u#w#P#7cTsu5c^aF7yZmf$Dm%}s&k;lA zIDk_(T9Pp8sAsDzp%}g-q2;TUgx^Ml++9CpMhpwT)b$CA?nCQc%JjS{oj~!tesPK? zBsVqL1e=<L6PSzv97w{JwK{+2&>=GS0WN`bje%~sTJg!txqM98^pnN`qCAq5Q1BAU z!ie39CAR<PJ^+tG$RQPMn_yFVK;U-@c<q&iTDr^CJVm=;;#V?tMQlHsY|HSFwr<E$ zFy!q#sy#EH+B0|QM^@2sUW<zpR>Va2VnI#m(M~f!`#Nm2ZF@6@n`$wC$hYM$g0fJ5 zNK?3_D8BlSVZ`~AbfVZy-`XSX-*@n#_yV+#b&CX%)O(eP=a_98u@9cDI|Bf|6$V-q z@~G_aw;M2#CDnbp{*l&qpxRdN*M#C`)AMcf@jvF=o>QgAUTZ+HRiD+_L!G<zpr{?E zVm$z_HD${YrA;e^q`6fV=oDf<&+O4=GaFv<HGciohohTp=e!8f-LskL2E^hR#_Ti+ zT6Jh{2Wp7#VX7K7Cz=VC9JF$jr)cd;8v1GW5j&~f{i_&=T=>^*u;{CK15MAw7d5)d zdnFBuAzM6RzuVd@L&kr>d#8>+BLnXcM(Z0@{p!-6jS2p818%(EfoAyjbN9Rqi5g%v zHb-^tp4TpBy9gjQKPE+r`V|j5wbFXp7+%W#QrP3#RhPe4k&rQniL>+CRh?1{EHRkg z|L_mhPgPYs07NbGpI$?XDFC8%*n((a?tdl{&L*w!P<99++lY;`4N-da(0fj+AY|la z>9g5l4Iy)8@GpuR`+9MeQh2=uohU5M_Td}jonNu39V+6X8qf-JSn%32S++4eB!rr& zq^d`|LT_{moq!J6^$(KRg|l;O)hU#+#vHS(gbUFCU{p_kogKxB{{!bCr{4p4Mt$n{ zt%zxJUF=~K>xkS7?<tXdNSpU(Sbw@xf@9m^(lrD+p%@0*{{~aGZ!u##Lc~B4Zc1~0 zC|&7C2#$AR0h~>Mmwne4L3c&6$-06n;xECM1q372*Mq$TTPjZWX*Nl5#X;a&yCui{ zj%frA$G0O<7n6ZfN{8kClNgBk-~H@#bdO8B9xQu=c*QIuZKSEn?laGnxOds!2(`m1 zHPl<qcGz@nAyh*R5KsHC>I9h{sX${AJ2!sv&-HN_t-KP~2foLx#`I~m@rN&>TMG%- z4prR)i-(AQE5v6@mrYoMzo$yNV}t+w4gyDh?=Ka|>KZd6yF~Cke)(|1po3sEI7T5x zZ(cG{|8L>9)`wUFh`rlrguf{ZemzzOf?(S)+i&<CggQHg%GKK@j0KBOm*Xsqt{q_X z^XA9J=0GaB+;&L{qx{k2Tt>-h>hKKo_EGKN34rWhp#)Lr^Xs#Z(-F}@>851H=;7$; z$Ahn6Wj7PKzZCKLZb#qcl%|0e-pkl*(aQzVleU(wBx!d87Vgg}QKM?=#AXKHxp;ut z(dHKVVfBcyv6BX*{zF_K8AfIhX0+<3zp%x@zCV9dw0A#O)O(hr?DIY^$4aTK;5}Tm zb+*}VFO~GaVwZFfvt7eR>Vh~=`ajNZ)1fma0*|?sTaUGk9gyUj0dk$!W)Yo2(i}7d z0-mI41`Bh|_84_*C|L$xeE(ZI2DuCpl^}qWz$=ZZIT21xou#4g@&N_|i@eC2ENv+? zTA}z2j>u8Eeb8RA#4Q6_t)3!YkDy{S_PdL(?~8`cQ>iCZfpADw3u^Zf0HX*had{#6 z@`ZY}FRbt;r6Uhp$$=f&CCd@H*Kvlzyg>v-Hegr2O_UDF3j=?}|C4?21ND{&<{>Ri z((+SzKjH9QWmv)^@1Wj<tJa2Smla1=ye*XOHXg^n9FJpRlBs9EkN!q4KmHuSud8nb zY+#r`OsAQRak~`ONuKJOMp(_i5h_SgOMTxs7$y*9pv!uf_EiHb@5iNX9QZ~Fd14T! zExWedc;iGtfekIL*HgCUt81LH*B9_@P}9)xX~0_oBJa$bPB7KY%jeyNJmcpo_T<Tc zR3y6nKV94yB3@ZM`SS1gHz6tpnSCtB^skmtS*QxA$wQxT28tZwgQD1ng8Kjmh-Dd} zTg`Dd3*@R*2^2ux9fw|{jZbhjz;N5<=ehKXsIuyBjycU2Ox5QQL(n(Z-R3h?@Z>wj zHDNU3?Ut)&(4sPzFR39lGSnvn58V4vXzbhOHv$CWd3PYQR{tF-Iy=Y;R44GcSo#5T z)C%($;^a#Q(lzR)1Nvinh(#LKJAI6Tg^4u9YN$$hv>p_-MK>4LRsOaOU9;F1{B7_s z0fIS*dQTWZG}Oei_K-8hE*0OeuG`kdGuHZLH#6@fcq$qtEB8yhx7Lm;Y)_0U6e7pk z&N~yhB+ds8lkBP#QLyFpdlC6@5LukA%b)t&eIYd>WuAaBn>e}dvo9_5x9hAZMDaC@ z4ut);;#WILif_yvQmh8_47dijou+g)L(go+e{AE#{08}=g!a1OCO;_VJ<q`0W8g_f zn^FQb2ZU~PH)@!jyD;p$O=t{!(PLBkw`k~#L4Gpo3THwo8+~rzGNilt1T_ran!wR! z)w$s1PC9^!D<0O!(J4#-9_H&8_(tG<UHHd$6+&yucN;#-*~p7F{(%)}k*pj?G7Gh2 z!0Ro<2<zLEfp(~)4=nkv*aYAV(*Jg7Ih_IZdn4S%_;NUfcV->?ksHFO^a*gzTKIcT z+G6$w9)+9^p>b}2guF%|)I-E_-qu7KYt`B&jD1>RZLMvThW1VXkjN(Y{=e%=cZjVy z{=P(w!XJ_%pfsEziJ++3{fr;3J_t3CGF_(4-Zh-FQE8;2I?_dS0JdSR>;%5i7Ckcv zD=6ba+4$V8dXcbjlcUbf))k<ej1&nQzjR%xaZ_`OI11MR_s8x}?;X1OAWiP*_vavA zfz#U4eMq`fdwfyaeXq@<N+Un^CtYOwh1Z~tml_Cm%2d?rGDMg^jl>2iZGX%i%?u(7 zkQoJD48X)3Y4YIOMHj%mRB%Dln%{@V-3S2D+N+xHCx3D>Aw0^da2rEto0Fac3F!$Y z$!)E}IJla6J6!s97N#Z{ViF!kH{euL=zY}{j?=k?dWv&nPyt*Mm*u8jE7x%f*5dgK zmYP#lU;U5b_&sV3g^uWl2)<%tV6f{T(6;~sUySnDRZG{*E?_yuYoH+Lc2T6FW3$Mn zLQhajIhx&~SN`<PAH0CL`1cFmMYly|%{@4xO<GdK`3Es%rx*Frp2OHz7glBUHJ>(d zlBI8#C5$|KSD(UY@vld?bygBr%R$C<uN${ooxeGkh>1V^t?qU{WLjq}Qj({hRw;u& zvO1jZ?Y9%E^J;gY@f)pqeG?Wls)jx~i9L(U(5B3=xu|@X)HwM38$0NC(&ug8rO390 zIA|^#{4e{ulOeXp_TNXw^HG}$1I22ly=y-v9{rs$o;Sm?Eyi<yT=wllB$~sG$na8G z3X=2<l&DntOcwtcQ9TRMh9^in_Wu?1zW`+d#CTEs#YPlr=sOyU<TE(^zSmwXKbQtb z)ff*n|Aq*zFoJ9wkP9Cf^31zGIVg<ej<4gc%Bf!CabF0(i#L=QKhA#n?J4Jn4(|h? z<}<H;yG*|3?kk`bn^I4ZNb@d{#TGk!4^<CUGmTgmv8R=x+$*vB)#{Lj4rfpNetRKJ z2t{%4$}viBalia-dvrr4;`;4<9pmS+!No|)B?llrhY|<1hp7%4A6V1nSLasM$xwWo zKxGs3-WmYgMRy(;Lp!PaCU$Hkc3zsNvJloD1h}Q6ur?G9<@V1z6^6UN^gT5A>;UZ6 z6ciziPRFo~V~~451Q~=fsa|{*53HzuH-T^U&88X8-Oy{Uw`PybGe%b8gh5Bw>};i+ zInM83IN5pfI*nv~L~C*gv4`t-Kre&?sIBe70if@2Gt<0?Usp3cc_)%(_zJ+ln6#nu zI|NWRWomGV{T5D=zL@UNfVA1i=eNjJ5!mYIUg1L_YPgo5A6~5L9rOx<_%q2e^NA&x z-G3KO4P#-ECjUL8)1{^|x(-l&P#Xn&c~Q<w_)5$+c)_PAfy2Pt)A6<Em-LFe$r@;u za3cJ{DMZ#cDO{wP&7$of-vPluAU4-;TG3VGpWK;yv+$iIm9oM!hUC7)4)v?ycnQnl zxssj?$t|Z?T93?EYJNGhwBsdK9JgL_TdH~kL@E<$Y`cOm4>(hbL@>RFt0ofMGq!J+ z0h;L^R7bE;Q(u7AK;%Rx)N721YxCL6<93z5-7l@Jb8Kid5rnq$V8A~D`?*r@k0Y{y zg|W~6PBI(Iu!*tKJDs5XCqTj%XXcqGS1x#+9didl1Utn&3-ycrTo{!~us#08mx`Ge zDQTp+^9EWq>8;*7^Uosr((4p;i9}`Bque<78?(}5+(s*RR|QbKm6TbwNPoyIIi$@F zRV?zTD=h0*^Fk>yU_TrANZZCsO{OJh;_0!K*_mD`EHxj4+d;jHgL_HhGV2QL`x-ID zAzAtDLYJQ#43k>AQ(7*F8y8m+Mf`(kLK5a($AvFp?xPIYEXFWntB^nMXbaq5-+2>L z8T$dRbqI<)gjS!C<(R09RJNy864e`d_pX{`-z$l3KMWKq<r+HGaYDuU9dJA~jD2dP z&cM)H_wEBof%nay<Ui-vbg5t5?iWMI`ko&=hpaZOl`ru7{G5Z!5!5d~fO!c<QIr06 z1x{yoyVpG?sI*woo6+k<S+XW^@2h7B21D=48=Q|$A;BGpc2nP#T<pRL`n7zJH!1FW zprC)i=km0x;i3*y0`va&_=tHSRmi*8n!|PtHPw7xy7o$+%@}ZX9D5gV`(_@Z<F&*k zaRbYS7()HuXL{YgJ9LZUPQ{np!wgBdqYK6M4TZ;4oumR?Ab2)eY7^P20Hl}=!~vYx z*?dgfZ*;g{glwx^U%bhx)mjUPi+nTA6Z4pTzfs&5EIzq9pp3i;2pVi+TXOkz|3|$e zYT(mJ-SJ$r#dWUza9hOk?ryTNa@YyjS9JG8Y1+_jLTC-v7Zm(C`)bv_uaN9W>aOI^ zyu8}h)&-}KVdm|kL%RFsgp*Q>+}Yes3goz&h$ys1+v8%~b>fU56~OJ>Q6^TXKp! zeM&1NW5v{x6``X-fV1}<ysIuFc!#k3&aBS+n|z*N$xz;ns|uL(S$xg#cAPAcMFuPG zEtNy7hrWFTq0QXl{tmHT1f@iUugDgUCh|gVj75mCkq=zc{Pn#7)gP0TYUFg~!^YVO z-o?9TSm<vA%->++^=3OH7A6@<a>gWI7XNdaKqBvSR4C+dDuzr}8HxD$&_HJplg{zD z+pywvQnLPJm3gBdsazkGVtO&|)>5+ujLz9B8&#izCZxbZb+0H0#pGP{)`DOdnj<fZ zM=jdFzQ9SmM<*QE|4AVDzWO&hgIqe|OBfwovgzPWp8tz|8mL)$`^Qn&d2UCAx+lb8 ziD1R6Y3{v966K}^XAF(}{Dv2eB}Z;k*3CORvbrXM)=etG7z6_@=rWJ4v!kMCokZ?} zm`0xqm&W1+aLD_o9;_sZDn$Kj*Bj3g3xpna=ic*G`^wNUv&MYfs*U8A?-uB}W{s7? z8>D@84AOnbg6UR9_3*^lKKt}niM7N^-WFnPga<)C3#4sX<B2@wLj$E^qED%XoORD` zo@zrV2K80$4mWTD+|LZc4d1fLerwC0xuh?SdY=i`$HW7fdlNqYbJIdKTuQ1o8)p?? zH@lS_4-JzpBL%bSRqKB~xP_3kK<}D?KM}m4G2~dAatnt3lx@G2F#<9}hp|)yWn<?a zy3a97%^jWtY%9vbF%emjvv{oJA=xL7^i<SGAyl450;_CsZv>fX--BRs5*tJ4c^fYt zN^&D5q+ZTH#9if8Q5+9q?EV4w+(P3}zsYEoU0*(w{Qcg6!oerE=$`Nl4O2S-)x=Fp z<Y+>Q2tWtDl0TWORVW@`zS8UrD;vYeEWqKs|884SVdF9x%Ng+3QhF~h+yID066~%i zc8;om>*$M!*5Ofyga_Hapn3qO?zLEc-;`6_%?%ByAP>ly;KBU%#hB*?o?PBT$Q{hb z3LdDe`BNkPy7&r*TBs%paDs_tAM!5sk_sEM(pf&Fr10NP*Tj36jsEg;7RyufMk}M@ z<2R{cCNnAs$!&s(Y8<ej*OMpj5$xNaZcP?`bu8<kNsFWP?pGhaW|~jjqg^#Gpy*du z#C>JY=_<NNS=*rd5fL5zH<{5-b6Xu6HvT#{h<-$zq=Il*0-s0+K}csGm`#owXg8W3 zS|*AA%#G`gAnU|hriYi9n&F{I1SNKh`ZNLBquY11L&fDD4n5&X9+$~MpK$l%%(l=H zO#A~|7}LssG&Qh<?1QjDqk!^AP_&5ccyaeVA}rJSFHQv<B{u<ZvoKqmtKFHcK}f8+ z-*CGW^AGe3$)v)(r$Y0kQjbzluZ0`^42xXyd6j0q4}b1C>ospyx+XEiErRf|S7tai zZ&|N~{t^_{*M9VlT*0_m7#BHZ-bKa`sVXF>@mhY~HZgVr4@e#s?q{p9(%y{K&y<ir zoGX^!|FwTKrW_|o7ISRossQ(qK@QGoqB8o6){*y{^$!7I*FRkxVPxwDC)GGy%|I2h z9N%axLSpUupG|Z9>4&mSkXSMOI9d^_Ymvt<2c+!ir-Ae9eWWpmPTkuooe?+{$Bwrl zPZ{)Qr4+e0rcFj(F<k#D+ZIU=^XMMc?>E$Aq|;GHBf$4<Va|^`4Pcan{|h0VBmcgD z<%imc5oFa{HD|MQZ8=){{NeN-62Qke#F6CTnwX=~NL8nH>v2+gEg}4@<8kgfOb(c! z3ceoZ=cHYCJ$Gn22;_IV&GficD`5R{-nh$Rb6!OkE6@<gCBE)Drgex-X82n&Ky1vZ z^M2SJ2J|hAFRO^R>P?_J`xkPU?h=Mj*p~)Ov>#e6d<9d}67;f)&3u}JyPD2eW4t}y zn1mt5n7=e@;Y2mmY6oHKcPTtBu*}+|rLxggwcT6CL`~>TO)c0y7)@u~^jXLHaBcT< zdo{25?mO6?H4gx7e8rz2UOAwULlYz!;_97&MW@zvbz+h|Cwp<DWAxsk^|s`?Li%oi zrV*6P^*Q9rit`Q0VLJ9HCp??>!GFm%Un|{<S{iz7k~P`4A910wL^zPaIBo%Q*4C$q z>q~h>#wiep)^@sgJe?(GA3sM9Z>jH1I^M3qwqCNv*#T}CixoWuoVSnO*9tZxc-jgN z=WxK`zwOvy``PORw~349uS@<9W8Vhk0u5b;o*(8^o&4s4T@sL7wK;(kfX*lJHt7>p z@!BSy-SrSMA!V->pCE_ppbP6~EMu#r+{^BS68ru8a(|knSxn$lO+H`H4LYVSAU|K> zt~?z!x9YNetG2$w;`8b5htniu-!T*}*1x7zZ<Qq%b_B(%!8l}pz+tFemHZQ~>9+K( zBEB`sSlxrVTPf>1mD%`ut7cMO)^>UAp3kAGcx>Q0?wjD&<El<^&gKjAd%hr(YWv!~ z!Rv#nQ=BBSi{jTN%ht*Db0r~=#%z-hMt;b}E#xW_ST(((LmXL-ef)BvY0bL=0V}5G zZ>Ay(e42P5UcMI|JVn?BYLcz`BcNdg!z|f5ToCdPy6r_7=B51W#gYlM|F9HpAZlg~ z=KfqQqimUEE0g^jysTiK4P%L-AV<HImjh|HLPihJ`VqnOf`sbZIX#!l`bVqd0(P#> zkD^B+SOe59&ibI;w-6t1qu{m@y^`&ysJ)qUn#@LBr^5Q%64~lXub!6MXm>HE4&L$N z>?uW)1N+Xi$iv|gAmgf7*Q#xh76jvNMd9@zIR$UXk%QKBaAJdA8rROrA3^;^HlfHt zLxHp6%!|zWMNxJ(FcZNdcSiu&=X>(}<@aorIr3C4(Yw*>K0IxuvKU<+e~&ntX(%j7 z%jt8DDJPJ&I&@n_@y8F-NKA(;6Z?@wyy#pB#!ykAqD<_s6X0(%@l}s`5+37f%Y2pn z3ZhHZf)a;|bvN1bbf@ayi5lO$Ky!7A=Ns6>A4d043c>sF%Gz)a1RI##$ywr^L41y2 zic$PBu|4!u4UNUwuw1WFH-Q%8gJ%sS$fr>GscySH(OoKX?5RtjEku|WJ!VYbL4ZhQ z6Ox%biNQwVf85R9ZJF9}!sT#S+lHkpWv#W3{uFx+W@+kHIYN^bo6CN>4ataZex2uM z6;vZ0?hE=n#wvl=F-V8q-zDh3EVxN0V6;15UYNv<Pjik^Oy~?CYG`H$HVxU{>PdBp z!piPY>UOw)b%yX-<YlCVw4WmvSpNWGa-4~%NJY|=!^f-qf9)NNtP$wZmQRkvHG9{n zXrzjPziIkJXfJ%taA6>}HX1>5HI>Ky>5XC_bumZbDKFjlA#-XHMhLJyj94fGD8B#8 z1({CH5%If`x6+;a6&PIGeAXfWFRQakJh1)vF0~N(2~k_-^^tcNFdAf%B3|F0eNk^l zqxoCQUua0s%<ig(?pSdf*HWfe)X#qZ^3Fs)h+ViR=@Iz0x`Y6;_vL4({q3`u>APlB zh@Cawo^m2pW)cfO&~AQ_%)w;;Rj0Q(X05o8qCBRXMOi5nK-?z-3>ec77vCTe7saOM zyX&EYs{KKrZ4`$ohb-%Z>MdWY-pjUi?<2OXmNSu@<DiofQa8-dCQSZI5F0;!J-m1v zw2l(Nih-KQFpuCh@PP?RN^KDoiQj~)_o5_!YdxabjbdN(GfO3513m`&R>P}WUMy~q zy%1KvYY)s8QLoZnm_(8Cbzd?@r#%%ufR}|cjC3RMkJ&I8{Msjtesur1OjC<H*su`2 z{%yZj|K{FrsNe4E%>_|*<X63A%W09Ox4XQ9r6{u-JV8|e7?$TgHo>J@R?+muM0(2o z;?CpyJHO{G?)I&Z_jZudW5<PNm|>fJ{p{RfOL4X;c)$abh1O<H@Vvt4^&0Sj6QOn2 zCfJX*NrdC0glnZp*OUM0-~(4-b)KyJpB1(|^&gLu9bSc}a|RL>4gUfUyNo&$VVKX7 z%78v*qNe+&RKVrRHvLxAxY!DjR)Ct*2KOF;1QOe(Ec13UEs>C{m<%b~ap*-5ALnt0 zMB!(JJ462H6g<Wu@M(|5q+1V5v#nRyL4gaNOOkgK1D?^RT>XL^9nd|4!-ZaaMXEUc z_YT6Y5!Vp9>{Rjx|7P~~EYq0ObHJ-eR?guWh;q8B`1#g#OWz5W^h=kVB)9t0GvC6) zB2+kR{~=mpcXP2g`*(M+ckrq5hl$@TkCS1h5`wEP+a5MkmPsmZqZV-@6gAWDZTeHK z=RzFt3BU!q_J@`(mlQr1VMs?~7)xLXv%SENjq0t!%^1O$zuQR2C7f<TIHxeVRDs+7 zyM2l9yM7|B)BD@>DyJyXhXfVLA4~RS+&}6a`DkGg{{Y9S@a?*n*9%Mps;o4q3U?eX ztID>iJ)3h3aBf?OiSHwwO;u*&^oL9`J#&hc8ib9}3o+9w8gX*GvL(7KPtmqs@{V^d z#}CDT2a#-fAz6V(+z&@)H-5m0%4MhD<6_74|DtAn{ck4gN0JF9S5`n1+!x=2SFgi^ zXXh8?Cq5(Brq<=jvctq|zhrf1i(ROmYJgFh{O}!(g19k+i-dJb?QvC$l*J9q0whoH zc(r!Dm+n-cHY(!e^K_}(u^<!F5WO|PE{0A>8ZC@)H05#4&|d7)IAh;29U^_P_jG>g zbG!(}3B_3tL*K`EwMXY~S7tyeeOq@)0PuM{j03CPZ7{dpIkum*N<0!yFj~Q9gYF9R z@gGaiIwfv*>LAe{fE=rSt6J0X2Y5TMmAZ)%@Y~LEUCasoJ-6gI@iTs3q^Ctk*Qf<~ ze^o`k!*|88^l*w{YNzLcMBgF`<;)#fAwFhEzeJqux{fQ#;~wlrdE}yX)?B{cn*VWT zJ@=Up=<#NLx~bF4XUVyayND=Ggqke9s()oP0eO4Gewh1kK1;sp3Guk^+2#_@4?{em ztb!F&n}}dyhS#(%hdWqa(SX?-SeS$*FPXBO&AX}^oA|fM3hlkAyOm;&3Ut{XvGvFz z1I639bf@ActoF-_3Q{Qg@N4a6-E?-Zths9ka>?#+Gwe*qf9JBeD1_ADJ&o561N;n{ z;Nk+mF9RmsuAKjJ=jmK%K_@Feq}#nFic?5_+*!E>G(#W5w^gTLCv{LkpT=2^y0Khq z-h}<+=DG~BemF)U2iSMV%s>9aUGbhAwcw{=8qu;J9EE37t;CREN!z0q((^v5XY&ju zcdH)h;|%bgi)alsc|aQsQ4cl7rf=H5i9X54Z-5G&|Eb=7?gtFG$%k}iH?CV&x&ON? zE+8}U=Avo7Q*Bg5V>70{5@(PfBV$n%y}n@$KZ0H5#Tb8;`Yzm)Lw3JsugfCj(oqzW zTd=aeDqjeIGsUt+8yb~^4iCwW<8G1W$odh4qZ;Ap+o#%u+Bl&^A%__<#m(aA=MB5D zo)==32vhp3CCR00Rt{rIjl2AmLcuyBT&bn`w54!_)kmhLS_EejM`EYs462J*b~#a@ z7WW_b?S<oIy4Q>R<l|59viAEx+z`MAL8|ST?1a<4qW%Fuu)pmX`1o0Fmc9YAnYv9W zi$nh|G)^5ZNqA8{#rfuzPz$r@j##LOaCdsDKc)xZ+{^W`P7Nl#S;<&rbgEGW1|oLm za5_1*Tn!tHNKeB*H7pNJ5!8?H{=m@cKnY+)th7T1RPg$So~^Z|hBo@aA3z0q>3?aq z)nMcrftnB5s}*+asgk#@1tsl8c1+3xxB_=kD@D9W7Q>q7V0JiqrfWy|0hA8u7n}Wx zeMz>xZ{}G*rdbz$<CV1v-OZF~Jl*p}PH4h|gg=tL@#3czlq%u$q24Szl%pi{1MADF zyP{SHph)7Q&Wk@~GsIhkBC=zE4r_)ip8QJKaYyN1Q`_ta!lERX3vr;Y8hfZooUeHf zI-&r@<_BdXd5KBwexQbc<7!w*x@7j)U}w_-b2$Mwv1*m2#`j+tufS{p@(M9j_f`@q zvfZa~SX3sc=WQEvFJ#X-@tGBM<xcfA|1}zKBf=OQPAw6IY9hXcGaaAB9f0Ja6;EFY z7(e4Z{HaCsamJ<)&l4%ebqZDIeT_zewNxKL<}zDE7>U6Bw>qkp2?~O)-+^Qfwspn< zmZrJvBs9cA(^rq6E-1j>zjBA};T_x$_3|uW9CZJlHlSLXJ1W&RR^(ByfFkVC1VPCD z2@P@Hi24Ai?5%vv_7aD}Cw;UWB(X)0y><8_`v(V1euUztkx%d>R)`9#A0n<SKtK6b z<s^TT{@W(41aH;4ukI!n!O0AT$F48+#3Z5z;JtaDXr<<42^olA-t=CJnbQ&J6#h;7 zFvdrPcT;XMS5%72c4C0ln2vIb+90GRC=?Jx`01NY^<A`EifiW<FPL6kHY8`bY3HfQ zOj#^3k*BP)3}=}8Exi^(Ag=0<(M^<0L{0{;U(k}d-VUvY4e1(j>^oJ@K7Fm$du-OC zxxcPxSCvd^>?5Q7j?W>5MgK>p$0fpIURt4}qwA-D?tS8R6oz5*F8DE-x+M_E!FLwQ zLdm`Jq46GJZSR7ytRP1h@7QsBR6p=3tSBf>;?u+i@R=72w5Id@4tB-qDhXhhXJM25 zfmNb1czr3?*(9QN^0(5V$SNiI4(R4BVCr0d?BQ@?@GRdOaq)5=$?Wg=((oL;dpqut zcTDn5TvX@f_=Hd0gou~V)<j%HwwJ1gQ_ZiwYc;7VQ+h%WNstR9@#o^`s0|rkU~NvC zI_}&b`mVRG&S?g9$mY*)+7)tLKeUKH;8r#h<c?m%$1M?z%#Mc)zBbhP7X*dGlj(Xc zK6G7AD{&W?Y&j|#<63R54jpeWUgNj<KL?0=g3rwNf-9S*$O^zDUIABmMuyjkufsw} z^%yVbrOw+PV)-9f_f#Kf-7yPZ;0MSe5%KL+bRL0cGrQYzTZGJzjjfwCY}(K^wd8qO zv9;Znr;t&wtE2zH-zp%)WBz<r$1r1Vm7JI7OCrtff{;V|qTtaL#f*lEfXDq<6>V2Y zZ89X&YlS17L`RRvseV>YCinx^xxCPYl)&&5YgPoE!2>y0sBywsGaO4?YOBhYV0eNz z4*kwMF@H%CY5M_Xi)05pT<i#!RJLC;8Xd@KSWdl_JLo~2HdAFxV9$TZ+?*IlzsSpZ zbqSMVpqU>@B*)HTtJ~~8|ADw1r#?<?<bXd*U;4eVF~p`y-4l`hwIq+4EQmGj`xd|L z?kvQkxvO<apXy+W<d*tEYiFBbXj2VzFTqs=NW=f<)(41oDz@q&!)jV_#@pN2w@LlN ze%y2V*gV*J@RiAV>L#iF>gc$j?J2q|+Lc#CRoRud)%3mMzx1V+pHg+a{UVHvj^BO{ zte^dz+tM0w7*EAbnf>AZn*;D}%lz)mNVGBz(DBRTuP$kVl}y^F0u@Mx+gN&0swY;V zQ|$Qj)(F-t=F`RrRMCIR_XGestvi8rE;YAgHvg{JkG}{SI5rVw#dPxZK0P4^7uS6; z+8XIDhH;3d6-Vnuz7UK~WJP_qEz_Ix1rzExOc8k7Iw>m%=KMB#h_e}OjJK0+|H%4+ z!PM0+U5AV=^fw?;@J&&~N^jWqzuc+j276HKz}3pZ{)^MYhgY=N^{?p+o@KKGeL6c! z?ys#$3q&0nZ<418vCr+|CNBjn{KSju$MD;V3*{<H{JgWA!0^`QZNxjjPkeRX>W4r* zV~sEAqZUr7_pGukiiYLCOQ=G#ogROIgNT%yz1i`A<tSYzgqDlH(o104Vz-4AndI;M z3Q|-68oDJRxZ|DFI5pcmy4<hk7sa%h<<@kEE58^;X9U_7SKzxxDKp(gT<|B@%$<-r zhAo^((Vu+QZ(8GvVu=l#_^XAh3}*Jd$-$3rAeXw|@Q|VH&;F)KAOgfI5rQwq)%&zu z=Egb^;T;E&137SlKkL|y&WSh419XCpNf?7rf{2QNIT)mO-lX!-C>(brAj<nSl80Gv znN4~x?sa}r9ers~kRrBpW^*MzV2-)iCT0HE#FktZX{PxA;l8h*aKP4lzS(?%!;WFA z#-P0Sg5)^M93j}wvw`ddrKSrTxFI9n@s8ThjSi~%zj&%%?L<X9VTG7`yqMzi4Kh8S z%a%~zf`ayZ>4DFf!rM_0QbrX*xB@-Tt4pbOtF_4Mtgn{?#8KI_{|`-P;nvjq|Nl24 zpdcV2EfWisl5U0~B1(uT4Wp5gZrBu%hKWc>I1mY?yP4$Z(cJ?El4Hci#?F_|@49~f z!MU&NKKK1Puh--GINqM9vvbscMdzUBQVhT{r_PCN@egtch1;G`M@$YCqM`d_e(~ZF zSlWk(%+OU#S9m8)gUPZ(vr2O1vH)~CcCT7ijJk@f^>WTgs0~DXg`%d<@ACiDxgPQ7 zpeezc<95Gl%}pn$<|Ebw#{~WQ4I8-?kc3){#W{tIyM|Z-GQr2`IsS|+9p7-Cx%{E$ z(j99t3l}|;R1eH)Tk%IHGt0BHqHE)E^2ySJ)}B=Y;T{wcQSb(zl(ZG9TrX6*4Ax5z z9=urUBv?FJ-68!Q`D@Nn0A)-t?7Nu2K;&yX3SOQusPRY<xWMIojZ}Z0zL3J7*<{{8 z9=fkaJ;aYC6su6Ear&HXSDEhoWyJh{7eJ^00yt97LAWcybg~E)Kv$}-#F5(0!^1Ee z8}il8aBE6rIdG~B^fDKcIWD)KkexSgDCbs~ZH~(WzzPYB*QaEP=lA2XzjUdyU*sTs zUYPP!CcHUT)23eOWfCbyIz8%Olc9NWvXOi|V&pOCgWC+98!ZxRxjPb4e^Ndh$ons# z-fFBk3-T1JF(>ELFG{(ci;^1Cg=duf2-m+?mL7Z}!LVN`k|%N9c|pv8Q7f9;s$#)* zZg)&`NrhDwwUEn@9^CC^xMIFZu4pp0&r%L?+&|~xYGE_D!!DX6Lv&tRtdN8c)-H*Q zlt(GYen*E>FuCxfLlQ+_vTC6P$VgVFos<I_4C(&kaly9IafXx@Ig2(K!PPI=LCw*^ zi772Gapb)caXI=(T<Oo<mthcpT5lnKy2=Tiro6o8qGDUnC9>~qaB||tbGE}E5i2^d zy6EIdKND$&Ig7MMR#!Nlb}LY3R?$MUz|T|D>}6$I2xPCVjxil)8+96T{ttT|62k{? zNbu0nTbh%%rD&2{4S?b@R^rm%SZya;Bv-JD=Mb;GXXkm-oyv6oHRsD_^Cx@nrJk%* zdsHRH4-7_dT1UR|e{!_ox2VIWB{$-~4kr|Rw{JYk+DCk+#4xO0%zRS$i`>V24F73N zas2&UFL<s&@(<mu_QC6l`Rk2H>OZQrGB6f^w0^3_L%eYpZGluXI7*WINSV+d<lRQB zt1rS2Q@3V{ww!!0|9FQUHvgsU0es8w$;g;xe)aNGC7jE+{Es^xPmV?z&?C&*xJ&o@ zU;6Wl?=GmHkZV7~-uz{#Y0gONvwL3pEyei5y?7kAzo<<AM{>pNYhIbdUjw>ERF8o` z%DrDT9HCQ%*KX~WlUmPK>K>0Zeok1bJy^|;X`1b_d%+$__2BEW-vB>UC&EC9@xSiA z431Qz@e7<|Q_CakR(JlpNh7h{#@+i{H1i{Y3-40%SaJ=VRDLbtv1Rd<JFVyWOdmmt z{>Sgg>6^i!8(ou#^CP8&kW!F5VKsGhZ_YIz^o($xi)_PxKhLP+lEF^#79I)~$AhO# z<1$8nDOLUaME05D_%+}LHB()m4Y;!X1(L}Z0UETu#()t$Y{K#7_#4P;m8{LaCU*5+ zW}7Wr)KS>_b+*zY>yau6TwZr1r)^$ve#u0KEY}37HutI!Qi<&6K`ax^niQex%fo|A zp~V(tXO!L+FWp|&k4v;uho1;-8kFxWXwF5JL2;|g_nNr)?B8)#We=>G-AgyV>E-VE z@JH}n^gja2Q=#taDILh$Q&)2IfY)^DklcEZ|Jva9ujhlnQ6%ZzH!j!-@$<JcE|_xU zO$lg`JR8*Z9nCmLs!zPQwI5?g?$ej(+;o`8eFUsZz`!ef77sZvAuo@<P)H3uU8&G7 zjJsnj)d;0%q@{=vqT6oMki8QEb%vuaDZDg_3Fs7MIF+SdP<|5Rp04Z?hA^7xdVEQr zp5dBmtwH<b6)r0J92{b6*)_@We!K6ba$cE$Ve1bBNc-OdQLC!k*R(b@6jH2<zMU^W zYP{`?i*25!iRd!2@v)-7`p}NOYODc4=IrHMcVT}V#XzSTs9Sw!{ckH#RJ4_Ph^+r4 z%xm57HiI(_YHrgJ8I96REQNmD$HJ8;fiu=gXmUcW=a)p#-Des9y|3!eZxpZ@e5yR# zH+YwpE+Fm24)l|zanwLgr6**0qiNs{ttU-^l9^r>%(rir>rGKR)iEC80Jdr*tb93c z1Kn!;dR?b@Aw|4K^sT$nGfm#lQOB!z1n%?S$9MH~H&p=D$MNKxlu`G>s`if~w6zft zPiJ^x-dpp%%yaxus$u=`gh>9z3Lr&MO^9-E3;fuHv1+g#ul{M}0X0ezTJ`ujc_xq8 zP0)8N{f_9Jz2bgX2{zp+m88ZQw$;x{uWrTiK;^SFuIJj|CxYu2N4K56s@2qK@z~E_ zy0nlzh&L%FPZ2-se#F^wy0nmwuKwN}$@S~}Yk(%ul`DB^yx5ppla2jCQwfJLblflQ zb*nrO3$`-7oAN0@L$P`VLTK7u=DhDI0_FJ~QR<%d?kL25I`659J<D=?3|{Q%x0Vts z86b$_WvMWEQ54zOY>z(wma8~S<RqcL48aCD8}w$eU~e@QKt5Wy<Q#F32@9d@Q~_hV zEkl62+%#O&w-~$^G{5aC{^-)KCO}03quTA~Xr*+cAO4Bknb))6QQ{iT`+=r9fz5Vb zu}jtBsG3v;_+$ROo0_{dsI<M)C}eu6en@&raBPz;VeHN$C(|yD?Pv68abE7Sdn1p- z)vM6csb(LD-V^sY^Wtmg?}uE`rGC)m4h=lvj`n+xjt70?rMIt$mZP`MfO#tY#P`#| zsA0Y5?9gjC^<vqxXIEjx+5>};1z9Q~Yq_A$mEYCekc8uZF=fW;VBd&kd)EprFeYx1 zKgIq(aM=y%S2Hl}56~klK_RZ`G9tEN!`31TR_$#ZFDSeO5Q`6*KD6ph>HR~cnEBv7 zJ8qkw^nA09b-!#6(*!QS>H=>2b{}~x;zI=YXn1{_80VRs;oaAG{VvvmxD+MQ*V$Ga zN&}X~G~<P>z6yQqelNJqx=YxfO{A=jHOcQ8cpt8Q!JtF@PiBrrjO`N{wtq&llF+fk zcya!S3#-W7zdKx{B5{!Z&j%ox0kzvwc=9a)JKe%&_QN&y0-lezgk?B}vT0mS$oepq z+t%fW%u3B9&-wWJle3K5**Fw>%|Dhb?$6#e?T5N+;ci0XXMD&)51U)Rp+vtbqwMsN zv&V>#7IOi~z06PnDIc6Dy5%_*eCOw6LOghAdBFP_FYu%nsH>0i-BJhZfKXla+O6g0 z>24JCDiO{5tH#hs3;CKTOZHzxwGprUxEZ{hqk%E~awGgN#3<{dU*%i&j$^Zk+ZQNj zjStmX_crtge>1RmbalQ#L6IMq{h*RtXPg`S2leq_gt?g%#512v8W!8{2wU9muG4&V zOXdKxx6?{~N&it#^69E1uw2o(@M{f3dq#J!(|)6S@eZGdbwjXAit(5m4FC9<3NVZ_ zo{bwj2xYI4wW%5)m|P$(pEzU#(<KC1p%zo0Ar2BM-fPUthrB5&^1!7)C0c}bFllgV zd&sx&CDl!ChYiH=$CJ!gWhfda@)y-`P376x6`g$>CV*$JzD4POY<~TFMZq6LDRqT? zjRNN^ceY!vZz6`&LSOxPX<2dkd)~NIqNGFuRq{aSa#la0BNGv{@w>+@ZBIBq@Hb2D zLG!`L)@Lk2+u1eB3vO9amGk|Sibqo5#`E{h&4q)gK{5@#y6{)W!96r&w8>^MS$aQn zBkQ#JuS=DJ@cH>f>Tx}@3P+?L9>$6mY~=If0jSZaADrkv7S`X_-BT&Y{`ZeV95sTC zSu%@7E@8yZ%U>UC8r`fN{n=4ty-k(qPH7oVzc=~k*!@(|lhhL@c~2#y)$EsyNJzcG zyG#FN6;KZS&vvjJ&z;kL)M%d%7)@1Bddi5$FVg#ypNvv_oShY85j^!z7%wwJ%pdxH z^rCrxUv3qk1#cL-F-aA0%G-ra^MD$+G-!Z=yc<pBR=Yc8r8w-dAm^!{TE-`%tDUHR zqR18g5NK%X*)k^+(^1v+P;TkF?<jBIw^oTL-?E~7(hy^N<#4@J(6ClN@)CP>?siQV ztEyhCHh+!E285pP?65yuef$f}(>V2m=gQA0*KEuN36w5!E2ZzF<aE?Sx;<xs!-U2@ zgs95!@!9Q5CGRqe5@DRM%;1$&s!ZAY?3oI4cQR$b=Q#{s>z|>Ltv%9CXIG}DqX$#z zvvL?z8_JpQ%?Y4GzXWODv7%vGGrs>A^<=K;b4I?-w}1x>TGs2Th1shAgqceJ=4hTU zKMnY-sMz2>&qI8Lffmk^z>bCS?lss+5-54Oz=HJRu@xE5e&sLwsv%Q~pc*H2qlv_S zx0!Z#I^?Uz6TRx^6ks+$K}@|~Cc>PUq(j3P&q=e)9R=}_8eq8*9DYMCD!zGh<NWJF zW;0$fXaKedJTz1aRYje=Ti+*#*10<hcQk{GV#8jJ?_`T)Ir>XQMJZCZ50D>R^*x;O zQ{NUdqH)ZY21j2TbYCqbUe1rNz-h4SMY?us$YXxv3$%-oN|f}=_#w=m$8{m=%9IMt zokUuA@1@9=p3bGE0oBo2nbjgY9``!8+N$gET&IP<FD^LxfbshxsPdAdR%p7Mm7x*| z(<Jf-iUo&sr8T7gFLV^_$u4EMbRPWF)%6P(Fjl`rL~ISDFagSdI0s*Xk|5vT2c@y1 zPP|X~>=1P9*EdkO3;vbJtoXxzd;^bYordvZ!M0g=X8p5&stVFsb?LCI-Rn~qxcf+g z05~MOV?DZ?q6_U03y4<Vlry4AI~dOWz4_}Zc>KUdp;%r{8kV`VS};4%rLH7D{2jUi z^625GBcpFaolWRs0s(B*kL`Ai56=WHW9TVSHR2R2zVLs%$frInH6Cy0cZ@&E^u45! zNRkA6i95GrS6FED^Cmbb)zGo1KniI;lz0EdD`DA}==UE8T)}GWggkq8Y10)kywhZ} zsz2tP;jb{?CGlMtL65K^XW_0*ct!GKg=HVa#183hyPVOOJuVh~T|3R-)(h@#(^BL2 zq4HneQydFH)|<mo!gA`M66O_;Ukoc1j10?q_ge0`=jN*`zZQTu{vK2od30K(z9aYP zhR>+~fmlksqcDHsSuMEzw#y|tW2>B*z-6ph!-GaSm^HeFtc^al9iio4bI*^1J6WwP zEH|$tK;cS9s*OkURUTA<y5?F5(=U!L#uR}r^}`CiosPBg*iksOsEYNkH(0MCVvxzI z;7!ft>0aiR+dtp<elRWp3J}3cyGV?$W3rFz3)8)7=Q{vc>FoWiD?WbI0s`3c)XbVV zrp#bpAfd~tcb{<=Ayu*QAA|X>q9UintN4k?XkG?2H<cE0j4m!sJ(zMEIuJfueK`^R zxamK0h^3{cgmuT8lUBcnCtr1IW4^%+>o0MpM847ai-)6D7c8?FWra3?yU3s2G-fL3 z6!87ij7X5ys|2n*l+%IEYmRQY<8e?ohAw{$e(48v6&J`wCORNe2vIR!VhvOV_w*Qx zl`<j~fbZ_&xO5@W5w8!hc=cYzpfI<+0PyG7wy`{xdfx9cf+714x;hjQ#5=*wuLC+g z3hdpP3UIu5hl6<=73Op_i@os-a%Q;qUHiCZn}*1|_inNya-p_kq4d>O!=xA{{G7rp z_WlrjdX2whxQ$sULr02SJP~+{nU~{hdlBBjj8DQ(Z*Ga@nA*F!$V^U7>oFDo_Q%+Y zSW)rY=I$rVW4dTXUU;$5Lvz1%yGB)&B2m?(;TZC8rf(y+R6eXbtGX&U_(W>uvhS4Z zfi1<o=2PcYyC>KXCUdJmogB^#l`qRo_=%~>ta5#;Ea6a;aUqu$e^|o?<rhDr=aDS) z%ej?EQKB%yh6(%v{hNX?KhYV(Fnlsj#OfZz?T57n6fZV&LY(Bu?hD+GyNogw;+Nb9 z%a|`Ok35X6SAI4T&y^j8n~IcqBxDoOM+8#})y8^m7*@$jY;ty)&uBnH04Z^P>BAWs zP8>0&^P^_mA9igWUUaX8XjaH<v?G79vkDi`w0zOthrAML3Rc)2-!Evu5^dA%8@I-K zQJ`e|zr4a|YK}#2=;Rhy)vRch6B=32mCBubvfyL7V5f{SBU^Xj(Xl1&uO7CnyVWYN z^>IDvQPO(JQ2nRbQztpjKsYYTPZgbjY95fn7jMl=>Wris6p#t5?M6>-mKMMOBPCXQ z(encgZb{)S#B3m(VOR!kHNDErM;A>jm?kU124HE=wW;QUld@B;XW?~eCXs*sKG7(6 z`Z=eSsl0#z%%=ufl(<_PtnLy>-zlagKdjk$WXT^7(|XOBw_5Pv(4lE)iBqsc9Ljz0 z@ltaSa+{nAM*!^t1=gW%2W)h^<dtEY0TLq3?hRoJa}VEiGyYFb_>J5Lgq`T0AY^eE zJY@rMZU(wA<+1+=%}9f-8DhqFhdIqI%!Py}&K2iLWS*!;K%BF2jG9bO&5vpqjXa{M z(xMOO=Nhh#Cbtd!y3+Y@OfZ$cAQJR}d@#QZFMSg8DzJC!KYY1>ricUoj)tS9YFd~* zuh`be=2zL^mL#+!{zf>HRa|-qN6b?`iNn|3t>o9Kw2FCB!6h9b&-V@{-j+v1Qa(M= zUG5*PxHF%<OmJwisV3%OKXF+!a4wI8Hk%pI*6pm(IFI!ww$Mj*iUaJ}b7s6QIZjoH z+bH=IcKFC~v*SL-5{T528_y}c#FSI0k4(o7Fl&>)*OT9Gl6S@u>)B(M?5cC(;8uf& z*GId>Lm?j~$od~Pp6TgooV?W<??B*&EiIZ0a+}3&y*ZNBC?<xQq`mL#a%4-}=km5b za-4hTEhxxtrD?%DBLo8mUqt*Qrh<ZLEVzE&*hf<RHX2k0*^o77C)pxBj4Nhs)mc@# zN+)T&qzw`{-VK5(?HAVE{{6F<e!}tOw_dL^ex500Jpc8YTqpT=vd7?ae$jp`_}wA? zIX{?}+NXo={wD+)_D|^>6&m>H5P!IY2ZeQeV5Ui2C+Fl9j5Gf238*1b%!vd=$A`f7 z<$(nY_|EV%qigeuv*foLaW13M2tY39b3A&;MtvuMU_DGxr4v&Ca+yUBs}5f9{Uc(I z%phO&G=uibS1r^;wqdE~2(+g`Tui)&xVu;!A}^U*-2`|U)ABJpjOy*5>uu56OQ(Mr z-(`-sJwyUhmsr$ILeAqyMW)QYi>c`MEd{Mg22TBDW;@ilL?`rp31h3J{U{dMf@DpF zLzP$Q3JStJ>i%&Wm{OsQEabEmW^Das@L^{Rju!r{mpNsy?Kg*uRzq)V<koRPxxdw_ z*Zn{@sldD&7ROJl5r`}UGq0>8midaHHtvEgJwBo3k(|NNc(jrBSc#i;wjr~Lj+89V zMsswM-^CmS6)U1Balxkda`9F%T1?1IuT4?Htsd3Vie2l=KCE|T-2lRAVzh_8{I zF@s#2CPo(A5U#bIz32;hBw<?`+l~U1sLvjC*4Cr)*~W>oC>!<GhW*sz%=apJA0hu; zLrDwgXauhba$oI?i7DB9lgg$_?OBRXh4`!Nwsv8CvLZRNL8OupoFpUvN;|5<vnAfd zb+B_=s1w451{S#?p5(RS5y#IpliCgl@6gha1T#CIt*L2un~<yR8ga!}&W&>*K0aM+ zBxc1xz~-j-Pgj!BWs`XDvp#sjgI04BLDnK!NMBTcuJ+I4yH|q+?frhU^kbf`9KB^W zA%ulAW28AzBnJZZwh#~`N6Ca4pHI)ufXSakk34TPDV{wuzngxEVR>$eWR=dq*(<8# z;LQ_qh;#hMteeE7{ErkULth$qHHNe2o5vc@<xMP}miB+SJcWNv1qJX`-F>%)6{mB# znGWW~GDThHa~b|@rXUO31y@8^xcjId{Eb%ZD&2MDp|pxV&%MK`oxn(?*SOF^t;a$A zWz`Wby=biJD;26GCjD7XqhOtVHaIxH2|{G--y=b_{cL3k9(rFmk&@snM*851@TV?B z5?NBlPzZL`bF0a;16QAj3tjZhD9Nhra&FR|(g`A?H%y9SMJv3|SfPa<r1%*taXkI` z88}SH#SOmh&VP-}2o>g6tdyZxi7UCb;Qno){VARs8drq(^mthR&fTayH8TEeGDP*C z03LGHZvf92o!L>%5r{`zS#r8bTo^kN#)%czS<i0Zoj2R|Gd?tgM40ixzb)S+lGooH ziZu+pP<{*>xtA&;c$*r>iHX4(HveNABJ8$bZv0S|G^773N?pR6fJql7zX|>9KenRl zw9#RXLbSo@wIq7)hKqc*VdOo-`sgC9KLzl{f;LHiek`=0fM5aF3QAw&9hihtUBIO{ zHnTAuLQ&Y~a`FADei=u+kKy<oML8X|MCQ+&ZA<O4PR&A@)4_{}orII`kWMa6&n{S7 z|7>^oqJZ5Ty}YpzN{HbRss5JUooA+Q2JRaWtpoY-AdCjv6vXaf$del0AyAgX<4K6% zaIYq@`5?r1R>8HR?NMOLk!-8i?a4wRtL}Pf_;u-xG4W1j^MUVY2YM7HweN=-xz3cD znba>5DP8Z$?YH18e`oa%S_|DR<JMM<H1kwS1j1CwZ-=SGy5d!wV~l>*T1W!J6Q*XC z75A$>?NIR#8KACwJ8w9}B(HdNvD%1K|Fzn!ExvoA(#S1_f5j!5$;M8*mshQoU2(;( zG&b2}(Qe(!uK#_UB<w$_e;ml|?(bmQ>vA+RszHa2jP9;Wz5D-Nq!c8<ARwlu+vYMR z8GOHLgEOb<4SzWMgexyo>J5?$+gV}9lyjDiD>N(Ey>JosSp$)dNc%=}KY0XQnW76{ zq;e*;5qh`PbLjGQydQWjVXG44{SOlRyQ|+sh;AqkA^)n~yx%ayNV`U?QkQRh24`LQ z4Z+{JI@1<eGx>{WPg@u}@*_qDZ$H=NG_1>i-S;pl4QkQP@ucPy5_FB_u|J7Fep40P zI&7$YjlGufi}FD(NbJwsc@0<Vi+MG-2kAWW?%Gxp&>>d7yIS^T%Q8T%mn-~90td1< z2L)-2MP^r^SFzxm#+IC7GR8Y>icVH(TJJxox`eWP67v~xui@bl^hid7>Ps(QRh~Xb z*S;D98+g*4w5a4L6vQ_Rm0|!@VJZ$XTGkOuz*aab)F-2I*-~g$Z!BeZHnsA>hF<js z=c3*e-^$D%8oeFU*~Jg}zu<m65{=gqQq9L7oQ%XM3_Asltwi;{<$XEH!*<oX{9r!O zIen$FzczLv8=-V-ZPwZ&d^E!B(QMCuUJDziYz5n7HV4bU;2}GfFNk`|(;L=RHt^QB z!?ZW<Tu5-h;!FKRI9olIe455}W95*DN<iM#sKb(FBbD|pWDl)?bN3${91p?sVZr4# zD)%%HHiZqAnZng0u*K&fa|$AM_9*w+$#7Wi4;YRu4FKqNfQpoFw$9B`2CrWWE22$n zc`je%adAwpc{^a>jUj)hG|1_rLAI?z*IWI(JVPV-1^@N+e^Zg$?y1}DuSAmar)&hB zv|~Yk+E;u<_>)eI>|R@#shqD0jqTC#f3@#)qty=8FfTnP4vua1m%gM6-sU<t#czf& zzc922*6W%CiBZe)w44}1&c-6t4IMgTiheQT{J+>4nn>^Z{%!kBI9jba$3HF{abEhe zrv4xMbmRxFQhcEt7n&}GhSOB3q<mv`OEHo!O@_bbE@kkXwbVw-BqJqxY?XPZaI3Rc z|1J4TsIKqp$_<PGaM0s6dg#CB<s14TMSkN2KG=!ky>KJ-cI~~<nEDs6Yc{;m(-zQ& z+HvylKJ9v5!1@0#BE~Wx4Qe{PNHvU@pW1)S_3G-?!(Vtz|JBPnD_QD-e&}Z+3=iaz zIX$R?QSnonklFXHEd>ATvj@bXpqqjI={9=-H&nK>PLyw*6UITm;!{kO7N8w9jtDjQ z3w=z!*?l=W{yR;%+p<Qrn*ogPx*Ea|mBM|DSA2eEyuk`szq9aG<vy8axCp3xEKq6L zeu}RhxGVid={@aA7Z#D60MstrFuqeWr>`Y%r+{xS^7;Iu5!VI5H&f1>>s1MY?pg(I zRKXyzhXRXJ2M_+ET$z<h`$dI^TYZGfG@ShBPYM1jivSI1FdejKGRl8DL2iV@Rnz#0 zx(dCK!e;*--@tV4Hy=y2#DdrTiR+wW-u{$Qg9i?<2jrK<{7>#{hQ9Gg;3fJUj6GK` zrBTZt@j;6FzwKMXMScB^%TpyzN|3Gi_HUJAGb9lcidXqBAq-0~&(aQeRwJ`E5RHUt zR^RK=lc4o#joZF`sgFG=WLwn_?4>y?{`Qp{lB?o361cTCV&=|&{k+*wxZI6;6vX&f z*N8**gI3n|gMPBhPbq@-uRC7%(h??rNmDQ>4qa9gFh+PWcLHozTVgAc=PW7<0zG(& zw<Xw5g?e9qE3Ko?qZckkcl*ggtnau~;oPS$c`RHvcEfGWnu*PK_ipO1cD$5{fD60( z?;gW`NvD`U$dWs|6#VLZ>!{lqctN(r=s)NP-6)BX6m$Gz#LlZQLC*M@J^Xyb-eB_T z+L<M1phDkk_r;t<X=xy25**(d73Ru4L8gNq7;YoJnZP`KU-lI~euh#Lb9vg8zVajo zk05k0EY?!22d<<x%uhX>u6oMELG${`XVXS|jE4P>(<PTAUXi&3rOt`Rc%8PW=Eh<k z@=P|to`r{cW!!gCl#7}evP>?qT=at;__P2hf5twvzwzVD_+y7rs{36i<YAqUqmief z%fuPOK%iCK`PKfX0pG2o$LmrAwJ&jw*D_x7{$?asSsJ%eW)WpnbwTtExj)8V<A&x8 zWeDy_$nbcq))DM<^m}XouZTVbt6(8f;RNYo*dTSmo9w{E%~t8`JI6m363r9!`vN4i zV#jjx?!BDwg2q^%KfK3x8)j1E9~NkOB<1;z=Ar-0@W97Abdt_{!0h4RK)cTpUy`2D z^n1yn9)b7DgXPz12pBvhv)~Nxa*e}E&c59pY7u)iU=8uavF8m=qb?E>AyqO2X3<OJ zt&HKf>VkAVD;=(~X9-D37xtbM(l|6_-{5Q^Qw%Q{@@@e`Q+v^fPG1<W&Cot<BgzIh z`16UolcKYq%@OUG-PE^<md1sC<5%;QI*a%7r7g{)lCP=!YbXr(@ev-l>Ga;YNiC1C zPjtiNQN^#cEw_|m!QBuN{l)VC7r`P3z2&Pf!|Cy0yZ|^1Ah{DRl?D!>Z&BWnz`4JP zH}0<XNn9;P-^Z9aehL_q_Gj0y9jyWyLy2YK8vX|rH_uOCZHC06eKN5#_w}cr`Ak{K zobOe5!beZv{L_dY*8P@voyI5Q{5kjQ?;^b0%x@^~7pzD-IlR+Mq(x1~i+Q@|{L3U5 zyhKJbcz#FKZZKX()7f=EkS$KT48YV>13Gj0HfTA&Whv4n8Df?3fGLOfjI`Yd29klq z?<qPS_7*%4KVGIO51I(9H7@MCH(d2!{7YKUu^D?%NNqNMR^9cvrYKj5PWvulQTfy2 zP6rLQ+JyuY)y$=`{RU?R%%Ss`76=9BI?3cZ8rnS6L#uxWHRFhard2HJf^6|-U*cIQ zmzEcfq@d3{Qf3@vDbvIA-vX4**OD$8RoRh9vjx}-@@nywXkPP89_F-Okjmz>J2wQL z2~Lp<4I~cpNyRm7`Hfx&7UVyhs_Xrv5M@Yk{sLjOOrCfx<DzTvEl*$fv30yu!)yPn z`b5uPC|!E1_fO~-_nsAY=U1+XrA{I(`rzpHQbK^0T$8^Vk#6lZ!KT926wSxQrX`hQ z9vtyrl@e3tK)%7rWTlTq$I&i}^~xg|KN7ESYWK)BcX*u2fP8XR1T+RwIulq~FdIh4 zqy)KK7Gf>z1p1GwMd-KMg=ckWv<Go%8i$sAcIQ8QqDa`Wsp}P4?jO4@cgKIqMM|5J z*}o!gFk3iLn%{;lxwbbCAs2(gU)^a|vh^v}rhUNo>*S*Okk|c5rCK(tK~r$9qOsgX z=K2eJX?Qh;`UE3Dl1A2eadlm_a8<GqyDts)X*ubtt)3TUe&iWuV|hINqz&YfX}$W} z=6Z2NPWQE%Ea3h|uH|7D_CM<9(_b~^!=$Y9Rmt(Ulyv&Cv9rU7Cx$X3YvgUwtE<=f z=ndNQ^tj$cBy9a5x)Dc|Ho&BpQBis*e|4QcqzSOf8Li*MtbWg7Tl{ucZw%kXBGUc@ zQyR3>>ZV}bS7RQBLpG)!sIDk%d_A`;0C&+N3p=KXxqW1To)duwKFr9XK!RdJ<EO4A zM~Hv!L@J1uuk=9xSuOi4WDQF&H2aSDW-QK6w9!jsBQWwrX9}_Z@rY_A{r*$&pwM;N zjs20H6C!;nBpI3U2-fT2-eR@+-UvrQRs3<CE+zd_om}N)-8GV0T)YaIkgHF#_n`Ez zv>Y%XG!^+t!7PfHpbjDZ+@xb4wp<$F{JTEWN0ygB9IP6Y@?^;LXgEy<)hTtv=0YVf z%5m=yOA&<j6}~qQ&hN1r|Ed_G#6f#km<M-{8mo~S()Ckqb0KnJxy(I{Ep`=v?X+kY zmd>Rt)toG1Gf8@yF@;gtPv79ES!mSth9j)UJ~Ad+s=a<46w1O<&E_(F^@_~1dyKp+ zyrD6nGOkfk)`ef_->VcGY4%B&2z1Xk`s^!XcbEYrzy%QF99q#$le46qkPq+P;4@FN zyb^FA47fWDPxMC|m)4}}zUm9X^M;%MF2*+$-qlb#$%&f4q(6k2gw+ng2#)JR=;pUI zIzLthpiMRduLeoTh@qRN-&P!am1Hjl&)jyN+eWKw+|s9Ecv}JC@-s<++CyF}a3R<4 zgx)eJJgh5$VZyZKq*Iry-Gv#(DtseRg*@nQn?fn+xFIEj8*GvmhK$U4iY|Y(kpqHY zypx7j;;=5|A(9`3`VPn}cl%g=PH+uSv40jcP#SQjgnUk&QfuY5Xd=t>`Dl@0=KAGa zUj@o~j`cGE@&^83>6p{9q^nZ~r1SJt7<!XyW9Jsvn4Covws8MD=-Pz^T{dIewFKs} zAhc>}d!h%2$*nBs$q=KXIr|PINzYM8hPx7niTEZIY?UgV=C|eK8A;dnHB7_kQ-H{o zO4Fv19Wz){I{80oL0~w5as|-cCL>S4R4469K9mAJrEn->BSe52B>pGNIX}QDu#xgn zk)5V*UPg?}`;Q!C3K}Ksp0tQi9?(LbX@Kq-+ZMApLobRCtK6lusk&<7{Uaoaj#3f{ z+FH_5tg9-k`hfWS%Y~wH?x@p>J2S%U-vlySX-Kl?gRofOGM!Ad|DPN3_Hd#?ac$c7 zA10*Sq|#xBgaN{(RX_gLIj)ttjkOQjXL5r$c#u52tfSUrw;%O$>G1;xXQ00g3UDKW zlg{V+_Lt6@pr;+k^RjaxW?&aaK_~|sLS{+pkTWnpbbp`ZKw6RH*!Lg{Wp_b7D|p_f z=qvAGftQf<qYekU;0!QK^mG^`Z38SFsLfT(A2cmCKYV<?Zz7(x^wIZP(2jF7rr~w+ z63a7}BG~Cck{ImpAQBix0tXJTElv>S6KoR{KxhIMk-#Sy-#(lo24Fe>A{NL563bu& z&^ZciuPn5r_gOZi7qRO1Gi_d~s~F&K`V{yLnY`Zx^Gr+6!h57Gj|W@-$yp5Breqw< z0VzQ7$j}m@@e#co({o6W=XKWYhXYy$tTqQ)l!Wy)e=MgXQ)rjlecWl6$MsWp43Z`j zp0!@@bz5}4iI>~~_nTUC<K<<kqL`AH>m0N2CNMNjp`_Jm4fvqu!_#uX{91=guXygf z|070;j^+<8zORxp!k<P^AY<-S5#;V#Dc^o_$^}^IEe@$LL&<#Fg~ou|Nb*%13C&LG z`iOV^D$-?n%jiGkM1Tl8Kx`8zr}(5Ht{X7X7k4+sTMY9FEzec$o?BewlC-kee#lS) zYrSe8m)w4Yb71S;IFtO8!~skc*rWKPTQ7WpNzayjSnj93;wRouJCNK-V}XvH!y!%k zWbG<)QkUb`>c%C4tjL&`@~TkFe>?_(xEe+7Y4aK^EEh(Lba~Xhw2C0@KUg=(R;zyg zd*)m^(ED8XC6R{&)8pg)^(;f%&0_0y+~k-KrS6f3FKo-15H%=AnT)6f20>%h;cUhS zbH@%hE%?R{hIKwjKAa#bH|}kX-iLL2X5Pp+1-(<?7DU(AlnKE1_b|Ix>e&VHN!r5n zD{scf24aNC8H^qcN<GQ1x=-vg4(FUwnKQ>YCRosIx;M$-mo*(zovHW91L>u&-c7hT z^R_#t-se;yr*~9{2I{mPbtZ1ZU5|Ya_!_>0Dc^gRs)m4@uhd_2c%2W{1WUJ->q*(q zEkzYme1-HtY4U2buZs27D@y?*X*r(gT7&-<9SN~ONB(ntbQ(wSAX9&5Mj>W91$$tw zvOzKce*eSilOr{)74J$n3Tp70pDp+z=u)Bo?iIy9{>-zKL>-GbvJ3o?ES&x}?hN}j zYUmv_9E?(8NXJ=u6_5O>qm8?Yiz;y60k0ka4;YhvT^J`F3mGz{)TBh;+l`H6yg%d> zD?Znx+J1Q^yNW|7-7FuQ$he>Ea=Azlf#n10i+slstNU0OW!~Z+U+jUypm9~)?qEeS z#Kr!c+Y8#D0FY}MDMe3PfQ0pumYtf__|=B2`zd5P*uhc&p^P#Ho<BR?rhJF3K!ORW zlnI#m^Vsa0*C<K-rWCcC=4Wb2BeTpLms3?9oC(d?9FB$%lf*!jSYQo2xpa$yI0Feh zgDxDxuT#c=dGP*{w@R)`9IOPZt&CoD_En(_UBN;4v8QWqwVWqWOJ?Yx@714gyLLKy z?BQGvt?;Ro(J~csFN8pI9%KcE5*m>B{Xl{_66@yo^5n;Emu-y*K=6dYu?c1}xY`pP zuMs_tx|E5-o~NiRAZOfzY>Z7Z;hp(Zyx=fOd0vO#rt*d+x@L2oiAu4!Hui6Yyx|ZN z)TQ&UMB1EYBm#$)mKjUEOY83_URL@Us6&*fooNg0%F+>fBa#<ZEkx0%Q=_X~ZHrWX zM@g0cnfk<Ax#kAh!?I1^jrZaN2J?{#nL>)L>!Ye0*KA}Dnc0&~%fC0J${af|O+yAh z{rkQRQVhhQVV9%)Il*Tc5e9<vKB5k%f4?F-lIB+ge<!>5exLMwZ+VwLA>vyKtFUYq z=4)Mm56Q70_*+?HRH|)jUD(4>|Cd;<!Q_H=sW)xw&kx*#Hg}X_*d_3L@q2gYJRSWv zog_8QQoH=zwV?mB=C@5bq}R=vZ1q3>FpLy5iF|BOh<B@UY@LLV5@8SeYd5;bSTbA# z=>bPTnl)B^Pjk_h&`Cj4V%2F7A5H1OB}6u+=|cK)q^tz(mdCyR<J}Fp89cnnu8wv@ zX~c~n-m(Ijujl*A)}c(iDs}%9w^3%z92{}Fv)5}=cY2CLS`mILTK$;Ks>f1!w=ZS% zpyvTWBd;CuBHif3)l<GX8#2!8A042na|^x3{EZT`g!|d-G&o}ZfZ?GPRt^o*y$SF& zz-wNA#&}b}4>Mqy0MnG<@}mhm%I)+``R85=KwYImOA?HrSfbDZ$Ag!vi_Ts-MD66} z`-wi<Sp@}N^CYj68A8bZ<IXk>Hwevg0QCiE@nuhIn2-r9gF|M^EocYbrjnKt4FflS zzPyt2CjbJ7ep@NfaRz)`)_t_Qk9N-6ceV8Xg)OB779H=NIamJE<@1nhzTWk%-#Ukj zuQ91!@I9K4T}k<lAO-oJt~qSmoN!Upyx}u^#i&j3;O)Yu2<)SUihe5J>;6(BUIYJ% zF}gkO?D>hjuwD3)0tH!v0b?Ns5)4ua$gxYXvE%)FkZrVeB(ec8F@q%_C(P)sK6o}| zo3&O?*+hzBOw#RwB-36zM6ruqIL3}UKxe0v<qp{C5_yUlOm1WTP+WGIY_JW+1p&V! zVZ>8_7mJ(-qWKZNNrx2d#oa|xF`;Gu<}~rBL;%+pY-B(~u<c`mH;end%zKin^%VZ7 zIG*3iz6wAUwpkzupn4UwL#SJ*?KC;a1TdkkX`mH4@zdvVh*kK$uQq=y5`(!Y!4bWP zk6UE~TqJ$VET1Hvh1cqIVyne#ejD6Mb+g|STEDcWsZ%aqJ)!~^Jlot`y5_1R)S}I= z(c$19@#yD-#_1C>KFp3!xeM%m*<(I<@~M2wjhkVKg0%z2QfJr$2B#zUs-~k=XPXMW z`M;yqSI|zN9^{TRR|Ow?7!ZDg5QCup^j~CIT8YgspN%Nb?Oc-Ww%8@F>#?&Hi}dD| zHqf>G@$eG6$v;=dH(r#uH_M0u4?oM(TR-q5I1+mNhhC{HjpS#oKZ{N^E)zl+aY{h< z(1INws!ZP{TPi)L>j<bOHOc~(&<U{fdi&~oDU!B_l(84Hlp%Nu(P+}eJLo7=cy}m0 z-lK-1n$qHeL2AEB)hsWnTW8EyHnGV6+_V}AHz?A#xv$yL$YQu!M9J8NfrN72^2w`< zQYQ0W#c99}==4L@gL))%VechOun3OuJ7+T*vhaf6y64Qs{$rr@xK;e3lINM_Mde04 zi9{ny9q8p_gQOST@r2XkR6FIGilJ%GyY^n-$R!!Ojjj)z&dnQPg5q)p+RMhf)Wp;l zTI~sQ^pwl(yd-iAgl=Z5+t;M)-Pxq;SolbYqu&6%FY$4a{i>l^Di-jqBpuF6i#UA8 zl2Id@9$t)Z8SP$8`k{fs@BybTWPE?IHzWN?CtR66-Dcuhz;oLO#VHV3xQb^M^&+70 z2u(iT$x9{3QS8YN#P(tAYo-Br3~Es<h>i5M>z^KzEmt#s?DPGFgy3}J-a0vG=JeV4 zK3(~@uqh*Ny7wa?U}b|8k4l8BY!DUXb8_B!OSh)$8kdhPS@jkYn2a~Jm<MHf7w~oc zl3;^XwE$+_@nZYLn=0t9VefK-P%vJENYmGc^^Yf=p$e3{mp!XjXoL;?62L{aTqHtW znS_ve)6U+&#k2DyJd#5>&D<fw25$nVldvMUiTE0QP4lsLnn2BSDB<LdIyQLK6ZJPl z(S~d|b0%1|13TQ8TF5Q9bvgueGaSw1ky$6EDJz>r6gGX#Gj8pTtvf(DrC<>DEJO@p z{v+V5ql1(%#6MKkF(ry_o-Fc>8-BQE<u4gy$Ns(PRC7NXqZ>h2^!zjdxIQeXn#c~% z;z|rS0WV)%-^VoN%*%$tOsLMA%q#Er+$1`5drHb~l^lJM#V*Mj$`a{rkd8zkWBj(z z4l$)uyM>eF^%Xji{d&D^CJ)8{@bm8Cx{qPmVlakE+MWv-)Qa}aJ>D<6y>6>*W#x+* zh_{}f1t)a|mpU^Xzw)_SRHTtMI_MVzG5$tw1n*3_u~@(lc~B>;fX4_J1wTHSIsYpL zMIB#*&UY4ce@H@J{2Hl^Ru@4|)jIZrLW{_$Ow9u&PmN-Dp=+*VS^4X_&o!!819BdH zn>z-NI93t_HUNt6!-W34MdCQMftutuy_GiOD-lVoI`pY$UI%0UI<1ap4U*}(dtbPs z5lJtK=5M?kmNE8Sw|lGcNxDkBLPCEexkPCS{KEr*BzseYX4}fF2zMBR3_GrP=jed? ze=|UazYBs~?kMi`l()PLSgot~{#`LOsPo8EE7!C&2$+KYBiqT%8*kcywsp14f_Jdi z=WO@?gFGNZ4{UTv!^dU*u}g|ismhKWv@Tu7{^xuiy)`!ttkI-4ZNP6Gi<PiAYqM73 z<^Pke1ZURRWZ2WC*{-{VWg(->2pEYUV#Hl<45v++UI8WI#FV(!q9I^>>#7OIgy1@) znLFI)bB_C?qFV_RWjtqdGaeep1dCJovLujj)<5_MW>zY7{h8b}3sE(P^QXYR*SVOR zHajFo)#V-DkF$oP0{G99Lq-&ycGD>^1%}Rhgiwqdrnw2wne2G$rpN1OtLFw!ICT$> zd`9K*bLCSxUKP=}QzEkp)iG>iV(R7d=SDR$J-Z9EC^y&@M~|(zi34xSe%J1vQA&dR z@3!7EIyzZKv>BEYxv@=N8bNP^WjGY25*`?{vYqne5+OQn+-F_Pv~PG+%0EM>pVDfC zb}Rb#zP>ftAGk<gSn5;ZnweE2?7K}!{oCB0GByNOSx$u=<j+olsy4*v0wbRdTEqW{ z4(JgD{566st*6MfN$?@?qCvuD2How+o!=Mu%UeF&__N&vrQKKfn38Rzy?P%hF6+u_ zBH7Q}iB)lUiZQ_BTPp!0&R17Et<@A={}qe?_)r_p4FT!k;eXg5@o(5a$a|r8gRpL@ zIR?rY?@6S79lbwDQYBnUgQ5us=qqxs8-gUSRLTyxJ?UU)Z(Q<5fj!Ee8m=1i#%5h) zKLJm71xkx=SjREz6a3T?N14LYruKhlBqe(gnKtUgxWO~LS^T_+NJjAe?pFX_t6997 zK_M=`1K<3_b9sLo-sT%Rv2a{hdA(>d?FWJRHJ#q<y;d)ZTOETvM)>`zsmaA=cz0<0 zMS7Z0L_d1Fpi6Bq!EcSX_svVF4F`;2JPiI9+2nF4i3#vco5za9zPy`fVJD7~?+wdY z``)yV5tAT<t)6Y)U)RUN@Tnb#AGfS5FtK=W2FLX3)L;AAomfzd`$VG~L|c!k_~}nW zzv<4=DNrx9Pyjw`e<Qse$<)(^e)1xNToI4y%VulnfX8~;dIx1OXAfGxSZwbIPB3hL zaAjER{ug!$+k48Ubo!0NALSoPhWMpom-P?o_FrEg<O3^SIHLKavlbr$`h5kO2+LR{ z(MQ+S)l{2H4^!uVEIVAs_#znW_peZm@(k-oGDn*DNn1sHG$f3qm3p5@5#vR8vCPX_ zf-v8Yg0fnpN=&U{JAOnv+xO&qu*}|(-;|#J=CZGRl$<3_H4`C(mC7$<8yBtvCm~ST zDlE0^LLg&No)9^jmmF|)*~&IJX|!umHigSXkV(EWZ|SZJ@3lS+^ONgrQv*w{XRKm4 zH@bb?&bc^sUoBXfk&|_WZNtI8y{y&smFiMgzT#EdPj~!d&p!?K{IcWRz7zUYOKH)b zB3<|Tup7kmy3BXg;b$r_I)_p>yfIl<K9ymz2`dAKY)WJvYZy4A3Qcyr#0x*SZyCVo zZt-$|gF6%>ZMKh7m2q8+J35h{X3s3gNI=#JP;t$!W*<hvXzyn10c&ndoGJ;?rsT7w zuk6Cdk@Jl)iN8%V>fZetl21xfXED?(CD^?cJ+}DN8BYoUZuZ@XQcv<q$fzGIcU1Jj znX@wd0-Mr}F+HDxnn;vv5O$a|Iz(Gvu@Yw#(w@wBEITWdY)q3`_;}IJap&=bIll+) zN+?-!2sw-aj8PzL&IRVlHj8l67W9hK@Uxu;#tzI^n&y{uEYt#=8~6GDR<Ez6rI+QS zNHpM=8A~fD=0MWeg*@Rym(YYA+v0r%N@i%tZ5NF_&zi(YWmsnV>=WUbj^^{s2?hrR zdp<yG^YPv`jM#uixKH01takcKJ|r_k>i<5L@#q(rC~8u3NJ~4TPy?~BV&sBm9iGl@ z?=U?lkku_Gs%#Hj9(i4dqyHYBOO)GLYryf^dCn_pGsyy7$*k}m5BoT(D<U<lOOu~o zwP%&B1O^2hDh<vt*E-<?RBHR(M4r+ak&OZwby^i+y~C(QqO*?L^Qx9bL0#|7J7u_W z%dndCrqSeQ`)V9Ty^x3iv7&)c2Ne{STPAX0#_ytTuL_yoyqI<tRgk;#rl7Ox;^*4j zhj^t)A5Nd#?!Syh?M~yOdy9b8%AhV}*#%W$?eQMDL?A>a{Z*(P!$m%CV}tD>(=IzT zTpkDz_aiVynOSd1$EqF!zxjaGQ>)Feg!dEUiBvhpU&HlbkKd>SkTKcW(wn%$?Ih!? zr}ztBc0FFPHKyXuo@x=PdmExTHGBOd0dP_Tno2_`B?&)$rMUx-n~H<Z&6B8YAk8&I zE~AOLWqUJTU2E!6qHDMf>Bo=Z9sJXMa^m9282_atGxrb%GH8Vyv^EvM7n-3b;2l?R zS)P*WcoVSWvih62=haISg1{q*>-Il@e$ui7Fv9AhizRaU{4^t9an!pmYW8ZJxKHke z&$^J7D7H4x@?Ef0D*21ADOuq_cyg`}G+;v(H$d31Cml1sXQ=z=p0=!{FvtnHG0md) ztMWlB>s~aCWTx|GPt?|R1i|UeBBKx=yRf@nh!Ql4AEQBMk3FRlsBq1b8cNFG%2GwO z$k0^x9E5mFJIU&05=6r5RDBcKeELs#W^A#j;6t`Z@%7Z-yknc5AFpC-lIKNzq1Q^B z|MMa}FQ%f5>yWR+J<MCO>F7kTnq-RxF=)14d|N5NLFq1`R}o!nui5v4S0?#baQ@7v ze9brbln?rAwc%&Huh>IB9E)LeoJam;%Y3i?x;}3=c7TaBY$%CFiM-ahJALarQTFHg zY96ueSeR?$;+SP8iMy~}L~v7@GnSNP?x9ljI+Pz3NBqE9ScIy5HNZ`fj14Nxah#&* z&n_{PglMOlsCkNpJh5kVkvv!=r3aM+0*ZnU&0sbekW0bbbL4J`$?SO!Fk6}1)siD6 z@jC4$9OYF?IBxn3Q|al{z2QDZ#7xPZ)Y8VSoSr%G4^IP8@3+Y|!p42Ic<>EQ;g_V+ zPc|JomG4MD9014Jh=1R!lX^n#I)(c0!L*Bv9lY=E!Ee6#uxpx5*wyQ_3#%lG98?Eq zAiq`0<K?@#ykQ;4HQzsVhvLdNZRo6G36w(e37PjBkTDKC$o?awq3nmsun;jxlGZ?7 zrYIap4PO`V^jpU-5|`vq@Rc?<1VOImgxA<hm~szPui)`Ed$~ip(xmc$PD8i9ne~zJ z+KAOFFTs^c*8rzWoeC}YQjV@zM+#%MQpH7HKgOIv`X49MCc@rxfT8yzGk-E9C}Mn= zDqr_~I-O<cV9vo0vRD>_8!HFp&xeR0m_(&14Qw^TjFT+m6ogML3PT(z02kpji)5wf z>D?hQM7K0Db%=}I&hds@v%AD3ut=0`cqgVdW7T*#bt{bxd268R&&CO#`V6L1t@j+O zU=rL1k>KHz*GT!bC{KxwOqC}a*bq!j8V9su;;EouTwUfgrtZsnb2pApOd8Rs3^2uK zH{Rs7dmC(}XnL8=`7EaVE?Y>Pv-d!O&(8&CUgC!uH15XEks``aMqJSa-JlM&HT-(w z<7rG1;}AZYg)^yzemcd$U(h1R1mv=xa3>o@v`Yba51j>~rCWL6En|H|K{*DTp8OfX zCJqv8tJ(%lN5K%l)yT&>D9FwFKC5EnM`ySk%U6Lcn{$ypJQ(9cc4lRpT3;mt2K3%L zS%hW<pwUHcZX48k-Hr+WC1Cyp`F#jT4!dNyIBvOK)~2vH>{IGZB9>j#`=+dOtqv{G zc{&fI8zcpmz-<5hZ@ctc!Ee4NmYn)_bt)i@<w8&nrRH{Bq$Ad?l{;T2m?`%Z8S{6K zZW6y))uR(>`U!u`XRbI@IVyT2f-1lA;lni3g>aWLlbs{fn8;_4g<_ePCI+{SYmYr| zzd!)iPlUag73x1>x#%!nY6zfwkjQz{<wT&IlrR!e=qQj$?y&_Wn|~kRfHtk6knEG6 z-ngHL6Fq2e4UN50jf?iey^=x0?x!+-;2WJduS?#Pg+}kd<T=-nWX%3zO91}hpoXs{ z9~Kga98a5aZh;>9Y_+m()O7b)^lu3MLr#(f!2$jR*m2zgFbz=FJHRJFiz?(uBoM?5 zrnF^5rj}W-{NeRTbX)EBpUAd+g`{P>WivUaBBLP~;6e+HO5fTX?z;H~eJ9GQ1N$xX zpMq`JI<=y9C_ZAd*L2HhxJL7m)6&-e@pRp9NqA8|8`@GTD>Vm|m6@5ExfLo)>+7Jh z(oDr|<=zXSvLtgi9687=tsFRVE4Xpv-inHX8v#)^ukR1<`ybrrIrpA(&pDrQy2$34 zKJS<Zg<~<b$M^ohx)N|VuI~Bexai^%m0$YH`@S{BI_Ys{lMakx#6{*8P#V&G&C-}3 zFaCJqQXOCyeK{VJFXe)_yxhN!@2_D0P3K<o+h2xLbv|QM&e7`-?>gyPFw-n6&LU|~ z`JdeSKP>>)@<UhlIRC3krG9m7slGYTQhbZL4ytOq6P$Q7C$SGutEv2Op|LHSeN<eF zPT1xlkplj%vS>4fvrm9;ZYFH+=yRv=2Kw9rXM&)}4yvyYBh!&c{1$s&oe>r>LsSX) z?=~_+tp>luVB3hO=M|`&>~b@J|B_?5eWJQlTDC-s#oDc5+j%Zk?f0H&n?=MgsdO5& z*T1iDGTry{QWZ4Avf<g3?xiI~qwP9!W4}ng8jki#Iao_I{@1NqG3r(&EKUd);Fu6n zm9R7fUZn5O64!xu?g$eqDUYEE=!3e(<cX&Xs$>xUzvNFu*LcH<6n95b$h<n{uyRek z8}!(qhu+SR3vgXioPLg&X3<uQ%CCBB)@zx{jP}~@4?RBbd`RP9<Clo;60Tm>k&Tu^ znaz8`-%K`lFyJYKZfdZ6-Khm#o$v>1Z(Q)N$D$y(Y*DA~G1Ud1(ywW^GNlpw)G<G< z&%_^I$)2&^-@T(#vwrp2>Ib2tAlZaA?;G3tP97IxxP|R~^lzo3?LTwKfi=KnuF^)} zsXe@um1+eNC{0c(gpJ0Ag)pfp001^Od=APhM<T%-rR)47XdpiaL61T1&Kp8Pn2iYm z=J+>89)G*^k@o^7i^LY551orfJS6;M9v0qH)jrt(hK*LG6#gQcyZBA2C87Eu_!Dh* zpJgPT5v6qP6hOo={hlx*XJyb3e{FrR=g~fpeAW8h1lYShE%S2DnDn*_*WSj!Q1S^L z?9zygwX+L*abBMPmiI_oJ4xjJWME`W=klcReXiCH>0!>}hHHQFeb<&6XZ;Jwk3mlQ zI&zU<iJg*&pPJA9<D$cFezAQ3B%YBrHam~F`n`FIvwUcY^GCLwlg2&G*77+J2G(gR zq4@pjcJZM!qWw2Aw|)?Ysr6mnB>cF$xH@id{EK>S&%WXdxbOhvf@JF`hZ)^7_Y1Ie z+7v34^Ue1T$i+U0Rj)Iae;QFz+XVBF%IMLGf|OnulKu|!mCKv9pB;Z+Tj10<V>ss@ zQM%q2sZ-9(0!139P&<~AqCG+`IU0(cMf^@a8zJ{smF&<JR(0M-6}`}+YtS((goo}- zVnUb%I4d71;Ha#g>y==;NG#9Img7Dgeb2}``(RMAK;_;U)hyAafy(n*zuV0B#jRU= zZ<W}}G*fSs#qFoMr@p5p+1*Bk<eqED(kdW*JKNhMTs(XI-!qtd>6+;2I$qcWQ8v=6 zv#!V!A|W9zUhbdd=-DpWa=BrSY;@`t`%+Ud*ZQ3uy5$y%s+L%sK7GjEG_qb~-#swQ zXvhbW7qM-rY?>qb;TPM%^r%94<e9Mu_+DU}Ubp%23dh#>2h+G?!>ao02X47`@&AFx z$L?~9k7SrZC6ST70V@)6>2DlrwCFz?E~9lkfEFnlHxdZW6ZM}rsI)k6$C$})cnhRq z=0))G6j7w&6Pg>I5kclDr(d}gNwdg-r-*8UwMRnATP_IkXFp&MslyLm|B070b-a!t z^bzU*iL`8gl&@<CJ$+u1lxJs`auN2<#a=RgS>7l&<T2t`OE5C{7bfXV{p5+Y@cngF zF3oZaq)&i2|N8mUGdkun?JuI0>7TL)jW#UpoFX?%Elh&%++rtbf>VA&$83EegBUKk z(7`zzc@4cp)H0xHxcZ#3iUmKU7?ix#{(RvAIlHnN(c4Zh@Cp9(vIHOJR%Yy0po0tR ztu7bYom<G-jj#eeQqv3vf(YB&lC7JqfR1hY_?8A;hj-JHnHth^NJ(pD!}ve7OiW6G z>?qydR-t2wNYHimlL31le5)}1-$poLne7$b2BPXucvl3Mkm~y!6TEiHdZJM-HCBHY zzv#cz6J}jg-<0w`MErZHz0Zws+-XIhDm4hLKPXQ#xUfL&V&?U?s|8kdp{Jg;Eg&dU zq>~}?Xzk~bCp-qfPZ0)PBKk!lV|_QI-j>J*Jl*!V?BqslYavg(Gdbp+1H?pav6^u( zZ@cedALBJT<XixYu&)M{BS)dqI~f}_%3so#x1<*hfIAB%;eWC7VV$n%=cI+Ty3hI_ z<)m|bdn=Qmz78iOEZOaTS-spLh2M&>_`zsAv(qwwU?i~NljkvUsaWNBkL0BA-s%iX zO8L^;1C_m_v{O6-P98+gQ)j-0`jvO^lGDv@Cy7wf(o2qv)Y!|IwZH2ib&+&mE(A5W zGvt(_<78cI0dldVmHsP48>D$hOkIs%iq@bS2laywhj+qT45B2iy7hm2<_NVoKgNo( z=v{xK?A=JXe1$Q{f-!Z+A;8P25JVd8GP9e)pi!?MF+OYlFG02Ic^mWBf{8F#mjQd8 zh}2kO8O>3c{1_yZ)i{X+Q{8}a7|yf=Kj_07`41MbwBHGk6GtUpg@mXNc`tU;M!x<m z-siZRzf#O2eJ+4VQV@g`8k2byT4+UmAt!si4U_m6n!4wLUU{;JgcV6#&xMrew=Lc! zDXTds#(Jd||Gn{p8@;mZ_&qGF@XdnS&C{rraCe8$8>*qQj}jiK+qBf%0#Hw#<&KRA z%LN5V`VtkU!uBsM<;Y;<uLof?Mt|87_X>%Fx030a@1)EN7+p7g;!+^m$w>>3tVXX> z+*MzlZcU7~Q%HLlwl7l5g-8yQJPpo@)zTZP3x|aqgiq`bzFCNEG1r?bOM$N&*KA=! z8Jo8O-*u2w!|MTct~2{*)Awi4b!)yYO>3?|6c%5&h_if-uU7*@b6xlN(Gzr?q=WQh zn;lp%X-V1#0#9h^MhQCa?YdPZO-_qHIA?q&-CY6JSxNiQak<svDP)y+qa8;oOFo0z zPFV{ctTIJFP_O|JlunS8@s1f=MsE=JS*uT+D?|*hCLW$HLU{F-)UL^MQ(ME0HnK&B z$WDinC^dmzN0~oxd@Gb*$JB9X)$<=2?qY<8nVIXpbgkJP{o*N}jYCj#o+|m?ij3&! zFWHX{J`(#jeiYI#);Pd)EdjL_m{|tR+T<bN`^7<YKg<#v*Q`|_Yb^$1$0G6R4)+Eq zugUC2v8(VPC`ab%`e7yN<q`+F=NHe96zHh%70&U8ZPmT!x^zvYs_YxrJXcCk{>5G7 zdxuRIYOxRlY~{)PC0qN^n@--@E#@e-H}TXnMU8`LH&2BOX2t&4x1jd@&`_#&L}rFx zo&B*|IVbmmOd<BWxR7sdfOW;En>!xuqZ|>1=W=U`cA=`WSrL%yf|GIejKQhNUd8I3 zy++ADpG$lg4$C2AtA(0V+}906&V|S4D0Odz<40R;SWK(ZaPA<uL|;V96RsY&W3522 z<;!VQ`Rf$?U4vgV$m}9Sx_y;GNx&hi6{~2E#P<R_Ea(2QL10B14*xIaS_OWYDh|ar z5OTDu)5PN<%rUeG+_RR!p0BJ=LfrPA(fzCo$zAMw$1^!`gzGc3n*UrA!cj!^-kcb0 zhlHs!N1qmh*?>AXRHo|O;=n6#tP%e(x$E@3&ILaE+YN#6Q#^lzSbiF1dGt6GzP(9D zSo_JD=Z9gQomoijNuF@d37KhnZzeR+r*-AbWNx6n!d0TZ+JQ3I`K8m(96wC)9?9`j zP<Q=GtLChjQ4X$y+p-@&rzj4Em_xM9`g$b7MrBVZp14HYV|lcF@3G{ILGDs;x93_9 zN^Yh3`n%|^2gL^N5g9YA7fov3WukrujOfl>i?g1LDuIX=+^v$)ga-_+pTIo~J4rn* zRd2Tjj<N&zeA`W$>B_3Ys><J)cTdY2#yMfv63ctHO&#&6uCLigLN6;M;2w?Hc+crO zY}W2N20gRZ9y9^19+#}2PBr~pFLG8&t#0rXABiohtlUL4LBQN^o--|Yz~`zMlg%~8 zSHN4Z`!0?->AWF4^?Xtv?sJ%94Q|&n;?E(;$+M;=H@k&azScdJjm+fzOZST#^^L`j zhw(ow-=;{CYCYbB&u#|y%KpP6iN^Hl^^G1R)}(z%Z}zs1$MTXavMpLc(Zx0wI&~Mk z=zlaS8RJ?>fh>C~V`MwBfPtwcy;QlRRmHg$)hzVbI|VED7)n*hNSlKT5Z^i82ErZ% zZO1^F8&pxz`<^xV5#?)Vuq23RL$FgjpmZjPf&6>=>`g|sn%obKg^WOP;kOHLKO0x3 zUc`gvGuGH1LU>rC6i}(4Z9)5z+?{Bph?KnUNlEEdy#%J}hrB*^x-@}^%wcN=6cUd2 z9eQq;u#<kIA)B^DJ73~Jx^ch7n`D3f2&hIe;b?5zA6wJ*SDlw+x^u!SGfhp~EJsQ2 zzPiJT*W1Ex5XVIXUykxl1x-YJq}r8<<4QcQn(xj@0%IB0?%9oJQaUFkpDly~Zf&iL zC9Q9>9{ro4tHo2^Hw!7p@3r4`GuAwBD5vKEHaar8S#GiB|6QR>&7qz5cstHhOT<3{ zx%^?4C@PM_(c0CLiLw7^VMT%kY2cVk#`Ob49r1b?3PQNkxV;rwlQ2h&V(OTqBCCD5 za&J$*)Jmhpikpy@gC`Tz1Ya=d`S4hkQ0Q1@@1Md1kESH5HBKGGaKt#rJ=}qNwrSx) zsyp+mM_InTP7tuCJY@GdjoFHUuB*nXqnv#HExihgcj%l~Dy;`%aGN)64}ISETPJ=v z)-(P&@OZ8z$yfbr$+Mc6Mt@ZaSF-gHd$8<S9Hc{eaPnh>Xw;5v1^&(aL6(7RD!`Lw zOL(13_bC9Eoy)UnNzGZf-EfPHA^Wd+%N^c)51-zwL{Mr02riz>oI|q1LsaNr_JLnr zJG!q&$}PU;+zanB+RPUf(b=TIYw#a49C4M-I@O^N_9y4^#k@m~L3@u9XH&8o`zodV zg=>eT?j<=K4s4#>uTUNPd-$JAY<HEAnCpiLqR-S>)o6Lct~G80`p=gx?<2$<+lh9` znG4-#aJW(tshl>KR|;We6t(EWMGGlI=QB|Fu`gnQhVhO6-n$E>2Bep2Cw1l;K(b1J z#bx--RxN|;Qr%T~l$+G*%8Si%E}Xx!x^3-y7Rq%>Lk86{nT&JiX&cHCNOyaA#o09p z+XKP<@}ES>(ir6Kz6T5=VHY#L`OS1nTE-ewI$bDriJkg9qQ0T|T?>U5eRy=r;{wcC z&e#WC>095Z<|&Et@(@mTaGd}0YVx3_O>T7~9>(y*>tlO-{1(5T=?Uq5&Mgc&<h2TZ zX0;<@BKLL2{$ro-bYZa1v<lEkZd}+FRtrNB$_T#QWHZ`VzM-=v7tcBtYn!Z5$I<r- z3$U~iZ)U#JF$-G2q3}#Y0~f7W%l|qYkMKL{he1U))0^XSg#rA1x+Y3UW(J%bGIygL zV;y#)?_F>8)mEL#W#WuBi{Nup?T7}hM>_palWVW~cKOTw$63dQ0RU?U@ENBR?JeVM z?x+@5<Ani?B;ChH{?M+rNW_`bK7T0jj8dgvcz=bsGyqTsC|pZTUbJEaUe}Gi5%gC% zojA?QfJkJ^c7d}Y@zI_b)q90f3PElE{wQ^@WFzeQr^?c*bmFIROKyc(t122ASxq$B z{1o-I*VTr1Mj9?5<7BFgZtd!Q*#5GxEsK}(9TUA(nfGc2dDdIYDf9&Odmm~m-_>-f zqudkwNT82bL&!s)Z6&&AAc)#{mIeEzIG-1imKsi!LG%+>|FHLStgx^L$LgQP#v<o- zJ$#=WC3<S}y#4}EaPd4sOOO!^eY(B5#OXQ&%rkJ4!7igcE(yN!CzB0MuZowfkyk>+ zJ}8#fo#%Yd(k9n*`}*Aj2oYJgHQf<-5Xezl#=kAp%%F7aWmSk2B%D;%dMS0O=__jp zVz;$q?fqn{#HEN-gu5t3u>j%Tz6<+E4hd28QKC3THMYDXKgQYrI=U^_>-XmE^W3hR zb85YHZ#HuEqjuP16n19FD4z8dFpd`Kb8hTFiRiJ~{4u9`z!~#LBH8WCGU*%855>b7 z-o~SZH+=3Kg!djT2WP3!+_YCHH>Hncz4_)nHmnXURZB2Ezpop8;gg7gO4k8RxTH&} zoR*hwB5OniWpV8syiaF6t2xf&V&l(45lIx^;Ina+qT(mRo}slCMwUI}q+P4q{>{4Y z4usk;KZVfaFB2!u{ev)cvRyGD7Y}+nH@3W7SeDl+dQW{*Hk*t(7<En;7kxCM!9Ui^ z{oy1g&=<i@RGbS~zAuf_3<?^oi7U!zIs2ajq#{Y{obD>aD1LBCO|#cE_I<j-$^0at zRIBgIJ0ON()RnNdAV*^ZqYBoYlQLKGM;j)>423NN2GP#R#=@=@wlkos@$quin7urA zY*7M7Wku*lxC9~MRjDOOCZ-{Y95wAE-x+moY>a#ky|@$-EfH}MPKpMjB#^+hL95T~ zTn7_f)X&HpK(Y1%p@t8JCkDlv{U;k-QxVRGCHN!p?2gae2GoM&&$!tj(~!N>;VX%V z>hMw9Uc<hO=vBom6DaWfQE-L-6h;O)!&QZbjpP~HMwliMVx&U@vd3L4w;OXQ#pbd# zxGjZE5p&QGV$F3!ig3hb6o;hdMPCpy&f;g$6V4+224)^q&`O+GYST|XkPa@NnvL%! z98Xls)$*<AiPP6QECG_(j<$kf>}K`uG#g)5qq>igVE0dC<mH?pUD}f(@s|0|FT5GT z&D~*Gnny&ucRMB-X{y41;{|>{f|_N<!^IQ9BI{9g&x`J+p|fH-8ZsB$2U2HqMX!@A zMQuF>O#b0M`4HcRIxpws<Q+{)_+;8XfO;qK`I*H~O9f7Au~v*TZA@wuRwt{UT&R0% zsD-l}Q>?uLE>&V#MJ><s+7v-gIeU*z7k#^6f$YfO%=~WjHKq_9beF0BY~#&u#{!x) zY$6TG$17@i!l4^OzTUF{-}QR=X6`X?wj0ENq|WgjQ3+E2H=FAbj~ali;m+ux%{6tv zxZvVtC;!gpol{Pc=~kn!4*P6cB^hpdZiU-WnptKZs4lvqj#cEe0OD`^;k~8fJxJk= ztdyH~!fSOQgwMNrznM^55igIOZ{{}x)bW219vNXj2_@}$*XTax+?KoXYlo#H*wJZ3 zC4*9*i*nJbwbu{8KT#SY;7+e+r-awD@0lVOy7d+~s=4$t#j208ZtuT(EBHv;o{Z-* z8}xQ!vFI`K)T-}Vvf&<H&A{F543OIXNg38#dKhzFM0IZ-ejk}(Z!LD!0+oJZr*w{T z3(-q>GlH69V&PjGa}xZcf@9|d|1rCNAFjX|{z#I_>^LZ?Gyi+ar0R5{@8+WumJKDh zGD}Jfo`LpURXEUlBgpr4oQu%W=jN(iZbzk2ikrg|xHz#lc1eROx}uV9Gktzia}7T8 zJ>O2fP`7J3)6yD!^EPfksM_5=#yk*p&C=k*OC8`rnSZdqjn^v+M5JnQ<|^nNA7nQ> z`7R)1r0CU;o%Z0yDdQ1`gCUaIsQV+SJ`>k8%`*N3PEPtM7fiF)zppL(x%XXvWh1`p zY}*Hnk}k>Z+BtLM()M~V`}u}~aM|Sx(2ess-g8rcBS<qRSJ~sY=%n>@B$n2U4xDH8 zHoNKW_}F!_4s-t<pVCy2G7kwvLgSy`f&KO|Ay@><+CPRJv<g|){-f2Rwy-bP+c8Sn z5O!?v3{F*7T+X{qG*;u#!fV-_H;e~kHUVM}T1!Zt;)7o&_hyLnX5USCe<I&nny)>G ztR!#3s&<Za#n_h>m1PaR+Hlcdr!Vi~EFYuKNR8fyV8oeus^_lRy$dS8)K55~tf?2z znmONm$;ruF{Qi7EaD)EXmSt+f<ywhO1D1JD^<p(ZYLhi)HyKfukTqqJryJKXtnfSS zBqq4Y0scs1^ZIs=YkJmH$oYl>%gtqPQR@MbGD=d`-b&C|ebfR~LvkaWA^nChT=|{Q zz2G-rC2^FU&pwan)C8fL*4dk)I*OY$qxTfqX>!c!ZC_dNGt}C8cM8Z{ehCzq6(m13 zSR;}SDst2#+ZXvX>JL*ujrc0ZgsXn9N=GkN?QGQA1@lTI!+J`48E?E-n!qj`ws0gW zT-W=p_CrL|IpD2=xijzPVx<Rg$hrDR_KO?y9W&7ob|@;1w;o}nFErCA#EP5Bx?E_8 zMOG_-7i%N02RledU!{Gf8fV3pv)i-4akbuhGZC^)3Hn6H=jB1Wa76bmCb<7JQ6EXN ziExr{bgEI}hIds|ZH%0lg3EMkM579fN&9cCJAQ_bsskh<+S&(mvF$@5Uj17M=aq@m zxD3eTm_a{oUFV>ba;uNeMd_9NY%|wb(VAnnY0rc1*Xp(F&vqj%@6?9aAvZpEcxlPN zA<dieu%e!h#?X19D5}nH)5QjG*jnKnAX|PCxV1|$eZe~*#>=sX>T|g$*v@8~`6<Q5 zdFIlqPdiDmyFOBkzBwoJ{>X&x3T3Oio-RJ7an0IMvBSyw;>(ch3+wjEMSDnl+pE;N zyofi~D>~x5<#p|pkfoco=R9kDUR;+N)9KdAOuX2()co1tSao&st^0Y(M4g1`8R^Ie zVp4iTi*=-uXJZ<d&1Nk;q~0EsK6y3yAzI_rxzzHgxaaWHN=R73a>*~X_B#fc>vz{r z$3|c1s2kq+Stjc(1%Sl>VwNtH$ewY&ap<aa>Vey*BWFDWJ{WxM)sRX}y-RS-6O$%} z3@S0M|CSwdNl-TK(<jw6WZPXj!s*3&QjMVM93jEMxqKC-MLGyPHyU15(mj|+ci3}^ z@L22uUtP=YbNh}+aS{&Aa~UwW?)9jlsY@St=SH1JEkUVoi>R+~uTvT**)44U)*5_Q zyjL4ooC}lFY6q5~g2Zc)6~t@gOd@B~md(03Cr7uAH2AKD{riO5N7gWG(!U1d-x`0r zChxR$I-EVW2U_w{<|r*;JP7+4Of)F!0Cs;d&=iwH<!4?p36pEtyvlp(rf!M?Qi>5v z$n+hvq=@^bbgrgTohZ6oa_Z2DcMrqpnDy^hrNtnmrVHC!H*Iq?o$+X%{;g)WC`)qw z(#G~WY~q9yspV5Ddg-$gA%L_<u~F@7cH?`VgcF-FPfrBPD;{vRH)QYUUK0Z*_(nO= zwo(W1fnA|)9bvO!FS-Mkvp!ZbhMb43+MbbHUC79?SxbWE*+d5k1af#VXVc8tdG1?H zEO79E|FFgUGn!I&nafFA6^_$X+(3`S-!JMB#aou8b6(4Nz_snw$sVH@IK5t6rR?mx zM)CD44dIs(nBjK<@spjr!>YU_d524tYuRIFw$59?Qnx%_r4DFuvIQTFm@qg)*%Q`2 ziP>%!-gt<hWKX^H3PBN9#akE`Jhk2SqJA4Cv|VRW;(&phNniiOOp!neDJ>b1{&MD! z{jvVzbv1X4gp*Hu^njW;1=AZ|3;(tiu6u;s-Sx2hlR!~)(x*1sOJif5$`aJ`^30&$ zt_3IMp)k8d!zKFd{nzLf9VZ#D22pJ~0F?;g*`kSS$e+(`Aa=V-Lt}aDOwu(FW>{T+ z@$+j{v1{>1XEv9<g<wysa7IwOOR$Ky1f85bfNLkI%9H1P_(UvpZ`El3yS+#0FtcxJ zfUH6bZ;u`OMEcpKaP|lt4;SbGu$v~>?adTKJ8G9&zv=qP9rh7Ykyp{vNPC;mcz;@a z)!h8>j@3B`y!fkq>-$HayDjnG1D|e(P(?mqy*>m{zo|Efs7yQ>8rqOguX?1yToCd4 z+?L~X&#*T-WKKG=H`T|b2p%0~Z!;<CZ}Uamr>lK{(H1r)7v1)z{_A`uzdx(eduGYC zfPZFDI!@Fu4`Iaj#A+W-qi4rURA@)gtwUhv2P>TjY}5~=0%H1v9`C^gc=NUAoF=d? zcNvkOw8!itq3)6H={Xv(xKtTRN-;}I0Xw;rG1C<!$p^teo8e2>ss}&svziZ>7S0O1 z3%S|>w6k7W)K$YJgiX%I$k;Z2O!1a<vv}-byN}$Es$HxETX{bkOlbkrk$74#0BuYB zh!eVp1ki(d(W@FI#m`#E_2&@Y|8lv+NXpjsSGk*lO<dEGI7l$NY~srnaq?r|hBpj> zQYyFUk1z`b{H^^?8u>B@bvmG3<&Qj#7BXx7SFEB<&?z4?r8mD~owwC#$d|(?nY8r5 z$blp%ef7p)RcVogfCc(f748EiM7~(2-HmONUyAi@`TTlN3{XsC^6N|17jM{wq6K*) z4vnoX_9Qo)lHG{X_ufX(8+CTd_q~*@PD3ya6U?f{2YU^<Gl&5lz+5gNp$+{ui>c>5 zf2;RQUm5;1m{Bt!h_lruE#yhysP$YOU@3nHM%4t5Y!aQ=7X_nDeSLYs-A>SF{i)&H zu>!W1_k3{?k5d(|LXGTzn?kZ$(lQjloXMK);NCpHU>W9;_AL3X9<h?A5>YJf);tpN zf}cPYPh*^M#@3kEql=i&yr0Hv^BO^9qs5GxydA27!Nt_j>1jdJ1{vXawyleMDsRWt zpSY9x)|y*drc7OdnPJ{j7!-XAk>ZwRy7aAJ!(KKgW0V%0k=Guhvm@LAZOQ~{<#Ahu zqM|5rj|&F+Kd1xDXO^RVS$FcR`kL|GjIS!Kn?`D#_idjK=Q!C_HDMFi+_fJk5VBRA zVAPLOulp_eZI!ldfpK4LyZrg((|-|}!7}-86Ckh*8ikk;cgO3bz7;VnUe?q1SS8o5 zZi8Db92rr{pYtZf<j{8_b%vu)&A*4B)wpNMuIYg@=FHG{Pd-p7AAP2x9l&Q;w+8QQ z{xlzJG`yO}jlQeQ{af|jNpK$sU#)w-F@z1Jy2UqAG9LamXu}3buu|eLTt>Yb#lSKS z<8`Buyk2dVv0V2sKj%cN?}9g&ru=^85s2!5we1SzFINw(=dsk5YGieNx7hL~JP8C^ zh(1Kn?Rlw=ZdK8dwB8NE-GHH;w_sLNM@-dp@CMZz`$RQU!V3?c9aHf~fsh1Wt>9@9 zkUV1XVF{eh1rqUW|D!!MesTb;+8;HI2c9FCmAzNRR`ApU!Lyk6T@(3YMNT^vtBg$U zSQPN6@>sMxdtgqS--g<TGKaw(XeRgzA;XdjDa1a?2u*{I<}YMsjVXBH1@)}*+g#&x zIF`XBq+o9cP2od{@WoP=es2Ahi>cB!tHG1jX|^>zC2_nbb^Wa#D0!UMgm76`WHbo0 zoMfg$ob6B0bZFdT(9wtkeSA&Qm)uO+-Se#+x)u2GRQgM|*E3$RKdKs__7arbBf|z0 zjeb%izd$m}=@(??GAe>Fa}c)Lq3$213tI!;Td&C>%;(M1jj~)f88wx_-o<@ePAYO& zv4@O$nR-9?r?cBs0&mp2Tr&W?1`Sq%;ADJV7_$``LEntQ(l$2%{0)%^i-+2(vU&z_ zRaJ)qVoJ$vOFdfAdwuNet{-h^tw07H&v0(b&lAd|OT{|9&?BCa*=UW?SMD8v*s8Al zIZ{$-;_f)#@t~!3NPXMTNs(Iqtt~&uL|eF7Wxy1oQ{D%cN~qXW?t-26?Qm3h<06|^ zT@~_o51OfWXhI1ym$LRt^Bu6@`yfQs?!{+Ta~A9z;um_*|6zFctX-*)uc^E@Z->Ni zXAKcxNd_T4BvRhFiSPDRht8dpv#R?7Ze!k!hpdIDZa&hC7lAgtL#1CFYbdgAR^g^= zp@DWE30j&=X)Yz;rYbq|NYK`%_#Ojl-3s@Qncw3(3UKJqqR85-&HN9W*f0%dW^ii- z4ailg;6i6De0|c5%m2znLLq^?o8Kl95qlqi3M^^Cybg%(-X9yC13K0GZ?xGyR@b)r ziZ|B;y^mqSe}-6#C7%0N^<nr_qRK|T-O3&Muq7G@XBwJ~?Nb>tX`AsoHtT{j6rC_( zg=h1OKcK&)j9Ma4gTO;uLcFgYUw{2Rc^32zp{TF*2-OVXAKnu_Z_guOA`1Pd-HHfG zo0t3ls6hW7_v^?2aEIc#NlHeD-zmqQli*{Q^?_MnZ}`3b=z%yfF$#i8-;)uB`4k&v zE<FDv_R47sdUVQ^-7*;W>s@gUX)FZ14SZh#o+}er3C7!fHo#~%kr(i>MRB_`2BAt3 zt)Xj(1$W*q3(JhyfF?q9EB{NnkSTDB;Lag6vJE=GE4vD&+t62$-t))<<L;S=*&UIq z%!~VqnSZeK=2AL^5zPB49u^Oj3XQA3^{$tN<m$Nhu$%GlLx^6m$1%&-+GBw$>%bst z0UHb9>j-lBw7cmnaWLyAf3pb^Yst+JNi54-CbP*v<)AuU^U&XiB*y+TFH%hLi{J&y zBE}*Cg1-pn`%3H@)|iQ!LR>&=(h;#JU}}HB*FQu%r=rLf|F2-Kl`}8Ys>gSY>pLV0 zj~Apw@KX#O>e%sd?8rAr&E0CKqY}W=5tRAE4BB^-IQc%}tS7v;u=OluzLR08v=s6O zVSLtz>Mn-v^sdJX4kIJ1IKM^&W+;RW0H(peOaClVGB>GP--zc!_(gd>OOXl_m3*h} zPSon_UOnbnG#X~-0ha?c&;94F(shWun9@|w|0r@|VA-aFMTn7C*u)O=!*?E$5o?P; zJ298PtYm5DdN`R}6Mu+8OvOS*S$cMhExP{vSu0<jM#Ud){o}eKY`{>|*x+nf&MIDs z#}NVX7gOEOi)OB(<>Xwwu|{Y*cK-P&@S-!k)f;XLxc~Z*@AMX9cW)=gVw4M!r|tX% zLV_xR4}SnkQ;Oe2kOH6B*jPMqqgn3hO#&YCN7pi|cQIA<A_s!`M7~M%Q?Y?JJJx@9 zK%d(gGjs}%!U22S2<A6gr0AOWavxQvVJTo+0m+#4n2*|FiD2>>ZuPK;J$XdLV#3>G zt`<B*DdP3tLefH9Vi=om>_om>*MkRyG+aVleuNgsE`*2~Z-C8NCifZDIa@3OZhQ_v zEEjAnBnTkS5OjZ-yTEoBK}PJVArk>SeL;yEEMqz!yEy`#7QB@8iWej#VPB;)+<Hp0 zWF`s!_`T3-HoLjLlC~3e-zd`ZfHk+hG^+qieu9%fYG8RVyGt0_lmed=1Pz5hAjjAs z%sG(MOaw^~w+;Pee3HZ*VfEN}FEFpd<H2dpJnX~W((hkiRmM-@&g$?vTtp2&T7lyN z7F>9j&TUq?juvPOe8<~>oEcV`AQnv&lyA#$F>StAkD&06Hq~$<=va+{HrI#(gC7at z^o07weXm&tlZpi2U0ByxuG!}97`-H2n`8m3-C7#H<UD@FUlApo4xF4I%6t2MT$jW> zxic7<t+&U%s{kdO5O)B66kYhUJ|rkH)v@xA<r%93;(!WIkqyW0pNoyxh>G6G4<2XU z9-Id#_}68?8_sfrxyvUX+`SDcc~q<;vY=xi$w+d*$F%WO{37O9b8cI~-w{mqa5IoI z$hi3}y>9$^GkWsO(2X#O)8^4y9}diN2hth)P68Xhkmr62d7K1H236nuegD<o_-c-} zVX|dcF*rK)w=!140INm1(DFTw?eCxyFF$@YOT+3CGQUmst!QMSb+G%fZvz#gO+J4B z!bynMyL;gu*F>UE_{}+4_|R9qRWy%C05K(vW-40#A%BrBQ<&Rtj5SUHuUddwSZ{wG zxa`qUVjo^89R~XMPe<188p!6|{LU{;H9!ilaUgwHt=&rLbZ(>CA8Go$f^a+R7Ww9D z2|npfB(h>*Hp)(`rg|Bt!k55065n>XF9HzW*B3&WruE!)Au4Cz;lPLchyd4b;+7FH z<9|Ow{6MA~EV{C&pFI44^K;z!!39*hchj811I)SgUF4<jWr&{@*LMG_wRH34%~g&5 zXOZ5~?6zH+=KQfRvFppfzt&hIT0MZBbjGR#KtM=Xj04|53-<yt7I&=ntjLEF0_xU9 zx*2mhqtI%4UjxHIWd$*cy6f_z?%=n2<L)`cdl_wpNE%zIZ9Eara2x*6!GVBm5UlUH zf57407tbPAuF6pmg+e9O{LTClBd?|s6<F+-7D^EUvDB&(m$&et=8Y3nUJ^R2a zbdJ?BSI2d8Ib-E{0rQ?bAGVZK(%L?T&tp)yLZ)!CN*b#JMNE)(_e;$9*1wV(CWj~- z7TMh4(?vZ-7azh8w1Ya>3W5&w{tQD|i?1=jPHlx{=Y)U}RQ)&Pz-N?nm`~a6`=o{A z4NCcWY&RZd^K-Kkm;3sC6l5FB3#Ype+bYSW{^{Y4OC(UC!@D1-N+P8N%?*8Fn%w*N z2${XgZ7yNSz)OFaZxz67f%sJje_TROFwK1;{bSxorx2@6E7r!WTve`O<@Yidr%HRl z)_P~uJ}Kd_crcNR^J`w@sqhz5{NKZdt21A(IGi&GH^5;dJ>@V@>X?i9y*sHNv7x_B zFwqc?8~#506j6eCg((QS$~Eq8wIU<r?ua+cyA5zjL0%c@Pr8z8U9T!DwVgTAZ0G@B zr?@dhm+*mHwgV=h1Kax~g7@A+3vXvZ!==c!BT00oyznOm-*W8%CQ&)S&SE-R(!#{> zuQ6|zTG(u?qYbBS7H6q>S@L@z5t&#fPc(w{BWPQtdp<><19|q<PG*(s_OqpQ5v0Z~ zXzYZ(Vpcz<u&{$H6qhAb==t8^0Plb(byl9Rzb&h(u@PV0zqh*n516HwHz69%zwT?7 z$L><;;Ur*KaV5Dki5%oI4bN6O+%TWd<rO<^e%`(a-huk_<}8zf`9nbPjqL=wH@xey z26MdGou`M``i$a0My}()t9V~?yP=e`Q!mX$GbKRm*4>!XC&e#c@V!Q7`tuf#T%!}e z@1TrgfV)}b+BO%xf@LZ_n#|>^BbcYbKYI|JP*7H@iu|KZRvuz0M3;}_BXKOkoWhqO z6gPsG#}}i*xINrxJq}R75~|!0h-~_E7nuli-W;AEDY$|-a5w48Qxw9P$Vf>oe}+Pw zRB?~G#yavUb~TZQQycKa3qB%>z)l_{J|xSMffSaeuj)hM6NUw!X@Y;W9kRmkoZN0r zvt{{n%Tk>EEBSVHtE+@XHn@^c>*A9^Li|wvV%f=mI!Jb^Ly|F(+mqkRN1mq{`WZBN zRcd@PYl+!KDU4DY#W!b)ob7W(QzPO%CWIrEmD%JLi8|3q&$Xr`j9Rq9jpKPJALS<+ zFtNy=C!xX`-b>0c5n+cQVUcp7;#Eb6_v4<Hu;$i-^v9&>(-%vlp~4Cdk-|u1^SRC8 z8|SXg2dy=acDu|WQMKG7Ff~bjVJ80qGgibB9`Z}>s)(@AhKg(+KesG=nNfCuu;u$# z#JyUTo4EW7Bh*89182_Dkto3+6a-^z>$RDbp0Rn^GPHAX7Z{`b;_v~tpsuY`Qet~` zmLImyWW>5j>yO}k+IMB;)Z){}3SnouGh8D?4L0UJe$~0uX0|EI`buDa#~t^25gl%B zW3qp*8SiJjfhs-lbtBX0=?M2^QhiIa`5DCRH%JwmtJ?jM`1hF@b4C;0;f|o+-zla? z3G)cu))VioeS>7wAQA2n9yxO02kgyP@x<QuM~-T#*f&9qGtb(u8@_NHn$mJ<YKoMl z(i%4I3J$N&r$miKHv&$@p7h2YkPu={hHugxq|(j+@UX;2%4LlM`@ja=k9n`&zVQir zV?^R=<fAl4&D>@6CAghfSXZ7$wmLQ}Zj1JvW@*zFRDfCjJfU&XH7+`)u0E<W)2cmg zsZOqqAsV@9)53b4lwltL%16$&6Wo8MKbY?W4(}Nb@nWU}dq){@EEUEcwut^~e!&X$ zcKRUrzGVh;anuK#<Enr4ETUH2PCzf*U4=)deH%5o4elcv{$(1py<<Cl7c{aQ5}ip8 zufl#W8h*t-SI`M8E-YX^G1<P(asxlq^Lp%KRr`+?EV?KtcjVa^s8v<x%IxbQFe(eT zbuka42)^aYoCK>!h_d;6g3)wGmxFeGv?JT6pv@Mcur(LnuO0rrF2r0)^V$(IkiQ1r z4(O^2?zYpsOTg{6s1TS(qB4AV+=*3`le4|Z+0?t0CxF3~>k`h9@peD?C%@Fsp7E3W znKj{Ljc^Py8?IfulmEtv<UGzT<Co*>t_RvZ;Dt6^ry~=j$r*^>m$(Jk1Y6c3Go9=6 zD>>h_$9poKq0YFz-wWn(2^>iJ%7v`rsm6Q>ZU(tsm+LbdOj9QxIL7j43Pn0WYWOsF zeg?t_<g+{4nc~p$FAXJ>oAY7CK_HpG>;(5ECvH(aEW|AhdnF1$38k6xINaJ@+NDh- zn1g4mIk8$${`)f`3fe?iWv-Z_bd<^bE~m>KgpY{_uM#ly;(@va73pnN(IOiGvrU_x zp|bwmDwC#+i&9Z9?u}&y@A*wqL}*{60&a)%BH~jHRZNwIp?{y9Es$5BVu<GodLuHl zs!uYF4-F(;Vq0Em8HJvLZVTKoLS{DQHEgq6MNpr5ICGp*tipKk*nb5A^4ePXZiKN( zu|*ak;vI<Z7X!GDz&>+Ys97q@cpJpGvVbXyt<c_j@5(iDRS3^4oZ)*8Dg&w%u-e_| zT_+<6q;}|^b5IUsw08kj-%|f}=c4vpwcwl1Tx6ipGDkP(#?wM~uuO^HbdWn7Y=2q| zZ>Kk$UP6Z${El3(gGh09-9f61(hcicI=wyQ)GY0o86`7AP`){<x%pd}+CtC$IPOI& z99He`p`Or@o0P}*MW<)U+&QbhK)$LCt?YjD|DM7$^q4Dn0#S}j2fCH?w{v#+;_7rr zcY8Ia>gmcKjq3YvC2%V|<DQH2{%=^}5c#sV|1=yV1{*?bosr;P0?D`sG<-<h!e>DQ zOZVV^HCbrt_uIWa$rmMX{oHVV_ncpIo|7`%FN+JS_+xrSz;<w;AmoZmD&If6y$Eq{ zDLD$(>C3>9wu;<n#)>*<1H^oTT%CWDC1=aJYwHh}LKVl^2$bL+9iPDTMf^ehLIS#_ z^91Yx|GFuk`9qG%@>~F~Vwt-?28$6v3uT&mk3WTY0T~W*RQSWNbEp~>^fN{^azKV& z46?PKw}7Eh|3Zr&!+>&cK6_p-dETw3i~v~$!nf}NYm2b)wHX%ISc{TanA}e{us=Uy z5;RMy^qVD{u7-Q{%<(UYLi2=$uA$lDKC_9qOHN_1HP24hB`Ks<P?9=cJ3_TAK_J?E z<BG+-@3iV)?|8c;+Tqq*R~+Y)yM1jO<>vNf_LkOb!(;99+K=VV0owLnI_Q0J#11nZ z**0tqc|F~>X+?24+jsO;C((Y@LSP2l7GK<weZ~&&FpX%Ve#R_<y0taVxfyQGTji2j zrfnv28L_G(5+=!UJo}u+ovm~oMDq@ov#9`QjRN5e^ybC8<}&3^d+IfFO{coi$Nk%` z!IY%JXTmOZJJkxGus12Qa|*Njr*rK--DQABlWyK#Rs4^X-t%%Ij2!!L@^!RH+v&>q zUbDyrpS>p4s@hWV$uc6}OalY<VLWo0uLf<!U|W6(>mTJRpN(b)<*OW3J8@h>(aSMF z=d!HUl>rW^D4fvVF$4JRX_4pRv0BmFyW0H6!>_CrDJi&+A#G!8HJ6tJ1gcVFAbivP zam8HEbkjsdO@jWsiPp#S{Q`E?ee{t_z;`9YJyuvFWz=FVGkWf;_vsF(Ox<jof`sj% zB;qCTsT~owy_sD0_XaZ=K!M|PtsncXwL;Gna+TWHn%#<sR|mD!Zh(VG3dSLaK8V4m zQ(u!K{|Y~`*!c?9hM&*C{#ruzFiF3x=t4;E;QqR>{$@(K%721?&m}2B?;Bd-g?TjW zoMoY`Hg`>yYay7CE*MTgaM^Pr;Qo#%tdOz+_Tp^1L+khHM>d~QO0<VU9>l1OD6dky z-{xx<C~(a8p@AVe(eHifdQYj5<i<`n_LG<2x+YmfqI$u_3!1MEpm*LmlPr1lDS8N8 zHn-}~f4v1MJ8vUS%3YExvalFIL0_8FCqg1#366hp7eRj80oJcQLU;}R`_YTz7`uyL zr>df6Uo=X~!`EQ?&`mwkjQiNzUyE&VRWXLuYux!G3d~pt_iuf~E8rp%hoB+E5L^Q! z^p_Pi_o)oJ7lo?X`yd<5d`MMoDRlqwyL>y4o9#ph6);!|I-e2zWdD^#b};`B*xj@l z5JmxxH?5ED_9Q9@<|Qy@?RkCmBFgH|bEfF)u5f?>&ihA=ogkdst~1&<hK{}%f;+px zeNFkt|BJ#Or#&>TnYP)$GQ)e>#ET(x@F#>VYK0p)ZH@RE$ym@;!y`VU0Jr(s$u#m5 zb%{@|o93V%g%_6Wuw}R{dqjG;8#pQ&x`<2Gh%5A0j(jK>=&COP30Ad9lkaal?H-lG zeWyc;u<eWKZQmMNG5wbqB4DU=^fR?6aCp4Ig8Ls2uN49rTg~^g2V(NRkC5K|$NiQF z?g6xn%QyL7yPLMEQei{ydI}22aBK}sWH!(y<v~y-1XOUW)|WrB3r_^dz@XSe_X0C= z*sZ%Q%Gf&WnKTW^052w}@V)Ck!ivCT!jHij2f<Qn<ibK&0u<ipr|eRuxcU(%uk-UE zf;l{kXP;2gd59YVo@6mEriXK9Mi&6!P@=KU%UPX3b3TR5#I@nxZwAILF(tBA4<f8% z+fKYg84!V;Kl<i-*#6uS!K~%}U*UiGeq|IeENcTR48~9vDTx)_Q_PpVdc;xv6_uNd z#@)7pOduG3sCN5INf~bFsx&K)uZLJcSPM24p0XC?z&J2pXNNX0se@?k3fkfs(<6`9 zIIbG3hqST5Z34yB-4L%VNRH<hfLW_dCrbYa8L*fbuDtzx1^q)3SK|VHW^A?yAQaFI z;9GN0Rss*j%qkOXQ04KAos!*i`T}c5Q0D_+z-~%JAB*Ung{a`AaLH6b9P1RgT<~-i zt$QMP1jPoYV|Re*o#8%cFz#CbGq=$HHaL}GcYDVM9`9ZJQHQZ3(R-&Cgnf?i%iw<G zl<+EPWG>n%I+?R5&Bq9yTIIi)L$)t;b&dKkWYEcfL=1ho`~G`Y>h{tGTGiWMWv+S+ zC?ZsimW+eVNTUuw;=WOTwDM+BwnGx&6L+Miw_?0dVAq%grjT)$J}*{kd;{xy&B<dZ ze8#Hf;Vo*x>6}fl>;6k2KK?K@!tl*3kMJ3YWOp$H_V6ssJp8cM{NBHXP|pe54$Y05 z=0{EeO{%3_K7!Egj+6dSG1-jQTeCX%^hfsZsSHk|N7}&Y!;<xHMm2tKP1Cg~pi%Eu z0Rv2*pG)C)#vla@{IJ#!9sGOwyV>~FFV6nkp|cst`!Sp^0KY@IJ#i53%H1+g&Xtbs znO+5?r~HQ;=0}|{y8)G*Zwf^XeXXY=HRsA&`oB5N<(ehri5Z5RR@qywBjTMdZ8-N0 zZ$#{w*R;`6_~w6NC%=Rrl_YTns!QFuZ=e7tv5xJN&{Bh$ypB0S)Bi`hlnm&}SXxzB zoA7UXGS#%~4Y*!n>+jQSe3gGzfxu5}Y&Fqti#9&a0fUZmnw1e*w^2T?X?c6O*+wj8 z<7-$rzO#~dU(A@vDsFlI#Z^EvHNRG+;#U|61<f|wdAB)riDt-uO2q<dm<*xxBMP{) z6$_B&ENn!_w-5Eq#>)?0Ev4^UX8L@n&#>gvZt+UUclkDVc;w?B?C~fOnG;Qs-gNi3 zg>)n|%<cwR#n#|~Vs9qUgUNcWNymu*Nr5Ix(7#yb9~Ca_7{hR%*%$z&C;%=CZJ`l= z7BIVFLF)<5ER0n71q8_PKeDt-h9>r{Po4f_b6&}urOPun9vVP>f|x(AMLFl#kKj)d zsy+)^QrVo*cWR%+N07<9l=N$(h%V^4%pKHr(yE)tC}Y<Jzypo_s1r~wC==`&<1yk4 zGv_n_;F19=+?4ZNx>Ks=C;?aY>K<LhOQ*5de@+(co>Q_~who?m5KI$MxRH6w;c>*_ z4%Tt`{Guy*6>hupXF>{88ncbPmkGxGb9}}iSDpLTi_(@2r?a?uA1nadGOVsbMEE;; zwkfx7f>r6=8&~jf1=3r_-&WWI_*a5dXJ9J@#RvkoKKL<$8Lh%VahE=f;`FHQ-EVEz z1q<lHHLJtVIlBpZ>P0N~uJ31X35%;V-Hq~H5sk7WK^7s`?CYa^IyK4IA>dI~8j7d# z26){EX3f}-1&>k5T`SyXxFZln%Zqvy15IsJIpJu-ZOWusuJ>_5Hn^w0^G3_pVB9jq zEDlWUBm}>OzewXggF^R76IUzn>0%9|dWREvNU-C=DY)EOX3fRp?j=Qt9*Q^iN)YVe zZ6O#h$7mBvVj7ym2UyJ&`>Xk^N)edZ9NUTufAEw02MIiTJb}Mc{<{8ra3Dnp10yDg zWS?I0R`DO{VvTA%y2<>SZFhMWm{UQSM{%o*JV&9eU2GD2AN~oSHpD<Pkh{9LB4m8I zG1Ee3AauGo+pcqTd*K2IyhRc!_hERxk`?IRbP_18iGu;-{=83x3Fma0M-bu9omQ%u zR06lyj^@3J2h?_}TuS?fz4C+uIr6W!a0Y+n2H{>8fAILc$iann_*(?8__+>clu#}B zjnn#zy-ZoeYldFgEtJ={_+3=vSN8QusV@q--l%(b;4L@1ywCX%?kM|n6;A8;Vgd{9 zcZNMg$ol`~{{`cKdT~4y5qOonD+tVkuy$7zf+&A1KVt=bbsWp5`$&UvY4iuM8#D!A zWy!A8GA(JNp9kKCu0Z$`!&<vFVBt2uKtVKqw_!}c|7kB1XnVVFtOm}f6pkkHy60yj zLpo4wcQO1jbCqqvUE|hQl$OP5{|Ro}M6IA%69Q?lv?^=TZY*zwLa*jBxk~aY?-4Xd zSO=Ic(Z`YwUjt7zqa$9r&Cl|o=fWsxnGQE1v?iSU(Hjj$o!aDKSmEG^gS*0j<Gu#r zXof@<oA$$&mX8@)%jN4LB@syiI4_P;y9z)$_8))5AhV72|FZsqHHO(!YrB=Zw7O%L z2gma*ur4I3i~^bUd|f$)_rBNE45wR8X2n}GTUmE<lU39<(@q>Bz)4m6d&;9jq%0g( zZUd4H44phCx7~amK0{UJRvLiJ3vcU0r!IKZo}{M36~lZMMXsWkHpb^2R~*YG&5mk@ z?*pbUIerGw#&=h=y}rfF*}z}5pByA+#?FWToO2Cs)%TK9i+J2ht>?HvuVS*1F_z!R zM<ieFg!{ZU95OF8@N{sKz7(>@z{?`tW&}2Ia%I~fbxU0{o7cT3Kk?x)taaP12Ak25 zK_%@i(1R`EDC8jQ+ym%;FlH8pM`cfw0f;Tge?{P~Mu&{s2UqS)yD!1bPpVplOw|O- zWgg9BELlIDrR%M{cmM4Y>q55d8dkO({6*9}cd*<6_pkZ6!2=KGX4yM~DXkw7CdSQP zym~j%=5G`gc?6rzX*vvP_9_?E=1C2*zmjhl<+W+KZ~^%7D(C7C{o+^qSl@@dE|492 zqk$P%owG6$w$Ojt{YTml#2^*8M9tXhH$))od}uMe_@mcm4)M~EuaBC=9?XMI6tLn+ zD&~HRi0%U4DDKKhJ!b#$JQm~Fha>SS0h_CDMFon8s#!~J!5uE?c27@mzKlGmZ}CUl zMLahX%wlKfU;DlQkyQYf)RTZSQY;)OaEm&o^#IeiJsf`~4H|<){l69fs9vm7f`1Ck zG9hyn5W5$A$cT^}`T3GK8iiFZdPwt&JD_MD`KsVNC;K(6wYeMUHWW^EH`V_iimp76 z$;S^@NJT~$a;#FR$nlk%y_F(KDwX6IA&H_S*LaIc<(Q))*OE#H&3)S(G51LB7&hjN z&CJgC{q6VX{@5Se-hGbec|OmBi^aJdkYu6-+}nIC_%S1Pa0JPV$rc1Bu95V(1>5g> z!|ldh$g9)e1}p_AA6<N<h`ALsNiFG8p7{{wwKoX-U6ev4?KUO{^NY?ro^|nlzM<3i z6!d%gsfuC8H$d=HN&g?u{s-@aBOf<X4-BFu%7C!dS5iPXnx7eH`xblhS6+JY#S=b9 z!${X3|0E75AZv}F8N}mb2AS78ARE<lMY-3y_dYs4z>oya<~&geW)f-ghe=?T(rcvB zYT(}znYwZEl=?}DBo3|%w^k9c8av3<kh#ebWtX<~dn~yx7qx`K8u!`JSIgBv=z)Gf zCSrgmH8JAM=s<;DfUFh}D;YG3)4p03?P*%2&p15`WCLZBW^-%)&_s`U6+~_$%KRg( z<J2(YypnQXcx=+plG~RI7^mdn^)taT#Y~WT>ESq2Qe`-YZ$dZf2GjYRQLesS#+o6T ze@ZlEHjr^#hWX2>SLP4CK>iU4+E5w%Y<h@_j6674I@HG(Xzz}^Gvj}!`3fK4|Kbyu zh7Lo4XQ_f1WMog?zKEagT%2*iMP$%lb(s#Y7+^5^scXPPLYIY)b8S!bke9kN=5Gc^ z8PALE-?+uT04Vyld5v!H8h4s$ap5O1R2KjBtjuyv45b_QvCoJSN2`3Cr99A}{goRL zzouGK0R97B8sjeR1VG7j%(u?(z%?~c-)mX96R&FoHFWSualU|?cVvO+m4|S01sX&= zju6e})L@3q<0gE_9%9Rd+fXOB5S#U`@j)QGUd9B~BUR4v0wc}t+>QK6jDRN>Zm#kr z>zDGRPTpaga@#gW9=|o_q33TJpaIkWP^6brK@QN)i>26PRI9_?Vk$w0wDDymE8#VX z@O^M7)CJk=&hPytOw}<mSpuA>7VJ#&<nluLIxeIMu}x(i=L*IzU6EX2e2z0+qa*+A z3K<7?2HqSXi_9u+@QJIEPDRSxn#14S7I8HqPz1*bf={gDxK*Sbc?*pvmy*$+*q@Dd z8m@s|-pUC;T}aQoKzklb`9%!#ERG(?eDX(&>kTzx@`V65D=oQ(w9G&3f~~iWY>Dg= za0S-)h7jHJhLO;#RaeN-Fd(wNO@C&b>rGp(Za>2Qk&1JK*QXr10tMc1*8&_VC=r)j zegLiOU$3^ShK=0*>>;wnF)t~xL;(I%w~?;XPh2JrgVjeFYuVoawTVK21MZ*D4!=S= z0$jS8VP6!GJ>ATmE<QWXb-wjQR@uNIL>;JK8toa%u~bC{Dyu|{?6!M^T`RHyic|)7 z^*37o#|Xr1@;7?qfJ&lLv$eu_1@EhUSJSw+AL})f&s!vz4LD(Lqs1!<i=}2-e54K! zOdJil8yBd<a_}(PQU7b7U50YfQiRa~EIFHhW9s%rl3m>=w+jLPf>=F)vbI%TTh>0j zF9KEn7?^x9zK<mERm?-6ad`v)#{yxTH9SqMHr+$^aNUc36C>^OQi@K0t54cBCk1@h z%?cbnSGY&1{y^D)e>eWxkmSQC1Sv_a{f9Dl49U!VIQqnU7TA3$aYStCWx{QAt+nj% z(VQ)#`1p_vj<Kb8p7aa5_|!_t2lw3Ss~^y4>4<|TtK<SxPDMmps=MkN?1KBZdyn1W zMgNV9k;*DG`%B#vg*K2goXKR>%~TIPY^1wOUlye{X$XI;ZXiHB4Qq`%ejx#;;{I#^ zBROr7$M+RCwZPxjZSl9c{g-D>XrX47byx9C<YwE*%Kg6(0_Rc=HYV&>*px%9ne30_ zXu}?Hdxd_h@`b#wzw%&tz=Jtx=$J_?q*>ex-S>29p_{UB8j8k+;RV*V+y`QIDq|f8 z$}T5v6aIGO{cLq2D(;FYa6-1*@L(1Iy=+Ewe<MO_?&!*E+RO^?VPk(*qpt+V2!q4j zNCpIryaRYM&dlz>dAJF=u#u&ti-|e5Y9IX2vr1pSBHwHsKb5S#V{I{pr}L|=W3#Ke zYCyowbGdA@xQW}((q5%SO!-Iph)Q!Gbm{EU1nIBg$#!)6V}vy$yzZCXBS9&yh48T` zrizivSkHa$EsXHnA`dOXWl*Du;V|zMYR#K`We4+G=h_u#b22_*#$kHWi4QXE4KZyA z9`8mP>@H5O1G1LK-)u8}LKbshte3zU)3<LsvARAkSA3t{!azo<z=9DDjoz>up*4{v z_;pf>(oI~3Y1l3g!5?EmT-zXJ;EMT;Hrn!D=}5@3D(Y(d4^<Jb_<m}U7lX?b=%kAl z>yCe}!dDS9WJY`JJApBCo4sJ2>HYaObUNIeK^2mCV2~@kQnR5B3KmhNJb#AA!7JVF zsSEh(BtU?j0oHNd#9+}BrWI)rKT<LPcSFQ>5yM-Hsq3vqF98XURU3PaUSI@1CJR`V zs!XORF}*G9=PJIXvK<=50)>uXx6`*W;wyD%ktotl5QBvGBGGWE>Z+iLn;=;Ddy|et zgAbu);l*0Fq2-{znPhNfr)j+4eK_1<nUTw+KTVqvxmq>%4v}z$9B+*WP%gV0_xm+M zX?{z~y87boEYRp+1m=V{M|eDpiy0h5;y(*&XZhF)Ja&QjY|4I-^9$jybHEh?@FTc` z5^q<{4I>kBS1Idgruy&qKqN*hHEW&tki+Y!h8vIzoEhKdcKg5G6h!8?_ZWt~<3gjI z*-*br&8owbpN8BF^dRuF!4Yn=+x`ul_ldlF$oLs1x`$54hra>}Kz$5u6|m(;Ut4G3 z14DNwVIFPoTtgG;MY>TB*e;Sey==95DRGVN8vYXyKqactxV5}4-XP+@&s7rXFPsAQ z<3tQ)H1#+*^An^aBNKA2!9}q4pvdPq|M@x)LO*QMO{9S_NWx0TFOu4!ecpaPiz4&o z7~MMfWq1}?24Azr8xK-4;T0->nPw;Kh^}rdNth97YG(NU!(BWP6QG+f%)`7iT>u@y z$6A76P&6($z&pV~U>y#G$!l~;o5kRNgKz#&1^EaG2URH7DgyRayZe)e=aW}fjipTK z%rg+@dQAo_LZ_n1kPXy2!zEEx1ScagNjQ-knkmeyKBEGg94&nIQ-Z+>oXHXx=S{6Y z611`FnDWE+T)0$(!Uv7dtm4;k37{7|$?Y(pQ`Xywcw#CEHxR{kU6Y3{LwRf<Gyr1w zN4!MCIL=mUl9Ij$y7ys%(0Tn~KnXZ&+#-1I?7>#m?)DY5#CN}FagVl%JeSxK@vC+) zE;GAkgX?<w*YA@o*9--^nj6n2+HXC#D)kVPHRKfs8(UgsFlTK7;}M4$n`_qX=7I&8 zO>)`B3FKK38Y1R+Z0mi`D_V-t`i|G_5GF6i9(8@jF0i_{)<~H29W3}(?zc^6tIkXy ziqvZt9{>KK-36*~;(EgKL#w8%>pp#v3C+}+?c*Vid4^$QY5{-WWfJJni~WI$vPUWs ztD$T^&Q9eC)S%cbk>M?J*|8@wr<-tatXbkr%cadH)}pR9n0?)Upkm_0sjP1~wR2}N zNp=}2ekElIhOV5i-E}Vxt$Y}dlRPn^m4V7%&2SFF9<^|NT*h6sedxF0hvM(eaZdNL zC<o6xPG0}T%vlj^(~uwxTK6Q#{aIKMQ%p4t;$5<EB5rE7O+AtM%eal--1T}Uvs2iG zoD*K!_32Sq;PTGe`vJmJm&>6K-CJ>8pG8@5Q&%>&Ra}VhIN0`scfQVZD)pX=(Y_-W zgl*4x{jRsZb9&@eO>gbrOffp&i6`)*nqIuX0WrNrLq$56b5YC^G7$WJkpwL?y}6o@ z6thV?D7q^?+n-HSnvb+k<B<{8^9_d{WT2t0Z@B<>@bgY7?qSz5@@?q%AAHgIhAV9( zTWD(i%GM6aZByqUSG~+*{-U@)H1gb#Y-5LX<kS}6p=)Sb`w9IE(4VjOw~5~qe1nYk zNH`0c-Z}=-wG|B|&1y%vpvWd<>%>MDz5P{PRCpa@-I%d<dW}BwUa5Z(ShcyXKQUN# z)lTMWRnEVBeBi*=#pWB}Ko9b_2qK0&GX4PbCzz=T=Iu9+$u*z;OBd2Z5`E$KNXp%n z)t;ofCW}DWcu)N9+W#hqOj{g}@9*6{zNT$Rf~cHmD{YL^m_H1J`<MGVC1=sQ`exdG zelNc1B)g^cQBtDc%YWM~3isC=_|<Dq*vJu9vV_}e|NNM3^mn6hTfW%#CVRa*@A-7c zshgec`QPo|cKNVTBzT>~@rXAbbPiwkJKufq_F~=jGjR&GadK+u#skiQRp@E>jr9PL z<{=BJ$Z!=Txu-1*uh0-T2|FAiL_$b?tk}=#GlY>S1R!bsyyh)p$(HGePXj-#fM1Kw zzsB%zj~CEPF>23CA@Bo3>s%w1rwIL%uy(p|v1(#2K)pxVVHaQ)Y`~)y%pZj1mvCJ5 zH$Jeo6SxjHa`YS+JAP*^;n%dEhQC|_JK=ap1O6e3B&NiUa0St%)NeqEHqV2Kf=Y9M zfMi^k78kl(wK?9rkWW#tnec_F3%EGIcik4k7Nmi#CE7pUFe)&NljGw8k0r+6ACW;Y z4oVf;nRsb_dMm`PB}EJ|`>{pk_i4UyweSP?J;LUlZTX~L3Ll*TYJO#?ME!Dwe`qh7 zloMC1$Dmogmc7vTw~({KZIGRQ(McGOTG=llm{r{4fIRE#yhjmp^YOvBH2o+@(Scan zb)<o0keL7dJFby|twh}z$C$Coz<n(-r)P>?MGZgt#FF-VdysJDB?c;7e=hoz=vn4> zcd)=ZvNTO*j1ByFoqrfdsJ6330gu0m5ts0U3)}-<0_)K=u-!q)ND*WyBOl|sfsoUz zb;+3QrgV7k0tes)et8eY)FtA$+A#g#HYDbI2g$OPe&LCqGKuFDRJU~xH_~~J(fKiG zv1*p=OcN8od;=<A%i~&+9w<+jWPk7&cf!rI8weB_ve9i;yGQ?hB08TbEGF{&&70w5 zOhAnJnIn!YNmG%R7#oRKO7`aNV6HS6!6Qeea6+{63+Q*l0=Y1g^e)Il;j+PHqVc+& zu(@UwV9o`v6GvG%=Gk?}B_!7c&Y)5Cha8qYgbkeYZ1*;jdXbV*IS@awup5qr(ps2` zVDC?ss4cmbq=Qoxbl96`5poJ;+nNVBasN(#Q(eHfpt<qP5{L?_(xrHT!ltl!R6Li= zxyZdqOe2l1YDd&vh7w>W!z~rOg<AKtbgen?GNEOZO7sQ=pef9zS;4JV@R9(|XH$CN zPFNu|OX%${+EV-jWk9Hmi{um82bMjG*Y84VxHUWcQDOiO@=(S&QJ-}WD2?f}|GND$ z`DGLay@mO=wd0YGOQ1%Q-6B4@L(=^qmUw%!cg3fTHcK<kn%aj4#PcQ!2`kmU+wSKr zOn0kSCcQP7s80^&l-EwzO-n@5o*7gHRM32i1uMr6dONwMD(rH-ae;7bvEjEW+o}Ai z<g%tea{{z(ITXSfJ0|(7`&0Xu-2Bvc2}#M4K+sM5>rUyh^Bo-~)HjDxZ|JU$#yFYS zj1{(viKXphb-vH2Eq$Sc$c#z?2Hp#ls>Ntl%M>T57pK|b4`-bXK7O|twd0n_)7RH5 zwT^N%r6#0e#|L~&@Qu$6L|IKMjY>OkH5;FyjPE_aF(`HW?QO$vr_Doh|KoUHo(s`A z@=iT;;~wg6c%QsZ?LKQT`qqtbF&Rbt@orU3fm_mJ$@I^e(P}p_RcVK1Tk+i`l_f88 z&A9qXUmgY+e}6*9QzykWN0d(tA6!(PmpjdRXORk+Ywq>>cY+zg*kH~K(q*1Jb!yWa zO$f88O?RnGwPqjQ9<bckrnL3K8G4t+Lrl-w;b!-nwg*n}5)WmaS$M7W=L=@P3tG`> z=@2@>pUc}dgia|gpURE3HLyhX9whNJkQs#em19ETw;e7sckY^=BN&*w&kYWT=0!h3 zpMXkl4`JQ3u-O4muAprenN>q7N+nwCKXkcPZ+lfXQc^gNs6B4Mytj}8NV=MM3g@C8 z&1h|J(c?7@#`w-H;}4`;w%?I^iQzv<JA?k@?)#{Sa>J<SH@fn#c~n;-d1UHe4srXz z3*6Hzy2d;<2_M~rM@_D90zz#T;<P{g>JQF&&~U_w@Xp1k@@ueIck?IC>Xjk?(0Zdg z60DrlQNp*Lv{a#a_D2$ZdEx!(S*$Wef}}q2r{7LsXQjy4Eg{dJ{Uq2=y>;7yu!dZ; z^){5%GEk{~0lkP__HEf=^R2U)lLj*3E)Fr-b$wx9cme8(70{Bi#WZsUIfIO(XK&9| zuKqAb)!xg;x%C95&B!<la5XC=l?@8Mv&*JW+~N=(@-0q~B)JvnvRXeK@JE$bL*Ddt zUVJ;#f-FF{(YrO*--nuQlAri5q`dDeR~>q@`QHlBTzFhmmW1y??Ox)d_T2}G&|dGE zL&e-^x(2O8>zkb;oKLJVT6uP}vgftDN8XOMh3^pxN^y(|bQ|mk&S~G0_4=g?-|weT zFAH)sxNLy&Frd(6Lf?_e*dZDNTZlCBS_NwzLs5YvxT-e%i)9@%o$!5li8FfJ3!GW` zgQmV&BeCW^qUxh-uI5qB8^*&n@j0^Qd-~v@yt&7Mt<J?zDE<w^_URgv+(z3EEWj&Z zhKs)iN`Cz>_X3dkdH3j12q6s{uYwV~-%Di5-4Ze&HRnnaT$#AUqpDv_yhHgV#n>;o z(FUcsm7DLLM3%fe1b>c_LIlZQS8Zl}XH#0&d1Qh2(t(igs3NOy)H!H&a$@=4c{et2 z%KX#Bhmvu#`_OAsK9NJ{5m1Yisom!WG+9T4&zG~VK6V$NOSHc3R;C3$^$C{q?Xyn2 zj=;nCvlbNH?ZR8+CU4HEQ(%ToiKFrfzkoj#i6OfrgLtnn@i}wP;bi(xYw+;usQ-s( z-dFQyh!eeCVX^7|vB`qm26kRX<DmE@e&VuQK5tei(vu^(|8yUheX+0;oUX+{m%vAb zmx$L$$O6+Si6)gl4juAcZ?JbbxAYhdkeY&~QX6#h$r&}+qM<d_<wM2wD~)_NE)v46 z;wqzVoBTJkjgYb$^J1utiiYTQ=?wXI^w%{0<*Ty@f9wyIyhpbtN}h04i_1bQ<N{;x zU;p5VztE;&?wee&8;sobl173{pd8}he{1Heh}==g7K&)dG@#<UM^Wq_zd^f503HiJ z1bYZRYq+{`nZ(u#ydE@U?URO%XdE~MV23YVyQ#}+y1lZ<<U`)ZLrH;qRyY041ky3v zSFFLU6&Q~FEbj-lRkDGP*rLQOBCe%widzzD0X)hr5c}#(0nO(6AkK<)hJXiXnXN<z z2uq%F=>$=g#lo)W(1*o<M^_k)`|`rj>x+sz-Ts;%Zy>yX!jM<UPy>BMmMcm4AT8!( zm^@tb35bS2w|Z;(LTVbT$nk*;MxJI}1XSVHdk)kbS)*&xR`EY!&KJoAfJ!#=7VPI; zVdYt&-$7-NPGosd3z3t1$kqw&5G?c7xxsV>wzfbJFC^1IM;_SC4gMi4>s~qTj02u6 za)W&Y3xekb!*GQ8LGXv7FQ0EA$(4UxPyR&M>9t~(=QGH4*m+}>cRn@FgG>wS_C`$` z|47g)^?cc4xT{e0PqkD2a(1sG|6J0g!=F=*N~$ke{vIt?4PmYzA|_}#66#D*;|Ue@ zvK54jzsAT3E~j_2VtU^mv$2eb(J6Zh+uw<j>r>eJa&N)hEk?=9*<)w-#EBVR*nRI? zpi#H@a#`^0H%&TR#gxsm32mlhuEXb=Ybu()51P9EDvb<)0^uhQ%pR!Rs56p%XsD+> zBezn2I5JvI%*@q{uwa}0G!N;=1;9_%(iq?Kj0}}ay25J@MvkAnv@y)~b8YIc536ZM zl=jt1Pi@cMS=1mkV=#HLZ)bVhv!ha>Q`eq$R_@Q<60e#WrdSZ%`b5hAz^1a?JU`vA zSie=n!jO9%&ll`Alm2~;N6Tl6<JL&e6@qzQmn{=QeM{6HJZ*notuLpIj=SQZ7ko~3 zRz=>28kJ${I-&p7*l6puAT6!7$tDK^so5}?G~cryMHuSegxDNHsMjO#_GJ^&E<0(N z?8NAx*ZPCs_c%=cHcpw32SQw2>PmmEAfHMyb`hd~9zr^OFp%G)ENclCZ8Wn&JnVhi z-TE4X4zP9<&DScmSBHbo9zdHl-=0mlm`pB_%LPJGSy)WeNy4f_#3wY1VzOi9h_FCE zuC%>?B@ey==I{`&Cr|2>r1T$|s3kOS)YTT08IzxmHDXsBI7h$bRQuCahHoRV2HTM2 zmL|AGeGnOOX5!z|Y(spkESmH6m{ZqTTeBqc$p^Y$?4?u&(&C>W30-oV%?p5pecZuf z;^x!S`@sooP+-T?i==My$tA9Qe(PErxG3kp_*CVM2jEn->EZzL{lRI@R^aQ}cLAa> z0;y6+q^(*5!S^OX)@WpmcD>aTcl+I}Wv=?onFeKW?GQw-p=Ds!PhqH{Nln#&_VF-N z#jgQ%UKLKZ1O5EB%2(5*t7x<Su)X0uQ)(O+iCUSedR5Uzg6ne^z9eBh-P&xJy%e_m zWtQaNV-52!f*EiCT{=q^e7?`+0FQV|ga9k<L<eai#x~KK80uZOBCtXUyqb=pS9kME z5^jMj`<}`Coqdo3xq^j7f{Km`RaUgYqBhqRT`e$x!g*AYq?gtQdiKDhGz8Lzhfem7 zR1yZIH_O++5#tPU#XieRj#RwpKp=)Nkhh4vz~4padKgXd9h;n@C1VKVZ8sZYu(xJH z$Aq{w)$E}kWPlG#a33oN%^Vgwe&#$8M;5Ewlm}g&2-LvoOK>~Uf(ICLSA$f{Bai(5 zpxHK++`{f!JK#e_0u!L&2LQ9sTtFZ^elX6F`7IDNxhd%}r|QD}q8lkmms0#*$1OIQ zbw4F|LVV+<Rtb6DRM2raMtyreQTj0U-UK%{E++b3zl?vtR>3Rf0?(aoc?X6}?QR6O za70cV^cz1K)OxY*Hls-BJZ9x??JQR4E39}nujgCasuHI(4j3`_Z@{#LMjG;!>&h?( zdcK<;U57NP9PoFArwFtlF4S<Yiz4?XRhp$Kob*69Lun_=8G9X!>GF$F@IFe)nV{f} zMxqlAdArUdF-nm)c{^XWLssOR2B;5icQ}BSys<8(k_NPT3%&@i1#h~DOvg+(3BP#@ zrvqPbE~JuujF~l%BFMMv0}r8Bv8z@CL>p#}u!0vZm>X?@Tu^iX-#=?BSs3ja&c_pz z<oK!3JMA4aDbr17|0`N$5lz4^$V?Fma?2Ao0dL-KTmS1RtRmz>$=;C}3}OoOn-m#8 zep|1FxL{|qh$Xra<G>1lZ%oA^^~RmJ<C5Yr*&B9Ki7xOK6kdQ^wN1e{Fu5Lf5PdH! z#j}Iq9n&2~<u)@Q4wM<PzD!md-ppl#G^qpv+ny`6kV@>|$A3!N_MU5XF&zrdfS2dU z3NQWHMDi`sWx;&ku)v!T0QFMd!#=;b6Av6vykOWPqShK5Y5&*eunOA2#qdvolfd5r zMyCq0gk+}v4D=yN{~Y^wDT}*5@>i9-*)lwY^F7_aWW4XKdFY}HeQ&bRE-*E4`vL(F z)U#KP3TFSAKNr5%Kgo`YCJ{p#mRo*>&FB{tTFP5`Ic-LyJ->?5v0I+pJ<{`}x8qN= zMO9vXO5dK56-mo*(nibbXZ8UpE+18t2h29r97PZd7O(p^>*uMclz+Gv@n7Xoz<*@b z_GjPh>(E-{mXuJ_ixpMQ_Yb!hm`qmeIe@s;PRqL7-sV2kQRiCQnEd75ROvr)gvLbU z5xeI`dD~=)XUe4X@CFsp9tS0q-|7*O3%bg7<6*UeCLE?zAlSJn31f1#<ymSNo$FX9 ze&%M-&3Z@5#P-Fq?TsFLZ|^Wf9mov1i<|B)>{ZnK<dZv*6ixb(_Ds6&_nU_St$mxN z)MrhxI^Snpvr3Qk<Q>qn>#@fsy5cZLKIJ^|yRKQS`LR^)<w`^1hgX}kwx>%BE*+4R zx8->Be$G;^ax8URsk*cN;)hqpbM!6oK8c(VMVHW^Q?*sI9<hfN3Sv*S%}h1Knh51S zBEoi1@s0JlG)EojxeUYYyjU5k)_?5;J$saq!NErgoFj1wX0GBlF__H-Mkik4mk%Fx zd>ll0ZEx~{(v#Pg`nLcR@<Ztzz;k2<HJ|;^#EeKpcjO&sdcfa^3J)%I80kEo2rzPO zBgr_wv6f`1Kk!xzT0n9e<xEFavbXMSh<zr*G9f?v;>Rs-?vXULLOmjcu#7Tk*rHvL zv{;SckQZQ7x$%jBq0Mh&`_PdePcnq+jrv6qjeF`Z&S4p6J?a?O1ZiTMnp#dJMoOaf z-x_-=Slv^$#MCDiV7?Za$3U{H8?6<|=)p31J-a_ob-Ot~XnNXPTt{W*KX=a7yg1Z^ z``2JotQgD4ks2@4gMLR#p|SfvF@U#$Lyld*dIcAFoCqo0`Kx~#=vCU>1W)?#rQXGE zp3z?FRP!^H@mJ?=+RnYJ61fc>4+yUzL*zOcMq3hWi-@7tgc}Qo#;#dLE&|bCY*7)@ z|E}z)T!|WIYr*yg(>N}1I*?%|K)%=D>O(7bJ*5l&RYQr9Z!rARb7jRumUkhYXV1<9 zHMqB4gTo@?R%>q$g8TRQFW&3kw9)b`nknZpPsS;ZyT~PnSfds=oE6VF;vjksf#^6y zg2Ht3N(jH;Bs<fv#NVnyuh$X$aN-eRnL}J?t0)FGE`xI#{6Y+<oQ;DT6_^r~_B=Z@ zo71N*dA#3|GC96BIAZx4dXt2`HMCVY1sig4J<rtZ7B6OS^UB4$s^RVFDHy4p_i^w$ za^zJiaT&asa)y+yx7n?g45{mXfy0IJ$<f~bN=z5aMog>-@{i=&ZF?w4&##Ci;NhAL zXBe#gc^ZrSsvTMDummc?DVWQ@T^QGA%67o}LgBYoO{Ad78*uXSTIy=dL}GnkxhAHs zSCUI4AG<~6YG-ZXjSqf_M#-K<QC=`IcV5uI(YB^`Z8c+r^5cux9h;I(2jJEUXhxr> z(e{sTF;=)yW-OhLmRPD>TpJpI{9p_3qh`xS&w5}B5Kr9ZXB2|xeocvAx65kxQ}?@% zSyNK#T#cz`5XEiNh;doVFCG4QH~z5jYhVD`3}vNZ=$<fFTg>iA8Dxo4OJ|Uv5YEE3 z%`0D3rK2!mwkKV#U<?V;gk*oSvbLf@Dt;}mqr&e09Y#=t;fSsRA@v>0V5v7`59N!> zW`*z&uFP!&RKwL9@cgIwox`+T;u2D5$WE2z%Q7c-^Mi#YgxhcyFE&-E&Gv@-aMAd^ zdOwj`ZS<r&9E%o_90XijjyUQ4fZ*;9Q)ZW~avli}-6cczku$I*tjA@*w?UTog<d2- zOjzdz3J}hMF5k<;NF>|Py5E}>xlc%{Fs2R9n;LkHa|B%vk5$ishrns@E=5U{m9+y2 z*Ib5+0cM`?Ga!VoOy>b{@~B)hI)XPmO&6Rc&WTaUWn!!FZaxtz1fY%DJLq=2Oon86 z9&srsR$vZO)`-PG@xOzV)yc;q_Qr?C@P>yIhy#G-)(B1F2=TXQ<3WEHPUmIYg|k!j zbfElYqZjmNExwo=1u9K+hcXSiq4pLX;)LIJ?SAVw)`Yp}qU*+dTws5WVZ7%g?icVP zf%-S8USFBv#Y<uzJ$bKYYs=gjt63erfAME`axQu8d-k*G^m(T{<%NGN<p0)JaBUw( zDXC5>8gW(gE5K~#JNlPwEnLz4kX=qeAIG2X@mz_jncis>;-iH8g}W1`<aLE^yiaU1 zf<3)5fA6U2a@2Zz*3<VtziK<MO*YrL>eqGqoTYYzX!{(JrhV+ol1vZyuG1@>XRAFG zWES>T@Z42ra?^Ql&!!==aL3{+)qd_+@S5`MI#?#4!7lHJ!olU^MBddCjYaxzM^_$c z>$IPr^-SDW_o~=_w+`mYi1aa&k*`iMjRk&t)y+N_BKBWMZ~LHdS@P(GuPFvWtBj2F zKiAJvCG?HnAujGu3d($QJa60tIN6|!y=t=2OYXha5^YoArPaCr+BR;V9$);UyT|cf z?g@pK(`1P)F=A->J0cexlDqXIuTISGc*!iDNz|64hEv!kMft~?0)=++r8gLK?RhPE z<B3XJ<EIy0m1TzCa3w<itYq1=Bd?xJw%Kj)^npe^wyjYqBaQ#{@IRd?U)$5g7?~dD zv|%%GJC<Q22OIs2X9*n4s5y<Xias2Lke#Z}Qaa4)PwV_FMwoWu|5w_+@-n{gc#OuP zoDhFZXRjH7nN<(yENIs}co24+t2`n56mx;>67>CUXG=~q&o?=K`(>uet{u1L$ftI3 z|GHQcx0I*378lm5sl4QT_hGGbg8AXaC5|?r+(X0l59p5I+?z%R<D}lYgUEk}<b_GP zGW>bb%w&FfRH{MMywTfL8wlrJkR}w>?ypEP{*_`nc<^k<_j!%@WNpd{PX7I6_WpOK zE$5QkjC4h6hU;`ox9i&`K!pCg^`Lz%=>wt^D67PSLzHQ>+1}0E!8qb<rBVhh*1*n^ z>)Zx@h{Y^uhjy0#y?l5k+q-rBkU^6g*QAk~q%;(z`*FEb5prG84>;aaMQvxxt5E&9 zvv^|PpzpPT8^bY4l0Tyk3@MG7L9=ANw{JpNTVx`LTqIKuu2fsO$z*6aPaL9RXAdKz zSG*O<do&`qS9W*{6bHkT5wRL`2n#Zi>DXZfir&#n3A|7%aDRJF6=gJs#nkGe<4Xig z4P7KtAO2h>#CKF=C1Rms34_;|nGIC%ctne`HdpkoM{b;vVs=<&!>tZuJPne+WSyTa zF%9hZ9-#SvGep+<^YA(C)wy2nJZ=o6D&{t?L8y0e-Sgpa)I;vZ)B+41o<(w}CfBU0 z`y^S!W5T3HPTw-)I`4<eX&co|`jGy+M_p9Pk{!^Cc40M(Gext!XjC5L#ilXbr!6Dr z0M<QbbLyYza9qm9<y6>ssInIn-4a5#23sqHq4w>ZaA_Usb75YZ@mEDX(-l6mz*T42 zF#CPioY?-%_u#C5nc0>hY-s-Gy27lmx&KZj7IjMtw`$#n8Bj3#QL;bIVe+XeAg-(m zU6+%G%iy{e$QC^A>b-#FpTwm@okq|SSO(qMSem&|49*}ox+{9LdfO&0wyF;;tQD}V zI^Pc5^qM*((jVULT>&w2gwDW#(v2ZP3;dvol#UGKcJX*VSe`KehwH;FCY`r)MJtvS z&t^;98ACQw704-Yco9-&)@!)IF*jL3jD}_0SXgGH3e4z3ksr^dKZ*1C<2@tpi(8{7 zoP>;CYPi%XP?r&&inoT79*?TrbJSR)ySSj`<TKpC$ofkLC789bg{Q3o1=-#rh<3n) zITyYBl`5EgVBQ6=HN$ADIGZMDsEz4mBj_^P8@T<+k{s+U7;{;~M|weew{P7QhAy7& zMsLzN#EMP|f_xSLW}*~sf5Z?H&O3YFS6aK3G<Y74b7W!RF%39IkuO>)p@TR$@t$@4 zd02`Hf9*!vi`w^UYJ2gELGeh>q=r~%tD6^Gab``OSwIZe<?V3sQyjo`0&VL8ZGOqX zWS)pFlVfh(Fbr1<6~Ula{`Vch;jnpp`7ExemFLaPBpyPZ25YWRKe}}7$;ElIts<8I z$kKTfCVmxGK;Afq<q8Nd6UWUHk^|41oR4rp%yr+}HJI5f-s$1K?QHrjg@<*1AVdGI z3s|_f2!6!30tHCE-k!LvEr&O>^T^LD$;eygYgX^Bv{2aE+=+DmNl)QtFqKALjR`2{ z<HR;jy}BFD>;;%fONd^@!FbFgs@Q)sp9g_&i9(#x>Dqs<?YjXKJa!orA*R@f`Ho(A z@E9&aNmwHi$)DiEBQ%?qQuuo0qKFP#{t2yr9!3)y`sGTxc)p?st_0E;hG{p~D;5B6 zaiN!>NNsg1&MT*lM-r%Sukqbds#P?j3xBZAz=K}Vf8WRwGGp9L2Gn);#7B=c2JIbt z)Vt99B$5zZtrl6B|8qM^!lA<I*!!Ji3H{xF&(+oDXlSuXj++6@CTS74I3D^rLW=S` zuZ}9IUTaDjw^Xb)AK4VM>(A)#J%&^Mxi<Xg_lGpuby_D|<EX0f)7Qg8OeL#UXXBsx zD?U!ID?g4+pe8(eW?MzQpZ@qqBmGN)uH5sdmnSA`C*HgVo<11(oG&EPQD5>$(=Jb3 zrhoqL)NR!!#=p@HW?QUe2T~B?INqbuOK6o(u$MmjIrZ9eJITxFL;AOSZaeL6b<W(r z>CtT;%1YXij~3c};#+>6ym<5k^d#iH%%>g)xl0N?yMAl#`x$$RzSFe<cklM&Ffml$ z_bWZeqhIAmtwg-MW@S{$(V4KQ+hc#cUAf0t;e$eq+#Y8c@jrE(^E>A~-1l54ec3T4 zrU^xU$xIF06Zwy+5L;K1V<NAsDUg{Dr7Ec$JegRdQ@E39ZS1`NrQYxswvWe0O5^Hb z`(SeD=ngw{;x<Jt)LWR7>}3%xBXg|Cc)vLKPViS^OTu!<wVfI7%67>J54`O7BJH0% zz3_x46)g8Kt@z&X$s{x{+BPe*NrhRmaZ@SuS(3^9m9dN4srTYVmn@f{a5cgXr1fFH z5jj0B9S#?jVzwb4&RwGYup0_!cj#sB*|ZSz{hytIs|-aokhf$Z7I}@Qh6YiKQe>vw zC-LqTMU2gcxfk$*90}wO;^_;cv2^WJENahUg9mktT1Y<qS>o=8C_Fx{Cb$VA?9&oP z3>jFp#t09cp&Bh>Lx`BCFKk~3<l?^I_ku09=Lka+7Sh`{7d}0PBi+CHtX>o)aM@0C zI~<d6^>@5p)Lv)W)}N_s2;^jfsp_Zq!h5Yz+fRwfc(tnUA1wc+5M~QERp{TrtUP=j zE4_CVU9K7!-s+uMDV6kO<CjG!c%GX`K3lb>&F#!MWyliA3^v_ef>-wM2gUnWdVk}% zqBU{2-6}X4IB7wUmek~>?8IdAeB<1+x!zO7!|yTrVNl%>^FMj{K$RN)uWzRnZGp^O z`&VOFB=T!YNT|BTj2W@G{OBY&9JfJNR4ligxL75XN(d8PRw8)9Vqa-%Cz<czR?<Jm zio#PY5~&9I7Zty~s|^y7Ic+>KfOAneyz`8tIlgt7iVJdzE65Nt|1J0Wt<YxZ5Bh1| z{O|LGE#wxY!Yfh0BjpW+g&qbIZz4wX1z6I=KJ<@Q-NuG|T>Jqu@TDU}uAOR}E@{ov zm?ht&Bewi%il{t`Dpwcv4aGTSZk$T3V+lqwdyy=O{*a`+@6vs~8s#alv2Y{P%SjSe zFqC<;w=o|c+JbU0%Sd@!y19D+EO2^51!)r;r;BG7jMWaisyTuOk;99}A98YHFk6fX z)a%C3?SplFh5ble1)OoQbgw-~6^By<m?4>}uoG<EMRK}?j5U)ad7`?o6!EPaQVSj0 zA<jGV@uzJ2mck96z_1g4b_!2wp&P6W1M-Qp)i8fi0wD~A9ne_^agvupl$)df3=(zu z;=8J&T`)TJ8(qH6l3gt)-V);g<UvYGG&5(@qk|m|iZ$V|2JC%AQGMCNmQYWfatgb2 zc#TUYybu{avfOgPMJ!w|fnpFBfelr@CwSqg9n!LYJ**{jQfsx4!n&D1Rj=qftWc{+ zAMu(+bPwMj4Xwa^T#rF$s_3mh-w>v>qvOFgx|jo-_!D5F3)Lqqe#fq*x|hJYz~Li8 zb9mx2?>y?67pNHJIKOK6skY^(K8rp)k`ENwvPjvjjs@_?J*{T>#BMbE&?N?O){bH$ z+S=FTwZiv&_Y^ef+cz8#Y5%lv4{WM?q4|#M|0j72ASc-B%d|c>KSrbgJ!I)F#PQT{ zb#LoGKC)0{S`U%iHDaL%L6xuB>XxemfZsGDCPnd+*4&9>1&e5Aon<p@gQ_f|W(#~k z#=f-$obEYlgcmruA4i`~uF<SYLY!Un2Xe_gD^zt0e5XW^PD-VTEiV9T+Sg!nZW*K& z%c`0dsVI(43;Id$1-KgO;&>STroYo3>F0DnhV6Kve|rT>`!dwcqX)9mjxuBV*6>-I zh12O8!fW1jX{&ZyI*CPAfg{FC#E><!l2(U0s2wrvd(PQ^q@w@Dkw}qv(>3>(HK8MR zO#=7DdG!07^JC=P)w-*Qg!eapKR3LS(y9J7sSjKY$Qdd3`n4H<sk^vmpNEECAx$<K z$J>K@d}ZWlG-$nf$vi01DJ0~P(X^KD==GqK$6@W?)U~gNYib4kppHLFDXXUD{T*#o zbNQICkbfm{+c~|CJ60X4gpW@9^KTC9)^m=&9(l@s*`hrQeu2T8{Cl!TH;c68g4tn7 zfwV@8meh=tN5dtVq1sEk?*$l%p<|P}FQ(U5OQq9K0wO>T!e(m|`DkK}+M3Rr9zUJg z>+kG?Bt7><ESf~gTU0v7d)A@66uy>si>to<ZhVcNl6tokf9_h9xKjJ>Qyy`8RU=!% zBcf{D);((_f|+tgIv%AmU+zT2|55nXI+bp^&1gfu%upkJgSeuUMkOZQ-(W}gS@9TB zsy3SA)_7oXL*kzB9koMO8zv77$qz*J`Gd{2#=-aYi#+nNnp1DieyIT;U5?SbR%t{; z2b<lokwb^>s12egX<s-LJF)jaYrpZTiPiltp{+97kw%G(&~G(+@`*H#Y+FOVr+Z1v z-+NLYIZUHXTI0&J9J?v3e&uRE?spRoI-<_ih+$b5DmPB}a4}JRv_476BHx{>W5=f$ zm-Kesl(SBt{Xh!Ng5_ub)uuD`_YeC`#vgYOSymn8XiVM!bLyU5FLq!yr`Vzo1U2jz z_U=y8y3>o(-OQF1UYqF-T*Qv&-fJbHRHayhPu*C}FBA>5h1`ivV4?OqJ4Y0+15yRs z8q_PPOWTDnj{=r!S1F%vs1{{^MgRSLor)iK1Xc7rH@}^$<Hdrv+6RA6>Z6By076sA zNtN2)ImuFLs9*I1rM{*2e9tT2Il-CNFxZp3S0g0AU4#o_gH+t^;8DH%X@O13RJ=@V z?jpWspfbbjZ|{G!(Sc;L$+zy8SBuYh;AF)j#iL{IMu~9_-~=AvjC@2zm#qma1}R(< zXmFi1lg!|QIK0`zmlj}$mBXRM#v4uvyf>x^lZN!~Efk&}G>;Y9m39K{AqW$io3BVP zaK00u^d2|o%6d7cB@}%bgZyQhpuZ0mx#|i6#n_ytN*gR;XKO=wlJ;>={v>$f459i2 z9f-KmmI_BNta+<}A{0-At3ezfcZ7}>EMFij-W4H$RHfavpa}QjH9LC?8{nUxwf~Dq z1-ZC;H<&&dBHNyx|6Dz^WQ2G%;sCJ#()RB`tK4X-fH+9ra$AM%LG;qWfh~mpf<)J+ zfV4>WFpLyVgR2RFa(1u>)bH}qo<PIA6Wx-nayo8r8Sh6&6vN-(K3Mca`m;@z!Cp9l zS><c5vQ}~I23)@CzW}rSJZBNYFK`gob@d`oPyIjm{o}Z(_3jzi74!s0cku@WWT+`j zm+jd?7{DzOf8*-&2f?*?=OgNT5?qSX{X$Kc)`iUc|MC$68!%F~M;^;c5#jstI5nf& z=<DzC)jKkOrLKSjpg@Tqr|)fr67JBT-uW_>kUy5sU`;+B5J6U8<&=dwDa}{-naZKO z-Mtdl0-<=Hb^joCzP==w%TTaMot~slcf};Pu=<e;_^&DlXJV*}aQ;|wSL~W0YN_rE z%kbkPHjfPb_>Vfb4^@5yE)jA!>@oc@$~-1Hu0PZgTw{Aw)!`6Mw3hUHZz|z*yvML^ z;ieO87#$E662X+j9~ZTBr%VUH%_<lrW#Myb#I=1m;*hA`9zq}R!kU0DXY}a^gG+6s zk8!~CH{fx_&-S+mz|5_RPd5T7SkWPnJNU2t6-)(-04N5-$5%E0Jbu1LOrwD}q#mK5 zJs|nJfSC(an!slW<b!cUsE0zgTWnOGUjQQS>t!wabM;|OwA544TH{>+2vp48?3(%i zld=vcV+*eHs1#NVgOWn#9C0LQ$sR|qlA*yxtUwRmiC)0M-{PPeHWuUVDL8bwcz{h; zlI|sTtn1sRAcYZhEgltY?fJysdlOp!%0`adcz&)GIlUjP^ogjT%L8b{m!hY16>DDC zMt7b`crDsl#$X2VH^7Y8Gt`S)g+-elvj$#n&qGHDtD-S}Czf!l%iV$s84j@}UANTk zWjPj@&IF2K>8#)uI10uO5buK+1wL#ty}nj~hnf1n#wqhe22B1;#LT$PpxG1@R6KVV zIt$|3pxq<rcNOq{wA5=MmM{voh`f511bNrpeIeb)_h9$6b;L#sygYD88K%c|RduW) z_VVA{+TPfAR`pHtw}^AAdfsL?iyZ=AgmPAr*6UdDyWM^PAG~a3Q}e+Qe!OJL<jAqB z@67_*&7azAvz?!ad6D^N^hnH$a`VjkJIkei)~}E#zLZAxN=@cC@%X)Y6`-(YW|FvM zHQ&~(ed}MlNr+sMa>!76-m%J`5@*iMyFYYN6%@$!Gw9dOtE6W)irwHWPCiP1BkF|m zok&3)Jh>i;$bOWK@yp74I8wQJLPFKJm6kuJY>?)ZIhYbS@UgQ?(^+(se-1m&na=9~ zS8-;J<JUL5dc0Y!yby}qnbO|Iyz<~}c|f&i@!bGNor!}8!IA8`Xy35ij|hPeuLqUy zOS5y$t)5rn43M75X6`WCuC-ZX*9dFAHb*?KDeV2@`ANOeO&fBq_+eUPo$H1$j-@JQ z0im)9D`_pSq>k>nCB#l7zP>fze6>3<_O@17Z7W~)Q?pC=q?n<~$u}YV`XhT~q8}e* z9CAB3RgVByKe)U)3n=Yh>y>e)8D%F&mrr?cle_XVU00f$Hp(aZX-de{&27LN=-$%% zIM(33mPF|7KC2d0dGezQr*OBlBr3wo{){17V8EU6P?s;Bo!cqTs24IXq+s40ja;$g zpGRq)F_g)*tjMmfJo2PlUYH&*tJ`9Auhj~1i1la71?cWI`!)ypd>})UdYHg^9iP_p z`TL9bCWY-hZ@mFz@P(Yg_n5L_XyWy=2e-}K4IW*k{83-f7Vj8zCr8>d`)8XDv3fWM zF25yJ4}iShl4+2KM%{p>^C&KaH6_HFg3Q>xFR{WH9*-kdpuNu7`{|Kqh_MCg%G21b zgzUAGEz`fB)HH8#`;S-^o$gixc3v{yJma=Ue#;vP5xDZaTH0+$W6o|Rf&0WvfY8L; zsXwVoMYwkDI4Vu>v_bK5h}<{A<GG87s5N<WX6P`vzg|#C34yW%B460a<VBGq9k3SP zJdC{Uw(s);Mqn{;dKMWIPFsDEd2mKWrz6!R4U{qaBd~8q$zdvkVAa6DIAC$ooBsxi z{&x_E8b!S`VOgP0DfZ<MADu>sFbSHN_G<F+by|4bI&D<bmpcXvL&Vlz1xXR88pR7- z$<A_%QvzvzF0%YG`rgj94&ERKi+?XA$xnqle4eR+*=%|91srE3M<G&??+t~=$6}=S zxqcyO+Yp3!S~&CyoPi$;s9@oF@TogEBdXuZld*B%KvAE%6NTX&9u6rT3i*3oq<MwE zf$<`)x%)=Az+Y4&!|p9Dhiag5ZB<5+MDMeWTwE5O`!!UACk~WxcA9<0yLx$vN#8XY z*fjhc759h<wCv?4-I2gu5fwsjn5rxL4lS<gySQuk-TouYw=)9z<z2Q=Nd7jqXpBHs zTx%b+Pr{;yp?N-wIE(n{nuO$kB<4(m;<)$dKKRf1a4=u$;p|>PE&MeK6XeIi(XjM+ z1YBb4CKgYlHJ$LRB&vE2-0l9BuQYpVv?mo|It*XyH%q~nO#K+uu6HQhfWlmAxc}gD z^uO5Du(}?}T=Md99CTq}hRW}t@M}7l<*LmaFLon2V7FyCk>drq<L--ir~ga~<A7sc z!b!o#zZ4x`wtT8C)Kq8IJ!B}j2l_>APb5bk7WO4bi(0_3jr1bl2`00m?P}TrZU)Ey z@ZgOOl?3mbqaw5iHrsf^ry}EtgPS+5oF7TDbCh24UOAu($+p0XcJS5&TSvGSQgHH* za?hLf=Bv5e5$;%x%pxMnbjYGmq&XJIsE04k{bSDMrtmHVM2q_+5YtK2pchb_%>c1e zL;<yuLK;bM0YFf94TSVXdI`$ank6iT4IWzb;r8p(>eZ>(pTBRQ9N6A6K5=$FxnKs& zLYVNq*Zh03Xn2-LC(ZYT3TUxpkw_nAXbYlfA{h&+;??7mgUmW;i~Nq2t*2KNPO~Kz z$y4>zRUMNBe}UcYVmmgsEFEr5Mg0&Ww8Y2C+47l>z5r|z+z!R5F=PCW+%E(fHFrRP zIu)VuxuzXCbPh;GXf9AH6Y|%PG5ea~`-w<+ln1hqah-nVa0mPlvcRE$%`Wk9Hm0SD z3!g{vIVwWXfzWdC%jN1*kzCl8hZcPyWWoAc%rDV`PUyp16BZ4oedChKld*mGr=@=2 zfiJ1?n7+6fiV@id^&j3BsWd%xP+_BowZW6nZmRBz?u9PiG$(4Jlv}H{cQHe62Ww=b zZPVY67i7k6*tM9onN0d;G=PLNPcLv5rt2glQ+KGu9%TpIq4)QxcB#7NSsRx&SQ$*$ zl@8)3#?MrcG?;g4UX@dWP;)l4_3}6CBYX3ATRhMuK2r)I=gNe(XBFXB4em8aA?H;k zH~1{-v|BfBbve2D+5HZ&PZwott!s}y`fHo=qoU0Jj;i1v%n2vPTxqra_usW`VO)h% zgixP&6`g|Si4er~`+G;8Xbd_=a9Ld8v>m|l<ko--UDGk(J;!YGLFGZo*@H6&El*~5 zyh!hAH`pwNc$D+y=I4!+9Zxc7#p55AR)%E~QM>kq{9HJ`GEUkmonmPtm)_&h*V&0{ zNmhg`FFg;_CqLY_vtpa4Ot!psNXp^yFUf38TGE*@$*WY2lX=bkv7h&NM8)eoQn+CG zMDpns8A!AHNTbWfnViiA(lUGeo<-;Fak;ImbVBJlglUM^JVfn3waw}Y5g{@0`bF$z z-f1z(`4w8Bt_&g<xpK;Xlb-X?%@?z^+?V&Ax5#jX2i%p1KE>0TANn0u){N1b)mHiC z!NPXE*4oZ(T?<_NAdgYL5CgGBl``(so!Tm|*ff6Z*#2PFwR^MbLtDbmq1g0WO58g! z+hZ*4QKjRaT~4JvvmbT|x1x+>yIveuX6;MV)^Sl}%bW2$EY^1mBa+m(&;4$`{q`Fh zmjVPOU|P_z^@$sQCLY@9nxxBnoa~RRk8D)B`>^*0+X`fa2sq=+4m80TYJdfk%vA@N z#~dfJ!$LnUH;OC=Hk{mGedg5FSfSOn(?mvEP1M#ifns~*h0ZsqfU;4guM-t->GH8U zKbv#WBgndzv9%?^;yLe|mK#X@?d`JY5#-l8DN$$jec~&to8w_RdInN&+B+Dd`e5aG zt=ml8&$oh{ZIw~RZU@+eJMNM09fv6`4baDUxOdqH<Xyy-aYkAiX&-k{6y^6O$0Dp% zt-mn#`*CvJej`*C!I=){14I9bPOG_wCOX1rHO!Ww*LAdYF8;-S5m!~&dRUkJXHHCz zgoJaEt*Pbg(N>3RC+a_G81$QXW}Pvc&d3Yv_T25@=L0(oN7Vhm2=E<NMj{TO$PyKN z>6~g-9(e#@K96x(g42ULbKYVazOFJ&j{3~}Fo_KKO}Qy;eCt(kyv2H=woJJS6)T7% zDj<XmDc;DMgZ%(;2)Wn_lmL)_WZFsI53sdJ*pFVIkdXQDn3jOg#My6FkP8VML7Fy0 z^Wpzv?7gF!3cq$iIs($9*MKw;1O%j$P?RE7Q2{AIP?~f>T1e=qlz?<8p$RG?ASj*C zyL9O#H0cmR4WvxInRRErnYr`3v)+HQ&Pi6*IeYDQx954@6M#kzju)o39Zx0s;YZyi zxCeY(dIi9kK^xbIQ*M3AuljolTOT||Ko#j1Kk>acV)6UT_XzGB7(<}UFDWDzwC3LW z6C}S$Si8%Qu|6AJ#tU2W^=nI>vhprRME~&OI|i5M1Rq`^dk|U`cr*X+pcx4IHnGk) z;%}F|22MMVHGf$w6WET>AG;6p2wxJdeErJefL?%*l%1szviI)Qb!<Kl>gVBm+6YQ7 z_mbB#41qHY%j~wCYbnx|{=Gu*6V#(?8iDvvsN|^YCpHnTi+}I4Tw+h7Hn;#%#F(iM zbpTo7A}pju<Ay-vmrnnI#vtPjeHYR||Ms43t}`L=m$8Nz=u8<@T}xCT){X=d7~STk zUn=aue-x?bz;*_!>Mq6kMBgRir6~cCBuIixFR@y)@+Wdb!Sv(cB?xz3OL&E&ZS4U! z53ymlq*N~hXHRq1jl{M2_FTd52z^|68&VRU=g7X^(!Qfhn|c&w4FtC+FS84WNRnso z%k_TUU7iN5*r&lU4{fkMBh~@0i86?WmX82@!0`4J{7T9Ru5~=h3YHk7#!<l>Jia5< z9BjTO-J$ELGM`nhyL2&rO=uszLf}T^WwvFrIc2cfM2l7jiI&j~(g+3~bA;VLM1cXY zk<?P69`p>nRW-sr@(XfM@XyBk!v7rP!3;d^xq{7R-Ib^&zytIH+F!n6_MO^kAdE*s z@DEz2sc>M8z;n=ra1OPJzo11siVf=+>I{QWG@NXTW6{7wiyWd2(Hk@NSLw+CJNCQX zIOT>2pk;U%U_u-reHc06@;Cq~_q!0M$$AMc7^AXk=ephHQep+>^D@_8qC)?)&`ZMC zu0B#Sn(K1F=83;DCee@*Yw*6_BrvteCi+tMu(_=N++*<h#1ZjsXb<ifYl-77CRJ=7 zTPOtfU*~iF;u@oE83J=(<lWj|M)T@DDn})lL4>9S)+rhj<pEC~nPC>vy;EXiCLG&P z%UZhjv>pRdf630|S#|`RHEF*+QTr9xoP_Z65#HYz6_cH^5U(#m^ZYu!`hDkgltvvr z*&n5A<1MS=tW>|o5vDIYsuuO{S&6ovzGBU8eT$6%)3j$8bwRaANhS5J30ozlg}50{ zp<!rM?P5lmY~9M!CK$sgrI?OizPh!=#Od{-H^02!2-az%QoY4*M6S!3N$Y2eOVVCj z4Ev(axg2H`ZVAsI;`IkHV1oK>KOyH#8n|idZny2dC*E!4{eE9x$}m4ntymhKi#OBP ziA&m4Ph%~~#CpvYnjjZUK~zSw`^}Q=^K?{?%j3jVO<Dj2W<S|^8RpEcJ>|5&-<4EA ztrskdWrJ}(3Yg)$6-Av+Xt8Q?!m@)INODH?yOFW-L26aOD^HWzR2ZQL1+HO7=OGIM z)OT{I;(?)Z3~D*#tt-^FKC)YKe?dd4{#(mAbaK$<#3+RF7oDh#aKO)rN=dNhzt_<o z3H(`MRi(@)-S`xU>i1Ju4C~004xpF1<`!8|Dgm<c4LYx^jEUKZSG<fNkiJVE0eM-~ zV5m~62P@x|j}tC=$kKf3!uKAI!0RLGi@ETsqL~ESAS;-sU#kcumhQ$*B=)c7!R!s) z){J<E^*4<1#&(LuQCBzfZPVJ8?NC0Sd$!<z7QpQd2I*=A!F$d9@`N4Apb0`>Wm9o5 zck{*|rv80cxbocyE+{Lum>~hVz8kZcm*&J3N%aM@hb`YIHk&-7p;`Me=&OQy-B_Bw zRN3G#W;w$R^MDi5-|KP4-oxy(F5vfAx!;->M=1&UmX0Fu1|4E!O6zy8&444ngTl@Q ztWi@JAV=F4gNOQKt?W$5lox;q*5*k`T-TdN0S6Dml?9relMMzU6bL^)Fz>gb-Vt+N zZXGhv;t+=7VkyFgyr7z&kmpu4JbWW;>_RCbHnO{SlHauVs?ZBLLL8}b>EuZaJb{MM zB6u(29u4+mJAn8hb#jIYcv3Mq@`(yYFmS;vK7b0{2j`{kP4iNc1f1xWZ-VW7mo<}b z>HybbmeBQ&fM?2&x8b-}!d;>$plMg)5>l;tTIbNurrD?}4E7m3uRk1gc~C{_Q@k<q z?j(FBmS3)@jDUW<fC*;nf|5t55qSRjOoE0ugPjIpLqhjgHK9+=DR--qP!)gmftlP1 zw?SOcygl+$%^o%i6IovK21sL79M_$QGT@==mF}Zn{}cdzkm!{LCUD{JJpPV0+LxJP z7Lz9ciwo);rjUO?^CoI9iDMmI?CG+%W`Yb!Z6RVY-)<Gw00uj1#4)eE#iuYId%?Cy zyd?zQERP@X*Z_EmVz_vEX3_(wv#4=Z)El@1ra8hD7p<delK)-0@CkuQMb?(2Q>yLD z#LcG8z^zL1Ul19c*(z?BwB}1@Y{mod$@D(+o6F2ogx601qe@TIW1fKm5LfVCL}X$w zRd~T^+_C;P=+NAP?Il`V-wB)`Uslz$!vkCH{&Kf;<l4sA^`3Mgcp-1lb=ud=q2U2e z_!_cyLECNLM;NKGPRAK7)!&r85ZY!0ENiomrd_GcEICGC?8XDe$B2^zb>PdF1nn0j z(ylG+LiG2Rip5=%HKNA7=-OY%X`ZyNT##A#Dr~eqFw!?FGAj3bd!!4o4zdrjZF92p zM*z;kZ{bO!Mn@AiL1=GK7oo3?nSKlKOa`dq>zL$^CELVtfd)==hdr?qgd4P;H+(9Q zA7xlwFo_blAE2uF_05B>QM)u*d=rG|!!ebXI1^=w@hlJTxn#T2l|OaC|D{zL0u6F4 zs!+b0vN=g2soR`2?NDZI@oH*}Mn<gRGaGvO?*lhw@zwdwlQ@wXg>w+jOvUM|4EE=F zEiCo$h!ys>BIOfKYqFL1zY5$3#68%B$pi^|ad^Qii5X+&#y%sA8bV5<Hkti*_%ND8 zcjA!=J+E>P8}<TLhb%4nM@WWy+`xpH%3^P_JZX$)hKW|lM=^Iu1rXQbLbV^j0-yuu z1X<`5Sd+%Z?7ymaeb|Nf2K-I5M+wj$dwh8q38_T(Sr(O_$v$0C*slzJI5z;8vfA}7 zmm^T|cl($DTV3&D)I2!5ao9P|n$(0YLrf6|Gh|-`72W}_!PU*{0G_?X!8E{?2w)Ku zPdM%TyhsGr;Kinik1w8KXQGd$34?Xozt@NlkKy;|kZ1OyP5lh(9v6I}_gbTB7>R5A zQDKJPt=_UvfzzLzxm5f(lL|s_6@Q26lw9}jeei?{?BLG5%XE1+Y0u;zXni%Oi7qIh ze?P_xx5OFb^6{+gF*2HA>37AnWT#WknM0<J?3kYEWqo&Xt0#j=@12>w$Gwt5yXeHP zbN%877AkX<uU<KpPNh8+22JxBLA0`v5q~pX7ip-vbW{UEcQkm<X_1j0G14|d?y91| zq2to|j&(Ps^u2_TO4p+uR;$=CrXS!KS^(2b?cdoEHvD@i#Jo;Y26nLq&xC`UHN|0L zd(VyY3}JFi$C)Lo_YwPiDk^N%TVy;S$cIM`rR49~`3GX^+z)GS&+8RcFY>m;GkOVz zypaide|K@6{E^sPVpD~3f$z6`27zK)7kWwYbS&y+vAe2CZ@jp+jQ4?b`=^Sv30O}W zgG|K9zXEcO03huHhhPoLqHBHC!D>R(8Jq#^&K3?)j#22<@7<s7CwqE07L3Kd@^|J0 za6$oT^s&Cp7d2VMWjny;F9!_IB6=)28caE4mHaO~vHbjT5K=S9|C<nY>M4%jRx4wm zt>6u!nNC}bV2cw5%nO5I9x^G!kMR~_GE^%5W3)1&y)jKeejMVBN9oTv?)5{;=r9fS zQg(<;2-7!UMsekMnprnVMOqlFLiqMui@%CHPG-4%yf0I5wAkt7T-^O|YC7rE*m(XA z#J#qAISw@2`E{!TG{%TOPQPD$5@dE&45F3T?$Rc2*eV>lRDUO#VY_fKdP`+w{eG*; ztOSs-j>Xit=!Dq#-y>Wg;j}+_);y-yeZDEEg5zjVl|60=hr6b3s%3j6zGE@<%wjsl zHB>)Nks7P3_9-;O&(<E%LPWGKF5jR_PXc{x?D#@<SZ-o1cdiHc`c*|Tu=XJ0>1EKp zF>Gp#csj=-0XWsl>paH_<^#p)QIqYBHv*;IEI3~WWh(&yf%XpO1UR=M^q7cFL=7pA zD4e!qUcr{fVj+e0QsH!}@;$i%gu`lf+-3IVx7NGJFkz#*g5wqMlSeEQx=wiQ?BkFb z0G|-$vSa?0^}6%De{}NF;O1;t%3(aV6!g>JB5+EIy$Wssj0immmc&k#lc?=u01|>w zG3iqgG9LFSb+lqV^j0tKypB;cNDS-*6JJ)ZTwi<nFoWc)@QWyw_DXKp9(c|B<sJaf z6FCmZ*@$8|2=9`WC!EBS(FT5aOL|5JiFE~Hj5FZWs(jBuuip%zK}a!+Q^KsA|NM7v z7jR58hV9ATzk0t85xzR?N4~;|jfN-?ZooduhTd4P!6M|Uk%vn<;LkGvJHr#u8Eub1 zeaQ@RcjOZVXzEU|@5&1CJD87{X(pGv1h!^#V6yuIV-wL=u?I}P0}>qc>c12F&KeEu zMx;-H<-sq2d&dul0G&_I1Y@Lyea<VVVKF+*%ZYAlzHbDi>8M<4MOu2m7>$u=RQM;K zi_)}dz`xJvpJocY7YJ|qWcWaqd#ZpK*f`pH7yhuX(>se86&K#Y;}l!j541;w*LWqJ z2HNT*;q}W?ut5N)p<l{{Qtq!yt$=<wW7mM4Ulf1;jj&jK*%N=6L1mBA>tLY2eAE*N zF#6aN2XJjJbGfgB-g$T<TR#Vz88A+$Y+=gIC(gkfdKZ^xrjEhzlUso)2fqkoT$7W4 z<J6{_yVKdkewvKRUw@AgZR#@SP!g#8tu;(e1{6I#jkuw_KCd4OVcbirEDFdpd=Sq< z!aKMS4|ka{iDd*z#HA6}zz8W#$Z2MUq-)*|CcOVguNwIx^vODou6PJE{Cmxqmeb^( z*%64^v<XL|y3P}6uqVE+VEtT1yCVyOgporRAHoW5Y{QAjrB)^P&*n-52B|V?8~3;u zhv_W3C2X}PYklK2DdHiB(Q8-<><|OG2!yfR1O-rmTukMD+w1$Z`jO2ehM$G)EN{dk zr$NHjtuJ#EVYABw3F|8L39vs9w$M#T0Yh6pdaHZky!C;*2wI)IcH%Z4WQNViuHw@t z*vuDOma8TiY{`)U({>~=eqaq*4B7<{;McEWsw$BFq~F81@RlTE)eaj_<)q$@#KeQE z60Iu#mXRP+E_m9JD|lGxi7fVH{xZ~#ckR$2>=-rz+a7t&9I$RdqlX+h8NpJ{(~X>U zI@{-p9f{*twxNk(I_n3dKA=+tQ*QrxiS;28{0TBeefsJ%No^mp>w$N>B4$I#?P~}H zTx-7th?;mYr_Ug#JHT9!C+r7|%4la3u7K6K>^PGJtJlB+!go2(^=WD#{{U-nYI0W` z#A5v!3|doilKHd+-v05;?OlK}71}oJE}6y|_(*W~owm#x|4g^x#&_ljmmgJ2V}KD5 zM~||YB0yJNB^Swj^g75vY$`ExKrzxxy>j%MibY(EnXC9?DJt4gL3?lbP@5Xmp<l$& zhB;TmGtbN$S-~HIK4_y%Tb#stu#9&#R-152Qq_IEv2aK5G?`DI<KIf+*NYghRf=#W ztVg}B@Q_z(811vrTdlMdOGA{Ax0wV}DH&`V{w>wtBCAC03A9;vW`h@^yBodj|2p%h z13>l}=O^i1#H$gI9bqr(6*kd(r<y;csH2`b^!mF^N6Y#F9)ru&`>DGj#bFN^9$!Qk zU<@tyQ(fq78YkV%tQ*GSd(=7+XXrxve*AofGOlW^<c_M%GvRIYkMoBlk(BQ%6$jLF z3_qEE^47C*I}~q>s+CkF`xX9?nC8z<pe02lx>sxD%Mtg28RDy^LM%EX7^5~b!*ECX ztG*R3Vy)botb!xIj<t2r9tlhL?`Kg``KU211p4;vj{Xh$*g-Ag=L5WK?`Bn)#21Ko zg%m_7fLQLyd{X7#K)uF`!l)WlxZ%2g3jlm{8jeyhogXr)Gh#s7i!lHbRnarBt?w}P zwWmy2OF~4nFpOWQC#LrYq^2$DH5PR<u0b)<QvzRI+?zNoWcRiTGMhxHID+O2q)WJ~ z15=vmgBc{7oz)PEW+z|+neWo^+uoUgtLeYhulD;kDJC%YVow;au&+B@!#$6r1gH$Q zUSnspPBVGS0+*WWaN7uIeKYRw)gUGj)@rM{VI57+zcrf^pHIX+ABl9<Y<xzxy@Jmi zG}@5$k7<K*-FPy^>J<D#eM0c|RvZB;UMsW1+ApFO#B?IEs2Xdun5mI3@Q3-SIZ^^h z_5SbO%BT}Y<~HIU81k_9VlV>@eM+EBXalrz<Fk!`FN=_K58U{l4s6D?6oWXAAZ>ad z%~pqf*W!7x6U3AeD<dd{;X$!OpUaZGEFDJoFrM?`ecYzSEa-TdHlSPy=Q_|!+?G{p zCmMrJ>WFSXMz9k66tV<o9TEVTEe!H@z*4>c@>>E#bcQ$z4x>deKfBMIx1=Xy^Dyj+ z^B4g|k*J1?#O<6@OLaFA`*hSPmmp_~IsOikBI?7ovwl%6O%N`sFO@eDd%K&{{raUO z2R!+`ISRtiY50(76Z^`LCybCSxxQNDygQ*B;3RktTjYe>hZWV?(bAsxLO(Zd&`p!` z@0h@zYRU|O=aKzzJYM9@P*erMq?M|15%;oK6F-)^PB1XVdGCx|c<&=mNs12QfM62R z*&8Ms%mWj>-kb`7gLd!vhrGhYsP#1dLtfdD{=akL*evWm6bFvA-DVa5dTAN~e<u-^ zVE5q=S4~1uHU8egn!f2P*wqm?EYc7yqLO{2-#U}EwCg>agB^)08nPLeqV7#uVg5~a zjl{2-?<HJZYnCS-1@FS)--a%Akz=r-Kh*?(>~ATID7Yhzu-XrCsCxkOFG(yY^?V#A zm&6OMCSHCoT!3(k3{%;nnDN`p?GI1bU$<N%yKyV7k^)2$y-Oc}O46J!z-Lj{ixm<x z3Z%jkQ9EKIj>tNViD{dBP^xGC2lSd*#<_iK6YgXrU@Exh`q-sd(+dU?MT6D<C!Qm% z-T9fmnm-Y+_Pd7g_Yzr0c%Q>ANeumbYNl2rZh~Fl`9Y|P1)_90c?4B6DuE#ye?fZe zHfllQ>gD~Q^^>{R3p232Oea*dCJx?`6#WATlN=%K>rR?0*ZVKlq^%WtRaQrwT0<90 zWyN487Hf#`!nr5aUW-H@Cfe+5*o<wMqnBUr!dtwHKexw}Wt#0Q*vEhU!B4@C>|-;Z zc_TUESS-Pjr1FHdSN{9&s1mC@4HhmgOZ7RpjX3zQk}SJ8!xf8v*m`n?g`XmhXyd9~ zNnFMYfKth^#d0a~2`^L>c(RDOCsT}^g7#$+>ZwB2kG=Cj54ebN#7V@FY>vs*G*)C2 zxdhnFI+De<VV=(-^FX7pX+mHcoG_E}E8}SMIS=x_^<dA<k1Gx0wy?ggOA+;p`64mU zE=bu9U5uEKz3g<kM-Z$NAg1D3U9cC(pz>AdOPOvW&)SLlF>|Oq(T&s#%+|jg#Fp>E zQgOaXDfoM&!PeqHZ)@mf4QCK2<HMQLx(hy@XcTx|ers05^mzGl9&SdUMfPQq4_S&{ zVPalm-HDIarxPtRDoL=Q$ioNNPYk~mE{&MyiRDGe%M9jpLi#N7-?Ej{Ykca{Qivy% z_wiu`5S9T~P(C7lhs|hA16bsGhIm+Iyn(?#n+vC-NJm`%xp3XH_=sv)wcRDVvEuR^ zViv~J;*+#|X;ZMe*<y-oNxD1b-lPLP{c~(tTTWF|(jGKPVaCLM>iw{NKWHVGO<Dzg zu+bO!mO1||W*C{NKKxm}*^m@ALa#jW+_|QQE54ES{wayPDk4E&Sxb*l+Ak#btCfu} zgc;m+G|hs4GRc$ihThI+OMC13*i^7&iF2vlknglM=0GOcwd0WDPv@*EtHTUc@@q|i zT-MgBwQ{S_MGpl#R6$3aWxI-z#u%f}VM~BFwx6~#lQdNv#B?Ixcw-F$<uDwlTenYU z1;R&DlXus^k{hj0gL%u=nB|dCgO2Nj=-7-%%dz^@X;=Hx_=kNHm1NFgK1WxA*R$Ie z0hjC$%5t4xC3Y|LlnLc0)BRr@b}ol8zkS{uQSj#Q>S6NScTg%9+df4?0`Vd_pI>;W zs715*tj@-XDhUw`MgmaKGaME(h#(sCBkn9i&igS3b@|fEms5f3%IBHN%OQ>$6K{MT zGY+gvk4j@sQd`j?AS#T?_p>M-<1cJq)>l&$FT1pxg0A&Y9O_2-8v%W1X`eLM0R!Xl zYU|5SiQqb%1!(GQn!1E(l=;*Uy*UA+vUNINm$*W#JM&Lr6bPFbB7PaGoUx4eMs8ie zpx7;RH~uhrq#lVs%gK79yrOXQz6Fb5;Cv?;h->TM4)FmR?ckWOWo=YS37Y+ead>9p z?y(r~#pb9DPVBU4J#YCgF$vpipUe(Zn?g9@yCstFn=`OWC@W&-2iMnSu|pi`Lgg9Z z_^51z-{=CpEt|=lPjC;utSK8Ty9~$XEaUT`He1zeTm-q|A0j^wRV1hib5e1PIdjE0 zZ6oTe**dh?)Ggq^`KedDg~~fK2T$pZs~-*18G}4?k7LzNnRabErBppp7<%b|IfJ}u zvD}E@5ZcO#yywq8%bb0GK|S+C?a+RyVDanou$DeO#+LmW+lM{2Cn6djC#L>Pu7u)C z7c*^T*gMnCuc;l^o-<K%wojf9ghF)Yk4@)S)HgzjyJqaB>`q9<_a}_nUNoaGA2rxd zhSkOS;rr@<PdA5|HRGN(wBGsB#D9BQ;LnJgrB~L#NW}KPX>eGhG^|h^K|}zE?j)GT zUf#wb@%%gkfj>z<NSKOvEN|Hu;FKXBkl0kLGy5>8{XGF~ET2#(F16oIDnOwtH1_K? zsy>@;Pd4;g{~9<qunHD&OvswguIx5RXWgp}X4Ry24+~n8p*me6fAwqR!32ZT;;GQ3 z?<gN4|M(s!=QE%x<OqYsoN$4_`5<C9$qkP18|ur1Qin!Lhw%jJ3kKJKWI;|9X|&}K z#bMYkAFNwZZBkX*#|l-|_9CK_B95AgfuD4rbYa&aLhy+=;V2V8fM7d8gqn?Z^}{>f z$ScN0#)?XeB`S-r24^DO?G?o7-`c$zM0>>6j@x4CHmg6LTlO<YcL%B;c7c;M=RSSr zFMkv!k?-`KX}Oc}do}+Ng6S6Fy>`H-JH+IG1wMyVj*Arz2*wDV^d=6IR?~ZI^s#!s z$Hc=;Bp_XO1+kJL?}Bb0Kl~@w%whJ_cp~9$ykxS}XZnaiYCr|ol4XYs3ZhrlI$y|? zhF)07Ra33jzp*jtVqNVt7tB)%e>=`;djS2{?OoXXxv79_k^G7lh8x`YN-+*U!7=_( zWyQj{nO_)2^0}6iDhaTOBCVL{ddz{+4qI72eJ(_vUf1D;j`e%-rCf`p($&TGaE!by z$ByWUPXk%R#MEF@80EH3<kU%`;fHnXH`=$GKb~<K9oYYS#M;WhD`7rQsVO2kcOzL4 zvGmnY+Z{MtoLE_R@%sMrWQ5cOZsMG{f$8Zq%Os+g@qae>mV@TO0WqNd_}A%-Dog*T zDgIx!`9CfYLDoXbgBv+Y%fz#~4B`%mFhAH-3ABR}+RaW4YBoc1hl2!_mYKw3DP)kk zii1otQa~NZ1JAC9{Irj3yCHu~rDJCdS4GyUZRzOmZD@<8lo{t$(N{7Vsj3E*utxH{ zTB_T3qZ8a;L3-|<CNVcpq$Nn+t}ir$(&eAE*c#Wpv|ze$xBYcKK<^93(sBM=w`nrD zc;EHe=%&m{pr5Pd$%EQRx?U7ndYOu@haLAT7B%C)i|l$WzRXkeNUiMImHW%Kk0Sio z@A7Ba*Iw;XeobZA`aM9Wc+CAo@belfz=s;93%Y+1RR_33T*vQjz=@7yZ{D7y3onWZ z?9!d4eNpUo;gf4wP>i6Qy5b+N%KoBQQnaAhrju+d^w`|a(1zS1fX|z{Aoz-YcwNGF zK)g_cPp`qsB!84mF(2(%U!gDKgEmC}<GIg%!Ft^*&_#Ith+T-4|Lo@TJd|~Yh6LQ< z*y^_S+Jq|bMZwVVjo#IMiUA$m2^T=-ur;6shhE0L*4;XS{!hH;znkphla&zpDsgL> zu!0H0pN&qGA<>BeRE53XjR`KZU`fGMfZWjW>HDuLKUTxvdr$EladkhrP3TzD$W5@^ z7;)#K0BT;lAI7k&;kGLoK$|d`9OBcVz8`T8G19ehC}f6KdJnb;;ymqD>I&^W%#a^s zgED<6&FojIJ>kPU@A}G>^`2dvDjl0HM?2(xvoK{-EJUW6wdTF^yEfJR{y?Y9a4=R0 z^>itSueG8w*(|;5oj}Q6pq5iIH$V0RpowWHP@{Y}&9|x{a-_Xb_@vh2pUhTo<JU6* z&4c3|65s?taHT2{V0oZr^a(EI^rtj-(^1lJ_CX7^7`EiIkOSIQCgjs|Upq-XH^fQQ zqM?xSr%_ZO_pS0qw60@bVu3O%tryD>{qIPI<_bRK(gG(H@G~WnCIDwn4f@^LdGhxr zf$)Mc>|<{S{lV5mz3wMwUfk}GbjEX)l}?Eu$j&(qTQ+!XhLAy?b|Ss{7w&|W{NFaR z|89!^eP^p`oBl)5rA~-KVsi#};RqSo6F$p@l3tTAyo@u&AgTq$^XuXChjf-kVfzk7 zDCyZ?!Wl&_Gkz8bC$S>mss|?o@~4rqhH1z23H&{x7|+nTgsR~A-!ZMl?*Y<zw@C2O z{$q;j%&!tAdemE|o((%MTih^uJ=RWCPnm|5_S@-Qem0Ry?5WXj*fS5?VYa4%`#6TN z0nt6&A)kigbd1p33C_o&R&_aw*CjC2x&90HbLu?jf46Fz{RQO%rEbe{J$v71-$o}l z^7D4=FD2TX7(eg_v{Nk869%}qFxsgyM06N)W}`D&`GG)y+e=>_`5bLM7iqhxSGXk6 zBb^ZYq<`Ca=YbN>*gy7Y3KgkUdm800Q9j2&9!?UDlwmL2VKR7Dd(zeF*Q5LkmQ<zi z;V9>6WtE7-BPU~SxdZ#w-ZJvr;A5#Fs?w*MQQ=UD6D#BGo-OGJ=eY_v=Ey??s!edm zeg<;j{veN9#!MxW{Qs9O@;v;a7kS>fYz6%sM62zZzdHnHqCl2$z5j`{{&6u7rpXkp z{~E1s9sS6jm1W{jushFxc?ssvo2{V5O;cpPLk<^O@R;YO*-UMKRWBoF)qeQ|d%kvr z_fh+HbChN6u-f-bb*7Ce&W!NuroxQMqr;_|3y~>D^z(+gFW|#@x4zrUoZRV`S-xpD z<rXr#pW-`ZPSII{DF{T1nmCd5tINM?Pi*uoGu5?6Ev4N&6wl353RRC-zfMMGc}jyT zwfrNpOl^1f534^@UeMi5R}ol=(1}gR_1?9*Wh=rM0{XL=_~aG-+Dh|_XDZuq4@Jl= z8cP5^=FUyG)A00FLDw`Mvvf4AJq`Z&1vpsr*1F14fcp}?ysn++n&`5}cjJQB%)2IG zK~D0%rGzd^&+90qtiO!?HH=tZmR9-Iwwk#XmJf7++E>B%Yq6~SBm@ht&td!*^u-NG z<gDx|L+W{k%V6NrRqUmT7}aSX^Z$tQ{}bo<uRH)O#lW(B(H^*LbAZHkX}=<F301Sl zXkG@kHdw>G<F5{!@1gl!DgG`D_1cYzu1X{oK3N}tubCV7+|Aq__H-%|JT82nY~;|d zPA6xtsmR71Wb=un2imq+nll%QRI|&R9_+AwYVkf{J#U&M<zT7mTDAT_Q_egjyU}93 ztTjHZCuLa-cW-vM<5REozKoyn?e1qDmgzm%8zUq_P3aE0$N6b9!>}pr9fNwx@inF! zu_ap?8}_uNmV%XckAxmq%?3mcKh?YT${x<qi)&YB&P3pFe=)_d!c8qHp|G$&mTdQp z=H5O&Rb-65H}ISBauy*Fi4y5~txbM&3hk*Jy+(+zxmc)Q^tDJ5q4MsS$job=60N&9 zIO@n&j>{Yp7*}Ay<UR*uZ}#o5DGA$2z8i}CCOoE)Xm9!{6#Av^TgQsb)~)_kI%bMV zC7M@)$fMQl9&^OWwguH3{D0{TjW*%jz2{3|MuA$OV-b}gEy-n?z|rhYt@48$?7QMy z{2!NRAHTFdV%J=HqAeGM=Cf&iVdmp%813PTkn}~Y*A&u6NYEOqR_eUba}^JAGpiR5 zU<sX#&QW&76iHsJmw4K|Oqj9&gvY&&r}UcBnf85>RIj+47C8QXI=n(9XJj4mT+a<| zP-TQy)0OQ)sXI#!Pac0TSW~2tp?9rcdQ1zdQV>ssCXI2@P&!1U<_I%BjDXL%gf3%l zyKAzqiBe8WTr*)wYx2&U_#t0ONN|lDxIEAMBhyr*23We)2k{<~1W8;z^c<2ph=!h6 z!B<A#6lCtkk-X(6ZWGyArXOt(GpS}M&6Yv_s8#aM8M}~ZfOuq~B}J3hZPkLa3&~5h z80KJy7FY3N1d7kZTe$q+S6Y>F_AU+|6HxZOT+@tJ$IIDnowlEl8@)PPX6q%Qh(1jR ztv1%XC!=<+?_Sr8FOC|HJo>tD`ua{5?&ufWo&3=o39aMIEYPcY@BE88pjW(f^C6O$ zIXD76tJ#>Xaq)s;*57X-TOh<MkU8jPm{9|m`0aT9@RVHhf0{r456^1d;S|z4%JXim zfuJYMAe2i{w9Eo}!C!J+bl416_}15%Pll`=Wts(ds%wJnYu99hCuw{$=rt0JBhnW* zpWo$YXp_^__^5<3bSq2r>ov6T>8E6XmTh|$l5++*%tPi|D*~+x7gwpEl3au*cW`Gu z-tP0Aw46Qjz(;0$LGy1N>Pm79xUXu@<>gs(l<u3;OnGycnmz=&?}x#)U*|tq$wqRs zCe@g|ea<5Ck^y1-mY&N8pm%Lw(&jFmZ<{q^o128zzMsRL=`}A-ia*UkR-GK$uC35E zhOD{Zh_b9=XoUGl1mUP=BQ?|PdXAp##{HW*_zC!<TvZd%wS?8iilD3?19y3G1q>=` zlt#1C3=z`guRC}D_zc8wJwG?}-d4WV7J>>L=WKA(`u;@P^0Gqhj)rTb%RF5hElpnC zES*-BYP~d6I!$C|FmJ5Z(&sr9RgRlTz4`!EIl%SN10lrJQNO^5Qpi_kj&QK-Ve6I2 zn$1#7T_*h#Vhw<3p-H$J!~F4vT99uZ@*Owie?A#3Gs|QKT{vJ@yz#&1Wvi?rkUO|% zd78KXTlw=p%=h1t@aX}Ht_Mq3JxznhAYuc|HW?ryde*7j))0z)c*No;9lJg3>Y%YR z8NuoHkS}6uVOv8m=CUnNU-#rWe3{He04K>NR-fu%S}E~va$d$-Nu`inwwYpns`E8m z$+M6V<kwCXcYV~D+>7<>!nnw!aBVyd8W-rWo}w$*h?+2^hfJCt<}K4T+Q<*~xpT8} zJY(gUWHP({_Dnyq5K*-%pk~>bHXu496j{?P#V&tr5sH~*|Fq6#9mAAERmZiyUBpoh zPCKPA(8PMsR?emK#P#~DGr9U9uK}Y5HExa=1^k=JX=J!G(WJdZ;AYDP5n*4#{b5Xs z386PUAAdl1ssxWo&Uwf!eG}mB_n}8obJz1qB*+Kd`3wxM{e4HeUhh%&DTU);e!&LE zr^&@$Mh$<qGS>*R5Z?0E4w2*q6s10VX;iB!Yn%aOu&l=&s2`PTwp%~18u;kgP*8OA zX!W(ItbME1QqWp8<=E)Hm=7KBP2F)|>+#}7KcCs;;gSBV+^>kWrrPr?#Tm;y@b1nd zjsNU=v7D%X&2>u<QgsTFF}NO`MXmhrsPC~OTlC`t$t?{>1uA2`@3aAh5@$NeJhrX{ zW_d2!x`!$Tk?Q>~wEDy)(d(pr6lyWg$-I;YOAoa6Ul^s*TYA}~s`6sW_i-u6t&E>{ zK>cg+uroR1=ACQ(=NF$n<u6vLYZg+UeqU@&F}f#P+%3M&XYZGjV^Oxf(YG*8%QT&Y z2r2R04zE-b=xW+5um2MKYuG&Z+P5Ibr=*6F%jM0NYg$~8_G@ZaVp(3F?DDrxqv{T2 z0gzg0;xs^tyF$I_9<52!<1Y!q@@2SN%d=#PowcjnbvwQOJ*&S4ggzv@%OPlrT^smp zzxABXH+npyJ~U<LyLTpW)Lscqj)C>k9yBgJLw^(LWW0^u6XtAcce{o@&g;&WlLLtx z%wH6?`)(>w9-3_z#ATQrJ#n_JJQ;F5fS%=zuj20q)@-tA-c>UK;kU0^Yp^!UA&1}Z zkj>SrUq&%Qc}Kf(<->=Lz3|xooPob~is)qq++ymm8~zY?OKG*BCd4dnT57QyxAQRY zzEqa+R<wS)IL+Emp9dS~UFN8i9E$gU7PtV#EWPCExW`3dIXbi&8>pD+t&Rd?n~QLZ zpz_i-b$D8xYO_x6@4mg$v{dgaGRV9*@P+5eGq-M^@%ne&f{6FN=N*DXbFjP7`9yx% zZS#?0#g5Kk)`htZIrbF9LBZt%UY|MvYdV2+!{wkRv09r?ckFli>n<uxZ7<kg{-9yb z7~rY(?`v2p$X1c0+`PA%Mu_O3D&+81YW-IXs5?TB{cJ7<04CWAGl~0fb{v(q_UP=g zHQ8pGysOqirbVhzTkd^?JcHK9!O00LMm@UxxuW^6x)LrD*O+pp&m@(GzhUo>@;yz; zTB3DmM%6u>54q<RJQVUSJ}G82zKEt9d}>bk2J}^M4<_gWIm|I-!4Enq2H|W;)K5p2 zN2m2Jo+M3E{yN$Q3+BU?d~0&N0nm#T%$fS((B)?e71UBj>kiIqmpJyHD^|$q9j$^a zE5lVlk~iJkirxhAAG!tD%fCTXv~cN|SS$JnL0Hp*HlG*K;=*X;gE-l~(63dg9yXaE z5joM48X>dU?HjrOy5MT2vVpmdfp_P}J$Lh}epNU=kFZ4Meuh6lev1U~&V`C>wESj@ z`uBLJITU*X8g~x$zwmsurBwUl;AFOXm=U7u?v@AT>jQRzC~KL#=ia4zX)y*{EZi*3 zheQF(KWa+{19!9KnJ7uK8p<Ej&BxY^^S$0$E?M>B2A<@f3P*1wL#dem;`z6f0e4{N z5#V#uQD77kk#<h##IY1a8c?{bEIHYG-q|j(=6e3^$#d5bKnGv&ly*2%@i>;Z^5O@Y zUayI#w#RVUp}pAicX@K-3)JqtdEv*J5pQ8dJ(1#V<x-kC??93%08xJMRnP|5H-<%J zA41W)y5pkj!peRJCr8n~7s~6(X|-k})Nwu`fq<;`dhgZc7ibhwF3gWx<}G{TL395( z8?TI`uGgIfDScT`K9w{rS~ci0xTdzuhfL{K9>PuqQ4B8dgx%pjVu!lC#<{Kp;UwV) zLf<<Rp{T_yEzt*F1CtXO8lLMBp4+Y>pTj15LO1E6L&^YFF6e%DPWnfubVcUrHRj{_ z3GZ4*Gk%;jzt8%)VA?5Wr$(7B0pHmz4eolRzC<IeJQ@q1H8>Nyhn9#OV0CFkai!Ki zNZTcy^{ZeS-Z5)3IzEN5YbNWI4Zvtxc{3-yyfB5)z9%2<_-X(qQ=jJ3n{B<3malrz z;dJRLIIQ*SFqt!1<saK3IX>^dVC@&OU>O*Oi<AN8d<wd3qg5+gfBMU`nIqTnWTAkw z`@W`dsaP~Ry#DwJY4m(5<CLKe2vW9Zqpg2z9uY_o@akgl?wPO=)cvW$X0i9XmrH}< zkF+!N2aAGjy#_Zi9aLyBYE4Ob@m$+o`CDF03YFQGp>)v#c1Yq4<as9bWQ3a&q`D5m zxDoHG`Uv(Hn->z2_TM7^|D!efU%5eL5p})xh%Ym>DSzmrVJAbdRP5@ewiHwc7jf-F z)EKj%TB*)LbeHl_ufX^RBug?Yo1+ZX*A?Z1n~FO@l)p{d&QPdq{f+iw^^(yNrlE*@ zcO!M5$LQZab5xYg)Aws8Oq!!oA%nMmx|P|U(&fiEnxEK^I2ZD~$ItJ1+_qU#<XYVE zT0@B~SIw3;!a_P9=wxVIYyiI|L891!Qlcx|_F7jH^x7O39zmXuo{_X0Sto<3e>+xv zWoNqkLV`9v%0es9_LU!U(lnKFoSKr1jg;E)zoeo0nDuSTC3St+^_|<q8Z^_pxnj!Y zJd?PFkco%Jn<D5FCDz`p52>JqU$s33jN$`9GEt?m8v9SE8-p_=<QkW9<H0Gq`!88- z9C*`5WQICWtfbH_u*Aa04E#7|W&D%fb#M^bcUy-xpP?P3(&wad(PdiGhp0W$aQU@7 z?YSkLEd5S8*))L;G0vLIDZ9+EpB=#uR7A09P)uh|*m$@6(g;1<lh^sB0VCi{10Rx% zwfJo-;(yk`{=ZT<$Q@}pitZ5Oua1B<Cg+3ag1*T|CYYnF$LM#}D$d0-iBaPp5Z_m2 z7q-7EIm&1#{Y~M3zL9!gf1}cqUL$xe>UAMSDQUFT_PbU<VgpTQ=UT2QU9`3?fJ1Kw zZ_W;8`lxAO`gQrNR!-f`U3Xp;=aYYEm-!hkH(YK`r$^~7@>X0zwERM#?O_FXvbxcE z&}n#J@BS;cXJDb5&VA(_0mZ38bie1d6-MWICfvila@sb2P5<s*{A!j{=y17V>#g`a z;x=tNxl6mNk!nLar!ct-?XRaw_D2*1^D2FJh>iB<#@O1%IdKbHRJNJb({qDKvN3V) zpPfpK(*8zBxQ<IzC<`yNgkzbEI&fJT;^rl-Z{5Ze<wCZN+~$4UW$YrCvNY~fc;LK5 zFDq^N@>}i^M?d9*%U+%SHTfQe-wioDS%74)af{D~YET1Pg3zy{7q=H)-}%5Sm$XB8 z*H-Ve5(8j3Fxj48CY)i8^e?;nZEpPk4>y|9C>M=g)lp^+Vtr*(j>}EsB0gNbo9wbQ zvJzz#Ir$#RqQDbqAf?y+C)`oXG=iG}e(F<HSY~gQoy#TK{P>w~spDpdY@ncG=^gA# z^O!z*FLYYd%zXRol&-#M<U6h)=YnPll;Lf**iZFt3}NW!Ob=ah{0#VZx>tD)XtaJs zh0Gc=_|TO3a(w}EE#MhV{S*XBXd>9Vzx_GVYR`>IJ3||^pj~J*RM>*Z_0;RzkzH)f zEus*|q0}V^Zzt7fZAX*~+pCsqYMa%3EldlwHz#rYwGSu-j~=4DH94JH@GA&tV>8j; zT5y+qOo==1o2dW1Oyi?C{l_2NX!GSgPXzK;UWX)y(6c#oh`9=A_+13Bj}AXB&Jj@2 z<qb!d(j3Y-NbMT`AS;!WANWc;Ehm|4w#<^^pvWM?0Eic55Je38TE5}b6?``$Fp6Gf za)*UjCRl5<?<z`nO?p3EzFIoZ%nZ>Y%0iEh<6UbbC=WchNr~ET0$~3?mpqos6kS?D z3pCndt$57?=Vy}-A|$;Qn*Le;e7G={8)QT=0_n`<!v%=}*K){r$=fxiM2@%w`%?;P zDdj^;4M*dCr_qr;TB3;^&*$fTyi>?Gip~E=XAlvqC|<@0Ofd<|Q9JmI$%t(X8t@Q_ zNeUVGJ6Tf@$h|R-vdJjFq+ZpmdJ$qX22KX#j+UfO1;?r0ouc|y7M}PW?SJ+C3uRhx zjQ4<m{+}jE#r5EbAg(z^-PIb?hByu~2)}vh1BwnVt4JiO%yfxz%q8G1X|@4m3x{^S zDOe7x#l<sMW`Zs^HE5q}n>l8G7E*j#B4HXDQ1}OUz*-^z)h;2y(-YsA6&puC+WKk7 zlseE7OC^5eB7nEPUiD(~sgkL%5@yzNYur1zy?@YiGM+_gWksuIr%f+8E5;(eh*R5# zKbliG!Z{gddsA~Q+ibT@#1&r!Eew#3bzh64jdzKhs-rGgIqh7&^aRDObuxpj@-<=N zzH9KGFGB9q{{MF$QnrSgspg;#x}^>+`tmNSdk0AV(ow4G!3~SmF<ud$KTb+L0wa|i zat~Q}H6kZb4R)_q`9((Ulnha?Xo9FD>QlK~TN2egOWO4JPXwQ1k|qYm+V8Ifu2#u> zZW*h*tm^^(4FQ>s4t_=js%BOP+MF3s#`Ch2=Kfx9GUfyBE3e$BDIXDd_Pt>C^R57$ zj)N4F@)ObkC`k6OTIbADCDdPCE<g4zbjGVwPOr`2T28|^rCgLioO~egIONN8I`{G> zAN6|3Hm!DMD7}n?Ipbb+YXdqzav0DWQqt=qJqSBe_t$HGbo$}oJ3shT)a)4*<{|Q_ zQgd7T;-B~*DZF>~R@rOy4^h0&j74Pebc^}MK@y2&xP*f;;tHSYLHzAJnG*#|r%ayb zbJlwWr<KMJ-%pxItu-+RY$~Wohfrl>-TQ(}YdJeEYm**~!`DY0fGE`mjl0;Loo+>> zTXd*JNJ$)&_y>9FedoVgLi8#y6$BlAy+4&STg47z@Q1{<_#+dIka<#3dbs-t_@9f? ze9rpD)xv6eOUYqB@W|`d@x)-}lUq!^w(OR^a?g+054`^AUu$6dq(@sAWA<IV{T1lS zdVhiYS}Wx=huI2~<(vuG8+#TBOWzF2vc$A-bIj-j=OyYbt~NE5lySqSPD3x=ZfzDu z*yG>g5*__-smy)@KizkoFx3OX7`z%YFIE5br?s23#)W>pgL6|hC6`&DWKP_mVsVhT zUfK4god3xLm&a2ks2^{r>h<tbzuvo@BS+$bPCe{SG&vC&O>nZ$JLgX~Q`ieehvU!e zH@&uY-E&k>bgY-7*AxdLch3(LXHTe@@+tA_jCht6i9rcjBIs<Ga`a=-z}4yaOZj&c zHywoHFNC$t$!l))+}o>*wd?-gw6i0jXMXp4;}6vp`kORURgOa3ZQ<8$8_-bq%Z0ym z&O$E@ofGqZSR5`u!<Iu8j%jEsA`jF8hKae~fagn}vSF5%BNN|jp7ng2p)0Io>AaD) zKQ+u^lVl2Or{?x7uQ8K5cPJK|U44n*u9=x*s-<i#ZW{LOnpyua(iZl0P35~0yMupt zU8IK0+@j)~v9rb`d2)Xx-2r>OUxm6CWw6fr@S<Nu`0pma4tbv2;jF`n;MVf8;W(PO ziJ#T4I6;BxuO2M?QASn@SVWeQTTQQ-tlhX>;#~0mxf}$B$zCczJ{(C&4-I;*ncmmy z%$s4`&=ZZf9vd)z_CVdRIHR6R;KSYIx@2c+MVpWd!f2N~RNw1ab7{n0G_z->h_igl zykjnl$UC8&)#}BqkR5J`owAP-@!6fvJ>Y9$YtuVyA>|UxNde%UcXT0>)mAnVgD}N< z<GtUh^UnkLX=M0+NclavPfUVxr`naDAGY3A%Hl3V*wTzL3x&N~7BTA${8*KR`dATE zR8iWwAnAEOT)e#fwo9gyrz|%W|6aFQB<uK39#gpt@W@}_=$n7=k~fu&>UIICb8li# zMA9C0>#&x)y_I;PXH;wYokmHzZ14U?u)J;3-%3A7wNZ+0;`!kR3U?~F*?!nt?XiIE zJ0JKL54huZ8MR7XyZg>O1_Dvde~r^x0H6Ggq2FVN1LysjO%W;f=3iK^_bGjA@^gB= zKU8Ay!icGAVT><5-|!b!EUO{ko#sC+LaBV41&XEXkDsBvyo&Qnzpt|cX&j@rzutX~ zRgN&9DkP#6Fsf)-AIY;WHQ>kU8m+3dKJo{%<fi9A^RG{m4m)ZCM%8AylmkzF@&c$H z@W{1mILtRBCcdo;UVQb&P8~WJSNipN$in;&!5eX|Z?ah~T`x1A0kr1PU!<;7;z+Fs zft2H{=XMF9^b>&|WBsoxdqqwjjwSK;vU#@HFW!OR``-OKPocCH;dAs5$u73n^G8+a z>2b|%34g-N<?si6BGW&(tZI9E|1|cPcA_GXvE+>`8&3ttSaGAplOHwLOdx!EqvWDW z-LGF80A8@|(a@Kn609KcEUR^nw9~#wmbq@0fu|-FWO$FR-$y5uEZRzo#x<)!;_^>4 z1UuM!)&!N@9{$$XJP}4?+Dl!;^$z0_PxU=9YuYI<7H2!B&*T1y#dHbNM0kGOyGpdY zc>bSWw>!<jXCBux|0$I4`(p~AOw8Xw=}`s0=Ng;~bSKwr8Jg*0_EoH!l}kLyP_G^A zQQ%u>Nsr|h>xv=IJe_k`)nt@?R8eWn9!F$Ri8t;pmA-{c3YTZaUlqTznoD!_R>Y40 zW0fN7Ez)P|&bOhp#VsPwkU!K5G;beLi2dyKZJ^ENOC5W0*Z%0VV6x&d`T+|W|NfWG z%1%Il<PtM|uU_6Hr~D4TW#sqLQ3<BzYR1w*uaci+K0P=s`9NDevNv#KN@gGKS=)Aa z&|82=ZjFh1%~8|p=v13qyGCR}iGs}J2V38w@2z5Q`PrcC{-q;l?<D<Ld8J#wtQI;S zZb~@$bS|(T&dfh9aJcv%S^)S-KN?=<DCd~o()W9wZ~7R2s}<ULa2BY(xZPf}<fHaT zJw4Y%Ppxv2w*7u7&p7Fn?&v8yRWU(;$j7J5m=|AtT$0|ieVheqgk3Av(^Hlz#5(-Z zA2v={5J!!r{x7US;8bYq0A^*jH=ojI#2?-6sZ-3o?rCp+O`Fks^-7)Zt29&hGo$#B zy98<-y#<CYMHPws{cZo64e6V`<L1h1pIp7?n+5Ln?VklHrq-9xeco3l7mB$GMmiMj z0h4Ufvpm7x7G@H|qH+s7&eP_f4<voJyta-8!+$&-PCA~$e{J&bmT|%wlU)iWH}My@ zQ1$EZ$$HrQU5gxB3tpsjy?2ua43bX(KN@=x)fcUjRE!o65y^Y1E3YfWr*uU+-URfv z&qbp6^KH?4D!)-=ol5*}!{7a<J_nZCaMj#?-h*3@Nd2i}Rn7fzfHr&~Yc<)##VW6A zzW$5CRG4cI(D<+*;j>@!bo-OYw{!BNJ*z)?6UyuiESpZcN>)DXnJL8jUAvDF3T5ga z5KyHrFG^H-hM9TZ`5Toyywp5kr$NyllgWxvRlv@64Lm-z9qJL#!1q!$YIye?o;{zw zKKUOOuHq#bAu4@9DnnUTB-)0@X`a!hWk~7s&(74ghINjyp8j{}NDCf5j=L2^l6(eL zfNl^EEVaKvPr~His}MihWSzvk&iHxPrlnoi9OJh+SHXL4HM2G6l3PqX;AR@rb+6|3 zZ>-gNE*-?Z52N3et1NCB+~@UZs_ihX7p$q%wu_jH_^YH`b?soSy7>UD@HDeUAiiq9 zUeJut{jbrg2|Rh4dgZ|9EYB+jpGd@h`s^gs_VCUuSnget7QeG)4&Qy596QfGXGdLo z-G>vg(fP6zAxq6E{!1Oz{@cGkZn|&Wf!yN$_@y|{$fLS`@wKvxU}$dD+bH!3+MoP) zebHBSYP(;X_kW%0>c;)y`sUW-$gOU;YxO>M<Wgf=v2{FnS+GoCLVf#a5Va8VD_J;u z5n%{d_x&!jDMJR2<`&MQ?OE@Ou6O(_{&Xcsg{nzYt;q222iv$fy>%Jsz>}BW;#P;B zBmTbmqxBzF+p-Snq~d-YE&GR*KR0WwPOtk?k5FhYvfq`;hWU;MTbX5d=9ycuyZW7x z?>5ty7xI}~aOg-VR}9!bmSD=6P)I7)%oAC?6SRB(dT*_9s?z)#d9#`?`gm9C;P%}g z=kp!p@8y(>rEo6*2~MOL%UG}FLzejAxUpAK1-HojB~JRFT|zSY9`jtV4^GAW_>wy3 zu87YLTjM#^0q)&<)wgN*i@KwtW4O;8OFX<R#%Ol$nQDg2Vf&EU@h;_v8rdMuwaXnh zA6)B9tW$BY`$FFMp{%LfnFqPBk#8UMY-RQ*=Gj%lGhSDp!hXVGw-=#8$rs1q^p;wP z#_xT4Oi`x8?KfNLH3Mn0i7(Pt8zZGM+^!vbpYyxJwc2I%NRW5(jJr`KXJNgw^rG3S zYW5?gXnB_Y(~VyJnHq!80xh*S5|!Cca!lX1N2?8daA}xhX1i$<x7?D`!|}x6KfHIX zKW#1Il*wJm)+}AWtIS?zu=VydY(1RGXYb(o-w6B4pf<bqPg;sYDaE}&3$(bqYtd4Q z6?Y99+#QM+cZU|&;82PLiW4-!JwTA+1X-T{&d%)4Jny@6J|*|3<UVuGb^Ywh8z8xY zhlh-jl#L~Ci&~9W*q($!@w1qwPlNkG{sm_hHaJpN&mUzP_h7CL9r%4Vq(DS5PU!f3 z*JUf<4hXxy6MFz|R=s!p{y<iQ4>`c}%*CUlTmrj@J%v4j5Z7(TFT8kV+o=1g%YP;m zj`AVh0hAkszWZ3ue5#W9*OGme$QxfU2x;t{^k#^`CPmOcFIw6$Wd7t?ci{KI0dQ8O z&=6pW<@*;zHshbmDJKVf|7-oYQRbA3&?M+2N_PKiUw+vqNiN#UwE0U`-_}=>$jE>R zqo(hhou+lR%#x)v-kTt$4A$1+jopPKGk)h9%wCP%SBz`N`NS`{Ww{&^|8#zG9zvNu z^@<V?+Igwpm>Y2{(r+<LqtK*q5f#1MW$wBam*iLQqG?zo?DE@o7Vnv%@K5`n<Ujt) zy4D{K>MB>E`qQvI63b+(En+|0n1@^LY(+qe_Gf_P(suT&K+&E=?)H*uFc%YrV0mcA z>}^w5qq4p`Sug6Y^l5wKwXMo_EMAUz3>^+YKXw+hzTt8^i?~j178B>Y_i<UYpRctQ z(-Lh#HaFk8HU1RgTqxxGxoLXs=juO`nsdnv)-*F*CyQzEr<$ojCEebee;0Zo_<fo9 zXmYkyC|!^)OhkpVDny!V$ngCf7wS+i*I?g_u!bAabSCDW20eYH$LlQq+KSMQ^ZSAk z5~_wm<6jlK-i;8wbPgqfm9*(9y{|4KX3H6PA^Qc~&1&M>KdVfN7qAUy*EWKyuNkZ{ zVj{VSAj2!>BfVtlSKI7jf;t}k$K;JUO9{~0dABHJ7#GE)NQN#?ug0OvD@7Y^9yc=E zDgfW%xPhDLURH-U9@f~3?3lPbc7dP?0QZ&?oR$Dx7AI1P*9LOAqXCn@`PBTk7XbSc zbVhr)K8kH)AHz`yN}X(9qN}zWv^s{p=30I={nrGEhpeS5qMR;YH`a~{te>5bZ)Y|# zSW5TKl_pF2>`YXfJ?91UH#lCP>H$xfdm+SE9Fblym*iRTmkDTd?(7OMi+U>B`|{ry zzSaV{f7aekc?&kpxgV`YN+B>Zbg49fhWGC9Z!)ib-Eh&>IZTsdL{+me`dpoTt@wO< zLoBJhw_l6~pASO<zJ+*E{g6vH4B~bFOhlV(nBJTCr^?2|b&>1v?2!ADMFs%I^flKs zpW(Sr7a9W`s;}9;_Mt1oncXuHcdqm8C-%~z{8vP6U+Y`-${M<gWhkd^$AnMvd}*^= zs1Ll3D+Ra6>i7Fez^A9&&V%yC^%4gVR1ltt2#~<hDwj$D#w4GO$tTGuKeSO#O#hv( zY}Tr@joAiIxt~|xZjZ9p&Q^YY?aWXV?cD#Hwq51Rz><=hfJ^nlIX=|?yaIj6ZCZ(# zqSn8z8Tb{_isEvsCpAXZng&ti6GJa&NFT_9+3LjN*jY~(;!&SZ-DKHr$Bzp!8wpfL z1Ll3H{im8?d(YG5+)|Z%MJr#AfTuYk4yXm<f~%hcrFkja)$ZAQBMGTHfR4xYKTQ!- zOQhc^NM!I^ixE;X%Y+PjFj7gI0}$rtCS=URkme%nI^Lsi)#EL1trNh&;)-9kGP#<J zyy-wG*S#v}l6Ydlq+`G(Ep-YcodtU7;kl3k5FCt{CMShDQptap_8V~sr)@R_c01eq zye3o3pXP7FIU(aQBE2V~lthaT_@PvYN?x76kSXG2NW~3u;i*R6lI?Z0TGB;aeu{UY zbQdBTWfVq;StJDfQ1xRRAOLupiGP+9EiN}<+2W;*eSh&;QH=gK5snZ*7T9}>Nns=Q z|E*;t?N4GggWr1agS|*y81W>gJAH8;(CD+ur=}>!=r`<jImCI?f#KG{fwtOT8U<f< zc9m4K*d}?@$B%IO392Ia6QrIL&#iG#bTVS8cz<+vf?`A0j)M>x8%pE_Ono(eDn3#y zKGK6ZIXriCLPmFw>a7QaSYSU9k2beqoa9EyakFcJCX|JN%rG8?eY{uZL0engtW1i~ z9IoGF?l4xiUOkp($C;V!Imp3`5R9lhM-}4^|8r56T+~IMwVI7w_-30lA!^I%6rW?A zP_k;=z`R`Txs3O-m<v4zL)C${XZ|x^u9B&6@Q?ewQ!YtVfgYFnvS{i^kKuNkZ!Yjr zBv0>sV<_xLb-{d6C6-~$P(a%U_Bb~|&$SROY8!4ypo+67x^#Aj3(Ep-KJnx<pQmD0 zSB#AS%!!w!I4)}Lg%Y{hBYo0@`4Swmg*nbYBjDTCkauKX{2wucf6#=rm7Hg-_?r^_ z#lMn&HU6q48+PbV&+4X*B)R5;IYnK)PB2qX?CUv+>Twa=Fy_vej$4ir3a27;l<sBv zE(0kvrWgN1(^*}-T<YehLw)+4JPnWSAf|2AD@F$MXkmlOK{L8?Q)cx2ouA^XK{>~` zQfhh-tO5My1s9@{XoFbv7v@Vc!un^IGDTn(kE<))cU}s6COnUqwjX>cX<^<}<L?D3 zWA&fiP|Fbmm?~q6Lnzevqil^&aoIt=YvwRV#X8-JMMN;0;N(Q^yI*&D@XpHg5*DY= zzVVndRv4J%Sw)<e<ZG+!HANoeDk;V4I<Z(DLNKCN5=*%BHG%Ozpa7spC@ai?YU-IJ zd)ZD&(U%l1>(uwq8X8y*rX#iPh@#n1cfDEWa8fm&g9N>*vq6j0yM>vbzY=FqZ(l8Z zHusZYkpI2Api&?z{F@XCI$C27DdP1+N`rSa)c^Bo^3Rj22i%1U%TuN*-LhZRztB&) zrR-yJf;q^oka)vYK}K|D<ROcTuk{hEl%nxsh3q>RN8td$*eim`I^I`zoW<@u0n()S zEv@VzL&tfVdEwM4n30J1U~B_SWdCO?zuW0S%!4=y5aA+gpl?L%0263olRY%{fm}o{ zhkQ*D|I{e7a<ByW$#~Wr+(d1wQ0~zooA%1TSiQe0o@%q5YO{kK>_|4a^eZh;eG@h1 zJ4XU)oCaw;g}+b<i|Y)-2)P+_*fv^T6p~KeAR|37Cq7BZL8jKSk~uAuZf9(RKpjh% zOCE4{UZW)(!(ZUaV3xC78_bcjH@W(JUUMQG+J33Ql}vSd(Fgvt(bfZwai@}uH{E&J zRVnJ|&`}dMj*T3ZWrpPnxc&&i`e<L2I!}DtnWdik6QXE68=zCGM~8=gm_Y!^a=akl zuYV=Zi)L07_KTgh<L>`g$Yc)(+2HFhrDIv-y^6#R&Ts^6+gvAUkRad^yMq+*Kh}-k z<eo}_yC+ht(3*6K0~?m8EK$Hx<V>zv9`iyQ9f$o<1Lg|UWMJ>kC>amm^Ml0YWfjP2 z^nFkQBL1523j}T+q8VwXg+yQme~6GeqB26)$YlPMg!MWGV@Q0;qT!&|rJo-Ks&VYm zqETxb%>}FfdmR@XX5wy^8Elzd?eTPcGaF7gJy(D-ns3@P<E$Tg%=T}3D&*5d&Q3V= z_CEd7^>_*tQ{t1i1kgR;Jf>EB!rs8GW@whn!Q*#b$kfq?fViDW98PYLieDdeqjUWy z-BUqOmsZPp(Y5H60i9n_3KOl9#3}@?RGtOe!4_8ZRBziTUdVFi*CXU+Bx7}VH1NgC zrz}Ul(UwT)yDz-3t$$O-Lq1l_@SUy@Ajiv1YsB{7w|1Zmd616j1@{&=Ec5S7YqjH? zwAeNAH@2mb;}yH8{D?Z+YqDqkkUGIvRB78A#)<B~#oRu8=gBu$l4z?5=KpHp<Qw<y z58m{6*$xpx1ATTj!CQTOm&`6<z1;(LQGfKi2~2Uy!v+bQCo8!$)n$t<AGMEoZ3!is zZ|(!Z2yX}K{dHw?i+CDZy3k243`3o%7k(;<9DVU>QJ)4E5KP>T@k&r$k*SkqZE*Bz za~CH&D1b;CgrL88@5-xz{GBcEPZ%uuH)9l7)jr}c&X*S9E$J(nj$JIJdVSbtxJ~CD z?A~1}#<y|Ghz{!>VzT+wx8Y04y!SZ2CXqv-v-0OsmSjhuIJr+5D8@_Vt*uQeyybUP zQ@je!%<2luSjphbWQ_|0iG@>yJYBIweQ=pNu;e)%Uvl}S;A>E<K39e)pgm<NaZ;4~ zck#P*)P|^wFFc?A%W^&*NAbgENm&=qc{HK5A=!}nAc8ga$6AnZ-^%_a8<dh*hdxkS zMaDqWp|HSA%1#6ez)}#-^YHGqlEx*k@W;)qS3ba+1ot#zpU&20zJ;YD?hO8#<-yha z#P<M|j^%>EiKErQ8^OUOd#w*RuH{oP__L8ThD$rb8^1$8<K|md*723?96r;6?Gi)L zQK+cRC>KvP5{g@x8bj?#@3cz=SCH@%YMSo^zP&?O5*;R3WfSrcb5w@h>y6)d<~$+f z*)Kh8PoUZh6{=%t<G0nBXNeT%dic)(FlQUuJv}#tX*nFyQVGNK>An^k#TJh5YJw4_ zTv`mi9po0~$?aUN%S1ONWbu5fQN3kmmA#bpLa1N3+)g50x4D@Yn{AsW7FV5L0u7_) zHyOL6c;f#UQt#GqrNDmFH|p>VFv{X(*fRvHc$u?gb$uH=Pg8)!DDug26Xp}lVxz<> zsuWz4Pq8K;gfpBK(gi$G^zc-3e2W$q_=b6=c=9qCd+zaxADq|fBwigw<5c?pH_)a^ zlRSvw#M7?&6$iKI^vR3RB1vru(rE`hs6+A8$-5Knu_;agb5_jJC2X9>HQlu@S>+S! zIy2~YDr&8FgIyYuZDjK9CB_CG`p)@pd~g$#sV%8~$x^ikSPJ`t{5QS2oQ@~zYpyOU zW)QlXH#_z=#@|}}TM?X^i_5jR7#KQAyaD5(mpCLR=ocn5F;GjCdkZ(mTv2W1<;C;X z8T(J?N^0J_Z|)>*V5GENq;M`vw;S$|$S+ovxFGVKfR|x^uM+?U5s4A??zG9a*3>1u z0%2D6l<{%9_+{Y&c%_Z(A8qp^hmO^fN~*%f%|l4v8L(!2Qwt#+E}M9w(a1wxDrpM9 zZ5r~#F3KVT6x=P*p?`4N%;}4W^2>y3PJ+lctztHN8+gnwyYFrpR*)w?OJ&u3DW3vI z`_5J3i?gUw9T*iZDH}SR_cc>$;wFad&?t$e0KQ@)@{h&8`AG|~MO~Uy6?j~HYVB)x zgh@DzQb660+V-`{@k2U>{;F95P65f~FMYLU{~NG|urg^g;@`Vd=o_iis)~9|pxk$e z!S>xkk>!Kl&1m-|E7ZJ@7H22cjo`VrE^_=YdkyjL-cqth`hf6(P?<z?qZ0dDjVHzR z`Feq@VX^JFV?qY#(Cau9x+%w6U$k;RR}#Nz501W9jj%@!c*GK1P&b@@ySZ&=cT<g& zREb#+?tE#U`K!x{GG{w%dfkaykbf?oE%Xy_i#n!gbckT(z5v#Wmno*aM3sH>SOL03 z@E-o~p|Co(hlmAdNG6Dgs=r=_A6AAMyV1uaLh^SpAt@<kF1sA14~lUc^3FDsO!o*M z?N)Q}bT#)8g}CPKO`HK^_m^|2`cAm4suZGOcEP|j3U}y1+Z3a`qKP`&MNPZ|y6?c# zHmkr(Obh<Oe%cWKXKd{>0RSX2q8fSu#y0X@EC^yWPZ^a3_YcW}m-#`Pby%N0*IPxv zZ=)rW=}R+tvlV0qiD3S1G1kdtg;o#!3r{a6hkx0k*f+;-$L>uhJe!L%?Z1M}58~V? z9Mhs`?BbG-_|a<{hF{hAO^>&YO>8M1O6lS$9?(|85bFP+{pxvrZ7Kexasj<Uyhjl{ z!sw(g&jWbpRy+vX>-)*#OC1lo5dJD8eOz2C6@SD7js@c1?-zA1D^Quk=Hk~cU()W1 zQa5~cXJJA(u8A|H2oBmLaH~CW1&jW+p2OD~OFOO(ly6K#K?lfLL#|s><euDpJgK@` zBTwAmA@z@!JsiosCXPl#%t8vTRI1{ipz@L!-fuinBFIeMlrMhI(3(86QWkQ0d%yno zo$Wf?S7Nbj5d}Q$w7mNMiRb$2bY42#rEbkvwD&5J&x1b`Z3gT`ttY;oq{`B)|4DvT zZKYQK;1={s9LPz-JV-ttFXMa1gA$T~HO44(f$j}e$r-~y8(w<*eRlLaK+;b;i-?$0 zfQ_OddGrvc8tGj|J3@<HnLMwp*JPssb&WyRRG&cNN65&O|LdI|NJ}1s6Wkbr6O6L) z(Y5tepmkcc*ZA>Bh;A9#<8Ngwy4;IZ<{TWUFIo46s!iekac>)=NH<LdT~M41sHXKP zTXp1EJR!>aCMT^!DdG=uv<P-}{yfJ0{alz!7vg^Khht1Te2BUpTY&UV#AHCYmp`r^ zB|2beu+4Pn0l_&wmSx`W^#-VSbedXojm=#>O<1tam069J+wimA_P)mimr6~8kHwKr zS(S-=D*H7PkpoJrBKU83iwqaWb=(e!VCvWGj`hcBh2F{9eFEx3R567Y=bblC-~**j z$yu!m9IFGbWT0iZhKcez1c(>Kg|st`9=m==X29n!i|a2!(`t-b<Z1dG8(T`q!s0GA z)XL57oVP25Oi#*quk-x6-Ib#G=Azfzk5k1paTxSlFPVWQr;Q~tk9dloAS-n8^4ajP zV{84Xf8#WHbab-0P#7N<v9-g1D+G`8S^5jbob?93o4>%vYEXvu%)4UGQuT-Z0W@SC zTYe(V<C;#&r3z;3_F%T78Urh&w)ClSGszuA5r7&!mIbO)R`qm`c@{(2_kv-7?1xkD z3FQMe-8!}SwwD$E()^h$j|L?TpU~fW4x&^tYAwWvGW9L45J`Uxad~&A|Ke__N-qKo z25p)QyhA%eQyUz&!-nlOu=UN@VZMdFjOcOca1naO;PU5*9O!kF;UK5MA0Pd8rHpXp zAG6t>-@1P-`p14+z(q8GhWF>ywWFgHw`-?sj=h7IhpQ@<P)*e5{+$QIZPDW1#_tue z!<6EV&Fezu^|k3NRJ(}beXU+K5^HSA>{*qeL_?WwGURl4ObGK_92Jt=^<G|A|5bQz zWGKiP^_IGVJG?eRo@?Pw9P%TeV@O^_*{QN%TU5CiY7w9mql5c2!y#i@%9lCpk&}-E zS@bHc`|m=Py4pfEJEc?u@nX&kbgRwJhIK&}Cys*>+vun-1O4jtaxFh-D&mg=<m88Z z3?1RHlv5(=Vk6gR;`8kh;tlJmzh<6WFaCBown~e`x+f`0lV&Owjrw%BU?o{dla05- ziSutG4CCL_XG*q(3RHbeZ|Qu!df#_4r&w~V@6`5g*}74+EcR?&Ghgi4S){$X8dZwG z@grNVSX<dw1fe<fQ2a{cs}<vl9e#=M+|wO(K8E5pO%O?IbqRCoVer48TvcSs0e<#5 zYGfKG_7D9c^Dh|ruT_6^zsguT#D#-;mdv;4T4x%|AgzfawH%gU2AAnSH|d4z5t{Yo zGvUT`pW}2dQ+#y!#(K<^f|p!E%9$HEv8bQLY3?O3Z+^=MJB+Lh9`!{%I5Mf}L@%%- zv-bA_-IeDTh-z6Z(jA4Drw397!0RTnWv)*&hTEr3wy7_L01pYY&KSr2s%Om{P0I7| z&Mc)1u=eN}8eyME$vF25j#V*x?9ueao|x_jVs^F8vZTBPU0Vm?;lvT(?-8sdx=aOk z=lY1kviAy&GD-)!oH~CN8>gK(+8CDGfc{Cjhp24aT6WmtM1ykmAOQ-k<2JwuVq^E& zGD}n3770yyfrmx06L?~7FSJVez?d<bAeYsOOwoZ<T3p@gGWh+J3eb<;!J+4~iZEho zyV$$A1Nxhit9sb!T|&x9nzo;|-E5Pe?nhNtZ3SP`27|)c@WeSDL$BfWOPGY$pE~f} z1DmFqxZl1T_RbhGuw$r_fwL^zv3<aZrcU@_w)`JVC2#B(I%QS9$HD_0d?K)WN%-O7 zsqSF!+4uvToz*GtXsRA3i0l$EbVD@5MOKkU?Hhk8&u0eG;I`^QL)xl6$Dy=JPERu^ zoA721&m-L?R3$_%cHwcgfw==ha3+b5Zo8u&6Bf)9&M%y3(%Ek|X(6oDK(F7MG}$!G z$K4U9tvW{T?$DiQ`jpSQ+Z;`1KmSYX;C%cC<ql(OBE#!-J=2DAL>vx<Hf*)f5=DPt zQB?Ki#Pdi?i$*V!w2MVGnpa~RIu0B*i_w6)7_V2bK~$(^j*snYw9~%z0R+I%L4<z} zAmJn;55SosE{}7k-5+)!*yTQ51|$E1%-i?(<}Ht>RS8;*uUgy2`h0$XXgXktW9(>D zx#0TtzNs&Uw`t>>y3Tx@#Ru<ea!mH5F8Gz!j4o7KVkeqiT>c!gzkMH>pwm;16~0Pj zcNyftDhPg!-LU9Bqb7N#-!}~C{!6|=-jGEp3Bo@QNjgW`r<YecTIjz_DmZ*zNFPNk zsPXOM{bE+z#2{yUY3{n!2dOM=uCIr<ykGeQQv;UEi#=kqZ3sgcpenodmd>~VHSsTx z>{};KsMdDlBa(u_Qi?BMa1l~at|UZ%;{S07D%10TjVSW_PQCG=Uh<|~8>b!~t9P(} z>91Q%UyjjyoB6RxG|g1Q`l!hQ{@oT$-)q+r@>}SKeRC76Okds80TQR<@=yQFll^R` z<A9W1W!}isP#AFzfp7%eR5o21`F>?mPGeQ=kw6}vA6knubRA5#l$9!{mrYRLls3U? zI?Ar>XV1Hlhsp7Gf72m`p3ABHQ0Kn$U6vZo9vt>g#r_Lo_?*5I8-lH6fjjr|z!*kI zSJfJ@O~;`uAq?LF?&f-aUE=VA_dp&O{XH4lJeL9@Wnp=&^_c(KXx7zO2L<ZaZ4cI+ zvUoSqx4enP_|jKi#{`t261W>t(zR+O7L!t|PsgvoV|gKAo}+9;4B)O`GkP<|EWf`6 zh0Ub=!VtokDfaA`@BjPSa(<wF1dK53HWUW897M@ocK@OS^S9T$HU};~Vz&z(3W`E7 z&}ccr|M++E%N)#@7Z>W%8Ay@laxz{ClIYgDk(McwE?G+xjXWjDrZ&>dM9V3EulcRG z;UH^W(rDLeVYbCNr~|dL0iM1}Tz$=NW-H}}KerJY9Hw0zZeiQlCSwaP>IIIMz8{<Y zwx_W|_QCk2vI7Hm$Vv!74k?B&3?P&S2J-N^q3SzkR3&%tLKHrc6$xD&FiL*gGlZox zi}=u@g}o^~5bK^c$2tK8$~Ou9;#ud?`0JtFaZolqjcNPLYYFv@udK{9{(;78ai>f6 z1~$Qyq&Tff6QUn<b*V%#KXng1w@wkEU-EhM(w6+MR3cdF`7?OBZ%_R5CEj;kn1e}S z!0={15d6~kfA)%|^;$-)zZf+#&WVC<bga4c@vM*bvhF+)Lu^Q!-`IbQ&$bwkUopXZ zrg)mF+Ga(QC97p|=NY_Vgrg-Dl5PZD+G;;<7@01<f(aN_rH+rJu_+5Ic@<aN8I^VI z+j4wu(&bQDruSbHi!8sG)8{bsA8WQPj^pQ+&TdT*IYG(hak?EbE~D|2`?vPCije$- zO<`Rk7D(dxyyf@Ei#R6&RP&gJ{_+KBaTn$phk<9c76I+A1xZ>dKz|GBEF-~Tn!yRZ zPSU|!g=?c+a`51D-mN`A0=(X)#oa{6fY$Qr%xlGQ{wPM=ta#}%vnp<N|5lAeU|}P% znCcDVEhp6`La@82uP>PHQ{;zs(vpEw6C-oE%i;o&7so^Pkxj6@4q(l(^_iFE%$R^g z=%FxX1_$P6Xtu+u<f(tk)ET5s>o?h#^K34iA=?u~wP0*eTHb03;dog1CMyR^e;G<6 zu&UO-z=?wFqqPxdnvwIb#M`r}Nqq<@pM+hEdE6-%Y61<&j*?o5cu=2n$WZQ9aolYT zVB_E$xL349EWB@qd%kn<?D?egp4+L%r_2FH0Y)y>?<rQHcZEA=Q@Q*`qXSzz$$5Z@ z!v0Y9<XseBnFOe=1O3~)C`76frsrc?9DB=0AfRe5bSAT+YTRxo{rG<I^<~X~vTFR> zbBtAI=lUzcG9FMsx0dnK@m_by^UH5wj@)QLe6!K`+U)k1@2Yvl#T;cI`TB24N0lpE zKuj+`xqxC1BwnP%$^WWDo?nLXxEtmOPcOe01~i-w+I9dy_2u#}y++Na#{^ctubc(r z+f3Z5LY^fAs6fvMd`s+Wd)N&xcO}X_saDQEf?Jk7va1WaC#<q>ChZLW<&LR~w>D9< z`1=EML$8lvv!tO~+fkccMy2sN6vUT0s<|l>>SMQb?p<qr$_XOlBwP%2Sm$C6keh#r z5h|gdlg1_}$^<ZC{x0!KdWwCKG?}C;NuGvv2H@||ve~ZR-|FaoAb9lCOeH+`kGR%d zn!kIWHx!dplP}lH@cPFAd66g4vt;)TK~DQhmASwp2&T<F<Ds&MDeHRC8>3tYc|6-u zO|-<uYgjOASJE)>jb2arV48o94gc$}UfOHZ$IJoW$zQP)&=u~EYsfrJfOlV{hL?#5 zC^ahRdc$5VG^ChGaNe?0V7<_a7G|1=F(NZTgE*p&3SUL*0!xS1!n)8>jC)Bwk#J7d ze@i;obL5RP)*v=DICkkme}XD&ig%8d3NDq%x6wj?MY1xJlI&;nQkWJUwgp(JSl|7i z=5KyiF)wf>&5bA<bZCMjnO7OL^(fWw?G3DMOCuoEiOExax6iweFEHHO@0$nbgfc3s zp7`SoZq$yWPB-DN0?m$XrHkSW!VaCM^6*2qhgVwk-<;H+1O;)`prz@d?Xz(S2}D!h zOIsKK^bzcLe_+c)Fm}kIYD&9D`ml*JEg^o~2JggSSFGw>F^fT#j`1(PMKI^jcW!Kp z)&DE4w6>D^>>6J`g-O0YpOqu5F=~&FW}7tOIa9ypR;V2evYn_;ubU-SAg6>cWztuL zw?Hpt_D5AWgOXUkc`?ev!z@xh;>Ce1b#JGx37^?N>PH=F<Z(msnajmNdH$-({-*nc z#gd=5W;loKUn<Usy|*Z$`n;sBY`YWYx|)*q2Nr%zr}RORR7CT>&hr9uJ5*d6tKo?0 zb%;9crYapwj1v3`|M?;|>X%bS?zg4xSt1^ksupME+Nj)%z>1{%y3`32OI{JCfXcP0 zj}c)s8e*QZz7i9(A9q*lxD8$7ocick{r84sSp6X$xzA=m^mTA8n4m#zmZ0{xO|RHI zulO?xu$P5@^lod7@cA~(?^<%n;;9jeU*`vdWIC3YfQ3tip`Sonlb?%PX8))-W}SN( zl+a}%lAAvgvX<~5B?$3F2+MEasAgu(#9O~P^+Jp(!&v=mK6($V<Y%vS@6M@n2s35H z6unFA2*}{0)~~Dt-e1g@Ljv98+fN6xp=GwsPTe;<=j#c6yty~9)yuWOtB%#ugooY0 zGSBXVWl%mKp?=oHc*$*Ch$+`|<pz{1Inp_o4W>ah1N#XSQizfEU478rRaNwV@R@+8 zDZQZCR~Bv^4*rkGgYdBVx1fcBlZ{_E9NmI|4g^1cpkoUH1P4oq3~0+VregH-Ru*_J z1o*D`c(0$rNqcTnt0N*xjErGUvHLEfF}|}}AZ!Y%%6y5-Vf9jx<`&?;f(}=CxC=@< zqk(l==niPI+`f`$PA_1;ftf~M%lN6H_r5pOO$ZX}cP(xhZ&@3}Wn@JxfeKtp#v?1b z(Ly3O+#z=3*S=4Bl5=)nfQ1IFzes#b*Wf&O&1H$i{(`u0fXNK%N@Wb2E02rm5Gtu$ zo)elos1bCGaqkg4GCq9$O$B9w+$=3d3@6+#-fN;hR3?Y4v4!V(l{6g)oL{3)r9exo z|7;m_Q(-0C<jZsOyz7x{p3qXjPWBDH4IQfoLwZ-*^Nq~e?zKcAd0QFr5e)h?-Nebm zfpO%qRdmn_@IkVDr>yt9L-{k*31fTBBQB~#@k5BfJN#Hs!c<s+<kr`m6EvN>cfQf> zAug6!D+P3BV<nnNTpy1=d0t#6&mL)VGE1Y7B6x=10LymYcAAqVE@v|Qyv?uX&){Vn zu8@5P`(_nw#gGF4_lEC164U?mf3#uLJsapxN3CM~L_=$8%)q$REG4b4;IEbp=sDfF z?*SMY<vX92Pv79Ee@s|BlJhUR(2<c=x7Lq;Ah^{J@c8o{esa|*uuOFswrp3)20_a8 zi{Gu|A0IC?oP2I7P7sG0Wq@`WXiVpxTw9)S%SbA-{1H^z>t9U<VY)i&a`wl5yCRSY z*~uGgL2mBvc@O8IkU}T_N<<QDTL98N;s0<3;_HnuI^O_3BAxgk>-L>JjkqVIZ8EDj z>>YO9$SauN+4+7ttyy4wqlERJ+_@Bz(fs^}8#xXY<Jo|zk!Gc=p1ZC!+6Ov71@S16 zws0fuImuN=ezV@J-}bBy69`^#Sh%{c0j5e;ySd?r^;&UH&wY}OtUz~0NuS2xHWN>E zp18xOE#c7#z6KLUGb9E7s{EdV<DMMj#OvL*aC5w+B6KRU^d0mizhTIG;b?&}_z6g? z?~H4wtocgKs2Ea137Y2-2Eht=Ut9=2et!K-ZxfAT5Qg^-qHD0*>Jhi>zdQjmN$OfA z9s!sv)41=w*Vt_x{5<~Y<1eKgvrO5c`X8g7uYY7impyN)l|&O@HOfm=qqnIId&Qxi zQBy$``VBIpE97sliJT`t9!7tJDeL4r#%wwpcEo2ex46_V2lISLukDIc2%?FgwkE%e z`RwpJc$fCC!5d&5n9~qM=O!r(TNl@J@&MB3ELNB+V(7b&X<tMI<eXjn?d26^$@O0U z-gIc|7MpR|ZDBiD4XusKaQ<PWGV^g?THG8pQZtCZzM*G~aw?;Kaf~Wy>?41&ZRHvX ztn54)H+BMnMhQe8L+K&OGI^gQ>%==IWTsLaW6^w6!1U$Wo6IgxMwO^7IvC+sUon<n zQT+Wa=>$p<i4HXQNs(q!qYEQ=e6K-Ay4_}(VjrfLnqwIBTDF*uPoVwv?b{j0kNjOH zws`d&?Of1+r*uM&=>y}(T3eZ}yF>R{UqJg~n*Jj8XmQWq)N>9Fe?8&LN@G=#<4#Q& z0E)<e+}ORmq4wTNvOVs)JUqDioHRq46DTEY@^}w<hH=P|PYlP9xHG+-Yw2c_z6PD2 zKHlmYuV(W4ofp%76o8jHruyX#S3UR-n&sWjfFBx<2O6#2I_g|+>RNi(*z_9ujbzCX z2}{1m{p*%J3P;I;oetHMjK@B(Lb&4%e<0l~txelu(`G!p&a+dDZBAKhcQg;+_5=3s zMbwcsO2~pSRn+KQS(R7B7qf#{VixeBtukn_PHU>+)ams#iLVbu*8|VA-rZ=OAZaVf zA?r?KQL8hLa5Qc5OIL6Vq14KF^QpuF6{Y38+>?2*=9)xQxMgc0JsaAtZGgZQVHn^j zChm4}0Ha39#QHS48@TCP`g?o;-v}q@5ANoI?!Ky0N{CvXo;}O9{H`hT>996G+x&Jh zdXZi8M%Hgaju%}Tif!}4f3})zv5EuzZMjBj#d7*Fjv!Q=Mt?Y#=^JiS$<H|KHh)1n zK=+*^@l1EjkRbeO5ZfkRsBt!r=X*flKrTE>f2RaFN~5BD5g>dYfh3XEJw5f(Z#IrG zmg#M0L!}>9R%<2e^9g#@$i<7z6swwEFUBqwN5ylc>L-vcUi!A|m>6I_<gY*u-cY9E z;iov8w-|f@mc_za?o4W4?D0;CYu3tm>z&NPlC38;7WYg%c6)>_t8KGfL6uh{L|^LD z{c$q$g_zz>d{z39QNV5(yK()*F4JB+QI%Z)m?^*pmI7QXJ_=E;O&B9jQWss9jX5iQ z6z2v!Chlki5a9=2AHh>=ecXi~t~ckSf{a?73;p>!ajT8nzQSHgic4J9Cm`su@-M2a z%Sd~!-@#`z)o1hCT1w(Bem6H8`fXoAkIDyY$un3{-J0^x_DL>7j&yd$w$<$Z{gMRX z%GQ{_>%>rxIk2?CYZLAEM;FD`cl{O1s~)o}=eO}WtNdDzZ>*zrCPI12^^^V^=FIz& zxX-<dKZ)TnOG&(=kPkEyy-me#b=kv6JReWQDT@*oB4YvCzEF<zxL5~$QqZ9_;=Ce; z>C%4IY3V)z#nn&91^*%YHrb-jqbqtmgz*|`8C(k_ncfthJ6OOI2FrDgh<iDK$uvBu z_`qKVPS?spk3%U}Lr|q#*6F}KOofD`amim$U7-d*f`!A$XnYLv96(zz+d+<383<qF z89H$kDM7rHu(HPnc}S+r@f(%19lY|MJIgnQC%Y*$1-V!xY=D3s-1Kfiz3Td3F<G%j zXhJ)SDSN2n2($xf^p0hTy|l$oE46__)G<@1_43CqKi|(i&7W%E`M^*TT9c2NHtkSI zCxJJ_sDftgz^|4xIkPm-ICf;Y7QdvV8s?BDVdZ(6rJz!`iNEgPdCDCuRz~{Tr>M=| zQ@u7M0MV_m=<fOr=29i$3&Fb8`IchDu}A&Nn0vvg#~M5i^k2;9P<C*yUk1T0!d9Gm z?xz(b{w6hPEL2_|O5D-;t8(y*+&{rQ1_XM(_Ix{Z9KL!`p9AF8^>nLI{~29mr|7bC zAKq=OPFZOF1FkK`^wq<a$fl=GBdK|TL;h96m|Y)rz_ls-yYj<=pJ#(<g-a&_;H3U) zb%H4PzLewMvt7k^zx!tFF)v=^C~#W;aaI5I{LXg7Q~$>?%SYw>>jAFn<Y(@4Wg1zk z{A3^&zFaWJ{jH5@e7!*mv4z@SnIXU(%^=>VpW_cXFhWA}08(WX$yYiDS;7Bl%?|(i z@!-E7KH&EX{M6<z8yE>PtHo$dvfhT~L<ANt{IN;WS)=nm3=jMI1{3`Wr-KeTm?A#< z-CPlENRoJ;f)0L6Z9m{1G$5Po6V~}WhEHVQslk}c+h@uS_IdXGI%$|d9U*GmX+I6b z3=YNjp@m|3n_c|00zN?ols!AHv?{ySQ}{5*&*u=2Dp)(vWNF;1NCg&yY!?H;xR#jq zmnQ(pv(&oMivro2bb?bm{Nit$`{p@4zE9nC4Ju&YP0G+8crNrOjh|Qe)7l^bPq89N z8T|BLdnWW;SG<C$`ak7+7v42-GzB2U@)=~C0y(8G)6zo9XbCbnI@+}Ps@Mw55s_rn z2I!Tj25zo0n)*~K=oy&3E6L^?>shA(hCixWS71igU01snTyNiU*<{;<5-+lvWrAe} zoA8s2SZr8UdQX@!EA#a@#$^9&*~ta8LaBw{M?~JdY4tds$_h*+^c6!+@dZufK73<$ zPdHjb^+4Ey2YrovKRJv?b;2Aw76Te1yAc5RH<sGN=$n2fak`stYcaCj-5bQUDxIHB zeqvCkTzYS<!21c+RcgJqSzdF{I;7v6?Ua^_ZojvUVFPgz{*}TIlUuEiHqMDWYOjR% z+|HU$V|`8P0{%QY-1^-;rSAPF86r=~#{tM57p&<zYJWlJw_qAs4gf7OcAbQCs3a^| z=L1uX`Y*-0ez2txsta=&x(pE8UM+hHTwKg^sOT8YZUtwPJNY6-rmZEALd!u}sYZ82 zq@}8|L$vNQQ*f=X)JK-W=B^Ia_W#jxr_F@g_f=Hh<)N=-OA<qY`^W4k9s!<Hk(}QN z2YrQCBnbf1Dr$$zv~=<rem~*f7~xK$^fj(@qN;p-D_}$7m|RH{%I~){!8Jn=c}P~v zFt^RFudmQi-Ip)^#E$n!N2fc=#C?lDO&K9jqfI3)|GhNJ(P3gvrBi`^%tc?aHHvBm zTnz0%^+|vW?}Ntg8LU3EQTLtRpF8Hui*-N$x|U}j<QYpng!$1yUur1KTLo}7%y01; zD}EIZDNKoODE=l74BTs(r5gGjbHK{MX(7k!E0y59=jn))w10p8#B#7Kw^;;VzMo6T z>;`_?n}9MK@W*7?QL-<Lf)N#BYT9vNP{FhhE=JS7#~s;(rJ}2$ntHE1DS|6o{M?qT zmo-h`#Gd#Vhfm*fK^gO%eY-u)Gt<|j;w%eSVY6e?i$*fsL7M}ie!6cmnZXW4GjHE7 zC%(kAXPldwvZPRNbQO;5RH)e2@n>S|*n-T>uiaHcmJ|ZK{{-AyhN1YEo^=>ql<+#m zr_JxW-o4*#6D-W*`^}b;$yT-1wHAUS$Cz({!NC@q60o#MW6u(99qm=xdDV3caWWC4 z_Mg$P95^GSc``nhZ89TB@5=-_3$0BKYI_2FE-H;OAF5`@(v1V!hQ)#=P3+^YdLE<B zJ(9Yd0!H*5j`bDcVpmWW>bD!hM_|!qm#1orF#p<1_#_BbNgXNfYTUJTk^*eG?6pJ_ z*nW|;m+jDQ>vLXAqvgz=b9n%fjml5VyPPR6!}nXeuK{UIgJ~b{f!!dyML7<i?4t~& zpb!5BZ2s@>s?5;Wbh6|OIY0PF8(6rWm9&C5v^w;LBC*8LerE!No20YejotQ`>T@>w zd^NxoJY@@gWwG$C&(MY9L@p>!|FS$unI|mTrv(hH*NBYGlU}7Fss&KRRVdJYA?&XS zXa@>LT$l7}#Sx8*=M{XQ=VDGarRYB&|0baK!;ElT;xnbRV~YqEWnXf!e+`NOoLj1x zeLty7mdcA(r6bRgb;Bpe1NRtW-{R}5Wp~VQO}45C+uT`=k-|3pPz;NCnO_B@&i=+w z4C>4MLdicrr;s*A`d6q0am7R)lC?@*SwuRj{p*Pf&#_N09U(2_)zJs+Um1Txs$HLu zMc!41;iGEVSOrzYx|8BwT1pi%+{&u-@^NOVV!dG+UY<D`DO|xoFmEcr+?$ZZoPKrM z$%?6TNrOw7jjip(0<8CSz$Uuys)-IIjfz$s%H{kVlw0+$^r^?p869A~Mr?1<t%>Wd zzPS9&e9&fX|G;*8YK|c5df38}$#Bp*_Z5d7_KNnxX+BF5(VnFiLr5haZ_Y=p#UVaV zS$wPNwU6_G%IblGJkxyh2H9zB`f1~0R|dXcc5lPy%X!8{A@NBnYL5?|J;s|;(tjVe zz!FcN$^^;`Js02QdOqC1HS=%3_%vYdP1vAuTWSr~ulO94qF%19-re=*O;^>3Z>MOg z4y-_S^F0HEuWi+vNjU|_58Nh%=KIs{&SDHLFV>-Dn}>}7PFrUcu|Js<0smzmNu$&6 za=m##O$)!z)62p5=@4@!8}q9}GJRo=qRK<No|N!gV6W9(idv=;SCLP+wiF>P0RJYo z5f#Qqq>>#m42aw?x~neKq|K*cekK|<f3)h@!Qhh+w=~!`wrSDB-Yf&9GjMX>3nfb) zfS(@NoFA04l)<49OYBR<x6E9y1yOC-V_V-GSLbOA&is;huVcRB()jqsntqV0#&oS3 z?O(XwGk_lbr<b_4P|ZnYaDr;j&(DgyqD(A#fbb^h^>gstagf2FlWsuqT2!zahHTT~ zIWo6YYm$<cOsQp6IAi?5TnT?!xD-ZOJ)>lE$>?}{+S?R4Do9>yoc;T2A^ONdj<P$= zEGM~1!!t?;6`*#ymmFrOv&zf)^Y<p?=|X(vYgU`?(-g*63C-SZMc~ES>cx&sYl)2U z3@XIC5VK2fsuJ%znH!A;|JvPW{y{RKeGz>z#1r!J2kg{@MSzUjc)F4{H)|vrU*BV8 zUV7eRA+KK#lZr2HXV~Njen3EQ4B>uMwuylZny>Zo*^vL?o0)-hgYWU8e--r!{I7ji zlUFLVhKY<`Tu-NWk8XLj-|knMyEShkm#iDlzo&Qh$G=lfE1|txi-Z%>7fPIEPT1hY zbrF_uTMBQkS=u8I;xuO&3gvhLOOx7sjn!Z*raY6=ymv)il?D}E#qaSKd?+hB)B+F? za?SL>+5fCVQ(;0qp-oii+fedyr3$db+*llXo5WqQ7*VXZT=mX(!+K3C$1g3^1H*)v zPZk*P-GC3jOh%Y6DWvCuZ?=FQe~Vij+kDFkmVfe_{4u<GTLyN+*(ektoMx2~7dX?A zgB(sb-{c~^_l|A=(oByTT|qjQ53~h!Jm<taK`!lFi~|GDP``*&K>gE1JLoo<&Zo4! zKGiO(!7R<>7m+9J0DGjcqw2l~t=-k@N$i({$g&7b8o5uwLl@!TwH#g0Y7XZ@@MoF2 z_GNoB;*hW0K0{V^2TaI?Kh|h2&%eevLLz)zA1`~8fID&{5DBpW+3Otzj`Z$<!S7(l zu-e<`Rg^5ET37?QJH71N&Fb7Zxyyw%2_9t+K0x{y(^^&TX6gqRz`^6sW=i+ouf3s3 zSL!%JYeuPe=}5QB*HXh{MzYXA%+Fsvd|${uO}CS^t~V*)?l$|<%=xOc*l$SK;dyG@ z$M2*B(w|l}w~vf_N}P1gXdfYF`hNR7(|@)-%YL|-lNR1pHd6eCaM^b}B^2vfKhiCG zo*_#BEz2NaOQ;dLS3hzkJ>V>xXBzEmbmw-Oeii~t-OJDCkwAfHskH##3=bOyTyowt zo~C)+UB8r;l^)CFVG`RFnox@&SxyzdOG+p^<7j;&w!1h1GSc>>a$x$cbl~K7mJNTZ z-xVcpr?6~WB9GEQ%Z?r6Q%>n_t{1a9r5F;|y}239x!L1tl@0$Q@A)5B$1yu9o)b5t zxJu49%nB(2y}|IPPc&h?5wc}8lh{gLq?<<P$L{sLmk(@Q7F8LS0FgDb1@7i`V<5@Q zki8e_L*_9CiUq2bUMlgtb#^-|C*jgdGQEL5BD#YyveU9XLAlO^G1Dpj%yB?qc)NYn zeFPUdzft>0p8naHypA)9qi5T)9xeqyV>SK>+d2gtW`Q;{7-NW$>7q8s^da);)_xQs zY-5X;*s04JT)kg5%VXbrpz#^gy~%)a3wI>FP$OIBY|xq<GNCK4KWmu0Sd1_~da`Bb zlayv3E82qiqatY0l-E6#xQt0vAUO_v^_-{EiOU@AO&4^r(JR)cQd7htBA`>t*hR<G zlswu43FupxAXh&<tquXiGP3S>+aA#`Mqb-Dg#ddzcT6cjLhKK#*Zmj`i%g?Z@AB_s zS>rh!x}B2CfIF43kZz_w-{c_rr#Lq%roQp;6wjX9VMy>8S%hDgTxGU#v4252D|z54 z?UNW_H`n%bqXTk@zqm5A78w;Jc2Ly_F`Slp>E^6({)AA;-wvw>G{~FZZr7?QM^d>e z-gaMVIi`o>IC0LZ#BGvK__cQdPaE@*e(mSe%8<stAO=K$?eXnoWY#U^>a|q@`D(d1 zVhuP<%b|DB28XxuKZPYIkAYVIPZq$x7S0cjJik23ItlGdlZG~o97-F8tnOh;H?NGC z_XZTLNiL&5uCE@;_|zr`;bFz$TcoFbBy7?9y10NINmn;kjkWy+r}>}@ecdB^b4k5c z+|2p?J7mNwu~Tfvc4_h;DoiM$F2W|?aWqO_?y>tME!aw#*f)1(4)xF`g^0+slSes8 z*n_Z%B9hpSHU*y(^eot=(|l50OH{4jJLiW!&fl=7xQw8SYN`5i9#T~pSW!BnAwHk5 zhtlB|FS?V6<hO2*h{H8}*PMg8Kf!rTwT#-rNOWif>-5Q=Vg_Hc4BJ?quDc9=*fbuT z4%aDfswI(UCngXpU<t}e9SQpk#010wpVaqpZA|i~scaor3uDpAlmx|8fN3!COh#3Z zj*F|P0MjLe#&>hhAZVm*$Mwl?Lt{2<O5C)T_148KWM(nZyx8Yw!FPwsoaQX=jP0Ed z#Xgx-*Utzh-?a4!v{x<0_o2i_i^Vnxx6^@CI~;S-!N%NP$Y=>w9EsaZ-oS~-^6Gdm z-wDCpahi|a+_!Gv+_ak3ORL6?8VpfXJna`xCC!9-{{5jfgr`~JZ)4s?Rnx%zQF_f> z_k{7|pg_~^-)Z0pB%4k80fG0JW^~m)UrySyl@Ecu6c?=bJjV|>L4{G?<{o>2DdKia z29O)1-5D$X*X!^r>)ceDZe-s@mu{vP)>=Z~9icCL{is7?^i~(*B585ld8P)>FpvM( zXg#5(?(>%r8SmfYf2E4tzus{Hm%<!-*bwz#8u;%RcBR$(anC36_|RlablhIJtQ+-5 z#D4+>vVs$zTxGDiFQUVfCs99$>pyIKc2Kve{v9U5)h#zVuaqPzsv%yWm0r{+n}}8Z zxMsY71HFtQ2_6&yO*U$Muta%I@i*f2aPC6hAII^Vt*uWpbQoQcEQuaH18?Y{(y`s< zgYzO$UJ2xzs-<p7-h-N>(Pm2<K3{g1hMJAZ``6S?0JNhih=z6(Qq~E_TMXqXmM!GP zy@jsd$rTv^r6pKyS>;cC;4rK3C6&tFV4b%l<H3u3INI~fE<mRwzl@7(l05y0Ji-U^ zGcG@Q!b-=NDDfopb{T$UgZvm898`wK(LUT+!iFk8eax-~4>Fud54dJAts)Pt(|()I zC=3-2X&VYfDQA8;TzKdsia`Q-_HEM#fAOO*sX0kQ;QTceRBvRWgE5lVFE-vf8xMWd z8n-t#H#!a>cwO?QD3Z5#%5DWJoT4M5+$US{DBnDW9)B4XCH_Jmk1Y_|Z%X;ntk^i) zvSD@<QOyqp45Hnr=mB^1w68?E{<a}6dB%P`@YM!rL2ZiT&VTo)m;LkN-(3!7JA4<v zqkT-uyW3*QJeo@I`EvUUxtbp@eEZ`Zt{w>e+kHAnSuXQ5RqDKRS8Sd$06c4-(p|BP z;;%+&YrOM#Gxu21LVXMB$9dJ`d3PGI#n}Il;H~154?;bqd<`L2Xw1rU()09=xb*9O z>INandDs2CPtl4rugtGbA-mv*v*P`yrmhmArp%NJbj{+k2gSj=pp>u?;NaH6{{&vB zaG;KEx7b(an2sGRomBiIb^X7W$t(|w4%df<Df~_L!`1alnuFus&_JAq&l!O@w_Md- ziN`;;$R6n)KHh<&NK&e2{#XhUUZ<KSO%2x71trM&P!P)U$u{Z|nwBQwO?z|Jw)W%y zB{vG6HmHoUsV;hAW|_HMt|jWb1|ybQ<6-6^x4{YgP$NbN_<?G*v~TXoM@kERw@6~{ zans^F=iehfDj4vsW)limUWo&r@)Nv?CT~2Tl3CWInk*j0b0DO;-4l)9-`L5mQ96ve z$S^dIYSl{eS24OerEUclcK>~Tn*AneGO7tN`RlsAj(d@FuaTN+i^s!H?_RWwzZpSZ z?IR=%ea@iC0ePm=_9b#>vqY}hgOzw9S`Ehu;tKzfUSSm(G9Y~PHD{XdYlhEaK1n$k z(ZEgZzjxQPr+pt4Cr$hK+=iJD+kDP%4wuG0aV*W<fPwMbL6;*k$c2>~?+*6PZ0WH5 zwTQ^n4i28_q47`%mYSGLh<K#!pd%?{>0={pba>cjZ9i3?;;)F<(KJfYhh7HyyTT#a zy@a4^3qj#Bd>Jf*ZimbojV@($@N&mNZHKVf!>>qwAKG8IGdhOemQX;8p>oMErj4Xw ziJMEB^YCW2f9w?CanmUq{zs=ri0uZFubS6*A3BXHenFR9E}ZK&?rnR3A!_nrp$Rc> z=xNygaC-o`Kkjkg2oJi)hPkoMDnA!ku97IrKmOulB<=+-O<$z-!}pm)mAj6wrEx;m zjJY%+H;^8EaROzka-$;TD}$5WOyHT>z}e~m^e464&d2fmyK`$ePyYQ<N~q6->9JDB zVNpkBa|&)wz^&7?TORVRX;xdmlt=ARYf7i^|Jj94@@t<bSLy5>(k}Diezd33k8%L+ z{diwAx7|tY`xkBtVFU59hs*gnXkpu;-l&jU>EjWM8ld`Ng>k=an*B{#&-$BU1ufT2 zI8hNK!22*b$(-RPN+Oi+EJ<tMqR@%qcwk1^QzN(s69gI#+;=$CoYhY<I(8rg?ONoP zfZ*2~{hU%=gGJzXpQyBF)c4*#Z=7ORR|6yuxLD%uw|h8)b$^L61M8PBZCj{U=dSF* z;z-l7N&JIdQ}eL%bFaamZ@8do^PzU#8#F6Jqagz$?I?=Bq-1=RSy%{`f}e)`RDc{H zceb6N)qNU7^fEZF+`pi<lfe*~egp4*N{RYz85h^<`_Or*u0<C|Rd#7c_8wZ95>p!_ z2SPboG#K%!Ov>4!RyW%;Hp3jeNTm<uYaI77<P`j|Wk<yjen25Bj^U5%lyBcXf<DbC z?ap0hUTW0*XWxcV@Q9Zii~E1^^`22pw%xX{NS7`my$XWTr1y@1f}o=G9;(z3Is`<z zKxj%YO7ES}dkIJfsiC*fJAn|&$+O4a`+V=a_ji6}+<!7MvaWkwYt1$1Ty)L!1y-xI zUUR?VCKk+Nvr+rXMiozhiw~mQw)mEs-m@tzzE+XiVSw#!2sLpe85yYU;s;!E+qozl zJzCrrn>>AL=nyBK|8lRa-egUWKBWE0LG|Fs<fB$m*f`UJ<x#X#o429NZ?G1`P7(3B zYQ)NHwJT&NN@yhA)u?{S1N|de1UKEKD`F=%As~HrWUH6oXEimn<nG^9k9#h7>B`3C zRPOY<5t9b_Sy<t7-e+5LK=i@z^5hKF>C)4k2=$Yx0jP0N-(Z*Y-LNEHAWzEY;p3OX z+6ZY8KH1mY!n)xgELbALF%Q&TwHrx;HN2~Nul4uBYl3Y6n{1MA98$LEv<`PX?m0NM zzeFVaUzN`~GCIakI)0$uj8d3l(sc8j15Pq#qu=RtPxT6*#kYwvhwz_XJg>j`Y7i$s zH0zN7FGGHHIv0g7RFU+#bG-WV=8qeY$>Q_LA@vtSxfaF1^sCxrBLc;8Z+#X94t8$I zir-9iYIBb)1+0E7KT6M=FWi@RV(ej<THUDeuOJjn2N%F%^+__omB4Mr;MAzlNnWv1 z4TMqRgom%4)%jy{_p=xNUtR4bb*L`<^{qw8C%hDJpRZNUQ<Ex$>{TX{Vx01J64&nL zEPW<{U#NGQ{`QIyL4Yy`P{>%hlJz&CwK+?U_sm1T@J5lu-AzQWb$N$0vw`>}zn|Mb z4H$=U>^!%U2|{S6s@=$uG=zj>_+emUp4f3?_H#Fw&m0ly8?w8*nS7#(hJWf4cVTR@ z1t%#-yR*)=9JpNpBYNKYkIP6S!mcFEd2cg2k{e4#`%M|}UtPzh$BB=f9dzVs94&ZD zvI0p&XIU0~_R5e?_ARv#<^E(PTLWt{S7bR_QJY`5IM<bxi)c#XQPju)DDV3W_5^=D zepcZLx@=;Z4I=+|-7oM5sZX=aDR|&zDyj-cy#h;z#WHxJmT%#s7t!vgHL%F_ex`%U zj6lg7N#KVR^tpK-t9++>$o@oc><5ohSd6IUq*S4maGGW>Pp9`(HqOQaQ2#+`kO6m= zJGXxfvlk@%vY{}q-g>OA`<*Ri33J=vbY2?yr$;V7AhX@bTj~x0l4^GkMTzxrY}7up z_yM$i&Z?5vN%{Gi(gpU?W5wncuQA8(02;4%jI(p}bT{F<bCRMMO?RX&Bv**vC?)e& z?H#t|Jk8080C|uFvtnY=ezypALH;YJpbet_<I*1jdqRFULDAP--14Z2M(t8ZmUZ)1 zxeA$2cItr+2if~lEfd;7h{IG-=*&wi<b|c;`iHo2s!|Il2kr|R0&HlR*bf%bl@&I8 z_b{`N=UoCQ%19~i*g1#hP8#pv-~%bTZ*W!PrYs<qqC~lCrW1aE-zlh0Yf^817yC%# z?9$exFzkpq>-46L^(AUSOl0c4kW0m%4xhb>B;>sPsP9zrp4q<-6%I3K&Cv2XvK2(Z zJFP-NtvO7zv{il|YZ?wK^i@`6dy3>WNxmyporrh-#K&6}%%>Vv!k%|kGWy=?;PPJj z`%O>7>=#?Z#nPiU-fWC~>TcgD=KwxH)|=truFZP8q@s_H4?aBia!{4<SkPh?(03wp zeAt6E89_J=G*J&}im_Aloc!El?mp0CPT;ghJ+n^{9F-##ws%Z}m&A1Us;Q~<FBA6b zAB-$EXz$vfvBR#M9IwUN)Eczg90P*Jxqk1BUl=EcI#quH7H4Ue;pmmnk^Q1K!}VH+ zb-OAFMD#ANPbJL&A4e!GVQPWA8mHJgPgu0y)<0}-_-79C!}S64ky`y?s{$RZei0|# zxu8tZ&ZH?%;WDO$t^=nYF!YKFzCHvKtw#t%woBP)sd+b#Q=Pv)rzw^(bu-vtP%8eY zv87B-YU!+AYr*oS@mZ?$X=mp~FLN;V+qJ7N+s}J`EqYHjS)<H3A4t)bjrF=xkN64e zL$-r3{6YcIll=Zb!uU6n78*3~vD0?WI{L5eHczGUiKP(cVbsJMLYt{d%Z6@y2kjMW zwx)akDGYSQ)BAlhXnOZD<NC}r7c?Rxc2L~<oB4KIH4nC}S81l8m6@#FesOS=yPOVG zX}Vfdf6Oi1A$MShpJ(jh1g&noIpv<<l)Ko$s47MTmTN}ulzi6HmK*}iZ~FuMxEjIh z??g3^yx_lOPV82QLLH?%;0M2Vk}H_f!cWeFvaCTU&o*@XPIe@pX4X{?Y(i5?l)Lf% zyg)85E5o(e7#rYs?vKv9CG*m#f@wN6ZYH{&#stJ;cK&E%&}ox2k6C~8d3DmQdhn;l zf3GK~ggV+rOR62$qJ5T!BRDgYF&n)R6{5h~nylN>8$&tL%Qnm$MH1DPAT%m1wD>#8 zMD7q66WN`?Qge%UbZu@3Y4@OgeBYU{sv;dJ7f7TamR|t7wfe?$P5)GXWVt(<f0e_I zdoEikXC~13Y@t!^-J!^nNO5|zbc^34qumO?=Dn6^UJD~9^caNWS`}>g+=LpM)piiW zKP#Fk%FzdL1@MxKy)bT-#i}pPChNSNcbtLKEEWbnVdDQo>#+W0dbKde$ReAcIxlqa zK@-DRoxl>34kJG<0+q7RS#}M87s%0|v>Awg2%X7HpM|L#Zdj;Wb_y08AMTQX1XSL+ zXCo~H+#YV>@c3^%mofAkGfR7P{rin0yZbc!i_K20mTwSt5Q*P(cic!F_?PMg^HV;} zB$K2GK10%cICaFYMCJ{l^_QkN16&$m4Br(W6=LUnucIFyiOTW^M7&Edjzd3CUk(;F zO;REUVXgF95y#80TWjR;cJ>7a#*=uINvQMypi(ZWIJbukl4#dGOV5QLW=Nm>N(EW| z=MIM>n^LZi#7l`*ofwf+ZKL52?F8IXY}5E7LQ)#FrBL6co$rr!2OHUWujdpJkV3U{ z{t5F((igRDNEBIst*N1aTU6O>@johlmx{p$F>hp#Q1@aP?#MZ-eMCCQ>3X-yRGrLs z)@jEO1{NC5kb*goPhm#2_R8m(A1evusDa>(q_!Wjw*y+aoH9ERJD91y+OqUvz@sh6 zR@)z<X9762@VWce$gi@fjjUNOmQL1R0T(5c6J-8ZId08&)&AAUA4vM|o{Qc|7biKC znrdM!H=pz5a0o7*$sTu}qej8cWiEadJc0B2q@TRdk`XrsUx>VhT`*nBEx*NheG^5N zKl=CjXL9rbI~(^ePG4^ysrfinrWA<m^|o6(dXZn|?j*)JtzhbI1z*lqOIj+qo%1vs zjgUr2?1VpqxLinn2tY_JzX@ZS=V`m@z?Y51U>-IXjMU!jSt=uUb@wEEPL^s~2|`c% zX`p{!-QmT*ec8bM^nOmXVEerNgD9#eVaMgA<|$1(8=o~UPTf^X=-0kCq*r4ks_mHd zHB!^p2_Hpnl7T?8d5=p_8X7}PIoxyaQJFib>VpZGsQM=HU4M0~A9qJt)sayqCwYX= z9#Z}>F2kFo6cgU(W^Fci`|g(ub_^jo&TPmV$2|^g9L86GJDN~(?W(UNu3YVy6$IIZ zWEBsTh{Dtp%UoM`*}gn@otWg$1U*fDP_C+avK&3|F<Vu2_=qB9YPeiT+VOIjrV{yB zamt}vK)wC!;;EXRbh7^?ELZH$%Ta?exVY#^Y{aDYb1u4)3(mL&S1$oComZk!y-WbA zJm0OhXG`zQaw_&fe)U*Fh39{lsv4Wd!5C{OgCOh2LBY`a;)$n;Bqxlpr*yHb8i_eM zK55TFpkKRFjSljHKd#yYi=Zj(;xVEq7r;Dqs@%eKUnD`au#NPApfC*SX{`<koJ%+= zaUWRET0~}6w@!sE$#CQ!&E}t%e*KRkiWhq*;r`m$S-9HsZ1@PUar}n!?iF~WoB1t9 z`(}6D%{=nvpGh2dcW7>i-`0nY?xouix3w7mSlP23t$7{hfAmbw-g|K3W(-{+k2%Xv z(dX_g)BfNV3C^txa6OISnBFDe%=G%`lWcK61CvdKptoiwFfh0oz;AIcP2jE@l<DZ> zFzW4bMtvP{TQ4@dYj?fQ-^)+^fdthuu0o&JP3D_qjGcQ0g*zlbBzL(>gi3d{|4o$e zi&z+E^ZaAy@?hKj?GgP|^YWBM$rKM}lZxv#2LCXCP`9k$+F=;gS{2{}dtITmc_8T2 zTUDkNhD8zWR9*cNmCiGgI_p5Zrs&X_c@@K2=D+d!8+T7ZM}4>^1&qyKIr2WrSpbq} zZaiC#{eYdr!$gs*Cj7!`YaJ&J_>zW;{MC<zbe6PiD^KG>A`}lJVE@JW>aB9n-r`nW zpG9{hplkHtF+87UdgE(`83>o=;Rh-IKOKkChl1sHx#i?lk)r;Rj+dNJvN`J9rvdGF zPe^(CSTw9b%X;`TY>#tFUWGEW6BjT;2bqn54g<Hx;B)9hI>V@$5MFLaB@3VU$fY1l zT8qg<?Giz;jH?M(&d^2Xu@CgDyqc8Rb0!*vbc{H4e^p`)3|r2Q)!wE>xV3@I*fW5u z6Xz40!#c#_;|mcl`^?`-#>#*0OME>eF*3ix#RU>*7Aq7QW0BNPNEpO2w6JdOofz1S z0%eHUZCJE58XrqQ6dq3FQNSMrTYaoml@osBYBRjl_sF}H!sW6Y<udy%XD+*&z-9nr zZi8{IYGQ|;Gug`vh&xnI;jeR_1gBOBW;FMmG0C(wja`Oi-d|-6&C*=srjE>BqjbO+ z1#E{*QlL72E6?qjI@!+taU6O-gVcLYeG&u5J99@OhEg)xT>l0n!Jf>$1;7|R)JDCg zK@%~W;sVCro1b^E$Yv!M-6r4dRN*tll1_YIL&#h*^B~Kc582u?CUclUW=*KAG)F@S zqsQzLv~AX*W|+8Jl(Frz3gT;i(Sk>s;{?Xb%V9JpoEcpavu7oyJ~^4?Ur8~^w2S#A z35N!?YBBDaKid5Mj$_C$%!wnCd;4zJ&i*-ak@yofvKNGKYaHpB%9$nK`~n8IN}1hl zf&W1St@IE)#?(E6i{Q(}9U{{!MGRrWG-H;{@tvuO*OE6P4+HS6?>u8hg_jkZNIf&X zD5N%ai=!AJA2mh&(dFsD5UbfH6%w`T7-7Yi;vlADj$vfZ@ZISCkwZ&jxUCl@+~b)i z{wlGDn|_T*n7I`o4H8=W&5G8PYu17FYeX`Mgv?HV2E*xmC%IU{6FnC0@lkNpIZ(bl zhquIKYK(|;`k4)7Y~~v9y-Fkg6FSImC@H;R$($5q<!<Kb#pkLcl{X1wEnKO4YiLS7 z=e5dbnKZ_|*ylB#s9%v)ISYNThT9G3=o3f1{!9xwc9O38)nof=!{=O|qoQ=8qj?#7 zsO)Plw$RG-QoslDie&wxYu^U33mn7TV#i{KV@Hvi(zlWfqe*|?e96?K`Ot#G==(i& zB+;Xh6J3Tj1tivF?6+;hV*W)3-PE;Ddb3|0Zsqz{4=u8mcVBQoI&SnbUg0Ya{7wzU zbujWhCmllKE%<u)1uJI^it>qcP%T=X;GQ>!c+5nnr-Et(F(xqt(+<7k+p(+(jv@RR zU+b5K#ziOU(|3bdbO%+F_Ci9*$H}Mh`pi}S6t^`5QjJ%Y{@vaG%xlPmywBgPE(WCO zj6Ev;N33%~yx=}#3^jhOyV58vo73e#`lA&&UlKc-KNfKy<}q&v>p?z2?DC(Hk2&96 ziZwPC_^)`t^UCVm0-AP<OD5fCOp{oC&8SGMe7*JUx49NaES!~=B;5_Fmm(=aD7m&3 zl#0BN{~r{>)a)YDS2p{fZ^j6{>P0@@_VeG?m;BF@mMD1Kevc_~JFv<AE)Os{YAs>P zYq_`g=UVr*^R2uST|r{4JMVT@g2*(r{7(~frAFpmT6B&W=0Kw|lLd0Oc7_@6n90X0 zyoc={L){xIkDb(dp0ZbM#|ZZTP-Dz4JZ#m8k-<n$XCNbVDzrZ-^yo|YPpUOjyl~c~ zU@wg4(SYd^oWrlX&=Sh28*&3|>b-CaF2@b4c)?-uq0i$79Qv4rfJyASk)e+Q_V-!X z`=yL9o_rdZ!kjqP9+(>Onc9LNhS{BxO_GbwrQe4V@E{4h&uHopmHu85x`=;Zo8a(n zXVs+48Rqp)+VT+%s8R>y+RkVAb+|AY2EeJkWR`lBp&6TKwf{v)+L~#8WeG|rEvGhR z;Ac-r`;nxv<bF8CtJFGw3!m`m$9V#qsUCsWU@Ersu)irXb-zRh>sWu+z30ut_*xdH z>E=h4zul2<J+nJGaG?J!OO?cCtECW4Dh2i$I6gg9oH68mCL2`;Jgh=)(}3Q5dI|@; za(=;U!u{l3_uk(&yrax3CZS!U{QR%06y(npkZydz)p&2<&!wMh>Ac?SejxQ+|MTQi z2uxj19|G}D`#duI-S(QM?u|!-fG>>3y70IwP~-*ne1hHC3}d|0)dqC|qjhJSuO?A* zKIRN^QvKs9RoO>7Yn_Ild)bDl91*{4KDyO7!V&frzt2+L7r|<FStZGr(q%uI%$(ns z8y&oF^Srs7Jo3LpyPffh6-XU5V0sbi+~XwwN1)yLm-}QigBY$~?dQ2|ldJ3`+lnuT zV-RZQ`>Z=RJB#~WjO1)NN(#x^@44h%07Sg}cltx=PvYapve4nH4Nf_`dy{}&?W|Oc zG4VTsZA|Y2UVE&Q@7c1>Xm2%S|M&;h$ie54Qa{<PWWY50zRZ^W4UENCKJs|tUM1er zf^aD$0E;-Hfo>A|61(_d$8|?<!)Bw_ajvQhiO)=qU!zF0rSqL9DCT!5xqwVh;)5p$ z-NJP_?s-9E6flXY1?~H8-vbDvk+R5kmecrq8TX;S`FqoB-hksVPDkpCwO0`vfD<R* z?B?;GRg13Sz>Jwal!mm*woqXdQJ$l@jHpN;z(xMajJtUbp9Ng-pw9SI+>wa1o$1+k zaIE<Q^8CJXb%Y3QV3wOA^~cm?hNoKJ9DNS27q$upj(%n(o}^8{QkR!2ztO%R(Ih>0 zX0NsMPpEmF=3Gwwd&#Byz2tiKkIYIb1>Hi^Lv|6s`>7{*xfZ$n0H;(BJavH#`rKL? zCkK}3iB4MVu|;B)XK)J*vd@*TZI79zEjE&`8nSi_Imxj4tiD{D%VmdpZ3&Q`#_NhA z#9OMUgahPHQb=EnXXmDsiRA*~El<zaEJZUEG|A+hYOeJkJs(b43dN4UJYP<aL(ciK zv2FlTi<gd9I5|lF<c*>b!X9Wwurc)hq#iw=9Vj4k)kzjn{PG|F&(a*)Sq#5<G7z8P z)y_7iJ)X8Otu$+8iy;!r<*i>39L|&({M4d$To%?Qa}o-A6aZYZ%^{h@T(I_V@8nY^ z=|$H)-n{yE7~ntUGBWh@@YzHbf4j8IwgOqTs<d|mYaZIbU1raHlLe>L;@^xhI_PY^ zPK~sf9od_r4I~d6)*l;wGO9?@G4+_U+6lyv0$;*7mrh{JS#5V06$Pj>L`8Lg`*s%A zx=c@!u>FtTies;qaB4%h?D+=rqKQWoqiZTgWDv&>FSet7DP|tJy)WU6wgJ4UBM?CT zg!;3<<i)F$%ASAGeKRTi70Ep}I<%4vf>$g;1Zv98kATn52=6*vfMOaS_(;AA<V&rM zRgiO`8@8*|xx_YT%JS{hbzj?dAV2hDjZCgJX0Vv#b|3b-eDN~Yd6Dxh5nIXFmD@Pt z_1DMjUz;DA;n6$xm!HuY@jxP)>Ub_4I>+C~)7dbwQ1!xIA0!v5BD<Ug4*TT0P6FMY zGgYZamtr%M!pooS5p$~Qe0pZcP^Z61Oxr3S+2S;&{%fS=s=U?<^^hXJshQnj>$Cdd zrhzO$GwBn8m)122bow@-cIgWwg}uXf92$66)P?7p51wq%ND_$(m1K0|ynlvg8#8>e z@L4G|7#g8Txttsyk=aE=)*u8EW5}j`n0hk1DBf=`d2IGL<(0P`YXVy^^6TM-2>-Lc zh_b0MA!C*nu{q00S|ao>XK-WBm-cj*rVSx18cIOPKZC#(=V#bbN446L7+ij`ChKD8 zJR&B*VItDv&iBYS=G7_cSAn!dD<**N_NfjwDSTxnmc$PacK%}6Hddh8#aG0nnosaQ z7hIW947QNR1#~cg&XXL|Vl~Zl4oi7oH!R8B?Pz6GM)Hrt!T-ZWQm=&et6M&U*GiyH z4GGLVj4^RGG00I^C$BQ3w|VJ;?{@M0V&^v*c)Pe^2{22kB`uKQ(nWaPeC~@en=XC$ zPq%9aUtx4ryYw|YtisZqh>QEPrV_>Sl)p=RQ>Uknm?T^+)HjZCEhULia(w7+6a(Yf z($Y_fGWxuwAHlurHIXc2=^Ld%vFQs$g%V0fy$Dt^{T}$Xgd)2fpQolCVB~o;(Ku|6 zqK|v)E9vFpExjaCJd*7dyx;R~S{HI8z_?qtM+hnBzQZwA9U@F-7?Ld^?3*Yt_1~ds zA$u6NcGySTGyw$il;?QNv27&acWrU}*`7b}m%KDpzi?sT7BuB)yC3@z+Xu#fNj&rZ z=H$!+8fOVzshk>mq-OMLTO!I$C#}uM#^*)oUlf;YHAPU~d{h|Kn3500>O<&ivQ+#? z+ZSNdX&<iL9tqyW8b|d2UjwS>n`zx_|9a4{k2WOhIA^RNiDuCKLAoAa6H9VC!(x3Y z51C}ttOTvB+ZRCMz~>dC5x!3{y%ukj?s%ZzUZn`21U@LfiusZjjYU*01$z60EiU@% z{nD%<uC&4!iS5clmD0>UZQ0N9??KXd5SW&aib_igcgxpRv33cegEDHsu%$j#mjrT9 zkLi2`U-k3Pe?a2HP1;$<`Yrw)n{<?68M#R|FON_CJ?bCIj@XhH;32FSVd&gETz+MI z<mWs8rKIf7lqs<HXF~iac~8}X%^6zn46{k06Uih?`Xc}}XnH=;&Hb#UVkq-m>aZcG zSNsAYr^W9-PUKtJ^5o=`BmYAPuX6gU`vd0yvDMdNQ77!JuUixUomx?sgmstc*@;V? z3y6^s{fCs1mjge))X;g=zDjbR)hZS<y)QW^b(!&nk7RmdE|Ir6$kE)AmO#7;=+pVO z|6A;eaE6`x^dI@>W)v*3Zi*e;89z&Z=2C8JCgdv7C{Ens?*t!`6W}=zLsT7t9QCWK z*wqtx;qh-diavF>x}#C8Hgbrz<witv{o9WzuBgRR6lN7HIP=I~bsB`6Lp0N$E>9-X zk=L{|#3VgxyXxh4a`u@_o9Dls;1@A5yXuy^={{M$UcLk`7leGA={1?a)Bp&*qyD&O z2e|xRorU*KM6qKSv4AN$BI_z5`A^nuO@OFN!veA-bL~m`_p2DM4`%dFbIQufBD3h8 zUO6hMMVgu)*+3Uq{K3Y#pGWl<r=@CHifz~QD?R5`WLmxp6Z>_H2bV4h$_yhF=x?A} zV32@z+J#jka?+P?F46Msc5P^=pf2c5wAx@}>rm#R(JcodpJRQ2fFT<$KJ$D+S1FmR zivIUeZ{4zuXLdYkR$5$_I3I@yrz3W%jRC|bAYQ}>ivOqMTtjs?7R=eqY5$IrP<P?S zi8EfL)<>CkR<Rzv@lqxU$RU}&NVsagQU6C3LAoq=OWajJg{@<w(BH&^Uj*COsx$B+ zm<}9Yt{nWkj?E_lMlU}1_lKzPT--WYE=(D5B``*))IM11^+mbtFp6(5_w7->F<L!F zDL+}-8S$a7>aePj!bZw<!yQ|&M=1J0)XONC_k&*R(B129ve(qIxTJ7<u0(d@R}ne5 zw7kbBHDMIF7@c-wrIXT^z3f3o8HoBg&E-~7OYUu-)EzvJE8v4j3O1-{YLpt+5SRL4 zlFY;U_AQZl#r1iQ``gR<_EX(^gZ17Jr~BoAI~0=h{%@AuGRk;)k;!{Q**B2D#uVFM zp(K1!_Ofxb&iQ^Ypm$es^eLk-foY~Ruo;Cp88Ea5_5C&M{#_7PzD#~=Zac#FzE80f zlz6dxd|}F5&g_4-Y~PNwcV_PPO1L(?wO^(^yH5$YJnFuipIKTeZ@Ye(G5Sn$`DiR) zVH@|+mzKcWqni~n+&IS2Yc8Befr`J#|MR1PouKk_9|l9;_dp-i^Z&JB-o|J4t8Cpf zKKkzI*Rsj$9KkC=py-cD&$K5;zRT!u!PdYYnahRAv7Po!!!`~R`F?c*i8f3}6!81* zDE}1yeude=8N>PvatZYceIFJK3q5jmI%e6Dv#0}^Zo>kodnQ+6U#`9Pf;}yH9(J3B z{}K0&!{U9fF7Gjaa_w8m)El0=$OD;I<jgl3UQ%;4F$;@vs(jH)g4eHjbAMZ9If4Xw z-W@>dG2_$IFmbU&0CLcMf$5fMk{%%|7UekUZ_XugGPyt>^MQF`UALZ+D~wasxe*rQ z1J#Pm)^Z%lLY6DFY}yS8{nq+&l)BV2dP5Ce=_fp)-zCiSysCObK;P=-FZe#T^!$R5 zO(mKsh*XP^lP=fw2GatkG$cn|H=vXt5SHqnIR$hU<PHv<RjhC<MloCa94*I+de49j zKQvS<oM39DyEWIG?t|{xpeM&Cwp6q@1^g8fG~(fqoI&Y6&Zuq>|EzouU{ZV_`4(OT zzvZJ8xIU(tH7*H@X9BrGF18!F@UVC_gjcDs=$8{ZOsTqui15Nb4=bN75>u-r3|74k zD<<O?_zQS0sX$=&neOrVz*7bzjWD3fnb6D1FEKJn0ekgwrJn<{>;qP!O)sOSmn&u~ zZgveXRMzM%NTs(-$}nf3oCjyN9aZ3e3WGD>Gv6trE85Q!k>7P&C3T+2U2o?Y{00W3 z@29n0#MEK<1?s-*Gp)Z{H<JSLZWoz-K<K3VUDJ9SnLUGpxyx}c)N&O7_LRV3&GdHH zaK~cvTz3IE?*VtLugkhC3ZN7_zuU;VVurV0CEXX_?gv~2tmTDPj3H?}m%&;sL$Orc zEyBl&^PYCx<Vcd6QMr55`7CmC|85ctzfbm3;-I`)_Gyox^5ybf*1h!)3-_Uz+q3)D z+akF$IT0Pt<?CH|?dXd7Jg1zusT62SV_%|wDQN2dd)B#d_(&cupD-?ui|0pA{qe>< zLoeUo0Z*`frF~at$Zk5wgmq+;zE+#MjigMsq@O#Zq0W&zmB!%%HgLWIZ@x5jo?}W> zHC|G7h;LP1(Kpt@*03}Am2e@7`^PsCUWtJ-7JCqLcei87((tFNLpls^V|s)B1_neN zNO;&Ly`JEl8yGYi+i#&F2THt}((4Bfr7yRI1k;8zq{|f~Bm%}bferkYYDs~6+3)`J zy!rqORGP&F^W_d{SoaAJ=|?pCHO~IE%R&>SW_%0Jnr0K50ct=g&NOP@3<F;>fvlr& zANuskC9?#&3)%39QxX7&{^*C01gvbFw?FI)Q+m#vqSW3E46yMhzv0?3uby)PP#RYs zJkQy=pm(I-jXBA!H6gxOYSx6RGPUP3k_!#9*?#e@_8wtcHvL;j$;Z)`#8Ad5snY#I zUbQ}qt}lX@A!xX9yg*vfXpqA}XqBPK)d(Qy)^HnVFP<66c>nENd>BipWZzTI%^%?m z)XISj{5(Ih0s<AJ0WqH^pG<~`m>d-vw50qz3Zv1HtFRSuOAq68jqnLKWpWSugxbzv zw&&E6rHlFFybA>0adb$?Qj)kb4o!<N#jKjTPff99oBW<a;$PIqeei#-QbHFZ&+1Y{ zPNTzkd_;C<RT<zLt+pC)wtjDe29_!NBbt{MWzT<;sZLzXm@eN<)Zh0asqee8=p%1t z?@vbImv_-e&eDqg{=N(qV}Q8(W9GYCy+-1ly?b$%9d}c7-2px($<1rso{#oCWo*Z2 z-ywB(Bg=P&2Sam0^Ls~fy>Bg{YYiBF;Jn-oet_K8>C)xxmfoO<E-GmycNK8|#U$|x zYKj)QRqZ#f`V#uer0c5wZtD`i=&*LC{qC}!`8F<~SmG9rT)J$l0Ph2sW5BuXxBPb@ zNOxy1aO^B-UA+DJ|0eE#^7kUa@p9D7z2Kd%H~6-zFmds-2ao?LY2<zTuhuymIJFYl zsvm|D5Bqd!h$4ohUmhU?B4LU7w>!>&p?h6OulIHPmV$=8h;@suy3aBHF@E+7s6JJh zn)uU%NqDKxwD$=ksS!!>+Rqxs5=k`I7=z%b=$E5adQhkxPsMr%xQ`AYKrL4H&OPRL zTX#IqS+@FE%&-c5E`1PDV3*x_xq7D6zBVJ=2n2!EF;#JaLL59Ns=MZnB(>p2hv|;y z7BU@Y$&sT_qUb@1#52FD3j=OXxqg20F^ZL_Tlg=sR=A=rt53Tvc~_FsJrTXf4MmQn z8|0nkE%K_26_l<t1B5a+wFMs#w?YT~K6+e(Yz(C)tz@hwG&9Blf3%>;V?Y^r#feJt zLJd7C=Vk0W9BJtL35wnAAtkFi?2t7*N*E<Pb>htNYEb3o(TXZ%w3!%8-;-ZTqPBk! zn|KQ~DjXUHl=UIMJ1@^D4rX>u7TWQgZm<ObBYzI<&RE*u3W=QbzO@ERI8;$kd(Djy zI@}WphcES0FVUHuwS<4^4Y(G%tatWWPa>mU6b@5=kt)sXqq55)eV}kr5evbm!6DUZ zwx;?gmaXIs$W-&l@2wVXv9jeMn4DM-g*6l}{=Kxzq|drn8p?q<Q~}qcyZuK%Kq#>F zTj^F+D+Y;g6jhBmTJn`Ex__@v^cb~c;ybH!9jxObXBvF|TPf1lfS;HrB&pp`$1uF* zJ-3tBTCM@>dx9qqF>lL%d~|3leZAL$X}jIj3mpj+BhSgrq$I8g2=)rl_c2*Z8V2YA z)2nFYKBApP4G_NWwVW7UNzz|n78{y|!($ELj;<pqOAXE^ujp9D<<1=k*lPm?N<%|W z=cXSin^^Y$83bMkB}5wqzp2T{RG|<<j~&#H0--jG)d2q2SqP}^trc+6`{?uf<0}gT zLQZfVphlwKWp2EiHxM^}Hiub=U3@_FF|vA2?jYkHvoE%OQ+(#Z2So$<mUH273MyKX z35b!8jsgHb=>}K%S3C{=@jwinU~E#1{~4#wI}o<5b~{Yuq{whXeMUr0?#2t>ym@Q; zi`2=Ofo}zJ{yud%r;0g*C9m3I9h9uz@As<eFkFK2S(<U76UCn}I)w7)KF&<<-=3F> z(IzHK46ow48!y8Ia4T$EW3KfztzLzha^E+o`D*>v+bnHO>(m)_!&x2bO?MP;kdLn| zj$A`Fnp+8<80mQ{aYxUph0f?SysWE9L##dggL^?VCtk695P$_{9j)(si8%uN3=fSi z|6xUd@hv|OhV(R&&y?OwD8hG6S~2aypZo%j8rQUSMLL|O%c8c}tM4!VrIJfl{U?r? zwjVWQ^ZjdP*miblEJ_SBxUo7}zT;U5V%ggKrVvn>Oa@U_ezYuw4^OF14gsf&joMMQ z^xJxWQ<tcqO18f~3Nx=0Cc?5x8i^z^*Vg0dpQe9CNa74g<sit!VMG>@ctZ6(NDyYK zP|c-k(dYr6M8s(g^IRERh9nKPbjC#TI9=`{&mdUJA$7NwNw&#zM{wJoc29hi@L51O ztJGvivc%Ibp6v&@s-X9O>bb9_@j@BIE_m5TxR~twL{g0c+UKc1+VeDVh372@u%yZ_ zRUN8bt@lg3S&Cp__lG#0O#W2{MSDpakhWQ#42-Awg)a6UE+JX6HVqNvVE+q>-fdvG z=hBH~X)Xk}o#|7nKvWxcFZ0M1Y!boDH(<<&?$^%Hc&O^&SE#AwVnQ699TdwXI^E4o z&4VLyLp0pz8YQBt5NAA+pDtGiyL#wo?CipzBQThK4@8i-rbJpAy>e$W;=vC!U}ei| z)XRn~N|HP_G~o)3WUpKMR+2#IDyfyd@vnLMzn)gqiLo*<_K4@(SEn8PRg(dInn|AV zU!MivZH}$TvHYIf_;Db(;-(=Eo7~9Q2#jHUR4oCW|LPa0L%|6$(TXGUl^tZM=Dwo7 z*ocBZ!XbQaYzI(+YPzsTEitmf-aslFXN|i3XO@egz6>zQK8Zs|-J?l@gtL!EkF}>C z3yjW09RB>4{FiHubrCS+inH?!Az<US#voPZxaj}5OO!73PhrX>ed(=Gdi<0su_Uaz z??Elb^Lu3u4btEL+qNv7pQCYBa933B<+WIaicwy0686&{;oP5Pl5FbAeBL&V-@#P( z_ZeX8R|sE-o}~|IzqMPUofJMjzSb*wMP@l3#A?t1_GP*qne@UuYimaAfy|Gm!`|DV zs|~sDJP8`4sM_rU+y`T_Fp7nBY3Mt19V0Rl*1;Z<fL57&DeA2}wpPDjvIGX@fHjQg zzEpIB_^yRrc6z&u4v!KW$c8jqLbP!v;&@xNG+F1cxPyb!V!-AT*68a*R1c$6+^kXf zde=^83ID&mHvioYwc${#*frT#w2FpLVgw^WC#12UeQpCsQ=E>SKzt_K6}%H-$cndw za6`gR!h4GJ?+uh&;ry9Q7)nDqE?<a}pE`rIHvhAm@1}xkOn#3_7a9s<3MN_IY%|E{ zeh}TbL3|6W7B3ERM(-R<pHnV_#AoaxS+9=Av9~M=8hv+}xTEE$<z#w`GC}#WSA3}l zOy3(}=A2lWF+sj2g~&$E(K2|pdZS0o?O%k!VZoi1<caojx+8-ZStp=*`I)d0lkQ0q zZw+Ne&sCMO4DHU`H;ehTm;y8kh~fy2tsb`oVB?z#S`bBRlI~s7y3gba9VS}bT1|9E zf#j889@H-t!6ps_Sd8p-4q>&MBfD`I$eplyxbyPjyx0<Sktsk~gz#4-sia-^a_AFF zhgxxbA9{8vru*cqn~@lCu<{XBDS%-j42bV;V<xpTkk@$pE4s?#G9EjHhhyK4A?cS* z1!C4Toa>gKX_MfquSmZ&bd0?Jij5N)ZLQZ@`kvmi;$<cgD~{0RW=FrWDD|J&dNoh1 zMwh3AjO5d*|8iyh*Ugpm>LLBSPhi<I2!q4~rnin``J|O4D-#=S+SRb{zI#mC(u^~K z!u1gwI9Z3SbIkc}`YC{0hBO%Zi`(ELGJ)+JZ5)~Gm+Z=krQhj0@$MhWRlgju%7gcm z61RN6Dmn8JSp6RUbH)4#Jti|mH>8*wl2K=zKM(%p7Q16NC#&Z%1OYkUf2s%1o60k= z5}gf*JO@S1?kDX}rX(k2&P-H&GOO6p1cTQ5+|cR1Vwyx2^P*X*TNJRPPTEJ`#V@N9 zoZ(!}wtt8y(0>s$m%b>#uTR}ov%JkCwe7LVb|Zo^(RFP>9puADxMr+zGN#fP3z!LX zFq?{mg64dR&#uGi@8!MJZ$TP~BhgG-6w1PaB5v}06&^A=3Q{Tzc2{{}#=z3A(?{)# zUT%5dt(v_98P8heuqnxhR2$ii%>@1P;+38b@o`I-)uI(($?v>{KuaXv{>sEk@2Z=j z*f$*4G-~En-{Vmoq7ou;{wtPN`@S;iy%CQ4Dxgi_IY{wFONL$0(BW8-w+~>d%@<sC z3HA9fe#>y(`~IS`@Ac))T!UVpv6NQjztye(Hy_eqscqYrH$D&lw1oZfez@hH8Jk@g zpJ-v5KdG<S3i|h#g0!>!Die1m>*wRns?v&Z14_i>8+AFdtHjw*Y(BiZkluhb?G>Y; z!O|VVGZv%T2e0l_J~@XZJ#KozAD+4ZPx8HS(q<cILNiDW1EUVm=b6*;bT4L6hXp7h z4-F@P4DGKnm1T`gkgJ^Mmn+bs-Ho`4$54Mc<H^TFpr26DI!?<k5LU%bqc_W=cVKNW zT>_{ko%82`{)j-5nn}#b`S13#6ZHuGRLZ^Rtm#S>oo^Nc5tlcp4Q&Ul2#Dl^zERb5 zS78ldpWVJuokvwBC(`AiedQ1KPnthbSjMwtxf_4McVn<(wrvHU%Xnrw#ALJ;J8qYL zTX}9;p3!bFFnjF>xV{e0>~P}jb=~j;|9B?PoRD5P3C`i>*gOrU&9Y-^W1#n+ium|3 zzpb!W)ro?d9z$l*;U<#i+h{S1of<ddd8bI(!`RI0nApy798O<e#8xmGVLJ_Aci5>K z&X7j2B{58GDAKZfMtx%bud47rU$Osw(?lQMcnYc3@jKxN&QRnE!jr#)PNDgC5WpTu zmFThbF@K4H1nok^233E_ifK=yyiO5`p%1Z!VM`i!)GB73>W0=@BA%-)r^Ao%BcPjt zm&KqvLFR5b;~SiFYhOtHJJvY{T4ZC^bXBJBck&9^-HU~g`9_mO&ySujo0cF}Kemj( zw%wu{7J{J&!Bj^Y?$P{SZwVWXoo@rScP3pus-)0;fxd@=de8fSAk>^n#;uzLpE>;U z3k|zn>I1l06essM;;m7-6j<)#ygY+yM{F=b+z`&%SlHP%;AhP>OS*Yw)%Xtfw6xFW zv6QTb8l-#g0DPHce<?jXPjNuRh?eJu>@<a>6T7N{MrnXPkj_rl#e7yk<(%!Zo(=KG zrN=fsf2ftjKY&T=C4Ry=Gy(kxGa?Ah!mmHpYmC;kVkOB~$uMa@F+RSiKZITSxkB7I z7>sihbYe7VXlj>cI1ei(8)5wO<$n*rKXEX!BXGzEx9B&(vSq`mp%dYkmcMa2hd|q} zj7~d~w#}@BN$zl+LVCZ7uNd`n#Bz>~vsMM!u<CN;=&RJ1H9wW~d*PwW)n?Z%S_e-& zm`g;Md(W6n2F7OsYW4*_ZkLMF3MGYmO$}&!M%$t6mI}4v-#yXhghjbRFFV(oj|eG} zzQMfR;5;_l5)B2@$>MP*y!H}V$r3WdynpmO+e?w!m1OO~91*nJ;xn@Plqs4_qY4k9 z4q@`5SLZ!zs`)k?BJFbf$S^HYr>CJBJg{RpG3_@xw$$XHHRTw4=IvpaF5G!35B&SJ ze3s3b$Cp0DnyObmX%wTG(eLMJ+~=|H4<H{WeZF@*vBsZIw8+VfEGE-EMdMiCa{-=q ztNu{)wpVyb#{KgI7?*3aDQKh0Of6n!3#qYkZ@e={V@fwdYNb<Ryk#kBgO{Zhgl>fU zx}W}m!2T5>`tK)h3M{05zIU^(^FSa8Degy!@a+}-^V~*ps^s`p++gVxS%<2sIzpg~ z3)jh7*PWZB`p<EE*HmT3h~+rZ?YXDex#H*rvhMv65U-CI%%C8v#@rKZDdv!=HKKl+ zEc)n=!ieO>)~;C=)XwCzz&yeI!_W?B(xn!qbuLgqwo){2Bh$9_Nw{GuGb-IZhVs^g z(i6z3aRGECZRp5sk>+cPA>skDn*Z4Ul(U<YhsQD&>!fcj7)+@&+8NBNTJ~yf`<>5N zDqu`gIszG&M)sWM#p2;@*6M54+_~>Tj^gDKed6>7#-6s#1aEE@);sayIe9hkX8kXc z6{qmQeeC-KS_9!#D?Z!m27gz&u`jaY<~K2}C2*Gz`W(oIn3cnBsy9I+nTptRJjRgO zZ%UlP(z0EQq6FKkUHwn#ly+8ogD7%LY0=cHIZw@SBFY#DzJzak-LMOym5aIm|Ne8u zl}CzZUgj(%iM=V|aS@JctNMCXJeurRNo{p_KKr<3;^LHdfu*a=I!X!j(FRo(36D?v z#=!~?NX$=CE=JJrMN==zRg%CUf7m?23%-MJnA74DfPk_9@xw~Iz@ud2$wnFA(2;-G z0lVy3Jna0FNAwt@`mN@#*vL7Rql8N5^7qKqtlh>X?VpG~aB&^7e;pj4boRzg1Uetf zFyvR?c(%Y2Eny2KF{t-^rd%$*M!?1dV)$4Jdt@^ls7JcLAuo<uEhLLPjiXeq^@tC5 z6eo48y#(K!Am<VcaKW+6&~JVwf8P}k3r0uJ1IS&S^hXC8x2vxjjlOJGs?VeXiyK?i ztquD%+2sYlFf7WF53gXycfEB0OF#eiIL60TiexTSnlDOxV?r4UJy%pLbLi{CLzT>1 z1W9=<l+l~W_OG+1hTIHsZ1k7M{MR-6-(dfLANFz<9F{Qj4$eKRm0|EF7Y>6)hR8F^ z$fQRvNzo|Br<i<VOJ;lWV#}1JTIDVziLBb|{e7hjK9Gncvk!Y+9y;vdCI&BEhmRiV zUH&~b#{jSH+WY-QFJ#H2-g$zxJn5Q$d0KVmf3ur4-V`7|x|T2-((Xu?gYhN68VkQ} z7KT^^CCI2j0W~tP;kgX4XwM}ht&!fI(J8M`M-7{)fU7$pn@m}`7)0{1JEBYQJo5>k z>~+LP%6M@xhuA;K>tp!JLV%v%UypOtpPSxC{v7$O9-3iIW~(Fb+&}Pg`x(BKT=n?j zwSztL?M5Zpd7}T&y8L5wZC~a`ss=sL|MCLJv9O_OZiR2J80HAj*1d0*-d&}Y{Wh!R zzqR^UVo6ky@ldvJA8VFeLh%q;>8@X%Y%}{Fhl^T}&x_$iEnE*ZtD|)2RrKpy<Jbpb zKCeH4mRsXw=PWsmv&he5-5Jtt)F^jPiwtmX3Dtk2E&qD2VgO5AHgbNteWQWn8}XZn z%w`+)kKsHbUWr~!M(IS6_d2f)a8bl@d9Tj+OMfvvW=Z!{b8uMS-Db5wP{wnLy}e4F zACEZdw)E^T|9K0gSZO++ts%Rwl`ugHeCp!TT6-qFxsutZdGRI!{P|CFV<LKdh6LJd z+D{+kxJa_6Xrfb{zGpTnnKynG$cxC4g2_Nz=R^7qJ_AymCF`w#l+FHxN@pH))BL$) ze%Bqc^_4pSp7h;r5S_4pP+=$d?TQ$^;K?a)z2F{_!|Ac$9~66NN_F4JiuwxO@Sgra zXfr*JmMsSVCgbWyQ;rUQa2g_N;821JK@o}%WgW(w9$(x3$P)K!W#zooBQyLvGUAk$ z%(i@1Nwz4c#0qk;2`m#kFS_o+ZGNy7M|L>dYcg_01$zzQm9)KKlo!-ycj$^uA|~Ca zb#QP{%xrtW_sh`djd|Vw<J_y^^b}QoL>V13AHOsx<(!MWwZN_Q`VlBbtD|ffnhPly z4^n+|qmGEWace{+QMC7PMvDd)EjIb$Yq{^ozHX%G4g~Apu-jyBeUWk{o2M!fkY?{B zy4#;Es!fhPpyu)=zSIOXI1CC3Y<sWrLam|=0D~bM_+d%d`PgycaxfN3n>62)%yEyR zUA~l!4h_w8tXkP^8|-kHgk7`7qCAO?1R_ya2KL=r;$8k@=IT?{)F20)7+ybP$mg;6 z-k4or=ybVcv2rWJkuftkTjqs{n{jZ7|9ZF4PkV<&AsI*&NB6gkubCUJaey=;i%)Bc z#7)G2)(<omFv)WB_6q_v<^d*)nFMcQh?K*$Feb%X^Z6(OjfZ5Y-<UqZXY=v8S(g^L zax483BIJ(8mqj&dacvbt#1$+WcK-jaO*#T_R3G1j*-`<yrOihy<OJA&O(%yu>_xGE zsw%Z)xO2S!q*En*P?E%fW?Q5|X77HyJgq3#O0Lm3*JJt!7{WcZOUARJ#1aYS^^*)J zUs5#t=u@f<h}tlDu0qG`UHYVDMfZe3GIW4+vuAePI%t1k(RX_v$ctV;BxhiGmNNN7 zd9sG->B<l3H{Ib(Y%nHYSLszZj?`+gj)revgL<X;FD0xiS{TIQRzaTgwQ3X882?ax zpjbz>#Tj#m)%C)8+IMk>ey2NE3p9xz!zo5gP{|Nn>vzLb^}7ZapP!?3H#Q36fhTq( zvnY#_fUfG<rFB~@WypDjaPiJFK-S4}V9GO;;g={(l7bwl%)o}2;e`c~cUGH{AM)w5 z=_zG8ESxXP>7q&iRPp+hD{P!J%IswPR2zJZ>_S3t>4IjD>#)xw8i_>fseC>PCTLQo zy29U5{#9!!pBU|%uwU)-zPtE;1;Lx31Kb16uPQj}$dadnJ+jVliXF-bSl!njA5wo5 z_IYB>O1T&}D|-s;Fbd2p819{`Y*pRIE}La>T`{zM?zccT-8(9g<#=BHv!-(OEbhY2 zXquxr-McEn*W^O{Y$?OLU(2|wfaLlm7Y{@05)I-_9=isEj9a?rqsCVsaE+GM8)Md( zdZrk77zK(Tvx~m*fYmqsxKt?{M&V7S#-p%S`@<weLyD~E@uvFLpxdIIOuvoE+i;n} zKECG6Go=DG{s$3J+j4Ab0G$bo<z1j#>=43T*=RS&>`+qBKN&&w&f+z?QAxvj_iL~< z?zy>RbCthCj?4|}C$e+d?jW(k?qFQ|&ngc(oooE{8>KS_V6a0N+R6j%%iQR9{`9PF z2_KStSWmPPG^CY~wgp)x6R0)mms3o`M;s6Ij->g)MCk;5_oB`D*~)C6&S|_LK(J(9 zWGnFf+CT9#`Q@A`MSaIobfMVQKa-?J%#PgJYGkQ^HG{n$YJHH!j2xxhcRxw_BKNgR z-`o8&je0>Y?y@3}As(nndBwiF{NL^Ym(6G7+^M~xjuH2>V*!+o7-?GgH*pgikz4{= zsHm|y`r`okkjpD<6tQgg_nldFgU*ez2vfq-R4=tMCuUuRv{$<eTE86Vabm3)wuNEV zS&m9Q#}YO*%Z-z%SH77_=@#h1QG&*WC|~D<goxA;1=;4a79YL8y;&CwHl|3`cwz}Y zhuff|StFxlX{;BllAiil`%JTq&<la=v>L1X$vBzA-f6F5Z#qtbZL4+fc1r(8+6xc4 z!DH()qs|V^ZBgSnlI+`G$C%z=^a<K6FD>SjYka>bya!p*^Rq;Gor>q~UBb(yCgy_- z=?@k?)195K!6kHIQkwIZUNoY^mgEH<B$SS|05ktZi1fAP-r+F>qYp`nlhXjC08|=h zqUHs^*)Z9xk~O2Z!++zQMI=7yG1vAZuzJz+FrRd(t*Nn&7G&|+O&Txztsz_1`bgTh z?tB*$L4tvy91eu&=pV|E;CjCNzwcY~=r_q~nhHl@%mFPKvS5SdO&@Y&>YqlP|Agud z#R_KOYK+YE$WGs1%ov+*NAGjX|I!@{Vg=4RVVmII1%>!K6m>q@B8ltY)h8TYlhu)N zeq(B^{ffcep`Eq4;VGSe`&jJjuYdI@1n@kujj=}`ZayaY2y+#S#vzx5v>IHhrX>54 zkt)3%k`z>RngFQ{4G5Im%OF_c%e_TXZdvQqbegVZPizv@#ec|#gh=e^GXVsO$BcMm zl*T_WQHtmY;@u;#7Mg8mQ02pC=8x(DMSIo-V7qi+Hc|p1co?*2>HmPd>~ef=+L#FL z;s&n;y?yX~4e&TTV3nm7&XPKyH0rvY;o`yLz}r4fLSV-TBjwhm4!rc=ukuhV$r3vc zRdnta@JIaB-Rma)*4}^E9WxN{B!@3Bw(#ffO3d>#m_k2_R6kt(1n4h5U`W8!7Zu2f z3~9(^sYZ-_mk)Ho8`7&A!u`-AAnQi3(Xf}lR_e3W1?&A;)e!6CNJjlu^Cyv2&z}+E zxMv=M1qH>`r?jUjpA)M%`n7pKdH+XH$X7fEjuMt%w9ou+dCv$%Kzsv}+(<CkKjPuT zwUE$}80@oP)ZwoQA1$SbycpTD3OP>+2n-7h2z1$sebg<;a~R~e`qiU~N5EjsuS>3u zQVYZ{@Uc{C*$3zHs%W^XT!BYGf^YDufTVqI%+Q13x;7s?=|7-189!MYIo@jKp$mZ_ zC3xunBJJ8s%ml?nQ=TfvI6gaJpsm0C66?z<&|};s`gp7ckW1Jn%J9hbp&Ys1o!Pa1 zBM-Bvft$=sva;W$(o4|sBuV?``%uZ%Bu$f2|LF$~jh)f#e%Gc^5xhEDB{uxq>*Qmq zV)OV+vksn1{2#cpSKmh<eknXMWFkJHHN`B7ca_X+%X&M+u_s<VS{DukF}lH2fG;R! z&>fHmjBdi~61LYpGZ}6S%@%!TE_6DaAfVA6ORt|Y`&n{-?D7%xq9xFB`n4;OYol`^ ze}}#RX7`+6TC?v^=I8NIO8}fiM;0Vdu7jBpCUHKzkws;k`j-9k^l#uq$IqCr;*U<A zVJ8V4Q~6bQrQFLZhH}#C$VZ0v^^LztyTG2$52A6{XNJ>D`jNoXK3a)1Je8VCyZY@( zAIiKH?+B^mMa&|MU>d%NhWdbFxMq72KMYrGjzu3TamN1gZ=<=NB&e;C&Uen*{v2z~ z*R2}APWFwFiw(!X)`d7q0Q|(q{JbcdPF7kLT%0kS^eJ=X;33}n^w4R3g5HBBRaYm0 zL|p$cFgl9j8EV!#=%OYVIA+mqGY6n3bMx=60+Uvg-riZqj3cVH(VfmemS2hGknVbd zueJ?*Pvh#4ZOsPg-6XrLZPj`>UWgqXeS~)?q4~rWV0&CC{kB?_sVVaR@b#8aQGn~- zw+aZ-okN!>jdTf0r=kc_QqnnecQXTmpmazm<q$)63`lp3bjQ#PF#|la*L&Wx_Bs3P zz4*jOW^vDb-T(Mqnj7OsSyRo$dHCeA#vEgQPOo)DAHQP$+YrUoebxGO)U%t%dK+vQ z$N%}@6(!gk&yk60UaI})SZLPPT8TzZSMBZNSSf?+p-6$l8J^s}yVpBLClg((hfFA@ z-fVfD7i_sVxc+j?azl&}|2P7!lI$JBKQVp0)9S3XXt|q{L3dNppZ_xOHb`KbUidpV zHbiJpG6uxzOSp9Y+zH`jipd=5EA4J8;vO-q#U*PkhMj*{eUmDlG_(+eHKP$g0Qb>l zr@oAhVx{?Lt%3BRH+HWz4MNry3xTp1)SxcVq=ZSpniIQ;-&=3W*<L%twK?i9P18^& zX7sdiWfySgOHyP$pvF<k@;GaSgJh4E${JMZbT+r1v@FCga#M1ltU{i(F}M2(S&~Wy za0KPX13{MM(q8l5Kt?k<`+V^lUerV+0@Me}v$We`3ixhw7HUo0-`uG+|Ii(t6G~i> zJX4p{RgbyBlV-N}P<X5Ha*HH;nT?}{1Z`BU@RA+(n)iFkIEVpp!~Ps0*Q#~C$Sk?o zcFRCAFtSeW7W*mY=@1%?E3Em+gD(JVAZu+!MB}&NEsNVjQj<$@GQv6P!~wSM$PEO! zxwONGn&Z_W%O|ukk(yg8y<rMZ33&O#4w@0u2gU~&-8PXTt%<UarpPKA8=Oo?qkFhy z$B<G1JW(BZ5VD7VuGR0P?IQ@%^O5S(b@9c~HxFLHVz%}Edy>r3<I=ckjd<RET9+}p zbon;z1Fz0M<UQU;s9S9T=#mIsa3eZ*%H}ldm;S%l9_T|>(jPSqB=_E=@n<t(u1kdc zUGVhEs(m$}8+CcY)=zgPSaf|say&^J4v5pQpI7w2+@c~+jma<LLIFOWZ{ZF^X9d~= zmujJiL;vBGhc$e&8o~u7WUIn+vI|ZupI#`RSAvC78{W)Qi8;(Y=R_&$I{^a-&eO68 zH3(H|Rg+%Od%bpb4*-Ms;T8ZwXRl%m`6b@)Gte2?d}n+F?C{Q)1bQNCHr*(jI~F=Q zPyOerPAKTS9;dAgoTBKc2M-@CIglN>(P4@CYvJIL2&Wo9nt}~J;Uvdh1;{JnJbt1D zKrX3NFhy$_mmLb$dDT&mFM030M0IfI*pkS&mzo5+)@93<2t_0O`UVnS|L!}~o9^$X z6)SBalyZL{CfX-%I=E&5`Wcj}e!)9o1af$r@Y|B09jgh<WB$=rSRyx`Nq`!_v`&lX z<F1e6M>_N<UD}0mm9OG}2$4=2Wzy-EypdS(2pnI|VA=D_Hbe-|%e3I`9|j;M)JRen zEqAZ$Ka9WtxQ;H6@$JV1^g+$HE6ca}$kX(8G<l-2HNiinEB{+?!N`g$8f2j>^0hmO zff=m2GZ#xjcoi+#kDsT{H@(moq2L7Bv-nEgKVlXAL4w97!0w$bw|&ovEf)VM+-gDT zv{ZYP;YnU4MI7z0uNbccV=V=}ImoTD+b^(;;P!=>r0lr_PcKMpt-K)$_0CfNFS|3z ztRqjtWLEM-hUAfqb+Z!#t}0IVb_bK74Fj;G_icsH<A=@rO}X*I7hC8`rQn}%EA$1U zx|@wv5VwM$jy5S(?x>A=<>T+X+@kF7nIS~c`~8R1-j9t{mF?eT_V5k9T}>E2fpxmP z#rgzZF7a6U9z8P59yA$EtS;HKBzJx6g*tAn2)wO;BVs47-t|~cXbhXNJQKUSI>1i> z>bmc{%|`${dC&ijb4h>uM4TzNbBinA7n#f^4WxT=)+qy`sLR?p=~*H%vcvw>rEO&Y z6dcbA4i;SUT})gbVZc7zYOG<@rTQ`wXQ8i&<<+Ae)rHh&Oj_9P+0!F%&mg)Ku$J~c zwL%>p-BluSm#%OZa#3f&rv78Z{!fK2G3l-#Xds3ic!;!=M+z*QVPF#R8IONR83i9( zh~CGq72q3N2?{t%dmkE0dmYRveb)E+m$Ud^_hA4lSqL!Xer`&?xC~ylMqK;Huq^Xp zs1fQ%MaG98Su%J_uINK?-cO;1BhcL>kLIczjSZ&L*VxzW8SeN=sHMK`(Fc4Xo{Cr$ z%NSd%=4FsspjAmo#R(*5w%&4F-C^bzOzZ|Zjc7mfvH(Q$)mwW4heUW`sWJlg{=_2d zSGCmoLOP??hCw<}1SYn=j(|zO`7PtiMVPndQrDPdltg{w4btR~>3Y}d2z1x@l};ZA zDA?>;1FzcPYb=2vZy7TzRmAF|hqXrO^~PGtL&NsPH(N#FJAxytdYV@k&CwyB8Ho83 zoMsunx;huOqCf~}&`X*JCNEgt(zGR2elnY}I7~<<`Dq!4;19{kJQot1XD7_fVhT3r z{o+@_K}_{_7$T<lflW)8M&_l(bC6c6uc)f+VYOQHr_a+OJUf3IEscmQ*rEgD8q}2; zqZly{LK3<)F(_gzJ@tb!g)h%SJL-Ed-1M$Gz24<sBN#(Kpo_i^+OKc>d7JNo?n4UP zPq#Oe<{Q4b&ADtT`A6p-ba#h3YA!{WkfV1B!I)tCo}Lb8o%?@l`~T~{Tp@^g(1M?Z zOE4pm#G3n|j$ByPCZ=qu4<~5N%;&E>^+jiU%#XO%Y^r*`wFD_wIyBZv&G1^g0nQ=; z&d*n_v%67a`8r#_y}iYv%K=2~lSw8peMb<)G5Z^@v`srb2)MjnIM~=I=8lx~E;gf1 z8yx<@Cyq$z_i6q(GT@#A@Y?T}EA9n^2YUTZO@i%hU4i^fb-nzj``f;MTvzqK?#qj( z2ph~UPDlt~790i7{gm6<_ZGi9mzigBBrW*xC_dROe^P|Z>JXKu7efn&SWB)QQ&i=^ z7_Js!a${_HRhuSWH_7dnh2T2aNUhhWaQs#;)%fK=pXj8>v-S7{ft0gdTyt5ES|v4D zL(l}7_m`*_dySYCf9syRbbtw=L`(AzmU2)@`GeKP>lMY=+}7AAf~->umey}?z)`w^ zb8+F#z^0{LMX98L)~2Rx4YsmeTt)gdzlPs?MG;N9#6|%J3I04k>RS;`2&3h5SbADi zL=emctz6D;N}mcSS8Tgn@`sn1Ui_IGS$|*U_rCf5PN#0Nr0!kY{|u}BlYAO5z)ot6 z|NOh95HrDv6akh1`*$ZDR%eTcd1GPUOjpb(gG|u`&+}P-gnNLlLW6}=*e6%8+$cYm zd{%@KS>u@=gAd>AxFu(~A8*s5c2PeQ*U8hj1mk3br+`bg2S4pvI1aPIVLHBIjU*q` zwbw`|h#Fs~J;~Us%=Whku#(=qbh3N<=2a64r$vb0;mXf6qTw<A#igwmCX3+#t6Mhq zV!LFNj~*G&O)jv<B^Os61$@;Gn0?Z}-I{T7G1kwt-%tCzfa-x70BPEPf_A=O0JN{N ze0gIHc6wGie(~FUJH%02R%phOs+JHo7qxz@jH=L)oj(lxU6*cLKcSstkI4Jx5OtuJ z{34<L(~rE5np(`ItkIrVv=@i3OD?8Z+fa@K>!f0R`O1}Y09;dA2t4WuXUgd6k(e{R zgbSWYthA%!ccH)U8Oj}-Aze_08|As9dG94CB@JBRl|I2iO_L=}kFb)b>|$8J7Qy@V z6d(OJXRU%I8jErm7;D|O>`|jebmMMurUesN&ac2E_?Adx{XoJWshNf9#4Pc&g{2j$ zz$@yPe)&`XU9erSxj93$p^j+s1EH9GycdYAOc&zQJ76x#vH2+FvJTj_{j03fUci5z z55k7>4%%Kn5y+z8)~>}MQ5q5RqnN`!auiUIEpZZq{Iz5&;Im55=j-I0<G_3~=2Fj{ zBQagsxRv2G$XB1>{mSzAf3+O`=^h?@^bl!pYLht;I={gBxhJw5Cz|C>sf^XPN?(SD zSem^WyNfQ^agJ5n+9aN1)pEo^ngn_h0?zN%+cO~!_eq0v*5^$cF=dN{S-NdX8A8E+ zz+tcLbGPol))N4+4;JUm%EV1cJ*hOSYNJJcYMN-f46?S_q?D<A8D&n%s<PF19|m`M ztHWF0WC{^n+U}vvKC7rk{(xowQHy%-kN)(lZpBD~DIR%rT?sZ`uiap=o2Lg!MxP#O zCh*`g&iY`^*oHN2xs+r!KMj=Zkp?I$p`wAi{a}*DegQd-!v$5=rGP7IFPAy_Z;rjn zXBc6gffs}H91WT3M=y8^D`|su3bm5mmSl4)<1Gt3p@96vMw1Ta0=d2b?g1JolSYZ2 zcKFUC>ImW5_ML5(EV5|qCeQhXIk$9>rB+!+<5}OcZNB6(V-8<3RvLA#u64HOAv8jy zv)xLR?r<8dV%MJwb+e{$rT|@U^0eA$Ccmd6>sKdbX|H)RzyQewkOTA9KhjkQ%yNp? z?Dxm3-3nat*BdDa3h&^8*7G6(3_aY-2qUD$A~C=bslA%WzQObA?%6gZvf~O<Q!%EL z^LDO*w4YVf2Q}jDY}Ym)wMie;?_0+TykYG7G%bq2u%SrvZ@(a^%uc8fu`p&AZYE!j zgNrx+`hNZYzD?3e9=UQHGqYiPbW|MxhRB0kp2trQU$N-sy)ocaOKEvl@CQx6g$&>l zTN*72xT3yFXHCWv-Q=q^<#+7AVq9N(as_NboI|BykQrdPwZ$<|V!4d~0mJ}G4<1(B z9tzY}Iuu>e>75=@+e9Dq84sQ+woqL@1LFl!M@IvNTQh-<K=86$PY%Q3(<OoppN-T> zcK(*ZI)0h`E_P9ICm9j+Eq17++VJ{*Jz20#4_$xOD@VX?M7BJVno@&b)K1~4_x$=s zjsc!yP&?@qI~^Z`UC#ncn}Gp;tKsfj>e)U<v@So?+Xbb*yZgPk1~yiQz7h23C41(X zUvxgMHWZefU=;&oeTt)O5{OOQ)0|wwj*c-*bC#BEB+%;1Ve(#l5Y_CWz*eT)B1rmx zswZdc9XnIk_oyK+Mt(<tt7~Tuvys=+sFUb)%4hfF?IF6a>SkLHFY9tqjk&L~obHcC zZ%dF1RRI;wGK9}FY{I`J$KR&6u2HdlcZnsqUu4T-Eo6;l_CF9>t(i8^y8S*Hz-0=( z8he!sZlGy9R$}|1gToqlx?xFR<n{YB<K&uVa6m-|im8M&Le$ZFWmV2*7w^p$#l)g$ zxD~(DtYyrVRkr=grgk&=x9&c_0QS|9zeKhcp2dZX8q*KpZ%yF=`5s%hoER&Ml~0e? z{8lW*M&p3_G4y3W7W)&qXq+X|A!HzPRfZwG`6iSx%b?}BDMdD5JAeDLStW)oX2g|} z4vftNS+^fNOuP{^8Ilm`7MuziekJYfY;V3#+++vB>|6k7x>wbZ?$e^CqD#T9oYKC; zW~IqgkFqRLZED2mN9P%Ee&We)?d|MQ=ur=8J_xAO3)!&+{EGSozH25ZbirTkK9s{K zpIjx~;?o!KEoI7f!!^qb;A~x9J)?X<0j~H0N*+_<`D;mjA*{G)9H$q1q%3)3R=ayC z9ORAv61jSnGsB%_e}GT>MMc<K6L9dRVOw+iW$EC!k!ef{xfHV$fCeRxmGO8>dx8EX zPe_HhZHtGXpD<wyVRDHyAsTCVs0HHGw`Wq3dgy)U^BP;&&qn{v;g>-4uKcadc|nJF z{XOdb=29qEW~>T*Do~$$x0~x6d=3tB5If?jA$n{jV)W^6z}YZDw5m~djXCIQ^@;}P zPbe1ddc*GgsPky>9Rb^2I5YZX`KLbboiSF0ZI{UQZbrHvDGuiR=)nP}mK6I}7ynC# z`tPa0)sW=@GscAK=kOt?hbLE;0C}${SY?j|7Cwdt7I<Ql5!sM)i1v7FKM32QH%JYI zh4u)6^W+lfI|37CE*xt#bFI_=_@?c~nox__<SzJCaBgKck|u?p0)CEPyjD{3(cXQ9 zfG3Oa<)&0KH(PF72|yFk16F-iJXyElw9I<`GjvnYh)J323+|d`&dd*r;JK#HafVL? zC8KecY1Gw#@v?a(>yLQ3nOd_RKB9mryQY)bfku&6?r#G&3_lRJOFQ{e@LaV>(W$58 zavACAhKCz?STuZy0F_t7T3VkMH%wD;X2gJ~#-wTraVcGWS_7{-5y){&)1gkl$c{w* zS5|0z;@LQ56!5K!LXkK9!`ADp4%X9RIou|1)?P!xPG2#vz;YcqIas5qxFp}u+f$;@ zjtVf0QJe{75YH!JMXBrv>%1H8js&u(`Tn)6sj`TAC-zgy`1QQSE4Wh+^Fskf0Cf2i zj;KG2Lb1E?-utmxli)xU?0zS=mKojIJ{fdE6a40RT>CTrJ!W(Vu7#*D+y-3}eA5n1 zzuN&r8Jru0Sj7aY?@wX!cM#;C4{gt4tom)4GR@x$KmR&UaC3FC4&lQ!3SQa9iCj4@ zplN;D_5`}wZ{^Mui=kQM1Py4IF3e4=W8gy*2313>oHYMil>D!Mh7Rk5korFcmiM2@ z1{9>?X+l&&aq~+$xjV860i7@Z{4RG{(f!oe(;lN>JZ-P0YHtrQaHZ1MSal^LK!-Vw z?+la7r>W)hUZ(E2kG$xUdsHI;-uwtP{BUF!!GkLC+>94Vmvz4}=nT}_|8b+EG&ISw zTq0Vh;{d*sxn$a)FV(dmHow~;2tUu7=ci#~*&gBISPyE{3s!HnJ+avG%<r8<&nZhn zr$TxN*Sw2k*1yLa^(a^Kb(uaCTE3ctu#-ulH=<}AllogCNGIm`RIU20==xXVFG9)g zKXPYw^9L$vzL3A>>y4vua@eVMH~}^*V^(ncSk<*&j?A<j>L&(<sSz9LB#lOtOcI&2 zU4`$R>55}V2@W}-_xGVYs)xhDd8O;L<kbfT_MuoCQV$KeJ`WAJS1KhfG`Q4-SPT+9 zkgKAw7Cn2pw$D}~5Jy9_RUzImMkK&F)vN2fT|Y0AOSPUf{i`TtwbD%fj5a==Q&LFV zfFFVD&vW0Sb7zIRsK56^^)oWt*(e<ZO^OEs{cjnT#tvIAmym(WC|N{v+nF?69+k{I zpB}M=6Xy866UxAFL-Ry{ss&S`Vt`v83()Gz1YdPC$DMtyI~%M!64`jsbBbEJTw+-^ zeArsPi1{92%RWkY5AV?(HFEv7!VFv|ahp>Ar(y4ZKJ*6hLgxy<XTRtvVD(24-l3St z>6xsf8&~bz$wt_UUu*T^+oH>3iS=>1)PwLGd}<A3N~Ky31od@*ORle+Ikb$RO5=7R z=OY4%OtV8LhFoJ(t(%T2Bg3NGj;EpOweJYr7Q&prxXJr*e5KRSELpiR&*jjxRFQ?T zUb2ZvgW8(Cu%$OY-K}~jQMe!Z<c3;~^Nsd?8btC+d)s#h<@0R|gUiiq69M8sA*UVN z*M_CL;Y-1Q6ZV%R+z%IL*HzilB=p$|_k+7xajjhE{EU0NzkeOQX~k>_4Jy1E`L#UN z>C;5_gQ~G2TW_?Jy4Mc|&nv@RI_HyqC2+dl?DwO@WPtvX+M>gs7>NM>bLMbddQI*p zpG4ao6oJ$WJ~NR1dD(iw@Gb)pQW6CSPA9nfXh<Ehm}szX;`K4YDj2_a+q_Q#dlr8k ztx|d9IveLAdUvV>z^dMu!}?f$f7N;%HPgmMuSnnZ{p+y8(=t-GrCeJhGkotu=tZOp zet^Di?(&j-Zqxk|lE?+^K9JLiHWujlqrT3rGAF+Ivkue#FAO}oL|@G5ud4)|2RmTM z=8J8S9Z~7Hen(qbq(7SRe3+^Rh&0#CC|8<w&K5^Zew@kqZt`REdt=WL+!kj#`z=hi zATtR3-F7CKO7Z{2vA_uE$#@-f=w`DZ@8(_KQLyIKL(_^ns94K-?EOsi3#7VjKj7+- zM7Ai?=<FlahO`yS+AAVw9E%JeEBc^s`37WKCz8J&{=sSXkF9Z1ALbqW9-m2VEUeE@ zXU*ldiizizz`5$U_A2*K*J|JT5}LLMS~u-1bN_%$Xuq*YZ;>C=yRbGs2ZnD-pcZYG zX+C18Kr5ez@IL3b9PqKdLK9DoPJ=d5bKPpeYtYOp0!Dv%+F9YYlcbd=Ybu}R06Y7_ zFNxgeU@l*+7t2$bE<@#NmxA_FY!(7Z>bzdZ>$5gd2@l18{9-rm9eGBiO%<Aka{aT_ zgSW#v2gpRs7t?mFt+3b06h}j()4zcbewO95LHw?6LX@=Su3LFQ2WmfF_HTE@$LDz* zLX|*qxI#qZzaH?%8RLZ~eN9Mol7Tk3-o&4Ev||Ri!1?q#%*B2m>ntNPE{9p&YBHwT zfdLWklq3Q(zl`?uw7W_i5!j+NI0c(R=J5Y#SLvUQ=pgRHhDX$CcGhO-`rDVG{l&fh zEx3O+PLE$VN>HD0Zu~w19t->lcYSiFbi2^^yCbn=*m4t?<jj^^1a85`Cc+(dFJ?KY zk-y}M2Ix4Z#b!G+Ze=kWfn&9qE#vktTYkf5!plKL5HODNe#=YuXGzm`v13$8T{h9N z^s-N9@wA=6KRdrFJ7?IX=BrlGU~LsZCvE(zLM0Ue=?)j)b`HE<mNm7S`3>c>yKxAA z7>UPCSozmKkE9x@%pB!;sq;7}BH&FAE`tnj6A^=w33G-^159L&O-CCF`lJCWEt3nH zn(Cgt_-h1`KsP~Ze>o`jXe=cqE??w_(;x5n`5&)-MLu-<B5>VWA&ZP)ij*jo*3~Q* zw<;neVwHBv-DR(Wsk9MRZu&I>&VWwP9$Gt{fly}4AGA}D9K?BR;<^Sn07J&H`)zQW zAi)3mk+PE(iUIb=*o4$@cyQ}FVZcOMbt}|%=8suuQ>>XBe_Fv?D(N8=X@=b}e{C8# zW?|3M0J?yeiubVlD`0x3rak_@o34&~K^++l6nI-$`wUpw>=ssYVd1_0-JQQ|FnP6V zW0^lq7AFd?y9Zy&z{HsRhU5=;v5l?snE~<CH$1_!)BvvVo$U-nqd51*-z=M4M_0WB zMxy3TXL<zi#@J~sZ4PEG`#5S`BF1ZT6`7L0)eo6Uk9!=Qc24@0*7e8ra74l+b2o2; znb<>=-nbCu!+T9l{AE5<NAw}S8R=kuurU2=OED|D;FU2Q$GvX(SvK70h#Y!zLulv; zBS)LaRu?!7vQrp!^ScrD<T@cUM}~3Dz%ufjbwHdcxj>w%ZJXVu&hLFFy5*u5BroPJ zR2He#CTEPd&fHB}eH;z&O$mWepR|$!M<735&iE4_$|fI6x6bDMb=>zf4$h}u$4{zz zZ*tIZHgowdw%O+|gu>RC<vN;%%o%rVNP|PxYu6a>XJex$f6M`uiKFFYKuDTpi-x## zW4ws4^M8n}@#A8LX^`EoUfMwfU0NwdjAYc7d<iA!a%iK2V=J_z{V6#-*31m7>B@ff z)??#XGDUn%bJnx(@xvDirsSDRzs7S7N`Eyh+5ZnE_@^xR6=4v_QAesIn*NSSgs3;$ zsK=%|;eZ|pK_;hd+R<&3Q$$DF<=wWD+*QLcX5f00LA{E&O}DvpD_GUwG<iKe!uasB zP>g>);oeemc>P&={>Iu#Bn($xHBb@|S75VQlj&ss_941QI(qI(3(3T&Js;sYW$}rw z5W3+2QeT!BTS7tf5D~~oxdtH_{8b@fmAkY&A>i&yvfIRk9Ljx;lrlG&SzZi>bUmCt z)s1JL7_V8bpfW{qp6AP%<qMj^N_=<L2!kz)-6J7r%WTA&MJX+RDnvfny)lFsk~D&) ze8sLGD5K8Sl@ZU!LW)JkNHg-SV-kgl;&i<HBHt?f)#M+>HtoZpGqmad8ObSPf6z`| zme*VH?S9UJ%42Tc3pn=$D~E%6zjHID{fV5?(8f#UGs?Cr8hxcd^=E5cp+-;KO9f~N zWwfq3unfh<cIG7CcFTyNxP?|nLy^tQ1Rf8YVS{Y|@Ujrp2*yeGRXNw#JX4wmz;FF9 zu$Jh%Wou;=G3Sn(Oy%uiAt?J0p?Mqj{5fS3lgW{#u6wh<S3}C0+>Gmv^h{3+cT>>! zKO+NPjzA<p<g0*KP=@^YwP`^jc9Hg<zTciKJ5e1E8OqSCl1#piViu~%NZNzj2vXKB z;hJ1ZQ4+`A^Bga{WP3?}h`5tZ?R<F>9r2mjHfVP39o!s&`U@(rzm)$yFLxKx)9q)@ z3is?kII*Ocm4`oh!f2NJ92%f4vUeQTrwUMPZupjw*s97D)|kjzD43AFo^*TL`(P)- zv0Rh-sWGLmaYPP5VX2il_ouLTpP#db=5OWvJ!?7^vN|w&9o30g-WMy&^E~NoubB@@ z_5H)#5+Z0C*6`q5kN-pLKWy$Nq$@WaN9VgOg6HI#W$M)bI_0~nk%pk=!tOtL0$U=I zih|fctXgZN_XX*xINNOO92c1T!;#Hl?WemBRkFBajRHP^=+Te!>yc1GxZk;6{|}O4 zmY}9l#z@;%Gu6&wtY_TxtqvO<2lbj^mR1D7OC=jKN^NEdpmDk^Z?Ykii2q-S&jOaf z9v(LZ<`i%2S+DkWLpCy1puFwLfPwi)_y|>6u;yrxm3y}QW6sPTlf)})NTWVz{=L;( ztl*qMV|3Q=`tUXXO!0M>vNCYdK&<TpD~^;{N)9wxo#=dr@yOH*IGG%7qEc=Q+E7s8 zAZC`gNB6IX%J289hkUTM!3${lp*tJprAu%@%skDYu2WHexx{G_@q&ibUTOa}^%6TH z1UDGQv&Ok?(EJy8n&l6Al8FI$dsgQv_0}FR^De5&GH{T>m?of*Xk;nNA6PF~+Nnp8 z(g++XDnax5aHOL5kBt}OgreI+XtB)i)dD*2BU%!yvI43e9CyY~({u9lyt%Pn$19y) zJ7f7?$b<Ql$~BQU_4b${t3xFG!7O%AE?WD#Rsa7;_phichu}y!EL738aZ>L)#Y;p5 zlc{ud$yUWMErCT{*)je~tobSv`iZaWvxA4jm}oGmsH@Q2s^f}j3^RjrJ*^JDnAJW8 zX_O<@o7kc^!b%)ynAx*6R=V9dFNAnMTkIBN5;b1K-f#%APWsKgT>UoXckeTI{y`%` z<Ej1=bDgP^fNJ18Hd{VTL5wGj$I-`1CseJO7_nPrt68Gma7mf};ozRF-2QRgU3kRt zg)xx$jJVoxB&m7w1eqv_Jq}<I!ZY+^6jG+aqnla&!_Ba@Q}g$%hp(P*p0!Z?YeT{E z=cKXzXZR<Cd`)V}+OKQy{a(RpKy^qSx@9127rA{mmd{dh>w(qSnE%$oadEVzK#c^l zFQ$@faohc4SyUN(M%#>bZ>Vf%hA9hh&mrtNE*9MK_a7>}-p6iudV~12T~9fuW;<aZ zG@NO?K9XZ~Yz5vK9<Fg?-B5~xeEA4!_#_OnC$?&{f#U|mEn)&}3w?dc|HvZ(bRe2V zm;ibQ=gSZ$aS*e->Bbpn2lQW$RL5rYOWwZyNec**%%8o!m;CFN?_VI$#nkt)W(tv- zre70Wj85@;QVl2#!(2jZ3}e$Nh#hI4|9Ee2dl>GLJRoHX=bc>7?HihhjK>s>7}qQc zHS(YM2Al)Z1Jg{vbFCTcHWtQRdT#PWb&Hg37ed;RUh@Y%tD%mCM^8=`If5gMyq%9? ziP90$)&-|wVA_wBq6S`;PN*PEY?S6w6Lrb(VVic)0E>l(tO~5@V<AG_eAjS%@gT_k zM9F(ma*j2zP$<gko&Ev2jvU0?`-`WA<U8zY$qi?MHADBLAE*19`Gw5P?MD(EHH@(L z3tsDb(ZsbR0c-D2L*3B}?{PoC=Yer=oD-^q><slk){dub)ra7`K^Aeu4>8;usQe1V zqjO28zvW3omztMQ>MMkwD7u}GR94x$^2ar8Av6s`*0#pU4uAJ5y^U&6#eczcAHyfs zU{n(S{Br#_CJ=dC-8Bq+1U^!Fg*Y(j>CkD1R9EYNkP8HqDgHZeSw<EcD%KlZ+G!4H z`X1?99v7t%ix6e`zN*rb-UBV!jrDga>x_TGsvD&gy7rOs6@OVlv}}RWK6X0=p-uvg z%qR=d27!B$;vTDIQblt*Pr&))7VY*LOu4%+*$8P~zwGILB(uG7_4B~s29S#|K_-b* z;!Mg}d-cBc&I(e8@^L3PbNZe<mC0>vSwUwB@~wm(c!RUIeEbIIFtv?tl|e|j_0s3% z>Y&Pz>bVj-o#6Ra^6)Y(M!D_I<}+_`n)qQe_5PjPV;V}NX{x`%%=Ow@5^IdrMKT;Q zL=b!hD8nSqrpAxNgRVv*Bl^4|N_t6LYIOqI>PQwR7slD)3%D6DmZ+Ok<&-Adxr)Ba zAz$ow0UnYbr_C>6IM3>ZxE{YPB{cE)IK<=by5p+-A^OCsC#QZXk9yrr+rjwC!~9&` zI%d7JFt0O8%rS3tokhYD=LO9~gDo-5TmH)Nm^bmQ2~$;74jL2_O|n`4-Xw_Zpo-|A zM@N5j<=L~;0R4`6Kc2F7%%$+!!JHYMswj**TmW`TwnP`!+Y-S&BVM&6T0r}WwmuHt z6)0P*v4s5PZH5smg*!8}I*}LV1IGa3)3`^cI@_CgaQECz!2U@!-{8i@UyiMqH%nEN zp{QxsAp?)t--7yYEy(yK7pec2Z0MqVBf=gs=HB${9r>v9zOayVAM{I${k}KoC<HO~ zU>lwO9wDP=f3we|uKmQY+)_8!XQ)cY{haUnxa#YY6h#lF_3<m=BnZ&s>?K#BcW}>h z7K`RYsu9u=!7&fsedX=PDLDzGh6@W189y+8STlsKjxqJQ3)bJkFPA~W)0j@irxIKH zQlVVO6rnCDWse;NQVN^k^j*KFYZf)(ZG&QxNeci=ybI57Nua<OgDuSv?bK#_Y{&f- zX23~-g8r-h5r!U78YO*A72_-G52jObYfUk~xM=!UBO`y61poREB^gdOQi7A$!Z`P= z&e+79OVPcBTh(je+syorJ?#gMq4-BHjs+kjwW`}Ej2~T}D_FfzlmxsHV5PmVi0Pz7 zYhRLB(*<pJY^7OV7CO1-oNYTI5wp_XU^mMJihJ9AuRlXy{~%A$mzk4HcacKnq`6zT zoLgx_VoJQ|wMys*rV}Ll=%$|QcgE$Q;fwTM+3bZudwxjw#fVst^5mAUi2UFr?S7|a zfe$ukWCb_ddKk7cwYN-^6#tEB;WA~Mf$B_uNfZbm-&U^MyBUY633AjVT^jmbvkc}h z2hOe|AR=rfv!3~RZS)XJpcaF~>Jn*16WEG}z%S05Ulv$&5*<rxUmuBOCSQIu4HoU| zjJD;s`nGmL{N!Mh&`uNm8xgg%^o+NIWa9f#7&d>Y(YE;d8VzmtTGeyy2hRIW6@Pc( zaVoE)rq`3jP|v&d{;e;9L6DeYvt-V9UC2altmM5e?pYeXed2DLEPBFUerROvpm!qB z35k&pO^>A^eiZs;AUex@P!D<*5*=E~<sAJ~-G@vEGZ9HcT62cSx951J@w#Hdw}QqV z%fj6qLA$4wr=a@ox+$9vD@psS93|VKb^zb3MtUY#9ha<i$uMRio{)!kgOzI<$0du$ z)~vM5I6C_yxNSCW<?vX2$B`l4cPz{1JDT^>PpA3p8~+PNOZi1#)CE1akIEW#o6m0H zEB6PfjycSMfE$)vz&<%F&0+PDd9v%<>fDKv0VVwB-~%C$pM4*cA#PP1KiU42P8QE8 zu!kBj(VGvoBpr(uTR<Jj&mQ{f!rcKgizUP6QlF&OGEyTYpB3w<O<1twm<1$6HVt1; zt}yHN6q8r(zdKK*PDc8Y7v}6m^h=P>p(GCrcEe~~jHp&+4n(m1x(nH`t6j(veTb1! zQD2tQZqYNv$mJQOHya{uZrnPOj<cQf70;mmHswJ1=mW>2Xnpv}zW&1M`p2Y__kV0g ztJi#2jKY497gaa$2gUYc$W4wF5AWH;GAcw_iZC?~S01c;MJDv%ul{EgqYx>2VQ%IJ z_JNQ8nmYLsKHQj0%KkJjduNvwK*q#8paXz19lbD&iW-%qkSrqx%So2fh&CrW=MUJy zD<L$GaC;#lm6)A^_DYO$TaPBQEZlp1KV9ZLxJDY~+>}r1oI!?%AEJ6|8|fz@$VmYU z87ImXii-Bzz|2>FkG={n@#vD)vBLs&&c9tHg-aX?v!cba;{{Z=oTF)BDul=@#^*89 z6a7mW>@oK9BzDX@)0PZ~slw-oTW>p!9rg+*_e=E?eCF+Rp;e7d>49a9{u`F)$3L?e zeg#U0CCHAn=~n!BBsMP4FP2n_RTrP1P&Q*?K!NdZr8-rq42<V6pGSP|Bb;}Ro%!(` ze0c6+V=BAgl;ba*EI+B3GCg<Vi->97<L&)l>GJ;)4~=8-(BZ+TWTc3EuuJpy-6Z0f z6T)xZbN}Ob%lt@=<nl;%qy||yo3^#V6!)Eyj0S-BfMUQsDAVT1P;!_}9`dZSu3wR! zBjKZCrhNf7-giL~X1zdFI>~%Icfz(q64bk#n<wrG4zJga&1YXe^8`JEB|hZYwTnwN zlX~s_*t@8KfG&t$WJV`E0UEf)ROiQZTI=-#-tgiRSfLbwe$oEhT6WMs6+T&~lNk8d zKP?AX3Fb~~O(>xFoVc%QZ*jWw*b;AYd#o!rpjFecX0<(Me2e1(n#e`Rk|`_3A;NK* zMw~J-ciI_dtZK8?54Sk|0>NOc#S3dUl^w(xjqGxRTw7bu*liYa(MKfDOliW;nj{1z zn1{>)j}$?i$SZ#h^Z2{Nym&EuF~V1QcKr|2BW5MGw66+MEux=X(!U;n@iYs)U|6Wh zkjx0m?#_JQxKn{2KMigCIXz4nmN%nzsw2b2#?W)&dSdLdecm_Q!1V_Tg_8Xc=>Z<l zXyMEUj-Ovm|2v=OCF?(Asce#pdg<lUaU|5tU&p^U9#juEyZwXQ`_Nv#=o;QYk^Ig^ z$Eki&C&vMogb4r@K%faYUL1{mBzuFi3m`zPd@^{@pR!e+Iuq8usuZCs5<49_mH+)| zHK<}xfovX}9VGzBCt@DSK9gLQrNeNaFd0UeD+0qUvX&jtuH#Anmg22t7JD2<1E+N{ zANs-4^aE9Nfr`j#Bh4kyA~<gml;(lKl|w9RoIVQdH)=x#QW%eN8u%w=Q~2i8a&?jt zTAQ3uM1ASmXIG7`F5Cy&X~}_^tVuL&*1O-Ri77MIt`T-Fm-*BXsZ!?F4VEHn1HGZo zv(t9_c!4`19!pbnmG+7XuLpgnS7+oZ#L4frj<W1?gU|Eym8#-Cy(e;)>i-g@EF?aV zRibrHHiA3+ICh@0?K}8nGh%T&OQ?3XCL0KvA@b#)1bB4K%(Y8CQX+jWe^{!vT>x8W z)1)W&)8ZZtdcCd4gtyO<jU(qThx_7>B!O-@t<8hL@~6?$<Lg{EbN`o?@?WGe*CH0z zTY_`E+xLjdNp85wrQF2bI`^T|Z2LtGW@GbWB4Xd{EX)f&2&&(&lAP1dHMA?yju#6} zCVNu{WnIH|SLUE1xP<onEbo<u_7uiMfDk&?Hq5pQ_+{L&BomyP>$qIT1jCQFB}Q9s zC3$Ev&M5ZLS<weRXh|-3>>2G`3FOKjm~qj##JNMWc6PNWE~F&6-2j5c@GR`GNW$pJ z^CoROVQNg>q#I!R^DD*JV<EX0sK>Lq5e6W;eNR{@V14P%&U8kAD@_L0JPI|wq)Q5S z+5p&w*jr3OJ8RbCB?5bVDUKdoY`Lb`8Q*FeCynh%R-rdHe5_E7JP|`IQ^bakA~37I z(n8;l%6*fsb`~Up{CQ#$h-tOg$PUSksfaCP=VF?Ler6Z~`{@jm9OMl7rbr-%($D3t zkinDS{9*r?^oYUM?<7moqNm)iw+;f-KONmjFr%zHjy?l-43mcjA2s%eGQJi{Y|WZ~ zX?D5LRbNQ}xWGtPlF+TBV6B8!w%5827b2E_p!w5N+n)ZR(<5(Q-EPe^mTH;)2L-Z{ z13M@9{1d!suNZl}RRjNiW?`T$J1!TzmyE1Ax_gImIl8Uz+6Rg)IJBeFkQe~%jOi8n zJztcuL#9q;orujyY>JdXrPAM2$1=#N8%x&gc}$Ru8h;z-0h{THg8>;M-<h;<-l4q$ zEuxyZ6WKUwK4-ifS;GhWIC7HKOhP<l4QQ*){SMX|wAYM^p8$CtR-YV8FUvxbk2dU* zZn1y)mM7aD^hMH>Nd|O4ly-$6G@Uy_7=zB~*|ssd79e8aC3pF&p2E|vXcxd$NHl1| z-PihVWLCl;Dvz*H+7T@E)E=!6C(d+4h~2q>=#S{lCpo`MiO+K5#H{YqyAFu}QB7|o z7luppZ@<4jhl9S3=3_Mc>`XO33{Gxu$4~lt$KHQb#mIlXLW=p;lMt?|Yg{pEu6t9W z(}YqXEpBqB36PbQ3aE|HE4@W`kIYpj!#ENf4$}E7Qow#MV!S(6l8IXlMEeqe?;e$9 zi=&o?%S}P8u~y3yz0LtxWghlb4pgEXA`IKP(*9l@>b;FmogtC9G-_!-Kl~qZ%YXI# zSMXo0^kK1qNou`rL%$*;^hM;ot`@x3eyt<^Htxf*N|@|PWC99q*93BG9b9g|BKwST zrrTDLG<8+J(}@Vl+5Mu(Ob5g`tY<Lho1qDunvTd$^jIKCrX^Jnx`bDw`n&-k4pcnX zlfIeKHib%Z!(-fP7F!XG%cCU*5}hV|@KOaMVVh=}EjcUREHN$}n@Y4n3CXlZg2@P7 zqM`1?S(3AAY`ARRg((5Q6K|?z^+A@*r?m8Iy6!ePQx722SOE6<TG7HCZF>3_0H|_H zqZs3O_Od;cB{W+E@q|4}vN`{#kx2|EGv@J2igC;gG>@N8_`SThUV(SNo*ww5Nl$K3 zm0s1x@6<Da<3%;GJq}&PvJm!p6lfn*=jFax|3K^O|IY$==|9Q{uICm94~(Qy<^=9R zc;tyu<9yP!`wFC^4UAhd>2<Pq5^r38EP&!o*P}F;HO;S*w4~&{MyA)-+0$fm=efd< z*i|iXUP4{)C73S9Ua=_1VQSn1Wg#U)r9ARwS?fjNff7j01(_-*i7R*iij%`E&Hsg` z{pWyk!xvJCwo2|UPscbjvh1l!>RI<zsF!SOpr`-Fjwk}#zbi*>5}G43zvRAMvLG#g zu7Mb=l3s4xn@NXOUGL4-W|{?*GD<hhjL0=kjK~a3Zhzz?QYd->5&k9ND(Wf%VSW)o zyk*UYDu%pj+`N_yqR-s-bA%V)PAz+;*Gl_s3nMWSjvG*DAWi2XkZIB#G+^x%9UYGP zBT+a}P`?%iREj#z`D9(nuv)oVP+3RO)Se0(t`?!|M)I!LFG7H~kv&73vN-S?iG0EY z{9eF0nVG5p;PvP96P>qVctohF<kMAtSo6bvljs0YGneeFP(mzVs#K08n_b0i&N8y* zfb=(DU&`lK==AuTLO5%IA&%CN8v<*QxT5ZI+5gw#Wuqmc5yR+O*Ln8ALuR`y3382w z2-SV#ZY8p`8ckVrBhD|0G`S6H%RA4@)_&`vK64J+^8Ip1erU<kTeC*D_FcwQ2G8d? z+t<eCzBEAQLhw_5uQ&=EfiB+|X@M`-EssNzn4tS(`hd9i5sr@YWWCbnvf4i*{%5G* zpMR@-icK76E9LV*yQnUlt&%vNoGfr+B+jW(S!N;y?ts|HFGTc=vm<KtmF0tO<`Ik~ zOwLC>r~#zT@-+w(;b|)lTt^5vnt7vu3ui9IE;ggJD|vbP`s-vt4bS+<QkeoqgwKz` zJv#Uq3yk5}p99Cd<Pi1NA7RKwx!$)+MSn+&4l<%08bU5|4nF$c7;+8q%;#+G${Z`1 zaR2f~@91gv&#y?#Q|kv@N}ViTbgCNJ_B3c^&-gP&C*BG-V`YJJtWlTymu2l{cS={@ z6(Laun<_6w=A~>It*%*KTtl?r{2h|M_PfV4sj)_mp<tNa(;&wnJM*6Yqn44v$H@m0 z0lZ71PbyHVuNdv!5`XKoLg(#pYl&2(q2qG*#~(2n=33;$a`U3LoC4AKZz-YTS56ry z1qQjAVaP4zBN3vSW+56}PXSNma^M?_*xeJkODjdd)~-x1dCog?mc*|^Y?<>KF@f11 zEHx6f%%=zJ=KQoQ=DNSv|0ah0qV->z*h7f=(6I^&@L3T;kt?6RUI<n<{io?(0k6Eu zxeiN;C1<8L=A@0658?2eJzD9dQyg`pI`)Mp!!~?9x@!E_P8mG5%#1hcBM8Q1f7GB- zRv>>fgM8oa3JpY*8BzrrHE$NFEU=QnOPD|0NjeQb9A}$|NvGs@;tBwK3hWY{XWU4n zqEH@j0|)K_wGU+<`+{Hs^8seWU|K>Zo6h;K2f#(j^u>V|jiE^h&^~jIjC;LWD8@`8 zT9AX`PR_<hR!4qsH~jdwAxqFgwE%g^!-+!GBb&cwFSxQ{{Ewt`<SdgBEe`}U9wp%1 zr1CO_o&U^JeIvth;^9y1^EPFXY}P?R@zs`}On@6{Rrvd1$ON6V7><fdu7@mVK8)j? zicM2-s3A_Es{f_2w?~oe`Mju8H)Qc{Za+0oqaRA=w#obAue|~b`}&cPzCWJ%crhmc zOp&`@=uL+5;v{)eV^wFtnDeJ!LZ+)TXtdk{l#Z`R{XFLAQ%8J-O4K9Bg5lSWRM~vi zG>C#GY=*&)j`dWq@3$0vn3U?F^EB^&njL#tTwfY}2F%gMP(q${E6S4TI>0j#9T`Yp z>TP#h|1w6iW!qWXs_lIx8QJ^}*adktj6}X!HsJ7=*WJ_wB3nmhV(A)5QPH|CzHroh zoq-&#YA$MBoffan%&A)($uY6xuKQ4{-iw43xaWCNKlzdHR1S}R;pNo9PPpfZ2uu?g zI|S_=QaCfP9o)!DxBL<~YAyrYrR50@eUKtclHy>4dJzavenbnFx@cPacs?HU^?|^* z^$Lj*p^Z7}Yalb_LKVWus{N7wm1VX6RjyikUtA{dRDv{h3I&!=8=)I?J<euO@`d0e zZUh7YbbC`eo5`8~JsN#2jaQHgpkpog=^z<Utt24rd)4<!er}FCgO+pa{lqMz9U?z5 z5z|uDhEjmd7Kv>|d{4?Cfw-O$BsaECoxiB$Vl}(eYS?H$?%owk^c<*x46g25CLEfw z1Zd~<kZM%047^G%pB~1t<5e`w6D(;6QHzny!}%lj{0G(O484(`5bMeIx^qZnnmaaK z1ufE#D>~k(VKcrSN=~VS%A5WVid`g2#~}l5?Y4+cLd~gfBzMp1>mFT&Xj@#6m#Y#y zYcKYMk4(o8s4vZbx}kQh&1`Hp>%?S7!W^jPzw?aH##3e{=r*SrE`5luLR^~qLj#AM z>T5Bn;yMJUfK=)G@zohI#_c-#3~$fx7~@M)RObRvY3_|z8SBV=od!I7HzL&U%(JXF z;M}FW81^Vd;+=c-zBY<8XqK+~XX~JZkC0y9U8LZ1va$8P0+F!zdCo=7u8r%@g-+NT z0kApwi}^!Hj`O|dEZjy;;Ux+H<UQ*+oQ6GBkXaB)e+@$SG=7iKD(;+K|NZLOD^<OP zlR0C8OfXA&tX{~~*l&t>d1O#p*E7>YYMg7{+#Z&q-PzjPzNVlfSS@~r4QJ3<Xay32 z`_cb`;KKqtnAkhxo1R?ss(@bK(zg=Jf+N2ML~6I(!ME!eCKYGl)973nAt0tR$Kn>N zliEve;-#e>)yf*)zBXQN6B+k=aJ;Rjh$qxDnjaaZA36-QiTqiBef;auhc*73HJ`NC zkfhOaFVoOGePJV?ENO3kdj;)R#{X$-R96To>6@*)F+6vdG33VydkuHan)S#06>sLh zSZe6}jb|Xc3=4Yc8{N~B_2yuD?PujQb@3=gY~b2)zSr82va~N+Rr-E|2*C&rY-?S2 z;)cry!QgNPm&W4T<f_J^*1N&nY3CN_y6lPOKRF@2)c54lK<p<RR@PxV1AA{<{2i~< z`u)`L(+RW@I~#lsBl{QZQ(`<BcNQ9c<TRFF(n=2OBn0;RK}6CDvK=RfJT8sVpBC(d zx9IzS{?$JH(N8Oa-}+<SOPThE<ESLl*oou_)J}f5Q{HCK7j+Fhm`oPE_Y9_EKYiBE zjEl`l<o=<(B>#vzVK@S^z30>TIdfp2#qd41hZ6G3n`KI__2^a_8*5R%1NWDjA}%hS ztV=KS&0qxhn*=7k$1ZW6rqhU$2D=~9YW<|sAJKn_0n=MYxnxfQKRB4(x@S*5(Z?Fx zO|j73kdu4H*Ze)ssNX%x?2k_+_9sjcTG31U>2)FO5L;~zDzo*CEm!aOEZa?N-(qk6 znWcsmFln@NVX#tGE$qb%$9w_Ssqgy^$M}HHbuavt^^%XIoE3KnK0gPYg_J)(NCWl1 z$+?WxxBX8qIXrC4GDJ*F+viC>EqM;xGWnb8K1G?^8h&>>mi*ql7(K&Dwzjivad_V! zKlr-?)?Vk>QaQGz&Dxz*b_Y0u-f7&;5A_Q<HopFmDzGL^J>E|4!WK0xePnlZgUEHM zU;aIBdjGY`vFiS|zMe)#2dBp}I|y*7Tvi~;Patf!74q0=fE$}EROIy+6RVNw47K^6 zh1e8>&F;X}dA5Xx7QXL?rx6G9qTkK`OlG)#%L&doq}}%QepT9En<Z#KEuXzF=MQ^m zReR9XGrYNhmYlx^He%ih-9e+As2p?OQQ5pp`gj5SFF^Ej>xm4(cC0O@F9vIKeyTel ztiM-l*27|PFIo1*=@b1(#}m{55$=uy`EoJ4&fQFYhf0c7&yzQoWbiwK#z@CT<)9OC zKW#XdE|R(782oy)(x1bj-tFmV=DWwK;B4oGHIms*_bvI)vwyawwzjjJhc4W3leM(0 zBs(84R6~H@vzo*7_>kUQv4God91lI3o?}IhGE!*8-9+b@Nhyh<De17fMKke&B!Ymb zahRReh_|W@8}VTo2}SNNFz>#v3V4qymPbc>&brW|$O+$b{<~gr9w{wZh>qmbuB#AL z+nKYvL=5bZmK4IXrdI2tGng_8vyhu7-jOx_VmMLHDrc?tgF52;;j|>n^>5WZ%RNJd zzzWsMZJxWHe0D^Q3Q7GW3~V=j23&wMqm2Dg!M+W*0xq|kNEPQ+wIe=%JJhca0H<j2 znFY1h+T(K5j}2U1nw;MB6vE&dOGXYjFkxc_Q4CSz4se|6SfQU#xqq54-firMK9Cr3 zGkJ@WxerDzVU5%jHl4|4`}?_%B`8a>guZ;j5h17=l8lW<I!^LiO{|<Ivko#VgKRZ9 z;$H$Ux7k!VB^XB6bIo(nCGdrH#5{e8{p3k9N1}V0a!QGfpVZ}DTgl$v;EVSAMT!^f zPk!2O-IeYA_~m~ST()=Lygf7goq+&?@v^oBt6$?X<TFTcvb{9XDoBvs3~d+XPTy4I z@DP@q%J_RdKa(XKp_|~|KjJOtY$d>4G~609GAKtYwk4WF+ghXDMmo|^STop~O+dCi zyv<&T#V_&JQlqOVU@S$q^La$lYD_zqQhUG0sy`h{3Q(^9@Igj+(_KlE`?DQ8n<tCO z6Zxmr3gal$K@<FPF3^Z(UVSlxejEvCD$X47f$vO~{1p&(JR^G`I4$YPT}<*}I(pyQ zPi(t3N;}`GRFlfR|MhE$&t2ly^2wKp;y&nC$wQ9ms}I`Ts|LwT=p}7xogTj#eJ}!v zeEeplw&%gFKhfsh18sjDckZO4&hO--67^TO0ub+s5`kNq=KacM#FzAzp0*3bbHuCQ zOK;?0m2V=SY0Df#(|ste2Tk>|e#J-6WBSUpU%3D2ry4iLlZo_Lh7*8u5Q)$(iDZyu zA-dx2h}^MprHtGust)0Kg!Jp#=8R0mo!fhd7FuOYdGt2whY0@z8(o%B^@rolkJI33 z`J2$dUC3uk%g@r{aGN048WZ0Ol7qkN)bO)WdDw^~%EzegqYpghb*-!lm~@iAfJek@ z@_~v|u&j-Z49w6!*#%ZapFP39Lh-X!BT!DNMKzzITES(oFf*o6Ju~2&0^grR$IOb- zk=5woehtg~RN#>g&urhNy+?$)VKGyag3D+!D~{~+)_sp@f7<4?D3g%(X!Bin^D^W1 zvd728?>Nu4Qogg#2Dux82)<Ct<^A0WbNMxKz(-U=O4!)nh$6K%smbYoI;jGB+H5lY zq;GndWBaSM?cb~n%3x!b7cD4n&v|6_y4RB4V??UuXGb6J50CQV<-Xn)Vz~t^(e1sl zeLfhFqD~hx1(_VnRMfXC^ZyE-cv?`D_2+837bC~3$C*5SmsS`+K*W|KO8Q7W<^R$3 z7H(1ZUH2#rN-D@mcc*|zgEUgo9ZC(|IW#KGfOL144BbdbcMS}sbPPR1%i(_R_j!Nk zoa>xx{|Db|fA?qYwb$M&!XHZ(S!Of8WQe|ts-li-St4xty@UFO2=z1_{!Y8zMARFq z#6nH?3gsXy(F^|s(tWqLe#n+2{^T6xmq_J)`NnI9%m(@`(+T1ncxUAGCz1uav61&M zoZCHk+;X7?x?QrN$@*5Ad=PRF626KajfG8(6toYUNB{qdyFaKu;&>iUB`6FbD(1Dw z&kJ7UQk<Q_X_H|zn6$*FiVYrM0$#v6yG&Z-EF%n^fPw59;|`%zXXa-<80I(AZU)P? zOVu|jQMd{xaa}DOL@JPSP2-N~E-S9Hx7*q`2kb9nA3<nV?Ax2vU<s8eOB&%E6^3_O zVBE?aqMrH6zXM3hEF<XvZ4{_2yGxSD^h=gAR?(KE$b2w0+W~yLEY%-)!L;>fk9M|P zxc?)YFT9l4|6I|EpGo|BD}Ql{FW;ou)+h!DyWo|QFneywn&Ni%0XO@HTqh^?qtv-t zfDn<Wqev%|X?l_sWP;K2OYzjx<Qhph#o9-ZM!YO-oAU56M*-C#iFMsek(lBXrP#A` zx#6h4Yf?=?9UDEk#(C27L4;MbxLwP{L-)(tv$G`oM{lFnqQNG|!@5f6G)VO1Lg7nU zEO#%vunUH_bl2q>67yKY^+YO+i=#&=c#!vaH$w@U>Fj*R-a14)IvehR(^71^ZKs|- zGi8bX-<uYtB14GH(`CQ70<6f=GiaBE9UXse2%&$-O}u(f6AaZV7>&A(M~Y{hmF;0D zhTqGKpR_-s-tDnS)C9!EHRyGpCrh+g)SD$t)CR2{9z~}H4gX!lmN2jNzu}nkoQUKP z0zMNZfbdg{C9Zhmp6+T?ZvB%Q|9_FIMHrlLE!ywb(9Exo^Jc79k;MCGdOUBW|8X2A zSVIir+&Yc^3&m?DmpAp<C$^4o-0RPFA9(n+wFN>FX8F-F<S2=*-_k0|*9AsJ2^v-T z7dOS4F#MU2t90-ICc}--FyO?UgMtL>HbFN7xzKI1n+oy6xk9*aRFnjqt<pg$C^eQ~ z^q0_`EQ?s#du22Q_D3wHScs;~2;$q`*ZUV8yftly+ahJp)i<zVxKth=67RH-O+W^Y zueKFal-^oDM-57}7L>Z{=1CyaGg2P3z+$@PRinOQ_>XxtTv$TteIDGttNE`7WVYNa zdkdNPt7#~wK)sG-gj19^ITR4g>3ITZwIp&kq$7-{bSVj|bSl4gK`$p*->#RK+ZmOi zpq#pvA7!=TeeXDs=wpDDF<No#fAHPgoIHaYD86b=ETU`sF5FSNFvw*#0#0dU7uGQ) za5UVNOYC@{$fEpS3C~B(Te_0EVTfP!8RNV`Nw3#+vLC4ZG?Z`>GpX^gmmamuFA3t- zGfSN<03v>ahsJz|i@h4p*|J$&c!31GY}4@yutrhcI4Z(Ya`<dxCl5{r#$#0F!cm=X zgC%Ra&*bkeyYK78FS2Z)m`~ezl%le>X7{0h<>fwtdi8+Y+?`Xxq|@}tpoyARq#<Y! z_LyC5P;VWV&J(abiiC62Hkds&HbbWsXvD+Kp8Z=jzyLztTwXwoeS3vQr`&c<yZ8Qn zkCKr)H1F3Sohpl%XJXu7wEBUsE}{1SBgDMKdzPE^%vHcBd#1nXo?##A^t(Pky^s=@ z<Mj3nY5gIGou-`YTsOU$rUd5Y5Pw=2w94>=Nb$H(c1H6$j?<CDd@m1Nz0g?DW2i}1 zAliue-g<cwu~zqr#U?!N#_VWtefjq2(T+*x(GHCykmm32tD`Xsy=9(k?@$wu2@#|A z4@RTMf-rHcz``>7rL<&9*$;|p=KepuBUsr-UO1M%a^Rsy*WGrj2!1)PIRby%Yr1#( z0zdiOpbEWwpTh1`c;$;kf!N876)Hs0bRqoj3O<swgYQc4x%3=^GdYiCmhJ*uArV!C z+ZOI{(*<e8q>VFO_J-VgK_HP^K&)1;U;syAP1x4`5L0l><BJy#T0K}OZt<SkK4c<s zv676pr%-M*!^A1i-wW%g=$Gj2U5*NKRwyRie^BxR?w$>|iHUsAr^NOy7eXm8Q2_k; zL)Rz)wO?H2xAS%o5Z(Xb1glY9#lDOFD@djNzRgwBHQ{|!(Q(nq$01A^;SOJ|;jy+) zix1yEf8zIlE%9}Ah>m?p;QDM2`^Bi8lmNbDRG`|O^eltQIdF&(X4eu+T84KWgO$f0 zx9}jb9$09E&cXA>k`Q=|<<?I<qbZbkInL4TX!iK)6%vx#)juKj5QFKM_0Ul7Fh8P$ zj8y+ysHzfk=Q|UQuKGeQd&0Zs)m8S;?Ddb5f2+-4KKAQP@8hh6v`jULZ++vLgARu~ z8mQ9@$V3`PM5NRBGAig+IQ(V>{k4e}LhAn&J(HE#`jcK92d+}!sk_<pUg{nkzsqyp z9-C8=g<rDrldO<dn-Avv!HuD`3Ax%n0;s`9=x~jh@3|S;@w8&p`+8Ky_8*LZDoSdc zA=A$@JTh`j0dsZw2quvfblEFHC^7`mWP2u3|H?4yWX*PQH7MNVDt{CX;Zb?|k3?WO z?rZx^f!V=uaogM{M_}t(F#X%TU;d+>6Sk;1nJ;NX>$iGO{oCYdkh*wU*;^aaUz&4A zhcL7GlH<=rXfWw48Jv^oJQVSTC#p4)T>7+IiMv-#hopE$;cmsNkWR1G+^{zEsVw^} z;yiY?gYp!KgiVghlYqotb@;hIYM(Ac7H$p0*Gs50vM~aRgObVTM!E9C)x|*e;1V@s zG-3nhQg#fvP5V;PhidaIEY~lo0Sg7#tDY^-hzO?7X(zR>zv43SS{=78rQx?Q@*aUu zf5l-@EKUX{C0%@9yr1|sNXLw>(XK+CWj*_5U+LW7ZH4Ob-=sH3U!D5|MRNF1^L&{V zDt_breN$Gq{*lmoMK*Irkdo1Zg2*5&m&gP^aJc}T3cpNNv;NJqFwO=bZZO5iP%i=j zRR5qI_uR(Az)J?uv>X8b%0JFaP3W&r$b2f4MFOF8cLxsaH@yq$`1J%;Izhv2CmB47 zS(xkK%Vwa4bt>{#E|-b@zh&rdC&bMmU*);s*3|1=Z+M1gzk6!WE}3MW!g7c09Cb@j z^C6!w?-+az^h!`%$Zn9b9jYc8pktaeIQAl=I_sv)p?;ve_@87PEW}<O3@cNJQ!k+O z-7i&Z_-;1(e*n_mA?oiD0%_5Sfn^<g%O(M)mV}2K8w@^GHu{XbCbENGRiD4c8_`Wr z6!#Y>T$W_yEh@G2C8Z5mC+P_}BK!>0ckk4n2hojWTqPrv2v5_?_5zc!8Cw*sg7=a~ z2xpPhMi}zWlwvA42>N<)`y<gl!ews>P&dNgqQ3KNUtx(OHy|t9%fCC6sNJCyjmsdR z(l)&P0}Tqp&kJx_eCo514b0VKK5^jpXVbcLX}DXCa8JHfrS>Du%t*CA?!alaKBD~n z?uh#9*1D4M8*+ztyt$OI-`<?xY=u($+R{)EzJ-H3)gakGs@pkPDesMOde<DNG3!^J z_-XI9gwioNxdY2^nyUN1T)tCiF2yFnw!ky&d_{)f$>0&=Yb}v@*LX718c>{&m`T}6 z<evfyqTl-M4KTr{(xkV_Yu)YkGnm`|VJ{8|6w@?F8Ow5J^53H@;-s-;DSzpZx_|n6 zH$52*=#(T&2-+%w44d<vqO#ZHsNWfu(p=;DGM0|EpwG84EEXp;=xy+WWa{x1X5{$r z3&f=l15lFJ<M(wh>rY;FHYfh<N83M<JbwYJ-j!LXHYp9r!3M-<jULR(t8nO6o&J1$ ze1vs3Hh04v$8)CLiwU{67hq1!l{Kx)#~qslSKF?G)HXKR2m#TXXDq%l9h7JMxp!IF zcQNiqg2QWWu<GS^6_XPp7v)}0w!TZ-W`7|jL463pl3nQ1$?a1g=COdJX<p^NlWbXb z>VymKBVhmBuGr1Jau9WhWlqibw*y1=q1#fY)eT45f;K|Ly*BaN9TtByX?}kB=^PPb zP^ehJE7*Nq%+iVjb3Ec=a_4U{crl$R2!8<-uYTi}n(cm^a8YsVpW4blCTCJ8!t7w4 zx1PdfwBtVAF_Nqy{!#qY{dWkCzPY1Py5bwnQWi$ig5(ZX1yhlN>|d{;IiHP-B(1uq z92cDzs}cVNeS@jkX&e!O$HW_>apV~j4RNI3>4`p^c^Jw>m))R?VQ##>A-k4_S+~v3 z?v9CSExTJ7ip-)_lr}OA#`KgcB}e)!P~gZV#t}H67+y^9)8|`FkYE?2k{&1pG!8CM zMh|FF7I!ze#OAEgQ0sp-`j!GcE*=EtcD%`4Zk?96Y&?Y9>-qOh%t}o2To1T6s$YJf zh+iuU-rIjB=Y)%gD}-&nss+j!t`B03c<lziS8;}_(qV{h`DVmPa29=++Z6!o`0UBA z4aZ&d;e03}awugvUb`tah7JkdR1+5w9j1W>``Ipt#+nKad|8$`LyU!?ZfS7Kdg5xC zpdGX+O%H5%Sn5i;K^(FJN@Crt`@OS@C$O{|!%Sos;I;Zaq6;7U6^2{31ko_1RKud2 zyOg1aTkt_iP4rt7`y8n$d^V#RM<KxjyT8Ay8Jb-0g1M-tjAUO?;yJI$KK`f{i{j2a zO!|~4wuo)c2LY+lk+hQNi-wCY>R}=|gGIKIL6`Lc`r4bc)QAlal+=JT9uboJ0qbiq z5$T4D2KhOs7YVs(<N&a!=h02od(CXcd#AH4+Ua;t1}f64waHF@v4^Vqqpd{sCUDR> zF(~0^jCzWy`(5YnSmbQ(L)FduS%dQp4b<?*-xf4FpjEFKCG~j1wtueoG*LJ&n|Gft zFD?(WWLJr63_4t-jC(Bsx>;QUs<T~}_nUt2WX4p>*W3+*#og|cSj2~$9M_L&`H_KF z&FjCjI}VTAS0spEccsrM(+Azp=016fuUmKjO=(^}-yS7g8`f6-r-*`W33<KN{bzqX zT(?mPiizddv8{gDDiRIhoAQNNd3f}%T~|IG(!}JOyGbN`lz4RMBW_K4lGXm;TBz)( zy<O|{`lYq#jp3OlZ5U}_$I5lkcuh^UT27HT+vK)A64%DnX;?vBM(xw!8+<l^PTCNM z;eteziI8nvNI!@}QCwI+@1y_9KH0~$C{0PJ{-3h$6D%C#vtt^fW)j?F*nK;S^EL7k zQNPH)@g@X>Aym?t>w7|K4@8qdNe>7D{>Ba-;qP3Q%m4y0&3^docuQ_vU^t?DPzDd# zxHwXel}->pEHCx#2hVg&#+2>RQ5A+->y`(mmDHH{EiLVY(1lDZ*n;Aiyh`Z{PVR^0 z?}or#_T4Ts<RG}adecR2Td%IYyDfdeAcDEy6xFhe5$q|<A}#Fp>MDcLtl~tci)1J& z-wd)mdNC|j+Fqo_2X817-J^<9>b!9n(%74du<-v>HLZ=B9e>hKxD+2P;>&UaAuK)$ zNg^z%esBmPMS=g_-wN*C>j=s_TFGjaf5zNy@MhDvj}hQ}`!j>p*ydjBSDZ!W$WoSg z+xB99+F4<;2;>Dm{whOWJzjv6*<$^nEQtWjWlyA8Vmch!`l)QPW?jhc-HMgh-$ZMN zD?xnf=U+>lDPLZISwTV9id!W_yMNA^YLoCwfazHiEbKFd5&H4Vqo0NIRB}Xii+93M z!3yu0-yYmFF_W*fJ$uwWSct6eK?X$lw9+<1^P(py^r?WP-Qdog$OzI*M<E|ZS&LHd z3I&GW*IQq1vkR(Ldr<weybj81lEXU;NCh3&EHee2ZGoe&@V&QQC<q`}dFiqOmu)q~ zH|`5*9={YE@BH0>c3JFlX6CjZ@wNKP_gqmNr4`0`tp!}II|tqUB!t>XKKg=oPyXJ? z2R{4`hZzOIxfV*5tPd9)kvUhLdbCqNIycuJQmRcGN4D1<^9h%;y;rS7!@ZXw#iJy` z556~zqk#xj=O%`QT5qx@)|<=X$It8c$YyvkPoS$sH|f7mz|KX_-d;<<*#+V9uULk0 z;}lB^Yg=2a*W$(A7)NXMu(fmN96Jz_cjH8vy|C1XRv@F@OBFigDB4(-Q&*ZT{_ds7 z&KTsCsw8)9IG)@w1e<212)I|=1bl(`&m%((r@r>Zaz!l=W^VW`ZeM3wy>9o<AM$VP z>0HuJez`ipV(Nj=+JsE^8k6h~N#=0b)Gpe(khbtAX2>vdNL8r!@Y6O($9*kD5v$~^ zDpwB)o|R5TEoYIn`J29AxUx$hnfFIO<{D*6Rt{Z4=7bpEJfjQmIf>R-1imf4s`lke zRg+5080W<WN<xBajsD`CnYGT<F84t$WOjGkT#maoxO1bm+kDb*C$h<_u?Y%eIt7u? z8V1?WzeCMcOt_e(8<`lQnNmsz%*#3q;g`J4O^=s+?F*uqW@&r<^rCfluBzbO#09+I z&$Y9#k2A(;*mcK{13Gga#=qr!{;4uC7CoQJ0dzMVZmsi*Wj|nA>DM##y<5V5Uy)&N zlAacoST$zN+*c1An^P+ZNo>}4fg#&&mBd_R*s1k#E`uIt%4;xIx2+a0s9l(-9Dz_} zVVm%lhmWj~H?A|~R2N+NRq<PYGw{QPd_C^O6j5*9)NdZH#@1)_1e+hD?2_mNo|wax zQUg+9k569%uEKHPO%RcHeU!mo*&jK-gcWIdoVF+j*PZNEiA<n1FhR(seA_r4Fe5{; zI!``h6um=BO|V)A`Xn00plkl1W$9fmG|=`oqQ$}%4mgJJK;hmiYx+#*SJ~Yc?Wzyv z04&7LaG;!ab7@Xa!Z!gCk%NSBmK+~xbcsF;R_nXiL+6g4s5>8pwv)6d{Y$#+=0B{L zW?bN$lHK0+EsCOux7p0Wo(PJtc&d1;BxZbq61Y-CS53KJ-cy*<5%Q|7gRZ#Sr9s{B zmGWn5k;37=Ou;*vl0X#hg}1F{8~lQsdHBxZ$PQJB^wLszlaaSn-Ry*Z?NF}=|6KZo zziiOpVB<T}$>*?|W^{BrE(3@qb?k?le~Pw%kGZi?G~(*&4!o-%6ZEvs^#XOA*fC38 zR)walvqJ9)(fkvq7jV>kHnb#6X^u89OTO<XS|k17I^bK**K!Hdq3Tf5l+cqKPL;?W z@t*ynL@8Tj6joY}Zu~}!!%ISFv7%*9F5B-nbEsLUsSoi=QZ^%}VtT?&yC_0fS#g~O zs0FD9`sJIvsAids#ib|2ow8}YHJ)Araj{+lgHBCvQ`a54&yR?YbatsM25aDu7eA@n zF=emH2zz@2#3grYOORAW8GUKWQUaO^jYK^*9~^Z`tx{5z$y{n6YGeiu9uAcom1%14 zL*0zrMWzESaDHYjJEn@hkX=GBy@r$t3bOS8)v18@1m_q$*9nt0ER|x*^=k%eY#^f? zb0xiWNx`5p#fWb-y?Uqd_6Kx~h8nUCx>442w_roEVBMx?J}R>Ozc$026AM{B5s>6F z5YpnC!^1_?2~fsQ%*Bh%D^u*&DLa=>Gbp^5hOS?VWBs%sQKF#;q#qw{*}qJ%{pn^9 z30jAcn<>6a`1%JoN*^SRVQ^XBvM6jOS==kn5bZNHt@Alwg^^<8hjY9-0R!#<s!S@X z4=sI$sHZr&01L@{%xr|u#B&1uAD-9(w-Y9!mXtoaWFI#^773&^bIyj#q?;n5^t@Iq zZp^y<TTO1VPkd%G-#H`w=c7nEjgdCRDAqG!ncwlYQ6GS|>f(;m0<snVG;vxa@Tb!4 zqZQZN1b;qW`#%XuO~_la&Tx7&`gohy6lCGx6r1@*T}Y`<4P`P7%`!bF{l~kmn;7AQ z$?=X980VpQ2FIO8DZuE+Gu5rh??bf3L6TDQ8XAtH*UoI*-2F89RTlI&!|f<qke^?j z(=pubPC3=C_dnUcp|OklD<MSYRC>?4>Sc>KazNSfJZjXz?}BQf@mA;%bUYw<TA-)D zNCyO9yGw*0bWnQ+^(^QA7g_s?_hbN23@bGUZTv8qUto@FZJRtlKzGTpRwj5@xbk+1 zT&vz2BtvEGqQ+`LB5FBtf_{Jf(uFMmdUHsFL`i4)>Py7*!GqtkKpZt2wdv=Vym~H$ zs>brLX%wl^Bt)ecn}0Nb6k;a8!#UUYw@DiO7mVZ~Ch8oMPo=I55GB!X-lPVd6zjpB zh}G|%dw_`_xH;ZURG_37@cv`OZS<!pxMIb`2VY_JZ)F*p?-hn#ZJ%GEf6jpfYKv~C z*#S7lCNykQvl%`Tk;6Xmy1m)CY<@9;RhFvMhTF6nxfJ<r{AO?36l50q*FFB-i>b@x zix_v;AnVdU_t$jLKs5)~5Y0U-Ne}w)C-YH<GfcVE+WKxW-sWwAWY6j%?bq@P%`;MF zR!2Aad@z+g5qk$$$3t?#&ZAk1{5Z~*iVJO|sGMeKQxXdZ8+0`29S6<sMFE?vS@pG{ z_bWf&C$}DAxM{_p+Z{?`yOeI-O5Kj<u!XW6X3=~(zwcZkI{#p|8tul1@`fdLC`RhD z)PBUqUUD;Y<0uhG2wkGxu^Yr<uz%j-0roj^R=KPXE4tTk1L0LT<V*&SGSG)V|DtAd zxp!ln+&m7g>CA)?-w7u!R2ftQ0>q~#)=F<j93HPNz)zR*b{gG1?tk@A+A;l0cNW!w zEG_4{&Kk$vdu*=2%;DDcF`p-1(=4)UB}_W|YvKAYoURw?rVAI*f$|l=gb-Tr+t78E zIaxJJY!9~*`W+I|k>)kX>TVi;j$aYa9~+}XV|xd69v#^$>-DHY3DWf?y<|i2Q$^ok z7FGh%>!aZMg_6E*1czX~J=EF~<Olx67R!KVQkT+5<qhq346<UNxmJ!q%fG9#NhoM< zu!7B81!}8HKGB&tkrz=z$6@9*8UKX`*TR><VdJ6tpoVIBJpgU}4kLE@%dUQcDOusC z{-u1+I%qielq9_BE4ezm6cGyEQISzFFV6-N@an^2h|SXB^yb}$g(^nF7HaCVcxx_` zlyU|I#wWEy>Dy*YMr925?hN##W8$F5>q6-#$OoNYv?n|${wfNfVzKl~U(ExMuAOeH zB5m{n2TZ+@)5y_opMrn557ii4Vp!q?4k+ZIc(?_jVCm$v8)9~I656y*z*W7(<Pg6+ zFzPqNs1&%!c$3#Ws<|6X17UAk-s>Ope|(^mpwE#`d2U6u=Hw&>O=wrU(eTPE(lU)$ z<W@$<=76iWW0#K`pfubOC{%33*<VoW1UT=ifAuFpn1H*%FwgBV#=fPqFu|^dDO;9% zR2svf@;(35+3>(k<_!a3zBWP19&51;`Y$I^4X-<@rr_mxG(_a_>Fv@@`e0@UntGb` z&&Yn8Oh=l9RhEYqwRO(@X<i*qPXDd`BOYimr+Hm&F8>Vnt~T?NA+u;5Q4GDC@z9*G zF%MwnT~c&E8dV+?aDeyi54x=TpTPISXtaFjg(nD3lfXG_T5&c5Q<0}LpH!sh{NHVE z);I3}v3F&?oAcmQ0Re$6n9WMyE|pielr_?axy}qx-MsQyIhFG*vO?k`ieKGP?F?@7 zaUy)R-5YmoAxHH?VHErAPIH%)aw>P7jl`yL={)$~Vm5;wvuSqQ%PjZY-humjnDEm` z4O0CvSGTzKA$eB(d};UPvm$@N4ayG9Twts&MuRoB>Q=)b8s$_vMgBAY9jkB8;=ACw zQo#DzNik_~6TiiYIGsA9N6;fVtcXQ!VfW$es>XonAAn5Ih<!~r{sN{;2?TLkga@5) z2?nf-3pR2%2JN77IK^Y9HJ;Bux~W(gyXj}V|Lm~BJb1~tj{F2ep6}{kP30jZ&Pa^T zu}@;(!=>7H9NpqDOy;!zizBYjQ7+VSrHp<sReN~i2rU?<(sr^b7&N|XIDHX1(4*(0 zP8#CRt;&n_J|Lsy_6wJ-T-FbgLBoiOh1tD7o`)99;rzs$I5_xaNA~7Fxlks1xcl+= zi0KYI-S+!-Ke|7QPm%B;@d2P*#wS5p{8T*Q686epg7B{hmrH&!IP6Y|pibXDJY{*{ zeWqk1N9}!y$!P;I{3}3wR!!Kq&a-m7&cv?Ym3Cq@I_C}HWK<xjP7#J;yDSXbS`lY^ zE~F?$GfK>ofoFfsls73=Y>26w6Tp7K-U#b`9Yn1Ddh?^3Ava5CPzhMNCa;9P=|iV5 z+MSfpM~dm=kb@JMMeE2is*QQ!pgb2T`{{Se;~f6*%Lhb%>O`%mog-Gl#l<wXZ{i<I z3TaJz#CKKU11I%YJr>=S1(ej-G=ZqH+%MhUyVDwC3E8fWX}tHZ)_UuO^JQL;vW=_3 z)4kcmv#;f0=EfmAK2U|>ATm^q-bVH3Bv0M<EQy5t+MFn2X9rC6*28!5{4$<h{qbSj zo;qcdZq}dH9jye>t$svEqenaq!(-3h3aNeiNZ^KIARk~9fckn)+|MwK1RSQK7IP;^ z?GX8*4Z3p|;-27Kps@$D5Hs=l`4tJyy)AlJmAvm1HvoxU09rrw#on&+*8niOw&-#n z<e-nG>PvT$_jIC&VfBT-lhH>kl6U2%pIhclX-)r!5r9*ht8|@xgZur?>m`Z8=v1)^ z@blAjr`fo$^?MF>T?zMyY!0>oCXBdE&1^;lPjC(*zytLow$z_AYHnmJ%}9q(hQ?kc zMjf?02<E&_Z*rdyU)XJHa{6{7EDVzNKHSECvXv_5VanRf{_uo*Eya3bs|KP0G%lMl z%CMjt`b=svWy!7wfV}Xvxk&7rt{=(%hM|1OE$ifqG=5DyYiQPT=U_?TwG2h~mj9t? zV{b~(bv<^6DbsVm#Tt{q9B}E|6VykI%Fq9qlk`{&p~n^CtbF1cn+>Y+p7nB@U7ktC zY(PVx1VJyBLfDgkDr#dT?O=Yfg=yvR0jL>-0oZ9fw(hDX;vJdF*UGXI=>H5F2hbI< z;+f578L|h^`_LS$W8vlv2l=?;sP;z{F_e5z24r9J?#J}hS2c5jbbZUIUZ6*Mn2^ht z9C||sZ+sdXnvR{oyNyOYD6X2Bb8YtqBj^{K@)tbMr3n)|EiVf_jaNqI{I9-03EhYA zBSSeFBk*}RJo$(lIR7A*ZGT3KT|>dvVR|pgO^+4pn}A>3=`K1+t;qAo^7(=o)Dw2? z3|q=xp0l@oXg3}@Q8!&?Jvyn6)C|f^CXo6FzntlIS>Pm|0BW>AuVtp11$7xnJW_2F z<!E~J->F+OnYdH!3w)t!{)&a<<9cmcsxjS4@%16%8*}aifDXXoAL?5do}(baVN>YU zV^ff)x4$ZH<Y{x5k*VNtI1$*%tA-vbqC(S2CgIkrwjZ$)J0~@S`DU>*>NCZvYE;TV zNAT;1FR%Zs`F^Q49|D=(%ZU6O)r%!e(RA=<k?`J{$;($zc%8j5T82Ixb!0w0k=?39 z`KwxlO=fd~%GnPyBImNRU^?lsDC}59Np^fC;6(f%bw^pY2cOomOt}i)oTyikxUBGa z`*GXo?WNaZc*bWQ&5kLy0m9h5MJ)`G?(=P)<`e&`c4U}+t>=1`QTsy9<I3(5S!wPu zv;XMJ<mKiu6euBRIwkCZ`)PF|N@_RN?40lJ_^Qi(z5CV<Kw;RRxN(7rJhBnzn6oqe zPX(Rw2_EcozFvx$bbpp%tFId3>OX(*-l)~B6rTXD%NV{i%p%!|nj649)MrlpE#SCE zYR+hzaSuhn`Oa$1+}!Ilo$pTC{&;?lx7ye8L#6dExdOp9*{m6Vw?TM^B|`0RzkTT& zNqLJOA|c8_;wLjRufV%c;K0jE&SpoLpbm;(O*DJ4-^Qma6pf$QZA=6fGehfLi}E~o zHks79z-sXQq7gZEM_Nin*Iz3<U@Q^4#_%R-3nB*N>AbCeK|Qy;rQN6??DqSG!|B`F z<^kvH=3({io+iQ^i|X5t6W%l#W%U0g2*H|!D!7j>W09?LX*e(&58Fq)Ko~kVu?MQt zRySPdqkirvzd}f%kRkoXvk1)hXc+0Wl**`dx=ZMJ!a;8_I-V}FJCy#sCDX?u_r%W1 zFBeaJuZ!*PIl4~=$P?(H87IQW#~J@SwK*c3Qik`sQyV%G_e|VTsO-vwOH>Ku>CnjY zaBYKpu$Qo&6y4@+zb>$W8Q4%;N6#In1p{wY7+YADu8J;VKbHv1ddyv=jP_@dXbE;> zFT=xmFQ=GzwnreN(No-7>|?(hi3{HBC5-Sj07?8#>3N_Le$O*6=EK%<QvJR@c-09b zG@S`9rij|8SAOMwWDAhr@l;IDl6_9raJlNJ>Hor5mSzioJhD7atxrac;Ew_a<aP~o zj4(!aI)(CBaf@-+K+&;-(?me9>ujp+%_$El3c$DhaQbXtn%Ocp%*(czz*^XK+1h2f z<2Dp#9nM`q<MetlJ9`zmv~Ff=lS?aQ_}&ox`L{TCjpmFKf^Efvl+v9OD$HAM0-ec1 zBF{y;fU)miSC~(V95N;3*m<4=T6qfjw!!G}=K1P8L!D(h!aVE_SmI0BBzw3-6v1xG zhX!C>yEz%~*LTlA#BLkEu#X#YbG`i-PR7u$TM$h!_-yLmdTJ_~H5<pKzLu>&sZgz) z^R0jdVQ8rALp&CC<L(BXBGkrgfJr%}Aux?9)T?6nAVgsVoulzYUzKniJ!agf$)Q<U zveSTP^n-<mg+@mj`_saw<sen}G{be<E2}y`L?r$-<-1>LlAj48DUE)rZ~tnOI^k;a zy*L)=E~9%}DlEP_bqQhiKmqQMP;01|H;iPol&h<#z|L4W>sfO6^1HydiPWVzx5n`1 z5xY-L1?npTSy>(Hal$)$4MVvcx@`X>Dq$kFe(BK(Icv3yjRTA$*M@(YuTOz3mP%q` zk34*Rd+!a)Pn=&pBrIEKrcd8$0uL)o49FC#;_XUbsPx4M2oitjF+Jlko7^-^!My+t zE6B@x^f>@|G?PvKi<tB;de;5VKuvaVzfUY^*_c9C9^2LYPhJQ-^duzJZ)>gTs_WC; zuLtq^E4-FZ$||aEDvSh6FoESojdd-ulFI7wO>X1<B17mN+@t1Zr|2x`S>H$@WTR?O z{UNqeBk22-ESXW4+OXW%J(muZr_vHvEpjYlZj8#%P9p$w>n@y7m%QP<YXszco)mR2 zN8p0i>N0(edW3{7(X{M-q!nJJ#ItR)c^4#mEyKSB4hcyTZ|-;uH5~eFx<|BXy(ioT zns-s&s6m*-NAB#~wK6~12l-}i5u$QA|I9aq0HcXZ=(4ouHpN1>7S*+*;#v*&c2-nv z3?40H^z8Z}XB)ys4JuB<k?)i013`YW=x#~E^yld|WG$mIf5=^yIEg)fg<13LRVm8~ zc!&C>BA2!vR*_-&){`%5hQZcY-}Z35*b>i0n&pV9la!^)YqP%O=3;28a6YdHC-5zb zf5r@WTb{2V4091qRir@~Sh1Cf%^wc|#y-c>ohsQ5<|ab`f$}t4uknP-@3Avc1>(^* z_yv53i4&tpPwFCvT@xbs*g$Y=g1yat;<#q-hr4xA+EoQj+n^v1xU*SZP#FxmE}?Vt z4~kbv#eThh((UX)dc7hcSZl}+WXbNBClHMZNNxSpWPI+>o?q-rjTEk2+7{T9iq=la zw-xz#$xzR6p^~E@z@>8dg7Fq5b`Y!FyY7eeIpUdyNE_-%*Od24mkea|2$191P;Jya zA?VPenXokJ=8_>e(w~%wOtKD9w|wTf_zwnu>RHW$P=Pdn2KiOLVfRb>bnn=rMizUW zrjt+pdo!U+K|Rf}Pqyio10EtqzZj%|>O&P{uk*Kg7GyU{yCrl~-b&0@6;wBOT#Fe! zEI9*-l&9?{py7lQ-U&G$IGjh|VTP~D|A*+l7QRAJ5AnwJ_#B4@i1c<$uurbM!Rb0> zvBWSeb`&8w<IFk1=)ov{I>VH)-SEx&+styBG3Sw>Z(Oka<l>B>1c<TWJOUUeaw6g` z{9aI2mVt06hEieZy$uCn@Mj*I90j@P5)&cHVC&jFIyo7h@15JyY0U&xKVlz78(lA5 zrAxx$2knAT!u30)_Pwob<T)VQ*(SGj0c%=^mqmTC6!6Baq+Uw|WWAGAAYsHlzmsU7 zSelqE+;D?8mFJ_{-g-3poj25p<>5OimUOrnkPd**Ea5zfH5>6_=P6o`ROl9&7G09S z5eR5htR`if#+EGj&O~~i-c=uHGiY@=4T0W@CQBOQ&bINng*7m&0!uMk`*L7CT{x~7 zI8^5R9wYaA_|yV5jzr!I6~+<w*4CK>+=79!_E-3#{z|E<g#;!6ecTiQ!!I9xSi7VL zNbn`xvWl?Tn10)3F?*T6-F8u)_&l9;M!i%aXS*PZQi5GeyHD@|@&2Q<IC+Qu5iwj) z^@+Q}!rE>afEkG6Wotw~x)I!oiTcn5f~h%_qJ8KGS?=GA+U_Ue2Bva}YX7h1f-n=i z<+smOwqKD#<eAV;s4lj(1AJM7%Kp_uhjz~~J=otGGNZjQyi1)tgs!i&ost~?>^XuZ zt6?TioLjDrAE3%cX<__{gixXdCb;kNLq9P^GG*_I@8U={eb_Aca!VF1fB(vN(xh@| z$AUyBAeGB3P+Q<F%gKqE0nOLk&E$U|x{r8|PranQl;xoFk~wVsuQgV1l0du)e;RQ5 zgfZ$KCGU@iJgIKML~+_)dWFhxvauN3XPMCa0<niKMGnIw3%?8H9E-}ozs;&Z<DXv2 zv2rjLQb}6CgwOv+2~dGeElEwpz6E`$^)+mO{f9O3h8Fwpo9IiRv))b~x0{shDami1 z)rxu~qOtCSijBX=i_66UFKTn0j#6A+BhLBF@}Lp{psetPv=oXZ0WyrasqYG;yBR!; z$_FwyAJXvh-432XnLonDR~<e5lCG5EXp5-tZQeDHjw`0@9a_L4hOMnTUl9Q9<ML-6 z+$^&LejkJ2xIwOs*@!Rm$OVA-QVwW`57Wa7_Jh8F$~n^}Lz}-^7PE9b@dN4h6uzI9 z-cQ?~`a?OEQB2Yo-cn3$VPwrz_#P0w=iYysXGsr?PU#6(feZ(@+jk5`%eKz-TU4QL zSa~)^PlNj{XMvXM>&*mxj@xW1_SZv~tha`cJk)#0?zgaV=zA`=T1JYg-fz2q5-tK3 z5HH7DxIM<)&dv*$Pj01%!`fidQX|GK##Mf9^us&;tvMC#HhGhQ9=j2%-8ukR0XM}o zH*VcTQLNgtwp>%TJV;P0!(`OJ{!Oa@I~~BciOhep@TEK>G2@uR(ogSfA*nasQ2$Rn zL>cen+chso88VaWd2G;<rmczK2pS|1LdcI^MwsD7ON+*G0HUbGllospS`Wi+h*GDR z*OgQ3EO{l_KsvRiW@J>vA;HNT(}K4&*JJmJQ4xFEUf(CPtNmWe=J*x`<qZ;E&oNY+ z)(@%qo|D(Efv(irZ+5r@hl?s(_3CSO;>qB#sl@IvBEENU*aPK6&>FcTn_Fqx1^QHH z=Yxdg*T@XLCtao3J@v*;DthPLlz`i2rr<Ji-Cv73<+ZW^5XhT8&0|5MC5wvV^zCKf z&k{Nod|rv6h&&p?_fBueg`_oW@|l^EZ&0NRvgfkiWiIE`RXh9mV&yLmJK!)TtL455 zKHf_HQ2C!i>T?7_!TUP2OD)GG;w7E#@_AgzfpAc4Fz{)W;f}J9tysbN-~z{Xou9no z$LkOsS*5!~iHvbgUL270t^r;L)8^X^ds!jCZ0;!TjBEV69vc+v47peQD2ttjKrQaV zf=s~6s5njqS*1SrkA|g1dilQb%tr2b5ncNFOP_yAjNY|7C_id;R(<55HuaBDkTr8Z z!MfYe4H^kN+bTvv0OErae#;`MCukD`hX1_<(4ydRx3y|&wqakyJ*gDyr<KMvqg2{B zqzEZ%8hwlKYR6}2mgzKMu198!m+CEZT8%U*`w7fNl6HJOhjf133T^H_&rfv^a?xEc z-|`SK$x741C6AVQ2|xj$)7qr}m}R5GIyOpE`&{h!rks><@oc>!o%((+97giy7L|(Z zRz8P)zu-9$`G&zF*lcJDrE=QhF~gNAZ22VJhTwQ@#!9la?`S|h^Q>JcK=`EyS&Et~ zU&Fk1rZl~uWPv1oK26(17%AHpJz&)el1C_Zs=b?4muT?m=iP7fZlO24Zl$V{F9e`U zh76QpdCpt~U&W1FP`FdUd|HDwCkjRKz6=~7&vTwN=!nJS=5j>PhaQFh)jfc-u=P*v zL{3SVa(N1rKXV%vb?%g;?uzGXUD7z@z6+pNYA8#@4l?G^L;)^$g21t{aj+b53qgp@ z95RM=@jW>?xnjUaBm2dg24Xe5Q=eaPVt(l~-fMNMPA`bYksmwoS5A!i^|k?|pJ}D` z5DLeRPM>~DtXK54YfJuz-K)cX4f0VKSbOP~s72g_NaZ<u6F$!&p#E3J#FPCNxJMr5 z--#D?#u}|4tb-Uf|5`2R`|jk3GaYt;*Z0O>F=+JA%*ment|XB5a=Lyc4?++L;9jUJ z4YOeXcRaN5<`^|-iF&A3IwpVyI8LKAo7h!@Ie<wseW1O;_hM>AZC(<EC7DWT+Fv10 z0WJ5Z(U$=npxUTG$m03>7j|(!?Oa<h=!Z%|8p=mz`Zlnb=hNdJ4GyHFri&#I*gu<- zd@(L7N9+@swfU)F&~%D(IGq$d%ge|^-XoOvE}3vhURIU|;9UK&p9^j3c$PR)(4!(2 zZfaxJaT0j<$IR5iCc7wN50LeFGT?wO1R52wut4e1JilucSM~^BPoymalO%JciJajQ zXM1XVj~`98N)TNdrLPwyiS=-z(@1!>t@bT!-HBl@q4}cR8?vb6BtZecEIX-O1=<H~ z%kb=~UbB1c^{r`|cDL%I<lU+XmN#q$%qo;`hTz!Ym^e><Evn(+6Nsow>1W-J#|Lc% zkFAWKDOv-@AVa%-s5=B!QZ`+WU1o7^$07sMJm4z*1$$U?9sb}K6F0ToD%?E8`!C;; zIyTu7{j@~`S%``ybF_Z~<mQJbCI#!aj;gX#9XFJlbxzASd9XN<YzJ0hpyc-1aBmc; zHodT){V`2jE;hD5v<LMsLD~&f$RXc-vs(HcpZ9p*+8b1#Iimnx(`^VNqkqX?gnjaw zw6Ffp5IWCqgUBzqZqb?5?koAG%h;Q0gOSVLpB9Mkivl}$KPK-Jz<S2#Y9TVV_Qguo z@+^(-_?wsoCe-&FyMibGw&dwHcGQW=Iarn%CCV7;9x~eM6BAF<MyKK}Cn(g^S%6J! zP6F0XT01SkMxPX@I#+70ZymX-m>YPl|DH0nxb0MvJQJ6wgT_f%2M*Fv?22}4Z~rsv zq5MF|D|jv979!uG#?nZ=>OajRAlW|))n+}z%|vDU4rVgmq~CJ=s?lq8zgQnJfrp7j zn9%!eWH{#++lYovj!MB~(8Ex8Uc<iJWK-kgts_@j<8kS@?@JVc-T(8#Y>uLvJV|;z zkbR{IwjmW!E(<H@vHiNmozi{*A~Rx`v~b#n(^P6qftMQ!R5u>{i8k|ZOBG9v^0;3N zWkmQ#q03^OplW+<7_^4X6rgg726Ix5y3(YZ`&p_*M_6NjmjmPM<**hq7+{wtTd*{p znky47j{5tc%mozGJ5~phUI$J_ld$m7t~l75rNSxo?XIp4tuMb9jw6qn?2o%NK(aw2 zram)n?Xn=*T+anVitjSNyvyCQOi*P9DUU8{CPq71>llT-MdEBF#(z6GEhNR}z!a+t za`&BQASQgu*$_Buy8|1^NU@XwK_EyXH#SdUt;U=8AlspG^4iL*E%3>JAQmgwbc#0H z@ldB!GOsJO>dEet=Fj$RJTB|e^$h?KKlrU{@r(*16^RSxVYv;|up)CN%pj=oJvRv7 zityTrBlIVb?kX4csm^K_IijDglt;+cN>==EOIY&4XO?X71v^sg*P~89yulg<J-VyO zN3G!A$PVR&=f+377vT|i-G#d=GYYA?8NSvVh;EIexeqO#$Zs2cx13d}rh<<`0^%eq z3@`E@#TQNt5^Eb@6+^O<>yh<j$QDI8x99uaQYeyckbxRhGoxa52+U$JTvPu$SyAXm zkNL?-%3uW)n#3K$^Xs+ADvK8IN)_(Fr#Q}u-Ih8^IyWYMB8#!D-i6G)XTZ)PTNn8R zYa)QD2f4KeTx2@W{JF3MJz_r=?yPWw)-Kc=Y6EUayI(vP!9amuDSEP`vElR_q+~WP z*H7|PPjInpn7C)CE4tq#Yd*DPE_>oXrlO@<Q+(Z=W-oFR7IGxiwtq$)>fT$sW{#SW z6W;H<+<diagVPrW@hFdu|JL|z&@V;qjgc?ymKz@X>v(P=sT!YSi=t-iDym;?4zswE z^?ex9-gSX$u}XnnpK%G$`2Saa<m2xfyo7dCxD=%n;%hkY-2H`lRZ#GVc#nMs80R`H z#fB$WvyG%TW(-ebwpU|@dU{qcZ-B@CHydU!FJcTQri3dYt(WqG4%~-o^+~TcFndR; zVT6EPnV=_w)s{Xl0WoAfk9kuhUaaHguj08lJ*TvmR99@FDMV)E@6+FKE<r^+lTJj% z+h*nkW$<epv2W~JmzZav^=pkK%(0tg2!{cV+b6qDyDH&hiHlGePheE`;~Y~UcYA|^ zz%1VbU3q&BB`gYZo+nel`AX94V93ve2A}X38r#-Xu}bf+EXIOa8M<@f&?kZaknjje z$9LTnTL)*p;`_A`Ds{WSV&w4zkFSf+KC`kdhiDH!;ulY7=n2BtZ&)t$;+lKEeXrbv zn%WG=oyV*pugB)#gPGB_rz$*p1K@7PRA2XPCNpxLVt%K4uYtZjCybJZSoeK#Hijve zu2vXUZ54JqWlFiYS`Tvy=sB80tTs880x@KoS@7f^leHM%$GI0M77!LYD1`weo|#N4 zXR0Z3=MPQqmCXdcsoN{nP^$$LnGBopmdUklJl{n?gu9l_dk!zE1vR%Qz={`|X~UEc zW2eK^@+RLc@(`WH#X`l7La)Er3q-Ux2mU+y7OSF0@yCpyqOpLe@Do|IO%kpp%38#| z7u=S(e}_0RL7-AlP-yjEB;lW|ICfuFtUIG}vR=z3y7iQtm?GXStgn~WNp>oJy|GAb z+Pyx|tEqcL9uqQc)+8E-j63^pinO2JbUQxj_tYB!p1I-=WD2nPb-?L(cLyf+39AdQ zVd8>x9;q&BnGpMRmcOxNB{ualLKplA@9JM~+iYYf*S`DXO#Ad-7um1Wn$gtv)83@z z)9i3sqk?ZHuZcSZFnr%?kfFbJLP>c0w>%3=qS|F%s%%C-H2noF+hEtr9#2hW&t;hV zs!r2hIojBb+|+B=vmzPL+9GN7|L)jQ6H=SkeC&XrA^h%c-vWS=Ha#|Oj=yEmEcQRu z;;L$|%D%-l`*f#Og1^JQo8M<#5RAXhVCepGR<*e|#sC`}eT>q$^FjA2xToPrP!mA8 zh{pR3D`j3*CK`(wYfTqzBrcYYqYHg@<N-6hw|9>lBDO*db1^3r-LUCs$L~tnuOSS6 z{bJf-^tZ-z?<yP53-&IZ>8YzLd+;8e<6yH*s)_d%0*SoxU*VSU%<lYCJXyz|3t4IN zr1AbtI9oN5Ex)65fL3$aC$}tHE)p0K^Cba1mn2h4_oaVjMeg$bv0eTw(evy)IRfPm z_o@X-sU?~tLUq@yz8A^3XPD8&e?vn*PaJHmeIcYaGfUQul9+OS2?!O97fZ07?wn<k zF%FPS465gT4wb9=T|QHiGC@=DC4t4ahOp~CeOsW*Qp~GoK!)bwV|Mi9{>;4R^q;SI zt(L~r2J=hb!rBg{XQw4;x0yPdcHh_AJM)PiVwl8>&Jdd1zu}M@<fAfjbsJCRna%J^ z@til7$FAGi%1%EpR#DY7Fv(&HmyEKe5aq{nLc^kr@TOAQM_UXK#rF}58kb6>M*rQ5 zE$bDW5z_OBYJA21!A}~p46*oZydJ(4&K)wrAC*?JO^zDtZvU^8(&t*7ND3!mX!{=H z$6<MvWYjU{Ykb@7isB6P)QTjO1MkP?X6Tb^+9R{lJNd+XQ*rr*zz4fr$?sCP#`YXX z&}L(Y)Q%$qWZU9>h^dGVc&E3(HQBivjtcrM_q0^i{ioJ(=^WLl=!z>Q28G_XwI;Gk zK}z7A8pt|=`;+cr7VoGuG=xQm9cOh({a-Oi&mfaY>E>-h;O}kcdcu?C!p;Kh0IT7Q z<RMO-nPpSS4k{0?mjG{5`NL(b6=a=?Wnj|Df{*Kwf}}M%i&zLMO2K%{s`c!<&Sh)l z6Z}uHxt{vG^xJAgKz@SGs4Jd3s2t0LGczz}q4UWUR__5JC*J>mn2Zx@+B_arrd!L- z5era8pAQ>d;%LliQXuL?qG6F&z5c5ROdq_dx#~Pg@DqI5Qct(1KbSF0-N5Z;8}Tm` z#^WTVDC0L1CSVSRUIpt?i4?3TV0M2NrxZAcIu)YE4tSsHi}hGxS0vvFQjPqKv|NMd z<Kn2M(i@7PJe{Xviq1K~%gc(`b7i|y$`LOBC<Q5EgJf%`TOFs@nywJFM0^2lu_qEM z+@0H|?UzCRgQll*3`f-f$>|9Z-zjGKc863`mcG^o^;SD4HTKfuZ{_Z@LF#)+RuLNB zAp|t|-KtBESjA$Y)8+DPxESiK(O-<q*UKsWe!}!R<DDm`otu}qwH5&1O(OJ`p_7om zbGR&5?~OL$K`~wooZK)ir9Y#uM5dHYr)*xpV)Ge_ryS4o5)L=6?6-`^f+x?my&lHG zzj4CcFZXv|-DoJwrXAPWJ3$M_H}Z=WzI1Xd(OA0Ql68$Vy?7QBImZYX#TbdLF8MB( zJzX~Lq%Nky%R7*~&5S@TSKi>89`2BxVtT7tcS4l8?T*devqdtFciKZ?;QLhFZmFKS za<45`!FUA;WX!L?|9e~bx>7;mt%k3iD$ba=2FI@0NJ8iYE6uh|mivbvnUtc8PKI6? z3e%Wbrp->pCbvtE$GCe%8i5l~ac}3QZvS<bdEM0P^DWPe!Zdd%uDW}=1By`j-i2rR zlBqR~9d_$7S>r!5#M2*s=3O{@N}V=aREu4MJV(tBXTDve3p%5JGyy{PO0fo2$_R$F zpqm{;G59Sv1H{rt#Nt7(2Ex!C*qD9aS?Rd(jHUQzsH;kt{9*xd^=`~z)zymYq3<v1 z%%#>b>!wPwILBMp6RXB%lR?30FR8`+)L78*whAocyapDe{Gb(&`B3(6tN4$+^+_?B zmB;lCgSq|~a|uzc`gQrG3TjTjXbW^X=?e4my4O(T&zn+@H|t8do;(+M&P(}??zPDJ z9%lPbdqX#EX^pO?G@$;vk*z6|2;riVMvudYAxq%tT&w~1iRdN@KUn7ECCOg);f#h$ zv&HA5vz6Lglm^a|+X|WR67MWn{AvArs;$xDcFjR@Ob_aO6HGNS%`WXbnOd>6BdGg0 zK~P)3{-DuO^W%EZ56SyOXDEU&W+|B04sQKt<7%yBH7$A8O!{xH)lJ`pF_^Dv0ZjLb zzwc3CVvL4rj}E=E4nW1~k-dmR5(5#U36c<L!#(=|gKs}f8!0wzyc$3*AloP0ZR<6$ zb0<LOW#{3Ml8oO9j`CPNBe)gmh6g7tokcEMGEt={`O4=i?f_DdGr8cxlK=~fHa#ng z6o<WdW!i@xof<y3K-9j(H!gbIy2u8Df`GhMkszPDGRL`4j|6V|<JWSczK&UHyrQvV z(YL43EVH)F;;mHI4cU+sMIwj<-qSJf5m#4I`Uv09-3KiOE%Mg}J@v&{lGm#ZYHfOY zzC%K%oZ}n50_3#rF+MXEwZK3jp)}Q9gUi1E(S$zrhcB*BHk&3%d^ID4>Bp%fho-XQ zNTDkQnCkX@443kU1kX57y16L!nb;+oBhuWsBvJ{Nyt}RzC7id9eaI5$9uI1{Jt-=6 zc|N%R(4CSMyKo~tciR5@-H3!#5oPMt7t@~i$vWaL5#l|FK~J-i7VbgB+zR-(bE0;7 znyRnKaWNuVcs;ywN-L*!yMMDSrOZ<IVbjX%zB%aoLgo}u`9`;MXm44x1db}6t!U{X zJb^H|&O?}#;WNLg*#;vHhM&Ls=!EZ<bn|}^b<Ka7c3-z9yQ!I6_vD&v+mj~Sw(ZHh zv%9lx+pfvBZP(lL)%!Vr!1cp*_TKC4z1G?So6J|Lllp^`B2QW$S>p9_OA|XKB%`z5 z6Qq@irT_8qAV?$7wHlFLVD_Ll$usNqr|g566fBTjL|C!Etl@!4Azh$qvC$!4aNP|2 zT<G_-<y%L_16n?sUX8!)8=XlKVstCX!P9m0odOqz!8+?=N>+xB9Ci1d1R>ncMY((b zIMJ;=2Af3Y%|+2^c!g~_23wgLnilbnF$B-XMDT?U(atr<h%yMw%_!NNxRdPrOomv4 z8CDN~d%TxTCF9D+UaC`+jn3}#HEy%gL~;#xU%qmP>xGabzF5t~w@ix5bRBponuCg7 z7zz7~U38|a_K4qU<7$k7JcrYj%GoiX4H?23UAqo%>LN$m6qs6s=aNIBscy7V3D@7{ zyJdthe&PLGF&;hriQzPA2~*^OWhcdg9#cbiZ>e!rVn6S4fm2of;PYYDl5Uz^-8RQ5 zgZ(2~#fzAnw1%dOmzqXkrj9U6FzP^<jk@X6=hiWh&p^c4dLApO_(L0tBk_Y$e?e!w z1TAK><pj}`Pt3Nak|i2zueZUst@NJwlW+{T;fI=tJWROb7?ib0gRaw~zlk^<Z=%~y z4En=gJdqN@QYZKhoj}5pxfk~=HT20c*;J8ck%+5Xk}Ec2iz*$j`KIf%O_xy8&Hs^v ze9i*MP)w_g+h}>)w(LPaJ<x8Xzy@bIlBt-{<8!2!4*Y+AtEXr|Y%smJyz^Zg7F7-N zv@EO7h@<;-`UfCbuX9E3@7FzA<7j35_RE4wS5W)ZT}8u?eLuQmWAjnp5mK+d-d(kM z?PfYf_jx708&Zkkb$v|E0?uQ7&+UuAck4$nxqHV40O~W>b9JafY)!$}G(SpiYVvH_ z6ta~`L=tYb>ITU=%lf%HH=km5d~2^wd-e_`W#mYbMrH?4)E;7N;?zIV?PwMM!xZ_< z^p96yu5ew97qnNKyj}YE)xiu31hR4HV22)jaR{2n7{5kY3xx%5DrIlbU`OMR-?!Hg zADLypg-*OrGpuzRgCbtaQ{~%{!*a>m5DNx)6rO#lyR!%nW^|#Qybv@f2QctD>Vu9g zOS@aAS3#$~kykz4+B}HNl&C4?!kc#VVmY!Y=`U@TPu&&ZJT=|(cpbIArv99+;>5 z$mSsJZ1G8ah|$vyaI3e*UDsNzv@`ULw)u{awaS%I(2b+VG{Qs;@xm}j8^Dk+^EF;@ zJ6(Rb^j%=>0^g)VSTl%Q{*d_uQ3c+5B;(t!5=V0ci3b`eL#F^MaS|KikRjovW|S=h zpEJC%27qAWfx_86U18I+wW~QFpAMJtdRYXzf_YLfMgxUdSUBNvOs>u{{{%2gVY0_a zdnAx%K5>YdTPa<XmXpsC!qgd?{8vYo|DZj2NGrP}W@%O7XhnzJFBca>5+8@@J30cZ zJ)xy^NZ_v9Jtmp`^pTt>t!p+6($?x}dO54$goBrBrzRXe&wP;_VY_Fv7&kK({BO`~ z*V5x)_bnt7iLJVSv31N-!2=Ej8ha!Pi@5nz`ZZ4`%a0*ee=3BJZ}}KJ!;uSR|82zS z-GCX`rSc`qZHqgIrSkoiiW~5zi4T9u0k=(EA7}zev)pP%Q{JNg=5EAm2)#D7EZm>b zOdjtGw^(ZMe+o85!MGexkIeQGA9G?+`e%;8NMKrVmE)$IU=X)+4`lP!<_m%|*X^1{ zS-i4)IWJik_Lu2`;0S(q<A+G9tvJeszjO<}_wrr`oHYP8M5criMYL<;Y8di+@}er> zhTnWz&oV2g(<1GU+ijVVLL<oEM>9GOH!&MI^S=%{99$tRixu~stX<NkrSj__Y&R$l zX0Qg&n*W<Ox6=jDW;>Oe1s;FP2Z~LZxR~D_pa6IG3V^bpm87E>(?~TB19vzUQE|XJ zS>x6DXlU5<y*RNLJGo@6qYy$#X~09I;@2Sp?F@TcqB7vijX92^3=0Q1?h@QlbFS#2 zKAqmBdvKhf@ksL^JELrZ=^}I3Z=?!s-pMcNYD6h<&i}-D##+Pm9{C*=qFq0K`e?Fz zHabzu*Xdc>zPYB;fbx2?#`<&9qn|OOszBGdPhLV>a<HsY9fqg|F9y{t_9rRb;Z?1{ z#AFz%^7<vb`XQU!l4`tA$5(Tz08QNH;`7K2*!>>Cv$M)_=M|XjiHBxl-PJ2PA%A?C zp@l@K49?(=lk&VckpLsjR&K#7F}krP!P((zu_(*gE4@VssfTcu(QMQjP;1SpVarNx znSVG&O9d|Q4;k7seS6zX%kwQ!&l+nPi>VJE-D<7?KFOY3pEnr?jY@vz;T5*hf<k_o zLX^7!mO5cDzT-~TIi*Vg3ya9<Wv=&Mmsm`Z4=48}-WRo#C|q(7y32v?vn1@D${#-B zE>5$&R+spv>h26)+AeFWwn<sP`8lll|4%lyu3Z4Nhwm{1+v(~`rlAB5ibK&at39uO zy{j1crPY*e_A117^<dgrQ-w9$YZh*)oQkVsa<b~*f|i}=ak$ElhQ}SBH&?m9bu$d9 z{%JaIPI>rR#1@_o3=Ce^4+l=F$6AiO-$s(V{Sd}!teY?_ALfIG!G~nWyQ(iui+Ug4 zGq|sLIJ?(_l|TkFq5i`E(lXZ^8dUzE&1+5fgkbdmt|N8<wH!t4jry2X03IaL>CJ5l zd9?~d40u3WL$W|k#n~u#VxV*FSN(rb?t)U)$P^cDjG`wR&tl-J3!23H;^Gm2c@$~~ z`a2zu_84okn$3aon{$5Z^!u4=!@k)5uMOhmyAfZ+rG6Q0++4|}laZ8(#b3_Kpra{Y zS9Y-cVXsP)Y4C`Q3Wd#hu%hgzM7-VR^G(NDQp_wSj<&_W{xvIp(54xF7WW|p-!4Ci zX;Ls64rRZ+lkM+AynB8F%e7m6LALws_ub@swzVH*R@7}gRs!l|z4okE{PCeA{k!dY z)eHA2Wv`@p;?k%e1^DTrvJ#qQZ}hma<bd2Ow$4*SPGf4MhApGeOq}1HOvv6SoX2v@ zqsHDy2&6P#mK;L{mB-~|-BtuGl=*6VAFnSY1;<2c+d3{B;#`yG?&e8$Ykob~6m3f` z{xFuH<<&xm(^P71&SK)B{X6tV^eL1UMue3S)2Xx8`hjQnV9EeiSCMM*-N`PkVOzC~ zi)FL9SZIXu*W}4@Yo?IE%?#y4F-LZpyte|w%w?}}f!(^^03gkFE7A4xv39H1Fg&pS zyzR*}-q&C^)hkVD3t3B*kdc(sEPODR=-o6lg!&phw|Qp}7+6<W$8RYj?2$5E`X7Un zPr^+fgqD`O8Td{e;Q4YoliO5#*0WzTOO6k~@ZKw3*9U{@>|c?HbO4>K5}UzX8E@o+ z$gqOUPq`%Fb<J2{<UeF0|0Pr5Jgatcycj@R^=XaEx3=#v^@ZpYihg!(VR@$DlJ_K9 zT{IsK)=PjAKi%S!X>E5uPEMk3R^6UpNc}NCf-;}Ko&0@{`|9rn;>$HP)+a3JI~Xhk z=%c|Qsh$PjsFhx`Gv$s(oUQU$`P^0-JdLp&rr+{1#J^+<3}DVg2)K1!Cpgf)pg>*C zZd7o2%Q|a(om<i!|F@L&6StTU=)M#E{_~(;Els(}z%;?^!2|J=@`?oT2=6pM*g=cY zE@q)Un4w6vIGOo86VJrLa?Z%~*Wl>P*O8VjtM>3xwXhYjIrRpjWkgD27Joy&(bpKy zGYE4}%B4)wsAa=<>gS;MgbXIZz6YOw_#Pt|6CLp_L~0Zx8mF&m(&YUgK+Lr76rLm` zFP*}t&_ozeyaV|b;kLbPt<fgj=QIeL;9a4`<W$gpa#7jH_QAJNPgOzCKsZdT*7q`= zd~tPuN`m<)weGjqL6sjvxtD6MAny4#tTk~nc2h>7Fg7>qcOR4!_1iJlGkX?GQ~XeG z7k~Ht(1L@_uKQbsqu+q6bap<bDAA|J%}JXiOpa!c^Gfo^vQte?C0woGb9MT1H~pRI z<k<-Xi`PfS0Va(RzTH;?6kZ?&yAJ1s0{(JV1^5gr-b$m(63|-N>nrf7TA)q-Dma9W z+>zV_G)h=1D5TPy-AnvEKr~9QAnAQG3jC~Fu&=-9aA>=jMhT1JNu!1$b4oV_S_FKE zad8K%c75}wQkm@mt+wJ&dp`ErRT<&j+cr_j)8<c)MN+|K7?nup_eDdrlFa{7T|Zfb zSmA?CH@5cjbP02v%*49`#qPfx_nYn^X`*5Wxep~iC3==5jzb1tS93@&A3HqQo-`RG z`Bc{5H7e)-G>r}nlI3USfa1#Wt_aoDgB|}`PkWa%n$~7I{wtROkx{DF)6>(dkRG%u zk<DIp5r?r48RVvL=TVkG41O)!9Q0>yu^!hRe1Fr2B)>o5$xXg4&f3USPMRX&I_6}n zz0_7fDL^Mj(Qxp-^v*9%dEBPWfgoR_3BSMjb9Syj%?U2uXwGNNzI2&bx(o6*fI)j5 ziicJ={x1**fiPb_el%5LI$}zRyTYzyeBl&&C>EjBE0xdrveXgpM0+v&x3Ftf8^1>< z*<BGvQsQJ2QQ6~L-EKM^w!Ku$iLMs`hmnr|!K%O^b#EfBBY4M-R`aQoX-_lkIvGp= zbW>E#LUuPowAx;XYY>Lm6j(m)(jQ<XSb>o9Z%_Wi{*fejPwfhd!?}@#V|Ix>^jqj& zkx^t7*V~kmbQ3mff~pPA4ZbCx$GFKA7n^mn_R(23Jx6;b4jQ^w5l!6@P;V^C8;S%d zT$*R54YYXUqu&${v@iCP@_<=B$$u51<oni|@%)bZoKv~tDM7P0ux}BE@I(IKx4GAq zkZ)Ub;fOklx5Rw?adBM+MY-&*5V<Af!a~eq0)At;y@Nm)*an^IbUTt37M2CAG3~dx zX4_`01-j`$!$z-<AUnSb^@y-R!KNo%Q6C2w<2#L-m{k2@1O>$TYU*?cmg%A&E5>|= zjLla<7!U5ZeuLktx^oHMn}SE)jg|Mz_)KUPS$_P@dJr&T9X|->W6i2|0T|sz2hI~a zu0I6slY_-fv)BFaR|U^OL=5-#wsa3^@QLGO8rXk{2BDDXNgX6-{8hc!;VGS$873#O zwj}eysF4F@xEzrZU6@l(m5T>gYM6b>p*!=;lh!<M3d%CA6N%#XGa-e8Cp@3pACOnR z>vU>-CGi#dH|mTf5a*jHwA2J+21jAQdt%S4_HPlz7A1R``*0P-$rP6QQI{M*7f13^ z@_^u}Ji$1hRHH3(x2QI8gcGhQBh*!Qiw*b2M(Ox{;_ae$9Rv&(du<5OuUe=D{4C`& z1D8p$L+N1j)_ep_xx>xQCi^4EV20Pxu?@u<zLoulq3BBO3RcCwMcKobtlPy`_h@u~ zX!NyglSc=^qQ-ZCtNt%nEd_ZqB`cFLV@$^dY2=Su45wk{6Y~Uob__nY9jy7&dgtwI zbVhAss|x>oZq-CUPa|xF<7P7j1nLVRJ(l(<^yX%rDZ#kruJ7;^5gJZas(l+D4Zra& zo-4*wL|amf2pa%dxD*j}++raSK~b9q?Adm&kb=)!eDf8pUG;HDVJxb>i?-b=q5bN! zY5IP%@j7<yt-Gphs)3x-KyIgVT_QVkE<Z;+NriCmbPICpR;f?m{F=`kj2G0?M9s`7 z7lL;}xM5B?{YlZ?bjkUC))ac*g8pzly*}Z&eb%sYlD{t4CSOrr#^?6ybqnLyty>3c z`T|+kGR?OpRaJ^u3Jd(BX0aPG`y2()C<HNldo?BS{Aw|R=U2NTN#?5}hpb?k*%f=* zsV4E5>4*6fyDN8EB1}rmQ+umkyH02Q&inbV9=3(&Lx)PBT=>;Zgh{u<&PGfQNIJ0! z){)sEfdKM9;awr$J~=NYTy;x|k}Fo6hz>kB60T$ZfG-lEG{S!k2;2Oe2HaN5iGQVr zm_TPL0w%xCAnLw95(8*sc&lf6DM)9g3undu|F5!h)3dUYU2;h8)OPK2%T5KW-8RV7 zPsY(S^s?}>{nm%>&ZEmru@Kg+up}c3W8gCtY<dj5sEI_eb}$EdrMJF^u-qq9b__z- zW3OIbCQHlE1NMqgmcpBt3aN3HB)3;tEf>uX_#VVHPCbmzM6zrC=?Wni!?-TpfkJsY z=%qYZ%pr#jf>7`xAk}4#o&Gc!7y@YkIAaz=*j%p;I#$ol8)W5jF>^k#K!JEC$0HTD zFZI~rXjy0WXvf=we+JNi5rS>1S<acSI+pwEAEC|0mJWJv$>LLB`)0z>ufbxmcxz0S z?fz7MQJ}^D6;1z4|F~&+HXnmgmA>4oLNg8S77yED?xXP^P_}dV2HG!AFhgDWjXDxv z$jzv?hF^gD<+usg7gSQNiQk<m7~$^rSJUm)eHTX@H7IBx!<>AHJ}N2TsLi0|{iAEI zYujO@RN%(-Qz%o}z_&#kBhpzl>C-j^w*`4{!{NMUiqzj4IMO95;Nr`EV^%mV#=C$| zoiyfqi+O}K2VT`KY`whPIdp!;r5-^%=4{hA>3Q+9^|-`lsWj6gs{MAmaOrDsF^%?% z@2F9&RBegk?0Wh)!AnQm4w4em(NLJr+iHx3yrai-I6KOC=e%^!$@mhte3sPmuM2z% zo(Ok%_Skr6IJu${eB|J<jlg1qR%up9J()W-l<0XHzLiyf-SoRn&Fj$PSO=?v86RjF z-YOBdxD_2MCQJpSFrx(<xnl3pU-PTZ)^63?NnW!}T6&UAtzOd*5fUHfyZhX8h;)!d z6)D>mN4q}Mik?jzj(l2nz*<CQ6gwKgep@4zUzUr~gcmjSyGVdagf&<4csf*eS|EVK zgz$XGl_bR!F%}WDC_>U@={c}2)>cQKQ|M)Z+^GI9M%F(_j^MLGA4-Ec0`JW%jKd1d z9?#_58Q91O`O}%DnScExNwEY<F^)lyBrYxD5fD@xjbgmuaq{w-tu!F5M6#`0`MjHa z7%u4e6!Khx#TouOtkA9><Grr_uq4m)tfN8OWaeeHa#?L4WedWSbY>x2sRJTEeKNqf z8X})rNrZ%i)*IW86um#6;9c2QU<*5S(#sPudYu>$uXh${WOv~SXH4AY!gD%44>M=z zKDX!qm8QcNm2%M$bbjYANlJ5ciohacshRDJ&j6)6eFpjf3K@Yq{gBC&Pmkp55L}Sf zbO)kI{17zy3O<JZ0s{cPG2ez0`uC7?%W0)_yp?=s*uUad`dkx{_W%F*@<Q?T@C~Ma z_qeUuC+1%zn6F6h@HJ8rnc?o$B<58h@WZ&e=B7vYF&B&Fm#~)Qw6q#Qn&k~7ewjI} z5y!<EaK`(i$2?hZ6ka@qZ3J?2gk*F`mQ7it+y(RYh#rRFUd}qV$}S8twfJS^Yjhly zMp=kBH0FnzWe+x~YbMptoesx$DAia8C(V^u=WA`4H$$AtiXSaoM=-^W4A!n%m!DIv z>^5Tv{3ECWAMy^>>hlQcv7vHN`=E8l;;|qiTc-l*Tvs+nG3(!ZbSqVHh+B>lj=6D^ zpTZTSk7ee)CE>u_A~p<ft5%xQ1iGgzpLA0l8F4(qPyuheVDAq>X&hbN1yhuqKOh!2 z5sEGZeu==O(YYDhNwd=!uAJz7$<3=0;Tf4oJ`mDr2r(A@b1zt_n3POTi`-=<^M|fU zr`D>u!sj3cW`pis3gr?zI)RQ42)I=3$pRr@eex5Y)0|gsWL3nORjf#k5{rv}_2t)4 zIEI}aZ21eYqGGoDOp~70T=s~vM&U7PJAHa~(^kgWZqOfQXYt-N!2+YA@r0FApz1GV z`%V-jra~eT?H+O!&4T^D*`{_UwYsgg@9<9uSg2G0{)cjd|3SHfUKpmSk`9b<g1^9H zqsi%8`h{{*3~D?LwaVxvhIM})$Xb3{Uv+*x%t%C`P93~eo%&=yrXr-y3FSIm^&c$j zyiU4M2&&njOk4hW9|}<pF<(8vDDuX+{mL?(;1P5D1r9r^^<tfp-!p}77ZbIz>>uHU z(6QewC?3Ye>bjn2Cj=;<nTO-9YE$DHY2o4S+0%e{QLPkqYir9^DSNRv=4`9E5<7|6 z{NY+S_N?&{7c&Ob3H||2I|*a4&Rp<%)p=gc=P@2#I(~R{P+`q;68>WwRNRFEVKgoF zxb7k$b2g2{@`v-$X*b-a>y%qGO#Q#+nOz1O5WMFWCAw=TexAH^^fn<BT|*CEiMXmZ z9zQa7L{gPVWCNIPM)Mq9QIeSP!UZPmDETd}^d4_>ay9@7nwuIwScqO`UOKo7=}H`Q zfxU%7nWJdn>2NsLF}3c4&ga@;0T>$xLe~_MK^@Z_{sTXI{h@!H*}IuT+U|peh+=3W zdw`8hh5QK`fNMfz6&4DDNQ)W{g$CesIa!9TNORfqXTCo2f7s(L=#9!SuGrVUEe-M- z@U_|lKbO7GHIVZ?NvsFuagn9m<yntO3q){}6iG5T`k%V(KLH9118gt-7ql;gGiAvP z0l%WG<ZtQb?q8V3P8;==51pgszMqR<iu~PJMt|D|0){(()a^&yiUcjt&X`FIU@qLn z6sC_q24=x?%FKw($TXbYXO$9!B24W$MB!J)4T8%Wb=oTKOG;zo^k}Y5X^Q4;x>Z2K zA{|Ih;(i*C5-_!(80f52Ee74m#QAm9u?PLS7T`bFYer8$1vEDooI?1TZ;b@Syli_p z=%c~Ak!OE<55G6{g#<$CFk?(G{j36eV5_ew3`sT%=FZ@H3C{|@p@^1?B@p@%V14!I zkq;i%=zC(V)zG`fwedmmP3}MDJfCeUy(=)bce3wDQzT>vk<(|C{P9En7Y=%g@d_yF zLyY&0@{5_%;chNV`_d~`GX+)+MmI7m`5}iGkDABHURU88wY8voWsfDv5C1j0!8dE` zr!bNGKJs#-RI}v>XL-KsfNy<I_My|uG;C*%T^796zbZe`EBh^hZkz7-Q@w|G)<6@x z68Vk_*|#|k@dyUZlg=w0(6JHF+&QY^K-x^Q>CrC&{<=*U)#?y*GGkWez_ID3HhDu? zh_LuJPxESTR3`8h_jOD~ZP=l6tDxmZ4Oby3%@CT^XPGpc9f*@r^50qQrri#BW+QW> zqnS+FSKYqX0ZAygnnIN>G&-W&W~n_&zX`BO-@p8m`tW>80ky|vtD&jq82s}{Q`?~& zR8YFUz4S=n--r=d^HYXRNHRgmsrn^?$Q{V8px&9UMhlZpgB^-wV!-rZite`O>=Q5| zdqk;7G5UgwqcTp7sTxTzj%#7c+9Ze56Db)lxe1u9lgk!*7JI%a6%K7paSlt<9dM1G zY7HBg?b%A&rPmB2veR}^+RCma`s&E!6-MK5tWN=KD@F=7H4E=fz>F6$m!<kf*~M$p z8XC2YcOiXnm*T~|pn@CO32EwgqJABt2JU)PSRPY3GV%n*&{$r70AozjZI0$Q4domM znvv7Lf}V)Z%$zHI*%fzWzSVOP9g-a(xfezs6fb}h(v}7JMZv18KwR@;qM1we-KhNE zcj2;V(|lmo&japEV2;V&-Fgy6jzli*1$JB2q+*w^f0PQl)ZS2SLjQoIJ@{;zEP~fs z&6@G++r)ra1>sRF6vuf(?Z2mr2i5CihT&zzSVwIM9{b`(cxeM;cbBbP>Zmv#+M&5R z5eoh2X;#dF--50?rsNB>&O7YHqT+K>75tB2zNBrAV#j7Ei*shdq#etedqi1B{#r%y zq=@-}Yuz&ZzTNJVE!F_I<VDl+>Io%ZZhfD0Sx#lKXp_Cm{m=YCw*e-^w_~SajkV39 z53{{6z2qvEgQzg)F#g1+rT@9E=VUr>aL2d(bA4JIFLjj2$y~K_hW7oIgoCdv?HE+e zE_!^JnR(TT_iH0-m$@AG{u*WZ<-oV`$Ggh6srTnfUW>+!3bCN;U12_F*s6}>7q(>w z(3^AXW>4*zPy5G5jd!`WEawyb21065Fu1O)OhNi5so^aSK-#6Aa6Ma8LdCTF@&rea z++>NZAu4TFT|8&}FHrF*YQp)UoJ4J;yE#srHpk1?fi0#u`#3!`%@nCcdUi3PYHZVF z4TC3JdW%Jqc)PN;hh?Y_o2oQ%jpRD6t60DdjdY*n2wlw`EpqN9rTCGtvrQ?Vc5^gO z9R0rj?eqjj%sn;FvgrS3#3uy0r!eG%f3VvG!_C0Q%~s@rmJ`!s9Rx~lWL+lXEV`s| zUy8s>jD%a%U0m|p^WL<yq+FlO9QXNlzlJZB+?JPyca5vk(+4c?6%BeOif9hlk$ue~ z{lj>SCr|Vvp*V`O*=B~Y<w1m_CcVWu-#$H(R~HdSp%qX9K~){+M>biP>t}z-MwGKu z>K41l$&6nuR(B!}oi_G_Hv|^8gOii>w6;CeHqtIQ66|O>i;L<~>vqfE8EM(p?|mTK zX<W(v0C!)K1Tq-JU#cujp4|`Fx8}^sJFk~l)J-rVSw5C%&0mg>rb@|PfE`nS%@`7* zJH9CzH!qDF^L##gJIx9=cQn9gjkBI2%FK^O8rC&n+Kqpa<T8U(ADlG}4ad7{*hT0? zhEApPUUJPYtsH4Pb7%5A3_rMcXf+%UEM#<g)by1rm=MT8nNTtK`gc-fd&MJU(B&&? zs)m%-lfJ&CZ^c#r#TeqDReD3&!ui^~5ns#P>8=Uo7t2CRhm)ciH<Q%QuE(=v4z_Gj z=su?1R1vYSB`k)~E=ST|6G9ADlRFXeZhTJfJaoA64#5uR`C%6eW<6AC+>OHf#Y+O+ z77Z14{}U1*<*%StH^dqRd1ro3&cgRgSa^R+;YL@!`<tDIkC}@VB(`;S$&&#j+|%RI z%7(`FvyEjv5AbZ2GF81okb6lN;u>=4f7B6nyMB=<5ft!h8g>!Vi=*03f=mmJ_T6lq zcEJtZSg7JFXW<Rnf!w!d$OhmrSmR&894)N%(B#7;q?GmpccL^7emLtl@XB%?iF>@^ z($;ZZcus-bCTz$=Sp@>$ayo679!@{a4huhB>iCp=o~=xaHpXWH#F%~-j&;oIw7-@x zla>fg2mU>*?6|{g5BQoT=@RfSMxE>8r`(Qz8;0q`>3VNX5}!MWv}8Wh(;n#tf__F- zfviN!xjW{5*`kpnGw_n~M9m=#yE9D9<rfG5gd38v(x>e1v*uaJou(emQJLdwVz(|U z9<Kn`K`|io&YdFTjI`n`Aa-gUB{NQ3;_sjg`mgQB=a^g;h292r4RPw%CNxw7rO~o( z6j9M6aUP4$70FWs#PCl96GBS}-4rmiOq)F9_ntVRHjQw|2Epi|y32$t0hgENsj>2s z!E|9zVT~aB)lK|-i6PG+$wcT=6a+4^d1+a4bkO-sv1^ppljg-t&Eyd>ktD`uayiE( z5<AX~E7+K2A^6&ZzjE59EiLiWBJpzL2`a|H^EQOk3<2vR!2MUvj=e(W2%b<0ost%6 z#@Q*LZsi$j5ecNv6_m6RT-i3m>p9MLicjYm+y35@Yk3!IJ=2>y&M{I}sK)D`<K38k zMs!5{tte1xs;IFr8jiDuP$h9I7=I)mv8<@qLiWu04<CTXa(pn!d+GZa%TKuw)?dct z1T8rRmDOrPN6mhTq;FpMo3k5nPKGkDhDb*7@ZXap!t44%=&TQeX%+-@0-e1a|18GG z_(y>!AjA|P(xBCN#x$Fn;({JX58`(=(SYq{nqpRuNjl8~fret&o1?x{E!FxbcSxN+ zlEAma0y~ep+85G6eU^G+2aw{OvqQa;3=-jY93MF)TsfDGB7%dHzgS9t5Z6{Nf0eNH z3q}z^Xta0~JR(Jcy^8zp)5&*7CDn^BRD$yxKO#D!hgt3qe(}J4v$>yuoTx2ndYF4* zT$|x}p&#p_KTSjU5e|=);EOvF4s91$B*9EZx6czPsei4Bc0C;4*SAM%PDJ}7HH!g` zVL(`z@Fx)>7gKM?cn5>V#l=Ip!}0yuha(D;FCzVc<A%pXv4YaU>hp%j@h5%uL_hvO za?dphwH3CKxx+W?!66QECTI9-3NNV6vp-B?c%e+q0PuD=NM>aLN#Hnz_VR3$q^^Q_ zp?~V8UT<E{bJ_LQV7~X0>v78e?q$@q5@N-s^Ud%__gi}&k>5Y35CpkThgCaQimjpy z){2!=U?<D)P`inbyW>av42E1k+@@@4Ncl4pkiF#gZu6IWRWBIOF=XBRrqA^p(#RU? z@%EfqS+(Ih7<j+b`Se!8GoS*l_!|=>uTepX;A*X0u&8>!xc^~CkgrJco8;1!WYfZ# zrb{-}rOeA_RMu<j_(VOE8qH)MKa-t#uxeh4O~v3o(S^1eaK31bueCN`%)(a5{Ngkz zb0Skv2oE3_`y$0Zk+y{35?<%RX^UqyHo-2B;0CVtVV-}|_IDQwsF)wea2~=Wjnz;e z+kihKTTd`>;~Jn~8V(uuuLGJ#>#|)fY3zIgDIY>a^jo`PfO&*dlfcVOZ#Pg_Qk2(> z{2CwHEJ<}tl=`%zh3)o(06-sO^aJl}E`4(|VXwfoZXp(_b~)rCN^m2UP%iXTG9oC6 zNwrSPv@VS2)T$j@Gi>o?Jy$D44=$%LZfCI(&cJ(F1D^XHBc@Y$dncd~As9uC5J%$I z=7R*VlOF@^maOci;3r@Zzvj#sd+Q|=$m0{7-%{I{3x>ERqwt`reii`>^&|?<Zg6AV z&#~xx@7(={3d+*SB*%=l>oxa|-R&i^Q`qjUED^*uC43A_Ta=;=g6sa?p<Gm36iN>X zGjhp}7{{~C*cQk4C?*fQv-%F4VC@Wgmh|E<u4(9;fkLGv*S|I#5;%M<SMr=!+Y8s| z3=cg|@^GvUY4%{|K=kB}Y^POJ&4NPd12bX`8>o7mBzUZNY+1`W^|(0p9Z_6zI%nnM zy6PB1i+T(i-)7Whw-F+tQ>p$~H`Pi+x^|B#R!gf!86HDyMO-_3@s3T>2lZ`<z?Q{> zjO&O^`b{J!6U@kzb#lLmlj}caqGAl<{5O3w9E3ND$U@98!*=?fx?k>qUt6-j6LVGi zZVs10Y#(E=Ay)MY`M;M8g&<D6*U2!URub0u0uq9m<49d6*j-u+u>nG!ZAa&=7d4-* zSbpuNMkYLD%05@2vWwqUG#Mz*{9p)7eQw174d|H<Z4xU8RpMEnN7qK&*UhUFYW&kk zJ+(0<7(l8NWO5rug-Vl^@S+n0E~DW7M|L2VlmRrt`>=qTZbZS{eK4M8w((jBT;ZsE z&l18WYzY&73Zr^oQRZ!%-yhG^I%2Y!Mb<WpNcrQ=?9N-w%GsjiE~7I*Tl~-WE+l+U z6fqyh&O02XE$~w-?j5CH9z<r(Yr{9DOL{c_z^J+;l|Oese0uU}@9iAy&n)z69#@58 z^WW{lA?3~z-qktgBl{T_$A>DrK9gH*)U1<rP$l8;BXNoibdv;C967lz_w@CA6~LIc z9&3iHJ^f!Oz@h1`;oErc)CEV`CtG4$T`TVrQotiXn1>7YJgIZwhW(}_=<ruX!^(V2 zV!(X~qh5##e_#%`ZOfctYc!XSdxyh~7E;1&=>6@n*!f#7fw<r}V!&<|HOSPK>J9db z@NzncQK?&QTBelK^z=HMU*hfy8ZybDWT#6OQJW)xkbqN^kNeSxU3+5d?R3C&8Vx?l zPGQg%Kj?UbN!^xB_+S-ZI2)bL(mA9~s09aTDsow)#wc8gXI>jw{xZt*oPR%4|F9(c zv47zF7v*5dV}hechP_Qg4`TfGx(LuHdbV@#FZU6%{n!QqCK$6Kv%nP~7bRGD@@GV+ zH$lS%b>%{&=4uO->k0_17<xfjG7>0E&%UIT;CY&5hPe=*k+>c)rFZAWbe+WghSGl9 zgbKe?eS^6Phr;;frlmSOOoz3(p6Vj^)rL=W4gxahfzUT|b@pZ;6xWsW!L$7ruF>|w zVVffkEj{a@nFHQPR8b2m<)2>etYG<bsI^hzII~Z}%m|^zz3-Bp<e0PNl;TX3iQP7F z#H~hGT_RSJ&S}@|zLD+hrj?&8seJjEt9TYv$wKb7ly6Api0@zxrcJ<L*J#Qx;;b@0 zR&|)_EpViXd!GrO(KKe72b+NVHs}~D^NsDBHIv{B)Ww&-I~Cp2gu@Kj43J(@N0+_G z9#W2x!n}TLUjRaHO*>Jw>mUM+R_k&aoesgu*bR#d*TKq_y^lu}=PG@LBt?=-$Am7@ zBu)L#jXwyMSKAOSC#cpfM`T{i=L8;erLh9KjUn)V<H*1<+9_|RSjS(+PJywE@I{tN zO$g&p)M);L*41ce$3M1O2CnR<M7^&+J@Q)hYmiLy7uW@#KQcDn1H8^od}3jEqrfl3 zyQ$^|?R;UhgSQO{fwBLj?)w7BOH5_<OyhRV;#L_S8V;Q<EK55*U4fK}HP09-+_^Qf za+AvUKUy{t8>^QvUiaxhYbluC3|kiRBI=}KvNc_@`I6c$6;?evr2Lkb*2aj=epdH0 zgutCRtyJ!G0eTDwozosk`Zc+ms!09tZO0yOPek*HL8zwxlu9B$FQG3qj1;ZXBGAUO zVD~WdnG%CnYt&}QOKRK!K_j`0GK~%JDn@L|2$@)aRg15pgQ6NojKZA3bGR6+WnsJJ z6l5ugZ)1i^6sb6+3QF?;b6_gV5J7~CN?Q9nkZv#pR*qd^oFjOJpMnFn2ivF?)78uJ ziK@(Lm@P&}3T<Q|N33)+m)zQA21b=2<HwK*q}j!t*&v4H6(y8P^Ts_WtAcK<wPHq@ zTuV<_yLRu~m*xGTG{?lH2&?<J*2Lu%-ghGrM)rB_mt*v^tf$zPZJ`~XBSExwa%5I= ze(iCn5x>NM*sou(U}Jg<^#w@_edlgWZ;+LW8=?4gV~+QHdF0$~8>zhSu6S^?g*?=i zLIv=I@R-O!-WvI<SV+jDtrEI2<gu<_cJOpTD0%9&#S{JLP9syc_I|h|GMRRirR>!V zDsO^gj(WP#7-^Yhatl8=igU+N<g7H)y{C)DAWHSX4gIC<vi4XR!~~4z%M|er_lyhi zy0_WfuwSBucXr4MlLuo<%~t=Y1er!NBK7}#0x#If<2cmYly>UCUI1z}5lZrbq(*nQ z&~q!iQR)T6(4ZNDFL?(jc!)~5cD9QN1h>9R{5dY9YccPc{gcrUvqgB<4aS^Z!@fW* z@OHKO=(7m{&=m%9;oEkB1Jhs-d2fzn)qsdo)KZ=T|MddMtJHE%@j5jCJQ#EymjGJ8 zpBueT)~wUL=c@;o<-`DI>?nL~f8UQZHtMj$#JmnNT$b57u2Al8PJFDXzAx`A^>AI~ zp`S(CxcZO2&>Uo5uo)L-IJdmbx2_+(c|J2`)|Xa1`z3wKA#^UQ01xXPne7)38wXVg z6P;ZXoF`JP7acEWm7k4;(<rXQm7u$mQ!qD^OwYd(_Y*Gf#&=gV-atv(=GltoeVo># z{j@V*k?_+1beXEgw!LvyhkdC773Y@%NaL|&y(De-(DtKGdwG#?jB|O|#&!47Pxa?U zjn4ZXlXIvF&I1VYGQR6_naeA@Tq`c2n>MI-wM##`AK&QB;?rEgq3IjIjpVXGCe#_P z&^kiKo#HA{W)4d>=Iiqal}&ONt$WM;a_H3u1f0A42n1JeTlTV<_S$iE`I-YscDz>% ze@s^#i60!OtD|VZOo+|txj;O8J^YS^x;6QmqH{8>#VS4p7s|Luxq4c~Qr*P<?KoqH z9p?|c_K0M8tZYJE0iAJ`V<Dyex_BbldIe+&JZP8(_0dZVB$=Tc7i#BJ6g>{ILimR= z44wI2cDv0vmIk4LFKc~&6M<w5v@icgz@K3)^TmJ>uT@J#J)m(|jjNSLgcF6w?;&UQ zSB*(Az9yUePDwaMHtj(N26n!NZNk9$pEnU($CzLqkrE14Myo~pwxEe$x~ZDw?ku|I zlZMv429!W6B%F~fy%QpEXi;PzI^hcQZ)TN0zs>o!IJL&uE869+&jnp!rRRx}!r(iv zp=v!CLd(D+vq=$uIbOc?TsjJ3L~Ls@shfd==51n6)vv|<E6R@Ibv)2=`{#|h{tlr* zK(zfOZBN2|v)1Y)(arga<zc0tP1Ec`$@7q{&Cu^|$jLn%aeBztWR~Q+i_EslFr~Uc zSubTA5sIi>WusBDNq6D;x@tj3A?0)V%?3U}t0bmtYj153(>b^n#C-TA(h@k(`<Ons zv|CnO>GACN%p2{GqHMP~eP<P;pTB>SZeN1kMUWJ3TUV*f<?8;MamRXrec(Z$W6rVX z9mBEuLS8l_M-%;!6YY->vmN1iPyJfQ^NO!MlPZ?AXT56#m?;%{_=5y6$YpY>;1HPH z0AklX&)3i;_8~L-v?PVNTw=B$DX4f;S%YaYXqIdxbN~!FB;u%M71rdHsc}y4P0A%M zjeD@(Z&BlIY(2;QF9*<m{x|8va&x;@>Ev>R&0Cy63)$Kmx+Yy&39|kVFKmmA*8(=_ z<$G1Xl?KalaTKoG-*g)lC}b7#Q*-qe^UDiHrcnk5{!yRa7+G)2D;s(z^Vd+1@f|*U z2?Nd>UJpybypIC7vE-ZhqlwLky<l%^7v2j<3%^%gccd8?(=FLHJmc2vN6RM+yZ^kM zW(O10=<qyfuGEOI{pPT0yAs{npzy!Nzc<64kO)A3+Qy`tz;gf08|`aVj>T`gg?#m$ zAFXt%CMG6x%J46Vke_jG^sKuQ?R8hGQ{UKeM?<jV$p}ZS)3N$~1)yuhY(I45dfJU6 z7ow~x^o68fMtyj19t1A?cpgl{^m$GQrXU$e&Q1$iM<;&8Srho>RzdRHiZ2SYE7UPX zhm7xqrEnR=(AOCs4H85(7Kd><j0JM-F(In#BhfX_=<*x6yu|SuvW>YdM$Y?J`6E~Q za`Y^{K&tXXbUCU48F#s^H`OFR_{n>Xb7W$n$p7uj0$x^UlJ-4@#`DR?@u2O2*z;Kx z-zt4a)1J&i<xLxZA>W!7Q_|Cy#T#afOJz^Tph<FmR&A%8I}R%Xe-zdP18<4mDfV>2 z0bd4<#$W3elk#IcI#wp@jw<`O650Q$!CsPI#@_TaB+MaAxGjG&vKn|QNBQemq=9mN zB|Wa}3p#p)<5nBG2(*fCF`uw_SpH=Htt;CVebyET<c&WXMlTshx1G)UX-Yi%`;cx~ zi>BC*)pE=4z^YE6D8B?*Rw=!3xth+6?{dV*9@W=>5E{vRNvYO8V$j-JehFW0E{X?9 z-Q^OJEvdRP+kEY?jPY)to}Frtb&?_4KNy^oJHL8i2BmIFkKB-Y@tTNQEI42xJ2Oim z=#X~nb_llJzDR7~kTh)0F01VC!&0WtS?B4oh5FfeCD)7$r*~pKyo;e2FZ9*5zoIf} zB!Dp1Ele;7h8<3<-ZWSxPgJuTqC5v-)m{5QF8IRwsrv5)?Hb7-%idJL=wxCnXAvZ7 zmDVmVNDNz%{vnRFrFiC4G&svazJCDag4#1_6M2+<+C*@~F$IR)>~brw!ltXZm5}qs z9FrF`1wXxW{_0hh&$WD-_!4~9?ZoM0G<p*b_Uh@WUG($IzCjs(iNd`*p3m-O(UuBx ziZ7Xs^4ee;ILHW3b!tF(P@$ntTxP)38qrmK5S=q(B8pfO_(t7w8GR4zqo9VVxeZ0t z)*oquvqAfuG(+{pJ*VutIZuoDnEBXEi`+LfcCNiY&t%>kcrB@!EFow=exVygCU)%P z{x#|G*6jTLWRn1%x3d1y@t`zt@EHr`_a>O{#erMTe<eGOKd#y@mO{xvht$etO*4^x zX{=Ti5tGcXug@p#Z}Tg$CO<rZoW~R|>z{-IBhQY*9N9%5&xeh(Q#_n47!|EO=;Kl! zM<*js-m_VSvu(Qf_Vxo8pM|HdGFvm5PZ3F@)*JC)3$$Cz$aB5%bUsg1&#r678IX1h zS}scqo$pS8$L#$wTxWF|%Ltprq~HV;pNl6bG3u11fw8JT21jE0@xq4;BSe8m<(R&$ zF`ieH%f$|etD#??#<1J7=Y<t7d`H-=+et^FwwU4AHe+m78YT*4GeJTzpMK{eUqrrm zNPa2%&UHunoDy`kz}J|^LblLcvBeG3Jgt6%q_iJURLf{RhreS|`JB^hra?x0U3I8d z`3G67bBk2PuXz+uX2x^Oo|EnMBxVc?TI8-frai%1j-T(X4%r(BsIi}KxWzx$ElZeb zGHfEy&@VsJ>Ht9x$_1VcLa0gn^ZkF$O9bTVJK^3Ro_rB#qDEkofCLf0fOs})0R)d= z+Mt8-gvQ=%bxPLYZ$7M;DlR=A!fcf(gGHT9U@E*4R0QOjqK05mJwn&i?Ztp)p+lY> zp3{z~=D=1{N@tSU=;hDJN0~y_!>R<ig>1K7-=CB8={$aJsv3I%Ls_S;HPuSCr&ew| zG!$$^{wPv(OyH$ScV?_NNUO`Dk4S;L4YVS3hjXk#E8KG^^R>IZyJxHG`6H)+CFyz# zmYj?0ZqvXs6kew|o;vfcf`<ZwVLpjij7|&X_YUo%IeY=e<mem%jz|Fr>Jb4*>V{9m zyXt~pr!vxtBlf21!obcab#{xsM^XT`HBKaZ5M~o!_{(o&5jlO9U1pOSu{0igN(G-g zyS*gu3np;K90os$+R`&u8dp}!QRZ185e}2mwJy#=rJW2+Dy?_O0l#1lip;ZPY^{<W zkBYT!k>(*8-?1mzDlyIyxAIm*-&V1{di@^5xr>-(9-@MK>JRc$>sHdLA2tUnQ=7TG zpSOf7W1)&jyu%&BgfJ}e?_}6^EtSt_N_1sw)Uo7N-A=}SHY-{UU%w=X5Pp)dEnBYt zZWbk#JLl-?D3dnssvLB`V#CMvb~|(OgRaqx?DaUQ(-HymXIJ~*D15HnYR~W_9g^3F z_lu9cJz^kt&xH3Khjz!g$$}eu6rIl=m9?j~-9bi!^BIoK$;C-+WE$(z9UBS6trff< zKj(S#;L}Oj$^3Dsn9Rw1c`fgj&uuQC8pWGFkiPr3*OHOhX<y)5=f}h38in`k)nF^k z?L+5>*UOVrsLLhgQwKSC#goH?TVzk4XK%-CKHUlwX1YzSF(qpvnx0O_eSIbN!I-4> zb*z^xyKFD9G2y7@W%|y*Mnv*4{Zu=(<rSIf-)*<qUPibAMif%9JCG)0NtSetsNOkH zkut^bQh;q<;SgUpKDR>;!T=(R+I4oMA~*n#nQ{`g8?pc?v^pxnvSEE4idT%4Im!HA z(DVm*g$`OX7u%t9%f!9ROSwts1Z~@kzQw*Z!;bAZqm^#*{Y9|pc`>b>t^MAO%d7v} zwO*&8<Uao4%|Heq!;J1@maKJ0kH>UIvp*FpxAp;!54vlYNY%omcI`?JI}^&#kZOU~ z)QYW5n5``W1;Us3r6Lp;nzXZfG7jA!06>#_9e~4e??VPrXN}s{DFqlr^7>y;PI|&+ z0bm*S;029bR)yFOC(j52m=nD6MCj{Bkp0)iTZlWtec=gZm@O_?uW(}W(Y5*>npgM9 z_E`QzDV|qn1p?Rm9I(_Ee0G<)<)Z)Ew<q|iCCE&<WH0;(fN^?|Cky_1sTsuk3;`5Q zE0qFolj7;^a^We#TRVAX)8#BOMW{5*!QE`9o|d|e#xP(TqDpdI&0TI!H)`ow7h5$I zv_zeUusQlk9Xt|&d0}$7mR!;Ho#2n&<v{XU1u3LkVMD#U!b$dgvvK%-velZUisp-f zM$0XZ#|@Q^B^}?+?;WU$tuu9$fFH9T2ETAr5{~!4e#y{I70D*bin3v^8&(xRLXe-q zUGQ{EuevOIG%g>RER8d(6*4@o8G@@<5dvw3I0QZy#yqA-=lW_=$KV{1QB%xeIc4Y+ z12@xFObY?a4BRhdz8X7Fw+K1VDp;+%a5NCN)KKx*SoE!W*l`gBct{ZlG(lqLm>uv$ zl9bC-{LHi0tE}Kq1oW0t;1C?>kNqfksff;%(U5;d(%XbyEp|E{Rs5ry^}1k@kkCm1 z_`58q+JxP$OArVClsKD0=D@&4fC)%=>t0Iy!uz514C2D4v;Bt6r<b09@Ab0x-n+l} zeH*ired`jLZ~JoOQL5LfaczGj;2Mq`Pj=sIIMzRMu{AHvD2rEMpgkHOx_{yW($DQU z8n<zNjFhx-<k%?q4ah^6^#mOhW_qW7@G9~aG|iG{UVC!M+U3(V-^ynIA=aHot%gl` z*x5}Be-7MUk#kS7MNH<cTr`cldE}qotHIf3bbdyg5^U6y^Hsl2O(ZVcvOfxM(c)Ip zVs)6B_kN1WS#6CQCjq-%*3}p9I_9v#EY^K14CgJLAtnjXt%9sOq)5&#I`;t9@v^+Z z+_$+Qf0AQLK&{XFJy7_kd%P5LkJ6q2ki!*kH$5Xfi9hn2p*5a-ARf<z9eU8e;buD> zxOI=6=b`0UbggJ7QrQkf@uPd>Bw&^s4unzK60H`%6~#|Iu{V3gNBbe&y4O*M{N*Fe z<zXoUkZF|Zdd9rcr%9^np2cd+RTsn~smFN!8mDIM37zS9QSx#Mr2PQQmpcz6%xhyo zsGiN3tTU%P7R8^yGJl(cYWna4AE#>%1E)bT?PTz^_{Cc&lK-z#{7)&IbcO4CYqdbW z4f+Pv(vN=y>F8hU7>t{i;K8m!(=<(A$FZ7ELT5I8vrp(u(3Zg<d_tzhN#7r79qW*V zYkfpbK5Nh=d`=ljx>VOjO<^^SjAk@z+119=%P{ZWo|p?w)ik1qY0)?H+es6BMXt2# zG7NdrWD@tJrg4rZ`zmMvos&DO`leQHur-CdEd!rSbMyQ=%}e?YJT$Ur4{_=}?Obc% z3^B@~x0}%9bc6U_Zejgm87<-MeG2}wr$^NVbL-{j%BD2Fd*aq(leDs0A;SJ|XTEp7 z?>r*s-|<W7h>N65FXuz)Z6!8EQrzRoa|^v{zBR?j2BH5GZzdMIa+M3C-4}2pq<87& z{!<*Wpq|rJ#mL$q0z9(ax&?G{8a~}O-4pKB$Fh6&d3RjTtV$dvTwQMIY0@-Wf&_!p zEEUYK5lvUl5BuM)_0{*^8Jl(D%?%JWZNG46J5~SsMdNNRNPXzdTU1`C!M4`k%W9Qj zj2|}RCx+b=lQUHP*kqQ~BO1m%_m{VKC<~ZAu!-p?pdBoGD2C+iPus@;NKTynso>aw z*970jxlJ%mv@d~+UNlH7FYHPtlKC5oT$#B#H{}O|6q5up5K(FHUJAbZs(`H{`x$nN zYyAq@<7reU8wgiXL+ABG^@%(WZX8@w$$&fV%PmS3mmE&4Si(f-*Q{H*^xainC*_UJ z)2YAl@-RRChJRDuX(a$WcN)@r@5YFITKjQDah<cjNCvJyrggq)0FlORAW#}c={i?w z6RxTV0PgGDJaeO=K+O9)X%|@ueK5W_?@IQ8*ozcMb{OwFmC1zZr&9MO`)a;Ec0m*+ z?WYkH<%K(t9rfZTBz#S5yQ620$LLjvB#vN_rl2<azHfgE?Jyj&3cE@y=T6ui>j$IV zu{r+=JpaKWrz~O^N46}km(_f~e5*@+T%7PV`Rz)~yZ0)~Y!wY<14bgjf2G*vl-(NR zj`Ta+H@H)LI9sh3_c*7#Nh+H2Ci+^J0-i<{i;QU)&+_rQO$Gn?c<-x0+Z0&H?NsMr z*!}NXGc@jdmysW@1SdFVjTdjvq^#vk<;~h}r_P^~*uv+mnuj03;a^`OZQ3>}G@Rnz z4yTmVYYea|$I%@zf{dNcK~oWul;aAVXltmJN8C&M4?k)15Rb3fC798nFG!43KBtHO zoGPHWuIk1}SU@g;_SB*Rz3@)|si@Hri_eazJ9)%J5$7odNn__Or-d!StYCPpE|XJz zHay&lz`3Z&9&-R0#DqH!-gk2LV|WyTx>oCP4r(lzVY7r*&Tmsnl_8t{<FI}3nA}z* zy1WG7cm?<dIb#@JoKeZ{Y0kIA04xBV*A$@v3_#YnJ^tw7J9pZ>f!}YV_V~<!JVu6s zwS7@qoMTt+MtGPD(`7tpx^7gqvxt74;_mN=9t0Y}wnK%Z`fr!IooA*AOp~|%r|ZEs z4K7~Wj9d@9y{C7TJpIUOi+Z`w;@O_`UTruj@XPGFXhscMq_!@B3*vxBC(!>9^_5X= zXj`{fad($O(IUYmNTEfFwYWo(;w}v?L5f3x;=$eB-QC^Yo#65~=f3aWvH#>>#z?lz zwbm5qi;n~siC!xGVE9v>-`vIFPP_MehYJcmF~#1fh^r1sz$L0DgV;=^@~1ZY#wZty ziC`Ly{+Z++qFEY^c-zyVi%fI~jLLKNn1D&Dsf`m9j{?DYv-F<XVbd_`-I!yIy%O`G ze;3E+w`e)NowqZ)Y@n+Z<Z@&_K*54^QX1#xmWhl`#(O|FJB8oYA0R}t1I86ngl^?4 zq@W-a;NC&$&7R-G?Z?G_hoUh4p56_$-f6Z7ht1H8$!0J1j7~*Io}TJ1fCoz=2LEUs zE?kzd-S_FE<7oX!X|sxxm!Fd(PjsKYPu$PNh4T|Ur!Q?eTl_r%qoGwXIs$mvU$`?$ zz*5L5xe>?WoXLnYl<5DRr0XJ_Z_SG3Z<*Z|hrO#J{{{k|nEvIAEO}X8o)q_%hyK$h z5!uq=jODTEoSr3-_r0u5*zQ)4y1r*Pg>!eb%auIeQ2&ah`qNRHU}Pl=Zo*eMYd3$7 zw>0K^DHM12yrm-jXVNs5+)noMyjp~WLhcpC#NTm(xg$jJ`+RB^`-mgAbgR2GfSjOD z!OPIVy6sdmypQ+_Er0_;>T}K3V-a`bE8fNnH;SsPs+9=OSsLf4c!t8*;D;QMzb*}Y z{(OT9a;X1I9oJ=I#GV_CdCjLrKx@?^?mZcKOBi$Bqk_9(qUB{jF?LC)Xb=r{)3{~E zPb2V>hPA3^S2M8q(k>I#mzW;kQc;AiT6pukZ({pu?1$(dmm}FL*jMZtY7{K1s3^V5 zYM9`#SJjz-$l2E+1;DtLZeaX|7!S*$@WVW4$kA(NF%SC4GII)h!u`LKR`wNU35Mxf z53RILCUHO|lds=|<4+R=eQc6h$!6Y2eC~tz$x469s<;%9Z<qEiaYky{HO(y2KF}(_ z0hgCrNw2hsr~)_4O>3Ztjo8HQs$2yRvl@mI%K$3){H{!l28;8IC5DmA_ID<>X4_Q2 zUhEfqldv)J&?EQDu(QA)aR9{z8Z8qW+0IYXKLi<1ZQC)js-^~jUw&hRCGOvIC^Th| zij22wlihiAN98vV=QfxgMt#!!-c&55opwlO9Nt>@1+fJ_qO!vJ>ezB_&04?d9_hxN zU8r+Z$jBE8tzL8?$t1CSLW~2xyP|u+!?iQ8@`V>)fA?__o>HJb+J%VlE|Mn_AgcDT zlAdhl69LBR#11*EG5o+aP7XQPG<LX@)LTdVxM%N?LY$KBBO{2ld?(xR9>v%vJ50at zom^_R<1o9Ps7$wi#e^g!8R&Z{S(X5R#)aKnVO58rZyf087P`{bxM0&N3vk0y(@(x! z?-q)HmlhU4^i=NO-~NseU&*lXMZ(z+ZQJM_&F@&GLNGJppR}-E%J$U>S7?$tHV+CS zEK*)a<#=v*Hy59NSP`v$ge<7b4gbrs8J{7VNO!!h^9&{?mf%O$#ndOj$@!|$q-S$* z!nES&&hcj5s-Z5_7W*E8*IlYxF#BpoYO31<$CvjJr_BwH;gNVRTRUr&@eun!3i~@8 zmyH0TufqpHDDc-Z45|Bid3DPkp^ok^S7~RJzztW1dG(zEkCQR4UAs=_^W<oe+;TF$ z6^|G_q?6iEkqe@mOZDdEjWgwXY+TffgsjNgGM3u2-I2)oJ(0J3+@-STB<rQxk(YHW z(T@`2oXMiz5YG)XeY>Z(GbsiKiqf;|c=v@^(GlhNFOAxjfNf<uxo(}z0h3N@cx~9i z@C%!#O3f6MD6^eET&mX?h0y$K5mO4OA>@>N&$;Y5s;FqOwDW27m*|Hval)lw{Xx93 zb)0@ckYsA}TUgJ3#*2jrq<fU;HLMT)(CP@AWIoH%5!)p5BdKd_RIEsis7DjXUSxgN z?3c5-mf8Gflj!2!MpyNA$<CE$&`9{rpEhrBIEJ~f1=wZwhw0+xL6!AMgw%0zotM<c zMztD|Ud(Enb@HlB78ssW1Z$sO+14%JvUkAE*^efXX1k)C@Fz^SJNW{yVPqKV+mPF( z&RKy-pM<=c@CtgN7w2-&{4Y1*A9ljm_O_fHC|9q^H7YOum<f%uC*$K#f*fwF{jtGw zNM9ATh}AXrfHmj%{+K<-=V*V$fw`6in=Q%#zn((!ngf2nfI5e2*vOGLI`=*g(ZTx< zu;hP_iVIhe<x5!~pg(C2T{^<M70@}R9ziNWyi|~@cMAGe^HrJTkn!n*Al|k1G49ie z;>zxQkByV3iM{vl5xGY*iQ@oDj-p^>Kr+9a!0rcjmO0tXQ8d!9iIYL306fYGki?eN zVg}Ef1k*-)E_<E~iJe2+JJNHr@@y&cMf-NBOms@Y>s0Qxp0b1CJCGh(Z3ZRS<xj+z zJ=uk?RAD@PZQUjDEqnQEYOxCq*)zTBWsC%mLI{6F=7eJY3VHrkNO|UfC^7?o5C6gQ z=MrZEr!bV}d6nz6x8!Z~Hf+P<L37iqt#7F@iQzHRw%u8nlpM7l?;SJU${lx7vaPuA z1Giu?ZUT3Nj+cpkH9oeM6_G@q0|C+>IK?naJIs(lZ;l*H=MIz~Q#IG4rlRhB1_|p$ zND5CS%}}Z}`4F<QnuXHyto|UBIa5ddpvX^7{jmK8xSj$Ho{+zSD$&Ku3WIE;=Ca*C z?YY>&#a}{l-%?=a-vZ5VW33pTz=Z6pC^s4~WrB}0LeVrse2lA?SvgqG9YM#!XZONn z)8S)Ft2Z|&``xoUTefr}A2s-z)9jw?G5gka6vu`x(tIiGyK!!6hS;ul;~^JAwcF|7 zut?%R$QKu#M6K-v%XP0i`p2f62Hux3-X>|UPef0AwDjBu%X4W*t_%O5J>V7HI@(%l zZ1<hLo5lx9-mjk?(qene*##L7fN>MLfD--Zteh?XQq?~q$kY(z^{OwZT8DgWx;Ab1 zWJHUFsz)sgMDxD+Pa$VdH58!rCkp^7s~g>pIXP@mbk2K>!#V;J9i@LdD$0^@I(yC5 zbDWEY6xOM{b>0yzJM&d1W2LWt&cjC+iF6pex<_(U%VAgXyX<Tyi`khjdPco1!8LaY zl!83rmlL_XkGJmL`&TeA-(otQtM60u28mMwo??tB%Xh6WC8jWTKu@N-fQMY7%Vqs~ z^NA+2vu4}m8j;%--jZJs%F`kDr7l|zV(WiFF8)72w+fd!g`!AtPM<le33L~nn&Z~a zwBpCWeWZ1I3((qPlCQ^DE#4iGs7p<6^FK;Lk@)kG`*`IZotBT_LtPsa7MO#>N{g<} z6{W28y^Fh6Zfbh%cvdD#LYA4j{*aL|y|07@dN1}}dydjnJ%TYhNh&>+#54&}^>h)Z zGtzHUwyefyh`4h^WQB5{GKo9+&O=~H2vlr6K#DuH=>$`xv*RudC%KX=Ee?#v9^}hj zMcjNHQ~$j|9%|F^STiyq+{^hEZ|-y>9<T#Se0G{?xtUUYnjaN_Qa`3TVpe{+60~Od zAut`O5jOPgSsm_eqoN>2A6~<{Bktnbv+jUPhcadxwR;|9&_A_+>wVfUsANx8)lZ{h z0Ju&h$J7d)ZiTm7JHt`vDr+hkBd$A@x4JBjn-#6$z(ugsbWJWa)YpAgZ&Qq=@ZS0s zW1$d(6NXt@fWg4C-B6n%D+CYMI-7qvpCSJSPR?uy>J#1fj=VhNFR!&uLbuILvYR{( zs0tw9u=B$saJ8+Od6}@(Yex75GDtZj4QHxE5#7gik#V6EsGsz%JNZlN%hODZ+n&3| zOBU8^298%}8*@`obvj<|CUg%{6nUBYM4XR@62zmK#1gqXr64>ba+RpKAW$aLYt%-9 z>#*(I_*SQ}F9di$<Wcg{0^=VaACAM~Tf0Rb6US7jhLU)#lPFkicclBMy#0voH8whs zsK^blW^m%>T5r^kC8!?KM^Xf)wxE~M;`j@WkSp?k*p{Tgi}9DEwukIg=h?(Jvsv5j zoZdV15hN&0Pu;#m(7zk)-}ANb)l$yO!++f%G!hGPlL^n$$AIA{LQGCx+jQ#I{&L*e zR`;vrs<XR08BZbgXrb&u|4p&`lzdJ#sr~-w7~-yW2rm3JFC}{E>VB{JI;H1%^LV`K zuC7W)oFMJ#DeMB}@y<iC2-QVupe!n<Cv>rZZ}0WTXkywu3D)^q@(;u$V)Es_-KKPs zzdW=LMXx<+T!5?!uiT_HwT}v|e<WM1PmRkj)1I_yHwnWb&L8x;lGi1h<DF}qT{2pZ zw(woeE+gQ%m<8AVjo`%^n<!RXsM{C%C_k9I&9qYNEP%K@C$DeIx`eNwaHKg~(%Orc z3?S&`;EnMJPhM;PMv%pQ@M5xLedKplV%w`@nanHkwD@_<jd+>!pgwA_^xyZ*fGW;s zZA~`5UY*PB>wv^ULD&j{CpetWQ0R@LHX%TgR*_2gh!$(34ojuGb3=3hs4FwDiC#fW zSqwxC8F?JAhAk>$99&0$gh2Xzqch2!gHSZ`x<q!Na@f{T9f>kCILzS<K^TMY41Kw~ zwRQa_kWOTBjzO!^%YmAW)G*oxZ>w(tRPVFN$*9Qa1W`fjQ>W#<z`BXi-agcO%na}B zZ`Yn7PU-RaR)6)}M8Dp&x=yL=EA5vBI1mEY=^l4^hE7hrpHv?gZz(HJ&ZDxp+rDe{ zf9q#TB`wG_DpfLS&_fD#ORarBd|t5FUQ{<T<V>mft-*fYeX!R2xz__KR?xw@+G{k| z<;Q$~VGQ({rXVD6_)rfQ#Ot=M#|Lsvc3D-YD0NsjnsOFt_wOg`7=QeG5t~yF*tUS7 zVql-Ge6yk1I*hzJi*o2BG5Sb3OjdSs(5jvBK}o??>|!TN0W)IHp>FNH>7=#Wdxx!+ zBx3y4^{KPN3L;U<VYRXunU50O&yE?<oBYj(NX!ZAZ&ZP%j(UX{SAV+<TAHB4&x+|X zw;wlKWHEYeu~keb>1w&qUbq2%V1Smhbv0fi*jEBPv0(H`f<c0tyZbjiV0FV6RvUT_ zcIgdG%fZ_B%p>iS9pkTJJ}Y_`)^;>!TONRRJ9m#Qx{F5}?tC=+rYK9cdJRAm_U|;- zxqtqRvGO77`dGk`{%y+r##Q!5_<4Plh4n%BCyHH(?Q;Ehz+v7&IMVLvfTrj3Wb$=- zp>n7o;i&u@*rfPF6efQ&7~dvqf68}|F@s4q4`8fOHfIJD#c!kvwlhwZ&ZN5kGV>Mw zIOq4{x=%rdM&#$s5(C?Vu+ZsUSBbi!9m&?+-@EWRb27ZMpO4;Yt&2^v#KHE%xsR*~ zHf8S5pI*vOf+0q~1pVO{aT#$FRN#bMj_r{A?B1W(WNjK?qGQbe^|h|GcxG<8fFz&1 z>Oj?J1<K~MnwF|61S;Uy;-$?y4#jq<$jK+^I`E@RVRkXRf2o_v5r5@}2Yuf^Cz&F@ zuKM6sq|ol<$PVOb*ArtmI#zJL@oTuyK6(stnfF{=RCtw5ZaOzRO04)sBj#p|y+8e+ z@hi!dwJ!l>W_INqU~!gt{2$tL2m+)6_pYzV+p21BY;IBgNMBPFK%9lgA)bXaA@ec< zEAX6=!yyn<MG3OfFk10pU6Dw2xzrfiWPI;KRw@y7?x0P)%{<hsnq#+)t}zXtftiQS zUaddBlOF?&{0av^U(2L;NQWmh>1Wn4GaGK`vOFnuprD!fCRGF83o2E}l%sgmo4;Y4 z;|oIDwNHbO)Y)bJsAhvST_Q8H`mI-u*gCe0?RV<8u?kQ3&-bJYue0d+9GO_M#qQ%) z&}Wy)3diG?GNECJqg~m-?0|Iuc`Z8uw+)fQHuq->|CyuMBPLe0!zkT&u=;lRe22H< zJ@2J!igQW6g$%f$7Z1LeXD)Qzmy?8)L0-5gU{ld3ec(h@-|wC1z6Z`iI~cFoO;*9A zZ|t+P$R{ijkNM>seQ<uz((l^-EvE3d{{;?Q#c_Ah-Fq*s<zXI^$H|3X;n5TLv*}<I zM`)|zvbFyYOc`6Oh1EUi5Q-WP;5-NZy!<Me*dD3Rc=7P=xRV&8^lA{;FAd`7v-I<S zhew9E{T<LL@s54}hvtr_X2h?cQai$(16uHcr9X<&nF!`VXxViTM^f@qb^9J1xti*< zUynb^R~Z>N5M9;td)$lM1(&!xc|umLdY0HpwYR?5IeIkAoO=#@E`RPetbCYYHAd*F z7<ttj-5=|l8eKsLQO_ja$9(M_1)q$>pjg0JlgKCA-#DIEff%+w)_W$VrcBDzi>uX} zFIA2XPotvi)op#Ui65?oR)3L7v@1b+2|2FS)xa`X6N#i#c3B@H{?idx%tfewdESyq zVtCIpq+S07acOkc<>>67s^<!;{MEB_={Pfoh=s6vcIb2?head4Y)o5ZC;Lc{RikHs zsHeF2`Rf>812Y<ASFqHRcz^AnfOmnXPuNQSfdh1@MK~-BVL?a}^1$52Bosfjfr?g} z_fu-oN`=OV+B`cFYD$fL3|9@@%QgOXZXZlxp1=n`MU9*OUwZQm3W@=P`NY$hmd22- zF#ZgZW6tX&yyEqrX;j;AOZj69In+R?1LxPF)%SwG9wdVLNxGNFr4Z@OG)$WyQ*1?S zoZ|&~lz&2E39tNxf8+DMPeC{;!2Ff0VdHO_?nc$B%(sof59^@!{=Etk$FFpij=n$l z_aHO>28V|W9?wEG=S49zAoD3VDy36JK}7NQrHc&lhYz3GY6aK*XWFCWPMvFn!hrDr z4lY8hj*QCNqUEj6EDWXG^`C{zlu59xT69b<g8(gNCR00{p08qU7^87pDr<(11D9#@ zW!~3CH?#3+Hl}UI(#cCj0PDFk3Q=Sv1~0Fu?d$=A0+VLe!)PQ7sGGo>Wf;|jemm(E zu@vo7#WY!8WfSl-U#lVd`vj&Fho_oeEdb8!P4#{7s!#S>#Y4XVhG(8()XY_gnwY{c za2Y>Fl0)>zM(mP6baU~tqS#Ki|3xTU7pTPtFG(kNCRSOU1T;QD1-I3mvOxv4sm%Fx zTF!b2v{dK5;@{8(6)auA7E&4!3^Cio-oGP^@{l9I{9Fhk6jNmsmvXRU+Z(=UfR%=u znD^()g{@3@Bh=#|t?>6p6(>eS_Lk>I<T-Uoa0;TeEikCk|HY30=Q;F8OmE|vxRua- z8f^XlMe+K;-}X~t2}0J^F*Q*S<PfndHzf?f=<CzVp6=L2!$w(&EXm~sn+U&bu?e3@ z(P^*g$m?|wn>{-QpaZ!l5D7Wd>ioW)y4TE!vj9MqCvROnSGP0deW-<cS?r*sE1l6s z(sxSUgq8m9WeTxF;nwrko8wt5gl_yMr*0H%v{E>;5;AxZe=NzETQWVZA71<^FH7}d z+fUu_bX;%l_ReD?@Q1B40&BN@?6<@L>SzFt0OHv6I-uOT$=POED;Y1LI9&!5tYAWT z#C^9tY23vrvgWy#ZtXcsHQ&7Os7+Lnwv=ZMnSQKK`e^b~`fgR5Q*6(0;Q#LS8vqKo zdH7N$4;vM=)rV8?^%$`rGZVqD7sq!ou`wzUvnv)edpO2KvJd{)dH%c7wm9^(ylw-c z4vemoL4}Zh9o?M5t_eeDBTo4rw<+imBflXVi3{{`#1GtcGo1P{%4KH$p@P<QzWP?x z-|2tNP!jAY6d|tL#KYxsZk1%1pG4U?HT|(Nwm`4JctP0WvKHi61boEXX*Uu@Q}Be7 z1I<G_zlD3U1GDc7uJIaiNGZG1BLv@QQ6$JhaYL`uYN+Lf4MSD~S60ut&nKC-E0*!E z9;we84Sn+kV+XeYt9YsEZ!8Ve*v|}N!g)YV2V)*Hay+FLN`C6;4d^9;p{n0cb^e$M zxj<2p;%Jx3#{GH>RpoH_9%3DOai0f_Jh^Z>dq06s;m}fIJMnvI|1$<F$x?;uhXjA+ z4RD^IqFi&rL0k@x>29(XEIq$R*Eukw7@Tv;Aipk-m=Y{OhPZFj<6%A%r1)33dIj0p z^<0Om#9jEWoad8jTLbl9Rk%pOXV(y;{+UD50gw-vkB&sRoaNepFOwxc8J3NMo*!57 zR3qP=5wqsLn?Vv(&XM@1iRP0!g`_FpX9-49JtFhXtbm21a1V{ui4L;re>+nD{J9Vv z6mC*q`XkTL6ff;c<DloeLrm7<q~qM2qLX=3S$if{E$*^OiSx;}yn@T@2Hern$Lz#$ z)e2t;flFgMQd_FNt|;pe7SERJzj`xuG;@|woTcd!_c`|T^QYwAhb{kJmJn%__4e`~ zU5Lqiwt78(k8sY))JSZFw1lo#@O%6qHSM)5I(<t)qZMOoP*%&M_+Nn1FOBP-kb${6 zvJ7Y6y#w*Nwo>~=r(Xx4!w(}!Q4v#<dnF9T)fH02l92WUIcn6O5TTk|*`*sEc$e2M zaP3L|+ElX1RdJqow6n|Y(CIQ08%Q*7E}u(ER8pjWWg>cY-%jk`&cweZIv%dr8FnN7 zqm;G~O^#$X1AbtaBT1Hwh6I3A#{NzU$pri<C?mA@nvS5Q6D)tN=8?{EO)^RajDXHh z5T`nHp1u=RH)1xdcK)WOV3ROXPn-!WBp>*rIvjx&Wr>n`Qki2^bu3dp?pt0vERx`k z#T9J$61wg)s@g`O#DYtU;;|Jh!>xQ+GnJ}GbD<ISF8}&Ypz}<HrK@HGSr(UwNgp1j z<j+?|ntChPqPQ*?;o^?<cO|B9ryhe+X!i}+*lj-I;!P)tqTys2_nL01n!@9j$;nuM zRUgEfZZpW<Dh98DmYwUp`Gz)!W>(0GO&01xC?MIWXuFsbCLY7&&qHz)HT65-CBlj; z)ye9_=m;M5I^rt|MpHh5{B;%D^osQ#SU22K*g>5;jQ6g1rcxi`rZ>+8b=hL<|JZfT z;MpnJU50)kIE>~O0JCZI$?QA933{bUb3f&e>f4Fp6u|d4)G4bYy*Onf-o~h$r*}z@ z#1QE5AlsUaN|Mv=Ue_+J9BseztXlveC0WmZ?6M&nGWoFKuGGU$uSyQ-sM+-=3y%h4 zOD6_4@>%xTZdRtV&Sg<>o@;TuKN`Lbox4Do@xAa(007eh_-(R#yEFl505SJIJ8UeH zR4GYggz*60Y^=o#=v;jRF->``+vb4Ye_1Yytq7AI%f*o~HdD*R442B;&o|nc_a05D zpi8yK0q?rSN)t;0A-7}-`)%?A#^yvR0tu~93(s>O59y*h3ZX!JJh%BJ3EN4ko$U19 z<9(wW<&=B;xrWsmcD(jMH!Gl`<j=iy-gR@?a~?~ZnuRLU1?#%O7{KkOM?h@#pE>+p z@EraWoXCIPnzwfb<_b0fEj-w=M)gQ4g`&}TICX-ni*QV+U81YSd0X|Sr|ES-3u>P> z`-15mAOM8)RhK(wam_V>xcKh<X#@3)qakzo!xF1(vA;&OERB+(utZ3Ou-rf?jWlsu za#JyI9nZobfwtAv-|tIa-R@Ss%kU+?W(|*G>s%bQ<HHcOwwtyPuP6|<%#&MRCl{F5 zWB+?s+%Tb>+wl}ohxIKuYGS&wdQ2!_?1!F5+}IMP*T({@1D#MGl#*l)rEPPXmP(xR z!{+wI%!C80RTTJdO)j(RJ_nuj38zZLb?5}^t!vly`%7`3%zH>zBQ;~9@gThpYRKy= z<ao{K^AL8B>xW+lD>&<s^!0VzSv0SMulTG>hX$^8n|V0OLKQNl2~3DR&Cj>gA_S#M zlz+{XHj>33u-k^E)uOD9X2O<z$?TONZQVY_U?r9`-PauTuMk8ZpNDmYM?+HSw8w^I zX$!25TSA*e%O&=@GmVC8N2}O%J?lIVcBvNn^c`bcb^{&~DwcD9?UOmM3B7GaQSwa% znRDjvhy|FI#dAy4R>knN!lb&Li%>7-)u!B}N&+m$a7(O)2hF^#;mM%|e+Aq%du+}* z+r0rr51e}xJ`})-0#*bgc>o-WBwW<NZP_0$x3=`nO`l%H&jfJ0426d_DukkD`~n?Q zp2cZ8>)((}HIRYAGzEubR|-YPr78Yg?!%OND^`3TsmdJ{kIrKj<{C-fz@3^IQ;byR zv7$xnV*sN+YLGbVmzvR_t=rhd-heX>ocaoKEHil*g}(M_oHF6agFz)3=fC$`XdaP? z43ZIJ-N>z%>jOtKS)77Rz!r=$vuurj8ma%R_SHWySLcn+xBYhR`>_)HM@#xtk}WfY zY=7n)rz~8>>*fpNw4oOr)}>8JIoIQ0U_Bj!M_?Ni{P)`mw7_MOm|0eq?#qVYJ1Fh| zRH9VwBZEBR$Mu2~^s(5v;)b5x;lvMH4v{M!TZ0A%u9=i`S)rI_Q^YLt{IGQ@|2|FR zD0UbMJO1rS(ckP&tU1MxY-g`E2M#{P^u2|5jEcA~@mYP=e>qK9$<q81YTeea8N-=D zw}&YHaOa;P5aew6QHCN>K>8d<nA=_I_5pRw6lJeRLE4M2D8+SXDuK0W2ZxL->f&CL zsxlEIGA1aN!MCeb6to)ktE%<aWHw6q`+-<vkXU?;tvq#(#(&5GW70l6M+r4QUZcKV z)H!A&_1Ue*blUBS3S8q%a=S`0cwA?H?VO_r>Pv+xa`MZzRgAg>qNIs<gohrA*J`Hj zSou|JiUyT-QsN{2<byGlt1BsBRU0vTs}KVPt!<iBQ&mVZRS{Lp$CoKR{bau;xdY3l zKyCf9V*5b#L;y$=xwNncX}SF(;zxG)O?n@-+(I8CTv;fQ<PP${2IaVgqpjJ7kwzf9 zz%48D!!su3__|-v5ALwZFmP1Bx;Pgd%*n$?1(PtfbC{#q=cz+qo2B{Y@#FGmsBfpq zO~%-BsIL37q5D*s$Qq_-`ce|&Z_@NN&Fi>jem2BUZzVRW#x$Oj#T(-kY0T%1K-wDb zNI7?$Qc1meM~0K@rw(UDmyk)xIj|z2mQ@TZ>HTsoL7;$~H&GgKmirBs|C29RYBMNz z#P-j-Z94c~`5Gij^+X;vvOrUZ-zbu&49q49DrN#G1(ru2FsnzKlg}tBd6ET-n<UDv z24KOq6)Hr3ztPiyxIhmB7(UXg+em+h+7XJ^W6j6-S7B%dqLogKel|06Y)o{Ai*X7{ z3<u?CSw-DRSXf_@Fak^}Y1z0Tqp_Zu_?Q<N2MHPz)!{PIa+RYxtpDrPQ=o9DW1(Bw zxA;ROUb*QBtFCq_O6GRrhrS7~=-DmOH$5=xp-uZqhm?I7JIYduk~<;Jo`?gCHR;(0 z#3m^F?;(dCXn8|91!)hV9?dC>1!a1kF=1m>*1cgQE(;%6tiGkC=SF^AD|ic7hZQ7v zu~_wJ=^PW2Wq#}L%v<8Flcszme>cZ`1+O>0o!TtP*mQb)Z~#kaIlg8iGRF3>&~uqE zE~q-^6eLp0SqNnawVQ=NJU(Hu%UgYwLpfd_NKH{|s8yk&tafhap)%&w?+0(;sY0Z; zFR#xjlC7_1ameN~?{{KFD+Q|dma0imn<j+%7KPlMs}^W*Nz!U&osGl}qxFiqFa9>< z;Yu<61CHJ%7+knw?A=d_BqyD-AD?j#`=C^z_6KEznk>R$v7{>%5|ZzMc^xvAi*$mm z6@CD+xV<0ze+C^_BR(;FEuCciY>H_duQcnThjN9<VlwZlD^Q#5<BPmZL89scI%Pqh zS_k0*r<tAE^9YIHYIy_W23mSf)Zjp`zDvImbogz6>SSB?1neC7VN8pj=F~q+PiKf- z09L<<vsQ+*PGX}8MBxQ)gu|v{FB~FV_;~kj2I=!%fSJ!3KKoE$$B9o#J4vJg`k<&% z{s-AeyS$>-Pi@c@A!F-g?{dvoxyM=7p%ZOyhw$f(1*xSYJ>Z;RlNPhBS+p6)B7ICx z>0%1De;~dGsjEW3nwXv{SDL}r`MNHR@QXML@YmM~%WVwgV9CcrW-~Ff{N9R3nU!(1 zGRa@-^2F-g$dq3c6b7jUOPRft{9=}#vWK0c{A^R4#`|P~`#2a(L7&}8;OcZ3fTzwK zeUFI_d4y9_P1+};JQ6N_5<l7bJ%(%7{b@Gq89VlX;T0-KfBQ;yQGy$(A|2TGLbi4s zT3W<0+3-lGGE?s)UIv5cr3^1I1`>euu)GI_+XKmu5{^6;<1cwB!Pr|oF?0p0WyIh5 zru-|ya7)3U$yLf!L5u$)U|=wAI~f*OA=K&3SHQON6bVVHr0w<FQmbxRQKWS>d_2(V zS6RYYXzO<-$!k(HV|_Z=j7G|Hh6+uj%yAu(?}}Hg?Azk^vw~lcBtsm8f5HF3_9@Zx z40U#vuR}Ves_}l@GpThO`AaRoGLd)gm#cVT)YJrh5K(mh@770bEGm+<H7Hg_-_gYD z-Qb&RY+pJ@P)1XRvy{ul5mB07o&7;&_UimNT1mAiudN2^Puo4^wM;HOC%jjfzQFqd zaZf<rtkt)?DOnnxwN-rPOl&9jNQ+U)Ep@dY2^p#NN+#t-65%{koppS=a`LWkZ+s-w zkQ$S-JldDBPrLBgb!P}8UJR@@pQ6WV`_4zsogVuSN&DZIkV^$F%c#=Rj4UphRnm0s zT`5boi=_2_y|0m|%ngyq(+DX=R~4m)A;Be5A*Y6{>4n`4kJc>T=`{^yvv0%{)#1kz z#_a7RrXmJ)cQ_%4!@L>OSuI03lMz=DSxiBU&zDYKNkelijDZuAL0?y)JCev7X((V^ zl<||q!ifRNLf=HY5nKdwzO8}PY7Xl4r^JdM9=l7n?J#cou>pBRr5?p$MA~}9sRfRa zTpdH2^~;+EkMNN$>@2@bXP%ThOr=3=SaHJSL5qk1LGtCwwViLwl$PQcgXeES!pp^V z@>q!_Z-`-0iv1<x`8d$^X7);<D(mlcJ>NAl#V$a-0W;%k^@$8_6Z6avfgK-OqKjhF zn*1q&7G}rynLf0d4%u1=-BGYi78*AdW8C6z0hH%$GoLO5$azr)!%vcRqM*U`1HRks zxm<%3Gu6Io;}<+TShUeyPv00J6TkLSbp3YUy#_lV5xGa7@+kuwHRz4dzPVJaCwv0R zAF$E0ae0_X68BKL$YCJ|-h)&JgLr@JQ_CUVN=&a4>jy-IibPLuM8uMU)h~7a!hQ-2 zKL6=r#0f0IfUjY^K2tnZQ81EM+yHg%1zPGJbcMjnhnXQFU|65(VpOF@{O*YR$2sJm zb#5#T1Ap!J4$W$3P{;&9Ytym$XjMj#q1DmyNN!`S`Wc!#FT;?id$~i#lgCvi`-^FA zQ4`pUF$w6&5|R-)k+n~^m8|ZE6qgBp9Aq->2&c4HySYtk`}#a6>)_<5JL5{rKQJEi zaCusz?O+#5*3yag!JheFnP>|QEYNSRRJSPxHmTwcT6B~kP`EOQl$0O}Vkwii|C{IR zv{ZenC*-+B`nVn0mVFm?Nx8@-g(NS|+G0Js7-#f(jsb%>e-yv+dcktUC4bbgrLjm& z^BRoGe%*ffNkBJW1V}IB90^Ui7UETh$mn`rl@yuQ)*OMsCDtn;^%;?vymh8qTzKhb z^fJVYL~J_zGP1D$%<lhLz^M;Wv#A5$!A3nkAC;@guL6aS5d-m$Ka^NoTgcMzmgf%! zlufd<&PswSMtk$K$%ERv6}k1k3b9)Tp{9H^ajwUc-=s%1i_4(gct^FkjEF?dz=vK$ zZh_Ci@rO*0i67iOR#XU9su;Lit@9aG7C4!Y-;cR))7=RxRr33y&{S8@4)QFDf9L2W zke4bL_#<*oj>N-yHO(QSBT`pD@+Tsgfh+La3Sk2csjc~~-7KuZb}v6h*w)4iQkv{9 zm3LV6yr=OXdo)@e(F}2sC2nhv>~jcg$=fxnv_o)X%kp=r&GU)W{cJ&MflOa;tnqqw zuC{|4v$viPZ$;KvIZwa+ju~seK=77|Bl7FzbxaVBp&>M;ns>7RB<J$^llC4;kzl0T z8s?bi_dtcc9)E;p1&OTJ{7l*)M3f_siwJ(r!aR~{%c-`sFk11_P8$x>akZuO9vMCf z`}8xll=_@s)>W(_ual*b*qb=LGRW*o+XcL>WxZ-rhQ+>}7m^?LynJER3;FsI@!n86 zZ3W_1nKMY@{brqPuThQVCPI9k6>Sm_z+Y8-J4Z1i_9W~r*mv|>XCX|2?BWuo9;;S= z0`ARW;s0;*ZCMyvtks}jE6(vFX>FeYUw_%6SCk7qrqG@&tu@aG^CnzL)d1FlaFUi) zfA4ykzlCTH?ZaL7bieqqb8lI1fnXmuiM$w7Y3bBIE}A~|<EcBzsaAeLdo=brWkTE! ze$QU>-nWGw7TENrG_%1HzK#+_wj}>OMyutE7Xh|hDFdynRGeB(5w$c4HCapAwt3d? z)mcx`CLeDewVFpd+0=b+AjjZ4IucI8PJ)(NI;t1B|JmSplfC+l&YVsRpFHf({vcZh znvoG`8HF0MR*u?k=6c)7mGw{>3iq{+?%v)ojb4$j2^xcJqA!|q;;=B8k0ozBW(RrY zKZhe_JUl>;polVUH3Q|}{#)(5$%AIgx_|Ym`SE5Alg?oDGxEi06NJDfqxM?76+;Ze zh@-yI=MlZ1##^#-jylc4SBn|+iQxN>Hc}T!*FRwpCld%xTmgH1-ccPp#B~V3uc#rV zCQKi2h5CO%f}@T{kr;Kh)1_kIjz{9)qb?F7A-u+UF3?)R`WAs-zutvsNW}$XeSPLJ zvoFAS2JpW7KQDmx>K|uamV$>`;`IO${$cVU9kSKY={Qx&Y2qwe9i+Q?<dszhAjG~a zGOb3!4~j)lxLj&2uiaE)F}w5wBvID3_VQHpYCfkoXKU-e#lBF5nQX(_s2>w)`Ul4- zScTou1M0TU-B}Pr-zCqw^+;+R70xH}wLlV$e&vKIQVju}fM}9G6zC9ywj9+fgqmdk zRf<9?K`gOB!Doi$ljLXs?5{svTmS}@ZsQ-vB7R}SL|6@3U|G#%ePC=)ePxy;*-68( z%}u90yh9-T7G*<chAsnv<vL{x)BNIuMV)Yc7iAP}uP;|}HOwqZzDpair;p%o;w-A~ zi}w}Vf+mWGLHK<84UNha<cleCP3@sx9-Fu^=h#`LmLK{Elw`O)oa5Am?@odck)}Qe zmsgwF{&X-ApZ+|c0qhq6f=)jB5XRkOqeTWD;xTP8|Ko@AFB^6sPR!lCiNb9^qt@vF z>o~zkFFRnOzT<X6a<XJ@b<Fi-!sVXN<|cq6lvxGVEovJAqdAcM#a<7P&X&zCu0P`_ z?zAodgRVD$C_1Qrx5T1q;XEd7nrh#Su0(gO$aV{LUUXD6yX2pU=}E=-^M~l4OVkzD zKw<ynq=r?yS7J|Yw#i-i(LH{csnNa<Io!0`W<1wfuIdFMvUJ{$_}KDNw~))4jQ__d z$n&((cK%!5Y+_@E?P|ukeUkc}0dIk=S=<Uh9?{~@E)6|lt2rl-!;q|RccFS~v@T*) zVM(8I)_<XWsX;fx3%PD$@-O<>NXZGQoc{{8K7A3><nBoFN;_n?ohb^n{{Maw5+>hk z#Cmd!D*J|(EY>n#sgf4q0Dp<PANuAleZs=PI0au!ceEQk+}@v90~wd&<LQGS*}NJy z!HEgZQoQ5d($dDmY%^}Rk)eBgT5b*=1G129Uak%}zQscq9=i(7j=Au<2Ka|ODwhcc z)jwBw<KaDn_jI4n{o}82D4niR!c;c$eT^=8NjcfiIW00(16u9gzneQyHL$XZWBq1g zSB~T+9TC<gj28Iw*b^j#_W@i#4iYNb2bQDYLg1UygHFDY5c7UozgA?7AdG{W^B>L5 z7Oh>kQn=}rmg~=6IW%3q2%QX~y)Jp(5=bp3k0zDb4%S$<WC1LnpljcYm2k11)%!>d zkkkkW#1>boo9dD4aq2QC+d58NF!WlrR5sNufYmZ$*wKgbfQSLabp~T}Jps`$FDb=0 z8Oy+kDk9|VWBA<+zsmY&^yY^FL>h))VO)#(Qi&prTw<aNDwthWLZ5#FPJa0B_NL&; z9sNueDw#Q5nSYb^8@bevvM!}SLJDF9XX*`?odBAdD@zU?ed3zhGlc$$GIAV37hx{w z1C8%F-s4pX7~*!|DB|A>6~(@AsJIhj9tsk*E22G5i)y?$MY7;}Ej|rU;uQ|E3vUe* z>kj<akjWT@gX#*l?H$@pmC)H!1BKJLqbEWJ1En=Tg<I4^<DBSFtJi^&`~xSY?1h<y zdgnU$MWP}-+~H4WPcj&roH)ZgqV>=<7993uEBdIfReS(-bM;aoS0z5{eE!_K^m%Gw z!D7tICRrq%e=1z}!mehtF7}@<zllJoPlO0K=CW$n4r2-(m!~3rC$V-;-GVL`H}RoQ z>hxKoc1*EJ*qOTL$)BZ^ViAm1O4V9V^uh5hAepud)!M9;M*hJxE1f{9bT(>p=<0Im z8{FZ2&5xg7oSD;nY&O+op~9ZV5OqYw+PXR0zl=n!4bgX3FRQ6ljM>o4;JuFS*j4jv zSJ@CfcT@Y~8gf6Z6B|D!6#iPfWK;F#O+s+CmrAD$^N#}SO^zIhz(E)EOnb~i?izZH zX&a?(+b5mKJtXZ<yH*}Hb3wt1A4Ueb>a3R$aKnE7O%a0NeOMYgpON5DXaL*q`j+_J zN{Q5S0H-eCS<zgE-rNxBW1^B*bX9uJ<=Mj*IaP%|oE{Q%G$;5C*hx(h_~RibEQ_fx zRTH+<&J&%KvB7rTvMYbY-ti2#dV=DF4R0d)3Y|=w3eh<4`zfa{Ov2*1-A^=IGb=yh zqOKzn#{~CJruBVcY9vbrRXUk9)%Lb#!a{r^dh;a@%q_w-g<n?3k%q|Jx+HGm*Y13u zuLEtG)}eVzR}o1+tTV~}+A;*S*DHN;Wm9{%=!G*NWMj~r=PBQt<@;gg@2&TG<SWSZ z4rIHP<5YPG-yxLaRzw}+M9N@e@CT`755^E&FzDMAtV*+&37$7c6VWSW<^csBkQey) zJZ%qC4_bwBo%45)=aSdC^^I`|VvyR5GFjSGAkAVdZMFi0o&{KIb=N*`pb!rzQeQIe zRrK9Gi(`NMVfxv`-p=rBU<u3%-$Gj64_4uS$&LsfDcL=Q7d*q>@}uYPlfk2?e*#?i zN+f!ZVMn~QgmVICy75{^9;k<Y1Rd{rqNx1mZEvTPNe?Y+_<QXy4Ko%Dfl#(ExAx8! zyMF6keAcZCpmeKN_$~Wuf1~PTR{Pqb3D?bcV9hzzg;oi)58G)|{=-AW?&9Oo(b1(> zO8-G7H>8jF<<wC$DkS<slO|<dK|JkS1UYfAU_o2k5X4a@nWEY_H^SWI9$5odc7X^5 zXhPSH!NoVb?DJ;vvBGOQnj+Ij7`VUP?t`NR8EI6u{Ju)x_nUVFje_&@7LKr|Rv8p} zJ;deKcqx)xT2j{3hnXO}rl9AMJ#v!#qv}R<@!{ui#j1#K!eN@Vu;-=6X`1cI^P}dT zlc%#6DP+vkCd|gX4~BKjl%z?y*)(jNQ-n*vJhXxb^J!Mw)_KfyclL6<=(}K!-oIe5 z+*TTf!u}B+OY2wJW|_sr*E<Y@R+-3#l@EKxeE=mX_x%V^7SPTp<H$DNsK!YM4RL>5 zcFS@@INCwY@=#QHr&%v&cvo^o=f;hm228oMh5*9Y<tMT2OrnJ2t<<?GR?BU<^ioUo z^65zcW7@UTq_x+r{xz>!7`j&hI*>VoKzd*S`DybxgLZp<lMY5B>OIrKD_BgwI#VsZ zn@%%~(#)$vGUA`Q%(sO<ilTyQC@bFV4qxKBZpPGC%;hCYT#o;+9Yrg%0CG%nuK>TT z3~|d21I-PGN-gbU-l?_d<oVrh$u|wqx{A4*+Ajj##{TH<^c=TIr#cma2d$3s@$RM@ zOSaD8ABD>oTXed>lseCntCAlSkY6`AOSfpStyd{sbFX4#InK@c!XXT_^?O&-aD48! z>7!2eo6!<WS&qNk+4)w43@oXliKI+pPR8-jA%1tj%w6W5jt(?xXLc206t$vBbkbxE zx6+TnB3DHk`RgVl^uXw@n8blGU((_^l6nMx1{t{sU<0^f4Ii0A5pVyADb{$ScW;^N zDae1VGrsc*zzO-^90r1rP}S7bbdsMHQTax|St)HgT|03ddo+ne2`8lv5RtD*y-j`K z=p|coNb%g+JW|R!B6cyPZi(K9{^lh9qG$9)-)A68KS>li@OnN!0%FQkxQt>RTn?RU z`RM;H<lbW%0MGmD6rIoF2g1LQX}#bL97pP;Jsut9g2WY*c}IrAX`wYa^uK564F!kb z<wC7CKVd~yTa2vyq;P;Ion+Vvl4@LWw~~g%y~n;Orv!zEGneM7JzFP*Hg4xmXE?LI z40%<Ry(Cw&S<lYC$J*Q8DL#u|KPhhI;4R983QEFvB>H;bTBHO|{#Gy1GD+Sx?m*HD zwx>Y!@7-d8{?}MZ0&ZTm+}l8!{=;oc_SbQVk8aw=(jgoa&B76*T@jl!vN@0G&RaE$ zk`;BoW%uI;v31pDV>R&=<EHg8<ox;sfwR*POLeKPS_H7u=U}3AjnyWJ{KM0VV&FM* zS4{$J7yYhBP0_JxyNdd5lN$*(WGD_tFvB=#pc~Jt!dLNf>w8dpiy{GIOeU*p^;q|* zQvq{C79<u-Hi6kmM(Q>HY$utMy461As=+SjimY!?SoH(GYspob!_Guamd2e{U5NWS zV@#tyi0g;IZ;Tc#EOs@X5e{t+zlB`Yn}wm*slTh!Z$5cj2QJIes6@F~_{@T`Zv50q zC<PTF8TNlr`*iXO;u$`@27tLCNk~qf+%=UU$Z;y*hqD9d9Sz>s0Q~w-WFsAY1ODAu zLYjUepmBwU!w_-AZW%PpbuHz9vb9x3uf@z^6dV%;$;Ej<nw>pN3|O5Reu~h!jk=(V zeXGpdc(~SzqGFF~#zuCxu(?F048PL}7_5uF<O?+_q+*fwCFAd(7~*Dp2OQj1kO1TM z?!cV8A>q+ADEb&m%Dq1eg3n3tW`x_|0&wDVc0EqOHW4}ZLgyvV@jZri<z4n^&{Av< z8~#75%0(Zp2j1=0q(&%Vc&FKKb#892cVFA)J~50R-c6V?vOAmF<Kfmdt-<^9B*AEJ zX@sxDi9)(<A6xN-IsB`p=|?@zA>ml%tveAuAs=iC@2kYuKNqe^{Tg8mz&Xt=I+?Zn z(YXxMvBaN26sv|(<THj>yCXBaW04F_s^P`>|6mo!dt8H){--W*`3Y*OFCRDG4sq7e zK-m@$OAHK~#KX*YTEdB6RWo2GSC47<`B%Rs$=JR^!0f)wTy8^lkz<lG^V#_9>Ou|& z*~$ZbDDO@;$macWpa{qO@*f~%<^0WuQlv1Ip%ut5+xKR4p{3pG(LjZCrEuX<Dx3E& zSbBp?@+bxp4O<;S#Zp*wn*EovSiyIr73COv=+~qQUKVx~$mB-cc70#o6&$yYR=P!) zrw%6(dmhx1689MjgzOI&^O;BBQ;*dYO>0v#ruoDiwHw06Ip`fIuOuo;y1Y2+bod6y zmsPwLV(RT4Jz0A4m+;Z2nB9`E0yscsSC2tDYP=$9w*Af>V0P|oV%aY-KhTHm9U^E1 zYt!u`e{R6fIecmAUc2BVCk7peDK|~|vXBC^T+iy1cf3?<2SP-%YeGf@+fTji+FuR| z31$JaHhmutW(D(lwiJ!PVHcs?RL$`&wtXOr%O&AVed@ox%8Alb^Yby6W%0~St8<uz zY$^Psf)#Z|8LPXBs)sN*K6{d@azJz8x{F66WO`pBMSh>7+sn_1pLMY)n!T|^*u?X2 z;1JD6l@#)SZ*4LpfE+f@jr~*d-k*apH(bfh0I4%m7PrL~m1OD(E$hhg41(I*`s90Q z9C#S1p-$qLZZOeb;4wX23p+j~ixENn4`Pz8Z~!rsh&}*{Y(<Yw8hRW&Dtn0Q*FD7( z1VunN{;MX1iYH9Gf#h{O{TK8_CQNRy-Pysi?f)24r3f6Q2In+CnF9BNDBb!?+g{u+ z{VD%efJ&Qjv7*0!LEBF`eBd>(M%8iYSW+DCgDaD#c7pr*iHUIDEclyZfyw1_U7Kqv ztB4uIj=|8>rBrbOa6&=LYdPxEj6uLIZ%ZhjCZfD`a+@%g`jDXUFQGxv6NTf|$=P|~ z>HeWULPX)NpEi;h5DSntO4&{7%^%{Cr|@{W<CO`0S?-cUG*g=>7VvytOuDS*?8y+P za-Kx!Y)o-~;;y4p<f6x)t((b&BzpkUEU&OOz;{tM?d?9^K>Myh482~vh`OuIo={Ir z6YJr-um6m%{#o;NAAB%+W<HI4k8}nI!s+7h5~kcdu{tg2jceKnePTdyCC0K4|CRsY zm_2qyqr~Mdt0leI5`yB)^G#6*b*n&O3!U7)Idu{tF84+d)zdU4VbA%g9tkG!88gdn ze$gk|<2X#w8tS#*^{h_1lz9cTtJLvNjn5z>FuMIqh>oj%!HnR#ez_~+$t5zT+S|K# zBUG~?hl=Ale!8U|@q;)|&B}W`P|8Ud4i31!Mpw3X?$e8SKsgzvIDy6g^Y%BP(Q)tw z#R#Y)iz*V0l@cUjB(<C#bbM=j#wWD@ITGV}Kz19$bIZ#8kxa41l%lY%4AE)TOblI@ z&Q<CM)*n0(RIizitaV}7kvQ0g2~bZx$&yNN?ZDza;4WIYgK>~VWsEfWs9Gd&I5Y;} z7kgB96+{1kOu1cQ&-rP~`J~<~lU%@Kc|S!F_aOo=x~7OMccb8DUSrZh35thlW>Ur4 zV%cO(HQlF3r}<_9vjrldnqe;3B%+0>nUIzY*>ZX6<z1wZZCWOr=?7qQ;5>Bd;+YgR z%bx2*u>a<o$hk1fP%x!?m`m5}hbJ?_!zH5;*hgn4c*REV783qr&-OoMZv2OK@(BAN zEIdP%jheeR;ba4jnSnu^^~!?*?`d{Wu*jaJUfJHqBz?D^p(`#&<-&GUNcg0v&KX~z z_zw)2o<o0CYhACvH&4m{&J5W}J|we9uW@Db?~!~chy@3;6B8RoKbK>-V9n22UH@Sk zC~L#%tbu|qV8Viac%);4&(_z|_lR>)Y;i1y`AN&(-25p9i~7aCmGWJY)09Xh25Hnh zxTOjV5giW8n6DguAUvQ82fGOac;77DhS@=acx_1nF(t&1BV3l9|HBI7>icx9`aXtl zrJ+U1u*BGRlK27hE55;;G_4%<bVpjJ5$SN7O<I35+G{fYefm0E6N(y^;3mSUQD-Bi zD4`6bv#;+I0vYJ`R4s=Vr@{wp-o!d2e*-l?)RpXzo|o6aqU!8X@T>UmS(8Za8ocF} zt}z==Z{MdJwa?R^=U;3=5LQR^;Z1=eUVt8u{E9hKk;aAu!{@)a#3=w5Wm89GA~^>N z?exq5*LsY_Al2S-ImQSaIALW%1^;sxB#7JYiJdq8C<vkJZka|f5~IX%Yn9@sw&|#< z)tdTz+$~!j%j<RC&5L71^_3o{A{JEJx@j@GY6<hpYXTmUD9N*NdEfFtDM}y4xYM8y zy{vLaz>#qxZ|})I#?$6!f6o+{aNTz@+u<h<soPip$RX&7cp83}!Ju@i7fYc~bij_b zlGp(k=C;Rbl*ju{Ib`sP#1K#rHolG`b)zws=UkvmrP%QNa&oi&z_!#@rm25Uh}9ET z(47Zo676;w!x)ce;PFH)NGbH&AvH5EB-jED4h#E)oGXR`&4F;?%_QAJ1?dDY+lXu7 zpxkLPh^UGTnUf)G0{O$rQ{Dg`u$5b6TW>0)hQaF`%kAM`U+aJScm*`DySC^JAhOMc zKAjOVj(wy{jqBb{K}q>k|B3uI@2V0}!x&xf6`vAqmh?sD)R=K{J{Nd+ZDXCrp%yAE z{&g6>{m;oqv=c!%{Y1-3pW8`TLR}qr4gMpmYWdL4Ga?z{8hFp3G|V&n?t4V7+i3CD zwN`Sjt3Qv;*VBvR&_ixh{*-s6O6TY=&=eOCEbW)mxHnPpe{MuZ+<siU6`GX*B(4aL zd9iW!60I^r?F-_u&Tt2Z8`)6f>##1(xyI73Hw1MvFkL@sMHqQNokGbLE==Cs@k=x9 zNyfqu)#R&$?1hbExUrzW8S4z;g&QUs6zpIi8j#A{2AQ~8rYjfDW92t0gv$0%bRA*} zmq!4jXH%rSVC@=h>ZU;>X}r$ea6FdxZmWJd;o}nrcayKCof$vd-w)gE&-}jTMq%Ti z|Hs!`M#UK|+oFv_kPd<18WP-H8;3xGTX2HAJ2W03!GpVdaCdiWoZwF54vk;-KIiOr z&wFq0KRw18qyN>aTC--&Z<e+Buw@}eMk1Rmx(xw{-aw!i^|&=B!^6-i$n^78kNFtN zoAY1&1Y`A58~tRq>ekRe1$J$>4qe#J>0(3!WA){PKwqSweTtVja04@a;E(OCU~vb% z!($#lqo}JDP_xo6s|xf!)&YT2B4^X@#uztJ@03r4$B%ujmoF1%cIc~aha|tBpkp;J z9i5b;dpRT|vval)E)PVM4@Zhm3v+mP_cP`^ck~;r2A_%ABbRWU2Q<?Aoj=NlV^Yrp zHjVGRCo2%khE*Ha!6Bo1i<(8g($5Dxi6vq#=btdhtD~sqN!L-5p>P_4@H7a48ai=u z?!1?cl3&k^ZKt|arsImks8=2@4^WO`&||klLEl0hk_jN^*xk4&{9ek3+nrf*h7&j< z)YGWFr<nh$lV@?UfG~aT*2fQ3gC?TK=mr|*ligxp!@hTQcG-{3t#wSc6?xb^b)iTZ zhxc<R**#gWQA8co)f){^^KfsS4~Ddy`ShO2bwm`~LW>iL&t=<Qx!Cn&D!6i&`k~z* zvvH*aD!Tu^N$v%*6l7W4L%cy-WZbwI^iXawJJlO}!fz=i&KGsuR`zH?A^EmElZ!+x z;qz+!?#K1-%i8Yb=aW{o+yY(MTijD2CEK-42};YnD%q+(eo1T*v&?%$i1Q(n$`)Wc zmsI^K)PLu4B>nL$_sF##QNCY0p327wBDM>I6q9TP%pHG&lw#=d{+yC(b3ouy4ktxm zd2Ex{M4b^5lrEp%4K@!|!?H6Ehs>;?mVHn=W2G0zA!ZF9C0h(+PmNAzS%s`i={Aj; zWVGtKm^(!7%xttA5#+LoY+(xN`k|Z!XS8+xxs7-2J03auC4Bc2ysZ&g<s_e)|4@Rr zVz=+UJ^>Wnq?p|!D;yA0ISjHrEUwbCD@}YYW-T1{$bUQkigLN*Qbmowbx(shC`)Rm z1x4a?N+A<Qrd`@4Q4j*k3KwDKzj{90dhUMF>`2X|^~piQ0<O&rK2;N^BW>lu%VSwf z(8!|G#15bL26*>hQMVZB#;#NvLiAi@Th87$f4DuQk;IUy{Ol6F5HX_he(|%8vkLW@ zqrjDezb7pwmRJNx=>U)f2;uq=*(W3u^rv`|hL6SK!YQ}*Y)VCdZAJib{hfhtuTTzB z_k*Uw%QEb1;lFf8g2x}<2Cof;i@H-tcV~U2#n@~*fs}+Ol3ng%nkZP71z0O0A7G_& zn8gsM^=$FCk_9UKi_-lch5l>bV*9Q$V{>()`e);vc#C_{8^0S<!jNtpBJoRFDg1mk z#^}FzfkM=T$yE{s4KG=JX$Z^b?CCgrx_+Ih!`yM62;Y}Ms(aWw{4A%uL=<CRms|66 z&w6=D95TD$BALoEmJ1T$Y7Z4-*}gUXQGO4yd2eLz*v8LHBX1AwMA~-lQgML|xU<3T z-6`yYhpkN9TPRb~n1HXIkXOs7Wz}0T=)1(Ns>lPFV@=_5_Me4IM}Bbg<J%JC5@K8h zZFPRc-|?n*Z@UP_(@V8K3k|jl8MeZe+Su6rYZ@}Hyd(c`w%2YWtnC@9dlrmyT#2;8 zU9bRg7jLnS6C(U+8?Ad!N#+%`g$xxuBM@#a-EJ%9hI<7G1VpK6QLb1M5vZ#QxH0!= z?Bj-0zb^qANW&0*-7|j{Vi%K-17G@_yUhqtuTJqJ9fz-(%%Af7sTW<~UyTN65IZ;= zj0gP%6jlmb;Izo)a_mQh0_$zRw6xEy7zcXhbPb*M;DWZI!oJK}hEw?A{N#3@-)K6Z zjT8D=M31gGxt{(fA%Wxr6<3k3t}e*`emgl}zk%L)@U2E5cg8@Il2~|f2(nApI$^rr ze1B2;CK=bE;qO~c946B0yT3^Ts_ZS`zohjrKZF$m6&C!-|DMLLeDss=bV|WA;v~nW zibDy5;wI3wb(3vyP;;0IuS7P5H~jZZ=f8$s|M&%<HOd9mvD`!*<%t$y9DTGoZq*%Z zKsVl>^i2&9@g4x6w12ks^&huk9k$=?`J6sKeFDqA<~}@V#`z5KIzi4~;b?30K+b9Q zw}9u6`osByu&@e~nCMRll`@hxfot>Ug~ny|M7Z#-?}Q<LBE?Bx@p?Z!0ypXGdgY}L z(xv-2AZ}TT0Q`m$2J`O{AKJ;P*7!SVai)Gk&4`&|bp9Eo+o3(+4(3EQ@MhFugHqkL zwP2K5heYiTM!`J(_~_1~64GxZ$w2<=+1SUa(ZHR<$g2143UdlBar02Z#vaF>NMEo| zKG<uY{ozLF)#_OAlvdy}ugR0bu--`I*vEcYX7fBuc6AJ=Q$K`Pt%Q6?m6yxihPBQR zlk%lgB&airQ?o=qP0MJDg7TW2kc5aMpvS^!x?CO~=JUH$=-tyDkj0oh7AiR5J(Pz3 zRSj<bu*C8A%u@6F;9LdKZjIN@(n~$X#ch8GF>?tc<4jhKoa){4%TXIztEsfwjkXz- zE&XIPh(HY0|04z*iil}AhR^yR;c^7M_Y!ZFRAFf#VK|dr_%{Iv>;gLRgc59iA1>RX zlUZG)#NPdm_JE!^$=}{SW|q_`w4HiP>`$j7{ytGlU#zo~Q}a6ZbZgGk^|E;!$mvRC zU<|@N4<<J{)<Pk67K@mx#cIbke?L)jVTt-q*^>8t2=aPCJq3tI+1C5WoEqB){M5s7 zF%}KPx-S@P^py6Smt7!~Lt1e4#EQbMiQe>4UqFL(=)(doVxqv-+oNl*7P;|uy5Kqw zA)%bO^l%X=3MzY=Fu=<iAe6eUKNypExIiv7&4`G|Ct$*@8a-ut4AmHs9iGttpMQ<U zUa&zl4f6MkfVCh@Axoc!*dr}eY6f;71Qs&V{s=zDXH7sR^Y6%7+hXzK>(@6%NeNi? zBr-C@W;T|j6Ia%tpPPj9w#YYp92)*oC$?LUuW)9OW)n`{`is@#{&$FiJiz51VdXv> zXN&tiLS0bpZ6Mb3aba_bk+btU*fu|^BkR47F8+5f9IXt(PB-)w`eF`P>yH};{s<|^ z)x7d2eFgz@ld&T3WI|~Nvfgx``rDjC>NAO1gzK+ctaZ0*ylPl06o$F3;+ZhibXfLI zgWhe%MRh}(I&=H?@;}qa-&kcT!pvt~ny5sbZI~myM(y(AKRP}|p3QcdyO{tK2Hp>Z zyT}DkO|uTDhDhQeZ(V$|PvD_M=eUo4+6<a=x&3f*$JiT9XfW5?N=vNoZlw#EEPOvv z%v-C7#b;mOy;V@`IPRhK%}T~gsqn3Iaa2My3$`lP`WB$ftEUS?VE3&UHdR&JW*jxI zfY2e0D;uS76%MW3xLG-uulwe1Y^>avMo`V0Z#6}Gdwaw3J3nt2KDBSa+aLDJ_}xr9 zjyLIFC1+mtEuIv9ADkZl-=Q1)pJOM8&_DgYU47f8ypw}B24MD`R@FX+7RqN*%o^LN zzkZBMYXc$dlzA^ucoDr}5M`Zg$T0-*LvC?o%RMKy%8Oa9Z}U+xm{ScC0~s#!Z{+Uh z@S`E6aDwgmoO3s;8bZkU8lc*WCImrbyrk{O6k4_5Tn_capIq&6(J1YE>Vli03LBlz zL8+o<=U$3LXN2p7X9SSO3cxsWVINN;qc*_QJa7gw7Cgu4qY78F^5zR-s9pu$+Z4~D z1EIM@$7MKzp?#%W<vriHhNnHQo&AbOF}~w4jYOB<hYvrxp$9HAbTc`ZO+9h8%=}?h zQ$b<EnbaZVE~Cb+Eyj~vnPunj6(J5I&Gup}c$8XfN{dBjZAL_K^$g#m^iC1tlTx2# zuyr-e)mYm510(xFl>t-GWGQB8y`-~RcdW%c>m-4~5zW07oqCIhM}BZnrHxpm7jXKU z)`#`udGgDvJ1!du^=Z+bCahaNw)Jd4)C_@x_~ju5=)196mq2d55g_?zY2_B7eX<CE z{)@^}N_F7;XF&B+j2PM`9k~yInJ<%BnuF;bxdJTPu_uBjZiIQh{+97yDfq8A{v&y# zu?JC)IIvltDc3{NhpmTm{eE<s?Xd$m==h+yDqV#8h$4aIouAGU{|0wJ)OGIw-%8}I zT9(=TvZx0v!%coxWfyRW-KMi?hdD#&FfQ$wH=PsC2s_3ERc-9Z5u_cWC%y-oZ=tZt z&5QRpT2j(&3_SJc`72!C9lkZ-gy{}4N)O1&>DThaPYu61VNHsom+`}c8bFB=!@DYh zBUe8#doIh(j1R;S*eh_7tU<7I0y$q&{;7N}gR(h_S}j*`@*>aZgP23vrYKhd@>)^z zOaFV34KSH5bGu`S;Pv}cX5Xi0^bxLZ(s}YM4`@)h(7VQ+Hxz4bMXa@A4Jdt~+s0t# z)oPQYk7cFeb~s^dizeXffL%Z2EZ3=_&Kez*hAU#x(nBFe2zK){AzrzAy`)m4W}c2Q zy#kXtaDgJ3JtWg>Xxwq1OH1S+cJIf#t$qn8kn(-R;@c8Yik3*=3jVFYO68uEbP0y7 z-=hP4#D>Ouv<tX+kCnjmiMl?r%48rGf5H7VVP1cNST27>{FsV}pQUZ%gHh9g_8NVn zo{y%-`VdWGth``Vn!|4LgAu_+8pr=rQ2$pnD<`A?m4uIhswCU?SZVp$AK@JrQ#ath z-H-VJre9ZdQ?Jwa>(}}N(}wAULX%*Fw9r$fNkk$EqqUn!K7w7Iej{8<7Bl2YH{x{D zFY|Th7M-U>8x@&CdyBUYfwmJ-K4%}v`ce6*cR(Qp9P4gZeWzgF@CY*>x9Y%hcj%;9 z4swBH;31Op9Kz%r(rvEnT4#+`WoHp!+z(>?jaw0ui44FY!qMpr?L_G0{=DLhVGtH_ zg6uzog6g;W=LWTI0L{03uiw-@3MGzII!#&cI!d3x7q&P(;(@PgbfiQ#_~X<=2D@OX z0};?P9D|!sRV|A`z|5t0)yJhHp@M%Ws#z|7np-%T%K0A8TpxPF$U^OI7<ne37mibJ zJE<XQs%`F~Lp&D1xz3n=)<sco#eaC^ycrr{H7uzi7tf-fCt0J%6PtjdWqO^*TcsZ2 zQF2;UHZ$IK7s*>hY<j(IAYoGtoqNy#->XkZi?9thJ5-l8t*$S8(sjb@!?cU=fm>#+ z`fgT}Ip{&)o{~)+c%tP)IQ27%NY<o-L7(@j*0HlcVyF4Af+d99)&1_uOqiqBssmjr z!~VZh@qfLQ{|N0(6{?@_*FfA7Ki?zA3^NzR6!%L#FREp`n84>^5d>ucaPiS0@y`3q zjU_D@;?l**esG6GiHg8NtT;fbEPiPPZ_AR_b(oaTQdktACxO)ShQul$<tfPaH150y z1lww@M8Lq}UrgdL>P9F;{|ieSP1N&yHB@e1=mBQ&Id{Uvk9N9Kh&VzKD^Ri@YKa(e z5FqdYa0v+Zb7X3_f6qx;vf;{%ZaKKGFjaZ9UBzR;fh&+yH6Xmz)oV}dIH;998M2xi z7fYrIayWUvqsek7;;~0l&e&j1!Yx~q?7V4fE)T0`^x9N#n!4(LgJlR8^^@8~n#5p9 zj)K{FB6Zs+Eo7oAKGc3FApG3WVG$1rjetcqul!YI2ga|v(iEAqa}C`O8AVqRWHH_k zXEZ+|W_j!l*xv8YPAwefxt1K}Xs~2yCHbH&5h)bb_qK+W-YVv84|QPHI6Ad=Vs!Cr z+X#r!>Wyt<u}t!t=&w;Ume*?7h=Tq`Zk$n{Up>}mnU2zKV|g7Vas^8DQL1_}(x(Q& zR5p=tr3iU9tv9g<FFmmBLXcW{$42nQ>TO3w8hHFK=(21tvmsN0LV@F-754uVR(ALY zSHw=?90Fl%RLpS%tN_Hy<Z6S_zC07;@-F=pGVoCujrbAFoRSxP0p0y;t8P25;Wf`W zDz*52oKZ<-z{>QTT}W4}#u2V{VGkq)iYw9WXu;l3L!^`&B@f}!s%M{@x!pJ+NmD0n znWJ2Q{nX+r!4S?y59SKkkfAQJjRxL~C7ugU+U83iViq~RIVPQ`bu`rSZqOB;awMpf zVm@1FMP?>WN_h4hY9-bZ;V`&Dg@p^xejdUWD4cIdhX5wGgF*7ic#(@)Xk{vUt5LN0 z6~2mhf%BPqdN&RFj2b#%BR;=4l2@a#hT7gA`t+~M(`>yh3$WV7*s>|ow>#CVW3Bnl zPhdLcPbbuPfxRPx)I^=uP7!p6TAp2-{g-hDTBMt+4?v-+!%dqqe``7pg*TY!SlTRt zb+C7}j8fOfeIsJnIO$By3nrHJX<i%kj>luEwbTW1_{|{EE{sCB=!WvYB!Z{?7^D;V zVPT`CdMa2#qup>kJm#mSH-6VT);ap`6vRJ=pQcUxR-pU5ERz0tO&|~H+hxkoBlBsR zx)yj1*UV%@?l<rqKQGbm)a_?vF@5LrzGlrobR93PFPd}Zvr&3GPvnmVlr&duQ5}g7 z9{;Nv|Kn}_SLD~nN#VB0k8uIN{vru|3c?mi2BISm9;HuUI!AKcP>Z;9>eE8~G8GZN zbdmk(Cy3m}wI}~|7q4?ifLz8UKhsIIC1Nz!wg%^9SwHgKbxikqhM%gHTgqum@1>8` z$kD!~E26Fr^expUH85#_x8l?*x(eZ<2>Hxf@mv6rOuo!WLOR}q7c0ATh+>Ln6+;im z=QJDT(UtlRFEqUrqZ6^vc?umW11jU6cOPv1PDZ>xTDNY1?yG0hr5<rEb=QeZ&OW(V z-1vdwHpbBU?bfC?cR~}D!i@TUOM=_Wy!7zgWrt42b)3rZZKk)qCQG<u3-^HIIEd%5 zyqfj>xUU-0&igk$ij%c8iINYtp9jkYZ23aF-3`L6=AQEatl8g{xH*=8jPw&FH=5|U zN8p17u6qU`zW_;OSF<6e-dfWKSDg4uVL#Pp6;$&kVu2Zvl^@p2=Idb*#04Ys%$f9i zzA9m2Xgzff-(*YT@De|5SZrxYij7zZNXDjT#Gfr`xHJ{t_0t+1$z*;P_8WOr3Lz%5 z;9lMfne5!rwBCs(rt`7H1~3WxO~h&b9w{P#a@YBij`KhKaolWEAm}t3f8Ksr>+s%Z z&}VjX^1E~p{RrKEV)*J&|L<^Bqlz@(G0=Cz3%|xbCOP4EVC;uPr#^ixOU&;~{<$*| z{_Jmo(S*9@Z}`{Q=H8nckRv=B#>WG{n&-cBtcwo*lrTx2SW!gmb7--UdrX)+D=D@| zr>Dx0OC@>W$Nduv!0QgZ;XfJh_g591$kNVa24Ps2<_GG*LLz@<>=z)En{{gN>->V| zBFv!xAEV~f2-Zb-$ONK{G@OopyJncVzTO9B{wi@#rk3nkX%<&$@vSgj$oDAg+#BKF z30sPP&-}Y_fJyWr71P_?HuO8~Q7mS<Zc!Jb8ouqVPfz%XqyoFYs{8Lr>K<_s;j5dg zQA$c3LpzGC%B@O$mnEk7vu5$~Cv6<Zv!CCU{<85dx`_y1TUe)&$}fxFrKo0p>{8Ex z-nxd5Edgn#M3yoQ?ZDThMs-euithvCMiDbhFx%nP)VR<xK#diyD4b<}MzAG|9}H7# zb5Opzt34B-ot^?-z0BS&X}<S$jxzJh+}O^Ja6{GOrqP$CqtupRBBnRO-zNn*`&<o_ zomEFwiNPE#2#!N<FA<6)groyc)9HEG+w)}0DQUXqhaAPXkiV7M`e41YO;Mo@_^@}0 z&QFQtTnOJkud~6n{kppX<Lku4F{|I}mI-~9DB&Hrf|iZg(SN3Q>95W%6dS#GJ$jS> zyVL!j+&`5-T+P2ql_mxA*j=Prq@K4vXz~tm4tf1ZkN}x&F>j6ruo5*YNiU$^9|dzC zA;|T;ODou5^{yy|pIRuAr|l2y)t3_NGNePN4Sm;cX*W}-rcPk|7E{8#_!VMXaCMdi z@kYe$xYJ%YXU_xi_xx>z^#Yp>T7oj3_9;Ru`rF4)w3$WYvNo3RJx^vpH)k8!=;OR% zU$8RYWSDC;uSc$j7)1DsPod-@x}xj6`%B_|rJCJ?<+~ogWMSeIdk|5gfg0AjjTc^9 zQr=V>SK(XxcorDR)N$biq`w7Oifb;^*Nl!?)f9K0+DU)6Ijof${w4kp!j@A$PB4wt z-^QJaJzI{0FRU|Q$A15Xx-Q)J>bU-LY&xQ=eQTipy7K$z_vPKpLgMdYUv@SdgWDI~ zFD4)S2C&TgH|PesJYki(4|@~*cBx(anskVt!%M!n=~3qj(=wJ^JBIc774Ga@9?PvG z@VCqwyH9a&$i1#h5Ezl_z_PWh*>w25eDeX%ZyGtX>GQ&V!4T$qaNwdRBh|M>3U0?= znFng@QU5M`|B1blQ3)>1VbYzJ2FyNIIwJ2le}Ir!i5?M|*V)~F!C3}PVQN^vG1hSQ z&WmnXK%taXs?yF5>UggzB{^2HcBbFIK+g}Gp@x2Au3#8W75a<fY|30K+7p^SgjbKy z>fm!FWVX)+a_%jq5~8_RN}>YyujGrTxxs2l($yp2azf+?N{mJo!7!*}olznOw`hwE z*p<agy7s<y{B$(Z?7ZzzQ*ioB>ssD?$iis8)=j;%LoXhPYa4e0SMmzMl!UZevK1CN z%Nnk@s>CB9b5NRiV1|(PbA?8RI_UfbtkPaM;t9@rTNGt!uQ+C-e8!_rT`5)mP{c2) zCkY3L*i5f==3j~=f$0>{iaNnPyz{=yBM0LRe%`;=!#HLX7d|=%PP}iPCWf&^#s!+S zm<lk8^;`4rey72s;MDKSBP$YwOlwK*=?UsHcNF;i{7v)zi|lAFK4%8;-7mgryAKWT zF!$J!a@Vd3uD)!brRZO?LjS}s+WH8lQ>G&~PfJah(10_##|~WH`35Oo1-Obi)wmdX zUq2bk<EIl-H9wWo^pO1ipFI0-g6V%9D}fSOC$f0Yl!(~g5{jQ!ni!3dNstWkcZ18D z(&6H%Iymarc>z<kaO#1D7!=%{zlW>W=HMH%r;7R%D$Vy#Wh}~(alDng&5oJK#`NV0 zTz`jTN{+}Pb+~mA&e!P8ptY^~@R8MvlMrZwoplE+NVrL}4SNKQu&C-ca_bh5<_7Y~ z>_rJt$U+4>&2Buf0GzcYmHG|V35Dfq!pc?v5V5&bMJ}c)iopsDxw@}sfPeNHFv;|3 z0B;f{ti3_mmIR5vZR4#ASqTXQCBdxqCUEEabXlu>nHoIAXUE#L^auK=p~Bf`BC8`q z)jp{y)ljv?7dd$)QxYq$C@AmqJM@RqYpb>{;^257j#9AnZS(UCKj#c>R|P}O&>6!g z7Ujv>=E&7LTfNw-tk0+*MqcE4!)u(d%C|~GFxj2&siwns8ghvh-feNO2B@VvZZ*bP z(>7nVKL2X0L!@$_l%|9h$QsqdzLQt&nfCv3WH2V9Sgf_PzD5XacPKeUgaKxt8*#S? z<_othk(sMQY`zOZx?4G<lfyFbBI%$09X5VV%FcEII1yu!9S?uXyg7h296BW!xlzV% z;>a%p-u?G-XRWzCKKI3UgmsK(_^7zzetn`)qqC;Tk$wn3vBwwrZPA9<2$3A#LK<37 z=8z?o4v_pl<1w_+^-pb_@WL>&PL@e{g^EU~&b?x17%oY+Y*NIhdXL5~Ja{lJu}$@s zw)*Vby9axMUS#e5>SpA11iyk$X7YJBaO777>O*B=^0B$$?KBkady(xW)3%)0;4?`e zJw^-&O4PoU`$JC_^QyMp+&Sy-I+5UVQi5V?+6Xlp_weMLHfL<E0`1Ns(~isOik5uK zS@1=Ou#<JuEgOn}%UQsbt2v?1((r}219IddyHiY>!Axn13{M>;WKdPC&t@x`+_`p+ zOej1oXW|<o&o7H>Be-6j;I34|h3~&2SPHa+E7@ztG&uF+F+k0#_j=}Kz~|9vOy+M; zu_g6KabOyq1{AGFbMLVKqxi}%JflTJtF?<7<szXc`D`kt-x`UO74nBQJ%qY1_AW&V z(|{bA4kf!3LC&m+vFKC^f%Lm)da!NM^de?k79!UT<?2!R@6*zqT>+-1>zRq)|2NwG zFJkFm;MYJu3;>gk0{fNmJ_Q3P5XShwyYfn7H!HiM+2kRa>rIOs{;E-ZM2bf0SS3Jx z&LN@`?4BrDYWrc#FJO=kl@hRc6y<)Kt5tbC(tE+4dg#aejkJy>Fsh&AtVK`88QPS; zHnbtx<?Ec?b@O>Z6pcKaDs+^99JxTe;ygLb#iICNeZu)_<64b?QXo;LxQmDJ@7U4G zWCT9@X|%1NtCaL`<iaPpHGWGfNfd!>nGsRhNQ62<*O~+DoYPz&E?KR76CV~xijI#= z59Bhw^V-I~G+eAs_>?jlAZTH_gRt27=^LIz#mg0Od8v}xzmB3xF&s>xNA4c6C)GYf z!jplIXhHtRc!0p+seO;OA;&F`>^i<2@*WL}I`(g@Fq0G5Pf4ED>Lf$aDs&<~;^d*@ zvg>tjJfg5j$)IuS{0%@h=<<<tXED{RjUlCX1KNCLBe1s4G4U3G5eMZy+f<X5(-f+@ zml7gks{W3LefQvs&|R@(_025(G@ruZAhr-oiiRw$lefbpj~d)8>ltN}6Hf8rom>oY z%JP)MwbJN+jNV!(z%CF0Yrd8U-NbcF3t>RMVv-f#hz<fD_4;i?!vLI9XY68uuo3e` zAd5Y&b@)8Mo<UW`Po{+d*_=Or?)0xev5QtI)efTYLR760R!9{Q9Eh{{+n>O`E&ffa z5KN!`5LhRaR;U}X;*|I?-gcq~ncTpze`039E-lo;dA-i?E4mhffpo?}7aqbRm+s?w zX0<WNIrte`v=~Jl!a`zB*l5yix}l8}j-@~CX$vRynY=any}>f}6ZI_#n;}!xWz%2n zisPW*5OR^zPFAxzD$iVZ4YZ=xO4NAJ`Q%Q{7Z%2s%j?4U!t_^&TPp0R%IALB@3_Up zZYmf6W<b9*FKq0c9tK>!yN;~-tx?MMQP#m4Kfn4QoS%FvEc9~jE(&koNt7o2Yh$$+ z-4%F30z>OTvK-V-t7Fh#Xa{mG)e(8(xq?d)=bn;9S({75!hZw^$t~pdGU~Tjx9d3n zco(o%7gt)brZ!jBWu!r%vBFJ?1H+OUwStBeV{{|CEEyoHU=)tLg(J^O>cdr72rYL4 z?oXl}I4#}@mZqk=$&J7%>;sDTc9A4XVeheRBahKY13OdaGr)yVXvWQ73gCZ2Iw#xM zfQN-oqsBhA8k#k(V`oy0-{5oWW>r7AN{R=@0NCf{{MK2!^@G|%tw@k{f>p_^&uTz` z-+sidN=7XjNQ$8!5~F8p_`JZVi7l5XyW8gpgfl*_ue}GifnPegkqbY9eN}YSW#?ve z#MZAg_jO}PBPK~S1st9VynBX{e&P%_l&gy1{b5*JV*kRXw>^bqrN~t>N@6UQ=T*dh zm$Gk3I-+3I4-(K#NiSR%t{Bq~3;#im5`m!A?!X8yJ6lPGd*rIVp4)Ku!D8z)Bp+jt zfj7SO(l=M1d2p@V{n<sqZKhVcYghITq43Mu#mayUy+Fe;qrh$*h%L{aebl6talp<q zG?8J$ldnm^lrKB*Bc;;;X~e`Njvt>AMLnzy9KIJev*b*3fIfdDh9u1FhzELzl^*4- zg%vce9aU}=lKI@v)hnAS5gG^EJ^}I_b{%FfX8a!@lqll~=oOjt`pt?m-F26`ZUm%w z=vFMe;iCC4&<p|Ral5f5NhSJ||J&*N-+T%&K9us=*~El?oUykd2wX~6tzMerGQjS! zNaF8E#fP-7yc)n0_F*6f9J-+)KJ$Bx)=gyo+YZ~me@np(@P6I>HbMTXS(<)P!x+T( zt$p#es4f~#2K2Q6iB&?T*N{r~uMVR4BKpRl@_}q!x?)h4yc9MJ%_aR@loBr^2HA09 z2QogsNv!26aUp?1x0qN(Cg6hKv_gL3k@fkwn6LQbW5D`vBn-kx>G(DUEfB~_+~p#H zg}a^g6~6;<u!?!2k$|j(DR``!O#5DUXB4v*Tr<^((Aa_=a)uzh`p*ZL$~I@`T`q$& z-C;8%A36N`$w2(_uZ0+EQW`a?HM5$N1d+K(lbp8o6lcWOZbjMWIbNT((B~l4Gn!p@ z&I*T#;=xav-_i&rT_w&RLy-e<q_)?xA-|(@Yd9Roh|U!!YykBWCy~&Q9W1o(2mehu zNs0}W@^s(5S_HjOU?H0zpD$c;TatmyXEawW|Fln>A$X60+K=POyeG=ve1Ga9&tK9F z;_s=PU5ILy?iLmsRDnH>AA6}7LBo77D~g}Gp_3f`O#Dk6axNCEKXL|F7T*&wr2t9F z!)?@LK1##awDWE~>6#XlTCaPn;rc}zoaiRu^$KQV#P%;l#l0tqLdi@MB>o)_{ErbT zm<GQ8Ymk5MiSem5p1ENqVXypW4C0&c4nIWhG$bMA<SG7ii!Fh*nojDgF4a!w=(U8@ zhqJ%)ZS6#G>|7|Y@ORINS6=yV>+${!;Sg_0<C8GUt_KJKlfj&y5C$$RbQA=gW2S@C zLuTN7W+-`~rEeNss_Y2pA?sdB-8_tkb#Q>(V-0VFsRNW?s9kTd-Q!!IT$E@cJ%mWO zY~8vbbGX=I<W%huDUFNI(#+-w#DdOQx|25ievs`Ss~^$>CCMAI<8rxWzpo@H%e#kS zV6jYi^t{SE);#o@9GA+g9ddVbFU=>^HfLz+d!`gcnpx#$eiUz5W!26lvLwvXa5EI2 z*Jv{u^-RaJ;hXeIZ$+`=w_T~8I`pE*ZWMCZLuSmvJVV=P7X@3<wQ8^P){%m2A@2wv zuj!b+B@+T?wvV`WrvcqknUA$OLvcK>-E4QCjC8!?YF_uuv9AGr9n7KF9Su9kd9Fsv zFR<gn+U#?=6f7NnD_c&$!}^uMeVJYO5Yd!N^aALxb%}=l^(IQYBOrZspV3~kBOEDk zOl2-USi~jcj13!Z?$PmNdxxsf$DKED0Ca+ekp7=S3ulkxC=ggiAe^0@Vpd-Dev761 z3kJPL{oPRjcO&E3V6oycipJtw+EHY86mJuftDYa{<X5+~wdW``Z7#TblO!Acmv3Hh z9)rCV38&HcnB{nyEY8C@i^Vem6v6XGks_LLoxNXqGI%_Hk#Xm93q58T9+lpaK87m1 z!E&Y*;4*;WwVLS<p2-bkWw8VI0?q57PMDLq6KUC1z$}s@ERatpy-=|E)%h!PP$(<h zPPsRBHB}Z{!M@E4@0O;K|K%4JY(c?_43f74=rQ&#+*ag|a>?Pb%qm+lah^Fpux7S% zKh+r7$Jf!<gT)z*R7sQT)YGxlQivO+PA%GO2)b!_>jtA%WR=~?U?!$(2Ox&@d`s>m znl@kA9q%HZM(xl^o5kyQ@w1rik{<2rIwhsF;))Zafh}M;Pb1lL-z?r!-hQwY6kd7T zmO+E**=)ZNKfPm>Xo>z9oUSF|O;C9s;qYMLf_?J$%YLZt=QBdiGUSaE2bGTv9N^cu zN3fL4)@{0-Snl)GI=0nlHs>uBDcoF9K`^JuNw(*+MO}x<xf5=!a>#}E|Nr{T|6zLF zHc@As30vh>mCfy$yT2X;w|g2QNB_wFipC1hlI@pU=?{F&H>Bw<f=1;DBay?mz|H(2 zMxAxh<l<JH)euBh=Ugo}=M**fBJBnuUO_UAIYfD*SQMrH#|yv^hqR7V6U<F!8_^VT zN288i@zx&!IfFp(ur6}I+y|xk^h;D#H;>H~<+3!n&tVv@Q5A4)ffC+X6@kY1mc#MX zz90fr2C;<2{5JYLnJxF{$XmT2Jce{~6^#j0<|Z}5t?Vq3xiWbagq*pYm;R4I4nFud z_aIrVdT*EXKEe+mOD5m##l@eOz1*E1GaVIII<*1hA<UvRDfAe3jI(S6DM)`9qDw1V z#9SHeO=HacVCuNYX3=@&dVu8qpuydTX+mQJC45yoJF0C}UEDWg?tj*QXz{x0qdZF1 z=^YN_{6gyOMr+HC_rG53gjTLRL&i9E4tWwCZ#+ETQ6u}fybxwM_mU);1xXit*^SV4 zj%gBUh@7Yrm~;mRl8*SyisNjV)>A-ucLmB~H+IdwYIX$Em3h9~Lg3`!l^LcRO(OnS z5yzSaXF0Nn>E<9cHzEEXD=sCx-^hFEV!)_;2VHqBu{Cx+s_HokBJsLT7c}K{2!_NE zIP1qkZ@^}aYh37@$7KT<2f!APThyys>iS?YB%3vXQMP4EKX1ZCe>xZ*4U-D>^EG4k z=t;JAR$(xf0=3kzOH0gO+T?P*+RircynqWw7J1gf;f3YVY*B2`1`wzxaj=Au+8e`v z<WDYwXFv9alEbn&!jxz!DZl~~gBEka8sLdx!2Oo#?cZXaJcM;?t+KAY0`e?Q&|E{a zyz4401E~mfEB^PE?V-bmF0?2{?S_@o$9}7J#pexi{P^Q;z&u@P;QGifeMg^$92mM& zns7(pHv+0>gPe8tsbWTA4P_Owzwh*gu=>+8OFB}hXcj#xWv&QWcC9n8j&F6YKa!X( z54C2UF?@$*MIaeBUu(WaFKP3J;AAo#p}+GK{du#gtUq5pdI(?BiM5&+S)H6&EC`uj zYgL+8L)#<NzR%E4&1+r>I(*#pW)xq=KcXE2jze<U^^r62?ME5Nu1z&oIAnx1W7BjX zz3x(k5H~uWD|uIuL*NBJpNJ*6>OF<FzHJ1Y>po~?TCi3+V7yWD{}LSiFFxp>Y6mK8 zzzgdQrJxC();ClNb|mv)AS(Q41ducv2;upao0#@i8_zF*0(wnzGu?y{9tY)1awWkM zH&kd_M=tx|Fk~Px3(mJKdhrf7{FaD7d|tfaF7(A_1`JLaTu?N&E-T|>FP}tj*9o#N zoj}Ie_k|xMk|Aw(L;*{<)^pbRo1~*qnCEAdI){`YxO^poR5qar<cb)>z@4tv><~7; z#ooOpWRnDknVcRGSk5MTCKf;jOM)4d$CVj~)=6-U)@;}+Z@pCfo>Oz$lQq)0DB#lw z(Op))FjMbCj`mf2w-LGGuv%hVV#ikQPU&9ew~TuZAmeTGNHe?Jr960E9w;XW$G04& zEVm>hUpp^B>#|v<qItbw-4^QEZn1yMP?6|XekNCJRO_ccXWykY4~OO1+9$VHuV>EI zZO77}XB3oX(0Kumy#Xqt_iniQlvUmGw|-E&FL)TAY0IJ?&NGKKe*jazy*4haT+#FW z^`4~^#u8tU113S})V*^trIZBWerXRpmI?#G3bmP2`o{`?_o|Xp^5Ux|v^Oa?hH05g z8(-?eaFmiK#~gm?PUci`7%(N<#uUKS;qL~CSuwZ?R@Hnb`;Re3z+NwNsKjp1mZZl7 zkw6<p>O@&OO+}1dMTn#EjxqiCZ=-RL+w0!HS|A8WgcT1Xi*$BGXMaH(9Z15!z=q&1 zW{oYRitpu-TXB{54`69@?Jeg-KGd8viWVA^gH%nWv9$bKBDSIdWlE6jEF3O(HRY<7 ztOr<k*c}QPDp0tq&_r-s)tn3YcbQ5yuLGXP%_koyiYaP60k6?fK*0pF`R$Ikj4YPB zXTb(1vE{t1+vkbwXAFV7+3L%`<R9}Q=t0C8#d+Jj->zF!Pg@*H{-|kV3022=30Jl5 zISCBc=sQXAJ*AC|G-KW;q`7{zN<MXEeG^^?G<{PanE>zzNrn8D)^LJ1ZqQX7qa zah)YZi7E<dwu!JG!^=1=R6&aA8FNsqwh)+epxRd>s0A}s^)jFD2d;sM`SrYsIPoyc z(!=(C<bwp6FO*Qq>G1V<)Y_f1nX4U(&&+%F$`&>!K5dfNz+xf%SE-Em&f+VeO$t+Q zlX(AKBs?eaEvX?)EI$vTIGrEF^gL4YyGb+-N8UHlWLc}YPZyzA=Q!NUK{fv(i2h%E z(Lat0i67R}#*PeZlh6bbhxRbuVnQ*5-*Ddh&91Y=a4fFPz{?=ES-{XQipH^-K*Wf- z1SuAzPQ+)^6sbeJiUg-J40}CA5U{Vp<JYO#G?X<XM_7WKVkIMNk{dk2uMbZ1G^X#| zl%Iut&|oMh;D>B*7!r%~<4sz)cI8HVA&2F9z+%H?(X8L<B1|lBX}bym-9I=(5m&T2 z&FG6c0qK}hrASuBnq6+qm~g#=>A~V6?1J~m8G!|B?(!p)LVG_Fjwy2#Ai;lI$`iZ$ z#pChszwhKQxFzWOUP})z2|JqnE%2~YmBli-F(Hi7S#oW@&P(JwaF+U_J)JwcYoW@$ zc!=4(pEWtwyG>D~?(p4{e5;nle4rP|1vrrBl;|?DU}wt|9SB&g0me|F2i?g4fZ7d^ zvT6}$@SzxXgz~~P7CLImxf)QYGEUp|NSP>-)I{%DleH%>FchUd08eHE#dwZD_)4(c zx!YMH;=TV@9DB7yVv=EW*@muPKhwvc4mey%%L4K2?R>uj0uM#_v26c*JoS@)&iM~o zvRB1QJ}TlFh8}#@=+gQ$MF_kJ27AqAat567cM&l}ggEZ!4}`^h(MII0o%&D>i9Wxv zDTta#KX2rZPQjU_>Ry8M34_@tmw=V%?`CzT7`-#{jy!X@hD#CE!DP%$Z)Ui|O%|?P zx4^8ufDAUjlk4M(Eo@6>p2|e<<Ur;7Ghu3MkdfeGC0gdBMzG!z;yQ+J7GW6uX!LNq z(*1Zf1yQF5VmO|<;P%gi42yllsAWixyv2ElE+j%vnjsxw+boQGgpBf@0PKB6hB8RF zR1)=Y;&|;3q+{{CB;2`vIh%EymTQQM$RkvzH2K_X$n`~8d@xJ%XdF-%@9e$7|0Dit zz+@Dzl~XI-w8JCWLY@)oBF;Ps$0|v-M*v>37)2%E&*;!%_JMJgjmJf=e`6da_0_{2 zl#rGj@X$J=O2&^^l#|WxrsvzsA>B!xFQ5JKI;gar-`sf9i&o3sjO?|;avv6CO^f<5 ziXrmZa8gc*VcLS5lW!*Jqd@AR3ZJq??=-)%)fs9aU#zQ9$<bR88v{b|bNs=VBRFmS zrW~^ZE{|Ov_VVrj{752T8*GubB*8^^<dR?*_Yb1^WwjT6`t#$e@W`9H0KWVK*}c5x ztHApqMj&O(Ux1i`RD{c}LI6w;2t%j%f?%`^eE!g~MNs_n*#>?hh$E`3r_5o|d-AKJ zQ5BX$KL%eU8(kdp7g)RvBM>DUg*#ZLgUa(`+HXSE1U;w$aS~Cgq|iq}=ZB$5jr4vz zN`6*a(OYoUWR1MlT>?o{P8o6mYPMyTcG-ZD;qNZ#@JQ{y-DLghYtMB9s(B`tA0Xs+ z8KjQZCSN1XGg*8#EEpU39X2LcRl{<x;dwi%Y`{&=%me7zpg*n0;)MwnzFSilRxh{W z!%rvm*`o|BSFIOf4<6x1t{O?V2k10x<}Aux&JbjePy9?AP$$DUb1S=Zg2yBhFrGAS ztgbN3mN=7o7sm$r!$L>!F{FLKwQ#Ir=us6RrR1l>Bz*KuB$PUE&R1>j3bIyoe3Z&F zo=~PCpID)*H5`n&>~|2JBpsJ^zVV@7gr%A&zksk(q$k0(%WLzH{)0aDr;J+BhXPuV z!Uk;1nS`G&V~~lKM`@dDaW+7j+<=H2T|TQK_0Mx>SSqzo%`zL6{m`d1+P$>PK7rkB zNA-V4`ZXd*0oDoL5*{In3<@N4fh7XlD9m!nZQ|7sQTX4yF82ZTa?&z2*_fC;N-|j} zO2?$1K_D6SGD~W}S>rCOFN@R%nx%z&$8BfW+)oQaLLh&={yU61m7|Foqxrib<n1ua zC8-dy=M4?#KaOo^bz74>Nny4ec}NerklxmA?khuUfX)Pm7TrQSofyyw7c<!0TIs8w zh0(8^2)+`oRocQBT{vAP>9Xv_YT^_SU*_Kx!O}U8Y?BdWQ_CaAdL8~F_sCk3E~-Q1 zVu3;QHl=Hd$&g|pc{)BU{R&YYy0RXbC<gL}i{=aT3cfb)o7#~$J@@8O)WewzeYHtd zt>TV+=&?iTJ_bJOmgE4APTg9hZy8SSNR>A>VNpB*2eWsNll1P!PxIFrTS;iKg)+<L zk%EmrVoloV5Yi{AKN}XJ&VJ992<ZW$^=ZC!d(~#^xT?^Zr56$>sVCS9H+S{^WvqAH z3NR0F|2FE7(+-s7IWqV76hy4Iyxll?*T4VM(my(OuvABwby5j~TDr0sEgCnI*@7oH z3a6SuD=_BP+?Qcq&r7#y?MZ>GxZ`R>VWpJSda1sw^?<8_@Y$?ZL*CWs>ZgKFPU{ot z=|Y71uYV^Bjm8c|^^5VVA~3+~vxVw<#%F+#?!qA=XZWYVcr0i5zHy4*zHSHg13CK| z<t|CV=m|oI{J6(Sn*_u!N&^x`!7Zo3ZBGshJyWT@X$el)MwFRBiCrjOxi|T@R?YhW zyK64imeu;b>w1Wipq>!~1GE%$E^3KM&whnT&4bc~?hD7?!&4NlqQ>+yn>?$g(f|Q+ zg$bJGPVq5_H2#Jvl8j68McIziBX3WH%p(V`djFQ3W|`66BkW*OcF17{8ExKfasZ87 ztA3@iT=2<-oX$?*dbnELX;nhc{D~yt)qHvUf>jH3s#*#$A?u3a!)W4GNUPmse)!)% zysmWwkwyi(49}~e(|tK*f<K24M&t`NFEY!o2L{3m4c)ExL|K=ev2eB1Hhx1nEZP98 z%Y{{D&l)m<xG#mn$$NGTJhn^FLaaPMm;P6TmQZxg$0Tyn!(>9SpEfi1q5=({!QK54 zRUoCUo`55*x#<RE+NCDyb-pFvFWxN3zL33%0FdElf!tmWbQ3*+KX4OG8~uJCZga&L zY0c7nQuK41xC(tnm>S|5TJM;4_&Uys8y4rwlBE|-U&SO3(unOB@fC4EFjRbJJ67Qa zjokaJYo`}SVFu;X6%R_hRYhBU>vfqO6HU7F?^7A8`En+jG<z|=%}^@Fy|bSR-Z@8* z`Id)(RVwnk!3-{lo!8RRW8#(m^Nv0<`4d!nWbJ8XExzM*zaaC1@zATBrTr4SaXkQi zxKQ}X;w2aMeB0rBmvMTRVK<T|FZ^`X{j@Rhd^B<6DR^R$c{ge{{OY7QatmI&jo*qA z_Bp$@>bSAm;qkrX0Sgl+$@~l682~>Ruxc)#WL@G?{2mU6@NY4~dvA&d)rh@7M19q@ z6)o~VruL;l04yq-TYaJM&H(;N&!833%IBN!Y&|msb2$3neYRArz!T~rtZw@0(2#-W zKLm-aHzqoff9BCVk~Vq<)mT$%ezxa-c?Y<nb69Qj?H(tv=C1qV612kXvsLytJCKC% z8ACCQEu4YBQrel$AP@>abAo6lA<fiMEfdSei?iSKbAUi_O2kdxQ>99{b`q9m>m@I_ z7>V0cw1L2fhI=Gl3;x{S8lz&i?NxRmZigG$c#Y?B;?u$IJ1e@=XD3{vb1{}XQsaA- zRP8bHIz1YjO0?S*EM|m<I1(ZKj{T;b@Sf4~h91i_G{qoitpErAy_%iZX<U!Ssjv=} z_-q%BKNH5KVt}IL$p?OC5=Ay_Y*jp@=TSTEg1#v3?H*<`>l9K!ZwAa?_^1k>+<$i> ztre9WPT!AiYcMA>;Onam3jtH<=U1{E>dICmx0LRARfD5IgD&ZeHq+#b>oPx^?$Odw z9ntP~_b!$6J{*5Dy>(iKxohp|j#mH8FZ2LRFuE>%wlhtX2Z(43|L}B5KNnUsbq?II zAb0UyMv`l!i7(S`NWgy{%1mGZ?|*qlS^lDbvFQlS4oPsDcvALwM$gb6f3=l!j53O1 zV(~l=d!6!weKu))hi%Co8V3?JS~qv<Th4=thbvz0D^g!Np6AKq2Oc|(hPTKb7A|^( zFLHNUIv!d^I-Zs~;(0pu?Jx=Ch{CLHe<!xrdY=WpXkqbfM?1betk_Md#wPyb%Y_hZ z*q-n6-o>r&%k9p$m5>F0hoMi2ae-L;MXl!%c8map<(}t*isup%AK1o@9|9I_qP~yE zhFruR=(cHRU%|JT>gJ*2<)QtQDhfWjjRb%x!g+K9c}WcJFds>Buxs8gxX|vn*506B zdgcArmk9j#gibx~AG%RSgiaiQFDvIcVa)Uj?%g=UU#@RM-C13{<n~HR%jq*8w`p#N zg?uN#{Tvw^D29R`b6*1RTRZ(OYcj4GA0AI%o=-303I$Cn9t)NJML~rEeC?3FAv<$N zeh3fpwW}Edk{C;6MX}*d=FPpXvI?H{i$7w2HuUQgk;_{$aO335fh(eeN%-!(qljj5 zejAFDPZfbZc{(d@r?9kYclo!*o`-$3(f-ex&WvUe$CUo&C}nALI0rkVll$33iRSc) zzr-+n>2Rv~DyxP~^bYPc;+^M71KWb}0ZvqVGt41Ie=pQlSM?m98pG<VGLw&ByLHne zpmEfnZG*#%zMc$7deoP@9x_9!C0mbXkPJsS?Zax`elGmU+Yu|l`^c}t@+(d<$+|e> z5<87LG(5?=GCgL~q~Q<4Jh_8{e_BXF!&B;onD5iY#i+jb=cbMev5A#D(id4!#EE;C z8I#Qgh?2U2N78kpfM+0G_kb0$sW~4|vZ6oJ_fw4!zf)35l=<BS7i(%pN~1y7J~(GJ zwXp($-@!jLaqpwgS<ZD|3_E^q;a}S*EFbUFPKRl#iD6wV9TnzA(~>l=?E3nOy}Afy zLug5D!4!Cagp_rEG@<fm42pEc$?Q&WC>jr^Z8UN|SA8a=_{W5fCG&@5Iv^*{yzcPr zSBv5s7uztLO_uv@{>_4>j)WIjl**SG^lKpZa7|t8os5E~;a#t<Z|m}9<JMJFHh#)W zv4U^O<I%+9*So7%y*Sx@Wk>=~>jul1??lVm&J9)Jv$V%qAepLd>v@4=4<=8_fd5LU zpKu&QMQb%lmhLa|r$OoACq#M{o;iWFJLY5K`>!4i-Y+}EtBRnPyNM;xe@%G(Pz5)! zqiA2R*NYw~$7^Un_}KxRXb|W|c{8~oiqD_<bYwQ7@HC?kKi~0uZDJeQQ8EK>-e<d8 zbn3k)AYN<eHB46+$J22))^oCl&eEy~+#T1Rr2g>_P0lfnf5%;F$GNzTE9GVC%UOu< z5f84s(DlrP!poIH!$ej?%>3&r+q!n)bH!uush9p;CkjY0<K=M=ANKl5QojwSZ1X=J znSW9@fU_@hO&bwz@ahN1t-%qfRD`Rni5M%La-AlfTIP2U3JMM;Fv2*dcjQ>$I)j(G zhzE6?<U)TpG_nDQ(QTqzMqeAh=L{%R%&L9RxEk8x@cq;rDH$9-lxw9)%yZVf%H)jV zf(bZ#m(JD}icpW>LrZ!#)QQ}M(BoFYGg^#2NKwZbj9HGi?{~TYKwk*QO4Wt)fQ!o3 zls%If=%QYrL<%v#&zq+ZLgCAvM@`K$#Gw=Tz{2T~Ma6_tb^}Sc_O!SL%m#LHszuH2 zF1FAzN%Pq|(b0g~y^pMjN2UkS!S^O6PyNO0r7Kgh3Dv>2KR9wFw7tGW{SJ{ubSR!0 zPJ{gn%G{}qVUe$#0t+8e@Bav&Q=sPWX{;PYsGrD{>t~-lspocw!gEXO>)vXjc1_ov zOGZ(2k>mM81A%GuJcngFH4|$}yH`a4Kc<WzFbwShi|z^>yjg{>+tWYzIDhw7gs@gp z14Ks2L9~rHBAWfk8I;aq0!xP<YqY?-PU5PN$8)ix>yWgm$6tW_z1LCXv5)D+Q`QRX z0sXG(<?$Pz8UX8hGmK?UzT2)*4}8tFQ)cJY;<rsa?E5_L%SWPccbCa>IA5m0yxWjC z0lsniq08r`;&Wr>TW|fhx=F`#-()26`i{lB{jnC1+d}4H%(t7=Vv%^Qa5Sc95&Mq{ zj)L7dqI<H5q9u5gqUv7uv;p*OBoFHAsg&^)0<uD-eXpcP5XfPj7ioKf0|IH{SO!ni z!cWsD&y(a&G1LC`!jJysFn`DAyS)&te`v8g8z|vhG0#go?n`$lfgXdbL>7$C>%iwM z9q{!mLev_Q?~8jU0-2(Z6mS}@DEABq)o43V+c}T&_4bG+%d2^SRgW;ESFM$}AE;zn zE|EV}ku%tNPNxn7pCCZYiwxK<Plu+DIPfC5C+cx9D$W-c;tTDgy6Siw>4-CXT?j4C zPZ>0NKBVANJ%C|C)-Aj*qi{iNe3aDwe1FKa3HN{addKL>`(;}=PCDthV|FJU+qP}n zwz*=fV_O~DwpVQ1w%$DZp1sF?&pr2kT3^=~Rlk4LteSHc&S7t*xk7X`oL8aaPh;%I zQr4rM55%v3=n?Jv+T^Rbahvs+Aj*9rzwg=g=s8C4c}>77C*W(XqNS5>>&2yFTg`o@ zkLW0M9rthg+=Ui02yWJV^7>N$&>#;;Vt8^1hFb(5-UbqeU`hlKW1Hs9x0`^pU!Wc# zfXDkVLIp00AYj4bu^oVL-nmqVaQ~faejTSmBwsqU^wNf;gvGgOIwomb>M_y=p&A+* zuZwg@&@5d}PLwPObVqL*0Y@X9%jjq)Cdt35WIE<q4RO85wnJtaq&5<Btkp%w+zX@y zben&ch0V6WmOwh1Cl(jrcq9l;ffFl2g1xn@$K<3mvI8D;1r~^)4L%<=1q}}`Q05CT zJ1=$CIckFi@R$VPRw(Kmd2*Mm+3lv?L@xR`4Z}&h3^isa%C!u8l~)@$35=n=v*4C5 z!SduSs^A<@Qn%~aw3<e;X{}uM9%ay4u6#==JEU~gGMfa&0R9-GWCt!-I-nzYdTq-e zw<(v8^z{Z66GZs2dw`lD?LoN9aJ1?Oo6EQVn(VZz)N<}yameW;aUXkVB_p=i_YsVv z9ewgT9y3Peqe3^DoGK5ys<%$2U}YRMO=bk#Mv|PT7r8NN7<2XP&LbJEDHRv;HdXgM zcvU0$cKZDtAgxk(bw-xS;9xi&XgNEb8@uy3q3W7Zp<(OtCl$qa$8d~hJG*k|4I^c9 zk^P)EeR6&n;yRd~Y<j7<AaKzqux|e=lbt~Btv;4dp4ft?!A223cvHr=Ca!V)`8_}0 z`m1}W-V_C>Zj9`H$8<PIHRX6b&HjAOj_HTQa}n`9x74Ks;pVLhF@we*9{O&fzsTUO znjd=+vbZJ7d0u}L@|D3di=bCvC4w^MAm*bJteaXOsbo_=4|VTJ(By0&`7t~%X1BNh z>`vA`kO|)*yM*!SqLOu=f^;#}OtZZk75CmotKPzWiwRzrhDL2aA8b8~nGjQ(U8^-; zglRqE6d!@mc0Ql4o0na>V0HwqYxX{4{s}y93r)6Fz9Cpp$UU3hK<=~ZzV8Z-m+sqe zx@Orio@=`v^9}=OstLB<r<z3F?qqKx*>B>pHZ9QftoXGZTadJ5zR$_N>OPl`K2wN; zOXS{<ZJQm{s2S{)PBb8}Ag39;>}8;hx*s>moLzUPI*%N-LQm_P@7mzk?Z#ko6BlO~ zT~7m@uC<)$j?m@*VK2I7!8}>pSEB@si|BtBx&5qYup&ak?@iy;6RA77WI)KD@P<bN zXQf{%KmXg!Iopf)T_K<cMwCAo@e>E%qe=oG2G0jeFbz-db=}=9^$TM?qRfak+5x3c zzk`)$)rrgP3H#Bo6X75RZnd72U#Wvam0m$l55+ENXz}NaDW<O#PgF7U3VpxKd`;vt z6Z=QpHmetQyiy1c(<x-y&a;X`Gs{*qee@v(&TGT2MW2aE*)g95{Hb7wH4tSRyt9mu zM2^IJXX2PGfxfSl^@?|MnN2$6<p=glKLi2Dl9hjv&3X|u?NFAMi<Z5Z`?cmIS+cf= z)N@02yXSJfxp&Kc(ch^(j5tOt_#jk`B04#(jNcSe1<T>(a0X!t#)QR@h-e?G^|k`6 znR(!TQ!dE8O&C#kTunAUyStuN$Iq?eF<T)BwVhxrufIz7B|z9haIp*>_~BKW_+-gf zth6_q?HjE+ymGDHMaU6(^^;MZr)p!eT1uyV``AOBdRz&pTBl=f8w@xxwHCH+TbHkQ z)q(K#E3dbZY+ppv!6+yGw$zqm`HU(trmDcJ{z(t0Z1yH|Zt7`iWMyTm!-GSJ&P7$x zGeX4uiy?f?;Q&}M!N~(!uWh*f-IZn0$Pv)@BG!%?F1fal54BGaj<>5m+?ubm;Otpv zW+qKHaiVJj<SZb;UoF_+&4A-1IqzGatOm;Z{@{*2I043M_bcy~Ht;RxTKDr_@CAA% zOwx;(=$}=EFA<1cudWYh&V|QfTiQkbb!~Eol&|^H-nu_va4+mY=U^R6!E3Q?WB&)9 zzTk%`fWSrK&o43u4nbcH0@ie;=s8Vn%|@%5DbKIZf4tJ4f3VG(4D!|l_2~MAOOrl? z3+*jmXzykA9B08v%cb|_X%p6#V0_xw+!_SvHJ5OyQVpJVGpgD-^Sssdwol7xJyn>j zqailkCrANHcu}VNZZZ4r_jbD%0iCnIiZz7m7&$cf$p#{Q;Q{+txsK){K7?Sq(YS?! zCqHb6$cLN$O@#vk!~&LpnOK+Skp*z1`%<WTb7A8W0<IS?hy#Lsl?v_Z)fNEOEc5a9 z1?$kztms((%`mhx4dnv>EkRO(mH^38Si1U$3~pgOOk`I}Y!R4ny%HviFmK4*)LMg2 z;V$yCCxjVdrR??kkzEmrW|=tH875WyW?Z04nACZ7Y9!Sv3KcNZdCxYb-#)-``dwt- zqM9x6R%6)tjml|Bn*M0jUg22yA4k6HUs#gycVN%!)5h3ynH*XgA?)np=pr>@;MsRW z6E=RZ?~edx>B-Z6@|^_yOe1vxK6Pi+;{ztGoP?qIk}szq)2I^}s(7fz`mem^iXj78 zWJ)`ES;%++Krci@_GXgKnx@Q9cdT;xvfrBSe})b;H7Gm@Xv5lpr-&4`A3)KuMcS^v zT(1~iRcnWpr=t_2bY<E7m>?5a!%L7Jsl7sPF>>TpIV{WApBY-#B&Sq;_rl5NS4?@w z6-SZ+x>O|L29%BF4A6}e-{^ZxsIp1%Xe4&~B1R1WBwK*#yX6}mklETEy1Td<^@rgv zO2pgO?HTx?$(xebYE-NNl@+cDSRSs#g}Y+;_Ygjg?Xd_AF9S$1uKdJS$7Gv7M-n4j zbpUZba~uDop`ma5sUgLl9OUZ~-b9&;;oq)$+OpL%8Or%s#@s&1&rq_JLI<)t4(9iL z%|qbYte&zb;j%u5qNiuGUL=Fo1)*`POS$+!?0@iF-4>AY)VwXld^Wr8XWT3)j`DtV zeX8MK4~r%e-CMkEi{j${ZLr30Z>f>{wRm^D67*Ce$~#DabTWkFoYe6JsP%j!LAGG3 zqDA#Z2|*M->FHeH!T97stlX5}+d5C%MrA+tWYdOZy2J|gML4zWdLZ|oc4IEpC0~eo z&;EfCn{hC>&U5nk$=V|YJGo!{K|D^Er}N+`?+eER(C;z4gn3h%NJn5s&}<Q)1a$lS zTn-<(GT7N5*>R2psY*-NQqL{fuPyvit&ynrJqOn)x1eX*le$Y+Ih3%6QX9`?Tp(~) z?yiR@hr=S^U&iv)QLn^YENEA*#$MNUm$V-{w4<w=A1*?ICx}nTo^Ut+p#eR?fFRvo z+Fo22?0`TJ2ayBnHd&y5C~U)g_}eT2zBq{!H|qP00K^R;4+PtzJ|w>2nU4xxPESv! zqq<uAOq+RRZTmcqD3<udb5$baNVW=L2j(Oq4*L0Sa8Lc=aYfQz%y)fQaQQ0vC!{=P zFb-5715i0hP+3M6n5tT@FkIUEZTQL>;Sfjk9<8ewSv7iAJ|oN{FtOFD7m>Msh@-Eg z4Zy89va%Ffjj<7)lwv<C$uch$mn@7<p{1_9t;ERO!TDRHfKGZT?-U>do|$}+F`1S5 zVJd39g<jDWcxb0mHqGloQh)^evHkv>W2Zu6=R@Sps4iC{*H&O#!ubs%S*O}n=jaZe z9JZH1&s4J&if!IC87iX;nLi7K_F0e)Z#nHB%&XYfU+HS?!`q;Z_d?Yvn5dqr(+JHk zI)r4Bei2w(b+rC&NBoZT>OY_W^0o|jh&%8m+7)$Et132Yo$^)IM*=Lmf96^kL{xWh z%>o+T3KZeh611|H_Q&CE!iniL_@H8$(aD*Cxl^btym70{`HKV%W$JHO$Ggz%ftr~R zhlaj0Vd)gRXSVw}0gVZclRTC?=JDWHoA*BnZg_8FP(D=(zBS+07r%#FFI1_jJXE&d z71B;y7SUqzjNVVWevF}b&hb7j4=k=9)3Ty}ZV_D)K5IM=$-nKwrvI-UsU8>D9;xx6 z&RHmKGB`*Lkv%g3oYCS=%V8Ghjsb2CHuB%y&!I@hy6k^G_?5^YPDOwEQr6pkI4~)K zWP|T<KP(x-nX|pz+*kQ_ti5hLK5S}&C>n|~a4c%OW_}_FT0~5wv%X&bDkvkYVhlpe zmZ3OO6tkZWXpMIQjRwsc*&Tl`qqPFjTeQ!Rq}2@5X>+OY+uolv{=I6C)wz^8vH4EI zU4pYX<?~-7sI?j*!lynxdNr5<JtnpYI+QQc2}s??c@%;JtnW~!g`30{ZNbnT&Ix=s z)bPggU5}1UI>X2m=I|V1pxGbssybFDRwF>8Cx_ILXLwsG>Eg(XegQk8qL~nZf!e*q zw?ph7J+pta?ZB5TsLBTbJcWlr?n{^jQ3$OHAnbxM*uMswd>eGMQ4ksx{DWiQnWzEu z2qxVRLfF|#eF4arI#tf4znE><zprIrEhR}cS7)w>;JNUzs^H0@u0eMFO*{sCGC^NW zgJjp}mbJ>HYtd$+z<Botj6xpz7IB?U@#y$mmd4O-`hErsf|wyXa^m48qIoreXyg|U z<cy7=KsOmW)SL>NQSV&uKo+ngNgXmB|F{z0&NIY8;{m;A7D9JuxGwOAL;@Y69bDry zaguMp*WNw$F#x32T<0>8wNfzduSp(^u~sVVTnI|GJOsa>jsBDZm-pUTfeUkK52TUE zvjnf!ir;g@-*aU_8Vyt~YM8>WX4ir4iEbDE;ehr$R({hT#h7)ntT3rovKPM5B4=B^ zX7?zHw9=!o4Lp>9Z?NBDf2w~oEToM;^K_S`Egq}P|4*`cogvbtcKxVpi^KC+69q{d z`6kUDvN$_}I#%}3F7mkr&Ff}2P${mH9Mc;>145}_|F7kN*IFbl@C#!@kFrbr{?P_4 z$gANZ`A0JC8YCwJnl^CxpH)PYCd8BH_T}5;B^xzFmmpxKrKRQO!nJF)W!0Tb*!?b_ zKzrjRsp*MTn&SJ+S*(9R0!o6S4Ew-ybc^p+$PZkQ)yI}8?>AQ*9yYN~R~OZ~S6AHe zMpV3N(<TOj8$%r~AyQigy_+xe+b)N*^3Qm7!LU60DJ+{Vo0W4|^!=Y%DR33lpwRKS zYpMo2+p9YE2T41!Kw3O&=XI2f=-tL+=b~?yPE^d?zeh}*A`oxX)Z4!;?}8aOfj0-= zx--dMI2*oPgSPx*An2l2>iJs2Q_1i`jJzBplE5Co@D*!_f$1Z^H+rMjX5t%Eb{hGU z6sNh`7;iGFn<ro=AA#G=t=j#>LqXPg0h106<Z5$!+cv~Ee|j+Pm=o-guzT2IB(Xly zUM)6L3R*F*G_S7^=`NY`8k^{;@r)+coQ~)gWTaOBHD(I-AfdC5nDzoo0bkqcYRQag z5cs?y8cROoq<mN50I@O;)q1zc7(YdCF${tuY4M@W^+5EP@b5~N`Jol7#B3k@`{7@j zl_~FC_Wh8HHho%9v&@7K9Dll*Spbo|BI{^#sE=;5TjM|rEGeHHIYb%l&pPqC+2i^C z6^mC=<fQ>G_rHD~KX~_Jk$n4>r2T?9v@l-`r2YaXufSswII{A(MMIcy&)j&7W>;$O zPl6mSf(qAO$)vY9Y=}@AZ|CK}v1G%ygnMWY*&G;7LRv67Not;Q`AABhs{d~7ic!lR zHq+lETe#I}@XL(+#MbsrK=N}M0gvMK`3VBQ>UtrU?S!|hD*Ezo62cY&4ruotDR=2X zl4;0}IBBNR#&xvolk>Bi<?cVDl*1_;G{6uouu=d(2FuZ|ArsYWc?>e*1^iwe8sqSO zoc&Sissh%3_j?fV)!=}ZW|t@lU3zZ5zWwaeVf}})yY&zO(iRAsIU+f3o7Btgx5){h z4}zAx6QA$1#qP$4eac1jF4^}2#%NE;dalgA#mPGefkVVc`wMisJ5b*GDY)=6lCb=^ zfUJ>>guY(-34U}y@EGGhZurKpNEw6IY^qg($N?Tbw6^RV8N&lF=i3!VpO2SZ;Y3rm zY~|N=CEjVO5PHQga&vU+GAyZc^Jm*@NQSiSzxMNX&`}_tykMUoAi*pED!Y(ZZtssz zy%x8v-*3Lw5+JerCv|OD5WzfZaIIDc;Mt(Qpx<`jo%w9|QqBEb-*Ul!%qACR=(J*U zaP9a$7B0d{mY<xt*memC26K1LziQ>J4u11F8qA0!2##g>A>`phDdhke7nN#wXoDF< zUsHHAv#1i;P2e0R3adTENXSUvo~lf3h#8B3V>E+maQF+NY7%sPFhEaj4BMJcZCw4@ z@8HPOhKe34Ua;G6IF$Rtpz`XeImbPcR&*Gog1l%x7-2JLHzP$b07H5f`cW%@Xi)Kx z;YNVKTYy~En(Fi8Gh3yovV*6Wq_9%z-~l%AV9yc;vyf6sVx8qsM()|3c{;4dOaHIn zDWcc)&M(3%10=-F#t`yfW@jY<?e`P2Oy+p?z+7uC4OOh!KiC1D;LbAfIa9*xG#)ac zpV4N*v!qoc2->OEe;sFLNp}B+v|roKgmlrqn2_soe<s~zkd7yOz9%%i{Ar>=!bo$( zqD&i<i=9Q}2A>ui_|AQ5_s8TEy%4P~Vtv#)$bNRWh>aA;ZetCV_M4PezMa89Prdz_ z9dzP`bqE@+p*N#AwDV?F+kT*M9~$4CU{i{FEA#9sPLY>u{HZ3U>=THM`L9iAlP3fM zkJ;@xj|jq5W*EpPBB<B)ZcrQL8*gw%DX7}H4DbFw^Gj<SP@jN;tQ_u_qx@t@@v4r8 z6=UC7E0d*8@3zg1(B<nkpXmr4BfiuoqGsAy-Yi!9CG!rgZK83j*rjUyJ_iaSuY<`x zhVJXtJSmRkj(fOnL=fqf*ne}j><%NlU+)g4kUfUk%RUzY?c+xQ{ve}zR0T|UF1)iC z3j*7phCmrtis~V@2sgB5bRMD=oVRjKzoYP5h?RikZs#1^v6&dZO?+u=oZ>J6L#fuo zb$U_5_4OB=Y1JXNUn)fYCxhkR-uS(xL|A`;Q;SVOerGruOdCc7usU7y7amoqT?p|) zY(@W=1kWtFGFZDBBF;%Aa><38`iP5=C0Ju{@^^vLWww*ic*NN-|E|Qe#ehjh&9$40 zmmP!ZAMz_e1Ocj5aOse`m&aD#GwOsj(AUSZ4f9q4vCLhX>Sg`t``e~a%aob}ETM@v zieUdZUAEx+@o^y3WCiJ<-^tZd5$<~UFe3MaBCHNl8qw`d(#<w51>)vW&Z%NgY54Q- z(QI!5Y8EWurf%L#?EGivM)eho%U#Q7P7FR%t0n?~Uc1w6TdU<IxZ#B_g3nSLvlBmz z;X2$M_~3ZWE+!ME4NU6OBfM*PA#}ePl$KxQ7DD4w*=)<aFM$8%9@hL*=9nZDoZI&{ zTU+4dy+Fp{&pD&%4cbIN5hDPWRmJLmV@3Yz)@@b==gFV?G)3`>9yU%#etHlEY!aIP za#2-zk*>>+Six{%jvqZto$@Mj{T=TQ9-DTlRIcQb4DPXp4t#5*ik~#LeFu*ueQIx- zmTdc%cEN5a6mT8Gf;MAb4VR{b`}WBQFxo=?_|W7(6!tQbc-dlRg!23=BYj+>nDSi> zR&88h!0QZLD%c;b(4XrbGXr+;>^=Gjl>aXR_?kI4YwiqGCDDR<)GYn%hL>=wE8#%R zMR*aB09G({Apa6_(1BMkL=DamI<)Qtm6m$UWD3Dk%`3ap>w+PZ2vCC|t4=la%?}l} ztwNYdbu;w`g_7wyC^&?s5yH~+Q8#;lWbXr%@|)qR6SXP^XPAX>v9noJ)GxSBGgu18 z8%FrIknh=l<s;)QZmMyKj#yajWEBE)x@<h8TO3};Z$Oyp4k1*OQ<TXB73X^Mu!(~f zlP7~wQ=8>H-sw4Lm@xi2G8ZWu(;0dIA$l-!>G4W{$WwmGl1TIgm%@eUX$E*tJw(+& zi)9ws>g9vUAPn+YmC9z!9Z(tDIn6Lj*2#n_Ef(EIouWmYm`!Dy_Mj?rN%q0P>O@Rd z^cbZREy5JT*$B2jpQ*J#7anl@*MmTR3KPtQV*A#g7B;QU623Z)&_*UhOe0s2LbqS0 z{8$4~ail&qj4PG@!IJ+~A!3m+BS6flecpzA*VuPKlVo|G_Z*h=L!!)$S^p#bb6ta( z%be=|MM%#4TXaAvFb+fn?rK}w-d9rcON5p1*H)n|^Vo7W8@Zj__NuHUuYps8g%SP^ zw4#)pjnCa6A<G{jGaQoIV!lSj^?Mm#{9w6<3y^_+`Mz%~<^E>9T3GN7Xx*uLN_*zv zEpQ|`CxVCvg>?sIaHlnXVPp?>FLA;#<W*?cN{$(bHqq=y%|HX7^;ingoRakpf40^s z*x@66`^D%+S#+&*95pOw5^I)5a3y|+lq&!|{==(w5s?q)3Hd7Z8hHDbR_SLyt%x#i zzT34}b<~p>8LK~LqP3fucPPiV@I!p0MkbzJ={Z!iiCoN<Ou;}Q>#iI3ckH%fo&t=j z1F)?wKZ{<1@wpk$0l|nk9eTuRN6*rDR61pw2`6Uv>YvfAFHlGT%DDb=)r_<zn~`03 zKQYuq!Gy8YelUgr$#rWl;N<q?ymzqdaJ|1e#(sE7g~%;0I~p8k{3B?@N!UhvEqVkg z(2L)5tHW@4#o3iH=kCgI?&Mlp64d@9x9E@wFO7}i&^0Lw)a<(X=byZQ^wYIBgs9&g zJ-K*$KmQZ3{|YW0iXW;B+t1s!7$IWLf42mt;UIkUPtn(ibU!xmF#;CYz7f{Tz~JY= z0ctm4^QsuONWcP4TpK8oP|Ou-t_k$HKy_BDe{!M4R*Io{G$4Ki_`cviHY#<M)m9cW zmNd>fe>vpn+Z{XRHmyD1?MlrYAJ!i^BU46z4(3v2ry)En;|81tW$AHYxM1buybV6Q z9MMY#Oi#qzvzL5lqx2zef~_~wOPuI${c>E}__5jyl~%YU1l4Ki!v@mMqEos6(s-6a z>vmM#rolBt5o?{%0J}*{Ed-vHo2i|9jfG0j$Hefc-)(toXiN3xJfn^eXcT7tv)(`R z#)8GoWLQ4{DzC?vty<EfgmtQN5J>cpb}4sei?y2-h3_}W@&u9hh~br?saruCeuw+S zM*Z?M4a%)y!{Eb^8_!4=B{k0hRQL|m)V}n|nnw%ptyaj^@j7;5-)%qNFT%rlvlm$J zvZ7TEVGMTZ!t=mqg531Jo{;-~>7@d4qN;l6%^1=Dq*V!tuQ=?Xs(HLN4wBKr?|@Kn zobo6!FQB**mC8&!UUh@%)SUW&+8hr|eSDU2$aP5j&*S`WDw8J!p&SEz_y;teUf0H7 zpNyQ@<a&%&3xdfkJThjn8r}fo*Es7f*1e<59ZgL(VA+kHctdxX46vcgEQ$n1W<F5Y z^UAWPw=<x|s*STEMbZ)J#GuM2(ipnRe*@WvS>!vT&2m}v*inEnd?Pr0QOh4xqYA3x zLCo<u6ik~g9Bdwr1gO%~V8{*3*;)xFVw?jSowJhY7_{1%t9@tx7?TjhRr6o<I&pN@ z`~j5|ZbWB|Mj_9h7)<^({<KR^InKe*=fPPD5(we@M<rm?8dac8Op%Pg-{RTK!JSg! zO&hbE)WktkVR`dj3PK>e)Y9AnG5jv?dwT_)cb|z1Fsb<?;c!^EZLgM}VLGnxB2pF_ zrIUm0&$8){MayImDe?{3D>8Bp6L1V>@=htRtcNjU=$m06d>J>D)j1VA-A1Bs;JpK{ zQUZ!coms`Q&(Cj02w$pngjbBion!g+7Q^|?aBEa`1o+H&ejVXtvvID%{*=Ajfmi0t zgyfI~WjICT%!<247JMZVY|+}u-w;#v2}X7tVfpXx?%(seuP}CJQiJJ{0ND4u5#Hdo zmf0l0%fX0{XPam0oqD9ee6MLNma7dt=+U5;Bp@q5W6OBDCjmF#nVzH|vnj`M`R?*e zprIN-X!qAvhFN2H4i6%L5SrzyM&rs~7K`$lT%Xf5f;?nQ*+eY*YepH!hbY~&-e(hz zqKlFh_JSHCOJmEoa+Z={GliESwo_BkrFYh+9(9yX>D5C>c)5sjtzjX0InYy%mi0q{ z%On!nKfhM>4IpDy<;JdckTA-?zQ7&Z4SF7c19&dHR$m!K7S64ql^d`I+*8Hy44>QR zPaAp7RdNY~!I0HqYdb3mP5Mu^F-w`bo}_C`1~7{^XDj?^JOXGQ$M2eNsiYwYIUK_i z7~9n66DAO5NmMVLViVD8Qw3Wfu|<{2cZjP@nw=i=0_=}F3Kz}=HcE^1zTe0*#4HV_ ze==wbXGPqni5o^#mGzD^jW`(YeOs5=Bu-Qb_<^foy+^P^a)^`pF!&nMZ-|WcB@d4- zc76KA-ua=FJc`QAYYN~P9RGiYsq=>)mLGfjHy&ELz&UI^N~;C%z$}E=RFx%hNU6Xf zOt#YWcQ?4qPI|2AEynXYZM1%s>TV;Ds$|M|`zB$+60kY&NTwe6*0I-Yz3T5}QOj+o zM<fl@`ObO9Z_Z~Mn2oqdgZsS<l{`EPVqMN2={e9=)%5<n<KKf1P^Q5#3IG|)D%5<I z!ZWe;#=z@#+%)i2W#(+%C!0Q{SCV4=?{7rV>BRWJxo+AC%ki95yDZiRulm>)PhD~$ z#Vao%aHLn<y^!Zx;&jQ!!$NTUZ?dl{V;PC_akRFRXdB<qB|zaaRS0-biA{B_0Mp8b zy)_f2{zg-3^i})iDTe8XLTI|>^xv-YzKA4aPgt%zCUX&j{V54%?qJ*Qp)oKkJ&F9l zdcat2@oStj(D6&_dGa&8_={b7MrCTV4q9K9j>JkPQeml2{6UoYcQ@Z_s2A&Hhx$nJ zZzvV2+nJW&2?)oOjAgQ;l!W)Ce-Z)<U;?W8_oE``x|#M|_WTfZ%eDRO{((8S42$G{ zNNfLt5X+kij2YSqJki<48C+MoOg~4R%PIJm)WB1Oh6^9K2DA&98T<szk(ezu1Nc%v zytoi#5Ll$noF2|D8O`it&g)0sx<x5S{$TrE^w2S89pmxvJp9`C$f}A-gAw<K*;+a; zmydCaw`gt&3H)0a7^&C|x$h{59TJhZM~eA;E6|-iF!M7ZQ<!=Ybmc@SnooLRfRUo@ z+yx_GPZKYFHv_m=qpnptJfeV`jX+W`c?0mE$Ckm(vgG8JyRGCPND5Go!lh=L=^|Ez zD$V=1_PNpkx}Kz=ZKu#|E<rIxi%lFLH{p6+3YZ_TQqAc?+J@w8vx!9Z)RMsG^xq{# zZk!I59_GdXx-P#Q^DFkp9OfjIVljotZMMcn7NZkrIW_*JEc$RDZZ8=&0PXL^JTvMJ z5;DCd$&gO2qs^dIU2kr*QqvuMz*COygcFkDSs}qTj}59k!txu3h)Ksf+#$7q%5koX z-=WDIm*H;M-3|PbK&53&JrQo!ISR)|2k<*Fz&T0`{fy-pO~?Y1G5@X7)id$`epjfV z-TD+yLuYBsy^0jgQg8<X9tgX%U>;k!(Ai)x@M=t(R~QaLL_<(`;A=DBx~0a*uBC*s zhH#ms_{Y#7bBfB7Hb+-<lRZ2}+xINihW^%sLA}41Jh@ad4k|L9LZ8J<?S1GM#U1O# zA!MwZfr)r@GFQDz`<7htwV;9t(pPi{xbZbt$d&30;M8ELaNvKxe`sb8(&4#W%(Vm& zcm?rZ$#T%M99rU|&hizE5Tb>s-256OPc!hXHRVxy@v@3>Nvp@b`kezQ^~h#Hrjls8 z)YR&>weGeZ7@`;PP*A<S_vMio^kESmuu8sCi6zTX<AZyE%a6$8=#+uo$FUPcLw(~% z%i+Q~3&tk8$#K#)P@+r&!F3w3Q7uyoU$;-WxuiVVRi6-r<C54Cg#IH;YwkWz?QB$h z)BH|Nur)FinYH=lZz$A2c2=W(e)@bqoQ)WlyI=?ks{+V@d*L!6&DAjcL=-CLCeW#m z7+!Q~neE>T)Bmju{o9iJOGXt30|=?+x8=vV|Bhd`s?KGX0Fnxt(DP*os0*Qh<EFyf zZT2(^7Ub~;>Ag$!C+aLugbsxFg31$Qwlvl;6V&@dE^<9mE!ZfqB|JJVw`g%zAKR4R zeHz`0;;K}B#KyzVTO58y8QRc#ECs>iOB^SNb*x0gg8_}j1l>!LiAQ`mx5aZh;NE)* z=k<z#%6Vju2S*$bg8<!Bfr!^YfVzd@_kOI0gAiq#`a<ZVwDi>yy6L43GXACur7G;E zTE>D`5;GohlttvsZP-;G>yWCdsBjfv#jm#xvWOS%F>VP0a5?=w2+Utt-nqe#H$;@= z$RPf$;mUDnO|gJyMp@x?L~CRg?0wi7p4J`8)dLUSU|-oIIL|e)evKT^xug1A&(E4l zi|eC_H!X_Qsd2-f-^X&-W}~i1)6$txH?<hg<cqH0QE`P@G^mJRmh2}-YxdUE+q|~) z<VI-D?9zII41fR`8Q1E26$uS+I~j~Z(uTcQLe}0b%b0rMpzLN22FxmpZZ+7{|9eRJ zKZq2+2yB+fdWUuT7~AAq1aTBZJQBmtlX*l~gbZj_15a?A`Nm&bJ6yVSpCdI{hCRj{ zf110JGV1nS{Fm|i-pQWRjwtY%4lCz;NRS{G*`X&qRjN!2YG;is<LWe{dudxT-}j?2 z_G4*aE&<mRHAgX$#ooWY04Dfp34WwUcFy;SSZmeDg}MBWY*^Gsc<L@(f2n2@bu!En zq|*NzNc}+Qr1WZmU=R5bnq|2gU+BlMmGtGO&QS;9_uE{1{|6EWz${==V+JrvW&Oez zS#W6A8nqw-ivTz-Q7HTE0xs$sqahtl$$P!ST692{FyEbs>Wy3<=Fh<cPKSnY&U&5% zhX~NrSN@@t5}5cKH7t_m0=_xiZuPD?*2=Q!+lSI};u+q=j2{7pQ<~50_OEMWF`9xd zq~)i`<A{onpXpz2oin8l3(u>g6Pzqb&aEqYt&#lZ6DVmd3LftJbGN|tiVe&{B!VAn zrQK9?{3BiwGeTc?UWy(6a6+ABp~G)kU1{=w)E~N9*mCy>$THis)7$)CO<Dix(;re{ znBIssKA^-%k{to#K#)<8nJo&v--GHP1vnjwOK_ZgQTbw|E;6t1w?O0%2BKx71XHdw zZWJZ+>I`9E%P-Dcw5RE23@Qp(B~fi1+fw8GK;g)Grw2u_8!^zfl4+-YVCkiLk9ZxZ zE6y3`M{^&Vkg~Hs7!_=DjwGvW9X5fBUZ_?JnZSA^oJe+Kwxtz=Frw!Ra1cM;b~oF> zf^(#U!3o9+rSmYP)9enM(b)=n6Ddcjm%z#}X9jxF=uF>6O29BDpz{!#IylL+BRG%x zFvs6IQWJu07uQ?Wa*iDb&`5+;uB4KW`Y^7~dLiIkVC|@DfMXb<>o0>u#;wiH;Syko z>c^K%sE7-5r)2&@4~&2`ip9cX7byN5SPF3irJ03hdQb#!xOM372*7Ujc>#$bh3s{h z=C;d!JGt)0pw%GTY;H}+Z%S}Dk1{y!6+hd7TRAclK!3N#yR<kMB!j#RR+%d*fZ#6d zxV;@c*0S|5o70r(2(u`zQ>nMjuy8fM@!EDy1{+z_ZP7O{?dE`*`hV6Z9&|ta&k{@t zZhl`mIbx)XAGSGgzWTESIQIfE=z1%*(E<4-BK+vK2?14CrpS=674uD~gd06>$R;L% zovbC8IGShY<dC%@>ReqbRc{ydlx=w10mkR@$HCRQbZy*s$TViw*pc+SL^t$Ujv|xF zr*IZMaAzp&TrUr$;A+NKk?eVMQQJ%1iajI-LGTuPmI&>P<B_tBGFQ0yCaAjuCM#Iv zxrZy6k%tqY;MWcHA#1=p`3h*}Khyx4h;L%+$teUm?3GY-O{y9KjOmH6sAlmce<!-@ zun!vkgkYPFr%e#=?+f8`22Qg;BcG+{-g!TS1F|ux7|XSf`EuM)wwKBXc7GzK!QtHj zS=hVl2#mJDH4-aMjB3>=bKK8C>-Hs86L0n-B-Fcf__t1kkjd}Y(NFKfrTo*gp-AAN z<B8s(+HzY)>>bMs4`>`-;JF*hWcQqi=CUF03ie3dUx<sccS<i4@Y@P33D&jJhphgG zw(ei!!+-Grmx<^K#y|+n#Ynem_)Y9EezI(IlcuuXGnfBXaJqYfd+_UUgJx#A0sV`j z=X55fBfX|Fb8fs_GVx2T;#!pv_}6(*wAZc|M!_;SgIIgr?7MK{>o+2*Yrje24&)Dr zAbuYHLBbvz$)5L~qIAfmeEy}ueBLk&lI=b=BgViG)IqTPyOcy`z4V%I=xfu34MzeB zQMTcHiw(uUNz(;~+eaENBS;{jOIg<h%Ki{}R2UUt2fGB3z=vprsmQOqgrTOJP1ATO zW|q`a#n-9Y=YyX=sZHBjj=k7p%H-j!@d)HvLTg`_6Q%oM7)lPJ-=&1mD#RnZfe%j< zAO42U4Y0~U&`Yy#2RTcLrtznER{nBpRBW_eRhC(87338F9oTst!X%~2ytorNVo6+K zD%1w6ZgHQ0*{=jJ5Z=iY0tv-^((_3U(g_a#CJOJ1YZuIKL4{vL;z!vT?nPAmurU}m z`rYyamz-GL#u|dAbMJKjq^zo?!3OG;af+ktO9p6t6oc9%=CZJC8dLW#_P~F%R{y^$ z1^6Xb6W7g)El1TI%sN26MG@yubd|jIlhp#uWd=$06{k;^0wSt0E=i(%C-kzg5KJ(i zf$(tjn-%%q^yPbC`C&!Ypy8ZxITK*Jz_`Ec>yAsxQA(FyNcNE|$D+=VM=q}aLM7R$ zHHQY<*{=h#FLm`>`w+j`9-$4IGb-|jS&b?xH3#rXuN;%gs$&+5#RXFWKy_wShTxuC zs$$MmP2l#MdS1^le;pBDug(m_lx0PP=jaG0L8Qo@`$__%hmp^|u$Ky&6p4-mW5ROD znL7o(-zfco6EASP52GpyZpvM14nfh}$Fn0v{iwh35t1G%D<K0~*xCx~G02?p%0G7e zS)o57Vgxs*6jUX@Y@*Nj?>>JGE;qR-x0@n4h6SLGc1gan)7)CU%jU1uYA#$c<sN%O z*z|Cwq%7+KFsF}_5bhQ(Ey4pkp+)&CzY)8B%{&arT2eOhG7KY_y@Qrl@_>|D(j1## z8%R|`x0SvNS-<UkuUm2r!>R1bZQo(8!j`ccOQPP-Mf9<Af9k{Mxq1kG>L=w<zi^-0 z9ew0|`sr!-;k)FC%GMTrveu+gv7o0OZ*9eeSla`&x-{-+MF#<+=zvQ2EhaGVks;0< zKukMA+ZVKVK(hVEkFQq}KagH(kR=djoD0jJdKWq7h6+)vme}&d=KlSo%;H?}i=o@9 zsjw<`qCB&q+)(uQ<>8p)(5p@6+-bsj@%Un<_bx?IR+7`@LJGt8<WIf9K)BP5IH~hs z+i7LntZ*&+?%nKp@Bl{VTcK0W^VDp^JRFMxArcG(m>=JN`=Ogc20&lWk5lz(4$m$o zsP!L)T>_D2+-r1_IEs6B_;im#f*BalUzSfy+0X|3TbFO=_7jXJH<4z)*))B5a27b( zqScSpO|la+dN0Xrn6%k?uH}F+V=B;qa`7k|&CcVbH~xhEjp_<Hd7|@{#QQzM_M4S` zK~*UeQSN+=Nw&WVjuQJ8p*IMN$}`gH-l)6q%^Q0YE03bUDv2P6WDxFMM>chV5ilSY zc&D#K+W17M&O47l&)}F@_l+?@3Y2Vyz@bW0zSe#~J*Vfe3%h`k7`s3bm%@dV91GV2 zds1<Z=oE`aD8cnJeqCfdIpTu+wM*qbt@aw}#qd2Xl<J(C;$0U}%FTY3LV5+MOS` z|1!*_LWtUdL3K~lG1==+!BLW-tlG2Kn)>%x;T!E%I&IHKw^n0siNh?W#KsFual`(4 zN-_epTk+-ZZnd_I7~LeiD~jvG4$R|?SXwxZ(|lcgJtTv!`y;5l6<NVrNq*AdOapx| zqD<Z7(y>-~vh88l_Op!c4o$W^zaRQYI*wU=$L!h;RxD?PlePXt^L{)z^<I-Q$=NNU zmUA_nGLC5TQrQl*T^Hfh2aPEZ<s?(-WcYkeba9T)?-f_F|9<~S->}-BNGFieeLhj0 zeV%&vBg`olrcU@jg8xrO+=7C3I@XoM=mz#>N1F43KDY;~s_zNa-`V{VVJJH*V0d_n zCrtlYSsHb@l88=$V2nUo{LJhnBi5lMR5y9``#JpZLrup~APpa=ARA3GG+euen5=%J zp3PM&Iz&G-`P1RdE2$u*O|@}3z!BBVBU?S~o`!#YUx(FnP7u=mxr1BYSLSjbK>`#} zovf>!LnH0xkGa)S@v=2l@Ef*FEQ^u3eK@YbiqYur(M|`aUaZU!XaAu&$>p<SS_gzD z!IkR7=~41oXwAOAYIK0BbP)**f;aKKK_rDCao!(*AGR=Nto_Zl)i4Rz+}xS;$B>r% z5~l-MU4>8u6i_OHeJ*62Lelk((H@!2YT!!bfZ<sB8D5++2dig(NP4d5Wv6-L?x0-( z*{?$%%37f&@scWIEpl@|v)R#)C2$)Z<XcVO-CAFg60$t7DU<F=X@Iymy)0qjKdkYb zm5LUa)p9zxn(Is`bD5uOYO!dEQsBR>00W8e8WVn26${Cve_eJ#k!0z|o~E31@Cuhg zzh$7-s3)`Mx*w4hPxijmJdWnPoJk*5dl??$Nm41-%ChNj)_&RLed==>NVJ^A=(^jl zcON^bKS)rViD}<SG(VmxG#^{2sC_qUJ%3o8tr^0NC!zTD=}qv&=P`qtog(9VW(dF9 z<*~Y1ko|tVSgc&8QrNKB!r;9fp(}wH&ZOgbLw=k{>+9ZXaGq#>o~XKf>iXVsIxE}t z;CyWD``C2c!25xEthxEoSUE5D(gUZXS3~oqj+-?=o-@sSe!9CPcsF|)$bNmkL%j4z zKK^()|D=3BqVy$RcN?2PKNY5R%N^mpPyGbSQlJ-MXxaJA@Ba9ozD!6kxZ^P05#7Gs z-gZw_1J(m|on3-ro(?_`wb->SH9>AH2Es`}nxz<jvATZY7Y#k%N#M6-3c@^cWqfm> zd~_WoJG~wmxwTr1Kjg4?eDkr4;dxzK?IC*1olQ1bucvXvo>E8&F&LZ_^gyi(11?5& zN<3Vk-Ya{&tTj&->W>S3G8@&l92-5yPC73mf&0wsDqO`PwRe`N%#-x!r|F>FEvYM9 zG-LXb=MDrg5UUf7N~|*&5fA*NxywsOZDd#K{(&<S`XsZ{-1cp~rsddR#(_fbdryIB zDO7tL)g8K{VP=izhV)42R?z}Q0?WyyVx?iS%Ea{f%j<lE`q=3;avvh>;02}VVA#V| z!~D38N+tV<RgIt5VDMU)*~yx4w~X)@Ij=_$g$Hwahr8zrPgc|BmjA+gzBx@}7x0Re zJ4of`+a&3zReCX5<0@gOw9}oyr#oA&bnJpTViNdnP*x*`885OyEi*Jj=)`lD8h5+? zZg9QFJ;m$t#5>|zHoof%)^U^1J1dIORS<@DhR;<HtytH?AS?C(hK@rVze|mZv?Jpd ztIxjb%xu<8z0>2mE2|vO9Z=9*t8ARxdZTura;oETJ)P%zBq9>#W1jV+_TfHDEZOJ7 z@i=wL&4WWT@FqU{so*ZY>f@W^YP);gO1e~Wg*p++n}lULXC2Z~ai+)LiyfJwieEh~ zS+;KPQz=t8z8@Gf<i#0QJYULrYp*5Qm-<<m`wJob|4S0h!LVibhMN-Q33s!(OI>t9 zxqd(zU=#dVtzm}t*wuvX*}bkd$4tz_fv7k6TibY(S2$WoLsXPy{AARXMWxxCp<z>I zx)?9N(xeoVKR=~1zj~d8Am6rp=Wd@x6WpW-eG>1?*0!PKov4$baY)k6@n$DU<Lxsq zW*`&564lAZPt_J#I}l5&^_!O8;ZXdWc^j|T1udfy@h)Ye;t*oTb#_0{Z`_*9^4uaR zv6i;{_u|+l!h?TNyI4r_fZ!vh<*1022Q88t1p~*<UU3<eLr2jQ5q9<N7uBsq7hW-% zcju)rbUgmlWWJG8Iv#aMOv@M_wKqL+y3lh0V>GJsC@q5YHwMJahBqeaL+_#rtD_&; zYS5oQ-Z{l{q03@Jnb4GyLn=6wNuz42hiR)MGwV2adc9~w=C>*Xgw+a=n|d99V!8nt zM25Nf4Ql^sQf_QRxTs(*6F3A&QC{|}#h@64#jbD2b0So;jY?7p?6u4lF9kb}ID#|! z7&PhlbBDe!pBvP;=ml+;>e({dj(^40XJ=kKFT_L4oEgjV#22+(tvRj(cW1F;xYtjn z+!yL*p?TkaQdYHDYrkBpc8R<)RY{p<H!ygg*H)!_wa!*Ftrxis6%J+F2d8#ikm{6K zcK>z3Cv54)=NjPwI&*xvF5Giyd}Vnd^J)bZ=N{4k+s}1n<c)}MM9Nn8sFawCxs5#K zHLbmYKiO`*Va`ir(En#+^iOSsW(JELZ-lPD{^i9zX&Jn&`-G3M*!yU`37)2#f<sE; zxvC@h5W83&F4EM7G$W%_R|x&lhe~}ey@J!#alJg-IROlw(?%bLnBOQw0jj<)=$|x} zN2$P7y7B<$oI$>|zHvpq8XE2INDeB8SQ8;{HqPYa)w24<#H^l650=Ud^yrFT#f5Sq z6dhr!oA()%ol%x-lhZT!S}8Rq7dvb^1gI_bScV5vfR8mEUHz^p_`}d{)~E1HNOuJ% z&_W418p#q_Lgf5Hp7nE!-A6}7C&U1N;DxuL12a%<Ut!hua#mB_^d7fwi{nb^iWOxj zn#q6>xYu8IT(D<wg(TRfr{GTt!Hf}5EK<8JLY*I3mGz!1(tw#7QIk?;f27v>(mCSv zeomfwvsYSgUT4J8yaqi;GYf@}<|v@{5)9&>;vK#uV+i`nQzs91Z<R^P3Yk9RGu4hQ zGLO7IHRgJ0g=ltuTAtVt++YxMk_73AP9NI-7<Ur>O?{$Z#E64n_I8q&ml|8M+?rmc zs1K2|+>g-K{!dvsis`47Y;1ojaPf3_Bi4<1ufO4M{HFB4<YkFN@th9V1>-r6au{X$ z7dxC&+xuQwLzz2nlKn8FHFc6<ao(%4V?_u0kZb#!MI&ppOfeGF|0Vk0z@9l@%|3W4 zFZ(_+mu`dMrXNi^1=}*#y83XYzkeD)z;VeH9bOGgq9Z2NzVd##e85USc5K{d8J=sQ z)ShKZs;oySo^xyKLJ4yI)<-^}3n*GgNsHGV;jj)qZZBT23X#vh1kS_LL+QZUK*8-r zYD`!!@R%rK69#BH6Fi2v2$(qUl!5FY(qHqN7SuSr06J<jBnTs_7?|?TA*I#PpX!_v z50|Ii-{MxsR=yJ_fm+!1L8)88*y0hAf(GgWsmwFcevop^r53QFEGFFLNH7l26gi*C z^tQs9gO{8*Z;m}xR5jr3x5^CYfZSC%E!&lx5hfic52*G$37tt|;n9y+mwLo4x(t_o zRbKU5MUq@$p1Pc;Cp5U3$`F@gO52S>xDjn8Ywz5Y0`#;6mHd(fSX)$rOhyN_tTlN< zhub!b*x?2DFWzbF9h(RMg%6tcS2!_IO`;%&q6p7G60U^I9}VNI%q3s<33AfMxG8HG zH?nQ(ruD3g=3RtUg<YJ@W~xjzd?mLv`ytYk*k0C6hcXr7&H3gkwVGe+cC%6DT8k%X zmR0lj!x*W`!%gchq8i1Cz$fp!T>{y&DJg6m%>))NTfswkKgTI{)v}r@$;Hj9b*GDE zS+kXEFi+L^3*RkJj6%n3JDHb<{p8}Ys%Eate20Snj+6cuc+%@6)GMfkIu&AkgErR0 zBw?pa%XAACJJ96ZT#wQUzLLlKsx4Uf1I?IkPHt9cI2S<<zJG_ad<O96PB15LzB{^h z9Af)_$ln^aZXiUgP(QMKXHK1aKYOq<?^|!tlf7X;+I@WJuUhh`3ejeoO=bxWw)HoH zdlHiEdr@BHqfmULt7Jq_xFMlsnG1{1?R@u>Pim<k_K-G#J`J!cUF8_rk;F>1PuqhP z$;7nk>6t`Sq2;(U+>b3uexcyL))TJ^JJvy;faAx*6iYOm)%jg^-o{6Zt99Rd>F%`5 zs+w=QkZ_c>{!LCM`#45dD6;*P=265P8p~t*XeT3owr7Bj6YFJwPX<e{?PyNf+0zR_ zGg^<y`!MOcUVhb<O1=D>1XtC%GnsX2mn&Z_39>30Cq%+JJ0&UsWk%`~VXQcjMo_x7 zGwB$I$&P@7fX6LTKW?n@3@WMy8?EnyZxN*DN!h@k2`(w3kKSX<wr!mb%oxsx6sMls ztmKVXzsF+UFJb9Sur$srrOpe(t=BT*yIkvI=j%*%`~K7nDeZ@m#~iZg9!7Nil-tYf zj5O<J#)lM7viE8FKD;F{p5xv0agYbn7BtTt|G?|zO&2TouDNWJn<@9l^@_=E<K3j| zXWjg{bmiTCXdfbmypJ2lK}!DYXd<PwE$v_)uh6PP2KlG&Td^yacvKJa38JPgm1ZLq zUZaQebr{wEN|FDDuaVfEkO5MS`Q>sZ{Z@s3<LGZ;u|-yzmcxVSAN)eQ#T@-eE=fu* zPy_BbMA33dm;1}rJZ+-XtFt#7{W&4*`#Ogn2XR`WYaL<dacvGU>xE@T7A`azSu{|s z58K>kZ)yIP4m?6!di};BI=!9k661rq2w8@PE|^J1^-9XF?(p9~s@;5m!2=Xg?&&~( z{L$5N<0W?2V+ckDuO<IJcUeulvcZzoEa2$RTy;Cnn=SNrWv2ogbNU3)VpNMC8<v03 zVff{Lh(1m^mCOy~Aw)(I&|ID-Cp<k4kom1ookidoKMsXB)ZuD_CH+}+m=zyfz)ncz zJd<-5fQAE<#+(9G#zcP9Ri~UMxc)3IH%yMs+}p9^77a#hY21_MbS<h^em=k>_kKUo zK7KOZJznqXq{{T%QEJtF<)>92pJK)S;fX1^uqE9>Ov0gfoVa_mipMtJVhBw?qD_V3 z(Rh|K+V|~R?=;#zZZb7+!Q}amY`C2X4uT5bCHAH{{YA^`<emTRRN7)$4t&3Q#*^k& zuK!uhnhfV1m|CrxD~`su?98JiDsywU^Yg~G;&Zp*>$;8-sCE-{J5h999ildua|z$i zm`ky#FO!@*2<vTRa-<YX2$iax<FdH_p>8bkB0n9ecK(UxJSKk4vNEdeq`W<Kz(o7J z7=JWvT+pLb8a6}W=*(V~IQ+#*Bf?;{Wqrke;BxR3nia{O);M6*gS9e@MdErq@A-Ri zg5>f>fTayWb^%Ra<kDk_0w*;+WU1Ms;Ua1bn+OeCUGd0VdhVxdgvM{|X@%7g`h_rx zHl}874)l2i*IANcIf{OL`?4Xywf?xe<An4UnY|^4qu*)Iii!8N6V}NL9`xZRrW|*| z(AluA;qYw;t|b13z|;amyS}*tLyx8_F46oVB=8Rs%5a~UGe9^Kuu6sQG#$qj!*WU$ zxs6xRzac;VUYr!u8_>5d*o>F5q%ZUSB0`GOMcJK2nlQb5bEojYao+3$s%a<IjrvQq zLM!3IO;7b-aJhEyXseUnQ+I#kROmQ<1Sxss`!9w|aOvIpVsV)&Iuf>5tWYa^VVhSG z%R;93EgO6RvXJ%0<oX9UC?-4+Q%Z!ej;Nmn=ao9>1Mb)m-R;uoZSEM)kqFr|H&}SK z2HMwYZDp9}!aFuJ=DS7G$LGGEuI3Zu#RYYfT#mHAf+WA*X+3hvTswQE`|N@2frhW3 z1&+u&vM_)ac0BWJnzx7+luPShQ?oMym@9P`fijjQm&mEgU5(>yUfl!6u@s-h)Z3uZ z+vKPB{KM&p|0);(-#}puP&TKd*cMDht2n2>o9?{9UFu#jsKw#*Xz{$_=;k|k(wb>r z6;I{GSW!Ss)khudN2r;cZuk%O{!Mj_NJ?WdkX_ynvSN8ZX>y3E4DEQ3D8<y2q)@z9 zS>H4U@1*886!qH!RbrBlOCGZ&@v&%DUcS=URt{zt^%*G5DM;4tgG-B6oR3C5qN%)H zhqXdP6e<Z&#q6(MJ~AR^Vi}eo-D0HY6YXM``#EId$H7{dq1Nbzfs;59s)Z)7b!d1- zoP$N|S1bup32J6#t{<$F4wQknaA`PV6gn=omMi@K=z7bjwzsZdyFgo@6f31baW7Dy zxVt;W9g0&3?(Tu&UL;s?hd^*C?(RX0y9bApz3;v6=Na#L&qv0{;KP5dHTC+<`TdMu zM7@>;J2e=T6oHT$g={8sb+bg0YWQW)6)4POrZz01hf+#8j&RG*#Dg~wW;qz|AS?{# z>qU$k`>ejht%8QgwG5iX<pRhF`L2-P8G&RRyc_MO@+Helhf}O*1ZbL;zYh-{qEwjb zTA~DCyS#}{Wu*Seek&ZK58LX=ovHnv$h?v8`Ch}YngG|NLh3__*wht`Gcqe;sb;yX z-)VEZMP&$*2hqf}@Y;RUi|zq2KG*%Zw;N3pDXV7>c%NFxrS6_6JMLKqY-{K(B!=R9 zO!lyjf?nm|(!p&wiO0(u{=0E8=u|Qz^bl;NiAh82wor+pk4#tPeM`Q`Yf~(^(F;`T zqdx!V%v+^i2%4#J@gIa3wDjHFM`BNvbQQ+hh!}cc1}by@0b)M#o>sr|zAIaZojpHu zkDa?W*}wXs@`RWm#HAV<NwWpU)h*1_l>1u3BU@h~WLrra<$}#K5bj+7`)FuW+KcWx zW9^rsZeHi5TH*DYK<~OQ>fs#bgWRq0y8GJHM@3@#8%^H9T2H_D&EN!&`X3xZ;<M92 z=FN;M7vjp<VT{~i&gpUm8|-)D#o@Zf3q#tRvGcLx^NiEKHT6*rWFFK*ZzOG9=e261 zRY}PJtwb_!Cwa~4W(OqA3VlQP67fInRU&Qo+Da}fAm6EV&f(2!`|)ZF3E1*oyDp6} zNn_uII90V~O)tkRZDm3u&>LTlys_|hZg|TRT%(VF=zMjg>~W>SW6jYwb3iktPpHak zek<*1pU#wAk!<p9Bep$X@Y^vV)J&Kj`h$t%J5JgmStbB6$wqdQ&Bu5q43IbW-5llu zL8wvhW4e;*25V$gxz#2tlqF}*gX%Y{Wbp0-B2@1_EFeS)Khk&!V^Z;wqIi>H;p3gP zNNf&7gBA^CiaFH%NIl;xV2E|Bc0TmJF#JFR+3Woc11%!^eP+Z<<@g|e`Q=8G1Z9{9 zk<WSR_&0L>KG^b}u=7&kOxxvR8yMLDUw6^yE5X@tv~Y<nO89TB;gYh$%~+7|V~mQl zx#{O&-R|!qXXKK+Lx7z9w(PNA^WUu=*378%$eu#9y4iL2*3{QbGrC<@rD%3^e<a9t z>4=|XCFW#4rYpcMoW>BX3yZ*j=r5mrpDGeJ-0i})-(6q07S}uHBka;OX|lQzW!86I z@@Vifd+LofBc>n8zuu?(#R832<ucY1-C!G_zBr-hgp^d|Vh?YA7=FV$fa*K>s3&iG z)~}w;_^zAnXpj24U~E4X>phhuKk;<9b?L99F00AVx?iln$w5*P<c=S9|CpNLBELg8 zBTmb!oqq|UF|$99s9^r{*7rlrzOec*{UWpI*q#$;QP8J}To%vk^ZttZ;<q{{^vJl` zc#mjwWV{i_R8<I)2hV(1bKF3$1}7fD#iX&11__VzXMLAd>84|hqvsa2%}QH>`H&=^ zgxw5`6H1?7`uk-zq5Kda#-M{ra5bG-_ZYuchy_mZx%muO!FwO&TOEBGGTvgI)*lvv zb5(3(sIOES86BII<eUFAHFn9X6uP$_2}#(`Qwdnj2S_-PWy7s|6?ARM_^TY8{-pi= zLm+8@LOLW5osjc{<yP<d?H|veZ6oPJ>3=KZ9c>hARP2pDlEF%JFR?aR95=MP<Aj&w ze`LUVJp0Krte;*HZk{qw(blgUk~D6vDvMK$(0|)Ww1)z<6nTC*k&Md;3^tV(A5Khd zT28md2<S7_L768hj&JK9&9y7L+?;>UWMW3~c6W61p1mtc&?FB%+RBG`gluZcjMWT{ znQd#z6Kapm$l52k<O*zXFyzz^$W0Gs{1|T-QK@r``&FOfJfLsE603f8A5o5R#o&aV zU^VjcgQs6O#H7KFyjuZKb2$C8S)Z~9Ek8<UbIaWRjqqC`y|JE-UVj*O&w$V4p9!gJ zJ4f7c!hlF+Me|BlVak#N|CMQV^I~3?=1-d?ggoU*qkUyMKWRwPCOL^VI+YR#U_UIv zJE%EW@jhL<Ds(q&+UT0^b~QXNu-%HtLh}k0PwfH+MhCykr8nFJ^XO>!DD370bCQ4O zV82fhwXZ)pR$mS?{yQ$dz(CmUM#r?3Nr&*8I=Rjf37iP?bRZ9N1c&+BA3$myoMN?+ zZ?+<jPj*m*`R$+uw2t-fvSjeALtaCziCpJ@I8T2CLPZD&c<+}M&rQ%UjsHD=l$Wqq z2(+<L&*NV2vM@pR=36z)gKSK%pYqEbLoI234+zWhJtLk3X0^LD3Y`PFW>ytj%5^w> z4g_=>0Xy=l(dtsB#B9&fbuGj>nq2R_W&+}`y@V%lhTrE}@U*CLsNxddFGTh{gkI(| znB(ZZy0j1RH#aj)N=T8w<wVuimqKWi7qt~6L4uYXx+?m1C46tSn&M>n=rnK@4>5I^ zC^l-N_j>y^^bZA?5eCw=Kjkux+H#*AICoQ}5@+rqP|gwoh)l<5oUaL-RUNUvs9NUw zv%q@xN0I$RDy4PL`d25X$-$A%u*%65eV0E25E`4#44YYJ0I`TGwl2);3hGfYy<raQ z!c^E}A~0~c7`<!-_D)XrP+HwLxNehi%Ww+X;@-bAF{2p5`6%wx1~td;NA>#JZ*C&a z#sJbj<L@LH-=G=WtXVYTa>(fmwiJhy$hUP{@cH;Eit_y%>0X{HK3;n5FdgNS8WB08 z2#eaSR?D3Lb*H{DT+tB!<vq9GBS1!t4x)I^JQ5x=$WtHXJj+Rm^~(U9AJQ%B1;Mt< zY4xk8WBs4PWDao|l4mNuV*J~cG>`H>Bc-rj6P1R%`)DA}`kc@Gk`0>9s~rV8`{b!w zqjzGp*>=swqxWVEN|Bj=hyGb^`*PSVQSr$#TIcL$Q;~NrXCXN6TA*071aO+6@7N3r zD`Clv*9Pour7nJ|xO<2*iA}dd_5Zo)+L$~BVtvq!N++gOkxL0_1=o);^xTe0(io=v z-n#qnvA;}_DZPLWx9l^)17#$M!#Y(tq3fWFGYJk0z*9GNR4takt)xkyR+-fs#U_Vp zM+x~NC!CBef3nhQ#1a3qg^9lZC%~M3w%%O2B(?Z)P;~(3ph3<Mp6({6#^8Q#5U_Ah zR*^VhFG-ASipFKIKs9t2<8teZ?x0EoDevH&9gN?9`~>5(F2#CH$X*Gb)MS&FDz9nr zlef!RS=KAb1K_Z9Xocca;3&gSj<|s^lXztGv><5{Qwk6`$^hr3Mqn@v3*9;S%3VIj zSw7U;>SfM5U9TH@OPbOD*t%i2mz>rihokz<HlrCQT0~_VI{^EginH#z=)amVPQVUD zfD5?p%B^Q-h%#EstlI(acFEQ!Kv1hv%c00y1DbNHqhzxf_TSFUAv$90pyFq6(?S@* z4X)B3`AG5P$m`FB%Wp*#K-cW<AKtao_f6G9g^zg;Nk^ya0vqKxTQEJ|F5i)mJmwpe z?{Mj7WX@zHPV)<_ooY0DPS0qV%)M_a`<OPI2vFUR8b(VRmr$V9RXAnc$i6sDqAK0V z1x1nB&J?@0rlHLA%WaJACY8kX^*R{qMq1%u;8=iFZC&W$rfeO}hP*iZ8&DoO{#8ZZ z)=6Ic<&RnW%0<KY8pBn?11^Ze&wj)A6<o}U$HyKl*^4ldt<9R$Iv*Vu@WenjVqaxg z!a_9a-L`S*SG%rF35yqU{vhn(L68mSd1}*Qk&8_qOFlz)5DK15yY%h(mdRd#0-e4O zL;6C@Zm*~dW;n!WyvFWMt=IoYc(jblcPN;EA`N#4{dc5+u2rN6S&9*w)RnX5z}2es z0jjNPqLv`RB-$ZLhKU&=TcqlLtR@zM^Z@V@>~KHP&rkI1{gIW+tZ`QF;;*BuI)NuA zj#C9sM*uDK*SGwfv$rNAR)jr;5y1uM&w)Y!f93y{H*pbL+^T9)O&_GlW7l<y?wLE+ z<<@l949R{eRPtsK`+Uucn-7T$1qb}xZq%WoZ7i=@&BWK|V~KC^uciTeZIuNH4@M^A zXdiKd%XeU&v-)RErm0*P*zPM4Y)%8-KPWS_HTP|KbZ4Jv&a|k<{oB6#!wzGI!**5N za5iY<_)SMAw=^}+Bn)k0HMbkIM2`hWft`l&OMTo*FW>l&@+e=rN=GyE(;~9oDGHi= ze0>-h-Su|*3o+=p^CyEVwZ{a4{cY6}^0o(Hr#jYUU#@Tb8&uDfNR~A<(N(h}(lfZ` zpns2flMOGpsb_kCiHwJLQ^GuteW`+bol;Xa=cL}+ZZQ*bKoA%~%_XSyry_V>J=r>! z(jnB+d=lL3sM9K+K0?JEXPCB2LrWX!Zjg=P6dAQ&T+v+>?lgJH8J89dV;ulUI{Y1S z7?DtPAdex}+gPt`?vTH{u<dWLuAyb06Z{LbI3z^Wt+%ynYw^mPDb;*iX6(9b<A`Eo zJdGOY521MVZ{5Hv@Wlg=mKH>==3SlT@R>DxlvZrR@DtuskBrs+O|$;CAq{|<-7Feu zXKw4t!svAGTVk~%RfhNI2LTmcCz%CTrcoEaeaCQpw`!)bT&rB3)PwCAxlV~t;V4mk z+ekJ0#vP{9rY!@y=p*c$4`!CA(bbBVBbbx{>Xm@gqXVHp3O0{*ntPi(Aef5eX!dNk zedbI|ikMG*jcX*6sPXbX@r9^EC@me-2%T#*jmYj}C5C!4rlJ~Vi}LhK;aNxIWc)-% zW`MG7JpGH=`S<y8{XPBObfx|v{THAI3N5BOeJq>2u2H5?0y)h?%^G!3rmXu_)3Vj0 zBxHT9kSN~es=S}*<GqR=4R_X;naD;*VARQQnK8*%sRs*k`CywLN<eW<D7?2c$vH4- z;bN16Vzp>gx%)QpE?Vh7720h&MCcXR7Pc6}&V~rBw^Jg$?*~qyuePp4wx2f2P3<s0 z9u7y}=k(;+9v+8fU7i3nX_}nL$UAn_N#1J}ieU;+G3q4Z2~VF3FyaJhx#Tk5N9v*d zBKkMJANKF)c0Wn6JEdszd98;^^y7jV@`^rKG0DcPcHd_C8*DP6s~tZjw}$aXm3ZMP zE<<~<eq}lsEG0Ud(52#1xSnQvANq-~fU~i8OH36h(6=`@Jat{un{jGjGfD)*tcD<W z)O0HP0Jf>`BRNZbZ9CtoRhhVSxYbvRYru+GfQQ_Q-Os*XOkW>vsWxi&E+Y0rat#K` zp7vt}dX1x2F7`X5^GE5LJRjGg%%#_5^Haem1S#*nE|EMp+3n(!`PE$Z98z8SHfBwm zYtF@S$cRYJ+YulI#`mjp88<uDa;n$2DboRQhEIE5^B&WG!E?a&xFO@bsb2ID2Ngs{ zw`TY76;kVg#PIS<PnJ{Lyrg7lL2OCxvDZI2Xh4M}LQKXgR4f5!eG2d#Uc65Y0hlFJ z#Z`;bU*;ZaPm)v~H?fG>U1X_sg2;X^QR;PvI;i!LbmyBqag^@RKhMaQtV#^CU;~dD zS?A*%JkeF;=WN~Q5XyYoS#9yDZ1&q)WSI2xzKg$X%DPK+zGUf>C*1K`^&)#5WPXGf zkWU^(Jcmt`l%6mA9vWBVdf~WByOB=&<JSR>ot$8~A*69wpP*zGV!$IYLb^~XGxTs{ z7zw#~l61trazBQz0NWS<h3IElUl5J#=q~Ctu?sa+m4agb`$PdRKSU=PhNg@?*bJ;^ zJr#DR2#XR<d=?-IzhL1oL>#cmc<UYgj`Nm0IJG0RWhLv~2I0!D^)&ua9VG(TfTq}7 zlgNQ<bM!^FChSP4nPc)>+?_zALFw|{j0PBT@#QTJ8|iG0F<1I*gq2i8Qc+jGL~KXx z#<E?JDC*({>*xnvE)5U0tu|efmm2h`Ni4v^JZxP|w8COm$L=pN-Fdb$fv?`|>#BBo zO}@Sh^(T=eo3e@ob=Ub{g?~sYo6sZTP7hbS5=M^HL6n{{e<2}7bP(Y<$5XVcr!kBS z9z+p}zaCJN7}K%>iY(v|QTJig#o+kue<(~;C}h<-mMlOb`HAnl^Wx7!U_&$!cH@w< zx|SM0O;0t0)RcbxiK6C8Eko<+k_1ITou6`bJ;G3*3Wxg-&bWz&J&&Sn4X#pKbJxjD z3(Sw3#~=z>bDTilk=ic<9`UU|TnS}HjNFa)x@}SRCu*&YQ@+=@ypZFfK>I5iG!i85 zAZl>Z^P(co4!?dK?IWXUcm=wwx4Tcj48&`*ltlD2TwEaaX@p(jg+EruOcV+m`AHh} zMT2~nb(@^S1s(5z(9Hc9W`#W^!PQbshB_HbV{EX2nL@gVFs9g-&42PeeUy&M(@f(B zprfGBJ-xZ(hT*0qRZSadmGW;`RC4rYOZW*6dVAoojKy5~TaumoOi$~?>vD!zC4!)p z=4Nb_53?RZDMnrEE|H$T)7xYmn*|gp$8}JmMcKW`>*8ZtL6XAc6q=9ve2`n`mxpk+ z#8HgN(I5W<YlE~Qx2}P&XZe**xfust6f<(cw&8xSkZf3nW`Unm?ITF8M?=}9vMKz1 z|HfCWa?8A{rPi8KgyQ8V@gcEyYx3zo+Q!N%Ra$geUzpg(wrA?lpcfU`(KUWT$1caO zpy3*)4=@yVbS@e;4B-VDxl*LDhB7%BQs%@(_!|^$oF>&w8O^TnXL1VWsZT_3eBFZ} z9Vg=(a`aND^DP9bj}(zdX&=d_P0mO~58p|#V-{)B+zUH3cYc}XBt|o}aNE&hEa&sF z8U2PsCCKYtQ@i%BPb9B8ctMi|P1(y@xsARYE)=AD+z@)u_dMsZD8LguL7tSzdJs2( ztvo*)PJ*+ZHk}t``tnJA7vv^g<_t{k+TDlzxYD^=o?Q0qp7xo`AHrjNs6fw$7I_@B zL?#YxcS+1#4j2W9CppMd)@w#hoGi&mNC9WFM0fUBT}MBUI5FSm<)-{|x~obr*ZAK& zA|MzOp>=~Ry+fr#-3Y$%VQf7NE=gM_Y2Uuh3XH^${gPaY@^!=&UcVe@*X!F{ljiuk zMG1?$+D~i=1$s3O3&5DJEyY?|vA5p0@^&{FmW{(5d;TBsFTF>z*7v+WZz*@b>|)JS zY*XxyH%Op;y&6Kl9c3lHwQeyrISk3bNtX;;@2+KRNSdE*NydohI4Y_Z)Gy}pv9v|R zYDp@X;wZ?UC|F^_KL^}ECA$ue1y$L)DA;}Jl_5cBzYxh9%Ek;mk&7luU+fyV*<^6j zkjTz?*<6TJblK!rMMMTv6fMZ~^=!eZTxoZdb}T(OpXg#CTfZ_SINm(fph1J#5^pA1 z<LZLQ40AK52(mY)W)rWe3^wO!!JfpQ#6Fzi@orG%q7O`ydC!`L-z*{c%i^4h8|pm1 z82D<0!ZQN9@b4<;HV)!_lc&31=l7}Js67~THXpO)q;(HyaCh!Jw(M5;d_7`Ua~+j# z*F^VteDa{-xwJ7R?+2TGjyrC-h`zLLe~{ZtRGrN$<i9HBjKpib0Zt}lovTe%kMw?% zB8v09s9#Ow1T6maJ+?5+64E+RLdpzk+dY~%O$}1Uroj4{f>M>@39_lvV*DB8$Y<U> z!edDx`cLLaw23lbInV>FA{*;Bj+(1q^5109ksv}{MYj>!sbK_OFz=G*jVQvXHVoB5 zyJ-X`gLax<QJRT+lqticzY}nzT<iWKko7RzA_0YG>SoO{x+M+mEoaWQyd44C=z51E zj7UZoDIVSVS9E1#bA&9G(rbDWO65B$*1WsIC2Y;6h;&L+<NwV1Va5~m;xvU*gI=~Q zw0Bg6#rd9KL99*BqmK?#&YX6Ooo066q2^-SiT%%9^`6aY-`C+nw2ZFH0A=x6Hw}^N z9w)P;DVl?zR%U;5lXyEyu}UP}CX)tf|438bec%476=<W~s>Q+$T09zOG0uHn73pOW zFFbE2GAUu!ss6NF_l;lQ#adR$AVGJhXM&1%N)~J2ZO8d?8j5<TvUz-PBqV&ov{lA2 z!1YzVa_q3I&B$-H!C-E>Nj{v3{@ucdOR~;o9OPrAF+l7;@0k>9Z9V9T+?llVP_x4C z0@kji<UN@%HK<-XY52Tlm}gzlMh{r1>A7=<FO(=K6o8Lxi7;&ae6(1{R<2XWD{vBs zmpAs%S2z{Zwm-Aow=(%$2m5}p+UBF%v>tj=5aWF#CTV%1i3AE7wLjWGNOXE(8vL^! zrFKUN=AU^m9lc=dQ~`}}|K~v?lOkeum#Jl96?R4`=$6qkz4SE;Xv4%8QD8dmMkPlv zA8a`hmR0Q=Yy8<#gt<tA!z(G6avl(4^yr(Z8N()f)3I`A_gnRKnoDE+6#>p?Rv>qM z*yiq|PxXfuv3#DAm4w#4-zzs<f-5N{NCi$vW2MpL`%p7cL^jp8oyyy0R?OhsE>K9_ zXzD($&A>r^nvXg;2374*rLbPox?UWZ5jjG?72RDOnv6v4I=KBg>F4s<G`^>GU6<&7 zhT1Nv<<<=T76Jzo6LTYGNle~Rh#MDDRdJD#Z)4+U$?RVYB&=yjT8=N=_?WaPrIg-o zDRTds;x}_-z$0YJT`;OdI#0bjV{loFo7{r8PWZa7nPve<A4D(}B>IRs<s5fnW@!Yr zDEG%jA+yRGoOC5DhKwV!7GBD7d-I43)hfKe&FIyiw_k4016EEJ(U0Ul{gZ}Ze0r(K zzeja&GC-SUa|;1LYX@(w_RK2X&F-!-eUzd0{M7pPD^8Pm?Web+4hp;Qbuz2xg?kxn zN=g=jFg407md$O8|1U7HCM?zgnfmk)zKcs4x1iFc!PEu%#PNWZB+8p$f@F2Hgqp`; z7G|;P+vOr@w9#%zqm?7ddGz&}EY4{^ZcG3*Ez(G^9=dy*Nahqf5nn%xYs;&j@~Eu+ z`~{d+hwF3XmA{$1x9I`ZR5LcrMQafsX`7tBO5-aZ`e|YTc{#i8;;zIk|4tA>TRYeb zqz6vb<`Eer+y%Ox8c&*T*%eE?;o2|o2XQP)>%2m4qlO3)P%ws+n0=1Q)hGR8`MDYG zSZQ>^%_6&DoOG&GY3Y@JIqeMI@P?5kgqOg<CdmeEmkErP-O>GJT-~)MwW-{*fbnwW z11InNy73k(YLBF$$AMatMG$0Nt8*5=CZ*w4u0W5rhp;CV8J+$M1gGgB`K09bhk$^Z zvfI%I%ReSUmL#%aV?~@<p<%FQ=bLvys4gn7HvlVfLHXDZ;Qnph*EFl}QIc=_7NQ^9 z?vLfHD_dBPmKL7ZKnr(3{l79!A(Se|fZH=8B@@r{Yrd7M<I9nu_JpT>fS>irD>$@i zxS!tl(7N{P`6=ge9n+WWali7pVBz_Jx$P`F1ZaIys)?~E(%XR;0K^V}U0OwuZ8r#H zrSl(p{{;J##r*@w4HLs>ffGI4jksf-eQGJZd1DUQ@wewpP1}0x!vx1MKA@RB44egI zhidx!Ej&-H_?!g9eN?2{`Ps`y;FKg6a`ujDRCq*ySDfUd{&LZ+%KdPBbCU(J11YJ- znXNjqag*+^B3|BX>&ODS_p}>4@VR^wI2&LVStBoglMN|=Gyyc1({@UM`XyTgH9<yE z{vSJS^zUD<%^nD*kFMxiDZXgE;@2N!ZXlOrqEW=nd!(p)(uCOV3+G(3<g%&g1@ace z%$aTL8mCoYC@0bB)Wvf|;imRcMF%J{32o}(n`Uw`{0e74IsiIKTTy1owOPi!#h4Ks zKaiTdsy`43miyUXo4eqUjX+(h!sMd8C4^5m|LhUB?4qhXvw)Wt?m(`@n~20POO`3) zAv&!jv&ohN;0#0K8PRY4>M~5LP17Gf-~g3hCE8iolQVq!0TcC+ySsOLGPzUT`U{F> zqj;hH812@|_8+pzPVl<SFstosWXSvyEeP(0;c&qk(uTKmir(dbbA<-G-ytO_1i%^1 z_jFTx8JiCaxb6QH&5H7LB=DTp=Jn`ebq_nzu#o7xn$w3fxMwjWwOD6u0)_@i$VU>9 z0X~M<Mps&(8)LyaEAN&EimI2}V4MHGV<ROjf69R8pG0F1$XQP0rv2+u(y=4G14YC4 zP*KLU)3NZ~Dlx@q!$*=ZV$3gxx)Ok|*M+L&Y1=Jw*_`|kll>86o~6Zd^OPN}UU!8P zGO>--MNsO>5U<X49n;w6kG5*NH+5Cw!kT-fx#9OhR#rqk{wa)G6-p8$zh-C5F3nZn zLiy<--BSAZjHkd|89@M|&B>Z_*Q9$P2?&GKCQIRr(mH6$VkgP?MBUMgMJ=#R<bwyJ zm^gl~Y4K(qdfpey#;Dd=(;Z)|V*{Gkt_@@trmU!GdT*HTS)H3rl<T$_3awUQfyvJ$ zGoGK<#Z>nO(_Q-H-*97|U;^qiopcFV(<TK+<&EX-Irr$eq2I^l?!qIbA;35&9WD1= zhz|CMbug-f<F)t`YTf(TDXQE}d<_s+;fOA0;q$|i#gx+1jZ%ToL+h%N(1ofHsO@Hp zx$yqDy%G~?rD(s_pfpR9)K$xK#_xW@dAG)lt}@g>H~rA5aoN1NZ46!9AAa1HSX%78 z-kwIZ&*Mv@2VbklF4(fJGA>j6&SssToHFBVXBBGOA4=<~H6*j#RxTzRmAvBtb!TnY zZM3cDQoig0>lsdyx=)8nla*~}cvE{8{1vEM0QNwnmX7y+Us_&coDN|v3;AQ?TaV=M zxeh;8b}h2tG1f@=kaiSF%pv{9>ylW#wCQ1u`e7OHoUK?wD%+sUN?F`f$c-G-S{|u^ z(H^+cmQ{MpDQPYTY@^9n7YM`owN-?(Br}p#758}naIjSjFl1XAQY9`u4$=Vgv1~6F zT?kl?NR7X(WVhN-)n*2!s^a8XEYg-3pYC5Gu{dv3y_C|eS8A--;46ua=VC~cQ)aCn z@x!i38uu`apqAPZlp<N0H0}?*e8Z5D!vKt*tw9jx6<J9g?k&G#EJF`pN`XilTqC;h zeGJ(*(6HrQXb^gIX{`*%K6Xv?(KCP$t>p<zfqYWR%bJoV$S;DLqR$+aLx(`w6|aat zcg(8~@)aMDt#VZS8mxvkG7OPU?wpQ5Rhs;qWakX)7+X(eRQHJ6Yd$loWq{60@f?Z> zN3y;oe3bI(i^9J6B3cm>H_?=B3oJ|;@*O*zLG=JMzDBhA!ou^dFU&x}X5u$}68sj> z3OqN)a2bYxxb|RtC(<WRDSk5T7liGp$>Gv8<;_PB=k9eNEy<+Izao#9Ut9l{cvzlH z|AkQto~~mSI4pDMyY|;yo~N|3`)rz!P6f5NhDQprw>}jbq^w-nJ=1h<rvU11g)Ggk z;Df-YFY}zTezy58a7{j53&k4T#i!&c?R_)UG;m33{gh=7TiBy!_N><5X@4@blj|e$ zlD|84vy&FOTAVA8i1<(#!PH1q-tOkZD^iO448?r5*QxgIX=#*X8HeX!Go=_0bDN<G zx|6On=N_@{9b^}a>p)VLFFJza(0z2l&z}GbEj+}za1ZrF)~Y5x`>iw?(+E2de$9Up z!z*_u@`PObVzx5;hMPsdFzUxZOcxI^%vUOIPf}x~i5Cm76|eTfv2t(OQLC$cT)4`m z#~_OTU*hg3c0de#XU1NUNz9C!jc+ECr~=yMAwsbC@eIPiFs;$5O3*ba_j{otF&*$} zj9cCv8yn}YjCtXFoF~c+pZilNLTM6?OJR}Mtkc&)#tFscf+TA8&SY=9bov13lg1of zOsSB&!vLVkWN5r+dqH!+2RFo$iq!+BvW9{AcU$PXN;NG(WeI1s*!D=eVYt|~r#FAW zmSa`EE(Y1_uJ|V!M@s5b<>qfcdM3Q~|D6Spx~Z;58rEEUz+@-+8R79lq|OjEGUn8$ z+k?R}tAgF=1)k7FN(_{R8sAnziTh5NLd*{DRo4DmMMv=d5-wRiAA-af|5U$OgK!=@ zD~V(Se1v#PWI>&qe4dMrsn@K7s#Q9Pe1kH^Ymnlbsl26CZ#Rrv#PYNck7WYo9N6@q zbnS%6*cMU?JJ?9~Tq7*EgPP*zyp2-OH`zY?TCDOM^q-LZ&da4V#S$aPOY8$DC+(is zPp0+?voaNV_7a_Y_hRa1{IS~b44fT2uVNl8dEu>o18;|>)A)$V(pvh{d}iNp$kI)y zhJ5>q^fo+rM4mERy)*ahI`HdV8Fue#yr^iNB$rG1!QIBC@Av2y<=?j6n?AXrC`2i6 z+KN1x%&0px_IOC>tUxox_k5c*i8IQ}N6Z}P0T*WKgxAlb*l1`zUqM%y5bx>sXbm2} zm(M=w-OYz&NeewL&W%hleCWb>Nh0_%`LlK&Vc>&ku=eGeqRHL(vV<VpKIcS>cTa$y z)3>J50lcvMCfHvcPNNfSqo>V_yyvv&u`Kv%2RR0f&GdVhO{T!cS+}Hc^@OoniS&P4 zp@;zjA}?0DZ)1jYOzpg~vwx&IVRQZJ@$#niw{hij472j8q>RQ;+I<ih-)KHw>wmoe zYB!t;GI6dOmO6mdWlAK@cS<)ZL55VW%P-c`76)}Nis~woU6QP|iTj3J%Gw;E)zj7v zS*`RHlt7?OJgQ?k{YPYNKMo0Gygi=_tWn)}zYUY?vg*_`BA?Y#>3ui5zj3{G1={<7 z`NUX+fsrLFVTvUsf`GI*+q|oH?v`XWp?OwnV*E`#`GlasCiEA!P!(kS_D<Uqye?Q{ zGJ<1Y*T$Nqt4h2W4Hqwgt~RT*#o%fEJbUBdOKK)&3}~Pj>xlkhyY^L5#FP)AYSVX+ z^xpZx!X3Tt3A4mtW4SkNl#GK4L-N=8?!uW7c}MwZp71m{(6L?4d)|e@f&GE+&jN_Q zf9L#rx9@eLUE=CxZa3cz8?4K>OQ~J3^)R1#%BXO%C##LB_2}e@Q{ZMT$ZGkhz7R)= zTM%?MKXvu$yP4-GI1@Cx+%yUw@43<GxRc0*zh4GB<12>igmju*mYbZrqPPkQ1#buT zAbhs<xKs5Ee#2IU1(c*Nrk=Cl%+!k3C(rW0r|4zz`4$&zq#JPN*=6nbt-;!F8?Su= zpc$^m^Kne~+gyz8x7)gDT=l)=Z{TjQY7FJGe#<8k@%ph(B<=|FQm)|@K7U0@^Ik7+ z{<PXGOt!s%_j{%)yI_x+)ZJtnAPfQLVnND_0KWgqZoj~Pn!lQevGMf{ZRdS>YhmIw zt~=h%J4f22^{=rr4-qrr>KGa-?~pZm9?e(5QiG0mJftg5%`0x!3&YhpnPA)<-+ND! zXaNZmt&`B+;%5D%Yj(wFl#<z!pGmcq-1@pcO$5fj`9A($su43Ng!R!>HWMyUQx(j( z<l1_h({WX++4b2vv*DKg(w7vS<eSbXp$D(PtPe(Aiogyjx&7b$#_@N-hAw+#A&hi( z*IB$&0%wsk%ms-)r0@jAf^{?hkman7y9dL^DMt;07FtF$&0(hv^2w&l>NaKtj8wx4 zj;!u)q>Z8c8?in_vs!|;RDD0#2hlDiQU@Z{!Lyh>gkNbNFc*%Oim~stQ6lS&qf4U8 z^Q;^x>>5Q>v8G+!6oW=c{}6OM$m)`MeiA6kN)dXBWSe9#g#EaLwm%Ufnh%DpFE2K| zv=ImpP#Od&@G4MUG(l|@xK_MXc`wc^z9(J%nwqP9?3IlhB!bI|K!B-gvF`KrQcO}5 zp6~Zw;43*>yQ}>ftC<q@y-ig`MP~P>S4c4Ozq&m>QvM$HTjydwA(SIHFB@hVFa`2j zkVg|l`o16q08tU7*I_{j3&|#iZNV2jMJtOz6&I-u3a&!(Vn3?>txpgj_WJFz`E3im z`C4}JoN%YkgF5;uei7B;P(PH!wZq#?N)!`$>Xdm`0o<OsUE_A7<pQc9C5RyTedtKl zxTK4%(5gsGrCpv0S%LxPww7!wesD#VR1dc9aKuR%*u6FXYPo3jMxd~uue?L;mSkg9 zcVHy%$F~e~=ES6ytX*k?u{uPl{L&-&vV;>#0qJ4S#Q3>sf`BI8X~)zY9Z$}nnamPC zkxwF))vueDk(gqKY?7RcDV<K$*eUJ$m^2(}<O`e7=h9p0H;Ewo1jqxQnj=}mc^~q( zf3Z`<dz8(W^Q#SpP+A=^CRjZd<N-d;H;^E==*S=$i<-O(#;3-fi+|k>^t{acc_Y0P zVp58s`&foME+3z$9Xg^Up;d0(T_<|Cxql`w>)n6ScFzQT3Iwo9r;{w1md0V?tb4&# z&UsMVW`SjgJ~&c;`?vPvleXr^si&NDPP=NK?1@UA+xLLq4sK1Fm<;?+4I7gtO7JKp zp2W6)&~mc%U=B*ZyOZVT>v{QAYMT(DU{8qnwn)m#EEC2xUFQqm;82isNB7VhMF?EH z_L5?RhYzs#0X=uR2Cn__D<i`K=vXl1w}>rxj^&Npe>;R#>^1Oq$*jRXR{!;CyG+)v zbG&;2t5;dbB=gftk#2^I_J2Ce{!NZwB7#L;Nan8#sX+`m87g^jZJj@o>)+u05&ex{ z$V&W70TRlv_ia@&%Y2hjAQv+7UH+ra5LH{=I|i}lK^FU(wDYd4-JV0qnS+QJ<nWZM zi6X9y%)K(X<CU#7K&^{_>ldf&%ba8mANuHm6b0f+9pJ)gjOuA>j|KT=iQVt7DNxXv z=Q2Xd)mAN2x7=*ucg>bxBd^k;5(1~qT^fn~v|7);{_Y#ir0U;mUXP9VfJi88qH1x? zp&R}J#LAhh%H-H_9f7#ky<E;s+5MGZA<xlaFxkmvJ-FK1J8l5W*PX8YQorp}xqdr? z&vkU7BCi`gV2L7dQ75s2D*a^IzuX(n_`t-e<i_6MkT8Xz>sro(_|ZL$y;E#<Gd`xo zC)Gmy;yfmHmaM#O{45vFz6gZb^jlLlwIW@R3Av0E?`6>Plecc@pS;)bcu;x=50%n5 zG}_lZ#^g>OJMM89l49VC2;ovu�XELZNSZ?}9Ik0exo{eowQPUUr_~xZXp;R(VWT zs$&yzVZS@JESVUdE42%5T})!Vdl17^R@)V$)m6!i)$RF8S7pQfPTZN#NT~q`u1-ap zlE`Y(!h~w48Q4NY+=u=;(hfb!Dp3aG+oS;u0dfsho4g<_gzb6ih`x7oynk7Bcr7HN z4m6T;*IZIRyauKgXDv-mInbnG^P$^uV)hagx*T`Cf2((m@!WF<jrt!@h7Pf}H0*he zK<AX!#Kh!}in#X=H0?Y_PU#k@vo<rdd$odN@3%bRJ-%3T)9zK*qCGjo>u89}8o7_` z6S@|}u)2sN?&WHzM(qzXkdf&3lgzec7=PFTcyGX|xU?tJ$4{=Oz5(B@sAj7|rM2bd zBD%}$)#Lz-+PpBX&o%#Exv%nV1s&%rw|*X?9IcK5zeE7$&L2#!y=t|=VmX?qp5LOL z4T=wId;<gt4i)M3`_u-nkc;--LAVo^nCAu;Os-IYYNmYSdPAhb`=<MYWAOiIW!f`p zG9Mw#x<3#7UCdM(9Tw8leTGy;qrQ{sjZa34;gZrd;i#p5E6&p!M@M$$utn6|Usv?E z7-Vrjy2%}_Gy<x?S4}?G^}7E10lH77;@k>oG878Q<7zdRxdV|BP9a~&E2hZhl5Cmc z<np4fzm*w=VA;I--Sgq`^CVwF!4mVJki#(ad)3Tqmu4hdP~7;9<(S1&kq3Uxk$P~{ z=Jk@3RMT1uxa<%xR_Lu~Cz@V&!saCqQ%x(I)PWqoa_v^3h9t2v{J^yDUn5qf-wm6j z=1+Cpeu>(qRhnaQ_lMIduL_R0k^GhEv?0#`mRe?{cW+OXI~)BZ4%@Lkvh<lK4wcJ& zqi>y`TNNk3NQ41!%=BRUaWp{0+kE+t^G1QhUYS%(9xZ7z8F8y4J0ot^@OKMA>p1X^ z(_@DSW{v5<ALsdR$g5saG0gv><v=`yn>Z!!$Ai6}IEr5oKi2#l3;BE(NE8$cds&=u zn^YsK;|XT;61kA$rCr;{o#{Wkp!T?ubBW;-a_on2f;lew&j#sIG9o$ujJ_uUTkMf! zHuo}uGt#VMr>`>enFyGJp46IUrb=K?*Xb~Av2RxtX-pcwtlzY*(a<}xp41EtkY_~5 zsM<$sIh!Z62r+f^US)cb)l*lnn6n24A;ZX~wn$8Q)AyW@$FkEA{)_`f{a%6(*haT$ z=mYpGfF&b*3-?bntPF;H6ZwHk#8V~<XbLbJ=r``c4{lQ%JIE0cF4PSS9sA~n>%$O2 zA|{iHbz6ksdU$C8ggXw2)!ve_B8*1=;nXv-VYM+^-5u0IUf#oaP2IQ?9@Vy9#&2i{ z_?0ubd5pS8J}x0&nt(+upE!MF3wlLn%5*AagHzlCz9*m<z7iod)&*q+yJP{a<n5?{ zq=F52Y|8!{HvJYh*TLSszK~5eh@82MnhD`w6eEl{V1@xh0SY;h|BF=py}fhTaKe4e zjO~s`Rj$(}uWM*!{p&CM>a>cy%Jb@tz_^FpB1EB-S@!M*Jz|RR*(p|75H`NNSH1&K z8WZ|j${w00=G;}(+S-RTh4o*xF$krj(0<b}?Ap(5hfjzhi~JX%aU(rn@$f7WM54qU zFS9PBoEgSOLFgFzGJxG~Y9*3*X^A=Eu>+WQO<blax>F2u*7k!3adY6SF2@1y7iN}% zolj5bv%}@h>G|Nnyvhx2ZQ6^ZkBAFm!fYz8PpT4fk*O)4J;83zvfBuZOrFl%N2q7= zV(eeovGq}#RfYqjos=pSr;F9g)eVksKga+vb0NeX2=5#*2K5IX-gh{@RpS&w-LKB! zI$c)gxhz{SDy^AG>O$f>i(DB>mIDs=TYl`+00O2NdG3WTzI1N!fASvCYC4A{+Rnhb z<Wly32R4!2%!UgI(6B<Mw7XfYWF=$!Av2-=Mx7?-;DKox;p3*WH4zPk9X@;57lEE_ za?i31&Y#6ls?vKr`g=X?deSX;;0=F?Y=~G%F}ybU5Nj>d6QpuFPeC!Kj!2Mo?{AJx zo!7VC9ePc>y9kjlvMk6W$#Wln2OG8o3GBX}($~ey6MA69lqQhBsoCf0-x0A9efJ;U zr)mcU|2e0};wg0nW%FIHrf7l~d)Mz+n{T8K5!`r#_AK_y(<6rBZ(QD?Ay%_=E>bz9 zp(FMxDVWUv%0rHN(8<lwo3lQs;A}Fj8*5807jgmapTGTm`+0@~A1~ck`mK$-MCZ3{ z&4QaY6-#(J=+tGq(Kd^zUIqZkW6)Vgy6y$@CGBTgh|l4s9_Nm~b~cCn&f()Ac5@kW zZfdKSXB6cld8*SduXM=P!@0V#ANTW?H$?nu`={uziKg-pS$bDiiW?qtm5#OK-F}Wb zlhvx`UcT>8YueVB>5-pe?y9b3MpLl${FzO|Ep0)W5iWr&&C2;Fm61oBo$WU2yBtP3 zSskKhy@pf_(|eEd8bfj#)w(?2OBiQojF4p(yVEK6KUdek<LCB7*X89rrG!BZpi5L? zbGXa*CXvX}=NWrV=f;J6N5^5L!BtPJ!tAd!$$b+`t0dhWzBlzJ%-0}!R7gbVD&6c4 z`0xkr&~QpQ*Z&Z4_doox`~HZn36Z&Fd~&V9Z?#k1=UsFbFyqF-h!7!ml&T)qe1f=R zJ%w^&{9xDI_(`WI5lCP=Z&6Sk;cYv#c=c_3uC;$_N%7mC*UP&aGj%20mVCP5$Y<W1 zzVogNm<gCH*Z7_T=QRM8=IG9=B<(3+$S3PB>C#j0BlUXhK18$gE|pcv`7kP;%vq!{ z5M!(`Jp$M+j!^2nrWlwLg^eW2yoDH$pt0@L+3R#(VSs)!+WzzivQ)cfmK;{cXt?r_ zW6cFxrR%b2$_E!AI%PC`r&@;ix-~r%0QNY9?8Dmd#khwsy5bL+(g(fcAdlHDxDU~U zG>1I=oo&R6e8J7mXhuy*Ki`vAGO}R2;U&*XTr#!{xqQD_i(wG9gdX`%ATb`*AsUy$ zUmI<r0{w87EqbqxiWz+5in>P`>Ax~~$b-6+p<l%OvhDmF`&g144}QOK5xpID)&qo| zmx?ccn$W=4t)$DQEEkV;q)Sc~fGGE>s8#orGQl$>D*aB}^P@KM3>^E+59$q{{>zVg zg}l&1$-)IGIXrdsoBP;0ABQwy4`7+`R!K=MXev)3G~geG?RjoaV`g4TNA<QV@FdAM zd*qlB4lPkSOFE=3;^{%)GqM4OLsknWp2f4eJcOnWd;3-H07KH$f#v${AdAh2P3P)0 z+$eBQk=eW&UF_Y*q1;{}&8Wg!_Y$|gHA#?LNLrrFQDU!UC(Iv~)C&2irGmNdvT)>~ zLiwSdeHPc~qk4)*W5d3o1JSn73rSpb!>(CHfmhZ1B=j#1a@E824T<){q$5*Ufk?LJ z#wJa<-LslPVuE6vy86+>UlXGeHC_z$V2TM+8p3&g?2no&CBPT9vU}1q3*X;^sJ9@z z+TtvDY<6`yxFcmhW`$@PAB07<p%TeRZTmP3xl%udpMtkAC0L7rnD4CB#IH6JeKm|3 z3dyruCzhNu{wb-4Qog7r*xa`F7RCA7?hqohjSD^3ekDfwh^hez`HJ~35f6vy8*ur^ z615x4x)qdY^Ryq|%8Zo2g+?zne+NU-8gH^`39J|e21e;A!J8fx#4ju)Pwg*6z!4`J zy>3Z@9z3d3(~GE;B397B1HnaG<~d{il;vi!nWH7P5?MhS@zDSsJGmPj!$$21m#28v zb`7YlNt4D4uAbE)g|$Ea6)lMhTRwTBsXLoI<WX-uC!gL7W68)IH4O=zpo!XrQo%Lp z7(WN<S6i)j^Ama+0Rio#M>nrE{E*B$voEszN*|NU`>wdB5%3L7lVyQrC8_{42OAfH zCQKIwIrHusdP#1Ede5`e!S?<y#2Av&a=ixQatm+l8estjLh)^07Awe}D#RPVLuQFV zWDVNiq>Lr-s91R+8$UDr!)U&J62LLj9<eD+Qvhmsaty<W(iFE!kGRB*!8#wCCniEX za^ZQZL&X0>m;Kk5M<PLR$I_jqom>brzrj6YKK)c?<BGTd9}YFq*^Yl(#tLhrtp&Sa z&2&?G*qZfRY85P<C{ZMs%cpvzP1rD_doMeE>nsSL1Ro~tw<!pHm}^3INkQl272hx( zLna2w+B?`zIB~7~vM27Psd>$BJi4s*J}+wKVsY^9Pw0H{ut=aLq)FH*;Z@5a>gGUH zG4zeOrt@YU0JtbV)vGLZcOsT(8|PsGe3dD(ayhcN%jt@xXFZbasy{nQpoG(`(s|5v zR)W7oTDp-|`J#SiaIjbv($e2^y;!g+$v<Rxq1vWP#y8@jVc7WnbN)yIyu;NOlH<!- zMmEcJf`bDZbS+fm5&HNQZ$@#&D=hrWYR?qz`1kEs@w$p8vI&dGX#-=la+Fo6SXcBa z=6<V7%NvE8S9w;W|A9mPa>D<D%>NWX0)*Gd;6+iSPWT9f0rSw;c8CN3nWo|94#eLZ zrcWVD5J`#3Al}BKSB!knieG;Whj|piqGULOuTDr93RRM^gRMpP<ISS<>-1`!Qta}N zKYKEO1{J?mCMjNBc4F*c#Pz_5X8nL>=YH<NQYg37jmgc>o=SOr&7p(#+DnJl{ROiw z#K~;h$B{#m5<|qtoc;L~8W5y<vDjkuSaO4*+4J=Hw|n}}a;^Eb4bN*4e<JVkb#s@o z30wg|4UJ`+ILfJY7p7e3G|zpmuq^b={$%VnEfhJ;1ARG;!8A`q&ta&d)=F2F-=fDh zcjAT2i^zfSf!Od#4Q@G3jwG%REa%#Op_FgTF$v$J0^ClAX@sJZWF{WW`t<oL-otGA zzLjQ?gPp7${wsO;zrSC$Xa{6*Tvqr7Tj`X_H+yGp=gCL}&Mmp+ekAR;;QqK{G5)(9 zpILR2WDLs9?MPch5<VgPRG<2L$@W;nAaU>AM*Urr`u(;e;~pDhl8C@Np(g&Cw@)$C zuq;NM`P+4t@2gEV=(t{B7b(s6AoXS<hUPY7vmtj+KjMYKKIxJ4LvVoB)`@XNJQpi_ z=G&@uQxD*`Wny0F-1_0-MR|}ilM8L6fVTpq8NF$+M}bZIu<3yTbqae5!KJ;x?%mJG zgm<p*(;0cxe$SdpobYb5W5B#1H=F&Z*ta$>Yw`ERQu-ZIA?pnQ5gj)>S>Ue7=O%)= zmcRuHB;y4dmRF`d;K%pkG&J>3VqZ!bGmVQl=P5nKaj2=lfEn^!p2|dx&soB$S~KK+ zWaMW~Qn=jzt*`#yw-Ff?u`MdJQpH@W-~Hzr;u*OjJ(&I@k2nVp^1#EV#Jf*I)^H|$ z`jnaab!q8x-`hXzv?$Yg&IQ>nlt%t{#5QjjR0O%ybWL{k@^_+g=`MA83joMTlIJ%^ z{MLM<Bw>1rk^?S3UBWH9pacactfw^P<?lLJLEc1H6oxTJyp<Q%lPUY2q+g*HGo?mC z49%HxeyDy?y~t_|t<2rP`|_LB-nT*+p}*G$2K7ajg?Svv<7HNolN92WNT$TJ^)JF= z7Osv(L0TV_6b)=0FO$%nur^se9aoV*iq4zX)Fn+0DlqeGvS&E_#eQAD!@Tbxn_5cX zFKI(SDLQtKylel0O3;gkAqEgzTx4c=0-xPd^#!V3JuG}XAPBZ5+M5#{z5g4?-!e|C zN?A7Zy6t~j8-GXG|NC-s&tv%`IRp~Gkl-)d0>yMgy1NkGk+N6#VRF{vdHUI0DYCQO zC}>GjosuiFR|A*CW_RSseeqB=W_!e2)3)3qq}F1ij6j1aB&RfC4iq@bn^#d>PIs+S z${}z7UqoXuI_4dLuyw4Jl!bhuS5lzW;}9dcgIF&$k;7iCcp8^kk{d2A1Ea3wQ_^A3 z2bM8ib13u4YaUaC5Z+G?HEl#y(AOddy-`d+0wr|!7XmPKBNt^lAuY>=6%jUT1K6=u z^+BwUC5So%KGhe!ODkc=vN1$|7OoU|xk|J13lD*Hl{kX^y;`W{=hY1A3oJ<$4OSM5 zEP@m&o>U5INICuAHqQ_R@?BJR397m$>CH8`t-Gx5+0<#_^VD2q6=Mf)G3yR3s1~}r z-4_m|g=i;UrqT|z=mXQj|6BO^zl>#vNQgg9Kg3>19D^V2C2KJF1Z~8>XFRdT>yKe~ zD*m&IY3!sVFCljKY(XnBK4-+;xWvBri(wfKQAKjEOvcw^_PUvl16oxS=lyC>*Sc;> z)68<s1Ny5!rsb7Q1?5cw>hRSo=`8@Meuvj%=6y2Aap@`J><D+B%HGJ7DO%Ku&|!Dk z#S0_b!VJM|S{_o_1rkx|-|<B2v;rIfdgE~>Cg>@>ujPNVyx}tnd;zY&0thXZm>uu5 z?Y1nvU?vzq=&yr^-23kQTH^_Q8T1&EqV<<6nLXnJ`-83M`&a8!>;UE7aT#-6Tzyj= z(~R01?lXJQWHIYZu=;puN-@*qEwuhv@qi1S;OBd~lM&T)F9A$MH!3o)$7tRM*uAWM z;va$$NwQn#voXKXJ$oy|nDt7>9MF{@V9Mq<?xD`1WHWMh#FXt^i}P2`{=cv5|N1Kk z9l>zxZLv*v^=lL*M7PdCvkyDBB^H#KXfJx}-z$dTPgm2%nH*Frpcvv5;{?dxUvDH> zZKlb)YNAwCY@R=HFT5i@XVQn*qbDCx>fZ45?d^m6?B!14cKYc|G>2j_<w&NEu2ih! z4?YIGDLUwKPEvwGSeSfwS%5V}f6R#}J(Vs8+?5^|v=$jf(p}s(S_cV=qZb~~ai<DW zKYk&_m%Wn(bxD0U+xJT4H^3>Rd;7Xf=C%{_`YIoxq1%XPB**?WuLm8JdrKTNGlDgy zCvoxBmUT-}T1-;a{MDrj95HMAqVF@O*7SrS5T<-D3<a_60gR_+>K-$;I+8!aEa(;z z1HtDDG-3-iNv{VS_nV9o60k<U%b|bmtA9c>BDD$wNLywJGfHRtKRzMc8gNTv`G4B} z@)RVH5mkjP^+zTHm3OlZKbFWijcByH;o|~02|06<YO`Xfot4WWgBQE#%gJ<oNY}3B zF5{es{C;B8<9EcyB(z1B6wD#(`=%wcv7tenp47u?091|q++Mar&?C-ccK5GwHY*?M z546Y+4*Z%;CJ&gYvOe8><;%%pYAjEf_kqj?Euq#QOpPi32LAfBDxkDjG?`gz5>)Ap zUfpCc*iBTG)NwcaofJ>pRgL%9;hWv#MN9vk^meYvaiAe*O=I`3vR7k}k7>9Q{E7B^ zgA#OrOnJ?vvLhDwd?r)yp^Ut<D kRqP^7l6Ylb!}XX;@-4>1Q@bdLV04AH#1F9 zenH$wG(_74U(SOjmFnyQc#oF;A5G=|?+ql9NBKW|on=5&?Y{N}k&p(F?oztDK{`y3 z?j9ImXc!Pdy1S7UX@+j3C59e`lxFDec;`9i>=W<a&;Gc+{?}Uf{jckHb$W4d;NuBA z<P!|^H7IX&V1{s4m#YeT4%kdau%`v_kDK0MGr7~}uQdHJi%rN}uUE~~!&D!7UJux{ z>#I**uNkth5gpn&{k}XL-<9oN9!NveFDlPS!h2eQ=PYYT>$q8yb|=1XZ3DTW_w&Na zm>oKbpqk3kGW_20)Z8<dK=jA_yGYJoIK{f-F&k{J_DtA*X&PGYXH_UPLAZ|EeUKld zz_GZw@=~qg^VwT>N}4`%lV7UaR&|YNy(1bB8KF&i4$$v?M#gc{@O5qNXVgKpgfm3V z9hK3+iB{+Q`1I?hK`};L0m&7WBq(i&+{Bj=F`Hh2Oe{(!TVHIl=gL*^t>){O2fQ=T z3L$>V{q185VU*MF?X{)3hqZ)1ax5NanE5k06jl27tgk1$n*Mju<iHe>9rk?H4Uw6e zHIp0!Y(QLgj+m&llc~j63y(n$Xq2w8um>mko#R~>6#iJ52sC>^4=kf0#tT)N<@qyj zZjYR73s2k6iP^0>JCS*PWo?qS9|I^r_}l@c;`1dzQQY5(_*!Wl8H%b^j#Az1LTz3E z+E)6e?AMwNFpg>xpyx9$Dl*(0m1UCM<tKK0i0hL-)O&vzu-ZQs7-f5c8WOYU_EO2v z6yJt1+EA9Ou(#k<TgoDu@oHSl=unx7d)nqp{Y7<0-iWp#tgmg;pZf5LD6HljKBKf5 zASrpI{S81`mED66&ab6$QTlzWcG5^jn1C5=nQ8n=b>Z-{=i9{e9&0?coI;KITS1UL z(gEPgFW%k5p7lnwmqILqIP(9fG5_gT{zE5kVrFosq(ab(l(I>LSK0(y1o+4rv+9#` zcKy(PmjUkWAY0*}Ro?lGVwiuSoU}6HVwPs9YxlZ~j(Oib+q!QgO*rLZi^sVwRnpLE z+xy(K5b2_Kol&W|?n6-wZGUd^ChIJIU#<M-ag<@yoIK|B=@;eTx6GF{uv>-(wkwxf z%02!M23&YqOv@ST$8Bva!LPmFl{A;n%hc=Hu`@9lW!?NLS-lAk<*KeSm#DZD;}Z|3 z5goi;oTX0~(-Hd67t<pJrHWE_;ZB&R&nBzzBvi}O;nbu&Sk7t(m1---40f8yuz?yh zsAv3Hx)$6<^KPC!FHL8KKc-<vMLjrUIDV|ZYvM!-Mf}`Tw1liG7qk`EtSlM?$^TR0 z@J}K8tHQx!Lkhrb>9gaH8GeJ+@GM52TM-HX>H?yWhH^>)B5_ply1o(po#+p}fH&xI zEws*zqNsg&UY5yCJj-i|SfYj{tGbwCrIr*;$rkx(VRn1IXxWq~u-XL1>$I737u)xr z02UC=se1>{-*7RQJ7f<Hz!cK(37;y>Xf@4=MF=%se0`1sdgAuTg)axAyMX`Ef7rkt zFV1RO#nor*9(f1iX%`c1iX4rneE(VoCiMgCgV(6971e<~z+B)%RV#l`012O=9k5!x z4!4HLvOcYc|6xe0w3z)9LsgM>x1B_^H=Bh_c6{b4C_%9kYij_T9PxhIu>zKsyJC8M z`?@`OCV|=Pz@DX1flm47ujlJ2>!0gotgH1UQ+@Cjp=ZxM4aB}?EPGP*3gpwg`kQ_7 zR{E^#46epKo$BpDy;YwS`tpC>#{W05?4&~_=tXj-Y1pmn_|Q_ew!x*iDdxZe&Esy^ zWmwU(od<ij-&8MwRoAh5yr@S;lb}y&L%$ryCM2^YyIJ(#{~naAE_ZW-JIpurLtX5y zo&2K6qBLI9tuar-Qh)AGU6FiiiS_w8#AUw~g^QA*YWb}!Ugyo4!JAJrc9i%v!Li?h z6=W)4?S<(kBk^6JBIMNW=}R{)^u#w~){|e$wliN<$WL8T4iB$+a+$X%8;&S%^5TZF z@f?7U$5h_-{~RvIv^r3ds6RSto=2h?=#zKpllD8cES0T?cE$Lp_fST<F-enr&vW@G zC^hVXDv0(dKzEm5VnFX8dk(3KaP;)3D#4JtZ@%72=Ixi<l8I1lfx{VOglovF>k)sf z>HR#SbE3A}voxX!wwPFchcFuY+@B+`jc??{PMu@4E~SrTny)^jNKlO^4FBKI{_iI- zLZ?yr7h#0PJak@h*&-y)?24LdR`brULgaZTC_r)3N3REljhP}hCaTSvbxAnA%D%jO z1xlvcFhzk#CA3RwV%tI!-lP=x9&ly~=EBbb5Ws8`>=#c2jkK~!%x-HgmK9;oeY5)R z=R|AOQ~`HwgqLUCxVb*HBZ7~vmQ&>I3$Ag%EA#dBGOS|JCT=PDgv7}m=boaWA9NVG z^O|*`H7yNcpqO2ur7ic?=4j4ab052gnBRC=p;~Dc8};g4bg72c=Dpg~&c^y19F#Yk zOak7lMT@k?XXzcaB#M4VCVITd70s-LhsdE}e6K{9V9eA*s^=HFglsCh9Nj^6J~=%r zMl|gjX%@HOwp`r}^(@Kn`<e!zeys+|^)+uy1TwJI7ta|pp+2LaNw{@ZlF>s=O5vda z*zIP@`oVluM-IBFxn{5!<}0IcgQN%Mx~^#m3syNSw@ZRIN{v-$udn(i{K2;_3I50I z#+tM(M{+)sb~v;}aymIQMMVsNf7vXdbCRJq>ESU5yNU^pd|3jp#H3~h{K54t#l0e3 zGp$Nk(pE9o*`qJd>gh{)1?m-l^|3&g?ujw_;j~(!Xrr0msDW;Ub<^wHyBdr7t>#|% zjfqaf($(wF#l94`?zj8i#4RtZCOl*VVw^LWw=64DnvB+&f26eGh3P*C4Vx*->7j(o zy_(^9t9mN>;mHGL%S74T#`aP+aj9;BKDHWTS~Mq#<&s1Z)p_c$wp`UQ$>_nMA5EB; zSVUmVZw+cuKI+w2kftuW`#Xc^Ks?r*a<(k#NP>ryq_GGcTdlm2mdUw{H)IhKG{o{F zivk%_9CZ7;Ils#sgMEcuD8wDQcuSu8?*G|hQXNow(S0zL)P*b$%0j!*#H4sl>p@;O zbFhx&hs!Og6r-Eflmbw;Q}j3Fq6R%;Yw5_p*audrbqIdE%~0{@nrk~+jhLWCI?5Mt z`(CSMtvsAgK+_+h#SgZp@QIh)E*BAfl)$~+T|t;}O2zc?2oPNA>~na#lp=KshZZ4C zI#?F{AHf$zr`O!Ryt2QReR8rnL_=)r!Rg&Bj358z-E}gUtk+z{U>(ycQbf?EeS~9K zThu=bacLyNq}ej_m8BKs^R>%^V>u)U_DrK-PhaM)K`fu&wxE}57q=3Lfz0ZtXv)QL z?LEf)QY}3UQZ8Cs3sST+vrGHbf`87xh*(LZ^p;wv88@-hXx5sRQq*=BG&nF@<0E`e zC(GG9wl-7wc=6K=#Ky{6evFZrUW?p!uE0+b_Oh*YoODH!e&W1x;&k8V&a{--WRz6{ znXbRSJ5Qa7GTZk2xTzs7)MvIedxf1>N&V^bU?igpV7OvEQFmM&!$2v^D`Mg0s}D1> zX_;>QMWj9&etRxhQ^$|ZUJ?%8%JWVfG%Cb<Pe)Al#&U?+b4z~kW7qwLvncF-d>F(G zZYgGAUrh(+kj@2SoSsuvhv1)JU<Qn2iTf$YWj3jnp+D?xN$2>jeyUWB5nqdJpN)~) z`ElldzivO-r$HH2mQ^a`k%IBs?*ZFb*<;CTOJ;Tx*YwXfQIk2=tL2mjYj5c7GOWSu zHq1IFVbuQszu*)q4h1v-7Sj(JcSn0>m+tgCvW)KXND<y#%F-v{Iz^;yN8b?JO47~T zo9)_Glf_^M#=HM&#Q*;{e&92d`azzD0w>zo-ZH1n7V%chNK7FOB9ABZxZ<I>_?)hf zRzr9Q-&<T5A^$`+Lsf(Ci_#nrL*<a}^SI4KJud5Ob?a5{+Ld~@p5{z_S80JZKW}(m zil#WVwbwM@o&NXst6p@UOJ4BCZn@6^+vTyhq`CzS^j^Zl=Us}ZES-FwSX|^(R88;M z7EA2#A4F!XLu;Av&!q3*CjyF1V|*iWRKc!4K5&>W2BW;2D;Yw%aDPqA_#BBMtAgiB zTWvIFQbt2edn&IJtrtSnw)O^Y&Ipm0yYLM5WdWYCnSarcS1A1zh^fO7=Y;rmRz8p9 z%G|;+(#Io;W_nHd^847Vs|Vwq`*Bs;?L(3!^K{82n`P#KKP2eCrm0M`$n_Qbt4F)1 z;On%eIk`=F9M)JJLWOO5kK$s)7^wXhj<aM_8*^L_h$rh{hOm-lQu?(k4~M{NB&QvW z#b17SLNfFpMCZRatX2(Pr!R-JM6VNTEwD&=iy=@ke#u>OsKA}!W)tzM(cy1v^EJPH zsV3iwQ%S_6K?C*i|NplB>xyf8(}}tD%m3}>ZMicifr)CpWXaIS5aXlncI=20(`SN6 zJ}Ji6Ia)KDfYmch`X^m|vOkB~ytUHzGe3`d?c2+yCsY<GzTJi>3b)A3M|kVcM6639 zRJ@s6izYJ)DLt1!v_`+&Kc|ST(wWhhGb?L&e<L8GI7wJPM#tPJJCG1pnMdS*p#gO^ z)rPeyX;1&M^~Ly#`<%`tjdE^(5><?Gxv*fV{@CWv$3@t0B-jWm%Gj9+z1~C?UiIC8 z+5~X3s$~e$T1w4usTL$h!Wj*o$4&y^T`#G;(M?rLUlwXyI;t%<2^NC1%zl|?M75?6 z%-f8`EfU9<Bz#~@GoYDfnQ--bUq7oJYN06oQ_(UP%Vpv04ux0rhPqiLZu(9>hL(8K zpy2kfLz>zHAbh=d93y?u=sGQ^<Ks4Z@`+ui2)U+GpeA*XIP0$T?5%YMwr|XwjR5`G z7wa9fR@^4SSPNMt5n%}4;_PIag;vq~U7w}=q`3@^KIzs|S~o+b$;!J4Zus-v7{66w z1RUyZrPuLbG#~vm|1XxZY`gSvCTJ3rea|tEpS~~RxAJ)H6~QYdWr}andYzmxDS09e zI5$O13EEF!b2rjOMcLkx6t)~TvEFYLrm%I0?=Lj5OWuqt6(YBKUx#~*mffN?X{9^* zZo?Mc^_!3KA}08=FI<ygh5C+d%=;9yusU&}`>_b)%xJNbSHpmaWGHy$6w$m}p+za= z__jl*cv4GRQu49&G{Y~$^zS+z_XH?wZxvo??T8=F=Dq2QkfG|1;TXGg79kn1ns5JT z>B5-C%$UoMsxK8gbJbNTa`=V=lh%{Omr;@k(`i~EeuSZkgeo;*%<OcS*pLeseeT1x zNsyz8cm=4+kUBsKFtoVbzfs<}u<MiHApi>+FZJc24^kfSXKQBinZ>@loa*=Hjc_MZ zr(`;HU`+oe4;^_%VP;CIBKEX$+Jx5T=al(A`_OXLcii419+vzACCd<8mu2_BCy7X0 zOtjeSX!k`pmkXz!(CW<q2@xPiHD$S$(Sep$C4w}9Y(@cta0IPCd$elqdNlI^(Ad{r z456^B;TMNLEzaA>2_Gw?*a!#$tjf}+N<cK0x|LZ#@pM3)G6P<RG7`Nvt=C-`#dUDX zjZ%N4yoKn-Wxs9MZ@7Dcvtj8c_{VaJ<3u2ume_Sct)c=C+TN|y5lY;EZ~<>yoW$nT zhe`UmhIFJ^i68=L+5kDxEU)nU<AYz|fbXECWKVL2)o)#MU)8Oh0VRwPTi6qFTu3}< zc|>6c8A_eS;TLm*H`p2OSSOnp5|z$Tulj_!)gJFEAI*Sz8A1ImOZQMkbmWF;qU+`w zZHkb?LaLPC3M+sEvQLaVDj)@LKUlC`YrL9FAv?w`X*IhJcP+*Aayn}3;%?ne@a|mI znY1H>Zb@D?*){>%Z|W+^y)-iarWeuq5cwr;(DiL=Si;~(dm_=tpP5_sh?KQ&`bhmS z>BbQ|V92xpG}1AU93(Yh9k@y;7T~EV$yTEy_jCo&qx1T_jGxf3!tSN;mXX2Ply^K; zId9gRE}t=A`Yk+qQQ)H>W`nrlPj!e7XKLU0u!!5NaC5Rh1a)phQ;fKP<%2`v0S@&g z*(6?UHcrIkxO0qcAjKw(Yy;JF$GLW19{LmwYs(!uPkquKQRetu*H8y(M$w0*xJ||0 zZ`(=3$~-q?fMhTv4>E<=WKX@@N@TUbL_|uSFV4Or#lYdcM;cq5+6-3g44*2rdU7j` z$jN<S;z>yD!Kvp>sD6^-EQ^xOLqnkhudu5;_*7?LC|SN?WN3f>b0>Ev<|g01Y0eTL zEL6|y@Z6wJ$lSE^3kwqq)@wm1<NKn5Vd3-3`K>)4Xqz*mQR}e6Z{IoA(<RVo_Gpu_ z!h*qdZ!~z&-%#7XuRZZVTQYhGA5bKo<m+?L9(8t<uf|qMj~s&SCr(g`?H2VL(4sr^ zIewWFVdC$s@<0kMKIg(sUniZ}Q+jWI{}!M1goi<|d2O2Rea`tX_EzwGgNL!VI@&9y z?FvJryON_)lh0+v*@r_g@Fr{dez7MI3rZ^LJ6AGkan=90${o~ibyH}3_03iGHHqBC zvHw*JQcXL_DuqN9<UH_~Zuo9VdK8Ax`n_t~k5`)rZ)e^Y=1UlS5xf^%;I|uNI3Zju z3h#y)_&9hUKynh69@{VBTCQ(>x4Zol+d(6OiZ`0ctcbcwKMn7SP#|BvErtU6<G~@A z2fQ_Bub|vvlPkH>FmP_FB!0UGnXKGhiS+|NUIHI|2q!#>TF#Gpilz5$wb?8mAMOz; zOOJk#E!thE{|ffTy>*_*f75IJdoKGQIV>y3U+P^=0(qtnLuqJIm^6K{qp>3v{4H&m zskKJF!WK$xHf!%Jo|4LgH2c8FLM!NvnYF`kqlD2@>NG6-{xpfvN<y8*=mkEA-^Qm} z%vlXch_0UfiFbJ`&2@HbjwLp0l70(6#G$z8Km)_lam}7WI=qnE)M%1bAK#h!dup08 zEB3q9PFr^hRB5|!#AO5NBU9+pWcS)aN!NeIjP_0f02R#!iRL_Y*I)5&Y!}b?m=|h) zG4pi>KOLRUFwVFYZbJvakL~M?akdQ<y>RiIyJx!Z(}4)x#3t(Am@?~A?zU^YvMn?{ z#WSPS?GGuF!ayy=oPNnu&Xe?b%4UQ!@mgQsuE>O0!U=!eUG8s7v2_PwO~xN@K4xga zL#Nq@+SSb3_7zJ$o6i#%^;a%dmMu<dikmyi@I}x|9DZnuTwA0|T)rz3F6^iA;kbt@ zJr1`omce8+(NDiI3}*Q%YH3(=cN`yeH&uZ4Jvi1ffGxcX%Rg{dZ)o##ZV@>u9p}>b zP=qejw`hN(fB8ZvY0>kirL4TVPx6(l<hIjz{o=0A$|<+qfc1>$0VvyAP12Xg{OASY zRN14F|6RXgEv=a6tG4SXpt|%=BC7GfNr{N5QA7wHI~tGaExQSz4+L`SPTa8*k&DqZ z550OMA);dOwRAc5IRL7yLuu65LCsgz?l=!|?;J;^>cwrD9Rn+pnk}Q_HYW8N#G2bX zTqJ?@6NEI2ViBIzk+isgq<n|`JxjKybNh4#^vaxC+BUMyVp#ia^A|qOc{5f4!*dYV zUP0roqk=eh48U8WXBSsz0*sN?90NvK2KCkAY6tQL`{_($;4UYbP3OU)3o;^Mm%iql z7ZbuUhMP~mThs5hrYK)l7x0Z-Q1EQlnGi=x%FmgRrV*J;T6_{JM)bL#uDHV8N)hoX z<pmqO%L5z0wMNsEsD*S@+sH&ahvhl)umvgbbh{h>iRdzBxkAW{(FCf+yHf(W^rZ9e zeYK9s&1MPIyNLREpjM28i?Ul#PQB$1Y%URFw{IPb62m~X5C^i>6*uYlijD`FX4$%^ z$BPK#9nU2nAXkL*Cc@f%U48T|IW9#ZzozKM3rgCUNy)+&{b|<ju=VpZe>B?nMdwPN z^lxsSViYBx%_9=cWU98$n|9mpRa+|O+QEz0(ALZ1$^OSv;{u@ZX;#tF`LiwKSid_5 zpz*d_g<L<+zn*7#E)X8YQ&4U^{?U9n>9h8@X_Ot94Y0jRG1yErPL)4O+_Q<2M1LTF zSFs&z@#a7J(Lb5f6oJ``_^dLy-rk5EZmicrOg?XJ5?QUY`rt^|8}e3)#l%X23jsX) zaMhDnIbh>fW{o^zXGpysARu>NDLUI%E%uu^E}5Q0mV$9TF55UI6TbyJdb>@B$9yi$ za@vS?PKm>dK;CunbtxwMr-J!SPdnP%3CX68$y*|i(MtyG21Lp};VHgQQwI9&Xas8r zTB-7jYtUsaYF;ujX4}J+ciHGgr6Xgj0bCLqC?E6JYIb!d?=gfYmKNDEs*@pUO=;y0 zCk_T->?|4hsF$*io{Vwh=F_`XH;SznXa%GJBO3hHvW&lvJ<ZpJn+_N1{XZ55;?t`8 zpIG~+`(0u9+vL_z0KM-iCrKX<hA#fJ=j%B|6T|M8JUaBr*L^06r7zQ5GiY|UMpXV_ z3_V3R)I7wembl$B=x>^#9=f8kB%GuflfSd7gZdtT6s0=k@ComfkY;K(q#a0S#m6h| z2Os{*$9I_<hbL=b@Kk-#UEkvo^s(jaA;-tK`Kp&&1?gD=y1B={54d03*;S<d*WJ*} zP|QxksUY5k=Rs+#+i?S1%pzpwhkO+neLWAxM#@|ftdxzU-1gpkWxvBh7s8s0BQFFT z5L7ywZOuK^ZQ&!&x{B)FxfDoTf;Q)iU~~%gwqH3#$f7q!ZS=7{J4#sKv9tSj)N40R z8Rm!;`C<x%+JwZ7(>REy8z&2}vV^|4_-i7Wyo*Jk$;ZC3T~ht9)2i>kq>8z|Z}ZgV z_P=&9hTZO*+w!-Tl6iFzMWk-KCXP-um3^}y;fl)XKapy&W=OAIkNw?zIh(q-i8ol* zG*ormeJ8;BEsM!&u_1B4>^W5n^DHE>-Q|O-@Djha7n-EVTk?_F-Ac<(z;Kbxm7s8| zL#=i5R6rfBs{7kVT?{ys(IJ>u_)W*k1be}Non#%!lY0#_!svsuxEQcN)@dSWBIbS@ zxvBc+7dEogKfa(PwY`sXJsQjX=38&Bu)pPTf8POQLIgY&7N|&k6j4hXuuxid-pY!) z%l0``f$io774JzGmQYG=Qli!!O1c8@)qQU!b4;DvuL`-bcP=z8s$={m?n@s}A9>_1 zM_Uf~C~3}=f{*<y8T@zkm-%$Tb9P$uP3>X_W2qCAIXA=B6G=MY#eusm=|e9>@zQDb znZR_g-`Tj*WbR@2u25~v|6t|*@5QVX@#GPkH3R-AEj6C1$dDt<mmL*b@c?zC!nq5( zN|~Ecu_n47h^&|QQ+)5!x!r+ee%{~+LRl31?U!qK>gw8>>txo1@@{L1YBim#%jZ1_ za#~`b<F~0xG3{CNjS>l8Xxg4nkbP|CQ?T4ITU*n`YH<r%eIFsVriq33xb2DmX7D%I zEa{u!CYXBqzVXV7QfBMP^h4w#P}LaA7kMaLUY;XLePsF<LJd>^&?GB6AdypfyM*NK zY3uuLdGDD&-<dF6%+|hSHLIhNl4tD-*6s?r=msY)@uWq14$$GV)Pj?<e~qjC462SU zx40rlDc1p!W^R$UOfX(jtLiLPr5Rmw7@6rWj$UYFIy!O4lH+b}!)Bt_DH%|Dxj-Pn z__+Zaz#BQWhFlywOozVG(o)^gC~e_UbKA=WFi^~8-RWleapbYilPmzdJ`i^%X~`(x zNOO4cE5az&=>E4(VWpwFE$bPx_vb&fkH|jZ@@?R<7PoH~b^)bsSXlSmkk&(wIK@1z z=OzS6A~Q~TSZAbFf%-3<lCr=uo>(4zB{fLQ_FCaD59&SiJ@RnyZTX$#t5Xe?+65%l zcq%p@eZ`(c+7=~C-Ld*-a=ka)#Q3OoyQ^b7ji2-qKA8s-CTV4zZS(PHJ_{e3q$eB~ zUT`w^ZdNT_@SfifYm=9wh4L}C6`E80>%)PHA2oLLi1v<w>cK+yJX4q{P{7EULC;%+ zkTF>>SXoFKE^dnp$8p9Lhp-)V<_z^NVA(cEZfYofkwsJfUN*QPo6pb_4eQe%4Ss1n z6EPl@B5ANGI^kJ&Ts7z{;l2p7pE=2OcF>P027pD+y?611dQwO1Xv~tAHmrm#ICMk4 zxMS=N?TjV-+#aj7n;p1$dK%{xnpxpsZQx-ZZ){RDS<2A0+^CmhqE|=0+9!93_O#=u zEvl8KF{<OVin&7gOi`UNk?4W6HM8u3ly|Zfj{V^-xj;al*n-;H_2`#*FXSpx^k^k^ zBzW^@WG-crH(WzOSzfN&J;&?j)uR8cRr6W1(j>Ia6sVUS`oqw0a)b-UgxbWMZIFrp zwa}lK$f-I2?A9{$LNgfuR0&q3VXs=LQQI&r08#{m)B5`79_E*?qCQHu9zI~uR$;*I z6O3;K_X7+IkT8vV9mF0aC*J5jTt{GNUk{#ikyF!=Mmu7HQ)Or1-*IfxK?!Vsy$FIz zUc}(tkcPSXUA8PGwVxqz9%|ej3rFIYe^EA;&Nj~`BDfvpTF+KVi|s3KD<ogU;#k(S z-0N!@>CBbYbxn8N8_Y<*KfHzKXwW|Pu=@7~vHybw@X>1R#&vQ;xH!ycZ%g79j#xbO zO=&|1dQE0Th8EA9?0YPjTB;+FdL9MRI?1&(DY2xJUU8C~E?|qk$vba=+3DB93#fEO zN7)JG-b#3-aT-_0$#b7&Lngk5Ea~fn10wL>bg|_ap1cNNd3}4Ndl&O~uGa_gB*wG_ zj>gDnpFXbiy<CN-NuQrTULM!s*v6rKV>xmfr?p0_k8ry6uH9qOHxqg>bS>R5I1ha{ zwvv`{X(?8GDtRUu+cMmLu4-n_VJBt(0|h9%d0>scvF^U@yVo{9eVR*FXUJ+!VNRVN zf_GEgsiDTryl$grXvsii<~F`ryRJ^#n@+3AT}nQcQZmh6oZC8o6V7wqeJ|$y`j&T= zTj<)^$KlDU#m%QqTQl<@F?H5}bE3Gc$ZQd+#4?_=ph$;`V?9yr>F#|Os_|c?b1#(m zllQ7<_-rtm8Q-v8o5xFgixeu+s3E$PKC*xA7c}-~GCa#1ISc7%;?64GT3NgtQ=BWm z%}aLlTgo*B<*x-Rt?7%0LftHtAkH0dIT3SneC8f4_tM=`M6^Co1=z7}c{23ya$O|r z;okqsVTj7_e%C0)vFUu~%+!+l5oulDz3vtsGs)NgVzas*t(gMe4xva}^$kk#dcV#q zWE2x}-q{7dy_lEwymu-)5B;qlOE@YW3Yp9E(ObW<Dt|WwHZI;<20qTtG?Pg;5sIvx zeaKmO(lh<vI--BvCY@MOojL5+dj|L6DQIO$NhI^7aRbcGk&iy7{^yp6ojq%{*{=le zPuDq#uB!xV^xCd}^(S%&YANs+i%>J7nk=solSY32Fsd+6nI|qU4Xd_S74xx*;Cg4+ zKO9%YnBt)Z$va$vU5Y+%4OO2c)wi6?!t<-$0u}!(Ike^qa_DV*z@2~clo7(-2O;Nu zBYdJ8Ow+j3BeM{VDdxg*yqEmk#-b8h?A_Ayx}?qjcl!-m6FJPW{hBS@Iw$$|i{*<5 zM~C!%LkJ7b({!^mVA$YN?$xWf6*05;IQ6eKybv1cVPA(Jqvq}ngNX7d2hq?q`_C7U z$i6ua?@jx3eimYic4u7-1<+hWW;>`~?`E`o7x6XXya;AyAvzD08*tUO#qCpLqZ`36 zH!KvK{nI!Mo9PAEAHPHC`|W%cQP?K`mOJYFA}(g_$EO(k+oqgrxI)(2<G%4@sp}k~ zxH!lA(ns^vNm@jfl7u+fxo{qr_*}Msq^4vNs|KF%j9B>%y8Eo^VZt-Ok>P*7InqU) zed4wMJ&gUIlI>5JVrL_9O{&@|4H}<s%yw+%RpDc?JjaKp%`8RL4JQ;ethq5|Hlf?N za8az0x_1*#A8q<6QH*kRM~u5nB_(thQ$+(Z1uK-q%17FDvzK3ILbRl#p~oeRyw)jh zr5^j^hRby$?@q&MbdtH8iYHot#{2fE?eEhUvb?KzO5jO!5G<R^SHZEFwQmL$rNs7n zm1o`v_o6O^<8!|y6(S!Fvu2yOfIA^L_P)@<zKPy`yE~s*ZfGJZopqPH4x%Hd@8PJY zsf><#PHFdM{;heV;l<bJcKU3RgxlEZZ$;doGsl>048otkf>rs~rLu|!N9+;5pQ`;; zwJBHDkk|9Rq_cXMaY*=xQ~~qOS_u1WLhdtzGV&aFmOpZe>z&p`3GT};A0g0x@0u?! zBvJBi_Lm;hbsFDY=SUl^Flhek6Ya0c37heWGftQUk+Xtas`V?M!w!~^M&1+hJVjhd zCVpJeo)7%o9ol`Q;#Z`!J_ex3$#)D-4zAs1#boNUwoq8HE_-u^wPxPw_O~G*oQ!%0 z;J%8JoU(E#O>xq6y!YOCEUw^L#cB1ez(t*`<?=Qu*^xFk@VLC(vQ(>UW<*NbvO%%T zab?wl-H)J@Kg0D$)4^+guAcP|>F6qVHf69f+xT)VaBS!^dK^0UHs+v8-WS#N@<1lO zz^^|&4I{o$n@2blYis&;t32H;6qa6>;u2G~I?#7is<f@Q=1{`4;mgm#LMf+UOEGN7 zK9H_Wb1w({^bK*$M0=~R6AYO?o}S8{Vxvu;mbEhI#^dV6N0yBI0j@Jo%*6EmK4#)r zD2z#NvUhA$>1Yp6Yi1$2gElNa@GuJiU3%2pV5RZY^s()gcVv@fK7gD_rFlG5LFZ4m z0SDUUYAjklwbiHWDQg?fr660DahF8(_w(XiQ}E&$OYS{Axt6G~w!;v=84)FNsfO`6 zl3)(~7W(~{e3@VnNd2CIk5aV1>Rr-z5Y~p70me6`EO<disStCqX=$3wr-;#$3ial3 zlBvq^%6y1-T51PSrl4}3uAkPJb$2|i^~p-TP;a|bRT4i_%~17P`-U!5<2Bx(1S18x zcg^=}K8Hgt2Q#S4&74NQ>sl72?Xr>N=eO|DX58N@^;K}YjJX0!MYUimY#)fd^MlM3 z=+r>}1GTv!+4682iSWm`@y!BI?Z5tg{|co$5$X}W<||5-{D}NSbUsXr?3mtJRr}D? zV9)yI(JR}?7}hi1VDDU6)|D;ZjHOy<JscDz5btjLCqF@}-ff~O!)0Bm)}Pxaak_Q7 z^^2kKe#@S;<-L3UWs9PEcwEOlMOT$txz)n3V3lYaZt%Tfx~_80$aXIIwZRzeWs$~c zh&y_jfeBpwk-@;|aQe65ce3}|d^D|?&JrXa_=ZK&i?HgoY4Y<2TpA#|YeAfbiz&Rj z&Z&55cnJuLb<nshAAbnCyZ&TL)(Z>S%C`m^Q!3uu2X$v7`e#uK3c`{Dmb^2&_RX?8 zy|ozys~T5LN?xIKb-Cp#+2=O{%0OMHUMvyy+Izpi3@+h`O{;Xtwf`ok|I;>Pr%KF| zv>`<{ox6}}z)LMNOVz@V16~HbHff7kY>%($)p2$M>s#>2C2K+7sL)iK7)sQ>=@C<= z`AY0f;Oma3HMr(Ry*Eh!7{b0rtMst)gVMOZ@(y6WVd%8tyh?*}V}IsKAaE{^I=@2W z=G4mkLpW6+xZBwg&T|4VI&5%_NBOwPP;lM~{R|HHV6XkV1iQpl>dcQV8ZG<WVE0aM zmo$~kjmj7XaOG>$<l1`U<m0_=_2DHSYRl|=L?y2`&Y+_e4q|v=U@OmK0?t?XE}t6% zpJ9FFYjGz1TEEa_;WC(mT93NWGH%QkGR6EW^#<z8UK~itc>Z09QB-Y@SxksNGtE3? zNvQ1EbR!l}*?3t1!ZP}gyZfI%vOOF$qz*E3MJp4q`MdQj*pRtZB`!@<0^1<MQYoJu z1GHwUpg0-opx}`xEGR)!N&HdY^iNUpaOHZUXK*JdD=amiqI#y<-HSa_$>~(;q^~i% z#kU2#)RoDeAPX6?s+wi%+Z}~7t@Ox^0yXK(x0%X`A*Yg{BTmv+l$l@$h+r#f#DQgL zn;7AqI}Pk|xqsZbYpKfgdwKZsi0-%xPm{&M`@P<6!|;@yD#7q*ygaz?f|ev`PrVpL zvR+fKWkJnJ{l#7DJzwIV2}+^KEPOzLWQ)+m&zhW5aaEw0kL<Zac1?EEwXRo`i+pXQ z_2LWN(1tCApn7nDfboa>ZRYHy=khdvVLJZj()>RM7<H&j*8N@zhVEVn;Uq)sARzcV zy)3@2#z+3-PTw){M>*(9^-+v_E8#Z8i^e}$Vprc~c7GeZ$GdsH2;+m^JPfzE)9_X< z&*AGgxgA(5or)}Z+()}@`poa_w=f5OrX*7-y%!?{mt_F%woJdXSL5eL-se$tEPY=p zEwK_ACb-PA`~|CMD(=duvvZ2$#h~o&uT<e<g)E{QvleP>wyTrf<_5q#S%jGQLo5~9 zLyx<6${!%UWAEm?bo&+DWZgL<Sfm}anlEPFH6L6!&p|vgXP9b$u+Q=Vq2juEMj`7L z4%s+NweP7J(m__Wj^EkFyP^n<!6DX#B8|=`bDs$!2>#9TqB}aOkz%*!iz|FV3kh{6 zz=8^WR&TLqJ-;Nzh$r#6h2)wBAMMCh%CC~n(pbZNDJz2FwICV4k)lA{q2klP#pw0n zec>1-EvA@0iT<Gz#DEP%aLZlDL09d@CzE9YQg@htVF`GEB!buY`up#0A};s(HKQ-q zM`}mU-ZUnG*FNL^wyup=$8VS|=IS%f{H^o-v%{9^dbgC3yboFYhJKLJ_>iHHVr!pK zf>mUzU_%@;x;f*rA`FKwSP@|U!B?^yu4+dIQ=G;2_V4^o2qhBn8o9@rAeW~!FAXH3 zV*l;SVlSG-)g^C_sM*EC?y6pY(OIk=7i#frou&CFCF}ah=idDN;Mb&%erjy})v|3i z`toiC=TX_q$|d%-)lH7V?|k$BW?F*$F{>sCzF-9K6ouSZ^++hwQ^)rAC4_PZC=oX0 zZ8?^wQAwtaTWR4Oa}&U3=|U2V=tF>}Q8ro}sGO$aZ82WW?REUA2MIm{bqfXur^(bk zeftus_I3B~QmzhewW_`Jnv<_JZ~UYxks0SUJI^a6zlN4BnM3sc-@G+(UE1rAse=UL zOp4&LwB$ymhW-iz5QcgK#ey*w9{TyiPW83g9}!-p$HBelfjsb7zy!ek76{<2k~hLT zP#fNVWzJYmZg1i~{rQq>D9Eqx^>Zfl>zbz-i1rYni37_;95=0eMS(&Ax_nS@Q@eA% zgi_Oc#-yQDHIDD~&GqRWg&zj-`11CxN}9(O0RKKjPN;CA%bo-o66F4hNO!5{`|MYg zYbpaSeHeLZ=pLxA9ST4zx<_@!iE4)rihHR_nVJ%4&t)4o`hxe0!Yr6B{18=9lU>!h zUOCpMP|<@6UkNko%jZ45Lv;}Ww>LN7{%Y&18#8&y9C9hfrGe18vd^T$h~vfZ)(eeM zEJ!B_^r+&(Vc@)?@ZzUNoR8$zToKJ>CANP=ZbFpX&l26qX_Vm~Ci(!vY2C569ah0c zO681<b2a%xg6|&Tp?0Dg1FkgX#gmu6Z7)T@h@wQtM)5+!mKit3kFRm#2F#z;QvSfS zGSV7~++-<1`rUm^hke8EEdqEE?(0hebhX;EWgV7JreP$1ljZ+Mn(zcQ`#&`(6@zN= z?<c0Pto9;3xnO{v8q60BmX6S+_$9t<5~z6wwuM?P@e7nVD{R5`?_Uf?!S1%;DDwor z<~qKzT^w7Or}X~3>Rgf@d44<hX**6!t5E)e9oMYohc?s^y@vYo>v6p$^4qUux7C== z8U((go8ajB1smBSKNLXVv+{JD95>na;B&#>6;&gSxasCAuuc1xRy+rxRY$N^^fR?) zNuj0CZwua7ls<!@T?>5Q5zHo$zf`Qb$Gd!OZTZW8ke#9B^IsM)dQ=tx7X(y?*d-(g zj0p!B^2mXX>p5P4#Ow?Pv6*2ee)rgE00Zs9$HA|`KQ1VL2>jis3VH3#@*=4V^msu9 z5~V9RalckHEW+;j4EP#}p^m|+R(RHC7PWh?ApylH^E?lQ1XdU9pcwLdm548(6o+M_ z@F4?K`b7eVi_w9yyoA}=Yw;1E%ktay3aG|R{UUF&{%7LW4jGc3PfIPox6Y`XBC+dE zym<7Tf6hDl3T2gLxm*}(ybka5C~Y^_+jJ}6@CH)PlOv(@xY(P5uOh+AR@wkE(3wM% zX8JC;o8<yF<uKKfML5(8HG7G4fudk!tf#e5q#Tc|*shkf3bBZV{$xlT75Nn2tzs#H zR~#53T&8%|90$E|*JL`0x09aN(6So3DZvz07OF3zWE9rJ1@-X<OkdH>24WX}`BBla z!XNl|<6Go`<P^{NL<iN{Og*$ulWvPiQZ;iExnN-K|A)?^7NN4xt%Lz;B>wFr@`%do za2Js$J_wHQK4+Sf8ct2{oo@r!*qG0)D{Gy89zLC2gB7^#ep2I<*;;>RPyY@g%~(?l z)>z+fJe-7`ZPm5KfbW~3k$L*V+w^WLOtwNs7Igr}3!HPWjAdUPP+4f4@fXJ`uZp_S z%G?eG^GO^%Y}Opg?`#>m$LTO!eNk_mJO;K^33n8is0?|~Of3=Bo6&^<E8K<AL8}Hx z)0u>ho9?iLrReCK()V{aI{}FYzBT|$k(o0&isa|Dxmfexxz3t*NS)=GPeuJ(8aQy5 zM-hD`IJWFX-1Z$Ts?KOA4g|e_EBkUMK$7A$U;gTrp^+cx4D8JRyb1B%<oQG;^j|^| zB8tC+B7Ge;fV&7xgpHN}YO7d;fWPr@Lx@NB*URVNdUxAot;)^n@ioz@=3RGd`HOzp zqVg(ADU4ISav>jbh_uKEC#9lqU#sZ#_Nf;V*&h?L1&2<+t$mYg;xA!U4ltd=dU-ws z6_xNQ&1zQgQttOkwKx&33$w(lZLrpXPTMXfJa#a$x=wOifeJ5S+`e;RN6Nm852~mf zAuL4gBCW{QB}*P{iFLuH=Dgz~=5(vreBquHv{c^2my+_aG*oPi@mUomJ+q+apYIk^ z;3Cah!qKXwJq^lKbw2vG`sQ?DHm}4#Jf5q6D?t>;L0OaDOF!e_IA$=C>K?E?eyyk~ zFA`BDYb-nznfzsfdN$vKVXpDTAYBQ4xoDo`IHtve{juS211&==q$~quFmLIdj$;Y1 zt4Xh`G4AGetbVs=H~-MOYozZksF3DgxG#49O6t&$@8)>OcS)&J1x8*GHB0(cW+T;Z zZX7w1S_mQif^QG9J<YV3{*e)&w0A+XT-a`$1M{ZUSI$cJYC`WvJ4vff7>hDIHm&Hm zes7o7R|dS%Ga8H}P9}VC3?X*GM1;N1DVI9^tiZ2WTv>4TN3nUQdAhbjBaVDzWW<l_ zeY@cwMP+ytv!!$(zr`6*umIr9qire-X^Qgq6ZF51r7%qOWDr9(;Yf35*nkBvBY6Ph zF%R{}sz#MF(Oj7A)eFY7-Ud$`z}2&6c=%MVhja|}{a|RPfD$@0%%M($MxK8wIm}u_ zH2wC5$_!7JU6^0IDKbpSzV1}1Tr&UWs7}?@xL_HI51jkOHQLaF$v}cf#5aw%DMsdF zE;W_eS;X3BlCd&h%_#&iJCnyT%uHyv(ia^LAH3;tCQ1`^Ok!uS9~jndL%5kq1_h_- zk`%66=>vF9`({-(tkiKdT($V(;pfR!$g{~XTL|`suM{ohAVN(KnUQ~&R!v!|%BJzO zDBz>Yuyr#OR;-@B;LI>0bqrEt{?c}Rjjky?c`i6D5TBWmE1CH=LU)m|?azKlj|c7F zbdvwd(#4;m`2YAG*T1UB7xF$kgqh}9Tgu#*GdW;b!f2&(a3w4Zon$jn>YNu8VIMED zuYeZ048b09<pX&(H`ggZmKYV$7`uXXSw8CPk!V(299k(gxSv1Y_hbj#rzy?0#GG5& zu0<4@?_kih^B<nJP>-OFeEppOCBS`O$C8zXFZeRx;jH(piNeusul>!jvyMN?@Ngyi z<LZ{Zpy>i3iekElvZ=7bmaIW=lf`*m9v{TaKJ}{c3f|TSn+`@=GMDHIdD`_+Y!+wR zcaGu@SW|!)^TNWiyhCmHvKBp5h--3FlDcrPz&AAHdnyQ!aKV4H6e@o^ZC{r&3q_0a z0JqPh1hY_-d0$WF0#E32no3R}gyR!Y+4r*=sj~mBkwAbt>LrsQ!y|wCSrnIs;Z;Qt zFP~56cW+gDGTW%80h_BAK7YP%#tOYulJ}9xwSJ>ULq7K8OhMRaFyCSRxZD9W16kq( zy>w>~oAfAOk;s{`Yhm<{SrxARx=Wdby~*+M)rjcJH{Vubc?;}vQmMm**2OJ^JuS)H zxq|V1L1`LfLsc_n9oqeMpJ9BIu&+io9a0r_w!Q6)2@?*Bc>Iv@O}db#=+zyTnG782 zr_=_4xPnzR6jIzmiA7s7A@~=H3iddJQN92s0o_qbhP=7}{xgAJJ~I>34co=kY;<iU zE)>nAJHfBbAJ_=|llvI5&O=0{v8sWqt{-}$Gm2H^=c5QE(cJ!Bh!{{6aU%HX=_~2; z-*nEB$tmJe@};&-1t+b)TIc^5Z~2#4BFcY!miQr*h<prn1q*n6zOW>e$<gD%>wkIV z7A&H9)imsPQNCE(LQx-4zH|ens5X;MHa0ZYjHK6<cF!r@-`yI`0_-Os$@XqDpzBuL zG{KhaXFym(bB~<}nP+r6O8xBE`N*e{Jll~foK1Lo!rKdQM)@58H_H=c?AjERY0%er zWj;CR(q}Bjn1Q(O)ch4@M8=ovQ96w7SDaHZX`b)ed#*ImrSvJ!JP%;aSzD38P$=~0 ztci(6X5dCw5vP4RLB@faTKlgg;VtHl&A;gnD4_k3|D!ZBGsE!?pUBJ5oHdg^p&Tv5 zn=g;vGty*cmiT5nZsh~<h$d11z%uI25G#I=ZZc+*#yu3Nmke+VHgKdgmkwQZ*2iAk z32!}rGdH>udH`2+8(alPOSO?QOxaJb>5f;!-EV$MseZs^@Mb5{%i#wf>A@aa#|Ny6 zD#+j=E#VvO?F}eN8MTr+%lrTZOOs;@NY_$Y?6p3FOt;wTxm&J>S@xAdgsFTCb~KJn zozaIqgXuGh&ifh+Gv4}Cjso+tli|9ul4lye<3kDKOq@f}-eX$uwm6!PD$$iRWQ9n> z!HLO>%EA!59ZKQBvd`^8wYhWS22X^i;y&+=Zz|xk7;wIgN>php%h*U?^z7H0b^KX# zo>9c<L#2tF6C;pII7r_4ata=;t_E`8kMuI>;-3)J65SF}h#~m<=mMgitV2MwpXFaB z;2I7ok1=Mz)0G)m3kD<m@MyiWFvkccvr(dQ;$Wh3nOdl53M+zCOUJVnOXM?ps!h@9 zI^9LgKOmMZF`2yk&an;6Vl%62dpSC1a`c{z#n*aXLXWLHD7e7qTZj?NSw48UuRHCb z{jV9znce49nK*Vz;{K~T(oj3?F=P_0Bb#6^K-5_F!59*<A!Ua33vxj>mYFG3qg(Ae z-@|kAS;$W-kM*>9+_Ve}KD_sBY0#QdZDfD+PT)_l$kKPTkWljxkMdVnuZIww4y6e3 z2FD_7<M@f6?REM@C~X3|s`jN6rFZBK4jKgz$8htc*(&=_Z@K$d4y)pxYsI)tEia{= z@@CR_osFM0LH(t``!z!oOKm=HL~_c(hpI56%f+*>j=Kog3tj7CwWX8fv%4+HLo#hF z*gyBQ{?W;KDgVVd*he=CN#Y_Lh#ks?<2>et#SIKl{L)<kVa3ETpG-Sv_FQ<6GqP5Z z&cFXmEsXXYUO(cg`9dDLS*_e0JiUiLBs5T^+e%2f+}iD(qbbFxUv_=)5|R!4)Nfaz z94Kp47o?Z^CD=FE^@8RxJ;<{CQy|&7P~&R^JF#%q!Pbh}7uCbt^4{~=uPxw06J-e4 z&a9_;Ugf~Kx?}-h)?TyWeJm`A*ZXn-^V<@@FyJjNQQG;iu_UNJo98a?X#m`2PeH&1 z)ArNC+fB%TC3)N+ho9&^QCC^V>#P!-t*0?XLzVg(DFzZq*F3E^FErDj?);q3j>`Sw z+^rRA%^bo9jPz!nV!}QO>yh?mN^ds>xO7X*xNjMH6h2<YJn&?B^`#*?ZhDQ?Ni+T1 zznxLun1|paC(dmg;Prg}WFzlmwaI0l+xgR|J2FxhsgV189>$lCo{bNu{<q&;m%*3C z9_?$??)&@(a(~;CWfeu$d<EP|nHyqfXX~ebP(Z_xv=A7<w0369(~4yMVoYBGb<0Ko z;A1C&zARiLjp)w8M{Gyz<1|1t&*|uPQNk=noPLVr8G8z~&)9sxS1Od!r%q{!!8*fI zJ)>)PekaOst|7622GJ76t5m_$=0y{Ez6LTM#R}|~h+b<U_}CRUMZRx6-|L|YE5VLD z-J572ui{J`)P>8XsmW_m{$?Vbv++G&#eC)TO<s2~pS{YK=Jy#GAmdpLkoajK-i(<| z8+uW3O6R(m1|hV9`#wH(yLxuxSXo$!TJ7hf^Ml`OVV#LWSY`1cwW_V9m%QNjH|=&P zj@gtKCUU=>)&*H5EZ(kFo4q?!o(>0aFCh2bA6{dncysIrV9==3-rX;&af1idCNTUE zDHJEy0T{IEIk((74Pz}H`>N6>&9s^w4>5j%h938B2x<S5g#H?fwcBbfUy1vfjyvPY zw#%jYft@a6@D5Pje~7bTR+=s6eqn2pM8_!Zp!xP-4zNkKnu&AZbJzkb()foT(?2yk z|MbXr4j{E<K(me)P$p-VIQ~J2*FpSDd>D7nFOtd2jnpFvk)#m&10gFV8){i8?4X1K z%U>Si85<;<WR9GJndc;yHedI$?sdguMEF7WDHr>}=2nR6Y~-Jeu68?49qzF=H)=@E zH$`btBgL-)Vwl64Q+$VO5R#KHo^<mnWSYfF;m74->c=kvHFj@}^_lBUS+lt-rIy|K zW@b}WS<M3YYn*w%Di<|T>5D(F&~!=|A12F6n(x$1V3{YU4tWL@BABd=!`vGD9iIgI zV;ZFPbE`UrkIF}Qk`%b43|nkVyV%oy$qyfX&i6jH8c)@}icWWQm!SZwUn-?w%_=OD zG*;b4)rl%bQTy}_v_pAA(65X*x`viu*-d=63^Kvpdbl+StGw~P8Lfj&{miETI!W5? zhtyN{btDbL#5E87wpu3Umv3fVmp<go31;%PsHH9XALZf~B3C#7!EZwUMi3_RCrIH5 zjY0@<PcobX?^!#l6pA8>9C@DidpmjS0|hMqRsO0FExKEBQAu5BGKnEycAUJUlDH_r zHgVsgp>=c#dxj+Y3nQqBm}0VpJ*@tAz$NBeChteLeVD#Q?rUe41*(yVuTxa%haq3A z^s&Rs#=fU=ES)utVXzQa5G352Ycst(jUj#zI6N)O947%Q8EMqN)k*G_KRrZQO@^4s zqd`$|Xm<qlOHr@R>1!|uh-8S>qXeuLAQ)Qd*Q#6gW>&h;9ZvP*UOc%u*PV=N-f;_# zh)`|x)9}qiX4T?DO~lf>o0+JokQv<f!}a?if*Y+RWwteW<UVn}$|g$&Y7Cje)v!FH zcsa-ZsfwnHIaet7vZ$eB-vPTnAjq$KcRBW9^Fxl&?3O3F(Oo=gG3<T}-x?78;q5~; z5^8MMpj=jk^^ZgU|NpSBF-1%xlbo4)GlL}jH1Ko+7ecKF$B}EwOGB>8vn%h$WW~f^ z?@KZJy0UVjwlYT7IgmW%o6U&H)cM+G-w*%2<+Vvev*LNy{`K4vrO%JU;A!(xq!i;! zB-wN$G)uRyqS8Rz4j{EdpJ#2v)6SnXQG&ukds<@2)H%JO>6t-Xtfw1888`zQVNb$s zlIpM;Fw;lUXd8Cf))YfhhAhm3B=Z;o8-<2_rDF%5TX^fglZtPm-EEYlIu*OPal;^= zP?RebCeqVlqmq{@y*j<ZtPAR6$YZsAd~J{TQ*Mtag#in4yccPbR+JIEXL_A>;t{?y z@_eV9hS%t$JJP#@mA*d3M;D-Yjp?X*-~&bNkW~ZR@IDIo8G)+`02H^~AXSn%4|~>S zFZ!CcG9lD3^P2mC$IEe7sH8`+|6OT^qw}kg;}WQ!*rNOVzL4}`YjGj%?YM9;Qc1;g ze_kwQiS)hanhqqXY}%YV3#<fdc<+}QCupCK^+Ww0Ac#&}j0tLwrKHASYsp=Vzm}Ma zYV(@k*HR)~9Km~Qv|0wc0m$qrfD)(-1tXQwf2C3Ghf4{58!7(qy}Pr)j%&(tXN{Y* z9B-iaPE&-XO$+es?^3F<H{V~U(C2+qkO(!CULa~p+4|0^pMFBwG*zN()kp%D5#q17 z=Ola^umCkz^gm(zvtZdy6zAXf<NxvXR&i}G+q-Z}Dbk{a;_ehE#oeX27k3Np8VHm^ zaR}~Gyc8?$1d6-6YY6TxC;L0!K7aY`zL&YkMJ6+|)_Ud<wvt{Qf&HcW(nggHD3W^b zxc%?KdGbu~`JTbx!Qr@#0n1=zu$_UrkER(5>z>O!x@m%$W+21zuiHO?&V_90Z=kDa ze1t0mxT`r>671I{?vE*LTJ;4*Cz6MoIChjFt+$stLvkZAotHOU+-pp<t}+(Od8Ggc z$(kLk;X7M?GF~f>0v>_Z$_s-u6u|NYr=cd6jVO2$$PcI>`NHsgMobT@L*|)0dXG26 zGf~-R;{Z<%odQ{654fD1i1h(%7dXx97}FI2)8iR%ah)Z#Vg3GF6A)b7T9EG8X3<>U zYp&e7*L>W6nOjW!_zb5PMv3}G$!sULUKGIKv{MDhc?YKMFtjMk#{nqqow7j)&tS>A z&Vc4uj|dL>Wu32!JZ@fmXZ2IvjJgO<Zq={YW&ptkjpWGhPRI+Vzg?P4gWI&`*Zps` zvK8u=otp;|1dX(XI5OR@bf}6P6=GIb`qUr?Rq~Uu)6}qxB0;~PmWscP`S2%^pR$1R z;dhr^5xk!fiqT{bG4Z-qEap0w2|~W0P(;wDHz6W(k9&|I#B|%Ib2+f=soE}23{f4w zi8^TY5$(ELuUdlg?$*to>>ok)vo~kLI@+X1MjUp<(F*u~p;`5*?)IL|_nQ}2OfHWO zrCPiho%&e#n>J*I1^+YdRljbgCalDyHwe}EmP?7zKn1}o!;<ANqSm|OR4SQgz)2L3 z$z*<o=<3_2q}JHB3BtDRCMQ~MbiJM~S|pkpSZwmEs)ec_)5@HDR2u}_+RT?#+OCN~ zO3j}AH&f0{>sOZ-2DFF5*Ni~dNJ(|3ywngZm%JqvLJaPH#ke>UtVxe}3+nLJwqNdE zqLf;dv@*QI4#=2f3Pne&j!1%TCo4Y3){*1GwndpPHvC?@>)v#4_k}M$lPfiQY}3!p zC}H{?=KvQ7jq-@5)?E7aR^YV50j<=djR;ny)rXz>32HEj9R7Yzcu}T@?%hm%TVmGZ z0idYf=uETvwuh%JwfynOGfKs8b@ZWhJ#s@?_$=1#k_Qr7-gNitVjvmv$Bs{o;kgsj zSCp&yi?Gz;0mn!cSGn5N&F%NKrz7`SS~9Pjh1nKObME7~zfP7;%qXIlEMYhSOaat6 zBOFmf7LGJ$VluPO`1t3hS58PV!z%>T)B^mjAF*T#5PuO%K{m10K%C&QGS-yq5w}1F zJ8Iko6?XFV?M>@rU3T;N>!I^D&Wg2r+s&K4*4^a~n2XBtt??{9wei^5llQ5_FDDX$ zkB!w^q<Du9gnxS}YaGwc?88Fp)_wN(_YQU}kGoOG9T@AfdO}%<myptam-mo$cE?$! zk|-9c=P{W<kUEJ8k>>E>uW|4ayfsC+FttH#@qvS`IVpd8d%LnKXWOUAAqA5}$p~U1 zfk`<P^^ug(Q5}IH$>FED@Z=mfPj9SgXj<KAoN1i%A|y7glUtc-z+Bi@GO}(V4=kKS z2HaiW`SIh~Rl~(pQ=kQ?O)Kfr7_P$|G2nS@i2btFXRlB4-YKDaM0gQ5`)LU}0fn4= zciS(kFDxoS>;;!({Y%~P>3{~tQon4|H2d5Ko)h79xCx$xtOVDu0MjE%{ZAtdr(#A? z{ML}O5|solr`#^<+pH^IR+Y3lb7fknFH$J|?OJu3LJ{Tfj4EYp#C&>{n~MBqK?3>h zOZ2dzB^2wZ)Xw}V^P2c!JM+uF*dbUSM%!y~{`((Mb=6o_sC`3qq{GwO*Xo5?t~(si zp&4vUP@PGVUURwpF4zy#JweB8_4Ca2Y?^2=k?aSMP}ckMq(#858_H|m+Tk$*-AUP9 zN}<pjY3RFg0(3Kef;wzGk^Q=GN}<^=$EnWG1!N0I?4PP=IZe=d6o&!*eL;oTlf8H( z^rZ4ts*Hd^FS`BI%BO{w^XSoC1!%~%KPuPBP&@@EdgzxJda1zgL4w$XAVex}j!e%5 zn&q5QsC<Qy@--<@!DDmMMBZnH&K%-myqv9IkU-w0H+ln1*SM`fU7C|CBB=(8N5kPy z@5G4U`H<TzT&4$z&;TuXE7zKhdwH&c9D(rEht{9B`pwr5fu2Q08IK8!>B>*TMn$ZC zFnM(sM0}y+Ti7AoBtj10%Lm%y$X3dZvpdcbf+bdXecuy>be|BqwA^Q9Y=huZAh#(1 z>e~gOFL=D?%gxP~l^vN?q}h+G*;?o@Vkr+1YS8D}>}>b-@30|`X0}uCU(Ik9CEEQc z%Z<Y0r+S||XS@B|`?Y(jWuO*`JeNBUDE&ZlS)Mu~;-YUk4et-6lTPTfq=w%;NgiPF zEGUUnK-v!9+dsb_!Cr8EHkh!{{(d7<RdZ;NMcWpkse8|UR99|La{i?%DD|^+97MlA zujOM4U=oiuh8P(=GFd~JV)UTwvbx7|b@{NS_`(j-7PJsri>&8NaK@pt&0{Vxlv+9d zo*re*{?>DB#QCJ2U;)R5x|DXU_GB(*K$wkKz(UV0)o#S~p%oDskrOEA9D~a8#K#g* zT(}A;1&;X8!y<Ufi-?cO826Kr(e{3)Gm6y~)(TQY=z2=o6IG@2k5gqyNjm=YW8>K{ zv;G(DzBHrD!)&Sat`{tLCIcM76!d|Y$>}F|k&8|k&ofL!{`s=vxhZzMSrSiu@%9)V z44%550h-Y%^iiSxym!_93UltFwA#hey=)(B^mLY-zH4J4?0+w?S{Zqv6?zl>*T11R z`i1$a7o0|Y=U(@SK$1(~CmH2uFC@Y=h-w*X?W?b>Y>jaNHx4w4yDJQZ=5j!JGlNhx z%<~SjuKO!bEn=KvMpC_wdI8wxZAt<oSG(3Ah=+2S!77~(My8%4c$n<op5O3E<Khr6 z!)Jv_=wFuI2P`6b+iwc%4IF=eFTwoahw;s5w?*4hkECuPJ$`IhX$xvg85r+QoJ?G- z@1&;Y;?P}Ti0O0Bj+QAv&E!g*dG9(46Cam&qwE$>bMBr0XVP3oIffAc)Iq!Wh*$(m zZ@TA(>mY|mux5PU0x(IZh7;q6NjS+8pgbBM6SA|lt>2XKfJ=FxEJ_t>W$>)Bwm};z zN0S9rfB4Q<UEbF6XmdUw5X6WtDSwiNi(EuX;wUi-in8vf5D6cn$)A1d&V;tbzMF?n zwq3U#>x{w(N4=V&AWPK6kcUJF$L+21C@_79_f$nf&e`{TaaAta$XjZmwkpo>;v4?R zZw%-ELFxH#kdYmJfP3sv0^{%j3W?0euc8^Kqdo6*Ho1N<)`|sY1e+H!Bb!lI5bl5S z?{>;fizAzJk`zeAp4+=j@0GzY;OTN8t|qIW*$o>UU$6wFf6svWjodr2=6hYWHqVr` zUF|P!ff_iky}3Y|DdGtZ$$~wYx>0dhHHST4{e{xF>?>W;kcya0cJTN7=!n%CIz(5a z($E_`z=uLa%|<d`hwRbl58j8`O4k=(SQ97n`3((24#3f`{I|@x1y-EWXlSTIsIT%; z_vxux_$Xs~)0eh1*d^pZgaAxx8m7C8NuJ5Tdi(sray><n$3PtH6k^zT=RVah*8q@1 z)k^6|tZ5Zt+xnoZA27~8_|Nc#)nXgyzEr>av&a<`rX_O1^no&VP-Q6Mb7RCkIXvO= zK>7JXu==?9D29wvhA^_^Vy!(Ha$#|oI;?iLH``{p-?sJ|U*~zMNcan;-;xC_yYO8l zxY(^ne)26VP>lbX5V~&?s8tk*Os=HtzrgXYxgfT@`3cA*b{2;Z@ycn1oLN*TAY&~3 zU?<_p*J|Aequs<`a3c5%dxjnrL7F7Oye>%4`Ge9sABe+J#7Ak=uZ=aqC`4QrJArQy zkSBDJhskAj3CGYOYTZ1YyqWnZC;ZTBG0PXAgU8(D+R(=_-9vmDCl7DTN3QW24{ylr zBTU$P<~p6{*yl#jsCQ0AIk~b-s$AJaiAOxz1*^#6k@vCj)`|txwo~s7bUVLLyKib+ z?dZnM!ztvjo;4m_5j1ptEZ@B>b*w9WDgBxr+^sh3V)245Dx(quWk<T4&AcXYMTMdh zi#W=AjKW3EoVnjBtZ7u&t!vmpHgznGH6qB6sH}kFs!vv#=3(H{7RF5rJzD9eMzUb3 zJf36?A*Q>QYreI4IkUAWNYs4=u6<myHH<gRMLvAI@_)#@Sl(|F;8<Gk44KUKf7pag z41Sb9er~+hY28lkdHbOyNaiU<QQ%gDSu<F2?~Xiiwq@@NY}gT=ZsvCKWBTjUmeF%9 z%H8Efmgi&OMa$WVq>aeqZu)A5W<rkdclJceh+>?}x5qw4!0`yfl%tmOkBJ92dOlw% zyDs1e$>WExI9p*Kq$Z&uW1ubUHNHW@Gh6&oVgXI>SDn!RJ)HmhAR4Em%soGEZ_0X} zkVj@><_IDqx4e|B8W*Ngj@19y#le*`E>ZibknL(txCmT_gS9q&sR=gVE@2HaQS}6L z3b&M;z0n@kElI4;BO!g)bV-lEF}uyRT(kln4EE$=CKYn~?faUebXD!m>v{TY=Wksk zakDR><@zQ(vm>tt+K@Wwug2PPohIh4v~F)R-1i7Bo67gQV%TOwqurNQcHZcY=2+QB zm-UeBN6L%F!-6t@8Er|pUi|Visk<n#D1Sph#jnnv>ys?UQ$$TfZdv+N`6W84=2y`> zGH*K$(wUo+9yR`lxu&gjSZwF!MXLlcET>oPZpPh3S17~p9x@;Ax3O{Q29|SShV_Rm zkrb<&D|=4!0Ezi;>XfFcEks>842<;Ndjox%wuV{RGVA<?4&mkK3$+U);M5d*0-EI- zja`o^^6)!!@fB=;fI#?usCvR@^)bt>hp>qJ9N5dzE*3k6)qQ_;M2hy-^63-8Q_d+; zIVRIv;B(s}dg=i@Tzmldu;_n%3?~<4ruuD?KgX91NsyytIH6=X-xbp@WtmF+hwkv} zi)W+fb5?)8%=?<6g0Oe}HxNNt%ZFz_9a+nscm^{k>ni3t$*$@fl6Uagw?w;+!|awV zq~Qw9YJ-?9N}pS}UMwT)0_7xHJ7IVDn2f@;LNhL)l-h!rW=r%wGFER|RaY&|(`%Nl zcV#alPZu?M!3}#u+qZ~|I_3T6?Drt;s-Y?X*HXA|50MDbY2iTx1`R>dNs2O;kpR<@ zn&DlE&AXj_pCjI8Msaeji0RpFzp>y)ZNK4jZaM9=c^j7UWd5-s9bJpG;mjNEUL<<b z3;mE-*bsIy8Cksckaxq6Ba5Wh_Ac0?=3`0;=&hDKg7eOkIK!>E2fJ)y%If?V0mE*$ z?w==USyN>SH*TaknDB((wB$RUdj<4^cc8RGlxoE<hli6lz0Ae-tKtCSM!@cE*aso~ z<0p8)`sZj8+578bWjOdQ2D}znP4u!_51X6YY(Y{o7rQ1V$OaBv$?$%<z5Ak7G+5rE zKUYz})Aoe^_?zwjr8oTV6J;j)^|?ZVTm99-EoQ^Js?2q<-R>G18xaX+*08|&C0sUY z!Yeu`{b8T<KoXt2?&+FkDUUw`zKwY2m84G<<(OLgGSliv^GiK8--24|l@J{c7FStA zWK%wzA;i<#>UzDM6@W!$@d!wDicB5x0vB8Gy`1?^^DAdH4NSC`zeXcqyO{|FG+FlH z+7enF2oh&DMx{}Te&gW?^GniW1AQT`Gam+rqW0wM_77~6C-q2X0t7VyUTiylK@A6# zt5sEzwut1vje0}9`7|~fDQm`ERW`j1(0I5sy>L{8znzi9j1TG>D|koOB#kU5PZ%t; zzo*I}7pzHDnirDA6#A83;&v-tlFq=>bJp8-%dmfjsO3<�duE(OnSxZ(Vwjj5Y`` z&b-1Dj(M6i@?A1aC-*(Hos2Lfz$9Oit#H(r|4*GldsyHL8cy`AuBw#o_?snLUWp?+ zIWRiOdm0YSiyJVd|G*LoR9rZZ<4H=yr=mJ<m{&=FEI{F5XE4ZzW5s?^>(GxS>;U@` zgL&NR`L?0?tL>SgZ;}ty#98Bhedavw%hsQ+Pd_cF7C<*ug_Mf;ON3WswpnknhNqMn z&7(@!<a&ve;&&=3g2vqoNn8u}hDVVU<d}%zAV%cQ!qO4fyWdKUkU8yXwuP~~xX4TG zm=wH~Sruh8ZUx89su!los{4e*ZH}7@6fKR&E|D`g(n{_>zCg_shqxW7`mDw$QbX}j zTXWTj?>(a?4em9N?{*R#ngEQgXMd=zAAk6<SN*AXJ}|0{x&X+E%@z~patYphbH2MB z3eFWeLdozMX@nU)%{-qqR1m-Ye?cz)^R`gNLv*=v^=toO#9>|;JM@l#t;~BQ2+xO# zo$y_n^q(wjUMvazlS)M4Qzmq476CBSZ-=Ca{yl<HnSHWva7EzHP6%CvkkSl5yfX1+ zSw&w8VNz;W&&T^(P4D-4pQ=0Ype?4{13rT!Fg%CzX{R5YeHt<<3!3@)izX2wuJkss z_RTOGcHZ}2{l0(sv}#Lh6Y@IKCHoVf&o8LXPuEIXve_u~!P~u`gp2OEo1#6%7t+E| zYhfH@gV+E{$ts=*N*x^eH&b%vBkXskL-;Svs54zrF>G98y6slmawbO@W-FP$0l!yJ zjA#&DwA#Y<h>LF{NnFVOcn?1`h`FdQC%8xiT@YkWe;-+$;KJ9O0e}2E<2;@;Kwp~L zl}d@9nwkx4lqOJ|A#cBH5;Tzm{n1g>K21?nlz=?!uXwb@u`Rd+&lJE#Vg4#gm#Eh? z*Qn|x+oR)nEE<tyF+y&-jV^!SGDwzTOFXM|T?VZQ`Apy_g{K^nnRHUgZmOYL6gq9~ zO09(4HC>=&3+kLCN=AF3j<tJVhv@Yd`~KKY)YbfGQTytE1QKnSqkq&)9SwqgZx6Kj zNn>8}dif@A22p{r+oZuJx~+py2%%OQtZ0_c#v_P5M2$Tz-*Z$E=BA0qS(~kOa}`Y_ zeK(_c_jrFv@dwUXsDe}VbEcgaYD<}+)B1y<>Be*$=R9sPqg@7Sqk*W6V!+CWmb`x_ zLH!48|2GHL*Xy|xL?MHBsKA)fm`_-JyNsD8@a8?B>Z8j-pN(5wx)9qIvNL-BH<Fd$ z;3f9l{uKB`#vJ;>+$Gt(2itUvps#}=)x7-ix5Hs|FrRZ%Yz&!v-iKG&sd+Y7@k%=r zv(9&j2byo!1iaW#2A}Fyc4qKyHx2sqxw+O%bE{Hcy1O#^MRCCl7uAXKDr5i5S}Gop zumS}>5c-h}@2k%fU`Lf9-RShVo^C&NQ%3V%Pv|jX2z^p9YPB|avk284oAS=uE%clr zBRtgo7f~wq$jd3g<8Z?yuu9#@A?>z^CSgT;Itp8S0rIF$;gGRiSj-~%_CGAe|J_K& zy%aI1=0bv4PZA`kZm~EceAcWuGNzi58gzq%<Tvk#BsubHVn<?l`A<0FbnobjF%4?y z*$}>m>SG1)n-SvsUsH_ovlfUgDX>7t${hjo!~#C}04evYxkRf)3AWHi?@#m!2ErA+ zGq1cHvkMMQEZGL2E;}v<j)rqb&>GvY3M2BjzqRN`QfJHRY`3I%f5yjdt^tAM0w24? zld{3OhH7<TV)k29Ff@5S_?O*X2ocPsg$LV#-INLQRC5}592g11F$iiv*~mJF^r}^v z!T4CA7$-1$?qo3&Y({{4f~(#!-+&3oF@PD_fUS#8?U6%aCRF=nT_GFt8dryObpo~c zuXy9XSoY)r&p&XBv3r|DnaU{nP<@m>5rYv<_0zBizpIP&3ew+flf^BVr4MR$r63FE z00~O0dXZnwwcN4*m;l5*sa7L`KjekJIR{#<2c4_<nl?Z_+xFXl1Egl^*p|S4E6wdf zKNuh7Q|a_(d78gq&d>YRoTZEoddS!rNn}e=Yk^iS+SHGUr5t~_vpF{a7aENl%2;DJ z8#G#}VMvMLAWSa&*_%0}Wo@LnnDxl052kKJ&K>yF`%El;(&liM{fb#Rn|n@_RUu*s zoqWPFgE{9m2SaBir;eIz^l&}^tI$Fy<x^&P$8~f*6J}{)r!Cgxo5EI;Q8ScA#t)^3 zA<?>H#8*Kx`f0Cp{)qwg4sMtHK;&!Pk^nDrElyrI*p?8q5T5b%`C+WdA<E2KTE3`- z(ces0U&V)GeUNIBw?1{o?`W($O&r`xF8#y-pI;-v;Ua<ORM^JBDhMt?v)d*M{366% z#jTWdSFV55I=JjF0}tSn9-o*kpxL8{h>VgfLkruMthr7E?)-j2^NhrGocW$&pj!6{ z@Azd=+CG>2sO3tsQi_X8wznnI>5xPFPiK}_&6e107dI)*nFIVp@f}NRKl#kgJ26`M z2ftZHDzL=&{Gz2PSVl7`>~@O}QZ|4~T*Gz}*1hh8?WOlBmU)$~$%qPsm}Dhu2JBCw zGJ11&LKX@Qmr!Yi@_!@aXs({5iv7*F4?eZ<_G5n~$(jp%<%;A=7sIjoZNwiN!~5U? z_2I2A+By2XQ{(}k?wvavJW3U>Ie`7CHjitzEKzb<^LV%-wmjxFU>sVUiTaXBRvu=R zOsF~=)X&Btwv56eE>zMBgwCi(6;<H8&G%ayyB6OWrY6Xn!%CN0%x<1k$!3&2P2=#5 zVz`_RM!-$=A98_w?aa_-IVn>`4?eD)-oY-J@hIoXtyc*4;ASH02-Uh@Z0Y(lI(yEl zEsMAPZ!Z9Z@DKOaRgBd2VxLQa4z|gnyBc5eDs!fS=cxj{@SIC~F+T|Cnh9AsQ9Z_y zcu}ky4o@=rOuXl*D0<~tUS!~Nk!Ew+&;I7H(;?$wNwWLmvUinwNu#VTR_E`0X@r2x zfEO7dJk*I&bP`S4w`h#a^Kd2C4HX9QAVy~VM9lO^ws9cF8IgE8TSziA<_^*JfL9kk z;0iRJNIp8xdBnBK*BWT;<FP3`d1X}uS{m`GPpgyUAnlkPT(}aXi%+)O<~M8n;^=Q4 z^m7T1HVgFndhq;?J>oSLJoF56oZ<e*r{h80B9E=gd4VfoM;2YeYl=_j!OH6a22+R2 zco0M5jT3%j@l|8hMOh_;>f2xS<~!^~Bq6Y=#kMh~H0%*IW=7hD2i&=frMVNGte;ao z42PQG7atKaKEPVjVZ=Q9_t@Ojxxh;qKVZqB;_8qhU22S>o<ZVE?(jUvlia_c81P03 zemhy+U>XoeRwj>rRk@0^l))ua32k#oB4l}qNyq5}%M9iID3uXT`w)9k)G3q1-;T;Q zLzgG?5@qNQX>fF&gY?Gqw-GM}wUHkVT+2VFl&rK&dd9D<@%x?6%Fi07-?vrceez&$ zVqHC2>eo50-xrx|>$Y5woaN1z=B7DD{E6QFD~sc@@tR|XsxbW%nN2k6{4gi=_wAtU z_|-xN+bN(v@9)dSG+3;xRe{EoGM(Tjtha6M@hn@F8?bwxC=NdKj?z8J4@EiI34PE= zbqg;qE(1SfYEoYX3to?~o+J*R4a+x-isPU(?D06CGAf*&ztZXv0!V{I&j+0brvfom zWhW-m&@5?pRBc{Gcgb39%Abf~bd=fwpeny9Uja*-CSv%8dJUDQ14YVPuLutru)SI; z1M@e3>iHY)2lp;3SfE%E;kx<=&G*a_>vp!D<Xdbk1h>Xdf90O2?qaK|1k@}S<K!(~ z>UCv}9t{=R{tVb#L>HT$OK5O&&@yAI{V44)hX}(^D2q>guZk(A!0|`hY-3S7LR>D8 zIAosEwUy6#VE96+_p!KgGKDYbypW7v1_+P201P-pCST6PzFZxMC5`gSJpe4zl_^~m zH`nYA&=`1Z@-E-CTk7f<%G;JS$^OEt(Nrzu5Frm}pW*SN%KhB*0^)tQlKa;oPt>@G zLX=VMhTJFS#|`eF2A=GekYrWzLQHIbzl%o|(n?V0zGUEA*9Jmzj#aGHv##2fWO|3k zc<=2)Q_mJdz|5ugN+7kFNXlfD@Z=zf^e$s{h@sv(J<ZX+f1iY>x8i!!d4a60dQwoJ zo_eXL%a%`~d<OA|TYQLf8tOba^Gzi+=^Ek4LYuKD#3LIHeu6sk9|`oKoH2Ya>NM(| zm~B>tXG+&^bk3@L!v+J&4&}M&)Q^3r=&qtzTp3f9yF|?Z-G@?gdQny=fKUKv5=pF; z#x#xf<m!xe1=c)iP*1KjyCj|SsH!{DiF7NA$}_-)J^o-PnNWj0j#Oysniu(3Y(1b| zN#e!8t8&z%*WczFXnB+WB(_5+s$EF-){Q6%DnnA}n&){5hbgU?ql4ikY&4vX3{kO$ z{w2Z_25*{t*)5L`eG-McLXY1Kkxq6&Z8U+qLVeMwaQW!5zIm<kc|U{8L$Drnd6`}^ z#K2PiUeKI$6m?E#1*?MOW~d6jI)1NS&7;k~pQb3qtLv&OH|}o;ZQhp)m6gD=-PkNQ z5y-2nu6;LV=HqBri8klMW{tGA9>fVuPj-q~%zCYeHu#k;8pE$mjKzvQ<B~M94}jf2 z5ESe?vcDUQ@{*+)6>`^pt3etf4I3byom@cju>H`SLtM(9b?f2aYM}KCvP9sW&Jwkl zot3~M^{+tA|2c*I`%`<gXnUy1DWyD+E{T3khr60>@;7TLHQY!$NsTyWeCYH$MisO5 z0fpHVMH!2;ibtvu_B7SKRY1Eh;@LeiaS@^I{lg^+l#&IWKZ{+J2oTA$1>4D5V?1q1 zAIILiTz5?zR%;3KtX2$B`2k`(+_A{b7ENjjoSt<~m+?g~>OH+76|6riY|F>Sf1*8X zv{q=SOB^9@XMHMg6(bE1GCQ6Hk6g}FlcVeJu$6uuQ9W!-Att-IF|^a?>%?!yIPk)y z;BNUDGuk*5ydo3RttQIJYOR323x9<@r2IbMLI##nl292u&UobOdymXLxxBh4)2!9- zGQ8m<{_o2Ec!OGr?i{j<yEMP>cmJsTeSye!nLgX)Phidb?e)hlRKVa@Ja4=FDmzMJ zU%LV>xg?H%+pk|%^LtVxIm@mZAx1WHAYpnqdARNo;;~J})(X92t_pSr-4IFk()qYJ zd_IDy0lfy5_Ho*|*cRAGQn1jP;yO{G3lK8QhV<2`;Je_q`?i)WsBJl|y4g&sZpjUo z=&kX9z*`F6eS*t5X1SK9B+5YaY(stXF40w^1=BTpq5Zhqp*f;W_WCTg0A^dl4ISsi zZ>@~EeDM<x4`#Wg0PG3=Qj8jS3uJc%fBC*m*mm14%X6Cq<<)rB`|(%(0!mv@k_lU- zj?q#tIQ(KJ`lnS1{+c+6b^P*KERdP5bDljp0xi8zwJ^}m@^bEEOdP7zmtna?Ul@yh z-oHe_af@T$jKcg)XSR?oR?lUAb{mw1S-%f#Ce<84_An9vtLTNt4V5Vi)=Pip`L)Tm z!=W=6oU4T0AR(<^ivj6k#DQ7*S!-n2td69;R=uc=s_5WC>o*Xo_AHvHhA1&Z$n1N5 zf7tgd&kJ8~J7^vG7VO5Ixsj7+SZ%>4AL?6rU?JzE5*;`}g4LfF#WfgesELk&vb&5M zC~QVsaF0>sxYR&5q3a@FmXz%9(|2(8AcAOO8$ioZA%y$yv+{3@`oD0Yj4l*{b^RM~ zWz_>kOs33E)tV87yh0%#gy7l^FzAB!ERMuwW;(w4O3Z$nkD@et3!Ob)WE@Z8htw}p zbRTh#k-GjA<$c@!lYMc0hJ~fYe11xM%+_Or-mhr-qiQSR%pM}gk9p!5{7Jpet&5}k zAWR8v4;`*IAZi$eUXj9wfbO3Uc90>!oW=%{=1j_TD4@*H>aEX|-||Ybk%PJ5I8H)} zWoda=KAdA&Zh(*;;Z!K5z$!trzq5l$yM&94{!)?hAuN(U@3O}BdkA{C|4NaRX7Q`m zR5IS0G|eP+T|Gy~=&A5J;-3yNwzegBop|Bu|Mlzt_njhu^700gJ#AKt<GC^iU}hig zNGXf?ClzV_05|58dGPL%H(zPo1b|7Ez~>j)szX=1lgVtOC0q=|a>LEmz;7#yut!~e zSRwZCAb~Mfub*4*Tcf`dZ1N9{58G`zke(Ir0qTH{bXl|(F0K2<%5M*JaDJxnp6dJX zR_YE0_xSpSJXEq|AByd|DO>51@iRnut#_0rkI#}XiM}U&?wQ%P@TZ$47$R_7pdjXp z-T{+2S6X~)-B+2{N5C|xjDS~Y*o-A6*3`8lP|;P9D%8qGlDLB<bs9b?)eB62GgK}* zno<6Ir7)r8KvX0^o|bRWOi@*QTT1j9y*Se`spYm*6FWWZAL<c?csqNNyHHG@q2H^I zL1>opBk>O6njAD-5R%zS#yFxsJ?weY5|cl8R^)K(D02C%c5T%bg24C1F`8ib(~>b| zwJ*^l1;Xtz=g(h3#<GKtrotmRO^(rHS?Bk8E$Q-GrS6JCX8IMjtG%LVqg1}t=cdrK z7Y?Bs-E>d6Th#!$=I7GHkhM=|Tt@EB#FoqZDWy=`85i=|eXOQ7X}hue+5i*s&sT7l zC^yxpwz-*85_%NtW;{F<SN~&!-O7%E9`+yj$xG&<i#(3Ma!j_lHB8~M_yGW3Ci8~Q z&{Y?ic*>wNbJ%ag@pzQ$6U8O#=80B#0bgyC%IB<wOPfNtTPi7OrZ{$_N&ewl$qa2r z*(lr)DQ&Cn!>5js-{A;if9Q+5!Ds4x2|%D!oJYSTP6P0T1(<4e^~7@WR&|N}>8u?x zD<Z=*mwJ%&QKMX|Xt=)JFcFCrC9n4%i^W;4^T>EyY+RhW(tOoKDTO*?Fzp*`PF8wE z38%7&gUON4_@#x)9|;9c51jArSfIKQJ!v!0kJ)eWq`ufLoTAa13g{mTo!KlQ4O|KL zn#=CrUpBsNiv&drZSGjWV-7$Rzjm-jf{TIFdF~UR;ztq|zS_+w4p(Irr0iM(FmbxH zM{ql4IZ!97NQorWvVVOimxX<p4iIME(Vq^VXmSXZ|FCT$yzmw7NA&%lW&<2-rzeS7 zq_6|@kKJ*P;Y;ipiMNqai{r`~(Vc1C>tXt-rvafW8sEsbTn{%-^ZawMtOy$EZC<_F z|5#NdW!IGB&3Y$5^owt_I;a|=6?UM($==dbVsiMo?yx-JcA%}4G9r`V3T>6KlMjJj z7j~($SEF+pS#vb+L9!oKUUIiIn`V<?VvWdx7u9!S4Oqs$a)rape#;Hhv#^{<ZPr<< zhvW83s$Q}s?L5OG5ddjg_Xi=q{w6T&Hv?4^*ZfdzSW*|e`tv+{&KIS?p`8c3$x&hR zc#XF}nnJituuvx15E6R?VkiLlT#8DN8E6|0p}*N1Txq-AZ#|q-{s*i=$pf*^tuBtx zTtEVE{~OVt1}tux-BhJk0J~2Z#!jk002Eu9Hm->gA|}}VmB<AWPg)W0|J?G2UMX-s zsFB#=RsP0r6YAm9GhDSshtwbkS|z#tOk00l^td~Q?6<P63fa)i>Nnf|#JN+b0E8K{ zoe0jpFQF=F*k#^Uh&GBnc&8d6j*4|kgcpe4-yX_xu`rxau2l8UTxXE#VV;+ZYjn>1 z<U!!UFuh{yTAeX%&zV`v=gViyVAGCG!{CGaom4lZHW1o=%^IXdipmb%MW$@Th<#C+ z?P=9!E$L<$5`r0Rfh>Y9+p2&XZ6TDPB0@a>Is!CsbP<(4I~jF-HW@QrGobw0TwsF7 z%}h_mk*Rae(^S6qpGK>I7yTgg^-`v948g8BElB8Ugx?lW0rYvX<Hib+0<om%trp4= zKBrZM9lr=Tory##aGGAd!I?hJ04~*!9t-8Wx1>cL0c(Odu8smZ!HZsemb2-Ec(v06 z8&%2)rVS`2kp|0a!kH@Wrs<7?!865=`_AjCw&PP?bTv{PipH9*tH4a*P>|!Q|FA7F ztVC*$SKYQsTO>ttZKG1K?$)&AYoA7)4y!}-G51jB^)TU(&M4WC=Btu<wCYmg6&Y5f ztC+<Ed?MoNGGaO&A#;9;Og5t#2^6ga%GN(eO7Uv}iiztgEP1C@)8ELfah81NH{$j@ z2zp$dlKu(wQc^>F2nbAFX3y2pLMYmZf;tjX8k|z+>UK45A>+@~De=d@wzm)vtX>Eu z1K&LEB8L_q_p;Nw55;5VDZC$Dz4o=ge!U42fNWbi{k+AT@uD1EX)`1(xocRXm^9rs z2PA#;y8@GE6AR#iQ@YOQ&U5*6ghqSZx-tM7M%#kTj0XEwdB9kp{=+XHc^p(U5)soH z?DM%J#_;c%>)*xP*P{(uN$BR9lsf6k2TMKq?5eS<9B1+=775{GJai(|vQrsz4s%Y& zZ{t1KQItO|O8jz*8jl2|!lP81Hi9oN)~JcCuLl^)&eXA&Ns3)-+S-zOo5rR80Zpc- z6rCV_=uHz+P#Nuh_uTR7^<hrnchx|1O9z_jo}@!&tTnS1G45txIOk6=iKPWIsAhlZ z>3*^k$G(1gXvzbmEPbEXu^ZN^<bj4QSb+{(wA=B{(h0G*qy*KHRAzdk9W0y?f9#$W zM#t*(`*Cqf7356J3|>>sl)oe!&aGSk1ETAvy@k7UlQEw)#qy6!^#sg0IRZWkXffIq zu^o2(gl@a<-Fv+lboqEn;8T*!KsoSsW*K?^503=U)!z(_cBpKKOb|uBt<f@d@D8ZR z#vNt6(}T*W7|h8dO{RqMvXy!L%u6V<GFQv#ngO(3sM>V+G+YA!+ts2tbD$0fqA%V_ zw;k{PO|${W0Ozs4e&v3WSVBfT2Npx^2uG<BGtKd8sf4A1A`d7_)^mq6UD*rafiptF zJzx5Rvu;WyB5^A00a~B5-WOX`XJq@-%+|_y9FO;SKorXF4$Keg&xxEtw_JPG1za<` z`q`(aTnn=eeg*rd%!pAO)A!4L@+b-zJDfeedDG5&rz&>zWv%2@Y&x~09rhocE^jVD zAv@>de42GdrVZOGI$Ce}@MZ>+Yl|xn(sMC5Jv`<RZi6yOtI963LYC%SU&Rl5#f6#n z?Sv&@O;KY{;J$zc1o@^XSLYJ$cLYg`7wIG4)d<1XGC#wS_v&0)Nn6D|+%PY^)J(@N z9RSil1hg9?Q@qd_s%)$@e0M52DAx3ou%G!|n&r0aw1fg&&s>?ui3~)szAm^x@_ln2 ztjc(WcaksYOglV1_uibSnrU&QfVAY9%Jxe|JJk+-WmI)~e&QYP<OmRXKk<B)bzhel zvNdC=3+1i`f=+WsUl_H!5g~ra-)$+ipjQ@%PHWG08QWbR*|5i+1nol0qWlIej~xRB zE-#}Lc_>&tq?Un+FZ2U@_slF^U_$AQ5Pz`jF@L9QG&j%pgrQ|=r0DGBko+HxJ%<<( z>Lui1_J!pfJhEicR&3k6-;D9R6)ZU$_vB+H)6TDmt<U8LZ%u-5?86my-I}6%xhE2l zF^YO;xT6wgI8Y9uv{PRTFDpO&H3R1VLdidTdnU~1z21L(%}$7cqWSs{VO%g8fIYji zK#W;}J)Ud0VI-IP|0keHOAa1M+Ah))W$!YrC9cou*gx&Vec$VjD?GM%8)+cbkEBZ3 z5X7~|BkmhF09nDZtbKYd4TPJfNPxuF2=GFpoPWJ3vqA5$gidJjt)14-%d(ot@K;V~ zw`nzh-sGlOgGety9d5KW5VFgssL+awOs;LaE#Crqq^Dsb-d$r-M{enzI<<x@vW?UO z%P;RHUUo3M=m)Wb$V!%wtVgdbC!&<UXE&~k$$_N@q79RhA4V7Rq|80H731AjJ5(21 z1q!Hbn{LG&T;r$6A=U$Y|6~`4@G{g4o1({Gw4GN~0rN{B*+gT%CAZ=0awI=m9$p*_ zUfi_A&6pM6ZA{3Yxy$*%(fM8g*i%G-LwKcmZUi_2wC{y>)n`8Q*BsYMRnS06&Kjc+ z&F)Ct`LD(V-j!$`aa<Qv*oaC<&0L1mFSsf8T-k@cMjh?|j8uEwd*}^^Nt6iJ>#S8> z?GZI%o^3ma-8y+gJ}Z~Vo*$^bPL4IISWJ&smOECTOpI4;QM=(XHZw!AK(&jZteX9y zOOy$l_9VLE{h3PMisaykNt|G*A!Dhhz{5G{k+f`CjH*ag^8uHuZHoDig;WUdZVi|Q zs!j)6tamKjKZbji|8kZzz~pKhHggU?{QQqs^$Ta_g-#UH^0!Z&eWo{9T<jUc(m|2f z{c&P6#FQ+Vbc%{r8!@zsW(SoZC6VRdf~mxaT2d}t$?Wng1YK+Q-$eab*jtBum>>{K z3+?8a`Uw#2>A<_=%({^)KI_EUY>^%sBC(~YjY@D6y;C8hJ74&)YTLoQ$57sxt#d|m zmQmfYdmryB;j+{?oS|1XyZP>`)u)r~GUm4pWfl@VNZ-3E5Pq=Ropz9uf(Z3MfF6XX zNN5YCoPDSwUbB$qvSk<6)Xmo2DAqJlgdLfBumloG!kWtW=me$sjey<>9!KnPLEWUt zbVf(=`|tqLe|iP|O!*?!F14R3L#V_%H{=afpeWsaDx0KR=D3|-QjON5jXn(;Gy3o@ z^(`S=;EQjT>%rIk6Ak4#w&}DYI_3LYOVCo!kujzz!}S_&c`p&D5rT2L#nni;<xq9z zX*v3>t|@oW=><{OlIG?)Vll8rXUz3+ZWX~N17YqF*oKbb@m=leq7{}D)O2VNA<($A zr2K1at&@MwRO>jA50gp~T=7(AMmN!%VGSsanAg_osopZ@I&T;2vu6MC<!)sQs~>A9 zo=u9sAyuxzP(7Y?ow}&{O8z&u99&kw0XmL#hqpKO)ZK+hoTm-2e=gw0`PHFYw6P;j z<kI{ReUyu-c2@KSQK2*6J0S!nWtBKn!6C6CPV9muOaNsc@QRF`OzQUqO%JZ>8kP1> z3+pH`;tLiejca!x_J^zizgiZZVf#UB-uelC8++@aoYqSVJz-3A6T6_FTlOh4?j@>E zycTK+QW?4WH|H97#+WsXB3qqW7FTaG@h*6(-yo7#(XS@=>$Cm7i5Yl^V7c)UGz?j2 z>v)%L>KIf@Ck$9)vnypMOqlrUWhwkFHnJ>nF2*!B-SjC-+>wkr?Q};^z(xeemW4$* z;iZtSa#5*FEr9Xya5x<<i;}jsNG+-z&@Dor4lH*}v+x=J`%{b41oe--A!~yN<RA{o z%J^XqlN0(FR!-O&I3vMfz%|r=T`Vx^eHj^_S;=b_AEsGK@z93eqK+rKdcyNsgCbIs z)wojqk&!M+j&Eaump*x9n2>}rP@Tn*mqor!%kPfdOVgt=U%4|khQ$W6HN&?TH)0uk z9MczdcCGcVH+VY)EYd1$2d{gEwvliTW-DepmCGW2bdQ#g+An<$>z3Y_G~1sac9?|~ z)Y~%OQz9Y$jva5f_cDgGff@B~PlEd{vr-wFbqEKgc^&tN`MG}#$G#Pct#)wLtTLPL z1AyY``Dpp+JXFFZBC;##%T^kb${QtAalzRcyXD1!#{cAyrGp}h!K#=f0C@;DzA{ta zmSt4k!^EqR6uO;~<TC4{_8sG(4@}GIG$VXjgXPO5rUAxx$ui*tFU<qdc^RGrE2A#! zAt7lW4T83S8x`kPs#(`Wqv3o}fGGUUhoY+r(3$PGs4rel)xo|jb<#4ke(WSv#moLb zd$Ss1@@otmnDy5VblO3aji(C5nAI6)XNm4i2O%|$AU8MaABkl=fmGZEu5qzCJU#Q{ z<q&51-T+x_>nVG>Yl4fX+=QH4JfTc<AuH6x${9sP9_~HS_(Qt_c1Z@nh_(ygSy}p# zw=|vlD_!Q=J&B0OBzBQ5CzeCCsOU;_YY0Z->djpMHS8q#!MwSRP7m)KzrK{*;P03h zy}-Xb533Uz$>5fUF#sFBVudSq7kDb2LSQo65mM$(!r2cUJg%m9fd@9%Y=MpRRNf`M z9|cw(XKZU|wwUYoy^gIJ$nKYb6}14m`1*Q4ITsNMfvXJ&AG5c}Pw0X+>O5WP1lS)@ z?kcb-x2kJ-G_^^+dLlF>{Wg-)8F`lFIM&;wXq8}@NApncczUG<Wcq$~A;6leBG}^# zx(@4igTO^53|o`c8!J)f&46J&`g!N&KAw`{)CvJSkwTL4%^nLL5g98B0Y`^YE}l9I zZGZ*a;;7`*erl;K?S(6g)kA2p0<4lupI5Eb>dS@<^hniwnW3V=Iqpb+Q_05@Jn?J5 zF|ylgvEI84`VT$w93@J78E*#~3nC%<Et<}&0K10>FFYA@Y#O<l!H2g%_PpUNg0sMe z9wa_<E_6P^@!kr=knbP_rQd2K=X!-KVrTc$p{?2vLxc{kP_sqr)?}csoho=_arRpH zbHC(+N|%XURV!r0UMHFx;q<XD@4<l;Pf47EYoq$0sJYCvWq8DlC;#Bv(+yuS|8}nJ zHpl4GZjmlar$+$hAB{+=-zph31ewDI(0D(iixn<E;gnaUsZQ(srA&24dnr!KmnJ<H zVn-Hp67N`9lrPf0Sz<_Px-Crccr^9Pn(-)8XTC@KlZuR`#Ehd$%PT2)ye{ALI0$R5 z7fvdNygDN?6_{nq{kt6JUvE|ID5j@mG^=8Qoxj=(M0tG-tjgzah~{IrBQYhb`)LCc zxF;I1cyH!e2Q0>DE^`E6M6)RsuH$8$!=!IT>M!}P<SvHl>U*EFTRm;7@~x|?f7u)Z zA)}TlvF7d1&pi4sH;{(hUJ;?QQ;OpML9)B>Ak_x@cv)^aL(A1Y4-LmN-_v`7L*F-U znidp66?CTeXZaR(uWMPs?~Js5oiaf%lBs^(Kgz!a$(I%O^a-X&JmG$y!|6(>NS8xr z-x2fXrWPs|k~>JYF`Uy;tQuBZI0iDR?Pp%-8@{*E=khDANG+-ChaE$8?<7{xNdfX4 z+R&k|{<S>b3wr7b-(BV-k+%2)LJx-m=-#EK47(Lz#7m~o+ck-8k%HcJpoJ)qo&K1P z_N>WuWWeBbI19g35Z(7L2!4iM9{E3o0IWrpgq~uRPc|5h6#n=}e#QQTAl;5a@RHgX z@xOg=5<p2v=2++a#yc}XRTCUaBA9$?{;>i|k+nDxsEwzpQ8g7y|Gl^RAo0+O*@f}L z>b7#FB4o#xQX!u65T%+&@p9G>nx2F!R~j+aE${oTzIfZPoU^d6ohMGMDw&*jD2tPY zoimX$u}T+RYYXjDy{ATN_T;DWMi)KU5kVhHU>=V_RO0XVUgrU``!dN-O_J|AUR$R> zNpjwp5E7YdL>n*DE){CzbJ|v1;;#tCQ%9c%qFBl73Vfg9Wdv(UB)HC<Vv9GO_+mT` zyp+ec_mUF{_x01*HhMrGzV>|H6lqy`gg#$Ok<&|pc_+NTD&eh%|L2u3Mr`9l!0N*q zJSAl@<&{W649ktI6=U9<F5*VnK68-H;?I!v=EJdkmHDP#%;)lpO!P6bmWvEzqb1^n zJ?BCNZ?}=Lk~4m<;EW9P5Os&=y6(Q0>?GSa=ywx^U*J-L<o2eU++I^l=(yoqc<^gZ zh-k<W9a0AB(GX?+Vh;OIb@K7xI|kLXh#<?TNB;XW<LdWgA->Vt^90uFQXwBevFD$| z*fw%o&2^PTkPW=}se3!<>ry|FV2xI=<FQ4YSojITes@jsiO7TkI4y)a<I%DvJUzkS zYfpb=l3fVj>Z9lL4e*-$3Fdp<yScv%2DIHQh<q?Mr~jWj;=i_suOlKw$S74N<qiXW z0NScJ$ctK^M$U`hwy^^;hUpv?{c&qu38gcD%nh^4?Tp*hA?C4e>CF<(Y(*+Xj{oxf zqi%|U_^<H<`w82hmWvu6yVqH%%_VU)g0~(b^H;SZ1MR)Wg{bO!07@$9eMY&wsaFdV zgEMYAndY<OwZXb%pDaw0JpT+;Oyn=w;TM(`4bZMaYiFt`p&Qyh2k1&YQ-hYoI3#Ze zt<?OzxU{~%%)f3ID^#Q)t5NC*Jum%sMpJ+d4O=eR5Z{-a7GpTJHUNXcp8i&Lf1Dnq zf-aUJF;D&v&ex7lo){{B+_oqOJ}Lc&1M>eZN5gx>Z&uOWTlLixU`iW`h;`Kg+f;rx zMg4?zBYw3sVC-1m7_v8dj$-PdV>0sCQ+31(&(Tr&rE{)8-$?dMd6n3*;^UAxy!4b} zlocwDl2(+_U)Q(#b;o*4W+k)p)dqK+h$SY}$70$zFtL;iM~_{Kb>8{CSzS%2$WhlP zg;a(}<n$EBGl}fIAU%xC0c3d{2A^FdVR&F<7Z<)gCP{b`3-8*ATd?PhH{K)tml*m_ z!ggF;9EPJ~4`3j|=Q#{1&$dY(ZQ5&Gnsf5G#1+^v+40fS;NbG}1?1^`+5gtr^EyP~ zCI;8-FKf^~OnGu4u@&-;Sw3cfDoXZ*MZyam1#p9Z%GCGe+mAww=XVd0ds33f$yAwd zPESEXKWuAPS&lvTnukb_j%?MOa@nSEi_$u3MD)GruZ4e6qn54q`YuEuq3&K|6(ccb zQYn`RkNT)3!t*-a)}&csS9QNTTYzUx$3=qQ%~nc)3VsIRm*dOVco;b|L#pK^T<AI` z8t4|)dt2vRLH3W76{o;khI-l8h6q$W*8GiyQ<ypnY=xYHVw1nDI@9@jVsh?1#CUO@ zZ(nZ4b?oz*N`+jzM&OinVuNjjrGGl&t~}QJkBi-VwcXD?-y}CbZ)T&+vmLl#96<iM zDX<YofE*dPE29Ib{i?-+DU|W3wW?X87a@X(1cztg(sg$2^J^~^F|5@|qJsuG@tUe4 zW+`8IB%jzKF1QE#OTg?i;*1L+$+An7KjZW9FpK?P9m|^h<m9FF-HiL_9L8$D?2C`& zGhy-J%PMsol=~<0?ZQQbaps`Ov)aIS^4J!0>mtaI(TkF<KXD(X-jXkfXZFk>TWZ`R zvXO+fm1mzZk>e<0z@=G)pN3)7?*NqOftj88G;yXx{LB^^2kBeB2dR`HZ%E4*-Rp z7_N+9dir+@-5Wh!9<4sz`?uYPJim?Ow@f=fG5XsTv4n+isoFsS?oJkrPzctD{!KhU zoe;cWtouvIE1AN)t6Wrc|Ba)Sn*_5^VTpo2P&6blMyE=&>{id*NlGN16`_}G5R7n` zH+wODC2W(~dq6XqR%PZ*>X}uG7MA@I-(KoY6WU^UIJ?sUGAs^K8dik#PuGkK#ww;# z$Klk{001Hx->T1wgKf&FPrlrKf_>DPk?#X2v|q>l!HANpaSf2_tMlDe2Vf1`j22l} z6=9-_%h6j8hrA9uEp;M}qs8FF=53(JBF9C(Gwf;P8!2*aQFBRp&|&-Wye7N4YMcN3 zuzBQv>&eRRb^gi1?yq;{(mMn(L0hq0g>Rt&g#pIF>H!)`^dc)CdWTuhDax?%*U?xd zjCSQ&T`s$k-wZMl`QQXAA*|9>+LW`g==HQ6>zRJ3^&zhfzh0DQ-2$hLCS}5&qSYon zG}X0+OO9^VxNhS|jVBPdsT4%Md0{M)7S1k6KF3A-mE6~NAjZpDJPDv;0R=55@R8I! z%f9f@uxaDPMxM5j#2+D{EHwia3ZJahE<!*(KO&j8lXR;w*tsP20dEl7@nH`yP|NhQ zhVoG$VjmkResoKRAlJxPnjd|E<^^4+os_iv80}DjEIpP$<Y1R>*CG$i&CUKmA|s)W z!uY>cQis<8ZU;DyRORLrc~W?vbr8`7(b&DDwSJ=aSqr9Fha?8X(9tV#GOh?}@sYfu zmDs<IdTF4b!OZgXRSp|$RwADr&_27Caee6Wq<5&2*wC;eauFAH@V43odmKee*S4h1 z8zWW#EtmbW@u_8HkpbkFH#Z+Yy-*i_w>uIwkE5T~KqGVvRavJ(2YvW-je5IuxA~A` zBqzm?OqQd(aEn_9WR5MUfGki+aTkfnm}3ZD+>B9>Qv_wU`KvMm&_kDG^DiESkn`+d z8?S;Qm6d#Vk+Ek1TU!B-42_UmiC52uMsS&u|BdtY@$+OnP3C{=sQ#;d!h0<zAC&fD zEXXYk#)x7rvjs?`Mhua$>@yFAQX~dyW1r{Op)^vi6qt%k1}iCZ;^&as$A~LIJ|TRv zfY{t|9h35Es{{u7eO=2e@?OliK#y}PuTc%TDb+yS*Y`JM^>(>PRUR&`|NJZnyKYHe zX`#(rX7ISY{pvRT1!PRHuR&(9R~FBw8q7gg;n8F!^e&Y9?zQCldyrd=l<EPixI+vA z2ctzPAa*2ZaxA_%9F-KYHuBUC!88qwi^Nt|hupu;7<JBZ=Ff2RWJGXt?Ebhq>iN9r zKb683OEB>Fo{|Ga1I?-da~HqQRNSV$Kw~i;WsfrK;af}(43qE%e{18z|KaN^qv8yr zWD_I|0R{`fWpD`Y?(R+q?(PsAf;$ZE5FCOB3+^zu1`Y0RgWF@zdHc?uearrxe_v1E z?z&ZVs|l~Jdf9y3MR{@k8$s{zZ>`Da2P|dqc<ywrgwIsgX#+6fhkUXcVx`2piE7j@ zjbd~%EZh6By4vU$4lzG|nKhGlM&HTj*g?Hp!Mx)yDnZd)u<%ryq!Leg4$5lKSX}cn zUQJYuY14Qvxg8~ly;~QqzZ6qg8S~Gh?0kQ7aY61C&;5lc?&5M&E0;qpCKhJ{D;lBx zDAJ$u1N81hnwUJ1^U9Bc)o*3>DdXkG!m@7M&o?)FI~5E%t*8#-BZ4Vk%DUQ6VA>f0 zn&4y+1*xWH@Ihx_y3>9>tT5p^w=ZecZ*t_D8^E3N?mP5G`xEW!n8TOk>6aPl;&Epb z<`rUx$Sxa+%8g8F`lOpJLuUe3IpNOsl!hSdEUNx*@^!L?jtMr9KuJT4>zxoy=>45o zlXckHpuD+JV+P%_X~RHKw}TJ^Lf5}h6pv~X>Z4?VEB6hF4u%cE;yGu0ej^b~jliFG z@!(x&zAjaC(tBaOsT*k9BVgP{#PR1#$^1mn#jX8wUL4Ws>GPFfQFe#}%m36fyzcN$ zdC)sc<c^ESO-Zh!wgyy$jV|PMxd0mmfe&`u<&6W5du0M!0e;FcMB6g!(iJ>n&~Yi% z?z0Qzshp(xzY&aw|I&NwQ<oR-V~>0;s_yU&o{$(4SI6>{1KMs*>N^b+tg}fJz7W=o zx866o9+*->W^<>oL(W4*R$H`)`jP7Gda+n_Pc35mzhiyiZzA9sot>!SdDW{z04=@p z@2fhoF6DmPD5+%$0GTbG0ezr=yKSuqo_Cv9u}nYhu5w&b`w<WjJ3x%P2p)pY3K4<8 z1>_E4C2t?F60;DItHN`z;LApp+sppT<1Uv)&6df3ZJGW{f%|KVknkmIfx|wB?UBYl z#9~}fdVpt0<3RDCG>~~W>o-p&4rmIe%U}>ek!zAJR)@6Ftd2qlF-*#hkHVBBvISt$ z{}cW1PcUrrlR-5@XUVR*NDlkLF=MI=IgP40Blhw?7gM#rR3W4DFRXl)MnZ9|Cml`t znDWk!;~X!a*cq)<VcVU_`R{#hFb$ckmKG&$p4^g&0;EXn5ryAmsT0~4oS7(_oH~wr z(@R0x8lpj>!7D&_n<>W9%UY971`W9%H_E(|0)-NxZh~W#2!7KHnCnL9x_BmSULG#% z2SfKy+5BHl?OW2CEZ$lIe35sk7P{b(F2!)E5MzHnhVk7CD_@)QY=kPyZab-G_yNKF z35A#*gW#)oG>bK^Er>8>abFu-Ao>=j`mt9yj(Nnq!%+CSreHL3%bcC7_EVL#9P~ip zbd~o0&z?_WH!jvgPfmsHIWm6|Zwm7{#j3!J3F3IFIf*r{gL)aoW54_@vde<Q&8YNl zNOo!~y&&7y_Xw4vtw4<LT(<@lcjLiJ&L>KBo4ACYRriZ!kX`a(#27!n8~qph-+l*9 zZ*K8pkWvtHq8u1v8-4?ZY^cSDN}pQrWrz}W2NxheQw&S<nN!%p`!7pbLffqa3<wY* z_3G6Pr!DRESWk<#`myXCL9GZ*NA1WOOktuQjlR}z81JVhw1JCUQ6dmN?iqCWDkk`& z?%j~`J1#X!Y8{p{fA$gWIgd8T&TxiDx;oX$ubRu*98B!g-jyfkD||o^YCH;cb5<`h z!pxc{9_(W-k?F<UxI(S(o#y&3QULwZ%jPsXeHVj@N{ftep1rvl7{8ex3^`kbq;X9h z^x)sSym;TtCD=TpI7TjRslWZ<6(maQEG$71#$#fMLIT+D;ZHGEMu&#K@O0aUF@$?w z+5r{K`HGj|an%a0-L8Lx_<aN(q%65ys_QpVxT1~>nlF0UvF*%Y7DSG5j-=<9Q5-41 z09s6);|^D7S==Ti1II#{>+x$AWB#R3@ZzN{9P!Q$8z4*bN!OKvs&nNE2gM}X6dfQG z#owDZe|1MTXm2sEb8@Yb64f1il=x&UWOm8i_3%NX^*Ogcw6@!RPh|^ug&9xg9JY_` zA<PPqPS`aLS~q-h;~O+qdK<8PhFPDPiyLL!&~`ZRQgKI7i5tSgY=&5bS*uL2?YTY5 zx+{JuKrrNzq5SxKDFJ6Nh8O;QzMJAs_9+zMULL;q7DdMai$o$)fsVA1s<2AD;>ai; zVt%AT+17VWk(KTj!}OG4ogTm>bwm>ahH|JOOnflzt~rt}2JBjuwPMB^#R{UNuKi+9 zk#?#!<(ZTybT#5_EetP34|4AR27-}<N}u_siXVg;6ww=@Dko#JwO~GNfoHbv_ee~o z4yW@s#D}4qJ$EPP_MIk3pVHp`J2}PQ^}|Z?hndw-x|z3u6oAE~coYoXNdlr$ZjVyX zebnqxhz9KxF5}+WFAc$l4rf5jx25r6YpNaApKVi_Ee8)WMdM|Dl?d39OTXLZ+6$d3 zZ*C(DFz!-tC=||-))djZ;Tb)^Nrc(peDNS6Vh&qYiMZ;$S;Z=QUZdKbCaNWQ4^Z-9 znfg>TG+QDz8p@-7#vPA#C~iG!fC%)L$5qh|S{Eu-6_Jc%=~k$_j1z(`&B)f-^mP@& zMx~A^e}0f#4Tn_;t_D?^-B+LAKT_r9vO+_m9Dnw!3hZ<h7JKbh=Q6e**xiYWL3^I2 zmpk}GRdz9X!?|()8`<@rC-)j9S{Ub0U&h)oavXse>&iIS1G@^Y9z|<bX&C`Qlt#|e z;H(gb=0mLD%gAq&T$eSqU#FBp52o14BMbGIItLU@%{Cpg7n+0mvLxfXu9k(8N2ucl zBveiDwl*Gd8T5WgcTs~LQ}#9_t-C&w2h8L2!VCS+W_f}<H$gF@Rb3d5SIPAjr#zr| zqyb;TK>ATzl9IGy7f@IrdA~xfI!l;ZMCA&a;=~5AzN$|I>~Sy?0ndgzdr%-|Ig!bu z*ewe41iFxZ^fn@j79nT2i5{qS{2;%akQ{kHf95)C^ApzhvFJDWz6mn4b#^g6%#}|f zcUq=#B+_DT<ZL`p%#T>Vd88}{bM+r(=lhhEoS<{?uMrIsPn`@e@c^Nwt2%83r-h3$ zc_O<r+tS&FD#1oUjHx|GQ<D&qK(Fx)>Ny<yjCC<<k-GM2h6bqDvSP|T_M$Aw1NY6g zS{4wj6eB?ecUz8m(FEBfx}31{DFN?zM1MPm1hrWy5e3yOg33LT`*lwKy3dLeqxk0n zED58nCWK|QIV7Is=28AmQjD?QY0WC|NS(X-esX-G-njFwYOV}}ulW9Ug@1gFz!Rp6 zBoCohDCR%^^34D|LYga$1}T`PS*0wN6AYgqU_1zIwUbBpg!K{@2~B)fGyiMPf>7Lh z(89pzR-g0qyYTdBW&3beqxUisJUd#U)PWLyHu9HW$<<dL>*Gd#=Y7d4#`mGfTX|>v zvwSACshRR`*X!oHG<8?zsly?5D9XK;w7|U!d^H8XR4ZF?me6by3kKv~EY#8nW?~VO zFlt}rRFu}Fd_}^bDH3E!?+W#8E;(_^-L+9nylbscvh(cl2ZF6So3rySya$&TI@H&R zbgMtNLI$b1NN@2Hw*mk@e!*bu%g&}SIGT@1oWuI!QJo!dldp+nVWu0rl9?7sfvumL zoER0YAXW^wI2c<lXp?AkoH+sN_hx0~%L)Q^<+k*jzk5|Mvs~NG?X<0)tmtJoxXmGW zAM~)MSi)qlP@-uymn7*vIz6;?P(3k_F%NK#+xjT>*rA`zJsyFQ83)Jxj7Hk@Md!b= z<~4NF*(AzU<jQlIEb<w>Y)k~Qg$N~Av3|e(2$I(74T<Riijrn*x?;3uUA_Jv`NUWT z`d#cU!ZMhcJb?;1)w!rxPLS+vvnMH?z3&zwwlB<Yp;8o*caBk-&hA{1`u@~JA}Llr z?(CSW9%p7irw>HM=Zx`)1A^{p5*F$s<}OnLV}ZCKn;%FX`jVBl7Pc*IG21rv^crA# zu9JIl4mWM$n(cA7on7Pgb?^h(p*qfL7StG@DZ(bR_X?k9p+vg<N4w%a)7jTHUWXI^ z6v~O0D@-d_f%3Vk2V?22!5ml#VR|n1a-<<Y73abuD0MQvau{_4e472dxjX_Iz-0H} zlhn0hq^Cr`4050h)s6|Q5pXEs*<$r^mpA?xknTXVkyBgF7jQiMzqQ%#xiFMTh0$t@ zNHfmuDA(5sSV$GR@xR%kjS5Tk443FI=hlcesVo#J<V>5BI3O;>L6)dIC7Wbx362vL zwo}-OpO%8$8E-h2+Ja-h1YU8h^yw<}m-P?rl0(IABR+~zA__q1Inq!$Zqtm7IgiUT z<p1phYi)l;f{f-XolD$o12JsBT+*HH3M&M6ds>Jp-ur8r8{-t!PZF<;%Evv|QQTa= zlMM)31|vB8>L=ld#-nE-uSZF;W>2Dx7I@hrpJ%gP*W$&gFAXoFCLs=kcrUyqPK4j< zjNv%G3CyBjjSK`SfLEBglOF(9dFAY<yxq}An{O-_2mv@-q^18@sUZ{kK3Zq1RpLKa z<J#gRn`-K)6!oPwe5HLC1>3ZXe2i`FTFB5uE%b=lI~rz!*9_MD=Ywl)H07ndH#0E5 zUoI%&i{8RnHXF0Hy07x(eX40Q6a=E|FahY`Q|P(V{w+EN=BpV;kAeu)pR{WG?*Djh z;NIOO<(u*TrqDP4^dLrB#&O^z7bD69Fd_U79*=U1zqu$Au`r;LGO5oB7cL<D=tG#f z$AlVY4zSWg_2@jreeWV}b_gHW(y_;$h$;4+uxRS-C7>sH=l98wMT{qOfJMO_Jia0A zj?X7;IVdD%-POuZ)cbo#TnPaf-70*_-u{<@bu=>F*Ck>N=<(9T4JQG-U`_duF<0!- zcKR^ngw*xE>5(YlZYt4hqmJ=(|9CXCoeYj$@VRU{MkTHTDPvKw!9`$~G!(&OEB$F` zUt3qUMKa(I>L!7dWvQ!tf0P5kK?oVpQObN!l%+VGLmM6_1Tn$FX~O-xj@VW1>CR=m zb|p<p8|KhYS@RQA69|ss*@V>ID}>s(S?nM`&HaCx)c?Jv8~ugcIU`L%BoH^Wh6Akq z*+L}4$)}1IOHkLjdppi@yUrps^oU7=qA11x0K@E#coBOZZ}@*23_P$^#rh2JrAywO zYA)*WS|ci8!PHR+%ZiUC%p?>g#C)M`<Ah>a1yYmKIWLn3W|&kMDrI7e{J<I`-;K;Z zEPZY0wRj6ODmi{Rj?OCm=}-53>Qee#t@<#t^wEdCm+N;HrAvwUqq&s`KVJs-nHY5_ zcT%BLY7D}CkSLKapDX61x5D@iLf;Nosc#ieE>C>oXKwn_-CCe>yZqkUt)%GB8{f+M z;9?e?2!{JRG{ZBRUz<NA@lBjP#6u<7dTSv#_ob4p7Tbw6njF?qtK6X_PXZ>kEH<0I zqld=h$0-eSV`RbdL@C7mk(J!sPeh&F8I8DrDJV*R>fBC24MGzVVoTczPEw!!P@U_k zyuCbU$jp4wJ&jsgCKB_GG_4A^HTO-oxot%iTQVqVm&GzeR6dlXpyv5}3q^!yV9WtO zXtNU?k0tGUR!n-7OC6UUeiu?YfucEom1+x<s$lQsQ=17EEDvCxoym&%O$2g=f?mRe z$G9Q8CKDiwL3JTYj7hh_C1vixXdV``GlEc@C#FBa*;Nr{4f3s10Z&5*DY5nb?(sem zz|CtuR}@!VyILOKYYgx%2@ap|7P|^%A$*K%X@N{|Yv~*#992dbRDJm3<f?vVU>w(o z<oNVE5*0<o6$D0k?A)Z8nOL<gh+v<~ZNd80mY{I)ouR~2a6pepd1p4^A#obDY5A8e zVR>P-q<Q>M2_;s8nxp`u2i4(OKoI5Uf#KTL<OK)U>`#|>dI*GuoE!TY_X-i?U6?Jb z<n=ZVfBLP--Q|V_8i@WXj+loXA@Jp4`NA4`MQoacRQ`9}_5VT9CDM1y$ij3O;xk5` z{5=&y*`4&0s5uxcqygFZ-136Q?qX!3&jkVy(#3UEsk)vHF1Ug57I6}(I|Q;u@;uA& zY-*jygbVDx%FnlSEt-lZqPbE-S0@{)nqFnKfC=^7z-Z^GCL0aki4l^|L1opee>GoR zm!>;K5Lw)CYzyDD@afM)d}Vj!5Vzv~70l@I7qLahEDfb6kpPo4<`PkXyP|NAQq>8X zgffISx;x+u9<8swaM%e92wDguPM0!w%CkbdOoPQjH3y39T;1P``a#tc)VQ-J<~zSE zD()NMKMwrQ_5Ft#F57V;fsA;}Z6BU~OpI@^HuH`oYnX=d56(HcJGUq;LM|B{Njj)7 z&?SUmDwt@C{Wa*%?H(D<VD5TaikH*ZM*Q)(#o6OAX}!H<pKN!QtgcQwbKAsF{9q%l zC3)o{gE|YZ`hxvIaxubSInmZym!WBHuPe9h?@iK_5IvwMosCm`T1Fc(*4u?ULN@R( zX2rxRJ`l&Mx@`16vj8e-4DuZ)^qkvB^F$y)T7;>5wPi~9E<#M3+XSJYT#f>y(vinI zCXfj$&y^Y~FGTFsK+wm#A^kR4Xovhh%;+{Y1>1uY;RV#J!Z+L&mbj%lGuN6O=x%q2 zYNSOVH?*UD3rT>)(W4$%^ukW=W1;~#YzFK$1Z1urCQ_K0t4>o1n<a+rr-_k$L~?VM zB-3-2f>r-jcg*VbLcRPj0|`fWN#j~sI!OB`muJi?uumgV{DH-lTxo;z*@ZO%+p%64 z%_g)62s`>;6Eukfl^LEOT8uo+BA?$U3#|wt+E`9g2Ai`WvzxdCO<7chKsu$f#|c8j zh&`jfN?=$MQ*R9_dWWH@2QU2y0y0{n(3<aO!iv>1wEjGNmqhb69!G|$BF*mUQhY?P zj}zrXU{?9^sS#s!9Age9S7&8(zb?f-DJ6x~kRzbmGRC`3llY=BC!qSiFPZzs(=3#B zbl9iOq;hbz%y0B-M|}CMR1s@OA4oiMtI#iHPkhZ_>hz-?8^$%~;3kR}JJpUh`E|(N zL~BR=LmQ6eG~tnQ>L$C39tUSwvMywcG_MSk^|EYs1r?p;9`hle4`PU0d3SCl)$gg1 z0b~J+7>TS}W1hJF$o@vi!owlKK?MB;kq)W8q7_N!_2(w_ng!u!PvL<zWw`JW|4s_7 zm$7qkz6DC%B;GmUjEU7rozYZ{Z%C<y=zE}dh~NOH$^h|a78)LF`djOdq&}5k%`DFG zK$m14cSX@Z)VU8{4qyEB%I^-JJ3FzEZd~&{3us{a)D^xpLYA!&H^Y_Ht9cujeXX4* z|9Z+_GkIinY^rOs#TeVayt|f{^YZ#Kot@dea;$eTVj19Er3UL_3yK8#z=Y5-Y2*Uy zZ?pE9R7Lrcrq8j(SYRCi2Z>1Hukd>%tebCl0Nx|OO+e5rHP)RRB=YSk=*EB%CsK)^ zV*pgz$MZ&0-GKtrl~(sx1!%whQ~6flvwfPm6pA}~30@_2q@RCS%o%>&Yp2NqeN_}B z*-RNabQuf;=(`LEr3u%+i+PKOl)xAt3>zPwex+4#b3Ja!D#IJV2Pp)CeS7qD*sI#S z==vpo=7{OH*JYQMk0mVEaVDw2VQ<~Dj~!ABJBaUTJ_l4Y=%I(Z)}s;7Der2L3&==4 zL4RP^zTVJ#;LV-@&)?YRS!5@*Kqd4sbYIbBs&2<ekO<yY3UPGrSn+qu1;4ji=2wdh z-%ICk8l&-k6(H`FVp1K*sp3mtS9M1sByCcJ<PT_Xq0K`RL{$*h%UQ_TT^WjVqJMB) zWrhDB5^fI8x>@qtb@9c$3MG-hvIZzFF4S#M^)VL83gdNP3i`&}N6Smi+J%i8DW2u& z7aSIe%+;hiWfE|s0%Mr3wrgD5*pf^YeA3ki3}=*m%HQ(^a4~GpN^5XDIMIZDb&;}b zP&|i=2IHP5MvKN#+2e>YG4kb-J%bmG1WAfK?u!US(tFStE&9E{az`26P7^M6VlG65 z?2fx{wU2)Y;l^TPjg)CMYTFAbShy3yOoG<{&)Y6BO8D+P*ocHHQ)pVv0VbbUF>F;N zKA`S_u|Sv{B-)t*@BIzN1-ed{6I5gO__J_p8maD49^8d6x6I?3yc!=!$mH-&J^sem zEH8zk_L(iTnUrrGq$w@@y5@iC<4`#1Xm3nHrE@UK`=D=0htVWP>o=jKLq0oYT+>83 zI54yLsAS*gKU1uL6Wu%r$|bvI)f<Z^%I+_D((7eYT*#A5@ON+5d}jd^2TDm<83_+0 z@C;szoX&(<ZHNfYz?duy{?8W?6HH^!JICxxc_#pFYYJAj8j)|><^a`m;W;g-QoON0 z;A39l`Ij?B($qLIc;#hC-kN^;3jO+Z)|`s>;yF8;lf9C`B`XDjX8kHBBhXFgCuBJ{ z_sbgJFnee{X49`Q`Y9ufh1Oebr=-Ih+|nbuPZnUghtaC<(_C%1{TXn&A%Lf}@1utP z5*gES-X+ObL!m&dkE^N9DF2X3<XAPqH?)aan)1|Roa}Hl^cZRFX9gO+8ajE8B|o7a z>|!PtWa}I=*j3?R<FB)bEnOySY2%&|Zpl<otqUHFQzG@)$$j&8x>s<D?El-r>@5a{ zgC~U{=Sp*#njSzDr<IgKsh8jahM#e87qFKj2eGb<)&;kRB|<2$iK*$TEb2o!*^D1U z5Y;dj^o`Fq83?l!j}MgZ3UyXYhp)9QJyJ2poLSt4F|iE<U^4L-AtPUuOjq`7M(vFb zx_!<nU0pC4d9gz><SJag4jBB>pBuqp`KxAna8nx{b&2jzy*HToEbj0qArR;lvWj+2 z_i9M1P7;+6<&kVPhvMVXryT4}*9vT-O~VbQc%w}vP&666rB7rC{p>c$9E*(xVA2F| zvIYTL5w~g&T6KZz1VqytG9}Y7U)`m@#4^F<QbwpYgJ&TI+io%MQP#cq_rFXC&|_)e zSi;)iJZo**$(c_*wl}TM@<<B@wU6)guIL5VY)rYI_bg-T?IU5_PwC*orpY>`z-yQ> z*=}^=%&%8k|878&;g0A!k8iy5AK<%^SDwvT{G+7GKh~-ccZL%*ye8C=@`d#}kSRtq zUQ+}*6o$7St10fnBoV*v6*t2i<MhKT@rJG0=~przTwS*VT8wCc3);-`9|pX)xJ?bT zwNWRj?P98x&x#m#THB<V>*`x$nU6>&ECk3pa_5Yr!)Y8Yo_S3x)UgeS9xh+@d_rBz z(L=f-+AJ^ZueKCmo{u;6I2Y>K^?#qWH(|wc;}%j0N8)4wN-o+Bua;~+4EqZ1c$Zgr z?%Q2W`ySo2yl?&N;h4n>o2WjPw_NaicfWu$Bcks2i-7n`;=08Eb>NH;q*0*X+ehWd zY;i+H5^dO%rMTzp(fxDysDFuGxAod+6ia~<StTfom;yVOm;5t%UG^<H70=ehBvxoe zUFMtWx-5WCa9EmA%JepgJWlb#Aw*HSeOG`lGn74&D&p(-(7D}Cez35V>>rWuLVTAR zJRVo;D96y(d^~n9>jOZOSzhC{2Fra#EqBpC=7Sc|v}e_fkdS>`ld}=D4K`T-7B#S} zmECu6{8G<tWp0ieIUwp7AA1|d*JE=gyBu1Oq;hP_Qgq;YrE9$nKKuX}QSS(n-m4c5 zTa`ms+I*+>Bpmv$EDCN?E+@MV{e^q)<=W*$T=AI5Wo>=iyNUxinP4P(NRG@6Fnj9Y zHD-f3-o+HmYU2^Z!vE&^G|e0GzxMy(5Vty#uyw%`b%qVDP0>hM^q0JTl7w70aM_pE z%)Zh!Vfj~=(-%pEfMx+BcciaARqWNOI$rxKFX?vG&ent-QcH1nZKlf)!$`%NVPo8r za@vYNH2mZ*$%-)E6Ai6B^I^Ab3%BjfTmJE+{_J6yYyG6FjTQLG4Ce2|PAMyu3be67 zoMXDwSL$|RX)iXg<_i5RyVwq0Tj~-(`fbSDfJq-VuF>Uz8kEaRG~Vm3vG!O@ENmlc z5<17WG7X-hgJXHvmV}$G;^ux6I#rOovy76woQ^GC6V%&6M_G^q=D-}oyr`^Hc6IOx ze0YKR&^0Q>ARtykFm67S6i}>8NV>TH1^q`sOYbMUn_XY~n_3LMoeuN+TMtEoa7{#W z_x>cuxy4F&R|O~id_iy(LJ}0e!&`sUwxZmN0R!2AY7R@Zj=15TR`Mrf;C?lT7NI}W z1i;?4cX}}Y6GdwlG5`pi(MY3mK^yJ$@|{%=B_qb|CD9uJL%@TrJOTfZKwPBAl8cd4 zPCVG-y$n+bh{VtZ8LYs}m~$>Z*NL~#lf>FA+7G&rbpI58ZNy4(dak=9RnVAEm1kMz z*GX65sUY(@r_vAMx+@dlQM5^&QD{(NjKs?w8{C0mm)8e(;wA#O8Kc{)*JwCAFdqYd z;~Dy4&QhydXt>;klj({zxpVlH$yK57FXD6-z|1S--fM|_yvT@kDCsM0H|6K}>QB>( zP&JzUUfP_i+I!{@%f{VpUM`PPPP)Uo2~rZ7ij=~$`lx#Ze)n~|MCMwrmq~Br$MY{L z=YIxO<DN1IG!=eTFgc9X0@g-+^?@e+2FPS-w_&+9)pJ4XYwQVL0Vid?@dT1*u<JZ; z7jqy0&XR7Wpf&kCgff{`jI}1WPimFF)O(h*_ROpwy}Gq%U7NZi%-P>BH`Bg|Dh`uq z2E_QQ@M@VPNWZSYpq5R;sD*P+z{C6B*b2^r&qxh%=*4sS^|9{UgDY9|Wx!@;&?2=_ z(*;J>T-j4P--isE)`1f|VF6Y@ao61s%li@U53()uE0!f(_RDcqG^02U_yuY>7XIEP z(46+&5{hShnmsZMy>3l+`wgs3c!e3fzM+XP6Ne=JZHru7pwvynA5vybY?6F?VU7hc zXE8el!49*kZBa-SR31~jvg2>#kFa;-%&mywPFweZJ;Z!S^r#zJ8x<E4GOzC)Upri5 zzK8@k`+HZ45%W0kF-z3yK8;n0|Hy(oHEB5OwgZ~3RvH_Vmwnr{FBul@EZR<5Pv^=} z-JUZ?P*|L-vxw_H_lG%t^NrT>P3hS}r3Q+fL>%?4{&6s{p2IlCzLKpuGim$VkRl6Q z0xb=xsp*iLe2kr!6>;qCJyRR|d2R8Wdxq~Ww2Q5E?o_0%xaG39za0D78IY%?xVu4< zX+qvxM&a!M{<(e-@2H0f(m}AB3)LXweiLkX6T`9SNcgIuF>Xtd$^=9K10){9!?yQS zv(JBSKNfTLTSoH4_*OH{Je=V>@cj-}59NGPKS8`E<G4<sbcsG@UyvpESNNPid{52G zt>>7mjI^Ob!Ds9>zSZvSlAf~llm5&3L)-VLpZryw0rX4Q#csMr74<oO75PqE584I& zC&$pILdh{AIgY|pHCz@P-O4)xqnB?3{67zVM1B>g)#S4PDy*P&y~`dcPxB}Yt>a5~ z6>^fAN~j7B^G@z=1DG2Lu?l3k#ur1S@6rBp<D0(WnEiqN2Lz|!)Q`kK2|zFTTtmH~ zm5r!Odkse=DB>X2`f8nR&7`>abe@$kg!~&XTY~1#=fPh59naxRxY`Y95@1U&icI0K ziMXS`vQDUJQ;qX9`CHFyYgq?tJ@qw<_V>>+p?H)!yLgCl+UV1lj}riV5oDb}<Hn~L z&VrOtYiC^<SNf<)^%QZ>ISPy8#&^r<ydF^3U)C48oCn;ApRkV?cpoYHFA<woEL0=7 zOLQIrm>m$cTt#R*8eZ?cv(b_jS^rcq^fD<|sE2Ei@hOp_MTzaJixeJ9ekF7TZGQyE zdxR-_x?WT*;_Vf{g(G<vsbi+x3Q{1|v5X6Jpk!2Rr6AJ1CnNn9h1kpbAJTJxJLNj! z=+eI9>-ikt9F*zD0<-D6C3NZe8rohu`PFMh)?3}f@2HKPsYmw7i$xWA<@X8#M6!}! zr15^|PWwaVVdAJY_XvsBZa>4!&04d`DTL#y=jMX_#3+hV?e~_rjd7$8=x-=s7-*}W zz4r^<XK@1y*tyM)hLYKJqW;Qs?&^8BDw(kAjS%>ZkNZW`0Q>fM`7<|534XiFIg@NK zSL7!Q_$d4OY+L3G9iOT7y;;ee{_jAnVW*Ge_U2(*p2LsZxGLPZ1h*;POFFJ$#808M zh>Cj>_u_tJ!M=}o=JBJyLNmFr62|piTYlWuOXKs9^DRE`5KeT@S9qhfE4dHr44K5F z)Zfh0c%@w2r85pPK3vY_U6b;rkS;it`pMc?WKE!>jm0&x*R8In-<mC{J2%%6ALNYX z(ztkPJD7V>&70|5BsmKLx4-=@&t<}WRZ}UZ#;f#sf1?c*SZHzseA+%ceWYl^%bOFf z{#2909*4kRgS3IOi9uQLfoM{gMRqp{XWU)dIFsAroymo0$bDDoDS;suOM6_w+Xp!- zKuAb%*aMX%t!#r^R7{jMCn9JzVqFy+S`JkC<{7k0GP1w+r}!Dr1zLf}t*kD+-te{i z(5mkQIu-YjCzeUS9`brU0mk2J)xNqT$`;bM+~SwH^}Y$3nOojjYfEHfPN_JbgpZ~V zebc^bqo@-8GN7#4QD253M(-GNrOlrhlbSPTXoh2BM#k*7Q<I*20ODw@`PDKF@nj|( z8yf22{U%`<`=qK3AraFdE#&)0lDfYc+x%%f4Xf>-RJT8%D80%T4zZ$7SYU3P%7mn# zaCiU!%Ezh_{mkR@!TC*H3WY?emvzj0yg7m`1g=0X(|nQ~wzyAw7o9a-<LZ*pNIcSk z*2kbrFK9=o+yU?7scFp6TE&*W|3Ll9u-7~gpL-L%iqN?IWRfA@nEnz%>G#Wi>QBkY zF(aHn-Fu)b=VO0p%q(sogdF~^{Gy(m6BCt%-HGnF064w>-IeD6(yowtqLRw)mL3{e z-ZXMmL>2vI)~KRT>9VACP<1<knGH}A;@&Os`oI8x0t<2|!1#%*fmLzi#FcB~?veKQ zH@}4P9mH&)q?Eaci$Ow<BgtbLn6E%F;(f)*`p;<Lx0qZe7|sA8cb-G~iw);9C*ZUA z;pWm;FeTdfc*OhY1brweT{eZ0U>WfRcP4CKV^I5Ts>_F<3~82@_UXSp-=n0C*xQ|( zQY-H8KHhmeNX`yFIW6sIU&E9cH}myV%a+a&dd+IrcI<Ewy3J%IU(?A`2<BZYF{cW4 z&nx5K+oF_)?ON~pM>l^k)(!?v^N=@)X)f_T{q@D`acHboI1BR(?>Vk4>~dn|s44w; z)qX5q<++xHEQ-9298R##l@0<9IQPy?2vbSx5hIG|hpv@%yTW-?z{XR-jqJ<$fhU`z z1HJnZc%`j?%5Pq3ukLT3f4d~<m+I#(XVW6<dL$)|2VYJtAc7kboO#rIdFK)Rh~UI^ zCB$9OtVFA9(B+Sw{lVYhpxynn>{<8Ph0KNfp<rP7QVPm9lk@ZUlQ{K7Hxgrht=jFr z{3)}{uR}y(YwYllb!)^8cHX}qaAh`%HNW5VqpmLyZ-pLWRF3Fh)T3u?fRt2hg@Q7= z%gtHx{R3=8+Df0!Db0*x0xK-%>Sp_e8;Hw-03qX}?i&-+pnl<N0>%0GsF>6V82HB= z!~qc5d?}S3l{)PRg5DTzKWy6dOiV-d00J@=<Ko*#UXT#aKhsPzuGjI}Bk>V4g6qUJ zy$D8sDd3CwIU}S*)O%!jIrbI#|LL4UBj$lZsi1j9PQ$Fm<i)Sz?0|PxUj|0|Y0mQ1 z^#sI^3`O^{<Zk@(;N{Na-=;VdHtr+V^iYmfJcRw3eUrrz3So?&3w|klZ({%H*zV7) z)bM<V5wibDxcZ<55njSjb6d9=*AJ6M0hX|6lCzfmz5;Nrv&Fb3KS?(CEz!9_Ow(ZV z4w~X-;s7QOyAX@H41c$)330{m^G8u<@Br&~Bed)j^f6;4oBOf1dd{;a^b!YLcP=X2 ze9m61n80dWG|2iB@?4%%Yd8b<3Ky!qxg&GchDLnv=g((!C>UV}V48s9i`foxoDRX{ zRde`ySz^x3@p(lXmg(4><3d-|-c5=w=@)W11hEs%xCz)Mp0qJntQ~EWV|00vh*fBE z_0hIGdOT8ToBXy?xLOnKoQ<@7%K#<Bb*B&s*Cu3Hqu4g!J&Mdc$u$~{08R-kvn|bv z5>h-da}LG0B)mRYTvKtkJLto@5IH6KtB+2I?0a0dy^zQu*WVPK@$<g9b*AXaw`+Tq z_&vcTNsglVImze}?ge+ZS!V?sa8KM6CpGMlP5}NF?%jsI17J%ZJpHi|U9Ilu0@af1 z$din4CVnw@ytKwZ5HT!vA@F>%XMhgYi`e$^cEmxp!t3Ub2G8ih7|`kB&q}Bi%dI5Z zN~le5tcUsHarO|(NRFqJX3a%fIBDd7cKp=WjBtCmL0`dMZ$YR0bh)$?n7%#hdqYvb zGlwzfYJPNO_)L;~ve%b!K%rR*O(f}m6}b5_3tukoUz1ZsnR=`XZt8$qqw!}1hT4jk zP{OYZX-aF66fIqE5rV7e?@KsV=oszIAv^xb=-e>4govNh$j9KaHuQSMzL5XAzePQT zAr_UIcJI-7jI`;gX{Bx*NF}+;#CY$2xm`N(5>+$&eS3~R#>-l;;%d5Kw%xw;^msu2 zp0{Ry$?MLe>2{ig%8S%Z;l~)3;P0`o!WQja)JR+fNDN-?nlG~i1ugaJWMQ^Z5)``{ z1zofWnjY5Fi#2ysh)x<cV}I+X=C)u_lemH0Gwyf@@&x2HQ4UH)T49!hB{_kye}jvi z2_i_-3$^cWnwj$$w6b^3<3!q_cqZRDC2`-T6y!<XamztaZsTO!X(b^lx1X<^g+&lv zrVd`cBwuC2e?KEXsgdc`{lOVBm5pMbvQ2fNBsgThm)v2Wm0WzJ)*d-FA35DimE4{^ zqb9AmU{9+-323D9xZ%rj){t%S;2d3w6KIdAaBN&0z%ro`5Shmur>LIQ@F7kT^*Xr0 z+yCNYu?t2$#O0agG}t5h)Gq?9C>>2Ixv~9X%H*F|^=BL@pnW<QH7`APU{eVT$P)Z_ zqNe1_;1(bsBn+|W2QXUFIHvwyb?3zl3{%1<sPryDBed!3qpxD=b#|91^X^x&-2jBj zzD0ZA&H~6eNh`_SKb;fHaP6EkcX?mxD0qU$HuQ&Ht-}ljfqu$FK11WXl23h0O>Ock z)Jf*I86-{4$R_bdc!vwg6^W}kMGdR=r)2a@jl-82Dz(JS0>(sLw-^6r&7FHW(jkRM zd$!(cjl>>eC3TW4ymMfTze|U{HXazT_r~(}+DLv&cD886_Mld(pu=kiW7K(~W=S)V zk$QI5X`-Xg9%HIyeVMbLCNfc&aq>yB+=VF9R`imTkGb_<K_lfxC$IUM7he`AAzYQv zc_yJLrI?QZRI0!ErQBUEr+XS#n;@h&gi;Uvy5^=NRT4b@3U0+#Uz=6r<*wAX0XzlV zn#`J1JjrK$(r#QmI6bP?l)hLr1z222rnw_s-R7kC)Y2x15m!J3;20ga+O}1L)Nv^i zW$8$tEBG#@j_hwXiJbj3eV(P#v+YMR8R90B@7uLg=u1b8P88Y?x>v_dNn(mD<ELrm zDbdD&m}{BS`&O>eL-y6&8i~}6!G~nEty4o?$TI)BA(518{HM@%S6J|#<W8+wNP}G+ zjzM&yBm=|@Q8nA%0Lret7upKs5x{}u-u#kS<mS@XgZ3&E{8kt{^W0%V4&b3A<%ahX zm>ei0$J@KQ3mua-5~&^X<VndDm|1(%mysdzt`ZIytb})!E41>Ns#l^fxDtMIe?)ty zt0T-J<WD}ml;t0+*Vsh_5e@`t`dP}JykGeMLfk{d4pQVYdg=_ki8~noZp+DY8WiF- z{Q1Da!|B$Q8~S0%*&G&bx1kh?5-$ht#q(rtKM$QtSaNHJR-e`MYR4cbR<`IOoCb?! z875Jk+PsAsP$xyorGNV)YgUC-#)!3wWkVrm0bBEd{=8*~kpRyh-#XanKt`!uoD5i1 zY{h>YTbt6_A4XycwBpA2e8^18^S)dBsxTpw3*{@X>G3~&^NY1bNeHga0zT_^hr$GU z#?7%DJCK8?x38k)3Q5Yv-A!?3$Q{qZLPp5^`nwcIx3!{gTrdLJSU<L+j-bLBKId1w zw&wKcw>aJyFNIeI8_hfXO^Fr!$BC4E|E@}xWqB}RYi0bZ)aKl8Ok|D3T7y~}HzcAe z_xWUA$SzE91-qx-<6p5JA(}6e_MhX=e!aHZ(}hX(5;0~%o|~n|fV0OfCs?Nsrc`wv zr21OuuEj{MX@mLFq^~$qmJrEaqM*vI=%7xq!FedOB^t>1F{KNoD4#jIVZSbck~3ZE z=FD58g3#9=4Bd|e<Hz$3esJ!@{PqZ4<`4bFa37hN{O8R<AG;6!nsK9NlvHsOt-3J? z&S;e1K&^=6n2x#U1|fbPR%1Wh1*X4;`1x;63U=qK;C0)U=<eiKZHO8FR++DgxMY+N z!q3kdTn14QF2%(wpt#(B{x)ru>{(_hh`4d^^v7GlW{%7Fq2`J(W71_*Uq)ygA&?10 z#hItr_z<kNKqe?+^g0mK#8bdi=EodfRK2kJNdxgHjoHRQ@0g<5+6MxUtDB%<UQ!lA zIHbdG7_C6?!<|P~0X=+!B<icEW3wS$$2?vrXdo+HA@;txEQ;m24fr*CCXVE%2Q9X9 zd{=GuERBeyyVQ;1t;qbF(_Lqy=$(;wVtXouDeka31d&5r#8U_h$Q}qDI**9|q@j_D z!XG|<IQc+|KW_d<%4JQRDTLU{T@&FYz!d{yaLHuZZ#DLvyI#V4nw<Dd{|+HjT+3Il zrph0qf7~u&zG35;RZsfla-ZfZQ_m@v{c5o(kBui*#+w`G^NhJ9D<}Tlg&NC7C0BcO zs}Go#2@PB2H~|P-#@^k+N?Oq@pm5X5%cM}C<w(iXVj3&sa!5}bO1Mh~8m`T|AYj@K zncVRFgTYqkqBcw=yGA?D*pF?tb0>6~-|7iyRS=Pi_VVCx?!*2zNyQc3TB0A0FR!!5 z1SW4p+?%I-%XMl8@PDSiA<ycI4vX?f@OLXc!yN~Y+Ac%k9Z?4ISdh_NKjkU9{z;=c zXLJ`aCTlJ0>x!~0;1hK`a@ZdQR2$pNA2G}+<2yH%_i$65re5y3HRUW&vo=o4>M~SW zQ=Lb1Y|eG)=r8w~dg)bNA3F8#ot_-l2@3IW$>pAFkT!?e6iubL75BThz~DEkF4fnM zZgPQyH_Xz|of5(N%6NcFt=018-Xb^?0SOCNmVPRK_$}5T)^nDP&VmY)Kz@xBJ;JUf z?tnenn9dv28*c}t0D{zJl7cuxCZH6+a_9L13On5#4495ngf(_}YZan8UjaAt6%D76 zMCfNH-1%F3pb=wi{k~0E)9lSq!*Ipm`^cTk3l6pS5A?TRw}q0_t5Xs|Bi%FaQ#cHC z7>eV{O~{L5#e`ZYoLz0T$N1;F{cHyG7XLMfk0*~<ltNSJ`y|cUeNiix^tE@JeWL|N z=XO|RqB^2#j)!H=@(W0fL3vda`H_!(WA)8@beM`T98>WBiaqnsz8)O?VqR1}fNy5$ zt4DbqxS)P?Am3I_l;03^c0^<84S$Uuh8Cc7z8BOZ265Ca&ZJaDq0LF<4^j7CXqg@f zN`*eE>rDi$aJ`(Tiq29>jJ{bKuTFtXtY3+Vj}ao~bzlOp`*xR(7#qtrmToVbea_|` zfn$#Pj(%$v18Ihip9odvdwiS0tvVT#!96IwI?<q5D&baxsqDa=Hrl(@E4GuaZ+=xb z?N9sk+fu{H{m8$(D(r22iT}>VHnt+n-HyiM-Q^Jij3G0mG3(-yQSBxF;H=)C{gia| zF9<CpwkC0Y=-2X)#b(}7bxtpp|23a#Kd{p3xt(qdxk;c2wDS6EO~CjgPc2l}llRaZ z{l_7f>PsN78F@U{LlwIv^JS(A79$>S3ile9<r|iVLgdH}J9<5Q+Op!9>6_Ew02uV5 zPoy7W#65!kD&ba{h7sNe3L3Uq6$`G4r2sFi0{#4LV%pIHW2Hqx8z=WsTTp6`ER!Jj z$y=VY(pFoZ3o9YR#L=BDs4;84VrH49C(y6@jD&GKw6%#Dm5x3ihG(~VVjT))d5LFW z40VER<0ev1hP6e7byBF#l(VV}nf;v+EusB66mrJIg-v#-M&2l{wC&&=SH?11n5gNh z8aSldUu2;&nV}WTdYej3d^zW4J7pDdfO^pB9v}-O4&?8){NY99>DfjOl)Ms81^Vo( zBT$4MrZKiVrCO;wYH(z6l(WA1{m3w9<gle>PBUxDfLwGC`-QwG*XMgkV4Vi;GhD1i zw=J9-`D-XkHYj@=p76Scs_7`)?x_n8yVPljM*X|RAlu(cjoqBkPRHJdHoi(%x!(o% zUInu{wiK-PRXlf|Vqx1pvxfwXH~;n>E8L_$=gI)rrN`7)hJ~$&ss*VGWnc0R2rkoL zc4chG%MXp}<*MQ)%7zMmD$I`l(YdVufq8fwe%GmJTcFo2N9y&FsRrWTpDSsTmx5fA zYX-2~x*W{xpXfrw9ZmUq_YNev8Y#d7ImaU!?^3~}`qtpeMEXK4@-`FD7$y`n^8=v^ zglf)D&mxklVn_bDCU;Xbh%}RoE)-zSmp&Psgve;Q?ZDtbw|6e#8KfAjkN8Y6&zxiw zH1UP6hPlYn*5-v!mN*bzBRRR@TS|ON+&F(59cRkdoE{z8!zf2KdehDJD6cAgef^cj z=w}vFd>?%UAyyJW8Wr^7r0Lm&$(b9K1>vHnotxfTMQi=;)}n?F|I&3Du7t*fb7D2G zhK3KmwKZxx9nl;^2Iy$^emQAaLPVqA-GKXrnPd}SG3|Hwxc=sfGG`AZ$;Zvi|BS9j zTLtJ|?+e_!Y&wKt?1&Q6xV%XK(v!Y>d0+Yng?{Q~-a4-xLK_igDT@gt-g4@9(O4Ne zW7v}jn*qyab%*<^1YbhFFOoDHngwK8ZXb;{(7v2--+GJ5j7+PXAo5m+xSq%|-p!sn zXZjpp$W(G)UFu9{F7d^T|EX-<jW;cKie_)rKPIW?&}f)!9I}r&$Wcv4{g&N!PY*1B z#>EW-#atdnPs;og`sYJrmtplp4Oh)pTg)HAn&L}!8oc7$W?NDPFMP;cb@>d*URCxi zpyY<Is1&A5AeD`~wCb*z`(JELZk)i>nC}|`Ir-5wft><^{lc^#c{jy5x%=O4Bk4hB z-2*V|@&QakI1@puKT?ZO#tQi|jh8oc9rglCL_R!I04#44ibPjy3GNe78d!r6W_eWh zl7BoRTBq@b*~!0Gpqmc!tGC&o5cn&4lkQ>?L_kKbNG$USor|#EMnStOO?}9y*d}^0 zrNU13Q!)3qhdd0}%cWzgPSjYnAeY(e7m<nNXfCAd-Yx}WI?zAWgZl<Yf}j-}e59<W z->TL~a^L(q6t?ca*syVnSe_Y2imKRNxhPQO_IE$&DjoxBKyzk5Mas@OT{1NUqN%)& zaPvg3LQ!>MvffSZYxzLZf%oCMZ!>{-FlV$^gcWBlpHWp}ytcdK+=1@Nqy>?F;he(> zra)Ayt#y3|3^9bU?bjc+(QqE4-P7s1CT2Ql^0X^dY376s$io;n9ixw$>y0jEy;i52 zGncq#zaB__wLhkaNs-hZ_86&%`hA(b!MS^^uM*l2wQ4BY%HlvAzd0rLRcJD2p7a=F z-k>HLq2p|pKSS-Sz;!5!*1Hx%JCcOPd-kos`#*YYr{A=}owbF%Q(((!Z}dqyTrHRt z=Rb}XQ~e-_FoM4~V}4aDL!J_TX}PGX;x<WYPPSi=03nr!Xigz93PHNa^VPPb??`p@ z{>WPtN@Kvg0%n4tSLNQNJ3*4oM8i{}r?;R-zXCgZ`|%cMW&Dg0Jc%}a-bTOO>JcMH z(OMw>M~v6D>zFRA%*a#4S{iPLZ>Z?9k@QT1VD*=qWp>vZd+r_1<voSA<U{ezqH=|- z6H+!bzFYEIQqFK4UU*1->ww+()7`&A9n$JK7tbg3gT=jBr|lIz7&jw3m3{Mkr^AeS zd@5XWU*6n+0ttL9$c`7GORtqLM%O=LPpKc=wtW17QNBL$bFA6p7cLC=jzUJV2u8kO zCP9%@qG>}4o1lP~H*MS@ukt<cW051Z1ARe4=IszHUUA2n=jRs;=A0za=KqlIxze|^ zO{85#zKa3Wwi2t|r?ijAnc2Fg#R{LKKZbQcjYjuxgnoFfmrd{f)Aw-myZW~1jy6_9 zmy7swL#XOQGO?wH0P(kw4~xO^-1T?mi!C#&i96(+Cia4gJ4`9z;qQADjN05q@&$j0 z2fOZn<Wrkl!ml1aSBt(TN#8^ybg7jHaW_+ed3we*^sqfd<ChNcXg>%iir*r?j(EoA zKOe3^>;B^DZG|21Z2Xp&3SXE+%IusNJW@?{MsqPG8*6$_%XK77Em>}!)MJciB<?gm zRN6sO9C;zlvW`xzivF9-<mcDyO<Sn#e0*vMjMKdjnnf(*V!&$S!<qLb0#04r)WyS5 zqjaU&S&|_8zT0dvp7&11j!O3QS*hfdI5Xl1XF+3z_H^T(&i=0yzG~S-kMf0x=TuP{ zQiOdS8o>51>f*9lB2(Pa2IQEk0h{~zpCVRLfF?jd)ts=@Ycd$2FZiY4*60g!9(!#9 zVE6XyClA?mEk|TE!JVmQ_SRs}eetR=^ZznZ7E1O`nm{L<t|t^6;Ec#XA&qV_1k1A} ztH8a^r9v}!u;Cxz-OsJ0gJcTGsLq&Dw(HAn9Z*jyza#@xBh_O{Zu!N?#r1d$w7CIg zFK{FOsZR5r9&bin>Mq`vLP27*TaM_E;e8(i*=5bADvxnKCwxoW_Rt^ysuvV3MNKlL zwI!n^^?2&Vf@(7r=eVd5d%7eM5KFsMxi&<dgUdNcMP2r=z<>_Wg%$!ab4-|J?>k(A z9GpqgTwFBn;KLvPDkr;B-`=(oXb=b73o{@?VGaH3uq56tsUsALREt}T4UveVHAg*E zA0*xuyc&i^5beD~2%YH}=En3m=Ql1rwG9aUJ;h7@h!2Q{Tt@~AEt4sGEz~^X&L@wi zQ(e)<l2xV1xUIBQ<$P<pr$=&*y!6CaxSTD=j%`|bfUf{g5Hp99{5G|YCWtXT+HBR? zhdH+FndK4&u+Da!%h*`)7uU|tE|~(wUqWnfMRh}Q;GBDDRdDTh%>U+)#IQ??ZB}np zCtQfSOMQVG;3pcx)d+<Bglc|IQmubwsxdoo945(r?=D5GSN?W5%b6}3z)oyN(t$c1 z%F3+RSI8$wBUXx0z(VedJ|-?PEpc#%eK1(R7wsGj#p$RLN2N*oY4oi`nP|F>qd}jx zP5m@}`E({{o@LWEy{Xl|N^8#CfVWZW$`OUV=bP-++HPx7yk7QAGW??85Vog)gi_pa zf0Y#t24@azo9)b0Fb;)q(Fx_ftF67H)oGd~B}Zr}_unr6wd}S*ljd;OK1Atp(FVLg zSF(X-GW*voqZ0mM**m>ZP}ZI}#u<1TZ8(WGnU!dwH_TUE5L<5=y<4>F3Y78slF1$h zM$oMUL9=5L=xv)X2=2qPsC6FlfT|()SIRNJ*MY&fIyiXD$MDu1uLaVq9@ysA{KC)7 zd6S4wrBrP4suxU!A}(EA(av16IVz1WZoPDtJ2iUN`VDI1yIa%zqs;NZmBpTI<OCL? zT}=$@hBEuaqQr{FtXQ6;jJe7LB3wvQ7UM5bk#Xrw(xR$#5$zlC<q(dIPui|LGcY}+ zTRnMxYK%r)-#+xa9j(${<@IESh-6r6q6TR7f8f8GBs|Rf3C!+>A1rs`D^;cHI*D|P zd3STr6MlEMKOTbco9EW$r-;EcPU=OolsoSiY-S&oJFQm@TjlVl>)VJ8q|`c;(3*u9 z_kJ?!6_Ru(eK61K>uy{-CLnh{XS5=|R}ZlP>Pc)9`$hQqyHCQ0Vg|AOiyR`qV83AE zK`4zUPr0!B^^BK$&?3`eXioZahg9Wbu$$~9EL$JjW^8HeYkc}A<TrB?F~!3*`+{R~ zn~A<&<6l|mHY4aKRYAGL>EU`)8TU=^c_#RTijNT+UAvQD>X?bPt!Y`oWCiQWL(n?C zTsBlhQEhyiSwwrpO(2}z@RJ4x>RjhfHCoBUzzaPw=DS$pk2$$L^hP{oMEd6HCDCA1 zGPLPq(crrO!`D|u#lbFHCWIit-Q7L71b24{?(Qy)gy0a|J-9<?Xx!c1-QB&>;og}$ zbIzKR|EX8^W38{NcJ11`>d4_2wwP;(Mecr%e!$U&kK%VEVSuW4UgBZnUnhF&s2?8^ zJZkXyMX{ctb)-CaBRFZ|QhSxe3IEF?ZlZ<+-R`uK$H@J7{3YFriNENI@awzfEAFf5 zl(}1ievRO{I>2&lu*B+3_e$o0-f_WK@lOJQHe;l7iC--nL$%*Qn;Ma|C(_P~xR0#8 z_HnWP&DO#dYyp^9jS1L5Ww*}aeR%yLY$kqjaq0yl=}}i-mIl~r$$rlua{X#J&?q%) znKojHoVCV*mdfE!!Tr^?j%=C;kw+P&x3*t}W0&blkCF`<T9?qvYDT4{m^BYMsj_1v zH`E4E;e-#lNRmuCtM1pQ3dFxdIGF$K8-Lm$3*@?^s3H~qz8ik6^9<L+c9p-S4>Kwx z@Hh*V%yPkuP?l3Q`&3SqEkTN0N9mc});`}{`Kwi1hM<#!-nOEGr>c9yr-3!PwQ(jR zYWLW=am;tIxP{2GqT;+=m67owZYAUn%WwrR6Rpl?U9ZtbhzCpPNnN{}3z*o$hzDu` zTcp-QnCLdPs)SkEV$;9@GIfcZX`NcHQVVj1A}@b8jAE!z^O*e55IY0^`28yO@XIY_ zjV_cw(1kY)&M6fM0X0h`fTa>q;)7WvGg5C7e>QqyK-=-zzF`#OUy+Q4_y@fpB>3=G zn5IAbg2WjlQe9+eUkTzUgebf7E(*C#2lh6!RYQL5(dIsi?Gk5`XuC}ha8SVNn#fj3 zD1efyt;+6(%HEQ$QPNS8t50p|n0VI<b+sO9{l?^P)HSX3t0q~i2(M`G3rcR5t%>hc zU=DEEB#jM~0xv0)U2RLm9+O7dQ>C=svm-a;$$`0JUXQg0iIEJtFqaE@FEmcxIqU2$ z@8b*&y#BK`Hll#*@W$4wOQBx!DbgE#=q%iADT1N6Fb7=T#O<A(jp-a%n$esG+H;GR z3~qY;g3vQ56OK*ZKmMl&=H#=-6DRw-z`t!VYh#6QATNTB9T&RmsB#brB6k!K$Y=Gu zGX>n%xN)IXUd4^2j1RU4`dl*a%(e$>C}kNL_VjeDk$XyICh_mWKPC<D#%74QS)Bv# z?qfdGL`#MFEiLs~g&#VZm|Z(M(>{%a0P?cuCtdG(OwSp>Q;5gBBg<{31J<s@JnO>3 ztYaCWd@OfsnCLpzES-y$uJlk0bc@vmKUKfI-=Nw<Fc2+`Bx4#0<sMzZrg~S}U^@?h z{O~QrFa>BRUGPIueNi{@rA+yiznku<I+lY|NJK*BYljZO@SSoE2i{%D;jh+z1A6Dt zAMn4dNFtAD$+w!yXNvj_<zu;AQ8KL1JcmoBg~KwiDv3us9VjW~`m&K|LmDSZjQUh9 zohlWI9@MRHO}W!llS!zYtSN0$)<@2wPt%Rsh3ji6jO`yRumi4UI(<R%R7&?NwTW5+ zMYb<n%*l`XGY~mT@l|4f^u9f_d$H>wO*-)kl?52d>`i!B12|YEF{(AMop>q=TKY)R z=rE*Y_2EkdnD4(^5PG*DcCp3)f;K`s$E2v&WoRIrB=<j?;smG2+aLbHv>hK85GEQo zhrdA5eo<*ni+27Sd*kg6xuLF?wHYG*x?S#oUn@eq9V3B5)p22j$&B!ZngLJF{`^Ih zP0I9p(r>*4G7;_kp_;m<dh=2qtKvfoMyy(AD2m!zMZWsj^So-EZ6$Da(DEdhL8ESV zYF%L(U|d?w=d?bZ40vJs(iuA*^yn`Uy-TbLvfr66WN)5dSip-jCK*(-D?N<Fa9&f< zv(U+!U0G@2ukTo7%Z3(Z>&Nvum`CI8vOSO-Q7gvZ<R%9&Vd{>Jp!kwy?e(&tsoh*7 zx3+(ydxj#MKta;l<dlz@@K8CP*d-=FoCcHY{#9iCz8^+UQi$XI<`!bmME;hBD1NpW ziwJ+Rik^qKb>sz^5PiK<Z=kyI`+QheN6y>2Y!mf)7=xTG0|Be#%9ERCTS4k;2(5<w zth4W|*Av*g)q3G1N3nsyv@q}t=(og@-CukE0=i!&V%SNmp9{hFNgX$jx<1Cr$Az@2 zVGL$qG7424aux;^ia)8-0w`3#NxY{AG2+NI{NOU?W$;(aLgnMd)VX43q2lv*sr%AR zNJ}=EYainZHu+GFpsmhw06#hQ=wk!%aqn9yIW0G$tg!7$zY6b<aVmGm^iUl$__irr z=n5Ef<yB$VhC*9Sbw59g;6Hx{#ZbsU@P4u(+VB4sa=09Zlz=F~m-<<Y)FS1)0C#Tj z=+X-fjVDD={hNXa(I0u0p~X_-GJo}s^QEW^w!|Uxm$yl@a(e2HjWWM0V0eVBN(rc* z$W#AP-~Tgl?ATt@XNz;SNXE@-C2xT!aT(9u%9wxswJm1^9uOHvv<u|an0hls%rkQ= z0kA$z@I#$I2MID<d0PL@ayT^|QeR(B1}wIDixwv9CoE@Romv%xW*KG-3AVJ6YPlw? zv}q*_|DY{}Vf2zt<~5>|k31O4`294Q`+?kZ87OC4brmF!6KbimF<Ye}#RcQ}Q)2A1 zf242Vmf}l3Pfer1>N;Qh0a?(MFX9vP$G=nkwj>{tos#ZZpCt+aZLt)U6q$ED6&Jw` z59mj|?U0M_ln2eb&m|}O5xFoA1Z}wrlb7pZ#d}5iLR(}@{-NX+w!|d9&NPMyhib>T z^0L0(^=a4VSEc4#=svp^4M4U2?sfp?<REPoR5z)&`mI*gv-G18^7L$)XWgg-{!^d+ z1lL?q;$tVVKiD?0-)Uyv*A&_;fWRiX;uGyTT8SrB)VDfht~%<uubdibr|`IaLQ%Jf z)!89gD4!7dDxdC1gkeneJ}bq;nA{FZ297EEqNe^DO}=nT`oP1ZNRqZ~fFbm91;4wB zsGc>q2`;~bZWHIqHsB<}`kO=Wf&c}E@H44qhNLG4wEmUIn9r6R@h0)_OTE77RJhCy z?b?kE(*%iZrw1(Mz>^;}DA`>>?yiS{9YfjqFGFPPupL%1;xwB1Rss7sQeBNgUQ#rP z6!~R*Jbn=ZL^XRx7i&;B05`VVxF;`bz@l|D+1X<1y`dpO4X6&+zby-`@=jsY^Frij z4L#EuX%wA8*s$N^d6heWV?21ILTmXC`46U5BEaK|;y{p%;k5hMuq}_t<)omCwzhH) z+e8wyK7Jg;%PzPCWjOqB<d_6M3we+<HruZ_n#$ozJIY5cw&-LHM1glZ`%jTOE||P* zd=_miayDo?-qG~&Y1hBzQ)kExL5GEJoqiS!T(_GiSSu0VLBtum6a*w}Jr$~wDg(H@ zdEFvfI$yx?U720&f&H~hlC=^x7O@lBB~%~rT*)WN^Hf6ATT-6ZY^{A1l%)@Dms$gd zlTjqmnT8X48Wd`O?VQ%O=F^=6XrjF+s_P?K-G*wmpN~)J3&fWbq}{yg=|PXaL+=zZ zmZsKpc6{Hp*P!l@=717JIyZh3drUekrlqeXzxGQt1#9}i-P#DqHq=p#pi$B)zhb@R z-J7d@s2JKf{afU8Qz+!!Gz;we2up)dqEqF?yZw=1Z9Go-#G)k~3~e~N_;__=eBqr` zO`KEhen^uE_4k&eUW6FN$dQ_By;plf>mwpyT*2vJnw@7iOehv#Z>+OjGD{RM-zDhq zNBN<E0oTDeZ1IHN8*AJT=B^GrwWkgQxtVy>3@2GNk$^y1kXjbs>r*TY`kHh4BL7)u zZF?<k)taNZ1dFHTr-~BF`{4zav-|JDWE4qvM|PUWsZoKES>5HHep-4vwoeF*P)t`~ z>e!JT>yHccFJy2BojQq3{saA|#h23NCnZUC@@y5b38zY?nY_u2xz?152t19hb4%8~ zypaIkAtqqkz_2G9X#_+B$JRIJiO;YM0CR%h$iw)-<^(aGdnOB!ycQ%t)&~B3c7-=C zRc@}ouSvCr>F^6gBYKABjldjO-sz0U*qwpKso)%@Na}I^L>y}B$cPdwlG)jQA>O3y z!8@$C7$qKB!C5d90EJ&7XtoHG7d9IEJ0E9Mj|z5hCjCzC*E2+7y%C7>R)&M=_I$Ce zvPyEDy<%y0C{{CG-&(}2F&voS*b%EK)5>R~D8ULE7Pl-EogIj%I$7qg&<VKABcHV| z8-Qm#Vfde20MmIr&Q|;SlHX5qwcVaxb6P|j{MjUB;hawjTbtSUM2+}&7c&^_-<GQ) zOB^w>zGvP;8<x+DZhcju+GN?<3!T6RC(fDMesCjQ3BH;aCtojn5hI*%K^+o-=vLwH z6Ow@1M&4CR*o>&E{q`4+wfKfOGVxAdO;-wk#&k0d1Z4>)1M-n5zH|!?<13^@`;}c( z!+7aDG_*gNkyw2O&x#!KEG?NI8-=9~q`@DyfTOSV{#Jp=+of5h=EKE&bw$s`%-C<H zU$)By?4+{|S<RE5KDW&m=J5<Lzmdk?-z51M%UlH}#}@Zva_>2*$-woWpA~>27{q$s z4H@~)D3gijhqpeDt-<%KU^A^sp9dPdBm9GRAoGz{{+dFi+|x9?%nCHNuxAGmL?Jf` ztv#Z`eS{zAAtr)f|B10B-!+E+2o}E{@d@L7;VK~sr{1jz6K}3-vZ%$&9!BJe)Mez? zag{*$(;VR6H5rf}AL3bw5YgZK^9ZYd=Li#v9sp46bLj_+@!uq4Cb>SnYny-mVmxx7 z3fzQ|7k5IQt~HKsvu?y_z<D5gHKN!n;GqHZDJw~kwSJ%KB_`3{F-<DMw0v4sF?8cY zbf)irX*4-*Vz$n9X2PM+1}2#9#hvD{xyu&fS6N*znm*n5mND-Ejrl<Qi9ZOTpIT7i zCeCj?j8?TJD>WB^FDM*Mm*Ko;A;%#H!yvsSX{4)$(5F8rnfNZ;k_6r;Z2IJEXVXYW z?>FE+UFVBjX*%X?3+{IGG=ndh5t;RvVk2rF(d$D$0V!z<AD2Xc+I10s6|hmD{2-2c z7b*7hwk3ZiK{aHb`DicPCG)5TiGU7|4@=G}>N2Rrgo=yvc#(h@ZIM{gzJGc}`Z1!^ zQ2tl<=gook>L7LHUCq3#$LqVJH=nC6XQ>%qc&J7q3ERjgrE4v#sBiiOxOww9!xV{0 zr5xim^?g)TECuxQT-V%c0`A0zAGhL;S*K9knkA>}f4%K_V&!5%1tpBKeQwmMzdCFx z__kn)i?{7uIjN>$?^iiBEGVqdpMW6OhS<RKbr@=GVj~LcI!wrQLP*qE5)~;8N03V; zB&Lw5FJ|qKURaBE{E^tOSo)DK#H3w3`LCsz?tM@Fwgf7B+Drh<zQYn)5d?`Y;pltv zARl~b<x0Fj5A;{k#fM9nxTxcPj(FcuOF~#XwE30#HK?w>a0hT@kK)H2Fu9eHHuR`U z_3+!EK)jWH6tw?Rug0Xze%*7xf|&gE=u{_QzF6aWX^N0S<)@dQsWqR)LBZ2i-7R6X zFJlQ`W&2s@Br1}LYI=NfUdNM+wgAx*SWeie&;A-gq&2Z+Ep6KS%g2o$`d!=uBc&ow zxj!}xOm59}Xv>Sp2cJlCTP#w}2)@THC}eeALdwZHVMhX&NDA_V6i#=DeC|aQRy@Q* zXrXBoHe!NYg1^h-0kIUo6Z3QwERKY{dDZ)W6?QF)e0U8&_x|D?ngOQW?1Z;h7G=X9 z3G{=N7k`F>tT8#HB2js#IleFa=;luG@+wv}@T|j0t1gmOfpDzlN*ZDTds!okwl0h& z*E=k9hqej7<b7zesXBuuS7}<mv^ji>VjZ5VZmZu@Dz!MZI+WOc<@R+?4*KM&a6yP; z5GlzoERD74Wgwjw>Y$BhkA5H>m)X5`+joAxz#&_EW!{`4=`3ItHmSZ_!cL%*DLm*9 z)7y!O&~&;pIikW5YWmvx1rl)_+LQe{0fC+*H4Ke_a2k0ga5c2Z0a)OMC~9)?8}Z31 zeawxYb^fpK!w2QZ8w{ZszVyx`G0Bde1C3Q)Hp>h=uZ$Oq$h%hv4~qzAq%DE0#WH_R z-$x?m$l^C!PU>x#XBTO2hEd(jmHtrTXLV)Mow60}Wjcla)%a(=r!V8yj>1(g^D%UQ z))m#ZyKm=#KqZh~`%tTF;{6qPVf(@JE$3Su!Dh(4xc1GVdrdlVQ6n}NuP@WUIj(gk z-=>e~t5)h#mRc*Ae>5<+88LCL9<<{nV{D|H*v6k=8pxvYmeWm}%}(jl<63ypVNK-0 zM7If+eZoO9zm4P!eiZ%MPJJSdABDT^|CL}$ENfnN3ltj)ojJ~d{YmrhL>Ddu&b{V} z6e_V$iP{4K{tb0^cp#R`@H7o_lo%0Vpvq=Iz=!Du-0(|(;Q?zd3{dhuo6mgFjwv=- zpAurK&TZCxPR7)80SD@M>&mV3!zvqU?~B^J-H8kXU@^Y&Y{_G~760_tw+vfn?b)UJ zyc&)^3s)^%*GXLK)|rJS;@?cMjlJx4gO>sHd9AYgh3!@MDrHwnOuG-6dI8Z;*va~N zw)>79J<*Od&Xx!PeVyQ-lvf?rcHBJPzRn~k#ZjYVl8|kw49RWiUefSx1!(dHzUv_M zJ~#z48rq_fWAY-HO(C6JD*8S&KEzz}MZ+xQDGzB8$-kFZN)%)P2$gR4+OCfZ8E|VO zN_O5ujjg(RIUK|pn?@eT_=ul{(|B96dMgFFoIw*s7lQL1f->Ih%;I_z$=@sJdZ*VL zi{&0;B)Sj1AW_?oZ=)<nD(p|E8panGN~XphtN9o+jjx9RB`_By@~h@P){ea*%ejUJ zgTko5nm$boqq@+eqb|l%492Y~t^<q`X-_&`XoVW50%hCvC49!%iN-+yrg+&)?c)_S z^O|%9$@g7|;jBMJ_=aq?usgi55jY11J7KuaKfR-hJgne;@*wu{rs?4h!Y|_c-`v(R zintf+J6+-zdWs4N2r2$O4tL00LW~iDzNl{~J=Nc1u@X0BH&iSFB>WYFQ`ALtP@F_s zMy}CFcr1pH@x|Dni>3!^EYi^|HG~^`$s$i;_a<zhBobtmYAM1R*$t%aZ<~A&{3*-^ zkr++OTCWm*bAXfp^|cfAvISQ9bmtV`f~&2wj#vYlcycPgBeCwyCAkq2D>gQaGsTvy z!UQBcuX8X}#g2T|7r+#~Mge--2^>vjGFq!yEiF(wg4SlF4HN?(%dN|Sf4IE+3S|nq ziuXAC3zq;j2~t6H3n3xS2t;`J-v|^oNE4ve#*}x$bWrB1coQSI#=V+~__Hn?C)V<$ zU&=S0gtX`;+G2=|#99AA1PbH7A=(oHX-^tOu|{v7HGDxHC>$As2Qqtiy9m~9LVC=l zZ|A@P3OJ_=a``VgFPP$TqT%ch?#Ua-Wu0T=x@2+V+sY+0s6>2LBiJcw{OFrqApK*L z2nyz<3?{}2%6Qp}XXTS3JzJNUb`LP77ls*63sm2*z>RjZDgx(UcN(G(hG$vdsukKl zi_R&dq+0vT29KoSi*G}#{bb0lzwdEA@6@)kww=}B-kzT-JC)S?S~cpN`-ZvA^7R8= zL<|bdMv~D<wbrPJo^x3+VTjDN=?ZDN0@9c0PJb$jU;v3?8=_Fw$R)FoT@+O>pfEWg zszC&Kx+gd|6mi@lc66)geM+7<&ql&cyqZc@m4G~4oV8Xm_}6g)XOLj<5b_&|Uco~= zaUw|!XbMIFch|&aL+WVg55boH4!ay!NJs9H33&!3>r>a`CsbJlAfJjcUux>^PFNf% zJ%bC4#?kPs_*(t_Zd{ISMeAd`27j-K{n>Wfe#=_coU6|^_7nEK(^DL`?_m7?30S+p zmv7}#jIGE{%Cw@k(1+_!X%L)Iymy4Ed~fvA@b^TopP;46!3YPw(oY$@Ii&OUZw6lu z1AsJ`4RxnS7{&v>_f2C<&{u|5v`AZ4_)FUUZNyvY6F-VV%}`wjwyw9iTQk+>m9Tr* zp!ew@K``b6Ca9dKRpF40@9XffsjgVpCR)5u74{)ltXu4^$ZSG#|IRhN>jv2RQqRHM z;OOV9q$Lk+9q%t0GTeKepE7$Zc=`GF>T6VskQyJ5bDVgyX*7NYwrTimiRor$$8|rl z2}|8Y*ymOZ5nR`@1Sna}ob?`@n?AOkYn%-}y)63mradt~Itj4exh+XltY7Q#4AZpN z&6QB(U-JubyfJIVP3^q2s<8JFdTfAel5)t*fsa_Je2rNv2tV0E732zbpCzGzF7Mvo zNUUyy@)XbI2G)heX*f$clRqrzh2mezERUrt4yz(jrg(a|$g@N5S9sH4v;ECoR>-G{ z1V}~8GP}<xj6~|A(S~5E!Y>kjMk8*$z#smSxOvg+VgD5IQWfB48f^F1;at7ghy51+ zw~kL*hHR2thl7dSL(!x$o8s@qlQ{MA27cT^(n_kc9Wu4z@m+(xX%M55+fG%GcS+!v zqL%loOIm?nU4KNX)i^WBO01$@aP>VWU%g7Uwt3H>^2{GqoNBKHNJy;Wp~+aY4&60P z@1cJA$Q#pR>k9~Ul0*OLB2yW9(k9TCQjz`oL+R9>EWnxLK+jsD{Z=upI~LR2FO_I3 zB(SK-U@|z(P4y{Qj<*Re9{F%rOP_sK3u1gu67PC9z@LgB0Y6fKG%D=$`D!FS9KN^n z#N$i<$AQQ$70w@>j<`scJKV%lRY&2`IBmkhd4mQXV$lkx!V`bjn3BN=mUN~=zM*(W zV52>t#rEHB3h}dHn_NpV`o>Z8KxN1xkInS9ih8Ifc5ibJ;J11rQhj>Mb*tPl<%enz zN0Iww`4~A0D^A^z8AnzmF#Ww0bKhR*cYigL{qmM?K;E!u)-zs3{!!RakN~LOITPR5 zuA==@15>}}4POa6===8j3IIH9>8p>xcsQml(r6XKm-Dm{b-edIz`mrPL4#bSy(tww z#9GU|$c1kf;mqXvZc#@Bad?+;T=BU%*1SC9-zStd54D7?71XA4(#!f8##j(p2s}`( zH3ytOP0M>k*62YSuAl9K@rg)!q8=|?_Abc8ZvqhIal!ZH-^I!^V+al|n2_Yy|6aeK zP^e!63X~8T#Z0+kLpCIS%j3RHNm_>P#%LhEP0^zL<c2*w41rO(xPFzFlBE`(Qw`Gs z#eDODhnP3yK9h(<#F1?>F<%mxo2yOEbD%1h+M^e@*3^H}4rB*fw$~192E?NmI(!X^ zGno%He|+@yb=DbBf5OyknQddQ0A1FbP@M*K<U8g~ne<oS$P@_4eA6zaxzak%zZ9gf zaqU*jP-r|xi~yy6f~^SdY}O1h>Y<L?tkFZ+1jWFl=kVIVJ?zhW-;(`Yzn(eG&+^bp zrWT;JfnJ*#3G^Y&4_PTm54rJngT}N(`5X84yagjFiO^*QDKSN@6Pg~?(&=Bto05%D z_-Sn?7MZ|<Bd;hTP&Q~SROfcXZU&22PSR&Dn-td2y*3cL^fk^r)qChh);gP8WVsFM zBO&P@&TYFSw=<KoW$$~dei^qB8K)M7KcfN3t)fgUBc`<JcLzjV%D$XxlP^T?7tTtj zL*Y+nCG@;#&Ej5jD;}jyIPSB&&xTn+IZM$I-p^+tYsX(|N`4KwIQaJy&vej~%&i%# z>INx|A+)C2!P@O~#~hsxPY<a!{@Hd#LS*7i3X?+58ZC8pIQpo&5k$r6WJCGlA$~1A zsEIYYxk-P$!$ew~o&Bz<9hN+|KpgZg<xE|55w83zjgn3pvm%K~qeyz0)F}DB3q9oC zUzJeUA=HmMLL`Twt$%h7-VaqY;>ZvQQG8`MAmc@ESBi_`G;ONL>>4Fv9(IaKyfP_v zICtDKyaPp6oV=(>!kWFW!F-!h&Xyd9ukIH2T64s7QreTe2#MGVDsT5z`N)`?{oT%@ zpd)Iz+nNfhBTc4b!f|2@CMhB!jTdd)xtL;DJ@D?&2Kpt!My?0UCsVnVemYSj<TN4$ zX_bJ~_m8})o8x|p&UvtVhf2C3pMTTZp3u0PLGG!BG3W5VgpSkuJYZ?W6QVb8v=J}M zyBOgyc?z2;X~oYgIpKpSD|!5_C666?3(v6_F<r;_+h4~)48+7s+d|J0)oduon(P@5 zk{1H^`_rpPFo)vGv&)B@tG}EL;>Gy!KTl4l@9q+eayIO2N!-(SE;;zPNQZwtEO;J< zN$9Jq_Blzfn>@Qgfw^e_u3vj8?A~op@~@F?XR=WE15&5ffD7w5G~cvN_j}==G?ism z_1eT`^qd-ckJXuS<GesQQ}Ly<dfYDwBnp6^jW#*U!=!Inffc^|^T?AF%}|3&89$BH z`q3BI2X8rU9vdrVA}coLqi2&vtoR*g_vLV8B=JU6*d=%BP&N-&g1gGNb#ugc1zvEn zCUa8*6nrPjNbw7+v*Y#^N2uJSWR2sCe1zn;O;7*YJHMYfDQX6AZ}JH-($zxQN4E2u zV<S8yZCLlzBafjYQZ!)CT88*-0<7~7>{~|OF9*o_77TtSS$$OYdUfyoGWwZu4lq`1 zA)H{*?}Zvti{74q%gwU8CL9V@Aihx7DFpCTFyx#{l(Y`jEwzqFjOrQNwCW6{mXDe* zatxVS;@1qEX3({IOH@YcL0ay<<UbIMEI)ZI9=MjS4DT|r0w_-@o`W+QXX6X3XC%J6 z)utie)ieY)&zs4)`b%v(S(LBE4B1bnrc9`A|K1Utj%P!Z8Q3#N8O)7wwaDr&!y(w& z+Ss{Bkp0}1oPJ{vmmZuVz9M=b7ZMZIt;(a1R%DS9{`ZaZE|42C8%i4@4I2VKkx)<& zN_aguA_8Fb#I7!wxGsdg=Z)7l3>|ACkYL%T$WZQV=*?vDBKrZvEwV#+AO!6Zz@-{% z%aU7P0Zt|h#L~t#>*YmrPv-N{udBoM5@e25x5nnS?h8Tq0c%S*wc;;I_VgsxiF?j{ zsA<|uJ^+3Br;>Dz{?w_WCw>-?GIdk6r0V0NY9Os`E3fN|y0CtGwxnrZGC+ywv{tQr zE5UbpJxyU(qT;LA56Q3Zky0!-Ot}!Na19vtSzM8a|6yDrT4@*(`^3^!@u~45OP!>8 z?zEUCgqS(>yM#~9t=MHoge2m)+3o7_#P9_Eb_E<xq^=W;B@5yh%pau0_d`!H|8h6! z)$eXiw9^(}bIFw<3%vejdTu%IwjCiFLo8;?cweiV`A2QR>ElmgawwrcC>D^o{^Gy? z=i`9~rlW}0>S>D8k;u34w^XdwrVe>c7QM#693H5uW&z6s&jjP>@RAhR-7aV}{tQ<e zwF})|!y?RaSt3x!rx_a2n2|IVXcj6zqaJJ_SJbxn8)IRkDM?3KSJ+O!UTg3Bjz_t& z6a^z#?O5mAm`sl{+da53qsjIqtxWaBCy-12t56C2C4NkfO%g&Z{`-P+O?&x%%xJ=n z?c682Zr!_!b|c4DoVbE$xVM&hMO_FV`F4BD_{$a$L!7qgKHFHL0_#?`)T!nZhhNLl zu74Uetlna|)EHWELXz4@n(R7AdWkMabN57Tw5fS_5SZa}Fh(E<8G^KWxXqa5)8E*7 zll}jq@$a#*fNX<;D0lJQGW8EgfK`ISfH*gL6$1!96$HjnC_?RDk@$W#N@df5_l8@E z0Am%v#>@|3LFYlhr<>y-qCDbt&&hbzyMNFBRzM<nkNS4^yzjuRP+ooKjaWubSZ2qt z{lM%!7guqn6LmIshwUL^nk42l8oy*c<|}D`3|jtKpR7oOP7!DkI*pu4O(McQ)FUs0 z2@cE%9i+-SmD}Q}CcOlw)MZ`!nXHOFDD}44)W%XnyD|y;p3N)0Xt_;TCLo22+*CF- z^Glnn!(}Ca7c8fYU0DR@m(1hXbxxdQy<L;#wVi%Rsf;IiOnJ}kXlh%dA3hhiAmMVD zq$i`Y81ln-P);I73X)C0utEHX5AS#Du9(Lc{MS#IP<lb5QZES&(#7VRM9a1*qH|9` zm`#1jbdR~Nc3@7+NoUpX;SisKFbW6g_Q2h2Sl0O3S^dKiTTi8_n|9?Hy{&<|C4Fva zN&!5(c|JZPi6)w|yp(oUV^3cfF?S;UBRpViJ9+(FD)$cWmmut|>HWDF8BKLWvTtZ@ zGuN<-HlWF<1La`E?8Xt`+pxg)K;)k8eG3XN-$^pO&4r*tQ6;#rtFNCL*A<1NEi~PR zIDqE)@$*loi+qexYL>}XD`8em`Wy}0&d$J)DZFJz$^OnOU_fiBTQ!wz!P=se2wKsr zOkv&5hMhskKRg&z2r<HlH{@&xiK{z3lNt@Svb>q6Pj6kq{EjpiOvpnCB9$fz79Lpb z*)q(Q%j&YkNZBHiEtI9t=MNF<>^;|Y2|5FZR^~hEqw+qO{tSCHAU?;IxVPo)Kcl0V zw5{*$RP0#M(ee3G6nml<CMYSn5rHORrt!g%gx!=3(lL;P1U5m02MslTZ%5{<W*CA` z3{GifAM|d|rMvK0-voi9O^QP%K~@d3i5-fr?1Y5R*io@vC_Sx2m@^A&FqIdey*qhV zJm3!iJ>{ZdyKfFR>!G2$PY64oxyJ=0)h+HswA}%uin#aLt0dUPPL8af$D&xE*GHp; zp44`mA!s9e)1CXzZ{_^~b!7kgurk!IeM!6aMaX4f`?@C70ySFepuest(Ja~`)KZ;I zTfx!;V{LHvx69?%US>W65z~?~(HFJRjT~_w*u(P-rp2dMqeh4%bpdN!N@_h?{;}S% zc1}b_fq;&Zv!nstXtaLsiu7TPc6Ok$hT~zzqb4XWd}QMTr-T3pnYLr1xV^SJ<30ly zaY{`Sju4D)l`7#O@_>zQY{wxQ1h%HI5n2~5+@cO>xjp%)E^gm>8=bN1Y0fvAe}&fW zT%{dJoAsA&UCCxgzKc0mb?Q%)a|UJjx*p#^5yw@vvM%U5z+CulTv@#$3%6Oeg*unY zApS$nATmo@vxlCNTo9!OA(qgY6hKhrtl7)`uB;dDUsCbEC!dE*6obySbg5l)TU}aA z>326QYdTd)Q74I_2T*7EcPSbDU4S=bM`A}imtx_YjUR4hUs<ut49~+-2#Xlla#inc z?b*S0Sjw2}(1Sc%0hDJ&%%x#;qj%1r4+D9s!u!)UN<=CqV$5>Xra<zLHmpx8+K#`U zMVr8BCFQ%1Iv)kefQ;E~wOnd90!{`tN|8qMTv}#`%qZBAvEB9len-}0Jo4MVnSqQ; z#Dh(+@7YF5S!SP^BshME)fH<wXGrFj<T=_~2p&y+s#$CN4u|rW+W9vp9*6QcUuEuq z^g(1f`{5k530}P|Vw_iIl09+Ac*-XsR!g^k55vEH+ZZMx<_Qw>piJFVgj%Ez7mc{G zn$)}1EQci@BOU@8L}Q^`y)tlNw>vmoFe9~C%Y3x^Txm*DrrY#dJ<9$hAT=487%g4t zk;C>O=@3@|b1{mE%%E-50_s+!^d9)x%9#ySf1Wz*VP#mwcToK>b9znt8WW#VqoA6K z&D<!t$q~_3Qe7SrW_ZCM5c9Ut{nq-rHgbHGiu9$Wo@T@LeL{<+FbDrb=8!AFJgSJ9 z02pCTL7L^kvfq}|PtXW`)<W}1=mcYockNQiefRt7hyWr!fIHrtg6+rE0}Ne3WAlFG zZDN($OpAkJ{>|}m{khi5$xDIxex}{OmF#~DNyNKiYGitSIDWlQ$!fMp%6Rq~Liho_ z3X-BKdT>ujRfMM-M2sY0{2G)vK^xFqO(}|)&H53|Pou#sO?}p!Qp{4$s?>BZh1PR> z-8##j?YcjF@(usGoK)Vt&XuNuizkt8g~_<l3V*NyRFi!=DPFkal)<;ATUy=vE67;; z0N<(iTKYgH|0cKmZr{X!4hgNhpMSs2n^q2QdaQsT8|a~#DpEW4SpvHJ#!`mA8vBq; zQU}YQTK4kD8UH9VR@ZIP`-kcrIgH_mF6SNoPsO=8F;{oFxHdehPvcANFaj&K*K@c- zf0WbICMZ+o6r*8P<0;V2>3}V}YIjrym~WZ?8jk-9YySJk4F&NJuiZLf4ag5jTrAfV zS}EpjV$ZOFtYvv}$}(9CmaZ#h=@|Pox9_%T$g14n8WhL=u1>Lakohb9N-S=5Aa^VJ zD^RpC!)N4hya}9G$G@E9C+v4BP?FeFz>x6cRr+2%s>zi2*Nj!jQZ}pv`Q1?geI-Nc z%W1(FfYTlCiYw4ga({<}N{VdX<Bnq45sUAa_<hUq`0R+B<dZ#6Qr~PhJs~)Xr-1-D zIT4{!)S;gW`WQG@$KlhwWCH7ePkPT>w`2g!qtv$IEx8^yMlx5(FWqM-U&-8#%A}IQ zDIHXB-_a9eGuA+}I3fZ89~Yl+XCWi({;5FWLO2kgFJ&cA^^)j$bge{Ojv!y=H^7)* z(p*p@oAa`dS(y(|d7z))(&KDl&60d#`ZNx)4q?CDnlsssJko+c#bo%Ck@`(kjoF}D z?$>oU)PmQgDL`U>_df2e@HvZ!K0&_P$o3M`-NZ?@uB3HTg}1)R*@vF8&`$nbTYS~Z zHc8Z(DUzY?I#Gu|bhPJEc4mxa0OhWQtZ7c*R_#msg}q)HSN)~g^?e<Z=kZFJhjWA- zRz~{on>aPn5MJi~UmfJ&hvNF$qcdD+1fvYtDY}f?1!y!fB6W6FA<V+<OJvg&Z06Uy zM`iazHf}En(<`-iH{N!!$lovw8-zZLzt<z)l_oE&f`4~=sEohEo%CK}>g5yY`|e5a zkGPN;e~aLR;Cw{pNJcow99w#^+<}ycfz(e^MEzJ4er;27i^ctT?EBr!AH6j9TR>I1 zH4>)TRcq%mHM70gti#k?;=U0EQJXqE$%$3hN$Tsn1iJiB97Y1B6ajLtoy6~t#D`GW zlQNBj-8>E#95Wpzf~a!u9_(^RNaU=4HWmNX;nRAfLn~hqY7xb^V}L(*)lD1$Ea}pK zXy5zYQqDUMGs5ld*&*4VjPbwn8>hurSpmplI(M0{tD9vVGGD}WY9!c1IZSH1LMU}Z z&FjDyx^1Xu?f(JK{U4C$jRU!%wjr<~PMiU|sY=)r8%k56Hg2R6?onB3er}F=VHm&* z_q<^<0SK~I;$AM`S&{snnvDAK{v+%?C*;Yz`P+R9D@-5aJ+Xt!iTtnu2~AMZ@adN* zc`5O%2AHi|E_{OMIDOLzt=*y5r4UfzkeR0RmQR`gTzR83m?BU;<2dAw_pYYNQ-MEw znt<}PE_50#7ht!|Ft&0FdaEynPyO^Gmrso#6)_Q@YK~@3xAohoc`|!&^)3|Yn<(<A zY>cc^)&ZLoV|*bM7iBAMEs<A3;6)`CdhYQ&I#9D#xWX>jTW`?aBt<pV!4o}5LYn74 z!rTA;@nRPF>)WN)dG}UO;GU*%d*>wls~Cn2G9Tt)WCizzK5-_6G2>@D@edWE91*YK z2bY*c_dn}NLeJFN7^6LxWT-U;3n0x(2FCgPEerf^v&ZrAT>@Ui!CvrlKz23J+brrz zk*_jJsLN{U?bpmJRwLZ`1LLNqIZO3gWNK49M9R;pDd~)?LIiO<oW`hreG)E<MCL?h zPtIOU`z=deOqQ)iO+ik^Z|L`O?1K9>B@J<&2{H$(y}aMY!MgErAYQzkbn2ur;yjYb z)Q5)aKC^q-d|!A`PZy%w;!vVbO2#CGKKJswHsSVo`4msO@r+-5t?ArP|0yCt$UojL zl5mgEM416X-~LD{xbmVPCU@~zJYYe<-7b^{RD9#lzoz7te7~@Zgk$>})a&iQFy#+m zeiQCh_*^3>P~aJ%3<3`98AV@VMbWnTHC@)TZ6d|NB6jX(6^=I*J<`oB{Ia<Wyj0dI zYKmpTi{*)nD6q|7{=<;zT%Cv=ZH*@&Czws<O@o9Y=R7tzD)+*E2y$-k)6>*My7GVV zXJCg0$*@|{Hj!6{GQv8DAXV%l(^h|1@}iM28xpXH8+N0XHIa>?j7=1e^1mn!q~bZe zTIdhCqcDQlt*9J$-3K>Y!B_=RYTZSOQ}O5Nv%J**Ps9BGmzyg84?T`B*i+|TTKM87 zl<9{w%a$ocli3$cYjx<apZ$e|(-YK_cp9*(0@c%=r&$BpfZKTo$}mjMQhVk{cW&JR zL9kA5A)Boy5Od>PuPi(g#gM($nY^=nRm{VbkwjAxucXdvTRH(jWONkHS~YQ_&Y5G0 zhP%^{Y*FU9jkv%UK!q=z4>u=g3Y&AMjh}pW%?@~*e}(CX@0biq|I-p_;C=u}n66uu zbArI~vmqRC(fx?+g3xt85;+s;&OK@6>L8S=*^<5XLuumF`MPhYgSg6Gt;A%WI=>(1 zUX>RK2^XptTvS)i8^?cY0{;ux&kJ`vL+i3ccj--NeMXQVRSu*Y8f`EB@!5;ifCC>1 z?rB2>^EGI8GA<zBOu!-(W8j3-hq$Qv7#YIc#6H?r%h8dU^P_cH?~G#I)MUg~Z%=7+ zI6-0sNS{uPI{25|`W-l79drDF;yoJ2O3fz6>ThMBeA>06sytGDnbOxWZ@Z)O@Nty3 zrz@XVMyhX{T2j0)YX&U?kiQBxzIM)Ga(>>qX|%#f%|zbF`ry5T)tYIy<QBU8hq-LT z(nWLh<eQZhuZO2AE5?fJwLt=kZU5zwPqrE*i8|lA55onABif5*lhqQB35QZk-BiHb zl#SK$pNcFo#HK*F1*Us$g$&x7{w-u9IGM^`DIDI@0&5DysI}~nVuG2?!i8?4=lS@) zI*HL##KaYT9hpq~%9@sfvsfP^wPMUoV+sXmLFc-5kOksl0%KTDJx$ylZu2XE!|n5r zsHy4+Bfb}y$(<Kyv{sy|2-KKp>Qtz&mW<IlCJ58*QavBct)8dDoqNJA)Knx-jd}?U z{gz85+t&D{4zf8(wX(^a3_95*-t<Jl8C}?Cj_(lNTehKncS4h<zZ}4zrI#!1MLVr{ zl6{Tw?w4mF`npbgPdG)IIcfU2_C5+z>E)xNoPZOtP0rgtWKLJ)VxKI{A!xX64t%W& zdPYd)R3K;U1n4H3U!##5-2?prV=&DFbFt-uiI(-vD6zDNab-Nq3Wp7OifU7&XR-?^ zbH=yr!*b1w)wWLB910bmwJP41_S%rgfx>cQWNKxvKKp1iaHDUpZJ&pH6>1Fw?<iR9 zh+0j;hOT{-z_P;BkNjh%IF(+rv#~TxXXe@`Rm9UnL2Uji?0_wh<PK`lv+y)Y4s84o zM|>Xw3DOsy;tO(MN{5x1q%p*@wIHQHNx5B}lpD6WvPrhN(NWedP-w@)CQvH5CCqXb zT0|kgZpH6k*|dL84)5IB#Z~78bBikSS#&ad8r|lLCS_`Gv&T2Yx@8X*KM07JAzoYg z)NF@j`nnC<4dsPTxGc+o?BpXbcOernDlB5@51l<IT9$`}k1DCNM{{?(9Aa*X(o*bZ z=})Sk-e7hyLYC72f#a@t+QQ(Qz8)J_`SrQNxTdvmW9#Ds{>rygY3qtg`4ayGsfllj z)1JCaw<_L97MB|C$ad~2cMv8OT!b-anZ{Q?7s*h)P&AB~i$sS~JBkN=$B>Xnb5fsE zW@i3ys&kOpBeQGL?p^DWv!ao!oGb%kCyAQ!LROjwtm6-XogHRGdH+Nbi9r&AekhQK zH6)m0W4d2{9P8<EiS@Ptd|8Bl>zXTwnJkaFBb=D};paa;SZe-&p){4mDnW*GOov!x zECIK;z0xaip^L$Rsr*pFRTyDf%8}(2HgjT?lr~*6^2XycGuGaW(4Kq#3-p}VIvf3K z5Cpwzed{r^p2xx(%Avwx+)i(7U&USzRWe;yj_Zg2(Pw7kmYhzp@`VrRsAT?IN3b%) z0m-M;zyXAQm5QB>T-Ua3`aB<CfB<YJO^z1uh&1p2ra7vMAwH77r#2FviVZ940Q%T= z24n_1Cd<90>^$^9S$2gG(h2RQa#mXbL6$o+it6glMQ5jp$>{&o&>oX~DC$DntlAUU zP^<l}V2Rde+^iBm8sKNh&hln;sbAs5@s{g#&9tTE!L*nzi8%zjXDFT)mwJWMI|qAf zTyThVRhf=a^f*p#%#wlatE{d!SV2)lzGL3<M$ojc`25ZLMJqiZHGZ-YDG|y&s>^az zC+-eCHFL#lgfzW@+{uMT%o#xqNceUjR(Q2@wr8Y4^(OnpiY<G*mN;g`L`3p)lk=6> zVpbV}tzHJ<ckQFG1#DUrIL!=R1f40eSk9WITr>K!o=G&y@$)6Nb-HXHEPGy-+-7(C zr9v_^vUpl;yB1(c8(ZevtF9%b9LMnd#64v5`v$WI#((H($KNG{d6+k0PZNFvTT4^5 zNw`yFm<OrJD4d^)jGVMS$4ra|_zmU?Ix`PQns4g&RQ$1e{3@Fuvyfk6QI;D{S{^%K zPIuL)qqT8{sB&3D!9M<^X`7LJnC1*KbBbWq$>$eF=f~7U2j*Q)V~EeHNXnKhZ=A|L zB~cOD7mo9jKEdd*I$61}QE;>-;=(aMu$$FJ5@S<Ou|#tJQ~9}l#a^wM^6Zi99ppza zt0|xNi_B<Ja;lpHAkbkEP+pF3q~Zh4ma5qYYAAW`2!1+LN{F$c08zcZt}bjuW#5PN z#p3h+38__=c#>b;YC-!47>)q>TY(T%KyyC#^Ua~W3+b9dtb;dPhWWCP<pFzVO@F-= zL88LR_u=l5Wv!lq@U#4$R1X^@NZ$$O4G6bD5-7}*Sp4`5@=mbmjf)DBd`)X8pE~Z1 zm6|}#*>8R3JLNt<UssGbj(MmZzjn-Z<CCW=kn<#%JasI1=E4VWKUDT(%Xp-Ct{7{# zYtrny<BpPdQ03pu7Lqm_IjDJ~#Edamv7V%2Pt7d=N9f;YH;&$Uef{9pNEn1~CaqhV zu#Y3b_baYw);44_LbNJl`CwY7)Y<?+Q&cvTmq#N%ds>m~D=K)}=*au}WHtMTv*LdM zSwB8N;+}VVp$T*inV;{=rmBmFFc`t9pmESLzjaM-Zz)g%;u(8nD;(w^g!oL`E|>;F z{0uQ}8B-oN$D=+inPOEGJg+6DMFb6pu@wx+q)_p**<YSK-zn72O$}d_t-O@ToHnd4 z2^3t`JlK@%ENkgY{4s%RZOo5yAUG!j#L8u$IMO!nODItIPNRmJL+sCt?qhhYuwp8h zD12Fg8rVY~W1PtT(99&@KH*(Fw~fIXMY2#WaZ3s$4?b9_RZ5n-@Zpq0%Q&C$oI;EJ zMe*Vn6dLTH-bnN|5xCzk6U=uuU|4xJ<XA6HSDcBZS<w^HagH&ujqNh?H#$}S%SUxy z5g1@pd~4QVcL?upK_IDImIsdxIomVb$`>N0M`M!THydgmLn~!Dz3tx-v&5YOd^O+g z)%!7zjlXX6>?$S9%cu_12Wu9mEWO69Gwmg`e)M>js32w2fc3#(Sv;oWHF<t${S)2u z`;wk=ecN#Oeh<De_D81rM{nB`2g>Km%{`2X?1MwE?{Pzh-1g{G9twil$^81=_>Kz_ zi6No)-({x7M|uu0##mlTZvx&s)%3^^XgRMTRzc0tjDDe`Gkg`R)to1f-KeY`RY841 zkk{j_920?Phl-}{s!-)Wb?pcrnR?KYAqHiCuvMONiLx9M>A(iEXs7Y>@}(L315k2E z_e9@%dOgs7cD8r43d*C=s<-ZdQ<5D=?-ULQoka?))XnHz)ADe-XE&VWO?^!V4-QS7 z^p*KwX}DqCoQNIZIDT^l`}Z#}@RUJCvE&9%qs&f9Yu?@TO;>x9?|T4x=9A2F&gh@C zi_C@Z>6rl&pX7O<H<JQfi0c@5P-KO+P}?zjL{L4CFKwduGSH?lqTW<n5JQv(M4|lQ z7oU6P@LJd=hL#}pqXP`$g@$BcQ^hL^!(#eHQixx$2RtT;?LABnE(c(E%2Vbj36`Pq z{Rue#0>A~yE<PiFh3+cd@5~8|XO4we5$@d356?&nZa{}<fq#y0-B9Xj49w0&Y}?a) zhO_iY3S>`=3-guwG*>!Y68RjvJA4E{fDwN+H8dL0z^PM?Q#BbLFVzRX0_Y%uj>CNj zaQgO7N&2BOEA(bnH5uf3tuzI0QNBrJnKxHc@n1^bxHHNGoclN#@I?ES0tD6nj0#p3 zTFkQ($-GpD%`OPh(sK8VMR&~@3Rt3Mjj+`)cY10gKt&P0{Ycom{*B}haH=Bm>im7j z^k{&T_g{52T5V?Gk&*9?XGk`z)%|cr`l$Bk_onV&{|%8HMByKF2Gi?@kpZMppDPO< z2zrr6AIE7es=UnDYxVdgFCt(yU+DFESHgBCLKFto3G{A%F;CL&>F2vg8RmGGXrp>G z;meEdo<}*9w$m1!%^1xJ>Rj2ImJL+X*s#S!B+j0-^MT^Ptf-yzDSBO}I=VI^Zu2g) zSM@h^u2$CiEcN#pAp&l2QRC&5P{kNy7zZ*X7$eS#M;9kiA5`RFt{3z~qj3MIihE%Z z9pWb_?Sv^HTw&sezet8s@-3O<Y6)k(BiCl4XP8h*<$}iP&Ygp1&$aq@3zFV*uJ8|5 z%rsRZP$D$i`HRKb<Lu(!hfuyEkPCL*D-zXXpx^IjUbGYV-){)3z7~G=(mSN@0xK;$ zc&OD3$@0rR!v(_Yz+nua$Xa~^y*7#>DM6zdM@@vOo$Cy>DA3x^ggq$z3TupX=DBi^ zN!AsM*guuXE>t~PLG4!2y>^SpTo<GC(R{)P-1Eh3q7WH2uid|~ZB1j}YG>O|ORyQP zyDEAuUcb&OQf^m*r5dS%>2OJ=frDOIW;^zsx3nIXw#l5+r{kXFwU7^Qxk^Pi{fzI0 zZ=>LxcF_W%Ma}|Dm_0H>nQtoFPaHSCt<g{t5w|`@V4deLV0SUOkb1(a_R{(SoXGiy zsuA=dp+7$B%e~$hnJ!--7sfh-K<-P<V$+OGya~_(b?a1)iE5^_J&1?KSL~VHTTWe~ zd)eSXnk%*;AWBm-ldIaL_qxujy1<A&vz|j{j6<-pp)sFUd@p0Hyj@P8Ot5~+Pd>`G zqG93;=djE2>`DDj<EG}J2UyF;SpOKlLL??QzQ5J-xj&=r^O|6vVY6C2;^m<~|2~t+ zdE;Z=wdL7*tX|9c_Dw%e-c(O@#>|izLVxvJj0QUybwNuaM&f)jQ7;o&5f8_>`MSlj z`eZZAp~Ng7HHT*f8x#4BwB^9zKLKwN$d=y<CI~w$IxstzPs<_oi^W)oQ<{=ytuYSe zHgnrszK<>HJY~4AVi7O0U+G@nr`w_tCy#?*`UlpJtR3mod7;$3VVvGO<n9T9PntJT zkiI~AjtH1unF@<FK*Y)s6v7VO$RiCI|7^N-yRTQT>H0iIGXryL^0%=N?7}2Au52T| zC+csL>Cw8gHpeQMjRN66<hR3|IZLLBkVk>?NaXvyP3WU;@-E_?iVQ#9xVhz#Ahzm} zmn>f4FD#D>>sjh72UQ1GxzQ$%Zs^>%*kB*e(t^?5&%Ng(IpXI<2cdJ9cvixuRa4yf z2O0;h<zi$hWLw5XLR|i-J4b~;p3n>I=g42v3h?>8-nwep>JSqIc%)+N3#>tnnZ2Mr zIkagr-P2cPlG#!V2ZZ56jhqJlX!_U__WEv|rNFA#7r^5<q{M?E02lmfd!O2$<ru#> zew80=;K!*QtKapOyP@lQbv&+f(r3_Um{a<Aixbe5A2q7fp4V)I4_{_hrlP!Stj)SF ze>|-I(5rceBwMAZYyEs0S5_b<(QhbKH7g^1JuK(n4Q5TS9XMT-lRWILrd1gyp|ssv zaNknp#05WA&JL$-5a+Ax4KjlbO$fNe^ql!cbd1r!?tIc+LkIu#E+`;3_z8RSF17?8 zqD?2Wcm^x$^uV&M4;Wnmbz5Ii<h<Ugt2B{YF%v952rOejoPSCH*`s1p`S0>^gibr9 zp?xR<QA~k)p0pD^J1u%DJ)hAk!i<r|&;1-4cs0+BE|(hpNn?l4p1Tq$Cr>(_TtdQ* z0kL8H-iAXlU%V1#%`3&WsC%GYzgLdyNXsq0Zo?kL09_7^u(6?zB7o3|#oG5>C>uQj zB!TXAm~YT-ecqsHt}!hiY_eA7BKVMGEMzkUl5)kqz<xN`!Pz=o&=nYA|534D+Ja-G zUQO=Df|=0`GH#Ry9R0G(*X*@vyVRq<=okKrx+3!bu*0el+x-Q@6~b@pjWm5RPW3q= zbRWxB#R@SPHI{-hB_~-5P@PTvy^bdlg`cw2bl;Y@HEQg)jxS>Jw*-bSrz*1li?6Q? zi@NW^G>{M^rIePC5Tu(SrKJQ!QaVLII!3w~x>G<vK)Pe-p^=i*p}TvS_%FMA?RD+$ z^S;l=`7&Sr=lsq&_kExH%xxSKzL3L@^&eqhnvP#;&(R2gBwjbM=rwj~w?ZI`pWijk zA=%EiUyHt~vgk4W<amJ8Rg8F{pNH^LxSg@~=~PKpt4M2j(E-|F2~p$>V+2)^bl%^t z<6U{MIuT!KC+<QUMw4k=9v3(H)^fZRn2KyrFn&bbH}XeN{qxM`(Q_e&48|<9NTk?h zc2ldpw&mSf0S7wHA#{_C`uE}q=37?d*`+${1V{J(7ozyTf30vbnwf0Ym`LL$7!iGq zo_fJ}6x#25yr#*;hW#iv%=Lz>In#5qBkDst9twZ;ey74^zz-uDf(^l2;<rlgf5^WA zA5Ogak|bKy65*{|Lj3{{GGG{c;dI}Sk$L1zdJzYN#ga*Qzhbvow@Ea&NQFQ3Q$td! zdRR<%Hh`YKFkeb)0c0f5?^*Om8)0_NPsVgO>vDQJHsUL*=MaY(z41+Ma_s9gh`W1Q z5qjy^9CJ+UGqew}9&VORiMF{d*;M+sTux9&uKoO5xsbv*j0FpU(J6G!b<1y2;?;r@ zaQAB1NX**pYK<OP@?Bj-8Xz@WAdh@$Bb%*%S_Lt05t{z{lVR|A+tV?U#d~@LYgJb2 zB3UFl%ed;%U8WEZ5pzp85w;M}%iTZT2>Kjmaf)ntnsnvc{FH1k%h%--s(>M{1;ya> zhf2whL7391Pbfoa@`vxk`t{%MT^Eo(&Lljc;}bWW4#h2dX&oIU8`Ix5z!P54>n>T> z#Ty1vS!dJ<Eot-Eg+06P#fo=~d)zLy)<puY#C!<_T%qdi&Sto~ErDW?<H!6F!t5#^ zXIoYdWXS{U_Y5TIF0Cph)mxr8$Z@^4NvmJ%&Jl#WtbfX8?PRO`{GEU_^Q0)Ux{+rx z{%dI};h}FlL9(FL?F&Th<<;%kVS?DfouA3KA_wDU^{amqNfA8gFN{FHPJ5uiBo#_N zGAvhp8Y05?n!}l?*nnh=Y}02o^?XpG3##;h^qGIq`Ht2bR$jYDbNa56%2zMxtRX*s zrY!&o^R}Z}vl+D(PwJFx1h&@HtG1(pFKXDj*5I3;D>1cK9Ss*4o1R8`n3IX>H5H7L zv}E*;qwm{^LnEh&VmC2#PY+klnL(on%xTCueTl4ru~-y@CpE|Ejo_hD!fBw+98qy! zd!ZvnC5nBXnKL^e<Q`4O2cca4^dq^T@=m}J*=kWDJKW%tfp-=wfFw{J_f?24^7zGU z$Mk`kRV!j=F;}j>{{0?=$O+0wnmKf(3@Py9B+^s&{J(SP|0AIB8Sk+@0PYh#U|XwH zQz(^)^ZeA^nGRkZ`h3b|z^g852jcyCMy$_8Xz6Tg*^!vZA$7tZZ$yP0G83O->Exuj zZC@H*b7g&@p`P~V8&{dJVa|;Cj``ZmnI39;3EFUuSdM{hSB_C^Nl|=rIE>Oj<XP#L zWqdbL-JYqTBi(jr>}@V}p=iV0UoA~IK>P8Zw(q}SFn(aqcJy3pzo5`#-09VyGwnY2 z_sK`?kV{8zIHBXj`_Wvv0Ye;7^)K`0q%YF#^|~Kg)*N+8a&En<?95`zIKXjoH8?wX zcsM35FS67V|A^o~Hmoi)v*WwBufxCP(4A{3>j_&GQ=Gx*c7K3ELxcs%L?ZdPxdt<9 zZBZ_3I5^OOG49DhJeyFN<Uz&`9dn~H)e^N5p=sLZ9EBCfsKJ(>&XVXdk3yTnf}6So z>QV*j=zeD1I$0%BN~n-3mwlcZDk{LQ77zN)U#f>!jlOAf*L|%=>};v|mrYw7O}G=< zsbv9N>{d}|N>lo2uxP~-BIh!-Qgr;OF76(iE@7YKZ5P$cCZ8sQwwbLAi7RDrH?v24 zRim2!!sSSLnqZkr__*h+JcZ8p*eH7zcWX-Oaz*7mUJ~rwrd6|VGtBlj9OZ3Z%iZfF zWF1AC&R+$G{0k}#v&H8A+XR0nhzh>vH#|MfUyh=n8^AyR-gR{Nf4l%z3|DmKJ>)9t z^JplSu%JP4rf+Y4cI3_Kmh^YO&lM~7CY3A_hz3SGMmLC!Mpgnwftv}Z=2zdCZ<c$P z-g}5Z$NogVTh^}mJ~yMLNr5n6jTd<WE9T^UvzI+u)&Oc^#&LnqO`j#tXl1)C{na5m zAa!OLQ~*k?P4&GU4-F%)oK^2AHb<Rt^$f(aMCe*GmPp)JkyN_k=m(K3Zd#!#i<uKF zYZCso-JDN~CO*R=SVYvlA3v=V%TR{k5q=Xfv?`r<pZ_RMxMq_u6jEUwAg}0N5%dPq z5q-z14{0TF_6a}|%)l8ho&J?W5G4Mp5oj6qkQZQF3$0C~uVO7;HJbl%p=-&{nKf1y z!5=6b*ycT_vtGfg5LW^>7*#y^I~iOTn7+ChwgdcleJ(fW_~y3@pB~@R7j?9~f5qr` z8&V(ZI&BkX>xfYU{v&hpfQl(a?F5Y2>Ef|dUTvbcp$cJak2Qpta~5)NxcSy;oJCZ{ zZ9yt_wCedE-+d?p{h5c{ui;P6I(VS{oBpqVQV7z&JYfqznkRJ<7xS~7c;=Sb8sgSk zX7fPxy`}Efg?4^BuBApYG3@r5m2ZJ8SMRl3Nvxux7YQTt**?DKrU2EuBSo2wuS4<T zUTU=-Ws$^^j<*)Zhb~3!`g(WgX8&dAS0H|^@gRXqDzs|^+n^Z+((xkFfahKW%7?iJ z_>u#Bm>QqO=<B|mbg&jJA5q2EFpUJs;Z?(xkEzn3L+QmuXUN*J+n3%YUM(@sFtW)n z8!O-W9Fu7=Vbw94^}LoZFO@AiGs)Oh;^Yo!=K|1E)OG8Bu?u9sNU{okn7dCYTCp7D zJ5=?-f#a}Cu6a2bEmRX}beVL>(5#vqW_@g9E_IC^vB8w&JWVj9?r2<oe~Uf;r*_s9 z*J3u2yRBxL&+yR`WMdn7A$t~udInRB!&JGG$V#k1e+Bt?{5an*)bpsBeJuO&(d@^~ z1T8tZiD|pat$LCLtENwI<-c{ff>`hS53a3bwg}84BtrO?BhtjC?Z|Z3H0gSw?`DH3 zuOpLx%Sts<;`!8=y6`gP_e0Y;6A#Hc2g$|hcI9!mOFoi37kV3;x2IXVqpJf6J>n<^ zTQ$tH`NdZmebmNg*N{3j{)s8>>Av>6=Esd646L-!ZcWL(bc=Z@?o4l}3n2i0^z~<f zpptGk_eFpFmb*tu?e}>2yJC}NKo1trpBJc*AD6b`X4|jZekpEtt-Tpcqy*+i<CQWa zV`fMC)FOC?RPh)K7QO|GO%ab`nQP>7T(2{6@RLZg-d#h_6shU2AG)F$Trc@IfQ<0I z2&tqMX0=kJKFC03<V-$&hHUG@v&xduXt2yyHz!*^eJHp<jqC9~st0<~CwjLPnARi} zYAa(V|NOfxv1AsXDkc^jHgP6xt@F8Xy(8|1T_?Gi(4d7#K`f6Gt_tj-%HXDlt2PIL z(<FK&jd4qmBaBjV2gj>XW#^{Tbmw~&yB72_Rebxl8B1sg*)Ii-s_MgYf%w`AudNN# zg{tWFVAYX^_KoR^F)5q5KK_;T_G^0f)}xrJLh}iycWNobBaStz;`TkG%r)i_R%tRq z5Sg3r=qRdK`qpxs#+_PaDW|I?qm=Da(k)qq7Zv6C1`2=v4GswF3OC^!^sQOZ$<6JI zRt-!e75xT$d;3)Wq%1Bdykv2L`ivQ+`s#|aXDjDWizOq}Z_AXy@K@M|hy8VUkCw}O zC>h+Ql8k%%&BITLmWtD1LsSdCB58S%8eg{CCo`Wyo;R`xX;@hYx$#{k4f!HH+p_i# z<=5)LUi0Rk_sBZz5z7INDIH8<Wm)?ghnm{8MR7~6f8Y2Ov|JnCo!)rLBOEHJ6{9`e z`0%2&W#^DZPC%}j_18+?r!O&TSK41*jZ2sIUXo#Z5bEKVJT&V*zVqH}ZdWDLk}5ae zWQ;ZFs92dD8Lsn|BFk<P(#ky)=!}-WDq?Fn_IcOG!}xTNzBQQA|7x?8lJs}iNBS4S z8jbDtizc@k|00cgc)yv{ga%imH_DpgB=*txmh5{30a5Sc?awbxc)l67hqB*pnXOp# zLA^9~WG1at-^H7o+TCP)99<bh#o=#(-kCg24`tynh|U^Z_?<JtXxcs@8tFR>QJUHb zukEvFXQib!{}AkmF3)U{Qxs#l)Bubl|G2$k&-6Am96V5MLcCaFAZcfkTw2^q{<6W5 z>r%X-WX;X#tupLETfU=pHEnd1U_LA|d4#tU8X~1~eCV>~$GTk1{Soz$!sq;c+YI*L z`3tI`Nfu+IxHg@NuLQCBLd6zLGAxe%koa>&lr{3nan1yX4Ljc?Z=jSzqTlQvk)ys{ z-C)+rygcaA19<_?q87t&!W>ShU?ib1t>AwLU|ERGKEj7PA}OcrZE>mGnD-d*FJE$u zD{QLBF_VGz`a`%LFh5PZU>Gmn^D1EURXSf~36K9hF+IJx+F@z^{GIfIcIS|z!nLSK zcIBDLnrwiJEvr&cqlaEWQBPq`+9OJ}-j-7ykAiYJ1848%!Ib^VO<lmT7gHV8vtd-2 z7R(g*inM&-L%`qP9CdqRjqH*s3#!R8T#7zp@Sbq<^|VKCJL1Qv)E|<<v^E&tDBB2r zdD}Di=Q+HRNH5=hG_~)g#0j@((gdkO=IiSwm2p6UEw8^TP{eITsxL3ABJPaG@bhS` z+NZUA|Ls^GRxwsh*3oSnr;>t;EUdqmtA~}4Osbm5ztapw-i#knmlQPot^ZxPS{2lV zkAg8szn{7O-tSEea?D`t!MZYNhuly$lN}xs1is5wPYDdpV<NiaKXDx!cW@~m(yx>M z!VPz1tgN<FRx|pg{i$pO%-S##g#5t1I8hMTD{Cli!xC3s>_*L{v!`tOc-y`ZtlYFW z46w8;IT_cUL4S&etA!0+228K{!#U}fHmt?npWZ=JOL}38kBg0OpB(~AUwge(V_zKG zCDS`l`RBUt$xBVO8>Ql{*UtQ;$hPf`xqfSzS6nIj4%xbqcFR)Z<`NEa9KVULdL<mf zEMM>FZLTBgtnZ#7*7wu^NjR(dQOCb3;5XJV$2OaKHfu>S?8OT#JsGn3>xj4CmqXDd z{~fvH3Au-V`u_cm&`rvn09@s3xHqL@4`u?grs4JY&+)W5j}1E)592#g9yY(Z=`B{< zUnzd4Jn^#M&Q?A$)RCK+s*xuQhDSw$7L#>^M-t$nN%oIF;U#AMS)6#~qi-1%`oT#* z!0BB<P(lMihJo|+&m8EW?kUTVl2O`1%T0J4C%2oNb<Eb;`bE^X5mdoEtNcadtKMO? zH_lF#wW~hcx6oITB5H8F)<%x>u$shlFZkemOL+k@X-m(l`Wft!Ccln-(K^V_%x`7_ z)=!t|(5pFQ)99_b$k`XJv5_(OyP!xp-btu=>CO5DuS<n;ymFklQz?^%q-zm-mF}<h zqH0!oR?VX`-XVMa7wXN0{7nM2R{x^32qr%1k#u2-hgGxnr#!V`+UrB%)8HL%o3jXT zW}pRHZz#^$PB_hrdZE8AiD$!PJXUS1eG@(w@X>SXc`!RieLG4A>Gv>^_H&-im4D15 zUCHI>YGTP*Oqu4OwY>3sW<91tKaykrlcg@U;o@4I+_}lw^!4M%4*n@mzsm?sDW?C- zgs~sw_!wAi-_}C6J@glh?KO%LCv4dE4oq@o$LB;D9)d+j23R+j)tR==cV8oN6X(X> zc8bcASAYJia!bC>#*kM!@X4+S>f3I9Y~)yX8!V{d5#@$c`M32$dD_CmOxT-w(^5a% zU$Jj$Wiy?Gqilb|<mnn-g|n$7EH)sdd?|*aznm<T=TFcka6A7u!8nNeK1ey2&{m7C z8~<$nlbq#a=JRm9M^bhZHn`L`Y5F8nO0p8?^)03%wzDbE1b0W*WKKE1KPVyp#jl~~ zu`zt>VQM+Lk{Y(a@qBiU>0M=<tCUT$b(0~7qmJ7fUsH)Yc<00^a`Lg{hbPNR20ms( zEgp@$X?Yq|hax=Z$k~|Qs<50!=$nO>GwQa&0P+^vL-)QlyH}MY@&Qgmi>WOYe%YT3 z6@RjelNQ|_l_MxdV2LKuo5y_{8U8b-EP#(z-|ccwLhLq==I8AY7B*ej4A@C(I+Qbn zB0?ghPK$$dTkVr@Mg*uypS>U+4>)Cjc<sbJD-vkDD=wpS6Igl6Q-PL^F~gvXDH%P{ zx=ZZxLVra<`sJZ%D6GWiqUggU_+K_M#Bik<vWfzM*RXGc?NJdH3DPI8w>0~jc23=r zCYV&~`92sCxCRCJ7p?}4Lc7Yk<_O+C3J8s-q!23v?VP&Ai`=RPJmt{}nRv{V_|~zn zoZT?c_-MvaB}!v45}snLJXY%Tp`_<5aGB#dFsW>mQ?@wB9H+LH48JG+E}&4Pl1QpV zJqt3HEtR6C?3lX_(ij;z@-Z@x^x8jvrXk@VMtdd@mCaw|&lF3g?M7b;;l8XRC~`Wh zX`2IJXBVMYVr$Ml*>qMMDoDw+QW1nL?Eubq!p-kJhaYLebv?|ZhGN>jI0hXLX}7+G zC{IDc@3rosZ*a-1Vxp=&epwC$t{&yEDblm;y<-)Z2s>j9YW=t7lk`5xFK3=L&_(@C zR&y$mS8|#@*#OrSziH1E^^7tF-JsP8&j;SaSK6yKePz;o+g8CR!jAp-6CU!Axr$S1 zPlVqadg9p_@{ZYrBRT(|)Gt-bhnH>Pd7r8^iM(%3b)6shYLN7&wK>_D8;dkVU`;qS zMy<cDGEvR{0u$1#Sy0SLv3uNzE<qb_#`%~uDDpW_(+wXrIy#NmdvmhUxh%EkjXY^} z)!Hgz8r^ik+RnJmmT-4XCA<XN;69CXK5Y=P`<*#mE9=2=+lG{B3ud=#(!!Lm+FqW` zy9WCRM&QMUUP#cL6{(-2zsb-NoT<gJ6t=l0vJib7%lc5GLnYyd{5f_#Svbn~JFjCZ z^IwJ)6au&UD-otJ_n|)c&Yeya|B@kHm+<3*q3jams@{7%^?ouGK4%H}NCf5mOfbo* zkw&p<s%wqlJTuLya{ti$>~MpY$PQIvLifO{j|pk9AGdyFx>NL*uL<KF_(vxs(j~J3 zxYwdwhaGPX8d^ZN8ke7zLS^j?^>9DcaJDD~|B9J1!uK}9;?pbS^;KGM{P-3I-Vg!* z3_*A0k;ma~%^Y8TmZRM!_lcj_K-_G+yIWeZ)4ka533>P@uQttJY2Gcc_@}LwzXG%W zvPiKEh{W13JtBi8OyYOZ7A5|V0E6ApR2qSIIIHTOhx6va=!lnA=FDRoc0C`M1&n_j z3SYd8Ji0MR;Tt+V%@Nxa{}(-B3h@f#DbC?Bs=!Hb6x@{&p~#CEeQe`?bswVuya!O+ zKSNW-xt4u{!3kU=_u(cE&~3$zr07tv3Drwdq_Jy7(NE33#2;yzEULdFlhw@)?`UVw zXEn#-?mvau)F={pbG?2R{*L+mC~45yode3#X0|q>`)H)a!hyO>wqaNn(Ek)I;;vf@ zB1}7#T<%KyNYCWWV!HiCPmFKF^@lviCmX|}4&k>P;knPNOtfO42>Iv^Q&J%2P}cCs zLHDG;aWZg{XtAv{QIsrfSh>=DLN`}Q<B`sDRI2WM6_O%87$;e73263|Nj46j>@QhT z8C&O~`NN=F*nV^@$X46`cgPQ%w`%ro@#*sLcl14rLI0tHzzE_>4_L~OEM3&pLZrPL z56_2XW=Z06HeaOiSsD<?G2{?=TMib=W!LUB0t29RruE@+Z9zS%=ZfnruGDfn*Ejp; zkeZ(NgW;#$_M3MZtk4-vIoZ<=vmt?fz^hENjdUOhelfnW3sR`5(Y`%Jdd>o+Y|{<Z z2m`DuaYN77I2bR)6$%b;OQ@l`=4NKFYnV9<&t|L+erTSrqyx;_7x4Ey5?iJj`k|J| z;qaP6&h<PY$#06tm5^k$ENh^M|IR(bnVv75CpX{JGNaJ>0$>(hBv9<XswoFA=AY}u zoivOCVuUo$QHBY>e<*pZLB}0#zpcMm@Er$c0UuNi^cEffG@piJ%6XuRAg30duQM+9 z6b62^3$@2rCN$V1a0!MgI}*2VJ{Iq7UD(TQk7pX_2ntpq{2%v_Qk%<e_#bTYaHi|T zseO6lE7W={7p^;LU-xi#zAO>Eb8MRw_+{xvZZ+fehNAG>5bI^36gg)d50+jDtSz_n zu??KOEt%fop&kEx=x%I<#j$nL%#nuw<ZqAX`}ab=1o%?oRf>NBnFI{#qIb@t?DXVD zSlK-PiJRWIk$nBKej6BlP#AqlOyowpyRj?Uion9#Yca`};BzxL7~rWja*!9gVhZQp z9ZY%~!R69(5M8@dtX?CY)^zu2Em$l#){9_p=sAik;oEbvHOZ$)cDJpU>imvc!%zE? zRvjDe2cphSt`6HMt|ebqK2C||PvGMGuJF^(*Nfr_oB2*ke*nkrjaJCkx?6{D^z7t2 zuRFg?xxV?;n<S_=W_`#5&>=`07_}vR@3yy|PR2jsA0sO2QCZ%io78|@^C*5YUr00) zi_nkNp$`L#_UMn3o1cZ~0Ht;;ErWg|L)^%Z>-4_ysD>xXmvFz7L7CUDkLtC=ehaQX z(c4D#g2&*X`MxKx>dvGo9u6i$j3;{G5{jz2G2I89VXaNvLTDGWhym3c(wX(DPMw4? ztw_DK<mmyXA|3wt%jR!fSm#n>Ug~B9KV7Zr_8RU9$u{+wVe_g@7tl}!i5%t(-!0#Y zDm>4L9}x?~Cy5<3cTW3$G#x1P1O1})4~_p{C5@av$r{v=MLav)8%ScjfarnWfzi%( z+ku&Ejq{h%(?jYjMb;;$-d>u~gZuYB_qZ^*k-BXUUANj+AEhJ4m%RwEOqXNVii3;F ze>NUzHvY3*qGWJC8^?DE-ly+zmH8<^IULd&wt{}mMCd13Gi)dgZoXoW5C5W<7xt^z z@k%cD>)VSZptXzbJ@)wk6lOXgJ6<Rje2W@ECAeW51#F^%C84U(qQrW5j}^EmB}S4W zehF8GV2CHq?$Xf@Id1gBoAhX7RSpSqD6WruHs+R#pW&-cCq9K@8xPZkB^yFgx@O4T zETxA0o-7ldH%dSdnI0r+r5xXZ&swhgm>005Bf|L@leGde{|Gs~CpxiUg{^>JZ34j4 z0`V>I4eKNL42{p73eHs(s4)r@Dm>0VyOVp@2fO<7-@}U~;Z=ui$k_>32%xT)PjO(E z$nfLJf_mm3W2fLFBu@VYJ^WLzI!2Y}TiS`@76mYvO#9Gcdiz#Gcn(uS9yFP+M`!r{ z!AuYvgD#rD!`le`#(egbs+)K52<wYmdn&nZSGv*KU9bA+TLV_?X|`-;^*^%XgyIRn zlEq>h?994^Ki=)O{r;VxPv)T-#mS%V$md&%%&&z)TcYXOnc}_WgUO1p*@<n}rq>y; zh<J16Q+}^(Sf)zI*RxgeHhcH=dGZN(e+-X|x&3D`Kk;Sk3I+TEGXyq`N)t5}Tx0X$ z*H~vWr-t+fz!kmSo?AgQ!IgDZ4LLQpUk#aQo#XH~e%K-O^!Rjc8-6SZRB&3ZYQB%h zK~xN>yD_On&eM;%6HkInOziKx=WKY^f&=f6^s%(6M18AQJJZSghy>A$A#%}k-ocnG z*As4K)gCGGyJYgKosT~htM1L6#;V%L*)ko`IES_r+WpnYMNpnCoQq(RQpZLQp94%4 zl`jnRI26OKqpirf4;PRn1YBF`$AOtZ3yHp=)6+L9oMu^4OzWM&-6Dj)b!oAL0*~`> zPW1;##}U_)hM9rDhh3+(LV&T9ef<UocKp!=qtW=SV}zMIh7Nwq5~@U(gmxuhoKN%6 zFZ3}Dwio$89k@yeewnAc=|_W&`3v?NJe72cft7M~Gn%NlO>!S<eaSBq+J~!i<`+=^ zkyuc9Mk*@L$6KC>R}ZdlJNsJxu%5`^k-GPRNXImM-(QR<@fxcEhOQeYxBB5}-0@~I zRUuo+(*~1oJMH>9B!o_`WG0;SJ40kfOuCoJf~pc3PSU+4X9=Z@z&nlkmFE@-t_D+) z`)ID9x7Km&xz)aM(suCK$ZuM@ooDGB;&wORQ*!M7F+~B79-!j#B8>tjbhhws*vA#P z-LW>9<ftjfCkwfS5@L;}`pO_3$qoOru-eA?qR5Am&x<FZa4=?-sw3(l0&`+?UfekJ z+CYM0$Gf4rnLLhNToxLszv^U2l&RW}>!9+KeVC?#h+w$<CQZ?WkDloZU2>SS%yqaQ zO3_l#PR~fL$2uUCKXcpED&3xZc38L6V22@s@e3dDn{MRC^TQDY4qy=g5e=A`94JJ< zJq{gM-mT}6uXvP8>8qZYV%ZNGUE6HKt+b1BPBo}8e}q2nOGU)@asyLf-(<<P3T%jE zlMH!_O!ZFoDN#wkUc*irAV#sXYMN6+e@kUpWLIaQq#1gnVQ>O@drO6S0iFTxN$tbs z+Xs3M=+_XD9fRaqU-TyCNeXT?GByMo%SL!FZgdoG_s6G9Ax(R}!*Lb^;GvvNMVC<< z`j=UFcmF2EYNt$;qx*(7)6(3zQbW0a5}t~Y6TRiTU2n=VaR|F@`Ja2ZdO>(>c?ym< z3z2_Qj2+p#zgjUMH)g+{<?G~%Gt+z-PiU3<{;^OXiInd^d_&yIp2&Lu&;7&V$st<7 zSBlIss~fg^)GdOoqk9Gahj8vjoMfd*ie5J0`g{pQ+1}E%c`dQ)7k};E{p<1=t@VaB zkgw|NGd|tnOF5EfeR#?+Pb5zdwUG#SEEobBkd?|7_QzCWZRH675%*SQTxdtW{Yu}* zbzW0q*k3U)xipv2%dW*x{FHxc@(MR(d8YkVCc8z(!wXJ<C0JevbNqA^iqL;!^=M5{ z=BizA;KR3p^r}GV%jI&PeHmPhbB&>tTwZ#&HrTh(@b~gTd=VbJ$sR@@aLW$Ql0@@{ zi`Y%2Sh@LuN()f!l_;W#7V)J5G*bc)XPd2v2^I}{x$07^Wt`1IU*iwdDu~ewOdxoo z1#MuUGu3$7*Ka{DHGEE=5bizSydDL*>9gE`A)eJBzzuD)pK>ATR2<WI3aR1v;)lW+ z=C-JEyII_vpN?3~E4tj>)(hgmxe#g{Pw}JOWmFOvcyJXhlDeMENW<r?Z7^uFuaO)7 z2WPl?Y&#G4(E)9)qBx|n?T(2E#;cRdC_6d2QfnoM%DnpVxly4mty}!9=3E;{(EBEi z_Q#Kt6*=joST@ZZ3DIu9H2J>zPp|Ag$3f)X(mqi$%>M^550vIU_w9}Uc)trb>jEne zWx9yvsq)@kmn+p;RMQ>q@JKe`JSmRLy)H-e59T=#6HW*A$M90{(RH4o9_l`@Ib-Uf zHb-b}oJQyJT}yBz;*TF7K)|Hm@YSQ?bWf6@5-j|DxPZPKh8G@SO9-}BC0y{E_MnYG z-q|M=I>@>bTc30>c9aFv5dQsZu^6|Jhsc`!y-^chiAGh4DIK_-LkSGSrM&NNRg;0| zv$w&w8)6slV6p>)91d!O$51eX<DncM0^{P#2Goawlb5iu$=BfT2SI-nD7fgoyk7_r z7n#Gs8(lyjw7B?#u%e$DOV;b_p>znxEd+WaaR{7VAD01qR2AIFyf}ajl@+0fLtQ0p zRZl)QeBN_f4>TO=o#X>%hqE&eFMB!#=ISSKDSubReauL*?(wdhqOMKydHT(g&-=Zg zTpVVQC@F5McD~?&zZBS4DT@@ot|?YZZaMcH`8MyU26FMX0QKYrrBQD0xMd3=Gn-g& z+Wj7T8`&q;Ey+nAo{VWCzeiq#<K*Ie-D5~|02s@6<!#EOa-R3qA9#1MACphB{Qf7( zvO>w!<$UXR^NMIlE}zRT;Q0KsUl4Rr5+ALwAtzyGGaim59qalfA}t!t-&#ZKIau;! zXQJ^Xq@!LC(KlG~s*gAuYs$~|dim-K+VS2I<%@F3-B{i~cg`8<VmTk}I4AP?Ec7?` z9k1K3eFoPBi)IRZkRS4Nj%bqQ`<Yrqt?)$>#aTB?2ecjR`!TeB%UMqrxPb!BjI!#M z(Z8&>!m<SpnUIc!kCiQ;xj_Ag%oYQWS0!Tm`6Uxs8|-uUUMJvYD49yqy(0wVa>2Pe zDc6mag?=EQ^EEJB4NFGPp`y|D+v(spFBo9zMVxuORN9n?e(0iERuZ_%`tK+}&vfH} z@yufdc8UB0SGMT`*OM`Av2B=R2uS$B55TN5fX&)(^sXbWJf_zpE(Z@&rh53Vfe(TE z7#uY0HyvOB%#JTWNg~v5D}KM;!kuTaOknq4!B%{|@ja?(r8?V^ZB*jOc!SW82PzuR zzskL|`lJpd`nQP@7V(@<hsw!NMfNl6_Z~AM-{+eO4(bPyHv9U3Q#gvN&K|S&RH~Z* ztO8+O-slrcZCB?+x2R_}W~+R+?DDJ0Ip>YeJ;o?S%cKO34vh@;M-q}wz!hHeBa|b% zcLPh4#veWv&52naQaY!jG9!5RIN3y_tA=O1U(dtpAI#Ho^gZY{UQ5J<Lfde}xj4Af zHWodY1bM<ugOG%Ly08&7Z6{jVnZ1-TewxHK$~T#Fm@>0yayCQ8jew={c(61%^R%AM zVic;?VDyg90C$OC9LDv~FA%5{K!uZ+0p^QKk7b0I2H29<H<LPc)&^ymnZG$8#J~I! zSF8Q(=eBNbyW2hjK<gWR^0SeqAmKFTIY}aLt28xwDcMYsWziXy$LO%69crfgS04T{ zIPGIh)l)df9n_Y7@~xW}D0KE-czG@e^sv#6LG8cVuR%>Z)7=P=c0{QBHqEu)-{}04 zQcjfR==`O&(Q+QsDl@8a2zqT=bEsY@CC?_tf(S@u<7R3c2V_!Pf%bZr3Z}mZ#miD) z*J0HZ4i#m+*q#C3?}DG1-ele6+~x(8QQLF^VYFD)o9o~M_=BFXtKh)(8n0x5&av$~ zZ!7xu`bfJHt71q6_#y6WViK3IR18Rh5&C4$TL0F0#yG4L5|Y(`Sq<x!DP>oAtN2Iu zM{7d4tm8P=<p<yFs8{y>vhVUBp<pY!MQ)n7e338Yv`v%YE~Mg(K`-+PKYV`Dn8Zkr z64hAbz7Ewti=KE1dAQMCI264it{UZVS&LnDRI%B2eQ)Y(@~^2#mtoF3C*JQZs%zbY zUsD70^ev$O9Eto0@0;45w;2V(_l#B$*Vo*}lo<`0SO%sNDy)>LJ6fq-Q5*;IJiM3j z>^m9n5{z(H-7q%dc1wc5d>=;37Pza)ci%byhJc-?h!98U;cgNo^`_W(gnkZ_{`iQm zeQ3In0x9DW#lv`V9W1Jw=b2#h?dlzq>xawHNJr08t}M;(5|N)ohqWk#EnGFPsyhNG zE6%;POsl-YloM%&>xB({&GvF$$)#@(y_^qVaWJ7fi~#FD$z%1i0gg;b5}yN!ye`~U z$h=N4gJu<C`^FhPr>-MXst$B3G$O{?0Y88ou8Rq+x;^fhTtBPwZ&K_mU3_4M!DOJf zkvvP^umG{nI>4Uj%nz4!i{}C=ao#kJ90ivHwV@Nf=xN1>+dZ&%&rjvg>u+=$;ID{t zPg+;*y`^)jAB7o(TvCBqk6Bbjjf3T|@CQg?z2yapfQ@+fZA)e?+QEEYfi%fA!rZKH zNNTj`tn=uDRBQd|;FTcS;j%{bbu(+{@9BwW!uInY+P`bJq|%J2U#2Budvbo(tjEO? zZbT`iCrW+FURJXuh}(m{m3`}jJt+6b`-Qq9NXn}{`2P2?6Bg8*IOr{PBZrReTe_ma z^+#<!YFL406>I+-nLe{UFv2DEE7*k}wMJ|UBagy`p!+&+GouwOU2Art6}k296tY}) zgEo73?*3hZ_c(_*1_ly<dD*I;v^Qu|pE*<s-E+kaw*z7wdcbboC{Lg<zVOv9eXE`6 zPjI3lBp$=2Vc<x5hlD_3a4}Cy6QyjoO}G!{w6+_k(hNhap>6158#haX1-mXHvV4vd z18(+tphoebU?QKr_C`McE7W<ZWYhxRntJv~p->p+t4<gsA%U`Tm>g}MHL8xqLyXdM zLxpdkrMP!(Ful-_gXi8`y%k4Rzt2&)zJ)+8Fi(i(y}9cCYnJk>@}BUiOvTpbjhN=o z+s&I1TsurZ=&EK_RA1#HRKP#YDk*^&@;(F=lGnrPPIwA(JV09@W%~3R4BR?D2Qyp2 z&Hb{H=~{2PK(IjWm02__Y)`H83|-=f%F>bZnC}AhSa)BcVT9<pZ6n}RAEOAQ!01;? zf%@oyR`6L4W(o3zoh`?#J*9xA!w)(|_rSZ!X{YF~(^hlLG5Cv9+H+>JC`ru7xOnS~ zhEo+?^L+X<>BxR5DVdZs`_@;{V8=GQflcL0I#1nt%x3;s0zPHpo7cnKs9;PCrVV`o z^>HtLNb>BfH*v0x3~N}p$xLBSya<*r?t!VR$a1ceLmWv!+(E!jkr81hHu*=BG9$JF zDo1;X;BX(-mbs=|m*GAYnC(a%D`y_=gCylK-~Li;BUh%C!hb#x%VE+=8byf8vE#iy zqo-R*@TJaQ^pwIyWZLwIzRtnqcpjCOd>Xs8n=8TKv-t?X=)HNk&p~_uH6)8o5~=JH zSD5CZljZ?m2cd)ImGhL?ilh*I?0_R+QGyo6NMfRPZ-jHeqihG4MoUh%aTLxym{CC} zuW-}~x#yaKFR@SJc5n3G^x}f;-1!H(?z#B7*poWv1-MS9oEib_1&(D=lr))B7MRUQ zw;P(FEcsa@0+-v{;Sqd9T)va;oynF*fh$jt6(J>JETJ4>RMQDkD;km79Cev5&_E*c z#I8w51Gu!?zo4QOo*iljt5ukbV<Jz9T$GnQFmmsvJzl#nG0Wv4Zsq=#kCBsE=a%1^ zibxHyt=gd7{A4{WO18j;TqtFZ4P=3<JAwAm)i2m2#d?*>?eVd6Cu|dT{y0ZRnnF~H zj)$Y<6#}D>Tcfn_P4$_vKS%LJbs9zoq8^9Eql0C*hkJf{eX8fZc*kG4^7rFNpVgNK zE&jYRulqoxsHDW1+*4xt@|uJ_E%l5ZyZ#vaW!i;_bqYqXEO4%hSID4jyxi;%c<0L! zIsW>y7A>_D?k?E^)2VyBZuY$u_h&^#8y$(>b_bT+1A3?GQS1Cm8k<S1>_-x_Lz*BH zw=<?BdW{%m4Z532oQ`7Z-J~CWP0BUbVzO`C36$2{Pn7fj85c$hU*S_NzqVx)Bq)=M z_IsMR7ZV4}(2a8q4?sPN>HF*&w411Lwz#~(H(Le}U!6B}3%CBJ<td0*2x$0*I1Z&l z_uLmSdJSKrZ@ZE6xXSSOUr&c=9vGNG_0E@T_OV)?mv3=I2ySty=jS#_F|5gp>0lXL zufrgj5QW9F2eRYljqGNe1kIFsF)Gs=C*dR2{YJRFgYA`U;|<cEGXQxe)gFyD-=8T$ z-s10Cw=OvfjTy^2&d8y+PgmdbIbH{5<4y1aVJP`H1m#k3T^#6kM3^|QAKdBtCI{`- zt9{FcVUZKrhBq%l)A?z-<T+<fOY%PJDSXim=4lqrqHSd7|0s@VqJdQ`!&kr+^QmtU zioBSSK`kIbau1Bsmvi0)C;;NUZg{}(!j4~eDE&Z;vVA{|j>Y4*tqa|O>$p-N2L;g0 zi6oQ;91uM-7DyvJXdk!!^>^n^M+M?UGi`V=YbnJ&I9QD5OA2nM?Xi@l`>Rcn({6!U z-yyh2-qr7BO~oHPM-wGkw1wMG#tbcJ62{q8`JL>NT$1)D9(lTRWH$x}zQcjY4CGG_ z6_N=j!ID^c9+Xrbo5v=sFfzw);XRRrJ0%K`?X|sk&XeF;z?uIKrGxSTqfYbSwt3B9 z@Q01Sf*H0P1$s;lXitYC=z+mrO{lSB{2T6o2(+Q;<_@ErKMKaWso1Ga;d`@;EaB=@ zmiq*oNC5LhB+xX<Wlqx_d<U^>7#wJ6WJMy1UL8W?{MX^@RTI#OF;KP~sQxzX&MQkU z!{&VrifM{UYEyTkRzE39#5av5dn9R45|6OQ;JiXlx{i(4Po;6H^iWg)1hp?NFOx|4 zzKm<hO=f4qq-nR+qkmBA6z*syTwW##JUR2Zi-t$unCC{ZOJfofNe81qh50y&$7Ilr zGbh=2>ZXLwbpG8yd6h+;7YO*)HZ$_n(ynpM%VM+kEI#{+$2S_BVtQp7;<Bm@7nEp# zNN)L)-THycG6cv+pT5HErs~Hzqvn<eJs+XHw2;5L?>Tw*b|Ov7lXgLTSAwr)c#0~a z{3RHR;Tu)R=RIHmGtC%!k&+DwH~&n~q<FVut);Pq$W?zH<lEo6%lIHqss%`NL#DvO z^hG%@i+GuEI1JF7#Y_zk=%>y{7>vJLyu)qvziD#*_)a7aPQBt3eJcl-wYHwEyGX4a zM3e9;vMQPhq+>SS+~~V#3?G}-@EedLp>ntccr9((Ez?lp1)9dU4dup)o5@ZAe!L7D zF@c((Uo%4JUf^t9i;2K|*zaH#;eB#uD<>J0-~GLNN7BfWD2w(Vl8_a?2bbdQO4{5{ z{a1zGxlX<jqRgmk*fiIM&LMIj1Xg{hTsAWz@fua*pLj}ac^>kFe^5tku|^N<_RhLZ zq>>ZfiZ^?)^?mYVO8bhc#1w|3{mhd@0(dS#ht5E#^#2Zw){iOPQT)Lztmn9HZ-yh- z!=ruuP>>tmF)Jo-hHP)P-)&nGN>)3ml$BoGVG1ftAq-rMGxOXJ{K;CU+%mT8|4#G^ zQGHe<9%e0()E|!O>ytQxVKKYq=+_RjdcYYTl<7a?Bi6rwxz(DVWpLKWAYW!p08E<3 zBVvx%)BJ+WZ4x8t>o-?^<zf+vNstq1zP*%MQuqy9m6*kDfZ0hGbod0%;K}$Egsx}m z#elQ_4BdSL^tWfgEoQ+FP!7ka5;3))mVOM|Hg!U~jHQ;r%O}*B?!c7Ra)3!^A*{zx zD@Llo6azu>Bwg_$Jr^#}!bs2oP%X1`=7QXPxE`@yD6;;o6I^cEbTc7w?>p9Yc*tGr zI<Mb2u(g7IXLE2;?z6a>^|&Xtek8;>WA#R7KqS?`Kl?`o%@6sjROw7UDe$|}Q(bjB zCk?H&Hl&64Tthckky~|nZ_A}f+Q$YifaaIj5nG^S!0WyHpoSco%{Hy5vUQXGwxc3D z5%zxNWcsR1CCU8szP*hhTEgtr#O`rpf&bKG(%t92@(Ywidu@NqjK>!Z$kP$pMrRpA zn<CFM_SNHJ#D)>XuDnWgSw`8ln{WJ>$V`ju=<{Zh2C$`+$v&OZXAQEdOCa+O=c_R^ z2#x2z6vD4g7>fv(+z_3>p!UG}d^Z$5_x`b7H<?<u+jy|kU4Yy<C}FxoKhvFfgLQ8K z``Nl7kdDJ&wcau&VI1C~bG#rb(q~L@3;Utox-n7T1?HXHI4izcJ3w%@L{gwTM)I(2 z_;W+*+2u6E#742DsOhSO(a$o__7@j{OJiwjjry#Y+en!>NgNJ!GF!5C!jNWVrO5Om z-M`rr>0rh`r@^{&$9J_17`$`pK|4HZic}d?$}c#tR|ph(ea(eQ;Q<;lv&s9Y!Sy8@ z3w$c@vRq)ltpH`ACBy=|svS%PZ-Mmy75fVihUMek)G>^+-f=fs!ojN(HMywZhI5XG zhEfSGpp=rz8zw6L%}JMzslgJ^%AtiCvN|+-Y7p9qI!S#IlP2qr##}ciw?kg7<N3!) z8g_prKg=HukqW6b>Uqd9;mP5XdU{`z_VU)oR1EuO`$j6du)>)#3z-SNr;*P4onXee zBbjc6^j<uevNv9V)n|L-x@)QSvg$^}=Cl5|^y&TUADg@k?@|>>CA?<ov5UhJBW<yX zBp<y#a@`1tcqO)}`zt_s^}K1@?&N6Mv+*BNyO4X7Hl0*6&Nil{yG@NeV!CPg{N_># zEXI`1hO*Ss>}=AkWU_sUZ-|1hr~`UorV$F}QX#E$#FLEXLY?stE-M6shN##L1L0{b zbiRntx35MaMr|>S%T9Lq(<y}ZL2ZaXP^0jt0rS85%9sK=@V?)D3Q-%kziim$;B$n& zTi8}F&JAgfc+Zb5dJ+ewLel{0r_rjvvqw=^+}MPCWZFkLX&vmbguc77mi*vaF{<az z2Tv+n7vcJiMP$pgS=FKWT)DWlnrkKJdEXUwBnP!GYE{U=@sTIujO3S<J&b~sPrYOG zeD_(O8fh*Da=F`PywLXhgo%~B#r+h=2)CM;Hw!0x*`;9B*||Z#tBNU;%X4~RuW);d z#<5d@g4XjIP0mc$3p>GtNbmp%J$%g~Wy^LuponJNvLMhc2|+4nADeER=j=(vtwX!v zm`l<z#%LbL6*zpXXDlGZqWa9`H*cYY1)gBlR2r*Aj>`tGU>v(eQWk4WRxEgS?$hHa z-o$%4uaK(g)2gd^*<TGi3enLAAwz=h^7N;5FFC>LLzi0fVoO_bPsTba@Q8B7S{9Bo z?)MeR4W@;&@oZ*Dlzv>f?VAcz#9T^(OrpES8G6R8&u&~FK1%+FfnA;=1LdjFV8VDm zQ>xplir8gB!8m0&N@$LaGqzNNme+d^Z~o0Vbl*Ke+ITNvRgTswWC7&8SJunpZbZXI zgV?_PdN$wI555iIKEs*{QN^4F`rS$|ZDA}PF1aBsAb0JLDVE~@t`JLGd6~XaooJR? zDi0jj4D#XjjYE>3{pWl8P4vL^ToaB9=U+WJ9X=kG87{{M8vOAh6k}s+?{gc#0!4J? z+M+}mv5W<vdP;#lI=APXY6cCXqk|Va-mwT$Qzir-Kwk3DTVhb&MR3%G(P~o8CKqs& z>#K)=Old`a0f`Bid6?Ka$mw-UOCGpEmIAqRxDCGve_!&q+)Z86K8tm87rO1X&<OVX z^>(NPT?dF^j{<%~F~_W6VE231$wcllanavt1NY=K@M=i_hhh5NEev3U;%P7V!Uj-8 zmq4yB^DI1DfC}3y7cJzOu|lu06za4?k+yjgIfvF-h=DJHJLmADiAQO4C`w#!g25;T zIci@|ovrnfb?x=cn(xnNd!A8O&FkeHDo;Q`?_egA^^c&T2?K#~V})O6M5vJQt^SC- z<Pt-_ospfru`$!vEsCf2V1_h%)pz0!Xp*53&tW$0u9=(!zX(;#vbRN@_gj?Blf7)N zWfJqCgk&82;E=9-@NZfv^QP{rJs8Wwoi@k0fM4#O79M|g|G@yg#JZ6@gwLQ@=_%u9 zK5HqiGzo4Fjt06?L}|i~y&qT^d6AM;2bwrCrU~$EBq(BwpK7S(O9}DZRfOs>1#gr^ zFJ(`!-hp<&5U~8#w3;yHm#Q>i1WXpZ@{7CG5akOg#54i!*#a2%F<(0rzX`6Wz7GnG zKLOe@a$&2Gx29!VO79Wqh#>H%WWQxR!s<a7GxLp-aYD+3S4*B2H9RaY6b$bfvvnpU z@tU|Z=&SbS&v^B`R`Fy_<|^G9vz<5EJ!?5(SEp!!nU;^>oY)@q-;jJ`1v{s|GQi_9 zbew&Rz~{9E#jjal+>?wybTafxmOxG+;HqC%pHhe>pu`C`?*`j55ouGS(D;G*Gfx~$ zDE0jZWRC5LzgaGEOko)PsXWOjbWp#m#>3^ODCEFbHJRkpV=>mh-+Jz_hE4dTy<E=b zUfjhR+;F_-2*P)pmqjRY-tHm?>>?Y1a-an;+d&NYQ~A+Ybor0Wvme;<+>k0lI&r{@ zqa)AlUfhuC;7~?*7FeOC!5fEJLQ45}>jl*GBd2pUF7cJ~^^&{fUKa2#n-)ukgSG@S zZidAso+hs)&cJ?_$uszCzP%HBD#vu5G_9H6Y*(l^pV3nK=37*C*G74Pjz1<QEqg}I zmnc}N>0!>EvX9}VJBdnoy@O$e^J35U8s@Y=6ZJXg^d;g|6Fi}=pW%eO`tl!SXs@<T zLL0kE;cE@DT$JHP5nDlgyzW@sFDGSKnSby+)>WhqlyFZl;C|53{Ejwn&|LWH7fY-J z-wb1#hZcPhHMJi@8ZqtK4MfuXK$8-FM;LoB(HpkJ<!6810M*t6`frd~1p6VKQPeLa zG4{DT=T*dJp9Ys@d~$(LIpFuk<$r`aCA+6&W#z=cgQ-)_&Y({8H5A@oVyF5f7K&5j zsWJ1UR=e&ef_!j&8$jtZ^KoXc>OSpsh|}F@d4C#BffE4y)cwV@-^mGZ_(GW49OA4$ zrE$3l$=6!GUv0|+7-|&O2iZIjrIn3Zb|XjyXC`78$NSF(GA6T?0wGpg02<}+fXthu z?yjRXJU?zX4*swrWuA3bZ#4kIlJw}hyY9+M3x74gfok+Kp8$Ha4zE|WMDOF`x}(_1 zl2|~Srf|ld%}n6i0KqL^SaZv3Bn(^1k6?B}^?YIv8n-J5nBA3}W0447dYk|p0^ovt zVF5(d3|yE{qh8Qw72!$!j-sxMVPBG#F}9iff#h7GlJUe~6e;Kj?#=uO`wW@Vq7B@k z&dSJrx%DCe1p0+{ITm<hBi^txFz+r$;MY@}CLH8V8`faw_$R@F#NYFw@9pRIiO?jm zKa;~4PHN&EzW3FeG6L8{!TL6<O+@{j&r4jdJgr}LmXi^Qb^o%E_P%E?Yq7!~#PCft z@IM3y;|hM~DKZ1ThB>VGQG{;$fY@aEJh&n3xq-;Z5lC&>3C?FN;`Sa!8JhB5xjm6K z7-o+q+882x*{iX)Mz&Ox1p73+25uw)xdA$FVz}sUWzyY;UXYn?taDl^Vy3~43iRG* zb~u}NvJo4#lifSz2>m&}MPS!*yolQqgf|93Jam52bw!m4_O3O$q>mD8LvGq@GC5a) z{gKB2SvObDkwPE0<@0l9jRM~+oFs9czd?n$N;Z$G^g^Yg+x^0e0-w@KB%140eb7JW z{_%n5mAH=&ZO^U({E5bV6?yfM>XrtoHYYsqLpaP}8#L%}4yre`<1tbLJ~|iQ@sWA8 z-Wb7MWoTy&x%@}GI1LVQVZg`zIv53-i>5r)Xnq9VSfe*m|2C!9S$F|aNKtT2103() zKgvbU3SFm3?IUq$Pr_*0=0N^Noxs2~?~Ump2y<~CteJ~Eb}6}2*~i_#JWcSs1&@JT z>se~l?$>@2Dm|_Pr}Xp8Gp?Vqx(u)939L^rU#wud@?7b0W?yY5GON3e{3a{k2MJ&f zP2eEDwO1n6-|EA@`c1EcM2pZ2#SD%|_zCp4vhug8TkWrQ1Gi&#ML$;mWaRO#m>#@w z?-YQ&FC9HPUUQg|>k9@ihYqjY$HHdx)|1+nKYwhyOGZZJ*Ev!o;29df{xqL9B=fm@ zklhJi*(QFwJ<|FAqqk0u<-bN(`vu*DLh&w<?Gf}-h@!Y?$p>dG>Fb{2fqonQlQ4x1 z=55bb0#H15jV=^90us9U6PMExTN6&_zA?#`;}AYbMpg;|Z&XLq?cT7dD~Wn9Do038 zm1$&Iq_r-9ZvEmFLH;tIjzAt$Z!K$N{tqFNjvru+`Do%j%dvygxcHUWd&b^IJ)AhF zD8qq4h%woi^+9?H48l~Y&c-qJ!^&C#>ZRHD5{2&`-_O&Yuj#H)`^fI`#KS<FINMQJ z?nA~7K|nI1ub=2>fus98J5xbiy?#n-A$J?f=Cs=_{P=Q&ri}EU_6e4g9No7>g5A-k ztByP{%ey~me|RU3woQ{#Z<4tWi|*gpKpe8o^29E1Z`79FN8&T81YBt#)xN1hge=m~ zp?I@kmCM!iW@A6k3ZA!Iz+fpR2;9gndIYqJ(d2DHJ8j}_A)`~^sUxs|+5mt;J80`a z`5q@tM-YTB6-4HtZmV(g{Gpf{722Xg(qWW1b)APAvvAb~hpBdcCF1^7zU>~557^hC zA#hSJgMqw*nxJRMsV_+C-Ya&Q&N|Ut)t7FnR})GEMs|*`{|YSIP^Dx|week-(lxHW zalWc^6Qa+1!9Nlklw&gVdq^cSus*xp;@+m^hk*7W>?BgxuC2h4l{$==cg^8|C#xt& z@_3~5KU9Dx&hiYDp+;0;@sDtZTbf7vnXQW0Cyrf)f4$gf5~TDi@((QgA7p)XRMT(! zzn~H#Eh555C8Q*zVITq`CDM&_ch^7=L|QthfON;`Mj8f4H;mC81IA##eV*TW&R0Lr zIXh?n?CiX^bKS4F?(2TtjR}XQXETsb#E3r7v_je1-Q~hA2?X9H*z~L*Cqu{@HN2lI z28qwQQNtahyt(Y9H21S;I}S5+W0W&M$#LDN(6%7jX#d#>!L&2mJZ?X>j&rb@Af$`G zd1L)p%6Z<IBF3HrLY*f=*v+3~5F&*B4ZCae`YZ0!lg>GET@MU3bhpUUV$Vyh6FeL$ z)_he>$?r21v_ze9cxRRupKZQ`QFhpudJwpIUA%YtOjPqy67SsyiQT5KWU92s@xwJ; zrz{>RhhdrVS6cSx5u3SDK<HpF-D_e!C%KwbfzhxbAel!x!?Qw`icwOduV<MBhImch zw9D7|Xv11t4wW0G7?9ycAMP^Ts8`B;rU%#?2>aBmg?wSz7OoM!v;^7*7%YRVEg#!6 z$I#ALvIL!!!+@yj{dWNBuSJ9|w&-v+AOeK3H4O@V7xc^XXU>R2%m=7JlbBG=gUc$3 zUIYAP4pka-ZMJt`U$W!3z^HYG#NyJ)fQpb@O9d)aitD3Q6sly{lz#;?S~@wiD)iCa z8=nE_d1(fBFrm0v>ahIqO4VP4XmcRu=jRFakBbd~jsC4)g_7zTA1rB$RD_b_P8;wv z#*V6fJ$Ryjd1CMw4tApq?ik1cP;F&s^M4wi@D2%%4-aZac}2A{zualLrMi9i-z<QS z0e*OA4{uc`RR4`A<<fx!LIISUckiH<HU!-@4PW=<(R>qW%Ndgyp|pcx$D?Rmg1(gY zsX-ktNS0=pp!WqKc*iQYy)krLFk+F0FU)l4zK_7$zWm51EqzS!wzvatdx2M5pGmqv zd#jFzpq_&?&<_57TiN0#8JH1_PRs{2*|4x_L^=)>MZZk)dbq$%JMjR{$g`^P^_c}J zooST!#kovzDnrPxN-vQ4aI)Rx51q4lBarnih4<ac7a#7+LcUmOD%cvbNDA=PO4+HE zt6!=8=!ccC0#51ffwfBCkyXWt-QxH0sl5L3dxJ8rrsnQ=++^t>syNSV*=WNUS~8xa zLJ}eovlV<Y+iD6#kB|Rq!#7F;qGG7Oar>c-)#wfllzjWyM{)hajE7M%B{wmM?l!4! zwEmKm%p+zjH*~iOD*ku%8ajXxY>UKS)cSpDuK>5gQ<rlWMxP;`{OC{;W%MBWE6@vL zWb9@ygl;bf9q%KhCCvEkvmFpIj>&vn9lo7le!6pI!XlW`Q^GnGcSHNq%3y=JRq98P z@`W=?_1i&Yz2ps+izK}`f{Zo^P54IZF=MGnUbt|DSvk%<5To|K1xr3rlK6KPYU{7^ z8wyciw~D=voEesbCmF|E{W1_CZ?TR?)cZ{eDq;i2o$bYRP}*42BX47A;~1$Z@r4m! z7Ayz$FE6vQ{7I6l#_w3*27z$2=Nhjs(0WMPecz-LB`U&;+K|Q3%VoQ8^o8T+7J|c# zPi_~>MFue9DjWtD!<wyODXyuMrfN0iL-di4#(--CtJdRUXyBDC7vNh4YO3|$c{9!H zKm<(C`MMnT$nOg^S_G3Z;ES3>jc+cWUu|;7)s^)4k1br5Z12ORxF1bmOF#t72?$Hi zOkEHVDhBe}1+@}A&f8#x+Ytghb4&_){Zj_+0GUVC8$bsllblxWmtpO}XTToXkv$re z!<zcF>@NKCrF7_IJ_j>@Wl4%l(TdvuExU0o?;J`cu8cqXt+Bu0Hv6_T0in+DSMf{Q z1+AyAKOipUeAUIE=o#~J8#^AA-$d8R8Tj&(#jcS1q&D-NcSQRvWO&#=SN_5nXC;#+ zU@>S(8X?xY8N1okHJ^AVtby}t=`!rd(p-ppkNw;HZSMv9I2|R5_~jxfReT$Gd)gB3 zwF{aDIn5%q2+FQ{E3s$xj+d{w``vFX{nXJB=y@o}cng;OM0k9OLP{Iil+nSDeRYW| z*dr35P5_Dq3YuQ}GwAK)t5t;=e6b=Q)#@Mix;8M4HtftGQvMnrIpfbG>sUe06HVyF zTd3H(J-R5wQ6|0Q_+n9hX{Gk;`InZEr<bp`gf1UOqMT0YUG!|_n^oShO&L^(ct25J zSUi$F_5m=kNZ4PEGOtA{;HVs|bX)fRD`~d94Ic|#rWw`{$n;DlBZA*(;dp+I(uQ4C zkv6rDQ7-Ld=EU(NE<aL?p)nW67f>%5rS#ThfQ{hli}IeVfWR6M*}cWm4YDJX6Et7X zX}h5NcGU;68>`zQ$Bn5;7i!Jst1HLss8RvNZy}o?Fi6Jbb_mr)fH(UTCS`V-)3+>F z`ej3NEnX9^ZReNIvJO@8HWe=-xW(g@r+?TAY4}Cw<0nTfx>y4b^sPBhcY2%pM89ZL z04wHFuCj#HdnAtXDIZA;a6RWrr04$OJM96ODNAk)S2%gbDg`+l1tRg}cPS~}A-1op z>j=Fc>74gO+yTC!v8gSBQb4QI2930^b@nRlCf>o<f}Gkf60?spUn^pfVyzu330Rf# zB!T8^#<SAPgUx<M-&EW$P#jl-Kd&3QI5XmPde028R|Tnuy7#HR#bD3waUpM?(C+W# zIoFh%+S$k1h@&LB*)ht9aJ6vVfJ3mrIGw{w5|S<;8>D)rDL&vDo-n~?oa|Y+3cR^^ z%y4xJcvG?82lW3A?K`~5#|()49NABzJAt>oq&}jwsF6m*mSWC$t!3Faj9Wyrd-N;J z4TlqNC}JaL7>q~~m3DS;6poVVR<WL}a5s*wBh!1`_mxJP<Cp1f-K&=!?$V>Tj6(ul zZu~IUmizv~o{R+iTIm;R6r7QMDxSbL*c;9#JBtg#Tt`cza1(Nh-~N3qIu`iCR1$um zUkKAbM<z?LD=9sCRgW@#A6zTISWXA^HZwu|PZwonIpj`T=GD#q@-%XI_;4fENdL>X zGJ?6r(R<Wp<OR^r%;vX?r9K0@p5oIxwJ%bu{M!ZAad<vL!VLG`LtkMr>@!3GCGO2p zpu4vzc^V5NI8LfTm=~9XC3<ZBTBQkbJC<MapDlVM>N<Y|Ou0YHQKZzZe;jLPI?#K~ zAHjWf3<8CZPU_#!$IZ#!29(_&KUJOgkW{Qbtme()PDPJiH21!+>X&|)_AC)RcOZRw zn1YT4(VdpJT2DN_&vp!jym9e$FF%RRW4=F0w4qYYuPLgnuZ=2kOX#7)Qncn19{9>s zbcl7f>PJuMdYfp34+D$Lu3h))H7Vc5K~coBJHpF0<2jrspH;4*7vJ_~+e`-d&^e%~ zwu+DQ_<O&Z$;-!OXi=B9-jw()$X>za=`){mM~;0Xv!a{o#+Fu0=iS{^%I4%({*lp* zG-}`?9KF*v8A>!Wd|TLcxPWc}?JOMe)*Q!(?`$3J0oTiqJ95ly5_thnP~R)Cx$ER5 zzI2eH;&6e{xRAorK_2U1Y>!z>8Zp1fXD}XCZ}jcxFfN{bn^;vqK!VBbz!I2pLm)=^ zr(-w>qE@}FAP@^<BS78MK>5BpbbSt8@g$=0dacCVo#B>6_{x}n%=+bfO_PTrF_ckM zH}$4#6ZGGsd-<PuEs5$Pmw<0EvmEo&;9P^z|B1v0kz%6`Ho89R1o&RR)@n-*FDxc# zJFmNPA!VU*+o|)s35XFB@hjM5<bt?LMe7HI#cwdir;tz?iM@!)yrl0z>&vE*P@#^c zfVVJi2$Q4CjTG0dbZ9RSVsiZ$y|uUtmZ(LGV6sZ$RK;)K(6XIfU0hv-v5|dBOeU#< z_cW#Gvyu+y>G}^X;P&TH-y>$+za2;Y^f6TK^SeOgB|_8ETkhk$+pze`@qBQpzQiN6 z-INw~KdhYb?QGKPlBnM&^iux$^aS!lg@%MLFYayk+vwSaJUqYDTI#O3`2h9AWF2zz z)Fo03GK<5(9w`qeQJgS@g3d7fIrNfo)By$Sxovsc*aPmj)bI-EL7&|O8<4N|RGS^e z5ILiA2!s{DisJ(;``;IlI8!!`$C_tGs~T_G@Kxfn-<I5J6nZ$**nBRJ#`5UBpzC@0 zk#5HlbuDg1iGsP_+>&m$UIO=l_IYTXk7C!{`UIFxn?vuBqn%lBRvuap{TYbZ#=Tre zmBWHT4xjK+v7z=@%a?MLib=P&94{>jE>gZJEtk<EjgxK%zn;Hz_>kr?m?Yy~GTXXg z*B(pluDNzmnsWUr|Iq%}87;h^c8Q)9CB8HGt!io74LY>ZN2dPiUcZ!Tzcr;FPVBR> zz(DMGNe@-Vv%fvZWB&9l>nmR8-LAXG_+-Dru(V^pV@FhQG*xquLtxkF)*^I+yW{e~ zcGh<4wqaYEaDGuMa;LZmE$k0%Yt^fZerkOGB&0@dM$#p_+HBf1*|Ey$wbqXId<5`= zM8;*BvS$5Q!__5|>?4JB4VESSeyHeWeuM<mNs&r=eMkNFT8yTk(n7*l{KPxcz$KD( zHqy8E$b#O`|M%_EF+@_ah+oHeO~%+ob_>oUl|Vy<N)5)RX-<>e!#BWldo3s=oMGT@ z0F8fp7AvfBy%ooz9W6cQ?|khLlM)<Q{cYt|t&KZBve`Z^U#U(yjTd)U$+nFS-7!}u zz7|}&90Qy$HxhVu%YKM%M$3YMR~L1N&E)|oodo;&Y_p!8a9?k>|MQx{>V?idG)I25 zg!iC>u)t=G7QdeLo=F6Lso#dHizc-Q%y?>=u`<6}tYAEx7}C)%NIp+y)%2i6(n$c} zStecpF0pHne3wNv`MZp!Yx7VU@rnqn;{ML&)yEpTYtCKQhB98+yiFCmCWib12u}De zx1Qha=~h~1DU=&BSiwY9&anS$(@|(~GIVZ<!SY!f=Gwz)C>>3nc7>^XG6Z#G$-@Kk zz5Ibfo!-=aKgRy0XiF!`RgAYKhCp?c->1z%IKPFN^@4v5Sa7M_pnku~j<hU7MlMGn zENkw|+uyZx_P?DhRXsxyqPE6Z12cO+O$5}6+#)l|rY+AhGEgY<J(^X?DK9IqCMF%{ zXSNv3ve{J1yJz?1((Tq&jFKi5-$tu{S-<vmXAlpm70^S7b?rHlQhO|5S9(7`vv1h4 zfV~B;4+$*xr9)X-X`OptF}Ga!%TtZW9c^l#J`dS)*lcen_Qq4UtH({S4Pt1i_cI8l zwyrZo+Atx44qljkdnuIMBw*9OH53+%OS2rio%bbbJ$d325<1*P7l2xj62t<%MDa7V zuD)-*Rm}NjSmJWJ<`+#&G5Z=!xV(GQ7l!NTS-QLv=@VD@e+BlRa$7lx2xR$vWTWyf zmFC+feSIW9O-4Vx{+zo!6AN&=y_6_Iq|gmuV)vn!$o6E*BzQ)Dx$=DLuKo950Ji%= z>-E>jlYYb)6NzhmX{%%30`S7!fk;lV6xP~E46$C6*Xto@aJRQDMOgO=RNr(jUnnkt z&Z`;Gw>y^Kfodq7$}A}OzOdc~T%SGp*t53DzUjs0eu-wp083Q_=9*z)%uOH78BVIv zlU3>BPUlnwHUxvG=J|eKDv=&kmSBl6c<{$x$3zmoaVzVS<zs`<F!dtn4&sVZ*?3mU zQwLm&tcj5cozTtby?W7w+{-c8S<y+;0#1%yq9Vof;3;sVY2B>>>(84sXT=Y_U^K^v zvrX<|9nXipEt+}>gHC=UYjP$~*rj4pW+l|f>4BW(xs)n&zqhsjDOdDqV=v$Sv~BR+ z6wd@_B@>RPcRN6Xm1%m}w`re$`&8XD4C(@C+N$y^p>-M?3i>4Xk37MiA#Do0+mnb% zW`C=FSMQ@_)e!_at|RE|ilC<k>cJUl?UkA{?f_~B&XxOhz%FLO^J^V(tL?{Vp}><f z@RMtrkMVCEv&<eE&NfR6&VED0tP(`%>{9|RgGv20S9I6xEM5r-ees^C#FH)yfB37V zJPv261L!33`?h3H=DM-2a}K_$ey9+1N5oxHnaokhIESiWIn?cwb<e^~O_he3pXBxj z!jEs83V(!9=bBGFQQQ-^f3@997t`wA#U)5WnMoZDbXlZ8GPQe0e(bYze>vUaG>1z8 z(yla8z0v%V?pY_`Xc-ZGA8`Ef1(jf;<LH#1Y`7$2EZ#Hh|Gu@u$*}6V$*q~)vu1cc zvP|H6xL;278@Qw1_h!tVYkSMKq%?c_&9M)R(lJL7%I`4db6LBkZjtI8cw8JTQpb<_ zUn69w`xYH{Kg0<1UHE13^A5ZfRY}i{^QD2vQ|_N_e3r`{JHA|yUDoOW&bFQ-5tT{- zr3f}CVt4I(H}J3xbv?fT1xK_UYxuXH^1hPrtnE}Q2FJ`lm#fit7CrY4JN2}-<}zzq z_e$~<lvqBNfDVv`k$dS7wJsJh5odkfT(8;q<%C2fb=5l1jkQ{Jhf{+4>r)b^HkUa@ z77$kvM!3GseKCoBt6m$Yx{xFMF|gC4cXXJWTim_@X7jWBq&S#MMvjnI<wU1E#gew; zw)?#gH0ArskyjB)H>U2~lisV#D+LLrsfb;#oi$lxCxprHC*UUC%IF2AQ|0qh0tV8( zLKQ+8=b|{75{yxij%O%U1FDB%uJc8~mR3S(VViWN6PuAw!=1Z#oQ1WEo5c^kX_b9% zd6;|3NiNGzP^Ra+FmpH$tT(ALeBhzJJ^kq^rLgICdE2SJ(YUdVW#v4v|7<?T%Orz2 zIgl05Y$fMf_eS`j9yV|Qi-`#q*&&>CH`>nCsO<B(?KsW!C6z-Qp(uKaNZnxs@eYxR zY&_Y63I)@)PomI~I32QNRloK%f8=D}E51*uRMVCw;$nB9Y}LxSqL3<$?>9ODj8e5n z*iISgw9Gyua>=K*Qxzm!7FnINxX(vqE%9hp8@Tf}8T`6i(8WcPe2rKV^aj-->J+a^ z+(h*!XZ{0egQD0+hRlvas`w+m3p{L(rY#t8K%t_(uc$;6r||kJrIyHTM1%XA$}($b zs%g#p`k4-Q8M;>eRzFiF4c4Hy9F&+<M9*tn#`{@5R|mI_$|3iCq(R-gi=n+g@*Xj> zbdo_Tf6)0`pJG8DRj2^*57@1HnryD^6?+npwO8SYE{9(pR&B!g6Pb9@*St<|=73W$ zC<0~(C_|66qRG%`k4tn%lp_t8bCq>u7j)Hn>(bM6nlBN!=G|{e$l&p0G(KDm9o>Ig z-iBUlFt~AM&jRfn9-)3~Yx>?E0G;R|i4B+Y$q5l$V+^+yun_WrZLRv(!rQs=CK-OD z9WR_S=7NHdchCi>yt1;5St7xdn8|4hCYmLpRlDU=drxwk4o^UG{3y<Aw|ZC+o)ROu zC+tB*{h3fO@#DR!Usy^`0clJPHZ``@U+wFt+G1msQBrSuWft7XNeTw)7#GC+l6x-H zD_5J=BajyF>OL$a9E+zXjpb0L5ADiEC=Hm0B4;e*fyY;ypa#^IFp%Wjib?uE06;CZ z68T$Y@r%z6^MAph_Yu}5_kxd;Q;{Ikl7SZ6n3P+}9?w-ZpU=vA)v5^Q$ahNnvuFz0 zd(+N)_|JHF=YIevW~(h#8ZOtw;Wk=ry24lMYM}uy0Y_Oe6a9an47!ChkhooX$a;nD zD8jLy^rqpoO;=gyR8cq^%F*Ou3lDIW?0t8#k(=LoI#D`bHj#KyQV^}N%}BqBM>%22 z{v9UcBNq`fI^srm&~tESc3VkC*CQN&tT9gq%m+0aHW^-t=|G9r&*yZ0<ad}*BX`nq zqx(s_6C=tU<=t39?1VK5DjL6kGou+xOqh!3g7VIke=$E#ewEMXVG=G5Jbs^+{_6k# zE&s(uNk%7cS$byOwHBU!GF;}vn%<}(pQO}ya&r9``79QH!_~-Wtyeh;-j2}bd71@* zN{ZsFU(=3WUDQP91=OyAQ(OXk|A(@YjK*A8WJmWw4gSCQMp!K~1AH+3FTYm(?>9B& zUhv}X#{d*|Ac#XVs^(;mkTaXqxXQkt%r_%G4D{u9#YyVLAj1jvf_+$X&j;KYA6gwk z)*isf)G*bzdEu10X56aRM)Tl}wAzw#*b>5>)3sTXO4MfNfMl2PROv3RU|>Hx^?a}F z>H^7r&z<_l48z^;V_G>sxOo-6a2nNntFsX4quzz_iSnN${J{+W@PvK<X`o<NF@Eko z>iml{kt=<E#$8KZ-c#p6``{-I`y#nxAIbW7W^sH&5z1C)*08k*?x`edS9scVvt}kq zzijBA0!QG}oo4JTEXsyi_tx?Zp*C$U(q8)VPmOo9<sVnCg~>!qC~qLMgmjA+o*@Q9 z1?A=TEEcf#?P&zY8>FYiA1OaF+?ZpW{H!4KuA}3MHA<0Pw42Bz-FQAlOuPMu*tWXI zlJduS`sKlrX~MB0*s+L+iC!ydQf(#<uz^X%eF^H5(PwL4ERvN&N`ccq8P!$#rg2Hq zUfMl~ELU{T?Yze~rQy%V#X#ALOIRSFEjl%KRy8v6ZtH$O^_>bJBZ`U&%aX@^RHlcN zCR1LHz{zR7dyCvIxUo!b2tu7~=wn?H(7I7uM&Z8DX2F&7=XVN(1U7VE7+o})mm@we zU1TblMi|b#b9w^Vx6jCHRgCk`TYY^55KjN)|EcNAAxTng@F)L7hM6RmD8mKzjKYrj z7j+RoV)v?c>6YI7#GIlO8rIdIVc*UiGQH3F+bGZ~sH22bcEYWZ453}B_!4Vlzd*qU z_QD%7v0|Y!+F{5^I<Zj&S<)US4bk>a`h6NDYrw{NQsTqhI-!#wepVb+d#z91@A{WO zkYud5A^8%n**msRZ}H5%11Ca2mYX@mwdo;lRc4>Zi}_Wt?YDW#M{biH&Pq?4x;@0g zK4u~tldZ~oij81Te?*A=wXnh>?qp!!ItLdUC>4Ld=yUvX_}&O|s-oW8#Ja-XeWiO9 zH}K1#pf`EFf(#YakxW!49i|78rordRUy=jhD8L5f7RKNFAP<)o`{?^pWVq+WXQhYj zL>@0iWtHc`PU}AvI&|vtB}9iUA-v@G`9>_=>Q(8BJ)Ry;Jg`dY?xls==<6)rsbLk* zg!ROc+!QcT3E~B%_%K8D@0gwEMHq$|X8jL^v11>(U7oj3zj~i<N*Xr6T1Uj|^-4sd zy=TNce|6u<Ry0PwHy5*WOk+x}w{DFa&<aA|daZtUuSjS3uYLT73Wp_EN`6CG6|NDl z9I}m^IzFE{2z%jjKh-A_42o}8brSdnrbs6J7`{j`YW~p;<E~|6h{kXZ1_?ihKUj^; zWK1WqF9?_N=5###&L8)_%P>exl@|i<F-tv_j&F=zmG|fnS?lLi?{qF9pu4AW^Yo+1 z$q=C`yjeZAov>@TyJN=!kBi4w{8U!K;k#G$&qiGDq+_3w98lr6e=T}DxqB<!L>}1j z7ubZ!T`{XGL@j)2J|0|5y~0sLBL106IQmNn)2e)td*dYm5*QVt{|fe3kpqI_J@%&r zXqF4PB!$^G&s{qELZGAb=b8?$VNTT8tuh%CM`@&@U$b-kI_DoGGc8$Jxd#(KkS(d2 z&8o#PBvTe!zDu%>T$q;Y>!u*c)#qx?ylD}u7iqh4{68AsJ!WxJ*8(y8)HlPkwJZD~ z;zuCmeHkTVsARFZxtYy4Vy<gG7!?q46!fIdURYb4a8-6>iR*ur2{pEdKv(f_sWT0E zpGuh%L^>5?$?1cEz0VXg78;M7$2~-H!X9SX;|f|6+5HG3^45F@_B&y_o9~%U#qwXu z#Lz_r6<)h=nbVwghx`!G3!2d<ml9Te&*)=nwc8lO44u40#wdgM<9t#U+mWer&upT~ zZ9a+ToDpt=XG$f@KKa5=o{$-=zUX%^K#W+9)A*6M>oM%UO(P|KH_kxQEdiOUjgA<J zYX6l5rku5Zla#cx6WORja7EwQ7&N;1rBr0yE>EGBnsJ7)slMD@RHK*A8xXtv@c(G+ zKQ!D9C&a4f!U|9fyohEtnv{=>>=H>3RRV~{?Tg7yN89g`>Ot*ioTCV_J;t2<&DLXp zt0C*Kz_>pOI2sR|g|@DVV@u(1h5PdUFL@Jp*K3W(9M*-$U{<xpO}<rEF-Gy-C}roA zB0AE%M^O)$2@><Ob_L3<++%HWTae#>U%=jv&-@&g6)MIzhHHz{*y#wvr<|WsmT^|s zojkm|gFBg)!*050?ZT*OaAB_RhE3_C$<6o-x4}G-e_0}gNyo8}|Jb~k&>?n|DzqTv zEbjRAYr6^n?sX%_JFx%HUBmI3gg>76KMT3ukNyrf^F3ms5j{#<`Y<D=i)Y19EiQw8 ze)3nYE+!|HQ3k;U++C}R?T@3)MRVg+iG{Hm=9&B#4i=?#SpV(=DZRd9=-PSAVl^Mt zup;3^QvV(<ZP+bx!a2^-{MiMSE~H7h0!*I(pQm>O%fF}ll*ATO@S!H{3yMCrgiSld zX!07M#!oex&J3Q=Ginuxmad;GxvJffMdz{3Y>WLYAYXmFK~^g9V6U9Q&2bBP@C1<v zvtU?ZHPp9SPfY(ws)ISky=&;g$C0BoAEDs>%WdYvxr{J4>JG#!0$u{y{+^DzON{)V zO5gt!m^tJ@(zJYJ!ED$k594Q!lIV!%J#|c0>oJS;Q|zOkCGUuT6;ZkB5i7heu(09W zOV?JUG(RBpCwxiEtUSA!`+DaBkM?)#qnOV{b3RP<@~1p&RS$2;U(F?N*)dF=$Z@5u zXqq0(Z@iUx{!Phq#kACKE8|2+6mw$dq|~NBS7Kt`ID1@9<AL;Km3?%1XxY4FWNNa{ zS^nW@%Io2W_KFFU9_t~|NSG`u?8#AT!7j%W&VDI7m)+9V*-ycNgpl7eY?gcq>sOTA zRO-UT-zh06YjEA3_x>n-upa!j`l8zIbi5P5pF8G~WBzvo@9jM<ZoGC!=S$?v<zMo4 zn=WmyXW=)Og|@=Y3j*?Lp`4<brMB}P`Z>1BDnnUN55@RA+K0;+x5}6K2Ryc~GTxaE zJSEwEq~~nRcXGlcyKr*(1iwQe!Q%LZb^XBDG0k|u{@t4bc_ctMb0Xd;N>_4WAm{KA z#P9OG^lV}=KnoyG%nkQoF=F0IoQ6o?(EHl~ob6iry-Jp}KLQraL<`=Ny)QAXAkpV? zAu)*DrVghspZgk25~4F=c0+gVO~?NIu4#ge)?4}VDbpCrjOm2cl01oS;lD^0v-+L9 zr2_jOEi`yO<r6pwkq;|pF~Y>7nmwgbHrbo`Vb@d!^`LR+jTfD(aGhh%8?IZVyTJ0@ zO?mnTeEO#dZ2v)Te5(csHK85e4v%rdTLW$g?@=oGggq|T)ufvE-r^lTm26WX%o{hG zkFUxI2w_u(ZBP1qisG3sW}^*l#x-BZbI8<>ShJSwN||WwZPe7NS6_rb-8rkGI43rF zGD1z+*mPN<-Gkpkqi1a;Q~kw0@~ucBYcWLyJcPq1I~}+3j*)hOAn`LHO$k#4LETBc zv93pd3hRIHZT@M{$Eu&IGi*bFD?KzGL`>DeGw|*NHR3YNtr?;@oOOT<=$6J(i{!Z! zU8;R-4^HL&XP3W-Ug#5EyZER0zBat_ZQ=0WM~O$&p+>41g~xQLu$J=kqb4faVH;Wd z)nS_Za8AaohXu+5m885Bh`fS`W?-zn=2m9g7;cc*j=`DLWF9gAv8}<b_^AHp25lCr zfzgz*YabhyOXEU_D1B=q7V9bwmUg_Q>=ekCR50mIO2>AIkKL;3MN|@>UNP9R)`V&O z#o!<A=|5PmZ%BfdCB~DoWUVMHcVzeL$odmtEP9^<!nQ+yYO{H%kxf8h8uL;IYR^}h zGZdCNrOKxACkfDC-CJQu^o@jEKX+WJ>Z9DYNfxSChKV8~$Q;WyD=vmjTHuooLL%3p zBOW~Vhoinb<-LVZA03(iI!_12Q%2cr^%LUiNI1#1+RJKn6_LO#A>2($ZhCsL_K z9@-aahCfR+x*@|5hF1LgqYwbucnrX<GKfzH*F5oFbrE*5;Iqa!%a)J|vW3Q$Q1`fP zkh}4&1#CWY$r=y^|98KArU!3k%$7)TuRWxgyZ6dYeErDI#7vnSW@j--I8L-hYF7>( znhZB|7nuJTWlAmFVJ+Gwos$2T457k81x#LOQRbzUlW_ZhH+w+Y4+HM9jAMlb6-UlM zEj)+<G#k{tVwrU2iFmG7bfbDxM@Z##S$5AVo4)K>eV)@?{F;4!@Lh=yXNR<$(pa?c z=A;Apsm-DwJ6n-3Xi-Y)3F%TjLybuT87xjZmG)qid1SDZqp#YGd9ZqpTLdy=wcgO? z?J+Vn361wPYl`_xHvFe<39&@oedVeEJx(^CPKDy}6-!uM0ViAZus}W2WEYeCI40@k z4){d=P?-Jqu*hb>a<kvxa$4>omNPLaNdu`IDtL0F!}^G(=!-u%IEVlCE^c;4=lx%a zuk0;|;qJ9}1%^DLKb*Ug#2tKn(p8|ymi)Q2?BUNO!kd2b^Qjl$32++t<>-ZZ(e0y; zj-AR@ti`|8iXJk~>8<U^Y;nFCdm2}_tUd7=N2aeBpJS4~SSSPTJtf`_c{=w=dfhwV z$G4A_>-8U<#Gue&>+7gS-LCaiN3jY)AhZfuG&sz!-~I}jB=cuMV%BiGrfhpN)qw&% z;(@8j$=1ssRd;7y&RPaom@z>)3X;=2+|1qHQA7JPV|$27n2TBNA{P(5M)g|l!Xy&s zFR$9p%yeftusE_l3>DsCer7HjAba&_Rr-kB>#MT)<FFjRh`r7`F|&TSZYk69Gz4iB z0TUb2KdrxU7EiF&KMeovkrxW+&!42$DJVSOQk>FxwJg#(^{7^>*e3eH!d0Bvu=-C3 z?1ic6R??GQADJy4Ksj6FgoID!WauL$8`HxL`e7HL!%-!M&Zo~Fy9^TC*N92~oc<~J z`I+-62PFCXN<~)byw_;dY$oFp?gqTQOmN%`$P501SpG5Fc9!={uzzBCjhnOZ#Iw`% zdGM0w*wRMPc0^kbuu12OMD|`)v)FCyJ0zzBBWNm=vPAr^xuAcM^sp>FWPFrzYlBtD zHyGVLf`7@dTi&?B)&WWYr~jU6b$Jc7!M!imxT_P}R2k4!_hPf?e7&^$V}E7V=&o`x z`GzPa_*8sjx;%Kbk|<V3&eqgjc6ilFU?$f;l7A{L`)cZQk8QqY8VA8i5y42&){bI% zG0$VTel+Dn+53xP$evG$(0j{bcAY$ft)pbz97AC+A9;3gCB?Ey-<s21<$a|G<bUj{ z{X^0FL3hYmnAN*I@P50BChtcwL+?e9ke5Pu`<hc++=dHFBMjVFt4-(je@LeSM!Nl* zCRXW5a^^3X9{g_wV3PR4OZ|$uV}F$<tbCUZb2&}-LTC8JdBo4LJPjqf4$;s{>iV!B zLz5R~+}!wDj-p?V+#v@p_cT4$20{%X$7u>>d57FHYrC$B%4OM)t+Ol58oijM9|m|k zP?*+MKWg^J5qvB3!<>4&X$CTxLh<AIN=45qjgQ?d17J_(+vfWbwSSxEC{nx;cG`#2 zwd8Zn$xm7%iGuJo>G-y@hXlS9!X%f-`7(M-vhy;!&RIPHCK#@&K7HyhTHs1-#gu`G zDF1JX(BR)Yy04j)!`*ddp5%q+D@k6h!QI4~a`Bx~%Dj1*Ye_UelTu(B%bvJUD0Qyg zm&$pxjPxRH=Z(zbq^(Mh&$Bo|S1u8k%BMM{LMk4t>v;KLf%O!gqLv{p#QfHD@kuuG zgb@;ah4t^U>=i18JxP{A?{@AaQp9SW@aaxQ@}*VOMCPP9@@iw1evjy-<+=x%p{L_! zSI;^b9V7f~`qbBOEGXcwZVyI%8;dgC(L${EFQocqdTHeIZZA<OJvG2?Zknz=O$kr+ z=7SqDya5dCjrI`1@6|b`C&B#kB7KnHzcf5kXkg~xUPd5rOw2N0Qz$IvJ!g8cq{0zT z6?R%6*hN#%eM0|>K!9%4-b0!%INSJPA;Er$d92_(J|)Q4a3#{;i(6+CM5RmA?IAC8 zO~>)0CM9YP@A;@UIWc}?um@Ch<WbGyr$%+tj;?S?sbuMl?THBzDZ0xJZZufqoM0~M zt^O|O-`eqI5;`;9<|O+&cBhAyD<zJ6{!L2u|JW=KS^9bx>OdCl7B#PwkXnk-gjEuV zS_-Pnpb6(-I3$vi7!hrC>e365kCdqVy}l^Hi+m%#tD5xpFAkS<ViYEztjR3*)G(%S zJ9@N4&En8m-gHF8#kmvVQBR6u5qS<?^AQQlnFu>KFQ=+Bd!)5#StH+c{@&SM{VHx} zO0h6UXvF!hqo&cmT~;Iux1@c!NMQ1Icc3orq?Cw^^DqD0C(0)HN`|JG8>Pmx9UgW@ zw#FG7Svh3Q6w8=-Y>pVH%KB@*Rink^>{5*9P%tVbsQzCy{zrdRaFSNQlI0)C(d})W zPf@Lp1+i3r59Sw36C1I@MvQhbC_R;P<0g*g!g6n6y(fM`lUu5iwW2W*H`XtZ@o(5_ zM@jF=<*fqG30&szZ<&br1%Z?Sug#9YI>&U_(OdFp%SVb?d2IL5s_9PIJrN1-m9E7o zrn#a@8mykpHnR0hEVNS}<Z4M&5Bc#bnplU`oWCe7DLcfPeo^zaZ!0z<t%4At%i|4r zq|v7oxKE`iYD>X?<#QU@$LCw`bTo{kY{A9sBa~YSCBP5IZ^gIeg8rMU5O40Z>NU7L zKS^ZaTP|e(7Vdn>J67fT1aQ*r<XB%RT<^}x(mg=`3$h96gVp5G^3JU|HJmz78|-Ma zL~j12Z<qq_WH4n6&3y{y^gX7m+AnV)P^wZn<Cwp}0S2*5YK*S00^@H-HJZZL9>AT( z2L!`eK3H4n{<N7KGHZQT*P#QbbFEdG%!+wOB=D`4KYva5Np2ny_2{p!N@~wu<pnhi zhWX^YAu%qsDx(h2+T{7E@0F>`VM1;8q}b-QAhEY5FkOt8n<+PXt{53>=^ydKZzf{S z``upy4{z^5xUoGB(w51Xf+@+r#5u?2MH*vvDmIUDhg>cj0AnqLb<#BPqLa_}#m<En z9=p7DWWV><cdWd{IPai~cF^1i-iB1)kPfS9#|z$!v7$!=Mynj`egnAsmT*ztaej8n zr&VQ#CY$ML)p|h9u>0l6{>s}W>e2p5Xi_<7rPMy{APwACX2aE2>=64dLT+7Hlh1b2 zHBuQals=pOGZbRd=#vyI<SPA<V4S*`hrT)1lC!oPkOTf-Cmbcou|l%>Jl4Zbj=T9u z1L(#w|D}&&bMp%-?~=1PF62Z$(fL?T#*BBJsc*u${fq;&zff9I@Go;EM;4@A@Ia94 zkR)DJU6@cmbpO>Cw)9C84b9hG)=qEYdp6%*_1t8yncamJq7*-gC|*9zw&u4=+k5-T zRU0x-zw?+zdrtE3r^xR@*j%lz=Z$~oolI@QVT(dr%W(n9^Z-mzQnuWl#ZZ5~$ujl! zQ=fR-5R+iRCVnkO{u@=2)Gr<Ajm3~l$qSfwEy&na%6!%uzhx=$r&q@yFT?2RtUNA{ zp9r(EV)LWDSV&h&3X@Q^Tg9tw{yYg6*VC1WBm4Vi3Fn9c6;X%ensZjBGbBUbU-Tu1 zhjsnP^rJ28r8t@)iqFSeKH%4krXot#8k@$#lxRzrn<i$JdLQRA-?ve98;hnas(UbN z)2HS*9Xm|6FW#hJtwaSyZd-&9*hm7@N=Rmd-NGV>Q%jc>SKOuyIglGzmb`hhFKIR} zAF^jB%7O2`rdf6<pj+Udk)#Y0dzM0?=lYfs*ZqH3rHRp4t~|3HV}3&E=C2~k23LQr z1BT+m$BtiE3>buR()7`6Eam!Q@<(G_KAo4C>eVdP(GC1no5t~^fsT=<F+0>DhwnF1 z7RgLHY%c+D1+yli&tB+-P$d8MQ8z(RZ~<|FQV{|^&m5)Zk;8=bkT8HO-rDp)OEyNd zuuuucTk|;9mLFU7m9T}Q<?C22%nS}SUTeb_N5<T`T#B)Uw+>&$K9Zi4fMPf4+auWr zYJ8*xDl3JI9P<id|MDvTkYzf<O5$LL=j6pwAptm)g&g+C;s*|vfoQn+_EYD>#_wGo zql-W5+R05Le2BJYqUU=VqBuKq_m>Lo{deaqdj7;KJ7(++;72vT(Dnm7!<w(e<c6Ks zYmet69`r*G<^YWyo{Y6izaNFMWLu?$L~r4KnggHfF8TO8B^c2PtsT2#B$lzNm46X( zKhU1>f~~?Z$CbIIKvHqHj-rumJ;Vae%MR8Ni3v_~WHM=H>^OPb8^u(Z0TpG(kKx(2 zNGruC|5x>?1(qjGvRYNFf7K;D>C890_W0Fmk98m4hpzfUHN?Af@{!U{sCaNuO)du_ z>UQ5np(-DK_6Bv$HkKVC*gUVb>0`v_pGR>a-ZtGP-4hT^{I4c@hMi1sZ-t4GJ`u`) z+mSuFqgSGbKuEl;AIL@o($Y*6Ng$E_;<1XCZ+eT)%)Q<ULu{=~J4p58si}uf-h=G# zV54a3l>JFehj8>72DcK+wu`Vfc?9t(v)=c!vkSTP^*3`go!WoC@0kB)LmaHL$Wdgl zTjaAK<|4w)QOTGiAe<u-Yq)3e??w}Z3ESfYkueKv*NK##DNfqI6M7dH_}G$J>E$7F zOz=!qKXT^#0){7*ZE#O`#^Ub)h~_+jW74wUvwr_;1*S*dDbB?22wOMhM+c^_n3fRe zS=Qj5>F-qqW>Au8I%u>hE~nh}8MxC~H=FVO^0~9JteA}FU__c}Vt_~g)PCZ($)0M{ zn<8oH76L&{#(6Je_TZVlJ;sd+zL_0=eL$ZEHqU2NRUMzZ#}-cN<S*$F!b+0snlF7t zk(4A=y?n~n0wi)h!_{g;_6`DP!FL969BUQF=X0{Q|8&|I5g!@|Xg*8lS6=DY=-n9J znvu6-;cvVdper}&c^uDwhCdT1M?P9kUd>zLlQ*=l7SrVsM?NYgP{rqB820+FPRxwr zy|lYzay6M_9jYsAm2e!fFr$$E!#*G?@`OcmamQE84woN>Po&{JVL^1bHUGe}Jbiz$ z-Soa@%G0}D$Xcy5ZTy_)(OOeFN+u@*9#paFU$_N3_J)+F1bPYZ+y%Suuj5GJF3!+3 zQbi>{w2`!9Y%Lh>YVdwSH?qBBMc0zzR2z^h_V21K!fTIN?e`!fhp{3U320jShVuK> zdU-N@KhPOqizJX=gxQ-?>UDJK0mdgf!tJTKSbB&$Zs3a?e{qn|2Rx2rE@9`#ue;Z{ zjwml55E#sMQU;i0eOe|FZrlKd^=hW&YuJZQyPM?WAzy`zQn}~>v0@+EtRw7$_n&pK z%DxM>(#<w3vVLCN|8mbmYlo&phs(__p24#6AX0la(#~3^_}QG&OZlt@ZwqaT(v5m~ zCt11Jz;wAzpHn>C+f=dgJ%e}u-r?F0l2rUY7ji#<CPTR1?dF^=XDhQa%gx)Z>@J9T zKX_8AZ)GUyW0+*t=rn$ia*c|?uJ%FV<a$_@MX$(TJ&lS~ygeJEucmyLVf9hJIn<-L zp*NrFx0LK;m;tB=qOi?C2*sTE7r~nI;a8A=l4EtQ&7e}Az5#%#qJhh=C)30pmgaZL z;!7*U4BC}C3^`W6OhvU5;NtHMSGiu4X%+^Ul2Q?pz8)Ix5}=Xlo>#!3+>i-;KHo7M ztcZ50l?i_N*JdkOkbOiTpus;<?FrXV$OB;_Gtr;n_}vND6-=`}TPrVnqIb2E#gJvv z)HDvsE_E@0@dSomoFKn889BVao1n~0fiV@Ebj|uNiJZw?lbqhzYTduYZ(^I^3@lbj z{8hSp5w5)JcNm}O=ql|?r&3*)Xm)9Hmqj!HK$ja&ZbLpBto}H3{76-;SW7s?{w>Gg zI{P*TCjB$mo$Y~q-EU)c7WoGgC2@}lu{knjAX`@JRGZaq_>~&Cf=O?k?!H+6i@g3B zN`;VPJ1qx%xUYqApBeSSF>%5(n3EV;O0@pt_r~v?%>0s9Y{zLNnvs*;OB`2*)#sI* zT<*B#MZOmfD3xoNuU(8J$1K|R<krhyC$;7NoQ?kfOx!^I4_v!QZsA6^=B(5qXhJe^ zW;vJocrUts$hZea{@Xd;)1I(dBAa*MC+d8$xx(s1qe=nUs||iC+)Ko1CN73sQ<)Pr z5XKSiRmv&c^QcbO!j2<q3y>Sb^zMa>mpLrSG>^!{)TYw@m9Lt69$rKH!V^)?Dy{0w zQO0tYr>-g$ya5)P_=#hfxd5_}cgwlnn%-%p-JX?0f+rj*?#~-})#cA{L<N7gvHe@E zMpIz7kSFs;!%`I80adWN=~s@jbO*y9Ed{Ix3VT<5ZUmk-dF&UF^WimO+hgV@x67_7 zg7yd6ilyfTd|MP*urc#6=G@oAC*P8ry_htnCR#4nA_#hAJJrC*gcIMk>n2tBJ_un6 zXCS`4dV4ruS1xwOK+Fa8+29j2If!-J+}IcZx1N{6@l`GpU3x_qS{H6uKvkpMG#$N+ zXDKu`*Vl*xPDh{L)Pp&+SA8x`^GkUPhpiWE++H20gFllEMN;;TX+u)~Lng-9SVB>F zeeF>zbWTYtz^J>GlI|<-_6ILlB&(iJept5SvDUt#$g*xuK=6HIj&-yaBF6!|*6_|4 z)eA7^zlkPlx`6S>EROaNu($|iTZ+J=CTiI#97VaOL#MaWcNHTV7+zpOa%Q?Fl)9pR z6mtl=tDBc^{rZVWvKLNaE3Z&D7_ju<rvj+I(o~bfy(R#bGO;QA+a9oDdpzQcGs%8q z*ISm^vTl0vlc&AhnJg#l_kgn1i3gWn@=QF>d~d^^K;<tfaT7Pdh0|DT<~SsrYoBhw zFQ+bZ8@+^=agll&>g&rF>ounaetNO9Ylud633#rBvm~*IU-iR%%a2>a>}@&kqLjoj zY0{i@H(PRpgbq$OE^XI~Z5im=)4?#{*^iSBVn0bDWOCB{0s>;2I^$yQCm@C*CFTa- zPUH^`x1ufJn*j$>aO&kt*{kZh79|+c>FQ>>IZq${LTlFLW`yWDrX4vYW4yw$CVGmD zoGs)Y1AHQQ)%(&f463222-DM7Z&quzF1qXU`E>TNsGR+?^c)R{Oj3zDOta=Z6Y4fy zGF%x(=8g5(JEre5J8WkFkX)`Yh#Urss@M1p<+P<Sz$8?O7~t8`npfDy4F>clgL9hF zdeX@<_6<A=S?QJmWjhZZE)4P6O)~s+dQ;pQ&UFn*5vwk|%(kms$fD-?%Y$IVUd19w zg{!bvl~<)OKZ-JX*JXX_X)up2@sd)-sSvM-ssq4ePdJ9in~2%IE4OSiN2y)_es7>q z;o8GkO*Z{F`)GYFNG(f%66-*Cc{$zOJ4b--C=j=7?ySQOP_huZd_LkCdU~~V(dy~F zQJrP(EMy1TS-N;p9&lcqC-QyT7W7i+c_o!VUJ9q9?>rdu(M{SjSKY~*ZYemIXM=+G zL=LUS?RpHlUhLpFhHhP%rUdwVAiv)Zdd#0`&AV%vfst`~1XvzgFI7H)Vu^@89jY39 z&W|({WF-nwzD`WWQ#?v7B-$$M%5WONf$n5vRZ)I?ZC_N#$&lMdKBCvN;_NN9yI-7% z2tM^{q0ky5pveJ=$XFtY%0F1Y9>Nt7{FTk+XLniZMxwDuTPY$v?>r;m)2!|k);yVA zY2KPhMa)LDPTkAjJ5;i>^^zycN}~Et3H?ud8X_4ep8#ldvcg8q1i7pWfigW5#YI2Z zb(v2HY9WfOnXPHEnj6Y8ha8rXTrAOb1A^%_QpVqs8AxXy-Ww4;Y(9BZDiqMoM60@l z%y;BO=e49bdKc>@;x3@E;8S%CO8m~ZSDVR{El2m^@nDqMLKo2KG~KrNYyK~rIp5{o ztV$!kiyf7veFwM{vCsR4!<z%G*4y*)<mA?~=WufL5pksr8adr2<-PMeOSjB-aTicC zPkjB$hy#e~0+viR$FS~h(}9@E{ow2a%dKd~K^aQ_;)Mf59k-ws-SWvsT|%9;ZwxG2 z)Ilcw5QJV%DE6DyFsXGn@`AG)HHg94R5%?$z4KjEN?Av9)2)zZwBwRiD<-ti!KsTn z$#>y~7H;TbDC)PXxBQ~q>uPYY7rhFDx8L5tH-MMH@Ks{an+DAD(!B^9?~UMUWVH*p zWTGRYu4{ys4v=SEcDwXYS=P^1UIx=$8ebh8-X5H6$pI}CN8TNPk%iz7%WW^2K~Uc% zHN)$)Wp4Dj5n98+B|bgLQv7-rGjG_WyCtTrmyJ3izHz!jQA!v|Amd^ZSj4yc;Sv`u zj=9Tcd4h=`WWGugyW#Oy=W?;z<F*gVLaQM^mN*@q2Ty*2&>yZwm(l*hr$g-B?wi#_ ze)Y*^zAd|nn_`>7aFOY&)`IFW=V(GkK1^jeb(3i87Z`<fSs$^G9r3Nb0h}QB1U*0H z9Mz2^uOCsJFlp8<Im{6krI`J++%0YXeD=bq7{FL+N>Y0kOGgcVI~S9e@88qyTt0mm zL3r7EC%Ts>b4k<D@vVyLD{sP07p76E(4S4;_XSuj?^pM;E5q;O)d=AB>hFX2O42{O zU{imEm4xn{eCwpzw)`K<!H4aE=POeM=yft5=kiPwvlen!EJ^V6S(z@S5ymC5+Y{AR zwiD(ddco{K<Urokcinnqf!u%cgwJ%<xH%qI5AX8(UezF1gqZbUc&4Wv6_A*Ayp%{_ z^pq4n4r`2sw3_a!9t7WxUksYw0sn&m@XszU!LB2jgXLnY`0!$*t9RZ#d|9+G%b^(1 zg6W{vGtmogD7#9MD}oPvrRbfO(H|n$KkGeNZ1{=>9OJ(L>vWDp$*cH%%1A(~V+c`> zf+m5|$WPU~yNgc3BPK_X^T?$$B3DIQ1swpJ2DLO_DLHa&E?i}t072)e&ZPmTKe?lv zk3IQ0{gA)GM7YI({Faf$L+6;2FwkYF$>u4$(ec-l9j%t46)(_KHCU~6)3-H0!}p*8 z4sZnds?RrFh|alQB@fDBs^)|bc*+OoiSf1*HcF8=Nd^`AT@4x$Wkw;K+cIWi{D*S7 zHn>rp+>fGT0`_vMZno+zuWv<eW}#VH0b5}K1$#>^^Vtly8vBJe1Is>>vCC~}Ng*)Z z*>^BEaln!Ez$Osw2oIkln8%Vk-Zi{v?31|aS78IPhKWp{VuF?QYtS|M;w=m3WuENl zYlFiVDgoo<VY|A!EszXnBo$l>d{yGIQ<$HSF9BzRFKkNGVE}}fRRx6P!=^qw_Gg8; z(eWu`_?anE5=M7~r`VMF-z)%<jDZbchn#K}ry%Pl)wYWd1=Lquj<^v!&9ZoB`sK+x z0V(&nXz_rb<a!bhpXzZ)S&C;(HZo_vH{}>FM0F-k2^h=q=H)opcEvOXfVMRGA2$${ zMt;iWdV+5|@HHXkGg80-?;E$Vigq$w(QxX;W@e*mEVq>?5q7lsS#lDkN!w#&)Nem) zh7Uiw@SCdV@`8O~E(2|$l@^SDS*-t@d{M}H8Mj#xoLY027n_`YT`0nUn9AD(cXO=v zl*<1^VsziWJ|iVC>vzpz07F-R5iJE~nBQ(k%mk9*)p<OI=3H1TG`Q;-eS=#hosnpC zQ=6e{osLg;tk9+&fUpE{`9uYu^SE%JyLy4N?A~pczqk{xZO(Ty58ONwszt6o5paDu z%RKbkJedMs#n(@R*5v}8nHiraKwcx?X*GW6Q=Tp|(9{KOD;RMsU-(ZG&dMqmpC4KX zHtBfhLw;X+m(KheQ@RWXUxuFyK85y5ASw%$MlUe9SMRs%zWYEwq4hNLFyW$kbI}x8 z*LDLiNjywnMllPk92z-wlO6a>Hzg?`_Tu7^#3mGHauO$FCk@aWJ?~N)h>#7wXY=pO zns-PR0zH4RvmeBZPISO*4Ji2b%yJ-o`6S6DhkB9K&hUC}nvEDV)744p7ooSnXePmv zC+^F|Hr+bn&LLuj>ZEM3(vE9&M7N&g3AVBsYI+T@<-ajN#06l=oo8nCdAL@6r;dvm zda7bAb$8HagFE1uAh;Csl(>U@x0~olAE9HA>WFJ=#?jP^lKOy~T_Z{`0X1NAG*$5* z!X%YzM=@mu`6N|Sl+y+r*G1TA>bV_7hCN^XF1rks)qDrt(P?PBtLuk5z~l@2$hdqB zlrLT^1uTHh<I8$3b-_$3hhsnVgRv@JJn6P7!At!5HL@s#AA+QO+2|)DgD?B2mfJov zoA1C?ODv&?WBf6H=5yg>|4Prk!jjqndk&4D^q}KP6YSFx8;j3;*RQ#EpNGWG%J@rv z<fu>8b|I#b%1W20Rr=I)V9xtj`C<A}kMUl9<aG?4ChO~cM$kGGQq=Fu^8eWS%CIQg zu4@&fB}C~Iq#GoM5(T9Z7&@ee?yiv#q(Qnnq`P70?i#wgJBFBV?&p1<`-%7acm0{; zxaK-z@4fa~YjcIG461E(#@+CKL1>cK#FA&|^H>iwM}oC4(Q*u1vo5<-s0QjLf-1(K zlL|sk%uWZ9uyv2E9DD@^GJly?FSD+vk5pU>w~mO_aov5CvvIHbQWb`>p!P5u0atfJ zgiXz-GfGiBEw;t8aF^iNT8W=Q$gVmYBv1zUP8nP?d~P&0<VKrpfit6LU_k=C=*p%J z*6Zb*tOY&#ST1*ODO8b!1j~t*4`n0Uh1vJNkB{MNT??a5pKSWg_OOlcEa;=S^78i1 zTy$Rl=|2lT3(?hXeLS+USlLqOr}pr)yvIXv6g()dGAKd^YNp@Jjat`7q{E;JKN(XN zu^%4s)qO<veu!L6DSt>$XY^oeo!z(SL6lKs_wRnN@}sTlqh5yD02=8THnsxzXYW-v z>ROhL7?>`h3q{%|uxu-!yy#;!0|Yi*O2L`WU1pmnf_gxxjMy*wwD|uBsd%db6yoU> zw-}%r2)89I*|^e}YxG2)-Ny?zvW4dt#tjJr(x^O#x%MPd-!XvrpJQqqS&4%04`&oC z$cm@JIRte37dU#Gn^apE%eX!Yr880-GFySF$)}1`PP$6Sb;?P47M$3mOD3iRa$dWx z+K<~Yu^$md?YJ#*><$%#ULIn5c~A@WsT0eIuGLzn#g1q7F%|JrbyhqEIJ&Qsg>C;w z-v)ts&C;Q@#U8EZ4z>rr_dDsy!V(A?_fb=pq*_9azp*!Re*L{Sn(r_vyULw_d?1K1 z`;}07Y7arX7tK*^p6pA8<=5>*tFF%Ax=+2l4fy$H7SDU!D}brT6FG}F{d9Z|Q$w66 zsAP#=w>5hASN5YGi&YOt@W%yPT6kIALz#Vk)rpGkb!GgGxkM5xqc_Y4hvokIh_$Y1 z>1gn(`h@%D-UB}Bftngd2Rv9I&QGVvyY91_53C`ppigzQZ&;5lRTp_oRKQVHzj{oA z+=lc)Zdy*lrsqMaPTjUK?~KlXlmU+lS2s=N>UDF8%_}bZ(9Q=PN@+?vU;I*`3eA)f z*5-GOC!=S*lzOF3B^I&Z`?}Gqb?RXt;br%TaoKv^3wF|Etmut1eh=XdvBXXz;lccF z#Cr3P{-b`R@oPKPws=4#K!&f*@iAeFKb~u+&|QPK-QFP%@@F-{jNS&7n%O~;PCG*i z%}a4(t;A=a_4YD)H)bnm?nqR><2%I`E^g@J6%m2BeU5mwDM5}p2a1C*?ug6&%1jG+ z{r&*0t?xznj*E)S7jk0SK`eu7H60)C>d`;Z#>Di)E=1$3PV}Fnz<!%m04(x4Id};+ zsIy3AjC^c_Y)zqrX;|czte}4<!2N@mL5XY|a3%je-vh*MM#kF`>dw;D)^5<tnazun zzvy<^w_()t)h`@pbGA0SCqyWv7sYJ<wQ_`*@cdGtkDYDGI8fMn+S?ikspkcy*)?7> zFXKadM(T$vA#V@K_-!*D;;)Tb|I{|tceC0M>$snV=&9I#yjX8x)?UM)ZaS<SAJ_(u zg`m#$-l@*>%`qFTl*T`&2uE`Nz|wk?1P%2HSh)=lWpSzRB*zF>zozzvHZ3=3#zt1@ zpc&pm!H;S!KThcU*ltdmRvsZW5$C1$M;3ZQPfxZZ-s|}3zf`AzMxo88CyoMbHl7>F zT@+Kz9A_we_2LEE?t8hKkB@WqHZ2b)im=_cE0@tQWZ3mjcF*s#$%6h%d-o7H>cGPC zb?tc+4%pSzhql`@9I*Oy!))ny9#A{bR8)IR8*Za3@=F*@{R|uV#$~A|DeJ(>D23FD z<_f_CSslaUfVZ&|H3zDve+Ixm$royUJNZ@gkne4Ga>QrAd0;LlVc|QkLTSWrb!6_C zcu}kLC(=QSC+)DhY0hbx=|kR+7^x!+(g-`A2rw8>xmH<9n%$xLt)g&VCppXTqb4M* zAkI$Yq8wwn5I=m|r&-##qQx|F&ECO|MoC_HLRVxoj^c35_sAS9jr#5XtUEsPYU6fI zno)O-^rH*$R?MAkt9)&tGMdgUZ@YV~A69sHXJX~RAgO{)^MccuQwBNqp&})@!Ff)d zroQ&&iK$>Z5?^^DKQb<17KPMvhLo|YMqn#y_{V6e67<@H`V+4cW$&%Ch=`UzyIF5( zE%|caTPy({^uydCAnD1&g($n_Lc6&^M>^zUbdX;3uK#@J#5E8o12^g8z3*D-vw7&b z7<Ak5s$JX~*)iR^LK<i}c8gF=t+s~aMcn4v&%7O-2*IPI%ReL?5QSfe5&}goI=XQl zmQdHXg88fFd^e9>AX2-{h!TyR@*V-K$mqd-pSRw$mMu!%8{k_z6=`)R%x%Ef;pgmw z@M-C@UW-w~W7O*qkr<I>*i0QZDj)mfeGvp!<ePo7rvTP;%h27tsVPf6`5xMRSmjw_ zp~HQtdvOn;gdRMez?07-0|Dyn5)aaD3D*%KDYhpbOG1ZZ5jfyo2|FF|BQ#CT+I}+G z^gb-?<UmeuhFktPmGW^MuGD%rY$JIiTH4Y-I*##xNT7tHc0R}6v_gdkmDA2Q`~J~g z=S6)k(&XBj<cADbT-LHxk$)FHc{}<#1n71hoR9mZO#3<c`{^wbZ>VBP{#WzKor)$_ zq{mu(HM>>(cg_sdD&_AQ(xRtYt^%mf8j(|ma*q6uw-V?e<`%pG2817FbA#-y!=HM} zjj#QdGjrz_S&EHxzv)<GZH8#R7#<C(|3eVB&lK7i&%>wL<aTKlfOPH0!#wggf9D^J z2?T(uhI}~tKKyGO-AgAfRr2N>^tDYDV!>1WOFI!%`nZ&4E5s!xuah!T99+X{G;?w= zOTmjiyEnO+zZZB;z|ScH{H(h+v>yq0t@8ru!#6gBaqGajh`{<4K0=3{`eATBTa5}D zlnN|5#@#lC7Sr`7O={-}jGzk*d@b{qN))iJYvfH@urv`>5V^~-_ql%6W46am&pY{K zGJh^SyYPvZIP&aw!;0$@=75au`TBVzswlroDRbZjqJkc%hvF?FsuzsFO^39Ll=D6* zkxIbf8cxLRRT)@^-`ws}WLI2N&-=a(EOczRf9a)OVs%M2Gx0t4D&6eo6)OD6uY&3R z407&&egc1be-!JPR#f(Dj{7d+X*XifA?>mFd_b+);FeTaRjUZ_NURV)`RFZ?nlHLR zJifx$a`x&h3&N~(C%rc0)h9vmS};G=S@Z5_<u29!*dbjD@pI7riFbvz-aQrMG8ZCn zSk;^+a-C3K37hUXaN9}KO1m1;n=XMUn#L2NE}sTm<@!sYYOQZZE6iZN&{NgD_1z)7 z4o9(h!Cdoo1;*=?eppj(nb%VqVH~>Fus?dBcQb!pASKLn-Lm~NW>ombtuuJn8*6GZ z-%#ab;c)VRcqez>#;Z*C_1@?w;KId3-{bxDPpi$9xu&`d1S0eWnHR_B*1qlx=V|12 z;flS{^ku7`9^MY^=tdG@{%_qSZcX;Xr3<UHW#t#&L|syjc|7n&^HqywIXy!^9iLWj zYbEx!xgL&{NR;j<sUmUz{#0lqVV2VLI78|zmTf`rX!AXZR4v{*hpXZx>PwwH^`5Sn z`rq1c9!0yN>Kv;NCY!baSiKu!BgWQPx-Z($_C~+O1aVyWeiR0n8HwWnYL8cw!!97_ z>05_Fi#)m}1s(rGZn8x4;g(-{VyBrO`=KoGKS{IxAa&a(4Ejtr?r0`D`Rz$(q8oRt z7s5uRJN*PBY7<l0L#R$;^p{)*$|fFDQu3s>PL@hDbzh&D_3nbNSA?~$I}SNT$49;F zk##hf4fwc!5U#Ze!RxiJ>A`5X#%3o^>imA538{=eg~7?yNOayJ!Od|e{7?0^@{~7i zfpHth?&;>)z+&lS+oztFD=diI=9_k%97kQQ?BQHh{$bn({8N~XrhfW&AeI9=etiV{ zjLg|=UT3A*6}H-Sll@a#o|PWOZCg5ptnh8Ss9x(Ii#4y*Kwn05*drzUjIu(MYh->J zHXz*ZIs&*DVgwfcVwIU4`0bT<Z_DqM11>)A)@WL81EDWCoxb#~`>J8HbhUd{*@3SB zu(Jh}<&U&G&XD9ohN{B)0qJ4dd?M_BDM8z|soGYi(s$L~tawcq#ihay=}-B3o(CEP zBJ=;K+f-^lb=g&&U{({mCq9Cxp36&N9%YtRlNW3KJRNKC3+O+q_ubrPj9tC-tDO*E z2fpkrvGBw55XbTH6%l<i<safIpwFMPAyM@e=UW}$+ZFk0%w_N`%G|V^lJPsFN@Dg; zV}U%_#?}es#rD9Z?!oQ#9mD2N&)lYBX_AikZDns7wF0iLsf+~wt1jY4d*S>IH<_=~ z0iB<#**BI50U|{Rf(kr1o6rxGkAsMLhjYJfU>Qu~Hj>R87%rR){s~#+{bCsZ^8K#W z&$ijpoVTUPZvifM*GMBXIs5gMx2ca#S>2bv8kADhEAbN(Ks7M~IbGU?a==8LBU4QG zxX2?R-0pktlUQRo<%9g3-9Z0VHMAxBa7=oSL^3W(zY{O~)<(zCuGoLsc8gVaO&@y< zU!MQFCGz5hTJ!q0Hz((e*x+i4*Epu0%G0(NSh*AdSH;6`;7=6~J7Dhyz+S&XQeNvv zNl1&!MR13F+X|wh1F2{{7iA@rr`%hit(~0THRku9;m&Ivk(?-oEgzQ8@HfQ6I1+C_ z&SlYmwZ8cQ$g8BD$9SEhw?Y>yBoRgr0S~Nf2yK*W>>9|wOp)GTuekL^<5d{Q0pPw+ z)#MRCse2M(Vl}3Z+vWe2jk-a#&{vh!>2th1NqKWAiF2u4YQ^+O>;Q%5OGhiEon2p{ zvU;c7&)MHK#z+E-@3zJKC6bOl5WJUq`<uigdav7G_iRY6B1d)PVnWA+-ITG1)bdYu zb&jz{Q8u-uXY`=o1)^q`Z0NMI=D|Jvr|Cm6rjPdX7Pf?M|6A0oqS1^A{Tj{;5;#P5 zCiIoEus6;xbK|QR1PIWKiW9dV=@TZB4|L5``4M{^;5sN$(z6RXI5?d7)(E9~VHfrS z$`g#sykXw4McQ}e_v>fJ4Wl~GO00|47>N{n(gNQ~81@6E9ddWY&=N$azdFSDG(G+N z1EemMm7So4dYbjxH4W?`Zp`_DR|as~4k*M<ycqlH)1$4W@zNFbDIzs#^1SV&WFj;t zeUmbVz(2?bk8Hq!SE?e?nhTi`Qs}{!bcoGb`}~Dv?wQnyhfTx&jknEZ90-BExbmeK zq~$g_pJ1=hFy}D(5&CmCdYM%lj=neGdgQLL&yI?oxx<cR%wo`~n6E3^pcVA5P;FOr zyd1&OA4s6@{V5$ACLM>oZtfLWcYAL?v5cwNUxE7|`TF4cCz}Hy^%n_sE6i~DZUiz~ zzxvJ+S0zrlD&65SBw1pMKOS^df~;kZYx}K=9pC*z&}5cS(}+muqS20Ed#5mM9`iR# zY8m*^V(V~W#gS??^M9E@GeKgAwhFpRA)*uYSJ6SniM-m4%+LN@io<MEw!Ba1vT;`t z1zJl(jA~~K5(u*DbaLO}hK(4Kl4Bdi;8~IeRyjpQ(cyv-P!5|*>tICa6(>eS``(XQ z6n^D<5$<D&S3Uc`rQnVl0Jw$mS4bb0hg}eVzjHzvG@p06u6L?->urq;Gii;~Ce4!U zD`i&i=li^hV-**Yd@T9Ga2F|wil`_f9me^Gna_mX=ChscCOToc-~LGowME8V<s{Lv z-IWoB?^D$-jm0-NIRgV7HoKJ>Ks(6$L#J#g%b)XQZ@)e2hl^xo{$RnLp#D=aDaS)m zqQPI<xVC6AZ*6#ZuP<eD8U|EM)}G^tDVu0r{^-PTbI$m*eujbCKYorS33Ohg`miRO zJxvm+eDS`Ac(b+ynd-=9<Idz=%GkG_J6SRC*T!A(Qi;G9jxl-@!MkZO%Kt|cILn51 zDKGAzYb2Z=aPvEmFI$2G)j4$0csKgkN*Pr*T*TSHcV^yB7;1OVpZ!(AVkO+1AcE|m ztsZ+98Wp{<^aVn6KjHJZweFFsvkkeWbpM`_ax1I1fLxTd%n{xYTI|3YQ))N4Dp)NL zvCzv~=wI-fMB1b9XX02C1-l;9bsN5=yp`pVUZVGFM5alVc3FRHD?~5cK=kh>UpYA* znx4Lge9}#MN8*m7m-kHSn+}E9G#9|tx<Ki}@3fNQtnCUBK;*&XhlddA{7{Y~yRV6Z z<B7Fdgm*^jRxi(TmerSE$sP11tWz6VCM(UrxjsrTlV+cUI?Ssdd8YNSGB`9G2$p4` zjX;4G_iJ5wVCJR?b4C)F=xaNqgo2OA8tp?NND_HAw{y(c_HR``Yc}A>>dLj22ha#w zznT6cTxeDP8TFF`&?9HgN7!6g`M<ko*W%Bf4$$8&5~s;<q|@1iAD%B0TY<Qo$~R!U z_P7NnsuD3;y~fs}bT&HoF$;9ObPMsj38=6-4;L@SaY-RV?VHv!m%-0BcTtt)aIu6_ zPeTn+=FfrsZ(6rWWb%G;P-8cc_o~(jMnz4d+im8C4$tehP{eTequ+b=A}KH7+ZXCN zMpO;@+&pL`hm(`c(jR>GYHju6PW%fg{|9}k7U>0mp8gK?F#wY~Vuw@fdcOhVK)gph zgRQl5A2XI^GkR3HA5V!uN`*X?A-R}~iCp1BDF+)MM*9e!IYm}B=|q;n({ZaNT)9!W z(NMbX+OCp+X<n3Z<e$cY$4itINQ@AD<h;axi*go8#CW?c#uW+rMY6JwAYZBgy{Sgc z1K(fRWfz18v02fCsE%_!gaZcU71E?iKurG?g=b-Cvv+8Ebo>e=X)>)Y7^o2he7vZ6 zq0@b2IRXy^u8ylyy8WSYFBVDeX!Y`koKue%=;ay?8nBiOiHZI~f?C(u#=wv4gu<)6 z1Fdxr-!+n;=GI$LtaY*cLprXgau1Wu{s|3R_F7b(+CLeki%qawk|IVjB&exFYwKsw zD!@m?c0<t#?0dfiW&Ne+?h98~JSaTNzEiw?%V#Ty00;w0RCyIyRsU9Zu=+iF@KYV? z0zmu*ckf1LTDB20p=4JD2HvUZN}GaB%8OkYF8rrEo%q)o<!fNY+vsFCYfPF~WZ@=< zvdARChHq)6gr@X&u9J8H6x}ruxbc#@Q+jBa_sUH}UVB!OcQF+jgg=O~Q%9mDUX`m_ zCvT?KhAFiQcEz8HO_~rTSF2kn0jyL7`278Ba9f>Lli?hUzPU~LEsl!A1(x1_TAvxy z0eLN)xRV11f7ztHUsAsuYTtz3A$T$WO>KLY5|=Ib=^!V#UxhN|#vF9M-J$y&d1rf< zd}Mcydf0meyRU_bKxp&+I_k>D-d9a2+U34wd0c)H)Psp~@Jd#>Akgqm%cVt5quw=Q zTahF^V5p4uXI7r*Ly_Czy9jqqLh%ZVVZ{&R(g|v7&DhB~_kN*tE{zk?Qv;m6nchN{ zqVp<H0=D`LZO2gujzS3({u$zWdHsLgYO|$i$ndd?P*Bnxs+I%8q-OxlQz!oKR6^(D z`I7u%1R#H-T~4$&vs0R$8NT4x{Q01R0ju$;(Of0BppN2^vG$J;a7D07-U3%1sDtBf zoZZ6hGIT6G?ex|53uR#{)yD%<<IVcgf#}Uxi$jreV*c;H0UJik{lhf*)%_P)x+;BP zFP$T`$tI9nyE%MGsgsoi{zH5CSN2OF@$3m}Ws4)8PR=%sC@pj&f#*4bI)7?XUokmT zkv$h~I(Q`86K<urqV3soqzqSo*)t)u2!%#$d$ul+*Yt966A!Z(fM2~2Iy+kjg!2$T z;tY+yr`f5FP_JRZt0<L2E`1gF0&*K#eH2*UP&aO)<vA5Qqgf!)V%k(A;dPE7<1qhw z<JcumKnHF@k1=DnK8UJ!<5Z9@{m%$iZj8Hn_jWO7L-dwl4pp!|_!eix6!@jLs#Mrd zgIrGExO!HV6o+%vtDAOX44ppvLhd3XiaZrn_3#ae>Mm^!I|0^~qiHNhwFS9B{?}T7 zVd&3p>8W}_5H;y06vIN$|Grl6&@zJ4mCS2?O9K90-Ny~I01MA|N+kV}{klpzG}|hQ zzDHxr+eiP1#U@W%draZEDo*)rZ3jEeX3sAX3v^-ZtJJEdtcYUGzW)!f0QmFnn0zqK zBUgcC;0OMo8Tu$4T?U98nmHt|fl#_1X3I1fLaFn@j|>*vTf8pm7Nl;}QG{lplYvBK zJ+|W#C&~m{hzT!BoCULm1t{C1vPN&uFy)Q+7vH?ZPU%=9qSFIohdxE->1xx^b*d<_ zJT8AFxB7hL&YFlBAX_p)AI?E+1~fhh@x4RZ%F^=`vy!^I3V2%9v`L-%n>$pC{NhN! z^f)U}AHdOj8<f^?8n=q<?)r^jREZxye7{|M5J~sSt*yr{Mru|_Z;9v8c6ac@aRu(3 zJa3FkWvlNnFe8J@N9)H%r7lFFmv6mAKg{uD2wS=;05LB5NTYL=>GR}JIDU%sHW7PK z^2Q6kZ*Tn*Y_4d2>Hh%~q>2^aX9NKbBs1l4b^84P7waD_U+I@kG`#tDJBPo%tQOI8 zetU>{VkwN!yUV$h>yIyL6HC1lDIq>fN^ci3kavOZs$Ur*$iwVWcdU7YdJ+)AEL%(2 z!D?$jc4;L{?U?%)u+A2ucW0g&y#6K*OU2;HUzwP!Q$u^Bocw52Y{uuupI`6JRmB1v z2P3*ozv<q8^?0MqxgW@B^cvAJ{YK{Sj>m%Zb%EvCLs{G-C1M6|C1^=e^U;6!YQ4HK zmgVa|Ls+=T3l^2s)Ft9qYERtjT*da`J9(d))!2X^>)4n2FS^;coL)KtJQtpQaVU8A zG!SR`^B`iD{jR*z2*SZY{J7s4X$AAT6Qd}=5D)_u{3s5--A)yQ9Jm~OIJuDQ#b4PB zEHQ`J;3xA>9jT;CLU*yHu!59n-;}+!9PFm+iUhtWN{rv)p-X6fm;LHl3Fq)HfW^Wq zAg|xXh>p-8+hw(2k`0UVe!#^rl6a`d3xof|<tKgj%;tCpYjbT-#FjQ$lp7$FGh7!W zV9V9n@^yhYjLmHye`t8zDY@@UHi&#*3H8o>J|ejHbhDy(`lTcP_6~N;N%QJrf{RLG zxtU=Y;Qg+_5OZ?BjFg&mWm0(TkTjGS%YN;xv!Zx@+~@Q$%$+KZaD?thMd<B;Dc5Dv zt9eXH?#6MIgwC&Cdkv#wEeJhpc4Lh#Y!2$+ZYKSAC@2a0afh>DiMz^5w&oZB-_^5h z$lNKqQvk&0VnTzC!rkH|SKVY^X!+T)5SvSF@bDWqd4FnhO4&%=zh82Zx5sbzuD=^F zY}fhJpb9Z>;B#WwvmGl;+~pdsp`%ajCan@)J{dX0;0|s1&Hg0{Xz92~jO9x6{t9HE z%JaD4yw_JXamFoXw&vNRTO1r`u5;H;!G1*=`8F*7Z-dhRWrWP4pk0pWUVsdQLQ(_N zvSrAc)kj8_|CrKO8J`+oqOo<-JtX;Yg|99Q#~t;2l50dZ+ElX;jR{{1@_vP%stUss z{H8UAIm-TYwqPc!5=FJow6uk!_lZqe7E`6Lb*)h`uhhRZeEa)bN5}W_-<wSSlz|8I zNlEbrX}7$7J!avRV`xHim_Buz_~`|`oB8TcfC)alPNLuI{yh%;YSCh>vd{jtH#hNL z7lO!(HP3C0e9)P}2FtM%fIU_t7G6NXT+nGpj+`+~OFlYE^_;ivtR5V-(qqxY9XuU@ z(BM(Ngz;V~xCs?%*d01DT+`S87znKRTuZV^CS~+8_*|UfO@!~4bj#uobo1N4S{aYY z=W;yqtDJ(OZUQUueMXq;vp?{qu=W5csS3rH-}I)9Fp>2YsVnoRPiq+2U6_($pHe4K z(V$}XT?|=1@@BuTaKB*L-y)s;cTcl_q`L?_*Z08O02v`vrY(AfB65WOR$d>-mJQOC z3za`fkPJvWirm@q>zaMHZL4Kb6CvXK3u+E=x=HvHst3m*Nf2tjyZ~!&UrmT#W~Z6| zlu(aOTt;!g?rGjEc~PMt^pMS_t1qsuCIHQocv(|8Z*Xams{X~0w2;jH@JsZsYXkXy zZASBrQ)fL3t?6-{E5mID`pY`-fpOvJXoQ6*P-v3E%II&dP%Y_;Q<A9oRrXUnSFF(w z{1~kgs6dIEhroCo6nNBfxo0e@$ymm~&-Ldd&AU`M-}vmS*L$XYH9kQ#!Astuh99>p zSMeky(TRU_p>;&X&<+{?tW*`$3DG2zH+ehBE_*3&s=`32LqL0g=sT4yJ7ay9RkPZA z;c$jd2k1H*_H(Z)DB-Qga~)r;Y(8jp<1lPUu+~VJtb@tbTI{fuOe8?}Us_R>HtyOf z{-@#!@u?APM>OxnGYvWoevDx|kNiw}onlS8u!{so*&&|OySstp)LxV=?CQ_t9gB<F zIf(_CJI)L)2ov7z-8)|1{>eby@TUs&qS2STlneL6e@0IPPuK^Cj!Lz?uW437t<4EC zpQ4S<a|&_|M{=t5m2|cYynz?H83Ei0Rxjc|?9IbdAGbEsZ~xfmf&f*AV@574ETi$c zWpHN=ScJp-C;1YxNhXrE?XgqSX~ka*#e$h%q@wV5e{`PH4^DI#4h*qf<%R-Vnr1nV zrfOOG|JH2JQlKSRly?W*;VdGzc3NZFCeDp;4quFfo3fj}I@vsBnMSI4{R8irbB-WI zEZLk2zk?Qj)G_5b;8tMunc(540HMgdu??{>#S2~oGiJ<}dwpUhI$M*YlOJGD^JmQz zLsV*BOZ~iZ-_{KR*UnnCDE~--h!+eMM|tZ7Zr#DXEc5kC%+z_F`PXh~>1CV5zV*19 ziH-02zJVSuQpjdzF_9gUl!))Y1nTf5{hJ#3AKi@dFvOBDhg*QGN3D)nB)5@{E!|}6 zdCvB&6s@Ir?1idJBo5u3X$?I>tN0#F1HHdT2+l}I&O85#P%U^&6Opn@C#aU|UJ^Oa zaSgg_vUbR|kGS#5P4Qf}OH$*YQ7VXTRCimX<@C{t^AkuJ?U0R*s6E&C5R<<&DBtj{ zVOt3PZkw4IBvEoj-ZU`eBFu(OD+9k9sJxw{hYD8Wk=x!_fC?Gu%+_v!3u&uA`{%uB z6N&oUhVpH+;;dm6x6`H{h;j|-OFjOMN%}(X+Sq+vk5S<06jd2|E=SmKs!=}Ier!7e z&!FWe!Y7H;+e-B-kSjLKt*OJ0QN<S%3&UNXk~v3{($#Vjbkh_}jQg_0f%W)vtQOUu z4;}K#Wl_x02a|@<15+>rt${DQU0LvFe{;wxkA*<`y$DK$R<_nEC-LmfoKG?>TWjqE z+Qa;CXPD2?=MvMjC3H97EApy$9#!@n4i{9Nj4d+QNA-VlMqkm9uuTYw;@Z~5{+~5T z#r?4{FFq^e;*noQ|1A`AhaJ|Qz4h?9%;iP4OdEl`$tAk8wlYrQ#cq?Aku%!@8*HXK z{Al`Gin*9kXx_)W=_J~U29(ChC#rVseUQwVuaBth(%ml#3*Atd6KjM5Ex){RBm5A^ zeT~;0<l1o9WLfHYb1zE0bKznBJeHC2O{xa*sP+b@F*JgLVJpT#C36_Zup_T}-S)>t zIGIrgd9O<se`o&zSolK&^5BYK8RA|IZoc&T0Pr0Cllr#|dKQS*RaJII=|q-qZ%f-s zW~1ku-NA;{bxN6ba~j*X5sgKf;>yb$ZUm@L#;Q06Sm2dyaj2d(BE7McsBL^2|APDG z_2t}Sm?gP?FCM46Qs%a=3e|ZAqgnxbqu9==#A)nISu41<`Kh8Q9zla6()we^!=1~* z=Gufe=6~6hsXBOOBJFSgE#v|{s1eY5>>w%6m1^SFzlv=&oe7TL1Np9g(eTW!5F5-+ z$7G8B`@R1eg@I_ZoWC~4MnEYoEsOG>4IIq#|41aYeF~{2@9J}xmnTNOK1%4(m0eGY zPU6{`s=~guBu$=b$L3tvt57#8dKuv)4$1P|hcq{?OVUqIW17SdAo4jidEq<%guugJ zstOc790uZbbmT+g`<B1VzL1|B(+f9wjxHTrZ~aQt5;@U{kHztpUr3}HXQav$+bc>D zP+q>p?8Q{Zu$Xl^fG`a@tgwVo*1KPRC0Fs$QszQ<l>H7X*JQTu!Hz^d6jXXjk6;dg zKBe9oGeV6u)#XIw_>BJv@U#KN^@G?$793_P^jL^6wWgIe`Loy9kq4rFww^E1s5h)p z2b+7OF@;On0kkEW8S~EqgrbY84efA)@+g+bF(i4%)_(Q2%6B;nM*9L!%gh*R@hmUx z&;47QrSsCV+hgDJ+pA&PzQab<w6{<S8+iQ*+!-mO)48GSokjkIX>%G`&>H1S#j?oo z{%$=wmDCGN&)Kq{q%R*$f%f2N@uHZYVJIACj{jl5`BzrIK>XabG}W)`)Re5fC549_ zpEg5c*$1&ArGDXcvmBHs2T{(p<mY|)H4!P-!)t-pLPE85s_W{H%^Ye^XGQ77ItJLU zqm#GJW!US<CnFO=x|nu(MT1^)?q)D*FnlPG_qx}MXO`zrKY7UV+G1m0)OtDw)G~|* zTTB<>8xL1)&YI|6)Y!1b3CZjn?wqh*bXvbpLOK#DIt1)|tLaYpMHgfyTa`^9r4hS3 z)Z<?RNEy*z0e%_vyowl@cz8aXo?!7kWRl^wF^o3xZ~03t>WijZ<M=cSLx7}CV94p> zc8IM5v7^Cwk<l7=Xm6hD<YrZrCvyl9Ll0%@7hd|ya45Ch1}heqQ(N<ZovN9zaw-*9 zsrsD6rt8?vW7*Y~KLz*H2ThAtapv!EmF&OSd<?TxCLSMuyJ#q#yYFw(Y~3$CK3x7M z+K|xMP84A=t4m$Z5<#y()uPOfUwkK>#@K<v7uwIg0xZ|#*|hkSR`V)wzsTNl5)b7+ zG*$oL)hHuNlFey1l(Gd7ZusY=puZuTLzOU26K}u~BJv=woylM`M&|zj+g|7^Kk@UF z-OgF5J7E=sxqIDD2?2dtJv@(*+^}`2ZckQ3Ai*zvBy+3D4u6m8G}dX?+dwX9&84O! zNOk1G8A2rXbZoq}1h$5%7{X4^*jeMMwp6UytW?KEw|OR}bA$UiOyUWoF2v8_8}B^^ zCztbB`N=L1#^xNZ8S)26LQ==Z%MyM}i&Pl}o*N70(Hpk>u=R%25|10C@A@CPoYBhb zDAE00EwF|>!#07>Go_v2KY%1hd&kC+5<sk4cI8}+A~z~@Uae(ey-XO$=Q$hV5n|8h zqOe;!oj+^glV{k}tl+;?!NOaS2_f^RMk6;grwRRXnQ7d+kYr$^jhGVF7UAqv%*%V0 zrHZtaJm0NqQOv?YTr6)Ky#oWDq!INFXFm?aIhITN0QeL<L)xFnFd}tzRn%=Lu2|7r zr-dKVN)J8$kNPj$=h*{6K1b&HIt+NT+GS;jvN+dHmJ9$SBhfn)pPO;Te<#f6ZohU1 zRgn)o%3%I640PB!bNb*+G;XGO&n85`xsjz1?Zddc*kQaCMG5vE>do>zWs25fix9bq z>v%uIVzC}vFe2QMSZoh(I*k)mFZHak_=zqLxpBGJVgwgX_e|sm(D%�$gwm#s=GO zB_`W3io$+&pKq|QXvOB#8=AN<Lfw9zCpB=!5#bn4;BlLnI7%C;K!qk)2GBJgU-)dE zr8h`uOa!0Y*8GwF*TIh`ME(mjpR9P4+z?$eouOi+Z`0|yji6|5kIzz}zjRHrpJJ-X zQBdpOPIWUXBanPkW*!Mj={ja6&jt6PPINwt?EYfTguG-n7CUlzb~Pcg6zWn7q)nFY z^cotMTM^#wKa-me0umFVwirbYU+1tHTxQFsDDLEgoG`JYm-Zcd@K|-oxhu*vK4{)p z6Gwr7zj`rD-{N0bea3Z|M$)pTNL7*aBl{1L=wC792w?%TFyl1wbfqUsvW<JXrwf$_ zx!P~dJH=KzG13pOA?!E}lX=>WbN*DNU9a6*r@L#ha)9eCy)%c%$CyCFgu6Cfg7^tI ztYr1Yo|^+rhK0%?;vvJ$M#*@jh|2I2@R>yx_6LaP_&2wUKz0lHovie`EUhD@RtB%y z)dG35VpxH_yZGGl<KWh3u#?8@R`mr5q@b#mWvpgmnOwR~0GqtqA&g8zc9Vy&gTrk& z&{T8)$5RX2lx(9@gp%R&D#gDbs=xe1`EOBZb~6Jf6Q99@N~%;S1l?z%_~2`EeHRhE zMoYdDL9V7u+Z9Bk6LCPE&99UtZRO3<b0eB*bA9Hz=o3c*y6AE%YOfTH`M>Fi!j>;f zG<r2h<EA;WgO?)n`x_00iZdtJrWJi2ax59TVl2Cfh)idlL_JETll}X8hF3#`REjne zOZXR8h=F`Xi<^n0k}eAGRX#?><Ds|#f8NeWG_w3bb+JyPRY9u%9|_*yh4ri?nrp|W zc*Ebc)|e64$C%V=yX0M`#tth2x)UX<0PHPYXl;-V&JLFw9mv*fv(%4#2WLiPs~XaC zNdt4{k*5%~a?|Y@M7<e4ddvHpvrPXTbQ^nj`ZI5C^8=_%ZJThj{1vF`G9kv%oxXWB zms7IKKmDntCG%U|a-@)kvnq4psyeoCO_0Dxr%xN6K*96iuQF>o=_%2jf>Z0&8{ve7 zVh*%)->XT&cX$n}lm(B2fYzx*uiUwft>N!Ao4LyxiJZ&6I-42)>sTzHKffTNIK;$% zps!st#WqiK-WCPGzivnsAE>!`GvQ|L_A+vb(rplj>PLSBJa}kX7eseg>70|htJn2< zGnWj6={kP+^6{hN%y(4hFyh$FLK6AOzMn>4!d@#2ax;<1IC;L`^hy&^=q&jb&B<M4 zA}Rb`jEq@zoOq8Bzt9sO@*Ch0i_DM37g0DgI@<jT?~~${9sfP)D@5_#6>Ju!XcR_B z(37`bD1`cb=>H&{63Dhs?pdF15RGd)f(`B56ae-%UV5o^GR&EvvuymxZ}5)-v0L3& z3J+(&CW@^CE3kUh=0Go1UYVD^1>|MP3-3A5a#o`MlbJVOQDQD(<E~6#o6LP0xa<Vo zO?@qgMt0wE#%lDB1L6*NP@TU>EF^Q%e3#FK8NOd=B9yH0GK{zsxu~?}m7^Cmb!A*$ z=%tmOtJ!XrXw?O6>J}gzyElgk=4&Wm#K~;TE2R;g$t-X+p4hUgDqB4TJ|_165P3*` z755MQ+y7t)PRP#3WL6(~I)}CC(k$GsuO0&Pvz!<xZ*g!wQiL*eNmO(P?@Pq^`=&O0 za6ybH{*LNSARM!_s|bR`;}`(>loc_HI_HA@zBzreuw4t))gZgdhlG|hNtp1yp_>w} zHIv`Hntd5eVyXT+YV4<BOEuk3Z6m$IG=O0a{b&^7S?b%Mbvj>KHi@KaGAjLWlVomE zE`(*pR%)SNs+Y&jXDx|9t|&zQ^w0e7AEBEDd3DH{Y#}k&kjPs07kZq5O_)!qan8MG znZmrYRT;GIl>wcNe^@PLQAqZ71wb{BUHL7xE?1wc$mw*1lpu`AAy`nPOr=zQKKHx~ zDp;c32(Kg(+K?($)-buZq@$I_zt(<N9JOH&)FvMvkV$PIG`}jqHmltc)0?pU5ok4W zj45f19QZ*n(`6C@%;C+}nKub|Ywg(WPZxqBwY8QLM+3XPSjn&`^~yMlWS-@M&O&+r z%`(gqADN)$lqapJ2vJkS_`A;3xc-K#NaiBGII;ngprj<f3cYzr3(RfzhpOqKu+(-q z;~ogGE>ixn5hV&;c(xx2i?iA12gY8K6OwBFH^0KV@r&RmKBSgm38&>rnVUCNAC4+& z12m0VTBneES7iOeP|%8AGw8)c&vgl+QSm9$%&S7YlSjSBcTvOVOZ^0KWmvP=J+7|J zqj%19joJRY0Z4%`FI}tV54Pi3pbicF8Z($mr+0T|`X1NqayV@K^Y#xp0$ct|<7ydx z_50Zjt2#aM;#ybB_3yt}+X3IxtQZ0`-aDWVN3KT}#R;G{+D%mkiXPEL;Rpw0uAjJ{ zpawqodU{d97T<~+?)H7?l`2V5`iHf3%B>K=SyrU<%DNr(2_xQ=>0RYg{_9}t>*Lc2 znLuaf6g$jZJARA2UfOy&e>0a^xKh8M5Y6~y0X~Es7;$;tZR|F>ryQ!J`B;<Z{I5ED zf$ABd`2)=|e*TV|ZCa0%Yc0x+50aT;i1O_yLhTGHh#^DrrHGe6EWy6MJ`y@gCS0eW zW&eKFkw2N517rGbah;Ad%rt4(yINkTbmhBCs=AB)6kpA9&-4B@{uqw^@%fr;M){}$ z1fa2RLoS<Uc(OyK_^^qS#d^*niQ={)nWU7)Lt3r!qNMe}#ez<bKf9vAVW+h6zJ6(I zT^KeufBRCaDO)4yzc)P|@*zvWXp#_3XS<B8z~1s%h{%Y+z*-M~N&k&JC_dZI>U@f3 zg>p784JV$O{z&Y;cD(N7yaac{(Rf{;u1%z`-bz^fJDC#;OTZrky29Pv?g)~FG%wVG zcVy*RdRA$+9UM9Lki4TumY0cT*v6MBIEhR}L9o{!fie*jn%>G=LmvDE`SvhDu)e9} zNyA(&mh-^}3_t$N#G&q*)z&d_%_}J%KyPs^Uks8UQ|KGm0e@li-$RD<4`^^7==nn_ z0^Ge}!gdeyfk$q`V1|u;zJBoRI$vwHaY43JHkZ3K#ZlWuN=B<Bkt+~N_?zFcNSW~S zE7@SxZM-R>cOQSLj!8>ceFPKzxyr=Rp;59>A(%Vf^mfjwpmjvHh%F5drn{J}DCw_M zDoHY@DHM(<Ej?VJGL!I`64z&TD`CCNLG7&~a*SlRT{A(0A#zr)S!Z*c-2$BOj)WuL z0!k0ji;}=||D|4Xz3bx^79i*4wZ-VgUvlC9xPYvXSDTURS@4Tjo7WqM=nEYX^c!&- zi$D=<W7K^)%(zKOM89Ihx=ukLa6u~HCf#vG#H?demd?L-w=2c}4}DPrduP$$$M^sm zopbfX+0|zz@1#Dlc66pWT_i+*YH04{Zn8yza!l@L^smJZ@ds-F3<J41dF|Ms^@2&_ zOk@j<BQ&Xb3-dN|e{?^8fYCiZORUe-k#QPMX7Ls$aVk7s_w5;3c%?yYlKn4_jD<Ho zc<?byG*Y-e!y`7v<Cy!1ANHtR+J=Ofm<UC+-{oqMEA?snbPvy==h4r;^*aijb6^(s zG^*zj=}r>VWlOH?9EoiF9j+XTU6DNKaOz~K=(83LG@><*7pB1-=x_|P;udB-nv7Pz zG|r}&IGMg*jvq_ww`keLWyUKDzwH^$E~C7?TkzF;M<gfaZlSDCbi_?SHZySH(5O+n znjy>Ua<Z&LaGAG@$=1wpUi~jf=AY088(N#$T8r(Lh}?2f*b)DgKgOd-z3z~>CUNE6 z-CenvP+$2L%(B-9tBF4+RT5O`wSRfE&|}&<cC)*iyH|x&(8bRDUTZ9iAcH74wqWcF zgw^j{dPgulS{u^%P}U$&ybJGZkMJ5c?HC^l-m;~NhAz_9F8<Q9n5i|ec(vEd1R_K9 zXid$o`~X(-+hbDw*&X3aIfdV_g7K-DzW#hLC6FSeV1Tgc7~MyiR2KyS|LxwP)_-dE zTYR8FX|F2nkGuf*6SDk*pOS@k7X|yRTxLr~q2^Hj_L?)v_n>DME-p%vD(Tv2cKT&H z^=CP;SW47S741cPMl$PQcKJue=qT%cf|t~0eiR4Ldd*F2AjRYHv%}whACzOKEgMoW znD<eIBpS1fWIMXULduBF1!?j*xh9Z-T)lNTcG-PNL(jLcpR3#Cxht=A1twH5k-UtX zLsgQ{KxNKV5ZJ0d|H+<4c^#O{rP==<o?M7CP+o&~Iw~og$)y(n?MO$@X<47+f@Uu| zeMt^fmKQ$!28HpbMlFcg4=lAV*a`4{)e<T3atv3sg_uFIx-ByWGYm&TIh;<BF$uZ- zWM~%R%@55c@q-&_cH9DG2l3Bm9rY<eKsx0j>&$T$jtIP-3XG&m6A`0<sp*j+KXdoK zBJOi7H4kfl_1d`j#6M<qv{C}_$UP>-LaMK_BC!$tg1AL(2A;E<UP6~&9N1wp8B2fr zB(}jpCvt{X3zhe!POycR*5x85wQikmwi{riF%lzk1^FOdPZx>+0#w4)k{5f|{+fsy zlUOlQ>|O91AF+-gV_LG07takE+5LaKlqA|r(0}b>+|+nes5@<8?a?@Razp7*+;T0l zv*@AMP^c?xR_1Y|VKHoS=`h0Cn`BYyQi#01BIbF|eVz&5K-;rRghzX2pE<Db*|aNl zTRihFlGvE%+DExW-f_b!<!mzl<%x?6HGX3*WigVYh+5*2945D4Qs!rSR`1_QtMl8t z;(SAyK%XGq;!3b@5ww)(Y&L^ouT1vLj9}Izs4?B{RonvJ%=fU-Pn>0Pb;Vq7^O=(j zdF*P3+W(M1(>7=?Xd(OifQz*^`^Rel3s=6<l@x4j8#(X}6f9)>tX#PE^{li$vrh@~ zzdg80eHDYKfuY$u6y(}RfQ#V+y_Exe4@W9DVwPIV&Wcd)y1P6Vfl1a$+o1!V(e*vO zjqAl*<y)(Vs!ewMSH3MEYf(-*1~~_MtmD;&7nj<KB_=jF=pt}6J&)+7t2rg`Sl=^; z_14p5i%3VYMxbQ;(+gJHA~J(As+y}3Qa55c0$rsTT6oI+^Ur35>1e42({+wH%r11B z^NaJf*>nadX@35TA~8w_HIubF|Mu$3=&wz|opwVNwI?1P%eUNEJ}4=|o)Z0fJ*}Kn zBiW5eHm^DuJ=R9G=1exe4({`7w`mw&+w$$3(26Syp?K-iD?>6@RiBu!6<}ChA$N4o z-gL11a*B*-u|UjUPO$UIb344CYg^T!2UYd$d$ZAl360B#W{3d1sbsM>x}iTY0<s2O zZIcW?Z2_7BtM98*?tE~ujgwWk_=949AmthcIn)eZlkwRIe^_dD5P95RdGhcnxo8e* zVzP!?zb}t%1HRBgxBS<`Y4`i*UYjfvMA3z<Cp@DRu(~I~m4j;!Asx{L&y)LkkGi&l z>Cxeqy+`~&(Y3^xn~puP8faLrXPJ=c5(i`qWVV!&OnXbJ8Pb#G=4Jg_7X^po8&xq< zHT=N?V%a!&(3J1lH|7D(UnM>WjtX=j+UAN;z@6t>&d$pb=<V0;z6<6ma>H?0+tku~ zFihTVOU84nkZ7;K5Ok2T1zpu>pd`1)XH-W6ygN!#8tKPheC5s$ze2@JZ4|co_kY3W z<6gc`wVP0PDoP|nuCSB`O(nQQw;%lo_3rZ=sfBplH@}T*$Cqc^NN`*0Q#Us!Y*t*a zQs9U&(^p;xNSbmx{(_z@COb{ZZJsYeF^Pa)gS{9dTBVHzV;{*aKi95(f8OdA=85W8 zRZLjkti2)1LGXijz*(NLIc8<#kC`s2$uIoM4+Hw^&A*RD_4pQ?KEFVT>Ewp!OuUkB zx(Yz44qP+UM-4=s#AI*o>y^CDgWN$L1}+Ea^}_s?dgw!Ybe`3L>;8Wy<^H|Cty=nY z`col9w|pG*$5L;G2gk3UVuo)NwoPn$y;wev%4el9)2QPew8E9g4vuTVfVAE%xb^Af z5%~RbOImB0eC2(<(@aATB9*jMwi$Blq3!Vmfl=JRut3BbU2KznTyy1r+ykF-VCws) zcMJbHse4M;*h~j`=a9xY&ul!68E`DQv%MkV+~~e0wIqBO97D_Cb^gP`ku)hIhdFZJ zNN_3<r9vZjSb#Y@cTl=}Gcri!%X9ES%)wFmzaJi@*S5u-e0HXee8>^G3WjMb@sloJ ze~>^-m*DMnnxXm6Ro4332GX%(uH9lCu2fO=%h)Og>^#G(2wLf~|LFz5`@0L0^F4H> z2*dDM8M4L-K(@%yEbY5-8>G1TYLJwFv`8)D8q35LxS>8^Jko?Ar<!;$v?T?jQBaC` zpVV3uRV^DIZY$LF(R4>us$W>WG8bj9)cIPqfxk&{uXR+Uy)PR3bbn}1fVd!BV)(ZY z5f$32FCiOuJ9-IeZr4key=PH-HcusbiQY#i4?UMr5v_ow76-6kI}vL(-t_?XsNhN7 z{RJ*uWRF6p^dfGn*}8YpUZ#HLt#;?}G~J9w+`{_G0K_WC%F+U?H+v1zI?BGMJBf$Z z&OIgWTy0mdoLm_j7gw>|@Dru3)RUT|3$0wdJ|=(zpW^5G@={rjK-@NF3R?FIweZ^K zN1I#=n)8FT@Vi4;dfdST;qKR1O1w)`h%)g3vn%hIrNCpqanenmN5Zj}o`+2uC}Jl4 zRFw4LvqC#gTiu?*q^`r;d8<X(dDDAFu8~u@0FZZ);35g<i0esByl3d?<ESh<`~j@} z^X@)+#VxFX90#2tiIwlQYo4Wa0-NFijH+GVvHh#tdCI|-U{QX_OR~wk$8!bYR1f$f z<emg<{4Dj9U3_b?=`r{{M*dED1B-<J{hA$=Rg-0>VzcgB?Z0n&SI`&zNw}SuCA>GY z;xY3aOe7Ep&xYXZ{c`A-32OQ#F4dl)BY8&cmlNjWOzU;5@CqV%ifk&xujSYLk{8W` z<t>u>0A7Ko<sIF6#mkK$mNhrlmQ=do0oFag%l9ARznglq4`S}fyw?GmM$LprNn7X7 zRP|(XL*?yK6*e-yZkKupotzpZW0R((iyK39OO$pwj*v!$=Nu=T8QnVw3t4G~h-kFz z>dj#@!&;MT<KvF*o?J@}9w7Ilt5I3V*#diS=^~D#uCPTUx_kP5A9J}cI{=K*_saMF zIo^leLd(e-1+%fel?Bmf1kqvNtB*xDn9wkg(|XF-DArAnBjZ`nIL2B#nV)YTWDKNJ zngj3&wtn7Wf;VU;=@phmTQ1i}9AC|2XS_g{Mz`7enyq&&l3^?7yw0M$emDiC9S-zv zT_#VNQeI{uNguJ6n{00y%_mG-NKRY-+<}B~c+>#pjV9E+SwMx0DA--!MA2Wx4pUT? zOmD|*>8jm6JU9vhelWSUi&XQe<w8;US$8^-_K_4a8=x+1cU9TKiZh<^;6q=%xw~?4 z{(-8)Ku@FS2%vqypT2?DZeed89)EmfIcMk`r{n>_(^aB-r#B0ZIIo`#HJ3gYwkn&! z@xG*a(hSpssi|#SklstcCukhHCD!U%VXT!uUC_O6q02QThd*_tu{`VI#zhRhX0wb9 z?xVcVz|Y`Sk3M=t9ZhXu$Koshq0_|cx**Csj~tOp5Hs0nzs$uFXkpvu!2;~#iSA7S zV<5bcNWQhAkbs{<ADGkQM3Iqqh9I}7E8O1mE1`M_r82!4&XC;W2_OKxj{?ac5xs`Q zfH%1=!2{4OoNFAJr))4*#QF{hZZ863KVimsijulT)jQL}nHaKp(usY0FE0N^uMe`1 z6yB=zzzVM6-Beh5`&7Boq2Q4ddJ4Q{WX3kF2`f3RdsrcPg3Vg4>D8u(+*(D<-(Z0E z?aSU7?)ar)KHvzQ#_q1`9sI6B3}?Me;;piTPbe>z-RjkX7mn%Rs_^q`8+er^IFp+r zn8ICQl^TqFXLcXYe`W+Qz3*i(d5Fnvkffgv<XN~8#MV%|cL|Mxd(DGk?p!e`*I*G} z5@XS7_Omk(>OK43e#&>f7(}(4=^6UlbFw>?6YH+QR}8a_#Gdytv@O6XT!D-f=g0SF zSPzlzPqsFK1dy9h(R_Lk;MTZUq~c-OF`a0>?D3d%lG1zhYA^k%v~%yy;wInY#++r= zSW$04=FyC@R+L0+GlRSxeX9_@v{VHz;tYR5^6bdhgUHL&tH=3HG`AUGOZs&FopVva zE%J#QMQ6EaUGs^~mFmdTrP0Mxa4GPK@Ah%|Y|imM7Mj1eJ$@Oz0`Itttv))K67O&( zdjIj%W9d5iiL%mnsoBo)-lO=DTIH_J%NY{?{4E&>MwtzF8Jf2F0;eyVFuWHh2xdRR z@scSFe3F_Q$b!Fz^h_|>JO)nL+zCDPX%THLZj@~(AYl*nk(ez!89-jLR|ipY$UI3L zl*8p7h>Q+(^;m8@#m4R4dmFd2-|j&^&piZs9)ljn2;qZgF74n;!uv_^b4utL-pgl5 z`^tBqhu+!de3kx7uBZO=1;}lbMn4AZ2cyjroY8MJp5oqqbq?4hs>+T_zA`JgFQJF^ zW=#X*D!t|A7dF+%Q(x_O$-!okW4UiZD&o}k#vhyf^2R!9_%{{OT4uaQ(0=vO`RovG z>)l@#O}adton%cdc=TzVVRx^Q&c}{dc%>zgND)>wFJT6{ss2B%zB?Z3|AF6@jH@J> zXG@4En=>lOY*>lY2O%?i-rJVS%AQA75@##x>>0AMIeT;VId}K|`RDg|e1E@x-+#Uz zkN4~Sd_5<{{5buYosblv)fTYFqs1)wXkW04eii99DcqroOYqeEJsF`JcF|J!MTSLz zGRnhaXYt2I5i0uA>^`9nDwyEkUql5AoOXFgJQ5h;!H7BQ=Vvy{b4#ZFJ$ZU&AT(q3 zKX~3dor+WAMDsY>%_nw$>HP+SCtIk)7j4IQb-alA{DBMbXQre%bge7(*B=S7%h!UZ z#*fSU4-7fPGAymIFfy%sdQ7n|$zB;OM?d30=o$yE{5En%ZN2shFZm%8m{K5%)n!XZ zq;Y1{uGMYB5y@qr_5Rq{oH#5&qW`4h+CRsLMShw%AG~Ty(W5Y=?p=Aa=uQajM5+hd z?GJqE%9E~ReIM=?y|G}HBhM8r&PsfRO}E^xAyQrWCQrI8>99Wb;K1Qa(O_I|ua=sS zx!gorjwElb9`#j^Kcy0;a`~aHjeA03?`o4jhq`cMZ&=EZv94FMM{b(3@G9%wYkixS zs~)zNe>Qy*IjRXG;XQ2q7Ce@JpXt_RPi6Qlx=d^6`AhC}yk}**3=JJBYu2uZFOVG< zt5Jju>#1NWH||e<sX#)9vCeJX(zc`G)*jJP5fNt$3K}J?wi+yvnvU-3^Q7S4d><ay z*SkyUO!4}!YxD=Xg$!$SL(<6hVtX?Zrl_i%T!XZ;A=eT$Rw#6W<2O5O&w`W`6FnsJ zd4W}HOPNm?J#z!k?7!n-(5ayI-n6p{*dj!!^|86lGUb=C>sNfFe`^54Fs?M2v?vk# z3hIMUY38V4xJC8vE>^kRsug6fG`7?DG}`Hr?YODX(`$4S`BV6|Dt<-;?(e*mDOJqr zUKsVY`0#Q^=y+kdVBaTAzmS(~2dJ{usudu{nLW~8eXKSF?h_3?r-eC{U_zjr-0|YJ zl*ZBs%pY7lQtAXT-dv!Tm79@k^*-(eu0Vr0gj)@LFjE{l=vFDaT-S(y($z+Xpme5* zTilGoMHYob5>_=y!6_}0l3Y7i_aaEGw@IB4{kz_43(brQZNN6HF_}1JE9j%jVV;7n zFUF+1jdKqk(nLz3S{_Y@IMMkmT|OsINSA|`quJ0(6lUpKX5HvG@F!s7`w($4QZ2}n zdpv1B)yVZ|3LYYFyckRH6nX-3kT%^z7F3K(Ekckg&zn#+=wo^8tu)Am!#O?GjXbke zXjWRpd|cYP=nTx$iQfqnk?5R666i%CupQw@W$Q0-z+p9|&F=N|m)##KR*;p~SpC~b zoca{q_j~cl%z(8{DZ}Z`=3TH4`Ju<S$qJaYRr=P5Z4wfm=u+h4=z=aVxas`o!LOfD zfpQlUP~FDaSf)P+tyxbzYF(o{ySX^e^N`#uM3Dvwz2-VEyid4^V0_{abfvaEYs~Ve z%Ja=5w9XG~65;r<<AQyEIrDY3!$7`9m7p+3SFMFOSp9uDPU2^mV{kgz=B0(NYv3n> zZe8?K<JS8v&SdNt<qVbbN%~z+&gB<LALI3!IlZGK)_M2uFRwGX>T!pF<S*psvMd_B zrRESV?>mTjoBCi2G`*Q+`fUHD#gw|+4t1dDOQ*b57yrK&V;PW8-B?Cdef&Zv&I%go zSs+{vI~z!Ko@h%17AMOlcJv8-bcE^PL;9|_vF>0A@j{<16z=x}EcQ4+oq(GeePto& z3p6!}o+v@MsziYJzL^7mVnsXXi4dIhyY}uc3m=s6k>oKY*q0w8Wi}|eYv?bsw&<%R zfN|0aobwsC0A+S<>6~HqZl4U-Ii)c1hXTzLk5<!j?+f^$3x_eO)#bwQl=M@>Vg>c* zX+k%4&5l;38#$V=?8|AOa$;Gz@_bbrIbBs=qtVU0Ig)%g)g0jz(v8`5JLE@v2vYF8 z$o0OZ!_%HX3;D$4A>q6`%#RNu)vG19%NSc3*feng{8rcdZ@$2yJhB?kEvM0YQcRwb zhvMxuhcOmP8ShfklrAd1F6`}{ANM&RGcEk~9!nK%P5^7aHyuDvJXOi$CPR}@0<5p6 zx%(a;HonOIbn11cy>zJ&#h?U<z6PJxzqvxn7#-|2uZKr5wtC7W%;aA|nw8#{6Ucll zFyDW^je_OG9{#}dd|Hc(*{%2=c0lnt1zUT>LOyC|Q4Tc}dc=wBe|~Sd+&*z!qVh|m zmCJaa6Y+lPVYotOk<an(JtH7jf6JI|zVFe9Ler2#=X`C(nqaHr#zgE$k>BiF`PeeJ zcM2hp>gV7KN598<G|NBp0*1J&mYLaJTv>YXQ3oSpMJ8Y7{zV|JFX)cMm-MF?YX>E{ zA%*6D(fqVO6LT}|=}hQmddW+CJq7xQ!<b0Ais{G;&8koFhc!#D)9D)dRE3%TMJ@jD zrr`5S$TfWT>mM&`asnhY+rK3dF{O<SijYLTt6;(miqwgg{@wR*Pa#7wbKArGU1hkq zc6Ct!c%OOz;qG_ZqZ+fyXvg{2GBJ<*KPLO$Fjen_h;DdBqK80>h|}V8i+D=I!E2lM zT7#?nsn}92k=OssQG(6PCaA2$8;OU#alv|&bA7W5OgQm`2R(7~T*5y86~?sMgx-=5 z?T(rwSBkJWX<;#>5cSMSdOga7^Y65!&8$i2(NOC{$H*LdOO-V8Mp}C=uKad<+I*G- zvwi<q#!IJfVSMh>v(F<&6wv9hgWzgj(C_ba<~`*tf!m4FHQ(J^-oyHBm&l-N6Ja{9 zX+ca16P=_4uI2-_;WyGlmK10$$gm2{ps4k%7W_RX^C};^0<fODC&*Y0iGW2KBpT?m zJ$gblTA8vjdO_AlqwbgvSxLw`=!YCKkQhm$LZ(iv=LtnToi4s_ry?XUktuAj^XH!k znkpD$qn5v3m3%I(uxFGO2k(7_olKqd&vj58LufYO2&H32I*cW?qj7<VVFEpXL7u}g z-UY8#Aj4athc2XI(M&Ar`Ewz{OT7!^K|g?%mSiG|$~y5Jx)ArLz?<kQ65Tu<T%HO& z#>pdkw+JHWA_%hkjB;yGUWp(M5KxP<@Bo@FR{Z4$+l-Sp6FS9(;c7y42@M>lz;*B| zFzt$UkUrflh??txk}g{`bN`|1rs2I*ZKI&M9WaTmjAhuJcug9sLFxlm7oq=}dYaDl z3r<dv`CTwP)W!ulm>_>Aa|YeYTjw!C_;UsE)5isaN<w2I^`UNtX5aJ^_y55rTzl%i z<9IWI_y%I_uZ+piQ*O2gWOVYCIU9jxMluUu&$E*}C@xd|ayj7rAb+xe(Bb4c4VA<o zqrt?pb;|1x7vHZRZ;g3|SMA0>o0QyrL=xAx1>=-vDC6H;ONjlmcYP<_i>XM$_k&Bl z7nNg3OAPuHJT0vNJhd*|b&eQ0IWnx6vgnTQ9KC0rePs|h7T(hXBg%E22pT-;3XaV7 z-XgDTy!~_{()Hn4wRa+Eo!1Z6-)?7L8gv{;F^ZIzN2<_Fjh37hLIS&Ki(q(`QIAjv zx3JG8js~}MniNPgq$IRe6%m{T-;-5v92HxEiYrK3XY9UDa>XOEmFH5fiws5S2PqE@ z-li2hoZG#}!0ZSsqW!<Y@H(ywpk-2J$GFc}tu_X2MMzk~7?UtJY6DiGyZRiZBwI{T z<EiaMf=f5N-=7N1!)Xe)jm~#K0S8L-Y?I9;93?DL`+xb_dHsj=LV*1}LQPA~G_Vp| zx;F`4Uh;U!(s;<b;5OgfSaK(Jf!<J?k)lUEc|-}UEcqcbp_au15e!&={1E2ir1Sen z$?@~%gEex-5vL%NuYIu3Zj0NJj}IflR79ns^@0pf4Ha(Ib+-=J^uVD4h&W>8Zge}T z-EBPf7g?~3`tP2blaQEw);g>}RvXX|JGuV#O2;?UN$@schu=6axl-$q$~Q9bcxSfC zFFZEl`Q~zV<-+*{;DH}U;#?vliZ=BF`&*CcLE$Woj)!87nO9Y=HL^NmKZb_=-UzsF zuHgjr>6J0=<^a!-Y1uC{F%LfonVATAstwJXBzrk&Zo@9JW@ORt{8YR|PfzlE-{{ZH zJN+*SDjtl}#jC{?Lkl4mN0EzpU!5)flSv$n-Q;~ac<gz~g;kC~Cv3}+_kYzQh7z@~ z+xL0uzc{B&JXAevF{kSE{%fD634T`P80^d(a{1(=oDcgNxzh91jQCYgyV*vrelTIU z@!n?&6IVh*T1lI~)VE6M_`mLzV!q97-4s8j)MDI~a&A93uCaP+GU0CVP-uWoK>EpD zg$m)1KWx_?^_bpgwsZIBVLm<(`oQp3POC0G>d$B2a8rd!KgZzi#ugs&1RZ-`Ozv{& z`ose@EerCxoj*_;4JgHsH3K43Qo;V8ulL$Fs=*J3-j&~ax?Z%x`^hsw#nEnfv%V`% zyHLaEjx>Gu{EtivyD9GKrzwMiDeHs}>f*ZZm)>TpN}k`~SRIsn^DO1fD;d!dJ)b7I z%20J<l^G>-@`PT7@f$%;zO%S`Nxkt%_J|W+4Wwpq%k6D^&#HhOS<LSg4ZWRPBW#}| z`#qZ_8l&M8UmP$X!~8sMJ?x)HpS;#Un!j^U2qEpJf5#Kdf(!@YA31QGboiGNvDpjs zeS$Z=o~U}Du=$7TIiWBZp4#`#NWQlQ95XtAbc_HLuxFeK7<uw{?3h6n!Ej#E#>cBz zmmmSxMZo~_A$Pks7!>Vo%!%4nk1J*w*FkbMw)0*p3(~plvM`R*qC6ZUdqs^6GDOqx zUw<^56bvPNP2JAE^jKaA)N^D<<Ild6wZ*}%y(2XtI7z&~;-{*c`5%8hiS!L3n@>ic zmPf!z@w)n)?Nx^`u?s~PLLc0Ug|hxCh{;){LRFd_!0eubwdMzPnS85Bq_^=>G&6CG z)dPpNBODgVIDVk-5sAj%&XCc&XF=fwn`sMh0^#?O?1#VaC#|eUt-yAM4p~q1gVt^k zXNqfg3!{~3fD>JVg;R*II1pOCG;n{%Wq=gAKv;wOKZ(en@wy63B|iuUb{D)N8EZ(T z3pmP>)gg@@s<;lxX`~d>n_WFZEkGJ3+;ai9CV@O+4Uv_>(-d#aq&Npg!DJqRFrO;8 zd@fNIu`B9EgIG3}X>)yCHL>Kx!3^yg0bk@&eD6zcNm~vgaC}K*AH6E05aHrW57IO& zP8hZYi$>2PpCezh^GK1QH{Z|}9R?$*a@&|oj>C%xo-#cNl-(Sm2h0#fT}9Yhw?>lx zS+M6W{&=LpC$-++MPV>Vsq59{G&&`0sX!&RCn$|&u1`Iimb3)@$MB<A!AJFX&!e^i z3zNvadp1|nDa*Uw9j=03#2u?Ik9N*6w534Lmh&x@Dn37NKT7nHES>7nBcJqUyl5fx z{Nk)|9m+G5bNi4MEg4qK7zJ}7cd7=s)@p$v6{QroQ*rmh-IwQ&6Z?Q_*v*#qE3PX) zRct&k>wUC7F*8dOph5pIdSZhwaQg-fqE-2x#pjNU$7Eh<G|(4-NolV9aM4Ol((YQ= zP@67Czkyu1kXW)d*+5ww@+9`Qdmszx4m)ScBGm6G7EaQT@Tyxu9*cQhLlZ=4`wD=k zS(?k<f3B6`#(nV6EjmixHKij7#B?7uX&9I`kKIm8uzhQ%-&Q8>_1>+fe~Y}oWP1ZC zMN6yHSW!A$Cr@)w6w>+Th=eS>-Jo+(Br(+)>v+Czx$x?{SE=5w+N^b5x<wudqUgy= zhCPAN3GWwUN~3TB^CP_QssuZ|CjY&;a=;Hi3miog6@kt&V<Y!Ty&eATWHbr&()>}7 zh0#*$aO*J#^rCdL1ieC83`#F}yW<_ueqTwt@jg5eclFI*wKIY&^|IFurZoR_D!fSr zOJGD!S<hJnadi_j3LZT;sQnhHM1`2Ul^P))qW-=&F~!1bBO?aAC2R#*y8TmN0k&x0 zJY(^{(%N8L&~nQ1H^k=KTNPu0OL{ThD;#mPIu{5l+@HxJmr#ekUmM5|);W6_L#<N> zbI7uPhMKzR#=j4)|I+38kfc;*SxNt<rzEWZLuo1}qK~C!A|a(*X8WN_#%6oQdw4!s zGI$-9zg=ooPbe#P?i^^jCz1WCe=U+fJBshDBq}^11)uh=IibfbB6UyB-c~AyX#G{& zl(DCh4nxsjsYlRV7doSp+a}9^=p2O!^8R~x+w{qu4+1oW<iYj|oN5n*;p_#+51iJv z6KxGMnUp5lR5}j4r6dVWZHsq#4)cc;Xz2+fOH>_{bq^9cv6LcuQa{%{juiTN28T|I zQcS-uk}5kG#2EuZyJ^P6I^jYS7VAOwFXIhzG@JX{dgZZ0x#61(6FOxg@e|*nlH`hO zCstc~oa~Qo35}ZLzJgTN@j|`BnnsTyzfJx{#jf)5!EBxrZi0FnVR>*zc}42geO{2l zIdD$`+rWMgmu0}KDStD$wWNjY-xoM$`I@GX&t&F_Iz&!TqWa?kE!j72Pz?1FdY(~8 zqD5@W*&kmaUhcwdV6K3Ptjz@>8pI<B4~<xergaN`TK!03ze4}urE$h*QYVTavi&Jg zEMqogjzHgE+3KRG71ef~!~rW$K80Q+0BSE5;QeT$TY2CboX`>xuL^O|CUKyv#SSFS zS<!@-s_7}G=njcbSpC*ZprQ?ipl_fF5Q>hs98rX<9eBh-*GdHj&J+sGk|FiL=fuv7 zoJWEc`+;b{xJCRJhW)(tjATn3O%^f1Z2}R539KfmhN1%N-V_0}!aPt%L$CW=W-%ZI zV&~Zf`UcGF{t+OLVBx-i5)`u?Y^Q-UpbyUN2oVI=z+v2OJ3V^W8e`njciYS)0WHIN zQPQkR+BJ6jhy*IYTJ+yzs$F>63@JY0aNlZxRL#+MN7G*V`}PSQXN9faYKZmhwZ^Qs z#uNVFS#MSMqi5Jmy^yLOAqQc|1L*4&;Zq3Wq7tjE!uH!sJ4E3bsjvUuAW0&KQ)2`* z<8skrxEsfuUEyMP?OvWJ;k$Hb{G9I76ukAHvqeeYGQ>TA$>PSB*^GH>j+m6}X{1E} z4fjes`CVKjfdeqIrF=8rflL}tJX0V*2uq(cTa4oc_ljx5<MQC-%9~;1)K)xL6OVxm zey?zrH{MVOW0wYY{1>SyzfjdVr>ls*(#IAJ8ax}*$1fLjF`P<~R1C3kFYU-nUp(VL zKO&VUHGZ+5Y=~Soo<X1O_TSOx+MJXRs3o05asuW9oaP1#Bp9w3^`#R<Ix!t3VN5fB zz)pS-;xs~j)eK$kOzo?T{4N?K*@1Y8Xjp9)$(9T4R1teG&-o|oMY}~Obb6Xps+v}U ziv{0KbuVgy+60=XN6C+mP)f<TMPLeisuA1mu#8?t*%TvHFLD;fyW)j6N6K8@aU`{_ z-N(i|;1)Un7O)2nYNl?D)-e#K;B?*a0BLMW)3{uPCPtQ6)Vgk<Dt|1&sA5u+9U#IV zINqZ^jg6kO5LT!l1}`*^eg2^jrF6c~dut6iTJ``~)uPqD>~VDczadnW>%t(vTUfSA zV;H_?tE<LgDnf&;Cqqg2dp}fwUsMZ4(zt@{lL!}cAh*Vaf+uLXz(Z-djamE!h`>*6 z%GXwx+z^yrtR)<NpT-}5E?m_dKh6q5_jkIGGFSp`t<YWEY&z&)_!M2dy(D=2uiz%N z%i6&2#aOPHoFaU9)@F1p@=!)FgF)Un$oWWoB(idv`+tlIjr@WwK3j6hCcF$A0IsEx zRn`Z7#L=bF6}TMTn-^o1J2Ozm)o*$Hy36*%a_UaS=8d#@`-kNyn*VUYx$NI%DF?XX zWR%NA>a>90d20R8G|@>KiuFn%C#(}=zlYzbZN289(#xSnL5PLKwp#|l%YZ$})_%jk zUpy9Dt%IrmzTZ)1zvUMrnEX3%?xA60#5XnTRbi&mhdM_m@KxveUe|2TGSAsr*tjuW z>Auv(&)S^KlSBQYbdT-#mTA9Sm1$8037{!2wGx*H+^jZW^d|f7p)CnZduD}2g>l5k zp`tsTE~SJx8DW!Vp|Yy=$n>xb!+W#ZDTE6L+j6eU(HUl=qK^v`ISCT`dNd||HE3^@ zrqk)B%>)<DO8mK<f`UNwM4Y+#+8At5RO;Z~?VQkcr4?2L+2Mkg?C-~96C-&8d{;s! z_J}^N40Dd{A0U}D1uiW`m7iA)hI{X6(cRejRX_UVKDHm&sLM={Jk&kX`g-=Tm7Acg zzm;5O9<}t0%VxK4at+38wDp78;jXaoKRq#i;4NlcQN)oT^?mlw&`O41uBZ)V;a<&k z4yH}LpJGs7Y2I?BarH>TXSiuGs0W__TVNaBA*?<+eLs0-b;f=jNx}oIUr-__Kja$M z7eF&JuflAs)&<6>s(1KstG$MMD{Nm3EKW5BfSuTjpK&jTIG>|ezn9ECjdaU8c&V<) zCyE_2#|iT?8*HL=NR+?~fSVu{3oENK6TiUy<D55L`F8#(`PYi}%YuK|2s$zRm+166 zrrYAG5Fvqslsl7jez?+Hw}@1tJiE_%&~MyVD%9hE6G!)gH(+<05&;WScrA#H)!`n3 zwQ~1~pY?l5K@~CpU%}iJRKQjZ-?gvvc;Rx5^P$(ITGnHmy0xo2lM(g2yTkY*NN_Ec z^c{eObScxLlSqu^Urv8CDUl;)01J0G7F9OxzbJA3YoXa~lq9;-S!$#KPcvLQt!XhR zoAO7x*~8jNBYL@|q0Gj$045()BbDvcLft!a9z?<YwE$ta-Piz<fWE`dsqA)O@Ivjf znJSyNV^I)RJf|8^&@krCz6+cS6W`X-8N`(3Q^8o;&^WoB!yX>Hf!o^3MAka49uC+D zY{k%=-$PUOVb|?Oo43B0DGSCGg^;Hifu;UJc|p|@RAkCFU~_Sv^PL}Z8<lY)1q|;L zNsWWQjvh*=WM%`?9*!ny?I~{0Kn{*bmt76t1NX*Pscr5AR=|@<ovb#XL$8IFOC{3t zcD#{sD96gF1>1_6820aNSmyJq!d!$hg37y^qd<H@gQNb5$oyY?s=gf@h9s>(0y>YK zhMsTVtG@A98(lzXZP)?xHGI!_;loJ}zRnZTC;3BFnz&e!HfdUGBpgZ#pYnZ3Dn#E0 zCXvL#)7zcTU!QcB#Si}u6a=S9d=7$Qfm=~kW`qr4Luf-Ae5O%}2CYDzP3R!~J~H6e zCUwHlAKv+H)^M(`UQ*Es9$OPKtTw=5=Be<TGBp!ID7@a55GM+@QPb6GWZ$^G?6QK= z`@SFVw=`nVp(Zb1+k9x~^{nfO4fNjJv@Yfjs7re69Jsloa_ctYhzEbQ?1w~d@=M`0 z-~D{8*I}YyjFsugGmB`TMztN|X5_{{@s*kWF4N?T2rZKU?#<f31N~nra_)rTNBZS1 zHk-WYQ`%%hqhx6qE>{CCMn*H#H-c!T<?Ti=82MA%t=JCNZN_;4^6Ju=c_oziCNo*w z%Bi_s;MyH~k%YrIm5qTZl0!>*w3qu}+OcwT^x-ZH)EJc@P6G1E)H>UQeb~wD@itN} zqxo!Moxk8;O}TaI)Y+0j+&j9I8DQ7nSqFBSyKNZezwitfgC>}dF5r0Ty@gpYb}(wD zpts`FRIi*VVCQYOSQT#emefJ@WXoU$_lJ!-M7tD{ovQyo|D4E;)b(#TJ#IWy#b6>u zt0k>Evbi<s{L#7Zfq3s(XxOUF>z;!TUy3O30bEQ2{Z{TggSS<#THl6-dS!Zadv)XT zm19hf99mdo{6AU*rq+cRe|wW`u~v$q+N(5y$MR_>M(1w(Ain0^N0pbA$!trwhs5^v z)d};MBfR`P)9<JL3!cy;cz$p4QeT}d5vEs|r$yZU*z;I<(e;J80dK-5ylQMrBYCWs z`rO2Q+UiH#Qjfmgdy{!4x1Ri6fgMG@n%@%UA$R{1rwLch(9c<89?#P(NmWjgx$c{M zW=YKbo&l;L2g*BpRr0%%Q4`Lo42o(=d!ZVXDym)~6x=X`2T{c0-~wAzD9g?1ru#4? zCN1;1BQ3#I_&HDflOpoN{*KPx>$Z~DQm>WGIAH$XxaJDersP-}YEH?71pN150U|kk zZLt><!Ce2di=x(5DZihm@vKapeuyrt9__B1&fsT)7W#m7lx%}6n$VI8B%p6b;@6PS z%opo6v<kS{P+?}IP9ugfOhqh;kR%%Ech7`IodHjlp|r}M^*BS0E{+GFD-RHgkKoKS zA(Jx;ze9P}9A?WEQ0E;q<6%LQh_@p;kd^5;yqOX;oh7{KwUs}5R6!3;&8s=)F--Gh z=^(O+vdil#sPX^k%Oc(rUd#|Q-i6q<Njt5<Gx-OqBFWhgB4@f#O-zLBr1Kj<|3Z|D zQ0v$FI9N)`5@d*;u=I+gO%Sjwi-zLg^wxF2R#5l;VJRJ=L0-VA_mp*xaz<H4JjMS2 zaxQT$t023LOnNL$(vfud+8hCu`-ePmcfz{8BuRr#;1cqDqV}$dljc9X?9&I!6QsCs zpMRI=xzHHq{+l3r?e`ekYnAwdH1g#|>k!*7QQ{FEmxK#`WO3jkSst=vFIoXx(S`Bv zY7_YE2(R;;Dns&)X*qD_zNoyMH}?)DNLv7Y@vB;l=Xr{w;%?=su=pbSM8Bxfh2MM{ zi5p%J1BXEk#DV_Bydy|6+{U3K_*7*_|GbN|0g&|@<dxZ1^&lC1K2dyK&;GYHUhP+! zjiIqekPT^^v#oq0{Mu7?2v3T<H~G8#%rshr=)9dMnR6<PAln%QZ3*$fM@n`Z&TWRS zmrS^=KYxEh9+?N8Un2-*<XI#_FR!fhW8#X{{ok$$^rA?pE~8>ghIQ00M&i`FST^^) ztR205|AU~|g}W*IKc-zcaFvp{DF~PSP3HtY;|u$P8T2<%Zq7AcigK<YPJKOUo_l-5 zbsRs6?n{DmkEzogM5GEVd!v1lYA%eH!h2edmw0=A-VzeC@D8%QX@%0;KVO6B081HO zg&b$ML52~&FE-$Q<dt!x+Y8&0(|ylP*lIyEybjh4JJ3eq6MCt*Ygm|8ZPA&LHGjXz zEW%Ag7EZ++t(SiIj7t6E#dkp_m0taQ@`K3F>S#a|?cO0OVKrMR0qVw1TE>mnipI`M ztjPp#aE4$nY~lZLLG`scD>(hR@yK><A(mriEq~nuivp7lglp(QhKbFPMuUF`RF7KI zP6ZK1G+--40qQCMJNz0|$!dQc*7CJ5YpUDkP-;bjZWD~FDA)mmO$f245>CUtdAOo4 zhn4#`feUEbO%cHEdTccnTKiaw)$3%a^OW?Q@9QE=&GxVza(L<*&~JA2HE(T!zTHA` zppA?Bw5iG`&F;H{dE2r-kWZboi|My2yfu#L7HS`UTKnka7w$}KezqYrRCVl^ytY)Z z)yM^C#C|knhs|UVrw6uWi;y@BOrAKdPvooBx46xLFUlc^x_Bx<arK@Oz((kWqlDM8 zEB+F%Tol3a2jG8xq+;8b1c!wxS>iwR3E>z`>gqjihn+o9yPoZHEKRmudJPS7#1x{B zHR@jIf8jneJtshjnlMS?8T`zDDi;06<_cW$#m7DMZ%OLthuS2m45^i@CSMh0Tsllv z*?;$z42FZLHZ-xi4I`a01N&dRo+p4YDMjU?Q%!DAW|B1bqFCfG@|pvUW`k0$TQ8IM zf5N0`a}xH+rt%K1g(px$LZ7>w{Ec=khjY_U@b&gfrD2%@eiuG6GL>tIZTA<Jr%CiQ zHP)!7=GM2KO}lB<%9$g9oh*x$D_cUJOQTU2v#y;2ux#0*uRhdMS&mKhYwtZrF({Rn zwZ?C&rAvns6N;3-kVR&*+06LdkmS*id>uK&<5c?fN0gtCK^ejIt2C~!BRtCe_{rRD z0bdcy@FsQLEE~QYo)zlJwcnqft<OY_kds&bjm}nHhn}-nKTuqBmHL+3eJf~LG~U#d z;%U*)ISz7Vka&&xBw*{Sar$Zkw0O9f*&y^LP1LG)EZuoGT>jnXwW1<h7wlERlAk!Q z8^6*l-?|%IBQ)#n^jQnv<VNH$Y01mdBd)cjAO5%H#3nQ|viGX9<-zEx{W`avL`e=b z2;@y*T)j(1*@Ot&3hK?U-F$e>0u?|R`eg4}p#_`nxSLzCgK3gM>wl|;ga+t;Mq)w> ze3<pub5|iW6tG}xMTq@lA=B0C%hE0PS6rrgUWyzJZRtqvd<iRlz7xw+q)?fC+=HGH ztfWTZ^si;PwQW>7RRw>yEb;2&ra*;AQg^q+C!AbLe@iT|zg362grn!w8VNqtA}10E z<KCLA0;X|>Yt+A#3{*sWgPqcq<Xfe#T)&jsi60lDKpMo%Q_BxmxiNx1>b|Q$FmTY1 zesHPhi(6^V;}{FI6n~KUZ=x>=lhsm(z1gCxgQvp#x8qmeoxi+yD2&u5NgOm3P~mQT z&%5Qy2Vf(CU6*3uV5TsVaDSBrq|`s{qKZ?<JdZ3iCB-hm3BJ+jWAq@PJH{cDs$m6+ zpO3PBr##Rk(L}@xwubg7AFk`C&LpCHk2(0S?4Kx*MnG!9)#$tvbPO;FeNc*XA;=h> zpqff9jb0AzdXrT{Vm{pA&>(4W>f+T5g*hJB<qGUg`1PN}lB`c;*)-`Hh)wS@KP_5b zZ0EF*T27hI1!mMJFdM!pN%ed5^Ek76i!irmf~XOr<lP08ArfpC#@Nza#mQq#_rv(2 zgo;CC#!7x;SeE!^xu^{H@|H&}y%+_T$u+v~(yMCdfDKw}5suA-MilY-FE_J^4Y+@i z*RnSZ|MO-o&1$LbZnCY4^V28O<yN$~4i}K)fe6?8Z^p)MH=-i$1swpaBy(j4>F4jx zZwvbx+*D`;Tz66kOoeC74leZw)$Eeb@(ktsukSCT2<@NU$Uu>{_gqhZd6-%t-V<2m z@q)V#f)%^3SgOZ*C_nhYNx_9$q`r_8oN;npOwA-BH-+`fgK4SuT%=W-13vM<PSzeM zUo0K3gSg>igk=e1fdib4=nc{~Q!(ZKe)feF+i;Bj>jZFe+<X5Y^K;Q+m6nghDUhG` z1bXqAB(e&u<}F$3HT}9eN=tp%<+Oq#eqd9Y_FpL=LI`-3-ZO|j>kfE>kZY>WijyYU z4TXY}06ugJ%va@h^d3Ny)Q_*wk8lt&9hvdm#s>?y46w449h5!T26+1}{{hrDc5KE; zjv7~UrlDhMpUI6D`V8EBf91|Gp3eYu1K`$UpZQ6UZQ~^O(_mQV?33=(?_y)mxhwm? z4WJDjB-bJOvunT49kgjYZoPi^l&<f-)J^UijwON(%C+xXZNp{Nrh!y)yn)@Eax+l= zSt&8<(;lX7`6rat(^1|Qa!eM7#C#Zf1fA8$2%yH<fmjq3-*xVQbDl2cv7^7wQVH6? z+hu<ah|Odq=l7Q<cA)F_M%Qt+Ej(QhaWwC7e4|7$NB+(G&|$NJ?`W3HE&W%?GIzYE zC*=un|1CSbCgPN~2waOK^<CO~5DTge(t#T#r$q}ydI_rLrC-aWvnxZ9&K0q$ro$rt zVi8-+qh|zRm;$i@>f>7<p}WWZ%$xX!Rqy!vr^kj=!gCQnn{mM+zR+{IhHWqq-b*Xw z^3L(c;TYRtn(%7K|I5%M2((~Wfw=qPM?!012N`TR(wDK|mJFArmK3w<%?6v8WwwQ% zO5##n8pOb|ST^z?uJntIZ53nuCo--ZX+8N8OrgF>5Ho2pxKks+MB%pif7E%D+e;Gc zVt{E@Sp&l2a9lpCR%`fhUdlm9LYm{RoP<ca$o8Roo1b7+!$;P;vp19GnZ_MCZ+|>5 z<KAk|3AL|(VVb1QCVXA*38iSlM=5SD?Ow@AoeFYbLwA|Kio!vVZJWc<OF}1<apZ%g zx#dQV5ZRw5(Mk1X*MEKA9iWDu*4WO=BCwv#KlB2g`Q3hcw|;p^#k1(I6e-zcsScIo z*xg)8sSPxGSMP_nLP^q1b$_sCTD9&qG$>nfyCL!Ne59U%UR!L%UVr*M#kCgs&U-^V z+YG-Ti#68dWr+oi52tAH1a4@=f81_5@|1rr?DGZbd!8wacO^a0d!O_xL4++CDlD^z zO#C{9fn5#m*bsl!1_=<AJ}=4!Lt^WP<&XW5hKhaVB-_Ij1&r+d1c!ruP>7_aDda%u ztT@xEj4j#5c(dH}VMp7vrQo`Axjvz>w-6U(PWFs2N#(@Q)5Unhul&m8!J{W)wmjmv z8k;?hyn1Is(4Q@tKDI}Kc@$&O$crANTk8z2_v{Kh0~cRmL!^eS=D(DuM!T)n$FiXh z>jqPEA|W5^ntV*)KXa|H3%GD2f|bVP&==@yrTSU3F32Dj@&)50?}%a5T!bDLWv^xc zyJHuP7Roz)3R1^UNwNno1wAJ9KRke2IG{*;b-IM<Jlt><!Dmi$u?{dG(YWvKmuul~ z^+&by`|wU8Dt28MVdciS66ew_4iA<4h)}I<oNW_o5k+bWfo2>6qBtjqPIUQ=fG6le z-!Nd$>|H$N*@y=VXes>Ctc!Ff)h(aSjO&5eBK#leI+^ER!xgwprb5f1qve3cuhWOz z@lBp%tg!CFDUusH7nC8tfZA>4oX(OWvQpQtO+WCj1&^+27DY;Iuhdo6C32oZXZVrn zhDh}AL;G4Y&6=H3v4H6&s~9Wh`w2ax&yw#??xrpqu}x8g5*p4HLz@y8h#`R@+tMP- z@Beac9wi#?Mv9V7uQJ?l7@cBGZ_9RKo^qxnJe9!(>-j}kgpA@CEfOLMvAor^q1df1 zw~?nRuHyb~gJ;*}7M2P2^N;*i2Lokovk*9F;KZ?^e#N@9eI(mi_4Vnub`pxF+dvLY zR2-x0)0t}Y<d?(f*}nM|bieovV0spZ_R<1Tjm&>&NVBn5^gSj`yL|gT!h1VNjq6X$ zs`TvQ`daSJjH4?_H_#rw)ui<UeMJ)t1f)c-S^+5s`eqq3WWSPH`FG)#oSPtKI0s!h zw}L+KRy13RCAOzjegt#5){O}nYuC@UA!lpe8Ta)GBjTVmqV!pY;ky+P@K_`<mivK9 z9L-+&2OADjG3)EjA}~02Xc?m5WutepJ9!V0S#1YK{tWsTQ=pN4tWgv7`sAnF%zxMm zliW87-(s(42QscEX`Di6@7<&^auk-^LYxHBX@5p<xGx;(%#YaeG4Hfk1`>wvK02>E zd)hF1sw4nouiD4tPAq!Xl6;;0CfaSc7aw+tAxGSkD(R)ZJCK91f7q<amh<wuw`oVu zNNq4#;xg>QYE&3*1>gAXIR0F$4i|?Roj6I*aWL^D;&&&Ckmpd+jn;K2@46%Y@8WjP zO<zTrT2}RJIdA5c!}xvK$Ld*jv&lEUo%#-b`>HtFP-Iq@y%?<^Qxv02`JjLv;3iaO z_DuahjQ2}{9G4V%#?a*vxVz37BkoUY&*xaF00~wq9~9I|Ub9m>R&L}=Qq${=5p@^d z;od)e%4UW;ECYpdEfTS>i`NATXil5;(|+5TzoCXl=5f7T6gw}*Jd9dp7JI&qm-3Ui z`C8yO%t^>;#TTX2DSmg+Yijl6PP5nhk*jM<_Xhig3a2FMTfQ>6CdTqws}D_CA=vL{ z@^U%C7d$CStM)|m-Wdj-y0u1~p3F=}GO;LBJ<0TN#i1-)MA=NwANv}A|CQo_F%XB} zVMQ~W_N|7S53(FTQDDD^Wx)Tt%Wa{2i%IVnvs6}KG_v~+hL*=8`97<%*k*1fGrKTG z=T?yS4l}E-+v=BA>#WCzW8u~Kh}A5`qD!xbO{Kq2w75FMRcU*2+C9<mfZYbHLt<Kx znW7i{{Ksmcy)sVk%D}r2j3j1vzTdSowigf@{u{X7Nbwg}JiV?Gc12C|pH|$=gB==F zG6lH9__X(D?RSjw%K%GJU|G%6DgIdsnBGGE<}w2UPjg-3(-j2AXSHM-x8B+C5cUhR z-IV$Tex4rDAj|)TyX`Q2A6m!mKaw=d3DP*PBc7|~3F{8Su3du}jJ0pQjjH8qQW2@D zI^rbu!?4d%JhPHg$gUM>a<e~8QIBf+iPhHBe^<g^o!vtZOr<a<2Lls^Z~8vi0P)h5 z_LDMKo>Il7za$8<I{jK?0c+dSJNnwcz^tXmuQComajnlwdK`^K3DRJnsc8_LyYV#j zpdDmKV5YL$F5zq?KO;S%4|%u<N)e{@t!Wtv4(ISFs82j>cc^j^opH@Waq3O`kibzq zj<z%&_H&3}yJ|Y~-RUY(11+Pt4Z{U~=6(NpR*Lt@kRW_@-}3wlDFrvNg5vI2I5gfb zqC~gSTYIJvc;9uRgTIbkJR@nY$Oev+)VCu@m+g61Rs0F3=QNHj=u4|WB(Tv)iFPJZ z^2fUj@=snyS{7}2!2rq@%ddyV`k$Ahra?z!-lduiV;hvm_C=VBe2?C(TACQ|8P7K1 zWpu%FRKQMPc7I7a%rSv_M)(m@pxxH5_3oknAS;4c#k0pP6i>Mk6#dVs?+jNhm|%n9 zr$1<7lz*yOSEyLqxGX1A!xCB2FOhK`(@s32K+(c~L&iod-QO5nhDp+-0wo0v5?foV zbH-D&h&To~+B-O&HyhHEP!R>cM4A@pusPl9DQKYRF6+644t`#Tdcl2aMtia2LJzA+ zB74yK7%Qq_`GlC5a1SPShtv4U{<TRJn^j>8YKX1;XxY#0A0O%f*ZZfGJ^{Np54?Eo zLaNFE{@4(T#~kYi5a*A_xUh;bR%ZwSNh_M;I~*7A)!PnrQ1+3rwZ<4?iT+6}fpci| zlKt{cKY=A0>>>|?VR-mfZ)9`COa$Ew$%qggdDZVqv9MLvJ;bKx4BPH}Y_EKb&`0Oj z)~2s0m;M9kV|)phf+ft#YeSS^XV4*ySWWlxr2})><k-OCm-S+Vkf|N8KvvYSoN|*1 zfr|=Q>2$EZPLR)a#|}C5kX(9Tu9$AwIzNJ}#PN&nqgfJfSB071<zF1=LIwmDQzOnJ zidx!9`Mu-gx$!KebEF#ny3w=~R1}0S1gf+qVldO-&vLbY{Eue9)BQ}un|epHDbV~i z164ac>!R9ueL4SW#DYW4oRjpiZMDXB!>8BszPpncGgWTkDT`2t`DVr0<@Uhl->Mun z^Ssa+MRM*StE1-dxYsmRqwf|M$akHT_!@$tB6k&fZ2IHd^EOTKNGP%Ek}bI$5*^aj zlu!vT`{t<~4Hs!Ue*IjD?4kZGj{3?zrq9Z!E<5_r=Ck3=8Q>I|?#y!r9@B!Mn{z*_ zn|p5wYrm$+-z0@zj0&p|`;JkBSa9%o8%0p&?mKV|t>Xg!$rAom1Cc7RWu|GbjU7Ju zhQ3s}2fJenWv}-tgn-<5d?8?8kJy&4W&fQl15e864k>M}?f#z(_WmQfjSOEo=y6YK zZ;jg8>`}L6wUs$xABS$2<u83!uz^R)S$`IoJMU&piM{J?XfCXhwNAEYiB^&c9a;Ky zTyAl<&bv}<+@7Ol`B*6%C79nlpKs;6Fe$cO6Pc=QxQ(mNmfCRWKdaFCP{i6XK38BI zuf-OwXP@aSOxb=Ab-)AO9^k3ZGNJs)o#yBsGrD8_O0Za(L2E7G#5__ihTGM@GA>6{ z?}G(-B$F^XO_N`7v*e3gsc(!hEW+cE>uk8HOi6mwC_{)>8ulrRp0KFC2gE$^24PHB zS%~hih0~VGKUK#-<23WwW}NjM64QRif#)==DHT=m>~gg;z{+oTuXGc;8E9l18cgSA zJ#e`<H8{VRtPp%%N-`_#%8=HN1g1MruVKEB1t0c@(tc8ZIMD}@H?b(&t6X0tW^Jl? z>tW99eM}ieZ`vNE<(T;X#4Sp-LhHzQ7h)T%(Y6@*sa2tq&u|X`(o#^WqG!wg%G38_ zT1K@EhZ)CMO763<2l`46)hI;Hr(-pZE*rFVXb9u2Jiw~T&gUOhgqKmUEx6KBowH@A z_W8wMbrSthkaS;1?F$rE+n&~7E~Vi#;~pW+kzzD2H2U|V{_+_E`Qm-GTPr5ayjb@F zuJBkv#K=(#zn~Fryny+|qM!-uZx&Lvqs1qn2k3$TTLL(<7-LM`EIWuXev)g}z((-K zlEfD$20I|o;p<KUmn-hm?o1TgwSuGDd6#k7<L|R8NIZ9Jhdz9+ewyQymBazsfu*#o zBZqZJ2-w35`Q8S@se5nkQ(Shp7lN=jg89HZG&N!uwF+CQy$2eiEL@x?A$Pln*W%Jj z3`Fg)`FKDHagj`g{tJg1FQZPItI=D4RuPzb;)2{KN1k@R5Cx|`sa@m&-!VQ(4Sz|O z<HX(lr?g@hY2CHx#}_Gs&g~79z^1xijqy3#?n1C7XPISoH`MR3P2#C0I#2wGFu_w1 z68f#}Pp#fs5%5*w!iBQRb;t!m=-%;mgzs3ioXA|?4HCjow$1BX+^7s;lQSjHL49*( z5SY64)Y}l7ZKe|c&QhTyj0@-x)aa?3T%1?QEWKL|sQ*$utKZUsGj&5loIX<FcI*x; zUGPs-RB;qm8GdoL7h?9TjX!-~2+`Pwr#b2V(l_HGKFE2;eZ}8Ko7`SUIrI-*<;$mj zbjj`Pt^St$CGK{G;e5iQZ_fWrZhH&z95QkmTBwBlZ5TbCXDxzV>^6)JSWVMwz4*7R z?-6~^yLkKR*iIcIi5pPbW_19jT^LxdY@v<I(<h0s%V~!}l;v_vt)m-fJ3w2;xfP+^ zGM?jdnvWsh=$dOdT17|;(D1FpeADjN&tL&mZfnjRC-r<=ap86PftT2Qs-ie47AOs3 zY_pvEJ}(>$RSuvPoJc1y)g*o*6gTQcgYZlqZ)syicDz7e%q43~m*S~joQq&0V=&N* z>lZDve!g~U@~aXE-MPH;SdbTWc%=-(g|qtD2M-N@a*jL-Ugt$E@+!f|!Qz??Fg~p^ z#*vnU5ge#ca%1<YMsgc-f_%0clWKZTKUJQnmaRy2DO<j0HVtTH`^Wd0vaad5$_gz^ z>8>#<&+O4s-{zMpibznYI-j8AOIf1kG@dW9Ew@A3!Uv6<KK>9EBYDj&zn|8pHqF*q zNm==9%zZR;rf2=u%&RwfTyHh6ia5npYG)YBNE;`!$yP-D6yhW2_$PJhV}cEeS-Sx7 z`qtaXm(y5zAEZ=lsmcHC0+?%HzKxVeUkC7Ur)6`y<-e@JTO}jE0n*N?hif;r)HqXz z;zyMB$<39_R@Q=NkT`LXy4r#Uq>toWQxj~i@%#bwK0uQ`d3j=giXu-KIb@$>y(H-V zx3l2>jlaV7U;*(lXV%|^X2YUxR&Rz?NnPYKup;0>08XTZp<{jko~@5#m`s0L@w|EC z9Y1(9PvE4C^({11U~0YLGWz1-`;{}ldsU`6^y))z-Wejax__*!8mAn5Fzpqj4lHfo z@U-qdvGK{+@3$0k@(TK8cIajp9xa7`rJ%*G$`I<O5b3#3RrLLR_Z{sGwVU0Fo+jb( zQSr>K6h&0owpJ9$gO#403B8e?p2;F+lHCGxT3UUZSERJq^q=!s{(BzctCQ^UAgi21 z4s+`xi)B?dGfL;%L%;K$>@R}rjjt~=8(UXljaQ-EL4t_4^qRNZR1~JORPYCiqgkUI zqtZL9ntCf%7|WEPfd3Bl*#Bnh73iUjw!$*P0y5)Wlmt2BFjY9|sn#iL?(YGe8NEp! zme()313tz<l4k>1Pg;;<71dH{?JPx1HmTO3ItQx2LyJ%jNzU{B5>cHSVpoxZzzOD= zVtHYi-}fYT6Dgc@S_tTDU-SCc@q_~NCBL9?5a)H&vDpEoNDUkB_`}qzp*Tc&b<oh8 zocZ<DTlOtwyZm8VQ@qf()+3QG^6xVnua+sb+RATdwW5zdYAcjzRPSNnge_R3dWx4E z*57N(a&9EDdPL??<z<H4VZ9Z$vL7}KF@Jy4LKe~T4#D?k6+>0w7>J?$h`Y3GaS#$q z$K6se`j{m?(tDTKE(uWo3$!&HxS}s<dd@$g^eY~)6Z7Q<HY^tF0uu@C=*x}RR;cpb zlq8}i>DX3Z089gHBE>nXnbEt@`e&q5*d$c)`4I*B(D3xyKD5mEaKb40P_t;GYdM5y z{uiwl{1#~W^$dK79obVgcY4NFeMykO-vZL$h_e|@cD)}J!bvL`$pB2v_K_IM$$=?S zGJzk{0}=!pSC#|pfj*7wt0=e3-PmnYutM-di0u^V`yGHgr4M;L;=L%_v+R@4IB=@T zX5)ku$j5kN*3pOFv0$~0-BZi3dKO1<^Y38KWOK-NC0K!eAjxniL|IOMD%8-SH~9q? z_@>d-L|E4-r$qPYvVv^Yx5ro_A>z_8tB6+~)DKd~m!AEHxeKTKO@1SNr+YEh(r^Zr zSXoqc3h(5J<Eag@0}0YC{%-a9Z_X_Jw%Dx(ihr$As&q#E87qdwXoxBmir<mO$9c&N z82&@d{vGdkx6Jlhzxwh5GOQq!T>(wHK<DOSAL;(LR<`mpmMJ^rcq|Y}_j(~1t)IQ4 zgPIk>>EsZG2*oLdE^-1bUEVhW{GXZoth8S7u(c`P*HuHwyh7+i!;+;3_|?F-FAp;y z_xkwll}Yvx5pBc{guJ?xJ@YHjFR;;VI`iif?kzA9Vqk<|X!&m<dw5R6gPWDgbU(PR z>uWGnVLO^{6^=`S-D>*wp&GESE?XTTZGdhIggU4Vu@$I;ZTBTG{bNViovB2gYZ&Qj z?+o3~@Bav$n_1fdj%r^mPoPAfUS8ec$aemdWL(8m3tKryQ9%hx%*+8CBI&#yjp>Xf zFn72R24K{RA2~oPOkH-VRWz`5YIb{R;jP-^8sM0&Oi9vm+&5ahTHsuBLh*nOlU=(V z8pw;Rc=39=#?V)Mf!gN+6IP3hSF*fOSgjEdz_AebccQB7xL$p>J<>S&#H!+E4wILt z%5<Xt-Zr3>;xAg6r?<j+p}SkRKlC-?z11ZB?kuguL`<2!g!0+aF$%E_QzUl6FMN#> zk9b?Ih>IoP#2DWGr`xce+0JaEi+Z*^P5bm#Ir^0h=4}GP_3N|grpUUHSc|$__;Cg? z+nGXMGk1I^ir7)zuYT=Mu#!hn4E>J|gSKaxyLZAlZftn(q%_uCVTGPQ@FUWa+B~+? zSc?LE+_m|)Y2a5`RJ2`U|Mzr`x*>V*<?`zR!IjnziX?&M5|<`hrNT_avo(&Gq1kQC z&3?%jzyas#_hixJ17)BrCzc#u<Z^Vo?6|<UzcOXqd=0keSA|$^`e`9AoD>RX^-jJE zbca&62W)TrQ0cw@Ip*_Ni~Xlq0Zw6d&ecECbeLvgAJYS+Oxymks~PDgcB(Wg4~2x& z_1Y>mxo>B7*jBzxyv5%yV75L<_p$3%q*U{3`H$CXUXw@X{`ZAjN2GX<%Efhi#Z0bU zWcJJoh=#ttGXTj;;THO#hgHy}oi}`HsgGD8a~eq$=gpZi99Wm@rV(ObBayoIb&LEZ zu;Ff@^)1KawnG2(vONjJUoVUdd-W|-GPb<#HNO)(-Er>?RQZ}v!#0+D?`C-@<@OIX zu32}B$6k3G?nY`0Rs|EGX8FZ$R~#jKAlK?gz9zGCowK8q{7~JBsGi{a2lec<?}H_Z z*x6C(Qu4i?BZiEG(H%yUl5L&rQX9)qCE>(ts`d7NcTMNq3duGRIaht-QlbD(Pf1tg zxN2W8u=Gm54d}`LOko6JGG<&i{BY=Ccz&7aus%SC62=>91;_vOUP>y$=!d;V*`kD{ z`)Ypqios;4b5_Dgp)Q4}8TnHr!7A?+Rh+Hs@3thrH>C>tKA!6FK`gr>IP$x1c2P#D z$%Ibm`TM*#qOq7W$Yr>2F^?iglvGT`cDN;AhlR?=%V1Hx&~)m}Y?L;kPfg+fQ1#yL zY`_2ef7LFfp4y^DbZSd!QPhg9YE{)9p{OcqZ%K@*su5~cjZmwtJ!%ts?=AKggoq$A zzurH5j^p+H2d?9I{P4KOc|XtFnNAgI11On!JSwG!fcUqqiM7Djn%L?j>MiPMeK)X) z5eVIsBhd<@WwD{uF*nP8=z0%b^2~RrQwo%pqYJSMT5~Mt#hNrvNtshxZskE<QD{fw zfz32vmHopoQabgPVnlsAb#4!V0qRldj^CeyI?Dw96WkzeoJRVN7e4ImSvj){a>geB zZ^crWzr7tb4^X^}Aj8pz{}H8so6!_Rkmo3_oV|0f%mOkE@N}D&k?GoU3%Cj$13f)I zov(lr^5|YoA*kLN<E2*hIzaY)`6ia^N)9xYwb8xkn~eUNKCvUMeVP?{MTk+74p{w& zk@*U>f;T)d>HebeB@?>59cYQFB3-<-U8Y?l8OSm4t1oc;***w);RfKxU%<GnQt+%< z=(;eZAhSHL2vGX<5F+R-z!eVJ*0#16Grl}3|76HQ6Se&0Hh6ppC@QWoEyeclry;NA zWqDS0;}u8kt!n;zFRd`PoTc4yfHwbc{*?~QPhNgCqe0hw(EsG&p#`unKj|LE@$?d( z+O6P@W(wWT?LZP2dBd{;-r7g8y6V!Wniprly||;E8tq#vD$v;2OZQ?w?+jgXv@Z*O z=$OS;UX!$vNrr*bafvA*@4c<0SQEz#2|z(yk5n?WTW^=iB&dqYQ6`g=i;<w@uw05( z2nYzWpG`hL2)9DBkw$a$ur`-WkMYuYF3mIO>QzgDU47&&s>SMZ&D1(I2Go+w6R?&D z-Q*<g=u)l*_ZRIyrv&fRNq)cdvF~e(V0m8k2EYt<%8p^dcWJ)E%r8j@<R7S09;H;S zf}AH>tD&nCEtTd0QSc+^G!P5I0y3Q>uw7z+nFpr(G8}=U>DbqLsKlKfb6-Xmn8((9 zNHy(~HGCT_0f20flG@kC_bb)ayabQYevnhh5s`;q>x?Vzn{f3E`s#9g8}L;PG1Xe- zYc8c_W%JREI47WC+XRjjpO<&JjjV{iSz2+w%gd$Xh$JDVvy8>f=pwMY%b9UYUH$fP zuLT?~hkG6W$Yb~^LSVKD{Qc2cHY-o;X<Lm(eqE-w+B3%JKZX@Ab5G<A54RODV@_u@ z6rkI?KNCMA3ohqJ7}eOk%E=eNBx<UdK0tLq&kk@~vFy5H3xPjtAHh`tGr1tj>oNGt z+W()f;ljLg`~tsuRi2dA^g`q3wunfp*jQm-dFroCuYrG*jGiCLn}mMgV0aeZ{lG4u zZSMhY)hA~^$s?uw-#tDUO^3aZi!66?0qv@l?%exfDZv;O<89MOYbQ7KVRE%t>&|C2 z9Tu~I0G`u)7xM?&W=~obx3G^{bCF7=nb}7=_@O8X_BPpQ+0HDhXTJTN<Lm|gb)Za7 z-#3Q>@o7vb{2OC(H$Ef8J+nE}Baai~u9B>E9n%Bp^O(%JUsM=sMetHFl;r94NiM6N zWHfiLtU46<#H&{{oV8R-6D@<qtj!=c?{b=DP=e_f1#8&spSC8(!8a{8>2>vf%KuP( zt)uwkp+wqKCU-KDMtP;`!W4B-@i=^D`!w{vIiDtNTj@*j?7`)gug7V9SH**SU&(;x zAB_B0>M1v2Q$ml{Tg=Sc-(@Yr#M_qVU=Ew>r5C~OPZt>|EKM38vgf9TY7BTQg<r6~ zl;FIbY0gkc^F3Ki@9PGjnP<mDU$4dG(Ux%ZmGWK~s(k|%IQd`NS`LuxzR7@TTe z4Urd`(eo8Q@?6V}X<N-3%#I<HMIBv%-s4geFWL|JC2%e#oa5GdJ+7>o5m*#ESTyrj zn_9u;{#O{_g4>X+p()WL+=61&){0f<SCOq+B^Tqr@5x2iC8=%8B#Edhg^XT=V7x8H z@Q*RR?e2`CKQo1%YL=N-ax@}1Dp2NMP<jDss<6Y*o;{{4+P&>e#lpyEohB_msVNAl ztmLANJ}8>Qngo0VIh##_&Lax$v7u77i)F&aPM|c1HXz!qx0}ps$Yp-V5m(a<l&M~4 zQ{k02b*4Un9<ivB-LP&{&I`XelGi9GhLnnT@^*lZW>fA$(b>eu0DsGi)J(@M$R&5n z2UH9@y)dOsb<XF!2#h}TiU#rVU>G4pHdxO(s2X8Qb%3T~+yG&523zi;3+orb@%<5{ z)-Whq?aD=(a=sc$7&D^`oU;F%`*IUIb2E6w@1?@Y;Z2<z+`MEMn)Mt>>2zc1O?gw( zw(;`Pt=E*<Bv0&#>%1TO*$Ab#RfPXVsj@`PU!B0ibsUt3>LPq_WPa*4|CDdzp&D)H zLEQtv3*1Q0-K&(1fzfcG9ypz`8FMi|?{6Q#Y?4n*Ux+qh{8a2>EVrDekoA;ezxlo; zNU1)?%i$smA98#O#;esFg4rs4^$Uq_O<+7+FC6nlNry<PQqXDIW^t_S^s6%T2xC`{ z!qq4WKuSNGmjSCZ5*cmEbo~`zoyly!p^dv;<8};GaalJ1fG3I_zo=f|b`dskSOt>| zCveH2XXN8$56NclWx@Fa@6R#Gh1K6cFRcfl^nP4qgk7<GLLq2Hak&CGo`jIvqbb-y z5b|$P32pC*0NE*lf3e-I>=MjU-#|ahd0jh`F#&j*xKF(OzmJ4tX94(U78~s_Qukrc zWF?vf(@1qCA>Shtr4I46E5HUCy;=m@Y~S`R>a@C)$q|5f*7g{?*a=tEvrfg=4|f<4 zxiF1bzfaIOC=!6G8F4|;bhOm}>pbM<q^$P&{w5caZFAp#Nx2R65IHKc!wC0cV6lBr zBn&I9PYGQ;lPE5lNM@9)XLCvzLE<OK)EwpDYT;(S_G6*aS5^9*r8)DF6&LVTTfrBB z*<{mUMpcNWnrv0Od83+W(TzFN+dfrbu6yRE8+c`s8~JNHJ#0m>@RP@75T>AI*y%zy ztYAO;T3Vq7Hj-mL2VsEYg*sBO(^@Nf@G)`-)hyN|Nv<d()u2+TFi@uNlA1|vX$Ski zcng;s^>a0s-7Zz3^2qTA2|=QJs|?8~p^4+X(m)|E_Vg8TNn2ra4Wr`fbs~E~84xUS z?lf_Ex``nyjSIgU_&(sPa8!mh8PkkfTC745q$yFT>8istw$dtccUH@F!~KB`<)2Ni z|Gx{i(|_&<EBN0dtNuLH1evT{bJBIPJysm}Zb90${-f*}h^c_TU?8)RjyFl0^igD( z|4{?Lr+9bGW{1&RqtZm$tA6C8W$pNtX(a{t=O+LYelC=`a^h0mV_xs)O=$;3Auyb% zP;!DYdG)}v!SEA}L}CD4$=bZqV^?n2@ZKH$^<DPzojRV3Vd3(%vlEN{Y2mM%*P<V5 zq-ilto~m(2X3qWEQ<SI}wG|=h$h+_R$mkXc{`%4XTI({Tq$NR9NK^0LQFFv~#PF2C zG^e$(N#OgnyYm0l`&RY>!|5~hnb#U#jpP~^J`H{UV&-<)elr1;h}xVn;|JTpLZlMe z=$V2Q>}>b{dp*(#_da?IF?j~G$9jIFkwNv&^<5b*r*Raz_Buf;oNoK%)%cWyag0_k zt#tzAc-5PFf5W+)rjB8Q!we&5ka(eDgbR7MMZQapql34-!{`c`XZANzi_??CN0ThW zXY&ki;6HR~zE0UJ<lAnlXc&ny)@^Tv_Zdx<w1VeieOEUgW4WLYoaw9f8qBRJ5kjKO z?$qh{$N7_~unlGP8va$6!UEQRT`Psfk%>mI0UV+euxKzdCH?UkzDo!q+r<Nv<bQfT zxWQA$n0wciG!E%Cd7Q3jau{&o2m++h-G&NsQFr<(bsG~k0(w=GwgBfNct8gfV@H*s z(AkNurN-T-1|(i;N?n)6tcJ89bV<7aA`5l)_39a|zba*ITO9DdlX4a9aN|Gs6g*%6 zn0@t4@p^69pVNj1RN-?We7@Er>K2@iN)JT+`)_!wx*WJKNd^Q~FE@OEo|-s7O$OkB z+GN!pS!#8IX8-b~iETDS>n*6un+5&P)XLM^KIq=^R0OI`6bZzRSO{fIsh=SlcP1!8 z*wmLuI8msF@}!9T1i74#hUP$-%FpR9a22hNd+_Mzr2fyF;V~cvDdn;Z4dP6EiQ}~j zdyO$%#KvzZ8W6@0eVDSG=2qrjLOxWjCGzm%s`xjC1P>p@;3h;_Z5*cVlc#wCVwZcr zx7`b`Vo+YpYVVjKJkts@$G+&kMgWzmgs-!mpQ<u1NqmWVVwVnf?KexgHF_e;v3;fp z?kGvl316vU@9j)5$I?O2+<EO>1>1C&{~RW))CCqES1;#&+;8<5^u0{yFEJ-5@16%2 zXZTJt-0!x_;o|Ey&G=S&6haJ!25xTn6E++_86F`o%ykuo1!BOpaEIEl`*t+|hz_qY zB@Sp{japQcCqrStU3f5{DKL)2FQ;{A;|c?MCQ;y@hCL}rSiFhDdV+@@H!U<K5;qb2 zBc%bec*>X~ZUKI>-RnD9LMhz1*$^L%H%i`oM@43M(?X*VJ)@YiH!^{wWO%n&a(hh~ zXdRBzCAEJba^;?UEJ_SRbix^Dd)+w^_Z`m-5v1r)p!avF?t>;2T})+qsNFLP@*ss= zhM!6ZW?-mP5X=_JoMz*@^1+V*o}3=|<(ChoYncq(KA}LzsH`N^p+^&L^PbX+K<;aw zKxXnh&ec9hka3vda!3tY-7JyAJa4gL@W$!s-5$C$g?mN;?Jtq#BtC3Hi#)#LOoW`G z!15UX2SoYTLTBWpIn7y0_Q<@tka#X7u=^n(k32TEntc5FJ+$HA@ec2Z?qR^{;sl&n z0DVswpdN~ip5;X6e)ReiO`^SD?B5)Qn(Ed4i#1jhCTkWqKyX$4Pj7s1&!`szMyMT7 zPiw*NekvL|eH+3iERTW&WWN8Wb_LvKfxm}p6UKqc;JQ7~jpZNK{-;(GtFhZWocK$3 z*g1`oYTTwya?w5tK0&qrLtNr&rtAK(mC+Wtnzp<W$(`$&;Q|n)@SGj#o6hDy|B7t} zJX@o-&G`g_@XRznBunM@7zZ6c*s~?620FX=l^5t_gm}JqW1kdl7k^9UtiYgbl`Aj$ zEVCt`rlq1~>e;2?;dD->LKwXv5)f3}Ry2;?8Z&zmUJ%55R$2X5f$~M|cEB^e1fxYl ztrsuoucWhal<H?gDZW44>`r>tm67*Rp`~|ZGOlmjm6I_bSG2X-gk?*(j815|Jy6ie zB0r2D_IePjBjfX%Gq1)nW>m>WS43ojMqtd$4NrV#?Bw}<GBIA{q%gZEw4^A)ew<!@ zAe4#X?v<~d<vnPo_5Sr@hv8+Kocae+vZbZh8a*U+5vNfjI&SiHidN8@bqv{=dFxLP z#rv+6mZ>}r61rhehmiX9<OTBx!Lh#{R1NqeOG}Lt)_Q)q*KU=EarhygbM{)Cv2Xuw zgLEP4Bxs+0NW*9Un>2sIwiFMf_kF5OIL)M&)Cum!pbPsmnN)ptla#klYcf0@ukNef z#hU2-WY!X<q}5Hm5-&jb3bZQy_kyKN2u!4lN<#2!%qjO7&2@i?3G<qrlc^v0W-E6A z+S{ux(fTMWAj&EtQ}KkTs;AeP`G~dShN99hlhuzPy@Oi^Y-M2<GG)+c07Zi5Sh=HB z3~Ht|Ev0*7^<mYD5U_@szx(BTQi9Q{A3K@{SebDI_%62Kt@gWi;3|m$ypdz98z=Rz z95JhKp7#11&}(`P#9`TgkyG>uhgMUOh4l|Q=)EF<n<1z%k~HO`a0HMvf4fUB1lFcj z`h+?w?p^_QaJI{TPFL!C>l|>4WV!?TKWg2r^LeQ|hBlV10P>6t{dXTy>8ty?b94yz z9@A$7@IDAeHK@eg2fkK*UDkx;w`>INQr)S9zOsE)x}hI<4E;k=b;r5M^(}S4R;b5O z2s8qj#9lm&*1w2UD=QJX01peqtel}ws5wx)RIg|Es~I}4Bw%29i3a6|(%v#7xF11W zo(0k`+TQn7htvX(tV^l4sk+1qz2&SFcWP^+xWc$|0L`niVI$8|WqvE=E|!Px;N*7R z3Sf=nV&SA&;Pz}ZI<<3YZ>mzL{c@Ri(Bb2KPqn|)5=C{nFtc5`aUUw@#5b$k9|(gl z%43SFy;{eG&IN09U-Pw=gM1vs`R$vN)#elYAX8<Y?3UL%@o&gD9_6LtHwA-_?7k?Y z^_Rgi;N#Rx{Sjc7lu_xR-9PVtw?7ICoQHlAJx+uiHKzIqNV$VkB8R&g?VjG*xC9)m z9~V;=+z3jsk?|aD$?jVTJ`MW97Wn#u+)78R(1h#hS4ieX9KGiQZose5jd)O&)j}l4 zfX^_^Od-y2#XNV*qN!ch?7TTCaw?<ALXetXk~W4%kyYGG@4S#&!993_ccTi8jPnuQ z$c#TfR5RN=gs!%mEL{=5TF1z6O8YvT21rJ*)4nH-ZsLomw=>bsqDKSacBS*dnSMlJ z-}j{Bx&q78bwK%TfuQ0mLr{fa^CMs_@Eo}UMC()T4%kw!(|X$9rLGmyCbji?3Q$|c zE`0E{<j=D-fi;;!>p**?<p!v^!BuSl5QV%KVtgv3$&btG`PT+L6Gp-Rtm0{Bjfj!M zD?MjPWfQ?d?Vfx;2qI7)Sr<qm^!%Fs<;Y6*vi{Z2jQ8*Lh_1v*c=CWXk^c!3z}!Y; z0Qz$UsuR4nX#6tAb5fP9TF-(j3FaD%*^H#?DvIAvba-`MH!jcKQLhMb2i;T&4-lW+ zu4W$pCUhTr%AcR^L*n2KoVnmrg|?OO>g$Rr5XW)dne!9u;JGs$DEf@r=(K&#OZV&F zp25s3YiF6vtrAqe!Ek0yOP#hs>4fOxkrqKsZ`tu)Y6m+=2p<e|NPbY_9r7<`W>)vc zHsli5HK!Xt-mfx+ZZ8u%kG#(YpuvHsD91VC`6695JO>~XCg4KX_#``=VQ+i3=@5qw z_#afN*e7Q0GvVciwJ5?Dg7VQA_cs6P;9-5s!ekRYkbU_jmFaBv*lXvZs{qenPn{fW z@4EPx6)@+*iQw2m%g~FdM$8>ezdFkX^|k!ez2tN~{`g<n!t{op8g#b(L7Q@$yH!mA z)pzZhOQAdq*IU-~^Fl9vXfH{O`uUBi+^>Z`94Q7X8@mrbN~ZO82Uy*ZeA1nptHWco zy3rk#o;csV{y1yjfbqY~Rh@T#cr|}C%yBXN$BJ7`V=P$7)57|^6jloH`kO1pM|tt* zxt0H#ersr7Ho)-8DVAM$1+Bwvswdjcvhv*97XJ}Jblp-FYxN3ED@vrfRVN$uslp>< zok$b|=nFN9>5Nzbf3UsO9<|5(rwP|;nYT1GK{|w|vCE{{tHMAF#?piq?BO)eT*voz zvy%3n52i9k;)3pvK%ZH&VK}*9<#d?XqR~^mtn6o)eAW7=tBzXSPF)Daf9Gb8WbiPN z5+FvH#pK50GP=#d^<L+SAs|-sHS@G`RQ+sCYn%2FhW3+dgcYQ_(@C(<n-P-NwQ_UN zL*1vJ5mA)by7{^2SVw>5qs~iDSW`&1J|R>iO=(T!U<X8+4L|SauCxRBy07w(d6Ryr z?J{*t+4jFUWmLU)L|Y*9ds5sG)OOe%YO<<1Q{i@GXf98T%zI90LwJu|goypy$|M;n z9}O=|XR0Hd7`RRE3gRentAiD7Kx7ZoToo$Y(52tGLS0L}E2J|7Y`;-}d4KM<R``lh zz=9$H*?1%XuqioWe>w2^LMV|jr;I_9b0%|-3<pCFMJ{HHAKB`yzaa31*zeR8A+*8& zU6?UqIN&;?_dNAJ31NlTjQ(cr0vtjR>MSYW>~g5#V{xgcWjbHTy!WbMXLaA9XgCzr zA$@Xa$c=W}SuC2pQaNb)e4`A_I-x^#3z;TX-<PAOj9frSD#Zf?pjV&|UsFf-A;W^@ zLTrjbv$#89m$SeKb_v!m)AJH5wa_m{w67Q*ZpxAdGEb_7c9GOxn6hQh-9Cvy<NqF# zN+GAT<qT<lXzxdde?NRlZfA5ol~H6pJ_$a4vN>`Ir7FPc?@CNgwX8yGjtyH^ttcqW zr7xY8HlrR1xMyK1fTklOwXgYjn=07jeQ7=qkFv;L@Cqdxs1o)DbhpC46X*gK#dx)E zuUNS~tRK=aj*xh7KFuhg$W#Mp(hnigc(?ctYBn;d=mUs@lHl{8LI5@Ltk98WSJfE7 zEBK`52C83Gj6h}kbozQM)Z_$U^{UBRxy+~PJHI~<wAcBEdAzSZ{Er?#D5Q0SP*I90 z6x^bS*@622-``9gnUD*q|ESk#A|)+MNNax>`JYSWlcPJ1^fRqOf!PcYCnfRxqEYLl zT~HKICY3xA20c2%3;Rew#_v{z+9gsiCL47Vz+Oa+I40Wg|7g{5c3Q`P^ScB2q#zgT z4t8ol$Zcp9>5|mOPCyEE1+;j+eCG-D@G3>vD<ElU8j9C%{L{2zVv8*!ofm@pp!)+2 zm`8l&o$T2CZ<{V@G~%=wHD*pf=3#m~CzY+2p7Ff)HL4=SF7MNd2zDQ|x+1DaI=E2= zz6G=)LG#cj8DCxg*hkN#4uoBC-*A;C+(bVni){z1nREYlBE{d;aliMr@H}a@#Ul)6 z%1`18MV=w>OQ^OZGAe%=Y#X>K0ncJ%Ryo9<CSuunr{2?Y)bBKQi`_T0ycuQeknT(b zyJn+vduSwzsv}0Po?_tO#iEH}{!cQ+7LjKp`TG@O)j<=F^>68cfSHi(yJv-R+lT3& znsG)G6C=&A5^3w!tvO=a6W40T`Os@pFyYN=Gxs3G|K6?B=-4o1zC8Yceqf31gfsXK zV4;zzqeEPjVQgf~@!oC3h{dIb(Nb-l47T;Yb>xx4a3^=pP?^v`@(eVVYg(nlQ_v8& z)c0Fv)bfj0W>^Dn>E}}G4<79Sa}^9DcRXHBYY&r(g+O)D%PQnmM5kuM>z!xJ!Z?oW z`MUKPr)djD`Sjj=haA~sPf5vDCgt8K3L?3juGYq^30t3qG&AHg{m@KW2EEC#rtc~< z?{!|&@(W9F#%40{kmis7IT%OEpof}rv$x#VCtq`7?*F^|Rc2o=Or#6`JwGut=g}BT zS?WAJoK0j{&SA24#)FhrTqhgZPxs9If$ez*z)lQ7t0=g}Rjr&bB|ggQ-FvSzkMko2 zKk>k7(*c$Dh(Soq1}W4wrKP9XS${~!Xm<v$>`S>$3%$0mYNU8EHiTSA{vpZFYgfdA zxZ9)O`Fvkp3NP*K3u9|tEznHCvj0sIPMf*ng1S-538bBUPLpK5sgDj_4iMIQ@zF@U z{SuU3Gy0;bRj7)hnLImE>?Oq0%afKSs=T(XKYo|kM!k(c4y>&<%wtE*OczfV{TZ5g z@ELVa1NruK*Q>}(Gp3|*IL!Kul;owCO<3T%kpAL(bsjv!p32uJeMKJCD`#PMPsJb` z0Mc66g+_7Nb1l7((h59Y#^-d&I^(%WMFT6T@AnZ8NGzlp;D8uLNa<bz^fl=M(mOA| zGOo!=EIVbVE>ecL@`K+9X=41!3pWsb2q|ug6RwIRhB^G(b(?x05|DKsc@uU23Enm2 z+FPvjn7mIM<#RG+SPPxlf8nqWhoWv+Vao8SH;)|C?`*caB~nL(DAUw&3OeXU0nJSh z;sEDv1X**g{GLS(kZ4|1f`rpdj#1+6*v=Vq<PEhZ>!q^)kncL+D%%j?oELeHZdN9e z7PUW3?E{U7hm^vTvIg|An(REFw&qyAI_cMKDjTK`beL&wm+mGR0#JV?2E9CRqjq(< zf?<tscLU^qK-}eE<A{*`@?X(Ue*aUdV%}8Q*TD`6at29)LFrkj#L~k`s;(RB$Dv6= zZ-<~*@`NVSfD*0(|Hy`#`0>{!(_-saSSPr9ty@1Jyw&fpN>gNBy7^F{i2|W(vg1<~ z$S{Jxy6<703ZT0LqD&dmZzsWvWK@Mo#P`=GH(pC&wd7xTVjHJFc^RG69C-=cx(h7s zvPlbd1j_qImPjjhMb20U#g<4Hq)#A7;1PY$2yGmh*y~cZ2@Cm?E1K7rZ7~4P8%?J$ z{v?)@)qiaLrDdXfN6$^O0S@yEa5o~jCEomk)mGx7Yw_{k!V5#t01|mTyP^LXZn<`? zc4Vvv0}2LUKF*wi`=3MpBLE$JKFuwMbp1IpEG881@5Q<>LI5%%FkOlr@RngY7o<du zl;ucSMMq)S&q3cn1)I>@P=*iqg;uc<T7<?gQX|>Sq@V6a<{Qy<z*#@Yth;*yl*UG} zSdyULwG{%eGXSrM>qCrI27%SH)boPwL0}!>H-&{ro7EN&dzb_|_rM#GmD*agttL#E z<^?*%`#YRrfx?Ugr*gs@Nb4Nhk8fgXojKHGK--b9>HVR`jr_(1ym4;Zj=NiZfAfJz zZMU|<O2Fwg=-GspKQHBFw0B3y^`Yyn4hP4AFk^2V#$DDyY=`Sp%Ton^ls_Q>hy_o8 zNXwL6?<OxlS$_hu+Ap@{;yb5F%w>X)w=ZWJh6+4<WCtkP*T@OryQBN!$~Kg+Wm3R@ zx%Wjwi<y)!3b1+Qwv#N;Ye{mEIteybgqMdAZ5qyVfN~0CQcyvzg$u%ie3M{%B0;uS zi0^EOKzO_a-As1Lb94KjG9&!E)Q}d}t<-C~b+-^t)(cc0uJa<Ypu4HEe$i!WJjYKE z2SX4Vndv#)sQSqd{_}?C5ugCNxHFFpMnfz6<Y@=FZLQ(Gr4VmPUHvzW11{6f5Lv_{ zVF6hq^^($5lksw9yEH_DuS&$-8yqFam5&Wg?spBnjm;frz5dpwJ4#EpS~AA-OXf?I zi0V@(W_iy!womlF-lsp@nM8-ZXyU5aC1m?Q&F9<&;FCN6zzOfUDX;ZCC4;ZwFTzWZ zVfcvcSK^zA?A1#8moG0^EKOB=i06L}dh})(@)=DN*8rgPyd%Pw*?vXdViMap@h>-W zBHc|uU+nnmJ)te4M#|^*M|>}|-mSTLgiA1Rxt|<+<V*N_{+m%nZ6Y;HEP8)CW3VM& z;X@1&!&fi!xJrj*xBp3HE~=E-Dng0S1;xJTJMtON?4^10Dx>MVI*OBdCn|<N_dj(@ zKFFp6VV`99Oj#g|lyA37bNsZDJ5Ku2FX4&{x*gpW!J*-b-PD^xhHG9}`;|XuN_r^z zC7pwMuDC$ZF358Hzw<<~aICSf@wAxY1ZVm7_}e}HYqM|O_k$Fv(9<RKOpOTQ@MjP_ zC{uf}v7uo;N-V)Ot<E)aHqI`RJBGDWMdn_}Wu~u6FR!ND-C(5qc+}3aM&nNtRd}!I zbKyOx`qvxRdk$vXnSJNMho!PUa%bS-x%823A}^wT%RHzA>}zDw_;={mcCkVa-?}uU z_K3H3na^ubhWQJrP4y>LRy1qWd=`XyYr%~*1g)`=MSdofp{n9<SZ$<I;(@*kxK-Wk z$w=Hk)w0Qm58mS2v|5%=gr1<?3fT8`;K8b6WnD#QRiy14#L6b^MC!xfp$iy1EZ8g& zAgfJIC4KzmG95JX!$%X@K-zf#Xf&UNNBiG0mqThp(7JZZNl={O3OiZp<;3zRxh{-j zkzo7#u1j&ouk9JC3gm<7Ctb>O0!xD`b$0~Qwg=@Rf449*!NLmwWOhP2x(pEfSsCMk zTpm7+WSgLr8=`|tp&ppT_q7o}{ofK<zy$fs_VI6e?oC6u5@=JQ6;%Q}571~Dpd80n zKK$Z)7F0p&qECbq0fdZdARcqWjR-F<>S~`@puX<)e3@9$QFr<<25oHJpA%8c=gMJY ztF%>dImO$XP3%%nUl-m`w)XamxKWBiin966m?VeooR;&sPoCCj5a1~aKiEUsFU+1{ zcj~%56r*)2cdAUf>wzKpH=M2X;rQ?^+c&yp<L)>2Bya`DT-gjDg~rQ2d!;V@;?0#e zva?FpBh7}px;XX|jCdFyDRKC#MRGHm@^Ed?^MpsA9x?{5E=k8{U5XU`6xeFOP<y^| z2*9AjQR!y|aH2Hi1L6G8Zoj$63ZF94jn5^;KtIaFxo@1+2_M>iszLY?WJ@1J%F2bd ztSg<&SKIL;rlHDtpBkwqlq)NIWY}3;dK@sNPw)M^7dJcQscri6z?AQ@@$@}lB9N$z zvY2_!rOaY$V+)<!`wo#S)EQ7U@-+`{*bo%2MO-CdIU2*H(FdJJZmJY{d=LO<M=hbo z7~V&a9wOQ|WO3zMpmZ4JPtXY>R`E*gP{EZ}uV-kL`AYuWsVpdc=>}u*N2P|xZ|8+d z`9J)y*sLXY9qAjalsInx2>4+0A9cSdcr@3l*Dn+NL~-lFvzr`1Dv1O+odnnjG4!Q2 zMQtpJlWi&oIc0VW2~Sqj^y6Oqb)QCfS;8J4nX;po7{g$&xN_2#($vIF*DB0|kwth! z8*BwesBJN%NylA0%qM_P1&*awrq+cgCibKYO!TdX<d57)IH){XpSt3PZT*(3Q3}cu zT`ZPZcBKvQzpLn;muWf@_4bb6vz!}Rd)^DNMVRTK4kE08YdN4SeuzaflmS~Wc=jbB z8A7jsIOz(SNcYRqJ6x!jS;Vuz;nx0}C#d>#nQSjy_f+6Zl|`hRF}HtrrngICj&vdV zZqU{J=jAi4*0e!agU>#+o@;j-nfi)uknY;0qw@Z7BE7dIhNFX>FTBCk(TcNH2TG)J zHAmUBQPuJ@e(4VX4u7}b9tiHTHZzVNba6+G0Y2jIOjG>Us1TLD{dZAsvgbG4qJ)FF z`W&!nM_b*@Bb6TpGM#C!5*+W`t1`9P-8Q?wrD8#onrO7nAQZ1hkqAu*2xCY-7K$9Z z$H9Gdq${*csqyu-2#u}0*-TXd-PK4}oq;<Khb{OxR)#v~FTb3M<~q3th+H}GS<ImA zeb?5ty(^;0)hJ?|w!&=4a;ab?>a1Ojn~S~aGBY{DZ?~P6FbBR2-mDgJ6RUa%{6WEJ z`xVZ!XQh|61bZ}mRwaaZiR1$42AqE$T;VKaxw)6r<-jMj(0J+T$Q+uUzhh;nenJ(( zox^A7w$n3Sd0Cl}6pr5i)q?-5(Z{wE#BP>tm(fG2WMT%0taJ|iZSj56_;BJXD{SZ1 zA49I)w`o;2i6;FUH{5v@Frvl%9BTY5EQbz}m{@rRr}yvJ?Gga;9`@lg5$3zR=RQ$P zLNPV}2|Id<k|&u1WVNuNQdlebE+=J6#VVUCC$=<c@g`(P<=%F|x;fFpV%a8rjm%!h z%zyRSWp^0C1Ao$k1xFaUcE~Dx?3gIF_XIE`_oO0^y>zZ7DzXKe3-yRp#5iNM0rj42 zzn?A?MeCkxv4Xj(K8_)f2*+zedS*uiH(iRvj`Ku{0mMf@K!2<-Ywd=4FG8ET^KfTH zJ#zlh`F-`wL3x!#-Y&B-p%zgp1K4}>-DEZ?0Bm|a0d#WpyuNg&L(coEsAsgME8E&q zwi4Ij9+tTJ21&;zgAPeIBA1N;{4J;!C}1vyi;zn7IUk@P6bQST!cOOraq)kWJQ^ry z>e{G`Be4qIopJ{OW+02no(0=AMdn+W_Ks<{&cfFCLt6B%t;|!Ne*Jf<PkjeWp!A%& zktb%j|6Z(FsAy+#S~6-n1wA=?_RoPB-TX6>6!Uz5Qm82MTeWb<gjl$os95>MN2Z*5 z%(wI%Bv%2;2SlbKOVG5MxF;hUPLY2X1#n@Fc^%JcJ^)KpZ?=HJOLv+0pw%X2k0!BR zI$w0fZ-ul_zR7&(RR6+mtkiwO{1lqEnH!eW7ddRN_;igvt}mwX3U&;5aGYZ-fL}mB zCCO11(uFghLgNTWb*v7r6gpV$y>hhIUZ$vB?Adf9<7XttIiY{v8ZSPDa_Z}fbfxD? zt*Fjsqz&z<>(5?xT~cMR2wt5CT0pF(8G*K=4$r_NI5>470`=ULWtYoeX|(adU$N2d z1Yq3ZIO6f%`kT*VEmMeQr+E+#R=f+^em8?SjZ`8zlJbjhd(qfSO6m>>4gbh>wI}g7 zwL2wB43;BwYI4$ASWO4~>1J<%{htIPFTCnokgHkkK@;1%9xDA)?CTxd<CHeDrs4s& zG()V|PA%z!pe)<c6I?EJ(gUSdr?~c#uV!y_=0P@3vn@0oXJ^7fc&;B6VF!Iq$rlli z9tkenLSbs*wP2M8CuZX8gg%SW9)Um#=LKv;(<&cfur)><#Lg#&F2vI6QvaN-oC0)N z<}Tftyok;iHPx4oD=%Q@FLE8)i49vEm(jU6!$65o2pjljWLfBIwwDiuciLg>Zb>=V z9gi48D*2VO@0DC3z;)=PGP&N1{EU50zA=zzvN5pu#RE1<bkBs5qCA1*RU1E}==c+Y z9-*F~pwvjHV?z-3tMv2H<!F=e%TbSFOJ+?t3;+TC8eu-qBR80TP#+o6v#882pQlL| zayDccHEce5NE4XwO1dQBUN|lhbq3vL^9h!3KH1@%IHr!5>4>$E{-EkD;6Ft{(1e;{ zp6RTz!;ZhRRWh1p2Cz|bs8l)o|L)4QPOZ=6oS*PGS`Gz<ItPcuxyFD)S9cdiUif!^ z+-@!~*q>zDQKH&@IbQL4Q>h^14+AOLnCH~cy6N8VWrjXp%DY`P$T_z~{@(h=L%Yr) zaHZ`~wxR>0aPvSta2vQ67%1!2@c9GLPu4H_7l-#wogUKqwMcAF)v37cFP)e;XY{u( z<6q_2y;Vx?3UV4em=smHw+>ch?ffScC%UGRO4?t#c1?Ba2XXsO8zY<Sn~0gOVz5ks z1081TejY|~mSepl6G5}*tb}4b9`Oqx^dK!etA+HBI1yebT_D`_YjE;Mm%KcNrOa|M zG~8x1_lxUGQ8iP`ZJIA00W=61t33R1cnm~o)c9th(0QoxgAxCNE)Bopp*fDQQUN}l zv*j0AOAcc}p9d)ut1gD<#V5N<%!)Dg9(U#XgAyc8n*IV##K2sVW5DDEpEnJEA~MUL z76gVZ|KL{_z{JS@X46poOPSK#)ore*lm1HlMKGxy-!_*&S_z3LqWi_Usc$_7E7^dk zgVHAg(Z2)RtOB`l2|#f+0#<aGrQ;^D;60)A7R}=ZUYv)>k54U)_7)IVF<kxoXK8_^ zeE^<NUk@jyC#c-Wi;k&5O~^j9psX~}MDOON5Y1-shM&iGKwy02FPQExll6Q}*LUh5 zzFp8;(F6188(^+~c^6N?g9y@OnM@ISp5(iS*uy80p1#I%u?rKvokMnNDLxOJ$=c^* z%E-=F6f<gg%N2d3F?nFVflR};tbLvi*@N0rr$eQN5sO&3`f?Ndt7Ts@1?9|D5#==v zOoslYh>gueNHvXM=RN+)Q&PzW)Q$pu)N&0%3tEk+oKL1~p91HpzT^=yJJWjt4v{cb zZ9pxTE==Z+J1x|`N$j<!T9e`IN>1RhP(2mdUm4oBB6D(CeO5$mKs{xV2}tk>LhzQ| zMV^5y7B}&$tr>rwqm1OiqoMVwh*6<wyE3%Crc0dn+HTxNlj}X8N6MT2qsYp8<$H0A zPu|@r^HT@r4BG81BhKszxPizC?U85@q2Fv+Y=BUucbk*I29{k?Xvsa=v@0GhP#2VA zGZ?rHXY)Segs<$ppZy!mx7Tt5C+Q}4&e1Nrw#!j{NaIaBk_4~2X4R|(6aGQ>x^dtP zZSZ-8Plf0OW&53vh|%FRsQc;%(fQ^4O?+Y8xfwMMIu;*z0PvqC057>vcWwVrpA$AL zsFVR()Jhq_1fD95ibUK1+p55&MvnoRbqnzjMM4cC1!O(5ad<S+;?!Gj1VOp>LPZI) z;{iJ(cCy|z<Lqubfcc-c(i=0^roem4Fqt!w=Ay>L=-*|M+l$l8T+Dq+CeW?C1a9 zB0o+=6<D5t<T5H`P|h4!?H8z-rtotvbk<vewNZ+OTtf_H{ThS*iC3`B@s(|$i8c+p ztMh0Q3YlcEsoajM@Fgk=$Q4U4hA6`L#T{cws!}Lox2nKp6;L`xIkHK0>+aQEZ7T@* zqQbjB^4v)s$te48(XugylRzjzoupc)D;^^q3r5K2R2#xM7o`iutjWmV?BOO0>FlXB zoH6#z%^#`gxbq_kA|s81?G$@96&P0Dp*`jjLqr~*D<@xxC;tIfux@A_29;K)HiDXg z<O8k)Jy?MA`qJJ-AiI5p^6>>6PM!4LBxqxL>PL8J%eBx~9<dbaltfCqE$hvj>Mt&% z|KCM*|2bwcH`E31vA=QlIr5O9$3Oh|(sm3(<lF7(trLyUgJaG@?l!yZ4px&HuRtLp zxuI4MTsouW@lxZdwQMv0;?47Ab3XJu5%Dq%I4&|>C{^Q4D_T1Q7JN}l?Cbf9F9=Q# zmdb1TQJYp4F5a-vI=`7W(=aC@*CBGp`9lpxcqeXyKE+6qp-pXAtclp)P_y1S+*hMa zE79ryL-M<pxx&y(0TyQ4D$@sI(GWlHr+)_GZV35(w)U>)oc0W<^ncRxU9J&p?j19Q zWY9mpT%72-*X#>V_G;}4A65t$`pl;|85@Uf>hFy`Gc&!`*G_M+CisP#vBzlT*G*9V zvuwwRJL=N+)Oc{VruN{ud$x#-{>Drf{+UKv<_Konxz)h;=Dj4E?uZ7!JI@#E1b&9U zkR$QNdD&<o-@(32s^w>aR>lDw>Oa7@!1l=cW!ss<-1P7k7FI63q*1LEMotF}g~sDS zZ=vn{=WBV5*#>BAv4D}YA6)=Bl;m6fn|<@d`KVt+F+f;T)L=8UrLI?6?0nRtHdA@~ zZM9eoYK6;SLi*s-164l$4M&p;IM1+%PrvinR+P2nf&0wOZML{dq?yx@XD>UrevBiZ z|M%feKB_|_jxC||$|}^wh|o&Zf1z->ea6%7IJ`xUZb}`k_lCRZjZp0MXo?7eMP-7P z7POLjhEXN+2G$zcb7L(Sci&p!%{}`}u#O%&FZl6JDiY+%%$@oZga*J$4U(6u(+5Pd z;oqO<JhDPVwLm<R13Dl^bEJa9RPv>r0s5m)=Mgj`I?!lJMS#zotn0b@2vr%>EV45~ zs1=n$<#Ju=7EOZpixQ?_7s$H5?3oM|z&C#tjR{;IbSWjc&7efcmC_xzes*xjPs)WQ z!okU^&vwjYxDx8B+mnkr@Knf$?hvv5eR9a<Y&YN{LH|tU{}32V+2V`pdNV2hijdS? z)(=G$h<lNcInd$=+O3+}t54-6`;k?l&cw(`Gc@otasl$;4UbLG0dz7Ifs3>(fhtd~ z1_#sm{^ECzl!cAo%yFWEqad8_OP|{)*WlFL!!VPiB$yjAhtr$VnWIAkAk^E9wU5i$ z%YPe=2Qiko?nIFhY1K4-{e2%|p{HGf8!&QZVwCExIGgp_KTh+#>(5SD!4C4})Xi|n z_?UsK^6R^tf-ZY419jLweaj!8<O{E^J=~7joMn`s9lqd<N>n++JWrQpXB0d;AO<6` zHOZNy*9Jx3_4DWOs-G-aj`%8W#l#o3SnI<#^<06aJ8Vw;qcFTe-jl^G+OO2XfL-ZB z9q1_+)SV!WppJX53t$bqy((_&^WgS&SQ`I8e>`72%GrW$<T@Vf!0x7q@7^Kb`BvUC zSPi+lNIk_HUUbRak$g0JDyDc6^h^)p(pIy9XQXn!+&BI@stjQ^qds-@xvy{vnz|)- zJB^X9Zc#0nvb31>dd-B~7S_TV0z9UBH$WMw<nSDo9?2&43-)8w^FLHA0ktW*1SEWY z+?asOdwG7LLk)k2oFQ^xDk-=r{f(aKyxRh(qDC|7y+ng`U_~#Jc%O0lH5+vhSqwFD z0@|6`iGFb!2l)lXWPAq#=;cdcj4E#nKM`16`TdD1JuqAq_A@wDG(IjA+45ALcKf;8 z;}5_z)&5#HI=)b@AQ~7r)s5xnR+z}yC~iHXrOgJEzW{^D^fR=iQ`A2wocxwST@>)h zZ<NFNeRG-s>aPKQherm9{B6%8$%U)m6StT(6;8eePJ9v@kNjN-2;L4Vq@r1%LaqmW zR&nD&t5=pqJr-Pv)4xPIfMeYI@iB?llA;pT8W7ZT#-*PHjQ4(3aU1pHnx*MjZtYhs zLnO&<CV)3w8CKBLKtdn&eS^<&1ge{*On2r}b9V)=m=0H&e58Uqj)DE&Qw%OK!iKmk zz1*bGd>W<iGO|#3@IPDmvzd^Vyusy-#QN`w1<1VCOa0u-$A&#b)<3ibt(nv$xQnh% zX8zn%eM$qd`@Zgj6qfj(H=o`V8<)zxYS)msed{=AV}#U}p(AoxJ4G&0+(7F#)tkGD z^^<gf6H{4&_9(~Cvlh2q$JGzBEmCo!oYtBJc|WX$yeV}<m)m6SL~QE;_mIT{h0%Fa zIw<cyVUNCMEo6TAo3yhW!4V<9Jn>pjjdORYy6L|cH`&uz_jrzJ^{%vyET*P;hYth` z1?w$IB)qRg5A%XjpWFY^v&4z+SpDeK8hUq+TKUm&l_sPy<^FA*jFz<rTb)h(JRkFJ za(28BjbU-I{n0yMa!4AR^+pmJFgMiv-KqA3Z`(kL1bbD6xqj7vor0sMX2~rq?oC}j zO-#6|@K}bs!M>7?jz5N@zXONgjW4*S%vAWOL^0jSa4&^xde$k+5@tB!a#!$~iKymA zp^3%qw0&#&AEg!U23o_Z>w?p_AGwj580C<~@UvaAxXH0@nIu2G=oiyp*_`2JTNc3V z;deScUx5xD9x2%I2=@l|mGQak9+9rrL-OyE(SDVy8D{pLt^`>RJFZEn;^hJn4`fV) z+6)jkpR%EwlMBVi?@fx;d584Ey$7{;N`1ekuz)u;jR#&f?g8T-yO)e{u_4Ve%z;mU zv+Kd@yHs7mlcs6(*Z;=?pf>%m8c$`%^hUG4a-l^o8xwlPN@a4Bu0!6RM^ao<(s37{ z_jf-dmPHVR@D_(@l!X{CmYq<zp?N5pLFOXc<;s%HFPzF<OeJFixfiP^9Z%u-Xe+gr zD>3zYpl!CKk$A*Tk*LE*0t@jj_z@!9j_^;H;MhmiAxv4<Oe_~bpPwt@fIEjZK)yRj zksKTlxmiG|Kzv7ZBWs{Xvc2Yx7qa_80XTCS7!9>R)J1g#4E$?Ix=Nm?RTn}oe}L+O ze(J&>7r?E?fKwC;YQMDm+$q_JESF#aakqhz-6iFbl=wgBW&YwSaz2$;>Wi1M<tdHg zb)U#A^g}Wbr~D*wjH6lHgUFZh8mn4>bG>~EjC(XU_m?!zs3BB<);M1@D<&yc2gR&E z`m09yNQ@IpqDj@m*!;Vy#QT;lWW$6QJ=CLh1<cn>F`O3i4@&qVo==U;I16TW#O#Sl zq&%Hffb^c);RMTe|AvDT*<<-7hD_o(`IMOqs}o(Q*n8Oi<u>NiO9<HsZ>b=WDZ3rO z0OMKQN!?*VWQJ-mY-W0S^Xxg_=ETe={Ruc}5?2r1#Ny<4n*;$EiCXBrODrF6k=<hQ zx~ak0&!nW0_1`sLI6$WxPref(r2%=rp~U4u&^zIH-gUT7PDn~$hYfZro8YsrMRnu9 zlnNQTH6w+0ax>6#k2_*C(}AN$>P~@3I3c2B5;}F;KSv0i0ty(MxIKp}5kk#$NX%RI zG1FF&rcrMoN1YmxBqV5;%ToK?Ir8XRiykGd<rwzRX;ky(bIA$KAJbH0!p?H!?*wR# zSW)8^AkJBvusfmn5bsJHXTRoqxiqk@;urf#8YJ_u`7gCs47|B*t1F;lZjzm`3G>bu zI&nj6b=(9nIf+R@(XS)DwsH~>C+qX3)u<Ts+T=l|qnX=qge!Ggl*GVbU3W{gN>0}9 zQPW&%FMEiCG$vtja4dFI9gdjrP*i+5|BEt}e9Dp0`o1*U3Noq8i2LW<G>wT_v2gsF z&Cbsy*)}0H$xn`B$Cj>rrj}6#q2gpTl;l_FC$<b1K=gIU2y9q3Mcn<_v2PSwb0_Xi z)+S5jnU=LB^>75@x^~h&TCR4>NBvE(UdLA4lK)dMYA>VK)n^RR3|?g{*aIHV6r@`F zJ2m(ob52a{LEJIM85d%qw_=rhD@|skzqoB=#r@tyx%J~qcG?t0r?SvyhSOWK&NgMC zuttUqKl{@DjE-l^E2N2ls&xxk$dcT_3o-HK`h?>*Wk!$HO`zT?2>7U;Y1w?3;jb@q zDewpZ$yB=<hxRYfJ5h~!CNa;4yJzHL(}!<~rGRdr@6?yJxwU#PnTLAZ1$TVcJDv=% zqCw;J2=Rpvbano=*}h5T*gkJ>6`1>ZRA9=zC33fZF3wE#>uP+7vcqjz?n!^v{y7%o zSfO_|I<WIi2-C{v*(e|0%$fabG<sUj2?L)qqH1;O{oM%Tr*KZH%-^=n+nYJ`w6gq` ztoA1SE)In}^`d-8<_Qf^%P~8ZJ<*3ZiK3*H5O_4}Eq1vYQIKL<%V})mg!J-eu8_2; z+Rp3uId7+>Zib}L@>_b{Upu&ZV~uN9`4%B}>|t3nRW+mMDZSN>!);hrXSlq+XabD1 zX`0>S=-z5HOtzPv4L@Tm^aD8_>6vXl^N(7Oc*(E)j>DqURNl*IBLkhGk#$+;D~dHw zOuvm5*jZI&oQL@lQGbGd=eZzUWd3sAax^u8&&1YXhv~3=ph4ngnJiEL_rjL--(dwC zYvK=<PQ+p^Ds7BL>mnh$@ha2l4pz7kT+Zg5=eU18uDIO9UDo7!l|Fbx6IL0t9qoP2 zDc?1c4YE`+iKiz=kfsDSz^ag&*+|um8A|8vp%nOMnKE;T4aQ9k@RF-PV9L0gk-XAD z=`<n~4p;RipH1L$#ry&YdEw%eG!*CI=?vkl;XBB^L@?FyBBCCfw~NSdMIL`^X`p@2 z3qIE;yNm(Dz9`NlQ_OY}OozE$9+NrnstDXWpgl2#n(^Y#Cr5&;!3+_O##*$X!YQ<q z)cTD>!t#6QVL0SM#m$6VKa?lTTqqM|G$SWv3sY3qe`8DiU%b7yRX<m(??O}1BfdZR zp;lBKjd5Q?A|}GMmf}|fb=N%BKJOa1I3Q?aCxOAKBpLgVA_B+_`qBh!jxV5Yf+qY( zqyMIt1<D<D7rj>1qQcZ61G8ED6Z-y!>UA;?9>E?z(>SpPJFb7N3YDB%9n(Enxv2QC zj_7;F>+M<7wKGO}`1GSS_-ID7zoe5*jYofl<;7=M2d_{R&L=A$gn6~p90V)iHG!uq zl93LCs2)D_XEvoRRhpxMCdm*+`G#Zvgi$7?j{wti-*)DVI9a5zq6l|AH#8JO`}yYB z`F^SE9C+V9G7_aY2##JHacl8QMUR>kB964hbbxU)sE{Kzx8j)BH5(UGM~oTcm)<hn zY#{&JY=GxS#IR;-2UP&tWL}$&7Q0K-AaA#2w=-(~W9$L$$x2n`>A#9oR8r61_VnaB zi_fL#vV(Ei&4e1I7Hamxg?X3^g;4Qsub0tF7Mx348u0ouIK(jP>z8y-tl@E*GJq#_ zU4IM2iwh#<{N@htIZc(>3?j`>LX}e~suxPqbF$mGX3PF-BkHVo?M&hrRSKNhKEGqZ zc&h0zukzVx${6cM&i&pRb6R#GGL)aV$>r&)QSB&PZ?XT1FO28^JsJj<B0(AoyFImv z3z<(YiVJF(2h~xd0$Jrujr&JD_Q0d?+%OJrhHcuUgKwF^s#k?%*xhbjOx~`(Vkx)_ zC#N(y$pvt0%#S}Sk!T3;`t)rhjTX2?JE8AhEC-0O%WBvOD3=d@s~pr6c(RL&fD+~> zU=$S8R*rYaF#S;4{#Gx+cX%&j>k8YBv&)t9g%JvIqS5a_hdNM3EkW%@kLbddAx{+) zgC+T~HEUhGsmBaqr%6$FWJ(-~e?EJ>2*iA7z#nw%fUddbV`-G~TXNiksYl*K;j_Zp z+1r^dw4f8TpMd@h^x$}6V8%^v1`cKJIWC%T@Kpdcc!o#*p83#d@>|ib#2@#~n6^dP z>$Pbk>EQpP>a4?>4%m0EBBByg5fCXA6_FH>7%>6qQV?k-0)imju?-}Z7%3nz5Gjd) zbZr8{=x(HQG-K3QoV~yIoO7M?&;H%DYrCF3-}|}m&%H;k#GaYe4u6;sQ@A3f)_H!0 z2I;`|YRg<LDVmXmUqPi}CZ$!MO|-!OdS5^AAX?vB&kFnRB)_K&bTB^h%u6)DUJ!Lm zWsz*-Yff;nkk2A_+wJL5RtILSfQ_Fs=`(o~>M1e{b0U#A-<Lam=~DA9LzRn)+nk*; z+G~UT0CsZ=K-wCyBjQ-sc{J@X{U4xYO+1kjcj<O2Mfw}!dXGf0>Ia7B$-nAg;;X7b z(r3W>;O7^@G(;`&O-{sbd%l0h$qd~;L>qV`t=T0HN)MW7QbZf1fHti(+YG2|7th2G zDY9Fpbx&rQONIXE_-Kt6J!I?%OEl_{iTAo6_u^lZVP8D_!2JDEfYsyQw=^R>QclL! zvOHz|`US#-@9?wH{51}dVs?42+mX(;&?7|;dAzLK>lhAS6kqIR&)6=z4(%*v4q<-B zcF30Yrs2h4*6#q7^NVn1vNEe0JQCdK9h}MJlP?RW-U!j!Cai4{dhs(I57D<P4u^u> zKO30PDP>$m>GdovEQE5|3aaAnS(UG6;t<kBDtfq-upF<j46mlkIIT8|ycM4EPB*?z zS_Re9jm$P|X#{43*D@{k(2$Un$h;ca)Va6yolj8dmmgpzA{6JiGLB&OC}>Z+Yw%X? z@G}dcquoxPeb`U*478^Fnq(!tYD8g+V_x`EOfluG&yB^axK30b6_ZPs_hnN?I-Y{l zO>+U?cbmACK}cehR84F1(Y$XJ$fv@9B8xp#EVkUZbX%dDI?HqD+2n-K^dKLhKD_n# zw1Z4_Qu{prSr~_d{TYCiJsyYlybw+AZU0vx4utzWppx$-V<&CkGK_xdH?cFGhp#*~ zA3PDdw5kWI4<oCr&KJRS0*ffaxkpw!<q6;%Q>bAn(a^h;T)oo?21FK$eaEolD~-AF zMMfa^4`<XEGU7v{0cArceEW$KID%M?F2!?+`pnFG6NF%6B)=_+_Sx&f2C^2@7Img; z!W0O<TH;iicU+2zcC~0H+{pQxbFd>!TG1W`S3BqU8C(L?K6fF!)!y##rh)j3eKj~A zN$W#bf&O^@+qf4){kR8xIDv&|J3QzZE#&*o=m^}OYe>lr{wt$PvP&tzJ4Jn4&owzd zs=-LF7{^RhFiKY}v>KI*lV2!9trTM6c#zVcCq-vge{HA^SC~C4Km5u>$Ye#Mm=-zO zr-o~w=Z0A0cdXP#dKHb@0;jE_%t5ElKK73d8$b6G8!-!^F&+$JK@IM+tB_&2L=%c^ zQh$1ZJ!P>+BLZTak@j=TMqC}FE4;sTC*s;BcZ66u{zXzPQ<2Cy3wNlzA_bVWY_FPM zuom3L^&RfkE%y=*a2-XrvvZ;`UW9Jh5j|onT$@4w@aU%O0j2goxe-9kJPH$Bgp;-~ zKhe*1)7{rj<Sb}WP@FYo;<#Yn=?YasCO$DcfsIjq@a@2XwXNTF_H1Ox{Ni{|O<EBc zCxvr89ku+maWWa)8i)KI56_=J)`N0C^r*HhJ#5>hRKbQ3?_seNTt124g*zkf?N`)s z?N9U^CF>g%Y?Xpb=_~D-mvt8BR-{5ttEjHA7RBjce@4g}Pdrck4mZOP=<d)L<HnGv zy+1jWPIL}cUZ2b)%=3ff3Mqqo$LJE6=Xdft?gzPz^GE^@s)g;uz+^6A&QfH33gOA( zQ}t$jUwG4Nf*Hudi}#Xay<9fvc1%B??Yh^%%H@Np<lKR&wXB3PoyhY`EF#=KpV#eq zm(-T!RNQ6&Q*SR`Z*mgEizxCm-oE1T89J3vr_h~E_Iz<Z!}9*=Q(8+dq-?6Q-wbM} zr?T3`JixgDvQvshlg<VX6vxh`e^B69F^t>k+r@*n%~~drk^C}TV{04tX53Tt=C5D~ zu^-{*2=oie%KKPOX<H=j&#H}>`N;6i^G3hnKr<75)xyhk21wK{GLeJ*-79L&=Jf}+ zWV65-!WNBPb(naL4Tb)7&c>WW6WJeVd*Xd}0(=yi&9+5aW>uh^=;fo2wgw>oCZ`W8 z|F?x><E}akFm8~$T69?h?q*HL=JKyul=|S{Y3;wexri5lEs~iE;lfjAV_e)z&{W-x z61@)di58D6nCOXH*0OoGpXT`-aQ;C4P;DIUENaWwadx{cHIsJe?S{vK{SBl==5QJQ z`-LR&uq1{RUB)j=S_fWwA+{@x@tsByYi?<eFS6;`g$c9WQH&ZjQAwy(jY#Skc|t%f z0_DT%-Ijdk25p7j%fV!yoovD0EZ!wNt%^6c{hX)~|8)G>=FeBlL&glK?#*3MHbvp5 z5|1bP##5L-E)r#?D$P^+R%W_bv3E<bSC$n>ab;6b8}-yC-QFdsj-C}@6!fa!ysmLf zZKk?uBwik)52^ELQOT#5XJ?=Y|1^|n+A3HAy=Fb>H@JCvLf+rS@9&R{^cc0jZQ4q` z@Y*$$`h*D2Ie5c4mH&$<eD~F*kNK)}@ty9~A!na;9cu^qLBz=7OY{Ji1z~=5tc3KM zToVneC8ic$;FBtdri)E!+2j5$_&tv=!i0E9M2B1-6!BuoG8s&mlGi%Z_RfW|Ifpc8 z*51Z`&E{3-7D}HOECnz5(S8%FRu2jYIvg#Q<=)K=Q4bGXD37fi6d!<Xg2@jhlzhd! z27QK}lBh)k$74~JUgN|sZDDG%?4ucS$sgG8tF!(?SK_KSJ`J)xlTdj!qUN$IVV(<! zJfUs84_je&!Gh`Zde9DRlk(WzPuBAW5_!Y~7eYLML+9N7Y%$k+lm&JiQd8?hD0rBW zl%WImnn2=z55s1nSBl9!H>-<ancCH-3T9B+XI11yao^Ga*isPMicYDcz93E2r7EU! z6VVUNgl4iaeHj$2m-vJo8MQm7R<eAW)8FeM_nT0a7`9_j55;Mca{kk$F>_`<;>A4l z4atu43U~@Zs$hBL^-2D*t|@+gXMkw21HW}V@x9%g;#L@aEaj^Hp_$CK1H#1|^SR_Q zb}3I;9uz3oY;pen5+!9lZBH@Q>p=Z^fLzXIT~^MHj_AG`g8_!z;YpgO3phr1>|Bi8 zM|a$q`GuyT;~M^w{Ox6kZib*uQ$l#i1<~VXKhdsc*=VohOZ{~!uvD&zJQ%#O@b_>M zlV=1`q2%Bs)S`P&-WNzJ(&N@0s61-{&?x=bd}hrmof9njaNPG62^-A>#atS;eL+}y z^qn_(1zw>=?mbBX0Q~dj{r_IZ4<&|VFp{{LGLc(+1OmqhzG$KVd=^GOa`K0xk|9lF zO4&y-<RR1ZIYIZPo;%#78r*)Qg6Lk5doOM4OG<t`)r^==!VDGf9&!-)%ASPRgiY=j z!ji3LSAB10rgoYg!heH4p6;8h7w|mz^u2ZCRT)8u(69xFe@!^L6CAkI_rhBqW4;i% z)#6SZ+l`ZwWN_}Wr?fi``6#S4OK{nJPnle-<)v12o(zUuyj>keeouaMIGobe3Gz&p zxs08`yKrrf!agxHi>%Pu;;l&PB8OD5`x`6<g*)84Fe9e|_TVcS!pK$e9h?i@zHW<3 zgZ4L62&J+$JMbPqnuNu+?FU=QzbKO_;tbZD>_i?;c^lcv4bA#Ct6YqRTyy#ZEIZcL zN!V*U!Yr_*0k$)QLQzKhjvzfZeOdVPx<=q3<B|h5mk9@3?ufxkL6;HQpaW(QDlyZU zxtaN{p$a$+A+G2n-ZK_u<Quhoh39D?)PH?fc4VEhN_pQv*(c)x<OQjG7=Dc{pMGMK zkpuKrnrl2F?uT^Y*8%bp1rmXZAd5IjcRx1BJgkJ(&NuqN>!$#eh>>JA$_oCvTBJE- zmzC$vC^j&PYe355<$RcyG<@o4yZ&53ZaG}x5?vL`qYCj>kSZG@aHo1Z6-2Ym+d~LI zSDy#BsCA5H?f=J8N4->9WCus|`s^r!VwvnQLzqCjr8b7@kJ%k^%TV>HxavMurT+Si znbD^4G+6+m_75ccVS!@riC7`ut~~lXw_%`7V#C#k<HR2IJUe}*Dn9+{NO7dW^)m9? z9O*nYT&i{d3oUM7g%uEqT*IVH1(}t#<`X5of$*&x7{38dwpsHzj$rSFX8~sRP3yuF zrvuqz(yPy9^%@u$q%}q&99(aH?~+Xv%5(_NaLcGO4zIM=?vM~?)O~2#6aObPO+{Pe zm${&iT>tfI`pxXP%l3KLH2)9MLjynPGla?J+xC<CaPb$6m^<w)&cJ=X3)Ut(eVIck z#-5xNhl^2Q*`@9E^~s8*_g`sMYBE3TuqQ_pG6exUf?9?9v$rtxnZ6%1F6d+JTCOA6 zUfJxrDcHzdrq8+t*=~KlJ^BC`OXFh}46d22_G-oG?lwV0n@Q6x_%yBU#}|=IZs3`I zzb^}e&#>%mmKGAlU=k;HOFW@#smJ}HD(K$De4q3x=9IsJ(mKeeJ^FkEuZmI{BUA|w zAMRDx`|{~0^!)FB@{nj88t`7)b&~p&>1f5&QP4pd%x{xmWMx8y=$*DOhVR?T^mMvp z7!KY9v!b88L0y`~*W=I|DXq051-kzr9H^fFD(%4Rl!1U_Bha7OzT<~|Ev8?gYgnk} zQj(3=IcYM)7K^M-`28@Sa)Q@)eLc!0w$gbIiYSbtT{nX8CKMbEa~@1nl`^(EK%kqa z8=`1Jx4g_qMqJZbM)-)V`1hI6Bic<DM-p$_2hv_XQu)I7)C~Vh3l_-HJf7|N#Hj~q zS=$BLcKHU2Ai@4&XW%*Nm{6+Gjcii2jy<-ArMe_>lMEgc_Kx9@&39cP@|%wU&%CIJ z&V14rx+=#bz0B{^JLn_uN)Oqfn@|w=SdPY0u3RboFxrTdjW}ZEfOwE87pchI!xGba zk;ZS|7FNoz1`0l@5?L6b`I731xe<{2PoJ{;xEex;8$G~Sm3W5(S>I5U)hrJ$FUYs@ z6C-%{Z(C=Vk@bu-)8YK|Ezu&IZ}(g`G<g(aJuib$(vUS~x)HBf8wla=vVAC@GkEDW z>p#PP2eiM2A4K}$O<VZ6R^>lD2)Z539+;#>Ct=$}kXQ9lT2CP^W3O`W(NNYBBdFTk za;}Y!ur}h{QA7viPM<c{?)MEK{E7w-J2Or{3d{5}R~}1m5DfRc5w2H%-x+npLxLX{ zH0Zl*4jv#V<6%e0UWFH3lZxi%ENWM<255d4O7Y5Y-n@o<q^6mn-Eqz)g4he=gjK@? z?nw8jduYs`eZh~JcepKlASBKFM9RAir+|8l#iwsvcnP|EHjs@tKquWI31aO66QKAY zBK3SIk84}-wCV+UqGYr9(N6N1_8U%TV|LV)mUD;JvT0cFD^}}_>dvgW5nzc06Z&O7 zklK3Ej?ny|#KO)O{x55VV#xP&m))XOH<Yz1s%eD(w87a{*TI`{47QBXjak(?P`Den z52_(?O+}&nBs6os-)e_Vf1(X)t4bhsu(95dKNtPUGir}pY-@r`KPgy$fj(V|8gU_y zv*q)gZ^L(2p7;lOWDd&kM=QLLeT9jYg_aL4OP5)qzA_WWJ=fPVvCZc``Do9rFsz8e zX%Y4bk5`}=35h1d-0LJ|mt}Ye@0x@bl`pI}WEmj5RS-6fGHYZ75-x-T=FmWHgFTAf z-7*rcbUdH-#Qy4EOZVy!Z_M1{4e=UP<s5KR81Vrz_4co4E<IYV9c-Z&kps#5ko-R_ zeA<BQ{&%4Mk6D=q%qZQ#C)xqrOAGPfTbKFCA;x#VkM6h(jr(S_)_eN=vg^_<y4||( zHA3oTkB5_I4p7J2e2IO**@q3=39rveG}bpAp7G@!b^q#>Ewa8<A$V0=_RDHB)>P6{ za#&k$@|i4$14F0SoV%xK&x3axKmVRlL_s=N=hlWCF$2MxgEA$_W<4e}H(~588N}_Y zw$nlS^miE|alm`@k|E5%m~u|DEWZ;Q@1(T7_dT-`$pelN+TR@AR+T1K?<g*3u5S41 z4D$m|z2o1i`EiOZ7Ejz1>V4l!d+FHy4|CS1^N0_Y0axmyYTOm#2AH;*eiz*SW_8o= zNKDtVKk>Z7jIE%@NW@Lz%655&2aW?{GE%T)udtY$_S80B*;rq1c+mWIE1Re=Q>7k5 znsoL<yq8>K2*-Vgo1fUdLSCN_7)I0QTfcaP^*lXw1vWsW4=(OvF9MRC<M%L#8?0%U zzZNKN#)B1vRZ$h<w}I1k8S<{nOMGX*^5ANZ!loa4ZV#)o1#gO<(S0Zh&R%~|fk&tq zv$p0@HuQ<5FxE|=5u@K2cks#xy!+v7!zCZi#kX=GAw@G@t-O3_mB3&1a;P#wd$pFE zafv16OxRMNGVV80D;!Q*HNG=aJG4HFPg9VK^vDN*#36o8=Nz0>#P0PaQQ0H9WjAO? z<QOHdC8g>QQd!yR%wk_Lyy0Hb^{=QtK}ppgOyXOGu7rE{WLj9x#zb~RWNGL~lS_gi zeD(e97A}jd84Ja<KQjb2j}_0G=Aw<OY!ic&-()*N^=WP2d4uPW2$6f>ccy|^F=Et0 z(Vk6D-r<8TPxwufpL%9Au;ydlzHSjt<1fcK&;((~wo48Sbgv-+jg2b6BDY~iB;*w3 zE@_jZpo@R@qv>@VicS`2K%PVs_Q)yzfBQcL%#xRqa%Zt`cIX~CIM;yg?ZAFnIB(1= z#1J>;l}2sH4wWbm$8X+T4Lwja{_MnV(g5|EJAJIU@uwCKk={J~>!15!h+Glz{mq;6 zN+;}{vbP&6MLW#XKM^mXg%1jt49+_`=kZur>?Lu|u%%n$#~2WnrzOfqQxKt-(KMOQ z1ztO*V<aG;OZ4BP*}Gl#`d&mdEd`^(k;irZ!XkXF3A?FV(y}^gfKXtD!cliSmS7m$ zwvg;mRP1<uaNCDLDO`Hi)tJu3M&vB-RpXDCn-4_r7n5MzTsPOl71|XxQ-dqKLCQRK z1G4bge9)gEamZ07b__wv!HQ5i7d;Q-lRem<jY&$|!`vDaf9N|98Rf~+P#LnBS`E5W zt-=53{MzP#M(H8kma=}QcAQdR@vUzqCQ-4EuB!;<dQ0WUFG{aa9u4ID+ql_?QE(dU z1sa1G^vO_+8}xaBF?I+Xcb3|qo?KfD)4vjn;9(>!@XQio8FB37R7L8FIDP~dhuD50 zi4YL&r&2u>#SKTWsHt~BCbi8do^-+UMdJ_nJJjM@ofA7|LWj^po{$O)9V$s0A*e|^ z+FFo<9d)4Cf-Egcto-mlPKw3Vu&!@B|KfTsX{2}2T>B*uYdw7U>MH8jtTB%vX8enn z_f0zN&`|D5KvQ_#7&=P0%@&7Pcw(5;i#fgOMG#n{jc4?gQn6R#7RV*0@iJxRmGN)& z`*8Kk_+Qy6lzK8IGg>tdH*jUc>-5VWOUKVsNFut_m-*VnW_!0PUdIReIU#KYy@q1o zMQJ8(V|ky|yO60PY#7IY9$@f<6mhcYgLfqmMWDh}S-ye{{*6Idr=!dG2ZxQd!h{w# zi7?bZ2`kdv&%UP4ro{)bJ5eb}t6XUW(i|aN&fb2i;v=hkc*#x<bD%w++cu?;+O2XT zom~oH%qD+I-g5*~{9~=_{SL=5-Y1pOlo<p>g473w9b<TFuh;AS`_G}U`3f0U5?tKW zLhb<(_N|L9t_x(*kgOtl*I)bs4frJ<K1H&z^DwU2^?IRH{+)e2oG8JB(vL2|nYGp~ z7JN2HSMq!6D3r4(S)c?FVOk!J`*tx)Y^e94BX_5f_NY?syK%pF4=OGR*ett@VE^h6 zGIz(CIvS%ztR$CXT&SaCzJ&2vVzPTrsBLg;`h1wIlevy%50fx?JE(S&-GpX~(5~U$ zZTu|Ml+#M?uec1RE@MTuMfXC#*z+!)MxQ@%8V!lfcdXs4*heb0B3tkNjQZujb7%Ro z2*2VCeTj6v3Eoj;&F=lcdx8E}_bf&oH-t|;6;5m<>7O4cgU!GBxP2rTuwpoeq##Ee zd%7<3=w}wtnDExJYj4M{&X2!f@4<O|wB-9(zW>M1)%CMD0L3CCo0BOQLb|XX)PMPT z<dx2pCojr`b!cnxLK}{at!qctK8g{FtRU%Z_<UBr)SPVEt^!QD`TDlX;}PM=WXi3W zv&#g@_d{yHm5DQElCi<Qf!9xHjtYu%<5Q%iO~&n``OI*}q4pU17s@-v)F7|C^c_M( zEdBc}S=XhtTGK#N8beCAi=7RsCCqRWO!%2cws<qd&OYFryZ@m^deI`QuOM*6k+1<W z4xUi~;hcuyjErY3zjEbH7oWSw5{#^eW5t0)Mnc8nZ;)+54chb9G{WmEdCX&}Gmh*1 zTl#9lqu<I<yhvY%BSx6X=Zi@JaCGUiAw`*-zb7p3CD5ds7Q1c*AhMTGOenczC%xU) zk!yxWf~2nk=YFdbXG0QtBS>x!6*Pg#m=;Z#U>(i#e&ts*l7?zBqP&81>Qma@DxtUS zRlo%;tz_@6`C~SM014)c11VErq4*u%WcpH-f;`Ib%rA0;?gSoujF?z%v7)4x+rzN1 zYLIKK&`Rm&Jkp}QA1kCfFSp~j6Kq)Xyf#aX;$k{O`Axa+mX81=G7|0yoa=Gq%C|Uf zUnAMo{`*0Zz1Qav=ja|b!je3tSJ!yZNv=KT`Bdv$dO%m2U%L53tr)B4#r`zW$*g&> zvQxT#umBX$TeqBfDz5s((KmmO9+|&oG<2X6;6@x`&s3l_;R36}4~1eEnfqZVP;=+K zlP)86K36@nD$kXW!ryM!^JdS##hp4u_zCd2?RL>!;2s2g++91){X8ySt$bH5WG7Nv zLQMYUTCN*DynkIvMslU4b}n=Bx(vw&O*I1~ppI4)Wi$_mEWFEWawnPo9AFfN2X|ml zfk$#5Wsk-4V0H8v<+0XI9>>W}QRCoHX8t3W=D#g=F)s`VyZX-5=~z2MxqtNIX%+g9 zG9`#mAPtZnWXCTPS){&fmiu+NDX%CCd2+FRy~2;LPsh3B?$u4=8<`rZ{ybzCfa<yV ziWJUeD|_;&33`K2J@xJxIiwi>!`VPUWq!KXWLgtReTOm1W739`7Db?BN2zk(I-ru+ zb4G_x)FoYp<KVt{<iV|fRtPr}!swUsbR3;93;iBzkFd|aK}Uq3@XFsz0aBbISuT;- z88J8+7P#qK9bKw!I?jAq8Em=ZXzl$lN^d5iL=m;}oTsX0$?y7F)e1lI?&#EvEroj| z9>q%N$0+5#3S5CDFJ31NM2R#@&!R}<cn-?Se`>rBcxJkcV(uP4#h>-ILwee(BX(M9 z4T)>fKvZiyC-6ry>89)tNcHJrVy@f;-<Rg=#0o$OmRIC8pjLW#{ZR%@ij(8UsMMX3 z+(5Y->o}Eu4~5GGv1|0BJG2@7zzmNL1xSgm-Mab1_aVFf-q58c?boVdJ8_$}uyvmx z*$hj+)nsh_y29ML0ObVzDJoEuG&|pvu$*|Czw|LoRnFbPEwf&8qDfZp$9J;A|4#Vv z2r#~(KpN;k$+~Rd=0GnS4>+ixQezN)gFG361(Awmqt$reOvv?1-OJ|fycG()3;*)h zvviUEnWa2`7l`7hJQVQ8z6aB^Rmr`rx9!)(1?qC@yyH>Azp1U<gzD?#eUF3V*K7u8 zlVc_Mcy~*FiC*6bqTU{Jo=YA|e(gKidKYZA{3URYMx;o*d%%@L+Gm!jKXF#pLARwQ zHM7ER9&66FEu>$orotQ8oe_Na=Hqo^Re57U^lLWVr-`=QACER|g)%ZbIUI&#E~*x5 zEa@dzHZf~jNxTX<ZJxOHtxI-%TS?-hcFD49rF4+)+ItRSGE`{T2ruqN7yi+DvA|sR zV(KoP9kGd6@44tpSW1~o-{nHfL0SQ+qOWZqcMIFI(f`d`J(hW#GoDF*0VKHb<C%A) z{Nr$K*9#@gZ#c`63@m+qu?JR9sl<)b(|tHV1h8>^c6cMKek(@<=f8j##<-q7Yt`e{ zLoBvEWmB=0@pBJm3twTL6pVZE*;-ZicgWSO-{&G#>UkOEn-Vy+`F6yL#f|o}?U!cF zzkK|-2`SN_gV38BKgk+z)>~($enKsz4@CNJbQd!B_=N}fDD)8MegJ<h6so*w{wB9^ zq9k5;y;jbXw0^NGLE(3o8tcM?T4)jvVfcA3eh7Y_>ycL(>ElQ|*rJ`OIQ<RONlNkx zgyjb*Qv<Ye1+x7#%4$OctQK@pLuo!j)a@yqNRv9EYTKXASz}&*JOvo(T#;u&NlIUZ z2M)5O;73#|6n4FqJYCgH$8rdmCi|$?Bw~%Dla8UotGp^h($+m`5z=pj31u^WP#3iU zCM=j0pv$S1RMQCjSdM$K*^&Gv0%&9;a3-}08m*l~_#;-qW3X+?Z4%>o!N0Gl%L=B1 zWBvF?M=tYM)rw%8+{)xCN>$Df`NLUt+9gerUD8X1^QX6#M5~-~U`}TBdCz-XUJvV5 zgWk<Po4vo|q6luBAXj%uzrFHKW_{sqhQN6x@+K4y64Qpp)@PGvlg*Cu1y@>pWS+%? z&Dv`CwL>F(b14BoavcXJ7PFZQVjanDjxwun-_B^oetaM$q1_hF=v75)opt>(-{!5a zm1~Zny|0!hFLpEyGwSk$c2{B!Z7^IKL_NQAC>MITA71AV?8o#*_DJF91NMFW!?+@m zxQj|#GJ)!pmza-OHTH+=lU}{)@<79Ob~=w9mI!fIhPRq4>9Pt1ea|>w5-;QcI<vCv zmNOil%U?crdVq%QwMaA{c@j>@xq5n_!w0(AY75z*+R_iiiRgF2E<N{P1mL#k6lF8e zT|G2&<MK6qo^%pgvZ)Hh6?2{Yymr23uAcB-ZPWW1Wzf5-z7we%Nk2jYeR_M(N%U5r z1qE0xPN~?t_}KdMwCOON%O@Ib%YeY&mdkNTj|mg~9|-w5B3LTQ{@#-<@C=$i2dxZE zvp=tuyVZ;T(mHmwG4u8>uh(iD;honcC@`ONAN|`f{mFR>${%+9^9G)Qa7+<G`@aFq zl6fiFBIMtY4P}G6K}_oSMlPijAj~)`7cx<O#@Db_F)qdVJ6)l?n{K-zcJAGEZm)ZN zc-f?*9X`yiT#}mJbR{OF(=0YN1iW>}rX_{0>ra%phs8oNCgM(D@GZVyvU4rV;O>>3 z`?+(<M*J%iJbxcV9a({<-7n(e>5c+p;8#(^-!2>|c@mhi|DUQ?4^VR=a&)Vl{|I|_ zR>4I`q?a%s$+8SoqWq1;Y3b!VHjS++UpyyZEU_MlVIMWL!o$lGEZeaz%8Nny>1rPR zfM3W3CI}bqehcbX56x~sK_vv%w^e_O=lOe;8#ucH!EVB^mdNUzTbTph$8Jm+7sN?$ z*ccDea<}dO${6Q^LCbCQdo<)m4hauHhtWD;T9oMc1QC-Ksr3|Nx<2?^Ph$7Z#sK5X zEOyB20whXM`Ee>sU+9Fr&V=exhpo8YkDmKAk4p^gv;F`suyJt-+PO+4*!BvnSH4(d z4NXKQ8%*Eg>IL6VLiUcyo^wv<n0T|u0L(oqm+ZqzM@njGdjx_!{%Q*3C9?Qh&t(k* zO;(-ZPHhg~J4RZrIcHcr+<2p{kmwoGvHJI)Bj?qtcll^vEv5(Xt=_fWOs0}bFB088 z*DpLCs8n&h_*-mF(7U{I4k8eq^$Am#DfeD(I3ig4X=Noa7TEPAN<)^m>%)+%80k<% zzO^VY#%TFx*Ta#(N4GA_HF-!ma!PVji_oT;EroCMiY3klxie#2KPAy#`l4%GseY4h zBXCTfep>%>>?PMjJ+*e`{f0_iwT_F8&xLW{aYJU(*(QJIBWl+_HQ`#vIs(#+OmC)K ze-}^JxM`Z%=4lV?dW-O8nCe<@2#1+$UtoE}5GXu4yE?0zJ$Q{Wc=zbxtm&t3WD&*r z@_bm&eiVbbqnc#wP2X%^`+VnH)yIQ;{>%}l>8QY8J)Pfy0`(Icl~35(T3jDo71$Y6 zo1a!(b|icQsel89r!Mm_f<^!?|6;<5S6TkH7pXa`^Q@6LEYqQ%m@MytWiYo97AE^2 zA_d=dE`0?~Nd6FUqNVycq>f(e9y*DCe@L&rA%YP5suy9JL9_d2`xvv-?YlCOp!kl& z5zV2y#bXwyaBSRkA9UhD;zi@d2VX%QNiKO{iLKz*BlB-5Dk4YogoyPYNaAzfoqWAS z=|r+V*$Hn%p!9cAh6a(sc9mo!+zk37GELo>QiHCF8OE4X@+$@>$e%~Z-^<6zHCV(k z`U9+rU;pi~9Yt#U`LWvh$M0I_Ar%J4e2=$&%^;58c?^NOf<Hk)s2V%4z347z2dy9} zW$D5Pa_zh}yw3?8gzrZHt&$OA4NMkrv#(DUDkAb(mNHcAaMU}WB;(Yp+h}~f2cW`q ze2VmjPsV8ykR2{%f9^Sa@LcWPlM8a^w@1l*Ot)z5)P8n7p_kbZU%>J=CV3EP)m(}D zTO)X)5O^x(0m!~6ec|C_gp7WuulJiCo=a&8?Kyq+>+%U$*YPyi-`9N5o<A72<4j<# zmxAMUwP<QPRcyfwJWF?eaO8Y-W&}S4dPZslJ<~Db`AqljYiooyfE3b3U4#X_B6^=g zW66LB&%HAB^xoG38}mS~?Mq{l=Z+-DkwX0+6)q|k!|+^FLM|%QEO)P&aO41~CMiqd zUyluwNBP2^Q-2W-&z38GVC*%?;@F<U1O@NG9X*+vp*=Ek^&_F%_MfZs*#Px>swl{z zOl~_6T?qYjqKHhw-Wj;9$8K5-SSxg@Mar!l1?gg<Vak;5%D0q3Ey@^4V*>5H9e$}> zCZD6|**D2&oAVac{dqXnR2@-?j}yl}qx=SyqiDPs`cYrLdm5MO<|yG6rK=#i(W9$h z`eT;#j{u~M18>Yl)T^5wzcLtguFc<NhA&qG-feR*O2l(+S-~uTmjHD*f1wHJ2Fn7x zi^nU6X1o~Ve)>$|2sZ*cGBA^QQ+C-)DWI6HXEYdMMYzvNioh#whxh+umzP1}Qn`<k zWtcvev0z{OEp*>>-G~_|`lEa_G#&3B#clXYHgm`N4D0G_S9vn6I$YAV<|MG5eEJ{1 zUFV6fe++<WZs}sSoz;L?=4)p}^?zLr|FggPgkA9`hEC;yS}XdG>a86EA4Q*~`2f8W z#t(TRbO#Txp>qs}(v6Q?n8yP$Cr{Vc76L)y$oM6Q4n*Mona5pb<)A3Q<FpnUCH?j- zNXClx6Kxi~eZRy(+lh~<V-o3>EpXg&{^2D7q2Ul1FM3gXm#FIqT<iPfC*G>`Ts!)D zhs4Y4!Y$vVRVzwUTF2hh6^E9VXBrc>8b^#?OLX*^kEA?YD!g}}-YaJClJ>Slq5Fd; zDNz=iv>`p0nF{}26pF~8W~jfv=C<xz$<)Zbj_vYV?g`EGM4sK?kzPLiy)F8tesJ>8 zs;EhrN?`z)gm!XksogQeU<3z6DwogtGncVFF7D8|>a7eBwFaVH{DTt4_K8m>_Ob`7 zY+MWb@||bZ)v29Id=Gx#xS$aG(FX2#2|5-b=>Ik^Dw^2o^C(z#@c!#ao{ocT-rK;= zbu`9BE^V$Zz{-D*iscwfRWJ6~SXZa_l~>IcOlm3S#=W_Qsf)<^1<Oo1Y;E_?ZW5DL z^ofW)QXKMRO{)uO%q$&O<jmX$``7+lEnOalZI&GkJSU_;Kc<D5$`}ewc)9#zdg33? z_c_y$)oi$yTq=OOJ`W^GNA)R_6D+Q2lG7A${AgMD_zGYpd(YX8jqS3}ST9bChd55T z3laFb@Ls0L&FQQ!KIIQ@6w*-y%LnVcPU!q)G5)z=rB=tdHXf!pZ;@A1`G(Uo^b50h z3UQFmJ_Z#yKmb6tTm|bo%_h)MCwatG-+0=PeipYWvMDr8+!E)JZ@UrD+m}yvy6^~A zO@9QBiJqNs3sj*@ABB^Z5j8i#Esv>zTslqQ<DY=H7xYE|GLsy~6G!NeFh?A620TG& zAkv@9rjRN2*y4s!{)rI+cnsaxA-OZ)|AW6hYg<r`fKdsQHFzO7Zb&^ap{dPsrU)Pd zqa%TCy@3>Sti~lc1FpSzj?g)e3Uq>npd=c|BlE!n_dXrLjv-@|qg~iJ>*bf<ep50k ze>uIwkVm|tR-X;UOHE&s*ugRnc3E@f)(G5YB}m?FE)8YwHhyEVcG03k!Bfd{ZvP?z z??j{j8o9eMVsWWWgSv`I>7C1VEOPRFRSA+Cf7Y9{dyPbCQ`5^=gU1%=p*zxgCbpHg z_xO1T$M;7ChypZrFKCf+S_oEdZrszxSX=c5<{3EmW@jw(bijrIhcse{(U<4N;Z?mo zi+89nW<re1Vj$`mhX)b!(nkQ|AGpier>U9e{s^Z{6C7J$n|jkU&oZKBco|OmDOtpH zTilzjY&1FXuI(%TvS}@X`@@X`k!AGoy{6R=8Uj1pPv!54>j}-<Fad~fC+BtUJ|hah z{6-H(8&TSj=DHj`P{GN8@7p5p-G;0rO&H*mK~2`YT_Mm-XAY7_HxJ3B8^%pghGIud z-wUPVW;*`WWN|eQ#@V&$Q*`FJ=B8iHO@4;H3m%YSEQHNKWul*l+()ZrO6M3r<K4X` z%8vkV@I31ks~2b9QglE^@Qaw5>^yT^9DJ>l!*_?Roawv5j(WzvK=UM@<i(lJeTntk zAen5gTYJl5o;CTp7S1hNgy;KOQUDJ(%dK*J%O#s~#_8Vx*q=S$wOt3N$C3q|{nrX% z2kP_1z6k)BCCFJZb2G9UiS|Bv>ai#5_HrKW<Kj;;K<dq(G|zKzIpMfC)c8<o33R#} zhH7|&9bWI2A-+k|4vyG<^+u^o2_Yt-Vaqh@Y^lC>liHg1DwDBA8>6)+wz<IEup&uy zeve*Vc8c?r^8yjrs=!DJ3cuRvyS3JbO-=!4l`VQsEON6;((mk@{5RV1A7}8X@K}&X zb_s1}<1>n@?tH9$fla?M=U(#%)K&)F9ZXwqL><s<=B`-L%y$pqP;eG@%|D1H&9&vV z!9dI>@oTzPl{dO))gN-JSqu~4;z8ZuMaR=#rn~$9COSO6o^)j2diR$YzEe_J=I-@1 zH|DR-nK!OH?A5X}R@~~li!Ph`IQyA}Qe5&kvl&^Nn{SnW#4&sDb<W8Kmt8Z`*_O~B zF^{tk>}YPdI&rmfpZ8f^Dn2tvbU%q%ce(EY-K4+hv${Mbhf8ILuLy!nVmUv{QnT%( zQezYL4e8mq=Dx=zPB^BxDtHh(IQA?ug%2F|Rch2YMX@K_#$NlEp|iFfVh@h5i7({U z9U9ngh4ky%zsp!?Xd3H!XQ>c<nKd&(G$_N;xSZ*%OHmd7Ky=)Y=}eJFq_W1f_23@c zu4TrY-yzoXJUIkAk|MIN$l^s0g%ZR)eP<RN*^TLq(gxns(^Ps~g$N7B{@hc3a8`v{ zvyfaIx+Z-TA{Z13a@%sPbS{ay?0NvY&*We=3PNwbS$XYLXPt)^arIFeFXhQD?(b0v zrAPnf+Tt4xeukD6IeN0EV?<u*pmp&5r#K%LLJh*~ExE-g_{Y`AT{S!6J*Fj93}&wC zIg{L4Ha^#``dHaVTI9lxSkHN#z9H&l3rY@0nI{H~I`(U`2V$Q%1?o_4-MgBc=}J$K zxun=<u$RR<gAW4_VaC0rH4y$^$zSNr@LE07#j#dBED+nRyEk$H8QqKHI5voToSr;# zgI;zT^r&aITy0^67x+14qwRC&JJSiuSCl6suH}JeKKQsHow}9gqc>pVE8q<nLzW6` z61FjcU?EviM$s9`#9{)Qe;x%Mi(<Z<x8;rC3alhIl7kn}-Zx2(lu?~+bn$$PR+{R0 zCFRJDWThGmYT3%=nnqoU;u_mp9R%0FuruT;&{@=?;Pm__7(K~|rF00vlVM0Z*!GR= zWcRqe-iAlXWFXXAipp7t6i9ISBTeo+U_RIKnbbhQTBiZ+YC<KVlL!Fkvcy~Hxgjn{ z*e{O4A8W{7P8nh^g~~A-MU?sX4YB-nWV-wo1Nv$cc=^QITRI>^)e>tIpLD{Pl|j?z zb{CbmBy2nIRn>g=?8X93hE?Fk-jUJSq;O?ZL{{S`u%g?;YZg0i2r}2h)^<EaWnWs2 zd7eSENuc(k-i>a!B%Q_V(s&}^BKD%&ON2K3l<W2SiC<kny7)e-(|H}64le)`ibeE5 z=j?c|2tauYKv31$N69DvdAw(wS2=rt$yT05HJ|hFTvo$}vD@(BHYnS!RJ+HL+#g=e z21-RnQwP?GB(go=R!&e_z`}~Y{DuwZxyZzSYs)B{8opqc5fOqSl*@P7aGJ5SSjI6M z!_5w&$&r|e*gTWKvJu28555|NospDOu0>a+F;X*pJr2a1dL4syoiIy6c8+r)1Oxk| zM-_bM32NlYr}&YG3!5~=4NgdV#n+OW(ruuM;?j8B?9GhBhCYrX(AEX7D&n#Hu6H#x zI9W+#pK;RTz$Ky_C<26<YksnBe4aMBTsMRl)IIZ){YDqm2yUM5Y5G-&FWwD^SIPLS zno7mT1gulh70m!fFGX_>WX*zHRqUZUI;7b~su{o7PB^5ASdtWuCU{sH@ca=rw}E{M zVVa_swnr{Sd;9E%L;wmRi2t5%r%i2+N*2tG#w+?gf8b@|Q*i@V&Ei#3Kk5F(b%Y|Q zs`kQfD_irI3x!1iU&yH6>v*s81PJ<fqd-X7myYRO`?4y-IxIzIeY&y?M8fLn4cwn# z;oPo?YSlP^{7;1LzX^;5c>I+NOr3XOJ^%90ljzxgLrxX0HZDF!+BUh2Gx*`XIV(*| z&Os9inSN+coW*^nh4fXf<(AsCjLTv_Ke{SqX~-N*_ZiUt$w;|+m}Z`s5<njvXTg}n z2#IUx^}KGizxgIFUnGB<Nt}UL#o#d=`#y6XFWC}qFXUhge|a<nd{$(&u5Rc2z~UeM zuq}NC`Yk^8caGI@Y~X9U4}+p}*_kM9=1CxPhrefq%WNJ4%wI`<&?+#m$Xmj+@G(KK zJ5}!7v?}};Z)<zH*W6K=d9o_x{Xbm%?>`SMEPoE51q(AHJNAvLM_f(bY~2nfuL?wr z>_M<X-j1`WmUZ2i49J=LnqUp{H^C3wyU=bKLt=3n0@rVdP}&+fZ7#AFSANQ@-YiC& z<{!>{0}&J40@baLp4(>h0eh`0266uyFf!pGM&Dg{v|SWrGPw6IjtF#$WSPEz)20yO ze2x^S+)v*$9U(0<f@C$=#t8`rmV#dXtOnfxVK%R8ty)R1`h)I+&X%Z3Y5jl_wNP)J zt08dYH7^kS`-$g?0A=*cS*h88z}xjjA4PE4C0>}_AVA0PDRCk12sBcAn1u2-8K(1@ zLD1jan#v}IFL2{}^m>rWiV<vK^x<+dYTK9o40dT2dVcq~UTGhufE708sEzVhxm`=I z9m2%s=aTxZ7>i`B(E-zXHf@2P==<#MPhhu|n8eJD=od}M)dZw?ZqI9>fz9@YQSy_h zHcifo_I*Lf*^z0@{gS^++wAyh;kWpnEdI-dP8eJ%C8se5HWH<9yNVyrBO5NY)o}yj z<^)s$8?SO50rb}B1t>FAwH19<Kt&LthtDv<&?Bu!FdI14pzlKhoDG?0XpRdJ2FoJF zrV8UlfS2-DYoY&~nuaOjEAYM-^JHzcuRD4qz`4i_a$3BZT3;6b&ubK0M6p_5>h8x( z=8uE-O<!dUb-(}al{}kNCDdKW*7I5J<QP^1{K+7{&aUVA;JO3IkrbkQX>s=8{U|la zhyVRhW8Ra`ROSjV-bow?Yhf#>l2Zoh&fkT-2M^cMuzOY+b-mJxf6dtffa{Dr>*t#B z*#mvItn>CFtO$%EmZSPDX6lIyX|cnI{f-NEAgzLqiQg3W-9aX<f}auCErxXv>2~Z# zSDCvL6`X5}p{n6N+zQ`Oi}we?XB`rx1!|oHX~5#Ur7aQIahBn&kwy&hF`wV4>7Ybc zS`+Ew{AS}AAYSKV&yu+#fclnOul%~byVvw1#`_8>>RK6gOnKl>WBT8`*s39pv9|0- zJTsrYxnD(^`MR~}ZbntPbLPHweRv_)IV?)ZOk*;#$pkWtd))u>9ccn@1`So8`r*}a zO5Z>DntXrRZzUyV|4L^5JZV0k*k8?asAar?UPWL9*xqdx&ivCQiEI=ztb(Gbx<o>l z;=KI?Y($Ss4L!Z9N$Ek=pB6WCo+8QZMLKXYOozM@3?PRdN^^0o$7`{Fsw}db0bT1% zK>x9?B`?{m&B?qPeUe@GWb1k0%y@;5k2H^;HeHZg`DZhT|8Ye*Tqa-|uG=^`vX+O` z>GNRM=%y7tro(-QikU;?D8|&mMtN<A_n1Jg-w*J1<4tdpqHH!{tR7(%UN`ri{MAA7 zKzQ6LJpgg?KaVXb0?y6eqV2u)=tzb3*Q9qXs%^m%k16@Zj$4zpmY&kJBYt1d*lpy0 zfoEPG)^`7g1@J#eN}}6PkabB&sS!pY#QHtaULoi?yehigI%ah;Z7(oxSK4o=tGAY; zLxNLjas4(h-?X?qBrDLS<%)ronYr%cH7oFK*0&Eu=wCh-`rZ4j;CVyT`I=E(U%BN6 z6>E7&^Jp2>o%tEDr)E=9@zf)-I`&M?=K-~Qwj0D75c8_7pIEjU%ORFd`BnStlE?E_ zCKJJTfw~(EwpGhO2O~NS)+EccRJ)drzs|SI-~0gnlbCi-?FxzoRJ$mgOh+Bla63I? zqS?4^kf^HY*nO=9dx9bcRi=RCEn3-2`|6*#-Moi%TWkHS<wKjCuB~4g<XOSXRmx0Q zvI*OgK}AeI!dvl1(c1R3%F60%(0qHyiVm6Zm7!J_d#lQ?j@fc?M*J<{U6_+jn+x2t z@n64d=cm7~#LBl2nX!3^u)pqXZ7bGn>s8@?&Aj!p-Cv*I&Nq)<uqz2A2@3EiLzlvS zKR#*wVpLz+w!t1W2xyJhg>C|T*=|`-EE$U^D9xaEmaO|B6NC4&F6;_Ey<(o~Kp4CZ zVIwX$pp@uG{eX1NRyD%~P51FFCQ(bDEn4l2?mW~s*!^v_%89SI={1F~X5L*A?ce>G z52!c5CD!Cq$v)}Vgj@?vdtC3wSey=5#jebrwvyAK2hKB-qp(GTwbr`(6eS}^T+d}I zeu^onpuiC7RIsgg>O~mi>&2=4$REhgBi9c5+%&Bz|AE}FH$SVU+|(owCu(frrM6vS zP)?p~5U*pwvp(usX=^uRC<UI(ln3D^m}a{+9#J6<5^v>-`Ob8BstqZFwcju3A=J<} zfSPg(j`s$a5Q;pU@w9<nI|Lp=ErlK8<(p8_0NzBeayr%WoC+Sf1c*`D1vsZ2kaWQC z{jyFYYucC+?=OjOUB_DnM<(TGkJoiSU?R8cZh!H{+AEG8&^==0P*EKkGAg3rDKG98 zbcE2*+O3Nug*!hI(IwoX4=FxR`*nL-+Nu9wFu-coZ&&T=d?QSv*`LZJ+oV6fxjSk; zhA!MTfE37k(OYtr@kzJIn?9_$oX59t3*A`UbHD)m<6o7~R|a454Q)HS>0j4#RLVz3 z^}#m7g9fPOTS$vE6y<IM1a5&~o7AEHK@aNQ&9*8pTR)gbCBX2WLu}E-p??qW(USb< z33{Z6<z$jw#uXRNZ*8h6#}8K*;uI)U6Vwc)z5SG#aQkZ;`%F1grOD^IW7Ed)BKF}n zHrYVNsb=~tIpdcuW3fu|cr&teRs4PbJJu>TEL}>_!*&<>TH+Yxi$@OI0)yQVsHJfb zEuF3qe>ddi@1Jl%C)gNU60t}tEdA`MNgmJCrx9gD#d=3$7%GZwOT_CIZsTr~W})r_ z^iigFO*UGGES*|i`i$K3!0U}oeZG<^DRB-bTeH;9INMv<id=d&aF<?aK8cyUF_dfU zfKO?7J$`pfE<ugY@hf1~9tk|%aj^~4e1Gs3^VW^oOat&475FZP{7zQR?q3AdTVA;} zcbZ$l-`?l>Ueb6GdG=OGoBI;Zn@2XXM{?Wj7t~;H<5$Rj&#V39VW1{^V#!>Nhl|kk zehaVZ@P~|6x-xsg9`7b(7~J$O5kH3i|Mxs9F=5?C`{gT$PVB1uy2R{){bpeQdDh6I z5KzB`{9A9xy2vAcK3AG7FN@X>OivY{WzU+%-_-5a>oiO-r47b%^ca~;c_#o4AE_yO zR<I*0!;{!ub&wa&EusC_yDLI90%MMU;r-moG~Z}@mLjzyB`@?x8SUJ8yIoXh`&owZ z(L*a*^AlOJq_O5<!8$AxRXUl9ap}?g9xLDD7<6TMJfO1hKJZJ=d(H1kq2;;?Y_3u5 zEvb0hOMuTEX)1Mo{hJ0&-H|Ev3L9U;V?P&fKSog&-VsR1XDw*=<k`Us7mQ@BzA7K5 z?E?aZGeniR>QGr3kM49;u)5Zl-+Fm1FOS)j@U8xjlEm?jyx6APTYINz+F05BAB|11 z3<yDKi8a9v8G+^0kS(V9W#v$pENvIGzcl1J!D!`6Hb<L<hj5a`Zrwfo@G?=3rr1<J zcLs>j)42$GY7JWWIBe&FR6DJHXrZok4(tqY`P4kLmK-KxI%L|NK7mhHoe$`9#KviG zH&KJMH@~7pm##XOwbtKzV>e#V|4q8lBASuVE_Gt9$nHP<qSo&nb+xBnukv#IJc8|R zs4YkBs6uxtZEs&8h%Wsw)^TGtF(`8$xvw@O#9KA70v<F%Ru{x=X(Jl)m_j_p;oo>g zaGRHyLT<t~*!J3)8h~1q3(1FT>^J}^s`zO1G<n{$wEk$d8fUblr_flkDfQ|WVYjf% zVr27??lb*w)J+VL4{nr<f+pX@coPKJ?MQ8k+W`N*nQ>|!5;oQ86HeC5n#HA%o|86o zR~=+KSH_yYNgXSpb}-qDr7IJ!i^(l%Kb$B_Pco;OJgf7oY&?~wdGg8ab-yY9gs?LO zR>)y{Xj7I0tm2~yPXh}yg}fus1%Ra1L`zF;fokZKrwIwDwooP|u1q?h6KC$<FPzy= z<)EIdd`{EyJH4}Ug*21y34gJlc<7q|_!T~Ua2J#AO#WROr^Uxi(VE{<@D%-*dr-MS zYs5=y3rzzeZgtoFa;C1Y^vApJh6+e%8r8YqEoWQJ%d9RHdM@)YImoei#0b5VQ$Ui6 zs*lE3J)$}*;TsbALOS!kiW#QiJO=S%fUd4dAXu5LK)A$L{xh2Q)SsbG?WcU`TH{MH zPwYY}%HNK#jV92HfXVm!16HjYFxxlq=G*lY!@g-2OQ*4%**x$bK`jT1ZYfRFv6vpH zVN?_bdfc-=7ib2M_|V;<7fviB<s$zyP{}nJS#!$Z<N}t-i8gBjY-#ulFMIPf>qn>K z3D|nNeETov<X^q~gux+8?SWIrnO9OF&=eg%tK@(M2lngvpR5d^SJUN3*pN9r$IbZK zE|HR|bQHnG<TEehi-WOYC5r7RYpjBxxNNi)f2`3eJJALsOGs&4i-}y}MfxrgEjkhY z2@0qFL_<)E;*tig^Y+8liF43Lvx09RE$G=n3RkJg8@JKh0GJ{>xwICa+`aLP{b#_- zDALCzPOe+)vO8co+%0HOFioWRaGO@FQi2OdNl^_APM)lGcf2$T=tDPS`CGtrtwm<! zvxrwZmwFEKoB3o|w`9ghV8mptdpHRa@nn1G{{?hmENS{ba#m(8pQ;+nuU}=tnBX$$ zt}V+wK1AlQSV5%0=lN!a{V`Wfcm&Hdh>~RKUAwtzTD9?4Kk3EJcQ0Wsn_Nt!(R=P9 zAa|j$YU|a=ILgc-MYMP{IWYg4c#6wit%Vrh<&2(BD=u?SC&U<7)E0EyOMMmxl<hib z12=lFrpSa4GNg8W%<q0$3wY>Bh<)$aWo9MC%y!Zo>98KzY9scPS-0sq_Y$L>rNR%j z8b^;1diu3J{(|PbK-;k&)(eA}KedYaNGNF*%duykCj7tHddr|VqOMyw1P>M<KyVT? zc#y#%I0O&wKDfKPySrP0ySux)yA3)x48zCseDA$=>(>3%-G5GXRiCqa?Y-AtYpb~% zZ(LBW)x?VXVPTQ}ZT|O%DwE*W;rW&Ebh1a@%c|X8Tu<E%%jB%-*(NRA*;Q7%IkoNp z0FUwLL(lgZHavMtA*t!K?xwWjzL56dr^BAxL2}%uC5#fn{YJ>O&A#_E^(Hr}G&3b; zE2S{CTZ1B!4<{v-QTX=Ov7EQm-$J^sQvlOsWZ_~?w<5C>yB;^s)$R%smxllTe3`MA zoO|Flc_%&3QkRm30vgk0g!?5JIK@fu+AQX6T>m{t5gfPVUZ4NF*nUv5@Jd-!l=O!d zeA{~aG|pwDaJMp&mvs>-FIPY&+)DSh^bHkfA9chAMbax_RD}Z$6(_<QrO(DV7$Y*7 zmHxz|E3s=+%~U<avVt1qqxe>n=Z{g@_~RO(lcq2}vUhCdmcvbV9$WpL;l3?wrf);{ zB<u>k={ceEnXxeP>T<Kv;qKV!@aDNar%4YeeX!$r)R<+xU}}Wj$op4udww*23D#Ee z-bmBn>=xhBFH5tto<0XBqeNS;Y5U$Pf-#7+#irSx`-(qp9n<)kHMbBU=YRUwFHXo( z1RX+7rG89~(Wb+;-3MvV!4>^@`7i|3p(Wfyvqh?!n$bl<d-XTIz2Od^V=`l*kRz*| z0MhHB&ge=Z#_<lJW{rHK;=d^c+;YKB+JlpC><0$qLW<ED#`uiaT^;ukM_u)v!UEnY z?z78DnFW=;m~xrRiClWV|E?3<lS;l>?}Ph%KYbA9_8lM$VM`;?7X=OAM`07h)JGpb zG<U*ZoPca(=1O$4z3=cCWtm`Hx@U+MsxbC_`)%88H?8{Zx+!?>%=ve^tAhQQUejwa zTXV|U&UDq|6^*094c*RNOQzt5C0?amW~v&LvrMaIFj;&RH*PD>nt9LP;C51cqlP1# zzNYQ>z3p!6X1<fiw~TqQS3grXRVR)Rx%N-6R=DL1{VQZI5yDw-v?yUmzvQ`<-6(>@ z%HDC})pFke7ecFMhMZGcEg?FZ-gaiH#RnWn88*v>7}KS4_^vGX?6RPL*IbGTzd~(C zzS5~2W2Ek<u^eY)FppZ!;!XAfU-bLYU+=RYDkTj#mfO&sV+KYwaj_1%yjD*wk7wh| zyd~t<`H@Ny8SA-@bU9N7QZCbS74aNK&q7+(+!%D#QD*M#7pz^s9`p%jEgU`oKZ1ts zU#dl67cc)89r1rOuA8c0j-(>XI(mk<;%-Ri7<cuY`SXRj32{?Xm_<j42H7s%MOy|X zs{HJY$ARb9odL!?mV^&=C~zN&mGr}ZEFjf#_EK$hURw0IQC5^_d$G6dy|=07Qoh-z zlbyg{6roBzK49zSO4SrG;>B0yS$d~G7+HVUNTfmYx5DcU#u>tQP1YmU-Cb9CcPU_J z**yE0iEI@nZ>?G*tGj}B;HO)_Bi{=69Orzzo*BYEN9z4_esW$wh`oiPAE*3;EBi`c znap)5$ID8e#0mK%SwK8!_N^-nHiHhioV=9CO<U)PWs9R6e&u}zxT0;&5wSU$a2hUt zv9bbo&LfZKm;Fp5gi^vqq-p289fqav{#AV`4_x<4#VsRncqN`~tWvAQXpPGEi^%*i zK%aXH#PVSY;xc1=&tmP}H|dzIECJ_`*Q*j89^RB2B_<#6u;x8N<VNh{vqY&P1vrRi zx^&UEW^_5IGGzFBv%L{@*+zcELvCnjRpHSEIiHnDp@UtAZ;&RXB%`QMexe*_-AyJw z$bo5Le|epj)+MDs2#r57R@;ndDi(p?aRu3Zf>%6fvvf`6nf!guZ<;-Zx)1)WwM(Au zf$0eSEFo@lW1$lBKzv#ILmb%mn~(Fw942#sU&{&Nezk4d8W?b^nA1Fth_n&(;REcL zJ3i4!K|A^hXBGp--?mJ?_&$g1D39AFaoc9t_DjCtzNoaA;r5|RZK8=TmyiOE3!QXm zovypvbKO}xzbg_yaou)m5P2)EkpU)LR^Rl4{8A>bIN-EE0eR~h-x*VVx9*}bidwrw z+w!J!j-$#7TU*s@%QoXd#z)n=<V`_`!>P%QRA-UaJgaTd=GQYqtd%HW4saRZ=4V)3 zAJ^FKgx-*}td%-k>wALI%a{#0Ia_eu`+O0i3mYQq5#gGhSIt=8ehR5Tv`BR68Nkkm z##W0m9K{hPM=82r?ex9!^9%Db?iUh=)IB~?)>|H8Ly)qs+(NsZE<K~)9RmJGPVIkc z!90KcHqSlHp?zBY@1@_k>^IIMyX;-WEHpW;d`oFV`>xlRqDf2u^}o$2Gg$E|ymoDw z{xn`RNYWx}Ijs`<TJUm@go#6z8Nl@Dj&JF(AmNV~rw?H}0&shoe(4~E*}^O$L(C?g zqL#;epUDl-*-lEvs(bSqit5af&~^So*_AOI%$;Aw)rq{{G0q<F;hxAH@0hCc%R!90 z?uwN19G3WL(MjyLY@H8`I|L#}7Xoi!J{`JF9K>6V4h=OO$wXbB*^6dX!U<1|X7qi| z8u8YQCTVPIsNI$^PsK@d+AtgZIWNc1qXXXUJ4@DdGrM?=8>WBG{}v~98*Kgoh%eGH zpW{YI=7iBXal0LNIDA!0L8zr|8mIq<8gZynAXz;T+fuc~*nM{_PzJJl1{v&f>ryYi zB#eGxq^(t!Ylzmk`l3GjMRm`N!t1<!Qg?G|SXwLJbSRbgu4}hy=H97p|4;bn+Wpcj z=<6qQ)n}@kHCtzmo=S>i$0{k_v0DMgYb);8$+5<$Q!^O>x*!OA{w++z_lWYOUs=Zu zd*m((^?zh3%csAB&d}H_evNs1V_UE2EPa~b;P>Mwr&(!o$2*!EuD$%?lDXh;ghCWH zs|(VEhvU~fRA)pI1#FAEU*MT#JS5|E$?9WLS|=j=JHRCny7Zk`bUIw_+=3e{=0H`) z&F+8DO;cIqns+r3HQ&0)C!b2lBY1}hKb<T)<JGq{@L{wP%_7bTgGuaA2ih=VN^C+Q zbT%?oZ~G<1y3o0hxdrjF=|ayz$y%k`a_+0~1R}azTEAghH45h5Xub5(v(KrWJGAMO zTmJUJ>+~Eq?84>W$6DD*Htf!C89`3?7)$~3DVqA)0|ZmF2QmE4zf~(l)WV+e9!%_; z<jX}HaV%nub^4rF!TeW{llIOOjJ?&HOtXA_RgF)0!*$SAXx(1}Ar<k(d9Rs$rl($` zxB-je7Q}zXp65y-wSzgAfUhAV7mDsp_LJUJC3D*2PQ!7O+x98#ud;gmil}-P{J+4> zM7VC#We&p;-h0cs|3_o`znv2dP1s4vOrL!k(cNG-XaV`y6NYR#uQZ24_xKH|i$n&0 zNN?QQ<khK#-_$3xE*$G|5)XzQtAevI<0EA^DhrmaUlatFFP+)>3s+<~x?EK#v=7A$ zpBVNc_PJV<w<4q0i`v6D&RcFTBp&03dQ7OMqqgX}j=ea-_sb=sdpkaIm#vphtIIoN zqYPsZ1=Ih)*wFW(b8NF^n&oMof3WYV`4Rn)VHVZLUTZT6-bg)((B0{iNU4%rs>}t6 ziV{v(Oxv3YdY}FZskbt>N?|?mwlPgxd?+5NGv1BGm37=pH{=ey7T2)N7?LBBEa^sW zYhdcW^l}#L8WBe(MQv;@hu0O?L6E0t?mic-G+VDcF_BR<O252>4SLY54m+n=8nNK* zRU2RLpNOQK8|#%Rx#6k0Y|?4MrYTWr`{SkU!aTz{bZ!aCVvLH;8F0DzXxZI72&Gvc z5LJ4Et5gj}IdJ>TgydLnoO;<Lsxq(YZyBIj#2{7vC+d7sJ><o@gQv>#C`i-n>~;R? zWo|PbZ?Dc6k06qHk^d`A=q??l<kW(I6jfA0vYk<X$0h&2Sev&t5$w><YCYMby2cYV z?9P)kdLDPngnd}!j+YMF`-s2~lgtI>+CRNloOq)Os&>!8g~(cL?JJ=UIV~TVxeFL@ z)sRji7vBz+4=;?e`kO9^WvV)CjolC6ch1UG!s{+Aha6`5d+1S5vU$!!5S>IKj(&o} z*Br7F(4{ZF-G64fB}d}lZjNyod3$bh6>`5RI_ZKANX<QrZDI0=;M)qV_#t}EN?dst zPGGZu(I!r`qS+#x6!cNiR9!$m9QsQRAnQ5k{FvUi4~H+B#U|_DnyRGQr5@i$%BqW< zm@9m;?iI9B7OKT`;Ta$KiXfC%Sk_<aT;Gy&O$Irx==BGTKlkfiJk32EPQY<oTjE+T zf6;*8AGj+N)d2JQ+0{4am{~4>zW@u3qWlR>qvWElR5nl)^wHx&@ALw0M~M_+o~2AX zVGop>JA$(J2{To7qOn2b9Y1Qps5R}WUbYTy!_MQ9Zs^qi<`w_{H&<EHzorCIBa9|L zMvaR%=NwUw>jJ6SPbNJAM<5{sfezDL`^D6j4yR3cBe!PTk=Xc-CUI)A^Qwtcv^D;# zI2m}jX#?l}-@OEZjO34%w=znwK4U8@Q{M@j;n7YceWF6d8k;Nk4y@b2xRjxlcp6hY zM;qg(MF0Gk7Y0l9f~KFqEaOe&yT-5^Sdg@9cHvF<D50n2``g3wmpRqVW@hbH_jkvo zfF-@BzcyEUyDhxKp(0w)7n8-=6Z%ZI;<Byx4aCOc$P9w$aOcU~m`Lznfu~QnfbmT@ z?E-@^uLwi7?c)6Wehp+Db*Bw@J=zjiS1lFGjlY*Aq@KhE+3zl15!OE%xy-W=9ssPT zu+G^wty-6b_8famO1==_rqXC-nZ%836>`i8bG6XVaWmqxDjr*=!!G=I9X}D7ok2W^ z_jP^o4&EeNd?Fm-Y3M-luJhb#O9Y(JQtP&X|6Cb9l$>fdHi8_Jd~_C<4s1NQZB7o2 z2szefW%sm8y5h@b35S3$fDS2lnRY)p?3Hvd{ncQXimT=>)=Z{=_@DNdt~;ft#V181 zg29(a*xQ!6b-jNzf~Wyx3R%6$YyBSKM=;pUXxp+kv>lz{ea+DaB7;U`ym7d#I^vBd zTqJvMhL?QX0I5>$x6>15E@n44BOp?Kb!8bAJTjIeWoTKm*k@7IUohCg%5SvIP&6MW zOxQMqUt02CSS>zmyoQGBC%rPo>!<qJ0aKUfShF@SR<<6LUQe?<a$a~ZU+!;F8F&}G zY_dFM7i65KH087zB5Hiz;_PSK#K+P~5|}G7QmYy8<F!5ie$F%k-2Y=mjar$a$iO%e z9L6FU52V7ZNCMO!-k@92cjY<dz_)vKEjGOl?||WB1e$nnzw_<gFU6EDAm)Euw<I&< zZ_xKkJbw73(%$pQP^ngnM~ED%5_?aBuJF8c6nOG@1<XE|wL6afapP+hz<py0QZpZF zCf-Q9Aek>A=CxH3vh)7!Z@9e|YtffwW-&slmy6ZtY2c#qSK~uJb3;@rZg0j}Vc$)n zIuAvX-%o4{{<6ai933ih{;z-izSZ0I`1<CDW0=O<Rx%mR&avRrkM(HGI62oZ>MTXz z+v^an;|cIT<?7M@`(~I)3jOfiZhmF*kqlp3;Lor_0krH}`2&bV?V-CBagne3!p{k# z++(}))Q=xJojTx#<oWYLpV-u!i%P5<W@0(0kaaId4O^pKLPRbg1Kr3lwlzvH^G>|s zj!#SxZFu_=*D3dBYO`+?_vv<I-{M>5H$SF`c*}(a+SE}l%9sB8$*;G=vnE-N-bx&3 zymFkt_;Z@v@wh+Zkxr1?pYtDDm6F<E|L`>(xkW$wk2E9om>v%SX{Yo*i`uaRYOG(6 zM6h)ha~ee_+?W}(U}M9gMkvNzJHdS%X35JZ2Z?i{^DtB^mM?LZgGdMsd3bsOaW3Gr ze%q@7!$lU>tRD(yc*v#;7kHKh1#cS&wZjVj)KuWd(6niz@}$7ce>OZD-7G|(5{)@c z6Eg^{ECJPX_#dwaA}TGG*}Hv%v+k5(2}HZE*S2!m{Ay<d8+?H)2#UsFCB(OkK|M;8 z)nnSeMf`;Tf0^z>(JI6l5f-1Yu+?g1v{Z0+h8Ksi5us5bD_#(MdLA&>z)-{3cy*qR z*Jfh6cwv4pvscCF@b<!6!wazUu5vUw<<;ErwQRw-v8=+di9Z^i>7MPL4r4Nt9T|hs zv#JlvF1Lw=Bo&v4r);!Xl0JoUpB~HheuB@I<~NZsFC4ZYnOfITz*_1lF@fcJk8c6` z?_T-`xysk(B`U?`55{#F@_j(^Lp5eX@M@6Hej!NhS1*+#U}P<%-(RdYwU^0-D8>n$ zWPLi_f@hSEiT4NpFIP25gMLZgp{e_z+^NCwBi{zYdxvSG&_IXsH~Nnjf;KcrK#_!4 zAWu2s4-0`yzWO{24BBoCZN<@7#vi)Z(;El8ufI+9&=-r)N&?kM`Edv?Pn142=-Uz$ z2(8;qDhQiW9*b$n<Y*3h?oF(V7?Ny+TXHk>BDo6qh@^p8nfhqtu9=%hqVHwKRCcpZ z$9FJeco<Q}XSUnw80cE)3960q<^F6xrAzF`RT|gw!NpF!t698;&PvR{$R4l6?vtOa z6ZL&GLBK#hdUVazDU^T?N|Rj2nBub9dw%}x6NiLLWI^5tlb<j{QC0T(Y{C>j8>y~7 zv@(UuFEJuYycbzL7HRg>-30+(t8S;~E*8bVHn}QSjQt;nMsEWaMAAIw-aTgaNQe_@ zv;6gqS<C=Qj3xai+Q`xSLpBz%H_1JzLo5lz8i>jTz@WENb7F^lpXK(1O-<C3HO(Ct zEBqmxHpn~>=hz;Q%q<KQs~yt<7ExYhzWzHNh9IT=rt<uLlq?(#0}9Mx+Y>=*Ok#0B z(9x$YtV^Q@8Ma*sO?#>}f-<(hcHb;cx9ry{|E(EnWBvsgL7}Hq+dW@o@wjX|U95dO zPBV^)pLrHb(4lcW!<-IAOWr2)b|nACur6t`blo{)G>lmg!7FK+Jo5`3|Flz*K7RZU za}{-wsIb7M`c)MJ|1IM)@woqD#A}ZQh=oWajvS((&<tk)D=6noW9=~z%y&kGCGv0U z>3hJ+VKN$^s61oGk~(^b1&9mRNEF2rjF3;llpwi6^^<hKxy<%1%?!!-ExBxUuOmuR zz-}TO;ACX!E}!ARV*8V4Fuq_?u-943q$ST|Xud+vx*JT>XmHRUYo{4H$b6pOIMI$x zeronb*pcCa%&6H+Iz9L+1&AYx*3v+cSed*B(*#!?NSn=G*ElF**l3ukc_3tlQB7MG z$m*MoftsclRB1Z@^Y*irv1kAW1`uhU*0bBf$d)=k0Fk&8aNtrvg&zq)$8_aS!@H$I z5wP7&$Q*Pse)AJHo|0@E8^Al8sf$iS3fJP01$jK7+3wGn46=f_NoU4^`~WopPPLTH zP^X+Y<vz7H{LOF4o72v9gGrZd>H=e2p5{-B)Hx~_F6q0xe{&XE47JCc6Mt+D7r@}N zBxBPo*>9R}tN2?}%t*VS(WR9QDY8Xp^@SU*TN<s1ohIefeXf<oGj+V#g_w?)qnM3a z7*LBXaNEq|wFs9eq#vOOdP-0|h>s}QgcnpXWZ&SFV~sG1Wh_hZJlF9M)zI$x7PG80 zQn=-nBAaY7^v?(V(JeK%fh)((Tp9aG*m50X?uL5%o%0Ea^DM5tvtYuva#BJM8$r?t zYx#P?^+$X^mAdvT-3a}gxa0MZg$AmK!Y+IjG?E=+h|ITAFDLo`I2%&#zJV-;go6}6 zf%=fS@D%hi!!&NFT|D>TkH`!*=!v1U68RGlr9w=vZeN#U*6}-LX!f;A8#r|e)=4MU z9+@}QT&?<RWzqNaV7=>)3W(sO%R{Cpj+U@{ssse$I=fS8O$3uC<!a4c?lCN##vC^o z>LR#7J?Cye1k0X50J1}}I|qS0ac*D%z$>FuCCt#?cuP&)e=e1)qgmGV=i*~$`@<;g z!Eq()=)d1*Vt;p^)_bIf_oNA{o5V^b4Q6_F;-rfMwPyWDJZF5L`cX&BLBC+B85<>( zsCge{e?{md`a(^TcjVhgVd(*1(g}n(I~&Pb&Js!5&C+HmaErA4XIwrP+bf@1Z}K#o z{X$3gPPTJ(V7sAekWmJI4ZwY!J!81NQ6lpET^5Y@klfd}Ljj+5vrHL5GXU3Aqoo<| z{+l(s0@Z%(Jn!g9V_4C$%%JQ+*{5MVktfP-^v!gqWdlEZ&``%(Jea|TYftlEO`WL) ztJICgV}`j3F9Jbz!gnGM*?qrI-yr(XC`w}$Es^87YX4+Qd$|f@PwQZ!QP0}(xn zw1w}E)mWtW=FXDq8mT7mt?L1G+P4N;-xT^`aijb*QF5_?d0Vc<nqOY8@>Y2*1EW** z6(eKkqD8<~FX+iPvOGmvj-A;*(z!+u;oP=G@-;k%BIzZKf&2;E2+=WU@kY4qd0oBM z5~=u83R1yNxsv=A@eM!$QU=oR78SbK+Rs-W$tCMHCR{Q;_<Zj543fWcAAuRTd?29P zwDOnL<lj7OD79(X`fxYb))(ASh5&}?<->Hp@+ZZPA2zgz7xDUYDhrZMNy|U4?cX9- zBj?W4Z2LD%FQj;~!iRoNJmZeD3$5-#D)spAL_np)65(l!mK4_Tao3IAL`cworW84% zhm>V_@VHDWrEYHFMJ$e1Tt8$cyjXygAnsDf<lE_Z!bbA6tTt!5#OGODZxQlF?z&c} z68o{er}$jNjd%xUUCwotI{LMu3cX}b+T8pr|3-k$`w!y(0$PuE-Hwm~7>P)Mub^s( z7^+3RVJ6myc?&SIR*ICg@DSs;uQ{$~#g0anKja5OfYc{gZ4773y`#J@bI6^^=y2T2 zc-n6kV0U`M2^kQ61OIV!?x8Mku<V@FCY3C+q9$N|Oeq!wO+lvQ-ocQGbq4j(8dOON zZUe8Qi&6|Xnm()tH;JLTZoUrd#dN?BlS(3+HP(*oK)wdPhJ?_YFfwgZTXY;{So14Y zwu|BU#b%|$WI;`_>#`(~SeG$gDiDC=lG2DkopDFpiMq_Ta;LvV2m(MJLR?vYuK1~i zv)E8EF~8fw`fXy0F&h<#M);oC$$&+iIbHx}MkvGlb3Dzu=RV#uH7i=#MJ`OD$?wO+ znVAy~a*ppZ{;9d-GttsPEZO>BB6*ybHkQpl+_kRA$IBI3rOCK=I3%omu(GA4YgN}~ zoN;WkNv_?UfBf2nFpnCrHkycD^;@&ol{xvW_6#e|r)K|&gdn{Re=9!O!KxKx?09o2 z&1d2vO|CyH7w^m&_hDQ!=3~B$S}yAmOuv<bj)BmCH660jFK6C^=o9tGewpRz=+-w( ztx$pAgp#H&3ICw&$OET<?4V^N@&@a(=gfT=CLyI^WUE48i%K4om<+GvAa`|MnNYAu zEl0L-(=luyUS>rR^CYe=+<t6y|JOk_Um+50gfM;8`hryh+<MFEGXyEy*jQkVFZnKU za=ZX<v)o+1%?#{uFzEIdH)tK4KXgW`aV=bzqn`euZ>RnOLY80LJ?3eehA0~+EuayF zVVw?&&06UxIk#kVsGKOccXf<DJTfQ3z!zUUl3N7rsb0%)Oz=xjdCRgbhZGL6pG$uY zD^{fVMDg1Ip5LV%*A%-Kt^)8AwJ(DhAH!y-bMJlhRcq1a(7;bj|6Vq0p&&g%!tar~ zxJIR}l2E5vO@|yvBeluu6C325c$a4ubvqNrUL1!_glzOw+K7)BUhH#isG_tg4N4WI z(2X1B*E$c%3jHCZefhuBjQ=90_XA;f2@|9I_3guunkaji*|r3?h1OmTHhcY7rUp}k zO#DmO$RZ_NgzTjDJFmI`p^t6ejhBL6!_Fdo72Jzu+$_C3QM&h*!z^y?K~`NxA53%? z2^SJR6p+?-2ihbboQ>VKaC5*z?Fgtth(lDpOa+_(c+&vWMgb2p;~~huweA%e{1KOG zW<ByKjxqzyx^W}N87*doIX7KdF3~Y%=uOl?tEL<Sbxv#D*|!lok}$m-`kGtO8^o+R zmiVF4IQZgNB4E^^X@U9vvj4o^+;o_c1C5IIt#Ic_Ak*WQ>*+A|T=)=D$}ty<;1xg6 z?-toD&v0YTQpXLs=bv>SllfBM(%I%GCV__tL7!SG6rbs3KO~S*9ha{bi>x_W1^v5b zV4I|J?Gaw5ZAV?znx3exI$v~nc8;#FjXy;YI@(lSi5`i|YjzV{Vko=Hmu;t^ZV?ST zf6|&KRs24~MU}O^T$`PN(nf_!Yf@^mey7wm+q5dMCP4dCSZ6cyeQ(iL$aIHtx_8gL z42C|g&%1iuh3_6qEpUE!^i1}2kfmv}3~_Y(15JG3M|m`!?~Wc(hjt$xI>!mW8FUvA z#$l-OoWYu`bQ3aET76Ww<`jM^4hN;_5sVmpj=CBB#)o%L!uf}B1`%m$(f+HaZ!Da> zc5lE6vV93LVPmd%ygD-}K5r>nrZM0z`wAD<6h+R{G1(eS4~OJ-2jbJ!b`Q94C`XmV zEf2^=6w7EKH_%r<s2*TdeI`1MrLMeROY#t=1qzpEkEDlRXR|#{LyThisUEiKV96Q$ zC5Da;aJJ|Ajk?d0u{a=uBt^Q;WHr&|Rm)^W`pvYPs8Yu?f&=>mv5)v~;5=XQy8y44 zc5DE1&4L2V&%v+sDo8K@M?6%OxX!J}7_ucXcQb<xld`z&yVc;&hJadse_7jht?ON7 zw>zmziX;wzV+Gq<d*;AuXnc%?LT7Y%OjK(&+mgN}T}|-ZT7y)hv&DV=l5D+?K|aPb z%G<)4d)I%m?aXaH+W{Qa#HEglh6DDhrv-4#+hdH2X1$Ha+S+K7&r1_=T~`1iMsgRl ztc&*TpbL@$ruG3-9~@@f4IL}#JoehqUb-)}VIAl)x{fh4B?`RV2!PhswxG@%b9b!O zZ7u67hK;mZlU=G^&#FR!jnI&)w`cp~*u__^6ekS&6Bw%ISS8?i59x|JKWgeV);mDs z_pCG6yV~Io20w;eW3iNfVn!Y3o5hNPIj)7_;Vuh5Q}IF&m5J?X@N`~hGKwSyA(aWj zE%sH^0}YgR3~PRARlfU^%ku^lv;m|JA-g8CHH*=fjH4@umb=6EVg`=jPlhv-IFLAo z&m;CEkDTdSGLGGu8rW-Ci}`x_(oV@MCqq8pyWIc{m;nx$52m=+i2SZnD=v@Y_R%`i z<Y|$fJTw1Z#{Qmh!^os?hoPSB|8#acQo%WLz6z9AWVRq-dik6?ljd^FNBOH~IRYI} z(cmZ0s;Ap!&gf!#53qNkf${1{-f6zmlHtb|(9w8@JP(Aj8Iq6?IXIf+3N^Iqc)Im{ zp&^!xc{_R|Jl%|BN+Ha*;!(}d66ad98wL~k!Q$Ngv|?ohW$d|GrkXNH!S;&8Ps~Ce z6unVOH!;enhgdqq(K!)9{sucwa8)~;3bH67aw4V}v+_!i(y>_&sg!e8?hy{D@Y*o$ z6&OnnaTDd8H@YZ5D@~g$W#1Va#m$lxn}K|Bvd0t<WNr@)XMCP>xHEJwOQs%@k$D{o zt_a5tb~-;=&TRPgoPjIWL2LI7O9kV)VNL3nNk_|O`sIX9a2q>U<Y&9;ox+tyuen{o z{4KhvRb;_$ZlB&Dp0OY9Iz;@D-=EE^2pmNSS?OksrG;nHS0<beS?jVv_Jm%5dhSAS zDvVeCm0+J{Qc$NdH)7=?p53K`_fu)e8Ka5R#j!r+?pK*nF<#rh+S0H&y~%mj7{vL} z-tqKZ1gDfIVlNIRfNu{!OoOe+Ggv1KgPB#^#>>6&13~>6IwUI0e3qkR>;t#q6PHcj zS*zUe6gK?+ZIH{&=#&2z9~W9+?q*TU+WY{Dyk(dV&4f)RBtDb1+*uw@+$<peAR>8X zKS4$UVq@(?O!doZe4Z`JNdhYf&SX{JqvkZX<!;I902OZRgBhp`;wVp~XH!-50`LGp z@j9a+1n@4I!|_#K>XY>4Ks?v%MvFt!1={b=5;Ry#w?U8{>d@7y|K|0!yZ7BLUP~^? z9MB!Yv7(es>dH5|_px_yAT@uU=i9^EFRpX8j@-?lgJ8l+CZD?$A2(?d{@Xl^q$)@_ z6I0WMv!>g00I8PF!|EIE!x-sn4JlI&^dyG_um#5RQRuwg@;UjrA~2J<`Ox{0gx7UE zaIh=Is3N;vXg|Tel$daba?0d7$eP&iGqQnuk;MhffPcz%=_;XKa0Ar*C%sa+_m#z* zO!(SHqcHF|X!vcD^|8-2QvVUQ#dc76+#4ueC&fH+BJoQu%aTVj4ej%nW&{z`)gP$O zHTbu=`^3UL{UIy*?YN7ATFD8-meG+)1+t%qrsfN=pc;IQ)o^ta1mRl&=8&jH5eF%w zjIH=9K+xdM$XqIO?V>u|d|ccxk~$S|VSLK=Yt8iVE}URkyir@0$Qa9^gU>t{A1(h@ zwFwto?A%jjL_wm9Zc7)@ic^(+DNxvfG45s{@}Q5=5ovZu%fGR@$NF}dkQ`-mUl>D8 zbJ?c0A1lmyApaqXrax+3@}q?G<vb4@+X2=tyw=jc#d2IZ$slcxA21c?xRkj}$mb)I zQ9ap!X`RqK@{eMnS5&-|CP`eWohyG<L>PlQDIKJOioF3pc~1*~Y^JL+GNPKI)OoB2 z3{i-N4!w%2O6cDGv2gGR`06+piB4Ncf)(|&NZ)RRa?g`zGWHnF-^TXawzEDyd--Up zm`e{8w=swhkx5%#@XYW1TQtK_+{gO&P<wuVX`5M|*0Ezp6JW^`KtN})JetcMSY?Xy z7u$S=U{)Kud)$&cO$%NFo^|6eQ^)}Qm4lpy3qf+vBnUxfq&4O3la+P*2!JgbyKuQ) zm?GRCtxeJG80*wthWFytACr3KEVcK&ZYSfGTzlaD`HwHIq>(vRcmDa7Pi|&$&nD&b zhn-4o@lmUnfoT+MfchSn<C*3t;rCce;2`UW33$Qj_2?5TY<k*sNIlPAUmI0GdJ)HF z!zF-gO)>i=ux_j*J5TLiGS)<$B=h>}o9vxvCaeFR9~@swFt#BRnPnK>k?3rc;U-Qg z=il={&s|s{R-fKaZ0p>cRIyVopk|r*FJnf_yrvG|w3u;Z-FcP4t^SQEad?>=Q4UAF z$R@^59TTgemMnAnreuvc&IH*9ZNF#&m6X#7tjl#M$-VQ!#To_4nWWQnQii7a1efI3 zvG<@tzgh*r21R-nr0i*_UZ2mNv2Z0#o-w&PQb)WgqJ<@WXlCKh4;*|A%`miwY8u&m zsOB1)d!8?5gqIIilYP*BNyfT9MQ?Vp|F^20DbIIRs@hQsxh8#8a4Q0S7TEuW5w;9n zdVAJAXwiLXI8b~Sh!|7#K2Xh)zvli5<oCIW&{g8!!R8mN%XzclI=`J8^MgekZSn#& zCB8jwY-xMHVL-_)?2_NqN_F3!mr~~B1Pad9nyMfpq;Ga^CsMi^le~N5V6-WZ&7nW6 zV}>L*%gg-51P#{X?}!)rb&{$7tIJQw^1m9yJyM{s$9SM3bXXRg_Hk>EB-q$Yf)vtf zNS`o$?*E4rr_19P5!xc5EZEoQ7_GI>HX-e|uvxWafKX_8WZTH(sPq{sG@4k$nB|70 zUEAg&c;fb|MtLQ!0_Qj815p>(oZDAp!9q;;Has|uYKL0|TOsCIG)my?foRss)XQx? zq^Hcu`jSf>C2z?g&Y=#^u^zK2VN8o-dyZkQMNL9Y&bZqOqZvfDmHEdbpg-heT!c(> z<%zF)xNQj5G!Og9fiqB$PSQ)Bcl6jenUmJdPGCtc;?G*a@X9p{4`EZ-d@%9Omyk~U z3V11Y6Bg-+pC-V(EC(TdJ-en{9vpSt$dk&Sg;6Q8`Q<nD%qn&l1xbuGaf-*9KOF2Q zPRgG%A(?tn7SV?3Izwo(r^dH}mJVTpjlwe_#BCA2L@S=UQ89Bs{qZ%mVs=;3T-uED z?u;u|o-e0qNv~uq<bcrSegEnFd{OO?@VFj>Uy2SbZ!FTi^uJ5do?{lS@O9~V5ley7 z!r~k&e=}~b$o+>{w+|6{k+EK`h)LO}iezn|pKBSG9?5zlJ*VL^h8~%)26oRoD!hHK zKEB%hQKZV?W&JX&{!@+OTW~wj15vsbrI{){hG@ppG=65k`EQ)^L@i;+ZM**Y5h&<p zrze8{ycc|ncu7wUG7S8QK+G4YVR-8qE>+G~l3!E1B30~?|KUy>kka-iFZxsa4>Uin zRS7%f-90X2>==%*=0?kCd<~)|6~dD2QNb5eJkoFlBFB85E~me;845q!#*8bCFik-A zX<OUlAX~)JX}I%#Z<HxJ^=0;1{L0ln@7_J*fBd>dREQJ-dz9gL^gE%fYp!?!5}()* zEMXQYnDO9|&DVrta;$E^15-+U(Wck=!P&5hcA#HE(dwcUITd|Ru<e?4xqC4t%VyAl zP|n4+|Mraf&tZ}`Tqhkmi>Y(M5?A`Ro~^b@FCnJEai1Q--yn(t%GvkxCCO9Xw*{jS zI=8*4UWC%;m2DTTU<1kk(wmhSMmeuh#ZfuvzFdDtFJ$ZKe2Z}kvdct^;j=6})--Z~ z(Q#&cFysRn8YfwJyYYd>fXhw1l->5pNpw1)pw3FjoIr<HKSwVZ`_gU7BgxZCogybM zC%=KAYmcX^Z2h4#C52AlQ7{4*>-6mcB?lAGbwa2sZ{2aXxb1cM;3@aCLkgAqUF#$I zG(Pp{`1%KQHQHF+KUA0VS`ID{cqTtk$hjK^-<I$-Kwh`ryq-EQUpK2?Z3HfFMt$Bc z-#T83bUP0;J6m|46>^k2A0wdJPj|XL+DF6~+mWo3G*gegO!QMe(3>%)*I6bp$g;LG z@8;8_OY+oP)0+zG;N6^YlE6zHN6OSo`xFDmhEmMU`+5vBazr-IheO_H;$usE4=po* z=qH}d>*(o>i{vNaXcM%f$%Gt8AviQdpxkr9AzP6@HG1Om4SG4$0u$q~*SN<1FBd0y z`!Ss9t+sppAyYHP<IHe0h4&_6%%*Dx4L8b|Tc=nAg3W()eQ+J)Vfoac>ml>hYvL*B z2GV_VN>PU;&ETu%0Rk-A^J_luVRUun6z;1-V6=}|9b+_imvpTl*n3|F8Qhr9Tmn{l zj#XZ!$tS5W2<{2Iu2jV%@5udET#IhNoFr2J6uc}cKh#9Sg5c@WMy!TyvGBW3?YrSu z7L}H6<F2qMLO5{zLe}7y$`Xsk2%>+hg1Xhd)_MgEW3|+%G!VXa{_ebPMfzo-RU(7N z;TbJZRMBfVtBm_$vG|7fInW^#-=O@>bHa%uxy)v>;4a4{Y2)`{a5_5kc|?v5idZ&# z%D*h7=mU;iN^Z8>SP)?)YqsA0k9KO#5$WAD5svy?YPY%Z7`1wIHtqxRXCIFr*TbgN zM*SF7IJ$H!?_dTo7+dV83G!#F^DE;?`t^PjH%-cDh+L9;x1v~Ih4j1MI*?q1A*Ubv zAHl)?i0DWD%FfX4CavkMQd?&}E4jlFo&NbVgDrmZ4R4`#%C3M$EBaD~J!yXpCCe{k zXq~~KDYRAr`Y&q=TnJg#-s(PNv1>@tIj3b*1i1P)ahvY=yG=tqb1LQI^*vOI#3=!G zX<5%-)kmaR<E>-Nh3aS^mic4UdhTvii%9#6oF*s)ywpe_zWD2){LlVgMq1AG8UG9& zcYhj*oYfxtkx8I!KISs=dAo+i>BkQ)I_=_n8OevC;akxs2x2{xzi^B`9i7o0WmnvX z4VIgL2b@l#ev|K@VmvLw4V{@FFCGBQS=<Bq>l=kv0Tj);;~nnHI&J|v>CQQdo!53H zi7zMmjv>%btpOole$J3QV~9AvkbQDh_oL1-*N2YQ&^j}u=s!+(__e8#@b0qg$u8C> z#am2990%+tI#|$Rhf^<GFMPBAi^5VN{O{vD<MRj4Lp^E9i((+q(bJQmn~=}KDv+Q! ziO`zQF4!Q=ul9@m_tcbPno>#BSUn(sr6-mxy3m#)ZSD5!$oe<_u-#S)1SZ|%`1Z<o zdnKY8vG0PX0+LqyH9;7%+o!r7PkBsf%3pXPA;igB%Qz!eK+>NmVg9I4^$>UM|5mH8 zn-Hy=cY^IV8kUkm1a>h|1iepEyw#tI@j9801#ZGs6Sp7}ODTAr$D#)Z0<Yn<Z}+bU zgwVbv@!kZuy_?P*fyA|2i^81eDJG_^@<6(<o*eI|G2sUr=%G!0;?P41HUG8b0iMrE z%2>yx(<PX&>za_SC5t$L?6uM6RfW=pR2d3lf(VUULyK)7gF#MNGj2mX(0`dOP`88H zF{UZ1QNH(}7kWKA#`r!@*m)flmkRYG^)!1DcsqJC9lWIraM_FENZfj!*rLyQd&<#$ ze}5m!3#YPG`?lm~*ENAohKsDOt5RM1hn6X??}8rT-h&XSF38w{K88nXJcudEgX|R? z#pLRJyD$Ygn@VDO16R=q+!qLFY(fq>?wX_VuDIk}{jsV;l45;aC_GadcDx_jbXVFQ zlED~nR~S3bQ*UQeW9)C9GEZZTaHG1fce+XMrcBgg0@EB_(AK4-625b@nVj;9R|kQ2 ziu5-dXUNw3$|+m#>aahyp0c*oy)TY*|J7{I2<4~tYV5sDJ$TuS+e6_e`u}4CF_r@z z$#Eua0`az~NP339K=0SAnclxd&JT>DDxYKHpD0B9KGUvq8PIx&IOXJ9SI*-IxLCkT z@u?fJk_Hi-#J7Wyw2$vIw#L_{zsyj*%)ZoMyHA{kUyTer$?>6jQ_DXFS$m%rmKeLF z^#gmr^{&%gLm8t4)RMpsiPWCy?QpdkSd1?5hB8=2I3bF`gezWCj2?O1sMg<sp1wGx zFLArww)C*Zq2zO@CQqmtKJ@G%VaGq_2sX1A$O$is*H!KHx^^rIt6N+g$yez3*3`}N zhsfNJ@AtyWicNW>I^>9sJug}_r4l)FM3!C~Qmj=!a1Uqa@1MU^Hn*%hZr|Du2C=sg zar4(?V1X^$6$zv9_C*R{w?+S`=?G6c?djvXe|f_2=%-2T+!iGU)J>I>vfc-h7a*J5 zxm(t@S~oa`hW^gXaWwn^iGw6N{BDtV?!|Mzr)EwevuFy`#y>7IN<&q>Ap1}i#65dr zk6)c98QJLfSG0Du*fyeNjDdCbSkVrY#{U;I@Kb{tnN(zmA4%EiN)#5*aj<$QPW*Fk z?C3QyNGEVd?R$A3(p27Jw{*?JKjj;ccB@9+`11WCfjP0|`-Lq=d6a=i<@LbbdQ8nf zyLO89=k3PyF0CRvB6RV&P@@6E(&+2DIFhTyK-@p{gHv+HZ^&rBGd<aL*3RQU9M`5D zulCZNa@}pl8d3Yvl`niQEoZ>kJyF0EK}#_wJ%z#Ju2;{joZ|b1^r+N?d}p$^U35|q z@?Deh(Uk46vl8tlvRn1hLY9Y-+nyqJL?BN7FvAxSooE3}_zdVi`Aut6uf8FJ;AZ4j zDPpftmu0c5E@^&H?kmY{L$tu%@F`hK)zeX4)~N9;sT+~~eZ>C;3Ld7`Q6lkT;(J54 zlxVEH5t{>7)bgj=6-OZ^qBNV$&&|3vvKyOdO`McS6vH||0CebvtXz-$D&0gGktUrd z*O7Aei+Ro?wZ$77>><Dl=35kB*~y?s6Yfrq2mlA>Jd34b8gQANJGqYEi6b%XyEqMv zq7or0Z)y@rvr91{>B5~T?VD0!1FBn?0RZDYcqn>Z52Z*zM-jM*=3KA;P^>E(0B_NO zOiOoZ6<cn#cs})UBz3_w6mbQ_t)_8DeS9J6*cu>u5@r7&6nyVYMO6A8r=D#(;CH*4 z|EZM--FGXiYU9{#fOOnL8+)Zy<2@7SrZ_twf$?rWg_PW#vZMhonNv@hxm{-=-hX)& zB&S@uUN-FHT(@2}btP(bT=R5HmDMsHRdrv>;<|yjAQR6)lf)x)0P8`5z*EB5*6ZsQ zJnu$L<~y~{>+&6%dIGC;a`$g+EbeawpnC#|L;Ux4<kw|Yo!nT-<hxk=77dx9DR}xa z$1WW=+S=d|Ip{k0a*bfdv)oo$Q=a?vc8(1eGGOQP;-Y&idcXwTW$?>!Km8Z3S!a*K zG_o4wxzBw!<&oI@wqt+cb|l)CYA3DB54~<6C5Dp<foyEOR?Pe*g>3sMPjZPfEo#zG zY`hDRO^58o_?N9tJ|q4wEr8Xl>JR~~PH3fPay-Q5X{;%+#B}gka}$gg7x?BelXD%( zbVed+DIi+6`2!-j>jB+!5%+IHLDJJcRfcBY7E<E?fGKrG!+j*r)!<UqSE1DH^~Xd+ zzQ4S0@JvV$Mg9XpIurW3&AX<qeM-AY?MeaOSTY}w<`%)xK}OOsG}y*fM?j8KT;S3{ zfFq<eSRmNL*DeIbFlITioQ02HmIme+y2rVPucN1?5t+DnYVg8pn9l2)gKmI_(1=?7 zm2QNP%J95C%tUMc$I4G$;or4RWO(<Op{{Igzq<2%5P48bU)tn2iMvo3`Z>c&p2IuS z?Qv~grat%hOOPHn$qSJ!zMcz)??<n*HP?8(V3?DUk4m^=-%Bhaaa*ER3wP}ty6h%0 zt`9L{l@GS<>e(y?XX)c{KDp4(-(vzZh;BK9&vW1V@@u1U#1GLc(?4A?^ut0)hXS)= z;MuGw(!K>r_mN+(KYnA~iCD1ugu2J`WgDF`4mnZe!;m)D2kq2e_!|<;=umazlK79= z3({?pP*zqC;jZWPe|Do4>F{2!)XDb$Og$(FTm4TAEe)tvm(TQBO-t<>>M7ieeu;w* zBTQ}oRd9*@`MsUF|4Y#W(7`Ash+eAcCr^nBh^GD(Wwk#1SVq#}C(WqHd(#LLGKFN& z@~4_u1+DfIN~NhpsF*x9%nVD>Z=;s<(2N`F4tI|1gk|)Jhr9D*HNcR?DtOh7DP=jk z<G`7=<az8>ZReS2jHR31uKU%umOK6@9uDAdBG3RP8!VJ7rP=mJoL8-tDawDh^J7KQ z8LI^P=*PA4gcCuBo-hN6`VXv|+p@DV)el<agE0fmT#Z<)IZmG~@l@6w7UTl5Xi@o0 z&)QdF%`fKGr@W+v8?XIZl;<X`5jkh3BRDC(OmXb!*UiYFq=~`u|3c8<#?#F;{&_1t z8Wm8ukjAHOs1I<|zG>M_pC&>+lHdgiiu67)OPc-oU^8sy=_(JiQ7L`P&}-8whLMFb z#W3aFpKTv@M#5iDm(AWFJdZ?Bg2gw+r^%x5*O)c@^1vG?Xk*Vye#1I_dR*b}MG==4 zFe8w>t4J}3Inw>b#dcWE4YSGFZXL<`V@UL>mF~!d9qh(|1A>>D|I#iB=f|8GU;elo z*11^~Cp525hTnhJ8FyOL6<CXuRxZI6KT2Tqqgi^l`l*YDE8af3lCcvq$%Z`nk|8)U z)nucq$^5nulanI4!4w1vu$JKqzgtjdVLy0}WER4ZxqR_f=n+t{0|IX13R;~hyBtz( zll1Q8)J{|(q>J=CL<N05lQ<XZk74XNN!z%h?x@U5#{Z#zamIOU$4i|qc~o}XuV(Xl z_hM)N1wrK9KwIq%?;!(f#pQY>|4qSbr6}dDIMWCEbTH03MMLWP_F_o&O;VjY2eTDY zJBEV1`}*=A&a&!l>Fbnn^l8i{cHDDSF^9##=dq8JWQXkWvEv;U!9Nr2<VP@`8W}uo zCy}0U*8SC%D6TX|u{X(bYP_)F9l3?2pD0`}@}L|s8T~;GI+~zek9m)_5Acu$-Pg0f zE9V;?7Egt8?!Si6s^JDP-bzRT1a}zb$yZ%Z9B)7o*4?y>L4hm32gFC;m#r>HLh^{( z0s=6l3wqb3Aklca*`YaB#Vfw1Dn1Lz`aSNmSU_T2NBKZlmw*9!QuKM975xs=F-kh- z0NKWX{DNTmQU0;E@LBKf#ZlE#xbS%LLNxSe?7I9qHSRFQ#}q#`eSA}w^qz)Iak=;1 zar6)2Gx+qt<Mr44?5q@U_Q;L)Ib|Pt3|g6(*SSgiIf|*BKv95Ce*JEGN#$Q$xxx#x z@f>5P<-mTb5OXP=nc#P1m!Th(ha2HvC8|Y05tvd%GY>==_oj=SOr6wY00m~%j{&f_ zx-Uj;;uZanFPN$KqYaos3^`Yqve>`XtH2}r{IRqV!cC8&wruIm4-*rlOp%d^)L!zd zGv$8ZY_Ed{4^IJQ<x^{nNgrqGehZAu=%NWYHfK75->Im4GT*YwYubZtH(94A2&edL zM-#i~M#O4cM-&ElB2HavaC`IzJ^Vl4)DVUd8`Wc?*d<WpvVOm&Pp2wLA}-fv0LNJ* z`Kn~x=M;6JPi4|!okQWoYJB!8uY+Wqhd<OYB;e8QM(`u7lp6`}m^!?WC$xA4m%so? z$qx=B05iR(QI+lAU~rCvA2|`k$As1PDQ@hv-1U^%<j3Tfe$CaeU_YS-D8pwsf_CA# zTn(RUybok3&6U=+)*kYK7SrDg6dLjT)>_Bcm)GtsA0|ohUF<t3QTq!j)JQy)>1~OP z=I)M3B%{U=So%$}MAOdYiEy|ZE4UN9I=*2shsm_t)DRiwI+zCzkS_oAkd*jH*M^xt zI|(sEaX!Wu@EV^}$|=CX-L!Pn5=;+1Z`Se9GbF=`#R_j7v7ZtT@s4`&`HG3U)ff~Q zX?n~8;+mC_Nzt9A;ZwdpF-a)7{7*A^X$m68UG9`YnTsgtNh1@0iV$%<^Z5rU<qZ8m zpSdGNHsz?s)D`&?svIXNsnP3^X5c%AyZu;|Ll-h$H`>LoEBo-ntr&B4)<F>90dweQ zq!HXE4@<u$PhC`UB)t8}kf&sK9!GyX$rZuyJ<-RT1b%AQQW-ID&^R<zOxyEoTT59v z4KbX}j&)f-L`G!eG8%_9lfGd^X*|(Z`Z!I`5fn#=442nZQ=L>-PAp>_%U-oIio+yV zBaMJ58BNL7-Y-pj8GF1SZKO@OP8w|v1WTr;jiVXuT?zJ#U+fT6SnxSqgIVXN7uZ85 z3TpV<&O%)uhj*_0<a8DRy<L{aMyHa%73yf3(koI)8_02Q)FYe?(ITSIzC}9C$hl_U zf2l^|O^6b++O9J}al>9$0i;Ad)kN?IHtggNwPTD-9=9{!;~Odby!b9R+EhU_mvj%a zmc~HLcqNLkQ~b97fSF!K<RL`wS=a`+zRTn_n=Zci;BkLr<j@e$L*Z6Fi2e&^jAtR% z3Z7Y5km@f2oEN~gUk;=@)Q{a;J-P>es~j8Bi`Pj5B+lSpm}=gUn+Ic;t=8gbChJpi z9AH4NF!lociWS##%qU!Z<Sf3)jVUqi;d^gb=&DXmTi(gd$CJI(OAnU<c>h?acHI^U zs6izxlm(s@Vi;3&oYlF`>*v@FUl$H$r7p3DxYqz@+$6LN@}?PgD|9;7a|f~6h+S`p zK3|c~IUtKRNhw_r0ddl4@k`Gk9`V=fZ?83b?=ts<GYDG|Ug9*F1rHsU2Q`Vq1@ly& zjs_3{B$LWX17iw^C6{7Cu(}rWE1tXZ1ai-3Nmak^ln*+@l#azB$4Senfgtd}@j6S? z%`Kd-(gWqAX`84Ai&Nc-h9tSHj$l2)>tZb2r_kUoAyU5xH^gvl30t!7(io)@e1cJG zw3t!_3L|JTVJRGp7>&7QgGoDoh1I5SE0pZ#SgdXmbL=c1fHK>$!oIt$2AZ2LYs6p6 zRxM3j^yoPv^43u)Y)$3rj7jwkBkqOEe`pLe81BUGe<V0cGT-iGZ~5zJ>zW6Aii+_x zvU$2f^BB#ZtB0~~MVo!%7Z+S}QnG;ma6$3&x_{hc-?!m<iBNA3X6$o2ClkS(^By-= zREqhTKY7H)-=MYk{dK$?cEIf$l-b`FwrheP4YFYreKVwLn6g>@xgiq%9UCR(GwLzp zx4Br<3{oe>Zn;I`5#LlZVYHG}C6}J%KwlWVm!F%bl>3ZHGLHFvUqHu=b!iG9Qj4rJ z#Ae!IDvP*pld|}tg8BG3I+=)J&nd(1BA>+#TGM1ZO6z@9!YoG}j3WHm-RELLs#ft9 zcDG&5hM>s{(R~g3{~uTH{9b3!{cSgH%*M%%)7Va9+i7guNn<p&&BnHE?r_JpZ9Tc~ z@A2S$f0=*aI%ck!wa(AEaDTtzv_k+<Tz<jz*Zw}pn<dDhGcGS@Q+KMhTBQSRi=322 z&mN*EBE+$x%XZR$E!~B35{)m7AFbV{Bo~ROay-^JWaA_awe%YKxkn!jMIbSb7Ob$F zClPjlw%kpZ!pzq^TZ=uHw$ir)6DG*Q^ORvapW!rmG0skWM^Lm8_;YJV`JQR|=dY5g zmC&T>y&ldP4znDjTDJ(9i3It6niKGGV%O))DE50$)L9rtf!skoifoq%E|N$KWF<+* zeE;<AcuJOmed8f)ug`VxV_3c`7mmpL`N#w_+$}Gs<uV|0$UEyX#`jeR<07r(5b;$R zbb3}PP@q0OALAga<s71!7g_PspU6?@LrCa26SFnBI>i2^Yg3(DZL^p8OAKHgsGG*} zFTt+k3a8cPaLuTO*bxzbQm^?g!>Q+Lo*2bAUEuqN{`wX1fct#(pi4x-Z7%RS9)EO? zG&8adCLe3m2(7Cv80l2#x`Ob6l=2wLDnvJ5D7tfRXHdEAEn<1PZhw`^(FGH*SoE<} z5W&c|Rltui$UW1MXyMvN&{pybK0~2q91z0ZqW|MlQKzEfcr>y=!bdzq!f~7?aKJ_5 zKiLzxCBiLk?_T&WMHWLnJ>BP9egL4Fbmpy||CVJx%J*sLW`f~4KJ=aG<!F_r(e`F_ z<Dp4H<UfZ3HtYcm-<ALVN4ksWH93~J68ie*d-tc?^RxO#2cN`K>a_O@mX{zIQMV@G z@-+_d>^ok6?=R@1vmKuhNDF@rYW{F}mK_up${@#mawo8Yk{|!#Yl;&o`HsUhwVrqk zbxh)SDlXp$7@ohh07>ffvV3N~OA}9~HluaQ>r@|pFub|i&ex(RDJfz(ouA&9G<vse zKq~(G1pct2Eb0j~v(7_)P(1nOz0PK-3IB#dmtK7&S9V6@b^ts*Ev?@5%Hjvdr0YjT z=<dvm`<|8VZTWuO3xoju+(UZGamI5wI?~D6+}C4SXMdsk<44BKFd_hF-2ci!%v9>L z4m9KQy82mqTc3mA1_oB-JGsc$-0{%e$<Ajy5_y_(ES$o#i(JHeE@eP)yZAX&4Z}OA z!Ti_9SnX+8Gtc*+DW=f%h6XZz1Y?LN(#FuMpHl?Scfu^QU|W*z1pVo1XB8XwvIeck z%R(~)$?U{~z0O~j9U0d^OirUt?n%&T)RCz#Ja*w5d_{@m&g72~R{s|=+$!11XuAGs zY~ysS`^;XO*{h5QWN>HpZfnytzv6Is@Nrnx1;SW7JW}XKNi(jReN%PEvtH9PBRPwU zCE)1fjPsP(H9TafH~8Z%5h|F61-}OD5lz+X3-DEb5$1cV!gR^tsLmNF|9UJ56~d+q zSw0@3&j9GkIwTce{b-DV?V_Kdg*^^DWSh+Gh@_m3Pjg9sPu`H==si8CD6<Fgk0)=C ze<j8qr@m}9bq|vDphUtKXk#l(9+7{l;Du!JA+>aEi`L_M?)r?W&9R9?Q^5Tp)6DV; zw7)%aLP~_`ZBZeOxT9wKcXZ%<9+_@q*}hT}629*8id%lp!@lcQ)I|4(s+p-@`SmI| z#A*#fM6era%CZ`vQ|j&>kc_#ygRM=v&pf~+aIg-=MqGm^8!8BqJpo=sJHUeIE0}xY zk+V$Dgt#cn`K0p`-KG*0xT1p1$4XF0VXVO)^Ss+^TU+oCJF1C%Pq-MBcPfl5-&~o` zoh(PSe}LWPNVVovghYW?CPDkcF#vBRgeq<%8Js0a5?`+xXACQ+y*|^)R91rJUoUh< z!UiuqGCbw+#Mz+)cY<{=h1>k}7Zh{j(fyrc{Hfh;;m{U2Qz`qgMS1*PK4lW(<(Pk0 z4p%VGG-60l!678gR>K_!y0~Rdl_oOJI0K?lsI{BL&X|Y=dTH1<ccl7kn?6R|TPGtp zn`5rVApLx~>sSNC45(bu!3{B(RX-55zUmO%N`(WGP1WbVx|25l4Zt-?T1hnP232AX zy@paI-~$>|!(}N4T&6wzk&{dr<2yTe!$#mS{>B{HS5tbN9g4j(>U&>{m$g;glq}Of zxQ-Dr7{-N0`|H;S_|l8qWqhX6VK8%x51M(6py6k#Ph>`CW2}$+2i^Q>{x5nL`>O}H zXR`pg`F*9jv&icrAxAr#`pu=<vl7j5Q#Cu6&5w$~=b9rW<csRre+Iq=Z|PNv+|ndY z^Jp+Mcs`s_RZoY&Rxh*xk8Z#^fNv8(+RgkJSf$_TyQ<YMgExD?_YTLap1hlmL;h}F zp|D{e@g2gxcM&K6gU6`b7Zd#1=ry$q(CgA-@)~97{^zw)?5%lq8|}G?{MLg!1cT9i z>Dk@P`@j@K1$-&14ku@RlF*^=l21SI{O7Qk(Fnz(tOY7$k6CGw2<DeP{plMAir~AA zWEoTEKjhLd(W*J;f7Jkn`)v1nPQ1Ork~ab#TZTjEUcVZTD27E`kDnpDdwF^NGDi?F zNJDMYf~m{P9JKm?`pLJiMk6o^S<cbcyAuTVx%l~qGui7c9$DvO4ftW5>FJewUH{dw zy<y}fI!{@-l5u|#9!$6oiBTVF+bYg>Ei={V=8g6@`5gXyy1iM{WLP2Jtyp|Fv-5HC z_<Y^8dl>fmm6Es->6-5f*WHyrkQz)JJ(Xl0F?G#p7oc_QHywN(^Wk3o3XIOM)xfU% ztBKHUJP*sNTZ0hNL(x8M$GmpXBb+0kI$`F=_l|9lgx#I5p3XJzf|7jP)AVI8F!fWL zC~sb`tuSfQYPT7`^O9^fJ^dy*JHkwUq^3>IvaOm_#5tSehD}1+8rB<Rx?D(&E_U}A zWSa0?ffvU5Z;o4`ec<QI#u3fdA1)Pae(uePuj-7Dcj_^g?yda3s;{eJ>rvh9*e_P; ziNjlh4vABun-F~6G7k!67<zZNehp|+_cH%`@vfSfn5|OG(#~82myVw*SiKRh=+)*u z9XyQVf4R}1%hDExm;-u+#TZ#YsmHE~%a$<vr<lDdDL2)8?TJ7oCBHDcxHSs)K_Tsq zOcZpysr&9^q(}>j_NJ#2Omx25T_b4|608?lhdxak+cc6a3t=2x8=HZ~wsVo!*b%-c zWk3Ny<x*wT$6ssISR(F9!mHV?rJSDKT1IlrmH8yH_RdgT!-CrEr6GGv_PX><=P$!8 zPoccSASv3Z=j?D+hB=!dC%u!m^+v-5W^p9l_S~&e*`5Rmw_LVG>JZ%$LgX|m^F0wh zUcBJML7j^FrNDt&r-H3<mEwg>8{0z=GvkRt{<2`S(7u^SBu@~_Ly1>BN4$UDrx!GW zN3;pPEU|;HSO{Wmlfm4ht+Qhvhwo1moMhD<UAb9o?~D8C0Hg}K_^~o%f2Zz6=!tiJ z{e`y`-EMc9W=ou+m^IgbZ||$sRPw$@&-)tkGvmhuA>-#TCYfnTj^Wic48LT}>0xRq z4SPcFX9RyCJklH?Lc!a0yEj`U-`>L@rIf4aJy(@Wc}$z^BX?=Tn%@KSAb1+GwNAgQ zc0TD3K!~fXlt9R)fI<`!Fua2}9GxqiQ6HbdI+6^ZV`U$j%W}N$Qbi$M!(7QUGpWP) zDN|gMN3||5s=Qm;^j7LB`jvQ!Nx~Ll)>VpLC3;jCYPqqQWv3UJWF($O*trdZ1F>QA zvcgU9MqxMIk8OEPk)W%<V)XJ$;`aZBi!cY~A$nhh?KAG=m{%N+A?*K#4iTxRw|%;f zr||Vsh-J$~wv&)sw3Ib>^3^wO&;>d7vT&IekhfK0or=&jA=2&F&KMds%`B*U*YLi= zTi#GN+9OtZe&P0%=E(N4o@t1DmWPl=NGVot)4hTF4RiPT9Ll!sHaYRL#dj`$Pz}WH zE|2=Xyv#4woPY~;IL*n${O6_nG+j64hVR=rEP{s6cN%6{3uf%}34wCj>ONP2abDV( ztJLpY8`@e2drd<9n5R3Ql}D9F_{eFy%fXcc^<#kgNFeX+#PaTFeZ=j~Sv_zgJVOJ= z)VZD(0oHCTW8<#q#^!}|<nm+V@&{jC7;<*f^&5t7c*4jd?FwVf2HiQ><F=B2dzv6` z_4^z@)#E%GH*IGxV1O%`$0*9xdsS#S*@RPqb=Y0(v29B__!Zx`;*ia-i55YQJZb2@ zo;xk|zC9Z{fWWrT#Sb`6Sf8jmtgl$@g{!~c%fAx|Q&2+uW9FMe|1U3D=?DH{%4myG zZsiST-qpMxIL&e~T0s^Wv@B(Zk&%$eq<6a|6S>X~v6LNg8<2V9I%wufmFN&P1q9|h zeP$By>_kD@Xa^m+p7`>alu^l1VtArv?`CLCm#ruI%eAMhUs1Xt353UGAomsS=PlAq zbE-#VoJip1Ue&h53rTRMwUU$21AkMlvQD_-X1k=%@JjMleBrM$Y9d01I0S$30Pvhl zj)4*{L9Yq>kg7Ev+n@VGol-*P+I^&CUKDz%&T)U}mPn?8=~0pCJIv)1M2FvzsQP7% zON4%xochlp&mquAPWowpEs=xUNCZ#HyRgTN2!}Ycuw4%@x!@rLOFZy1J7>nl&0$JA zf@RFEvW1O%Wmr_k2XhIq8H@qL)v<0Jn0*t<+-|G~xzpHT<oAo7GN-cg?g<m(5LOQ| zKV=Gl=5&95VRz>Hpej^Hi3rn%-`7=^b=qGxNmUPXXLUg7vrMi8xT;OZ{>*o*&nL?D zl;;!0w5CT<$V{Y25M|+w&t@!o#Is)~EJ)>0LPcw_lB6d1XH>8!H)r&2_9th+De3QK zs-h~S=8>OefjV_D*fi$_{>M~F%}lM%Xn355^3u(;Fs6r1kW75Wzq*@#lWx<QBPzxJ z#1Pyr)dHSe0~GMcE4b2$s~`Q^d>Xi|g~w_?Zc&r*Vi9r3jt3FU;}<HBy))uxJjp%x zC;#-E@wRvD)yvc8xYzAH)VbmzQ?&lGmy@8hockK0hz~^O9_RH}jLnna$nNi{R4%<x zv2ZP7$3IBq8}xoNtN`r<VFLAs=?cH0Z=ADgKyu^dlIq+Pz)b@RW_NCh&pXK9E%+=Q zCU9djTEi?;YkWX~sO(_4{hTE(`r>Ka`3@R+VUud34yiLP=%c#byhc)#%nk0adn78` zh169nqqQIdvY3I07?c~sNoh<7&Ttj?=RRl$g5~K)iJp6gK4bOC1vdaF%ruy#?Iy6i zrP;4sU~?3Zdeu8f$M?WEcVQg*KWR;S@W*e9_nj9mKnw%zYuH7e3SC3D<Ml?}dr~!` z;>UrzT+iqI6bp;UPyYC+#~Iwg|A1Cwg(<q4*<~8N<7fJ3gpZt*)>ZKq;HZoHkDXrQ zHy|xlV53RW8}-I@L*p1Q(ar7a9dnuKl&MWPg*ZIUa(Y&Ok6QYY$mF4Qzn`L``(J{p zV;iwsRc>Kr7x2{cgXy#*dyclX2R%&bUH%$ddIR=z;bFbeP3wZ**NC6V6*~d^)ttNt z=d#AZI4tTKv6hi=J4Tr-$7q6#P&&n5nYLdXHiaTrxbA$1!1?+Ou?nUZK~skrafx?G zH!?QYLm)<u3<6eL7AzW)00EXI;<?0~sU#fRk?1~X<l~HHewBXs+vttP(4YAO286xz zQ`!WZy%FY2lO_lrisAY++k45JZ>73uB9x04tJ+AzlI$MXt>(IMu8?3MRjJF>HV6aM zZI*x+r91fi*S}c8Q*^6tlV1Zm_BQP2&iBi#*sM<Hf3<xt%LFnxADiuj88f%A+h@7f zLeX<l=9Ks4ipz``MFu(bOhP{pp#O2`;xKFwWwe342bD+&Nr$CGKRpq#2i;x(E6xiv zgN+uulx!8zUJfFpTT`FX0k0=)!OBboN;SBE7m)@_Hn9V<7P!LBs1`ZeKxqv|Mm}|~ zp6%9tTC=PlFAr&=GW9r%aoo<N8RxN$0QijswvRI>ilvqq_BcX-pR<@{lvvB!qNQa+ z-*l6@^|EHuSM+?7rx!u1E!#vH4}v2X<1)x8Q{gp-o0)(E!p;x+j|~<+`@M;0&)<s4 zl80}-5TSxVAyxiJ8CT&?4Ofy_!%RnJzDr^f#9B_vmMd5&w!{EzW*<fhsX|ZwR2CC$ z2CKf`WrkXDlOK@c^sUQv+%Cb-fiA2}D{3A(V#6_qg8w2Xu+Z0-eWnH~B}7g*&jJcC z<?xBk$c<6v+4DJCL-Cfpp2ed1mHJ2}tvf>tM~4`UAUECHO~tc1ioX)7rhuROUVavf zQgRE(C{pU<)<G2rwV14Dq~dO%w3&dwA{fIgZ=L^U@oK93pBFe%qzOGdJZ`-2Zb1-I z+NZs&n$1zJ*R%x+fyy!vQw`ALj=wtHvo$D=Araf8cre~M17P%c_{|C~|M4dwLf9<c zGdn<K8f|rKb%Z$x8wnH$6i<w%5`vFlx4>Jr0d+dZ-b@`cjo_J)v~Ac!V?a<zAe37{ zL{h6IXZ!vuD&;g<{pVP%qVMS0Qrg0ZRf&_2wLyR7%391$_rv=T2zAR^eEVTwqSHqH z9QUCDbOQ*xN?nA|s#no#$8Bj-dPm2s!H*46jE35PZb!wa$%o(PU2^XYi@|;}IN$dN z_U#8D;|P(;b>-FP1vN!X|4(6tFWPhKZVvdf`{qP1>b^h&a|fNZ{Y4P@j{@yxZ5O{6 zeh&6<>oM}o4PEzr@Mbi>>)98R&btNnxEKO^Ib3jVRAXJONSFbNUOEsk#_K$Ml<GFK z6~31XWB$1MhM#I;fc-5lG24pn4*Sx4q8~6$MT0)gRKPrNQiU{3-LWj-CI=Gi#REt& zI=BqTnB@W^{@7#RsW#V!h?n*^PL$q_;cclZ+@l!vqO4ZvXf>XftYw4xRPzvc6Eh44 zSlHMlqH_ghV+mr&@>2qt4Uxl1EfPwp^5#&womJ)5WA-MnxtJYdLpp_w|82PwX%4ep z_dH(j?i?0RdHG$PU$&HLcV9L*jzLk1g5$n(HglnpV{yRsR*`P6*~d?XI<)F<;;~vo zR_Pp-Meo(`=Sl}-&0UGt1e8w4+%AE^7xxGUW4nJI>Ohl>ejmoV<ZT1FnG+lZE}l>> zJ<{wmldmky|4b#*RUs8vH1LuM5RGg9StSTACjQNySEcTokQQwo!?KYI07HwHv{{R> zO=+OlfEC`<eecRvq=>1(2phF$4wEE`Fv&IQ$00iF6@}8iXbr9QZJ%wDIk%DAzWn2w zC~3I9$|eM#ggUOL7WwtD=M|B-h|^s~T46IxOeJT$D4s@@l%Rv2+67S{q~hY~KPiw; zX-!L;9}cZbDG0`J=ok3;5SF=gsa+p4Z4!d|SnXwTQ;(KI@MMW)i)6lo%EAG1%im-- zyOi}{^F>&q<%5l&EV+}O+*!NENn#Sri1ZBl;gH=}_cigXpdnmd8GGL*{11OREa!7W zeA40G@`Kkce1dQn!F~#{22{H%@NcCp@9`287GC3Bf&1BJSsL`y#>r1DI5%*(UBPlv z`ZS}30`7z)z?Qi581x%)&87k=rQr#4+4AVG8`Z<2&t8#|98Yt{6{_dh*XTcM^VS%5 z!qK-9R^RvSjI^tt*Nm2p=I1DoG_D66a9%HgLN*?Yz2@z)=tj|IT$CYEhkt$mckzvB z4-e8)Y$^jP<-OH0-0n@A)W=Zq4rQ79xHu8H24?*w^=B(`JtmzG@sL*$VSl3?DL4W$ zu<p7b%m<|q5j}XCCn(q+4^tNk;3-vH`h<;kA^e$WxVS|aG$){Q85zqzcmGuKtncSV z7<eZyeaE%xpfac!m+N>+Nc9@6PTnPon*a`RMB{@x1z5?;V$9dsbk}wu!d_5_`E^Xh zQ0q}Ge-04)3Q_0~y|h*Q=VlLx`6VE9M2ze)GHf)rXw!w~x%GAnWQg%T+r1Er`DE6< zwkDJkHI$eRi$sprGsqMy-HqNgb4w#1l2pVFH_tTe9#H(mmVZ523iFrJ$v-2bo9U%h zIMNIV#3G9~B2;Ogk|Xs<hV5B!^{w_Z*6Ehs6QuPDFo=@z%9jgExpY>^R5|!@MYhpk z8opcl5LXI11AgcTb5tYGRDiTo`FCwI{y9ukW~}LGHIs|#5*7sN7+H(vKH&33(Ow_5 z7!JS*r5$0r==^PJYL?8Hbf0Ei300x-u0Zi)`z4#Mk+tP!Zj(;1|4V&M$(G+S#xXm2 zb1Sn4izRZD0|g>MkrQf}vzdsLLyCgb5@)Z>GV2E&HaJUv8(o|P_^@>GNv@F=-p6j+ z?(Z?o7Bh90RUDxuySG$WGXkcampF&y?VpPl!Of;Zo355rW`+__I#@1(12$`HHfM#$ zQRZ11{wNlX3TmUSs(X|HEdS^Uzuj2R-LAQ6_X80T_YJTNS7ttRiQtgqx85A_nDgcf z<-Kwn$!&8gZ6LEUX13Rmzl#nFRD`eD)k_qn8>W?F1Z$U7UdZopMHo>(6v4DD!!JJM zcw=wq5;&9=oCvoynX$kxys|<!>s$8E&I>b$#FSQ(9^)H7N+o?&q68Z)G>`rj)D`g2 z7U;ns--oqoXkkA8Hs?sa%5&$8Geru~VtuLr^;prQyO7Sc)uyOoBJ+h3L}8CNkkhx) zrW-Uca?Dk<a2(=^+==1SEL%nOCwp?ProCWqOD^7NJAEE3f59n~`fv4u5r@!hL24w| zk%X{D3l%>mxu;$m+plza?rI54g+TRTdq42%i%Avf>_Uvc5rDilV*N?`BxUONhM)nY ziCcmTp5%A_f$54KlOH#w@*Oq2FKF+7%)671rXie$-LLkiEw}Wav(J`fAz;|)V_g|& zoJq;Yv5~T&P%LYnV;wbG7AZ{+S~n-zH|RTw(7TS6TO;wN+KS#IN*AhU8t0;a@Xfs! znEr+1fo-C8Mu74Cr)c8cQ~zFy&5RFm;{IV$fTOFRElV^i9iNs$h1M3F_E)>Q;>GdD zsn9Sy_M>amCL};m{*$B>{{~K;z2--Kz)^^4ebu`cWBk;#`{FiVKk&CvrTMZ!SPW^~ zQtk0R&rV0bddB-il;10?<mrpG)_ND4+kdc+|0{K9?}oW6kuM}+@{yc}V=m)t+Hvqh z?;AEXDc5v)Qy!MJF?F*2m+l^)jB@itZYpRsBwc|c+o{Si=LQSyvr2`qq9N5!4jtoP z0#*m5n*q-FFYj3brE8WaLY7st5$76AZfD13^Bt7|NyoFjM}O&|$?$79E8Fjq^djI& zZH*PcPh(rE!Car2@F}#VWG$v2tyP9_FasMFp_mjug(OwXhSM)N(p&@DTPhg>gh|%# zA7p&SDRw<4+9}@sNbOx|v8cg>*T(F^SIX}eORQF4u5LZ+0G{Rql}grVk=eD?8@R## zecBy>O2uw36t3Jgs0O^IfCm^PNvJ^hafrrm#zj&rPap9>B`634Ap;1P>G0B%n$*Yb z*Bra}ntr~>HAd{U!Iw>X!-%mGldgrg+VXKh9WOfLn3Z~9A3APfH|><en?-Pnr_EYV zjj4uFn-;5~%H`Y|!cH%L%YaTs@MRSomO@}99ge@s71yHc$%<89F56}Oxh7S>4{i0M z&bd*MF4wN@bSy;KgHI*NZUv?C9@@7l_SE0%c|r#Y`Nl{Bb;R8EkeVh*ovsF8g*3CE zCM^V{F3FpDQ#n_NKG32;`(fZ1Is_3yWW`}G6W3_E_)F$jvasvVXtP}7&?C(-`2G>Y zEC&7-+hK{>srY47U)VZ*EC1;?a_-?;tX{D&7AaB%4UqUS=P5souXAi!<)7?a{E)^~ zfM2>(RO4H}gp1W?UW^VDWX7yb6Hz5Joc#738SA45`w<glpIpCivYEd*%*aox>w^g3 zW}XQrBw>~B7V>hDa2>ZPZ-TY0q?uaEFEmcr6N0!*KC-~(v5m_3W#7rk!c1RVkE#BL z0T|mDd?g_nU`A@w=xt%6tOA|S!Ou+H+)+2@Z)~DA5~`vUuM}wX`gA;5v>b|h0_Q8+ zoGOr9=TvtN3<0~2u_SD?PszQ69#0iky3+~@OqGT%fQljD9XfP&giSOE`~aDZ5Sb`B z=7;@sL&22S*77WpT2sP(TQp?8uTAJm0FGEMvyKP4z|HkdQLx7{yea-|j8!5awT@Tp z-Ckd-Sc5`Tk?%Ky!HxsNS7BtOcNkKV(}?Ecx~?~il44ha;s}k*pP-zx+@K=KBLvz} z+~wEMDhie}PoANT1#~{O`{mcMD{$RS|Nm}07v#0~Up4Ck3^5ObN@0XrQQ~S5vrdV8 z^e9g4Oq0tQvpXq<Ov&5pq6xo@ynjdOu=eBlx?RC|_^=f*Az68&BWI*+_H5A0n_uUy z-On%M+b(0ra)2TGPGroDH*ohX`q4*&m%;@kLL!DTCA%VYoLr+!)-A)`{6O|raEsJ8 zbkJ5UJI|OLv-1%Lhwb%Ake|2lS4P)jJM7A|5f1NpXtrz~cOk;D%C$*He}eNEk2(oM zRT!&Cqu^02g<BCW2E64r>lffGa#gcgB&K#A3$)(gW*rru!Qu;Nzeh&ttYqpBabmrh zD<1}G!7TsGCywz2rbnYAdVmigCApT|8NnzHGSm=LlN#tTDGxj1#fP=52`qFt^~6Lr zV#Jhq^V~<3tg^wsyo^h?#-KrVWlLJdgr6H5MhudPP>|J=_^i|w8VXDD`D-zw`Y%m^ zSjCj)4qQKbOR$H#JLjUl{F*$d;}xBiXoqhUnhj(tDu@9YlisXbD6>`DN#S0MBABFd zH{tTn3bo1+COt#*;rqV`hgK#fsxe!W(3o6Gd*vzVpd7uvlY64G5aXN&Z&MEIw^-s< zGdHBM)6La9o|LUjG+=)Z<@#O!uBo2$pjg=h`-d01e67Wo+UC_$+(34F1~7zmN}LbN zz`~q4Xt~QwzIBu{q*c_G+Yl716I5v$8$N*gsP&p#MH-#1elNd7(>Vrq3nPFgk8y$H zpaYA{<({A5Hu;FQv&BakBGY(ZuCxy}j9|9cFz5vFyA4|uCRL>2{#>hjEGBL8)s`Ox zIaqpXlfXBTw<iVmK9-Xj%2bNw^*I#bDCL#uby?CZJ0`U5gN3m^2ic-sRgc)~(dT{P zVJPY*s5nQFu!`Rrv+~_bgnwpx23_<I#H_hWQF|~b360i=_i&3tW99hEQB)#ZY^R9# zBNZRsh7W0k&2hvj@@G?m!QIX>mFZQZ@CNWW)~0D&i(-hFQI%Pn>b3zp18ogfiBqJN zpXUN;!eQ2aW*r7I>;q-|UWI&)#rj>r+I5C)-DL?PPoD@6)^Npyt3Rxhs>GAXip{C| z;SVq_6mtq5LsEC`c6N|Ieuha|^D87jxVRZeD7o{}Ai!=NN2Dg>@@`IEcz;<#?=uA( z4}9Adfdk|f#AWL4)c_t%brxUFh1O_D;Ffnq?E@ozlbb4VaDG2s|Nn~c+@z8B2JBqj zX(ja$!88pr4O$>5tTpA0xRZYu$zh|TN_s_VI4}<_SMJq&Uzb;;K2NwyzP-@YJdD%7 z2SjL0GeNW=cNG(&ZNL;3ZMV8jxqq{Y)AsZ`?S0HGBgO)2+CcPCj>PH%Egqo@6WpkB z^2wDXLuElDiPfKqws2kdirOeI6oMzsEE8a_2{C)j+9b`aaGJB0P`wOV`12Dl4Tthd z<C6t+hD8?A9jrv1a0UoP#;mM_9<a>_wv-7G&QKH280W4I{$7>YohHdumI7%1+<#YJ zQ>kiy-gCTJeu=-bMcf#SP?n{PO6lBsGYHJ)h|5m}gr42%f<<YJ^}OhrF+m8!_nOj- zLbmFBCkbINmZaAoW&lpRr@4^e{j%?FxSWQ~v(mCU4lVk#ODZK$k1+hJ;h@p_Z+4)7 zhf<$gzJE3K9W1j)(;W5l7CEKT<>5f`9ZH=K(iH2{9cge%;u%YSXvnBoB$hCO$*Q!q zZ71qD0zO1m3x0;xM9X`TV)3kEx~T};BT&<^y2p>Ox?2{!W3~*bv@KoXucpU*;FNy* zY<aUK>G<LnopNE1Whp4irZT&MoGQvlD)L)~?rAP9kIm^cT&`f9*y@Agf=?f>`Mv(L zn4&5bTU?Yi9f(m+1?TEIFryN>?XS*423)#jPTBeQ8IdN_PM5Tq73lPF3?T2;k2m{n zoXv;$%>G~uWAyx6YC0d;d}wzs1D9xs9S7i#p4c)#C54I&`>;?CUO5OcZ%3CfLqB_U zDcY06WmP1494m9S?3<97gP0yE!#7+Y3;Ry78Xp(h2*)Ll!qjXC5<PDQ%R>#C;yvZ_ zfZwMCJv{O9gt5idZy!>SR~4%%A3!DkMNKxLOT%&h1W&qkv2}l(&s&}gPv_n5hzwdC zI}!#nxUp4$g`TOcb9Y4K5aimE-^<%CbLqNWI&VcWz^%<i^H3Ld`V;Y}B{YbUj<qoc z=Uk;Bw>;V*Ac`!5i)ykSbff%Q(sTF}6OQdbNb!OJ7~LHFeto#}0J(k+1TW(9frP?i z%fL-{$Y7*<v>TCu$_O~u^zF^X0TnmJTO=?4qwtuJM*oY$yEf_Juw%Sc81;yuTk~X2 zG-_JKeSzK1N+g`(lD#`9!)<RUYc|RR|MP;aEn5Qra@sGZF^h}Cb<ET&T;bl}y)abo zLbBs|k&F7RgdJ_2C)MO%M4HR`^D+&~m%(xzUv{J2PLE5Jg@NS2eDHso;QxI+{`XIM zed2E<xy8-I6J=1|^w!lADkc0^ja$Dj+0t;iY?CYS&HpVoeuN2nwuKDjlAQa=*)1Jr zK13vbCmW&D?mC<*5ybcx!8fw_LfYP%4fYpe5poqJL?>^_{T2Y%P$$t}`^{>1P@i#H zXh;e78=Nr}l5Sakk2n@S;ea!Kk&Qu5h&4Jg`g#ZBFkE*!SlJC2Em2mR$+vdWPmqj5 zhI56>y`qtubiN?PBu?-lw%RDU&cM2v+PO8Vd)kU)uRwyleo4#(t7$Rpw+B<GXqHh8 z=&K1opUWSf;~T=oNlp!7bwgJLkA_n$hWF2DR%^rn$rI@Q!v)ArcZVMV+Dl-um40~^ z1&k3mZ8msY+R-U;K?7u^ezfD(vD#ajg>(%NMgu|w-m8(~JkK||rh=OlCY%ph%45H# z(Zg(1(vesVBdv;IB}^2%uKx%JRVQY|g%~$S54Q{o6R{w=`ICPOj@4mo5%EcCv9X@p zaFid8+g)NjX2;70&2`n==HDvGgcYSTX!>%R0`k=xTq7rcL(;R(^<SM;Nf~Ped-MXr z>5vl<RDG50K)_nlN)!92bu4hTI=5{8g&Y0N<hAsd$g<x_%}IjH;##B?ypQX5WK9H% zf#kx&1ygjB50+Z394!k2b}gXFO%b5YxSAM28jcej_K&PD0bcy2`iP10q{uY$I%6aH zUr;44pqHB^9j{;*yEnz)Z3yI*F5iNx%!cuhR*L^<X09RMw;p{o0!7dL=&gU|SRUge z!Rp^xIda3BOOZBlc98J^pnl|kop40v6ZqLLlgL{ZGKUIs1__u8L+|zn&Jwpy)e#&O zjGr9}$MgRq=S2#wQNMq+TTHRBTUG2jvM@`OU%1^n;=7L{3}Bi{(B*ydK-mM&0w+ja zVV0%zX(hc8s?Ee1O%^({;aFwsP%Nc1`$>Bx765yFt-78wSo4<$VcJ&y+xr$119v3b zwi5!_gm4V=pe)`q{HTK6w0QUIF$>&CNRv3U-d~^a>mbWEqH-K|owGa!yiAWPo!t7U zvBX#cq9wx<L2LkyMwCcAmvvqRWHl~Uecs<V{Rg19+t1Pofa6J|QT!B~9JN=8LW)Wz zaxDd`JHifQnJ71_Y2@;J-w}uI^vMl=+m!S5khB3FYrK6CzM>NMRAWKNet?yOI9bQ@ z4eyQk;N})3YQQ6a^S2z2sNO%_FDujk-IQ%G(Vob6kNZE8cQv{K>_GD%wL8NO9O%r* zjSqd8ZmsKmPN&J1!=Vg2HAjyxMNOi?!f(hGBs3tJv2}lS-2~<K#H_)Gk<W+}J=!!| zZ^on@a?$Zz?RF-VvBW=F9^QN#OhZ2asRV7L-f|wJ?>9w|{5UyU0Lhh*K$r$}d`1)v zI_c93Nw~eKs<hT}Orw{hz@(xkwYKf%nHsB5(F?%}YXh}7i$cK+lI@Pk3iOhWia<z) z?l2Uic@YG2Wxs|`GUuI+8HDq{UYwNbBdwX=q-h-fkJ=7e%bdqMj&RC>_c<El6SxQ9 zc>~yh&L+_vj%~pdx`EDnGUoz=5G*F&29(~|O8Wll9>p*#q^_n|laN@iT0S<S`Ufvv z(hxoKp13oCXcG=w)hWLiR9(%n!M1$18J@d>&q5Y0`&`53ALW07bx6bUZ4mnBX~J#V zn#`RnoJ%I{f2lV7dmgu+qjXV=cm;=HLlu845Xnj9a!?pPT8Z2D8E1Set@!R{k1Xrx zFdVD>gB%PV3T#Gmh%5}IdBdbk<~zHM7S6aj?AcH&S;LK!Jx<llnN=UAowCnhc^2+< zZX;a2NwT~m+}*PRT{{ftCuJA8Ry)+owAPOT80sJwqd?fxp7PFZ_qCxCRIQ)&15l+4 zLDv2D5%VRMflJJhiQ7;B#$;x!e>8$OKBn|>sm;r8v9B8TI6<zEkO>&!vyi7(f}tOa z8;cH@+A;orRY_w~anC*3$fS%!&qc_Z0;+WG5>9IDwx=tah!kta#dsu;#62<WpRAzc zp!T|eLy-r<>1o;zc8L*}%3~VE3nuJB+B~Kbb!$V4unC_lOZsXi@1%TB23*`S@tQam zrUIK3fgHO}Id;_hb@1bJ{3hyLI+7N$NAoMd{8L}np8+Um`G+&$SyRDsg7Ss@5!1yz zcDxE1mrWughZ@0g-7Ms`o)5n&Gqwq<?fdhJpDOLv`~wcz^RODi5VeD}UbB1Sp3PG@ zKQ&SKtl^nvpjXzVEaN2=<&X1bL($Q7fa_@!i?;(o_=$fjf4P{yP`Hpew+hU=>!#<k za>kGETqh{+?U4FQ5#1^)Cl3;F`r^m(AOlF(JmPhyjf1clbm!R<X@f)f!pu!M;1wp} z@vQh4krC?l#O~l7i38=&oE#co)1j;J#P@ugLE60kmPKA9*X}viRHk?it)KaZkV@!u zFBku}A^krU*T-L5+hV+a%`<rA*}dgx-O8P+bwSF2`$(#<*``Dpn6E1n!<l(ncUClT zlBO}LPlb#0-p<nw1DwU9MB`7PWQ<0X&Mye&lx-+uf3eCnbn!N)pGMn7d>^l#VsWpr zrzDBv?dr5rmP!cJp4m#ME4@$0N#7B3ML}Lx8diuG^QmGKf+#Qr*IElL_fSZysZmR` zTW!+dkzw~lF_7SbWq-L0HCNeW#t|F9;7k<YCuxF~%GT#aMph2~p~iYbk{X{GfDV2e zqb79PwmTGa?zu~5+)&mU|Jph>6;C!|9-*J~>AD9MeBFBibnWuL3ePr_Va^@u^!4zt zDmdtIhMwnpm4CpR;OxH{M!@6i%#`djV36vc_o>AP5-vu|D{Lp`qE<kXIOHXucE=`C zmN1a!JG7+w%L+yl<uYYN#vlf;6a=?${D#p4kn!5PQWYCY6skhZTDw4lN13YqAbc1< z3LKz7fz~9dZxR!f0tr<yU2@_@QP0;QIF|k{T(#;bV|Jl7RZs01J%EL1Tkj;Lh-2eB zl=3^Pvp$sWVICDRTI2(59I}z@+JcvpJ2&9jGHJ{z&7X6h{S%D#C<zpWv?Ozh*+^ZL z{a%teAx^Wa(bm@_{`wO5n{Ss}UD#b|2~M7(e+jDThw!%i*nPHG_uuU?Bzt`MX5w7F z9cunzmZd3_bR(@a9%MH=S+_F&rHOc_E0y}!K&Dg;BsZv+PJ;c4lqWx@kKo%0;C-2~ z#))5J!H^g4EsIW;E#X5?k5NLvjSw47reV1wT7K@_4{AbI{4hCYuDy&*^od$p2-YxB znQzvWaNRv1^(>o(<?)w-UBSu)+KoZ13)<qdS?hzq>%+z?4;9~1vh70htS_z^ZAw#$ z)Kv6TgIG`eF4th)>_!8oVV&eD+?!Y6A+g$P{&-)|EVOtTD1ILoG`dT(gOGnF24M=B zA0=T*c#|jtft6KDsDrXd=w+<hY>TQC;jmc5P+qH5T`8D<3irKbfzS?g>K1z$yN^rk z><=|?+X}CibJZ@hi-QcvRCjZ7Sfp=JrDdX*M;L~)5JaZ9wt|?bi<M=eoh|vj-YAa< zpLdAXB#VOPenw`%-Itbp%-)cc4zJcG$Hx*8LdH~|CW*8gVA5`{mV@(VDfIY<F2q5_ zcf`Qdx#E&m!#e2SlXgVK_!O+}Vr0>vww4rUy>$q^Yc{)!&L9C34X!6%2-~T~M~tOH zyR_aUABoloh_cXmAVQ?+?Q&NBqpI7&uC?2XU>ts5t<8+C{(r_Dd~N1a!YB7*u<UKc zomM+z7lQs6?1`!IXKxm#lwb99?U8nPY`hyhdDeE{i~&uJX$*T+?Z-oPuY13kkXDxC zr?Rg*A|8XWPZ{~P@i1Lv&{*<3`?$$-&)v(}Ae2&g-6x!HjWEP~8z7D#((jLIUeFBb zkH15k9MzUH2#J%cgt#P8&}B4YM>=eaqT@|E^RuF&=erPC>}a?|(;@Vkq+o?v^g{31 z`jFHl!t_ssMH}VB7jvG_6Ex|tP`He^Y{M!aC5mPY58F=TjIsw&_n@*IlePL=7K$7P z8v~mt*suT$OJ-DH?;kX_^Dke-#;DoZ{NMate`}s6vM<H+&FtWijJdM`4-SDu0Z#NS zUOLBKMr4`0qVf;678{C1hwR;$w5bvMjayrAw1;i~aOmgISiiplF<mLNO&VxdNR9U+ zbT77v6xHVo^0hz<SAu$#A<;j4B};lg!@7I4M9u#+Ng|GRC6~#)yA1v_D2Pg&Dg86M zLYNw5>h7t=_h)wCjE=j@#oJ0+n<f9XgXF7#e5;5gq-=W-8$sfVuBwygZh?v3vGO;5 zf4Tvrk40VRIOMe&9MMQjXR|s@vxwQZRMcKn2w%Lxf2OX6D>3Qv1FP^&U4AseeFDGw zys(HfJvd@%0*b>`P*|>zsrBNxo~RcK?Y)!;Uw;3<`#y>4fxoD-FMZAkWi;I>E|L&I z16ywkom@hv0^&QeNfSf7HD8V}%{628tA{=4jANNIAF-&6&jp`T-I*T|_pZqSnO%n9 z(RhJAI_*GicUKp{tpsi=RzGC64dd;8lrV4HWpovU4#Sd@mK!#;@&09NyGR%lJ-h%p z`I)e`C?)=jS3HZ?=A-RJB%TNcZJMYq2082a>>^d}x{5CsYou}P99jMnxNwtvev?-c z(i(SQ6xQTw7zCGnFbd2tu>T=(T>~Bqd=UsNiMQBtMiX`Z%_sVsGX0Q@b&f8)C1O8{ zVg6_Fjum|zc;qgb(RTT<{l#8@4Cu0mhw(~y(bamuu}XH+bdoq%t659!*na9u{C*LL zg7)jJi7$ZAo9Vc~mJ}>>X#zuxcCJm6!qkML&&$1s{))x+CE1dyDIz7M&OOX>DEcH| zXK;eSY@RGeBRMdQKe6D=Sl|!Y-`zs#K;b<S$%=HogJo1tZ*mM?kPB$EuWfc)GfQgn z4j1GR-8$Wdf*hguep*~r2b?%UtQ<rSbI^J9O!VtgW63SI$=CS*UyIF<-4SXgDCFH^ zNNLf9zvQIJKPdfEme~RCCd^lc2zfKYE{$t|x^cL!<Y&Jr*SW6MvF!S(@2TV?J6b;? z16QOWd{bkz(}%>DjFzKnXo~NUePb_Ka#Ns$9Bs@0_FB+yA&lq4TUO5t*1wVwL`v1w zyAwqIlno0tDSyF!TGk6;!VGsQ!IC>?2`XFoUdmO{KWv)^CTxfc&fuMh9R$IOZ?72| z8^04Lm;b+A0P8|vKvv^F{{FF0lO;uwHkvUD8IDW3CmtDJ7Kfa$#q8pW9<6q*Mt$DX zZ=S-8w~@EXy9tkHKLJl$vil%mv&8y_52yDy0p)410j%M;6cKj0K~4fyVM;E7h9VMH z`egU*uSxeUJtf}M=*TZ4X_#*m!|*UoaqvFhASUjE5nM~T7|sJlSa;g*0|sR*;Og@@ zeg_LDEZWWuf4A#!qk6<3V81j#g?C&z2seV)tzX_Yky=LKF5jETNErXHMt`R2oU!hs zsH`hHz<qT1P5#Ib&v8!UCUe0*H!qN|TG_HgAqI1`gGV*JLNK#^Z;}cl*O~D$rH0td zV?9^ZmRvt%AD}`YO->0OXX|T^P+^JupsZbhPR~|@YyHaPePt0rhbb5RLG;B_2KHE< z9bsd#sc6y=&#|QL=3{+jD%+=pjX9BRr1pNQ5)YJBiZOOCv?8J>PkUquPQ8^nN%vq? zt41$tpG?v^`&SsdsZH_rn!<Pl$v{$?vmbh4kfhnJHE2UP{o}0SGfd)NhMzPTBu=)S zPB+Ton<oqN-h@WRPPi)BQVvu=LtdWt|FT>x1@$|TXrjZBw0c#7toRNa62_lj7U21p zDQ6~LfN}Pw5C86-H9i%|<7bGO5TpDziGe<t+oso5U8(@ICC*B(b5eP_oPYbg?6yh5 zQAmv`;O%PexyJZ)*Ic^FS|zbI<X+#SyHtmvFXU3rTki|nqwoBphU>Mz6aR(pJqT;C z7_D1!Jg#NK{jwkc9p`(c+S1H8SJ`cNT%5WIl47$6^P`PocUmZsoWn&N5b+e7`%hHM z9{dd~Zz)X!vvq=H$E8~~von}(1$VK3w_dlC?hY#e7DUzcN=|U6wY9F9hk9h8IyNUn z!K<aML#yE3ijxP3wq<B5J|`kg;6|-K^7{xvKHFU{qL*hUoTD`s^0UbJzT_x*1ny*w z{eE}*^1h5^H*KC&MZYsNSz^C@vGqPT_UHFsq!c|bN7b!;$42FU@Pz-<s<GGpLqr*v zf)mLkY<O}_xEm+}$0+tA5>a!sshGWqGLSXQ_@tL_Nll6@LRlN+{{aNFR^iXL98@UF zEj)>Z8Jn_|7e)183?)a(n)l1S6ML^DufN#e6u}<VG#DO&(cU+RghU)+@!nQK$n{MI zE^&|8F$CrDI%{U#XL>AX`p$eqygrb9dBT~19C%_hhaeangK#9qwC=}ol1zw%XK&W5 z`_(sD=AW^(qNDExAB|#yx2)v|9z78q+Z#99G&*k2#y4X8b1y@woLXz-yS&szKWaB| z76nnX9_5JNwu)0e%ZKlyYIBP4{#%{artvnnP>P1h1TIo0(k$kvsUd34ZEc(t9i+xM zWTZ7Fb2vUD_ehDKGWcirS*J#|jfU%Cqb)#3%vj{XwavOrMT|bE7ZDR9(L*rwKN4(I z;8oZYbO-6RkffR<hDzYxA1c@clT3|eQBx6P^vUz*_Yb4!)<aFROD7;=alQ4;l+#1D zQ?yUyaz*2iuIIV`rH>2<^FF|dz?g3}cm&?g!TD?AohB&+w63SeguXf9yB{QL*wL_E z4J-m5DuLF0(a+3$?eQbEVlb>Y$~s%gKl3wZFLUQV;T)Xk?=6GQM_JAN*hUpa`U^Xd zILNZ9)v~N!dGGa*OI(|7&)pX_ms$cF+iO>5Mzo!3G#{3nC<AQ_lI4JKoQha&4mN$I z4Euk?>*LEX4lw{*OP3*4=z8NirAb~V>UC<w<=S&mlmJ8NX;G(mg+G7UD^5cT5)RF1 zd=jH08XLOUDlA@lm@b`7No{!Q0VYO&ljO#^2zg@O<8>b7e=V|4%?#~OQM*FGVK{PG zS7$aY`lPD&B^i)wuZrW)_(FnKnW9md_I?vw<6?5Q;Fq@>bvrCk>fK5$o@d7R-R{OR zk@co|MQ90U^TwIwF!wC{oVJ$ca8y#ZyG_rznKC||mZa%sT<Pk-`|YF0r?i{bO8+H< zJk|5`_PnIqqDb_IK#YpfR5rcvq5wNz2TDpn+)f>YkQH_EthDF&Rv2yW)3A2mPM&u^ zo%5_hVDO%_=a4G57D!lK_qY<s;hxFWUOaqr`LT&WEgFx%Ia?25y{%)BLB=ckN6A4@ z{Z_k-zzsk!E2_n-7wRFNR<Jp2<YBG#=R@Vv^s+oN!=Bc3Bj}A}QiDrekHIkqW$1{T z-C>qh=VS&}j}#hFHA%FDEP0?T-Dq}NgFwTWZCTbT#$^nM{7vaF-*SnuTTCi`3DO~c zYBqy)3Y?zLmvx$~$?fgQAO`5~(^sG0iLER~*bEj^=OnYcciF0^uD{8Vmi3E|GRVit z;4X@udqDK^2~5b>opl)g&Yjldb=|Gm_fG!P`IX_z+{k!W?cZvFp*zzV-c$a)<Nqvc zWZ=VlWxU0w2l4jN6wadf`J|K7yP-6tl)qB0vo+n(=FAi(pLaCh#apv|-*$bk8Je2A zZ<4mo4nxwpe3@pn0onYU7YX_gw&uPW`Q4~RV!ph~UsRqLthu~F$3~0f=rNLyp<B{& z%a}Jp2<0n*y@NrP2nAGZ^cr{Jj<Xdc8&KcsB?~u{)ahG@EK8i=XS@d&Y)~@;nwz0p z7O^u-`4qKQ*)g2WtGL`N1xA$cm{d&@%!_CeEdlT+Kj|)<`8TyEOS!G6vzJI>p0*#p z(TDgl*+06Pm`aS=1McH)uh04FUlL+GAcvcu|B&TO^I{{5PC-$yPVGOGu7W&hVGt7p z-)9jVFkSxWFnSzG9}<kM;I<K`+Wrzw_t6_T=z|WrRqw)prE=|TLSEw7vJv)`NU%an z3<7u^!2NqRaRJ@3IDY5<&|meD>&wFHDHm9DQ$Us|Qw0VgYq63@TaoBa$J#A*D6w<a zB-<3P>NHo<(90Zdrk~?K1mTr(2bdccgL_6B`Ddldv(q2xS=QTV7}euWKLsyeG99_@ zg4)=D(-$JnW+M`4g}c!7uM*>coAAGn5ZcZWRtvJHCXNQ}x>SEP@Oic=)03#l)Hfb5 ziglaIvM;A1oW%rY?N-!&9iXi1SP^Hu(loKR?71>bz@)^nYnR8cG@48|6FAGGmATYy zA9)QQf4}^2dAj9X?A9D~Z7<9^vm6O?#m|H%-sajtU+r=U?&_~2<sH+0vA8)Xc~D7F zZ>dw-O*}tq7WQx0L5mVxY?9Ybjc7KZWDn%Kv7q4?HQnyg{AOcP#VDA+fQO$&mS37Q z*I=+8g|BvD`Y?mD7Et5;F5TSB0k9WmiJ7pMD_ykv7WRMxq=*;XkG4oK`1(5b=%#?% z`}dqH?BhrNy&i|x^K;*)S37H8ERC3V8&o7*ie`FDMVghsoao=x_6Esd_2JbJ^T6;a zohhRG#Xe^9<eoi?%qKxpmh&y~!xB;v4iDu|f4Qu&saC2kbM@+wO!*Naz||-Z9*n`F zOOgY@2Ud`ioQ{^QzQ~j~%FZ-y23KwqRrnQo)ha9Hglo}YnN<TGMk|^tQ&$vz&7GFy zoCb%^qIyu}z-!a1eFEh+?TTPAE4`t=$NDxh3N+sfMdW*}P{JTZg12e?rcg`&XvQg! zC)v(nnSAPB1D4y%c0Fp&42PxVZT`h|!7!<*0Lf;|z(5<QG|p{tk3HrlR$<xga$}Wn z!`J&Y;q&%$<>M*FhoNE2OI25NOBM3}S?Iylqq7M;kxg{F3AU_m9!xCMbO)>6#Mi?4 zW8eollUgmim#}`^d+OfAd_427+IC;RxPCUmtm>eRp4=)LU;@)FHp>r%hIL=$a~6%p z{@uEmt<jxdYOVbQdnf6ay3g%v&P+WiSYE}#xP-oiq{3PxuJ-ZCokphwP7OE)SFasO zz3rjs!YRSnc5mGp^N@HbYv-^b^I0g%m6d&^z)kfv55sD-5{SQf&i$jv+fdFznf*h| zBK-}Va&IUKecW6l%THOZ{QDMyZj1ggh0UA`9qRrx-4>Wn^uhOx_dNTDBvDH5Q>Yn6 zhUv{Mq^(Pz%Yt)Hz}o&YkoPl94_!tH;6dTA&VM76eOtO(c8cclO=d%maAnq&aTbK6 zuZ-j^ISaVct$}Kqwrsz`uske-wcp;TESe&#GQk&3Yqc)`RcTj!SBa)c6A$otE3kPz zI^~7P@Ui~JahT}LKz-5<o8|a#FjvwRV(FW-L!-<N)B+<8-Fo$x)cf!^_-!Sn^veGN zk3ew0*NXY;i@X$zhWGgEfv|>meGJg(XYD{U(KNCZcO+U?%W3&C3|OOXv8mdwi(}DV z#FylP7pz1#SJy4jx@UJ$%B39Ty|}D$q%WR8U8r%mrGVqVIZBT(b)DeiTlL9?K+C&` zm7{o0wDhkCf@rLjl3RQgtCl{z)mDkJaEoqe5XkFT&cTi}_E);{V+RwhPlGifiybG} zK%J^4Zock!eWJYB3h4#<-LMS_E2-`7cP-fpw?C7H;v5I;9j@(YrwkSM#%WU_*1Vjh zp4y~6YO0!I_9Yl~#7IBz?(+?c9bqh3(+G;a08A+Noy*>2Y5NfbAAj}`s%`t~ySKTU zfM+>>%$<_shX<uI`RpCe&v<TAJ$mC7$>>TzKSGGFpOS!nAKLBvKiTg7d%wB;XMdZ+ z2uZI;&+cxw_zI17UM%u;aS!Su+<xQN_MlnCCh^>~&LNQTU7{h^rmrmHA;U`8v8=GQ zeWW|r@8OPqCkLhHO~$i8HFprM{LG^?PVJU6$V<kM*RW%K<XQ1&Lb#$Ywm&c5MS%k` z&#UQojICD}SNJNg;VbN1`zUXxXl1yGz?;wvnY|Nx@zfV`-p%Zf1)AXPM_=^f$XaHR z){hnzPo4|SWKDvaJDqb|y*6ZHa7}Y3G{N%Dp!xyAAh~<UJEcAQlV->S_0(V0R*`oX z!Ta0=&cyWE$-Ak2c61Wkkofi2*Is{f`~F8CY=829{PXQU{SW^jywRYHSLIa%UPa(l z1YSkpRRmr|;A{kv*9oT1Xs#SJuQ`r}<0OFN^A+xSUeU@|nm*?c*YKmv9d6OJ%3I|$ zy!beE@T4}S{2QH%mFFUUo6ARt{mDQ3r`!9Ve6qd!r7z77-?cN(cjhE5=QNz7SbM^L zcl<b^_DE;#9nzjJnY_MH0=iFRt*<LyN5nPXM&O%ATwiCjjF8E}zoE#<{t}Y}3OWAp zV5J6-G4MH2+?};6ZK^GSQBcB%IR!5(+r;oqX62Wt2|5wjT9Eek-5u#XnFZQnuOUB3 zUPN_Fu47)vZSG0w#n2XXAeMg55dM|A(U-(DekXYWcJru5`rv#UL2BB_qBHTMZC^Qo zOVkbcpL5~;;K8l!TYvGv_Q9ubY_EOMA5tm;#rx_x+5N0XfdE(^dD%_kSR&YSrxsaX zyY@rg^mK&hMO!{EtkoJic_@Jiq?llqz;4rJeE^ro1cymxODCfBSw89ehY7V^x~HyW zauSbu49AcE?QQ!ycSPSG3r_l3)JqXIn(6P}u0`%BFLqkQ72OR``Px>}v42te3DGPk z$kK`qFVgV!qO%MA-=t>8&oMswcI;pB3%a=;iBWH-iPw>*^$8DOMc$pczfmHj$O>0< z4(sR-netQtzQ{UGfR=UQKDCB`GnF(=hlHrof`XmW*(aJ{>4tQ0=iomkjg)PRpcyl@ z7h=k9A+F!Z%UcOmPY%HHMSV#w+e*;sq{IFxvETNed{f9GeAgCdDVf#wJxWjAb1g`m z2eFL0{b<gk#Hk_-2)sgY0XB3;ZVNwS&pFf@fAQUK+V1bffedZzYf3r;-gdj3vZR3L z%kKlP%#lB;DAF&16{F|^*2^*U%94*)9_?Tog5U<+1hY39CoxT%bGIa&g|$v=b55Or z_KxNcc>Xh=tZrZb;ysQx+)c?z9kVORW)sbiQT&92bnb?x?PE85HuOW}n3(<qAwTDb z1U~qXA1%B4?)E?a(d*l9-G}a{eE=K&#j(R%4p0MT8++n-li4@U7Tf&_;LO`HXTs(i zb|xswA7vHWu$QS9HCNbFH$M=j-RJ1NC(01pFrsn7EV0WsOV`z__XAA+Rqjgq*R`z+ z@&AH>=Ws`!?yq%=TlrV~3UAt3FG$x_wrgQ6U=rTE;a5fHg%S(TJASednUG$Hr9V{U z+0M~b7gaF;o*W~fF>zh%!ViK-D3gp<oF52z!S<A7vun1V5pBY{_WP0xkDCLfj#(T5 z=<8lC=G-SlqTioo_XiSH?6a%y-@muL^WK-Y?|<;)?SKAX{<rNv`n|umef=w6j_ulS zlKZaum6xC?=v8?YfmacD6@ga~col(P?Fe|jU1c^JaJH^PXq}9N<0N3xugBTG#%ts` z+zuw;kQpt@F}r20^hI8_AK{BAj{VY<-NG%(^W}L$C!U3W?}tCw{&ya`afiD*-{a96 ze$d^g{!QzTF<bKZvfM%GIgC2$>h&Hxp7(gIa-UlHH%dTzvb>(0N6VSFa#@$EwOl)# zp&n)}XX4eYfF$V_<6#Bl$(A;Finbr$>fZ*K)3c~9{h?Ew%;Ty-Sjho4>`bf9^=uAs z$tVDzU3b@MlGIHng{rOl6@nYRosoYA^deCw7F$@;#+_k2hdS{W!@O`3!OL|J8s1VL z<u1UbdBu#08)Gp0vr+mYzF}Pp>^AkYG0uPX=RfBg%3t5!eT~J0olYfhM)8{hk~=mj zHh7KdR0|tGmz6TCC!P2qsA~mhQA$MHJDLL<w7SR5*eCts0jekVfeVXrc)12<B3nL% zL+?5<K_RU#mEOWQ@sB=Yv*7U~{}zwocng|ck+@-_-QATgC=lWze?_kCbIc20(5p^) zSDv-~BDpJmX&=Q;l(HA&&&}^i`!~69jG_I8E&k8J1ZOOQx)eNV6azkMp7s<q)~F%N zVPzmZXxZ$PX};Ow+zwq)`@WVsEUBsVSf5~U4(6g5bO4JcT;Z@)7N4{g3~21?BT~yR zY|AaKtGv0}Es+pcMgJz{5{qCbLcPs#s_Wp6ThIkh?Kgd@v{xoDNJfn0LvuH_`}?|O z2wmI9{t>sAk{%>&o1)}su6D2cK?t<0g!VIW268fpDAJYfih?3L8^b98rX+7#;NWTe z(H!^J38UdSI((WrhjF2i-j^j6Z`$0n!faco&0BO(H!N|q&&&OK;s-3UXe-FXvviR; zXj{Gllgkngklz{Ge)j2S+dE(2`Oja#4^HTwdG|BUB;ky#CnTIrSevZ&Ine5U>f<=L z^Z6m2pOLWo*BbSMkGBWE{~OyM{}xHH&z^#-B$?mp-<5If2@JM4X~(vPu0>dv#;vf% zS&MJk)RJXx@Mb)E|B=)(@uMB!0>7lD>8#Ju2y1xndrhkiYYDAJ4tVC!=m&I$J|AGm zvEo}v;$!1hMWZe4N`HoA2kLP45O#k@WM}c=3hoRb=jUxm^LD+^A4x<ttm_rFu+FBs zvVJCHX|zs-b^A!aDq2|6Y`!CW^y_YBIvC(FAp0?Oeh`r4truF}iEQ5!!z8UC@4fsP z>&o3F7jo?7c}xfMTscqpK|vqUVY1mhNEvZKXQN9xo)7JUjg0C)V?o{l{@6RDJwCvz zJZ*iN#cBXdD8uEtM%G(zzr8(r^oYBb{w0s<c(#4*y)SNGe(#;_YhQYgn>6lkuk#gJ zFCMi&jP1Wd)DB!7`E`5j@eU|29=(W+|M-#E9FJA#)_2Pt<QuR2P@=Ym--}x!1Yho) zdZqtW{KuSg&N!zmujb#Y_4jK3dA0xkbvpj!IL7hJ4~cW^=9qTnT5TNvoV(W@|2#$> zkAL!<+y6YA&f{;6*_?lHm$9^~e*1NuS;t>_)ZvHC9_z0je?94j7CMXkpMLgPUhjYK z!S+L5AAC$Mjq{y%-g}P^x9=zUoO2rz%JoPw&qIpeGat`r{BYg#9Oap;j{b2T;Paog zSs7On&?dc*k!yljRNb5;b^lm<4Ix`jbah7Ghn%KePlBb_(Bp}H(R%VS*fCxsTVS2k zt%8eo>VVdBFN^xrVVNSTmv^NMbWY|16x8Yj<jSBiRR^EuP_#!6qO#vk$HsPZtR4uz zT;OP?%S6{=WG{U~&>49<(5|x=9TacYi672gLte~-{=@|M64Mdhyo(u<%$E%f83Fa2 zojK0)pPz5v`p)C+_Wd_G(H^q^n%FG)Xgfz-09iYB20=HiyG=7i66r(ATjNa_3tLTU zn#`GjRJSxH6w+Sc3X?W`w7F)e=SW9$%_ZlP7iY0S!Vp*ejJuw1@feOD@*L=&d~w^} z1J?^YcC~SmFKxQBw76;W#9Y&mNqM8RjP6g|LK9ruaD-3B^NoYLN!0L&?asuOiC1h} z@PF-_9WM<%wvWaiV`_iE5(D3yOvf^4Qt@WJ#%#_{;UL_f#fQd8J>cucSKDYwDp{_{ zXo!NkBYN})yy!}PgkE{u(-*p7lN)gBDwyw6cdWLj1@IPf*3&=W<)@8dh_n{^kpOYl zv@mc%H?1&B`e8`y!fX7Zs0hju;<)gZy-HkwlJELQT;t{Ifj%cgx<f%!ADb%%Gb9H> zx~pihs~OouuCgRH13WEizOIk57BMB(vw=|tPqT{e<Xe;IkMt`|&x61k0gZe5k-urI zBZoKj*pEGF6w>3+d=0!j;Tt&5Q_Q<Goib)y*}gEMX{7fiM}K_qk>Aq)^zru1FTc6H z^9FZ1lVvvXtj&-31`z+;?d(Y)`~ZXFZs*5jq`mw3AwM$sA@#@J{d~{6pI_U4i^q68 z`k4nEbtB+dG``D<Ug3?u4z><{)3>})TTRet%z3iln!W4h>He`6zshNR603AFjshX{ zJUDBB_EE0%$At1q6#QUn*}*Fd-k?^Y!rPcLwd49SMOmx7V}B=WCEOvd=?osL-X}sG zK<Pflc~!IG8a`OBC=I@eR_qGvcGoN2+I|s!(01a>W#D;MUo7P~;RWZon^|%7gF7S% zNDk*h&<&HI+~JM@lg5_EEJTkluEShRv$$PjUK|=NX`ejxfoc{%IO5_`4)tSzNndql zS;3QwU*O`OxWH*h2U(6KUJUwd=-hG5MXJw*e*Ea+_T3LZ-u~hTA7Rg*#qQjptq^2B z<#~+JPWuTPO<k;Fw|-%Ne8VP>RVJSYapdIq1)#3gsutFFc3U@Y(n`;t$2((ZV%~U| zP*+#(s=}d4_RC+JN|N)mOHS#qUHTl6ifPLU+)Xt4Dn9A(CZ+G~D?&=|&|eqpCfiHD zwkkJwqC+cvC-1dAJ_;wM7xgnXxIHwhzWn!5EPti?%PdsT7$vP=mVR_*bpA5>;jIs6 z#`x2}HvVItghu^Nb>nZLoqZY^e7T%8=RtLhKYY%~tV2I6a{lz31MXa`IM)1=Pq}@L z=)BH;aL}IsEc#)K9JHcijKAw`=<g4CT0g}5`G<g<1>wj}Kl_i53{uWI|9AS0f%^SZ zXV1TL`jMmm<>#3Hna4waWZ16tY#eUnKj#|J-~Q9fx<C5A>hJg`j>df0<y>g})Mx#V z&uYXSCu8fsf&V?`J^yep@tAQL`V-XHahfMR|5Wc7mI1|XC$Spi-||y){J6!jLEWvN zfv&Moj)L@`wtxEH!i%5r7oHe_O1VbA)W(-1jdSuj`}{4Ft-b%n_VfCEMDA;RgYE}E zeYX8i|M(M5RPXVFxDU2>@7~(pB9U<qHlN0Do4!9k$FkxW#kaJ%OYbgs1#;9OcLNUK zEl#fP3B&)pe9O;|TRGAOZ$j5cKHi4bId9uJZr?$zb;&W+eR|;Z2URKJja)~{<7U>n z^WSzJb5+M5HURuL4(K1UjgK*}ePqNRiCKS0ZRt5q$dAm-HI-6YzXlji-|G0|SXVpy zi1z2h+Hw3*_DJaJmpt<3LvQ4m?2S*tQRs0qa-a!4c9(p3GRBSpJ0JGt17&n+^Bv9= zoJn^`5*x$UUVnYN_vV}1TMr%tX7X5hJ}ylCp2rv?W9WXWUB<w34)xQ_hvw~Lex%TN z4%*I7B{;sF?hc-y!0dTaE`BXejW|xtGC84WitB+tA*2Uc|0|ew0a0TMT~OMgmtX?K zXM6O82N^u)c1x*F(Fk@!Dtp8fye?opfgaQnPLZK01i)%2L-+(QEm^NCCtHeN8SUp; zzLS!(=$8SODBjcPn4Ki-?05;iAszG=*+5L(Y?SWqcHI`u{xB^40Zja9+g)QSuP5NF zm+c4df3$t)$9K2;uixW==n__}9Y5!fFN0rmi8duT>j9U<Vy&)DFo$o*iyVn4(xs1} z&?;~gaduq~66P*w0mxBb`;?10Wy=7udZqV5NKklbv|cX*=KMuo_C{!*_!y3FZreAx z3;K?7#L0gs%0CB}EI8h*FBX|E5QJaGBmT(K_^#WaDd432MXV>vMeRXOt66FPMzvQ5 zoKPLFb^^S6X21u0ub0f9Mb3l^I|dn0_TZ+cj@YIX&MSB7Q+tq$JYne%JXHvX!JuYw zKd%F~6x9;nc7;%*0r;npC;BO7X{^!{32?=C731Nyu|tFo&Qkuwmf`a%W3{p2IaXoe zP<f?}J{WHi*p6+<DO<uf_5WoXZB@$|PD~{opT<+eGPy=$7m|fEO=*0!Xn|9Jo%3Z! z(lQRDq1h24I{mVHMKx_=ikx+9v|s#6pZyltm|C=$+lWnak#_UXdWG5ch2Ye@xljA* zy}RLEd*0PFkvZtY)3T(|SmlD}95%<b=JoF9&&)vc{N}H}$MNnyNoRnZK0@mU@Ft{b zClO5_dU+m!dkl}PKjH3#?+g6FC)-#5;JxiX`3-#L?&oLEIN9fnP@hufL2LB8(xJ5+ z>5l!T6@Dzrawuy!kJ#Bis+@?IY@CymV<`HaH*-!L2ruE9xB1$fm0sAf-}J(L{US>b zU&}o98@^i%6L?KyiAk@CE7U6u$fIlN`!?u~c;yAf+mTjyj$Q3g%MlS|GgBXn_%6-Y z{iQbPBdHfu(a*Z^m}aTt6qA^)7hzs}`R5(Z@|o~4ne6`WiVU8%v|h-2LG2o?1TIG~ zPX7EMo|0YuCJ_{VedTxn{T=FOxv*0fFfMjXN|_*YL(x(bxcQModFUr;KnsRkWWN6T z8{0kZUXotg*o}{m(Vz8>PrB)yOUka}xRI#9RT2!z*kRkmyE2sT1+B1L=;CK3=!?^~ zt^DwiH2NQ&(}g$PoV%)1dNul^ja@v}=i5kta-j=@G4|zHcyZff;YD-P4)ccoP9$n_ zjcH#LD@5NNkLX9N`n5y(>Tg|@fLQcHqMYbNZfqHLoz<^3#6VxK({Exx-IkqxbfN6z zKlqFK!DVbQ<PO=N8p8|zJFPqZI3E3_e6N38WX$+qryn_ng7@q7qgPkg`2Rxmt6BYy z%kW=4i9hj8{Q0oOAN1s(xpkU<>W}Hr2U(6}{>S$*2BJ+`W&S~9f+cfB1VuLcJ_|MR z2i8AE+WL*V`t|>*Kk`7C{@W3GNxydY{9pA0w@m%6%bE<#ao6!_{u%w~=gl7{b}*)X zgCH`KSsTm0jzQ55pHY@r3|j|FjL7^OvU{JB_9^j?{xSceA8qyFoVthpAv4J{+R;B? z@qfUs#2<H{-o@Xs(x*%Mb$Q)?r0p^7{ioMEq`UE-{&)Pd{f+r={KtIQt$+4(msRFJ z<FEc1f8-dS=(j!A-%fw;KlpW<1aA4KWvEj>5?{FfmCc-Z*7}psh4qH|{c!aziH$FO z`S$i7{OIHDpZv>*+fQG6cYDX1;`lw0`}gmVY$kDvyt^bw?wV{SE6u&JNi36RCi%>m zaO7lKFkXI$YHX!<emb`p7m#>pMCzryvF3!uf98UEwB0Ep{XN!Sj@d>-JOmyqGXH2h z-{g7Xu}?Xj&;{mLDTsIA7)9H)q#RN84W|q=_L&HlRw<>+B=Mbl{_yY^e|)^nc|y%U zPRON3&>b9Zn&=UOQIUlV4OACW8P^OfZDNA#?wj~^&@)e<kBvz1dCNHuK~Mb0P9KTU zcSfr(veko6-nE>BH1o|wb^LTr#NSFA`=M#y<(&D5EuiCz_Q;PiV3p+7R*N|IV`FtC z0WAS+S4z9vbu^W&X~qDxFXfyZheaQ&*l4DLSJJs)`H>AMyc5)u^h$txCxCc)%NkG0 z3RHrXKU&bx9{uQsw3F3N%r0fqWGs2=Z30>*{JQLYXlT{Vqm`EKryiZg6~&qNW)daw z+CM{n4s@2~WcU@9v-Ah5rm=3b8rD8_zgds{_NC!nAK~E#8NBsquP&@@FS_sFyS4rK zw?E<;nQv@we3cE3&CiV`wk;FVW~Pm}@iH--3qx!0(xm3CWdtvf(jUgyRffdkm8;QK zDKxZG8L@ZZ+V=2D=yaCfwzO38xbFG(bm;(Av%dNskJ=9M2isFOY!c8v`WZLLk&NfY zw!*`IGU(8zJ4=*TZ)r~St|5VP4}^#Aj%CuG<6UK4BSiltwRF44dGBD(AVGAEtO)s= z{C4z>zVk|OVl*4W$$`5P6Nn|vTN*83z{HKxb9nZ9+#<V}J;=p^1t$G~4)xV@U-q=C z4)kpTxR$G=MNZLsSd&&6r&6$H>{|Rvx3mXIAigyVwI^>qog%>#*F(|Gu#AS)(WX|N zlYw!pN_<*3Oi``Qs7NoG1_|x`Oh1@$!*0us5_nG1r+`KQ=w?${TN*w)P0)z$hv4#C zlV73;ej!?#Q?;;)SxKq*4~c`pxzpQ$7-{;$yY7cnyCKYRo_es)^(3EiqJ#F-1+d}P zo~Jl>@{(?}BTyNGH`7U+Flt||Lt6PfSD^}zcR+i6`q8I6|CyuH*WSI)N!;`8vrj!C z<_>2BdWSPNI4AM!2eRgwpK|x}BbXne;8OtJ{ru^NJge!o_qPA`4`1K@)?Mz5=Go7; zJdnhB#9P+3eGiBl)1~`II{V@*O;2CndTLmw3;?LL8@d6S<IubfZy874#=lgJkUnl_ ziMCLLq>mp9s6@+Si#Nx-iyvTE0$Z4xHpl^A&;kFl-;Tb%Q2+2#yN}}$UJ%MW`ZfCl zH^fYJjbGuyoHLe&H{BIL6BPN?_ZQ&@M_)84-#t2a!E!N{9h$y(HAfT&1~1xj=c>FO zC@{_oNMZ8=5LE7PCb3(Wl3qmn<AWruUC@!{MVh?G=7g?(`-ZiSE)&w;`IO@YvXh>` z4wGj2(L#P<KFN&docP@)nI>)~(Mc#s$KB8-oui8r%DcDkBiCejJx(K!c0;nsR};mz z-H5b@4akJF7p7iI>RappC!Iw<a<PovUf`Yv-V0hhjz1MABF4q6_CTvI(0dVHF{q<@ z?wmr1u`=eyG8e!K#y10{zsj=CcyKXq%%UHdHJWk(tPE|)-F(z^qCdWXTlKr)8q@Ho zh*rh~|Lb{~WA-5<A5bj%y>69X`Pb@4?i~^@FVr77XY^}=`iY@YX#aC9>$n~D6PM5H zzj645`;UG3kifab-*xf-y!w-9WvuTy?v4ww%7;GmoilwGo;dZJPcWLy@XTxB()nSo z^CpkX!B*#k=Mu&pU}CM@ByK>cx5k8VK&Ow)!GN896J1G?X8xc2Px2dn6F=rss(+1s zvvbID9iP>YZsUxw*c$&`73ydHIY*;M8esab{a5s}2gQH=a4u!~@h%@p!l@tp&VThA zqwtOR!=s+)XRk34U3<r(pY^x%U;V7_JX#Z3JN>Kw=k#l%<3`=%ul`&5PyGEb(EZ-A zZvTC(fjsF`*S^vFi!(9-U=OXh)&7TlVu+uyOwFd6dCobNdxd+g>ri~+vg+3>;FXv| zzcGua#uPsHA8je^p>=M{)B5Fko)ZrvgdOU4ZZl@l&pe5K_GIU!V`ZG<f9nT!+kIXA z`hmV{^&@NQM~@#KyvdySop0RP{>iss=Lbg~-{;svtfYI2UhjaewL`>+|1)fKPCBwC zLo4w~FEH@%J@@#7{MZ%O7%yac$20_qPd$PcWa3sUT0fr?fBp8GLXL;yYLeRhS9uu= zbou9+$dBhaj?kJo_AX>HweT5^vcb@}CTfkc{-USmlzu4NW1lu=k4X(o|MAzDJJz-T zIJZU&(ChKX$d~`P=l(*XR{b^pXn;R3V-#Iru}66@Qsd3AQDM@CPC0`&v4>oJfdN;8 z$8~i(=M<uT&mUrwRz!y~u|XbWq*kGEgVM3id4w?jb4<m~T5JCJU?t3rQ=LV?_QIkC zhf*e=fL_0>C*qCKEQ<kj9<4>Of`(tTN>PICnJlHA>k9-zUqw>=5C9C^PFR?@G$%~W z@WqZ3aKIE;rBL+Ss3V;IR4<NBao77GpOw%fraT(9Ov*EjmC&}Y4&)i~OQ56vOLW3_ zw7brUtHGMn?QV3x>*ksv7cm%{rt8p-&V;Rf+RDkR1s`h3-OB#&zxbHvKYwL==XJM( zQEZG?H=X>>;ih39V3T0MASkeba9)qKG~rpV%{%Cv+cuTyD@DM7XYSLMXsp%Xf(M@I z4o-dgnYzd$w`H?6WSvD6!043^r98ru2ZV0hPk+RnZeQ89w<S^@l|>oh8?~^tXoEC2 zE<<qh9QEwvXj{+W4v>t(y59^fu=~`P?3TU6T-{%$<BObMm1d8{l^9IK5{Ut8RKnk# zg{+%96diV0#sIE?sD5>ASLso*XS>#?*w8fDm449zj-->k!6#xCcYqdDl11eN1Gthb zh2fw$jxm#CG+a|@Hlo;0?*m^RjWx5-P8%8)`qAlXZj2??YlXINXdiZpA561uQ%<pI z$oaY@E5}#!(e|Ldu1y8d&z%&|9jGU#WGND?<=9_ww6CDA0E!{t1vi^Cx^2CNG208k zIev;7#GxHs@!2=1odUrDn7LHp@{Zzu9UA(MQ$EC&#@7-`g$k1<xY18rIDG|09&P)+ z?DL<;XV~^;q0EQD<9V>jXA{al`Iuju<=Z`9eutCUXOHt-XVY6xAP5~ij~P?x{o%nR zrulI8Ax3{h((C{A!O-u2vVHjv-rfG=-{1m;=XyNm(@T$iXG_nG862pDA!Zk(m06tS zQ180f*ZY3MR~FlrOSlzYlzZ9<!>`PTQ8&Enu?5UK-&NS>v2z{`Wzq^e7D26}4L(CQ zX(s&;G<lDLN56;Q0{U}<otK}tG;4fWg#c*Sk;XY~X?(Y>oqkRU>$OO`(g!EuTCNa) z6lOUJEa=(yPCn%V6$+C(Uc7k%C@yV9vRJ%uG=APi>_wRUPRMu>_xQ=<Qq4tPo6-sE z_{u_$eB?cQ@`&~4vl_i4Q`5YNu8X%^1R{^mk&urqy)i)HpLcOtqMxsFd%<aW%=4c; z4kbaQ3;bzc5)a7o0vhC?<wBRck|Ha<R)BNy=!PUM{E30i;CNq9CJBM>Nt9#1Nd#%j z*V6yo3vy`u0mS~=v=S@f!#+i<`a-o55_PP;=T~_XJ!4%L?XhIM-6GMFi*)?(u_HdN z#3Z)yH+ha3$Rz;+ul6RPLHxukwx6Tvo#<XPCwYLK@ek(P-ci>2nFqPZ2a<gY8Bk39 z$}$#b^*f$pet2BHqF?`4{pgJJRlolC0&4$P{qSGZf6jm1$fH_3b{zCOzMt2B?zWTn z7asrBf2VE7pCnx+cgla~jO#P{<73U8Bm^0s%qQ@!UFS>^Nn`#ciRxMgc^CQ5Z`b?_ zFXNxJqw1)yIX&lJkH7xI+xq3rhZ59|4^m^Fdw$3NDUaZB{M}zd56x{hf?MbGqdfX~ zci)MA=J;K{zLfFjYrix8*!e>JP)EP}6frJ(^c&w*Ke(O$m-LVEf5!TAt8o2I|JfgI zIsZu>nlF8!|F=f`o#*P$+IfNhJ^%dBjX>#7_EXkh62Yz^d}9if{`P;YKi8=TYU97* z|6KphKPSzA7-Qpa%=Pg$@i)<#yHF#u^h;w#$~mh3O1#6{;}7i<&f_ZiU;9Mq)W)Ho zeXjRE$a9Qvj+qElraDX%+OEeaIHrq!Z14TA63<$HiocJ5GWpu`Kl<^1>L>or&G_H? zkr4mYKm2!p{jIOPxqXA&!}q@b@%G7EZ}VGJ?E4J1N%PpsdFV67-y_T&VwO9vpQB&< zwbQXCVt(`Iw)4-0;+OzU?9}ft<Uol`j(^@gtp7Pyj{V;cUG?#v<Ii2J#@~c`<`5V~ zBms*a_rH_>9zWGdj53#KD+8rH{>pWSL;_>yaUA`<|H9+ispFp?IQSa~P!IoaLGNQL zEJ^N4tA6ax-bCM8w`(qG3-s^-&N$@wfj;f3gg5KoZ&_fYkIygxp1sB~^n)V!wNYBF zb}mG}cOr9+qpjX0?X1XgT^j7TeeZr?>ai$4Hwm+b7}mtdI6HT1{t|EX$LE@t(aXHB zb`E(CVB2`!JOLf`D(uFob|RH|)C9<Wmz>BOv_x)?)7geMeFip@FfG7UV{3w6bS{ME zaG;cgY)6bT-vKsX^nfdpN>C4zCdcG$;jM#u%G^<Rr==@lUs}Y3PFWLjwIP!Zb@BYN z`&R@u(bf7a=~-a$UV{pO_;Y4-xFk9!qsJgZ4n#Zp(Mh!+x<B<SxQro2Ip<uXpK)#e z|9t1+_WUkiIpq1z+B@eao%G?C)=u^|nkJp6@!*1%4shpZXr>5jy<=S#V#v)LgUJ0c zTN&`WB$#A%00Hi?kpFtgLr3|_kiUHvrcJ`w7gDm;q!$JxvS@Hq%=W2|;rKh-#)pyH zy>)>W>vUD!Yl+?!aIQV{M@Y91bVs>CcLGD6wJma;;~~EOE#o~%qHEaECrAm%^&(zj zI|4me#*lV*8@-FA$itY|90jrCA5wtzL3=ORwORXrMDFNHbMLAVJ7kxP>d03#_Qx8C z^+R_X6uQP!4_V<Y)`&f=w^$U0mJ|ib0Weu;oP2L+DN}Y%5@a0W(uAR9hQl`i1q)YM z4LqN~%QVX(Xi5>;5+~u(7z!3hHRTz6R=pmZjs@1^rUcj9TBgR?Sh1JeO@7I$l{2)> z0Ae<2bi3kTT<+7eztYG%`udT*WAv5dzG;!BeHG+hC~eTZS+|_f4t(}q+tM8Bzz|~X z`J=@Puci~OlBVO-hm*m8CXal+yq-w?>BH@7Z@sa7kzbiL>1>ku35>b>nXk$`&oiN+ zhbKvB8q(zMXJl+2@a*UN?{5Fi@4vBqlY_&<pL){C+|!nG<v2H_5jKvYb8^^6XUdUh z_!*pZ7GXoDRnLh5Dp}B;#mPU)6~0D{I`Vky`hac|N{@61%or_#!z*LUY1z_Hq(7bO z7HkS0-Fa*sI(D)SatF(-)bH!BqU_|h&zBTQJbad<yDg*ZmAzqIw+j2+p7a3D%|mIM zeiw*UKr2w#3ZKGX-0%X)DV&QX49NvK2MoozpU-DvvYwvba*}(IToc-alNVk|Uc*~5 zOi(`xofp+6gM$a6quycXoz5mnym<D?Bp2Dpt-F-4#+abb`=D-lF^L{&Oh|YvQ;+98 zKF8LJNt3WfEBa~mV?NZE<g}ZJn&=Bl(js=lhdh%ANy30j!V~%WpS#7Vy(`;eLy}4u zVB(b?cZ+c$j+{PjBrf3VLfqxd1t%A$jZcCKTa;55|Jb9i^pluJM=qF+JMcWlM0v&u z|3SviyCm+_FT5|p)zSLnzXE_I$wzHbwy)@0#?3Kr{mzGsJM4)a20Bj4a;%J#2?qPd zEnmSF$7`qGY!|SL`g>j|r}gXAsvjCM8>L?ybT`(2&VR<szrPayv2W-9IsGpi|J8qE z-0>G~+}8LrKh#fzl3dD%8m=J{C5{cFk;IV+ub#J=4@f1zHP-5&ZOkps3FkuA>A)ra zz?E5v$ZAIi`kl}wx8!rqnxqkD$=q`UI7nyRFdllP&h+)rF}|cfxSD_R?ex=6k_o*g z7u~_sdsaVkGT+ggZ=I`u`1C^kWBx}!>tfD-^s^ap4z=jl|0KDG|IR)A?|s8q3u*tc z*Y?i;G5-@M{l7+kCD}^9JD5CkpXvA`!#i(dck2h1yROlnHHOZN<QV_#KaSzh@1A39 z>n_`xi|R@uZ;d~&`arMzSGMuZ`a`z9deRx6kqI($Q~wdeGz3PY=N|;qf8*BsxVA*U z@#oL^7XiR~{`dTge)KxtwiEvz52b+H?SJZLoz)!P>wnI1><Qn*d5_;E`Q2Z;vwiP- zPq&{wy1l)9>+$x0Z>F1s&Eq1FJN2W>HF%q6aMa@<%Kv%SeQaCSpC4SHNB=Tz9-FYe z>^2cyV_`qvKp=LHng98aiP(1hji>W&`VXIR&-^z|$kodD39&ISfnDpk^w06nxL`MN zx$E%{J@Oh;*S{Z78-FlK&ISplemuDRy~~G2K3Yq={nP)t9%UaJ`fr(VrXA_nh{2h+ z1R!wj&-#uOkJpvlcVEa}43EiSOZ=d(f1bBwUJwtMGUm!@8VpF=HIl@+x?N9Ho)hG8 zHQ1$oKm3S|AVUw_<8PlAI6mU@VSx6=nwNMp>2<C+b$7)9hSsTbfhB>AFVNH!V^A18 zPv#S5+A`PSf`Opr7!|F-D~-}->7*Y9*{VR)bVFEZZ8uHfM^AS3TAHApP?m7|^2Ck+ zPO?PLGU)7wmRdV)w`iJIi^ygWySA@oJTI!WwU8Fj{S!|xjXr_XYOwW@^Az7=YT79R zz=U<9YlynJhFu*kH+bKgkh+`ELC2dwUgHsWKmPI0x9|RtMe%@VK>Pd&*$|d<0os|r z^fSj?w{?yXfvk%v)}t+~wh>^8qu+Lh9#}*Sp0s)E`4J1i_4<%Z7;Ad259I_O;=)JI zU~2i^0W(OV)5mgH^iKiGanF<OA$LH3_;V7`{1_qMu#UenHGkIT;8%wFVplpZcxxe& zjdp`pkr$;%bYwWg*koO=@?`hbY&}<`iRhLu;8i&rfsS8?s^@k0C({vd>_ZsPG6+S& zd;Y7ZJWq&vw-h?Z_CzxAMXw0{nB+ayLmN<w?<MKfZ>a@oEu|OS0H=!0wpRE`ppH`+ zm;%tL{%lOb=vs-Fwz!G|<O6<!c~V~Rg(Y$;0#dG+wH-3vPLUcrO9>oOrqa>(c;|kY z{lS{zUQ#ESN9vQrqI|jcwzliZeFZS|E^wQA*3-<s?Z9~BeCAYui|>+?Iq=~TIB1i! z9z=p#wuH8u-dg#CEysX~2Pw|J`>I6J1vc7kjOX~Ffv$B)>$zXcpgRP3lFEx?n>i1Y z$&b8y`QhX3*M8#;KMdk?ojrl|WV{}~A+0%PX&-ZdcueCFug|yx`Xe3y&2RH^_w&cw zSO3swKXXpy-Ot?0aOu2GQ!W;LwXC&+p+goAT(pgS_Lh}Sy!`>|X2x=Wo9Bp=^;m|O zBe?n?gYWuCHJI~3v+btqT2T9NXdmrw(c0cT)+s9t0NwGnZ-@5q#;{%~BfMAOe`!Dr zD=AY)`yhD1FU=KPYjPN}(j3@Bal~H&hVCpe94mY`i4M33zx<Xvd^lN55&$wU!o09d zaZ{uSGr1s*ij$-QrU`Y|BQO@X$q|bQT9dZ91I|y8EXo3(D;F4Z@eRzq!3%0H8V#a6 zUcf2Od6dK}bV;s3qXm^XklbX8$=Oa2z>hpHCQVM5MoBUv27ptK8w;5DOaB%ZquzB@ zeJ;4U;P+1MJ{G7$-|G%9Woo+#Yv9^HHnI2*oiHzMjiDEzeOIXVcQQn~r1yfglK9@q zMsfq$+Fm{xPh(IQueX!XKxXUYggQ1we>vz~U@+y5F!h)G5!XdOk%;~zVelnM3iZny zn=0WDpVUA6Qf7Q+Q@2ig(O-$9Uy%NczcCp4@y$oLw9d2oP1f+|9dR%8pNV&^|404U z@wxmbW|npQZxsKV=r<;Z_<I+nNfDEFxzo=JMW%&!Y&y;ieCBg%#`?B%IdE2%u{JRV zPmR6n+Hsb*{Abd!0LS<v_^4lHxwBEZtgnh0Q0L!4f08sqe-fXu9sT@v1DfICorBcW z53M!=L<@gs{Ez-Se(1C4C;ldqy!+G*r}invAODN4?u1re$E?=#RsWrLv9&BH|1-jx zR_pJscd@qq%vo^y&mF5EN<Ve`pAWRgnlfQE<FEhfS>wO@Pdo8H>i5plGx5Kr|LR3v zYW?r{Gp6+zg_Hhlri{Pz?u$MD6MuBGd(w1AMjS8qBaEHnkAwU1*MH)V1v~xq7>t^K zx0d<mNt6lwx&LS@@;gbK=hmYim(Y9C@A~&q5`KVJd&Y>r^AGJ)KlbVWZ61*@=QKPW z|L8~GCH+2L=?P!adkyyA{@R`Ge|?L_Cl9wr{QkgW#{V__N51D-Xdyo1gG=J+IjqTB z?@;zmXi~$8U(X3wfJay&Kh`eu09uIf*J~#2a!ia{`Trby923`HlJg_}Oud>z99zan z)jB|b?oRgcHqJ}1>aPz<JuquQ%|D-EU5Q<E_Wm!-;D;B=ah$lv`pf>~vCI#tM+{wC z%2cYy_2?o#Ng^NTU;5akP4Y8Fo-@q#2aF9R`n_?<HF66-#Ap9Uex3tPd~&ybbXTZ! z)EIg^)^_Q&D!l9ySyLIevQ;{5l~!A*pv5r9F~>w~M1DRn&K|-z5BtS~%or-e5x8+V zcaf6irUhLzWONfQ+PS1&NF;UIH(j&F6FMDKVrFbcfg>^q0u8s^5>W7(E|EIq?%SoV zs1#V{)O+=5cNeDyx2P)RXps!MCU3iEzj+oqn{Bc5S7@83>*(vw=dVwCPOV5=$83n7 z6ti*Cdj>R-M^QW4UFQ^H18_hkjKUh;a?@WB&I`+oCk@sI54zvBzxd9F+Xo-NwmtX~ zUrFGh_sWpY3qt3k3xzciU_{!tTWg!vNxx(%qcPYT8p6nscjyr*>||WYpTpTgr5|l= zbZuGB*O1dXaWA;oPTLsx6$l>t7k%=%u`BZ_tNIzq=MR3&(>UJQwl~4WJ&hPTrITkC z<<apX=Y>TYiI=*YFXWYA2IJ5^!yKD{w^{br5_=oiL@U9sO8fJ~0G=L-<M_>aa89l; z7<&F>9s@h_9QzK1JKss<sXeFWBDaUG=$q>_^-A8Js(L5dni3~H^{mJ}mDHXDbV<t% z<6Hq;c#wmn{Jctk(z+LvH4bxZD+41-dZh?jrOm!J)&E}LmEOvIL>_UAl?;N|=o{_5 zB_%5ono!VDWRabHZ?-EeR{)4T1Iv6J@Kn56`!YPit9ig}S~&knY1+Vi6EI3}qc45a zTAK(CYSh}6Js2G4Zm~7}rW-It3(pIfa=NVy&zB>MTDT5aC-F=j*}%vj=kXh#J|cq* z@@wz%tK&Yq`7`fs1_!}263*Ub(#dSwkGUW)3H=!tu^)O6@!8K0zO?<<zyJF7P52-F zjPofk?ABm=ut4V7vf`9y-w7jq_w_@#wKz(|+qZN*C-w<c1fxIjP2P3WbbSfl_)B%~ zPrcML4(QA>JJtx9dT7{gzA0b0Hd_Ww2nReo#3{#VYH3?nF}>Wo@_gN-tiyIK{Xw8Z zI!hdwy=nlPJ`YrjX!7nKICtH%G-rTUKmv?;*Gg?7>lH5U1|`W~CW9A{ZX70JEY1%v zq@3zGe`2AAMw}alz#I(gLQUmfSk~I2cCf+cB5WA##p_)z*1StNcO)Z1d=eo9R(vi@ zQJy3M@`QO!C4Gski(zGZ?W9e*t(?&HW)}16YtSL!P0x~`_AagAgBP6bPhU7oZ(MS* zuir4*Mp+UP@zD!QW1-Cu2n$?0hixV=l0=72-Im-{&ZgBDsS~dZbeWh?p?E|Y*1#>H zPiX)EKmbWZK~y`+xqDnW(D;Z^w5Cmf{MR7tsf%$Fk5fJ<t*9iISCmB;Cirq4s{V1; zR+1aCs6U332f14=!%sh;(qH~df70*8zsVL$ahHB&zm$Ft5JN)r4|{j|jf9i+Ci;nO z^gHMEZOBXfU*tcrmBo1N^aB*W(~taLi2o5>5xh43sCPV_nMtVT`LAV{=9*CULxxIR zI&RRl-I;ThxXD~|{*^nKL-Hmkk~z&GuP@F*Wi*i|gX5ibqP=7O3A&&^K?@!kjI;Ao z{jPh9u4is>AaS^S6Xlv43oycK?Lmuv_k_YP`jv&;qyIwv@A)s@b|-hEADNYmSG|cR zYxL`)%rtiT^<Vqe^+z}H$G^x%Fdhjk{mMYkb@~%>gW&o*6aToP{~doWnzR1(ul+}V z_B-`McU=F*U+VTh?jh3ypDrc-$|C`p{kZ+723-1v{yZ{h`lp*?{k#5z>kGBbiuoA- zj(-G7Lc<dYOshS0=tp0ehj)^Dz8L?J;Rg@?2&IN;`;5Q)PwUUvf+wDdzw_^$e*9NW z^dqmv*K^h9+c&@bVEf&#Ki>ZI&pzAUfAaeF7SG*&0)3uc4L;$EsmdV!3}BwgJ@!YS zgqPzQn7bt5Yi`y0BUJF<6Y>xn-{LOz%I7s+Y>89=`cGW-p=^~`I>S)$cl?W&`GI}D z@~mv&CR~k$do<Ym^&W<p8Gny07NQni86*02Trd5(LplyXr%VD->yHJ50lD)Tyu7Xj zYmd*`Zo(PIqNC0suphsCj12=7J9J7~i_x&H4E@d=NZwfg@YlIcsl;>CV-o}(izBz} zGl8GE5ShGbpT=4e|7c3g)q~)n4;libt&X2#@(lSM7bUz@0^0e0E(tyCa1V%CG0l;o z2(##Fw*we>X>B^JSpWu)fH@r^Cs;xBoODt;4%9w!1Jaz>Sy!n>`p&X}7Z+OjCuO$) zAah~_!|Ng`8zQCz4BlCt6vw}&pLiOjWqmJfK~~BOZ39<x<q*UR^k=|(?dPm4I~%jO zHKi#-ymhxl9%)OL7|O0Qy1)W%VMST*gFbU*v{U)UtHzKvysg*TJ=OL9XW#zm_Sy3< z<!d0u%&@7(mnA&HdDUSB9K60<+tO!_)3-EVx5b5K5h`!+z?3gO=)oM=Xm>nf$AE=j z8RO-=(|?zOxLmN(_vD(rA>}Db`o}rF6FM|Q-gEaO63{>UE=lOWwQc0$xBK#G7)3Hw zoh#9M4za+rDg3-e)*@_aE*zt&{$YP0!=58y+t;$}w_U>Q&(cH!*7hX$6>EIX7+hgH z0+xQ7OTXh@2hC-4R+?oPYM*r{-;ZU>ZG6vzW^Hj@3*XDAp8Um|qXq4gO|HAb7i^u5 zCAWC}QMVIUTd>qcT!6@2a5reSk2<j0GvR@@`0^%u#_(*fqVOkJTdt8Sj<ybGgKL`N zDtC(B<Ey1$dkGB_KlcGUFHw}S%8@lzF2FQ>Tg`7i;FEMTtTek~RQT+j!jQ4T!@`@Q z!y`?<XxL5&x;>Do1}yW4c21;)iG(S8clQTgcw#DzFzF=c&Epp5XW=)=oNI$YFOM|J z_5#mD^9TL_A>;Sn7yMxqesGWk^HU!D{}>^UpKy}Tf#3;39>eGz(2qD^_~U~=Ap!ke zZ@&ED$J^Kb@Qd5u{|!z``L)8w@Q!m@kfWe$mg63cEeTK)NGnYTvw5Xk3%2+1XY#Kw z&@0Qi_F*cl($jts{>aceteq>(pFXzbm`WWw-o`2D6chO9iAw>Pc{hYfvs)+1k?>fD z`Q_d^)HmUJ8QN>*#rTEd*as!3!CfyLvpG)nceKVT10mHp<|WQ^z*^#wzGWTZO~2NI zCVMf4c`VCC8Z`d6l4>j23}NJQL6wVTC$UK13a4MWvzTr!c!A53yPqWG!Y`L_ImXmQ zrubZ#$%C+`2@XI?64Kb?1>92>t2cgmbn=cjakgVyHX#@|xy@Z$^3YDA7@8!IvBbNR z0J0}xJGQiMb^L~1JpwffypJf*11}<<lfW4%_#_7MLyD0haruyhId*mOq7uh^Fg9%U zd7Wh{$69pxdgclFD2M}JI6)PcvfCtF<MhL?F+W#-sUIeL;jGP^<1<D{IMI%NbZKAd zcP!MPo1QD!DF4-CTrEi;z)-O?5}qSe;;!x>_u@XJd8@>Nc3#$B%1-(f@VWIT{+~lX zHlNHM`Vmu!f|u}L{R)Z$70bl`m*u}J=Hy7mvh^n^GzL3&azdE-kGWx)(~c3vUR`jW z*ZhHkf0IPaqKtp;aFhx;CdO+0p?}IL|J^ez_2Gas#`Rx!thRpf;fo=>NfcO=+RA?= zyT<$rk%R~RkpWoKuz%`zkJ5ksr+z=sQ3S=O2P6;%P?##=$LrB4{|!#h|5`lgPvY1k z3+E8Z8O8OSWEt}GKPyrFWBt4Srmo3X`qi8h68EMUc0vCk{+KY!PXF-V5Ul<WSIc!c zPqTga-}*6V7k>n0KRW7<;ll*yk9(&6yZ>;$ratGNwmJS(9fD#4AdMyQU-Y|w`8SUx z2#%aF|3K6@4yUsJWX~S@!@cM?{!xUkw)=wq*m+4ma-9FsKjb(Mo^tSb{lT;C-}&|1 z+n@e9etyR9kFe*zhX42Y=E^fBox^2(Y@}u+tkaGy#t)(Vn=m&K?H#@OF+$tm{9vH& ztOu??!+-a$I_8!CB3#>!e-feR{2%&t!w)O#7*}z2FOc7HE4g&g;p1F-|M&1ULIBD& zhsD_F9x;zUt=~J1p_X1#w24;i*M;&6-BR%Hu}GV8XS5dus>k=t2QCbXy`B}W@6HXc zL*$(wPC6&0#Rq?cvFVbS*Z4sn9*l~1<V>GA8TQWT=vD_bCeCq^`Re{>0JOJ`i;0>1 zO#{mFA9<4S9<+Bo$<FmC_F7!_8O-#Sw>IzqvfK2jr5hy^YV7LD?UDuDozyV-uTeBQ zc(KNK2VN7hPCkH1A6;$;3K5Y1YWpq%krNNB4j?pC<-)SIgtzF^j}b%Okeg3Ni!|(^ z+vy$jg&6N{9i^`9C>mimE)xF&t{|c_MzlqH3)-fxWB8sVpos@pBX%NMae)F5w$gPR z8sFUE9Rj*Nx)CB@!&loJD&;@q`Op7~?-)P7^XB$|uO}x#%cOK|Sp1r~8>F<pETYzY zjQz$p&MBPrB7+7%Aj~%6N>;<@TY|4<cqLa)>$PFBA#}9GcabKx12kt~f2`M%1>8+X z9xoJ>YulHP>BwG&VV}LfZ9gIr{hM!-yaw4e=~s_|<X6f$-~pztwH*7?(G}q)aO^8Y z81hxo=&l=WZ3+BfOJQEUUyQ(rZ}4mTBEy1M>1o?tOOILYa^mZtz0&O3k-^(wRNmP3 zhwM7=`Vr(L3c*Q=`+D(tqLJ1K84HTFaJHqPG%0oNMjK#lNmF=HhIqEm%{P&k;K~^O zO`0j}#Mk!4n@R8SuZ0&=otpY?-}tO{wyISD1Su<QX&c(b(=^u@74v)#d9xgRUZn0s zPUbU>9nXRfd>|*yY@Ea!o(Z-w0%9|v8#2csJhTlDjd&XESHr9ggK*FDEW&(?PHVb3 z6oZe<0kiFX9y)Qn)bC4p^a+Dm8m}*WHJw6zq-<c)4}AD(o18WQ{d2z3xbe&4@4m%+ zK$wr$@P`RGw*^l!ngfD&l5nm^0-Bna&wl<1`0YcV{rvX!U;W<e+pl}~GtYkZ#}DEM z=y@WCyjirR%L;FpwX$<iS%AZb39;`uDMMO|eR(YdCfTa;Qae0n-d6fCEzVF4&>;34 z&}NoE!z7_Sy2UX1ea<L-x0^7qVlAF-4?(GhoGE|cCc`hNVMs3xnJSIXT6$Qn@SF+c zj(_;G%4?U-utsIzgHJ#o1Js>yI54(6W47u^+(qtyN*rY}HsC_tbjX?evI_&la(5IL zP9`vOCoO?W;)xT>u3bc4oQ4Gzsigzfi3fiS$@T2BLb+r^9*a~ybX3B#Y>O$8M~f3Z z?}GHA)@QkDj~8|IC=D+vxi~g>(0hTIWN-A>aoFT>?kt1E3tN*ZNg9NP%WU|yrG2i; zV#5iHKmFz2>|BWY7!mc?9n(Aqn!%DU7yQVda=EA!Zt}(P@pz_<-sz3l=+x6X&W)uH zoPP@Mp4_?-+9PH@mgBB93R_NH_}AVAs-}SkQIfczu7p|XvF%s8OTYF=SM>QRA$@(O ziVmWzsL1d~mU1`T@FR~UU@qt*|GB<!%v#<}^*iP%ewFc(eqxvl_arqcj=xm>#O+4@ z6M#BryLtR?<o`|eUy46)=b7V|M;l1zA|&2<_N)WY@pn?#rA|^svJrphPtRkMDETnQ z@rORwVl*mg1&>J;;qp++*9j!yt-t-h?JvhW{zHFi*AC1k(DT97&~LIT<Ie#ActD50 zKl2a1>-1}1)+qDYbsPPew1{_&K`_#H_*`~JKl*}GKR+rIUx=G){SHaBB=aGd{v&Go zKMso89{u4vt-mY&kF}ONh&9kSsK5PZ{Z0M)KlHo!;)<rCsN-pJ(lYgfbpQ0x9%9t5 ziuf;`<4@6l?VbARbo}$p1^3~h-w)mrf5;7+`tyMveIJveoYtT5$DbtLfLB8MM4#jx z@ZI?9Kg9%MCGI@d4E<yN)egPrcR$e%oQr;VD=v&1ZRdaajT~gR|2P$0=k&{WWBtyj z#1;KC|ISz6+}?cm>Gtu5^<#u@<dGY$JMQYmz^p&$;v;;{ElWNOz$S;q4;P;?|GabB zaeK~Pc+P(ly!kOa<m8-7S~$&xc=M0}Nc^cCCyyT)f9Z&0#;olHr{?I_23}UqZXXll zaW`uYr=+>%afCVPxJHljhIYrZ=8?zgVKaIhW5>Tf+;aXIBTjy;)gHATe{5hYPANWn z4adJEwUMLD*di|k>h+O9))r$6iBizzBTkgB-S9DQv?H|W)m~%gV~Q-d{9pj)nvWoW zYqRGX@*02VLmugY|NgMB{)c<m;@rzAJ$3oWIT3%x(GRQw(`M<AksWE5gjQPl5~F;} zehMs!I{O0E9oT_b93?ag;y)84R@&Xur(a|Vl``{8N@Up1fJ6?h&^gcuBbz9`iUV;n zya%K35MfO8tTxCy<h4m{OJu@4#YeO{!cyq46Uaf-v|T&wYdP6k&^>mgyr%uRm`?I0 zdm6KMBA_Mo8uX-X?nyr})o6TrbZR~vh%zoGSa=5G<fqZG>skXR9(LE_13sMj;KR?h zZ~u@*!}FhCBLVFkWuDi(<=nTYNXATb#uWi|UR;I@m^8tk%u^f-88|qnV1Br8EOu$N zkM$WknlTd5@m;)p!fB>tJq=h8B6*3I)`iTsdf4cyZw!^A4GI-+(>Gy0-ZOn{aAiOJ z>39ss7q;#7mQ6j5&!H9EWwo(k=jxTmc67doP<%5sL-)HLBun?4)G6jH@)htD0Ry?l zx&zzwitF}?yIM_aZ*8aR9yxdDq7NN}i@Y2pom^d%<6;416+E5n`%F&jTI&*uKkXhK zxU?g?bD`62OHQ?n`Hzf}<9>ax!|q9ZXsfI6@-4vitx$X6jX&b-AIl0G^nFsU&6YZb zRmT|bjr8cU3el8(KSJ`>aBE+S|Kb}|0k6LBQJOp5?hKxE8`carsIRa9n8PxVS7?wc zY{F*)AOjYDU@N#?%6JZhRhqmFQ0j)cr%w2w@jO+aaGUPOcA8c_()hCNi*wx2W$F&R zH$^pGxN@w0DNCN<#R<0$LOv79k0jy;2*2^po7)%pp_j*xpCrL-;@NYe-2DubN$0%a zc}V-GJp1|Eep30PPq(|j`)=L+{O}2hYoFy-dXQX3c<flGn>vMIL(1A7pj6nJ05!h* zO(R^GvRkG&VU|&MS2Ek(m*l##n!M7zh~IgW=byv0(gqG-t*2bzeGaf=l3?&0;W_qe zBxP+E<ox?h>CSUkm@nbl*9_MPwy+-NjFW(YQ%<^raa4sDNtv+frhkMDRI0{B1)c6U z(*6k9WINJK`_2(hu9s*G1@6DK2YXJ(MKEhD7fqgQrg$uY7y~=;U?=DO(C20qdAtaP z&I>#50QAnp$YaraG22Nkolk-l2}$IFi+(<Nl0J7~d*PkLXI(g|I~Tj!fdDTuJui)1 z<zQ=`!|262IQ6@+7*k~@DZ>QN>RW6^CUEpI7t$e;yuO0$<3H+I);!jOwt90c9?2u^ z?>ie~6Z$+RwXc2A>|W;~TqCr}Qpa@TT{x4=CJeRFV}E|Q3|U?%8!s=iTYt$wSmb%O zUH*qR?Y$jIK6sK&@q#-xMlJxuNIQv<VZSlyA5Lri8MER43-zOGjYBTthu{9F*bDU& z|BL#u;idI+Ja9}bH`4!$_Wzfx-^Af#=L@xSdCvO_{`dUP{9^-_$Hc8kL+6}hpEmQv zKB*$cu;w54_GJp0WU9IAny7hfz3T7yJLziv*Yq<LR_oA(IrQ_qSCfzV#=}uR$?N1k zFkz?PndO>v{?W)fZ2y<>kACdUIg~L`KXmm04Eoux+W$QF+I<3BwAq*Q@2vlq^czR# zzw6ZtZ@F8)>%aADWBWhiKlMk((64_AYyXwo@n^4@@#n5jf9%oqrhb=t-Q8LG`-U%l z$_I|28SzKI>o(8*)qh?HiT@?bwjlhmR=+gSfgi-*Bx~K3eqMjhK_YhO*RPEADgL)f zzPf+S`Dgr%lS<V^lF)Kaf94-!sa;7z4*JXu<iuR{$9Bg5sNXqsL;am({Sr66{n0n? zZ~yT9pY!;)+uIiivNuH-3-$H*KjkFLgtX_nCN;f#KJii~?R%YI)i(Wi3~B4P@#j7B zSN|Oc=Sjv{AHgSHWBqw2hq7hKctM%@!dx*H%FUg^bNqcKv(FI6rX*pB4SS+=eqdsP zTv@(3pDbB(+L*TA(y0WlemMuDU*BR!jiGB!8PU)2RT}4F_8*_&t^TY7&-Kv{&N1rb zv5rSBdPAptBx<wQ0>(xe9>>MYZ*B3|-0{+8&l7x9i02W0&{jWOsGZIe=bv}-YacJ; z5GghPl<QopaVh=z;2vAc$AZb@Gw|=`69alVabXgy#gNP*N8?-LL}vWc)9DmwB=4lP zZJnGluJpmSd~s>xFq=>&25z1b69h8&l2>fdWekNy6H;i7ji6K)rL%vuiq=m28}J}$ zH__<t%`arr)bxo;wJ!1t)}l@n-5T>ZTqoGs)=|h=q89*fC?jMCTD$8sXibxBHjKc& zbe#6k%XE{UhP*3(x20je=i;2_+;89hF3*4d`D@#2@7~$&v7?EzI5y5p`*VJZps;>U z3kZR-taL*}&EwIrQg@2B(O{aEzR?%w{vy&fz<-2W_XTguv6er6Sp)DTQ*bnE!!BRk z^CH&@8t;0J&GG`XEzR>!w(TcBAPN0V9>W3rt{c2K+6F?}V+rgMB8(@F?w%t*EBwS- zt!7jZ?L&7`@AM4XiIk}cCh%9Fu?Fipcbo1=bA<0VuswCtc0I=nK#xb)a5mW#!X(|n zy3;k-R_|V)br3nOVFW`rB@CX~pGt}*a9N<snv#=Aub7r2%{*+jV&y2i>55tCz6||) z;Gy>-8t|>E^_6X9bHmEVVUPqkVPeA*uxThQd;Ol~#8>YGv(>yyGXhG=5LPUMWOi&w z)~_~gB{&CL@q>Mm4Ykv(HlyJSZ>ts5bEMJTU)h9ZFCC2C4vo0MJkXKpbg;PJhQGSi zr!B4fcj%-!(1r(O>LEkooL|y6eWh&szNG8^<ZXUxlh5Y7c!I|EskcCX_GJ4iKS21} zeICE@uzq;Z<g*ty&$t+UM$*~4p&xP5`57>IK7eieh-W|Fd3*cs|NYmtZ}Q{3kAB7h zz`LI{Xf4OSIBdKUtmg4pWRb=}ZT_ysNh2ORa{RH~_=R8axpE19q&?Cd`$u~Fp*ce+ zC@*Yo^P7Ke4G`$hTIA{Dd*hm3T#9_%zOKG0-E}gq!D&N=VHndx5|%cw>mg_Dro957 zv3m%~&evY|2eu)7#C-P7Hxkztuqtz&uVuxp@SC<-kX}f62X2l-IjJfSeK%1mUaNB< zZ-STw^_)9<EM9O`s>A29OFNE3(0e>eQi%(_+)c?Q;2lf3D_W$RfplEV`9aeRYT#fZ zAeZ8yE84oq%$?BC)rG3Mym0ga+PjELx5q#4VoXvQ{}g-IA4|e^FDmuNlEj4@3dL|H z4z$E45sUvhPSN**QeXN)Q+U|`J%7QoK~>UJ7xlSfrhG4YjZ@>b(Tj91i0jTX`tBja z4(nXR4_lMuRzDQls?O&u#>it4-XTH6E;%lmD<=8DE5@w8(oK9EGkh|<E^g)L4)$Cq zc>D#PqEADATC|mq{W(5o2or(5ev=mn_b<t9#@spcx%6W|{8vB!@gG@JKXb~ng<p#Q z>K}7?>StVDT0imej?|ZqfBS!ozw@3k)RLNC#)Ihd>iGMO1jnP+2l%mS9e;V}2QJX$ zaOK>fjmX4b*_O;@WTl_^LrZ^#{!RjA4WYkqCbv)eYtI-5MQAernA4T$S@eUuR(~uS z`o|i*?IQ~~Cs3C5@ALzUui3MPe*JC#(Wl*XM^Oeov!`UQpu6*5q~ovutA6AgYX>+u z_Kd`re)LOUQ4Y=Y|ENFwi~iVB>#z4N15`d@G`7??K(xoTiw({VlX@e*?SJj*s>f3O zcYMz1*G2tTw#Db?=B`%OozX!%edAp*YW*z>!6*I5_t6NU?>n;9iG1zTW@APuN6~&` zE}-<)v-H`kSN-^?{`k-O?EN@nu=>C1*C&cJQ@<YFR6q83zWOFN0shX{?{5F_brQ25 zKiZzW`+%F|o^211^$c0Azvt|Ko`vYabA1Kod?7S^Jb`{cI3WH>632!Zmhtd#@0i7Z z%&YaqhrIf4co>&keA6%cA8qjp&RPlqIFqoh3Fv!#l1QfSE!e_5CTH$LWP;p3qvNnU z=FTRI`=7Ro2s?1+UypwtS(EkW{-*!W$y1H>Pe0!*a!w$pkHLX){H-;sKD5W@@=u?< zCNv81AANaNH8h!j;zG~*LRaP&y5b`gNkWhLa`%2Ey4@!`u`OQz^Mk4I#dF3-`|J2U z;-O6V^u6Yo5vuuloPP#;#>Bv_Noe~fqf;ubd;EZ*2l(hfTvHa_$qKH~2YFNYAaMXo zR1Mq^L0~;y=)z>}Gy1s3z=F)d4w5#d>}oqofr)EbW->bTZJfg-fENQ%P~Pib45gqa z*s<SK176*gEfBFC3IR>sb%^HM2`W!|C(xw2X=BH_>s*zPShk@D+O<2|vr)3_PMcdi zzynzTfi(lPP1EBkyY23Gy@++#nEc!Jt-tu`_Q{iXw)bAIS&?C9V!CO^9q5?*Y3D>z zU=UR~y~4A=)RPZUgbn^3Ogyj16VY@6q3;qO=m>5aVe(~;!zX!Igb%X#CJg{-TWs*W zc`o5eIr)b8rVmMYyRRbSQxniUHuND0`a1#;0O`&)yO!9a;I*uM8C%av^Rn$2Fqo9T z_6Jzd6;uNnIcURwgf;H}uXX!teO+lfY1Vf4S6=ZgZyooQ#<mj{e9hlw|7^M*r|w%j zkz3}_VbvfNOLDaUY`8l8oBe8^WR$>s;!SgyIe9`ih)*Y}JHnH$7_#`LPI=clG&g)} zKFMj@Jr)jkCmn-83r_x3jLM8v!rE@B=U@liIg%ONldE!FAzcA$`z&$mt-8rmcjpY> zVoDe#ZSoaod%{aa(F0u1WtvV}L*2!GUcAjV1d~QMFZ<%%Mr}misNH`X<~+_^76((~ zgvq0z$xB-}=cS$-hrat<cZAMIY&?eMv(I?^1_Hmz4-nqx#QM{ZP4<|a_Awls(8A~s zz<Bcigv7HyKKL_koBpoP@8H?b+u!@O?H~LtPCB{!`QcOVa9GxoJ{?QX_c%O|Yg;_} z6BN-sQT5T%eQ8FC{{x@XIdDz3vdI!Sz<Ju&LeA99dj|DFkS=*%VDT6mebn8K&4tc; z&#A^QsNz`xw6(2eii)jyvv;}Nl<u;GJ;rl~WhnN@OT7^nZRv56^w?k7#jSYT$I>um zc5IG36W7emWPfcR@nLM>=dWvx)=aE9;D<b3&>@rBV+boQ7js@)JbwC+HYZ-#mWwm* zh#Pi__u|^(MXG10CJY~uT=pXME*IZVs7*%tbyaEH`8)ZLyO%uKqvT?oO(jdwO=4VN zKH-N1Gmlk+-hAa48%?TunOGN}poZ<8+|ic0%TfJYl&c@<o;OQdNv5$zknM%0cB#XQ z&0Kh6nqSqei(MH{7rrKyojnzkx-gD?*xeWGNnRNr{v*#eGQCKzBm;W+d&+Z)e3VCG z364gRB<l0I*Rj<gp}_c>*nQ@+jnvOyU&wc2s`QsmVcOODjb&^e37I5D7@uh?Iy*k< z&xJZZA)@>@Il$je|JZ1D`XN{6UrIk()o=WF`qAf{`YZQe{l@>O|LFgi!_$9l8!?~$ zkMVt}_+Rp0{piU2XN)TO=<t|y@&kuOKXVz9%x@-U=AVF?(}WP;nE1@0N@UdyaRcAu z@1mhN*OHLIiTt1_7S#NA9!gM&u_P>4oohQ}+DyVno^$%u6Zn{a>hF20ovVJ=vi%s~ zI%lqAZ7x2mpQKy-ANoxeP5rEU6P@DqCqAja{kJV2{rJy#=f_iH$D&{V)$cw+spM6y zzv%abh?4cCer;Cvs^2J&{pqZJ{ZOww{DqdjrS4)q=y%MA|Jf^{%YMJa|JI`4y-7da zpRE1xt`gE}a9q%j-noYxlQsS(T#=`1z5XGowzg2p=8CEF)qUAmIe*1X{YZ&^V}uMa z+5cL<2}6kI{D(R5zgE92nKMH_vRzBjzl^^h+(@_6p8>nG{l-`BZh!kL54Uf9_tWjC zZ{OeE!j7El@^*_~5LCZUpi!pB62GW-H+RP4KW#sx?LA%p^UP<Dt3-kkjsG}mq_Y2L zORUvb#y^SDvHyFlAOKLxPJG5)@$#A+&KLr}H=f(<v7(Om>Z7=}kem5W{A@c<YQ4Dr zIR4=WW{b)=CeiGk;kd(+IUix@$5tP2;^e-2_dYxj#4e7%+Ml^1UFnzC80Gk<7b;P| zc;kvJkK+bF8%!D}(JPIBz?6k8=<?3)B#VL6UCt%a1hlazo4o@ZnaEEfS^EawIEKzX z@;(1hj^h;l@U;y2<5TA6h#P!JzFabp=g??gah{MTNhhtEwTxI=Mg_>f^TjyIX0a`0 z#0Yl~_``2tK_+;`105ha`T%1f3`#-6H2Vq{qwUfxRH1Ktgn}%5NwU-Q1JY#0yHH<k z?j)_~5{k|7cSzb*>J{1LB&s1ds?V~W1r9&OUBDj|ItD$?jl04M;0jC?4IFhU-nv$v z?MWwq(tXz~Q-sM+0{S}-+05SD?)&%+{)H!Wb~(;@Jj&iS;+aIP!YR&)0nS{Ow@b@# z5v#Z5X6`j?5Qo+`bqb?xY*zV&5D5+Vc}HD==3K}cQx30gD@*a(p0@n!Yv6_P4eRak z2hX?nKe)AhLIS!U!{H%covV+4UR>f(kuA;Z`7~DIwO%<Qs0mI8Awey*B2pST0SkOI ze<i98&~?tPvFf(;$Jnhhu9Mq1>Tb$vJM+m#IzlPOc0mgTu6E&*G0Ld5z3k~2J7p^p zzDY;h3uueSfYv8XL4&HcYF1#O7J`94N4N5=?Nx?taq?S^?E@@gdO=Ixa;c3=j%o6Y zl7l@^$@chWY|3NZ1~pvz0XxSEties${g#k=v3<v|Bf8pA)=usj;Q<}scJo@{v^B%B zg416B9w%~cFz9BiyT8`(1y6{qJ@-(!Rkzj2d0lh|ru;!0UUA(Y?by(;QJb93HMq5O z%Hicn`oyten}q(+C!cYqczgTOJDk`-^q5TZ6E=Ah&QBrs>y12ZgBLXdy!-hlCZB)8 zvzTtbwf%R$_h9=?j*X9gj$<4^)N`YPh%3eE)9|%k;msu8SXPxfEQ4>hq4Aiyj#K(W z&N<Po!n*NYuQ*-JF?0ZP++FoIvHEGRdNZED<gs|{w0Pdz?Z(O6?e-<aLs#14ZHHeG zpR=uh$03a`L!QU|F6U?)*MVGVl(Wh@<IZHa(fF>{F<D`;w*fMa7)Qnm4`ASh`)Z*p zUBjBbaf@70FDg;t!1L-0zwE!c2xRTBcuX)9iOHBs@@iPFEy7w6&+%#4ktBi(kIjMA ziwrLYeSD6|U-o=1-g3t^dXjX8PW|4w>~lvwCU}>z{`*`@mv`&*m>Bs^O6cWR_bDVE zM@?dw^e#KSsLZ(}wC$5g*-Emahe;}py1f`rTm2L-L~~J!EQ=SyCd*1Tx<d~<2XFnX zi{<=47dA>)G1SVIA%DlV{D>{sq+QW({3y9&+YK`XelF;f9E?51E6Qugo-8E`eOY|^ z!$rY}g|wAyANnJ^Y*csj$3Mp!+T{Y?F)$GodHN!+a@G7x(r;|qpX>zj>)){c7x|xL zQq4t3GuL~bIDd`dZv3x_|5^VJ`kAyD8|Pljws!4V@?i&hb2n-0hsQ+OygOew<u>0K z=!2;8d~8Q0r<7f`J5MtAm;>IaxF&C>er8GRfl~b@g<MP1|DoSxaox>%(2o*l+D^Ym z0`)~b@2%hYj{NC=;sG~n)yaBAKfsQElE3&UzjAN2|LWI&=iiW*`3G-~k7NGdaxV!U z{p#bTZ0(%>vxcYt#&FOiQOX#^|6}~s58c#{yqrKC{nr;`dGufX+C$0u2jB76=J=0p z6WQ6{hW~ebGy^so3+;EGmNvd<qcTBe{g329<Z^E2-WVR^fnDK&ypp-4KgmJmYBRch zImgv$@majNqkY7Grym++8hZ8n=bkt951sa>eq|DW=UsHh&qaUk#4UXEk4ICeBeIzr z?Y|#kKI9vEUnKAF@BaF|?OXr)lkMk^IFBW{>u(AWrR|PmX5tsS5`W|{h&4VYfuRF4 z_B4)`_<wKUordoJw>*yMLE=>VpI1oo0@Tcke+B}5_-o8Ot|hsQJn3_+0(K93Y*!p2 zIpgZy@A|JtL)DnyLBD#+f94K*nf^x}y4xq?pJXz&sJ}iCMm99|HO-hSCwE~FxUzL2 zF#@0Y;P~^GP!az$kSo7;E9V1{SO68wxC9M8Djc{;=|l`4^+}%04Hfa~52Ewf5%gFx zXQU@?(r2y$zssY6<cVzNo4z;)?aLXTnD<$;3X+z1i&TdClYm|m$bEN*Cnam?zEfXU z6lQ69;hwNsbTBm4t@oWggHv*9vK&doBOyV9FuVoJUD30zesrlEqMQ~fnE%M7or?kM z@Mtz|sQZ8;qAnPUugJ!Gs%pzLpfPsJi{{1O6L~NpUfu?Jft<*$;2LnO_uMb+mB+@U zCdP{xqONtG%$s8>s>iq6Ydl1XZ&>u5ktcjd6GDL_)=Pb)Z9cBC*)+Ju{^;TM9e#B0 zHqU>4z*meHbrI%<6}vz<mov2lVQA*IFkdQyHuZpoPk0yLDRHu7*c{!GM@M;*_PVew zjiv2x8tberYhL1gX<z1N=6LZcPndQGY+D#F>G?1D#O2w~NJ4z?_V(d7w(X0+dmYo< z7nvw+SM>zU)@)3hC*;tG0Rz_UA%Dt?vCT(k&^7rEJ;-9pDyQ2m=2d+@0&6h4onW3P z5A+g#fw!oZ5>yZ1IyRZuO?8@5&LfKlS|>oWwp>?n+7M=5o)B{yg&)T7LgZg00jL9I z$t^umW3$R4F9KG0;~Hiy>|9xCFSX?px8fV7@swWg(nxk<NGEUcb6~68bSIh@w@P~G zrqaQ+pjytd^)%>IpP@e?uWwD(**MV$bb#B{+#Psyc*NY;3`<7uQSOuS$fO_bi+gMr zo5H0Fo;rF4Z}7qfP0LFkhVaqJzJ2U3aPfIb<I6k}HRq0{4}8l~nK+ZsocEKI;`Pa= z+nv|>0m3&)SOGNA>>bZ0r#Lr<&XYv%h~~wC@#ozA{Jtk>?{oL_-~Gn+$G^!*BN^)4 z{mdh(l%LWEsO}H&JaC<ZqhsQm{v4e+;po7XUD@@QjxktE_YdHeWY<2LAyVFzKkWv% zkOou38zobp<J#_d)iPUX)2ALCE6+{q{8ElXk$~4lJm~1tz8e&W<Xjo%>`+5>U^&M) z5P6=k(lpw-&B?fQXD5Bn+o)BZY-_)10$gP_Q8P4Q!|gYH!@A$J*5Y2GL=+Czg(1ff zgG4cj<Vlvt7VkJ!xos~ny(`yeDdz&03$ZLP$)U>i1`RJFwS~(vpe4UAEWNb!;#Y>J zK1)XmWP3g3g`KL42c0bR=dAziZ}8+!-{6stj<S~;SdNG?`>&1In#2PzFRHyz&hs7f zJXxqYS@z;E+MvnfA-K3~SSLZ^i#|b9_F)fgUnW9tvBA}`*a%omUMSy-(p-8bW{F=X zZX`>5v6DZf4SVbB!^WmI6MtM$8v&?K+2vsMk!Ku~6`H))SP5(Wj<12~#BD;T{t-iM z3%z%R8#}1IpcijKNL>6CChd4BFS38x`bP}@Qu_T+<lnUaBs;tV@fR8Y%!AAo#-H)5 zwPTWp`D-G`vCH_P_n@E53s0<au28&~wC()s@z46K@y~o%#=rLtY1QGp&JUT{CC<*< zsUHzZR;k}-%z6R<pWkMP&Y?ei=vQ{u)Fu7I(DgeeF5I=AZn^$izy5o7*4TTJk~{dn z)1P%*{=ZN^_W74`$^VYObC(kR&OgWB4NU(@eARj`3iq+x4U6pBzu2=JKVFFk<C#Ql z>(>O@85=F~?$F_X_OH-8HbqyDF{nFW4OIKDh2CQu{l=fa8gJ(Wx`+Ns#NvZWO6r`? z!s?L*vQ#oUiBbL6UHn#mYJGxU|7$;qHEGw~>vd;oCH9<2Wkc(iS~-@CmGXd1{qAFo z`xX5o{@#Hcjl|2x8R-hv#O|rzJw3;}lYZrS4(eF`_BZZt+ZXuu-p3EOkKcHGdyNyS z2g*Zoe)k|YaeQH{Ju2ck$5xZz6@PzJ&~F9Z?qoCTkI~ML`QFtx`AKZ5-L~Ut(v~2_ z_V^8%so^@lB2O8>+|%XL-UOevHkc&NV<-^W<CSrSr)DT|^Z3TtsHT#vL%%Xyk6BMd z%Q?V*og>ux^TQIyHOEl+y#w3gqqTDGh0u(tagd+!m)7I7$LE^=&ad)&CZ1z2{wN=% zQSBRj$0Elt+a&n2&lo$=t_L}I%drD^=8ZLQ_XjA!*L;#K-z-3u*C2ivE_3ETwzoWl z6pwrZug%6=xqOjxU(O|{q|qHqjHu?7cj+`BL<`mdmOr}CN*tqHLdmN%pD>IKu<-?p z;22<^7c{9MP7<0r2Tr(!E2B20qEn>soLUWjAY-1EA%G>4bX2tKUr69x#UJ?x#=X)a z#HRYY7Cy_QD@g2|$ZHydFBCFaR#-tUzPr?BS(+2JG>+)C-|ent8zCzRAjGZswR428 z{j?iEz4lv2*Uaaf1KfLk+y2#`f3*GhXZN?)-ezHOan0V9BCT|J0qJ?-2QdziWa4_T z(xz(>-1==#ADVv92oK%pd%SlYg{%>SU6>$Ww!6sFLMEPu?G*5JF;VNN;j(3I4Pn_- zX<Lgh$?@s;pKm|n=DA<zIPkzpD+8rv*lyWFjG$9lfHvh@c~68(O9F{&krcxsM*%IX zz^s{rP`fQ=k$h?%=ue2h8LbY-FU5^j$=beQsATE=EiA+MjM+IyT1Ob+=y@>o1>Jms zE#nV-&V_EbJZVR}ciGHcWdSeLY}5&CfKvByB?_DPR1a{3C{LTMUsOtIQLSwu$No83 z)8MoxTkb*nKU|93YU@K2EBe$9(UrHBAf0W?fyeF)Htl9PQm!Jv9mTACqL1aE^+n{x zzA$xDQ@h<dVm@QFx*<`fob)nSS2bnZ?-E=9M3pg+$MeUPZ`CtUMW=2^rT66tY3f5? zBF}w-ZyxGmF1R|xM?ZBE%hV>7xBrj5HxIV#xbORZ_wDPv*#{Wx06_u-2|`>!N+prn zBgsWsmQ!(AP9=8ANja%hmOrvO6}!sie^T)uN!gVsu4qY78zo9bQ6#kxB18fNK!Dgc zVrDQim>sjeeb4vv>;9eF_uPBmyKm+V0MgSl@1E{o|JL44_wV%Sqa!$OIk3YfN3`2{ zksTpv0*@bz2eG8t1-&B2)Pew46knL07PAri2Ok-<d-Mv-$`uBG*$6*EN~XAEN8o<s z{at+14JPLVKDY(G=hAk-Cj=hx0=FcIc(hFL0_J6%GXe&yUIO@#mUQ)Wi!7Ly$RtG& z<DK)%`QeQAJi#Jer-!8n;bhW)R9E0Wc2$rLk%FEgjpFTqxgn^eB_7ouMCeiRCNBHE z4qVCZHh4J-C+1BVz0GFegqC{9GFo85L9X*FnME8W+XxC+Jx^Iz8z>VN*3C1Z#axQv zcw~Xeg3xy*vUnAIU472aW>y}HEj~Ep3v(0@>8jGK)4W^-Vi6hV_If+epuu%jKknq! z;**J-zorWd<xvd25Y-}%8uK%oeetY3ozvrGmnXODdf3Fm6jU5)zVj-|2Ys+Z3(vK+ zW#=3B6Lj}uIAmY?@K>~!w1~tJogB8v2PfIPqT@soZAwGMf|<Z#+}C8{O<D0rIkMww zMIUK$n6!vHG!7IN%e<tU9N$Scc)rHN!7O8OLgAcXv0Rmt@{o(Y)Ds%`I#Fr#i$507 z?C9d?4q%mjDr6SiX~8c?iSUqH(ZN?`o_MA*B#(ANplnL{z}_|av<2D?W%XXPpAYQi zcGI!^aa3(%`B(KwyA)p>d)~jRL50?m>tF59^MyzKs%HI~+C{2=+9quXzU#UEeHSF{ z5$91Ze=5P9YRIK6=}P;D*5xzjprTw4$(Msj6_(m($cIk<wj|#N9I;jXdw*bI3?Kcu z?kfMV-<`c7KRfWee<0uC`bBT=S2(0JU(GgD_KQ7z1OB|#(b0ammG)}_1OFEL8Pn?a zgXMaQulgA6CFFbkMEN6M{8#kaSc`nd-)uknM%~f>Q@J<GKOC68BUCnm@BegV+)m@4 z<Wv7@qvTVL5-Z1HlD}4y?@ncROr$yp`5fZ}J$2+)Y2&+IC5K(6jMLcXHd0Q=_wq^d zX`|$MJyQNE8y;S)Ezy2(P^S8)-Y6ITkW<OW{<?heM^2l3;g#brJlxrceEPAfjr#X- zU*)~5hnffX4B1EJgns7rdAqbSYC8sntM<+VL@(d<72Wf6&(S@?&xV$IVxk}EE8D1J zZ-MBjKkUF^%kFe|3<<}bw0daEyv^mSocv?5elPX{@cW6^A!XovBwxG8S9ElS&=Dtk z?p<=I$_DN~IF_q^D<tkFiLd0VWRXuFapy7<a0SYr`_78=@m=`<#nV6DDcP>8_)>Q4 zH0D8ey7Q%9%w%4Gzs|=8*-tyBOx@uu`+>)pP8}tCR9?_h{`%v7$S!fWO)7woJ;?X@ zi}(%=4SD;5Ff~8y$3e{eBI!!`LqnU#9_J(e*w1}^U`Y6ayK`Suv<LJ>{vZv4vQ<dq zhWHj~^&AnXg)*;0WVgVC6g<a4(;S?Zyqu;AGXFr4<z<vYPNB(0l_MNCsKQmmCz~=- zQO=w8({dmNM}IzGRaX@dh&hepSy821uZfRmq<khu886YMycGAGiYGY{s02dB$dkj& zD<h%4hd^piRFD>wL{;S#$rJ^-8$la#4}cE5Do~DasbEE%>To;B%ykn{L0V`cQSt$Y z5HP>$r+%#vzzt-@eU7fi=jT5!kK5FkI%jTRjI-#Z{-h3+)l-~KN?=0o4r%fg_j?l= znLl{Iqrn!@CJyNE&bXNrE*?BhzEa35^MREB@<}7pZ4`pWz$9KU?+!xoe6FAahkx-W za7u%q@n`Anbvu7i4<NM*dXRf9JY9J6DmF^+Q-nx+W&zL9E?~F8Q9uYD0O|xe?GHv& zh@ggzo>0D{Y{Ub;KcJyr9PgMJA-F8pQh29)!5j=t<Ofa8^Q@w6rGA<+sa?pLA{i@{ z3R<Ef@JSYk5s25*<hd}e;uAO-Mt}5>={(!x8IZF}oMywznKZ<$gpzd`--rizp=-vA z`%08ckW*UCJ7<$DiRwjQ6j*R91lP%H=_(l!u61^>jr<T%T<cja>6Szya!>&;qDf2! z1e`Vyap#cJjGz3WuW#naIt6~vU=I17RwnZiZ&!i?BknN8VHf$;6*(Et`6x}E=88>R zC(Lm2G+9D7=fPEfp4L@!K8I@#?~dhpJkXlp?w{({8$P_=$SdKRjEm2Tez*_vx1>eS zl89!6f1Jbh&dLFO$A0_qyZdZF3xox274M5Thq*s6Ve1scSN~HW!k^!8bd?+rK?^)W z5OEbA-_!AXO~3;W9?An8Sw)L<tf-?Pi6$4<fXB7uQ}T`c^6K~OAkdY2Xc?FnL^cuP zKCURjecJE24oq;rx7T>U50qfk38%~lwG2_LE$y&G*g_mRs7JA9wJYl2Uje{z#WEzv z1H`p7l{EOkJf6uqUC1ZIHR5$z^6N4p-I5oCFd~kDgg{QItNQf?yZE>~RXz)H8Z%dq ziYslx7vVH!CYeIUVFt}Qi#0kmx(MKlaz#k8aAh%w4D$T$2$2HwI~KX{0oUhyGzRr^ z7J_LUOYt==3geyuKXij9FczZ7aVDa}so^`I;IBn5i&TW;kbu_jr4s1$lI6M!10&sO zA)YKw)1)~qlF5z`{E!WgSj781U3`;M1s)o=G+4Ql2V(K0Y}OgCghyNQjYH_5G%}q= zsQtpjc>$g;dKCwsAM7R0osz{c`k)K6{P`{}aFHST?!-}2!jpZfL!pV5KN!I&=PLu= z@bQNX0<%cRVUj|UM?Beob@E-e?Upa5z1m;N_k!HSe$G(k&{hvuVZS>$MO>7BCI4#5 zKl7`~Uum!Zu%FlZy+Tv{s{&nf+P?2LR{O&maMH##wIii@7)1He7~FxE+aFGr2KK{K zgL`WK(5u{}f7#w?$o=kAc9Gsc0^i#=i_hHtouBC8gF-Gpk1a0Wfhx9;56e<Mv>{(t z@4KRL`ANL@KOALFiv7-?K}G?4;Ng)hANy4pmHk3Z4|lTt8l=J=w_mz@e+>E9PyG<Y zpYg$WT`Q@c>E+*IKV|5Mg?x%bdU#!kj*s?5+>d~W_9R;Rua|!*pYqRv@h9}9{(bz( zAOCZ+k*_~O)IUk^R(13DZm;t1Q~iU5)6(rzBE~M#X&hqgNcJaO;pFiTKHmPsw-Mu? z%Gs?)pyH8F5_{J}zS^ZbGhNAOZ>jxplc2s`zIdw@<n{=UEI+q@Z-1qH$%!^hQ)`hA zFWKVu*X8H_1uf3jp&@<aU}@bZCK~p@tpoPVktJK2*QN*^BR9<b0Vk_u4XFI-A8J8Z z;^m3nD{52B!)Ryduc#hJN_LJ9LMKJwp`PvIIUs0PX^-3+6{l~5hhr4(YBj>q{Z~$0 zLb|_*5E|vtmfU|RTABoPPB}{qg`t}#I4V!+l?nnT%F6AJx`RLMUxno~=se)%gC)q< z{m=DD^6AS-x8&f(Rxd~Nrks%_I<Dj)m+waK;c?22HtOR6dV2ZmxDq+nU5*~m!rS$M zpZ@&84M(_;7Hzs$CtF=-$?_{jCp)6Axcw>@czF5h17t!GcctkMf_vLh`{o0S#3^6& zb@{?|8{B@$#VikrOQf#qnx<V6AZjlpT~VMJ6ek0t1SbdFSjT{uuxS9~30eQCdKx{s zPOd!Yi7TUkC+g56$xd>h1(lTAmuOQu;9S%H#KV7`x4`*|I6`m)-~V)hUj$-kn?MzI zh0(+eiY;7&c#HKFWNnga8MS0(UmINpwBYANSzPt}mNYzqrVx<oDFMiKeg$F0-!ruU z=ltiB3%Y+Duu+|H>1{gWbIYN=qdtg}Pjm9ykrHJ-QXMzbG2S@8oc6px06EL4qJ=DE zsNW_1q0i|3!U?jlC0GKl;+YpX@Ihbth4%ra!3EhrLP%6`w}q?HjA?7y^}MblKrfs% zyK+Ep!id=CI^clRV*u6VWqjgo<aMNaI@1Q&`(nkVy`Q*1A+y*k(3<hg@5UvUKvWO~ z+)DsIXuz-2m3d_x+(>iHbOF-6B|si2$Ir@f<2;&m9{e1))FYSzi#Som9SxWw&~an; zP_~zdXIk%X87(2}x8Un>@-yF-yoz9(B9%@l5|e2rP?arNRKnml6J=YA65K?opzDBE zW)<-w+9V2KT%)YAW{f`@g_i7=M4|$ud7zKam8pUOuh7X)=+&?1m%xm}80>YfG^&=( z!D%vIk3*9iNR@^LICvsvt^x{w4v%ZVg%kM*i#UBkbFxGOJpTcYKgTU_@EzfZ=KSaR zd3{M%VGnQkNSiqwud&Mc&mv~y1)Es-TT*&KM3=PySewz&8!LnM`411-U1QocJtGFX z`Bb}~F(yJ$j{)*4@WA6rnm~a>i2Ra=U_ND&?jFFe(<-lIlQ9!8<3@h4CLOTAkGx3N z^MU)lxX5tb>giwrzW$;uJ1%(w0wWJt3r>cC)-^z&5d551wln3l{(>IGM@|%TE7ry- z<}UDnmN-1S@d@0hC)%Tzt$w^Lvdv<VY$u|S%}R+5=_;d3#AW2XmU=;6p+m$$t;=iy zv}JY?+zS}_nkeD8^?Qus$qAqZvhQ$8i_B&1;$@*8CF9O&8RO$~u0-eKg9eMXl*a-Y z8g>h%u_tlxMY3c;4_|gKlFwgqmeB9hjwj4m<pYG-p#-fvuqoJFhTyo9Nn-@Mxvu2p z!EIH8g4+ikHfrJ<YZ`EIm=JJEvpWkOoXN?8li<6lvwRkuEWnvy`oE0Bf|Z4DvO!u3 z?lN7ET)v|4#Vs}q4)<8FHoOedZY#<q$yAvO$sIZ@_|;I6kACp?(##jm=;XC&m#IZJ zHoAjC`Ph~0Pqw?w)V(;cxKH*|BH;{>d=0$GaggMvMfwKvWj{Jgkn`LY`K;ijC;GX3 z?3dT1vOhYFa47#R$(QjR?Pp;jzHYzDhEU0uGF{8RlYHH$sHUqf|Lno=w+-ar!7tEa zKZQfUe$_wiJj!1HDK30Wi29c@)Jy7fvR^3P7RdJ-y4nr)lT!VsxKi{*cjzViWsnoo zgFQH()c&BYoJCoFWq%UrW#|KUH~F%&MZO+7SMn(n>5K9>Ml1RBKl)`i`GR|&@iGt( zNRh99KK}Vr*=#@Z^^m)f%Re1i!U~o0gqHDw-e1V4|M|Gk!G7UK|8u>ahgc}2zE~^& zy8XHQv6nu|QLTwjA-|LTv=`J3`Cev}Tho4T&y*)4qWTu&5q47kZT(;JDKGey@>PtI z!@VMpe`-TsI*h-{tm+>qZ9wwbJW5b&O#Hk-Y#?9!u|N7Blu`eQr5LLGDd(g&g2C@1 zUvQT%UEH4B{ww<#|I7a0K|ZxXQM_;ei0$0HYL_m~+uY>1jmdG!!@E`4zwX7N2dC~B z;hunC%2;~wgM76;$_R(+fVVl_GbP{SLgz!=L+bxf&|X|9hG{VYJGgP|2JO#}`jFnh z{DG|SxDTjCU6$93#sI%RK?@y5<Tm1ECpgF8rJcgcit!h9kuP59{zF>G3Vt6Go*Jik zs;(G+s0&@OEy<%js>Z#oa>a3rd@&F%7sh!=x&PyYPWLD2B8M`Pd>jxi33rl<3LM`} z?d_O{5qZ}*_|lK@n{uLkbDRdcA`M&oK~iqduCE;D$XU@t>;ZS8Cx<q>$>HU+-mc(* zT}g)PN&CZA@h2la0uZwegBY-sb7+4606+jqL_t(2>=aa-(z?hg;;Fcrd6Y@28bvC+ zh)Y!v2)ZzERY?aU30%*isYoZ?1VN(U{9n38MbXhbk1Kzw#T6BRfAB+%mq{HHB7fT9 z4J_zE&m18|E+OKSeg=gs&o6N@05s6c5Tw9LRwYhbyw0d((uUj_&`u(VclLIC$E^{N ztlJWl6>1fUoK#d!r@Xf83@G7IT}=+6D-m*rs?rDP>FH&A^Z1NRnbi}sWn0p56N~|C z8jm;|)E|H;PDgO(tKzhO9v(4gV4}OC_<*k5BbZ-!2M3?H{-D*x=_v&A`P2X0!IYQv za$IGgvyVktcjyVwcw5Rijt3~?`BiZS9pe0XKhuwYbVhcQ$1#DLzo{K7E*QJzm|tlv zqVty$oa>5?U%GVI?6`J7k8AgvHqd3o)7AA+lz{G4DB?xbvn95@Er3Kugdhr7PIp5K zvK!ZTwggi3=w{PiquZhg<L9;V?%3W6?aKVtcuGZ6EJ)rnQ8Xlkj-~!7r|edgWtk3) z&8~H-kk*-5=n%S9+}i+EPBI|pJAGYbT~r5NEufY}9s|Wg^S72^hT)75<0o-&7}qNn znFd@RQ@Q3pT|Dl5lt~GDo_?w^SUBYS{4L_jXY6I_;NviSGK}#U81#(GF+LOLPty)f z;Fvh4Kb*(l^Dq?{9}`?uoO{`VKHhTSl3ro4C7bA<v)L<aHhpDT_X6!Ok$@!;F6jm~ zFHiM?Uc<k#uxckU{)9e?uy2<=d|=L&E@)TutR{zg{W0B4#4ZB$M38(Bq$8d|EtklT zYh(tWNY}6M?0^&CN@NBEY6Y+J%W3dbWPX1xQJC7$4hUsDL0W&y{Q8tAcmyA=0Smf1 zO)K|=A2>l<@~h)-lx7~GCUpHmS@4Q`b?7JbM{uBYQle9RF|TOppEW|4QG;!i3>iLO zK{p|{>C^_;h+})6@6ux-CdJc^C3aM$lJ^Caj}?i|cQkAA=!>ghCFP(aqy>D+NDd8J zEDO(c^#-NMqQAy1KJa5C;&Bs;UmS-lEID!`tw%&FIAu!Ok16m;t>mE>8OUd0sejcP z2dR>?4j*XwQQ*qL7e~0i{ww*=u=qxfI~du~$H0|XbMbhh&kN|p&NH~@Bb|`SK{BLM zID&oQtMUO49g)kTmYrcZ3ZM*UcPjrT-1TydG_%05oN&b{*SjRS?#OpLvyBZLVZwL0 zvdtX~$QPWmw>i=yIVv@#P^VZSJ^fe`CfEw4eA0dt3%HbLH~HvW+K=6m@AYxD@|TjZ zN<K1jXtV!%$j`=B^0#8Y%EJ2#ZA^orUhv*}`Iq)DZBYJRF1h?AM?FfVl*&KqQf?XP zlj~pkm_nPN{%L=HZglndj!~GhZni(#Rcgtp0=)c1OGy1JwSSjW$fy3{1$<5NLk{xk zD^>ebzu?H36q@o$`+3O1O*$ov7Wu9#GV~9g&ZpV_I?5Ltxt}(cznI&f>_Pt)`FZR> zn-=>^`6?guboqiazE$=M>h}9Mm&?DK{hP@z?2qxs>%T5P%3pG*-H^{1?0N~FEN(4- z+7o3}+Rx%Y#(l;&x3MUH>Ow86)qdnt&wgKExDZdtF6E0+MMI3>@*NjBIc!zF#xF1b zPVyyzbMvG9d7GtyZXzGOFU$Whs$)?f+__+no>;I8a|1Rpq#e4<QFRC~4{>ll<LKlV zk6|4tv934#q=v0=&(RLM0Xd*KYGOr`V|+4vjId8m$rZ*^s-hu(-iq#)(n%m1uJH6D z`JPt!<BaFwCie-(ckVwtsG$E-H#l~EXD~aNnb?buJDbH5I|g)LNaKd!E;Q_i4-X@# ztAGU#{a^h|yj(5Gbmy`-r5)7hDQB?my@NUqgZpeh_PbsQH|8AaxDwfejVhc0*-t(A zLtu$c_g18!w*WY(&?gl@dSD`$AK#JN7tNA+1tq{ob*p)X@|okn2VLmDgR~3bCHZnx ztG#;}3Xk@RWbpWNohV=DoW_||Ij^u8`HZKo+QrLURMDdD>SQkR966Dw2vb0Lf;)qC zt*6OjA`%nt*uBiaO3i=|Exb|Qr!78<NHoBp_kZL|+4S+jWCU@DL$~0Ag-oJWwW?cM zT*{T(=M_CTH0WEzsZ?H-;3<O_I1MXT7<z9ST<E4)O@yuDXUb$-lg(za7BM*yFcnEl zh-3>~z<`77@d8E~e1}JVz6PI`{EQp07W#ruv?=GSpGYGpV16y+2V5Z6$*;tTD70K7 zQNSJPI{(l)BShS<Ine^khyiP%EAY!^THz{E#YITm@#^p*-GZMJT%e0QzmhIsu2)Wn zF5vO!Ax9z|IOI8AmC=IknVuE-DZBb@0T+oP+Itr+iLzdmpiLq*(oL{$WdE?1Kry7e z^Cn98mgLuvYspIgZg7Nk&8w(Wq{J)Z<i>r#<JC_qZ)luOKV=+rLcr?0oQC`ysqmaC z!P{tr<aqh&`~#Nha3(uErz4)hnroztNS88_Aq8PQTBD8Z7-P74JOf(b1*{xnD;_yN z=4B+~k4Vn0#`ZD|k8;c}^UAp6@uL7d{vuro$$6dNz^Why!M}nj(#gIu{~eEaQgSOw zTqAw7wXKNUPTY4}{&w2Z6R(a27eGaeR7aNW`30nimc%iZ1*{FN2B;;SEUmB<?UWge z^L1mCjdK}zH^Hb$Yt?DXv_0wEF7gKC->nj8X;+(!yDhlyKry}3^4<ZH-n$|;srz?Z z@r~Mo=XF2`P^bLJtL(~v3SLWhf(Oj6{?l5BfJ&SuUK3u)&k;O*gpT(%F$jL(IA*Iz zz`?=e9Vd(#r<Fb=C;F0YIoC~0D<Kv8n1cpSt`!eO$~ZhC?T%bIUU|66gI3;JT3%YT zMgA7%Y+-iB7UyUEEP0O4@FQJBjkBAx%lXHh)gPFO4-aZxU*+@g*d4$4FIAxUGToss zSsbt7&UI+yd?)yERN2`L6LfS3HV+|iej`)P?c`ui`R;UAr9c}GgcFVO#e;eb$2_v# z(Jmme6K%8H-3hIS*#nj1S;SS`RcxliF^w~jMiC2{jOLe)Q;w?SGhxPT(v=8Q6x<2G z#ZgIM;e>SOw4>m7PR1nXbCM1|ME*~!K@JyRTw3yN`r|vsY;1hoMn;AaP)UNuS!Ni! zkX$fGy@Vj{1s9yH;%B~2)`>R5>RB!68jhD!p>N=}zy++}S?w~PysGRnuER1M_T_>+ zaI0%UA26rkM*$cLH0wU=lVt@?U8d6|(yAK4A^0^Ck@lSSp8~BtQ;=x69Wy%sOZ<q( zKn6OnfJdZCm-!j!_ys~lgJ+e7){zVT8P*k7`QFDxmq`UtAe~`3nP6mr$d$hwcl-?V zynuJW^L%~?!fWA^pw(~1KjTJ5!M>?OWOlojM8c^hyHPoOE4Ujnx{>(<T>_hp71z}` z3Ez_Z8geaJsoD*Wux@z{FEWd08%;UpmvqE~u8J#CkE3YYy&=;EeRcmS>A@jgz`(E4 zCA^3WrR9D`+Ud9wQK;l8?s=KsGc%6IyZsb65sfj1Ym9py&pcY-N{}YR)#Jd6yqLd% z(*n;#`QjTWD*8@5$y5j)L09J+dME6rZjK*B@CgL2O0=YNUY%D-@~*@?DY+Fzu8}_4 z$yP*eC+@o~e>-j2jF;Qm(cl_T$r_}Eb?3YST0|>C!Rp|8x{lD6FN6wKMJfrc5#@J6 zX~LSZR>DY0)@CSyTEAwxt0fP1S5JTSlp*`Z^*vSsd7Ry9&2ANcJFR{<WpAe)?>et* zyvJS-{d=j~cAR8L1+OBlV|4|tBF+2?lp}trfSvKk4ixvg6+}&V6NmDO`E(GLc+Htz z^L|vY^y04Y73ntT^U`Rk+n{n5{u9~3gLH}~Tu(RAtGO&7rws;?=9*#E@g_xHHE$J8 zkj7PL?$nhxR{!N-9v-z}VNE(b`CR4~W^MY?C7YeTWb^v#lQWo!INNmHi7cnBe{|BX z+MO(?a_}dg9pB_L$0rZxvsZ?cb|<lr*`4h1*da}22@jvDkUfu`%Kr9`_`yGI&P}_a z{rC<RJ2<^{1p^#5@xsE7<&X^I`|%yRVl$h8`;o0U1W0Qh!2yR&0t7C}BdzgR41z+u z*|fmRo^R2iU=l?FY>v@LSGQkj6b&47$3#aF6uv3WYnO@%m$cKWFxWWF*;MoMbK2=V zXnS_=wDHM_3MUqcNW2lcmq3(pcZ_Syx$Xkm^`lLdV(aO4iq4SKHaq8af|mFZk1P0P zJQ5|WjJM%;5_pZUy1Z*-SCLcp*Nb;0<VNI13EU`wANmp~$MH_aZk8W3z2XJ_J9TB8 z>`AxH2Gm-9E!owa?ZT_`si(Uta3kYJ3H-p60Ij;{t+iy`jLzAep%v{W*%jV~5f+Mh z{RBTkp>_h~-!A!0HJY&&x+=jUSM1ZGu7dUy$+G=Y=vPFy!luIQojxm2QQnBWqa|=1 zi$7TR+7@WT+ZlS5i_C2ny`5(K!1CHk`Cm^Xqi#3S2b@m%6}(_l!9-KVi~KfQDx{L2 z4Xcfrla;iYq)k-dv}8o0gB(DS0AE0$zg-yJt^aj~cVJK#6)4S8sxUh9tg=(2q9;kB zR5qb>{S|tJP23a7*O`2va^en++1{JRZU4=;*!1NKcJbU<o6!fn8Y4sU;ietQIGJ(i zx+?m?q03#Jd%J&FQG8*Iqd3l)2A4GVV~%*?s1-l68D}s~Rv90=rlAGTj~&4=jX_GM zf0Dv6T%tn*e6VqbHE4Wz5ISZWIK<uAtX<dyoZ&8CvhdNe%bR0Fs!+xOwxtEbIm}LJ zwBo{_hs+1hI}T{qI%g&W5-`MxO@|;81$Xv2pR=JTZy55gfd^R#KC#ITXaA6dz__WG zb%xCH;-Z|+W43GeZm)pNoX#$<gEs#zfpT&8Z1Ps|o$*x>^{i4?#O<tKcx_9#Rz?MV z5p~t->0b4{TDm%as(HJ3)p_4Y-zb3_CGdk?0^M!{-Qd^5+O5jkD*jdJ%%E8aY8gXY z61{WpM&|G$vxv4Z2i_^K6D$Zf$_tzu*Bd4916cwz?xK%2ZK!3`l1;pgVwvcwXvMci zS4(ylyaAGDb;xgmh!Hv#i081=s>0~J==1!pKOsU09xX%_(XQlWM#0L#Tcs~~-H2~v z3DhfQ8(DW_g~*Qef1P#d#J-~*-4wq8zors+ua$r3)2$7V-z~2yh|DCPL|cK&NbrfP z=P6Oq<c!FVE2FLt;ZmYSj~ad{tBO}l^211FRPr)Xpv2X|Es2U-z5!I1BBLIK0U>Fe zZ$Syv@>}3Vw9M}W%lS>7fmD=EfJ$CH#@Rr-qWdJ}G`?fEO-xSN`N>JU`1Wb{dHRlG zc!47&{M>o%JZ5LHYv4XnecTTRv34l)kw^bfqVhR5!=2S~2;-<uKGbyF2E1@^a|ZN) z&VptOwL76jlg^%IhjVfu`|fGU=X`AR^`km;ZZ$fw>lr<e-Q<T;I&CcGCQiJ{E6W8x zFAn5RfjlqQT+WV{<2Z&rQy1`X8hgl>+zuQBkJ!&FOmtR=Yl^R_&{Q5?0OS*w)|rh8 z5)ZrJ_}MvEg)^lI%lS-|shvA)Qhy@J{5|`|4<(R_sw#_GvVylo>WGof*GRU}T?62H z@a$C`np|Bzu&suYCgO1|d3A!d<rhdrv_!k=_;&NVYDI1k-Y9_^C2*qzuCfH`V|Ja* zX8Cpe&C-mU+sgAQ88SzTF+8rD>E0>7jkXQYl;iZZ{93Y;h)!f(@or??D1jfG5}@^` z(ZFNPWSa@yv%2ThnRLXg0c%OIU~f{ar7}m52ptA8r{5qy5w=T7@aAvg6O546L0A*L zd#qsL(Sl78?M`3h6s#P&Rr-R}jp$ZNpkDA>q1{GYS3^JVcD;8hj(1z9Z7k;ZJgfIY z`G*dj>Ycngyc4XN01CM!za>$tjxw)|SIjbgOWp>sDhmSXUC?<nf!htrba8S2pEJ-; z(6mMab%SdV=F*E~8wD8&r$VVB1#%}?WV@5HUQ31QC2biGdai<(S$r3dqc`>*xW$Hs zhwa>n<8pegY3DEpS0qfF!Z?=sH1PnAXzeQYV>#qZ#)0g+p5<`HY3xU52u{EOOyHx7 z?u_Q6iwfzy=EQqlIPqa$%&VN!!sCdJ*dgs76x0@Ocyc~8n}m_)=S0iV?H@LjL)y=* zMlN=7e21>hBRG(bT$N#*1zkF%X-KjAxV|&mRWHlFh%?o}RCi2gcw|d{5tI-TDmZ?X znVi$eXQy*DaZxlmp3{!(Wqme&O&=TFr6V`Sc1*bQxnRC&G@HID-VZH8Sr=t|s|IJ< zs`|D-e=TBr7IT#q4cS&hSDGTDh^EFbAuX`23f&_9R%G>pOC9!thnic#-J)4H&~KE$ zjS~1FEP<=NM{I>|E4XD5Gw#)CV=OEu;w4QlaVCGkhiert;2rr?h)tS0UZAwWyJgf7 zb9#&DUAWu;-zb3}fD)jw*E@Qpb}h4(tk5=$h^W3*O!$lgJ<Y3okl7KXBd}1k$S<N9 z0SKXM!BpdxV_-~#o{S3Q+O=R)L|u*Un$&pYWDC7uTcz*J^#-)6_;<4?>XlpQLe_h& zt~XG((ELVpD<!a%I__5fz4GWrznQ+#7JHEsxFt`AW#KKi5Wyl{r)%C<K<bX?{aA{% z&=(1!<hJRaGOAAIBn8aVr4eO3@SJm*v3cA{;|Jqwp<*34p5KZ`77(1e+8?aAAaeS8 zDUeYyQCtZx%k1z4;(!uI@iOT+j#tH6B8XU)-*a;3UUv?^eex|ibai}&9J}zw3G7F0 zNI!XXlk-{n;Twe(r!ZGOXoy^Q2K&bal@P#bg^LrKk0Zi&)osNV{mD^`Gu6+RhL`dh z`cNTu_BG`E_752jI&Iq3ob?fVpR72KKIe<Wd39yQ&!EQ3i-xTZXwkScnJd~7&_0LA zi*#H|hjcoZIdUW>(>I^G3*fL|oE*$hfP;@21lkMoQm08c4PV7!momM86aK0SZfSYm zc23Fp%z4kj8dh5f9ZcQ=^$#y<y*TUXA7sm^^UdsucCi&ZyV1~b>!AavLfI&<Ldua| zalz{qw=UyG`bG)dD1jR#aJ@=kv$1$1xt(Y`!MgF-3T`(Z-QbM3J@elZvKVhNn3vgC z8!zeV@>=rh1+Y=(MtOBUH_|ss;0LAzXxK$>uO-8bF5sNKac*xs5>`8>c1ZB6`gS+< zAtflkGndZLM3jDmMP?&L1>|ZMZ>0d@Vp(wY+`^<fcE@y`z9Z5NV9zDcbNRmu1s@`N z*0E=+Zy>%`N+9aE)Te8GcS06n7jQY+JI;U{S8Sy0%D+^CxDav3;q$`P8NuoGgWO(u zRk)#S5LOw%JrI;G^U8Qe4a{H_9Jn%kuV>#}3HLnxR5ZeK))fHaCPEQ~v?Y+Yl~CSN z5?y-pXLBCzg_K%y?#fx(SX-8pR8H5$IXgHpY>RSG&e^EVEvvQ$h8)j%a^FIzHo;D= zFWG`Ba#{K8`n{%*4QDs>#N;lso7U{iiDTBUG+FK>mR!zW#xL5Z-O=o7#!1e{2Kie- z0m@ti=)>_C=n6gOLCdRLIgs(U;z(wPv+rUSue8g0-3I%0q=%f>6*Dmf7e4(Q+ac#P z4(#=H?YI`-C=zA6;~JUHS2P4PXe}LtD+4F6U*X&##2L^?cB4z2pcSlq7Lpvxf+=7B zT{*~55=f=20}$+3>6wF~4iT{*&!N0E#r+G6!k?d;Q{{}=<kVzxV0Y0QNu7eLP|N59 ztD(3~b=VI>y0pEFceAY*oNl!5G(1{XFLJlojGSdRnojT*SWBW+J8n!7Kx?LQzlhA* zwT@fMZcC;isSSMn0i{7%S_jZI>!I=QT?yC{qTR02xX36p3s6E!znj$!SV32?x)I%m z5-9s$Cw66ZcFOM+wpktb%IB)^(v5g?(#?$BEI)U`&CoViWNR4AQ@nq4=p@^sOU0xq zfLH}qyq@0Bf<SJvYenw{Z^dd!bt7?jhs+M3p7?beh&JN4QJxE>eQt`>qTW>|-Vq_~ zy7k)s+9|gNdDm`&Wlz|e%3H#Ir|hGdlqQvNS2&I4E%%N#oXsqgkXpOIyc(!8lbU|D zWY)0Ngce410_oo3V<__5%_5V~o|EA1zmBON7QI#I$<PXW(@4SDaeLQpQ`R>SdMJUe z<zLU}f!FmyDOI`AKCV|Ozjydn^<71_GHNyLD9CNRf8B1G81(5%z|&BcT2y;H@nLuB z+`@uQul3t(W5`EO=wsXs-&s@Y=5tD?cY>rz+&`M|#I2H(8@=O^Rqq6K!kCn`!8g!N zxGlCoOQ^{TmXV#1Hu;5j9i;+9q$#Mp-2~a1j`AH@U9gG1RU7Toj^5Q}o1edAqhq^m z@zN!0=mUDYr}o<A<sn<_AI7gLr>PvZI{sqk>b%{%cT$e(H9K;C)@J+VgdQGo)}3Uf zjF4QrhPoNd+0c_a_t?_Xl3hA`!p6qN<PVi|T#VDX%JR6X4ROvhr0jwwj*}PJ>|*v~ zF|>mjhqjj#JE-L>W~Vbee8)5Lva&dz;o)v)<>PSnKji~wH#YKpXS8Ini<%wMOj29| z4r~1<jx*f-#k#U{n|O-@8X<(Z)*A%yY8P~^aDY1<@TlK>^)sIxo}TcuA&3N+^zqI{ z!G)Z}P8srGhe+6>JYi*d(a%KLy?3uWrybbCkMjUe5grKCLx7T$dhQQy`iIS)cd{nD zP3R{#y*AO&X6hLMSHIgdlqjhS^CY$Ek!fHlxRm(ByQMdSlaD;w2hy&$GYmPDBXTv4 zwFUu!cPp<JIEXnE(T=n{1gq>Tk%PfDU!(pw$0>q~?NN3@>kS#KBri$2-t`yu{IFhW zC#kh?-)Yw0^|Uv>jX+(#BlTAeWOT%L#zvmDds}5z-O`b-zGPEfb)m;b{WS{v0za-@ zD7OYq9Z)pL(}i^UAyNegE7g<iK(46UBlRMzNEE5!H8O{H$m{^BQ6`?WlwS1jg<qS1 z7C@Tw`M6fpUkl2%CqgESuib);)MF0IA5xgizY~Flf;Ue!oEB%_^$;#WY(nw5`a5J_ ztP_0EUhf>&$wp_}wW*NNy|-+f3+EaJ3nQ<<oYjsYNDiS>NAZbojeAh~l`>@bM4oS& zO3@}x=HKE>Xyz)G5ggW0i3-~>^%HY6s;*=E+?Y+puRYRESZW7;J4QQ~8<6fL5aqdP zIcCJb500DB1^#Au!S7nHArC&puSM>)&|a$@z0hB)eZ9zdPvMl6TT`r4)>i6ow6SKB z0}Wf4Ul8X+>Ayah3KCc37V#B17FTCx?3O)y?abn`U0T<!QiZB+La~}MRlZ}VAJz{Q zS{<RDF6f%VG9Te)6`NRsaT-CzKXM$N5@lXpoTvFAWW<2g?<Ikjkh}c$gp_C#s!MBO zwk}8N3XbQs1-nZR5B6&_>*Wh?>+ifBJ$X`fId8AO_NqPq!t-|G#0mTK!w=gnciwF` z-F~;t&P?0H_=Js&j@iN8+5{_y^^!Kl-nVbUPF|d~x3A3EvdU{syMr5YQV$Fcxf2%! zswoPEoD;5NVN((H4;1b@aI+lZv$nc4??-4br|Z|wXKz>HF@V!pSJLUojkFWmcPnci zO_7t&@f&iQ%GW9%ljaqCR1h4T)cnB*r*(Dgh9&{5qe2c1qfgFeKL$j2(C|S*KOTg2 zp39emntzfPb6n>0*o6ER2Q&pz2BySu9&|L6I8r0<D7SDHbNog#zv)B<2Z>x<vPYs} zGeJ#GFX$cD^Yx?I2vJXp-giF>0Z%=TP`EBEF4&&kyHlaSzlRX|u856x(%Xs-&|VZT z&f$){V1sOmD`^6hq62ECF~;`FU|zRKa0hq%@yV1bVKcmr#Mb~sqL)2o)-hn6V|C2! z1qij58}>;|o1`{CFI;=TkvP2-;B`-HD;LIyWCEQUf8rHtbSjEwUc{R6z5W5Kb1^}V zP((K`LFrP4NcuGr6+&ulYYlqDsw`X8YZS|}hf<a{1wK*ibU1lLTYjY_onLJ<)pPy@ zQGZ<Y!i5F`{`IRoHR!BsFmqms8yvSYQ2vx1{cTl!Z$*W=q|UgawAW46E9|W53!<DC z`Xt+v9f8la(p-@NHH;y3)&Vt^K|P!sP@FE?>A_R*z1Az`N4@dK5kb1`sB8!9;+$;N z8#3sJIRvg@Bf9Sym!48^c5T*H8q1C_XhSyA7_}8Wef1j51~RU2<IwF>Of~+h{;19C zS%0o{{&728`LL$U&Gq0F(>cEtyIBqa&t{4dv6SkKQ*hY&HT6EVP49OrdRn}y`-HwR zpmgMwT*Gl(!n(y%?<;dP5zxOu>P_u~IQ2)Rx8s&{*BH+YuAzyS8kLOIXDl=UYpAWZ z4000Vr5+7bh2L8Kk%|dvYI#ltp|YvEbxl;(HSucbEV4CT`|8V653kqFZ3!uxV+MvO z^q(j48e}xKs5bR_93L&FvtbTA<Bxd@wM(Gnu>w?#PdI|*!QV&O3<p1fwd(-8c=b$m z>GmO{i+#ChAm4frG4$N;V4qH;OIrJwhQb*K=DczTe)$*q0gE*FOdP9p#V6Hoj6I-i z6ySSpAq!By<Lo`tRSi_*8}*kf#swt2XnjqYz&mT<_2-C1zUpjU{Z9>4^{o;mUdPFh z?YJ<B_XWaQTKKG}4=yij0jjIdZ=--wQKmS4FM@@i>ZoZOF(&(i>VGT__{#YJAFGiJ z797_lg#PM#eY$5czSuIav}&|ehiR*?z~59EH?S2;oq!MK=sncb|FjsAk-|~Ib?JYt z46Y)Tnq3+bxJ7Fov$m{uNz=@EC0ESz8qqbfqlO|KSLSLd2t$OV7*ZO8s#(op)`|PX zmyC?M(FGha$(M~Vt2|_)GrO)>C#~pbN%e+#Y4=p1rkVs7n#}?_Xepl2lJaoqS3M1C zoEqRyVD=A!<>Oh&G?A2$)_7MXO2Rr4%I81lM!d8~v?Vz>%CACOUYRK@&sW{i7OVDH zC#tw@Yvl3AAGc3``qSIWvlBC{$!4|{RXd;)hwiYJ(#(k#Sa;HG%3-V)D-2YGakI4n zAjU`CmSzF8dr1AdHD5epJa&2SOdG+LUhQkuw{t4hP5N!ccz5jcKJb}q>jU+g=xkkT z6*%lDP@j9M08)EtUMZ70jP#1`|MPRRHa<FPx9`+(3)4$>Sx)FumN&srrp)kyjtozv z=Bj8#lkp?XZKh=5a7c5cN+)*yODlJpT4t53B8e!HaV=Q2>6HZ}lv1&hDB>{e5bEG+ zxNXA~rvFzxt!UnL`8<_kAHVk|8<msb<Xgw=@}<i<+E>oxrDYqFgZbj6w`^o&L=NXU zJACM{mKAIEz`gIcT|+yv1A0_*xMln1lh4@9Y`^W?eZYR?gZpgP&S9ILmcw{$$!0Gv z*u3c0heoV#Y|>UW7wgl!Y|~H}rm2Qa?c8l|pE&9t{bL7ntW9tl)0UV+`mr1;0FJ#- zW6YIJyOhsT^CNa7ujTyYJWh4%M|a>*mQvnMDMbAd_j|SS@M$0mBzIaX59hOgoRGPm zF#UsuBK3UD16g|^2UC34wPG>L-q3z`LZ?+$XS^t!qR~{*$b%A~T7Al^Fg$}oO+f`j zL}_;}$uJD>L%yzLtiwam6)h;4Oi%8d@<L7Y-G39c*%eKuUf08^rxzRc%97d1rG`zf z_Su3EaEe7hbxob64>70-VbHogIJ$2C+f56$i^Y-Po|AvlMKDEpYT!Gtlz{&->nWCx zf?uDY37uwc@=N(2?N7~tpU|=r8?{jZ6!Bs%0WI-70OjI<9(<~YMz1x7EvS5#S7d7x zSquHOC;C<Y<La}M!}=TPvtgWza&Ta?m$yWO=t%b})w@_x0LixG99_`UifJA0b75Zh zhDGWzm4(-J7Xhgqc+q#pD2U;P-iwVnyD)g#PLCY53nQm&y8ogr_0798a?PF4LITlg zy#_Ksmkk50pta4>Y6s+S9$Fu<$<-;_v$EfAUA)t7Ub)34Y=^kzcD*6rjWa`4%98l> z{F)s)yJpWHS3f*scKXtq&8YLyZWtV^paFoz&RTexow~}cA{2wmP-U|&^IGw;p*^gt zee~J*NW=E+XxKgb8}`vV%szNazwMc%Uv5x0m4x0RsrFQV>+^PD{j8m_V|Jl&)-Eod zv(FCyq}@GqpZ$x!T(cKX(JvD=W#aurS8N#4nErqKN}t`aYsvod;-A{F#u0slV8tHj z`>_4^`cK=5w@z#DmOEMw1i#5>(Y=4)ls&!jO*_?h+71leY6sSCw|#vFZLBe|4Yk*9 zJLO9`qbrL>ZdiV{Q#)#ccwH!pf&5VD8wJP92trMLFpn=PtR?-es7*8-NgFZiJum8S zc74uH>ffQpVSB6ZlwGv*Hn+YYC-kyz*c!l52orSi=g0Ye1T2I70f(nD0NyM>^?1kW zFfp|~UXdEG(Z+~P>EBIjH`zUFciZia+ia?_J^inx1kfGXvokiJ3Cz%;S8eF6H?3b! z`}_4&y|K6`-P29bQL!mcs4G6Me54XT%EALi@d}nM>%_gRR9CuBua1n_>Mp&;cGGP( zclUj^bo)KFHl>MnBFxvVT|#V7rAd<6lFn>fym-=<&L6S0=@Ygz^R@<T*{4Y$ughsx zlqPL%Bv0;DKY8&-J<+#VNVtPeY2uu%<~sn~8zkEZUKYZaLw&t}%xq+rtxw!+Ydi0@ z{;AuoZ&Y>YsQTerD4aQzAZOX_2mJUOR5RM4d*CkJ1E+=?HmWghNS#vMu@V=2f+o_N zU+G(gqKeWYcu=^kzQ_4@(~CO#OvOk)jL@r`CPh$|*Ce-pZN`RIkK5S#>o&4}%!by~ zKG){dHuaFiXJsW#nxR#N>pF=~2r5iTV^4kT(1T?;oL70k*SE_S8n@V7<NdZcaJQ}Y z@63XNSt)nxaoQ(;Gc#B0&BNcfmtXpx9e(3AJ9p-k7A-Tjs8?`lXRfkDB9%!y?GKo1 z!B4h{xiC<ND@L5xCNpM&s8I|J4e1rq3EQ)0zuj@?-S)u;KWg{hd%qS*dwpDT=a^$( z<B#_zb+6eu8$NN$Mh_jak+)9S;Dw7epj|`_E#_J#*@)A4)92;VgKQsP(k`9~oBpZ$ z;OgjztxQeX;=uzpd(WM=c*kwFI+e!IqJS#0tBGJ9WxYD9FVCOQ!^uN>$b3TE1TLz6 z^l*87N#h7O=&9fr+9TBjoDNFdLyGvXms_G)&%1bl(^j0J`gTKen7%2^;BHp@ZaHjk z(*w&X>RKU@rg*2{oR4lU&v5{zyJ)}=M|@h&^ux2O_QLd<y)oagvrB6>t-1Xoi%9IL zrjhg|wb5*^CvuytB!TbpldNQ37NiRthD1Lmo_mKh_ZiXJYNBE9pX|5Ynq<Hla^!3p zT+U`#LXsT~Jy_;^Pc|r|5e}Wwy{~h5CJp?zP^eX;QmufbjF%62EZ%i1LKF|V@;zrW zjjuM}%dV3?SIe-4PEHQ-9#PvI)f$YspszV4)Xi<d?Xmu9G*wdN#acj11fT!SE3!yA z>d)(=LfobZ^`o}IT*x1Y=vW1By|fSilbm|FI!*8LoxJ3MKS2L^^s*wSi`(Wt0wHxO z(B4J0V|K6)8OeDX_tP5L7VU$&MeTRezEbtFj7#`N@l9yTY!yq#z&*g{qh%qe4TGQZ z(v>-~S~fQo{aw<Ku-n)TeapCZ%+9aa<yA(h-2R}|pUZS5^rJ)t>!?Wv){*MzlD5qA zc$#Ch*jnP$Xj|_yWoCysd=y$}>bx^f!tDIpg3^-cfS>c(`8=>NZF>h*{;G$IZ=bi- ziBUUq=A6Cp#v3-J`NQIZ=A9~J)(3kI9<;s7n%CUAX5+Ul*;|X>xBg3GHgND(&96r7 zFaG*(>^Fb!Q7wTcY;xD#_MN--*@O2E*uj0{wsY4myKwfb9Xoo|dEIg6op$S8_uBl* zf-PuGzp68%*}&qJ87g<MgK-cC^cAhy)L@(!n@p%1b|bU7fH@;;7|5AVvPq53h?AH& z?Q&Hc18@@47CFP2zTeQzFs<j=(VRBB!P{xbr!DJ04rC$&EJSF3DjVeSH=w!L3QqPs zPNHwx=pa7A^K+-gds&+;+ySj2)kC%0Ij7@-VI9gra&vRkMQTug>L|tB#2F+UpGc9X zWZ;oaJOyzp<8W8n=Q7~&PYDe43|)BIFflQvWJMUv+OC1|oF<NcbfwRpSm?9!av-A6 zx(s&~fmEk<c(Vkk114dg7+bczx-qSak5`OzOwQ)S01Dt<fm9;9z*H$i1K43UzocDf zEM_~FZe5Aq(k!G^|8mSrUQ=Z!b~9>aRYOTaIs&N!LTc10mNch4sDBwN+cY6jBUn^_ zo|RKkCX&I=HUv4I2iNVujy~Hx-tW6wd*SR&M$+r$5eiWk@WGB0sz^&(XVBZ;iGI6P zi}3SmM{mh-dQr~kt=bpd<C=vypEHAR+G~^FwNqn<ZN7iT+Y>vVqceN;xuU5yD%vs$ z<4);zflf{vowXUeJaoa1uOGIT$G&H`E!|}wn)#^Ry?U>3@*+pEE-akSMn9p>OK&aP zm!CI#=BU}lSwYn&G_IvS?Mj0wDOEc~qW*j!0G_1)CPX@=^h-wOk*_n$>g#&obo_F^ zJ#%c$zWTztJ#@#Keg2_UdssJz*dbW4xXK8(=u@l5?Df89?Nt9!TTrPo;Oq7x=f<)I z?S`B-4V%##oQEZq>N$eRJn-@!CNtQ9yDYj@?S!9|Lk4I1s>VDB*ZHcgcr*45XdyE) zJY*+U-n5H-XY7r}i*}%KyWP9|pxxGgkLz%iCbg0ATy#t~onfs!`k7FoOta&7>9-L9 zz&JW!R8P<e?0E%`Iz1?Sbb(Q3IFFr6y1~tAQJfrLFx{STc=d=q-v5NX-v5TpG*sr& znR|{uVMYhkKwK#@$605)S*X$}A29GT&vEqtv@vbx`p(-MYlrNq^{4Hg^}Fri<xkjs zeIHP<sjk7>rZ8~$H5-5I8#eO#OV%$(m<KOk#R?l+WCD*mq6|ov1FF-Dq9URdR|yx< zKYiIW1GCZZzig9FJ!<p!+;5jZ^*LL(??KUNjA=!88h#MhYe2;-r!{sSd)(~&D{`p6 ztp{w{Ije^_z9U8VU!O047z4kU`}isae4?f_EjxX0LJ_xH4_)et2u{0T{7^$l6Tt;7 z7A_6g@~J6X*?GU5?Vqxto9<U$a|{*7mJnvw*@Hx0<U5fPJ9H1cL-)Xa^4Re3wI$z? zw&SOrD-LdLO|&T;X}512C-j=VJ*S6<8j@;SCI#AA^rYCx(rdPB?Gc+;f7u4t)jlb@ zXqU8xXlu@mQbSOOE1<&p<#@n41Vs1?uj?mlV(kSvJO0{c*FRvFRz7QULmv@o_xkI= zt|KVssjt2Ky#4vt|HPhu_9^YMx!}0uxoU1(NAgx+nA-|XsVI)BW$2-SV3#glu+t~s zvX@?X+8+6<ui672ddPnI=Ra=`ee7Y~k7VCf)>oxMF5BV5Z`#hsp0bJ8582@KjQFZI z`C>!}z1mkX?J=?-2N<&6zF-q?9I>6+g*121-FD&AAG7)U->(k6J@!#Vi-#6%>2d8` z|Gp+J(_$^&$*kNLeY}V`#VV>OTakFwZx+~=3$41aH6_*~0Krz<AS(0hygn*)NQ=v- z^j61RT5LYtu;Kf44ka`pLug$?Vpn7*0KZJb5cl%MCHu3ptM;sHyToQ0Esl|&W-LWN zfXGR5B&WipWSjD`Z7_+bGbE7#Oa(70c~Wz==ciZguO$CNlk4{H?OU;r?a?`!D$`O5 zqAFe_wi5J;^pNJ%gL>~6p6Me?jQ8*alI~rut%M*at>d^Wr2H1)t{8Qub)8RU!56A< z{gR^2!#9m-9ycI7%6ozJk<JNiB7*$h4{|r?;b))i8Xd3+JtP>AW1(9}_0&Ee=!V}5 z90$jYUM0M+pua`lH0&<F7k+h|b$xt{_A#uR!Wq4Sf8xj+cKY-gyL|Do98%g0#9JLj zBVcZ^CY=gUon<pERec9wY9tQFF*7_oY!iBbw*SChyXE$~?BE@DX>b{|1@5nM_#_`g zlg+inu#Y}4to8a2qkUU0o2sL3nX>A-uxO4+iD9ZU#_v3`a4*!KJNs6y$o+It_YeJP z-8iBROCzI~ZFK!Z;`FfE*iCj|SabjBi*~u8%^Q8g;*W${ThF?)L~hDYc7#rGb!CMV zX__EodxU^{+7oFE^LtByM}E$36I#JRDrAw25OU(`@SLb%M0yO4x&?gL_N^@1{)UdR z(1xRxr8#%PUb=kQzWK;s+N-a=Vmq}9eed2qdQkrno1R;+BRg)fr-!EO+=CC;{MZZH z@bR(@%?#SyYh$*kBU3(e(@i!xK4xPJ$E@-8VY_{1mmRzK0c|pvu#ew5WuO1mpYvl` zjvP5+L+a}{3!gVo$5fJf)@pioZ5J3ra6}ViPiayaXX!FNwbN$aKCL%OwXI1TV7Nas zu5b^EjWcO8Le#g~peo$kqOJpS*7^NPacBpJ<OJvbrLo8z+1e$|8lT<Hv=QgcJkCQN z&jp8O(8qtxU8D<d@%ix{!ed^E-cZrz(F=z-{*OU9D%}B{`S}IJvU%e$#!tIZDDf*i z(Gk3H=eVaGssa(LnvPWYbX17^zi`q`8lan<@u0=44(|BmWJ1n-J6$rFJtBwUztPtC z!!xN8V%vH!2)s@_z)97Va(Ad;J}U<_uNHEQ08b6Pq$@mN!c_$})TnS|<nK}XB9{je zJH`goutl#G)^^-n`lQpy5Kp0LPSQ9VglZev)-f-D&_=u{m<kk;z*CyC(7eQkv?1)$ zymm^_vryt1!;Ya<yKB#&jcZUQY{U_@qN9NbE_SS_6S!jmm~>*|6snap8}a6Apa(Q! zOln8Up>r#CMicdliJ}Cj&rG`Vs%0D*deNTS|4pqiPPy*uJnpYT#Dj=*#4Dr@krJ=u z5%J7McNiR=bj;PpihY0RWqW(~Ih(zB#U5P#nCg^X-iy2rDrC^NzQ1I@@x-7VJ<F@` z^nUef^`8_{n@w@)Mkn`xOwtMDH$u<LH%8?ptunpx5`}m>GE8`qCmwoJ0j|?}<KbIx ztlQy>L-rreF4-?Wq}O2Rr-=~+R}~JgykgIfK4#~a&ZJjzb(fIu*p~GaW^GV|xYE3~ z6Gx4Ng&~YIXECkvBoJJl66z0wE-YQJwGllr)W89pSGIYj8t3Tz{F2>1b%(9YtZ9dm zUghpzwKw};v&&;|+uZE5eW3p%8h>P;mrO|8`jzMKQ==?4RGQRZ+>Gd0IW%Jd(Up7# z!+AMdj(*b`=U)|2j=;SS*!pchW{uIkN;09}tO62u>==;)o*g$=v;biz%yx{Q&#k;* zUmyP~JGFGu>#uo#$hJs5>?R~lQ=1E|Q%<^1WQvwc<Trs(20!AIfySu5S$jbb5l)Yu zvCqw2womna(r?_?T7U2!eC{cm`udk_@YHd)#TQL(K-Ps$fQ?D5svCM&Vsb(V99OrM zuG&4#O52@I;5${~$pj0Kc6*M$^t26~dCSgU`6ZkE#80S=XpG67FpJNGy<aXIdDfN> zebv@4y`kcqSAX-vX_8G@RX0z%(PpCE#JwWzaz@qE##4SO58{kk-Y!s(afk_;#%b>F ziAS0Z_4QBN$kKTmS$IniDSz5V?tC~ox4rB-+Y`k^Za4e)X?Ng#yLIo;PC-IR<A8VQ zhcRI1NWWfJ)I+x`D|*X=s_U*z_ncB;Jz!pV+z#~pfekMoPqS8UbCk32XoP<C!q0>e zk8AKFtx%PBJ)N?f{Bk-0H1VFc$(8dqJbK8^&41peM}A7In(Z^Nw|afzv2WV%e&N^c z_|YTYUi==IRqM#BG;1TglDNXFBHpFFRp<LE=N3No#JB9&u_N}k|IV-3=YIB=G;h2{ z`&2h$&*|ak*Z$guPNq4GZy51$EgO=@&r;oOi&NKmjOv?PwTTyBwqfmLI(vEArXT*8 z-vhlpT&+N{pL=fJ*1p!T#ZyZvQyQbjGdXi&;|XIl|1i_n1juqU{doW2zM0A*mq?`z zX*#}-F~UhjMM^MF6W5vpfSxF<zO-bGvm-WtW!^?V#fOflKV3En^)6AOKX!V-e(TJD z9h;UM@p7HCQ1?Zl2vZl#8OQ<#mdoYGDGHX1qzUZycs4)!<A0>NEx3*8s=a{r#D#S` zx;SkAzK&V^nVW~(=4j4WcoCdcB)VO-+ib^(c4*0Au%>aFv0N`%C+t#v6q9YffLDBa z`ifn6`)xaY>V#d?gPdjUP^3;+l#fkJ*iAZ@bKijj+L^XXZyRVKult<uCZ({8fG?5Y zJHg}toEjOm%X%|leSnWyr7=BWymx>5v~&En$w4`vb(9YaS%q}(Yqd4CbBYmo%5#{a z^pUF#@Ida)(LS4y2X$g@$&RbNuH}b>J+*@kgs<tlQai>6^}77D{pN4}Tl<SY`-(eh zXLUX=$0Ye1Drz_0?t_nnhP?smdd2=)yC99TW<YIcL`N{}*}LC<{HK1#{@#D`kL}>? zci4q#y*)CRK4#XHZ;u&n-`EeYef46XrPW)T58ZXdZAiN;7p8HKtJ<oMfNGoTtTET* z@LWD=ee*AC=k1Fc)3l3KZ|-Q7D4&)dVrawB;L20hw{S?uD}2J1=5Mvz&b?-ndPDN; zu7_-HbieL5iFY1Zn_7pFn{@!!t4ZdHcA>!rnUF%JtCL6JGPMZQihF@vM62w!2uOrB zMhV>Vn{k7rC2zxo>O}l^^{?11V?%akM(gDxN9_E$)3$5(9y@gCkbU%{AF~G@c)<SR z>tEFzaLhjS@TYC39(3*38$quw9JCJ(-)j#H{iGdv^HrOB>$^6-XO|7gsl0plt@hFJ zKD(z+Z(nMs#=`U^yLjfZUcP+A&K$Yjb{_nI9NO<wk;@UQxyps}Z`-Jj_ZZgtcfZbz zUe%_m%h>LIjP91<|D2qhvT1GTVFL_fk6%UV_ZF?c{Qg5ZC@*$KGsjzz1K4*-voo4G zpX4?0D^MtoPWwuZVvhPsa~n2d;Xu~9PBdxlpZKzAXEm><p!c_-g_9o0$&Vqv=*PV@ zIiPi{o*d@b?+)nlwukSdtbA1R<1ch24~KLw0iJ28DH_GG&C^cr)9%DZ1x=p+IfM?I z0KCG>t9iVThyn3<4f62elKAR|{KS+fQ6uewhS+Z)V;8^_6~mQ!|@2IgFi$|E61E zN@taHA>AyBW>;srwWNZ0Xlm8&ACj{tI|+TFtx?U-+7%&Ofr0Py3gxBOB_*Fpvhv91 zMt4P%WgR2lqVrZ0?0jZ1h?~ikFBnKnGnDZrw0jKvUTB0<l~=~c5k57la*(|ouK-4{ zs$aV+kaETcvh!JsUgT^Pye@>rE5n!O7VW8H7wzfem+kfQ^LBPdUl5hkiW~lJ@!F#s z@x6OT?c=vi*(Yz`Wm6iE+`%SIs|7>{VGPXd1ifePfOdJWh-cF_@*)&b2SvKXp*Nf! zJYvu6`-XOboYCYpIii9`vo!*t7X_CnMc}D?{R;D{(!nk90ynPU63=`+&W{F19Ut-J zu5a7Kg-N?-^}b3f*jowo&lmK%>i_%XpdEi(6Gh!<y$7PF+K3M<+`U=?dbfsn-8fnr z6x5?nCJOQt6@9@X_e8<yd+=46Us|%?`tFd9;#jp$zt4M4tH2&p49q82kJ|T!zpdk0 z&T3aK2k++~<!Fyo2Y)!1-2p9xq-P+ed^Q<I-BE6<Di=-#zO;J9X62Y1)T=V{nh3M_ z<@ljho#%5&JHPJObBEnLa8P=j)XoNN+fe?6we$Ak_)|7IKVf&+y-h(|j-i8I`;qe* z{d%5gBL}0oL7sWm8h`W8t#R&ojfaeNjF4*iJKtyPKlV?pam%N&-BrnLpk=xr&~$d_ zN!Mka1;8t<R~x85b{>Cq?9c7g;u+l^;-N_57_4ccnB$eJD`S0?R|uzkVysWdnWRJ( zj#st!Rd^~h=hH;VJhyh%zA^r&?U>(TAJo5IN~TbwHL5YV|BY8|>Z^Zf{ijd(Lku;{ zq?ljD9r@COdeP|T*JXXdnfq?Pj^-eHO$%nuiEb?6l+Z*($7*<73p33yY(<kIm=4Tb z*4Lu72-oDKA^zF4q?2sMMjkKspFLxH9{E$f_O{a&KKPJGuhL4{H*@Z=Er0(jwsh_l zITsduXmNJV61&o5E45!)>6Iy!q?{iYLKGPPv01tk)I7YL{JtVM?1=j!QgXxjobY6; z^8EES9uln|vYjfg>5)krKB%27J=)h^3hTCW2<P*FJD+=GgZkGkpu@1r=;lc|bTp>V z;$3N1ytDi|o(gYd>3Q3~{+l*Dcg)*Pvrk0pX(LL!0p~iZ6i^)`U6ctq{i`i>;uo;g zUWQiZwA1`|Y;9?W%?*DNMr~Yr0pPTF`K4#=3;*B$Z6}T&@yWUOico7Kw&2w8_y`c8 z*0UVe{82xHPCr3TB&C!m7H2gUeCdn7Z9Dhuv5$WIGaJr%ntVIN)DMQW^Z3A@eZz*d zQ;@H*t0UA9>*-qdwI&OBE=dLsoIPjzzwtM=x?|GjKXl*KOVAj$@Wzs@{F!#Go|eN< zeVVr5|9pXySyL?t*EL^qB#jsTHVZfuz7YIAA-#Q$z&Pwwy1;;X^Lkd}4%?tnoCP3b z*21}Y8+l~Z7I!S$@CWsZUXKA4oHZgPi+kV;7nbcePW9V~X}vBcJ$!$#ZnBJXv?EZl zHv;3SlLPZi{a_aX=9wtr=r=`_nejo#7RQGs{kf_7;XZU$y8Qmyh>qe|v5)U%r+4>I z&#T127^d3!yhFQnm$ieHU0R_k9Kl6h0;r7XON;Y%M9zq(pZtzJ^YnM^=;1?hLhCp# zozu#z+a9#I8yp(eZn>Ry;NUIx;g39MpZL_L?SThBVpF^Jh?(jMTO=&AcQV$Xgmr!A zV@eK=E9~Oc{j+X^BVE%E9Ji0F+zNK9oX>l72BP2pvTkJ@P^wiOETAK==2vDk-&oe$ zt5dqC>H}QNCMjfvI-LVI`6+2wWA5cVMup>YB(W2^Zf#lao3QrtU?=5RKY8?s{mcLH zzq4;Y@(necB_9{#{tu5fp4pzw_(y)sHzLh-O-{&V&8rq>XYG<6b{u)*b$k5LN9<qz z>tDBf?tj28%`9p|bnkt<<Q?%f*)lou!)ssI*?LurC_B3{>um)5wmNNP(t8R<^mjR( z-FYXcbKlBI>tA|V$J{+@eT#2uERrM2mC#yfV7E3XX}6w^;b6|0HY-ls(85=&@A8^0 zP4Bhc>$`2|!WlcY<AZi#=Lc<NKu&9J3usl?2FpA(s3HynjXeE%P$I^3)^yII$}I4N zT=C1KH1$A@YtHhqlX$@63V?W(4uTG_3a^fg0Yxa245xWWtuV^`GLEtCSJd0Yqodlu zs?3qGaXWPQu&sUnHM{+eyX~HP?va0SP=90gzx<c~h5g-M{Z;$>|JgsWUzixOPt2XM zdA<6+sP)Y=Pd;roJ@OUX|M7=(l-jHIZ+`t>*@`yR+<&u<8XUOa?!9TmKKq&dcIn(( zcJ!^YcIVE6cIWN4>qV^#{-Bcn&Uwtp8r6e{KJCQz@vW%SPNhcC4C%fzJTk6<Y(x zBO0frEHwY}wD9`GoBJ%A(Ac~-D4%IKr>l<)W_jS?B!<?<Xq63)FK7_v002M$Nkl<Z zW8xg0v8MZ`r!`mU;~Z($fXYK3r%}vjMx4c~Jl*}=+0A?q-pKXiK19Quqqze*str!v zLXqe5{UV*G5t%YFbd9KTn9?w<NXxpM<@pIIIz(b3Y>X^eAQLL^D9C=jo>H~=MAY^R z%_Wt^?`!kjVeM3v%~_=+6M`z{GZ2-y0I9)}lVe<{gmkfAkOO*H%%+7B_NdAnzgnD% zmdaU^(}~^5iGAV^=DMDe^LqV=9GSD4fNb=duFy9K>DUc_6?g-z>z##7WgyK2VO;l2 zKD_4h>k^^IIIsO5&^R%!SH4nhbS8|BaAkhkUOhWwfAZp4`-{Vu?dYs_OpXrQ?Yk!J z6}{s3**o+qi<JB3iAB3_c+I}~>a6{r-#c!1j32X~zGupQ`GNiRf&G)381h;Jow~C; z;A7J1)}4Jeqce?H)}tkK#;>3){Ir9$F>5bQJZ^96+*#U0r_kEJXq6=-G1M|5wLpxk z0`Zg&1+kPHu>=D>I3{d8lU4gZFDLXfV^7$=>6>&y?M_Mq)Sd%%&Mx>r(Xkgt<$U&C z$Si8~FSKm<yX{H43aYYXaTd~&Zjr*GX58&_+_1HIO&q|kMvtmKd3EHJ7F}O@uFu}L ze^qBhCkJcK#t9L<mUKSw%S+E_=j`#M3WGQ5>5o3YqH>I~<!K;QOj8N_kq0`}hI1NC z$-_a%hwpd|W_o?bPHGafZ}^~H)>GIe?Ft&zP6<9Vz(78yU5KCC@sswu7k@{`cJPFe zr;@Ao_WT)p$-ZlQR`=UP|CHpE<t8CL1SrP*$PL%B2a1e>L2@>)pMJvnzV;8Tv8;E9 z_2C8jDHd|W>bvrat$*!5wzZ%8zpQcFXJs_EFG8s&_+{D={D;XCZ(A(u$*~5|W=4-O z>Sad%9<^`VTMP8RkY6y!qFrq|Jr$(j>0FCw*i<p&_<-*@84Ds132Gy`9GWnJl^-ZP zK|ZTV=eHV<*}>JD^~8RcsIoH7qsJe~Y3Qhp(MP{-jT1+GqUJl5u?1nt5Jk{iCE_A< z-`c<5F8{4x(T<H3+wsLOP{_9QYyXiP*{|EcH~w7b5$&^ufAEiN@Grh<eVVw<|KjIu z^#gL0s}37_ZFTHxe`*amxcC5Jr8WZsZ6BF>waVM~nUl8TvA?jzTW+`Yom#Y`7i#%$ z=bx55@mkh7Zqu(nVlyXR(k_A-eJq5}Sm~eJNG)fcZmXyro<<v=yh)5d$W~UW7wQKk zvLs!dm-A6v{mUm4N~`;2`!cRXrFxPRL+8g0tRA+$W8biq9S3b-BHNcyJ6qQdWyA9w zI>UZaZ#borN%jOLYUW}K&^vVHjQxh~(Szm%9a@P4V588gbzsWbzjo1fE&PF;&@cJ} zi>ll~=|mLeSLOlRC=IWmBTgvs6Qub|nQAx~UcIbyw!f%z`tH(~%(Vk)iv^9d@XD1- z_SG+c(T=})*xOWUV_6hBpjYT0I)-j#I>-Hf67bMC_*7}fYVt)yv}cV?L|4?ePoH|r z{`@O{WOv^6KHI(bz}B76V$?q~Yr7tO+y+l*3=J8f$F^Rp0uWaj>|<;cR83Ga&<3>& zde^tUqw(b?Tic~Gy|-9@)XS>gE}DOI(H2kW?Jc$PG`66NWHVqEdH}6vs$?t8Tw_6J z&@X7Nz@NWuri=kODTa0S_^@8D9vv7}+2e$Sq8Ts)NV8lSn*eIgDfrykIUD-6US~b1 z9h5tD7JZlEXmTuK=qFZ}^_Jq7PcGYW&fEY-8S$S?$6-;568g*Km-GP`AjR3G1c>qg z*MkFc5_se#gobE52Abz7;%Lm3R_(NQe||-d@w+BgY>##?Yx>wzXrfVGTI}j5rbV4+ z5Q}dY<@P1aDBlG+s9$~gCHu>-{h2-X=%aT0*fBY*mwe&f;QJdo?o3_-=|C&cg9+`1 zK6&zl@Q&KkPdsLS{0Dzv5B|uH*w6mLFWM(R{iC*94|if0Sty=+rtg$q)VCJ~wIgg% z-y!0th4*sUsT&bHpSc${%ePfyY+G8Hx5MY3v1d<y&EB3>`N>H#F|^z6-1Cs#yXTX( zd+Zi%nA#y%wCq(|X?g`(d2N<*9i+={=`^EV2<Lg*wx(I=nOa+SjyzNv)PR3U4;lX1 zfAe3t^OsFXv<qg1I9~iH7~T8RT%bFzt>z$ucFFpHhn393)>LLMJ^!5j5C7yJ+yDOm z{Fd#y>7dpJnp;Vas|n0)-M;fboc47slV|{45mH7cw9VQ~lV!S}GB)<>4b;Y}j(%G_ zYW)i@%i;Wz^)0_8*eunmKp)pQ&C#uWdJwjBPBbHGTMK@CY9C*jU755s9sAHfuxumy zF52>yTlC~}pWSguYq`0jc6#SW?8^8pdRuZNjh&Susb9Jn4BE&5<!kSNc4A+$(<ihk zB|nr)B&jsoS&*CZ5ZRgnLP(=q#}PsVO`2vbQFZ6siWz1lIlP5(^DX*r$M8-a$KwhV z8m4shn^mX(&Mas>qc>r8>zwDc)r0n7eHVl8aol|KP5ynkC!T!LzW&AE)AuZ9?2BLe zk~@um>F@o0o0(tm{5Rix(~ds-tWAyUbgZ!z`=dYn9XXkwv>m&K?2EH^*#Xth&;Rs; zcJGJp)7up1?K@AuWPkj}e{7%s<<HwKx7=z6b)NJadcZllK4u5@?)H!REpoI^K7pgs zS=O|cc*>zn`t-)cn$Ei&kUbuBWz6c=8^Vk!;q)b!IY@FIvsR{^rU#z=`OIj_1ZTK! zkY$Xk@M+un)2<<$$ILsRg@?Z}DqMCwCwWQkfX<TkrJms4u24?=eB6YWlK3dv?snal z56mlCc0XegTq5K+^bFPnQ1}Z(iqXl0D|LM#T(w39UJ~$eUc%IkiM^63o%t{@3xMH6 zI-to>$?6b1Pd_i~yx#B5$y7=tI}e)Z-29S=QdiFpWiztMTh1i2TL;(dM>QE*&?A>b zlMs?T!G!2r)OGcI#7Z`BPxC|LP#WivADJO%5v7tbvc%plOoGy@P_995M8X2Q)V~wq zmN<4|C;=mKUJdBRzQn+~<)9Cg^ex-2aqYxYd36gaPG0~&b^N0J?sI4Dua4?)=D|_> z+`YHy*ir3ro@&_Ny=Tb&`7=7J=eE?tpT4qW|L~(j_6IuC?+v~8@bUd}MjpCkUwZvb z`>8ud>_7O(e*462yQDvzt#etS(QdtRF+R9#mvpp4S$}nHBOO<4p(~#2KW-;S^z=<_ zflgcx;FNq5RiaL~i6fK=x5**VC7vli<<X0T?Dd}(Ebst>)|9Sb@+9q;c4zDPo$XlH z?#2!30Q`EuoY&9jJi(LVuK{e$x6n#b@DT#iToa+N<0ok%sHcM?&}Ik?6K(tkPI2|9 zWE88igq?V;X;6Dk9}#*<JG4Kmj}oF+P&cJ*92=73^P$NP%E@rfjxHV3lR*yJXCzd; z$<xg1DKYG<N)LAH;&U(cKqh77V{C2%?yMFTV<isj@9TpHw@%z{gF0gtltnqA`v=DT zRnjx(FW4=kx7m-5|Cs&F+_!k4%Wp)Cl_&a+X=n6tySH!0hJC1;m3`8G*cV)-#sxOY z6!qzr>E=RM*N*VM@BGiY5$cKm1ji+5a#oeFN<~kY8!LM1`}qGP=i~2LLmzNU70-AG zUv5z<9WRsinxVh&k;%q_cIawx=(zgrHPHHwa&EWIeCFW~<yH9-vbkIw22;1S#yt>J zw;uK1CTeC=Sxq)_-I~aBSmGOSve4;`zC(6oMdzya=>brbb4`T}lhV2I<{=w?{pHjS z^Ed;4WbqoZYaYc*U(uP#_Wt{AhaAd!)NX4}KcO4xi#DiN)b!*-V-*%COHOF=SAX^w zZ1Bf^!bZRFTRMbUXFdPq&)E8pe9YGW^jLC0y9~4x758BeNdqQEBZptLfg`Wm(nAkR zsZb=N)h<CDU^JOI`-aUOf7)i`=;MAmNFUTB3|Y?34NYZE6}lc+uY^ycC;`_?{f)K@ zzVzbCZncsJ2_Ge0{j5z~D3^%)gkJY}IWGn;yd>w<Gd6J7k6L4RT;ohu0abbklbUnv z)7v^OQuyV4!o}$)i*?m|V7aX*lX?(4q}N9mTsp=zLu;xDPcfCP3T$xU1)Es<rp5xb zom>wUW*A)oh~xrn%j;6Gfmaq%z=Cf*9dIoa$Jf54#rsd&;^fZ=%GkECRY6K)pgp|t z`YZP0^G~OGQ~yg9DIR3<KMj}7aRvr)(+E*5jizpAM#6>&-Qwhv7bGh0S6+P1UVr69 zd-%upXVpSzFx%it{T)4S6W>3S?4jRmV@R6lmxyFBPg<4??r|e}+lOP+N>l5iaV(7; zI%0!|kJ{o#w?2n~`NGjfy<MRryrRBx@uU%7YB44V&mWq5o^qt;mH8Q)9hkO0%`L}o zAJ9jP^fAaC<JyIk=EBR`nK6HP$)-=w+1aCKZT;+!jm!BkF*K=rrY!NkkS&r7oK#_} zk7mkWli;O8dQg32(Z(NQu9}sr7ep-$7BvOG*Do*I^Or=L?_r=;_i4d++b21fMa6&c zU?6aM?wjoA{zMTuQi`}b9tG}sTtp0mz|qy`Xz)|6qal}+Y<x+_C%&q)sekllEpQ!* zjNZdK4rHxCy!^7virQsst*N>009Zh$zftXS{@Pc*Y=5O!ua6%;?hE*--P)ljsRs_| z0fx$dx6<r_M$_@}al3fwqV75U`f$}5zxQ0ac+npH>qqRlXP&W7eEMPgTfh7(_9LJ8 zl#S_CYwT^khjah&((>C4uQ<2nS6aU7kwLYAUHa(zpwDf)siThruFTqZj{c$EI{j1i zQ|%u1xnRT2&%LE@1{~8zxF50o6L;!E+Yj0;J3gQt%(vUv&`!-)^B~xbbr(3z(2wNM zJ?M(w2<-MY9C&5OO|b&8JD8&oeqYCKJoWgueUwjrhGE;GvzbT7#*)*9zTRUWtC(*R zVO-%4XU)8hWVv$XiXL8Tey_57P4lkb`;A|>|Mb88@AUvwj-&E{{w93OY~~?u-*0rW zPxCs?ZpF4AMEgoxw<}(@nR<I^%FqMYWjT+RFWUIfDVth&PEO0CHmnCPdUEM#!q5n! zwM;P7n5LT4992%aLHR0H_3>d}>j-C6UR1vMqlZ$qKCCRw7Z<hDbzn|yd&$Ohq~l#@ zFWKd(yY2kwU3O*kW;vqS86V7>nmNeFRI$n!r5!^{m+fEui+^U{`1;rUn`(?t&3r~* zLX$x=uO^NDAX+sXZ^uwU3qDz-V$K?Hpb;D;68YLyR*5I(97XxLpZ$6Jum9=)Y8Omv z+%mt2mvDHqVUV$#BWcD*hwM|I{J4Ea<MpmxQ+7c+l%IU^Dcd0@@!;fyt;os!^eeB~ zl`nk3e)i{n&dchM&WYaFxMG914%l&>Vz8(W5$~G3%|7|j582e@Zt1l{$A7(TmmYu2 zMyK{^m-VFGeb4*+Ect!=4)`&eH{YzIo3w@+9U0d6zbc<1>)sSfeFNsDnlrd}59qvT zK9U$^6>}l(Q#|yf%t3F+$(-(-shZfV%Gkm^4_d}({y3h)@kK`(dVCpFEi?&+<m7zj zfgCX3bPJNWF?MjDWkanyvjt~|chX5mhsjRvbL_rmb>CBHaXyQJX4<)c5<6}su1~?8 zISiD|5EG3AfnS<l2}i``Ylc4mQGPbjz4^S3zEJ>oNqoMeEzp-%c;b{9bRY^_O6}Z0 z0V0o%#FuG*bl0lgq{CXT$QzBzIO!an73OeBY3JvLi<km|nP=w?sfwZ@^y8dMWH8uL z=o2kB?@r{Dp^M~)5Lb{rL?ki<jHt4RCX9?HfIA5Tr^*l9)Ht0rKeAco$w{PLY8{?V zS9o0_h?&shdq@ri?@Uxe5zq?w#kpns?eD&2|Mq(q?Vg)<+FiHr(T?|Z`<c5&?Wij4 zgw6;XQ6t{14>(a{1mYvA$5VPh@qWG9{4;kA**DJg+1-;3JE>iC|M{1X+CO^eiv8Lr zZq*a})Yj@ZX5^#W?oqxR?&fx^2N%dsp+2pjoiIlSUbDHr896G{Kw%g-xyV`BRJ|== zj;1!0dFWJNk;&1oVTOMM+-aPEO8exsH+I`Zp9+_#i;9(m@Hz<B&M)m|7<k=2u=+vq zNjnQ&z$QPm=VkpoeSBFHLpe{>P6<?D>iN>x>odvq#hap}To3w9N;pkY58_0fvy#eH zBJ)=o+rqSHHmMv7WR=eBYQH^sY|TD%uiB}I0@u~p<Odmg8PPs8`hXqK?zrz<dBPr> zeOzUxS8H_B!UP;_v{C-?0E;n1!*iJC65>@<$|Jq%CmhjmYIVFmb7=91eR79(cj{H0 znHfz+=C!+0V<5*6v2*I24kQ2QzE4=6KG6BsGvBm1{TtFNkLyE=c5LmC-EAL`)ZXha znXa~@ofy1rf(>l}7`EvnEo(16t*<uAfh0$i>6K^u(5Ln4+4rn5_qujI?+_jXFeRqo zPEZvD&KPzS%^$J#H@|G__kG6J=l)!~1+;6FQtH1|$2|O`3R$neyO$=@CocZWjgj?y ze)wJFY#dGXp<O0AyL(#w4@U*C7BiE1p>;b$iUgHt+CI)pO|Wvq^SJT@jVuymJ9?M{ z%rgZCmeVZ!=LQz+6?@G-Y#&nXZL$6^W<?+2ds#=IXczRV-(&<+n?w*Yqfex<K@i{? zv>OjRXpN^HH#?|0_}C|H{RQ!$zQofXsOrj7@--GMANdh$9D2i6v;)jOaG$L_{iI$e z(}y=TIrJ5FGD*MLI9)00q=CjQExLwYeZiJK^f5h@5RDgt&^HU{BKyw2@ubaNe9Pvw zXd4?#yFzdP`6LV;GK->Uw&7d>)SGL9Hi!+46j!?<uRq^=ppCxCJ&izdfD`(r@r*J8 zo_P7g=!J_ma_$+M*n6{GvAe8qSk8!|p26-E5CfN8I)Z9geYp&X;H=SCPtDt$-T?T3 zUiaHkIH^nA>mBFVs!6H0$QoAx(|QYxZ%Z~Z_lONFA4^a8si@6DF1r>q$a)vtLh1?V zDew?q@#DU#Hwfk*v89QhP~Yvc*lXwL?TvFopMCl}dM<NG?S=7$MpGDo9B)U7fs5CV zn^K@P6$3A~SEBS4@0Xrv%>xvL;=Hm^5%+;eAB@&6pXZ)=!anxNAM^W3v}Y&Z=tp(c z(7a{%<=1={Gz$;!XdBUV$a9+oM=j<tsUKmM<}i8~Hm~Co^di5_YZ^AM#p3Et?GV$~ z>Zi_Lu{*C6h1Y>MpnmOI8hup{xE}nVt!pvVyM3w}y_PihvK$0D#t-K=gLmrL%2U~+ zGq3de=3g1Y8%y(gIDA&esZD*P&mQ>99@}%P9Lh5~uI;Seia4+Nz`UsVuQS~b?9r_1 ze$}UTQC&DWZHFH_Z^xg#VEgQV-mn|hqL5ht#Y&w^viA?#QECG|&WYdBYjRF}NV}-D z;lpn~7~Vr*j`qyCCC$;;y(BrJNmfCunD0LFXv%cv3B$)r5s=~)XkJ9p3!Qo>AbjEZ zd`EDp)Ld*LK!0wAq9N4phoZqQpDH?zIIGO(v^)6O3oG`?1LB2`9l9O^<+H9Mnegwh z!0r@QbPxINcOJLj{q5hhXTJMg&Czrwr<@P$uDk#K`?PjhvMGJ^>8^Y3u^l_6)Lj|3 zq?^XQndxais)L<#BO@dB^2<5`O6~T{=~MQ|U;dRHdhK<6fa+K6m;UzO(HYTuyiK<n zpq;5&jQ9Dm9u&@2tm|aWb%3c(*hDm;x#mUz?GL^E-T$Au_kgqfsP25vy`6KI?#X#H zGty`jP#8%F1rP#RLL$fngE6*1_F{W&!(trXz6JJqZGUX@u#MLS7Gq;$z}O@qgoKcg zKso2pj5IlPPv_iyyZheze&197x_$dj_e}Rltlw7m{r~G<b?VfqTy^TyDSPV3?Vd;F z%p1K%DOD-}QZ}i(84eA+U`GdcNea3_7rU>sb<JnlSu3s*15YOu665uNzHNb~L6g7= zjU`hEIxQevF=nqL*-4!SIb=W9<^yUs=zA(vp6xmb#sz^eYmgAcgf_T9!WIA)`#bP+ zL0OgJ?e6MwCUi<n>7U$nr(JjBJ8jwe&Fa5canQgPZbBQFKYi5O(3UB|SKs`s)A#CA zd_2ZjUy5@mJ=|$a26kK3$T6!gKV)?)CGDKm{8NnGyiQzbH1Ou^s#z11zR@OL1ls5G zoO;M<T`oQZr-QxTChMe>B&qYb2}f3IRGX}kj&R)>RyLybn1u3%U$(|fmkmy=w66Ls zQuDTqUP*X7%B0mP_*{f1v~=mNh9BMj1FKP;d+jBcxGVj#Z#X6aOY22sI69LtX=l!8 zba?nZGj)@&_|aZm;&z^P8A(jYD!gJ|&*cxDjK_~Z{<s+Ex7jb=e6yw6wa%Q+lptZF zYEmb_xZoaPt}3Y;L~?gRa|PP_6<1tgXPtGHZwO6Dz-d6t>K>gQAWaRrdv4vTc1be7 z#)fnuc)GFOHgDKqYu7HfGq!E>jmdHez@Rt2LTU<OxNg=44{e+L-~v7vuuY8!g$07A zG>@9pd_HiRW)e{#yI=`^<PFSsrre(AN(cE2em0U^2u?uGK$cr%AajBOo&sx`zz9}( ziHJfOfnIYM=wf{lB&7px`Vn}Za+JRq%<2>4{aLY3boEs3uegN-Ml^F6;$rFm&5_P| z8PLo*sKF$X_+UUY&5Kp5lpzgRFfc3vEGRIJLr=nki*KdFaru(p9fCWF_BFDHlZP_N zGmB9A#~%PL7edVZWCmu>?g_y$S<noLi32nQUV$>b2myA`M-%*JT<J0xey?l_7Y~w# zD7gZ0vGF^R9#{`2nE2!ma_CUx`t-<nBPNevD939kq}W+UI!^pnekXAhkR|~XlN6fw z+P;eCY(f%<NeL+5b%8^6nXQ}NW>va-)jOE!0jtd1Wo6kT3hgDOw{}R<t1QC>JUYHl z3QZkrW!G(1KDtX~7$$RGW|caQz4UF;ld)cDBs`g{7wMF#(9UhV>m#@<?1?_sdhNPL z6DxV)Tb2PapFef`%l7TP(w|kg)XuFfvzxZn+i%||)fPRI_BJu0Kl#X{J=>*=9JH%= z{}D-Cf<Tj_=j7Hc{ms9AcBNo-8>%|{Uq7eTzOgfF$E0uT(~oxBp56)j)HSDBGfZeN zxEOnQQ||TRTsi|QnPkm|2w4%cB>F)EEaINZBdSL#9k2Mxuq4kSTvBoL89XRgn6*<H z;41UwwldXfo66SO(sZl;8dF;A=x;PXDm}9O)}0@)eYqocL^@?h^W&OGs&mpG<ry#* zM_6o!ZrJrH>n!W=3pgs$Y5|^k1?rBsfI={U!BgMUukure<O8hyien%hA$<Xjw-L7{ zP=&Zcn%&Fmd&B~O>;*W`iRz-@#1WxGETjrJx#FQ6zCC?fz)5<d%KMZeWFf!_pOp#^ zs<yH=yQcNc8fZ4#clvIzBblRqw3dr6WBk+VSozWUlUAqG8xS;#F1ZC*^>KnhdOBSu zCZF5~a)Y*Wa;Kf&a)Ax%f)v{AxQ=f!Y2_$UYD(dIQnsW0B3;(G&h8qz*Iv%-v61wc zHevSLRD~ol;|;qfOwnx5%K7?P(ML{AfA1Ev+rBB=n3&0OE7yWKtp)o--?8k<QL9=Z zePygpouMZ%r716_LS$B;h9R$`os*qkuzc&^XaaXwMFR6sKV?#S<nJtB|6$8D{k|5a z^aaFPY{XVq8H}s5FFop73^kXXD_{?&)aR)ne4-Rf$_pn6A<}2npjeoZj`;2G_yLWw zd)Wp&!6)(8%WcW$OqvvvyCva8M_z->k^EszPA0XfAqI45^5;rev6~h!6^9RaU1KxE zBLIme7c8Iy9eOGcXc>7e#x=9D^yV#=-=`^pbW}PMx}{a)L#WG4{QPoVq49~RCL;9B zw7s+>r&E&nN{Jbqd-{n`&g2ydBVJE{?0oa{@lO-4BL_5b*Tq^eh+^Irr(+&_PRyy{ zj$Jy6Hm*Av)ZqvvLs(ves`sgiG9*$j^|72#$RpL9)JG>vc6Re&(9;i0NXjImqiv9i zM0KUO9<{YqZf6pPfH+lzNgbD2r4^TtO>zUDlP`;pt@P_!R7?yUwWZSKJ~eX4CMvWU z#6(^2-Uk$=jo`%wu%@Ch5I^GBE2hz3-#4U<mufMps;uX}LHp&4bn0h|BxVHT*<6h1 zXKLqSQ02iyXoH2ezK}Tc8LOFmT!|Xi?wlwmLr4IIM0kc`cbDK7?TOP2d?`!<I42Hp zgExtc7gLuQcY-QZ0;MnWq;&C1KQ0Vt(3a8=;fvp*A2k<y_q^oEfDC>ysN0F3c;)JK z$m?ZsKTw=xh=cC%rVhF<pKc14fGbAC+v5O;b`A<}?a4Tl(nUObY*IQ2+0a~+QU6kN z_-F_c6SxQjP!Z>_NC9Ou=NnO9Hz-w7qpJ54Ejr`6bfs0UU2XMiR$IIJrdp{rs1Va+ z=%)`^?q6=#Z05v<EUrG%p;KyFt|7P*^X0_B+!r1|_Ar?TgBFH>@{fss0S9Fj@{*0< z-qC&=Xz8-^e_@TSJ)_-*UyzW)SELK~$fShZlJe0Dn@ZgKh_o)Wu3nk4_Sd%9Wglp> zgBSJK<6qrxO?}HG{Lrj^DfDaJ$0`hALsnzgm+IM+PI2Wl2Eu?YB2M=C4f(=dDSHvr z6YW}975YU_o*vMc*964J3dIwJ7}WbY9r&{nSgSN#)S9-ZrML8DO$9Jpw9j^~7U+*i zI_$uh7PGWxnebHP{F8Tj2RnJ2_^O}v2=G^%*e8LKN%ilQS|fRzbW96)2san!h4L#j zf`D65!C1Wip1bYy|MRo9Z{I$tp=onQ!KRIybR2tywTS_F*_E$XwW+ifVoFbP+A4__ zN?{gub{v)TYSw;w@7>m_ak5LyL*`}EVq_la=&-;4{O5JyRImNwO&{`$uKcu3NM^vK z!bF#6Sn$gu$)_Zm|M-_kLV%}YzPX?%q;8H)4ce~m2gSe-JCQM;l0<sGsWiRLQ*Xzo zhHQV|GuAV5Q1|Iv;0$Q$wKGSO{K1a(Wb0yRtJcxNahj;i?6`y5yiWlmA$V}#Uh9<l zFpo<EZ=)DQFrz5rwQJVc&Ye5GTw%&EUwpNV_y0l)LzuXGm=CEg^!9Yy!Tr*)zjkAx z-YzO`rH|G+SNezx6XRYK-bDh(I9~PiEs~B`0-jV$uV2$6QXO{qCngy=tzo*v|9IGP zmCGzusd8fXO>NriyT%LZwf<#z1}xO<{G=Fi<r09=AI(0mjUHzxX62rh<Z5ld)l^F0 zNNO;%V@oyf)&_)5T&E>8Q>N)iTP|ZQQ^%~ga<v_8JX3Q^3IBMk!WAMU(tumv#2lUJ zpQa@!vU&S<`{XA-squd@Y_Ms(85kIFMrxC!|2sQ7U5b@*LpqqcNxw<kpiGh4$B*x6 z%?GHn{3f&p7}f?IFsoOu_PK?(EvM*}J&3<wr%gWk(T|D={e;qyH2ejk&1rLyv9C&V zdw4grXXwqOGM?6!mKIMZdBTq}VQ%E~YiwF4J<nQnNFTROVO2HSYDqam6AV`Rei+R4 zjV;c6B~N^Aqq}q}kp>nVOutl$xt8WX8q>xV2UUjE&ny!w+$_gXj;sd}aA2b>sNGO_ zspWtv%vujxp~D%)ii3HCIE;lco>QWvi<1{zOh`Ee^@3CssmKtc95-Nivy`FsxSB=b zg}FSX`5MA@=r1Qu@DQ)ZFX(dM^i9R{bQ1>*ZsD4j0qtomuBmchl1G=zyVM--9@w1@ z>qI9ZWG5jI!~6n6$LJvVK_`Chptt<v4_Ms!W?{+hbcDmN*Z@P^!_rN6Y$8$E9&(TD zmroL>TY<*#f#Dmd@QzHfoQPXhowKuQ)!<mbI-M~rA!gDMVgQv~MI;MV&;^+Aj7&gh z3aB(PNN;gWYY`@+3SFg(3`0JEcg7$&a&P*3wmbclCT{G;h4fGv>UA9dGVK<hm6Bwk zs7eohOGifj*78%#9Fu}k4whHe+Ekq+=UP6X3Zpb1xz#FP&~f?kZVDkprpiR4%dU9N z#?SklS9p&~(K$VOF!4m;db%<Ub|K(APY)FQ#>XV_xisVn`REl{US5Yp_kd;_AHQX{ z-E}l)zk119yQizne$+8)uU|c8Z;~2~TMi7{#(FVsq>kfj`*jRYjIKup!UC&89l%%j zvmU9iyQC|cN%+<48mxP0%<ev#x3gE&+Z9V|>`M<Fwz2Q+wm-Xmi?xUeP1%+j)Qn7J z#<VD+^Pg=Ze0&FArA2>Z<HOoP>-Whkm-9s!vH*L?iclA$8@ay38tnYCZFW(`*|uI% zq7CVKl@?Pd!o*Mk0SuE-F$a%kyX^7l=k1Z{=j>>{TcsRm5L6O^?_i2;tht7CJ>uBJ zsMXa{7Lk$!c&?W~R4vs0Myz{O3kK?x>VR*)Bq<B&!z~~PSi?t10eKKy!*`?(_}O;8 z0!;Gs6-{srxks3gDj?`*0%~H&>1d#i@k{4clhQ|9iZl^wE)!!P*M%XCy6x7}rhsKR zNzBx2)s5&k*=@bI+vB6pSVor}g!;;2FGz)RX(%S*!A`tvggbLu-@K<`!iqxrplO{V zczEP-+unYrjtMntcQst5Gpyr!4LT;o0&-GJv%`n_Y<b%<`#{tCrB}Si4vTp?Jf_VR z#1qxy6LWFA#66!GD@vae7y%(xX8OC|GyCU%wA51Rm*$pkn9nex)E-ijI?CTAsk5`h zAihuox6+npAt;6+yZ_WbXXdG2p431-HTkmi<w_+-8Wj&yF1uf*beBo?Ej{!n9(}&) z_tXzjpNdi-tD3T9GzsEH;e{C52=!uEQo+6HK5evV0+OUD_$hrMiHb_d6Tg5v<Y0g+ zjSafwPx%7ogB)(f1`kFj-q94>aSPwXp&6a^We03jm-*D!tA6Sa+D~erS+tK04_S3z zk4t|Q7ELidJ|?PQ+$1zj>gcERp_S=k4nLME$<6eJjW#95a!!{9=2owjK4X>lX`5Zb zId`nnQahiw{FPVP<hl)({>hK6N)pkgMbo6}on~Xg9%%6~!y6arQz~Rf%?MM+)L@@w zMux50RkbAWPS-q-m_C)^XumFb;iAN3ye0oB0?#JFkzcV5a?*qaq;E_CBibf(2gAT{ z#)d~V31kxGlf#68Eg0q-X-S^cO1E@#eU<t_jRV4)^-Yh6TO~tWp1y=;eJ4?9t~#i) z7*zVo)z=JIMZG4ln54>tkMJ4ogw5!<cTKyF*d&G`8yL^o7apFpO&S|(Gd(sqHfiUc zvE2Uosk|+3p0YER&7Q`_v_~AT#(P#eg^-g#lNtl7YEIGyW7SpOFi1>{4qC<JKINN^ zqT)t%bQnGOj>fG?W)(R{Z+{oN7uzFHv0EGj+^qyJZcc;Vz^Q^(=J%^C2Cb^81;-)) zS?4mMoje*=nRj<}st#%6!rL2lLViiS{vy2RNAiyN3h7Vk(X7g%kOVFum?4?q?wmYA zT(~8P!d)FQ-)zP(@bq<e+o%?c4QktgmY4xxo5LjO8(05Q-rKMKKG{^919Uzo$QacG zL-)knu=JacH&)x^5*=S%x!h{RaBdO9xpBoxt8H%aMHYBw)jKf+l>!FK`JxE!@~-S3 zu#CpDD)pfYOCOPGTUD3*PU^0RwDO5D0%p0d38<%H%0UmY)5r8=`Yd<)kX?84b}JjJ zvX{R&YQrxk3qgc1v<?6|7Byc&;Ed_vmvpLf*R(ZkP1}ZdO8)u3Hrl;k+-*I(vesPD z>|w$~<SV_jY48v?3(K5NdQOavX^fCmRpKtM`Hf%{wN6uMj;15T=!kW?V*8UHChs)s zL+-w5M}+Q2?O`)rdV$NP?XS02*oDh0ZI>9(H$MvF%<S{8skE(4I$_p1VK+UlOTp25 znzTEwlh~nE5%cYIgWrFiJHf6oqBo;?tj72T&9R+MrvVD*G2jr)xYVFjYtE5XS@~wE zoY^P^Nmg^ShwlHW{mo}SZAYZP9CaI;Hf^$V&wY*c_VwC(e({%V>9S?sZeM)<8N1_F z2^JhWBozrd=_TYaVpgnNp+i60Z1d@7*xP>oT{ftC_BG9k-g?9J_Vm+FJ5w1($-jQ} ztB_;w{lKqSGpejeFLcO~)%uM5pOpUT+J+NI@d<h{2K=+y%VGi-!9r!Z7g&+waaNV@ zc&9FU-*=qPd=8<A^0uOJvooLB*gn=XVs}2M%fMDN+Zh{|Tcgx3R#qZ319Z%@xiN|( z;OTWCloF5-y2O!B)dM8-vYPjF9?|Bo##`zmj2qN$U|<@3_OqY0`|i8X{^_6o$<?#C z$ItM=9WT!4R=t=|z3&oZd|EW7%4-XK;ew(keK5e1^o<v%PjUQ5nO7}+Crtpgm)`=+ z0>NmroO($u+iac3HrTp}y}C$Hj90&>MYT}sIOL!R19wY3kL(e7d_#}ik#3d{fsW}2 zM129w$!V>Zq<$k9wc+wft7<)H*_vUSmOkj*l!Oe#6fD!pxSSZ5Wg457r}k;X@|f+b z)`gV~8x=Jhbs>rb(Q)70Gs7B;K7x2*w2td!ElgwPD=?JlyHKHkKMdGa+5jHaI0{n| zxb}9bmk<LKJB(M<$53y515WjhawZ(iT^QAbC+sUV&@-j}8x!VMY%<PcinBZcA^#@D z@omzHDj4wyvLMyVDVa$a#Y#K*;^VCHVp4GtCydrKYEpEk(X@DI(^~gt$F*^;w87?^ znyL~{Nz&A;F;qu<Q&EiGD&+xogeplrCyVI*;SC}!J)tq!nI=U^z<)kNjUpUOVB%#? zfaEg<KbX*wx$F#Nxp8Nd#{piYNdyMwv)p}+BX{zW@`E@Zmz7WC1L{4ZPH9Gd#!`5& z;vPC|;K?eSa1wu16%=%f2V9ZKEpMl{9LYMM$q=6x=sjzkN&MyPCRQ7tdnImJpEZOJ z%`aR68n{p$AjP8yap)72zIbz=@L($JP#{jMMc#=uc#u2>Dx{81W-==9QAq~6VFKl` zhfigRN5vPI{dh6{4vq_ktPXGGtDRXR9blTQQ*le9FNB}~s5z<-F2yIi7p^jed9vqW zQn+BI6M!yuNEU0nf)JORNC8Pu<I*lP5|iCo-N5Jt9kJ)7D`&(GOE2v9$_sqGCov6Y zD(CZJ&XQ12QX!-uKc9VGm$!&U<$1n$uTAwyS)3$qi%o7~TD#uQSng~!!m_|53I4*N zfBGAryo0tl;K}TY6J|g(q!+`pPm<4{ynUbDbwvIR?YgXF(tc}ugZ<GHwf6TrN2Qxt zjKy57bxMC+m3DHFtfR!aG|6$OK2(UI0L}*n)M2O<9~~UGFX=LtRn2wwo7>Cn&OPIn zYglHt@9nUfAMCYHT(eOUDd8xYBhiEGhnXGfPjoGL&m>`%$CMav8B-kU*nCj|T#`XF z1uq9VcyQ6VM0#K^EkD;TQ@O1wTjA2o-X1(ySR57Car|hLHCAgIQ|oL)*&4gN;zBW@ zpSGXq;=IF>iVhnrid1m1wu_jMFyW={j_WUj^w(mHP;yi3SXKkFSNa+JEJCPWq>EoL z!A5?@F2y^y8LA@Sac}4j6V!-p_M0zY$l8cI^xC95?|lSPj|(voGqAK-A52v?;AU~k zhEl60BJWxHPTM%R(ViWA!B$i)cYk(V#j^^12LarbH#U`@x&ZnJ8YOtpbD5H(S9=Y7 z-MK!yz3(o2&*~fP$iA!?W}{lPh{>lkG-%-hgPQ@Zqi4WUy=Ki~$ZoCOE}S{*_f05) zdTa}O_#ngRR%+Csb1&~T`>rmU)1pmseoBBR$nnE$&M92EZXiubElyVFa?8$PK-bYm z4cbU{qkd*e6BI7HB;hGZXKP4PQj}f|p5C{`{9%wC{hyYrzCt2LuPe?rkJl&a%CE&5 zBz4Bb_#&@Kt5*&oDYOF+QXokd%;ZE!>r9FP<SV#%<xcFOX2?D9a%9ep7q}xVcz|Ta zxU=f4#s}1?WSI1vf?<N17bDm&xbZTI@hNh*hHs7my0<n7D>iPj+=KU7=8J!;vXNxb z$Ns?5a?47^M%fK-xANckhy+1(oa}+0TK3=p%XW8Jg>;!!y#FRuTrr}w**JCUcU7KA zT$Hg})e$81#4CBy3Aluxr1^6Sw^%c!<8v8pR92~+)Q!3!3dWn6@*-L}`dA6mM5Q8l z7|(sfniy;21}W!OZ6?)J=@_i)EA1L^`adMAGitans5^Q_-M_V|#_Dt_7U_!P5|I-P zj-ek``6=xlEyuu>BQ?6aqFiMOZ4L_ftPdQDjKW8~n^Z-b<DOpn^-9}wq~HGjzG)pU zs<Nv#_1f!nf$sNT$lB(1NkIsOx(qEov(j10#`59}G>5blhlAoktV@Qe4tP726XUeE zp<?hNJE3No#38RE+3DPnPf=#ar??6kl!PpF-m@^x{}D)?$G-@9Dc)J(RF*6jL}NZn zUpo)Fd7N3y_@bY}BY_^5^2+hxRur(<UgSJu4FJ@w(61yuv*?|1^A?~u2~|vXAsX5x zxa2T8I;=&a7Qu@(sM^uu%aP13z>{L?udlG9+typfru9~{B1oIowJq^YC>ATnnNs|G zlbBNX(tzsQ%f`l~OLOu4OHO*4v${x`c1%vjHt0F3co{ZmlS6r_X}Mt1cD(y^8{1{J z|63B=7}UuMG1gglj<Nt(KR#Wa(Wz^VmkN{C+^9ke*6MtX)DcLENqx}Zi&=Z_FQr=K z9Xic$^Xc~J*Z14-lS5V~p#$%?Jh@Q9A4z8{RX?Ro^sM@`XuSRM0niD|q$UkWjWQ&; z5nZwGa%M4W2mQONXSaVOFd^$(B{kN@oIufUYc8`7ZwwgDXeyV4l=RnYd~a2s*O${V za)LYIvgqyeW*P%!2o3IsJM}VgQ=1tV9T}ZYaT7=g_W7O(Oqg4<`4h%B&o>n!bGPT7 zdP364pVK9R9kzPyT0e44UwQtHi)@ol09EQ(Ht;{b^A7v_|MdkO!R`w*DbCREDV@sb z8Zls2uU=(4F1kp1)GxD}e(l3zR3Ee#o`1nEz4TIh?%8L>v^;Fz`PR3rvAN0KdgHsS zj*V7@bu!ru5`Cd0=S$FktUK!?ie|2?Cy$`MQ)&T5CdGW4!;n(KhXS4fK)u_V<};;Y zN=!8Y>^t0J&+a~A&*=Bl$M@KVRZDEk`lYsNS(7c%jbBw_Mw92I2Heo-b*R)+-=!e} zEqLhkqvjCe92vqKQ#!E%AqY(|uOu$&#FxJGCA<Fm>+Lh2`HbCh#~pV2?YC>w;)vI) zIih>TPB4>D&zaL4d0Mm$4kD<;+-hQR4Co|%sU&@z$SI^xamd^Ay_n!)w_-amd`Clh zMN<k_>>lkA9@tkceG&O$-$m(IbWrKjMt^eognkmf%h&c=O&gupdf!M2^FcC)Nal+u z_#>zVvzfa_Xho8n)prn*bGkgZ9s)0`>6Z|n=JI3hI&G$(`cu|UoKVSS)IX{p&M>wl zhM+#rNXjXG$LS7zBV!82nT*be3=C<Q%G7_DuJ}d9B<d$%{PK&^&Im%nyoOQD511hJ zE8!B=Ss2eq6b}v#I-?r+*oKLRO;DKB#04B~i!q*aT6fH4itB5^Um1aVK$ppaH>6YW ztU(Y8C7q-VhO<jDs|~Ul1@qNumOpfgGo|%;h0-SpW3?$kXdbJ6Tz*-d-l9<fkI)@_ z0dT4DvY=4k0yCEo_=_0*#x)LCXg-ahoWcW3i2*!uf-c4lB#OZS?HD$Sz3+l{`fa&8 zGg^71AhPQr<}sDZnaZLSc<&dIH+X2Hq?MnqhvY_DU@phF;{2avuvSuJPG34XX_lr= zDZJMu)dgs!U(3sV78j993HdQ`RCpx|8s{`2slm(Pil7KG%gu2FMAY{XhpLV2!8O3E zDTxML@CZLDmpACd*}ardXZ#e!IhPgvW|}_+<8P42B#9)=*!fIp(diR*I7D+8GV3fc zHPL&CfxP345QX%K(V0{xDl;?_%nM0@7>Ye=DoujO3-36DCvi|%D!4~b1nSu3H;@?- z6IQ$RVYO3$pyH3|HttlVQ=uI@WsZ)Pu`w`%i;U6EkaQ7YpgB9KiZ`m=Ij0|3j2fOM zP+2N;bPB1HUrZ;~BwrJl0w^fvGYUgx#e_~h08VHF;GZ7twD0Ymv|qh=g>_C>*)1=P zSYySIZEvcy+mF^t;+F=*P8<!(F^E#7DItS0$AfpZjxCV%=Z3h<u)=<BW!4@(IBvHb zO524!FG>wSpM7`VR@?AMhyABZS2+_qgjecShA!bAB5|zoQGkgK$ve6;;S>wb8*|9| znOwo<Me7urT~L0yU0?Nj+f=Rvn;+c>$tu&Xou><UDp+Dd&eN`_*I|N4`)W(K*wq!6 z+8ODM_QS~s?f$8!L_z2<Da(R!f^d;^xBg%lF4l0Q-7f`^^a%#+poJj~UYKG&ACf&l zgz`uroo)|9*k}Pqf=e&=@b7@Yox(!_^iSGZ%%CS2hD-<>fYpmQUiML84xh|GLa`w& zG4Da_agi2zlxdUZ;>L^Y{QC3M(dw3S4KP_vGNz{0=0m|Is1jQAV*box73LU{nA58N zsNir2g-L0F`q-#$-YsjiYgS)vhY#x5kVa7?d3t+$bY!YtJI<0K79J)v0~*--wKEN! z71EixSmT3BlEOe`Bw6+8@uw}NxKkRy-6&EoBRyENlAUR-Hp}Xzqk6X_Fz83Nhrt=$ z<YO=?1zV;Ch1kndnLr<@fDD>RG}MoPRD)JtM-;|ympIBL@)dAmy#0B^vnY(-Cwxy! z`i_e|Tz!t>B0B0!s3o%Mo6SUSac9aA0D`ZBIb@LytCJDjNC~NP=YT8#L{j5BqL8m6 zNcw9(F(CU?PAwGa@l!B)4f;7v_+YZfu_hrh(3Rj!slXyRnQ#89HY9bq1%;@SG!tL^ zoU&Yfe@~ZXj~uqtlD6Qli<k0}9?%Taa$o#AOD|u^w!BSu%UwtK@=Ruu@iIh{biOei zj0uz-Kh<GqU93T(fD3k@-Se43)IaqCw8^LY;^t*6|6y%l_Vi2lv`)pWY?mal7|%?u zd}37;*6(N#Otsbo_1dt689gXQbf*~6jjG#AB(<qt#3T2<03!5F-nq5#r2N=W6|@rp zT#*5oM3fkMM*0Oe3P%ohYMiPR!}qbCMw@7DGb9Q2>JoyBRag2(G>H~mj2r!Sot@ff z^zk>0RYdP?n+!@!{KhGe7l<hyQ>a6sztd)@BvqN?00kEEt~3EN*po=+cx5E*^YpQ6 z)k>tYh59yECKQJ|KAJ#4Ah#HDwtcQ}vms`G6~QyUOa8}Fy5T%5jTVx!fQ|(ii!;wu zWh{A1nVvA2Nx6jjT9hYA8pA93@B#~Qg%+I9=H3a6yk~_0e8x-FQsa`^AFAyZZ4@TW z9G7+;D%OHgl%KiPHhtjjRwuOwz9>3b$RuBq3L2n2-lShCPE*9?VKk01(NNo6tU*8o z)fUAodFrVjBNZ|jRpZ*6FFRwxUh}rK*8ix~I^C+%7`l{N8sBVSbjSuPb!_>}GFx?K zy)`YBgf|;kss&RMVk~t{*s<sOtWS*R#)(#IsL=v{L~1O)HfF1@tFm+7zQ!Kc<!uws z>%Ir>bWq%}nb4-09nhcTHNSw?V&hdfR@KtHN!)#orfi|^xKol;Uso_+Vk}bq_c2+1 z4wDSf3~9)R92uE*)ppAoP*YT{`Lo&y9>ST?0_^@H<91Xq6_P0RF$J8|75RII=JxRE z!zA+nxj6=b;LSV|T5-d;U$CC=Nx$a##5fVhBH`*da>%~*Z{M(e`w!Zd(@(eN=0;nh z&5w7!>3z0x)oNc~a%vOC!4r=^W*s_)-llqr6j@x8xR8MA743V^-hFo9z(ITLu}AIN z>)v7)Ui?~n|F3+|?!Eg?sq$Fn($YJ3zG%1J@;zI#W}UtEvMZdi;lfIuT$QBv(I-sK ze~2e}jVh{`_j3_3IX!Os`kqo5>9hdqTuKacD9VERG1IT<dJyS-Ufyt;x2H+9vz_~n zxj*CN$XG^<=%en|(pY0_mbciZHEnj<+IC&^RWpm8Vj5MvCpE=sfoa6X`6Tlgc2Q&s z3@6#CH{bZiH|(B!?y(&^cG%BLr}t%-U1opr7k^<-=(0(eZlvwiG~`jtCm1-B(oKtg zRqTs3gh9vnap_YIvK}du>XMirBx71qOXb{@F5~`w(j&y`>z5>{<#LZxyy7r)L*N4} ztF|0*6AzBW#(aSv`SwcF7brWyGZJtDkOg@;?NY_s`?9U-e?q#SJGH5)yLguG^>vG- zH2;;FOYH^<U5u1mi1rYRm#wUx*P0(pNjQj8>bO@)jUm_K$m;%tD1_F+IaMacXu}c9 ziy568TdDZPh}PnXQ?*$!uG6(Gq27e3JS^R<8<B!FerH{m9Q|XEl8<#Rs+vIkhBGD= z1|}qzu2R==CrqvSbKKy?5r+97@SN0y$&A!9eIstbMV=VAB3|f<?${S=yxoZwa4y8e ztf;80vMHU;PQ$lSW;3S4kD;xD3%vYD7qsHW&(|BO(>dk!wAR?nnHYbOp5_!X{21no z<OyR3s)10?G_HF#nD-$Wot7$7q=%iUn-ny{vPe$5i9{ABsKkw01uhJ9MqGf!zRUB5 zF;j8){9N#a;|Etr&D6&;gq(l{E((!EJ85?&buxAWM;^%0F+sjQLY!EIJkI3=s&5$N zp%1{_!xKWD&N)ct5(EWLpbl%19j{^oKMCRqt1>7U2~h=;xKSl$;m22aeF7CAMNncX zdEpGY=+8Glm&B#eL(1hczwt`tG$~}HZ4PjBl4hR1Uog{Fb@o+)@R*XfUZPodd)XFA zK*vcC5VPQtRvij5ZFk@GBd@qSF1pw&o1-iaL;h0f+5L9UfYCt~_#iGPZWer`Op?x1 zqt+z`v`aE1<%uthk+C$o%#!d(e`<gW=?US%t35TXbYaiQjelKKk{b&Q=m5*p6A~_W znMFtVz&D9{4&M_y70NzZ99);C93HlRcv|`|t6J^Hdx!0}E=*aoj^=$`lFvx;)v!yh zP9V^zbVMRNy~oEHazQCk1F5Ub*^fKbFg4@-)t7Iz=9eF~FKmCeP3l(De|UP(cB~z; z*KTO^dKv3rSbWdMOO%+>Y8u_~qvT<N(dki^few5`xjw+l#O><Ji|pOC*IA=fr*N4d z3=hgMHtZ0BFkqN%Lemdr9?Ddmj0UTfWy|cwsy9lqrp9i~-0QfIl*Kp}5z1nKIDGOr zSKa|woFET9^YHdZ2B;GV^(6Qa1bs)#8`5_1Ds2ED7K0=7`x`hc3otQ*OVf_K(<ezs zRquxnn{`OdXqh^%Vp@oX%Y;gUm&QCdHNup5#Jnd;A_gCet+XZ$boJzg)`%LgNMk7L z7zZeziS=<9<Rl%e!Oo?FH8{}Md;Q=oX4oBl_vkxi*RH$TjvndJu_rNS6(JX0aYH*y zX!O=O^GpLEv_v{%oC|xCzLJ!aE=|-^2M$SUS)F2nJb(d9UQ%b+HPxp!cT&pp^d2$P z#e|;Rma)MhO-$6*s-()Gz!W8I${$o6p?ZU$IVGGn!p4E)pL#}FrxO^`drmwBQ)Df; zEx<y3XJf^C;8^#SK2XzckkrPuRujur>7`a9^&qspV#60fiVdYZt_{8psl7Rn>kzwL z6E6KlCg4nn*fxcDuK)l*07*naR60X_@P1lh9UqNP|L7Zq##3ILs(k1RIdbMk-(FWe z8FI%FH}~{}TUHk+d4>~4PPu+g(I}Vnoz-O=DgB%tm5)zO<c|L4+<|=|cN7NZGf}8G zXAE@(6YCVT0V_zSAo>TWS<fWoEH^%!4lNql)L~vheWF~^ogH#Fq?dXOdg@Z|;Dq() zw967nF*l2863di0QUajedV7-tVW83bTD_6LTB={2B$<!(k4gd}XUkf3(TJysaD)lr zIR@trP=bhItYb-vg>`m%_=JdJBV0a|;U<6V?YbxzMK<TGtFlK`RFmpcR<Ey+6qzp1 zs@KRM7)PbB9D!WFeysvW#Q0$NcBqm!ewgSVzQQx&P(Cu575<3rxPGEI*qruIIw_r) zs#^D-osq}lKa>;oBB>L~Hm|=kQOCqNR^TXe^55%qAx(IP^f?TDG3`LG?lTKMf|4HM zCH3?{fd(e`^xu=(_*<-T{eoI#dOxSQJ$jLqP*I32&<ggXOaw44z2+SM4iowiB6=6f z2ZRa|H#G|FEjZ7hB{+SGBZ%?vrd}!!HTcBE2d)b?%9oVJDo+^on<!3ZNTN)QHZdxt zUc=jo%HxEFbb4A#;BXTS^BNDMl7z-&5j8LD93Gw|wJ+}zlsL$wjxefYVET?U4cNu+ zSZ$g8DLZ(pHtw|F0E7D2m{irBHfpbZ*IHY$vcX38YK)djjnO_Twfd44G1a!T+UXxs zpVT>QkN@i-8-Hos+N#@}>3!(?<F=`}*0#TWr9E``pp_3S^|>4QKz;H*f5UuM_Q1HE z&)_vjHhF*PcPrpY;`qtRZ~^lOJNfIKP~s=@9Y&wDk&N`Be`C*}oxiNcHnd4afZXdO z(8Hxl2l^-EH)7-ICS4Lo`%_pR{uZF#KGfk>pg*Zc4ilncUcfl*@d^b-q31LNn=zCf zW4xjwlVrG5@cw)6aowS)(P(Xz?(NGjw{;s&v!&Acj85oho_X4~ow?oKaP^yP-G&Xe zQkM*_S-o2GD(M6kQv#C_p3KCgGg=0vmV=||d-v?MFMRHE)*+P%?|9d{ZO0|AwUsMZ z*+UQ9F9!A!2@3Su?YDj3PTR7@maTwc#lIe&$3i+^qCCb$KEU-V;S2ro@#vtPD267w zb%J!a*ZWc`8IPCMZ_wCVAt~uSsuvTIRu;2Ne@pAsHtKXNU+tx*Upk?W_6bMmr+HKV z5X$J$Sj!K|=v7Ob?V3x^unnuF$^;liNSOnFD#qKkcnUBA<JcYI4*0OMLD$pM<I>R0 z&CS|?UE&O;IG&tJyeA4%96xcmM5$=>_!gN=!oV~tO&^TTHOsVN)|J+JBT!RUqqSjM z*7hFJI#cm%T9ws&N$M^~V5*sImT*>cz1LWkl}=^Kucbk1RF-7z<wKei2+c}K1H+I` zYu>-69o_BB7t9WJs@D`iQ@#3yP7)Ck@=DWpqI`U{>c7VUxuQQ)Ce@@vy^?|+(U78X zb6S1=xCArGH8-x>s<zxJUWwKzo*RVp+F7Wd(^B`q$*74b=@3?(^Yy>#SebPCj_X8g zl};hn>x2Z-)dduw@v&Nkkk)BZNko*@^lEOdJRR2sgxUyesUEZ1kw>h1a-AJ()a9vy zn`ILEal;z<4%9Um%hWOKk&)~SRG)vKW;LkcfT<kqFqJ90$Z(EKW!A9Z!5us9Fmhp7 zV~}#jpRl}7)ex4s8F+$z;}T4Bp_ZFFE9@lWk*~+YXpSll=w&X+x`wflJfZCq2R{sB zi3{|^IfWXEtHRLQp+e~-t>j%`5Nj=n+8e>Lc^T6S-EkumipJR>m+H!3LZ9mP=#=;r ze@0x9;Vk5yACxONWBkB*nTSqjDC-;8cqao5-Sbjz1)Qwy1m<ZLK9{ym((kZJ3mZpB zLn|8#d79P+qYE-9aJi(Q!<Z}HhVl_u)>qLu13G?`zLWKDsq?IFpD%<mndLs;2ifAL z5GGhim;Xw<V`e8%^2J6)ApcZ(68QOE_~+0;fGJE;BUZU#<;Zv6K}&!APc7Gbz;b{3 zQ{8IWM(gxKA}DdTi7~mVQWC3j_j$a#>Y)!6o4=upip7N!zyI-%N#D(C`>VhCTh}AT zU>mA#h(8proMehCcW_zwvnVx5AY6j$kd8I?NGiCP0Syq}<GPg0A@#_)1hg2<IC$nd zl&tC;#dMD*JEh7sj((yUH-a!RoK~Zosam)O<7E`_M#rM}iOUe*P~J2uI)qU%hX3Ws zUfaB^(O%P3Z+9KY*nfXu$j(}-Bb(BXl`pE`MbX48ndRgk2?0*A9y(BJTPHf~<4^sg zP3(Tc{@{#Xu-@jicJ-!O=}64mSD)&)GgsF61l#pMsUW>0r@ka+CiT%}?l;U6n7bi- zASC7obt)qj0hd>vXCJ7&(J!=viN%Cp-Aq6z;Mt)(x7^R`q-^eADAQ0^sf*yMNmbih zsxG$)O$cwBy5HR*MgkHx96weEU6j5M`N^N;h|g=tkfKbX&)?WIWq<toNxNXZc2K<y zmEZ&3iBH^1zYE|3n$s@?=1J3kY~P6e!97*Be>faZF9cUs(t*aorI^kL1Nym5@F5QW zk<V_|TmN3JDr20pVpL_P)4pr!`e#cL2aInxs8gq7pVp*%3aMAwy$m9q(zPm1lYPJU zE)AfQcEj4Avx<&#=`0-3G2R*-9h$TOF$@_Hxg3B?3Fs@EmoIbL7W1GE#Q|wnIEYoc z+)r7++joH3nS{}%^7M-hsHQFn1&qemozgWrHDUc5(vo12?kuGb#tF<FK`5y(k`$Ku zApA&Jz*r<Y@RUiqpiGQi@B?2k`Ye=R!SUo4upn8Cv^ag3qorK*uTjC;ti^6Bf4iMs zak|xO(pjlRljjMjNl=LaAH?!ErOnLI?5I6I^|JlL^tbJ3uG`zLBQJytX|2~$I@;r~ zR3n9SK?B%`gFYfm)(XKEVu|!ILDtcFB$a)fajf8lO5Pz38iB`1IM4IYSKv**>*#1G zgw)H);}PR=pMce29D9H#ju4x^V|jYe8TYUYKhuXM=uZApzvPoEb^l%u6&G(vbGjWv zpaW9-#C-1T8?#kyI@De(wJ&r=thDq`J%mZ=&`KnB+{ibF(;H?eKP0ACEU9yq9N=sd zGu!J>62C_))B+Bf#g1FR>|XOeh#XK1WQk~g$)_g1S`;n`={u(_V}JS9O6lHA+4`nQ zyJJ`0{>v4plS;}56bkF7fE>fC_lPvjU<~<m!X$=d%ml$E`c|%7;UgN8<53-VuGhjQ z!}&;M1e5s*E!HYDnS~L7M9G90KUG>i(@%0_x~@)Rv%&!z$Ei@38ZA{;Fp28x1tT4~ zES{L7(NDtMjSHknsgkI!sd8A-Rw?{rg0HDjKgHN5xBY|3Dt&eePWVOL;ezSV_ClLd z*Cu=_Wcfu2NH27+B63qSOT-l0aluvgr1Z#k9_uR90gsG&SjbEAozRH`AH~LT;y|6D zZU=u?y@hMyPg{Y;#TxqQz}!{X#f0~$lK5s4GZQ_y7#HwU8M<BNt(8p3H<gPgh0Hu@ zyuu@xQ%N7;V%zr!AzAGU(oj1yG(BV+-rQ)7HFfs<ZG*0^gMMQ`7kk%VJZ%@f`wW{p zoU#`_Ek#OPW=I(*In*&0zxf|dSk0=GZMd<)uKLZ>?csmjYyFS(>y%TIWp%0Nf!oGx z`-hus{hOQYz}E(J-$#?;)?ApxLmTwS&RkMY*{KKah{x<Nyf8D~3Qr#w=y4DE(Pc5` z2zgHc+4U_@cXFhTC%9FJVe-80+qpw?tY6TnkYx>Ohx!{HpK`b7#xxJ9mpTjL5q^rR zP#2+vpZweu!Qk%oQyzXo2LuZ+F_{kPagk350fafr5i#?BA_g=Jfr~D>(EFE3^&{)n zueWc1<6rG-($_q!<Kp+W{>b}^D_;Kw>ps?D8`f{I6|2|ih`IEn%b?%=m@XhZuz#Pc zZ|Lagv;l?d>+82~{@cGfgW(<Tevj>z<TDpKU3~FH_Q<1;+H=o6Yfn7-u)XQp>$R|l z(Q*75!Xx-U;X(fDZ%^+NTATH2?1AY;fnt;{t#8`v*4d3`|5r)y*GLHDC3~^!K1oYI zEv9vst#00CHRb5_&fD`Zcd8#(->wbb`PwRVb>ERb`}SSW*e|_xhqbpPcMilTL&S@E zs&@D|fO?A3c)gv9wo5L##BRR%W;^rDGwt4c@3p`CyT7x82M>lZhYI~OG+>9($$01U z?#0HXy3aUQoIXfyRMvg`{p0qTudDs;MGvgmrDspuP1jG@hyJ+UHm}LrUwnMjzV)Lj z`@%P?w7$sO$9{R-R!AjhR;o=K8*=ui|5&5bWGVYo!TsK!)!9SOmfO4DIB8vCjM7#A z*83*>0?QG>{I@UEYCO%`&F`A9-~V*2)YOE8EH-^V+uUA2=C-c2?#>O?qEngUnWRtB zpq-!WP(kU$dG+aHMC+8G)O2XT^5%e^@r=}`WH|ZBMn~v$3z2!BrG!!c#>BS)4kmQ1 z#+9IALF_uUpA-_i2nJ>)B{$Wr{_#xp%VI#&<}^>LR;I7fC52^&58M8gSG#IMa2N7S zAKnMc4ar>GspHIxkXlAv2AeA|no%)>K?TkF_3NDx%O!+9CzC($sM~<i%;p=6THLm7 z-RhSW;*J3~>0*8t*2KY%8*?$-_+f_@etg5k#qf;*9y@P-nCRzsy96+IFMbr96N{%= z0Fx>@^4aJ7_$gxwcmP{Kq`!$nG{EmuBn5Q%(+=@tX^RjRsw!YSlfDAe-oxl_DcvD~ z3LQ4sn3IO_+9Q)aNC8tHI3ew^%shm=5UnhQ5}a|=Jj3e|G>IP1x5O7UAMy<4t9%WN z=YZ1Tl5{y%(Tbb@1WOtrKLwK++LbQifzgc}wLqRv9+;UYX=832<^#N8t~-BA;V4%& zQ%DYUf*gjtmoD=R_y(Bx4qvmM#c=L3D{}(uaWF-B7OdV(oDf1pH*9X_5ghf7ANa|x ze|Q@zCoRZB202KGdd{a~AYYR34n&|xI{-2%Eo|CbH3(X>^=lA<LCdaaG)%l!N?k=W zM@SU^jE^Ankx(B<R_3DHv_+B~?5>AFLol(`$Iu`pIN?v05QjYe0UZgN5>FlDkW|9@ zflc<9^!=i-A<|6RnkIF5M!Sx0i0PqfX9IS&jdj;a5_Qz`MyYqYCZ_9jDa_eo!>BST zT_bgytbeq{YIWPO=OIXyjEol76Kl@3<vK!;lvaTrQW@heI7Z979sz)`G=wm@W*w5U zot>lh;{(%@w5YIOUOR1XSR<X!&zIZn9a4C&o4B3-r3#NBY#>xGkINl!Obm@D7`$62 zhwLp!AGDjE`G)N}bih8b@oiSK^<4YpMNPJ>E^nWEGH-WxOxezkF-bymVO?nW#pM_A zfi=V*@cZ|SHL)o?e`=Io4@6`LkM!lVonF4yK2-lMt6|^~fxe01=^&RWB~?Z@p}eBK zkY+&u?oU~qUMAw+F$sfLp1fUOeVL>+b@Tf4PIamw?*cAi5)68Ii%oGF-JM8^9gFNP zTmzX2TD;gNfBPA_IH6+LI*v{G@ka)MpM{~*?;jkpWfkN0_R}luuXGvCEMlQ+c9IKZ zoSY(Xk*|dyv+4xp8p;;c8|>2R8-|xEX>piPQ8egkvy3DDFrU%g3IjSNsYaM6UXYYI zgAO~TlJLB(_s7;D$&<G&y~frxt+2sfwO^h7qQfUY*>z-Bca{X*45<sVm1Y9pV&+V5 zSZ9@z5@JH+6C}?^Jrr+jvtIUW2>HOGN$a$vpOydV4Ykq>twEe~wPN)m9ZGi#GYNU$ zGJPWj&FK(?td#(#HJ3V1=yenHaRpXX01mmZ2kinTxJxmpKq3}wjrltJjjCU;^Q*Q? zy-?Tz&gygpgY-#_aIt`|71R3SvUAnnHrStxf8P31I*n4G9fo?^&QIy`qV(%^$yt?s zC3}lKliKZ*6=?8&Sa^_vj<lUL?h=5Mj?2|aXET$fF!%!?oV=)no*uB5rYpL|cPTvI zF_^-}3Ox%S0GPzTkasa)cvHF>buBGg-4x)$=X}qI9Z4H#@d=){Ipv<*yek8jDi^R5 z()HXuFeYZPZkg9*g7k;MTOAbnEYL}9#*Rom$EcVm__G*p5-fWDDLT4LCS#1}__a0H z*s(sHIuJv;9)>n?QJH0YTo9c1ZArU8=W0gbPpA+_al``0%D5Me(3pe_?WPOL?Mshj zb<|xtsnuqF(qCmao?9jT&(N0?YZ7SgItz_6cq9J*-EX8Ys&pKZBr-{7fy#m<(pDk0 zL)6x|c;V)5`h!X)$K~oL*kluYwe+=Ch{@x5uB3U@R(X+j@H&i6g@lV+!i1a)WoQ$= z@X>}H4C&ZD9hYCA6HaM>FP-9)*y0Rz0V&x+ozR#~%Z?JuUe2Mqc#>HZu3NLl{^XPY z-C89n^qc?Xqn-w@!N5gW$WYyaE;orKR26!TXaY<qX~&Yl^YR|XznM$Sgb5%EdMe(u z(&v>98VUrRAhZ*sM~u+lgjE<%fGpZH(8^cJskM2g6F&KlE|Y>-%OBM7W5$U;_;7%w ztx@4IgfBIYFSPGcuZ4V*9NKh@gZ4)qqfWuJtT=7TwqCZ@4&O0qBS(<(N$bK`Nv@we zVHdn@z4hLowS%|lST+)YQNjsyDm(9=M8w#koIU^9AzOPxwVnUA4faT8uZ=!gu6ds} zO@#C4gQIr(&n>skM_#tcmy~u90S#WalxW%qG{$VDT!RT2!dI{*&czOnM-CoDIB73r zC*Sm|Eb6fHn)OcH<;7`}>52w>OcJW^79d^axK{VOdoogoC#kYZ_3PkCh)~iA6u#Y# zAL&sXMc)qZ-@xm4N=A4cw~!0RwA3{{DK!~K#aw~WLi>Ni8{cTBZ`<xt(ck&@cYLAU zzI?eP*T(F&TW*nV=yU9bx8G=8Qp0hqqr-OXe8DMc(i(4tq?k8s+GGd!=@PJ}ebOg= zL`)-%30>WG>-WAVDd**O*_Bt?vZd|z;Dh(u61C|O=^BOse!)eT*b+%xiwKc+$_YHB zTzRzuQ71CG-(Yw5gQ_2h#}pS8X-a8K+9Bp;qv}Q4*0<>5bp3`hy>>uM=v7T;c*UBO zs+Q+p?g(Qgbz>ewS+eod(KBRE?L2I6xOj{AkF<ePHMAo(z!948dRc@B#w{ubKJkf9 z*glo<M?UfqmE(gxW-ul}&;JhNZCzu-smuhu{+FbWavN6nIxbZ~?ag_+^qeVO_$VHS zq?<eYbite$#%FKV8bt5&H*0OJF`AU7wT}7RzgOGs4_4T3zjs0^YclrDJ2igmlJxgo zm$B#e1g2p_ZQlOZcXSc!p|t((`zP!ZU#PL&2g~ejS4`RlNnOAG!by8bYXRs0?_$z- zvXcH;mI!e(YK}Lr*Tub$OE4w$FJAvtzq!-GMxWLiZH?9qtEFa1>KDfPw6>9ov81l} ze9Sx3(wZa6^^ZTW!y~#gAcy)2Nki+DaN2aSkJ^onAu7KRAcPuH%M99^k-rDJN9<Vr zMrS^|L+K+4=8~$4hdz+CB6Xb;bKSa-7)C10W&B_`cXf67>5$EvH@h9_XHEn}W_5fM z9$n8|UI-JLurQ^;2Y%*ZTv*7Qi+af=hQv)6zT>5Z#7A6w$94uS<PCVR1CKqvnKdrN z#QHO(IUl;7S)!tHiXU@rpTmP!$iN*9eKg|}xlKAq6FQDz%0eSQFI&MeH^@k>Z6<?i z70n@4H(1>=4x%!THNN(9ln+wTq5fx5_9_t;X`8Xc*h_mj#(P1FJ}BgpKt<#<5CXbU zF9M^NISKj2C==CoKr;dT1S>fBk#@m5lUd&g7Q~AK9f$CSGJq2$SfcmH!W<eq^Kodx zP{ypia04%V+feQ*M`e2GDIB!q5yF=^mV5$J$Sv|!4kh6zsOT8I<^W5e1mT|G3DEwU z`J93Ch>9Y2pW`2NYGi;LCRN3T;O-S*DkL_PBg0@20b2wQ=ql;vsg9HM1f`=Z;NeRi z{FBkjVBg)w)f1v_OR%0NgoiE)+~Enkctb}xm%)`?nVXm0Y)fBWri+$zgxU*>N}IMV z^_%Uo=F8=zY9!!_b#JpHy1ja8XrKH8P9Q7VHrT4QZ<h_)Q&xS(6~2J)IQp`}2~O$Z zm9B5GRhQo2aTfA>F2YXW7Gg~Rk`Hebo_ESFHCQg5{LTxyWwo-#_KjED@BC=k-n4#9 zw{UBBRvn#Be+a7|#o{eQ86Fy{zTFWInFJ=QJV>hpyrgfZ{o=tN*?GI}u?LU!+aF22 z!I6!ZO3J#y9+nQfyR}<eS*^}c%zS9LKn!R)DymGZuf^z#?H=D;52Y<92ACi9ce+Do z!m~jviucvtV9mOC(CZUAh7uUBnh6uxLkLgErVu_v1#k$$Gt@z<9n3yWwvs<OB_@tP zS9OW)pE_ziQgPt<7?3E-^yQT_aain&{2?=v_5@YhL$l?LW!9zzz|mtpQk0m}#JnkV zSc}Df0(d&hLFu9$AJ5pz<?XhDOM$ey%Er8eE`E{56X2T5i#%lj^a(>UAi5iNI(+4u zcl@$5;OOL)7S?jpWDTYngB|5Ym!skktOi#xsGM=EIvE(ybk_10to{r1=5@q1rJI%? z9eu|3>^oo=w_IT7x1VjxbLi*QhLH42B01<xZ^a)1>a_?H>elQ4q>uKLdd=CEyZc8P zOvNZb<dVfI1k$JI&+|cU`Dzib_;DMR6u>dn>ze)Ly46_=Qy9;Z6wc|4-h|#0eH_=4 z)T7Xex0n3XM=HN^k_fA*zE0>h&7eMdX3VB-v0u>WlMU#UonpYyCeO9gZCk}@t~R8q zBIq`Q=|DQdKZS9;33viNj)hI8Cv9tLgIzRnj(snCk5uTegb<TWmG1RrJM0~mZ?v|u zRxk5&rnlNNx!soKQbwiEOHCbgTJ)T<5o50M(#w>uVZs;FIGg&}Uo&wDdRBn>;F1tj z=4cjJK42uRY1+{dBt{lt6dnDSg8KXe#!O_^I;BPAQ_lTT{epTX^fs63OJ%OWoe|yr zl2laNLFXj~`_O2{mP^{XL6>UMK4&sTdoeXSHYvt4;b20O7Jk$NHjcbL2(R}=<6?ds z(upK3Xg7q@!yd<+4@D0J)D>_9gFV<z*CDO{`|2v&c}$WkS`=<tQf4~kFB1SFT!5bM z8S#d=W<t*gf4qArW>LDZ2#-U+9H~-_W7n0ZexkBMr<g>RGl~Tbg-9ymMqGRYAB|4L zyI*}>VCmC41*iyt+7u*kR92FdCO<Lgt`D{VS1A|_iwX}f&kErLhDkFUf<9>nXrTsr z)qZ^*DgvOvapM-PkV}1`kMsoQ?bm+ggLdAz=hzp&{AD{Vh87^ccm;v}tJJ1{>AmlD zNvd1Ef1CAbvFAE_!S0*Nv<g0W1Opvj%AP&4M*!lM56r()F`g#I7k>WXh);~lLCBm0 zmdFQnOtnYz)E=q#>FTlkQ8AqPb@y6cNAsN-tui2<oXRLWpv^qmD3Ui3&s?#RALJ{) z;tZJ!b}l!O7{+pNK(EFC;iLp7%O>o!%Ui@0NL%NFVw7wAo)SG%D~F|$W33H6m$!qr zNw2JeG2YX6j7TlscwR@g<yM=nwfYK4iNUee_W{ACs%q>t3j5%(16F=GoVe+DK>DDs zth4os>!rP;R*_ZzB?R;fyh)jtIOIixBR)hFY_n7E{zNN(Kpc#|OZKGi^ZBzJf*Sxa zklu{<`X)>8FV`i)m#o!>oG$6+K8*q0Z1|Hy>PsaEQ=v(-razt!3gm_j+Csl3co&9% zR?rHzKoj2>uh+r4xTjL60fI}B$%{dq4twm;NBp9zGq#=K3=-P)kQg9${_qa1VbZp4 znWUU0y~jKm>A!pK`k`HO{afwd@A<ktC{-HaNH*=TQtCTerK;mhT|juToqg_W)Hg{L zlGY;hUmYFC>`q-+w`HrCtm@}rrflA_MRT)pSJm;-i!WHK=D@!2Ps(X=Y5V^Jv;>nf z{Zgx;(`hM{y#!~NCvnD7wbN?FcwXClmXaU(>{y%)l}l{<iZ@V$JQ2)OH%h-VbqQ4) zFmM>py-zGnW`bnT;a<B^b*K2E`dCFvgPiD_Hjvfi96_g2L;RHYpa1!vOTYJHQg=7x z%qQTezxdBZBjf$6X@WGN@+4;9VvvhY)IOA^FC*r2S8qyl8|D3Kgz$29xFc-`^rN|) zBgXT$eq3o+@0hYptFyLC3}n{3sN8643jNN6a4=*Zeo0Iw>65<hb(+_Uk58#iY13^& zlG0=aZ>CO^>HdS|wq>nOl(*+>mk#{_`-;+6k{95M27CNoaMr~D5lMV2AJY>9R?+#q z)gOCC(yhZ**HY(mYhP2lniE~fC)FBL*`pGI*llIiTYT-pA}^I=1A8vy^yNgNx>Tk+ zMWl)YUPnqB-cyr@tbe>;YoaNutEp7o)5#yTFaISA*H8y>lHT-enH_9A(=yA>7Cw-M z_;?nlpLXUO<8owv6B($yVH!L0P+<bYP;JcTMQq?r7wo`caDy3*iVc{}Fr$H|?~E!t z;w6M!FbGU+H{j<RhBj|Dd+_6%%L%~&UfLjS3P02sK_?9IKp$y2$r@>nY|o1^%0=`Q zT1$I2(U#S~Ts4LA1<?nF9oji_IO2v+h-!(*e8$b^X37V60WLTup|3!%(6V^f&xN!+ zw^)aPG!Vo%F{ZvwQ+VU-2u3K6Gsimx7hthPrg6+85cr%@`3vpN1lBsTpss^*XAYd? zDf~k0<f|JY#*VaeN^jChB_%HAUDS7<4+{^5@Y9U5UJk+0gD3z3UXDY4Ua#aqT%2&8 z*En}O@mKN8>iF>Uu<{QLX9kUjD}l!sIPidyp9=zpG<gn^Fz^4}5@6(1XhIAU&g9mN z$1?-Zg&4+x7%A^!<8i6dl{Z?;X=hu0*=p-9*FuJ#l5jF)B9r^oQo%vd_#K6Wi>4$4 zr~ovw*Icl}nxreLT1?AOY>Hf!4z%DzeFMfTcPU-&v%m*oJsq>*nUJn)-(bJd^y`}Z z&2F4j7Ahnp5WK!=scpLCLtaq|$q`N_4OGJDR@c~Ko8Ry*?{JD^V;84P6ED@ufG~PS zx`^Zy48dqT<S7GU_t2!>vv<N?zplaFw6)Hj?XS1*N@t$#aZ&sLCy_Y8N#sd6mgW(@ zlS*IPSg(EX;1BJ(&WEge--~u%_n`gpnm5?ttyk%0+tv2Mc%5lK&~DmMV`sJG?T6Cg zhu&#uSz50_SG2_rD2d&p3XkX#ifHC*rpTO0$t+&!gna0t!S1NpZrdt1JDa#%6FWRZ zT~Wy@eRKeXVBmIlg_}LW2>1$dDh&7u=YKH1^#?0@N`qUQ7~QX_*kX5P9uZ>@$fUE8 zHAqSqFfG{PF;Z}#BVp0#8(P^#T-M%dM~)uDK@91Z#kK8-Z;m&4f?A3}9f4WBa=9-I z#9~5lSVqJ^59#FXZn)2wVsd9(XWJ-uKMt;UG@(8yS7A8o7nsml4X)GHpqmh{-Ck)I zt}nNBt&*&i#6H?@jt)!u<H(dfv|raf>UcR)m{a_Gz)<I{I_!&W(dq9<bCo6zI^NJb zIc(qWxyydi_poiOS!?IipJ5x@)>(VS601$sXhNu?K$<ANQbV3HfJ}>#H{30C8tG+L z`^5LHtQH2X{PZiARAO2T)Xe0V^+*Lp+eYcxU8X@$lhZ-<t7CAC`ZO_B9p}QDz8*=4 z_3ISI67{>aHBy76dZA5%3Joy9u7O#Xq1HC6vQ-lYZB30>*yYQ;-7RVym?!ah<uUES z+fY&+QYw?xiUXZh73x^Z=?7(x@x}LCD8Um=grm)EkTgVEWsub+A}NW6zoYURyRQ05 zYpQJUK9-|kRno8Tswh;>jz_3yg$jP^26~bogMKtKRN|t#5&naB;z|3ZZ}*9WaLn#s zBBmsW`Y%7C#f0Z1u*D&Xipd!ylG??ZSgW1!tmJ{mr5I#MGs#mMhyIC7)+L~qwMuUt z;}l*@<ek>gH}>jMLN;ztui+cgNuP}5^f8?-fJy4^zGFoA@N1Denc=ZvZS+pq64^-w zezg5i2Uq~+?Q73;+emYhUEai`bm1wDxf1edCR~F=C@xs3`XMKm0$&W$88mJSIj{(# zlJL;v^+VtDg`UqH6rrv##)|^aZ_m9@E*=Nz3po&&tHB;)i(jGL5mR*W!2TUvgr_J2 zk54a9F?_H`oWQ!hD15{|?>i<MR0>D<Li}>Wo4SDxNG9$`O-^#DtH#S3%^&~zZ~xZ5 z`~6#ekvOIcL0RyWt1WUjK%MI02jBmGo$ML3pZxTv)+31}7OXxG0k`miho}qLp$|6J zFzz2qOLXxa(&yfbdXP7yPX!plVLzGiY)--nHuvwhTmGRZwGk~w^RO7vs9#|r6LEQ7 z>Y={HCxS{_Sm?;j<32&0jPdjXggpgA`n(;JKBCk31QUhL;<9C07o6K{T~CkNXh+cT zIGP%^t=G0_jH<TXclMivL%l5MGWxT<mOgF5)}Ez1L_|x+vjf(%XTn;`*o{(5+MGUg z=a`*)mgd>lw%V>Qioua@u(7V39eYOe7{#@B$*@f;E@+{=;{r0wK~<K*J1aMe9Ez;7 zbAqD7Gn)9VEF=30eu8nZ1eO<FC}}%OLeB5lSnU^dkE^fU)je)c^-S7F&S|rM*lYHb z_7>o?tBD6g9MR4@ewW($CL;RM#Hv?;B<#^dbn%-v_1YK9EKFq%?$>33`wuwtqFa~f zo^$Sbl72qZe)NMMxZdU!QdPEM*)nH@EL*Wc>N1|UTO`T6dF$zR?s?~l0sTPet3>>m zj;oIzI;3zNwtwGV`?+hcvrS?!XT)IkK2h^O{2qJgL8;rg&JOM0Z_hpZjH?*x?(VUt zpL|m5#0zzNJDkRu$q*;?|BQ$7x3PMO-EihdCB*ciz0@n|^1)rYcV$FPRYE4x@!V3g z!pmVgm$6-456DkyWtLwlspxP-pM=)vPK9e;cZTNcy0Efq(01<awA}}~wE?UXd}L;k ziB*CNxG|ys3IMT=%vBcx#N1E%lj8YNgaS8AG}LZjShK`_9KW}|^{sZp4L7JynCV|& zK7Hy_pRz-$8^F982HKp)Q$R*uunAL|KJ+vn?n&GBjS~LQ+_a}RZ5vl*?fVZ@+FD5| zpT0h84?YJE!0fVfr|eltHzR;`<5iRPmdhtym-DAktDz}9%;qoOT4guCV?xrbVlsCG z9nxeAS)l!wq|K_2JC?SmUM!Q^BDGDq!dH1E>04-)%vlmejwh=#c`mzt=5|{;veTx< zNBpFFN3T>ZRdiZ)Q?IYvP&vbx<U@{iY27nq>FRa5cviwJQ&m!FfRF`|da3B84NVEq zrM2;n8i#yNdZnj3baA*gVW)M0yxNQk&m>oElN04q6V_mL68I}un9yk^=+xFG#V0sa zx!%UxxA}OdSwQGwlZ3@s6~Ya|Ka6h}>MuX|J#3U=hXKr+H7y%$v;!E;)PI=I%t=tw zv3~t}Zx?)1-|^!IW16-APQGC(<Bw(l@M0$nOlJ)70EYn<7);<n&CFAv4;o-jV@N}( zKnd<eMa$=LCM8BP_ovje#?hGW>lem%(IxagzB2w%NBv*!(9DM6G-a%{y4PFTp`G*w z>1@`*;)w|_CandW{}e9Gyg^76oqi$DC$zC%t_vI&Wjt{pfp!EWv@t+KRUG_WfJ6A9 zi^#|$;K(<A@Bm>h152Oga|yY}^7c312~N^Yl#~TyF@N+&uIE{B@GZ)epB|4O%QQ!I zL%*YMbU{bl)Hv{jEy(~j>q)WuM1dGX{Ve!1PdKUZFd-oDpb1rpkVOcim3LxSTHJ(! z4<E`lvB{FW6{e6C0q$f^pL2uM5km<ki6l~1(`Nf$`=8w>T`tuMFrX9TV)?SK5CfX3 z=tj7};Mgc||B#z{9mLG*r6cU4AN^g2pt0Z|;6pfYaPb*Z#E`}B)J=kX9t345t55u9 z#Y4p`GE`Vqiy{~3N(hT@`KBc)L`PX{JXPRx@S;3+20$_7V(qHrikqKK;@abf$L-Ka znf30`t<&8{q{gAnHr7?xQR$_YkYq55-WjH$aKZ$-C|a5#^@sX&*|DeWV|%}CTZRr; zuWqn@uy5Etz4CQ-<jgl&_0o-&u4z^Wm9|awQ?@kMXP>`s%ytb*H)N(v7a@+>wP!Xu zW5M$&i9d<9D8{6o%yOCepo3sh6PP08q!yss3%j7|Y;{x>DiP{QC<_=sEFzguyJRch zYS^JxQI~@4_zG2kaM;L%h5@a;H`Q6$Qq#6sOtSlPPuoaJ!<`}}Nk~7_X~yggjx+Sn zY4d>iC^yvbXLkG|eZh+ggS1F{TdN&9(&3#uOz2m`z<lnKMAh2WE3De<tB9hlde5&I zyiO<IqLV>ou_mvD)<}o+J}#|SSuuFiQ>krhP@{apfJE8mq;Iy$zVyBZYpQ{%2^s9> zhK$PPCDE0uHr<ORNzh>%8y*m|Ow4F;LephTXjBK-5qIu+sK4H!ib>0*gzPTnwKF?7 zHD-^FJZldPJZ05lOgEHEYEul(hIGBXx8?oTWRkWKeTz?N$QhWCqX&BI=y#s5>CRru zHg2-s`c2l}@sw3)0m04Lx{z7<paDpO+vu^39o<u5tGAWensf6AirIwnsYwIjxEL=7 z4rlH0Ug?mNGP?Tq2CLR4Qkf=2l}dMo>SVd<cDdlH6~|abiw$&t&JGWL%g$c$F>9;8 z#PfNvWmXJNZS?+yHpqadjG?ZoXslYd9Q)v{06}^XKXPy8?H?z4I7%2pIlt@^ou8E| zmk(9{yuG<bQpwtoK)PBns{FOlp!fqL&SP=R^kp!}73+y&I-y^rd#2<guA-XYeTOI! z5#$RH?B*XmddQEGtzNxay57R2BgK(9tn!Y@O^+lKdNo01vdU#nGw~LOn9D9YASIGD z7f6X)1Wk&>^UcG{fjsp2hUy_Sz-UILMwJ>~rP_(RB@u#$-=xyYVz);6)q$g4L@8(_ zn+ZQ6N$3_yPeUqkxJ4foYWGcbl{Pe-u~w<;z&Kq3q3(E&s_hQzD0+EwyEaRK0n3b; z{War0ug%jHCbIz-=~6v8g?=o=v1khBC2dZRlcJ9$L1^sJ9B&UU<ZFPOK^<YEOZ)~` zv3)Mwr7#hmcl^b0CwWK05-{o;W#e@MTuB+BatL)Bzw%4JWan%@%eur!zVq(8?bh3G zvx_g>VW0b}zxJr_z3)Ez`+xef_3QG_MoDJ2w=U6SKIj`nvZzhtXP?G9{1ARXANH7Z z^7>dO8mNB=94u*W^+m(r@Q~i3r<hLa^Qjv3pK1_E7B2u#j92-P)iKr7tv|BVF*uYO zJlwAc2bt!dMQ*`C)XL4{F7}%v5#%>;r)cO4{KOw`<`3wWQhB!M;?LTK3VZSCel6z2 zgwb58dSl);?$CPT)?sH#BT>uPGNnz_mP=B0;d@TEhBmDUWQJcqZjXNbfQ>&qX4M-1 zRU$UlnYAPL4cW%Gw%dUp4%^foF$uJJ+x7Igt$AI8HLk6&z9Y1Aksx})Pb4vDCHdl6 z=rQonm(MeT_iVoe$on$#Fv&-NNGFD{UQw_oKir8<-$cs^oeym(vsLwFJ|FIv3ZrlD z9&#P~*R1CVb;f?{A&qbJ%8|@iWW3#tcw|q09xZfH{zMf0^fjMJC_c`c{D=R{BKYOq zI$<P9#VukKa{{kTN5H2fdH2lIPl@SKD}ji1m$+N8YL)9??e6Zf!_xKp-EV)(ZvIan zw#%=$+*NQePI3t$dgWo%?Ao<ko0AoGtr*Si%cQ<Tn?~*JOS~;UEj{j6UZs;xZSA&o z%T^t&AGQHW@bBI8vhM5Xw>H7YxyF2HI4)5OZ~#{^KC<xDHxfF~2K};zO%ljiFUIm4 ztat2?HXt6bmwO(wbuDM<Vs{CaDB``+6Me_-&uOe3)BJD9E?fT#a#fp3`ol_%yGvWu zze%t2woS_=ojYv*_}z!45-UhdM%n=<Ee&;HET#?2PHE{^fREvidn<TYPtBi0k;V{L zz<~XjHZh)i?zuu5fP?7<vkw0l?zlJ?=|CUEDM}s0o>is`K|@<AO&{e!wsDalYBBD8 zqQVA-Q+C0&ob5TBwoA^M_R9osyi$Tz%{jaBylMM~TeYUih|zo(60&B${ho0#n$xy* zofwB&fIs_Ene96&H5+11@4q#u7MMyTpmoK9XdqVg`C5Gc@Zk#EuS*G|DyoH~Z~oF* zNG^EPCj^ALxeW1oS?ZL>#QKYE|6>QNU6%}^_G?^aa-dUd*pwucs|87>$^=~MpC$F2 z9osFH9DUM*f1U(TmTOZ|x|>x`Qo6IMOcKp$oszU{x8)`}mA`%BH*-`rc9f3J9|-J> zj7YUbW<)16+SE^paVtE&X3-qAW1_)^R!Q=iU4r6T;)OkfC)$|b(>JnCr4NH97^wVU z5N_D8!I_i5N5(My6hC0e6JVKhz+8-Oy!nQ?j300qXI|>fC5OcZ252;d#Sk`{h?j5d zz!NVFXx`+xs}qR<O5bx8tlX+<Bw0PG4FZ_B8k<yOHPkV-6OsNYPVb)rLWaR9((i3s zZ^cX6`1yK(V1)BO++k)b-TJPO1<qx;kX9&f5N2U+K!6PGTC@<7|56j2LLL_TGq3Y} zR{-A5EKUML57OK|UrF3xczcSVS?P%IlqYGRe6aKOGQ&<@>y3~Ed<N{a*>dqze9a6- z(n<VEBX!a919-*fd6AT<3q??^g=0<~&<UOXf>fAvyo-%5#+4V|m&k)c!YHl26CT3_ z*O@2rVrFG#5;pjRC;m87*et%4Ro)cwRXRh0l-PwBX!Cg)z)nDEgz;N9Vy3mY7Fb#Z z7hMA-EHKTMs?88Tlf;mQ#8-vkMlV7-{c@{@@hs!;@}nSvC$0{x?~pz(Y@A<BBiyMW z9T(a4f~7|!SrU!hr<bm<>5W^|tHi~!Iw2(vrg*U-|7et6aq-fQbH$!RR^BPK2{GMD zRIWkCCr)2)c^!$EaR*b(OCegIDTVaPOqr<2pXd;SKox(>ibgv&GHw6QLmXKYvq+Mp zp~5Ijz2fLic~ebdl7tv5CDf7`wD%pp%ieeNUaK1)w4?hD+RnjY`{Ig=Z0}juTJ`eH zlE!QnbeVK)n%#diZ};z)zM{q@wq<3x?K(1KPe`}jwcF@;NOGXsql)n<^hu3^IWrh0 zGB}`J<*+2(XzR*XC8WnX5@5N|2&OX(E7xC34O1AxM>?FEq+xmq1oFHzfKf?@c(rg~ z(KM~Wb5fF-jcNnUR&Rsag^dFNRf0{G1jR{{Gz);daK@=8OCR0}LOPRtBH4{%Y%SGf z{ovtFr>lKQYa#ww_!jU%`nr4j#L(_^=5wR!rm9cKOY(%igSeBr?mS(6C*&+3h8d8Q z^c?0MIA&v8$1J^8db-4f<w$ub3mDLJ!ny#kxzQ!u#wFE!s23@ayzT4P0#wpb71Hgs zT!J85rMq=gdzrN~)#-AN3fnre!FKiTGj!vn1OxNg2NddvI(ny<G|=&?qo-dMA6q-= zq9MzT##!sm4Oy2i!YI>%In%72bT@)uY-*LK3?5^L`)%J>9<h{|2IV>qR;i<A`Sadr zLr+dyTfc5VSK2j}yR<{Ps#5xKYpuU;#5!MW)u5({%Br+YjA&G8DYwr4oZa7BXJbp6 z)YPO$t6ICYnt17{@=_g5>TkIuXe#SgOJA}sA}gzxx`AW%)ZvfV1#AAsT52y+T1d~S z8;^_rh0YyR%3n5J_%Y}*!SNk&2J={FlITk7OmWUSRZ54qQzQ-4QB+Ew+XpLev}<dx za7H}~H_8GPJPhUn_xkSxdnjP<$LJ%xo}O|t!R?7F!QfOD+yv$M0O(OkZhhq||7_p< z=C}N4+~0imvv$RmSGs>8ACll>W8*G~`B#7W89SiG`UgMwLHnKG`5m8>pgU}#=7bc^ zCUpj-@`<eSi58jUWyB;%d8vsV-<09FHgxK>!vU;kg};@ra$)0$2`rOBHe#7%#cBmC z^EMdQNJ6^`4lkR4i26gHQYYNKx{MG;b)D35V8|!$3k2^ftXh{@d5aj(VpKTI4t25z z3D=K!oR|R5rIHz4fR%Y^m*vC+socETs@Jn=s)=l*4^V<*X1U3cL}9>*DfSO8;W=mc z1fUQm0+E{wGsSSBzl?R1@c2fY^W*bPL(v~%Eru_)&mVrFJ|XKDh_g6hNh*ANrhOBk z{Jn2co8G!*vwil@KW(RP-CF2du8}@k>Qr2Su^>2e+csTF*lPdnfBcdC;qQLjZn*9` z-?(jRYP2tZ{tM3Jy88OJ*!9<5Yk&B$-?dwAyUl*@|N27>y^?ZKJmc!G-*Lm6?a%(` zf7l~BM*cDRag5d53hjkF6x=Br!iG#*7z#2%KV~*rG4aw8_&^~_xH0`CD2ON4T|kwu z%$dM;Lh}mJM;<1_k@v?u5E^J&Q>T6-X9EYtK#&9)7uv2mTSu}riXD4OIzN2@h4hog z#rA32e%%UdUQs79$pDkR*3Np%3VY(^9?N#&s&P+Yx}KS^O*b^z(zEL9$V)l`E8K$z zgF3CIwbj=B(5OgYp21idQtp@aI@a(YH$p6YCttH)0gz`bdi=frOx(z8jr$%vE(Y;; zIAFD*ECOy=V|K%OEl34Eq4~-^x{UC9I?eT)JDMaNXm-8)zQ2FmZat(8Sj`Wh8RD3u zdvVI{ZP?4wKLYW<`9d>si}A{N!A4;?<pi;lVjLiqTBjr3Bie+i)*R(D^_xfK)+0u9 zo7xzcjv_SF+|*)w#2{uIY|^Qf7k0j2FTU`CUG>JRCB>Lg8Z<u;qmj)XE*<RZ>b5<5 z_u5M@?Y4~@H(Iy)VaA;{&1HwR4(sdf@wm_*J*bVOX5sAbmpgh?#h7M(P{`K>C+;MG zCHci?sUeGBiOKdqqkGq$x3VP{TB^ET<7B<9Y}{%q8n@Ub>)z?8k%VT|F)F4Vb(ZfD z7;W+;+1(QS>C$iQidJp#vThcWM&odsn9+3-uN@kha5Wo|)>th!uWk1^hS#CF5?7S4 zQtyZ>fT$l56OO)ivF4t8?y)=WxMNl@#{FUm&RL$P@B!`6=1ev^qSC~i45z}(l|D{Q z9Xh5p$FiKtK&lOf(k=utG@Q0KT{2-``C+B~zh9}b^S5U0um4~~YB+R%g*Mty&wux$ z7545oXY8F<PdejSJ)|$KesF(<y;*8FP${rk@K;?pWvx=z@kXif_`w6591;1Ndh`$J z0@qO(RKYAHeG#@exwFf$*e9_QXs&>BfX;F%3NwR3e4V!CW?L??^!|IaFwW?tOUjn! z-z33{dYf*3&Khfj@YW2jKw(Z722KtA#LDZ=va0&!Y6s$7NZn;_@+C=+s`Jl{dspj? z;sgXEw3L-3_P{`g1Vcu}(A51SQY+UxCN)sYcIYU9crXeN&BPqv(Ng%9AAAI$sIM@X zgW8C2G8u*<Dly{RjBolg+<=8?O_{|xE|(WZ1}3U8@MjJa--H2np{5kJ_`B2&jnH;7 zQye>X7_eMKsL@&Z2%9+YML5xeAs)shU?H8=0&(%dPz7Ivae%)tm<3!8uP_Xq8m0AC z+o0c*y<CC-2)5uyFwBJb0;W9!;wUvUPO{B>2rSS+AcTJ~vHv39p)<J71j3CpQBFY` zI`ns}(V_qz{;Yr8&C{kd;P3c^3&QD(RKCQGJ16s?hcS#i@im{;(In5A&a%<ceT>r^ z9tnvlhnI0818?Iv6W#PqvfdMlb4YMZI0Y6A1&4`~xac0k%vW{57vwuVGS7d)o`h_o znlTZ1AR)LH+aof$VJ-C{kLq-+yg@&&YyiYCF_sue?$J79ksAq*9$sjnVuFVPbg$?i zah}RM!J#NLkrm_QU%q7Jci*9-eH`ORa$S|Le2Eml|MIVyz3vT8*MM#?9oA&Z=YK`< z(opJEnOo|_ArtQOBhOmxmv6CDx437jY;F`;ievRxU1;MUdY4!5A`~93koH*~3;0l+ zUTIZfC)HED+^Y$`E=u_M4bmB;1^+X>_4d`>qC<HY3Xg)3ok=Ts>y;%mI%2EVMF6ks zd)9tY%;y~=`)oowoc3w*d2nRh{&DGf_QW<V>{e_Q^BGkT%#=Z=2BkcB@3u-idr98@ zKknWG%&z0O_pCcP2ZRAIh=WKZ0t9moB1KZBWKmhR<fymSdn;SsPiy<z@7uTb?z7+8 z>-5%swq;AU6)fqAwsN4DGe}Sb14!gJh%*>qFaeX({{Gdc@0__4F`#678<=~}=}=u= zU7f0{tGl4(7urVb5cX>Ov0W>Pn|H*@SJ~&dTrYhSGl{AWEb^6n)rd!|mYdFHA27t^ z7eB=tM3ALP$N*0r^>N{rT8Mba`6$33Vb;k<PT?vGxhWUN8S$EHKo1~*mL{|`SF6y! z_VR?r44!lyPRIx;z?;#pk_e7>G)ae~PvH^?!&A}b&8cMo9JIz0XIyx?ux_4rd<4zd z3GXKCN1i;>Y)cj`KvS$%MNVAuB7D?9JXgK*=c577#6{HN_he6X)}{UV*7rJgrcZY= z<3hu6PS_1r8MRY8cMi6#5d`dE!{Ueg%(fqAqR@%`NLWX<5|wokbm!#0ZDb;N|JotD zxuL*5w)#N=uzB9}1f4oUXz+C{Xx@C21)93hO~~p`V*tQLG+3x1W8W#?=}bqD;M2_w zOjeNT{3+)!0=yHC>|@S_AeG&Aw(7lkl(9S4&4jFjb~vx|h?7<mOl?|KS5@0`G?<T} z(S7Pbg{{QQMnQj<oh$3NJuL;+h5)6kmK7?0x_r?q3!Eir&r_dSQjcJIF(oGq97f!} zAcV4ZJ9zew?5bs-M<_jq@0r$EPC?1S7x8Kn&`eO&Hk5VP^<`sbP=uvCGrfS&V}~E{ zfZC`w19Wu0ZfK5eDY(M05N4bsaRIl+6!Gl<!gsZ8;p6qE@`8v4?qP%tmr+EOh(EeB z(N?Gddt%2T9f8nu&pmHn{_>aX=+R@@V{`FHmEc4t8XY`%(7y7Ouh^4MKE+00u^(+t zPd3x>W4heuOycCGiQlTLFfOYf4dn`BhThdy)YgJYn_{$=vw7h!Vu&)HicgwO!h_+d z`t$g(pWCBMG8IhudrI<@pxbT3(T-(4r@TbsG#r3cx8CLOS&Rv*{7S}_0vi7eobVEw za>+vgVNT46Y=6!MUU}I@s%sqo!Nw!jJ-^P%-t)e3Lg;{J76Q<K?0vd}4nICtroMAu z)5!^oG;<2(gyklk{yP^y?)M}RB5_8kGfBk6+rjcPDgRHFe1`ZqQF39xE8>>~S3Sf% zC1?Tt^2a`It5&V@Hs_Okk_v>z6)gtk^nSGQn0@7;ujAKmJAV9Q=c)HT@PMa#`nl(< z1tC^HDrT>~_Bv*#TG5`qmP^m-xZt;$zEoyo3hj>DZubS@n`rAPj_2gafDL&h=y{%( z^dr(}yb)hInfzyJ5Gtgi#i&{cE4>E8=r<LFh^)gPo${Y5q3T<G=uBXb%U69k{cw^8 zJqlwi@Cwmd!jw)QiV(eR2#FCg4`X_2&I(LsV4kh3iTcw90O?e;vf6yBUKo^8RHyF1 zr)oiom9PQZjad!fL?)n<w1P1Q?cwA3+{u9!VQ=pbHI)DWKmbWZK~x)y|BIaBsM2DQ zF+%+gbkKMqoHReob;@P5$jMidwffC$Sn?u2Ur1{J*N5g4tj5CzEMcMn{+bgiOgSzt z8Mgm<6GzDDJk`%0KHqC!-E+~pP-akk^@p<A{;ADH_F7AyHT8Jv&>oU{6zYzT^7p@_ zy(j~Z1Jd%JjU%0}g;@7=_jI9g+{%&f8n;tggaVEh;-^lYaL83vy6lV1aLu9kckJj< zxAQEs91^g+_`>tHa`i9S<}Fv*-ra9{8<w!TysX^gojiF8t>(kl(9q!Hh1LzSU#g2! z<Ec^Ejn=7!0p>+*+)r};T#Kz5#!hUu{miD2vrm(-Ll(fy$xO^41dV4Nv%!<!LlNj3 zTq3;I@@uc+d4=Vbui)fi6>viis`WMVuCw!9C#`3o)3z<X-}|=nZ5QpEkH2BZ&s?xI z%jet29=L|hHPu1JPBd|f5iRI=vM?g4zO<^M)K(=nqhlU1d?wE^<p!R3#2e~N5~t!w z!_!YWr~LHl^_k;$S)cI72<<Dhhf9PsLHShA>c-BsW$c?jD7KgPU=Np*7GHS;Enm8> zy@&Jd(U-$U`o6||`z99+>V)FcJ2`ROq6=8f{`=QTu-iR^<)l1&?4_WwdgMgDeg2^m zG@<jX9vjc~^M`Evt^!-J5F68IQXfLQTBmWu7O@-j(#*1aW9kt=Gw0tF4Re8{g8UWw zX>+uowb9DXyk@0m_p%<ks8xxNue#TzuHZJ>a~%TOm)X2(VIxMkBy-CItC68@gwU^8 zVHNl1^fl3Znv?n@9yr7e^(jl?xYGC1H=euDX~z!iv<6OX^salCF~EeRNqO`TJ>oNI zidpb}3W~C+zf-@bK2CfqewGHmzSY(wbe=bFp2v~D;zTW3X)`On;>ceD=L$|@DXskD z+(*ysxaUNDdwv8{u!Ar?DR>HW;ISO8$kIpJ$J$6lSS}$dN>U@t6Qm#jNQdh<D?Wf^ zHdkXV69TU*DQrsM8VRa#5^Ug!Fvj`3pR^jIW$4i>*<pz@1T*B(EnzMK=)^0$q<@uW zoC}_+I~OL4A#kqMtnn)m5Gzd1*SAsz6pq51{;m*f1`;F(T!4qa-o0*<r^1y7KaQ{J z*uN>a=&rUbc;0`K+O^3kzu-r~w8nO=71iG;4*}8|P1@jDp2Rn7HuIcF@EkRsJ&bgr zxDLzduWuDqPh}Cqy?*!}?^IM(0P*?LSMYJ~<SY1uW5}V>lB$c5rhjVE#Q%`T*c_Bt zxXLL+@3G6!TZo;(jw-ivB7g`BToGO=QqB|elPrKoLlQrK2(td+_?E_kXc-!)7<x3- zCA|S-tdj?mVLFNdCQL)ePlS#wMp8ap>@vtse8G)(_~f#c9r<<yt6_&CMuZ+PT|XU6 zEfXxq^Khe~S{mZTd<CzYn*?^gWy2riB0_0kr3sXjD@GrMKC?G(@WAV1@NMZDv3;%i z_J2OzV{?nJPsFZT9)emI*od~uOBK!2J9FOM4}zC-1NkRvo9siceBI__pR5h7h0`Zb zS_^dg{G2WJ{D${f$&$^MS2maA?AXKb>NqrsRy{qk@1i}72Kaddjy)Lq*QP`tnmfg4 z#)&qeV#k&#Df(E?oG&d<hGcZs8w|X~YdJ@A3K4)uGD<_z1z8BF2AT8?j36*(Kpb*G zG`y4i%O+4Bk?si)uRq1(TkzB+I!uY4^CW(zBVqwngc_|nlV~3`t93ie3KadFw<A8_ zAP+T5l|A4U5U%4Wv2Z$e^0W_T^-TOV5uJ$>tkX?r?Kq}9mM&h%QA%z&SG7=9p)MRm zCl}QEd(sw#;LNg^5Dj(KCBv9&IMr+2EoZD}d8uW%pt7{03^N2=szQb@9vig3dpTnV zP&(6ETdoBDxvhaCaIM3(j|p9SPoBNdn6X_=8G8VmkH2&^mrySKS!>|}ibu{pk4X&# zuU-)LYuR-dW9uRx;T{G_6_zN8AlkKy@KBg;saM!+onUkvZMAMR{|gbWY2hK4P|(WI zVDDP7&03BQ*z(>+ju>G>7d%A&MNEz=$~x_ITbCU_%s{`P#P+j+bD|2(^o7{3?qyPT z4Ex9VXp~j3;f40-2m@td*-{oY2%q6swTV!FA^`(gKAO{L4qWKkVGFA72NMxyHck^4 z{^;AuNdE(!_!J*%kr;Ms=~3wmV|mBq6w{3H3?H$rX%JUi&0r@_?OcPi@|BPt(s~*D zba4gkTLZkR%gY38U7n=f^Vyd%fu#q|%P4r_A9-Z?B7;4*llH|ge$gI({0Uo%X@F0C z>QnY(1YXY}<Z>QUe4NT90of0K_%K@1|KvyEKJ>v4*n))%?Q@^|Tq^GD>g7^W#khV9 zQM?XaRYsN0%L=}OQpe#tOb`<qINjabHwd)I^)xCUFuYzIMo6p4da-z4PRxi?93P)} zSCvU?O9B_=8&WAwf)lU`$`EjHv0Yvs8jJ!k11C7bUC!U(nPK{w%<He(5J$JqKK&#o zlX|W4x*KiIh4VJ>>MK@s%k4xaHhC+5mHQ{*#H(@<dcbwIIbB}r8RhDTMr>!4Vl>ip z=uHKdx(K`o5WyjC9ZCS3)^Bjy`Jy3sXY+HuA(0k_U;pQSv6o(cnSQj~zV)5&*i+ae zz4smOz$8bT{q^7dogF%I*i#>CY_vCb@3wamw(Y8I_Kk0U#|2}H>lfM8TerHl=Cj+k zqj5C=+{Bitc*OCWu7Fw8#=nRUXfs~8P|)#l(mtY<M^Expnr!-X#GLn-&YwwsN|*3q zPVDe0-dEJA;!Kz@cm~wylYyaZY0W<FN)xRRb6Nwv%%ix%-Z$x)C>B@dTW`mp_4ja$ zS&P{u-5~SUelGf^3jmf7l4HZFods|!+GU!j$e;g1r0oGlaV7l?Fnx?7kAYq`y2_Xr z0#tJ}xGD=PR|7i04>-r%#(Ys2;pQ$hV_xxy!smo9)Q5~{0_<}Q@{_;f;j|$CxmEeL zVQvt#cX09G4-R(Po{l2=%5v-h_gHK9ASVYyoR6*=u>W_L@TRvE2>;_p|Gn(t-RHsz zQ$QLw_mlsnIrUR&PvU!RuuAh;g6KJO=Fw*tpuybgC)7&0uSflSQDG7G*!wWAanTko zsN-*eb#j-;X)Xlaz3UCT@#b4-KlyfojiG+V!BT|G5=3gwtT}_`4&@b9u28Xf$zofv zay52OtF0GpX^oq$t>-;oDJZxdQ+QZ+KZw8nwcSKG1isI~jQSexVV>TxA4Wj?y}u1B z0y}I7GaH$rIhI$s!U`KcX8F|{LqdR57SFZYSANXL%o5f(8b@XJ>O6Bpoi;mtwv9u! z@V%sWxHtEo!UW<FCb5D>UjXD>VM`a*SaoIG&=LQ{(Ahn;`9IMn&UDbkx1;TOy4bT1 z7jCYgFbfbO%|zv+N!Ud;g#PMZWF{d1K7pWFuYdDRU398Bjm(oFY(}Uo|JO0Ip%+-! zUfNw?I}lvU?Ku|KtBU)LCy}Nlj3mLfCnS#2D<288)u*N1<&-ZCC&@PJrSCC*e2mRG z8+Fo`VYH3Q8eg>X)`OfTZy`NBAO#6ZJ*t0=e>&K?o^{E5HkF>Ys+z;BW$;$KF_6if zi|>YqdIK>MY=l$nSJTmhzvghtLK}M2Syv%_$$Z-1606K#z<ASUgGV`;y7+1vDV7HG z)K2xTdWgcuupSxJeAc(GYw6SU9tF%&EYSsnoha@}$SmP=phISisSWRAN$Y~j1QiLW z-%cmIl(#<tJfzK;#AWF{?u9}pexj@1`{{$!_Y@;Y_4NUA7ZwDV)Dk?6cXV$em?!j_ zr`|)Y@S;GXu_nh)D+sLvv;?O$@C8!<Aj(cP1`TWePDsc<<SjXp@=-2n=ij-WF#`Sx z7VabS7-88M<_39;YhE|1X!2EkhKS(6co-FmB;!*(DXz*Xe$_ia;6!<}?o~L6g}?mu zlz)gz87Y%rGDtg+pH79z9<??Fw8jNe$X{>)q5QS3_MSuK6L7#x>LLNt5meae(xv0; zJvWaC!wV<e^hdnxk$=7wN30<K-1K-&?*bn=;c_E;*%JaJ5AqQ<qfW#t1+fxM1XU>> z9OEdJT=K1l0}9_^susgy4oM^)niEq$z;z(A{Fx}R@I+ge2~VK}%VM0Y<6WOj#9$HL zvFl2Q($0l8xlWMtnK*gFftf@LB%>5pwIU#jK`B)LXylCRe)3Pd-0yVQ)bE1nJ4m3~ z#$b8psxrG}Wf^qK*z=9O_Tp)5#tI$bpr^9ZlNa%m+ogffA77tmzqoM?LZG{><#Yet zj-Na4w~zj9)p~nw)BCJ+=@!eYK=_=;$m$hBdNCX@bV6cPeU;t1oI#kd=MQ(2zLSZj zf@8Ur=hRLVlZ#KGs)1L6|HxMwm<O2*={Tn}UDR30?z3)d9l!?E0GAR-1A35mX~w$1 zCE}n0t3H&8oM;zbfWsT#E`0WmLNJ5ic@R6p62iGa8b9ByavBH*oeS@|?ZUz8CuEuZ z9QQ)MC$v18euSOA!GV6CvUx~0napoUv-~I<9U9;lFT^&*82-&hO}&hu?bTvOkDs!7 z;@2@qstiEqPt*|pp>y@@;g2khgwC|^Q(5J{I&H97MTc4he-6FXZhg%cZT>wQ{8-QK zra}9oXY&o&t&de+2ehTl3p4g>HzSljJz&4{Fh`X@RoZGD*jW4OE_Loh_G{Ny*e6&0 zyzRYk*bZIP(NVODRCnO(wM-jO|B))qD0Z=odODwu2F>QJrx^`zuSMthEC{tj)srrk zXj^u*9XrN_6}`vp1eM!P{c3!!E-XhAqR7tDcMNX*sI9@~^DF1SV0&IZVS^W0h;RXB zhKn#u3OjB2;s9_!kG~FEwQ?0l+m<>%YC$ObmKwB1urck<`8v-!df&9VDhZ%x@4Wq~ z4LVP%&tPz+PBn;1Ae<Rs0OdP<31K$31f5Z4%7z4Z@Sob0Y=TQOK$9gcP<u1jG$d*; zZA8l={{eVj?cU3oEcQK;@FD!NTqqpX7ZC=U(@@V)tJ1Fg@|VBt!smA&z<U4t9`vKc zdk|=iI_jQ!C}4s9>Z`BWU;M>ixCZAZKlw?!`R1E!&+a{5#xeOg&x}Ht_$`H3D#FCR zsR+rd`X=@B!`u)YCr_fI#x3!uPk11>CRjs$zK(k4+ZPZ{lR#tfs`yRuf)HAD1AXYg z6u(sG$N5&@qHkS9CdCOpy&cj8P>14G#aF&G0G@(NBJ8H=vKb=zF46dML?1;T<5d45 zhMr_Na`HHu)SOCsWrr=_^CmZ~7g^^MbTIFIzh&Nf-7+`b66nArup9FnXE+feCq8qU zfRmR?KV%m23-~JB3rB|PW0b8j7q7-eqi8%ATm5tBt3@vdAew~8o?=WH#(a42=nrXh z@<m$yqZ{B!0^uh&Rr(NPM!$k~$)HH23Ap-$1e@`BO#{@MFJ%$kL|;91L|cE+Z#+=) zC9e971BVWI|D!nKW$z<+7e4+CZmPD6*p`)s^c}a}>VMz*?sr_UwRz(vUpVgFx6h;j z?flL7;tpQ*#KLd#5{9@F{W?+ji99+}7@jTxC>%UJg-HA7<`=^hKRQpB`i}nbNx4G# z)b66^%%4i4b}StMy^D5QfU;-rtwa69pibuKl#y!-!z&Et^26Y#_X}zm-88|YKe}ie zKT>3c<zX>6&^2hse#8Za&7pmJu>=oA0Kw3`5*j<yZh;7iLYtJI+G5~Huwsmm^1x)} z6MK#pJ@v(_zI>ib43WwkvE~foQx6PY;;#@{{zL@jP28RMo>iRXA$}jGH+DDm*pH5( z73(&C^XxS=x!-E$)L~hH+tq*1sv>**c(1*AUgaP^71$9IJb&@Irt_hPk*RmC<ULy_ zzGmDNbl1}2yPV68W&3%-!g|+C?&kvFQcOJ*AZ_bQH2g$!35aDXqlU}mC49NaI_Wf* zZoReZb+o8!?cEQ4z{hOSMYNM9o!VnL!Wrc?$e1c~OCnq!8iCR{TU5W8vC6Cqo2!N7 z=R!rz5%?<rh{*hQxmaa_7pVJoK?V*CG0Z8_k)AUFXk-wrN&3&(FbX~y*?5ixf}VOU z&S$<SC;kGdg>$RyhAk^>_u(eH{>l|@*IB`BTt>K`O9%@Y!_-HPIyQ1qP*{cejWWhP zAFoCONApYjP4n(259nt{$De5u{3`?tw_)ao-ZmmlXNZT=NF#Ex^5u}%nMKV{*+j}G z&2wCi*|aH~JWY}?8$K@OSdYso-&jaFU&1Sen?iFwa}tdI?8RJ<9e%@VQF@cTUO8rU z3<eZZ<Bu=GpfPQ@EN>q2h@WATX}b;8ylyoWT2F`mZan14eMC3$c0PG1%g$~tYVWMX zX7MsiAF{bKQbYF4nNZwO-IQHCZUe`6+R)lNM}Z0kUp%tUY#;&N_mEK(GV3xx35q3L z)Svvd0j{U|LWSv1eW5naG&j+ogq!O3Vmv+NCjqtI)qeFouB~Q~x%8I^S95W}*SB{; zQ-acrR&JCqgD6YsG`X(@G_Es=&trbBAudm_6L@-h8&JjI1W5vC$<OEsUF0O#VhPRn zg^RvDoj>))d=6gGh~Oi+#&^62RnPd1a{`d-QhpAf^twz?rZ?pxjnhx9fu!W%?H~L# zpY^nqPfs5g!9jG?{6=-JcZDgP>Q)7c^{9Nj-r)^Ac@O+SY%jZy>!kKP6d5Ocyzlb- z6@tt}KO&1yG~!1H)7LoX?JeaSnquOS&JC~ZXZ9tPkXO%l;-uM#!b^-0LBwY^!gMdn zL^VvIJ;Nk^grnd|odW4&)V~x%JPA2<9L*UgCIYUa5uCtJ@^Mdj=_Lu$yMJl|JL;!O z6?#cjkAHbT0v0M;w*UINxeS2}g<{BrFc`9k$&#i5VvHUZE^QnIbG#f!j|@s9Rz`!A zzdHtgpKS_Z`FREL&{Klx%XO)|BPcO*n5fdoX&A#j2!6ROT{sQ*XqQLZj1d*$YA{fH z0e3aD!GRI`$QrX>+ggr2XS8H*xY-Up@*~T`M)3dO$k@{x-;eP5N{)=p2c`_Gle5ah zi;pefq~eY!UoH&M`*5$q)kqab3-{5ED&n0>jrgr+wwN%tcidipkWvD%3xjReJ%nv1 z3|ve2B<;xov`+hzKbhi?09un)Elr$<NS@9kemL&r7<a2eeu?%o9k2fJh5cZ(%+ajw z8sHd?3a%rog2{w39&LAzOZgE(@S5YGLMI67TbK{B$P&5JU6rEEVbcG`o_&6a;0;%A z;Z|~Ny=9q@2q~wspKd;DFTJ{p`pckIwg%e3D*zHK&y;*s8sFH`ODLKGosXpD9dU~^ z^uQVXIB$yI-~;whSwt}KqM=)f*&1mC{rUDhJB)obw_1_#at8daUz%@ouw1io{)nyT znA)pnWQPmH;9ueJtvz|}|IT&u?DyAy#{S#Bf3Vm4xXi*)RUG{#|5P6Jb4r*)C-t9R zpED@SWKq-)46(or?E--OmlM4;aJ%;CaDmm;R$F85HhX!0iFLLgffij@5m8;_*^&Gj ztHb8$mRsIs!z|vqzK<Qm25x!oJc+hgySNyQvU0mvJ;zRWpF<0YOFOD`5&$hg$~NRD zP>7`h5m$Vp&6q4Qyv@dmHlb~ZQ2MX(ksobL+D*z$Z6;h)F-;DlzY-))yeaq+LaXiS z*^A~w7d#@GsJ@){NuynO7eEUG?|%RSU;5E*Rr+N(Po9O5gCua}qrRk}p}{`==}+5T zcirjcQzVp*eM^Ahq;X870rr6pyx;D9=e@Ra)k<%lD(e_bvmbg<E>pQ|<f$T!4+E@| z3j{^WKy&r0Y@RY+3GY~R32pN53zH%Flg7!RXVAXy=<4_Ngs_otRg*Uft;^7U)+I?Q zqo)U!4>dFk!BBoGqYH}!*J1OGzb|kJ9Vz0tE(`Y3K1^6uuUCK)O-Y#$!=q(?@|bW6 zw`ww#=7Emp)*?U|0@n=n7%8c=!oLW?htnnr(Yu`5b@Jlz#OErToYRK!lLC7@FSDYn z{qf&5DkA-qfMiK=^p$l1TK03?i|E+}&DDn}|Cu>KO>mzyL5vfhxe+5~X*d)6X>&sY z=wbS}aV{nq7clCf96~$d&FM+sB~3}%{8Ub9wD8kKg_`i|TP;k_tm8ev7OxH4k9Y30 z=Cfz*#_O-g495a%WzKTlHP^U?(qm6N;m7`q(e%_}IbGKP$%4GJ7xEX+k@pz9rUH^w zi7$v$9;MZvGtpED2~&AJ3cq^S>RgR1;pvG|YyRsvCMhS1GpQfhfST8vw{!B;lc|yo z_RyaoeH|%eHq%Wcl-hb)2d#P~rX9+eRdKpWMfG&d4~~5QqII4au!UDKXC<WRwQg&{ z-m{~xvZzRa$#7J?w5E_#N7#Mt!&AIhs6{4PygiI3+GrCW0a)!v4bSHxlNKUS2S|yF zOsfo)r+)bJdeJ*QM4S`hC;S!W8}%B`@hB$zgR2W{C1yy}ub%JXM9jg9cD#$S>#RO# zo$f2JM-Fx|k14i=)p@qECZ9C<n9>`xKH=~Al9#d+X2OAV`Uu0k;wXS`&2a)X^@8&h z;dRPijpd3P02R=l)F(;++|t~{;muCk7#iC$$3ZM<@AYz`L}jeRB!}!pOHf?FX3-o> zy44`0S+HOcHlLg9nI|7}p>)hX@_!V_h;WsaRh%YTW^;8+zNeQwn^E}T#3=X|fr~b_ zHUH42!pzGQbDa58WlOu6QZJn*`%a~d4E4a@uQB$>=4}eP-kIxU=4{0j#|DzXo88Ru z4*fk<fS_X4FQ6U0%0VfrF8ICYhIRH1{-_o}5g+6ZB7AP^=yt`9prjIWAK`M#Qd?Xn z#i;0anNRYQ5G8J~UM94kNOIwp*7Cg6OeQOzNSNjY(LTD=YxJ7@nTi~%CFM0HT{@2# zaJl7+aDEcc@}*oHTJS5@xbq=fR(RGo%;}lL*`ZtUzEY(X@3L{l1?F{y@4!SxH76-v zw7Ioip^Z#b@En8#6o-th?R@L(!X(PY1(;D?W`#qG+(f3Yo@q-GoH~v9Q9sE@<b8?v z(}J5@xv9Jq<jMo!Bq6ir7rGZh8qVRAMyqd-FW~gY1?CV6mpgOjjBm)PuZw;XMyuTl zj$|}(t|Ajd(w3Ilj!m03v1wQBFyg$!KW6zO9EGn=u&BduA?kFnB4avX6j@`a?rxxL zbUv;qq<)yPxU5Mrk~-6zIiocwr&#q*av9NH!;%ZH`SLM~JiK2D1DMB={6ugxKlb{9 zMtavcBr}}Siq4%`PT03)@h4L`B1y&tvOZoZ*#Cg5^a+RhI6H#8NVb`yX0)dVCr{6Z z%teWYE^yYo6aexQZS|*j-^gV$q%>~lS^4Q*%!hM|sDR4c5z!CjCcR+0w-jjLT}8;2 zS$W8bm_AnX6oCS@lBd2Wa!J}`eD{n6V@&iEEaefh9|fNV8wVRt0vzF{;*EiqPB7KG za8qV_>JJy-sA}XTR?2mXnE3K4+G=+~vR5@hXQU)Xj2Y>N_gI(Y>7Jzb&-g=aD4mY6 zMJ6Acc=|7a(x0$(u*o|QcU_#<$YbXnuJZ2~Pa2fve#8K8-ZcrkfB;&Hz)`0LIb=0V zyp)6214I}`NanF3Fg<CsgEB?Id&DC?N8yFH$^3KU#qY47SB@iAQ=D(loXE2uV=r%R zDU8oiI^RuF9c%U?;5@|W`q851{i{dpw{NJRkzkAV*h%akp11yYzt6tUMQ{(-Tx-S4 zuvu1KM?>P+kQhxc{7>+x8~l{V(T-v}+`>f-EC7123w!mV5S|rY5hprjKU1d#g!8-z zOvaj&pB+4B=LZ-7GTf4jNemZ;A#CfH7BseEUHjRE&@_2({7M^KwsXfT_=>;CgJ508 zq8&qNPU}w{?+~gyLo6yJB<UXRCSNW_U{^KUp4FLw(`XJcr<|uEOi*yi*%YAuSVi<G zJT>@fVW7Ukou1U0cKHt+ZNzqREkfKf+kfPk4`_?A>8xWNX(yqb>^&c8JYg%BFJZ9m zwgbdpw`zsQb&@7Hsr=Gd^oAVR$@2?53$ILodpfU)-$h&18T5^10Z#d<`Di&6*f(}@ zdF635qd^-J=79jjoy%>>+m>o$hhzQF`i_PX1kjkfp&bR@Wi87l$9MPV*)>c0ZCS-q z`^<`8wZ|@Ow;y#pZ>Rccs|=i>C6b{MCG?ZvEA7Yv+K=^1htK3)y=3Wv3UQ}^g(N)m zrZ5fG5`>*?=Qd^9Mnl7T8|+?c1Kk}6j|Z`dTZ~o|cCh=3Z1)%T+HUONp6RKyu96d0 zyR5<HE-z*xfv}~3K??iGT|=dIva1n|=x#QR3fT+M0H)zhd@4dp{65SDN9!oMDpMW6 zr90v8btkx4MpSpkac9~`AD4`1b7p8bEEHANSn9F41xn=lscmbcMeVm2SZZ$<hc0?q zTw9KjMOtnukAzVYQtKo_7@hD|-SIPX!Q5C3;+L0`5AkaD_*e{-KYu!Qe9t}ipvhiI zJ%n4P#aHQ)>0KmH8<m!N!-^GL&{V@W^e3*Uqd$-5Pu^l8zCBRS%Wx5P76cxF2UWhT zuh4NiyG8?jn1|u#W3A!|QJnn!lkbvXxQ~gyv{neDY9xp#FXoa#E*Nzl5sc)Y()&b} zdKL}?9F@^Yhya?JgQr4&Oek^Y9sIU6TzJtc*Z(Zv+%=%OpSI%(xMz7nc`aUQBRjDL ze8Wwa&*VPCM#1n^S95f~*9zAn*mk(^5d|ydDCDx`OTjcLu#kQmoVS~#+``TA6Cp3r ziGDTJl|J|IvCJz2AQ4tB+8!>?7$KEmOzU2vTksHeiPvZ{F^IbyIPo(E6Gz(L(riD= z1+ueoDwp@2z!rGn)!x?bCNx%2{;8bW{)a#KL3{ey=dcCc=m0{w98eZsgmLKbVLNc} zpxurZ^tIczp%MLxZD#S;#XTQSJoOa($UIE~V<i9&Jw*y9RRnUWPxYPP>24-~MB6}! zBn@f3|HV`OleuiVBrio)elhJt>0;r+L}a2E)A&h%Nt+X1<mG*hV1hy?_c|=Op~{Np zqQt?SAX*?a?dr0{*Hm-iZpJ!WFm;mXHmM&_y)|y{wIkcldu!AZOy&j@<|QIr<3Q!& z5v$-Xi38tm<*Ef`%rWS>c~)A*Nry8XHt3THaW(a*@(Z@;uc%YFNIs9ExGINScK8gi z+}q&-Qm~2Ue*RRhW?L7T-P=&a_(j?2FJC*=ZBHE2T(W{okOL|sC{R3gyvOcX-fefF z1zpNU*nJI!_VA$r+kPg{GSnXcm7koRs?X#zAx!9dqo1CRkSEa3lrC;QX#QBnC4<VN zuU9roIZ4UCDo&F~$SjZ=vvonC)<U{KP`GFe$RoV2ZoaKrvzn6z9rnnN9=4MwPK3En zf=dv*u(zlS2GIZ>Kxm_l+I4H!*@r&zQ7dCDHOR(O4}Eqib0P_#WeZ+)7Z&AH7UOLV zOlsa?MzYR415)>2u;I41NaB?-npB_Au(0k{I!=igm`h<Jdhqlk{+%i1qQW)5#=ABt zn9*^8aR!abe0U@FYr;*J5nj2r-cFru_e%(MhlbjT!s_d)tZojb1`@jCb=gjHw6K=C zY*0TD0K!c;&en}9pVw2UJtr!Fy~!tx;qS^U`POT?n-%FjC>5?aa+2X`Ij%0r<E7%H z^9ZrS@8y;+4eRZG7pW>2Ew|pAf60!&_8nU=bkOAqTDLn3s!$@11kw6WU1^z8SA3(j z_10N)%hOg{(?nlCc^@qjN%2G`HhO!?IJs79{oRW!f1ut<(00~1qC0SgMuPc6Wfa;= z7{k?{6`pzBhL&z)(pODrLUbO!_6EM^ktL4S9AQ)2#~+Px6h<1(7ulTCyi6NuGEXEY zA+k<_EMLCdIyx}LNZ%FhLPwBFAKS3fOGvDzoP^T~f4f{7mhx0tX6zC|Xf9MJGb7qf z)|?sV0$Jb*ZNb%So+@?PY1KKxQ7DZOvCkGBQ2^}#h)gXfsZ>k)P=)~H;TtWa58l)_ za=0RJNSDVm^BBp`6l4>2!Q6$Eq`(i@1^iP_DbA3e*MZ8S`k|gBgw`5P!h7W_9933* z`&=ifGtEWP=^banG$)M$X!m2Rlme5NlXf7%x*Q-AnId_3nUz2NxZndjD}WB9_cVb> zBvf0{L_=X7E-Z7L{3X*-2_g(->Q2ujEb;M2Abs%h^y$C}-edguoT4r!NR5{g3Mq9E zB#vk)vXee~C^!pTo;V(2z)pmYt?ckuAs~r@3QfxL5ss*#huHef0tk7I`F4oJ4NNVZ zl%G&j<p&rc&ZYjQ(|X4v*u^E**09QYcD{!8Hl<KTIB5v?G2vRuQLs>8b~o^AI(a<o zcn~L+LKCW04J+M4Ox3}0scvSMl{A_NPcVAvXxg~JxSELsIgBey8b9GMQ>S#IjT&ts z3^}hXV;kn>+b>>IVP(|C8<;ov+TO&TjXDKz^xE*}usygY&pv}0gOUDjYveZT_VzY= zeg850_RbUb)`HtDv*=38NAuZjn2A3;!;q)rnD`B&se8|Avn>nD&=AhEFTL7l^UJ^q zjcVa09Alv)?b2n8e(~vHeCRs}pkY$wCC6ydGH}5T^&GPWh1d{=(bVAk*};<iXFb)~ z`q6%bWPx`=+5mqv7u7@z*E6KiM8?Hxv~Psa)TayeNY;WKxAOxX(2;ThTNo<;(0Mp^ zm;RG<3|XyCFSK_4Fgt)I&*+8|<)jYxA3EwC*fm#f^vU~?V<+rz<8f@o_1Uueg+6f? zkM}a*o;clPC$aln&%$8!ie=t;zOiS&?cRULu2|iWbjSf^b-sgIgsNkMKSVMAh4+P0 zq+0NwSuwrZlloW3u6oL_5mU0T!rEClet&;HgPZbAx*wj>$ltJxi<IY)2lb#MUE5f! zF02@~<6KUdhalDmI)Zne&bK3IQEjbf0m{+E`)Y2rE4g9(d+kr#(_OEiMZ^M^iMyCj z?Ne=1_>VgLC|IQNsQ)FrkzTx0wVH*)eC(|^bNWELaX9}a1J!L)d#|12;v_A&G_aHw zRa#L^1@9yFdV8zA#cuWBye(GQQEIOqJZUSoU13L#@32#6nyhQ%BDCDOFcSLZb0KDi zzmB}QcH$z(S&RB;`{colPJ(FBe0Zc6!SoWFS8*pfsl)*vUM|gvUhtgwPJo?u{D?)g z+0%oTPd?hpMcDY(g$k;diSx_FA;9uY9;6ajp0w_fZim@1(rKJaabC$E(s8UpplaeU zV!gvUts*{3$^&h^P948XE85uD!YAOQeB@%?g?QqhJii<%_7mjnIEC=^ulfdTnX);g z$xGDY6x0BDY+PdFk(4KiAf9~NoY$dOUjj1lyiW@0OI2JQ+4XYK)+A^UB}ONFM9_b2 z{=jF&XgTXb!JsuK%%#~85DsZn2)=nl8iffy{Tbt81=@e=YtoAo*GNG~yz%A#Z1r5Y z*;VjfK@f;6X~Ks*a-CxFmy{FcFwTx!X3aY5+q=g`ZoR`3WUyDN$+TT}6H$rd8L0fE zRhls_oBJ5w@R1HnzlTs^Bc~8Kr=`A>&ukpYG#-g3)PKG`4xj><pyZS6S>Y!D@D9!1 zk9tmoT!=DJ$f%#{&WlFm1dsFQTW!zYeRlO#S9!cqejH6EKeey5t5@6a|K9J~@BaSp z+ur^AiI5abZ-VFl;a|RGO6{p<p0!(Uy2)<6`DSb5dr5u0ZGZ74+kfzo^S_S=!if}t zOo3lVbH2nk)tlonTD~bE2vHRw!QJ^Y*1i05o#G2u{W9M6v7@X0$}KV}o&F-sacKz% z%#|B5<8L3=WBrjzb7<9P%Yh!-jP1xOgsL6;82flXv!loQ-alx|ZmP1^cb{W(NZQVz zNP)Wx+N}hIi0XQdKJndoy35*6NExKc%OjZmMZKh*XMJ33cnVmmC7pO%(13{u;Ga9t z4NpKM9}7v4)MGehF%j`R`>B88+>^YV)bP8?DDMJ@tdk_P0*9gSA~wx`VRNx9u9VH= zVQcOjuy5@}qqrZTYAK_CV0PL~0b_Wvef`Z&+sFls^<2bQkB#hK<U+zXG0oARjB_fZ zG9IK{`qL=u<%&ENu=4!J|2W1<Fg{4Wc)P7rct9pLsxcKNQ#B==0=R%3=+^V+5G>c( z;e%*Ki%)P8y7V#MtY?kXjFxoNXkOm15>4m|`})_uVte=QbyyO_C|&qtqY@kc8hd&X z<Vffujp}{-_qoP(ADY#&|E$Y;wXoO86q(`iJ0e^d<k|n!e<B5y@x)Y2p(KJ5Yq;Y8 z!sC<Fo7dK81lA3il6jUt|3>@-8J;SsgOSReE}3FYe8pgx40>s&bv*H`m2OyT)%V}c z{X3zpC~!3w3@%wvW6iCdD4Dd`!Q(A{DPhOOUM{|y$B87J>KW^DzsH77{-r)to9LQ< z{+o2*=j#jM==8rdEXS1(Lg|FV7A`zrFlWRb<FdgkSEFpk8svpt*cV2|dE+KdNTVq8 z+#4u>Ko<7j?LD{ka}NQv!?*f|6KC`6*;f<ufuJN-(A_V$Z5^;HmJeAIw(TF?LEqRF zYNoV!#O}R;%_`PK$2jqsb(dMbES#Uvi}wrQSW;VO1J`}f&hCB6=A3>Bv#eT&!{0su zgdh;c=bb8#7@YZhP2mdb8Ga8NQZHIX)gH9>6Rl-%O}ZPmvE9=v^FQ-Y+F@?jzrgYb zYmGD8KL6KzdkEn(5Xr)Sy`*7XPEO>f^>kqirn=6&X@d<n13UKE%18-4N%9fiHMfY~ z>c{GtC+Mk5Qk6dTdy1_*WD8p1dMaEdHk>vA+_+zb|Fm3OhfJDZirqX8-|{NpRN`P? z7jzK4l1P+I<qBoX`a%QhfjPe9FRBx7lce(b0Q8a5++TAODS7H${XAR&EY)|Ix9}BU z<JnKW<uR_udT=1=p9H0}SNdJ)#1hh620`*;{KaX$>UmSg{!H+5;V<DTTbu{VPh}b5 zDVHq+X$4d37pDbJ!SXmf;~GiK<z)tjE3tx)=1kfARlb-%Fyw@Hz*HY1j(p@)7#^`J z)*L|#^68w%7aSsvi=M!Y0&Ru+eN4P4zS3sX2tg4tiNhls7#4c&Gov5DbcH#+kjaF& zO#_LlvBoyD|Lf5vTiW%O4fX2yRB#(sudsV>+Db)IL0&Ip<ONYqa(pBNSDAvN;_>$i z#Y@Z+D<_FC^G5`kN+B=huF22h|K+!B*W5ZgfBH1|1)S8J=54#$=H7E(U_uaBzhM(c z%9^dI=}eZ^0<v)7A`kNkI0ekd9Kx}4E!K1B5b=^Ss;<yhUGl(vE_})|P70^#UMDC< zHi;UE8k5Xttg6k}_M<)a^_MPKGpAb4G2!I~G%kAqLc%v<oM9w>_cfUP#&zYE-+$4L zooKXkOe(+m^e+1m6ZoDvYptk$751$cAWQ>>CiKziRdtnm4$%m{{9`U5L>RUJh451y zC3Yv5%@x92z1$oeHzg8^L`c&<m5mFqVeG&I$~R*dhkI;C+v~QiYNPurOxlxLh-fD} zJT)1Suqt$rK=67GwI8yUpVI129cCEFw1bxjpjk+`4Jmp8@yGtoM(Z5zf`sZY1Ou4h zGi$+s2qL9rV8sm!VJUA39r`f?qkQzOdftEJs1I=4HgEKWvH}~HE%AlJ5o|)AYHGF` zHcy0FJI5G>SHqGeTsnw$G=k4UZk@k+^Ll$_*KXUj@1U(;y)xU*)Ts_(labyvba0MV zY`3Ah@wy}@ys3OY1}qI-zqp{h&<ZMx>?nQ40XC0?tE^W<8c37w&eeHVQG|_l9j9dh zH=lX;mW7z9;6fs44|(UuqovzyS96|SUC$7P0CW%y%jG4D?Kc;H+-~UJVt?QKO>5*f z<zhCQ$laSj_#v^oP=BL>)963*r^+b)DJm<n`a9RyiLd@xmFdkN@>9KBUf0@XO&72? zFVaG14Y&+@3_xZ(Sm5nE*KB>6Iks}i8f)(Ew1VzdCb_F^VcqpM!Y%6UdyZRiDH}}H z%x<}fIKwV;9&PLFV7V2x57?E(@GE={sez0}4aYv0&ihq_-18FN6qRS^#CK{(JiMHN z-?{7~4^4pKi<l8%g3S(jKF9ARC=T2kcsBl~a|T-Y2mXV=?MK+$o9X3rcCR%Lw%Wel zBeuD6wVT;do)T~ul80bj#AHb*C-vrpr?fmBM={W>oEI!GqB3+R9LZ7N$|rHE=jhzj ziGPp!Igsq9=oUU4nh?#VPa^5zugQ0knMWgfHfwog(?$%&KO>YeArLB#r81SE<}Fa7 zU)c0QfP$y~WT#XY8im3KD0D*s5#ht1U=-?@nEnCBk0~k&fy&=uhqsV0L8`Bheia@q z;YhK^<=ro^R3pLZl9Ia00WQrfw3FGHmj{I(@^+WN^Y`eN4Iof{ECTZGxC<@IB{uNd ztJuEAF5gDXNNquwiT%+K$+1nn^O|*n1E6VXo<=4l9)nVZH!YkPak6KC8gtW^c*{|w zz!T<~21P>W*BDpdggcxBmZHb+EIf}CV=6|<35F2JI>npBO#;GW3yxTT@`QF0NU!7g zk39CMJ@~Wl@ninZ!xMmy{!1C>bcveg8nNApK;lnnT87hW@F@8`&84Bg`Rkvu>#x1m z1z>aM%&~_beT4BAQzv;r1JrRzQ^}E>0D)<|yj7_D37<Ox)1>iWrHM{RD}V1pqGx!j z_H{~7_V~N#Q`?!dbgyr)m2+xrr0JZ~)$>flOM?(>XCzI~CySI$F#g@=Ki-T3tg!Is zG~5BqDV^tp(ls^K_|!?u8{iHH?sVAmopZL~{qyYb_H)+uN)M-;O0B=_qFwRcTHAQ% zVmGg$Tzc9DZ1+>A?9jI{1JPZ<JOP2l#*D4FcCPLDmvacH(I8_`9V+g(rPtP3S8E>v z=w2V|85De62=t~F_;v;#kNy~+*ak*D@kz~pMInzveQaHnZ=bxL%amoaI%x{(Q;V64 zUx6YB`UAeut|~9GPu^5#zrr{c7r27YTHRhgnQ#BJ<BV-@?6L=#8|f0`yH^z1=N~{I ztbUdZ#ft)ewrj{fyQAA)KdspVE(Gcg7cmQ8<9`zb$JH_G2ik|$n?>~fGKC>U6kRe{ zmRznrXU<#~1WS0NMYGz;v17;VYT8d%SEsiz*>7I9Y=!OHv)dXuiO_&1plsk5qjcl_ zJ?JUzqD6~rAGX$|Nmxl=EI$=PLL1F_wQ<|asZ^!Yysfr&4(&H6m4r4qzGOd5pGd`Y zo@4ze4C{x%v(LjfeH1z<9fkPBWSx?Sd8teZiao>=;}q84XL(#es1um^bFU>08hA2C z@(*9JzQf0?`}H@ibklk(S-T3;Hr#WAQb_?9l9yoqWEqN0OX_ND%N2{=F7)9O=j@7x z1r9fjV|*8`5nnK!*u@ChP}&ka@^4lE4W2ISN)*4wp`R_s#4noXrOT%|5^QK6{+T|z z3L*3xTr60EaQN3g*k_GRoMc3B{M*0MWB>AK5gPl<QPuoukV`NXIIo5cz=4cy+sKJx z;y(2X8*nIN4bZ^4xC7@sxA)nDclFz|FBjN*@94KHRt(x7{9_qBp0WS%V2@q9dB~o7 zU7HbOah<4qlh)tZq(7an1mQw17aiVmuQeA|*t{c;S~bIIA0460Gx*&e5>lxTg63gJ zMR_QL4f*_gxooqBjj0#exKqE$1`H;fIxm)Tp&)DA{st=^p2vmu$w>gEXB8FKCtgSg ztAQwiuZ{&czJ9@X05hQlja&q}aD$DMae5=$5_kjuBzm@o^plJ7#7SPHdwleq$_Y-m za5bj_r%Ln_4%2+d%QB06RQg`l)x$+TlM$gDR+xW^W`RDM0|X&A^};+veVJ&HHIYa> z#nc$$0%>Tkb#SPv07LCa<AKaBDIfjom)t<<BJSCjv}X(){|xmid>Bs?A+&PSsXeV_ zd``u;HWTFZR5{#q2{^=)H^R%ygP&_b6IZ;T^1E<a&*WWjoGyI(cuyHL|Mol-hktnz zwtMy}5Z^uyYECaX3|iU<rJd6>=kqors5l?^lcx$I;v^f@6APjPZBrB^LE<F11|N5N zMA*?o-)Z7UPzsm7oY0TX@kmFC0h2sEKPFcyUtlCvIZiNm5pK?Q?wQVM6riFqy|)+p zSJ<;%2)_ogZ-t*ObGrqz4EMoI+7&5)kO^3xVL~M+p`v(6!24jpr*QL~1&~lDGaKg> ztTN=F?$Cf)f5m!R@CSeB3*%Avff*!9Q9S+WLXP)+;KMMQr}U_Liwqgjt6-vb#YaEv zWmlvaTd;H#Pn8z^97v2b&NCZ2{w0YU9#E2oubmmuXbTs&{bQ!Yj`Wn+x<y6ysZGW9 z_`zO#{sg8B*r8SJN}zD<f?@m2jTM%`mh7?9C+)3+$L${;+iiP$=UU0Ko2<CH-tsu6 zlF<brY5>tiJoQZe`p{Ut6>|yiSY2n|-rZ*hnz>|!BwH7dm&aHAMQ)9NMxPOSe0m5U z*>B3HOV%i8LOVjxIC-gUm)$YvI$K@70u4$gsM1zOGnB594kBE35;_Lqnh-wA2*7|| z`sYy9c@ifGp4H*;Pe=VFfTkD7py788?dM(XhiurD5Ga^eIur%8^Jip&(V|WL=ClEJ z(&%L?JMGlT`Q=lNC%frrGZz*V*;O0Yk@YabBHCG!q@J6|b#(G{QwxG;U53XoM+DLG zufb%1oE8lsLB_UjTyL+wwbu?EJC4?Lz4Nj9Vr}TTZNmg7PndppkD33dl}qU4v=)6S z6E_bs+0HPDLz9LHnSz~9DCZy>BMsHVcI%38q+8{e4NDCa*Df05XzCC`PZn{cQQ3Q$ z)E#Sct_G=)m&}gj!GL#FUvC=_Wd7}$hwQ12S2*#&zz5%ejK__o5G+SAdR*dD)$W5F zWt+2>8<+21YpqZ3vm$6&NV`1Q(q<=GI?&J#l_i=81N8?@z1{Xg(`f{-wYFg0jhqat zwT=rcE?}zO{$8tJd^<diZRAr=So^8dR#m>l%bmxCgy@Zv@vt>^qg8dT!?x8!2Nu5l z96w%O^I=;&=U%wDpMg#bpjkR_RR8RoKnan&@8-Qb({1e|9K}Wbu@pP=g&Y}m0W|%E zgw!DDq*m<&r<8c{=~~Q8PzExC*2BL(E*<PaYr6+Q^h3=LvoOCK+nFq=uzjslCW6Pb z1OYUgDr(E3p@0EVw#9?ML*JL~gkKo@93TJ^#Ch{kih9-Nlj5kJgCnjAA{Uc|uZe#Z zo%GX3jWI-|OUq*7j6-PzOJ&H8^MXws#xm)+SSd%{yL$&*Ls=xqr+jL!o{n<sG)7M! z_CFC)_iI8bm}DxF6tcNhg4Sgbn$d-*_z)DriKIAczZZL1c=IgeIGX26EQM)|_qya` zKAV^GkPkP*#~k{b*eQ`*Du2Nnb$X}MV(iLn+H6G|Hj@u!RY&U!e#Oj<KbkuGHU?(a zHz#fMPaze(a-Z;Rj5Q``0?)LUFjYOcg#__F9ufQS6kjDNCc;@kF##{xD7<97lQ=F= zmVY{pM@nKwe?66_m;k5WY1^P8c{-&?J9#EN;K+q{P1c`#e!D&L=wtT5_rH%mL7Q$0 zQyD^ARC{zD<@wdGf87oqI_!&#K};UVq(=S1g?8`Vce}P_6Sf%zqX1q%a`=e7h{p5J zyz73eV{Uhv(_b&{c$qm;QRrWi;tF526Yt-JTl7z(KkYj>Q-2^TB263HBTycX8{^0H z;_K*_K<Z@?ak8?&+7>Ug5zK6ru4=GF*Ir}A6_uPAQJzWOQ{}Au6n7R*CDPnW^B~8~ z=L^huY3p4rLw4}VbGG@xg;urdjCH)pi6r`p1K(@6y7lFD&Ce~d7cMkf-~J)1zqP`y zd2of5VMZf5z00rr#1T957=nr`2JG6OYp|9*m=gPb8{-{o4}_Cd>+@~trdoUJTi6di zCtJ`-acJ*OE-iX}+yJuJZ5pR2v8H^k;d~zHLkK{TDWm0FWcROPp$JcjglVVr)V$|c zRDwymdM$7x)DTl&H`HVIez?ZIvhzGAxk_!-JoUwSwr!!{YO^niOXNYuy6!G)L^ls` zK{y!-K$ah3n+Wl9@d>{Ab*y-f;^N1%fipxo7A>l`qbSf+B5aX;^rxSE%zpO44_F<i zO3t;Mb(2L}&owq4wT6`qwsF%Id-L_z&<<R}+@sHS?tI0MqBpEq;m-m;1uNXluHdrI zQzuT)9(xgPW2bm=y)WV=;I2Rz{q1jk!!Pfei-utjC-`b=Yq+owvmDHIvunT{I**oX z7H@*}cES@)Dd-6I#0<6V=3SLHN@stEX-6&|LqqzYWhxqif)5)o`E|F20wfieLAa5} zoPI>}eBLvdQ<NKE9dP=;{<-H<dDm@LdCPTHfS|ve@QPBDAm+>VGh_Wk<;p2<I!YSL zfXLWitw*MdGd9If_e*nB-4QZdmoA^0du`<~CM`LI(Vk~FZyB_&KUQQvdq<w#x{a9$ z;p$Gl`II#ELyppl{=dIe=4+^`@)7&;e;KkzUnsJ26i5E_x4O{q&9mS7i!wWZA<zEw zi>3DL&H_8t(r>@;UZkv4#GTg+*t>7z!gb=DYg2y``<noNqVioz{mqsx<I<%w9T$iP zJfBxwYGqsRvUA7~`uBXt<`iOH&&N^5ZV^}f=~|lrgOHkc<gu2kE4tk-^wrtXlbmAe zn`?ue>#S&SDR!OVY5H<s*T*>={grd1Go|J-yg)Mfs)zG=0_b>t>LbZRg2l{9?m}Al zvW;AE4_=z9CKaf%sB8{TAB<}VOY|A%m!VxvM*w9teH_o=r|=W$Fp&my7E4~z?`gE? zx&0KfgrX9X`Wil=Nu-N}v~B`Ya|i&@5}_IEHaE^H=@(9Q&LawPvvf`9ou#eURfs3} zGWR!(LP-!03sB;+2uF{JpPDmDP%O6dxgyad;P$dmCb!+JJQE&~pk6{_7c%pdpjuA& z`TQ{vIxD{7%3Oy~i5tsaF42MctCy9qJmx&!nn6Nk^0*{&cv1UV?SQxnk8}<KXaVPM zGN*QwmK`ah6ibhJPs0#QWjLLS@v=OvMEVfHQqCJ7-|`(Bl8O{x9fm$AtPqZgauRx; zaiJZdMq+r}1Unvu1qedsE_2-Et7G*AwJ>Hz8qstKd}qNE!QZ1t0!D<6iysB4BN5|x zQDa>EXX-ppeq7UwMBXu_6H~xEGLXN!n1>Q3G?te)oy2QQa(#H3NPXau*8A2Nq&O-c zE;iWkrQeXVgV1O8B`LG~rgFqrLy?hl?J{m+Q+-(__H!5K+Z_$;+@3gVhcHu+uZsu~ zhz)|<=DK0~y*tXRsJDfS><-wEcI>ln?`pN4nk%ey<!X+3&1C?QU27)oKAxwM3dndl z+?!n;o(DN9c|}==ed5Xrd+KNgdw0XOv5w9I;k1`s^h_6Ssxqa*0$Vs2gn`7NP+ti1 zI;`8i+W0;D^x9uUV8<p0!mL3wL-myK*fnmw*CB7uUW^_(LH`6N|Hl*YvrlmObz%32 zgwHHu3@zM@G;H|y<e69OJh>L35$=l_0TBci38F{xnXPMuPUrl#crlB3E#Z*>NSza= z30PdA0PNc7g0*hdawhrV;<r$!P#&c%M}uV5ilsitiriZ0sq>Zg7joPHo_GpVs`Z%Q z*mvlto#sNO`Dp0N%*-G+)vG+&PD?l`O-@1dt)NL=HbRn84|TqD_%8SYBI63$@#^5G zk^#B^06+jqL_t&o4+~y5!qa!I;bcJtHbA)?w5=WO8ame^Y@4r}KWs~?hPWYKLNQIy z(8M8qkJOA*hngV!ANi1`7lHet;`#P_4gblmyYQTSrTK?;a-fBQ0o;{ox&R59la^<a z0Izou)ExkMpSyLb^&(6?_v%4Ace2|~aQs%czGFPX`dQ6tAjOgtg7jhAd7<Af&e>v1 zmaW64cMS_bUHBkwqzuHBt>p!a?y(9krD-1AN!?#?dKE~x1`RZj7Be^>yvRhCji0q> z3@uu4jjdkv;Mnpd7+&hb1(uN4H)B-JSXACG40T#--USytlw<y+Xt<cZAk>Qsph=f- zXUJB`1rUDslLnNsAA4<GXf+RVRIhD_o3z=S=&tCuuQva{?(V<A*48cy+R<pR3T97+ zBiCNXN#&^;@%OsF)WRk4vu)SERlrzC<v}6TzSWQDQ$cF0`p_dAH}_rN)4QbCm>^<; zg9by-XKYRrB$(98C-(?_C43ESk5}psGKQj%Qn~4}qmFL$(Ge~eBlU=a{%!=v9T)o$ zPSXo&lH{ZacGY~627besx=~pqU@ikrMQI^VCXLi*SU3%1f4+|m6dg&Vy=&8(7oW@m zPx-5uHE0T9+R}wClCMnZl5pYUTJc0yxq?fcOb`X!>Ff(SC5my9sFOY>h%4l?dE_RX z9PU^i%S|`^cNlNNI5Q@8%#wP^GKwN3wDGvvIDAFiorgU%M2`M?Dt=7kBuGBI>`5B; z3jQGq6c!58IVDNsrcb^#$4`%`0waG-(EsR9|I}6?=(=hvC+T2XUEI@yhGa!$CAMk9 z=IW!5J#K&hk6&>9Q##pTeDv|h?dP#8`#b;ZXY3Qd{7ZJvyB@&SWQ&iBvc347AN;`X zzwcg$^SvMb5K{upG<7Yo;2B4NAGJSlcK!*)4Plq?8)uh(nj+G9iuB~@`FT~)U+UZI zO?^;U#>mHAFPlEcuUTt_@4D00t>0kfbLUy1j{U|6LSE@+kZ*{WO?XK!VFMlpARjd| zVd{N9i0uD<tF66zo~^xSp1pkJG<P3JCC==X&o|qRzrN5`Tr<bs+|^;#3#$=6%WMFN zVgUeDieL4jQagqMz`Co^61|v5+S4{bf24Rr<paQ8WW9{D`@VnPX{XDQeA6^gk}*R3 zDXdaXdE|JdLLCJURvn1BIf<k4i6z9G(nLLl`L9Eqz$&G`3=8NKgcR)5Ybrv>UK`Oj zE-A9Vd}i3bx4Yeb`8sTeqG(XU{OxR~F8m8ZHT5Cg%ymv*U<}m8ye|CAwmId%-((q$ z$u*KU5*Zpwjg!Rvy(0*P(LiS|*-kstpDq=Y&F3Xcmsw{=JNXWCabSft(O!1E_@dqO z&MMo&iBTOrfBB`CynX64g6yH{h`F@RDyyn(<(jqD%x3$}S6=b<xd?%_%xfslnsw{k z?1$#8(!Q1^wie+_mMnFxu|DjpW_e=tC8t!g`Si-1O~R?uaF4~vU>9-Hl7J)$Yn5Rx z+U?!>Tb5UQr4`iOWO-E^EK|y9(?a!U;G}j0-4=ZMf3nWUpS2Q9a1>!)PyT(}|I&Z* zG#3}Lb-(wZUHIqkSot+ut>VUOt#tib%bzzF2x5fM`b~0<2uv83jvd)33&s1zWCK+l z?7u;$`HBQWp~svVjuVwn?N}qgyec;KXxsaaA%MPez`lmI^ADaYv|oK+pVgt|{OA8v zV%;dv6eFajTAbPy2%FW-eEb1U2XaTvBijqPr)PwIBG0<ob;``_DFn|;Sj+szM|$mn zTL$dgPZn7v>3;FutQk<I`4HOCAG*8W{_a~vcKXC9p{FZfy2L8i%$-uEQ|F|dA}A;3 z=qEH(va)s8S`!;6&Ch(+Rxg?FYnG5#GDv{vFmpy3B~-uKbFs}XG!@%{;{~>E<yKC_ z)zXg-KvPyvDinXdhJeUk#yIIn0)3vvJG0afHwo9gRPCvtYQFW?uC$Swr2tdg<WGn? zu;exMt&O(-zqpA6(9@MoWKnw>^mPcbEnjyhG!bpJ;lrAqN`jIaCy7tpWVE<oy^+Z< zo<mPo2A-ALmSE`5sZChm6w(kTr30O0mh<tHdXou`q<TUHdFaf4eEmT^>I9t3Z-l;4 zXoE9;+GLRIL;T_86KLTGJ}zKpT=TUMd?i0Q;iiHqzQ@5&W2oaVe_&~@>X#Jq)cV9> zt89^1A(6D4l|I4>&^-sw!v)a#boythAfFsZSRiqZf9f+WlvG7Umxe7tc8nLp^;8_k zJMHN$$3sKKD3Y_wXfeh_pYVgY>M<cksO1!5imy(6_qQxlwb(MtZb%}f;S*m;@KTpB z;uD$hExzp2qE+y5j=#s#hrVGtD)9B4Kj!Ap({}Iu4|pYc<Rk$xphxK7JyAArW-ozX zlz)OlDw)EDIO5-b3iy3m+$DijWPTNkV6=oK=u~NYp~E32poo9GE)-LBNcU)~nQ?PE z!Lva0X=mB}=?ob=O#}gjPg_8GEEYMbl|HzbX?#ZinLUNGPqcZFZMa$nvYVD-vuc00 zJ^U7yRndODZ)2sM>Kw9HIktB-T9W_e9VM3EdD0$wW~Y7kl@qqNv&!<9+-zkvXg!xu z@cbfZ0m4~=q;QF7#yaIG(+G=M2!7!WgtM<-unGhZ_pIaS9QLu)f6GQ*SfHffB(EZy zTztll_$}IL!W%9g3z-Wog%@Ju?9KMW_O+wmxA(2M+j(a&UpsFS;2}yTT@bj4Nc<(` ziNy*+0S#8+pZGUuJrft<bB0QjrtT0z?Wa!dv|U|?;R`w=)u7sooa))ZM~~n=(_in% zV#h&en|2aJ_OZx0*V^u7S;_=d!e{o9MHOZ1os_quB%#`iBg9koR^<Xz#ZJ56TfeZ* zHLIIi&f7e+O@>(1xTYO^A2J}FqK4>c05f`b@<4lE0E+PZ4YPO}M5tB4t?H~d5EO^3 zWJkQFc-S6T$3lzn3l}==)sq7pZ)G7;J8ZRR1zo#nz+P)c>j0h-o*J5Jw6{VY64ra2 zlZR-chT2bmguxGc@7#A_8+xt%^Vvu3v9=x7!DW&<V&h%rj7l<-NR*QT>nLj76-&7& zki}wGixtgT7EVM^pCY4{dIQ2y15b6otr*hfLu{bX7Y>oWtb_|T3fi!RR>%=vG?;-? zTvm@Tonv`5&Di9kO(EFJM>{`{KWdskE}Nvjug3=Uh85SMjmo8=p4&|Do+6Ie0KC<H z15E>mX+UlnJa65Fb=Eo5W#w#e6?1f5v}Wk0zV#R3jxtX;n&k)Qpu?c`jr3S20_cjO zay#44g;M;>7cFXr?D38r*2;ySSI%EUUD56+p9E5xIK+zcGO9VMzGv&8Ii+(Lg5%iw zk6=0hviz@j;^9ytrQ<UvU(trrlP1Ip!AZ<9cm|p}%p4e_pX3FTdS5jr?P!c?-@rqt zNXRFrdI@zC^5@GphNQhLK0M#iYm4Tf$wPa*(Aj65-9Z;wcA`s|FljO`a~+{i2Pm+G zn*OBaA~PP{2u+F#`Y{<(>M&cef37rDn5l6-0*_Ffz@?&;{*YVyiDl(6olD0UC3W;w zAtm6ZU+6pqV%Qt4Tnul~Stw&A2nbA&O$tVCC`m`1;zf`691R_thvG)KsW>xwP549| z9ymw(jZd1wA@w>w9zK(nJtuY=&Qxi{Tk!pioM5I%;bWkZ;-78{%1#?>Cr_QS&-~8s zpauN_+W#OLmak$C?X0a>zQVR{y%J$or~QwI9zx@}n+d-r{v@P+|MIUtYe$bY+Ny>I zzaXfKo9LB;Hl}4;b~_r-fBa{EMt@z*1%}TC?Wi<j!ZWE~ap~lASG*~lvkAbw-*TW6 zL?#CcjGm`;GbZ+M8lktg!YY?7wCc#KqHn?j5kS}4l{WtqAGdi3@WQ5SLRjS`$B6|B zM!L!J4bhxeW17Tk#t*XezJT<ik?K?9k@_vYcQy~(D_=TeSO3yNJ9*;;YkZ8$pfbhQ zcB<F5|J5n%h6ZgTDLXhXq%#J#`qB{;88o&x@9MF}XE=Ftl5r89>mT9XiyJUQu%*^s z`2rf&P54V;fVr@$&gW{t^D6N2<<KD^S5nRCoU`vLjnDT)L;kBe)PZ(`(>GpibJJSY zr82ao{%@4jvi0hoSx6JVsLbs9abHETeebO<+qR_CZeE%1{bmV*?I-tNw8PEtE*Z4< z4A~1uxG$j(1rfnda1!Luc5=!$ahBtJr2*~uvuUr59ocq1ed?qwK^T4P=uymJ6x&^# zB$z+H&dy@<xvH|tF9|)xsjP>8_yhas$3A9l*o!`KywTRKS!1gaHrH^`piFpF5Lac~ zhfU}gUwGb{X}jgvHxP^xP8`gyTfk*q^X;i89=GG1$XmK}i7)h(W<|qFOo8-LpUxb! zZ-e7X{FC&6l4vw%3QAcIOZiG-gq(Vj<|XDihFV^-q1K(OGwR&*M$x+eL|RN9sxojT zt5;gdss>LjuVGz)hF$34o<7oWF(F_FFR)SY=u_75<a0Lf;~%!UKmUGWCIAFv7H*={ z5|pS7PTQBvBEPpIiPnkYlk^yJDR3t$Up0y_QWCmm!yrQA5!<=1z&_N)rVxVXr*{@+ zh0ie`b+z>fmv2W)`U~GJHtih^W8e9YKUeB&VKrB#SnfLUKYS|Bu2_XF=<|cj_ebon zA1bvI2)+N~`+MzYZXPhI+Bh8O?o!H^uD=}43&1A(O(&cz&J6uEOO~QfUS*B#*t5^t z=^w7zw2tvMXrro4AgA+js~tt7BaNrHMEJ0Ew9`M77TY2E@X~dwIdQ?9(b-NVp>{RC z>*)mx{OCUJ5$5rcM>UVs8ZfVBh2^ch&IT84Hg0rheNX#zD50hJI?&;T!qN3O2wg-M zVTF)?r@zp~1)US2pRV)tdyES)hO~I#Ph+n7Wzi%fW@pWvk)SWB4}4JQ#C!w<bu*>( zb1w8HVHPy$^O)E9rhs4(qJBlMS%2cYu$KT!K(xO+rN|m;NzcS(fklrAo=F@DnH^{H zkr3X^aKte35kI-07!V3qzWP%?BB8P7H2w`95-@8Gs^k(_%Q-0G=@hAG?6#&!uekcw z)8~Ga#f9At6R*@dQTd35(lS@hn#*ZU<pOABAQ~h%^Tv1bp|+r;`kTmU@{;WkBcR-f z_zO;iFClbTAWB%N!jph-;oy;yJXP7jg$Sy^5NQ-vj4|0$Nqll81eAgP+*1JrApk3R z>#JUho}xdnyagM=gw_d01jUz&X;R<Pgdn-wKGH!44@w9pp+-K7*~5np*ysM{FTFDE zy8B+=4G-}WRHy{O&eAaCcG<r|R|}PMPji{q%d{f|<?7_*XfswkH{a&om$8cVLG}M> zHsC+kUudlwP?ExG$7e1Jo=+6^+I?k^1^<Hsz4j>fiO<t<`J`O%$gGsIUTsBoH+GTK zDXUl$xk<byikkIv0TB(@1+Os0-7C$WJXB=s>dWju+{AGn1el+19I(yvO3{2SunWg_ z+2_Bz!(PBFM^EJ%D_*`LXg$*@d*Ks0WHX2_NyTJw=cNaY)z;P?d+(}3yMNtW`}~XD z*2Lv7cdyiffdu>qHU7lOkx3%J37!)~5gi>C@FIQujYd~cUSLmOc!i1opuKzfZEiDf z5F5GPXwYIFLO?g%C)zN1qV61k&;lk<`QsmrO_#R?)l{&Qts@pO1^f-d#7~`k#kO;s zb*6$EC*GKaDEu7ib26e$P{ss}Y*E#D=)*y%gzAv7Z`?D8jo<U^0AebJOJD}*oCai5 z&SR(y$xHfMfr6*7>0FY2-rTupLARhCc8>h&eMeg3O>iKl4k&hb(R;>E=p$N-7xV|H zAtrErXjCpn)e-rWA)9iP2UyVEw`#=J%o(zl)((66;DG(b^Bl{<B*%ZgbHtX`vbnOP z-~Q>XA%vdvD8SX_KUd6?U=n-6bT*=iiWOKb;H`L?ge)&uY`?zb=k1#6P4@Xy-?aUG z#}L$_jYYJX5lr#MI`!|PPJKOWg!WEZO(nvFN{-%e@tHQUz(M^*zHlav4{~%kg}r>i zpMyT&2^t!pRddjUL2!;HDZ1;Vg&EkTl?}DhvRW5D7jO|Hc1Gx1#MH#$*<XOLuxyD{ zm#yX-NuF?<b-j^Xj`TqQ4Gto%w?X`9GY9$_ZAFnTy)3Y%KC}n9e3Y{mOh8nQupkdO z1W+2(WJ*V;4AhROHOj4xh;r*3?6!S9M{ERb5eW@s@@BXS!A0j@1Qi{2)55JNM;F=2 z?iL%uwuuY4g&sL+av>aN>q7NA*9f4)^s)lbFHcbiuCj}sa-LuE<^I9j`xHe>qB_r$ zB-CnvtDrFs55)@;q%k4c5A{*vABUUuo%xHf_T({hJk;~4PnA$u#S#vh1l3fOU^3>S z3!c@cy4W2mW{guiE0Fq*yMT*#3tl<^z{dPC@dP&UlvXEl&SLjm_D>~{o?pYpr!)=- zlM7RbIQdi^a*6}C?L$kUg-b1InG-tY6P>^7hqO+k6p;omHrd73{}EF-txPbBtdldc zCF?(8CG}U6mpErK2e2%h+*k^Wj&~s~{+P%q%;6*mW?_y-o+RaH1l}CHXQeuufX}lL z6jyW<KM4fy$}>SRqUvak$zie&0a1PtOFdPlu}(fgNg(7kHguA&95BLDcnf|OKeCg* zgwXpB9I`+B<3I6lndDKVH{N{He)!0beC`;JhiZ{7bXEQq?&A2um%dDY$wnjpf|h5X zkFb)a<zIdFZwc{i^~<}`d&d4PpZFc{%0WDdHT8ou-iIf3mn~pO<y|yU&Xna@O9SSx z)?n*$`7*0)SZ-AtH--hC($Ge|KJ>1}Ls^Ts&!J-VDsQ_<rH`UQyv&I+vb{yaq=Dw- zI~q|01LkG)p;}Ch41<&M09NQJLf<SUjzdpfz~n}mUGt&kcK+0EyYN~U0@gCSaGaAZ zCrAb|-P~oMdQ^R9S&jg0I4Vqa*t82xxTLS@>g%@Jt1!*=;pKLGM~CO36`K~3f+tjz zCbS3DsoqCRJ?4#IPc+7J6b*Ke13*O*e<(ipX*6Cav=iq#>HdZgEM@HWwdKrHitG(e zKJ7e?RGGMn?(}uoN!naI@``P!q}GnNn|%*$@O4~zQD2k6eyZ;6$k^9*v|1OJHV?5l z8OmoP8X=DJgO^F;gEA40p2;QsC`o7=fP{7f`F#kG*H{a8-smJjSt*Mf+|eUPY}xV^ z)`j07w)%S!8h3Ucv1&A(wL$#cGtVHjK5aMNc%v;wb6Iv!r9u4$<~fcWI%JI}j$03# zK+=?+ho-(RJ1mn8V_+TwwpdV_*IgGc`pJfRgx|F_wRRC3(^}k5)nhw?|0aH@2kIol zg@XCj8*H%WN!luPHBr4dA8DQj{kt12Q@-5eN{Q>@b1yodOS3t@8UemDE&`Mb?bd}o zXwAueenDCZD`ML(<^*JXcfgnXqq2yHfg|3yoO#yeqB322S5%VHjc6@|XW~RxuZQvF z>qdiFHk*4<PGfK0uG=_h-+H=;jh2kHcH}Xqk+R5WpW-wk&)csau;z1lwqtjJo4thH z?VZ;Tu#unP!oebY&#ir!-pI3m{6Vq3eyG4c_q&~Ts4<^YJsErb02{7cTzLF!K9?Dy z$e@liDa)+NH=5k3F%cVvzRZJvB0m~`iwcJAwY_gyTSu4OdE-^sE=LuQzO22y%icV2 z%-%eBkkc3KR#k$s9_#KRr1b5aw%C94gl$>3%KLOxlPXvJ`RH7M5_#M35W2+BOUNXW z)_ljCfpPM@t^M#vZ0Y8AGfzbWc64z&w!DHbb_frD@v$U<KQ{8euP@O{!t`v}E&+X? zQ_75zuN6XnpyWOm)trQ}UwyZnuXD+(fQ@pkbalyYp6-;viHu1!x-SH^nk6uXI(Z3D zFC(F}1h_hhrhZK)fJank-p4r@ub1R)@`v+E3=SqZL<0$f)rZOcvew`ZjPEdS41#AD zAS)@jNXV>m%1VM7qvC~o5C|i^=AzMrheN|J@FwY1u)wqde^CS&4v(js<W)Y(KUt>- zp*;C`c8KsL4319kl2ge=f~!Uyx8NPZ@Eq18EQy;6O2S7gBEnZcqe~!^oib0Rs{S3* zt1JqWi{bv^iTo`AFbY5Mo%*2y2%rO11_CGt;S0(vbKP&)!ngj+&TRjGtnaqpv&@`T zNNmI8D#X)oOcQ-zRER43z&ar>TV}A57eEzM$ORK8*)9L<U;Q`NT>Rxv{6~Z<WiCVt zizpzfyns`>SnddY=Fcn;Pa=5k@E$_wd}@0q$C;=v<&-Ky<}3`h0zuL`cI&9i7g|Pa zcQ<&$ERpt#eujqfJOjnOOPL%Hu&)O@!GqFRRYMI~d7i}U#k|3-SmZB7I5e(2S;Rt` zOZin^Vrn%G>8h>4w*D>4u(8|OV_$pryghX+&sHp`uuospXWN-1e)i$LcE;+hWZ@bs zs$3Yfp6MvO5on@4r3-aIb*g)@cdaY7U8l_cH*EUd-Oz5;g=MyCS%IzQ=3q{8XG!V} zTvCdZi{y^a7^H7u5&gBe(O)jn98=BT$};v0S_J3&F4%jQ-(_=3s(rGQ$E;yQ+Sf=$ zhWpXR)+Jal;|OK+e`>_)1BI5>JP4j8_!=R;Ce+<r<n~D8i}q^g0n2bRxlC~=o&HDM zoIBxjr~jzu*a854O2@**ogPU?G|YnW@$*Ht1m3!8AvW;1*i)iLFpN>Wvv(ReHo^-4 z-Z43#ERGtIL*Ef%hs+XKDhzIZWht7)-S$`~g9Qs=(Ix9t*%LUWoH%4`WJig}da6$t z?#AA4^F>>@sS^8#!*-a-7IPHV$newJVL$Hq!jS>{lNVUrb>-OsOj`dRPY&Df-Z5lr ztNZNA1q1d(W04DD8xTrw=HibYm`#`3xKrcu|NP*bbtsRH<rX5?dPmjuwyp9C`<oLF z*>}%BL%nN<R1rP;tbfECq0gd@SVVVl>Ogj9X$Fu}VX8ac$V=}TPDBi2vs^p8sv}s> zwZq%daNe+djkR(^G<)~NlfYGjyade>M617I0GCMx383+(wGnf`nz&>`cCmxKX#h%N z&I>o|V)>*_gSHQ>0_lAlw($x$Wx+)|x6a*a^DA@~L?tCVAJoLD`iE2b^a2A&G@<E; zZ~E}2Nk}J0NuO_d+1e}7VC0|L5|Nz;M>vqNmy17-9zF$q@~xZW)_E+-g@a%yp7WH~ z`DIif={0%sIs~em*Ja`#Jlq%L$;S((SLK=H>yPjrCn1XF@A3xUB$<N{wCF;7%Hk0` zatum6<H(cpn&GSXE!XAI?>HaAPpmD$i476n7a%A;+t$NmDVWo6AvKA;sH#C=sXp~B zynWK7a4(%Ed74N{BS7OnTGSmq*i$TFu@;WwDSQllMD?V|`v%JF;hvRNJW^qsRJU1* zWl5e}jO1H27w}Po9~thmzSsViJS(l$wxLDWVe=UShu`{J8z}$ZIf}W&<9lKy%yGgm z&}=kt)NfqmtjE}Ljn-!tw`|PhWqh^d#^9Uwp0qzNCBTGR%uAGamqk_c0et{G!lz9t zZSW1Aqv=D`B+x;5)8Z|F<Tn8|CXL4&{RtcHF~d>+N#7C_6&`ToH!=b~!Xf6bXRz;? zv?2OYITuFzTPT|+2#LTs_{m1FdnG?HI3(lC+lKPSN9gM%{jP}kyYR(3GI?C0Q=jH= z1$fj6oc7C`=9OF9NAI_WyY8|IY*ObVwa}tV?Wp%WmnC>w!JyoF7d+~?l+y;fsBVl? zIBujDEy-tg1WhGv9wq)`;)a;~dI6PceDDl>#BY9CkMe+?j8;5Uhdkjuh5z`Ar|qr< z4R-%$Hre<8<PAIjTDz4OaAyptX~^hm<?ayri#*J2@##+3$WLJ!UuXtI=5nfmPMdpG z9<a7r=cxgQJ&;^-s)VX}@sj@Ozqc3RsKCjbGMylTdy`i5)<0(#c~UnSDU=j4KVxI{ zmQ_XeyARaZJT4^cVB_u&pXjiEelsjseIrx(LJ!rslBZqZYUT>?_0xyi5M+1RJ5jDE z=iZ9j*45g!wIlY_p&&pY*FXmW623{_;0-1Xbf)jXkf24irm?q&iw^6!J7fX&(<PXe zAbI=t7yJ_T2jBO8+q7k??S69?r}6r2^XAQV`<-{$;R6SV^CC(c`S!vK&%2oo5lV2? zZe=n@{e!g676G?z{ye{IaQ&vuz9`@E(u>${KV+LXY;Xa!@?6XPJiXX~77X#OSB?M7 zv|#^A@l?62@d}nch<5X9i75_wPJ}#u{Ac!O1&iLn3mSIKXRP(1?^y4_BUXfs?DCtg zwW`~0vLfuecRckR;VsNrnIx*M$q6*|RJ?Kp8?0;GD==wz&HYvM**F(Ks~!9sb?Tpm z<HU5H25E{F%cl}*>}hPuvp@P$Df1UDL`Mncel8FE0c(;W)|~l;L{P+((`Oy)-n(ub zurGhF*ag>g5msF>Y!7~j`%SRx{N#@dtqQH`U*)pF`*sc3w)I1Htg*oTx2+$vKl{yY zJ9?Uvo|^{kPrqDD8zUR~I}LZ2RlWqzblvBmpDM{^yrwe{7{2omAQo`ap%UTp-lO}h z1&#e%uHI?~*&N;R)_%&^g_2RB%|-h_r|di#$d%BS96NamL41j=Ub@J~dhZ1Y3xej* zC+OGb4fspW)Qck0-jgl1`)Ctp-#DGgX^Vo&Y7mk6g|P_gYYZJy9(oP@<S6~S|8a97 z6iVe%p}pMxkrXZco+_;iZ8-tsYfZ*rAOA?Lp;)a=r!ahjjPwqZK0-oT-5)05u{^bj ztg*!f$#`Tqk*M@}g(W=2+^iXhug%FK{-mf91<-u>JSc_I<gXKyLA;@Q)LhEvDBvbM z<?k~m{KZec$(ia?WiC`WO290zKA)iQdJmfzTI&Qsw&1CJS{sEjDvstof<W4&?D`IQ zySK-Y$q}_};iq|$()oOam|81`%tQP!zrN0%AOhs{ig5y`QpEX!ClMA?IWKXD5Q>mQ zo;2NP0w;J<@TszhVJ<L`^g9bXzTh{+PWR&5tb@y+7VrO}oqpukt#8|>%$D9nYnPp1 zIpV3umdhsPh5wusVke57ZEWdA_y2MCCP1Da*L~lc>;Iqop4r*^UM%*)0w9Tt1c{p> zL`syX5<|+CBPX_1NvfPwVmVT!;&Mew>?AIgE3q9bvXoFqr7TO<3Gf05iXcD&#C-$1 zi@j%eXLs)V%IEvK`}hC-|MQ>OnFXM$cjy1><Mr$J`tH}=uO%pY>d(JzU-^w+vm#e5 zzWC+8V|U#3aeu+wGd_Z*7^)npUL+hF|0Zmum@4!McI4-#B^1hqtDx9Dn3<EVUtUDQ zzQn2CW%RvK&AdJc3sA5~CF_Pkgs$RuYJSQ_W~GNN89@<5rD~IUgXQgnl|mDgM=m+4 z+p0wa(knHyc(3fFqqWAT_b=P8JW*pOhg)q^M~(gD&dc`ufAWI;(MzLN*L^D|G`Z&1 z)WtlBBdF>CQe_V0meNmY`d2^v@m~Y08udV7(tiBGR{NLVskJ{pH*0$k2>z|xB*+k) zrnIUWS`f=tS}0W};|W&t^d!Roqw*5YtggjK%X*umwa$Jx{-(Y6$~pVo_WSJa{@V~V zb2fAdU2G&<)5Kz~feuCTIyx3VJs?yJSgvM8!WjMGp69gbTSM>IH_tz77Z$Htp`9yn zIu)%t;uTSgc^Ul@hfc%0m1^`mT!M^_ijUHy$0?Noc-0wQEOy)fi4b$&_%LVZNkK45 zU*EimjYGZ;6X^;>21+vuJSu+ftsjrY0;<m5S=w%6=>M+QcE9`+tbbP~n<wGAc9QbN zD74lf2%b81%{n<T|F@4f*dM=%5Ry~Ssyq8y$Lz^>=j@+8*=%PfScEeuDYu`wIB);# zsd@XQduQz9TW9QvQ?2YEnmw|2$p%``r_6K7>Q|b0v_*Z08|M+5=bOI%pMGZ1I_f&? zmv;X>yQBT6{raUpunTiTA<hT%t3|VPH!hKOXj%-Y)F0nHB@Oq39);_{PPGo5{<?;) zv*sQBwwXtG3R5F?Y3eHZrUe*Rc@Q*H*~ks;)Up^yJWXuA2&QG%DQE<5s=tj~<J6)i zaQuFlqV2`{?QKRF$yfEshTwj@W!C;=@VnN{Y46TLJ6`JJM4>X9zcLdF#D77et4w3_ z6LxiJ%$7UYgka*~6HB6bAL)4LHF#iawu$^y9<VXvX#?TBY2YTU(7#lsSC;sy4q*yo z40MaHEd78lwYy9}9qW_g2|P1d^74#vv+&f1C68)faqWqFT?u%FN3e<?Y{9?$H(@LH zO)grH1AracRnNRDRk?y*e5nr#_z`L$DDLf$8XRqSsIT|ZB#&b%0IG~-bW$PMgRnuc zPA+_?z8Bb4X>V!rQ_#Yqv=bM?r?Dzv*F}ID`|oBB*<#;j`!TMb=Z$iq(qw*+;<Sq- zS*U|cL$9*gG>tw|#`y333a1EX?DD=xZD7xBw)E~F@e1#M#l8)XJNfP-`5?MrHu0i9 zM?+0GnIOcXQvJMxm5~y&LLdPu%Nuz_KJZI<Ru*|34q^fo<I5^nmZ&@U3As`74{ndD zxQZkrI)cT2Q#|<xZ^aXgzRs<?l^H2!fa6ykfg9ypsa&Jy`aVLzpT-6nVQ|Elo*rI) z^2X_wBl6{ua4K0D_f~jtmdKA(%U>|*D~E8pUyKwSB^cZRZQ|TrF@cSJJO$-(%I6qe zS-8O5Xy(TswgX@K5;t-*nF%CBkl;|f{G2}GssF)?X0N})jwOO8P0G|@1*f+Ye)m6G z?Q@)#)Cr_~+zfGrrGmDK&^4Vpsif)>TL}5aznGsQsfN?h<Co{`iU0kiJ@AkA+E4rs zx7oLU^G!SX<fzq-qf(2Po~MR60gVvZj}7Khli#$$C~TeLT5g@OeV^*IPyL;nZTJ*( zf&c9kxLIhBj!Mee;0KDZ`>*GVS64aLGO393aM(4+)4>H#fj-VR;XF0!K5bkZzW>Rs z&9<$Rv5K*Og4=7OlQYaWd6-uRA%sH&3O{yX3Pwany!e9IF7uwl@BeVbj&E(Y?Zh46 z@WU6u{miKen`WJs=ukXA*b)2XYz>omNZ*vyYF{!Y2wH-WK*UM7tW(gsHa|Fc$p$uU z^3%!R{KnVpQ}^F*ciw%EpN?+i#IhRUS08`LPby3AvsB&8s&D0=gva{RI3c~!n>TN^ zzTRHz;qT@nN1XmA(ABO})?3gCJ%ymU553UacX0Zj6VhX2BOW)sJ)k~E_348$UN=<) z9~45zBZQ1?orkQj@8@jp<X3n|aAfrqnAg;_?C^D&;?0~qZF7T{bt1!N5x~v-)_XSc zM~_>>W^O^AyU3haYt0<RST#p!zU`RR@?fKas^*dMEk>)%!W_1$bgDJ^gKU&_4oy|q zzbsF+b<ucZro^A(i^pkBI7@cHTbcIT2$XNyg=zuTl7EWM=2;%7P`6rE3@Qiy1pDl( z9IgO~+&V4&YyY+xVJP!d-2eU?MIK<UwT~QJv_E{Z!T#jC1z>9IfBL_h?X#blvp(it z{}lM=SQq8Z`{OT<DcDmT&^OsvLapLc5dpSVHLhD1L8R7eJ*`D<w_dd0`jbI!zRvLG zN5OXVHu9jWHd`YKAp=&z<hG`Id-<&s2=SY(yRF6NX+Eq_AH#Hknn@<>-xM3JCof#J zH%^0lVv^I;^|rm61AiQBY;5AzhzevCqmYb;oI^s}d>OA2{ja>Y*B$!d%)sO7xsgEy z3xHau&M`;kQZ5n6ZH*cHY4s`5p>96n^mUYXK3dDs=d15m+P<!%fR(1!AWO`<mloMw zVVtR9ty)iG(w|gth%(7PBoLmVkfqitBX%vKtA*j`>ZQP?I>IE$@e04j&a}ZGx9Cc; z1Fdy~S`K2x3XsC(6kjeRCyoo36<0V&L2J<jt9gQi@8Ts@B&8*Wbf`@4jR+rL?ia#j z7p-ao;hXXAzPTTTt08D1mtZ|u@$ggLMHIPMN-g-hoX$hY^vI|)NGns8xu7B;NZ*J_ zY<QK*{3Bi`B=d~W)jz_a2kZh9VcAh0Q_~2u;ekhNxzJ_X&;0=pAN)%jKK-~&4}8Lw zdJmbQTd{_duQe?E+$aJ@A8y+tltos-73)jr4tx8pH|)9ZKW(Q@ov?ieZnB3SdDM>H za;xWt3au>d=+H+efRrN}H>m<eqH+j?calzU8ue<boPx;G$1%&5a*w5-G15nevcF6V zkl<8l)ab$%P{1+0hyZ%#nm5pdOVQP7cIY8M_jDh8OC}b5$>Tb<gxedp8dCgA(GK*~ z*iRj+v)}w-t!=42%OH2sUc20CU;6YBbhozKH_kL$lb#9(k#x+4X+_{E;m|kHrJPqD zkqkSGOPqY>Btut|edVcZHiDke2lh1aP*t6M;TS3udJwz;CwNBy5`QEr5uHmwIpHQ+ zk~@997SRZFbw3aTR;($GYK+j<u)$H_bon*(K>mlb-?UG3-(~eQj;r$s7P%&+hF!}b zSKyCk?H!`>F8!NEwZ#ahM^BFq+8e{C>=ciLEH)xYZ$<x<XA`NUbcrSUoE<8FcQ(+d z??#QrMAv5=YFdmQ+Ce?1K*sAf*|T$9uwEteRwO2FLVL{!^vp?sWsc<OU(sIAE~kWm zUa<jnY~qP5^Ic9sR-lkmW;M=3xLU6AN2r2whS~RqZRFgj-MXvZe*R;1_AkC$V;qXM zUwyj4o;z1?;WLFrgwUtda8mfm^K&-Ggl&=Q^ul|5)3W{4Azj;DL=DVU|9V+?2QM~a zUO0vPgqe#dapC78LhlDV?y|j1{(pb)8wjc39a9m@{Z{)C9Z7hZU^F;4P|w<F9}A~g zK!Gvj5SWRuNTGXv@uMoGzj=6=Y*@6W?ft~-g2y@=Kri4D8Gmv70`ThTnGJh~L&-=e zjlg+Xr=lf%=5GOgn46kftyO)o3!lSaPQ(>7%5ObJluD3Lx`CjyoqDeeep-#b=IZPu z{R&6b<Lv^)3uUiVk}dG<E>Ng^YSHgqkIr~sqzf+m&!U8w{AzQEe^TG!1{zWdk_$8> znnLKtera10hAJ(M<pHnUazLm8FlvJ0+}on)53XD|0P0h`tvWz1Om#mZa%@86;BN6K z@{frqkCm1-98_=R?fq2-sK9j^cvyBpE9Iza6mk280&P1JvgXKZLGPX(=8)<PKb0tU z0zr@+dKn3ulTcc;sh+EER#8YGsq$?>n61YR#j9@;h?hvVIQ00yE3RsBLtl$EvmmL> z37|dM3RWxq!UjahdkK|mCeE`^FIvms_pG;Xn)=1*`H9z|<EYh6o`ya$LWF>5iWB%3 zE?o5d^<=!v1C;>;nj=46Jn)@u#)M4qXre)Rl8UIir;DrRJer1w{&_zUxv!+Zg1s`Q z@^lI%u@dIH{&R&!+RFiPWr(pjv1Je&b5y3`?&^3ozDn)N($Z>*Q&vyf$7XgSlt<2( zXP_978>1$lIisJ#RMGsa5B4$`IpiNcWp?+A0r~KRONiXxx0Q(+`Wn%>)*?2SQn^** z5pBsk7crAdQ{DLz{a^Pd?#hJEYG{#qU}<Xz<(65fdB5TfEQkKx)3)@hzi#$p4_nOu zFHj>fS>}Y~@>9>+(szD9zo`aZo@Op~$x519WX48b@?Vcl>kaxT^_@;5angxj=R{~> zTIfg4FWO`O<J)%om$um5KXsGsz2lm_^7whX^t}a}8AW(Ixxk}?%Ak}3=#<BAW)%GO z3)X*ktsVRHe%rL8%ier^$e#b53pT~!kQ!(Zo61}-wTxx_m4_-jp(H!jWdtiSFp5_v z=Ar;v3Hhd^=6vAOO}`_&7jt|I0z({nNcn4Tj@mcT=Umg!72^pVI1*c##fc7S#WZVq zOX0ik4BJ;<AGM#pz1y0(jxOB$yO-?w^Nj4kg}MMfwH2pJIw$Fa2@@Lq$q>3OqrPhy zCETe$pJq|i$-~q;ckkvMpIJWzeS#Cp9Xv?*19YeF-M0@l8{5!@J4OB={6v7fb;}ln z%<ZUM40AFiT;SwmQ)AJE$z9BABz)dXysg`J*i{|`ee;di=zGs|-G0n=?bzWeIlAdH zckSJSPWN$y?Fg``TYgB2%w8`)>tZ?wl=4enH<E_psDIClDh>0=`mLX_8q}gKUU>@j z8Ly(d`8?A&>7rLSl}B(ytMC07;M~w5ucu#o)0PmR$*A7ea;RdN!xgh9-V4HK#i=lL zJaXN1%VE|ynlrBqPvBt;O0Lp3A0x*_2H-s)0e<o?rms5aZL11BS;P;~lG67ipuuUx zp*)k>5N*U)@%hP3*@cH+jq^3MtGCb8aiX@KK6=?zYpBla#%5)aU%tk}gI5ZS)uF!= z9UM-#Z#^GQQA%hnf!gEG6zs9@g}PSYG`0No0O9}j2YMxnB7}u{uEvN5H}99ffMxx^ z`3kX)Sb6YBvG)rxQ^`a4SDrE8b+M+dV{zWj$>bLLwkFm}x)qmNp7)a=5uQdeW`=dq zbFaN)cinOmun0Ek@4V>{t~Zh{k4$h{{TgabhPg2@>$gUBbE8NnsHGOE1{`&)Z4-?? zZ4gf>YfD!7x`9+DJv>Mp0JE}4K!44?+2hL9=uVlF3(I>gl4;ZAZ7ZkLJ^xS#>F@ba zo?4S>6w@4Dtwu)e#$`5gkePlmSanz#i&^Brq`x;sK{l|-s&E;NLlO#m+Xa`(S8rhj zDS(5l{0UK4`bQr%A@LscONWD+I&|ZzK_YD_vV_ShZK;isQCxMW;z#p8xs_a+2j=U9 z;))N!xnLU{E}ZswUaOgog&V$Fe@MU`@=Phpq_6Di%_OOcMvi>2yyYjO?k-Lv+@1L; zLIU!T5|&bd(U=G;#~pk!oDo3j2rl!-uAqb<;Go-NVwBGqfvjfK?x|7%u|E8H#~U!` zqSe_**PS-qyw`d*J!3nreAnhL{*FzYZQx<P9`tqYvbkcPEf=}!07f?mM<(Y-?YGYl z+Vs#V8%7_P9tzWI%0K<(pS4?#-)=qV0+SK#spC<Ftu(13RQg}fExfB4<<TUQ`-v%4 zy7F>R2RG{{pouMVMhL$c1<=t;-Z~j!?aV-#Y^ci2WGA4@Q`UsFyN2EAigZBXM*M}A z9o^xx=5HwDuqZ7F!9qnBE%)!?VKN59$6n;|#QAOZ`TKh99`x}2FW;E61ARs7Le;{H zTwk1{zOV*zBQjF%=j}7-38<s9Ilh(hMwivgr#bn2sMbc0ciPup8MFTLv-Z%wdUQWa zX@DAh#0O*QbhJ24CgD%+EWym9WRVc0jw8(C%K7z-3iU;cH_tY}y)2lSFK|+FU)wJ0 zuj{q<W=^1sd)S^m{f5n;PD6sZ4z6Uk@RgZC=sY$%!HM;8^evCr)j9O584sQ?$*67T zL?)9tou2j_jp-_$(#p~m4UtCCx=|xNKsqh1D(^V?abA=LJzt%62YGBHn2@sIWaM(= zk&|!oOkcHTU_G;l;gKS&e=;l%S3)Y#7zQ1x9$L$;W;~55f$FIBr;axJLqN35LuaEr zfLZKowZD5D-ItR^`>h|=*&n>aE8tp5BDC`BJK7Nix$+oktUWczS#WL=>>n`ug?s00 z4=OnZ&vKoY69w(<od610{03r0S2CqOQGD@7;4BOFoef*<?+^SGSHq$Tj}&2@-x6L& z>9O?i!LEH>_VNpZ48$6^w7`qWia*k?V<cCvGsB{FjLnX&J)7Zy{!_vj4PwL_=#ozE zB|CHNgf;s~XQ5Y(l(HQb-Ygn*HA?!Sbz9{~=K=DW6Z_71C_mAcr%@QzYw9Sg`h5En z;?x#A4KPteb<HTxP-9WP$_OS}bCy6?<{uDfLZgA&;T0zDgj={WcsU3Hx9X;Y=!g0* z8l|G+MvVGq$LZ<Ba*BzDq*Y!rF-=+3@2lNaF(I!*oU9GSeDl5}#tAG|DVq@BP@dJa zT_qJ3xYg6FLPjYIbs{+FS`#2hUC^M(Ip{RGO7$a65an*<D!kNaNDuTJbyToaOV1gF z`$J!jFQhI%Ws6jMG$8P8WN}fHu2PJ`_+J)ZZW+%bctpfz4V+jhbg>9y@eo5CCjV0{ z2h!r-^H)-KPUA1L!_?Hb$L#VCpp`4i1HH5*#_1wLA&pXMJJh>kv1nVl>YU0-IFyFS z3*Y3*Qz3iFznaZ;4?C0K16eq^D98;O%0LUW1{PAanw%?o%)Byei3kcx`JMO?neIv% zuILICQ8L~S$){vONJ5zWal2QHhj&PW@sg{Eo+h+z)F`f0UIoVZh)$<1;i4^hlF^-# zPxO0&f{7dxp2{%839Ld>)I5zTmE@PjO&&@I+`1kbPQ|2vb$)3yi|W(W?~Auo4kRq9 z>R8w{p)So$3X{Vd6XPbQn3spgLf+@*Q6U02o_*OCUwa!t7Y7_vKiE+5#|PC|WrSxf z<DCFtlmiuQEy${268La{+50EwQ8}$n9pgEU)k`LRCr9S&segOMPCh+sM?TwccYk@W zJ&q1goq(RWI%l1m)6L3|+{D#cn;b@edvA^1^QFBuc6QOe`Oi<-g;ysS^2k&0sy_=^ zr>{yd8f7;tCV!Uz8fzuJU9S-+f4UGR!AZzR(&IF@)P^YAR4-UbqrY^<PG6g0EU&kB zhi2`!zI)AP7u#G-n8F>A;8&PPseeMv(@be*u^Aj!ZFg_M_VpHRa2z2#Y1l#(Fp5W& ztN!aNIuVG8*1V}q(vyh*-d<rsb0uFt&=;ngAmVj~!yE^0I%t#Q6FfwC615q92-A3w z`&-|3xM5Vo3~U~-c7)RR-1BkkLBKpU#SEG?)vO-B#1xskHglr6tE<~K>GU%X4$gBr z`s6!ryT0fr|NKeY!FsR{p>u)xb{m4!n^D7|(`6EZt5C&*>X^?Z-Q}o1w4Z#Q<@0OJ z1Od!82Qxr0G2Ya5-_B|1BM6_F3r?K0#jDQ+)g03oeEg|x;1PHP(43;N#jzoqdg)bF z=rCA<EA)qylMaW3N}i>VEQRe`thi$v&OG%gG=39}VrmVre2_quel5Zh%?)(r+y%VY zHFi2}70LWXIhA&nH`EWmDo<TjJ@FnujO3YFg)qT-zh1$g3&Ti*W<@*JpVHH&iVy{R zB}#R<jTM4v!DQ=e;)|rBRCq)qocdGTreeu|fi?FB!Cy*e)$cm<Y1Q}@0r@Of9?s99 zZb1yn5ZC~t?d(&_r${?bD&9O?Ai$(Q@!!T_h^t(YeeJ{<R1xi>9MG3NJCC01VbpkB z=Jfak<ISRP)O9m=Y(!P2*463?RcCAJIN;)M{ZKCw9ZF1uma@Cj>EW6;%9O=(pT8bI ziEgo(cv*|`eAy*9#ntBYtWJX?5>?qKbG7NK>7Le4;rWMBZ1oMA*Lk}l&(le0(c`o* zzObSQf@kJMnJP8fujaX4ZqyT{snOF-34QVjWms~RY`_L^#t(>;nu{Pnrafzpqk5qJ z3)&@TNjEveAp^#DFi97G&<9O8^;C7)$020^|HX^biQDHu3Xc>BkBs6cKe=^7!_#nW z0QnHvm1@aPHlMD@I~mP4(!AH_r34_qbCVBC@PU)eRkA2f9<f63^EpMtmw`mOmPjB5 zg$zgtVz@d=mR{cQ0zeE9?kYwZsP$np5l3dpFdCbmhEfLSG9$Qzi+OEBpIzwvtPOSC zYaKIhS@+cIHh}7b;^Mn@b?{p-FrNvkbm~<D@L2se^zgLVT}N+W=lmwyvuB_0hzE>H z3BFV@l~7E&M1evzd8Z@Lz@mzy0(WZG{&83!)%jJMR@c!{O*f6&)!_vzum}}uHz1#{ zLH8IFdNnW!&iWR(CVrMBa#2F$l3AWX__}Wf2)(MhY%MI-$3`#NVpG^DN_5WB2_Ie> zK$AnL+!+QT1ISMZV@>>(C6WPGv5*(@><Dtm*BiMY)F{-<QI%?6zGV^pm+kibGo7}p zyWalwle3(tY_wl~pkU9On6e9~rr6WRi}0s-JzTsJSC8JwNFS)KR_cJoJ$oAL<mCn1 z+%#uDakSZf@juSmuYPUV9zMd=xsIaUxns$G=J+fFinnWzFJ458%mO%7lAg)YFNAoo z|0K7*qCoNW@K}LURZBL?0-mlY0Xc`kA<QbH1qPulY=ZnZTmP<Im^^DwjXrPR9Q=U| z&JEK+grvi1k(j2U!=tO-przL!kgwt7odhVVFuG#my<ckZG4YT)fk@f4L*B^gcAi>r znw_dZT1+UwCfYp?KcZU){hAOSviXgN|KJ<hOl}p7g8etx10)_;QoSv;3Sm}IE}n3O zJ~2dcT;)Fk$yim8qKi)Yh!%Pl9Ujl>XL(e2Wpu|dhb1qU$=fg?;0qDj_j7%|uV1z+ z)SdqO_S-+cn+H9)j`eSzroUkQti`Z8ebq<t=X;=xa=L+V?|!5H&fESjuDK3AV`H!V zBNi|FY`*Yc*nHzIE9i71jHJOq<ai#5{~VFBib?f(%X6f~zkHqb;5B}nKf<L-qLF%< z+=`+S*u10D4j%5c7k+rj+R*3d{h<=|jMf69jtx2<nk>%S=0kg|g%{(OG;s0f*Un=B z40P{C)VySu=3gc%f_bl$Ixk9pjUc*?`ZG2^Vt4i4V#j)p1pFc*XS4z2Ns|$&P3D5D zTE&k}g)^liF6~c3bYTe@7vkjY@{y1wR6874JiP>}3MQD~4wf>H*xm#d`fY`l;N3-_ zs0c`c4_Bc1*O1B}f~8c}`ld2Vi$|{~j$6GI^}-{^v?5-?q&`-Yk`jS|u7DF@MJsDi zCC~r^JjfCao>cbZiG(oK7uwMRM`wgm<Jm^auuj4~-f~!)XAA>@y7$-x<Az7^ka!~n z@$F9Fv^eN!DY9|Q<5bk4S=84AH5#Qn5KjFGwn&F2p>q-8v(gZ68Lhx1+OfJ(b@4m` zc80h$2%zg(;WeOFDUuW+!)Jvb_{GmGdDG%di61s+dJfw1yT5NU-FH~=o<mm4`v7xX ziC#MYgcXkbXG|{DM+9u5uQ84P`2@riVFC-~l%kY?Wb^WKuaZB$PH<MX<jp+z<eTM5 z9z3w;znM3{AqL(Mp+_Kt4m%)(C;?)3D=;G212y2uGk8S1IzSl*0%brDK!QEg`4BEh zpL@xY5_FvI5q>;#m@BX-RQ*ux$@t5Gt!5Rh-UHD!+2LVSmr)-)^;j<gRVno>Hv&2U z^Wm8%mc(|JF0fhb3LY|UotNO!!X#3{2Rr|pTUuR6=KN)d*R}|D8NtzlR6~vM!d%8+ zL@(5w@~QisKeXk;2Y73uHHVP6FTQRy|IhDfa+mY3u!_`a9_QmPn3yr%H&wt^bqbyn z?5I-^tsCX9mU(n7`aKthArt;W)`_Ulc2uCMSE_H+4mnVNvutOdAF=Z<k6GvTMw=bu zsx3l=sjJ#pRorB1@I&}IP9AaX{p-JsI)bwt5<oa3C{+{h0F=)jg>SScA9)M5wh21v zW8|OezDHT(N4V;lzclffHQIb2T=c`E`c0oya=jMhZ=-(hUvQFp_dugP|L%mHxWd5! z)C-p8o1zXt5#k1S^h)k<6D2HSb@1Ti<!Sq8e|*+%-`8%ZE=}7z=b1n0_Lo-$B5O{q zIWa~;<QBbMqWKmyDyOTNyswgXSj{<zud3<eS)^+kfwvaWcieMN5F(vB$1T>&u14eR zxwH1fx1O*E?z^8GCVjS@M>FsKpVtcJ002M$Nkl<Z#3wv^B!Jc_Xfc@Dwyq%Srpc)j z@AA0e6?^9U&)6nZZVd1z)oEMM3*Ewc>-a}*w@w7vL!6FQIeB)2Nz3?fl|O8BiMREZ zp<r*+ROZ)ec$8)8|MKtw79V-?$Yd=y?P^=LBW%6{;86t8&)dS_6NEF@B}``a6zVrl zpY!r?kNl4^qtbYv#Tw%9L2KB=4TzNlWHAKlee@bI8E~|O8$HXuNn6Kh_C_`oB*0lh zIOA(WzAn(IjQAJemVR>0+f)yvTfC8z_R=+6Y-A%2v!41P7`1^0#(%|KjlX=>=k3+l ztQKDBSLsf8^8OzLe+lnj-j@{$ef3<OR3>`w&zeqhC#~37w=*wNy~L^l3-wpyZLX^O z9JIN?28TxMt>Oi4)i2q*=dYl0g98TO=|oLO6XRA9yVQ1s$N_<)L;$T5*vTXacb7R5 zMEEL5WuW?@KbcHW>aM@qKZ(}Rrz6LKm#RjLu4Ymg{Wn9lmyy=VI>{@ct+HF=ps!2> z3yhXLeyGLEn=w~qtUQeKk#OKe391eVHk_dLwE^xV<dwQb7kabit!ff&m4Oxh+Ek6C zL3a=&d!L18P@^Ha0uIp_zj8}>j*pkU;!BY24C<FU>gqxiO??o4diYX22#@otFaGMI zd~*zYd7qTVX|;r8PbmP5k!lk+=^LG8AKgHc5Lz%wFq!h{J}@aDe&rUwKEZVoqDLgW zJWVxJktrC(Nfv!6O5(`N^N4U4+;~X!AEhgSb}PHn{mruo>_F=Tf`$KHiNX&~c_cho zn5oR8L-kVYJvP{Urxkjpt#RQhx=Y6p!SQ&JpUzXBG}!n;BMSAK?C;&%jy@M%P2rIR z8iGzN_~7PfL-soZ{u6ld<O%m3R|sfK14|<1I$srbfvXpboD5`BCGe3Lfu#nvC2#q1 zpZ)3Z(>B5+H>(`5xa~-n?Y{d6G{Ogk`{*rZ@9^-(i3<|?gv?O2*}Jvg9zA{&6G190 znSWpV9{b_zFWC!YX98!+F4F3&Yqo!I+ifh+3kXW_$QhM|1VkDDg}FR52PkVUQ1OcB zHkw-q3y;)EW?#S?*=hYb<~wc8_4fE{i*^Qmdk-BfT2JEwCzq$~=kD#Y{?;XX>dgiF z@;xo~*sJJ%>(>_VGLOS8*r$&a?f-ph(jMH)0MK8s-}uh3{pewE+*GvhytQn9_A=@> z4%XXG9p#EJLR;8KIV@_u@#-sGS_R54<+1p5lUb5S^46{zLWQO_>zeGbD>Z{q1oN?; z2dI!4LLni!zW2A>VUL}A!oEH9jGdiDk6I(0Wf%OYF$!F8A(}_fSSMk#H$>U_b3d%A z=MI|SgG(Vf9*F?LPV3^jIS=aaFP*-1z{(%tO6g!}<?3Q@altOiAKny{naC?G-)T~P zQ{>P(GN^zr5iJCHyMqx&xCv7V0gvn<sz78{yk(unjvnfa)#peHMo;Y`w6Z`YEcI&w zt27x-r-O+x{mYUbmzeVB^nB3LB%y%;tia~f$agpq!meQdJ$voHy<^E9*j==L_hP+0 zeYO@oifn*TZ?r*BU~^z^@3MXIaE*QbzzkPn=j__W=WO)NU*u8GH&Ac$hAj?pb+P6j z+Fbpon2>VqD(-qF8pBB;WkPvABiHeTSDLsc`0IUDmnArna4xmEd>n0L+;jgPo0^>G z1^E#chZ^V-1h3h%@EUJkuwFLhn#o%U(tM{CAZ@9nf|zH;IncM?>c_c~I{yxm5S5Eo zp)B%HO)|$x{=*$N+n4tL7=nEUP57%cqA~TKm0{J~swLWhX=`q`-nt$;XS6@z&ExiD zV2FVuES@9DS{RFX2_u9jBPUpt2eNrP)Q{tgf`JGtH6~t-6&wlFpf0pAwtp0+o%n9r zUn}ZIl(HsB>os16w7~`R1q*pP!58AEloPh(R{115eK4wW+S=ND%q`_l2oKpsZfJpz zL*?7bDKDM&l98YOLcMV2GIxk8Kf$OE<+QH)P>;EeAJ6C|Yi{KvUQ4gdUb*0HB0Tg$ zxzK6WO6uTn2y!VX@1IpBB;xG_tLW3jO%tpp#!LyIHPP~N6=D3>L@s+k#v{8oM3Ro~ zoML=qk3#iy6hc3s6N#E2E3H{JpsWjF<Xo$@7g$VJm}-2B-U4Ib^gOp0phI=eO+%;E z-Tb$0>7{>dV-1{qu4%I3sjpgb?;~_(#~3h@0GdeRReWT0d+iN)@b(~uCIUQ-R0o2m z==X3rBQDhu&ri=I>62VyqkALeCyJQ&z~2IGT=S)jC{HIkRX<`G%BNJHaOB~<t))06 zzJgESUo;bvF&pwle$hm$J{fP=b*e*$QHvYmk36L8Te-I1+dp6z&Yp=xl@dvPfKty< zA*Y*4zd(Or+QU-5#KQ9sRov(n68X7F1&t&10}2zUzCFEt)<RqI{ME$pdWML)A=gOX zFx%5@%NH(b(p?@)Y3g|06HnRFKjw7I7ale1MdjAzAzOZq4acuOY0Fo5gfK^MIRadc zvI6f4pfx-c6?SI3JFP(9<o)cr_#+;3<7R~BjXe!EcQL35DP?15N6I_50UPo%_$X7C z5KdfvXOg}F66g!Yujnv`2oj8bdF=KwkMUBuW|`(rUPI*ru--Qj=6Ffa%Uxe3;BLjv z<q7^p4q!C3BAkl+3L+2U?);CFsWlRFw3aCwL{F<PqScoZR;zJO3qNo#EjQYCULLk5 zUz$M3-C_+Ii{MRR;=$)q6^SM4JQ+_HANLI3S{`V8?aaKra)L+aYI$_InKxTB?9=~< z4(D0*Ng0j+uA7T}E$G`93T4CfOxWCC_KlT#P6*D;@=#z}tP3Y*d~_6CHTLoQ9<c8} z^<5V>PNE*-<f&8E)!Ah~c<wnC*QiB_j|uMDz1vSbhq=@;4@!^QxznfZ{Q2`P06Ba1 z9Jgs$k0CHRbLO<|-nG-$pgJLa`^P@!x}ndXJ?m}EtAN;p4vjx90A;L}@xI4xe{nzg zEDgC+p7uOtA^$vF2H^#w5Nd24b&&Uy>bDN?@ZdwN9jWt_wKhd3zW1D~->5~H8j7G= zN*UIW4{Z20A3YRKNUu@w!Y3Miy;DL_ZmUYX<~U8P-<qwJ8+w|%%rke@sYX36sl!`; z8O9&Bj2m;>=+Ny!tuY%p$gv6=tCA`H8vX|Jw<_Zwb^v{4OV1YTy7xb|!LR)*YaBhP z#g_L^YQy<*l3i02Hz`10DsF)ram@u(5WREGrV%Ezq2GCc!%I!blNuN|w5IeZ#7`)~ z=tF$^4uAJVZBKJ3032;d$sK8GROU~3I&2}C)fj4mB)ClK8B+AWs$bDOO8=b%(auXH zgK}TbkpDVCJf}gA^`&G24Rzc^u48dt$D{Cg2NkQzc_CC;FeWmo(7{8k3p77Whjr9N zxjGDe1<6+eTIFpx9jp<PI0VdrQjZg=@49ZEucXTik@zpXE+iHWAd;L8^a^skKG%~! zG$;+xskM&BVO`@uxHT`*s4E;2zDv!9)^nb$!uZoBX)=jk7k1+*IHf5QYHRWdF8P;6 z5ZS2L${fYYB1VhKLe{LoD0YR>+(gDFD_R%fc40LU^V8RaTYkQ|tw=F$NLVKab!0vI zrwBNOPyW8tR~&^wv>KW(9-IOERxynXUVA$x?4>~#mC#5Yx=DPOJR$-IPzBLA#x*Md z5pCE+{dOCNXk}U=UN~l%q@7`LSS+I33L(_IUzt;-3pgB+Q0IF9oRJKLctz0lfdad) zsZc#&9Y3ldbLg>blpe|~QzL%(J#y!M+i_?USLni(F-Hk)%}hF*5iY6l#PZ&qefH1) zVKa|p@UTcOkD58zA|YGKw_QC0_P^fuvk1>7Ge3bhHWaOmM>Q&i&q_~m)v4;#gHNEH zi0l8T+BP6ypBUp&wWj&lz*okji0umqh_`U><xk&W5?(WF|L)0oXe!v@%{-9stx+b} z1v|RQ?5jVVvwL=FLa}To&rai4B&^o{;MsBe&+qH<IKTewQQL%|K<YRiy}8Ej+Bt*p znFgpj?lHqR{py711P{qH@S1I^q8=tkG|8I2si=x|jkbAVyS-WWvN!MqpZ|JskcpBD z{C^i7^J{?W;2PT5`Q+H{vaSZGGCE-P$)gDM51)jqJaDBebQJQZ6lj3kmbRgviu#f< zurkgH9}+9FGqSUO%3hf#u6K-hMmkHVLaPe#WmnrN`3WvY$&wJe-tq7WcmmW)dx#Qn zIyZ{wv0@ALw01SjS#z-+fPf*ys{R{dhji;W%{bG}B;*pifKZ}-N)He;u(_~EXRSJT z^~twwx^dBZkM6W%-A(p?Ji?XJ=>|JH&cj7>np_yVjhAd^JMFk;j>mnb?b`6DjiZac zY3>!;AB%jdY(wo^wlw}rHoN?jHrM?#5U}6-3z3}kKP8Iu`K2AonYno@(B?PVztkb< zp5mqUP9DgpG-}rk^gEw?c#rkGaMn(}JH!j~b75B<!Es~jyzSl8WhW78EFgrhfzhx~ zE#<M7HiMnc6Kz3tK+{~mjVv;$s7D~hz}$+eft&mG*{61X#M%l?^u-dut~7d}qXG3Z z8{!WJ8hNF7m+iC{77&K`0xRX5Xbg6>yHZ_AX~!_Z$eLJ+PC+?@|0tYB1Rjl*9uWOg zaDXRJ9?IAdo3Gm6lI^J3PW{|q`x8=(CLYrh^VZ&^Q|$5y6J*c(i~x-T!BN=+9(w3O zyXDv|wgnxS;hI~Fl;VnPb&f>bx^=7l{LlXbPLU1Zr%PxU@CMM(wln-n&+~(DGI^Xa zs^0q;kENKanv}E<H&8Dcdw1E;xfiUJ4LR|lNtOh{N<wZwr9j0Af(_785SpkdOfXK9 zkmArIr7G{R=>W|H3P#2!VVaciUjlALRNOEhQFQVFBaXFcE8X9633POTbL=c4_g?sj zb#(POj*vki8$4pgk8(n%TZX5`Z8L8GfF>9b)O*YdAO97ryZjuBdp50lzGyY=yFK3n z#t2=CL|hyi^JBiJ^fSbHSYX6QV&3yW;fk9gz_0Q|I_SoyXoHmBM%tiIseVpQqcf2{ zGSxw)P-XyNK%c)nU)75fL*?Og<sdS;gP-6WCIhJefaVM)1yxLTT?i-wft4^qx^ElW zwXxzEkYQfaLR@W(?cR65UV85PCH_b=D}zXh@Q5mz$`qVL=nK<Gwch{{1eJmhO!%*U zNY|0@3F!!_;y47~U;?P>IPXmF*~^9_{k-C?(<t2<z2&fTyY;;MTJ^Y23*(}M(BJt! z!YLLpI-xH$20A&x;%6giu9LJfFtz)M?OU0n1>w#5Ib<=4p7-Wmw82-VsOxIqWLBz= zUJTTvG{0A7`+vb;^==W~v9qUam)@SRSsw5!AYhQ0n^~~IcP63=pjc-S>^gnm^kf7m zyS_q1e!4yWDm`s-H*QCW#vIfM5UdPgZbF3UD1GEzWYcX|&yu}*mIb$$6~4sN2CdgK zRSpi@6q=<@kT8F@LI8@bB`YSSBfC4~E6*IQ4yYLJO(@rq8@pYdkYK&P)fg<M9W_6q zNBqLyb{=t-zU7L<gl$cugD(x*#2e<+G3_{#k;NIg%FP7)KYHh#t^@k5H{YOo^58LZ zrgI3E``i2M2hTq18><%wFH&W-NvTz7Sp3f;2pLBZtp^6Xc%*RX>JTTN`>ngH(>hoa zZQH)x4j(<{{lMAxPQ#B^ijcmDA)9o1uc@)cH+z+9`uiZvjpC_{Co-p4+s<*LO>_Fy z4KZWi<S+<wYWR~;?QZ)7r-k5u`i-|a9eo+K9bscUtPO~(@^;`r!4kURTX}r2>Bzz0 zzsBzzc{s%;sBSdoNmwIF7NqgJ$PJLL&JM2w6A0r(%NPPKZNNA37v=$#wI@UIfml)+ zQb(h-T}T8oZOoxNpsfInX`{BXjMgGRaf)od{dMH;!_D!va_#zI5-3VOa?@Q8SRI?w z=fC!AR=E5Mw_tUUFZ6vH8q}c6`ADUwZy0~23%|duNVm!<cZAM5(4#qOsLQ~Bz;WQ= zVnL#EZ^o8*yG-k!Hu@x2i4ZG)1}`>3GP0E!^|h*VufF=K{o*hFqTA)xUo}%cKTEVl zy3}?Rmxu{2k0<zrIMu@Q>80?zU!`3zn&*plrIY5~PCzAaHFsi>xDAXE%Q{J}xyYjQ zHsda^ej$GrbdZJdC#-SsM@SvCHH0*M9l;^cKm%pNx}%;otukFSsg6jfFF~zu5Rk6E z8a{Q;SDTgI|K({+w8<}T&%+SlZ^wa4<t~A?@?UuM?pf+n-Ct;wN930atZ}O@A(H0H zKk`!H`sV^{r2_!I-ropTd?XWK0}lC>lUVL5L8aK?E2wNFkwb|j<CV7(PYSH^^+^T( z>01RP^D3nk638ZRr2vOb$)|53P^YaVa0!`~p<Q87dDJljymiZxed7eXB@037uiWys z5@R^u{3spSQ-|R`K37oV*MuXVLjq*-#)R|aWhS>wF2jNre@wy|T*)K%jaC(;1el88 zi-}ShXHnO(C=YZ1OD~Ow-Ia3a8kD(pbf6Pbs;hJ42l|4C|B|Q8t?iulKnNF&@<@^N z4UjmYw~>LYiN6r)p8yjgl>8NmJksvbG+RA2oVTx3W18U&Xv%(tPN&JHcq~zmpU|$o z!%?2)4Q-s$rpxw;T~oG`SGvD<s@5)!@cL|LjXlF-DJQR(?dsPnvI{meQMzI+yZi>) z5Jq1%huu#6Wv;q!ZdtIOJTePDPPQstil`!4uYbyO=?|Si#Y+J_x7tZ_>dHyXlk0gR z4>k5$%IBaRwPzNdv<c%1xq6Sh5uTjaB6(Ppf+>h1Dzp;l1+-Rz<v8-_uV)v}O^c0o z2pXjW7m7WKNV-mno?m(Z^caGL?@-6bB!Fbs$`{1B_|<SJZz}!E+!gr}!txa5?QtUD z6w4mMyt~EP!s+MZO>B@zFjrN)xiXhLJu*j&wE4{lMo-UL-69xp>p?U>;Yyucsz><C zN$AN@7M|xX*f7F~R$lUMWubVqO*%J~CtTrTVn2o+$nz6ZHZd{g`VgC!CpeKw{-d*- zH82B}27zH~ng0!&9eM$w^3T|G*Jl}U+Sx%DMPY|CPp#^wR2ygms1_l&c0M;^B)nGJ z6MeddzQT|PO|6Y~_|_dZu(jQWuRuGSSZXs(Tshr_N`rGlTruVZM?Lklv;mdMKz>Z8 z7{Kp2sz-h{+sNcKPF<rDlbxl3HXerU?6XdUuipN|W`)rLaEj~AjScYU0>27?Rh;Ta z)c%eakJ;DfzeVc{?Jp#e5=!5)W>}6flkh}uMG5RxM8Y#0AOT7+$&&g{AArCCUY&k! zUTm@B&8humk;-XU!=*k{DjZaX-j{hg!lSkT85zpJtAdl4!j2t1Vl~HtU{^XagYlS| zRdB-A)7@<kK5#$&VR9(sjy0fmfA>fUkeJ4EonW726R)23lAq{g(Lzcqel?NPq_KPV zt#;w1uQQf%jF3o<9=_E_I*jO3-YYCJtbB0;4W1>$ay}GKa1u1*Apxt$jj21Vhr=6_ zQx(7Z5>FI=@571bxFmTdU`nSSyZde5`P*$@%SUPVOm+p}q5i4*qu4sNcNO8MbgApn znJ^J1?h*o{LWkAvcqqgb-3(O1>vJR0)wimN-l8DDI0s};4qjHL(V;xdDb9f?ToYW? zi*d@YmaF{g(*)<RRTD3HD(@u7pJi^Q6Vy8ClTPKN{K<Gw-x}#lbOaLNQz#R!1ZHt! zQi4x$qgTmIpob^E(pR3;89%84f1EF{M)FvPMm#}<U&p9!YQlf~_K(>&ANym33d3cz zIsK|%PC%eBT1%Ld2f&H6O8!)}SCEqd3l*WM;%1mVbuVJ6-?#-DwNMH-@-m<`Ez+GR zwMvsb5H|O%KevWa9%{`umK0m{h<xzX5rRD@7Qv@8#2E9T8D$D-&okbR9XkvOln4FI zdX4I!`hlKfZ8rGCI67>_0`!Kg3u^^A1m{SxyEC}tmGni+|6Oz^Z$5O%c7Ln~c;=ly zxMnBt3#X?dRk1#J8575iqxGNYi~)R{##V0097DLyVFYFM3X}X|v=lB_y?t_QN1Z+S z8mg|m`-~eL3RFD)=*>f4stLT$g>#4m1B84uw+gLME)Q`35F$8?N9D)=>j#|VsnXE@ zz_<L};Zd54i*|H}1Tw4e=TIwuQXkUN({E#!&OtjmH@&_E+DODBjq3d#PA>01c(ZM0 z6ZMVPUgcKTNng|H_NGpRNe#lqi>MppMEp2<qh;JaG2w@KB(Rp*iY{o)@iw7$;~@C9 zY}@Yoo(C_S_w|gY8T+bKYv?$wrCYaR@TppWj{1gv5~qqBxZOA!(X@nsW^8)a`qmUc z=WtiHGy3+Hj~utAV~1>>cavsMoU*AGUa_fHUgy1~OWb}V|FnK0Emy@v`8OTD+4_F& z%jlTa0(Na9+7=~5+F<@UJaIZVZMN>-emjJY?u!>L_@=}hC!w!gzU(SBo4Cc7P7!W2 zjkPJKT-4_I(?*0&K1=wlw3Uud9UeHa-*2dNK%?eM8%aOoum7(ne;-8sy<YympKuBP zT9BLE^wCdn8>quhe*G)9bn@G%N(^&RZ*(vrKGgo4pTv~<0hKXdy@Sz;UQxkF)*(O# z!^1b{aA@wK@n?$p(p2++)o#1RHs5-mwe)TYc=B~$k%cT81$lC~lXu_dt@Kd`?F}~F z9((LDuY(Exufo^If^`rgz53k)Th{?u9Yk}USteoX!}Yjhz4{SAHB+cTy{yaVlz;li zm(hU3mLZpy5}w;UAlG9#mPqs8->u}$;8^ye}<!t3ehbSP_@d8JghtZLQ>@;DS| z{_vURs!G?_P{dXAAeg8Bjxxef37EG-qw1dGXpQ6bQ1NBex(d7e#P$06n*dv?U3r^R z%TL7TUr8)TOayyc(VjrH{!$pz0Jo?xWcROr2o#Jap)Lr+OL!DVYiNB1uO#)OT?6?l zs+O^eD<iv~rgk@s%M-gp^W${z)%AJ#J5Dl43rJrK2)>F@d{u<QTMKriciNsh!vsya z>vY5jI4h036j#QlRWKF!iL|*tFaSv;bA^+P=ZBZkL97S2h^@#<#|@5z47Xbe3R$7b z!}SU6elxhOuaG0!_z^`loJg2O0Mm>z`;e*=Py!^M+~hvx5W(fV=3pYS5Z4P<5Wvy_ zMzHLgEXhAh9FM8#dH6+9zAF3%jT&_gSN^U|3|nt2J5TVU4GVQl`TX)m1MZz2bGDTm z$e-A~U@u*0uvaeD+Rk1Cgmf&AzsN)pLD*~Wg~?+xr&r~-IM?7XSH|b;kpuH~%NBG& zw=K{~C>_;X6=&eAEKSl=eH!KTmK8eTue$JAxhs>t!KHRYyCF~ZH6FHoQwQzE`X6NJ zBp4A8QdWF0(8sC0K#~8su0HIJ+w&!*6FQ>s8=w^{)!-6V`BugWekow@;(j~W$_vzq zzg+NIR?(y~Kgg@Vhj_f@`?cEKNZcr9$dN>&eB3L7q)_>({dru~L*bCy?ZH2J%az9w zlL#L#L*<oH3`kX;2ODO1+)lR-g5bn)tn){CQn$6k#(T%D{Tzb{{gU?zUT(V8f$*5! z)LKqZERYwI<ii-JWt1=aOZCYgF;GP#y81Ld9M;5SL}woLMk7@f;Xvr`YB^2Yxcs~| zjh#Sf_cVH7|7%-p-N(t4Szt&DyfUHA)^J;4%3n!N{vNo_AE%MQc!UL4KUbJjJIF`Z zEsSP_&<%xN>*{UyQ(daJbqwUY5WG#lGh)Aefk7I9gEl0*C_&(TD)~1#J!g;ZLY)VX z6iOfE++x4$J8z&onh?}AFo2iTPI$p*$t(ZHIWb<7<2wtyjz#sr$A`8<c4Xpa`>s8s zOk;de-x4E}ocij_8Iuq7F~F!Txm!SjcW40yQ);8hF93RVbPz@2Pw6NzIq?teg7#B$ zfX#}dOcd0=DDK9L%CNSf$xqgIwy=3cJ(FNIn3z}&ud1-pm+{p22`@~Ox-te@Q{8g6 zynK=n;-m?WG9}dS5J#b5+>?bryk(T$=p;H`IVqK|qltz9wc2l(NcHbNV$EBQu*vgm z6rh1r|GglYE6{05Fsy7&n|y(U$P?%jPf97ogKrlg=ZGatxWs^GMX>r+d)KuuPx98& ziD9x&wd}I}g`cp#mYcXK)D54SIb>Pj_R1eHxl#L?sVUlp;Yr)Y>*r1<I6ZwPm3nbn zCe%SqCbf~K`B5ko@#1wd`m4T*ei_jgOmg#e#BxIc0CFaiZ~u;$aFyA$3G~*Y2Xvzw zT*B*RUTCq=sWGnE2NgSxTl6dKNJ?ok8L1B>dww`bqEn6(Cn89EhP)t<|9QLTPt21n zQGp2$6?B4)>Y4(l&&o1`u#_g&YDQ_O{0<#EZbxpp&A#`YZ#tNlfp9C0#G~BUSJ0v| z2m$4NQATgX<CseXIogCf533YnrzScy?j1aQ4Ek>Owj-L?ZJa-p(%pQ}h7KLDEl+bA zUy)OWCqygU4wOPaw6BuY>A#T!du{2+Ay<ucy)r8!hOCf)q4(x)YdbV#SDxl3o{$D6 z9n{Mvm#6OO{HkxENE7eaub!E<Kl`8GvUYCXsj$ZeXKZdt?N<oBG(z5`Bpg{jIbae# z$Dkhs7YB;gcNn3z#{RX6FNHb%0aWep;Eoo%dGoM+{{&-<#%OS=UT9tC{9$(zrItf9 zi7|yleDVuE(5JW#6kzj71{kqe;v=10bH3DNX)sZ^8a#NE{(=5QJG7I{Hp(*L19DwP z{B`ziwrg#jHZ_Er80DV`6pca_zf+SO63}fgHc>zIz(aQE=p}m{wS;Hhdyj(v1>e9e zAbeHyW<P08bmDikw=qX6@JL|?bGAn7+qB6JAb8%pZ$G-F=j`&}AO{L`(l@51Z%kKQ zioQZ?hjne*68b`ge@G^ucVc@ZW|2BDL_gorTtwAmc6MzeC_KYz$*bb-9ah}6!&>k9 zs4ei=<J4<!+W2>#cA@k#YqfgjnyvTTX`P>W&>A*#b@e)C4nfWpjX`?U{5r7Jf+Zm8 zLb%)7*KfC@r~B-gGxo+CZ+L&N2RMf)M;9WgZc|<x>LaTqSmEdGf$`4uPU}D#cBP@_ zuytUQ-Tu*!SS!MD3E6zStcZU-r_}ZRP2lhS)Zgpn(T#?yoa*Qonovcx`{-@f%I&r{ zzp>S3Uic3j9vSm_SfV?8gA6RC7y8Q3ujv3y*1v1M8Y8+24giN{>unr0sLlKDu<eIG zYQ4Mm`E5F>W>Fbe8ud@=uQDTiIrpJ^AF`jIu3b2N3OaKES%kkFi*BG?x;V(e6m9Co zOjv~!&B^v1I%>P`d3Y6wDi|tJ;+|)HHGv-gj{Yvzob>aY_?pw&lY>`_9D>w*S_g|m z`B3I8qQY82r;0gX#rizupqHlV1$~9utNIRo^`}k#0t@=FsTseq(N={PXQa}<f;$DP z%rw6YbAADY@n3X^1`h{NFew`~-qz_BlPZS{U#-DP?odUd2;D&{e`3tcJMbNTLro48 zlvTDYcjOzw>m~SwG_RzovI}cy6fhW*5R4n(E9<G`!eI%NfXcs~MxZU_0YYUhilS#k z>`alc8jLcetl^}@BWf+irK3bUl4}_icn{Ymf9&w6of+kd#3+?XwaAUqSE`z11rst) z_7LX&Vi-$;3A<6ElL`jhB-iNQx>U;~iJd7<Dg`l?poK%9_yt4B20kifJpz__l)p6; z(6I@v)r`kU5i0;R7)nSx&2`3xdQOm0(NwQi0r%L6j}of2pd(bqLpiMKNx4tL8Uply z;HZuc)dm53by(u85+ME>xSBRRf`AV_xq7Wz9f9)*O{ufiAdu|J|84DawjE*geS7Qd z+~}O08>_cV<Mp<?zm|p{68kKt`dX+zo7xv`TgNPM7OaJ97b;iD9mKM53OY?VLfRn* zH9;rG?dlW_8UdVkjj~FTvZ3-@k@*rtbQGBIPJPDC*PgY@cG2s#@Fac|MK#nX<Q4dw zx&#~8idh*P(aXt_J#dpl5|D?1&VhlzPwhabK6>i=?1A}*tQVc7a&OeAPIq&B_eYw? z?JTESFX)wXGB>oiJaq{(exfNef)POhHjAkW5V2$t@XGj86#fNx!4l?Cs2y}z>a(<% z>EnUC&ooS0Kk6H@t0xY<z8@b@(7QN!0KKl9UTzpeSE~=2>KQ`%P4zs`QskjY)Y&X? zic!0%x-zS}<n;+SAE=mos6W#oUe$XEpo?@>1%$FX8L9)w8b|cVh4Q0N&-K8C-?NFq zmu#}@7i_8H5e7D$l;#;k`WAnHKo9sa&^7W%s@Ko;v6VrIKb_Vbog7DB`3!%E#IwF2 z10y}I`0+4lk+M$VDkAl?AHSL1`uR)t*wsZIVhazSDyAme4Rh1>@W6uIzi)tRXL@LZ z#k7uk$Gig>`B*ZcB!gT2Gh98pHb%aqlk&#+L%7h`V?WmXsJ%CP#?IS?P(QT@b{hDQ zP@qA-P~h(16B-LNdgUV64RLdB=b+3h#RWKHNJwKJhM(%L>Odd*eIIRjg!<X%btEPb zJ`qisUloVfQLdPck55{AtHukRGNn(JQ6YI-(noy2KD4@*SdD3fyv>(|2p4=BJLL|3 zLYo;O(4QleT~NR!P<WhUf^eCaIcpm`08^XUn9;41*3MqrclYP*{I@RAwufokB;m6v zlBAuft%r$Dz+D<IpkHZ<4?r|I6Rc<m0&Cd<v8v+|NDEGX$zL|5r`!n}q;Tlr3gC1w zS0oz`JZhbrxrW`+?pL@KXDySW`&Y=B;GQ0xwq6c`wX(6JenZ*nMs<z<Uge@^zNA8X z48Y;WjDT@Fk@1T=<Uwu$<hc;bBTKBDYL)&h<u^FWX`f;!KZkI_%VAe@X&kLXh1bY< z4QgU^(vUi+MYwQeJjx=v6PC;p{N;^T#<$1SPin`hoKxinwv4AdKG_4j+73_5+cks` z4Q*^v%Dq9OF<vL@KKq3)+UZj#To?2bn+93>l}VSFbUK`EFR$Rtz{TDQlZ6H>B`1)j z2rgKp{IzK9?eDiA`SCAUA15}oP+G4^sFf!*J-lP_=)=~2`n<JXyy!OrypF9G*@poK ze>Du4)4e@*@saz@`up6y(WF!dT6$V+$D_SAb%vW77iZ}Qbj3OtFB%-F?s+bIn^c>U zf9QHry0eo!xce>(Yx-M1u@r$ql!OK7n1K7ls_gAI7Nh!6ZF)6xz+&qooz~Ld92S}> zp|!rLDv*Zw>qfoLkK9&oXNGI-(luHQgTOKy-9ZQqBH3x@euIhjDw=$}@IE9U^ZrMm zaz@&NRgP#&yedAvVKJHdGT`FkQvI;P)i?K`YVM(1=20EaJnDwppRUQbTF-ViA!a6R zc8WtM9Qtt+=}h#>f9TRB-psjbn>KH;hd=!p4h)RhIrKS8ck|fTC~sa&aaua)1K0Yk znVVkHo!*b&dB?8ZJX+Y#NxE4ZJa^W0L|5%INZ0wJ{WU^c=hmIvEN#Cb{sJQ#|MmQj z(NZ?7g+;1N#-<Rck4)H>?shL5mCuGvibMUcA@3Smwpr)4t=942CvB0uUFI-VT`M=< zP`8rTIa)0p^`ZK^#QJcY`YAP*>oz&kS?zF>ug$g`IBZiR!}iFJd>Xt<_Rc#e=*x6b zo~lXRa5;zS@P}lSpPr}6BkKAVgwLP<2{x{`Y_)-X2fZGL2DUK*)Q<nA@s}&U)O<IV zDenh5pLoQhzNrx%?gKmbSmCojYp=JW8sn+ow3Y?ka8aGf)f?i6wxjtK{;5qkNI<Un ztM|0v9hztU-g&^<?)an~Ir>rS+q#`o*F1bko7DVb&2}hsF=@Bv+!A2l`{f<<_d$Y} zQHUk8D|)3n`td0@5w0vQ5S8u_De$Sle7N%B^jmM(`S(uvd?cGEm8aw`#Z!0@)mnw_ z>u*$5L6Lbiutpvko3#Cup_U7xu7O*)g?S!X=B>9yZs;wt(WN)nbmoKme#|bJ6FLUU z(fb8a6zp1q*E5+-ZCYc!{G`H3Z?|0?9!Dh@Y8Bsy(G6wQJKuaz9pW#gm%hGfTM?!t z1Ks6`hk6vp=JKG-rFenM<W&um!pcfDbCu$ANbMK?`+xFJ94v=}aUnDE)*pR)u%s}# zvCHW}vSX28S@Cr$T3>!kFd>TjVO3ta5xZ{Hj}XRBn$XBge*tfBXlJB_!gKv8c$Jxm zSAI%E1<=#HXe~>__8vm$$=Nu`rc=m3QzCp-k30{OpAd<d=vEx(O>o#3xO(5kqjw+Q z$8~ki<*N_{S~4M(@GF`m1e1WM-bQ&Dy@kfpf*v7tBsXG|o`mXpg;~n%C3uoa>4nTo zn7zA8j?y<0Tuyf>ShmVAxxM7FgaUlxRtnk&uTAnW1P`*&;Hpl<LX=g1LnG4lTz3E1 zDR1MoSS?Uxv<Oe8ypuu@0C5VgM*!E~f-c(bIXm1xXU7Jn?arO^_OTtab{zY$&9k<z zd)9hTxxupD1<yL+q7uyGls)fO87`p<=)~ZpEh1ph1h?AaEoF^=lLMlYRr#k5q-z-= z#aN@AYdCF_H4{obOV9J&D`eu9Z@w@>K?FY`&bt)_KL^jpk$*Ds&jE-g4Srqq-S(M@ zNA2FW2Y5(D8zee`iHXFg_8Xm9dsevo(x2L2cg=z|Pmb6b2FyuRoVYNk3@}7eGxJW+ zBU1_qN%VK268Ok|aL6;k!+`8D%y9q{a0NUL?%~8o(AiU*vmaj^vIlu!NLMCR4xn&6 z`drT>Sn;=j;N<G!gtbi|EcQ)Xg$A0mJ6XH8!|MBan1wc9PaD<1q=87fr|J<H7nwMx zzXAf-26jlBXTHjNeDAqXS$fVTIE2L9A00StfuYPACLgzj*&&-lSMYLOJN^ivfjx8a zGQ1Z3;T-XIBS!p5eZw%<0;Lv1r+vze=Y)HyPJ}k=mSBh9EnSVarDn?NXC|!3gJWGh z=DM$8${yTOZ+GqOqg|uN7dRq#RrKl@DrG2>kd^eis+}PXZMvNs9I^%4VYBz28|P2h zw6W4#+ilI`jdrT`w2h(qME!@WI!M&`<RWn$s0%LHOZ>-%grEEq9AEVxAwn)J_$w?I zs4Vb&>tSQ+3k#pKhkG8Reunm!q1d3s>nLM{`p|YZOtjgea`HZn^z$5q!A}VU|3tUw z60P3$Jha5Qw=+d?MoQQerxag#fCvAT=c<qMOe{|D;`baUe5D59M#czbm~a(2Sv+6U zY>Ol3t$uNeG(?B~B+w*f&u(b&VMA1fx+DU<UlE{S<j*%O8VGaz;1L{l&o^-R=?DDO zNeQRi+DJ-9c;@OmZDPkG)_I6)lAOR(n@=WCmRzN8-rw!~sQji;XLE(}>uE!mwAzXr z5kT6a&24hHkBCh^)xVYDa;xI=RlNxL7w}giP&p~j=g@Qg_Sq}O7MIUqQuzthYN?m` z%fVl$pPUdK8D*oHF&=&cBca`dvtR)>kS)3*Og0${w0k_qD>q;&(fE~1e(Gi1%QH*3 z^rv6>^XL2lK|gx(5~rAot+9_u`R?Emf3&ai3H67~Ts`tf9Y1~IT?A9;a*#<RN4xv! zN5qMw{8#>Y6G$%ktmTejs`1{3k|FxngYfzDU;JD4z-K<^LNqOqHf+G9x-i?_W!E?z z+4|l&D^5-ZG+r@7PH!0R`;4GDnuO2qe(uvY^Wdkrr9=O6L;QvMsYm`6nx<^}^nxu+ zlA-EH#Ge-w-^gb03H8>4B7~Zj++iLm2X;J#!n-8(A?_XgBy4urR0k9}Wu@|*e@(rO zw&`<4+x5T}_+t*UQU1WEwxK%O-NwmY8@1C{P#HE86B5y)DbnR61R}#Q;o%WR_V|~^ zmEb0R3KJfWQ}T0IWq|v`vnK8u=Q&~4-BxEmdVIn@d24%EBW;vF(27CT&pHkP%rK8x zoI%LR`qBIGz*s3?9X#}ZQp+)nK4;DAH*-~8r<(P5kn7%ud6e+*F>Vc@+xZaon-1NK z0D6Fva`Sfa{8_t%3Wo*kRm&shx56YiY3kc%1G^7|^1Hz`pxCTt&Ye4F+tERNJ)_c& zCB7zT9dpy6F&?5s{ZkWjRGq9-Je8sHb7O`wCQgc_wpq(f;5xlk0&d4gxnU_oo6=G> zl<KaFBV%@kgC9i%_}8UDsM22^D}IVwMEJy33w31Lc9CyQ+(eu~6^5(f5*;4bfdgIc z_x{~VTlGQttJ{wq=n_A6?5I8b$fs>!+Yam5eUoiJaI@>^S6$w)aT4{QaWj3*-#q@j zSXRlD^|pakq6hDkK>Dr%oXWA02Oqn)??dfmuZ<3#vEuv~xvtJH7_Iw)yeG69O<`oz z8dScj<8!Q&hZ{EWcF0Gq`OcrV!;k#5-E{k%Y({Kx6{x!HS|^oAs)N@v6?CU4?(Ovs zT-3c<{`B=f=Bml9_jvN*?w=2japf;q|0cWQ%5TLVd5~apVYA$TIQQPWaKs45fvlDB zO1K;^=`7HnYxA(1TMX4q$|3(oN9GqTI+;8=Hg4So4npwek=D@KU<`lc4|W|8lfNGn z!>&iS^+2fdrU7?7Ux!gVw?nJ?HTv}sSM8hIH1u0<UmN317#`kTg`VVJjUV}`7g%H? zbdkq({n2+KsQ#rtpTFna@>gOhT*-!;PVx(Vio>WDMmVLTIR1%tcSXMy{&*1EfAtA= zK?Qqq>#Ki$eAwp`4jcfh{;Gj^${|#dnJNU@O6{sFs^%1>u2PXpfTG{ibuz%DU`3F@ zF8l&_{}|1M;Ib2>Nr5Vz@%noXtw*o?5v(Tu4;)?MF}o}Fr>_<4mCJ25hU$eHHDD)1 zlOA#8=qph~w}=czHo+>Y^fJDBp&tEdJW|sjVXzi&f{XAfO#X=uO*j|WL7C-Ryk6RE z=h{Xa`h!%dH*7=zMjcj>$(43Pu8mG1B;rIESH!~ZOMnqAetJTb#CR#hor%=s8NV4Q zmI#t%cVaPp1B4#z;bm{GRF6!~qh!4S^&(6t;C(HVrBeYUf8|XJSJcMYr8{xyDkp~L zITg`}%7GwkPbWzgRpsGr1B-+T>c|(CVl9NwT8_S^D~4hy%!^C4ROOc8$kCz(>E%b@ zER)#L$ypoXG(ZifC)?2bbVKDA@vC!cYHqc=mhQK<u{Qhm@>lKc;_EhE$FrBzt&*Ta z4Du%$_2Da<(<=`dzHkVSSUfy<`)|(e@l%ix>A&&|zrsS%_Rj9H2c{pkyF2cU{H<Mn z301YPw?Fv%BoE!R4-eVb*iC$+zQe}oxI-C{c-Vk-l0`!@B3Xase%|wxu_u^h%3*`A zPCbXT(Bnz_+rKn!k1UMay?s2MNgJ%XP)G=`^Hp34Ko@Twu+xoKto5Ba>%7Kp_*}sX zOd?bV=ee4>tldsFQu3#t6Jw%H?O1}CP_EEfWP!p#9p>U(2~zp+2czjPkVRjEFujgP zP#YJ&!s(3{dD!sp+fd_uY_u);0!RF*3~tn@eo8nvjsWxY#UYa#2VFO9WFSqn3U{!V zN+Ok80m3`lo9womw%Wd}(_C{351mS7P#d_KP|Z=$)w8S_rkDYj_g7ehON)*LyT+np zh*K|yaJ}Pw@~6CMrhY!y|A2K2wc8&rK4vf3Yc^JgkVtJJEtu7&vUZiIQEdw~F4en8 zwflw^1%xwEs<*+WObZ$3ZrZvc6_<*3)6#x>bn#*PRR1Tv{jI2<DKVn2$9NgSqfWM+ zx-e{QMK-<Ko7qeV6DIK}H5;NsgRYk)KVnx)%&eSc!Bb@CZ$xCAQPv9cAE6SQ>a9G8 zoBGgs`p|2fHW);$1TX6#VAmKJ^xrA^Mvd}EedzY%_u1vvP8)gc>sB-LrWKYr9Z&lZ zO`1#i=CA0IkVEy&`H?%N2oU_q>60-<#H3<ZTlOsCE34Y8zA}PWRnho2!%Il>9eb>1 z&wbW?(>(~E*?>wrr-JnuD}Pq=SNS!<-z29ezkgzg_YE3sTMt4}skLEzl+H{E%)R`C z))^9mk+_tU_>~dS$sRlcDE!DjsSTi460p<jLRpm&>C7Trxk~w+yUN3CsL0Cqp{wzr zWL66kf7-;=SbpO2uyvr%y}OMup1F)pcc^YA)dyK!bGk*ZTXH-lkLWLF@=D+65$dH_ zmQ6wc_$6=juEQ{oDh?q?t!?h)5vVG2v<z2FXN`~dG4OZ)r+*aTLYMv7AO4=b`oa%w z3?Y|{P<bDr;!1e)-@Lyf$fWS#TKVfp%e}>?+JPQM+<)^Sd*pMUw@*Cy2x?(8hgts^ zQBkXW{8af(-v3E^1C<2*kAK59z4{hvqL{;|o~gc7Mk*)mgK;S>%p7COm3_PI0w<pr z?!CwPThWJZAjLGs@4X+@0qqy;^y5P|{wnj^ac#=$oSIJY@|WQZba;DIf9fIOHv=gF zd){b$<FVYIm?|j6<A1=${2;AY3QN|yzuvYy++w@#-R2K~zn?j19etDLFrU1YIa<>- z`}*?>_WFe)dfoM|1a02S&wE9$KP93P(HU1xs~1DYU$A6-llQgJCA>2JA)k~MdD&RE zV0$*r*n`KG?CxV-^e<J~Ux>M`UoSs|y<7Gkv@0BjxpwXpn+T&k*2KFA3{c@liSj%n z+UvC3SFc>LYePX0t%be|XM8dS+4P0FE-qCYnwMx?QGJ&%0}BB3oqW9wK&kpUF{>W6 zzPZg>H*L2~yZ5;c+4oa^>&k?60EK!MizC4&Pu!}>O^jt{P$M@oHDrBkW_PtQk3iTW zlgmDLukS~7C?=92h<>Hwa8v?QUTXXq9-l((#<Y#H2`ZXW9<N9<qF&)&;h{RB6RbOK zLRAmz>9cRVVs}wzZbC=yFsGuWms$Fm=Mj+kT&aS#3Uups2A<d;p$)2EZslZaS67$y z^z~VL-vB3{Z?>)bZgQbxs6XpQT?Ux=+YW#A@OSR73V-_}fAB3Dy#pzueEp78)MZ5@ z&lIqJR5uK%dRWiesJ*A#jy>?Gy^C)5!Eb%ViWi^f9UN56MdHf(8m1kJ$NRK4RnuzI z?c1!d<EZuB^by<4=2TZtA8$-GdL0SELKsRsl`*@LY=LDUd56cRMJtfM3?`2vdU~`R zK!zqCo{J}(9+Zodf<s(SJb7in0-qWmMLvegA~`gn&Y5yo2#}xhWQ@a{@7L5L5PpqA zTaur3_&aCnza^(&oJVa%E$S#2(KMhF<C3>&QLb`K<A>(pJ`ZOup!uqwEDr=Sk7aGg z4dHp#U~dkh^S%X@mi$wndP9b28hbMJ8lfXmW@LY=Qz_4sN<JkQKBt78#^_LdOqrKF zqQ9(Vroun)B#4xnzQUHrC>OjBkCJ@}PEiDtGxY61BIJnvE(DI@HL-HYPssFNCTm#4 z6Fz^KOJ$`3Av`Q@h@mL@QEa}f+vMRBaSiP93yY3m&tM6gMQuf63xgl0E*u3>Gn3;d z`3dy`69iqK8oWAgub!T^7thsmt+m;%O*PoWJPSscUCd`jid^v(u6z=n|5UhN{wybI zx9h>ZpdunbMcTy=6;@Zb^rutLdf8TkjV2ze4xXf?^itl+ni&E-EPCi_zpj4Ga$R%@ zA)6N7O-#gf>dLR<L#P*Lh9GB&i1PSyp>EBGWp*sG>jbt=Nlwkoqtlh$C{88TAsi~Q z6R1HYRuzX8yvoeKF_9E5&*YzA<e_??4Tov2&rOaE+v4;n`e7HDEVHA8&|j)YBn;4U zSw=V#uc@r$mp92j@0YhHc+sJUNOTH&Vur``W~kR(7jNQ<jUH}P`6=y6lYIP}90294 z9woUK#UED$hsFo(t;tvH&E;3@eBq1@*Iu*fS~e_d*zNKbq-cplN3r%#N+2<mgVv1& z_U(9Fi4NB~ZS&$5yLs`59cw*q+uC*@_;2^gbT|zcX^;3)zmw1>w-}UP@^?3BFLG*P zij9}coS=APeAZrBs<*TC==bLI;}j3|aV7=+$``?Ej!77j!<geBXZ6l2rW$$G(h$wz z=uDos&ZT+Vx;$k^IDLD(qhQ<HX@l*pekwV&KaZUep2J<mng>&I+JT*>f0?{CYV+r= zS@F^=r)ufL;I-zSO;)=LJ>kH)u#ZX=`ZL_vC4kmHErxX3Pp77vF8-H1IQUI=H+8ZS z7!ve6&L>QMEwafox71=YOMNyvzt4tie#C0K?{%S9s|#n>?q8~~w!$mpZ)%D@loP`9 zvj~ps8KgPE!&OONn2C0$zalzB$KvpQK#!8js7^(BSBRj776%}>RmR}2L0tVN4;gae zSvtDLP<0}m&qZFgUr+xTkgxr#l+^yDqkC}lqP;xwioG!VvYo0q&H3_So2Z#IdT!{C zSFgPc5{-N-22MGJQ*30+%aQ7+^9uj5{c--=x@tOY`|?)1rS_=Z)^)4x=-A;4Z=IS? z^;0NI_}o?L44zefm87nbstr!@(B(WQ!KCs;n*h>nsaLm4n;?`K@G7~qaZ^SE_*Gvs z9^Iux<s&|2k1!xo|E<$X+WFV!q&D!ZzR3y*Rdq5kje&~oIOEst{G_kTE~<nnT=eQ@ z)C^@fGBjw{PQPwb=U=ns(X+NRJz}*BoQkIW^q{b}Id4n>na5{*PLnbP$uH~H<#4{> zCCocBLN#a5%h)huiw$kI+&W-2n+{pqj$_u^za7C2V*~<;eE!Ak5z;b~_s{HD+zt(k z&_72ToSz<Nqi~v=U8qoCbEk#2SY!bkRB%x;&YKe*@vA(8a6}$nwpjvYB$OPHXL>51 zU~A$$!(*n>*X=r=>q7apP=5J3>Sz<qC2Ve6kz~$8O+%_-rm2_H)XznDY(n)=dlMUZ zY*6V>e2F#nlA<d!8YrTV>SZtr&-=?4w+9pEgNyPa)K5L+JjWXzlL#2br^zc$J?mP$ z_)GOO;Elg2nKI8c93-hZ%oO$W(%^Y}?ZxNq<sUw4@11zpu3f!iljzyk{7s9NNSav6 zxb!+%V#)I%lw;(@`48MXSnO-mCrcovg8-e~J+^hnE<1Yb?RLvY?yzk;cUfz@#`yI= z-X+{s4FNufp?=N`UbLE5U$?fGU$d^$=dAhKh&3`c){(b*QT~H8dc<~-x<AK@z0)0? zHoA4dhL7HCi^q?#h^PHYcv;c@ZYX{D(;8wL{ze9eZSd7AcJ<{6n>tOuHmp<8^shX& zt%pgyYUn4+tWaOet4yg52Y-Ic1`bgP0y-h7Y^-gpv4&1gJ#VeI&LfRBaJ<iYc62k& zv%&2A<&wJ*2F0J+ALVrU%Ba15l6BI1i+1)}gAGsCp<a+1D_SF|^@%U<V`4(dp7ESn za+DBB@l<K`@gLTf*fhV<Bf=dmOSZXV!4B=<(ZPLf=)diNKl+yss{G(j<HP8+t2T1! zf=yk!!U-}q(GVanGe7l>$v~OYSoR}=VJpqsLPrvK$@lGLal9q~Lml-EJe_<jFxq!? zTi51o)`4J2>N`G=`dOZ^yPkgfX}jyLyQ+k&&ns}Z5>|O2)sai|S3LS*&76=ZdLOL~ z!`M%+j8^WWDsml@(pP%E#$^65%Q!U2e30Y3<Ym!?#jEH4brPr&ta<zl0<h6*LpF5b zoL#$k&ZfskY=KkJ^Q^6P1wW}Qs1p5#yd*%=3CnsmI2sT_7r1fSiB9nT?K{z5-tQ-$ z)klYp<%W{T;#TrE43FY(9{v{oBKYH!dx6cD&Vk4u>ZzL8{CeN~RlOvCxBvh<B}qg< zRLK_ApZD7as-RuzwMt#qd}fC6;@ms0+q>WRU2AyzYu04UyLnW-jx~(dwt9qa0+|s< zdu)E-u=U-1hYjpMVm;itXl7$rx5vY}P*Unr(y498C$ndk5?on$^i~&~fksPmr?1D$ zIm+S?s2~rHFgZ}~;#YTT+$%Tk)(?qXVQzHdl^5X^xH3RF(m1*jhlZe!KKPk(#L<<q zEe%uhc0YbnnEZTw#6!`|Gh=piTc2(2?e<|#<G!oTr0>ysRC7hmrzLn+zvRMZ?7=NH z9SRTgO5s)csT`+hU*{*dHQ$Eph`EYxKd1DwZ?xoT6^=^7(#<B>7^_*}_6M62T2HGV z)EXw)eZCxJ3qFqkiT9NeHrSO1{ELen_fulRLrJAIk!J+nF2f+qLHs9C?p|g7VKyqS zvVwFNFU^s$P{e6r=MxKogH!f31<;Dh{}lpgJkfmMf@j{W$OO=0MnYz<I>Zer>l^Gk zKj3zK5mLCoT4AC`1)ly9rWcDP`S0J<=RytVNIxs{A`6m56-0tkO(Lgf=4^}ytj2h` zTi07T^b%>(SE-hpN}qgE0`F*A=30^}T_7W6zRF6I4=n&Bbk>o5?R2`(W*w(aJl)E~ zA+3@`frxJDPn3XOgQRxmXEdlN{}h40@K3;jKmX+I@~&{pnc!j&ZWxopD=v#1CRYV^ zR%@9pYan$+=kP5PWlj$6xcKp}hnB+Snf#qxg-1VGb$WCGo~D^Z&NKO$nVz&s7OTrz zw8h7mLhcJoz~z=3`3Wez>~u0i0<R|N@T4QrRV|%5*N(K;gM4Kmt-P}`JRc^q<W7F7 zpYwh~9$j^F2s3BVZ8kB2o=qkP2p`ghjN(<A%5*#&&xBj<WKXaXoHJ$gle(=<?FbaR zsl#0H7Jm)wxW*mn%6N_|dS+pnrJN@vsvxxk=T8$n2^lEI$>|w?ly64mN`9wPKw0}! zB>cV45R#m!aC#z{pIg*{a)KUv5kA|P_;hkQtBKPZdh}DOBy{Q^Z(_8(*Q)j`tsI2- zTk!sc`ia1FhQ-{(C|9`Y5SP83z)bj`izO?ba9P4h>slDX%>#SUvlNz#%ET2(o>r%v zkkn$Wo3_`6y~WiNZRAv24(qB`=Pxe87trZFL-|ckjA#9GHh8J=!c$y|=kNtSGmi>q z%!XV(sN@5X%1nzjU2ST_u4`-`27hzf2%>+Pru~icFxn_P@>2-=7TCm4y>xoSp9+MJ zs4Ed1OUe0{KW+!`A3<jE=vaKBp!Qcp&uklgOQ$9#2r|9>6=M4fvBGZ-P4cedm4eE@ z5innd+6>hLNh(9v3+;4M4@I`aC+yw=!B=wU`Km1E49c^E9|izDxT=0rw~=ZoyC%j! zjT!mdF^ZSsx;;Al!%v#0c$m1W^pjhCDDwlA;T*h8PmbAy7Fdjl(&wm&qvFMqj5x#r zJi5Pod08t76`0F6u_<a+q#lN!+92aYEqaWLEF7CTMN!YjYk@_E#tLn~dNxG(yghpP zC+}Zo&pAA8_|rsrmOgYz8`@mKn?XlA1HRKHaE~HpV%*G6Dd9-&80_hLPz)=N7oao| z)d{gCc+_Ii+o1Z;YWyWU8RlTAOfR2K0#*6=W*%ev0s>3%sro6syDA{%flR2M!T!E} zBSHxQyncEg!yGO4F@7qmS^_JWsRp#tFVxR4hmoLT9KEt*qa(ghm4I5|GT9io62<y` z;4N$_F~)PXTPK}6I9=Do_@F+<PgSjB4w@3AMqSrvuC8)Z`&)#+S=5b8!QV1t1v^AO zuZKJTcU@%H1yEnb%EFHqu_=kLxf%ZIC_B~F1})4sz~6O~1Hk)FHey2mGHX-3L7*{y zj)NCV=!x`t$<KQ7YGryMR_aex#e8#`xkEiSqMErH+}hPnJuNza1rC^$^LL}^mM97J zGw?UV8fju&b#$B!U@gM6z6lk-tbS%~;W}Jb3HE~{bfJZYT5iHLTSo_TH26~c({*L> zS0!4B;0@Zme)<@%Tc|UP50kDEXMw&{H%YR7<$8%Gp4Wl{M%|0*Xe}Gb6126_26e*L z*MPLi^77jtGuHwCu!V2R%k)68@=iKZ)qiL6q)6XdS#%v1$UC+1@aKYh<`KfDn=x8f zug7dOebFx!Dl=@>&v8>(x0SWdR9(^7<eP+9MOlS{R6kY;PTq+()eqJAW;T?(@1kxr zacfd@B=zARq{;Y04x&v@=Z}8c`|S1dw@!jS2>v!&etFV9h&Hey{dJbDw*%UPPV`<n zcg9}->hD_3i~rsRTAB58KyQ=-ZI^0#ZGOwGw)NOuw)5a&>t@5D5m|%OPpEz?|5g|X z%F~p$XRtZXoYjNf%}?f^vuA!lx;=X6ldtmb7PeftoHA8m9WL+^qXggx?+(@pBW(P< z^#YF>s~?FFx^4OYw|8c}k|gJO&h9?lGt)f_mmxWlMxsQSvPA)uVTiH`U&z;je}Mjs ze}S)jrJvwy0S0|z=vszg8=wGMwkd&vwNVylI6Yghr~N)(#2fWxRAyGza+dBn(Onte z@_tJ!8I={4CyVzb-YeJxiT8Z*=<$e-XPkfcU;kdU7+3DW+?65I!8$CUd5qE{-RSsO zUrxTK-(mXJdtV*C@zpQKXSF9fH~7r-jORhu^^VPE_T1QGi)#aD$r!it`Sg}PL+UR^ z^m|1g>qfgbzy6K#g^RA8$;a`dHt%}ej1hNF#t(n?kGgS4zYoP4As&Ampu@9jKW-6u zoQnY=K*!hp3Hp|T3%ne+0Ue(30?~@OTOVixnsEML=M88h%jUB7H|h=|ybG5)vC)h` zayE^_mz<Q1XNe^XAEB#vIafVNl@pZsc*711a(3EH8&|(kkdik5?(+S{`@g6`cXLV} z&Tpw^5<k<MCEsk6i;nW9i48eTl}YKOuvmNH&@jhEB%76daBJTXGr~JcbKi)KL7!%Z zM8E2U;6&h?o9NvbWT-kFszLU%rK{n<1l)D<!30GgC!E?B6S&I4MpzFKe7tlpO^BvP zsFE=-RorU6h2p{|zL~0Tn4ZIduZ^-@@w(r!ji1`W3C)FKJlBUi68R??rB);79@(hP zfE}SWd@qj=;kqN^oC~_RC@$v!xT*OW_SMPAmzc~4ZCNZhoM)wd{9q3ovfRxU&uC2z zGiiI8F_I;ofZzffz{)p4X~Q$Mi;WabQVm%>|G=aPIf{|&t6Qo~k-kBot8qU6c%D?; zEiYZ@n?Z3CY$w|U7*k6y#)z@wj?D7sdW;|Qn8Pu%GUbrlCz`)<;LrTIkmVe7`;*1V z$Y@_Z|M<|s9oubQUPSveS9vpM{fxT-Jbou@(by5~;cl?!`c`r?er4QRJFCf|qv`S4 z%ujttP3NEWEwh<GGva2}hz>|QxNwSg)-m+lj4!%uSnWD<CNuw|xb93gb5NTWWg|t; zKIhMMxv=JJ)i`EbX!Ai=#`H)>FbTZw8&k!)KB!};H734*t=AUV(DuLsR;h1|TfV?h z8ny~7XN(G6+QJ8h*pSsZ7%MCDG(40;rjvLPBNwfh4iRmrYbfK$8ruF^M7qG}K<yWf z@Bz;u%MsPLgunzZM8T?-A#LLs_3?pNy#MkiFc_#5e65S99WyS3RgmRwBV)vM9`Esd zITB+gSrpgJ^MOPSMk|@0T%$2R-M+1J&|z}ImaVO;Egx3c%!q5yx_;6|itAl2JrCz_ z&fo3heW9$Q3m<N0ob8I$o5ki7V@Dgi_IaJ@ZT9B7@w=n;ooSBp;a!6mb9Qf^D-HO( z!+T$RX;A;FqOF@p&d=7@UHf<h2Y2Ihofhk<PnJ>6Wo;XY4q#{>pB>6)Bt9p}uiNE% z#&64iM&HEk{O9~*yy~5xx|W%0-)g@tz&t@)_)@E^FIqooQ*GCd=FL0pG@IestS>P? zHAiPRmpUKEu&3C3+bjN#b@7zrw^v>jyl?z6N7zs**MVG9<c%@UmzK+p_BUK6G)cmY zx~|Wx(R|)K^~Q4!3q5LIv@x|WI&0q^>m!IiVfzlr<|OAp9oIwRM?dSmo|^%G_Wyo5 z{P4g0(Qy7}|7mz~_nqO{FX=BGfBRn!zx=Il4{z&>Q@$iFpWjNr&GqF(ze<$XsoC7B zBI|?JA<JOkN3s+n<P}3U#`SXREH}>;q4TvZIv3-gsGt7)zyDYLrTa(m{>?e?p1ySb zNH>e#=lRL{5}Pk5KhPt1cpNHDxxRn@*S|fyuOI5%WM<FP*QBh?byyqFJo^$nD)%#O z9Dk~f=r7&VBMbGoySEjW*!T4XBIl?#oMS&ydGP-KSowdZ$4oxfM)f0oVXHrwA0Fwv zzOTPNd!R4KxxT!kJD(|i4vnA4ttD9rZmRp>AO0@-g!hz~E1YY3<vXAW!gYOI3syaJ zw6*e)OMvK;0PCp4jSGPMsE%=xJVZJ~+~BY+`sTmNa~1Xy5U2D)(&D#G67op8Oga!B z+}Z|q74m1rz66ThZ6bz_j);#*`lwVkt6R!;NLtX+>w2e^5Q!@~VKgb9>8@qIo#alq z1Z_4;1OpU*cFaUrVLS`T3MaV`xZmJkfF7la2@sQ#Z`#W9x!g`tj<jp;9&Z9}>1q~W zY-3FDw$Vfgc^yaVs(GvC<PETrU{PWY@Im8l1TKa_rXY!2>3JJQlRWRN^-#OEoO()@ z^`?z;o#nLcj_!)&42=t8fqI<r)S;Wel)N`ca7|VnhAey(LDO%{PEN)7$2YvOQ4_&S z45d)h3f{SdEGv>pF)V@x(W2Do2AGy5^~p%iKi*_`F@Es-m-Vw3WV~_gALJm5XdfSh z^?LEz#rJDz-$AJ!WW*OR_w*-ndXz6G;9>*UkJ7GG7Dn)NL0S?qhB^nit4P0OIVvrj zcXy?2G9x9h%ym+kjN0!pfzzoFwGO@A$Y>X{!<aSnOlv4V*247$|7i~I!I=7Gd8@6f zIMT>i^VAgUsLP*@L5NKDMRM9B<H!2RIT$|+s($q<LmjjZT%S>_<2o~V)sU7WYq~1W zI`k}KZ7J)O08Uui{8al&FJEv#=YCOPI=@`Q+}2$%<@z;dk26?Z?`st+Oqa)+VEe|w zXI#T@hrF)O_rF44lhqVPjXR)yQ=WFo*dRUAkMi<owB_@Tzl_>txlX^`=X|NOrhTCN z32a@gDHQDi^D7M0yQ{xu<j0lVzQAoKHer5P{2020@v~}G3KLmnQCVMjJmKBeTgAVl zWb`rgrZ3iw-!ZW+*>=yaGW-<dcSuY3jo;pbI0t+YlLOmfmK{kG^Rmip`z|nrW7_Am z_L@H!+3?7YwVS=-6JGE2ceT0vu70TWcmM4l41fRK-_=I*-QlZx49NpM0*l8pfN|fr z-kGiwB8HNh%nMAX2vIMud@qi^lYMV9!inkQkMtgZDje%lE2ZGc0Kf3fZw-I>qaW%^ zPu=ybtM-5X&G&{M{`e=uH^1>E{dUa9!!LjR-QmCe`2Xs!#r60tZ5F?!-_>|mk2ES} z)_V%HOvb*FzT|yNduMOH^LE7ess2LXZ$5c6oPF|iIMX8;c?5=bpgGjbQwcPN+>rT9 z8=o)k>M<)1^rOt$bbcp(u(f`vbb|An(9a(0p{4W>G1b4!8C;`tVc6sPKNMLbMam=Q z8)KYg_7QcKXL<xG%s2|1Ctsm`bpofSHkCqMyD~n6K)dk#XS+ZKkDg5=KG<cfZStMc z$jCWtWE=L8OG&8wMHe)<5{!K4RQqxKqSofM9Afe5C!grKc3&AMh@+JyqL$E;7A@|i z_WBDwSK_^Mp`EnEZFQ@9-tti`&>G((n?0GOJYp8?XxE<MM(`=uBiV=<nU;kh=@U5y z_MCtj>qQ~UvPsCRvd3iJv}=5rb{&4{@R1;-o5L>s2DzK6aXe3nn?qaPWQ`c(B2aI; zJNl&{JbwEJOO4%OydJs3(E;kqh<zC`rkWmcJqf1(7cE;_{4P2+{^vUWfHh!OQx^3z z${F#vXVivrwJ_bBRX)ZZx47I**<Y4tIy=bnOlQog=q3N7X+8lA(S&?$ZU>tl8+dJk z7l~VHymX$Q7n#B#zVlo@#6E0Zh4EWz{H2ZG(j@8=EHi4e_1Ww9;QRJDjm62~_<O|J z1G*}Owf_3{t+iW?yUMeho^o%kPIw-8B3E{^IECi3I9hW^{J4&{;n5jfGY4wd;h$43 zzbzhyb@K<bEl!iGy{(I1V$#27dQ96pUwKy>rrNVo;W4ti{#un-b8$vGCxzqQU<3qE z3fFv7->X>P>KXf{?}!GkMB_W$BrEV&zW!c3>f&$y^8XAU{=-j)|M*8g&~N{IGW-v1 zPCwP1`uuqMEj{9nAL*noe_21$$>Y;Dg@~z$9Z5z^!kG-bZX(kzvyS?rncp*eLz|e| z@zf?He+@*(#a|%mue+f6iv|7)nVXmV*E@`P`~9`i1-1hnR%_2$cUgbJes`R=xTZ<$ znMx3^wq6xQ0Fc4D1jbCN3nn9rvY%GO$}(tM71~;)g)Y}51;wo;QTk0pJ7U8(iUP6O zZ0Bqchd&E!Q1P2^rp9&IU@m<XcMaiNkaE|v8YQ}2JSCq2s-d}agj?Oe{8eEcKaxHE zP(vQ?=m-zjA%{NwH97T|o<GEAZ?l$X)?HMY@;xP+if^22V|sp<+<NLc+l*NU8d=OU z4D70)^Db^QH$8CE12a9aYvG(R`=X1ls@qr!_l=#G&rEv^v&=O09F1MCx38#eSaBoW zflPAQJWR=&@{2^gq#d#EJifL=`jYlP{YmQax#oz@<>O`<%L^D$_w9n~6_DxH*>GCh zq=qe|(6C=ff(~*gUBeD=YF9OWi}9_zhW&PulwN`Mxe3>D{!9!~YyfJb@}i#mPJcvS zOmqzUYm@IM%}7hd945CV;j_5BVT~k(>G3^3VZvR#Uw{9bx;y-x;je%EzlOj0i~p@3 zq<&5LpX>Lk%6r<|`ti#5fBiRxul>@ml+9swV^3a`tl|-o->Qk<tEu@@mEJD1FE*V+ zCVVj~Tmc4M)rIcm8^lgZnZ)ng@JNytj65UP&5}>%!I2MX23w?CK}Z@*`!h&zrEOc- z>S{_pEpzZqZb;e&v}0pDwV4}tDa(RJ#GTAJiewDEo<N9o)okeSEipg$g|_h0<E+9% zC;GXR+y%{-3i#v~=J^pZem6UyN)FE)c%JJMe#AvTBKW3$T&%i6dsI1<pQDo4(|9uH zN#P2|Ywd(v3tbU)1i2``qaX(`G52gYVk|7R=cuI%P(#|h?y)`J3`F#CM!F@#47?6B z177n@WXo(y)|5BIO%L4k!0CHn$0EE#eNa9lpCjfVce6$p=z22dRWHST{GQKAbA2{h zB%f1F;#UeU!Y84#-;<7acD&TawYVi8SD-s-UtK}|E#ynu|1EzJ{_K=x`_gnn`P6hl zBkO)%aBm2?Z^5#1-^NwEU2OS2(BF;O<@Uf;k6(*#;&PjRxzS$1Ho8eyb^c#;eEiR~ zt=EnC5i_1<BUNTZr>(iTj*8e76IH?|vRrgcC7NwXV`MbWD>!X}-qGG4cQ^m$?|eUA zJ!&e<>;`)_CiYU9)Mue0S2nhC>jm@db@NiJ19ZB{TF<6_sK;+S)8ox_*SB)X*>TYj zcQ&^i38JlJ^=aFpPs#c&=#h_{m)jR!$~>IKW;@Xyqv)r`0V*CMA2yU-n0S<_0G5$Y zY)A_i4y+KLeT|%i-vq2N*tFjCMWrh?cJq@7jVK+9u+aD4cwLX-_;fm9q4p_+t<B%Z z>_V_R^VkX4kyf?u-Sqs(%c63G+{v8K)y`NK0Z7xbxwp)9Q*?y&uA6#G&@}TzwOMPr z7B?U8f;Iib==l_WL6uN9<V_E}ggx*QP40tIJ;>-K9LI%}^IDwg1(VaM_6#@$Un|=u z=_#N4*c;pX>3QRB>P-)DO5U87oBp^i)aLWi;Te_r&+!7!gq7}TPktTVs%^`aDQp|Q zqLS}_|NAdh%dTYn9F%#f-s1I2mRGuQWyGeMc$w!wi*Mo-^|6zY99%M8WfLN!x9T3d z7vF*V_q9&F6}uNq;t_U=j_utn^SyEK9O}!Bn8X#>>T9ar$3$j8xcm9hXP*tPYwt52 zMXb%(_<~uvcrzJO_DjnfZS4{g0fSN{V~Zq&<xc61pix0o`(15vjE!+`QTVnY?u}zM zmc6-*v1vA@y*bUd45l~DsiCSzsyo8*yk~xtumy_DbkP6v=&-Vh4IMvN7~NCudafQ- z)s79@FpbWm1JCprj;Bwa4j=yPgLdcm#%?{OG;hjW58QN4^h}+8rI$ubnUkaLOZr5P zAek}7wRJsjIkk1JN4iefu^D=$^v%?|((b<re$xZ{_rQ@S?Y`#w;^!K)%g-+ToZq>% z)pFO_KFcyahY9%{FdJoh0^f^zeusHhUt4;vO>^=KX~?ApJH7>n&i&&fUyz5Ftp9iQ zf<EdTT{bQ@)X`3-9N@kWVOcM)(5#+-Ohs9g+211QMtN;};KIkx0cIwf)z`Lz_DSrO zYRtNZUwV@ru-0bRWxE4qpVTv@SM|Kt<B)GDtJ5l9g9(c@ep0@ReiIIIA8a;lDM9!( z0cg0agPv6s;PiEp1LeARya&IK!yVnl{P4pMw72>!e!RMDFtb0p@z1^}KZMBMZDfQ} zueJx98re3X!Hi1AqX<tU#1s==wtQ`FY@q*gAGSwuOgWp9xluUrCUoQ`LHTjP@~r66 zSkkHCM0%4uHnZ(KAatM}yMc4<Zu7{Eaw~o5SoZh%FE0847!Ql4;#o0o+<&0Epg-5I zHGe$3_0C)MInoaB^3}D+7875CnR2jYw<VaeYNI%<Tq#`{YNfZUgE8;s%90Kn>s>cL zTY?R?VG<GW37Z62O`gcj>UjGAnKRcpzkS+rgT3j2RXuPW7Rn=XIKp&Q_k0mR{hDW< zdXA=F=JeK4&lUTf(;p+hNZ&cHU2)Lg%+K6oH}uQW1AMNV{1f9n8gQxef7i*lkaur- z=sDZ_SqS+`s}AkItL~IjjbF6?0B1`ki+#Fec-5Wy1&V*FVb~h$m5vSDvOjbT?9lef zF{;GIwP5B)f(q_!GG<HXm|2l&>#67Dy>1C-EcK`%2uj&yZrtV9WHwP|#1qI)^kO*E z1;FPI9}dqSeLmcO@IXIw$PZYmtHURIrR9YoqOxBqioOd$NP=z~&wy3JMXjM*cZYL7 z_IRT)9^0it#O6y>;Ws}+7#q;u8TSUU9kNjzd%}vgaiU}^6PwY{##K7D+U>07yh&Ia z)N;UG(QVV&4&|z}x1iBS2`ssYm)~0vxa4$;4Qo9V<(__}^5MgegTDXfgS|GPYm^de z$MH}9^iPK${pd%5`p$R0GkouNzPH2TiqyGLnLbfE7vS<lnJv578o%$Y8^6u`mH!d5 z#f}6WbTYZJfQ-y0aU)@MJmug1M)(P4%60;Fy+lmBmoo9|)r~jV-1NY8?txt!E!X+| zhvmunO)XVfmg%F$V^2ptd>2n{BTQvRvZESsyz$yxz<GR*k2>LDZ6Xt<S0TF4zPO48 zy=48rPZx1*w`*<O<*&^Da@>WzE_x5?D>qj!se`Xu|E>NU=ERTeC%f5u{@8FL{(@@A z?fXsk308j2oCtFxx&}Sq&(wR*pPIYp%Axk|0{o18*s%d4rG=@^4icTn4LAuC8TwuP zBxvJ#O!dx^wy7W}yV_S!(?|Q5)^-=T0`0;JLOLs8+Y$FPV)Oa&XP@fz$#DO5J$gfX zp3KRzrOaOH#$nKv52@&;hOXH(8!Kzg-P3@^U0pcK?036iy`*ej7dtkip-KkOqdTD4 zi00yk{aqLKe9e15*gDrdljMaAZN?7<x;R`sZiDb_AOl2EOR=Mqq>o_oB_T91V<Vax z9diAPTy#4+`QDPxdw0(ydog_Y!H2`MXU~VXzx4L1P3V+{(^;&4@Pi*T{ZD@Klap^i z@0(9c=EOwKBhyP^*5a0YT(oX${Pw&sD06i>%OxEa*1MkeQlv|mx=t*ak979sdZfHz zZhGLR2d+;KT=zxvD)L(yb0zHBjP=}lJSRU@;*<U-g(YIB7WBvDbt<>}`T>8?eAze9 zF`aV>wg>gWCFFGzV!j8;XQO%j8cmu12cHFNLR<*Or{B%IJ*<1LOaCo?4s()+HF43( zt{3NzL5rT2m3{kuw|>rCjJxde^0g=Ehs#g;Vk5dsc8;TgT{;%;w9j^XfaASkhwaYy z4<*U|T7)IxE`ErTy!V$>k;x?A3v<p(G<K9Ory{)IqhmXadDpw-RZr@@iB0<&98ZMc z&gaiR{djor`fK{(LH0T&q~rCXiV`%k>R&vY$$lC|##M`AmKa<`el5wvI@(svP58~y z67<YBDz_X+Ubsk>Y$)PmU$}6gi;dsv4<C@ele+A&SEU?r$FnC4m~%M`nR<%N<@g~& zHn1gsE<QRzblmX_UXnWz<Hhh?a&l88JTbtPobTSd7m0uL(Zk`{^QXg?-~DRD4VaKO z<upA|NA@(%CcGT$KjzPb-$O<CYh}bR`?`_@iR?fd){DX#ELItpX?wIk^9R@E)Y_Q$ z{6=%})K$j5_}1M-xaooG)dR;az$;s`E6gta$}n57i}Fh#*5oDsQ)_lkaF;$~*V4^r zBjznvK*D$lx1^hoJbrIm!u7gC<Mn<{!e6UoPST>6%gGm{|Kl^z(n7Oh)aa@sU95<5 zF%S>)%bNei^vZg#*RKDZ(E27Eg><+!e=Io4>u%#5rp4ZEcDab0<mE<wX`;D{+8A1} zvIT}W`z1SrD<*BHO<DoB-<|Ih0x$W?zP5s8Wu_Cbk3WKmX|bzfq_2LaWNjlv4ej+k zA8rsXm0sWTOSY%bO~hm4nb*%h_+U8au^al)!810WX)ztE7Zp9g-ORqD+4@k0x>8_j zuEtge#g}w(_jB0jP@ESV8zM%(vW&5CZDt02=1t?g5zU5f!_`3iprA3-BgbMQR|Bd| zR7?;lxobJB>Wl-QH-^b05D}Zs6o){OVv|})>4s-*M3=jy3Dq{C!@rPnc=zsIJs0}c z@ae<Ph9~-Q!Z+W1b9nQuH;XH~#O;CQ_kaKQM~~n*(9IXxEQa-pdf=GxV`|QoC0({z zgImNbDs!Y8`lbhNdf=u9ZhBzf9=OW)r>R`M<WtYlQ+5Z*9N+-sBTNs7R!okGiS2b8 z>w`Pu#_$W*1N~>HLpp$uq~){OA=X!Kb8`+KHwIVLf9-Ra65vsmS5@L1x`5!Veeylm zKKh<=t=@y2R7vgTxT6P-oj(Vie|d}!ojenPN21JRdPjdus*kmwbXtWc^o^?vEh_@B z56Y&q9<VWd_VLHV<Ig`GZs}&)`)}MIZlCe22`M${ZfTE`xmWf_k=4u*q7RiZi1a?s zT)|EiBz53a=VCpw9@C~<37*X+=@Q2t$6WaT`NO;oyxC;#y~Pg<O6bR5_^xAc&>>G7 z(C~>3{cQ=(!73#Fo=aMa(15k+Og6W5pazHMc%+Bua>sL#qr)UHq5}!O(&y*r!*dPX z=Z_z2Q~J*EhMt@9KpWBbUVE)!h#e*nhZX|wQ+D8I)t!R8bLm($Y@^L>wAl8pL8A-3 z4#tJte67)i-h42dxnrM>8+c<Kr`m)LnfZhxNa(9Ba^XO!x=PlBYL#?>J@UZmLy6i< z5w#Pzi5szfa-&M>@Zj?}%QIcWw90q{Q@E_Rk#SL*!M@T-6ei}aM;J04tb^!f4PSLV zw&{~U`?fFm<~x|}IGZF=KD}Mdp}Lr_T9O4a%46OtG@a=V^o{ye?SZsB9pA(QoUJyQ z08WTTYin*$V3UDK*T(ida=#Y@T@S|Py3rysZ9B{2+M;5nWPz{xW^4Qox&8GyhrB9{ z!8fJxBA|nB!hpmfuNj#(Vp3Lxte@6XXWGn2E@qDRTHJgXTLmLKlB@cbXTmjEB|=s8 zz0SOA=K<eL8e!CYy$5vC$;1#%;+k+*z+L+0=rqLM`FCNDweQ?rJ$uRh-#7TO`_tFW zeIEPp<<rwX7S{`V*?oS!T7P^tSK5D9e7^FgbEWOq@LhHM(G0rk@faoZ5-=y2KZlHe zvuVV*ud;aRJtFi5sZL~bWIJPx0RU}z;}al}1)BtrjTMn;`^t4s!;eb#Q5DUn_?Xf< z<f(1iHOfZgBQYj@t-8fmf#vpPyxo}x2hEEOXI_QBH9ULrM336|WO(}c(Qy0u^WpXT zuMKB+?xr6cWK-E2%c|>!a*^SbJ?7$E$8anNMA$*0kNsQxgsRqw_H&>kw<@RNTERB( zxy;GO7*LE(pod%i1~lOKa0j6hHzEs5&E|32DGcpK&W19Z!FgkPv%w5liOX^LXteM# zQ<6@Ch#88a=W!j_;v-^Io9DvNLDV=x%qI1DrIA5Dd-ha!Lq7@IJ9lpnchBzWR`xrp z&xSj^?%dHsz4f}K?;YeY4=_;|OXRYM*itT<%qZ22y-LR0)Ux1pptjCL);VCdYj|wM zz+2XM3#u;URn|5RG?zl8gW=Tivdp#QQ8Euug{qQ`7|8;)?odvNY3!8FGS2s0I<~1s zaxw5zG7LuY=AjT<x=zrs;mk7EcDcnTK_W{&7Sx(5+Ad<GO8QY8gRrwL05QQsQ;e(f zBCJR25)4fe2XJdldO)CN4l~#p@r;uj@fWoR+In<o2ORBSKJcV#3FqYYWW8(4UC+tU zqYJ$b#<{jW>Li4mdfy3%4%P=>{b$|CZ`C6^uLjLd1hixM+Q+<WYy$^TOV%Ok^_I=8 z8(E&|>b_OhQD@prmNi;L(5{nhxgeE(LWdD{emMzvm!NgXGIS%pGEF9;(RP&Ttn1hA z1ly3=U?aU+D&@pnxXN<X@vpM&mlb<gAMes%R-U`#OlLYR-R<qVAYS(Tueu*!$^J`g z^sfGW<=VeT+jsTN7fC-k5BBKGN&5pkaMst1VoNN6WmDI$q-8xsqiep6ue#u?kgAe_ z9{HDIq|4Y&hcVcUM>bai*MZHpVX8#qlQU#n@(v%Y4x`#Wk{nTBs4G$SP}$e4`<c4i z_FS9G=g-gesNiSA^JmY7bNz1Ji|0><=elwBu5N*TO^*}4d#0y3h>q>yh#`s%=kQx- z;^htJ*t@Ko(g4{XrEWHbh$O?#`dn9<K8y`$e_%lFQL&$pl|xCZHaf{OxzQGC^dp1- z{Q-=?&}=A=iUP9<Z1G4hA(PI!AUqRbVkBsk|Llv7VNgmPaRiGGi2*P2+jUp_dH9eU z0eFryx2m)GOs7X@ageO#E|$K#dzTI8y90Mcmph}+^$o+*;S)`S7n%t8c=19LAad0~ zzGI`C9tc@!SLuhc(H*q$Vk&HlC_Zhu=^OA$ZMI~+eH-8FvV7z)1Ff(#^E>JWZ^X7i zRt22|w4YbxSQBOLK7IOPc<|uX@X<$~4FCQQ|7`f%N8cWP_1E9kI1T#7M=#CHTY6FJ z2S0T(YAhwE)^`X&>pO#>!9z3FJW~cd^ljDfLBrP<@dK+GTK}UkpMqB{vyh{Mrl3Pe z6-C5IXSr(I8{BLX#yU?PFwu35sNmY4QR$Ft{yHE|t153gc)d86c*Q(~CPtP?@C;rx zFP#oLAM^sJ!!z`H1r4v)qbI}g@rRPV{$lvvzqvJh`*neZ;maF})6aF$?0>Y6{Vgxo zLd}mt7eKo%(sG=V(LNW`_GLMB?uSfg%nki&_dt2)@hn+rtIprKf@*U9*k)2W=WSbV zHxWeYSa-HzO=5ks>uh-Iw+?Kh!POUp>A>{7v66Fcf$^HiIv4g;=XH?!nN+bRiVj}2 zt{G!JJg;lvQ`PYjn6(p{^-|ZBgDx@3TKV}f{O!lX@Zraw4?p|ce;kIlzBK&1KX_~S zy>C4m9)5IN?|E7o6#rz!Q^Y>kjOmmO3E{)`u90_m#wi!GErmvGnmXmqJ`6X%RI9sV zy(I_U3teLFh>!Q}D(v;fT0Z3?>oVSLMsM2sL+VrcSreOX@)))8wV@QL8>iHxX_3qd zIWw@FcM;QporG(wr)Xpp+ZAs6xE8l<d6cA2IXiR8Q>j@7-t*^>IgsaPrgI+GosPbs zvqaRYowuPwE(LRF=RCNK#yZK1j&)gacD3V_dCd7jPKg08<kr!cEkza7`N4aF3pdA6 z%FS<^&uke}5aq~qI%Q5@v^wTo`kbxn<;^(R_ZZt6Yd!Kg8f?~0*&5UP&)6Kp@+`}? z#LK+#)JwXITcS_lW6A%G?xpSl-V4~{(bnGZAO7<P!yo@pXY4P&JN(8Q!|<+T57;Zx z&%)_m)8RF}*eALt**$3K?_mo@uh?@!FByADv7aP5_K(2n&4*ZAXtK}Y{UzV5%6n7U zKPsEP1yfEAHjT?Bak1w?8g~H5;Lfc(igiozbtCL+_vE|qoLKnOQHMeoS@nrhh4`T_ z3=sa0W$;BBRN>g;6h&@LT8ZjA<R#1)QT18qm{~SWd+(Rv>fau;bO98P;h0KDPRa$8 z8WXK5Je|izuG=2%b-?Ba0u7y9H=`9OHl-!^=JckfZ>x=hLK1?(=L34d2@`Qc81du6 zOoPi^&M!2<hPz-1jTJ?cS442~TVx2J+-V|>!GuzPK{PTHRTsjIW<wdYsjZ`RQ^k7g z!1XfgcGfEm-8<2VJ8Vz~q~fCMNW^xvVT{@1$LGV>zIJ=~$zT0!`1zx^hX-GNe|Y1~ z*9M)Bn*~9$^OhD0KA-FSY#Y-oD6tu>ngs%$P3PEruCx~j=Ea#_EGWd~q>8%AnVXh@ z)&KIUw9EppD&!o%Q1AndJ@cR1#X6d9yme7`!uG*o1WJq?MK{*Iq@sUYo#Y6$4-(3@ z0nPNT_|R1zJ)0_lQ_aQ+JXmi&d$Wa&=_fKi(*`v8eyWX?&qcrSOIo-eNk(T)6}MG3 z)15J8^zzAQUM{0%=eCP3>t#mI(`{~4hw!$~bewO(<hb@aCCj=#_cc0W`kGjC{(9^U zzt97<6Ib;mpnj0+Kv-ozqw%qlG)x<~klILPhbf+Oi8(m}cVQIk+zY4H9ZI%go;w}n z(2cLO@uAZJH^#(9GdydW>d=9yJZqZ$#%43Tbg_wC>8IkY;|sW07qw2FiN3>2G_`JI z(DT~#KA@L=ej>g+<-(Tr^U0Z<@uqeD+3;K6dT03VKY44oe~&M{?*vY%?N{hC8Z%eA zKAnTbn-+d{;jPb(a(wC4!d93HaY<F}f^XV_wG2DchGbus9a6h#_BR(N%bibeWB!ml zu9Zz~ELEI4ZhUQc-_F3L24p^)8p5@Y&q?diRriK%)uHd5I~mLEaF??!?-wV?sW{!G zXt@c-O}(Gz_jcpv>Wqb^*k|F^9~nEw@KTH7x$m4mi$ch%qRp$z&TXnA$iWFu>5(mA zmUMIeURHT-Yo`15%;~bc(sVuZ+iy#;&e!qqMl<e1?{N~|Z&}%{Ph&|p!jg-NW0<F| zxn|L%ECcLw%AaxBukq-xu`bJd9sCr|F?-uJ_EWY~GJLHmZp#|%MPS@NYka%E++J*K zKc@p@yfMfqbMm6yKJJU(_E04Fao$M!yb9`C9iQl$``s@M!|(jlJHsFU#iu&K9}G`k zKO4@qUvyiW&ulca!5o{;s@W@I6FOwIM#gn|Y)03b{iN6!R?Wt<_m_AN;xayJ9jLt_ z9ZzTmkBk@p#KY7olv3%p?CRbny7-1nx8;Ui7>4Z&i~@%z$T+Ghw&;*qSG8IfH?m^3 zv4gjtW?N<U6Br+AOtZUceDu=@8_PYp$&kH84Z*k&FA|ZM_WME-lrLz|`y!#q>PZm1 zPY8^{34}^CMoRrB0XD07LqJ^K7$lWrHj(+ULGF0IUHKOpq}%nKg~S;IY6g<}xojBt z(!kOJj^snGq?A($0e}Fh4lOmvBqq7&1c0Tu^MY&kBdLMKU3AJuRHzb%qdgZ%(M}zW z%epC9ZNkPe2EFr1!|b`xn|s~G+r~+℘h}wug<K&A{B&8GWW5-yi?v<KeSs4~F+1 zydEcdoV*&S__j$WI-9}_4a4AtfRoyHHd9-No)<hAY*{$SJ1|uqBGJ^=g&wwInKQ;o z6s63sFbNz&FtlB%wgMhM6x&8^rl>Z@)G-ax2*IRx|Hf1jj~cUhiOJ_Fn=0f_iT3E^ zqCWx~2hrl$RKbti6$}lLj*S-jubh|aZ(>MxCcz7>8n5ZD=g&XWU41_thR?nw9!Dw> zPc>nx2ytOXf+D^SN7Aa@b+UBaZ#ax**S4!`qp*}gXB-N~4d~WIbdsUx6>|YUHF?G~ zw*yRHdKtFirw1m!w@Iokav$uL@fTgd;H3^MV_8<<&AUqiO!Zf<7N14XqcB;Czn-6p zVO&YDAY>P;>TscnOy*PWEMu;FT?;2x)R>-^O$?D^R-A)`N{7JX8`{RTZY(EX)q~^r zDIyn%IrmsEdF)rnFaocOU1RJQo)<-KN^tYCk1y|3Ki5w9M^7G0|N8LTzjl9k@10x2 z(~or5gD#T2R%5=ikca$5uo`Eykf5i4p%_!Ra<mUPk_N*I8{>OF;B04|u~K1Y)-HKd zv<yg-!>Cy2x=42)V+?RsON@bdr)4>HTu;=%xu2t{3QX)g50N)N=w;jD)kH1B|Doj+ zK32!Bd6x-Vt&pj0p2ux4B(AEFd%HjgZJw^Bm~XX-qHbevac@^)#g9SR@e*z0E3Tck zYuX6yw)W|TP6y_KZGxx_6)&$Zz5R$6u$ncZ@gv}FCa&R>)2g_;-Hi~fPoiN`)g<YI zDB_)WV9lUJm-%9Gb;p@p$gy3IPhpU`BM!;l_G@hS!LIRlD8~KZdd?5}oU`$+u@jwH zM6qU9IUiv>ozQvCAZu$o3YDHO(sEqVjdBFuCuB!c@+^bS$=X+z8=rAb4w<pke&NSD zX#41~Q#i*l7L4OTQ*s>hp_n;1ey7eMMk*<+b2{klCO6G?S!UX`F}cn<Xo_RDKt<fx zh7&NZFROlXt#q<>T(QAopZFGF0-Ir@F?9oSoDq0}vCV|4<*<*xDL<Dai}xwz%1tK! z?EU-0@Qya1KY2Vn{L0<o%aZYz-MY^-x{Pajk#TMBOJjI$HW_c;6d<~(Ziux+gY7jX zatLgZ!N*(>!6{R4=*pfYUdw(<^&vpHp;m_aA5Vt}ve?IFvUrpmUm>V=B}jo3Ok7WR zQ%6R$#gE%4vG7+*QJQOYi6B;b&u!Wh&xUTOLO6C7<F+r&XH_WM@dk9e_{O@TqtPUh zy&-Jxuu_ba1xP25I6?R*>VjKy_FXzxs8ATeKoutp-Uj1=s42=Qz7ddDV!1S`m`2Qv z=Yk4M2@!&lr=$@VQS(x1f$d~NjATVk&{`Vag3|t$YlZfaHs}pyuXgErgQ!$?wx!%( zV0W#5aDgx<V32jxP8eFn5H>#fEyzc@YxXbx>SNuJ{{Ha#gYpg+o5%vP0T3S^RmUbX zY8>e0P3EY<RV-&bHkofSeEKCfY^YKqhG;fh5w(|mF%9B8?sb4v1c^Bw7d(=|N0D93 zZ7~6@_^NGH6E~u&WFK9J971(Kbl@C`1)<8(ql*noWGduC0aw3VE9Vwiz^Y^6Rl@j- zysIr0n=$l<_M4;cpNhr|9RBdH$EXi_OwsW0A72bV|NPeQWzqPI{*)fP3qIW+mR+|x z=X-2!tfRd@`Yy}iV?K7lu;Z0C|ACaX6iP*ax+I#7I^?42P=+7V1yFpCWcaf31obI> zogkf;&jlUm0gBGtFy&HWM-QXUK2i^CS>oD4)8>=ih|Ip3#7=Jn5+mG{s}Z~cwr~a| zMO+(*50UkbS$TAj$;^mYytq(}xAyACYbI-2(6+A*+L~1z!^aOPZ@f0Drce@qsRCj? z(n1=~d($I0hIif>e(Rg}hBtKE^hf%}=!`cj7KXJ2zcs%wVGJmi)wqpE2PVe=!y?|x z>_e(%Z<&3-^TIa!Fs`cI&tgX<HudGpZcw^OQ>lku;8^dfrwG->bH1@o+L7?ax{miw z$!SjWiL$=#R9nAy@}*w9hZ>W7ifr?#r{Nci{NZwKarYbF^OjH5Zu2N!W->kHAjyE{ z@q)Ju*qp04mpm>4wZ2dOwruTqOF^WoDX9sqADku`L7O*i-Whv5jE_3aJMg*meAXRG zdkmNCFCwmeQs;i4)0(alff0_m<9;V!%b~ApY406#3D!2wsdvh!?B_aW3cE8v0?heM zkiE!0pX`51*EwIByLLsLY1>%Vxjc+z5zZ5HmzNwIx-VJggu&R(dh_U<12x6@fH6K4 z6FSE*&NX<`uI<-x?33Dl`WjoyGQOi7BE%gY-AG?;r(~$I+_dXz8W_S*rgTkcrNAbs zZ5w+7l@ERG8^5=;_00y^Sae$>dVM$}yAs#xBB@7XT#u9sOvd9F-t~f6s4~t;Wq-Tu zFF?;<wm;TiVZX1xrvF#(-5dVoe?A^Qc>4D63mOak5#pe2iP*>BraUfJ`5eKeE3eo~ zsdO7)<g}^2VvHJJ8fzJKs2~*2ayF3z8M2_HQ>|BE<erU^=*}uAdKA?bENtbyaco>@ z!zG7`8`XphL95%H(E%_13!=I}o{R0XENHAe0mjN{=@?TYm)*pzJD{8YY@>LDWYF@- z1<i{ABXH<QIzBBX2N<`^#Do!grJ}3*0^fjeK`fsA{6g4s;qC|&Tg>9y<2bO#HF;p8 znnfX=QSCfxeH(=U{w5&WQc{TAA|+vwm*_$05G^Zl+G<bcXv#5=BeG1cVrxH}8mJ5D zxilBFrwU8-!t^rpwjb5m&~ythLM}4dq{P#)5MdYHYY$aLxXpN1y4rw0*H=>y-nupX z{oj2s{PjPa5BJ`9N6+e!f(2YJK9k1@trdffIO1_9GxFFt23q;psIK(rZfD7`W!Q-s zceGU=87~TpQs|M@ev0^#+ZJ44kipb~3;Q8QcwVLpgJ8Shk3NbTGCHl;b3TQinvbmm zf=+~0KKIBSI($-z1{3Fo2sZu8+%7pohYfb3Ly3KDVB{kZAHeUbeoB9WRfnPDPg`Eo zvz9*n^nCc)2e*e`eP5<LnuGl0CVZ+68W{qZ3oJSA+AxRMEcvEi@kuvAyC7q(g$zce z?~<^QF83Wc;2{%HO@lB^o&9DxW9-c}%kfEp?_-5x;gD?>V4FObKsUN^4|D^>xfJhp z73Hx?v!G~DWLs!n8-q-4puJ7;Huhy%u4nABxP{I_`GECW=Nvo8CQ?#_oiuTNCHV#{ z-wMilJc=zQ)<DT^=CueuWaxyWzkR+027Lf3P;{)ZRTi`pNI1?nVv+}s>)_7>`9<qN z`_JF`wcEpQ{GzTi9^ck`m|k)+@?(E%Yl2XS??uOTD0Beh{HA2!DY1wYGHj50(ZU|u z1wQ-j{foEAu;Ar`+G*ns-dNYjT|zdYK$QJ}4_R%G$IyQ0XY`iy-saNeB8&sfe4uVJ z48-eyl&H}Q*WUZAte8_&HI3$~=bK`JXz4)kl5w=BD)2=yZkKQ4TxZ*!hHs8VHs3Z@ zZ8ETZGM#;3`ook>k2w)ft`5iaaeFM!wcBM3eNM5waN;WfeO!|nC%J8mJyq=-i0v4e zK2@A0Kk@#S0PVa??S~{k=WBS+TmFTwFREiM%C85k_uuoz)w)-&;ioX1dPkMsY3~eu z4w4rQ<Wu&@EVr%g@NZpT_x{k^9=j<Y$c^j$p|d@<xlF~%_A_?9S#}w;ee48oS&qzM zaAkL)Ob5&RdMm5}6Sg6eo^`9OWz_*@O$HD_c5WV>`__7Nl<K!I>1e&{ik)q2G98h& zcRf;0Fd3KW3Fu{sczgzryZeeB!|^YE<?iq&f6jA3pAVnwF&z4tvG_eJZj58!!k4#n zGc+$~-e01wGF7c0k6lJEdU+p-v5mbcec*uRMWKqjghj;OkQ7BG9&E+LkV_Yv)gja& z{+HSgi{BEX0t8Fg!U--JzE!a=8L>lBatdAL0R@_a=>Sw86&Gy}f7M6Cz<b#|4wGb8 i%@!+smJEsYV)*~4(1@nt6fg+@0000<MNUMnLSTYnTU=xS literal 0 HcmV?d00001 From 0656aa67e3aa31e1209c9892d30601afdfb3b0d8 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Thu, 11 Aug 2022 14:05:45 +0200 Subject: [PATCH 077/209] code cleanup --- MDM/Jamf/00_Prepare_SwiftDialog.sh | 8 ++++---- MDM/Jamf/zz_Quit_SwiftDialog.sh | 6 +++--- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/MDM/Jamf/00_Prepare_SwiftDialog.sh b/MDM/Jamf/00_Prepare_SwiftDialog.sh index d8c00cc..7d1e6a4 100755 --- a/MDM/Jamf/00_Prepare_SwiftDialog.sh +++ b/MDM/Jamf/00_Prepare_SwiftDialog.sh @@ -14,10 +14,10 @@ icon=${6:-"/System/Applications/App Store.app/Contents/Resources/AppIcon.icns"} dialogUpdate() { # $1: dialog command - local dcommand=$1 + local dcommand="$1" if [[ -n $dialog_command_file ]]; then - echo "$dcommand" >> $dialog_command_file + echo "$dcommand" >> "$dialog_command_file" echo "Dialog: $dcommand" fi } @@ -25,7 +25,7 @@ dialogUpdate() { # MARK: sanity checks # check minimal macOS requirement -if [[ $(sw_vers -buildVersion ) < "20" ]]; then +if [[ $(sw_vers -buildVersion ) < "20A" ]]; then echo "This script requires at least macOS 11 Big Sur." exit 98 fi @@ -55,6 +55,6 @@ open -a /Library/Application\ Support/Dialog/Dialog.app --args \ --position bottomright \ --ontop \ --movable \ - --commandfile $dialog_command_file + --commandfile "$dialog_command_file" sleep 0.1 diff --git a/MDM/Jamf/zz_Quit_SwiftDialog.sh b/MDM/Jamf/zz_Quit_SwiftDialog.sh index eae10b2..9ce9303 100755 --- a/MDM/Jamf/zz_Quit_SwiftDialog.sh +++ b/MDM/Jamf/zz_Quit_SwiftDialog.sh @@ -5,16 +5,16 @@ dialog_command_file=${4:-"/var/tmp/dialog.log"} dialogUpdate() { # $1: dialog command - local dcommand=$1 + local dcommand="$1" if [[ -n $dialog_command_file ]]; then - echo "$dcommand" >> $dialog_command_file + echo "$dcommand" >> "$dialog_command_file" echo "Dialog: $dcommand" fi } # check minimal macOS requirement -if [[ $(sw_vers -buildVersion ) < "20" ]]; then +if [[ $(sw_vers -buildVersion ) < "20A" ]]; then echo "This script requires at least macOS 11 Big Sur." exit 98 fi From cc5326ce249ff0148006a3fbf209d31bdc89c010 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Thu, 11 Aug 2022 14:15:50 +0200 Subject: [PATCH 078/209] more cleanup and comments --- MDM/Jamf/00_Prepare_SwiftDialog.sh | 28 +++++++++++++++++++--------- MDM/Jamf/ReadMe.md | 4 ++++ MDM/Jamf/zz_Quit_SwiftDialog.sh | 14 +++++++++++--- 3 files changed, 34 insertions(+), 12 deletions(-) diff --git a/MDM/Jamf/00_Prepare_SwiftDialog.sh b/MDM/Jamf/00_Prepare_SwiftDialog.sh index 7d1e6a4..d4b4efe 100755 --- a/MDM/Jamf/00_Prepare_SwiftDialog.sh +++ b/MDM/Jamf/00_Prepare_SwiftDialog.sh @@ -2,13 +2,22 @@ export PATH=/usr/bin:/bin:/usr/sbin:/sbin +# MARK: Arguments/Parameters + +# Parameter 4: path to the swiftDialog command file +dialog_command_file=${4:-"/var/tmp/dialog.log"} + +# Parameter 5: message displayed over the progress bar +message=${5:-"Self Service Progress"} + +# Parameter 6: path or URL to an icon +icon=${6:-"/System/Applications/App Store.app/Contents/Resources/AppIcon.icns"} +# see Dan Snelson's advice on how to get a URL to an icon in Self Service +# https://rumble.com/v119x6y-harvesting-self-service-icons.html + # MARK: Constants -dialog="/usr/local/bin/dialog" - -dialog_command_file=${4:-"/var/tmp/dialog.log"} -message=${5:-"Self Service Progress"} -icon=${6:-"/System/Applications/App Store.app/Contents/Resources/AppIcon.icns"} +dialogApp="/Library/Application Support/Dialog/Dialog.app" # MARK: Functions @@ -37,16 +46,16 @@ if [[ $DEBUG -eq 0 && $(id -u) -ne 0 ]]; then fi # check for Swift Dialog -if [[ ! -x $dialog ]]; then - echo "Cannot find dialog at $dialog" +if [[ ! -d $dialogApp ]]; then + echo "Cannot find dialog at $dialogApp" exit 95 fi -# MARK: Setup +# MARK: Configure and display swiftDialog # display first screen -open -a /Library/Application\ Support/Dialog/Dialog.app --args \ +open -a "$dialogApp" --args \ --title none \ --icon "$icon" \ --message "$message" \ @@ -57,4 +66,5 @@ open -a /Library/Application\ Support/Dialog/Dialog.app --args \ --movable \ --commandfile "$dialog_command_file" +# give everything a moment to catch up sleep 0.1 diff --git a/MDM/Jamf/ReadMe.md b/MDM/Jamf/ReadMe.md index ef9e0b5..f4b9f08 100644 --- a/MDM/Jamf/ReadMe.md +++ b/MDM/Jamf/ReadMe.md @@ -21,13 +21,17 @@ The different scripts require a set of parameters. We will use the `googlechrome `00_Prepare_SwiftDialog.sh` Parameter 4: `/var/tmp/dialog` (Path to the swiftDialog command file) + Parameter 5: `Installing Google Chrome...` (text shown in the swiftDialog window above the progress bar) + Parameter 6: Path to or URL for an icon in swiftDialog. This can be a path on the client or a URL. See Dan Snelson's advice on how to get icon URLs for Self Service icons: https://rumble.com/v119x6y-harvesting-self-service-icons.html `Installomator.sh` Parameter 4: `googlechromepkg` (the label to install) + Parameter 5: `DIALOG_CMD_FILE=\var\log\dialog.log` (the swiftDialog command file, this has to be the same value as parameter 4 in the previous script) + Parameter 6: `NOTIFY=silent` (disable Installomator notifications, optional) You can add more configurations to the Installomator script when needed. diff --git a/MDM/Jamf/zz_Quit_SwiftDialog.sh b/MDM/Jamf/zz_Quit_SwiftDialog.sh index 9ce9303..705c78c 100755 --- a/MDM/Jamf/zz_Quit_SwiftDialog.sh +++ b/MDM/Jamf/zz_Quit_SwiftDialog.sh @@ -1,8 +1,13 @@ #!/bin/zsh -dialog="/usr/local/bin/dialog" +# MARK: Arguments/Parameters + +# Parameter 4: path to the swiftDialog command file dialog_command_file=${4:-"/var/tmp/dialog.log"} +# MARK: Constants +dialogApp="/Library/Application Support/Dialog/Dialog.app" + dialogUpdate() { # $1: dialog command local dcommand="$1" @@ -26,8 +31,8 @@ if [[ $DEBUG -eq 0 && $(id -u) -ne 0 ]]; then fi # check for Swift Dialog -if [[ ! -x $dialog ]]; then - echo "Cannot find dialog at $dialog" +if [[ ! -d $dialogApp ]]; then + echo "Cannot find dialog at $dialogApp" exit 95 fi @@ -36,6 +41,7 @@ fi dialogUpdate "progress: complete" dialogUpdate "progresstext: Done" +# pause a moment sleep 0.5 dialogUpdate "quit:" @@ -43,4 +49,6 @@ dialogUpdate "quit:" # just to be safe killall "Dialog" +# the killall command above will return error when Dialog is already quit +# but we don't want that to register as a failure in Jamf, so always exit 0 exit 0 From dff9dd5a03125eba081ad6565faa345d71bf4453 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Thu, 11 Aug 2022 15:01:59 +0200 Subject: [PATCH 079/209] fixed typo --- MDM/Jamf/ReadMe.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/MDM/Jamf/ReadMe.md b/MDM/Jamf/ReadMe.md index f4b9f08..db3d35d 100644 --- a/MDM/Jamf/ReadMe.md +++ b/MDM/Jamf/ReadMe.md @@ -38,7 +38,7 @@ You can add more configurations to the Installomator script when needed. `zz_Quit_SwiftDialog` -Parameter 4: `\var\log\dialog.log` (the swiftDialog command file, this has to be the same value as parameter 4 in the first script) +Parameter 4: `/var/log/dialog.log` (the swiftDialog command file, this has to be the same value as parameter 4 in the first script) Then setup the remainder of the Jamf Policy to your needs. This works best with Self Service policies. From 614da59311c8e6923eb3c80e4bdd346f959183f5 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Thu, 11 Aug 2022 16:53:39 +0200 Subject: [PATCH 080/209] removed `--ontop` because it hogs the UI on updates --- MDM/Jamf/00_Prepare_SwiftDialog.sh | 1 - 1 file changed, 1 deletion(-) diff --git a/MDM/Jamf/00_Prepare_SwiftDialog.sh b/MDM/Jamf/00_Prepare_SwiftDialog.sh index d4b4efe..74213ec 100755 --- a/MDM/Jamf/00_Prepare_SwiftDialog.sh +++ b/MDM/Jamf/00_Prepare_SwiftDialog.sh @@ -62,7 +62,6 @@ open -a "$dialogApp" --args \ --mini \ --progress 100 \ --position bottomright \ - --ontop \ --movable \ --commandfile "$dialog_command_file" From ef19aa28fe48528b9677992bccca10d145d9afe6 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Thu, 11 Aug 2022 16:54:04 +0200 Subject: [PATCH 081/209] added a sleep before the killall to give SD time to quit --- MDM/Jamf/zz_Quit_SwiftDialog.sh | 3 +++ 1 file changed, 3 insertions(+) diff --git a/MDM/Jamf/zz_Quit_SwiftDialog.sh b/MDM/Jamf/zz_Quit_SwiftDialog.sh index 705c78c..b899e1e 100755 --- a/MDM/Jamf/zz_Quit_SwiftDialog.sh +++ b/MDM/Jamf/zz_Quit_SwiftDialog.sh @@ -46,6 +46,9 @@ sleep 0.5 dialogUpdate "quit:" +# let everything catch up +sleep 0.5 + # just to be safe killall "Dialog" From 45112e3f32218233664af4db260476584260aef0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Fri, 12 Aug 2022 09:31:04 +0200 Subject: [PATCH 082/209] Create xcreds.sh ## Great solution for IdP Password Syncing by TwoCanoes! XCreds works by keeping your local Mac password in sync with your Identity Provider password. If you use Azure or Google or another identity provider, XCreds will make sure the password is the same. XCreds runs in the background and checks if the cloud password has been changed. If it detects the password has changed, it prompts to log in to the cloud provider and updates the local password and the keychain password automatically. ``` % GitHub/Installomator/utils/assemble.sh xcreds DEBUG=0 2022-08-12 09:25:38 : WARN : xcreds : setting variable from argument DEBUG=0 2022-08-12 09:25:38 : REQ : xcreds : ################## Start Installomator v. 10.0beta, date 2022-08-12 2022-08-12 09:25:38 : INFO : xcreds : ################## Version: 10.0beta 2022-08-12 09:25:38 : INFO : xcreds : ################## Date: 2022-08-12 2022-08-12 09:25:38 : INFO : xcreds : ################## xcreds 2022-08-12 09:25:38 : INFO : xcreds : BLOCKING_PROCESS_ACTION=tell_user 2022-08-12 09:25:38 : INFO : xcreds : NOTIFY=success 2022-08-12 09:25:38 : INFO : xcreds : LOGGING=INFO 2022-08-12 09:25:38 : INFO : xcreds : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-08-12 09:25:38 : INFO : xcreds : Label type: pkg 2022-08-12 09:25:38 : INFO : xcreds : archiveName: XCreds.pkg 2022-08-12 09:25:38 : INFO : xcreds : no blocking processes defined, using XCreds as default 2022-08-12 09:25:38 : INFO : xcreds : No version found using packageID com.twocanoes.pkg.secureremoteaccess 2022-08-12 09:25:38 : INFO : xcreds : name: XCreds, appName: XCreds.app 2022-08-12 09:25:38 : WARN : xcreds : No previous app found 2022-08-12 09:25:38 : WARN : xcreds : could not find XCreds.app 2022-08-12 09:25:38 : INFO : xcreds : appversion: 2022-08-12 09:25:38 : INFO : xcreds : Latest version of XCreds is 1.0.0 2022-08-12 09:25:38 : REQ : xcreds : Downloading https://github.com/twocanoes/xcreds/releases/download/v1.0.0/XCreds_1_0_0_Build-1272_Version.pkg to XCreds.pkg 2022-08-12 09:25:39 : REQ : xcreds : no more blocking processes, continue with update 2022-08-12 09:25:39 : REQ : xcreds : Installing XCreds 2022-08-12 09:25:39 : INFO : xcreds : Verifying: XCreds.pkg 2022-08-12 09:25:39 : INFO : xcreds : Team ID: UXP6YEHSPW (expected: UXP6YEHSPW ) 2022-08-12 09:25:39 : INFO : xcreds : Installing XCreds.pkg to / 2022-08-12 09:25:42 : INFO : xcreds : Finishing... 2022-08-12 09:25:52 : INFO : xcreds : found packageID com.twocanoes.pkg.secureremoteaccess installed, version 1.2 2022-08-12 09:25:52 : REQ : xcreds : Installed XCreds, version 1.2 2022-08-12 09:25:52 : INFO : xcreds : notifying 2022-08-12 09:25:52 : INFO : xcreds : App not closed, so no reopen. 2022-08-12 09:25:52 : REQ : xcreds : All done! 2022-08-12 09:25:52 : REQ : xcreds : ################## End Installomator, exit code 0 ``` --- fragments/labels/xcreds.sh | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 fragments/labels/xcreds.sh diff --git a/fragments/labels/xcreds.sh b/fragments/labels/xcreds.sh new file mode 100644 index 0000000..3d72777 --- /dev/null +++ b/fragments/labels/xcreds.sh @@ -0,0 +1,8 @@ +xcreds) + name="XCreds" + type="pkg" + packageID="com.twocanoes.pkg.secureremoteaccess" + downloadURL="$(downloadURLFromGit twocanoes xcreds)" + appNewVersion="$(versionFromGit twocanoes xcreds)" + expectedTeamID="UXP6YEHSPW" + ;; From 1477457155205e26f59893b791bda23bc7ce3bba Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 12 Aug 2022 13:47:44 +0200 Subject: [PATCH 083/209] updated redundant exit codes, closes #561 See also: https://github.com/Installomator/Installomator/wiki/Installomator-Exit-Codes --- fragments/functions.sh | 14 +++++++------- fragments/labels/macports.sh | 2 +- fragments/main.sh | 4 ++-- 3 files changed, 10 insertions(+), 10 deletions(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index ddbe70f..4d19d91 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -163,7 +163,7 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") fi if [ -z "$downloadURL" ]; then - cleanupAndExit 9 "could not retrieve download URL for $gitusername/$gitreponame" ERROR + cleanupAndExit 14 "could not retrieve download URL for $gitusername/$gitreponame" ERROR else echo "$downloadURL" return 0 @@ -278,7 +278,7 @@ getAppVersion() { printlog "Replacing App Store apps, no matter the version" WARN appversion=0 else - cleanupAndExit 1 "App previously installed from App Store, and we respect that" ERROR + cleanupAndExit 23 "App previously installed from App Store, and we respect that" ERROR fi fi else @@ -475,7 +475,7 @@ installAppWithPath() { # $1: path to app to install in $targetDir printlog "notifying" displaynotification "$message" "Error updating $name!" fi - cleanupAndExit 6 "Installed macOS is too old for this app." ERROR + cleanupAndExit 15 "Installed macOS is too old for this app." ERROR fi fi @@ -534,7 +534,7 @@ installAppWithPath() { # $1: path to app to install in $targetDir deduplicatelogs "$CLIoutput" if [ $CLIstatus -ne 0 ] ; then - cleanupAndExit 3 "Error installing $mountname/$CLIInstaller $CLIArguments error:\n$logoutput" ERROR + cleanupAndExit 16 "Error installing $mountname/$CLIInstaller $CLIArguments error:\n$logoutput" ERROR else printlog "Succesfully ran $mountname/$CLIInstaller $CLIArguments" INFO fi @@ -732,7 +732,7 @@ installPkgInZip() { printlog "Found pkg(s):\n$findfiles" DEBUG filearray=( ${(f)findfiles} ) if [[ ${#filearray} -eq 0 ]]; then - cleanupAndExit 20 "couldn't find pkg in zip $archiveName" ERROR + cleanupAndExit 21 "couldn't find pkg in zip $archiveName" ERROR fi # it is now safe to overwrite archiveName for installFromPKG archiveName="${filearray[1]}" @@ -745,7 +745,7 @@ installPkgInZip() { findfiles=$(find "$tmpDir" -iname "$pkgName") filearray=( ${(f)findfiles} ) if [[ ${#filearray} -eq 0 ]]; then - cleanupAndExit 20 "couldn't find pkg “$pkgName” in zip $archiveName" ERROR + cleanupAndExit 21 "couldn't find pkg “$pkgName” in zip $archiveName" ERROR fi # it is now safe to overwrite archiveName for installFromPKG archiveName="${filearray[1]}" @@ -768,7 +768,7 @@ installAppInDmgInZip() { findfiles=$(find "$tmpDir" -iname "*.dmg" -maxdepth 2 ) filearray=( ${(f)findfiles} ) if [[ ${#filearray} -eq 0 ]]; then - cleanupAndExit 20 "couldn't find dmg in zip $archiveName" ERROR + cleanupAndExit 22 "couldn't find dmg in zip $archiveName" ERROR fi archiveName="$(basename ${filearray[1]})" # it is now safe to overwrite archiveName for installFromDMG diff --git a/fragments/labels/macports.sh b/fragments/labels/macports.sh index 6a473a1..9f3c7be 100644 --- a/fragments/labels/macports.sh +++ b/fragments/labels/macports.sh @@ -13,7 +13,7 @@ macports) archiveName="Catalina.pkg" ;; *) - cleanupAndExit 1 "macOS 10.14 or earlier not supported by Installomator." + cleanupAndExit 98 "macOS 10.14 or earlier not supported by Installomator." ;; esac downloadURL=$(downloadURLFromGit macports macports-base) diff --git a/fragments/main.sh b/fragments/main.sh index 9a665c7..39f737d 100644 --- a/fragments/main.sh +++ b/fragments/main.sh @@ -18,7 +18,7 @@ fi if [[ ${INTERRUPT_DND} = "no" ]]; then # Check if a fullscreen app is active if hasDisplaySleepAssertion; then - cleanupAndExit 1 "active display sleep assertion detected, aborting" ERROR + cleanupAndExit 24 "active display sleep assertion detected, aborting" ERROR fi fi @@ -132,7 +132,7 @@ fi # MARK: change directory to temporary working directory printlog "Changing directory to $tmpDir" DEBUG if ! cd "$tmpDir"; then - cleanupAndExit 1 "error changing directory $tmpDir" ERROR + cleanupAndExit 13 "error changing directory $tmpDir" ERROR fi # MARK: get installed version From d02b2e6198d662ee9a63d85a51967297cb1100ea Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 12 Aug 2022 16:22:53 +0200 Subject: [PATCH 084/209] updates vmwarehorizonclient, closes #511 --- fragments/labels/vmwarehorizonclient.sh | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/fragments/labels/vmwarehorizonclient.sh b/fragments/labels/vmwarehorizonclient.sh index 428af60..24d8139 100644 --- a/fragments/labels/vmwarehorizonclient.sh +++ b/fragments/labels/vmwarehorizonclient.sh @@ -1,7 +1,8 @@ vmwarehorizonclient) name="VMware Horizon Client" type="dmg" - downloadURL=$(curl -fsL "https://my.vmware.com/channel/public/api/v1.0/dlg/details?locale=en_US&downloadGroup=CART21FQ2_MAC_800&productId=1027&rPId=48989" | grep -o 'Url.*..dmg"' | cut -d '"' -f3) - appNewVersion=$(curl -fsL "https://my.vmware.com/channel/public/api/v1.0/dlg/details?locale=en_US&downloadGroup=CART21FQ2_MAC_800&productId=1027&rPId=48989" | sed 's/.*-\(.*\)-.*/\1/') - expectedTeamID="EG7KH642X6" + downloadGroup=$(curl -fsL "https://my.vmware.com/channel/public/api/v1.0/products/getRelatedDLGList?locale=en_US&category=desktop_end_user_computing&product=vmware_horizon_clients&version=horizon_8&dlgType=PRODUCT_BINARY" | grep -o '[^"]*_MAC_[^"]*') + fileName=$(curl -fsL "https://my.vmware.com/channel/public/api/v1.0/dlg/details?locale=en_US&category=desktop_end_user_computing&product=vmware_horizon_clients&dlgType=PRODUCT_BINARY&downloadGroup=${downloadGroup}" | grep -o '"fileName":"[^"]*"' | cut -d: -f2 | sed 's/"//g') + downloadURL="https://download3.vmware.com/software/$downloadGroup/${fileName}" + appNewVersion=$(curl -fsL "https://my.vmware.com/channel/public/api/v1.0/dlg/details?locale=en_US&downloadGroup=${downloadGroup}" | grep -o '[^"]*\.dmg[^"]*' | sed 's/.*-\(.*\)-.*/\1/') expectedTeamID="EG7KH642X6" ;; From e7c72349d0456a51725a8d67bb68c08c5e06ad2e Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 12 Aug 2022 17:01:34 +0200 Subject: [PATCH 085/209] preparing for 10beta1 release --- CHANGELOG.md | 38 +++++++++ Installomator.sh | 185 +++++++++++++++++++++++++++++++++---------- Labels.txt | 8 ++ fragments/version.sh | 2 +- 4 files changed, 188 insertions(+), 45 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index d927514..f4d3ff6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,41 @@ +## v10beta1 + +- [swiftDialog](https://github.com/bartreardon/swiftDialog) integration (#641, #632), many thanks to @bartreardon, [sample scripts](in the MDM folder) +- added WorkspaceOne option for LOGO (#517) +- added function for JSON parsing with JXA (#529) +- updated assemble.sh script to update Labels.txt when script is rebuilt (#540) +- added a no requisite install script (#493) +- GitHub lookup now don't use API calls, this should avoid or at least reduce rate limiting (#543) +- fixed redundant exit codes (#643, #561) + +NOTE: some exit codes have changed! see [Installomator Exit Codes](https://github.com/Installomator/Installomator/wiki/Installomator-Exit-Codes) for a list + +- new labels: + - bluejeanswithaudiodriver (#473) + - duodevicehealth (#548) + - googlechromeenterprise (#532) + - ipswupdater (#545) + - mmhmm (#571) + - nordlayer (#419) + - prune (#538) + - whatroute (#560) +- updated labels: + - blender (#535, #622) + - camtasia2019 (#547) + - clickshare (#565) + - egnyte (#500) + - googledrive (#563) + - grammarly (#576) + - marathon, marathon2, marathoninfinity (#544) + - miro (#475, #539) + - notion (#566) + - ringcentralapp (#550) + - sublimetext (#593, #578, #567, #623, #626) + - talkdeskcallbar (#536) + - talkdeskcxcloud (#537) + - wireshark (#585) + + ## v9.2 **Note**: Both Google and Mozilla recommend using the pkg installers instead of the dmg downloads for managed deployments. So far, Installomator has provided labels for both. (`googlechrome` and `googlechromepkg` or `firefox` and `firefoxpkg`, respectively) Since there are problems with the dmg downloads, a future release of Installomator will _disable_ the `firefox` and `googlechrome` dmg labels. You should switch to using `googlechromepkg` and `firefoxpkg` labels instead. diff --git a/Installomator.sh b/Installomator.sh index 54d2fbb..0c689d4 100755 --- a/Installomator.sh +++ b/Installomator.sh @@ -81,7 +81,6 @@ LOGO=appstore # - mosylem Mosyle Manager (Education) # - addigy Addigy # - microsoft Microsoft Endpoint Manager (Intune) -# - ws1 Workspace ONE (AirWatch) # path can also be set in the command call, and if file exists, it will be used. # Like 'LOGO="/System/Applications/App\ Store.app/Contents/Resources/AppIcon.icns"' # (spaces have to be escaped). @@ -303,8 +302,8 @@ if [[ $(/usr/bin/arch) == "arm64" ]]; then rosetta2=no fi fi -VERSION="10.0beta" -VERSIONDATE="2022-05-19" +VERSION="10.0beta1" +VERSIONDATE="2022-08-12" # MARK: Functions @@ -330,7 +329,7 @@ cleanupAndExit() { # $1 = exit code, $2 message, $3 level printlog "$2" $3 fi printlog "################## End Installomator, exit code $1 \n" REQ - + # if label is wrong and we wanted name of the label, then return ################## if [[ $RETURN_LABEL_NAME -eq 1 ]]; then 1=0 # If only label name should be returned we exit without any errors @@ -368,13 +367,10 @@ displaydialogContinue() { # $1: message $2: title displaynotification() { # $1: message $2: title message=${1:-"Message"} title=${2:-"Notification"} - hubcli="/usr/local/bin/hubcli" manageaction="/Library/Application Support/JAMF/bin/Management Action.app/Contents/MacOS/Management Action" if [[ -x "$manageaction" ]]; then "$manageaction" -message "$message" -title "$title" - elif [[ -x "$hubcli" ]]; then - "$hubcli" notify -t "$title" -i "$message" -c "Dismiss" else runAsUser osascript -e "display notification \"$message\" with title \"$title\"" fi @@ -467,11 +463,11 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name fi if [ -n "$archiveName" ]; then - downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" \ - | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") + #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") + downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*$archiveName.*") else - downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" \ - | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") + #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") + downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*\.$filetype") fi if [ -z "$downloadURL" ]; then cleanupAndExit 9 "could not retrieve download URL for $gitusername/$gitreponame" ERROR @@ -487,7 +483,8 @@ versionFromGit() { gitusername=${1?:"no git user name"} gitreponame=${2?:"no git repo name"} - appNewVersion=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | grep tag_name | cut -d '"' -f 4 | sed 's/[^0-9\.]//g') + #appNewVersion=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | grep tag_name | cut -d '"' -f 4 | sed 's/[^0-9\.]//g') + appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') if [ -z "$appNewVersion" ]; then printlog "could not retrieve version number for $gitusername/$gitreponame" WARN appNewVersion="" @@ -510,6 +507,16 @@ xpath() { fi } +# from @Pico: https://macadmins.slack.com/archives/CGXNNJXJ9/p1652222365989229?thread_ts=1651786411.413349&cid=CGXNNJXJ9 +getJSONValue() { + # $1: JSON string OR file path to parse (tested to work with up to 1GB string and 2GB file). + # $2: JSON key path to look up (using dot or bracket notation). + printf '%s' "$1" | /usr/bin/osascript -l 'JavaScript' \ + -e "let json = $.NSString.alloc.initWithDataEncoding($.NSFileHandle.fileHandleWithStandardInput.readDataToEndOfFile$(/usr/bin/uname -r | /usr/bin/awk -F '.' '($1 > 18) { print "AndReturnError(ObjC.wrap())" }'), $.NSUTF8StringEncoding)" \ + -e 'if ($.NSFileManager.defaultManager.fileExistsAtPath(json)) json = $.NSString.stringWithContentsOfFileEncodingError(json, $.NSUTF8StringEncoding, ObjC.wrap())' \ + -e "const value = JSON.parse(json.js)$([ -n "${2%%[.[]*}" ] && echo '.')$2" \ + -e 'if (typeof value === "object") { JSON.stringify(value, null, 4) } else { value }' +} getAppVersion() { # modified by: Søren Theilgaard (@theilgaard) and Isaac Ordonez @@ -1375,10 +1382,11 @@ adobecreativeclouddesktop) name="Adobe Creative Cloud" #appName="Install.app" type="dmg" + adobeurl="https://helpx.adobe.com/download-install/kb/creative-cloud-desktop-app-download.html" if [[ $(arch) == "arm64" ]]; then - downloadURL=$(curl -fs "https://helpx.adobe.com/download-install/kb/creative-cloud-desktop-app-download.html" | grep -o "https*.*macarm64.*dmg" | cut -d '"' -f1 | head -1) + downloadURL=$(curl -fs "$adobeurl" | xmllint -html -xpath "string(//a[contains(@href,'osx10')][contains(text(),'Download')]/@href)" - 2> /dev/null) elif [[ $(arch) == "i386" ]]; then - downloadURL=$(curl -fs "https://helpx.adobe.com/download-install/kb/creative-cloud-desktop-app-download.html" | grep -o "https*.*osx10.*dmg" | cut -d '"' -f1 | head -1) + downloadURL=$(curl -fs "$adobeurl" | xmllint -html -xpath "string(//a[contains(@href,'macarm64')][contains(text(),'Download')]/@href)" - 2> /dev/null) fi #downloadURL=$(curl -fs "https://helpx.adobe.com/download-install/kb/creative-cloud-desktop-app-download.html" | grep -o "https*.*dmg" | head -1) appNewVersion=$(curl -fs "https://helpx.adobe.com/creative-cloud/release-note/cc-release-notes.html" | grep "mandatory" | head -1 | grep -o "Version *.* released" | cut -d " " -f2) @@ -1747,7 +1755,11 @@ bitwarden) blender) name="blender" type="dmg" - downloadURL=$(redirect=$(curl -sfL https://www.blender.org/download/ | sed 's/.*href="//' | sed 's/".*//' | grep .dmg) && curl -sfL "$redirect" | sed 's/.*href="//' | sed 's/".*//' | grep -m1 .dmg) + if [[ $(arch) == "arm64" ]]; then + downloadURL=$(curl -sfL "https://www.blender.org/download/" | xmllint --html --format - 2>/dev/null | grep -o "https://.*blender.*arm64.*.dmg" | sed '2p;d' | sed 's/www.blender.org\/download/download.blender.org/g') + elif [[ $(arch) == "i386" ]]; then + downloadURL=$(curl -sfL "https://www.blender.org/download/" | xmllint --html --format - 2>/dev/null | grep -o "https://.*blender.*x64.*.dmg" | sed '2p;d' | sed 's/www.blender.org\/download/download.blender.org/g') + fi appNewVersion=$( echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)-.*/\1/g' ) expectedTeamID="68UA947AUU" ;; @@ -1762,6 +1774,18 @@ bluejeans) appNewVersion=$(echo $downloadURL | cut -d '/' -f6) expectedTeamID="HE4P42JBGN" ;; +bluejeanswithaudiodriver) + name="BlueJeans" + type="pkg" + if [[ $(arch) == "arm64" ]]; then + downloadURL=$(curl -fs "https://www.bluejeans.com/downloads" | xmllint --html --format - 2>/dev/null | grep -o "https://.*BlueJeans.*Installer.*arm.*.pkg" ) + elif [[ $(arch) == "i386" ]]; then + downloadURL=$(curl -fs "https://www.bluejeans.com/downloads" | xmllint --html --format - 2>/dev/null | grep -o "https://.*BlueJeansInstaller.*x86.*.dmg" | sed 's/dmg/pkg/g') + fi + appNewVersion=$(echo $downloadURL | cut -d '/' -f6) + choiceChangesXML='<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><array><dict><key>attributeSetting</key><integer>1</integer><key>choiceAttribute</key><string>selected</string><key>choiceIdentifier</key><string>com.tatvikmohit.BlueJeans-Audio</string></dict></array></plist>' + expectedTeamID="HE4P42JBGN" + ;; boxdrive) name="Box" type="pkg" @@ -1911,10 +1935,10 @@ clevershare2) expectedTeamID="P76M9BE8DQ" ;; clickshare) - # credit: Søren Theilgaard (@theilgaard) name="ClickShare" type="appInDmgInZip" - downloadURL=https://www.barco.com$(curl -fs "https://www.barco.com/en/clickshare/app" | grep -E -o '(\/\S*Download\?FileNumber=R3306192\S*ShowDownloadPage=False)' | tail -1) + downloadURL="https://www.barco.com$( curl -fs "https://www.barco.com/en/clickshare/app" | grep -A6 -i "macos" | grep -i "FileNumber" | tr '"' "\n" | grep -i "FileNumber" )" + appNewVersion="$(eval "$( echo $downloadURL | sed -E 's/.*(MajorVersion.*BuildVersion=[0-9]*).*/\1/' | sed 's/&//g' )" ; ((MajorVersion++)) ; ((MajorVersion--)); ((MinorVersion++)) ; ((MinorVersion--)); ((PatchVersion++)) ; ((PatchVersion--)); ((BuildVersion++)) ; ((BuildVersion--)); echo "${MajorVersion}.${MinorVersion}.${PatchVersion}-b${BuildVersion}")" expectedTeamID="P6CDJZR997" ;; clipy) @@ -2193,6 +2217,15 @@ duckduckgo) appNewVersion=$(curl -fs https://staticcdn.duckduckgo.com/macos-desktop-browser/appcast.xml | xpath '(//rss/channel/item/sparkle:shortVersionString)[1]' 2>/dev/null | cut -d ">" -f2 | cut -d "<" -f1) expectedTeamID="HKE973VLUW" ;; +duodevicehealth) + name="Duo Device Health" + type="pkgInDmg" + downloadURL="https://dl.duosecurity.com/DuoDeviceHealth-latest.dmg" + appNewVersion=$(curl -fsLIXGET "https://dl.duosecurity.com/DuoDeviceHealth-latest.dmg" | grep -i "^content-disposition" | sed -e 's/.*filename\=\"DuoDeviceHealth\-\(.*\)\.dmg\".*/\1/') + appName="Duo Device Health.app" + expectedTeamID="FNN8Z5JMFP" + ;; + easeusdatarecoverywizard) # credit: Søren Theilgaard (@theilgaard) name="EaseUS Data Recovery Wizard" @@ -2213,6 +2246,7 @@ egnyte) name="Egnyte Connect" type="pkg" downloadURL="https://egnyte-cdn.egnyte.com/egnytedrive/mac/en-us/latest/EgnyteConnectMac.pkg" + appNewVersion=$(curl -fs "https://egnyte-cdn.egnyte.com/egnytedrive/mac/en-us/versions/default.xml" | xpath '(//rss/channel/item/enclosure/@sparkle:shortVersionString)[1]' | cut -d '"' -f 2) expectedTeamID="FELUD555VC" blockingProcesses=( NONE ) ;; @@ -2343,7 +2377,8 @@ firefox) name="Firefox" type="dmg" downloadURL="https://download.mozilla.org/?product=firefox-latest&os=osx&lang=en-US" - appNewVersion=$(curl -fs https://www.mozilla.org/en-US/firefox/releases/ | grep '<html' | grep -o -i -e "data-latest-firefox=\"[0-9.]*\"" | cut -d '"' -f2) + firefoxVersions=$(curl -fs "https://product-details.mozilla.org/1.0/firefox_versions.json") + appNewVersion=$(getJSONValue "$firefoxVersions" "LATEST_FIREFOX_VERSION") expectedTeamID="43AQ936H96" blockingProcesses=( firefox ) printlog "WARNING for ERROR: Label firefox and firefox_intl should not be used. Instead use firefoxpkg and firefoxpkg_intl as per recommendations from Firefox. It's not fully certain that the app actually gets updated here. firefoxpkg and firefoxpkg_intl will have built in updates and make sure the client is updated in the future." REQ @@ -2352,7 +2387,8 @@ firefox_da) name="Firefox" type="dmg" downloadURL="https://download.mozilla.org/?product=firefox-latest&os=osx&lang=da" - appNewVersion=$(curl -fs https://www.mozilla.org/en-US/firefox/releases/ | grep '<html' | grep -o -i -e "data-latest-firefox=\"[0-9.]*\"" | cut -d '"' -f2) + firefoxVersions=$(curl -fs "https://product-details.mozilla.org/1.0/firefox_versions.json") + appNewVersion=$(getJSONValue "$firefoxVersions" "LATEST_FIREFOX_VERSION") expectedTeamID="43AQ936H96" blockingProcesses=( firefox ) printlog "WARNING for ERROR: Label firefox, firefox_da and firefox_intl should not be used. Instead use firefoxpkg and firefoxpkg_intl as per recommendations from Firefox. It's not fully certain that the app actually gets updated here. firefoxpkg and firefoxpkg_intl will have built in updates and make sure the client is updated in the future." REQ @@ -2378,7 +2414,8 @@ firefox_intl) printlog "Download not found for '$userLanguage', using default ('en-US')." downloadURL="https://download.mozilla.org/?product=firefox-latest-ssl&os=osx" fi - appNewVersion=$(curl -fsIL $downloadURL | awk -F releases/ '/Location:/ {split($2,a,"/"); print a[1]}') + firefoxVersions=$(curl -fs "https://product-details.mozilla.org/1.0/firefox_versions.json") + appNewVersion=$(getJSONValue "$firefoxVersions" "LATEST_FIREFOX_VERSION") expectedTeamID="43AQ936H96" blockingProcesses=( firefox ) printlog "WARNING for ERROR: Label firefox and firefox_intl should not be used. Instead use firefoxpkg and firefoxpkg_intl as per recommendations from Firefox. It's not fully certain that the app actually gets updated here. firefoxpkg and firefoxpkg_intl will have built in updates and make sure the client is updated in the future." REQ @@ -2388,7 +2425,8 @@ firefoxesrpkg) name="Firefox" type="pkg" downloadURL="https://download.mozilla.org/?product=firefox-esr-pkg-latest-ssl&os=osx" - appNewVersion=$(curl -fsIL "$downloadURL" | grep -i "^location" | awk '{print $2}' | sed -E 's/.*releases\/([0-9.]*)esr.*/\1/g') + firefoxVersions=$(curl -fs "https://product-details.mozilla.org/1.0/firefox_versions.json") + appNewVersion=$(getJSONValue "$firefoxVersions" "FIREFOX_ESR") expectedTeamID="43AQ936H96" blockingProcesses=( firefox ) ;; @@ -2413,7 +2451,8 @@ firefoxesr_intl) printlog "Download not found for '$userLanguage', using default ('en-US')." downloadURL="https://download.mozilla.org/?product=firefox-esr-latest-ssl&os=osx" fi - appNewVersion=$(curl -fsIL $downloadURL | awk -F releases/ '/Location:/ {split($2,a,"esr/"); print a[1]}') + firefoxVersions=$(curl -fs "https://product-details.mozilla.org/1.0/firefox_versions.json") + appNewVersion=$(getJSONValue "$firefoxVersions" "LATEST_FIREFOX_VERSION") expectedTeamID="43AQ936H96" blockingProcesses=( firefox ) printlog "WARNING for ERROR: Label firefox and firefox_intl should not be used. Instead use firefoxpkg and firefoxpkg_intl as per recommendations from Firefox. It's not fully certain that the app actually gets updated here. firefoxpkg and firefoxpkg_intl will have built in updates and make sure the client is updated in the future." REQ @@ -2422,7 +2461,8 @@ firefoxpkg) name="Firefox" type="pkg" downloadURL="https://download.mozilla.org/?product=firefox-pkg-latest-ssl&os=osx&lang=en-US" - appNewVersion=$(curl -fs https://www.mozilla.org/en-US/firefox/releases/ | grep '<html' | grep -o -i -e "data-latest-firefox=\"[0-9.]*\"" | cut -d '"' -f2) + firefoxVersions=$(curl -fs "https://product-details.mozilla.org/1.0/firefox_versions.json") + appNewVersion=$(getJSONValue "$firefoxVersions" "LATEST_FIREFOX_VERSION") expectedTeamID="43AQ936H96" blockingProcesses=( firefox ) ;; @@ -2446,7 +2486,8 @@ firefoxpkg_intl) printlog "Download not found for that language. Using en-US" WARN downloadURL="https://download.mozilla.org/?product=firefox-pkg-latest-ssl&os=osx&lang=en-US" fi - appNewVersion=$(curl -fsIL "$downloadURL" | grep -i location | cut -d "/" -f7) + firefoxVersions=$(curl -fs "https://product-details.mozilla.org/1.0/firefox_versions.json") + appNewVersion=$(getJSONValue "$firefoxVersions" "LATEST_FIREFOX_VERSION") expectedTeamID="43AQ936H96" blockingProcesses=( firefox ) ;; @@ -2536,6 +2577,16 @@ googlechrome) expectedTeamID="EQHXZ8M8AV" printlog "WARNING for ERROR: Label googlechrome should not be used. Instead use googlechromepkg as per recommendations from Google. It's not fully certain that the app actually gets updated here. googlechromepkg will have built in updates and make sure the client is updated in the future." REQ ;; +googlechromeenterprise) + name="Google Chrome" + type="pkg" + downloadURL="https://dl.google.com/dl/chrome/mac/universal/stable/gcem/GoogleChrome.pkg" + appNewVersion=$(curl -s https://omahaproxy.appspot.com/history | awk -F',' '/mac_arm64,stable/{print $3; exit}') + expectedTeamID="EQHXZ8M8AV" + updateTool="/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent" + updateToolArguments=( -runMode oneshot -userInitiated YES ) + updateToolRunAsCurrentUser=1 + ;; googlechromepkg) name="Google Chrome" type="pkg" @@ -2555,9 +2606,14 @@ googledrivefilestream) # credit: Isaac Ordonez, Mann consulting (@mannconsulting) name="Google Drive File Stream" type="pkgInDmg" - packageID="com.google.drivefs" + if [[ $(arch) == "arm64" ]]; then + packageID="com.google.drivefs.arm64" + elif [[ $(arch) == "i386" ]]; then + packageID="com.google.drivefs.x86_64" + fi downloadURL="https://dl.google.com/drive-file-stream/GoogleDriveFileStream.dmg" # downloadURL="https://dl.google.com/drive-file-stream/GoogleDrive.dmg" blockingProcesses=( "Google Docs" "Google Drive" "Google Sheets" "Google Slides" ) + appName="Google Drive.app" expectedTeamID="EQHXZ8M8AV" ;; googledrivebackupandsync) @@ -2618,9 +2674,8 @@ grammarly) name="Grammarly Desktop" type="dmg" packageID="com.grammarly.ProjectLlama" - downloadURL=$(curl -fsL "https://download-mac.grammarly.com/appcast.xml" | xpath '//rss/channel/item[1]/enclosure/@url' 2>/dev/null | cut -d '"' -f 2) + downloadURL="https://download-mac.grammarly.com/Grammarly.dmg" expectedTeamID="W8F64X92K3" - appNewVersion=$(curl -is "https://download-mac.grammarly.com/appcast.xml" | grep sparkle:version | tr ',' '\n' | grep sparkle:version | cut -d '"' -f 4) # appName="Grammarly Installer.app" installerTool="Grammarly Installer.app" CLIInstaller="Grammarly Installer.app/Contents/MacOS/Grammarly Desktop" @@ -2803,6 +2858,14 @@ installomator_theile) expectedTeamID="JME5BW3F3R" blockingProcesses=( NONE ) ;; +ipswupdater) + name="IPSW Updater" + type="zip" + ipswupdaterVersions=$(curl -fs "https://ipsw.app/download/updates.php?current_version=0.9.16") + downloadURL=$(getJSONValue "$ipswupdaterVersions" "[0].url") + appNewVersion=$(getJSONValue "$ipswupdaterVersions" "[0].version") + expectedTeamID="YRW6NUGA63" + ;; istatmenus) # credit: AP Orlebeke (@apizz) name="iStat Menus" @@ -3244,6 +3307,7 @@ marathon) name="Marathon" type="dmg" archiveName="Marathon-[0-9.]*-Mac.dmg" + versionKey="CFBundleVersion" downloadURL="$(downloadURLFromGit Aleph-One-Marathon alephone)" appNewVersion="$(versionFromGit Aleph-One-Marathon alephone)" expectedTeamID="E8K89CXZE7" @@ -3252,6 +3316,7 @@ marathon2) name="Marathon 2" type="dmg" archiveName="Marathon2-[0-9.]*-Mac.dmg" + versionKey="CFBundleVersion" downloadURL="$(downloadURLFromGit Aleph-One-Marathon alephone)" appNewVersion="$(versionFromGit Aleph-One-Marathon alephone)" expectedTeamID="E8K89CXZE7" @@ -3260,6 +3325,7 @@ marathoninfinity) name="Marathon Infinity" type="dmg" archiveName="MarathonInfinity-[0-9.]*-Mac.dmg" + versionKey="CFBundleVersion" downloadURL="$(downloadURLFromGit Aleph-One-Marathon alephone)" appNewVersion="$(versionFromGit Aleph-One-Marathon alephone)" expectedTeamID="E8K89CXZE7" @@ -3569,9 +3635,21 @@ miro) # credit: @matins name="Miro" type="dmg" - downloadURL="https://desktop.miro.com/platforms/darwin/Miro.dmg" + if [[ $(arch) == arm64 ]]; then + downloadURL="https://desktop.miro.com/platforms/darwin-arm64/Miro.dmg" + elif [[ $(arch) == i386 ]]; then + downloadURL="https://desktop.miro.com/platforms/darwin/Miro.dmg" + fi expectedTeamID="M3GM7MFY7U" ;; +mmhmm) + name="mmhmm" + type="pkg" + downloadURL="https://updates.mmhmm.app/mac/mmhmm.pkg" + curlOptions=( -H "User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15" ) + appNewVersion=$(curl -H "User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" -fs "https://help.mmhmm.app/hc/en-us/articles/4420969712151-mmhmm-for-Mac" | grep 'The latest version of mmhmm for Mac is <strong>*' | sed -e 's/.*\<strong\>\(.*\)\.\<\/strong\>.*/\1/') + expectedTeamID="M3KUT44L48" + ;; mobikinassistantforandroid) name="MobiKin Assistant for Android" type="dmg" @@ -3733,16 +3811,24 @@ nomadlogin) appNewVersion=$(curl -fs https://nomad.menu/support/ | grep "NoMAD Login AD Downloads" | sed -E 's/.*Current Version ([0-9\.]*)<.*/\1/g') expectedTeamID="AAPZK3CB24" ;; +nordlayer) + # credit: Taboc741 (https://github.com/taboc741) + name="NordLayer" + type="pkg" + downloadURL="https://downloads.nordlayer.com/mac/latest/NordLayer.pkg" + expectedTeamID="W5W395V82Y" + ;; notion) # credit: Søren Theilgaard (@theilgaard) name="Notion" type="dmg" if [[ $(arch) == "arm64" ]]; then downloadURL="https://www.notion.so/desktop/apple-silicon/download" + appNewVersion=$( curl -fsIL "https://www.notion.so/desktop/apple-silicon/download" | grep -i "^location" | awk '{print $2}' | sed -e 's/.*Notion\-\(.*\)\-arm64.dmg.*/\1/' ) elif [[ $(arch) == "i386" ]]; then downloadURL="https://www.notion.so/desktop/mac/download" + appNewVersion=$( curl -fsIL "https://www.notion.so/desktop/mac/download" | grep -i "^location" | awk '{print $2}' | sed -e 's/.*Notion\-\(.*\).dmg.*/\1/' ) fi - appNewVersion=$( curl -fsIL "${downloadURL}" | grep -i "^location" | awk '{print $2}' | tr -d '\r\n' | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)\..*/\1/g' ) expectedTeamID="LBQJ96FQ8D" ;; nudge) @@ -4062,6 +4148,13 @@ proxyman) appNewVersion="$(versionFromGit ProxymanApp Proxyman)" expectedTeamID="3X57WP8E8V" ;; +prune) + name="Prune" + type="zip" + downloadURL=$(downloadURLFromGit BIG-RAT Prune) + appNewVersion=$(versionFromGit BIG-RAT Prune) + expectedTeamID="PS2F6S478M" +;; pymol) name="PyMOL" type="dmg" @@ -4170,7 +4263,7 @@ ricohpsprinters) ;; ringcentralapp) # credit: Isaac Ordonez, Mann consulting (@mannconsulting) - name="Ringcentral" + name="RingCentral" type="pkg" if [[ $(arch) != "i386" ]]; then downloadURL="https://app.ringcentral.com/download/RingCentral-arm64.pkg" @@ -4178,7 +4271,7 @@ ringcentralapp) downloadURL="https://app.ringcentral.com/download/RingCentral.pkg" fi expectedTeamID="M932RC5J66" - blockingProcesses=( "Ringcentral" ) + blockingProcesses=( "RingCentral" ) ;; ringcentralclassicapp) name="Glip" @@ -4521,7 +4614,7 @@ sublimetext) # credit: Søren Theilgaard (@theilgaard) name="Sublime Text" type="zip" - downloadURL="$(curl -fs https://www.sublimetext.com/download | grep -io "https://download.*_mac.zip")" + downloadURL="$(curl -fs "https://www.sublimetext.com/download_thanks?target=mac#direct-downloads" | grep -io "https://download.*_mac.zip" | head -1)" appNewVersion=$(curl -fs https://www.sublimetext.com/download | grep -i -A 4 "id.*changelog" | grep -io "Build [0-9]*") expectedTeamID="Z6D26JE4Y4" ;; @@ -4600,14 +4693,16 @@ tageditor) talkdeskcallbar) name="Callbar" type="dmg" - appNewVersion=$(curl -fsL https://downloadcallbar.talkdesk.com/release_metadata.json | sed -n 's/^.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*$/\1/p') + talkdeskcallbarVersions=$(curl -fsL "https://downloadcallbar.talkdesk.com/release_metadata.json") + appNewVersion=$(getJSONValue "$talkdeskcallbarVersions" "version") downloadURL=https://downloadcallbar.talkdesk.com/Callbar-${appNewVersion}.dmg expectedTeamID="YGGJX44TB8" ;; talkdeskcxcloud) name="Talkdesk" type="dmg" - appNewVersion=$(curl -fs https://td-infra-prd-us-east-1-s3-atlaselectron.s3.amazonaws.com/talkdesk-latest-metadata.json | sed -n -e 's/^.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*$/\1/p' | head -n 1) + talkdeskcxcloudVersions=$(curl -fs "https://td-infra-prd-us-east-1-s3-atlaselectron.s3.amazonaws.com/talkdesk-latest-metadata.json") + appNewVersion=$(getJSONValue "$talkdeskcxcloudVersions" "[0].version") downloadURL="https://td-infra-prd-us-east-1-s3-atlaselectron.s3.amazonaws.com/talkdesk-${appNewVersion}.dmg" expectedTeamID="YGGJX44TB8" ;; @@ -4955,6 +5050,13 @@ wechat) downloadURL="https://dldir1.qq.com/weixin/mac/WeChatMac.dmg" expectedTeamID="5A4RE8SF68" ;; +whatroute) + name="WhatRoute" + type="zip" + downloadURL="$(curl -fs https://www.whatroute.net/whatroute2appcast.xml | xpath '(//rss/channel/item/enclosure/@url)[1]' 2>/dev/null | cut -d '"' -f2)" + appNewVersion="$(curl -fs https://www.whatroute.net/whatroute2appcast.xml | xpath '(//rss/channel/item/enclosure/@sparkle:shortVersionString)[1]' 2>/dev/null | cut -d '"' -f2)" + expectedTeamID="H5879E8LML" + ;; whatsapp) name="WhatsApp" type="dmg" @@ -4980,12 +5082,12 @@ wickrpro) wireshark) name="Wireshark" type="dmg" - if [[ $(arch) == i386 ]]; then - downloadURL="https://1.as.dl.wireshark.org/osx/Wireshark%20Latest%20Intel%2064.dmg" - elif [[ $(arch) == arm64 ]]; then - downloadURL="https://1.as.dl.wireshark.org/osx/Wireshark%20Latest%20Arm%2064.dmg" - fi appNewVersion=$(curl -fs https://www.wireshark.org/download.html | grep -i "href.*_stable" | sed -E 's/.*\(([0-9.]*)\).*/\1/g') + if [[ $(arch) == i386 ]]; then + downloadURL="https://1.as.dl.wireshark.org/osx/Wireshark%20$appNewVersion%20Intel%2064.dmg" + elif [[ $(arch) == arm64 ]]; then + downloadURL="https://1.as.dl.wireshark.org/osx/Wireshark%20$appNewVersion%20Arm%2064.dmg" + fi expectedTeamID="7Z6EMTD2C6" ;; wordservice) @@ -5268,11 +5370,6 @@ case $LOGO in LOGO="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns" if [[ -z $MDMProfileName ]]; then; MDMProfileName="Management Profile"; fi ;; - ws1) - # Workspace ONE - LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns" - if [[ -z $MDMProfileName ]]; then; MDMProfileName="Device Manager"; fi - ;; esac if [[ ! -a "${LOGO}" ]]; then if [[ $(sw_vers -buildVersion) > "19" ]]; then diff --git a/Labels.txt b/Labels.txt index e294113..674ddf2 100644 --- a/Labels.txt +++ b/Labels.txt @@ -56,6 +56,7 @@ bettertouchtool bitwarden blender bluejeans +bluejeanswithaudiodriver boxdrive boxsync boxtools @@ -110,6 +111,7 @@ drawio drift dropbox duckduckgo +duodevicehealth easeusdatarecoverywizard easyfind egnyte @@ -146,6 +148,7 @@ gimp githubdesktop golang googlechrome +googlechromeenterprise googlechromepkg googledrive googledrivebackupandsync @@ -181,6 +184,7 @@ insomnia installomator installomator_theile intellijideace +ipswupdater istatmenus iterm2 itsycal @@ -259,6 +263,7 @@ microsoftyammer mightymike mindmanager miro +mmhmm mobikinassistantforandroid mochakeyboard mochatelnet @@ -274,6 +279,7 @@ netnewswire nextcloud nomad nomadlogin +nordlayer notion nudge nvivo @@ -317,6 +323,7 @@ promiseutilityr propresenter7 protonvpn proxyman +prune pycharmce pymol qgis-pr @@ -437,6 +444,7 @@ webex webexmeetings webexteams wechat +whatroute whatsapp wickrme wickrpro diff --git a/fragments/version.sh b/fragments/version.sh index cdefeb2..8bfae47 100644 --- a/fragments/version.sh +++ b/fragments/version.sh @@ -1 +1 @@ -10.0beta +10.0beta1 From 7f0ba6d690fd847be13072f3736137140527299f Mon Sep 17 00:00:00 2001 From: Adam Codega <acodega@users.noreply.github.com> Date: Tue, 16 Aug 2022 09:16:35 -0400 Subject: [PATCH 086/209] Revert "New label: Google Ads Editor" --- googleadseditor.sh | 7 ------- 1 file changed, 7 deletions(-) delete mode 100644 googleadseditor.sh diff --git a/googleadseditor.sh b/googleadseditor.sh deleted file mode 100644 index 9c2600b..0000000 --- a/googleadseditor.sh +++ /dev/null @@ -1,7 +0,0 @@ -googleadseditor) - name="Google Ads Editor" - type="dmg" - downloadURL="https://dl.google.com/adwords_editor/google_ads_editor.dmg" - appNewVersion="" - expectedTeamID="EQHXZ8M8AV" - ;; From 0d3831d0747ba9159069edbf560b5b49eeacb63a Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Tue, 16 Aug 2022 16:16:55 +0200 Subject: [PATCH 087/209] Update Installomator.sh --- Installomator.sh | 240 ++++++++++++++++++++++++++++++++++++++++++----- 1 file changed, 217 insertions(+), 23 deletions(-) diff --git a/Installomator.sh b/Installomator.sh index 0c689d4..3e34f84 100755 --- a/Installomator.sh +++ b/Installomator.sh @@ -7,7 +7,7 @@ label="" # if no label is sent to the script, this will be used # 2020-2021 Installomator # # inspired by the download scripts from William Smith and Sander Schram -# +# # Contributers: # Armin Briegel - @scriptingosx # Isaac Ordonez - @issacatmann @@ -23,7 +23,7 @@ export PATH=/usr/bin:/bin:/usr/sbin:/sbin # set to 0 for production, 1 or 2 for debugging # while debugging, items will be downloaded to the parent directory of this script # also no actual installation will be performed -# debug mode 1 will download to the directory the script is run in, but will not check the version +# debug mode 1 will download to the directory the script is run in, but will not check the version # debug mode 2 will download to the temp directory, check for blocking processes, check the version, but will not install anything or remove the current version DEBUG=1 @@ -34,7 +34,6 @@ NOTIFY=success # - silent no notifications # - all all notifications (great for Self Service installation) - # behavior when blocking processes are found BLOCKING_PROCESS_ACTION=tell_user # options: @@ -139,6 +138,26 @@ IGNORE_DND_APPS="" # IGNORE_DND_APPS="firefox,Google Chrome,Safari,Microsoft Edge,Opera,Amphetamine,caffeinate" +# Swift Dialog integration + +# These variables will allow Installomator to communicate progress with Swift Dialog +# https://github.com/bartreardon/swiftDialog + +# This requires Swift Dialog 2.11.2 or higher. + +DIALOG_CMD_FILE="" +# When this variable is set, Installomator will write Swift Dialog commands to this path. +# Installomator will not launch Swift Dialog. The process calling Installomator will have +# launch and configure Swift Dialog to listen to this file. +# See `MDM/swiftdialog_example.sh` for an example. + +DIALOG_LIST_ITEM_NAME="" +# When this variable is set, progress for downloads and installs will be sent to this +# listitem. +# When the variable is unset, progress will be sent to Swift Dialog's main progress bar. + + + # NOTE: How labels work # Each workflow label needs to be listed in the case statement below. @@ -184,7 +203,7 @@ IGNORE_DND_APPS="" # How we get version number from app. Possible values: # - CFBundleShortVersionString # - CFBundleVersion -# Not all software titles uses fields the same. +# Not all software titles uses fields the same. # See Opera label. # # - appCustomVersion(){}: (optional function) @@ -321,12 +340,15 @@ cleanupAndExit() { # $1 = exit code, $2 message, $3 level printlog "Debugging enabled, Deleting tmpDir output was:\n$deleteTmpOut" DEBUG fi + # If we closed any processes, reopen the app again reopenClosedProcess if [[ -n $2 && $1 -ne 0 ]]; then printlog "ERROR: $2" $3 + updateDialog "fail" "Error ($1; $2)" else printlog "$2" $3 + updateDialog "success" "" fi printlog "################## End Installomator, exit code $1 \n" REQ @@ -470,7 +492,7 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*\.$filetype") fi if [ -z "$downloadURL" ]; then - cleanupAndExit 9 "could not retrieve download URL for $gitusername/$gitreponame" ERROR + cleanupAndExit 14 "could not retrieve download URL for $gitusername/$gitreponame" ERROR else echo "$downloadURL" return 0 @@ -586,7 +608,7 @@ getAppVersion() { printlog "Replacing App Store apps, no matter the version" WARN appversion=0 else - cleanupAndExit 1 "App previously installed from App Store, and we respect that" ERROR + cleanupAndExit 23 "App previously installed from App Store, and we respect that" ERROR fi fi else @@ -735,6 +757,7 @@ installAppWithPath() { # $1: path to app to install in $targetDir # verify with spctl printlog "Verifying: $appPath" INFO + updateDialog "wait" "Verifying..." printlog "App size: $(du -sh "$appPath")" DEBUG appVerify=$(spctl -a -vv "$appPath" 2>&1 ) appVerifyStatus=$(echo $?) @@ -783,7 +806,7 @@ installAppWithPath() { # $1: path to app to install in $targetDir printlog "notifying" displaynotification "$message" "Error updating $name!" fi - cleanupAndExit 6 "Installed macOS is too old for this app." ERROR + cleanupAndExit 15 "Installed macOS is too old for this app." ERROR fi fi @@ -842,7 +865,7 @@ installAppWithPath() { # $1: path to app to install in $targetDir deduplicatelogs "$CLIoutput" if [ $CLIstatus -ne 0 ] ; then - cleanupAndExit 3 "Error installing $mountname/$CLIInstaller $CLIArguments error:\n$logoutput" ERROR + cleanupAndExit 16 "Error installing $mountname/$CLIInstaller $CLIArguments error:\n$logoutput" ERROR else printlog "Succesfully ran $mountname/$CLIInstaller $CLIArguments" INFO fi @@ -880,6 +903,7 @@ installFromDMG() { installFromPKG() { # verify with spctl printlog "Verifying: $archiveName" + updateDialog "wait" "Verifying..." printlog "File list: $(ls -lh "$archiveName")" DEBUG printlog "File type: $(file "$archiveName")" DEBUG spctlOut=$(spctl -a -vv -t install "$archiveName" 2>&1 ) @@ -947,8 +971,29 @@ installFromPKG() { # install pkg printlog "Installing $archiveName to $targetDir" - pkgInstall=$(installer -verbose -dumplog -pkg "$archiveName" -tgt "$targetDir" 2>&1) - pkgInstallStatus=$(echo $?) + + if [[ $DIALOG_CMD_FILE != "" ]]; then + # pipe + pipe="$tmpDir/installpipe" + # initialise named pipe for installer output + initNamedPipe create $pipe + + # run the pipe read in the background + readPKGInstallPipe $pipe "$DIALOG_CMD_FILE" & installPipePID=$! + printlog "listening to output of installer with pipe $pipe and command file $DIALOG_CMD_FILE on PID $installPipePID" DEBUG + + pkgInstall=$(installer -verboseR -pkg "$archiveName" -tgt "$targetDir" 2>&1 | tee $pipe) + pkgInstallStatus=$pipestatus[1] + # because we are tee-ing the output, we want the pipe status of the first command in the chain, not the most recent one + killProcess $installPipePID + + else + pkgInstall=$(installer -verbose -dumplog -pkg "$archiveName" -tgt "$targetDir" 2>&1) + pkgInstallStatus=$(echo $?) + fi + + + sleep 1 pkgEndTime=$(date "+$LogDateFormat") pkgInstall+=$(echo "\nOutput of /var/log/install.log below this line.\n") @@ -1040,7 +1085,7 @@ installPkgInZip() { printlog "Found pkg(s):\n$findfiles" DEBUG filearray=( ${(f)findfiles} ) if [[ ${#filearray} -eq 0 ]]; then - cleanupAndExit 20 "couldn't find pkg in zip $archiveName" ERROR + cleanupAndExit 21 "couldn't find pkg in zip $archiveName" ERROR fi # it is now safe to overwrite archiveName for installFromPKG archiveName="${filearray[1]}" @@ -1053,7 +1098,7 @@ installPkgInZip() { findfiles=$(find "$tmpDir" -iname "$pkgName") filearray=( ${(f)findfiles} ) if [[ ${#filearray} -eq 0 ]]; then - cleanupAndExit 20 "couldn't find pkg “$pkgName” in zip $archiveName" ERROR + cleanupAndExit 21 "couldn't find pkg “$pkgName” in zip $archiveName" ERROR fi # it is now safe to overwrite archiveName for installFromPKG archiveName="${filearray[1]}" @@ -1076,7 +1121,7 @@ installAppInDmgInZip() { findfiles=$(find "$tmpDir" -iname "*.dmg" -maxdepth 2 ) filearray=( ${(f)findfiles} ) if [[ ${#filearray} -eq 0 ]]; then - cleanupAndExit 20 "couldn't find dmg in zip $archiveName" ERROR + cleanupAndExit 22 "couldn't find dmg in zip $archiveName" ERROR fi archiveName="$(basename ${filearray[1]})" # it is now safe to overwrite archiveName for installFromDMG @@ -1128,7 +1173,8 @@ runUpdateTool() { finishing() { printlog "Finishing..." - sleep 10 # wait a moment to let spotlight catch up + + sleep 3 # wait a moment to let spotlight catch up getAppVersion if [[ -z $appversion ]]; then @@ -1176,6 +1222,116 @@ hasDisplaySleepAssertion() { return 1 } +initNamedPipe() { + # create or delete a named pipe + # commands are "create" or "delete" + + local cmd=$1 + local pipe=$2 + case $cmd in + "create") + if [[ -e $pipe ]]; then + rm $pipe + fi + # make named pipe + mkfifo -m 644 $pipe + ;; + "delete") + # clean up + rm $pipe + ;; + *) + ;; + esac +} + +readDownloadPipe() { + # reads from a previously created named pipe + # output from curl with --progress-bar. % downloaded is read in and then sent to the specified log file + local pipe=$1 + local log=${2:-$DIALOG_CMD_FILE} + # set up read from pipe + while IFS= read -k 1 -u 0 char; do + if [[ $char =~ [0-9] ]]; then + keep=1 + fi + + if [[ $char == % ]]; then + updateDialog $progress "Downloading..." + progress="" + keep=0 + fi + + if [[ $keep == 1 ]]; then + progress="$progress$char" + fi + done < $pipe +} + +readPKGInstallPipe() { + # reads from a previously created named pipe + # output from installer with -verboseR. % install status is read in and then sent to the specified log file + local pipe=$1 + local log=${2:-$DIALOG_CMD_FILE} + local appname=${3:-$name} + + while read -k 1 -u 0 char; do + if [[ $char == % ]]; then + keep=1 + fi + if [[ $char =~ [0-9] && $keep == 1 ]]; then + progress="$progress$char" + fi + if [[ $char == . && $keep == 1 ]]; then + updateDialog $progress "Installing..." + progress="" + keep=0 + fi + done < $pipe +} + +killProcess() { + # will silently kill the specified PID + builtin kill $1 2>/dev/null +} + +updateDialog() { + local state=$1 + local message=$2 + local listitem=${3:-$DIALOG_LIST_ITEM_NAME} + local cmd_file=${4:-$DIALOG_CMD_FILE} + local progress="" + + if [[ $state =~ '^[0-9]' \ + || $state == "reset" \ + || $state == "increment" \ + || $state == "complete" \ + || $state == "indeterminate" ]]; then + progress=$state + fi + + # when to cmdfile is set, do nothing + if [[ $$cmd_file == "" ]]; then + return + fi + + if [[ $listitem == "" ]]; then + # no listitem set, update main progress bar and progress text + if [[ $progress != "" ]]; then + echo "progress: $progress" >> $cmd_file + fi + if [[ $message != "" ]]; then + echo "progresstext: $name - $message" >> $cmd_file + fi + else + # list item has a value, so we update the progress and text in the list + if [[ $progress != "" ]]; then + echo "listitem: title: $listitem, statustext: $message, progress: $progress" >> $cmd_file + else + echo "listitem: title: $listitem, statustext: $message, status: $state" >> $cmd_file + fi + fi +} # MARK: check minimal macOS requirement autoload is-at-least @@ -1185,6 +1341,7 @@ if ! is-at-least 10.14 $installedOSversion; then exit 98 fi + # MARK: argument parsing if [[ $# -eq 0 ]]; then if [[ -z $label ]]; then # check if label is set inside script @@ -1202,7 +1359,7 @@ fi while [[ -n $1 ]]; do if [[ $1 =~ ".*\=.*" ]]; then # if an argument contains an = character, send it to eval - printlog "setting variable from argument $1" WARN + printlog "setting variable from argument $1" INFO eval $1 else # assume it's a label @@ -1277,6 +1434,16 @@ if [[ "$(whoami)" != "root" && "$DEBUG" -eq 0 ]]; then cleanupAndExit 6 "not running as root, exiting" ERROR fi + +# check Swift Dialog presence and version +DIALOG_CMD="/usr/local/bin/dialog" + +if [[ ! -x $DIALOG_CMD ]]; then + # Swift Dialog is not installed, clear cmd file variable to ignore + printlog "SwiftDialog is not installed, clear cmd file var" + DIALOG_CMD_FILE="" +fi + # MARK: labels in case statement case $label in longversion) @@ -3288,7 +3455,7 @@ macports) archiveName="Catalina.pkg" ;; *) - cleanupAndExit 1 "macOS 10.14 or earlier not supported by Installomator." + cleanupAndExit 98 "macOS 10.14 or earlier not supported by Installomator." ;; esac downloadURL=$(downloadURLFromGit macports macports-base) @@ -4993,9 +5160,10 @@ vlc) vmwarehorizonclient) name="VMware Horizon Client" type="dmg" - downloadURL=$(curl -fsL "https://my.vmware.com/channel/public/api/v1.0/dlg/details?locale=en_US&downloadGroup=CART21FQ2_MAC_800&productId=1027&rPId=48989" | grep -o 'Url.*..dmg"' | cut -d '"' -f3) - appNewVersion=$(curl -fsL "https://my.vmware.com/channel/public/api/v1.0/dlg/details?locale=en_US&downloadGroup=CART21FQ2_MAC_800&productId=1027&rPId=48989" | sed 's/.*-\(.*\)-.*/\1/') - expectedTeamID="EG7KH642X6" + downloadGroup=$(curl -fsL "https://my.vmware.com/channel/public/api/v1.0/products/getRelatedDLGList?locale=en_US&category=desktop_end_user_computing&product=vmware_horizon_clients&version=horizon_8&dlgType=PRODUCT_BINARY" | grep -o '[^"]*_MAC_[^"]*') + fileName=$(curl -fsL "https://my.vmware.com/channel/public/api/v1.0/dlg/details?locale=en_US&category=desktop_end_user_computing&product=vmware_horizon_clients&dlgType=PRODUCT_BINARY&downloadGroup=${downloadGroup}" | grep -o '"fileName":"[^"]*"' | cut -d: -f2 | sed 's/"//g') + downloadURL="https://download3.vmware.com/software/$downloadGroup/${fileName}" + appNewVersion=$(curl -fsL "https://my.vmware.com/channel/public/api/v1.0/dlg/details?locale=en_US&downloadGroup=${downloadGroup}" | grep -o '[^"]*\.dmg[^"]*' | sed 's/.*-\(.*\)-.*/\1/') expectedTeamID="EG7KH642X6" ;; vscodium) name="VSCodium" @@ -5328,7 +5496,7 @@ fi if [[ ${INTERRUPT_DND} = "no" ]]; then # Check if a fullscreen app is active if hasDisplaySleepAssertion; then - cleanupAndExit 1 "active display sleep assertion detected, aborting" ERROR + cleanupAndExit 24 "active display sleep assertion detected, aborting" ERROR fi fi @@ -5442,7 +5610,7 @@ fi # MARK: change directory to temporary working directory printlog "Changing directory to $tmpDir" DEBUG if ! cd "$tmpDir"; then - cleanupAndExit 1 "error changing directory $tmpDir" ERROR + cleanupAndExit 13 "error changing directory $tmpDir" ERROR fi # MARK: get installed version @@ -5478,6 +5646,8 @@ fi # MARK: check if this is an Update and we can use updateTool if [[ (-n $appversion && -n "$updateTool") || "$type" == "updateronly" ]]; then printlog "appversion & updateTool" + updateDialog "wait" "Updating..." + if [[ $DEBUG -ne 1 ]]; then if runUpdateTool; then finishing @@ -5504,8 +5674,28 @@ else displaynotification "Downloading new $name" "Download in progress …" fi fi - curlDownload=$(curl -v -fsL --show-error ${curlOptions} "$downloadURL" -o "$archiveName" 2>&1) - curlDownloadStatus=$(echo $?) + + if [[ $DIALOG_CMD_FILE != "" ]]; then + # pipe + pipe="$tmpDir/downloadpipe" + # initialise named pipe for curl output + initNamedPipe create $pipe + + # run the pipe read in the background + readDownloadPipe $pipe "$DIALOG_CMD_FILE" & downloadPipePID=$! + printlog "listening to output of curl with pipe $pipe and command file $DIALOG_CMD_FILE on PID $downloadPipePID" DEBUG + + curlDownload=$(curl -fL -# --show-error ${curlOptions} "$downloadURL" -o "$archiveName" 2>&1 | tee $pipe) + # because we are tee-ing the output, we want the pipe status of the first command in the chain, not the most recent one + curlDownloadStatus=$(echo $pipestatus[1]) + killProcess $downloadPipePID + + else + printlog "No Dialog connection, just download" DEBUG + curlDownload=$(curl -v -fsL --show-error ${curlOptions} "$downloadURL" -o "$archiveName" 2>&1) + curlDownloadStatus=$(echo $?) + fi + deduplicatelogs "$curlDownload" if [[ $curlDownloadStatus -ne 0 ]]; then #if ! curl --location --fail --silent "$downloadURL" -o "$archiveName"; then @@ -5547,8 +5737,10 @@ if [[ $currentUser != "loginwindow" && $NOTIFY == "all" ]]; then printlog "notifying" if [[ $updateDetected == "YES" ]]; then displaynotification "Updating $name" "Installation in progress …" + updateDialog "wait" "Updating..." else displaynotification "Installing $name" "Installation in progress …" + updateDialog "wait" "Installing..." fi fi @@ -5585,6 +5777,8 @@ case $type in ;; esac +updateDialog "wait" "Finishing..." + # MARK: Finishing — print installed application location and version finishing From b44fe47bf0de0ff224016eb09b63520ccde9726b Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Tue, 16 Aug 2022 16:19:40 +0200 Subject: [PATCH 088/209] moved label from repo root to proper folder, see #651 --- googleadseditor.sh => fragments/labels/googleadseditor.sh | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename googleadseditor.sh => fragments/labels/googleadseditor.sh (100%) diff --git a/googleadseditor.sh b/fragments/labels/googleadseditor.sh similarity index 100% rename from googleadseditor.sh rename to fragments/labels/googleadseditor.sh From 87cdb11039ad78bdce426f59f3436a6c527f34fc Mon Sep 17 00:00:00 2001 From: Mike Matter <mwmatter@gmail.com> Date: Tue, 16 Aug 2022 15:18:04 -0500 Subject: [PATCH 089/209] Workspace ONE Support Revised PR for Workspace ONE support. --- fragments/functions.sh | 3 +++ fragments/header.sh | 1 + fragments/main.sh | 5 +++++ 3 files changed, 9 insertions(+) diff --git a/fragments/functions.sh b/fragments/functions.sh index 8dbccb3..32fbe06 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -61,9 +61,12 @@ displaynotification() { # $1: message $2: title message=${1:-"Message"} title=${2:-"Notification"} manageaction="/Library/Application Support/JAMF/bin/Management Action.app/Contents/MacOS/Management Action" + hubcli="/usr/local/bin/hubcli" if [[ -x "$manageaction" ]]; then "$manageaction" -message "$message" -title "$title" + elif [[ -x "$hubcli" ]]; then + "$hubcli" notify -t "$title" -i "$message" -c "Dismiss" else runAsUser osascript -e "display notification \"$message\" with title \"$title\"" fi diff --git a/fragments/header.sh b/fragments/header.sh index bde971b..0bcf4b1 100644 --- a/fragments/header.sh +++ b/fragments/header.sh @@ -81,6 +81,7 @@ LOGO=appstore # - mosylem Mosyle Manager (Education) # - addigy Addigy # - microsoft Microsoft Endpoint Manager (Intune) +# - ws1 Workspace ONE (AirWatch) # path can also be set in the command call, and if file exists, it will be used. # Like 'LOGO="/System/Applications/App\ Store.app/Contents/Resources/AppIcon.icns"' # (spaces have to be escaped). diff --git a/fragments/main.sh b/fragments/main.sh index 9a665c7..27ddb48 100644 --- a/fragments/main.sh +++ b/fragments/main.sh @@ -60,6 +60,11 @@ case $LOGO in LOGO="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns" if [[ -z $MDMProfileName ]]; then; MDMProfileName="Management Profile"; fi ;; + ws1) + # Workspace ONE (AirWatch) + LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns" + if [[ -z $MDMProfileName ]]; then; MDMProfileName="Device Manager"; fi + ;; esac if [[ ! -a "${LOGO}" ]]; then if [[ $(sw_vers -buildVersion) > "19" ]]; then From cfa05aa902bc0715be8fe811a661df228841c5be Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Wed, 17 Aug 2022 09:14:32 +0200 Subject: [PATCH 090/209] Create mongodbcompass.sh --- fragments/labels/mongodbcompass.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/mongodbcompass.sh diff --git a/fragments/labels/mongodbcompass.sh b/fragments/labels/mongodbcompass.sh new file mode 100644 index 0000000..f90ecea --- /dev/null +++ b/fragments/labels/mongodbcompass.sh @@ -0,0 +1,7 @@ +mongodbcompass) + name="MongoDB Compass" + type="dmg" + downloadURL="$(downloadURLFromGit mongodb-js compass)" + appNewVersion="$(versionFromGit mongodb-js compass)" + expectedTeamID="4XWMY46275" + ;; From a3db2979354519a086a684e80fbaad90b107fd36 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Wed, 17 Aug 2022 09:26:30 +0200 Subject: [PATCH 091/209] `archiveName` had to be used. MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ``` % /Users/st/Documents/GitHub/Installomator-theile/utils/assemble.sh mongodbcompass DEBUG=2 2022-08-17 09:22:32 : INFO : mongodbcompass : setting variable from argument DEBUG=2 2022-08-17 09:22:32 : REQ : mongodbcompass : ################## Start Installomator v. 10.0beta1, date 2022-08-17 2022-08-17 09:22:32 : INFO : mongodbcompass : ################## Version: 10.0beta1 2022-08-17 09:22:32 : INFO : mongodbcompass : ################## Date: 2022-08-17 2022-08-17 09:22:32 : INFO : mongodbcompass : ################## mongodbcompass 2022-08-17 09:22:32 : DEBUG : mongodbcompass : DEBUG mode 2 enabled. 2022-08-17 09:22:35 : INFO : mongodbcompass : BLOCKING_PROCESS_ACTION=tell_user 2022-08-17 09:22:35 : INFO : mongodbcompass : NOTIFY=success 2022-08-17 09:22:35 : INFO : mongodbcompass : LOGGING=DEBUG 2022-08-17 09:22:35 : INFO : mongodbcompass : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-08-17 09:22:35 : INFO : mongodbcompass : Label type: dmg 2022-08-17 09:22:35 : INFO : mongodbcompass : archiveName: mongodb-compass-[0-9.]*-darwin-x64.dmg 2022-08-17 09:22:35 : INFO : mongodbcompass : no blocking processes defined, using MongoDB Compass as default 2022-08-17 09:22:35 : DEBUG : mongodbcompass : Changing directory to /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.lH2tEMCm 2022-08-17 09:22:35 : INFO : mongodbcompass : name: MongoDB Compass, appName: MongoDB Compass.app 2022-08-17 09:22:35 : WARN : mongodbcompass : No previous app found 2022-08-17 09:22:35 : WARN : mongodbcompass : could not find MongoDB Compass.app 2022-08-17 09:22:35 : INFO : mongodbcompass : appversion: 2022-08-17 09:22:35 : INFO : mongodbcompass : Latest version of MongoDB Compass is 1.32.6 2022-08-17 09:22:35 : REQ : mongodbcompass : Downloading https://github.com/mongodb-js/compass/releases/download/v1.32.6/mongodb-compass-1.32.6-darwin-x64.dmg to mongodb-compass-[0-9.]*-darwin-x64.dmg 2022-08-17 09:22:35 : DEBUG : mongodbcompass : No Dialog connection, just download 2022-08-17 09:23:05 : DEBUG : mongodbcompass : File list: -rw-r--r-- 1 st staff 105M 17 Aug 09:23 mongodb-compass-[0-9.]*-darwin-x64.dmg 2022-08-17 09:23:05 : DEBUG : mongodbcompass : File type: mongodb-compass-[0-9.]*-darwin-x64.dmg: zlib compressed data 2022-08-17 09:23:05 : DEBUG : mongodbcompass : curl output was: * Trying 140.82.121.3:443... * Connected to github.com (140.82.121.3) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [315 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [122 bytes data] * (304) (IN), TLS handshake, Unknown (8): { [19 bytes data] * (304) (IN), TLS handshake, Certificate (11): { [2459 bytes data] * (304) (IN), TLS handshake, CERT verify (15): { [80 bytes data] * (304) (IN), TLS handshake, Finished (20): { [36 bytes data] * (304) (OUT), TLS handshake, Finished (20): } [36 bytes data] * SSL connection using TLSv1.3 / AEAD-CHACHA20-POLY1305-SHA256 * ALPN, server accepted to use h2 * Server certificate: * subject: C=US; ST=California; L=San Francisco; O=GitHub, Inc.; CN=github.com * start date: Mar 15 00:00:00 2022 GMT * expire date: Mar 15 23:59:59 2023 GMT * subjectAltName: host "github.com" matched cert's "github.com" * issuer: C=US; O=DigiCert Inc; CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1 * SSL certificate verify ok. * Using HTTP2, server supports multiplexing * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x142012c00) > GET /mongodb-js/compass/releases/download/v1.32.6/mongodb-compass-1.32.6-darwin-x64.dmg HTTP/2 > Host: github.com > user-agent: curl/7.79.1 > accept: */* > < HTTP/2 302 < server: GitHub.com < date: Wed, 17 Aug 2022 07:22:36 GMT < content-type: text/html; charset=utf-8 < vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With < permissions-policy: interest-cohort=() < location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/31547508/5fee7e2d-c3c9-4050-ba74-3892430d8a44?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20220817%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20220817T072235Z&X-Amz-Expires=300&X-Amz-Signature=2a550fc170267b51db8bcd950adde582106a9960e884920427cc94179d3f7a52&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=31547508&response-content-disposition=attachment%3B%20filename%3Dmongodb-compass-1.32.6-darwin-x64.dmg&response-content-type=application%2Foctet-stream < cache-control: no-cache < strict-transport-security: max-age=31536000; includeSubdomains; preload < x-frame-options: deny < x-content-type-options: nosniff < x-xss-protection: 0 < referrer-policy: no-referrer-when-downgrade < expect-ct: max-age=2592000, report-uri="https://api.github.com/_private/browser/errors" < content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src render.githubusercontent.com viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com identicons.github.com github-cloud.s3.amazonaws.com secured-user-images.githubusercontent.com/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/ < content-length: 0 < x-github-request-id: D389:9E70:5C847:B141B:62FC973B < { [0 bytes data] * Connection #0 to host github.com left intact * Issue another request to this URL: 'https://objects.githubusercontent.com/github-production-release-asset-2e65be/31547508/5fee7e2d-c3c9-4050-ba74-3892430d8a44?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20220817%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20220817T072235Z&X-Amz-Expires=300&X-Amz-Signature=2a550fc170267b51db8bcd950adde582106a9960e884920427cc94179d3f7a52&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=31547508&response-content-disposition=attachment%3B%20filename%3Dmongodb-compass-1.32.6-darwin-x64.dmg&response-content-type=application%2Foctet-stream' * Trying 185.199.108.133:443... * Connected to objects.githubusercontent.com (185.199.108.133) port 443 (#1) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [334 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [122 bytes data] * (304) (IN), TLS handshake, Unknown (8): { [19 bytes data] * (304) (IN), TLS handshake, Certificate (11): { [3051 bytes data] * (304) (IN), TLS handshake, CERT verify (15): { [264 bytes data] * (304) (IN), TLS handshake, Finished (20): { [36 bytes data] * (304) (OUT), TLS handshake, Finished (20): } [36 bytes data] * SSL connection using TLSv1.3 / AEAD-CHACHA20-POLY1305-SHA256 * ALPN, server accepted to use h2 * Server certificate: * subject: C=US; ST=California; L=San Francisco; O=GitHub, Inc.; CN=*.github.io * start date: Mar 18 00:00:00 2022 GMT * expire date: Mar 21 23:59:59 2023 GMT * subjectAltName: host "objects.githubusercontent.com" matched cert's "*.githubusercontent.com" * issuer: C=US; O=DigiCert Inc; CN=DigiCert TLS RSA SHA256 2020 CA1 * SSL certificate verify ok. * Using HTTP2, server supports multiplexing * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x142012c00) > GET /github-production-release-asset-2e65be/31547508/5fee7e2d-c3c9-4050-ba74-3892430d8a44?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20220817%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20220817T072235Z&X-Amz-Expires=300&X-Amz-Signature=2a550fc170267b51db8bcd950adde582106a9960e884920427cc94179d3f7a52&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=31547508&response-content-disposition=attachment%3B%20filename%3Dmongodb-compass-1.32.6-darwin-x64.dmg&response-content-type=application%2Foctet-stream HTTP/2 > Host: objects.githubusercontent.com > user-agent: curl/7.79.1 > accept: */* > < HTTP/2 200 < content-type: application/octet-stream < content-md5: YVXRK4TfSa4JKJtuG+byVg== < last-modified: Thu, 04 Aug 2022 13:18:01 GMT < etag: "0x8DA761BC2004D97" < server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 < x-ms-request-id: f21174ed-101e-0038-630a-b286a5000000 < x-ms-version: 2020-04-08 < x-ms-creation-time: Thu, 04 Aug 2022 13:18:01 GMT < x-ms-lease-status: unlocked < x-ms-lease-state: available < x-ms-blob-type: BlockBlob < content-disposition: attachment; filename=mongodb-compass-1.32.6-darwin-x64.dmg < x-ms-server-encrypted: true < fastly-restarts: 1 < accept-ranges: bytes < age: 0 < date: Wed, 17 Aug 2022 07:22:36 GMT < via: 1.1 varnish < x-served-by: cache-cph2320026-CPH < x-cache: MISS < x-cache-hits: 0 < x-timer: S1660720956.256578,VS0,VE286 < content-length: 109941343 < { [1369 bytes data] * Connection #1 to host objects.githubusercontent.com left intact 2022-08-17 09:23:05 : REQ : mongodbcompass : no more blocking processes, continue with update 2022-08-17 09:23:05 : REQ : mongodbcompass : Installing MongoDB Compass 2022-08-17 09:23:05 : INFO : mongodbcompass : Mounting /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.lH2tEMCm/mongodb-compass-[0-9.]*-darwin-x64.dmg 2022-08-17 09:23:10 : DEBUG : mongodbcompass : Debugging enabled, dmgmount output was: Beregner checksum af Protective Master Boot Record (MBR : 0)… Protective Master Boot Record (MBR :: kontrolleret CRC32 $CE7C9421 Beregner checksum af GPT Header (Primary GPT Header : 1)… GPT Header (Primary GPT Header : 1): kontrolleret CRC32 $B0665E30 Beregner checksum af GPT Partition Data (Primary GPT Table : 2)… GPT Partition Data (Primary GPT Tabl: kontrolleret CRC32 $554080CE Beregner checksum af (Apple_Free : 3)… (Apple_Free : 3): kontrolleret CRC32 $00000000 Beregner checksum af disk image (Apple_HFS : 4)… disk image (Apple_HFS : 4): kontrolleret CRC32 $B7372FDD Beregner checksum af (Apple_Free : 5)… (Apple_Free : 5): kontrolleret CRC32 $00000000 Beregner checksum af GPT Partition Data (Backup GPT Table : 6)… GPT Partition Data (Backup GPT Table: kontrolleret CRC32 $554080CE Beregner checksum af GPT Header (Backup GPT Header : 7)… GPT Header (Backup GPT Header : 7): kontrolleret CRC32 $412D19E4 kontrolleret CRC32 $985F83BF /dev/disk5 GUID_partition_scheme /dev/disk5s1 Apple_HFS /Volumes/MongoDB Compass 2022-08-17 09:23:10 : INFO : mongodbcompass : Mounted: /Volumes/MongoDB Compass 2022-08-17 09:23:10 : INFO : mongodbcompass : Verifying: /Volumes/MongoDB Compass/MongoDB Compass.app updateDialog:26: no such file or directory: 2022-08-17 09:23:10 : DEBUG : mongodbcompass : App size: 267M /Volumes/MongoDB Compass/MongoDB Compass.app 2022-08-17 09:23:12 : DEBUG : mongodbcompass : Debugging enabled, App Verification output was: /Volumes/MongoDB Compass/MongoDB Compass.app: accepted source=Notarized Developer ID origin=Developer ID Application: MongoDB, Inc. (4XWMY46275) 2022-08-17 09:23:12 : INFO : mongodbcompass : Team ID matching: 4XWMY46275 (expected: 4XWMY46275 ) 2022-08-17 09:23:12 : INFO : mongodbcompass : Installing MongoDB Compass version 1.32.6 on versionKey CFBundleShortVersionString. 2022-08-17 09:23:12 : INFO : mongodbcompass : App has LSMinimumSystemVersion: 10.11.0 2022-08-17 09:23:12 : DEBUG : mongodbcompass : DEBUG mode 2 enabled, not installing anything, exiting 2022-08-17 09:23:12 : DEBUG : mongodbcompass : Unmounting /Volumes/MongoDB Compass 2022-08-17 09:23:12 : DEBUG : mongodbcompass : Debugging enabled, Unmounting output was: "disk5" ejected. 2022-08-17 09:23:12 : DEBUG : mongodbcompass : Deleting /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.lH2tEMCm 2022-08-17 09:23:12 : DEBUG : mongodbcompass : Debugging enabled, Deleting tmpDir output was: /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.lH2tEMCm/mongodb-compass-[0-9.]*-darwin-x64.dmg 2022-08-17 09:23:12 : DEBUG : mongodbcompass : /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.lH2tEMCm 2022-08-17 09:23:12 : INFO : mongodbcompass : App not closed, so no reopen. 2022-08-17 09:23:12 : INFO : mongodbcompass : 2022-08-17 09:23:12 : REQ : mongodbcompass : ################## End Installomator, exit code 0 ``` --- fragments/labels/mongodbcompass.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/fragments/labels/mongodbcompass.sh b/fragments/labels/mongodbcompass.sh index f90ecea..6aa8e33 100644 --- a/fragments/labels/mongodbcompass.sh +++ b/fragments/labels/mongodbcompass.sh @@ -1,6 +1,7 @@ mongodbcompass) name="MongoDB Compass" type="dmg" + archiveName="mongodb-compass-[0-9.]*-darwin-x64.dmg" downloadURL="$(downloadURLFromGit mongodb-js compass)" appNewVersion="$(versionFromGit mongodb-js compass)" expectedTeamID="4XWMY46275" From 3d3114515aa2eb09b24348f3125b757f19e0f8ea Mon Sep 17 00:00:00 2001 From: Fletcher Salesky <fletcher@salesky.dev> Date: Wed, 17 Aug 2022 15:28:26 -0700 Subject: [PATCH 092/209] Create zoomoutlookplugin.sh --- fragments/labels/zoomoutlookplugin.sh | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 fragments/labels/zoomoutlookplugin.sh diff --git a/fragments/labels/zoomoutlookplugin.sh b/fragments/labels/zoomoutlookplugin.sh new file mode 100644 index 0000000..15d45d5 --- /dev/null +++ b/fragments/labels/zoomoutlookplugin.sh @@ -0,0 +1,10 @@ +zoomoutlookplugin) + name="Zoom Outlook Plugin" + appName="PluginLauncher.app" + targetDir="/Applications/ZoomOutlookPlugin" + type="pkg" + downloadURL="https://zoom.us/client/latest/ZoomMacOutlookPlugin.pkg" + appNewVersion="$(curl -fsIL ${downloadURL} | grep -i ^location | cut -d "/" -f5 | cut -d "." -f1-3)" + expectedTeamID="BJ4HAAB9B3" + blockingProcesses=( "PluginLauncher" ) + ;; From 7bf47ff9e5a391e6e80e85962ad6e835c57d1e56 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Fri, 19 Aug 2022 11:10:04 +0200 Subject: [PATCH 093/209] Dialog update when app is already at the latest version Not sure I use the correct values in the `updateDialog` call, but it works fine. --- fragments/main.sh | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/fragments/main.sh b/fragments/main.sh index 4cf42fb..94e67e0 100644 --- a/fragments/main.sh +++ b/fragments/main.sh @@ -155,6 +155,10 @@ if [[ -n $appNewVersion ]]; then printlog "notifying" displaynotification "$message" "No update for $name!" fi + if [[ $DIALOG_CMD_FILE != "" ]]; then + updateDialog "complete" "Latest version already installed..." + sleep 2 + fi cleanupAndExit 0 "No newer version." REQ fi else From dcfd7d8328b56524084d81617dd085cd685128f6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Fri, 19 Aug 2022 11:19:12 +0200 Subject: [PATCH 094/209] More Dialog messages --- fragments/functions.sh | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/fragments/functions.sh b/fragments/functions.sh index a14c406..ccf39c8 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -282,6 +282,10 @@ getAppVersion() { printlog "Replacing App Store apps, no matter the version" WARN appversion=0 else + if [[ $DIALOG_CMD_FILE != "" ]]; then + updateDialog "wait" "Already installed from App Store. Not replaced." + sleep 4 + fi cleanupAndExit 23 "App previously installed from App Store, and we respect that" ERROR fi fi @@ -459,6 +463,10 @@ installAppWithPath() { # $1: path to app to install in $targetDir printlog "notifying" displaynotification "$message" "No update for $name!" fi + if [[ $DIALOG_CMD_FILE != "" ]]; then + updateDialog "wait" "Latest version already installed..." + sleep 2 + fi cleanupAndExit 0 "No new version to install" REG else printlog "Using force to install anyway." @@ -625,6 +633,10 @@ installFromPKG() { printlog "notifying" displaynotification "$message" "No update for $name!" fi + if [[ $DIALOG_CMD_FILE != "" ]]; then + updateDialog "wait" "Latest version already installed..." + sleep 2 + fi cleanupAndExit 0 "No new version to install" REQ else printlog "Using force to install anyway." From de55a96e9c0e967737e5e91dc304a89218aa8b32 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Fri, 19 Aug 2022 14:09:46 +0200 Subject: [PATCH 095/209] bz2 support --- utils/buildLabel.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/utils/buildLabel.sh b/utils/buildLabel.sh index 6b200df..17b2663 100755 --- a/utils/buildLabel.sh +++ b/utils/buildLabel.sh @@ -265,7 +265,7 @@ echo "archivePath: $archivePath" # So we want to investigate which one has the filename try1archiveName=${${archiveTempName##*/}%%\?*} try2archiveName=${${archivePath##*/}%%\?*} -fileName_re='^([a-zA-Z0-9\_.%-]*)\.(dmg|pkg|zip|tbz|gz)$' # regular expression for matching +fileName_re='^([a-zA-Z0-9\_.%-]*)\.(dmg|pkg|zip|tbz|gz|bz2)$' # regular expression for matching if [[ "${try1archiveName}" =~ $fileName_re ]]; then archiveName=${try1archiveName} elif [[ "${try2archiveName}" =~ $fileName_re ]]; then @@ -293,7 +293,7 @@ if [ "$archiveExt" = "pkg" ]; then elif [ "$archiveExt" = "dmg" ]; then echo "Diskimage found" dmgInvestigation -elif [ "$archiveExt" = "zip" ] || [ "$archiveExt" = "tbz" ]; then +elif [ "$archiveExt" = "zip" ] || [ "$archiveExt" = "tbz" ] || [ "$archiveExt" = "bz2" ]; then echo "Compressed file found" # unzip the archive tar -xf "$archiveName" From cd441c88d9d1dc5c7ca594e2756cd9db2c6f6e5d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Fri, 19 Aug 2022 14:13:31 +0200 Subject: [PATCH 096/209] bz2 support as tbz. --- fragments/main.sh | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/fragments/main.sh b/fragments/main.sh index 4cf42fb..48b277c 100644 --- a/fragments/main.sh +++ b/fragments/main.sh @@ -75,7 +75,7 @@ printlog "Label type: $type" INFO # MARK: extract info from data if [ -z "$archiveName" ]; then case $type in - dmg|pkg|zip|tbz) + dmg|pkg|zip|tbz|bz2) archiveName="${name}.$type" ;; pkgInDmg) @@ -101,7 +101,7 @@ fi if [ -z "$targetDir" ]; then case $type in - dmg|zip|tbz|app*) + dmg|zip|tbz|bz2|app*) targetDir="/Applications" ;; pkg*) @@ -282,7 +282,7 @@ case $type in zip) installFromZIP ;; - tbz) + tbz|bz2) installFromTBZ ;; pkgInDmg) From 759974f051d5b9c356cf4d4435492eb453c190c0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Fri, 19 Aug 2022 14:13:41 +0200 Subject: [PATCH 097/209] cocoapods labels --- fragments/labels/cocoapods.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/cocoapods.sh diff --git a/fragments/labels/cocoapods.sh b/fragments/labels/cocoapods.sh new file mode 100644 index 0000000..1ebc7a3 --- /dev/null +++ b/fragments/labels/cocoapods.sh @@ -0,0 +1,7 @@ +cocoapods) + name="CocoaPods" + type="bz2" + downloadURL="$(downloadURLFromGit CocoaPods CocoaPods-app)" + appNewVersion="$(versionFromGit CocoaPods CocoaPods-app)" + expectedTeamID="AX2Q2BH2XR" + ;; From 780bc3924b24c8e4c6817578b07b8a8e211371be Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Fri, 19 Aug 2022 14:30:29 +0200 Subject: [PATCH 098/209] Minor change if `archiveName` is used Only return the last URL, if more lines are returned on the `archiveName` grep. --- fragments/functions.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index a14c406..011f45c 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -160,7 +160,7 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name if [ -n "$archiveName" ]; then #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") - downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*$archiveName.*") + downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*$archiveName.*" | tail -1) else #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*\.$filetype") From 9c155d3fed5b83ca2f5c97225f384dce0c5c1840 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Fri, 19 Aug 2022 14:30:41 +0200 Subject: [PATCH 099/209] WIth `archiveName` --- fragments/labels/cocoapods.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/fragments/labels/cocoapods.sh b/fragments/labels/cocoapods.sh index 1ebc7a3..6b5c8a2 100644 --- a/fragments/labels/cocoapods.sh +++ b/fragments/labels/cocoapods.sh @@ -1,6 +1,7 @@ cocoapods) name="CocoaPods" type="bz2" + archiveName="CocoaPods.app-[0-9.]*.tar.bz2" downloadURL="$(downloadURLFromGit CocoaPods CocoaPods-app)" appNewVersion="$(versionFromGit CocoaPods CocoaPods-app)" expectedTeamID="AX2Q2BH2XR" From 25c39caafccc180cf38246a9fa8413673542a105 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Fri, 19 Aug 2022 15:07:44 +0200 Subject: [PATCH 100/209] =?UTF-8?q?Also=20without=20`archiveName`=20?= =?UTF-8?q?=E2=80=A6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit … do we only need on line result. So `tail -1` has been added to the other part as well. Several labels failed in test. --- fragments/functions.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index 011f45c..63e7049 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -163,7 +163,7 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*$archiveName.*" | tail -1) else #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") - downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*\.$filetype") + downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*\.$filetype" | tail -1) fi if [ -z "$downloadURL" ]; then cleanupAndExit 14 "could not retrieve download URL for $gitusername/$gitreponame" ERROR From a8ba97b87e2ccb5700dcc2449d8d4cbd43d25fa1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Fri, 19 Aug 2022 15:08:42 +0200 Subject: [PATCH 101/209] One `$` too many --- fragments/functions.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index ccf39c8..951669b 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -997,7 +997,7 @@ updateDialog() { fi # when to cmdfile is set, do nothing - if [[ $$cmd_file == "" ]]; then + if [[ $cmd_file == "" ]]; then return fi From d864c8e410febf549401f0977565a6b2c1399f52 Mon Sep 17 00:00:00 2001 From: Liam Steckler <553265+buckbanzai@users.noreply.github.com> Date: Fri, 19 Aug 2022 09:07:52 -0700 Subject: [PATCH 102/209] Add splashtopbusiness label --- fragments/labels/splashtopbusiness.sh | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 fragments/labels/splashtopbusiness.sh diff --git a/fragments/labels/splashtopbusiness.sh b/fragments/labels/splashtopbusiness.sh new file mode 100644 index 0000000..76c8b0e --- /dev/null +++ b/fragments/labels/splashtopbusiness.sh @@ -0,0 +1,8 @@ +splashtopbusiness) + name="Splashtop Business" + type="pkgInDmg" + splashtopbusinessVersions=$(curl -fsL "https://www.splashtop.com/wp-content/themes/responsive/downloadx.php?product=stb&platform=mac-client") + downloadURL=$(getJSONValue "$splashtopbusinessVersions" "url") + appNewVersion="${${downloadURL#*INSTALLER_v}%*.dmg}" + expectedTeamID="CPQQ3AW49Y" + ;; \ No newline at end of file From faffd059dbf959395d966e4c31bb548a4263c5c7 Mon Sep 17 00:00:00 2001 From: Liam Steckler <553265+buckbanzai@users.noreply.github.com> Date: Fri, 19 Aug 2022 09:10:52 -0700 Subject: [PATCH 103/209] Add newline at end of file --- fragments/labels/splashtopbusiness.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/labels/splashtopbusiness.sh b/fragments/labels/splashtopbusiness.sh index 76c8b0e..e9da7fd 100644 --- a/fragments/labels/splashtopbusiness.sh +++ b/fragments/labels/splashtopbusiness.sh @@ -5,4 +5,4 @@ splashtopbusiness) downloadURL=$(getJSONValue "$splashtopbusinessVersions" "url") appNewVersion="${${downloadURL#*INSTALLER_v}%*.dmg}" expectedTeamID="CPQQ3AW49Y" - ;; \ No newline at end of file + ;; From 84da5ac16847eb53a85a8bb023b34a1502950132 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 22 Aug 2022 11:43:13 +0200 Subject: [PATCH 104/209] Update alephone.sh --- fragments/labels/alephone.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/fragments/labels/alephone.sh b/fragments/labels/alephone.sh index 5ad40a9..ad96ad4 100644 --- a/fragments/labels/alephone.sh +++ b/fragments/labels/alephone.sh @@ -1,6 +1,7 @@ alephone) name="Aleph One" type="dmg" + archiveName="AlephOne-[0-9]*-Mac.dmg" downloadURL=$(downloadURLFromGit Aleph-One-Marathon alephone) appNewVersion=$(versionFromGit Aleph-One-Marathon alephone) expectedTeamID="E8K89CXZE7" From 958cf59a64df52e6d5eb58e8877858ee91466095 Mon Sep 17 00:00:00 2001 From: speedybutters <31848713+speedybutters@users.noreply.github.com> Date: Mon, 22 Aug 2022 16:25:12 +0100 Subject: [PATCH 105/209] Create bitrix24.sh New label for Bitrix24 app. Couldn't find a way to specify appNewVersion, sorry. Output: sudo /Users/user/Documents/GitHub/Installomator/utils/assemble.sh bitrix24 DEBUG=0 Password: 2022-08-22 16:23:13 : INFO : bitrix24 : setting variable from argument DEBUG=0 2022-08-22 16:23:13 : REQ : bitrix24 : ################## Start Installomator v. 10.0beta1, date 2022-08-22 2022-08-22 16:23:13 : INFO : bitrix24 : ################## Version: 10.0beta1 2022-08-22 16:23:13 : INFO : bitrix24 : ################## Date: 2022-08-22 2022-08-22 16:23:13 : INFO : bitrix24 : ################## bitrix24 2022-08-22 16:23:13 : INFO : bitrix24 : BLOCKING_PROCESS_ACTION=tell_user 2022-08-22 16:23:13 : INFO : bitrix24 : NOTIFY=success 2022-08-22 16:23:13 : INFO : bitrix24 : LOGGING=INFO 2022-08-22 16:23:13 : INFO : bitrix24 : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-08-22 16:23:13 : INFO : bitrix24 : Label type: dmg 2022-08-22 16:23:13 : INFO : bitrix24 : archiveName: bitrix24_desktop.dmg 2022-08-22 16:23:13 : INFO : bitrix24 : name: Bitrix24, appName: Bitrix24.app 2022-08-22 16:23:13 : WARN : bitrix24 : No previous app found 2022-08-22 16:23:13 : WARN : bitrix24 : could not find Bitrix24.app 2022-08-22 16:23:13 : INFO : bitrix24 : appversion: 2022-08-22 16:23:13 : INFO : bitrix24 : Latest version not specified. 2022-08-22 16:23:13 : REQ : bitrix24 : Downloading https://dl.bitrix24.com/b24/bitrix24_desktop.dmg to bitrix24_desktop.dmg 2022-08-22 16:23:18 : REQ : bitrix24 : no more blocking processes, continue with update 2022-08-22 16:23:18 : REQ : bitrix24 : Installing Bitrix24 2022-08-22 16:23:18 : INFO : bitrix24 : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.DrdpdQ4H/bitrix24_desktop.dmg 2022-08-22 16:23:27 : INFO : bitrix24 : Mounted: /Volumes/Bitrix24 for macOS 2022-08-22 16:23:27 : INFO : bitrix24 : Verifying: /Volumes/Bitrix24 for macOS/Bitrix24.app updateDialog:26: no such file or directory: 2022-08-22 16:23:41 : INFO : bitrix24 : Team ID matching: 5B3T3A994N (expected: 5B3T3A994N ) 2022-08-22 16:23:41 : INFO : bitrix24 : Installing Bitrix24 version 14.0.16 on versionKey CFBundleShortVersionString. 2022-08-22 16:23:41 : INFO : bitrix24 : App has LSMinimumSystemVersion: 10.11 2022-08-22 16:23:41 : INFO : bitrix24 : Copy /Volumes/Bitrix24 for macOS/Bitrix24.app to /Applications 2022-08-22 16:23:54 : WARN : bitrix24 : Changing owner to adam updateDialog:26: no such file or directory: 2022-08-22 16:23:54 : INFO : bitrix24 : Finishing... 2022-08-22 16:23:57 : INFO : bitrix24 : App(s) found: /Applications/Bitrix24.app 2022-08-22 16:23:57 : INFO : bitrix24 : found app at /Applications/Bitrix24.app, version 14.0.16, on versionKey CFBundleShortVersionString 2022-08-22 16:23:57 : REQ : bitrix24 : Installed Bitrix24, version 14.0.16 2022-08-22 16:23:57 : INFO : bitrix24 : notifying 2022-08-22 16:23:58 : INFO : bitrix24 : App not closed, so no reopen. 2022-08-22 16:23:58 : REQ : bitrix24 : All done! 2022-08-22 16:23:58 : REQ : bitrix24 : ################## End Installomator, exit code 0 --- fragments/labels/bitrix24.sh | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 fragments/labels/bitrix24.sh diff --git a/fragments/labels/bitrix24.sh b/fragments/labels/bitrix24.sh new file mode 100644 index 0000000..033cb81 --- /dev/null +++ b/fragments/labels/bitrix24.sh @@ -0,0 +1,8 @@ +bitrix24) + name="Bitrix24" + type="dmg" + archiveName="bitrix24_desktop.dmg" + downloadURL="https://dl.bitrix24.com/b24/bitrix24_desktop.dmg" + expectedTeamID="5B3T3A994N" + blockingProcesses=( "Bitrix24" ) + ;; \ No newline at end of file From f8b82a3c5f3380cdfebb2b23dae99039ea370432 Mon Sep 17 00:00:00 2001 From: speedybutters <31848713+speedybutters@users.noreply.github.com> Date: Mon, 22 Aug 2022 16:30:11 +0100 Subject: [PATCH 106/209] Create origin.sh New label for Origin app. Couldn't find a way to specify appNewVersion, sorry. Output: sudo /Users/user/Documents/GitHub/Installomator/utils/assemble.sh origin DEBUG=0 Password: 2022-08-22 16:29:17 : INFO : origin : setting variable from argument DEBUG=0 2022-08-22 16:29:17 : REQ : origin : ################## Start Installomator v. 10.0beta1, date 2022-08-22 2022-08-22 16:29:17 : INFO : origin : ################## Version: 10.0beta1 2022-08-22 16:29:17 : INFO : origin : ################## Date: 2022-08-22 2022-08-22 16:29:17 : INFO : origin : ################## origin 2022-08-22 16:29:17 : INFO : origin : BLOCKING_PROCESS_ACTION=tell_user 2022-08-22 16:29:17 : INFO : origin : NOTIFY=success 2022-08-22 16:29:17 : INFO : origin : LOGGING=INFO 2022-08-22 16:29:18 : INFO : origin : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-08-22 16:29:18 : INFO : origin : Label type: dmg 2022-08-22 16:29:18 : INFO : origin : archiveName: Origin.dmg 2022-08-22 16:29:18 : INFO : origin : App(s) found: /Applications/Origin.app 2022-08-22 16:29:18 : INFO : origin : found app at /Applications/Origin.app, version 10.5.113.50894, on versionKey CFBundleShortVersionString 2022-08-22 16:29:18 : INFO : origin : appversion: 10.5.113.50894 2022-08-22 16:29:18 : INFO : origin : Latest version not specified. 2022-08-22 16:29:18 : REQ : origin : Downloading https://www.dm.origin.com/mac/download/Origin.dmg to Origin.dmg 2022-08-22 16:29:23 : REQ : origin : no more blocking processes, continue with update 2022-08-22 16:29:23 : REQ : origin : Installing Origin 2022-08-22 16:29:23 : INFO : origin : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.ZcXEV9XX/Origin.dmg 2022-08-22 16:29:27 : INFO : origin : Mounted: /Volumes/Origin 2022-08-22 16:29:27 : INFO : origin : Verifying: /Volumes/Origin/Origin.app updateDialog:26: no such file or directory: 2022-08-22 16:29:29 : INFO : origin : Team ID matching: TSTV75T6Q5 (expected: TSTV75T6Q5 ) 2022-08-22 16:29:29 : INFO : origin : Downloaded version of Origin is 10.5.115.51547 on versionKey CFBundleShortVersionString (replacing version 10.5.113.50894). 2022-08-22 16:29:29 : INFO : origin : App has LSMinimumSystemVersion: 10.6 2022-08-22 16:29:29 : WARN : origin : Removing existing /Applications/Origin.app 2022-08-22 16:29:29 : INFO : origin : Copy /Volumes/Origin/Origin.app to /Applications 2022-08-22 16:29:31 : WARN : origin : Changing owner to adam updateDialog:26: no such file or directory: 2022-08-22 16:29:31 : INFO : origin : Finishing... 2022-08-22 16:29:34 : INFO : origin : App(s) found: /Applications/Origin.app 2022-08-22 16:29:34 : INFO : origin : found app at /Applications/Origin.app, version 10.5.115.51547, on versionKey CFBundleShortVersionString 2022-08-22 16:29:34 : REQ : origin : Installed Origin, version 10.5.115.51547 2022-08-22 16:29:34 : INFO : origin : notifying 2022-08-22 16:29:34 : INFO : origin : App not closed, so no reopen. 2022-08-22 16:29:34 : REQ : origin : All done! 2022-08-22 16:29:34 : REQ : origin : ################## End Installomator, exit code 0 --- fragments/labels/origin.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/origin.sh diff --git a/fragments/labels/origin.sh b/fragments/labels/origin.sh new file mode 100644 index 0000000..2fbdb90 --- /dev/null +++ b/fragments/labels/origin.sh @@ -0,0 +1,7 @@ +origin) + name="Origin" + type="dmg" + downloadURL="https://www.dm.origin.com/mac/download/Origin.dmg" + expectedTeamID="TSTV75T6Q5" + blockingProcesses=( "Origin" ) + ;; \ No newline at end of file From 9b029ee174867492cd66fe716567f99aa755f91d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 08:43:53 +0200 Subject: [PATCH 107/209] Fixed `colourcontrastanalyser`, `cryptomator`, and `dangerzone` --- fragments/labels/colourcontrastanalyser.sh | 1 + fragments/labels/cryptomator.sh | 6 ++++++ fragments/labels/dangerzone.sh | 1 + 3 files changed, 8 insertions(+) diff --git a/fragments/labels/colourcontrastanalyser.sh b/fragments/labels/colourcontrastanalyser.sh index 086569c..70a8ae6 100644 --- a/fragments/labels/colourcontrastanalyser.sh +++ b/fragments/labels/colourcontrastanalyser.sh @@ -1,6 +1,7 @@ colourcontrastanalyser) name="Colour Contrast Analyser (CCA)" type="dmg" + archiveName="CCA-[0-9.]*.dmg" downloadURL=$(downloadURLFromGit ThePacielloGroup CCAe) appNewVersion=$(versionFromGit ThePacielloGroup CCAe) expectedTeamID="34RS4UC3M6" diff --git a/fragments/labels/cryptomator.sh b/fragments/labels/cryptomator.sh index 1f3572f..2a76cf1 100644 --- a/fragments/labels/cryptomator.sh +++ b/fragments/labels/cryptomator.sh @@ -1,6 +1,12 @@ cryptomator) name="Cryptomator" type="dmg" + if [[ $(arch) == "arm64" ]]; then + archiveName="Cryptomator-[0-9.]*-arm64.dmg" + + elif [[ $(arch) == "i386" ]]; then + archiveName="Cryptomator-[0-9.]*.dmg" + fi downloadURL=$(downloadURLFromGit cryptomator cryptomator) appNewVersion=$(versionFromGit cryptomator cryptomator) expectedTeamID="YZQJQUHA3L" diff --git a/fragments/labels/dangerzone.sh b/fragments/labels/dangerzone.sh index 1bdeada..4d967c7 100644 --- a/fragments/labels/dangerzone.sh +++ b/fragments/labels/dangerzone.sh @@ -1,5 +1,6 @@ dangerzone) name="Dangerzone" + printlog "Label for $name broken in test" WARN type="dmg" downloadURL="$(downloadURLFromGit firstlookmedia dangerzone)" appNewVersion="$(versionFromGit firstlookmedia dangerzone)" From 980fb61afbc572d3177f8c5986a76b126a3ebd29 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 08:52:27 +0200 Subject: [PATCH 108/209] Update colourcontrastanalyser.sh --- fragments/labels/colourcontrastanalyser.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/labels/colourcontrastanalyser.sh b/fragments/labels/colourcontrastanalyser.sh index 70a8ae6..9159489 100644 --- a/fragments/labels/colourcontrastanalyser.sh +++ b/fragments/labels/colourcontrastanalyser.sh @@ -1,5 +1,5 @@ colourcontrastanalyser) - name="Colour Contrast Analyser (CCA)" + name="Colour Contrast Analyser" type="dmg" archiveName="CCA-[0-9.]*.dmg" downloadURL=$(downloadURLFromGit ThePacielloGroup CCAe) From ee9fe1fd668cfae4e6ae192e9a66d4aa1f5e9e2d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 08:53:39 +0200 Subject: [PATCH 109/209] Update colourcontrastanalyser.sh --- fragments/labels/colourcontrastanalyser.sh | 1 - 1 file changed, 1 deletion(-) diff --git a/fragments/labels/colourcontrastanalyser.sh b/fragments/labels/colourcontrastanalyser.sh index 9159489..15413c4 100644 --- a/fragments/labels/colourcontrastanalyser.sh +++ b/fragments/labels/colourcontrastanalyser.sh @@ -1,7 +1,6 @@ colourcontrastanalyser) name="Colour Contrast Analyser" type="dmg" - archiveName="CCA-[0-9.]*.dmg" downloadURL=$(downloadURLFromGit ThePacielloGroup CCAe) appNewVersion=$(versionFromGit ThePacielloGroup CCAe) expectedTeamID="34RS4UC3M6" From c3d6775d2799a245578151575826f8e2b746d9cf Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 09:40:31 +0200 Subject: [PATCH 110/209] Update clevershare2.sh --- fragments/labels/clevershare2.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/fragments/labels/clevershare2.sh b/fragments/labels/clevershare2.sh index 452ffde..48c40ef 100644 --- a/fragments/labels/clevershare2.sh +++ b/fragments/labels/clevershare2.sh @@ -1,6 +1,7 @@ clevershare2) name="Clevershare" type="dmg" + printlog "Label for $name broken in test" WARN downloadURL=$(curl -fs https://www.clevertouch.com/eu/clevershare2g | grep -i -o -E "https.*Mac.*\.dmg") appNewVersion=$( echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z-]*_Mac\.([0-9.]*)\.[0-9]*\.dmg$/\1/g' ) expectedTeamID="P76M9BE8DQ" From 6db51a0ab146799bee3ceb224a56eb4959a48890 Mon Sep 17 00:00:00 2001 From: Sylvain Roche <5450786+niavlysAO@users.noreply.github.com> Date: Tue, 23 Aug 2022 12:20:47 +0200 Subject: [PATCH 111/209] label screamingfrogspider.sh fix, dmg per arch ScreamingFrogSpider now has different dmg per CPU arch. Download page provides 2 dmg links, therefore we must fix downloadURL grep --- fragments/labels/screamingfrogseospider.sh | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/fragments/labels/screamingfrogseospider.sh b/fragments/labels/screamingfrogseospider.sh index 1a2aaf6..39ab342 100644 --- a/fragments/labels/screamingfrogseospider.sh +++ b/fragments/labels/screamingfrogseospider.sh @@ -1,7 +1,12 @@ screamingfrogseospider) name="Screaming Frog SEO Spider" type="dmg" - downloadURL=$(curl -fs "https://www.screamingfrog.co.uk/wp-content/themes/screamingfrog/inc/download-modal.php" | grep -i -o "https.*\.dmg" | head -1) + if [[ $(arch) == i386 ]]; then + platform="Mac - (intel)" + elif [[ $(arch) == arm64 ]]; then + platform="Mac - (apple silicon)" + fi + downloadURL=$(curl -fs "https://www.screamingfrog.co.uk/wp-content/themes/screamingfrog/inc/download-modal.php" | grep "${platform}" | grep -i -o "https.*\.dmg" | head -1) appNewVersion=$(print "$downloadURL" | sed -E 's/https.*\/[a-zA-Z]*-([0-9.]*)\.dmg/\1/g')".0" expectedTeamID="CAHEVC3HZC" ;; From 78cd10312157e557b2149a5695e9820a08734dea Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 13:35:18 +0200 Subject: [PATCH 112/209] `dangerzone` moved to a different user --- fragments/labels/dangerzone.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/fragments/labels/dangerzone.sh b/fragments/labels/dangerzone.sh index 4d967c7..c5a56b0 100644 --- a/fragments/labels/dangerzone.sh +++ b/fragments/labels/dangerzone.sh @@ -2,7 +2,7 @@ dangerzone) name="Dangerzone" printlog "Label for $name broken in test" WARN type="dmg" - downloadURL="$(downloadURLFromGit firstlookmedia dangerzone)" - appNewVersion="$(versionFromGit firstlookmedia dangerzone)" + downloadURL="$(downloadURLFromGit freedomofpress dangerzone)" + appNewVersion="$(versionFromGit freedomofpress dangerzone)" expectedTeamID="N9B95FDWH4" ;; From f689f7e10cf3bc97d03fdf03599b24445f836f8e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 13:37:30 +0200 Subject: [PATCH 113/209] a fix for how this script detect versions in github Replaced it with the one from functions.sh --- utils/checkLabels.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/utils/checkLabels.sh b/utils/checkLabels.sh index c682717..90b9433 100755 --- a/utils/checkLabels.sh +++ b/utils/checkLabels.sh @@ -63,7 +63,7 @@ versionFromGit() { # $1 git user name, $2 git repo name gitusername=${1?:"no git user name"} gitreponame=${2?:"no git repo name"} - appNewVersion=$(curl --silent --fail "https://github.com/$gitusername/$gitreponame/releases/latest" | sed -E 's/.*tag\/(.*)\">.*/\1/g' | sed 's/[^0-9\.]//g') + appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') if [ -z "$appNewVersion" ]; then printlog "could not retrieve version number for $gitusername/$gitreponame: $appNewVersion" exit 9 From 4db4ab4eef0620f40675210bc31ff629083f12a1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 13:42:38 +0200 Subject: [PATCH 114/209] Update drawio.sh Wrong distribution was found, so had to specify the `archiveName` to expect .dmg to be in the end of the match with a `$` in the RegEx. --- fragments/labels/drawio.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/labels/drawio.sh b/fragments/labels/drawio.sh index bd0241b..d15772b 100644 --- a/fragments/labels/drawio.sh +++ b/fragments/labels/drawio.sh @@ -1,7 +1,7 @@ drawio) name="draw.io" type="dmg" - archiveName="draw.io-universal-[0-9.]*.dmg" + archiveName="draw.io-universal-[0-9.]*.dmg$" downloadURL="$(downloadURLFromGit jgraph drawio-desktop)" appNewVersion="$(versionFromGit jgraph drawio-desktop)" expectedTeamID="UZEUFB4N53" From eee730ba9c6c45dd4c851edf690c55de154d53b7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 13:46:35 +0200 Subject: [PATCH 115/209] Update ferdi.sh Fixed `archiveName` so that `.zip` is expected in the end of the name. --- fragments/labels/ferdi.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/fragments/labels/ferdi.sh b/fragments/labels/ferdi.sh index 28a2a12..60512fd 100644 --- a/fragments/labels/ferdi.sh +++ b/fragments/labels/ferdi.sh @@ -2,9 +2,9 @@ ferdi) name="Ferdi" type="zip" if [[ $(arch) == "arm64" ]]; then - archiveName="arm64-mac.zip" + archiveName="arm64-mac.zip$" elif [[ $(arch) == "i386" ]]; then - archiveName="Ferdi-[0-9.]*-mac.zip" + archiveName="Ferdi-[0-9.]*-mac.zip$" fi downloadURL="$(downloadURLFromGit getferdi ferdi)" appNewVersion=$(versionFromGit getferdi ferdi ) From b87c5e1ada21426dd5b300cb4d7b29b2df4b5671 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 13:56:55 +0200 Subject: [PATCH 116/209] Update golang.sh Different `downloadURL` for architectures. They even call `x86` for `amd`. --- fragments/labels/golang.sh | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/fragments/labels/golang.sh b/fragments/labels/golang.sh index 007c423..d401a04 100644 --- a/fragments/labels/golang.sh +++ b/fragments/labels/golang.sh @@ -2,7 +2,11 @@ golang) name="GoLang" type="pkg" packageID="org.golang.go" - downloadURL="https://go.dev$(curl -fs "https://go.dev/dl/" | grep -i "downloadBox" | grep "pkg" | tr '"' '\n' | grep "pkg")" + if [[ $(arch) == "arm64" ]]; then + downloadURL="https://go.dev$(curl -fs "https://go.dev/dl/" | grep -i "downloadBox" | grep "darwin-arm" | tr '"' '\n' | grep "pkg")" + elif [[ $(arch) == "i386" ]]; then + downloadURL="https://go.dev$(curl -fs "https://go.dev/dl/" | grep -i "downloadBox" | grep "darwin-amd" | tr '"' '\n' | grep "pkg")" + fi appNewVersion="$( echo "${downloadURL}" | sed -E 's/.*\/(go[0-9.]*)\..*/\1/g' )" # Version includes letters "go" in the beginning expectedTeamID="EQHXZ8M8AV" blockingProcesses=( NONE ) From 7d1067f379a9a59b55a75dd5494815b530e4beb5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 14:05:01 +0200 Subject: [PATCH 117/209] Update handbrake.sh Specified the correct binary in the distribution, it would automatically find CLI-version. --- fragments/labels/handbrake.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/fragments/labels/handbrake.sh b/fragments/labels/handbrake.sh index ea04b18..f8e1a26 100644 --- a/fragments/labels/handbrake.sh +++ b/fragments/labels/handbrake.sh @@ -1,6 +1,7 @@ handbrake) name="HandBrake" type="dmg" + archiveName="HandBrake-[0-9.]*.dmg$" downloadURL=$(downloadURLFromGit HandBrake HandBrake ) appNewVersion=$(versionFromGit HandBrake HandBrake ) expectedTeamID="5X9DE89KYV" From 1521ade445bad523ce14961401d03577eff187ed Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 14:35:27 +0200 Subject: [PATCH 118/209] `bz2` support in `checkLabels.sh` --- utils/checkLabels.sh | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/utils/checkLabels.sh b/utils/checkLabels.sh index 90b9433..19b2e41 100755 --- a/utils/checkLabels.sh +++ b/utils/checkLabels.sh @@ -54,7 +54,14 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name #githubPart="$gitusername/$gitreponame/releases/download" #echo "$githubPart" - downloadURL="https://github.com/$gitusername/$gitreponame/releases/latest" + #downloadURL="https://github.com/$gitusername/$gitreponame/releases/latest" + if [ -n "$archiveName" ]; then + #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") + downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*$archiveName.*" | tail -1) + else + #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") + downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*\.$filetype" | tail -1) + fi echo "$downloadURL" return 0 } @@ -188,7 +195,7 @@ for fixedArch in i386 arm64; do echo "Download URL: $downloadURL" echo "Type: $type" case $type in - dmg|pkg|zip|tbz) + dmg|pkg|zip|tbz|bz2) expectedExtension="$type" ;; pkgInDmg) From 916da6283e1f7227e5bffb192906b24a1c9d1863 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 15:10:55 +0200 Subject: [PATCH 119/209] Change mathing on `archiveName` for GitHub. --- fragments/functions.sh | 2 +- utils/checkLabels.sh | 9 +++++---- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index 63e7049..3ecf8b0 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -160,7 +160,7 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name if [ -n "$archiveName" ]; then #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") - downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*$archiveName.*" | tail -1) + downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*$archiveName" | tail -1) else #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*\.$filetype" | tail -1) diff --git a/utils/checkLabels.sh b/utils/checkLabels.sh index 19b2e41..0cbccb6 100755 --- a/utils/checkLabels.sh +++ b/utils/checkLabels.sh @@ -56,11 +56,9 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name #echo "$githubPart" #downloadURL="https://github.com/$gitusername/$gitreponame/releases/latest" if [ -n "$archiveName" ]; then - #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") - downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*$archiveName.*" | tail -1) + downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*$archiveName" | tail -1) else - #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") - downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*\.$filetype" | tail -1) + downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*\.$type" | tail -1) fi echo "$downloadURL" return 0 @@ -249,6 +247,9 @@ for fixedArch in i386 arm64; do fi else githubPart="$(echo "$downloadURL" | cut -d "/" -f4-6)" + echo "type: $type" + echo "archiveName: $archiveName" + echo "githubPart: $githubPart" if [[ "$(curl -fsL "$downloadURL" | grep -io "${githubPart}.*\.${expectedExtension}")" != "" ]]; then echo "${GREEN}OK: download extension MATCH on ${expectedExtension}${NC}" else From b238cec2feeafc6fc0043de3ffd38e06587fc0a7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 15:11:56 +0200 Subject: [PATCH 120/209] Update hyper.sh --- fragments/labels/hyper.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/fragments/labels/hyper.sh b/fragments/labels/hyper.sh index 7bfa95a..26a0753 100644 --- a/fragments/labels/hyper.sh +++ b/fragments/labels/hyper.sh @@ -2,9 +2,9 @@ hyper) name="Hyper" type="dmg" if [[ $(arch) == i386 ]]; then - archiveName="mac-x64.dmg" + archiveName="-mac-x64.dmg" elif [[ $(arch) == arm64 ]]; then - archiveName="mac-arm64.dmg" + archiveName="-mac-arm64.dmg" fi downloadURL=$(downloadURLFromGit vercel hyper ) appNewVersion=$(versionFromGit vercel hyper) From a2d2abf4f53f38a9e0e94971184844059ae8046d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 15:28:57 +0200 Subject: [PATCH 121/209] Update checkLabels.sh Removing these lines again. They don't tell much. --- utils/checkLabels.sh | 3 --- 1 file changed, 3 deletions(-) diff --git a/utils/checkLabels.sh b/utils/checkLabels.sh index 0cbccb6..921d49f 100755 --- a/utils/checkLabels.sh +++ b/utils/checkLabels.sh @@ -247,9 +247,6 @@ for fixedArch in i386 arm64; do fi else githubPart="$(echo "$downloadURL" | cut -d "/" -f4-6)" - echo "type: $type" - echo "archiveName: $archiveName" - echo "githubPart: $githubPart" if [[ "$(curl -fsL "$downloadURL" | grep -io "${githubPart}.*\.${expectedExtension}")" != "" ]]; then echo "${GREEN}OK: download extension MATCH on ${expectedExtension}${NC}" else From cf412bda3c07025bdba65b3a2b1b3c87eb97eab8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 16:47:29 +0200 Subject: [PATCH 122/209] Output label variables in DEBUG log --- fragments/main.sh | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/fragments/main.sh b/fragments/main.sh index 48b277c..f16ea39 100644 --- a/fragments/main.sh +++ b/fragments/main.sh @@ -15,6 +15,29 @@ fi # MARK: application download and installation starts here +# Debug output of all variables in a label +printlog "name=${name}" DEBUG +printlog "appName=${appName}" DEBUG +printlog "type=${type}" DEBUG +printlog "archiveName=${archiveName}" DEBUG +printlog "downloadURL=${downloadURL}" DEBUG +printlog "curlOptions=${curlOptions}" DEBUG +printlog "appNewVersion=${appNewVersion}" DEBUG +printlog "appCustomVersion function: $(if type 'appCustomVersion' 2>/dev/null | grep -q 'function'; then echo "Defined. ${appCustomVersion}"; else; echo "Not defined"; fi)" DEBUG +printlog "versionKey=${versionKey}" DEBUG +printlog "packageID=${packageID}" DEBUG +printlog "pkgName=${pkgName}" DEBUG +printlog "choiceChangesXML=${choiceChangesXML}" DEBUG +printlog "expectedTeamID=${expectedTeamID}" DEBUG +printlog "blockingProcesses=${blockingProcesses}" DEBUG +printlog "installerTool=${installerTool}" DEBUG +printlog "CLIInstaller=${CLIInstaller}" DEBUG +printlog "CLIArguments=${CLIArguments}" DEBUG +printlog "updateTool=${updateTool}" DEBUG +printlog "updateToolArguments=${updateToolArguments}" DEBUG +printlog "updateToolRunAsCurrentUser=${updateToolRunAsCurrentUser}" DEBUG +#printlog "Company=${Company}" DEBUG # Not used + if [[ ${INTERRUPT_DND} = "no" ]]; then # Check if a fullscreen app is active if hasDisplaySleepAssertion; then From 9047d5d68f5e80071013af3d4b7e44d96d8b4fbf Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 23 Aug 2022 17:03:25 +0200 Subject: [PATCH 123/209] `sap` renamed to `SAP` And added `archiveName` to make sure we find the correct file and not the source code. --- fragments/labels/icons.sh | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/fragments/labels/icons.sh b/fragments/labels/icons.sh index 87fa428..b00a8b6 100644 --- a/fragments/labels/icons.sh +++ b/fragments/labels/icons.sh @@ -2,7 +2,8 @@ icons) # credit: Mischa van der Bent (@mischavdbent) name="Icons" type="zip" - downloadURL=$(downloadURLFromGit sap macOS-icon-generator ) - appNewVersion=$(versionFromGit sap macOS-icon-generator ) + archiveName="Icons.*.zip" + downloadURL=$(downloadURLFromGit SAP macOS-icon-generator ) + appNewVersion=$(versionFromGit SAP macOS-icon-generator ) expectedTeamID="7R5ZEU67FQ" ;; From e1e64d5e7e0c3e0f8b93571687a3f55b7a29974d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st-2.local> Date: Wed, 24 Aug 2022 10:10:06 +0200 Subject: [PATCH 124/209] `coderunner` with `appNewVersion` --- fragments/labels/coderunner.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/labels/coderunner.sh b/fragments/labels/coderunner.sh index 5794101..e52ca0f 100644 --- a/fragments/labels/coderunner.sh +++ b/fragments/labels/coderunner.sh @@ -1,7 +1,7 @@ coderunner) - # credit: Erik Stam (@erikstam) name="CodeRunner" type="zip" downloadURL="https://coderunnerapp.com/download" + appNewVersion=$(curl -fsIL ${downloadURL} | grep -i "^location" | cut -d " " -f2 | sed -E 's/.*CodeRunner-([0-9.]*).zip/\1/') expectedTeamID="R4GD98AJF9" ;; From cabe867b30e164ad73492db5662130132b8638a5 Mon Sep 17 00:00:00 2001 From: meschwartz <57272629+meschwartz@users.noreply.github.com> Date: Thu, 25 Aug 2022 13:32:28 -0400 Subject: [PATCH 125/209] Created new label for Charles Proxy Output: ``` # ./Installomator/utils/assemble.sh charles DEBUG=0 2022-08-25 13:31:09 : INFO : charles : setting variable from argument DEBUG=0 2022-08-25 13:31:09 : REQ : charles : ################## Start Installomator v. 10.0beta1, date 2022-08-25 2022-08-25 13:31:09 : INFO : charles : ################## Version: 10.0beta1 2022-08-25 13:31:10 : INFO : charles : ################## Date: 2022-08-25 2022-08-25 13:31:10 : INFO : charles : ################## charles 2022-08-25 13:31:10 : INFO : charles : SwiftDialog is not installed, clear cmd file var 2022-08-25 13:31:10 : INFO : charles : BLOCKING_PROCESS_ACTION=tell_user 2022-08-25 13:31:10 : INFO : charles : NOTIFY=success 2022-08-25 13:31:10 : INFO : charles : LOGGING=INFO 2022-08-25 13:31:10 : INFO : charles : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-08-25 13:31:10 : INFO : charles : Label type: dmg 2022-08-25 13:31:10 : INFO : charles : archiveName: Charles.dmg 2022-08-25 13:31:10 : INFO : charles : no blocking processes defined, using Charles as default 2022-08-25 13:31:10 : INFO : charles : name: Charles, appName: Charles.app 2022-08-25 13:31:10 : WARN : charles : No previous app found 2022-08-25 13:31:10 : WARN : charles : could not find Charles.app 2022-08-25 13:31:10 : INFO : charles : appversion: 2022-08-25 13:31:10 : INFO : charles : Latest version of Charles is 4.6.2 2022-08-25 13:31:10 : REQ : charles : Downloading https://www.charlesproxy.com/assets/release/4.6.2/charles-proxy-4.6.2.dmg to Charles.dmg 2022-08-25 13:31:32 : REQ : charles : no more blocking processes, continue with update 2022-08-25 13:31:32 : REQ : charles : Installing Charles 2022-08-25 13:31:32 : INFO : charles : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.MO2B5ihQ/Charles.dmg 2022-08-25 13:31:37 : INFO : charles : Mounted: /Volumes/Charles Proxy v4.6.2 2022-08-25 13:31:37 : INFO : charles : Verifying: /Volumes/Charles Proxy v4.6.2/Charles.app updateDialog:26: no such file or directory: 2022-08-25 13:31:45 : INFO : charles : Team ID matching: 9A5PCU4FSD (expected: 9A5PCU4FSD ) 2022-08-25 13:31:45 : INFO : charles : Installing Charles version 4.6.2 on versionKey CFBundleShortVersionString. 2022-08-25 13:31:45 : INFO : charles : App has LSMinimumSystemVersion: 10.7 2022-08-25 13:31:45 : INFO : charles : Copy /Volumes/Charles Proxy v4.6.2/Charles.app to /Applications 2022-08-25 13:31:46 : WARN : charles : Changing owner to schwartzm updateDialog:26: no such file or directory: 2022-08-25 13:31:46 : INFO : charles : Finishing... 2022-08-25 13:31:49 : INFO : charles : App(s) found: /Applications/Charles.app 2022-08-25 13:31:49 : INFO : charles : found app at /Applications/Charles.app, version 4.6.2, on versionKey CFBundleShortVersionString 2022-08-25 13:31:49 : REQ : charles : Installed Charles, version 4.6.2 2022-08-25 13:31:49 : INFO : charles : notifying 2022-08-25 13:31:49 : INFO : charles : App not closed, so no reopen. 2022-08-25 13:31:49 : REQ : charles : All done! 2022-08-25 13:31:49 : REQ : charles : ################## End Installomator, exit code 0 ``` --- fragments/labels/charles.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/charles.sh diff --git a/fragments/labels/charles.sh b/fragments/labels/charles.sh new file mode 100644 index 0000000..0c70782 --- /dev/null +++ b/fragments/labels/charles.sh @@ -0,0 +1,7 @@ +charles) + name="Charles" + type="dmg" + appNewVersion=$(curl -fs https://www.charlesproxy.com/download/latest-release/ | sed -nE 's/.*version.*value="([^"]*).*/\1/p') + downloadURL="https://www.charlesproxy.com/assets/release/$appNewVersion/charles-proxy-$appNewVersion.dmg" + expectedTeamID="9A5PCU4FSD" + ;; \ No newline at end of file From 4467f2ce4606af91feaf4561d924ce21f4aa2d06 Mon Sep 17 00:00:00 2001 From: Takanori TANIGUCHI <askme@pretendco.net> Date: Sat, 27 Aug 2022 10:50:22 +0900 Subject: [PATCH 126/209] Fix curl switch for libreoffice and some change --- Installomator.sh | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/Installomator.sh b/Installomator.sh index 0c689d4..823553b 100755 --- a/Installomator.sh +++ b/Installomator.sh @@ -7,7 +7,7 @@ label="" # if no label is sent to the script, this will be used # 2020-2021 Installomator # # inspired by the download scripts from William Smith and Sander Schram -# +# # Contributers: # Armin Briegel - @scriptingosx # Isaac Ordonez - @issacatmann @@ -23,7 +23,7 @@ export PATH=/usr/bin:/bin:/usr/sbin:/sbin # set to 0 for production, 1 or 2 for debugging # while debugging, items will be downloaded to the parent directory of this script # also no actual installation will be performed -# debug mode 1 will download to the directory the script is run in, but will not check the version +# debug mode 1 will download to the directory the script is run in, but will not check the version # debug mode 2 will download to the temp directory, check for blocking processes, check the version, but will not install anything or remove the current version DEBUG=1 @@ -184,7 +184,7 @@ IGNORE_DND_APPS="" # How we get version number from app. Possible values: # - CFBundleShortVersionString # - CFBundleVersion -# Not all software titles uses fields the same. +# Not all software titles uses fields the same. # See Opera label. # # - appCustomVersion(){}: (optional function) @@ -2258,7 +2258,7 @@ egnytewebedit) appName="Egnyte WebEdit.app" blockingProcesses=( NONE ) ;; - + element) name="Element" type="dmg" @@ -2505,7 +2505,7 @@ flux) downloadURL="https://justgetflux.com/mac/Flux.zip" expectedTeamID="VZKSA7H9J9" ;; - + flycut) name="Flycut" type="zip" @@ -2610,7 +2610,7 @@ googledrivefilestream) packageID="com.google.drivefs.arm64" elif [[ $(arch) == "i386" ]]; then packageID="com.google.drivefs.x86_64" - fi + fi downloadURL="https://dl.google.com/drive-file-stream/GoogleDriveFileStream.dmg" # downloadURL="https://dl.google.com/drive-file-stream/GoogleDrive.dmg" blockingProcesses=( "Google Docs" "Google Drive" "Google Sheets" "Google Slides" ) appName="Google Drive.app" @@ -3159,11 +3159,11 @@ libreoffice) name="LibreOffice" type="dmg" if [[ $(arch) == "arm64" ]]; then - downloadURL="https://download.documentfoundation.org/libreoffice/stable/$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)/mac/aarch64/LibreOffice_$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)_MacOS_aarch64.dmg" - elif [[ $(arch) == "i386" ]]; then - downloadURL="https://download.documentfoundation.org/libreoffice/stable/$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)/mac/x86_64/LibreOffice_$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)_MacOS_x86-64.dmg" + arch_type="aarch64" fi - appNewVersion=$( echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*_([0-9.]*)_.*/\1/g' ) + libreoffice_latest_version="$(curl -Ls https://www.libreoffice.org/download/download-libreoffice/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)" + downloadURL="https://download.documentfoundation.org/libreoffice/stable/${libreoffice_latest_version}/mac/${arch_type:-x86_64}/LibreOffice_${libreoffice_latest_version}_MacOS_${arch_type:-x86-64}.dmg" + appNewVersion=$(echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*_([0-9.]*)_.*/\1/g') expectedTeamID="7P5S3ZLCN7" blockingProcesses=( soffice ) ;; @@ -3181,7 +3181,7 @@ linear) appName="Linear.app" blockingProcesses=( "Linear" ) ;; - + logioptions|\ logitechoptions) name="Logi Options" @@ -4385,7 +4385,7 @@ secretive) appNewVersion=$(versionFromGit maxgoedjen secretive) expectedTeamID="Z72PRUAWF6" ;; - + sequelpro) name="Sequel Pro" type="dmg" From d18fd7f22113d4a6fc46c54320270e1595400641 Mon Sep 17 00:00:00 2001 From: Fletcher Salesky <fletcher@salesky.dev> Date: Sat, 27 Aug 2022 02:57:27 -0700 Subject: [PATCH 127/209] Create polylens.sh --- fragments/labels/polylens.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/polylens.sh diff --git a/fragments/labels/polylens.sh b/fragments/labels/polylens.sh new file mode 100644 index 0000000..54cd0b3 --- /dev/null +++ b/fragments/labels/polylens.sh @@ -0,0 +1,7 @@ +polylens) + name="Poly Lens" + type="dmg" + appNewVersion=$(curl -fs "https://info.lens.poly.com/lens-dt-rn/atom.xml" | grep "Version" | head -1 | cut -d "[" -f3 | sed 's/Version //g' | sed 's/]]\>\<\/title\>//g') + downloadURL="https://swupdate.lens.poly.com/lens-desktop-mac/$appNewVersion/$appNewVersion/PolyLens-$appNewVersion.dmg" + expectedTeamID="SKWK2Q7JJV" + ;; From 8127c30c5ed177e978408facda7feea68e8950c9 Mon Sep 17 00:00:00 2001 From: Takanori TANIGUCHI <askme@pretendco.net> Date: Sat, 27 Aug 2022 22:46:30 +0900 Subject: [PATCH 128/209] Fix downloadURLFromGit() returns sigle line. --- Installomator.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Installomator.sh b/Installomator.sh index 823553b..1d02fdf 100755 --- a/Installomator.sh +++ b/Installomator.sh @@ -472,7 +472,7 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name if [ -z "$downloadURL" ]; then cleanupAndExit 9 "could not retrieve download URL for $gitusername/$gitreponame" ERROR else - echo "$downloadURL" + echo "$downloadURL" | head -1 return 0 fi } From ab6aedc4600acb26637cbf48bda23f9acccfc872 Mon Sep 17 00:00:00 2001 From: Takanori TANIGUCHI <askme@pretendco.net> Date: Sun, 28 Aug 2022 09:44:30 +0900 Subject: [PATCH 129/209] Fix downloadURLFromGit() --- fragments/functions.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index a14c406..8ee5b66 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -168,7 +168,7 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name if [ -z "$downloadURL" ]; then cleanupAndExit 14 "could not retrieve download URL for $gitusername/$gitreponame" ERROR else - echo "$downloadURL" + echo "$downloadURL" | head -1 return 0 fi } From 6876114fdf5c9c476fa444e13544c241cd0c9498 Mon Sep 17 00:00:00 2001 From: Takanori TANIGUCHI <askme@pretendco.net> Date: Sun, 28 Aug 2022 09:45:14 +0900 Subject: [PATCH 130/209] Fix libreoffice download url --- fragments/labels/libreoffice.sh | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/fragments/labels/libreoffice.sh b/fragments/labels/libreoffice.sh index 2befca5..c8fab45 100644 --- a/fragments/labels/libreoffice.sh +++ b/fragments/labels/libreoffice.sh @@ -2,11 +2,11 @@ libreoffice) name="LibreOffice" type="dmg" if [[ $(arch) == "arm64" ]]; then - downloadURL="https://download.documentfoundation.org/libreoffice/stable/$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)/mac/aarch64/LibreOffice_$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)_MacOS_aarch64.dmg" - elif [[ $(arch) == "i386" ]]; then - downloadURL="https://download.documentfoundation.org/libreoffice/stable/$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)/mac/x86_64/LibreOffice_$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)_MacOS_x86-64.dmg" + arch_type="aarch64" fi - appNewVersion=$( echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*_([0-9.]*)_.*/\1/g' ) + libreoffice_latest_version="$(curl -Ls https://www.libreoffice.org/download/download-libreoffice/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)" + downloadURL="https://download.documentfoundation.org/libreoffice/stable/${libreoffice_latest_version}/mac/${arch_type:-x86_64}/LibreOffice_${libreoffice_latest_version}_MacOS_${arch_type:-x86-64}.dmg" + appNewVersion=$(echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*_([0-9.]*)_.*/\1/g') expectedTeamID="7P5S3ZLCN7" blockingProcesses=( soffice ) ;; From 4a60dcb01704c3e0dacace66a69ed14d7e797615 Mon Sep 17 00:00:00 2001 From: Takanori TANIGUCHI <askme@pretendco.net> Date: Sun, 28 Aug 2022 09:57:18 +0900 Subject: [PATCH 131/209] revert --- Installomator.sh | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/Installomator.sh b/Installomator.sh index 1d02fdf..0c689d4 100755 --- a/Installomator.sh +++ b/Installomator.sh @@ -7,7 +7,7 @@ label="" # if no label is sent to the script, this will be used # 2020-2021 Installomator # # inspired by the download scripts from William Smith and Sander Schram -# +# # Contributers: # Armin Briegel - @scriptingosx # Isaac Ordonez - @issacatmann @@ -23,7 +23,7 @@ export PATH=/usr/bin:/bin:/usr/sbin:/sbin # set to 0 for production, 1 or 2 for debugging # while debugging, items will be downloaded to the parent directory of this script # also no actual installation will be performed -# debug mode 1 will download to the directory the script is run in, but will not check the version +# debug mode 1 will download to the directory the script is run in, but will not check the version # debug mode 2 will download to the temp directory, check for blocking processes, check the version, but will not install anything or remove the current version DEBUG=1 @@ -184,7 +184,7 @@ IGNORE_DND_APPS="" # How we get version number from app. Possible values: # - CFBundleShortVersionString # - CFBundleVersion -# Not all software titles uses fields the same. +# Not all software titles uses fields the same. # See Opera label. # # - appCustomVersion(){}: (optional function) @@ -472,7 +472,7 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name if [ -z "$downloadURL" ]; then cleanupAndExit 9 "could not retrieve download URL for $gitusername/$gitreponame" ERROR else - echo "$downloadURL" | head -1 + echo "$downloadURL" return 0 fi } @@ -2258,7 +2258,7 @@ egnytewebedit) appName="Egnyte WebEdit.app" blockingProcesses=( NONE ) ;; - + element) name="Element" type="dmg" @@ -2505,7 +2505,7 @@ flux) downloadURL="https://justgetflux.com/mac/Flux.zip" expectedTeamID="VZKSA7H9J9" ;; - + flycut) name="Flycut" type="zip" @@ -2610,7 +2610,7 @@ googledrivefilestream) packageID="com.google.drivefs.arm64" elif [[ $(arch) == "i386" ]]; then packageID="com.google.drivefs.x86_64" - fi + fi downloadURL="https://dl.google.com/drive-file-stream/GoogleDriveFileStream.dmg" # downloadURL="https://dl.google.com/drive-file-stream/GoogleDrive.dmg" blockingProcesses=( "Google Docs" "Google Drive" "Google Sheets" "Google Slides" ) appName="Google Drive.app" @@ -3159,11 +3159,11 @@ libreoffice) name="LibreOffice" type="dmg" if [[ $(arch) == "arm64" ]]; then - arch_type="aarch64" + downloadURL="https://download.documentfoundation.org/libreoffice/stable/$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)/mac/aarch64/LibreOffice_$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)_MacOS_aarch64.dmg" + elif [[ $(arch) == "i386" ]]; then + downloadURL="https://download.documentfoundation.org/libreoffice/stable/$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)/mac/x86_64/LibreOffice_$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)_MacOS_x86-64.dmg" fi - libreoffice_latest_version="$(curl -Ls https://www.libreoffice.org/download/download-libreoffice/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)" - downloadURL="https://download.documentfoundation.org/libreoffice/stable/${libreoffice_latest_version}/mac/${arch_type:-x86_64}/LibreOffice_${libreoffice_latest_version}_MacOS_${arch_type:-x86-64}.dmg" - appNewVersion=$(echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*_([0-9.]*)_.*/\1/g') + appNewVersion=$( echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*_([0-9.]*)_.*/\1/g' ) expectedTeamID="7P5S3ZLCN7" blockingProcesses=( soffice ) ;; @@ -3181,7 +3181,7 @@ linear) appName="Linear.app" blockingProcesses=( "Linear" ) ;; - + logioptions|\ logitechoptions) name="Logi Options" @@ -4385,7 +4385,7 @@ secretive) appNewVersion=$(versionFromGit maxgoedjen secretive) expectedTeamID="Z72PRUAWF6" ;; - + sequelpro) name="Sequel Pro" type="dmg" From 9157d4763b1d8740e47f9f2c27bf876fa5d19999 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 29 Aug 2022 09:45:27 +0200 Subject: [PATCH 132/209] Better new GitHub `downloadURL` --- fragments/functions.sh | 4 ++-- utils/checkLabels.sh | 12 ++++++++++-- 2 files changed, 12 insertions(+), 4 deletions(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index 3ecf8b0..e43d607 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -160,10 +160,10 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name if [ -n "$archiveName" ]; then #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") - downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*$archiveName" | tail -1) + downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "\/releases\/download\/.*$archiveName" | head -1) else #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") - downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*\.$filetype" | tail -1) + downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "\/releases\/download\/.*\.$filetype" | head -1) fi if [ -z "$downloadURL" ]; then cleanupAndExit 14 "could not retrieve download URL for $gitusername/$gitreponame" ERROR diff --git a/utils/checkLabels.sh b/utils/checkLabels.sh index 921d49f..5a83f9b 100755 --- a/utils/checkLabels.sh +++ b/utils/checkLabels.sh @@ -52,13 +52,21 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name gitusername=${1?:"no git user name"} gitreponame=${2?:"no git repo name"} + if [[ $type == "pkgInDmg" ]]; then + filetype="dmg" + elif [[ $type == "pkgInZip" ]]; then + filetype="zip" + else + filetype=$type + fi + #githubPart="$gitusername/$gitreponame/releases/download" #echo "$githubPart" #downloadURL="https://github.com/$gitusername/$gitreponame/releases/latest" if [ -n "$archiveName" ]; then - downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*$archiveName" | tail -1) + downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "\/releases\/download\/.*$archiveName" | head -1) else - downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*\.$type" | tail -1) + downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "\/releases\/download\/.*\.$filetype" | head -1) fi echo "$downloadURL" return 0 From f7e2c5e00065a1bf52e289f0cc679c7769140484 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 29 Aug 2022 12:50:28 +0200 Subject: [PATCH 133/209] Final fix for GitHub `downloadURL` For all labels tested it gives the same results as API-URL. --- fragments/functions.sh | 4 ++-- fragments/labels/cocoapods.sh | 1 - utils/checkLabels.sh | 5 +++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index e43d607..6c11f42 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -160,10 +160,10 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name if [ -n "$archiveName" ]; then #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") - downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "\/releases\/download\/.*$archiveName" | head -1) + downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1) else #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") - downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "\/releases\/download\/.*\.$filetype" | head -1) + downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1) fi if [ -z "$downloadURL" ]; then cleanupAndExit 14 "could not retrieve download URL for $gitusername/$gitreponame" ERROR diff --git a/fragments/labels/cocoapods.sh b/fragments/labels/cocoapods.sh index 6b5c8a2..1ebc7a3 100644 --- a/fragments/labels/cocoapods.sh +++ b/fragments/labels/cocoapods.sh @@ -1,7 +1,6 @@ cocoapods) name="CocoaPods" type="bz2" - archiveName="CocoaPods.app-[0-9.]*.tar.bz2" downloadURL="$(downloadURLFromGit CocoaPods CocoaPods-app)" appNewVersion="$(versionFromGit CocoaPods CocoaPods-app)" expectedTeamID="AX2Q2BH2XR" diff --git a/utils/checkLabels.sh b/utils/checkLabels.sh index 5a83f9b..3063846 100755 --- a/utils/checkLabels.sh +++ b/utils/checkLabels.sh @@ -64,9 +64,9 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name #echo "$githubPart" #downloadURL="https://github.com/$gitusername/$gitreponame/releases/latest" if [ -n "$archiveName" ]; then - downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "\/releases\/download\/.*$archiveName" | head -1) + downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1) else - downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "\/releases\/download\/.*\.$filetype" | head -1) + downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1) fi echo "$downloadURL" return 0 @@ -195,6 +195,7 @@ for fixedArch in i386 arm64; do #caseLabel if cat "${labels_dir}/${label}.sh" | grep -v -E '^[a-z0-9\_-]*(\)|\|\\)$' | grep -v ";;" > checkLabelCurrent.sh; then + INSTALL=force # This is only to prevent various Microsoft labels from running "msupdate --list" source checkLabelCurrent.sh echo "Name: $name" From 7458f8656b0352aab1f0950894d3af00dbc0bc13 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 29 Aug 2022 14:24:09 +0200 Subject: [PATCH 134/209] Label `icons` with no credit line --- fragments/labels/icons.sh | 2 -- 1 file changed, 2 deletions(-) diff --git a/fragments/labels/icons.sh b/fragments/labels/icons.sh index b00a8b6..a319cb9 100644 --- a/fragments/labels/icons.sh +++ b/fragments/labels/icons.sh @@ -1,8 +1,6 @@ icons) - # credit: Mischa van der Bent (@mischavdbent) name="Icons" type="zip" - archiveName="Icons.*.zip" downloadURL=$(downloadURLFromGit SAP macOS-icon-generator ) appNewVersion=$(versionFromGit SAP macOS-icon-generator ) expectedTeamID="7R5ZEU67FQ" From 1155a9ee1eb153dca8af61117047921ebf2d4679 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 29 Aug 2022 14:25:09 +0200 Subject: [PATCH 135/209] Reverse my previous fix MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Not needed… --- fragments/labels/alephone.sh | 1 - 1 file changed, 1 deletion(-) diff --git a/fragments/labels/alephone.sh b/fragments/labels/alephone.sh index ad96ad4..5ad40a9 100644 --- a/fragments/labels/alephone.sh +++ b/fragments/labels/alephone.sh @@ -1,7 +1,6 @@ alephone) name="Aleph One" type="dmg" - archiveName="AlephOne-[0-9]*-Mac.dmg" downloadURL=$(downloadURLFromGit Aleph-One-Marathon alephone) appNewVersion=$(versionFromGit Aleph-One-Marathon alephone) expectedTeamID="E8K89CXZE7" From 3d8ba13ca6ed17a92c8b344c29a0df08b85ffcf1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 29 Aug 2022 20:34:15 +0200 Subject: [PATCH 136/209] It works after fixing github --- fragments/labels/dangerzone.sh | 1 - 1 file changed, 1 deletion(-) diff --git a/fragments/labels/dangerzone.sh b/fragments/labels/dangerzone.sh index c5a56b0..730ae3d 100644 --- a/fragments/labels/dangerzone.sh +++ b/fragments/labels/dangerzone.sh @@ -1,6 +1,5 @@ dangerzone) name="Dangerzone" - printlog "Label for $name broken in test" WARN type="dmg" downloadURL="$(downloadURLFromGit freedomofpress dangerzone)" appNewVersion="$(versionFromGit freedomofpress dangerzone)" From dcde2e97f25f1f9599978699b37383fbdf60ffad Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 29 Aug 2022 20:38:20 +0200 Subject: [PATCH 137/209] No "fix" needed after fixing github download --- fragments/labels/ferdi.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/fragments/labels/ferdi.sh b/fragments/labels/ferdi.sh index 60512fd..28a2a12 100644 --- a/fragments/labels/ferdi.sh +++ b/fragments/labels/ferdi.sh @@ -2,9 +2,9 @@ ferdi) name="Ferdi" type="zip" if [[ $(arch) == "arm64" ]]; then - archiveName="arm64-mac.zip$" + archiveName="arm64-mac.zip" elif [[ $(arch) == "i386" ]]; then - archiveName="Ferdi-[0-9.]*-mac.zip$" + archiveName="Ferdi-[0-9.]*-mac.zip" fi downloadURL="$(downloadURLFromGit getferdi ferdi)" appNewVersion=$(versionFromGit getferdi ferdi ) From 2399dc5c1eedc1eda733a393d295f677393fdd67 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 29 Aug 2022 20:39:22 +0200 Subject: [PATCH 138/209] No "fix" needed after github download fix. --- fragments/labels/handbrake.sh | 1 - 1 file changed, 1 deletion(-) diff --git a/fragments/labels/handbrake.sh b/fragments/labels/handbrake.sh index f8e1a26..ea04b18 100644 --- a/fragments/labels/handbrake.sh +++ b/fragments/labels/handbrake.sh @@ -1,7 +1,6 @@ handbrake) name="HandBrake" type="dmg" - archiveName="HandBrake-[0-9.]*.dmg$" downloadURL=$(downloadURLFromGit HandBrake HandBrake ) appNewVersion=$(versionFromGit HandBrake HandBrake ) expectedTeamID="5X9DE89KYV" From 8f50f04725a3bced9837d71f8169f2d629cd5c7f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 29 Aug 2022 20:40:31 +0200 Subject: [PATCH 139/209] No "fix" needed after github download fix --- fragments/labels/hyper.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/fragments/labels/hyper.sh b/fragments/labels/hyper.sh index 26a0753..7bfa95a 100644 --- a/fragments/labels/hyper.sh +++ b/fragments/labels/hyper.sh @@ -2,9 +2,9 @@ hyper) name="Hyper" type="dmg" if [[ $(arch) == i386 ]]; then - archiveName="-mac-x64.dmg" + archiveName="mac-x64.dmg" elif [[ $(arch) == arm64 ]]; then - archiveName="-mac-arm64.dmg" + archiveName="mac-arm64.dmg" fi downloadURL=$(downloadURLFromGit vercel hyper ) appNewVersion=$(versionFromGit vercel hyper) From 4fa29967bca88004eddac2942560b78136dd54bb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 29 Aug 2022 20:48:36 +0200 Subject: [PATCH 140/209] =?UTF-8?q?No=20Microsoft=20Yammer=20anymore?= =?UTF-8?q?=E2=80=A6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- fragments/labels/microsoftyammer.sh | 10 ---------- 1 file changed, 10 deletions(-) delete mode 100644 fragments/labels/microsoftyammer.sh diff --git a/fragments/labels/microsoftyammer.sh b/fragments/labels/microsoftyammer.sh deleted file mode 100644 index 2fc47ee..0000000 --- a/fragments/labels/microsoftyammer.sh +++ /dev/null @@ -1,10 +0,0 @@ -microsoftyammer) - name="Yammer" - type="dmg" - downloadURL="https://aka.ms/yammer_desktop_mac" - #appNewVersion=$(curl -fs https://macadmins.software/latest.xml | xpath '//latest/oldpackage[id="com.microsoft.yammer.standalone"]/cfbundleshortversionstring' 2>/dev/null | sed -E 's/<cfbundleshortversionstring>([0-9.]*)<.*/\1/') - appNewVersion=$(curl -fsIL "$downloadURL" | grep -i location: | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)\..*/\1/g') - expectedTeamID="UBF8T346G9" - #updateTool="/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/msupdate --list; /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/msupdate" - #updateToolArguments=( --install --apps ?????? ) - ;; From c1607fe63ce85640b3cfb7ce8304bc0c0449ab2a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 29 Aug 2022 21:09:13 +0200 Subject: [PATCH 141/209] Update insomnia.sh The release various variants on GitHub, so have to use their own download link from the web page, as well as isolating version from that. --- fragments/labels/insomnia.sh | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/fragments/labels/insomnia.sh b/fragments/labels/insomnia.sh index 9de4706..ed0f6c8 100644 --- a/fragments/labels/insomnia.sh +++ b/fragments/labels/insomnia.sh @@ -1,7 +1,9 @@ insomnia) - name="insomnia" + name="Insomnia" type="dmg" - downloadURL=$(downloadURLFromGit kong insomnia) - appNewVersion=$(versionFromGit kong insomnia) + #downloadURL=$(downloadURLFromGit kong insomnia) + downloadURL=$(curl -fs "https://updates.insomnia.rest/downloads/mac/latest?app=com.insomnia.app&source=website" | grep -o "https.*\.dmg") + #appNewVersion=$(versionFromGit kong insomnia) + appNewVersion=$(echo "$downloadURL" | sed -E 's/.*\/Insomnia.Core.([0-9.]*)\.dmg/\1/') expectedTeamID="FX44YY62GV" ;; From 350c897c8a5ef4757eb201793fd9bc82103ce6fc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 29 Aug 2022 21:13:53 +0200 Subject: [PATCH 142/209] Now available on GitHub --- fragments/labels/knockknock.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/fragments/labels/knockknock.sh b/fragments/labels/knockknock.sh index 8f351f4..35f854e 100644 --- a/fragments/labels/knockknock.sh +++ b/fragments/labels/knockknock.sh @@ -1,7 +1,7 @@ knockknock) name="KnockKnock" type="zip" - downloadURL=$( curl -fs "https://objective-see.com/products/knockknock.html" | grep https | grep "$type" | head -1 | tr '"' "\n" | grep "^http" ) - appNewVersion=$( echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*_([0-9.]*)\..*/\1/g' ) + downloadURL="$(downloadURLFromGit objective-see KnockKnock)" + appNewVersion="$(versionFromGit objective-see KnockKnock)" expectedTeamID="VBG97UB4TA" ;; From 3f35f63d23fe62361b6f036d4cb55ebe1be2e781 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 29 Aug 2022 21:21:52 +0200 Subject: [PATCH 143/209] Fixed! --- fragments/labels/clevershare2.sh | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/fragments/labels/clevershare2.sh b/fragments/labels/clevershare2.sh index 48c40ef..a26d7b3 100644 --- a/fragments/labels/clevershare2.sh +++ b/fragments/labels/clevershare2.sh @@ -1,8 +1,8 @@ clevershare2) name="Clevershare" type="dmg" - printlog "Label for $name broken in test" WARN - downloadURL=$(curl -fs https://www.clevertouch.com/eu/clevershare2g | grep -i -o -E "https.*Mac.*\.dmg") - appNewVersion=$( echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z-]*_Mac\.([0-9.]*)\.[0-9]*\.dmg$/\1/g' ) + printlog "Label for $name broken in test" ERROR + downloadURL=$(curl -fs https://www.clevertouch.com/eu/clevershare2g | grep -i -o -E "https.*notarized.*\.dmg") + appNewVersion=$(echo "${downloadURL}" | sed -E 's/.*\/([0-9.]*)\/[0-9]*\/.*\.dmg$/\1/') expectedTeamID="P76M9BE8DQ" ;; From 8092b226f78bd0d81b3bd39e118e6ae74926b14d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 29 Aug 2022 21:54:44 +0200 Subject: [PATCH 144/209] Remotix bought by Acronis --- fragments/labels/acroniscyberprotectconnect.sh | 9 +++++++++ fragments/labels/acroniscyberprotectconnectagent.sh | 10 ++++++++++ fragments/labels/remotix.sh | 7 ------- fragments/labels/remotixagent.sh | 8 -------- 4 files changed, 19 insertions(+), 15 deletions(-) create mode 100644 fragments/labels/acroniscyberprotectconnect.sh create mode 100644 fragments/labels/acroniscyberprotectconnectagent.sh delete mode 100644 fragments/labels/remotix.sh delete mode 100644 fragments/labels/remotixagent.sh diff --git a/fragments/labels/acroniscyberprotectconnect.sh b/fragments/labels/acroniscyberprotectconnect.sh new file mode 100644 index 0000000..8538bee --- /dev/null +++ b/fragments/labels/acroniscyberprotectconnect.sh @@ -0,0 +1,9 @@ +acroniscyberprotectconnect|\ +remotix) + name="Acronis Cyber Protect Connect" + type="dmg" + downloadURL="https://go.acronis.com/AcronisCyberProtectConnect_ForMac" + versionKey="CFBundleVersion" + appNewVersion=$(curl -fsIL "${downloadURL}" | grep -i "^location" | sed -E 's/.*\/[a-zA-Z]*-[0-9.]*-([0-9.]*)\.dmg/\1/g') + expectedTeamID="ZU2TV78AA6" + ;; diff --git a/fragments/labels/acroniscyberprotectconnectagent.sh b/fragments/labels/acroniscyberprotectconnectagent.sh new file mode 100644 index 0000000..7155b6a --- /dev/null +++ b/fragments/labels/acroniscyberprotectconnectagent.sh @@ -0,0 +1,10 @@ +acroniscyberprotectconnectagent|\ +remotixagent) + name="Acronis Cyber Protect Connect Agent" + type="pkg" + #packageID="com.nulana.rxagentmac" + downloadURL="https://go.acronis.com/AcronisCyberProtectConnect_AgentForMac" + versionKey="CFBundleVersion" + appNewVersion=$(curl -fsIL "${downloadURL}" | grep -i "^location" | sed -E 's/.*\/[a-zA-Z]*-[0-9.]*-([0-9.]*)\.pkg/\1/g') + expectedTeamID="H629V387SY" + ;; diff --git a/fragments/labels/remotix.sh b/fragments/labels/remotix.sh deleted file mode 100644 index 4a095d3..0000000 --- a/fragments/labels/remotix.sh +++ /dev/null @@ -1,7 +0,0 @@ -remotix) - name="Remotix" - type="dmg" - downloadURL="https://remotix.com/downloads/latest-remotix-mac/" - appNewVersion=$( curl -fsIL "${downloadURL}" | grep -i "^location" | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)-.*\.dmg/\1/g' ) - expectedTeamID="K293Y6CVN4" - ;; diff --git a/fragments/labels/remotixagent.sh b/fragments/labels/remotixagent.sh deleted file mode 100644 index 25539b5..0000000 --- a/fragments/labels/remotixagent.sh +++ /dev/null @@ -1,8 +0,0 @@ -remotixagent) - name="RemotixAgent" - type="pkg" - packageID="com.nulana.rxagentmac" - downloadURL="https://remotix.com/downloads/latest-agent-mac/" - appNewVersion=$( curl -fsIL "${downloadURL}" | grep -i "^location" | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)-.*\.pkg/\1/g' ) - expectedTeamID="K293Y6CVN4" - ;; From 4f5479aa18a468ae7a30c0e762ba1aaceda59fc8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Mon, 29 Aug 2022 23:02:47 +0200 Subject: [PATCH 145/209] =?UTF-8?q?Opera=20is=20really=20making=20an=20eff?= =?UTF-8?q?ort=20to=20make=20it=20difficult=20for=20us=20=F0=9F=98=9C?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- fragments/labels/opera.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/fragments/labels/opera.sh b/fragments/labels/opera.sh index 78eda31..fc40e27 100644 --- a/fragments/labels/opera.sh +++ b/fragments/labels/opera.sh @@ -1,8 +1,8 @@ opera) name="Opera" type="dmg" - downloadURL=$(curl -fsIL "$(curl -fs "$(curl -fsIL "https://download.opera.com/download/get/?partner=www&opsys=MacOS" | grep -i "^location" | cut -d " " -f2 | tail -1 | tr -d '\r')" | grep download.opera.com | grep -io "https.*yes" | sed 's/\&/\&/g')" | grep -i "^location" | cut -d " " -f2 | tr -d '\r') - appNewVersion="$(curl -fs "https://get.geo.opera.com/ftp/pub/opera/desktop/" | grep "href=\"\d" | sort -V | tail -1 | tr '"' '\n' | grep "/" | head -1 | tr -d '/')" + downloadURL="$(curl -fsIL "$(curl -fs "$(curl -fsL "https://download.opera.com/download/get/?partner=www&opsys=MacOS" | tr '"' "\n" | grep -e "www.opera.com.*thanks.*opera" | sed 's/\&\;/\&/g')" | tr '"' "\n" | grep "download.opera.com" | sed 's/\&\;/\&/g')" | grep -i "^location" | grep -io "https.*dmg")" + appNewVersion="$(printf "$downloadURL" | sed -E 's/https.*\/([0-9.]*)\/mac\/.*/\1/')" versionKey="CFBundleVersion" expectedTeamID="A2P9LX4JPN" ;; From 32721128f6ad1376811718a531bb20a946cef2a9 Mon Sep 17 00:00:00 2001 From: Takanori TANIGUCHI <askme@pretendco.net> Date: Tue, 30 Aug 2022 09:48:33 +0900 Subject: [PATCH 146/209] Duplicate #659 --- fragments/functions.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index 8ee5b66..a14c406 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -168,7 +168,7 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name if [ -z "$downloadURL" ]; then cleanupAndExit 14 "could not retrieve download URL for $gitusername/$gitreponame" ERROR else - echo "$downloadURL" | head -1 + echo "$downloadURL" return 0 fi } From 96f5bb15e269bf6e2c79caf38c246b544e3c3a4d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Tue, 30 Aug 2022 10:58:05 +0200 Subject: [PATCH 147/209] `wickrme` and `wickrpro` does not work Servers has been changed, so various headers are needed to get the API to work. Have tried this: ``` curl -H "accept: */*" -H "accept-encoding: gzip, deflate, br" -H "accept-language: en-US,en;q=0.9" -H "content-length: 30" -H "content-type: application/json" -H "origin: https://me-download.wickr.com" -H "referer: https://me-download.wickr.com/" -H "sec-fetch-dest: empty" -H "sec-fetch-mode: cors" -H "sec-fetch-site: same-origin" -H "sec-gpc: 1" -H "user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.102 Safari/537.36" "https://me-download.wickr.com/api/download" ``` Two different hosts for Me and Pro: [https://me-download.wickr.com/](https://me-download.wickr.com/) [https://pro-download.wickr.com/](https://pro-download.wickr.com/) I have tried with Brave browser to detect what headers are needed to get the api to work, but it refuses. --- fragments/labels/wickrme.sh | 2 +- fragments/labels/wickrpro.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/fragments/labels/wickrme.sh b/fragments/labels/wickrme.sh index 2ce25d4..5f61573 100644 --- a/fragments/labels/wickrme.sh +++ b/fragments/labels/wickrme.sh @@ -1,6 +1,6 @@ wickrme) - # credit: Søren Theilgaard (@theilgaard) name="WickrMe" + printlog "Label for $name broken in test" WARN type="dmg" downloadURL=$( curl -fs https://me-download.wickr.com/api/download/me/download/mac | tr '"' '\n' | grep -e '^https://' ) appNewVersion=$( echo ${downloadURL} | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)\..*/\1/g' ) diff --git a/fragments/labels/wickrpro.sh b/fragments/labels/wickrpro.sh index 6ddec0e..ae115a0 100644 --- a/fragments/labels/wickrpro.sh +++ b/fragments/labels/wickrpro.sh @@ -1,6 +1,6 @@ wickrpro) - # credit: Søren Theilgaard (@theilgaard) name="WickrPro" + printlog "Label for $name broken in test" WARN type="dmg" downloadURL=$( curl -fs https://me-download.wickr.com/api/download/pro/download/mac | tr '"' '\n' | grep -e '^https://' ) appNewVersion=$( echo ${downloadURL} | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)\..*/\1/g' ) From c5af1a338ed108122fbde072ee7c2745213dfa8f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Wed, 31 Aug 2022 09:18:32 +0200 Subject: [PATCH 148/209] SupportApp pkg will handle reinstallation if it's already running --- fragments/labels/supportapp.sh | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/fragments/labels/supportapp.sh b/fragments/labels/supportapp.sh index 04be84c..7bd48a0 100644 --- a/fragments/labels/supportapp.sh +++ b/fragments/labels/supportapp.sh @@ -5,6 +5,5 @@ supportapp) downloadURL=$(downloadURLFromGit root3nl SupportApp) appNewVersion=$(versionFromGit root3nl SupportApp) expectedTeamID="98LJ4XBGYK" - uid=$(id -u "$currentUser") - launchctl bootout gui/${uid} "/Library/LaunchAgents/nl.root3.support.plist" + blockingProcesses=( NONE ) ;; From 3b098acaac740b88cdf02a7c0524dddd01773d6a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Wed, 31 Aug 2022 09:49:28 +0200 Subject: [PATCH 149/209] `wickrme` and `wickrpro` moved to disabled --- fragments/{labels => disabled}/wickrme.sh | 1 + fragments/{labels => disabled}/wickrpro.sh | 1 + 2 files changed, 2 insertions(+) rename fragments/{labels => disabled}/wickrme.sh (87%) rename fragments/{labels => disabled}/wickrpro.sh (87%) diff --git a/fragments/labels/wickrme.sh b/fragments/disabled/wickrme.sh similarity index 87% rename from fragments/labels/wickrme.sh rename to fragments/disabled/wickrme.sh index 5f61573..5b226ba 100644 --- a/fragments/labels/wickrme.sh +++ b/fragments/disabled/wickrme.sh @@ -1,4 +1,5 @@ wickrme) + # Label not working, haven't found a solution name="WickrMe" printlog "Label for $name broken in test" WARN type="dmg" diff --git a/fragments/labels/wickrpro.sh b/fragments/disabled/wickrpro.sh similarity index 87% rename from fragments/labels/wickrpro.sh rename to fragments/disabled/wickrpro.sh index ae115a0..ee0a2b9 100644 --- a/fragments/labels/wickrpro.sh +++ b/fragments/disabled/wickrpro.sh @@ -1,4 +1,5 @@ wickrpro) + # Label not working, haven't found a solution name="WickrPro" printlog "Label for $name broken in test" WARN type="dmg" From 160dd78ec9149df3ff77e5e59b85bea86007a194 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Thu, 1 Sep 2022 13:02:11 +0200 Subject: [PATCH 150/209] XCreds ``` % GitHub/Installomator-theile/utils/assemble.sh xcreds DEBUG=2 2022-09-01 13:00:21 : INFO : xcreds : setting variable from argument DEBUG=2 2022-09-01 13:00:21 : REQ : xcreds : ################## Start Installomator v. 10.0beta1, date 2022-09-01 2022-09-01 13:00:21 : INFO : xcreds : ################## Version: 10.0beta1 2022-09-01 13:00:21 : INFO : xcreds : ################## Date: 2022-09-01 2022-09-01 13:00:21 : INFO : xcreds : ################## xcreds 2022-09-01 13:00:21 : DEBUG : xcreds : DEBUG mode 2 enabled. 2022-09-01 13:00:22 : INFO : xcreds : BLOCKING_PROCESS_ACTION=tell_user 2022-09-01 13:00:22 : INFO : xcreds : NOTIFY=success 2022-09-01 13:00:22 : INFO : xcreds : LOGGING=DEBUG 2022-09-01 13:00:22 : INFO : xcreds : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-09-01 13:00:22 : INFO : xcreds : Label type: pkgInZip 2022-09-01 13:00:22 : INFO : xcreds : archiveName: XCreds.zip 2022-09-01 13:00:22 : INFO : xcreds : no blocking processes defined, using XCreds as default 2022-09-01 13:00:22 : DEBUG : xcreds : Changing directory to /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b 2022-09-01 13:00:22 : INFO : xcreds : App(s) found: /Applications/XCreds.app 2022-09-01 13:00:22 : INFO : xcreds : found app at /Applications/XCreds.app, version 1.0, on versionKey CFBundleShortVersionString 2022-09-01 13:00:22 : INFO : xcreds : appversion: 1.0 2022-09-01 13:00:22 : INFO : xcreds : Latest version of XCreds is 2.0 2022-09-01 13:00:22 : REQ : xcreds : Downloading https://twocanoes-software-updates.s3.amazonaws.com/xcreds/XCreds2.zip to XCreds.zip 2022-09-01 13:00:22 : DEBUG : xcreds : No Dialog connection, just download 2022-09-01 13:00:23 : DEBUG : xcreds : File list: -rw-r--r-- 1 st staff 2,2M 1 Sep 13:00 XCreds.zip 2022-09-01 13:00:23 : DEBUG : xcreds : File type: XCreds.zip: Zip archive data, at least v2.0 to extract, compression method=store 2022-09-01 13:00:23 : DEBUG : xcreds : curl output was: * Trying 52.216.27.92:443... * Connected to twocanoes-software-updates.s3.amazonaws.com (52.216.27.92) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [348 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [106 bytes data] * TLSv1.2 (IN), TLS handshake, Certificate (11): { [4960 bytes data] * TLSv1.2 (IN), TLS handshake, Server key exchange (12): { [333 bytes data] * TLSv1.2 (IN), TLS handshake, Server finished (14): { [4 bytes data] * TLSv1.2 (OUT), TLS handshake, Client key exchange (16): } [70 bytes data] * TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.2 (OUT), TLS handshake, Finished (20): } [16 bytes data] * TLSv1.2 (IN), TLS change cipher, Change cipher spec (1): { [1 bytes data] * TLSv1.2 (IN), TLS handshake, Finished (20): { [16 bytes data] * SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256 * ALPN, server accepted to use http/1.1 * Server certificate: * subject: CN=*.s3.amazonaws.com * start date: Dec 15 00:00:00 2021 GMT * expire date: Dec 3 23:59:59 2022 GMT * subjectAltName: host "twocanoes-software-updates.s3.amazonaws.com" matched cert's "*.s3.amazonaws.com" * issuer: C=US; O=Amazon; OU=Server CA 1B; CN=Amazon * SSL certificate verify ok. > GET /xcreds/XCreds2.zip HTTP/1.1 > Host: twocanoes-software-updates.s3.amazonaws.com > User-Agent: curl/7.79.1 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 200 OK < x-amz-id-2: zpibNPiaMcUDxjERKPuwezj2NFmFylFdjsNCFRrAvu6wq13iFiatThxKgoRm4EOi6TLongUrdW8= < x-amz-request-id: GEM1A4AV0HBMPPDT < Date: Thu, 01 Sep 2022 11:00:23 GMT < Last-Modified: Tue, 30 Aug 2022 22:26:04 GMT < ETag: "fe639f47a7e6a07604165864755276f5" < Accept-Ranges: bytes < Content-Type: application/zip < Server: AmazonS3 < Content-Length: 2323121 < { [7826 bytes data] * Connection #0 to host twocanoes-software-updates.s3.amazonaws.com left intact 2022-09-01 13:00:23 : REQ : xcreds : no more blocking processes, continue with update 2022-09-01 13:00:23 : REQ : xcreds : Installing XCreds 2022-09-01 13:00:23 : INFO : xcreds : Unzipping XCreds.zip 2022-09-01 13:00:23 : DEBUG : xcreds : Found pkg(s): /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b/XCreds2/XCreds_Build-3261_Version-2.0.pkg 2022-09-01 13:00:23 : INFO : xcreds : found pkg: /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b/XCreds2/XCreds_Build-3261_Version-2.0.pkg 2022-09-01 13:00:23 : INFO : xcreds : Verifying: /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b/XCreds2/XCreds_Build-3261_Version-2.0.pkg updateDialog:26: no such file or directory: 2022-09-01 13:00:23 : DEBUG : xcreds : File list: -rw-r--r--@ 1 st staff 2,2M 31 Aug 00:18 /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b/XCreds2/XCreds_Build-3261_Version-2.0.pkg 2022-09-01 13:00:23 : DEBUG : xcreds : File type: /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b/XCreds2/XCreds_Build-3261_Version-2.0.pkg: xar archive compressed TOC: 5980, SHA-1 checksum 2022-09-01 13:00:23 : DEBUG : xcreds : spctlOut is /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b/XCreds2/XCreds_Build-3261_Version-2.0.pkg: accepted 2022-09-01 13:00:23 : DEBUG : xcreds : source=Notarized Developer ID 2022-09-01 13:00:23 : DEBUG : xcreds : origin=Developer ID Installer: Twocanoes Software, Inc. (UXP6YEHSPW) 2022-09-01 13:00:23 : INFO : xcreds : Team ID: UXP6YEHSPW (expected: UXP6YEHSPW ) 2022-09-01 13:00:23 : DEBUG : xcreds : Deleting /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b 2022-09-01 13:00:23 : DEBUG : xcreds : Debugging enabled, Deleting tmpDir output was: /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b/XCreds.zip 2022-09-01 13:00:23 : DEBUG : xcreds : /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b/XCreds2/XCreds_Build-3261_Version-2.0.pkg 2022-09-01 13:00:23 : DEBUG : xcreds : /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b/XCreds2/xcreds_example_azure.mobileconfig 2022-09-01 13:00:23 : DEBUG : xcreds : /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b/XCreds2/com.twocanoes.xcreds.plist 2022-09-01 13:00:23 : DEBUG : xcreds : /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b/XCreds2/xcreds_example_google.mobileconfig 2022-09-01 13:00:23 : DEBUG : xcreds : /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b/XCreds2 2022-09-01 13:00:23 : DEBUG : xcreds : /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.FhnTIS2b 2022-09-01 13:00:23 : INFO : xcreds : App not closed, so no reopen. 2022-09-01 13:00:23 : DEBUG : xcreds : DEBUG mode 2 enabled, exiting 2022-09-01 13:00:23 : REQ : xcreds : ################## End Installomator, exit code 0 ``` --- fragments/labels/xcreds.sh | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 fragments/labels/xcreds.sh diff --git a/fragments/labels/xcreds.sh b/fragments/labels/xcreds.sh new file mode 100644 index 0000000..b61d72e --- /dev/null +++ b/fragments/labels/xcreds.sh @@ -0,0 +1,8 @@ +xcreds) + name="XCreds" + type="pkgInZip" + #packageID="com.twocanoes.pkg.secureremoteaccess" + downloadURL=$(curl -fs "https://twocanoes.com/products/mac/xcreds/" | grep -ioE "https://.*\.zip" | head -1) + appNewVersion=$(curl -fs "https://twocanoes.com/products/mac/xcreds/" | grep -io "Current Version:.*" | sed -E 's/.*XCreds *([0-9.]*)<.*/\1/g') + expectedTeamID="UXP6YEHSPW" + ;; From ec45fcf945ab751fb56544b58234b81b65ddcfac Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Thu, 1 Sep 2022 14:20:58 +0200 Subject: [PATCH 151/209] Moving XCreds to GitHub download ``` % GitHub/Installomator-theile/utils/assemble.sh xcreds DEBUG=2 2022-09-01 14:19:53 : INFO : xcreds : setting variable from argument DEBUG=2 2022-09-01 14:19:53 : REQ : xcreds : ################## Start Installomator v. 10.0beta1, date 2022-09-01 2022-09-01 14:19:53 : INFO : xcreds : ################## Version: 10.0beta1 2022-09-01 14:19:53 : INFO : xcreds : ################## Date: 2022-09-01 2022-09-01 14:19:53 : INFO : xcreds : ################## xcreds 2022-09-01 14:19:53 : DEBUG : xcreds : DEBUG mode 2 enabled. 2022-09-01 14:19:54 : INFO : xcreds : BLOCKING_PROCESS_ACTION=tell_user 2022-09-01 14:19:54 : INFO : xcreds : NOTIFY=success 2022-09-01 14:19:54 : INFO : xcreds : LOGGING=DEBUG 2022-09-01 14:19:54 : INFO : xcreds : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-09-01 14:19:54 : INFO : xcreds : Label type: pkg 2022-09-01 14:19:54 : INFO : xcreds : archiveName: XCreds.pkg 2022-09-01 14:19:54 : INFO : xcreds : no blocking processes defined, using XCreds as default 2022-09-01 14:19:54 : DEBUG : xcreds : Changing directory to /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.LJYgKZS3 2022-09-01 14:19:54 : INFO : xcreds : App(s) found: /Applications/XCreds.app 2022-09-01 14:19:55 : INFO : xcreds : found app at /Applications/XCreds.app, version 1.0, on versionKey CFBundleShortVersionString 2022-09-01 14:19:55 : INFO : xcreds : appversion: 1.0 2022-09-01 14:19:55 : INFO : xcreds : Latest version of XCreds is 20 2022-09-01 14:19:55 : REQ : xcreds : Downloading https://github.com/twocanoes/xcreds/releases/download/release_v2_0/XCreds_Build-3261_Version-2.0.pkg to XCreds.pkg 2022-09-01 14:19:55 : DEBUG : xcreds : No Dialog connection, just download 2022-09-01 14:19:55 : DEBUG : xcreds : File list: -rw-r--r-- 1 st staff 2,2M 1 Sep 14:19 XCreds.pkg 2022-09-01 14:19:55 : DEBUG : xcreds : File type: XCreds.pkg: xar archive compressed TOC: 5980, SHA-1 checksum 2022-09-01 14:19:55 : DEBUG : xcreds : curl output was: * Trying 140.82.121.3:443... * Connected to github.com (140.82.121.3) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [315 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [122 bytes data] * (304) (IN), TLS handshake, Unknown (8): { [19 bytes data] * (304) (IN), TLS handshake, Certificate (11): { [2459 bytes data] * (304) (IN), TLS handshake, CERT verify (15): { [80 bytes data] * (304) (IN), TLS handshake, Finished (20): { [36 bytes data] * (304) (OUT), TLS handshake, Finished (20): } [36 bytes data] * SSL connection using TLSv1.3 / AEAD-CHACHA20-POLY1305-SHA256 * ALPN, server accepted to use h2 * Server certificate: * subject: C=US; ST=California; L=San Francisco; O=GitHub, Inc.; CN=github.com * start date: Mar 15 00:00:00 2022 GMT * expire date: Mar 15 23:59:59 2023 GMT * subjectAltName: host "github.com" matched cert's "github.com" * issuer: C=US; O=DigiCert Inc; CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1 * SSL certificate verify ok. * Using HTTP2, server supports multiplexing * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x11e811400) > GET /twocanoes/xcreds/releases/download/release_v2_0/XCreds_Build-3261_Version-2.0.pkg HTTP/2 > Host: github.com > user-agent: curl/7.79.1 > accept: */* > < HTTP/2 302 < server: GitHub.com < date: Thu, 01 Sep 2022 12:19:55 GMT < content-type: text/html; charset=utf-8 < vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With < permissions-policy: interest-cohort=() < location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/494661701/0a8cfad5-2aa5-485a-957c-2cbd75f57136?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20220901%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20220901T121955Z&X-Amz-Expires=300&X-Amz-Signature=1867f1e5e0e3ccdc87aaf258551d3be85c62a9b860e4ae665c01db34babeff6b&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=494661701&response-content-disposition=attachment%3B%20filename%3DXCreds_Build-3261_Version-2.0.pkg&response-content-type=application%2Foctet-stream < cache-control: no-cache < strict-transport-security: max-age=31536000; includeSubdomains; preload < x-frame-options: deny < x-content-type-options: nosniff < x-xss-protection: 0 < referrer-policy: no-referrer-when-downgrade < expect-ct: max-age=2592000, report-uri="https://api.github.com/_private/browser/errors" < content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src render.githubusercontent.com viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com identicons.github.com github-cloud.s3.amazonaws.com secured-user-images.githubusercontent.com/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/ < content-length: 0 < x-github-request-id: F408:8530:EED4F3:10A1E04:6310A36B < { [0 bytes data] * Connection #0 to host github.com left intact * Issue another request to this URL: 'https://objects.githubusercontent.com/github-production-release-asset-2e65be/494661701/0a8cfad5-2aa5-485a-957c-2cbd75f57136?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20220901%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20220901T121955Z&X-Amz-Expires=300&X-Amz-Signature=1867f1e5e0e3ccdc87aaf258551d3be85c62a9b860e4ae665c01db34babeff6b&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=494661701&response-content-disposition=attachment%3B%20filename%3DXCreds_Build-3261_Version-2.0.pkg&response-content-type=application%2Foctet-stream' * Trying 185.199.111.133:443... * Connected to objects.githubusercontent.com (185.199.111.133) port 443 (#1) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none * (304) (OUT), TLS handshake, Client hello (1): } [334 bytes data] * (304) (IN), TLS handshake, Server hello (2): { [122 bytes data] * (304) (IN), TLS handshake, Unknown (8): { [19 bytes data] * (304) (IN), TLS handshake, Certificate (11): { [3051 bytes data] * (304) (IN), TLS handshake, CERT verify (15): { [264 bytes data] * (304) (IN), TLS handshake, Finished (20): { [36 bytes data] * (304) (OUT), TLS handshake, Finished (20): } [36 bytes data] * SSL connection using TLSv1.3 / AEAD-CHACHA20-POLY1305-SHA256 * ALPN, server accepted to use h2 * Server certificate: * subject: C=US; ST=California; L=San Francisco; O=GitHub, Inc.; CN=*.github.io * start date: Mar 18 00:00:00 2022 GMT * expire date: Mar 21 23:59:59 2023 GMT * subjectAltName: host "objects.githubusercontent.com" matched cert's "*.githubusercontent.com" * issuer: C=US; O=DigiCert Inc; CN=DigiCert TLS RSA SHA256 2020 CA1 * SSL certificate verify ok. * Using HTTP2, server supports multiplexing * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x11e811400) > GET /github-production-release-asset-2e65be/494661701/0a8cfad5-2aa5-485a-957c-2cbd75f57136?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20220901%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20220901T121955Z&X-Amz-Expires=300&X-Amz-Signature=1867f1e5e0e3ccdc87aaf258551d3be85c62a9b860e4ae665c01db34babeff6b&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=494661701&response-content-disposition=attachment%3B%20filename%3DXCreds_Build-3261_Version-2.0.pkg&response-content-type=application%2Foctet-stream HTTP/2 > Host: objects.githubusercontent.com > user-agent: curl/7.79.1 > accept: */* > < HTTP/2 200 < content-type: application/octet-stream < content-md5: RrLFcfXK8EDq/0K9qLCThA== < last-modified: Wed, 31 Aug 2022 15:53:35 GMT < etag: "0x8DA8B68F6C2079A" < server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 < x-ms-request-id: b7ffb877-b01e-006c-76fc-bdc9f2000000 < x-ms-version: 2020-04-08 < x-ms-creation-time: Wed, 31 Aug 2022 15:53:35 GMT < x-ms-lease-status: unlocked < x-ms-lease-state: available < x-ms-blob-type: BlockBlob < content-disposition: attachment; filename=XCreds_Build-3261_Version-2.0.pkg < x-ms-server-encrypted: true < fastly-restarts: 1 < accept-ranges: bytes < date: Thu, 01 Sep 2022 12:19:55 GMT < via: 1.1 varnish < age: 83 < x-served-by: cache-cph2320020-CPH < x-cache: HIT < x-cache-hits: 1 < x-timer: S1662034796.510835,VS0,VE99 < content-length: 2321014 < { [16375 bytes data] * Connection #1 to host objects.githubusercontent.com left intact 2022-09-01 14:19:55 : REQ : xcreds : no more blocking processes, continue with update 2022-09-01 14:19:55 : REQ : xcreds : Installing XCreds 2022-09-01 14:19:55 : INFO : xcreds : Verifying: XCreds.pkg updateDialog:26: no such file or directory: 2022-09-01 14:19:55 : DEBUG : xcreds : File list: -rw-r--r-- 1 st staff 2,2M 1 Sep 14:19 XCreds.pkg 2022-09-01 14:19:55 : DEBUG : xcreds : File type: XCreds.pkg: xar archive compressed TOC: 5980, SHA-1 checksum 2022-09-01 14:19:55 : DEBUG : xcreds : spctlOut is XCreds.pkg: accepted 2022-09-01 14:19:55 : DEBUG : xcreds : source=Notarized Developer ID 2022-09-01 14:19:55 : DEBUG : xcreds : origin=Developer ID Installer: Twocanoes Software, Inc. (UXP6YEHSPW) 2022-09-01 14:19:55 : INFO : xcreds : Team ID: UXP6YEHSPW (expected: UXP6YEHSPW ) 2022-09-01 14:19:55 : DEBUG : xcreds : Deleting /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.LJYgKZS3 2022-09-01 14:19:55 : DEBUG : xcreds : Debugging enabled, Deleting tmpDir output was: /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.LJYgKZS3/XCreds.pkg 2022-09-01 14:19:55 : DEBUG : xcreds : /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.LJYgKZS3 2022-09-01 14:19:55 : INFO : xcreds : App not closed, so no reopen. 2022-09-01 14:19:55 : DEBUG : xcreds : DEBUG mode 2 enabled, exiting 2022-09-01 14:19:55 : REQ : xcreds : ################## End Installomator, exit code 0 ``` --- fragments/labels/xcreds.sh | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/fragments/labels/xcreds.sh b/fragments/labels/xcreds.sh index b61d72e..4035dd4 100644 --- a/fragments/labels/xcreds.sh +++ b/fragments/labels/xcreds.sh @@ -1,8 +1,11 @@ xcreds) name="XCreds" - type="pkgInZip" + #type="pkgInZip" #packageID="com.twocanoes.pkg.secureremoteaccess" - downloadURL=$(curl -fs "https://twocanoes.com/products/mac/xcreds/" | grep -ioE "https://.*\.zip" | head -1) - appNewVersion=$(curl -fs "https://twocanoes.com/products/mac/xcreds/" | grep -io "Current Version:.*" | sed -E 's/.*XCreds *([0-9.]*)<.*/\1/g') + #downloadURL=$(curl -fs "https://twocanoes.com/products/mac/xcreds/" | grep -ioE "https://.*\.zip" | head -1) + #appNewVersion=$(curl -fs "https://twocanoes.com/products/mac/xcreds/" | grep -io "Current Version:.*" | sed -E 's/.*XCreds *([0-9.]*)<.*/\1/g') + type="pkg" + downloadURL="$(downloadURLFromGit twocanoes xcreds)" + appNewVersion="$(versionFromGit twocanoes xcreds)" expectedTeamID="UXP6YEHSPW" ;; From c138404604443a02291c8df558cf97c508ebf837 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 2 Sep 2022 10:06:33 +0200 Subject: [PATCH 152/209] updated version to 10.0beta2 --- Installomator.sh | 4 ++-- fragments/version.sh | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Installomator.sh b/Installomator.sh index 3e34f84..927b911 100755 --- a/Installomator.sh +++ b/Installomator.sh @@ -321,8 +321,8 @@ if [[ $(/usr/bin/arch) == "arm64" ]]; then rosetta2=no fi fi -VERSION="10.0beta1" -VERSIONDATE="2022-08-12" +VERSION="10.0beta2" +VERSIONDATE="2022-08-31" # MARK: Functions diff --git a/fragments/version.sh b/fragments/version.sh index 8bfae47..0525adb 100644 --- a/fragments/version.sh +++ b/fragments/version.sh @@ -1 +1 @@ -10.0beta1 +10.0beta2 From 438191e4d3a4a4085b907320e6f2a4b82c312ef2 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 2 Sep 2022 11:41:33 +0200 Subject: [PATCH 153/209] `assemble.sh` now returns exit code from Installomator.sh --- utils/assemble.sh | 4 ++++ utils/test-pr.sh | 27 +++++++++++++++++++++++++++ 2 files changed, 31 insertions(+) create mode 100755 utils/test-pr.sh diff --git a/utils/assemble.sh b/utils/assemble.sh index 834a0c1..6234fc3 100755 --- a/utils/assemble.sh +++ b/utils/assemble.sh @@ -120,6 +120,8 @@ chmod +x $destination_file # run script with remaining arguments if [[ $runScript -eq 1 ]]; then $destination_file "$@" + exit_code=$? + echo "exit_code is $exit_code" fi # copy the script to root of repo when flag is set @@ -186,3 +188,5 @@ if [[ $notarizePkg -eq 1 ]]; then echo "# Stapling $productpath" xcrun stapler staple "$productpath" fi + +exit $exit_code diff --git a/utils/test-pr.sh b/utils/test-pr.sh new file mode 100755 index 0000000..24ef81f --- /dev/null +++ b/utils/test-pr.sh @@ -0,0 +1,27 @@ +#!/bin/zsh + +# this will checkout and test a pr + +# requires the gh tool and the cwd to be the repo base +# +# usage: utils/test-pr.sh <pr_num> <label> + +pr_num=${1:?"arg 1 is the PR number"} +label=${2:?"arg 2 is label"} + +gh pr checkout $pr_num -b "pr/$pr_num" + + + +if ! utils/assemble.sh $label; then + echo "something went wrong, stopping here" +else + echo + echo "All good! merging..." + echo + +# git checkout main +# git merge "pr/$pr_num" -m "new label: $label" +# git branch -d "pr/$pr_num" +# gh pr comment $pr_num --body 'Thank you!' +fi From e1fdda65febe49e8fbd233fa0bc590f748eef28c Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 2 Sep 2022 11:42:56 +0200 Subject: [PATCH 154/209] new test-pr.sh script --- utils/test-pr.sh | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/utils/test-pr.sh b/utils/test-pr.sh index 24ef81f..7d7340e 100755 --- a/utils/test-pr.sh +++ b/utils/test-pr.sh @@ -11,8 +11,6 @@ label=${2:?"arg 2 is label"} gh pr checkout $pr_num -b "pr/$pr_num" - - if ! utils/assemble.sh $label; then echo "something went wrong, stopping here" else @@ -20,8 +18,8 @@ else echo "All good! merging..." echo -# git checkout main -# git merge "pr/$pr_num" -m "new label: $label" -# git branch -d "pr/$pr_num" -# gh pr comment $pr_num --body 'Thank you!' + git checkout main + git merge "pr/$pr_num" -m "new label: $label" + git branch -d "pr/$pr_num" + gh pr comment $pr_num --body 'Thank you!' fi From 003647bab2bbf2974f7f94e34ae84dbea832cdb8 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 2 Sep 2022 12:44:58 +0200 Subject: [PATCH 155/209] updated test script --- utils/assemble.sh | 1 - utils/test-pr.sh | 18 ++++++++++++------ 2 files changed, 12 insertions(+), 7 deletions(-) diff --git a/utils/assemble.sh b/utils/assemble.sh index 6234fc3..e92a9f3 100755 --- a/utils/assemble.sh +++ b/utils/assemble.sh @@ -121,7 +121,6 @@ chmod +x $destination_file if [[ $runScript -eq 1 ]]; then $destination_file "$@" exit_code=$? - echo "exit_code is $exit_code" fi # copy the script to root of repo when flag is set diff --git a/utils/test-pr.sh b/utils/test-pr.sh index 7d7340e..526ee56 100755 --- a/utils/test-pr.sh +++ b/utils/test-pr.sh @@ -9,17 +9,23 @@ pr_num=${1:?"arg 1 is the PR number"} label=${2:?"arg 2 is label"} -gh pr checkout $pr_num -b "pr/$pr_num" +if ! gh pr checkout $pr_num -b "pr/$pr_num"; then + exit $? +fi if ! utils/assemble.sh $label; then echo "something went wrong, stopping here" else echo - echo "All good! merging..." + echo "All good!" echo - git checkout main - git merge "pr/$pr_num" -m "new label: $label" - git branch -d "pr/$pr_num" - gh pr comment $pr_num --body 'Thank you!' + read -q query"?Merge into main? (y/n)" + + if [[ $query == 'y' ]]; then + git checkout main + git merge "pr/$pr_num" -m "new label: $label" + git branch -d "pr/$pr_num" + gh pr comment $pr_num --body 'Thank you!' + fi fi From 6556cfd7d44fe03a6d4ec6ce4073364c6d24706f Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 2 Sep 2022 12:51:00 +0200 Subject: [PATCH 156/209] fixed typo --- fragments/functions.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index a14c406..bd21f87 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -985,7 +985,7 @@ updateDialog() { fi # when to cmdfile is set, do nothing - if [[ $$cmd_file == "" ]]; then + if [[ $cmd_file == "" ]]; then return fi From 42126caa21db231291b093c8c7f02614a87da340 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 2 Sep 2022 13:29:16 +0200 Subject: [PATCH 157/209] fixed labels without trailing new line --- fragments/labels/coconutbattery.sh | 2 +- fragments/labels/dynalist.sh | 2 +- fragments/labels/fellow.sh | 2 +- fragments/labels/masv.sh | 2 +- fragments/labels/sonicvisualiser.sh | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/fragments/labels/coconutbattery.sh b/fragments/labels/coconutbattery.sh index 562fdcc..efdf088 100644 --- a/fragments/labels/coconutbattery.sh +++ b/fragments/labels/coconutbattery.sh @@ -4,4 +4,4 @@ coconutbattery) downloadURL="https://coconut-flavour.com/downloads/coconutBattery_latest.zip" appNewVersion=$(curl -fs https://www.coconut-flavour.com/coconutbattery/ | grep "<title>" | sed -e 's/.*coconutBattery \(.*\) - by coconut-flavour.co.*/\1/') expectedTeamID="R5SC3K86L5" - ;; \ No newline at end of file + ;; diff --git a/fragments/labels/dynalist.sh b/fragments/labels/dynalist.sh index df83b0e..58d8681 100644 --- a/fragments/labels/dynalist.sh +++ b/fragments/labels/dynalist.sh @@ -4,4 +4,4 @@ dynalist) downloadURL="https://dynalist.io/standalone/download?file=Dynalist.dmg" appNewVersion="" expectedTeamID="6JSW4SJWN9" - ;; \ No newline at end of file + ;; diff --git a/fragments/labels/fellow.sh b/fragments/labels/fellow.sh index 7f8713d..c5a1660 100644 --- a/fragments/labels/fellow.sh +++ b/fragments/labels/fellow.sh @@ -4,4 +4,4 @@ fellow) downloadURL="https://cdn.fellow.app/desktop/1.3.11/darwin/stable/universal/Fellow-1.3.11-universal.dmg" appNewVersion="" expectedTeamID="2NF46HY8D8" - ;; \ No newline at end of file + ;; diff --git a/fragments/labels/masv.sh b/fragments/labels/masv.sh index 7e08fb0..d614f70 100644 --- a/fragments/labels/masv.sh +++ b/fragments/labels/masv.sh @@ -3,4 +3,4 @@ masv) type="dmg" downloadURL="https://dl.massive.io/MASV.dmg" expectedTeamID="VHKX7RCAY7" - ;; \ No newline at end of file + ;; diff --git a/fragments/labels/sonicvisualiser.sh b/fragments/labels/sonicvisualiser.sh index eef62d6..14e0a7a 100644 --- a/fragments/labels/sonicvisualiser.sh +++ b/fragments/labels/sonicvisualiser.sh @@ -4,4 +4,4 @@ sonicvisualiser) downloadURL="$(downloadURLFromGit sonic-visualiser sonic-visualiser)" appNewVersion="$(versionFromGit sonic-visualiser sonic-visualiser)" expectedTeamID="73F996B92S" - ;; \ No newline at end of file + ;; From 95bd32769c34b0df98bd75c915670cfa080b21eb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st.local> Date: Fri, 2 Sep 2022 14:57:04 +0200 Subject: [PATCH 158/209] Update acroniscyberprotectconnectagent.sh `blockingProcesses=( NONE )` --- fragments/labels/acroniscyberprotectconnectagent.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/fragments/labels/acroniscyberprotectconnectagent.sh b/fragments/labels/acroniscyberprotectconnectagent.sh index 7155b6a..8310357 100644 --- a/fragments/labels/acroniscyberprotectconnectagent.sh +++ b/fragments/labels/acroniscyberprotectconnectagent.sh @@ -7,4 +7,5 @@ remotixagent) versionKey="CFBundleVersion" appNewVersion=$(curl -fsIL "${downloadURL}" | grep -i "^location" | sed -E 's/.*\/[a-zA-Z]*-[0-9.]*-([0-9.]*)\.pkg/\1/g') expectedTeamID="H629V387SY" + blockingProcesses=( NONE ) ;; From 9e9a65337d936df8d07e5e040bd21f946fa18465 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 2 Sep 2022 15:17:51 +0200 Subject: [PATCH 159/209] updated changelog and main script --- CHANGELOG.md | 59 ++++++++ Installomator.sh | 360 +++++++++++++++++++++++++++++++++++++---------- Labels.txt | 28 +++- 3 files changed, 371 insertions(+), 76 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f4d3ff6..0bc345c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,62 @@ +## v10beta2 + +- fixed problem with GitHub labels (#659) +- bz2 archive support (#659) +- fixed WorkspaceOne support (#653) + +Plus everything from v10beta1 + +- new labels: + - abetterfinderrename11 (#552) + - carboncopycloner (#553) + - cocoapods (#659) + - coconutbattery (#588) + - cricutdesignspace (#562) + - dynalist (#591) + - fellow (#591) + - flexoptixapp (#554) + - googleadseditor (#652, #541) + - kap (#568) + - keepingyouawake (#549) + - lcadvancedvpnclient (#584) + - masv (#569) + - merlinproject (#555) + - mongodbcompass (#654) + - netspot (#556) + - relatel (#619) + - sonicvisualiser (#575) + - strongdm (#559) + - synologyassistant (#557) + - synologydriveclient (#582) + - tencentmeeting (#570) + - typinator (#583) + - xcreds (#675) +- updated labels: + - acroniscyberprotectconnect/remotix (#664) + - acroniscyberprotectconnectagent/remotixagent (#664) + - awsvpnclient (#586) + - boxtools (#589) + - clevershare2 (#664) + - coderunner (#664) + - colourcontrastanalyser (#664) + - cryptomator (#664) + - dangerzone (#664) + - drawio (#664) + - golang (#664) + - icons (#664) + - insomnia (#664) + - knockknock (#664) + - libreoffice (#672) + - macports + - opera (#664) + - supportapp (#664) + - vmwarehorizonclient (#645, #511) +- deleted/deactivated labels: + - microsoftyammer (#664) + - wickrme (#664) + - wickrpro (#664) + + ## v10beta1 - [swiftDialog](https://github.com/bartreardon/swiftDialog) integration (#641, #632), many thanks to @bartreardon, [sample scripts](in the MDM folder) diff --git a/Installomator.sh b/Installomator.sh index 927b911..53f45f3 100755 --- a/Installomator.sh +++ b/Installomator.sh @@ -80,6 +80,7 @@ LOGO=appstore # - mosylem Mosyle Manager (Education) # - addigy Addigy # - microsoft Microsoft Endpoint Manager (Intune) +# - ws1 Workspace ONE (AirWatch) # path can also be set in the command call, and if file exists, it will be used. # Like 'LOGO="/System/Applications/App\ Store.app/Contents/Resources/AppIcon.icns"' # (spaces have to be escaped). @@ -322,7 +323,7 @@ if [[ $(/usr/bin/arch) == "arm64" ]]; then fi fi VERSION="10.0beta2" -VERSIONDATE="2022-08-31" +VERSIONDATE="2022-09-02" # MARK: Functions @@ -390,9 +391,12 @@ displaynotification() { # $1: message $2: title message=${1:-"Message"} title=${2:-"Notification"} manageaction="/Library/Application Support/JAMF/bin/Management Action.app/Contents/MacOS/Management Action" + hubcli="/usr/local/bin/hubcli" if [[ -x "$manageaction" ]]; then "$manageaction" -message "$message" -title "$title" + elif [[ -x "$hubcli" ]]; then + "$hubcli" notify -t "$title" -i "$message" -c "Dismiss" else runAsUser osascript -e "display notification \"$message\" with title \"$title\"" fi @@ -486,10 +490,10 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name if [ -n "$archiveName" ]; then #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") - downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*$archiveName.*") + downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1) else #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") - downloadURL=https://github.com$(curl -sL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -o "\/$gitusername\/$gitreponame.*\.$filetype") + downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1) fi if [ -z "$downloadURL" ]; then cleanupAndExit 14 "could not retrieve download URL for $gitusername/$gitreponame" ERROR @@ -1311,7 +1315,7 @@ updateDialog() { fi # when to cmdfile is set, do nothing - if [[ $$cmd_file == "" ]]; then + if [[ $cmd_file == "" ]]; then return fi @@ -1521,6 +1525,13 @@ valuesfromarguments) appNewVersion=$(curl -fs -L https://support.8x8.com/cloud-phone-service/voice/work-desktop/download-8x8-work-for-desktop | grep -m 1 -o "https.*dmg" | sed 's/\"//' | awk '{print $1}' | sed -E 's/.*-v([0-9\.]*)[-\.]*.*/\1/' ) expectedTeamID="FC967L3QRG" ;; +abetterfinderrename11) + name="A Better Finder Rename 11" + type="dmg" + downloadURL="https://www.publicspace.net/download/ABFRX11.dmg" + appNewVersion=$(curl -fs "https://www.publicspace.net/app/signed_abfr11.xml" | xpath '(//rss/channel/item/enclosure/@sparkle:version)' 2>/dev/null | cut -d '"' -f 2) + expectedTeamID="7Y9KW4ND8W" + ;; abstract) name="Abstract" type="zip" @@ -1528,6 +1539,25 @@ abstract) appNewVersion=$( curl -fsIL "${downloadURL}" | grep -i "^location" | awk '{print $2}' | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)\..*/\1/g' ) expectedTeamID="77MZLZE47D" ;; +acroniscyberprotectconnect|\ +remotix) + name="Acronis Cyber Protect Connect" + type="dmg" + downloadURL="https://go.acronis.com/AcronisCyberProtectConnect_ForMac" + versionKey="CFBundleVersion" + appNewVersion=$(curl -fsIL "${downloadURL}" | grep -i "^location" | sed -E 's/.*\/[a-zA-Z]*-[0-9.]*-([0-9.]*)\.dmg/\1/g') + expectedTeamID="ZU2TV78AA6" + ;; +acroniscyberprotectconnectagent|\ +remotixagent) + name="Acronis Cyber Protect Connect Agent" + type="pkg" + #packageID="com.nulana.rxagentmac" + downloadURL="https://go.acronis.com/AcronisCyberProtectConnect_AgentForMac" + versionKey="CFBundleVersion" + appNewVersion=$(curl -fsIL "${downloadURL}" | grep -i "^location" | sed -E 's/.*\/[a-zA-Z]*-[0-9.]*-([0-9.]*)\.pkg/\1/g') + expectedTeamID="H629V387SY" + ;; adobebrackets) name="Brackets" type="dmg" @@ -1852,7 +1882,7 @@ awsvpnclient) type="pkg" downloadURL="https://d20adtppz83p9s.cloudfront.net/OSX/latest/AWS_VPN_Client.pkg" expectedTeamID="94KV3E626L" - appNewVersion=$(curl -is "https://beta2.communitypatch.com/jamf/v1/ba1efae22ae74a9eb4e915c31fef5dd2/patch/AWSVPNClient" | grep currentVersion | tr ',' '\n' | grep currentVersion | cut -d '"' -f 4) + #appNewVersion=$(curl -is "https://beta2.communitypatch.com/jamf/v1/ba1efae22ae74a9eb4e915c31fef5dd2/patch/AWSVPNClient" | grep currentVersion | tr ',' '\n' | grep currentVersion | cut -d '"' -f 4) ;; axurerp10) name="Axure RP 10" @@ -1969,6 +1999,7 @@ boxtools) name="Box Tools" type="pkg" downloadURL="https://box-installers.s3.amazonaws.com/boxedit/mac/currentrelease/BoxToolsInstaller.pkg" + packageID="com.box.boxtools.installer.boxedit" expectedTeamID="M683GB7CPW" ;; brave) @@ -2073,6 +2104,13 @@ canva) fi expectedTeamID="5HD2ARTBFS" ;; +carboncopycloner) + name="Carbon Copy Cloner" + type="zip" + downloadURL=$(curl -fsIL "https://bombich.com/software/download_ccc.php?v=latest" | grep -i ^location | sed -E 's/.*(https.*\.zip).*/\1/g') + appNewVersion=$(sed -E 's/.*-([0-9.]*)\.zip/\1/g' <<< $downloadURL | sed 's/\.[^.]*$//') + expectedTeamID="L4F2DED5Q7" + ;; chatwork) name="Chatwork" type="dmg" @@ -2097,8 +2135,9 @@ citrixworkspace) clevershare2) name="Clevershare" type="dmg" - downloadURL=$(curl -fs https://www.clevertouch.com/eu/clevershare2g | grep -i -o -E "https.*Mac.*\.dmg") - appNewVersion=$( echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z-]*_Mac\.([0-9.]*)\.[0-9]*\.dmg$/\1/g' ) + printlog "Label for $name broken in test" ERROR + downloadURL=$(curl -fs https://www.clevertouch.com/eu/clevershare2g | grep -i -o -E "https.*notarized.*\.dmg") + appNewVersion=$(echo "${downloadURL}" | sed -E 's/.*\/([0-9.]*)\/[0-9]*\/.*\.dmg$/\1/') expectedTeamID="P76M9BE8DQ" ;; clickshare) @@ -2147,6 +2186,20 @@ cluefull) versionKey="CFBundleVersion" expectedTeamID="3NX6B9TB2F" ;; +cocoapods) + name="CocoaPods" + type="bz2" + downloadURL="$(downloadURLFromGit CocoaPods CocoaPods-app)" + appNewVersion="$(versionFromGit CocoaPods CocoaPods-app)" + expectedTeamID="AX2Q2BH2XR" + ;; +coconutbattery) + name="coconutBattery" + type="zip" + downloadURL="https://coconut-flavour.com/downloads/coconutBattery_latest.zip" + appNewVersion=$(curl -fs https://www.coconut-flavour.com/coconutbattery/ | grep "<title>" | sed -e 's/.*coconutBattery \(.*\) - by coconut-flavour.co.*/\1/') + expectedTeamID="R5SC3K86L5" + ;; code42) name="Code42" type="pkgInDmg" @@ -2159,14 +2212,14 @@ code42) blockingProcesses=( NONE ) ;; coderunner) - # credit: Erik Stam (@erikstam) name="CodeRunner" type="zip" downloadURL="https://coderunnerapp.com/download" + appNewVersion=$(curl -fsIL ${downloadURL} | grep -i "^location" | cut -d " " -f2 | sed -E 's/.*CodeRunner-([0-9.]*).zip/\1/') expectedTeamID="R4GD98AJF9" ;; colourcontrastanalyser) - name="Colour Contrast Analyser (CCA)" + name="Colour Contrast Analyser" type="dmg" downloadURL=$(downloadURLFromGit ThePacielloGroup CCAe) appNewVersion=$(versionFromGit ThePacielloGroup CCAe) @@ -2196,9 +2249,22 @@ craftmanagerforsketch) appNewVersion=$(curl -fs https://craft-assets.invisionapp.com/CraftManager/production/appcast.xml | xpath '//rss/channel/item[1]/enclosure/@sparkle:shortVersionString' 2>/dev/null | cut -d '"' -f2) expectedTeamID="VRXQSNCL5W" ;; +cricutdesignspace) + name="Cricut Design Space" + type="dmg" + appNewVersion=$(getJSONValue "$(curl -fsL https://s3-us-west-2.amazonaws.com/staticcontent.cricut.com/a/software/osx-native/latest.json)" "rolloutVersion") + downloadURL=$(getJSONValue $(curl -fsL "https://apis.cricut.com/desktopdownload/InstallerFile?shard=a&operatingSystem=osxnative&fileName=CricutDesignSpace-Install-v${appNewVersion}.dmg") "result") + expectedTeamID="25627ZFVT7" + ;; cryptomator) name="Cryptomator" type="dmg" + if [[ $(arch) == "arm64" ]]; then + archiveName="Cryptomator-[0-9.]*-arm64.dmg" + + elif [[ $(arch) == "i386" ]]; then + archiveName="Cryptomator-[0-9.]*.dmg" + fi downloadURL=$(downloadURLFromGit cryptomator cryptomator) appNewVersion=$(versionFromGit cryptomator cryptomator) expectedTeamID="YZQJQUHA3L" @@ -2220,8 +2286,8 @@ daisydisk) dangerzone) name="Dangerzone" type="dmg" - downloadURL="$(downloadURLFromGit firstlookmedia dangerzone)" - appNewVersion="$(versionFromGit firstlookmedia dangerzone)" + downloadURL="$(downloadURLFromGit freedomofpress dangerzone)" + appNewVersion="$(versionFromGit freedomofpress dangerzone)" expectedTeamID="N9B95FDWH4" ;; darktable) @@ -2354,7 +2420,7 @@ dockutil) drawio) name="draw.io" type="dmg" - archiveName="draw.io-universal-[0-9.]*.dmg" + archiveName="draw.io-universal-[0-9.]*.dmg$" downloadURL="$(downloadURLFromGit jgraph drawio-desktop)" appNewVersion="$(versionFromGit jgraph drawio-desktop)" expectedTeamID="UZEUFB4N53" @@ -2393,6 +2459,13 @@ duodevicehealth) expectedTeamID="FNN8Z5JMFP" ;; +dynalist) + name="Dynalist" + type="dmg" + downloadURL="https://dynalist.io/standalone/download?file=Dynalist.dmg" + appNewVersion="" + expectedTeamID="6JSW4SJWN9" + ;; easeusdatarecoverywizard) # credit: Søren Theilgaard (@theilgaard) name="EaseUS Data Recovery Wizard" @@ -2500,6 +2573,13 @@ favro) appNewVersion="$(curl -fs https://download.favro.com/FavroDesktop/macOS/x64/Latest.html | cut -d ">" -f1 | cut -d "=" -f 4 | cut -d '"' -f1 | sed -E 's/.*-([0-9.]*)\.dmg/\1/g')" expectedTeamID="PUA8Q354ZF" ;; +fellow) + name="Fellow" + type="dmg" + downloadURL="https://cdn.fellow.app/desktop/1.3.11/darwin/stable/universal/Fellow-1.3.11-universal.dmg" + appNewVersion="" + expectedTeamID="2NF46HY8D8" + ;; ferdi) name="Ferdi" type="zip" @@ -2658,6 +2738,13 @@ firefoxpkg_intl) expectedTeamID="43AQ936H96" blockingProcesses=( firefox ) ;; +flexoptixapp) + name="FLEXOPTIX App" + type="dmg" + downloadURL="https://flexbox.reconfigure.me/download/electron/mac/x64/current" + appNewVersion=$(curl -fsIL "${downloadURL}" | grep -i ^location | sed -E 's/.*-([0-9.]*)\.dmg/\1/g') + expectedTeamID="C5JETSFPHL" + ;; flowjo) name="FlowJo-OSX64-10.8.0" type="dmg" @@ -2731,11 +2818,22 @@ golang) name="GoLang" type="pkg" packageID="org.golang.go" - downloadURL="https://go.dev$(curl -fs "https://go.dev/dl/" | grep -i "downloadBox" | grep "pkg" | tr '"' '\n' | grep "pkg")" + if [[ $(arch) == "arm64" ]]; then + downloadURL="https://go.dev$(curl -fs "https://go.dev/dl/" | grep -i "downloadBox" | grep "darwin-arm" | tr '"' '\n' | grep "pkg")" + elif [[ $(arch) == "i386" ]]; then + downloadURL="https://go.dev$(curl -fs "https://go.dev/dl/" | grep -i "downloadBox" | grep "darwin-amd" | tr '"' '\n' | grep "pkg")" + fi appNewVersion="$( echo "${downloadURL}" | sed -E 's/.*\/(go[0-9.]*)\..*/\1/g' )" # Version includes letters "go" in the beginning expectedTeamID="EQHXZ8M8AV" blockingProcesses=( NONE ) ;; +googleadseditor) + name="Google Ads Editor" + type="dmg" + downloadURL="https://dl.google.com/adwords_editor/google_ads_editor.dmg" + appNewVersion="" + expectedTeamID="EQHXZ8M8AV" + ;; googlechrome) name="Google Chrome" type="dmg" @@ -2951,11 +3049,10 @@ ibarcoder) expectedTeamID="JAXVB9AH9M" ;; icons) - # credit: Mischa van der Bent (@mischavdbent) name="Icons" type="zip" - downloadURL=$(downloadURLFromGit sap macOS-icon-generator ) - appNewVersion=$(versionFromGit sap macOS-icon-generator ) + downloadURL=$(downloadURLFromGit SAP macOS-icon-generator ) + appNewVersion=$(versionFromGit SAP macOS-icon-generator ) expectedTeamID="7R5ZEU67FQ" ;; idrive) @@ -3009,10 +3106,12 @@ inkscape) expectedTeamID="SW3D6BB6A6" ;; insomnia) - name="insomnia" + name="Insomnia" type="dmg" - downloadURL=$(downloadURLFromGit kong insomnia) - appNewVersion=$(versionFromGit kong insomnia) + #downloadURL=$(downloadURLFromGit kong insomnia) + downloadURL=$(curl -fs "https://updates.insomnia.rest/downloads/mac/latest?app=com.insomnia.app&source=website" | grep -o "https.*\.dmg") + #appNewVersion=$(versionFromGit kong insomnia) + appNewVersion=$(echo "$downloadURL" | sed -E 's/.*\/Insomnia.Core.([0-9.]*)\.dmg/\1/') expectedTeamID="FX44YY62GV" ;; installomator|\ @@ -3230,6 +3329,20 @@ jetbrainswebstorm) appNewVersion=$( curl -fsIL "${downloadURL}" | grep -i "location" | tail -1 | sed -E 's/.*\/[a-zA-Z-]*-([0-9.]*).*[-.].*dmg/\1/g' ) expectedTeamID="2ZEFAR8TH3" ;; +kap) + # credit: Lance Stephens (@pythoninthegrass on MacAdmins Slack) + name="Kap" + type="dmg" + if [[ $(arch) = "i386" ]]; then + archiveName="${name}-[0-9.]*-x64.${type}" + downloadURL=$(downloadURLFromGit wulkano kap | grep -i x64) + else + archiveName="${name}-[0-9.]*-arm64.${type}" + downloadURL=$(downloadURLFromGit wulkano kap | grep -i arm64) + fi + appNewVersion=$(versionFromGit wulkano Kap) + expectedTeamID="2KEEHXF6R6" + ;; karabinerelements) # credit: Tadayuki Onishi (@kenchan0130) name="Karabiner-Elements" @@ -3250,6 +3363,14 @@ keepassxc) appNewVersion=$(versionFromGit keepassxreboot keepassxc) expectedTeamID="G2S7P7J672" ;; +keepingyouawake) + name="KeepingYouAwake" + type="zip" + downloadURL=$(downloadURLFromGit newmarcel KeepingYouAwake) + appNewVersion=$(versionFromGit newmarcel KeepingYouAwake) + expectedTeamID="5KESHV9W85" + blockingProcesses=( "KeepingYouAwake" ) + ;; keka) name="Keka" type="dmg" @@ -3283,8 +3404,8 @@ klokki) knockknock) name="KnockKnock" type="zip" - downloadURL=$( curl -fs "https://objective-see.com/products/knockknock.html" | grep https | grep "$type" | head -1 | tr '"' "\n" | grep "^http" ) - appNewVersion=$( echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*_([0-9.]*)\..*/\1/g' ) + downloadURL="$(downloadURLFromGit objective-see KnockKnock)" + appNewVersion="$(versionFromGit objective-see KnockKnock)" expectedTeamID="VBG97UB4TA" ;; krisp) @@ -3316,6 +3437,13 @@ launchbar) appNewVersion=$( echo ${downloadURL} | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)\..*/\1/g' ) expectedTeamID="MLZF7K7B5R" ;; +lcadvancedvpnclient) + name="LANCOM Advanced VPN Client" + type="pkgInDmg" + appNewVersion=$(curl -fs https://www.ncp-e.com/de/service/download-vpn-client/ | grep -m 1 "NCP Secure Entry macOS Client" -A 1 | grep -i Version | sed "s|.*Version \(.*\) Rev.*|\\1|") + downloadURL=$(appShortVersion=`sed 's/[^0-9]//g' <<< $appNewVersion` && echo https://ftp.lancom.de/LANCOM-Releases/LC-VPN-Client/LC-Advanced-VPN-Client-macOS-"${appShortVersion}"-Rel-x86-64.dmg) + expectedTeamID="LL3KBL2M3A" + ;; lexarrecoverytool) name="Lexar Recovery Tool" type="appInDmgInZip" @@ -3326,11 +3454,11 @@ libreoffice) name="LibreOffice" type="dmg" if [[ $(arch) == "arm64" ]]; then - downloadURL="https://download.documentfoundation.org/libreoffice/stable/$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)/mac/aarch64/LibreOffice_$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)_MacOS_aarch64.dmg" - elif [[ $(arch) == "i386" ]]; then - downloadURL="https://download.documentfoundation.org/libreoffice/stable/$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)/mac/x86_64/LibreOffice_$(curl -s https://www.libreoffice.org/download/download/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)_MacOS_x86-64.dmg" + arch_type="aarch64" fi - appNewVersion=$( echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*_([0-9.]*)_.*/\1/g' ) + libreoffice_latest_version="$(curl -Ls https://www.libreoffice.org/download/download-libreoffice/ | grep dl_version_number | head -n 1 | cut -d'>' -f3 | cut -d'<' -f1)" + downloadURL="https://download.documentfoundation.org/libreoffice/stable/${libreoffice_latest_version}/mac/${arch_type:-x86_64}/LibreOffice_${libreoffice_latest_version}_MacOS_${arch_type:-x86-64}.dmg" + appNewVersion=$(echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*_([0-9.]*)_.*/\1/g') expectedTeamID="7P5S3ZLCN7" blockingProcesses=( soffice ) ;; @@ -3497,6 +3625,12 @@ marathoninfinity) appNewVersion="$(versionFromGit Aleph-One-Marathon alephone)" expectedTeamID="E8K89CXZE7" ;; +masv) + name="MASV" + type="dmg" + downloadURL="https://dl.massive.io/MASV.dmg" + expectedTeamID="VHKX7RCAY7" + ;; mattermost) name="Mattermost" type="dmg" @@ -3513,6 +3647,13 @@ menumeters) appNewVersion=$(versionFromGit yujitach MenuMeters ) expectedTeamID="95AQ7YKR5A" ;; +merlinproject) + name="Merlin Project" + type="zip" + downloadURL="https://www.projectwizards.net/downloads/MerlinProject.zip" + appNewVersion="$(curl -fs "https://www.projectwizards.net/de/support/release-notes" | grep Version | head -n 6 | tail -n 1 | sed 's/[^0-9.]*//g')" + expectedTeamID="9R6P9VZV27" + ;; microsoftautoupdate) name="Microsoft AutoUpdate" type="pkg" @@ -3774,16 +3915,6 @@ microsoftword) updateTool="/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/msupdate" updateToolArguments=( --install --apps MSWD2019 ) ;; -microsoftyammer) - name="Yammer" - type="dmg" - downloadURL="https://aka.ms/yammer_desktop_mac" - #appNewVersion=$(curl -fs https://macadmins.software/latest.xml | xpath '//latest/oldpackage[id="com.microsoft.yammer.standalone"]/cfbundleshortversionstring' 2>/dev/null | sed -E 's/<cfbundleshortversionstring>([0-9.]*)<.*/\1/') - appNewVersion=$(curl -fsIL "$downloadURL" | grep -i location: | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)\..*/\1/g') - expectedTeamID="UBF8T346G9" - #updateTool="/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/msupdate --list; /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/msupdate" - #updateToolArguments=( --install --apps ?????? ) - ;; mightymike) name="Mighty Mike" type="dmg" @@ -3905,6 +4036,14 @@ mochatn5250) appNewVersion="" expectedTeamID="RR9F5EPNVW" ;; +mongodbcompass) + name="MongoDB Compass" + type="dmg" + archiveName="mongodb-compass-[0-9.]*-darwin-x64.dmg" + downloadURL="$(downloadURLFromGit mongodb-js compass)" + appNewVersion="$(versionFromGit mongodb-js compass)" + expectedTeamID="4XWMY46275" + ;; montereyblocker) name="montereyblocker" type="pkg" @@ -3950,6 +4089,13 @@ netnewswire) appNewVersion=$(curl -fs https://ranchero.com/downloads/netnewswire-release.xml | xpath '//rss/channel/item[1]/enclosure/@sparkle:shortVersionString' 2>/dev/null | cut -d '"' -f 2) expectedTeamID="M8L2WTLA8W" ;; +netspot) + name="NetSpot" + type="dmg" + downloadURL="https://cdn.netspotapp.com/download/NetSpot.dmg" + appNewVersion=$(curl -fs "https://www.netspotapp.com/updates/netspot2-appcast.xml" | xpath '(//rss/channel/item/enclosure/@sparkle:version)' 2>/dev/null | cut -d '"' -f 2) + expectedTeamID="5QLDY8TU83" + ;; nextcloud) name="nextcloud" type="pkg" @@ -4131,8 +4277,8 @@ openvpnconnectv3) opera) name="Opera" type="dmg" - downloadURL=$(curl -fsIL "$(curl -fs "$(curl -fsIL "https://download.opera.com/download/get/?partner=www&opsys=MacOS" | grep -i "^location" | cut -d " " -f2 | tail -1 | tr -d '\r')" | grep download.opera.com | grep -io "https.*yes" | sed 's/\&/\&/g')" | grep -i "^location" | cut -d " " -f2 | tr -d '\r') - appNewVersion="$(curl -fs "https://get.geo.opera.com/ftp/pub/opera/desktop/" | grep "href=\"\d" | sort -V | tail -1 | tr '"' '\n' | grep "/" | head -1 | tr -d '/')" + downloadURL="$(curl -fsIL "$(curl -fs "$(curl -fsL "https://download.opera.com/download/get/?partner=www&opsys=MacOS" | tr '"' "\n" | grep -e "www.opera.com.*thanks.*opera" | sed 's/\&\;/\&/g')" | tr '"' "\n" | grep "download.opera.com" | sed 's/\&\;/\&/g')" | grep -i "^location" | grep -io "https.*dmg")" + appNewVersion="$(printf "$downloadURL" | sed -E 's/https.*\/([0-9.]*)\/mac\/.*/\1/')" versionKey="CFBundleVersion" expectedTeamID="A2P9LX4JPN" ;; @@ -4378,6 +4524,13 @@ redeye) appNewVersion=$( curl -fs "https://www.hexedbits.com/redeye/" | grep "Latest version" | sed -E 's/.*Latest version ([0-9.]*),.*/\1/g' ) expectedTeamID="5VRJU68BZ5" ;; +relatel) + name="Relatel" + type="dmg" + downloadURL="https://cdn.rela.tel/www/public/junotron/Relatel.dmg" + appNewVersion="$(curl -fs "https://cdn.firmafon.dk/www/public/junotron/latest-mac.yml" | grep -i "version" | cut -w -f2)" + expectedTeamID="B9358QF55B" + ;; remotedesktopmanagerenterprise) name="Remote Desktop Manager" type="dmg" @@ -4393,21 +4546,6 @@ remotedesktopmanagerfree) appNewVersion=$(echo "$downloadURL" | sed -E 's/.*\.Mac\.([0-9.]*)\.dmg/\1/g') expectedTeamID="N592S9ASDB" ;; -remotix) - name="Remotix" - type="dmg" - downloadURL="https://remotix.com/downloads/latest-remotix-mac/" - appNewVersion=$( curl -fsIL "${downloadURL}" | grep -i "^location" | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)-.*\.dmg/\1/g' ) - expectedTeamID="K293Y6CVN4" - ;; -remotixagent) - name="RemotixAgent" - type="pkg" - packageID="com.nulana.rxagentmac" - downloadURL="https://remotix.com/downloads/latest-agent-mac/" - appNewVersion=$( curl -fsIL "${downloadURL}" | grep -i "^location" | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)-.*\.pkg/\1/g' ) - expectedTeamID="K293Y6CVN4" - ;; resiliosynchome) name="Resilio Sync" type="dmg" @@ -4700,6 +4838,13 @@ snapgeneviewer) appNewVersion=$( curl -fsIL "${downloadURL}" | grep -i "^location" | awk '{print $2}' | tr '/' '\n' | grep -i "dmg" | sed -E 's/[a-zA-Z_]*_([0-9.]*)_mac\.dmg/\1/g' ) expectedTeamID="WVCV9Q8Y78" ;; +sonicvisualiser) + name="Sonic Visualiser" + type="dmg" + downloadURL="$(downloadURLFromGit sonic-visualiser sonic-visualiser)" + appNewVersion="$(versionFromGit sonic-visualiser sonic-visualiser)" + expectedTeamID="73F996B92S" + ;; sonobus) name="Sonobus" type="pkgInDmg" @@ -4768,6 +4913,15 @@ steelseriesengine) appNewVersion="$(curl -fsIL "$downloadURL" | grep -i "^location" | sed -E 's/.*SteelSeriesGG([0-9.]*)\.pkg/\1/')" expectedTeamID="6WGL6CHFH2" ;; +strongdm) + name="strongDM" + type="dmg" + downloadURL="https://app.strongdm.com/downloads/client/darwin" + appNewVersion=$(curl -fsLIXGET "https://app.strongdm.com/downloads/client/darwin" | grep -i "^content-disposition" | sed -e 's/.*filename\=\"SDM\-\(.*\)\.dmg\".*/\1/') + appName="SDM.app" + blockingProcesses=( "SDM" ) + expectedTeamID="W5HSYBBJGA" + ;; strongsync) name="Strongsync" type="dmg" @@ -4803,8 +4957,7 @@ supportapp) downloadURL=$(downloadURLFromGit root3nl SupportApp) appNewVersion=$(versionFromGit root3nl SupportApp) expectedTeamID="98LJ4XBGYK" - uid=$(id -u "$currentUser") - launchctl bootout gui/${uid} "/Library/LaunchAgents/nl.root3.support.plist" + blockingProcesses=( NONE ) ;; suspiciouspackage) # credit: Mischa van der Bent (@mischavdbent) @@ -4828,6 +4981,22 @@ sync) appNewVersion="$(curl -fs "https://www.sync.com/blog/category/desktop/feed/" | xpath '(//channel/item/title)[1]' 2>/dev/null | sed -E 's/^.* ([0-9.]*) .*$/\1/g')" expectedTeamID="7QR39CMJ3W" ;; +synologyassistant) + name="SynologyAssistant" + type="dmg" + packageID="com.synology.DSAssistant" + appNewVersion="$(curl -sf https://archive.synology.com/download/Utility/Assistant | grep -m 1 /download/Utility/Assistant/ | sed "s|.*>\(.*\)<.*|\\1|")" + downloadURL="https://global.download.synology.com/download/Utility/Assistant/${appNewVersion}/Mac/synology-assistant-${appNewVersion}.dmg" + expectedTeamID="X85BAK35Y4" + ;; +synologydriveclient) + name="Synology Drive Client" + type="pkgInDmg" + packageID="com.synology.CloudStation" + downloadURL=$(appVersion=`curl -sf https://archive.synology.com/download/Utility/SynologyDriveClient | grep -m 1 /download/Utility/SynologyDriveClient/ | sed "s|.*>\(.*\)<.*|\\1|"` && appShortVersion=`sed 's#.*-\(\)#\1#' <<< $appVersion` && echo https://global.download.synology.com/download/Utility/SynologyDriveClient/"$appVersion"/Mac/Installer/synology-drive-client-"${appShortVersion}".dmg) + appNewVersion=$(appVersionP1=`curl -sf https://archive.synology.com/download/Utility/SynologyDriveClient | grep -m 1 /download/Utility/SynologyDriveClient/ | sed "s|.*>\(.*\)-.*|\\1|"` && sed 's/\(.\{0\}\)./\17/' <<< $appVersionP1) + expectedTeamID="X85BAK35Y4" + ;; tableaudesktop) name="Tableau Desktop" type="pkgInDmg" @@ -4928,6 +5097,21 @@ tembo) appNewVersion="$(curl -fs https://www.houdah.com/tembo/updates/cast2.xml | xpath '(//rss/channel/item/enclosure/@sparkle:shortVersionString)[1]' 2>/dev/null | head -1 | cut -d '"' -f 2)" expectedTeamID="DKGQD8H8ZY" ;; +tencentmeeting) + name="TencentMeeting" + type="dmg" + if [[ $(arch) == "arm64" ]]; then + downloadURL="$(curl -fs 'https://meeting.tencent.com/web-service/query-download-info?q=%5B%7B%22package-type%22%3A%22app%22%2C%22channel%22%3A%220300000000%22%2C%22platform%22%3A%22mac%22%2C%22arch%22%3A%22arm64%22%7D%5D&c_os=web&c_os_version=1&c_os_model=web&c_timestamp=1653366550252&c_instance_id=5&c_nonce=DcaDam4y&c_app_id=1400143280&c_app_version=1&c_lang=zh-cn&c_district=0&nonce=miwSceJNQaSZttma' -H 'authority: meeting.tencent.com' -H 'referer: https://meeting.tencent.com/download-mac.html?from=1000&fromSource=1&macType=apple' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15' | grep -o "https://updatecdn.meeting.qq.com[^']*\.publish.arm64.dmg")" + appNewVersion=$(curl -fs 'https://meeting.tencent.com/web-service/query-download-info?q=%5B%7B%22package-type%22%3A%22app%22%2C%22channel%22%3A%220300000000%22%2C%22platform%22%3A%22mac%22%2C%22arch%22%3A%22arm64%22%7D%5D&c_os=web&c_os_version=1&c_os_model=web&c_timestamp=1653366550252&c_instance_id=5&c_nonce=DcaDam4y&c_app_id=1400143280&c_app_version=1&c_lang=zh-cn&c_district=0&nonce=miwSceJNQaSZttma' -H 'authority: meeting.tencent.com' -H 'referer: https://meeting.tencent.com/download-mac.html?from=1000&fromSource=1&macType=apple' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15' | grep -o "https://updatecdn.meeting.qq.com[^']*\.publish.arm64.dmg" | sed -e 's/.*TencentMeeting\_0300000000\_\(.*\)\.publish\.arm64\.dmg.*/\1/') + elif [[ $(arch) == "i386" ]]; then + downloadURL="$(curl -fs 'https://meeting.tencent.com/web-service/query-download-info?q=%5B%7B%22package-type%22%3A%22app%22%2C%22channel%22%3A%220300000000%22%2C%22platform%22%3A%22mac%22%2C%22arch%22%3A%22x86_64%22%7D%5D&c_os=web&c_os_version=1&c_os_model=web&c_timestamp=1653366500890&c_instance_id=5&c_nonce=jA4P4JPY&c_app_id=1400143280&c_app_version=1&c_lang=zh-cn&c_district=0&nonce=tF6Bm4FYHJwdPeGH' -H 'authority: meeting.tencent.com' -H 'referer: https://meeting.tencent.com/download-mac.html?from=1000&fromSource=1' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15' | grep -o "https://updatecdn.meeting.qq.com[^']*\.publish.x86_64.dmg")" + appNewVersion=$(curl -fs 'https://meeting.tencent.com/web-service/query-download-info?q=%5B%7B%22package-type%22%3A%22app%22%2C%22channel%22%3A%220300000000%22%2C%22platform%22%3A%22mac%22%2C%22arch%22%3A%22x86_64%22%7D%5D&c_os=web&c_os_version=1&c_os_model=web&c_timestamp=1653366500890&c_instance_id=5&c_nonce=jA4P4JPY&c_app_id=1400143280&c_app_version=1&c_lang=zh-cn&c_district=0&nonce=tF6Bm4FYHJwdPeGH' -H 'authority: meeting.tencent.com' -H 'referer: https://meeting.tencent.com/download-mac.html?from=1000&fromSource=1' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15' | grep -o "https://updatecdn.meeting.qq.com[^']*\.publish.x86_64.dmg" | sed -e 's/.*TencentMeeting\_0300000000\_\(.*\)\.publish\.x86_64\.dmg.*/\1/') + fi + curlOptions=( -H "User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15" ) + appCustomVersion() { echo "$(defaults read /Applications/TencentMeeting.app/Contents/Info.plist CFBundleShortVersionString)$(echo ".")$(defaults read /Applications/TencentMeeting.app/Contents/Info.plist CFBundleVersion)" } + expectedTeamID="88L2Q4487U" + ;; + textexpander) name="TextExpander" type="dmg" @@ -5038,6 +5222,13 @@ tunnelblick) downloadURL=$(downloadURLFromGit TunnelBlick Tunnelblick ) expectedTeamID="Z2SG5H3HC8" ;; +typinator) + name="Typinator" + type="zip" + downloadURL=https://update.ergonis.com/downloads/products/typinator/Typinator.app.zip + appNewVersion="$(curl -fs https://update.ergonis.com/vck/typinator.xml | grep -i Program_Version | sed "s|.*>\(.*\)<.*|\\1|")" + expectedTeamID="TU7D9Y7GTQ" + ;; typora) name="Typora" type="dmg" @@ -5231,22 +5422,6 @@ whatsapp) downloadURL="https://web.whatsapp.com/desktop/mac/files/WhatsApp.dmg" expectedTeamID="57T9237FN3" ;; -wickrme) - # credit: Søren Theilgaard (@theilgaard) - name="WickrMe" - type="dmg" - downloadURL=$( curl -fs https://me-download.wickr.com/api/download/me/download/mac | tr '"' '\n' | grep -e '^https://' ) - appNewVersion=$( echo ${downloadURL} | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)\..*/\1/g' ) - expectedTeamID="W8RC3R952A" - ;; -wickrpro) - # credit: Søren Theilgaard (@theilgaard) - name="WickrPro" - type="dmg" - downloadURL=$( curl -fs https://me-download.wickr.com/api/download/pro/download/mac | tr '"' '\n' | grep -e '^https://' ) - appNewVersion=$( echo ${downloadURL} | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)\..*/\1/g' ) - expectedTeamID="W8RC3R952A" - ;; wireshark) name="Wireshark" type="dmg" @@ -5274,6 +5449,17 @@ wwdc) appNewVersion=$(versionFromGit insidegui WWDC) expectedTeamID="8C7439RJLG" ;; +xcreds) + name="XCreds" + #type="pkgInZip" + #packageID="com.twocanoes.pkg.secureremoteaccess" + #downloadURL=$(curl -fs "https://twocanoes.com/products/mac/xcreds/" | grep -ioE "https://.*\.zip" | head -1) + #appNewVersion=$(curl -fs "https://twocanoes.com/products/mac/xcreds/" | grep -io "Current Version:.*" | sed -E 's/.*XCreds *([0-9.]*)<.*/\1/g') + type="pkg" + downloadURL="$(downloadURLFromGit twocanoes xcreds)" + appNewVersion="$(versionFromGit twocanoes xcreds)" + expectedTeamID="UXP6YEHSPW" + ;; xeroxphaser7800) name="XeroxPhaser" type="pkgInDmg" @@ -5493,6 +5679,29 @@ fi # MARK: application download and installation starts here +# Debug output of all variables in a label +printlog "name=${name}" DEBUG +printlog "appName=${appName}" DEBUG +printlog "type=${type}" DEBUG +printlog "archiveName=${archiveName}" DEBUG +printlog "downloadURL=${downloadURL}" DEBUG +printlog "curlOptions=${curlOptions}" DEBUG +printlog "appNewVersion=${appNewVersion}" DEBUG +printlog "appCustomVersion function: $(if type 'appCustomVersion' 2>/dev/null | grep -q 'function'; then echo "Defined. ${appCustomVersion}"; else; echo "Not defined"; fi)" DEBUG +printlog "versionKey=${versionKey}" DEBUG +printlog "packageID=${packageID}" DEBUG +printlog "pkgName=${pkgName}" DEBUG +printlog "choiceChangesXML=${choiceChangesXML}" DEBUG +printlog "expectedTeamID=${expectedTeamID}" DEBUG +printlog "blockingProcesses=${blockingProcesses}" DEBUG +printlog "installerTool=${installerTool}" DEBUG +printlog "CLIInstaller=${CLIInstaller}" DEBUG +printlog "CLIArguments=${CLIArguments}" DEBUG +printlog "updateTool=${updateTool}" DEBUG +printlog "updateToolArguments=${updateToolArguments}" DEBUG +printlog "updateToolRunAsCurrentUser=${updateToolRunAsCurrentUser}" DEBUG +#printlog "Company=${Company}" DEBUG # Not used + if [[ ${INTERRUPT_DND} = "no" ]]; then # Check if a fullscreen app is active if hasDisplaySleepAssertion; then @@ -5538,6 +5747,11 @@ case $LOGO in LOGO="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns" if [[ -z $MDMProfileName ]]; then; MDMProfileName="Management Profile"; fi ;; + ws1) + # Workspace ONE (AirWatch) + LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns" + if [[ -z $MDMProfileName ]]; then; MDMProfileName="Device Manager"; fi + ;; esac if [[ ! -a "${LOGO}" ]]; then if [[ $(sw_vers -buildVersion) > "19" ]]; then @@ -5553,7 +5767,7 @@ printlog "Label type: $type" INFO # MARK: extract info from data if [ -z "$archiveName" ]; then case $type in - dmg|pkg|zip|tbz) + dmg|pkg|zip|tbz|bz2) archiveName="${name}.$type" ;; pkgInDmg) @@ -5579,7 +5793,7 @@ fi if [ -z "$targetDir" ]; then case $type in - dmg|zip|tbz|app*) + dmg|zip|tbz|bz2|app*) targetDir="/Applications" ;; pkg*) @@ -5760,7 +5974,7 @@ case $type in zip) installFromZIP ;; - tbz) + tbz|bz2) installFromTBZ ;; pkgInDmg) diff --git a/Labels.txt b/Labels.txt index 26072be..c0de3d3 100644 --- a/Labels.txt +++ b/Labels.txt @@ -3,7 +3,10 @@ 1passwordcli 4kvideodownloader 8x8 +abetterfinderrename11 abstract +acroniscyberprotectconnect +acroniscyberprotectconnectagent adobebrackets adobeconnect adobecreativeclouddesktop @@ -72,6 +75,7 @@ camtasia2019 camtasia2020 camtasia2021 canva +carboncopycloner chatwork cisdem-documentreader citrixworkspace @@ -82,12 +86,15 @@ closeio cloudya clue cluefull +cocoapods +coconutbattery code42 coderunner colourcontrastanalyser cormorant craftmanager craftmanagerforsketch +cricutdesignspace cryptomator cyberduck daisydisk @@ -112,6 +119,7 @@ drift dropbox duckduckgo duodevicehealth +dynalist easeusdatarecoverywizard easyfind egnyte @@ -126,6 +134,7 @@ exifrenamer fantastical fastscripts favro +fellow ferdi figma filezilla @@ -138,6 +147,7 @@ firefoxesr_intl firefoxesrpkg firefoxpkg firefoxpkg_intl +flexoptixapp flowjo flux flycut @@ -147,6 +157,7 @@ fsmonitor gimp githubdesktop golang +googleadseditor googlechrome googlechromeenterprise googlechromepkg @@ -207,6 +218,7 @@ jetbrainswebstorm kap karabinerelements keepassxc +keepingyouawake keka keybase keyboardmaestro @@ -216,6 +228,7 @@ krisp krita lastpass launchbar +lcadvancedvpnclient lexarrecoverytool libreoffice linear @@ -235,8 +248,10 @@ malwarebytes marathon marathon2 marathoninfinity +masv mattermost menumeters +merlinproject microsoftautoupdate microsoftazuredatastudio microsoftazurestorageexplorer @@ -260,7 +275,6 @@ microsoftskypeforbusiness microsoftteams microsoftvisualstudiocode microsoftword -microsoftyammer mightymike mindmanager miro @@ -271,12 +285,14 @@ mochatelnet mochatn3270 mochatn3812 mochatn5250 +mongodbcompass montereyblocker mowgliiitsycal musescore muzzle nanosaur netnewswire +netspot nextcloud nomad nomadlogin @@ -333,6 +349,7 @@ ramboxce rancherdesktop rectangle redeye +relatel remotedesktopmanagerenterprise remotedesktopmanagerfree remotix @@ -377,6 +394,7 @@ snagit2020 snagit2021 snagit2022 snapgeneviewer +sonicvisualiser sonobus sonos sonoss1 @@ -387,6 +405,7 @@ spotify sqlpropostgres sqlprostudio steelseriesengine +strongdm strongsync sublimetext superhuman @@ -395,6 +414,8 @@ suspiciouspackage swiftdialog swiftruntimeforcommandlinetools sync +synologyassistant +synologydriveclient tableaudesktop tableaupublic tableaureader @@ -408,6 +429,7 @@ teamviewerqs techsmithcapture telegram tembo +tencentmeeting textexpander textmate theunarchiver @@ -421,6 +443,7 @@ torbrowser trex tunnelbear tunnelblick +typinator typora ultimakercura umbrellaroamingclient @@ -447,11 +470,10 @@ webexteams wechat whatroute whatsapp -wickrme -wickrpro wireshark wordservice wwdc +xcreds xeroxphaser7800 xeroxworkcentre7800 xink From 0c4d7b0c56176b14e0b458f7176180a3382612c9 Mon Sep 17 00:00:00 2001 From: Armin Briegel <1933192+scriptingosx@users.noreply.github.com> Date: Fri, 2 Sep 2022 15:22:35 +0200 Subject: [PATCH 160/209] Update version.sh --- fragments/version.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/version.sh b/fragments/version.sh index 0525adb..a243768 100644 --- a/fragments/version.sh +++ b/fragments/version.sh @@ -1 +1 @@ -10.0beta2 +10.0beta3 From 7239ec454a591490154ffedb9716f1ce6871053a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st-2.local> Date: Mon, 5 Sep 2022 10:04:33 +0200 Subject: [PATCH 161/209] Change `appNewVersion` MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit GitHub tag contain “_” and not “.” so our function fails to get the right version, so isolating it out from the `downloadURL`. --- fragments/labels/xcreds.sh | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/fragments/labels/xcreds.sh b/fragments/labels/xcreds.sh index 4035dd4..5422f1f 100644 --- a/fragments/labels/xcreds.sh +++ b/fragments/labels/xcreds.sh @@ -1,11 +1,11 @@ xcreds) name="XCreds" - #type="pkgInZip" + type="pkg" #packageID="com.twocanoes.pkg.secureremoteaccess" #downloadURL=$(curl -fs "https://twocanoes.com/products/mac/xcreds/" | grep -ioE "https://.*\.zip" | head -1) #appNewVersion=$(curl -fs "https://twocanoes.com/products/mac/xcreds/" | grep -io "Current Version:.*" | sed -E 's/.*XCreds *([0-9.]*)<.*/\1/g') - type="pkg" downloadURL="$(downloadURLFromGit twocanoes xcreds)" - appNewVersion="$(versionFromGit twocanoes xcreds)" + #appNewVersion="$(versionFromGit twocanoes xcreds)" # GitHub tag contain “_” and not “.” so our function fails to get the right version + appNewVersion=$(echo "$downloadURL" | sed -E 's/.*XCreds_.*-([0-9.]*)\.pkg/\1/') expectedTeamID="UXP6YEHSPW" ;; From 776c955cddbf4a634594670c901151ce60d0e655 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st-2.local> Date: Mon, 5 Sep 2022 10:17:09 +0200 Subject: [PATCH 162/209] Comments to label --- fragments/labels/xcreds.sh | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/fragments/labels/xcreds.sh b/fragments/labels/xcreds.sh index 5422f1f..8a71fd0 100644 --- a/fragments/labels/xcreds.sh +++ b/fragments/labels/xcreds.sh @@ -1,9 +1,12 @@ xcreds) name="XCreds" - type="pkg" + # Downloading from twocanoes homepage + #type="pkgInDmg" #packageID="com.twocanoes.pkg.secureremoteaccess" #downloadURL=$(curl -fs "https://twocanoes.com/products/mac/xcreds/" | grep -ioE "https://.*\.zip" | head -1) #appNewVersion=$(curl -fs "https://twocanoes.com/products/mac/xcreds/" | grep -io "Current Version:.*" | sed -E 's/.*XCreds *([0-9.]*)<.*/\1/g') + # GitHub download + type="pkg" downloadURL="$(downloadURLFromGit twocanoes xcreds)" #appNewVersion="$(versionFromGit twocanoes xcreds)" # GitHub tag contain “_” and not “.” so our function fails to get the right version appNewVersion=$(echo "$downloadURL" | sed -E 's/.*XCreds_.*-([0-9.]*)\.pkg/\1/') From 527490e72f7bb8e8d75e2d5fc4b557feb9d33aa5 Mon Sep 17 00:00:00 2001 From: Fredrik Larsson <fredrik.larsson@uu.se> Date: Mon, 12 Sep 2022 14:51:56 +0200 Subject: [PATCH 163/209] New Label: LaTeXiT 2022-09-12 14:49:00 : INFO : latexit : setting variable from argument NOTIFY=silent 2022-09-12 14:49:00 : INFO : latexit : setting variable from argument DEBUG=0 2022-09-12 14:49:00 : REQ : latexit : ################## Start Installomator v. 10.0beta3, date 2022-09-12 2022-09-12 14:49:00 : INFO : latexit : ################## Version: 10.0beta3 2022-09-12 14:49:00 : INFO : latexit : ################## Date: 2022-09-12 2022-09-12 14:49:00 : INFO : latexit : ################## latexit 2022-09-12 14:49:00 : INFO : latexit : SwiftDialog is not installed, clear cmd file var 2022-09-12 14:49:01 : INFO : latexit : BLOCKING_PROCESS_ACTION=tell_user 2022-09-12 14:49:01 : INFO : latexit : NOTIFY=silent 2022-09-12 14:49:01 : INFO : latexit : LOGGING=INFO 2022-09-12 14:49:01 : INFO : latexit : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-09-12 14:49:01 : INFO : latexit : Label type: dmg 2022-09-12 14:49:01 : INFO : latexit : archiveName: LaTeXiT.dmg 2022-09-12 14:49:01 : INFO : latexit : no blocking processes defined, using LaTeXiT as default 2022-09-12 14:49:01 : INFO : latexit : name: LaTeXiT, appName: LaTeXiT.app 2022-09-12 14:49:01 : WARN : latexit : No previous app found 2022-09-12 14:49:01 : WARN : latexit : could not find LaTeXiT.app 2022-09-12 14:49:01 : INFO : latexit : appversion: 2022-09-12 14:49:01 : INFO : latexit : Latest version of LaTeXiT is 2.16.4 2022-09-12 14:49:01 : REQ : latexit : Downloading https://pierre.chachatelier.fr/latexit/downloads/LaTeXiT-2_16_4.dmg to LaTeXiT.dmg 2022-09-12 14:49:03 : REQ : latexit : no more blocking processes, continue with update 2022-09-12 14:49:04 : REQ : latexit : Installing LaTeXiT 2022-09-12 14:49:04 : INFO : latexit : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.p6c9hBly/LaTeXiT.dmg 2022-09-12 14:49:07 : INFO : latexit : Mounted: /Volumes/LaTeXiT 2.16.4 1 2022-09-12 14:49:07 : INFO : latexit : Verifying: /Volumes/LaTeXiT 2.16.4 1/LaTeXiT.app 2022-09-12 14:49:08 : INFO : latexit : Team ID matching: 7SFX84GNR7 (expected: 7SFX84GNR7 ) 2022-09-12 14:49:08 : INFO : latexit : Installing LaTeXiT version 2.16.4 on versionKey CFBundleShortVersionString. 2022-09-12 14:49:08 : INFO : latexit : App has LSMinimumSystemVersion: 10.9 2022-09-12 14:49:08 : INFO : latexit : Copy /Volumes/LaTeXiT 2.16.4 1/LaTeXiT.app to /Applications 2022-09-12 14:49:12 : WARN : latexit : Changing owner to kryptonit 2022-09-12 14:49:13 : INFO : latexit : Finishing... 2022-09-12 14:49:16 : INFO : latexit : App(s) found: /Applications/LaTeXiT.app 2022-09-12 14:49:16 : INFO : latexit : found app at /Applications/LaTeXiT.app, version 2.16.4, on versionKey CFBundleShortVersionString 2022-09-12 14:49:16 : REQ : latexit : Installed LaTeXiT, version 2.16.4 2022-09-12 14:49:16 : INFO : latexit : App not closed, so no reopen. 2022-09-12 14:49:16 : REQ : latexit : All done! 2022-09-12 14:49:16 : REQ : latexit : ################## End Installomator, exit code 0 --- fragments/labels/latexit.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/latexit.sh diff --git a/fragments/labels/latexit.sh b/fragments/labels/latexit.sh new file mode 100644 index 0000000..c6a91f9 --- /dev/null +++ b/fragments/labels/latexit.sh @@ -0,0 +1,7 @@ +latexit) + name="LaTeXiT" + type="dmg" + downloadURL="$(curl -fs "https://pierre.chachatelier.fr/latexit/downloads/latexit-sparkle-en.rss" | xpath '(//rss/channel/item/enclosure/@url)[last()]' 2>/dev/null | cut -d '"' -f 2)" + appNewVersion="$(curl -fs "https://pierre.chachatelier.fr/latexit/downloads/latexit-sparkle-en.rss" | xpath '(//rss/channel/item/enclosure/@sparkle:shortVersionString)[last()]' 2>/dev/null | cut -d '"' -f 2)" + expectedTeamID="7SFX84GNR7" + ;; From 22170a89ae5411030b3c664d20921de299ab91a6 Mon Sep 17 00:00:00 2001 From: Adam Codega <acodega@users.noreply.github.com> Date: Mon, 12 Sep 2022 12:37:11 -0400 Subject: [PATCH 164/209] Swap Adobe URL parsing filter The filters for ARM and Intel were swapped by accident, this correctly returns the ARM URL for ARM and Intel URL for Intel. --- fragments/labels/adobecreativeclouddesktop.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/fragments/labels/adobecreativeclouddesktop.sh b/fragments/labels/adobecreativeclouddesktop.sh index 95582db..54eabdb 100644 --- a/fragments/labels/adobecreativeclouddesktop.sh +++ b/fragments/labels/adobecreativeclouddesktop.sh @@ -4,9 +4,9 @@ adobecreativeclouddesktop) type="dmg" adobeurl="https://helpx.adobe.com/download-install/kb/creative-cloud-desktop-app-download.html" if [[ $(arch) == "arm64" ]]; then - downloadURL=$(curl -fs "$adobeurl" | xmllint -html -xpath "string(//a[contains(@href,'osx10')][contains(text(),'Download')]/@href)" - 2> /dev/null) - elif [[ $(arch) == "i386" ]]; then downloadURL=$(curl -fs "$adobeurl" | xmllint -html -xpath "string(//a[contains(@href,'macarm64')][contains(text(),'Download')]/@href)" - 2> /dev/null) + elif [[ $(arch) == "i386" ]]; then + downloadURL=$(curl -fs "$adobeurl" | xmllint -html -xpath "string(//a[contains(@href,'osx10')][contains(text(),'Download')]/@href)" - 2> /dev/null) fi #downloadURL=$(curl -fs "https://helpx.adobe.com/download-install/kb/creative-cloud-desktop-app-download.html" | grep -o "https*.*dmg" | head -1) appNewVersion=$(curl -fs "https://helpx.adobe.com/creative-cloud/release-note/cc-release-notes.html" | grep "mandatory" | head -1 | grep -o "Version *.* released" | cut -d " " -f2) From cd2637d30f417bf9043310c1619465042e47a3c2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B8ren=20Theilgaard?= <st@ENVO-st-2.local> Date: Tue, 13 Sep 2022 09:05:04 +0200 Subject: [PATCH 165/209] =?UTF-8?q?Verify=20for=20=E2=80=9CAdobe=20Install?= =?UTF-8?q?er=E2=80=9D=20before=20running?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Also added another option for getting current version that we could consider using. Removed some old stuff already commented out. --- fragments/labels/adobecreativeclouddesktop.sh | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/fragments/labels/adobecreativeclouddesktop.sh b/fragments/labels/adobecreativeclouddesktop.sh index 54eabdb..c83da57 100644 --- a/fragments/labels/adobecreativeclouddesktop.sh +++ b/fragments/labels/adobecreativeclouddesktop.sh @@ -1,15 +1,19 @@ adobecreativeclouddesktop) name="Adobe Creative Cloud" - #appName="Install.app" type="dmg" + if pgrep -q "Adobe Installer"; then + printlog "Adobe Installer is running, not a good time to update." WARN + printlog "################## End $APPLICATION \n\n" INFO + exit 75 + fi adobeurl="https://helpx.adobe.com/download-install/kb/creative-cloud-desktop-app-download.html" if [[ $(arch) == "arm64" ]]; then downloadURL=$(curl -fs "$adobeurl" | xmllint -html -xpath "string(//a[contains(@href,'macarm64')][contains(text(),'Download')]/@href)" - 2> /dev/null) elif [[ $(arch) == "i386" ]]; then downloadURL=$(curl -fs "$adobeurl" | xmllint -html -xpath "string(//a[contains(@href,'osx10')][contains(text(),'Download')]/@href)" - 2> /dev/null) fi - #downloadURL=$(curl -fs "https://helpx.adobe.com/download-install/kb/creative-cloud-desktop-app-download.html" | grep -o "https*.*dmg" | head -1) appNewVersion=$(curl -fs "https://helpx.adobe.com/creative-cloud/release-note/cc-release-notes.html" | grep "mandatory" | head -1 | grep -o "Version *.* released" | cut -d " " -f2) + #appNewVersion=$(echo "$downloadURL" | grep -o '[^x]*$' | cut -d '.' -f 1 | sed 's/_/\./g') installerTool="Install.app" CLIInstaller="Install.app/Contents/MacOS/Install" CLIArguments=(--mode=silent) From 4e003b22924e5dda27086362c341c3b8d2d89c8b Mon Sep 17 00:00:00 2001 From: Fredrik Larsson <fredrik.larsson@uu.se> Date: Tue, 13 Sep 2022 11:29:16 +0200 Subject: [PATCH 166/209] New Label: Cytoscape 2022-09-13 11:18:47 : REQ : cytoscape : ################## Start Installomator v. 10.0beta3, date 2022-09-13 2022-09-13 11:18:47 : INFO : cytoscape : ################## Version: 10.0beta3 2022-09-13 11:18:47 : INFO : cytoscape : ################## Date: 2022-09-13 2022-09-13 11:18:47 : INFO : cytoscape : ################## cytoscape 2022-09-13 11:18:47 : INFO : cytoscape : SwiftDialog is not installed, clear cmd file var 2022-09-13 11:18:49 : INFO : cytoscape : BLOCKING_PROCESS_ACTION=tell_user 2022-09-13 11:18:49 : INFO : cytoscape : NOTIFY=success 2022-09-13 11:18:50 : INFO : cytoscape : LOGGING=INFO 2022-09-13 11:18:50 : INFO : cytoscape : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-09-13 11:18:50 : INFO : cytoscape : Label type: dmg 2022-09-13 11:18:50 : INFO : cytoscape : archiveName: Cytoscape.dmg 2022-09-13 11:18:50 : INFO : cytoscape : no blocking processes defined, using Cytoscape as default 2022-09-13 11:18:50 : INFO : cytoscape : name: Cytoscape, appName: Cytoscape.app 2022-09-13 11:18:50 : WARN : cytoscape : No previous app found 2022-09-13 11:18:50 : WARN : cytoscape : could not find Cytoscape.app 2022-09-13 11:18:50 : INFO : cytoscape : appversion: 2022-09-13 11:18:50 : INFO : cytoscape : Latest version of Cytoscape is 3.9.1 2022-09-13 11:18:50 : REQ : cytoscape : Downloading https://github.com/cytoscape/cytoscape/releases/download/3.9.1/Cytoscape_3_9_1_macos.dmg to Cytoscape.dmg 2022-09-13 11:19:12 : REQ : cytoscape : no more blocking processes, continue with update 2022-09-13 11:19:12 : REQ : cytoscape : Installing Cytoscape 2022-09-13 11:19:12 : REQ : cytoscape : installerTool used: Cytoscape Installer.app 2022-09-13 11:19:12 : INFO : cytoscape : Mounting /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/tmp.zwfhpav8/Cytoscape.dmg 2022-09-13 11:19:13 : INFO : cytoscape : Mounted: /Volumes/Cytoscape 1 2022-09-13 11:19:13 : INFO : cytoscape : Verifying: /Volumes/Cytoscape 1/Cytoscape Installer.app 2022-09-13 11:19:14 : INFO : cytoscape : Team ID matching: 35LDCJ33QT (expected: 35LDCJ33QT ) 2022-09-13 11:19:14 : INFO : cytoscape : Installing Cytoscape version 3.9.1 on versionKey CFBundleShortVersionString. 2022-09-13 11:19:14 : INFO : cytoscape : App has LSMinimumSystemVersion: 10.7.3 2022-09-13 11:19:14 : INFO : cytoscape : CLIInstaller exists, running installer command /Volumes/Cytoscape 1/Cytoscape Installer.app/Contents/MacOS/JavaApplicationStub -q 2022-09-13 11:19:49 : INFO : cytoscape : Succesfully ran /Volumes/Cytoscape 1/Cytoscape Installer.app/Contents/MacOS/JavaApplicationStub -q 2022-09-13 11:19:49 : INFO : cytoscape : Finishing... 2022-09-13 11:19:52 : INFO : cytoscape : name: Cytoscape, appName: Cytoscape Installer.app 2022-09-13 11:19:52 : INFO : cytoscape : App(s) found: /Applications/Cytoscape_v3.9.1/Cytoscape Uninstaller.app/Applications/Cytoscape_v3.9.1/Cytoscape.app 2022-09-13 11:19:52 : WARN : cytoscape : could not determine location of Cytoscape Installer.app 2022-09-13 11:19:52 : REQ : cytoscape : Installed Cytoscape 2022-09-13 11:19:52 : INFO : cytoscape : notifying 2022-09-13 11:19:53 : INFO : cytoscape : App not closed, so no reopen. 2022-09-13 11:19:53 : REQ : cytoscape : All done! 2022-09-13 11:19:53 : REQ : cytoscape : ################## End Installomator, exit code 0 --- fragments/labels/cytoscape.sh | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 fragments/labels/cytoscape.sh diff --git a/fragments/labels/cytoscape.sh b/fragments/labels/cytoscape.sh new file mode 100644 index 0000000..7b722ef --- /dev/null +++ b/fragments/labels/cytoscape.sh @@ -0,0 +1,11 @@ +cytoscape) + name="Cytoscape" + #appName="Cytoscape Installer.app" + type="dmg" + downloadURL="$(downloadURLFromGit cytoscape cytoscape)" + appNewVersion="$(versionFromGit cytoscape cytoscape)" + installerTool="Cytoscape Installer.app" + CLIInstaller="Cytoscape Installer.app/Contents/MacOS/JavaApplicationStub" + CLIArguments=(-q) + expectedTeamID="35LDCJ33QT" + ;; From 13d574bd0db749ca24c7eae7933c3f4a477e5a5f Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Wed, 14 Sep 2022 10:31:06 +0200 Subject: [PATCH 167/209] Create gfxcardstatus.sh MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Text run: ``` % utils/assemble.sh gfxcardstatus DEBUG=2 2022-09-14 10:26:07 : INFO : gfxcardstatus : setting variable from argument DEBUG=2 2022-09-14 10:26:07 : REQ : gfxcardstatus : ################## Start Installomator v. 10.0beta3, date 2022-09-14 2022-09-14 10:26:07 : INFO : gfxcardstatus : ################## Version: 10.0beta3 2022-09-14 10:26:07 : INFO : gfxcardstatus : ################## Date: 2022-09-14 2022-09-14 10:26:07 : INFO : gfxcardstatus : ################## gfxcardstatus 2022-09-14 10:26:07 : DEBUG : gfxcardstatus : DEBUG mode 2 enabled. 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : name=gfxCardStatus 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : appName= 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : type=zip 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : archiveName= 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : downloadURL=https://github.com/codykrieger/gfxCardStatus/releases/download/v2.5/gfxCardStatus-2.5.zip 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : curlOptions= 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : appNewVersion=2.5 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : appCustomVersion function: Not defined 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : versionKey=CFBundleShortVersionString 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : packageID= 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : pkgName= 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : choiceChangesXML= 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : expectedTeamID=LF22FTQC25 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : blockingProcesses= 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : installerTool= 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : CLIInstaller= 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : CLIArguments= 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : updateTool= 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : updateToolArguments= 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : updateToolRunAsCurrentUser= 2022-09-14 10:26:08 : INFO : gfxcardstatus : BLOCKING_PROCESS_ACTION=tell_user 2022-09-14 10:26:08 : INFO : gfxcardstatus : NOTIFY=success 2022-09-14 10:26:08 : INFO : gfxcardstatus : LOGGING=DEBUG 2022-09-14 10:26:08 : INFO : gfxcardstatus : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-09-14 10:26:08 : INFO : gfxcardstatus : Label type: zip 2022-09-14 10:26:08 : INFO : gfxcardstatus : archiveName: gfxCardStatus.zip 2022-09-14 10:26:08 : INFO : gfxcardstatus : no blocking processes defined, using gfxCardStatus as default 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : Changing directory to /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.cR1129g6 2022-09-14 10:26:08 : INFO : gfxcardstatus : name: gfxCardStatus, appName: gfxCardStatus.app 2022-09-14 10:26:08 : INFO : gfxcardstatus : App(s) found: /Users/st/Downloads/2022-09-14-10-21-02/gfxCardStatus.app 2022-09-14 10:26:08 : WARN : gfxcardstatus : could not determine location of gfxCardStatus.app 2022-09-14 10:26:08 : INFO : gfxcardstatus : appversion: 2022-09-14 10:26:08 : INFO : gfxcardstatus : Latest version of gfxCardStatus is 2.5 2022-09-14 10:26:08 : REQ : gfxcardstatus : Downloading https://github.com/codykrieger/gfxCardStatus/releases/download/v2.5/gfxCardStatus-2.5.zip to gfxCardStatus.zip 2022-09-14 10:26:08 : DEBUG : gfxcardstatus : No Dialog connection, just download 2022-09-14 10:26:10 : DEBUG : gfxcardstatus : File list: -rw-r--r-- 1 st staff 2,2M 14 Sep 10:26 gfxCardStatus.zip 2022-09-14 10:26:10 : DEBUG : gfxcardstatus : File type: gfxCardStatus.zip: Zip archive data, at least v1.0 to extract, compression method=store 2022-09-14 10:26:10 : DEBUG : gfxcardstatus : curl output was: * Trying 140.82.121.3:443... * Connected to github.com (140.82.121.3) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * CApath: none … * Connection #1 to host objects.githubusercontent.com left intact 2022-09-14 10:26:10 : REQ : gfxcardstatus : no more blocking processes, continue with update 2022-09-14 10:26:10 : REQ : gfxcardstatus : Installing gfxCardStatus 2022-09-14 10:26:10 : INFO : gfxcardstatus : Unzipping gfxCardStatus.zip 2022-09-14 10:26:10 : INFO : gfxcardstatus : Verifying: /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.cR1129g6/gfxCardStatus.app 2022-09-14 10:26:10 : DEBUG : gfxcardstatus : App size: 5,5M /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.cR1129g6/gfxCardStatus.app 2022-09-14 10:26:10 : DEBUG : gfxcardstatus : Debugging enabled, App Verification output was: /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.cR1129g6/gfxCardStatus.app: accepted source=Notarized Developer ID origin=Developer ID Application: Cody Krieger (LF22FTQC25) 2022-09-14 10:26:10 : INFO : gfxcardstatus : Team ID matching: LF22FTQC25 (expected: LF22FTQC25 ) 2022-09-14 10:26:10 : INFO : gfxcardstatus : Installing gfxCardStatus version 2.5 on versionKey CFBundleShortVersionString. 2022-09-14 10:26:10 : INFO : gfxcardstatus : App has LSMinimumSystemVersion: 10.9 2022-09-14 10:26:10 : DEBUG : gfxcardstatus : DEBUG mode 2 enabled, not installing anything, exiting 2022-09-14 10:26:10 : DEBUG : gfxcardstatus : Deleting /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.cR1129g6 2022-09-14 10:26:10 : DEBUG : gfxcardstatus : Debugging enabled, Deleting tmpDir output was: /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.cR1129g6/gfxCardStatus.app/Contents/CodeResources … 2022-09-14 10:26:10 : DEBUG : gfxcardstatus : /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.cR1129g6/gfxCardStatus.app 2022-09-14 10:26:10 : DEBUG : gfxcardstatus : /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.cR1129g6/gfxCardStatus.zip 2022-09-14 10:26:10 : DEBUG : gfxcardstatus : /var/folders/gy/vrjt7sl52t9ghzn1lnttjtg40000gp/T/tmp.cR1129g6 2022-09-14 10:26:11 : INFO : gfxcardstatus : App not closed, so no reopen. 2022-09-14 10:26:11 : INFO : gfxcardstatus : 2022-09-14 10:26:11 : REQ : gfxcardstatus : ################## End Installomator, exit code 0 ``` --- fragments/labels/gfxcardstatus.sh | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 fragments/labels/gfxcardstatus.sh diff --git a/fragments/labels/gfxcardstatus.sh b/fragments/labels/gfxcardstatus.sh new file mode 100644 index 0000000..84a3422 --- /dev/null +++ b/fragments/labels/gfxcardstatus.sh @@ -0,0 +1,7 @@ +gfxcardstatus) + name="gfxCardStatus" + type="zip" + downloadURL="$(downloadURLFromGit codykrieger gfxCardStatus)" + appNewVersion="$(versionFromGit codykrieger gfxCardStatus)" + expectedTeamID="LF22FTQC25" + ;; From 1412f86e69877fd668471616d26abce11769e193 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Wed, 14 Sep 2022 15:45:00 +0200 Subject: [PATCH 168/209] If GItHub does not give an URL we can fall back on API call Today something strange happened for Installomator on GitHub. Or latest release would spend too much time loading the assets, and would not return an URL, like here: ``` % gitusername="Installomator"; gitreponame="Installomator"; curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.pkg" | head -1 % gitusername="bartreardon"; gitreponame="swiftDialog"; curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.pkg" | head -1 /bartreardon/swiftDialog/releases/download/v1.11.2/dialog-1.11.2-3095.pkg ``` As can be seen above it worked for swiftDialog, but not for Installomator. Now we can fall back on the API call if we do not get the URL in first try. --- fragments/functions.sh | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index 0da3726..cec20b2 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -162,11 +162,17 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name fi if [ -n "$archiveName" ]; then - #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1) + if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then + printlog "Trying GitHub API for download URL." + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") + fi else - #downloadURL=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1) + if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then + printlog "Trying GitHub API for download URL." + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") + fi fi if [ -z "$downloadURL" ]; then cleanupAndExit 14 "could not retrieve download URL for $gitusername/$gitreponame" ERROR From e5d309a9d9ec8a000b920a2f4966f6b4b21b6df9 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Wed, 14 Sep 2022 16:19:57 +0200 Subject: [PATCH 169/209] Minor correction to the `if` statement --- fragments/functions.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index cec20b2..85a7902 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -163,7 +163,7 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name if [ -n "$archiveName" ]; then downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1) - if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then + if [[ "$(echo $downloadURL | grep -ioE "https.*$archiveName")" == "" ]]; then printlog "Trying GitHub API for download URL." downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") fi From a01bfd7dae9be201a20deb15be2d0aacd10f89d2 Mon Sep 17 00:00:00 2001 From: Fletcher Salesky <fletcher@salesky.dev> Date: Wed, 14 Sep 2022 16:25:56 -0700 Subject: [PATCH 170/209] Update obs.sh --- fragments/labels/obs.sh | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/fragments/labels/obs.sh b/fragments/labels/obs.sh index 4685446..d932046 100644 --- a/fragments/labels/obs.sh +++ b/fragments/labels/obs.sh @@ -1,7 +1,12 @@ obs) - # credit: Gabe Marchan (gabemarchan.com - @darklink87) name="OBS" type="dmg" - downloadURL=$(curl -fs "https://obsproject.com/download" | awk -F '"' "/dmg/ {print \$10}") + if [[ $(arch) == "arm64" ]]; then + archiveName="obs-studio-[0-9.]*-macos-arm64.dmg" + elif [[ $(arch) == "i386" ]]; then + archiveName="obs-studio-[0-9.]*-macos-x86_64.dmg" + fi + downloadURL=$(downloadURLFromGit obsproject obs-studio ) + appNewVersion=$(versionFromGit obsproject obs-studio ) expectedTeamID="2MMRE5MTB8" ;; From 57ed4e77f4ab197076c468ac114a2d9b4ab8aded Mon Sep 17 00:00:00 2001 From: Fletcher Salesky <fletcher@salesky.dev> Date: Wed, 14 Sep 2022 16:34:03 -0700 Subject: [PATCH 171/209] Move archiveName before downloadURL --- fragments/labels/nudge.sh | 3 ++- fragments/labels/nudgesuite.sh | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/fragments/labels/nudge.sh b/fragments/labels/nudge.sh index 804872d..aafacad 100644 --- a/fragments/labels/nudge.sh +++ b/fragments/labels/nudge.sh @@ -1,8 +1,9 @@ nudge) name="Nudge" type="pkg" + archiveName="Nudge-[0-9.]*.pkg" downloadURL=$(downloadURLFromGit macadmins Nudge ) appNewVersion=$(versionFromGit macadmins Nudge ) expectedTeamID="9GQZ7KUFR6" - archiveName="Nudge-[0-9.]*.pkg" + ;; diff --git a/fragments/labels/nudgesuite.sh b/fragments/labels/nudgesuite.sh index 1a50da1..698cf2e 100644 --- a/fragments/labels/nudgesuite.sh +++ b/fragments/labels/nudgesuite.sh @@ -2,9 +2,9 @@ nudgesuite) name="Nudge Suite" appName="Nudge.app" type="pkg" + archiveName="Nudge_Suite-[0-9.]*.pkg" downloadURL=$(downloadURLFromGit macadmins Nudge ) appNewVersion=$(versionFromGit macadmins Nudge ) expectedTeamID="9GQZ7KUFR6" blockingProcesses=( "Nudge" ) - archiveName="Nudge_Suite-[0-9.]*.pkg" ;; From 5a54cd92b650cd9d4502c7142ffad370190d2830 Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Sat, 17 Sep 2022 14:52:08 +0200 Subject: [PATCH 172/209] Label name changed to "parallelsrasclient" The name of the label has been changed from "rasclient" to "parallelsrasclient" --- fragments/labels/{rasclient.sh => parallelsrasclient sh} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename fragments/labels/{rasclient.sh => parallelsrasclient sh} (97%) diff --git a/fragments/labels/rasclient.sh b/fragments/labels/parallelsrasclient sh similarity index 97% rename from fragments/labels/rasclient.sh rename to fragments/labels/parallelsrasclient sh index 20d10dd..0aa5306 100644 --- a/fragments/labels/rasclient.sh +++ b/fragments/labels/parallelsrasclient sh @@ -1,4 +1,4 @@ -rasclient) +parallelsrasclient) name="Parallels Client" type="pkg" appNewVersion=$(curl -sf "https://download.parallels.com/ras/v18/RAS%20Client%20for%20Mac%20Changelog.txt" | grep -m 1 "Parallels Client for Mac Version" | sed "s|.*Version \(.*\) -.*|\\1|" | sed 's/ /./g' | sed 's/[^0-9.]//g') From b061f37924961e266c0e5fbedd0cc41abdedd600 Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Sat, 17 Sep 2022 14:57:15 +0200 Subject: [PATCH 173/209] Label name changed to "archiwareb2go" The name of the label has been changed from "awb2go" to "archiwareb2go" --- fragments/labels/{awb2go.sh => archiwareb2go.sh} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename fragments/labels/{awb2go.sh => archiwareb2go.sh} (97%) diff --git a/fragments/labels/awb2go.sh b/fragments/labels/archiwareb2go.sh similarity index 97% rename from fragments/labels/awb2go.sh rename to fragments/labels/archiwareb2go.sh index d626313..85f30a8 100644 --- a/fragments/labels/awb2go.sh +++ b/fragments/labels/archiwareb2go.sh @@ -1,4 +1,4 @@ -awb2go) +archiwareb2go) name="P5 Workstation" type="pkgInDmg" packageID="com.archiware.presstore" From 96380b2f274879ac64964605de5fd32d4ee3cf69 Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Sat, 17 Sep 2022 14:59:49 +0200 Subject: [PATCH 174/209] Label name changed to "archiwarepst" The name of the label has been changed from "awpst" to "archiwarepst" --- fragments/labels/{awpst.sh => archiwarepst.sh} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename fragments/labels/{awpst.sh => archiwarepst.sh} (97%) diff --git a/fragments/labels/awpst.sh b/fragments/labels/archiwarepst.sh similarity index 97% rename from fragments/labels/awpst.sh rename to fragments/labels/archiwarepst.sh index 876d176..9ce9b29 100644 --- a/fragments/labels/awpst.sh +++ b/fragments/labels/archiwarepst.sh @@ -1,4 +1,4 @@ -awpst) +archiwarepst) name="P5" type="pkgInDmg" packageID="com.archiware.presstore" From 6c829ed0d672f9a6c52b0f8fe2bd4c4b08a2c278 Mon Sep 17 00:00:00 2001 From: macmangr <106015597+macmangr@users.noreply.github.com> Date: Sat, 17 Sep 2022 16:53:15 +0200 Subject: [PATCH 175/209] Added architecture check and ARM version of Horos The developer has now also released an Apple Silicon version of the software, so a review of the processor and the appropriate download links have been added The expectedTeamID is now a variable because the Apple Silicon version of the app has a different TeamID --- fragments/labels/horos.sh | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/fragments/labels/horos.sh b/fragments/labels/horos.sh index 26b8523..96b70b0 100644 --- a/fragments/labels/horos.sh +++ b/fragments/labels/horos.sh @@ -3,6 +3,12 @@ horos) type="dmg" versionKey="CFBundleGetInfoString" appNewVersion=$(curl -fs https://github.com/horosproject/horos/blob/horos/Horos/Info.plist | grep -A 4 "CFBundleGetInfoString" | tail -1 | sed -r 's/.*Horos v([^<]+).*/\1/' | sed 's/ //g') - downloadURL="https://horosproject.org/horos-content/Horos"$appNewVersion".dmg" - expectedTeamID="TPT6TVH8UY" + if [[ $(arch) == "arm64" ]]; then + downloadURL="https://horosproject.org/horos-content/Horos"$appNewVersion"_Apple.dmg" + TeamID="8NDFEW7285" + elif [[ $(arch) == "i386" ]]; then + downloadURL="https://horosproject.org/horos-content/Horos"$appNewVersion".dmg" + TeamID="TPT6TVH8UY" + fi + expectedTeamID=$TeamID ;; From 9c5ab458518a41faaffb8f8ebae186d1b6e4f9ae Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Mon, 19 Sep 2022 11:38:43 +0200 Subject: [PATCH 176/209] Version 9.4 of my MDM scripts --- MDM/-Installomator 1st -DEPNotify.sh | 358 ++++++++++++++++ MDM/-Installomator 1st SS DEPNotify.sh | 358 ++++++++++++++++ MDM/-Installomator 1st SS.sh | 302 +++++++++++++ MDM/-Installomator 1st condition Addigy.sh | 13 + MDM/-Installomator 1st.sh | 305 ++++++++++++++ MDM/-Progress 1st Dialog condition.sh | 13 + MDM/-Progress 1st Dialog.sh | 395 ++++++++++++++++++ MDM/-install Dialog direct condition.sh | 17 + MDM/-install Dialog direct.sh | 148 +++++++ ...-install Installomator direct condition.sh | 14 + MDM/-install Installomator direct.sh | 147 +++++++ MDM/App script.sh | 185 -------- .../Addigy condition notes.sh | 124 ++++++ .../App VFA SS github.sh | 279 +++++++++++++ .../App VFA SS.sh | 227 ++++++++++ .../App browser-security.sh | 211 ++++++++++ .../App normal SS multi-app.sh | 214 ++++++++++ .../App normal SS.sh | 211 ++++++++++ MDM/App-install/App VFA.sh | 93 +++++ .../App browser-security Auto-install.sh | 79 ++++ MDM/App-install/App browser-security SS.sh | 79 ++++ MDM/App-install/App normal Auto-install.sh | 79 ++++ MDM/App-install/App normal SS.sh | 79 ++++ MDM/App-install/App service Auto-install.sh | 208 +++++++++ MDM/App-loop script.sh | 193 --------- MDM/InstallInstallomator.sh | 43 -- MDM/Installomator update.sh | 42 -- MDM/MDMAddigy CustomSoftware.sh | 115 ----- MDM/MDMMosyle install.sh | 79 ---- MDM/Manual valuesfromarguments.sh | 56 --- ...stallomator.sh => Remove Installomator.sh} | 0 31 files changed, 3953 insertions(+), 713 deletions(-) create mode 100755 MDM/-Installomator 1st -DEPNotify.sh create mode 100755 MDM/-Installomator 1st SS DEPNotify.sh create mode 100755 MDM/-Installomator 1st SS.sh create mode 100644 MDM/-Installomator 1st condition Addigy.sh create mode 100755 MDM/-Installomator 1st.sh create mode 100644 MDM/-Progress 1st Dialog condition.sh create mode 100755 MDM/-Progress 1st Dialog.sh create mode 100755 MDM/-install Dialog direct condition.sh create mode 100755 MDM/-install Dialog direct.sh create mode 100755 MDM/-install Installomator direct condition.sh create mode 100755 MDM/-install Installomator direct.sh delete mode 100755 MDM/App script.sh create mode 100644 MDM/App-install with Dialog and dockutil/Addigy condition notes.sh create mode 100755 MDM/App-install with Dialog and dockutil/App VFA SS github.sh create mode 100755 MDM/App-install with Dialog and dockutil/App VFA SS.sh create mode 100755 MDM/App-install with Dialog and dockutil/App browser-security.sh create mode 100644 MDM/App-install with Dialog and dockutil/App normal SS multi-app.sh create mode 100644 MDM/App-install with Dialog and dockutil/App normal SS.sh create mode 100755 MDM/App-install/App VFA.sh create mode 100644 MDM/App-install/App browser-security Auto-install.sh create mode 100644 MDM/App-install/App browser-security SS.sh create mode 100644 MDM/App-install/App normal Auto-install.sh create mode 100644 MDM/App-install/App normal SS.sh create mode 100644 MDM/App-install/App service Auto-install.sh delete mode 100755 MDM/App-loop script.sh delete mode 100644 MDM/InstallInstallomator.sh delete mode 100755 MDM/Installomator update.sh delete mode 100755 MDM/MDMAddigy CustomSoftware.sh delete mode 100644 MDM/MDMMosyle install.sh delete mode 100755 MDM/Manual valuesfromarguments.sh rename MDM/{RemoveInstallomator.sh => Remove Installomator.sh} (100%) diff --git a/MDM/-Installomator 1st -DEPNotify.sh b/MDM/-Installomator 1st -DEPNotify.sh new file mode 100755 index 0000000..9df84a0 --- /dev/null +++ b/MDM/-Installomator 1st -DEPNotify.sh @@ -0,0 +1,358 @@ +#!/bin/sh + +# Installation using Installomator with DEPNotify window +instance="Instance" # Name of used instance + +LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +what=(dialog dockutil microsoftautoupdate supportapp applenyfonts applesfpro applesfmono applesfcompact xink zohoworkdrivetruesync textmate 1password7 wwdc theunarchiver keka microsoftedge microsoftteams microsoftonedrive microsoftoffice365) +# Remember: dialog dockutil + +installomatorOptions="NOTIFY=silent BLOCKING_PROCESS_ACTION=ignore INSTALL=force IGNORE_APP_STORE_APPS=yes LOGGING=REQ" + +# DEPNotify display settings, change as desired +title="Installing Apps and other software" +message="Please wait while we download and install the needed software." +endMessage="Installation complete! Please reboot to activate FileVault." +errorMessage="A problem was encountered setting up this Mac. Please contact IT." + +###################################################################### +# Installomator 1st DEPNotify +# +# Installation using Installomator showing progress with DEPNotify +# Great stand-alone solution if installs are only done using Installomator. +# No customization below… +###################################################################### +# This script can be used to install software using Installomator. +# Script will start DEPNotify to display a progress bar. +# Progress bar moves between installations +###################################################################### +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# +# This script made by Søren Theilgaard +# https://github.com/Theile +# Twitter and MacAdmins Slack: @theilgaard +# +# Some functions and code from Installomator: +# https://github.com/Installomator/Installomator +# +###################################################################### +scriptVersion="9.4" +# v. 9.4 : 2022-09-14 : downloadURL can fall back on GitHub API +# v. 9.3 : 2022-08-29 : installomatorOptions in quotes and ignore blocking processes. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. ws1 support. +# v. 9.2.2 : 2022-06-17 : installomatorOptions introduced. Check 1.1.1.1 for internet connection. +# v. 9.2.1 : 2022-05-30 : Some changes to logging +# v. 9.2 : 2022-05-19 : Built in installer for Installlomator, and display dialog if error happens. Now universal script for all supported MDMs based on LOGO variable. +# v. 9.1 : 2022-04-13 : Using INSTALL=force in Label only, so Microsoft labels will not start updating +# v. 9.0.1 : 2022-02-21 : LOGO=addigy, few more "true" lines, and errorOutput on error +# v. 9.0.0 : 2022-02-14 : Updated for Inst. 9.0, Logging improved with printlog +###################################################################### + +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +# Check before running +case $LOGO in + addigy|microsoft) + conditionFile="/var/db/.Installomator1stDone" + # Addigy and Microsoft Endpoint Manager (Intune) need a check for a touched file + if [ -e "$conditionFile" ]; then + echo "$LOGO setup detected" + echo "$conditionFile exists, so we exit." + exit 0 + else + echo "$conditionFile not found, so we continue…" + fi + ;; +esac + +# Mark: Constants, logging and caffeinate +log_message="$instance: Installomator 1st with DEPNotify, v$scriptVersion" +label="1st-v$scriptVersion" + +log_location="/private/var/log/Installomator.log" +printlog(){ + timestamp=$(date +%F\ %T) + if [[ "$(whoami)" == "root" ]]; then + echo "$timestamp :: $label : $1" | tee -a $log_location + else + echo "$timestamp :: $label : $1" + fi +} +printlog "[LOG-BEGIN] ${log_message}" + +# Internet check +if [[ "$(nc -z -v -G 10 1.1.1.1 53 2>&1 | grep -io "succeeded")" != "succeeded" ]]; then + printlog "ERROR. No internet connection, we cannot continue." + exit 90 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" || true + pkill caffeinate || true + printlog "[LOG-END] Status $1" + exit $1 +} + +# Command-file to DEPNotify +DEPNOTIFY_LOG="/var/tmp/depnotify.log" + +# Counters +errorCount=0 +countLabels=${#what[@]} +printlog "Total installations: $countLabels" + +# Using LOGO variable to specify MDM and shown logo +case $LOGO in + appstore) + # Apple App Store on Mac + if [[ $(sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + ;; + jamf) + # Jamf Pro + LOGO_PATH="/Library/Application Support/JAMF/Jamf.app/Contents/Resources/AppIcon.icns" + ;; + mosyleb) + # Mosyle Business + LOGO_PATH="/Applications/Self-Service.app/Contents/Resources/AppIcon.icns" + ;; + mosylem) + # Mosyle Manager (education) + LOGO_PATH="/Applications/Manager.app/Contents/Resources/AppIcon.icns" + ;; + addigy) + # Addigy + LOGO_PATH="/Library/Addigy/macmanage/MacManage.app/Contents/Resources/atom.icns" + ;; + microsoft) + # Microsoft Endpoint Manager (Intune) + LOGO_PATH="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns" + ;; + ws1) + # Workspace ONE (AirWatch) + LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns" + ;; +esac +if [[ ! -a "${LOGO_PATH}" ]]; then + printlog "ERROR in LOGO_PATH '${LOGO_PATH}', setting Mac App Store." + if [[ $(/usr/bin/sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi +fi +printlog "LOGO: $LOGO - LOGO_PATH: $LOGO_PATH" + +# Mark: Functions +printlog "depnotify_command function" +echo "" > $DEPNOTIFY_LOG || true +function depnotify_command(){ + printlog "DEPNotify-command: $1" + echo "$1" >> $DEPNOTIFY_LOG || true +} + +printlog "startDEPNotify function" +function startDEPNotify() { + currentUser="$(stat -f "%Su" /dev/console)" + currentUserID=$(id -u "$currentUser") + launchctl asuser $currentUserID open -a "/Applications/Utilities/DEPNotify.app/Contents/MacOS/DEPNotify" --args -path "$DEPNOTIFY_LOG" || true # --args -fullScreen + sleep 5 + depnotify_command "Command: KillCommandFile:" + depnotify_command "Command: MainTitle: $title" + depnotify_command "Command: Image: $LOGO_PATH" + depnotify_command "Command: MainText: $message" + depnotify_command "Command: Determinate: $countLabels" +} + +# Notify the user using AppleScript +printlog "displayDialog function" +function displayDialog(){ + currentUser="$(stat -f "%Su" /dev/console)" + currentUserID=$(id -u "$currentUser") + if [[ "$currentUser" != "" ]]; then + launchctl asuser $currentUserID sudo -u $currentUser osascript -e "button returned of (display dialog \"$message\" buttons {\"OK\"} default button \"OK\" with icon POSIX file \"$LOGO_PATH\")" || true + fi +} + +# Mark: Code +name="Installomator" +printlog "$name check for installation" +# download URL, version and Expected Team ID +# Method for GitHub pkg +gitusername="Installomator" +gitreponame="Installomator" +#printlog "$gitusername $gitreponame" +filetype="pkg" +downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then + printlog "Trying GitHub API for download URL." + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") +fi +#printlog "$downloadURL" +appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') +#printlog "$appNewVersion" +expectedTeamID="JME5BW3F3R" + +destFile="/usr/local/Installomator/Installomator.sh" +currentInstalledVersion="$(${destFile} version 2>/dev/null || true)" +printlog "${destFile} version: $currentInstalledVersion" +if [[ ! -e "${destFile}" || "$currentInstalledVersion" != "$appNewVersion" ]]; then + printlog "$name not found or version not latest." + printlog "${destFile}" + printlog "Installing version ${appNewVersion} ..." + # Create temporary working directory + tmpDir="$(mktemp -d || true)" + printlog "Created working directory '$tmpDir'" + # Download the installer package + printlog "Downloading $name package version $appNewVersion from: $downloadURL" + installationCount=0 + exitCode=9 + while [[ $installationCount -lt 3 && $exitCode -gt 0 ]]; do + curlDownload=$(curl -Ls "$downloadURL" -o "$tmpDir/$name.pkg" || true) + curlDownloadStatus=$(echo $?) + if [[ $curlDownloadStatus -ne 0 ]]; then + printlog "error downloading $downloadURL, with status $curlDownloadStatus" + printlog "${curlDownload}" + exitCode=1 + else + printlog "Download $name succes." + # Verify the download + teamID=$(spctl -a -vv -t install "$tmpDir/$name.pkg" 2>&1 | awk '/origin=/ {print $NF }' | tr -d '()' || true) + printlog "Team ID for downloaded package: $teamID" + # Install the package if Team ID validates + if [ "$expectedTeamID" = "$teamID" ] || [ "$expectedTeamID" = "" ]; then + printlog "$name package verified. Installing package '$tmpDir/$name.pkg'." + pkgInstall=$(installer -verbose -dumplog -pkg "$tmpDir/$name.pkg" -target "/" 2>&1) + pkgInstallStatus=$(echo $?) + if [[ $pkgInstallStatus -ne 0 ]]; then + printlog "ERROR. $name package installation failed." + printlog "${pkgInstall}" + exitCode=2 + else + printlog "Installing $name package succes." + exitCode=0 + fi + else + printlog "ERROR. Package verification failed for $name before package installation could start. Download link may be invalid." + exitCode=3 + fi + fi + ((installationCount++)) + printlog "$installationCount time(s), exitCode $exitCode" + if [[ $installationCount -lt 3 ]]; then + if [[ $exitCode -gt 0 ]]; then + printlog "Sleep a bit before trying download and install again. $installationCount time(s)." + printlog "Remove $(rm -fv "$tmpDir/$name.pkg" || true)" + sleep 2 + fi + else + printlog "Download and install of $name succes." + fi + done + # Remove the temporary working directory + printlog "Deleting working directory '$tmpDir' and its contents." + printlog "Remove $(rm -Rfv "${tmpDir}" || true)" + # Handle installation errors + if [[ $exitCode != 0 ]]; then + printlog "ERROR. Installation of $name failed. Aborting." + caffexit $exitCode + else + printlog "$name version $appNewVersion installed!" + fi +else + printlog "$name version $appNewVersion already found. Perfect!" +fi + +# Installing DEPNotify +cmdOutput="$( ${destFile} depnotify LOGO=$LOGO NOTIFY=silent BLOCKING_PROCESS_ACTION=ignore LOGGING=WARN || true )" +exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" +printlog "DEPNotify install result: $exitStatus" + +itemName="" +errorLabels="" +((countLabels++)) +((countLabels--)) +printlog "$countLabels labels to install" + +startDEPNotify + +for item in "${what[@]}"; do + # Check if DEPNotify is running and try open it if not + if ! pgrep -xq "DEPNotify"; then + startDEPNotify + fi + itemName=$( ${destFile} ${item} RETURN_LABEL_NAME=1 LOGGING=REQ INSTALL=force | tail -1 || true ) + if [[ "$itemName" != "#" ]]; then + depnotify_command "Status: $itemName installing…" + else + depnotify_command "Status: $item installing…" + fi + printlog "$item $itemName" + cmdOutput="$( ${destFile} ${item} LOGO=$LOGO ${installomatorOptions} || true )" + #cmdOutput="2022-05-19 13:20:45 : REQ : installomator : ################## End Installomator, exit code 0" + exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" + if [[ ${exitStatus} -eq 0 ]] ; then + printlog "${item} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text "WARN" || true )" + printlog "$warnOutput" + else + printlog "Error installing ${item}. Exit code ${exitStatus}" + #printlog "$cmdOutput" + errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + printlog "$errorOutput" + ((errorCount++)) + errorLabels="$errorLabels ${item}" + fi + ((countLabels--)) + itemName="" +done + +# Mark: Finishing +# Prevent re-run of script if conditionFile is set +if [[ ! -z "$conditionFile" ]]; then + printlog "Touching condition file so script will not run again" + touch "$conditionFile" || true + printlog "$(ls -al "$conditionFile" || true)" +fi + +# Show error to user if any +printlog "Errors: $errorCount" +if [[ $errorCount -ne 0 ]]; then + errorMessage="${errorMessage} Total errors: $errorCount" + message="$errorMessage" + displayDialog & + endMessage="$message" + printlog "errorLabels: $errorLabels" +fi + +depnotify_command "Command: MainText: $endMessage" +depnotify_command "Command: Quit: $endMessage" + +sleep 1 +printlog "Remove $(rm -fv $DEPNOTIFY_LOG || true)" + +printlog "Ending" +caffexit $errorCount diff --git a/MDM/-Installomator 1st SS DEPNotify.sh b/MDM/-Installomator 1st SS DEPNotify.sh new file mode 100755 index 0000000..b960734 --- /dev/null +++ b/MDM/-Installomator 1st SS DEPNotify.sh @@ -0,0 +1,358 @@ +#!/bin/sh + +# Installation using Installomator with DEPNotify window +instance="Instance" # Name of used instance + +LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +what=(dialog dockutil microsoftautoupdate supportapp applenyfonts applesfpro applesfmono applesfcompact xink zohoworkdrivetruesync textmate 1password7 wwdc theunarchiver keka microsoftedge microsoftteams microsoftonedrive microsoftoffice365) +# Remember: dialog dockutil + +installomatorOptions="NOTIFY=all BLOCKING_PROCESS_ACTION=prompt_user" + +# DEPNotify display settings, change as desired +title="Installing Apps and other software" +message="Please wait while we download and install the needed software." +endMessage="Installation complete! Please reboot to activate FileVault." +errorMessage="A problem was encountered setting up this Mac. Please contact IT." + +###################################################################### +# Installomator 1st DEPNotify +# +# Installation using Installomator showing progress with DEPNotify +# Great stand-alone solution if installs are only done using Installomator. +# No customization below… +###################################################################### +# This script can be used to install software using Installomator. +# Script will start DEPNotify to display a progress bar. +# Progress bar moves between installations +###################################################################### +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# +# This script made by Søren Theilgaard +# https://github.com/Theile +# Twitter and MacAdmins Slack: @theilgaard +# +# Some functions and code from Installomator: +# https://github.com/Installomator/Installomator +# +###################################################################### +scriptVersion="9.4" +# v. 9.4 : 2022-09-14 : downloadURL can fall back on GitHub API +# v. 9.3 : 2022-08-29 : installomatorOptions in quotes and ignore blocking processes. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. ws1 support. +# v. 9.2.2 : 2022-06-17 : installomatorOptions introduced. Check 1.1.1.1 for internet connection. +# v. 9.2.1 : 2022-05-30 : Some changes to logging +# v. 9.2 : 2022-05-19 : Built in installer for Installlomator, and display dialog if error happens. Now universal script for all supported MDMs based on LOGO variable. +# v. 9.1 : 2022-04-13 : Using INSTALL=force in Label only, so Microsoft labels will not start updating +# v. 9.0.1 : 2022-02-21 : LOGO=addigy, few more "true" lines, and errorOutput on error +# v. 9.0.0 : 2022-02-14 : Updated for Inst. 9.0, Logging improved with printlog +###################################################################### + +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +# Check before running +case $LOGO in + addigy|microsoft) + conditionFile="/var/db/.Installomator1stDone" + # Addigy and Microsoft Endpoint Manager (Intune) need a check for a touched file + if [ -e "$conditionFile" ]; then + echo "$LOGO setup detected" + echo "$conditionFile exists, so we exit." + exit 0 + else + echo "$conditionFile not found, so we continue…" + fi + ;; +esac + +# Mark: Constants, logging and caffeinate +log_message="$instance: Installomator 1st with DEPNotify, v$scriptVersion" +label="1st-v$scriptVersion" + +log_location="/private/var/log/Installomator.log" +printlog(){ + timestamp=$(date +%F\ %T) + if [[ "$(whoami)" == "root" ]]; then + echo "$timestamp :: $label : $1" | tee -a $log_location + else + echo "$timestamp :: $label : $1" + fi +} +printlog "[LOG-BEGIN] ${log_message}" + +# Internet check +if [[ "$(nc -z -v -G 10 1.1.1.1 53 2>&1 | grep -io "succeeded")" != "succeeded" ]]; then + printlog "ERROR. No internet connection, we cannot continue." + exit 90 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" || true + pkill caffeinate || true + printlog "[LOG-END] Status $1" + exit $1 +} + +# Command-file to DEPNotify +DEPNOTIFY_LOG="/var/tmp/depnotify.log" + +# Counters +errorCount=0 +countLabels=${#what[@]} +printlog "Total installations: $countLabels" + +# Using LOGO variable to specify MDM and shown logo +case $LOGO in + appstore) + # Apple App Store on Mac + if [[ $(sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + ;; + jamf) + # Jamf Pro + LOGO_PATH="/Library/Application Support/JAMF/Jamf.app/Contents/Resources/AppIcon.icns" + ;; + mosyleb) + # Mosyle Business + LOGO_PATH="/Applications/Self-Service.app/Contents/Resources/AppIcon.icns" + ;; + mosylem) + # Mosyle Manager (education) + LOGO_PATH="/Applications/Manager.app/Contents/Resources/AppIcon.icns" + ;; + addigy) + # Addigy + LOGO_PATH="/Library/Addigy/macmanage/MacManage.app/Contents/Resources/atom.icns" + ;; + microsoft) + # Microsoft Endpoint Manager (Intune) + LOGO_PATH="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns" + ;; + ws1) + # Workspace ONE (AirWatch) + LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns" + ;; +esac +if [[ ! -a "${LOGO_PATH}" ]]; then + printlog "ERROR in LOGO_PATH '${LOGO_PATH}', setting Mac App Store." + if [[ $(/usr/bin/sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi +fi +printlog "LOGO: $LOGO - LOGO_PATH: $LOGO_PATH" + +# Mark: Functions +printlog "depnotify_command function" +echo "" > $DEPNOTIFY_LOG || true +function depnotify_command(){ + printlog "DEPNotify-command: $1" + echo "$1" >> $DEPNOTIFY_LOG || true +} + +printlog "startDEPNotify function" +function startDEPNotify() { + currentUser="$(stat -f "%Su" /dev/console)" + currentUserID=$(id -u "$currentUser") + launchctl asuser $currentUserID open -a "/Applications/Utilities/DEPNotify.app/Contents/MacOS/DEPNotify" --args -path "$DEPNOTIFY_LOG" || true # --args -fullScreen + sleep 5 + depnotify_command "Command: KillCommandFile:" + depnotify_command "Command: MainTitle: $title" + depnotify_command "Command: Image: $LOGO_PATH" + depnotify_command "Command: MainText: $message" + depnotify_command "Command: Determinate: $countLabels" +} + +# Notify the user using AppleScript +printlog "displayDialog function" +function displayDialog(){ + currentUser="$(stat -f "%Su" /dev/console)" + currentUserID=$(id -u "$currentUser") + if [[ "$currentUser" != "" ]]; then + launchctl asuser $currentUserID sudo -u $currentUser osascript -e "button returned of (display dialog \"$message\" buttons {\"OK\"} default button \"OK\" with icon POSIX file \"$LOGO_PATH\")" || true + fi +} + +# Mark: Code +name="Installomator" +printlog "$name check for installation" +# download URL, version and Expected Team ID +# Method for GitHub pkg +gitusername="Installomator" +gitreponame="Installomator" +#printlog "$gitusername $gitreponame" +filetype="pkg" +downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then + printlog "Trying GitHub API for download URL." + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") +fi +#printlog "$downloadURL" +appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') +#printlog "$appNewVersion" +expectedTeamID="JME5BW3F3R" + +destFile="/usr/local/Installomator/Installomator.sh" +currentInstalledVersion="$(${destFile} version 2>/dev/null || true)" +printlog "${destFile} version: $currentInstalledVersion" +if [[ ! -e "${destFile}" || "$currentInstalledVersion" != "$appNewVersion" ]]; then + printlog "$name not found or version not latest." + printlog "${destFile}" + printlog "Installing version ${appNewVersion} ..." + # Create temporary working directory + tmpDir="$(mktemp -d || true)" + printlog "Created working directory '$tmpDir'" + # Download the installer package + printlog "Downloading $name package version $appNewVersion from: $downloadURL" + installationCount=0 + exitCode=9 + while [[ $installationCount -lt 3 && $exitCode -gt 0 ]]; do + curlDownload=$(curl -Ls "$downloadURL" -o "$tmpDir/$name.pkg" || true) + curlDownloadStatus=$(echo $?) + if [[ $curlDownloadStatus -ne 0 ]]; then + printlog "error downloading $downloadURL, with status $curlDownloadStatus" + printlog "${curlDownload}" + exitCode=1 + else + printlog "Download $name succes." + # Verify the download + teamID=$(spctl -a -vv -t install "$tmpDir/$name.pkg" 2>&1 | awk '/origin=/ {print $NF }' | tr -d '()' || true) + printlog "Team ID for downloaded package: $teamID" + # Install the package if Team ID validates + if [ "$expectedTeamID" = "$teamID" ] || [ "$expectedTeamID" = "" ]; then + printlog "$name package verified. Installing package '$tmpDir/$name.pkg'." + pkgInstall=$(installer -verbose -dumplog -pkg "$tmpDir/$name.pkg" -target "/" 2>&1) + pkgInstallStatus=$(echo $?) + if [[ $pkgInstallStatus -ne 0 ]]; then + printlog "ERROR. $name package installation failed." + printlog "${pkgInstall}" + exitCode=2 + else + printlog "Installing $name package succes." + exitCode=0 + fi + else + printlog "ERROR. Package verification failed for $name before package installation could start. Download link may be invalid." + exitCode=3 + fi + fi + ((installationCount++)) + printlog "$installationCount time(s), exitCode $exitCode" + if [[ $installationCount -lt 3 ]]; then + if [[ $exitCode -gt 0 ]]; then + printlog "Sleep a bit before trying download and install again. $installationCount time(s)." + printlog "Remove $(rm -fv "$tmpDir/$name.pkg" || true)" + sleep 2 + fi + else + printlog "Download and install of $name succes." + fi + done + # Remove the temporary working directory + printlog "Deleting working directory '$tmpDir' and its contents." + printlog "Remove $(rm -Rfv "${tmpDir}" || true)" + # Handle installation errors + if [[ $exitCode != 0 ]]; then + printlog "ERROR. Installation of $name failed. Aborting." + caffexit $exitCode + else + printlog "$name version $appNewVersion installed!" + fi +else + printlog "$name version $appNewVersion already found. Perfect!" +fi + +# Installing DEPNotify +cmdOutput="$( ${destFile} depnotify LOGO=$LOGO NOTIFY=silent BLOCKING_PROCESS_ACTION=ignore LOGGING=WARN || true )" +exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" +printlog "DEPNotify install result: $exitStatus" + +itemName="" +errorLabels="" +((countLabels++)) +((countLabels--)) +printlog "$countLabels labels to install" + +startDEPNotify + +for item in "${what[@]}"; do + # Check if DEPNotify is running and try open it if not + if ! pgrep -xq "DEPNotify"; then + startDEPNotify + fi + itemName=$( ${destFile} ${item} RETURN_LABEL_NAME=1 LOGGING=REQ INSTALL=force | tail -1 || true ) + if [[ "$itemName" != "#" ]]; then + depnotify_command "Status: $itemName installing…" + else + depnotify_command "Status: $item installing…" + fi + printlog "$item $itemName" + cmdOutput="$( ${destFile} ${item} LOGO=$LOGO ${installomatorOptions} || true )" + #cmdOutput="2022-05-19 13:20:45 : REQ : installomator : ################## End Installomator, exit code 0" + exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" + if [[ ${exitStatus} -eq 0 ]] ; then + printlog "${item} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text "WARN" || true )" + printlog "$warnOutput" + else + printlog "Error installing ${item}. Exit code ${exitStatus}" + #printlog "$cmdOutput" + errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + printlog "$errorOutput" + ((errorCount++)) + errorLabels="$errorLabels ${item}" + fi + ((countLabels--)) + itemName="" +done + +# Mark: Finishing +# Prevent re-run of script if conditionFile is set +if [[ ! -z "$conditionFile" ]]; then + printlog "Touching condition file so script will not run again" + touch "$conditionFile" || true + printlog "$(ls -al "$conditionFile" || true)" +fi + +# Show error to user if any +printlog "Errors: $errorCount" +if [[ $errorCount -ne 0 ]]; then + errorMessage="${errorMessage} Total errors: $errorCount" + message="$errorMessage" + displayDialog & + endMessage="$message" + printlog "errorLabels: $errorLabels" +fi + +depnotify_command "Command: MainText: $endMessage" +depnotify_command "Command: Quit: $endMessage" + +sleep 1 +printlog "Remove $(rm -fv $DEPNOTIFY_LOG || true)" + +printlog "Ending" +caffexit $errorCount diff --git a/MDM/-Installomator 1st SS.sh b/MDM/-Installomator 1st SS.sh new file mode 100755 index 0000000..9efa824 --- /dev/null +++ b/MDM/-Installomator 1st SS.sh @@ -0,0 +1,302 @@ +#!/bin/sh + +# Installation using Installomator +instance="Instance" # Name of used instance + +LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +what=(dialog dockutil microsoftautoupdate supportapp applenyfonts applesfpro applesfmono applesfcompact xink zohoworkdrivetruesync textmate 1password7 wwdc theunarchiver keka microsoftedge microsoftteams microsoftonedrive microsoftoffice365) +# Remember: dialog dockutil + +installomatorOptions="NOTIFY=all BLOCKING_PROCESS_ACTION=prompt_user" + +# Error message to user if any occur +errorMessage="A problem was encountered setting up this Mac. Please contact IT." + +###################################################################### +# Installomator 1st for Self Service +# +# Installation using Installomator +# No customization below… +###################################################################### +# This script can be used to install software using Installomator, where the user activate it in Self Service. +# Script will display a dialog if any errors happens. +# Progress is shown in notifications to the user +###################################################################### +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# +# This script made by Søren Theilgaard +# https://github.com/Theile +# Twitter and MacAdmins Slack: @theilgaard +# +# Some functions and code from Installomator: +# https://github.com/Installomator/Installomator +# +###################################################################### +scriptVersion="9.4" +# v. 9.4 : 2022-09-14 : downloadURL can fall back on GitHub API +# v. 9.3 : 2022-08-29 : installomatorOptions in quotes and ignore blocking processes. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. ws1 support. +# v. 9.2.2 : 2022-06-17 : installomatorOptions introduced. Check 1.1.1.1 for internet connection. +# v. 9.2.1 : 2022-05-30 : Some changes to logging +# v. 9.2 : 2022-05-19 : Built in installer for Installlomator, and display dialog if error happens. Now universal script for all supported MDMs based on LOGO variable. +###################################################################### + +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +# Check before running +case $LOGO in + addigy|microsoft) + conditionFile="/var/db/.Installomator1stDone" + # Addigy and Microsoft Endpoint Manager (Intune) need a check for a touched file + if [ -e "$conditionFile" ]; then + echo "$LOGO setup detected" + echo "$conditionFile exists, so we exit." + exit 0 + else + echo "$conditionFile not found, so we continue…" + fi + ;; +esac + +# Mark: Constants, logging and caffeinate +log_message="$instance: Installomator 1st, v$scriptVersion" +label="1st-v$scriptVersion" + +log_location="/private/var/log/Installomator.log" +printlog(){ + timestamp=$(date +%F\ %T) + if [[ "$(whoami)" == "root" ]]; then + echo "$timestamp :: $label : $1" | tee -a $log_location + else + echo "$timestamp :: $label : $1" + fi +} +printlog "[LOG-BEGIN] ${log_message}" + +# Internet check +if [[ "$(nc -z -v -G 10 1.1.1.1 53 2>&1 | grep -io "succeeded")" != "succeeded" ]]; then + printlog "ERROR. No internet connection, we cannot continue." + caffexit 90 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" || true + pkill caffeinate || true + printlog "[LOG-END] Status $1" + exit $1 +} + +# Counters +errorCount=0 +countLabels=${#what[@]} +printlog "Total installations: $countLabels" + +# Using LOGO variable to specify MDM and shown logo +case $LOGO in + appstore) + # Apple App Store on Mac + if [[ $(sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + ;; + jamf) + # Jamf Pro + LOGO_PATH="/Library/Application Support/JAMF/Jamf.app/Contents/Resources/AppIcon.icns" + ;; + mosyleb) + # Mosyle Business + LOGO_PATH="/Applications/Self-Service.app/Contents/Resources/AppIcon.icns" + ;; + mosylem) + # Mosyle Manager (education) + LOGO_PATH="/Applications/Manager.app/Contents/Resources/AppIcon.icns" + ;; + addigy) + # Addigy + LOGO_PATH="/Library/Addigy/macmanage/MacManage.app/Contents/Resources/atom.icns" + ;; + microsoft) + # Microsoft Endpoint Manager (Intune) + LOGO_PATH="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns" + ;; + ws1) + # Workspace ONE (AirWatch) + LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns" + ;; +esac +if [[ ! -a "${LOGO_PATH}" ]]; then + printlog "ERROR in LOGO_PATH '${LOGO_PATH}', setting Mac App Store." + if [[ $(/usr/bin/sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi +fi +printlog "LOGO: $LOGO – LOGO_PATH: $LOGO_PATH" + +# Mark: Functions +# Notify the user using AppleScript +function displayDialog(){ + currentUser="$(stat -f "%Su" /dev/console)" + currentUserID=$(id -u "$currentUser") + if [[ "$currentUser" != "" ]]; then + launchctl asuser $currentUserID sudo -u $currentUser osascript -e "button returned of (display dialog \"$message\" buttons {\"OK\"} default button \"OK\" with icon POSIX file \"$LOGO_PATH\")" || true + fi +} + +# Mark: Code +name="Installomator" +printlog "$name check for installation" +# download URL, version and Expected Team ID +# Method for GitHub pkg +gitusername="Installomator" +gitreponame="Installomator" +#printlog "$gitusername $gitreponame" +filetype="pkg" +downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then + printlog "Trying GitHub API for download URL." + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") +fi +#printlog "$downloadURL" +appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') +#printlog "$appNewVersion" +expectedTeamID="JME5BW3F3R" + +destFile="/usr/local/Installomator/Installomator.sh" +currentInstalledVersion="$(${destFile} version 2>/dev/null || true)" +printlog "${destFile} version: $currentInstalledVersion" +if [[ ! -e "${destFile}" || "$currentInstalledVersion" != "$appNewVersion" ]]; then + printlog "$name not found or version not latest." + printlog "${destFile}" + printlog "Installing version ${appNewVersion} ..." + # Create temporary working directory + tmpDir="$(mktemp -d || true)" + printlog "Created working directory '$tmpDir'" + # Download the installer package + printlog "Downloading $name package version $appNewVersion from: $downloadURL" + installationCount=0 + exitCode=9 + while [[ $installationCount -lt 3 && $exitCode -gt 0 ]]; do + curlDownload=$(curl -Ls "$downloadURL" -o "$tmpDir/$name.pkg" || true) + curlDownloadStatus=$(echo $?) + if [[ $curlDownloadStatus -ne 0 ]]; then + printlog "error downloading $downloadURL, with status $curlDownloadStatus" + printlog "${curlDownload}" + exitCode=1 + else + printlog "Download $name succes." + # Verify the download + teamID=$(spctl -a -vv -t install "$tmpDir/$name.pkg" 2>&1 | awk '/origin=/ {print $NF }' | tr -d '()' || true) + printlog "Team ID for downloaded package: $teamID" + # Install the package if Team ID validates + if [ "$expectedTeamID" = "$teamID" ] || [ "$expectedTeamID" = "" ]; then + printlog "$name package verified. Installing package '$tmpDir/$name.pkg'." + pkgInstall=$(installer -verbose -dumplog -pkg "$tmpDir/$name.pkg" -target "/" 2>&1) + pkgInstallStatus=$(echo $?) + if [[ $pkgInstallStatus -ne 0 ]]; then + printlog "ERROR. $name package installation failed." + printlog "${pkgInstall}" + exitCode=2 + else + printlog "Installing $name package succes." + exitCode=0 + fi + else + printlog "ERROR. Package verification failed for $name before package installation could start. Download link may be invalid." + exitCode=3 + fi + fi + ((installationCount++)) + printlog "$installationCount time(s), exitCode $exitCode" + if [[ $installationCount -lt 3 ]]; then + if [[ $exitCode -gt 0 ]]; then + printlog "Sleep a bit before trying download and install again. $installationCount time(s)." + printlog "Remove $(rm -fv "$tmpDir/$name.pkg" || true)" + sleep 2 + fi + else + printlog "Download and install of $name succes." + fi + done + # Remove the temporary working directory + printlog "Deleting working directory '$tmpDir' and its contents." + printlog "Remove $(rm -Rfv "${tmpDir}" || true)" + # Handle installation errors + if [[ $exitCode != 0 ]]; then + printlog "ERROR. Installation of $name failed. Aborting." + caffexit $exitCode + else + printlog "$name version $appNewVersion installed!" + fi +else + printlog "$name version $appNewVersion already found. Perfect!" +fi + +errorLabels="" +((countLabels++)) +((countLabels--)) +printlog "$countLabels labels to install" + +for item in "${what[@]}"; do + printlog "$item" + cmdOutput="$( ${destFile} ${item} LOGO=$LOGO ${installomatorOptions} || true )" + exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" + if [[ ${exitStatus} -eq 0 ]] ; then + printlog "${item} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text "WARN" || true )" + printlog "$warnOutput" + else + printlog "Error installing ${item}. Exit code ${exitStatus}" + #printlog "$cmdOutput" + errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + printlog "$errorOutput" + ((errorCount++)) + errorLabels="$errorLabels ${item}" + fi + ((countLabels--)) + itemName="" +done + +# Mark: Finishing +# Prevent re-run of script if conditionFile is set +if [[ ! -z "$conditionFile" ]]; then + printlog "Touching condition file so script will not run again" + touch "$conditionFile" || true + printlog "$(ls -al "$conditionFile" || true)" +fi + +# Show error to user if any +printlog "Errors: $errorCount" +if [[ $errorCount -ne 0 ]]; then + printlog "ERROR: Display error dialog to user!" + errorMessage="${errorMessage} Total errors: $errorCount" + message="$errorMessage" + displayDialog & + printlog "errorLabels: $errorLabels" +fi + +printlog "Ending" +caffexit $errorCount diff --git a/MDM/-Installomator 1st condition Addigy.sh b/MDM/-Installomator 1st condition Addigy.sh new file mode 100644 index 0000000..95b9806 --- /dev/null +++ b/MDM/-Installomator 1st condition Addigy.sh @@ -0,0 +1,13 @@ +#!/bin/sh + +# Mark: Addigy Condition on condition file +# Install on success + +conditionFile="/var/db/.Installomator1stDone" +if [ -e "$conditionFile" ]; then + echo "$conditionFile exists. Exiting." + exit 1 +else + echo "$conditionFile not found. Continue…" + exit 0 +fi diff --git a/MDM/-Installomator 1st.sh b/MDM/-Installomator 1st.sh new file mode 100755 index 0000000..744f5c3 --- /dev/null +++ b/MDM/-Installomator 1st.sh @@ -0,0 +1,305 @@ +#!/bin/sh + +# Installation using Installomator +instance="Instance" # Name of used instance + +LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +what=(dialog dockutil microsoftautoupdate supportapp xink zohoworkdrivetruesync textmate applenyfonts applesfpro applesfmono applesfcompact 1password7 wwdc theunarchiver keka microsoftedge microsoftteams microsoftonedrive microsoftoffice365) +# Remember: dialog dockutil + +installomatorOptions="NOTIFY=silent BLOCKING_PROCESS_ACTION=ignore INSTALL=force IGNORE_APP_STORE_APPS=yes LOGGING=REQ" + +# Error message to user if any occur +showError="1" # Show error message if 1 (0 if it should not be shown) +errorMessage="A problem was encountered setting up this Mac. Please contact IT." + +###################################################################### +# Installomator 1st +# +# Installation using Installomator (use separate Installation1stProgress script to show progress) +# No customization below… +###################################################################### +# This script can be used to install software using Installomator. +# Script will display a dialog if any errors happens. +# User is not notified about installations. +###################################################################### +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# +# This script made by Søren Theilgaard +# https://github.com/Theile +# Twitter and MacAdmins Slack: @theilgaard +# +# Some functions and code from Installomator: +# https://github.com/Installomator/Installomator +# +###################################################################### +scriptVersion="9.4" +# v. 9.4 : 2022-09-14 : Making error message optional. downloadURL can fall back on GitHub API. +# v. 9.3 : 2022-08-29 : installomatorOptions in quotes and ignore blocking processes. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. ws1 support. +# v. 9.2.2 : 2022-06-17 : installomatorOptions introduced. Check 1.1.1.1 for internet connection. +# v. 9.2.1 : 2022-05-30 : Some changes to logging +# v. 9.2 : 2022-05-19 : Built in installer for Installomator, and display dialog if error happens. Now universal script for all supported MDMs based on LOGO variable. +###################################################################### + +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +# Check before running +case $LOGO in + addigy|microsoft) + conditionFile="/var/db/.Installomator1stDone" + # Addigy and Microsoft Endpoint Manager (Intune) need a check for a touched file + if [ -e "$conditionFile" ]; then + echo "$LOGO setup detected" + echo "$conditionFile exists, so we exit." + exit 0 + else + echo "$conditionFile not found, so we continue…" + fi + ;; +esac + +# Mark: Constants, logging and caffeinate +log_message="$instance: Installomator 1st, v$scriptVersion" +label="1st-v$scriptVersion" + +log_location="/private/var/log/Installomator.log" +printlog(){ + timestamp=$(date +%F\ %T) + if [[ "$(whoami)" == "root" ]]; then + echo "$timestamp :: $label : $1" | tee -a $log_location + else + echo "$timestamp :: $label : $1" + fi +} +printlog "[LOG-BEGIN] ${log_message}" + +# Internet check +if [[ "$(nc -z -v -G 10 1.1.1.1 53 2>&1 | grep -io "succeeded")" != "succeeded" ]]; then + printlog "ERROR. No internet connection, we cannot continue." + caffexit 90 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" || true + pkill caffeinate || true + printlog "[LOG-END] Status $1" + exit $1 +} + +# Counters +errorCount=0 +countLabels=${#what[@]} +printlog "Total installations: $countLabels" + +# Using LOGO variable to specify MDM and shown logo +case $LOGO in + appstore) + # Apple App Store on Mac + if [[ $(sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + ;; + jamf) + # Jamf Pro + LOGO_PATH="/Library/Application Support/JAMF/Jamf.app/Contents/Resources/AppIcon.icns" + ;; + mosyleb) + # Mosyle Business + LOGO_PATH="/Applications/Self-Service.app/Contents/Resources/AppIcon.icns" + ;; + mosylem) + # Mosyle Manager (education) + LOGO_PATH="/Applications/Manager.app/Contents/Resources/AppIcon.icns" + ;; + addigy) + # Addigy + LOGO_PATH="/Library/Addigy/macmanage/MacManage.app/Contents/Resources/atom.icns" + ;; + microsoft) + # Microsoft Endpoint Manager (Intune) + LOGO_PATH="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns" + ;; + ws1) + # Workspace ONE (AirWatch) + LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns" + ;; +esac +if [[ ! -a "${LOGO_PATH}" ]]; then + printlog "ERROR in LOGO_PATH '${LOGO_PATH}', setting Mac App Store." + if [[ $(/usr/bin/sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi +fi +printlog "LOGO: $LOGO – LOGO_PATH: $LOGO_PATH" + +# Mark: Functions +# Notify the user using AppleScript +function displayDialog(){ + currentUser="$(stat -f "%Su" /dev/console)" + currentUserID=$(id -u "$currentUser") + if [[ "$currentUser" != "" ]]; then + launchctl asuser $currentUserID sudo -u $currentUser osascript -e "button returned of (display dialog \"$message\" buttons {\"OK\"} default button \"OK\" with icon POSIX file \"$LOGO_PATH\")" || true + fi +} + +# Mark: Code +name="Installomator" +printlog "$name check for installation" +# download URL, version and Expected Team ID +# Method for GitHub pkg +gitusername="Installomator" +gitreponame="Installomator" +#printlog "$gitusername $gitreponame" +filetype="pkg" +downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then + printlog "Trying GitHub API for download URL." + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") +fi +#printlog "$downloadURL" +appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') +#printlog "$appNewVersion" +expectedTeamID="JME5BW3F3R" + +destFile="/usr/local/Installomator/Installomator.sh" +currentInstalledVersion="$(${destFile} version 2>/dev/null || true)" +printlog "${destFile} version: $currentInstalledVersion" +if [[ ! -e "${destFile}" || "$currentInstalledVersion" != "$appNewVersion" ]]; then + printlog "$name not found or version not latest." + printlog "${destFile}" + printlog "Installing version ${appNewVersion} ..." + # Create temporary working directory + tmpDir="$(mktemp -d || true)" + printlog "Created working directory '$tmpDir'" + # Download the installer package + printlog "Downloading $name package version $appNewVersion from: $downloadURL" + installationCount=0 + exitCode=9 + while [[ $installationCount -lt 3 && $exitCode -gt 0 ]]; do + curlDownload=$(curl -Ls "$downloadURL" -o "$tmpDir/$name.pkg" || true) + curlDownloadStatus=$(echo $?) + if [[ $curlDownloadStatus -ne 0 ]]; then + printlog "error downloading $downloadURL, with status $curlDownloadStatus" + printlog "${curlDownload}" + exitCode=1 + else + printlog "Download $name succes." + # Verify the download + teamID=$(spctl -a -vv -t install "$tmpDir/$name.pkg" 2>&1 | awk '/origin=/ {print $NF }' | tr -d '()' || true) + printlog "Team ID for downloaded package: $teamID" + # Install the package if Team ID validates + if [ "$expectedTeamID" = "$teamID" ] || [ "$expectedTeamID" = "" ]; then + printlog "$name package verified. Installing package '$tmpDir/$name.pkg'." + pkgInstall=$(installer -verbose -dumplog -pkg "$tmpDir/$name.pkg" -target "/" 2>&1) + pkgInstallStatus=$(echo $?) + if [[ $pkgInstallStatus -ne 0 ]]; then + printlog "ERROR. $name package installation failed." + printlog "${pkgInstall}" + exitCode=2 + else + printlog "Installing $name package succes." + exitCode=0 + fi + else + printlog "ERROR. Package verification failed for $name before package installation could start. Download link may be invalid." + exitCode=3 + fi + fi + ((installationCount++)) + printlog "$installationCount time(s), exitCode $exitCode" + if [[ $installationCount -lt 3 ]]; then + if [[ $exitCode -gt 0 ]]; then + printlog "Sleep a bit before trying download and install again. $installationCount time(s)." + printlog "Remove $(rm -fv "$tmpDir/$name.pkg" || true)" + sleep 2 + fi + else + printlog "Download and install of $name succes." + fi + done + # Remove the temporary working directory + printlog "Deleting working directory '$tmpDir' and its contents." + printlog "Remove $(rm -Rfv "${tmpDir}" || true)" + # Handle installation errors + if [[ $exitCode != 0 ]]; then + printlog "ERROR. Installation of $name failed. Aborting." + caffexit $exitCode + else + printlog "$name version $appNewVersion installed!" + fi +else + printlog "$name version $appNewVersion already found. Perfect!" +fi + +errorLabels="" +((countLabels++)) +((countLabels--)) +printlog "$countLabels labels to install" + +for item in "${what[@]}"; do + printlog "$item" + cmdOutput="$( ${destFile} ${item} LOGO=$LOGO ${installomatorOptions} || true )" + exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" + if [[ ${exitStatus} -eq 0 ]] ; then + printlog "${item} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text "WARN" || true )" + printlog "$warnOutput" + else + printlog "Error installing ${item}. Exit code ${exitStatus}" + #printlog "$cmdOutput" + errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + printlog "$errorOutput" + ((errorCount++)) + errorLabels="$errorLabels ${item}" + fi + ((countLabels--)) + itemName="" +done + +# Mark: Finishing +# Prevent re-run of script if conditionFile is set +if [[ ! -z "$conditionFile" ]]; then + printlog "Touching condition file so script will not run again" + touch "$conditionFile" || true + printlog "$(ls -al "$conditionFile" || true)" +fi + +# Show error to user if any +printlog "Errors: $errorCount" +if [[ $errorCount -ne 0 ]]; then + printlog "ERROR: Display error dialog to user!" + errorMessage="${errorMessage} Total errors: $errorCount" + if [[ $showError -eq 1 ]]; then + message="$errorMessage" + displayDialog & + fi + printlog "errorLabels: $errorLabels" +fi + +printlog "Ending" +caffexit $errorCount diff --git a/MDM/-Progress 1st Dialog condition.sh b/MDM/-Progress 1st Dialog condition.sh new file mode 100644 index 0000000..6f91d6d --- /dev/null +++ b/MDM/-Progress 1st Dialog condition.sh @@ -0,0 +1,13 @@ +#!/bin/sh + +# Mark: Addigy Condition on condition file +# Install on success + +conditionFile="/var/db/.Installation1stProgressDone" +if [ -e "$conditionFile" ]; then + echo "$conditionFile exists. Exiting." + exit 1 +else + echo "$conditionFile not found. Continue…" + exit 0 +fi diff --git a/MDM/-Progress 1st Dialog.sh b/MDM/-Progress 1st Dialog.sh new file mode 100755 index 0000000..dfb9980 --- /dev/null +++ b/MDM/-Progress 1st Dialog.sh @@ -0,0 +1,395 @@ +#!/bin/sh + +# Progress 1st with swiftDialog +instance="Instance" # Name of used instance + +LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +apps=( + "swiftDialog,/usr/local/bin/dialog" + "dockutil,/usr/local/bin/dockutil" + "desktoppr,/usr/local/bin/desktoppr" + "SupportApp,/Applications/Support.app" + "Xink,/Applications/Xink.app" + "Apple NewYork Font,/Library/Fonts/NewYork.ttf" + "Apple SF Pro Font,/Library/Fonts/SF-Pro.ttf" + "Apple SF Mono Font,/Library/Fonts/SF-Mono-Bold.otf" + "Apple SF Compact Font,/Library/Fonts/SF-Compact.ttf" + "Zoho WorkDrive TrueSync,/Applications/Zoho WorkDrive TrueSync.app" + "TextMate,/Applications/TextMate.app" + "Sublime Text,/Applications/Sublime Text.app" + "1Password,/Applications/1Password 7.app" + "Mactracker,/Applications/Mactracker.app" + "WWDC,/Applications/WWDC.app" + "The Unarchiver,/Applications/The Unarchiver.app" + "Keka,/Applications/Keka.app" + "Brave,/Applications/Brave Browser.app" + "Firefox,/Applications/Firefox.app" + "Microsoft AutoUpdate,/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app" + "Microsoft Edge,/Applications/Microsoft Edge.app" + "Microsoft Teams,/Applications/Microsoft Teams.app" + "Microsoft Excel,/Applications/Microsoft Excel.app" + "Microsoft OneNote,/Applications/Microsoft OneNote.app" + "Microsoft Outlook,/Applications/Microsoft Outlook.app" + "Microsoft PowerPoint,/Applications/Microsoft PowerPoint.app" + "Microsoft Word,/Applications/Microsoft Word.app" + "Microsoft OneDrive,/Applications/OneDrive.app" +) + +# Dialog display settings, change as desired +title="Installing Apps and other software" +message="Please wait while we download and install the needed software." +endMessage="Installation complete! Please reboot to activate FileVault." +displayEndMessageDialog=1 # Should endMessage be shown as a dialog? (0|1) +errorMessage="A problem was encountered setting up this Mac. Please contact IT." + +###################################################################### +# Progress 1st Dialog +# +# Showing installation progress using swiftDialog +# No customization below… +###################################################################### +# Complete script meant for running via MDM on device enrollment. This will download +# and install Dialog on the fly before opening Dialog. +# +# Log: /private/var/log/InstallationProgress.log +# This file prevents script from running again on Addigy and Microsoft Endpoint (Intune): +# "/var/db/.Installation1stProgress" +# +# Display a Dialog with a list of applications and indicate when they’ve been installed +# Useful when apps are deployed at random, perhaps without local logging. +# Applies to Mosyle App Catalog installs, VPP app installs, Installomator installs etc. +# The script watches the existence of files in the file system, so that is used to show progress. +# +# Requires Dialog v1.9.1 or later (will be installed) https://github.com/bartreardon/swiftDialog +# +###################################################################### +# +# This script made by Søren Theilgaard +# https://github.com/Theile +# Twitter and MacAdmins Slack: @theilgaard +# +# Based on the work by Adam Codega: +# https://github.com/acodega/dialog-scripts +# +# Some functions and code from Installomator: +# https://github.com/Installomator/Installomator +# +###################################################################### +# List of apps/installs to process in “apps” array. +# Provide the display name as you prefer and the path to the app/file. ex: +# "Google Chrome,/Applications/Google Chrome.app" +# A comma separates the display name from the path. Do not use commas in your display name text. +# +# Tip: Check for something like print drivers using the pkg receipt, like: +# "Konica-Minolta drivers,/var/db/receipts/jp.konicaminolta.print.package.C759.plist" +# Or fonts, like: +# "Apple SF Pro Font,/Library/Fonts/SF-Pro.ttf" +###################################################################### +scriptVersion="9.4" +# v. 9.4 : 2022-09-14 : downloadURL can fall back on GitHub API +# v. 9.3 : 2022-08-29 : Logging changed for current version. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. +# v. 9.2.2 : 2022-06-17 : Improved Dialog installation. Check 1.1.1.1 for internet connection. +# v. 9.2 : 2022-05-19 : Not using GitHub api for download of Dialog, show a dialog when finished to make message more important. Now universal script for all supported MDMs based on LOGO variable. +# v. 9.0 : 2022-05-16 : Based on acodega’s work, I have added progress bar, changed logging and use another log-location, a bit more error handling for Dialog download, added some "|| true"-endings to some lines to not make them fail in Addigy, and some more. +###################################################################### + +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +# Check before running +case $LOGO in + addigy|microsoft) + conditionFile="/var/db/.Installation1stProgressDone" + # Addigy and Microsoft Endpoint Manager (Intune) need a check for a touched file + if [ -e "$conditionFile" ]; then + echo "$LOGO setup detected" + echo "$conditionFile exists, so we exit." + exit 0 + else + echo "$conditionFile not found, so we continue…" + fi + ;; +esac + +# Mark: Constants and logging +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +log_message="$instance: Installation 1st Progress with Dialog, v$scriptVersion" +label="D1st-v$scriptVersion" + +log_location="/private/var/log/Installation1stProgress.log" +function printlog(){ + timestamp=$(date +%F\ %T) + if [[ "$(whoami)" == "root" ]]; then + echo "$timestamp :: $label : $1" | tee -a $log_location + else + echo "$timestamp :: $label : $1" + fi +} +printlog "[LOG-BEGIN] ${log_message}" + +# Internet check +if [[ "$(nc -z -v -G 10 1.1.1.1 53 2>&1 | grep -io "succeeded")" != "succeeded" ]]; then + printlog "ERROR. No internet connection, we cannot continue." + exit 90 +fi + +# Location of dialog and dialog command file +dialogApp="/usr/local/bin/dialog" +dialog_command_file="/var/tmp/dialog.log" +counterFile="/var/tmp/Installation1stProgress.plist" + +# Counters +progress_index=0 +step_progress=0 +defaults write $counterFile step -int 0 +progress_total=${#apps[@]} +printlog "Total watched installations: $progress_total" + +# Using LOGO variable to specify MDM and shown logo +case $LOGO in + appstore) + # Apple App Store on Mac + if [[ $(sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + ;; + jamf) + # Jamf Pro + LOGO_PATH="/Library/Application Support/JAMF/Jamf.app/Contents/Resources/AppIcon.icns" + ;; + mosyleb) + # Mosyle Business + LOGO_PATH="/Applications/Self-Service.app/Contents/Resources/AppIcon.icns" + ;; + mosylem) + # Mosyle Manager (education) + LOGO_PATH="/Applications/Manager.app/Contents/Resources/AppIcon.icns" + ;; + addigy) + # Addigy + LOGO_PATH="/Library/Addigy/macmanage/MacManage.app/Contents/Resources/atom.icns" + ;; + microsoft) + # Microsoft Endpoint Manager (Intune) + LOGO_PATH="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns" + ;; + ws1) + # Workspace ONE (AirWatch) + LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns" + ;; +esac +if [[ ! -a "${LOGO_PATH}" ]]; then + printlog "ERROR in LOGO_PATH '${LOGO_PATH}', setting Mac App Store." + if [[ $(/usr/bin/sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi +fi +printlog "LOGO: $LOGO – LOGO_PATH: $LOGO_PATH" + +# Mark: Functions +# execute a dialog command +echo "" > $dialog_command_file || true +function dialog_command(){ + printlog "Dialog-command: $1" + echo "$1" >> $dialog_command_file || true +} + +function appCheck(){ + dialog_command "listitem: $(echo "$app" | cut -d ',' -f1): wait" + while [ ! -e "$(echo "$app" | cut -d ',' -f2)" ]; do + sleep 2 + done + dialog_command "progresstext: Install of “$(echo "$app" | cut -d ',' -f1)” complete" + dialog_command "listitem: $(echo "$app" | cut -d ',' -f1): ✅" + progress_index=$(defaults read $counterFile step) + progress_index=$(( progress_index + 1 )) + defaults write $counterFile step -int $progress_index + dialog_command "progress: $progress_index" + printlog "at item number $progress_index" +} + +# Notify the user using AppleScript +function displayDialog(){ + if [[ "$currentUser" != "" ]]; then + launchctl asuser $currentUserID sudo -u $currentUser osascript -e "button returned of (display dialog \"$message\" buttons {\"OK\"} default button \"OK\" with icon POSIX file \"$LOGO_PATH\")" || true + fi +} + +# Mark: Code +name="Dialog" +printlog "$name check for installation" +# download URL, version and Expected Team ID +# Method for GitHub pkg w. app version check +gitusername="bartreardon" +gitreponame="swiftDialog" +#printlog "$gitusername $gitreponame" +filetype="pkg" +downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then + printlog "Trying GitHub API for download URL." + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") +fi +#printlog "$downloadURL" +appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') +#printlog "$appNewVersion" +expectedTeamID="PWA5E9TQ59" +destFile="/Library/Application Support/Dialog/Dialog.app" +versionKey="CFBundleShortVersionString" #CFBundleVersion + +currentInstalledVersion="$(defaults read "${destFile}/Contents/Info.plist" $versionKey || true)" +printlog "${name} version: $currentInstalledVersion" +if [[ ! -e "${destFile}" || "$currentInstalledVersion" != "$appNewVersion" ]]; then + printlog "$name not found or version not latest." + printlog "${destFile}" + printlog "Installing version ${appNewVersion}…" + # Create temporary working directory + tmpDir="$(mktemp -d || true)" + printlog "Created working directory '$tmpDir'" + # Download the installer package + printlog "Downloading $name package version $appNewVersion from: $downloadURL" + installationCount=0 + exitCode=9 + while [[ $installationCount -lt 3 && $exitCode -gt 0 ]]; do + curlDownload=$(curl -Ls "$downloadURL" -o "$tmpDir/$name.pkg" || true) + curlDownloadStatus=$(echo $?) + if [[ $curlDownloadStatus -ne 0 ]]; then + printlog "error downloading $downloadURL, with status $curlDownloadStatus" + printlog "${curlDownload}" + exitCode=1 + else + printlog "Download $name succes." + # Verify the download + teamID=$(spctl -a -vv -t install "$tmpDir/$name.pkg" 2>&1 | awk '/origin=/ {print $NF }' | tr -d '()' || true) + printlog "Team ID for downloaded package: $teamID" + # Install the package if Team ID validates + if [ "$expectedTeamID" = "$teamID" ] || [ "$expectedTeamID" = "" ]; then + printlog "$name package verified. Installing package '$tmpDir/$name.pkg'." + pkgInstall=$(installer -verbose -dumplog -pkg "$tmpDir/$name.pkg" -target "/" 2>&1) + pkgInstallStatus=$(echo $?) + if [[ $pkgInstallStatus -ne 0 ]]; then + printlog "ERROR. $name package installation failed." + printlog "${pkgInstall}" + exitCode=2 + else + printlog "Installing $name package succes." + exitCode=0 + fi + else + printlog "ERROR. Package verification failed for $name before package installation could start. Download link may be invalid." + exitCode=3 + fi + fi + ((installationCount++)) + printlog "$installationCount time(s), exitCode $exitCode" + if [[ $installationCount -lt 3 ]]; then + if [[ $exitCode -gt 0 ]]; then + printlog "Sleep a bit before trying download and install again. $installationCount time(s)." + printlog "Remove $(rm -fv "$tmpDir/$name.pkg" || true)" + sleep 2 + fi + else + printlog "Download and install of $name succes." + fi + done + # Remove the temporary working directory + printlog "Deleting working directory '$tmpDir' and its contents." + printlog "Remove $(rm -Rfv "${tmpDir}" || true)" + # Handle installation errors + if [[ $exitCode != 0 ]]; then + printlog "ERROR. Installation of $name failed. Aborting." + caffexit $exitCode + else + printlog "$name version $appNewVersion installed!" + fi +else + printlog "$name version $appNewVersion already found. Perfect!" +fi + + +while [ "$(pgrep -l "Setup Assistant")" != "" ]; do + printlog "Setup Assistant Still Running. PID $setupAssistantProcess." + sleep 1 +done +printlog "Out of Setup Assistant." + +while [ "$(pgrep -l "Finder")" = "" ]; do + printlog "Finder process not found. Assuming device is at login screen. PID $finderProcess" + sleep 1 +done +printlog "Finder is running…" + +currentUser=$(stat -f "%Su" /dev/console) +currentUserID=$(id -u "$currentUser") +printlog "Logged in user is $currentUser with ID $currentUserID" + +# set icon based on whether computer is a desktop or laptop +#hwType=$(system_profiler SPHardwareDataType | grep "Model Identifier" | grep "Book" || true) +#if [ "$hwType" != "" ]; then +# LOGO_PATH="SF=laptopcomputer.and.arrow.down,weight=thin,colour1=#51a3ef,colour2=#5154ef" +#else +# LOGO_PATH="SF=desktopcomputer.and.arrow.down,weight=thin,colour1=#51a3ef,colour2=#5154ef" +#fi + +dialogCMD="$dialogApp -p --title \"$title\" \ +--message \"$message\" \ +--icon \"$LOGO_PATH\" \ +--progress $progress_total \ +--button1text \"Please Wait\" \ +--button1disabled" + +# create the list of apps +listitems="" +for app in "${apps[@]}"; do + listitems="$listitems --listitem '$(echo "$app" | cut -d ',' -f1)'" +done + +# final command to execute +dialogCMD="$dialogCMD $listitems" + +printlog "$dialogCMD" + +# Launch dialog and run it in the background sleep for a second to let thing initialise +printlog "About to launch Dialog." +eval "$dialogCMD" & +sleep 2 + +(for app in "${apps[@]}"; do + #step_progress=$(( 1 + progress_index )) + #dialog_command "progress: $step_progress" + sleep 0.5 + appCheck & +done + +wait) + +# Mark: Finishing + +# Prevent re-run of script if conditionFile is set +if [[ ! -z "$conditionFile" ]]; then + printlog "Touching condition file so script will not run again" + touch "$conditionFile" || true + printlog "$(ls -al "$conditionFile" || true)" +fi + +# all done. close off processing and enable the "Done" button +printlog "Finalizing." +dialog_command "progresstext: $endMessage" +dialog_command "progress: complete" +dialog_command "button1text: Done" +dialog_command "button1: enable" + +if [[ $displayEndMessageDialog -eq 1 ]]; then + message="$endMessage" + displayDialog & +fi + +sleep 1 +printlog $(rm -fv $dialog_command_file || true) +printlog $(rm -fv $counterFile || true) + +printlog "Ending" diff --git a/MDM/-install Dialog direct condition.sh b/MDM/-install Dialog direct condition.sh new file mode 100755 index 0000000..2d25e09 --- /dev/null +++ b/MDM/-install Dialog direct condition.sh @@ -0,0 +1,17 @@ +#!/bin/sh + +gitusername="bartreardon" +gitreponame="swiftDialog" +appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') + +destFile="/Library/Application Support/Dialog/Dialog.app" +versionKey="CFBundleShortVersionString" #CFBundleVersion + +currentInstalledVersion="$(defaults read "${destFile}/Contents/Info.plist" $versionKey || true)" +if [[ ! -e "${destFile}" || "$currentInstalledVersion" != "$appNewVersion" ]]; then + #echo "Let's install…" + exit 0 +else + #echo "No need!" + exit 1 +fi diff --git a/MDM/-install Dialog direct.sh b/MDM/-install Dialog direct.sh new file mode 100755 index 0000000..1b16e3c --- /dev/null +++ b/MDM/-install Dialog direct.sh @@ -0,0 +1,148 @@ +#!/bin/sh + +###################################################################### +# Installation of swiftDialog +# +# No customization below… +###################################################################### +# This script can be used to install swiftDialog directly from GitHub. +###################################################################### +# +# This script made by Søren Theilgaard +# https://github.com/Theile +# Twitter and MacAdmins Slack: @theilgaard +# +# Some functions and code from Installomator: +# https://github.com/Installomator/Installomator +# +###################################################################### +scriptVersion="9.4" +# v. 9.4 : 2022-09-14 : downloadURL can fall back on GitHub API. +# v. 9.3 : 2022-08-29 : Logging changed for current version. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. +# v. 9.2.2 : 2022-06-17 : Check 1.1.1.1 for internet connection. +# v. 9.2 : 2022-05-19 : Built in installer for Installlomator. Universal script. +###################################################################### + +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +# Mark: Constants, logging and caffeinate +log_message="Dialog install, v$scriptVersion" +label="Dialog-v$scriptVersion" + +log_location="/private/var/log/Installomator.log" +printlog(){ + timestamp=$(date +%F\ %T) + if [[ "$(whoami)" == "root" ]]; then + echo "$timestamp :: $label : $1" | tee -a $log_location + else + echo "$timestamp :: $label : $1" + fi +} +printlog "[LOG-BEGIN] ${log_message}" + +# Internet check +if [[ "$(nc -z -v -G 10 1.1.1.1 53 2>&1 | grep -io "succeeded")" != "succeeded" ]]; then + printlog "ERROR. No internet connection, we cannot continue." + exit 90 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" || true + pkill caffeinate || true + printlog "[LOG-END] Status $1" + exit $1 +} + +name="Dialog" +printlog "$name check for installation" +# download URL, version and Expected Team ID +# Method for GitHub pkg w. app version check +gitusername="bartreardon" +gitreponame="swiftDialog" +#printlog "$gitusername $gitreponame" +filetype="pkg" +downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then + printlog "Trying GitHub API for download URL." + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") +fi +#printlog "$downloadURL" +appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') +#printlog "$appNewVersion" +expectedTeamID="PWA5E9TQ59" +destFile="/Library/Application Support/Dialog/Dialog.app" +versionKey="CFBundleShortVersionString" #CFBundleVersion + +currentInstalledVersion="$(defaults read "${destFile}/Contents/Info.plist" $versionKey || true)" +printlog "${name} version: $currentInstalledVersion" +if [[ ! -e "${destFile}" || "$currentInstalledVersion" != "$appNewVersion" ]]; then + printlog "$name not found or version not latest." + printlog "${destFile}" + printlog "Installing version ${appNewVersion}…" + # Create temporary working directory + tmpDir="$(mktemp -d || true)" + printlog "Created working directory '$tmpDir'" + # Download the installer package + printlog "Downloading $name package version $appNewVersion from: $downloadURL" + installationCount=0 + exitCode=9 + while [[ $installationCount -lt 3 && $exitCode -gt 0 ]]; do + curlDownload=$(curl -Ls "$downloadURL" -o "$tmpDir/$name.pkg" || true) + curlDownloadStatus=$(echo $?) + if [[ $curlDownloadStatus -ne 0 ]]; then + printlog "error downloading $downloadURL, with status $curlDownloadStatus" + printlog "${curlDownload}" + exitCode=1 + else + printlog "Download $name succes." + # Verify the download + teamID=$(spctl -a -vv -t install "$tmpDir/$name.pkg" 2>&1 | awk '/origin=/ {print $NF }' | tr -d '()' || true) + printlog "Team ID for downloaded package: $teamID" + # Install the package if Team ID validates + if [ "$expectedTeamID" = "$teamID" ] || [ "$expectedTeamID" = "" ]; then + printlog "$name package verified. Installing package '$tmpDir/$name.pkg'." + pkgInstall=$(installer -verbose -dumplog -pkg "$tmpDir/$name.pkg" -target "/" 2>&1) + pkgInstallStatus=$(echo $?) + if [[ $pkgInstallStatus -ne 0 ]]; then + printlog "ERROR. $name package installation failed." + printlog "${pkgInstall}" + exitCode=2 + else + printlog "Installing $name package succes." + exitCode=0 + fi + else + printlog "ERROR. Package verification failed for $name before package installation could start. Download link may be invalid." + exitCode=3 + fi + fi + ((installationCount++)) + printlog "$installationCount time(s), exitCode $exitCode" + if [[ $installationCount -lt 3 ]]; then + if [[ $exitCode -gt 0 ]]; then + printlog "Sleep a bit before trying download and install again. $installationCount time(s)." + printlog "Remove $(rm -fv "$tmpDir/$name.pkg" || true)" + sleep 2 + fi + else + printlog "Download and install of $name succes." + fi + done + # Remove the temporary working directory + printlog "Deleting working directory '$tmpDir' and its contents." + printlog "Remove $(rm -Rfv "${tmpDir}" || true)" + # Handle installation errors + if [[ $exitCode != 0 ]]; then + printlog "ERROR. Installation of $name failed. Aborting." + caffexit $exitCode + else + printlog "$name version $appNewVersion installed!" + fi +else + printlog "$name version $appNewVersion already found. Perfect!" +fi + +caffexit 0 diff --git a/MDM/-install Installomator direct condition.sh b/MDM/-install Installomator direct condition.sh new file mode 100755 index 0000000..89cdda6 --- /dev/null +++ b/MDM/-install Installomator direct condition.sh @@ -0,0 +1,14 @@ +#!/bin/sh + +gitusername="Installomator" +gitreponame="Installomator" +appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') + +destFile="/usr/local/Installomator/Installomator.sh" +if [[ ! -e "${destFile}" || "$(${destFile} version)" != "$appNewVersion" ]]; then + #echo "Let's install…" + exit 0 +else + #echo "No need!" + exit 1 +fi diff --git a/MDM/-install Installomator direct.sh b/MDM/-install Installomator direct.sh new file mode 100755 index 0000000..b822e34 --- /dev/null +++ b/MDM/-install Installomator direct.sh @@ -0,0 +1,147 @@ +#!/bin/sh + +###################################################################### +# Installation of Installomator +# +# No customization below… +###################################################################### +# This script can be used to install Installomator directly from GitHub. +###################################################################### +# +# This script made by Søren Theilgaard +# https://github.com/Theile +# Twitter and MacAdmins Slack: @theilgaard +# +# Some functions and code from Installomator: +# https://github.com/Installomator/Installomator +# +###################################################################### +scriptVersion="9.4" +# v. 9.4 : 2022-09-14 : downloadURL can fall back on GitHub API +# v. 9.3 : 2022-08-29 : Logging changed for current version. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. +# v. 9.2.2 : 2022-06-17 : Check 1.1.1.1 for internet connection. +# v. 9.2 : 2022-05-19 : Built in installer for Installlomator. Universal script. +###################################################################### + +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +# Mark: Constants, logging and caffeinate +log_message="Installomator install, v$scriptVersion" +label="Inst-v$scriptVersion" + +log_location="/private/var/log/Installomator.log" +printlog(){ + timestamp=$(date +%F\ %T) + if [[ "$(whoami)" == "root" ]]; then + echo "$timestamp :: $label : $1" | tee -a $log_location + else + echo "$timestamp :: $label : $1" + fi +} +printlog "[LOG-BEGIN] ${log_message}" + +# Internet check +if [[ "$(nc -z -v -G 10 1.1.1.1 53 2>&1 | grep -io "succeeded")" != "succeeded" ]]; then + printlog "ERROR. No internet connection, we cannot continue." + exit 90 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" || true + pkill caffeinate || true + printlog "[LOG-END] Status $1" + exit $1 +} + +name="Installomator" +printlog "$name check for installation" +# download URL, version and Expected Team ID +# Method for GitHub pkg +gitusername="Installomator" +gitreponame="Installomator" +#printlog "$gitusername $gitreponame" +filetype="pkg" +downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then + printlog "Trying GitHub API for download URL." + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") +fi +#printlog "$downloadURL" +appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') +#printlog "$appNewVersion" +expectedTeamID="JME5BW3F3R" + +destFile="/usr/local/Installomator/Installomator.sh" +currentInstalledVersion="$(${destFile} version 2>/dev/null || true)" +printlog "${destFile} version: $currentInstalledVersion" +if [[ ! -e "${destFile}" || "$currentInstalledVersion" != "$appNewVersion" ]]; then + printlog "$name not found or version not latest." + printlog "${destFile}" + printlog "Installing version ${appNewVersion} ..." + # Create temporary working directory + tmpDir="$(mktemp -d || true)" + printlog "Created working directory '$tmpDir'" + # Download the installer package + printlog "Downloading $name package version $appNewVersion from: $downloadURL" + installationCount=0 + exitCode=9 + while [[ $installationCount -lt 3 && $exitCode -gt 0 ]]; do + curlDownload=$(curl -Ls "$downloadURL" -o "$tmpDir/$name.pkg" || true) + curlDownloadStatus=$(echo $?) + if [[ $curlDownloadStatus -ne 0 ]]; then + printlog "error downloading $downloadURL, with status $curlDownloadStatus" + printlog "${curlDownload}" + exitCode=1 + else + printlog "Download $name succes." + # Verify the download + teamID=$(spctl -a -vv -t install "$tmpDir/$name.pkg" 2>&1 | awk '/origin=/ {print $NF }' | tr -d '()' || true) + printlog "Team ID for downloaded package: $teamID" + # Install the package if Team ID validates + if [ "$expectedTeamID" = "$teamID" ] || [ "$expectedTeamID" = "" ]; then + printlog "$name package verified. Installing package '$tmpDir/$name.pkg'." + pkgInstall=$(installer -verbose -dumplog -pkg "$tmpDir/$name.pkg" -target "/" 2>&1) + pkgInstallStatus=$(echo $?) + if [[ $pkgInstallStatus -ne 0 ]]; then + printlog "ERROR. $name package installation failed." + printlog "${pkgInstall}" + exitCode=2 + else + printlog "Installing $name package succes." + exitCode=0 + fi + else + printlog "ERROR. Package verification failed for $name before package installation could start. Download link may be invalid." + exitCode=3 + fi + fi + ((installationCount++)) + printlog "$installationCount time(s), exitCode $exitCode" + if [[ $installationCount -lt 3 ]]; then + if [[ $exitCode -gt 0 ]]; then + printlog "Sleep a bit before trying download and install again. $installationCount time(s)." + printlog "Remove $(rm -fv "$tmpDir/$name.pkg" || true)" + sleep 2 + fi + else + printlog "Download and install of $name succes." + fi + done + # Remove the temporary working directory + printlog "Deleting working directory '$tmpDir' and its contents." + printlog "Remove $(rm -Rfv "${tmpDir}" || true)" + # Handle installation errors + if [[ $exitCode != 0 ]]; then + printlog "ERROR. Installation of $name failed. Aborting." + caffexit $exitCode + else + printlog "$name version $appNewVersion installed!" + fi +else + printlog "$name version $appNewVersion already found. Perfect!" +fi + +caffexit 0 diff --git a/MDM/App script.sh b/MDM/App script.sh deleted file mode 100755 index c7b4a10..0000000 --- a/MDM/App script.sh +++ /dev/null @@ -1,185 +0,0 @@ -#!/bin/zsh -# Installation using Installomator -what="brave" # enter the software to install - -# To be used as a script sent out from a MDM. -# Fill the variable "what" above with a label. -# Script will run this label. -LOGO="appstore" # or "addigy", "microsoft", "mosyleb", "mosylem" -###################################################################### -# Parameters for reinstall/initial install (owner root:wheel): -# "BLOCKING_PROCESS_ACTION=quit_kill INSTALL=force IGNORE_APP_STORE_APPS=yes SYSTEMOWNER=1" -# Parameters for Self Service installed app: -# "BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=all" -# Parameters for security important apps, like browsers (run automaticaly every day): -# "BLOCKING_PROCESS_ACTION=tell_user_then_kill" -# Update of service apps (run automatically): -# "BLOCKING_PROCESS_ACTION=quit_kill NOTIFY=silent" -parameters="BLOCKING_PROCESS_ACTION=tell_user_then_kill NOTIFY=all" -############################################### - -# Verify that Installomator has been installed -destFile="/usr/local/Installomator/Installomator.sh" -if [ ! -e "${destFile}" ]; then - echo "Installomator not found here:" - echo "${destFile}" - echo "Exiting." - exit 99 -fi - -# No sleeping -/usr/bin/caffeinate -d -i -m -u & -caffeinatepid=$! -caffexit () { - kill "$caffeinatepid" - pkill caffeinate - exit $1 -} - -cmdOutput="$(${destFile} ${what} LOGO=$LOGO $parameters LOGGING=WARN || true)" -# Check result -exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" -if [[ ${exitStatus} -ne 0 ]] ; then - echo -e "Error installing ${what}. Exit code ${exitStatus}" - #echo "$cmdOutput" - errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" - echo "$errorOutput" - echo "Error installing ${what}. Exit code $?" - caffexit $? -fi - -echo "[$(DATE)][LOG-END]" - -caffexit 0 - -# notify behavior -# NOTIFY=success -# options: -# - success notify the user on success -# - silent no notifications -# - all all notifications (great for Self Service installation) - - -# behavior when blocking processes are found -# BLOCKING_PROCESS_ACTION=tell_user -# options: -# - ignore continue even when blocking processes are found -# - quit app will be told to quit nicely, if running -# - quit_kill told to quit twice, then it will be killed -# Could be great for service apps, if they do not respawn -# - silent_fail exit script without prompt or installation -# - prompt_user show a user dialog for each blocking process found -# abort after three attempts to quit -# (only if user accepts to quit the apps, otherwise -# the update is cancelled). -# - prompt_user_then_kill -# show a user dialog for each blocking process found, -# attempt to quit two times, kill the process finally -# - prompt_user_loop -# Like prompt-user, but clicking "Not Now", will just wait an hour, -# and then it will ask again. -# WARNING! It might block the MDM agent on the machine, as -# the scripts gets stuct in waiting until the hour has passed, -# possibly blocking for other management actions in this time. -# - tell_user User will be showed a notification about the important update, -# but user is only allowed to quit and continue, and then we -# ask the app to quit. -# - tell_user_then_kill -# Show dialog 2 times, and if the quitting fails, the -# blocking processes will be killed. -# - kill kill process without prompting or giving the user a chance to save - - -# logo-icon used in dialog boxes if app is blocking -# LOGO=appstore -# options: -# - appstore Icon is Apple App Store (default) -# - jamf JAMF Pro -# - mosyleb Mosyle Business -# - mosylem Mosyle Manager (Education) -# - addigy Addigy -# path can also be set in the command call, and if file exists, it will be used. -# Like 'LOGO="/System/Applications/App\ Store.app/Contents/Resources/AppIcon.icns"' -# (spaces have to be escaped). - - -# App Store apps handling -# IGNORE_APP_STORE_APPS=no -# options: -# - no If installed app is from App Store (which include VPP installed apps) -# it will not be touched, no matter it's version (default) -# - yes Replace App Store (and VPP) version of app and handle future -# updates using Installomator, even if latest version. -# Shouldn’t give any problems for the user in most cases. -# Known bad example: Slack will loose all settings. - - -# install behavior -# INSTALL="" -# options: -# - When not set, software will only be installed -# if it is newer/different in version -# - force Install even if it’s the same version - - -# Re-opening of closed app -# REOPEN="yes" -# options: -# - yes App wil be reopened if it was closed -# - no App not reopened - - -######################## -# Often used labels: -######################## - -# firefox -# firefox_intl -# brave -# torbrowser -# googlechrome -# netnewswire - -# adobereaderdc -# textmate - -# cyberduck -# keka -# theunarchiver - -# vlc -# handbrake - -# inkscape - -# signal -# telegram -# whatsapp - -# hazel -# devonthink - -# teamviewerqs -# zoom - -# malwarebytes -# githubdesktop -# sublimetext -# textmate -# visualstudiocode - -# microsoftskypeforbusiness -# microsoftteams -# microsoftyammer -# microsoftedgeenterprisestable -# microsoftedgeconsumerstable -# microsoftsharepointplugin -# microsoftdefenderatp - -# googledrivefilestream - -# cdef -# desktoppr -# supportapp -# xink -# wwdc diff --git a/MDM/App-install with Dialog and dockutil/Addigy condition notes.sh b/MDM/App-install with Dialog and dockutil/Addigy condition notes.sh new file mode 100644 index 0000000..41d5d70 --- /dev/null +++ b/MDM/App-install with Dialog and dockutil/Addigy condition notes.sh @@ -0,0 +1,124 @@ +#!/bin/sh + +# Addigy condition +# These are my notes for how I can extract all the label lines from Installomator.sh, evaluate those, and check if installed version is the latest version. +# This script contains functions from Installomator. +label="googlechromepkg" + +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +# Functions from Installomator +downloadURLFromGit() { # $1 git user name, $2 git repo name + gitusername=${1?:"no git user name"} + gitreponame=${2?:"no git repo name"} + + if [[ $type == "pkgInDmg" ]]; then + filetype="dmg" + elif [[ $type == "pkgInZip" ]]; then + filetype="zip" + else + filetype=$type + fi + + if [ -n "$archiveName" ]; then + downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1) + if [[ "$(echo $downloadURL | grep -ioE "https.*$archiveName")" == "" ]]; then + printlog "Trying GitHub API for download URL." + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") + fi + else + downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1) + if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then + printlog "Trying GitHub API for download URL." + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") + fi + fi + if [ -z "$downloadURL" ]; then + cleanupAndExit 14 "could not retrieve download URL for $gitusername/$gitreponame" ERROR + else + echo "$downloadURL" + return 0 + fi +} + +versionFromGit() { + # credit: Søren Theilgaard (@theilgaard) + # $1 git user name, $2 git repo name + gitusername=${1?:"no git user name"} + gitreponame=${2?:"no git repo name"} + + #appNewVersion=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | grep tag_name | cut -d '"' -f 4 | sed 's/[^0-9\.]//g') + appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') + if [ -z "$appNewVersion" ]; then + printlog "could not retrieve version number for $gitusername/$gitreponame" WARN + appNewVersion="" + else + echo "$appNewVersion" + return 0 + fi +} + + +# Handling of differences in xpath between Catalina and Big Sur +xpath() { + # the xpath tool changes in Big Sur and now requires the `-e` option + if [[ $(sw_vers -buildVersion) > "20A" ]]; then + /usr/bin/xpath -e $@ + # alternative: switch to xmllint (which is not perl) + #xmllint --xpath $@ - + else + /usr/bin/xpath $@ + fi +} + +# from @Pico: https://macadmins.slack.com/archives/CGXNNJXJ9/p1652222365989229?thread_ts=1651786411.413349&cid=CGXNNJXJ9 +getJSONValue() { + # $1: JSON string OR file path to parse (tested to work with up to 1GB string and 2GB file). + # $2: JSON key path to look up (using dot or bracket notation). + printf '%s' "$1" | /usr/bin/osascript -l 'JavaScript' \ + -e "let json = $.NSString.alloc.initWithDataEncoding($.NSFileHandle.fileHandleWithStandardInput.readDataToEndOfFile$(/usr/bin/uname -r | /usr/bin/awk -F '.' '($1 > 18) { print "AndReturnError(ObjC.wrap())" }'), $.NSUTF8StringEncoding)" \ + -e 'if ($.NSFileManager.defaultManager.fileExistsAtPath(json)) json = $.NSString.stringWithContentsOfFileEncodingError(json, $.NSUTF8StringEncoding, ObjC.wrap())' \ + -e "const value = JSON.parse(json.js)$([ -n "${2%%[.[]*}" ] && echo '.')$2" \ + -e 'if (typeof value === "object") { JSON.stringify(value, null, 4) } else { value }' +} + +# Mark: Script +labelScript=$(grep -E -m 1 -A 30 "^$label"'(\)|\|\\)$' "/usr/local/Installomator/Installomator.sh" | grep -B 30 -m 1 ";;") +echo $labelScript +eval $labelScript +echo $appNewVersion + + + +############################## +printLines=0; while read line; do; if [[ $printLines -eq 1 || "$(echo $line | grep -oE "^googlechromepkg")" != "" ]]; then; printLines=1; echo $line; fi; done < "/usr/local/Installomator/Installomator.sh" + +printLines=0; while read line; do; if [[ $printLines -eq 1 ]]; then; if [[ "$(echo $line | grep ";;")" == "" ]]; then; echo $line; else; printLines=0; fi ; elif [[ "$(echo $line | grep -oE "^googlechromepkg")" != "" ]]; then; printLines=1; fi; done < "/usr/local/Installomator/Installomator.sh" + +labelLines="$(printLines=0; while read line; do; if [[ $printLines -eq 1 ]]; then; if [[ "$(echo $line | grep ";;")" == "" ]]; then; echo $line; else; return; fi ; elif [[ "$(echo $line | grep -oE "^googlechromepkg")" != "" ]]; then; printLines=1; fi; done < "/usr/local/Installomator/Installomator.sh")"; echo $labelLines + +label="googlechromepkg";labelLines="$(printLines=0; while read line; do; if [[ $printLines -eq 1 ]]; then; if [[ "$(echo $line | grep ";;")" == "" ]]; then; echo $line; else; return; fi ; elif [[ "$(echo $line | grep -oE "^$label")" != "" ]]; then; printLines=1; fi; done < "/usr/local/Installomator/Installomator.sh")"; eval $labelLines ; echo $appNewVersion + + +label="googlechromepkg" +labelLines="$(printLines=0 +while read line; do + if [[ $printLines -eq 1 ]]; then + if [[ "$(echo $label | grep ";;")" == "" ]]; then + echo $line + else + return + fi + elif [[ "$(echo $line | grep -oE "^$label")" != "" ]]; then + printLines=1 + fi +done < "/usr/local/Installomator/Installomator.sh")" +eval $labelLines +echo $appNewVersion + + + + + + diff --git a/MDM/App-install with Dialog and dockutil/App VFA SS github.sh b/MDM/App-install with Dialog and dockutil/App VFA SS github.sh new file mode 100755 index 0000000..7671062 --- /dev/null +++ b/MDM/App-install with Dialog and dockutil/App VFA SS github.sh @@ -0,0 +1,279 @@ +#!/bin/sh + +# Installation using Installomator with Dialog showing progress (and posibility of adding to the Dock) +# Installation of software using `valuesfromarguments` to install a custom software using Installomator through GitHub + +LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +#item="gfxcardstatus" # enter the software to install (if it has a label in future version of Installomator) + +# Label variables below + +# GitHub functions +downloadURLFromGit() { # $1 git user name, $2 git repo name + gitusername=${1?:"no git user name"} + gitreponame=${2?:"no git repo name"} + + if [[ $type == "pkgInDmg" ]]; then + filetype="dmg" + elif [[ $type == "pkgInZip" ]]; then + filetype="zip" + else + filetype=$type + fi + + if [ -n "$archiveName" ]; then + downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1 || true) + if [[ "$(echo $downloadURL | grep -ioE "https.*$archiveName" || true)" == "" ]]; then + #printlog "Trying GitHub API for download URL." + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }" || true) + fi + else + downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1 || true) + if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype" || true)" == "" ]]; then + #printlog "Trying GitHub API for download URL." + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }" || true) + fi + fi + if [ -z "$downloadURL" ]; then + echo "could not retrieve download URL for $gitusername/$gitreponame" + exit 1 + else + echo "$downloadURL" + return 0 + fi +} +versionFromGit() { + # credit: Søren Theilgaard (@theilgaard) + # $1 git user name, $2 git repo name + gitusername=${1?:"no git user name"} + gitreponame=${2?:"no git repo name"} + + #appNewVersion=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | grep tag_name | cut -d '"' -f 4 | sed 's/[^0-9\.]//g' || true) + appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g' || true) + if [ -z "$appNewVersion" ]; then + #echo "could not retrieve version number for $gitusername/$gitreponame" + appNewVersion="" + else + echo "$appNewVersion" + return 0 + fi +} + +# Variables for label +name="gfxCardStatus" +type="zip" +downloadURL="$(downloadURLFromGit codykrieger gfxCardStatus)" +appNewVersion="$(versionFromGit codykrieger gfxCardStatus)" +expectedTeamID="LF22FTQC25" + +# Dialog icon +icon="" +# icon should be a file system path or an URL to an online PNG. +# In Mosyle an URL can be found by copy picture address from a Custom Command icon. + +# dockutil variables +addToDock="1" # with dockutil after installation (0 if not) +appPath="/Applications/$name.app" + +# Other variables +dialog_command_file="/var/tmp/dialog.log" +dialogApp="/Library/Application Support/Dialog/Dialog.app" +dockutil="/usr/local/bin/dockutil" + +installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=silent DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space + +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# To be used as a script sent out from a MDM. +# Fill the variable "item" above with a label. +# Script will run this label through Installomator. +###################################################################### +# v. 10.1 : github-functions added. Improved appIcon handling. Can add the app to Dock using dockutil. +# v. 10 : Integration with Dialog and Installomator v. 10 +# v. 9.3 : Better logging handling and installomatorOptions fix. +###################################################################### + +# Mark: Script +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +echo "$(date +%F\ %T) [LOG-BEGIN] $item" + +dialogUpdate() { + # $1: dialog command + local dcommand="$1" + + if [[ -n $dialog_command_file ]]; then + echo "$dcommand" >> "$dialog_command_file" + echo "Dialog: $dcommand" + fi +} +checkCmdOutput () { + # $1: cmdOutput + local cmdOutput="$1" + exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" + if [[ ${exitStatus} -eq 0 ]] ; then + echo "${item} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" + else + echo "ERROR installing ${item}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" + fi +} + +# Check the currently logged in user +currentUser=$(stat -f "%Su" /dev/console) +if [ -z "$currentUser" ] || [ "$currentUser" = "loginwindow" ] || [ "$currentUser" = "_mbsetupuser" ] || [ "$currentUser" = "root" ]; then + echo "ERROR. Logged in user is $currentUser! Cannot proceed." + exit 97 +fi +# Get the current user's UID for dockutil +uid=$(id -u "$currentUser") +# Find the home folder of the user +userHome="$(dscl . -read /users/${currentUser} NFSHomeDirectory | awk '{print $2}')" + +# Verify that Installomator has been installed +destFile="/usr/local/Installomator/Installomator.sh" +if [ ! -e "${destFile}" ]; then + echo "Installomator not found here:" + echo "${destFile}" + echo "Exiting." + exit 99 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" + pkill caffeinate + exit $1 +} + +# Mark: Installation begins +installomatorVersion="$(${destFile} version | cut -d "." -f1 || true)" + +if [[ $installomatorVersion -lt 10 ]] || [[ $(sw_vers -buildVersion) < "20A" ]]; then + echo "Installomator should be at least version 10 to support Dialog. Installed version $installomatorVersion." + echo "And macOS 11 Big Sur (build 20A) is required for Dialog. Installed build $(sw_vers -buildVersion)." + installomatorNotify="NOTIFY=all" +else + installomatorNotify="" + # check for Swift Dialog + if [[ ! -d $dialogApp ]]; then + echo "Cannot find dialog at $dialogApp" + # Install using Installlomator + cmdOutput="$(${destFile} dialog LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" + checkCmdOutput $cmdOutput + fi + + # Configure and display swiftDialog + #itemName=$( ${destFile} ${item} RETURN_LABEL_NAME=1 LOGGING=REQ INSTALL=force | tail -1 || true ) + itemName="$name" + if [[ "$itemName" != "#" ]]; then + message="Installing ${itemName}…" + else + message="Installing ${item}…" + fi + echo "$item $itemName" + + # If no icon defined we are trying to search for installed app icon + if [[ "$icon" == "" ]]; then + appPath=$(mdfind "kind:application AND name:$itemName" | head -1 || true) + appIcon=$(defaults read "${appPath}/Contents/Info.plist" CFBundleIconFile || true) + if [[ "$(echo "$appIcon" | grep -io ".icns")" == "" ]]; then + appIcon="${appIcon}.icns" + fi + icon="${appPath}/Contents/Resources/${appIcon}" + echo "${icon}" + if [ ! -f "${icon}" ]; then + icon="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + fi + echo "${icon}" + + # display first screen + open -a "$dialogApp" --args \ + --title none \ + --icon "$icon" \ + --message "$message" \ + --mini \ + --progress 100 \ + --position bottomright \ + --movable \ + --commandfile "$dialog_command_file" + + # give everything a moment to catch up + sleep 0.1 +fi + +# Install software using Installomator with valuesfromarguments +cmdOutput="$(${destFile} valuesfromarguments LOGO=$LOGO \ + name=${name} \ + type=${type} \ + downloadURL=\"$downloadURL\" \ + appNewVersion=${appNewVersion} \ + expectedTeamID=${expectedTeamID} \ + ${installomatorOptions} || true)" + +checkCmdOutput $cmdOutput + +# Mark: dockutil stuff +if [[ $addToDock -eq 1 ]]; then + dialogUpdate "progresstext: Adding to Dock" + if [[ ! -d $dockutil ]]; then + echo "Cannot find dockutil at $dockutil, trying installation" + # Install using Installlomator + cmdOutput="$(${destFile} dockutil LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" + checkCmdOutput $cmdOutput + fi + echo "Adding to Dock" + $dockutil --add "${appPath}" "${userHome}/Library/Preferences/com.apple.dock.plist" || true + sleep 1 +else + echo "Not adding to Dock." +fi + +# Mark: Ending +if [[ $installomatorVersion -lt 10 ]]; then + echo "Again skipping Dialog stuff." +else + # close and quit dialog + dialogUpdate "progress: complete" + dialogUpdate "progresstext: Done" + + # pause a moment + sleep 0.5 + + dialogUpdate "quit:" + + # let everything catch up + sleep 0.5 + + # just to be safe + #killall "Dialog" 2>/dev/null || true +fi + +echo "[$(DATE)][LOG-END]" + +caffexit $exitStatus diff --git a/MDM/App-install with Dialog and dockutil/App VFA SS.sh b/MDM/App-install with Dialog and dockutil/App VFA SS.sh new file mode 100755 index 0000000..a7b84a7 --- /dev/null +++ b/MDM/App-install with Dialog and dockutil/App VFA SS.sh @@ -0,0 +1,227 @@ +#!/bin/sh + +# Installation using Installomator with Dialog showing progress (and posibility of adding to the Dock) +# Installation of software using `valuesfromarguments` to install a custom software using Installomator + +LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +#item="" # enter the software to install (if it has a label in future version of Installomator) + +# Variables for label +name="ClickShare" +type="appInDmgInZip" +downloadURL="https://www.barco.com$( curl -fs "https://www.barco.com/en/clickshare/app" | grep -A6 -i "macos" | grep -i "FileNumber" | tr '"' "\n" | grep -i "FileNumber" )" +appNewVersion="$(eval "$( echo $downloadURL | sed -E 's/.*(MajorVersion.*BuildVersion=[0-9]*).*/\1/' | sed 's/&//g' )" ; ((MajorVersion++)) ; ((MajorVersion--)); ((MinorVersion++)) ; ((MinorVersion--)); ((PatchVersion++)) ; ((PatchVersion--)); ((BuildVersion++)) ; ((BuildVersion--)); echo "${MajorVersion}.${MinorVersion}.${PatchVersion}-b${BuildVersion}")" +expectedTeamID="P6CDJZR997" + +# Dialog icon +icon="" +# icon should be a file system path or an URL to an online PNG. +# In Mosyle an URL can be found by copy picture address from a Custom Command icon. + +# dockutil variables +addToDock="1" # with dockutil after installation (0 if not) +appPath="/Applications/$name.app" + +# Other variables +dialog_command_file="/var/tmp/dialog.log" +dialogApp="/Library/Application Support/Dialog/Dialog.app" +dockutil="/usr/local/bin/dockutil" + +installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=silent DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space + +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# To be used as a script sent out from a MDM. +# Fill the variable "item" above with a label. +# Script will run this label through Installomator. +###################################################################### +# v. 10.1 : Improved appIcon handling. Can add the app to Dock using dockutil +# v. 10 : Integration with Dialog and Installomator v. 10 +# v. 9.3 : Better logging handling and installomatorOptions fix. +###################################################################### + +# Mark: Script +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +echo "$(date +%F\ %T) [LOG-BEGIN] $item" + +dialogUpdate() { + # $1: dialog command + local dcommand="$1" + + if [[ -n $dialog_command_file ]]; then + echo "$dcommand" >> "$dialog_command_file" + echo "Dialog: $dcommand" + fi +} +checkCmdOutput () { + # $1: cmdOutput + local cmdOutput="$1" + exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" + if [[ ${exitStatus} -eq 0 ]] ; then + echo "${item} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" + else + echo "ERROR installing ${item}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" + fi +} + +# Check the currently logged in user +currentUser=$(stat -f "%Su" /dev/console) +if [ -z "$currentUser" ] || [ "$currentUser" = "loginwindow" ] || [ "$currentUser" = "_mbsetupuser" ] || [ "$currentUser" = "root" ]; then + echo "ERROR. Logged in user is $currentUser! Cannot proceed." + exit 97 +fi +# Get the current user's UID for dockutil +uid=$(id -u "$currentUser") +# Find the home folder of the user +userHome="$(dscl . -read /users/${currentUser} NFSHomeDirectory | awk '{print $2}')" + +# Verify that Installomator has been installed +#destFile="/usr/local/Installomator/Installomator.sh" +destFile="/usr/local/Installomator/Installomator10.sh" +if [ ! -e "${destFile}" ]; then + echo "Installomator not found here:" + echo "${destFile}" + echo "Exiting." + exit 99 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" + pkill caffeinate + exit $1 +} + +# Mark: Installation begins +installomatorVersion="$(${destFile} version | cut -d "." -f1 || true)" + +if [[ $installomatorVersion -lt 10 ]] || [[ $(sw_vers -buildVersion) < "20A" ]]; then + echo "Installomator should be at least version 10 to support Dialog. Installed version $installomatorVersion." + echo "And macOS 11 Big Sur (build 20A) is required for Dialog. Installed build $(sw_vers -buildVersion)." + installomatorNotify="NOTIFY=all" +else + installomatorNotify="" + # check for Swift Dialog + if [[ ! -d $dialogApp ]]; then + echo "Cannot find dialog at $dialogApp" + # Install using Installlomator + cmdOutput="$(${destFile} dialog LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" + checkCmdOutput $cmdOutput + fi + + # Configure and display swiftDialog + #itemName=$( ${destFile} ${item} RETURN_LABEL_NAME=1 LOGGING=REQ INSTALL=force | tail -1 || true ) + itemName="$name" + if [[ "$itemName" != "#" ]]; then + message="Installing ${itemName}…" + else + message="Installing ${item}…" + fi + echo "$item $itemName" + + # If no icon defined we are trying to search for installed app icon + if [[ "$icon" == "" ]]; then + appPath=$(mdfind "kind:application AND name:$itemName" | head -1 || true) + appIcon=$(defaults read "${appPath}/Contents/Info.plist" CFBundleIconFile || true) + if [[ "$(echo "$appIcon" | grep -io ".icns")" == "" ]]; then + appIcon="${appIcon}.icns" + fi + icon="${appPath}/Contents/Resources/${appIcon}" + echo "${icon}" + if [ ! -f "${icon}" ]; then + icon="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + fi + echo "${icon}" + + # display first screen + open -a "$dialogApp" --args \ + --title none \ + --icon "$icon" \ + --message "$message" \ + --mini \ + --progress 100 \ + --position bottomright \ + --movable \ + --commandfile "$dialog_command_file" + + # give everything a moment to catch up + sleep 0.1 +fi + +# Install software using Installomator with valuesfromarguments +cmdOutput="$(${destFile} valuesfromarguments LOGO=$LOGO \ + name=${name} \ + type=${type} \ + downloadURL=\"$downloadURL\" \ + appNewVersion=${appNewVersion} \ + expectedTeamID=${expectedTeamID} \ + ${installomatorOptions} || true)" + +checkCmdOutput $cmdOutput + +# Mark: dockutil stuff +if [[ $addToDock -eq 1 ]]; then + dialogUpdate "progresstext: Adding to Dock" + if [[ ! -d $dockutil ]]; then + echo "Cannot find dockutil at $dockutil, trying installation" + # Install using Installlomator + cmdOutput="$(${destFile} dockutil LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" + checkCmdOutput $cmdOutput + fi + echo "Adding to Dock" + $dockutil --add "${appPath}" "${userHome}/Library/Preferences/com.apple.dock.plist" || true + sleep 1 +else + echo "Not adding to Dock." +fi + +# Mark: Ending +if [[ $installomatorVersion -lt 10 ]]; then + echo "Again skipping Dialog stuff." +else + # close and quit dialog + dialogUpdate "progress: complete" + dialogUpdate "progresstext: Done" + + # pause a moment + sleep 0.5 + + dialogUpdate "quit:" + + # let everything catch up + sleep 0.5 + + # just to be safe + #killall "Dialog" 2>/dev/null || true +fi + +echo "[$(DATE)][LOG-END]" + +caffexit $exitStatus diff --git a/MDM/App-install with Dialog and dockutil/App browser-security.sh b/MDM/App-install with Dialog and dockutil/App browser-security.sh new file mode 100755 index 0000000..d9eb405 --- /dev/null +++ b/MDM/App-install with Dialog and dockutil/App browser-security.sh @@ -0,0 +1,211 @@ +#!/bin/sh + +# Installation using Installomator with Dialog showing progress (and posibility of adding to the Dock) + +LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +item="firefoxpkg" # enter the software to install +# Examples: microsoftedge, brave, googlechromepkg, firefoxpkg + +# Dialog icon +icon="https://mosylebusinessweb.blob.core.windows.net/envoit-public/customcommand_icon-envoit_3e37cc23e3fd8d29b1fbe85bc3b3923b323627dc83153cf673.png" +# icon should be a file system path or an URL to an online PNG. +# In Mosyle an URL can be found by copy picture address from a Custom Command icon. + +# dockutil variables +addToDock="1" # with dockutil after installation (0 if not) +appPath="/Applications/Firefox.app" + +# Other variables +dialog_command_file="/var/tmp/dialog.log" +dialogApp="/Library/Application Support/Dialog/Dialog.app" +dockutil="/usr/local/bin/dockutil" + +installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit NOTIFY=silent DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space + +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# To be used as a script sent out from a MDM. +# Fill the variable "item" above with a label. +# Script will run this label through Installomator. +###################################################################### +# v. 10.1 : Improved appIcon handling. Can add the app to Dock using dockutil +# v. 10 : Integration with Dialog and Installomator v. 10 +# v. 9.3 : Better logging handling and installomatorOptions fix. +###################################################################### + +# Mark: Script +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +echo "$(date +%F\ %T) [LOG-BEGIN] $item" + +dialogUpdate() { + # $1: dialog command + local dcommand="$1" + + if [[ -n $dialog_command_file ]]; then + echo "$dcommand" >> "$dialog_command_file" + echo "Dialog: $dcommand" + fi +} +checkCmdOutput () { + # $1: cmdOutput + local cmdOutput="$1" + exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" + if [[ ${exitStatus} -eq 0 ]] ; then + echo "${item} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" + else + echo "ERROR installing ${item}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" + fi +} + +# Check the currently logged in user +currentUser=$(stat -f "%Su" /dev/console) +if [ -z "$currentUser" ] || [ "$currentUser" = "loginwindow" ] || [ "$currentUser" = "_mbsetupuser" ] || [ "$currentUser" = "root" ]; then + echo "ERROR. Logged in user is $currentUser! Cannot proceed." + exit 97 +fi +# Get the current user's UID for dockutil +uid=$(id -u "$currentUser") +# Find the home folder of the user +userHome="$(dscl . -read /users/${currentUser} NFSHomeDirectory | awk '{print $2}')" + +# Verify that Installomator has been installed +destFile="/usr/local/Installomator/Installomator.sh" +if [ ! -e "${destFile}" ]; then + echo "Installomator not found here:" + echo "${destFile}" + echo "Exiting." + exit 99 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" + pkill caffeinate + exit $1 +} + +# Mark: Installation begins +installomatorVersion="$(${destFile} version | cut -d "." -f1 || true)" + +if [[ $installomatorVersion -lt 10 ]] || [[ $(sw_vers -buildVersion) < "20A" ]]; then + echo "Installomator should be at least version 10 to support Dialog. Installed version $installomatorVersion." + echo "And macOS 11 Big Sur (build 20A) is required for Dialog. Installed build $(sw_vers -buildVersion)." + installomatorNotify="NOTIFY=all" +else + installomatorNotify="" + # check for Swift Dialog + if [[ ! -d $dialogApp ]]; then + echo "Cannot find dialog at $dialogApp" + # Install using Installlomator + cmdOutput="$(${destFile} dialog LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" + checkCmdOutput $cmdOutput + fi + + # Configure and display swiftDialog + itemName=$( ${destFile} ${item} RETURN_LABEL_NAME=1 LOGGING=REQ INSTALL=force | tail -1 || true ) + if [[ "$itemName" != "#" ]]; then + message="Installing ${itemName}…" + else + message="Installing ${item}…" + fi + echo "$item $itemName" + + # If no icon defined we are trying to search for installed app icon + if [[ "$icon" == "" ]]; then + appPath=$(mdfind "kind:application AND name:$itemName" | head -1 || true) + appIcon=$(defaults read "${appPath}/Contents/Info.plist" CFBundleIconFile || true) + if [[ "$(echo "$appIcon" | grep -io ".icns")" == "" ]]; then + appIcon="${appIcon}.icns" + fi + icon="${appPath}/Contents/Resources/${appIcon}" + echo "${icon}" + if [ ! -f "${icon}" ]; then + icon="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + fi + echo "${icon}" + + # display first screen + open -a "$dialogApp" --args \ + --title none \ + --icon "$icon" \ + --message "$message" \ + --mini \ + --progress 100 \ + --position bottomright \ + --movable \ + --commandfile "$dialog_command_file" + + # give everything a moment to catch up + sleep 0.1 +fi + +# Install software using Installomator +cmdOutput="$(${destFile} ${item} LOGO=$LOGO ${installomatorOptions} ${installomatorNotify} || true)" +checkCmdOutput $cmdOutput + +# Mark: dockutil stuff +if [[ $addToDock -eq 1 ]]; then + dialogUpdate "progresstext: Adding to Dock" + if [[ ! -d $dockutil ]]; then + echo "Cannot find dockutil at $dockutil, trying installation" + # Install using Installlomator + cmdOutput="$(${destFile} dockutil LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" + checkCmdOutput $cmdOutput + fi + echo "Adding to Dock" + $dockutil --add "${appPath}" "${userHome}/Library/Preferences/com.apple.dock.plist" || true + sleep 1 +else + echo "Not adding to Dock." +fi + +# Mark: Ending +if [[ $installomatorVersion -lt 10 ]]; then + echo "Again skipping Dialog stuff." +else + # close and quit dialog + dialogUpdate "progress: complete" + dialogUpdate "progresstext: Done" + + # pause a moment + sleep 0.5 + + dialogUpdate "quit:" + + # let everything catch up + sleep 0.5 + + # just to be safe + #killall "Dialog" 2>/dev/null || true +fi + +echo "[$(DATE)][LOG-END]" + +caffexit $exitStatus diff --git a/MDM/App-install with Dialog and dockutil/App normal SS multi-app.sh b/MDM/App-install with Dialog and dockutil/App normal SS multi-app.sh new file mode 100644 index 0000000..9d3d593 --- /dev/null +++ b/MDM/App-install with Dialog and dockutil/App normal SS multi-app.sh @@ -0,0 +1,214 @@ +#!/bin/sh + +# Installation using Installomator with Dialog showing progress (and posibility of adding to the Dock) + +LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +item="microsoftoffice365" # enter the software to install +# Examples: microsoftedge, brave, googlechromepkg, firefoxpkg + +# Dialog icon +icon="" +# icon should be a file system path or an URL to an online PNG. +# In Mosyle an URL can be found by copy picture address from a Custom Command icon. + +# dockutil variables +addToDock="1" # with dockutil after installation (0 if not) +appPaths=("/Applications/Microsoft Outlook.app" "/Applications/Microsoft Word.app" "/Applications/Microsoft Excel.app" "/Applications/Microsoft PowerPoint.app" "/Applications/Microsoft OneNote.app") + +# Other variables +dialog_command_file="/var/tmp/dialog.log" +dialogApp="/Library/Application Support/Dialog/Dialog.app" +dockutil="/usr/local/bin/dockutil" + +installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=silent DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space + +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# To be used as a script sent out from a MDM. +# Fill the variable "item" above with a label. +# Script will run this label through Installomator. +###################################################################### +# v. 10.1 : Improved appIcon handling. Can add the app to Dock using dockutil +# v. 10 : Integration with Dialog and Installomator v. 10 +# v. 9.3 : Better logging handling and installomatorOptions fix. +###################################################################### + +# Mark: Script +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +echo "$(date +%F\ %T) [LOG-BEGIN] $item" + +dialogUpdate() { + # $1: dialog command + local dcommand="$1" + + if [[ -n $dialog_command_file ]]; then + echo "$dcommand" >> "$dialog_command_file" + echo "Dialog: $dcommand" + fi +} +checkCmdOutput () { + # $1: cmdOutput + local cmdOutput="$1" + exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" + if [[ ${exitStatus} -eq 0 ]] ; then + echo "${item} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" + else + echo "ERROR installing ${item}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" + fi +} + +# Check the currently logged in user +currentUser=$(stat -f "%Su" /dev/console) +if [ -z "$currentUser" ] || [ "$currentUser" = "loginwindow" ] || [ "$currentUser" = "_mbsetupuser" ] || [ "$currentUser" = "root" ]; then + echo "ERROR. Logged in user is $currentUser! Cannot proceed." + exit 97 +fi +# Get the current user's UID for dockutil +uid=$(id -u "$currentUser") +# Find the home folder of the user +userHome="$(dscl . -read /users/${currentUser} NFSHomeDirectory | awk '{print $2}')" + +# Verify that Installomator has been installed +destFile="/usr/local/Installomator/Installomator.sh" +if [ ! -e "${destFile}" ]; then + echo "Installomator not found here:" + echo "${destFile}" + echo "Exiting." + exit 99 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" + pkill caffeinate + exit $1 +} + +# Mark: Installation begins +installomatorVersion="$(${destFile} version | cut -d "." -f1 || true)" + +if [[ $installomatorVersion -lt 10 ]] || [[ $(sw_vers -buildVersion) < "20A" ]]; then + echo "Installomator should be at least version 10 to support Dialog. Installed version $installomatorVersion." + echo "And macOS 11 Big Sur (build 20A) is required for Dialog. Installed build $(sw_vers -buildVersion)." + installomatorNotify="NOTIFY=all" +else + installomatorNotify="" + # check for Swift Dialog + if [[ ! -d $dialogApp ]]; then + echo "Cannot find dialog at $dialogApp" + # Install using Installlomator + cmdOutput="$(${destFile} dialog LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" + checkCmdOutput $cmdOutput + fi + + # Configure and display swiftDialog + itemName=$( ${destFile} ${item} RETURN_LABEL_NAME=1 LOGGING=REQ INSTALL=force | tail -1 || true ) + if [[ "$itemName" != "#" ]]; then + message="Installing ${itemName}…" + else + message="Installing ${item}…" + fi + echo "$item $itemName" + + # If no icon defined we are trying to search for installed app icon + if [[ "$icon" == "" ]]; then + appPath=$(mdfind "kind:application AND name:$itemName" | head -1 || true) + appIcon=$(defaults read "${appPath}/Contents/Info.plist" CFBundleIconFile || true) + if [[ "$(echo "$appIcon" | grep -io ".icns")" == "" ]]; then + appIcon="${appIcon}.icns" + fi + icon="${appPath}/Contents/Resources/${appIcon}" + echo "${icon}" + if [ ! -f "${icon}" ]; then + icon="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + fi + echo "${icon}" + + # display first screen + open -a "$dialogApp" --args \ + --title none \ + --icon "$icon" \ + --message "$message" \ + --mini \ + --progress 100 \ + --position bottomright \ + --movable \ + --commandfile "$dialog_command_file" + + # give everything a moment to catch up + sleep 0.1 +fi + +# Install software using Installomator +cmdOutput="$(${destFile} ${item} LOGO=$LOGO ${installomatorOptions} ${installomatorNotify} || true)" +checkCmdOutput $cmdOutput + +# Mark: dockutil stuff +if [[ $addToDock -eq 1 ]]; then + dialogUpdate "progresstext: Adding to Dock" + if [[ ! -d $dockutil ]]; then + echo "Cannot find dockutil at $dockutil, trying installation" + # Install using Installlomator + cmdOutput="$(${destFile} dockutil LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" + checkCmdOutput $cmdOutput + fi + echo "Adding to Dock" + for appPath in "${appPaths[@]}"; do + $dockutil --add "${appPath}" "${userHome}/Library/Preferences/com.apple.dock.plist" --no-restart || true + done + $dockutil --add "/AppThatDoesNotExistAnywhereOnDiskButMakingDockutilRestartTheDock" "${userHome}/Library/Preferences/com.apple.dock.plist" || true + sleep 1 +else + echo "Not adding to Dock." +fi + +# Mark: Ending +if [[ $installomatorVersion -lt 10 ]]; then + echo "Again skipping Dialog stuff." +else + # close and quit dialog + dialogUpdate "progress: complete" + dialogUpdate "progresstext: Done" + + # pause a moment + sleep 0.5 + + dialogUpdate "quit:" + + # let everything catch up + sleep 0.5 + + # just to be safe + #killall "Dialog" 2>/dev/null || true +fi + +echo "[$(DATE)][LOG-END]" + +caffexit $exitStatus diff --git a/MDM/App-install with Dialog and dockutil/App normal SS.sh b/MDM/App-install with Dialog and dockutil/App normal SS.sh new file mode 100644 index 0000000..7326f4a --- /dev/null +++ b/MDM/App-install with Dialog and dockutil/App normal SS.sh @@ -0,0 +1,211 @@ +#!/bin/sh + +# Installation using Installomator with Dialog showing progress (and posibility of adding to the Dock) + +LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +item="" # enter the software to install +# Examples: microsoftedge, brave, googlechromepkg, firefoxpkg + +# Dialog icon +icon="" +# icon should be a file system path or an URL to an online PNG. +# In Mosyle an URL can be found by copy picture address from a Custom Command icon. + +# dockutil variables +addToDock="1" # with dockutil after installation (0 if not) +appPath="/Applications/.app" + +# Other variables +dialog_command_file="/var/tmp/dialog.log" +dialogApp="/Library/Application Support/Dialog/Dialog.app" +dockutil="/usr/local/bin/dockutil" + +installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=silent DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space + +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# To be used as a script sent out from a MDM. +# Fill the variable "item" above with a label. +# Script will run this label through Installomator. +###################################################################### +# v. 10.1 : Improved appIcon handling. Can add the app to Dock using dockutil +# v. 10 : Integration with Dialog and Installomator v. 10 +# v. 9.3 : Better logging handling and installomatorOptions fix. +###################################################################### + +# Mark: Script +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +echo "$(date +%F\ %T) [LOG-BEGIN] $item" + +dialogUpdate() { + # $1: dialog command + local dcommand="$1" + + if [[ -n $dialog_command_file ]]; then + echo "$dcommand" >> "$dialog_command_file" + echo "Dialog: $dcommand" + fi +} +checkCmdOutput () { + # $1: cmdOutput + local cmdOutput="$1" + exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" + if [[ ${exitStatus} -eq 0 ]] ; then + echo "${item} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" + else + echo "ERROR installing ${item}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" + fi +} + +# Check the currently logged in user +currentUser=$(stat -f "%Su" /dev/console) +if [ -z "$currentUser" ] || [ "$currentUser" = "loginwindow" ] || [ "$currentUser" = "_mbsetupuser" ] || [ "$currentUser" = "root" ]; then + echo "ERROR. Logged in user is $currentUser! Cannot proceed." + exit 97 +fi +# Get the current user's UID for dockutil +uid=$(id -u "$currentUser") +# Find the home folder of the user +userHome="$(dscl . -read /users/${currentUser} NFSHomeDirectory | awk '{print $2}')" + +# Verify that Installomator has been installed +destFile="/usr/local/Installomator/Installomator.sh" +if [ ! -e "${destFile}" ]; then + echo "Installomator not found here:" + echo "${destFile}" + echo "Exiting." + exit 99 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" + pkill caffeinate + exit $1 +} + +# Mark: Installation begins +installomatorVersion="$(${destFile} version | cut -d "." -f1 || true)" + +if [[ $installomatorVersion -lt 10 ]] || [[ $(sw_vers -buildVersion) < "20A" ]]; then + echo "Installomator should be at least version 10 to support Dialog. Installed version $installomatorVersion." + echo "And macOS 11 Big Sur (build 20A) is required for Dialog. Installed build $(sw_vers -buildVersion)." + installomatorNotify="NOTIFY=all" +else + installomatorNotify="" + # check for Swift Dialog + if [[ ! -d $dialogApp ]]; then + echo "Cannot find dialog at $dialogApp" + # Install using Installlomator + cmdOutput="$(${destFile} dialog LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" + checkCmdOutput $cmdOutput + fi + + # Configure and display swiftDialog + itemName=$( ${destFile} ${item} RETURN_LABEL_NAME=1 LOGGING=REQ INSTALL=force | tail -1 || true ) + if [[ "$itemName" != "#" ]]; then + message="Installing ${itemName}…" + else + message="Installing ${item}…" + fi + echo "$item $itemName" + + # If no icon defined we are trying to search for installed app icon + if [[ "$icon" == "" ]]; then + appPath=$(mdfind "kind:application AND name:$itemName" | head -1 || true) + appIcon=$(defaults read "${appPath}/Contents/Info.plist" CFBundleIconFile || true) + if [[ "$(echo "$appIcon" | grep -io ".icns")" == "" ]]; then + appIcon="${appIcon}.icns" + fi + icon="${appPath}/Contents/Resources/${appIcon}" + echo "${icon}" + if [ ! -f "${icon}" ]; then + icon="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + fi + echo "${icon}" + + # display first screen + open -a "$dialogApp" --args \ + --title none \ + --icon "$icon" \ + --message "$message" \ + --mini \ + --progress 100 \ + --position bottomright \ + --movable \ + --commandfile "$dialog_command_file" + + # give everything a moment to catch up + sleep 0.1 +fi + +# Install software using Installomator +cmdOutput="$(${destFile} ${item} LOGO=$LOGO ${installomatorOptions} ${installomatorNotify} || true)" +checkCmdOutput $cmdOutput + +# Mark: dockutil stuff +if [[ $addToDock -eq 1 ]]; then + dialogUpdate "progresstext: Adding to Dock" + if [[ ! -d $dockutil ]]; then + echo "Cannot find dockutil at $dockutil, trying installation" + # Install using Installlomator + cmdOutput="$(${destFile} dockutil LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" + checkCmdOutput $cmdOutput + fi + echo "Adding to Dock" + $dockutil --add "${appPath}" "${userHome}/Library/Preferences/com.apple.dock.plist" || true + sleep 1 +else + echo "Not adding to Dock." +fi + +# Mark: Ending +if [[ $installomatorVersion -lt 10 ]]; then + echo "Again skipping Dialog stuff." +else + # close and quit dialog + dialogUpdate "progress: complete" + dialogUpdate "progresstext: Done" + + # pause a moment + sleep 0.5 + + dialogUpdate "quit:" + + # let everything catch up + sleep 0.5 + + # just to be safe + #killall "Dialog" 2>/dev/null || true +fi + +echo "[$(DATE)][LOG-END]" + +caffexit $exitStatus diff --git a/MDM/App-install/App VFA.sh b/MDM/App-install/App VFA.sh new file mode 100755 index 0000000..19240cd --- /dev/null +++ b/MDM/App-install/App VFA.sh @@ -0,0 +1,93 @@ +#!/bin/sh + +# Installation using Installomator +# Installation of software using valuesfromarguments to install a custom software using Installomator + +LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +#item="" # enter the software to install (if it has a label in future version of Installomator) + +# Variables for label +name="ClickShare" +type="appInDmgInZip" +downloadURL="https://www.barco.com$( curl -fs "https://www.barco.com/en/clickshare/app" | grep -A6 -i "macos" | grep -i "FileNumber" | tr '"' "\n" | grep -i "FileNumber" )" +appNewVersion="$(eval "$( echo $downloadURL | sed -E 's/.*(MajorVersion.*BuildVersion=[0-9]*).*/\1/' | sed 's/&//g' )" ; ((MajorVersion++)) ; ((MajorVersion--)); ((MinorVersion++)) ; ((MinorVersion--)); ((PatchVersion++)) ; ((PatchVersion--)); ((BuildVersion++)) ; ((BuildVersion--)); echo "${MajorVersion}.${MinorVersion}.${PatchVersion}-b${BuildVersion}")" +expectedTeamID="P6CDJZR997" + +installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user LOGGING=INFO NOTIFY=all" # Separated by space + +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# To be used as a script sent out from a MDM. +# Fill the variable "what" above with a label. +# Script will run this label through Installomator. +###################################################################### +# v. 9.3 : Better logging handling and installomatorOptions fix. +###################################################################### + +# Mark: Script +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +echo "$(date +%F\ %T) [LOG-BEGIN] $what" + +# Verify that Installomator has been installed +destFile="/usr/local/Installomator/Installomator.sh" +if [ ! -e "${destFile}" ]; then + echo "Installomator not found here:" + echo "${destFile}" + echo "Exiting." + exit 99 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" + pkill caffeinate + exit $1 +} + +# Install software using Installomator with valuesfromarguments +cmdOutput="$(${destFile} valuesfromarguments LOGO=$LOGO \ + name=${name} \ + type=${type} \ + downloadURL=\"$downloadURL\" \ + appNewVersion=${appNewVersion} \ + expectedTeamID=${expectedTeamID} \ + ${installomatorOptions} || true)" + + +# Check result +exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" +if [[ ${exitStatus} -eq 0 ]] ; then + echo "${what} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" +else + echo "ERROR installing ${what}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" +fi + +echo "[$(DATE)][LOG-END]" + +caffexit $exitStatus diff --git a/MDM/App-install/App browser-security Auto-install.sh b/MDM/App-install/App browser-security Auto-install.sh new file mode 100644 index 0000000..dfd0ada --- /dev/null +++ b/MDM/App-install/App browser-security Auto-install.sh @@ -0,0 +1,79 @@ +#!/bin/sh + +# Installation using Installomator + +LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +what="firefoxpkg" # enter the software to install +# Examples: microsoftedge, brave, googlechromepkg, firefoxpkg + +installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit" # Separated by space + +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# To be used as a script sent out from a MDM. +# Fill the variable "what" above with a label. +# Script will run this label through Installomator. +###################################################################### +# v. 9.3 : Better logging handling and installomatorOptions fix. +###################################################################### + +# Mark: Script +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +echo "$(date +%F\ %T) [LOG-BEGIN] $what" + +# Verify that Installomator has been installed +destFile="/usr/local/Installomator/Installomator.sh" +if [ ! -e "${destFile}" ]; then + echo "Installomator not found here:" + echo "${destFile}" + echo "Exiting." + exit 99 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" + pkill caffeinate + exit $1 +} + +# Install software using Installomator +cmdOutput="$(${destFile} ${what} LOGO=$LOGO ${installomatorOptions} || true)" + +# Check result +exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" +if [[ ${exitStatus} -eq 0 ]] ; then + echo "${what} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" +else + echo "ERROR installing ${what}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" +fi + +echo "[$(DATE)][LOG-END]" + +caffexit $exitStatus diff --git a/MDM/App-install/App browser-security SS.sh b/MDM/App-install/App browser-security SS.sh new file mode 100644 index 0000000..829ae5a --- /dev/null +++ b/MDM/App-install/App browser-security SS.sh @@ -0,0 +1,79 @@ +#!/bin/sh + +# Installation using Installomator + +LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +what="" # enter the software to install +# Examples: microsoftedge, brave, googlechromepkg, firefoxpkg + +installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit NOTIFY=all" # Separated by space + +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# To be used as a script sent out from a MDM. +# Fill the variable "what" above with a label. +# Script will run this label through Installomator. +###################################################################### +# v. 9.3 : Better logging handling and installomatorOptions fix. +###################################################################### + +# Mark: Script +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +echo "$(date +%F\ %T) [LOG-BEGIN] $what" + +# Verify that Installomator has been installed +destFile="/usr/local/Installomator/Installomator.sh" +if [ ! -e "${destFile}" ]; then + echo "Installomator not found here:" + echo "${destFile}" + echo "Exiting." + exit 99 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" + pkill caffeinate + exit $1 +} + +# Install software using Installomator +cmdOutput="$(${destFile} ${what} LOGO=$LOGO ${installomatorOptions} || true)" + +# Check result +exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" +if [[ ${exitStatus} -eq 0 ]] ; then + echo "${what} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" +else + echo "ERROR installing ${what}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" +fi + +echo "[$(DATE)][LOG-END]" + +caffexit $exitStatus diff --git a/MDM/App-install/App normal Auto-install.sh b/MDM/App-install/App normal Auto-install.sh new file mode 100644 index 0000000..aa7d624 --- /dev/null +++ b/MDM/App-install/App normal Auto-install.sh @@ -0,0 +1,79 @@ +#!/bin/sh + +# Installation using Installomator + +LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +what="" # enter the software to install +# Examples: adobecreativeclouddesktop, textmate, vlc + +installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user" # Separated by space + +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# To be used as a script sent out from a MDM. +# Fill the variable "what" above with a label. +# Script will run this label through Installomator. +###################################################################### +# v. 9.3 : Better logging handling and installomatorOptions fix. +###################################################################### + +# Mark: Script +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +echo "$(date +%F\ %T) [LOG-BEGIN] $what" + +# Verify that Installomator has been installed +destFile="/usr/local/Installomator/Installomator.sh" +if [ ! -e "${destFile}" ]; then + echo "Installomator not found here:" + echo "${destFile}" + echo "Exiting." + exit 99 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" + pkill caffeinate + exit $1 +} + +# Install software using Installomator +cmdOutput="$(${destFile} ${what} LOGO=$LOGO ${installomatorOptions} || true)" + +# Check result +exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" +if [[ ${exitStatus} -eq 0 ]] ; then + echo "${what} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" +else + echo "ERROR installing ${what}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" +fi + +echo "[$(DATE)][LOG-END]" + +caffexit $exitStatus diff --git a/MDM/App-install/App normal SS.sh b/MDM/App-install/App normal SS.sh new file mode 100644 index 0000000..98aa7c1 --- /dev/null +++ b/MDM/App-install/App normal SS.sh @@ -0,0 +1,79 @@ +#!/bin/sh + +# Installation using Installomator + +LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +what="" # enter the software to install +# Examples: adobecreativeclouddesktop, textmate, vlc + +installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=all" # Separated by space + +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# To be used as a script sent out from a MDM. +# Fill the variable "what" above with a label. +# Script will run this label through Installomator. +###################################################################### +# v. 9.3 : Better logging handling and installomatorOptions fix. +###################################################################### + +# Mark: Script +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +echo "$(date +%F\ %T) [LOG-BEGIN] $what" + +# Verify that Installomator has been installed +destFile="/usr/local/Installomator/Installomator.sh" +if [ ! -e "${destFile}" ]; then + echo "Installomator not found here:" + echo "${destFile}" + echo "Exiting." + exit 99 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" + pkill caffeinate + exit $1 +} + +# Install software using Installomator +cmdOutput="$(${destFile} ${what} LOGO=$LOGO ${installomatorOptions} || true)" + +# Check result +exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" +if [[ ${exitStatus} -eq 0 ]] ; then + echo "${what} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" +else + echo "ERROR installing ${what}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" +fi + +echo "[$(DATE)][LOG-END]" + +caffexit $exitStatus diff --git a/MDM/App-install/App service Auto-install.sh b/MDM/App-install/App service Auto-install.sh new file mode 100644 index 0000000..8e0509a --- /dev/null +++ b/MDM/App-install/App service Auto-install.sh @@ -0,0 +1,208 @@ +#!/bin/sh + +# Installation using Installomator + +LOGO="addigy" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +item="xink" # enter the software to install +# Examples: desktoppr, dockutil, supportapp, applenyfonts, applesfpro, applesfmono, applesfcompact, nomad, nudge, shield, xink + +# Dialog icon +icon="" +# icon should be a file system path or an URL to an online PNG. +# In Mosyle an URL can be found by copy picture address from a Custom Command icon. + +# dockutil variables +addToDock="1" # with dockutil after installation (0 if not) +appPath="/Applications/Xink.app" + +# Other variables +dialog_command_file="/var/tmp/dialog.log" +dialogApp="/Library/Application Support/Dialog/Dialog.app" +dockutil="/usr/local/bin/dockutil" + +installomatorOptions="BLOCKING_PROCESS_ACTION=ignore NOTIFY=silent DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space + +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# To be used as a script sent out from a MDM. +# Fill the variable "item" above with a label. +# Script will run this label through Installomator. +###################################################################### +# v. 10.1 : Can add the app to Dock using dockutil +# v. 10 : Integration with Dialog and Installomator v. 10 +# v. 9.3 : Better logging handling and installomatorOptions fix. +###################################################################### + +# Mark: Script +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +echo "$(date +%F\ %T) [LOG-BEGIN] $item" + +dialogUpdate() { + # $1: dialog command + local dcommand="$1" + + if [[ -n $dialog_command_file ]]; then + echo "$dcommand" >> "$dialog_command_file" + echo "Dialog: $dcommand" + fi +} +checkCmdOutput () { + # $1: cmdOutput + local cmdOutput="$1" + exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" + if [[ ${exitStatus} -eq 0 ]] ; then + echo "${item} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" + else + echo "ERROR installing ${item}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" + fi +} + +# Check the currently logged in user +currentUser=$(stat -f "%Su" /dev/console) +if [ -z "$currentUser" ] || [ "$currentUser" = "loginwindow" ] || [ "$currentUser" = "_mbsetupuser" ] || [ "$currentUser" = "root" ]; then + echo "ERROR. Logged in user is $currentUser! Cannot proceed." + exit 97 +fi +# Get the current user's UID for dockutil +uid=$(id -u "$currentUser") +# Find the home folder of the user +userHome="$(dscl . -read /users/${currentUser} NFSHomeDirectory | awk '{print $2}')" + +# Verify that Installomator has been installed +destFile="/usr/local/Installomator/Installomator.sh" +if [ ! -e "${destFile}" ]; then + echo "Installomator not found here:" + echo "${destFile}" + echo "Exiting." + exit 99 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" + pkill caffeinate + exit $1 +} + +# Mark: Installation begins +installomatorVersion="$(${destFile} version | cut -d "." -f1 || true)" + +if [[ $installomatorVersion -lt 10 ]] || [[ $(sw_vers -buildVersion) < "20A" ]]; then + echo "Installomator should be at least version 10 to support Dialog. Installed version $installomatorVersion." + echo "And macOS 11 Big Sur (build 20A) is required for Dialog. Installed build $(sw_vers -buildVersion)." + installomatorNotify="NOTIFY=all" +else + installomatorNotify="" + # check for Swift Dialog + if [[ ! -d $dialogApp ]]; then + echo "Cannot find dialog at $dialogApp" + # Install using Installlomator + cmdOutput="$(${destFile} dialog LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" + checkCmdOutput $cmdOutput + fi + + # Configure and display swiftDialog + itemName=$( ${destFile} ${item} RETURN_LABEL_NAME=1 LOGGING=REQ INSTALL=force | tail -1 || true ) + if [[ "$itemName" != "#" ]]; then + message="Installing ${itemName}…" + else + message="Installing ${item}…" + fi + echo "$item $itemName" + + # If no icon defined we are trying to search for installed app icon + if [[ "$icon" == "" ]]; then + appPath=$(mdfind "kind:application AND name:$itemName" | head -1) + appIcon=$(defaults read "${appPath}/Contents/Info.plist" CFBundleIconFile) + icon="${appPath}/Contents/Resources/${appIcon}" + echo "${icon}" + if [ ! -f "${icon}" ]; then + icon="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + fi + echo "${icon}" + + # display first screen + open -a "$dialogApp" --args \ + --title none \ + --icon "$icon" \ + --message "$message" \ + --mini \ + --progress 100 \ + --position bottomright \ + --movable \ + --commandfile "$dialog_command_file" + + # give everything a moment to catch up + sleep 0.1 +fi + +# Install software using Installomator +cmdOutput="$(${destFile} ${item} LOGO=$LOGO ${installomatorOptions} ${installomatorNotify} || true)" +checkCmdOutput $cmdOutput + +# Mark: dockutil stuff +if [[ $addToDock -eq 1 ]]; then + dialogUpdate "progresstext: Adding to Dock" + if [[ ! -d $dockutil ]]; then + echo "Cannot find dockutil at $dockutil, trying installation" + # Install using Installlomator + cmdOutput="$(${destFile} dockutil LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" + checkCmdOutput $cmdOutput + fi + echo "Adding to Dock" + $dockutil --add "${appPath}" "${userHome}/Library/Preferences/com.apple.dock.plist" || true + sleep 1 +else + echo "Not adding to Dock." +fi + +# Mark: Ending +if [[ $installomatorVersion -lt 10 ]]; then + echo "Again skipping Dialog stuff." +else + # close and quit dialog + dialogUpdate "progress: complete" + dialogUpdate "progresstext: Done" + + # pause a moment + sleep 0.5 + + dialogUpdate "quit:" + + # let everything catch up + sleep 0.5 + + # just to be safe + #killall "Dialog" 2>/dev/null || true +fi + +echo "[$(DATE)][LOG-END]" + +caffexit $exitStatus diff --git a/MDM/App-loop script.sh b/MDM/App-loop script.sh deleted file mode 100755 index 8fb33e7..0000000 --- a/MDM/App-loop script.sh +++ /dev/null @@ -1,193 +0,0 @@ -#!/bin/zsh -# Installation using Installomator -whatList="microsoftteams microsoftyammer firefox bravebrowser cyberduck vlc signal" # enter the software to install separated with spaces - -# To be used as a script sent out from a MDM. -# Fill the variable "whatList" above with labels separated by space " ". -# Script will loop through these labels. -LOGO="appstore" # or "addigy", "microsoft", "mosyleb", "mosylem" -###################################################################### -# Parameters for reinstall/initial install (owner root:wheel): -# "BLOCKING_PROCESS_ACTION=quit_kill INSTALL=force IGNORE_APP_STORE_APPS=yes SYSTEMOWNER=1" -# Parameters for Self Service installed app: -# "BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=all" -# Parameters for security important apps, like browsers (run automaticaly every day): -# "BLOCKING_PROCESS_ACTION=tell_user_then_kill" -# Update of service apps (run automatically): -# "BLOCKING_PROCESS_ACTION=quit_kill NOTIFY=silent" -parameters="BLOCKING_PROCESS_ACTION=tell_user NOTIFY=all" -###################################################################### - -# Verify that Installomator has been installed -destFile="/usr/local/Installomator/Installomator.sh" -if [ ! -e "${destFile}" ]; then - echo "Installomator not found here:" - echo "${destFile}" - echo "Exiting." - exit 99 -fi - -# No sleeping -/usr/bin/caffeinate -d -i -m -u & -caffeinatepid=$! -caffexit () { - kill "$caffeinatepid" - pkill caffeinate - exit $1 -} - -# Count errors -errorCount=0 - -for what in $whatList; do - #echo $what - # Install software using Installomator - cmdOutput="$(${destFile} ${what} LOGO=$LOGO $parameters LOGGING=WARN || true)" - # Check result - exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" - if [[ ${exitStatus} -ne 0 ]] ; then - echo -e "Error installing ${what}. Exit code ${exitStatus}" - #echo "$cmdOutput" - errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" - echo "$errorOutput" - let errorCount++ - fi -done - -echo -echo "Errors: $errorCount" -echo "[$(DATE)][LOG-END]" - -caffexit $errorCount - -# notify behavior -# NOTIFY=success -# options: -# - success notify the user on success -# - silent no notifications -# - all all notifications (great for Self Service installation) - - -# behavior when blocking processes are found -# BLOCKING_PROCESS_ACTION=tell_user -# options: -# - ignore continue even when blocking processes are found -# - quit app will be told to quit nicely, if running -# - quit_kill told to quit twice, then it will be killed -# Could be great for service apps, if they do not respawn -# - silent_fail exit script without prompt or installation -# - prompt_user show a user dialog for each blocking process found -# abort after three attempts to quit -# (only if user accepts to quit the apps, otherwise -# the update is cancelled). -# - prompt_user_then_kill -# show a user dialog for each blocking process found, -# attempt to quit two times, kill the process finally -# - prompt_user_loop -# Like prompt-user, but clicking "Not Now", will just wait an hour, -# and then it will ask again. -# WARNING! It might block the MDM agent on the machine, as -# the scripts gets stuct in waiting until the hour has passed, -# possibly blocking for other management actions in this time. -# - tell_user User will be showed a notification about the important update, -# but user is only allowed to quit and continue, and then we -# ask the app to quit. -# - tell_user_then_kill -# Show dialog 2 times, and if the quitting fails, the -# blocking processes will be killed. -# - kill kill process without prompting or giving the user a chance to save - - -# logo-icon used in dialog boxes if app is blocking -# LOGO=appstore -# options: -# - appstore Icon is Apple App Store (default) -# - jamf JAMF Pro -# - mosyleb Mosyle Business -# - mosylem Mosyle Manager (Education) -# - addigy Addigy -# path can also be set in the command call, and if file exists, it will be used. -# Like 'LOGO="/System/Applications/App\ Store.app/Contents/Resources/AppIcon.icns"' -# (spaces have to be escaped). - - -# App Store apps handling -# IGNORE_APP_STORE_APPS=no -# options: -# - no If installed app is from App Store (which include VPP installed apps) -# it will not be touched, no matter it's version (default) -# - yes Replace App Store (and VPP) version of app and handle future -# updates using Installomator, even if latest version. -# Shouldn’t give any problems for the user in most cases. -# Known bad example: Slack will loose all settings. - - -# install behavior -# INSTALL="" -# options: -# - When not set, software will only be installed -# if it is newer/different in version -# - force Install even if it’s the same version - - -# Re-opening of closed app -# REOPEN="yes" -# options: -# - yes App wil be reopened if it was closed -# - no App not reopened - - -######################## -# Often used labels: -######################## - -# firefox -# firefox_intl -# brave -# torbrowser -# googlechrome -# netnewswire - -# adobereaderdc -# textmate - -# cyberduck -# keka -# theunarchiver - -# vlc -# handbrake - -# inkscape - -# signal -# telegram -# whatsapp - -# hazel -# devonthink - -# teamviewerqs -# zoom - -# malwarebytes -# githubdesktop -# sublimetext -# textmate -# visualstudiocode - -# microsoftskypeforbusiness -# microsoftteams -# microsoftyammer -# microsoftedgeenterprisestable -# microsoftedgeconsumerstable -# microsoftsharepointplugin -# microsoftdefenderatp - -# googledrivefilestream - -# cdef -# desktoppr -# supportapp -# xink -# wwdc diff --git a/MDM/InstallInstallomator.sh b/MDM/InstallInstallomator.sh deleted file mode 100644 index 9bb131f..0000000 --- a/MDM/InstallInstallomator.sh +++ /dev/null @@ -1,43 +0,0 @@ -#!/bin/sh - -# This script is meant to povide the simplest MDM/management platform agnostic way to install Installomator -# The only requirement is an Internet connection - -export PATH=/usr/bin:/bin:/usr/sbin:/sbin - -# Get the URL of the latest PKG From the Installomator GitHub repo -url=$(curl --silent --fail "https://api.github.com/repos/Installomator/Installomator/releases/latest" | awk -F '"' "/browser_download_url/ && /pkg\"/ { print \$4; exit }") -# Expected Team ID of the downloaded PKG -expectedTeamID="JME5BW3F3R" -exitCode=0 - -# Check for Installomator and install if not found -if [ ! -e "/usr/local/Installomator/Installomator.sh" ]; then - echo "Installomator not found. Installing." - # Create temporary working directory - tempDirectory=$( mktemp -d ) - echo "Created working directory '$tempDirectory'" - # Download the installer package - echo "Downloading Installomator package" - curl --location --silent "$url" -o "$tempDirectory/Installomator.pkg" - # Verify the download - teamID=$(spctl -a -vv -t install "$tempDirectory/Installomator.pkg" 2>&1 | awk '/origin=/ {print $NF }' | tr -d '()') - echo "Team ID for downloaded package: $teamID" - # Install the package if Team ID validates - if [ "$expectedTeamID" = "$teamID" ] || [ "$expectedTeamID" = "" ]; then - echo "Package verified. Installing package Installomator.pkg" - installer -pkg "$tempDirectory/Installomator.pkg" -target / -verbose - exitCode=$? - else - echo "Package verification failed before package installation could start. Download link may be invalid. Aborting." - exitCode=1 - exit $exitCode - fi - # Remove the temporary working directory when done - echo "Deleting working directory '$tempDirectory' and its contents" - rm -Rf "$tempDirectory" -else - echo "Installomator already installed." -fi - -exit $exitCode diff --git a/MDM/Installomator update.sh b/MDM/Installomator update.sh deleted file mode 100755 index 5b6bb67..0000000 --- a/MDM/Installomator update.sh +++ /dev/null @@ -1,42 +0,0 @@ -#!/bin/bash -# Updating Installomator -# Usefull to push out after deployment if earlier version was deployed in DEP profile - -what="installomator" # enter the software to install -LOGO="appstore" # or "addigy", "microsoft", "mosyleb", "mosylem" - -# Verify that Installomator has been installed -destFile="/usr/local/Installomator/Installomator.sh" -if [ ! -e "${destFile}" ]; then - echo "Installomator not found here:" - echo "${destFile}" - echo "Exiting." - exit 99 -fi - -# No sleeping -/usr/bin/caffeinate -d -i -m -u & -caffeinatepid=$! -caffexit () { - kill "$caffeinatepid" - pkill caffeinate - exit $1 -} - -# Install software using Installomator -cmdOutput="$(${destFile} ${what} LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore NOTIFY=silent LOGGING=req || true)" - -# Check result -exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" -if [[ ${exitStatus} -eq 0 ]] ; then - echo -e "${what} succesfully installed.\n" -else - echo -e "Error installing ${what}. Exit code ${exitStatus}\n" - #echo "$cmdOutput" - errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" - echo "$errorOutput" - caffexit $exitStatus -fi - -echo "[$(DATE)][LOG-END]" -caffexit 0 diff --git a/MDM/MDMAddigy CustomSoftware.sh b/MDM/MDMAddigy CustomSoftware.sh deleted file mode 100755 index e7918fd..0000000 --- a/MDM/MDMAddigy CustomSoftware.sh +++ /dev/null @@ -1,115 +0,0 @@ -#!/bin/zsh - -# Specific settings in Addigy to configure Custom Software for installomator. -# Addigy has 3 parts to fill out for this, Installation script, Condition, and Removal steps (see RemoveInstallomator.sh). - -# Mark: Installation script -# Just click “Add” to autogenerate the installer script line by clicking the “Add”-button next to the Installer PKG, replace with first line below -/usr/sbin/installer -pkg "/Library/Addigy/ansible/packages/Installomator (9.1.0)/Installomator-9.1.pkg" -target / - -# Installation using Installomator -whatList="supportapp xink textmate microsoftedge wwdc keka vlc " # enter the software to installed separated with spaces - -# To be used as a script sent out from a MDM. -# Fill the variable "whatList" above with labels separated by space " ". -# Script will loop through these labels and exit with number of errors. -###################################################################### -# Parameters for reinstall/initial install (owner root:wheel): -# "BLOCKING_PROCESS_ACTION=quit_kill INSTALL=force IGNORE_APP_STORE_APPS=yes SYSTEMOWNER=1" -# Parameters for Self Service installed app: -# "BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=all" -# Parameters for security important apps, like browsers (run automaticaly every day): -# "BLOCKING_PROCESS_ACTION=tell_user_then_kill" -# Update of service apps (run automatically): -# "BLOCKING_PROCESS_ACTION=quit_kill NOTIFY=silent" -parameters="BLOCKING_PROCESS_ACTION=quit_kill INSTALL=force IGNORE_APP_STORE_APPS=yes" -###################################################################### - -# Verify that Installomator has been installed -destFile="/usr/local/Installomator/Installomator.sh" -if [ ! -e "${destFile}" ]; then - echo "Installomator not found here:" - echo "${destFile}" - echo "Exiting." - exit 99 -fi - -# No sleeping -/usr/bin/caffeinate -d -i -m -u & -caffeinatepid=$! -caffexit () { - kill "$caffeinatepid" - pkill caffeinate - exit $1 -} - -# Count errors -errorCount=0 - -for what in $whatList; do - #echo $what - # Install software using Installomator - cmdOutput="$(${destFile} ${what} LOGO=addigy $parameters || true)" - # Check result - exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" - if [[ ${exitStatus} -ne 0 ]] ; then - echo -e "Error installing ${what}. Exit code ${exitStatus}" - #echo "$cmdOutput" - errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" - echo "$errorOutput" - let errorCount++ - fi -done - -echo -echo "Errors: $errorCount" -echo "[$(DATE)][LOG-END]" - -caffexit $errorCount - -# Mark: Conditions -# Install on success -# Remember to fill out the correct “TARGET_VERSION” and “PKG_ID”, and click "Install on succes". -PKG_ID="com.scriptingosx.Installomator" -TARGET_VERSION="9.1" - -vercomp () { - if [[ $1 == $2 ]]; then - return 0 - fi - local IFS=. - local i ver1=($1) ver2=($2) - # fill empty fields in ver1 with zeros - for ((i=${#ver1[@]}; i<${#ver2[@]}; i++)); do - ver1[i]=0 - done - for ((i=0; i<${#ver1[@]}; i++)); do - if [[ -z ${ver2[i]} ]]; then - # fill empty fields in ver2 with zeros - ver2[i]=0 - fi - if ((10#${ver1[i]} > 10#${ver2[i]})); then - return 1 - fi - if ((10#${ver1[i]} < 10#${ver2[i]})); then - return 2 - fi - done - return 0 -} - -INSTALLED_VERSION="$(pkgutil --pkg-info $PKG_ID | grep -i "^version" | awk '{print $2}')" - -echo "Current Version: ${INSTALLED_VERSION}" - -vercomp ${TARGET_VERSION} ${INSTALLED_VERSION} -COMP=$? # 0 means the same, 1 means TARGET is newer, 2 means INSTALLED is newer -echo "COMPARISON: ${COMP}" - -if [ "${COMP}" -eq 1 ]; then - echo "Installed version is older than ${TARGET_VERSION}." - exit 0 -else - echo "Installed version is the same or newer than ${TARGET_VERSION}." - exit 1 -fi diff --git a/MDM/MDMMosyle install.sh b/MDM/MDMMosyle install.sh deleted file mode 100644 index 27f9d8d..0000000 --- a/MDM/MDMMosyle install.sh +++ /dev/null @@ -1,79 +0,0 @@ -PKG_ID="com.scriptingosx.Installomator" -TARGET_VERSION="9.1" -URLDOWNLOAD="%MosyleCDNFile:blah-blah-blah%" -###################################################################### -# Installation using Installomator (enter the software to install separated with spaces in the "whatList"-variable) -whatList="handbrake theunarchiver microsoftoffice365" -# Covered by Mosyle Catalog: "brave firefox googlechrome microsoftedge microsoftteams signal sublimetext vlc webex zoom" among others -LOGO="mosyleb" # or "mosylem" -###################################################################### - -## Mark: Code here - -# No sleeping -/usr/bin/caffeinate -d -i -m -u & -caffeinatepid=$! -caffexit () { - kill "$caffeinatepid" - pkill caffeinate - exit $1 -} - -# Mark: Condition for Installomator installation - -INSTALLED_VERSION="$(pkgutil --pkg-info $PKG_ID 2>/dev/null | grep -i "^version" | awk '{print $2}')" - -echo "Current Version: ${INSTALLED_VERSION}" - -if [[ "$TARGET_VERSION" != "$INSTALLED_VERSION" ]]; then - TMPDIR=$(mktemp -d ) - if ! cd "$TMPDIR"; then - echo "error changing directory $TMPDIR" - caffexit 98 - fi - NAME=$TMPDIR/$(date +%s).pkg - if ! curl -fsL "$URLDOWNLOAD" -o "$NAME"; then - echo "error downloading $URLDOWNLOAD to $NAME." - caffexit 97 - fi - installer -pkg "$NAME" -target / - rm -rf "$TMPDIR" -else - echo "Installomator version $INSTALLED_VERSION already installed!" -fi - - -# Mark: Start Installomator label(s) installation - -# Count errors -errorCount=0 - -# Verify that Installomator has been installed -destFile="/usr/local/Installomator/Installomator.sh" -if [ ! -e "${destFile}" ]; then - echo "Installomator not found here:" - echo "${destFile}" - echo "Exiting." - caffexit 99 -fi - -for what in $whatList; do - #echo $item - # Install software using Installomator - cmdOutput="$(${destFile} ${what} LOGO=$LOGO NOTIFY=all BLOCKING_PROCESS_ACTION=tell_user || true)" # NOTIFY=silent BLOCKING_PROCESS_ACTION=quit_kill INSTALL=force - # Check result - exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" - if [[ ${exitStatus} -ne 0 ]] ; then - echo "Error installing ${what}. Exit code ${exitStatus}" - #echo "$cmdOutput" - errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" - echo "$errorOutput" - let errorCount++ - fi -done - -echo -echo "Errors: $errorCount" -echo "[$(DATE)][LOG-END]" - -caffexit $errorCount diff --git a/MDM/Manual valuesfromarguments.sh b/MDM/Manual valuesfromarguments.sh deleted file mode 100755 index ee80291..0000000 --- a/MDM/Manual valuesfromarguments.sh +++ /dev/null @@ -1,56 +0,0 @@ -#!/bin/bash -# Software - -# Installation using Installomator -# Example of installing software using valuesfromarguments to install a custom software - -LOGO="appstore" # or "addigy", "microsoft", "mosyleb", "mosylem" -############################################### - -# Verify that Installomator has been installed -destFile="/usr/local/Installomator/Installomator.sh" -if [ ! -e "${destFile}" ]; then - echo "Installomator not found here:" - echo "${destFile}" - echo "Exiting." - exit 99 -fi - -# No sleeping -/usr/bin/caffeinate -d -i -m -u & -caffeinatepid=$! -caffexit () { - kill "$caffeinatepid" - pkill caffeinate - exit $1 -} - -# Variables to calculate -downloadURL="https://craft-assets.invisionapp.com/CraftManager/production/CraftManager.zip" -appNewVersion=$(curl -fs https://craft-assets.invisionapp.com/CraftManager/production/appcast.xml | xpath -e '//rss/channel/item[1]/enclosure/@sparkle:shortVersionString' 2>/dev/null | cut -d '"' -f2) - -# Install software using Installomator -cmdOutput="$(${destFile} valuesfromarguments LOGO=$LOGO \ - name=CraftManager \ - type=zip \ - downloadURL=$downloadURL \ - appNewVersion=$appNewVersion \ - expectedTeamID=VRXQSNCL5W \ - BLOCKING_PROCESS_ACTION=prompt_user \ - LOGGING=REQ \ - NOTIFY=all || true)" - -# Check result -exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" -if [[ ${exitStatus} -eq 0 ]] ; then - echo -e "${what} succesfully installed.\n" -else - echo -e "Error installing ${what}. Exit code ${exitStatus}\n" - #printlog "$cmdOutput" - errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" - echo "$errorOutput" - caffexit $exitStatus -fi - -echo "[$(DATE)][LOG-END]" -caffexit 0 diff --git a/MDM/RemoveInstallomator.sh b/MDM/Remove Installomator.sh similarity index 100% rename from MDM/RemoveInstallomator.sh rename to MDM/Remove Installomator.sh From 909a61fbe3a3fc4111316b06febed28a8b62f836 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Mon, 19 Sep 2022 21:40:03 +0200 Subject: [PATCH 177/209] Improved icon checks and failovers --- ...=> -Progress 1st swiftDialog condition.sh} | 0 ...Dialog.sh => -Progress 1st swiftDialog.sh} | 0 ... -install swiftDialog direct condition.sh} | 0 ...rect.sh => -install swiftDialog direct.sh} | 0 .../Addigy condition notes.sh | 124 -------- .../App VFA SS github.sh | 83 +++++- .../App VFA SS.sh | 83 +++++- .../App browser-security.sh | 80 +++++- .../App normal SS multi-app.sh | 80 +++++- .../App normal SS.sh | 272 ++++++++++++++++++ .../App service Auto-install.sh} | 90 +++++- MDM/App-install/App service Auto-install.sh | 163 ++--------- 12 files changed, 656 insertions(+), 319 deletions(-) rename MDM/{-Progress 1st Dialog condition.sh => -Progress 1st swiftDialog condition.sh} (100%) rename MDM/{-Progress 1st Dialog.sh => -Progress 1st swiftDialog.sh} (100%) rename MDM/{-install Dialog direct condition.sh => -install swiftDialog direct condition.sh} (100%) rename MDM/{-install Dialog direct.sh => -install swiftDialog direct.sh} (100%) delete mode 100644 MDM/App-install with Dialog and dockutil/Addigy condition notes.sh rename MDM/{App-install with Dialog and dockutil => App-install with swiftDialog and dockutil}/App VFA SS github.sh (72%) rename MDM/{App-install with Dialog and dockutil => App-install with swiftDialog and dockutil}/App VFA SS.sh (67%) rename MDM/{App-install with Dialog and dockutil => App-install with swiftDialog and dockutil}/App browser-security.sh (66%) rename MDM/{App-install with Dialog and dockutil => App-install with swiftDialog and dockutil}/App normal SS multi-app.sh (66%) create mode 100644 MDM/App-install with swiftDialog and dockutil/App normal SS.sh rename MDM/{App-install with Dialog and dockutil/App normal SS.sh => App-install with swiftDialog and dockutil/App service Auto-install.sh} (62%) diff --git a/MDM/-Progress 1st Dialog condition.sh b/MDM/-Progress 1st swiftDialog condition.sh similarity index 100% rename from MDM/-Progress 1st Dialog condition.sh rename to MDM/-Progress 1st swiftDialog condition.sh diff --git a/MDM/-Progress 1st Dialog.sh b/MDM/-Progress 1st swiftDialog.sh similarity index 100% rename from MDM/-Progress 1st Dialog.sh rename to MDM/-Progress 1st swiftDialog.sh diff --git a/MDM/-install Dialog direct condition.sh b/MDM/-install swiftDialog direct condition.sh similarity index 100% rename from MDM/-install Dialog direct condition.sh rename to MDM/-install swiftDialog direct condition.sh diff --git a/MDM/-install Dialog direct.sh b/MDM/-install swiftDialog direct.sh similarity index 100% rename from MDM/-install Dialog direct.sh rename to MDM/-install swiftDialog direct.sh diff --git a/MDM/App-install with Dialog and dockutil/Addigy condition notes.sh b/MDM/App-install with Dialog and dockutil/Addigy condition notes.sh deleted file mode 100644 index 41d5d70..0000000 --- a/MDM/App-install with Dialog and dockutil/Addigy condition notes.sh +++ /dev/null @@ -1,124 +0,0 @@ -#!/bin/sh - -# Addigy condition -# These are my notes for how I can extract all the label lines from Installomator.sh, evaluate those, and check if installed version is the latest version. -# This script contains functions from Installomator. -label="googlechromepkg" - -# PATH declaration -export PATH=/usr/bin:/bin:/usr/sbin:/sbin - -# Functions from Installomator -downloadURLFromGit() { # $1 git user name, $2 git repo name - gitusername=${1?:"no git user name"} - gitreponame=${2?:"no git repo name"} - - if [[ $type == "pkgInDmg" ]]; then - filetype="dmg" - elif [[ $type == "pkgInZip" ]]; then - filetype="zip" - else - filetype=$type - fi - - if [ -n "$archiveName" ]; then - downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1) - if [[ "$(echo $downloadURL | grep -ioE "https.*$archiveName")" == "" ]]; then - printlog "Trying GitHub API for download URL." - downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") - fi - else - downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1) - if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then - printlog "Trying GitHub API for download URL." - downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") - fi - fi - if [ -z "$downloadURL" ]; then - cleanupAndExit 14 "could not retrieve download URL for $gitusername/$gitreponame" ERROR - else - echo "$downloadURL" - return 0 - fi -} - -versionFromGit() { - # credit: Søren Theilgaard (@theilgaard) - # $1 git user name, $2 git repo name - gitusername=${1?:"no git user name"} - gitreponame=${2?:"no git repo name"} - - #appNewVersion=$(curl -L --silent --fail "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | grep tag_name | cut -d '"' -f 4 | sed 's/[^0-9\.]//g') - appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') - if [ -z "$appNewVersion" ]; then - printlog "could not retrieve version number for $gitusername/$gitreponame" WARN - appNewVersion="" - else - echo "$appNewVersion" - return 0 - fi -} - - -# Handling of differences in xpath between Catalina and Big Sur -xpath() { - # the xpath tool changes in Big Sur and now requires the `-e` option - if [[ $(sw_vers -buildVersion) > "20A" ]]; then - /usr/bin/xpath -e $@ - # alternative: switch to xmllint (which is not perl) - #xmllint --xpath $@ - - else - /usr/bin/xpath $@ - fi -} - -# from @Pico: https://macadmins.slack.com/archives/CGXNNJXJ9/p1652222365989229?thread_ts=1651786411.413349&cid=CGXNNJXJ9 -getJSONValue() { - # $1: JSON string OR file path to parse (tested to work with up to 1GB string and 2GB file). - # $2: JSON key path to look up (using dot or bracket notation). - printf '%s' "$1" | /usr/bin/osascript -l 'JavaScript' \ - -e "let json = $.NSString.alloc.initWithDataEncoding($.NSFileHandle.fileHandleWithStandardInput.readDataToEndOfFile$(/usr/bin/uname -r | /usr/bin/awk -F '.' '($1 > 18) { print "AndReturnError(ObjC.wrap())" }'), $.NSUTF8StringEncoding)" \ - -e 'if ($.NSFileManager.defaultManager.fileExistsAtPath(json)) json = $.NSString.stringWithContentsOfFileEncodingError(json, $.NSUTF8StringEncoding, ObjC.wrap())' \ - -e "const value = JSON.parse(json.js)$([ -n "${2%%[.[]*}" ] && echo '.')$2" \ - -e 'if (typeof value === "object") { JSON.stringify(value, null, 4) } else { value }' -} - -# Mark: Script -labelScript=$(grep -E -m 1 -A 30 "^$label"'(\)|\|\\)$' "/usr/local/Installomator/Installomator.sh" | grep -B 30 -m 1 ";;") -echo $labelScript -eval $labelScript -echo $appNewVersion - - - -############################## -printLines=0; while read line; do; if [[ $printLines -eq 1 || "$(echo $line | grep -oE "^googlechromepkg")" != "" ]]; then; printLines=1; echo $line; fi; done < "/usr/local/Installomator/Installomator.sh" - -printLines=0; while read line; do; if [[ $printLines -eq 1 ]]; then; if [[ "$(echo $line | grep ";;")" == "" ]]; then; echo $line; else; printLines=0; fi ; elif [[ "$(echo $line | grep -oE "^googlechromepkg")" != "" ]]; then; printLines=1; fi; done < "/usr/local/Installomator/Installomator.sh" - -labelLines="$(printLines=0; while read line; do; if [[ $printLines -eq 1 ]]; then; if [[ "$(echo $line | grep ";;")" == "" ]]; then; echo $line; else; return; fi ; elif [[ "$(echo $line | grep -oE "^googlechromepkg")" != "" ]]; then; printLines=1; fi; done < "/usr/local/Installomator/Installomator.sh")"; echo $labelLines - -label="googlechromepkg";labelLines="$(printLines=0; while read line; do; if [[ $printLines -eq 1 ]]; then; if [[ "$(echo $line | grep ";;")" == "" ]]; then; echo $line; else; return; fi ; elif [[ "$(echo $line | grep -oE "^$label")" != "" ]]; then; printLines=1; fi; done < "/usr/local/Installomator/Installomator.sh")"; eval $labelLines ; echo $appNewVersion - - -label="googlechromepkg" -labelLines="$(printLines=0 -while read line; do - if [[ $printLines -eq 1 ]]; then - if [[ "$(echo $label | grep ";;")" == "" ]]; then - echo $line - else - return - fi - elif [[ "$(echo $line | grep -oE "^$label")" != "" ]]; then - printLines=1 - fi -done < "/usr/local/Installomator/Installomator.sh")" -eval $labelLines -echo $appNewVersion - - - - - - diff --git a/MDM/App-install with Dialog and dockutil/App VFA SS github.sh b/MDM/App-install with swiftDialog and dockutil/App VFA SS github.sh similarity index 72% rename from MDM/App-install with Dialog and dockutil/App VFA SS github.sh rename to MDM/App-install with swiftDialog and dockutil/App VFA SS github.sh index 7671062..fc983c8 100755 --- a/MDM/App-install with Dialog and dockutil/App VFA SS github.sh +++ b/MDM/App-install with swiftDialog and dockutil/App VFA SS github.sh @@ -81,7 +81,7 @@ dialog_command_file="/var/tmp/dialog.log" dialogApp="/Library/Application Support/Dialog/Dialog.app" dockutil="/usr/local/bin/dockutil" -installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=silent DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space +installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space # Other installomatorOptions: # LOGGING=REQ @@ -105,9 +105,10 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=silent DIALOG_C # Fill the variable "item" above with a label. # Script will run this label through Installomator. ###################################################################### -# v. 10.1 : github-functions added. Improved appIcon handling. Can add the app to Dock using dockutil. -# v. 10 : Integration with Dialog and Installomator v. 10 -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 10.0.2 : Improved icon checks and failovers +# v. 10.0.1 : github-functions added. Improved appIcon handling. Can add the app to Dock using dockutil. +# v. 10.0 : Integration with Dialog and Installomator v. 10 +# v. 9.3 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script @@ -178,7 +179,7 @@ if [[ $installomatorVersion -lt 10 ]] || [[ $(sw_vers -buildVersion) < "20A" ]]; echo "And macOS 11 Big Sur (build 20A) is required for Dialog. Installed build $(sw_vers -buildVersion)." installomatorNotify="NOTIFY=all" else - installomatorNotify="" + installomatorNotify="NOTIFY=silent" # check for Swift Dialog if [[ ! -d $dialogApp ]]; then echo "Cannot find dialog at $dialogApp" @@ -188,8 +189,7 @@ else fi # Configure and display swiftDialog - #itemName=$( ${destFile} ${item} RETURN_LABEL_NAME=1 LOGGING=REQ INSTALL=force | tail -1 || true ) - itemName="$name" + itemName=$( ${destFile} ${item} RETURN_LABEL_NAME=1 LOGGING=REQ INSTALL=force | tail -1 || true ) if [[ "$itemName" != "#" ]]; then message="Installing ${itemName}…" else @@ -197,6 +197,25 @@ else fi echo "$item $itemName" + #Check icon (expecting beginning with “http” to be web-link and “/” to be disk file) + echo "icon before check: $icon" + if [[ "$(echo ${icon} | grep -iE "^(http|ftp).*")" != "" ]]; then + echo "icon looks to be web-link" + if ! curl -sfL --output /dev/null -r 0-0 "${icon}" ; then + echo "ERROR: Cannot download link. Reset icon." + icon="" + fi + elif [[ "$(echo ${icon} | grep -iE "^\/.*")" != "" ]]; then + echo "icon looks to be a file" + if [[ ! -a "${icon}" ]]; then + echo "ERROR: Cannot find file. Reset icon." + icon="" + fi + else + echo "ERROR: Cannot figure out icon. Reset icon." + icon="" + fi + echo "icon after first check: $icon" # If no icon defined we are trying to search for installed app icon if [[ "$icon" == "" ]]; then appPath=$(mdfind "kind:application AND name:$itemName" | head -1 || true) @@ -205,12 +224,56 @@ else appIcon="${appIcon}.icns" fi icon="${appPath}/Contents/Resources/${appIcon}" - echo "${icon}" + echo "Icon before file check: ${icon}" if [ ! -f "${icon}" ]; then - icon="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + # Using LOGO variable to show logo in swiftDialog + case $LOGO in + appstore) + # Apple App Store on Mac + if [[ $(sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + ;; + jamf) + # Jamf Pro + LOGO_PATH="/Library/Application Support/JAMF/Jamf.app/Contents/Resources/AppIcon.icns" + ;; + mosyleb) + # Mosyle Business + LOGO_PATH="/Applications/Self-Service.app/Contents/Resources/AppIcon.icns" + ;; + mosylem) + # Mosyle Manager (education) + LOGO_PATH="/Applications/Manager.app/Contents/Resources/AppIcon.icns" + ;; + addigy) + # Addigy + LOGO_PATH="/Library/Addigy/macmanage/MacManage.app/Contents/Resources/atom.icns" + ;; + microsoft) + # Microsoft Endpoint Manager (Intune) + LOGO_PATH="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns" + ;; + ws1) + # Workspace ONE (AirWatch) + LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns" + ;; + esac + if [[ ! -a "${LOGO_PATH}" ]]; then + printlog "ERROR in LOGO_PATH '${LOGO_PATH}', setting Mac App Store." + if [[ $(/usr/bin/sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + fi + icon="${LOGO_PATH}" fi fi - echo "${icon}" + echo "LOGO: $LOGO" + echo "icon: ${icon}" # display first screen open -a "$dialogApp" --args \ diff --git a/MDM/App-install with Dialog and dockutil/App VFA SS.sh b/MDM/App-install with swiftDialog and dockutil/App VFA SS.sh similarity index 67% rename from MDM/App-install with Dialog and dockutil/App VFA SS.sh rename to MDM/App-install with swiftDialog and dockutil/App VFA SS.sh index a7b84a7..dc7f0de 100755 --- a/MDM/App-install with Dialog and dockutil/App VFA SS.sh +++ b/MDM/App-install with swiftDialog and dockutil/App VFA SS.sh @@ -28,7 +28,7 @@ dialog_command_file="/var/tmp/dialog.log" dialogApp="/Library/Application Support/Dialog/Dialog.app" dockutil="/usr/local/bin/dockutil" -installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=silent DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space +installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space # Other installomatorOptions: # LOGGING=REQ @@ -52,9 +52,10 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=silent DIALOG_C # Fill the variable "item" above with a label. # Script will run this label through Installomator. ###################################################################### -# v. 10.1 : Improved appIcon handling. Can add the app to Dock using dockutil -# v. 10 : Integration with Dialog and Installomator v. 10 -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 10.0.2 : Improved icon checks and failovers +# v. 10.0.1 : Improved appIcon handling. Can add the app to Dock using dockutil +# v. 10.0 : Integration with Dialog and Installomator v. 10 +# v. 9.3 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script @@ -126,7 +127,7 @@ if [[ $installomatorVersion -lt 10 ]] || [[ $(sw_vers -buildVersion) < "20A" ]]; echo "And macOS 11 Big Sur (build 20A) is required for Dialog. Installed build $(sw_vers -buildVersion)." installomatorNotify="NOTIFY=all" else - installomatorNotify="" + installomatorNotify="NOTIFY=silent" # check for Swift Dialog if [[ ! -d $dialogApp ]]; then echo "Cannot find dialog at $dialogApp" @@ -136,8 +137,7 @@ else fi # Configure and display swiftDialog - #itemName=$( ${destFile} ${item} RETURN_LABEL_NAME=1 LOGGING=REQ INSTALL=force | tail -1 || true ) - itemName="$name" + itemName=$( ${destFile} ${item} RETURN_LABEL_NAME=1 LOGGING=REQ INSTALL=force | tail -1 || true ) if [[ "$itemName" != "#" ]]; then message="Installing ${itemName}…" else @@ -145,6 +145,25 @@ else fi echo "$item $itemName" + #Check icon (expecting beginning with “http” to be web-link and “/” to be disk file) + echo "icon before check: $icon" + if [[ "$(echo ${icon} | grep -iE "^(http|ftp).*")" != "" ]]; then + echo "icon looks to be web-link" + if ! curl -sfL --output /dev/null -r 0-0 "${icon}" ; then + echo "ERROR: Cannot download link. Reset icon." + icon="" + fi + elif [[ "$(echo ${icon} | grep -iE "^\/.*")" != "" ]]; then + echo "icon looks to be a file" + if [[ ! -a "${icon}" ]]; then + echo "ERROR: Cannot find file. Reset icon." + icon="" + fi + else + echo "ERROR: Cannot figure out icon. Reset icon." + icon="" + fi + echo "icon after first check: $icon" # If no icon defined we are trying to search for installed app icon if [[ "$icon" == "" ]]; then appPath=$(mdfind "kind:application AND name:$itemName" | head -1 || true) @@ -153,12 +172,56 @@ else appIcon="${appIcon}.icns" fi icon="${appPath}/Contents/Resources/${appIcon}" - echo "${icon}" + echo "Icon before file check: ${icon}" if [ ! -f "${icon}" ]; then - icon="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + # Using LOGO variable to show logo in swiftDialog + case $LOGO in + appstore) + # Apple App Store on Mac + if [[ $(sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + ;; + jamf) + # Jamf Pro + LOGO_PATH="/Library/Application Support/JAMF/Jamf.app/Contents/Resources/AppIcon.icns" + ;; + mosyleb) + # Mosyle Business + LOGO_PATH="/Applications/Self-Service.app/Contents/Resources/AppIcon.icns" + ;; + mosylem) + # Mosyle Manager (education) + LOGO_PATH="/Applications/Manager.app/Contents/Resources/AppIcon.icns" + ;; + addigy) + # Addigy + LOGO_PATH="/Library/Addigy/macmanage/MacManage.app/Contents/Resources/atom.icns" + ;; + microsoft) + # Microsoft Endpoint Manager (Intune) + LOGO_PATH="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns" + ;; + ws1) + # Workspace ONE (AirWatch) + LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns" + ;; + esac + if [[ ! -a "${LOGO_PATH}" ]]; then + printlog "ERROR in LOGO_PATH '${LOGO_PATH}', setting Mac App Store." + if [[ $(/usr/bin/sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + fi + icon="${LOGO_PATH}" fi fi - echo "${icon}" + echo "LOGO: $LOGO" + echo "icon: ${icon}" # display first screen open -a "$dialogApp" --args \ diff --git a/MDM/App-install with Dialog and dockutil/App browser-security.sh b/MDM/App-install with swiftDialog and dockutil/App browser-security.sh similarity index 66% rename from MDM/App-install with Dialog and dockutil/App browser-security.sh rename to MDM/App-install with swiftDialog and dockutil/App browser-security.sh index d9eb405..707acc5 100755 --- a/MDM/App-install with Dialog and dockutil/App browser-security.sh +++ b/MDM/App-install with swiftDialog and dockutil/App browser-security.sh @@ -21,7 +21,7 @@ dialog_command_file="/var/tmp/dialog.log" dialogApp="/Library/Application Support/Dialog/Dialog.app" dockutil="/usr/local/bin/dockutil" -installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit NOTIFY=silent DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space +installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space # Other installomatorOptions: # LOGGING=REQ @@ -45,9 +45,10 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit NOTIFY=silent # Fill the variable "item" above with a label. # Script will run this label through Installomator. ###################################################################### -# v. 10.1 : Improved appIcon handling. Can add the app to Dock using dockutil -# v. 10 : Integration with Dialog and Installomator v. 10 -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 10.0.2 : Improved icon checks and failovers +# v. 10.0.1 : Improved appIcon handling. Can add the app to Dock using dockutil +# v. 10.0 : Integration with Dialog and Installomator v. 10 +# v. 9.3 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script @@ -118,7 +119,7 @@ if [[ $installomatorVersion -lt 10 ]] || [[ $(sw_vers -buildVersion) < "20A" ]]; echo "And macOS 11 Big Sur (build 20A) is required for Dialog. Installed build $(sw_vers -buildVersion)." installomatorNotify="NOTIFY=all" else - installomatorNotify="" + installomatorNotify="NOTIFY=silent" # check for Swift Dialog if [[ ! -d $dialogApp ]]; then echo "Cannot find dialog at $dialogApp" @@ -136,6 +137,25 @@ else fi echo "$item $itemName" + #Check icon (expecting beginning with “http” to be web-link and “/” to be disk file) + echo "icon before check: $icon" + if [[ "$(echo ${icon} | grep -iE "^(http|ftp).*")" != "" ]]; then + echo "icon looks to be web-link" + if ! curl -sfL --output /dev/null -r 0-0 "${icon}" ; then + echo "ERROR: Cannot download link. Reset icon." + icon="" + fi + elif [[ "$(echo ${icon} | grep -iE "^\/.*")" != "" ]]; then + echo "icon looks to be a file" + if [[ ! -a "${icon}" ]]; then + echo "ERROR: Cannot find file. Reset icon." + icon="" + fi + else + echo "ERROR: Cannot figure out icon. Reset icon." + icon="" + fi + echo "icon after first check: $icon" # If no icon defined we are trying to search for installed app icon if [[ "$icon" == "" ]]; then appPath=$(mdfind "kind:application AND name:$itemName" | head -1 || true) @@ -144,12 +164,56 @@ else appIcon="${appIcon}.icns" fi icon="${appPath}/Contents/Resources/${appIcon}" - echo "${icon}" + echo "Icon before file check: ${icon}" if [ ! -f "${icon}" ]; then - icon="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + # Using LOGO variable to show logo in swiftDialog + case $LOGO in + appstore) + # Apple App Store on Mac + if [[ $(sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + ;; + jamf) + # Jamf Pro + LOGO_PATH="/Library/Application Support/JAMF/Jamf.app/Contents/Resources/AppIcon.icns" + ;; + mosyleb) + # Mosyle Business + LOGO_PATH="/Applications/Self-Service.app/Contents/Resources/AppIcon.icns" + ;; + mosylem) + # Mosyle Manager (education) + LOGO_PATH="/Applications/Manager.app/Contents/Resources/AppIcon.icns" + ;; + addigy) + # Addigy + LOGO_PATH="/Library/Addigy/macmanage/MacManage.app/Contents/Resources/atom.icns" + ;; + microsoft) + # Microsoft Endpoint Manager (Intune) + LOGO_PATH="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns" + ;; + ws1) + # Workspace ONE (AirWatch) + LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns" + ;; + esac + if [[ ! -a "${LOGO_PATH}" ]]; then + printlog "ERROR in LOGO_PATH '${LOGO_PATH}', setting Mac App Store." + if [[ $(/usr/bin/sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + fi + icon="${LOGO_PATH}" fi fi - echo "${icon}" + echo "LOGO: $LOGO" + echo "icon: ${icon}" # display first screen open -a "$dialogApp" --args \ diff --git a/MDM/App-install with Dialog and dockutil/App normal SS multi-app.sh b/MDM/App-install with swiftDialog and dockutil/App normal SS multi-app.sh similarity index 66% rename from MDM/App-install with Dialog and dockutil/App normal SS multi-app.sh rename to MDM/App-install with swiftDialog and dockutil/App normal SS multi-app.sh index 9d3d593..d54c94f 100644 --- a/MDM/App-install with Dialog and dockutil/App normal SS multi-app.sh +++ b/MDM/App-install with swiftDialog and dockutil/App normal SS multi-app.sh @@ -21,7 +21,7 @@ dialog_command_file="/var/tmp/dialog.log" dialogApp="/Library/Application Support/Dialog/Dialog.app" dockutil="/usr/local/bin/dockutil" -installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=silent DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space +installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space # Other installomatorOptions: # LOGGING=REQ @@ -45,9 +45,10 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=silent DIALOG_C # Fill the variable "item" above with a label. # Script will run this label through Installomator. ###################################################################### -# v. 10.1 : Improved appIcon handling. Can add the app to Dock using dockutil -# v. 10 : Integration with Dialog and Installomator v. 10 -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 10.0.2 : Improved icon checks and failovers +# v. 10.0.1 : Improved appIcon handling. Can add the app to Dock using dockutil +# v. 10.0 : Integration with Dialog and Installomator v. 10 +# v. 9.3 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script @@ -118,7 +119,7 @@ if [[ $installomatorVersion -lt 10 ]] || [[ $(sw_vers -buildVersion) < "20A" ]]; echo "And macOS 11 Big Sur (build 20A) is required for Dialog. Installed build $(sw_vers -buildVersion)." installomatorNotify="NOTIFY=all" else - installomatorNotify="" + installomatorNotify="NOTIFY=silent" # check for Swift Dialog if [[ ! -d $dialogApp ]]; then echo "Cannot find dialog at $dialogApp" @@ -136,6 +137,25 @@ else fi echo "$item $itemName" + #Check icon (expecting beginning with “http” to be web-link and “/” to be disk file) + echo "icon before check: $icon" + if [[ "$(echo ${icon} | grep -iE "^(http|ftp).*")" != "" ]]; then + echo "icon looks to be web-link" + if ! curl -sfL --output /dev/null -r 0-0 "${icon}" ; then + echo "ERROR: Cannot download link. Reset icon." + icon="" + fi + elif [[ "$(echo ${icon} | grep -iE "^\/.*")" != "" ]]; then + echo "icon looks to be a file" + if [[ ! -a "${icon}" ]]; then + echo "ERROR: Cannot find file. Reset icon." + icon="" + fi + else + echo "ERROR: Cannot figure out icon. Reset icon." + icon="" + fi + echo "icon after first check: $icon" # If no icon defined we are trying to search for installed app icon if [[ "$icon" == "" ]]; then appPath=$(mdfind "kind:application AND name:$itemName" | head -1 || true) @@ -144,12 +164,56 @@ else appIcon="${appIcon}.icns" fi icon="${appPath}/Contents/Resources/${appIcon}" - echo "${icon}" + echo "Icon before file check: ${icon}" if [ ! -f "${icon}" ]; then - icon="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + # Using LOGO variable to show logo in swiftDialog + case $LOGO in + appstore) + # Apple App Store on Mac + if [[ $(sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + ;; + jamf) + # Jamf Pro + LOGO_PATH="/Library/Application Support/JAMF/Jamf.app/Contents/Resources/AppIcon.icns" + ;; + mosyleb) + # Mosyle Business + LOGO_PATH="/Applications/Self-Service.app/Contents/Resources/AppIcon.icns" + ;; + mosylem) + # Mosyle Manager (education) + LOGO_PATH="/Applications/Manager.app/Contents/Resources/AppIcon.icns" + ;; + addigy) + # Addigy + LOGO_PATH="/Library/Addigy/macmanage/MacManage.app/Contents/Resources/atom.icns" + ;; + microsoft) + # Microsoft Endpoint Manager (Intune) + LOGO_PATH="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns" + ;; + ws1) + # Workspace ONE (AirWatch) + LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns" + ;; + esac + if [[ ! -a "${LOGO_PATH}" ]]; then + printlog "ERROR in LOGO_PATH '${LOGO_PATH}', setting Mac App Store." + if [[ $(/usr/bin/sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + fi + icon="${LOGO_PATH}" fi fi - echo "${icon}" + echo "LOGO: $LOGO" + echo "icon: ${icon}" # display first screen open -a "$dialogApp" --args \ diff --git a/MDM/App-install with swiftDialog and dockutil/App normal SS.sh b/MDM/App-install with swiftDialog and dockutil/App normal SS.sh new file mode 100644 index 0000000..2c6a6fc --- /dev/null +++ b/MDM/App-install with swiftDialog and dockutil/App normal SS.sh @@ -0,0 +1,272 @@ +#!/bin/sh + +# Installation using Installomator with Dialog showing progress (and posibility of adding to the Dock) + +LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +item="cyberduck" # enter the software to install +# Examples: microsoftedge, brave, googlechromepkg, firefoxpkg + +# Dialog icon +icon="https://mosylebusinessweb.blob.core.windows.net/envoit-public/customcommand_icon-envoit_666767b6276ff1f31b1ff9719639cf36f761f29f63f2ff17fc.png" +# icon should be a file system path or an URL to an online PNG, so beginning with either “/” or “http”. +# In Mosyle an URL can be found by copy picture address from a Custom Command icon. + +# dockutil variables +addToDock="0" # with dockutil after installation (0 if not) +appPath="/Applications/Cyberduck.app" + +# Other variables +dialog_command_file="/var/tmp/dialog.log" +dialogApp="/Library/Application Support/Dialog/Dialog.app" +dockutil="/usr/local/bin/dockutil" + +installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space + +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# To be used as a script sent out from a MDM. +# Fill the variable "item" above with a label. +# Script will run this label through Installomator. +###################################################################### +# v. 10.0.2 : Improved icon checks and failovers +# v. 10.0.1 : Improved appIcon handling. Can add the app to Dock using dockutil +# v. 10.0 : Integration with Dialog and Installomator v. 10 +# v. 9.3 : Better logging handling and installomatorOptions fix. +###################################################################### + +# Mark: Script +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +echo "$(date +%F\ %T) [LOG-BEGIN] $item" + +dialogUpdate() { + # $1: dialog command + local dcommand="$1" + + if [[ -n $dialog_command_file ]]; then + echo "$dcommand" >> "$dialog_command_file" + echo "Dialog: $dcommand" + fi +} +checkCmdOutput () { + # $1: cmdOutput + local cmdOutput="$1" + exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" + if [[ ${exitStatus} -eq 0 ]] ; then + echo "${item} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" + else + echo "ERROR installing ${item}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" + fi +} + +# Check the currently logged in user +currentUser=$(stat -f "%Su" /dev/console) +if [ -z "$currentUser" ] || [ "$currentUser" = "loginwindow" ] || [ "$currentUser" = "_mbsetupuser" ] || [ "$currentUser" = "root" ]; then + echo "ERROR. Logged in user is $currentUser! Cannot proceed." + exit 97 +fi +# Get the current user's UID for dockutil +uid=$(id -u "$currentUser") +# Find the home folder of the user +userHome="$(dscl . -read /users/${currentUser} NFSHomeDirectory | awk '{print $2}')" + +# Verify that Installomator has been installed +destFile="/usr/local/Installomator/Installomator.sh" +if [ ! -e "${destFile}" ]; then + echo "Installomator not found here:" + echo "${destFile}" + echo "Exiting." + exit 99 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" + pkill caffeinate + exit $1 +} + +# Mark: Installation begins +installomatorVersion="$(${destFile} version | cut -d "." -f1 || true)" + +if [[ $installomatorVersion -lt 10 ]] || [[ $(sw_vers -buildVersion) < "20A" ]]; then + echo "Installomator should be at least version 10 to support Dialog. Installed version $installomatorVersion." + echo "And macOS 11 Big Sur (build 20A) is required for Dialog. Installed build $(sw_vers -buildVersion)." + installomatorNotify="NOTIFY=all" +else + installomatorNotify="NOTIFY=silent" + # check for Swift Dialog + if [[ ! -d $dialogApp ]]; then + echo "Cannot find dialog at $dialogApp" + # Install using Installlomator + cmdOutput="$(${destFile} dialog LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" + checkCmdOutput $cmdOutput + fi + + # Configure and display swiftDialog + itemName=$( ${destFile} ${item} RETURN_LABEL_NAME=1 LOGGING=REQ INSTALL=force | tail -1 || true ) + if [[ "$itemName" != "#" ]]; then + message="Installing ${itemName}…" + else + message="Installing ${item}…" + fi + echo "$item $itemName" + + #Check icon (expecting beginning with “http” to be web-link and “/” to be disk file) + echo "icon before check: $icon" + if [[ "$(echo ${icon} | grep -iE "^(http|ftp).*")" != "" ]]; then + echo "icon looks to be web-link" + if ! curl -sfL --output /dev/null -r 0-0 "${icon}" ; then + echo "ERROR: Cannot download link. Reset icon." + icon="" + fi + elif [[ "$(echo ${icon} | grep -iE "^\/.*")" != "" ]]; then + echo "icon looks to be a file" + if [[ ! -a "${icon}" ]]; then + echo "ERROR: Cannot find file. Reset icon." + icon="" + fi + else + echo "ERROR: Cannot figure out icon. Reset icon." + icon="" + fi + echo "icon after first check: $icon" + # If no icon defined we are trying to search for installed app icon + if [[ "$icon" == "" ]]; then + appPath=$(mdfind "kind:application AND name:$itemName" | head -1 || true) + appIcon=$(defaults read "${appPath}/Contents/Info.plist" CFBundleIconFile || true) + if [[ "$(echo "$appIcon" | grep -io ".icns")" == "" ]]; then + appIcon="${appIcon}.icns" + fi + icon="${appPath}/Contents/Resources/${appIcon}" + echo "Icon before file check: ${icon}" + if [ ! -f "${icon}" ]; then + # Using LOGO variable to show logo in swiftDialog + case $LOGO in + appstore) + # Apple App Store on Mac + if [[ $(sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + ;; + jamf) + # Jamf Pro + LOGO_PATH="/Library/Application Support/JAMF/Jamf.app/Contents/Resources/AppIcon.icns" + ;; + mosyleb) + # Mosyle Business + LOGO_PATH="/Applications/Self-Service.app/Contents/Resources/AppIcon.icns" + ;; + mosylem) + # Mosyle Manager (education) + LOGO_PATH="/Applications/Manager.app/Contents/Resources/AppIcon.icns" + ;; + addigy) + # Addigy + LOGO_PATH="/Library/Addigy/macmanage/MacManage.app/Contents/Resources/atom.icns" + ;; + microsoft) + # Microsoft Endpoint Manager (Intune) + LOGO_PATH="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns" + ;; + ws1) + # Workspace ONE (AirWatch) + LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns" + ;; + esac + if [[ ! -a "${LOGO_PATH}" ]]; then + printlog "ERROR in LOGO_PATH '${LOGO_PATH}', setting Mac App Store." + if [[ $(/usr/bin/sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + fi + icon="${LOGO_PATH}" + fi + fi + echo "LOGO: $LOGO" + echo "icon: ${icon}" + + # display first screen + open -a "$dialogApp" --args \ + --title none \ + --icon "$icon" \ + --message "$message" \ + --mini \ + --progress 100 \ + --position bottomright \ + --movable \ + --commandfile "$dialog_command_file" + + # give everything a moment to catch up + sleep 0.1 +fi + +# Install software using Installomator +cmdOutput="$(${destFile} ${item} LOGO=$LOGO ${installomatorOptions} ${installomatorNotify} || true)" +checkCmdOutput $cmdOutput + +# Mark: dockutil stuff +if [[ $addToDock -eq 1 ]]; then + dialogUpdate "progresstext: Adding to Dock" + if [[ ! -d $dockutil ]]; then + echo "Cannot find dockutil at $dockutil, trying installation" + # Install using Installlomator + cmdOutput="$(${destFile} dockutil LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" + checkCmdOutput $cmdOutput + fi + echo "Adding to Dock" + $dockutil --add "${appPath}" "${userHome}/Library/Preferences/com.apple.dock.plist" || true + sleep 1 +else + echo "Not adding to Dock." +fi + +# Mark: Ending +if [[ $installomatorVersion -lt 10 ]]; then + echo "Again skipping Dialog stuff." +else + # close and quit dialog + dialogUpdate "progress: complete" + dialogUpdate "progresstext: Done" + + # pause a moment + sleep 0.5 + + dialogUpdate "quit:" + + # let everything catch up + sleep 0.5 + + # just to be safe + #killall "Dialog" 2>/dev/null || true +fi + +echo "[$(DATE)][LOG-END]" + +caffexit $exitStatus diff --git a/MDM/App-install with Dialog and dockutil/App normal SS.sh b/MDM/App-install with swiftDialog and dockutil/App service Auto-install.sh similarity index 62% rename from MDM/App-install with Dialog and dockutil/App normal SS.sh rename to MDM/App-install with swiftDialog and dockutil/App service Auto-install.sh index 7326f4a..2748c0f 100644 --- a/MDM/App-install with Dialog and dockutil/App normal SS.sh +++ b/MDM/App-install with swiftDialog and dockutil/App service Auto-install.sh @@ -1,11 +1,11 @@ #!/bin/sh -# Installation using Installomator with Dialog showing progress (and posibility of adding to the Dock) +# Installation using Installomator -LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="addigy" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" -item="" # enter the software to install -# Examples: microsoftedge, brave, googlechromepkg, firefoxpkg +item="xink" # enter the software to install +# Examples: desktoppr, dockutil, supportapp, applenyfonts, applesfpro, applesfmono, applesfcompact, nomad, nudge, shield, xink # Dialog icon icon="" @@ -14,14 +14,14 @@ icon="" # dockutil variables addToDock="1" # with dockutil after installation (0 if not) -appPath="/Applications/.app" +appPath="/Applications/Xink.app" # Other variables dialog_command_file="/var/tmp/dialog.log" dialogApp="/Library/Application Support/Dialog/Dialog.app" dockutil="/usr/local/bin/dockutil" -installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=silent DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space +installomatorOptions="BLOCKING_PROCESS_ACTION=ignore NOTIFY=silent DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space # Other installomatorOptions: # LOGGING=REQ @@ -45,9 +45,10 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=silent DIALOG_C # Fill the variable "item" above with a label. # Script will run this label through Installomator. ###################################################################### -# v. 10.1 : Improved appIcon handling. Can add the app to Dock using dockutil -# v. 10 : Integration with Dialog and Installomator v. 10 -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 10.0.2 : Improved icon checks and failovers +# v. 10.0.1 : Can add the app to Dock using dockutil +# v. 10.0 : Integration with Dialog and Installomator v. 10 +# v. 9.3 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script @@ -118,7 +119,7 @@ if [[ $installomatorVersion -lt 10 ]] || [[ $(sw_vers -buildVersion) < "20A" ]]; echo "And macOS 11 Big Sur (build 20A) is required for Dialog. Installed build $(sw_vers -buildVersion)." installomatorNotify="NOTIFY=all" else - installomatorNotify="" + installomatorNotify="NOTIFY=silent" # check for Swift Dialog if [[ ! -d $dialogApp ]]; then echo "Cannot find dialog at $dialogApp" @@ -136,6 +137,25 @@ else fi echo "$item $itemName" + #Check icon (expecting beginning with “http” to be web-link and “/” to be disk file) + echo "icon before check: $icon" + if [[ "$(echo ${icon} | grep -iE "^(http|ftp).*")" != "" ]]; then + echo "icon looks to be web-link" + if ! curl -sfL --output /dev/null -r 0-0 "${icon}" ; then + echo "ERROR: Cannot download link. Reset icon." + icon="" + fi + elif [[ "$(echo ${icon} | grep -iE "^\/.*")" != "" ]]; then + echo "icon looks to be a file" + if [[ ! -a "${icon}" ]]; then + echo "ERROR: Cannot find file. Reset icon." + icon="" + fi + else + echo "ERROR: Cannot figure out icon. Reset icon." + icon="" + fi + echo "icon after first check: $icon" # If no icon defined we are trying to search for installed app icon if [[ "$icon" == "" ]]; then appPath=$(mdfind "kind:application AND name:$itemName" | head -1 || true) @@ -144,12 +164,56 @@ else appIcon="${appIcon}.icns" fi icon="${appPath}/Contents/Resources/${appIcon}" - echo "${icon}" + echo "Icon before file check: ${icon}" if [ ! -f "${icon}" ]; then - icon="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + # Using LOGO variable to show logo in swiftDialog + case $LOGO in + appstore) + # Apple App Store on Mac + if [[ $(sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + ;; + jamf) + # Jamf Pro + LOGO_PATH="/Library/Application Support/JAMF/Jamf.app/Contents/Resources/AppIcon.icns" + ;; + mosyleb) + # Mosyle Business + LOGO_PATH="/Applications/Self-Service.app/Contents/Resources/AppIcon.icns" + ;; + mosylem) + # Mosyle Manager (education) + LOGO_PATH="/Applications/Manager.app/Contents/Resources/AppIcon.icns" + ;; + addigy) + # Addigy + LOGO_PATH="/Library/Addigy/macmanage/MacManage.app/Contents/Resources/atom.icns" + ;; + microsoft) + # Microsoft Endpoint Manager (Intune) + LOGO_PATH="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns" + ;; + ws1) + # Workspace ONE (AirWatch) + LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns" + ;; + esac + if [[ ! -a "${LOGO_PATH}" ]]; then + printlog "ERROR in LOGO_PATH '${LOGO_PATH}', setting Mac App Store." + if [[ $(/usr/bin/sw_vers -buildVersion) > "19" ]]; then + LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" + else + LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns" + fi + fi + icon="${LOGO_PATH}" fi fi - echo "${icon}" + echo "LOGO: $LOGO" + echo "icon: ${icon}" # display first screen open -a "$dialogApp" --args \ diff --git a/MDM/App-install/App service Auto-install.sh b/MDM/App-install/App service Auto-install.sh index 8e0509a..5b56685 100644 --- a/MDM/App-install/App service Auto-install.sh +++ b/MDM/App-install/App service Auto-install.sh @@ -2,26 +2,12 @@ # Installation using Installomator -LOGO="addigy" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" -item="xink" # enter the software to install -# Examples: desktoppr, dockutil, supportapp, applenyfonts, applesfpro, applesfmono, applesfcompact, nomad, nudge, shield, xink +what="dockutil" # enter the software to install +# Examples: adobecreativeclouddesktop, textmate, vlc -# Dialog icon -icon="" -# icon should be a file system path or an URL to an online PNG. -# In Mosyle an URL can be found by copy picture address from a Custom Command icon. - -# dockutil variables -addToDock="1" # with dockutil after installation (0 if not) -appPath="/Applications/Xink.app" - -# Other variables -dialog_command_file="/var/tmp/dialog.log" -dialogApp="/Library/Application Support/Dialog/Dialog.app" -dockutil="/usr/local/bin/dockutil" - -installomatorOptions="BLOCKING_PROCESS_ACTION=ignore NOTIFY=silent DIALOG_CMD_FILE=${dialog_command_file}" # Separated by space +installomatorOptions="BLOCKING_PROCESS_ACTION=ignore NOTIFY=silent" # Separated by space # Other installomatorOptions: # LOGGING=REQ @@ -42,11 +28,9 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=ignore NOTIFY=silent DIALOG_CMD_FI # INSTALL=force ###################################################################### # To be used as a script sent out from a MDM. -# Fill the variable "item" above with a label. +# Fill the variable "what" above with a label. # Script will run this label through Installomator. ###################################################################### -# v. 10.1 : Can add the app to Dock using dockutil -# v. 10 : Integration with Dialog and Installomator v. 10 # v. 9.3 : Better logging handling and installomatorOptions fix. ###################################################################### @@ -54,43 +38,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=ignore NOTIFY=silent DIALOG_CMD_FI # PATH declaration export PATH=/usr/bin:/bin:/usr/sbin:/sbin -echo "$(date +%F\ %T) [LOG-BEGIN] $item" - -dialogUpdate() { - # $1: dialog command - local dcommand="$1" - - if [[ -n $dialog_command_file ]]; then - echo "$dcommand" >> "$dialog_command_file" - echo "Dialog: $dcommand" - fi -} -checkCmdOutput () { - # $1: cmdOutput - local cmdOutput="$1" - exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" - if [[ ${exitStatus} -eq 0 ]] ; then - echo "${item} succesfully installed." - warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" - echo "$warnOutput" - else - echo "ERROR installing ${item}. Exit code ${exitStatus}" - echo "$cmdOutput" - #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" - #echo "$errorOutput" - fi -} - -# Check the currently logged in user -currentUser=$(stat -f "%Su" /dev/console) -if [ -z "$currentUser" ] || [ "$currentUser" = "loginwindow" ] || [ "$currentUser" = "_mbsetupuser" ] || [ "$currentUser" = "root" ]; then - echo "ERROR. Logged in user is $currentUser! Cannot proceed." - exit 97 -fi -# Get the current user's UID for dockutil -uid=$(id -u "$currentUser") -# Find the home folder of the user -userHome="$(dscl . -read /users/${currentUser} NFSHomeDirectory | awk '{print $2}')" +echo "$(date +%F\ %T) [LOG-BEGIN] $what" # Verify that Installomator has been installed destFile="/usr/local/Installomator/Installomator.sh" @@ -110,97 +58,20 @@ caffexit () { exit $1 } -# Mark: Installation begins -installomatorVersion="$(${destFile} version | cut -d "." -f1 || true)" - -if [[ $installomatorVersion -lt 10 ]] || [[ $(sw_vers -buildVersion) < "20A" ]]; then - echo "Installomator should be at least version 10 to support Dialog. Installed version $installomatorVersion." - echo "And macOS 11 Big Sur (build 20A) is required for Dialog. Installed build $(sw_vers -buildVersion)." - installomatorNotify="NOTIFY=all" -else - installomatorNotify="" - # check for Swift Dialog - if [[ ! -d $dialogApp ]]; then - echo "Cannot find dialog at $dialogApp" - # Install using Installlomator - cmdOutput="$(${destFile} dialog LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" - checkCmdOutput $cmdOutput - fi - - # Configure and display swiftDialog - itemName=$( ${destFile} ${item} RETURN_LABEL_NAME=1 LOGGING=REQ INSTALL=force | tail -1 || true ) - if [[ "$itemName" != "#" ]]; then - message="Installing ${itemName}…" - else - message="Installing ${item}…" - fi - echo "$item $itemName" - - # If no icon defined we are trying to search for installed app icon - if [[ "$icon" == "" ]]; then - appPath=$(mdfind "kind:application AND name:$itemName" | head -1) - appIcon=$(defaults read "${appPath}/Contents/Info.plist" CFBundleIconFile) - icon="${appPath}/Contents/Resources/${appIcon}" - echo "${icon}" - if [ ! -f "${icon}" ]; then - icon="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns" - fi - fi - echo "${icon}" - - # display first screen - open -a "$dialogApp" --args \ - --title none \ - --icon "$icon" \ - --message "$message" \ - --mini \ - --progress 100 \ - --position bottomright \ - --movable \ - --commandfile "$dialog_command_file" - - # give everything a moment to catch up - sleep 0.1 -fi - # Install software using Installomator -cmdOutput="$(${destFile} ${item} LOGO=$LOGO ${installomatorOptions} ${installomatorNotify} || true)" -checkCmdOutput $cmdOutput +cmdOutput="$(${destFile} ${what} LOGO=$LOGO ${installomatorOptions} || true)" -# Mark: dockutil stuff -if [[ $addToDock -eq 1 ]]; then - dialogUpdate "progresstext: Adding to Dock" - if [[ ! -d $dockutil ]]; then - echo "Cannot find dockutil at $dockutil, trying installation" - # Install using Installlomator - cmdOutput="$(${destFile} dockutil LOGO=$LOGO BLOCKING_PROCESS_ACTION=ignore LOGGING=REQ NOTIFY=silent || true)" - checkCmdOutput $cmdOutput - fi - echo "Adding to Dock" - $dockutil --add "${appPath}" "${userHome}/Library/Preferences/com.apple.dock.plist" || true - sleep 1 +# Check result +exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" +if [[ ${exitStatus} -eq 0 ]] ; then + echo "${what} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" else - echo "Not adding to Dock." -fi - -# Mark: Ending -if [[ $installomatorVersion -lt 10 ]]; then - echo "Again skipping Dialog stuff." -else - # close and quit dialog - dialogUpdate "progress: complete" - dialogUpdate "progresstext: Done" - - # pause a moment - sleep 0.5 - - dialogUpdate "quit:" - - # let everything catch up - sleep 0.5 - - # just to be safe - #killall "Dialog" 2>/dev/null || true + echo "ERROR installing ${what}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" fi echo "[$(DATE)][LOG-END]" From c0a850848b6b4ee876d4f073f2b89b6a4f979892 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Tue, 20 Sep 2022 08:36:55 +0200 Subject: [PATCH 178/209] Version number matching --- .../App VFA SS github.sh | 2 +- .../App VFA SS.sh | 2 +- .../App browser-security SS.sh} | 2 +- .../App normal SS multi-app.sh | 2 +- .../App normal SS.sh | 2 +- .../App service SS.sh} | 2 +- MDM/App-install/App VFA.sh | 2 +- MDM/App-install/App browser-security Auto-install.sh | 2 +- MDM/App-install/App browser-security SS.sh | 2 +- MDM/App-install/App normal Auto-install.sh | 2 +- MDM/App-install/App normal SS.sh | 2 +- MDM/App-install/App service Auto-install.sh | 2 +- 12 files changed, 12 insertions(+), 12 deletions(-) rename MDM/{App-install with swiftDialog and dockutil => App-install SS with swiftDialog and dockutil}/App VFA SS github.sh (99%) rename MDM/{App-install with swiftDialog and dockutil => App-install SS with swiftDialog and dockutil}/App VFA SS.sh (99%) rename MDM/{App-install with swiftDialog and dockutil/App browser-security.sh => App-install SS with swiftDialog and dockutil/App browser-security SS.sh} (99%) rename MDM/{App-install with swiftDialog and dockutil => App-install SS with swiftDialog and dockutil}/App normal SS multi-app.sh (99%) rename MDM/{App-install with swiftDialog and dockutil => App-install SS with swiftDialog and dockutil}/App normal SS.sh (99%) rename MDM/{App-install with swiftDialog and dockutil/App service Auto-install.sh => App-install SS with swiftDialog and dockutil/App service SS.sh} (99%) diff --git a/MDM/App-install with swiftDialog and dockutil/App VFA SS github.sh b/MDM/App-install SS with swiftDialog and dockutil/App VFA SS github.sh similarity index 99% rename from MDM/App-install with swiftDialog and dockutil/App VFA SS github.sh rename to MDM/App-install SS with swiftDialog and dockutil/App VFA SS github.sh index fc983c8..8d9365d 100755 --- a/MDM/App-install with swiftDialog and dockutil/App VFA SS github.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App VFA SS github.sh @@ -108,7 +108,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user DIALOG_CMD_FILE=${dial # v. 10.0.2 : Improved icon checks and failovers # v. 10.0.1 : github-functions added. Improved appIcon handling. Can add the app to Dock using dockutil. # v. 10.0 : Integration with Dialog and Installomator v. 10 -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 9.2.1 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script diff --git a/MDM/App-install with swiftDialog and dockutil/App VFA SS.sh b/MDM/App-install SS with swiftDialog and dockutil/App VFA SS.sh similarity index 99% rename from MDM/App-install with swiftDialog and dockutil/App VFA SS.sh rename to MDM/App-install SS with swiftDialog and dockutil/App VFA SS.sh index dc7f0de..31cf097 100755 --- a/MDM/App-install with swiftDialog and dockutil/App VFA SS.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App VFA SS.sh @@ -55,7 +55,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user DIALOG_CMD_FILE=${dial # v. 10.0.2 : Improved icon checks and failovers # v. 10.0.1 : Improved appIcon handling. Can add the app to Dock using dockutil # v. 10.0 : Integration with Dialog and Installomator v. 10 -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 9.2.1 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script diff --git a/MDM/App-install with swiftDialog and dockutil/App browser-security.sh b/MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh similarity index 99% rename from MDM/App-install with swiftDialog and dockutil/App browser-security.sh rename to MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh index 707acc5..7573f1f 100755 --- a/MDM/App-install with swiftDialog and dockutil/App browser-security.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh @@ -48,7 +48,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit DIALOG_CMD_FIL # v. 10.0.2 : Improved icon checks and failovers # v. 10.0.1 : Improved appIcon handling. Can add the app to Dock using dockutil # v. 10.0 : Integration with Dialog and Installomator v. 10 -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 9.2.1 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script diff --git a/MDM/App-install with swiftDialog and dockutil/App normal SS multi-app.sh b/MDM/App-install SS with swiftDialog and dockutil/App normal SS multi-app.sh similarity index 99% rename from MDM/App-install with swiftDialog and dockutil/App normal SS multi-app.sh rename to MDM/App-install SS with swiftDialog and dockutil/App normal SS multi-app.sh index d54c94f..71eba78 100644 --- a/MDM/App-install with swiftDialog and dockutil/App normal SS multi-app.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App normal SS multi-app.sh @@ -48,7 +48,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user DIALOG_CMD_FILE=${dial # v. 10.0.2 : Improved icon checks and failovers # v. 10.0.1 : Improved appIcon handling. Can add the app to Dock using dockutil # v. 10.0 : Integration with Dialog and Installomator v. 10 -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 9.2.1 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script diff --git a/MDM/App-install with swiftDialog and dockutil/App normal SS.sh b/MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh similarity index 99% rename from MDM/App-install with swiftDialog and dockutil/App normal SS.sh rename to MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh index 2c6a6fc..97e4398 100644 --- a/MDM/App-install with swiftDialog and dockutil/App normal SS.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh @@ -45,7 +45,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user DIALOG_CMD_FILE=${dial # v. 10.0.2 : Improved icon checks and failovers # v. 10.0.1 : Improved appIcon handling. Can add the app to Dock using dockutil # v. 10.0 : Integration with Dialog and Installomator v. 10 -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 9.2.1 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script diff --git a/MDM/App-install with swiftDialog and dockutil/App service Auto-install.sh b/MDM/App-install SS with swiftDialog and dockutil/App service SS.sh similarity index 99% rename from MDM/App-install with swiftDialog and dockutil/App service Auto-install.sh rename to MDM/App-install SS with swiftDialog and dockutil/App service SS.sh index 2748c0f..ee1daa0 100644 --- a/MDM/App-install with swiftDialog and dockutil/App service Auto-install.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App service SS.sh @@ -48,7 +48,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=ignore NOTIFY=silent DIALOG_CMD_FI # v. 10.0.2 : Improved icon checks and failovers # v. 10.0.1 : Can add the app to Dock using dockutil # v. 10.0 : Integration with Dialog and Installomator v. 10 -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 9.2.1 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script diff --git a/MDM/App-install/App VFA.sh b/MDM/App-install/App VFA.sh index 19240cd..1772419 100755 --- a/MDM/App-install/App VFA.sh +++ b/MDM/App-install/App VFA.sh @@ -38,7 +38,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user LOGGING=INFO NOTIFY=al # Fill the variable "what" above with a label. # Script will run this label through Installomator. ###################################################################### -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 9.2.1 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script diff --git a/MDM/App-install/App browser-security Auto-install.sh b/MDM/App-install/App browser-security Auto-install.sh index dfd0ada..45a52af 100644 --- a/MDM/App-install/App browser-security Auto-install.sh +++ b/MDM/App-install/App browser-security Auto-install.sh @@ -31,7 +31,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit" # Separated b # Fill the variable "what" above with a label. # Script will run this label through Installomator. ###################################################################### -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 9.2.1 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script diff --git a/MDM/App-install/App browser-security SS.sh b/MDM/App-install/App browser-security SS.sh index 829ae5a..75d55f2 100644 --- a/MDM/App-install/App browser-security SS.sh +++ b/MDM/App-install/App browser-security SS.sh @@ -31,7 +31,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit NOTIFY=all" # # Fill the variable "what" above with a label. # Script will run this label through Installomator. ###################################################################### -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 9.2.1 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script diff --git a/MDM/App-install/App normal Auto-install.sh b/MDM/App-install/App normal Auto-install.sh index aa7d624..a43cdff 100644 --- a/MDM/App-install/App normal Auto-install.sh +++ b/MDM/App-install/App normal Auto-install.sh @@ -31,7 +31,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user" # Separated by space # Fill the variable "what" above with a label. # Script will run this label through Installomator. ###################################################################### -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 9.2.1 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script diff --git a/MDM/App-install/App normal SS.sh b/MDM/App-install/App normal SS.sh index 98aa7c1..5481991 100644 --- a/MDM/App-install/App normal SS.sh +++ b/MDM/App-install/App normal SS.sh @@ -31,7 +31,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=all" # Separate # Fill the variable "what" above with a label. # Script will run this label through Installomator. ###################################################################### -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 9.2.1 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script diff --git a/MDM/App-install/App service Auto-install.sh b/MDM/App-install/App service Auto-install.sh index 5b56685..0f5b5f1 100644 --- a/MDM/App-install/App service Auto-install.sh +++ b/MDM/App-install/App service Auto-install.sh @@ -31,7 +31,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=ignore NOTIFY=silent" # Separated # Fill the variable "what" above with a label. # Script will run this label through Installomator. ###################################################################### -# v. 9.3 : Better logging handling and installomatorOptions fix. +# v. 9.2.1 : Better logging handling and installomatorOptions fix. ###################################################################### # Mark: Script From 938a40943eceff1cc36a326c88f91dfe89051cca Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Tue, 20 Sep 2022 09:50:54 +0200 Subject: [PATCH 179/209] Cleaning and adding prevention scripts --- ... => Installomator 1st Auto-install DEPNotify.sh} | 2 +- ...tor 1st.sh => Installomator 1st Auto-install.sh} | 2 +- ...PNotify.sh => Installomator 1st SS DEPNotify.sh} | 2 +- ...tallomator 1st SS.sh => Installomator 1st SS.sh} | 13 ++++++++----- ...ion Addigy.sh => Installomator 1st condition.sh} | 0 MDM/Installomator 1st prevention.sh | 11 +++++++++++ ...ion.sh => Progress 1st swiftDialog condition.sh} | 2 +- MDM/Progress 1st swiftDialog prevention.sh | 11 +++++++++++ ...t swiftDialog.sh => Progress 1st swiftDialog.sh} | 4 ++-- ...sh => install Installomator direct condition.sh} | 3 +++ ...or direct.sh => install Installomator direct.sh} | 0 ...n.sh => install swiftDialog direct condition.sh} | 3 +++ ...alog direct.sh => install swiftDialog direct.sh} | 0 13 files changed, 42 insertions(+), 11 deletions(-) rename MDM/{-Installomator 1st -DEPNotify.sh => Installomator 1st Auto-install DEPNotify.sh} (99%) rename MDM/{-Installomator 1st.sh => Installomator 1st Auto-install.sh} (99%) rename MDM/{-Installomator 1st SS DEPNotify.sh => Installomator 1st SS DEPNotify.sh} (99%) rename MDM/{-Installomator 1st SS.sh => Installomator 1st SS.sh} (95%) rename MDM/{-Installomator 1st condition Addigy.sh => Installomator 1st condition.sh} (100%) create mode 100644 MDM/Installomator 1st prevention.sh rename MDM/{-Progress 1st swiftDialog condition.sh => Progress 1st swiftDialog condition.sh} (81%) create mode 100644 MDM/Progress 1st swiftDialog prevention.sh rename MDM/{-Progress 1st swiftDialog.sh => Progress 1st swiftDialog.sh} (99%) rename MDM/{-install Installomator direct condition.sh => install Installomator direct condition.sh} (90%) rename MDM/{-install Installomator direct.sh => install Installomator direct.sh} (100%) rename MDM/{-install swiftDialog direct condition.sh => install swiftDialog direct condition.sh} (92%) rename MDM/{-install swiftDialog direct.sh => install swiftDialog direct.sh} (100%) diff --git a/MDM/-Installomator 1st -DEPNotify.sh b/MDM/Installomator 1st Auto-install DEPNotify.sh similarity index 99% rename from MDM/-Installomator 1st -DEPNotify.sh rename to MDM/Installomator 1st Auto-install DEPNotify.sh index 9df84a0..18db8d8 100755 --- a/MDM/-Installomator 1st -DEPNotify.sh +++ b/MDM/Installomator 1st Auto-install DEPNotify.sh @@ -1,6 +1,6 @@ #!/bin/sh -# Installation using Installomator with DEPNotify window +# Installomator 1st installation with DEPNotify window (auto installation at enrollment) instance="Instance" # Name of used instance LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" diff --git a/MDM/-Installomator 1st.sh b/MDM/Installomator 1st Auto-install.sh similarity index 99% rename from MDM/-Installomator 1st.sh rename to MDM/Installomator 1st Auto-install.sh index 744f5c3..46c2188 100755 --- a/MDM/-Installomator 1st.sh +++ b/MDM/Installomator 1st Auto-install.sh @@ -1,6 +1,6 @@ #!/bin/sh -# Installation using Installomator +# Installomator 1st installation (auto installation at enrollment) instance="Instance" # Name of used instance LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" diff --git a/MDM/-Installomator 1st SS DEPNotify.sh b/MDM/Installomator 1st SS DEPNotify.sh similarity index 99% rename from MDM/-Installomator 1st SS DEPNotify.sh rename to MDM/Installomator 1st SS DEPNotify.sh index b960734..eec89df 100755 --- a/MDM/-Installomator 1st SS DEPNotify.sh +++ b/MDM/Installomator 1st SS DEPNotify.sh @@ -1,6 +1,6 @@ #!/bin/sh -# Installation using Installomator with DEPNotify window +# Installomator 1st installation with DEPNotify window (for self Service deployment) instance="Instance" # Name of used instance LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" diff --git a/MDM/-Installomator 1st SS.sh b/MDM/Installomator 1st SS.sh similarity index 95% rename from MDM/-Installomator 1st SS.sh rename to MDM/Installomator 1st SS.sh index 9efa824..9654f76 100755 --- a/MDM/-Installomator 1st SS.sh +++ b/MDM/Installomator 1st SS.sh @@ -1,6 +1,6 @@ #!/bin/sh -# Installation using Installomator +# Installomator 1st installation (for Self Service deployment) instance="Instance" # Name of used instance LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" @@ -11,6 +11,7 @@ what=(dialog dockutil microsoftautoupdate supportapp applenyfonts applesfpro app installomatorOptions="NOTIFY=all BLOCKING_PROCESS_ACTION=prompt_user" # Error message to user if any occur +showError="1" # Show error message if 1 (0 if it should not be shown) errorMessage="A problem was encountered setting up this Mac. Please contact IT." ###################################################################### @@ -51,11 +52,11 @@ errorMessage="A problem was encountered setting up this Mac. Please contact IT." # ###################################################################### scriptVersion="9.4" -# v. 9.4 : 2022-09-14 : downloadURL can fall back on GitHub API +# v. 9.4 : 2022-09-14 : Making error message optional. downloadURL can fall back on GitHub API. # v. 9.3 : 2022-08-29 : installomatorOptions in quotes and ignore blocking processes. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. ws1 support. # v. 9.2.2 : 2022-06-17 : installomatorOptions introduced. Check 1.1.1.1 for internet connection. # v. 9.2.1 : 2022-05-30 : Some changes to logging -# v. 9.2 : 2022-05-19 : Built in installer for Installlomator, and display dialog if error happens. Now universal script for all supported MDMs based on LOGO variable. +# v. 9.2 : 2022-05-19 : Built in installer for Installomator, and display dialog if error happens. Now universal script for all supported MDMs based on LOGO variable. ###################################################################### export PATH=/usr/bin:/bin:/usr/sbin:/sbin @@ -293,8 +294,10 @@ printlog "Errors: $errorCount" if [[ $errorCount -ne 0 ]]; then printlog "ERROR: Display error dialog to user!" errorMessage="${errorMessage} Total errors: $errorCount" - message="$errorMessage" - displayDialog & + if [[ $showError -eq 1 ]]; then + message="$errorMessage" + displayDialog & + fi printlog "errorLabels: $errorLabels" fi diff --git a/MDM/-Installomator 1st condition Addigy.sh b/MDM/Installomator 1st condition.sh similarity index 100% rename from MDM/-Installomator 1st condition Addigy.sh rename to MDM/Installomator 1st condition.sh diff --git a/MDM/Installomator 1st prevention.sh b/MDM/Installomator 1st prevention.sh new file mode 100644 index 0000000..b4658d9 --- /dev/null +++ b/MDM/Installomator 1st prevention.sh @@ -0,0 +1,11 @@ +#!/bin/sh + +# PREVENT Installomator 1st Auto-install from running + +# DESCRIPTION +# Will create the file to prevent Installomator 1st Auto-install from running. +# Only for MDM solutions (like Addigy and Microsoft) that have conditions for runnning scripts and do not offer an enrollment event for runnning the script. +# By runninng this script, the file will be created on the client, that will prevent Installomator 1st Auto-install from runnning. +# This is a great help for implementing Installomator 1st Auto-install in a running solution, where the command below have to be run on currently enrolled devices, and then Installomator 1st Auto-install can be assigned to all machines, and will run only on newly enrolled devices. + +/usr/bin/touch "/var/db/.Installomator1stDone" diff --git a/MDM/-Progress 1st swiftDialog condition.sh b/MDM/Progress 1st swiftDialog condition.sh similarity index 81% rename from MDM/-Progress 1st swiftDialog condition.sh rename to MDM/Progress 1st swiftDialog condition.sh index 6f91d6d..63d0055 100644 --- a/MDM/-Progress 1st swiftDialog condition.sh +++ b/MDM/Progress 1st swiftDialog condition.sh @@ -3,7 +3,7 @@ # Mark: Addigy Condition on condition file # Install on success -conditionFile="/var/db/.Installation1stProgressDone" +conditionFile="/var/db/.Progress1stDone" if [ -e "$conditionFile" ]; then echo "$conditionFile exists. Exiting." exit 1 diff --git a/MDM/Progress 1st swiftDialog prevention.sh b/MDM/Progress 1st swiftDialog prevention.sh new file mode 100644 index 0000000..bd43e56 --- /dev/null +++ b/MDM/Progress 1st swiftDialog prevention.sh @@ -0,0 +1,11 @@ +#!/bin/sh + +# PREVENT Progress 1st swiftDialog from running + +# DESCRIPTION +# Will create the file to prevent Progress 1st swiftDialog from running. +# Only for MDM solutions (like Addigy and Microsoft) that have conditions for runnning scripts and do not offer an enrollment event for runnning the script. +# By runninng this script, the file will be created on the client, that will prevent Progress 1st swiftDialog from runnning. +# This is a great help for implementing Progress 1st swiftDialog in a running solution, where the command below have to be run on currently enrolled devices, and then Progress 1st swiftDialog can be assigned to all machines, and will run only on newly enrolled devices. + +/usr/bin/touch "/var/db/.Progress1stDone" diff --git a/MDM/-Progress 1st swiftDialog.sh b/MDM/Progress 1st swiftDialog.sh similarity index 99% rename from MDM/-Progress 1st swiftDialog.sh rename to MDM/Progress 1st swiftDialog.sh index dfb9980..c7315af 100755 --- a/MDM/-Progress 1st swiftDialog.sh +++ b/MDM/Progress 1st swiftDialog.sh @@ -1,6 +1,6 @@ #!/bin/sh -# Progress 1st with swiftDialog +# Progress 1st with swiftDialog (auto installation at enrollment) instance="Instance" # Name of used instance LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" @@ -99,7 +99,7 @@ export PATH=/usr/bin:/bin:/usr/sbin:/sbin # Check before running case $LOGO in addigy|microsoft) - conditionFile="/var/db/.Installation1stProgressDone" + conditionFile="/var/db/.Progress1stDone" # Addigy and Microsoft Endpoint Manager (Intune) need a check for a touched file if [ -e "$conditionFile" ]; then echo "$LOGO setup detected" diff --git a/MDM/-install Installomator direct condition.sh b/MDM/install Installomator direct condition.sh similarity index 90% rename from MDM/-install Installomator direct condition.sh rename to MDM/install Installomator direct condition.sh index 89cdda6..342e72d 100755 --- a/MDM/-install Installomator direct condition.sh +++ b/MDM/install Installomator direct condition.sh @@ -1,5 +1,8 @@ #!/bin/sh +# Mark: Addigy Condition +# Install on success + gitusername="Installomator" gitreponame="Installomator" appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') diff --git a/MDM/-install Installomator direct.sh b/MDM/install Installomator direct.sh similarity index 100% rename from MDM/-install Installomator direct.sh rename to MDM/install Installomator direct.sh diff --git a/MDM/-install swiftDialog direct condition.sh b/MDM/install swiftDialog direct condition.sh similarity index 92% rename from MDM/-install swiftDialog direct condition.sh rename to MDM/install swiftDialog direct condition.sh index 2d25e09..79adc19 100755 --- a/MDM/-install swiftDialog direct condition.sh +++ b/MDM/install swiftDialog direct condition.sh @@ -1,5 +1,8 @@ #!/bin/sh +# Mark: Addigy Condition +# Install on success + gitusername="bartreardon" gitreponame="swiftDialog" appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') diff --git a/MDM/-install swiftDialog direct.sh b/MDM/install swiftDialog direct.sh similarity index 100% rename from MDM/-install swiftDialog direct.sh rename to MDM/install swiftDialog direct.sh From e6088a2edae361dacf077eec7705c8aa3a869212 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Tue, 20 Sep 2022 16:34:12 +0200 Subject: [PATCH 180/209] Install swiftDialog in preparation script --- MDM/Jamf/00_PrepareInstall_SwiftDialog.sh | 159 ++++++++++++++++++++++ MDM/install Installomator direct.sh | 2 +- 2 files changed, 160 insertions(+), 1 deletion(-) create mode 100755 MDM/Jamf/00_PrepareInstall_SwiftDialog.sh diff --git a/MDM/Jamf/00_PrepareInstall_SwiftDialog.sh b/MDM/Jamf/00_PrepareInstall_SwiftDialog.sh new file mode 100755 index 0000000..425a157 --- /dev/null +++ b/MDM/Jamf/00_PrepareInstall_SwiftDialog.sh @@ -0,0 +1,159 @@ +#!/bin/zsh + +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +# MARK: Arguments/Parameters + +# Parameter 4: path to the swiftDialog command file +dialog_command_file=${4:-"/var/tmp/dialog.log"} + +# Parameter 5: message displayed over the progress bar +message=${5:-"Self Service Progress"} + +# Parameter 6: path or URL to an icon +icon=${6:-"/System/Applications/App Store.app/Contents/Resources/AppIcon.icns"} +# see Dan Snelson's advice on how to get a URL to an icon in Self Service +# https://rumble.com/v119x6y-harvesting-self-service-icons.html + +# MARK: Constants + +dialogApp="/Library/Application Support/Dialog/Dialog.app" + +# MARK: Functions + +dialogUpdate() { + # $1: dialog command + local dcommand="$1" + + if [[ -n $dialog_command_file ]]; then + echo "$dcommand" >> "$dialog_command_file" + echo "Dialog: $dcommand" + fi +} + +# MARK: sanity checks + +# check minimal macOS requirement +if [[ $(sw_vers -buildVersion ) < "20A" ]]; then + echo "This script requires at least macOS 11 Big Sur." + exit 98 +fi + +# check we are running as root +if [[ $DEBUG -eq 0 && $(id -u) -ne 0 ]]; then + echo "This script should be run as root" + exit 97 +fi + +# swiftDialog installation +name="Dialog" +printlog "$name check for installation" +# download URL, version and Expected Team ID +# Method for GitHub pkg w. app version check +gitusername="bartreardon" +gitreponame="swiftDialog" +#printlog "$gitusername $gitreponame" +filetype="pkg" +downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then + printlog "Trying GitHub API for download URL." + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") +fi +#printlog "$downloadURL" +appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') +#printlog "$appNewVersion" +expectedTeamID="PWA5E9TQ59" +destFile="/Library/Application Support/Dialog/Dialog.app" +versionKey="CFBundleShortVersionString" #CFBundleVersion + +currentInstalledVersion="$(defaults read "${destFile}/Contents/Info.plist" $versionKey || true)" +printlog "${name} version: $currentInstalledVersion" +if [[ ! -e "${destFile}" || "$currentInstalledVersion" != "$appNewVersion" ]]; then + printlog "$name not found or version not latest." + printlog "${destFile}" + printlog "Installing version ${appNewVersion}…" + # Create temporary working directory + tmpDir="$(mktemp -d || true)" + printlog "Created working directory '$tmpDir'" + # Download the installer package + printlog "Downloading $name package version $appNewVersion from: $downloadURL" + installationCount=0 + exitCode=9 + while [[ $installationCount -lt 3 && $exitCode -gt 0 ]]; do + curlDownload=$(curl -Ls "$downloadURL" -o "$tmpDir/$name.pkg" || true) + curlDownloadStatus=$(echo $?) + if [[ $curlDownloadStatus -ne 0 ]]; then + printlog "error downloading $downloadURL, with status $curlDownloadStatus" + printlog "${curlDownload}" + exitCode=1 + else + printlog "Download $name succes." + # Verify the download + teamID=$(spctl -a -vv -t install "$tmpDir/$name.pkg" 2>&1 | awk '/origin=/ {print $NF }' | tr -d '()' || true) + printlog "Team ID for downloaded package: $teamID" + # Install the package if Team ID validates + if [ "$expectedTeamID" = "$teamID" ] || [ "$expectedTeamID" = "" ]; then + printlog "$name package verified. Installing package '$tmpDir/$name.pkg'." + pkgInstall=$(installer -verbose -dumplog -pkg "$tmpDir/$name.pkg" -target "/" 2>&1) + pkgInstallStatus=$(echo $?) + if [[ $pkgInstallStatus -ne 0 ]]; then + printlog "ERROR. $name package installation failed." + printlog "${pkgInstall}" + exitCode=2 + else + printlog "Installing $name package succes." + exitCode=0 + fi + else + printlog "ERROR. Package verification failed for $name before package installation could start. Download link may be invalid." + exitCode=3 + fi + fi + ((installationCount++)) + printlog "$installationCount time(s), exitCode $exitCode" + if [[ $installationCount -lt 3 ]]; then + if [[ $exitCode -gt 0 ]]; then + printlog "Sleep a bit before trying download and install again. $installationCount time(s)." + printlog "Remove $(rm -fv "$tmpDir/$name.pkg" || true)" + sleep 2 + fi + else + printlog "Download and install of $name succes." + fi + done + # Remove the temporary working directory + printlog "Deleting working directory '$tmpDir' and its contents." + printlog "Remove $(rm -Rfv "${tmpDir}" || true)" + # Handle installation errors + if [[ $exitCode != 0 ]]; then + printlog "ERROR. Installation of $name failed. Aborting." + caffexit $exitCode + else + printlog "$name version $appNewVersion installed!" + fi +else + printlog "$name version $appNewVersion already found. Perfect!" +fi + +# check for Swift Dialog +if [[ ! -d $dialogApp ]]; then + echo "Cannot find dialog at $dialogApp" + exit 95 +fi + + +# MARK: Configure and display swiftDialog + +# display first screen +open -a "$dialogApp" --args \ + --title none \ + --icon "$icon" \ + --message "$message" \ + --mini \ + --progress 100 \ + --position bottomright \ + --movable \ + --commandfile "$dialog_command_file" + +# give everything a moment to catch up +sleep 0.1 diff --git a/MDM/install Installomator direct.sh b/MDM/install Installomator direct.sh index b822e34..ee7fbcf 100755 --- a/MDM/install Installomator direct.sh +++ b/MDM/install Installomator direct.sh @@ -59,7 +59,7 @@ caffexit () { name="Installomator" printlog "$name check for installation" # download URL, version and Expected Team ID -# Method for GitHub pkg +# Method for GitHub pkg with destFile gitusername="Installomator" gitreponame="Installomator" #printlog "$gitusername $gitreponame" From 5b39697bf829b5142597462b047d29e68ec86002 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Wed, 21 Sep 2022 08:43:31 +0200 Subject: [PATCH 181/209] No `printlog` function so `echo` it is --- MDM/Jamf/00_PrepareInstall_SwiftDialog.sh | 58 +++++++++++------------ 1 file changed, 29 insertions(+), 29 deletions(-) diff --git a/MDM/Jamf/00_PrepareInstall_SwiftDialog.sh b/MDM/Jamf/00_PrepareInstall_SwiftDialog.sh index 425a157..24ad8f5 100755 --- a/MDM/Jamf/00_PrepareInstall_SwiftDialog.sh +++ b/MDM/Jamf/00_PrepareInstall_SwiftDialog.sh @@ -47,92 +47,92 @@ fi # swiftDialog installation name="Dialog" -printlog "$name check for installation" +echo "$name check for installation" # download URL, version and Expected Team ID # Method for GitHub pkg w. app version check gitusername="bartreardon" gitreponame="swiftDialog" -#printlog "$gitusername $gitreponame" +#echo "$gitusername $gitreponame" filetype="pkg" downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then - printlog "Trying GitHub API for download URL." + echo "Trying GitHub API for download URL." downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") fi -#printlog "$downloadURL" +#echo "$downloadURL" appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g') -#printlog "$appNewVersion" +#echo "$appNewVersion" expectedTeamID="PWA5E9TQ59" destFile="/Library/Application Support/Dialog/Dialog.app" versionKey="CFBundleShortVersionString" #CFBundleVersion currentInstalledVersion="$(defaults read "${destFile}/Contents/Info.plist" $versionKey || true)" -printlog "${name} version: $currentInstalledVersion" +echo "${name} version: $currentInstalledVersion" if [[ ! -e "${destFile}" || "$currentInstalledVersion" != "$appNewVersion" ]]; then - printlog "$name not found or version not latest." - printlog "${destFile}" - printlog "Installing version ${appNewVersion}…" + echo "$name not found or version not latest." + echo "${destFile}" + echo "Installing version ${appNewVersion}…" # Create temporary working directory tmpDir="$(mktemp -d || true)" - printlog "Created working directory '$tmpDir'" + echo "Created working directory '$tmpDir'" # Download the installer package - printlog "Downloading $name package version $appNewVersion from: $downloadURL" + echo "Downloading $name package version $appNewVersion from: $downloadURL" installationCount=0 exitCode=9 while [[ $installationCount -lt 3 && $exitCode -gt 0 ]]; do curlDownload=$(curl -Ls "$downloadURL" -o "$tmpDir/$name.pkg" || true) curlDownloadStatus=$(echo $?) if [[ $curlDownloadStatus -ne 0 ]]; then - printlog "error downloading $downloadURL, with status $curlDownloadStatus" - printlog "${curlDownload}" + echo "error downloading $downloadURL, with status $curlDownloadStatus" + echo "${curlDownload}" exitCode=1 else - printlog "Download $name succes." + echo "Download $name succes." # Verify the download teamID=$(spctl -a -vv -t install "$tmpDir/$name.pkg" 2>&1 | awk '/origin=/ {print $NF }' | tr -d '()' || true) - printlog "Team ID for downloaded package: $teamID" + echo "Team ID for downloaded package: $teamID" # Install the package if Team ID validates if [ "$expectedTeamID" = "$teamID" ] || [ "$expectedTeamID" = "" ]; then - printlog "$name package verified. Installing package '$tmpDir/$name.pkg'." + echo "$name package verified. Installing package '$tmpDir/$name.pkg'." pkgInstall=$(installer -verbose -dumplog -pkg "$tmpDir/$name.pkg" -target "/" 2>&1) pkgInstallStatus=$(echo $?) if [[ $pkgInstallStatus -ne 0 ]]; then - printlog "ERROR. $name package installation failed." - printlog "${pkgInstall}" + echo "ERROR. $name package installation failed." + echo "${pkgInstall}" exitCode=2 else - printlog "Installing $name package succes." + echo "Installing $name package succes." exitCode=0 fi else - printlog "ERROR. Package verification failed for $name before package installation could start. Download link may be invalid." + echo "ERROR. Package verification failed for $name before package installation could start. Download link may be invalid." exitCode=3 fi fi ((installationCount++)) - printlog "$installationCount time(s), exitCode $exitCode" + echo "$installationCount time(s), exitCode $exitCode" if [[ $installationCount -lt 3 ]]; then if [[ $exitCode -gt 0 ]]; then - printlog "Sleep a bit before trying download and install again. $installationCount time(s)." - printlog "Remove $(rm -fv "$tmpDir/$name.pkg" || true)" + echo "Sleep a bit before trying download and install again. $installationCount time(s)." + echo "Remove $(rm -fv "$tmpDir/$name.pkg" || true)" sleep 2 fi else - printlog "Download and install of $name succes." + echo "Download and install of $name succes." fi done # Remove the temporary working directory - printlog "Deleting working directory '$tmpDir' and its contents." - printlog "Remove $(rm -Rfv "${tmpDir}" || true)" + echo "Deleting working directory '$tmpDir' and its contents." + echo "Remove $(rm -Rfv "${tmpDir}" || true)" # Handle installation errors if [[ $exitCode != 0 ]]; then - printlog "ERROR. Installation of $name failed. Aborting." + echo "ERROR. Installation of $name failed. Aborting." caffexit $exitCode else - printlog "$name version $appNewVersion installed!" + echo "$name version $appNewVersion installed!" fi else - printlog "$name version $appNewVersion already found. Perfect!" + echo "$name version $appNewVersion already found. Perfect!" fi # check for Swift Dialog From 53cbc342c36d5c20f510b1432b34c5388b910f83 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Wed, 21 Sep 2022 09:04:06 +0200 Subject: [PATCH 182/209] Minor renaming of a few file names --- MDM/Progress 1st swiftDialog.sh | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/MDM/Progress 1st swiftDialog.sh b/MDM/Progress 1st swiftDialog.sh index c7315af..acfe9a1 100755 --- a/MDM/Progress 1st swiftDialog.sh +++ b/MDM/Progress 1st swiftDialog.sh @@ -54,7 +54,7 @@ errorMessage="A problem was encountered setting up this Mac. Please contact IT." # # Log: /private/var/log/InstallationProgress.log # This file prevents script from running again on Addigy and Microsoft Endpoint (Intune): -# "/var/db/.Installation1stProgress" +# "/var/db/.Progress1stDone" # # Display a Dialog with a list of applications and indicate when they’ve been installed # Useful when apps are deployed at random, perhaps without local logging. @@ -114,10 +114,10 @@ esac # Mark: Constants and logging export PATH=/usr/bin:/bin:/usr/sbin:/sbin -log_message="$instance: Installation 1st Progress with Dialog, v$scriptVersion" -label="D1st-v$scriptVersion" +log_message="$instance: Progress 1st with Dialog, v$scriptVersion" +label="P1st-v$scriptVersion" -log_location="/private/var/log/Installation1stProgress.log" +log_location="/private/var/log/Progress1st.log" function printlog(){ timestamp=$(date +%F\ %T) if [[ "$(whoami)" == "root" ]]; then @@ -137,7 +137,7 @@ fi # Location of dialog and dialog command file dialogApp="/usr/local/bin/dialog" dialog_command_file="/var/tmp/dialog.log" -counterFile="/var/tmp/Installation1stProgress.plist" +counterFile="/var/tmp/Progress1st.plist" # Counters progress_index=0 From 44cee15ac2b651a12df5aabcf2251fbd35279600 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Wed, 21 Sep 2022 09:05:05 +0200 Subject: [PATCH 183/209] Dialog cmd file: `/var/tmp/dialog.log` --- MDM/Jamf/ReadMe.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/MDM/Jamf/ReadMe.md b/MDM/Jamf/ReadMe.md index db3d35d..e9cf769 100644 --- a/MDM/Jamf/ReadMe.md +++ b/MDM/Jamf/ReadMe.md @@ -20,7 +20,7 @@ The different scripts require a set of parameters. We will use the `googlechrome `00_Prepare_SwiftDialog.sh` -Parameter 4: `/var/tmp/dialog` (Path to the swiftDialog command file) +Parameter 4: `/var/tmp/dialog.log` (Path to the swiftDialog command file) Parameter 5: `Installing Google Chrome...` (text shown in the swiftDialog window above the progress bar) @@ -30,7 +30,7 @@ Parameter 6: Path to or URL for an icon in swiftDialog. This can be a path on th Parameter 4: `googlechromepkg` (the label to install) -Parameter 5: `DIALOG_CMD_FILE=\var\log\dialog.log` (the swiftDialog command file, this has to be the same value as parameter 4 in the previous script) +Parameter 5: `DIALOG_CMD_FILE=/var/tmp/dialog.log` (the swiftDialog command file, this has to be the same value as parameter 4 in the previous script) Parameter 6: `NOTIFY=silent` (disable Installomator notifications, optional) @@ -38,7 +38,7 @@ You can add more configurations to the Installomator script when needed. `zz_Quit_SwiftDialog` -Parameter 4: `/var/log/dialog.log` (the swiftDialog command file, this has to be the same value as parameter 4 in the first script) +Parameter 4: `/var/tmp/dialog.log` (the swiftDialog command file, this has to be the same value as parameter 4 in the first script) Then setup the remainder of the Jamf Policy to your needs. This works best with Self Service policies. From 24c550477a13f8aeb734674d03f1e633973fe04c Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Wed, 21 Sep 2022 11:34:01 +0200 Subject: [PATCH 184/209] GitHub download fix --- .../App normal SS.sh | 2 +- MDM/Installomator 1st Auto-install DEPNotify.sh | 6 ++++-- MDM/Installomator 1st Auto-install.sh | 6 ++++-- MDM/Installomator 1st SS DEPNotify.sh | 6 ++++-- MDM/Installomator 1st SS.sh | 6 ++++-- MDM/Jamf/00_PrepareInstall_SwiftDialog.sh | 3 ++- MDM/Progress 1st swiftDialog.sh | 6 ++++-- MDM/install Installomator direct.sh | 6 ++++-- MDM/install swiftDialog direct.sh | 6 ++++-- 9 files changed, 31 insertions(+), 16 deletions(-) diff --git a/MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh b/MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh index 97e4398..9420b4d 100644 --- a/MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh @@ -8,7 +8,7 @@ item="cyberduck" # enter the software to install # Examples: microsoftedge, brave, googlechromepkg, firefoxpkg # Dialog icon -icon="https://mosylebusinessweb.blob.core.windows.net/envoit-public/customcommand_icon-envoit_666767b6276ff1f31b1ff9719639cf36f761f29f63f2ff17fc.png" +icon="" # icon should be a file system path or an URL to an online PNG, so beginning with either “/” or “http”. # In Mosyle an URL can be found by copy picture address from a Custom Command icon. diff --git a/MDM/Installomator 1st Auto-install DEPNotify.sh b/MDM/Installomator 1st Auto-install DEPNotify.sh index 18db8d8..3a4922a 100755 --- a/MDM/Installomator 1st Auto-install DEPNotify.sh +++ b/MDM/Installomator 1st Auto-install DEPNotify.sh @@ -54,7 +54,8 @@ errorMessage="A problem was encountered setting up this Mac. Please contact IT." # https://github.com/Installomator/Installomator # ###################################################################### -scriptVersion="9.4" +scriptVersion="9.5" +# v. 9.5 : 2022-09-21 : change of GitHub download # v. 9.4 : 2022-09-14 : downloadURL can fall back on GitHub API # v. 9.3 : 2022-08-29 : installomatorOptions in quotes and ignore blocking processes. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. ws1 support. # v. 9.2.2 : 2022-06-17 : installomatorOptions introduced. Check 1.1.1.1 for internet connection. @@ -206,7 +207,8 @@ gitusername="Installomator" gitreponame="Installomator" #printlog "$gitusername $gitreponame" filetype="pkg" -downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +#downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then printlog "Trying GitHub API for download URL." downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") diff --git a/MDM/Installomator 1st Auto-install.sh b/MDM/Installomator 1st Auto-install.sh index 46c2188..cf37d9c 100755 --- a/MDM/Installomator 1st Auto-install.sh +++ b/MDM/Installomator 1st Auto-install.sh @@ -51,7 +51,8 @@ errorMessage="A problem was encountered setting up this Mac. Please contact IT." # https://github.com/Installomator/Installomator # ###################################################################### -scriptVersion="9.4" +scriptVersion="9.5" +# v. 9.5 : 2022-09-21 : change of GitHub download # v. 9.4 : 2022-09-14 : Making error message optional. downloadURL can fall back on GitHub API. # v. 9.3 : 2022-08-29 : installomatorOptions in quotes and ignore blocking processes. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. ws1 support. # v. 9.2.2 : 2022-06-17 : installomatorOptions introduced. Check 1.1.1.1 for internet connection. @@ -176,7 +177,8 @@ gitusername="Installomator" gitreponame="Installomator" #printlog "$gitusername $gitreponame" filetype="pkg" -downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +#downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then printlog "Trying GitHub API for download URL." downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") diff --git a/MDM/Installomator 1st SS DEPNotify.sh b/MDM/Installomator 1st SS DEPNotify.sh index eec89df..c2450c0 100755 --- a/MDM/Installomator 1st SS DEPNotify.sh +++ b/MDM/Installomator 1st SS DEPNotify.sh @@ -54,7 +54,8 @@ errorMessage="A problem was encountered setting up this Mac. Please contact IT." # https://github.com/Installomator/Installomator # ###################################################################### -scriptVersion="9.4" +scriptVersion="9.5" +# v. 9.5 : 2022-09-21 : change of GitHub download # v. 9.4 : 2022-09-14 : downloadURL can fall back on GitHub API # v. 9.3 : 2022-08-29 : installomatorOptions in quotes and ignore blocking processes. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. ws1 support. # v. 9.2.2 : 2022-06-17 : installomatorOptions introduced. Check 1.1.1.1 for internet connection. @@ -206,7 +207,8 @@ gitusername="Installomator" gitreponame="Installomator" #printlog "$gitusername $gitreponame" filetype="pkg" -downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +#downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then printlog "Trying GitHub API for download URL." downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") diff --git a/MDM/Installomator 1st SS.sh b/MDM/Installomator 1st SS.sh index 9654f76..9a55da0 100755 --- a/MDM/Installomator 1st SS.sh +++ b/MDM/Installomator 1st SS.sh @@ -51,7 +51,8 @@ errorMessage="A problem was encountered setting up this Mac. Please contact IT." # https://github.com/Installomator/Installomator # ###################################################################### -scriptVersion="9.4" +scriptVersion="9.5" +# v. 9.5 : 2022-09-21 : change of GitHub download # v. 9.4 : 2022-09-14 : Making error message optional. downloadURL can fall back on GitHub API. # v. 9.3 : 2022-08-29 : installomatorOptions in quotes and ignore blocking processes. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. ws1 support. # v. 9.2.2 : 2022-06-17 : installomatorOptions introduced. Check 1.1.1.1 for internet connection. @@ -176,7 +177,8 @@ gitusername="Installomator" gitreponame="Installomator" #printlog "$gitusername $gitreponame" filetype="pkg" -downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +#downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then printlog "Trying GitHub API for download URL." downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") diff --git a/MDM/Jamf/00_PrepareInstall_SwiftDialog.sh b/MDM/Jamf/00_PrepareInstall_SwiftDialog.sh index 24ad8f5..84a1212 100755 --- a/MDM/Jamf/00_PrepareInstall_SwiftDialog.sh +++ b/MDM/Jamf/00_PrepareInstall_SwiftDialog.sh @@ -54,7 +54,8 @@ gitusername="bartreardon" gitreponame="swiftDialog" #echo "$gitusername $gitreponame" filetype="pkg" -downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +#downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then echo "Trying GitHub API for download URL." downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") diff --git a/MDM/Progress 1st swiftDialog.sh b/MDM/Progress 1st swiftDialog.sh index acfe9a1..f6efde8 100755 --- a/MDM/Progress 1st swiftDialog.sh +++ b/MDM/Progress 1st swiftDialog.sh @@ -86,7 +86,8 @@ errorMessage="A problem was encountered setting up this Mac. Please contact IT." # Or fonts, like: # "Apple SF Pro Font,/Library/Fonts/SF-Pro.ttf" ###################################################################### -scriptVersion="9.4" +scriptVersion="9.5" +# v. 9.5 : 2022-09-21 : change of GitHub download # v. 9.4 : 2022-09-14 : downloadURL can fall back on GitHub API # v. 9.3 : 2022-08-29 : Logging changed for current version. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. # v. 9.2.2 : 2022-06-17 : Improved Dialog installation. Check 1.1.1.1 for internet connection. @@ -229,7 +230,8 @@ gitusername="bartreardon" gitreponame="swiftDialog" #printlog "$gitusername $gitreponame" filetype="pkg" -downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +#downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then printlog "Trying GitHub API for download URL." downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") diff --git a/MDM/install Installomator direct.sh b/MDM/install Installomator direct.sh index ee7fbcf..352275e 100755 --- a/MDM/install Installomator direct.sh +++ b/MDM/install Installomator direct.sh @@ -16,7 +16,8 @@ # https://github.com/Installomator/Installomator # ###################################################################### -scriptVersion="9.4" +scriptVersion="9.5" +# v. 9.5 : 2022-09-21 : change of GitHub download # v. 9.4 : 2022-09-14 : downloadURL can fall back on GitHub API # v. 9.3 : 2022-08-29 : Logging changed for current version. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. # v. 9.2.2 : 2022-06-17 : Check 1.1.1.1 for internet connection. @@ -64,7 +65,8 @@ gitusername="Installomator" gitreponame="Installomator" #printlog "$gitusername $gitreponame" filetype="pkg" -downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +#downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then printlog "Trying GitHub API for download URL." downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") diff --git a/MDM/install swiftDialog direct.sh b/MDM/install swiftDialog direct.sh index 1b16e3c..c29d299 100755 --- a/MDM/install swiftDialog direct.sh +++ b/MDM/install swiftDialog direct.sh @@ -16,7 +16,8 @@ # https://github.com/Installomator/Installomator # ###################################################################### -scriptVersion="9.4" +scriptVersion="9.5" +# v. 9.5 : 2022-09-21 : change of GitHub download # v. 9.4 : 2022-09-14 : downloadURL can fall back on GitHub API. # v. 9.3 : 2022-08-29 : Logging changed for current version. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. # v. 9.2.2 : 2022-06-17 : Check 1.1.1.1 for internet connection. @@ -64,7 +65,8 @@ gitusername="bartreardon" gitreponame="swiftDialog" #printlog "$gitusername $gitreponame" filetype="pkg" -downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +#downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" +downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then printlog "Trying GitHub API for download URL." downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") From 91af2427fa3535db2eb7ad5453eb3f3e533b54c5 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Wed, 21 Sep 2022 11:58:56 +0200 Subject: [PATCH 185/209] Fix for #698 GitHub download links changed, fixed #698. --- fragments/functions.sh | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index 85a7902..74045da 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -162,13 +162,15 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name fi if [ -n "$archiveName" ]; then - downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1) + #downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1) + downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1)" if [[ "$(echo $downloadURL | grep -ioE "https.*$archiveName")" == "" ]]; then printlog "Trying GitHub API for download URL." downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") fi else - downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1) + #downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1) + downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then printlog "Trying GitHub API for download URL." downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") From 0a4c8cfe6eab8eded00b5b30069e11bb2bc96c32 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Wed, 21 Sep 2022 17:36:03 +0200 Subject: [PATCH 186/209] Cleaning --- .../App normal SS.sh | 2 +- MDM/App-install/App normal Auto-install.sh | 12 ++++++------ MDM/App-install/App normal SS.sh | 3 ++- MDM/Installomator 1st Auto-install.sh | 3 ++- 4 files changed, 11 insertions(+), 9 deletions(-) diff --git a/MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh b/MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh index 9420b4d..b1b1256 100644 --- a/MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh @@ -5,7 +5,7 @@ LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" item="cyberduck" # enter the software to install -# Examples: microsoftedge, brave, googlechromepkg, firefoxpkg +# Examples: adobecreativeclouddesktop, canva, cyberduck, handbrake, inkscape, textmate, vlc # Dialog icon icon="" diff --git a/MDM/App-install/App normal Auto-install.sh b/MDM/App-install/App normal Auto-install.sh index a43cdff..75bd4f0 100644 --- a/MDM/App-install/App normal Auto-install.sh +++ b/MDM/App-install/App normal Auto-install.sh @@ -4,7 +4,7 @@ LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" -what="" # enter the software to install +item="" # enter the software to install # Examples: adobecreativeclouddesktop, textmate, vlc installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user" # Separated by space @@ -28,7 +28,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user" # Separated by space # INSTALL=force ###################################################################### # To be used as a script sent out from a MDM. -# Fill the variable "what" above with a label. +# Fill the variable "item" above with a label. # Script will run this label through Installomator. ###################################################################### # v. 9.2.1 : Better logging handling and installomatorOptions fix. @@ -38,7 +38,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user" # Separated by space # PATH declaration export PATH=/usr/bin:/bin:/usr/sbin:/sbin -echo "$(date +%F\ %T) [LOG-BEGIN] $what" +echo "$(date +%F\ %T) [LOG-BEGIN] $item" # Verify that Installomator has been installed destFile="/usr/local/Installomator/Installomator.sh" @@ -59,16 +59,16 @@ caffexit () { } # Install software using Installomator -cmdOutput="$(${destFile} ${what} LOGO=$LOGO ${installomatorOptions} || true)" +cmdOutput="$(${destFile} ${item} LOGO=$LOGO ${installomatorOptions} || true)" # Check result exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" if [[ ${exitStatus} -eq 0 ]] ; then - echo "${what} succesfully installed." + echo "${item} succesfully installed." warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" echo "$warnOutput" else - echo "ERROR installing ${what}. Exit code ${exitStatus}" + echo "ERROR installing ${item}. Exit code ${exitStatus}" echo "$cmdOutput" #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" #echo "$errorOutput" diff --git a/MDM/App-install/App normal SS.sh b/MDM/App-install/App normal SS.sh index 5481991..146e3f1 100644 --- a/MDM/App-install/App normal SS.sh +++ b/MDM/App-install/App normal SS.sh @@ -5,7 +5,8 @@ LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" what="" # enter the software to install -# Examples: adobecreativeclouddesktop, textmate, vlc +# Examples: adobecreativeclouddesktop, canva, cyberduck, handbrake, inkscape, textmate, vlc + installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=all" # Separated by space diff --git a/MDM/Installomator 1st Auto-install.sh b/MDM/Installomator 1st Auto-install.sh index cf37d9c..5bb2d70 100755 --- a/MDM/Installomator 1st Auto-install.sh +++ b/MDM/Installomator 1st Auto-install.sh @@ -17,7 +17,8 @@ errorMessage="A problem was encountered setting up this Mac. Please contact IT." ###################################################################### # Installomator 1st # -# Installation using Installomator (use separate Installation1stProgress script to show progress) +# Installation using Installomator +# (use separate Progress 1st script to show progress) # No customization below… ###################################################################### # This script can be used to install software using Installomator. From 515087f7e91607d709f4c4f55979a8684eb227fe Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Fri, 23 Sep 2022 14:48:09 +0200 Subject: [PATCH 187/209] More minor tweaks --- .../App browser-security SS.sh | 2 +- MDM/Progress 1st swiftDialog.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh b/MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh index 7573f1f..f04ddf6 100755 --- a/MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh @@ -8,7 +8,7 @@ item="firefoxpkg" # enter the software to install # Examples: microsoftedge, brave, googlechromepkg, firefoxpkg # Dialog icon -icon="https://mosylebusinessweb.blob.core.windows.net/envoit-public/customcommand_icon-envoit_3e37cc23e3fd8d29b1fbe85bc3b3923b323627dc83153cf673.png" +icon="" # icon should be a file system path or an URL to an online PNG. # In Mosyle an URL can be found by copy picture address from a Custom Command icon. diff --git a/MDM/Progress 1st swiftDialog.sh b/MDM/Progress 1st swiftDialog.sh index f6efde8..2cc4792 100755 --- a/MDM/Progress 1st swiftDialog.sh +++ b/MDM/Progress 1st swiftDialog.sh @@ -118,7 +118,7 @@ export PATH=/usr/bin:/bin:/usr/sbin:/sbin log_message="$instance: Progress 1st with Dialog, v$scriptVersion" label="P1st-v$scriptVersion" -log_location="/private/var/log/Progress1st.log" +log_location="/private/var/log/Installomator.log" function printlog(){ timestamp=$(date +%F\ %T) if [[ "$(whoami)" == "root" ]]; then From d00ddbc891acf61191205c0d6bb0d138999e36c0 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Fri, 23 Sep 2022 16:27:24 +0200 Subject: [PATCH 188/209] Create README.md --- MDM/README.md | 74 +++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 74 insertions(+) create mode 100644 MDM/README.md diff --git a/MDM/README.md b/MDM/README.md new file mode 100644 index 0000000..80f5d09 --- /dev/null +++ b/MDM/README.md @@ -0,0 +1,74 @@ +# MDM scripts + +This is a long list of various scripts for certain use in MDM solutions that cannot call a script internally with parameters, like Jamf Pro can do it. + +So for Mosyle, Addigy, and Microsoft Endpoint Manager (Intune), these are know to be good. If these works in other MDMs, let us know. + +Especially for Addigy, and maybe also for other MDMs, `condition`-scripts has been added if software installation will run on certain conditions. Also `prevention`-scripts has been added, if you manually need to eliminate the runnning of a script, this can be needed if you want to use the enrollment script, but don’t want it to run on the currently managed Macs Then you should sent out the `prevention`-script to make sure the file it creates is present on the Macs so the ordinary script will not do anything (it will detect this file and stop if found). + +### Shortenings + +- SS — Self Service — scripts designed for use through a Self Service catalog +- VFA — valuesfromarguments — a custom label call to Installomator + +# To be installed on all the Macs + +In order for our MDM scripts to work, we need Installomator locally installed using the pkg we provide in our release. + +So I suggest to install these on enrollment. + +To utilize swiftDialog, we also need that installed. + +If you need dockutil, that should be maintained as well, but if missing the MDM scripts will install it. + +## Maintenance of Installomator, swiftDialog, and dockutil + +I suggest to check weekly, and maybe at each boot, it newer versions have been released of these tools. + +The verious MDMs have various ways of running scheduled, but it is possible. + +### Scripts to use for installing these components + +These do not require anything to be installed on macOS: + +- `install Installomator direct.sh` — can be run at enrollment and as maintenance at any time to install __Installomator__. + +- `install swiftDialog direct.sh` — can be used at enrollment and as maintenance at any time to install __swiftDialog__. + +Once Installomator has been installed, __dockutil__ can be installed using Installomator (as a service), using this script: + +- `App-install/App service Auto-install.sh` — This script uses pre-installed installomator to install dockutil. + +# Enrollment scripts + +For enrollment purposes, som 1st-scripts has been created. One is not showing anything to the end-user while running and another is using __DEPNotify__ to show progress (so hopefully the user will wait for the installation to finish): + +- `Installomator 1st Auto-install DEPNotify.sh` — will install __DEPNotify__ first, start that up, and change progress on the installation bar at each installed label. Very good for Addigy. + +- `Installomator 1st Auto-install.sh` — runnning silently installing Installomator labels in the given order. Can be used in combination with the Progress-script. + +- `Progress 1st swiftDialog.sh` — It will install __swiftDialog__ and start that up with a list of software it will look for. It will look for an installed file/folder in the file system for each item. This is great for Mosyle that can install software using various methods, and then this script can show when it has been installed. + +There are also Self Service scripts for this, if it’s somehow needed to have users running the installation manually. + +# App-installation + +Two different kinds of App-installation scripts have been made. Some that is very similar to the old provided scripts that are only using __Installomator__ for notifications (if any). And others that can use __swiftDialog__ for installation progress, and can also add the app to the Dock using __dockutil__. + +## “App-install”-folder + +- App browser-security Auto-install.sh +- App browser-security SS.sh +- App normal Auto-install.sh +- App normal SS.sh +- App service Auto-install.sh +- App VFA.sh + +## “App-install SS with swiftDialog and dockutil”-folder + +- App browser-security SS.sh +- App normal SS multi-app.sh +- App normal SS.sh +- App service SS.sh +- App VFA SS github.sh +- App VFA SS.sh From 92d7bec606c9b015ac8d33b384f21641bdc477c1 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Mon, 26 Sep 2022 11:50:17 +0200 Subject: [PATCH 189/209] Update README.md --- MDM/README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/MDM/README.md b/MDM/README.md index 80f5d09..3ded69b 100644 --- a/MDM/README.md +++ b/MDM/README.md @@ -64,6 +64,10 @@ Two different kinds of App-installation scripts have been made. Some that is ver - App service Auto-install.sh - App VFA.sh +Here you can use scripts for Self Service (SS) or for Auto-install. THere will be a difference in how many notifications will be used and maybe handling of blocking processes. + +What is also differentiated is what kind of app it is. Is it of the kind of browser, that can often have critical security fixes, then we don’t want the user to postpone the installation, wheras a normal app can wait. A service app do not have to ask before installing, and should be able to install regardsliess if the app is currently running. + ## “App-install SS with swiftDialog and dockutil”-folder - App browser-security SS.sh @@ -72,3 +76,7 @@ Two different kinds of App-installation scripts have been made. Some that is ver - App service SS.sh - App VFA SS github.sh - App VFA SS.sh + +All of the notes for the above scripts are the same for these. + +But these scripts utilize __swiftDialog__ to show a more live progress for the installation, and they also have a setting to use __dockutil__ to add the software to the Dock of the user. From 82b429a4bef2d7ef5b6939877ba1e616af3faeb2 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Mon, 26 Sep 2022 14:43:43 +0200 Subject: [PATCH 190/209] R project for Apple Silicon and intel --- fragments/labels/r.sh | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/fragments/labels/r.sh b/fragments/labels/r.sh index 1c98852..fd9e6b4 100644 --- a/fragments/labels/r.sh +++ b/fragments/labels/r.sh @@ -1,7 +1,12 @@ r) name="R" type="pkg" - downloadURL="https://cloud.r-project.org/bin/macosx/$( curl -fsL https://cloud.r-project.org/bin/macosx/ | grep -m 1 -o '<a href=".*pkg">' | sed -E 's/.+"(.+)".+/\1/g' )" - appNewVersion=$(echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)\..*/\1/g') + if [[ $(arch) == "arm64" ]]; then + downloadURL="https://cloud.r-project.org/bin/macosx/$( curl -fsL https://cloud.r-project.org/bin/macosx/ | grep -m 1 -o '<a href=".*arm64\.pkg">' | sed -E 's/.+"(.+)".+/\1/g' )" + appNewVersion=$(echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)-.*\..*/\1/g') + elif [[ $(arch) == "i386" ]]; then + downloadURL="https://cloud.r-project.org/bin/macosx/$( curl -fsL https://cloud.r-project.org/bin/macosx/ | grep -o '<a href=".*pkg">' | grep -m 1 -v "arm64" | sed -E 's/.+"(.+)".+/\1/g' )" + appNewVersion=$(echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)\..*/\1/g') + fi expectedTeamID="VZLD955F6P" ;; From 1c45e091348cc86079f4ed7e13eca471875a1d90 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Mon, 26 Sep 2022 15:11:51 +0200 Subject: [PATCH 191/209] RStudio with a matching `appNewVersion` --- fragments/labels/rstudio.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fragments/labels/rstudio.sh b/fragments/labels/rstudio.sh index 22f735e..6ff3755 100644 --- a/fragments/labels/rstudio.sh +++ b/fragments/labels/rstudio.sh @@ -2,6 +2,6 @@ rstudio) name="RStudio" type="dmg" downloadURL=$(curl -s -L "https://rstudio.com/products/rstudio/download/" | grep -m 1 -Eio 'href="https://download1.rstudio.org/desktop/macos/RStudio-(.*).dmg"' | cut -c7- | sed -e 's/"$//') - appNewVersion=$( echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*-([0-9.]*)\..*/\1/g' ) + appNewVersion=$( echo "${downloadURL}" | sed -E 's/.*\/[a-zA-Z]*-([0-9.-]*)\..*/\1/g' | sed 's/-/+/' ) expectedTeamID="FYF2F5GFX4" ;; From a68ac0d065f8cb69b5bd272bd55cdbb7de5f8bea Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Mon, 26 Sep 2022 15:45:51 +0200 Subject: [PATCH 192/209] Missing notification and other fields for Installomator call --- .../App VFA SS github.sh | 8 ++++++-- .../App VFA SS.sh | 8 ++++++-- 2 files changed, 12 insertions(+), 4 deletions(-) diff --git a/MDM/App-install SS with swiftDialog and dockutil/App VFA SS github.sh b/MDM/App-install SS with swiftDialog and dockutil/App VFA SS github.sh index 8d9365d..a235945 100755 --- a/MDM/App-install SS with swiftDialog and dockutil/App VFA SS github.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App VFA SS github.sh @@ -3,7 +3,7 @@ # Installation using Installomator with Dialog showing progress (and posibility of adding to the Dock) # Installation of software using `valuesfromarguments` to install a custom software using Installomator through GitHub -LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" #item="gfxcardstatus" # enter the software to install (if it has a label in future version of Installomator) @@ -63,8 +63,10 @@ versionFromGit() { # Variables for label name="gfxCardStatus" type="zip" +packageID="" downloadURL="$(downloadURLFromGit codykrieger gfxCardStatus)" appNewVersion="$(versionFromGit codykrieger gfxCardStatus)" +versionKey="" expectedTeamID="LF22FTQC25" # Dialog icon @@ -294,10 +296,12 @@ fi cmdOutput="$(${destFile} valuesfromarguments LOGO=$LOGO \ name=${name} \ type=${type} \ + packageID=${packageID} \ downloadURL=\"$downloadURL\" \ appNewVersion=${appNewVersion} \ + versionKey=${versionKey} \ expectedTeamID=${expectedTeamID} \ - ${installomatorOptions} || true)" + ${installomatorOptions} ${installomatorNotify} || true)" checkCmdOutput $cmdOutput diff --git a/MDM/App-install SS with swiftDialog and dockutil/App VFA SS.sh b/MDM/App-install SS with swiftDialog and dockutil/App VFA SS.sh index 31cf097..e6dc82b 100755 --- a/MDM/App-install SS with swiftDialog and dockutil/App VFA SS.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App VFA SS.sh @@ -3,15 +3,17 @@ # Installation using Installomator with Dialog showing progress (and posibility of adding to the Dock) # Installation of software using `valuesfromarguments` to install a custom software using Installomator -LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" #item="" # enter the software to install (if it has a label in future version of Installomator) # Variables for label name="ClickShare" type="appInDmgInZip" +packageID="" downloadURL="https://www.barco.com$( curl -fs "https://www.barco.com/en/clickshare/app" | grep -A6 -i "macos" | grep -i "FileNumber" | tr '"' "\n" | grep -i "FileNumber" )" appNewVersion="$(eval "$( echo $downloadURL | sed -E 's/.*(MajorVersion.*BuildVersion=[0-9]*).*/\1/' | sed 's/&//g' )" ; ((MajorVersion++)) ; ((MajorVersion--)); ((MinorVersion++)) ; ((MinorVersion--)); ((PatchVersion++)) ; ((PatchVersion--)); ((BuildVersion++)) ; ((BuildVersion--)); echo "${MajorVersion}.${MinorVersion}.${PatchVersion}-b${BuildVersion}")" +versionKey="" expectedTeamID="P6CDJZR997" # Dialog icon @@ -242,10 +244,12 @@ fi cmdOutput="$(${destFile} valuesfromarguments LOGO=$LOGO \ name=${name} \ type=${type} \ + packageID=${packageID} \ downloadURL=\"$downloadURL\" \ appNewVersion=${appNewVersion} \ + versionKey=${versionKey} \ expectedTeamID=${expectedTeamID} \ - ${installomatorOptions} || true)" + ${installomatorOptions} ${installomatorNotify} || true)" checkCmdOutput $cmdOutput From ddc7a67e38d1fd7820c0884bfb231bdb462666c2 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Mon, 26 Sep 2022 16:13:35 +0200 Subject: [PATCH 193/209] Corrections and fixes --- .../App VFA SS.sh | 3 +-- MDM/App-install/App VFA.sh | 7 ++++++- MDM/App-install/App service Auto-install.sh | 2 +- 3 files changed, 8 insertions(+), 4 deletions(-) diff --git a/MDM/App-install SS with swiftDialog and dockutil/App VFA SS.sh b/MDM/App-install SS with swiftDialog and dockutil/App VFA SS.sh index e6dc82b..2089f9b 100755 --- a/MDM/App-install SS with swiftDialog and dockutil/App VFA SS.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App VFA SS.sh @@ -103,8 +103,7 @@ uid=$(id -u "$currentUser") userHome="$(dscl . -read /users/${currentUser} NFSHomeDirectory | awk '{print $2}')" # Verify that Installomator has been installed -#destFile="/usr/local/Installomator/Installomator.sh" -destFile="/usr/local/Installomator/Installomator10.sh" +destFile="/usr/local/Installomator/Installomator.sh" if [ ! -e "${destFile}" ]; then echo "Installomator not found here:" echo "${destFile}" diff --git a/MDM/App-install/App VFA.sh b/MDM/App-install/App VFA.sh index 1772419..beca08c 100755 --- a/MDM/App-install/App VFA.sh +++ b/MDM/App-install/App VFA.sh @@ -10,8 +10,10 @@ LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" # Variables for label name="ClickShare" type="appInDmgInZip" +packageID="" downloadURL="https://www.barco.com$( curl -fs "https://www.barco.com/en/clickshare/app" | grep -A6 -i "macos" | grep -i "FileNumber" | tr '"' "\n" | grep -i "FileNumber" )" appNewVersion="$(eval "$( echo $downloadURL | sed -E 's/.*(MajorVersion.*BuildVersion=[0-9]*).*/\1/' | sed 's/&//g' )" ; ((MajorVersion++)) ; ((MajorVersion--)); ((MinorVersion++)) ; ((MinorVersion--)); ((PatchVersion++)) ; ((PatchVersion--)); ((BuildVersion++)) ; ((BuildVersion--)); echo "${MajorVersion}.${MinorVersion}.${PatchVersion}-b${BuildVersion}")" +versionKey="" expectedTeamID="P6CDJZR997" installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user LOGGING=INFO NOTIFY=all" # Separated by space @@ -67,11 +69,14 @@ caffexit () { # Install software using Installomator with valuesfromarguments cmdOutput="$(${destFile} valuesfromarguments LOGO=$LOGO \ - name=${name} \ + name=\"${name}\" \ type=${type} \ + packageID=${packageID} \ downloadURL=\"$downloadURL\" \ appNewVersion=${appNewVersion} \ + versionKey=${versionKey} \ expectedTeamID=${expectedTeamID} \ + blockingProcesses=\"NONE\" \ ${installomatorOptions} || true)" diff --git a/MDM/App-install/App service Auto-install.sh b/MDM/App-install/App service Auto-install.sh index 0f5b5f1..a79358d 100644 --- a/MDM/App-install/App service Auto-install.sh +++ b/MDM/App-install/App service Auto-install.sh @@ -2,7 +2,7 @@ # Installation using Installomator -LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" what="dockutil" # enter the software to install # Examples: adobecreativeclouddesktop, textmate, vlc From e3f5b2bebd7a2401f2308f797a5a5312d9cb6227 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Tue, 27 Sep 2022 08:58:52 +0200 Subject: [PATCH 194/209] Making LOGO empty --- .../App browser-security SS.sh | 4 ++-- .../App normal SS multi-app.sh | 4 ++-- .../App normal SS.sh | 4 ++-- .../App service SS.sh | 4 ++-- MDM/App-install/App VFA.sh | 2 +- MDM/App-install/App browser-security Auto-install.sh | 2 +- MDM/App-install/App browser-security SS.sh | 2 +- MDM/App-install/App normal Auto-install.sh | 2 +- MDM/App-install/App normal SS.sh | 2 +- 9 files changed, 13 insertions(+), 13 deletions(-) diff --git a/MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh b/MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh index f04ddf6..3756e7a 100755 --- a/MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh @@ -2,9 +2,9 @@ # Installation using Installomator with Dialog showing progress (and posibility of adding to the Dock) -LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" -item="firefoxpkg" # enter the software to install +item="" # enter the software to install # Examples: microsoftedge, brave, googlechromepkg, firefoxpkg # Dialog icon diff --git a/MDM/App-install SS with swiftDialog and dockutil/App normal SS multi-app.sh b/MDM/App-install SS with swiftDialog and dockutil/App normal SS multi-app.sh index 71eba78..0cc2af9 100644 --- a/MDM/App-install SS with swiftDialog and dockutil/App normal SS multi-app.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App normal SS multi-app.sh @@ -2,10 +2,10 @@ # Installation using Installomator with Dialog showing progress (and posibility of adding to the Dock) -LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" item="microsoftoffice365" # enter the software to install -# Examples: microsoftedge, brave, googlechromepkg, firefoxpkg +# Examples: microsoftofficebusinesspro, microsoftoffice365 # Dialog icon icon="" diff --git a/MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh b/MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh index b1b1256..77f7add 100644 --- a/MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App normal SS.sh @@ -2,9 +2,9 @@ # Installation using Installomator with Dialog showing progress (and posibility of adding to the Dock) -LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" -item="cyberduck" # enter the software to install +item="" # enter the software to install # Examples: adobecreativeclouddesktop, canva, cyberduck, handbrake, inkscape, textmate, vlc # Dialog icon diff --git a/MDM/App-install SS with swiftDialog and dockutil/App service SS.sh b/MDM/App-install SS with swiftDialog and dockutil/App service SS.sh index ee1daa0..f39a540 100644 --- a/MDM/App-install SS with swiftDialog and dockutil/App service SS.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App service SS.sh @@ -2,9 +2,9 @@ # Installation using Installomator -LOGO="addigy" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" -item="xink" # enter the software to install +item="" # enter the software to install # Examples: desktoppr, dockutil, supportapp, applenyfonts, applesfpro, applesfmono, applesfcompact, nomad, nudge, shield, xink # Dialog icon diff --git a/MDM/App-install/App VFA.sh b/MDM/App-install/App VFA.sh index beca08c..3162a67 100755 --- a/MDM/App-install/App VFA.sh +++ b/MDM/App-install/App VFA.sh @@ -3,7 +3,7 @@ # Installation using Installomator # Installation of software using valuesfromarguments to install a custom software using Installomator -LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" #item="" # enter the software to install (if it has a label in future version of Installomator) diff --git a/MDM/App-install/App browser-security Auto-install.sh b/MDM/App-install/App browser-security Auto-install.sh index 45a52af..41a1fd6 100644 --- a/MDM/App-install/App browser-security Auto-install.sh +++ b/MDM/App-install/App browser-security Auto-install.sh @@ -2,7 +2,7 @@ # Installation using Installomator -LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" what="firefoxpkg" # enter the software to install # Examples: microsoftedge, brave, googlechromepkg, firefoxpkg diff --git a/MDM/App-install/App browser-security SS.sh b/MDM/App-install/App browser-security SS.sh index 75d55f2..a75d57d 100644 --- a/MDM/App-install/App browser-security SS.sh +++ b/MDM/App-install/App browser-security SS.sh @@ -2,7 +2,7 @@ # Installation using Installomator -LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" what="" # enter the software to install # Examples: microsoftedge, brave, googlechromepkg, firefoxpkg diff --git a/MDM/App-install/App normal Auto-install.sh b/MDM/App-install/App normal Auto-install.sh index 75bd4f0..986b054 100644 --- a/MDM/App-install/App normal Auto-install.sh +++ b/MDM/App-install/App normal Auto-install.sh @@ -2,7 +2,7 @@ # Installation using Installomator -LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" item="" # enter the software to install # Examples: adobecreativeclouddesktop, textmate, vlc diff --git a/MDM/App-install/App normal SS.sh b/MDM/App-install/App normal SS.sh index 146e3f1..9aa6209 100644 --- a/MDM/App-install/App normal SS.sh +++ b/MDM/App-install/App normal SS.sh @@ -2,7 +2,7 @@ # Installation using Installomator -LOGO="mosyleb" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" what="" # enter the software to install # Examples: adobecreativeclouddesktop, canva, cyberduck, handbrake, inkscape, textmate, vlc From fdb717019fb5fdb875fa32766dd70917b9b66fdf Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Tue, 27 Sep 2022 10:14:56 +0200 Subject: [PATCH 195/209] Examples --- .../App service SS.sh | 2 +- MDM/App-install/App service Auto-install.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/MDM/App-install SS with swiftDialog and dockutil/App service SS.sh b/MDM/App-install SS with swiftDialog and dockutil/App service SS.sh index f39a540..e441c91 100644 --- a/MDM/App-install SS with swiftDialog and dockutil/App service SS.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App service SS.sh @@ -5,7 +5,7 @@ LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" item="" # enter the software to install -# Examples: desktoppr, dockutil, supportapp, applenyfonts, applesfpro, applesfmono, applesfcompact, nomad, nudge, shield, xink +# Examples: applenyfonts, applesfarabic, applesfcompact, applesfmono, applesfpro, applesfsymbols, dialog, dockutil, knockknock, lulu, nomad, nudge, shield, supportapp, wordservice, xcreds, xink # Dialog icon icon="" diff --git a/MDM/App-install/App service Auto-install.sh b/MDM/App-install/App service Auto-install.sh index a79358d..0db91f3 100644 --- a/MDM/App-install/App service Auto-install.sh +++ b/MDM/App-install/App service Auto-install.sh @@ -5,7 +5,7 @@ LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" what="dockutil" # enter the software to install -# Examples: adobecreativeclouddesktop, textmate, vlc +# Examples: applenyfonts, applesfarabic, applesfcompact, applesfmono, applesfpro, applesfsymbols, dialog, dockutil, knockknock, lulu, nomad, nudge, shield, supportapp, wordservice, xcreds, xink installomatorOptions="BLOCKING_PROCESS_ACTION=ignore NOTIFY=silent" # Separated by space From e7ebeecc5bab084fd6c96fe37badaebf7badbb4e Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Tue, 27 Sep 2022 10:49:58 +0200 Subject: [PATCH 196/209] Variables cleaning --- MDM/Installomator 1st Auto-install DEPNotify.sh | 10 +++++----- MDM/Installomator 1st Auto-install.sh | 10 +++++----- MDM/Installomator 1st SS DEPNotify.sh | 10 +++++----- MDM/Installomator 1st SS.sh | 10 +++++----- 4 files changed, 20 insertions(+), 20 deletions(-) diff --git a/MDM/Installomator 1st Auto-install DEPNotify.sh b/MDM/Installomator 1st Auto-install DEPNotify.sh index 3a4922a..7baa737 100755 --- a/MDM/Installomator 1st Auto-install DEPNotify.sh +++ b/MDM/Installomator 1st Auto-install DEPNotify.sh @@ -1,11 +1,11 @@ #!/bin/sh # Installomator 1st installation with DEPNotify window (auto installation at enrollment) -instance="Instance" # Name of used instance +instance="" # Name of used instance -LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" -what=(dialog dockutil microsoftautoupdate supportapp applenyfonts applesfpro applesfmono applesfcompact xink zohoworkdrivetruesync textmate 1password7 wwdc theunarchiver keka microsoftedge microsoftteams microsoftonedrive microsoftoffice365) +items=(dialog dockutil microsoftautoupdate supportapp applenyfonts applesfpro applesfmono applesfcompact xink zohoworkdrivetruesync textmate 1password7 wwdc theunarchiver keka microsoftedge microsoftteams microsoftonedrive microsoftoffice365) # Remember: dialog dockutil installomatorOptions="NOTIFY=silent BLOCKING_PROCESS_ACTION=ignore INSTALL=force IGNORE_APP_STORE_APPS=yes LOGGING=REQ" @@ -119,7 +119,7 @@ DEPNOTIFY_LOG="/var/tmp/depnotify.log" # Counters errorCount=0 -countLabels=${#what[@]} +countLabels=${#items[@]} printlog "Total installations: $countLabels" # Using LOGO variable to specify MDM and shown logo @@ -301,7 +301,7 @@ printlog "$countLabels labels to install" startDEPNotify -for item in "${what[@]}"; do +for item in "${items[@]}"; do # Check if DEPNotify is running and try open it if not if ! pgrep -xq "DEPNotify"; then startDEPNotify diff --git a/MDM/Installomator 1st Auto-install.sh b/MDM/Installomator 1st Auto-install.sh index 5bb2d70..6dd9353 100755 --- a/MDM/Installomator 1st Auto-install.sh +++ b/MDM/Installomator 1st Auto-install.sh @@ -1,11 +1,11 @@ #!/bin/sh # Installomator 1st installation (auto installation at enrollment) -instance="Instance" # Name of used instance +instance="" # Name of used instance -LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" -what=(dialog dockutil microsoftautoupdate supportapp xink zohoworkdrivetruesync textmate applenyfonts applesfpro applesfmono applesfcompact 1password7 wwdc theunarchiver keka microsoftedge microsoftteams microsoftonedrive microsoftoffice365) +items=(dialog dockutil microsoftautoupdate supportapp xink zohoworkdrivetruesync textmate applenyfonts applesfpro applesfmono applesfcompact 1password7 wwdc theunarchiver keka microsoftedge microsoftteams microsoftonedrive microsoftoffice365) # Remember: dialog dockutil installomatorOptions="NOTIFY=silent BLOCKING_PROCESS_ACTION=ignore INSTALL=force IGNORE_APP_STORE_APPS=yes LOGGING=REQ" @@ -111,7 +111,7 @@ caffexit () { # Counters errorCount=0 -countLabels=${#what[@]} +countLabels=${#items[@]} printlog "Total installations: $countLabels" # Using LOGO variable to specify MDM and shown logo @@ -264,7 +264,7 @@ errorLabels="" ((countLabels--)) printlog "$countLabels labels to install" -for item in "${what[@]}"; do +for item in "${items[@]}"; do printlog "$item" cmdOutput="$( ${destFile} ${item} LOGO=$LOGO ${installomatorOptions} || true )" exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" diff --git a/MDM/Installomator 1st SS DEPNotify.sh b/MDM/Installomator 1st SS DEPNotify.sh index c2450c0..b911f79 100755 --- a/MDM/Installomator 1st SS DEPNotify.sh +++ b/MDM/Installomator 1st SS DEPNotify.sh @@ -1,11 +1,11 @@ #!/bin/sh # Installomator 1st installation with DEPNotify window (for self Service deployment) -instance="Instance" # Name of used instance +instance="" # Name of used instance -LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" -what=(dialog dockutil microsoftautoupdate supportapp applenyfonts applesfpro applesfmono applesfcompact xink zohoworkdrivetruesync textmate 1password7 wwdc theunarchiver keka microsoftedge microsoftteams microsoftonedrive microsoftoffice365) +items=(dialog dockutil microsoftautoupdate supportapp applenyfonts applesfpro applesfmono applesfcompact xink zohoworkdrivetruesync textmate 1password7 wwdc theunarchiver keka microsoftedge microsoftteams microsoftonedrive microsoftoffice365) # Remember: dialog dockutil installomatorOptions="NOTIFY=all BLOCKING_PROCESS_ACTION=prompt_user" @@ -119,7 +119,7 @@ DEPNOTIFY_LOG="/var/tmp/depnotify.log" # Counters errorCount=0 -countLabels=${#what[@]} +countLabels=${#items[@]} printlog "Total installations: $countLabels" # Using LOGO variable to specify MDM and shown logo @@ -301,7 +301,7 @@ printlog "$countLabels labels to install" startDEPNotify -for item in "${what[@]}"; do +for item in "${items[@]}"; do # Check if DEPNotify is running and try open it if not if ! pgrep -xq "DEPNotify"; then startDEPNotify diff --git a/MDM/Installomator 1st SS.sh b/MDM/Installomator 1st SS.sh index 9a55da0..e017831 100755 --- a/MDM/Installomator 1st SS.sh +++ b/MDM/Installomator 1st SS.sh @@ -1,11 +1,11 @@ #!/bin/sh # Installomator 1st installation (for Self Service deployment) -instance="Instance" # Name of used instance +instance="" # Name of used instance -LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" -what=(dialog dockutil microsoftautoupdate supportapp applenyfonts applesfpro applesfmono applesfcompact xink zohoworkdrivetruesync textmate 1password7 wwdc theunarchiver keka microsoftedge microsoftteams microsoftonedrive microsoftoffice365) +items=(dialog dockutil microsoftautoupdate supportapp applenyfonts applesfpro applesfmono applesfcompact xink zohoworkdrivetruesync textmate 1password7 wwdc theunarchiver keka microsoftedge microsoftteams microsoftonedrive microsoftoffice365) # Remember: dialog dockutil installomatorOptions="NOTIFY=all BLOCKING_PROCESS_ACTION=prompt_user" @@ -110,7 +110,7 @@ caffexit () { # Counters errorCount=0 -countLabels=${#what[@]} +countLabels=${#items[@]} printlog "Total installations: $countLabels" # Using LOGO variable to specify MDM and shown logo @@ -263,7 +263,7 @@ errorLabels="" ((countLabels--)) printlog "$countLabels labels to install" -for item in "${what[@]}"; do +for item in "${items[@]}"; do printlog "$item" cmdOutput="$( ${destFile} ${item} LOGO=$LOGO ${installomatorOptions} || true )" exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" From 9faa9a17a9b82c3bdec7374d0a78b8efa7fa8ef3 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Tue, 27 Sep 2022 10:52:58 +0200 Subject: [PATCH 197/209] Variables cleaning --- MDM/Progress 1st swiftDialog.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/MDM/Progress 1st swiftDialog.sh b/MDM/Progress 1st swiftDialog.sh index 2cc4792..f279d3d 100755 --- a/MDM/Progress 1st swiftDialog.sh +++ b/MDM/Progress 1st swiftDialog.sh @@ -1,9 +1,9 @@ #!/bin/sh # Progress 1st with swiftDialog (auto installation at enrollment) -instance="Instance" # Name of used instance +instance="" # Name of used instance -LOGO="mosyleb" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" +LOGO="" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1" apps=( "swiftDialog,/usr/local/bin/dialog" From b7c8214b623061eca1e8551e2fedd1ccc872c6a5 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Tue, 27 Sep 2022 11:22:59 +0200 Subject: [PATCH 198/209] Variables cleaning --- MDM/App-install/App browser-security Auto-install.sh | 12 ++++++------ MDM/App-install/App browser-security SS.sh | 2 +- MDM/App-install/App normal SS.sh | 12 ++++++------ MDM/App-install/App service Auto-install.sh | 12 ++++++------ 4 files changed, 19 insertions(+), 19 deletions(-) diff --git a/MDM/App-install/App browser-security Auto-install.sh b/MDM/App-install/App browser-security Auto-install.sh index 41a1fd6..dc06450 100644 --- a/MDM/App-install/App browser-security Auto-install.sh +++ b/MDM/App-install/App browser-security Auto-install.sh @@ -4,7 +4,7 @@ LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" -what="firefoxpkg" # enter the software to install +item="firefoxpkg" # enter the software to install # Examples: microsoftedge, brave, googlechromepkg, firefoxpkg installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit" # Separated by space @@ -28,7 +28,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit" # Separated b # INSTALL=force ###################################################################### # To be used as a script sent out from a MDM. -# Fill the variable "what" above with a label. +# Fill the variable "item" above with a label. # Script will run this label through Installomator. ###################################################################### # v. 9.2.1 : Better logging handling and installomatorOptions fix. @@ -38,7 +38,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit" # Separated b # PATH declaration export PATH=/usr/bin:/bin:/usr/sbin:/sbin -echo "$(date +%F\ %T) [LOG-BEGIN] $what" +echo "$(date +%F\ %T) [LOG-BEGIN] $item" # Verify that Installomator has been installed destFile="/usr/local/Installomator/Installomator.sh" @@ -59,16 +59,16 @@ caffexit () { } # Install software using Installomator -cmdOutput="$(${destFile} ${what} LOGO=$LOGO ${installomatorOptions} || true)" +cmdOutput="$(${destFile} ${item} LOGO=$LOGO ${installomatorOptions} || true)" # Check result exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" if [[ ${exitStatus} -eq 0 ]] ; then - echo "${what} succesfully installed." + echo "${item} succesfully installed." warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" echo "$warnOutput" else - echo "ERROR installing ${what}. Exit code ${exitStatus}" + echo "ERROR installing ${item}. Exit code ${exitStatus}" echo "$cmdOutput" #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" #echo "$errorOutput" diff --git a/MDM/App-install/App browser-security SS.sh b/MDM/App-install/App browser-security SS.sh index a75d57d..81dc0d5 100644 --- a/MDM/App-install/App browser-security SS.sh +++ b/MDM/App-install/App browser-security SS.sh @@ -4,7 +4,7 @@ LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" -what="" # enter the software to install +item="" # enter the software to install # Examples: microsoftedge, brave, googlechromepkg, firefoxpkg installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit NOTIFY=all" # Separated by space diff --git a/MDM/App-install/App normal SS.sh b/MDM/App-install/App normal SS.sh index 9aa6209..06f7c04 100644 --- a/MDM/App-install/App normal SS.sh +++ b/MDM/App-install/App normal SS.sh @@ -4,7 +4,7 @@ LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" -what="" # enter the software to install +item="" # enter the software to install # Examples: adobecreativeclouddesktop, canva, cyberduck, handbrake, inkscape, textmate, vlc @@ -29,7 +29,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=all" # Separate # INSTALL=force ###################################################################### # To be used as a script sent out from a MDM. -# Fill the variable "what" above with a label. +# Fill the variable "item" above with a label. # Script will run this label through Installomator. ###################################################################### # v. 9.2.1 : Better logging handling and installomatorOptions fix. @@ -39,7 +39,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user NOTIFY=all" # Separate # PATH declaration export PATH=/usr/bin:/bin:/usr/sbin:/sbin -echo "$(date +%F\ %T) [LOG-BEGIN] $what" +echo "$(date +%F\ %T) [LOG-BEGIN] $item" # Verify that Installomator has been installed destFile="/usr/local/Installomator/Installomator.sh" @@ -60,16 +60,16 @@ caffexit () { } # Install software using Installomator -cmdOutput="$(${destFile} ${what} LOGO=$LOGO ${installomatorOptions} || true)" +cmdOutput="$(${destFile} ${item} LOGO=$LOGO ${installomatorOptions} || true)" # Check result exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" if [[ ${exitStatus} -eq 0 ]] ; then - echo "${what} succesfully installed." + echo "${item} succesfully installed." warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" echo "$warnOutput" else - echo "ERROR installing ${what}. Exit code ${exitStatus}" + echo "ERROR installing ${item}. Exit code ${exitStatus}" echo "$cmdOutput" #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" #echo "$errorOutput" diff --git a/MDM/App-install/App service Auto-install.sh b/MDM/App-install/App service Auto-install.sh index 0db91f3..ce282a4 100644 --- a/MDM/App-install/App service Auto-install.sh +++ b/MDM/App-install/App service Auto-install.sh @@ -4,7 +4,7 @@ LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" -what="dockutil" # enter the software to install +item="dockutil" # enter the software to install # Examples: applenyfonts, applesfarabic, applesfcompact, applesfmono, applesfpro, applesfsymbols, dialog, dockutil, knockknock, lulu, nomad, nudge, shield, supportapp, wordservice, xcreds, xink installomatorOptions="BLOCKING_PROCESS_ACTION=ignore NOTIFY=silent" # Separated by space @@ -28,7 +28,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=ignore NOTIFY=silent" # Separated # INSTALL=force ###################################################################### # To be used as a script sent out from a MDM. -# Fill the variable "what" above with a label. +# Fill the variable "item" above with a label. # Script will run this label through Installomator. ###################################################################### # v. 9.2.1 : Better logging handling and installomatorOptions fix. @@ -38,7 +38,7 @@ installomatorOptions="BLOCKING_PROCESS_ACTION=ignore NOTIFY=silent" # Separated # PATH declaration export PATH=/usr/bin:/bin:/usr/sbin:/sbin -echo "$(date +%F\ %T) [LOG-BEGIN] $what" +echo "$(date +%F\ %T) [LOG-BEGIN] $item" # Verify that Installomator has been installed destFile="/usr/local/Installomator/Installomator.sh" @@ -59,16 +59,16 @@ caffexit () { } # Install software using Installomator -cmdOutput="$(${destFile} ${what} LOGO=$LOGO ${installomatorOptions} || true)" +cmdOutput="$(${destFile} ${item} LOGO=$LOGO ${installomatorOptions} || true)" # Check result exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" if [[ ${exitStatus} -eq 0 ]] ; then - echo "${what} succesfully installed." + echo "${item} succesfully installed." warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" echo "$warnOutput" else - echo "ERROR installing ${what}. Exit code ${exitStatus}" + echo "ERROR installing ${item}. Exit code ${exitStatus}" echo "$cmdOutput" #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" #echo "$errorOutput" From 2a9fd6292cae0b496bf182a34cfce76c61c928d7 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Wed, 28 Sep 2022 10:00:34 +0200 Subject: [PATCH 199/209] Latest version is last in appcast feed --- fragments/labels/duckduckgo.sh | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/fragments/labels/duckduckgo.sh b/fragments/labels/duckduckgo.sh index a5cb4e0..e2a0768 100644 --- a/fragments/labels/duckduckgo.sh +++ b/fragments/labels/duckduckgo.sh @@ -2,9 +2,9 @@ duckduckgo) name="DuckDuckGo" type="dmg" #downloadURL="https://staticcdn.duckduckgo.com/macos-desktop-browser/duckduckgo.dmg" - #downloadURL=$(curl -fs https://staticcdn.duckduckgo.com/macos-desktop-browser/appcast.xml | xpath '(//rss/channel/item/enclosure/@url)[last()]' 2>/dev/null | cut -d '"' -f2) - downloadURL=$(curl -fs https://staticcdn.duckduckgo.com/macos-desktop-browser/appcast.xml | xpath '(//rss/channel/item/enclosure/@url)[1]' 2>/dev/null | cut -d '"' -f2) - #appNewVersion=$(curl -fs https://staticcdn.duckduckgo.com/macos-desktop-browser/appcast.xml | xpath '(//rss/channel/item/enclosure/@sparkle:version)[last()]' 2>/dev/null | cut -d '"' -f2) - appNewVersion=$(curl -fs https://staticcdn.duckduckgo.com/macos-desktop-browser/appcast.xml | xpath '(//rss/channel/item/sparkle:shortVersionString)[1]' 2>/dev/null | cut -d ">" -f2 | cut -d "<" -f1) + downloadURL=$(curl -fs https://staticcdn.duckduckgo.com/macos-desktop-browser/appcast.xml | xpath '(//rss/channel/item/enclosure/@url)[last()]' 2>/dev/null | cut -d '"' -f2) + #downloadURL=$(curl -fs https://staticcdn.duckduckgo.com/macos-desktop-browser/appcast.xml | xpath '(//rss/channel/item/enclosure/@url)[1]' 2>/dev/null | cut -d '"' -f2) + appNewVersion=$(curl -fs https://staticcdn.duckduckgo.com/macos-desktop-browser/appcast.xml | xpath '(//rss/channel/item/enclosure/@sparkle:version)[last()]' 2>/dev/null | cut -d '"' -f2) + #appNewVersion=$(curl -fs https://staticcdn.duckduckgo.com/macos-desktop-browser/appcast.xml | xpath '(//rss/channel/item/sparkle:shortVersionString)[1]' 2>/dev/null | cut -d ">" -f2 | cut -d "<" -f1) expectedTeamID="HKE973VLUW" ;; From f87df8bd9992bc97705909bd0eb141360fca091d Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Wed, 28 Sep 2022 12:41:50 +0200 Subject: [PATCH 200/209] Update README.md --- MDM/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/MDM/README.md b/MDM/README.md index 3ded69b..efa012c 100644 --- a/MDM/README.md +++ b/MDM/README.md @@ -51,7 +51,7 @@ For enrollment purposes, som 1st-scripts has been created. One is not showing an There are also Self Service scripts for this, if it’s somehow needed to have users running the installation manually. -# App-installation +# _App-install_ folders Two different kinds of App-installation scripts have been made. Some that is very similar to the old provided scripts that are only using __Installomator__ for notifications (if any). And others that can use __swiftDialog__ for installation progress, and can also add the app to the Dock using __dockutil__. From 3d2c72a6727cc5787a8a7d19eb22b9faf513ec28 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Wed, 28 Sep 2022 13:45:38 +0200 Subject: [PATCH 201/209] Examples --- .../App browser-security SS.sh | 2 +- MDM/App-install/App browser-security Auto-install.sh | 2 +- MDM/App-install/App browser-security SS.sh | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh b/MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh index 3756e7a..8e59aba 100755 --- a/MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App browser-security SS.sh @@ -5,7 +5,7 @@ LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" item="" # enter the software to install -# Examples: microsoftedge, brave, googlechromepkg, firefoxpkg +# Examples: brave, duckduckgo, firefoxpkg, googlechromepkg, microsoftedge, opera # Dialog icon icon="" diff --git a/MDM/App-install/App browser-security Auto-install.sh b/MDM/App-install/App browser-security Auto-install.sh index dc06450..c45b568 100644 --- a/MDM/App-install/App browser-security Auto-install.sh +++ b/MDM/App-install/App browser-security Auto-install.sh @@ -5,7 +5,7 @@ LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" item="firefoxpkg" # enter the software to install -# Examples: microsoftedge, brave, googlechromepkg, firefoxpkg +# Examples: brave, duckduckgo, firefoxpkg, googlechromepkg, microsoftedge, opera installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit" # Separated by space diff --git a/MDM/App-install/App browser-security SS.sh b/MDM/App-install/App browser-security SS.sh index 81dc0d5..83c8b12 100644 --- a/MDM/App-install/App browser-security SS.sh +++ b/MDM/App-install/App browser-security SS.sh @@ -5,7 +5,7 @@ LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" item="" # enter the software to install -# Examples: microsoftedge, brave, googlechromepkg, firefoxpkg +# Examples: brave, duckduckgo, firefoxpkg, googlechromepkg, microsoftedge, opera installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit NOTIFY=all" # Separated by space From c5ad2291e046c6d4bc22990ea63dc8f4ff3e898c Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Wed, 28 Sep 2022 15:24:02 +0200 Subject: [PATCH 202/209] VLC version from file name ``` # utils/assemble.sh vlc DEBUG=0 2022-09-28 15:22:49 : INFO : vlc : setting variable from argument DEBUG=0 2022-09-28 15:22:49 : REQ : vlc : ################## Start Installomator v. 10.0beta3, date 2022-09-28 2022-09-28 15:22:49 : INFO : vlc : ################## Version: 10.0beta3 2022-09-28 15:22:49 : INFO : vlc : ################## Date: 2022-09-28 2022-09-28 15:22:49 : INFO : vlc : ################## vlc 2022-09-28 15:22:49 : INFO : vlc : BLOCKING_PROCESS_ACTION=tell_user 2022-09-28 15:22:49 : INFO : vlc : NOTIFY=success 2022-09-28 15:22:49 : INFO : vlc : LOGGING=INFO 2022-09-28 15:22:49 : INFO : vlc : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns 2022-09-28 15:22:49 : INFO : vlc : Label type: dmg 2022-09-28 15:22:49 : INFO : vlc : archiveName: VLC.dmg 2022-09-28 15:22:49 : INFO : vlc : no blocking processes defined, using VLC as default 2022-09-28 15:22:49 : INFO : vlc : App(s) found: /Applications/VLC.app 2022-09-28 15:22:49 : INFO : vlc : found app at /Applications/VLC.app, version 3.0.17.3, on versionKey CFBundleShortVersionString 2022-09-28 15:22:49 : INFO : vlc : appversion: 3.0.17.3 2022-09-28 15:22:49 : INFO : vlc : Latest version of VLC is 3.0.17.3 2022-09-28 15:22:49 : INFO : vlc : There is no newer version available. 2022-09-28 15:22:49 : INFO : vlc : App not closed, so no reopen. 2022-09-28 15:22:49 : REQ : vlc : No newer version. 2022-09-28 15:22:49 : REQ : vlc : ################## End Installomator, exit code 0 ``` --- fragments/labels/vlc.sh | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/fragments/labels/vlc.sh b/fragments/labels/vlc.sh index 8fe2487..dae2c67 100644 --- a/fragments/labels/vlc.sh +++ b/fragments/labels/vlc.sh @@ -3,10 +3,11 @@ vlc) type="dmg" if [[ $(arch) == "arm64" ]]; then downloadURL=$(curl -fs http://update.videolan.org/vlc/sparkle/vlc-arm64.xml | xpath '//rss/channel/item[last()]/enclosure/@url' 2>/dev/null | cut -d '"' -f 2 ) - appNewVersion=$(curl -fs http://update.videolan.org/vlc/sparkle/vlc-arm64.xml | xpath '//rss/channel/item[last()]/enclosure/@sparkle:version' 2>/dev/null | cut -d '"' -f 2 ) + #appNewVersion=$(curl -fs http://update.videolan.org/vlc/sparkle/vlc-arm64.xml | xpath '//rss/channel/item[last()]/enclosure/@sparkle:version' 2>/dev/null | cut -d '"' -f 2 ) elif [[ $(arch) == "i386" ]]; then downloadURL=$(curl -fs http://update.videolan.org/vlc/sparkle/vlc-intel64.xml | xpath '//rss/channel/item[last()]/enclosure/@url' 2>/dev/null | cut -d '"' -f 2 ) - appNewVersion=$(curl -fs http://update.videolan.org/vlc/sparkle/vlc-intel64.xml | xpath '//rss/channel/item[last()]/enclosure/@sparkle:version' 2>/dev/null | cut -d '"' -f 2 ) + #appNewVersion=$(curl -fs http://update.videolan.org/vlc/sparkle/vlc-intel64.xml | xpath '//rss/channel/item[last()]/enclosure/@sparkle:version' 2>/dev/null | cut -d '"' -f 2 ) fi + appNewVersion=$(echo ${downloadURL} | sed -E 's/.*\/vlc-([0-9.]*).*\.dmg/\1/' ) expectedTeamID="75GAHG3SZQ" ;; From c955a69e47581913391bf30d13d70695f9cbb7c9 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Thu, 29 Sep 2022 13:07:42 +0200 Subject: [PATCH 203/209] App-update scripts And added a bit to the README.md. --- .../App browser-security Auto-install.sh | 92 +++++++++++++++++++ MDM/App-update/App normal Auto-install.sh | 92 +++++++++++++++++++ MDM/README.md | 21 ++++- 3 files changed, 203 insertions(+), 2 deletions(-) create mode 100644 MDM/App-update/App browser-security Auto-install.sh create mode 100644 MDM/App-update/App normal Auto-install.sh diff --git a/MDM/App-update/App browser-security Auto-install.sh b/MDM/App-update/App browser-security Auto-install.sh new file mode 100644 index 0000000..211e564 --- /dev/null +++ b/MDM/App-update/App browser-security Auto-install.sh @@ -0,0 +1,92 @@ +#!/bin/sh + +# Update with Installomator if app exist + +LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +item="microsoftedge" # enter the software to install +# Examples: brave, duckduckgo, firefoxpkg, googlechromepkg, microsoftedge, opera +appPath="/Applications/Microsoft Edge.app" +# Examples: Microsoft Edge.app, Brave Browser.app, DuckDuckGo.app, Google Chrome.app, Firefox.app, Opera.app + +installomatorOptions="BLOCKING_PROCESS_ACTION=tell_user_then_quit" # Separated by space + +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# To be used as a script sent out from a MDM. +# Fill the variable "item" above with a label. +# Script will run this label through Installomator. +###################################################################### +# v. 9.2.1 : Better logging handling and installomatorOptions fix. +###################################################################### + +# Mark: Script +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +echo "$(date +%F\ %T) [LOG-BEGIN] $item" + +# Check if app is installed +# We only want this to run if it's already installed +if [ ! -e "${appPath}" ]; then + echo "App not found here:" + echo "${appPath}" + echo "Exiting." + exit 98 +fi +echo "${appPath} Found!" + +# Verify that Installomator has been installed +destFile="/usr/local/Installomator/Installomator.sh" +if [ ! -e "${destFile}" ]; then + echo "Installomator not found here:" + echo "${destFile}" + echo "Exiting." + exit 99 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" + pkill caffeinate + exit $1 +} + +# Install software using Installomator +cmdOutput="$(${destFile} ${item} LOGO=$LOGO ${installomatorOptions} || true)" + +# Check result +exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" +if [[ ${exitStatus} -eq 0 ]] ; then + echo "${item} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" +else + echo "ERROR installing ${item}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" +fi + +echo "[$(DATE)][LOG-END]" + +caffexit $exitStatus + diff --git a/MDM/App-update/App normal Auto-install.sh b/MDM/App-update/App normal Auto-install.sh new file mode 100644 index 0000000..c2ac671 --- /dev/null +++ b/MDM/App-update/App normal Auto-install.sh @@ -0,0 +1,92 @@ +#!/bin/sh + +# Update with Installomator if app exist + +LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" + +item="" # enter the software to install +# Examples: cyberduck, handbrake, textmate, vlc +appPath="/Applications/Cyberduck.app" +# Examples: Cyberduck.app, Handbrake.app, Textmate.app, VLC.app + +installomatorOptions="BLOCKING_PROCESS_ACTION=prompt_user" # Separated by space + +# Other installomatorOptions: +# LOGGING=REQ +# LOGGING=DEBUG +# LOGGING=WARN +# BLOCKING_PROCESS_ACTION=ignore +# BLOCKING_PROCESS_ACTION=tell_user +# BLOCKING_PROCESS_ACTION=tell_user_then_quit +# BLOCKING_PROCESS_ACTION=prompt_user +# BLOCKING_PROCESS_ACTION=prompt_user_loop +# BLOCKING_PROCESS_ACTION=prompt_user_then_kill +# BLOCKING_PROCESS_ACTION=quit +# BLOCKING_PROCESS_ACTION=kill +# NOTIFY=all +# NOTIFY=success +# NOTIFY=silent +# IGNORE_APP_STORE_APPS=yes +# INSTALL=force +###################################################################### +# To be used as a script sent out from a MDM. +# Fill the variable "item" above with a label. +# Script will run this label through Installomator. +###################################################################### +# v. 9.2.1 : Better logging handling and installomatorOptions fix. +###################################################################### + +# Mark: Script +# PATH declaration +export PATH=/usr/bin:/bin:/usr/sbin:/sbin + +echo "$(date +%F\ %T) [LOG-BEGIN] $item" + +# Check if app is installed +# We only want this to run if it's already installed +if [ ! -e "${appPath}" ]; then + echo "App not found here:" + echo "${appPath}" + echo "Exiting." + exit 98 +fi +echo "${appPath} Found!" + +# Verify that Installomator has been installed +destFile="/usr/local/Installomator/Installomator.sh" +if [ ! -e "${destFile}" ]; then + echo "Installomator not found here:" + echo "${destFile}" + echo "Exiting." + exit 99 +fi + +# No sleeping +/usr/bin/caffeinate -d -i -m -u & +caffeinatepid=$! +caffexit () { + kill "$caffeinatepid" + pkill caffeinate + exit $1 +} + +# Install software using Installomator +cmdOutput="$(${destFile} ${item} LOGO=$LOGO ${installomatorOptions} || true)" + +# Check result +exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )" +if [[ ${exitStatus} -eq 0 ]] ; then + echo "${item} succesfully installed." + warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "warn" || true )" + echo "$warnOutput" +else + echo "ERROR installing ${item}. Exit code ${exitStatus}" + echo "$cmdOutput" + #errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )" + #echo "$errorOutput" +fi + +echo "[$(DATE)][LOG-END]" + +caffexit $exitStatus + diff --git a/MDM/README.md b/MDM/README.md index efa012c..2f0da26 100644 --- a/MDM/README.md +++ b/MDM/README.md @@ -1,8 +1,16 @@ # MDM scripts -This is a long list of various scripts for certain use in MDM solutions that cannot call a script internally with parameters, like Jamf Pro can do it. +This is a long list of various scripts for certain use in the various MDM solutions that we have used Installomator with. -So for Mosyle, Addigy, and Microsoft Endpoint Manager (Intune), these are know to be good. If these works in other MDMs, let us know. +There are two categories of MDMs. Either like Jamf Pro, that can contain the full script, and call that as a software installation (called policy in Jamf Pro). If the MDM cannot do that, it have to be able to run a script on the clients. That script can call Installomator on the client, and should therefore be locally installed. + +## “Jamf”-folder + +Here you have scripts for using swiftDialog as part of the Installomator installation. Showing progress in a small window. Separate [ReadMe-file](Jamf/ReadMe.md) in this folder. + +## Script capable MDM-solutions + +So for Mosyle, Addigy, and Microsoft Endpoint Manager (Intune), we have tested these scripts. If these works in other MDMs, let us know. Especially for Addigy, and maybe also for other MDMs, `condition`-scripts has been added if software installation will run on certain conditions. Also `prevention`-scripts has been added, if you manually need to eliminate the runnning of a script, this can be needed if you want to use the enrollment script, but don’t want it to run on the currently managed Macs Then you should sent out the `prevention`-script to make sure the file it creates is present on the Macs so the ordinary script will not do anything (it will detect this file and stop if found). @@ -80,3 +88,12 @@ What is also differentiated is what kind of app it is. Is it of the kind of brow All of the notes for the above scripts are the same for these. But these scripts utilize __swiftDialog__ to show a more live progress for the installation, and they also have a setting to use __dockutil__ to add the software to the Dock of the user. + +# App-update + +These script verifies if the app is already installed, before runnning Installomator. + +- App browser-security Auto-install.sh +- App normal Auto-install.sh + +These scripts only use Installomator, like “App-install”, but will check for the app to be installed first. Very usefull for Addigy and Microsoft. From e0222cfe4982f256eb394b064735ad46980c59e2 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Thu, 29 Sep 2022 16:10:36 +0200 Subject: [PATCH 204/209] API call first, then fall back on home page url. --- fragments/functions.sh | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/fragments/functions.sh b/fragments/functions.sh index 74045da..812b297 100644 --- a/fragments/functions.sh +++ b/fragments/functions.sh @@ -162,18 +162,18 @@ downloadURLFromGit() { # $1 git user name, $2 git repo name fi if [ -n "$archiveName" ]; then - #downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1) - downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1)" + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") if [[ "$(echo $downloadURL | grep -ioE "https.*$archiveName")" == "" ]]; then - printlog "Trying GitHub API for download URL." - downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$archiveName\"/ { print \$4; exit }") + printlog "GitHub API not returning URL, trying https://github.com/$gitusername/$gitreponame/releases/latest." + #downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1) + downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*$archiveName" | head -1)" fi else - #downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1) - downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" + downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then - printlog "Trying GitHub API for download URL." - downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }") + printlog "GitHub API not returning URL, trying https://github.com/$gitusername/$gitreponame/releases/latest." + #downloadURL=https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1) + downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)" fi fi if [ -z "$downloadURL" ]; then From d404e93365b9c936d328ea394b93bfd23276e6d4 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Fri, 30 Sep 2022 09:22:29 +0200 Subject: [PATCH 205/209] adobeacrobatprodc, adobereaderdc --- fragments/labels/adobeacrobatprodc.sh | 8 ++++++ fragments/labels/adobereaderdc-install.sh | 27 +++++++++++++++++++ fragments/labels/adobereaderdc-update.sh | 32 +++++++++++++++++++++-- 3 files changed, 65 insertions(+), 2 deletions(-) create mode 100644 fragments/labels/adobeacrobatprodc.sh create mode 100644 fragments/labels/adobereaderdc-install.sh diff --git a/fragments/labels/adobeacrobatprodc.sh b/fragments/labels/adobeacrobatprodc.sh new file mode 100644 index 0000000..308648f --- /dev/null +++ b/fragments/labels/adobeacrobatprodc.sh @@ -0,0 +1,8 @@ +adobeacrobatprodc) + name="Adobe Acrobat Pro DC" + type="pkgInDmg" + downloadURL="https://trials.adobe.com/AdobeProducts/APRO/Acrobat_HelpX/osx10/Acrobat_DC_Web_WWMUI.dmg" + expectedTeamID="JQ525L2MZD" + blockingProcesses=( "Acrobat Pro DC" ) + Company="Adobe" + ;; diff --git a/fragments/labels/adobereaderdc-install.sh b/fragments/labels/adobereaderdc-install.sh new file mode 100644 index 0000000..060e3cc --- /dev/null +++ b/fragments/labels/adobereaderdc-install.sh @@ -0,0 +1,27 @@ +adobereaderdc-install) + name="Adobe Acrobat Reader DC" + type="pkgInDmg" + printlog "Changing IFS for Adobe Reader" INFO + SAVEIFS=$IFS + IFS=$'\n' + versions=( $( curl -s https://www.adobe.com/devnet-docs/acrobatetk/tools/ReleaseNotesDC/index.html | grep -Eo "[0-9]+\.[0-9]+\.[0-9]+"| head -n 30) ) + local version + for version in $versions; do + version="${version//.}" + printlog "trying version: $version" INFO + local httpstatus=$(curl -X HEAD -s "https://ardownload2.adobe.com/pub/adobe/reader/mac/AcrobatDC/${version}/AcroRdrDC_${version}_MUI.dmg" --write-out "%{http_code}") + printlog "HTTP status for Adobe Reader full installer URL https://ardownload2.adobe.com/pub/adobe/reader/mac/AcrobatDC/${version}/AcroRdrDC_${version}_MUI.dmg is $httpstatus" DEBUG + if [[ "${httpstatus}" == "200" ]]; then + downloadURL="https://ardownload2.adobe.com/pub/adobe/reader/mac/AcrobatDC/${version}/AcroRdrDC_${version}_MUI.dmg" + unset httpstatus + break + fi + done + unset version + IFS=$SAVEIFS + appNewVersion=$i + expectedTeamID="JQ525L2MZD" + blockingProcesses=( "AdobeReader" ) + Company="Adobe" + PatchName="AcrobatReader" + ;; diff --git a/fragments/labels/adobereaderdc-update.sh b/fragments/labels/adobereaderdc-update.sh index a409cf5..1637402 100644 --- a/fragments/labels/adobereaderdc-update.sh +++ b/fragments/labels/adobereaderdc-update.sh @@ -1,9 +1,37 @@ adobereaderdc-update) name="Adobe Acrobat Reader DC" type="pkgInDmg" - downloadURL=$(adobecurrent=`curl --fail --silent https://armmf.adobe.com/arm-manifests/mac/AcrobatDC/reader/current_version.txt | tr -d '.'` && echo https://ardownload2.adobe.com/pub/adobe/reader/mac/AcrobatDC/"$adobecurrent"/AcroRdrDC_"$adobecurrent"_MUI.dmg) + if [[ -d "/Applications/Adobe Acrobat Reader DC.app" ]]; then + mkdir -p "/Library/Application Support/Adobe/Acrobat/11.0" + defaults write "/Library/Application Support/Adobe/Acrobat/11.0/com.adobe.Acrobat.InstallerOverrides.plist" ReaderAppPath "/Applications/Adobe Acrobat Reader DC.app" + if ! [[ `defaults read "/Applications/Adobe Acrobat Reader DC.app/Contents/Resources/AcroLocale.plist"` ]]; then + printlog "Missing locale data, this will cause the updater to fail. Deleting Adobe Acrobat Reader DC.app and installing fresh." + rm -Rf "/Applications/Adobe Acrobat Reader DC.app" + $0 $1 $2 $3 adobereaderdc-install $5 $6 $7 $8 $9 ${10} ${11} + fi + fi + adobecurrent=$(curl -sL https://armmf.adobe.com/arm-manifests/mac/AcrobatDC/reader/current_version.txt | tr -d '.') + if [[ "${adobecurrent}" != <-> ]]; then + printlog "Got an invalid response for the Adobe Reader Current Version: ${adobecurrent}" ERROR + printlog "################## End $APPLICATION \n\n" INFO + exit 50 + fi + downloadURL=$(echo https://ardownload2.adobe.com/pub/adobe/reader/mac/AcrobatDC/"$adobecurrent"/AcroRdrDCUpd"$adobecurrent"_MUI.dmg) + reader_preinstall() { + if pgrep -a "AdobeReader" >/dev/null 2>&1; then + printlog "AdobeReader is still running, forcefully killing." WARN + killall AdobeReader + fi + } + preinstall="reader_preinstall" + updateTool="/usr/local/bin/RemoteUpdateManager" + updateToolArguments=( --productVersions=RDR ) appNewVersion=$(curl -s https://armmf.adobe.com/arm-manifests/mac/AcrobatDC/reader/current_version.txt) - #appNewVersion=$(curl -s -H "User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15)" https://get.adobe.com/reader/ | grep ">Version" | sed -E 's/.*Version 20([0-9.]*)<.*/\1/g') # credit: Søren Theilgaard (@theilgaard) + updateToolLog="/Users/$currentUser/Library/Logs/RemoteUpdateManager.log" + updateToolLogDateFormat="%m/%d/%y %H:%M:%S" expectedTeamID="JQ525L2MZD" blockingProcesses=( "AdobeReader" ) + Company=Adobe + PatchName=AcrobatReader + PatchSkip="YES" ;; From 3f41926cf92e552ac6ebeed2109a4e91835800d9 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Fri, 30 Sep 2022 10:14:13 +0200 Subject: [PATCH 206/209] adobecreativeclouddesktop and adobereaderdc-update Fixing #694 and fixing #687 --- fragments/labels/adobecreativeclouddesktop.sh | 16 +++++++++------- fragments/labels/adobereaderdc-update.sh | 13 ++++++++++--- 2 files changed, 19 insertions(+), 10 deletions(-) diff --git a/fragments/labels/adobecreativeclouddesktop.sh b/fragments/labels/adobecreativeclouddesktop.sh index c83da57..e12b911 100644 --- a/fragments/labels/adobecreativeclouddesktop.sh +++ b/fragments/labels/adobecreativeclouddesktop.sh @@ -1,22 +1,24 @@ adobecreativeclouddesktop) name="Adobe Creative Cloud" + appName="Install.app" type="dmg" if pgrep -q "Adobe Installer"; then printlog "Adobe Installer is running, not a good time to update." WARN printlog "################## End $APPLICATION \n\n" INFO exit 75 fi - adobeurl="https://helpx.adobe.com/download-install/kb/creative-cloud-desktop-app-download.html" - if [[ $(arch) == "arm64" ]]; then - downloadURL=$(curl -fs "$adobeurl" | xmllint -html -xpath "string(//a[contains(@href,'macarm64')][contains(text(),'Download')]/@href)" - 2> /dev/null) - elif [[ $(arch) == "i386" ]]; then - downloadURL=$(curl -fs "$adobeurl" | xmllint -html -xpath "string(//a[contains(@href,'osx10')][contains(text(),'Download')]/@href)" - 2> /dev/null) + if [[ "$(arch)" == "arm64" ]]; then + downloadURL=$(curl -fs "https://helpx.adobe.com/download-install/kb/creative-cloud-desktop-app-download.html" | grep -o 'https.*macarm64.*dmg' | head -1 | cut -d '"' -f1) + else + downloadURL=$(curl -fs "https://helpx.adobe.com/download-install/kb/creative-cloud-desktop-app-download.html" | grep -o 'https.*osx10.*dmg' | head -1 | cut -d '"' -f1) fi - appNewVersion=$(curl -fs "https://helpx.adobe.com/creative-cloud/release-note/cc-release-notes.html" | grep "mandatory" | head -1 | grep -o "Version *.* released" | cut -d " " -f2) - #appNewVersion=$(echo "$downloadURL" | grep -o '[^x]*$' | cut -d '.' -f 1 | sed 's/_/\./g') + #appNewVersion=$(curl -fs "https://helpx.adobe.com/creative-cloud/release-note/cc-release-notes.html" | grep "mandatory" | head -1 | grep -o "Version *.* released" | cut -d " " -f2) + appNewVersion=$(echo $downloadURL | grep -o '[^x]*$' | cut -d '.' -f 1 | sed 's/_/\./g') + targetDir="/Applications/Utilities/Adobe Creative Cloud/ACC/" installerTool="Install.app" CLIInstaller="Install.app/Contents/MacOS/Install" CLIArguments=(--mode=silent) expectedTeamID="JQ525L2MZD" + blockingProcesses=( "Creative Cloud" ) Company="Adobe" ;; diff --git a/fragments/labels/adobereaderdc-update.sh b/fragments/labels/adobereaderdc-update.sh index 1637402..7a81c57 100644 --- a/fragments/labels/adobereaderdc-update.sh +++ b/fragments/labels/adobereaderdc-update.sh @@ -2,12 +2,19 @@ adobereaderdc-update) name="Adobe Acrobat Reader DC" type="pkgInDmg" if [[ -d "/Applications/Adobe Acrobat Reader DC.app" ]]; then + printlog "Found /Applications/Adobe Acrobat Reader DC.app" mkdir -p "/Library/Application Support/Adobe/Acrobat/11.0" defaults write "/Library/Application Support/Adobe/Acrobat/11.0/com.adobe.Acrobat.InstallerOverrides.plist" ReaderAppPath "/Applications/Adobe Acrobat Reader DC.app" - if ! [[ `defaults read "/Applications/Adobe Acrobat Reader DC.app/Contents/Resources/AcroLocale.plist"` ]]; then - printlog "Missing locale data, this will cause the updater to fail. Deleting Adobe Acrobat Reader DC.app and installing fresh." + if ! defaults read "/Applications/Adobe Acrobat Reader DC.app/Contents/Resources/AcroLocale.plist" ; then + printlog "Missing locale data, this will cause the updater to fail. Deleting Adobe Acrobat Reader DC.app and installing fresh." WARN rm -Rf "/Applications/Adobe Acrobat Reader DC.app" - $0 $1 $2 $3 adobereaderdc-install $5 $6 $7 $8 $9 ${10} ${11} + if [[ $1 == "/" ]]; then + printlog "Running through Jamf: $0." INFO + $0 $1 $2 $3 adobereaderdc-install ${5} ${6} ${7} ${8} ${9} ${10} ${11} + else + printlog "Installomator running locally: $0." INFO + $0 adobereaderdc-install ${2} ${3} ${4} ${5} ${6} ${7} ${8} ${9} ${10} ${11} + fi fi fi adobecurrent=$(curl -sL https://armmf.adobe.com/arm-manifests/mac/AcrobatDC/reader/current_version.txt | tr -d '.') From feedc86a0afd640fe7d8522683b5d58f198a8045 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Fri, 30 Sep 2022 10:57:04 +0200 Subject: [PATCH 207/209] Works with version 9 and 10 comment. --- MDM/README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/MDM/README.md b/MDM/README.md index 2f0da26..0360ffb 100644 --- a/MDM/README.md +++ b/MDM/README.md @@ -14,6 +14,8 @@ So for Mosyle, Addigy, and Microsoft Endpoint Manager (Intune), we have tested t Especially for Addigy, and maybe also for other MDMs, `condition`-scripts has been added if software installation will run on certain conditions. Also `prevention`-scripts has been added, if you manually need to eliminate the runnning of a script, this can be needed if you want to use the enrollment script, but don’t want it to run on the currently managed Macs Then you should sent out the `prevention`-script to make sure the file it creates is present on the Macs so the ordinary script will not do anything (it will detect this file and stop if found). +_The scripts utilizing __swiftDialog__ requires version 10 of __Installomator__, but will work with version 9. If runnning on version 9 it will set `NOTIFY=all` and use __Installomator__ notifications for showing progress, where as on version 10 it will be `NOTIFY=silent` as __swiftDialog__ is used instead._ + ### Shortenings - SS — Self Service — scripts designed for use through a Self Service catalog From dd3ac338b32a59df633def9070e7b992f20892c3 Mon Sep 17 00:00:00 2001 From: Theile <soren@theilgaard.dk> Date: Fri, 30 Sep 2022 13:41:20 +0200 Subject: [PATCH 208/209] Examples --- .../App service SS.sh | 2 +- MDM/App-install/App service Auto-install.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/MDM/App-install SS with swiftDialog and dockutil/App service SS.sh b/MDM/App-install SS with swiftDialog and dockutil/App service SS.sh index e441c91..67d1f56 100644 --- a/MDM/App-install SS with swiftDialog and dockutil/App service SS.sh +++ b/MDM/App-install SS with swiftDialog and dockutil/App service SS.sh @@ -5,7 +5,7 @@ LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" item="" # enter the software to install -# Examples: applenyfonts, applesfarabic, applesfcompact, applesfmono, applesfpro, applesfsymbols, dialog, dockutil, knockknock, lulu, nomad, nudge, shield, supportapp, wordservice, xcreds, xink +# Examples: applenyfonts, applesfarabic, applesfcompact, applesfmono, applesfpro, applesfsymbols, desktoppr, dialog, dockutil, knockknock, lulu, nomad, nudge, shield, supportapp, wordservice, xcreds, xink # Dialog icon icon="" diff --git a/MDM/App-install/App service Auto-install.sh b/MDM/App-install/App service Auto-install.sh index ce282a4..aa7165e 100644 --- a/MDM/App-install/App service Auto-install.sh +++ b/MDM/App-install/App service Auto-install.sh @@ -5,7 +5,7 @@ LOGO="" # "mosyleb", "mosylem", "addigy", "microsoft", "ws1" item="dockutil" # enter the software to install -# Examples: applenyfonts, applesfarabic, applesfcompact, applesfmono, applesfpro, applesfsymbols, dialog, dockutil, knockknock, lulu, nomad, nudge, shield, supportapp, wordservice, xcreds, xink +# Examples: applenyfonts, applesfarabic, applesfcompact, applesfmono, applesfpro, applesfsymbols, desktoppr, dialog, dockutil, knockknock, lulu, nomad, nudge, shield, supportapp, wordservice, xcreds, xink installomatorOptions="BLOCKING_PROCESS_ACTION=ignore NOTIFY=silent" # Separated by space From be62fa9895b9d58fde8ee5c5592eac2e64b4101f Mon Sep 17 00:00:00 2001 From: dnikles <dnikles@gmail.com> Date: Fri, 30 Sep 2022 11:07:30 -0400 Subject: [PATCH 209/209] check for arch previous version of label was downloading the arm64 version every time --- fragments/labels/audacity.sh | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/fragments/labels/audacity.sh b/fragments/labels/audacity.sh index a5868d3..3a49708 100644 --- a/fragments/labels/audacity.sh +++ b/fragments/labels/audacity.sh @@ -1,7 +1,13 @@ audacity) name="Audacity" type="dmg" - downloadURL=$(downloadURLFromGit audacity audacity) + if [[ $(arch) == "arm64" ]]; then + archiveName="audacity-macOS-[0-9.]*-arm64.dmg" + downloadURL=$(downloadURLFromGit audacity audacity) + elif [[ $(arch) == "i386" ]]; then + archiveName="audacity-macOS-[0-9.]*-x86_64.dmg" + downloadURL=$(downloadURLFromGit audacity audacity) + fi appNewVersion=$(versionFromGit audacity audacity) expectedTeamID="AWEYX923UX" ;;