From edb2e56e822811a2e6e731cfbf752a5bf68373b6 Mon Sep 17 00:00:00 2001 From: Pierre Audonnet Date: Fri, 18 Oct 2019 11:02:14 -0400 Subject: [PATCH 001/177] DnsAdmins and DnsUpdateProxy are not well-known I added the following: "This is not a well-known SID. The RID part may vary from domain to domain." for both of them and replace the well-known SID by "It may vary from environment to environment" because the RID selection depends on other factors (when the DNS service is installed for example). --- .../access-control/active-directory-security-groups.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/identity-protection/access-control/active-directory-security-groups.md b/windows/security/identity-protection/access-control/active-directory-security-groups.md index afaaca56b3..2f7aab5334 100644 --- a/windows/security/identity-protection/access-control/active-directory-security-groups.md +++ b/windows/security/identity-protection/access-control/active-directory-security-groups.md @@ -1345,7 +1345,7 @@ This security group has not changed since Windows Server 2008. Members of the DnsUpdateProxy group are DNS clients. They are permitted to perform dynamic updates on behalf of other clients (such as DHCP servers). A DNS server can develop stale resource records when a DHCP server is configured to dynamically register host (A) and pointer (PTR) resource records on behalf of DHCP clients by using dynamic update. Adding clients to this security group mitigates this scenario. -However, to protect against unsecured records or to permit members of the DnsUpdateProxy group to register records in zones that allow only secured dynamic updates, you must create a dedicated user account and configure DHCP servers to perform DNS dynamic updates by using the credentials of this account (user name, password, and domain). Multiple DHCP servers can use the credentials of one dedicated user account. +However, to protect against unsecured records or to permit members of the DnsUpdateProxy group to register records in zones that allow only secured dynamic updates, you must create a dedicated user account and configure DHCP servers to perform DNS dynamic updates by using the credentials of this account (user name, password, and domain). Multiple DHCP servers can use the credentials of one dedicated user account. This group exists only if the DNS server role is or was once installed on a domain controller in the domain. For information, see [DNS Record Ownership and the DnsUpdateProxy Group](https://technet.microsoft.com/library/dd334715.aspx). @@ -1365,7 +1365,7 @@ This security group has not changed since Windows Server 2008.

Well-Known SID/RID

-

S-1-5-21-<domain>-1103

+

This is not a well-known SID. The RID part may vary from domain to domain.

Type

@@ -1406,7 +1406,7 @@ This security group has not changed since Windows Server 2008. ### DnsAdmins -Members of DNSAdmins group have access to network DNS information. The default permissions are as follows: Allow: Read, Write, Create All Child objects, Delete Child objects, Special Permissions. +Members of DNSAdmins group have access to network DNS information. The default permissions are as follows: Allow: Read, Write, Create All Child objects, Delete Child objects, Special Permissions. This group exists only if the DNS server role is or was once installed on a domain controller in the domain. For more information about security and DNS, see [DNSSEC in Windows Server 2012](https://technet.microsoft.com/library/dn593694(v=ws.11).aspx). @@ -1426,7 +1426,7 @@ This security group has not changed since Windows Server 2008.

Well-Known SID/RID

-

S-1-5-21-<domain>-1102

+

This is not a well-known SID. The RID part may vary from domain to domain.

Type

From ed081d8bdce5ce7b3aa1a9b44ef2463034823e28 Mon Sep 17 00:00:00 2001 From: Pierre Audonnet Date: Mon, 21 Oct 2019 21:32:55 -0400 Subject: [PATCH 002/177] Update active-directory-security-groups.md --- .../access-control/active-directory-security-groups.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/access-control/active-directory-security-groups.md b/windows/security/identity-protection/access-control/active-directory-security-groups.md index 2f7aab5334..2cdb530f62 100644 --- a/windows/security/identity-protection/access-control/active-directory-security-groups.md +++ b/windows/security/identity-protection/access-control/active-directory-security-groups.md @@ -1365,7 +1365,7 @@ This security group has not changed since Windows Server 2008.

Well-Known SID/RID

-

This is not a well-known SID. The RID part may vary from domain to domain.

+

S-1-5-21-<domain>-<variable RID>

Type

@@ -1426,7 +1426,7 @@ This security group has not changed since Windows Server 2008.

Well-Known SID/RID

-

This is not a well-known SID. The RID part may vary from domain to domain.

+

S-1-5-21-<domain>-<variable RID>

Type

From 7b0a5dd712e65e893cbde1d458d5ac9d800a4ea8 Mon Sep 17 00:00:00 2001 From: RavennMSFT <37601656+RavennMSFT@users.noreply.github.com> Date: Wed, 27 Nov 2019 12:18:01 -0800 Subject: [PATCH 003/177] Update hello-how-it-works-device-registration.md Update hybrid join steps to remove confusion around requiring a user sign in --- .../hello-how-it-works-device-registration.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md b/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md index 4cbec54f34..a4484593d8 100644 --- a/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md +++ b/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md @@ -63,11 +63,11 @@ Device Registration is a prerequisite to Windows Hello for Business provisioning | Phase | Description | | :----: | :----------- | -| A | The user signs in to a domain joined Windows 10 computers using domain credentials. This can be user name and password or smart card authentication. The user sign-in triggers the Automatic Device Join task.| +| A | The user signs in to a domain joined Windows 10 computers using domain credentials. This can be user name and password or smart card authentication. The user sign-in triggers the Automatic Device Join task. Note:Automatic Device Join tasks is triggered on domain join as well as retried every hour. It does not solely depend on the user sign-in only.| |B | The task queries Active Directory using the LDAP protocol for the keywords attribute on service connection point stored in the configuration partition in Active Directory (CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=Services,CN=Configuration,DC=corp,DC=contoso,DC=com). The value returned in the keywords attribute determines if device registration is directed to Azure Device Registration Service (ADRS) or the enterprise device registration service hosted on-premises.| |C | For the managed environment, the task creates an initial authentication credential in the form of a self-signed certificate. The task write the certificate to the userCertificate attribute on the computer object in Active Directory using LDAP. |D |The computer cannot authenticate to Azure DRS until a device object representing the computer that includes the certificate on the userCertificate attribute is created in Azure Active Directory. Azure AD Connect detects an attribute change. On the next synchronization cycle, Azure AD Connect sends the userCertificate, object GUID, and computer SID to Azure DRS. Azure DRS uses the attribute information to create a device object in Azure Active Directory.| -|E | The Automatic Device Join task triggers with each user sign-in and tries to authenticate the computer to Azure Active Directory using the corresponding private key of the public key in the userCertificate attribute. Azure Active Directory authenticates the computer and issues a ID token to the computer.| +|E | The Automatic Device Join task triggers with each user sign-in or every hour, and tries to authenticate the computer to Azure Active Directory using the corresponding private key of the public key in the userCertificate attribute. Azure Active Directory authenticates the computer and issues a ID token to the computer.| |F | The task creates TPM bound (preferred) RSA 2048 bit key-pair known as the device key (dkpub/dkpriv). The application create a certificate request using dkpub and the public key and signs the certificate request with using dkpriv. Next, the application derives second key pair from the TPM's storage root key. This is the transport key (tkpub/tkpriv).| |G | The task sends a device registration request to Azure DRS that includes the ID token, certificate request, tkpub, and attestation data. Azure DRS validates the ID token, creates a device ID, and creates a certificate based on the included certificate request. Azure DRS then updates the device object in Azure Active Directory and sends the device ID and the device certificate to the client.| |H | Device registration completes by receiving the device ID and the device certificate from Azure DRS. The device ID is saved for future reference (viewable from dsregcmd.exe /status), and the device certificate is installed in the Personal store of the computer. With device registration complete, the task exits.| @@ -78,7 +78,7 @@ Device Registration is a prerequisite to Windows Hello for Business provisioning | Phase | Description | | :----: | :----------- | -| A | The user signs in to a domain joined Windows 10 computers using domain credentials. This can be user name and password or smart card authentication. The user sign-in triggers the Automatic Device Join task.| +| A | The user signs in to a domain joined Windows 10 computers using domain credentials. This can be user name and password or smart card authentication. The user sign-in triggers the Automatic Device Join task. Note:Automatic Device Join tasks is triggered on domain join as well as retried every hour. It does not solely depend on the user sign-in only. | |B | The task queries Active Directory using the LDAP protocol for the keywords attribute on service connection point stored in the configuration partition in Active Directory (CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=Services,CN=Configuration,DC=corp,DC=contoso,DC=com). The value returned in the keywords attribute determines if device registration is directed to Azure Device Registration Service (ADRS) or the enterprise device registration service hosted on-premises.| |C | For the federated environments, the computer authenticates the enterprise device registration endpoint using Windows integrated authentication. The enterprise device registration service creates and returns a token that includes claims for the object GUID, computer SID, and domain joined state. The task submits the token and claims to Azure Active Directory where it is validated. Azure Active Directory returns an ID token to the running task. |D | The application creates TPM bound (preferred) RSA 2048 bit key-pair known as the device key (dkpub/dkpriv). The application create a certificate request using dkpub and the public key and signs the certificate request with using dkpriv. Next, the application derives second key pair from the TPM's storage root key. This is the transport key (tkpub/tkpriv).| From 991ac8dcd271c37ae814743f6c87dc1587b5edfe Mon Sep 17 00:00:00 2001 From: RavennMSFT <37601656+RavennMSFT@users.noreply.github.com> Date: Tue, 10 Dec 2019 10:39:10 -0800 Subject: [PATCH 004/177] Update hello-how-it-works-device-registration.md --- .../hello-how-it-works-device-registration.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md b/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md index a4484593d8..b0444e1ab9 100644 --- a/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md +++ b/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md @@ -63,7 +63,7 @@ Device Registration is a prerequisite to Windows Hello for Business provisioning | Phase | Description | | :----: | :----------- | -| A | The user signs in to a domain joined Windows 10 computers using domain credentials. This can be user name and password or smart card authentication. The user sign-in triggers the Automatic Device Join task. Note:Automatic Device Join tasks is triggered on domain join as well as retried every hour. It does not solely depend on the user sign-in only.| +| A | The user signs in to a domain joined Windows 10 computers using domain credentials. This can be user name and password or smart card authentication. The user sign-in triggers the Automatic Device Join task. Note:Automatic Device Join tasks is triggered on domain join as well as retried every hour. It does not solely depend on the user sign-in.| |B | The task queries Active Directory using the LDAP protocol for the keywords attribute on service connection point stored in the configuration partition in Active Directory (CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=Services,CN=Configuration,DC=corp,DC=contoso,DC=com). The value returned in the keywords attribute determines if device registration is directed to Azure Device Registration Service (ADRS) or the enterprise device registration service hosted on-premises.| |C | For the managed environment, the task creates an initial authentication credential in the form of a self-signed certificate. The task write the certificate to the userCertificate attribute on the computer object in Active Directory using LDAP. |D |The computer cannot authenticate to Azure DRS until a device object representing the computer that includes the certificate on the userCertificate attribute is created in Azure Active Directory. Azure AD Connect detects an attribute change. On the next synchronization cycle, Azure AD Connect sends the userCertificate, object GUID, and computer SID to Azure DRS. Azure DRS uses the attribute information to create a device object in Azure Active Directory.| @@ -78,7 +78,7 @@ Device Registration is a prerequisite to Windows Hello for Business provisioning | Phase | Description | | :----: | :----------- | -| A | The user signs in to a domain joined Windows 10 computers using domain credentials. This can be user name and password or smart card authentication. The user sign-in triggers the Automatic Device Join task. Note:Automatic Device Join tasks is triggered on domain join as well as retried every hour. It does not solely depend on the user sign-in only. | +| A | The user signs in to a domain joined Windows 10 computers using domain credentials. This can be user name and password or smart card authentication. The user sign-in triggers the Automatic Device Join task. Note:Automatic Device Join tasks is triggered on domain join as well as retried every hour. It does not solely depend on the user sign-in. | |B | The task queries Active Directory using the LDAP protocol for the keywords attribute on service connection point stored in the configuration partition in Active Directory (CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=Services,CN=Configuration,DC=corp,DC=contoso,DC=com). The value returned in the keywords attribute determines if device registration is directed to Azure Device Registration Service (ADRS) or the enterprise device registration service hosted on-premises.| |C | For the federated environments, the computer authenticates the enterprise device registration endpoint using Windows integrated authentication. The enterprise device registration service creates and returns a token that includes claims for the object GUID, computer SID, and domain joined state. The task submits the token and claims to Azure Active Directory where it is validated. Azure Active Directory returns an ID token to the running task. |D | The application creates TPM bound (preferred) RSA 2048 bit key-pair known as the device key (dkpub/dkpriv). The application create a certificate request using dkpub and the public key and signs the certificate request with using dkpriv. Next, the application derives second key pair from the TPM's storage root key. This is the transport key (tkpub/tkpriv).| From 641f61d5eef6b296a295b79702a6b225de6b8347 Mon Sep 17 00:00:00 2001 From: RavennMSFT <37601656+RavennMSFT@users.noreply.github.com> Date: Tue, 10 Dec 2019 11:19:24 -0800 Subject: [PATCH 005/177] Update windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../hello-how-it-works-device-registration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md b/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md index b0444e1ab9..71c0f94576 100644 --- a/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md +++ b/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md @@ -63,7 +63,7 @@ Device Registration is a prerequisite to Windows Hello for Business provisioning | Phase | Description | | :----: | :----------- | -| A | The user signs in to a domain joined Windows 10 computers using domain credentials. This can be user name and password or smart card authentication. The user sign-in triggers the Automatic Device Join task. Note:Automatic Device Join tasks is triggered on domain join as well as retried every hour. It does not solely depend on the user sign-in.| +| A | The user signs in to a domain joined Windows 10 computers using domain credentials. This can be user name and password or smart card authentication. The user sign-in triggers the Automatic Device Join task. Note: the Automatic Device Join tasks is triggered on domain join as well as retried every hour. It does not solely depend on the user sign-in.| |B | The task queries Active Directory using the LDAP protocol for the keywords attribute on service connection point stored in the configuration partition in Active Directory (CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=Services,CN=Configuration,DC=corp,DC=contoso,DC=com). The value returned in the keywords attribute determines if device registration is directed to Azure Device Registration Service (ADRS) or the enterprise device registration service hosted on-premises.| |C | For the managed environment, the task creates an initial authentication credential in the form of a self-signed certificate. The task write the certificate to the userCertificate attribute on the computer object in Active Directory using LDAP. |D |The computer cannot authenticate to Azure DRS until a device object representing the computer that includes the certificate on the userCertificate attribute is created in Azure Active Directory. Azure AD Connect detects an attribute change. On the next synchronization cycle, Azure AD Connect sends the userCertificate, object GUID, and computer SID to Azure DRS. Azure DRS uses the attribute information to create a device object in Azure Active Directory.| From dbec06ec12aec90925074516fdd95a9e19ec5756 Mon Sep 17 00:00:00 2001 From: RavennMSFT <37601656+RavennMSFT@users.noreply.github.com> Date: Tue, 10 Dec 2019 11:19:45 -0800 Subject: [PATCH 006/177] Update windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../hello-how-it-works-device-registration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md b/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md index 71c0f94576..e91ce1f65c 100644 --- a/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md +++ b/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md @@ -78,7 +78,7 @@ Device Registration is a prerequisite to Windows Hello for Business provisioning | Phase | Description | | :----: | :----------- | -| A | The user signs in to a domain joined Windows 10 computers using domain credentials. This can be user name and password or smart card authentication. The user sign-in triggers the Automatic Device Join task. Note:Automatic Device Join tasks is triggered on domain join as well as retried every hour. It does not solely depend on the user sign-in. | +| A | The user signs in to a domain joined Windows 10 computers using domain credentials. This can be user name and password or smart card authentication. The user sign-in triggers the Automatic Device Join task. Note: the Automatic Device Join tasks is triggered on domain join as well as retried every hour. It does not solely depend on the user sign-in. | |B | The task queries Active Directory using the LDAP protocol for the keywords attribute on service connection point stored in the configuration partition in Active Directory (CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=Services,CN=Configuration,DC=corp,DC=contoso,DC=com). The value returned in the keywords attribute determines if device registration is directed to Azure Device Registration Service (ADRS) or the enterprise device registration service hosted on-premises.| |C | For the federated environments, the computer authenticates the enterprise device registration endpoint using Windows integrated authentication. The enterprise device registration service creates and returns a token that includes claims for the object GUID, computer SID, and domain joined state. The task submits the token and claims to Azure Active Directory where it is validated. Azure Active Directory returns an ID token to the running task. |D | The application creates TPM bound (preferred) RSA 2048 bit key-pair known as the device key (dkpub/dkpriv). The application create a certificate request using dkpub and the public key and signs the certificate request with using dkpriv. Next, the application derives second key pair from the TPM's storage root key. This is the transport key (tkpub/tkpriv).| From 788015cd3dcfde895cedc10a7ef6e1c68e0cb4f6 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Fri, 13 Dec 2019 14:12:30 -0800 Subject: [PATCH 007/177] Store instructions, rs5, workflow, install method Removed old instructions on tap to place apps from pre rs5 Clarified not all apps need to be purchased. Added note you can use MSA while using another account. Got rid of a BLOOM reference corrected to Start Gesture Added My Library reference @scooley --- devices/hololens/holographic-store-apps.md | 18 ++++++++++++------ 1 file changed, 12 insertions(+), 6 deletions(-) diff --git a/devices/hololens/holographic-store-apps.md b/devices/hololens/holographic-store-apps.md index 085f14c50e..f82acc721b 100644 --- a/devices/hololens/holographic-store-apps.md +++ b/devices/hololens/holographic-store-apps.md @@ -33,12 +33,18 @@ Open the Microsoft Store from the **Start** menu. Then browse for apps and games ## Install apps -To download apps, you'll need to be signed in with a Microsoft account. To buy them, you'll need a payment method associated with the Microsoft account you use on your HoloLens. To set up a payment method, go to [account.microsoft.com](https://account.microsoft.com/) and select **Payment & billing** > **Payment options** > **Add a payment option**. +To download apps, you'll need to be signed in with a Microsoft account. Some apps are free and can be downloaded right away. Apps that require a purchase require you to be signed into the Store with your Microsoft account and have a valid payment method. +>[!NOTE] +>The account you can use on Microsoft Store does not have to be the same as the account you are signed in with. If you are using a Work or School account on your HoloLens then you'll need to sign in with your personal account in the Store App to make a purchase. -1. To open the [**Start** menu](holographic-home.md), perform a [bloom](hololens1-basic-usage.md) gesture or tap your wrist. -2. Select the Store app and then tap to place this tile into your world. -3. Once the Store app opens, use the search bar to look for any desired application. -4. Select **Get** or **Install** on the application's page (a purchase may be required). +To set up a payment method, go to [account.microsoft.com](https://account.microsoft.com/) and select **Payment & billing** > **Payment options** > **Add a payment option**. + +1. To open the [**Start** menu](holographic-home.md), perform a the [Start gesture](https://docs.microsoft.com/en-us/hololens/hololens2-basic-usage#start-gesture) or [bloom](hololens1-basic-usage.md) gesture on HoloLens 1. +1. Select the Store app. Once the Store app opens: + 1. Use the search bar to look for any desired application. + 1. Select from one of curated categories to find essential apps or apps made specifically for HoloLens. + 1. On the top right of the Store app select the **"..."** button and select **My Library**, to view any perviously purchased apps. +1. Select **Get** or **Install** on the application's page (a purchase may be required). ## Uninstall apps @@ -46,7 +52,7 @@ There are two ways to uninstall applications. You can uninstall applications th ### Uninstall from the Start menu -On the **Start** menu or in the **All apps** list, gaze at the app. Tap and hold until the menu appears, then select **Uninstall**. +On the **Start** menu or in the **All apps** list, browse to the app. Air Tap and hold until the menu appears, then select **Uninstall**. ### Uninstall from the Microsoft Store From c3f2596ab061c5938d200dca7ce822aa3d55b5de Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 16 Dec 2019 10:31:46 -0800 Subject: [PATCH 008/177] Update holographic-store-apps.md --- devices/hololens/holographic-store-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/holographic-store-apps.md b/devices/hololens/holographic-store-apps.md index f82acc721b..662debba9d 100644 --- a/devices/hololens/holographic-store-apps.md +++ b/devices/hololens/holographic-store-apps.md @@ -39,7 +39,7 @@ To download apps, you'll need to be signed in with a Microsoft account. Some app To set up a payment method, go to [account.microsoft.com](https://account.microsoft.com/) and select **Payment & billing** > **Payment options** > **Add a payment option**. -1. To open the [**Start** menu](holographic-home.md), perform a the [Start gesture](https://docs.microsoft.com/en-us/hololens/hololens2-basic-usage#start-gesture) or [bloom](hololens1-basic-usage.md) gesture on HoloLens 1. +1. To open the [**Start** menu](holographic-home.md), perform a the [Start gesture](https://docs.microsoft.com/hololens/hololens2-basic-usage#start-gesture) or [bloom](hololens1-basic-usage.md) gesture on HoloLens 1. 1. Select the Store app. Once the Store app opens: 1. Use the search bar to look for any desired application. 1. Select from one of curated categories to find essential apps or apps made specifically for HoloLens. From ac02ba082786584b3498e17f0a68218d5ff620de Mon Sep 17 00:00:00 2001 From: Chris Genevich Date: Wed, 8 Jan 2020 08:04:19 -0800 Subject: [PATCH 009/177] Update surface-enterprise-management-mode.md Fix small copy past error --- devices/surface/surface-enterprise-management-mode.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/surface-enterprise-management-mode.md b/devices/surface/surface-enterprise-management-mode.md index 81b911bb6f..19d9e8aa2f 100644 --- a/devices/surface/surface-enterprise-management-mode.md +++ b/devices/surface/surface-enterprise-management-mode.md @@ -96,7 +96,7 @@ The following list shows all the available devices you can manage in SEMM: |Enable Battery limit| Allows you to manage Battery limit functionality. If you do not configure this setting, Battery limit is enabled | | Security | Displays the Surface UEFI **Security** page. If you do not configure this setting, the Security page is displayed. | | Devices | Displays the Surface UEFI **Devices** page. If you do not configure this setting, the Devices page is displayed. | -| Boot | Displays the Surface UEFI **Boot** page. If you do not configure this setting, the DateTime page is displayed. | +| Boot | Displays the Surface UEFI **Boot** page. If you do not configure this setting, the Boot page is displayed. | | DateTime | Displays the Surface UEFI **DateTime** page. If you do not configure this setting, the DateTime page is displayed. | From 3f9423b088d55e89ace2e2c51b3530cf9acf175b Mon Sep 17 00:00:00 2001 From: NagaCSC Date: Mon, 13 Jan 2020 14:37:23 -0800 Subject: [PATCH 010/177] Pre-requisite list update for AADJ SSO - VPN solution or network infra in place to reach your on-prem DC --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index 9874fcd53a..1c88bb95cf 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -33,6 +33,7 @@ Before adding Azure Active Directory (Azure AD) joined devices to your existing - Certificate Revocation List (CRL) Distribution Point (CDP) - 2016 Domain Controllers - Domain Controller certificate +- VPN solution or network infra in place to reach your on-prem DC ### Azure Active Directory Connect synchronization Azure AD join, as well as hybrid Azure AD join devices register the user's Windows Hello for Business credential with Azure. To enable on-premises authentication, the credential must be synchronized to the on-premises Active Directory, regardless whether you are using a key or a certificate. Ensure you have Azure AD Connect installed and functioning properly. To learn more about Azure AD Connect, read [Integrate your on-premises directories with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnect). From 159aa36e327b3152939f48b455a95832099ad07a Mon Sep 17 00:00:00 2001 From: NagaCSC Date: Tue, 14 Jan 2020 07:35:59 -0800 Subject: [PATCH 011/177] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md looks good to me Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index 1c88bb95cf..c13bde0a85 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -33,7 +33,7 @@ Before adding Azure Active Directory (Azure AD) joined devices to your existing - Certificate Revocation List (CRL) Distribution Point (CDP) - 2016 Domain Controllers - Domain Controller certificate -- VPN solution or network infra in place to reach your on-prem DC +- VPN solution or network infrastructure in place to reach your on-premises domain controller ### Azure Active Directory Connect synchronization Azure AD join, as well as hybrid Azure AD join devices register the user's Windows Hello for Business credential with Azure. To enable on-premises authentication, the credential must be synchronized to the on-premises Active Directory, regardless whether you are using a key or a certificate. Ensure you have Azure AD Connect installed and functioning properly. To learn more about Azure AD Connect, read [Integrate your on-premises directories with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnect). @@ -338,4 +338,3 @@ If you plan on using certificates for on-premises single-sign on, perform the ad - From 58d2af391d8bac8ac12d53bbd9bd9654d43fad32 Mon Sep 17 00:00:00 2001 From: NagaCSC Date: Wed, 15 Jan 2020 12:39:11 -0800 Subject: [PATCH 012/177] hello-hybrid-aadj-sso updated pre-requisite as suggested --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index f4fe5b9d04..f5b585b4de 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -33,7 +33,7 @@ Before adding Azure Active Directory (Azure AD) joined devices to your existing - Certificate Revocation List (CRL) Distribution Point (CDP) - 2016 Domain Controllers - Domain Controller certificate -- VPN solution or network infrastructure in place to reach your on-premises domain controller +- Network infrastructure in place to reach your on-premises domain controller. If machines are external, This can be achieved using any VPN solution ### Azure Active Directory Connect synchronization Azure AD join, as well as hybrid Azure AD join devices register the user's Windows Hello for Business credential with Azure. To enable on-premises authentication, the credential must be synchronized to the on-premises Active Directory, regardless whether you are using a key or a certificate. Ensure you have Azure AD Connect installed and functioning properly. To learn more about Azure AD Connect, read [Integrate your on-premises directories with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnect). From 97d3adfddcdfc54057dd800af518bd69eec7d134 Mon Sep 17 00:00:00 2001 From: NagaCSC Date: Wed, 15 Jan 2020 15:35:16 -0800 Subject: [PATCH 013/177] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md looks good Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index f5b585b4de..60ec925701 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -33,7 +33,7 @@ Before adding Azure Active Directory (Azure AD) joined devices to your existing - Certificate Revocation List (CRL) Distribution Point (CDP) - 2016 Domain Controllers - Domain Controller certificate -- Network infrastructure in place to reach your on-premises domain controller. If machines are external, This can be achieved using any VPN solution +- Network infrastructure in place to reach your on-premises domain controller. If the machines are external, this can be achieved using any VPN solution. ### Azure Active Directory Connect synchronization Azure AD join, as well as hybrid Azure AD join devices register the user's Windows Hello for Business credential with Azure. To enable on-premises authentication, the credential must be synchronized to the on-premises Active Directory, regardless whether you are using a key or a certificate. Ensure you have Azure AD Connect installed and functioning properly. To learn more about Azure AD Connect, read [Integrate your on-premises directories with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnect). @@ -339,4 +339,3 @@ Sign-in a workstation with access equivalent to a _domain user_. If you plan on using certificates for on-premises single-sign on, perform the additional steps in [Using Certificates for On-premises Single-sign On](hello-hybrid-aadj-sso-cert.md). - From f9fe0bacd05dec56e748025e0709036dcf2549f3 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Fri, 24 Jan 2020 09:45:35 +0500 Subject: [PATCH 014/177] Update hello-hybrid-key-whfb-settings-pki.md --- .../hello-for-business/hello-hybrid-key-whfb-settings-pki.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md index 41d11386b2..d15d87fde6 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md @@ -78,7 +78,7 @@ Sign-in a certificate authority or management workstations with _Enterprise Admi The certificate template is configured to supersede all the certificate templates provided in the certificate templates superseded templates list. However, the certificate template and the superseding of certificate templates is not active until you publish the certificate template to one or more certificate authorities. >[!NOTE] ->The Domain Controller Certificate must be present in the NTAuth store. By default, Microsoft Enterprise CAs are added to the NTAuth store. If you are using a 3rd party CA, this may not be done by default. If the Domain Controller Certificate is not present in the NTAuth store, user authentication will fail. +>The root certificate of the certification authority must be present in the NTAuth store. By default, Active Directory Certificate Authority's root certificate is added to the NTAuth store. If you are using a 3rd party CA, this may not be done by default. If the certificate authority's root certificate is not present in the NTAuth store, user authentication will fail. ### Publish Certificate Templates to a Certificate Authority From 07f51574f45853d637e9fdcfcb1cac247512cb43 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Mon, 27 Jan 2020 11:13:46 +0500 Subject: [PATCH 015/177] Update windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-key-whfb-settings-pki.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md index d15d87fde6..5ae8bfa12e 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md @@ -78,7 +78,7 @@ Sign-in a certificate authority or management workstations with _Enterprise Admi The certificate template is configured to supersede all the certificate templates provided in the certificate templates superseded templates list. However, the certificate template and the superseding of certificate templates is not active until you publish the certificate template to one or more certificate authorities. >[!NOTE] ->The root certificate of the certification authority must be present in the NTAuth store. By default, Active Directory Certificate Authority's root certificate is added to the NTAuth store. If you are using a 3rd party CA, this may not be done by default. If the certificate authority's root certificate is not present in the NTAuth store, user authentication will fail. +> The root certificate of the certification authority must be present in the NTAuth store. By default, the Active Directory Certificate Authority's root certificate is added to the NTAuth store. If you are using a 3rd party CA, this may not be done by default. If the certificate authority's root certificate is not present in the NTAuth store, user authentication will fail. ### Publish Certificate Templates to a Certificate Authority From f2652fba62274e925ba3b1774f8d00da088f28f8 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Mon, 27 Jan 2020 17:58:44 +0500 Subject: [PATCH 016/177] Update windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-key-whfb-settings-pki.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md index 5ae8bfa12e..ca0ed0fa25 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md @@ -77,7 +77,7 @@ Sign-in a certificate authority or management workstations with _Enterprise Admi The certificate template is configured to supersede all the certificate templates provided in the certificate templates superseded templates list. However, the certificate template and the superseding of certificate templates is not active until you publish the certificate template to one or more certificate authorities. ->[!NOTE] +> [!NOTE] > The root certificate of the certification authority must be present in the NTAuth store. By default, the Active Directory Certificate Authority's root certificate is added to the NTAuth store. If you are using a 3rd party CA, this may not be done by default. If the certificate authority's root certificate is not present in the NTAuth store, user authentication will fail. ### Publish Certificate Templates to a Certificate Authority From f317862090e06d629939494bd07349627e737a30 Mon Sep 17 00:00:00 2001 From: katoma2017 <48699113+katoma2017@users.noreply.github.com> Date: Fri, 31 Jan 2020 14:42:46 -0800 Subject: [PATCH 017/177] Corrected number of days progress stalled @cinglis-msft --- windows/deployment/update/update-compliance-need-attention.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/update-compliance-need-attention.md b/windows/deployment/update/update-compliance-need-attention.md index a4b940a236..66d0ac18ab 100644 --- a/windows/deployment/update/update-compliance-need-attention.md +++ b/windows/deployment/update/update-compliance-need-attention.md @@ -35,7 +35,7 @@ The different issues are broken down by Device Issues and Update Issues: * **Cancelled**: This issue occurs when a user cancels the update process. * **Rollback**: This issue occurs when a fatal error occurs during a feature update, and the device is rolled back to the previous version. * **Uninstalled**: This issue occurs when a feature update is uninstalled from a device by a user or an administrator. Note that this might not be a problem if the uninstallation was intentional, but is highlighted as it might need attention. -* **Progress stalled:** This issue occurs when an update is in progress, but has not completed over a period of 10 days. +* **Progress stalled:** This issue occurs when an update is in progress, but has not completed over a period of 7 days. Selecting any of the issues will take you to a [Log Analytics](https://docs.microsoft.com/azure/log-analytics/query-language/get-started-analytics-portal) view with all devices that have the given issue. From 9dfedafced656a65e13e646fb6ae4e2f7c0f9d2b Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 12 Feb 2020 14:17:41 -0800 Subject: [PATCH 018/177] Added 20H1 Update policy --- .../policy-configuration-service-provider.md | 4 + .../mdm/policy-csp-update.md | 77 ++++++++++++++++++- 2 files changed, 80 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 6e8652ff9c..0bd0a890e1 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -3725,6 +3725,10 @@ The following diagram shows the Policy configuration service provider in tree fo
Update/SetEDURestart
+
+ Update/TargetReleaseVersion +
+
Update/UpdateNotificationLevel
diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index 9d98a92f10..58e4f4e255 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -7,13 +7,16 @@ ms.prod: w10 ms.technology: windows author: manikadhiman ms.localizationpriority: medium -ms.date: 10/04/2019 +ms.date: 02/10/2020 ms.reviewer: manager: dansimp --- # Policy CSP - Update +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + > [!NOTE] > If the MSA service is disabled, Windows Update will no longer offer feature updates to devices running Windows 10 1709 or higher. See [Feature updates are not being offered while other updates are](https://docs.microsoft.com/windows/deployment/update/windows-update-troubleshooting#feature-updates-are-not-being-offered-while-other-updates-are). @@ -194,6 +197,9 @@ manager: dansimp
Update/SetEDURestart
+
+ Update/TargetReleaseVersion +
Update/UpdateNotificationLevel
@@ -4126,6 +4132,74 @@ The following list shows the supported values:
+ +**Update/TargetReleaseVersion** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procheck mark7
Businesscheck mark7
Enterprisecheck mark7
Educationcheck mark7
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Enables IT administrators to specify which version they would like their device(s) to move to and/or stay on until they reach end of service or reconfigure the policy. For details about different Windows 10 versions, see [Windows 10 release information](https://docs.microsoft.com/windows/release-information/). + + +ADMX Info: +- GP English name: *Select the target Feature Update version* +- GP name: *TargetReleaseVersion* +- GP element: *TargetReleaseVersionId* +- GP path: *Windows Components/Windows Update/Windows Update for Business* +- GP ADMX file name: *WindowsUpdate.admx* + + + +Value type is a string containing Windows 10 version number. For example, 1809, 1903. + + + + + + + + + +
+ **Update/UpdateNotificationLevel** @@ -4373,5 +4447,6 @@ Footnotes: - 4 - Added in Windows 10, version 1803. - 5 - Added in Windows 10, version 1809. - 6 - Added in Windows 10, version 1903. +- 7 - Added in the next major release of Windows 10. From b80d20de5fdf910ef15fccf0f96959b2f9b02e40 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 16 Feb 2020 08:04:44 +0500 Subject: [PATCH 019/177] Update windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-key-whfb-settings-pki.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md index ca0ed0fa25..ccca58029e 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md @@ -78,7 +78,7 @@ Sign-in a certificate authority or management workstations with _Enterprise Admi The certificate template is configured to supersede all the certificate templates provided in the certificate templates superseded templates list. However, the certificate template and the superseding of certificate templates is not active until you publish the certificate template to one or more certificate authorities. > [!NOTE] -> The root certificate of the certification authority must be present in the NTAuth store. By default, the Active Directory Certificate Authority's root certificate is added to the NTAuth store. If you are using a 3rd party CA, this may not be done by default. If the certificate authority's root certificate is not present in the NTAuth store, user authentication will fail. +> The domain controller's certificate must chain to a root in the NTAuth store. By default, the Active Directory Certificate Authority's root certificate is added to the NTAuth store. If you are using a third-party CA, this may not be done by default. If the domain controller certificate does not chain to a root in the NTAuth store, user authentication will fail. ### Publish Certificate Templates to a Certificate Authority From 8cc1d3858db56b901fdc6e5c0f221e03c3243066 Mon Sep 17 00:00:00 2001 From: Baard Hermansen Date: Wed, 19 Feb 2020 20:50:37 +0100 Subject: [PATCH 020/177] Update mandatory-user-profile.md Updated outdated URLs. Some markdown corrections with numbered lists, they were out of order. Took a teeny bit of liberty renaming headings. --- .../mandatory-user-profile.md | 102 ++++++++---------- 1 file changed, 44 insertions(+), 58 deletions(-) diff --git a/windows/client-management/mandatory-user-profile.md b/windows/client-management/mandatory-user-profile.md index 9d7b5546ff..35227e3c16 100644 --- a/windows/client-management/mandatory-user-profile.md +++ b/windows/client-management/mandatory-user-profile.md @@ -15,23 +15,18 @@ ms.topic: article # Create mandatory user profiles - **Applies to** -- Windows 10 +- Windows 10 +A mandatory user profile is a roaming user profile that has been pre-configured by an administrator to specify settings for users. Settings commonly defined in a mandatory profile include (but are not limited to): icons that appear on the desktop, desktop backgrounds, user preferences in Control Panel, printer selections, and more. Configuration changes made during a user's session that are normally saved to a roaming user profile are not saved when a mandatory user profile is assigned. +Mandatory user profiles are useful when standardization is important, such as on a kiosk device or in educational settings. Only system administrators can make changes to mandatory user profiles. -A mandatory user profile is a roaming user profile that has been pre-configured by an administrator to specify settings for users. Settings commonly defined in a mandatory profile include (but are not limited to): icons that appear on the desktop, desktop backgrounds, user preferences in Control Panel, printer selections, and more. Configuration changes made during a user's session that are normally saved to a roaming user profile are not saved when a mandatory user profile is assigned. - -Mandatory user profiles are useful when standardization is important, such as on a kiosk device or in educational settings. Only system administrators can make changes to mandatory user profiles. - -When the server that stores the mandatory profile is unavailable, such as when the user is not connected to the corporate network, users with mandatory profiles can sign in with the locally cached copy of the mandatory profile, if one exists. Otherwise, the user will be signed in with a temporary profile. +When the server that stores the mandatory profile is unavailable, such as when the user is not connected to the corporate network, users with mandatory profiles can sign in with the locally cached copy of the mandatory profile, if one exists. Otherwise, the user will be signed in with a temporary profile. User profiles become mandatory profiles when the administrator renames the NTuser.dat file (the registry hive) of each user's profile in the file system of the profile server from `NTuser.dat` to `NTuser.man`. The `.man` extension causes the user profile to be a read-only profile. - - ## Profile extension for each Windows version The name of the folder in which you store the mandatory profile must use the correct extension for the operating system it will be applied to. The following table lists the correct extension for each operating system version. @@ -45,121 +40,112 @@ The name of the folder in which you store the mandatory profile must use the cor | Windows 10, versions 1507 and 1511 | N/A | v5 | | Windows 10, versions 1607, 1703, 1709, 1803, 1809 and 1903 | Windows Server 2016 and Windows Server 2019 | v6 | -For more information, see [Deploy Roaming User Profiles, Appendix B](https://technet.microsoft.com/library/jj649079.aspx) and [Roaming user profiles versioning in Windows 10 and Windows Server Technical Preview](https://support.microsoft.com/kb/3056198). +For more information, see [Deploy Roaming User Profiles, Appendix B](https://docs.microsoft.com/windows-server/storage/folder-redirection/deploy-roaming-user-profiles#appendix-b-profile-version-reference-information) and [Roaming user profiles versioning in Windows 10 and Windows Server Technical Preview](https://support.microsoft.com/kb/3056198). -## How to create a mandatory user profile +## Mandatory user profile First, you create a default user profile with the customizations that you want, run Sysprep with CopyProfile set to **True** in the answer file, copy the customized default user profile to a network share, and then you rename the profile to make it mandatory. -**To create a default user profile** +### How to create a default user profile 1. Sign in to a computer running Windows 10 as a member of the local Administrator group. Do not use a domain account. > [!NOTE] > Use a lab or extra computer running a clean installation of Windows 10 to create a default user profile. Do not use a computer that is required for business (that is, a production computer). This process removes all domain accounts from the computer, including user profile folders. -2. Configure the computer settings that you want to include in the user profile. For example, you can configure settings for the desktop background, uninstall default apps, install line-of-business apps, and so on. +1. Configure the computer settings that you want to include in the user profile. For example, you can configure settings for the desktop background, uninstall default apps, install line-of-business apps, and so on. - >[!NOTE] - >Unlike previous versions of Windows, you cannot apply a Start and taskbar layout using a mandatory profile. For alternative methods for customizing the Start menu and taskbar, see [Related topics](#related-topics). + > [!NOTE] + > Unlike previous versions of Windows, you cannot apply a Start and taskbar layout using a mandatory profile. For alternative methods for customizing the Start menu and taskbar, see [Related topics](#related-topics). -3. [Create an answer file (Unattend.xml)](https://msdn.microsoft.com/library/windows/hardware/dn915085.aspx) that sets the [CopyProfile](https://msdn.microsoft.com/library/windows/hardware/dn922656.aspx) parameter to **True**. The CopyProfile parameter causes Sysprep to copy the currently signed-on user’s profile folder to the default user profile. You can use [Windows System Image Manager](https://msdn.microsoft.com/library/windows/hardware/dn922445.aspx), which is part of the Windows Assessment and Deployment Kit (ADK) to create the Unattend.xml file. +1. [Create an answer file (Unattend.xml)](https://docs.microsoft.com/windows-hardware/customize/desktop/wsim/create-or-open-an-answer-file) that sets the [CopyProfile](https://docs.microsoft.com/windows-hardware/customize/desktop/unattend/microsoft-windows-shell-setup-copyprofile) parameter to **True**. The CopyProfile parameter causes Sysprep to copy the currently signed-on user’s profile folder to the default user profile. You can use [Windows System Image Manager](https://docs.microsoft.com/windows-hardware/customize/desktop/wsim/windows-system-image-manager-technical-reference), which is part of the Windows Assessment and Deployment Kit (ADK) to create the Unattend.xml file. -3. Uninstall any application you do not need or want from the PC. For examples on how to uninstall Windows 10 Application see [Remove-AppxProvisionedPackage](https://docs.microsoft.com/powershell/module/dism/remove-appxprovisionedpackage?view=winserver2012-ps). For a list of uninstallable applications, see [Understand the different apps included in Windows 10](https://docs.microsoft.com/windows/application-management/apps-in-windows-10). +1. Uninstall any application you do not need or want from the PC. For examples on how to uninstall Windows 10 Application see [Remove-AppxProvisionedPackage](https://docs.microsoft.com/powershell/module/dism/remove-appxprovisionedpackage?view=win10-ps). For a list of uninstallable applications, see [Understand the different apps included in Windows 10](https://docs.microsoft.com/windows/application-management/apps-in-windows-10). + > [!NOTE] + > It is highly recommended to uninstall unwanted or unneeded apps as it will speed up user sign-in times. - >[!NOTE] - >It is highly recommended to uninstall unwanted or unneeded apps as it will speed up user sign-in times. +1. At a command prompt, type the following command and press **ENTER**. -3. At a command prompt, type the following command and press **ENTER**. + ```dos + sysprep /oobe /reboot /generalize /unattend:unattend.xml + ``` - `sysprep /oobe /reboot /generalize /unattend:unattend.xml` - - (Sysprep.exe is located at: C:\Windows\System32\sysprep. By default, Sysprep looks for unattend.xml in this same folder.) + (Sysprep.exe is located at: C:\\Windows\\System32\\sysprep. By default, Sysprep looks for unattend.xml in this same folder.) > [!TIP] - > If you receive an error message that says "Sysprep was not able to validate your Windows installation", open %WINDIR%\System32\Sysprep\Panther\setupact.log and look for an entry like the following: - > + > If you receive an error message that says "Sysprep was not able to validate your Windows installation", open %WINDIR%\\System32\\Sysprep\\Panther\\setupact.log and look for an entry like the following: + > > ![Microsoft Bing Translator package](images/sysprep-error.png) - > - > Use the [Remove-AppxProvisionedPackage](https://technet.microsoft.com/library/dn376476%28v=wps.620%29.aspx) and [Remove-AppxPackage -AllUsers](https://docs.microsoft.com/powershell/module/appx/remove-appxpackage?view=win10-ps) cmdlet in Windows PowerShell to uninstall the app that is listed in the log. + > + > Use the [Remove-AppxProvisionedPackage](https://docs.microsoft.com/powershell/module/dism/remove-appxprovisionedpackage?view=win10-ps) and [Remove-AppxPackage -AllUsers](https://docs.microsoft.com/powershell/module/appx/remove-appxpackage?view=win10-ps) cmdlet in Windows PowerShell to uninstall the app that is listed in the log. -4. The sysprep process reboots the PC and starts at the first-run experience screen. Complete the set up, and then sign in to the computer using an account that has local administrator privileges. +1. The sysprep process reboots the PC and starts at the first-run experience screen. Complete the set up, and then sign in to the computer using an account that has local administrator privileges. -5. Right-click Start, go to **Control Panel** (view by large or small icons) > **System** > **Advanced system settings**, and click **Settings** in the **User Profiles** section. +1. Right-click Start, go to **Control Panel** (view by large or small icons) > **System** > **Advanced system settings**, and click **Settings** in the **User Profiles** section. -6. In **User Profiles**, click **Default Profile**, and then click **Copy To**. +1. In **User Profiles**, click **Default Profile**, and then click **Copy To**. ![Example of UI](images/copy-to.png) -7. In **Copy To**, under **Permitted to use**, click **Change**. +1. In **Copy To**, under **Permitted to use**, click **Change**. ![Example of UI](images/copy-to-change.png) -8. In **Select User or Group**, in the **Enter the object name to select** field, type `everyone`, click **Check Names**, and then click **OK**. +1. In **Select User or Group**, in the **Enter the object name to select** field, type `everyone`, click **Check Names**, and then click **OK**. -9. In **Copy To**, in the **Copy profile to** field, enter the path and folder name where you want to store the mandatory profile. The folder name must use the correct [extension](#extension) for the operating system version. For example, the folder name must end with “.v6” to identify it as a user profile folder for Windows 10, version 1607. +1. In **Copy To**, in the **Copy profile to** field, enter the path and folder name where you want to store the mandatory profile. The folder name must use the correct [extension](#profile-extension-for-each-windows-version) for the operating system version. For example, the folder name must end with ".v6" to identify it as a user profile folder for Windows 10, version 1607. - If the device is joined to the domain and you are signed in with an account that has permissions to write to a shared folder on the network, you can enter the shared folder path. - - If the device is not joined to the domain, you can save the profile locally and then copy it to the shared folder location. + - If the device is not joined to the domain, you can save the profile locally and then copy it to the shared folder location. - ![Example of UI](images/copy-to-path.png) + ![Example of UI](images/copy-to-path.png) -10. Click **OK** to copy the default user profile. +1. Click **OK** to copy the default user profile. +### How to make the user profile mandatory -**To make the user profile mandatory** +1. In File Explorer, open the folder where you stored the copy of the profile. + > [!NOTE] + > If the folder is not displayed, click **View** > **Options** > **Change folder and search options**. On the **View** tab, select **Show hidden files and folders**, clear **Hide protected operating system files**, click **Yes** to confirm that you want to show operating system files, and then click **OK** to save your changes. -3. In File Explorer, open the folder where you stored the copy of the profile. +1. Rename `Ntuser.dat` to `Ntuser.man`. - >[!NOTE] - >If the folder is not displayed, click **View** > **Options** > **Change folder and search options**. On the **View** tab, select **Show hidden files and folders**, clear **Hide protected operating system files**, click **Yes** to confirm that you want to show operating system files, and then click **OK** to save your changes. - -4. Rename `Ntuser.dat` to `Ntuser.man`. - -## How to apply a mandatory user profile to users +## Apply a mandatory user profile to users In a domain, you modify properties for the user account to point to the mandatory profile in a shared folder residing on the server. -**To apply a mandatory user profile to users** +### How to apply a mandatory user profile to users 1. Open **Active Directory Users and Computers** (dsa.msc). -2. Navigate to the user account that you will assign the mandatory profile to. +1. Navigate to the user account that you will assign the mandatory profile to. -3. Right-click the user name and open **Properties**. +1. Right-click the user name and open **Properties**. -4. On the **Profile** tab, in the **Profile path** field, enter the path to the shared folder without the extension. For example, if the folder name is \\\\*server*\profile.v6, you would enter \\\\*server*\profile. +1. On the **Profile** tab, in the **Profile path** field, enter the path to the shared folder without the extension. For example, if the folder name is \\\\*server*\\profile.v6, you would enter \\\\*server*\\profile. -5. Click **OK**. +1. Click **OK**. It may take some time for this change to replicate to all domain controllers. - - ## Apply policies to improve sign-in time When a user is configured with a mandatory profile, Windows 10 starts as though it was the first sign-in each time the user signs in. To improve sign-in performance for users with mandatory user profiles, apply the Group Policy settings shown in the following table. (The table shows which operating system versions each policy setting can apply to.) - | Group Policy setting | Windows 10 | Windows Server 2016 | Windows 8.1 | Windows Server 2012 | | --- | --- | --- | --- | --- | | Computer Configuration > Administrative Templates > System > Logon > **Show first sign-in animation** = Disabled | ![supported](images/checkmark.png) | ![supported](images/checkmark.png) | ![supported](images/checkmark.png) | ![supported](images/checkmark.png) | | Computer Configuration > Administrative Templates > Windows Components > Search > **Allow Cortana** = Disabled | ![supported](images/checkmark.png) | ![supported](images/checkmark.png) | ![not supported](images/crossmark.png) | ![not supported](images/crossmark.png) | | Computer Configuration > Administrative Templates > Windows Components > Cloud Content > **Turn off Microsoft consumer experience** = Enabled | ![supported](images/checkmark.png) | ![not supported](images/crossmark.png) | ![not supported](images/crossmark.png) | ![not supported](images/crossmark.png) | -> [!Note] +> [!NOTE] > The Group Policy settings above can be applied in Windows 10 Professional edition. - - - - ## Related topics - [Manage Windows 10 Start layout and taskbar options](/windows/configuration/windows-10-start-layout-options-and-policies) - [Lock down Windows 10 to specific apps](/windows/configuration/lock-down-windows-10-to-specific-apps) - [Windows Spotlight on the lock screen](/windows/configuration/windows-spotlight) - [Configure devices without MDM](/windows/configuration/configure-devices-without-mdm) - From 5d5ab1d31aacf90851ba1d1ac36a93f8c8764070 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Tue, 25 Feb 2020 13:00:02 -0800 Subject: [PATCH 021/177] Update devices/hololens/holographic-store-apps.md Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- devices/hololens/holographic-store-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/holographic-store-apps.md b/devices/hololens/holographic-store-apps.md index 662debba9d..4b3b4ca35d 100644 --- a/devices/hololens/holographic-store-apps.md +++ b/devices/hololens/holographic-store-apps.md @@ -33,7 +33,7 @@ Open the Microsoft Store from the **Start** menu. Then browse for apps and games ## Install apps -To download apps, you'll need to be signed in with a Microsoft account. Some apps are free and can be downloaded right away. Apps that require a purchase require you to be signed into the Store with your Microsoft account and have a valid payment method. +To download apps, you'll need to be signed in with a Microsoft account. Some apps are free and can be downloaded right away. Apps that require a purchase require you to be signed in to the Store with your Microsoft account and have a valid payment method. >[!NOTE] >The account you can use on Microsoft Store does not have to be the same as the account you are signed in with. If you are using a Work or School account on your HoloLens then you'll need to sign in with your personal account in the Store App to make a purchase. From b08f5c8339cb40daad1b78301f23d3857301f47b Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Tue, 25 Feb 2020 13:00:44 -0800 Subject: [PATCH 022/177] Update devices/hololens/holographic-store-apps.md Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- devices/hololens/holographic-store-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/holographic-store-apps.md b/devices/hololens/holographic-store-apps.md index 4b3b4ca35d..3f5608e0fa 100644 --- a/devices/hololens/holographic-store-apps.md +++ b/devices/hololens/holographic-store-apps.md @@ -41,7 +41,7 @@ To set up a payment method, go to [account.microsoft.com](https://account.micros 1. To open the [**Start** menu](holographic-home.md), perform a the [Start gesture](https://docs.microsoft.com/hololens/hololens2-basic-usage#start-gesture) or [bloom](hololens1-basic-usage.md) gesture on HoloLens 1. 1. Select the Store app. Once the Store app opens: - 1. Use the search bar to look for any desired application. + 1. Use the search bar to look for any desired applications. 1. Select from one of curated categories to find essential apps or apps made specifically for HoloLens. 1. On the top right of the Store app select the **"..."** button and select **My Library**, to view any perviously purchased apps. 1. Select **Get** or **Install** on the application's page (a purchase may be required). From fd06f176031323ce628def96545ae8862d6c395f Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Tue, 25 Feb 2020 13:00:57 -0800 Subject: [PATCH 023/177] Update devices/hololens/holographic-store-apps.md Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- devices/hololens/holographic-store-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/holographic-store-apps.md b/devices/hololens/holographic-store-apps.md index 3f5608e0fa..a933994827 100644 --- a/devices/hololens/holographic-store-apps.md +++ b/devices/hololens/holographic-store-apps.md @@ -39,7 +39,7 @@ To download apps, you'll need to be signed in with a Microsoft account. Some app To set up a payment method, go to [account.microsoft.com](https://account.microsoft.com/) and select **Payment & billing** > **Payment options** > **Add a payment option**. -1. To open the [**Start** menu](holographic-home.md), perform a the [Start gesture](https://docs.microsoft.com/hololens/hololens2-basic-usage#start-gesture) or [bloom](hololens1-basic-usage.md) gesture on HoloLens 1. +1. To open the [**Start** menu](holographic-home.md), perform a [Start gesture](https://docs.microsoft.com/hololens/hololens2-basic-usage#start-gesture) or [bloom](hololens1-basic-usage.md) gesture on HoloLens 1. 1. Select the Store app. Once the Store app opens: 1. Use the search bar to look for any desired applications. 1. Select from one of curated categories to find essential apps or apps made specifically for HoloLens. From ca1f8da04d47b65c3bcf78c465c626a54ca165ce Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Tue, 25 Feb 2020 13:01:18 -0800 Subject: [PATCH 024/177] Update devices/hololens/holographic-store-apps.md Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- devices/hololens/holographic-store-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/holographic-store-apps.md b/devices/hololens/holographic-store-apps.md index a933994827..1cc434b348 100644 --- a/devices/hololens/holographic-store-apps.md +++ b/devices/hololens/holographic-store-apps.md @@ -43,7 +43,7 @@ To set up a payment method, go to [account.microsoft.com](https://account.micros 1. Select the Store app. Once the Store app opens: 1. Use the search bar to look for any desired applications. 1. Select from one of curated categories to find essential apps or apps made specifically for HoloLens. - 1. On the top right of the Store app select the **"..."** button and select **My Library**, to view any perviously purchased apps. + 1. On the top right of the Store app, select the **"..."** button and then select **My Library** to view any previously purchased apps. 1. Select **Get** or **Install** on the application's page (a purchase may be required). ## Uninstall apps From 398e476acfefa2b85f07178b6ad3fbe7c44008fd Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Tue, 25 Feb 2020 13:01:39 -0800 Subject: [PATCH 025/177] Update devices/hololens/holographic-store-apps.md Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- devices/hololens/holographic-store-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/holographic-store-apps.md b/devices/hololens/holographic-store-apps.md index 1cc434b348..a2156cbef0 100644 --- a/devices/hololens/holographic-store-apps.md +++ b/devices/hololens/holographic-store-apps.md @@ -42,7 +42,7 @@ To set up a payment method, go to [account.microsoft.com](https://account.micros 1. To open the [**Start** menu](holographic-home.md), perform a [Start gesture](https://docs.microsoft.com/hololens/hololens2-basic-usage#start-gesture) or [bloom](hololens1-basic-usage.md) gesture on HoloLens 1. 1. Select the Store app. Once the Store app opens: 1. Use the search bar to look for any desired applications. - 1. Select from one of curated categories to find essential apps or apps made specifically for HoloLens. + 1. Select essential apps or apps made specifically for HoloLens from one of the curated categories. 1. On the top right of the Store app, select the **"..."** button and then select **My Library** to view any previously purchased apps. 1. Select **Get** or **Install** on the application's page (a purchase may be required). From 74c9a3daa7444710f92e9e9a810c281d5531ca67 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Tue, 25 Feb 2020 13:02:55 -0800 Subject: [PATCH 026/177] Update devices/hololens/holographic-store-apps.md Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- devices/hololens/holographic-store-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/holographic-store-apps.md b/devices/hololens/holographic-store-apps.md index a2156cbef0..fcab543566 100644 --- a/devices/hololens/holographic-store-apps.md +++ b/devices/hololens/holographic-store-apps.md @@ -34,7 +34,7 @@ Open the Microsoft Store from the **Start** menu. Then browse for apps and games ## Install apps To download apps, you'll need to be signed in with a Microsoft account. Some apps are free and can be downloaded right away. Apps that require a purchase require you to be signed in to the Store with your Microsoft account and have a valid payment method. ->[!NOTE] +> [!NOTE] >The account you can use on Microsoft Store does not have to be the same as the account you are signed in with. If you are using a Work or School account on your HoloLens then you'll need to sign in with your personal account in the Store App to make a purchase. To set up a payment method, go to [account.microsoft.com](https://account.microsoft.com/) and select **Payment & billing** > **Payment options** > **Add a payment option**. From bff640dc2fcae934d984217bd73e635488685693 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Tue, 25 Feb 2020 13:03:42 -0800 Subject: [PATCH 027/177] Update devices/hololens/holographic-store-apps.md Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- devices/hololens/holographic-store-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/holographic-store-apps.md b/devices/hololens/holographic-store-apps.md index fcab543566..c154c0efc2 100644 --- a/devices/hololens/holographic-store-apps.md +++ b/devices/hololens/holographic-store-apps.md @@ -35,7 +35,7 @@ Open the Microsoft Store from the **Start** menu. Then browse for apps and games To download apps, you'll need to be signed in with a Microsoft account. Some apps are free and can be downloaded right away. Apps that require a purchase require you to be signed in to the Store with your Microsoft account and have a valid payment method. > [!NOTE] ->The account you can use on Microsoft Store does not have to be the same as the account you are signed in with. If you are using a Work or School account on your HoloLens then you'll need to sign in with your personal account in the Store App to make a purchase. +> The account you use on Microsoft Store does not have to be the same as the account you are signed in with. If you are using a Work or School account on your HoloLens then you'll need to sign in with your personal account in the Store App to make a purchase. To set up a payment method, go to [account.microsoft.com](https://account.microsoft.com/) and select **Payment & billing** > **Payment options** > **Add a payment option**. From e23e41ca1db5ff7f6551c448e7560653c40670f3 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Wed, 26 Feb 2020 08:36:23 -0800 Subject: [PATCH 028/177] Update devices/hololens/holographic-store-apps.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- devices/hololens/holographic-store-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/holographic-store-apps.md b/devices/hololens/holographic-store-apps.md index c154c0efc2..9a8d59a9c7 100644 --- a/devices/hololens/holographic-store-apps.md +++ b/devices/hololens/holographic-store-apps.md @@ -52,7 +52,7 @@ There are two ways to uninstall applications. You can uninstall applications th ### Uninstall from the Start menu -On the **Start** menu or in the **All apps** list, browse to the app. Air Tap and hold until the menu appears, then select **Uninstall**. +On the **Start** menu or in the **All apps** list, browse to the app. Air tap and hold until the menu appears, then select **Uninstall**. ### Uninstall from the Microsoft Store From 32de7978711d1d51f2ba40129313368c61857ac9 Mon Sep 17 00:00:00 2001 From: NagaCSC Date: Thu, 5 Mar 2020 11:36:31 -0800 Subject: [PATCH 029/177] Subject update we have had cases coming, since we have the word optional, Customer leaves subject empty and PIN authentication fails as DC -KDC service can not accept its own DC certificate issued by internal CA. previous line Optionally, the certificate Subject section should contain the directory path of the server object (the distinguished name). corrected The certificate Subject section should contain the directory path of the server object (the distinguished name). --- .../hello-for-business/hello-hybrid-key-trust-prereqs.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs.md index d2b1de480f..527cc94cc9 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs.md @@ -63,7 +63,7 @@ Key trust deployments do not need client issued certificates for on-premises aut The minimum required enterprise certificate authority that can be used with Windows Hello for Business is Windows Server 2012, but you can also use a third-party enterprise certification authority. The detailed requirements for the Domain Controller certificate are shown below. * The certificate must have a Certificate Revocation List (CRL) distribution point extension that points to a valid CRL. -* Optionally, the certificate Subject section should contain the directory path of the server object (the distinguished name). +* The certificate Subject section should contain the directory path of the server object (the distinguished name). * The certificate Key Usage section must contain Digital Signature and Key Encipherment. * Optionally, the certificate Basic Constraints section should contain: [Subject Type=End Entity, Path Length Constraint=None]. * The certificate Enhanced Key Usage section must contain Client Authentication (1.3.6.1.5.5.7.3.2), Server Authentication (1.3.6.1.5.5.7.3.1), and KDC Authentication (1.3.6.1.5.2.3.5). From c8df2c308b1a5316218a0212b79d8be47ae9df8c Mon Sep 17 00:00:00 2001 From: Baard Hermansen Date: Sun, 15 Mar 2020 14:53:25 +0100 Subject: [PATCH 030/177] Update how-to-install-the-app-v-databases-and-convert-the-associated-security-identifiers--by-using-powershell51.md Removed extraneous characters. Removed extra \\ from PS code. Added code block ending. Corrected layout of examples in last numbered point. --- ...rity-identifiers--by-using-powershell51.md | 35 +++++++++---------- 1 file changed, 17 insertions(+), 18 deletions(-) diff --git a/mdop/appv-v5/how-to-install-the-app-v-databases-and-convert-the-associated-security-identifiers--by-using-powershell51.md b/mdop/appv-v5/how-to-install-the-app-v-databases-and-convert-the-associated-security-identifiers--by-using-powershell51.md index ed4ef04eb0..152d31ca72 100644 --- a/mdop/appv-v5/how-to-install-the-app-v-databases-and-convert-the-associated-security-identifiers--by-using-powershell51.md +++ b/mdop/appv-v5/how-to-install-the-app-v-databases-and-convert-the-associated-security-identifiers--by-using-powershell51.md @@ -13,19 +13,17 @@ ms.prod: w10 ms.date: 06/16/2016 --- - # How to Install the App-V Databases and Convert the Associated Security Identifiers by Using PowerShell - Use the following PowerShell procedure to convert any number of Active Directory Domain Services (AD DS) user or machine accounts into formatted Security Identifiers (SIDs) both in the standard format and in the hexadecimal format used by Microsoft SQL Server when running SQL scripts. Before attempting this procedure, you should read and understand the information and examples displayed in the following list: -- **.INPUTS** – The account or accounts used to convert to SID format. This can be a single account name or an array of account names. +- **.INPUTS** – The account or accounts used to convert to SID format. This can be a single account name or an array of account names. -- **.OUTPUTS** - A list of account names with the corresponding SID in standard and hexadecimal formats. +- **.OUTPUTS** - A list of account names with the corresponding SID in standard and hexadecimal formats. -- **Examples** - +- **Examples** - **.\\ConvertToSID.ps1 DOMAIN\\user\_account1 DOMAIN\\machine\_account1$ DOMAIN\\user\_account2 | Format-List**. @@ -33,13 +31,10 @@ Before attempting this procedure, you should read and understand the information **.\\ConvertToSID.ps1 $accountsArray | Write-Output -FilePath .\\SIDs.txt -Width 200** - \#> - -**To convert any number of Active Directory Domain Services (AD DS) user or machine accounts into formatted Security Identifiers (SIDs)** +## To convert any number of Active Directory Domain Services (AD DS) user or machine accounts into formatted Security Identifiers (SIDs) 1. Copy the following script into a text editor and save it as a PowerShell script file, for example **ConvertToSIDs.ps1**. - -2. To open a PowerShell console click **Start** and type **PowerShell**. Right-click **Windows PowerShell** and select **Run as Administrator**. +1. To open a PowerShell console click **Start** and type **PowerShell**. Right-click **Windows PowerShell** and select **Run as Administrator**. ```powershell <# @@ -61,7 +56,7 @@ Before attempting this procedure, you should read and understand the information function ConvertSIDToHexFormat { - param(\[System.Security.Principal.SecurityIdentifier\]$sidToConvert) + param([System.Security.Principal.SecurityIdentifier]$sidToConvert) $sb = New-Object System.Text.StringBuilder [int] $binLength = $sidToConvert.BinaryLength @@ -79,7 +74,7 @@ Before attempting this procedure, you should read and understand the information [string]::Format("{0}====== Description ======{0}{0}" + " Converts any number of user or machine account names to string and hexadecimal SIDs.{0}" + - " Pass the account(s) as space separated command line parameters. (For example 'ConvertToSID.exe DOMAIN\\Account1 DOMAIN\\Account2 ...'){0}" + + " Pass the account(s) as space separated command line parameters. (For example 'ConvertToSID.ps1 DOMAIN\Account1 DOMAIN\Account2 ...'){0}" + " The output is written to the console in the format 'Account name SID as string SID as hexadecimal'{0}" + " And can be written out to a file using standard PowerShell redirection{0}" + " Please specify user accounts in the format 'DOMAIN\username'{0}" + @@ -131,17 +126,21 @@ Before attempting this procedure, you should read and understand the information Write-Output $SIDs } } -3. Run the script you saved in step one of this procedure passing the accounts to convert as arguments. + ``` + +1. Run the script you saved in step one of this procedure passing the accounts to convert as arguments. For example, - **.\\ConvertToSID.ps1 DOMAIN\\user\_account1 DOMAIN\\machine\_account1$ DOMAIN\\user\_account2 | Format-List” or “$accountsArray = @("DOMAIN\\user\_account1", "DOMAIN\\machine\_account1$", "DOMAIN\_user\_account2")** + **.\\ConvertToSID.ps1 DOMAIN\\user\_account1 DOMAIN\\machine\_account1$ DOMAIN\\user\_account2 | Format-List** + + or + + **$accountsArray = @("DOMAIN\\user\_account1", "DOMAIN\\machine\_account1$", "DOMAIN\_user\_account2")** + **.\\ConvertToSID.ps1 $accountsArray | Write-Output -FilePath .\\SIDs.txt -Width 200** - **.\\ConvertToSID.ps1 $accountsArray | Write-Output -FilePath .\\SIDs.txt -Width 200”** - - **Got a suggestion for App-V**? Add or vote on suggestions [here](http://appv.uservoice.com/forums/280448-microsoft-application-virtualization). **Got an App-V issue?** Use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopappv). +**Got an App-V issue?** Use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopappv). ## Related topics - [Administering App-V 5.1 by Using PowerShell](administering-app-v-51-by-using-powershell.md) From 3b4dd8fa8d3a868f79587e39f3a4d0ad7229de5e Mon Sep 17 00:00:00 2001 From: Baard Hermansen Date: Sun, 15 Mar 2020 14:57:20 +0100 Subject: [PATCH 031/177] Update how-to-install-the-management-and-reporting-databases-on-separate-computers-from-the-management-and-reporting-services51.md Added markdown for Notes. Removed characters that created formatting errors. Removed dead URL. --- ...the-management-and-reporting-services51.md | 118 ++++++------------ 1 file changed, 39 insertions(+), 79 deletions(-) diff --git a/mdop/appv-v5/how-to-install-the-management-and-reporting-databases-on-separate-computers-from-the-management-and-reporting-services51.md b/mdop/appv-v5/how-to-install-the-management-and-reporting-databases-on-separate-computers-from-the-management-and-reporting-services51.md index 77c7a3fd6a..56be1281a9 100644 --- a/mdop/appv-v5/how-to-install-the-management-and-reporting-databases-on-separate-computers-from-the-management-and-reporting-services51.md +++ b/mdop/appv-v5/how-to-install-the-management-and-reporting-databases-on-separate-computers-from-the-management-and-reporting-services51.md @@ -13,114 +13,74 @@ ms.prod: w10 ms.date: 06/16/2016 --- - # How to Install the Management and Reporting Databases on Separate Computers from the Management and Reporting Services - Use the following procedure to install the database server and management server on different computers. The computer you plan to install the database server on must be running a supported version of Microsoft SQL or the installation will fail. -**Note** -After you complete the deployment, the **Microsoft SQL Server name**, **instance name** and **database name** will be required by the administrator installing the service to be able to connect to these databases. +> [!NOTE] +> After you complete the deployment, the **Microsoft SQL Server name**, **instance name** and **database name** will be required by the administrator installing the service to be able to connect to these databases. +## To install the management database and the management server on separate computers +1. Copy the App-V 5.1 server installation files to the computer on which you want to install it on. To start the App-V 5.1 server installation right-click and run **appv\_server\_setup.exe** as an administrator. Click **Install**. +1. On the **Getting Started** page, review and accept the license terms, and click **Next**. +1. On the **Use Microsoft Update to help keep your computer secure and up-to-date** page, to enable Microsoft updates, select **Use Microsoft Update when I check for updates (recommended).** To disable Microsoft updates, select **I don't want to use Microsoft Update**. Click **Next**. +1. On the **Feature Selection** page, select the components you want to install by selecting the **Management Server Database** checkbox and click **Next**. +1. On the **Installation Location** page, accept the default location and click **Next**. +1. On the initial **Create New Management Server Database page**, accept the default selections if appropriate, and click **Next**. -**To install the management database and the management server on separate computers** - -1. Copy the App-V 5.1 server installation files to the computer on which you want to install it on. To start the App-V 5.1 server installation right-click and run **appv\_server\_setup.exe** as an administrator. Click **Install**. - -2. On the **Getting Started** page, review and accept the license terms, and click **Next**. - -3. On the **Use Microsoft Update to help keep your computer secure and up-to-date** page, to enable Microsoft updates, select **Use Microsoft Update when I check for updates (recommended).** To disable Microsoft updates, select **I don’t want to use Microsoft Update**. Click **Next**. - -4. On the **Feature Selection** page, select the components you want to install by selecting the **Management Server Database** checkbox and click **Next**. - -5. On the **Installation Location** page, accept the default location and click **Next**. - -6. On the initial **Create New Management Server Database page**, accept the default selections if appropriate, and click **Next**. - - If you are using a custom SQL Server instance, then select **Use a custom instance** and type the name of the instance. - + If you are using a custom SQL Server instance, then select **Use a custom instance** and type the name of the instance.\ If you are using a custom database name, then select **Custom configuration** and type the database name. -7. On the next **Create New Management Server Database** page, select **Use a remote computer**, and type the remote machine account using the following format: **Domain\\MachineAccount**. +1. On the next **Create New Management Server Database** page, select **Use a remote computer**, and type the remote machine account using the following format: **Domain\\MachineAccount**. - **Note** - If you plan to deploy the management server on the same computer you must select **Use this local computer**. + > [!NOTE] + > If you plan to deploy the management server on the same computer you must select **Use this local computer**. +1. Specify the user name for the management server **Install Administrator** using the following format: **Domain\\AdministratorLoginName**. Click **Next**. +1. To start the installation, click **Install**. +## To install the reporting database and the reporting server on separate computers -~~~ -Specify the user name for the management server **Install Administrator** using the following format: **Domain\\AdministratorLoginName**. Click **Next**. -~~~ - -8. To start the installation, click **Install**. - -**To install the reporting database and the reporting server on separate computers** - -1. Copy the App-V 5.1 server installation files to the computer on which you want to install it on. To start the App-V 5.1 server installation right-click and run **appv\_server\_setup.exe** as an administrator. Click **Install**. - -2. On the **Getting Started** page, review and accept the license terms, and click **Next**. - -3. On the **Use Microsoft Update to help keep your computer secure and up-to-date** page, to enable Microsoft updates, select **Use Microsoft Update when I check for updates (recommended).** To disable Microsoft updates, select **I don’t want to use Microsoft Update**. Click **Next**. - -4. On the **Feature Selection** page, select the components you want to install by selecting the **Reporting Server Database** checkbox and click **Next**. - -5. On the **Installation Location** page, accept the default location and click **Next**. - -6. On the initial **Create New Reporting Server Database** page, accept the default selections if appropriate, and click **Next**. +1. Copy the App-V 5.1 server installation files to the computer on which you want to install it on. To start the App-V 5.1 server installation right-click and run **appv\_server\_setup.exe** as an administrator. Click **Install**. +1. On the **Getting Started** page, review and accept the license terms, and click **Next**. +1. On the **Use Microsoft Update to help keep your computer secure and up-to-date** page, to enable Microsoft updates, select **Use Microsoft Update when I check for updates (recommended).** To disable Microsoft updates, select **I don't want to use Microsoft Update**. Click **Next**. +1. On the **Feature Selection** page, select the components you want to install by selecting the **Reporting Server Database** checkbox and click **Next**. +1. On the **Installation Location** page, accept the default location and click **Next**. +1. On the initial **Create New Reporting Server Database** page, accept the default selections if appropriate, and click **Next**. If you are using a custom SQL Server instance, then select **Use a custom instance** and type the name of the instance. - If you are using a custom database name, then select **Custom configuration** and type the database name. -7. On the next **Create New Reporting Server Database** page, select **Use a remote computer**, and type the remote machine account using the following format: **Domain\\MachineAccount**. +1. On the next **Create New Reporting Server Database** page, select **Use a remote computer**, and type the remote machine account using the following format: **Domain\\MachineAccount**. - **Note** - If you plan to deploy the reporting server on the same computer you must select **Use this local computer**. + > [!NOTE] + > If you plan to deploy the reporting server on the same computer you must select **Use this local computer**. +1. Specify the user name for the reporting server **Install Administrator** using the following format: **Domain\\AdministratorLoginName**. Click **Next**. +1. To start the installation, click **Install**. +## To install the management and reporting databases using App-V 5.1 database scripts -~~~ -Specify the user name for the reporting server **Install Administrator** using the following format: **Domain\\AdministratorLoginName**. Click **Next**. -~~~ +1. Copy the App-V 5.1 server installation files to the computer on which you want to install it on. +1. To extract the App-V 5.1 database scripts, open a command prompt and specify the location where the installation files are saved and run the following command: -8. To start the installation, click **Install**. + **appv\_server\_setup.exe** **/LAYOUT** **/LAYOUTDIR="InstallationExtractionLocation"**. -**To install the management and reporting databases using App-V 5.1 database scripts** +1. After the extraction has been completed, to access the App-V 5.1 database scripts and instructions readme file: -1. Copy the App-V 5.1 server installation files to the computer on which you want to install it on. + - The App-V 5.1 Management Database scripts and instructions readme are located in the following folder: **InstallationExtractionLocation** \\ **Database Scripts** \\ **Management Database**. + - The App-V 5.1 Reporting Database scripts and instructions readme are located in the following folder: **InstallationExtractionLocation** \\ **Database Scripts** \\ **Reporting Database**. -2. To extract the App-V 5.1 database scripts, open a command prompt and specify the location where the installation files are saved and run the following command: +1. For each database, copy the scripts to a share and modify them following the instructions in the readme file. - **appv\_server\_setup.exe** **/LAYOUT** **/LAYOUTDIR=”InstallationExtractionLocation”**. + > [!NOTE] + > For more information about modifying the required SIDs contained in the scripts see, [How to Install the App-V Databases and Convert the Associated Security Identifiers by Using PowerShell](how-to-install-the-app-v-databases-and-convert-the-associated-security-identifiers--by-using-powershell51.md). -3. After the extraction has been completed, to access the App-V 5.1 database scripts and instructions readme file: +1. Run the scripts on the computer running Microsoft SQL Server. - - The App-V 5.1 Management Database scripts and instructions readme are located in the following folder: **InstallationExtractionLocation** \\ **Database Scripts** \\ **Management Database**. - - - The App-V 5.1 Reporting Database scripts and instructions readme are located in the following folder: **InstallationExtractionLocation** \\ **Database Scripts** \\ **Reporting Database**. - -4. For each database, copy the scripts to a share and modify them following the instructions in the readme file. - - **Note** - For more information about modifying the required SIDs contained in the scripts see, [How to Install the App-V Databases and Convert the Associated Security Identifiers by Using PowerShell](how-to-install-the-app-v-databases-and-convert-the-associated-security-identifiers--by-using-powershell51.md). - - - -5. Run the scripts on the computer running Microsoft SQL Server. - - **Got a suggestion for App-V**? Add or vote on suggestions [here](http://appv.uservoice.com/forums/280448-microsoft-application-virtualization). **Got an App-V issue?** Use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopappv). +**Got an App-V issue?** Use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopappv). ## Related topics - [Deploying App-V 5.1](deploying-app-v-51.md) - - - - - - - - - From 5e848856436e96bd0fd84b0f0685163772a06206 Mon Sep 17 00:00:00 2001 From: Baard Hermansen Date: Sun, 15 Mar 2020 15:04:33 +0100 Subject: [PATCH 032/177] Update deploying-the-app-v-51-server.md Added markdown for Important and Notes. --- mdop/appv-v5/deploying-the-app-v-51-server.md | 57 ++++--------------- 1 file changed, 12 insertions(+), 45 deletions(-) diff --git a/mdop/appv-v5/deploying-the-app-v-51-server.md b/mdop/appv-v5/deploying-the-app-v-51-server.md index 10380a684e..d74e853493 100644 --- a/mdop/appv-v5/deploying-the-app-v-51-server.md +++ b/mdop/appv-v5/deploying-the-app-v-51-server.md @@ -13,37 +13,27 @@ ms.prod: w10 ms.date: 06/16/2016 --- - # Deploying the App-V 5.1 Server - You can install the Microsoft Application Virtualization (App-V) 5.1 server features by using different deployment configurations, which described in this topic. Before you install the server features, review the server section of [App-V 5.1 Security Considerations](app-v-51-security-considerations.md). For information about deploying the App-V Server, see [About App-V 5.1](about-app-v-51.md#bkmk-migrate-to-51). -**Important**   -Before you install and configure the App-V 5.1 servers, you must specify a port where each component will be hosted. You must also add the associated firewall rules to allow incoming requests to access the specified ports. The installer does not modify firewall settings. - - +> [!IMORTANT] +> Before you install and configure the App-V 5.1 servers, you must specify a port where each component will be hosted. You must also add the associated firewall rules to allow incoming requests to access the specified ports. The installer does not modify firewall settings. ## App-V 5.1 Server overview - The App-V 5.1 Server is made up of five components. Each component serves a different purpose within the App-V 5.1 environment. Each of the five components is briefly described here: -- Management Server – provides overall management functionality for the App-V 5.1 infrastructure. - -- Management Database – facilitates database predeployments for App-V 5.1 management. - -- Publishing Server – provides hosting and streaming functionality for virtual applications. - -- Reporting Server – provides App-V 5.1 reporting services. - -- Reporting Database – facilitates database predeployments for App-V 5.1 reporting. +- Management Server – provides overall management functionality for the App-V 5.1 infrastructure. +- Management Database – facilitates database predeployments for App-V 5.1 management. +- Publishing Server – provides hosting and streaming functionality for virtual applications. +- Reporting Server – provides App-V 5.1 reporting services. +- Reporting Database – facilitates database predeployments for App-V 5.1 reporting. ## App-V 5.1 stand-alone deployment - The App-V 5.1 standalone deployment provides a good topology for a small deployment or a test environment. When you use this type of implementation, all server components are deployed to a single computer. The services and associated databases will compete for the resources on the computer that runs the App-V 5.1 components. Therefore, you should not use this topology for larger deployments. [How to Deploy the App-V 5.1 Server](how-to-deploy-the-app-v-51-server.md) @@ -52,7 +42,6 @@ The App-V 5.1 standalone deployment provides a good topology for a small deploym ## App-V 5.1 Server distributed deployment - The distributed deployment topology can support a large App-V 5.1 client base and it allows you to more easily manage and scale your environment. When you use this type of deployment, the App-V 5.1 Server components are deployed across multiple computers, based on the structure and requirements of the organization. [How to Install the Management and Reporting Databases on Separate Computers from the Management and Reporting Services](how-to-install-the-management-and-reporting-databases-on-separate-computers-from-the-management-and-reporting-services51.md) @@ -67,19 +56,15 @@ The distributed deployment topology can support a large App-V 5.1 client base an ## Using an Enterprise Software Distribution (ESD) solution and App-V 5.1 - You can also deploy the App-V 5.1 clients and packages by using an ESD without having to deploy App-V 5.1. The full capabilities for integration will vary depending on the ESD that you use. -**Note**   -The App-V 5.1 reporting server and reporting database can still be deployed alongside the ESD to collect the reporting data from the App-V 5.1 clients. However, the other three server components should not be deployed, because they will conflict with the ESD functionality. - - +> [!NOTE] +> The App-V 5.1 reporting server and reporting database can still be deployed alongside the ESD to collect the reporting data from the App-V 5.1 clients. However, the other three server components should not be deployed, because they will conflict with the ESD functionality. [Deploying App-V 5.1 Packages by Using Electronic Software Distribution (ESD)](deploying-app-v-51-packages-by-using-electronic-software-distribution--esd-.md) ## App-V 5.1 Server logs - You can use App-V 5.1 server log information to help troubleshoot the server installation and operational events while using App-V 5.1. The server-related log information can be reviewed with the **Event Viewer**. The following line displays the specific path for Server-related events: **Event Viewer \\ Applications and Services Logs \\ Microsoft \\ App V** @@ -92,14 +77,11 @@ In App-V 5.0 SP3, some logs were consolidated and moved. See [About App-V 5.0 SP ## App-V 5.1 reporting - App-V 5.1 reporting allows App-V 5.1 clients to collect data and then send it back to be stored in a central repository. You can use this information to get a better view of the virtual application usage within your organization. The following list displays some of the types of information the App-V 5.1 client collects: -- Information about the computer that runs the App-V 5.1 client. - -- Information about virtualized packages on a specific computer that runs the App-V 5.1 client. - -- Information about package open and shutdown for a specific user. +- Information about the computer that runs the App-V 5.1 client. +- Information about virtualized packages on a specific computer that runs the App-V 5.1 client. +- Information about package open and shutdown for a specific user. The reporting information will be maintained until it is successfully sent to the reporting server database. After the data is in the database, you can use Microsoft SQL Server Reporting Services to generate any necessary reports. @@ -111,19 +93,4 @@ Use the following link for more information [About App-V 5.1 Reporting](about-ap ## Other resources for the App-V server - [Deploying App-V 5.1](deploying-app-v-51.md) - - - - - - - - - - - - - - From 25dff5e78e999a8e4610ffff6efcc99fbda13f1f Mon Sep 17 00:00:00 2001 From: Baard Hermansen Date: Sun, 15 Mar 2020 15:27:04 +0100 Subject: [PATCH 033/177] Update how-to-deploy-the-app-v-databases-by-using-sql-scripts51.md Updated markdown Notes and Important. Converted HTML table to markdown table. --- ...-app-v-databases-by-using-sql-scripts51.md | 103 +++++------------- 1 file changed, 30 insertions(+), 73 deletions(-) diff --git a/mdop/appv-v5/how-to-deploy-the-app-v-databases-by-using-sql-scripts51.md b/mdop/appv-v5/how-to-deploy-the-app-v-databases-by-using-sql-scripts51.md index c8faae6bae..ee53d591d6 100644 --- a/mdop/appv-v5/how-to-deploy-the-app-v-databases-by-using-sql-scripts51.md +++ b/mdop/appv-v5/how-to-deploy-the-app-v-databases-by-using-sql-scripts51.md @@ -13,75 +13,42 @@ ms.prod: w10 ms.date: 06/16/2016 --- - # How to Deploy the App-V Databases by Using SQL Scripts - Use the following instructions to use SQL scripts, rather than the Windows Installer, to: -- Install the App-V 5.1 databases +- Install the App-V 5.1 databases +- Upgrade the App-V databases to a later version -- Upgrade the App-V databases to a later version +> [!NOTE] +> If you have already deployed the App-V 5.0 SP3 database, the SQL scripts are not required to upgrade to App-V 5.1. -**Note** -If you have already deployed the App-V 5.0 SP3 database, the SQL scripts are not required to upgrade to App-V 5.1. +## How to install the App-V databases by using SQL scripts - - -**How to install the App-V databases by using SQL scripts** - -1. Before you install the database scripts, review and keep a copy of the App-V license terms. By running the database scripts, you are agreeing to the license terms. If you do not accept them, you should not use this software. - -2. Copy the **appv\_server\_setup.exe** from the App-V release media to a temporary location. - -3. From a command prompt, run **appv\_server\_setup.exe** and specify a temporary location for extracting the database scripts. +1. Before you install the database scripts, review and keep a copy of the App-V license terms. By running the database scripts, you are agreeing to the license terms. If you do not accept them, you should not use this software. +1. Copy the **appv\_server\_setup.exe** from the App-V release media to a temporary location. +1. From a command prompt, run **appv\_server\_setup.exe** and specify a temporary location for extracting the database scripts. Example: appv\_server\_setup.exe /layout c:\\<temporary location path> -4. Browse to the temporary location that you created, open the extracted **DatabaseScripts** folder, and review the appropriate Readme.txt file for instructions: +1. Browse to the temporary location that you created, open the extracted **DatabaseScripts** folder, and review the appropriate Readme.txt file for instructions: - - - - - - - - - - - - - - - - - - - - - -
DatabaseLocation of Readme.txt file to use

Management database

ManagementDatabase subfolder

Reporting database

ReportingDatabase subfolder

+| Database | Location of Readme.txt file to use | +|--|--| +| Management database | ManagementDatabase subfolder | +| Reporting database | ReportingDatabase subfolder | +> [!CAUTION] +> The readme.txt file in the ManagementDatabase subfolder is out of date. The information in the updated readme files below is the most current and should supersede the readme information provided in the **DatabaseScripts** folders. - -~~~ -**Caution** -The readme.txt file in the ManagementDatabase subfolder is out of date. The information in the updated readme files below is the most current and should supersede the readme information provided in the **DatabaseScripts** folders. - - - -**Important** -The InsertVersionInfo.sql script is not required for versions of the App-V management database later than App-V 5.0 SP3. +> [!IMPORTANT] +> The InsertVersionInfo.sql script is not required for versions of the App-V management database later than App-V 5.0 SP3. The Permissions.sql script should be updated according to **Step 2** in [KB article 3031340](https://support.microsoft.com/kb/3031340). **Step 1** is not required for versions of App-V later than App-V 5.0 SP3. -~~~ +## Updated management database README file content - -**Updated management database README file content** - -``` syntax +```plaintext ****************************************************************** Before you install and use the Application Virtualization Database Scripts you must: 1.Review the Microsoft Application Virtualization Server 5.0 license terms. @@ -107,7 +74,7 @@ Steps to install "AppVManagement" schema in SQL SERVER. 2. Ensure the target SQL Server instance and SQL Server Agent service are running. - 3. If you are not running the scripts directly on the server, ensure the + 3. If you are not running the scripts directly on the server, ensure the necessary SQL Server client software is installed and available from the specified location. Specifically, the "osql" command must ## be supported for these scripts to run. @@ -120,7 +87,7 @@ Steps to install "AppVManagement" schema in SQL SERVER. defaults are likely sufficient, it is suggested that the following settings be reviewed: - DATABASE - ensure name is satisfactory - default is "AppVManagement". + DATABASE - ensure name is satisfactory - default is "AppVManagement". 2. Review the Permissions.sql file and provide all the necessary account information for setting up read and write access on the database. Note: Default settings @@ -130,23 +97,23 @@ Steps to install "AppVManagement" schema in SQL SERVER. ## INSTALLATION: - 1. Run the database.sql against the "master" database. Your user + 1. Run the database.sql against the "master" database. Your user credential must have the ability to create databases. This script will create the database. - 2. Run the following scripts against the "AppVManagement" database using the + 2. Run the following scripts against the "AppVManagement" database using the same account as above in order. CreateTables.sql CreateStoredProcs.sql UpdateTables.sql -## Permissions.sql +## Permissions.sql ``` -**Updated reporting database README file content** +## Updated reporting database README file content -``` syntax +```plaintext ****************************************************************** Before you install and use the Application Virtualization Database Scripts you must: 1.Review the Microsoft Application Virtualization Server 5.0 license terms. @@ -188,7 +155,7 @@ Steps to install "AppVReporting" schema in SQL SERVER. defaults are likely sufficient, it is suggested that the following settings be reviewed: - DATABASE - ensure name is satisfactory - default is "AppVReporting". + DATABASE - ensure name is satisfactory - default is "AppVReporting". 2. Review the Permissions.sql file and provide all the necessary account information for setting up read and write access on the database. Note: Default settings @@ -203,13 +170,13 @@ Steps to install "AppVReporting" schema in SQL SERVER. ## INSTALLATION: - 1. Run the database.sql against the "master" database. Your user + 1. Run the database.sql against the "master" database. Your user credential must have the ability to create databases. This script will create the database. 2. If upgrading the database, run UpgradeDatabase.sql This will upgrade database schema. - 2. Run the following scripts against the "AppVReporting" database using the + 2. Run the following scripts against the "AppVReporting" database using the same account as above in order. CreateTables.sql @@ -222,20 +189,10 @@ Steps to install "AppVReporting" schema in SQL SERVER. ``` -**Got a suggestion for App-V**? Add or vote on suggestions [here](http://appv.uservoice.com/forums/280448-microsoft-application-virtualization). **Got an App-V issue?** Use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopappv). +**Got an App-V issue?** Use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopappv). ## Related topics - [Deploying the App-V 5.1 Server](deploying-the-app-v-51-server.md) [How to Deploy the App-V 5.1 Server](how-to-deploy-the-app-v-51-server.md) - - - - - - - - - From 1e1aa93e8d237cd0f37008a5b7d167594b2413f8 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Mon, 23 Mar 2020 19:29:34 +0200 Subject: [PATCH 034/177] update screenshot and missing feature description https://github.com/MicrosoftDocs/windows-itpro-docs/issues/6054 --- .../credential-guard/credential-guard-manage.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/credential-guard/credential-guard-manage.md b/windows/security/identity-protection/credential-guard/credential-guard-manage.md index 036ce84b5d..8689df14dc 100644 --- a/windows/security/identity-protection/credential-guard/credential-guard-manage.md +++ b/windows/security/identity-protection/credential-guard/credential-guard-manage.md @@ -37,10 +37,11 @@ You can use Group Policy to enable Windows Defender Credential Guard. This will 2. Double-click **Turn On Virtualization Based Security**, and then click the **Enabled** option. 3. In the **Select Platform Security Level** box, choose **Secure Boot** or **Secure Boot and DMA Protection**. 4. In the **Credential Guard Configuration** box, click **Enabled with UEFI lock**, and then click **OK**. If you want to be able to turn off Windows Defender Credential Guard remotely, choose **Enabled without lock**. +5. In the **Secure Launch Configuration** box, choose **Not Configured**, **Enabled** or **Disabled**. Check [this article](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection) for more details. - ![Windows Defender Credential Guard Group Policy setting](images/credguard-gp.png) + ![Windows Defender Credential Guard Group Policy setting](https://user-images.githubusercontent.com/41186174/77344405-c7c07b80-6d3b-11ea-96ad-4c1d6bfd4330.png) -5. Close the Group Policy Management Console. +6. Close the Group Policy Management Console. To enforce processing of the group policy, you can run ```gpupdate /force```. From 2e9ed717ff191445d71ae514d4dfdbc06c8afab5 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Fri, 3 Apr 2020 11:20:57 -0700 Subject: [PATCH 035/177] Update devices/hololens/holographic-store-apps.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- devices/hololens/holographic-store-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/holographic-store-apps.md b/devices/hololens/holographic-store-apps.md index 9a8d59a9c7..f993afcb7f 100644 --- a/devices/hololens/holographic-store-apps.md +++ b/devices/hololens/holographic-store-apps.md @@ -43,7 +43,7 @@ To set up a payment method, go to [account.microsoft.com](https://account.micros 1. Select the Store app. Once the Store app opens: 1. Use the search bar to look for any desired applications. 1. Select essential apps or apps made specifically for HoloLens from one of the curated categories. - 1. On the top right of the Store app, select the **"..."** button and then select **My Library** to view any previously purchased apps. + 1. On the top right of the Store app, select the **...** button and then select **My Library** to view any previously purchased apps. 1. Select **Get** or **Install** on the application's page (a purchase may be required). ## Uninstall apps From 8f592d47e2568d99f99bde7bdcece3d1254f5ee4 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Sat, 4 Apr 2020 11:35:31 +0300 Subject: [PATCH 036/177] update text with valid options https://github.com/MicrosoftDocs/windows-itpro-docs/issues/6019 --- .../security/identity-protection/remote-credential-guard.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/remote-credential-guard.md b/windows/security/identity-protection/remote-credential-guard.md index a4029266dd..ce1b670266 100644 --- a/windows/security/identity-protection/remote-credential-guard.md +++ b/windows/security/identity-protection/remote-credential-guard.md @@ -143,11 +143,11 @@ Beginning with Windows 10 version 1703, you can enable Windows Defender Remote C ![Windows Defender Remote Credential Guard Group Policy](images/remote-credential-guard-gp.png) 3. Under **Use the following restricted mode**: - - If you want to require either [Restricted Admin mode](https://social.technet.microsoft.com/wiki/contents/articles/32905.how-to-enable-restricted-admin-mode-for-remote-desktop.aspx) or Windows Defender Remote Credential Guard, choose **Prefer Windows Defender Remote Credential Guard**. In this configuration, Windows Defender Remote Credential Guard is preferred, but it will use Restricted Admin mode (if supported) when Windows Defender Remote Credential Guard cannot be used. + - If you want to require either [Restricted Admin mode](https://social.technet.microsoft.com/wiki/contents/articles/32905.how-to-enable-restricted-admin-mode-for-remote-desktop.aspx) or Windows Defender Remote Credential Guard, choose **Restrict Credential Delegation**. In this configuration, Windows Defender Remote Credential Guard is preferred, but it will use Restricted Admin mode (if supported) when Windows Defender Remote Credential Guard cannot be used. > **Note:** Neither Windows Defender Remote Credential Guard nor Restricted Admin mode will send credentials in clear text to the Remote Desktop server. - - If you want to require Windows Defender Remote Credential Guard, choose **Require Windows Defender Remote Credential Guard**. With this setting, a Remote Desktop connection will succeed only if the remote computer meets the [requirements](#reqs) listed earlier in this topic. + - If you want to require Windows Defender Remote Credential Guard, choose **Require Remote Credential Guard**. With this setting, a Remote Desktop connection will succeed only if the remote computer meets the [requirements](#reqs) listed earlier in this topic. - If you want to require Restricted Admin mode, choose **Require Restricted Admin**. For information about Restricted Admin mode, see the table in [Comparing Windows Defender Remote Credential Guard with other Remote Desktop connection options](#comparing-remote-credential-guard-with-other-remote-desktop-connection-options), earlier in this topic. From 27f5bdde42018ae39956c2eb12600b7d763bae95 Mon Sep 17 00:00:00 2001 From: illfated Date: Wed, 8 Apr 2020 19:59:56 +0200 Subject: [PATCH 037/177] Credential Guard image upload to PR branch This is somewhat easier to handle through offline git tools. --- .../credential-guard/images/credguard-gp-2.png | Bin 0 -> 442435 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/identity-protection/credential-guard/images/credguard-gp-2.png diff --git a/windows/security/identity-protection/credential-guard/images/credguard-gp-2.png b/windows/security/identity-protection/credential-guard/images/credguard-gp-2.png new file mode 100644 index 0000000000000000000000000000000000000000..ead9410405532311722ee16211486f868a63372f GIT binary patch literal 442435 zcmYgX18}6*d^Y&b@C{byru{?)vv$ zy_df)OkPeL0Tve)1Ox;@QbI%#1O!~;^Mwb1`uwIdR!!9d z2eiBeio6j7y60S|Sl$5kPdzqF`9NL@l=wwj6Y6`ypY&p~tVyAeo^%Q#bi^w8fwwhX zJ@;!XMU&}H>z(`)W2bA7v3=)ue3c6~%brDj-h4oai;H^+MDk;ThY0`yS#VjRLoY^70ErPGGzSaM20;mf z5cSIqC6*4A1Oz>!QY(5v4Y53tPD;j-iiV?8E9OhYZqF(xDEK=JlPBx1xYkTRys1J< zQuAv-NDvu=C_YJCQ>DtIe|-vn2=?gA4kG^MCrV5bL%dtG`Xy1Boz{TNrg2uR;kNCc zjs3m5je^`^iNIn}B$9^VvE*Nc>ktfA1tjLR3@~ZrC#7m%Vo?mke3~aseHgC>eSFbsen% zwxn0&Eh)_B;qJZXDcY4g%HvwV3*)3{O7j2ncD*;U*&WCnf<%;wOuO+=O$RsVz#cxn z%tp2es+z({C1m)m3)8NPn45iSzjP5csRgd^aTTQ%EW{*BX`$|M-T*`JWg+f)qkwXkij&^`fp}noE8d zuH0i%H}4tkzwlL@G^BQA9*~E-tX!>WXVhGKnC=}=7f_+Y?%q7nljdH1%};pjh(2)t zRhVKOy`rh46o31mbW)UP;KW$E!HWmImNkI+cu&SC##maRE2LN zcX!Zx_~7PKJ*tz!Qenu3d6Ie)Qv`#8fGa(XU+mBeE}yov;G*@@sd?|DvpLx!b@*m% z&k?5id2C^WZaBQeN8mKga)p7^+H(R6ntD&{LQYHZloK&UhGK~#NWur6FN}(|phLL^ zgAqBQvB>NFzZXU~bU4H!b+JK~Jx%sL@q{4zV=|es%~y#y$b9b!?c|$--tsYxUeb9& z4BetzJ%MKHQN0Vv=$>PlhT8C)hLZcq8+D|&8KlvM&Hm3TiX94#$Sj4)()fMm_dJ|7 z9xGHdGdYu+pv$o;_)h043WA%!;LXpJTT zTAo*~EsWu4@JUOVRwIM^(A9`wiSlx&%%A!Bddp~J!&)>w!1Rb?9l2`fb+rrr55wxF z*!uE{3fsI%t!J=-1v{SMmHQjt_V+?bRk&`Ja`+0ht{Yi_ZB9a}OKm_WFe)x);JSMJ z;HG@v(R$eO(?tP#V+IBW80Y77qOKo03k&z1Toz>i@vB}PR0}-Ixn5f7w}|WnLf0;$ z$PneBhUra6*}s4Pp06&nP}I}g7Q#ZEjBCa@xNfNVB_2 z78i3Gr~lZDqs`inqa9FmxTAZ2wf{QVxi&OPRJNNa$?CQjh=k4I&RyC01{z;DW^|mO zA(I7!4En}bS}v4%u+?%d7WDhIRgp$=0CZ|~^)&^WM3rzQj*HramQ>|j5t~2#BgEV~ z3VXn~7^rKew2-7o;o!)8{p3~Z3N0AZrmiI=#v#g(Q=eF(UE+#w7V$zDt#bOT@xIL+ zb(2!r=^nQyvW*hNE(OygPcitSCnTYy6|q~WpK8kT{%Ocr9A?zZ2_`oY0!m6s*Uhiq zR@T<9Jr^1Ogv7@U0ZS_|y)DVuFi88p_D+zN;(Y%5OQ)nI*qnOBSTI)aZf3m@olDmA!yV@aSD zr7#&M03C@JX?rZXk1ZO?>61U@;Lcg2FkV^#1g%j?lOK+x_a-FlomjBJKfN-PKGTQ) z1UP;+4vxl|l$|!Xv>6gZ-n_Gb#|4Z}O-FP(5E+qbL~&Y!YdW7W_7c?ml^6{2zdJbA zHjLP;h@nS_?oVWlqJ0B)7c1m(J~Sq?T%K;>d$~cjzpVD%^Q?}Zd-C^YORHXPw^lWQ znwBSzX{MQJ*mQ~C;HkIe_mxHeVLtyUsY#^z+|h3stIaUzvY;bgB$u&h+j?fc(ZRdc z;*zJ;Xp0@v4T+^4Q+7^Uzv|XlCR`0Wyq`2#&xh-acoc-Q&s)a#^%TSE(2JLH!#TqQsRGqMQH~E? zUVNRR;co6kpKBY}J!luSon&ilrm_X`y)L`UblY*wNnnLS=?OpF$U(DPT5!!3ruc8} zFouCMp^{0$+O21?gM|4?2Z-1q{swhsgBSPvBctLz7E6#j2m73eNhVj&}AcgwxqQKjg`VZC_uRM2mi_S%#c&wCEj z{Rh>ugZB_V=(BmZuI+llf{K)Ms<%dYYcChk1>(_i3E>P$CGpJ0tO(iJ-!F9Bo{yLz z{E3nID(pz&^AWN|PLC<7;biGFfLVD_Tu~-gzwgj!qz{o7eeh_bSA*(K5rqK3+Y_zt zL!k=2ppwI5pa$1!l6rQG`|(_)q+zjh$*Ls9$de1fB?K$G8CN@;hf}>U{&9E|2Z>UU z!~!&H`-UV@JT#0{_+Kh|{ygJQ?9kt}LxRGh74PjaBTZifp!@*Jm&!-M@(=WCh&fe~c)vO{N_Re93i7ki0+3K))c2Rl4>_D?J7II$ z>pPNfJUqSd6M~U-5FPgs*sRPQbJ@`(cFHWr*Rf_6qXLD1LOMX11ieuR{MAG69w&9+ zcc|9$dPdt7hQ{s%eh!7dYlo||U<2&(9v1d`eWc~$n$N39zR?L2QEVejLm`_QWPn|! z*V&M=#ARB@uHqVl=g>v8Lcp4-b``P%*3P8X)EhS1?4q-I`TLQpmYDO`WOGNW7C zUVN76zLl@xSXPMBADBU>o@p${%MRb{ho}$zqRdK%sYz4EC4#%iOsJ3a^sNF&Ohy^% zs|lIz$A`3(%X8Smb`F>_Qvf|chc4T%fj^rL8LlaBn=R_i1oA{kw#&XIW;Ean+g_~S zSU?Imo=sOas(M(A{tx{x!;mfles(R~^IiZ>LWpdLCe+W;a4HBx8D#{FL)RAz`fU?p z)sT%{T>uTz>g&P=TRK`4|Boq1Ff`>5VybLX@&X(WP_ieq( z9Ej9N2*^UYM?VIF)-BKF2u0-05->2hSqqBGSIoC12LCZ8qh+nr`(9xS`53He?6Bez zL9$Gcl5g-r(4qnriy{nq(cweow09=-dXByH98PQF3x=NVUENoyd2rl-PLLcp8ZxRR zXE2yL0dyk_6v6;fK)lTK05tCJ1!lWH@b~FEUs_7q~&dwPv{O3rWWXD(dy4 zG^4{Vbs!bFPT~+qnV|rKn)qN8R0Jl&pNl;4K2`h##~4AcIFTSk#gObtnQ2`w}c@NZH*>TTfUa$fKVCnc@Zz!(Y-w<lHdYn`wy}Ok(NMhJVU5utQ?i>qh9EKAmGf6Ferp=IvfH+H9~E0~SF~;i{FQ=J#gzoh=zbKpEnFiI%wesxQ3t>DHbltv zVFl2;YdD{#^4#pMy<};mPN*5Qx_sJw;6jb^rT;JsEb7XUkU(Hhlz=^Le~EV6Dk*vVjCOI2Sm0mjbonB@ zAI=5`Ykvdq)STwCvu+-De0L6weC2q0vxNuGQaVAMMP_mJF&e<6LD=kF`kUc_dtlah z@}NG|A<*Z|S*&tT7@6Qtaid=wBX=7-D@pSGC>>v)PxY=VJNd*a8P=BmFf|>dZdA+i zfakq@XXd`&K2&1t1HWH6q4WZJmzeS;&C7y{B1!r028=T7M7^8~Y;BI>bF6X((N+MldVp~IGKEf_fj01g7p_Mm>;x_P zbr%CLMQ^x+?99@Tk%(*N8!nzLcu?XOovgv3@@t->F3xQ5kr%f;hb?&G@7vni`hB4a ztL`r@0t7LGtXqr^(K+JLgx0geU5EPi-N6TnG%yJP^Yb@H-?t5b58HU@e3#ZOxGlUp zrtC4`>CYfwlI<3xLqhMerk$>E;EcEv++EQUt6ly@S5taKGCtNxjCvCct)~G7*v{vx zDL!w{1{$i@q!THuKPq%uXR3|F;d}K5B5~AJVKAE7uCGh2XLBe+s=x4@)j`h|eS@SE zDun^Vc3-mRHRW+W@asj|Erk9Uvq)a;^T2~`h^DFS!-Pe+J!^%I=6`0iAxo4WOAbYI z>l<9V`mu62SIw)_;@rd3V0vCAWsQ~#J^3XX*rQ6oZG^2gTdu`H@r^)S=Z)KS&BXUl z#e@P)%TPeX*Vb_1msdZNx#}cS2HqEE-PQ|(24?Qs7s7VHt3_nXmNi4$7BwB{gN`F% zJ3P42ATM*v>BLbW!{&7a8JhIN~!;3 zjvJ(XWT)}FD}HvY!-`UW)dkGzpMAER&y0*tuLHQmZnMnxsg>>kNIlKJgT_X?-Df|? zYFH8Z*^})(=8plnr;s2x67=yOX#A>)B}S)~&p?Bjv|_KgQg z?|WkR7cnNcU43*!*!Yu*&TxKyd${Tq?2+DaGeL>-&Ic02_a%^28_1EJ>K`8iwDJ43 zdy`wl|J+jexXGa#r1#$Ov1Bo&j0mfo?PVX&pVq+=xNNGR7Qh&&#bF1n-Sw2x*i_M!V^o|Wr=1J{-{9Ll?+p((Np@MDc6o1gY`%KFP7fZw z1ioGAAPqYFdYT4$T-5Q8|70jk+#>pDi#}g#tu^rGr8@I{J-vwrBW!nl=5sPrIrdxv z`))w*`Eb~uUkItJwEIXzH1_l+XL`3ylkW(4OM%Dnq2U0sMU^2e;?Pib480F#4v-?H zT4((pNjzO`rL5*L8m{B|*dE1x8*`!_{@cFvU<_$hwR(16-o?(1vz*@xFHQPId_i&ICCV^j z1UORtVK5u<{cQ4mN7(8vo!pE50_|`WY&L!IsOL14<7@n|mf6RYnIrvBjqkGx=Hu{g z$k6NqnXJnm};GS^aAZ7G2$$GES7tu)V0eHOjN6pq2Q ztnxJW+d2Fu-7|M6!y_@3+9MAwAED6)^B|*~-kayz&QJ8}uu>9U*XiyfFss0A?t}mr ztCKFIrDh|fV|EFA81fX#e8gmzHs*7U7MCN@YU-A1KY3$6T(Cbz+~cS958vEvZ>=`z z_5xUa`{)Yj(# ze(}Wb8GASo^U;>q)98=lZ6Hs!>BC|NLzqASIs26g zA52AGy+3%>`G%=x{G`iRJv)1z*-B)5sDcHaxO)?^wqgBQ*mBRlwrTo0H?bq7(m9*4U?g06h0-A!Mg9!Zl zJn%>RWoP8&ySkF$?XlX)%@i|2D2?r@H=m)^;o9!md_$FS%Zm0FhI^i88CbtFw03jC zhD2x>mw6l(+40-sC!L0qD+1e&tHQnj6}`sHyy$mkB??(v3@w*Al%mTXCnM14^;YMD zVahBB$Y$%;=sqwYBF`@N{+PBbpP3+FYlgyS&Ws4t!%9OO4Fl^nYGtBR$`g|YNqwLa zieR|@;Vms4fvvpAafJ5v>8hFzf%LmV>CnT&dVC^n@{T*GbaJ`=%2|iBQA12z*?&6w zSBWI9cM&k6*dd=ijL)`E3a{tAsmb;3@K`!m{N8A?lAhj2;(W;~-KVXUH4!zZGeD}W z+fLr7H#?Gt7*yT;(WQOB@<-kb3chCFmi{xFLdp7p{ltA{eiX%6kL%|5BD%R%A z82oTXQ`7UJ_`<;ZLpnrzC~;w3yz?Dt+F?bDdHExFVohw;s?yhCaWZS?P!HIBRm4BQ zIDy;SHA}dc*;>T3m5~U%9_ke!41&x_?lZ2BDO+0AaDW|rd$yzzt=nd#drh^xUnxPF zHDjQ-fFiEtyi>8BHTcG&;ir-g)JM|wwW5$^P?xZTO-%RMzG{1(gCll%9m|zedK}h; zuCllNOox+LU@U~Dx_HoZO)A$A^G$91>`2^}W?z>S+`*3J(NTgyyqZks=C!}?0J^qg#Xkl#%n)Y6xY60L z@GF{4$S@Z4!Yk|0_WZIw(%qH#L`#a!2OqX9KXJ7n?X5fv<6M&0mlSItE$3j#v z=>uRtRpw8dbU0F3@0$F>h&M|P#Ej}#%@?|}r5iI2YZnBKVfjexhcS{_t>@&?31K4) zdKtDeJ#9&&MuptfpWw|hykHwwU!h@1!-r8tV-O#B9|#9jd8#H=q1xdC&wTCC5kL$= zqTg9l-=ervS`ID2njQman|B&c{4r!wxI-8SI==OC-x}vjMw@w)uedHHr?Apchb6*u zmNI_(=}sR0Wz5iYq1q;^*ZqFHK$1@LkE=gvkke->vxWaqdb0$QK&t387yHI((Ip@y z+K#&iiIeH|e1Sdi2V2YxK9Be1qLb+BR~NtCkEkc+wU+PuKNl!BTeB1N?^mgvnc%s< zp9UFNM;n|9yp*?2R|IxjRr2=!-n)5PZ&=we!MFFqZ*f?idPL6S~GDuBg19B!f3^C9Dxp7ywu<MiFb?Ja#xv?= z&DsFsMN;WMMLIWWehJ3j^JG@hYc6wM#cadjsPF?Lv3Q3;;4R{D%fF>EA78SXPaDl{ zS_RFnUvkv!KW6Qiw~^wxw(1r*A6|pCnXM6$;ZsKH8)bJwcm|zb+IO1YCcZb{H8i>( z4|B<+H>I0p5`e1{^8&!MNwHW2;>#dc6&$z+KUxBCyRiK1yJ`;W&s^!WRLT=On0k++ z%^Wuc!HaD!uQK}6U7r1cZ`+>JcVr|Ko%}B{gqXXINIxC%w_NI5?oBGy zm#JN$4tH6&*1OY$z7bxBYF7b|DfpE3qqncC2tr>zgwWg0qNiizpWhxVD? zTl`HF$i^B#JJ^kv_t-X`T1*~V=T0Y4G&&@>f3X0((LK>P-VfyIuPYHH;;ksl4f!#R zi$)I@wbnXfS=pZ9QMatE~=7oSpC|A>`QbxARFYWs~ZvoV#+iDKIGprWi?dm)a4)Wd)PZawP~Q_NHN!<^=F zwaGN7!I+@x14SmQhK!4{(VUlm)rN>hlvh?g-TN9u_kCq2_U;d8eVjtx#9j+eX5W>+ zBC9lIr`!e6dwzdUnNXozN+0v!E0GWtRJt?lB=7@u{7F%&=C46NX}?7#wj&U-$4$$)e?}t+~6G1ouNfBbSIE-AKDIvCD3-hsR=Oag5uXjk> z&L@hB&L_-@r&(~|)w*`3N2~vj%+)T|O0LK>GVGUb&Gi)StOx$|?z(0t?2mQ2fuCuE zk5@#j7T2T$QNG`bRFg@9NMRSEYv2q6w0q7l%w{hlrOm;-h{{EwKq(35qa7|}W?G7A zuGbfRYtQaqs=Q>s$oFcP5e|IG)BCa`D90V7p8j=HWM3{_s<2st#B8R@m>T+i^(Rsh z!%qoS35iTUx`yPvnus6vN04gqc8Y+EW#pka`m&wllMvR!ww&0w)?XW$4g8F+Rzmp> z6=uR`G7abVN=X%wayP>0E)uw3k7)c4*c_$|yxku4kS=?B5px=*DeU}@PDWq%1Du-9 zGGnP~62>eUaBuN4-5*gdg{7>L1B(rwgRnR+i?b9MbGV7NA*wD2p=-S4jHexh3w7j7r!4a?|6o>c-@pY+MnI!QT@U}N95Q5#+6of zgmXr3-WZ8FZ6e)oM?6a#eb3H>*-y{>oe+4*ieE`KA)9WE@y*KQ6*|{Qk zgFSLcShNknpxvL%b3*#VpaG6rlL7^SC~Sw{4=Ro{_Xh~cf(}60`xA-kRHj+Yg5xww zS0kR)0eo$oW@E3&`+i|N_Um0i`rHfBRIsty@=eNh$%ThP=2r|8o(|l2ZcAa@+dWrg z@XhbK)@;AM`2Fj(s5Ny1TYUweuSIwKnbqHTiN?>6i}(MeF&_Lzc|e2h8ezV8Q{&3s zfazPWD~_qRQg!MAeYu%anw+X#m>AQmV@px`Z_r^6LJsp%1YQ5Y+)IJ#g!wC@vlH2l z=)AFgS72q^J)zN{tjYEq4!x9GHZ4(e zLVTH&ZRsP%V5SS`(qj`-pM|BN{zp9L{bM|`pHi_wXZ!P1jYS90_`rxtw<%GVVt*b5sK|R_^aRfBVD0%^=tKqy*y4AGjN>vgh(`6yl}*R$l*J! zf`m7SXK&WfG8}yK?SK~b>)ERrojhRlZN@6V*De~e<$2hBE)~yy8;{FRpv&a_$@_9^ z_&iu@&H_Gm7jZPdv?>0vkcAM8oZlOO6VKFg+BM^Whh)#&eYc=HNY4=kf?G9?YukB5 z!tHV>YqF=wrZeiaj6-=n$j=w5xEXKIbtKNb|Fn?DSwL!~Hr9Xm%)6e^tT~9GnL~jx z5~xqW2=qc5%<^U*pY|%Yns7Sqs>QxdbGq`1S1DDUdVuEND(9dySaSbUt|xXdLBMt1 zv}2F|L!);8vTtWH5R8A!VWi6k_^=9>z1dRwqo((MCC=s^1vMSn$9Gti3LnTg_%qLT z*N+!z4pRb*LJsf8bOCP>d`nze5q*Eh2`FfXS+&;@jgRlT=<+zDvx9YfvYuC%>%bpk zm+Qz;hIYRT=OZZ+H8ObN9uV8sClYq$J&XyA$`TJ<6Dot+83( z!Qr<_NJ!i1!iy-+DyQfR=2lB)NT3`~Gk+!U3SPo~6?LkM94oV%{`)H$3CM!+QyCId z%SBhuK*0M?sy)!*shmKr*UK-Dd+p$l7STUr zPbt3M3i|mVkqf}JLXI|HVXK%pfj+5B0tm_2aZgwooz`PzCu^#r62e7$g8gvCt@~IU z$Bd?Wv%5(CdROw$bmK4H^wPcZcyOrY?%C5@roo>=Y~6P!6HboBF%^PIIThZbGILkz zMZBXyMK|O%*3O|l0CVsf<&k654)^TQsWHJDT5KVe4-KS^0JQa$U+%t} z&E%}HTem0rPxDDp+F}f2U_}Pp83^h^T{*>GsZrpCg%6sjs6G1x@&l_QkddAc>aLoC!Daf-uSV9E2D@%+K_~0sT5w zrez#_Z)bj8?=xAsr~V^0c9S}jqj2fwmvtV6M=CGd<~xsf`@!*qa2(tAJ&$D^C?4yL zpRSU0ik=hPFZlTvmybr#Qw1xo*kYdd>o#VXW0~FEKi-0VFN+CK)*gP}W<31kgyiFz zPBFZo#}UWB?m(YYdBVBJ%Kk0dCu}04)v%8Ba6JzVOP39Rfk9F+YQ1^7k={Q$`JQID z4rWnfy!GSss<$_#+L-t5?kNdXCKKF;{@bcA!I|f6*Wn`p_t_j?o)MND&z-dplC{#u zBJjO05c>?F#rb@K1e&OSl(AE&(??v1DnY%qA2A!uCBEEQiTTOB-3wB6Xde>oqxt(Dlz_Ts$jV?Ateq2$JfI(R>Kw*8nTNcVo1zn*5ZvNV^W zGf6B>cIx|vnA1KTt@%BfTy8ttmbESuL@C z=L4(qj{T=65xY&>^D)^UIx6YPmo->Jr&_7|(*S!c_3H_oo!(#b`ln8Ag8Vh1ni$C$ zIL5i9Nqm^7fQ9wU0pInf7%bhauCid2$PaUzNtyIXR;8rt?Ohchmn*}=+l`5B$BE$k z{g9rU)oX3r-Mu+q>J`+a#c@YmZ9x=G7Gg1@ z{U?PL}!CxI<6Dzqx9rxpP_Nk{%s^rbz#tF=FyoPFZ972%%!z|V+_{z3N9IQXFjslo zy_tYfv{`Zp+61tb`WV15(Jgl)nHQ-lyt(xf^lxZzhS`Pm9(o(Q(julY$ie~r1k_(`*B8y)k;918^GO)jzu zXTe{P*XT7a5dKj`rK73pK|!2UZRQRFjYSFNKd44`pG~nCk1GzAC7JE*tI9%xWJq#y zDhR7C+wkl0YGAA!GDxG06!elMCmsTmhQtODV@Vl`txUqByrDaBJ`|tJK z06%dvW|NtJp;fS*PyYO5&}q@fhRWb}k!pB2o`>sY($w(jfT^O3AO^%J&g6+l_XS{R z9pDe<q%71>AOH=oc!Wm+uL?ql3b!_;7!K7~za zT?tZg5aw$OcaGRJwE%X2h2ax-FQGpS>6CHYq9ztHsk}&qeFy2Kb9$<6Hai|Iar^@n z20;u(F)3s#HuWQ6X6eeAzg!A7QmJxkGZZMdR*qyS7D|?R+m|SG{hXogQSR(wNeOG+ zTd%S)?(9(L-GZKLQ5G_{4pVI!ksyYEm`I&$Zl!2~XL>0+T1YiT8jS4_MXFt7#rQh; zreCUjOIQ);y1DvVx+1Ij69R{zqTh}#@4ZPkHU=`9huOhiy9r{>)_oyW1~JJ?@Np%SkK;pRhvX5bz7TOa zMDL*oBTt{2f#D?cs31`QHO9q<4aUtMIqL94nT|H>?jm*WuD!jfDU0;MWG+dNr(!p3 zl_g_zXrn?gc31`ai(CCc%Q!&YCPA5wz=jRJ@Sti0_+x$ZP1lB+x=;x;$%!fMB2Tl} zzMcKH_q#MC+fRG=e-{zs6PMVmQuB!sr5q?Ssnzf!n;u*s$UK-{U4@UiRgg;QGf#YA zZdg}QRrRqrn}lsaRu@L={=#3I!tTJ8A{HE{iBsQ;IVy&o zU9Uub1-Pt6E`YL!Z4#J3GTP5E;tl!(KkfwuMwCE?<)%R6AZeshk0=>VCgOMC4{)#_ zcGt+)1KAK1X>>(b7xZHk&4nK@LU{&lmSH#OuD1Qn4`GbQzKNy?Z|zkC2r3&lcJ|E0 z?cmPwhgg}l5u@B4S{XME*U;w2wS&xLbO?YaK@fl%t$>7dT_2?F51J#Pz_Km9mp~>7 z;-j&rPO1S2N#(@H49D#lYPPV|oGi1k&7q(b6&8l<*6yeen=RC95ukr708v6*zYUNYpNR ztB(rg&S-Q>jm!YBAev+ESaRvXGJktv>seBHRHEWhHieDVAh5Eyk^?2|lmcx~soVr} z_YR2=U3VPb7Q4|Dv&_skqWYgH3ICD~^iZ|~hWAQF;ex>ouyYe~tE*9_xP{6#1~xh+ ziz_Rkom)p?3KVIo4f`$D4U9N?8DanOT*8%YLbP)J(YN3UF+o0~BkemOlA2cma9mhP zDqmSlCKNM0_6TgBX3Z;FZD64%sirm#4p-ZqBRHWhO!sQ?gcHDorB z#LT#y4oTw-2Wk>~=eF3H9ix@a7ZOePNs;pa1zzYd*A+z&P=7iDG-NzV$0gHK8P#~Y zk~iAmYlp;$AAO{eR5=TT6+-+F@fsw1@(Mh=BTRv#nn_qR&OG~Z8 z%d+X`7eI_^CuBkaD-+n55t2_3_5Q{>XDtObA{<5sE3T!8|T8Yd`N3 z?QXn@MrR^wZQ>2QGEg8uKY{E|wi>EJn5DmeYZ9c5?hP5UC^VR`k4QX^vm2u4ytV9x~8JMP22I`*QAO;%Pk=IBtR%k)#U-h%%Jss&zGjMK@)S_$DwgMm7l3C3^gbw?Rpj1UMySC&WaAMYF$( zHDT6J$e_s~MPQwR6^-(u-{2H2I*% zLoy;k^Dkc-%lrHSB!@M`vz_t3Ap;U-#HxfONn(u4;R)j+b-M0cREyTLp|n5P%BZk&G|>Fv=q{FmjbT!j#035+0Bdr}7tUncoAlL4hskYFy z;`Xq4+9*?3KzTEC#YkaE7^Iv$CcHsLLeyB_%F<&TOSs@;IS0ga(fNp5Qr#m zmWoUbIwAv~f98z>9*|X2I{u)E9-?6E zjIqHuIEQb-Mda4V;>fLh(XjZ|GD?w#IWH|KUcK0{AlEhirx8gYaxM{LhRa+IpHjrd zk>NJIZ6Ucfqj|M*+<&w7QUQD;lT?ZZ8%hR$0onktRO|lTqnG@Ao4L%<(vDAS0eMU+pR2(!-Ogr^zNCAC( z5&e>CdxTV1ofNs^-V#l|4vi07s1-J8h(rhL6@&;$jZ0sust!y&fkg3X*$@rH)(;2s zcBBRTZuGcrMmjWj<{pMb@QDpVc9%*YGUYH-HlB{$h#SXzG?MXBI|X@C-NBh&me^=P zBsh#%I1I=&UG~+25<+EWAp%N{ByShMjS*-S%>9SLL7Em!)|`AjU)|CEEy=L|nT0!Q zAev5^)VZEZ7>XF&Yf=P7QO{Z?!HkHheMm>nKaQ_MkIdB9zj8KYP(m?d;O&m!bt*z4 zLp3SbO2|CNtJP!#fE1Kfr!pKfRe$@vgtF7f3X2_OS3cJdHiNT|RtVtsCICxPY2%6&t+KykbGw1q(^ zluRj_u$C@oX!D6i17ymnn`FmW0d`DC!n_q_Wds~k7u(&Hf?2Jl`l`yKLbiG_)MUSE z%y3jlVvZR_;&q6vm=sH(HdM|Qr5P?stHyAY9@TMN%Cju@zl; z7I!Lor70yM1`i5~7(hpY5X2^L$jgTV#saaMi>r*7a|;0Tk2H+Ir*)K! z$W>xoXey+{mgRM>vzI)!yW+F|%x6#`a#Zlw36q@A{vnHkrKQI-g^3rOX1^bx5NB16s5c~D*?4T9()7g4+Y5OE`*iI3$?-wl(f2NfsGNn;=wzN3n}tTeyPcI zhh&2RXbyBupEz@^+M2-z6-Wpma-Zd~X6dw$V6=hbv zu1zsyA3bc zupk8ee?c5=MVFh=GaJ!B3=X4&^!Irbpod{7XJKX6mCM;hOQ=$5M%zWCWsBt6+pOt9 zi}FoXhqIX8B5pQI=3>9idC@f@kEbPZfqMv2@Kt!d6+$}ZIsIpj^GPYpA{v1aE1MLQ zj>N2Mf*$ZqR4ku(;m)%Gi(bTFdWZ86)B{vY);x*+g)7*Zk!FN8PqdJedJ3Z*vjMhf zTF7&&QVML<#}dbx-?hjzTY4jeRs5I}dW?I_+V#|!36v#JD{MWoDOa08ZYtse{iW@#qP zueDEZ-SJ`57>vhJdP=ao`_6tbN=ahdNwYybz0Wc~V_QFLR(ngJfAE_~B8lz685GR02j10&@Fov;_0Kl9{m~TAj6wu87Ry<48+Qr1ddCAmL zX@3w`B_}6YhI1V)+!=f^RxuVC7!Dm9x*2%LxJZz~n8wwdxpGX?7xX3M#Wo$>!3Eb#f{&sFev9JcrsC!b)X)WR)J z#HgL@-|Y8#xzq!1IU zUkxD^THq&->V?rZyVXB|6+5y&xBfO|uvi>3O`)T{Qw#&_{3C!)V0@7pgv082Cmo}x0N-BZra<=P!O z9CXer!nNM$Jkh2vzmfuNaNG*R%_P;MLeHfRqx@~34k^^Rn`m~8sfOg^UZ|+uuQfFq zWLAV6=#3Wy8+m0$2kY7##cN2327UzSTP-H3o~x@G4|KCL+T97S)Y;3zO;YhAI#ydF zbWnN&Qg3pMb>pG|DGri!qco%O(-9`m>QO-^qv~QPqhm%~M=XVUx~5ip2ha_)L=Pkf z`j_?4D_g}TP%D;rSQ2*yqG!owm+H-(`+456zr51Dw2!g1K9d04ros>_%T9TFK9BhB zrhIKA-i>6`W26N}-*=Z4JU7|$*LK{lh7lQwQLulp00)A#Z?J`X2z4*L?7nU2Z-xwS zPcwWWIVWDXZ?D|i=Mn#!N0(jdU-w1F`zCr=T~wx0{`|86){@lkK*uI5UdwAt8GX8| zkS;hpGnB%@rPSv*b663yk8SR%Q8OkuteBk;tlKP6d8#B&0L)u0iRXtJbe%oh}JM-mcw;I`x`?-{4EL8;x)GIXw!AmXWh!RbS(^q zJh(Nnq7DQ#nc{!$Vs((#8bTzJf^0^AMTMVZo6BjWI@3m*JU4|1%W({y;JOP_n2j_g zgL6wxJZtEye6HXLc28ZqO3jINdt}}|OexD{w@Iv+pt`@EFnSN)$EUcljXxje~ zTOwWlQGM`HBmKwjSQ|U}ecgNP;nLCP;$Mg1ll&k1MEL$16KRpH30s)h@4$jBhB_NN zl!{to7JCI`$&5aI{yfG2u$E3XFry8Ql&vD(_=X0D(v)FJ+T@gWQa{@D>I3hH$P$XzA{ZF9&caHa8 z@b%i5gkkX}6jR7cm$GIGGVPhvMIB5Wd_baEr`o+G^K2WCCtAIN`6|fWP2I1^masdqu^bqPH)bK0#Rs$HG5LD>12 zzFkJ{Vc`)SUprEr9wu4TJLp|WH2+^d5-t8OSPv9scQJ4eq=lO1|5-&SP5pLl3{s%l zeFizUfxIO>V;sI!4{!VFw1rj#RQOjUCm%KhY~c-LiBlHE4&h_6w)<}-P48G+{UC_s zVc$LLnz}F%#-T^I^VaarLF2h^dYcmSr`SM^oeg6t0eTkffy?g^b zS1sr;83Yf{^pfT+yBQNPKHHDkk5it-<9;UC5WXRH7#Lu5$k=M^vm@SH^@{`i2FN!r zFOAj(b=)p$U3n;Y{wJkvxB-a?NO{V)^g&9fVuQJsxb)iMlWf$L!hP40Pd>1MJ>HV; zB)lZrKk#;yP6HO6ewyQoIhTc=+{8IN150x;oc~wPcwVBh;^X3Xrs6)XI&}50e=4A3 zvQF0P4z{=g1j!^*eQM1_`CF7hTDR!o?Zu&U{nq>sFP3oyzU&24f2mzA<6=8HUrQDm zG_Wd!OKNtnuKXoUC`Ko7Qa+z5lW7L*E8sf53EHlecG?81sl7N$CJjNw-Nufu_O2_` z*U0VeN&Np$RAcU^ag@&$~`?hJT;0)zi9uux5S(#o(=NE6JVb`!8Wyx?UCK4;ghHcVtvLurn z3%viJ1ZA+n?^4-9(;Oty`u*;Fh z4}Pb|iru}^pj5=5Nt9lQ4$(iN${70bD8^bEcDNU#@>!K_LN36WH7G%9dl{Oizb8ga zN7VnXL?_23Vdk45l1%($4OwC74{FwSn@t=_X>qdioeKu!@K=pexpIl0f)lErRfjh` z@hXdACB;$1VhyXYyZ=z{JTp6EFAwF=Qf4K0*AO_b5d17d4Wmkr zk8P!BmRk!I&Pdp;k<&PDr;B;|NcN-ec*D=LP2N~Hm~&D-o93ucWvbx*u58bB+|nbf9@2@O6N^(t0s@m{MSpb?Nzav3;aEIs^@ z!r5T6?S+(7m}{(*5bmKu5pmo?T`FIKonQXTiqBjVS9g{+-sAa^Kz@vh!bDOE*Rg<% zhDENV3R`z}0t0j1)m}Hd+%h)F)|-6BWxbsZ9j@}Qe%?RSsbKA?PCo*QdkdH4K!3P4%9>@NNp{C{SHc( z-&n>f)7;?ya&=9oSY#!{p$n@*u$Luf54X9$M%Z&PL{O8@r@<11tee|aSOX-ur zQ5!HU?D?2xiX*;z|BqeHdtE{iLw35yMVB=d;nBOjM(y1HF~Ye!IY?&S<*&@@=KxxFUH0CfqHj|Hi&k!zt1x{I*V|S0^TmsQ>z}y! zAkMW;c645M?6vQbbglQZ4(5L3RQK8219!Ygc2+wRl|*+ZSPNb=8*L1VM0kxE5`Bz6 zCXWOp(*knL6j>FoqQmUca2DxH6ABObCiKCw@EQCrfj-Y})i(WVoVHItSD%sXcicJZ zqbhE|Y;`W;iX5M(*=evMb{u&Sy1z}cJL^(qkLQ)r#(_Sn7}KT7D$!#(=q8KgeDm}3 z6Ptl%`c-+XHdjj@;m$A5PqaUh%678ek$u1Jmo1mxSaUz2c;)lM)8nrQQ`#158PD{NlJd2I zbbC?L(f8B%;D$McBi4=&?s7~q&zw|ww}^D_VDnev@>O}>LedD_ua8$577cmZ`_|SH zROA$jGYFMtTb`5+dGW)1#c5!L;(*A6e2uG1Cs*8ciCGR#yER!Kqt8Ji{%dc7veRI; zn=7cniC7SvnDU@8t1%{Szrz8H;pbo4M=+X=-&JY}Olow|NG{a4N^JZNn&O5G#P^r zw=@_lEl9&shl1EsyW9lExHzWQ*1}9Zacm#GcL?IG$s#il zP;IR?cf!aC_?;u`(*dDgx9e1CR5}ysFze=++5wYcI+CNB#Jn{DUr3?WgI;WT{$?|j z4i&_rDPLJrNeXWG=Aw3Pk_@kl#o4g|Vz)c6=z*cw+vs?*S{>r7 z^KCGHAm4CDC(4*iDJ$+@1F+|7(!#0Ds(q@i*4jjfrd|H{RFUb>&;)EQxCgzMbihJ? z@kY~`7fTwRC!c1YWJgrQu&}VmDJlxlpvStP5l8v*MVN#D2|c2h@qxa$R4cYzhcTou zarz0d`*&Gc1enYpB=s@du%)#%tbaSO+dw1-rH0;U*_A}&T^T*Z0OdQC1x$@FN<7bXp><(-=7C8nFBqd1^6Gm+C)9*nF_GYl4K6sja zr`$hba!B7*BBY(ak|Ebh_rMZCbZGnVRYUxjqyqfB_cfzD@sUWVv!b%k&t==c=_c^= zQ)`Yy{fr7aHd?#RV$(`=O1t~k2+E}76f_tDp3hhAzM3a!gVeF+TqSis4RAp5QhlmX zCM!)2)*A1=j~NHM5iv%KyRCw0(Lh?~C+>G(X3wmn&OyqbHgUo4b!H~W)+x!>X%F3Q zHl8BWlmbzJ-5-O(yibSy#`oV}6dsBF9`zqb%-#~9hUcAH7^3w)^&V5ja!k-;114h( zpLNGb%+PiS(1GpC4>6VoHwuKm#*7X;Gz663e*lJ!0>K2m6N8qtxMJdx6m+P3{WXdv zL5IrvMr(f`Gb%0qF)1c_DT|^*NmmYe*)i>8cf4V~O%uPMX1^YHm^|G34O9m71E}W% zwc#f@>CILi*>16+Vs~4A6{W6fCu4AsVGi-~6;r6;?u(L%50FtFptCZ?)RmeF#n*1B zJ)!7l#YYdm|EeuIet2`?x}3|%c6xe1b*v07DVT6U?XR7*ftOM}fU42rso{87Gtm{T zm6e?@0avpRgKK3INa8Rryv8KViNvjj4&SJaao6vGln2gJ{Gc;mpg~V2r9@$Avb+oXoin|+!3Lna05_HK&l?Yy z+yBjz0kl-ec0U9iDP+*J_P=yzMisfAT5V)*UMj(+BC8BTk|-TJyi1F%{!^ARqC{KL z5bNn5tL)v`lJx8Ws`XkE*7~Gk0ee=iXa8~iR1R-_k@VfT(!Q4vGG#&{)&PVHqkzJkK;=lIS6H?8C# zfZnYF{4_i_fru+N{)wVT_E-I}+SS^SiApw)u(+%NHEpy38D$)IFx>0!;jaz0zy+#G zXLPEOP*ycSiK+ecw*|C3pgmyN+Ib#4;!M*1ri5tS-|cAa89~86-#29pL>Rn?^|bEE z&#ecRC1#^(s{HInJV|zZBH&9!AIUOK&5D<1YIn|PM&&D;t4dWV?7G)arMt0Xr5KK4 z^m0_`u_$7w^DZ>Ex4D|89$U8Sq8x|>(qfX4{rY>xDQENm%hlKP$fDjYZE{&`*pn(=EoLPp)6SZ9RhI7^YX}TSnyZanXN;nq6$lSvZbl`n%11WF|s z(c3CJl$r9=>+AZ_l!%e_Q!a$6s(?pbf;0tLtfW{Z^tlK{yp;7a@EA6aE8{HRCkwT5 zjgQ}0Q^83lI`exogL(W{7q2I4^@(GZ*D1ljOmM&HQ?Og7akjO+8iO!J-KtLr+I(W9 z!)~0j_EU?9O*U6FB?n>K3k+z{IH=?==J4&9osOIdM!QDRaN?vU&$^QYta(DL+!Lgc z(r|OyJ%r-*aC*acj}OjdH=1}4ozX-;DnscqL1Jk!zbSh^Jv|MCI#`Q}j5#aP2mV$U zmfNe&7xbnQt1C)9ZomDoJU>So$Quik$G^(HbzTmHv#=Uwcz1TzsP@PbbSF3ne3naQ zmQ7Wvf|Qz|Y?1z!B*Qhh!>?kqx?{gPTNL)I{+WR`sEMRS8NoPcyd@>8S+KKf?-Kv_ zG)}HCXCZ-h8I@mVj2IPJ7;}Cu=4SJSCCK_ng9mw* z2&WcPQtjV4OR#~;nKZJgEPxo12zkNk>ev8i-%yS$Eu{_@adYGPZ|BY54w;Fl&PrP@ zOoSE{TFlJNIUdc>9335f66^(x)utB~2Ex#(xP6}3FWm|HX|OZDf{&-i7pjeLIUQ!; zxiynB_BL^MyRb{m;%;ondimJ|7lwr1Z_ISq9O)Z{_=4u=txYBi+eY+i!Zpv!cORjw zQrmBQOvil!X6-uUud{-j&wK)E)Acu3I-z=6Ad^!bNoIwzdzDn;wZ_+sJ7|(gkW=@R zn#e5aEeqBg%p4(wPOd*U^bL8NEu0ea1p9-NMjEeglANdF&)K=CK3S529I(1T~S!2#e4Xc|81eW-1lCWH(hI? z&XcgdUw-QN!M)T!HCD6Q9FDC>cDKNciuJTNnMYkYgxu~D=v{Z3MS=nq+9`fJ>K2*#NLu*IPYOvZ+_J{ql1^ z_N8~(yY0EssO`^A;A~rcxzFi!!Di|>v!kTO2sMQe!-W27!j;+pE;HHfdi5d}-xUz= zk|=C7yW<>5Y7AftgJ3$A(w&f8RBd_-4Q%)fj)lg1=6;B3-T-B3`EN;wXyUcbLnD|! zGxSNh)dsWBch;-Jr3F@+>}GJf467rVJjqW-cxbUiYbkGExz;aiDx0>3|Go@G&}-ik zwIZJtHI#f@t!ME`o;#CAA`%)pLOh0}`jR1nB&DuMA5fk{TI%TWR}Ek>JNge=^l$^% zQg~3m265YO{4;^ne0jOEu(PAW_&PZ=(^Dvy{#~`6Y`OhhT?sk_OK`#^v#(Dauod8O zJJb1BloA{a4H!Lhdt8BLXJ;`7@#qtrnyd6bcIX0rLEV3(@+db<85}*EwNeeFi`zw5 zi_mCzMiyGa&iPs5@cRV%-LeTrAyo2vXDr)I*VX;*)>|_C%np>04)zGe?W`Yn2_f7M zYv?Ds&V2Z0x}&l8#5*S?xEZC|o!jVsLkvRCEHVwY;9{M06*UCRax0OzKroZ2uoY(+@mHKNO zNRc*?+xY+mFb6WYJ6Qz$3b_fOq5CGdp{pl6lGyrQJ8U{9R9uIJTh^9SsA>XOs&tbmbjoRc6Z1-;(F^7 z@xx^Wq}q0ok+noE&>sH%p^>ZBMfI~taXcH-bsmN7TzOC4$Wp`T<%vrPOT8nGXc8^~5$F27# zt9GARE)SC}kjVa$`@@-+$Mx*I)IGQwoLVoFeBGl!Z18}&ZVG(wou%9Dr}k(4uH7Wy znKfSDJJq?Yw_`O~vLnT~x}c~qF*zlf-x^RL zgXQ#kJMYxnShbhL=i77A3?CYp>zrX{viSnF;xsOx<21^lw5)I*bb61YNpG`7u~TJ5)^bdOK-?Y%W_YEz!=@GKR~UUNFOO>bD0 zgudwWIzEKkee(IY-q@pZHnM3CXc5>9-R%61Sqe6{ih3E`;f>fMltgD_Q;VZ=>i{!E zgfp0ex?SSA#e;OpI~29v7HfmgrRej*oR{SuTIIJJ;eA{7o_@aW_!%O|@~aeX{HlwN zDL#$@V|e4>Fn;9aF4*PceJm>a zxkw?q5U8HPWQwt6-)aP3`5$-U5z@JzcnB8%u?;!#;1&j+(S^2)jt+5J7FBTECs(jvMh?EdSXIBc8n9#D+I#OJR7co8 z^b#5_L1(i#Sr`b^%xm_V@u6R=i;mnUr`UWaF@AkXgf}cB>pV#tiH3 zhbVFwe6r%QrA!-%QM73xCxb-d^e&%Qf|WQD%4LgNL;A&|w=(bNerQ6kX6ouZj<4@6 zR>uQl)Fh>qD2JgJvmNhvZtJ&3fM?h*l&I> z`Q%Sq$Y%?VT2;06@tyw_%~7Gp21Je4^TJ8P7TU*Z^qaTpdcU6@3|wuWe=@yhzxQ?{ zuZ$0FQ^5w20i(#!$S*gFc=*e)CdqmvXv+2(Xi2#f?t9cuW^Fxn>XfKn}S2qKw zf7{$iYf?I6-rC@)0E>RXcklq^=N4FtecOh*4}`#kwgKKz^wm}V;YbEAq_0*& z3hdc*xs2@KYzA|g#ffybG!V7^_OXJ4B>{|fF*$=Ekb|_Q+aAcZmLY63t@)A>l^};2 zbxUH3_P5ayR{?@2rTdDTZynyaH*WCuE4$Y0-j(%|8)M_`e0}tn`aX({RZ&5Emfz!? zn?}1al!(_CiJ8#4I>-JfuFJFB-MZO&CAR~R{>zKL)BY;*!~*IjSeMNSyJOhK?Jeaj z^yfbIumygLzfm!FOV`MJp?$B=tAO8K$h-ghTe9DX{yT)};;b(-!%`vc@|){3P@x}| zOPiTdQAHE%j4ih-oR%16@Oy?@RJ9GwlqkbV7@Dg!uXr`F^-R9P;6B#&FVtOr)>+@4 zsLmVFyui8_yit~)pLM(@Y-9seVZ}V!GW?YGFBhoo*Q0hUMT@i6M06Ics_J%%;H|1BFE8AE&%$2|7$6qxv|(B; z);kFScC=xy&(SE@U;;i!irR1DF^)#It;-_KrXMs}+8|s7)Kgott%o9wyD>5ZT?%}; z%fyan*7#Drt$}uBNw`dB@YYjVaIM|2T2I|KD=S1MS@&?v^AQS$KA!c-u`5+N562to zK$SR2*1;CJba(e2*ywDY0A=bQ``2J}2ZVk~b=q7U-spY3J3zSdkBT&XR1GAfh#_5o zwz|4{vQQmh&aPD=?L~tol97NyPSGO?8!&7H8-^poABCcT4(SJ+UqFHEaHImpncN~| z@?=D1-}Uah=ZSU9Vq_Z0T~S4|W%PQOmfmt-`{H4-ZL(2L; z^fIs6qT#2G1q*}+~;#YINbL*ZbO!gaOkSA@!lu4Grr$bb}ss&Bpq%o zk)-|psK!~b7@jh;WsbEuhg8{mrN2;ZpzKkuP>rq3p#H0@vT`qqYwgF@b^HO8;oz6T z|UlZ>p1JTaiI`q zyJx&T+XU;}@jQL@#@v%6h?^3>O9V0ypBOxi;1clqe(0~YusGanReueQqC++aho-tG z*nX;77uR;dVL|P`+@8r?9?Hj-_+xuZ)WTPj&q{d0_a~8f{gVC?g}PLdce=X}5yt)E zjU`ZoR7F7E%T3@K`!$2wkuR|c(8N`!?`gn2)$aQ^{e&-*9_t=h?h>orC_v8J?6|;9f{g>8vNV2|X z)V*5yZfuAIK!#{a^*1=C1cw;yAD)FfuD2mqU$wbV*Mt=;!P*e22(bKeQ?CM*9m2{9 zyj+xOFV@&{wdjH8ufa=z|BEB{tk+%qh`71A(C7{v`NCgMmdWoh?fZXhmO1|e@MHCL zQ)`5#YriNWvoFX>H-`{7Yaq9Gzndz5;%rQ!zJOA;h$6UkB|(W7or&^<$YyL+}24L=`FRvUjM zP0XpF3rtZA6^p0V#AJyDO|6RZVv$d+3TtbBHsqD(PotPg1k0L8Qj&qmDh3uY1Tq!T zSW>~VAha{m)Dub!OHwqn2{0iK?QhC00Jfow8=E6jNfvQD9{K-+MhEh5eh_b7*9j{Nc1dl97~)CH+S2}U_2F_Vzk0cn2@%F)vyOpK^B*k zX^%}VI9C2G&&g^D_5>boZfRMHVFg@) zX}HVerS}OJe0+SmXJQ?}6f{kBb#;$+p!<@Pgax2W?ZpNlLIVd+NT;oCG(<&3VM5QB zRaI4;R8>}1*1Q01dKGnbWp#B4;LL?x7wCJhORv_4Tc%z+r6zzWR7({%|K7rMe@h3L zZD`4R4E=_9_|8l#uv*Vd8`14%Vv6CXe4i91mYmmaezG}hzE_*8)E99%6& zutk`l=9S97;5mYv6mAaqN{9c7m5r|@P*Ihba@i{F@n`GTsCK}lDnm9pw0P2iQkOAW z!b?-Ojj__&xk0X$i;z{@+9=uP=V%X~P3KJ5U$3SYInCt1Ke?vYsgDiKHwx9vH%_9; z&hEXTI7ZzvsHvvr0y>LG)^_=H6fxhGaWbJBeIM0a?N%f>^9;>glynVj+da7@+)hR1 z!XFBwXr)tHgh3dlQ~6RW_y1m1}dGj)B3oY>*@s>JlXBru5U}Jyweo(UT>|pJC(e zW2G)u7NR5M#`)4{*>sk{>X8pD zYI@zw*wU>`^KrvvMwQ#7Go0d)!F6B2%6t6euFjPP{IqHNKX_$5vh*imhnjA zt!pFhrf2S0*TnRyHx`&iLgDCpd&6`2;P+|7o^-YyR#u;ev9(OT6b>t_{qbxnA_(xY z_rJY9KMpGRb_FBiYjpSu0O5OYQi9k7xN&<7S&|sE`?`YQ7u&30wA8w=8N^pF*oUbY z#1QWP+#etXzaR9^)Kg9b5lDIrXwvJ~#01&-{Y#3X;%Rdb5^6cp!b{iUA(laxHd*vJ z__E$~WVyuW87hueT=R<>6f+Iy7~Gc-HqLq;HP5rIA-bkIu>;!fS7mWIQgJ<5=xq0S zPT}`pz1|x&8ct&P&%QE*$TJl1ZJAtJlBUKmoUhcS*ZA|3D%(45kGEx?!dmEWc49ggv*C&P8ek9NEZ)N^`{W3v=WzxY+&yBQ+8D&; z`kUfxM7s4W^caJd;+bKZ3U!>>^u~RzY8gzMDh61mEP1)NTk^xJ(^G-+ zB{>6|pG%h)9y>qg{*rG0G8xUy<@>0eu}~A`&N*_JL@w*+f{?Dx2%7N(6iZq53ZW&+ zMKxykAJ^9Zq;l;un!fg(76(Htn+}2_Y&B9^f=cigJT+^qudno}KY#Mo6-+f2Q|wv| z&9vc;lUGpZsy5~;O)seDljA*(P1?#=W{E=$a)-#$~=hM@W{z9>&!a4(` z;$W2HOoB54QviY5n41gf(AU`Fe~;Ju)$|b}jF1GWJbXY^Y(leSW+OZ*Z=Zq+_t84v@%6L7=b*&8awXeul|e z+``t{5O+{`2HGVDp@h0U1Dx(KS)hqXCfQ+rC2 z!^FmX{I2vZXzFxM(b~`7xxVAkWk_JY(FC%G9;j_>m-dgn?OwgIfy!^|mI zTm!vTvokX)kF5<2cb{;r&CQ#BJV)FMsJt+m{wePHUV@)c1+E32{3<<#GC<*U_P9`S8dNX%}F+9!N1*qSn%i(gyF za{2l?Xf+FMs^5DQiHNV+hvzCqYKL~~m(#|8s>>{e-w0`6^iv`Iw8rv3IU(FZx@+~{ z#kf;BMD5oF_=|0i>;^PJhI9wIc=Io(vnT7GA1KPUN}vbFP}Kcizeb;~DX2+qrE^A` z{=lVduwe0f^X^j-=$_g=pCXKym|B#VPC7sc(yVdEy?;OW2oSjuX>$v0Cdl*pKA-oG zwH2rFEVc6X+!@weEx83MNN*yAI~k{rZ*wRysDGltO|Lp8m_(Q|U&T)HUv03lb8;Cx zLYEfUzj-68>w6$C&t;2Xfuc|O|G9NIlk3*QQQvOuPOHq@8FyVnF6YMQNx;^Bz0-8P zIPFIhksV&XeVS)8x2Q1f)IN8(&m;#(Tml$iYT!1NiDm0Bwpcn$Wy-Lt$IRWQ&-l(( zNS4>o>2}_B>mu67yacug`DByt-JWAG2|=2>Z*e=s-KftQu#T5!O$EgdPAn}A#Zk!M z2zqnpQcum#_lINBHSK44Ei^k(9XhA=Mqsmf-B}|Mt|;&_enahBVGYM6*CWR~GhGjB z^S&P=uJ+z0N=Omy(CQg2^swB?`^#&C`s_A8?OB|J-|h%CsS%!Hi5|}$J{4pjqARAW$IOcwhHk5sHli?Ii9<`=tgF{Y=-;W=uSgit~E@^wJv>{iU+0% zC>}DFtsv0lYf645_6j_-8xv=9{@To+$x!ifBXNIm6rs#Lzak~x@aKdeyc8WfcV=F7 zdQM5guCu4MHp8ych#yyqT>`UH`M#L z9pO@i`OO6n@2bF@)|6lg39nEIV%)(KO(zSxt0bBvIo)^9-f^TZudov_*t>o zjp~oIo>vsrlcNFDT~V3>t)^pfgt^maacS|;z5@gfGD%de)@f&nnn3c*p4?Rs`Pai@ zc~(-A9#Q9hGUp)j{5Y1t?^Gg9>CVz5u_y;fE|Zu@s0u|fE&*qf7^-ZNpy|50x+Jj@ zDiJR${7p$Jk-zCGyyCPBB(RD=#GI7;M4Ci~B}dvb1%%76rce?PN}%I&{2(_ADVTdo zN}(zKdwz&HS#*pvx?Ff*An0_}fEUnhEq;?ViBYnMi^W;p*D|*$B}cO;C~J*!mlZ?P zojOD)aSn8^$s9YQ1Wl4<*1?9vfyqd7yF8{+iMB-WSdu!WD8n+!x@%Omx>xIhx50t* zS;jf8{X=oHtHSKdVy!dc5K?=_8EN_%QCbXfX$mRO7sKkSo~}V~a8pcS5ud!aRj4Gl zm=20mkumV!!oYyi0N^QhCD%-n%F~Y6>e#dMN=iz|C~j|WXEG{wS00n3dn}p5RoACv z<%|S4qHftUtO^fxoWxuiqtSGwtr>d@as>mHk=y%)74a}CI&YdID9pZxLN@}>vI#&^ zOiN2k+FUgNlF~4;P%Db=T3xguB$jqI=+fI^cZB2|!vJ!nW7eZXD%`u7cq4lP?xYgTMlc77SrbM35AG)pBJ50;kcT6mrN zm_45*WUf7@^7t%`ogH1jIJipCVe^m(C8G-+A3y0`jbvQ$+1%ZyKDT$=llU%Ej~q)1 zQ^93NncG7{#(%MKci)Adt~@`ysx;2V&P^X^B9dl;XJ+$6l9DD%tn4h4{yhYHo3Z?;sey`P}OpTrG_EQhRk04-s!i32(^Xn+n%>v-v5PrW_JWhFRk zEC#i9#8T|aFxp#(0$*mU9_i2dZSuoPQAbaj_IbBqCTSc3+xVwEqv@A}XR~P~Hd*nB z0}Jc@8N2tmR8nNY>K|C&$L^;Kcf z!*;;9|%w@o~qY`%3#|W za7s=zr|;eBG^~6OuFd&YWqRdyUG`gGo7cVL#=noee0+yTM_ZdA#Czd%mA`@F=<3R` zvUv~B_iT%eC#C6mR7XARzX930F&QsdSs+L8A!<( z1Cta@RGv}_`j!7_!e_;AT-Vy`77EXjuDE!ica-Zr8W7thw|@b8?$&xfx2iy+vH5z8 zk7qYQd7<6Mi{|!sM@RPCn{SrK9`2mbJ%1ETnMG;&W>@X_?jconZfRj!a0AwmCG8>e ztOXC|JMr?V^GA$ovVJdS zS(QO|gmx%JBIbbBNKoL=qx(}FaA^YGzJ+BYRo;zYqd_@L^@6YD9&NP@)qvp^VMH!qt|lvv0V zh4eb$A>(a0!V&25`LMlEWMLSbMIpwlLF3z0xKW!8i#SI|zbmSfYHH?-%W2IlyX3g3 zjcOMiT1F(LVZ|c0uX`@Nl$&%(b0?V@$G^aJhSmkGkQ%zOH5-3`%m>dNlaS=Y^@B@Y ziAdNDsCMsSVcp>heYn41BXx!d?69yBycl%7eb}^*F=qz~qpoxK?falGF|i(J=nkd^ z*wjmMB?@v>BmQ#^V?^ZC6oPE(kDWI+?3D3g4biSGo-MeU89$5-GcFHlC>czH`y?#R zPYY{1u%{Qy;cC`kafhc*q6@35s~f*m7B~w4baptUi<{f@?5yf1%GyQmFE{l5lW5Fs zEVJho?3|q9`ufDDr>FmklG)i+@TQjw1R2-&wEcId8j@Q-SALrdeuNiFV$uGe)n`O8`)^!igY~{9kt?kjz_C?91{*T)9mquL6kO+7_%mh#(ylwH*4X7 z00z%eD%@gkZ|{2`y9>wd%S*=f!%2sC7}M+Ze)G%JaMMjNhxL-%2mOhlaf|KJh{~dz zn)ni2woZ+o6A2KjF)cZDQJ6|xJ}uTLuc0BAWWCNG5?l`YC=3j-iYf_pp()azQDk~F zz21Gik9*Fqayp)1iJyDcuL=N&%w+2g#X?F7RyN+D7dUMzZ@-cLm4zZLO;NUkbAoGl zTcEy`bx8vMwL}9?cPJ*_iP|96gF=+`M^RO6D*SkRWKG*`lYn4X7;KJv%4D^Lnr=(* z-qFWTjKr@DggS1Wx3c%kF@d1ppW$53JYvz`Zb5ISfy9?9!6EiuMeg3KNbRq79h-J< zcU2E#Vfv=GrRf?z&5H3HT-lqCQ3{S-^X**{LQlAY&x=f#!}^(hW!id%`F@`|$U7Fx$upqI5Zecn`MofVYZyqLDZT`)y z2eii+*cp)n$9c2(-R3A2OBS_jsHQN<1D8QeB2Y{8Bm|4`3d5*8MX2iTyAdmq&9% zLsBv_b^_7mH>R`S*!5qwuz3#i(cuAwC?|?|& zjZQxzy4$H$*?#2NetCO-G1&18L-g<}pwsw7tLJ^I>YYQq=7632vL$ka)Ua_+m6{E+ zoRG<;z!No}wH{hb73=6QbZ@iOs{hO{^u7r3*oqBFtzNo#e$DV23o36rCr#7xO35^X zs!_XXpQ{#0^0H3hP_Nt~e%~X0c)85pX6yIMVDi3odbylLl$G@e6Mq5!BKkG<$4 zujq63yg`ayU>^4gC)vlmhJoEW{CcT~nB9w}%Mej;Je-a#6V@>T5K~91tarDrnKpr5 zegC=B*5#6YvrW?qThl5qOoUA2_5s58?H{pjf?{$##^Bd4k;TdV$0Qhcs8JHI!Jija z8R=bNTp`4E)I%qqWVKBHXqnlMa7$6e0YfPPYzjh&$OLW##E%2-!(r>sSom4%;r)pu zsj{e1j~6fukqUR)4q{~U~Gvf@TVD+>9V=TC2r%WS?xB$c4MIm^*Qag{zP|)+5%>`}eOCqnFPkP`^@! ziBEm`%~%-XsGQDIW?>G`>& zxES!L`jyG&rlh7OE+YdkCnpyf6=lGhDt)UpJpGbHrt0J4Bawf~;M3rICQFH~tE*er z*vQ7r{9Vh|qjU=&a-2CuzApDi%fI}+)ukJe%YJ26T|X+9+73>$wDfApiqHLOut-rg z)6gMHgTC|O0W>bqm<7+&oN@}|#*ALQ5tVY;6yndm7>G#0Dy;U$u+aq#R^ejnZolaz zY4)VJgd}M=c3>QR_A6}ai6W_t8fLCiI9w~H*#LwDS6``DHabI*M(lsJ0APBlGnB~j zg_Nu`5+aBZJoth_*%+P{mm_Lq?RZ<#5?$dl^__PTH1@uG$lsC~w z-FXMEa#+Jach=x>Y;rUybcMjnM_ur*PmZh*JIZic^PPNl40zdF1(vFjJc_sx*+|2B z*==WD)Gz*$AQ5VePk`$P06?S>J&meya=ybVV(%muuo4(#6K#zZ*N!929+Z|UMvEau&1=CSs^1Z2ZHmQ0!II2G z0ydNk`{E%-nHh?9)m*JbY2RuMCigYgG)xOzz&lj+F$Zq^7d0{1E{F3w5;y zf-s7Gvkt%(=RvgEf2N@g(%?Bge$pk(>AX|j+BhvY6DHd z5EtI(Fy4ehk-7B=mIk-AI|x*mLbn$)?T|~#bs37?*eybRK!L~cbzGG}f>H=#(kI6r z*K>N6SHcsRA4q2QeFxzVmy59o`T7RIHknv+il^>Fm^q%0nsD6j37>L)Pu^%o<)_xRI>*r&-gSx@JqJLL6|$8OwlbQI-O zV-80qOX>id0JE*ir95VrfWzU{j_JpAEz`u(iinw=!1CSSp`c`){^(5AhrdW&g4l3X zlC-~pMiZDkI6X@UMMM%5Tfly(68D|@8_5n;TqIhg_@7qYCT~3gA}%RXIWkfb5EyL} z)KG%!EziVQgqXdq7jE3U-RGtY${-;K-@XnG>z|U$6=x;gx`%OSZ3Ei4fK(nBI%OWe zXn|!aq$}hx0WB1XlI-Lp!_pmUhI{0ac5&C&l zgC00FluBetLK?xK5eoKUYGmPWWMqo_PPNxUy&1Z|>SuRCqLuA7e*68zljV-Yw=m%? zEj$RNS%46?u|blTmzOeX3QXwH2z?iR^#AG!{d9gp-EoSU;-M0US zw6E~0vfI9X5u^pBLAo3129fSY4jqSX1O+JxLAtx7y9Mc#jzfoZgLJoioA=)P`v<-= z)G-)x;CY_2_u6aCHP@U!v4bU+a2|9rwD`EVBmjL1M6x`bj*$^19bMhs!^0jZM|?th zTH3F@3oK-W$~oJ-AHR5|@|Oq}Q!>2w)(xLN+SiS%fv@@OFaBuCs1fPEkEYIv^v}1- zoxp0$Fgwe)yI;+?10RATGTs&ip5oZ-Xh&%3&+#`4!NLc>pa=O)6_1{LFW>K4)XBmEP_r}sQ|9k@XY@7v;~@${q;v(A z8(buY)bHft`CTkYHRDgZv3{B13RA^u(wyq}de+I%ukrpFTC;Lyz}1Y4Qhx?QqhD#q z0!2tNG0ygwBq7*86D}^ARCvK0yu8xoQFNlZZwGfIOjNQ^ zdKuZ|urxCsbrAA)YKF{1HYSDmxg#^ClVdGV1fLD<@pFX8QFtIrrqD#=jByCGe#!LA z`bKRo+XJ19li^{B!Jti^36U|0X?PyKV2jX4o@XJ8=Kk)LV2xz>cV74pDrtkSlBwa%P6QZaE8p z9Wplu0n>;zH8r7ar_Wy@WKFVBgYYJo2h@+C9E5eTsQGa!rl91cVYRF)Ei>PEAansjz_(g+-i?CR&RV#~eQ?J)MduB3hH1 zekAt2rrHSsp(NCpN7{);Tq^Nfx431>*fK2vdIGJ2ys)B#Di`r1-s=eS8c65rn}4dA zu~89JC4>DER#luZ7+BQOGO0x0Q&UoZ3uV|SRbpm&879?-dy0crgIvW&C~GVt8r1t* zV)~Ss*v~Vop3gXhs$jiPEvA$f>xFy2d6=Oy+<10KHhv!-o(!!7wW_%K2ZZ}qSWfGn z49JST$1@1iXTv>h3Z~WS z4|}+Ys%>o{!BtL_DEJSi!f79So;O#!vl&FDfA1BWjHW)6!@jx+4r~T3lg=!@RU?Gd z?hv!zVarE!8DX!!A)W+!BCJad7?ESq5`-Alj;x#^$aYIS8zEQIqa-+f8GiGv`$fUq zP_vZXT`Qr(e@>F%@C}ragBJYwnMYa-*giI;y9vqh5&zn|T6JlvY!c>cfm`rJ z&M?ABWcx<#z$OVlJF!d$W|o0cRRPuCuHmuQin=_<51`zZ!oV> z*LrYP9~yNmqxl{eZ$(3l1+S2T#d|UnN=1sztqgAbv+=EhB1?g9-40aI3ek@F$&tgV zVFfR{D2Pc#*)=W3?JTU#5x478ZH1)!UNbjPHnx!NV_+&JMjE}5rOYzoX>#=NlgNH{ z67ZIqh>if`RR}`xucbSej-p^$+Fr~V5k&=sQ81@v=S4!IpMH*kG3r2MGH%jil9}b; z_ANhxM=GCIhKU0&H6A>Srw06m^59fT1@Gy}e%Iy>PHFV5m!sH)sc9KmP`Nh2qX@*Je=*@)` zFf~T??@%ZFH_=^=IuFR8>o&?xW8sN4E#-m7!~qr*DM3)$Pa1u4!B%S_GJNUOMg26N zI+}}fLa=V;o>gh20eS>W9{muE!iq6V0$s_1Elt zatU#$OYP*a!Hg@8Bpi9Pj0!yt2ynS-3><_xbZQ*QT;;B`;v$)Jc)>X`0*xu+3MBzl z>|6gZyeDTI_@^&1GSkX+dvl``iq|oIANAyaqZ|nX@Goj_txmj!jROPB^D(XUI$ypE;H2METME zA!Q70M`x+B7B)mFFJPiWQ?lJxOmyNHprQ6f{3Rw09~WAck>9(I8EFO*-}3ux_^bbz z95qT1=m+O8$!e$?K^?zrXSgTS+RU6by>{qcf04Z-NnKm{zt}d&GYKP^(d!?C+2~9&;-09HAI@?*9?xpnek5@+A^X^+kVEnjlzG1Jt zY3}bW29eHder;V@MRk&{*qr(Y5z1gbeSP7$M3P_jAIGOA2bo~@og$m$1jk0T;S;0U z!xJ!}k+PplLyMo5ho@NtcXmn1iCz)xkgdLz{gU$QF)cezfovqs?e_h-4 z%QpT8oBLjvPrKryJKFrEgXw_K@K%9=MWHo8$6T8jH$4NY;j!KC082(9`y8Na-{SAOmtk^u>80_WcS7`y-yjJ&PQ=>9bI1BLw+B*_ z;2jSP2)60Eg0fP4yOE1a+~wuR-vYncby-|4F2*@W4T}e@4-Pks^j~;&iBpd=^w810 zNmg+A_z{FN2~$%l01f4FwJa?y+e186kG7o0be$>{EO-zU@D`S$7kUX_Ix3tTtD1|m(&c)^A4b9rjHJBbqWry z9NdzRHSy6ewEN`vIn;c^G~TLL7ZyiknMC;jpVmpW&{GsnI z_xuYB>7X-1s7_;InCtoY31hMM^@l0G-a%Klg&uY}`EAn^@0$;`o^@%rmoZW*#n|VeB(@aq&sKLp4evTG=3b3>omZQwUGBEGpWFbGQ%Ct*G~xhw&#C zObg3g`1$~Q_J4R6U9k6NDteEuCZ-k#pX2{cFidx4UH-d-S-%paImuJ| z3R@!0fGk=Dor18SsxCy=p*i7oMPpbvOju5H*uE!U`sDez+k;i{pFi%_52k6iC1fXL z7HOR`Z5QH)t=p<~2eZAV%AzCEkAK;226#na6(a(PQzhj_2PyK`BQqjBqCO`R_s2if z>mU1T(O+OXui^Vh&5zh);UR_N-T@d?z2V|8i2w0)@Oq4a?!)g-J|j$#cIM6t3e<#V zGp#KPj%SMZD{+~Q;5T;9ZR>aDm6UI;4VLHUwICUe?r?9t2z0z@MlcQ4x_Nv-30coE zrNIsYsn2H*k0P7GUi@QDJ`ROXK4c`qivX|-r0ZpfC>+=Afp{=@N#7-)D| z0ajy6OF9T6Apa>WDaom=#cf(t($#$pl<&YMU3G2%S`(Wq9sW;(3yqBeV8>VKl;v$T zb#-+;ZDK$Vla@vTB_Rkh3E2knUS*)0{3K72ljC1k#{)`4`N4$v_$r5G5u(?x*^?E{ z&(Fc=9~{WSc6N4*oSkEQec|dHmLs}WjiAr~@RpAUzs)4ht!=DqZF9j70o?Z?b50OH zz%NkK)g8C037_0Onw@428Y)N2~S8Bz3!Q!#A$6QeIm;2A9u>4JV zFTYBw?`=Z*!p*4Nz4_FQt$>P><40fWs3ebVndvc#!6ZJW6a~f{%0C<_DYQBHs#D#v zKQnmL(x9eTMV6E?86wZLBWM-*1uRL>pd?xeVHy&#p`r8f_-x}GedFVZ#H=h8-z=?D zy2u#_9vP)zHCTKsVl(5;a?{#Unu%~)w{PNDyj!^lr}2#6#(wDWp5jVLaGUwZ#tMtg zTtbbIP*&gXt=CE805TzoD%1DE2CNMh-@w8)!b+}9nZ5z$)Je9EshEfx3Xf0^Qjrm-wpg1WjeD{~12@Y>Z94>;Kfx2>(_durKp89wi7S63?-82EWa zyD*}BkTi*=H>gPb>P|nz`Z8D^XG{BkAdMNx{`&M(V$JRievy!4R75Kx&w*R;vVpU3 z#Zloe`}ADT?T@Wz-A7fMMRw=BKRNhErEd;f(k^2stO^~>On^SSt8i+a{d(i_V&82d zPv!0Hl*EY_=xOeF_&D0!j~m3Bz2%Il1{q>}>2;r0IMjJF*PS z%}c@L5~-)LGA~DXydQD~t-Q-HA9wh|%{;Eh@mmM~*c=&q%!z=FG?aY2rMuUzv8Q?YKHO>7`JovZH=BsmKCiV{;2psk)ZEq~}s zAL&m?DNO20&4#zR|QUkBw; zet!PW-X2qj77)r99v-F^eZFAN3*c|? zzSA3_Z2Gl}&pje+BYm#WMr=x0J2lvuWLOB~& z?g!oeHY666+Zx;c3Y;hGAd`JV;yh||P+(D-&hSChe*T|?G4sIRgS(as-Ft!=s~6RY z4JV=wE2UHT)w^%`y;-EGeURJYyrkDdbHua^V)_Sq>c1)^Xh_kNAaCHpX|iV%t4Y0` z!rtg+c4xOy*s1~h>9yD&<*_P5dMbe|*|S3DlQ-vux0G*K;G!!Dia3@gG~AsU%w7p< z8sN=EVYX>i4<0^qvri4LWoLE=A|R`M8DUKX~xpAX!v@_=Kj^mgvST@kvs!z~_vM z$R@?o)@Ci5j&$4C)#n#B@;YX3QeC6_)=gr=#;J{^{a(*{#Is)_-TjSi!ik-g$zpb#J;AOYay4+Mjp zni_1`n4R6-tj5MhgwSXigpw&a5QN0V#SxxKO&rq9>OP%2=@A$Z$Vk)i_@^(-lBU~x z9{fiO%g#M)BTvi0`AqRs_2rW5!p}?NX_0y`Tz9mQAiB`GcvZGq)q7~xHGz3LMCG#* zeP_S!>*283ie$eX2@`6^{i)y8-PRN`V~w$vXofY%Z(=?DO^p~Hx=CZ&+^>K^krVqK z3kM1($q+S;`fU!OIKzl1or(=l#!NCGt+M{bgK%Ie&9N%}#BB(o%q|Ls|1c#qp1jbA z`4a+^WqAurqTk_qKfGe9tD=_6n$~t-yr0G1kVO&}c7huYJ5Q=AO%So}Lqm^8Q5c+QP4-DfZV}EY}LDwg@24Cmp7F&ORzk z(T*CJE!5I6EY(4$Ydumpd}6o9yoOUqXz1YQ^2mg;Xz2Vw_wH$x%_l-k;d=!9`%7mn zeJ|k)77{oASIr$Sqh$izm;;tgdwJ|S1vvwwj*VQyj{9OUKb)0asd<0@I)B(4n)&x0 zN5{k3?Q>VoK2t?bV_oP7DYma=lzfFiVi0LlP)eYA0F-#!h3R!hYx*{?Q15h$$1(Lm zm}1yzmk)np#-h24!rb`>cgcvTaBv;(;Q3laK!*y@OjLxzW*(Q`P465dQ{}J5aAr(d zn;98>3Cx%BgcG%Iiv-Q-KdGrZhetUzZHX!Qh&?P5pqDSuC;-mXF7ujb1=`?lle`S$ zkZjPZ1W7ghMJGB4cMsnA1qDD^F1Mf{sHlj67(=@My3@P{9Q1N6)rg3Q1Y~5rCRI-r zx}6;h=y3z=8-rBnTR)UCSpncy9pA@lnA4T8!=-jXo^ET4-n1CeZDI^AEF*&y6bp`g z#9@(<6LWL@Bk6*&d1`#=BWmX?nXvV<8xSnA0KD+~w+@#gljJCfDIoUL%qal25{Nxv z5fNDEh|8`Mp}2jYeg2e@%R{s-ou_Z4C8{ItbBsM@Efth?XaD|Yt!r*fx6?J;j!*n~ z`e*B)xzY)nt))45=IU_e!fT$MZCUo9!;4EJLAAvPf78Rj0=7i5Up_nBF-=rQy3hsO zug{ZvUpW(Q-0zzV509n3dVEhVudcBM>B8{VieRThr5_OT6H#VNd^?6cgd&Mr?r}c#bE3G&+p80L zzCV2D#;M0LW5Q_C$VD zxgL@z_6{gbju6)K;ySx^I(fwsO3AW##irF>tg%PvPXZ6fam2SMkYu+JzQiD(Us1u^ z8ZnS~ze3JLp7Gb+lD(3eTtj9d-Px}WCeJp^#WYTtqH43RYL~)grVEHPp#S3naN`@c z|0VHwqpXM>Cdl4IE1Qp6Pt2Y+&2X!m!grARDCWZ9XJL!AJV`xo==PP<#~V)^UR?nq zM6E{Dp^YV`ikxS%U$F$sfeCfCVE*;pv#(D`Db^WU*J|E+x#$Y-d1UA_1g-eGbt`b# zyl3uxu{TjA$b1ci@yFQ%>MNX;N+J1bko3<}+JQX1QeEf)~`IP zv-b)IeP@hM5b~omd6P0Rm+pck_gChmch#H>c99Y0pu5C)ad8 zkVR?-UF5<1GP4Ee?Q}h-2Q!7Hz~J16fOXW2w<##0*zeoBQbZTpZ9ELKU|e$4Sd@pn zPJ-zV+)NNTa8wu2H0?-b+wQPn^sVIkr^UE?QrpAzE|c2G!s5z4A84P zaZ8h+6l2B{pWy20?R`>lZD>f2h=@?TT?BkXkhFt*-;^Wy_;X8MN@1QxJ2;X-sX$0f z47IjK1tmV%i~ysf>HBkdX#V+gBa{yp8R45$4mhP@+c^Nx!(ph=DFciZbwfiKz*Fph zHpQW8Lm%oVH03YO9FQQ}dT#xKVhMivX2^(L07@%=U1a(7U9>F^?EYS8F6|vF zo$65W&@N+52%KnfDS0u`uHLj|ykKH49bNDqhciVe7+g|Ek$BK1AC%D_$4Pg~{}$EH zPS>4;{~U)9!48fh@ooRFBk?KBuS}2mTpbzvoTL7we`0cDY*fxko@=LHj+m+Bur5E{N9HB zwB_U5d^_~>i}iD5Y#FzcyKw|ht6!Gi^5HiTwOn$b?x5(3+>c$J*eAJE6|0J%n-i&;`G6-ZT%U7O5(ltCI^d zy;CwD_BH-qkLJvlDy^YJm(71vQ=MxcO#S5e*x0M>b?~CzQ|x~AWtBEU(4xYWudvYB zuZQOQ`y7q;ts`4@u$qsHI;_nbIv5&1Yn&!%SsVUP+P7UveT=g+-ivschyZyyFt5dx(wD`toL zm-$o2#`vh#{h?Fz!-9|meEglRu5Lfn#K`D7f+Y(JOP)X_ zIKx5fvFN>)p`jrIcU4nUDlproKz@hv3(P13f&H*>!n(`!^mG8blMix$i+C!g!IYf9 zG|p zATyP#EG^aEFHSV%&%XQ&9a%rVF#3KM;~*0U`%#(o4bxj8I_zY9Kjy9#Dd z>v>tj4quJa7jhOA;VgsNDhzGu;66RB)#3UKws-d5L$T?3LS5ovf_0g`m_)IJzj#r3 zY`Q+lsrk3tHvMm;#x%CnrHG8c4KNT~$%tXeU%Zbti{j24$S&kp`&@_9FV}+|DBKo9 zlggBBw*7wL`TO(MnW}fwjuuRq3+}I{?l8da3z-mA)Qed8NP~=I<~Kr!ak$W-*#;SI z?+|&mKJlHNPnwotxhfOpb!g+cM%LQy)a&)_D9wcf)_hL6q#Y&0*g37QTYoeC+I_|M z&XIp1H;1xZR#b5_UC;IMh+sGA*U{x0=%1~d3+0n6%tyArr);9_NTSzbz{(!O+J@-l zjuPrhI1MUN!&uq5Mf&t@$~SfCJR^K=_oey&qWSc)jod!>{T8-JQjk>^ zt|(}*=1(RX5$S!}<+*jucGg0cG1BwCE;i8W!N@W-@?V5@kj+bG^J=VRr z$0`$(?JS>`MnwOf;RBhKn}6sY&$sXIXSSU;U3n+Q1i!Hn_pY9;9^X`YECygjKjQ8B z$wzUE09j<|ql1IIs)k?{>agM6_QQ|tTmqf#mBDoxtbcSk#4Six z08vXFyc=Z6bG0`304WD5m@fLg<~3vE=mDUdFPcGk9G;R@eZd1}M{^5Ktb)+pb+5F6vfC7>3wO z=8VPMt)fE9b`CB^qFlG!@j(V@#z9CeOPMbxCvH%NtJ~mD@Y7OC6h$bza z9F#hT-9ai-as)@#+8wJwsNd5Uszq1S|IL|5Q7)^G!L+l!G{d|h?-mQnBH5Inma1{_ zCJL7tz8axLMvl|^(;^wz<`sDGrD(46_MU-DB{h~4AdBbQTeiVoZ1%3*#v^v6r zlDz6?%q|SF$w2QLApD+J2m&gVev~9{V|UOw3B}%v=u(i@TK=QOpzrAI#J~DtH%zMW zdmI{(si;)ncwAR>DU?EvBlB&1=urL^e;fxT1VD0q12O}i;0;OwX{?r$oGpaaOXyt= zfu)}~V=lJeP3!WLkXoJjTt8w~w0WkR`j_TeSZjH1yNDUH>pSwKvq)A0(fh=yezR)e zXhF?D9Ygs}jv_YGFrb7u0vLAy5@cK}LoJih;(C>5?dc9tqR?rQlah=re|3g&wvX;0@cc|2+jYV+ zAugHd+^I*&gaJ1FukCZ}3))fa=L&YQx&9nujtCVn-!7|e>(tKGBuE&Mb``81<(kTE z0nS7fu4%D<r|tjt#_K$3QCY<9@raxv#!I_i8;Y9fYpPK3XDgBCEg*x zllqC!iTuQ!{}H^}fg#o7;dD!!Bvlq*${|N9Z>lTY`VD^Knmk{Xie!A1XZ-A5l}??L zN+HP(q?l{IC|DGn;yKvo;Yx3?e}I9DccbAU2N~NcY1E-k&=Oat(xjfl( zwTdj7K^slT578O)LhU~{R4h`MVRrYsQI%ZfpSJO@e>y(*RR6qu`lF3kyE2is$j4f7 zTDO@sS#KxQ)V-^5u*X7TbSWL>RE;q$H&muk+nUQ(BI_4c08{Z;lU0#uqVeD3>8Nu< z#VHRqMYg|_cL$Gg36GZ1su5h1+TMQ?mJFAa_YPpotJ{w|S6d-k=c2kt2oRCXNEvE1 z4s_(87yd~!CA+c8w<2_z=U(1!o-HWoEQ~ zIBc+RzEapW+L@j{BI4UY{#c*+OKOHo` zAF(;mzG(2-*9k4Q#?h@*-F^^(Z8H>q)V4WjVOdswSh~8(7@o6uOsW~VVYkS6C^nFY2x>3lqhlOlEcUn8zmYO znUmcjG$`jibel1~B;N>s!R}vczsrrxls~#5ZgWV}kOLri?h`zq%PMy)c)a4~lYq~+raruXI0-Ut#d zF0N6)uaK9QpVX{8nrw^A28TmTM&+ucsj2A?_R|i3B!189H`0+>dG&dDUxD$Z)C5Y` z2TTVCJG<}{y|n$=OkhxRsR{~1*(or(1B6CZxN55aU<-~mYXH64R!taF-C^E&%DOP#pS7} z2*f1&Tcwc37yUF8|JfFR(J|CxfYry7`ha}$>Yf7Bn>8lgs84#Xpyf=+W%&}Qexg17 zWox_V0PJ_g2}?UWn#95AVRKOOQpEPBIraZ;^AQDy=C=SF@DzZg^7!cJTaZ1s-GN8> z#UBaN`FN#6hNJW2KH#ko3%Nyso0OzHl^t^s;B0-8pS$%FVh%aGCWRS7i)~jz;OKx3 zNS$z8t6tr41yrbO>(94%@Xr5q*nYTLwg7Gus_9%Vxny;}cN{Jm0o? zqyZIeG1P*suRqB|Jg>1o%?L)TT;NuyJQH^kP}M9uI)HZ&B*7xm8U_;KPlEnWD!BG_)m=$ER!Y@;rL@6I77Dg9$o!-ykh;wAj5Tdm9+ZEz7ppH9 zYw#&Lte7H}M-tH+ug3K#JKslA>5<_bF4uZo9qzau%{#YNRYeB|1{TtIf=qH!%RnY! z<=6QoGeIRSldUHOwLF+fLGV*wiB-Tye-6B9B(rg~YL#fUtF*(wIs;p(NP{uuBRw!6 z!;fQwe_A7WpsPaNx9JS@f*Ir2fMhz@X3`a(fDTx~=FS7!>*O@6e$=M3gTrUq+g)tRspnlYPEx-wmP@{M)~CmvUYf@io2-bb-N(&v`?} zMOR%N8?=VAV`%tL$S5EYB(l>E<+%Ti2?c9Vu!t%<|7h|_zQHMrRm4XxVFC4VG_DVH7R1qk(;eew`|6rK|;?>ywbY zy7~l4i8g#@PQ}7`8TCc_yKB`nB@{yXfJ})~C8_#;=j)V!VQ%o9zd-N6g~-10$dd;5rK z=cfxb{P#LhHo5Ua$EK&HSQEuHHNk=hL%6EAC4j907Ml_) zy59gvlDVc&Y#?kWhkB!$!{yb)HVGt>IKioh>2YUxAzmSRoe|s}*UCx{@ePfPbDGl$m~q zH39`*uy{HWlY~7kD@}Vb011fnVXV8F*>kzqb&>P$oxG#vt|bZ41@r--}XgaSkW$Ntep zuWq{s`Qu9j;CZ<1KKs$tmPCsWc7B7R^a6J4*59}{LIDnrf1f2+z+)R1I{aYuu@GBK zxuX%w^(pAR0JZObjTIqU)OxGilsJs~Gpd@nnwmN6Gsy`O9TuVaR!RAD%GF3blCM0S zPD=k0gz9yuSHST zPpbc~|IGAwGU4U|Rt!(h-mEvCq`gj~TnAy9ne7qY$^nA&sZZvYGBE+h1poPc2!`~; zy&YVNdNbWl#OPh*nJ{&FoG9wuTvI9vh#yS2^+=r=4}@*t!vf6NW?VHiabqs{$rt*U zxQ4wSKR)^XeOc%Gzn=wuLgJw0V;wUZFs4cz%Sp_i?;E4pIXbV3rJ6HxH_!(K0K17}d;~=O^H?WO{U3 z1K+cq#)x%3uzvR%LCwSeR&&a`jkA-ZDc`EEnz+T`f0u&eM-C=?*W5`P%hiiCRB*n^ z<@v4i(UFjW6V~&P9i8g7Jt$Lluo`T8N!5|-n+FRz=B%Kj*mXXz7y&gX!Aw$<_1}1g z;KzmvsKct=auZzO>BdkiOi)M5q`7!fQ_CMWNI%)nnE-os9$-Fu{c9Me+etV5> z89~MbV0Ov5LGRo{Tyu)E)lu^)Mm#MH@ThSl#Z+;CouZ~DPy`0_BDaiB<0sKk%pKbq z;E9?+fY~BPvceA$CcPxLeAtnwphMdOkIi(cF`$h-<=Qmz36&rn)hg5J2F4wbDwD7O zMxbXM_#vN`+=GCIZza(4ud|)&1mC)|zb}!n>AiHW>d8tyST)S3b>Y!f1pEUdHcjR< zg$8?SY)hBsS$cb%hmhw#R@vdhO4qcfj!5Qz)pgy?&9?NSW{L_O7O4mqES>EOx0*GL z)oMosTWIoo8v-k`oU`&%)!sLvTXm5h%{Q;o_C+!`8buF1A60IN1wShmFSF@a$5>=0 zclcvQ7!Ab9mg@fWg>rfz{-u(IsW-HLWgCa!de z$<@;I(Y+pXNq|{=@vcCF*bAZQlMjO45tk>h?3@+8)gRLMgJUHyW8BKpcPo_wk2H0pR~zBbxnOHH}Uq)=2R!pGY+Hs|Pm! z$cgt!o!ym9=E0pv#Ku5jCwa@P%&AEksU*k&2(^v(Y*ZN%d#ML0*(oGh$A175xFJjAs3wabaTdZdXkg zWoZr^1^K)k4+LOv!{Mliw)_Fv6JK9F%B+DgF#;bYW6DD1wX88)f@w|@YshwvAl&n^ zw_;32vv48XF+652(mA%Nadv3KRZ+y4i>#~ez&WSU+BlUoV||@pB*FNyHTv_Bk--sN zTyOVyIjSGwiiGp{d)9OB*_Lx*AMwN!J^0>fCldd6t&G4;Tl#d~P)_`Q3GT57bCO#> zyNQmxPte6x&dr{1Ue)cQ7N78MJ70O@8g1)c%j3#G3F~TdL4o>D3(<0m7`cxogZx60 z-F-3|sFJqQy-bZi=o%~K-OrnY)m>DW;irC75@S!OIHHq?^RQ20HR^qNcAX%V6(`0m zAWL0?gBm4A&9FgI-N1_4ZGZm{^mzy_*|25zq}p|zuT{~kucQ_%=7<$bzLy~ZtuRDl z?uwyNq-cZ{9fCy8(m$Ia$D^;jo>c~&;QuX%h2vB?h{6BD1sklEi9003WtS5Lvfk62 zt7`@M>8DMQDwp@{ZIQ-1iT}JdYGmresPDV%lhleNULt5P#;bRp359f1ZaNcw0o%)n zV9L(gMPF1n26rH)xOlcs@!wPP=ng^bOZnc0bAzQRD=2HWfupONK`oOsPbv)vp3Hcv zIC+e=5noN^+)~1rtZ@8<@Fe4^Lmi&aR!hHQAA1lokm^tz+^Li9;px{#tu8S_L`-ln zNn*`6!G^MgR0mbyyunTNvsrCqtfq+_cP`Yy(4BGAz*nzECQekKl*-fl#ZhulAfJa- zni7{g+Xk5WU{)1^v#EJ19DC|FldoL}NY|Fp_0C22KoLWFvl3|r|4%4K`%zUtu7Y-9~Z#x#GJVTdq!bh zmuOD!S=Us*4wk+0Tdi2+0e52YUS2!7eECSjLM;eMz0^fA6AX{rDYM2BaD)yCGFz z*JwnqwmK;$sXFQ^Tx-^S;X6u4Ylj>7~91w7X$Uw8$Yy$jna%508sa_mj8Jxq#GxzcUL$0)= z9D(N{*1^>}?bTk;fX48@vYFm_yH3Eb)0e zjeLQ!?1tGjHE3Pq?9Az5r7CdL`chgYYs~$?N;s>8DDExn4{+iB9+uzT?;+qkATd%8 z{lJmnpt5uFh8bJkUr#`JL_xiyXOd%7z2}T&znvm)a}*6D|0qUt50pnlduE09w<3Kpu zJ0wON)OM%-VmxG}3G-jZueSiCyVsaIv0LcV%sjXcO3*y{L=L;(TvFjg-Ic~&1f1sR zHRi)6yW@EPlK?J)|EOrjE6|D;X%s8*{y-1O_{y|RpGsS2HfqM;vcsPnr!ZIYy%Ej| z0^jr&@-^HOY;QgxEUheak3O=_$f78^$#sCv0zUPtOSAaQ& z@0MycsnQnyp3Ib`d{ zN~1V(b<#|#*AiAv!QWUrcU<3gzV7SmiZ*{!>GkW@ z(DD*$Y<}Rfu&oRBYL^Bdfbw|n52d`1TgaR*A)-coEuU(f7Vn@jjOBUN_6Mk>ndi*% z_!aAaY|2*(Ly74%xZhn>nbH%qjSB4<Y$l$-mhbVsKkiBn zrJOOA>8HE=!WO!2m(gN@bPN^2&Pp=%JNZS063yh_XX%hK&9Iqmz`s99_j$A#x&1r0 zAhcs|V0eu+f7t>ntYVvR`$0}E|G!hibR0~Y<*5bNMe>vA-V+4+Zo7j;3;Jo=)lifK zGq1ILn@pK%YT1x2nn038V3Gz@KcAF0w=;b*5)D2F1E)q#(;i@amDXQU(K_(tZvu>z z+I1aTa9QxwHE|Uu3N;uDi$nIbchnFC6Mf};{TwLp^@u;ep?;z4^yW;Gda+YE8G#VH z_d@lI)k?j)&tuk|Y>?eaF|^qjyO8IjR@Vq4UyASMEPaBnZNFt*h;cGON^r$o-2Rv5 zy)1fAXZhL!W{0c>BQAOupH=@@l_D@~G~L^HhCg@JzXvB-rV~A`AFEwQ0tr`r!?D2< zTv`(4tYAx}+`mtI6wi=IP8K(&5vo8Nl&$fa?cCv&mDIDTHb(BslkP8fX>TiwV>HUV z2?GPO&8tY#-%+%?+PUb1Vq7k7{LA*EE%3mo>5CC#Ey=b-NvP2N)n|-7*K|jak^zUh z;q~SMD?iUjo8iypG>7wsIC_HvU!*8|_$$m8n?S#QWpy=H_D5fmT3Yng;z(qhyNI&z zCFRx92f;*rZ;GE7t%+liBK<$`4K^~65I6x_X3$ zlKNw{+gzCr^krKw9Dp5DOPBk8hcuzP8 zLQ}Hzfvw-QL%JfFKpZE%ZY1MR3iJFg-r-_P!rmDuC`4ZU`?`Up0OBGTc>t0X`D#UA zD!B6C4<3hc)!GDb+AiP2LVyGH2T;DgK9|?homX=?}yT^PO5ClwioS)6bE*k>bKSh7&78 z&Gy^hP0>(8y5BH^Lw4@t8&`ihW!_XCJ7a)yKluiL>3T-7XnLMq1>f)Z62dok+}y)SZHeP6fuJ|iCdhf0TxMv2UctoJW{2cwa$n1k$OJD02HayOSNV28>8Y~{$@hAy^L zoiI05yDlu-{G_(tvK-O87QjY)Gx+@u(7O)2S3|<2@e6 zN0-rP{?1PRb$90h@+CdNApHXtpmO;hxGeSCrZ&ORm7m>bSHP@mz1T`)SkFo4z|b2b^51uV%uh=mrUbhnV_F%OOY)S&VIj_IvN<*Q@; zzj&3)o2B=4m<=qh96y!%p0B7;R3sxMzsmmg&*hIS?-!h@Y(7m=_Hw!i!a)?X zTA2FdRwK`Df4rB?UHf5Sn(G=4RiY`;nxVaE^rJFEA;uq|Ih9Mf?13lVlZ*NA%+D{< z%%(8k|7e>b1yP4XOjn*s9*Bu$K5nMoUsZUew>`|aZIV5nkj?#Y5>9Y$mX)B^u6tc; zbj6$+lCS=T%h^|!r?9+?afda-Y;BgPABvXeH*os3;tccgShMxk!3Va^CIp+WXzq3u zZHr;q11_B|IE$6X{?Ei(6O89<3|NG{s0IIzt*?Np`rEcPK}nTvQMx-1pdcXK zap>;uMnOOtNhJlO8>BlAa7Y2^mXIUe{q1w#yWanO<8urc1BV`dvG>|*%{kXx3|q|> z&13h9Hpa_@JTorUhF{uz+BE{p%X?4xxM*9M4sUeOYC=KTWI_8oXamh?51F;TaMgr7 z%>!oIIR>B6gyz2%;D?%!z!O_xgS-py(cA~g>0)Efgj(bc?T(mklg-0T=k^Z6*JA7k zLWJEM63>BL!sDW%ejpi=l&h=laa`~i;xmggUSdtn=4|3r65;oYJ~-MNt0WI~T7k`X zD{{c+h9_}bZy?_FRvG;d)oxC2S6R>OZ%;MOPo_86to}T}BDY&l+R*P$rbf^cQIFTP zmtrH%`}kW;5FxH_8wT2ai@xyf*nuH95-&_+D;n4sXp--T$(NZ}o~f5v{Eb~tGxPFj zjlP-$RqYBh2OA#66^n=Ci(6NVY6zJ2^_x}2OXuX98ZzM<|15?=Zm$lNR>R*D=oF}4 zRI37WbOSJY6lvZM^s@jf1~?{tQo9nBbgt}S3v;UX3GdlqnQtU4J*_)a=#oAeUyuGd zbHSYBS~G;*i6JcU9tt|0uYAxywbL?kGOq^7)8D0EG= zyYt}S7dl?CY*_ZC+u>ekw8IT6iy<6UaLPYF^k)qg0A^WR*y3ab0B%_rux89R;kKRr zJD^Zyl4XeEyeOYGvmhsOEf6zZ^Z~3NaVJ_ zgYy@KW-&v(`N?W&{ds~)-TAF1md%^jC!2*l9p%~8M(H`He%p<-s%n)OjUNmN6jkGl z>ObVBOhtuQ@(-k);;;57oMpdF+|d5U>Bu$sDi+sf7CC+W3NGRwp1{Zh1}y?aPt0A( zBuB;vIUPlz_p+gzh2c4Ow@NdLgnU}C*50-)=U>^(_f0DVQa z8Kz2ZbN>fRXNysnBd6qUXUV-8xO;i|37K2Yv()2e?E=rT`>{(dZ<%IW0`=#dNp>k_ zBzZY>z4Z+*&Wb*_+B^-f8E1D~8G~>gQC1QK)o2F1BxC2u6<@7z)0$bmI=GVYyo_{b zSK%qe{kowu#E;l0p5CLRru8$9|M4TSn@;*WoQw|tGmEC%2qQE(hUtF} z!Ka^asBCg@cD`m$ZzVi>sV3bMlyI&Ck&KpCfU^K1G%=gEWt|FsB z1mWU|EV})i!;sF)-Btx4s;GH?N_tN$dsfY&P#ZR(kq-M{Iqa}e&OVTK&ETn<^XAh@ z6kn~b7jK!oU!VztMAA&qZ@k_<;TrU0qX6@FWuM}x`x79)v$WeJ*4w|cyGS#Qzh;IlN_qs-saS$W`o&XZvpJ5lT`+%20YY{ znNa81W4IEOu}z#A(t&YYB0XOFh%QrS5ILy$;_nf_RN1OAa_JsmKxc z8uppu+A7O&F~yWJQNN`IGZDGCi@hjOx#u$5$(m>pPF>yvv1{r2Gr7)YG)}lhLac;A zGT}19L^AJoVfZ;u_^rDx35=Uf_MxuEsA@`Zprpt87jsa}$v_)SFv+$jdgy<PBWA^zRGVo!hCv_gq5?@ZwYj&OU4s$bQEZ<&t=yl)&)bdT=5zURZ-*&dAj zICQyNv z-{eV58{_)^l+gbz2K7NLc%;aX0Jx}FO2EgIt``<&(MhXj9{7sPWHA)$StbYPTGo|@ zmm-u_(VtuS7|!N7HhkS6v&W#6dKN8m!)M=eP9qsbdLGE)0}f5uWUf%)T|lNEWA+(W z4xM(a?`Au^Zlkow!+M&bM~FQRI+mVec#5_1g)nz*e?)H8^JbaA!qPVDqvVUCy@R4% zcEk#X{LjDurhmEc<2TLHhedkKj7zY5U_1rd%le@b5q zjd!Ekm*(3kBA{Jk^y;O$u)2L5qT5ZATp^*f+C}I(oBEf7Ne0(?r#0;j3BaAv>~E-*x3bl9aU`nXn1-ZEGM|-aa}SY>uvKwA;R~gN6r0t zhq~Ru(Ix>$@(N8(OU@onPBUj%8unqN{Y|{SzR$zctCL9x|BkQ~_IO2^BX*pG9{l#w z|N6224fbt&!fE8jygPoZl~6FwyPXFvJmZy1IeDLtx>Spwd6>pvqRu`B(27&RE1v1@ ztu+}!k)5Yt(leT$%TRr)^Ud)2e2M$P!WMHpy1};ndWZi73bq{SaIbm#QlohWe0ccs zp$bg?`Gm^{Y;_jHld8D$i^-b+`qSl9oI}|5Rs`R}> zqFBJ>E;km)?TejOZ@QN|B>nLf(Jx%7J(Bv*zh6W zy6&lP8+DQ{(tBjUzO?y$xW6lPYop^6=I#Aqol2m`t>k8+4Kyt}V>x4?8Y}rzwAgoj z8nt$np)(Xce1TOv??-mH-Xh09Z>Ysk-RQm-F2lN^Eg}$}p?ib_xW}HtQ>)%0#mY(_ zKwehm4N2O;SBal7+oEbV`QV`A+tcJ)5}q?55`{YpO%-2q|S>FItv z%QRb=x}2S{W>MsPKUItZinRJ$%~1}FKusp3+8J7FM+Rgy&(q{31561e zsC1HZuN|ovA^D{Uz*M4O5_bV$<>b>K3kuC#7y1&?ZviN`Mv2Rs5Qe7COV-~hw7QqH zSxm;FeE$fKbT>LL`~u?v%r1AByKso?F4x!=e6Dn#g&Nz;wWOj0weMJZx{Ul5O}X?R zt!tLRvTJ_h43GHWn(J@T#mm#7?)xhT%zvct*l`mAN{vvS$n=fdX%2AWkQJCDf3 zR2^8YwfyE(7(ITcsN|)N7!DAb7Bc zEX8vvb6Lmde9cF(D!kZ6Nn^4XxKhDcSCLW0xgT zVO^dP;w#m%UDUg)OaGG5(uFfJSF29`?r_;ofvFaGp;@LjM{a>}pDAhmhwR*#I9n4f zS7{#H1FVKGG+##F(vzE2d{~xJ95AvT{B^}e{sf`e_V8Xlq3My)Cu1#?TH5FOT$?;` zisPSj@%o$R@&5D^(E-os;*QeIhR-X?Xof4x{#MMc#vX z8a(}+H3zi$KkZDGQ+!n4IPB851O#cr?ahNsLO=e`pVa5~slo78pT#^)rmR8+Fg*{5 z`6|6n?T`W{%UJ38qZ_T5v{r^~oLn`$mzH9^3UWB7rOUC~`~VF4s5@uQNCo z@2?b#(Qf(FnQypBV32h*qA!-ZLI0q14;@}~>EKQn947+V3INZUY*Xt zV$`kld?Q0yzbgEAmX{rIJRR|c>wU46K|Qr>Rd3^NsnK4ESbmwH?BTL;1Tjy*>H6Sn zId=my!QU1_9f8?2`~4|!Dbqt>A3@=J3sGm*k}2g3WF+z_cYCRSUL~?&t$&VoySm#t zG}&^qcplz*&e-C<1C{k(Gc_CX3tYw)3bRY<)hN7oanTe6*#mitwS_2;4er?MYFjSY z@4z6lFL_MRT0>So74X`*CVDC{NMSEVa}0>YzotmL-yQqTE=MAgU%FN)7t#h_ z^~O&uFt!qog3ddas2)*NOf))Fb4A@tu-lBEd8_U_=>H66c|brk0RAOFZ5sn$yAWbYbv%{)!eTMYQ?G*sbNtL< zisrmNuna_Y{v+L!6BF#72PXK;S|1P%6Z4;41Ic+6p1V4FOhUjxM>%Un^3j}e>I+7Q zyY2ecqF%>}I3uCc`GfSPTWT$>lPc2RCG z&7IP@(EOg#fW3^4Sc=R!oQ|`k1@ugdM(2|KZJ3z%)>NG{Cr(ECK;SCHYcT6H?-fJN z;a1Tuo818J$vC;eZRs^~MN*@$8}>cECnQ(g{G~BCV!a-U{(IBuEsc%e)iwI`_buP} zI@v1=K|vmywEn$=G9v%*sYSEuV$%bm={bCvH$qvZ{!0&yG;4fsrrq!Q}w zSn|we7Qpld6Z*)K ztp^Q3MF_&Muu|f>(&%liU%!|t?Y=^J!U~KUQ4+VatR%kEj7;c2=EHvm|Mt44D`iN3 z_aXMx*H0KV`orAQ);5< zh`t&7no^$&Y%C4%BB1~Ti`j#k+k~ODYXn&%ai{t&F{)L(ZDO2 zxa5FO&X0u!d2@4f)#X?!jvKa}Q~T|DGs!cALOxVu89u3ro!*~TBn!?R(B0>RlE1K)J!fBApiUU))uAS?CHg1uk#as21ZJ?eYahc;5{A<}lXu2cr7EYjpp4}oSY5VBSIZ!JK%?Pat^U#uz7;_2gncR*N<&!pMr zJS-#$As6{AP7?f@CeE-ohSFxL94L=Gn{u)Yjbs>FlD{4HdIirNTmQ5xrc7WKtrx91 ze6(FbV^?>B-*S13?qPN$(`6(%RqcBJyRIRw@hJ}k z49VUBdeu~|H?8}k@W-c}yXFAdYO1oJ2M5vGPw!y%ozM;bnW@mpCmRjB`fb|bNk6Q% z-rA){o#1ZxB5Z1!Ys0=Wie(jqO7;kMp&#m*DHIdsjSr4;yXqX-$`$5K z(B2^&SXnF5tnk9IZ?29{v2O~=NOLD@w8Bz!2#0W3ak)B)!a7 zP#{;YV_YU*3m>NDnD*>Fs-HnzoUsW9y>!rvU+9|Cq@JC*%5+&I9ECYcxc8hAqqYza z=I@gA@ddB0YzP5cGxv&jsp=!&An6Zlj8u-8Y_THq;!7i2mDQw@fS6dj8J*}vfBM1bF!pjm9#>j8U0@o5j+N`+5sEJ;46r!m3Ztu zQCi-v|JLIc6mFu2=mdeLRZw6W*o`P_9Xi`zRZ>gv5mo?(M}R+es>gU$uhUb>1h}i- zaMqSyU>_r=t4jtTyrZ(xWF;kgnjIbCN-5@uyc#~{AgUdg>als0TC z(i#RMPnXqbB4f3$aO_lPsXueN*HI#LfZ;hzg}-YAYLzpX|22*OLEddp>s3+f@(&qSQ+Vzm z5FE^>>tc}b#J65HwyrAN{PJJjy@lPHTy@ct3OHei^H_*@#3NX5F%i5rSu*|0>*!qE zWNYpkw~2$+lQ^6Bjn-~#-Y4Nr!n>Hs0$PsE@8sZ<&T#wE?CN7S+q6hhez%V>8o8z0 zD|qXA+0BLh`Egn4DzC=Ez{q8f!*}{%8f}~TrbxkE!U6y5GJi0s=p+e)%nKwE9-QI$ zWnUT7GuJdxYq48WPVre@qzo-LlBb(iIh~{VdCzl$vGo3f88^Q(_R1E|2x#Q}A};P< z@=rN@Mh%W!x;?+Vjc&cXSae=ECty1}5%l!Ckma$TcJo9%VISF@SzavBicn7X~(`z+szne0mnFR>HYwouDjJrgB06ZE zK+AddTXmqK=aK`;Srf)DvXx+p`})9_&Tmq29vf-yVCZ+psV_qUS}awC^M*V=i%xHL zv~YjGLv*D6qM=lBt+8Cl2=w-VR$Lc>L12ug~jQPTHnantdRMm2t zn?X1Q8c{0zaKl-*@2k!hnPFML(flcyAVgA44YWQ0^oS)X8#I4_)|0_`7gAa)?TkK? zkFZsw^Db}%;7N(pn)ObXeDMiXfg;RuvYGb~FHXTXyVM?Zt^??&1O&1H^d3ZPcnzsoJQF@=s$qEE;)ALpp^6EqD3`=uEnM;Y$B_w+JDS3$-nM`hfgA zAZP=TuaziE6I7b=mOpKxh{y3ZMhS!5g8}qA}BW7bMC`g|?7=6(OUfSboAVcnZ@^6`xQ|@6-DL zrIN_G4hswkz?2)@1v9airp+_f){^wi<{Ml|g?$Kz4_`>3Gb$NY!yHLL(<{~EQUquM zo3_F4WCI%d(f!J48yA-4`hvo+EIJ@^0X+#W-HOE0Im)g0QH6y-S`%mrMJA3Z91kg&l zUyYy!lv8<|E1*=(z)M+jPQX6hRjAwS_HzwVlZCGSUaRr7Z z=f94;KU8J(#xWgLRTUQxR~7fE>H|m7S8v{!rki7#7h4W{w|bZU_SvE6ULbvv#}`jE zY+f=fkXPt7vEaJZ=GD64xwzrWOKtKv;Q6C~5j(f(n4I_*QN{t!+qedsetg0l!0ZI= z4#bftgJztIy^I*0SKKzULq&>EgF^Kpx|{oKGydznP!y40!4 zpvs1EUv8`heQX*Rv{g@?yly(1Ru@eKPvQBaZL=f{D3qiv6KbaZGw@l@34>Gj-CmnJ^!r;emJ zFm}u2XTg-oxp#lPW=B`fwOrq2EfO`w0|J{=)K;r%G#~)>6uAZ+1(wNgl-|Tr0hZg{ zg;Pm-4Uc*8baQ7~HkGcUxATxRS?=wMKtg4Z<(Y?_XfsMq7VtKDI?Gc*Mm9UTxwY`Y za_ju457;SO`Ff;F*6ZY|7d;h!T8hBpD^rN2@?2vD@2+YL*-Hd^EbiD+bcJWw{^z~- z#U$j?OIQCqHo^N`ENV;wlJ0;Vf}!pbv;S?bvjF6yXN$Qd*-X!jB~yc@D)GLZ|EM9K_hGvkP3$X8R9 zn@VeC=}{Y=f=R@A15+m(ute;e6aX+p)%3U4RuPdhQ|P!AcL&?Rtd!XVRSxc&)6=zC zD$AnqtlR{!t!9<$XkW zD0|Reu<7ZlOPu1=sw!*trjzL>T@R0;)mqGD?@Y_IS&|M5!lbJO9+}B8#ZvX%*ZKLB zRVudWo<`9GK;pprd-C9%tGjq5j(h2279F;MWin_9JFp7_QC`0+-WA`5C*|B1N^&Wk zBU+&PA}p&3Ef3*!a|jQR!}rmdqPgcxe% zdKPV*rWR9gM0NC^v70~atM!EWDNPG2o%<=Zdqc|Rcg3!p)&9NoB}5bJaOUrtoj$Z7 zs5zM3JtkGUI{N!LpJJ$Qo}$W!z&%cvAhOWqy0teVud)T{U@<{d>zw4EZs(*aC zTh{Kw`un@5S812a`nRhs3(=RZ)Fz>grGNhoc$Wvh6pN>ammoOtE)SB!@Ul<$$y0z3I4rv@B|ZA`KD?jO`+$G_r)|~sXzglqnxS30y=^~HuU_F1sA|s z!cCz-##xHcObpua1j~WD;3>b-P81~^OXtssU42|kg6}TIBf0yX6R+GcphF=T(9BbL z-!;EK2^>mu3Gx4YUnk9ohO-t0QkbVJgW%6YNC(?Dt&-SWdeBUg40x7j584G841u68 zn9@?mcQ_^iwZy%^#1}$oec3gG zS^@!MjqS#J25&u{Z8mSrVaHINBooBsdqX;OQRs-1+p`E1@>5uFarCotDw9zEo&UP^ zl!d(beg*ts%3#A0Fp`19zNsB#zjgaPB>cNghkUCMoP+`{bT1{NOn{EaW})eeQ@!ky z2VIUJcG+h=JtGgbj;rJOWL}#rWwI>wkne^^Xo910D4NxzI+wmB<-Ybn?azp9i%Zmo ztSOd%J|H~tr!}_OmRf$Ivo+J@hW8IQhBq=p$c+X*vqund20O0yu)F=y+-be_LrTH# zV?)|NarZ^gou%7|Jww7`*3H_>@Y$z2`~u@obw9CQGq$NbO%HRpvOt{91`NXRDn)Cn z$(b(hP$JUq%7`YOZIpaqLI$`eGlMKdl_+kHT}Z)H77&||0?*~n5N8;f`yQypkp9y^ z-${&FIKcq={@40wGfcWZKArPejbzgLPM0CSc`3Z+^o0t`vWGmft%KpDaw)QYz~{HP zUK)2u!Laaf>g0Nr*Pw(BYnCe4$82J**NhtZwDiGx?P}z&pW*a8twA80A@V-PM^};! zgaun`73()fO%!Q>1F_rb@tCXP`)IxKuUK9gLnKv;2Ji-Eu2q`uooChg@?VXzo_E*a zwuC(n#D!r#>cE}d2geKW#WzZ(NzUCrnYCA8N&3CLO%2X(>;UooIMsiL9^|<_9p7#< zm{5vn+Ur1{bDOo5{ml0M`6J*8hWd(LJV&{`k_p`L9pG94IUL~Bah*_O(y4nge0WFe zZmIGc#KK!60;s?(chtoM>sgNmsDJ%$!hNo-7Y$l{{ku~6?G2OfTHZ@18J(Y&%ux;Y zqf0{5jEW>VJ2QM&q=jg@w-)z+vVvmdZIPlq+f|}A|IvsT5Z9s~o89lUd?>8p>==eG z5#969T(4~p5i-_XL89&aHjp7FAlS6-!|SlT7x5Hh8u?3gCBMTP?Cyc$3S_ElO@~9q zUE}v`Sib(x)fvxdjIg%PD)1+@y7A08%Fm1}V2tMQOtp1M)qCf*p*>M3mGX!1Zrp=iO!_n@?uK z1F-}??)u+e{;7bGlX`7tB7I0CvfB&QiU>JO9w7}lKqQUtU}uP#iLofwVhceZf_$mx zG*{l->SXtgEf00F_K;8L!^tq7iBI}0y!NoPd4+gLV2x{i&@-V@ow8uk0h06^2x7}+ zSk~sMh7G&+W<4(Yq|Tzkt+nPnVUMtc&kT?d0{5gYoM;WPj_4ozsxw++_LweQXD7)|%Pewd)q4MOAGXd3d|(C;-(((TDt z%C0+^u_gim8o0oG(_sPG+AL~&)|u4bGvg474h8!4WmI%%DPo-x@heWj448x80S&lA zkV9E4zNI@L81S}S&hJ)kq=pAxCx*|LuFAU8OxtEPW_HjXm9I@bTp(L$cGijvmh2yUq_#*ozc*YlHE zW7Z+zYc8{)^zOuTJ081*E}`t5waJj1Fp3@jJFVx(hN%vJ9Bp(OqjsX0=L8SPu>>}s z+qGW1`MFM&O`pEIK3`+?@1CYj3vJ1f%|B1|?f5e1H*bqugR2xgTufBv_-9vs>D{&e zz8n=e7zBk+H4{MrSFgh;8WYVul3?cVR4QFi(3sq29E2boH?iz)a zTODhGO(c`VvR1bmWjri&YI1XR4s6m?P`X7t{{~rMYf1zN!rr$rrclt5sl<{55+z_A z#9`F+$Yz!%>;(!o`M|K>2`6%O9W35nFCzCIG6r2Op^7ZE-N*h_SXBB#>Y2^#daMk~ zGC2N0jSX7m-DNMt0>?K^Zs5aC+au_8rzgucdadtU(w~u$cvlR5E@j4xf~=fETozw4 zd3*B@evMjC`&Aq#zYJUqa~f+=-)T7omZMtzjf~dg3<$d=+T^?siGSUZlMM_$Su6ww6JZc>d;m;F96&8_#ce4b zgs;#R{7pT~nN8Bb>Y=dVG=f(ieB}ZUiri=KHRv!0X)y#GLm0$dA8*g1Zw+>vPt6v6 zPuKKs*7T=<&V~;pV;*Y>8gIwqk)JNZQvX3JjwTZcO2pfalylFOV%k7!Vq}Je;?Aq| z+ke92!>QxZKxM2;=8JK2O+V+paUIW__$Zv^+N-~wHod!>Kws28Ga3`FvER5z-nR*( zSg!xV%4v9{$-=jWLGJO#kSEEj-u#R#b#Hc2iN~dZK^!zVKx>_tvv(SzVdP(Wlh+V@ zyMHL>JTHZcb!rlm^gnmA`aANSM)FMKaW^2u zZ*Fe>VA%WNF;3mp0UY|>;wcan&bs}dxK$++Tx{cCT%2$TC?=4b&3(cyMUG(v{eXce zm`1nPr{-W;{z9&y4s=!%&_)Cznv3oRxUFCBQOOPZVyWqJKpHOzM&5ozpJ&RrWC)DD z!5pIzdS8I&pqujifL$(ytHkl@D-MxkC)tO!cUIIdwlUAL`opU zTy>M+ER7K_qxb?m57(a}^YQP#Png0ozWuYD1L7>cs8Oy+y09sbK4A+TJ*i#rVoc$+ z&mFZG0cPyK`r?RqYzRRlXF+B-oaRF&W4Us7nrq^W1s)yr_4SAjG1JqsbJK5x9@E=jfbI$PXE0>JxdiR0*5nuM` zR$j=A*xhmGB?b<|xO_scLCw$&T7eN471feH79x1^bClV$(m-qWhq<@YRKscoMb-ybd0`EIH> zCYd^MI0K$3a!t8-v0=Z*tA7E}zv*Ax%ecL^-KoF5yWnGeHwmjb)iImmHR4A_BXdL~ zaZ?eXmmwaC1=Ka0?*XzqZ=dpt4{Lf);r@`5K1 zSn3a)ZjJ?S`*>T=An2>&ddev@NUVYTLkC9wD8<~+k~ zwe02q9SE`AH=<@GD|51wy2I5SI*)7jYW*+OfSc>>r%o)v2;>uDEUkO77{T`_;Qvz$ zwCv&pFT1HR!z(?ut0(KgR7T`pMCQO?fWX(*R*E~FY@b1`g-o+A5M|~^o1;wnEvZ~` z|I+|xJ4^Lm!G>sD2z@2S$Q?CT3FuJ0)Jyc`GSs^wUoa^c60?+U8{;!?6{4tZ>P`;k z%8`9Ad^>?YRc^-IED;oC#JUz`$DrG+3Q5VbUP*L4O1~#w((%K!h#o)O!ZeLJrO`3% z9hc=u#j*D=<|qSx@XpAX?zf_<=#~YJG;J?vs~u-Tr4+6@y9;nYeF3_wK!XfwCmY!A zvo#gAf{WiYac@=s9_UDrCzcAp`~lB<89BkKNTxx@XIlE5m$42G?)9v279)_Ar@H)* zN(HeQNKxe=pgfWN!Vv@*(_ zWjV~x+p$f-ugksVROsY<8QXKYTSHOrgHmOF2&R=DnSzFDk!u!RM=fcD)5G~{`c1rh zow*_&x1OJAtF|sh7(vxrepk}n6#Py2kb(30BLE|RvrHCAlzXZw4NBTR zKv{hj_7zZo>_5O3xnctbC#wZ{=|+I-I(L>G`=-hOY?`XIBB`XxWz$BgJUuU}Fvy&Q z2~z!eG<2P*J4+iP!Y!~6CI8j}1nUkw?7V3+1yW`;-nq7wHO5ET57vUey-sLDD+uN$ zg=H%j7$8uja8+!1@_9+9UVns+Zqnm_EToSzHAbLZzY7xu?p~P`{nYp2M+XKuO^@`u zANYyt+Y{+lIof2fy$#JKj@nkCPa$j&BkYNXmvEa+=MF02exeEmikVxce*!{@rci*N zgE5l}g>yBwD||g{7_wtsl}sRyKpGOY*VqC{p;n19OA=VT05Or)1n`t{!4nvz;nFh{ zmP9C})P0>b#gQ=07O`=CSeTE?WRA^ek3#Meg?h?hv+TJiIrlo)s3LJ7!`Zd9wG)ro zBOI7g=t3(<1vA#C!2FC7r98c|F<|zVJsNF%X@M8cSGbm0s0Z#09KV)7+A4fyJE=nv zs$(?iBu2?@dYSM-Z|UlLIjek?G%{Cl8vm@)Gp=3@4j%gu&{|lcS_zVgwC&%A;C)5e z^e&m)ze*Hr6xwTfU#pEmF?xdSB3_~UH|V|Xohg{T_p>c#?F?GiKZjr0l=gwi+&Ukv zHaP!}XXfOOS+CheFYSV#z5tcnkN*2RB}9M94=~6Jj(JAIwC-AJt1+OPe471%p?xY| z`oghBtxL4bRo`vL4O>~m(pXKE|t(M(RG@If$(u!uB z5NMeXR0Y7@-#z##rdq{a_?iV>LC}w^E?9=%y)niVwd7R-ADWOAv|1aOM!A?KFy{b# zYDMxNpzBY0U-OsY?}G*BPEb*p*47b45&3wPh1!f72_D+Lh1w;s;}S~7YVBc1pD!GA zVHD#3u7v@7D#(ql!7S!pv`}-bQnIU^$#6I?sy;u1U&-Kza0B1>heUs#BvfGA{~vIQ z%4GY^qIFPlv9rN16e{_0-G@chQT^0TwXQF09v0hDGHS;q$Ptj%(J-d4^jW{eIdii+yEjB|Aqim1Ul{+50luWPM)g&A3P8i|Z+PDe z)n9dD>|Lp^^?lTWoush17U7jMI5L{#+!y`XHc4vXb{kc)Os2p5VETKf2#?9MEyaI< zx5!e*d5C|b3a7Gv|7T2fwNlWAeagYcd06n5k`k*RCVkr?ljd3L-Lt7EO2!lhJ~o49 z?U9*%$H!or_5WVc3G#|igNvm}ze?WyjYSE^&|WmhWJU=t?!9)PlqpEtu0B>0O_U|T zy>0sEatMT~py$*)EG$+EQl9;3;(4D~%LJ1t-io{2qc-NaJ)wsn>kRfcsv*nRj8JYU zl%SnSk$R|RFkstYHn=@>3{7o1w?o?2dnZI_qwTOo|KkCGz*ido>pucpfE#m4lj?v7 zobOsyA$mUxeJ=+C#A>Uf6UiQYHY}R=wze;Ew|A(h3MLfXY31JI7bI_7HR}}=l>9%y zF0$eQ>E;#2pSWtVYKz%zvgrAm4E35kb!(i}ZLtyWpkgK+(}~JnTcLFfK0g>6zSnN? zXWK2XVU$tEu~dfeMCM}s zR&sb{4V+clSDF%j2yxK`fz)``&2Po4S-wEkXnUqwHiah=R6mKxqWyIsiX%{Vb9fzD z=y|T;fdVzrboo-a+vw>S7brZRKPqPm*=%lu(#(^xf5uP>EVF%zLv|P>Z#e@z6Wrqe=!}O zb3+jg;2VJc39Fa@`dkP9yML>Ud;5FlT6V`~XW>XwF#tt^dI%s~0CsCb{spl61*8}& zF*H&9$%72N-b&jPiR|~5$%Mfb+|QxN=ke*KB!}4mVNW#0Fv#a68B$5fzI27 z(r4l-hLZGAYc;t?=XU{RzX>d6%+(B*2ykSk*Qq@e@`!82gY5SGi%)3FO;fp<8jZVRUt-}`*sRGDFk zD}L4zZJC_W?;`t8$YmPZi`E%K7Y5`DOwh^?p#DL+D}Zv-^ZIxase%Ajl9FTJA&21c z?p|id_x9ftb!!I?5e%C?`aM>^985yU??lDgw093UBmlk2zp?;i-|BdQ3X!l6A1IkQ z!wFa=CS40BtjOmAUM(}Co8tbiWx{V2NXg5SUD?kg-#9NA<~Us=l1+mIS(UV3IECs> z=0F2A%$s_8cAnW)N9{gT4g4sfWgAq$)~2pkbnH!IqmHPnk^B?HM;)k<+x&Jhm*s`br~F527gUy!b)#)kM&myZO-*4`QU_N0 zPaYI&RsUV&2fzJu>dNl#Schm7tZQubF4$PEO zB1w3S06ATXf>NST5(_wMu!dT90U)%Jn__1Kpt~-|t91JYpi`nv_XuDtYl`g-C%_R0 zM7(|TThv+l>{DB_iJ~h0b%K!cS%2T~GJgcg)fn$hdfCnHuyY&vCC7eW-)1DSZ_Dt9 zeTDrv3et{2_xa(iC~~IG9=gQQupD(uHnhjFgevv8M`(J4F{&!b6U43}S!Q0i>ZRsW zOI3BpKZ@w^;hKiB(=H<}BrxTejs|M$v-wO(4(Ba6F3&MA0-)o4GiH0ifFcgJlrwbE z#w!Nw|L&!ycu`eV98jz5^}dWoI_@#SXLiiD_~cvUWpLfq{=!iUwsPt`3-YlKI@yq> z*<~#k48ZdFT&vio(11t&c3d>J)-yGIm);u&)#cFao z-wN-gr76$PzF+jmFbNWXqIyNRh@KzBK4=9}>OG&J-vXK~A<{1xa^IV6Y9>c9kSuk7 zdl(oVEfh4$J3ka0sjWC6;HUiZkqW7d5;me(yD~WAkMr}gR<4kaT)lgYZPmUV`O+~z z*#jTV+sm;J5c>cU5u3wRcLOk1Yk>GM2MQ~X^xAn;7D|~b6~(_9rTG{baH)YymXgYZcPwW7y*1~DGQ)@DO1SvXPVJxv-T#^Gk%IqM$rf?oBTS>Z%Z zW0A6ct~}T5Qx8#VQHs3LJ{ZaxG-@Wx1MNkz+K4SW{M11-1LX;z!t4x=6JG%eK}TNr zm%~oW7K*g#ecBRb9=SN!u`WqF@a-6ZDG^t120LP_8_CRe++m0Is|bW-VXu1q8A8Ft7bkYSjl-+%4C zI9N2?`l{OIeTu_Dd+YKILXyq1pUbWRVK)RpKzf9a=+Ki&!NTy;02UM8WL>{tG%CNx zzM>$KN=<+HX7lg2WJ_sm*jH`K9n}83-_OKSf5Z{2>-I1%!z-9`2$Iq$ zxd8uR%Bbk~aob}mO7cn1+3WAFWo0MW@#6c@e>2+k=AR~*sVJL#ST(jd;z}(!vC0g) zUt(M_ZdH-|{~M()BJ50*zFV<3f2)U_>2J0ax;a7@+_pg0h;Mjh3w35KRsaDUIT1lVCUgfl4$(4AOy6+Kl#y=`y8p+1%zm4%&1lfyG5{5iEhTja1K_hgS#Xiw@U=ozQXHK*?? z6phz794kd+edLm}a86tX0$omw{%$LrHnW~Zb19?FuW_8|KQ5G z?zkNl%4dlm;%hDPlX;<+#GZM*$GU7a8P1YDuJTPUa6yl3Ha!1+N`qkj)I%P(Vv|3C z?oQp}8|5B9Nf{Va9W;|{u92=3f z=OT-<;picHJqUZ|7lp^G;%W?uAaj%J(sOVunZ2j?0(w*`E^lLW|*<-8{KH%8ZJFe^=QlH&!(Z6Ij!^h@Y@I8^a+1Y_tG*MzLHpssHGJ}i96Bo+J1 zUomu*@3u(!qJ_QTsW1nQbw9;->rmn0gDStlH&$7!{QeL>fdu zq*IWVkOq;GZfOaT7LZV+Q$V^K>5wj^8<7$LX^`%&|Lk+l?_1wmu6HeY@p<;XW9FJ` zX091caod$)?g5!^5EVNM4HL5IwA1C8zFGyM6sZvf?0$J8tD6!HMWfM;kLR!RBL$(8 zg-ZGN-9PSd3gkZ)00|=O11q!z#DOOR0BmtYoev@1}Wt z+n7dQeMRe2i`DZ_8MbY~@4@`fDnf33dQ-TjAg`j_l=nX;5{=^a#l==4U!)`VfL*&( zp)q)uVs_8NaWg0%O$j~r@R$MMR>3_`!5qYAzhnc+iznv4s8OJp?SJ*iyUf_a>(UV1-wjTA9QRZzWNu7~y#G%h zQ|T0yf*fg2SI0$kz}--q!s^81awERwV|y3#{)nGH{?(^ZhzqFUiTcd?%U}(2~?tVaKwPV!Ok5zo3@QH z_S5kWXOni>UN#O_RVr0zumka z?EX*5y75F_a?+jR-PF@SJO#mk6*i$3n0DNDFs9dQD@ESjdb?xpP=$E+Y>(J&m|>FN zkow6||NJ5Y8^^->LmkfnX*H|g;u#&YXZmM6ru_*6*)IcP$P=2`g#{DWe5d;}2828I zW6XBXF`xYYIVd4h#p|*CHPN>J+4Q(Hcp2zH2*1k@>YnqO8Ltv2lxLGiLU|q915*`A_#rEe0blq zGkANGH8!djh~SrBAA4T9fuaEjNee+$b{CUcNP8vrC-7j$jRP=_21&qWNQR_mWIR&% z7;SP-;#%_C4CWBI;-;=Rsf*C!^PcHFBK<2W{gdvPlcTqnH>&g;Z$KisBP~F?xNN(v z=8n*U^k^}}x-?9D^ZUvt?bGfdY#y_+>xZEExBeUbSSe)OUVnMIX^+BfR@So%T9R*K z^S@Ros@``aY!V9VkGfyI*=))8Zu_Q=%aq*t2vK7z(Pavo&4J0-_UY~-v4?+6wx9A{ zLEmMwhVJ&p>!wlxZRLL#wyqAQkAv7ecQT7$uM_s0?X0m2RG%$I&AQ>*XBFWkqXUmk|(B+cG_#&hp7FPc8Ajc z*7wupvEbLa z{@eIR9jc7c*t2B#F*|9-n$dtzPDkA!j$bQFyhg*|q--RUfnL~PK3d+j$KBz;Iy1wb ztM;$V@{(%xB1S9Ly0zb5ITP-8hf2dN`$7-Kw(0p<^}gW7=rFFmr(Y#B#R-pp7@qxa zovF03IP4(d>B=VKtMNd&BtcG;p@X=lSL{g*5@f>Zxp58-N3$KOKsJq+l&VVWSkC#N zN3$f{3#zL`5)BZJ8^Y+E|5H=9p5p)CSR--dw&M#s#jxoohjAgHI*=cGXX*tSJK?$w zt{^eWVl>_+VieUI<7I8W~k`dPSzPpLgO&?Ia#goR+uR!Hf0Kbq_yu6>d5=2JK?0q|Tn1h-TfZVGY3htieT9=Q}UO>+$SgC1(rDQ?y(ymW@=CIn+$2 z5A#3+kCvn#9Ay076e*+kz#l8ne1ssv^kcfkKVZVaQ1!&HnE~Ym6=+Lmw>+(eZr-kZ zqLNo}OOTyC!W`OmqbIaf=#vv{)MsF?{u0(PMO-NLpBHzC84-_D@sSZ8Wj`6D z+s3$68i@8K#g94buQ0H7lK*PFt)Cf>p(T+fTWqKj)Lv^G!%zvG#!w9yI{mwIgQ_ZP zzA6;zo&zZcOg;aLZc}L7r=ceWvM-ez0v+N?`yUUxPk%-+XAL`TVCs%#X%)`#Vn;oP zkQ6f5Q2qX�|0UiG;~o9a%@0ewc@J3tCnjYLQ={=!?a468`u!9l_DKEAwM{*~Q851s2i4`5y>1MBV5OyH ztWW-W>_-CTEc}nV>`bJ|CV184MH{dF5c(P!)naF_&75FBp{9~FvD9&L^Dl?z4eqf~ z9F1isj~_A#j~2cWe2hl+t#y1 z!-wY9Ge*7!3oKaW-7#+_P8zjB=NFz*o7t0;+n*#iKhe!IcuuNr3mWvCT2WcN&FJpW zYkdm^bQWj*uGx~klrwrgY@XRw=gT}jp|$wup|MNjM10=z$hH%18OJn}6-=V|?=j0+ z$-ynVCG^8_s$M19r?4PBN)Gc*%j2fl0!%Wawp91D|8DV@{19jrGy5k!kmG6{ilekFqI+bu?4mjBA_{>&U zSNbiV#1@JD_%-MrQ>`X3#zen}D=t)ImpV>q^We+dDpDOQEX~G*xw@@8ntI3mpBHmE zh5PrkO+z@>Q%#&E(6vsxY4&e9aGm>Co)Jmo3kPoK#WMc)^=;3-ayE8)y;LhDtrlX! zlzST84@o^B+OOXxe_Dc@trOOXiLMg+Zep)NZA_>`oi{CP@ja@{iy9qjIjT9%bj8(2 zceLIce=US0S!du*!|P|AWr~d-iHMy)a#0$$IWu~Uedcf}1eN}irPFNVv-Ez(wY1U^T(jPxr{>3lUyrVrur=3!l z1h{ej#91HRw(fEq8h|0t-KfxI^F7%7HAV;4&vTTf(bmGzf9P_IjUUyShisG!QsrY7=NN*t ztdudW$TGZUCHG10`A&=bIO=4Gip6CXeKcD^<@(2kFQfHnTk!n*Lp0qx`J&?mio*^O zq`4(BrRy1S4@DH;Ui6=ED;dw#(zuz-^An0Jq&+3gUVDbO9q&;5x7oG)ML01}NQqpK zhQx4&_xB1LE3A$u?1Dj*0k%p5hgPf4FIE!D|pDhqfmsztXxSgPVRvEC8(s5?t9*zTi6#7j%B`LPuyK5^Tm zPSw^>2~V=Q_ZWR@ydqJXn|fqoQZ9t?dX)aUq{F2GF=Z<_sy}Qj#L<825xjfz(f9vq z0T%uKNd|CM_~Sho%bQ`kKlJ1$*^NG1dItiA#)?pFU%d`Id$S$anosFQkoixWhX-wZ zlS-Dvi)ACqHtqWTNYJY1d+B=N#3NMB`&?G`6Y-Kf`?*7@RVwXAmcLDdcV9NA2BuY2 z8rgtx{_`iz{%O@M=3>>P_b%;L5w5}qlEMaLBEtJTYf!N~JTz&VA(^3+G5Gp{_8ZZP zafOUQ_=D3X+->TjdP-8#gj&Lz^6mJ{!khHxOch|qIE9Z8CaZ9N4K*^R*dQJwU zd<0vXD;s1I-;B~663EObt*>PM9+L4a?_ZL;f856A@goGptqU~EW4SB|@lq0dl@$~W zHrlZrCNi+;31(iCJ|6#t4`7g}BSn;7vj4{{~h_v6oJ z7s^Ql-5KpMr+CeysL^EH{POJlqr|u{R#sQq!yb8cO7URnRB=uHWOoR*3)qxPs`eF& z7azWlz8Dy~$UypGwwhP|Mb?4=sSw1i0nqIiU_gA_*m34lkdqSUOQHUi=M+61=QJ(8 zUFA`VB&kx+4GY_6@#54n;t?tVk&FgfbT9I$WuoBkJ7F9lRYw=0VM7~ljt+ugD?ID} z*A4g*I_k#ORPreXs;Lk}>`GpZ#3yaGw- zdszPyB9ly0gz2shErx&Zzx}04ugq=bl?hX29;#t;Eh?*C{HsmJfmym@o)5iI?y#iK zI6HGu2v)8H;W2t(jL=@RT@O%gFJWZf_-9bAoE7oxxA*tqhpOUj^81^tlc^%(e(87R ze<{qwer{LcCibn~!&7NF7HVP`T)578#(I98EV@Jz08mk6e8<6cT$qP3HWn{OGUJ zOI@=+#bdn}o0B`v?a5oNlDomeYoRRY=no&_h%C^PisMrSQj1Gce?+5_vG9JjkXVkx zw=BsScZ*+yM{ap_vwL=!FGqgltIkN%nbexqBmIHS>0ozFaw1DX%WJy2bnEViE-4rF zTYJ8u(y7Y+YIA?F1UU7iZ#BgcU z4`O~$Mc{ag*pqWUD2Kv7XM386F@C+x;H&Q+-ip%4ZDAC)d+l8Oj;pQ7g70nklX#Ql zue+j26e_>6Bgcex^3N{_BQA(BR^_>gz< z^Wqx5CRM5{`fWEZ^aw@9!;!?Qp(c**(mtWC62&&9U~4J z&YfH6KBCReTTK{pLuh_2F!B>6ltP%*!_+403XLHms#)1LP(M82A8EvpntFmnMBwgA zeusbGK_|b)d57vQg%CA}Yp7rjhizACT;9siITj&HV$00EmgAMC^N6PR zhwAl%l}~uKmQv3+CzmX&_4`u?CIpWM!!B=MEl*$Jz2QH4H8yrTK*|WUfwV4q(^xv^ z;S2Y-*OUIfmK@{mb6NB;JFcU+^7r&udMmv)8r^Fd!%)a+yWJ_X+O*4mH8y>D<7$84 zs=0b6V_VupJcDtXth!g*yyZmr@{sO)RsV`k`OMMCd8=yNl|S-+G>QeWVHzd%8&vnj zg~^(Mw1ym)6Ca-AgR8yk0|I->uJ1e(TI$%u@Toj*i=Dok57M-Z<-5exJ02-NZwd2k z^;V+Tp{&Eu+_hcqf8dKv(pE)MHRyJ)KEijs@cm(f-WG*;StyyH46mLn6*_hdp62do zjYl`RLrSoI_$oe&s-&ukimI3rSA8RjUW#vCw$;r4x0zSMQ}V=L!j2UC*uqygf{ z+&{X2hKz9`TvOJPuM`d*-}wBgY?Q@QoCX`E6>za-#1 zg3*p#KW*S=(f-w|TSTk`GsOi<2WFn~W8@9v9>-{5&jV}X<3yT-1T{|=apjY1I=jl% zoohst58d6-WK9SHTiV;BdRG3>ge09|&p7;JPH9N4yc!L?!E~hP!E<-yWq)|_*xpI= z-SNf^S;iN4t7GgVx$cjazwY8F+Y2n=BVaYwF+1rt=}i(2ZSi~eE3M^~TA`49e+$)f z^6B~2%Y*vkbp_4FEqtOt6EZv8l(CRJfz;}4fdsX;a~C3!H8x9xqoj0q_pHk~1(VXY z+{Bl@>NvdR5#UmY`M|Uu#o!$6%E#z}k|E^G$an^Q@H{tQc@zlW0 zZ_{Bp?w1UipG7ek&X>1=7gb6*=y+LnhfYLyOold+OwjeqGfK+FD?h_Y{I2J-3}O;H z)#xXx0@zHmABy|Y2i8PXRmp`tdSRX`f>*Y%NZNPsa;n|g{AhaA+3k9rjYonO3cj0v zHQk743BG^C5E@Go)8rk{ApC0O_o6_z{i7Azb&GqJPHtT}Jx-;LJra4FlR5fzqXpx& zLHEO+qxoDM(>&P|A{`jTvgETl7r1|zIFocltEghpuBU{3jcs(!O(^MU!p2#c9ZyyK zhCaEm^n^jI^_LGk&xVZ_duLg!rnX7w6s#onv^#4(qsCKu=jepbn#{+upSb(1dDHGC@c3s}1p z{J^cF`FFz0${xbWhbKA6E@f_~bfmmQw6b)^(EVCqG9zeMdZ*KSy}nQkPN33c5HQL0 zzTv?+{%J_-6Jw1ut)aIVKTNKdi2w;+5WiuEOs~+H+dXhOrY+GMZk+bm+u$!@`jY%JR)Kb_>5Yxm`Ygn3056ZcL%BB8RjpV_`*}nDPFYZzb zY1hfSKCb63Ebu)2U2RIUN5rz+=`#_WERYgtK~&oz_tMtTC9$KQ<^GBD52DGQe1omP z`4=u`q(3;KO4{TmEtmgR;1!%&(4IBv`KWV;J6uT%;Ba`w6$_|6vRfwid{`@}DNbx{XPEHa3F3b7KOnTb3H>DJ#ZLwo( z=;saF>sr@~@t+-@qTe(Efs>&Xai#k6hty0FxsNm>)@f2t2Hh~OjRXN6sa=0vcDrky z3g_qc$+-CB?I*W8_ngLM2Sj=aX&*UKf zQj1}G!zp{$M^r^k4L7Vq0?#pLh=EYQX_}2tJ|pNoM_lWQ1C>m~F{=y=Imi9I;p8Sn z0r*8#)s~mcaFd@5+d-EOA7j>rw`5{NJVOaYa|U0l;LrWpa6&0iV}ejLsI3({Hl6;r z6*o%rY>Bj(qN=J+Ri7zH?PQpf^6~LmjhEe2RbA_S)%adA_-w|8SA57BC83XY)M@6a z z&H^y;wOWUD(wYYa#sh=K>Prd81ru|!Z)g`-7K&+eU|-TDL*K=bn8_wXg|Eklde z$7dgm%j6AI@o%aY%9YxDzdcpNzgavMG-3hIOsJ~*wWx>|XL;!pZ9gWd!xeNVW%0C2a4j$Ntk>w{iB=hF1ShNv6&oxV8~L03AX+I(h$R3tiKL zj=I4KQ`Q|@M|c6^t;ckcGAgPxuxfiJt!~g4h%Ak&DouZ%bydb1e;ISo4tKJW(ck;F zzU)LWqP3$SHy5T|`d{CB%^5gu1uF1{<>Sx^*ISiyg)Iw+DVZ?X5$441B=dY>R#goU zr!sWEd+QVGClNSq&c(!*`4bzGL!9u)@!1c1cCY-5uaWWDiEpP1dsAddt6?aRFtR2@ z`4@!;`=Z@;tJcNtejdag_kt=Fir_;MDj%EgsuWFi8}^?okQ~k88;@Y3(!1|}_IWbK z?(o}z@ykoAZlmn_r_rjBYRXFVMz)r`nN*dVni8jFNp9sw7@=n;ch-JJzo|QnP*w}g zWaNE7Na)59H1+gdxb5PtHSUdU*{VhXX8LyX%7{C+a-CJa2Zv>sAAP?UNTGdVcgpBn zK_Q>2UCb7u;ZnK z!f%#5pS7!4oQF}Y&G@pl&0>XI(Jb%kQuc(mW_(=uHamvlvOjZ&iLm(9@Mm+CDB0HL ziqFF}HmmruMC%K!e_!Zug%JQq|f@`V^tNqHB)Zv zgg|otM=oy8G$|Sdmx?rN!c>~~bU*#!<<5_T=@vhWbZ;Me+T+L^M51{8cpOF{+-}Sf zP>PLuJvZ+;FPWqgKHLltBgla;1fPK58V(!{m-rX7y{6@8++1=k5T>m0fB1ZkWk+!5 z7K~;75EzIdVh8um#l?l{^Nq%QIm}lTTAGj)heYuexr=Sx6hL1;&{M+v1#{TxSy)V< zn+BP5=jCGZtRXis9<_!znhoCkun2&JVzh@Ddf49Fi zef8eB7;e2H{k|ZFNrhJ1#bdO9v9$}ms#AX4LjMorR@|6gW*TFEtSYy%#NlFLU}By? zyZ7s#59+2^H?xLTGVAMg$fhY978e%*!&8O(Q+mS;d9Wyx)>X$< zAZ{x!gBA4ZLZ(?qTU(pw&=rMiMr!b)+Jx=LYwu@@#r9Y#1Q_H5W&1recSz333$?yw z$}U&^E;D#E`yq5XKh>Ffv{+XPq;kLNHwi&b_7M+Hj5IY>yVRJY)B5ipW-0Ep(&Zxl z*3*r0uCDxV8x9Bugs%jkO^m2N@z&tu&c-%FgYGX31-f;W{RCY2&C7dAFJCr8`|bC+ zwxBj%i3}y{soFNEII3|yU<70N?d`PQ=Wk#Wa05`)@(E&kXf`WEG6^I^#vCmyEI=;o z*i8s_Njdw4!JlvDUd|*dk8j0sN?X(8<1WALmH70`GTwK}n#g`^)&>XL4;}TovjDj* zR=Xs~5K-fzQ_D14apT>&6>bujAr-~}vRUUI!h}IL>!w1-))1-`zCIat5^16@(raK` z3NK|vy?)IWOX2E4G#~;2mUEmg4sI)~-Tlmi+M=~%x5h07gZ6i%0`!2jkDqkBJu_w? zr(;bZNf_z;gZ7+GhMQ*pHzkL36 zzBhiC22WV$gJ$s$yj%nE4v*m1PZBHiH?n@MXSQo~{tgf$=CWnY3KO6-ufGfvHaYwj zKqlmpD5c6Z$x5F#@Hw1Wzx<=rU2?nCpV#=StbVLybbKu;Rkn62Kl_ee>#)_=HBVQf zI=tPtdhy}`FTvN}*sigu9qk7_9UA4X*Yd~Qe0!ATY*!vFxu2245-tKN_nmnh0DQ;q_s!p4eGJ1OC)>Yc5EA2IKrqjrMMIWZsN>JSc zDPY^|bdxanLCt80yklR`!U>PhR#H`!pvS-d-LQ0K#~I>qD(6td)f)wu z?nH3lKmKI(Jc7DYmzl6-!znT;sc(C>g+$mxK;PqpCPyJ<34}0BCZJo2{QeQcPJTeXXXyx>oZf?Kng-p>i*NHe3!x>`N+7sPq*)Km~`VK z0u$Zc-MNK@i``L7Zo6G{oNxYof%2hGV0Zu(q0mMK#62M zrkB_)K4;$w;WO%e^hsRsD=kR^I=s;5!j+*MBy(z58Vj9Ihk{D8y{<*E zCq#}dtV2vf!bh}eSPGww4;;sM zo)FbKt@XFb#(d4Kv|&5CmeJwaxyRP{9dz7jborf9-yRvfh^zcSCB=@N72oA9^vZPF z+>O)VVbgh)>-n6%XS<)Wq%B$q(a?_kIsX_Ln#k;BSpc<@`cNOi^52$Ou5OP|y85&bJH&#NKNRI}ouM1hLCs*Yu* zQ`TCQD{WzytDf7<#aBf0wK?pmvP9g;yaOzCfpnjr?NrN%KM=p6X6=^HRmL{DU7jM; za&_L}xfFA?MnWr3+%b4Tl#3;5vU20^#$eomY^4!{G9`Jtir#lAWz%x&K6!GYsPKe@ zo|3c-KKES?J%$fUn6t`jPQ`1#I?2w}Wz-avw|NU<8GFpfim2b1-9QH=f?XLHIR|dfS%e!e#bx?-WOEiIOeh_V@0|dj%%YjO&+?rhR82Kp9`n; zWGwV<`wtgfoE;6NOJLgB+e`d3&!iJG! zKe{=jC>w0VpCsQrh}QU7zNW&r%mVLH8m+B(cK11I%fshAJvP7BHTnp>;wh$b2D4o- zg;J_M#7EfGHbu3M_GzOk@j7o)zWMWQ7Uaqy!s4)<6G!TfpfdB{&$Js5nt;Q0&_yJh zgNfNiKR=gHYOT1x;^jMMgcA?u_E+7zw_r(7)3iWA0MN}sAJ24VW~O*Gu!U zyk5bFO`0*XS53KMa@lH*((}lmZ19cqvg;)u`WH2hIY90*EEcLEQ+O^tqjh2@T4~$Ov+uFE7p_lau9P!{A(iR;sdw zhBTlZ&~Q)y>j5Euf3l!#B(2;rl;=yFW{Q+y;U4c#8vu>dJk)$QynwDIB)p8dha-$! za1KgeR8&-E4qPEfn3k0~I&u5z@B{zyX{vlz;6Kv51yQG`XsaIe5edKz*j`<_1H$O8 zv0v`&@5;9?QRc+={G52(hm634kUgk|&=RJ`}HN`U1VEVSqb5G0KZ0glo+B{i9v|JWXpxo$JXO(BaO=yja z=epyD68U4gPVV33z1$GADwF?Rj2livWu8~Mtx%=@@n0iXsk(2U)2_Gx(SP|fLj;r$SL+U_Ki&gr92u+@H zN3nFZE{w%$Xq%tIs4shN?m{wFWNPp=92f#O3ml2d4eNf2N4k#})PaoF=6;*0oP%v_ zGL>PH&uukXdqWU6>)W@)QlpOD-X{Y;t8I-ytwpd%7b+=wVE06{8jt5NNx3Y<9UZw8 z)hEi`&zz9tAnbP>r#bHU_&9_MGBW5e4`K!cO)@;ME&-sY6cjKUmJbeU@fy_DT({NObAGaS^O_Ev z=Nq@NGv7`(LQOcjT>iuk1(Y&9k_`U7;s60@8)!V#*vwuJO#hseBnL;1&;67WfweQ= zKh|Gep1GZERC(zDr0-7=R>+Z0B4#&4MRM3Mn+IAXba2wTyPt=W3wDFb+rP=0Cy1H` zWT)YnC(6^od7XpV6?2QWtHTWN4?c}swS$#Ysel<6wukGQ&~v5`!>UXC)QOqLdJ@Nb z7_HUb-X1~tPo36rz9!y6=Zt%SlKAvpC@4*EIQ&!e#eUEY{c7M?vkD4=HOoy)p??R| zVP#=@8`79%)}MHfZzo*ZySMj+X>aVuHp3r_cDA$4H?!puB(=0i;pygnripod4<YvPbu!Ws5?UP z6Nc$4U+qW<4>sAmKb#->80?-3k0s95W%wgkC6zq=u#viWTy*&mdCb6N_ zmn#C~VU%ewbSAP3M$Q!x0n*_yh#uFz+vAOuuU0peAYgTC8enY%kWw~y*iBcgWhO(l|8L@JQX=+GzjhQmu+ zt>nG&!ZVZ8Ljrsq0JNF@uY^K3P-FO0ZtXPoFa2 zH)3G|;&~2hqjCkZP(GRpULlxVFdqCKhe0zcs5YaaUKeoP_rG@IR*B^pYvbuE6Rli) z>&%Z&UvqP3plA?!CjG*MPW=VnA8wDR>xY9Kv9)CfQH)e*ph7@7A~PMw$B`~-NU&7$( z@&akkKs4*%!0mvNH9E)fzrjb40GW2%!veoe4Z{p!_9X|*Ymeu7E8pOH;2jtRjum2R zO%QxThVMWZ$2aS#_{E+WJTz3K02!bWH4un4yu<>|k3j~A42;qDts{FdTBnB_J<#nb z29_+A&z=^kKZTk~fD%dxrn&4{Sy@P%*t@?jemABWnov47sV$ zUtH_BM(aAoW%c{Bko)Olc(iC1?e_I?D57xv_IMmw5UBQt0nW;rnlccd0E#g{id7-b z0TVZvqd;-EG0_3$)k9rO1B%hD`J z4=ljjg@=oPw_{*sZC^XEJKZ-Y<$O)~(g@3ObE9h76dEACN=PNv(iEjLF_9#UXB^Zi zn9!fcXV309)6>&aK6w%erXLO-nCE3sSH~wJ3bMld^oqoB63JSpu&Z3p6Xl%|v-?w$ zkiTuoSkYDOEOLMEF>&CGgNrmu#44o4(R`_nqiVm1#SDd}pOxM^*GR<0l$1AW31+iV z`J?16;??;08jHAQ1^QIZ+yI-&v&c{~0p|!m)sft5!fC0#n~~_Z#ab=X(*O9VhYT~k z=Dz)~O;$yD$CdhgmRGNE^GA@6SF9zYZA~G4{O!69U(#(n`48hoif>eRoHNAdUcIaS zTrYp_aohE0z=VP1p39)9P_H}_tHi^5@?K2WMdB*Gm1eeK{EpeG1E zs8*R#j5P@*?*Yx41ug}$2bUFI*3#9DR`SF}L#+nzQ>b0F1gfpT z;CuqVhZry?CvJp9ta>}W1ohO&rbTb77pFt5SQ23En=`}R~nDxsnQ2} zbAg_>&6dVSPtoe1P31Rh}Nups9EUNwZ2%Mc(7)dSgRlhI;* z1XsbCdIhoD{^|&3)r6dfhY-l~XP6BnBdP|fsyAyUN{w!V&0B<{2Asdr#G+k|c!_1b z@w(GfM63~71QF^3UJk>r7HsPi;1s)idL$Y~pq3qiKkR9bGZv(y9qNH%`%Gby0;2K- zDufFQ3pimNHSTBJ=H}+>e=0C@hPr@VK>i7sHxxM5PXKg+DR4PIW@l?u3FAv)YhB2j zKnZuil2P6{##ia{8`?>%c@^^F6=j4g$y`$TF)kb&O&Ug6)ifXeXe9QHk zJT8v6Tkb--hR{3_tVK3Z;$NboAfr|NZi^hTyWl_;0JJVFE+QZ(p3}S;z#c-LSaBOH z7-sGOkA)1RN)`D8p(J7+5uV0|_jlD>3NZBP>FHizaDkD3%1np}867w`J8)87s;T)> z%OIuyzF7C|0Fi}<0^k(|qbvzv{AhCuiI?HcWrt-{A#jAZUFu7aqQ;#CnbTPqlmL@k zo;qR&%hQpE`58cYyWN5`#Lsd3j*I}4AL0hsoFCi5(UStC!}o5J3``;X7J}WNXXXh4 z(tzS^jo;XDwt=+o!osWb(s3(8!Rbm6<4E8p82An6%Vj=7z)2$Muz{z~pPdd6(rr4Ym__O+Y0SL7vk}M!@sHv&J$Hzx2XEqvw zxy~=b3-B)s9=;c(o->%6#mSqK*kd?W(Tv3grm4+PM2XAdW5h4J$ud#ih-bTu-usk7 z#op?6xP>9J+h?Wx)P$i|v4ty4KLtpw!@MRQDkq@ijH#;A?We}hCQZ-opX6(BC4DGL ze@@sebQdV*V#0Qc8!>F5L(0pa%@`OyIQ#$6i0z0XTu_Y2vv~5kl|oU`9rs5G1x+fI zrAH!plp;PE>jN3|j5Ty)O&Z)08QL4XNwi+IcXL`K>2aT7o}hV){jF(eRiHXXTUnZl*1~>kQ82!3bbUnO->obWxm!>CbHh6)k z=#>F8b-e6ugdjVBa0 ze%(ar)NI(Zh8(JMjhemD>xZf+gfHuw%-Xs~AQft7XZL!n=mB8edxSHfb3Y*O4q23M zuLrMJP4oe*Iyo8e><6|1=@S8V(iB7zhV#|K;6lRrYX^$}4i5{t(;gS6-`-3_0}&74 z)%j@Z-O6}59fjvPyN{1g^9KY9*PpKDFDxyko5zZf0@QB|liE zd2rqcE`&>pV4A?7pp}U#HdqhD?q+6X4K{gt!c_@^45(>&!0?ld#-0_2KqFOE)ly(h z!MlEkUZ&G zEx*&c|A+-mxU|h;H-VnViHUrQ5X)-V3tGISr|(Qb50dI&kTM?dL9UmtVI(ksFn0zK zN&%J~?2b~go}l$)^$+OIB8Ip$FAs9&e719_SfrdYK=lA+D|C5m1ev2x*%wZDGZ2$H zto-shKX)rDD|`LBB<*oC0O8!cZp0FUp@Hl(a8wvM&s&TkF^u8JijPtHZcC5<-R27k ziJM3`4*Yj-vS0$JR0MW}QS2=xyp4#AY=IF%ui@BHcpN{3$+ZO8M3P#T5U>H^_veq+ z?B)SLonK#->Bt3L#Q_q2|9AuT5%OYGOMY#JY45iFf{w^_C{UPW3vr~6VvPkDG>*Wa zZ*JixB#>2ykAifDn-Cc`AXf(b18M4ALAnuyXKq4QId2p`-xF$*)cveKw)ix4B&&i! zh#)L|G^@3yJ{OzEL;nE@R8bteUDirw1rq7L{7FM0#G(-+l=JnNi=-)gZcN2Z3#E-h zeCPI#`L*--z|F`tl@dCS%LOjt?US|s!JM1h<|5bT6S?Fh_Iey~79`r1i_dhM*q$k3 zrRHB-_~4s)f2?5k$lY(+zJ4pEqv`0a9NBW!(T>ddR>;&~MhBEIY@>Fa7A~+FePtg4 z`VYKAJFGVnCfP6brh$IS{`z<%qyXWbA~{cRS&(2iu-eHyIEB{5*P{g_;A9|7+D(`~ z_eEf)aUv0h)gM9^=r?(a4yXIt(H8y|1a!u7vhH`R}9$4DN*$;nCj?O{+%aY2Sc z!N=%(UT_V*{sKN6p@VmKcOkC5ew=)!NQv{^w4B{}`&E0${SMHv*QmBhQ@n;89VANx z7cveegz6Q?0BZ}Gp@Y?td0=zAMIR#fzu4n|2^dXribC-8zw%U>;D^$1T3EEcQ9gQf zBWFm4lavO4GQ?fLIE#WS1k9ceR_aSk45pa`JnqIs6>u?)HjC@OvM?dNgPd2ZiOLYj zGy_Ze1B@P+uAE$>a;-u{IOb^DGX((p-pr31gY(iuoKQ+qTjW{XgNcaK| zu5A{84un{ORBSW|)t8&}5Q02LCuoq@ygyRdy;;n1hpHG1Id7h4S?URJH+3i z&jAW!z|H*x&`+z7+zYV`()hrnR`3dF3}a*C&nYPi5CK%%^I&SK+PF-5QyB>8q31Ug z9cjR)A?l@o@W}Wai2eHHnQ>|E1=%0ZJdEcuXZ-cVL^C@(+ZX(<)7D>>UdB6hwvQ_0 zR8^nL$|77g1cWfr=@k@YPzQkhE`2>n1ze7zPOuhA{z%~TR!(N7HyG}6P=<#)**m81 z88Wa85y=-YU*#4fjIeMmz}ekIzk-YT`e*7j6B85f76UMsvRYd4|HMp)OE@it(IUI3 zzp%ALPyJ4M067^*_!Awu0}Yq{;G+R!83>WM9+J0Couomiu5s z=fO$>mrPtYB~OV%$;K82sjpvP$3d=?f%z!J?01QNm^c-nN5qZPIchj}UiEG{s?-Y$XRjTRcM!WZwzXJ&Xd9=GA&eXBtgsHs&HxDp8;@$vl6AE%b1or|6yw3i9TJUvX zrB?ls@=+ij=@}Rv3Ja&ed9Yg>WhuS!wzrsWs1Z3;0Qf~9X#d^to+m)u3otocB*?@( z00PelR;>A=&#-hGoT66dkEwc>NGKzS1|ysn0s9jk9o-I&9P$$n5!?;BSdv4l+_-=P zoT2019PTk_l*Po*t(xCSu=;?c5c1X8HvcwYK7#@T$g?a@y_;TyY^!sF9#Y*3JSYhW z!$aN`cG+J606u)G37l|IlRei4s*wEjbkY6mn5fs0S`Ij4;Zad-AFkbi1OBn(#yegz z1S#9qboTXS!9UWebHXYgXP!Jp&gb8HzH-yPbg&-a;pgmX0A?bR6d({XzhO`+P_P>E~n~L<}%!Kn`vJhSe zx{9EF!AJQocv@uPU}4|@L24BUWJCem@aPGwJaYEU2FQC&pFpC;3zgV92~yx-LExnk zbOSNc0^9^R@y42_KvaLT91DewKvr+K0>DOq%1ghNACR^H>k|@t6rYWd!+@MasbwY` z-4npp?Er?s%$x|a4@Bv}kx z>T^iYL{KZKsI($;lI6qR2j6&R^G(hf`$9VHyA1-CC zA1tu$Zh0(q4G3=RUD;N2rTl)=`A`)8>I@sC58MP`>XFLhnrKf zN=o4+Y&?xeaMrS6DX5%vE3HT%Hbv+Ni2OeTNBbD0+Td0oWVc*ArvY#>ZjgFH92F9l zCMJ?W=mQG220;C;PdBANBvTHt4)C&2DW3`KFT%D#I>28~wYF#;Vh!qmSC6HkW&jcM z0C0li4e39q7I{5hMuX&p!SF%meh~lAhe&S*e9PQSC&Ecy!kb5pQAEHHgdkEWj9ar(= z)rh{B8XNyCF%UC2PctWlAQhp6z(vmQo$xxX6T=T+utYd~H*(7$C(n?4?-2nzkTCF+ ziLh3PNmeV;kpV{#2Sv$H=>qHa3xTA42_0|?p^}sb;kw~pz>)q8cN^>#@Bolz1>gq> zdGO7X1K`a);Q5sh z@I>-y7@0VTFksLWg;;vX!@_IB02{I2nfE__u$|Jbw3-FVlZJ%_E2xbsISS(EouQP= zFOX$|YcJju4Mc!qlZQLGfb)leWg~zCNO%JHO$P&@wE}o>24-gQXcK6Il7?-{S1UAx z-$7vGnBMyku)R07k9Uj^91W&X6T0S+VT%w634maiv8gF8hEHx$ktw_k@&nP*gA=#? zjfohz$o7z7ftw9qfQ;)!PU*W%9mLvzNtZ}UE$t^gFapd81>?KO>w@WKo*-h;5{C_u zQBW|0sOX#dkS|2x5Wz5O@ex;qHzn``+GIFidF32cBe$bJzg3O`vH$tMCd zMacLQaw6mPE>9q*VglL>kZ?{nZ`vp}!2k6;q7^{oG1SS4Z;^v1hFuIIWHAH;&|C|( zy2=ov0e?{qRc5R)vh=p5<(dmV>MAOa5d}G5x1hpi(GHO-{Oh{Lf+Vn^JPkQJ(h3S4 z78QYwFCoQc0Q%AntHS{hK_P~67TbLP29iabsCo;bmqCRVlEQfF>j5u|#2|H!SaU|y$4DP9Y#ldcOK?bHjJ_8=4&ADdE8c328;Cp~!CFDEu zt-Ti@j<7c4Wj=6XhO%Udkf04QrN9e`KllP!2yli7Fob%>Pv9E^gsh;JkV-HeB;)gSMZ6i;}3Ne z_=ymz9@6Zv2!WOW;@~Zi{A^%gpiSM>`rn2Gq@Kne%dZ9URxwB-4#IO3$lM`0gSU+* zw6NV~Yomq#(^W)IU$d*xfL>gnn=%2QB2NOQ7Xa_zYy8|bEFOq!k#s5SeHk-?{{XGN zfRqT#eFd}&2$4Av1?WFnYTSDVp}t!81H`>8-a(j&gwNR{T!WPw%s_d;w4Fyw1AwR@ z&4OdUC{y(qL_CY@5FUsP51<&h9mDhYnX7)CQ9FCk(&4!Yv00WmDY#w)NZ!woe-ti_ z;!m3|Ii#KOm0|cGm_s^vmRmzlPhNl=aX++QfklFHwW2jh?>5gqhG-@}p46ah+t|o3 zL#=JYDd>w>OVN~c(-W&UtQJ2gS@L=c5jaG}P}O{NCSjuwIYg+7f-eMy@*{)+&7Ezz zL>PW8VE1%b$BvlSu<9(tBz9dJ05gaf2di*H$-Ao|(0H61RoCi7RD$vO{?l{P?Dl=p zPDxuksAmzkLdqAz_?*4{2l0&z^S6{ZIF5#a>1em5#lj!slZn|riN~+gVNE;bBf}na z`>hD0b_u_}@->87*b)$g(B!#8edoqa2_^9>>PN@eKB9)n#8}B#L>+l~jDsEBuXn97 z=|+c#LDef(Thbz}&lCaa;#42AFDh5cpk|$gr`Hf+HUNhr^(!mg3ZY>JkCiku=zl2~ zmBz+~(a_MO4;KBWh!e6L2-?Xd#)u9NG$Wg+R?sU}4_0{drqKCsFyEce($wNZma2u8 zmv2fnq-i6;M$8?!O31|;xEa#-w7bhw;~EN)X7)1rZESgaL&n!+$6(oD_cwHU&{~i*$5`Kr2g>znj6zmHCjCO~Rn%OHV{;GWZ9C4lnkcy6Gv(=`@*cG=zizu;P`yHtp?k>0Adu?)y;_Qi1*r-^DV8&LL_g> zK-QlC^%>Gt;Lof6h^tq+fwMEcXpQO>PiHQB@tu}?M(e@xMNp+bwnjr31m*bv2@QKg z_^e_-!0}7_M{I5lg?ZI-qzNePJM%ld5!AL2Eg*TJ|Hs{1{zdtH;ld(FC@I|_N_V4# zG$S@#h2M)U0lc{~YA93SX-@~vS5{=1 z2fBb@F@`V6gt)8V5Y?O{nWYu8(XJ@WoHZ#7a`yqx@nHeJ3*Dv`^1Hh{igF{-GS;grJ8E2SMLe z7HJgHSZNfhGa7(?@X1r5HlN|4(-P>_05IoylNfeA_~E6`bC5dG_D9suehGVW?OB&n@!&y1}|F8g5Mm$&gr1OtlHv>Yf&0{_@%#vX}1p0ID zUSkD1Ok|@yL_!J@*3{Hg1-l3sPr|lH0`7~LmUXnDW)CBbOCKERl41JAhZ46c6i zeZtLeKYMY}NV}M*O1qds34-auQf=iFs6y}wgg0veC#*zJd($dM!0k> zBbBDG`(Zt8`rq;ic4fenDPd;1s;-#@epUH7w;MVu<%HEMTX8 zFaLnL$7%An+6g*Q2lsT)`;^@5l5Cc0C%n0^^L+GqpulaG&lVC+R3peJN-e!Cg|`=qd!I^tA42>V{8aw`zn>_XObJ_f6f6GlCYS-W>Xckyx*B4XvF&x~0e3B91u{=S zkC`@#0|O!fIwZ+f_A#WOAOVv5KZgt;;sUqI3lYE&L`6lNsB>We5v9rH(JDgD3{+Jz z3Ybf_m+I{ype`8Hob}(G8^8 zlt@B;S^@cG#L|dsuij1E?R%*$-3vr)1AvI$H`nyDnUnX30gLJf=$0?bN#Nv)GT_HF z8Pl>t^yKF+WBNV+Y{kipDCuFA*#`CkaZI zChTAL`0D+ezWPj{#JSt3q>56y<(DtnJ}#G0ej_PA^zRXICBD
    b`tms4uC$mziJYQ`~+wiO+rBZZ)2lgf&UKg9XSYV$=t@V|MJ|5STB-?L>b9GVSJWO!iLv^J5fI&`3Ruwrs ztlh_p@wLf^I@FoCN_k(xj1KXF1wIQn9Yt5umyGE5R4yT!Sm?mU==$&X1=H8zsJfB%(U98>ln}3Req;;P< z9NVv~+=4LgLCqP@vpQa)o=~@ZPhP9#q}0ya2+H8kPnDe=tj6BA|k*rSVvpi!n)e?k%Qxlue09(tjF@v`yjgNrI0s! z;?hz8yJ@GgT*Qw(e^E-OX2bGv#S;I-S_%obaKO75exdXJM0$>TCUFFM!82P0*W;gd}@U*Df6 zH)d{-@@V%tL?Vgx_~7{y#q`Bh+`qv5^7{P2K=~%g^Z`@#jL!;!5V(2eB<@ukgZH{a zO&MGYT*0bWJ_zRs;t}3U-Cm1VJv|ipr2Mb7G{jZBY{b3%8DiE-p64VuEq};q*yVR0 zCwBdJO$G!#ry4a2sBHUw2)bbb)7@NAUv6hH?^fekF(C-v04rP%_`eSq4YuQymuC+@ zr;P~Q5%gf>?zdZF``BN$CcTu8hVy7eL1~C#CD0pnf6?3O=8{A3<<$A!>8@V@Xd)aFr$xaGEo2H-prRDAIgd)xI;8ecAgM9}Z#ZQr+vmw5nA;xYSl2LTq! z;<0^OQ^P=tr42VTLKXY?12l+eJI^TZ&!R`>}xsJOrl| zi;IyA(!sRn{ac^^9qhE+B!b$5wuwo?_}04JrIctbi!wX$_qTt;?(5as@VFhNda5bf z4E*gi?hHs9(Tid3G!ADiPG@8Jj)5{XDC}W$lgS+8wAdUERzsX1Egl^my<*mHhoi{g zEr>YD_HLYK+|s}R!H1-0WyOr@1>;N$@N@Y~2JnL)hzbmxH=PB8Mm-}bQoPEy?L(CW zk#5R{EjyIszYjx zf-_6bpQ!k`mEEq&@rjWm-#r`s7ujp>;NY;9fBX2Al`{t^mOQbBhiTmY>Q3GGR};|fu6=d6$#UP074$Oc=n)gcKwI9m z27Pp4s@m(M^e2YLE)rLe;ok+Ch-!XNXADu9# z^J#x30@g`N?sejEukz1NU%6xwxahhAflK9~dM_q4!M;p-`P->ut}pJmRr!@83>dSK61z zOn+i@1neElmPOz`(=sqbz|nX^>Wa?JdV&S}_n;7;Ja?pl zMXso#Qu6*iCp%rSJ-K*6;(yTGtDbA8H72WNHC3u4DiMTaE=419#Ri}hjc~)?7Jb7E zae)r>9BQQFB~K_VE>9}K;3OMyu)*_p?x!Q`D(1(nJ?*|8P%J2FB5fmocfL{LO(wAB zOYRu>x=0>;LVF6o{`k*1PjdKEC)Pur%?NKE{ay&io#{`#T9ez_U@?B8GSfX?4M2~i5UQ=O4WcwvLM0f#3onV(%s)#5Q?rSARVE@mFR~h)2LGJ)2=xFWOHoyI11Kd4RWBUu?98C(==pmo3m%s# zFjN4|w-@-Hqyo;y#>AU{e)RIXtmIBjX%ots|LBPTe=%@8=;sK!&{5Bu9}#hRQs~n1 z17(>-C4H>)<)Z(^SY6I!-MHQ6c)>_JDvz(%H4m@6-3^QD#`$CUgh!S&dgTSW`uc<5 z1$1#*7pw+TDibzNua9|`mww>+A@i;Ih05-1&Ca(b)<)a$=Gkt@ZKp~UaD~106oIUm z$^U{pg&slvK*J{gtPy;v18ABr8$+pZOU;iqhT8vK?xL{{eJJ)hxJip6I~6S|RED0D zk^vm(G4AuUn~T4qI)B3NFVw{61#+_zyp_`LnRu}D0JyYSe1?IJ&)mPOy#q?Co641k z^&)le-n}f!76?4{)xjgqQRnAo#8XL*MJ3<7W&Fdc{3(DVwEgIR9l&mEes{WPR-}$JGg$ z6b(9VUFa5>Roz+9=Sh6buS_J?Z#S*lsFb_VRcJpRviMdUUsq}HcjGn2hdsL( zQ{PV}wvV*7I5#}y9&b`OQpffO{UQzUw=EHQP?^qV#(+vhC-1(DnNrSY>|B*ApnF^ju%K{28QsGT-VUKt%M+rz2={ z%t&&vdB4?b?EK4E&d>IHQTx0l=ye9ZZ!v6~F_EnA^1; z&ksb{xIln*TF->*@f{`%#U^Q7DBOyh-#qjW`m8+Lyn;%&BH z;RxU=lrW@%y4%pw{EkZRwk)CbmzRI{72r5Jd64t7tw|2PXlIPxKOf)I&h)nxX&QKh znBM-qHUBlj^SJe?yuKzgc>B@Ngn-4>-K6w%n`N2qw>yezYSw4JmuD}yAQVxXjpYy> z32i<2{@xcoN=%S~2&|Y&M7hrGhieznqpWZ!m%8Z^uR~<6G#;E(TG?7pw4KUO2)@UC z1+ZN%-y9mVfb zD2K!h8qOb0(A@3`)jn^H`8XND9MgV%Gy=C~MjMr1s*E`X3|n9&dSdwBcQAzt?==UU zj7*F3vY_YoYt(lTz48Hy35Xm~n#`laX;t7gb6|buToSZk(|Ek(F@8LyLa>fvI(pUF ztEEw;`{V+C{^M|fsstR9NCi35V5K!%xf&T(25_(>Au8kv%`U6zF!aE$fpfl7AH7|m za_cIb2Oneo_yP(H)z3es7s*5+oDM%}5>j$Iae@QzU@PX;S`)}wzEto&j#?XRf3^do& zuNL=hX5Kx6%C|vh8U2;P`KG8J6Rvb}_kImsS+Ia`^TC(26r&Gf zr#?5Qs@dnh8uU&Ddo!Tc>v{=HLHtS~yB$2zxTZQdVZ|xu5+RN&pxUNCBs( zjF+beYI!yHCz#pT%m$Na5TrWTvmoyK;CCwgyv@^k`5QJ{!1{~+ILauTa1=UWmswBs zY|dm@O#Xb#D`cfu`j}J7{%A-nqqj^&?oEcCrt3eX#Q&VezKC6sB?-TIV$>P)9zRqP zIW}X|d~dMQhy4BQTeAuDP2cOEye@9I_x@5z5f-c20YYCH;z6xvX|Q`w0~G^Ol)L&J zetgh;@!$5}Nsn?o9RE!Im)woE9T?eKsm~02(;((Lx7ihEl_A9WNGke4z)^hZ4!LU9 z^#cttzPRJ9i7rQrHGaix<)(BhiGte~)IE21UPn2h$=NeEjtJXa^Dt zz=q5QejAB=B%K2xmf;%&u6HJ-r71~EBOsOXW_UiwV*;6cj_GnFSU$T3A8q(<{Ba^V zp*}8dDt7O0d8609P5F3sf8FgL%+2;DJfcA{k96W-CwZA?Pn4NQkG#`41I}HM?$W&? zO5imOwB322eGf;Hu*WVYhH=Q4rEQRjs*VPjIi;oaP!*1y+m)MpY4as_NQI+=kmMxr zd&s@&3o&5qK!iZ07dtb*ZL{>j)}ZN^7>d+Jo_Bgm=KR>N3;Gytuxq8Ep}}uibez%Z zLo>(`2!1WFlBwbR+koAq{nOP!9ivd|J=<{`qnrL(laA5Nv4`LmrAG#3-9*tNbYO-F zQs4kBY7pEArC+{mYC3>G3L45X7*x^`Nh0WTFjuTDNA26+@F(NW27MY#)*$aFr#-XK zi%%V(a_s$wtl)}SEJyN`7XOQDxV%wP#yG%fl^}FFoik;kz-fda1ft@eR*$U@K8LhW z2S=152B?B_J+{7Z0dRjM_%_gSY4rQ);raml*?&kpMVhano-|o)z+=o#l3ji{%v#6k zzM-gcjyg7SuPP&TK1j0E#Rl2b*-$;v85!dudbEQY84cU&BIXP|@}=@fm9NDHY4gFi zM+5J;xBNg<2CuTM9GA}ed|XP=Od?iY*NY?Tn3$ONi~I77XBS&F(}uhk*0W@>*Z4l8Oq?(|pvsd7Lm;7|X^r3CRNPiY)tkS^Ydp)S{p849WFi zQdHg>8X{PLo}IAlZ}%aGA1IUxI|oCUYAopaSbBc-&x^z=(B(=3PK=7(sX4%C$fi_J zJ^aTJQY{k5MQm3j`$_jH7h78m>9;~>aXkz15`6y^wZc;-Dcw{Bw!x`e_Ajf?ueuig z>GqJ=e#tf8o+v^amTG+fbOC?3PmS@1)}7V6_0?f!aDcfRPisxhy;CiyS*qAsft2 zoGY??i%Fg>c)ys93;dE+z=zBewfn$)VNLG(a!Z1t)z({E`*NaKPUTzkuH>0X;6kuq z9)FF9`;Q*ExZTA&22qK>tu$}9@R0F{Ee52zsos@79|&eT_DpD6seCsquo}?&DFhkH zh_GP+<=G5~n(~~aR=>Vh2K?#1H{04E8{-+RIoLN!#&Nv#LFqNkBb}a`PXB|g!4TC_ zJVkSv!L2@$frg6_7mUlNXgG?n)e+M(ofU#j#ea@-2~uHb2>fW3vtaXMH+WruxWpfo+d#TKQq5)e|ksc!c#b>DO)FBQj$_{8FjSrzP|lv7>PfyBN=}^-)x47%G|{> z*?*I*>$b)8N4=0_*qLspin4Od4|I&kxT~#)vpjZ#X2Z^DB~|3w`WrXidXo)(mZN!M zQ5;>@Dd1>)4DKbayR%PFq!4oTXpX@6gKCy1Ps+ee6l_acV9(>W86`#ZhL%XV$H`uu zA9B368scs@k$5QJTn>qto8;ct%4ryk{sUaYb%#(Uxn#ti?|&9_k5rn~*_$qvQO)e% zb?e)AqraC$0LCAc#cllnQP2iDJj3J1(b?JLylR#p(nI|v3ids2KxAMBoI>kG6s6y5 z$nm%xzA^(=Pwgy!IkUy?Zmb@=%~UByp`)D?1`4VbDX$sxf{-t|unz-%2A*V6e02^j zilm;a06E_xNSYPTs&qkLC#g2+$fmm4R`C4wH5y!tz?Mk^;u&Z$v4M9M{dc~u`<`JK zM;pXAW=LF6knXbfdj8!r_y-Li?f{2}wrarn*+MEddx~%h5RqvCsSmH@dNGzI6!s?pWE_ zq`-AxNRm2?VG^^MeaRK#3W|~)yd8z6lAfH6RL<;iZirH*Gz2|?r=6;7(AH0AZ~2hnpb! zUZOK&C#1HG4`W%McGPkIjr#vD7b!yIBC0Wm@HE&>m&Y?G-$5G_=6gw95Y&cK!0~CS zYy>ud1?Cv7heoCc5X~p6)52~5`bBQ?-|KlWABkdPkF z7gN&E*n-i3vN#^reIHSA@;sAr4ga*E)ba=DU@Y5hWMhX3AjieJ5B#t*`)uv3(t7N4uU1$r;aP{PlJr zM{Ahl+&g7t$z`gg<(p_VhRr`mD~~6|rOZiWqW)U1N4jV-=wJVpmQSRN8{g`-X@sin z+seux(8n>`YX7U++SYcuQisWFZ(a(VVZivPg?Zb+Kn`CCub71?d^ey7QD*L%wY}0^x%4ca9 zC~<||+mmz#AmRmeWssPVjx!YmV3FQ@M>JDNONY)x5yTm8=ZSbD(hO*$RkpOGgZlJ( zN5M+YyH&WrXE%>9L(Nd{hdJ2$+;8SDSz*63SSU( zY1robM#4V)9tz~3JI0LJtb_CMhh=B-hY#HZDFAYdfZ4*gLYURY56+JFTUMvQhBcOv zHHKCpf#L`B&6PGZOci57b$xleis4+-THv7L2{`b8W*g>~7oCzQK>Vf5 zbk#f@HLviy)u%$MW|ze%Hgaj>pF|mC{GKRRf62esteD6Eoj)xt%`Lvs+JF%ceQC_* zMquH2(rL%2XG5@JlC|?e*U{NQpT*hk0qXTl*({+|biYh&AUp3}gGs|?=E2Ll>kdcn z{ivoc{z2|r8*A&stJT|lct~QPH3m^_?+g@KZabwGyAiwtYOclbn~a*#SM-mo4NobR zl$Kk4>Pai6<$Qfnse;bAWTM2)g-&u>0;Dp+aW;N#-I0%fYhVdFDV_UoVHlXTZ!bFNEFKtQhB9-srsWF!L6yeEV*rlFKsd@`y0^w5f3D4Pjn|f(41V!7;vg!94?A zd)GEWpA*5frc=?Y(OA)|Js*k$Ki+F&X7vh{xq+Q2^FoFn&cf5#>_3iHHo7;vtcFBb z2gje>eFXG7#2x@97q2R_?dX8A4yooL^jR6==mf}Ez?q5u4JD4F>qZ^dZ-I&_iIShB za&-4Ej*j=ku_Ts@F`XA3cwa2H+apIuzZe=6RC@M|D3scD{~I54S+3>s90%*rxc~Xy zy%c&O^Dsx73-eTSK`KV8Z3~v0$&A?Hg0G`L{iTx1S=G zjzt3ws45>nxhH4&bIKZc&3J0lZ@uTUM1m>D#Uv;*2I5OeyBpCyhTZ#p1!3(u5|~t) zm{4kn9-_dWkp6ZWJY-0DY*dYdzxe-d9r%^k^m131(r=rl^U9e+y#i_|L%_|2+?0ci z4DE^2&*5jldrZ_h6!Y3cxw*pqw0BI5g+>=h&j-&Jq7gDt{PIrMsvThmuyN6_wqbey zh#yW3vm3EQFyo zBo#5s&I*Kb?q95R+}H0b@Fai^DZpQQOF{pr`={+Xlj)!7g6rI{sHrEfe&XE22uG!V ztU45dq+Ca6^efcBzyOw|Sm@l;F*a5OK>7K0Ng^9f986<)w&NG~H$hqkW1$deWy5$r z*Xp&8PSu(om8of6+JzEB!Um>GKLM0vYZ3d#ENr z$7-}aXke~X^y$c86HR$r3xw^Oa|3tOOSymNG!fKP_G zsvkPA-aV-q)%)W+bPF-Z^nlh3Mw3I&T~Ak?5J5mg7fI4-aE{!-g@mfrO~vG3-i~i@ zjF^weV9beqeReKs`x83V5c^^K)GBLie8p=+Jg(ehqEeM2g2?+j* zy$@Cp9^erDzJIak^}mkoqgkU^gLa?jpKl_2AN>4DBzk)t3-W<1xR7iwG?GAWpslY@ zSVV3QYs5r{g5Ec8yD|TR8ZZTDv>d>JoplVlhlgL?MfN%Wp#atlKmhB=l_nmM<`<~X&8H*BecG)tQ&QSel9C23pBNopWaMat z95pyxo>6^r2|9L+Oxzwg&p_k09~P9yE|3mvIy5RzrF;TaD_t{ay*!gU>XV?wFtImdEv(c1FfeZDPnAX;Pp1+bL zb>)kiwm&R4f$Q&UjyV^Zw8D1{apU6t!2YH}m^^@aCJ$t)phwDa+G#F~qBWRVc|a`( z;=U#C)j&kR7A{Q#H7#jHMjoEnzx#_&?+=BP;>!{kh$h=G|0n;u4w}rE3Mha>op^M8 zj`37i*RpYj8!9rCzHf<^ANX_sh^QA8VoPJvR?yO0k^E#d{u&?IZmtcp#)#?9R}V`v z&UPv)mvbyBU4+u0JC^;BS|vp+1OGVH_Tu4X=?O!T2T8Nb zRV1p%=2Wekk)gy&3^b%C=$QtlMH4U?Qt!g%jc7qHHSG#=T4~QRYHM$rW&p-t2V2G8IgqTkVta^=pV=9=lAv{tOHv$!$)DKw`=};j@1p z2g7ZS%UAw-zuUT&+PiWDv`h)&W8PvRz2NcW8IBWV#VMqX2}S>M9R7gM?KSy&II{d* zDI|VgPh_=m0kC^KfIb*+ zH0!2)$`ZfrXs?mpU0Cwgj@CBUjT}OVA9G#eshI471)%sOH#h52_mY@8t?xAkkL3zA z!jpuLSka~{GzOgbb&QNuU{yoJQ!DMhqj@43`T3O8Efr3OYkdfw!3g`uIPg|_?|O(N z>`zpxc(`4H%VTqLq1tXnF;dqWa_SA1@$=CX!p1VZn8{A^b`7I8bi2RX!s<)L*KhNK z(7=Js1|qfV-`-sW=67J{K{#4ND?7qj8d8T$5)+@0rz{bx2U`Gj+t_OyF9-i`k1s+| z8sZlyv3)(yy_fsKF$fTU1qCGpmkTz*$;Cw#YP|0VDt)p7CE1BF1q1%+F~q){6`tZn z|IqQ|DxEBjHdHbNi!$|sZ`rMAD7-zse|PTJ$n55utLFu!TcHA2zu+{#?^WBnNv?kNGmFjmL(-z&@@UEkvFpguNAz<`QdKcyx0!%{Cj*K1 zyg5Fk zWCkX1ac3uG>JWWslMT0~>8hf?f5iv&BYE;z2KZTdZEXmhg2VO!Rm@H5adUQYi$?cv zF%gi9<^9T`aSD93OG`?^HaB(A(0Z(8PfT8vTWJe3dH=Tw1^fww2QlJBmY%} zOK{SP;qyF6?T42Tm@eeXM7`VI`_;d5x{kR?Y)XMca(deIl=2dj(TLT#E~MFpfWCYG zJ`RTK5c+qSvKKw(XN6CYta!Di`A0U?a*R26xd+MUI6gyy&;Hqg%A& zIAAR>vGA4W+%Mju(caE^yRb?ncGm}|;S&CN%^y2mhYs;#Yk zg|1Mdm7Qa>^Xpf6QeFada$eZB34h6b84Y{r!DfFFgf?dwF?zV0-`L)bH>jpjiFT zC$~2WcY1z)5IlO(<hteo#i{L){Ngp}9+dSqE*+kjJ+IS+3$)Fg^X z&It1*U(*SgUlJ13{I zx>~kwjv#RWbIoeUQ&@_^!`wRsCD6HTF)eARFF1Ap`KtiM=3p}2*QYOWQr=KI1d43s z>V38?prTJ#PW|E$z$a=v2GU_fg;J$SmTDx#K;SW@_WXGs=Mz*-Wew;krld*kIPtS=O(HP~L(k6q)#Qy%zUSK)T_1bACt8Rso zJUsCNHCOQ4>}Q~`^eq)l@1S+~=c}g6GKpKIoHqG~cD@k4t2jHy^{OlV{_ycx`9b~l z>TAnIQI!~8GVKlj#jC$K^!NYM9N3`ysioKuNsw=;q{}{aIk7KuEk@7E$2LT-(jWbr zD%1*w1GYeDb>w19wb%bgCxN=a)PeZilz9V<&4GQL#;OBon0J{-&#O_p4%nzsGf1A!#uyfu~<9xZ(qAoT$wK=Ezk}u`$0tU3OZZ^`-&15~H6+wZHLyO(p0)1vl#^l(KS;~qgVZE(FG}!g%^bP9GffwvN zw$I}yNtv)^Q;NEqJcoIQIt17y~ zM5wy88QuK?^HAS#R4AlSZ;4UD$A|vGMgMsj_dotY`dyLK>Mm(P`8RhvZBtST##b+W zReckXhlI;T>C6R(SUj!sHQskprSN&KxT@(EZL%FuhV={z@50Qsh1*Y=vKJ;zC zA{)4SYnQ@+Q3h$jn>TM>&n#aD=u~1w%PI#bClOmUF63f*KCU%o=c9j3-_^AUYa*(uAd!ji|3DrfgPCEED9J@+J^z{hfu<}L>wg(oiMc%Ma_{Ce1h zJlX3^rBbA%NIS}*;l9NYUzspX=hX%3NvI*Lt>{(}H5rb9L)aMjaEB{2DAH?FzyJ9w zm4LZ13uOnz0-u@UZ_EV?(Ri!82IIX~Rx9o4w5bW$ZTTE=5t$Nb^omxjb3xh?SRE3j zL8+>OG(4m#+zL3QzWiIw#py+R6<3s2uTOC|x_s@l^xC=#>%HL3TJba9{5-YC%DpfR=YLjvC z!w?<%XydUwK9Q{LaKE)}l;L9Wc#-8;7ZUR7Jb!nwN5ei&M!kv%{Uo+?=uA|oy*foD zXon)Y+A743Mc%N@mPL$LoSqizbECo90^4J1PR$pUy?^ zE>+5xJY^PEu`R-+f`EaClHH+UPxUZT=rEb-b5gPjpH?{WtFWX!ID7N!F%9|1lLvA= zJKaKb>cXixbPwEK(GNXUM90yNo06r~lH5BQI#smP?O#nujkJQJkK9>U$jGpbPA>hL z`QGbkQSlWw7cujSOS{TMxemqhDU>Ci8mvcuMgRFoG(B!(m}ETZwe9PEG)3FB^PBGO zAq~I7z+RaPKBdSw0&Iylm}g)J2Xa`|5khk5>|wT?~jX&OkH=3M6rL=j3sKh*>tx|_y2u6zK{{EVv~R%QAdYhY;25IKwx@m3Q^a~-SF%whx5_G!oqfTcAxBcQxxfCDR6}-BjQpY z!2^`m_29|=2vYVTmL*uKtt#a?5)9@NxFxqKT zkdO%}erCxT8@^(;8a&VE3ZUW58G8`h_qxyGNR)ov=tn8FLAM#SmJmDfKZJ*>Wf2sB z{`JGcx!s@i6$Jc36gZIY-;a>?`8sUHjq0@yuU>slqo~VF_}~g`8cjpIb_*W$p4mY2 z1yaZ>ie350xP!Y3QcPUYvZ1bm#++w^Cg)ZG53MvjQ__a4V7Q?4WLdAznWYN5=zoS! zAXbU(qh%7xdp~5yTRgpE=j=?(C8=FWSou_WMW1E8bO2YXfnMW9ZvlxfgHV*KAX`fW z7TN6`D{iudYSVsi#C@P{@mpA0ii5_@AFgKg`V+gSr1A1tXkmz3z!=NW!a1?Bk}$m^ znm^u#MYbyPZ<3z1K>ue>?@!UjA^(O*x@5)I`ugsiT4davB1gScid~lVnWDFY=emMF zlypTY2b^0VcZr>G=(FNB=Ol%fhvUO>@+JR!`P8BCNxM=A4?gsy<(dp`qH(KxU6&~7 zhUBcZ3$i!7O6~nKc23tGS1`vG!&(6?EVttt4J7_&{)S0u*PP#w$n4)m6?J|Dh@Ih4Us#A!eVnO-aQJ>wYz9_Zg-T ze+~=h5I2d zDVC2Y<+pF&!jl~Nb0YATR#y|JcVsK3%^Mdc9GXC}U?YyjOF#ANKzFZv$^yAhQCAlg zT!(xK4RI`nz*5ThYWVi=-~B(`&AGE6+?1)&wQMr%>*R`_hnx=vTue+1RC^dhI56K~ z0_#Pu6*m!{0^G<2r~a*DD6;&y2R%8?bVbJ_fU%4J84D(?*9#0|DfP+ zdPfj$;PT<<3^eD$+yD`eiC-xA(NIdb!4QQCEm;bq6fJv4M+Zz0c*_aE0iXI^US0Kh z!$oRWe%|-8H+Y?N13sk~XVs4tvxsMlwMUzm(!NmI7d zgEbX;^5H$_T)ZOXvsB1}PSNvab$J)PxTvQ@*LT$vb#}Wbk|WBTN;TVAZ<2 zkIlc>*XzT$S&S-Ks?qADq-#&PDzEF%E+EE(Mdtq*k9>MZs9{{&o&K6x`y`ND4a+ah zwlY$Ue2Fkkt&2j35vPA(E1Kca=UCK4pQa3xi|KoZbZ&l zqhRi5{ltifh}uu4RN8OKgFCeYW5#+DTDNk}X$dOr;h^ zjMM3;P2)tq(l@q(aVB)>&d3qxmRODG@4q~SvCxqDbFf<$pA4GI$)SSs#iypGc5-?O z65W}SW{|?jd>}n`m6A5;1|N6BC zMM!*l*3_ZzXIJ*HM|``h^nHJK*AiN5uK^3X7C~Zyx9JHZ0byYz_Cx)ypbqLsDN6Y! zbqdhja-*9Pou^)53Eq9}7n?b6pRyD!r|{}c{i_1e=m^y3decA2#Ehn460lvSOhw zzQ~r!vKkUhqe*2W``@!>X+@!t(&TsQ5abD*o2k{+TRkOR9i3D>eTFS$m>^I!i^Sw; zPXZY-XLHl0erw3N1)<)&cUs^kydUvLp4mQ?UQJy*`Pa_Qj|7q5hz{%?^T^Wf2E!V- zhm+sF4I|@7BLvKr@UZEqH1#yCOBOw+V ztdQMKUxbb|A>et+g72t0wPN37c;YA4ZKi2wS*^ zP6$Q?^wE>TMnw@t;gWI^n8X%cs#0n|YjW{TtFmC<%Rj{TEkeT@PEtyT&R$rkxVRHO zdUr#K^!xDzI$GHI&A%??26_Va8eJ7{Zvl8LEy4T~(eOS%=^qD!2Wv5uRlzen2Vgzx zu7a)~mm#8gS5*b_8ZI0)vw;roo~ptjD+~A!LZlnv=*oqHkJj_&@e8@fEKEW*2zSob zjT9B1e-~TPva~&xg{ubxKix6b5TYY&zK9b#!T*j6Dr;)`)(_EBKOG&p!y^gdq#0NS z?k%;Zf(fNLe+~v(7+7jIy8l!Ty4f{72G+^+%uGa|g*ngzq>*iS$st~Zp8O1O7mS6M zfCBRZCy4|4cjVcE%WWZjnqb_0pN_$lnt+b`1|951^-sAGq7YE zpacfx`tA_qdk9G;yBgMU#A|`_fLNdq%oP%2*Snxu;$KY~v(LFPDXsD;l@43fqd!<& zSy4AKdT3ZfoH!t(r$-VW9}hS5$F}U04MN1I#Da;8*j};7=wQBALzlt&sUPaluf09Q zxzz!oMQqFF+g{0S_1KC<9;!&$5&VW0UjHr5#bi zzK6!1{~w~>1Dxyr`yVeM zkrA@9SN0Cs*+e8!LiUy|n+PE*A$x_8olVHf&dT0wjO@eO>O++xz`~ zye&SM?ey`aw>zqoAn6 zotaQC#@{e`@Q_i3S+3_`HNgwvA*9co(i;TEJ{4K~YnaJwea=ZbBJ6bRL==W6U8a);j7~1R znr6A+nE&_@XZBdies;^b#@yWe4itte9aB>#cuOLOgHPkSO@OWIhD)NxObApN@(=J; zLKmN&n;Q($d;6=4BL~>pJT^WK*Ukj?#!tAd7r@DfLn+b@CB72QHRN?wZf9P|DP~2% z#rp_CwEq5nny%XyUJXGsfK9i-d+LUwZf zT|Ec#w9Nec(5We1#3=(JsAGs4q5_W`((OH(+htUkmW%rLLc#qHeKrdsPT8(M<3J$w zv@}Uq$1c_X*Mdyn8Ev46ysrN4zRJ{UYlA4-ZZiR}nZSeprn*Whz9QSy-f(mPW&|Zr66tCFnv6`uM^TRtg!m z7iB>Yw<>}9W@wLrR<5`l+UPhSzo|TSu3KAML$!ck&(F_~P(`4OPuI*tR7!c3;qS?xhR*zj#!f z5X5e7-CtF~gfh~I!B=ovxvc(`0FR3FIr}f6M_&f`_|0sZsQxgbUdqgt< zbB9}9GQ5@j!mHE5t}px{kYUprO4B?(Q|z3n#l}Ms37Am!#Cu`P)I;Nk$jeqaA{3yVhk| z_#M9olrNr1Mc)}|r&oF(>Mf$e62-9D5{3FaOT7c?4_F;WppkcUa_S!*Zbga`2py_c zzb3dI^viK4bX$#<1i16s!DwE8Jck7$YOqAhoW^^_pEMQ;Y z^oFsCE5YH+0SN{9s*>~@c#Yk&3tF2`3s0m9M|f?gM25e=QsN>Z)V3c z9wp1g3BRROaSs~)jAPRMrNyCF6#CevRYxQ!5?NLbPYy6TnJ}7}RT5&N0i`VTVA7GG zSW6jI7b;@~a`u{AS~i=M1`DdUCD410d{Rv=dr?5*9d(1?zU*hduk_EiUleG%ntW3D z9QyPwPsiy;={=@j{r7;NwgOyKGHP|b!G0 zT{$p5ywZ8!oN72ws%k%F%aLy2E$Wqjb@0)R4i`VyCJ0XrQp0$>yJxEdENiD*uyTr zTo|=W_CvfiZ%5|W((JKgggHL`vVHx(i$ZRv9?90hrphy|o~xmpAP|O}E`WzYGi*|t zrk?A%*THnMeRXN8`CTViF^e`{xddj@ugdXFpxLQfNe=-_C20%j?SE|5@c^~RH+-}RTP~vXGaSNwbu>l$!E{IVAde8lV zl*>=0J;EX2St&N_r*+<%xWA`e?;!-o4Z%Cbz@gNZ)b*JTCMu)NFHCC81+c_r^dQjm zev;?CNm0sBXMVCr?Vd1eA zP3OKroiYWUkY|QU0aJs$ z%03pUQBjEo@(Lg5Ov+yvM={KQdaqnkPiF)_ZTrK8YZu(LYl>#O7T)G?y91sX07(#X z)X*@4t9Na4^KK7|*x3dzBvh=zFwkg}2a`{g0}~R`m6qlUjS7Ujl7-2l{wv7I(T8+b zpvVpQ$N+4CLRMW<6JVaInU_^w9s>pL33%G{F87EL;H)Zf)aomAI-n|o(WDiK(*P6Y zjQ%3iGEX5y&D6NF?cuS7Dq0wJ0Zc#%h~i^x%z}-Gz*j8@obfkH$BZs@f;u!NapyxoZ{UBo(bgp1jrAbjXQioF1?!?8XC~U zHN$(ADFU=EOe#%q3w5=IvEyB4S%V_ay-%01D1=JOivFzAWlsPGQhD~@(GGN+Eo+UJ zd$<#im;8B5JxMXI!}78+YQsk(qilxc1V;JPKnGbOuz0DIBElow&? zsJxyYZeyx<1jXMzi%{m8ArfpHogT018uy*Ei@0tfRX4!g07eFow{Rq5U=?u2CWmAw z#aUTs4bz;;3o!7*IR!(ST{0k;PGa%V(na(Hk{x^+g(Fz(v7g{W0Kll_ewiG(x#T#hGTx zfX9%Rv^f4ii;b*{NYo_bW^~89#&6B~Lm5NvT-qok-NI$>DZ6B`ob#|^Nb;WgSb}^pm+b@W956@5GWZOsmGgDB} zpeELT`9Ab1!lTA0Gq#9k^fO-rzQcnm*_J1sK3*9J8qDAE-6mLDG2V|EqiF~+??tO# zie{QVxN_wpp(hHt1CocarcLLNv!x2v%W`1Y-l35y_P?>(;f;*;;l;bvB1f;?n2IHT z>$Q;Rakw~_1W`~c{#&Px2*uW0$DR?7BNe1+?gm<^RED=0NYma?Gx3q8wNoZvsL*4H zL7}F=2{F95xM&N#zRDXZAJJj->te64)1*{7L(L8raN@sZ0J3{zhlf5|q5ru$l{~cg zZG(@h!v{xpU3Jb=yz3m<;3ZCPZ?~QAnefE>xiR72+J#rfH&)3~ZzjU!kxrMSmSHA@ zKaZ`O!a_n^Y=*g7;wb!>jp(|%^!%L?2^K8#U^!!&J0Xu4L7c!89rQ@x5wjrQREf_B z6@$<*+3#&ba|+aVjeb{uR?E!9b8X-&plz@ce#C~)zq{94w!m%lo9NM$ zN!sDM+rJEUU;p^RMZ&MeCZL1!z%A*+@Mm<6x&w8u{R9W0?FlS!UNM5%I}6G(P>}9t zYN4_h`cZp)%TbNO#}~&Hjk$@L#bZE`0eOO(vmo>oNDfkQ`i|eda&8@pQa?2FMBlqI zM0fbbS_mg`xbB7@oMU@S;(Es``s-&pw-ZaH_vbLzlvVuQJ|fm350=Kj^$+rIYO^Td znQ=m+#>$ocBH@i!V%|g}9>vH?g!{T=R3TEX>`ztaqgiHc>J{8;qz3(55oGj`BtYNJ zXh?GKLao(NnEm%MP&jp&!V1gs5&ks6gG69sl;hhP631JMm{YGvBb z=dzDA=@aP_?vZh(_2K14t$pJBiNi#qJ|27-(;h`qq3uCgNUa&HmFUX%Ja9)MXC~3H zMG&QWY@bQwuhgFbC}^BWYDHhd!U z4P2(XC+$>u__@ECqUgfzDx?O|sMFGTH&RD;L?|=LP|9ZP#yK=749jP!8@!hP!kHx` za25agx1dKct+$=Dlvr@|6k0RLu>e*4HE-9y)vQpYQ4yKkd~V0{=c06Uqt9R%gGA+P zW=oAS<5P(->IWY)#o*ka`xsK#3>|W2U^)~=)Oyg~7;G!mR}FW>JCcNc(cxL)T45(S zsESi|%ebC2{9$O0l>UqKRNm*@knK7PSd%Frra;cw)b7eoxvjI; z>e^nf@}1~(pnnb993$jG5_K=?O_A-iSg{~7I$VQ<6$DB>fxq7ZXmkRNow=DA9;dtc zovgaLB!D5VRmEQI5Zn7k#2Wuy6U&T#qN~{vqg2R17#bC`(Fl4YhsdBn4D?s$modau zhaYRWYCM1O3UP}@c4T>UqZ`?e+wtsj#kXIRBe&EpaitMRcq|wTy|ID5z7JTc zL!561NTFGO;ye!<{Qe}zmyF|@f;HR4_WntbG%aX-wG(0ZhRZ>Rsc_OXy>reRA1e46 zE@eunG+~3v&u-$9)Hi5i;tjx=_YtWlHa3T7M_bh){>sO8K33+b-#8>7p#{v3b)-mP~KESup+ zh+Syu?*0(0g>qTy!RMLopl1Wx>jZSr$LIUKZviY2a^0B;!qRTu=42<6f3bQlvOoUx z&tC@oTOyRb+=qu}7i}V?C;J(WUbK;T(|O;%<>ckvu=jlMCox(v3$^NF+k6|Fe?arB z-&?sa(IulBBR#LhQnup)qG8sEfj-5dlfA;j^6i#ClXiy@e&LAHqenMnGt@T1|5%h8 zY!7uLC~M`vPc!0vUHliu*(%i#>~~Wiy4OH(0QmdOd#+kVqmSddgg+?)ZvLW@C>DiD z>8$Ic_r0sC=>E9z<{^MopmV`J87cVp8@36|22yLYv$N;xH6*isuk^eB^y|(%)m0qK zoxHHV1(EjBXw{ys<UpLVav8ERJPa+JQAsVdKnS=SHBL{gDlX)`|~;`Mn@ zM(Km!h#Sq542tS-xqUJV2Xjjh;xB^-?ak1$=PX2zW~aL2*oU5Q_zg0ss$SK z@PkniP6Hh25-LAI&S`Xcegf3Lx3$;F1tA=rsM}AN9dFZ+bIerfa6tMg0X*5iiai_z zZ$h+5?l-FEmyckinM52`RDiGkM<3Ih{E6 z4~kFTsa66C0}ZxBnzQuPORN1_&puk za{c9+rE-0ymRUx!$DTs6+uD5;-=Ew@8Z1viJ%~~@X>$`3&9Pw`iN7{8HwUIavcm{r zsQ}Uj{Euot@5J-Ic?La=C>5PK``m7&SvbIPJ%aPMA!yfFIlxI0OCtjmNw5{p*Kq69e$o6Y)?@Mr3 zCH)59qc#LS=oUW5OPyWpc#sv%r9%#LWGhN{l)uN*g>$r99c5ayB2h$uq3jR8v<()3 zO9w8pQjy(X1ZWo#wo3`(oE}N7HpdPC*auLcKXOpwBV&(~!w>e4qXWy{aks4(G6un% zLbt?=ui_fTzz@M(A=IRx69H+_z$)9DB+oqtcHwtqNs?i@h20Nrex>pn_Qm&GK8_0` zQf9;wPP$%Rja%@&a7MUd91Oy+F$#f@My>oD!#UL<3@Ua7%+sumgBIW5Tx2o5n zjy`Z*Nek4fac0le_<&6=P~^P%V#1~Zj{@`}dCv=p{JMAUYAEP;jG#*<|Fr9}@QyMP zc_ef4nj@*)$IJG~d2G-!A7!IYAZ!z`EWG+?&db?C)jNYJ9emrOG-@>MWmJF$kBR{4 zJ1cx1h4xk&(zM*_C@fAvD&Q1(;upYEfW)F8tQ;B^5pu4fas)Q36*X~0jua9&?xFpb zr>8yrZBxPPdFlxGxqVlCxd#uUxi`H-ZKUQzpk){}6X9|~uwuwd;FlpJ8V)zA z$(d=U-6zhO=DzxP5bk+3iGDJEBiQ<>9BG zMU`8D>Q>V~Ld*vg?P`+b>CY~@x4Epxbks?MTBv#D+iBCdBK3XRsJwjgK6AXcdapsN z;2809WcY_&$3oR7svIf``T&$S0=7=#(H%RG#>4~f8Ik2+NmiB+ZZsP_dCKphgB!NZ ze4$HKShvTbM8q!Enuz=Up8)oQM)L36k@9(ia3}DmaG?pnKT8;e!{6E-{rjg57B&Y5m{Cwc@cvX)v?b=bE+YRWtMXV#7*Xu) zd=O8rh{~1Xuh{#l{&QY-b|4ro()-OwNJyw-6ob#cs^7P%oJEH?c%R;7x)?)XVRiXR_~42i`@pLb>2Q|k z9*90{$I2{O;QXRs(xYC3j^c|l7gy*>_PxJHu0Gccv}6XwK}E89F5M$E?&;C_@S&Iq z)62{6!t^T@IWPf(J4kyp^A71%OxOhIh!XDP4Y7UHF3_|xAr>gbifs-XUu|05F{pUx za5WyPwaI9O!<&?}`FB&30*9O|3=>|aKhELdwtbasS1H%MZ2`gZ|6dz;hv_9~nM}^{ z=vnoy*$XErf8h%T`NIc8(2OCc5TM^Q%jM4svmu}|Ox7WEXK;GD7mlRdyu4<8E(}TC zF=h5!hX}a@NLiCIT(TmM6MFzTIs9?W^<)4geXe7NhWN%;9lwA|pN}jI4;4mRfTv-1 z)blt>#V3dV)QYdJ9hPGsu$=jG?Yw>6^#5`JUZ{D+%_$5Ny?j+hwK=oX$YSv=FM>kv z*Zg&_qu(K2i8T>|5hTjrFR%a8q?nUvdHv<(OZzi@dF~m9M=Y}Qk(k0?EOH8tKP3NS zB;tr;@?QpJfgfC%Yk;Mj1~Yv+U-4i;El6 z4SE=*AX~H^|DmR%)AjXn0x%4Srpmqwya1^0BxzQF+XP@5&M%qi~Byz59_3 zur=VA`1Xwjgh?RMfENJ~qyIJLTRSWd7`1w1=J%q$qcWEZfcX$#iHKM|k6^U@ zrD$bF2+D#JZUE#A%!E=I{Sf={=+&!xkf4(et7&`1uXI8ikvO8^VOg+e!=zibitwJm z*S?(#X7U&4oP7g&C-9V@`CCAE5g$Ll-SN(AXu5poWB>hg1|?eB6AYl(L_lh7w<-pm z8z=-IMi6oa?kpowVQgAOsXjTNNd(kg!q}Jr5$etJ5rwEde=cWj&5lSF#s*>D2GSXB zdSJh;tqWYy>Fpr|O#~7$2eX6ak0163^z(F#ZDBG**PhcFS3X^>Vw<-Kfv`khC9IWte`0nPwf|AY-!fLOE z6c9th?ZX%y3_rlDVeWmVn5DqpSy-V5PJyNhMB%JMflZ-eda-h{fq>|&`|k1 z^OZ}0S~W%}$j-fL$7cpr{?j%%VmLhSFw)O_MgxUO01A`Ri{MacS^!o7-Ir2T4ac*G zj|tmwGC<$}k`A@Fz3ybum$fxkH(5HN)<_sdaICw)M%OLkkb z`|wqTnBH=v{#|~x`@Q{Got`WQVs#N?9?phi{D`J)=bgamhW7m2=(wl$w?a%+4ZAlx zPr64Ni2NJ?PV>t*`iK^=Bn3rC2YO9dzoDj~@e4Y+Do}EO_y^>>@CbE62&Z-1dUhLRfhQUr#)+@9!W9hZpz*AQ&WFTq^!{vJWBk4Tikk462JDg=j`Q zpy5E^-UNho74SuXJWJ&iRmgiO<*WdpDDsCbs!2H~<&9 zm3XshBh{tR3Nvu%XV;&O+M|C7e#d4*0wz5=O;l48QY<%A#mgfhSz`8N_gmg~15jhK z>DI>a_KHNq4HXCi$UR`4wh_e;BFT(VY}s4vd<$PdU|D{#-~*k8(8s+E67+?((*@?V8Bk`mL2R1!xBwBSZWl0! zNE>?Gq3YH2>HbqQTU*oRo+RW(hGPVRe;Zohs76T}1C2hpr1kdk7cdjc;6*(#(@zbdEYIK=g-}d<@rzYe2Ukxlp37njHTt zt5JE=9+Ha*8>hzYprU-_PK-?1P%S{cd226Pks*%XkZ~Y8_KDuhz>#&?+?B6oj%2DL z{{&YZ@w3ts^1fI5EvJmf4NzB3Ai#}|%LO*XQy7u*JXOrbzg?x&+ro*7ep&?&H8M2m zrld&oJT@t+1|cLU8;c!R)xi=2uJ2n&(j9bCFvcQx1N4vz^!PC7hX~|>l+lVOLWQ9( zXOQhhQQYQBm$`jZGaIw{tBc;N*?6WDxx#Mqo6c5Oern4}-LsF*NJ-x8XS+-pt%VBF zU#ozq>TuEKHU9P0m94C4D*U%2Lz=s>_r@!Y=CuB8oF_W61&ycA&Ylh1opSa{WC&oC z7SjxTxjkyt!|g%6g2t1hQOEYu`5xSS;61n#EX_r7TgR>iGE;Y&oAUP&M)-TpRyz2Q zeSNRP{cW1$^qFhk0%mncIH<)vgOU!E;EZB&o5AMOK)SXZ3HNL)yfihX@@Ur`e z?&0RW%wP9e$D5CL4I_V88I{}ujo^v*<-GW=8;X&_-VWUn?^-R^=u78oa62+a&w&?x z9t1~da4X#apU|60rxCl6S1usZU)kFF3T{kjCqd5-EmdV`tmfoRsf$c?8k3${f2X5- z*^G|O^{4;LDo@uI^BcDB8*pQwM%7*hR>TXJ!pV~hpO$~&1uldM!-ReLA zN$Ig8$x*Yxv->d_)Mg+A%J}vTvwibcl8^%#W}8qTcbvws-iD1rS(8o@dS+^~VMP!}tddB9I&)J4l~P8#&V+*$iiB3k)sz zm;t~UAYs&Cj00_$|JM?@S%7Res2GnIEDl0S6ig~n9rU2N1EUF)akXcYx+!SyqS z#0M~X2|s)o55?L0e4Yw=b0G2R&-awzL1&bQKg5opzM~M)w(Cj(I!37ZO;F}JPf_1D zy`;zICgMo!Wv^hP;%n;$0YKH>Z&ujRbOYHlEZ$CabzBSiap4|DisbpFAWs3gszeiUf71uu`~qVs35@IjRbT3(FkyCvpx#dy!z>q6xy z>r)~cuC7eCyED=SM=qx8daBnehA%F>&Rlv%T~anmU816sl75*b-o%q8yo1(wT`e&% zuJJw@f2-gxL3(bxpf98Jtt8R+q6O)D=1~2Ds7rnPm{I)t90wd+p1C*;Enlj=8p8gv zYm~6zepaK&nVLIWaO9b{c2eKF??EMjGTOHGj8&_|jE2#WK+k*E1k=-+u~AWm8=Of zX2fi4SV2tK?;p5RuUqyQy4+0|scA8Yj7A$G|k_ndXy|9KLu(SRJMh?JCYP!m4QR&o0nDDW{)vw)VLAAE+7q1AvE zW~uMN^xB7e%YRfHwy7>}G^TOftPe1HesMX%kMBjOIGa@!Rm{y5plo)n5b~Eq@1hevYR~rA_8$P?OMDel3 zO1(|iZvWrs$I`fDzK>BWa6LY-^luS}t~t3=d|EKxo4N4LtS!5i-TAw;m))SpA><9q zOw{b*Avw4ZFu~D!@ItuvdB#@VXuapdcj(wC8u(EVmk8Y|L(|hO;rT$fz6<2tn)Mx2UqmnkKmSl08E7qm{t%)9cc3mmdGSKg#)bpYi6L$lhz60w zgB1p_U3srxjtXfOkc50VKEuGN0D)LY25tkSEmyZ;58~Cex66alSqf%$FfnBOuY-f2 zCliz2I4cRkK`nL<@mvcAg3e8KHWxd4KSgxkQMV-qJLF%crhSr5(pyp~%+AijHK9A3Nvf#ersue$7I7g|(s1#n5%y^B*FXmhHc?1l2E)mRkPv7oCCO!S z@T4$k{PDcpE6Hd5@Sb>oD=cIZ5cmw^O*wO3dQ^I3@NT~A>tekb$%32Z|FZ6OC7sYy z#wPWOjrMF`ZC^F+_|qJ0oRZX4JAKuYrr!o$QJ6XWW^kLb15@xi6OT&$)IMqd4cZ-7e*yena3UORO(uZ* z4pnldxQ&vIi7C7L_yUep)Bi<0{TUqm1+2+i%YC9EtQp^u4Us0wby@S*cK{f2+@1`X zNJpWU82lg&s|x4vkLQ~2xqj*HN;)O%<$U3b`{W!aCQC_kXQTGySlWqFKK(|az8v93 z96LJgS-|cIamt)p?Qz84(j$lT)1$1_&!3;0%u7v~!_MIcv5FQ?ib|Ijm*YhpipS(G zPm1lDiCQz2o2+o?C#hftg0&En$33uA1){QYa+r~TPSGQ5J}18T(6UFjKdj__h@v(u z9*gvO@h-;waxD1#1K9?C?NL7yJ!9Ath0pXpBaJT;1n$HN;)Gmd7ijQr$T=R-W7xSx zvYw~#VZE1}T=(m)CVSo4;nKychj`Z#78Va5+j7B33YIJ2Es^C25SoR07YC{pI;vBW)9yvZdwZ)=?PfWJC1< z5rA%EGET4B@jhgv&5iMwe@^H(gB>Nsx2ePu0ey@>{)S@&m}Vl0?ksXBlE{Od8kGTi zMup?5Xv~Xzv)-_5O!bz zybq~M-T#A6WT31&==)?^neF~I>b=|y`ptXTTTTrBfCT&JU-M(NT+g-T1 zxe+)K-XVa2>47^SeGK)wI9*Nq^C6uJi5G^xb!;9K!%J1mMCr_8DoJ80N0dobx=*uu zUMsO8%_Zb&Gchv0hy3Wv^JRAhMY6`TZO>ohwspOqI>IZoQ~Qb_GY4E$f4)}QSy-?@ zFPc$R6^~F90B1}MCqw^0Kmbl){Zv>{hoBrV3C-{3q(uP|ew&Oh2=wx={>pr2K<)p1 zf|X4w#FDJJ&;BzcKL@w@&mV)+e_@&5zLCki#}z;JkMrHt>ay{;eBmsP-cZeC32Sx` zufTr-MC&HBNA#@zP?BaVLTY9^qKvg4=p=mkvNGKu4k(vTKG7X@dUaXG;?ovm>fklG ze|xQ`PHc$}ZuXncZ>MZgJ4+Cbu&_!*?gVpuA+xmu!!(DdO}S8C=!y?h=i=35C$EDk zuj!UZ`AVTT6&j+)g!^nBvaR8iLWIH4G5h?qI4ZXs0g3QUC=|#&2s?q?4%Z~R!&rTS z28?MqI6i}2=pBl7{9DJjY@vHfBZtohzA{3D<*kk5g&X+-HwwSMeBAX@PzNU<^ne1r zg+9Xh{C4_G^Iro*;R*x?g$h=5cBtv3rR5VDB4rFp-uQS@kpuk)Hp9XPKQTrF#g+R) zT_}N(IodedrOvfE!^YC#@1E;vt8S#aQWsr&v$vo?OGgJ? zLABSUW?l?DeSkh4h}8MmCv{Z~w5^=)c-z&fC-vfFljn6d*Ecf-h2E2W98Fr0AC+H8 zvs?KJCniFHV`{WIfJR~7?)S{Ww`4ZLE5hO0;tvV9)9&wn9h20bo;th_Q_k$SlD_*f z@VTy@Dm*lBgu_>jXc{2FK7S+#9~B9V=7yt1TJ4vW0Fp8VzM{WX4%sUB^a`}Jw0?kr z-OK22hk+zc*y)=M8!;gvvY`m9ilOuhh^hi?u(Bz1NY*DbBj_4?B_Jh2&Z(9V;zMiD z`6@y;;`GN@AR%7NQyBE)=#=4sa7cjXZ1_E)5k$YjvHu4Y9RsUIP+8o>A~ol~0h(V~ zDJc4Yn}g%yh^{+!&E$9SKmeZ+TgTx9BQ`)Ja1=K+H#?DfJdwGNbnc*R$^G`t;HS@Z z#GHA01u&^G@bn+pI;&Cife(Qo%XIInOQ?m9aD^aPl*BKU!wNW%RVi%frj23#g!3QF z20&^cd5G2++-05|s$h=-ENwz9cOL-cU%!5>ToIu9f-i{+);$X}aY6M)GTAGp#xUC# zmW&7TTpo~-S#l>l*3i^tmj4`3uO6Svq)-!3i(7&uTW13P-@_M zvh(wmw{f*U!&$vRY;s4GI?=GL0j>7$y#gO)&0%d?+EcY>&#*B)YCVZ>+`Qege!Z|= z9IfLExH20OU^5EjC^2cbw6p+zz4P%<<-e9k>UeX8>TyX~fB^e>Hn=w^Mcn|>NAVfS zaAT9bP5%40vC@-T6y1s&{pN=AmW4a#O(&`H3wrG)evIA5YJVxOOv_u6$JjxXLzYw7!;BU6`%xPi#l?}&Sas>0j+wv5X!;PFs3bSeEo-QL zrv8nQ9v(YV+r;azL@T%Q)LRo>GLf>a)rhk5{Az_<0>@fRwpST5HN$6Iw$lE>o;NW1l zt!LmyhcJV{=0coI1(YZ;F#imDZ}L?{D9|+7`_Afe5){sPiX|dAQ|{}JPi1kN7t{kFr)KflPW48$&Q(_WzQ|sM`|4;O*1ACb zd!Nw9pY76$P6{f5Lqi9bZ43+y64Lup-H4G5bg=RwH7Yeb+3myYW({LS=yicgL2y!J zsfk_9WIm8A0D}U_*KxQ$@)nS0#8iyL!=}2m85kPw{uhh`$@hrf=h~3GilX8iGy<(w z0_!c=K)3`!4+4AOfi^+>pQ1+-%~0O1J*(A+ROQ->f8)Zt-90@^^=DfdWo3jAOaU{{ z>UaewL=$58NdPE=bSIGMTRk@oRpBj!1322DR*ZMUh!_vm;@;*TSU+&N7u&D{$o-8c z@GimT01>oI(C7{h4)#F=If$2#eQ`pttOFLyL8-V4&L}T0c+|B3WU{yC0Sv2c_Dw`o zR1-1>?W{o6=HcZ9Att~OVbG{Y#>d~v`DFu>!uc$&cb~(TPtGkt(2Rg4say<~Dn&!} z|7ii; zao-QVTV(kmEO!lUp8aW192x)iV=MZNMdKL%!{CMTkzqqF5?FtM7&ay*x}YhQmzOuo zpnM3sP6TWwg3_5GoIFUk&J9_BvXY2o)zj0{BOdV#W=uWL!@E!&ZOQqUVP!)cH2XRz`lgYeuLQ z(JoV7(M%@FZ8lHq&>xDQ#3>N85s=H28~r=IKf#U>wL{0*n92s`1f83*6=f};?@ zdnQZW31E2^ml(0Bdpl#BYQhEk#kWBq}lh-dV>xSd$CdchQjFNuVwmYNukjqG3 z#I~+{h^mLSP%kP$e_iJu*x%so4WFkCZbPS* z6404JX;Fq#Sr)cMAe*wF#s6hey84y~3LSmzb6ZBH@T?6fv1}ZQG^N0gp9phWpM`X^ zpUYs~3JFbBs`xG~ExmIP%G55DfQFCJU2r>$?AI87VeYJ-&vQSQDYw`xCEcIH7JJKv zZyTAYF>$2Bqd_8*tdjJQN8~NxGRH!nRb_`mNJ>^ST{t(~LFhPZ%>%sI{j2@D8oE`! z{ewSQ*EM(c#<0uCWB>vn%8NXjx`-$?WTgFYJ^UwVKuBOG5J1OZLg9w)AN@9ogoXwo zC~}6gs`&rrn@9%+G$od1hLXriPjj8h$nct((awJr>nKk^7m>&t=sX*D;knpl8hj(! z64GX4aAaB|pTraWvVezD;-IaNg_5*zAUBFzM%uBA$4Q;#RkibiQS1FKzX9>Q*YiX% z8-RTSpaXJ%1#miD)8OJe5Fa2*6Tx&}`* zR6u%|ejsxI&P57n1O=gzf$0(Ub#TF6nL17+bm0rXB}6-gQi&%|UtJ!-gM@eIjwCER z1rMSi^fs__bM^n$kU*Z>Z)nOOJ0&DJ8dh2gBcMD?F;YNUl9G}-Zcn`;&I8B3De!>) z0ReXi2r_!|vQvgd3qkn+Z&=rL7R@ss6z34AJcRAuq9;AFybl3Nm9PUBp`s8KOJro^ z1f*WjGceelAKOW*AyJ|*HzGSI5Tp~zBElcS$U0od3&TVPv{-O|Ap3N|7=1@362!@f zHWwxc833062Ll(e67I+lA>J9R=Y;GEWSJJy;1n0Dg`@Os2|X4?f>(#muuxcn0j_^N z_bb?X58ZaMx&_#F1sFDw1t+&|-GXrX2xzG=6!ub?#X`R_zQ29%SH?XmgOj~1lG~3V zg*}***Q5`g4_H9fXc+GFx;2#PK1;2C_nHATX2Bukibh6+P?DFROl1Qv3@Z_l<*zzA z6i}vQ2xaEx<_=^id=No4TrZ?T#dNAFFy?G zgp)}KV?6lQ2R$aNujci>Jjd(61WZcmIBec#*$8rAK2nKOX6|G~`9(8*e5$UKb6Jps zLUeaAHYcxOmv}dZn-rUHVL8%kiI8}IaEymt*7B$P(J7wH12F{&Y*NCa_=KGx7KQtq z4Z!wh3&tjOo+NtwKBuI!=GW@}Gt1BV zzJ>1O^uVe7$A-g65Q(`>xPai(83Q`CVdSgs1vc^{G*gc!3MEm}1B+5O_M=ADq zM`!0FLK)P?0KeGQmrh1WO3TopQ9Sg*ix9FC!7_>vnK?Yh8aq|^{IZCe)keeia}f2| z_26MmI&*WlMl7?yfm>Vr1uOztw6Sj8CzcRFW3t$8Mcx$*b)|MMlCd2b{&b0Y0(3*`?>QpJLPJM1FHTLnnR4GxXf{ z4R;}laAjKWurjB*{a%IH&gSDDPp6P`(- zWBfe)@*+te?4BGtm3?2g;$`_D8o3=7U_&OwgCQ9~^tyM>tMjO4TXcFA)pw*3{ho`#{ zj$GJTGz);8HD=e3va&a`O=$3f8ApeJnjTimr$&8%1!(YpNN+d*jP?LPwp(BIoUEz*pF-N%0f-|l7VGHZ2W^O7Mo+YVkH zpj;c)jaMMuf@GD^(b2?*E-HFm5H`{Rd5=j+-5}%uBSQ10vjY^n?R;L>r7qG*x?D+j z6J~Sq!`A8XjE{2M8v-IS4D{(I8v1? zK~CFkNXO1&9foi*Oiau;ac{4Oca#4QYqqQ;r&o%~6nHPkwN*wka#`~*M!7E(qg$}z zMWQ6?qeCCTjRMr=gZ7e4EVdv@w7l+sHo9`5@0upkygGhZr|1nk{IfSI^xK%QP#5NI zgzW{bb)dS;1Z?e_`%7NjuVfHOPqz(0;fVENb~_Z%Vzc<@+i8t8HWD(z`t5fBkL$S* z`gPUM{%w{wrLF!Ec~U*iW3kJ}SGP?#Dr?Iaz6Qc-R%o&+>YDit^6$Qox!&MGz0_(_ zci~5^@9_6sRmK#jZZ~rkN>pC`tzk3OnHw{KaDCX ziV4a+xFvAkTB#EHJY4#nXKXlV>0G5FoQos-#_UDWo)MSA9}U!ZqFiGl0wlNH$j7Mk zcwg|FrFng6lYMBrQ<^Fo*(V}Cw)^hUjfT994?`B#`?a@1t!Hd2#ywxU7ii|`o^g^i z9)-%bg4fYYnO*gJU1+T?5%tR1OnOT?^AFO_8P6>vOUuo}6A$a9A^{ViWz`(>7y>-T z_LY*FA#o)|yzfU(^5jzMx*Au-*u^rAjyKmGO+vJq$tlJPWx|&6v9U|h>%J$sF}?kG zBDOcy{G!BpB&-{ls}WK8B@g8XKaRe%3L7pPJUFH3ADEL(kB zEDkE}_YsARrfp9XUE(P=qRD%uFEBZIrJ)weiN0rc8^;q0A5owt6$!#Xr<%M<{-MPN zASWIbRpIhf&Il<9T{qsITb-*+IN8?~LJ9Pjd87r$aVV8C*U^fEG|nWf^Ylb}H~aV7 zH*8cB-l#_GR+qm}i&D|o$WUlp#ozIrj%J`cL7lK+60SNxZ7srf#Q#PXB9Smbv`IEj zzHL&fozmO5|043n=6;Zk2<7!rae5WCKi!()w^d@th@JBuTW9Al;eNoc^qAR8Wi>kW zP{bS6C{&0NsgxlW`?x86**AW7LM&`> z(tMVs@```%+c6zFYX9ufccn{Htr^m^u&mBSD!mr(ZDwELr!Q*!&VG1qy*x9`W&Uvb zqfz&}zSMWgJfW|L*k*>*>zkS>*-_K(i-ln%gzC4vq;f<}@8V5V9PK9U?YCw4OY_}Tj(8_y01r4N$*a}wDRHqd$$u!g6&KD17A#L{|;*C!OTUy zCBsuS!bvTQD@sfEdtXL2+&_A^?V}Pa%5sWO33|`GKxvK4FYK|PO6ffkUA|>A?ot-{ z1O12Q4K@IP^7HelzB}Y5@dhzlSoe7iiM$w#EomeFD~IEnH5Q#OfT|QZ$n_8jdM$$wRRQ3aS5r^ECb`0X3@~f7TLE$qQcu zh5x`LquATeNcDOCDT3k916=vx^m9+?QNsz)NEcN&bti8u4ecwI^@el%!EG>2a^*{W zcCTP&{Al-tP=peCNXb;(XT9$_ZSgu>Mf_6Upnae3k=|+}r)tcb|FZE9H!A<%@^i19 z^`FF1xQ&Z8awRA<5^gG=XQX#A1@Havd4S?4qK!x4Me1`}v2f^q;-{5FR8LC5@-3JK z^${;mxsbi-#8kx?1A27c!|3esTca*^-itWnQ|wVgmtMdDi`&?o%bTg6ki`%5>>73i zF?M=o&($>u_-*ISJQ0<|+hT6^a!KoH{x|FATyrR(8qbzT>0HwtMqBaf@2S{?`ECBu zGd=LO$ZH}@suV_p+C-SJ_SiQU_ean0{KrG>Qf^17R&Aa=^c*Dcor~T!n>jmA_8SlF zPklF`fW|F2EnV~8`;#Q02Wb4A+9>>I-W2__zSySKm!9;>PccIE4Da@AyTsaa^mZjB1Kx|=ZO@zU3O(J&djq$BbJsRAT+Rqw zCG}29yx}0*2^n{G!GC+4yIlGIG4<9#S$^O5H{BrJ-O|z>($dn>rGj*KN|%6ugdp9m z#7#Fycek{3Oa0FMem>us=TB!C2d?Wn=j^lhTCbIKbI`CeGFf@l@MjQ?BwUlAeOy7O z+O)?mtLVodQ495@ABv9r1H<6m%IgTr(EqQ^Q0LfiV7Y>7-*7PaCAnj_i1Zt!6v9ht zHku*sVEG=p`!*57Lm#%8>n8HfCium(07bg}=ERF%7r$$l-^+?ON}S-2UTaQdv4N_# z)$@|mEZ^Vc8PVrG9Hsooyk@BIvU_xCdwKDOU$DVzDR%mm*`)1Mm)U+04}ouZOH|() zLCHrXt>iX|;^s4fjuNB9)r5&9J+y;FfzQ+Fh;Svl_6#yyST<}W+^pdy|+G{d-d z)X%2%K!{DN|KF>md0<-}ag>t622L_N<4QDtiO(+(6g$h7DRHlivSF;zJZmlW<{_IE;BD znny17{uurPd+jPED)?VC#FB&MAEXisN-?}2jOF=?-q7i1@eApzN@CbV;5p(dY@cr? z88v2#x6poz(J^AEX=Rq-3XYViPMClC=g@x>uXO(iw>n3ab>T53`hv23{q^wa(DqzJ zZp6~jlm6=FwU>1I+(W}=@4vR{Mw4vI0f>UC&jxz-Skai<6=|^H*i$@5*qPYJD(v~4 zzwN(?A1`;U{(o;@Kp};>RMvEf?99CgK3>;4>9(q*1~K49n!fC;4^w#rX$Jd+@F)et zPd+*+9mN!R6yg!mgeJV>Kb`;l={EY?hY>pqqTeAH}`B$RuL;__#J!#VongJ_;C zkNr|v*CTQ6m4z7VyJtj)L(QL#stanh!SZa9wWTb-orE&Ii?ef!5rzt0Xk!mf$^h7% zs*J#G%k8KAMmM#T?$s3aPj|tRWDEP(C|Oh-sfW)O^sJ3Ps=@+Xy|RLXgR?CI15$PO zQn7b#3lg%kpUKXDB7Wu+H7260I=H^NYq6u>{q>Yg|En#N9~FM=2bELdkMZ5}^K+A$ zIQ##529BwY4Wjy;0Vb{9$x!_39Z|q;-B>$4E7OalnH;jj;QaOL-x3Nx@jJ|F&PR7f ze9tGs^+pJNqheOrsbM)}+eR`9d}=JOT>gxkfqakSk6ItYqv)Nd%9EQD! z3U)@KXwZ`;O!P?9%>Fp)>=FG?S->#6%5a8QbiBl3+{nSCVhV?E&iYzEY-5N*3Z|p_ zJKyi+F}MT@N2pcsSgk`eS<+_VmxspqvUDA^Z|xZ(}nF4*xDT)uIa#l%1RS z=cD_9hJ5Zg~5oR z9aaOCV9}-becc4;o&x&a;PCK6EH=AJjaKf$c*m-r$)>Z=!z#Nrt}z)|UQO}~iRID! z$f;>keF-yMB&8JrUS2NHomI^gbV?0X^ly`t`@dImT6Y@HsNcCt3>xS6C+%vWI{`F_ zj9}6&FYIbL`tSh^38MEjV^!kI*OTGowmlvZB+qO2(mr@P?V}6+)xq!BK6?seVwJ3Y zD;Kl#=+Q8t?gOvlr@Eppr=xX}sPp^=HXWlu(D^TyK0tI@pYQLR55mRtJkqQNYlng2;v2{f{PpYCzne8(|BWKrZ;c>W2--gb zy_Tmu(UQ(ENT(_EdJm#<$H&#j;@g@0ONnm#$@V*CgY5XpYHDi81s#ixidU+L7K`I@ zhLeX8Zv1%uSGB$PUcm2)U&f*o>lh^LnNJU0uM2y_I+Q51(o=4a)xKb_vl)y2= zji)FymJQha8b;hDtW=*{^l#LZYk`##ilPS})9kDcSO$7vy2P1+Px9Z`u1f+5@NWt# zn0-Vkp#m1rrxFB1PJnO*_W=+?c<{>xj1dbL1cQY?3}0kVy{dT)W-K{myS8df z>l$Eib;=aVW;;*=#?&vel=}Q^oyiO#0a8Cm4De6s!0`f&*ss z`fPC@-fq$UATbFw8*kX#vg6UNY2>oG?2h3{>Cl;pC_tIecNc7&*ZHg|HuW^X&} z>we&fFXZ8n5P<&0zY|~#l$7+PzBQu!+v(E0GLXKfFy4RUx-X|)Ezo6NN9!pArfFMc zem;+sY!fF|i8x}a9YMXb*n4y`xM7$(1wPRkl8j&+`s zX*{)mcb_r1U2Ue~HZ{$ptSnZ+PaUDee?$7kr5$9yuRz@L{y~H#WUJ)aQP@f?IDD3W zD6DIuHtAw``UJ;HxwTmST1};;5w`nry9>XLEhFkIsjW$-lxi>?PlrM&wyg2I57I@N zD?BUZjDykFZQ7B24i;IJ)0Gc0(XZFjM|PHMg^yNe(cnKh3V&}PAeh@RtNsxxEFTgo zi?7Vc14O8nH^)_%Cy1RP^d*R`A?R+O?rjS2E%i4CnLbpX7gz;;p0b+xBw^iaXGJBf zPlWJ-QiEYP*nr*qkU$Lbu4L(DasDcD?H_4ZbOb`>mRovQ4fWl2`L9=-EeF4l4;H;d zgE7XKKW5&ujOjE=RImiY0xLF6ZG zw=qIEfy!{}UKa_{<K7cC3iwE zr8V^~r+rTaCEYbOb;6g}CVcBsEc&n2H4?%Nst;*w*2tHJ@>ZVvlE#La+VeB}c7$!? z-b>O72&CqAakEqz7B!U+G_ULn{A|%OX&&xF6EVW~nuWMQd1{ac3~c_0y3b$zsJbLB=K;AB~$P`gJs-|j&L`XXgBzd>^> zGA{1@QaDxhNycO2gE@tL6*6L489{*|OAAb`grz13yo*~;wiGp{GFB|Sd@BU-=!)m+ zuCL-R^gj$JN`&@K=c9?=?xy6-3{O~C0}U#eIFkBdSjB3+H2wIokgEa4l9`2>k!Ony zsDJGSW`M^Zz&}B65vrxLUu{7xw)_Lo*3gFc@v@NL{pF==rD0R!5*yS7_cZ>#e5xOWl>1R^1jDeBXJtiajXP%zEvn_c=O0i6)tjxZk5FZdu ziI@o5zpij4IOQS8li16p*-P(v)V1~FMr>%0=AC}O;S7Q!8r`LBlmUJ_rwv~$&_u3& z_s*J+Z^QK)ENVQnrk-QuX09_DT2!^3);Z|8#xO%(vJEpyNW|CHas#caVg%J_O&*hz zF#Y%ZMnn<&&bXQPUAFuh8X9u%-!rDAr5Uz*&q%n_CemwuF$rGUF1VJ12bQpe)KoQX z?c`N~PMZQ4Fj2DWF#=~x>Dm^HMo{nrE}IHwrm9F3is7e^o81k@4CRL=3oS>|wb5@J z4btbIu95oUvb%m|$o(E-5z5HwEJ#FaeGj4xE_PSF&peGRGsSw>8-w!W$VP(T*Gzdy zxiTuisOd3tWMBup&p7hil$Hzqj|HTLs>y%hz(oiYu4>@7B}ip`)W9-ziS#6>7F;ww zlt6129(<#$JWZt#Os%e`Hvj|;_jUAw(*NB?8+{rLg!D7`?VxirlwgpxI;T6(YFuSc z4F1O&5RVHaQqrJq019*&CG5w|{ zB1KBR6!BI%Fsv;M(87?9r+k6y{>8dQJA7$>Gi`sY+H70+RJgc=nU>L(3oo(g{Pqtj z1_|z9$crarPBy4JeP#tSD|++)gM1Cmi?gST-F8f0``1&UnF`{?Cp7 z(*i6>EBlCsewwq{TP%1XkCnX%=1jvTrwGq;&$kpS&2p#Hc2=9p&|_+;sSmmd8if?sPCca%MR_2{6L#Z3mQEU;$|&1{voPx?#H*E&q}r;!14$3 zEzy5_dBBZGjL6K!LCa{*^+Nod3*H?0l~tc*)SJ<=$D2;%%R{2h^&F6Fe1#HXj$8e0 z#k0j-E{6Q~c|q0WBt5s!wINWT#?1VkP@MhH-2Uf`MD4Ba+7EB!R&H^rSOE$i?oina z!pZ4*V0LntC{h!A{^t;2+V!>M??ST)ll}l&aJQnFKkQ1gdtOURCK$2fQc{k#KMb`) z)q;2ES=;Z9Fnt4cH7*8LS0ItSW217edI>G|wWIGRYb@kdvj;ogdrW$k0sLtH85kpi zbYb^G)lA9f0dbkD#|-~X zj08Vgy;gIAt-d%W;Zg~pc7@unfN&09b_2*tn8d}ifP^nI;Q1zC7hvCE0GK|(eg%R9 zrouqy2X+{!Z!L}I1IQVe<-a)u?}S9inLe2M6v*gt$;iskgDovBxd2oFsOTc2qG&}$ zGog|iV`D5ypq2yhq5PjewV3QuIZbvzJ-GoUx-dY1#REp`5ci|eK-gD+F%BkQ>bf3D zz$x(M@xHwP@=sVgtOrPRkU{HM@Vh-5AsLVan(a?+3+KRc5vR{LIsriM4b#)Vbw42S z_%mg+R8r2uPn2*VZbfBA##jk*OB3ORUN?vKfOFk;LXCVM~MpjzBbS{V+H z>~cPPaYhr0_FtC7PvseS(9(5zovbuWoFkU83@t#mDZE`@Y;A-KN0Afmw`A9t4x zROm^Xkz|>Y2lJ7@Hj-Rj-3F%J`v^KAOGk{Lk^q6AE?{N_q~ zk5QqNb+r`SdMl^lS3vG|)zc3|HYEJE#9%Q(W8Mcf3lrRqAMDJ2dccG2FkR4zww7&b zdiwLAC9Q-+HaNnbqYh~PS4$BuVpKCT4AZmuj z_<}VJYXjE{4Y)3SEP!Hbn}g7=!|&;7SW*& z?Lx!TB~yUJ?eFzLkQGr3MtkNMLslE2uB4lLP)0aQDzwhV%mY4m8lAba*2oE6vUx3~_ zSs9#iexj)?&&1GZ!YNy>(j0@}^o#;e%f49E?eFXkA-Rkv4h!du-SRP;liRE|-*N~U z_c*8BpA7i}o~8l-Vi<%)FaoI@kcFsz7m6J*>n|H<6s0wm?b~-h?Jc58;u1_x>GQ^4 z=#H`)x&vPDVWqO!A27Qv&Wfbsi9q-C=1o*_s}81Tli}B~##eLzJV&iP_ern8j82m> zyEFNB8FR6nU7hO2&3H0V>e$q%I>K&|?Uii)80`oW9_q_x19S_4qx0OHjYg|P~g)p$zUwzeM!yEj#)J~1nN?7=J(qC zvZxbcW-aTmt>1KPL_t3sYFML0FdfbO0Qd|E{^Uu6%I2Gn*C)?9&#LIXwjYZ>Z02jF za2P0WRlMs^@{&dM>+*KopJZsIGQc3DeE1}PeIgPe?+QNl7>VayDzB^L87*C--tp<- z61<|O-S~jbm4>zM@#)|hTeGdOxqY(L@My1vTY7<$_8UUQ$UJ5a7G%UXN<%=YB>`;E zlmZU369q#SY)FfteQo-v_&2l;-tdc!?BKkoa$mqxS9vC+I=Gq2z82oim!+OSBREgTt%SNK-fgJ-X)(%Y>{E9Di7P-M}EQAzw2&sJI>n0~tL z_tE?5h)Trq$LT^2(^?+ud>sD9N%)AF+U4IgDs*20pA+Z`Ky78ooE7h9|28$YmeN|+ z4F=zEY%@L`(3gR1cp%LJu42`qq~&EpV0csc^yzSAKj?o$cS11D;!aam{>BvqZa)n| z9@Ru;K+6P;P6w=p$7djh1s-t#{{SWfs2m#Tcn@+B2$fi=c|h$4e6(GbHfHzN6rhq* z`YR|9f(wfETak9M;E&`;Vkw7_VuiML@ZhF4=l4TILypdhSwWXa0q@)n`vcjmA z&mz&%-k&afxUXJnofeqG7OEBqkNe(%?CHy4tltnk?UV<_+x+~)Jy$hzu`_!U5fcL} z@U0lJR5BV)lodPgXJFo%p5-QswtE7DUh?MVYlwT?pXo?jEm&k^!sys`@l)pJ_W2i* zDt07J(s}buTdZP4yW~vy3Orag}2?CYxGA%Pfc!|{*E_z ze;l1%egcy<7ujek}0Lh{=}$R}8Qi0&8em|`an&dArG6LLRCz%_0WC#!0KBmzSq zP|X+qd?255Fx(ueSOSG~&Y2Eo$(CHL`GWAN)Tgr0hzLj3{O_{(IgR<5JqdXOBSUkc zGzh6I+Z^*NF$%<^=+P-T*o)gZnX;!{VE--gXC%=g993QATk0_ zg%bSF5f0}n%#QJ<_9uSP0rzbevaQ!Wg?Ct}3rK5ARO__)wdL4&=}Q#9-usbDBhh5I z_2wZIU0=vMLxm9!iopOnc7?)<7ahn{zLKDw`MBYC2hMpdCiZtdz=K5!xDmakT;S3~ z0>qF&yalF8fT(nJbp_5GXOR8_LSKLjpBrlL>50_zj;LBW&aXUXG=jKp9ai1YMj5MS ziK^TjiwzDA_8wl@_@n@P1z3CTK(VOo=f}Q?`H7d*>ox}{wKEH| z%oh9+W`U{Db@&}v5ci4^Z z167T$?V?eARqO5a<)4F`c!?>V?uSRt@|Z}zXM&|*Gf?&JLV3gsF)}oI=d5dT7lx#0 zDsE!_O@qDIt!4iQ8w&yw{K(IZQoc2Zc*=6{pXSQVfvpqBr2%U}3CPIH=30gWgF+m= ze4n2$EI~vHp?(Tf?X=+ty{`hR3#w{4#(%}xMniZr0mtpX!zw6H2v~JC9DgQUAvOXL z7qGqk0m5_Us9YuupH}03lGpY$nH@Gi%4;P$`H>>yi z6Rj^^!EfzR5p;tsKR-XFAUC&bjg)TzQgTM9*{^JIG&yr?SP{VwZ$x=KSknDLD&f>? zM37u1KTc(*PVFX_*_2m++f$EsjZ!>pg$B+z7x_A8$|4?{kWkL`Sr2zp9(zI{9Y~*} zs@fJ+s#cAhAZ&rU1hl7}TT?ry51ZS8%9@&VkM|6Y2Qnao$I|xCF41J!2YTQhgCREf zM8Yc=yb|zCXgO2Ozx0lnT;S`9&$We1q;fichycHX>?JzfM}%3x)puUpU&tc^2SX_> zW>gRI(&|RQ^VqYjvN8rd5(cx~&34mWl5%^82t^L?F>|L~mJdJ~tJYdF_-bJKs{FZ7{xSL9yAEWA$4-i-`K z>I?5@ni1@9HWXSUNevnG9yXRJS~$3!%-$G>_8t_~)CNUP_%(%vXC5eivK%abk^bpy1yW#_5 z5wGnRfcTZ4e@R|inUmgCoXfM`-v=kXQQ3>Ge>06|nf=>*BRB)V5kO({^3Qki?xX0G z)6wP=i*&|lLQtPy*#Ai@qTH&xS$*%lhyc7=YFbl5K5a271`V$q$FV01Re@Q4swvJK zgVR>fk0ri_u7BO(CPzlwR&!du!tiCV&lImdFqnc(^?WCgUJ(kCfhH^hfWRx$4j3@} z7yy?NC@2R~=>p&^HRio&FrcCA1q5}`^oo0sQQ*FZMqI%_;{t&l@MHSUjA7{OuB;Z_ zDr2DS3wn6)RT9ood-_U=e&6%kmrbkZs&aUnLhxJQmC5 zJ49Lyc$SuAHaMJfIPL3eRYQOi$B^DyCGe=btn6)k>9xmLaMT@ zl&aa|2pI$1I=j}T9!r=xuWZn6{w@yj>0Wis?H84G?|!M{4`aa0Sy#rYV81e)s}k_5 zqUiXmf1yB{KHL!$Lc(W*0mV6i&VdzpuZ@3bNn>-F(L#_h=~yrD3jxyqNVFp*v<9cYDvCa5DvY_sN{lwbIeuNAb2 z*z-Zd41+e5j(j=bv&P^ShqIFH$wx-=GnfAF4HuV-Oejc?fwF>ZXZ;e!$N4sJ^`Y%~ z$xHTGWBn)XAvtBrDjCC8sYZQ(nno<@$puazi+?ft%RfzNj@qc%Da4gKsGcsaKe?RM zC6zZHL(s8%2LKHenEU{ayXJGVDI6;Omkv&H;9g6#N`rdlz+4YVfH#*%m)qy2r$Od+ zpTL^0G&BDBby-_m7HDPE0bdIzCMcdT0!K&P@fm)XFH8Y;R1s`6pk}2Dx!C7d)<>59 z7Jip5Qrx1hWMl+iS}Oc!)Cr}|Z1#^(xzAq`E?NX(vc~ho)xVF|U(|iRM93{Q9nB)P zT+9}I?iQ9X6jb{C8OQgjS3q^S5^S-SS;qGW0ME(G|5HPAMM1@lPDOqWu0_Cf;ltP%=19;kRg(EY%S6lbrk-yMK_U$Dpe=XgGn7=iRyY`RX`t4t}3m z1$ZZzP)81+K!Q2~6vqHD1A#z1kDGS&Kcb=t)~kS3c6_2#o=?}YzPI}yR#X!qGe<2SI)a-7 zyy#hpG3xA=Si%04HY%y!m?T6$q=lF;D4a4Fc=%5fR5uYjHBcjkmMVW+;F^Jyu1dfA zs@C0QNQ0j9A;|M>%wo?l>Egnm)O*C{Y(FOzVAmT+$RhzyIvcd#To?tA$2CI430HZ6 z>D7zD-m0y*@iU*AxQfjILR8eK@UGg$@-f!m)v<3ldDfMm&LdK*?@fLKhZYP-puz+O zhlo@aEs&uD&Bg=<9gvor3tV|1qZBZQ?Cf3#3A!EN0}KXqYy!IbiCJ04M(t4PC74e1 z@Tve~mz=Y6?FZ`@!Fxb8%nc^=fEi+KYfBHhC7_D-xu^y;9TfToJilEV)eSJ%D4)S+ z>4rfm`W3jrZEOx2FDHlQ!QedoJpif!bK6bhNt-qZVEt-6_17rw+Xu2%OuW^wjc8#r9mIHXo&GY+Z@iOa=fht z-0(d&6_d6*?;=NBH~WN?3Ju?D4Cy4KbC3r~n~93)YE%RWq(Cw5vfe?%J3?)}r@-&9 zh{P{LtD&X+WgQqp=oE25R)?TYI^)F0uK;%ky;}m~2C%Owef;#v0uWL_I#>)Qr~PIm z-x#&5mTCc2;aqa6<`SVK{OAsa)!*t*3mFNDk~|$L3oXY^a&f8!Gn_tKuBK~djH(KB z_)$kHJHlL~Y|Xo>l)iiZOgxF`B$?al(IB_8a(p7JvIpJol>hX z18KZkIy#`+0t^P}a(dZ_aor{$}l-Sf~^aP0reGpPosc`Sqs9 z;OnWpZ;;NvFJ1H--c!tLKo)KGJ!T}a{Ijv@gDTx|uo}30W_jD5oL@kY(kU6;HWg;u zt0UF*Xt4iM)45R1z4*)I9|*5ez42O>y|GZIuqb#Nh43)JvvmG z&OE-L8^ZMu08ZhU!k_u1UtS$i+u2bVUiW{RZ@6KGv7?xYQBgD>+7UoSRCYCzpY58S zo^@I2pjq}i@mqEsI?}7J7IN=jWvI2<9eZW&iOWaiPmQ|=xAdd*962!z1B$!KBCF2e zMgiwI5+VD$&(`T+Z{k&ff*wTA2k2Hst*t*=&acyaCCuJ_SinVkLEaP1Y5SwKm12q) zh+`~!B5+zRR-5(aW%!a|Ly&8{mUJEx0*Tu#!khd%u&<9-)VP*01`L@U@*At+WG{GJ zu4O3SJ$`lc?8|M-Nhfl$2qq6| z3KSAJBegY#?+GskMn*SG0&aXj3~_5ZNCyn7`7~y)Y%m>yKx;O^H9y%oE0mPfd)hh2 zV{MM6-_QLDBjkm|zt8%0yN=zNWM{~)p?nHpi&Xbzqzd?e&J;)f2c$T#a<-hp8FgZ7 zyIt|t*VD)njN;>i3P%!*=|m6D^%xFcwBPCSgI73u%^|!b0yVaSmGz=X^*b%#k^vwH z$aX#Yo@dH60QM|VmnbN9%o_OUfzz8|mtY9LBLm*|Hy~Ziz`j=)s} zM65hKQCnGUgJLusov0K70! z=NUR_jUKHebftSEZGoxSjZ_1Ef4CrQy9y&)uYK*OyX>b9U6W%NgWd5Qqv6a1Ie8x* zNU7OJVdNXC+#5c>;)+UmCB4SES*-+7XF;%2VPm8S6G>*>)A!UlU#plc!jppDLi6;JXdrTTmcfq64*4xN{ zbY>adr-|F~kBn4gbr;a1x~b04LpQ6P;qQ@^Wiqrh05%6eFT^5kE87p_#2+WPJeK{@ ztJ+%-hommN|Eo$TVa;HVfnSZeE7|l0YGg>5wPNp zMEtj1`ET61B$dxoa)91Fl;8}76+q$SG}2*?AX~x-M1ep_$)IiRvEoJqHa;`Z$c7SS z0aP#&9CF@kXTagk4I=Y^%WYu3CeQ0~B0P=9gAweBG9 z5BT-=ehY`mdCVI4+S3Hff-bOQ;%8t|gl-})=2t~IkVO%fXcdZrl%eOnOS|g7Wsx5d zR2n+pct`TIPZco4j!vZM-4>y00&h@nZwV~c^q4B|C7)?P_1FvEGi>xxc7V*m?L-VE zPbN^*opqFkr-@y>&+_zTHw6@!;em}L<^j&`ia{`8%bDYQ6x%{qwEu8a7w@=G(3+OQ zpAB45wys?X%nj`NzuO<4aN|Dg<_P-rF1IOi_%pLw%?|J5Z|_b{OfpZ>V1^!L`^$kX z9%x1wz~P-E9exflOq$x-y`cHr2e@$uFU`Se1~hILAU_-abx?Ulxw-8*^SP>(1v5Ap z$Sr-}ut1+FV7XwB@y9@65Rfo$TLdZn`(@#OhI8>Xczuy)hqfPvl&ZKL*G&_{Zmc@4 zTEXy$Y#2#&;aDys+PYI9lB)6$%ol1wOT4o2Tnz-? za1zXDud+aL2Te;qL*9Mkv0%aLi!b=qgoqtR6wvtREr0vZWUPR|{w&|9An7DxeqVZcWXuhakn(zNxs0NnSYPO*ac;G>S>fOMa3I}z267akOW;rkmUhF`( zxZ5L#fFa<(Z#~qV;x!IkEUU4tP0)_V6>S7J17*m14RZbF1|ZyI|Cz9 z=qMT_sE&c@D6n1^-8KZ=3xF8U}X))KFhvXL)8MdOz$95pG^-&i33y z&GJ>>AwT**Ex`F;^de)^?kRXY5C7)ccR;0b%{>fFS#^7?Dr(6^GOBwi=$7f`)-?l<&0k zn$fvy;v33IANfu%x}9<>8VGf8F^~ZLo^lWZ77;1}+_MEm=l|-l?0z-vq-|R8H2}&t zz%l_}AwBS^WnJ;05Y+-nm^#=Ifw>(NU=eiCY+qn1i~~GI&`!v$s0cledTV1->Nw^6 zItQg!w!qRVig6I2N&GeOm<1M zG-8&(C~J8^U*?c4eIeC%i7{hqs%B<1h#%evx}EceBJO4;d!mnnyWjSqL%pVkMo<-N z&jT6J*)oJkLpu#*=Kf0%o#53yrY}X|_PiWGEiFsW^h^1oO@(-8^=JDlZlugOyA(&( zQgvjS%gzJ|O5T3qoaX`;MwOg&)aUtjhj`uiP`e1E^7_3pS72xa8r4zoNw*+Qg2CI^ zdWVXblA79$jotFjko*hE^MP3WIQ6%_Dd07s?`T|&mCl5L`lZ>b-`pJ(vB|ut2rU3O?N-#GiKU+O zLw&E~!#Z??ObjJ;b~GGB_#HPb`R$Ir8%Hj_kjP|WePsTCe(|xKt*A5?n2OPq*Ta9a z)T-^e6#j@P-(qsguxlR2H~aSXn{LPOPZIp^9Dj!Q;jT|s6eHvdTaDe&;SjW$5zbv1Wmz7;is}La~B7({Z2(wjmbW#K)*oMwgp1`H9 zMf_cu8I(DD;;#vC9AIKVLXrm5dvT^*G1iOo{D5nLF!l2l#t=^f^y)U8?gk%~i)s~r z%-9%a<{2B%jU%xj)IT^nnA@6%%7r5T0NnqH89wP=Czk`0HOd4gx)FH&E+U$-AiwArG3+`;Enab0$yKw2UOKFLh zmre5qC8Z!Td1t<6U#P8S%!sIIe$92LRz^TG)f7?soA-@JUz_fPmX=X;nKk!!mm=$x zJ}d}HSMBz(W^|01P}vi=>S-aASA1;f{bEC5TEt$KU{|yFt+{mldsIA(nbV!H!i>E* z&rr-#{HuBg5ldG0zss6tW_kLBH{&Xp(pVuC-oL5qKgwfggnoP%XKqGfiayDnP89u! zvt`!%T>_g=Ad%i8oxij^rwl1gKJFEV7hC6Oph9+xP(Y0g>+J95W(mWaHS;QYZEa3k z%j27U$Z_jV;%HXHqq6OkBlYofWz^(UW+#J6p|wx`n-;adnkp(3Tm5QKq{aCY;isQJ ztVyFL{fwf+McR&Cc6ml&JWTSCN?E)!gMzB+lpa?0R42Z6X}D^C5%icqaJ5w$Hjwr> z=5y+|z48>iXLlQO6WCUp%2Uv|p~QWDI(8!1VwQJ1X`8K6?WEnerD|saQdypUlOno|C2C8zW~*;ia!$LWtDd48iwvXt zb#&B`oV34_!-3O7p|$yv`^_(e&sMS3<&WB5$^oiE_e;4cSH#$E9>_2Rv2Gx2BuFN^ z903>H>P-aw-!KgEsuZbd-`IHky$*e>a>Rrd(f&7Cn91qI8c5J@Rt%P zy>YrncI0MC0$maFuCLaaRmJBKA(&1j(uLN!EVKo`CoM5#U#HRq2I0r`d?)hAT>c?K z8rvr%)t8>~tuS)C{Na-ZiPDrTmre6Q@WywG)cgTR*zq*KbxI_4f33VKd=8-&I|5-= zB14(DEjk9KjSc7NQQQ%aP?Ju?&BiaZ+Tk;Stdtrn%UOcyRJH6`ON)^L?&4$CS2>-Rw> zQPwUEer&ySq2D5$hnSxkHK2LSXM`)J(X(tfw=bUEy{z;NNI7b*SDund*^VCgdcXXr zo0uO>DD9nCrgtON@#)Q9f6CMAgL;gvDEY%&EY@c99Bvj1L<&(L`sw+@n+DJ!`VVzaRgooX?uOl6+Mnuyl2-z-O6 zlpX$S_u(YkD)rgze{855iZ2w|`XSfJk3uH+MjM5FTIPe66e1TbQ39LM3<`2D9Ej+R zR3dWKq|S3jnR@$uRX-*5$z~6$slHbXRmp>ph1a2F*>Bd3LYqgOk8bpGvnt5a>y1vZ zB?H(NQ6IK9ipmG!HYfGHkL7J0Z%$e{DbL>METcKbd^NqfC0*i&#leWob%!CD!tgQ4 zD+x9&u}Qu4mnVTu)?*lw!yBWRBxEuZyl=ERj8@J{{N4D~5(qeYN6_uJ?oY5#xp%N- zbLt}=x!7>lm2l|ZuQ9OE$NK`4i}RLBU0T4@h-KEW(=>LCeuG+y$Te-T8`dyC*Z08R z<5rvs@nSD(I%^F?U#zgMA0LKI9Q82@{poQ|W_Kt*YBWQY>0*9mDVrHR|0=1MSfqJr z{}YU5Fl^|@o}Kz7hr%^C-3y?T@}`PpW(j+#)2yq$#~j6|#n~-0)vPUO zq@zxoC|~bAD&}F3Zbe&yhQ!ZLI4}J6$BKTa0K!tVR{+}}Zc?9yzWGj-q1G84iYl?JMCd=t*H&5f!}$UMjuf4R#{OUSr=zS_K+mPvRes z)|vx);!OU2;M7s#G>&nanA!d?UHmGBEcN$99?7L)LrK}E2roh(PHYR?ceGX`wZH7I zhLMC8#T>RjqByB|uqHrCz22l8vPEE~v*eZ3-r5)KFzcj6>87wLYkKT75Th$b(Rfh4 zI@Ix9?xo%M>RBVwPzKXP&+aa2P9*)qfZdf~B98I~O(4 zYKZz?odS2K)S3gwx{FQi(X01>ikB=+*4+fQumrA*IG8x zn{{LU$3WOk71=Nbnf0&%IyDtEV?9LaZaG1@Nsqf6_VCya}%g zec%aQVTqufPE!{Y=bO?#!Pn2W|xVgCsmuUAO z{^K`YOp#Y#_9L7fUFm0mGbVWXm$C>$;T9qjNSYk-neKa_te$6SrHD&Wp~B~{9IVC%dH7QS{g`hpKK*{J5m`;%+t;N<`|ZsDo&LrTb!tOr zE4oQyF~phrj@e8_MxFi8(hqbc?*vFNFZXy3O6+n+hn1p#+S)G3rEE7!E>ig1tj)W2 zWR)}@^BuI!X(w5%9riibSm#v+Z`1Otu&3xXT@3K5sI5e`pP;~P;3_o;IT;urC(`>^ zhXhHYXwPV9uQZRc553mF$7eWT&-#{ffXzms5)ZfX#>7_aD=qpJnijA2d1ZL9biJ7N zbOzqaesKC?g&`W;dyh3A7!^$!ySEtDj${dB!o^YF&|YuPXz(e1I}==rU})qB?yS~x zb-Ff6(RLX2ZWFjRCM$CddrfoV+pNjLVr{xV4^giWrmLma*HQn%F@p?^=-i$K7 zv>~SiqQ7e5FVHvpd?x$fz|Mrlztpvp%IC>~^-l^QL!yi6x^C&Nu`@;B&<|^I=>l>@2+(6LW@il8ei!0TVBrM1}0>Wk#y^@k-Z26Ko zDtL{Eaa~g^vA`Ow9(ChKPzJ}xp7{jy2-i->@gF5L)P19`+SFCPxJ66KT#Eza1Fk?} zN(mm?zfN^o@3^v-`7?`U%{#|kdE0bTdfa`iN;}ah6k8Cpy(-?E{Yr%=F5h$C-5tZ? zXC^)^Ym~i=;~PP)a;{R2Nkl)Rw+#~!Ra59Kn>K0Ww82A0+IV86UibL1EUW(W>jeUR z;=xbRpT6-*w|{&#LieyGSSoRHNoMH&IpLbXShByglawt$PUqT)!bezw9g^2cgPhVxsb-s^I~ZAFZqpcr8&Vl3@9betj8 zkLt6P?swNBO*OT)xjBnISHxDXv;Ln!#GXqCF@ z`CV32f$U0hvi;iw+yD=knm4m1(vWpPlf0d&KzGQgYYkDSR_I8rc2xUsq@vWBonhH@ zC01JM-5Fjf!U&`Hydi$6EEMJ79+|r9u*3)G47zcj;Gi2>QyG{k?;jGQ~uKk+OZKWQkYRHB#9@ zIgNcpstIkFkoP_|Feq>TWQ7#}$**c+y_Mvpo&4vjk0Y|aL$yGZL8dpa7Z*%0qm`R} z(4((oNcz=G7`7I(P}+u1jGPERBL&5iE&&B%?J263()>wc6W;o4*^RdjHd|t^*DI_r zI>~BpptjDWp1LqaV3iP3nM=%ge94V5qJil4x(#a+ABD+p;&Cp-PFSiyfrJ-)sPv`j zG?TH%CoS6@Xm+Ut;S^5NbM=ENZcVF9%e2><18+_!rA$2wJs9KvpaZfIv zziB=>Qk?doCC2DOczkd8+msr+tG=_|;$XtNLmOhq%{U-C+~n~V!H7V~<15Zk>x;&@ zEKhYp#PJtMe0IIz(O*tV_sSX)RSMhE zUW<_OPzI<%4?7Tn{9yAiF!2qCWROZGQXy05`&g-V8A^Ef>VfvyOd3_dD=@?ZHGekl z^9}uwydZhc?%`jlT1dl0>pwdj3^y8-aJ>!J5J{m$iWtR2@>F{i?AX4-L*iRsS}Qiv zSZ~&vFj_Cx?@?8F7z6|;Hudv`6;Zr+Oy~-8&G0X!gu(NnBgJ|4K%Y?2y!pyShK@cJ z+Z6F4uDmg@CgY>tE7?;|otb$oDJMB;_;B`!K$%~57@yArtpge1C}+fUJ?R_k@1mGomG^5$Hu~`iSS|H_m ziQ9$jO%gXXW#h*z-sS%oG6&i6i#LhA^ok*yp=glGCSAz_PcYe4`!U4VsmlPpiYxV(`|Wi1bmB zrA=sb)zf{{v>fE2bsAd>Ad8&emk6BMIy3QmejdDeR$EV1*Rk-5ers-nYE^OHBu##I zqTKp?;H3XtardC9_L!YyiAgE?&7^=nwg=^nOf%fa1m@79izc8g20cEB!WQF)*PHJX zK+#KoTDSfjXX%EPNN^@X|4D2upnd6%<4lZ02&b&s9C4nD0uPzV=*=7?U`5uUB${Rj zx0Vej0q$GMCmdV1D%FhK(c&Dj&-t*07%9pJ4UAVXf4!Ii`4hW|4#lzE1%+%f^P?jH4k2sj$N7ld#36!E8a+^3|xOKScNs zb7xs`krEyWI%^-l5}2IUW^_GCE}t|RByC@-*4pKm?-xojv(Sj>9P^Ja&;RioJsP7g zL&K4EpWN&5fzSDYa%NkNfoC8v&W9+AMWc+qO!t=`C4nKqp7`)LF;+ODSN&G^3j&qK!90)x(){_hM7gwp-7RZ?#c4%JSP zGf+dDZx70<<{{hKZ4a9UtKJu4Acs&B7@1n9la6^Aa2Uu6gUdft^m7$qF@#x$@`dLy z)2w=0i=n41OBdM+?{je1nner4%R*&DW0TFE`@ONBef|G@YvU9U> zM6;sT^A=8oGh+7yk3L&RxC~Rg3#rMfvYOxL?;=1)|07B+0Y>JT z4B|g@m`YbG%}4c<$_G;C5?;%`(cvQBtPoiJGuTgARM$#pucs{emcae*KT5p$rbC}n zo6=?rr0yPG-YWh+27UenN+cR?vl64}j^5dh`K+NS={#!w3jYmyz z;a|GR>W2$Pc~>8`H&~D>(uPq;VRn*p6syH_u(%SFwNs#0{^b?S6GAYk|uUiPv0 zuMC!(!T;myE#rbp+izh&Is}wfI+bpu8<7@KY3W83=@z5~0cmLm5mCB3B&4MU=|;Mx z-fPeE{Lg#NhjZpP^Mw)j-gjKNuC)x5&}3LIezvUaXR(Ek?e|bOW|GizxCs;a0#2r# zC3Fzz;l%98Uts*HNk!$=`JAD7%;1Z zg;$eAo$$V**HiqUSK9J{L(+XkEyeqW2>}E3TkoB}WHdgO*CZ!yF!jX7xM)=}JZt;T zT^!})NT5zf6skh{YDLjr%MUSH-QW9_OSbCv)qUfISV$#^=!Zwc$ig0a=la923TTG? zuWJ>FT&tM4xYjo1J0zqTmTjFf@8ijxzLmWLCW<{dUFLk#8#oTF|CivlS!& z?)OUuEZ1?KHED63UR`3~T&d$ec-M*nu*b-oCNi zQCL{`-wc2^_{Yd`W%As3cZG1+rF*`n3X$uBHZ^AP|q4KqoChkwA1(fwq%TQ;!H<% zoX0`^`Q5&Ar>LCM33KZ1#qli0ypq>U%IU37K|vj8Z(&phh>7pHZG9jgs9kB+X^`iJ z1{uc0@MG5ijE<5cezQIbN8P%2*Oab1H)Kz#kdtUL%U&ku80@8X=QR$@5ld)~r8Bnv8Z`*?o z5h=l*0C$Y+iDPy5?!Ea(${j^+sMxUkgu<#Sw$uV?;5n~2-{I;)#rs%<(J4^*SnHj! z;**dT=)~XiWeBXBLfig8Mn<-`n!lv_fV%rEV|&)!i1;Z?MSsZtCUJilvkdzwA7D;P z@cLksU8yp+Y%*FfMGdjJ$>1m-L$|q6&vV}) zQ}-lAFAP)m11H-en7CsO>zn^|m0-Cabn&U(REsv%!xh5S`X{12mnxW$R{iMn&`FK# zD_3;!)Ok?bCgXUD=sH%NZPijriigE8hQ!4}%&`9*IxC~2mZOC;O=Vr$6oOS!3mr_( zlRx8!1u6pX?Ei@9=VK6jOHkO*`?{LHs-d40pC-MBecPAm=io;a;r`TqGeQZ~&K0GI zAAcswQ^m-*O#liFY!Svk`#poSKJg3Qh_Grxg}6g16ue!+J>-$Z;qMG9X^bmK*A$vMMTQsX=0 ztG{FT6q4^xBOIBJU(u|nFYkVuF>FaYp6Nc&U*?x&j-Lw*F7jAl(fB97puiktiI*I-~!qYtQSlfQVKf)i=7?+0oovd7i7+rib zIbT%%Gkz#>=>!>Q5Vq2g+rY|?4eKw20T|`+Ivj>|LCT*ODAUBl-xn|3S5YwoU=U3f zyQqH8?_&-#Ra;!Y^C41v+V~!;jOQ!g$%Tsk^!@Wp4yG|Gr#;#EEqgx}motC!Re2nL za?)JJLqMQ|v;S*jGATtUZlkapWhsTDP(cguQ=Z=sv|T(q zs&KF_6@>7wo1PE}75D`JtuC;~t*xygfCwd8pZ9CriWdko}sA9W+Kir!f_wH|6rnL%a>Zw zAgeFU_Ek4osk*|Aw&Cj1OLb@wrvJ}-XU+)<>yM~l3e7sD9l}bG-6ID@ix*>h*))(R zT=MMzc7L~3iFk8o;klz+qIn+~35)H2Le@*P9qnqo@J(zyH_hU(hcCbR16lNodH3u0 zCQeDn<6(AfS+Gh~MFnQ}X%!PJRJB=e;Ow>pyKq!52sJg8;N#*&bcx0Hs`N{M-77uS z&Iq_I>59uZ-mI@L%wxHys@Iy`L2Ubu-%5p2)UwX$Yw4q0)uh!CbDztuPm#Cy6G|1n z1K9VWmR2*sxT-+>`gH3o?W0=ikFlA}oyc1Z;XQE4l=bxV478t)jc0@IBFvo(0*(N< zzhUlpp&5(T98^E#bF>nsU$E*6*?)wQ$1hk$9eu55GJFACIShktCZ+XdmjAcvE0!ov`)~o-I|j8lvo@tYN{6~*$&abKO&vCdx_mQxO5aOg?(660>z!KK^(VaLr!?}9m( zIrLFCF7LDBv+@5he!ou@TH@j&gzn zh#gNS-ovC-bgRY-CxvFICwT~jEZ^um>NO>-jP1>dJ^$&|#B)7214VoJZQ>}u&-7O| z|E~(-3lYOMrKdYX8a$lw7H(WiF(ZVp3Hqh>Ij(k&ueisKwpy!REKmsAk^mRe$B!S2 z+^!@QqaG|De+$Birq`=RaPWhcKU{@E7#D^T+ebl zWGV|}Xqq;4Cz=g zkNGaFDx2wf5j?j$*?cd43P_$Fs65iKSV_!qI%`Q~D}0{A&+!4BHJY;h%eK!073t-X z-i_+BiqrHrwf6@FPSzv1;bX1?79CJ2KMReefSRb-;g;GE8#lKVfF~Ch7u%9e4_*bS z{wENdP##^CQKpc=5hOa|n0oS6PeJ5%d)e3j6|&EN%J14U_YIK_tWWP+SmCV+izG+h z^cW|my_N3!er?}T0ZrDBbNqq-&+xn7XnBJT&yLVAoh|$3VSu{jk>JtxbZf6LXXcJ7 zDtt#pg%BW6L7yP2xH@ccFz3W_#Vy^Z)|N{A@?-&w0IJ~_HWED`;oN zvH4rv+}h(8x1q4GumJ7@gyKZ<><>RjcS{L}xh}|tBjRCBJF_wn%pt1Zpre67N3z90 zV*PA=@rC%&fahSr6Wf(OFGut5*N)pq1>+tt%W(a+2%rn==Dq32D zekxrxRuj}P?8T+kHIm3ATC<*<;F^=yEo(W+&Rw)x;kDytGcDdD>5}q(xNC74$1HBF z(*BwG&u5|xH7i_Ie~wb0Ue4YOdNqF8tglMLANk`KrpcFWfiYj(-Z-Ec!ZjT0`tidQ z0$rE|_T0~e0UHq71?63W(BX-o@OWu7zk4TeXa?-g7~L@6iC)NGqu+CW=`kAs!&Z0x zr>N45RKg}=`4Neg*Zfv%>-axMf4u=v!I1@si6ix=@rt(=ltHqn>Bd+1?2ox}O25Rv zy(J7%aOSpLkA7+ye`n`*SR8A-U}SxXCquBmoIrk(s8VRE(XPy6asIWuz{mGm4qzmU z%Q1M8Vua$!GmN9j;=3O7KN}xll62qp0sMCnM?_zrIw(8jefv5$I{Dn})QA0^v6ean zMdY^mAYFnFVc9O4)mY!;*WO>C#t8UzQ;@v}ecSB(y8!+*AI{Sf|GUFTq4lP{UD1=U zI^FD3DevnWy`&=`u@VuIVI=3H#4hA?h#>;l#m_+ZcH1KI=A)DPD|9*Kf;fKN3(_ny|{S zfT@G~u|YH2EA6NIPblRVyHSY9UgMs!5F2J5u8(4rbtO z(W*q=9L4={5u?uVUcGFuS}qNg61EQ?zl>UP``tUfsCBUIM!nD;X#vDJ2zwAD;3#{08ZaTmfq9*}r725} zB0)S>;_Rs8@E^{p7iSFF#9^9jZPy6Jn^ud>MBe+7=#E`#13S{gey9QQTR*!298nfO z-r5&_HpT|)$5l}TX#oVde zI|>=slB)bI5;$TvO3aI@zl6jhuIEgb!&WE|#?V_#u?f{z4e}28!@MAX*k?pybwEQ7 zVF(894M>)IQiY>KXnjwl{(J`8hI9TB3A|IS`cQu>t{>zCGl%z+I05ev>wjZ!C>P(m zpYRr~v&;=!E|f7OI>u)mz{$+WNa2yIiE?^O%-lrUWChOC51e=CBo>ICWwL2eQKfW> zr>KuMOFUcqz**Qz{K_iM z*7HkbT`Wj}dg8W(=XD| zdpvnU4$$0YA98hovf^~k_L6&L~6D6wMxdHkcF{GrZtRG~KGjZJAG zy{;d9i}LD1IxgkpcXWkN8?HPHC-d>`-?b9|B&1%JAAPa+@@4%d+R25l{p{4~!y{_Z z&b1aafF7G%JN5V^(TYDNZhl6dF*G%OWc&~~+}l_+7GM4u=T*0)&HgCRZzqY*r}5P% z6oNfD7mHgUVq<<=tmpJ6ZcM`JsLjOP5mJjk;~DCXgC0fZdwhgilVq6_w508K5_$-) zq`aO}87jmd`Rq%6nJM2|p=qewXsF$GoOG4P2;g}@A%~4BOV@+j$%cDZ4x9f+=6ERo z>j#s+!e578dmH+L$qbV(juMUOormbY=E|^BzVCL(1D!tQ>?3}*S8f-hqU9gEj7r*+i5{ox?Y%C>m62GHGQ^8-!-yJOESV6%7T#GhMfQ*l{oMts zY!*>PCbz6PD!SI;J`Oe!zKpaY`kx0V(cJ|34TL%AAQU%1Rx(bRlKaL&_I=E2PS3Zi zRAdT=*>en;*lgCzA2>c;tD7d8y(Vs*ZKNLkdn`ex$R*~P&Y)d8QCjf*ktWq{N9TLH zIKBf-+eex{Ik-)?KM-{OoLTI8C?_*TQ){DSed3Sukf;rXg28Sgwmfs)fvL+g1Lrf{ z1FHP|dE0zc1$p!!qR?+Fn%8RRo*$ZLVeViuP08f=k{TvOnAUoZ?0VK?zaFruIeNx( zlCx=UV)DYyiC+QeopB9EISohNxh1THtWt;o(K3_FW}+zFcMK z-f$$<<$eKPbkt|>!Dby7)iSBz`|NpX8~I{TlfvFnedNRkL>O3<1m~%BXOxpi!ERC}vQdM8VL07Ry|Z>ilauEiozgrT-@# zHyiZtM0#I3aL=m@$}?ZHY^Y`5rALn*^Uh^|sDFcqu{(=R1-*?fJmyBjA*rndR#`DdSTeQZ+3&3{GlcWX$wM2^-HBV`$8|Qu%z=xs5R*bW{Gi zf9|vWa5jIk13DPSdZedagC%`rc6)HOzy0*hkS;~$M087C+MG{wOUwM|A{_rk1r6eZ z6YQ$`suYL!WMsvTBeow$ckop1>pp$@bSmXMBZ7k*)ICC42i46l2HqMw9RHokD&52< zwvtyZ^SSPFbaiyjE&l1UQ1U0fM#ipCfj_Z@!^MEB)v5o2Mp+x^hkSVJeCCd&G&hJ}gAZexqu zvAKk#o22ijTV1TPf5YYGf%ZVzsBtT>r`dH#`yJ42_7ok-jWnq>6}oh3y@MOBAI@(JIi zM4O)#X&1&Xb-~Y0?l|Ul)<8>oHTHb?#%mf{cx^Aao8QUtp4KzG$?Sig`>I?%0p@aZD zNdNog+5g8A^uRk9ru%vm=gm46GkRVa^mJKl{?I}9x$G3!+Qgea9YYqItdZz{d(Ku@ zir}UR34Lho_ozRF?=sR_^A|~x-@p(2zx>9X5|GJU<$Jm6^g)eNBvlU^Lmv5(YVnDb zxPKQZ!VHeCKKY>~c@uJue=9y0g?(gZWgW86Y(#b6R3FZi*H)uu#&}bpUrtpxgh4;@ z-`!w?7ppqd)Hi-G?xo_Sd%iIEnO62JU@Y3fY`65qP%FmS@%r1+&lqa&i${bXdKdeT zus__Xl}KRy_sWp9!(SsDuTFp}_v}sMFC5MJjYtu0}X>$)#k~8iSpwY<4wK zaqV|?8Alqp=r<2eIsbDa@Q{y9g+Iq}saz~SI)f!_XwKDnub=E(iJI}o1W>v|oYz=(tTNV(!a_lgtw>mBdH z;+(L4zoF|#JM}82oXdhVs@>B2I{EAF*6$w-ViP$OuA~3IUdr%*=};3gBLhiU-FD(+(cT8R4S4zq3YVL63l_=x7@sL2NWXlF+)5am% z?5=yyzMZ3^(AD;FSSEMPt?L~;6@)X~{=h(0>EIW6~(%`j?a#cF?4i#uWtF&m3m3L8{=%> z$~>ktOWm1yW4sR}8ULJMyLp0Fi;pfrhsI88qx)p%Mw z%$KMW++7e;&;rGU&}<5N8vNp=m(|#BWS4oLPgR**vYdNc=n4^J94%>+eCL<}j>uj< zDnFP3U)YroWypz=%X(MsV6|fMzE}eE;CYW7hULy)!j4>D8EBZ=l!9%MA(FoK)sX*g zxO^44%40N&bPluqci9n~;N?$TYkv#uMeb3e(bW}Fw5MpTWV2=G+qON2UO3~AN5;li zfrsP`X}hUF!AH+AIrgH8M<8;H_J#i_&e%D}MCc7n^0mP4!04 z+p1kyf=Ly4zZ<%Xg*;~sX8;kJA-id!qD>oP--VO8?CO91`TnO>DD~^m#u%H~Nv5pT z83sdJaQ9O7w{Lw@lIKRK)C3-ItQm6nUr-ozyrz>M4ja54P9=NogApOUn!>e@nW1E4 zsAMt!q>iFqmmYm2`>HM%Lxzq5KbYWY*~puYg*7^9JD_wHO{4DPKbM?r*uEQngFg1H zvz=d0->Ekog<+rT1g5rNogy5qjK^wDRMXgfPm^<38%w$7pH;dAT&&%%#<<% z<$x3Mt+ zenf9z9S8Q65TG*H>tf9Sn$3(|s8|5WP(PFb#_PR=U2E$Dc}X14gBY>VVwsW&C!g_H zQ;By(QRe{JC+MNVOzm}PM@KHN<1LG;%L@p{;$T!g5oTzWC_IB@h#e287+dEQ1Lhp~ z@lj=n+z$qoK!?6c_tTsO*?(k?VI&)*&9Tco9<#pMI{{H?%y_Z{1u?-RK8z+(51y74#ucUkR9e7eUlA<>sJfm>9R)zmWo6;`!}KN8uMDSsSJWh@ z&rr87PaUpb9`d6%hsAWZ-9#YP4Wtznd<7mD!T}_%trn+jUMOGw zZ&ZDLgMl4pX#qfnuyG)$i9+8)cF%*==AF4#kHr`zkR5&o?2>h-%c*Iec!@ca}rA$WQGxv5@=aj>@9XhQl@p*RpS9s zsT>hHqF9cJzp6BU!n*V1Z8FgGFjzUso| z&+!>CdH{69OiL$vYA%N|F6Hg*3)TYg2vZ3P`rrp~t}pEp`S%hRCN_3M!5y8ZR%CxYf>88TK`dH>pU=sE%SGOV(_(5(RJrh_OL zxZqbE*f{(-J{~&uB}4(t`;_CcMtFhPR#hNZ1UZMilLxk^HzeC6%S)v%JxXXaZ2ub- zCm73`Lj+W3#0{Lbh${Mvd3iu>1qij;AU&G1Kc%_61HK=p>4>nCremE5AB)5?@j5T7 zPWzrYqR6B=QIOYK z1R@O_lPHK`(Jw4^TJX4wo;8dAiDHrOiXK~OTdF|4J28=bzU9`~G3OM3>FV`S z$pI?b2(yp$Qo?W?*9TZ)nRcOR%L6@XAouO^N4+N66NWpJ zNZ%uNlSb+hnVbmHGlWYv?YY5;qP^q7;-00}S$1rMjuxQ4vKDmf^V}vG7g=jJHH{FN zuf<|+Gm~uEi_`Oam?L(;F@xQ zeRG*Eqm1vz~fOZf>b$!XA0L{WuS@26QipI)VFEM+YHr1*nN$ zNOf-Q%*9RRIF^To#!8wuUU(g@7QQR+R}2zXA!9~xYXH>Q#X^_$rzZKADyE zT1QSX$0|4+3+_9u3l#%_3c|!N}z1^@wtHW3jFee z7Ncb$yW_X-OQO0(qygvk!vxOgNap|6A~-v^=}TH@JHZ3s-xhfX$ijUw8KNXnm%HG= zU<;it{<DtP-=GWw@RA1>7R*2$ z1zZ;j6d|BYvm|x3F9ikPw?tfUNamrn09=JYn_-?F4K4~g#(@9qOP5elR>ncNqJbkn zY^R-qu^Rvo#LnFyau4)he12Z=`f&R`fBBMwuxtXq#OOD}ZeZBI_iB|0uu~|2z6c{_ zf2^skEeALnXrKXycB+M=?a$UTe8zJ?+yLbjZsFK1-d{7r!)?IFdS1A22u*v*cr&5B7In_@Q}8g!XwaQlJam{0bR zXqq~p2M}Q<09FuBQaIR_P9T&p2z{EE*sa8Fg-XZYJw@s|I;TL|)LQ}l_~?ns=d{pj ze+KmA#2x#d^_DY*(76Zc7f^r#?ZBQHN|Q|Za_G(jiU+~OPOL}^vo-!*XTNdd2GSq{ zc5S&8v zzDe-+nGEb5ps5g|S_s+pliC}Ylo-@ukh-XfSB7B6FWPe zKSJFOnhxO5J9~PV0K3Hg7`7iM}HM@TbS(YVrhNuf}lr&@$?^tA_~A+wqb!y#S8(fJI9Z`X2%{Hd&&=-!|Xk znE(GeC`4@CJ4x8DrGaV=HgO3e1WS>K{Cq^;sI9Gy2RQmL38>`3)PXNqwzg&?nTLBe zSKL991EK}uJ5ARRA~q26Q8b_9=fS5kdn8VRyW7LxU-WA2;Wxut%XAHBLZ{@$#Kg!z zssj=<1PH-Av;wAFCmj%_hTOULfGh)vC(!pXg`XdQYl9<=a+jT*Qox!B0i6Km5qu7? zZV>{Y&yuPPuwhfq{SuZFAn}6Gp@QrXf7$7O;Ux_A*d+?Q7_L{=bIwB@jZudknn#KV){)i?M)^HF~BghNI%o`)Z z!b|`#15sKWAh;nh>vb(JuiEhlv`%R#L=q+v-A(N(ax$ZjUdJ>LpVFWFGukk+EP+JI zAaIpBv2vY8yc5DvWFZg&F)$zi?MhOXK$n>XYB$rtYz1Ts@F{rwAv6V&ysmfjay`}F z&+B$EK@iM)_dEIhSQ27KteU~wTxBR=EV~h4(P~ymC@eNC5g_qe?Q3&$SuhD{de%q2 zAP6T$#Yj3RLu25Pfii?LxEBNudbRI&sR6-fN0|)*cw*(}kAsNnH;EZsh&teL$ETJ2 z02x%`*6&(=sGc8f&k(LozXwh%KG#1_)4lhUVP_}+7y_rrpw2x;lg&IlX6IcY#4QLL z7^2dF$Z!2!`*eq$y>;V|&+pP3xmd6v2oW=aJ_2G+$aZnHNDy}K@8P8Qlzc(Nj35T4 ztpO%P5xV-oii-^m=d86DOyp6(4v8@f8U_fRAgs^5KX9g@buGNY z(g1W_k++1Skjt2t$5!F^n~InFzK%}A>GCa8Gqck~zf*Dm$M+3sNU6bNX#LK4L1fbm zfrqoO@VW0iga7I1Nhp^^1kt7$z)m8m1jFI9A_nE>&=7bq3&4k+A5}IogB}+6<7AV- z_Sx`kHn`q=z#0z0k=dv-m^4BKLZ%B@OjKRdOEYL0xDuc?HZ7H?;NKERqAqMuJU-j9 zQk`OZTxjr}+HI=Y?_$i4*KAbva&M64ZoVVY&6{S|BlGeffIEcHZ61z||CSC?=!R4Y zc_W!X%-tXCg-O%B0MiEkI<(bm=m6V8V6))yN?kS{0~cinI7Vev)y0ZQN3*$>HwHDY z!XW(_0LC*G)gF#ZJ173ZcE@R}w7 zZANY-5Wc}O(*i>_@4f+GS64^B-U7xmbGX#V*|n^FWA)~O`GhydqH+>!Cq!CBZresk z*aZ2!yo-w9!T8 z7%0r|eM%(4CjYlpKvsFX@s(?Hb~Xcu$|!qyRNtE~V8eyW(bnD`8xs@o+woIb*?Txh zMWChuAv4$()eOlrhsg^1aFBQ5^xkR4>iHm;y2m~?VBLM6^dVDEd4hlhdm04^;#3e%|{8 zk{7&E!PWa@nW*J11XGtGV!9_M3_rNyfiSDe`;-q@8RssJXF5iI%A3eY zLM5*9(eFI@9k0{<+FB2&8TE>GgIk0w6m-yFX_R1hypI0RQ{d0Ptab-zMfJte?#dI4yU4^HpOTj6Q*mY^`tyRRM@ zd2I@^L}sXtycK<<#_%y5gvAC+tw=s;q>T}LFA%uV5pA-c`_ zvr#^7?~_bgCn{Iu(2NKn#NqW`KU{|hR~X9t_zCTyWSQO1G$o= z;tukMnvX&;KS=mRNnZTjn^W?F`U@b@h;H3N^4lW8O1g*}EB)yUgpG}9xxtEcj)b7w zm<$F7&h4Kn;=fhAIZ?_Ag&Gk5 z`q6#30rC;>%_c|2jAlzn1+mBkvUrr}j@ClI3p-%j?*XoBkOxI-8xUSid#q49`y+r$ zX7F&pIt8r9Z6GMsdwL%twB@EydKQ$v45{aR(R`ThLK3wxwOdtj+`vZJIHvS{#12`z z4jQk>Toyw%A2@XeUkaqJ*{<7$(ekIrg*3LXo>cqRzitl9IbF?(R@G4T!iwlvF#Yjf z85kA2EfxEqZ;Ws&pP+MxQ<<)pQQALk#L?Ot8h+ZH=2sP{WYw2jlO3E%l=-$mzb09Xguzy+w_YJ6Lm0r|>G?WqIJ)k_%4)dps zEsvnm_Q0G{_wJW3Unc52_z9)XdHhbhji1(g3IZx`iQDfKFOx8QWNhqO(gdd8x(ifX z2boPy?h}#9Cz3Y~skydeJdAxJZ}}!GZS*fOVIs5<-hAh7?dL4{)qf44uw!9q$EW5U z)lP;v6|m7f^&%;`#ULH>_?tmkujK;xF2wo3eAGkWBQ-Rnw(9=}aOQMei-|;NO!v_9 zGVf%DWnxH^YMrYOkR)(3D&_}~i_db)Tr~RX1;z;~}4*jk{ zt%15h4|c=ZUmj~*qfc+~Y^+XZ>)k+4k68{=s;%eVzRgP<0kQh2eQClY-@o@vvC+ON zo28DzzpD7B-NJMsx@`IE%{#)rCE4;t@`*S(J=r+8f zcKo!Zi;FJNSt2>M3_61c;7a9OMIobxj1S2gGec4cAX5hCsrmS^BIG*2-)L#O1t9x< zs02hIVj%E}^9u`z)|@I2#UfPqk-wx@C95;2&JjC|jYjyUQnblN?utwxwb-Tn&qc~d zWA_de^aY&+COpnY#*zeW7*O>YHxf8amP$zK(oyI!NOZ3Zo#O(V1B3U^ohK>8twpvQ zD_Qv{1M(hf|IQ4#7fwGgPsnVH5tFlk6Dk9NbZA)ETn^!6l;51eU9I0VAF~&4_)b4)_6L6^_+{O#QxqY? zgbZO0=GdYryu%_Q5Cstb^zj@hA3({rt zV%&y5Yk$tm<5_w8rm({TBsUZxqXf|T@*b*~k#E{ytKz(~yY$Z$S)ZC?vw5Yr^4RY0 zKGHcBMzqfO^llwrs_v!eoFCI(HU)p}&q2`Ia#=Cl^K_+H?Q5aLn<{6^hm#>RlW&Q1k23qm%xA$l!Z*Cgn7La?km@2?4DJXL5gy zV1Gb9Ugd`Hx19mG3(%j;zjHTDowf0__c`b_y!V&}B;LQxAQ+B;yaWkSArC}>OKUlj zuVa~Viqsy#J#d-!Swo%}k)vmduC-Iahv;m&aSbk-+G5f5jPuzP=eZMnMB~W#6Q75;|zh&Ih05M`2WSmCy4& zeo1#o4?6F8zF6qD zt$kB3jpB409SQ8l9HeE0*_owrQE)%{_ysil#?thwZ#Gyf71?HB#3cNu`Wuz*PKmD$ zA5Kni=~D7Y-RUnp`{}au&-|9!BY$#hx|FZzi$7W}XJ;lVXvulktuWqbkCG+D_}TB< zpV=T$_1Kg6Nh`rt!)D{^M2;8$VND>5dbK^B2I-=a=NdCoTY}PRRO_5I>7$x4YiI%h zg0)KUkD|f|8n%oW-CoxvVbVQ2Dz)BnD7yw06yR~_9WY^C_wM_2)@Z(){ZG{gRM)!V z)ELGaG0X(YN6xDQGK%;r*~QZ;(q*VLv9T=02Wu{#F1AGPQzyzSn7g{uvp!Eht$bjA z5n=Q67N)j~OZfyAf<_)Q_Io?C{RvccATb8ItN74rM@%u-KeNzd{8&*@A-7xxEr@>) zfMM;ZXokw0OxpJ-DU;s|l;chp63DT!akuNvc%5nWgV9dVa^>PmXQ(aK#|MLMt8t_X zr#`8uFJL8m$FmvpBb@5e=}ZEDRVwLD9Bs47F$1O!)w%<5BOY!EaTmp|sPj2fE9P}s zf(Mze8PHt@ja-u@36DP3RgnNVYLJkCsj%vuo)zAWSv+O$)59nD)c4R72uz&Eliv%( z^b>kxhKF}7&khSKg+;Ba>>pCyRpB1G2yi6cKfy=zmaH;-g4x26dWEG(I$L;3%7+muW>(Hsq-`6iOFBb)w3rM=Q}fDkrIDHYWHMsE2$a}bI@9jx?Ct&Mc}4&U zX#y%=IK%GFaEHgzKW^{jxPBBa@w{4f!rd#p5!<|S)2ZtD&cRQQk4(?yiJMn|KE^$; zs_H3>uQH4t)@~vP#*i%+@(+B6R5Y z_%_mNkswM7wB9?Y(4?D(Uj%(Y=QL49%HU#>c8#zCXsXnRe-Mdzr_`i177AAC@uQv} z@$84B8~?=wb?>RTmqZ@ANoV*=LdfpSNw(kyQa|S4h%DPh)rQ<*lt349Kai;g`Kz0d zclUjYVG8>j%)(_{IP^Uh(=l4|ZY0Y_I)`9pqX6-Hx~}fT62}XEwpFz5HJx{X{%BZI zr{T4}UfdO;VtSf#c(&uWQdVca2#;~a&)PdaJIO@#_B(LeXt=QV@nz&+=4fJ+bBIXA z%Eok>oi!nmeth8KWaP1CLB{Qgzeq>9qW+@8@5*m{{aYZ_vsXQIt_`P{nIX$CY%}j# zixeNA@T8i|$873|_)E8`7g!)eYhic9ZODbm%=(~HL&1WwHCUv8+*>l=D`UmP$Aay3$We~swxc>anNuYBU9u ze7|h6FC2R*Q}Cy)RMrJg>T75zV?qd>U9c!hKQy<(cyH+i8Q0UOe3U$r#6`YWtIwR% zKhj|%xy#jGjDi(e5OYEG~Ju+F|H^8HN}`=sDwO%_IoaXYuHb08K;rwaFM zvzHe{MFH=K7-o;OJx*~K6yLIlalYM)m8GfMc8v1dC+%C-<04<-HQ$koq?96V#8u-8 zsI57Cwppsr*6`|$9qHH|F3v2!8Q(wd3xWeAce_KZmGtB@D<5N*2r z6>7c5*`}fY14~OG9Goy!)szP|U8DoE(cE-Lo}> zmxJK8tG{1(j2V|a7P4nLX6Ao}ULCQjf0%`?w7vfM6K#5?bq4lXtG#jbbT3yt-wb(6 zOVr{VmYp9PwV%I~E*vW_8g-h?ukxO+9X^pEzPH~yhQChR3o#u!fnJKCxs~C^bw!Ea zwF)sAPgIQ@iRD7tN^BM$8>ss!O@7~b)l? zb>ha?3Cz^gROJT`_{Nl>9gCPGxVNU2lStDN!Y6aE@&4&PB^nu$2KAn#1Ff{&231X& zGJ%LI?X4DZtxba}2!O@zaB>Qc1wk9HA6yX`^iKHs390Oi(;&kG)r^@HZYX8EJ%*|B|k zK6Cl#@o+#stJ~+VjXgsuLG zs|YCF-2wvA-AH$Li*$FFf`D{)cY`d_B_LfQ-6bsDo!{YC-~4A39Y)sO^PF?;xZ>{q zx!t*cJ8`GR#WR8?p!CKoGv{>xBo>p8?8&lWv9Fl?ef-|Kubl7&qwEf~&P`~y@6&GaU%ski zup4}Dy@M-|z_LNjdJ(IQ6dhWqc|_xO=z-Z%iBGi+y-&qlytsQRYTu=!c_~~SpGZ3Z z-XR;fWkIq1ObQqn8R^+{ssR!9uhzMjN8@}7&!&r~i+{rS4%A>dW_oqvFmK4`8d=QM1ID&h1O)(KxODdh;wlc66+1M@ga=ma@x?-~4nE z0K4zy`_4)V)$!h91vi2qUMyQM&|~#6OO8Y+6q@A;_llH;VzilHx>`qav7ZGgj6`CL z#8<1~QkyYR-*i9aq@d6&01m!`U#_DaX0Fxpy`X)}XR^Js2Ba^AU;fyk&#Cq)9{&pH z+g^Ad=9u5dYto-NDDVqgxMY9(US!W3c%*?q*VYe~QugT)mBmc% zrEy;bG~PFRd=X4H9QLfxZd1OR|8d$&X#X8#M}X7~I0Wy&e*1BFW$|lEtDV((c~gbEEe8Y6KXrnnC$$A=L2GbOAp1p011V z#>LrGvLUnmA$^s)UhhE-o9iuQ-tAS9c?XTzNVZ~E!a(cABmC>Iufbir90Oq1UHHy~ z+3s11PFt?TC;TPR?c94AbeR0Rli#AKM%Ipj5__kwUY2B}Bg&w+)9A8;0UA~JcO6fBfKl=eAj`jg ziPhW8b%Ex*ELgwsaWE)NAPw}D*nlSl8~^VEH(*nR2UhL5#(M5LJ|{hSV>x5dx*&l2 z-dz@g;!-Y)Keag9Z$3f|u#57+zXFD9qe!%FfD{XOngE4&ZQfcM>xmAfH~wNLjP`xu z09zxr8qC(*&)_FGu)|`; zG?e=Ek37omGChZsltZrc%Mw=8!X6?4w}5!_QRn?h9#-ct?la$JOL~9jZC&T6Na|9L zOh!iRWHKP+#7fA?jyN-?p&c$fwZc!t-ZX*YriCK1o*|T2T2Mnjp%;&3yyXyxyq)Kb zFd-7oPS0z#X|oX)vS77K4g{Ol5kyJ|1VYiu3uqw;iHXnToY9v4(b3)=moy4Qlb6D{ z66*oGX)^8n9-o!^m0rXoCW<Q8;>?3o^`>==+5+qiE+#KMNYpa6D(e>ZV< z$(;QX|^!H_N$eUlgMpJlXfkQK6}H|D1Z z|C&K_U*FoRR}+dLa#(|OqCpJUUeu^;wf=^QzJK&k2tIAxrBnuWI{C;eq9#pExx43|h=moG>G&mHGTL$X`VHVxf5qEdXhF41#ic22>}q%y9iJ61UfUg2 z5bV(Cawm-tW>Qe-d^l+d9Cwwzl9?;|RJ(hKXMe*(f*WzI2Z+#$(TgR}EpyJb3yL~6;B|O>Z+|TJv6r;#$j_IutJ3ES|AtbXiO`AsgrS+7){KpH{u1y< zWH()xrr9TTFwM(^ogHg;*B)5wN$=hudMtX~!NK%CjHR@cbSPvBDtLJ{XR#Mt+{Oc6 z!B&+j&FMVUq*)%&?CJcR^-UB@T#ey#pEXoO0&MZZhN`K;22~(j2fZ0U;RCQ2#WWQR zH^4ig zRWvot1@py}DLFW%kn~%zyI_e?;03c$h0%u13qWfcPHEbUpQsG9<4yFp_umWqup9z<7Mad<(&PEc7-y?T88 zrY;z|JqK(0l0?#aI|r$Zk+-V>U2FOjKXyYC+V75@x2@Y=ObqT(8Dt+};F`Tgp{*1r;fdx+_NtEUVegc}6HG#Xl2GCI* zh#+vBwGq7*k?OH^cK|`#VRum*>*w3+acAS*vsrO%5tVb_U=vt|NjH_Wim?-l0t(o- z@16*Qi_z_hEp^2D?XJD$5z)cSs0+ly>3YpKukI_?=d}E*Y@bNn`z{o_aUVG51&EB- zJH`)tpStfvubogJ^q2@i6w{Q5E9Tyv+h;e!1xRZHXkEB8M-@>K4vGvVhF9c310GSp zczbITN1sEHpG#p0@mo>CI!l{5$4~L%>8fIg))kAx@&UdDN5qVpt}EVqO=I3Gi_k4k z=c5tVb#B1X9Eim9*;t+J?d4F=`}93h_h%9AIF;ihRaj>yb=8|9Ji>|2&oLjQL|&?) z$Hllr735D89WEE|3$hh&OJ!e0^RPjQuqoBhx~#LHXZxvbS30%3`z!9#Ivt6Q-y$ReEJ!w{VS(MD|UDSWH ziu_cU#bl&p8*LUjx$)+c8B>1#9Uck3ZO8(fb~3XHDT)7z1-`tu^h^I?uN9cPOJ=oj z;Q4Ap@GF0#%a&CB>fkP?ZOdXEHv%Oxw0wN6{@5Cy7}(gaKKgigT>q0_#}F|)^xGja zNqCk$<%*T{kBbzGK@=v^i7#4EUC{}rhByOEi2-Q_`^#y%yEgCifJ%M8Ztr=h?!}+7 zme5|EA+&U@4o4!cD^|jx2{9NC6O*q%&>|h|G31CK$Jsx>*=&!xzto-Ol{uc<>6S%p zfpPi5k)PV<+` z51&5y)(!gQjW3l!pH)u>kU6)!Mj30ohNkK2opGm6OH>2b{RY+v)l(z7y^pJ_s|8n; zUN&{1p}n`inr+{lPy1F1v{MIz9!BaUT-t%t>5-hXV&jP|+2>2Mzwrww5lF~fe21_1 z36~deevSBEUNS?9c``Y_(d`>Ed0$4c!!ugOvF{=sSw_g$6)Y)GFVu~2Xp45UFpCxL z)*lfsP3YNA(QP<24PM*#{9Wl{kLQImhb)w^!0~{LGG00_ z5F@&$LFlgdLTN3!jVMp_`;%|ojL|3lyX*y_``mT^Gs`LGw0g$U z1xtN|BVIBvag+AFxLi`}YmPb(RF!gMcrEVV2WS_c{0J?Y47lXu0j08`t^J2aIdLrF zr7;*>8c0ieoBkwgk}M^o9z4O@;=cd)k1Uhva;vAF=Y{%k7N0qWvpH9)koWyV2G2{d zQXb{cRz<(3ro`)Xdg>1@J3QKt*x1>{;@Bl?Y!6C&jw=HD6>#B-)*GoOAzMBn}};q);Lg`{tsZ4YhVf2DQC2*r78 z`DaEG@o;L}XP#QzsLVaQXzR_5BRrFxUW|2<=N%xJxIcG`PNSs2@gH6Bi%oJl|M$(VCC=SZEc+8Rw= zBsF9DIJ%$So61(Lo#b4sm=k#N$Ua@Hu=aT6W)3<}!x=o!+|*3qLk9STs7iE+4n!f8 zJojm3#-@ODD3|Ix!j3oB=a9fUkN2s7<#~E81w{`gkJ`wgk?|gjp$WqyCZ<9Xg@cDz^ty$u zmJHP4UG!O@Q7*rm{39?Kx8;(evsA2M?=@6L#a=!2u+>&KuQl7NOGf&#Q#lTWBXu$g z)9S*4waz3$BHpFM(_Vn!=4j^6dtcW9AIeEe(eY1{tx%9n?>cFHW=+_Qe| zJ&qBS()NQcoq#FMvYDiP_R#?~-!d?_U|R1l54%{YTAp4dn%Ej;UXC=y99(`yIjq%qYAOKX8*=$nN$v z=l@b;KC7h%FWW~bKSTIVkW9XM>{n~=SK&&}2>GsA^7D|_4+0~5HKKT)BUg`ETXnOR z%X}>R(l*%#5TaTpl&rB6FUtjrzRLUPng_Ue9vi=_+F}K}JD#}5(`oA06D;d*Hg_;3 z5(gqSxe(S_{+RiSV|SJ8l<^^{bmg!p;6?Xr%IC1U+1sA_7F#@dw@f%$#TLh}6)zE59^kCad-qbAXN)^P8S#{P;w-SPEs>s@yj?nRzS5TnZtTig14@f#s8 zZK51Eh_f&}^QxSr3{8XPwT*aNjsE@quEw{1==7fubolC-dIqP(!6&?hBSIGwM{an0 zd+-r2h?yh!BunLK#$bpIf1L6i;uViqR2w__u*hK?tf?LP+q(~LvPMeeGeC6KhtBwA z3je&p)dnnJ^Fgks&7pl+_)<;L*##G4opKHV`$np0<|u0P5cxk2_r61Yt^eAZyg&5D z>%XeuMMc}G(~bC>!o$Ot&g>Of%Amcv2B!#qN357BDgfM5MhQd-fgx{RZv?X3G`W^s zuRA#T+!b$1O}Ly>hJ1Xw3kZxs3kn=DwnC%gRQ?{)zcSOBH7lQ&t^5PsmMHBy7;tw_{(wl z_?X#|sG(u{_g@_@i|ydw>5{@(vT1jmeaX043}5=sJ;F_uS~aX6}1)MaudVVz-CytGfA@aw2{oEodSdL6vhnKbpp3sKJq9X#C2fVf0(+ zl}ESz*!h;bC3l2Nq0Ue!APbrg2I2b0(>Rviaw_YQR|ct-o95AY`o?mU)_`;PuLp$B z5X*tp-rmof(&^tAE7iFcy5S+GHT7m)Lic0j1l<+PPz%+Tf*T>m>*Yb8`wdd_LGfgt zaPA8fI!G6@#5elq7kT}vFMUA5-{UvcYs{c2u}&&(g95RW&T4T-U%8L+^-l_svGiY7 z|Na>t?@W+oLTI&*mn6+K^-DVO13w_GKqGxP9!yDmvFbGoOM| z=ijf@WhswKU;I`rjy%A`2g{n~d=_&y0ΞTmz%yP%2{eIHDycn_s{=aBVww8sqqfxs4VW*0E2{-XgVqX=NpI?=#$}6Qz3=8&JSj^aj$*#^bB3@^q zAGg&J#1ZMZ)n>+aA&qy>AtjKRpB48;IxeP&)-o-QQu;1qb#`l)mHoe501zZ1qM}r) zXWn$ju*<*cMjJbelCp4habeyJdp~CGz)cn=`&BuWrb>m;TTEFbZW4_`_WA6+>^z|i z6%GFLod<%UR-z#@8x>;bP2&bTcjB05RN?XJ?R+5mfpGX`UT}WN8jTmX2rYgQ5h?vD{Zpo@BUVJ4D1m6Z^}=vBD7t+d7h+WuX~-&i`z*b*UW*?Y7`c$h`V zF2!;@a&Nj)n2}(CJr5-k3W`dlhV(>&PNf9eD8laF zSkk{Q&kY5P5TqXLKV_mAYBZWYbaeu1k{|3pz|x?I_@Oz8%AW>~IRC-BCEFGa5RHw_ zN%^b?V~ZBCMt!SP8?l7``o(*a&Pce@Ue{I?XC1S*Z&(sv)_oUIV^F5$dTK+R*rNHw z%T6Z&iHaqAT{2~*R;~^TuR0y%v9oU*DKdplvw~{nQ}b`N7-BWbIra*u)?Z1E_4mJi zwkmOOi1BJ0{a0L6rAwp^ofidQKxcw|rZ=as3FcQu>D~BgkwMdF=7=5_;s4x`nUpBf zsx5kD?d!o~0pb1ZD%h$L6p85}?jXgfwmS7s{jcw|UoT9x z_Bf(-%Z^V!z&gK9uprfdBwP7nm9v}8h`*@o5Al7wPi(h3OPvK>OYqH*`KJ4ZCb2wW z$h1>=y_s>!3VVWmVXu^a=o5Iu;2m~f<}!n3L^eokqH0x2kX=&>ous~-TUiY@u>!Bm24e>JRJtiVBoex{=bJK4Ia)r_4P7ITMN`O zAu<0~if$o3H{Rhl#Yb&Fg@*m3CUEJY=deRJzXJ+=Y#!Nsd>-TPH(L9y&+p%HJ3mf5 ze=k7PVJn~~qv<0HY5EfqY3dmkY1RWJX=cMW#iiB+rlsbTDDULjB?4-~&)OjlSVTfp z#6+D}?_ZfFd#UwIV;ksQyacwt>vN_A{g0oXI%0<>A*KlLC0b>{RVAg~O^XLYD%YGeYja~vQADV3_t zzm1XP*FT25Z< zCq3u*nkI+B?Fb^oUXsPImfpuvHheRNQI-RqKZ6TaxPR zztQF51GPZ|7P6}CbgB)_c3MCw=Qs!KoRZSTmOv42li$1E z(p`cwvz&5ylQ!wIv)PM$8{A3b@N~UfnUhbvJrdt?`R!4KJUSe;M@8=YUv+_An^x|M~`WzWge*M z;Xa9xDs1y2Z%Zb@(lSk^PUedSh3wSd8%U4^VnHJpK2h*%9|FHKsmgnipzn6Z=iV&3 z?;tsAggRl2GO@95Bx%aTH^z_)bW}KG-(lK@1VJCr`a8+RcoOq}usI z&4em?gFuar%4PxJE$s67TJ$8U%gEgy)YZX&X?1nE39%$oaQK6ZEWfU;!LtAb`g2Pn z*7W9cBZoZS@Rja%aG;$WO<;|2tq+5mcIPCr-bB|lGLpDNG8K_%@n0{C=1@9o5A9SZ zWziaTg!+h58ILeIX<&03l$TF7M_}5ML&w#jTSE`7SvBlQITBqi8Y-5wgIp7J8Hv=q zgFFvYz3y%ed6$K*ssv{FOg*>N&-^=Exyo03yIZkSu|<~8{K?VL(XAs5)^@JNwOw<- zO_56#fWrOJk-}3y4*WwIn^=S?KABPyw!85<_dhut@*ga1KV1{gi?-PTG}&9b;5z@EqR6t2fA#1n-C?C8Wd_^hQsWA% zIJRLapU-EXpp;3Mr1OjZe2o_eT&X)_Ev??YDuTRM(gxw_>zq=%lRn83+ZeCV6MqQv zkWkAJs_Dnq4dE*9&jp*8^#_ZN({Ui58%ue!sQ!#`O<&j@X|YUFm?1BP zuHJeriC?BF#JC9$qQJ6J_Ow9;Ie&A5hp81zyV1y7pC3DL8OMYaGjP7)DKGgt1ec{a ztl#Nfa^T?)@g(X2t+Xifxdh_mILlAvbUL{o1k**i=!upJsaq(^BKNmVDk*|>atfr> zu<;jS20Rg9HS_5RzxEWR#M>ZhtJCmtsxS2>sI#Ui*b9r0{w^gD#9t~}VIDu_)zP4+ zE|aSNVw=ug@A->DR^Zh;9g`)8Ze+Ps4sW;%iA5Y8OM-aHabcXLH~-DKXL+#2k}T6~ zMZwexEOE=X_i%7<+l1Ti-ft=~L43_Ai4^78xQaBRj?@|ffok&~Gy7eknT?5Id^rkJ&HkJX$fjGRMam@k_U%vRGmf9pj zJ3g7Wx>HnmC3j<(wDQb=6>D12D)00jLU}_#e;Q!Qsa9pXaab}?RtCK?N~H{yirXd= zy!~Izw4XsoA*()h$%`vL!8}s*-dPBVSs!)b#KDzNbb5dQ0amq}i%6wfW}Kyen>DHe zeU6I11L!cG0JtK^a{KwR<|dscr}PK_l356Jssvv|O+jVU))Gw z@l5BcrMwCMaU{uJ|!|)`uUr< zOdPYJB#uiBp(@zcGQkB_F`flED5G52gkClr^hDwVr5F1;0%#w@jUd z6)sMf+2Z1Wf6xdVYvqOrmfI+v@9KiNZnl1E~gaF}fo#~fK) zVPq#9D=--#SbAdxO2bO@TLYV{T1n!DEC2Kagzc$aBDy1lSFkv8FhY>zmOjLr*y!i) z&#LLck4-WsQZy$>CL!QOgxpJtH76m1Dq)Qy?xNN!gJKrrR-=7*pPwcamEr)|E!#M?ddI1Y3$z zXAo5RLLiPkN5wTX@3RhrWeXjVkPwIZx-s)-?H|RM;1f+|Ck2F9jwly1c`k4 z^5sPsTg@bC3XjX+!;3|Q&>^u6|7in32eyRi?AO4O(*;nRNCa1gN10? ze^%fqhP?D+P4@_*ayRgJ>#NoX=)jI~lpCbN9f8!eB4i!r$`Zh;ik8pLRs~T&S&(6u z)M$7K;%rwfaH6K~6?!1Q_0zxD2t}DGUC6jV5zl22TpJ|TDM2mQ^IkPhe?LG%c`Ak& zbBLAM;{($bR4;p}Ks)q#oop~%3dk^p9#&4vsCSfGs3PuEm~&7y9aqzk}7L@|k3 zj!=Hwe@{F~rQeu_HH{9?B!Z1r6X~SV6rfdhZu^J%&YD~>sYLaAN=^b;O;Ub2*`LU{ zG@ho%o$+E#7vuvC)Ybp|7%fXIXF*0CyP(DS(Gc37rbRt+#t^H1p=YBn8h^U&^g=g& zypSITfJhg0BQ^^)@vV6ck{74JVe16jQD5?;@PdQwtY|cx!?H?sXVU_6TS|&V6*Tc^ zOy)(r8z_y`VKCmC?G07exJojKPmsGB4?@IqY4Ww;l1y{@duH_Q3rPw~c(W+>?4K^} zQ=P_pR>&26f`hHUDhF|+EKpdVS|t6SCDYb$CXU)`-fkWRWb3BG<~@&vFZl zYWikHVEf`q1M9gr4!Tp6$gjItEg1^NOVEP_rQ`N-Km4D=33?%MlxvE7ADXTdt<`fG5j1=IpoXh$+E);>(_NiJi*p91KiP9X1%x-c>`w7F*nqJL zbzggAlby%fu4>Gdbli@1N!T948x@@6b;c_5tT|Pb^HorkO#*F-W(Bjy2EGc1m8EDE zg;dRPyWwm9VUbUl=`sIE7QVsVST*wV18I~o#|%O$b#v8QX@rIP!&Op259;tNohXVX zEJTJc&$nY>7%H-J1n_Wng_TV%X{P3Du-&Rp-#Qy{ZXXW9)ekOMFrh*oxpZh_h0HI` z$Z=vV#syZDpC2BQBYZ;egw)|rrF*KU`6shUd( z4lmM?5|0!y$c@qLhnl#I^s)-bbyH=>@9d4N&zjOth^jKs50S?YfH^^7c{ydQQO3D6 z7**EMw!HND{csPyo`P<@=AP$kR9I&yR9vb1w-2`DkRNX-%9~=pSH7POjwr<*FC>!9 z^2#`3%oyo`X7{khEeWf-I0f-53s9$zv7fEoT-(9Q*U@^uplSu!7 z9wF!@n1r|yfXJ8wnlO5dA$!fBe&L_V+1+i0_~0jJ-7%2(tP8^xyvS-j@-x$SWS+jp?-_{Rtd80p&-|snHZ8((N?!p<(e@h7G#F|9- zvFXLscL_$O_<^k&hQQ)%uZ(03!LhffPia$3l}01G$lGc1L{oFOI=Javw#LvXlIe=& zpK(27wVo54w|7pHe{$<*b?Tfr!n3spYsVNjfuTf?t3JR<(uqGLh4bJ1#RUD81o3d3 z@u@mY?LTvnrg+rHhd%A5b!`4(3IFO_P7LjME-OxC*a;=2a2}+(&xNuHM8x`oK)xnq zK8}fca@~!3e6;fPM(BFYKaS0|f~>$KQJGEr*)BEQKlcFNFFju5- z?8rKLIQHJ(-dWFmY7GZNH>0i1$JR*&?<|2slBizP+%nhCX`7_)EHYIkk(D7g2iV$9 zM*pY|#gCjH@7IRk%+IuU-Xf>ds;ioen35HLnpH3J6H!*ts=cLRY+coRyk&Yyc)H|! z3Yri)7Pf0X(SW2sr+G@61xn?>uf{U>(Hm5poYa^NkK0-|C>W0X!p^LZjs-?OIBZ4xLYbew>|&k zsWIQ6g{L#~*1aEBr+giED>p+|4;*Ly$1t}};t9mCRoA=Xi%w@(o`-YT^sP?Rs1Mh6 zUfy>#gCzR;3r%NLPbOQDXWGqP*bw8qWc}f|@HL+P=HP32JfVS#? zP{_!p8k%-ko)SIIv*(c3_m3~egr4}5Ou;<_QTw0?Nr-rvTAA*7j_b~1?FXOUV85P4 zdLL8me`4q{W7wYDwDLsK)Xu-a<*rP;7)bETg`TPZ&r{k0k{|t1`kT01{ z@brz}nJSz>85T?$_xilfy)0gVWH+3bat2kmpVodNPUme&>L*Bq?MWj-q@g<&%F1 zDNq*^vQkM(Cc@E}xYu3}NTxU*VB2Wb64k|+_Qc_G-^s3gn%b)Ti-hRuo&_cK3v+Kf zi*C9vE1z3#3PdiSb{LC%8tuq2iu9kkQa*v1QeI^$}(*dqOI>iiBoMBL$~a~%UOOAbCSci>+)r02M~d4D<{;!)|2 zD>FcyKV+izW^Phh9%h6Ul@3BwIRKJl00{m1Z}Z)ru{fZA_voltkMRunJpqF%mn@I< zH^2f?Ue#&tMHv;0@AJd z%4V(08eSu1KLE`M^vDmD^lrP@!)#my!84J`Z*54=`NE~%c1fD^?a5#;gIwFXj^Ay3 zcJ0oTZH0bqY<1>Yb?f(aQxK-&u*#0eDi~*HQlT_I%#Ox0 zzxww2aKmLkRH)AuJx)hs+(?t1Q`oQCp)B)GV)x_PmP6CkL^~Wk&iJF{b6>1ElRnvW zo+m`;G4N8V&3ET2*J%66WB5c@?Pi<5ordRE+J@d}LI@6H^NLPI=*vBMZ0)X-p#Na# z@t}&4juUIrGXuk3GyETK79IPDU4R0%7=4RX%j*S0OZv$BWaov&RQ}t)-6mlV^vzGg zTZ-A8#jCo}Mw;_o9GI}k0$xxPm+xDp=p;S1>sRPpyfnNSy+9k z|5^Sba1(fTJ$YZ>+K#d${D$lz}o$gPz0Kxn>sz^NdF$ zgSo~x3vRU1)R#qqB(0mpKJJ|zH7)}(e!N#JOAjcr1PPs(!E|pp4rlExGfSSk%Z$zM=_m`%yJ4*&e zRa_7Kxe*`9LIrx2uEzQjTar_6>$|zQ4>c&8F5j4GR1swX21287vO(aelE14{VQ@l! zlcnES^u@+Q%4`QuJTEv`w*T}WknSofay?tZbPHTPh8-T#$L;=JsaC2!G99wc1XBp& z_>S&T+fO(Bf%%~NSK(0jL;ska8TaGWYEtrvY-p>$K=wk1J3Ndp57LMPU5TDcXW?+G z5sJXl!~H34$JUT}X7_IL^mvQ+KV$Fn%Xn{mVrL8%dVwciKTtUC?9PXladORZAfu`~ z&dw#SiIU#4EAn6R%hZG!_t;nO1Qh)dtS>?&X#NT%KsrDCn_5h=@!)@k>vNx9e3m=$ zloaj%my~xmr_3n(;&8beSUuxu7>(9HDJHhG7h0kg+<7^nIQwxpO%c$3f z6-RLku^X`qhnpGEezE2n^pdi^&9`?Rw@uK-3rV4^(H4K{x>bkqj*LEcsBg55eO55` z$*ex=@mcoDNM^@1ETWxWf4H?qyfRf-l(2$ke+fpJEk!!7xOyjpC;T^h?|@maiD?sk z#~y6(1h}IBstK4CQ&wM%r1Hl-GGBlF`5&qTdx4l^pw(;+5z_k9m2yS5@tn~zhd0kr z)&o(;PC~2=jQ;y|E1tpTuNpKTQ%K@8L|CI=42iQ4V-4|AdaCyzzJv=CKYX03Zrl!g z-)Pp0l;w4)t+rq`QO{`iw5G^&bT6yrFkx#mJ1=d};IUpxrROupQ8Cw=8DUj(-{Y$1 z)Wbg7vCf-R zyw|MAtL6%~OjJ5&Epx1(7|PKaHr9q~H#7nY@n^@{4Bt!5#+@SF?VW>nY)T)m4h{Tn zhVGhx%k%YkwBN5Ls9*Rw*DU)Glajl z5Iw(f(?xD~@}_orMZsIb_M0hthmFOc)_O-ousuPld6OYGcKE_u%z~jxritkO-2pz>)6#ocHpG|Be6C zd;c^4r>NTYTUWp1{A`G)F0R6yIT_Q*Z{rT5-ijvvmVH>PZfYj$#gmO}$7#)uQCBuI zh}8w}qKpHQrG3;#>`EC`xyZtG4P$C@NYIg|8mDiASN&h1vD2Y0gcvUjJ7sdm-2uj&+TCEVTyb;y4W%3fLZNq zy?n0HDwvc07bxGih>twrpDoaSOej2iu-Ys&Cq8>cySHu-x9;g5tuOhX7H9Y$ddjt3 zt7LhuOCvnsS2b>9*y(#@u_|HjEXD^K|r#s~1Bg1`<_hTBZ>f`&P`);Al1*rb7CHIFoj&j2_=cjwB z!>6h4^Q%pkXwkIBVe|2?VEp%_(exGQ6d<+w9{2qnRVCQdhc-2-2*Td&82fkv3c5;it6&%TCN$TBt+2v}i@qZ{F2yn6A>rp3-z{|~=_>7w6!@@iIh9G}4&&|wxm zzVZ>qxu73a`gjqK8q}WOl)yQHlx2fZ)f?l&3U*$sdxGu4(d<9s|x>v7#df zT{M?5YA)*#i6U>ra!vYAI}_2z{ndwNn`g4yM~7W(>Vx%B8GGh^)ABZYcNhS;V^epb z?Te~R*Q&MR*)ud4IIODNRyoA`!`M&^n-&~gj7w|j$=~*^^1bcGgesg=q`__wgPPL< z%Mz>ZzOM^ChsV+RyPMfXNl%WT_D;uGZ1L*1kXxs1jW_b{z0=0T>9OTB2vHlWo+O~0 zDx>rD^?fE?0F#nvP-xZwP6n7zvc0$WHh#e2sO<^@tgSRU&RG?OP6#4G>YxXXIMX$1h9QGv7HJTA)FHluoBe`51uS2l;Z-2h6@UtZD@Lb1t(#9X6 zAD>CjH+K&<9jpEXt{_LK|MCz7syV)rT&xqS4e`K-d4T1g>0@27d#eqvQmRIiJhVSw z7Y@tH{F|P!#UtbB`a}ydag{iQY%nO<==U8{ULG)p;+@Rx# za5oXd`#gv@ozYK$b?FT%VH2vNCcbwID@A&Ys(_93BA=$~%J-Stev4Z3@9ek%S3Y+0 zdvyh*p@5l4{d+t*&c%$!)o@{}`7}n>_T&IB_Gxgq&Fle(wm2WiwG^31s61tKvf`2i zD3Mq4Dxl1#Ei9)kl5=~o?u^gMh1bO_G@z(+{E8`_v2uT^@Oy?U` zuz-xEQsY?nvOccc{Re<&(It~vkdbvYX{@!&tb*f``o{Z^?KB7C@L(pxbZMcyU_VrA z=MU?ZooG&EuWmS#nmPk)+RE5JcJtsJM5CrfDBRB5qS;puX;CEiv+V+RR3N1^R=7C- z*xN9Q0J0D2>7$4NWI4sf@GDnWy&2pp|h$ZNDkx&o1UCXde>4I8i z%yPcvw$MNZsxsT`y<^qsae(X<2(;6H3O~W~Y|9Z?_1Avvd}-!3yqfl&Y0JA|cx~E~ z4QMgcs@kqa%nW?7&9feb4Ho{m_yFRhlk(eI!DV{J*#oscy-q2^4VAYnFCtFvyd`a)Pg3+kZR(h zyL7CBlniBYE+RQmJ}aAtiviSgfJ_NDiOtnG$_JJ~Ifat-yxflRwEB&7;j*laQ+dFOcFJy zJ+iagKhL4I%X|;Cf-H9|^}l|v;9+WyGb>}oUKiH)m-W5Kf`0$BiMW4A`k{e=T~vq> zt|E_yCX7`Ytsf#s9iQ9KfV)t?v$xmHoOXDwdzXYAF0QvAOpE0xk0`2K;~IGXq3A(7 z85<#$zRJ?5jKHb=vvG=6nnIQTXFbCt5e4dFOsu(|?0Tm>sQ@1_ilLC@Z8m$0&7syK zmgJK6J=iwUAroO!AuH$)^qQ;V)G-Qji z48;uD-lO;ZhQX>@sy)(z>#> z4H*AkHK{cg+zd6>)DsMz1_}w9)TReA@t2)T(tA z#&_;$WEdSmSSXorw-Zkb6Hw9&F}|b4(L8S)AK``Xr?OG*2?HDkVu(E?P}7Z8XvyK9 zpgw9s+jgBa%f`M}TU&QCzjBPmkUnJ{kBx5r_ax@u!lF7a{^&tDo4}8oS-(D}gg+Xi z>=^{4#s9GG*xg&AVSJ%;_uBm%mg*S@s4C_m?k1O%f39TE!W$%~sN(ULF$>}m*YP$S z4w*sb+C>*h*Wrq3g=g7LnM6t!qeha2oFAWwE0VUv`|wp?R74`R8QDH_BRQk_p$t*P z&oRCh^rvK33r88!)48@|Cx|NNe=jZu+_`_(V>bnc77;6}tW3G|67W0*yzMf;J~((7 z^7#@g$`UEc(mcB|tz}9|>k#V?RZUEnMbi|FGmP*%cMJY$-#v`i0u~3FXmD zsmK^c!}aAH?6UjHeH&jUycu;g2AfirL-O)fMs1~qvXX&S2&=9lQJ>DNQ?Rb4+ukGO ze;TI5F-NCSo~f#b>Upo#I@!D~^cBxCF)F=}V0A9e*=SmcpKS5XL%tYVlfxQevFWTW(TXjSz_u_-9eIuB0%-*e;H) z_|S%6V~_^(@bE}==N}I8NAn>pvh(wSt*ENWLKJ7e>bb5(QZHCW=4v{k#UGVUX7d^m zqa;7V?|tikX75iD3jZ?u;Cc_7A0xkgyPb890m?7Db0Z$s{EMSFJBI-%*!nI_(0EIiMS9> zzn?P;=`-R8lk1l<{URT1hMh#Kd(}bWW-RaS$VX!#T>;V#9Gj7ej(scn4?aU=_^9&| zLbi8u^q$PkEO1MgUQmm*NMu#nY+gS}0xBLYi7}yevE=La1YV2uXoAlULjG@G)+dNa z)qE5W9w-!Owdy|-A9Oc>p-mrE`w)6Z=(`l2DtdtRw}N?!OwtAb{^{0{>& ziUu~bH)>5E;OwPIKqQwR8f=7MABLD)9U3fto}(V1$>xYfA{6uHdH7noW%p(!GB(rn zk%JaVtfdwg6!UCV-NxYdOW&vBc+i1LH$#aYV4x_B6mvUn) zzmRPSAo9tk9VGTDl@NDtcgM0w`!pr8a-&1rIR)0LK*P<0$ru+09uJT2vCSa)j&pTC z5aRty-n~ozagY&$94PYwmz#f5!TOw1*RrH|qp*JFG+a795{H?u1BPE^_pFT!XSr^E zdtQuCC1145RI-Xz!Q+cJh3il*0r!)=bIr}IZ+GeEXRI3W-hAKm`9^m)pA1qUdExp` z^;ePlc6~&(yj(j21#d68_cocIX4sbYu+xRFzD)Rw`2cY(08E(^Y#@;j;K^X76J@y= zbm0Q$;R~DoIoxIk;tEDpXM|d#{(3oH6=wsWbM4%fIW(Bvg4Oh?5-=rSrLlsDU z?&d1P6OB>nv*M&e!joiiLG)vuhJ>9v_+o)hA9d`YeioZmQPtHxdH33mcOHS&i;pW? z4Kq?B%g@=SKQ3jLgx>X~%RdWS(c7%o(Q{Xh(my^J_zjV8*vU{10x9DW?|C(96x$#B zjIsum&`c@i>0K8u)k=}i(qdYp+2RL;>}=`>(0gM{ZJGGULTPw%3t+D&xt#XViqiv> zjQ;+9AVBp!pBHAE1_MePrNpw3MF|A%d8Tx+1ngCmc-H5lL~(cOoLWvTsq-n$(%c$m zhmb3|ish+F6>2F=(^32=8=u~5bPH!#*6wJJH3j&P^s=o@OKTug*9@3psif>`t%u~p zkSp4^Odgu=bHD_H7e_8sjV?x&!;pUHx7;-q>wLgo5X@Q zNSk*@+4wtuCQTe;?!M-mkr&MVD}vU(nF7^zh@6vMDdI4rt~l}+Xne!+FiKyW*->@^ zn02G!8VuQ$NY=9@O5zFuMcIDf4K~0l59$qn3pZLxgS7A-$0&IHmY>s zDSHAMI=iwW*xQLI_n1l|ds)+AQ>*86*H@f&U3(H10v49}YJ-@+zt(MGb*s7=L$rl4 zX2!}7ozTtJGX~qEEnAyk-#(kFM(cgw|FBK`k$Jm_jWg3$ZoMqRKiMN9G95TU>v3Mf zX7=d*;tJm!;S?EB>!gn}ox|=gPy#6{aG_jrzkN=L@+1eaQ#%~NTL;|VRBCB{EGr#K-3ES_RL^akp zRwE(~**S~+xuyGN7NV=QBCfG4Jc&b7zKIC$LZp(kylWDF497juG9~~S-)F-x`!21U z1f$UaI6OH0%w^|E0H=rQg~i$?C;NN3Wj}s=(k1`W<;(nng44k70oV+r1Lm^dx26NX zHn($GouPn}NF<&E_7NWd2@VeCIecY{$hT6Zd6(GvZC>fv33ioWzia@nfNH^;Up(ZSU__7CZ4c|vjeJC?fGq~B z#Cl8W#tS&NEa^Rf!#L^(IMv(;i@9G-4D+j}5aMo-{lV_nR*Ot{@89m^5;Vsy6Pq@o9*v$E3 z3XP%vP7&{6g=tc&OYd1H`1>{{=Z^;nb$-Au!rKU%@~YyFC>J7szi-i~0hU)QS6BT_^R?P$W?;3B$t5K+I2=yN-B|k8dQg}@r5GsOUVQQir>Yb*-JsN_? zNnxjNe;-&oTw4M$o%AOeE|4p)gJpb43r!%7kMoEN{&W+W^CAsmKryDRQ_vjRNUmn3MMnhhBNtEES8w|(g84vc zC+F>>#`jU};|Z?sq$OEhE%k8LU8+7}CC>|6Vv}{XYtbNEIYEQ87JX|*DO^|V;-QQaBtzj0_V+OeUU_ZB8-f6nUDKGzb+0h&< zx=?#yS@X3CziWQx{oG93_lEDC9t@nYTaz6yNb%qzaoTu=2n1DL5rE(I7t*j>)MwMU zVQvCiN|K<+q~#mcU8&^=5!$XX6$nu^$bz%_JwYU%DwiytRL-yu=5k8WFZ|q|AUKdq zy=s!Wt#v8&v!l}of0J%9*LEpFAVf}#Dse;cv3izYnOM^8h^BRjPXUXa?KicJMzaPd zDHGHbeA#Nti8|}G^aWBd7gV9`V|!%JB)VL*Q{QH)UG-hIhXQVr@Tgprb#+Sq8dgqB zj&%b1db~ue42`1&p#_qTHqx)#@dCgB2xs1Y4PX{TtHYbRg ze|(ADecdJfTl=~qY{Q>K%BS9{AG^aW^=CVKlk?KYyzYemCz-Zqj~gUX$doeJioe_@t|n!|)Vmf9bp#7PVT+HcT1Xp?nDm2^o34 zvzw%PFDAM}is6{nL=kl(+vpD&eU7)~82^-ohGHo^#{k*jZ>)RRMPd2f?{4Gh@<%Lo ze|va;Ao$z{)=JKtq$vU7TbAEWPi=H8#35-TeRu4v== zzvD~mplr=$YlqplX2R>5HBy!uWj)o}{=1YSK>DJgedz$ECLplr|E_n@A{4d|5$bjH zC>zmaG4FrV-hPvo17CU(!D>A}jjrdN`j%phptR3ortjXKuycXwXZ~$;@Ozsb)|kwy z$pz-u3unw@OSzIp3Wd*GEh_s%x$wO|TW`38_7PL1S!|`a>OVZ`Mbjfin|^D91f@M; zYD?GH*tpeyTQI-D0kla?<484aljdc1<>%HYEZ-k`r(wsN{Hd>x3lzYDlG!vExX;pH zV8;>!xK}>qz>xT}$Tah^LB-k~d%{qT;d=8#y(mj7{h27sFnM?PzIqtFmvC`e+k)Jo zPjeyu=(mqGTyRlW3FPveN|!c87G{Io;AJr+H0|O!fBACT1}A*4m*4W&+U~@@8w8t$ zTqdYvzHryms6QPf3aUl{JS7!}@w7{Wp>OFOH`s>-LJSBt2{5FWdR~+ZZ<^!qE2qk; zni@lpR9Fb&<>eiEvlpBiUpQ}@iCzS?piv8m@NhjrU2K17&D^ubCUp4L@b>gXctQR0 zwzy8iiP!E6hkPf9N#nbXS0?^xxOZrc$>^OJYwymero2sQ)OBeP4w)C*M`|`T{R2QW zVe4hiv%tV_+SvII*l=nXeiy#qBj@`8t7fF}-g#i_>q*U2*mvIxTk>(K zi6}R*@j+vxE=bN90E0I_*)}%suYth60hpOhjfc`_fl16h5_=|ZVp|ei%J<8gxP9A1 zz@huJ509MFY&bo>KeNQCLd3jJ%5{{aNk B9F710 literal 0 HcmV?d00001 From 23c9ef951e3fd93009f5298b0335110ab9e0f11b Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Mon, 13 Apr 2020 19:18:12 +0300 Subject: [PATCH 038/177] Update windows/security/identity-protection/credential-guard/credential-guard-manage.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../credential-guard/credential-guard-manage.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/identity-protection/credential-guard/credential-guard-manage.md b/windows/security/identity-protection/credential-guard/credential-guard-manage.md index 8689df14dc..f5a21d327d 100644 --- a/windows/security/identity-protection/credential-guard/credential-guard-manage.md +++ b/windows/security/identity-protection/credential-guard/credential-guard-manage.md @@ -39,7 +39,7 @@ You can use Group Policy to enable Windows Defender Credential Guard. This will 4. In the **Credential Guard Configuration** box, click **Enabled with UEFI lock**, and then click **OK**. If you want to be able to turn off Windows Defender Credential Guard remotely, choose **Enabled without lock**. 5. In the **Secure Launch Configuration** box, choose **Not Configured**, **Enabled** or **Disabled**. Check [this article](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection) for more details. - ![Windows Defender Credential Guard Group Policy setting](https://user-images.githubusercontent.com/41186174/77344405-c7c07b80-6d3b-11ea-96ad-4c1d6bfd4330.png) + ![Windows Defender Credential Guard Group Policy setting](images/credguard-gp-2.png) 6. Close the Group Policy Management Console. @@ -227,4 +227,3 @@ Set-VMSecurity -VMName -VirtualizationBasedSecurityOptOut $true - From 3dcc55ed6dc35273bf6a18447e08fd522e4fdc60 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Tue, 14 Apr 2020 10:20:51 +0300 Subject: [PATCH 039/177] Update windows/security/identity-protection/credential-guard/credential-guard-manage.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../credential-guard/credential-guard-manage.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/identity-protection/credential-guard/credential-guard-manage.md b/windows/security/identity-protection/credential-guard/credential-guard-manage.md index f5a21d327d..5e202b995a 100644 --- a/windows/security/identity-protection/credential-guard/credential-guard-manage.md +++ b/windows/security/identity-protection/credential-guard/credential-guard-manage.md @@ -37,7 +37,7 @@ You can use Group Policy to enable Windows Defender Credential Guard. This will 2. Double-click **Turn On Virtualization Based Security**, and then click the **Enabled** option. 3. In the **Select Platform Security Level** box, choose **Secure Boot** or **Secure Boot and DMA Protection**. 4. In the **Credential Guard Configuration** box, click **Enabled with UEFI lock**, and then click **OK**. If you want to be able to turn off Windows Defender Credential Guard remotely, choose **Enabled without lock**. -5. In the **Secure Launch Configuration** box, choose **Not Configured**, **Enabled** or **Disabled**. Check [this article](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection) for more details. +5. In the **Secure Launch Configuration** box, choose **Not Configured**, **Enabled** or **Disabled**. Check [this article](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection) for more details. ![Windows Defender Credential Guard Group Policy setting](images/credguard-gp-2.png) @@ -226,4 +226,3 @@ Set-VMSecurity -VMName -VirtualizationBasedSecurityOptOut $true - From 0c75da031f6532d37b5370ca7c12769416d44d5a Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 16 Apr 2020 14:14:30 -0700 Subject: [PATCH 040/177] added backporting info to TargetReleaseVersion --- windows/client-management/mdm/policy-csp-update.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index 6f29611528..c0774fbced 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -4151,19 +4151,19 @@ The following list shows the supported values: Pro - check mark7 + check mark Business - check mark7 + check mark Enterprise - check mark7 + check mark Education - check mark7 + check mark @@ -4180,7 +4180,7 @@ The following list shows the supported values: -Enables IT administrators to specify which version they would like their device(s) to move to and/or stay on until they reach end of service or reconfigure the policy. For details about different Windows 10 versions, see [Windows 10 release information](https://docs.microsoft.com/windows/release-information/). +Added in the next major release of Windows 10. Also available in Windows 10, version 1803 and later. Enables IT administrators to specify which version they would like their device(s) to move to and/or stay on until they reach end of service or reconfigure the policy. For details about different Windows 10 versions, see [Windows 10 release information](https://docs.microsoft.com/windows/release-information/). ADMX Info: From 15d511ef257277b23bacfcb2a1ac5b7dbf349c5c Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 27 Apr 2020 15:56:56 -0700 Subject: [PATCH 041/177] Updated Hololens 2 support list --- .../mdm/configuration-service-provider-reference.md | 1 + .../mdm/policies-supported-by-hololens2.md | 11 +++++++++++ 2 files changed, 12 insertions(+) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 68141ff2a5..5a221189b1 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -2731,6 +2731,7 @@ The following list shows the CSPs supported in HoloLens devices: | [DMClient CSP](dmclient-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [NetworkProxy CSP](networkproxy-csp.md) | ![cross mark](images/crossmark.png) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | +| [NetworkQoSPolicy CSP](networkqospolicy-csp.md) | ![cross mark](images/crossmark.png) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [NodeCache CSP](nodecache-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | [PassportForWork CSP](passportforwork-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [Policy CSP](policy-configuration-service-provider.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | diff --git a/windows/client-management/mdm/policies-supported-by-hololens2.md b/windows/client-management/mdm/policies-supported-by-hololens2.md index 4fa3a7f423..4439695e6c 100644 --- a/windows/client-management/mdm/policies-supported-by-hololens2.md +++ b/windows/client-management/mdm/policies-supported-by-hololens2.md @@ -59,8 +59,18 @@ ms.date: 07/18/2019 - [Privacy/LetAppsAccessBackgroundSpatialPerception_ForceDenyTheseApps](policy-csp-privacy.md#privacy-letappsaccessbackgroundspatialperception-forcedenytheseapps) - [Privacy/LetAppsAccessBackgroundSpatialPerception_UserInControlOfTheseApps](policy-csp-privacy.md#privacy-letappsaccessbackgroundspatialperception-userincontroloftheseapps) - [Privacy/LetAppsAccessCamera](policy-csp-privacy.md#privacy-letappsaccesscamera) +- [Privacy/LetAppsAccessCamera_ForceAllowTheseApps](policy-csp-privacy.md#privacy-letappsaccesscamera-forceallowtheseapps) +- [Privacy/LetAppsAccessCamera_ForceDenyTheseApps](policy-csp-privacy.md#privacy-letappsaccesscamera-forcedenytheseapps) +- [Privacy/LetAppsAccessCamera_UserInControlOfTheseApps](policy-csp-privacy.md#privacy-letappsaccesscamera-userincontroloftheseapps) +- [Privacy/LetAppsAccessGazeInput](policy-csp-privacy.md#privacy-letappsaccessgazeinput) +- [Privacy/LetAppsAccessGazeInput_ForceAllowTheseApps](policy-csp-privacy.md#privacy-letappsaccessgazeinput-forceallowtheseapps) +- [Privacy/LetAppsAccessGazeInput_ForceDenyTheseApps](policy-csp-privacy.md#privacy-letappsaccessgazeinput-forcedenytheseapps) +- [Privacy/LetAppsAccessGazeInput_UserInControlOfTheseApps](policy-csp-privacy.md#privacy-letappsaccessgazeinput-userincontroloftheseapps) - [Privacy/LetAppsAccessLocation](policy-csp-privacy.md#privacy-letappsaccesslocation) - [Privacy/LetAppsAccessMicrophone](policy-csp-privacy.md#privacy-letappsaccessmicrophone) +- [Privacy/LetAppsAccessMicrophone_ForceAllowTheseApps](policy-csp-privacy.md#privacy-letappsaccessmicrophone-forceallowtheseapps) +- [Privacy/LetAppsAccessMicrophone_ForceDenyTheseApps](policy-csp-privacy.md#privacy-letappsaccessmicrophone-forcedenytheseapps) +- [Privacy/LetAppsAccessMicrophone_UserInControlOfTheseApps](policy-csp-privacy.md#privacy-letappsaccessmicrophone-userincontroloftheseapps) - [Search/AllowSearchToUseLocation](policy-csp-search.md#search-allowsearchtouselocation) - [Security/RequireDeviceEncryption](policy-csp-security.md#security-requiredeviceencryption) - [Settings/AllowDateTime](policy-csp-settings.md#settings-allowdatetime) @@ -82,6 +92,7 @@ ms.date: 07/18/2019 - [Update/ScheduledInstallTime](policy-csp-update.md#update-scheduledinstalltime) - [Update/UpdateServiceUrl](policy-csp-update.md#update-updateserviceurl) - [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi.md#wifi-allowmanualwificonfiguration) +- [Wifi/AllowWiFi](policy-csp-wifi.md#wifi-allowwifi) ## Related topics [Policy CSP](policy-configuration-service-provider.md) \ No newline at end of file From de1e07ad50f8b9376ad427e73c53fd05be7cd4b2 Mon Sep 17 00:00:00 2001 From: rogersoMS <44718379+rogersoMS@users.noreply.github.com> Date: Sat, 2 May 2020 01:55:20 +1000 Subject: [PATCH 042/177] Deep Link examples are wrong (text wrapped) The following examples are technically accurate, but unlike the preview here where they display correctly as two seperate line items: **ms-device-enrollment:?mode=mdm** **ms-device-enrollment:?mode=mdm&username=someone@example.com&servername=** When viewing the page externally they are 'appended' to each other and wrapped, which is misleading as it makes them appear to be one long command as follows: **ms-device-enrollment:?mode=mdm ms-device-enrollment:?mode=mdm&username=someone@example.com&servername=** Can we please fix the layout to ensure they appear as follows: (also, perhaps we can change the mode=mdm in the first line to mode=awa just to provide some variety in the examples please) **ms-device-enrollment:?mode=mdm** **ms-device-enrollment:?mode=mdm&username=someone@example.com&servername=** --- .../client-management/mdm/mdm-enrollment-of-windows-devices.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/mdm-enrollment-of-windows-devices.md b/windows/client-management/mdm/mdm-enrollment-of-windows-devices.md index 87c13cbc3e..ffcc4f3baa 100644 --- a/windows/client-management/mdm/mdm-enrollment-of-windows-devices.md +++ b/windows/client-management/mdm/mdm-enrollment-of-windows-devices.md @@ -313,7 +313,7 @@ The deep link used for connecting your device to work will always use the follow > **Note** Deep links only work with Internet Explorer or Edge browsers. When connecting to MDM using a deep link, the URI you should use is -**ms-device-enrollment:?mode=mdm** +**ms-device-enrollment:?mode=mdm** **ms-device-enrollment:?mode=mdm&username=someone@example.com&servername=** The following procedure describes how users can connect their devices to MDM using deep links. From 26ea21f5374c644d117d7aa2aae98d7676bea1db Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 5 May 2020 13:50:20 -0700 Subject: [PATCH 043/177] Added footnotes --- ...onfiguration-service-provider-reference.md | 13 ++++---- .../mdm/policies-supported-by-hololens2.md | 33 ++++++++++++------- 2 files changed, 29 insertions(+), 17 deletions(-) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 5a221189b1..7c3b0764dd 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -2714,15 +2714,15 @@ The following list shows the CSPs supported in HoloLens devices: | Configuration service provider | HoloLens (1st gen) Development Edition | HoloLens (1st gen) Commercial Suite | HoloLens 2 | |------|--------|--------|--------| -| [AccountManagement CSP](accountmanagement-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)4 | ![check mark](images/checkmark.png) +| [AccountManagement CSP](accountmanagement-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) 4 | ![check mark](images/checkmark.png) | [Accounts CSP](accounts-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [ApplicationControl CSP](applicationcontrol-csp.md) | ![cross mark](images/crossmark.png) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [AppLocker CSP](applocker-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![cross mark](images/crossmark.png) | -| [AssignedAccess CSP](assignedaccess-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)4 | ![check mark](images/checkmark.png) | +| [AssignedAccess CSP](assignedaccess-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) 4 | ![check mark](images/checkmark.png) | | [CertificateStore CSP](certificatestore-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png)| ![check mark](images/checkmark.png) | | [ClientCertificateInstall CSP](clientcertificateinstall-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [DevDetail CSP](devdetail-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | -| [DeveloperSetup CSP](developersetup-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)2 (runtime provisioning via provisioning packages only; no MDM support)| ![check mark](images/checkmark.png) | +| [DeveloperSetup CSP](developersetup-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) 2 (runtime provisioning via provisioning packages only; no MDM support)| ![check mark](images/checkmark.png) | | [DeviceManageability CSP](devicemanageability-csp.md) | ![cross mark](images/crossmark.png) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [DeviceStatus CSP](devicestatus-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [DevInfo CSP](devinfo-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | @@ -2731,12 +2731,12 @@ The following list shows the CSPs supported in HoloLens devices: | [DMClient CSP](dmclient-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [NetworkProxy CSP](networkproxy-csp.md) | ![cross mark](images/crossmark.png) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | -| [NetworkQoSPolicy CSP](networkqospolicy-csp.md) | ![cross mark](images/crossmark.png) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | +| [NetworkQoSPolicy CSP](networkqospolicy-csp.md) | ![cross mark](images/crossmark.png) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) 7| | [NodeCache CSP](nodecache-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | [PassportForWork CSP](passportforwork-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [Policy CSP](policy-configuration-service-provider.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | -| [RemoteFind CSP](remotefind-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)4 | ![check mark](images/checkmark.png) | -| [RemoteWipe CSP](remotewipe-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)4 | ![check mark](images/checkmark.png) | +| [RemoteFind CSP](remotefind-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) 4 | ![check mark](images/checkmark.png) | +| [RemoteWipe CSP](remotewipe-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) 4 | ![check mark](images/checkmark.png) | | [RootCATrustedCertificates CSP](rootcacertificates-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [Update CSP](update-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [VPNv2 CSP](vpnv2-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | @@ -2807,3 +2807,4 @@ The following list shows the CSPs supported in HoloLens devices: - 4 - Added in Windows 10, version 1803. - 5 - Added in Windows 10, version 1809. - 6 - Added in Windows 10, version 1903. +- 7 - Added in the next major release of Windows 10. diff --git a/windows/client-management/mdm/policies-supported-by-hololens2.md b/windows/client-management/mdm/policies-supported-by-hololens2.md index 4439695e6c..8f96b1276b 100644 --- a/windows/client-management/mdm/policies-supported-by-hololens2.md +++ b/windows/client-management/mdm/policies-supported-by-hololens2.md @@ -59,18 +59,18 @@ ms.date: 07/18/2019 - [Privacy/LetAppsAccessBackgroundSpatialPerception_ForceDenyTheseApps](policy-csp-privacy.md#privacy-letappsaccessbackgroundspatialperception-forcedenytheseapps) - [Privacy/LetAppsAccessBackgroundSpatialPerception_UserInControlOfTheseApps](policy-csp-privacy.md#privacy-letappsaccessbackgroundspatialperception-userincontroloftheseapps) - [Privacy/LetAppsAccessCamera](policy-csp-privacy.md#privacy-letappsaccesscamera) -- [Privacy/LetAppsAccessCamera_ForceAllowTheseApps](policy-csp-privacy.md#privacy-letappsaccesscamera-forceallowtheseapps) -- [Privacy/LetAppsAccessCamera_ForceDenyTheseApps](policy-csp-privacy.md#privacy-letappsaccesscamera-forcedenytheseapps) -- [Privacy/LetAppsAccessCamera_UserInControlOfTheseApps](policy-csp-privacy.md#privacy-letappsaccesscamera-userincontroloftheseapps) -- [Privacy/LetAppsAccessGazeInput](policy-csp-privacy.md#privacy-letappsaccessgazeinput) -- [Privacy/LetAppsAccessGazeInput_ForceAllowTheseApps](policy-csp-privacy.md#privacy-letappsaccessgazeinput-forceallowtheseapps) -- [Privacy/LetAppsAccessGazeInput_ForceDenyTheseApps](policy-csp-privacy.md#privacy-letappsaccessgazeinput-forcedenytheseapps) -- [Privacy/LetAppsAccessGazeInput_UserInControlOfTheseApps](policy-csp-privacy.md#privacy-letappsaccessgazeinput-userincontroloftheseapps) +- [Privacy/LetAppsAccessCamera_ForceAllowTheseApps](policy-csp-privacy.md#privacy-letappsaccesscamera-forceallowtheseapps) 7 +- [Privacy/LetAppsAccessCamera_ForceDenyTheseApps](policy-csp-privacy.md#privacy-letappsaccesscamera-forcedenytheseapps) 7 +- [Privacy/LetAppsAccessCamera_UserInControlOfTheseApps](policy-csp-privacy.md#privacy-letappsaccesscamera-userincontroloftheseapps) 7 +- [Privacy/LetAppsAccessGazeInput](policy-csp-privacy.md#privacy-letappsaccessgazeinput) 7 +- [Privacy/LetAppsAccessGazeInput_ForceAllowTheseApps](policy-csp-privacy.md#privacy-letappsaccessgazeinput-forceallowtheseapps) 7 +- [Privacy/LetAppsAccessGazeInput_ForceDenyTheseApps](policy-csp-privacy.md#privacy-letappsaccessgazeinput-forcedenytheseapps) 7 +- [Privacy/LetAppsAccessGazeInput_UserInControlOfTheseApps](policy-csp-privacy.md#privacy-letappsaccessgazeinput-userincontroloftheseapps) 7 - [Privacy/LetAppsAccessLocation](policy-csp-privacy.md#privacy-letappsaccesslocation) - [Privacy/LetAppsAccessMicrophone](policy-csp-privacy.md#privacy-letappsaccessmicrophone) -- [Privacy/LetAppsAccessMicrophone_ForceAllowTheseApps](policy-csp-privacy.md#privacy-letappsaccessmicrophone-forceallowtheseapps) -- [Privacy/LetAppsAccessMicrophone_ForceDenyTheseApps](policy-csp-privacy.md#privacy-letappsaccessmicrophone-forcedenytheseapps) -- [Privacy/LetAppsAccessMicrophone_UserInControlOfTheseApps](policy-csp-privacy.md#privacy-letappsaccessmicrophone-userincontroloftheseapps) +- [Privacy/LetAppsAccessMicrophone_ForceAllowTheseApps](policy-csp-privacy.md#privacy-letappsaccessmicrophone-forceallowtheseapps) 7 +- [Privacy/LetAppsAccessMicrophone_ForceDenyTheseApps](policy-csp-privacy.md#privacy-letappsaccessmicrophone-forcedenytheseapps) 7 +- [Privacy/LetAppsAccessMicrophone_UserInControlOfTheseApps](policy-csp-privacy.md#privacy-letappsaccessmicrophone-userincontroloftheseapps) 7 - [Search/AllowSearchToUseLocation](policy-csp-search.md#search-allowsearchtouselocation) - [Security/RequireDeviceEncryption](policy-csp-security.md#security-requiredeviceencryption) - [Settings/AllowDateTime](policy-csp-settings.md#settings-allowdatetime) @@ -92,7 +92,18 @@ ms.date: 07/18/2019 - [Update/ScheduledInstallTime](policy-csp-update.md#update-scheduledinstalltime) - [Update/UpdateServiceUrl](policy-csp-update.md#update-updateserviceurl) - [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi.md#wifi-allowmanualwificonfiguration) -- [Wifi/AllowWiFi](policy-csp-wifi.md#wifi-allowwifi) +- [Wifi/AllowWiFi](policy-csp-wifi.md#wifi-allowwifi) 7 + + +Footnotes: + +- 1 - Added in Windows 10, version 1607. +- 2 - Added in Windows 10, version 1703. +- 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. +- 5 - Added in Windows 10, version 1809. +- 6 - Added in Windows 10, version 1903. +- 7 - Added in the next major release of Windows 10. ## Related topics [Policy CSP](policy-configuration-service-provider.md) \ No newline at end of file From 7d8440a5ab5d7d2cd5bdcf50f1897c3a1da581e3 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 5 May 2020 17:21:02 -0700 Subject: [PATCH 044/177] Added policy timeline --- .../mdm/policy-csp-restrictedgroups.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/windows/client-management/mdm/policy-csp-restrictedgroups.md b/windows/client-management/mdm/policy-csp-restrictedgroups.md index 8053b57d73..8f1b817cf8 100644 --- a/windows/client-management/mdm/policy-csp-restrictedgroups.md +++ b/windows/client-management/mdm/policy-csp-restrictedgroups.md @@ -154,6 +154,19 @@ The member SID can be a user account or a group in AD, Azure AD, or on the local +## Policy timeline + +The behavior of this policy setting differs in different Windows 10 versions. For Windows 10, version 1809 through version 1909, you can use name in `` and SID in ``. For the latest release of Windows 10, you can use name or SID for both the elements as described in this topic. + +The following table provides the timeline of this policy setting and describes its behavior in different Windows 10 versions: + +| Windows 10 version | Policy behavior | +| ------------------ | --------------- | +|Windows 10, version 1803 | Added the RestrictedGroups policy setting in Windows 10, version 1803.
    XML accepts group and member only by name.
    Supports configuring the administrators group using the group name.
    Expects member name to be in the account name format. | +| Windows 10, version 1809
    Windows 10, version 1903
    Windows 10, version 1909 | Supports configuring any local group.
    `` accepts only name.
    `` accepts a name or an SID.
    This is useful when you want to ensure a certain local group always has a well known SID as member. | +| The latest release of Windows 10 | Behaves as described in this topic.
    Accepts name or SID for group and members and translates as appropriate. | + +
    From 614666dda642189ce370fbd6ca364a8af4c0d125 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 6 May 2020 11:26:06 -0700 Subject: [PATCH 045/177] More updates --- .../mdm/policy-csp-restrictedgroups.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-restrictedgroups.md b/windows/client-management/mdm/policy-csp-restrictedgroups.md index 8f1b817cf8..50b2d50015 100644 --- a/windows/client-management/mdm/policy-csp-restrictedgroups.md +++ b/windows/client-management/mdm/policy-csp-restrictedgroups.md @@ -8,14 +8,14 @@ ms.technology: windows author: manikadhiman ms.localizationpriority: medium ms.date: 04/07/2020 - ms.reviewer: manager: dansimp --- # Policy CSP - RestrictedGroups - +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here.
    @@ -154,15 +154,15 @@ The member SID can be a user account or a group in AD, Azure AD, or on the local -## Policy timeline +### Policy timeline -The behavior of this policy setting differs in different Windows 10 versions. For Windows 10, version 1809 through version 1909, you can use name in `` and SID in ``. For the latest release of Windows 10, you can use name or SID for both the elements as described in this topic. +The behavior of this policy setting differs in different Windows 10 versions. For Windows 10, version 1809 through version 1909, you can use name in `` and SID in ``. For the latest release of Windows 10, you can use name or SID for both the elements, as described in this topic. -The following table provides the timeline of this policy setting and describes its behavior in different Windows 10 versions: +The following table describes how this policy setting behaves in different Windows 10 versions: | Windows 10 version | Policy behavior | | ------------------ | --------------- | -|Windows 10, version 1803 | Added the RestrictedGroups policy setting in Windows 10, version 1803.
    XML accepts group and member only by name.
    Supports configuring the administrators group using the group name.
    Expects member name to be in the account name format. | +|Windows 10, version 1803 | Added this policy setting.
    XML accepts group and member only by name.
    Supports configuring the administrators group using the group name.
    Expects member name to be in the account name format. | | Windows 10, version 1809
    Windows 10, version 1903
    Windows 10, version 1909 | Supports configuring any local group.
    `` accepts only name.
    `` accepts a name or an SID.
    This is useful when you want to ensure a certain local group always has a well known SID as member. | | The latest release of Windows 10 | Behaves as described in this topic.
    Accepts name or SID for group and members and translates as appropriate. | From ca070af5b95deee11433481718d14bf60df61407 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Wed, 6 May 2020 16:13:52 -0700 Subject: [PATCH 046/177] USB-C devices MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Request from Dan, “NOTE: Some mobile devices with USB-C connections present themselves to the HoloLens as ethernet adaptors, and therefore could be used in a tethering configuration, starting with the 20H1 OS. USB LTE modems that require a separate driver, and/or application installed for configuration are not supported.” --- devices/hololens/hololens-connect-devices.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/devices/hololens/hololens-connect-devices.md b/devices/hololens/hololens-connect-devices.md index 7926dab884..62ec90d0f2 100644 --- a/devices/hololens/hololens-connect-devices.md +++ b/devices/hololens/hololens-connect-devices.md @@ -63,6 +63,9 @@ HoloLens 2 supports the following classes of USB-C devices: - Wired keyboard - Combination PD hubs (USB A plus PD charging) +> [!NOTE] +> Some mobile devices with USB-C connections present themselves to the HoloLens as ethernet adaptors, and therefore could be used in a tethering configuration, starting with the 20H1 OS. USB LTE modems that require a separate driver, and/or application installed for configuration are not supported + ## Connect to Miracast To use Miracast, follow these steps: From 264706df1a857ae0c4ceab0624cc76dc623c7e5e Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 7 May 2020 13:35:50 -0700 Subject: [PATCH 047/177] Added dev feedback --- windows/client-management/mdm/policy-csp-restrictedgroups.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-restrictedgroups.md b/windows/client-management/mdm/policy-csp-restrictedgroups.md index 50b2d50015..a6b2c093d8 100644 --- a/windows/client-management/mdm/policy-csp-restrictedgroups.md +++ b/windows/client-management/mdm/policy-csp-restrictedgroups.md @@ -145,8 +145,7 @@ Here's an example: ``` where: - `` contains the local group SID or group name to configure. If an SID is specified here, the policy uses the [LookupAccountName](https://docs.microsoft.com/windows/win32/api/winbase/nf-winbase-lookupaccountnamea) API to get the local group name. For best results, use names for ``. -- `` contains the members to add to the group in ``. If a name is specified here, the policy will try to get the corresponding SID using the [LookupAccountSID](https://docs.microsoft.com/windows/win32/api/winbase/nf-winbase-lookupaccountsida) API. (**Note:** This doesn't query Azure AD). For best results, use SID for ``. As groups can be renamed and account name lookups are limited to AD/local machine, hence SID is the best and most deterministic way to configure. -The member SID can be a user account or a group in AD, Azure AD, or on the local machine. Membership is configured using the [NetLocalGroupSetMembers](https://docs.microsoft.com/windows/win32/api/lmaccess/nf-lmaccess-netlocalgroupsetmembers) API. +- `` contains the members to add to the group in ``. If a name is specified here, the policy will try to get the corresponding SID using the [LookupAccountSID](https://docs.microsoft.com/windows/win32/api/winbase/nf-winbase-lookupaccountsida) API. For best results, use SID for ``. The member SID can be a user account or a group in AD, Azure AD, or on the local machine. Membership is configured using the [NetLocalGroupSetMembers](https://docs.microsoft.com/windows/win32/api/lmaccess/nf-lmaccess-netlocalgroupsetmembers) API. - In this example, `Group1` and `Group2` are local groups on the device being configured. > [!Note] @@ -179,5 +178,6 @@ Footnotes: - 4 - Added in Windows 10, version 1803. - 5 - Added in Windows 10, version 1809. - 6 - Added in Windows 10, version 1903. +- 7 - Added in the next major release of Windows 10. From d9ad5352f74402c6fefc754894c32a94423d78bd Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 7 May 2020 13:59:34 -0700 Subject: [PATCH 048/177] minor update --- windows/client-management/mdm/policy-csp-restrictedgroups.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-restrictedgroups.md b/windows/client-management/mdm/policy-csp-restrictedgroups.md index a6b2c093d8..1f05b67536 100644 --- a/windows/client-management/mdm/policy-csp-restrictedgroups.md +++ b/windows/client-management/mdm/policy-csp-restrictedgroups.md @@ -178,6 +178,5 @@ Footnotes: - 4 - Added in Windows 10, version 1803. - 5 - Added in Windows 10, version 1809. - 6 - Added in Windows 10, version 1903. -- 7 - Added in the next major release of Windows 10. From 5d0dce69cfd218b6f76cddb0037a3d98bf5dd22b Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Fri, 8 May 2020 08:37:44 -0700 Subject: [PATCH 049/177] remove outdated article and redirect --- .openpublishing.redirection.json | 5 + ...-by-step-surface-deployment-accelerator.md | 410 ------------------ 2 files changed, 5 insertions(+), 410 deletions(-) delete mode 100644 devices/surface/step-by-step-surface-deployment-accelerator.md diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index d7b9c5f5dd..c4b5a78243 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -15877,6 +15877,11 @@ "redirect_document_id": false }, { +"source_path": "surface/step-by-step-surface-deployment-accelerator.md", +"redirect_url": "https://docs.microsoft.com/surface/microsoft-surface-deployment-accelerator", +"redirect_document_id": true + }, +{ "source_path": "windows/security/threat-protection/windows-defender-antivirus/shadow-protection.md", "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode", "redirect_document_id": true diff --git a/devices/surface/step-by-step-surface-deployment-accelerator.md b/devices/surface/step-by-step-surface-deployment-accelerator.md deleted file mode 100644 index e10b8209c9..0000000000 --- a/devices/surface/step-by-step-surface-deployment-accelerator.md +++ /dev/null @@ -1,410 +0,0 @@ ---- -title: Step by step Surface Deployment Accelerator (Surface) -description: This article shows you how to install Microsoft Surface Deployment Accelerator (SDA), configure a deployment share for the deployment of Windows to Surface devices, and perform a deployment to Surface devices. -ms.assetid: A944FB9C-4D81-4868-AFF6-B9D1F5CF1032 -ms.reviewer: -manager: laurawi -ms.localizationpriority: medium -keywords: deploy, configure -ms.prod: w10 -ms.mktglfcycl: deploy -ms.pagetype: surface, devices -ms.sitesec: library -author: coveminer -ms.author: v-jokai -ms.topic: article -ms.date: 10/31/2019 ---- - -# Step by step: Surface Deployment Accelerator - -This article shows you how to install Microsoft Surface Deployment Accelerator (SDA), configure a deployment share for the deployment of Windows to Surface devices, and perform a deployment to Surface devices. This article also contains instructions on how to perform these tasks without an Internet connection or without support for Windows Deployment Services network boot (PXE). - -> [!NOTE] -> SDA is not supported on Surface Pro 7, Surface Pro X, and Surface Laptop 3. For more information refer to [Deploy Surface devices](deploy.md). - -## How to install Surface Deployment Accelerator - -For information about prerequisites and instructions for how to download and install SDA, see [Microsoft Surface Deployment Accelerator](microsoft-surface-deployment-accelerator.md). - -1. Download SDA, which is included in [Surface Tools for IT](https://www.microsoft.com/download/details.aspx?id=46703) on the Microsoft Download Center. - -2. Run the SDA installation file, named **Surface\_Deployment\_Accelerator\_*xxxx*.msi**, where *xxxx* is the current version number. - -3. Accept the End User License Agreement (EULA) by selecting the check box, and then click **Install**, as shown in Figure 1. - - ![Surface Deployment Accelerator setup](images/sdasteps-fig1.png "Surface Deployment Accelerator setup") - - *Figure 1. SDA setup* - -4. Click **Finish** to complete the installation of SDA. - -The tool installs in the SDA program group, as shown in Figure 2. - -![SDA program group and icon](images/sdasteps-fig2.png "SDA program group and icon") - -*Figure 2. The SDA program group and icon* - ->[!NOTE] ->At this point, the tool has not yet prepared any deployment environment or downloaded any materials from the Internet. - -## Create a deployment share - -The following steps show you how to create a deployment share for Windows 10 that supports Surface 3, Surface Pro 3, Surface Pro 4, Surface Book, the Surface Firmware Tool, the Surface Asset Tag Tool, and Office 365. As you follow the steps below, make the selections that are applicable for your organization. For example, you could choose to deploy Windows 10 to Surface Book only, without any of the Surface apps. - ->[!NOTE] ->SDA lets you create deployment shares for both Windows 8.1 and Windows 10 deployments, but you can only create a single deployment share at a time. Therefore, to create both Windows 8.1 and Windows 10 deployment shares, you will need to run the tool twice. - -1. Open the SDA wizard by double-clicking the icon in the **Surface Deployment Accelerator** program group on the Start screen. - -2. On the **Welcome** page, click **Next** to continue. - -3. On the **Verify System** page, the SDA wizard verifies the prerequisites required for an SDA deployment share. This process also checks for the presence of the Windows Assessment and Deployment Kit (Windows ADK) for Windows 10 and the Microsoft Deployment Toolkit (MDT) 2013 Update 2. If these tools are not detected, they are downloaded and installed automatically. Click **Next** to continue. - - >[!NOTE] - >As of SDA version 1.96.0405, SDA will install only the components of the Windows ADK that are required for deployment, as follows: - > * Deployment tools - > * User State Migration Tool (USMT) - > * Windows Preinstallation Environment (WinPE) - - > [!NOTE] - > As of SDA version 1.96.0405, SDA will install and use MDT 2013 Update 2. Earlier versions of SDA are compatible only with MDT 2013 Update 1. - -4. On the **Windows 8.1** page, to create a Windows 10 deployment share, do not select the **Would you like to support Windows 8.1** check box. Click **Next** to continue. - -5. On the **Windows 10** page, to create a Windows 10 deployment share, select the **Would you like to support Windows 10** check box. Supply the following information before you click **Next** to continue: - - - **Configure Deployment Share for Windows 10** - - - **Local Path** – Specify or browse to a location on the local storage device where you would like to store the deployment share files for the Windows 10 SDA deployment share. For example, **E:\\SDAWin10\\** is the location specified in Figure 3. - - - **Share Name** – Specify a name for the file share that will be used to access the deployment share on this server from the network. For example, **SDAWin10** is the deployment share name shown in Figure 3. The local path folder is automatically shared by the SDA scripts under this name to the group **Everyone** with a permission level of **Full Control**. - - - **Windows 10 Deployment Services** - - - Select the **Import boot media into the local Windows Deployment Service** check box if you would like to boot your Surface devices from the network to perform the Windows deployment. Windows Deployment Services must be installed and configured to respond to PXE boot requests. See [Windows Deployment Services Getting Started Guide for Windows Server 2012](https://technet.microsoft.com/library/jj648426.aspx) for more information about how to configure Windows Deployment Services for PXE boot. - - - **Windows 10 Source Files** - - - **Local Path** – Specify or browse to the root directory of Windows 10 installation files. If you have an ISO file, mount it and browse to the root of the mounted drive. You must have a full set of source files, not just **Install.wim**. - - ![Specify Windows 10 deployment share options](images/sdasteps-fig3.png "Specify Windows 10 deployment share options") - - *Figure 3. Specify Windows 10 deployment share options* - -6. On the **Configure** page, select the check box next to each device or app that you want to include in your deployment share. Note that Surface Pro 4 and Surface Book only support Windows 10 and are not available for the deployment of Windows 8.1. The Surface Firmware Tool is only applicable to Surface 3 and Surface Pro 3 and cannot be selected unless Surface 3 or Surface Pro 3 drivers are selected, as shown in Figure 4. Click **Next** to continue. - - ![Firmware tool selection](images/sdasteps-fig4-select.png "Firmware tool selection") - - *Figure 4. Selecting Surface Firmware Tool requires Surface Pro 3 drivers* - - >[!NOTE] - >You cannot select both Surface 3 and Surface 3 LTE models at the same time. - -7. On the **Summary** page confirm your selections and click **Finish** to begin the creation of your deployment share. The process can take several minutes as files are downloaded, the tools are installed, and the deployment share is created. While the SDA scripts are creating your deployment share, an **Installation Progress** window will be displayed, as shown in Figure 5. A typical SDA process includes: - - - Download of Windows ADK - - - Installation of Windows ADK - - - Download of MDT - - - Installation of MDT - - - Download of Surface apps and drivers - - - Creation of the deployment share - - - Import of Windows installation files into the deployment share - - - Import of the apps and drivers into the deployment share - - - Creation of rules and task sequences for Windows deployment - - ![The installation progress window](images/sdasteps-fig5-installwindow.png "The installation progress window") - - *Figure 5. The Installation Progress window* - - ### Optional: Workaround for Webclient exception - - You may see this error message while installing the latest version of ADK or MDT: _An exception occurred during a WebClient request._ This is due to incompatibility between the Surface Deployment Accelerator (SDA) and Background Intelligent Transfer Service (BITS). To work around this issue, do the following. - - In the two PowerShell scripts: - - ```PowerShell - %ProgramFiles%\Microsoft\Surface\Deployment Accelerator\Data\PowerShell\Install-MDT.ps1 - %ProgramFiles%\Microsoft\Surface\Deployment Accelerator\Data\PowerShell\INSTALL-WindowsADK.ps1 - ``` - - Edit the $BITSTransfer variable in the input parameters to $False as shown below: - - ```PowerShell - Param( - [Parameter( - Position=0, - Mandatory=$False, - HelpMessage="Download via BITS bool true/false" - )] - [string]$BITSTransfer = $False - ) - ``` - -8. When the SDA process completes the creation of your deployment share, a **Success** window is displayed. Click **Finish** to close the window. At this point your deployment share is now ready to perform a Windows deployment to Surface devices. - - ### Optional: Create a deployment share without an Internet connection - - If you are unable to connect to the Internet with your deployment server, or if you want to download the Surface drivers and apps separately, you can specify a local source for the driver and app files at the time of deployment share creation. On the **Configure** page of the SDA wizard, select the **Copy from a Local Directory** check box, as shown in Figure 6. The **Download from the Internet** check box will be automatically deselected. Enter the folder location where you have placed the driver and app files in the **Local Path** field, as shown in Figure 6. - - >[!NOTE] - >All of the downloaded driver and applications files must be located in the same folder. If a required driver or application file is missing from the selected folder when you click **Next**, a warning is displayed and the wizard will not proceed to the next step. - - >[!NOTE] - >The driver and app files do not need to be extracted from the downloaded .zip files. - - >[!NOTE] - >Including Office 365 in your deployment share requires an Internet connection and cannot be performed if you use local files. - - ![Specify Surface driver and app files](images/sdasteps-fig6-specify-driver-app-files.png "Specify Surface driver and app files") - - *Figure 6. Specify the Surface driver and app files from a local path* - - >[!NOTE] - >The **Copy from a Local Directory** check box is only available in SDA version 1.90.0221 or later. - - ###     Optional: Prepare offline USB media - - You can use USB media to perform an SDA deployment if your Surface device is unable to boot from the network. For example, if you do not have a Microsoft Surface Ethernet Adapter or Microsoft Surface dock to facilitate network boot (PXE boot). The USB drive produced by following these steps includes a complete copy of the SDA deployment share and can be run on a Surface device without a network connection. - - >[!NOTE] - >The offline media files for the complete SDA deployment share are approximately 9 GB in size. Your USB drive must be at least 9 GB in size. A 16 GB USB drive is recommended. - - Before you can create bootable media files within the MDT Deployment Workbench or copy those files to a USB drive, you must first configure that USB drive to be bootable. Using [DiskPart](https://go.microsoft.com/fwlink/p/?LinkId=761073), create a partition, format the partition as FAT32, and set the partition to be active. To run DiskPart, open an administrative PowerShell or Command Prompt window, and then run the following sequence of commands, as shown in Figure 7: - - 1. **diskpart** – Opens DiskPart to manage disks and partitions. - - 2. **list disk** – Displays a list of the disks available in your system; use this list to identify the disk number that corresponds with your USB drive. - - 3. **sel disk 2** – Selects your USB drive; use the number that corresponds with the disk in your system. - - 4. **clean** – Removes all configuration from your USB drive. - - >[!WARNING] - >This step will remove all information from your drive. Verify that your USB drive does not contain any needed data before you perform the **clean** command. - - 5. **create part pri** – Creates a primary partition on the USB drive. - - 6. **format fs=fat32 quick** – Formats the partition with the FAT32 file system, performing a quick format. FAT32 is required to boot the device from UEFI systems like Surface devices. - - 7. **assign** – Assigns the next available drive letter to the newly created FAT32 volume. - - 8. **active** – Sets the partition to be active, which is required to boot the volume. - - 9. **exit** – Exits DiskPart, after which you can close the PowerShell or Command Prompt window. - - ![Use DiskPart to prepare a USB drive for boot](images/sdasteps-fig7-diskpart.png "Use DiskPart to prepare a USB drive for boot") - - *Figure 7. Use DiskPart to prepare a USB drive for boot* - - >[!NOTE] - >You can format your USB drive with FAT32 from Disk Management, but you must still use DiskPart to set the partition as active for the drive to boot properly. - - After you have prepared the USB drive for boot, the next step is to generate offline media from the SDA deployment share. To create this media, follow these steps: - - 1. Open the **Deployment Workbench** from the **Microsoft Deployment Toolkit** group on your Start screen. - - 2. Expand the **Deployment Shares** node and the **Microsoft Surface Deployment Accelerator** deployment share. - - 3. Expand the folder **Advanced Configuration** and select the **Media** folder. - -4. Right-click the **Media** folder and click **New Media** as shown in Figure 8 to start the New Media Wizard. - - ![The Media folder of the SDA deployment share](images/sdasteps-fig8-mediafolder.png "The Media folder of the SDA deployment share") - - *Figure 8. The Media folder of the SDA deployment share* - - 5. On the **General Settings** page in the **Media path** field, enter or browse to a folder where you will create the files for the new offline media. See the example **E:\\SDAMedia** in Figure 9. Leave the default profile **Everything** selected in the **Selection profile** drop-down menu, and then click **Next**. - - ![Specify a location and selection profile for your offline media](images/sdasteps-fig9-location.png "Specify a location and selection profile for your offline media") - - *Figure 9. Specify a location and selection profile for your offline media* - - 6. On the **Summary** page verify your selections, and then click **Next** to begin creation of the media. - - 7. A **Progress** page is displayed while the media is created. - - 8. On the **Confirmation** page, click **Finish** to complete creation of the media. - - 9. Right-click the **Microsoft Surface Deployment Accelerator** deployment share folder, click **Properties**, and then click the **Rules** tab as shown in Figure 10. - - ![Rules of the SDA deployment share](images/sdasteps-fig10-rules.png "Rules of the SDA deployment share") - - *Figure 10. Rules of the SDA deployment share* - - 10. Use your mouse to highlight all of the text displayed in the text box of the **Rules** tab, and then press **Ctrl+C** to copy the text. - - 11. Click **OK** to close the **Microsoft Surface Deployment Accelerator** deployment share properties. - - 12. Right-click the newly created **MEDIA001** item in the **Media** folder, click **Properties**, and then click the **Rules** tab. - - 13. Use your mouse to highlight all of the text displayed in the text box of the **Rules** tab, and then press **Ctrl+V** to paste the text you copied from the **Microsoft Surface Deployment Accelerator** deployment share rules. - - 14. Right-click the **Microsoft Surface Deployment Accelerator** deployment share folder, click **Properties**, and then click the **Rules** tab again. Click the **Bootstrap.ini** button to open Bootstrap.ini in Notepad. - - 15. Press **Ctrl+A** to select all of the text in the window, and then press **Ctrl+C** to copy the text. - - 16. Close Bootstrap.ini and click **OK** in **Microsoft Surface Deployment Accelerator** deployment share properties to close the window. - - 17. Right-click the newly created **MEDIA001** item in the **Media** folder, click **Properties**, and then click the **Rules** tab again. Click the **Bootstrap.ini** button to open Bootstrap.ini in Notepad. - - 18. Press **Ctrl+A** to select all of the text in the window, then press **Ctrl+V** to paste the text from the SDA deployment share Bootstrap.ini file. - - 19. Delete the following lines from the Bootstrap.ini as shown in Figure 11, and then save the file: - - ```PowerShell - UserID= - UserDomain= - UserPassword= - DeployRoot=\\SDASERVER\SDAWin10 - UserID= - UserDomain= - UserPassword= - ``` - - ![The Bootstrap.ini file](images/sdasteps-fig11-bootstrap.ini.png "The Bootstrap.ini file") - - *Figure 11. The Bootstrap.ini file of MEDIA001* - - 20. Close Bootstrap.ini and click **OK** in **MEDIA001** deployment share properties to close the window. - - 21. In the **Deployment Workbench** under the **Media** folder, right-click the newly created **MEDIA001** and click **Update Media Content**, as shown in Figure 12. This will update the media files with the content of the **Microsoft Surface Deployment Accelerator** deployment share. - - ![Select the Update Media Content option](images/sdasteps-fig12-updatemedia.png "Select the Update Media Content option") - - *Figure 12. Select the Update Media Content option* - - 22. The **Update Media Content** window is displayed and shows the progress as the media files are created. When the process completes, click **Finish.** - - The final step is to copy the offline media files to your USB drive. - - 1. In File Explorer, open the path you specified in Step 5, for example **E:\\SDAMedia**. - - 2. Copy all of the files from the Content folder to the root of the USB drive. - - Your USB drive is now configured as bootable offline media that contains all of the resources required to perform a deployment to a Surface device. - -## SDA task sequences - -The SDA deployment share is configured with all of the resources required to perform a Windows deployment to a Surface device. These resources include Windows source files, image, Surface drivers, and Surface apps. The deployment share also contains two pre-configured task sequences, as shown in Figure 13. These task sequences contain the steps required to perform a deployment to a Surface device using the default Windows image from the installation media or to create a reference image complete with Windows updates and applications. To learn more about task sequences, see [MDT 2013 Update 2 Lite Touch components](https://technet.microsoft.com/itpro/windows/deploy/mdt-2013-lite-touch-components). - -![Task sequences in the Deployment Workbench](images/sdasteps-fig13-taskseq.png "Task sequences in the Deployment Workbench") - -*Figure 13. Task sequences in the Deployment Workbench* - -### Deploy Microsoft Surface - -The **1 – Deploy Microsoft Surface** task sequence is used to perform a complete deployment of Windows to a Surface device. This task sequence is pre-configured by the SDA wizard and is ready to perform a deployment as soon as the wizard completes. Running this task sequence on a Surface device deploys the unaltered Windows image copied directly from the Windows installation media you specified in the SDA wizard, along with the Surface drivers for your device. The drivers for your Surface device will be automatically selected through the pre-configured deployment share rules. - -When you run the task sequence, you will be prompted to provide the following information: - -- A computer name - -- Your domain information and the credentials required to join the domain - -- A product key, if one is required - - >[!NOTE] - >If you are deploying the same version of Windows as the version that came on your device, no product key is required. - -- A time zone - -- An Administrator password - -The Surface apps you specified on the **Configure** page of the SDA wizard are automatically installed when you run this task sequence on a Surface device. - -### Create Windows reference image - -The **2 – Create Windows Reference Image** task sequence is used to perform a deployment to a virtual machine for the purpose of capturing an image complete with Windows Updates for use in a deployment to Surface devices. By installing Windows Updates in your reference image, you eliminate the need to download and install those updates on each deployed Surface device. The deployment process with an up-to-date image is significantly faster and more efficient than performing a deployment first and then installing Windows Updates on each device. - -Like the **1 – Deploy Microsoft Surface** task sequence, the **2 – Create Windows Reference Image** task sequence performs a deployment of the unaltered Windows image directly from the installation media. Creation of a reference image should always be performed on a virtual machine. Using a virtual machine as your reference system helps to ensure that the resulting image is compatible with different hardware configurations. - ->[!NOTE] ->Using a virtual machine when you create a reference image for Windows deployment is a recommended practice for performing Windows deployments with Microsoft deployment tools including the Microsoft Deployment Toolkit and Microsoft Endpoint Configuration Manager. These Microsoft deployment technologies use the hardware agnostic images produced from a virtual machine and a collection of managed drivers to deploy to different configurations of hardware. For more information, see [Deploy a Windows 10 image using MDT 2013 Update 2](https://technet.microsoft.com/itpro/windows/deploy/deploy-a-windows-10-image-using-mdt). - -In addition to the information required by the **1 – Deploy Microsoft Surface** task sequence, you will also be prompted to capture an image when you run this task sequence on your reference virtual machine. The **Location** and **File name** fields are automatically populated with the proper information for your deployment share. All that you need to do is select the **Capture an image of this reference computer** option when you are prompted on the **Capture Image** page of the Windows Deployment Wizard. - -## Deployment to Surface devices - - -To perform a deployment from the SDA deployment share, follow this process on the Surface device: - -1. Boot the Surface device to MDT boot media for the SDA deployment share. You can do this over the network by using PXE boot, or from a USB drive as described in the [Optional: Prepare offline USB media](#optional) section of this article. - -2. Select the deployment share for the version of Windows you intend to deploy and enter your credentials when you are prompted. - -3. Select the task sequence you want to run, usually the **1 – Deploy Microsoft Surface** task sequence. - -4. Address the task sequence prompts to pick applications, supply a password, and so on. - -5. The task sequence performs the automated deployment using the options specified. - -### Boot the Surface device from the network - -To boot the Surface device from the network, the Microsoft Surface Deployment Accelerator wizard must have been run on a Windows Server 2012 R2 or later environment that was configured with the Windows Deployment Services (WDS). WDS must have been configured to respond to network boot (PXE boot) requests and the boot files must have been imported into WDS. The SDA wizard will import these file automatically if the **Import boot media into the local Windows Deployment Service** check box was selected on the page for the version of Windows you intend to deploy. - -To boot the Surface device from the network, you must also use a Microsoft Surface Ethernet Adapter or the Ethernet port on a Microsoft Surface Dock. Third-party Ethernet adapters are not supported for network boot (PXE boot). A keyboard is also required. Both the Microsoft Surface Type Cover and keyboards connected via USB to the device or dock are supported. - -To instruct your Surface device to boot from the network, start with the device powered off and follow these steps: - -1. Press and hold the **Volume Down** button, press and release the **Power** button. Continue holding the **Volume Down** button until the device has begun to boot from the network. - -2. Press **Enter** when prompted by the dialog on the screen. This prompt indicates that your device has found the WDS PXE server over the network. - -3. If you have configured more than one deployment share on this device, you will be prompted to select between the boot images for each deployment share. For example, if you created both a Windows 10 and a Windows 8.1 deployment share, you will be prompted to choose between these two options. - -4. Enter the domain credentials that you use to log on to the server where SDA is installed when you are prompted, as shown in Figure 14. - - ![Prompt for credentials to the deployment share](images/sdasteps-fig14-credentials.png "Prompt for credentials to the deployment share") - - *Figure 14. The prompt for credentials to the deployment share* - -5. The Windows Deployment Wizard will start from the deployment share to walk you through the deployment process. - -### Alternatively boot the devices from the USB stick - -To boot a device from the USB stick: - -1. Press and hold the **Volume Down** button, press and release the **Power** button. Continue holding the **Volume Down** button until the device has begun to boot from the USB drive. - -2. The Windows Deployment Wizard will start from the deployment share to walk you through the deployment process. - -### Run the Deploy Microsoft Surface task sequence - -To run the Deploy Microsoft Surface task sequence: - -1. On the **Task Sequence** page, select the **1 – Deploy Microsoft Surface** task sequence as shown in Figure 15, and then click **Next.** - - ![Select the task sequence](images/sdasteps-fig15-deploy.png "Select the task sequence") - - *Figure 15. Select the 1 – Deploy Microsoft Surface task sequence* - -2. On the **Computer Details** page, type a name for the Surface device in the **Computer Name** box. In the **Join a domain** section, type your domain name and credentials as shown in Figure 16, and then click **Next**. - - ![Computer name and domain credentials](images/sdasteps-fig16-computername.png "Computer name and domain credentials") - - *Figure 16. Enter the computer name and domain information* - -3. On the **Product Key** page, keep the **No product key is required** check box selected if you are deploying the same version and edition of Windows to your Surface devices as they came with from the factory. If you are deploying a different version or edition of Windows to the device, such as Windows Enterprise, select the licensing option that is applicable to your scenario. - -4. On the **Locale and Time** page, select your desired **Language Settings** and **Time Zone**, and then click **Next.** - -5. On the **Administrator Password** page, type a password for the local Administrator account on the Surface device, and then click **Next.** - -6. On the **BitLocker** page, select the **Enable BitLocker** option along with your desired configuration of BitLocker protectors if you want to encrypt the device. Otherwise, keep the **Do not enable BitLocker for this computer** check box selected, and then click **Next.** - -7. On the **Ready** page, verify your selections and then click **Begin** to start the automated deployment to this device. The deployment will not require user interaction again. The Windows Deployment Wizard will close and an **Installation Progress** window is displayed to show progress of the task sequence as the image is applied and applications are installed (Figure 17). - - ![Installation progress window](images/sdasteps-fig17-installprogresswindow.png "Installation progress window") - - *Figure 17. The Installation Progress window* - -8. When the deployment task sequence completes, a **Success** window is displayed. Click **Finish** to complete the deployment and begin using your Surface device. From 227c3fc575a8d520cb21fde983d9f0309982e4df Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Fri, 8 May 2020 15:45:16 -0700 Subject: [PATCH 050/177] Adding DarkMode picture --- hololens-darkmode-tiled-picture.jpg | Bin 0 -> 58935 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 hololens-darkmode-tiled-picture.jpg diff --git a/hololens-darkmode-tiled-picture.jpg b/hololens-darkmode-tiled-picture.jpg new file mode 100644 index 0000000000000000000000000000000000000000..bfa3ee78afa4715210fcaf417c6760625a1dd8de GIT binary patch literal 58935 zcmeFZdpuP8_c%OKiINH_#hg+}PB|x}3$r^(q9jyGF{i5}sZ{QEC6q4HO%7s;B#Egc zB}}L!G44VcLox1y!8VsY&)P$`^Esd2_w#+e-{*Nfe>~?T?b+}5dawKYz1DiKk$jLe zkS1BKu~Fwk94-8^M0)j3XlI$>9-zfVVU6X;XQKLu8j+P_nk{RU*KeCfY zkD2xR*eQS5$n89$JbUq}aVo2>+CzBA8*e*77K8g6bYhy-IvD1m-%HVr7_nOY>pLwlhw2;f*?AJzP z-5OuV?Q09Ky^o}ojHS`d>D$<@ah=Cx;#x{usyu7CLPyg6A-;Ei^gsrsdZjwWU(?^& zKZW-H5B|@%(H%#yi{1jfjWCbcl-cIzQ8MPf|CT--A$QaPe^cvQa;0V}B%A+*pLcsH zx35}~)Gd>=s^61&cJY18U3zCrm74s2M|u-nsn@fA!Ss0vIf854$iZ`d7V{Vf&kaQU zdQkaoeJk^`gp}Rxv()EV#8KOG$~R~A(6eo=H}A<{yrg6Hh%Cz8*@NOFQwiyHsf47^ z(%>$hK+%(sUXDYtj86RhYYB-Jr{`)u#HugQOT0?8Z(xaZnWw1y->^ani8M<>YUD~t zL7qGk3vgcH<3l85DDpgBEoSL zjgpXVhrFRBXtZxk6{M8md7 zNU0K%ctWsIK)(ji7ZU5m1Cs7S3R+Uogo>u-5#)*^ z&Pz!2Kl($d#Q|-oiw&R|MCGMONX|^bbYpi3>GTKS0Se^SG~vP4GbE&jrvwTe@2Mhz z62X#BdYuc9CrP{)xGKA&6VTMYgz~l##8?wN5iXOEN?1({(NrmWe_XF+c)egmx*j5! zE;(m+iI;*pcLPV=MmTDX*;7*o#S>x-MkJ`$@!nh{Ag6`&(O)37n@|^f4q2p2KZyYF z@^8R%pJTEFi$N2%kLZgQ=!tdOxbTPsX*r%BM-@IP@ zUl{BDDli6dO?SF+4jwuwEC8ZZxsF zgfz^@tOv+VaVuUHC$wb33yzaWO+vZ_qDFW!I&|JikvcpMhN3)~`NMX4Yv3X7F~}5J z(mEH2CV*Uhd7gM6u0sHh!zYo?kolTD*0@akuz^Yu8yb<*DKY?@4FK8am^?)(c&%?w zAXucOL`>i#7{*5i<;Y;`B&0u>Q_u$WO(^fA-+bwCgr^ADyh2&S$Oxs#;3%LkgW1D) z7BSuq;f%qk@I;>kMx|~yjQ(xkt>`i_NJ6SOtbEZg%n3}cej`~VYe`ISg$WmZB_x@v zBPQr3E07yThi;9n3;+Wy+3f_x?zxNRD)HL!(-~}BcJ8otNkx9ETWYUEy%N$HHBPm7 z%<*o~SSf6(!2_96>uSlzCs9MFeAQ|uPZd<; z8{fxRBGSPDU>@iyYV9VhJ87u>hXG?PBl9`zlgC}({@U4p@#wNHa-sF&nkDY>;;8e~ zKb@-N__`YXRvMK7+rf>@en8Ko%)#pJrgrar22V~p8+bV8=aEBx6Ing4Fi7&>GDB(7&|^_#`}5pjy?fWe2jVA+%Ql!tR`XENMF(?nfHodt z(U_!RWYse<&N-HvogAOH-cRE2 zMzwr&fYBi#@mJJ}$EQ^!^?Bm*tmB{kR%1>0Covrl@udc|W`qTp*m-c3Ow%%wleV>o zlpjjE^C;%BhFNBq&+_~ySJQsEdUBy%>y>h@44+{3|Kuk>p@rWmsPxdjhW8sy-NMaIEUsGpchqC>O%BO2r23@$w^(>E^35sm8}gwxc_ST7y%xsWu< z{YpQ59{Y8*Ug80@<^J`;r8_Ga+3e5Rk>?Wf9&xOjJpKE}Ml~R(tJ%EE3D+iym&`D* zUIa(52+eB0a&6&$32Clh^p|)|2b+F41T6J+@6zagGvDv`-3*s1O_kKO9mx+C#<<>V z?#nLM&%Goebsh9+7)t0cu#X?tYkE2VCao~8Fj41bCCS6w0RFrLql7=CufOiyciP{4 za&~Nd^R>cTV-Ma*G|q6^KWf2(ub*CmhxxH56^I`^Q(ZkYZ_s z1CUPmI&psN>0H_(2zGm0uM6hO-obnuOxzpQLX(dr%OhpXYLj~Lxqasbn?3Q-mIBlK z7=yCxC0>UHUur5kuQ(6d0UPrS5z7OwxjMn&w6~fg_i#%+K#Zpc&(p=^v*@Tcfzx@$g(e-XF&}y zY9D&u(wCbY@G`>JB$IKbG8{7RiT-FDFCi(rsyU=29Ub(!*wh{Aja+Q2KGoD`?0hR> zuzMERP`d*=Ct?!Dy371?Stji)eFja8)S+C@w84F0{?yU`8v+8dJU}Imwb#af!Y$-fE>% zY=jw!61tc2cUJ!A&%4W8X)9GzbeFe1IRt;5q^t*5cO5Obi9zrs22O4`Q8~1;M;A9Y zF~#A`c57|`9A|UZ&2aBLYNla3G~xVuTZ73nuC9=f9!#_Te5Kjna3!QV>phdY^9O$FEAUEj>acEmvVa2u?Lw-~Vc;h{fJ zQS?|Taed;Nye&-5VQd9{<}R%9j#v-D&x8~IW{LmIlaS_|2Usr@XDB*I5tfhyQ{e0? z3x^><|A(iozez}izX&e8d$O4U3?SB>JF@N%5B-5kqN_^x-Y1z6;PM)}1yg|2QfNOu zZ2gT*zzY5E!lDDL1=c|62s?v$quR;=M4IlaN;T!@o>grH`N@!;f4E32-X_+}=Cr`r>M6UbjG7PeKaR2K~wH z#e8AlCz!H_k3N{@{`s>18fO!;V^m&dwgy^igo>t{tiaWnd8lCCHMF7NJGA26k;_sT zxLSUmwP2q9@T;I6UO9g50vlWGgSL;I0qS8B@y^5Cuo}%3V7pH{WO%27etjh}P|KwW<~)Xg zp|bTG9ZE$rt34$oMOj`re(qN`X6Qr3_UoNt^4CIkA}48B@&4$aev=GG8wp8dpqHyB zm}3WM5o?#w$1%CIBH&a=f>cFeWQ;F>guOX$wI4_!7BRvnYJvn6C-Xe;v!9umkq=Te z!KimFB~ial5Nz~ETAdKXnR z6Bwkf-;gez?84+7{w|ep8z(poDNg5Y$IoUmu@yeoaCOs$aPeddly~CmFk9y^8>b`~ zHjB3oKYNE5hH&ms#-XLk&w%E-uQXf4Y&P>@hzvq#gn3q6r8qC2s7EI0tt4DZ~gmlnEk1&9%VClVWx}^}u-p-zgmXe2;gSmU+)=UouN=@pj(*5;)ZMr2W2OWN6gewvZ4H6UD zVZa3K0NEkEZ$Wk^Q?7B|2ROe{QqmS9dEghS*do1dP#lYWgyK}(K%W@pS!uS7?=<3U z&%alPL?7%uz<5N)bQeSns2~3P`AS0NK3{SNDx{rf&bWrhJ_O8!_l1agRF{1&`C&2B z=&Z=92if|fPNPy>6kXnd3$qHV>uQbrdF~!nCc5VIF8d>KMNV#UpZwo-9rMjt=^1%2 zEX&p8sJdIFyThlAWBKk|(yLZ`Qs-LD z%e`v{+x$rW`ak`B*M#yHU&f&^H6>{c{B=+EGab`e)g`_Z@Qe0foz?JR)()eaVg3!B zhx|3E6WG+O$Mc48b}Cws&D_FlxWn#srXX9@nIyqpS2vSv7uYhLOk;O9eM=7Nd z!SwAV-Qdf(LMnvH%7?(_D9^n*_gyi%qraBUFVc~ac0PxUp({<;%aZCQ|3scxQg&Csarp08coVn zPGCbc%0(ON@+G9jR&0F2eV|DZ;jVcB;tf06j|7Xx#Ct_#nkKb-R&UAh56qibsA7KQ zQ@NNqsJnK}aqR-qas=Vf#N#|sY;mG-cQBRz3wV%*sz)fKjexRS%(Ey@T^;%9sT(hX z1lKH9rwh95g+_HASukl4V0oZlyDnP|Ej1xlPpUS7oZ%pmED@PPoKONL@Y5q?HSv`L z70jEh$P=k|Tuzuq66EcMAB~2g{4Slw5|7RN<2#h^k5VXt*Lp3>8J+GyWWE)F$YDOS zjx3LIBMDMC?bpFLe0eQ+pwlm~x$cME=%+_1F~9ilqV+|44zO|&!8{`r3?Ch60WUfi ze8p0qCguqJ`9E=E_zA6f23c#(+VH+;+CWPVY|L|kn=4R!_8rJd1U9sYr@UZ_G?)_7 zOFF}tf?)Un}xYR0*L{+t(gXp13}+Pli%=}yj%`TFjoy66~LikYqMcn zEuBlSqz-~H)qG;=ZkS4>(PkQ;kgWt-|6nUipNKTzWs@|$mKD?=XZFEN6*}*VXc{<_ zb+DlX!hxqzmj?Xs``EzNh4h}DuhT73-#4Rr#chSWgweeGoCYk zZXp|=$cDHlPKXlZMSUfY0Xgq8D5UsdOO~ei+W;6sxU-#*KO8O=Ko$mHDV3NKww9s< zWa)k-ONHIZ3WQjAT?z;h4qhU&KViie*a{*Md!EUo!f0uR+yjsZ)>8xNjsX&&0&qxg zNVZ*td9xP(h?x=lGuWe?(t7*@k!xK2M*6gk%uB|{6ZvXA5$P#V-eye{1x7QudwRlg z(sq0Waw+_V6sos&B_x2;UGsh4lOl zHc=>g#{5iVW|uMaUXuAbQgk$_ClRhK=+a9;8!@Gr`E|-un4%}rMQRH1VAfd#)A<`R zh2H;+42TYp0Y=?UZ&bq-2&q6-2dQD=!R&tk^X}h(*+%el!0juTWB@}*I~5fxGAE%t zJ9q;{CBiI-JpA?V+$jBm$>Kq}Op#Jb0?4}K3)q44E3!zXj?mTIbn#6l*9`-UIb8^1 zqjh|w_7Y`{o9W>VN&*$ah$yu0{5i(tC4-RMK}P7;DblJK3nY#Fi=>NP3wd&41$)@1 z%)i6S(34JS`Ed$tjX_6<5?N&vOEguAo79e+YRAfbpZNnOz)?V+&g35GX&F{_8c~EI z#A|8})vN74aHQmSViwX$5y0m525s>K9QLgox9@6Ow=(}b zPs^LGy*!f30}OOMA4y1G=ymPuVDXnUfCS5)oJyz{F9jb15jP7;eo{{{qPXHG6aHD> zN~JDz#YnMl*e5|D>K~j!?O4x$WC@fXg8X^rcrf*=R{`Y%udWR&QMd#o<%EvO{IpjzGX7WG*|86U3@h(oJD#PvDm9RC7nuO~Mlp+Qo z3@3z&LKz5(Qef-ZP`@PjE9A(DCpZ!N1X1Q4_H(szj{{z3_&La(r_6U55N4itjoNSb z9&a=$@(+u5^nWKRlF}AFQc)r%I*W9PQ>e74lt)xIhGc7BiVu`_XG3nnq(5L0nk&m= zKy7P2tTbOb;TL2)lWWxIE|Lun|2m=cQFd~>qa{;TS|$3n9U7`Zok0=!px=my#s(8b zpI)Wfm-xx1iu)BlVJHQG5{MC;ZNBd2V+d#X2W=7%YG5F(%v?5kpv1LZ(H67fK7QP9 zC$I01$2`B7Sv)-6|HO?!7gqzLl2~USbnH9))WPF=A9HpXx@@>GH1E*yE1x#sYf14L z-&S(ED^=EQPGS;8enFYV%BlO|{QBR|&Pubfx;wTUuiXC;{v!E>g9n@^AzfS6^Swww zZBi3mzevSD0Lk*yWHQgzeMp~9mXMft(bnQB=3M-Dv|w$egw#pHPhOX4r;hGQJ1deq zaKj#7ep+dngyeafd!u>@bFfa-U)erbKMQ|dVbsP{UXSkc$I;-9Qc6otmf!Q;jmhqo z=|aOB>G!w7S6Py;XP6BlBgc zd65rlO#~(x+A&>cuN8>MU7NdSx+))V_*AxI_S%8!MKNekhC9BzWw*GlbPmn9xC`IS zWM4fwHG@13a_85YXaYEV!?{2%#V5o1Zyzy;#HHUIk4kLbpEkCA=7xgOzR#OB#W?C2 zJQ-zjJxn{?JbcYbbF+0tGs}NSF~&lzVZQWdZ0VQs0ozUgT91&HC~8Ub;~<&&ZS>b! z4~Y;&npyl_iTI&75v6Eh9=>uyEd5J4+_v!`Di^RmR4gEgu&+uf&FK#%0drZYE>~}o z-#FeL^#KNF;rLg&iLSM7?@Kb(*j)P*;SxV!rN?6TA@F?d3TZpdn+(o)v!Wr1+GT9T zySAOz`FVi7?}ld(?xm>~+)D9W%^oiT&&R~tLzB*M>>8#KRS=7ZRl%m-P!#dhT!c9Z z>`(KVQ@Nl;b=m5ftAm@5S7LrEvg-IMM?HRH9>a;|prv^fuE zOmBCpC(@BIVH1vSDu9IK|2X1fVmd~m2o_C3VwWTQ7FX(3D4#Ju-#H*54dhEmD=ozk z5S+gDHAAUCTvOBQIgeYeVL%*@@<-pAxFj?(-|Bg#`;^*uwXQD`vp-LoH|Ud<;^n-R z_r74_qr0D4Q<)zxwP{3gWf!HA-?+~hEnF;Oc2-3n?n6`1!F#eqC{S-bG(Z)0(J(7A z?tcvz-dDqwEBRSVs_?d4S6^Lvzy9*W{cFZ=OPSXjd#>JmXvyr2a$soku)(t)qwM3{ z7?}*b1oLg0{`6p<9&DFgCKuU0rl`6jmPaZio`vi{HWD7x^a+ zIHttk!qB{W&8Ovt7uA)5t2~!KcCFo#WcZ}o&XhT*liK2mb}hHp8AHoGPk!3!w0=pX zY2AL*<*Lc%PhC##{lyXzB6{S>2Pnyt8fe)Rl7-7hgNeEZD{^y7M1f4#A5k=j~Htl_ZDNq-HfFHx7Zxmo6Y ze6Gq=qApmz?3OH1l=$ISXnZqKd61SNv})G8L&0^dAID7u>mh}PhQrWt_eLJ(-yurB zvio~mh4X7{WsNibUd;Sj--N;hTbSr#|6hOqCmL zN8g#Dp+=WtUv>_C5*2&FQ43Xe%=F)8V71N~FSZIv8{B<>el}*|PY{Z%}#-ZP%Yp zT`7{khO4kc4vEl4eqW~E{oH{q^;4qoeb$4e_-7rlgw!p5$5XH9kqb?us#>`&NkWeV z44f#~>(;^){AJfQ+uq~=rFLfUW%{f(@{@_--c93QVd3%A!W7JOGdg?vl7s#lP=I>3 z$NG6HhMXz`f(_V{+cGFo_qT4N7LB=a=WO_mN6do7THRKy+bV2AQbT6lOej9!6^O45 zNdM}6`m4>eho&%RgF70UEvOa;xiP^;Dw8L+f3_6WEs>CXBf58jwfk%dJMMVn8uF2` zth7ZKR@-Xp|E|ZXxcQA`ecILM$xE!CJ1QoV4sNf!e*f_1SO5JBd3Kug^**HJBipJs z$H8BlWO}J0l_-3D3pkwaR=U6=jZuJJp!V7tqCz;fKn>&xnq$HITNXANFgeQKePQl9(S4D@tozrWG;GV->v?tvBg6YAH+C45YIKX*$Fo9MK&a>7gr&?BX%fMJG3Dqz}yPE z{U>t!MCGA9WZV0PkJWc*-Y$EO&gi-*F7K@YSgRofrs(E@Gf}zbY5yWo3_r z+{>?35G8tAQ)$#uOz!n|$XgLL0_5r%y6u$~sOO@&L&QC})loYDL_e9AO&NujY7vwC zVA}*rh=L5wFgD8^DjtwUnBy>rE5RMjfB+Vozc#H~M7EK_gPMaT)yyYBWFXfu2=F{1 z;K@A$hdRzJ#F-}0${55|44~j)O%!g-uiH3*2`kD7A(AVd4mW^q1IXKmGgY9q{HKAJ zq2>&mbl$3fVk&=4Cdf5NQCnm{?qI_j)K_F|VlzPC^#0aCs#dcsN0%sHiAhf|ja43Q*-b z3)_!EI^k^kS%h~RB%X)<8rZhj*fnw)1N>C*86v_z-_FK167%GR%g|Caf*VrZm_v;8 zg^|F@;6QOS%Dw0cBP&p-Af)DtCw~HMP*8{Z)d=};BsOdV!NFVh$XjJ|kshn29Y5Oz zhzGWPW7U_LrA0n;;++sbH&y!1S)|8+i1TxqNIEKxAwq zG}j!|I#Ha?SNGm%6&T=Z>K&qLYAoDUPlhM*;l_<~E3J@-pS~6kdb|A|$I1dz5 z%j~#y&ov?^_{kc4Ng5fd%Rx;3FKv*QldkJUiPwsV%@~X2@Lows?`hx?8s5bLv@F5_ z`J2L|HBiox7dHs*ykD;CflnQT(&XfRCDC+9w!8ZoLAHpz5m3D{0xnU1V(7=e&BwO0 z6(Qy`uRwTvhOMz4ibFYZg~{DNyxMCnTG$;7r$wzc@`yVF)w%ZD{+~t>0R9m9S^oRykXc*@WBSn-(VEuJoxI};26Zz_KMTWJqN1ClB&1*4 zst$G-H( znK$$X$@>ICq@zO#(T2tjY_T?X|-)FGY z)4IjSQSroV_Z7J|d22M^XqWFo30?MX7{Ls#xu`?~`ms7^pZjYBL@6u)`FMeOMPx+>b?BtMv-;5df6h;ur z*E+z)mP$w+^C6l_;!t5*haD9WD)dd<-<;KVl206qh+0y~#U!)=MDsB2=XtvC;lxk+ z-yPPk^k1x5I0V-YWm?(1Fh7XNZqL{RR-F$gR&&u@D&(}*RKlJvA$_oquoGpF_zZxi zhL&8s|BV1<5Su@zjgA=t;kreB8OFn-C@?AvMpX}!NrO>y4}2dL@Q%bsG0XqcsNy9y zk58JA@hLyfC0HBB@f6EDB;blDu=e8hgSV8xU;gyzQLmra??#N-NPEqeM``nCXK=)9agf)*yCoat z9;3P5P-HoG35ErYCrV!0B5f*korJ*|Wg|G7$xeEYFJ71FJc5B|wHHsh=mEPOpxLMc zTiiov87ZAxjqvV3^(@nT?~M7fADNt;elkQQJq6`#AZkkpKGmp02%8K_oJFERcS3o| z1d3j;0Lh?e=yi~uMTieFWeJ#EJ!~60l_8$&<_n9%phg{(v!6JM zm>G79bg57wW6%jEQ-S~hT?kISRJlh9SA`?X8<&xxtNXtWjX6OKJuO{}IQUE*Sv>+a zs})2|Bvzk+azK4VW?o|nCS@Y8=r!H=*=E?GgY1av9t+#bPVE*?783}00z$gEPYEFx z0m8y*(p2U|?6Juq#pbm2EYO6SBQSeTHG zN`dhaxX*F!?ub+~eF^?l-RWWE&^g$V2OuNh^uxOrO?qd@dAx376NV$&PA3~eh;386 zUU2kyUb0_5-e}PX=AP5wwjFeWEDrL1N~{XoXRZzO%$!LETE{ZQL1f-_sY&S)CIvj* z>2!nu#{~`e+Y7KYGT53W*qSS0Yc~(Z?IrmjKYwZixfXM{wKFBnnrM+2P;HqpzhC2_1R(72i0>p_m@%VR^Q=*Ars4Z`%-}{WfgK z9*8KI(4#F5UP#2v70CQf^*aa>dYg7x*NrUMSPzMWS zIGT(c{szUy-|@5Hz_&r1!{b7wfgUdtJxDMGS*a zmka!lUXIJ=YAjC76cnEca2le-MX7AK&2`L3s^mcV&k6NB=yO)Ox{Sca? zg?@hFbq#;H80B)?`%kx7Uu9~8tz2RD?hwH~`{#6of7HIM=wq0u=@k^74_y&d$zk)% z_+ePL5Y8uWb9z$oH@@!TQOrM&>rl)Y1*|$fs}QRm)|>rq*LG1DaWF{McMf=h{Q4Kz zF0@mbHn{e^Ru@^r!zrFa4#ubUObs0KMM4Tqb6nnE*qxrn`&ez0Abx5-)L!V#IE))B; zwPAm0T{#-vYftN=nzln)nSarKb;UyEH|W$9hvuoPgN07#8c-KyVOU?j0m;LOEnJ2d zX3r7F-R{{@yHI>1^4JUn5wAc6dsxi9_tB?9%}mosf$sn+PIZS0rgg}GgIb93tUJ_C zsQbLsM5nfdV&CXMvHl>mrJio>kzN;Etph1PzEhQGS2S&D3A#9rq#gE$#CsYV2AjPr(}7n89|l&x5;$mhAx$^Sp)O zhpO0uF&>)-Fu!0`ZmwTTl<^MEVhCn4*y1sMurUSBiNjUaq(jllS_y6}F7Us8Fj+#X zd`B&I?ytFw=AMNBovXv?7EOm>G}e$QQ1J2vmuX?w5x3V|@O<4+UVHg3;JPQntP(rv z+6ZU0E6P{l4dN57-i@X89}VvdslICp+lUr8;adqIOx~XBKS8!KBe#9gYf)mX5BU)p zI6(XeH!_s@zXt0n-0~g)X8wOb%;HO_4W43)9~SW6!uj|+T{O%_9XMz#?e=*0q1rxlSVdIjwMe|m;viUQ4EPUdW`=uj*;u#od4&(+(+;f@OQcF~%?|c^S z+i<8NjdL65m`%$`FI}V9-t;9iLeCm^*@cxg9<|onyh+K@cg3f>!??v>D_~r~Itgh)dLuNC8qWY)K0mMonc3^0 zOS7N4qj|a*4eHo(Xu}YE8f@1?7AtDP7N66*MG5lZQX2C6pGPZ+7Nh47t}~B{D_za- zWz>{!ihB9fVRl=9Tzcig?&jy$HfhcZ@#AvOUOreOnn8wR+NDg^&bXZ;s6UT37cI6v z3wnA0%HAqE1nw5F^(Y36191fDUWc}x{eYGWy43%WGo%3~oNq+o>H?q=G{FGPn}yNg z76#my;g~8O^@U5)di_Vq#pLY~tpm)*$C7rtD;6hnjGkLWx5OaRS4NdPe_Y*5b;l74 zf8m@b0^fPjDPH@=cXPZ&Zf=WFHhG`5cw%P$&UnBsq%WkZ`2@nt4**wuJMSeGvo$3+ z<__!6B(5h1%`tp)(BPl}nsgaI;(xG{$+>6@=$nR|gac>rQ)6AB)`8_)UhMTwZV!;H zI`)?8mvJy)VK9-W-5rq6_thw77rX_99*bf7t75rhr-XWJuiSOIg)^AJ+3FRgOQ@(bmZ+Fq z2+b0+YJ_xQ*E1HjoBSQ$wXT7^t={p&mRVB=2Bhu<4Nlf1lw$#@xZj!QKp776qd6zl1{6`|rSkUO=5%8gesbD%i#X5w zfckmX*PM9=Yp9mBqE$U638Lqiy0tI{4v|+}IeI@3RpLv%NYRGO-(U8p_JDKmL58M2 zU5L6UDFY7gi9pN$8R33X0F)PxaoUh~Y`GvR$c(=K~JC}Zz z%6lB3j+wtcT`n{d`mTFgfxnv9m&sVJ;va=u35}{b6-T|%R2EHHI5>a`Gy<~mLeDzH z841!6vlLnpfn`|l){jW#5#`tuW#PulSOKToQgTd=-bk-ZbUnUfY>4TM%6p$5Jkw5k zRIqYtBL8h`>wjIP{nvZAEKEo5YgHEIx42Pn&{d6H5?!*5D;LK0o|sn@RW3fmsQB07 zE&He1ZT+R$$>e|w?{#-_s|Iyf#zUkuelxTkB7?8VyoYI20hp1Wy`k9&)MYo)(pn&n zIs+GR&B2_%jq~2zpZBqTefMC^r=*7|i%o?sO;~$O%Iq}vruE#okT`Sfca!RYmE!oF z;=eMz6R}`N)ijRxp94;-tWuqeX<$k-8A(vsIGwqTDJpM8c@(DM{k272({3ioU!bQY z%T^|YCasxy88K^tK@aO3(f5IR_*na5WLowD?KjCrjpi51@`Z+m3(Y}Q%-GC*g;X%( zJ&c&CS+d~PuWC2x3FW~7cJzDgV9E#54X2ISVdhZ!C8GIbDQH!ZkM=LaZB`@QRwRKR z8h{M8p0hKDq#4v0A)>`X;C!qtegTe!t6J3OsQn5VnvQhVRzm?i#fM3K33(nmiDy4Qht|b+0shPLP7_O{H+iy9m}{Y%gSYQYW=3 z=j>E`Z}fZ4-46809g1gH02-}3JAc3_H6!xfbiYjlmuLsWdmXnPJZ1d3K4x9_5LeJS zX+YmtIdWMtL*46$NTV^?ZgtoqEnoReI{(fG2>F)3ZqDE=Iyzj{P5OG*BfiGg!{STH z=wq8QON&Tm#66Ib(VMkAjw)^QWuDmGyEV3SL+r^JX3IlKZqkpW z4V7O?N5&H4r9Xe{G!KWb>3FBZ-zYnu=roOmrqjit(0@vNG}>2jAyRl(+9WKyEG6(2 zYz88&op-2hQv)1tBq`NC=!)}iU5qlt5NqlxWVH_*z9QOuw>@B5kF7U-{4DFV0}dCu zQ-vC!Hv6f#FZxJyoOPD|C}i0klfJi45Sez(Uw8wL7!KRfS8e&GOt;q*qK~UcBTXQB%BVnVo(c=G$-GviZF@N+ zmcw-Wb~K5*oYO+^$$Ybm{l~T#ZElHl>p$+}R_XPo#nsj1;2(26w&-v9^x(QoO4#Df zu0D~=A!9py0p}kxv&6f9$HURGQEnfXR zIk~i!=n&)p{ZP{Cwm-7NnB7hnw~-*ekQ2v<77EQoR#i{*RK<*rEs=Kh+8_3P5Dvzo z9sPrFCd^q#8J{om8N|n;1FC&;qA5oBx`cB`hpaY!$x^&KJke zyt-#hQ$0w8@9yF$VTIMMJ)ufkZ;I)#TR=w2_St-&z-XHvJzeMOZ`n0&7W?ti<{@R2{Xn40sEO!{ob2<_=E#u-;b$HV;;@ZiA4 zAAkMeoV4KzS&fCQ_c8BdGSFo&?ZbyFZU!={s(Oa1BYocM9^V;jLtJ6|xtm_)B)Be} zlh9@V(-pQCddhxQ%pSQwzO_Q_cGElDEVfPL<)temo@Z#eF`&X`o zRGBu4QdVlnma;|E;#8qM`(c!j$HWVE1gUJfeCC&#&GCbxD-x0lTKy$0;5uGBxE0gk z^&@Rgz_+qZj3U?WAuSxD2u9%nv8p%*_P_In4N5{%E72pN+xwC58R;Roe0S~U$`cMd z`dgM8_t)?5wZCv&qd0o*u^U(Ib?z28F1&DECVkAdONplTyKl+g8!qq=ZL0sqef+=c zHiSvIJb382b+70HGN@QXBOv9I1(inTSy_i_s$w=hfsPfK+mju*TNZP>6?QnLzwOR~ z;@5Qgz&lJ&TT}se!63?MevYeWt=|#7lx%V8rmAv<-kl*$=4=Vc)lGv>p62J0?#yO7 zl`mp;_oqh_*F3mxgPq>I6K4J~lrprtKfn{O#21xjdN*31_o)i>pBjI6N89q>Lfe#{ z34bjmOGsq%WNcrMkJmZj{_UUi-)qa4Q7oIE%&ts{OTAjUXzn_fZH^6!y({!S4(TFL zQ7&Q8p`vmLnzSdnGI(S`6l1XL`S*XGTwX`TM1f*{O87ven0<-(Hh_;_=zwK>PLr zG+375UVFsItM0Wt{t*$*C7p0cKS!A;S`}06P$BZZ=jCe?SvzfCIr^v`om;xZUywLJ zhF*xxP(_`T<=qcnmafRft)3<|EqRjFYwLXKSB+AmyWp%Vso3TKMF?@4twmE2X#8-> z)ZgK_^yn&Q?aJ2meC9(Dyo_bsLmPrX#cG&vr6CDwp0j))a@y=fOl%yPXf9g77z^7$ zk2XFY*mM3q{^2z=y8CaT^=i_^Q9LppT9p9%F7Z`6d;R19>I*ohbBz1HKtUiAqGr=q z(9?ht-z)VqU~A#->5x-!K;HU<4^UrP3v@FQaAlS?{*I`So1qXNW(XLRqa58>m3efe265W8{pA-2riPzpG~ZVWN5{hssR(_TN05+*>Fj|^v?>| zQ(}C2>DXopY$&&zsl)sLvY`B3(x*2}Rs44__Ch7%d#z$$50jxiK<Q_iWBZu8>Y(FgmyAuLfb%fdZhhps|~^pWgKXfM+USKK6HBC z(OJT3l8`JSYnGtp;G}alqa3n02F{$RaFfO=%R@q%=qJl5T9Lz6>2&kkGl_$V?Jgr2|&xA}z4e zeDPGGfFYmGfTy5!K$1Xn4sc~R6ilFfBc6wfm7skKjwM(Ib(lOG6K5$-?f7|30;j%m z>srMDByU14TxlcBGp@Kv|E!mMXI6u;RS``{F+{h}L<5+80vEjiHOfp)YB~ zrtZNFv}{>WV+Sb5tm<#3|83IWm3o-VeDpe>*+G1R+~$4+9EHBn2S{-6P)^_)Nh z6vA_;e98{A0ir+*kX2PXg>cblz;M777=Cb_8UV^&x`|kw&+1@9o5p5C z0_0&f?_MU<2+b6_0Vw>uuAuW0i2m`_F93}GPhdK-^B{2*dg(UdCgM7f(V%4az}w96 zX#(BdAc8bu?0HXk35r3qn%PkmQSKco+5kHyv`#$z9W5qrx^tYom$=JiwqheJpjA#O zgnU})2?C~hiZ8B0^j7M4vavbfYQk}qbf`}0WQ5@3sNl0kBxJd!yCwjfKiF{2V7z)wJ16`{0hl`e832fBdV&E#$3v-F|BuN2P4 z7WmL{l@Opx*8yw`#GMZc6r{y-#Y4N2z(&eJEN#Q~lT^CEo36m*dP5A9V^?n64Mp)4 zfKOsOq!`_yr&~7zKqvu-`&H3G6A`)U_~_I$EG@}mh4>YKa+i?Os~#2|snjlzKhtWH zFwy%jiYI(8z)Zl%fzL{lcF+}rVvJ!poq_~gAg>z_CBDDn%pfG~p;=o?L?QSMPPQQg zVA;nP-GqBFOrG*PL6AZWyeF0Nw(U)g` zHMb@~)|Bplh5*Ybgui4AnkVEGi7Xk|T zfC9+(Uv`aQC&pM^_3wC*Itw%9=!Vp&U5p2;|0LkFu|)HkpkyU2u$`mA<-@+mKGxyi z!MG1*d7j4>Pdo}rl@9WOY7-T-jO!5&s?QWh4{ydvrL%ex&iT#V-QfC3c~#{h!>Amgb7r63J3i(c-rEV5CB5}H&ohW9XOy#=3T7Hy6Y7vv{-m|?Y^MSOgfW# zn@Mu+#V32sz+c`#Au=dRb~v8E()TjGJm{#2K6h-U&9;x^_Emewv9?b2(F~h=e5!u6 zV!R_<1UtS`1HJ{zd(MMti|%)L9+OEN`33>+3K`G$vA2b06sR{J(7C>GbcLM`|6jgU z_5X>B+B1kqa3rhHr5h3@_K=XWR!-Q_9CN1n0S-lg)ckW2(th~9pL#Au&3A40uN`=e zb{%!s!FpvdCx(xN6k;QyS`Yb_pu8o|l6D`ia4vK>VHBjpYM?B(b2@b!El}#j}DOGF{fsg7+pVU1)Au^`P@^FWJX^sEynB@I!dv znmrq?b9!R5q+w^Z&0k-$hfWc^aI2@;=@kK`3f7OxogH(n^2Cs3$>5%ZI`w$*{Gr5 zJKrru>#DP9vjr~LDCgK?j<0D&+KcPp?oIqr3!teX(H3iW`c^S2cZr8p7nygVRkxD}@DB+B1bT_zIf61me(5uRJxhR)~CuK_}>x!ayGNz_$u) zi``Yao$CApCaFJ=FU3T*-C(_gu4{*cq=a(U6UU}&r32{KMY(uB1W52L3Fpq6x%qzw z{{t@M4;VCMKPdfue=_4I=ru$MswCnF)Ec$pgkMajztTtQ%(Hp(qAI{`A%pj<+`{6 zeev7&t*nOGzxin$H5Z?$kE`Pe@iTRV_WK1NnQ+K$i(yu{wm8#2#`<*J^|I)>lp|Wa zl=u}$n1aQl0plz0!z_hX&&!&74=ER-gKb@`Zz^5$&5ZoI30qV`K|;?L)|*6?Hn9hd zU&XGiU-F^#OV)vd-|gli{kwG#3igM1*SRZZt{wk=1Yw=CL#w|pHiPo7<}lZhj3Z?k zp*jEOVe|S`15>}5_7cDE9&E&fRjj(F!W}L$d^>2scKaF$X;e!uuHvPGw8?|Y#ZJkd z^3Mw-d^MJSBl8z2E#}#b{OBJj{l4a~JJ}i=P}^!$S+SLE&zbs93?1Nb}QVN2KK&cERLV|)KAVxs}nNo_%Y*awT za4ZK96`~+e5Fsj)%8+7~DN#TX6~Y__A@X9sX+U+(l)_X)O-gdfV_c?{RO$14P<)*d^ft_+ zJo?Czdl@a-bAMmQ_21|Ik$xY=UZrBOm(~YFN;K7O8lDP0{Oz;0=TgbfOs}WK?^UI zJv)V+0&&FBu#>VECEpmdF~URSvw3-A8U;zZ{jk3vV)41|6P=b%C@tREfY#@cTS2g@ z;tV|F6k+W<7I4ay#@?&8dQ+LH=$bt0UIXRX5iCoyu&*njuVuSxaUznsAtJXKUgS8U zvoHeUL3h^lRZo0xw#^prff;F9l5~AFfA~6TctMytb09JCT<)f7-2)8$Bj2NSiXZY! z9cES}%w;2wv|1r499^0&P0*jao7{@yZAuMwy&kGAgs}@}LA?CH(g>NzU}Xwjfsu-< z05Nd~m3LFiK(^mdscw2+R@S3!O>Q3ZS!urSesJ~FJZh@LV}_`dZwfC%BZVhNKpr8k z`0evFLdK(4L4)UF;PNTzoVl%Xop*@y%<3dUWb!(Hro|pCKxWdng5Er;YmjrzF#mxx z#cdcQ&p!e9B%Q>qL$ZFegPJjd;mf-Gj5gWNZ_5B9brKj?fLh%|bY)RjL$AM|5VtgZ z*n(umwL{G~LH`qv&iO((-r%R{9s&BQs1(6L->^ZSY!U;NmgROKZ$s1mQk^z?BCWE*u;{<=hY{w^NW9f7Cpu|wKso+aqKkVt-q;YY=6UY zP}>@lxcd)^^tTn_vU%;xpDSD+-9&6H5c8mczM^}vKkB{xqdo8Eiq=mZdo4kMg@IU# zz6HGhiytX*4^CO2skr$?i{8I0j9)RST>u!=U4OLdO;YP#J$E=QUATkg6dqQ9-&fDH ztZ37=@ZL9aJPFn8xvNZ6gQ3d47mPX1dtO{`%s}}LM|rjjkF%6tH<9cbnH$TR!2DQf z!xeN=h0>@2CM-$b+>&*+i9DS(y+S#;gM$Y2TaEp`EcK9$TIaLHwfNb~UxC1PDy%}! znCFugvX3R%8M1{9Rh~&nse9tarT`yi`~hK@4KyFxStFX5+btif3{dpGoY+2OII|zx zVED44Eln!@>cbba7?3Kl=Ku_T9X+!E-gvDKeOZQCSww+e&~C~>GzCCnDPl88`QHO( z732U?)`H}9&5)Q{op`>60zJpvW&-HbYdgs0FWQbFC!6s@!X-Q}(!2(!7d4ON7x}}Y zU9D9@$;LIst;L>x&QJ!{7SvYQUhzwcO`U)8T`bLxX3vQ}^8KS@wa2r^>;9e~`EMph zNS}z2=IU_xf!O4wkXyURC0KCrS3nUlCY;{H2=KHkYs9HyHjm^HUGkudr3{`s`6gHZ zyL!Na|CNkYP8js_S#DZ%Z8E4m#LKPfj;OJP+FB869olt2#E4f1G~bG{U@5WaS3%Bm zFyu%KGl1y;z=)bmdgzvxawk^CtHktNKMhXGg~#nnb29ML0y$T>*8Vi#(6Kc0{>b^4 zrv~gdWWWwCLvP(y%7iB8waF#3V#@rq9H1 z_`KGcuKn?*^bo5!eeD`KyRjeAo?5~%EoowS+6^&Gc@G8@WEhnVaMjGCklpyba#L#< z-U8W}{AsiNP+;5@Lrm*JAA*2>eLZ8j(3<}nl~QzHAQU71i(NgdP}HB>9LcVi%nJsF2w9QznMdye$MK z`ZQGu#T6_-0C}3;2n=rY2ZR!J@R1WlFD!;{n6rC48z_cQtw|{$13ht~A7V$!zsT}h ziU!{K9S{_b`#Y}=V;(7N@}3)=+Fq0bvSd@KvbtHEV7@!NlD2}iq1E#h;Z@+VUlKw6 zYVev{y%qY6&e(i@#D&}@sTR>3nn^e8r+s%~ENDY~#3iO*F7j>1EQ$*+o5+l7O|j_O zP>{dgI&%`^!xQCMs`nkBEy#%%oE~{I*^F1`$H`XjD;6lNE)t6YJAnlNFZ!egJ|heq znxL!U z?aHQtXje05l$nd1#&uvdk23?10(jg)TKNnQbA`@UG9>K0@4l{{IF>5W+lS&6-*`f>=K3GHyObK>-DV96!gko_hT;Mb-i4$$vx?x zS`RCgGrk)gC5REmNM1i$>s1g#6l&-_hFu@xox(fEt!i7CuTI=wm)}_~@1WXF;5I74 z0KU3xyBf|b8EuR=7}+$WbsqS;$z97hnCn4?q{<5Q!@MW`TS-#~0S;|B%CgK0=EuMe zXzoUgFtq#}Nrj+VH$CemNOlpusn0S@-Mx6{pkYnFPE%-8TM&V;J?Y1py8C)a~Nj(34q59l7X3Y zRbXiKLRBCfeiBp#*f%Sxp@A}JAuq=x%L+O9MSvP;Z4~v;Vx|p!&mpOVPMeDNH*PqB$Q zs(=GsKHR{oBvO_B$<34rRv@meyJ4|_Y#YfN#oJOrvpMo7d+>m zkfzZ(jRw9WN~UXnGnM)ahL~vDfHI&6F2(lZ7F-@wk`@#%>R_tSNI$alXk4eKd*|T{ z={&FN%_os^h>Vm}|KUIEy-3P>OARH2E50gPgH4+X;qGbf0dmR?OPLl;I zU^Q}L1Nsgs1wHcVg#Xr{e7*<@5L5n%iwFUU#g`XhD%7t3^aZFanUCWOT14`_lcO1$hGi zlw1aV1I`1il)!!cgYQ7rDFE8lhjeG>?ZgSlQ@uhxok6F!$;!y);~9CcHUz90dFS#{BoM5qzuI z)&Bo{^v!RU{h6tnw%_T`48GN)oUe_+7z5nd8ZfMiU|2zK5b;PyG6;ezF-@_Ps4&N&oX1wCd}V zi6^=XSm82Yg-d^4N^E1xggzd2pcd9a)x?h zCM;^fy4^j|`#w$3m*L>$N^XKWM1WMR=gGm(^&zk+5#QjF`b2ES6UG69JA;PJrl3Is z=-nXh-vEfao@dhaY_pu`S0$0#N`u!U+QV{cjy=rGZTPO`+g)n@D|#Ki5^tqwE2}3? zR)WfIepdY+k?h8@4l?+fJu2XWmy;Is^+msk#k;j)EDR@%N3Vq1zsHC+#4hCfZw@{2 zsrGX2H)L;uJOJOgFR}cs$o0_VFJSPDKz}K7%-spLEazrHSj~X^tDn6aT`*IMn?Ykm z5jW2i65=PwVXkoF&yer!N>ty#2D))d+I4am(@(wZJ8F{V$?Jd|vm}C*UIGvKyr=I? z>2}X^(&@8Vu|+C-?vo_RV-7)oW7loawAwRkXR zqDl^X`X48m7dKc{ValJC`IoSh%`}R<__|Q&?y z{Q;4T%PS+@!unV)7zT>=p1l_I68H=NWI&9OCrGREXW^%dcO4`)5Bg_~j^m~ws*z%G z4Vk|s9y>qfEryiKxruXH1nlflP3lBv7ohYu2QooX=f{m-5Iz{t{P2Nfjg=*w_Vnj* zGipmABG@#-z>OqZz>sRU3&8D7-jlRVAtRde_TAlX(3UXAAC}K%h?eyLclE;UDRn&x zs4J+G5}trJrQc^8DS<>*s*MR>$1Mjlx&XMkFOF>E*+3mTj$~Dw0}kB=)ZIz#|LPzR z0wUV~cZ!b#^Z&-;ZFlB#O9vmjmXc`(P<*K_nrT zuMS3uot>^&n!@%3jy#5O13Nz?2}hBeupM0Z;K*el8o!ZvS{SiN}CS2`bEstd@gMy-!^FyeO zylT`osPe_kt2Er2SWz03j=Q4Q6Oq>i{A!2#@G7!V0~pN+-dniR1`-$=Xi9*3Hp8{+ zTC0y|Pahhk_USc3Bk(r#ACEJK-Cb_KeqqbBeeg>#pl24efMa@T`uPv%9V$4fDZkSY zXB_1wQNoMKZl91k!%@F}KV2kHkND(ytRWxKLYO{LKw>sXde2P2=9}rFV9=HJ8rg8T zLTZ36yk|jP;D}L@rOv^BL$aF3?t|_0W?EvPCmvDy(YSdHBgK(d1Ztm_0MQ8sZhpjo zo)Y3FfB{VUyEGZ5Is5$WpT7ph{?{D^*;Y~cYS0g0SIT->Kx?Fu@|nWBG(df|e@_!f z0HNoFdKg|Yv=aLCh7{10=Bqa#f-i+T!35#z=Wc!skV?NWQp|~Wa*Di|=;U`vdr_{m z)8}%JujwVkRsts75MlEyYvO66_!ok&^-l`EsP>?z7vtaE#YG}g+-CTX{+9l$tLosA z4~U)z->caNS<7V`ZdrVqY}5#Wd0X>o-Ucq%K5(PXnh0G0R-=v^|IS-=?y-bplG>$fXM}+N|Pz;cBvOgenngjg%)gpvyIGv(fWRLa7vuG84 z1v4KAHdQD}YGHnpZ{M6hPhlY+4#$JT}S1(G`4U|s4xMDudFuIwty;Z zbNcTs<(Mao6BgXwXC?loIT*0R9_VWeHp>}!LM?$s#)_6A8h2Eph&K-kR8~&F71`9e zeYVML=j-3BgUg?*J>2K&-RBUzkAa%0qM6=8+yfc*fGL9&FS_gvae~;%o{bc3JfN3B zd`uUs)pmm#kv~dB{?!kj*~KiyA^PQW<=F2sH^(LkgYeZ7%PLVm->f}|HYi1QZoepT6GL>h+ZQnsW3;<1vFtCN^DH5fHlG*5)M z=-60?EpK9Kj}jP2SZFiM6i1)G@0^<8E1uavRPuOYiRLsPWS%&+R%CYLbsMb)wYb#4v>v-u+y(aw zi_z~0Dx39=`3HH|C)aW^1AmbzYp&l%e7qR6s{}#3k>r2DgHi_T1-idecnHuze?iar zg+{_O>a3}OBv7m>paDI^r?Jv}ST+5wq5xw+9X3%9pj{b!ywny0t_EU%%UETuA`F8$l#`GpHeiDNeefj4ex8XAC z+K`>3DjOf{3q0=W80$SgvH#%FfnaxP$xd{AY^C^yEx2kgAVU1~xM;>>myf0Zaf$Kg z`8dGqV7|j$*ttpVH|Ff7Ba4j{%r&gXuiqIPHq#|6k|L>`^bSA&4vkSn;Y79`RBp=$$SXqwmb26@iH_aUHDNMyq zva_cfH-tn*5mA_!5p%>F9vvCi1E9#?myp>(Y-i6F)Na$E;w!-0Iu(LNJMotPcRjno zT>hei_kZ??tJMKn7SE)YkOO2EX1q201kz(F%-ofpuIw0);RmsLJPxV_`!nS7euh;Z z$mVVj-P9gXRi&gp(-%N#?IjXl`#v6o_%1%OF`oIN8j~DsCF)0FWzQN*+d~0f^J_y8 z@F9U*5V{LHg5gXIyG<)9`n;>j-l^F)b;KbD&1Q&pG*Kv25!A5HI3Mw zhR5_92iOnVJ5gyD1zJZHn+0qYEj58(MtW_3CUY5YQTY*PXoDs(i*h9~j#g;EP>Z2L zGa?ajVo<@-YW9_z>&;m=R}kA+&Ab_%fl9_OWpo|IeXO2tY&Yg2nMzAO>)#DpI^&Id z>ma9M7EA!?^p10yT7FJAfok16fwv&o&`|0G3_j`9o(!Q(siM!}Mg#ReV#`7A?;o;q zI=y$g4|KpJpNk{_P!tQsdE8_4LJj+|%`JuM+57rXlXPo?C@QzrHh3bzV2W)H`_q7} z9F-Ww-KKUXZ{=amWIIZ`RK>N)x}MPr_gmF*nmH(p0qDdesP}6#eX#|UF<4+^u)KZD zS4t98ih}S41AmRzF=DL8LeZGQ*nuEGqH0*R^>nh2mX==W+O*a+p?edcF`7u}Jd$mb z#z@icEjTalvw#eeuBdvXCzxBrk-Y9*Kn_RAHEkE}!1X6x*gikO!%dg(Y?v(fC7xb- zkswq+_aZ}cHA0mGioE5X`zIRKKTI9{iB~C7EsTUMz6*TNAq75zH!&2c?%Z0iKS^6; zKK??Lf7aqevf+RzyKwP@{Dd1P*V%D%0lA_#>g;Scwfli=wszT+3%us~6fMFZ^Hi-` z-J8_8mCfIySp=j4QhoHBIiV^iI_m};c!etYGx(2?{%yF^-q0L8f3riB$%Gd=C&N_;hS4EIe~C4^#kPP--m zplSi}?h_gG2PgC|eUNCQfS9{hg9liTU)rI$AluOlaUVw&pXU%~QNB2k$0jlU0u9E7 z90#`KGa2(I1KRS{v5`|3@nYlUE;%x1*?#9gA z)-4{BzKe7|wR-s6^1*1yjxC!5Z*IoQM`rod$cw%w-}YNHXxA z0Ihuulx;m8DEXOlSG_sv$hCG|_@{e_r;%l0<4EeP4?FFmk^xJ$lKDLkV@)*S5w&j3 z^N(89x6uy?Zh}^Odh+N9$pJ0QUAzCk4ux1LxxwG}2trS$vP+c!1SOZKEcqaL8 zSM=A|aPF!y4$948f95@!4K5DgTEDXh(paNzFx# zCSVXnrHO^gf(WCvR8}|;YGMTAB;>U$^jNWo>)^W?;ZoD5AiDt2ZG0P}!|H7xGV+&O z)2eA1z;MW#_??=7%`j15-HDG^EgCcc`91v+*ehlKW8uEAHqY;mMNF%Px#Tk5*qt;D zL}36OuMfiXF3MJ+dZSRS*GcP0k)`p$@*AQ=lhy$f{fv4bq`JO>aqgYh1!rXdB7BA( zJ}$L~QR!eugt){dvSs_+ds}{ zXHPohM&&KAkfNJKSb-sEX8Bjt9>o2B-L>6l!~Z(`BG~^0#8)A$MNh5Q?Ay zvGMkIMb!_MZZY3t4l;nRrs`^E{ainAQ5iL8&dO#WWLSonRq|{oN6u_D(C8y3t#sN- zevsHV!v2vO*9!ZZ`0`P+AwZ}H6kL8i+B4Tss)dc-8os%y9b@Oqf2!ex69@gZgb+YI3N;tb=0l!EoyLb6eV{ITvsNZtuck>8G9!AhTFQylca%RxIuugh>JB$ChBGk zIypUvKG-*rtA0Pf8n{@_X;Ca{Ge+krQdXR%3(O7ZKRwzOLV`y4$Pr9TPYHmgmkBYf zN={o>wLR2+_L=S0ykk%aw_y_2ejuap%_c_wb_yif9KZ7ynZnhVAnAc{f$@<Udh^6Azas_ne*` zj^G&jLCb|pT?Z;GjuDQu07tz9TEXo+PwT?OfN&A>_1|DU7}go4;@U;XdTIN^>$+b4j9jiz zXeCh##&!M{)Isjw+?v$dopV+6&>g3DXV%`aW~bQQ=fV)x(e}1b?Fmn^+E!mRbNLaE zH8rPmYqpu?!{6UqR4+z8Ouw;*Ut7n|N9Bo-;g;2-fIW~GJ^5uJl@l-Dko9Ew5n~|^ zW(ZbyT(6|9w(T&fSz)7nlD6yep0bhI)N=}VvHNsNVqO{_#{H!$NeebC77=)$hJo@- z_D1q@xHkXlu`5juTa?aT?Hi!X~hnJ^n8EjxPpT~ydS$Yn+yzF$I64N_&IK_X^LF(7= zj`Bx)GFZ4SBP9pmDzgGId(S=W!`xp_jiwuvqfX zNqlAMdXUM=0wyf?UjR3<+m4#ftQ~M7+A_CeMPCOnBXj(ohqb6yQXg%n^Kt#FF%};-JDo-AgvJ zPELoqR<5-UuCN}ago&c3(=9EWi*CYBJ5&Y81V4#K2T4>|5?+R2B{>|RG|Vr}(vjLd zN#2Mykl%8&8D8v(PF!%{JOSDX76f!zbcMNSW)}wc3-=`>mNT6?ZT&0w{wC)}^ zt6-d(Ym8uu$QZGlzdC~)7zr0z_cGu5EGi6!acLnj$=s>faNv%2)CFUwKsK;ZHk``Y3X)ENA=vl`;bY?Jbp<3$mknRJ%e`FD<qQc+5aGb1C@X3GHFtgFtl0dvbUD zJU59}tzq#l9FrTzo}%lHGPMOX#-Dik?VIN(0j-9ouA}v8M8Ziv5S8jb`u&bA^ZKu&RyiW5WF}M?- zy`ni3SWF6R82kE!+AYWfw~F^hSKwune7fP$A-#8_(@_Mf3#D2>df})>pltC#uW-5M z@xu$y(JwH_;M#M>#ZmBq4{UK4Sj@`vqdp#5emXC2LN$f-&ZDR%0dlZIh`g{R<~e0i zVPSLHvzGFjXC`JTQ8OqEXnOtgb+zXUaOch-(NTaD@q;_YGPG?9&{)l;DA8s)Z z-AY~WsHW@~!8B>ALGlLBJ~D$|5qj%f%uV8Eo3t$wlBToIngl@4 zi0G&%Zas1=0}Ii^?K6i%+gWK@@t|&SIz(Lah6o@4^INM1%J}i;BQHErIq!wh512k` z5Z_Kxr47L7$+!pm{@}R1)R(B73wob{+e9;+;shi-+b#$eOtIl-x7kOA4#y-a8tXnyFfn)P##m zV`pTDDnC&=Ec5lEyDxyr`3AHdk%T>mnxD3bd1S+~@?X51kptOU)7LpjL zxX$KR`)2pV-NM9s7Z#G^I8`oL=o(l6TJh`IvFO(fOxm8vWVpL?+)4GbswN`Z4Coyc z!CTq3F1w9AC96|#F5b!!PfOA(g$Cy9?MA8Y-lyJHQdyDh?z)L*BbLuvdV9M2Tue4c z>18nZ@W>2ZcE-40XQZ038k5u0X>V7zNo9|Q+|pSIE?5k}a@&Hj_)GXTn=_QwxZ z-+jX@c40nt;a%_Zd204FQkOe5CBsk)@?u01xpawst<@I&swM$eZJnz+R{eypCSRne z%O1Gbx0LO}hIR}#RJCQ>th^r>7zo`1JJ|oiLQg67;}Gp*ah<+vtQ<~^73)JW`nVHT zu38m*0U$dsmP3ggWY`5B`Y7wEX*NDedhc-Xl3+qFn=%L_q0+H48I6g>j6&CldE30; zw+f0z#wS%t7h^2-;(ZjV21m|{ZV1pNHiM#kAzqc}d1_7VFU5i%Fz+GhVjK@SL*EtB zvxfMxQ>XE#8qX1F&XZ+<8&_~b=CAg@b--I&7PVw0IcpWxEoW>}&ZsA%OdiPOjd1R? zW#r~HZ`ZESGHcqdd9pM=x7fBrs!A_Oh!f(D6%sn-?CGd2T7;Y|P!-8Lm}+Vf(Wr=O zF8AsIZIE6I(2?8fD|$(P8QqDIZfV-9zjKq3)`|~^OI>IX3=pWbN1;l&-p6f$o6Dg> zt@pWCL`aAR(hn{w2!UA}+8D&V<;Pg&5o2%n0v*)^-L^KW{_dVTOaLc8 zq(`yEx?YJtJDQH^o*tmL}1}Z1;~C>9&J?bC0wS?9)R_rb|w19*STN4zD1&|;G^IuN5c4% z00}YW3%F3vdtzAof%FZJNk4PIiXtq(X;iuhY_PKP^19=$QQ60Kni{R;9l*iNn|bau)rzeKLJh9BAM!FM-@K6Y}~;Rg#`$zXTy+qEAM zM?aNuHb~Yu(k=S1>pj4(0%LPyrw&fXoSvy$b|?zPeIGPj0)}tA++rXb`${*it@Hlx zqPUKpgD0mq#!7D5|-sOPDJt&W=25!y`>DdpGK!#&Wt#0z7p6aB-&Y@ zQU)+3NN0^?L{HEIAeI{uMJ$MMkmM9Ewu!Ba6Hs-l zJB|X#1>Y}CL>H=dP$B2JMf7o!tj?{>vOV8XFnQhRg(X>BA~&5zA#uC)aaT%{D#|jt zG)7vWK+0bjqQf z!W0j0Bx~85R=-%dydDcxea1UCyt7Zi%N7w_3hbRdy0GfAM^ht=`HKelK_C9>p;BdR}Jdi6Llu^ zja-qkTtuP{-WFZ}dFk=hl%WTa_Q5zEZGlo$`a_fm0s$;&duhbiTWDMAC3` zSdp~Th01zZ{W(qRX?&dHuJ5f|z; zM+^eh$w*Ho90J(Qi+7NhefVPj!Mtg2inGqkRj{Yrqs6Sxy^$A@H$z#ig227v<7 z^?#v&P^nR13%$1JqlqF)#Y4CFd0gs$`a2gf zKWYL=QB=-%K%mf+N-qBfgy-$zgaXcX*Gvs)3&&VE7Rx35%P@E`CVvKX6LDr|dioKt zef!xe>!U`iDKyiL@p`b;-1i}OTDSJ{)twKH-kl zAb94a*gV3RH4G@$X>nKjsjP7lc{onN+tk9J!EvY-m##7}{pL+OH<>;Oxb<@7c=FGX zjA@#K-3yne#)gHHlBXk<8{h!RK2$snMU`70OH{}{Fz)HwA@ycDVziJNIIugtIQdO| zCG9}LGoX3k9LGBpPpP_H_?G?Ic zenh!*E?)ik_%|;N0;xYQ|B3#&$85z>|9nUqZM4|7E#Zo1Ryi-YU&_JuS^VMHjV3)K zuH89y%1<^GXPRdtqYP4CrK&^A9IFA`4^j}Hd*VFgi(2>p#F6FZvR97<8&-GHXGz>2n+3mD&s9LT?hir=Eh17Q0vV3#=XmWglP z@}Jj1e5;E9$3N5_&&bqSes58PpJJ#f+|eU31Hjd(9Ww{3SXW;r>$1{wbrZC0JDnm& zqM0(JWg#&t=Ll>N2vOAMd&c!&P_A4?FHPm`$;x1e63YWfoGFkDyz*GXvks*Ob1u%j zgE((KAOJ>4pK43s^# z(N53a5)pa~gefxAIiqqXeh)O0h~e$Cg>PuxLeKh$&pH0xf*5zif5aUDh;wZ#dh~ig z9$LI*!+=iA07gcY*jH8pT6a%S6lS~8{b%qT(k87W6g<}f*9c{(hew*I?PM7dd3z{L zfaW~}NNGN>Z0&9meOiBBE5B~IRKfd}MJSEJ3;Sr{9Y;cbPUMGJC>GN=o=IaDqwzJE0R|A& zzwHfPTlkjB=yseAYpUTXq9Ylio4IFZRGY>$z0S?u*zQe6nYlJMpRUE4T6FB+TOX1~ z=zzgq#_U}Qmh3xH^g&2Od zW7K>``21U^m7c+Mm#PH8$MHL9Q*8%HE*<&7?*V$C3R1$&0YfilzK`EdkHI`PV&*zS zI^5#g3RIAp@MOOyxo~?aC-diucKTwAT5LT$ELN56SDL{IwvLq!>e?nAhjZ6EGOEsS z6ehGS9$V99on66rUMxi}hu@+k!(ZATPtM31?~IS*G-Eq!mTl6v+*5gj0Q!{2vbTro z&HPLWo~IXL3*IGLbmQ}|JDLT=@kaqM_K{6zTFCxF5;_sw4X`g}bLjRErKWQE-fpRC zeZ`@9QBjI|l~z~E!O(XD(DWs|Xnw$;tvW9|n;DI?aceUu(_r&M5Isn+o@5M12Jm6vycC`T8~b(qcI zYl#5-PT8{Peq)_hG{{JBpzYINt@s~VXwE=i7*ur58J#?>?w;JC00&LxY%9>-s;S(X z9htwAR&i-Er+j;f=e`3v19j#{4P_6tTpvn~(YP*b3b>*M>96hcPsEaP7E=0Yi^gNd z<82p03Fo)xob``T#sI1fYBKfUld&m3~X--RtnleX)8cq?e&*MlXg=nQwx=w4OK ze$nD5g)Z6$AG-TqA9nzkd`D?Upc|sVqThZvgXL7jQZg@cUCbJl0|79CQsk&{Q6>P6 zSQE}Fc-e=&dFf(DPFlaLtfi~>cbqbY3z4j889TiGTt(*S%)3Oqs5|=54!w@EzTL3M zV@#hMk>x#a=uu_WlI?QIq`Wk2sF4AIE1()7jXkk>vf+GAL8xp~ug!Q8_?ackT<)zK%%8j3t*Lp2n!R|dvI(0B)FmeS0T3{wqT&Xjc%AOkC z?H=!pZP`+`TCK$2GC8($jIqwZ(v>xGj8&LjaQ4-VKVy8Q0nMP6Dk{;12JS7I43!hz zJW1E=1%$7b*N=&wuS577P1?tN2CHWGfRRF*h$81A-6_vul@<*x?_~OvUUO$gd%9UM zbs7tSJalu&d&Un2Cq}f%{faL2U4!Leu(tq^-wVOErx@$XPxK@IG8QV`^w7e=VfV_B z`octv6b?yRi}2^ zPd%fILWGz(8LoFhNh$6G`qE|je-vjdJ>)9cV0$wC#LGVXCc1s{TJrF-*#4VsCuc*R z@h1pu8QF(9m2KSyM;~@}bePO~aHfZv&;wy*tfJv~t(Tm`A*NNxA;AIKjVwQ>;1{JD zuXAU6hNr#nrtXm&>Bv8Gu`}b>`3j_kg&-Scr{N?_Vu}_T8YhLuDrR0Z-$XwmGf<^_ z2w+2@nY^->R^#z8UG}t}nn3RDvz!1jcDncR1Lrw~fhG0!&TYE})84+m=tyt2$5tw; zS2LEw>pD8z6GMUsH&hasOq+F-?p!r7wm5zilm}DJ43~CmRVQyRZa6JilbN|Utz94W z8mD;jx_Ey`^71*t!$Hxlxmy(;0<-3jqZcmtNe?{@jH$d4*OtEteIFotG%(e!Jj-_A zKrA78-9uJ#Lcc|%g&ACj-{(F6;(K%c3T|bD5I1Xk?`1!$cZ>yH^PVJYc>9$}6Z*}zpNsa)j#0Z$Dgo^BU39PC zY$1pGc>Ll)Zct=*bDiFOrgps`6$UiboN>RUja1yTTSqIR#<2;*7U95?Mk0b4;gBm{ zw%XQN;fe;vAvdNvK4!1?=J`jP>{K9V3XNt!(>8_N$;>`k-fy+(0hI!)uzI%;rX~$G z=z}OskqB5b+C|<#^~FFzxp8Lb0uF_pt3~<40^qUvk)g{JnVH)@V~}Yn2Df z%Wh0)j<4@Y)~6*eLkwwUdnQqGbB4#;@}{%gBxsriPhXQv#faH@yl#F*(_@Kx*G7OW zegqmPZBuC}ty||H&K8Nfk57|Hkav>aYZ1}FS%8kBeLz^8BP~VN&F3D149~czW8_7CFwBN#Kx1B7GzmZBU<%i@K>2f*3R<-K zW_v6n@{lpEwa!QDHng2Gw60{V(sq)pywvHKXprZa!W10om_>7&MWrEVxw*$}vhT-N zOorF8l@Er30Z*=lfyGe_1bP@FrI%_iL2J4ClH$hojHAGJ+#t#^CqX$CWkT+ilK$^A z;o-eEv4!^U+lvHl$|kex7-xZ1s8K2(07;tcDZ&6K2_=E(%g9?Jqow$EWh}XnwavZ-};EGqhxsrj{?rpY{DkY<86X#lR#Wu z6awnu##@VDdT(nR-<{ma8Cy9tJUem_3L${7kc+-j4w_s(kUbqfpc;>)XA@ zRWLDUX#%FGbaqeeO3w(V)pr$(RTn@=^)16>JLhEXq_m*$OgG}8_Za2z{e}mLO*;p< zk5&@&O1(&{u*BdppRK;7_*o`AZ(H6<)>-@T=J@c5f$O^aq8Jw+TdSM3-sj$3k+D{E zXSkFUPSJ!G@e&PBY-0Cpaax1sHqbQyT(#S^zzuYQFVLD(m;F6Z-{&1OkdtcKLts;B zqJ=2T?L^Nij~Mr+`i)BFdvkU75n)pdhhrNl9+XKAb)B|@!frW%Qhy*fgE?X%VrR@y z1%3&Sg$J7pso!_I%d6wRo8?~&osz5VAp+3CaDFHRWUxU|zs^`S8|Q}AJLv@(pSq)b z&vXx$3GpQ8W{*RxSTHH06MC4Frp?&X`A99^izqi}&dL#U_ve6U$G5TORGYu-X=dK6 zzX^NV+9d<5FFZ(*V&i+UNcT{gu-T;>%aYc+`UYGIC80@NZ-)1RSa8aw<*8|`H52S;$ zp(8EI0Xdq}YNq((8*H}9tP%h=WQ$#{Zdm6??_RrVX!JGfyHx! z2f?>x@N_{lIe)MoehF4V%4@5yTaoSCHGz*}2i~~DBtk5}Z`>t^9BP`kTshpNsPiD& zErg(TDiHlbz~sW_Y|Z}+%4=8ywtKzHybW=d0f*Q)_N^c&mJhf*YuF6=3Mp6u3Y6!_ z4YJ?BwV=BE4|3-}T3!BavlVc>GXeAH^2TWWOclRN2`ave;#F3g2itc>>xUiOB9RpR z>S2s!PV~WTNPx|1sU{tFZT8HGZhK1eG}>^yEeWdy5}SQlA%qUC8ZEd7SiKA>55b!8 zHVTMGu0-t}f?qou04fM0wz1iWP-9^b!1BKA7xo{NFXzH7ps+*)Hub0$p#kwiUO8M* z%mGdB2w=Me5=U+9qtYb){~Gvo5-5)u$fcp0zzc3eij-m(WWPb~ZAZv2$o$RdHPp$~ zvM|A1wCrC*7=BA2ijNP8w?9ok*762%X4lClMF0!pucGC*Cf)OTu*_=jao4aym8hpQ zMZ_=N##jK_zc?rd|1{DsDd@z(_op%^G9OP2g1vq>L9Y~qMqt{29K1ORxMsco(`oZN z+=86_;iEh$?xSnI>EqleI1JT{Tt-h?fe4^u;^kkV6N!Hm_5Uw=QuY@f@V6?N{l%iI zCxHp7#XkJDFhA5k1QgFj+s;_SFTm&kBh-leuQWodzA;QY#tUDb2)aHhp*c=D1T4ut zHQ`B8HJUre5bf@=ZKM0K)r6~%RqLs@q0N<90}iDjtB=3=$Gi@iLMq=!kET0qD3V}Xv z7A?3$1uji{5t|NlN+3O0I=@5!BD;}DK(Q9tf(}V%Q*dF$J4DROC~Xh`X`y*_hyXS1 z1um9n8wuo$YOj#7BOee7j{zeK5X-0X{meJ)4~QENWLJEI_G}BGO34q1V|p)1{M{cA z)i$<~AwMPJ!pJ%3K3mV84Za{il~eBnc``eL(L+SHgXq5DJ5oWh5YLl?tmR^~t`R!P2VSnTz;qGi_yMnj794K{TjhVWgmc{4y z;9LFb0(`DLM42g7pIKLxsG3vJTM=AIJq@=vGJP3^842E;$4&;ozPq;N>uBhXn3e}y zJad-1*EbNfP*cq)$hbBiY4LJRqdSLdb7YLHOZ3aZQQ2hSweUex%zL0f+Ct%7Wnqt( zg$?x<6jTTf=|jIIo|_ZwO4a0|nJFota5Z0I@UYu3%xB>*MzsL473hKz=2IzqT79(tX8y#$ND4HaO`X}NT`e*^M3C&xA z2w?u{x_GH%ADgKu=h@R?Dy|8PQ;%9vp8i$(?>m)JwSK(rT6)Zz$OpHVk?nq9S5oTA zdnvNMJpg@HJJ|SB>2Tqo;|Ij*!Yq{MOIWlMw>am?ijoGMC9Ow8g$lZdsH|l}=i-hN zL%KS;hP~&T1C(o)_P+gqC@@aj@8=`bWb1p8ZSJwy@wu5wb{`OWod$32&HO+xP^;65 z-}=^RjBWRB#=K0`w7u5C)5XVcL?PhxZ~KxxCo!cY#uFV+ZVNf*oZ=;ern0;s{~UHN zg`8$L-pL_ld6=bidMxa(PcF_^FEyDasftK1oDcB>MO6(1J+<=lwx!-}NxA2;(~DjA zC#+~bI|$F4Dcyns)9aq>_ud}&L#grRdd6Kv%D8QZZt@nEH2s=`ZHuPwo+;(SC3%hK z&XMQniQeXGy+}b0A;e~|jxIh0dGAWps+!aj?(yr}2;bk-QTOap)Ro=}Pz8^%yfID) zvjQwr+KIRj_swNBE6qn=Ag9sXr#-hGj-xhFEDSa4g9Y*YYTegP6H}(V7pyB2R)zVl zje`xo6BYX`q~x0~ZL-wXDn2))i3F&cBZuMIP-{B@#OFOm};V#<9<>KNvgA+U>>)P%Xe(w zsabP?{7@srwXZ^wbA|4wwVapShLIh&sgLo{ue6lyQcghQ;WWKUfC-fS7J_HV)KuNE zQzfm*mgU404z)d2oR=4IYjs5=eL&0O;6+AA1s~fOQ%dx6Ms@-14AnLH$t-S;{CLWb z85Zxx)rZM_Z!7jydK<%gJFOo%t2B5OnV4XDA!b`x_{_+QxZ=c4_q(I|hqzn)GTO~V zQOTGXjz&a{|kxI2Fdw6P_9yh_qxN(1<8YB0@m6q!g&g zW>~^5LCHhNr;(@kOPF!N#FXSQ$fhJ-1J3)!J zDZ%WI8Y`Zk!!@tHdPbYe*-tuems@aklph@lpbSUE@HwlEsoX+*6_Zh5#5Y7t`*~n# z(Q+)^o!OqhlJ5@Cg7Z$DeD{LNB$Mh5d<mhOVuomjH_cb6hq-c(iiU zWoE%UGF1j3?J5DdaZ3>(cXfk?FdyvzNpvWN*O%@&lnGc|@W95s01b7=);^_FzP>`I#zARg;XZNIMYtxyH zm#h8pN4($@c{hkDRyDE%k8$y3ZT`fJ&PczN18XvZDfKuWu{L+Nh~-D|bc9m$LX099 z`Aw8|-M_f17z1-UJ;((D|E4rOzhk>7Rd~wvD34#LUepg*Y-U* zvyZEfVv;Pb!Ms?TOTuhQz_$tt*ac?c=sGd#{0xY}_b>)-=b_M(Pz>{P9)JbpFK)yh z5HGF8RJrR*hawNQ;bzCzR1pjNcgINbsf@zmWra6KqgM>0BrA`{H$iu)cnrqPp$xjBlxU1uY+JYo`9fEBw}1QG#+MC&B6 zeytwXnbSvo3Z?T1awD`P8qrcA#k?^3L(7*Kf`*J_Fm2=YDgxG3oOv)Pa=C}PGSaf| z^Hec`R}J!1P|CRy*77Ph^Qi%1;r=mO>a6~xlB3MX<3&z;Gr8CP+P*2`j^(A1q;LWz zQ|BSP3|}OB(t4Y0YDT}l!Es52Zu;~TaV{Iw6=ZuyuDfMX6lsC`%u@cR(*e^C(CE3f zNPQ=FLRAj1J;1jyg^GY5V(x~lH4fQvVN0WysoQV?ItaJftBIEc#zR9$6@_^NRc01G z278lkCnH-5<1jreIrU62c@UK_d~4mx7TIJQdOHf7O){uLsO$?q)xf?mL>?#qh7s@);LJN8d|lE)*N+CH(j3k zIhMu#GU(|5x5;oU>$rDxQNC{C`mP*9Zq7dcCCMIQ%}a#XW3jzAQ}5R07qAA-x|5ah z`@TESwobH>qTGj%nlS+DDP}!DHqf&JRkCC8{Vy)oRZROOuW)bdor+;^sPQ28gvDeF zZA@MSo5%T4V~)_jSGc6X+2&R4TbJdOv~NwIz%Nz-)9vflW$UzqD5=CU!++X6V)45B zaaHzxLADf2_w#)`cZe6#ZgbG)>rL0bef6^na?>Ws;Q})k|Q+^ zLf2x$J%T4Prf2mXS*d{kQLb#b&NPd>FkBHO>>Qe~X*)pPb?pb<%TsD)Je`?-2e{#> z?@9fEjWWP3qQ({0h*-6$5>Jm61zViznX8?Kr;R^j4dbN7f&GzuUuMT9hBYm=u@7Bt z!BH+PvyeWbHRn7!ZDJIa(hqlNS^hrVM&K%)Uepd@|AM08=MAVv?_<&2*HJ z!^M6z%KEHkgiW%Dibgqg|eUPAhSWZ?8RizwtC#_SXQF6V{`g8wnIM^Brw}jM^j{P^@A+H}{)W4Y;$XV#%CG=_i3lF0YRvHE6n{pI#3PsqJ_7|5M*@|v z58-nxV}01_X#VY(8%mB`7w$hyNQ^ThVIsJ(>?mfNUzc?JWpZ75U}x|6nmA5`Bq7{b zYzcrBXJm5vD1tnQypmN$!e8|c{lXxEGNEr8b&ASUktMz#sh~_IqzSWw%o+XSbYl|~ z$xYUeEIjk<{d#!EE%`_-&AYMx21x;Cr3VR+D%Hc*$$3XY7K&-aQuwkGcz=^c{9VtC zTW)!IS$(p`EYFMWvtr5h7L6sMBYqu8=k#_S3Swj~-NVNgl)uiK2q?;X5X@Dp!DV;G zs<_HL&Yg~9TYC}HltMuHkmXBe+W~K5QzW2n@qrHwLIy>`l5trWthMfh1nODE21wI! z- z+WN*EC`ZMyp}HZCkQ^`W4Vg^Eq`Iz|+Ue;Y>_gG96TDVSHZMG!(OGu;Vjf2a5f*WT zF%_XONYu5JIElgH??%5t99YSa=y2_)Aca8@dPoOe2R(b+TcRfWR9u0bibTP6e1C8* zZ%lhlO(GGXKY-`niR3x_9$xa&-}0w}LFG5?{lM>50~epZLBw*Y-w=du;Np;q(}t6b zz{CEtb;zG}I&mDHt{R44?)=~K-hN4&i^l!RbO5=csv+Y5{3ItXGxHw9FE9-)Vp#J!&gjG2y(*i?Ya0z`;xBLy(fw}274z0Xr~D1M%DXld+T zk!^z0;S+;K&1RTNZlRak1t>cT4o^Xr4ps4*D$p^6_%n&wr&2{QNs{ysFqp3MKkau<4EvR5fDvI6@h*8 zuBx=d?R%~!mD%jsjSpLg$W6G{FN*@qMXuj(|B;+WjSY#)}PtWnQY zk!r3$J~IJQ&{iF6(R>Nec1M5jwyeFOaoYwSX(?;J+j$nJ++0vemzqx|Y=%Z2j+3Bg z#-PTr0}D&fqT#U}`{y@^W`8bAHDa<2nPiEccr7%2)E=!sK=3|#LOR94pgHZnG7e6O2w7`Gj|TeWkRR7@<3B*_Pf8xUKmD&gG0Hs+irQI3%#Py)OOA)Dxj!OA0AYJoDu! zki%Q<=S(BRb)nv4Ts0Rm-tT70;*(>gAOozlM2&uj?b}(@N&I029dC>{4yr7A_I2F& zWwrA8l@~vx-Eb1?*|PZ9TWo}cIUI29{C57sje2uGRmh$fluuYKx?ItYH|2YP;6tTM zfOjN1oZt4T>KhlNApt~EpX0T@b#xI2L`8woy8{7pT6Fw^GWj4-8E?_lRK~+~$Zkk* zG)kF_kvJp1g+Sw=syBk#{Tf=hoI@yhd`My3GMux2yJI^D77oU1$j8V6b-ZrW>=4HOcG1_y{ z=)B?%9|Gmfzefe_d}4Tc?|Ac;^VaUhhe=vol4Ae>0oUJTsNb|NTW^oN?z;MmUE?{ORVI!V4Z)bq+leW1Y)W((WMct zLwxlH5!kAv`0`GIWs>|r<;X4kjsNH4K}vq$squNZy;HdTJ&6xQb~VUmT&mDJ%!0aTt+`|1sC!OCs6{!f9YxYl#hnz&%HQqUG?*LMb)pzI^>0klAq_(tX zPmR~c9gmkG8m-1Of=fNsncfZ^Ga7}r1qzljEj53zv%V)v-M>G@9w C+pQ1) literal 0 HcmV?d00001 From e27823f8c1f7539b158a2788e4c4079065cb4a00 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Fri, 8 May 2020 16:27:10 -0700 Subject: [PATCH 051/177] Windows Holographic May 2020 Update --- devices/hololens/hololens-release-notes.md | 141 ++++++++++++++++++++- 1 file changed, 140 insertions(+), 1 deletion(-) diff --git a/devices/hololens/hololens-release-notes.md b/devices/hololens/hololens-release-notes.md index b289b56df1..5320fe943d 100644 --- a/devices/hololens/hololens-release-notes.md +++ b/devices/hololens/hololens-release-notes.md @@ -8,7 +8,7 @@ ms.prod: hololens ms.sitesec: library ms.topic: article ms.localizationpriority: medium -ms.date: 12/02/2019 +ms.date: 05/12/2020 ms.custom: - CI 111456 - CSSTroubleshooting @@ -26,6 +26,145 @@ appliesto: > [!Note] > HoloLens Emulator Release Notes can be found [here](https://docs.microsoft.com/windows/mixed-reality/hololens-emulator-archive). +### Windows Holographic May 2020 Update +Build - 19041.1103 + +**Release Summary** +- Pre-configure and seamlessly set up new devices for production, with Windows AutoPilot +- Dark App Mode for apps that support both dark and light modes, improving the viewing experience +- Support for FIDO2 Security Keys to enable fast and secure authentication for shared devices +- Seamlessly apply a provisioning package from a USB drive to your HoloLens +- Enroll HoloLens with your Mobile Device Management system using a provisioning package +- Support for additional system voice commands to control HoloLens, hands-free +- Hand Tracking improvements make buttons and 2D slate interactions more accurate +- Check policies and apps that have been pushed to HoloLens in the Settings app +- Expanded USB Ethernet enables support for 5G/LTE dongles +- … And performance and reliability improvements across the product + +#### Autopilot + +Autopilot lets the device sales channel pre-enroll HoloLens into your Intune tenant. When devices arrive, they’re ready to self-deploy as shared devices under your tenant. To take advantage of self-deployment, devices will need to connect to a network during the first screen in setup using either a USB-C to ethernet dongle or USB-C to LTE dongle. + +When a user starts the Autopilot self-deploying process, the process completes the following steps: + +1. Join the device to Azure Active Directory (Azure AD). +1. Use Azure AD to enroll the device in Microsoft Intune (or another MDM service). +1. Download the device-targeted policies, certificates, and networking profiles. +1. Provision the device. +1. Present the sign-in screen to the user. + +**Contact your TSP to begin using AutoPilot now - devices will ship with AutoPilot enabled around June.** + +You can also test AutoPilot or learn more from the [Windows Autopilot for HoloLens 2 evaluation guide](https://docs.microsoft.com/hololens/hololens2-autopilot). + +#### FIDO 2 + +Many of you share a HoloLens device with lots of people in a work or school environment. Whether devices are shared between students in a classroom or they're checked out from a device locker, it's important to be able to change users quickly and easily without typing long usernames and passwords. + +FIDO lets anyone in your organization (AAD tenant) seamlessly sign into HoloLens without entering a username or password. + +FIDO2 security keys are an unphishable standards-based passwordless authentication method that can come in any form factor. Fast Identity Online (FIDO) is an open standard for passwordless authentication. FIDO allows users and organizations to leverage the standard to sign-in to their resources without a username or password using an external security key or a platform key built into a device. + +Read the [passwordless security docs](https://docs.microsoft.com/azure/active-directory/authentication/howto-authentication-passwordless-security-key) to get started. + +#### Improved MDM enrollment via provisioning package + +Provisioning packages let you set HoloLens configuration through a config file rather than going through the HoloLens out of box experience. Previously, provisioning packages had to be copied onto HoloLens' internal memory, now they can be on a USB drive so they're easier to re-use on multiple HoloLens and so more people can provision HoloLens in parallel. In addition, provisioning packages support a new field to enroll in device management so there is no manual set up post-provisioning. + +1. To try it out, download the latest version of the Windows Configuration Designer from the Windows store onto your PC. +1. Select **Provision HoloLens Devices** > Select **Provision HoloLens 2 devices** +1. Build your configuration profile and, when you're done, copy all files created to a USB-C storage device. +1. Plug it into any freshly flashed HoloLens and press **Volume down + Power** to apply your provisioning package. + +#### MDM Policies + +More information in settings on HoloLens about the policy pushed to the device. +Improved diagnostics for line of business app installation.  + +Additional CSPs and Policies + +A [configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/configuration-service-provider-reference?redirectedfrom=MSDN) is an interface to read, set, modify, or delete configuration settings on a device. In this release, we are adding support for more policies, increasing the control administrators have over deployed HoloLens devices. For the list of CSPs supported by HoloLens, visit this [link](https://docs.microsoft.com/windows/client-management/mdm/networkqospolicy-csp). + +New this release: +**Policy CSP** + +The Policy configuration service provider enables the enterprise to configure policies on Windows devices. In this release, we are adding new policies for HoloLens, listed below. You can learn more about supported policies [here](https://docs.microsoft.com/windows/client-management/mdm/policies-supported-by-hololens2). + +- LetAppsAccessCamera_ForceAllowTheseApps +- LetAppsAccessCamera_ForceDenyTheseApps +- LetAppsAccessCamera_UserInControlOfTheseApps +- LetAppsAccessGazeInput +- LetAppsAccessGazeInput_ForceAllowTheseApps +- LetAppsAccessGazeInput_ForceDenyTheseApps +- LetAppsAccessGazeInput_UserInControlOfTheseApps +- LetAppsAccessMicrophone_ForceAllowTheseApps +- LetAppsAccessMicrophone_ForceDenyTheseApps +- LetAppsAccessMicrophone_UserInControlOfTheseApps +- AllowWiFi + +**NetworkQoSPolicy CSP** +The NetworkQoSPolicy configuration service provider creates network Quality of Service (QoS) policies. A QoS policy performs a set of actions on network traffic based on a set of matching conditions. You can learn more about this policy [here](https://docs.microsoft.com/windows/client-management/mdm/networkqospolicy-csp). + +##### Expanded USB Ethernet support for 5G/LTE tethered devices + +Support has been added to enable certain mobile broadband devices, such as 5G/LTE phones and WiFi hotpots when tethered to the HoloLens 2 via USB. These devices will be displayed in network settings as another ethernet connection. Mobile broadband devices that require an external driver are not supported. This enables high bandwidth connections in scenarios where WiFi is not available, and WiFi tethering isn’t performant enough. You can learn more about supported USB devices [here](https://docs.microsoft.com/hololens/hololens-connect-devices). + +Hand Tracking Improvements + +Hand tracking has received several improvements in this release. + +- **Pointing pose stability:** The system will now resist bending the index finger when it becomes occluded by the palm. This improves accuracy when pushing buttons, typing, scrolling content, and more! +- **Reduced accidental AirTaps:** We’ve improved detection of the AirTap gesture. Now there are fewer accidental activations in several common cases, such as dropping your hands to your side. +- **User switch reliability:** The system is now faster and more reliable at updating the hand size when sharing a device back and forth. +- **Reduced hand stealing:** We’ve improved handling of cases where there are more than 2 hands in view of the sensors. If multiple people are working close together, there is now a much lower chance that the tracked hand will jump from the user to the hand of someone else in the scene. +- **System reliability:** Fixed an issue that would cause hand tracking to stop working for a period if the device is under high load. + +#### Dark mode + +Many Windows apps now support both dark and light modes, and HoloLens 2 customers can choose the default mode for apps that support both. Once updated, the default app mode will be "dark," but can be changed easily. Navigate to Settings > System > Colors to find "Choose your default app mode." Here are some of the in-box apps that support Dark mode: + +- Settings +- Microsoft Store +- Mail +- Calendar +- File Explorer +- Feedback Hub +- OneDrive +- Photos +- 3D Viewer +- Movies & TV + +![Dark mode windows tiled](hololens-darkmode-tiled-picture.jpg) + +#### System voice commands + +You can now quickly access and use commands with your voice while using any app on the device. If you're running your system with a different language, please try the appropriate commands in that language. For more details on the commands and how to use them, see our documentation [here](https://docs.microsoft.com/hololens/hololens-cortana). + +#### Cortana updates + +The updated app integrates with Microsoft 365, currently in English (United States) only, to help you get more done across your devices. On HoloLens 2, Cortana will no longer support certain device-specific commands like adjusting the volume or restarting the device, which are now supported with the new system voice commands mentioned above. Learn more about the new Cortana app and its direction on our blog [here](https://blogs.windows.com/windowsexperience/2020/02/28/cortana-in-the-upcoming-windows-10-release-focused-on-your-productivity-with-enhanced-security-and-privacy/). + +> ![NOTE] +> Note: There's currently an issue we're investigating that requires you to launch the app after booting the device in order to use the "Hey Cortana" keyword activation, and if you updated from a 18362 build, you may see an app tile for the previous version of the Cortana app in Start that no longer works. + +#### Quality improvements & fixes + +Improvements and Fixes also in the update: +- Fixed a bug where Wi-Fi streaming to HoloLens gets disrupted periodically. If an application indicates that it needs low latency streaming this fix is can be accomplished by calling [this function](https://docs.microsoft.com/windows/win32/api/socketapi/nf-socketapi-setsocketmediastreamingmode). +- Fixed an issue where the device could hang during streaming in research mode. +- Fixed bug where in some cases the right user would not be displayed on sign-in screen when resuming session. +- Fixed an issue where users could not export MDM logs through settings. +- Fixed an issue where the accuracy of eye tracking immediately following out-of-box-setup could be lower than specification. +- Fixed an issue where eye tracking subsystem would fail to initialize and/or perform calibration under certain conditions. +- Fixed an issue where eye calibration would be prompted for an already calibrated user. +- Fixed an issue where a driver would crash during eye calibration. +- Fixed bug that caused a crash after 60 second timeout. +- Fixed bug that caused a crash what's new app. +- Improved stability for depth buffers. +- Added ‘Share’ button in Feedback Hub so users can more easily share feedback. +- Fixed a bug where RoboRaid did not install correctly. +- **Active Display Calibration.** The update introduces an active calibration system. You may occasionally see patterns flash quickly in the bottom corners of the display, which the system uses to maintain image quality. This improves the stability and alignment of holograms, which helps them stay in place when moving your head side-to-side. + ### April Update - build 18362.1059 **Dark mode for supported apps** From 3f8d6890d1dd395f830e8207c90f8eae35d4ce89 Mon Sep 17 00:00:00 2001 From: illfated Date: Sun, 10 May 2020 02:21:51 +0200 Subject: [PATCH 052/177] Windows Endpoints 1903: escape MarkDown asterisks Description: As reported in issue ticket #6668 (Markdown oddities under Windows 10 Family section), several endpoint URLs show up in italics/cursive text instead of showing the asterisk as intended (and visible in other endpoint URLs). This is a result from inconsistent use of the MarkDown escape character, backslash, to block the next special character from being read as a formatting character. Thanks to Tafkae (Lisa H.) for reporting this issue. Changes proposed: - Add backslash before all and any asterisk not used in formatting - Remove all EOL (end-of-line) whitespace (blanks) - Remove excessive blanks in the numbered list - Add 1 blank line between the metadata section and the page title - Add 1 blank space between each table pipe character and its cell text - Add hyphens to align the width of the second row with the title row Ticket closure or reference: Closes #6668 --- ...-endpoints-1903-non-enterprise-editions.md | 455 +++++++++--------- 1 file changed, 228 insertions(+), 227 deletions(-) diff --git a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md index b9920c7acc..36ad32df9f 100644 --- a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md @@ -14,6 +14,7 @@ ms.collection: M365-security-compliance ms.topic: article ms.date: 5/9/2019 --- + # Windows 10, version 1903, connection endpoints for non-Enterprise editions **Applies to** @@ -26,14 +27,14 @@ In addition to the endpoints listed for [Windows 10 Enterprise](manage-windows-1 The following methodology was used to derive the network endpoints: -1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. +1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. 2. Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device). -3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. +3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. 4. Compile reports on traffic going to public IP addresses. -5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory. -6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here. -7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different. -8. These tests were conducted for one week, but if you capture traffic for longer you may have different results. +5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory. +6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here. +7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different. +8. These tests were conducted for one week, but if you capture traffic for longer you may have different results. > [!NOTE] @@ -41,234 +42,234 @@ The following methodology was used to derive the network endpoints: ## Windows 10 Family -| **Destination** | **Protocol** | **Description** | -| --- | --- | --- | -|\*.aria.microsoft.com*|HTTPS|Microsoft Office Telemetry -|\*.b.akamai*.net|HTTPS|Used to check for updates to Maps that have been downloaded for offline use -|\*.c-msedge.net|HTTP|Microsoft Office -|\*.dl.delivery.mp.microsoft.com*|HTTP|Enables connections to Windows Update -|\*.download.windowsupdate.com*|HTTP|Used to download operating system patches and updates -|\*.g.akamai*.net|HTTPS|Used to check for updates to Maps that have been downloaded for offline use -|\*.login.msa.*.net|HTTPS|Microsoft Account related -|\*.msn.com*|TLSv1.2/HTTPS|Windows Spotlight -|\*.skype.com|HTTP/HTTPS|Skype -|\*.smartscreen.microsoft.com*|HTTPS|Windows Defender Smartscreen -|\*.telecommand.telemetry.microsoft.com*|HTTPS|Used by Windows Error Reporting -|*cdn.onenote.net*|HTTP|OneNote -|*displaycatalog.*mp.microsoft.com*|HTTPS|Used to communicate with Microsoft Store -|*emdl.ws.microsoft.com*|HTTP|Windows Update -|*geo-prod.do.dsp.mp.microsoft.com*|TLSv1.2/HTTPS|Enables connections to Windows Update -|*hwcdn.net*|HTTP|Highwinds Content Delivery Network / Windows updates -|*img-prod-cms-rt-microsoft-com*|HTTPS|Microsoft Store or Inbox MSN Apps image download -|*licensing.*mp.microsoft.com*|HTTPS|Licensing -|*maps.windows.com*|HTTPS|Related to Maps application -|*msedge.net*|HTTPS|Used by Microsoft OfficeHub to get the metadata of Microsoft Office apps -|*nexusrules.officeapps.live.com*|HTTPS|Microsoft Office Telemetry -|*photos.microsoft.com*|HTTPS|Photos App -|*prod.do.dsp.mp.microsoft.com*|TLSv1.2/HTTPS|Used for Windows Update downloads of apps and OS updates -|*purchase.md.mp.microsoft.com.akadns.net|HTTPS|Used to communicate with Microsoft Store -|*settings.data.microsoft.com.akadns.net|HTTPS|Used for Windows apps to dynamically update their configuration -|*wac.phicdn.net*|HTTP|Windows Update -|*windowsupdate.com*|HTTP|Windows Update -|*wns.*windows.com*|TLSv1.2/HTTPS|Used for the Windows Push Notification Services (WNS) -|*wpc.v0cdn.net*|HTTP|Windows Telemetry -|arc.msn.com|HTTPS|Spotlight -|auth.gfx.ms*|HTTPS|MSA related -|cdn.onenote.net|HTTPS|OneNote Live Tile -|dmd.metaservices.microsoft.com*|HTTP|Device Authentication -|e-0009.e-msedge.net|HTTPS|Microsoft Office -|e10198.b.akamaiedge.net|HTTPS|Maps application -|evoke-windowsservices-tas.msedge*|HTTPS|Photos app -|fe2.update.microsoft.com*|TLSv1.2/HTTPS|Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store -|fe3.*.mp.microsoft.com.*|TLSv1.2/HTTPS|Windows Update, Microsoft Update, and Microsoft Store services -|g.live.com*|HTTPS|OneDrive -|go.microsoft.com|HTTP|Windows Defender -|iriscoremetadataprod.blob.core.windows.net|HTTPS|Windows Telemetry -|login.live.com|HTTPS|Device Authentication -|msagfx.live.com|HTTP|OneDrive -|ocsp.digicert.com*|HTTP|CRL and OCSP checks to the issuing certificate authorities -|officeclient.microsoft.com|HTTPS|Microsoft Office -|oneclient.sfx.ms*|HTTPS|Used by OneDrive for Business to download and verify app updates -|onecollector.cloudapp.aria.akadns.net|HTTPS|Microsoft Office -|ow1.res.office365.com|HTTP|Microsoft Office -|pti.store.microsoft.com|HTTPS|Microsoft Store -|purchase.mp.microsoft.com*|HTTPS|Used to communicate with Microsoft Store -|query.prod.cms.rt.microsoft.com*|HTTPS|Used to retrieve Windows Spotlight metadata -|ris.api.iris.microsoft.com*|TLSv1.2/HTTPS|Used to retrieve Windows Spotlight metadata -|ris-prod-atm.trafficmanager.net|HTTPS|Azure traffic manager -|s-0001.s-msedge.net|HTTPS|Microsoft Office -|self.events.data.microsoft.com|HTTPS|Microsoft Office -|settings.data.microsoft.com*|HTTPS|Used for Windows apps to dynamically update their configuration -|settings-win.data.microsoft.com*|HTTPS|Used for Windows apps to dynamically update their configuration -|share.microsoft.com|HTTPS|Microsoft Store -|skypeecs-prod-usw-0.cloudapp.net|HTTPS|Microsoft Store -|sls.update.microsoft.com*|TLSv1.2/HTTPS|Enables connections to Windows Update -|slscr.update.microsoft.com*|HTTPS|Enables connections to Windows Update -|store*.dsx.mp.microsoft.com*|HTTPS|Used to communicate with Microsoft Store -|storecatalogrevocation.storequality.microsoft.com|HTTPS|Microsoft Store -|storecatalogrevocation.storequality.microsoft.com*|HTTPS|Used to revoke licenses for malicious apps on the Microsoft Store -|store-images.*microsoft.com*|HTTP|Used to get images that are used for Microsoft Store suggestions -|storesdk.dsx.mp.microsoft.com|HTTP|Microsoft Store -|tile-service.weather.microsoft.com*|HTTP|Used to download updates to the Weather app Live Tile -|time.windows.com|HTTP|Microsoft Windows Time related -|tsfe.trafficshaping.dsp.mp.microsoft.com*|TLSv1.2/HTTPS|Used for content regulation -|v10.events.data.microsoft.com|HTTPS|Diagnostic Data -|watson.telemetry.microsoft.com|HTTPS|Diagnostic Data -|wdcp.microsoft.*|TLSv1.2, HTTPS|Used for Windows Defender when Cloud-based Protection is enabled -|wd-prod-cp-us-west-1-fe.westus.cloudapp.azure.com|HTTPS|Windows Defender -|wusofficehome.msocdn.com|HTTPS|Microsoft Office -|www.bing.com*|HTTP|Used for updates for Cortana, apps, and Live Tiles -|www.msftconnecttest.com|HTTP|Network Connection (NCSI) -|www.office.com|HTTPS|Microsoft Office +| Destination | Protocol | Description | +| ----------- | -------- | ----------- | +| \*.aria.microsoft.com\* | HTTPS | Microsoft Office Telemetry +| \*.b.akamai\*.net | HTTPS | Used to check for updates to Maps that have been downloaded for offline use +| \*.c-msedge.net | HTTP | Microsoft Office +| \*.dl.delivery.mp.microsoft.com\* | HTTP | Enables connections to Windows Update +| \*.download.windowsupdate.com\* | HTTP | Used to download operating system patches and updates +| \*.g.akamai\*.net | HTTPS | Used to check for updates to Maps that have been downloaded for offline use +| \*.login.msa.\*.net | HTTPS | Microsoft Account related +| \*.msn.com\* | TLSv1.2/HTTPS | Windows Spotlight +| \*.skype.com | HTTP/HTTPS | Skype +| \*.smartscreen.microsoft.com\* | HTTPS | Windows Defender Smartscreen +| \*.telecommand.telemetry.microsoft.com\* | HTTPS | Used by Windows Error Reporting +| \*cdn.onenote.net\* | HTTP | OneNote +| \*displaycatalog.\*mp.microsoft.com\* | HTTPS | Used to communicate with Microsoft Store +| \*emdl.ws.microsoft.com\* | HTTP | Windows Update +| \*geo-prod.do.dsp.mp.microsoft.com\* | TLSv1.2/HTTPS | Enables connections to Windows Update +| \*hwcdn.net\* | HTTP | Highwinds Content Delivery Network / Windows updates +| \*img-prod-cms-rt-microsoft-com\* | HTTPS | Microsoft Store or Inbox MSN Apps image download +| \*licensing.\*mp.microsoft.com\* | HTTPS | Licensing +| \*maps.windows.com\* | HTTPS | Related to Maps application +| \*msedge.net\* | HTTPS | Used by Microsoft OfficeHub to get the metadata of Microsoft Office apps +| \*nexusrules.officeapps.live.com\* | HTTPS | Microsoft Office Telemetry +| \*photos.microsoft.com\* | HTTPS | Photos App +| \*prod.do.dsp.mp.microsoft.com* | TLSv1.2/HTTPS | Used for Windows Update downloads of apps and OS updates +| \*purchase.md.mp.microsoft.com.akadns.net | HTTPS | Used to communicate with Microsoft Store +| \*settings.data.microsoft.com.akadns.net | HTTPS | Used for Windows apps to dynamically update their configuration +| \*wac.phicdn.net\* | HTTP | Windows Update +| \*windowsupdate.com\* | HTTP | Windows Update +| \*wns.\*windows.com\* | TLSv1.2/HTTPS | Used for the Windows Push Notification Services (WNS) +| \*wpc.v0cdn.net\* | HTTP | Windows Telemetry +| arc.msn.com | HTTPS | Spotlight +| auth.gfx.ms\* | HTTPS | MSA related +| cdn.onenote.net | HTTPS | OneNote Live Tile +| dmd.metaservices.microsoft.com\* | HTTP | Device Authentication +| e-0009.e-msedge.net | HTTPS | Microsoft Office +| e10198.b.akamaiedge.net | HTTPS | Maps application +| evoke-windowsservices-tas.msedge\* | HTTPS | Photos app +| fe2.update.microsoft.com\* | TLSv1.2/HTTPS | Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store +| fe3.\*.mp.microsoft.com.\* | TLSv1.2/HTTPS | Windows Update, Microsoft Update, and Microsoft Store services +| g.live.com\* | HTTPS | OneDrive +| go.microsoft.com | HTTP | Windows Defender +| iriscoremetadataprod.blob.core.windows.net | HTTPS | Windows Telemetry +| login.live.com | HTTPS | Device Authentication +| msagfx.live.com | HTTP | OneDrive +| ocsp.digicert.com\* | HTTP | CRL and OCSP checks to the issuing certificate authorities +| officeclient.microsoft.com | HTTPS | Microsoft Office +| oneclient.sfx.ms\* | HTTPS | Used by OneDrive for Business to download and verify app updates +| onecollector.cloudapp.aria.akadns.net | HTTPS | Microsoft Office +| ow1.res.office365.com | HTTP | Microsoft Office +| pti.store.microsoft.com | HTTPS | Microsoft Store +| purchase.mp.microsoft.com\* | HTTPS | Used to communicate with Microsoft Store +| query.prod.cms.rt.microsoft.com\* | HTTPS | Used to retrieve Windows Spotlight metadata +| ris.api.iris.microsoft.com\* | TLSv1.2/HTTPS | Used to retrieve Windows Spotlight metadata +| ris-prod-atm.trafficmanager.net | HTTPS | Azure traffic manager +| s-0001.s-msedge.net | HTTPS | Microsoft Office +| self.events.data.microsoft.com | HTTPS | Microsoft Office +| settings.data.microsoft.com\* | HTTPS | Used for Windows apps to dynamically update their configuration +| settings-win.data.microsoft.com\* | HTTPS | Used for Windows apps to dynamically update their configuration +| share.microsoft.com | HTTPS | Microsoft Store +| skypeecs-prod-usw-0.cloudapp.net | HTTPS | Microsoft Store +| sls.update.microsoft.com\* | TLSv1.2/HTTPS | Enables connections to Windows Update +| slscr.update.microsoft.com\* | HTTPS | Enables connections to Windows Update +| store*.dsx.mp.microsoft.com\* | HTTPS | Used to communicate with Microsoft Store +| storecatalogrevocation.storequality.microsoft.com | HTTPS | Microsoft Store +| storecatalogrevocation.storequality.microsoft.com\* | HTTPS | Used to revoke licenses for malicious apps on the Microsoft Store +| store-images.\*microsoft.com\* | HTTP | Used to get images that are used for Microsoft Store suggestions +| storesdk.dsx.mp.microsoft.com | HTTP | Microsoft Store +| tile-service.weather.microsoft.com\* | HTTP | Used to download updates to the Weather app Live Tile +| time.windows.com | HTTP | Microsoft Windows Time related +| tsfe.trafficshaping.dsp.mp.microsoft.com\* | TLSv1.2/HTTPS | Used for content regulation +| v10.events.data.microsoft.com | HTTPS | Diagnostic Data +| watson.telemetry.microsoft.com | HTTPS | Diagnostic Data +| wdcp.microsoft.\* | TLSv1.2, HTTPS | Used for Windows Defender when Cloud-based Protection is enabled +| wd-prod-cp-us-west-1-fe.westus.cloudapp.azure.com | HTTPS | Windows Defender +| wusofficehome.msocdn.com | HTTPS | Microsoft Office +| www.bing.com\* | HTTP | Used for updates for Cortana, apps, and Live Tiles +| www.msftconnecttest.com | HTTP | Network Connection (NCSI) +| www.office.com | HTTPS | Microsoft Office ## Windows 10 Pro -| **Destination** | **Protocol** | **Description** | -| --- | --- | --- | -|\*.cloudapp.azure.com|HTTPS|Azure -|\*.delivery.dsp.mp.microsoft.com.nsatc.net|HTTPS|Windows Update, Microsoft Update, and Microsoft Store services -|\*.displaycatalog.md.mp.microsoft.com.akadns.net|HTTPS|Microsoft Store -|\*.dl.delivery.mp.microsoft.com*|HTTP|Enables connections to Windows Update -|\*.e-msedge.net|HTTPS|Used by OfficeHub to get the metadata of Office apps -|\*.g.akamaiedge.net|HTTPS|Used to check for updates to maps that have been downloaded for offline use -|\*.s-msedge.net|HTTPS|Used by OfficeHub to get the metadata of Office apps -|\*.windowsupdate.com*|HTTP|Enables connections to Windows Update -|\*.wns.notify.windows.com.akadns.net|HTTPS|Used for the Windows Push Notification Services (WNS) -|\*dsp.mp.microsoft.com.nsatc.net|HTTPS|Enables connections to Windows Update -|\*c-msedge.net|HTTP|Office -|a1158.g.akamai.net|HTTP|Maps application -|arc.msn.com*|HTTP / HTTPS|Used to retrieve Windows Spotlight metadata -|blob.mwh01prdstr06a.store.core.windows.net|HTTPS|Microsoft Store -|browser.pipe.aria.microsoft.com|HTTPS|Microsoft Office -|bubblewitch3mobile.king.com|HTTPS|Bubble Witch application -|candycrush.king.com|HTTPS|Candy Crush application -|cdn.onenote.net|HTTP|Microsoft OneNote -|cds.p9u4n2q3.hwcdn.net|HTTP|Highwinds Content Delivery Network traffic for Windows updates -|client.wns.windows.com|HTTPS|Winddows Notification System -|co4.telecommand.telemetry.microsoft.com.akadns.net|HTTPS|Windows Error Reporting -|config.edge.skype.com|HTTPS|Microsoft Skype -|cs11.wpc.v0cdn.net|HTTP|Windows Telemetry -|cs9.wac.phicdn.net|HTTP|Windows Update -|cy2.licensing.md.mp.microsoft.com.akadns.net|HTTPS|Used to communicate with Microsoft Store -|cy2.purchase.md.mp.microsoft.com.akadns.net|HTTPS|Used to communicate with Microsoft Store -|cy2.settings.data.microsoft.com.akadns.net|HTTPS|Used to communicate with Microsoft Store -|dmd.metaservices.microsoft.com.akadns.net|HTTP|Device Authentication -|e-0009.e-msedge.net|HTTPS|Microsoft Office -|e10198.b.akamaiedge.net|HTTPS|Maps application -|fe3.update.microsoft.com|HTTPS|Windows Update -|g.live.com|HTTPS|Microsoft OneDrive -|g.msn.com.nsatc.net|HTTPS|Used to retrieve Windows Spotlight metadata -|geo-prod.do.dsp.mp.microsoft.com|HTTPS|Windows Update -|go.microsoft.com|HTTP|Windows Defender -|iecvlist.microsoft.com|HTTPS|Microsoft Edge -|img-prod-cms-rt-microsoft-com.akamaized.net|HTTP / HTTPS|Microsoft Store -|ipv4.login.msa.akadns6.net|HTTPS|Used for Microsoft accounts to sign in -|licensing.mp.microsoft.com|HTTP|Licensing -|location-inference-westus.cloudapp.net|HTTPS|Used for location data -|login.live.com|HTTP|Device Authentication -|maps.windows.com|HTTP|Maps application -|modern.watson.data.microsoft.com.akadns.net|HTTPS|Used by Windows Error Reporting -|msagfx.live.com|HTTP|OneDrive -|nav.smartscreen.microsoft.com|HTTPS|Windows Defender -|ocsp.digicert.com*|HTTP|CRL and OCSP checks to the issuing certificate authorities -|oneclient.sfx.ms|HTTP|OneDrive -|pti.store.microsoft.com|HTTPS|Microsoft Store -|ris.api.iris.microsoft.com.akadns.net|HTTPS|Used to retrieve Windows Spotlight metadata -|ris-prod-atm.trafficmanager.net|HTTPS|Azure -|s2s.config.skype.com|HTTP|Microsoft Skype -|settings-win.data.microsoft.com|HTTPS|Application settings -|share.microsoft.com|HTTPS|Microsoft Store -|skypeecs-prod-usw-0.cloudapp.net|HTTPS|Microsoft Skype -|slscr.update.microsoft.com|HTTPS|Windows Update -|storecatalogrevocation.storequality.microsoft.com|HTTPS|Microsoft Store -|store-images.microsoft.com|HTTPS|Microsoft Store -|tile-service.weather.microsoft.com/*|HTTP|Used to download updates to the Weather app Live Tile -|time.windows.com|HTTP|Windows time -|tsfe.trafficshaping.dsp.mp.microsoft.com|HTTPS|Used for content regulation -|v10.events.data.microsoft.com*|HTTPS|Microsoft Office -|vip5.afdorigin-prod-am02.afdogw.com|HTTPS|Used to serve office 365 experimentation traffic -|watson.telemetry.microsoft.com|HTTPS|Telemetry -|wdcp.microsoft.com|HTTPS|Windows Defender -|wusofficehome.msocdn.com|HTTPS|Microsoft Office -|www.bing.com|HTTPS|Cortana and Search -|www.microsoft.com|HTTP|Diagnostic -|www.msftconnecttest.com|HTTP|Network connection -|www.office.com|HTTPS|Microsoft Office +| Destination | Protocol | Description | +| ----------- | -------- | ----------- | +| \*.cloudapp.azure.com | HTTPS | Azure +| \*.delivery.dsp.mp.microsoft.com.nsatc.net | HTTPS | Windows Update, Microsoft Update, and Microsoft Store services +| \*.displaycatalog.md.mp.microsoft.com.akadns.net | HTTPS | Microsoft Store +| \*.dl.delivery.mp.microsoft.com\* | HTTP | Enables connections to Windows Update +| \*.e-msedge.net | HTTPS | Used by OfficeHub to get the metadata of Office apps +| \*.g.akamaiedge.net | HTTPS | Used to check for updates to maps that have been downloaded for offline use +| \*.s-msedge.net | HTTPS | Used by OfficeHub to get the metadata of Office apps +| \*.windowsupdate.com\* | HTTP | Enables connections to Windows Update +| \*.wns.notify.windows.com.akadns.net | HTTPS | Used for the Windows Push Notification Services (WNS) +| \*dsp.mp.microsoft.com.nsatc.net | HTTPS | Enables connections to Windows Update +| \*c-msedge.net | HTTP | Office +| a1158.g.akamai.net | HTTP | Maps application +| arc.msn.com\* | HTTP / HTTPS | Used to retrieve Windows Spotlight metadata +| blob.mwh01prdstr06a.store.core.windows.net | HTTPS | Microsoft Store +| browser.pipe.aria.microsoft.com | HTTPS | Microsoft Office +| bubblewitch3mobile.king.com | HTTPS | Bubble Witch application +| candycrush.king.com | HTTPS | Candy Crush application +| cdn.onenote.net | HTTP | Microsoft OneNote +| cds.p9u4n2q3.hwcdn.net | HTTP | Highwinds Content Delivery Network traffic for Windows updates +| client.wns.windows.com | HTTPS | Winddows Notification System +| co4.telecommand.telemetry.microsoft.com.akadns.net | HTTPS | Windows Error Reporting +| config.edge.skype.com | HTTPS | Microsoft Skype +| cs11.wpc.v0cdn.net | HTTP | Windows Telemetry +| cs9.wac.phicdn.net | HTTP | Windows Update +| cy2.licensing.md.mp.microsoft.com.akadns.net | HTTPS | Used to communicate with Microsoft Store +| cy2.purchase.md.mp.microsoft.com.akadns.net | HTTPS | Used to communicate with Microsoft Store +| cy2.settings.data.microsoft.com.akadns.net | HTTPS | Used to communicate with Microsoft Store +| dmd.metaservices.microsoft.com.akadns.net | HTTP | Device Authentication +| e-0009.e-msedge.net | HTTPS | Microsoft Office +| e10198.b.akamaiedge.net | HTTPS | Maps application +| fe3.update.microsoft.com | HTTPS | Windows Update +| g.live.com | HTTPS | Microsoft OneDrive +| g.msn.com.nsatc.net | HTTPS | Used to retrieve Windows Spotlight metadata +| geo-prod.do.dsp.mp.microsoft.com | HTTPS | Windows Update +| go.microsoft.com | HTTP | Windows Defender +| iecvlist.microsoft.com | HTTPS | Microsoft Edge +| img-prod-cms-rt-microsoft-com.akamaized.net | HTTP / HTTPS | Microsoft Store +| ipv4.login.msa.akadns6.net | HTTPS | Used for Microsoft accounts to sign in +| licensing.mp.microsoft.com | HTTP | Licensing +| location-inference-westus.cloudapp.net | HTTPS | Used for location data +| login.live.com | HTTP | Device Authentication +| maps.windows.com | HTTP | Maps application +| modern.watson.data.microsoft.com.akadns.net | HTTPS | Used by Windows Error Reporting +| msagfx.live.com | HTTP | OneDrive +| nav.smartscreen.microsoft.com | HTTPS | Windows Defender +| ocsp.digicert.com\* | HTTP | CRL and OCSP checks to the issuing certificate authorities +| oneclient.sfx.ms | HTTP | OneDrive +| pti.store.microsoft.com | HTTPS | Microsoft Store +| ris.api.iris.microsoft.com.akadns.net | HTTPS | Used to retrieve Windows Spotlight metadata +| ris-prod-atm.trafficmanager.net | HTTPS | Azure +| s2s.config.skype.com | HTTP | Microsoft Skype +| settings-win.data.microsoft.com | HTTPS | Application settings +| share.microsoft.com | HTTPS | Microsoft Store +| skypeecs-prod-usw-0.cloudapp.net | HTTPS | Microsoft Skype +| slscr.update.microsoft.com | HTTPS | Windows Update +| storecatalogrevocation.storequality.microsoft.com | HTTPS | Microsoft Store +| store-images.microsoft.com | HTTPS | Microsoft Store +| tile-service.weather.microsoft.com/\* | HTTP | Used to download updates to the Weather app Live Tile +| time.windows.com | HTTP | Windows time +| tsfe.trafficshaping.dsp.mp.microsoft.com | HTTPS | Used for content regulation +| v10.events.data.microsoft.com\* | HTTPS | Microsoft Office +| vip5.afdorigin-prod-am02.afdogw.com | HTTPS | Used to serve office 365 experimentation traffic +| watson.telemetry.microsoft.com | HTTPS | Telemetry +| wdcp.microsoft.com | HTTPS | Windows Defender +| wusofficehome.msocdn.com | HTTPS | Microsoft Office +| www.bing.com | HTTPS | Cortana and Search +| www.microsoft.com | HTTP | Diagnostic +| www.msftconnecttest.com | HTTP | Network connection +| www.office.com | HTTPS | Microsoft Office ## Windows 10 Education -| **Destination** | **Protocol** | **Description** | -| --- | --- | --- | -|\*.b.akamaiedge.net|HTTPS|Used to check for updates to maps that have been downloaded for offline use -|\*.c-msedge.net|HTTP|Used by OfficeHub to get the metadata of Office apps -|\*.dl.delivery.mp.microsoft.com*|HTTP|Windows Update -|\*.e-msedge.net|HTTPS|Used by OfficeHub to get the metadata of Office apps -|\*.g.akamaiedge.net|HTTPS|Used to check for updates to Maps that have been downloaded for offline use -|\*.licensing.md.mp.microsoft.com.akadns.net|HTTPS|Microsoft Store -|\*.settings.data.microsoft.com.akadns.net|HTTPS|Microsoft Store -|\*.skype.com*|HTTPS|Used to retrieve Skype configuration values -|\*.smartscreen*.microsoft.com|HTTPS|Windows Defender -|\*.s-msedge.net|HTTPS|Used by OfficeHub to get the metadata of Office apps -|\*.telecommand.telemetry.microsoft.com*|HTTPS|Used by Windows Error Reporting -|\*.wac.phicdn.net|HTTP|Windows Update -|\*.windowsupdate.com*|HTTP|Windows Update -|\*.wns.windows.com|HTTPS|Windows Notifications Service -|\*.wpc.*.net|HTTP|Diagnostic Data -|\*displaycatalog.md.mp.microsoft.com.akadns.net|HTTPS|Microsoft Store -|\*dsp.mp.microsoft.com|HTTPS|Windows Update -|a1158.g.akamai.net|HTTP|Maps -|a122.dscg3.akamai.net|HTTP|Maps -|a767.dscg3.akamai.net|HTTP|Maps -|au.download.windowsupdate.com*|HTTP|Windows Update -|bing.com/*|HTTPS|Used for updates for Cortana, apps, and Live Tiles -|blob.dz5prdstr01a.store.core.windows.net|HTTPS|Microsoft Store -|browser.pipe.aria.microsoft.com|HTTP|Used by OfficeHub to get the metadata of Office apps -|cdn.onenote.net/livetile/*|HTTPS|Used for OneNote Live Tile -|cds.p9u4n2q3.hwcdn.net|HTTP|Used by the Highwinds Content Delivery Network to perform Windows updates -|client-office365-tas.msedge.net/*|HTTPS|Microsoft 365 admin center and Office in a browser -|ctldl.windowsupdate.com*|HTTP|Used to download certificates that are publicly known to be fraudulent -|displaycatalog.mp.microsoft.com/*|HTTPS|Microsoft Store -|dmd.metaservices.microsoft.com*|HTTP|Device Authentication -|download.windowsupdate.com*|HTTPS|Windows Update -|emdl.ws.microsoft.com/*|HTTP|Used to download apps from the Microsoft Store -|evoke-windowsservices-tas.msedge.net|HTTPS|Photo app -|fe2.update.microsoft.com*|HTTPS|Windows Update, Microsoft Update, Microsoft Store services -|fe3.delivery.dsp.mp.microsoft.com.nsatc.net|HTTPS|Windows Update, Microsoft Update, Microsoft Store services -|fe3.delivery.mp.microsoft.com*|HTTPS|Windows Update, Microsoft Update, Microsoft Store services -|g.live.com*|HTTPS|Used by OneDrive for Business to download and verify app updates -|g.msn.com.nsatc.net|HTTPS|Used to retrieve Windows Spotlight metadata -|go.microsoft.com|HTTP|Windows Defender -|iecvlist.microsoft.com|HTTPS|Microsoft Edge browser -|ipv4.login.msa.akadns6.net|HTTPS|Used for Microsoft accounts to sign in -|licensing.mp.microsoft.com*|HTTPS|Used for online activation and some app licensing -|login.live.com|HTTPS|Device Authentication -|maps.windows.com/windows-app-web-link|HTTPS|Maps application -|modern.watson.data.microsoft.com.akadns.net|HTTPS|Used by Windows Error Reporting -|msagfx.live.com|HTTPS|OneDrive -|ocos-office365-s2s.msedge.net/*|HTTPS|Used to connect to the Microsoft 365 admin center's shared infrastructure -|ocsp.digicert.com*|HTTP|CRL and OCSP checks to the issuing certificate authorities -|oneclient.sfx.ms/*|HTTPS|Used by OneDrive for Business to download and verify app updates -|onecollector.cloudapp.aria.akadns.net|HTTPS|Microsoft Office -|pti.store.microsoft.com|HTTPS|Microsoft Store -|settings-win.data.microsoft.com/settings/*|HTTPS|Used as a way for apps to dynamically update their configuration -|share.microsoft.com|HTTPS|Microsoft Store -|skypeecs-prod-usw-0.cloudapp.net|HTTPS|Skype -|sls.update.microsoft.com*|HTTPS|Windows Update -|storecatalogrevocation.storequality.microsoft.com*|HTTPS|Used to revoke licenses for malicious apps on the Microsoft Store -|tile-service.weather.microsoft.com*|HTTP|Used to download updates to the Weather app Live Tile -|tsfe.trafficshaping.dsp.mp.microsoft.com|HTTPS|Windows Update -|v10.events.data.microsoft.com*|HTTPS|Diagnostic Data -|vip5.afdorigin-prod-ch02.afdogw.com|HTTPS|Used to serve Office 365 experimentation traffic -|watson.telemetry.microsoft.com*|HTTPS|Used by Windows Error Reporting -|wdcp.microsoft.com|HTTPS|Windows Defender -|wd-prod-cp-us-east-1-fe.eastus.cloudapp.azure.com|HTTPS|Azure -|wusofficehome.msocdn.com|HTTPS|Microsoft Office -|www.bing.com|HTTPS|Cortana and Search -|www.microsoft.com|HTTP|Diagnostic Data -|www.microsoft.com/pkiops/certs/*|HTTP|CRL and OCSP checks to the issuing certificate authorities -|www.msftconnecttest.com|HTTP|Network Connection -|www.office.com|HTTPS|Microsoft Office +| Destination | Protocol | Description | +| ----------- | -------- | ----------- | +| \*.b.akamaiedge.net | HTTPS | Used to check for updates to maps that have been downloaded for offline use +| \*.c-msedge.net | HTTP | Used by OfficeHub to get the metadata of Office apps +| \*.dl.delivery.mp.microsoft.com\* | HTTP | Windows Update +| \*.e-msedge.net | HTTPS | Used by OfficeHub to get the metadata of Office apps +| \*.g.akamaiedge.net | HTTPS | Used to check for updates to Maps that have been downloaded for offline use +| \*.licensing.md.mp.microsoft.com.akadns.net | HTTPS | Microsoft Store +| \*.settings.data.microsoft.com.akadns.net | HTTPS | Microsoft Store +| \*.skype.com\* | HTTPS | Used to retrieve Skype configuration values +| \*.smartscreen\*.microsoft.com | HTTPS | Windows Defender +| \*.s-msedge.net | HTTPS | Used by OfficeHub to get the metadata of Office apps +| \*.telecommand.telemetry.microsoft.com\* | HTTPS | Used by Windows Error Reporting +| \*.wac.phicdn.net | HTTP | Windows Update +| \*.windowsupdate.com\* | HTTP | Windows Update +| \*.wns.windows.com | HTTPS | Windows Notifications Service +| \*.wpc.\*.net | HTTP | Diagnostic Data +| \*displaycatalog.md.mp.microsoft.com.akadns.net | HTTPS | Microsoft Store +| \*dsp.mp.microsoft.com | HTTPS | Windows Update +| a1158.g.akamai.net | HTTP | Maps +| a122.dscg3.akamai.net | HTTP | Maps +| a767.dscg3.akamai.net | HTTP | Maps +| au.download.windowsupdate.com\* | HTTP | Windows Update +| bing.com/\* | HTTPS | Used for updates for Cortana, apps, and Live Tiles +| blob.dz5prdstr01a.store.core.windows.net | HTTPS | Microsoft Store +| browser.pipe.aria.microsoft.com | HTTP | Used by OfficeHub to get the metadata of Office apps +| cdn.onenote.net/livetile/\* | HTTPS | Used for OneNote Live Tile +| cds.p9u4n2q3.hwcdn.net | HTTP | Used by the Highwinds Content Delivery Network to perform Windows updates +| client-office365-tas.msedge.net/\* | HTTPS | Microsoft 365 admin center and Office in a browser +| ctldl.windowsupdate.com\* | HTTP | Used to download certificates that are publicly known to be fraudulent +| displaycatalog.mp.microsoft.com/\* | HTTPS | Microsoft Store +| dmd.metaservices.microsoft.com\* | HTTP | Device Authentication +| download.windowsupdate.com\* | HTTPS | Windows Update +| emdl.ws.microsoft.com/\* | HTTP | Used to download apps from the Microsoft Store +| evoke-windowsservices-tas.msedge.net | HTTPS | Photo app +| fe2.update.microsoft.com\* | HTTPS | Windows Update, Microsoft Update, Microsoft Store services +| fe3.delivery.dsp.mp.microsoft.com.nsatc.net | HTTPS | Windows Update, Microsoft Update, Microsoft Store services +| fe3.delivery.mp.microsoft.com\* | HTTPS | Windows Update, Microsoft Update, Microsoft Store services +| g.live.com\* | HTTPS | Used by OneDrive for Business to download and verify app updates +| g.msn.com.nsatc.net | HTTPS | Used to retrieve Windows Spotlight metadata +| go.microsoft.com | HTTP | Windows Defender +| iecvlist.microsoft.com | HTTPS | Microsoft Edge browser +| ipv4.login.msa.akadns6.net | HTTPS | Used for Microsoft accounts to sign in +| licensing.mp.microsoft.com\* | HTTPS | Used for online activation and some app licensing +| login.live.com | HTTPS | Device Authentication +| maps.windows.com/windows-app-web-link | HTTPS | Maps application +| modern.watson.data.microsoft.com.akadns.net | HTTPS | Used by Windows Error Reporting +| msagfx.live.com | HTTPS | OneDrive +| ocos-office365-s2s.msedge.net/\* | HTTPS | Used to connect to the Microsoft 365 admin center's shared infrastructure +| ocsp.digicert.com\* | HTTP | CRL and OCSP checks to the issuing certificate authorities +| oneclient.sfx.ms/\* | HTTPS | Used by OneDrive for Business to download and verify app updates +| onecollector.cloudapp.aria.akadns.net | HTTPS | Microsoft Office +| pti.store.microsoft.com | HTTPS | Microsoft Store +| settings-win.data.microsoft.com/settings/\* | HTTPS | Used as a way for apps to dynamically update their configuration +| share.microsoft.com | HTTPS | Microsoft Store +| skypeecs-prod-usw-0.cloudapp.net | HTTPS | Skype +| sls.update.microsoft.com\* | HTTPS | Windows Update +| storecatalogrevocation.storequality.microsoft.com\* | HTTPS | Used to revoke licenses for malicious apps on the Microsoft Store +| tile-service.weather.microsoft.com\* | HTTP | Used to download updates to the Weather app Live Tile +| tsfe.trafficshaping.dsp.mp.microsoft.com | HTTPS | Windows Update +| v10.events.data.microsoft.com\* | HTTPS | Diagnostic Data +| vip5.afdorigin-prod-ch02.afdogw.com | HTTPS | Used to serve Office 365 experimentation traffic +| watson.telemetry.microsoft.com\* | HTTPS | Used by Windows Error Reporting +| wdcp.microsoft.com | HTTPS | Windows Defender +| wd-prod-cp-us-east-1-fe.eastus.cloudapp.azure.com | HTTPS | Azure +| wusofficehome.msocdn.com | HTTPS | Microsoft Office +| www.bing.com | HTTPS | Cortana and Search +| www.microsoft.com | HTTP | Diagnostic Data +| www.microsoft.com/pkiops/certs/\* | HTTP | CRL and OCSP checks to the issuing certificate authorities +| www.msftconnecttest.com | HTTP | Network Connection +| www.office.com | HTTPS | Microsoft Office From 5ebd60e8f342d32d11cee6470a535c0837961269 Mon Sep 17 00:00:00 2001 From: illfated Date: Sun, 10 May 2020 02:39:28 +0200 Subject: [PATCH 053/177] Remove 2 unneeded backslashes - a slash character may sometimes work as an escape character - www.bing.com does not need to have an ending asterisk escaped --- .../privacy/windows-endpoints-1903-non-enterprise-editions.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md index 36ad32df9f..ebf9ee6c89 100644 --- a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md @@ -118,7 +118,7 @@ The following methodology was used to derive the network endpoints: | wdcp.microsoft.\* | TLSv1.2, HTTPS | Used for Windows Defender when Cloud-based Protection is enabled | wd-prod-cp-us-west-1-fe.westus.cloudapp.azure.com | HTTPS | Windows Defender | wusofficehome.msocdn.com | HTTPS | Microsoft Office -| www.bing.com\* | HTTP | Used for updates for Cortana, apps, and Live Tiles +| www.bing.com* | HTTP | Used for updates for Cortana, apps, and Live Tiles | www.msftconnecttest.com | HTTP | Network Connection (NCSI) | www.office.com | HTTPS | Microsoft Office @@ -269,7 +269,7 @@ The following methodology was used to derive the network endpoints: | wusofficehome.msocdn.com | HTTPS | Microsoft Office | www.bing.com | HTTPS | Cortana and Search | www.microsoft.com | HTTP | Diagnostic Data -| www.microsoft.com/pkiops/certs/\* | HTTP | CRL and OCSP checks to the issuing certificate authorities +| www.microsoft.com/pkiops/certs/* | HTTP | CRL and OCSP checks to the issuing certificate authorities | www.msftconnecttest.com | HTTP | Network Connection | www.office.com | HTTPS | Microsoft Office From 65cfd14dacbe35c4e29213444ae9e5eac9895e9d Mon Sep 17 00:00:00 2001 From: illfated Date: Sun, 10 May 2020 03:23:39 +0200 Subject: [PATCH 054/177] Deployment/S mode: Link & whitespace correction Description: As reported in issue ticket #6676 (Broken links), the link URL "S mode devices" (www.microsoft.com/windows/view-all-devices) returns error 404 unless you access the link from a computer using the locale EN-US (only existing version of the page, non-localized and non-auto-adjusting). Thank you to RAJU2529 (VARADHARAJAN K) for reporting this issue. Changes proposed: - Add /en-us/ to the URL microsoft.com/windows/view-all-devices - Remove redundant EOL whitespace - Consistency: add 1 blank line after the page title and next Heading Ticket closure or reference: Ref. #6676 (already closed (prematurely), as an incorrect report) --- windows/deployment/s-mode.md | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/windows/deployment/s-mode.md b/windows/deployment/s-mode.md index 3d5adb42f4..e8a3556632 100644 --- a/windows/deployment/s-mode.md +++ b/windows/deployment/s-mode.md @@ -1,6 +1,6 @@ --- title: Windows 10 Pro in S mode -description: Overview of Windows 10 Pro/Enterprise in S mode. What is S mode for Enterprise customers? +description: Overview of Windows 10 Pro/Enterprise in S mode. What is S mode for Enterprise customers? keywords: Windows 10 S, S mode, Windows S mode, Windows 10 S mode, S-mode, system requirements, Overview, Windows 10 Pro in S mode, Windows 10 Enterprise in S mode, Windows 10 Pro/Enterprise in S mode ms.mktglfcycl: deploy ms.localizationpriority: medium @@ -18,33 +18,35 @@ ms.topic: article --- # Windows 10 in S mode - What is it? -S mode is an evolution of the S SKU introduced with Windows 10 April 2018 Update. It's a configuration that's available on all Windows Editions when enabled at the time of manufacturing. The edition of Windows can be upgrade at any time as shown below. However, the switch from S mode is a onetime switch and can only be undone by a wipe and reload of the OS. + +S mode is an evolution of the S SKU introduced with Windows 10 April 2018 Update. It's a configuration that's available on all Windows Editions when enabled at the time of manufacturing. The edition of Windows can be upgrade at any time as shown below. However, the switch from S mode is a onetime switch and can only be undone by a wipe and reload of the OS. ![Configuration and features of S mode](images/smodeconfig.png) ## S mode key features + **Microsoft-verified security** -With Windows 10 in S mode, you’ll find your favorite applications, such as Office, Evernote, and Spotify in the Microsoft Store where they’re Microsoft-verified for security. You can also feel secure when you’re online. Microsoft Edge, your default browser, gives you protection against phishing and socially engineered malware. +With Windows 10 in S mode, you’ll find your favorite applications, such as Office, Evernote, and Spotify in the Microsoft Store where they’re Microsoft-verified for security. You can also feel secure when you’re online. Microsoft Edge, your default browser, gives you protection against phishing and socially engineered malware. **Performance that lasts** -Start-ups are quick, and S mode is built to keep them that way. With Microsoft Edge as your browser, your online experience is fast and secure. Plus, you’ll enjoy a smooth, responsive experience, whether you’re streaming HD video, opening apps, or being productive on the go. +Start-ups are quick, and S mode is built to keep them that way. With Microsoft Edge as your browser, your online experience is fast and secure. Plus, you’ll enjoy a smooth, responsive experience, whether you’re streaming HD video, opening apps, or being productive on the go. **Choice and flexibility** -Save your files to your favorite cloud, like OneDrive or Dropbox, and access them from any device you choose. Browse the Microsoft Store for thousands of apps, and if you don’t find exactly what you want, you can easily [switch out of S mode](https://docs.microsoft.com/windows/deployment/windows-10-pro-in-s-mode) to Windows 10 Home, Pro, or Enterprise editions at any time and search the web for more choices, as shown below. +Save your files to your favorite cloud, like OneDrive or Dropbox, and access them from any device you choose. Browse the Microsoft Store for thousands of apps, and if you don’t find exactly what you want, you can easily [switch out of S mode](https://docs.microsoft.com/windows/deployment/windows-10-pro-in-s-mode) to Windows 10 Home, Pro, or Enterprise editions at any time and search the web for more choices, as shown below. ![Switching out of S mode flow chart](images/s-mode-flow-chart.png) ## Deployment -Windows 10 in S mode is built for [modern management](https://docs.microsoft.com/windows/client-management/manage-windows-10-in-your-organization-modern-management) which means using [Windows Autopilot](https://docs.microsoft.com/windows/deployment/windows-autopilot/windows-10-autopilot). Windows Autopilot lets you deploy the device directly to a user without IT having to touch the physical device. Instead of manually deploying a custom image, Windows Autopilot will start with a generic PC that can only be used to join the company domain; policies are then deployed automatically through mobile device management to customize the device to the user and the desired environment. Devices are shipped in S mode; you can either keep them in S mode or use Windows Autopilot to switch the device out of S mode during the first run process or later using mobile device management, if desired. +Windows 10 in S mode is built for [modern management](https://docs.microsoft.com/windows/client-management/manage-windows-10-in-your-organization-modern-management) which means using [Windows Autopilot](https://docs.microsoft.com/windows/deployment/windows-autopilot/windows-10-autopilot). Windows Autopilot lets you deploy the device directly to a user without IT having to touch the physical device. Instead of manually deploying a custom image, Windows Autopilot will start with a generic PC that can only be used to join the company domain; policies are then deployed automatically through mobile device management to customize the device to the user and the desired environment. Devices are shipped in S mode; you can either keep them in S mode or use Windows Autopilot to switch the device out of S mode during the first run process or later using mobile device management, if desired. ## Keep line of business apps functioning with Desktop Bridge -Worried about your line of business apps not working in S mode? [Desktop Bridge](https://docs.microsoft.com/windows/uwp/porting/desktop-to-uwp-root) enables you to convert your line of business apps to a packaged app with UWP manifest. After testing and validating you can distribute the app through the Microsoft Store, making it ideal for Windows 10 in S mode. +Worried about your line of business apps not working in S mode? [Desktop Bridge](https://docs.microsoft.com/windows/uwp/porting/desktop-to-uwp-root) enables you to convert your line of business apps to a packaged app with UWP manifest. After testing and validating you can distribute the app through the Microsoft Store, making it ideal for Windows 10 in S mode. ## Repackage Win32 apps into the MSIX format @@ -54,6 +56,6 @@ The [MSIX Packaging Tool](https://docs.microsoft.com/windows/application-managem ## Related links - [Consumer applications for S mode](https://www.microsoft.com/windows/s-mode) -- [S mode devices](https://www.microsoft.com/windows/view-all-devices) +- [S mode devices](https://www.microsoft.com/en-us/windows/view-all-devices) - [Windows Defender Application Control deployment guide](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-deployment-guide) - [Windows Defender Advanced Threat Protection](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp) From d54c30ec7cf2f57a963c187e956b6e111a676797 Mon Sep 17 00:00:00 2001 From: Ananta Gupta Date: Sun, 10 May 2020 14:02:01 +0530 Subject: [PATCH 055/177] Editing minimum supported kernel version --- .../microsoft-defender-atp/microsoft-defender-atp-linux.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md index b84dce1ebe..0a57598987 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md @@ -83,7 +83,7 @@ If you experience any installation failures, refer to [Troubleshooting installat - SUSE Linux Enterprise Server 12 or higher - Oracle Linux 7.2 or higher -- Minimum kernel version 2.6.38 +- Minimum kernel version 3.10.0-327 - The `fanotify` kernel option must be enabled > [!CAUTION] > Running Microsoft Defender ATP for Linux side by side with other `fanotify`-based security solutions is not supported. It can lead to unpredictable results, including hanging the operating system. From 92b3f08a0737573d7d9c310601e2d24f3a07267c Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Sun, 10 May 2020 13:50:44 +0300 Subject: [PATCH 056/177] Update configure-proxy-internet.md Changes to list of common URLs required for certificate revocation checks to work correctly in restricted network environment Reference: https://docs.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services#-allowed-traffic-list-for-windows-restricted-traffic-limited-functionality-baseline --- .../microsoft-defender-atp/configure-proxy-internet.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet.md b/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet.md index 66efa55144..90ad7896eb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet.md @@ -111,7 +111,7 @@ If a proxy or firewall has HTTPS scanning (SSL inspection) enabled, exclude the Service location | Microsoft.com DNS record -|- -Common URLs for all locations | ```crl.microsoft.com```
    ```ctldl.windowsupdate.com```
    ```events.data.microsoft.com```
    ```notify.windows.com```
    ```settings-win.data.microsoft.com``` +Common URLs for all locations | ```crl.microsoft.com/pki/crl/*```
    ```ctldl.windowsupdate.com```
    ```www.microsoft.com/pkiops/*```
    ```events.data.microsoft.com```
    ```notify.windows.com```
    ```settings-win.data.microsoft.com``` European Union | ```eu.vortex-win.data.microsoft.com```
    ```eu-v20.events.data.microsoft.com```
    ```usseu1northprod.blob.core.windows.net```
    ```usseu1westprod.blob.core.windows.net```
    ```winatp-gw-neu.microsoft.com```
    ```winatp-gw-weu.microsoft.com```
    ```wseu1northprod.blob.core.windows.net```
    ```wseu1westprod.blob.core.windows.net```
    ```automatedirstrprdweu.blob.core.windows.net```
    ```automatedirstrprdneu.blob.core.windows.net``` United Kingdom | ```uk.vortex-win.data.microsoft.com```
    ```uk-v20.events.data.microsoft.com```
    ```ussuk1southprod.blob.core.windows.net```
    ```ussuk1westprod.blob.core.windows.net```
    ```winatp-gw-uks.microsoft.com```
    ```winatp-gw-ukw.microsoft.com```
    ```wsuk1southprod.blob.core.windows.net```
    ```wsuk1westprod.blob.core.windows.net```
    ```automatedirstrprduks.blob.core.windows.net```
    ```automatedirstrprdukw.blob.core.windows.net``` United States | ```us.vortex-win.data.microsoft.com```
    ```ussus1eastprod.blob.core.windows.net```
    ```ussus1westprod.blob.core.windows.net```
    ```ussus2eastprod.blob.core.windows.net```
    ```ussus2westprod.blob.core.windows.net```
    ```ussus3eastprod.blob.core.windows.net```
    ```ussus3westprod.blob.core.windows.net```
    ```ussus4eastprod.blob.core.windows.net```
    ```ussus4westprod.blob.core.windows.net```
    ```us-v20.events.data.microsoft.com```
    ```winatp-gw-cus.microsoft.com```
    ```winatp-gw-eus.microsoft.com```
    ```wsus1eastprod.blob.core.windows.net```
    ```wsus1westprod.blob.core.windows.net```
    ```wsus2eastprod.blob.core.windows.net```
    ```wsus2westprod.blob.core.windows.net```
    ```automatedirstrprdcus.blob.core.windows.net```
    ```automatedirstrprdeus.blob.core.windows.net``` From 391295bee20c9525de77faacd7b1100deabae6cc Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Sun, 10 May 2020 14:08:41 +0300 Subject: [PATCH 057/177] Update machine-tags.md Adding note about maximum number of allowed characters --- .../threat-protection/microsoft-defender-atp/machine-tags.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md index daf8b70f1e..a3fa8fc591 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md @@ -71,6 +71,8 @@ You can also delete tags from this view. >- Windows 8.1 >- Windows 7 SP1 +> Please note that the maximum number of allowed characters is hard-coded to 32. + Machines with similar tags can be handy when you need to apply contextual action on a specific list of machines. Use the following registry key entry to add a tag on a machine: @@ -82,3 +84,4 @@ Use the following registry key entry to add a tag on a machine: >[!NOTE] >The device tag is part of the machine information report that's generated once a day. As an alternative, you may choose to restart the endpoint that would transfer a new machine information report. + From 3a6b73d8f556b8f384abe6098113907793ca22a6 Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Sun, 10 May 2020 14:10:35 +0300 Subject: [PATCH 058/177] Update machine-tags.md Should be 30 and not 32 --- .../threat-protection/microsoft-defender-atp/machine-tags.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md index a3fa8fc591..2a936b08fc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md @@ -71,7 +71,7 @@ You can also delete tags from this view. >- Windows 8.1 >- Windows 7 SP1 -> Please note that the maximum number of allowed characters is hard-coded to 32. +> Please note that the maximum number of allowed characters is hard-coded to 30. Machines with similar tags can be handy when you need to apply contextual action on a specific list of machines. From fe62d5cc6c5931985152f8e5e7995850742e20b3 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 10 May 2020 16:44:17 +0500 Subject: [PATCH 059/177] Update wirednetwork-csp.md --- .../client-management/mdm/wirednetwork-csp.md | 20 +++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/windows/client-management/mdm/wirednetwork-csp.md b/windows/client-management/mdm/wirednetwork-csp.md index 92f6496c2d..d4f5426134 100644 --- a/windows/client-management/mdm/wirednetwork-csp.md +++ b/windows/client-management/mdm/wirednetwork-csp.md @@ -34,3 +34,23 @@ Supported operations are Add, Get, Replace, and Delete. Value type is string. Optional. Enable block period (minutes), used to specify the duration for which automatic authentication attempts will be blocked from occurring after a failed authentication attempt. Supported operations are Add, Get, Replace, and Delete. Value type is integer. + +The following example shows how to add a wired network profile: +```xml + + + + 1 + + + ./Device/Vendor/MSFT/WiredNetwork/LanXML + + + chr + + falsetrue2500025falsetruefalse26falsefalsefalsetruefalsetrue + + + + +``` From e5e0aee249a26f77f7bb60416e9330fdd9af0ada Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Sun, 10 May 2020 18:00:45 +0300 Subject: [PATCH 060/177] Update configure-server-endpoints.md Based on support cases the KB3080149 is needed for either Windows Server 2008 R2 AND windows server 2012 R2 --- .../microsoft-defender-atp/configure-server-endpoints.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md index c0c8157b48..a3ca7cc7cb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md @@ -58,11 +58,12 @@ There are two options to onboard Windows Server 2008 R2 SP1, Windows Server 2012 ### Option 1: Onboard servers through Microsoft Defender Security Center You'll need to take the following steps if you choose to onboard servers through Microsoft Defender Security Center. -- For Windows Server 2008 R2 SP1, ensure that you fulfill the following requirements: +- For Windows Server 2008 R2 SP1 or Windows Server 2012 R2, ensure that you install the following hotfix: + - [Update for customer experience and diagnostic telemetry](https://support.microsoft.com/en-us/help/3080149/update-for-customer-experience-and-diagnostic-telemetry) + +- In addition, for Windows Server 2008 R2 SP1, ensure that you fulfill the following requirements: - Install the [February monthly update rollup](https://support.microsoft.com/en-us/help/4074598/windows-7-update-kb4074598) - - Install the [Update for customer experience and diagnostic telemetry](https://support.microsoft.com/en-us/help/3080149/update-for-customer-experience-and-diagnostic-telemetry) - - Install either [.NET framework 4.5](https://www.microsoft.com/download/details.aspx?id=30653) (or later) or [KB3154518](https://support.microsoft.com/help/3154518/support-for-tls-system-default-versions-included-in-the-net-framework) - + - Install either [.NET framework 4.5](https://www.microsoft.com/download/details.aspx?id=30653) (or later) or [KB3154518 (https://support.microsoft.com/help/3154518/support-for-tls-system-default-versions-included-in-the-net-framework) - For Windows Server 2008 R2 SP1 and Windows Server 2012 R2: Configure and update System Center Endpoint Protection clients. From 2f626823f13fb7f5fdd21d301e444c0dbb3b170c Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Mon, 11 May 2020 11:24:23 +0200 Subject: [PATCH 061/177] Grammar article correction (a/an), redundant space - Whitespace removal - a -> an Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../privacy/windows-endpoints-1903-non-enterprise-editions.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md index ebf9ee6c89..fb0ff8bb98 100644 --- a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md @@ -32,7 +32,7 @@ The following methodology was used to derive the network endpoints: 3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. 4. Compile reports on traffic going to public IP addresses. 5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory. -6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here. +6. All traffic was captured in our lab using an IPV4 network. Therefore, no IPV6 traffic is reported here. 7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different. 8. These tests were conducted for one week, but if you capture traffic for longer you may have different results. @@ -272,4 +272,3 @@ The following methodology was used to derive the network endpoints: | www.microsoft.com/pkiops/certs/* | HTTP | CRL and OCSP checks to the issuing certificate authorities | www.msftconnecttest.com | HTTP | Network Connection | www.office.com | HTTPS | Microsoft Office - From cea9e00472ed1c92c58b62a6f89bf0d39cd00209 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Mon, 11 May 2020 14:39:07 +0500 Subject: [PATCH 062/177] Update enroll-a-windows-10-device-automatically-using-group-policy.md --- ...l-a-windows-10-device-automatically-using-group-policy.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md index dcc548afd6..c2df51c0ae 100644 --- a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md +++ b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md @@ -54,7 +54,6 @@ The following steps demonstrate required settings using the Intune service: > [!IMPORTANT] > For BYOD devices, the MAM user scope takes precedence if both MAM user scope and MDM user scope (automatic MDM enrollment) are enabled for all users (or the same groups of users). The device will use Windows Information Protection (WIP) Policies (if you configured them) rather than being MDM enrolled. - > For corporate devices, the MDM user scope takes precedence if both scopes are enabled. The devices get MDM enrolled. 3. Verify that the device OS version is Windows 10, version 1709 or later. @@ -117,7 +116,7 @@ Requirements: 5. Click **Enable**, then click **OK**. > [!NOTE] -> In Windows 10, version 1903, the MDM.admx file was updated to include an option to select which credential is used to enroll the device. **Device Credential** is a new option that will only have an effect on clients that have the Windows 10, version 1903 feature update installed. +> In Windows 10, version 1903, the MDM.admx file was updated to include an option to select which credential is used to enroll the device. **Device Credential** is a new option that will only have an effect on clients that have installed Windows 10, version 1903 or later. The default behavior for older releases is to revert to **User Credential**. When a group policy refresh occurs on the client, a task is created and scheduled to run every 5 minutes for the duration of one day. The task is called " Schedule created by enrollment client for automatically enrolling in MDM from AAD." @@ -166,7 +165,7 @@ Requirements: - Ensure that PCs belong to same computer group. > [!IMPORTANT] -> If you do not see the policy, it may be because you don’t have the ADMX installed for Windows 10, version 1803, version 1809, or version 1903. To fix the issue, follow these steps (Note: the latest MDM.admx is backwards compatible): +> If you do not see the policy, it may be because you don’t have the ADMX for Windows 10, version 1803, version 1809, or version 1903 installed. To fix the issue, follow these steps (Note: the latest MDM.admx is backwards compatible): > 1. Download: > 1803 -->[Administrative Templates (.admx) for Windows 10 April 2018 Update (1803)](https://www.microsoft.com/download/details.aspx?id=56880) or > 1809 --> [Administrative Templates for Windows 10 October 2018 Update (1809)](https://www.microsoft.com/download/details.aspx?id=57576) or From edb0f5bba063b1e00c2130a4e75009a609983cff Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Mon, 11 May 2020 14:50:07 +0500 Subject: [PATCH 063/177] Update windows-10-removed-features.md --- windows/deployment/planning/windows-10-removed-features.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/planning/windows-10-removed-features.md b/windows/deployment/planning/windows-10-removed-features.md index 1c93c41731..508cc788a8 100644 --- a/windows/deployment/planning/windows-10-removed-features.md +++ b/windows/deployment/planning/windows-10-removed-features.md @@ -36,7 +36,7 @@ The following features and functionalities have been removed from the installed |limpet.exe|We're releasing the limpet.exe tool, used to access TPM for Azure connectivity, as open source.| 1809 | |Phone Companion|When you update to Windows 10, version 1809, the Phone Companion app will be removed from your PC. Use the **Phone** page in the Settings app to sync your mobile phone with your PC. It includes all the Phone Companion features.| 1809 | |Future updates through [Windows Embedded Developer Update](https://docs.microsoft.com/previous-versions/windows/embedded/ff770079\(v=winembedded.60\)) for Windows Embedded Standard 7-SP1 (WES7-SP1) and Windows Embedded Standard 8 (WES8)|We’re no longer publishing new updates to the WEDU server. Instead, you may secure any new updates from the [Microsoft Update Catalog](https://www.catalog.update.microsoft.com/Home.aspx). [Learn how](https://techcommunity.microsoft.com/t5/Windows-Embedded/Change-to-the-Windows-Embedded-Developer-Update/ba-p/285704) to get updates from the catalog.| 1809 | -|Groove Music Pass|[We ended the Groove streaming music service and music track sales through the Microsoft Store in 2017](https://support.microsoft.com/help/4046109/groove-music-and-spotify-faq). The Groove app is being updated to reflect this change. You can still use Groove Music to play the music on your PC or to stream music from OneDrive. You can use Spotify or other music services to stream music on Windows 10, or to buy music to own.| 1803 | +|Groove Music Pass|[We ended the Groove streaming music service and music track sales through the Microsoft Store in 2017](https://support.microsoft.com/help/4046109/groove-music-and-spotify-faq). The Groove app is being updated to reflect this change. You can still use Groove Music to play the music on your PC. You can use Spotify or other music services to stream music on Windows 10, or to buy music to own.| 1803 | |People - Suggestions will no longer include unsaved contacts for non-Microsoft accounts|Manually save the contact details for people you send mail to or get mail from.| 1803 | |Language control in the Control Panel| Use the Settings app to change your language settings.| 1803 | |HomeGroup|We are removing [HomeGroup](https://support.microsoft.com/help/17145) but not your ability to share printers, files, and folders.

    When you update to Windows 10, version 1803, you won't see HomeGroup in File Explorer, the Control Panel, or Troubleshoot (**Settings > Update & Security > Troubleshoot**). Any printers, files, and folders that you shared using HomeGroup **will continue to be shared**.

    Instead of using HomeGroup, you can now share printers, files and folders by using features that are built into Windows 10:
    - [Share your network printer](https://www.bing.com/search?q=share+printer+windows+10)
    - [Share files in File Explorer](https://support.microsoft.com/help/4027674/windows-10-share-files-in-file-explorer) | 1803 | From 10ea33636180efe0ddf74401ad739631f90129a9 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Mon, 11 May 2020 11:50:59 +0200 Subject: [PATCH 064/177] Typo correction in description - Winddows -> Windows Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../privacy/windows-endpoints-1903-non-enterprise-editions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md index fb0ff8bb98..bfb957cab3 100644 --- a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md @@ -146,7 +146,7 @@ The following methodology was used to derive the network endpoints: | candycrush.king.com | HTTPS | Candy Crush application | cdn.onenote.net | HTTP | Microsoft OneNote | cds.p9u4n2q3.hwcdn.net | HTTP | Highwinds Content Delivery Network traffic for Windows updates -| client.wns.windows.com | HTTPS | Winddows Notification System +| client.wns.windows.com | HTTPS | Windows Notification System | co4.telecommand.telemetry.microsoft.com.akadns.net | HTTPS | Windows Error Reporting | config.edge.skype.com | HTTPS | Microsoft Skype | cs11.wpc.v0cdn.net | HTTP | Windows Telemetry From 40f87518f0efbd3ac31294b7485356dd8ddafcd7 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Mon, 11 May 2020 12:11:25 +0200 Subject: [PATCH 065/177] Whitespace - remove redundant blank space Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../privacy/windows-endpoints-1903-non-enterprise-editions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md index bfb957cab3..539eb81bd2 100644 --- a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md @@ -33,7 +33,7 @@ The following methodology was used to derive the network endpoints: 4. Compile reports on traffic going to public IP addresses. 5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory. 6. All traffic was captured in our lab using an IPV4 network. Therefore, no IPV6 traffic is reported here. -7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different. +7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different. 8. These tests were conducted for one week, but if you capture traffic for longer you may have different results. From 782e95671f19e1898016bc3fa15dca52ba905f13 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Mon, 11 May 2020 07:00:00 -0700 Subject: [PATCH 066/177] Update machine-tags.md --- .../microsoft-defender-atp/machine-tags.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md index 2a936b08fc..3db537114e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md @@ -26,8 +26,8 @@ You can add tags on machines using the following ways: - Using the portal - Setting a registry key value ->[!NOTE] ->There may be some latency between the time a tag is added to a machine and its availability in the machines list and machine page. +> [!NOTE] +> There may be some latency between the time a tag is added to a machine and its availability in the machines list and machine page. To add machine tags using API, see [Add or remove machine tags API](add-or-remove-machine-tags.md). @@ -71,7 +71,8 @@ You can also delete tags from this view. >- Windows 8.1 >- Windows 7 SP1 -> Please note that the maximum number of allowed characters is hard-coded to 30. +> [!NOTE] +> The maximum number of characters in a tag is 30. Machines with similar tags can be handy when you need to apply contextual action on a specific list of machines. From e9f33624efe782e5891d28c5f4a17914f42c59b9 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Mon, 11 May 2020 07:03:42 -0700 Subject: [PATCH 067/177] Update windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/configure-server-endpoints.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md index a3ca7cc7cb..b7e90ca3be 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md @@ -63,7 +63,7 @@ You'll need to take the following steps if you choose to onboard servers through - In addition, for Windows Server 2008 R2 SP1, ensure that you fulfill the following requirements: - Install the [February monthly update rollup](https://support.microsoft.com/en-us/help/4074598/windows-7-update-kb4074598) - - Install either [.NET framework 4.5](https://www.microsoft.com/download/details.aspx?id=30653) (or later) or [KB3154518 (https://support.microsoft.com/help/3154518/support-for-tls-system-default-versions-included-in-the-net-framework) + - Install either [.NET framework 4.5](https://www.microsoft.com/download/details.aspx?id=30653) (or later) or [KB3154518](https://support.microsoft.com/help/3154518/support-for-tls-system-default-versions-included-in-the-net-framework) - For Windows Server 2008 R2 SP1 and Windows Server 2012 R2: Configure and update System Center Endpoint Protection clients. From eafa07b24a981f235ce6efb436ea90bc599b5d4f Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Mon, 11 May 2020 17:09:02 +0300 Subject: [PATCH 068/177] Update machine-tags.md Adding some info to the current note to explain how to remove tag that was set from the registry. --- .../threat-protection/microsoft-defender-atp/machine-tags.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md index 3db537114e..d5509569dc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md @@ -83,6 +83,7 @@ Use the following registry key entry to add a tag on a machine: - Registry key data: `Name of the tag you want to set` >[!NOTE] ->The device tag is part of the machine information report that's generated once a day. As an alternative, you may choose to restart the endpoint that would transfer a new machine information report. +>The device tag is part of the machine information report that's generated once a day. As an alternative, you may choose to restart the endpoint that would transfer a new machine information report.
    +> If you need to remove a tag that was added using the above Registry key, clear the contents of the Registry key data instead of removing the 'Group' key. From 4f477b059f7d55ee7ee7b8d847c4990b20130da6 Mon Sep 17 00:00:00 2001 From: Sergii Cherkashyn Date: Mon, 11 May 2020 12:21:20 -0400 Subject: [PATCH 069/177] Update network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md Per multiple cases with AAD Auth support, the PKU2U policy has to be enabled on the client as well. Proposing to update the mentioned Note and add "and the client" > [!NOTE] > KU2U is disabled by default on Windows Server. Remote Desktop connections from a hybrid Azure AD-joined server to an Azure AD-joined Windows 10 device or a Hybrid Azure AD-joined domain member Windows 10 device fail. To resolve this, enable PKU2U on the server and the client. --- ...cation-requests-to-this-computer-to-use-online-identities.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md b/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md index 4870151b22..9fef84e4b2 100644 --- a/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md +++ b/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md @@ -40,7 +40,7 @@ This policy isn't configured by default on domain-joined devices. This would dis - **Enabled**: This setting allows authentication to successfully complete between the two (or more) computers that have established a peer relationship through the use of online IDs. The PKU2U SSP obtains a local certificate and exchanges the policy between the peer devices. When validated on the peer computer, the certificate within the metadata is sent to the logon peer for validation. It associates the user's certificate to a security token, and then the logon process completes. > [!NOTE] - > KU2U is disabled by default on Windows Server. Remote Desktop connections from a hybrid Azure AD-joined server to an Azure AD-joined Windows 10 device or a Hybrid Azure AD-joined domain member Windows 10 device fail. To resolve this, enable PKU2U on the server. + > KU2U is disabled by default on Windows Server. Remote Desktop connections from a hybrid Azure AD-joined server to an Azure AD-joined Windows 10 device or a Hybrid Azure AD-joined domain member Windows 10 device fail. To resolve this, enable PKU2U on the server and the client. - **Disabled**: This setting prevents online IDs from being used to authenticate the user to another computer in a peer-to-peer relationship. From 59d5dfc79833e05c958ac104650f9c3fc748d411 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 11 May 2020 10:09:22 -0700 Subject: [PATCH 070/177] Reducing Insider notes. --- devices/hololens/hololens-insider.md | 75 +--------------------------- 1 file changed, 2 insertions(+), 73 deletions(-) diff --git a/devices/hololens/hololens-insider.md b/devices/hololens/hololens-insider.md index e82148dd22..5bc9b7a304 100644 --- a/devices/hololens/hololens-insider.md +++ b/devices/hololens/hololens-insider.md @@ -63,80 +63,9 @@ You are welcome and encouraged to try developing your applications using Insider ## Windows Insider Release Notes -HoloLens 2 Windows Insider builds are full of new features and improvements. Sign up for Windows Insider Fast or Slow flights to test them out! -Here's a quick summary of what's new: +As of our [Windows Holographic May 2020 Update](hololens-release-notes.md) release all of our release preview feautres are now generally avalible! Make sure to [update your HoloLens](hololens-update-hololens.md) to get all the latest features. -- Support for FIDO2 Security Keys to enable secure and easy authentication for shared devices -- Seamlessly apply a provisioning package from a USB drive to your HoloLens -- Use a provisioning packages to enroll your HoloLens to your Mobile Device Management system -- Use Windows Autopilot to set up and pre-configure new devices, quickly getting them ready for productive use. To participate in the program you'll need to meet a few requirements. While the program is in preview mode you'll need to be using Microsoft Intune. You'll need to use a tenant that is flighted for HoloLens. Lastly you'll need to have installed an insider preview buildon your HoloLens 2. To praticipate in the preview of this new program send a note to hlappreview@microsoft.com to join the preview. -- Dark Mode - HoloLens customers can now choose the default mode for apps that support both color schemes! Based on customer feedback, with this update we are setting the default app mode to "dark," but you can easily change this setting at any time. -- Support for additional system voice commands -- An updated Cortana app with a focus on productivity -- Hand Tracking improvements to reduce the tendency to close the index finger when pointing. This should make button pressing and 2D slate usage feel more accurate -- Performance and stability improvements across the product -- More information in settings on HoloLens about the policy pushed to the device - -Once you've had a chance to explore these new capabilities, use the Feedback Hub app to let us know what you think. Feedback you provide in the Feedback Hub goes directly to our engineers. - -### FIDO 2 support -Many of you share a HoloLens with lots of people in a work or school environment. Whether devices are shared between students in a classroom or they're checked out from a device locker, it's important to be able to change users quickly and easily without typing long user names and passwords. FIDO lets anyone in your organization (AAD tenant) seamlessly sign in to HoloLens without entering a username or password. - -Read the [passwordless security docs](https://docs.microsoft.com/azure/active-directory/authentication/howto-authentication-passwordless-security-key) to get started. - -### Provisioning package updates -Provisioning packages let you set HoloLens configuration through a config file rather than going through the HoloLens out of box experience. Previously, provisioning packages had to be copied onto HoloLens' internal memory, now they can be on a USB drive so they're easier to re-use on multiple HoloLens and so more people can provision HoloLens in parallel. - -1. To try it out, download the latest version of the Windows Configuration Designer from the Windows store onto your PC. -1. Select **Provision HoloLens Devices** > Select **Provision HoloLens 2 devices** -1. Build your configuration profile and, when you're done, copy all files created to a USB-C storage device. -1. Plug it into any freshly flashed HoloLens and press **Volume down + Power** to apply your provisioning package. - -### System voice commands -You can now access these commands with your voice: -- "Restart device" -- "Shutdown device" -- "Brightness up" -- "Brightness down" -- "Volume up" -- "Volume down" -- "What is my IP address?" -- "Take a picture" -- "Take a video" / "Stop recording" - -If you're running your system with a different language, please try the appropriate commands in that language. - -### Cortana updates -The updated app integrates with Microsoft 365, currently in English (United States) only, to help you get more done across your devices. On HoloLens 2, Cortana will no longer support certain device-specific commands like adjusting the volume or restarting the device, which are now supported with the new system voice commands above. Learn more about the new Cortana app and its direction on our blog [here](https://blogs.windows.com/windowsexperience/2020/02/28/cortana-in-the-upcoming-windows-10-release-focused-on-your-productivity-with-enhanced-security-and-privacy/). - -There's currently an issue we're investigating that requires you to launch the app once after booting the device in order to use the "Hey Cortana" keyword activation, and if you updated from a 18362 build, you may see an app tile for the previous version of the Cortana app in Start that no longer works. - -### Dark mode -Many Windows apps support both dark and light modes, and now HoloLens customers can choose the default mode for apps that support both. Once updated, the default app mode will be "dark," but can be changed easily. Navigate to **Settings > System > Colors to find "Choose your default app mode."** -Here are some of the in-box apps that support Dark mode! -- Settings -- Microsoft Store -- Mail -- Calendar -- File Explorer -- Feedback Hub -- OneDrive -- Photos -- 3D Viewer -- Movies & TV - -### Windows Autopilot for HoloLens 2 - -This Autopilot program supports Autopilot self-deploying mode to provision HoloLens 2 devices as shared devices under your tenant. Self-deploying mode leverages the device's preinstalled OEM image and drivers during the provisioning process. A user can provision the device without putting the device on and going through the Out-of-the-box Experience (OOBE). - -When a user starts the Autopilot self-deploying process, the process completes the following steps: -1. Join the device to Azure Active Directory (Azure AD). -2. Use Azure AD to enroll the device in Microsoft Intune (or another MDM service). -3. Download the device-targeted policies, certificates, and networking profiles. -4. Provision the device. -5. Present the sign-in screen to the user. - -For full information about Autopilot, see [Windows Autopilot for HoloLens 2 evaluation guide](hololens2-autopilot.md). +We'll be updating this page again with new features again as we release them to Windows Insider builds. ### FFU download and flash directions To test with a flight signed ffu, you first have to flight unlock your device prior to flashing the flight signed ffu. From dd40bf4f9ccf3d1d6fd0019edc32f7e289110c1d Mon Sep 17 00:00:00 2001 From: yasalkar Date: Mon, 11 May 2020 22:44:51 +0530 Subject: [PATCH 071/177] Please add this policy setting. --- ...policy-csp-localpoliciessecurityoptions.md | 71 +++++++++++++++++++ 1 file changed, 71 insertions(+) diff --git a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md index 9263511ddf..ed5184af57 100644 --- a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md +++ b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md @@ -111,6 +111,9 @@ manager: dansimp
    LocalPoliciesSecurityOptions/NetworkSecurity_LANManagerAuthenticationLevel
    +
    + LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClients +
    LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers
    @@ -2385,6 +2388,74 @@ GP Info:
    + +**LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClients** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procheck mark4
    Businesscheck mark4
    Enterprisecheck mark4
    Educationcheck mark4
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Network security: Minimum session security for NTLM SSP based (including secure RPC) clients + +This security setting allows a client device to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. The options are: + +Require NTLMv2 session security: The connection will fail if message integrity is not negotiated. +Require 128-bit encryption. The connection will fail if strong encryption (128-bit) is not negotiated. + +Default: + +Windows XP, Windows Vista, Windows 2000 Server, Windows Server 2003, and Windows Server 2008: No requirements. + +Windows 7 and Windows Server 2008 R2: Require 128-bit encryption + + + +GP Info: +- GP English name: *Network security: Minimum session security for NTLM SSP based (including secure RPC) clients* +- GP path: *Windows Settings/Security Settings/Local Policies/Security Options* + + + + +
    + **LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers** From 5532341b12b0cd2ff83d9dc4da260f328dbeb4d5 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 11 May 2020 10:25:26 -0700 Subject: [PATCH 072/177] Delete hololens-darkmode-tiled-picture.jpg --- hololens-darkmode-tiled-picture.jpg | Bin 58935 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 hololens-darkmode-tiled-picture.jpg diff --git a/hololens-darkmode-tiled-picture.jpg b/hololens-darkmode-tiled-picture.jpg deleted file mode 100644 index bfa3ee78afa4715210fcaf417c6760625a1dd8de..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 58935 zcmeFZdpuP8_c%OKiINH_#hg+}PB|x}3$r^(q9jyGF{i5}sZ{QEC6q4HO%7s;B#Egc zB}}L!G44VcLox1y!8VsY&)P$`^Esd2_w#+e-{*Nfe>~?T?b+}5dawKYz1DiKk$jLe zkS1BKu~Fwk94-8^M0)j3XlI$>9-zfVVU6X;XQKLu8j+P_nk{RU*KeCfY zkD2xR*eQS5$n89$JbUq}aVo2>+CzBA8*e*77K8g6bYhy-IvD1m-%HVr7_nOY>pLwlhw2;f*?AJzP z-5OuV?Q09Ky^o}ojHS`d>D$<@ah=Cx;#x{usyu7CLPyg6A-;Ei^gsrsdZjwWU(?^& zKZW-H5B|@%(H%#yi{1jfjWCbcl-cIzQ8MPf|CT--A$QaPe^cvQa;0V}B%A+*pLcsH zx35}~)Gd>=s^61&cJY18U3zCrm74s2M|u-nsn@fA!Ss0vIf854$iZ`d7V{Vf&kaQU zdQkaoeJk^`gp}Rxv()EV#8KOG$~R~A(6eo=H}A<{yrg6Hh%Cz8*@NOFQwiyHsf47^ z(%>$hK+%(sUXDYtj86RhYYB-Jr{`)u#HugQOT0?8Z(xaZnWw1y->^ani8M<>YUD~t zL7qGk3vgcH<3l85DDpgBEoSL zjgpXVhrFRBXtZxk6{M8md7 zNU0K%ctWsIK)(ji7ZU5m1Cs7S3R+Uogo>u-5#)*^ z&Pz!2Kl($d#Q|-oiw&R|MCGMONX|^bbYpi3>GTKS0Se^SG~vP4GbE&jrvwTe@2Mhz z62X#BdYuc9CrP{)xGKA&6VTMYgz~l##8?wN5iXOEN?1({(NrmWe_XF+c)egmx*j5! zE;(m+iI;*pcLPV=MmTDX*;7*o#S>x-MkJ`$@!nh{Ag6`&(O)37n@|^f4q2p2KZyYF z@^8R%pJTEFi$N2%kLZgQ=!tdOxbTPsX*r%BM-@IP@ zUl{BDDli6dO?SF+4jwuwEC8ZZxsF zgfz^@tOv+VaVuUHC$wb33yzaWO+vZ_qDFW!I&|JikvcpMhN3)~`NMX4Yv3X7F~}5J z(mEH2CV*Uhd7gM6u0sHh!zYo?kolTD*0@akuz^Yu8yb<*DKY?@4FK8am^?)(c&%?w zAXucOL`>i#7{*5i<;Y;`B&0u>Q_u$WO(^fA-+bwCgr^ADyh2&S$Oxs#;3%LkgW1D) z7BSuq;f%qk@I;>kMx|~yjQ(xkt>`i_NJ6SOtbEZg%n3}cej`~VYe`ISg$WmZB_x@v zBPQr3E07yThi;9n3;+Wy+3f_x?zxNRD)HL!(-~}BcJ8otNkx9ETWYUEy%N$HHBPm7 z%<*o~SSf6(!2_96>uSlzCs9MFeAQ|uPZd<; z8{fxRBGSPDU>@iyYV9VhJ87u>hXG?PBl9`zlgC}({@U4p@#wNHa-sF&nkDY>;;8e~ zKb@-N__`YXRvMK7+rf>@en8Ko%)#pJrgrar22V~p8+bV8=aEBx6Ing4Fi7&>GDB(7&|^_#`}5pjy?fWe2jVA+%Ql!tR`XENMF(?nfHodt z(U_!RWYse<&N-HvogAOH-cRE2 zMzwr&fYBi#@mJJ}$EQ^!^?Bm*tmB{kR%1>0Covrl@udc|W`qTp*m-c3Ow%%wleV>o zlpjjE^C;%BhFNBq&+_~ySJQsEdUBy%>y>h@44+{3|Kuk>p@rWmsPxdjhW8sy-NMaIEUsGpchqC>O%BO2r23@$w^(>E^35sm8}gwxc_ST7y%xsWu< z{YpQ59{Y8*Ug80@<^J`;r8_Ga+3e5Rk>?Wf9&xOjJpKE}Ml~R(tJ%EE3D+iym&`D* zUIa(52+eB0a&6&$32Clh^p|)|2b+F41T6J+@6zagGvDv`-3*s1O_kKO9mx+C#<<>V z?#nLM&%Goebsh9+7)t0cu#X?tYkE2VCao~8Fj41bCCS6w0RFrLql7=CufOiyciP{4 za&~Nd^R>cTV-Ma*G|q6^KWf2(ub*CmhxxH56^I`^Q(ZkYZ_s z1CUPmI&psN>0H_(2zGm0uM6hO-obnuOxzpQLX(dr%OhpXYLj~Lxqasbn?3Q-mIBlK z7=yCxC0>UHUur5kuQ(6d0UPrS5z7OwxjMn&w6~fg_i#%+K#Zpc&(p=^v*@Tcfzx@$g(e-XF&}y zY9D&u(wCbY@G`>JB$IKbG8{7RiT-FDFCi(rsyU=29Ub(!*wh{Aja+Q2KGoD`?0hR> zuzMERP`d*=Ct?!Dy371?Stji)eFja8)S+C@w84F0{?yU`8v+8dJU}Imwb#af!Y$-fE>% zY=jw!61tc2cUJ!A&%4W8X)9GzbeFe1IRt;5q^t*5cO5Obi9zrs22O4`Q8~1;M;A9Y zF~#A`c57|`9A|UZ&2aBLYNla3G~xVuTZ73nuC9=f9!#_Te5Kjna3!QV>phdY^9O$FEAUEj>acEmvVa2u?Lw-~Vc;h{fJ zQS?|Taed;Nye&-5VQd9{<}R%9j#v-D&x8~IW{LmIlaS_|2Usr@XDB*I5tfhyQ{e0? z3x^><|A(iozez}izX&e8d$O4U3?SB>JF@N%5B-5kqN_^x-Y1z6;PM)}1yg|2QfNOu zZ2gT*zzY5E!lDDL1=c|62s?v$quR;=M4IlaN;T!@o>grH`N@!;f4E32-X_+}=Cr`r>M6UbjG7PeKaR2K~wH z#e8AlCz!H_k3N{@{`s>18fO!;V^m&dwgy^igo>t{tiaWnd8lCCHMF7NJGA26k;_sT zxLSUmwP2q9@T;I6UO9g50vlWGgSL;I0qS8B@y^5Cuo}%3V7pH{WO%27etjh}P|KwW<~)Xg zp|bTG9ZE$rt34$oMOj`re(qN`X6Qr3_UoNt^4CIkA}48B@&4$aev=GG8wp8dpqHyB zm}3WM5o?#w$1%CIBH&a=f>cFeWQ;F>guOX$wI4_!7BRvnYJvn6C-Xe;v!9umkq=Te z!KimFB~ial5Nz~ETAdKXnR z6Bwkf-;gez?84+7{w|ep8z(poDNg5Y$IoUmu@yeoaCOs$aPeddly~CmFk9y^8>b`~ zHjB3oKYNE5hH&ms#-XLk&w%E-uQXf4Y&P>@hzvq#gn3q6r8qC2s7EI0tt4DZ~gmlnEk1&9%VClVWx}^}u-p-zgmXe2;gSmU+)=UouN=@pj(*5;)ZMr2W2OWN6gewvZ4H6UD zVZa3K0NEkEZ$Wk^Q?7B|2ROe{QqmS9dEghS*do1dP#lYWgyK}(K%W@pS!uS7?=<3U z&%alPL?7%uz<5N)bQeSns2~3P`AS0NK3{SNDx{rf&bWrhJ_O8!_l1agRF{1&`C&2B z=&Z=92if|fPNPy>6kXnd3$qHV>uQbrdF~!nCc5VIF8d>KMNV#UpZwo-9rMjt=^1%2 zEX&p8sJdIFyThlAWBKk|(yLZ`Qs-LD z%e`v{+x$rW`ak`B*M#yHU&f&^H6>{c{B=+EGab`e)g`_Z@Qe0foz?JR)()eaVg3!B zhx|3E6WG+O$Mc48b}Cws&D_FlxWn#srXX9@nIyqpS2vSv7uYhLOk;O9eM=7Nd z!SwAV-Qdf(LMnvH%7?(_D9^n*_gyi%qraBUFVc~ac0PxUp({<;%aZCQ|3scxQg&Csarp08coVn zPGCbc%0(ON@+G9jR&0F2eV|DZ;jVcB;tf06j|7Xx#Ct_#nkKb-R&UAh56qibsA7KQ zQ@NNqsJnK}aqR-qas=Vf#N#|sY;mG-cQBRz3wV%*sz)fKjexRS%(Ey@T^;%9sT(hX z1lKH9rwh95g+_HASukl4V0oZlyDnP|Ej1xlPpUS7oZ%pmED@PPoKONL@Y5q?HSv`L z70jEh$P=k|Tuzuq66EcMAB~2g{4Slw5|7RN<2#h^k5VXt*Lp3>8J+GyWWE)F$YDOS zjx3LIBMDMC?bpFLe0eQ+pwlm~x$cME=%+_1F~9ilqV+|44zO|&!8{`r3?Ch60WUfi ze8p0qCguqJ`9E=E_zA6f23c#(+VH+;+CWPVY|L|kn=4R!_8rJd1U9sYr@UZ_G?)_7 zOFF}tf?)Un}xYR0*L{+t(gXp13}+Pli%=}yj%`TFjoy66~LikYqMcn zEuBlSqz-~H)qG;=ZkS4>(PkQ;kgWt-|6nUipNKTzWs@|$mKD?=XZFEN6*}*VXc{<_ zb+DlX!hxqzmj?Xs``EzNh4h}DuhT73-#4Rr#chSWgweeGoCYk zZXp|=$cDHlPKXlZMSUfY0Xgq8D5UsdOO~ei+W;6sxU-#*KO8O=Ko$mHDV3NKww9s< zWa)k-ONHIZ3WQjAT?z;h4qhU&KViie*a{*Md!EUo!f0uR+yjsZ)>8xNjsX&&0&qxg zNVZ*td9xP(h?x=lGuWe?(t7*@k!xK2M*6gk%uB|{6ZvXA5$P#V-eye{1x7QudwRlg z(sq0Waw+_V6sos&B_x2;UGsh4lOl zHc=>g#{5iVW|uMaUXuAbQgk$_ClRhK=+a9;8!@Gr`E|-un4%}rMQRH1VAfd#)A<`R zh2H;+42TYp0Y=?UZ&bq-2&q6-2dQD=!R&tk^X}h(*+%el!0juTWB@}*I~5fxGAE%t zJ9q;{CBiI-JpA?V+$jBm$>Kq}Op#Jb0?4}K3)q44E3!zXj?mTIbn#6l*9`-UIb8^1 zqjh|w_7Y`{o9W>VN&*$ah$yu0{5i(tC4-RMK}P7;DblJK3nY#Fi=>NP3wd&41$)@1 z%)i6S(34JS`Ed$tjX_6<5?N&vOEguAo79e+YRAfbpZNnOz)?V+&g35GX&F{_8c~EI z#A|8})vN74aHQmSViwX$5y0m525s>K9QLgox9@6Ow=(}b zPs^LGy*!f30}OOMA4y1G=ymPuVDXnUfCS5)oJyz{F9jb15jP7;eo{{{qPXHG6aHD> zN~JDz#YnMl*e5|D>K~j!?O4x$WC@fXg8X^rcrf*=R{`Y%udWR&QMd#o<%EvO{IpjzGX7WG*|86U3@h(oJD#PvDm9RC7nuO~Mlp+Qo z3@3z&LKz5(Qef-ZP`@PjE9A(DCpZ!N1X1Q4_H(szj{{z3_&La(r_6U55N4itjoNSb z9&a=$@(+u5^nWKRlF}AFQc)r%I*W9PQ>e74lt)xIhGc7BiVu`_XG3nnq(5L0nk&m= zKy7P2tTbOb;TL2)lWWxIE|Lun|2m=cQFd~>qa{;TS|$3n9U7`Zok0=!px=my#s(8b zpI)Wfm-xx1iu)BlVJHQG5{MC;ZNBd2V+d#X2W=7%YG5F(%v?5kpv1LZ(H67fK7QP9 zC$I01$2`B7Sv)-6|HO?!7gqzLl2~USbnH9))WPF=A9HpXx@@>GH1E*yE1x#sYf14L z-&S(ED^=EQPGS;8enFYV%BlO|{QBR|&Pubfx;wTUuiXC;{v!E>g9n@^AzfS6^Swww zZBi3mzevSD0Lk*yWHQgzeMp~9mXMft(bnQB=3M-Dv|w$egw#pHPhOX4r;hGQJ1deq zaKj#7ep+dngyeafd!u>@bFfa-U)erbKMQ|dVbsP{UXSkc$I;-9Qc6otmf!Q;jmhqo z=|aOB>G!w7S6Py;XP6BlBgc zd65rlO#~(x+A&>cuN8>MU7NdSx+))V_*AxI_S%8!MKNekhC9BzWw*GlbPmn9xC`IS zWM4fwHG@13a_85YXaYEV!?{2%#V5o1Zyzy;#HHUIk4kLbpEkCA=7xgOzR#OB#W?C2 zJQ-zjJxn{?JbcYbbF+0tGs}NSF~&lzVZQWdZ0VQs0ozUgT91&HC~8Ub;~<&&ZS>b! z4~Y;&npyl_iTI&75v6Eh9=>uyEd5J4+_v!`Di^RmR4gEgu&+uf&FK#%0drZYE>~}o z-#FeL^#KNF;rLg&iLSM7?@Kb(*j)P*;SxV!rN?6TA@F?d3TZpdn+(o)v!Wr1+GT9T zySAOz`FVi7?}ld(?xm>~+)D9W%^oiT&&R~tLzB*M>>8#KRS=7ZRl%m-P!#dhT!c9Z z>`(KVQ@Nl;b=m5ftAm@5S7LrEvg-IMM?HRH9>a;|prv^fuE zOmBCpC(@BIVH1vSDu9IK|2X1fVmd~m2o_C3VwWTQ7FX(3D4#Ju-#H*54dhEmD=ozk z5S+gDHAAUCTvOBQIgeYeVL%*@@<-pAxFj?(-|Bg#`;^*uwXQD`vp-LoH|Ud<;^n-R z_r74_qr0D4Q<)zxwP{3gWf!HA-?+~hEnF;Oc2-3n?n6`1!F#eqC{S-bG(Z)0(J(7A z?tcvz-dDqwEBRSVs_?d4S6^Lvzy9*W{cFZ=OPSXjd#>JmXvyr2a$soku)(t)qwM3{ z7?}*b1oLg0{`6p<9&DFgCKuU0rl`6jmPaZio`vi{HWD7x^a+ zIHttk!qB{W&8Ovt7uA)5t2~!KcCFo#WcZ}o&XhT*liK2mb}hHp8AHoGPk!3!w0=pX zY2AL*<*Lc%PhC##{lyXzB6{S>2Pnyt8fe)Rl7-7hgNeEZD{^y7M1f4#A5k=j~Htl_ZDNq-HfFHx7Zxmo6Y ze6Gq=qApmz?3OH1l=$ISXnZqKd61SNv})G8L&0^dAID7u>mh}PhQrWt_eLJ(-yurB zvio~mh4X7{WsNibUd;Sj--N;hTbSr#|6hOqCmL zN8g#Dp+=WtUv>_C5*2&FQ43Xe%=F)8V71N~FSZIv8{B<>el}*|PY{Z%}#-ZP%Yp zT`7{khO4kc4vEl4eqW~E{oH{q^;4qoeb$4e_-7rlgw!p5$5XH9kqb?us#>`&NkWeV z44f#~>(;^){AJfQ+uq~=rFLfUW%{f(@{@_--c93QVd3%A!W7JOGdg?vl7s#lP=I>3 z$NG6HhMXz`f(_V{+cGFo_qT4N7LB=a=WO_mN6do7THRKy+bV2AQbT6lOej9!6^O45 zNdM}6`m4>eho&%RgF70UEvOa;xiP^;Dw8L+f3_6WEs>CXBf58jwfk%dJMMVn8uF2` zth7ZKR@-Xp|E|ZXxcQA`ecILM$xE!CJ1QoV4sNf!e*f_1SO5JBd3Kug^**HJBipJs z$H8BlWO}J0l_-3D3pkwaR=U6=jZuJJp!V7tqCz;fKn>&xnq$HITNXANFgeQKePQl9(S4D@tozrWG;GV->v?tvBg6YAH+C45YIKX*$Fo9MK&a>7gr&?BX%fMJG3Dqz}yPE z{U>t!MCGA9WZV0PkJWc*-Y$EO&gi-*F7K@YSgRofrs(E@Gf}zbY5yWo3_r z+{>?35G8tAQ)$#uOz!n|$XgLL0_5r%y6u$~sOO@&L&QC})loYDL_e9AO&NujY7vwC zVA}*rh=L5wFgD8^DjtwUnBy>rE5RMjfB+Vozc#H~M7EK_gPMaT)yyYBWFXfu2=F{1 z;K@A$hdRzJ#F-}0${55|44~j)O%!g-uiH3*2`kD7A(AVd4mW^q1IXKmGgY9q{HKAJ zq2>&mbl$3fVk&=4Cdf5NQCnm{?qI_j)K_F|VlzPC^#0aCs#dcsN0%sHiAhf|ja43Q*-b z3)_!EI^k^kS%h~RB%X)<8rZhj*fnw)1N>C*86v_z-_FK167%GR%g|Caf*VrZm_v;8 zg^|F@;6QOS%Dw0cBP&p-Af)DtCw~HMP*8{Z)d=};BsOdV!NFVh$XjJ|kshn29Y5Oz zhzGWPW7U_LrA0n;;++sbH&y!1S)|8+i1TxqNIEKxAwq zG}j!|I#Ha?SNGm%6&T=Z>K&qLYAoDUPlhM*;l_<~E3J@-pS~6kdb|A|$I1dz5 z%j~#y&ov?^_{kc4Ng5fd%Rx;3FKv*QldkJUiPwsV%@~X2@Lows?`hx?8s5bLv@F5_ z`J2L|HBiox7dHs*ykD;CflnQT(&XfRCDC+9w!8ZoLAHpz5m3D{0xnU1V(7=e&BwO0 z6(Qy`uRwTvhOMz4ibFYZg~{DNyxMCnTG$;7r$wzc@`yVF)w%ZD{+~t>0R9m9S^oRykXc*@WBSn-(VEuJoxI};26Zz_KMTWJqN1ClB&1*4 zst$G-H( znK$$X$@>ICq@zO#(T2tjY_T?X|-)FGY z)4IjSQSroV_Z7J|d22M^XqWFo30?MX7{Ls#xu`?~`ms7^pZjYBL@6u)`FMeOMPx+>b?BtMv-;5df6h;ur z*E+z)mP$w+^C6l_;!t5*haD9WD)dd<-<;KVl206qh+0y~#U!)=MDsB2=XtvC;lxk+ z-yPPk^k1x5I0V-YWm?(1Fh7XNZqL{RR-F$gR&&u@D&(}*RKlJvA$_oquoGpF_zZxi zhL&8s|BV1<5Su@zjgA=t;kreB8OFn-C@?AvMpX}!NrO>y4}2dL@Q%bsG0XqcsNy9y zk58JA@hLyfC0HBB@f6EDB;blDu=e8hgSV8xU;gyzQLmra??#N-NPEqeM``nCXK=)9agf)*yCoat z9;3P5P-HoG35ErYCrV!0B5f*korJ*|Wg|G7$xeEYFJ71FJc5B|wHHsh=mEPOpxLMc zTiiov87ZAxjqvV3^(@nT?~M7fADNt;elkQQJq6`#AZkkpKGmp02%8K_oJFERcS3o| z1d3j;0Lh?e=yi~uMTieFWeJ#EJ!~60l_8$&<_n9%phg{(v!6JM zm>G79bg57wW6%jEQ-S~hT?kISRJlh9SA`?X8<&xxtNXtWjX6OKJuO{}IQUE*Sv>+a zs})2|Bvzk+azK4VW?o|nCS@Y8=r!H=*=E?GgY1av9t+#bPVE*?783}00z$gEPYEFx z0m8y*(p2U|?6Juq#pbm2EYO6SBQSeTHG zN`dhaxX*F!?ub+~eF^?l-RWWE&^g$V2OuNh^uxOrO?qd@dAx376NV$&PA3~eh;386 zUU2kyUb0_5-e}PX=AP5wwjFeWEDrL1N~{XoXRZzO%$!LETE{ZQL1f-_sY&S)CIvj* z>2!nu#{~`e+Y7KYGT53W*qSS0Yc~(Z?IrmjKYwZixfXM{wKFBnnrM+2P;HqpzhC2_1R(72i0>p_m@%VR^Q=*Ars4Z`%-}{WfgK z9*8KI(4#F5UP#2v70CQf^*aa>dYg7x*NrUMSPzMWS zIGT(c{szUy-|@5Hz_&r1!{b7wfgUdtJxDMGS*a zmka!lUXIJ=YAjC76cnEca2le-MX7AK&2`L3s^mcV&k6NB=yO)Ox{Sca? zg?@hFbq#;H80B)?`%kx7Uu9~8tz2RD?hwH~`{#6of7HIM=wq0u=@k^74_y&d$zk)% z_+ePL5Y8uWb9z$oH@@!TQOrM&>rl)Y1*|$fs}QRm)|>rq*LG1DaWF{McMf=h{Q4Kz zF0@mbHn{e^Ru@^r!zrFa4#ubUObs0KMM4Tqb6nnE*qxrn`&ez0Abx5-)L!V#IE))B; zwPAm0T{#-vYftN=nzln)nSarKb;UyEH|W$9hvuoPgN07#8c-KyVOU?j0m;LOEnJ2d zX3r7F-R{{@yHI>1^4JUn5wAc6dsxi9_tB?9%}mosf$sn+PIZS0rgg}GgIb93tUJ_C zsQbLsM5nfdV&CXMvHl>mrJio>kzN;Etph1PzEhQGS2S&D3A#9rq#gE$#CsYV2AjPr(}7n89|l&x5;$mhAx$^Sp)O zhpO0uF&>)-Fu!0`ZmwTTl<^MEVhCn4*y1sMurUSBiNjUaq(jllS_y6}F7Us8Fj+#X zd`B&I?ytFw=AMNBovXv?7EOm>G}e$QQ1J2vmuX?w5x3V|@O<4+UVHg3;JPQntP(rv z+6ZU0E6P{l4dN57-i@X89}VvdslICp+lUr8;adqIOx~XBKS8!KBe#9gYf)mX5BU)p zI6(XeH!_s@zXt0n-0~g)X8wOb%;HO_4W43)9~SW6!uj|+T{O%_9XMz#?e=*0q1rxlSVdIjwMe|m;viUQ4EPUdW`=uj*;u#od4&(+(+;f@OQcF~%?|c^S z+i<8NjdL65m`%$`FI}V9-t;9iLeCm^*@cxg9<|onyh+K@cg3f>!??v>D_~r~Itgh)dLuNC8qWY)K0mMonc3^0 zOS7N4qj|a*4eHo(Xu}YE8f@1?7AtDP7N66*MG5lZQX2C6pGPZ+7Nh47t}~B{D_za- zWz>{!ihB9fVRl=9Tzcig?&jy$HfhcZ@#AvOUOreOnn8wR+NDg^&bXZ;s6UT37cI6v z3wnA0%HAqE1nw5F^(Y36191fDUWc}x{eYGWy43%WGo%3~oNq+o>H?q=G{FGPn}yNg z76#my;g~8O^@U5)di_Vq#pLY~tpm)*$C7rtD;6hnjGkLWx5OaRS4NdPe_Y*5b;l74 zf8m@b0^fPjDPH@=cXPZ&Zf=WFHhG`5cw%P$&UnBsq%WkZ`2@nt4**wuJMSeGvo$3+ z<__!6B(5h1%`tp)(BPl}nsgaI;(xG{$+>6@=$nR|gac>rQ)6AB)`8_)UhMTwZV!;H zI`)?8mvJy)VK9-W-5rq6_thw77rX_99*bf7t75rhr-XWJuiSOIg)^AJ+3FRgOQ@(bmZ+Fq z2+b0+YJ_xQ*E1HjoBSQ$wXT7^t={p&mRVB=2Bhu<4Nlf1lw$#@xZj!QKp776qd6zl1{6`|rSkUO=5%8gesbD%i#X5w zfckmX*PM9=Yp9mBqE$U638Lqiy0tI{4v|+}IeI@3RpLv%NYRGO-(U8p_JDKmL58M2 zU5L6UDFY7gi9pN$8R33X0F)PxaoUh~Y`GvR$c(=K~JC}Zz z%6lB3j+wtcT`n{d`mTFgfxnv9m&sVJ;va=u35}{b6-T|%R2EHHI5>a`Gy<~mLeDzH z841!6vlLnpfn`|l){jW#5#`tuW#PulSOKToQgTd=-bk-ZbUnUfY>4TM%6p$5Jkw5k zRIqYtBL8h`>wjIP{nvZAEKEo5YgHEIx42Pn&{d6H5?!*5D;LK0o|sn@RW3fmsQB07 zE&He1ZT+R$$>e|w?{#-_s|Iyf#zUkuelxTkB7?8VyoYI20hp1Wy`k9&)MYo)(pn&n zIs+GR&B2_%jq~2zpZBqTefMC^r=*7|i%o?sO;~$O%Iq}vruE#okT`Sfca!RYmE!oF z;=eMz6R}`N)ijRxp94;-tWuqeX<$k-8A(vsIGwqTDJpM8c@(DM{k272({3ioU!bQY z%T^|YCasxy88K^tK@aO3(f5IR_*na5WLowD?KjCrjpi51@`Z+m3(Y}Q%-GC*g;X%( zJ&c&CS+d~PuWC2x3FW~7cJzDgV9E#54X2ISVdhZ!C8GIbDQH!ZkM=LaZB`@QRwRKR z8h{M8p0hKDq#4v0A)>`X;C!qtegTe!t6J3OsQn5VnvQhVRzm?i#fM3K33(nmiDy4Qht|b+0shPLP7_O{H+iy9m}{Y%gSYQYW=3 z=j>E`Z}fZ4-46809g1gH02-}3JAc3_H6!xfbiYjlmuLsWdmXnPJZ1d3K4x9_5LeJS zX+YmtIdWMtL*46$NTV^?ZgtoqEnoReI{(fG2>F)3ZqDE=Iyzj{P5OG*BfiGg!{STH z=wq8QON&Tm#66Ib(VMkAjw)^QWuDmGyEV3SL+r^JX3IlKZqkpW z4V7O?N5&H4r9Xe{G!KWb>3FBZ-zYnu=roOmrqjit(0@vNG}>2jAyRl(+9WKyEG6(2 zYz88&op-2hQv)1tBq`NC=!)}iU5qlt5NqlxWVH_*z9QOuw>@B5kF7U-{4DFV0}dCu zQ-vC!Hv6f#FZxJyoOPD|C}i0klfJi45Sez(Uw8wL7!KRfS8e&GOt;q*qK~UcBTXQB%BVnVo(c=G$-GviZF@N+ zmcw-Wb~K5*oYO+^$$Ybm{l~T#ZElHl>p$+}R_XPo#nsj1;2(26w&-v9^x(QoO4#Df zu0D~=A!9py0p}kxv&6f9$HURGQEnfXR zIk~i!=n&)p{ZP{Cwm-7NnB7hnw~-*ekQ2v<77EQoR#i{*RK<*rEs=Kh+8_3P5Dvzo z9sPrFCd^q#8J{om8N|n;1FC&;qA5oBx`cB`hpaY!$x^&KJke zyt-#hQ$0w8@9yF$VTIMMJ)ufkZ;I)#TR=w2_St-&z-XHvJzeMOZ`n0&7W?ti<{@R2{Xn40sEO!{ob2<_=E#u-;b$HV;;@ZiA4 zAAkMeoV4KzS&fCQ_c8BdGSFo&?ZbyFZU!={s(Oa1BYocM9^V;jLtJ6|xtm_)B)Be} zlh9@V(-pQCddhxQ%pSQwzO_Q_cGElDEVfPL<)temo@Z#eF`&X`o zRGBu4QdVlnma;|E;#8qM`(c!j$HWVE1gUJfeCC&#&GCbxD-x0lTKy$0;5uGBxE0gk z^&@Rgz_+qZj3U?WAuSxD2u9%nv8p%*_P_In4N5{%E72pN+xwC58R;Roe0S~U$`cMd z`dgM8_t)?5wZCv&qd0o*u^U(Ib?z28F1&DECVkAdONplTyKl+g8!qq=ZL0sqef+=c zHiSvIJb382b+70HGN@QXBOv9I1(inTSy_i_s$w=hfsPfK+mju*TNZP>6?QnLzwOR~ z;@5Qgz&lJ&TT}se!63?MevYeWt=|#7lx%V8rmAv<-kl*$=4=Vc)lGv>p62J0?#yO7 zl`mp;_oqh_*F3mxgPq>I6K4J~lrprtKfn{O#21xjdN*31_o)i>pBjI6N89q>Lfe#{ z34bjmOGsq%WNcrMkJmZj{_UUi-)qa4Q7oIE%&ts{OTAjUXzn_fZH^6!y({!S4(TFL zQ7&Q8p`vmLnzSdnGI(S`6l1XL`S*XGTwX`TM1f*{O87ven0<-(Hh_;_=zwK>PLr zG+375UVFsItM0Wt{t*$*C7p0cKS!A;S`}06P$BZZ=jCe?SvzfCIr^v`om;xZUywLJ zhF*xxP(_`T<=qcnmafRft)3<|EqRjFYwLXKSB+AmyWp%Vso3TKMF?@4twmE2X#8-> z)ZgK_^yn&Q?aJ2meC9(Dyo_bsLmPrX#cG&vr6CDwp0j))a@y=fOl%yPXf9g77z^7$ zk2XFY*mM3q{^2z=y8CaT^=i_^Q9LppT9p9%F7Z`6d;R19>I*ohbBz1HKtUiAqGr=q z(9?ht-z)VqU~A#->5x-!K;HU<4^UrP3v@FQaAlS?{*I`So1qXNW(XLRqa58>m3efe265W8{pA-2riPzpG~ZVWN5{hssR(_TN05+*>Fj|^v?>| zQ(}C2>DXopY$&&zsl)sLvY`B3(x*2}Rs44__Ch7%d#z$$50jxiK<Q_iWBZu8>Y(FgmyAuLfb%fdZhhps|~^pWgKXfM+USKK6HBC z(OJT3l8`JSYnGtp;G}alqa3n02F{$RaFfO=%R@q%=qJl5T9Lz6>2&kkGl_$V?Jgr2|&xA}z4e zeDPGGfFYmGfTy5!K$1Xn4sc~R6ilFfBc6wfm7skKjwM(Ib(lOG6K5$-?f7|30;j%m z>srMDByU14TxlcBGp@Kv|E!mMXI6u;RS``{F+{h}L<5+80vEjiHOfp)YB~ zrtZNFv}{>WV+Sb5tm<#3|83IWm3o-VeDpe>*+G1R+~$4+9EHBn2S{-6P)^_)Nh z6vA_;e98{A0ir+*kX2PXg>cblz;M777=Cb_8UV^&x`|kw&+1@9o5p5C z0_0&f?_MU<2+b6_0Vw>uuAuW0i2m`_F93}GPhdK-^B{2*dg(UdCgM7f(V%4az}w96 zX#(BdAc8bu?0HXk35r3qn%PkmQSKco+5kHyv`#$z9W5qrx^tYom$=JiwqheJpjA#O zgnU})2?C~hiZ8B0^j7M4vavbfYQk}qbf`}0WQ5@3sNl0kBxJd!yCwjfKiF{2V7z)wJ16`{0hl`e832fBdV&E#$3v-F|BuN2P4 z7WmL{l@Opx*8yw`#GMZc6r{y-#Y4N2z(&eJEN#Q~lT^CEo36m*dP5A9V^?n64Mp)4 zfKOsOq!`_yr&~7zKqvu-`&H3G6A`)U_~_I$EG@}mh4>YKa+i?Os~#2|snjlzKhtWH zFwy%jiYI(8z)Zl%fzL{lcF+}rVvJ!poq_~gAg>z_CBDDn%pfG~p;=o?L?QSMPPQQg zVA;nP-GqBFOrG*PL6AZWyeF0Nw(U)g` zHMb@~)|Bplh5*Ybgui4AnkVEGi7Xk|T zfC9+(Uv`aQC&pM^_3wC*Itw%9=!Vp&U5p2;|0LkFu|)HkpkyU2u$`mA<-@+mKGxyi z!MG1*d7j4>Pdo}rl@9WOY7-T-jO!5&s?QWh4{ydvrL%ex&iT#V-QfC3c~#{h!>Amgb7r63J3i(c-rEV5CB5}H&ohW9XOy#=3T7Hy6Y7vv{-m|?Y^MSOgfW# zn@Mu+#V32sz+c`#Au=dRb~v8E()TjGJm{#2K6h-U&9;x^_Emewv9?b2(F~h=e5!u6 zV!R_<1UtS`1HJ{zd(MMti|%)L9+OEN`33>+3K`G$vA2b06sR{J(7C>GbcLM`|6jgU z_5X>B+B1kqa3rhHr5h3@_K=XWR!-Q_9CN1n0S-lg)ckW2(th~9pL#Au&3A40uN`=e zb{%!s!FpvdCx(xN6k;QyS`Yb_pu8o|l6D`ia4vK>VHBjpYM?B(b2@b!El}#j}DOGF{fsg7+pVU1)Au^`P@^FWJX^sEynB@I!dv znmrq?b9!R5q+w^Z&0k-$hfWc^aI2@;=@kK`3f7OxogH(n^2Cs3$>5%ZI`w$*{Gr5 zJKrru>#DP9vjr~LDCgK?j<0D&+KcPp?oIqr3!teX(H3iW`c^S2cZr8p7nygVRkxD}@DB+B1bT_zIf61me(5uRJxhR)~CuK_}>x!ayGNz_$u) zi``Yao$CApCaFJ=FU3T*-C(_gu4{*cq=a(U6UU}&r32{KMY(uB1W52L3Fpq6x%qzw z{{t@M4;VCMKPdfue=_4I=ru$MswCnF)Ec$pgkMajztTtQ%(Hp(qAI{`A%pj<+`{6 zeev7&t*nOGzxin$H5Z?$kE`Pe@iTRV_WK1NnQ+K$i(yu{wm8#2#`<*J^|I)>lp|Wa zl=u}$n1aQl0plz0!z_hX&&!&74=ER-gKb@`Zz^5$&5ZoI30qV`K|;?L)|*6?Hn9hd zU&XGiU-F^#OV)vd-|gli{kwG#3igM1*SRZZt{wk=1Yw=CL#w|pHiPo7<}lZhj3Z?k zp*jEOVe|S`15>}5_7cDE9&E&fRjj(F!W}L$d^>2scKaF$X;e!uuHvPGw8?|Y#ZJkd z^3Mw-d^MJSBl8z2E#}#b{OBJj{l4a~JJ}i=P}^!$S+SLE&zbs93?1Nb}QVN2KK&cERLV|)KAVxs}nNo_%Y*awT za4ZK96`~+e5Fsj)%8+7~DN#TX6~Y__A@X9sX+U+(l)_X)O-gdfV_c?{RO$14P<)*d^ft_+ zJo?Czdl@a-bAMmQ_21|Ik$xY=UZrBOm(~YFN;K7O8lDP0{Oz;0=TgbfOs}WK?^UI zJv)V+0&&FBu#>VECEpmdF~URSvw3-A8U;zZ{jk3vV)41|6P=b%C@tREfY#@cTS2g@ z;tV|F6k+W<7I4ay#@?&8dQ+LH=$bt0UIXRX5iCoyu&*njuVuSxaUznsAtJXKUgS8U zvoHeUL3h^lRZo0xw#^prff;F9l5~AFfA~6TctMytb09JCT<)f7-2)8$Bj2NSiXZY! z9cES}%w;2wv|1r499^0&P0*jao7{@yZAuMwy&kGAgs}@}LA?CH(g>NzU}Xwjfsu-< z05Nd~m3LFiK(^mdscw2+R@S3!O>Q3ZS!urSesJ~FJZh@LV}_`dZwfC%BZVhNKpr8k z`0evFLdK(4L4)UF;PNTzoVl%Xop*@y%<3dUWb!(Hro|pCKxWdng5Er;YmjrzF#mxx z#cdcQ&p!e9B%Q>qL$ZFegPJjd;mf-Gj5gWNZ_5B9brKj?fLh%|bY)RjL$AM|5VtgZ z*n(umwL{G~LH`qv&iO((-r%R{9s&BQs1(6L->^ZSY!U;NmgROKZ$s1mQk^z?BCWE*u;{<=hY{w^NW9f7Cpu|wKso+aqKkVt-q;YY=6UY zP}>@lxcd)^^tTn_vU%;xpDSD+-9&6H5c8mczM^}vKkB{xqdo8Eiq=mZdo4kMg@IU# zz6HGhiytX*4^CO2skr$?i{8I0j9)RST>u!=U4OLdO;YP#J$E=QUATkg6dqQ9-&fDH ztZ37=@ZL9aJPFn8xvNZ6gQ3d47mPX1dtO{`%s}}LM|rjjkF%6tH<9cbnH$TR!2DQf z!xeN=h0>@2CM-$b+>&*+i9DS(y+S#;gM$Y2TaEp`EcK9$TIaLHwfNb~UxC1PDy%}! znCFugvX3R%8M1{9Rh~&nse9tarT`yi`~hK@4KyFxStFX5+btif3{dpGoY+2OII|zx zVED44Eln!@>cbba7?3Kl=Ku_T9X+!E-gvDKeOZQCSww+e&~C~>GzCCnDPl88`QHO( z732U?)`H}9&5)Q{op`>60zJpvW&-HbYdgs0FWQbFC!6s@!X-Q}(!2(!7d4ON7x}}Y zU9D9@$;LIst;L>x&QJ!{7SvYQUhzwcO`U)8T`bLxX3vQ}^8KS@wa2r^>;9e~`EMph zNS}z2=IU_xf!O4wkXyURC0KCrS3nUlCY;{H2=KHkYs9HyHjm^HUGkudr3{`s`6gHZ zyL!Na|CNkYP8js_S#DZ%Z8E4m#LKPfj;OJP+FB869olt2#E4f1G~bG{U@5WaS3%Bm zFyu%KGl1y;z=)bmdgzvxawk^CtHktNKMhXGg~#nnb29ML0y$T>*8Vi#(6Kc0{>b^4 zrv~gdWWWwCLvP(y%7iB8waF#3V#@rq9H1 z_`KGcuKn?*^bo5!eeD`KyRjeAo?5~%EoowS+6^&Gc@G8@WEhnVaMjGCklpyba#L#< z-U8W}{AsiNP+;5@Lrm*JAA*2>eLZ8j(3<}nl~QzHAQU71i(NgdP}HB>9LcVi%nJsF2w9QznMdye$MK z`ZQGu#T6_-0C}3;2n=rY2ZR!J@R1WlFD!;{n6rC48z_cQtw|{$13ht~A7V$!zsT}h ziU!{K9S{_b`#Y}=V;(7N@}3)=+Fq0bvSd@KvbtHEV7@!NlD2}iq1E#h;Z@+VUlKw6 zYVev{y%qY6&e(i@#D&}@sTR>3nn^e8r+s%~ENDY~#3iO*F7j>1EQ$*+o5+l7O|j_O zP>{dgI&%`^!xQCMs`nkBEy#%%oE~{I*^F1`$H`XjD;6lNE)t6YJAnlNFZ!egJ|heq znxL!U z?aHQtXje05l$nd1#&uvdk23?10(jg)TKNnQbA`@UG9>K0@4l{{IF>5W+lS&6-*`f>=K3GHyObK>-DV96!gko_hT;Mb-i4$$vx?x zS`RCgGrk)gC5REmNM1i$>s1g#6l&-_hFu@xox(fEt!i7CuTI=wm)}_~@1WXF;5I74 z0KU3xyBf|b8EuR=7}+$WbsqS;$z97hnCn4?q{<5Q!@MW`TS-#~0S;|B%CgK0=EuMe zXzoUgFtq#}Nrj+VH$CemNOlpusn0S@-Mx6{pkYnFPE%-8TM&V;J?Y1py8C)a~Nj(34q59l7X3Y zRbXiKLRBCfeiBp#*f%Sxp@A}JAuq=x%L+O9MSvP;Z4~v;Vx|p!&mpOVPMeDNH*PqB$Q zs(=GsKHR{oBvO_B$<34rRv@meyJ4|_Y#YfN#oJOrvpMo7d+>m zkfzZ(jRw9WN~UXnGnM)ahL~vDfHI&6F2(lZ7F-@wk`@#%>R_tSNI$alXk4eKd*|T{ z={&FN%_os^h>Vm}|KUIEy-3P>OARH2E50gPgH4+X;qGbf0dmR?OPLl;I zU^Q}L1Nsgs1wHcVg#Xr{e7*<@5L5n%iwFUU#g`XhD%7t3^aZFanUCWOT14`_lcO1$hGi zlw1aV1I`1il)!!cgYQ7rDFE8lhjeG>?ZgSlQ@uhxok6F!$;!y);~9CcHUz90dFS#{BoM5qzuI z)&Bo{^v!RU{h6tnw%_T`48GN)oUe_+7z5nd8ZfMiU|2zK5b;PyG6;ezF-@_Ps4&N&oX1wCd}V zi6^=XSm82Yg-d^4N^E1xggzd2pcd9a)x?h zCM;^fy4^j|`#w$3m*L>$N^XKWM1WMR=gGm(^&zk+5#QjF`b2ES6UG69JA;PJrl3Is z=-nXh-vEfao@dhaY_pu`S0$0#N`u!U+QV{cjy=rGZTPO`+g)n@D|#Ki5^tqwE2}3? zR)WfIepdY+k?h8@4l?+fJu2XWmy;Is^+msk#k;j)EDR@%N3Vq1zsHC+#4hCfZw@{2 zsrGX2H)L;uJOJOgFR}cs$o0_VFJSPDKz}K7%-spLEazrHSj~X^tDn6aT`*IMn?Ykm z5jW2i65=PwVXkoF&yer!N>ty#2D))d+I4am(@(wZJ8F{V$?Jd|vm}C*UIGvKyr=I? z>2}X^(&@8Vu|+C-?vo_RV-7)oW7loawAwRkXR zqDl^X`X48m7dKc{ValJC`IoSh%`}R<__|Q&?y z{Q;4T%PS+@!unV)7zT>=p1l_I68H=NWI&9OCrGREXW^%dcO4`)5Bg_~j^m~ws*z%G z4Vk|s9y>qfEryiKxruXH1nlflP3lBv7ohYu2QooX=f{m-5Iz{t{P2Nfjg=*w_Vnj* zGipmABG@#-z>OqZz>sRU3&8D7-jlRVAtRde_TAlX(3UXAAC}K%h?eyLclE;UDRn&x zs4J+G5}trJrQc^8DS<>*s*MR>$1Mjlx&XMkFOF>E*+3mTj$~Dw0}kB=)ZIz#|LPzR z0wUV~cZ!b#^Z&-;ZFlB#O9vmjmXc`(P<*K_nrT zuMS3uot>^&n!@%3jy#5O13Nz?2}hBeupM0Z;K*el8o!ZvS{SiN}CS2`bEstd@gMy-!^FyeO zylT`osPe_kt2Er2SWz03j=Q4Q6Oq>i{A!2#@G7!V0~pN+-dniR1`-$=Xi9*3Hp8{+ zTC0y|Pahhk_USc3Bk(r#ACEJK-Cb_KeqqbBeeg>#pl24efMa@T`uPv%9V$4fDZkSY zXB_1wQNoMKZl91k!%@F}KV2kHkND(ytRWxKLYO{LKw>sXde2P2=9}rFV9=HJ8rg8T zLTZ36yk|jP;D}L@rOv^BL$aF3?t|_0W?EvPCmvDy(YSdHBgK(d1Ztm_0MQ8sZhpjo zo)Y3FfB{VUyEGZ5Is5$WpT7ph{?{D^*;Y~cYS0g0SIT->Kx?Fu@|nWBG(df|e@_!f z0HNoFdKg|Yv=aLCh7{10=Bqa#f-i+T!35#z=Wc!skV?NWQp|~Wa*Di|=;U`vdr_{m z)8}%JujwVkRsts75MlEyYvO66_!ok&^-l`EsP>?z7vtaE#YG}g+-CTX{+9l$tLosA z4~U)z->caNS<7V`ZdrVqY}5#Wd0X>o-Ucq%K5(PXnh0G0R-=v^|IS-=?y-bplG>$fXM}+N|Pz;cBvOgenngjg%)gpvyIGv(fWRLa7vuG84 z1v4KAHdQD}YGHnpZ{M6hPhlY+4#$JT}S1(G`4U|s4xMDudFuIwty;Z zbNcTs<(Mao6BgXwXC?loIT*0R9_VWeHp>}!LM?$s#)_6A8h2Eph&K-kR8~&F71`9e zeYVML=j-3BgUg?*J>2K&-RBUzkAa%0qM6=8+yfc*fGL9&FS_gvae~;%o{bc3JfN3B zd`uUs)pmm#kv~dB{?!kj*~KiyA^PQW<=F2sH^(LkgYeZ7%PLVm->f}|HYi1QZoepT6GL>h+ZQnsW3;<1vFtCN^DH5fHlG*5)M z=-60?EpK9Kj}jP2SZFiM6i1)G@0^<8E1uavRPuOYiRLsPWS%&+R%CYLbsMb)wYb#4v>v-u+y(aw zi_z~0Dx39=`3HH|C)aW^1AmbzYp&l%e7qR6s{}#3k>r2DgHi_T1-idecnHuze?iar zg+{_O>a3}OBv7m>paDI^r?Jv}ST+5wq5xw+9X3%9pj{b!ywny0t_EU%%UETuA`F8$l#`GpHeiDNeefj4ex8XAC z+K`>3DjOf{3q0=W80$SgvH#%FfnaxP$xd{AY^C^yEx2kgAVU1~xM;>>myf0Zaf$Kg z`8dGqV7|j$*ttpVH|Ff7Ba4j{%r&gXuiqIPHq#|6k|L>`^bSA&4vkSn;Y79`RBp=$$SXqwmb26@iH_aUHDNMyq zva_cfH-tn*5mA_!5p%>F9vvCi1E9#?myp>(Y-i6F)Na$E;w!-0Iu(LNJMotPcRjno zT>hei_kZ??tJMKn7SE)YkOO2EX1q201kz(F%-ofpuIw0);RmsLJPxV_`!nS7euh;Z z$mVVj-P9gXRi&gp(-%N#?IjXl`#v6o_%1%OF`oIN8j~DsCF)0FWzQN*+d~0f^J_y8 z@F9U*5V{LHg5gXIyG<)9`n;>j-l^F)b;KbD&1Q&pG*Kv25!A5HI3Mw zhR5_92iOnVJ5gyD1zJZHn+0qYEj58(MtW_3CUY5YQTY*PXoDs(i*h9~j#g;EP>Z2L zGa?ajVo<@-YW9_z>&;m=R}kA+&Ab_%fl9_OWpo|IeXO2tY&Yg2nMzAO>)#DpI^&Id z>ma9M7EA!?^p10yT7FJAfok16fwv&o&`|0G3_j`9o(!Q(siM!}Mg#ReV#`7A?;o;q zI=y$g4|KpJpNk{_P!tQsdE8_4LJj+|%`JuM+57rXlXPo?C@QzrHh3bzV2W)H`_q7} z9F-Ww-KKUXZ{=amWIIZ`RK>N)x}MPr_gmF*nmH(p0qDdesP}6#eX#|UF<4+^u)KZD zS4t98ih}S41AmRzF=DL8LeZGQ*nuEGqH0*R^>nh2mX==W+O*a+p?edcF`7u}Jd$mb z#z@icEjTalvw#eeuBdvXCzxBrk-Y9*Kn_RAHEkE}!1X6x*gikO!%dg(Y?v(fC7xb- zkswq+_aZ}cHA0mGioE5X`zIRKKTI9{iB~C7EsTUMz6*TNAq75zH!&2c?%Z0iKS^6; zKK??Lf7aqevf+RzyKwP@{Dd1P*V%D%0lA_#>g;Scwfli=wszT+3%us~6fMFZ^Hi-` z-J8_8mCfIySp=j4QhoHBIiV^iI_m};c!etYGx(2?{%yF^-q0L8f3riB$%Gd=C&N_;hS4EIe~C4^#kPP--m zplSi}?h_gG2PgC|eUNCQfS9{hg9liTU)rI$AluOlaUVw&pXU%~QNB2k$0jlU0u9E7 z90#`KGa2(I1KRS{v5`|3@nYlUE;%x1*?#9gA z)-4{BzKe7|wR-s6^1*1yjxC!5Z*IoQM`rod$cw%w-}YNHXxA z0Ihuulx;m8DEXOlSG_sv$hCG|_@{e_r;%l0<4EeP4?FFmk^xJ$lKDLkV@)*S5w&j3 z^N(89x6uy?Zh}^Odh+N9$pJ0QUAzCk4ux1LxxwG}2trS$vP+c!1SOZKEcqaL8 zSM=A|aPF!y4$948f95@!4K5DgTEDXh(paNzFx# zCSVXnrHO^gf(WCvR8}|;YGMTAB;>U$^jNWo>)^W?;ZoD5AiDt2ZG0P}!|H7xGV+&O z)2eA1z;MW#_??=7%`j15-HDG^EgCcc`91v+*ehlKW8uEAHqY;mMNF%Px#Tk5*qt;D zL}36OuMfiXF3MJ+dZSRS*GcP0k)`p$@*AQ=lhy$f{fv4bq`JO>aqgYh1!rXdB7BA( zJ}$L~QR!eugt){dvSs_+ds}{ zXHPohM&&KAkfNJKSb-sEX8Bjt9>o2B-L>6l!~Z(`BG~^0#8)A$MNh5Q?Ay zvGMkIMb!_MZZY3t4l;nRrs`^E{ainAQ5iL8&dO#WWLSonRq|{oN6u_D(C8y3t#sN- zevsHV!v2vO*9!ZZ`0`P+AwZ}H6kL8i+B4Tss)dc-8os%y9b@Oqf2!ex69@gZgb+YI3N;tb=0l!EoyLb6eV{ITvsNZtuck>8G9!AhTFQylca%RxIuugh>JB$ChBGk zIypUvKG-*rtA0Pf8n{@_X;Ca{Ge+krQdXR%3(O7ZKRwzOLV`y4$Pr9TPYHmgmkBYf zN={o>wLR2+_L=S0ykk%aw_y_2ejuap%_c_wb_yif9KZ7ynZnhVAnAc{f$@<Udh^6Azas_ne*` zj^G&jLCb|pT?Z;GjuDQu07tz9TEXo+PwT?OfN&A>_1|DU7}go4;@U;XdTIN^>$+b4j9jiz zXeCh##&!M{)Isjw+?v$dopV+6&>g3DXV%`aW~bQQ=fV)x(e}1b?Fmn^+E!mRbNLaE zH8rPmYqpu?!{6UqR4+z8Ouw;*Ut7n|N9Bo-;g;2-fIW~GJ^5uJl@l-Dko9Ew5n~|^ zW(ZbyT(6|9w(T&fSz)7nlD6yep0bhI)N=}VvHNsNVqO{_#{H!$NeebC77=)$hJo@- z_D1q@xHkXlu`5juTa?aT?Hi!X~hnJ^n8EjxPpT~ydS$Yn+yzF$I64N_&IK_X^LF(7= zj`Bx)GFZ4SBP9pmDzgGId(S=W!`xp_jiwuvqfX zNqlAMdXUM=0wyf?UjR3<+m4#ftQ~M7+A_CeMPCOnBXj(ohqb6yQXg%n^Kt#FF%};-JDo-AgvJ zPELoqR<5-UuCN}ago&c3(=9EWi*CYBJ5&Y81V4#K2T4>|5?+R2B{>|RG|Vr}(vjLd zN#2Mykl%8&8D8v(PF!%{JOSDX76f!zbcMNSW)}wc3-=`>mNT6?ZT&0w{wC)}^ zt6-d(Ym8uu$QZGlzdC~)7zr0z_cGu5EGi6!acLnj$=s>faNv%2)CFUwKsK;ZHk``Y3X)ENA=vl`;bY?Jbp<3$mknRJ%e`FD<qQc+5aGb1C@X3GHFtgFtl0dvbUD zJU59}tzq#l9FrTzo}%lHGPMOX#-Dik?VIN(0j-9ouA}v8M8Ziv5S8jb`u&bA^ZKu&RyiW5WF}M?- zy`ni3SWF6R82kE!+AYWfw~F^hSKwune7fP$A-#8_(@_Mf3#D2>df})>pltC#uW-5M z@xu$y(JwH_;M#M>#ZmBq4{UK4Sj@`vqdp#5emXC2LN$f-&ZDR%0dlZIh`g{R<~e0i zVPSLHvzGFjXC`JTQ8OqEXnOtgb+zXUaOch-(NTaD@q;_YGPG?9&{)l;DA8s)Z z-AY~WsHW@~!8B>ALGlLBJ~D$|5qj%f%uV8Eo3t$wlBToIngl@4 zi0G&%Zas1=0}Ii^?K6i%+gWK@@t|&SIz(Lah6o@4^INM1%J}i;BQHErIq!wh512k` z5Z_Kxr47L7$+!pm{@}R1)R(B73wob{+e9;+;shi-+b#$eOtIl-x7kOA4#y-a8tXnyFfn)P##m zV`pTDDnC&=Ec5lEyDxyr`3AHdk%T>mnxD3bd1S+~@?X51kptOU)7LpjL zxX$KR`)2pV-NM9s7Z#G^I8`oL=o(l6TJh`IvFO(fOxm8vWVpL?+)4GbswN`Z4Coyc z!CTq3F1w9AC96|#F5b!!PfOA(g$Cy9?MA8Y-lyJHQdyDh?z)L*BbLuvdV9M2Tue4c z>18nZ@W>2ZcE-40XQZ038k5u0X>V7zNo9|Q+|pSIE?5k}a@&Hj_)GXTn=_QwxZ z-+jX@c40nt;a%_Zd204FQkOe5CBsk)@?u01xpawst<@I&swM$eZJnz+R{eypCSRne z%O1Gbx0LO}hIR}#RJCQ>th^r>7zo`1JJ|oiLQg67;}Gp*ah<+vtQ<~^73)JW`nVHT zu38m*0U$dsmP3ggWY`5B`Y7wEX*NDedhc-Xl3+qFn=%L_q0+H48I6g>j6&CldE30; zw+f0z#wS%t7h^2-;(ZjV21m|{ZV1pNHiM#kAzqc}d1_7VFU5i%Fz+GhVjK@SL*EtB zvxfMxQ>XE#8qX1F&XZ+<8&_~b=CAg@b--I&7PVw0IcpWxEoW>}&ZsA%OdiPOjd1R? zW#r~HZ`ZESGHcqdd9pM=x7fBrs!A_Oh!f(D6%sn-?CGd2T7;Y|P!-8Lm}+Vf(Wr=O zF8AsIZIE6I(2?8fD|$(P8QqDIZfV-9zjKq3)`|~^OI>IX3=pWbN1;l&-p6f$o6Dg> zt@pWCL`aAR(hn{w2!UA}+8D&V<;Pg&5o2%n0v*)^-L^KW{_dVTOaLc8 zq(`yEx?YJtJDQH^o*tmL}1}Z1;~C>9&J?bC0wS?9)R_rb|w19*STN4zD1&|;G^IuN5c4% z00}YW3%F3vdtzAof%FZJNk4PIiXtq(X;iuhY_PKP^19=$QQ60Kni{R;9l*iNn|bau)rzeKLJh9BAM!FM-@K6Y}~;Rg#`$zXTy+qEAM zM?aNuHb~Yu(k=S1>pj4(0%LPyrw&fXoSvy$b|?zPeIGPj0)}tA++rXb`${*it@Hlx zqPUKpgD0mq#!7D5|-sOPDJt&W=25!y`>DdpGK!#&Wt#0z7p6aB-&Y@ zQU)+3NN0^?L{HEIAeI{uMJ$MMkmM9Ewu!Ba6Hs-l zJB|X#1>Y}CL>H=dP$B2JMf7o!tj?{>vOV8XFnQhRg(X>BA~&5zA#uC)aaT%{D#|jt zG)7vWK+0bjqQf z!W0j0Bx~85R=-%dydDcxea1UCyt7Zi%N7w_3hbRdy0GfAM^ht=`HKelK_C9>p;BdR}Jdi6Llu^ zja-qkTtuP{-WFZ}dFk=hl%WTa_Q5zEZGlo$`a_fm0s$;&duhbiTWDMAC3` zSdp~Th01zZ{W(qRX?&dHuJ5f|z; zM+^eh$w*Ho90J(Qi+7NhefVPj!Mtg2inGqkRj{Yrqs6Sxy^$A@H$z#ig227v<7 z^?#v&P^nR13%$1JqlqF)#Y4CFd0gs$`a2gf zKWYL=QB=-%K%mf+N-qBfgy-$zgaXcX*Gvs)3&&VE7Rx35%P@E`CVvKX6LDr|dioKt zef!xe>!U`iDKyiL@p`b;-1i}OTDSJ{)twKH-kl zAb94a*gV3RH4G@$X>nKjsjP7lc{onN+tk9J!EvY-m##7}{pL+OH<>;Oxb<@7c=FGX zjA@#K-3yne#)gHHlBXk<8{h!RK2$snMU`70OH{}{Fz)HwA@ycDVziJNIIugtIQdO| zCG9}LGoX3k9LGBpPpP_H_?G?Ic zenh!*E?)ik_%|;N0;xYQ|B3#&$85z>|9nUqZM4|7E#Zo1Ryi-YU&_JuS^VMHjV3)K zuH89y%1<^GXPRdtqYP4CrK&^A9IFA`4^j}Hd*VFgi(2>p#F6FZvR97<8&-GHXGz>2n+3mD&s9LT?hir=Eh17Q0vV3#=XmWglP z@}Jj1e5;E9$3N5_&&bqSes58PpJJ#f+|eU31Hjd(9Ww{3SXW;r>$1{wbrZC0JDnm& zqM0(JWg#&t=Ll>N2vOAMd&c!&P_A4?FHPm`$;x1e63YWfoGFkDyz*GXvks*Ob1u%j zgE((KAOJ>4pK43s^# z(N53a5)pa~gefxAIiqqXeh)O0h~e$Cg>PuxLeKh$&pH0xf*5zif5aUDh;wZ#dh~ig z9$LI*!+=iA07gcY*jH8pT6a%S6lS~8{b%qT(k87W6g<}f*9c{(hew*I?PM7dd3z{L zfaW~}NNGN>Z0&9meOiBBE5B~IRKfd}MJSEJ3;Sr{9Y;cbPUMGJC>GN=o=IaDqwzJE0R|A& zzwHfPTlkjB=yseAYpUTXq9Ylio4IFZRGY>$z0S?u*zQe6nYlJMpRUE4T6FB+TOX1~ z=zzgq#_U}Qmh3xH^g&2Od zW7K>``21U^m7c+Mm#PH8$MHL9Q*8%HE*<&7?*V$C3R1$&0YfilzK`EdkHI`PV&*zS zI^5#g3RIAp@MOOyxo~?aC-diucKTwAT5LT$ELN56SDL{IwvLq!>e?nAhjZ6EGOEsS z6ehGS9$V99on66rUMxi}hu@+k!(ZATPtM31?~IS*G-Eq!mTl6v+*5gj0Q!{2vbTro z&HPLWo~IXL3*IGLbmQ}|JDLT=@kaqM_K{6zTFCxF5;_sw4X`g}bLjRErKWQE-fpRC zeZ`@9QBjI|l~z~E!O(XD(DWs|Xnw$;tvW9|n;DI?aceUu(_r&M5Isn+o@5M12Jm6vycC`T8~b(qcI zYl#5-PT8{Peq)_hG{{JBpzYINt@s~VXwE=i7*ur58J#?>?w;JC00&LxY%9>-s;S(X z9htwAR&i-Er+j;f=e`3v19j#{4P_6tTpvn~(YP*b3b>*M>96hcPsEaP7E=0Yi^gNd z<82p03Fo)xob``T#sI1fYBKfUld&m3~X--RtnleX)8cq?e&*MlXg=nQwx=w4OK ze$nD5g)Z6$AG-TqA9nzkd`D?Upc|sVqThZvgXL7jQZg@cUCbJl0|79CQsk&{Q6>P6 zSQE}Fc-e=&dFf(DPFlaLtfi~>cbqbY3z4j889TiGTt(*S%)3Oqs5|=54!w@EzTL3M zV@#hMk>x#a=uu_WlI?QIq`Wk2sF4AIE1()7jXkk>vf+GAL8xp~ug!Q8_?ackT<)zK%%8j3t*Lp2n!R|dvI(0B)FmeS0T3{wqT&Xjc%AOkC z?H=!pZP`+`TCK$2GC8($jIqwZ(v>xGj8&LjaQ4-VKVy8Q0nMP6Dk{;12JS7I43!hz zJW1E=1%$7b*N=&wuS577P1?tN2CHWGfRRF*h$81A-6_vul@<*x?_~OvUUO$gd%9UM zbs7tSJalu&d&Un2Cq}f%{faL2U4!Leu(tq^-wVOErx@$XPxK@IG8QV`^w7e=VfV_B z`octv6b?yRi}2^ zPd%fILWGz(8LoFhNh$6G`qE|je-vjdJ>)9cV0$wC#LGVXCc1s{TJrF-*#4VsCuc*R z@h1pu8QF(9m2KSyM;~@}bePO~aHfZv&;wy*tfJv~t(Tm`A*NNxA;AIKjVwQ>;1{JD zuXAU6hNr#nrtXm&>Bv8Gu`}b>`3j_kg&-Scr{N?_Vu}_T8YhLuDrR0Z-$XwmGf<^_ z2w+2@nY^->R^#z8UG}t}nn3RDvz!1jcDncR1Lrw~fhG0!&TYE})84+m=tyt2$5tw; zS2LEw>pD8z6GMUsH&hasOq+F-?p!r7wm5zilm}DJ43~CmRVQyRZa6JilbN|Utz94W z8mD;jx_Ey`^71*t!$Hxlxmy(;0<-3jqZcmtNe?{@jH$d4*OtEteIFotG%(e!Jj-_A zKrA78-9uJ#Lcc|%g&ACj-{(F6;(K%c3T|bD5I1Xk?`1!$cZ>yH^PVJYc>9$}6Z*}zpNsa)j#0Z$Dgo^BU39PC zY$1pGc>Ll)Zct=*bDiFOrgps`6$UiboN>RUja1yTTSqIR#<2;*7U95?Mk0b4;gBm{ zw%XQN;fe;vAvdNvK4!1?=J`jP>{K9V3XNt!(>8_N$;>`k-fy+(0hI!)uzI%;rX~$G z=z}OskqB5b+C|<#^~FFzxp8Lb0uF_pt3~<40^qUvk)g{JnVH)@V~}Yn2Df z%Wh0)j<4@Y)~6*eLkwwUdnQqGbB4#;@}{%gBxsriPhXQv#faH@yl#F*(_@Kx*G7OW zegqmPZBuC}ty||H&K8Nfk57|Hkav>aYZ1}FS%8kBeLz^8BP~VN&F3D149~czW8_7CFwBN#Kx1B7GzmZBU<%i@K>2f*3R<-K zW_v6n@{lpEwa!QDHng2Gw60{V(sq)pywvHKXprZa!W10om_>7&MWrEVxw*$}vhT-N zOorF8l@Er30Z*=lfyGe_1bP@FrI%_iL2J4ClH$hojHAGJ+#t#^CqX$CWkT+ilK$^A z;o-eEv4!^U+lvHl$|kex7-xZ1s8K2(07;tcDZ&6K2_=E(%g9?Jqow$EWh}XnwavZ-};EGqhxsrj{?rpY{DkY<86X#lR#Wu z6awnu##@VDdT(nR-<{ma8Cy9tJUem_3L${7kc+-j4w_s(kUbqfpc;>)XA@ zRWLDUX#%FGbaqeeO3w(V)pr$(RTn@=^)16>JLhEXq_m*$OgG}8_Za2z{e}mLO*;p< zk5&@&O1(&{u*BdppRK;7_*o`AZ(H6<)>-@T=J@c5f$O^aq8Jw+TdSM3-sj$3k+D{E zXSkFUPSJ!G@e&PBY-0Cpaax1sHqbQyT(#S^zzuYQFVLD(m;F6Z-{&1OkdtcKLts;B zqJ=2T?L^Nij~Mr+`i)BFdvkU75n)pdhhrNl9+XKAb)B|@!frW%Qhy*fgE?X%VrR@y z1%3&Sg$J7pso!_I%d6wRo8?~&osz5VAp+3CaDFHRWUxU|zs^`S8|Q}AJLv@(pSq)b z&vXx$3GpQ8W{*RxSTHH06MC4Frp?&X`A99^izqi}&dL#U_ve6U$G5TORGYu-X=dK6 zzX^NV+9d<5FFZ(*V&i+UNcT{gu-T;>%aYc+`UYGIC80@NZ-)1RSa8aw<*8|`H52S;$ zp(8EI0Xdq}YNq((8*H}9tP%h=WQ$#{Zdm6??_RrVX!JGfyHx! z2f?>x@N_{lIe)MoehF4V%4@5yTaoSCHGz*}2i~~DBtk5}Z`>t^9BP`kTshpNsPiD& zErg(TDiHlbz~sW_Y|Z}+%4=8ywtKzHybW=d0f*Q)_N^c&mJhf*YuF6=3Mp6u3Y6!_ z4YJ?BwV=BE4|3-}T3!BavlVc>GXeAH^2TWWOclRN2`ave;#F3g2itc>>xUiOB9RpR z>S2s!PV~WTNPx|1sU{tFZT8HGZhK1eG}>^yEeWdy5}SQlA%qUC8ZEd7SiKA>55b!8 zHVTMGu0-t}f?qou04fM0wz1iWP-9^b!1BKA7xo{NFXzH7ps+*)Hub0$p#kwiUO8M* z%mGdB2w=Me5=U+9qtYb){~Gvo5-5)u$fcp0zzc3eij-m(WWPb~ZAZv2$o$RdHPp$~ zvM|A1wCrC*7=BA2ijNP8w?9ok*762%X4lClMF0!pucGC*Cf)OTu*_=jao4aym8hpQ zMZ_=N##jK_zc?rd|1{DsDd@z(_op%^G9OP2g1vq>L9Y~qMqt{29K1ORxMsco(`oZN z+=86_;iEh$?xSnI>EqleI1JT{Tt-h?fe4^u;^kkV6N!Hm_5Uw=QuY@f@V6?N{l%iI zCxHp7#XkJDFhA5k1QgFj+s;_SFTm&kBh-leuQWodzA;QY#tUDb2)aHhp*c=D1T4ut zHQ`B8HJUre5bf@=ZKM0K)r6~%RqLs@q0N<90}iDjtB=3=$Gi@iLMq=!kET0qD3V}Xv z7A?3$1uji{5t|NlN+3O0I=@5!BD;}DK(Q9tf(}V%Q*dF$J4DROC~Xh`X`y*_hyXS1 z1um9n8wuo$YOj#7BOee7j{zeK5X-0X{meJ)4~QENWLJEI_G}BGO34q1V|p)1{M{cA z)i$<~AwMPJ!pJ%3K3mV84Za{il~eBnc``eL(L+SHgXq5DJ5oWh5YLl?tmR^~t`R!P2VSnTz;qGi_yMnj794K{TjhVWgmc{4y z;9LFb0(`DLM42g7pIKLxsG3vJTM=AIJq@=vGJP3^842E;$4&;ozPq;N>uBhXn3e}y zJad-1*EbNfP*cq)$hbBiY4LJRqdSLdb7YLHOZ3aZQQ2hSweUex%zL0f+Ct%7Wnqt( zg$?x<6jTTf=|jIIo|_ZwO4a0|nJFota5Z0I@UYu3%xB>*MzsL473hKz=2IzqT79(tX8y#$ND4HaO`X}NT`e*^M3C&xA z2w?u{x_GH%ADgKu=h@R?Dy|8PQ;%9vp8i$(?>m)JwSK(rT6)Zz$OpHVk?nq9S5oTA zdnvNMJpg@HJJ|SB>2Tqo;|Ij*!Yq{MOIWlMw>am?ijoGMC9Ow8g$lZdsH|l}=i-hN zL%KS;hP~&T1C(o)_P+gqC@@aj@8=`bWb1p8ZSJwy@wu5wb{`OWod$32&HO+xP^;65 z-}=^RjBWRB#=K0`w7u5C)5XVcL?PhxZ~KxxCo!cY#uFV+ZVNf*oZ=;ern0;s{~UHN zg`8$L-pL_ld6=bidMxa(PcF_^FEyDasftK1oDcB>MO6(1J+<=lwx!-}NxA2;(~DjA zC#+~bI|$F4Dcyns)9aq>_ud}&L#grRdd6Kv%D8QZZt@nEH2s=`ZHuPwo+;(SC3%hK z&XMQniQeXGy+}b0A;e~|jxIh0dGAWps+!aj?(yr}2;bk-QTOap)Ro=}Pz8^%yfID) zvjQwr+KIRj_swNBE6qn=Ag9sXr#-hGj-xhFEDSa4g9Y*YYTegP6H}(V7pyB2R)zVl zje`xo6BYX`q~x0~ZL-wXDn2))i3F&cBZuMIP-{B@#OFOm};V#<9<>KNvgA+U>>)P%Xe(w zsabP?{7@srwXZ^wbA|4wwVapShLIh&sgLo{ue6lyQcghQ;WWKUfC-fS7J_HV)KuNE zQzfm*mgU404z)d2oR=4IYjs5=eL&0O;6+AA1s~fOQ%dx6Ms@-14AnLH$t-S;{CLWb z85Zxx)rZM_Z!7jydK<%gJFOo%t2B5OnV4XDA!b`x_{_+QxZ=c4_q(I|hqzn)GTO~V zQOTGXjz&a{|kxI2Fdw6P_9yh_qxN(1<8YB0@m6q!g&g zW>~^5LCHhNr;(@kOPF!N#FXSQ$fhJ-1J3)!J zDZ%WI8Y`Zk!!@tHdPbYe*-tuems@aklph@lpbSUE@HwlEsoX+*6_Zh5#5Y7t`*~n# z(Q+)^o!OqhlJ5@Cg7Z$DeD{LNB$Mh5d<mhOVuomjH_cb6hq-c(iiU zWoE%UGF1j3?J5DdaZ3>(cXfk?FdyvzNpvWN*O%@&lnGc|@W95s01b7=);^_FzP>`I#zARg;XZNIMYtxyH zm#h8pN4($@c{hkDRyDE%k8$y3ZT`fJ&PczN18XvZDfKuWu{L+Nh~-D|bc9m$LX099 z`Aw8|-M_f17z1-UJ;((D|E4rOzhk>7Rd~wvD34#LUepg*Y-U* zvyZEfVv;Pb!Ms?TOTuhQz_$tt*ac?c=sGd#{0xY}_b>)-=b_M(Pz>{P9)JbpFK)yh z5HGF8RJrR*hawNQ;bzCzR1pjNcgINbsf@zmWra6KqgM>0BrA`{H$iu)cnrqPp$xjBlxU1uY+JYo`9fEBw}1QG#+MC&B6 zeytwXnbSvo3Z?T1awD`P8qrcA#k?^3L(7*Kf`*J_Fm2=YDgxG3oOv)Pa=C}PGSaf| z^Hec`R}J!1P|CRy*77Ph^Qi%1;r=mO>a6~xlB3MX<3&z;Gr8CP+P*2`j^(A1q;LWz zQ|BSP3|}OB(t4Y0YDT}l!Es52Zu;~TaV{Iw6=ZuyuDfMX6lsC`%u@cR(*e^C(CE3f zNPQ=FLRAj1J;1jyg^GY5V(x~lH4fQvVN0WysoQV?ItaJftBIEc#zR9$6@_^NRc01G z278lkCnH-5<1jreIrU62c@UK_d~4mx7TIJQdOHf7O){uLsO$?q)xf?mL>?#qh7s@);LJN8d|lE)*N+CH(j3k zIhMu#GU(|5x5;oU>$rDxQNC{C`mP*9Zq7dcCCMIQ%}a#XW3jzAQ}5R07qAA-x|5ah z`@TESwobH>qTGj%nlS+DDP}!DHqf&JRkCC8{Vy)oRZROOuW)bdor+;^sPQ28gvDeF zZA@MSo5%T4V~)_jSGc6X+2&R4TbJdOv~NwIz%Nz-)9vflW$UzqD5=CU!++X6V)45B zaaHzxLADf2_w#)`cZe6#ZgbG)>rL0bef6^na?>Ws;Q})k|Q+^ zLf2x$J%T4Prf2mXS*d{kQLb#b&NPd>FkBHO>>Qe~X*)pPb?pb<%TsD)Je`?-2e{#> z?@9fEjWWP3qQ({0h*-6$5>Jm61zViznX8?Kr;R^j4dbN7f&GzuUuMT9hBYm=u@7Bt z!BH+PvyeWbHRn7!ZDJIa(hqlNS^hrVM&K%)Uepd@|AM08=MAVv?_<&2*HJ z!^M6z%KEHkgiW%Dibgqg|eUPAhSWZ?8RizwtC#_SXQF6V{`g8wnIM^Brw}jM^j{P^@A+H}{)W4Y;$XV#%CG=_i3lF0YRvHE6n{pI#3PsqJ_7|5M*@|v z58-nxV}01_X#VY(8%mB`7w$hyNQ^ThVIsJ(>?mfNUzc?JWpZ75U}x|6nmA5`Bq7{b zYzcrBXJm5vD1tnQypmN$!e8|c{lXxEGNEr8b&ASUktMz#sh~_IqzSWw%o+XSbYl|~ z$xYUeEIjk<{d#!EE%`_-&AYMx21x;Cr3VR+D%Hc*$$3XY7K&-aQuwkGcz=^c{9VtC zTW)!IS$(p`EYFMWvtr5h7L6sMBYqu8=k#_S3Swj~-NVNgl)uiK2q?;X5X@Dp!DV;G zs<_HL&Yg~9TYC}HltMuHkmXBe+W~K5QzW2n@qrHwLIy>`l5trWthMfh1nODE21wI! z- z+WN*EC`ZMyp}HZCkQ^`W4Vg^Eq`Iz|+Ue;Y>_gG96TDVSHZMG!(OGu;Vjf2a5f*WT zF%_XONYu5JIElgH??%5t99YSa=y2_)Aca8@dPoOe2R(b+TcRfWR9u0bibTP6e1C8* zZ%lhlO(GGXKY-`niR3x_9$xa&-}0w}LFG5?{lM>50~epZLBw*Y-w=du;Np;q(}t6b zz{CEtb;zG}I&mDHt{R44?)=~K-hN4&i^l!RbO5=csv+Y5{3ItXGxHw9FE9-)Vp#J!&gjG2y(*i?Ya0z`;xBLy(fw}274z0Xr~D1M%DXld+T zk!^z0;S+;K&1RTNZlRak1t>cT4o^Xr4ps4*D$p^6_%n&wr&2{QNs{ysFqp3MKkau<4EvR5fDvI6@h*8 zuBx=d?R%~!mD%jsjSpLg$W6G{FN*@qMXuj(|B;+WjSY#)}PtWnQY zk!r3$J~IJQ&{iF6(R>Nec1M5jwyeFOaoYwSX(?;J+j$nJ++0vemzqx|Y=%Z2j+3Bg z#-PTr0}D&fqT#U}`{y@^W`8bAHDa<2nPiEccr7%2)E=!sK=3|#LOR94pgHZnG7e6O2w7`Gj|TeWkRR7@<3B*_Pf8xUKmD&gG0Hs+irQI3%#Py)OOA)Dxj!OA0AYJoDu! zki%Q<=S(BRb)nv4Ts0Rm-tT70;*(>gAOozlM2&uj?b}(@N&I029dC>{4yr7A_I2F& zWwrA8l@~vx-Eb1?*|PZ9TWo}cIUI29{C57sje2uGRmh$fluuYKx?ItYH|2YP;6tTM zfOjN1oZt4T>KhlNApt~EpX0T@b#xI2L`8woy8{7pT6Fw^GWj4-8E?_lRK~+~$Zkk* zG)kF_kvJp1g+Sw=syBk#{Tf=hoI@yhd`My3GMux2yJI^D77oU1$j8V6b-ZrW>=4HOcG1_y{ z=)B?%9|Gmfzefe_d}4Tc?|Ac;^VaUhhe=vol4Ae>0oUJTsNb|NTW^oN?z;MmUE?{ORVI!V4Z)bq+leW1Y)W((WMct zLwxlH5!kAv`0`GIWs>|r<;X4kjsNH4K}vq$squNZy;HdTJ&6xQb~VUmT&mDJ%!0aTt+`|1sC!OCs6{!f9YxYl#hnz&%HQqUG?*LMb)pzI^>0klAq_(tX zPmR~c9gmkG8m-1Of=fNsncfZ^Ga7}r1qzljEj53zv%V)v-M>G@9w C+pQ1) From 8c3e312e1faa851d28b4d7390800e9b691713bae Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 11 May 2020 10:26:15 -0700 Subject: [PATCH 073/177] Add back pictures --- .../images/hololens-darkmode-tiled-picture.jpg | Bin 0 -> 58935 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 devices/hololens/images/hololens-darkmode-tiled-picture.jpg diff --git a/devices/hololens/images/hololens-darkmode-tiled-picture.jpg b/devices/hololens/images/hololens-darkmode-tiled-picture.jpg new file mode 100644 index 0000000000000000000000000000000000000000..bfa3ee78afa4715210fcaf417c6760625a1dd8de GIT binary patch literal 58935 zcmeFZdpuP8_c%OKiINH_#hg+}PB|x}3$r^(q9jyGF{i5}sZ{QEC6q4HO%7s;B#Egc zB}}L!G44VcLox1y!8VsY&)P$`^Esd2_w#+e-{*Nfe>~?T?b+}5dawKYz1DiKk$jLe zkS1BKu~Fwk94-8^M0)j3XlI$>9-zfVVU6X;XQKLu8j+P_nk{RU*KeCfY zkD2xR*eQS5$n89$JbUq}aVo2>+CzBA8*e*77K8g6bYhy-IvD1m-%HVr7_nOY>pLwlhw2;f*?AJzP z-5OuV?Q09Ky^o}ojHS`d>D$<@ah=Cx;#x{usyu7CLPyg6A-;Ei^gsrsdZjwWU(?^& zKZW-H5B|@%(H%#yi{1jfjWCbcl-cIzQ8MPf|CT--A$QaPe^cvQa;0V}B%A+*pLcsH zx35}~)Gd>=s^61&cJY18U3zCrm74s2M|u-nsn@fA!Ss0vIf854$iZ`d7V{Vf&kaQU zdQkaoeJk^`gp}Rxv()EV#8KOG$~R~A(6eo=H}A<{yrg6Hh%Cz8*@NOFQwiyHsf47^ z(%>$hK+%(sUXDYtj86RhYYB-Jr{`)u#HugQOT0?8Z(xaZnWw1y->^ani8M<>YUD~t zL7qGk3vgcH<3l85DDpgBEoSL zjgpXVhrFRBXtZxk6{M8md7 zNU0K%ctWsIK)(ji7ZU5m1Cs7S3R+Uogo>u-5#)*^ z&Pz!2Kl($d#Q|-oiw&R|MCGMONX|^bbYpi3>GTKS0Se^SG~vP4GbE&jrvwTe@2Mhz z62X#BdYuc9CrP{)xGKA&6VTMYgz~l##8?wN5iXOEN?1({(NrmWe_XF+c)egmx*j5! zE;(m+iI;*pcLPV=MmTDX*;7*o#S>x-MkJ`$@!nh{Ag6`&(O)37n@|^f4q2p2KZyYF z@^8R%pJTEFi$N2%kLZgQ=!tdOxbTPsX*r%BM-@IP@ zUl{BDDli6dO?SF+4jwuwEC8ZZxsF zgfz^@tOv+VaVuUHC$wb33yzaWO+vZ_qDFW!I&|JikvcpMhN3)~`NMX4Yv3X7F~}5J z(mEH2CV*Uhd7gM6u0sHh!zYo?kolTD*0@akuz^Yu8yb<*DKY?@4FK8am^?)(c&%?w zAXucOL`>i#7{*5i<;Y;`B&0u>Q_u$WO(^fA-+bwCgr^ADyh2&S$Oxs#;3%LkgW1D) z7BSuq;f%qk@I;>kMx|~yjQ(xkt>`i_NJ6SOtbEZg%n3}cej`~VYe`ISg$WmZB_x@v zBPQr3E07yThi;9n3;+Wy+3f_x?zxNRD)HL!(-~}BcJ8otNkx9ETWYUEy%N$HHBPm7 z%<*o~SSf6(!2_96>uSlzCs9MFeAQ|uPZd<; z8{fxRBGSPDU>@iyYV9VhJ87u>hXG?PBl9`zlgC}({@U4p@#wNHa-sF&nkDY>;;8e~ zKb@-N__`YXRvMK7+rf>@en8Ko%)#pJrgrar22V~p8+bV8=aEBx6Ing4Fi7&>GDB(7&|^_#`}5pjy?fWe2jVA+%Ql!tR`XENMF(?nfHodt z(U_!RWYse<&N-HvogAOH-cRE2 zMzwr&fYBi#@mJJ}$EQ^!^?Bm*tmB{kR%1>0Covrl@udc|W`qTp*m-c3Ow%%wleV>o zlpjjE^C;%BhFNBq&+_~ySJQsEdUBy%>y>h@44+{3|Kuk>p@rWmsPxdjhW8sy-NMaIEUsGpchqC>O%BO2r23@$w^(>E^35sm8}gwxc_ST7y%xsWu< z{YpQ59{Y8*Ug80@<^J`;r8_Ga+3e5Rk>?Wf9&xOjJpKE}Ml~R(tJ%EE3D+iym&`D* zUIa(52+eB0a&6&$32Clh^p|)|2b+F41T6J+@6zagGvDv`-3*s1O_kKO9mx+C#<<>V z?#nLM&%Goebsh9+7)t0cu#X?tYkE2VCao~8Fj41bCCS6w0RFrLql7=CufOiyciP{4 za&~Nd^R>cTV-Ma*G|q6^KWf2(ub*CmhxxH56^I`^Q(ZkYZ_s z1CUPmI&psN>0H_(2zGm0uM6hO-obnuOxzpQLX(dr%OhpXYLj~Lxqasbn?3Q-mIBlK z7=yCxC0>UHUur5kuQ(6d0UPrS5z7OwxjMn&w6~fg_i#%+K#Zpc&(p=^v*@Tcfzx@$g(e-XF&}y zY9D&u(wCbY@G`>JB$IKbG8{7RiT-FDFCi(rsyU=29Ub(!*wh{Aja+Q2KGoD`?0hR> zuzMERP`d*=Ct?!Dy371?Stji)eFja8)S+C@w84F0{?yU`8v+8dJU}Imwb#af!Y$-fE>% zY=jw!61tc2cUJ!A&%4W8X)9GzbeFe1IRt;5q^t*5cO5Obi9zrs22O4`Q8~1;M;A9Y zF~#A`c57|`9A|UZ&2aBLYNla3G~xVuTZ73nuC9=f9!#_Te5Kjna3!QV>phdY^9O$FEAUEj>acEmvVa2u?Lw-~Vc;h{fJ zQS?|Taed;Nye&-5VQd9{<}R%9j#v-D&x8~IW{LmIlaS_|2Usr@XDB*I5tfhyQ{e0? z3x^><|A(iozez}izX&e8d$O4U3?SB>JF@N%5B-5kqN_^x-Y1z6;PM)}1yg|2QfNOu zZ2gT*zzY5E!lDDL1=c|62s?v$quR;=M4IlaN;T!@o>grH`N@!;f4E32-X_+}=Cr`r>M6UbjG7PeKaR2K~wH z#e8AlCz!H_k3N{@{`s>18fO!;V^m&dwgy^igo>t{tiaWnd8lCCHMF7NJGA26k;_sT zxLSUmwP2q9@T;I6UO9g50vlWGgSL;I0qS8B@y^5Cuo}%3V7pH{WO%27etjh}P|KwW<~)Xg zp|bTG9ZE$rt34$oMOj`re(qN`X6Qr3_UoNt^4CIkA}48B@&4$aev=GG8wp8dpqHyB zm}3WM5o?#w$1%CIBH&a=f>cFeWQ;F>guOX$wI4_!7BRvnYJvn6C-Xe;v!9umkq=Te z!KimFB~ial5Nz~ETAdKXnR z6Bwkf-;gez?84+7{w|ep8z(poDNg5Y$IoUmu@yeoaCOs$aPeddly~CmFk9y^8>b`~ zHjB3oKYNE5hH&ms#-XLk&w%E-uQXf4Y&P>@hzvq#gn3q6r8qC2s7EI0tt4DZ~gmlnEk1&9%VClVWx}^}u-p-zgmXe2;gSmU+)=UouN=@pj(*5;)ZMr2W2OWN6gewvZ4H6UD zVZa3K0NEkEZ$Wk^Q?7B|2ROe{QqmS9dEghS*do1dP#lYWgyK}(K%W@pS!uS7?=<3U z&%alPL?7%uz<5N)bQeSns2~3P`AS0NK3{SNDx{rf&bWrhJ_O8!_l1agRF{1&`C&2B z=&Z=92if|fPNPy>6kXnd3$qHV>uQbrdF~!nCc5VIF8d>KMNV#UpZwo-9rMjt=^1%2 zEX&p8sJdIFyThlAWBKk|(yLZ`Qs-LD z%e`v{+x$rW`ak`B*M#yHU&f&^H6>{c{B=+EGab`e)g`_Z@Qe0foz?JR)()eaVg3!B zhx|3E6WG+O$Mc48b}Cws&D_FlxWn#srXX9@nIyqpS2vSv7uYhLOk;O9eM=7Nd z!SwAV-Qdf(LMnvH%7?(_D9^n*_gyi%qraBUFVc~ac0PxUp({<;%aZCQ|3scxQg&Csarp08coVn zPGCbc%0(ON@+G9jR&0F2eV|DZ;jVcB;tf06j|7Xx#Ct_#nkKb-R&UAh56qibsA7KQ zQ@NNqsJnK}aqR-qas=Vf#N#|sY;mG-cQBRz3wV%*sz)fKjexRS%(Ey@T^;%9sT(hX z1lKH9rwh95g+_HASukl4V0oZlyDnP|Ej1xlPpUS7oZ%pmED@PPoKONL@Y5q?HSv`L z70jEh$P=k|Tuzuq66EcMAB~2g{4Slw5|7RN<2#h^k5VXt*Lp3>8J+GyWWE)F$YDOS zjx3LIBMDMC?bpFLe0eQ+pwlm~x$cME=%+_1F~9ilqV+|44zO|&!8{`r3?Ch60WUfi ze8p0qCguqJ`9E=E_zA6f23c#(+VH+;+CWPVY|L|kn=4R!_8rJd1U9sYr@UZ_G?)_7 zOFF}tf?)Un}xYR0*L{+t(gXp13}+Pli%=}yj%`TFjoy66~LikYqMcn zEuBlSqz-~H)qG;=ZkS4>(PkQ;kgWt-|6nUipNKTzWs@|$mKD?=XZFEN6*}*VXc{<_ zb+DlX!hxqzmj?Xs``EzNh4h}DuhT73-#4Rr#chSWgweeGoCYk zZXp|=$cDHlPKXlZMSUfY0Xgq8D5UsdOO~ei+W;6sxU-#*KO8O=Ko$mHDV3NKww9s< zWa)k-ONHIZ3WQjAT?z;h4qhU&KViie*a{*Md!EUo!f0uR+yjsZ)>8xNjsX&&0&qxg zNVZ*td9xP(h?x=lGuWe?(t7*@k!xK2M*6gk%uB|{6ZvXA5$P#V-eye{1x7QudwRlg z(sq0Waw+_V6sos&B_x2;UGsh4lOl zHc=>g#{5iVW|uMaUXuAbQgk$_ClRhK=+a9;8!@Gr`E|-un4%}rMQRH1VAfd#)A<`R zh2H;+42TYp0Y=?UZ&bq-2&q6-2dQD=!R&tk^X}h(*+%el!0juTWB@}*I~5fxGAE%t zJ9q;{CBiI-JpA?V+$jBm$>Kq}Op#Jb0?4}K3)q44E3!zXj?mTIbn#6l*9`-UIb8^1 zqjh|w_7Y`{o9W>VN&*$ah$yu0{5i(tC4-RMK}P7;DblJK3nY#Fi=>NP3wd&41$)@1 z%)i6S(34JS`Ed$tjX_6<5?N&vOEguAo79e+YRAfbpZNnOz)?V+&g35GX&F{_8c~EI z#A|8})vN74aHQmSViwX$5y0m525s>K9QLgox9@6Ow=(}b zPs^LGy*!f30}OOMA4y1G=ymPuVDXnUfCS5)oJyz{F9jb15jP7;eo{{{qPXHG6aHD> zN~JDz#YnMl*e5|D>K~j!?O4x$WC@fXg8X^rcrf*=R{`Y%udWR&QMd#o<%EvO{IpjzGX7WG*|86U3@h(oJD#PvDm9RC7nuO~Mlp+Qo z3@3z&LKz5(Qef-ZP`@PjE9A(DCpZ!N1X1Q4_H(szj{{z3_&La(r_6U55N4itjoNSb z9&a=$@(+u5^nWKRlF}AFQc)r%I*W9PQ>e74lt)xIhGc7BiVu`_XG3nnq(5L0nk&m= zKy7P2tTbOb;TL2)lWWxIE|Lun|2m=cQFd~>qa{;TS|$3n9U7`Zok0=!px=my#s(8b zpI)Wfm-xx1iu)BlVJHQG5{MC;ZNBd2V+d#X2W=7%YG5F(%v?5kpv1LZ(H67fK7QP9 zC$I01$2`B7Sv)-6|HO?!7gqzLl2~USbnH9))WPF=A9HpXx@@>GH1E*yE1x#sYf14L z-&S(ED^=EQPGS;8enFYV%BlO|{QBR|&Pubfx;wTUuiXC;{v!E>g9n@^AzfS6^Swww zZBi3mzevSD0Lk*yWHQgzeMp~9mXMft(bnQB=3M-Dv|w$egw#pHPhOX4r;hGQJ1deq zaKj#7ep+dngyeafd!u>@bFfa-U)erbKMQ|dVbsP{UXSkc$I;-9Qc6otmf!Q;jmhqo z=|aOB>G!w7S6Py;XP6BlBgc zd65rlO#~(x+A&>cuN8>MU7NdSx+))V_*AxI_S%8!MKNekhC9BzWw*GlbPmn9xC`IS zWM4fwHG@13a_85YXaYEV!?{2%#V5o1Zyzy;#HHUIk4kLbpEkCA=7xgOzR#OB#W?C2 zJQ-zjJxn{?JbcYbbF+0tGs}NSF~&lzVZQWdZ0VQs0ozUgT91&HC~8Ub;~<&&ZS>b! z4~Y;&npyl_iTI&75v6Eh9=>uyEd5J4+_v!`Di^RmR4gEgu&+uf&FK#%0drZYE>~}o z-#FeL^#KNF;rLg&iLSM7?@Kb(*j)P*;SxV!rN?6TA@F?d3TZpdn+(o)v!Wr1+GT9T zySAOz`FVi7?}ld(?xm>~+)D9W%^oiT&&R~tLzB*M>>8#KRS=7ZRl%m-P!#dhT!c9Z z>`(KVQ@Nl;b=m5ftAm@5S7LrEvg-IMM?HRH9>a;|prv^fuE zOmBCpC(@BIVH1vSDu9IK|2X1fVmd~m2o_C3VwWTQ7FX(3D4#Ju-#H*54dhEmD=ozk z5S+gDHAAUCTvOBQIgeYeVL%*@@<-pAxFj?(-|Bg#`;^*uwXQD`vp-LoH|Ud<;^n-R z_r74_qr0D4Q<)zxwP{3gWf!HA-?+~hEnF;Oc2-3n?n6`1!F#eqC{S-bG(Z)0(J(7A z?tcvz-dDqwEBRSVs_?d4S6^Lvzy9*W{cFZ=OPSXjd#>JmXvyr2a$soku)(t)qwM3{ z7?}*b1oLg0{`6p<9&DFgCKuU0rl`6jmPaZio`vi{HWD7x^a+ zIHttk!qB{W&8Ovt7uA)5t2~!KcCFo#WcZ}o&XhT*liK2mb}hHp8AHoGPk!3!w0=pX zY2AL*<*Lc%PhC##{lyXzB6{S>2Pnyt8fe)Rl7-7hgNeEZD{^y7M1f4#A5k=j~Htl_ZDNq-HfFHx7Zxmo6Y ze6Gq=qApmz?3OH1l=$ISXnZqKd61SNv})G8L&0^dAID7u>mh}PhQrWt_eLJ(-yurB zvio~mh4X7{WsNibUd;Sj--N;hTbSr#|6hOqCmL zN8g#Dp+=WtUv>_C5*2&FQ43Xe%=F)8V71N~FSZIv8{B<>el}*|PY{Z%}#-ZP%Yp zT`7{khO4kc4vEl4eqW~E{oH{q^;4qoeb$4e_-7rlgw!p5$5XH9kqb?us#>`&NkWeV z44f#~>(;^){AJfQ+uq~=rFLfUW%{f(@{@_--c93QVd3%A!W7JOGdg?vl7s#lP=I>3 z$NG6HhMXz`f(_V{+cGFo_qT4N7LB=a=WO_mN6do7THRKy+bV2AQbT6lOej9!6^O45 zNdM}6`m4>eho&%RgF70UEvOa;xiP^;Dw8L+f3_6WEs>CXBf58jwfk%dJMMVn8uF2` zth7ZKR@-Xp|E|ZXxcQA`ecILM$xE!CJ1QoV4sNf!e*f_1SO5JBd3Kug^**HJBipJs z$H8BlWO}J0l_-3D3pkwaR=U6=jZuJJp!V7tqCz;fKn>&xnq$HITNXANFgeQKePQl9(S4D@tozrWG;GV->v?tvBg6YAH+C45YIKX*$Fo9MK&a>7gr&?BX%fMJG3Dqz}yPE z{U>t!MCGA9WZV0PkJWc*-Y$EO&gi-*F7K@YSgRofrs(E@Gf}zbY5yWo3_r z+{>?35G8tAQ)$#uOz!n|$XgLL0_5r%y6u$~sOO@&L&QC})loYDL_e9AO&NujY7vwC zVA}*rh=L5wFgD8^DjtwUnBy>rE5RMjfB+Vozc#H~M7EK_gPMaT)yyYBWFXfu2=F{1 z;K@A$hdRzJ#F-}0${55|44~j)O%!g-uiH3*2`kD7A(AVd4mW^q1IXKmGgY9q{HKAJ zq2>&mbl$3fVk&=4Cdf5NQCnm{?qI_j)K_F|VlzPC^#0aCs#dcsN0%sHiAhf|ja43Q*-b z3)_!EI^k^kS%h~RB%X)<8rZhj*fnw)1N>C*86v_z-_FK167%GR%g|Caf*VrZm_v;8 zg^|F@;6QOS%Dw0cBP&p-Af)DtCw~HMP*8{Z)d=};BsOdV!NFVh$XjJ|kshn29Y5Oz zhzGWPW7U_LrA0n;;++sbH&y!1S)|8+i1TxqNIEKxAwq zG}j!|I#Ha?SNGm%6&T=Z>K&qLYAoDUPlhM*;l_<~E3J@-pS~6kdb|A|$I1dz5 z%j~#y&ov?^_{kc4Ng5fd%Rx;3FKv*QldkJUiPwsV%@~X2@Lows?`hx?8s5bLv@F5_ z`J2L|HBiox7dHs*ykD;CflnQT(&XfRCDC+9w!8ZoLAHpz5m3D{0xnU1V(7=e&BwO0 z6(Qy`uRwTvhOMz4ibFYZg~{DNyxMCnTG$;7r$wzc@`yVF)w%ZD{+~t>0R9m9S^oRykXc*@WBSn-(VEuJoxI};26Zz_KMTWJqN1ClB&1*4 zst$G-H( znK$$X$@>ICq@zO#(T2tjY_T?X|-)FGY z)4IjSQSroV_Z7J|d22M^XqWFo30?MX7{Ls#xu`?~`ms7^pZjYBL@6u)`FMeOMPx+>b?BtMv-;5df6h;ur z*E+z)mP$w+^C6l_;!t5*haD9WD)dd<-<;KVl206qh+0y~#U!)=MDsB2=XtvC;lxk+ z-yPPk^k1x5I0V-YWm?(1Fh7XNZqL{RR-F$gR&&u@D&(}*RKlJvA$_oquoGpF_zZxi zhL&8s|BV1<5Su@zjgA=t;kreB8OFn-C@?AvMpX}!NrO>y4}2dL@Q%bsG0XqcsNy9y zk58JA@hLyfC0HBB@f6EDB;blDu=e8hgSV8xU;gyzQLmra??#N-NPEqeM``nCXK=)9agf)*yCoat z9;3P5P-HoG35ErYCrV!0B5f*korJ*|Wg|G7$xeEYFJ71FJc5B|wHHsh=mEPOpxLMc zTiiov87ZAxjqvV3^(@nT?~M7fADNt;elkQQJq6`#AZkkpKGmp02%8K_oJFERcS3o| z1d3j;0Lh?e=yi~uMTieFWeJ#EJ!~60l_8$&<_n9%phg{(v!6JM zm>G79bg57wW6%jEQ-S~hT?kISRJlh9SA`?X8<&xxtNXtWjX6OKJuO{}IQUE*Sv>+a zs})2|Bvzk+azK4VW?o|nCS@Y8=r!H=*=E?GgY1av9t+#bPVE*?783}00z$gEPYEFx z0m8y*(p2U|?6Juq#pbm2EYO6SBQSeTHG zN`dhaxX*F!?ub+~eF^?l-RWWE&^g$V2OuNh^uxOrO?qd@dAx376NV$&PA3~eh;386 zUU2kyUb0_5-e}PX=AP5wwjFeWEDrL1N~{XoXRZzO%$!LETE{ZQL1f-_sY&S)CIvj* z>2!nu#{~`e+Y7KYGT53W*qSS0Yc~(Z?IrmjKYwZixfXM{wKFBnnrM+2P;HqpzhC2_1R(72i0>p_m@%VR^Q=*Ars4Z`%-}{WfgK z9*8KI(4#F5UP#2v70CQf^*aa>dYg7x*NrUMSPzMWS zIGT(c{szUy-|@5Hz_&r1!{b7wfgUdtJxDMGS*a zmka!lUXIJ=YAjC76cnEca2le-MX7AK&2`L3s^mcV&k6NB=yO)Ox{Sca? zg?@hFbq#;H80B)?`%kx7Uu9~8tz2RD?hwH~`{#6of7HIM=wq0u=@k^74_y&d$zk)% z_+ePL5Y8uWb9z$oH@@!TQOrM&>rl)Y1*|$fs}QRm)|>rq*LG1DaWF{McMf=h{Q4Kz zF0@mbHn{e^Ru@^r!zrFa4#ubUObs0KMM4Tqb6nnE*qxrn`&ez0Abx5-)L!V#IE))B; zwPAm0T{#-vYftN=nzln)nSarKb;UyEH|W$9hvuoPgN07#8c-KyVOU?j0m;LOEnJ2d zX3r7F-R{{@yHI>1^4JUn5wAc6dsxi9_tB?9%}mosf$sn+PIZS0rgg}GgIb93tUJ_C zsQbLsM5nfdV&CXMvHl>mrJio>kzN;Etph1PzEhQGS2S&D3A#9rq#gE$#CsYV2AjPr(}7n89|l&x5;$mhAx$^Sp)O zhpO0uF&>)-Fu!0`ZmwTTl<^MEVhCn4*y1sMurUSBiNjUaq(jllS_y6}F7Us8Fj+#X zd`B&I?ytFw=AMNBovXv?7EOm>G}e$QQ1J2vmuX?w5x3V|@O<4+UVHg3;JPQntP(rv z+6ZU0E6P{l4dN57-i@X89}VvdslICp+lUr8;adqIOx~XBKS8!KBe#9gYf)mX5BU)p zI6(XeH!_s@zXt0n-0~g)X8wOb%;HO_4W43)9~SW6!uj|+T{O%_9XMz#?e=*0q1rxlSVdIjwMe|m;viUQ4EPUdW`=uj*;u#od4&(+(+;f@OQcF~%?|c^S z+i<8NjdL65m`%$`FI}V9-t;9iLeCm^*@cxg9<|onyh+K@cg3f>!??v>D_~r~Itgh)dLuNC8qWY)K0mMonc3^0 zOS7N4qj|a*4eHo(Xu}YE8f@1?7AtDP7N66*MG5lZQX2C6pGPZ+7Nh47t}~B{D_za- zWz>{!ihB9fVRl=9Tzcig?&jy$HfhcZ@#AvOUOreOnn8wR+NDg^&bXZ;s6UT37cI6v z3wnA0%HAqE1nw5F^(Y36191fDUWc}x{eYGWy43%WGo%3~oNq+o>H?q=G{FGPn}yNg z76#my;g~8O^@U5)di_Vq#pLY~tpm)*$C7rtD;6hnjGkLWx5OaRS4NdPe_Y*5b;l74 zf8m@b0^fPjDPH@=cXPZ&Zf=WFHhG`5cw%P$&UnBsq%WkZ`2@nt4**wuJMSeGvo$3+ z<__!6B(5h1%`tp)(BPl}nsgaI;(xG{$+>6@=$nR|gac>rQ)6AB)`8_)UhMTwZV!;H zI`)?8mvJy)VK9-W-5rq6_thw77rX_99*bf7t75rhr-XWJuiSOIg)^AJ+3FRgOQ@(bmZ+Fq z2+b0+YJ_xQ*E1HjoBSQ$wXT7^t={p&mRVB=2Bhu<4Nlf1lw$#@xZj!QKp776qd6zl1{6`|rSkUO=5%8gesbD%i#X5w zfckmX*PM9=Yp9mBqE$U638Lqiy0tI{4v|+}IeI@3RpLv%NYRGO-(U8p_JDKmL58M2 zU5L6UDFY7gi9pN$8R33X0F)PxaoUh~Y`GvR$c(=K~JC}Zz z%6lB3j+wtcT`n{d`mTFgfxnv9m&sVJ;va=u35}{b6-T|%R2EHHI5>a`Gy<~mLeDzH z841!6vlLnpfn`|l){jW#5#`tuW#PulSOKToQgTd=-bk-ZbUnUfY>4TM%6p$5Jkw5k zRIqYtBL8h`>wjIP{nvZAEKEo5YgHEIx42Pn&{d6H5?!*5D;LK0o|sn@RW3fmsQB07 zE&He1ZT+R$$>e|w?{#-_s|Iyf#zUkuelxTkB7?8VyoYI20hp1Wy`k9&)MYo)(pn&n zIs+GR&B2_%jq~2zpZBqTefMC^r=*7|i%o?sO;~$O%Iq}vruE#okT`Sfca!RYmE!oF z;=eMz6R}`N)ijRxp94;-tWuqeX<$k-8A(vsIGwqTDJpM8c@(DM{k272({3ioU!bQY z%T^|YCasxy88K^tK@aO3(f5IR_*na5WLowD?KjCrjpi51@`Z+m3(Y}Q%-GC*g;X%( zJ&c&CS+d~PuWC2x3FW~7cJzDgV9E#54X2ISVdhZ!C8GIbDQH!ZkM=LaZB`@QRwRKR z8h{M8p0hKDq#4v0A)>`X;C!qtegTe!t6J3OsQn5VnvQhVRzm?i#fM3K33(nmiDy4Qht|b+0shPLP7_O{H+iy9m}{Y%gSYQYW=3 z=j>E`Z}fZ4-46809g1gH02-}3JAc3_H6!xfbiYjlmuLsWdmXnPJZ1d3K4x9_5LeJS zX+YmtIdWMtL*46$NTV^?ZgtoqEnoReI{(fG2>F)3ZqDE=Iyzj{P5OG*BfiGg!{STH z=wq8QON&Tm#66Ib(VMkAjw)^QWuDmGyEV3SL+r^JX3IlKZqkpW z4V7O?N5&H4r9Xe{G!KWb>3FBZ-zYnu=roOmrqjit(0@vNG}>2jAyRl(+9WKyEG6(2 zYz88&op-2hQv)1tBq`NC=!)}iU5qlt5NqlxWVH_*z9QOuw>@B5kF7U-{4DFV0}dCu zQ-vC!Hv6f#FZxJyoOPD|C}i0klfJi45Sez(Uw8wL7!KRfS8e&GOt;q*qK~UcBTXQB%BVnVo(c=G$-GviZF@N+ zmcw-Wb~K5*oYO+^$$Ybm{l~T#ZElHl>p$+}R_XPo#nsj1;2(26w&-v9^x(QoO4#Df zu0D~=A!9py0p}kxv&6f9$HURGQEnfXR zIk~i!=n&)p{ZP{Cwm-7NnB7hnw~-*ekQ2v<77EQoR#i{*RK<*rEs=Kh+8_3P5Dvzo z9sPrFCd^q#8J{om8N|n;1FC&;qA5oBx`cB`hpaY!$x^&KJke zyt-#hQ$0w8@9yF$VTIMMJ)ufkZ;I)#TR=w2_St-&z-XHvJzeMOZ`n0&7W?ti<{@R2{Xn40sEO!{ob2<_=E#u-;b$HV;;@ZiA4 zAAkMeoV4KzS&fCQ_c8BdGSFo&?ZbyFZU!={s(Oa1BYocM9^V;jLtJ6|xtm_)B)Be} zlh9@V(-pQCddhxQ%pSQwzO_Q_cGElDEVfPL<)temo@Z#eF`&X`o zRGBu4QdVlnma;|E;#8qM`(c!j$HWVE1gUJfeCC&#&GCbxD-x0lTKy$0;5uGBxE0gk z^&@Rgz_+qZj3U?WAuSxD2u9%nv8p%*_P_In4N5{%E72pN+xwC58R;Roe0S~U$`cMd z`dgM8_t)?5wZCv&qd0o*u^U(Ib?z28F1&DECVkAdONplTyKl+g8!qq=ZL0sqef+=c zHiSvIJb382b+70HGN@QXBOv9I1(inTSy_i_s$w=hfsPfK+mju*TNZP>6?QnLzwOR~ z;@5Qgz&lJ&TT}se!63?MevYeWt=|#7lx%V8rmAv<-kl*$=4=Vc)lGv>p62J0?#yO7 zl`mp;_oqh_*F3mxgPq>I6K4J~lrprtKfn{O#21xjdN*31_o)i>pBjI6N89q>Lfe#{ z34bjmOGsq%WNcrMkJmZj{_UUi-)qa4Q7oIE%&ts{OTAjUXzn_fZH^6!y({!S4(TFL zQ7&Q8p`vmLnzSdnGI(S`6l1XL`S*XGTwX`TM1f*{O87ven0<-(Hh_;_=zwK>PLr zG+375UVFsItM0Wt{t*$*C7p0cKS!A;S`}06P$BZZ=jCe?SvzfCIr^v`om;xZUywLJ zhF*xxP(_`T<=qcnmafRft)3<|EqRjFYwLXKSB+AmyWp%Vso3TKMF?@4twmE2X#8-> z)ZgK_^yn&Q?aJ2meC9(Dyo_bsLmPrX#cG&vr6CDwp0j))a@y=fOl%yPXf9g77z^7$ zk2XFY*mM3q{^2z=y8CaT^=i_^Q9LppT9p9%F7Z`6d;R19>I*ohbBz1HKtUiAqGr=q z(9?ht-z)VqU~A#->5x-!K;HU<4^UrP3v@FQaAlS?{*I`So1qXNW(XLRqa58>m3efe265W8{pA-2riPzpG~ZVWN5{hssR(_TN05+*>Fj|^v?>| zQ(}C2>DXopY$&&zsl)sLvY`B3(x*2}Rs44__Ch7%d#z$$50jxiK<Q_iWBZu8>Y(FgmyAuLfb%fdZhhps|~^pWgKXfM+USKK6HBC z(OJT3l8`JSYnGtp;G}alqa3n02F{$RaFfO=%R@q%=qJl5T9Lz6>2&kkGl_$V?Jgr2|&xA}z4e zeDPGGfFYmGfTy5!K$1Xn4sc~R6ilFfBc6wfm7skKjwM(Ib(lOG6K5$-?f7|30;j%m z>srMDByU14TxlcBGp@Kv|E!mMXI6u;RS``{F+{h}L<5+80vEjiHOfp)YB~ zrtZNFv}{>WV+Sb5tm<#3|83IWm3o-VeDpe>*+G1R+~$4+9EHBn2S{-6P)^_)Nh z6vA_;e98{A0ir+*kX2PXg>cblz;M777=Cb_8UV^&x`|kw&+1@9o5p5C z0_0&f?_MU<2+b6_0Vw>uuAuW0i2m`_F93}GPhdK-^B{2*dg(UdCgM7f(V%4az}w96 zX#(BdAc8bu?0HXk35r3qn%PkmQSKco+5kHyv`#$z9W5qrx^tYom$=JiwqheJpjA#O zgnU})2?C~hiZ8B0^j7M4vavbfYQk}qbf`}0WQ5@3sNl0kBxJd!yCwjfKiF{2V7z)wJ16`{0hl`e832fBdV&E#$3v-F|BuN2P4 z7WmL{l@Opx*8yw`#GMZc6r{y-#Y4N2z(&eJEN#Q~lT^CEo36m*dP5A9V^?n64Mp)4 zfKOsOq!`_yr&~7zKqvu-`&H3G6A`)U_~_I$EG@}mh4>YKa+i?Os~#2|snjlzKhtWH zFwy%jiYI(8z)Zl%fzL{lcF+}rVvJ!poq_~gAg>z_CBDDn%pfG~p;=o?L?QSMPPQQg zVA;nP-GqBFOrG*PL6AZWyeF0Nw(U)g` zHMb@~)|Bplh5*Ybgui4AnkVEGi7Xk|T zfC9+(Uv`aQC&pM^_3wC*Itw%9=!Vp&U5p2;|0LkFu|)HkpkyU2u$`mA<-@+mKGxyi z!MG1*d7j4>Pdo}rl@9WOY7-T-jO!5&s?QWh4{ydvrL%ex&iT#V-QfC3c~#{h!>Amgb7r63J3i(c-rEV5CB5}H&ohW9XOy#=3T7Hy6Y7vv{-m|?Y^MSOgfW# zn@Mu+#V32sz+c`#Au=dRb~v8E()TjGJm{#2K6h-U&9;x^_Emewv9?b2(F~h=e5!u6 zV!R_<1UtS`1HJ{zd(MMti|%)L9+OEN`33>+3K`G$vA2b06sR{J(7C>GbcLM`|6jgU z_5X>B+B1kqa3rhHr5h3@_K=XWR!-Q_9CN1n0S-lg)ckW2(th~9pL#Au&3A40uN`=e zb{%!s!FpvdCx(xN6k;QyS`Yb_pu8o|l6D`ia4vK>VHBjpYM?B(b2@b!El}#j}DOGF{fsg7+pVU1)Au^`P@^FWJX^sEynB@I!dv znmrq?b9!R5q+w^Z&0k-$hfWc^aI2@;=@kK`3f7OxogH(n^2Cs3$>5%ZI`w$*{Gr5 zJKrru>#DP9vjr~LDCgK?j<0D&+KcPp?oIqr3!teX(H3iW`c^S2cZr8p7nygVRkxD}@DB+B1bT_zIf61me(5uRJxhR)~CuK_}>x!ayGNz_$u) zi``Yao$CApCaFJ=FU3T*-C(_gu4{*cq=a(U6UU}&r32{KMY(uB1W52L3Fpq6x%qzw z{{t@M4;VCMKPdfue=_4I=ru$MswCnF)Ec$pgkMajztTtQ%(Hp(qAI{`A%pj<+`{6 zeev7&t*nOGzxin$H5Z?$kE`Pe@iTRV_WK1NnQ+K$i(yu{wm8#2#`<*J^|I)>lp|Wa zl=u}$n1aQl0plz0!z_hX&&!&74=ER-gKb@`Zz^5$&5ZoI30qV`K|;?L)|*6?Hn9hd zU&XGiU-F^#OV)vd-|gli{kwG#3igM1*SRZZt{wk=1Yw=CL#w|pHiPo7<}lZhj3Z?k zp*jEOVe|S`15>}5_7cDE9&E&fRjj(F!W}L$d^>2scKaF$X;e!uuHvPGw8?|Y#ZJkd z^3Mw-d^MJSBl8z2E#}#b{OBJj{l4a~JJ}i=P}^!$S+SLE&zbs93?1Nb}QVN2KK&cERLV|)KAVxs}nNo_%Y*awT za4ZK96`~+e5Fsj)%8+7~DN#TX6~Y__A@X9sX+U+(l)_X)O-gdfV_c?{RO$14P<)*d^ft_+ zJo?Czdl@a-bAMmQ_21|Ik$xY=UZrBOm(~YFN;K7O8lDP0{Oz;0=TgbfOs}WK?^UI zJv)V+0&&FBu#>VECEpmdF~URSvw3-A8U;zZ{jk3vV)41|6P=b%C@tREfY#@cTS2g@ z;tV|F6k+W<7I4ay#@?&8dQ+LH=$bt0UIXRX5iCoyu&*njuVuSxaUznsAtJXKUgS8U zvoHeUL3h^lRZo0xw#^prff;F9l5~AFfA~6TctMytb09JCT<)f7-2)8$Bj2NSiXZY! z9cES}%w;2wv|1r499^0&P0*jao7{@yZAuMwy&kGAgs}@}LA?CH(g>NzU}Xwjfsu-< z05Nd~m3LFiK(^mdscw2+R@S3!O>Q3ZS!urSesJ~FJZh@LV}_`dZwfC%BZVhNKpr8k z`0evFLdK(4L4)UF;PNTzoVl%Xop*@y%<3dUWb!(Hro|pCKxWdng5Er;YmjrzF#mxx z#cdcQ&p!e9B%Q>qL$ZFegPJjd;mf-Gj5gWNZ_5B9brKj?fLh%|bY)RjL$AM|5VtgZ z*n(umwL{G~LH`qv&iO((-r%R{9s&BQs1(6L->^ZSY!U;NmgROKZ$s1mQk^z?BCWE*u;{<=hY{w^NW9f7Cpu|wKso+aqKkVt-q;YY=6UY zP}>@lxcd)^^tTn_vU%;xpDSD+-9&6H5c8mczM^}vKkB{xqdo8Eiq=mZdo4kMg@IU# zz6HGhiytX*4^CO2skr$?i{8I0j9)RST>u!=U4OLdO;YP#J$E=QUATkg6dqQ9-&fDH ztZ37=@ZL9aJPFn8xvNZ6gQ3d47mPX1dtO{`%s}}LM|rjjkF%6tH<9cbnH$TR!2DQf z!xeN=h0>@2CM-$b+>&*+i9DS(y+S#;gM$Y2TaEp`EcK9$TIaLHwfNb~UxC1PDy%}! znCFugvX3R%8M1{9Rh~&nse9tarT`yi`~hK@4KyFxStFX5+btif3{dpGoY+2OII|zx zVED44Eln!@>cbba7?3Kl=Ku_T9X+!E-gvDKeOZQCSww+e&~C~>GzCCnDPl88`QHO( z732U?)`H}9&5)Q{op`>60zJpvW&-HbYdgs0FWQbFC!6s@!X-Q}(!2(!7d4ON7x}}Y zU9D9@$;LIst;L>x&QJ!{7SvYQUhzwcO`U)8T`bLxX3vQ}^8KS@wa2r^>;9e~`EMph zNS}z2=IU_xf!O4wkXyURC0KCrS3nUlCY;{H2=KHkYs9HyHjm^HUGkudr3{`s`6gHZ zyL!Na|CNkYP8js_S#DZ%Z8E4m#LKPfj;OJP+FB869olt2#E4f1G~bG{U@5WaS3%Bm zFyu%KGl1y;z=)bmdgzvxawk^CtHktNKMhXGg~#nnb29ML0y$T>*8Vi#(6Kc0{>b^4 zrv~gdWWWwCLvP(y%7iB8waF#3V#@rq9H1 z_`KGcuKn?*^bo5!eeD`KyRjeAo?5~%EoowS+6^&Gc@G8@WEhnVaMjGCklpyba#L#< z-U8W}{AsiNP+;5@Lrm*JAA*2>eLZ8j(3<}nl~QzHAQU71i(NgdP}HB>9LcVi%nJsF2w9QznMdye$MK z`ZQGu#T6_-0C}3;2n=rY2ZR!J@R1WlFD!;{n6rC48z_cQtw|{$13ht~A7V$!zsT}h ziU!{K9S{_b`#Y}=V;(7N@}3)=+Fq0bvSd@KvbtHEV7@!NlD2}iq1E#h;Z@+VUlKw6 zYVev{y%qY6&e(i@#D&}@sTR>3nn^e8r+s%~ENDY~#3iO*F7j>1EQ$*+o5+l7O|j_O zP>{dgI&%`^!xQCMs`nkBEy#%%oE~{I*^F1`$H`XjD;6lNE)t6YJAnlNFZ!egJ|heq znxL!U z?aHQtXje05l$nd1#&uvdk23?10(jg)TKNnQbA`@UG9>K0@4l{{IF>5W+lS&6-*`f>=K3GHyObK>-DV96!gko_hT;Mb-i4$$vx?x zS`RCgGrk)gC5REmNM1i$>s1g#6l&-_hFu@xox(fEt!i7CuTI=wm)}_~@1WXF;5I74 z0KU3xyBf|b8EuR=7}+$WbsqS;$z97hnCn4?q{<5Q!@MW`TS-#~0S;|B%CgK0=EuMe zXzoUgFtq#}Nrj+VH$CemNOlpusn0S@-Mx6{pkYnFPE%-8TM&V;J?Y1py8C)a~Nj(34q59l7X3Y zRbXiKLRBCfeiBp#*f%Sxp@A}JAuq=x%L+O9MSvP;Z4~v;Vx|p!&mpOVPMeDNH*PqB$Q zs(=GsKHR{oBvO_B$<34rRv@meyJ4|_Y#YfN#oJOrvpMo7d+>m zkfzZ(jRw9WN~UXnGnM)ahL~vDfHI&6F2(lZ7F-@wk`@#%>R_tSNI$alXk4eKd*|T{ z={&FN%_os^h>Vm}|KUIEy-3P>OARH2E50gPgH4+X;qGbf0dmR?OPLl;I zU^Q}L1Nsgs1wHcVg#Xr{e7*<@5L5n%iwFUU#g`XhD%7t3^aZFanUCWOT14`_lcO1$hGi zlw1aV1I`1il)!!cgYQ7rDFE8lhjeG>?ZgSlQ@uhxok6F!$;!y);~9CcHUz90dFS#{BoM5qzuI z)&Bo{^v!RU{h6tnw%_T`48GN)oUe_+7z5nd8ZfMiU|2zK5b;PyG6;ezF-@_Ps4&N&oX1wCd}V zi6^=XSm82Yg-d^4N^E1xggzd2pcd9a)x?h zCM;^fy4^j|`#w$3m*L>$N^XKWM1WMR=gGm(^&zk+5#QjF`b2ES6UG69JA;PJrl3Is z=-nXh-vEfao@dhaY_pu`S0$0#N`u!U+QV{cjy=rGZTPO`+g)n@D|#Ki5^tqwE2}3? zR)WfIepdY+k?h8@4l?+fJu2XWmy;Is^+msk#k;j)EDR@%N3Vq1zsHC+#4hCfZw@{2 zsrGX2H)L;uJOJOgFR}cs$o0_VFJSPDKz}K7%-spLEazrHSj~X^tDn6aT`*IMn?Ykm z5jW2i65=PwVXkoF&yer!N>ty#2D))d+I4am(@(wZJ8F{V$?Jd|vm}C*UIGvKyr=I? z>2}X^(&@8Vu|+C-?vo_RV-7)oW7loawAwRkXR zqDl^X`X48m7dKc{ValJC`IoSh%`}R<__|Q&?y z{Q;4T%PS+@!unV)7zT>=p1l_I68H=NWI&9OCrGREXW^%dcO4`)5Bg_~j^m~ws*z%G z4Vk|s9y>qfEryiKxruXH1nlflP3lBv7ohYu2QooX=f{m-5Iz{t{P2Nfjg=*w_Vnj* zGipmABG@#-z>OqZz>sRU3&8D7-jlRVAtRde_TAlX(3UXAAC}K%h?eyLclE;UDRn&x zs4J+G5}trJrQc^8DS<>*s*MR>$1Mjlx&XMkFOF>E*+3mTj$~Dw0}kB=)ZIz#|LPzR z0wUV~cZ!b#^Z&-;ZFlB#O9vmjmXc`(P<*K_nrT zuMS3uot>^&n!@%3jy#5O13Nz?2}hBeupM0Z;K*el8o!ZvS{SiN}CS2`bEstd@gMy-!^FyeO zylT`osPe_kt2Er2SWz03j=Q4Q6Oq>i{A!2#@G7!V0~pN+-dniR1`-$=Xi9*3Hp8{+ zTC0y|Pahhk_USc3Bk(r#ACEJK-Cb_KeqqbBeeg>#pl24efMa@T`uPv%9V$4fDZkSY zXB_1wQNoMKZl91k!%@F}KV2kHkND(ytRWxKLYO{LKw>sXde2P2=9}rFV9=HJ8rg8T zLTZ36yk|jP;D}L@rOv^BL$aF3?t|_0W?EvPCmvDy(YSdHBgK(d1Ztm_0MQ8sZhpjo zo)Y3FfB{VUyEGZ5Is5$WpT7ph{?{D^*;Y~cYS0g0SIT->Kx?Fu@|nWBG(df|e@_!f z0HNoFdKg|Yv=aLCh7{10=Bqa#f-i+T!35#z=Wc!skV?NWQp|~Wa*Di|=;U`vdr_{m z)8}%JujwVkRsts75MlEyYvO66_!ok&^-l`EsP>?z7vtaE#YG}g+-CTX{+9l$tLosA z4~U)z->caNS<7V`ZdrVqY}5#Wd0X>o-Ucq%K5(PXnh0G0R-=v^|IS-=?y-bplG>$fXM}+N|Pz;cBvOgenngjg%)gpvyIGv(fWRLa7vuG84 z1v4KAHdQD}YGHnpZ{M6hPhlY+4#$JT}S1(G`4U|s4xMDudFuIwty;Z zbNcTs<(Mao6BgXwXC?loIT*0R9_VWeHp>}!LM?$s#)_6A8h2Eph&K-kR8~&F71`9e zeYVML=j-3BgUg?*J>2K&-RBUzkAa%0qM6=8+yfc*fGL9&FS_gvae~;%o{bc3JfN3B zd`uUs)pmm#kv~dB{?!kj*~KiyA^PQW<=F2sH^(LkgYeZ7%PLVm->f}|HYi1QZoepT6GL>h+ZQnsW3;<1vFtCN^DH5fHlG*5)M z=-60?EpK9Kj}jP2SZFiM6i1)G@0^<8E1uavRPuOYiRLsPWS%&+R%CYLbsMb)wYb#4v>v-u+y(aw zi_z~0Dx39=`3HH|C)aW^1AmbzYp&l%e7qR6s{}#3k>r2DgHi_T1-idecnHuze?iar zg+{_O>a3}OBv7m>paDI^r?Jv}ST+5wq5xw+9X3%9pj{b!ywny0t_EU%%UETuA`F8$l#`GpHeiDNeefj4ex8XAC z+K`>3DjOf{3q0=W80$SgvH#%FfnaxP$xd{AY^C^yEx2kgAVU1~xM;>>myf0Zaf$Kg z`8dGqV7|j$*ttpVH|Ff7Ba4j{%r&gXuiqIPHq#|6k|L>`^bSA&4vkSn;Y79`RBp=$$SXqwmb26@iH_aUHDNMyq zva_cfH-tn*5mA_!5p%>F9vvCi1E9#?myp>(Y-i6F)Na$E;w!-0Iu(LNJMotPcRjno zT>hei_kZ??tJMKn7SE)YkOO2EX1q201kz(F%-ofpuIw0);RmsLJPxV_`!nS7euh;Z z$mVVj-P9gXRi&gp(-%N#?IjXl`#v6o_%1%OF`oIN8j~DsCF)0FWzQN*+d~0f^J_y8 z@F9U*5V{LHg5gXIyG<)9`n;>j-l^F)b;KbD&1Q&pG*Kv25!A5HI3Mw zhR5_92iOnVJ5gyD1zJZHn+0qYEj58(MtW_3CUY5YQTY*PXoDs(i*h9~j#g;EP>Z2L zGa?ajVo<@-YW9_z>&;m=R}kA+&Ab_%fl9_OWpo|IeXO2tY&Yg2nMzAO>)#DpI^&Id z>ma9M7EA!?^p10yT7FJAfok16fwv&o&`|0G3_j`9o(!Q(siM!}Mg#ReV#`7A?;o;q zI=y$g4|KpJpNk{_P!tQsdE8_4LJj+|%`JuM+57rXlXPo?C@QzrHh3bzV2W)H`_q7} z9F-Ww-KKUXZ{=amWIIZ`RK>N)x}MPr_gmF*nmH(p0qDdesP}6#eX#|UF<4+^u)KZD zS4t98ih}S41AmRzF=DL8LeZGQ*nuEGqH0*R^>nh2mX==W+O*a+p?edcF`7u}Jd$mb z#z@icEjTalvw#eeuBdvXCzxBrk-Y9*Kn_RAHEkE}!1X6x*gikO!%dg(Y?v(fC7xb- zkswq+_aZ}cHA0mGioE5X`zIRKKTI9{iB~C7EsTUMz6*TNAq75zH!&2c?%Z0iKS^6; zKK??Lf7aqevf+RzyKwP@{Dd1P*V%D%0lA_#>g;Scwfli=wszT+3%us~6fMFZ^Hi-` z-J8_8mCfIySp=j4QhoHBIiV^iI_m};c!etYGx(2?{%yF^-q0L8f3riB$%Gd=C&N_;hS4EIe~C4^#kPP--m zplSi}?h_gG2PgC|eUNCQfS9{hg9liTU)rI$AluOlaUVw&pXU%~QNB2k$0jlU0u9E7 z90#`KGa2(I1KRS{v5`|3@nYlUE;%x1*?#9gA z)-4{BzKe7|wR-s6^1*1yjxC!5Z*IoQM`rod$cw%w-}YNHXxA z0Ihuulx;m8DEXOlSG_sv$hCG|_@{e_r;%l0<4EeP4?FFmk^xJ$lKDLkV@)*S5w&j3 z^N(89x6uy?Zh}^Odh+N9$pJ0QUAzCk4ux1LxxwG}2trS$vP+c!1SOZKEcqaL8 zSM=A|aPF!y4$948f95@!4K5DgTEDXh(paNzFx# zCSVXnrHO^gf(WCvR8}|;YGMTAB;>U$^jNWo>)^W?;ZoD5AiDt2ZG0P}!|H7xGV+&O z)2eA1z;MW#_??=7%`j15-HDG^EgCcc`91v+*ehlKW8uEAHqY;mMNF%Px#Tk5*qt;D zL}36OuMfiXF3MJ+dZSRS*GcP0k)`p$@*AQ=lhy$f{fv4bq`JO>aqgYh1!rXdB7BA( zJ}$L~QR!eugt){dvSs_+ds}{ zXHPohM&&KAkfNJKSb-sEX8Bjt9>o2B-L>6l!~Z(`BG~^0#8)A$MNh5Q?Ay zvGMkIMb!_MZZY3t4l;nRrs`^E{ainAQ5iL8&dO#WWLSonRq|{oN6u_D(C8y3t#sN- zevsHV!v2vO*9!ZZ`0`P+AwZ}H6kL8i+B4Tss)dc-8os%y9b@Oqf2!ex69@gZgb+YI3N;tb=0l!EoyLb6eV{ITvsNZtuck>8G9!AhTFQylca%RxIuugh>JB$ChBGk zIypUvKG-*rtA0Pf8n{@_X;Ca{Ge+krQdXR%3(O7ZKRwzOLV`y4$Pr9TPYHmgmkBYf zN={o>wLR2+_L=S0ykk%aw_y_2ejuap%_c_wb_yif9KZ7ynZnhVAnAc{f$@<Udh^6Azas_ne*` zj^G&jLCb|pT?Z;GjuDQu07tz9TEXo+PwT?OfN&A>_1|DU7}go4;@U;XdTIN^>$+b4j9jiz zXeCh##&!M{)Isjw+?v$dopV+6&>g3DXV%`aW~bQQ=fV)x(e}1b?Fmn^+E!mRbNLaE zH8rPmYqpu?!{6UqR4+z8Ouw;*Ut7n|N9Bo-;g;2-fIW~GJ^5uJl@l-Dko9Ew5n~|^ zW(ZbyT(6|9w(T&fSz)7nlD6yep0bhI)N=}VvHNsNVqO{_#{H!$NeebC77=)$hJo@- z_D1q@xHkXlu`5juTa?aT?Hi!X~hnJ^n8EjxPpT~ydS$Yn+yzF$I64N_&IK_X^LF(7= zj`Bx)GFZ4SBP9pmDzgGId(S=W!`xp_jiwuvqfX zNqlAMdXUM=0wyf?UjR3<+m4#ftQ~M7+A_CeMPCOnBXj(ohqb6yQXg%n^Kt#FF%};-JDo-AgvJ zPELoqR<5-UuCN}ago&c3(=9EWi*CYBJ5&Y81V4#K2T4>|5?+R2B{>|RG|Vr}(vjLd zN#2Mykl%8&8D8v(PF!%{JOSDX76f!zbcMNSW)}wc3-=`>mNT6?ZT&0w{wC)}^ zt6-d(Ym8uu$QZGlzdC~)7zr0z_cGu5EGi6!acLnj$=s>faNv%2)CFUwKsK;ZHk``Y3X)ENA=vl`;bY?Jbp<3$mknRJ%e`FD<qQc+5aGb1C@X3GHFtgFtl0dvbUD zJU59}tzq#l9FrTzo}%lHGPMOX#-Dik?VIN(0j-9ouA}v8M8Ziv5S8jb`u&bA^ZKu&RyiW5WF}M?- zy`ni3SWF6R82kE!+AYWfw~F^hSKwune7fP$A-#8_(@_Mf3#D2>df})>pltC#uW-5M z@xu$y(JwH_;M#M>#ZmBq4{UK4Sj@`vqdp#5emXC2LN$f-&ZDR%0dlZIh`g{R<~e0i zVPSLHvzGFjXC`JTQ8OqEXnOtgb+zXUaOch-(NTaD@q;_YGPG?9&{)l;DA8s)Z z-AY~WsHW@~!8B>ALGlLBJ~D$|5qj%f%uV8Eo3t$wlBToIngl@4 zi0G&%Zas1=0}Ii^?K6i%+gWK@@t|&SIz(Lah6o@4^INM1%J}i;BQHErIq!wh512k` z5Z_Kxr47L7$+!pm{@}R1)R(B73wob{+e9;+;shi-+b#$eOtIl-x7kOA4#y-a8tXnyFfn)P##m zV`pTDDnC&=Ec5lEyDxyr`3AHdk%T>mnxD3bd1S+~@?X51kptOU)7LpjL zxX$KR`)2pV-NM9s7Z#G^I8`oL=o(l6TJh`IvFO(fOxm8vWVpL?+)4GbswN`Z4Coyc z!CTq3F1w9AC96|#F5b!!PfOA(g$Cy9?MA8Y-lyJHQdyDh?z)L*BbLuvdV9M2Tue4c z>18nZ@W>2ZcE-40XQZ038k5u0X>V7zNo9|Q+|pSIE?5k}a@&Hj_)GXTn=_QwxZ z-+jX@c40nt;a%_Zd204FQkOe5CBsk)@?u01xpawst<@I&swM$eZJnz+R{eypCSRne z%O1Gbx0LO}hIR}#RJCQ>th^r>7zo`1JJ|oiLQg67;}Gp*ah<+vtQ<~^73)JW`nVHT zu38m*0U$dsmP3ggWY`5B`Y7wEX*NDedhc-Xl3+qFn=%L_q0+H48I6g>j6&CldE30; zw+f0z#wS%t7h^2-;(ZjV21m|{ZV1pNHiM#kAzqc}d1_7VFU5i%Fz+GhVjK@SL*EtB zvxfMxQ>XE#8qX1F&XZ+<8&_~b=CAg@b--I&7PVw0IcpWxEoW>}&ZsA%OdiPOjd1R? zW#r~HZ`ZESGHcqdd9pM=x7fBrs!A_Oh!f(D6%sn-?CGd2T7;Y|P!-8Lm}+Vf(Wr=O zF8AsIZIE6I(2?8fD|$(P8QqDIZfV-9zjKq3)`|~^OI>IX3=pWbN1;l&-p6f$o6Dg> zt@pWCL`aAR(hn{w2!UA}+8D&V<;Pg&5o2%n0v*)^-L^KW{_dVTOaLc8 zq(`yEx?YJtJDQH^o*tmL}1}Z1;~C>9&J?bC0wS?9)R_rb|w19*STN4zD1&|;G^IuN5c4% z00}YW3%F3vdtzAof%FZJNk4PIiXtq(X;iuhY_PKP^19=$QQ60Kni{R;9l*iNn|bau)rzeKLJh9BAM!FM-@K6Y}~;Rg#`$zXTy+qEAM zM?aNuHb~Yu(k=S1>pj4(0%LPyrw&fXoSvy$b|?zPeIGPj0)}tA++rXb`${*it@Hlx zqPUKpgD0mq#!7D5|-sOPDJt&W=25!y`>DdpGK!#&Wt#0z7p6aB-&Y@ zQU)+3NN0^?L{HEIAeI{uMJ$MMkmM9Ewu!Ba6Hs-l zJB|X#1>Y}CL>H=dP$B2JMf7o!tj?{>vOV8XFnQhRg(X>BA~&5zA#uC)aaT%{D#|jt zG)7vWK+0bjqQf z!W0j0Bx~85R=-%dydDcxea1UCyt7Zi%N7w_3hbRdy0GfAM^ht=`HKelK_C9>p;BdR}Jdi6Llu^ zja-qkTtuP{-WFZ}dFk=hl%WTa_Q5zEZGlo$`a_fm0s$;&duhbiTWDMAC3` zSdp~Th01zZ{W(qRX?&dHuJ5f|z; zM+^eh$w*Ho90J(Qi+7NhefVPj!Mtg2inGqkRj{Yrqs6Sxy^$A@H$z#ig227v<7 z^?#v&P^nR13%$1JqlqF)#Y4CFd0gs$`a2gf zKWYL=QB=-%K%mf+N-qBfgy-$zgaXcX*Gvs)3&&VE7Rx35%P@E`CVvKX6LDr|dioKt zef!xe>!U`iDKyiL@p`b;-1i}OTDSJ{)twKH-kl zAb94a*gV3RH4G@$X>nKjsjP7lc{onN+tk9J!EvY-m##7}{pL+OH<>;Oxb<@7c=FGX zjA@#K-3yne#)gHHlBXk<8{h!RK2$snMU`70OH{}{Fz)HwA@ycDVziJNIIugtIQdO| zCG9}LGoX3k9LGBpPpP_H_?G?Ic zenh!*E?)ik_%|;N0;xYQ|B3#&$85z>|9nUqZM4|7E#Zo1Ryi-YU&_JuS^VMHjV3)K zuH89y%1<^GXPRdtqYP4CrK&^A9IFA`4^j}Hd*VFgi(2>p#F6FZvR97<8&-GHXGz>2n+3mD&s9LT?hir=Eh17Q0vV3#=XmWglP z@}Jj1e5;E9$3N5_&&bqSes58PpJJ#f+|eU31Hjd(9Ww{3SXW;r>$1{wbrZC0JDnm& zqM0(JWg#&t=Ll>N2vOAMd&c!&P_A4?FHPm`$;x1e63YWfoGFkDyz*GXvks*Ob1u%j zgE((KAOJ>4pK43s^# z(N53a5)pa~gefxAIiqqXeh)O0h~e$Cg>PuxLeKh$&pH0xf*5zif5aUDh;wZ#dh~ig z9$LI*!+=iA07gcY*jH8pT6a%S6lS~8{b%qT(k87W6g<}f*9c{(hew*I?PM7dd3z{L zfaW~}NNGN>Z0&9meOiBBE5B~IRKfd}MJSEJ3;Sr{9Y;cbPUMGJC>GN=o=IaDqwzJE0R|A& zzwHfPTlkjB=yseAYpUTXq9Ylio4IFZRGY>$z0S?u*zQe6nYlJMpRUE4T6FB+TOX1~ z=zzgq#_U}Qmh3xH^g&2Od zW7K>``21U^m7c+Mm#PH8$MHL9Q*8%HE*<&7?*V$C3R1$&0YfilzK`EdkHI`PV&*zS zI^5#g3RIAp@MOOyxo~?aC-diucKTwAT5LT$ELN56SDL{IwvLq!>e?nAhjZ6EGOEsS z6ehGS9$V99on66rUMxi}hu@+k!(ZATPtM31?~IS*G-Eq!mTl6v+*5gj0Q!{2vbTro z&HPLWo~IXL3*IGLbmQ}|JDLT=@kaqM_K{6zTFCxF5;_sw4X`g}bLjRErKWQE-fpRC zeZ`@9QBjI|l~z~E!O(XD(DWs|Xnw$;tvW9|n;DI?aceUu(_r&M5Isn+o@5M12Jm6vycC`T8~b(qcI zYl#5-PT8{Peq)_hG{{JBpzYINt@s~VXwE=i7*ur58J#?>?w;JC00&LxY%9>-s;S(X z9htwAR&i-Er+j;f=e`3v19j#{4P_6tTpvn~(YP*b3b>*M>96hcPsEaP7E=0Yi^gNd z<82p03Fo)xob``T#sI1fYBKfUld&m3~X--RtnleX)8cq?e&*MlXg=nQwx=w4OK ze$nD5g)Z6$AG-TqA9nzkd`D?Upc|sVqThZvgXL7jQZg@cUCbJl0|79CQsk&{Q6>P6 zSQE}Fc-e=&dFf(DPFlaLtfi~>cbqbY3z4j889TiGTt(*S%)3Oqs5|=54!w@EzTL3M zV@#hMk>x#a=uu_WlI?QIq`Wk2sF4AIE1()7jXkk>vf+GAL8xp~ug!Q8_?ackT<)zK%%8j3t*Lp2n!R|dvI(0B)FmeS0T3{wqT&Xjc%AOkC z?H=!pZP`+`TCK$2GC8($jIqwZ(v>xGj8&LjaQ4-VKVy8Q0nMP6Dk{;12JS7I43!hz zJW1E=1%$7b*N=&wuS577P1?tN2CHWGfRRF*h$81A-6_vul@<*x?_~OvUUO$gd%9UM zbs7tSJalu&d&Un2Cq}f%{faL2U4!Leu(tq^-wVOErx@$XPxK@IG8QV`^w7e=VfV_B z`octv6b?yRi}2^ zPd%fILWGz(8LoFhNh$6G`qE|je-vjdJ>)9cV0$wC#LGVXCc1s{TJrF-*#4VsCuc*R z@h1pu8QF(9m2KSyM;~@}bePO~aHfZv&;wy*tfJv~t(Tm`A*NNxA;AIKjVwQ>;1{JD zuXAU6hNr#nrtXm&>Bv8Gu`}b>`3j_kg&-Scr{N?_Vu}_T8YhLuDrR0Z-$XwmGf<^_ z2w+2@nY^->R^#z8UG}t}nn3RDvz!1jcDncR1Lrw~fhG0!&TYE})84+m=tyt2$5tw; zS2LEw>pD8z6GMUsH&hasOq+F-?p!r7wm5zilm}DJ43~CmRVQyRZa6JilbN|Utz94W z8mD;jx_Ey`^71*t!$Hxlxmy(;0<-3jqZcmtNe?{@jH$d4*OtEteIFotG%(e!Jj-_A zKrA78-9uJ#Lcc|%g&ACj-{(F6;(K%c3T|bD5I1Xk?`1!$cZ>yH^PVJYc>9$}6Z*}zpNsa)j#0Z$Dgo^BU39PC zY$1pGc>Ll)Zct=*bDiFOrgps`6$UiboN>RUja1yTTSqIR#<2;*7U95?Mk0b4;gBm{ zw%XQN;fe;vAvdNvK4!1?=J`jP>{K9V3XNt!(>8_N$;>`k-fy+(0hI!)uzI%;rX~$G z=z}OskqB5b+C|<#^~FFzxp8Lb0uF_pt3~<40^qUvk)g{JnVH)@V~}Yn2Df z%Wh0)j<4@Y)~6*eLkwwUdnQqGbB4#;@}{%gBxsriPhXQv#faH@yl#F*(_@Kx*G7OW zegqmPZBuC}ty||H&K8Nfk57|Hkav>aYZ1}FS%8kBeLz^8BP~VN&F3D149~czW8_7CFwBN#Kx1B7GzmZBU<%i@K>2f*3R<-K zW_v6n@{lpEwa!QDHng2Gw60{V(sq)pywvHKXprZa!W10om_>7&MWrEVxw*$}vhT-N zOorF8l@Er30Z*=lfyGe_1bP@FrI%_iL2J4ClH$hojHAGJ+#t#^CqX$CWkT+ilK$^A z;o-eEv4!^U+lvHl$|kex7-xZ1s8K2(07;tcDZ&6K2_=E(%g9?Jqow$EWh}XnwavZ-};EGqhxsrj{?rpY{DkY<86X#lR#Wu z6awnu##@VDdT(nR-<{ma8Cy9tJUem_3L${7kc+-j4w_s(kUbqfpc;>)XA@ zRWLDUX#%FGbaqeeO3w(V)pr$(RTn@=^)16>JLhEXq_m*$OgG}8_Za2z{e}mLO*;p< zk5&@&O1(&{u*BdppRK;7_*o`AZ(H6<)>-@T=J@c5f$O^aq8Jw+TdSM3-sj$3k+D{E zXSkFUPSJ!G@e&PBY-0Cpaax1sHqbQyT(#S^zzuYQFVLD(m;F6Z-{&1OkdtcKLts;B zqJ=2T?L^Nij~Mr+`i)BFdvkU75n)pdhhrNl9+XKAb)B|@!frW%Qhy*fgE?X%VrR@y z1%3&Sg$J7pso!_I%d6wRo8?~&osz5VAp+3CaDFHRWUxU|zs^`S8|Q}AJLv@(pSq)b z&vXx$3GpQ8W{*RxSTHH06MC4Frp?&X`A99^izqi}&dL#U_ve6U$G5TORGYu-X=dK6 zzX^NV+9d<5FFZ(*V&i+UNcT{gu-T;>%aYc+`UYGIC80@NZ-)1RSa8aw<*8|`H52S;$ zp(8EI0Xdq}YNq((8*H}9tP%h=WQ$#{Zdm6??_RrVX!JGfyHx! z2f?>x@N_{lIe)MoehF4V%4@5yTaoSCHGz*}2i~~DBtk5}Z`>t^9BP`kTshpNsPiD& zErg(TDiHlbz~sW_Y|Z}+%4=8ywtKzHybW=d0f*Q)_N^c&mJhf*YuF6=3Mp6u3Y6!_ z4YJ?BwV=BE4|3-}T3!BavlVc>GXeAH^2TWWOclRN2`ave;#F3g2itc>>xUiOB9RpR z>S2s!PV~WTNPx|1sU{tFZT8HGZhK1eG}>^yEeWdy5}SQlA%qUC8ZEd7SiKA>55b!8 zHVTMGu0-t}f?qou04fM0wz1iWP-9^b!1BKA7xo{NFXzH7ps+*)Hub0$p#kwiUO8M* z%mGdB2w=Me5=U+9qtYb){~Gvo5-5)u$fcp0zzc3eij-m(WWPb~ZAZv2$o$RdHPp$~ zvM|A1wCrC*7=BA2ijNP8w?9ok*762%X4lClMF0!pucGC*Cf)OTu*_=jao4aym8hpQ zMZ_=N##jK_zc?rd|1{DsDd@z(_op%^G9OP2g1vq>L9Y~qMqt{29K1ORxMsco(`oZN z+=86_;iEh$?xSnI>EqleI1JT{Tt-h?fe4^u;^kkV6N!Hm_5Uw=QuY@f@V6?N{l%iI zCxHp7#XkJDFhA5k1QgFj+s;_SFTm&kBh-leuQWodzA;QY#tUDb2)aHhp*c=D1T4ut zHQ`B8HJUre5bf@=ZKM0K)r6~%RqLs@q0N<90}iDjtB=3=$Gi@iLMq=!kET0qD3V}Xv z7A?3$1uji{5t|NlN+3O0I=@5!BD;}DK(Q9tf(}V%Q*dF$J4DROC~Xh`X`y*_hyXS1 z1um9n8wuo$YOj#7BOee7j{zeK5X-0X{meJ)4~QENWLJEI_G}BGO34q1V|p)1{M{cA z)i$<~AwMPJ!pJ%3K3mV84Za{il~eBnc``eL(L+SHgXq5DJ5oWh5YLl?tmR^~t`R!P2VSnTz;qGi_yMnj794K{TjhVWgmc{4y z;9LFb0(`DLM42g7pIKLxsG3vJTM=AIJq@=vGJP3^842E;$4&;ozPq;N>uBhXn3e}y zJad-1*EbNfP*cq)$hbBiY4LJRqdSLdb7YLHOZ3aZQQ2hSweUex%zL0f+Ct%7Wnqt( zg$?x<6jTTf=|jIIo|_ZwO4a0|nJFota5Z0I@UYu3%xB>*MzsL473hKz=2IzqT79(tX8y#$ND4HaO`X}NT`e*^M3C&xA z2w?u{x_GH%ADgKu=h@R?Dy|8PQ;%9vp8i$(?>m)JwSK(rT6)Zz$OpHVk?nq9S5oTA zdnvNMJpg@HJJ|SB>2Tqo;|Ij*!Yq{MOIWlMw>am?ijoGMC9Ow8g$lZdsH|l}=i-hN zL%KS;hP~&T1C(o)_P+gqC@@aj@8=`bWb1p8ZSJwy@wu5wb{`OWod$32&HO+xP^;65 z-}=^RjBWRB#=K0`w7u5C)5XVcL?PhxZ~KxxCo!cY#uFV+ZVNf*oZ=;ern0;s{~UHN zg`8$L-pL_ld6=bidMxa(PcF_^FEyDasftK1oDcB>MO6(1J+<=lwx!-}NxA2;(~DjA zC#+~bI|$F4Dcyns)9aq>_ud}&L#grRdd6Kv%D8QZZt@nEH2s=`ZHuPwo+;(SC3%hK z&XMQniQeXGy+}b0A;e~|jxIh0dGAWps+!aj?(yr}2;bk-QTOap)Ro=}Pz8^%yfID) zvjQwr+KIRj_swNBE6qn=Ag9sXr#-hGj-xhFEDSa4g9Y*YYTegP6H}(V7pyB2R)zVl zje`xo6BYX`q~x0~ZL-wXDn2))i3F&cBZuMIP-{B@#OFOm};V#<9<>KNvgA+U>>)P%Xe(w zsabP?{7@srwXZ^wbA|4wwVapShLIh&sgLo{ue6lyQcghQ;WWKUfC-fS7J_HV)KuNE zQzfm*mgU404z)d2oR=4IYjs5=eL&0O;6+AA1s~fOQ%dx6Ms@-14AnLH$t-S;{CLWb z85Zxx)rZM_Z!7jydK<%gJFOo%t2B5OnV4XDA!b`x_{_+QxZ=c4_q(I|hqzn)GTO~V zQOTGXjz&a{|kxI2Fdw6P_9yh_qxN(1<8YB0@m6q!g&g zW>~^5LCHhNr;(@kOPF!N#FXSQ$fhJ-1J3)!J zDZ%WI8Y`Zk!!@tHdPbYe*-tuems@aklph@lpbSUE@HwlEsoX+*6_Zh5#5Y7t`*~n# z(Q+)^o!OqhlJ5@Cg7Z$DeD{LNB$Mh5d<mhOVuomjH_cb6hq-c(iiU zWoE%UGF1j3?J5DdaZ3>(cXfk?FdyvzNpvWN*O%@&lnGc|@W95s01b7=);^_FzP>`I#zARg;XZNIMYtxyH zm#h8pN4($@c{hkDRyDE%k8$y3ZT`fJ&PczN18XvZDfKuWu{L+Nh~-D|bc9m$LX099 z`Aw8|-M_f17z1-UJ;((D|E4rOzhk>7Rd~wvD34#LUepg*Y-U* zvyZEfVv;Pb!Ms?TOTuhQz_$tt*ac?c=sGd#{0xY}_b>)-=b_M(Pz>{P9)JbpFK)yh z5HGF8RJrR*hawNQ;bzCzR1pjNcgINbsf@zmWra6KqgM>0BrA`{H$iu)cnrqPp$xjBlxU1uY+JYo`9fEBw}1QG#+MC&B6 zeytwXnbSvo3Z?T1awD`P8qrcA#k?^3L(7*Kf`*J_Fm2=YDgxG3oOv)Pa=C}PGSaf| z^Hec`R}J!1P|CRy*77Ph^Qi%1;r=mO>a6~xlB3MX<3&z;Gr8CP+P*2`j^(A1q;LWz zQ|BSP3|}OB(t4Y0YDT}l!Es52Zu;~TaV{Iw6=ZuyuDfMX6lsC`%u@cR(*e^C(CE3f zNPQ=FLRAj1J;1jyg^GY5V(x~lH4fQvVN0WysoQV?ItaJftBIEc#zR9$6@_^NRc01G z278lkCnH-5<1jreIrU62c@UK_d~4mx7TIJQdOHf7O){uLsO$?q)xf?mL>?#qh7s@);LJN8d|lE)*N+CH(j3k zIhMu#GU(|5x5;oU>$rDxQNC{C`mP*9Zq7dcCCMIQ%}a#XW3jzAQ}5R07qAA-x|5ah z`@TESwobH>qTGj%nlS+DDP}!DHqf&JRkCC8{Vy)oRZROOuW)bdor+;^sPQ28gvDeF zZA@MSo5%T4V~)_jSGc6X+2&R4TbJdOv~NwIz%Nz-)9vflW$UzqD5=CU!++X6V)45B zaaHzxLADf2_w#)`cZe6#ZgbG)>rL0bef6^na?>Ws;Q})k|Q+^ zLf2x$J%T4Prf2mXS*d{kQLb#b&NPd>FkBHO>>Qe~X*)pPb?pb<%TsD)Je`?-2e{#> z?@9fEjWWP3qQ({0h*-6$5>Jm61zViznX8?Kr;R^j4dbN7f&GzuUuMT9hBYm=u@7Bt z!BH+PvyeWbHRn7!ZDJIa(hqlNS^hrVM&K%)Uepd@|AM08=MAVv?_<&2*HJ z!^M6z%KEHkgiW%Dibgqg|eUPAhSWZ?8RizwtC#_SXQF6V{`g8wnIM^Brw}jM^j{P^@A+H}{)W4Y;$XV#%CG=_i3lF0YRvHE6n{pI#3PsqJ_7|5M*@|v z58-nxV}01_X#VY(8%mB`7w$hyNQ^ThVIsJ(>?mfNUzc?JWpZ75U}x|6nmA5`Bq7{b zYzcrBXJm5vD1tnQypmN$!e8|c{lXxEGNEr8b&ASUktMz#sh~_IqzSWw%o+XSbYl|~ z$xYUeEIjk<{d#!EE%`_-&AYMx21x;Cr3VR+D%Hc*$$3XY7K&-aQuwkGcz=^c{9VtC zTW)!IS$(p`EYFMWvtr5h7L6sMBYqu8=k#_S3Swj~-NVNgl)uiK2q?;X5X@Dp!DV;G zs<_HL&Yg~9TYC}HltMuHkmXBe+W~K5QzW2n@qrHwLIy>`l5trWthMfh1nODE21wI! z- z+WN*EC`ZMyp}HZCkQ^`W4Vg^Eq`Iz|+Ue;Y>_gG96TDVSHZMG!(OGu;Vjf2a5f*WT zF%_XONYu5JIElgH??%5t99YSa=y2_)Aca8@dPoOe2R(b+TcRfWR9u0bibTP6e1C8* zZ%lhlO(GGXKY-`niR3x_9$xa&-}0w}LFG5?{lM>50~epZLBw*Y-w=du;Np;q(}t6b zz{CEtb;zG}I&mDHt{R44?)=~K-hN4&i^l!RbO5=csv+Y5{3ItXGxHw9FE9-)Vp#J!&gjG2y(*i?Ya0z`;xBLy(fw}274z0Xr~D1M%DXld+T zk!^z0;S+;K&1RTNZlRak1t>cT4o^Xr4ps4*D$p^6_%n&wr&2{QNs{ysFqp3MKkau<4EvR5fDvI6@h*8 zuBx=d?R%~!mD%jsjSpLg$W6G{FN*@qMXuj(|B;+WjSY#)}PtWnQY zk!r3$J~IJQ&{iF6(R>Nec1M5jwyeFOaoYwSX(?;J+j$nJ++0vemzqx|Y=%Z2j+3Bg z#-PTr0}D&fqT#U}`{y@^W`8bAHDa<2nPiEccr7%2)E=!sK=3|#LOR94pgHZnG7e6O2w7`Gj|TeWkRR7@<3B*_Pf8xUKmD&gG0Hs+irQI3%#Py)OOA)Dxj!OA0AYJoDu! zki%Q<=S(BRb)nv4Ts0Rm-tT70;*(>gAOozlM2&uj?b}(@N&I029dC>{4yr7A_I2F& zWwrA8l@~vx-Eb1?*|PZ9TWo}cIUI29{C57sje2uGRmh$fluuYKx?ItYH|2YP;6tTM zfOjN1oZt4T>KhlNApt~EpX0T@b#xI2L`8woy8{7pT6Fw^GWj4-8E?_lRK~+~$Zkk* zG)kF_kvJp1g+Sw=syBk#{Tf=hoI@yhd`My3GMux2yJI^D77oU1$j8V6b-ZrW>=4HOcG1_y{ z=)B?%9|Gmfzefe_d}4Tc?|Ac;^VaUhhe=vol4Ae>0oUJTsNb|NTW^oN?z;MmUE?{ORVI!V4Z)bq+leW1Y)W((WMct zLwxlH5!kAv`0`GIWs>|r<;X4kjsNH4K}vq$squNZy;HdTJ&6xQb~VUmT&mDJ%!0aTt+`|1sC!OCs6{!f9YxYl#hnz&%HQqUG?*LMb)pzI^>0klAq_(tX zPmR~c9gmkG8m-1Of=fNsncfZ^Ga7}r1qzljEj53zv%V)v-M>G@9w C+pQ1) literal 0 HcmV?d00001 From 096e8392ae1fea2c6b5aeb71bd3526a855f294d3 Mon Sep 17 00:00:00 2001 From: Lily Hou <20214566+lilyhou@users.noreply.github.com> Date: Mon, 11 May 2020 10:32:53 -0700 Subject: [PATCH 074/177] Update kiosk-shelllauncher.md Updated shell launcher v2 supported OS versions to include version 1809 and linked to the KB update --- windows/configuration/kiosk-shelllauncher.md | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index 327042ee5c..9b5bcb8a34 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -20,10 +20,7 @@ ms.topic: article **Applies to** - Windows 10 Ent, Edu ->[!WARNING] ->Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. - -Using Shell Launcher, you can configure a device that runs an application as the user interface, replacing the default shell (explorer.exe). In **Shell Launcher v1**, available in Windows 10, version 1809 and earlier, you can only specify a Windows desktop application as the replacement shell. In **Shell Launcher v2**, available in the next feature update to Windows 10, you can also specify a UWP app as the replacement shell. +Using Shell Launcher, you can configure a device that runs an application as the user interface, replacing the default shell (explorer.exe). In **Shell Launcher v1**, available in Windows 10, you can only specify a Windows desktop application as the replacement shell. In **Shell Launcher v2**, available in Windows 10, version 1809 and above, you can also specify a UWP app as the replacement shell. To use **Shell Launcher v2** in version 1809, you need to install the [KB4551853](https://support.microsoft.com/en-us/help/4551853) update. >[!NOTE] >Shell Launcher controls which application the user sees as the shell after sign-in. It does not prevent the user from accessing other desktop applications and system components. From 22a9582e8c3b4415f2b7ed55c4453d3c41cfe5be Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 11 May 2020 11:04:16 -0700 Subject: [PATCH 075/177] Monday's edits to Release notes. Added in Monday's changes to VB release notes. --- devices/hololens/hololens-release-notes.md | 46 +++++++++++----------- 1 file changed, 22 insertions(+), 24 deletions(-) diff --git a/devices/hololens/hololens-release-notes.md b/devices/hololens/hololens-release-notes.md index 5320fe943d..e5dbc0fbb8 100644 --- a/devices/hololens/hololens-release-notes.md +++ b/devices/hololens/hololens-release-notes.md @@ -29,21 +29,22 @@ appliesto: ### Windows Holographic May 2020 Update Build - 19041.1103 -**Release Summary** -- Pre-configure and seamlessly set up new devices for production, with Windows AutoPilot -- Dark App Mode for apps that support both dark and light modes, improving the viewing experience -- Support for FIDO2 Security Keys to enable fast and secure authentication for shared devices -- Seamlessly apply a provisioning package from a USB drive to your HoloLens -- Enroll HoloLens with your Mobile Device Management system using a provisioning package -- Support for additional system voice commands to control HoloLens, hands-free -- Hand Tracking improvements make buttons and 2D slate interactions more accurate -- Check policies and apps that have been pushed to HoloLens in the Settings app -- Expanded USB Ethernet enables support for 5G/LTE dongles -- … And performance and reliability improvements across the product +| Feature | Description | +|--------------------------------------------------|-------------------------------------------------------------------------------------------------------------------| +| Windows Autopilot | Pre-configure and seamlessly set up new devices for production, with Windows AutoPilot | +| FIDO 2 support | Support for FIDO2 Security Keys to enable fast and secure authentication for shared devices | +| Improved provisioning | Seamlessly apply a provisioning package from a USB drive to your HoloLens | +| Application install status | Check install status for apps have been pushed to HoloLens 2 via MDM, in the Settings app | +| Configuration Service Providers (CSPs) | Added new Configuration Service Providers (CSPs) enhancing admin control capabilities. | +| USB 5G/LTE tethering | Expanded USB Ethernet capability enables support for 5G/LTE dongles | +| Dark App Mode | Dark App Mode for apps that support both dark and light modes, improving the viewing experience | +| Voice Commands | Support for additional system voice commands to control HoloLens, hands-free | +| Hand Tracking improvements | Hand Tracking improvements make buttons and 2D slate interactions more accurate | +| Performance and reliability | Various system performance and reliability improvements across the platform | -#### Autopilot +#### Support for Windows Autopilot -Autopilot lets the device sales channel pre-enroll HoloLens into your Intune tenant. When devices arrive, they’re ready to self-deploy as shared devices under your tenant. To take advantage of self-deployment, devices will need to connect to a network during the first screen in setup using either a USB-C to ethernet dongle or USB-C to LTE dongle. +Windows Autopilot for HoloLens 2 lets the device sales channel pre-enroll HoloLens into your Intune tenant. When devices arrive, they’re ready to self-deploy as shared devices under your tenant. To take advantage of self-deployment, devices will need to connect to a network during the first screen in setup using either a USB-C to ethernet dongle or USB-C to LTE dongle. When a user starts the Autopilot self-deploying process, the process completes the following steps: @@ -53,11 +54,11 @@ When a user starts the Autopilot self-deploying process, the process completes t 1. Provision the device. 1. Present the sign-in screen to the user. -**Contact your TSP to begin using AutoPilot now - devices will ship with AutoPilot enabled around June.** +Learn more from the [Windows Autopilot for HoloLens 2 evaluation guide](https://docs.microsoft.com/hololens/hololens2-autopilot). -You can also test AutoPilot or learn more from the [Windows Autopilot for HoloLens 2 evaluation guide](https://docs.microsoft.com/hololens/hololens2-autopilot). +**Contact your Account Manager to join the AutoPilot preview now. Autopilot-ready devices will begin shipping around June.** -#### FIDO 2 +#### FIDO2 Security Key support Many of you share a HoloLens device with lots of people in a work or school environment. Whether devices are shared between students in a classroom or they're checked out from a device locker, it's important to be able to change users quickly and easily without typing long usernames and passwords. @@ -78,14 +79,12 @@ Provisioning packages let you set HoloLens configuration through a config file r #### MDM Policies -More information in settings on HoloLens about the policy pushed to the device. -Improved diagnostics for line of business app installation.  +MDM app deployment and management for Line of Business (LOB) apps is critical for our customers. Admins and users need to be able to view app install status, for auditing and diagnosis purposes. In this release we are adding more details in **Settings > Accounts > Access work or school > Click on your account > Info.** -Additional CSPs and Policies +#### Additional CSPs and Policies -A [configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/configuration-service-provider-reference?redirectedfrom=MSDN) is an interface to read, set, modify, or delete configuration settings on a device. In this release, we are adding support for more policies, increasing the control administrators have over deployed HoloLens devices. For the list of CSPs supported by HoloLens, visit this [link](https://docs.microsoft.com/windows/client-management/mdm/networkqospolicy-csp). +A [configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/configuration-service-provider-reference?redirectedfrom=MSDN) is an interface to read, set, modify, or delete configuration settings on a device. In this release, we are adding support for more policies, increasing the control administrators have over deployed HoloLens devices. For the list of CSPs supported by HoloLens, visit this [link](https://docs.microsoft.com/windows/client-management/mdm/networkqospolicy-csp). New in this release: -New this release: **Policy CSP** The Policy configuration service provider enables the enterprise to configure policies on Windows devices. In this release, we are adding new policies for HoloLens, listed below. You can learn more about supported policies [here](https://docs.microsoft.com/windows/client-management/mdm/policies-supported-by-hololens2). @@ -150,6 +149,7 @@ The updated app integrates with Microsoft 365, currently in English (United Stat #### Quality improvements & fixes Improvements and Fixes also in the update: +- The update introduces an active display calibration system. This improves the stability and alignment of holograms, which helps them stay in place when moving your head side-to-side. - Fixed a bug where Wi-Fi streaming to HoloLens gets disrupted periodically. If an application indicates that it needs low latency streaming this fix is can be accomplished by calling [this function](https://docs.microsoft.com/windows/win32/api/socketapi/nf-socketapi-setsocketmediastreamingmode). - Fixed an issue where the device could hang during streaming in research mode. - Fixed bug where in some cases the right user would not be displayed on sign-in screen when resuming session. @@ -158,12 +158,10 @@ Improvements and Fixes also in the update: - Fixed an issue where eye tracking subsystem would fail to initialize and/or perform calibration under certain conditions. - Fixed an issue where eye calibration would be prompted for an already calibrated user. - Fixed an issue where a driver would crash during eye calibration. -- Fixed bug that caused a crash after 60 second timeout. -- Fixed bug that caused a crash what's new app. +- Fixed an issue where repeated power button presses can cause a 60 second system time-out and shell crash. - Improved stability for depth buffers. - Added ‘Share’ button in Feedback Hub so users can more easily share feedback. - Fixed a bug where RoboRaid did not install correctly. -- **Active Display Calibration.** The update introduces an active calibration system. You may occasionally see patterns flash quickly in the bottom corners of the display, which the system uses to maintain image quality. This improves the stability and alignment of holograms, which helps them stay in place when moving your head side-to-side. ### April Update - build 18362.1059 From 4108c44ea46e165bcfa3f05c364debca76a4b33a Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 11 May 2020 11:06:44 -0700 Subject: [PATCH 076/177] Fixed picture link --- devices/hololens/hololens-release-notes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens-release-notes.md b/devices/hololens/hololens-release-notes.md index e5dbc0fbb8..dd1a2af564 100644 --- a/devices/hololens/hololens-release-notes.md +++ b/devices/hololens/hololens-release-notes.md @@ -133,7 +133,7 @@ Many Windows apps now support both dark and light modes, and HoloLens 2 customer - 3D Viewer - Movies & TV -![Dark mode windows tiled](hololens-darkmode-tiled-picture.jpg) +![Dark mode windows tiled](devices/hololens/images/hololens-darkmode-tiled-picture.jpg) #### System voice commands From 6332b6ae6769f0485e5cbb6e229de9f3a7791fdd Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 11 May 2020 11:07:38 -0700 Subject: [PATCH 077/177] minor update to trigger build --- .../mdm/configuration-service-provider-reference.md | 2 +- .../client-management/mdm/policy-csps-supported-by-hololens2.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 1c2e3c6983..c76115e831 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -9,7 +9,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: manikadhiman -ms.date: 05/13/2019 +ms.date: 05/11/2020 --- # Configuration service provider reference diff --git a/windows/client-management/mdm/policy-csps-supported-by-hololens2.md b/windows/client-management/mdm/policy-csps-supported-by-hololens2.md index bb18d95143..5e31cf4abc 100644 --- a/windows/client-management/mdm/policy-csps-supported-by-hololens2.md +++ b/windows/client-management/mdm/policy-csps-supported-by-hololens2.md @@ -9,7 +9,7 @@ ms.prod: w10 ms.technology: windows author: manikadhiman ms.localizationpriority: medium -ms.date: 07/18/2019 +ms.date: 05/11/2020 --- # Policy CSPs supported by HoloLens 2 From 4c58eafd31ab134e426b0bd0d1914b7befebb017 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 11 May 2020 11:07:48 -0700 Subject: [PATCH 078/177] Pic link take 2 --- devices/hololens/hololens-release-notes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens-release-notes.md b/devices/hololens/hololens-release-notes.md index dd1a2af564..555fca2c3a 100644 --- a/devices/hololens/hololens-release-notes.md +++ b/devices/hololens/hololens-release-notes.md @@ -133,7 +133,7 @@ Many Windows apps now support both dark and light modes, and HoloLens 2 customer - 3D Viewer - Movies & TV -![Dark mode windows tiled](devices/hololens/images/hololens-darkmode-tiled-picture.jpg) +![Dark mode windows tiled](images/hololens-darkmode-tiled-picture.jpg) #### System voice commands From 10fe8858be44eaf70119368510ccea021fb09a7a Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Mon, 11 May 2020 11:18:13 -0700 Subject: [PATCH 079/177] Update kiosk-shelllauncher.md --- windows/configuration/kiosk-shelllauncher.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/kiosk-shelllauncher.md b/windows/configuration/kiosk-shelllauncher.md index 9b5bcb8a34..43317581df 100644 --- a/windows/configuration/kiosk-shelllauncher.md +++ b/windows/configuration/kiosk-shelllauncher.md @@ -20,7 +20,7 @@ ms.topic: article **Applies to** - Windows 10 Ent, Edu -Using Shell Launcher, you can configure a device that runs an application as the user interface, replacing the default shell (explorer.exe). In **Shell Launcher v1**, available in Windows 10, you can only specify a Windows desktop application as the replacement shell. In **Shell Launcher v2**, available in Windows 10, version 1809 and above, you can also specify a UWP app as the replacement shell. To use **Shell Launcher v2** in version 1809, you need to install the [KB4551853](https://support.microsoft.com/en-us/help/4551853) update. +Using Shell Launcher, you can configure a device that runs an application as the user interface, replacing the default shell (explorer.exe). In **Shell Launcher v1**, available in Windows 10, you can only specify a Windows desktop application as the replacement shell. In **Shell Launcher v2**, available in Windows 10, version 1809 and above, you can also specify a UWP app as the replacement shell. To use **Shell Launcher v2** in version 1809, you need to install the [KB4551853](https://support.microsoft.com/help/4551853) update. >[!NOTE] >Shell Launcher controls which application the user sees as the shell after sign-in. It does not prevent the user from accessing other desktop applications and system components. From 09751e84a9f903f422e8c35bcd678af87b5df5fd Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Mon, 11 May 2020 11:36:27 -0700 Subject: [PATCH 080/177] pencil edits --- ...-endpoints-1903-non-enterprise-editions.md | 26 +++++++++---------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md index 539eb81bd2..43a5191c6b 100644 --- a/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-1903-non-enterprise-editions.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.localizationpriority: high audience: ITPro author: mikeedgar -ms.author: v-medgar +ms.author: sanashar manager: sanashar ms.collection: M365-security-compliance ms.topic: article @@ -118,9 +118,9 @@ The following methodology was used to derive the network endpoints: | wdcp.microsoft.\* | TLSv1.2, HTTPS | Used for Windows Defender when Cloud-based Protection is enabled | wd-prod-cp-us-west-1-fe.westus.cloudapp.azure.com | HTTPS | Windows Defender | wusofficehome.msocdn.com | HTTPS | Microsoft Office -| www.bing.com* | HTTP | Used for updates for Cortana, apps, and Live Tiles -| www.msftconnecttest.com | HTTP | Network Connection (NCSI) -| www.office.com | HTTPS | Microsoft Office +| `www.bing.com`* | HTTP | Used for updates for Cortana, apps, and Live Tiles +| `www.msftconnecttest.com` | HTTP | Network Connection (NCSI) +| `www.office.com` | HTTPS | Microsoft Office ## Windows 10 Pro @@ -192,10 +192,10 @@ The following methodology was used to derive the network endpoints: | watson.telemetry.microsoft.com | HTTPS | Telemetry | wdcp.microsoft.com | HTTPS | Windows Defender | wusofficehome.msocdn.com | HTTPS | Microsoft Office -| www.bing.com | HTTPS | Cortana and Search -| www.microsoft.com | HTTP | Diagnostic -| www.msftconnecttest.com | HTTP | Network connection -| www.office.com | HTTPS | Microsoft Office +| `www.bing.com` | HTTPS | Cortana and Search +| `www.microsoft.com` | HTTP | Diagnostic +| `www.msftconnecttest.com` | HTTP | Network connection +| `www.office.com` | HTTPS | Microsoft Office @@ -267,8 +267,8 @@ The following methodology was used to derive the network endpoints: | wdcp.microsoft.com | HTTPS | Windows Defender | wd-prod-cp-us-east-1-fe.eastus.cloudapp.azure.com | HTTPS | Azure | wusofficehome.msocdn.com | HTTPS | Microsoft Office -| www.bing.com | HTTPS | Cortana and Search -| www.microsoft.com | HTTP | Diagnostic Data -| www.microsoft.com/pkiops/certs/* | HTTP | CRL and OCSP checks to the issuing certificate authorities -| www.msftconnecttest.com | HTTP | Network Connection -| www.office.com | HTTPS | Microsoft Office +| `www.bing.com` | HTTPS | Cortana and Search +| `www.microsoft.com` | HTTP | Diagnostic Data +| `www.microsoft.com/pkiops/certs/`* | HTTP | CRL and OCSP checks to the issuing certificate authorities +| `www.msftconnecttest.com` | HTTP | Network Connection +| `www.office.com` | HTTPS | Microsoft Office From 0b19526f42d640f26e6d04eae4ea6e2f483ded35 Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Mon, 11 May 2020 12:07:37 -0700 Subject: [PATCH 081/177] Update TOC.md Deleted Device Guard and placed Code Integrity under Device Control --- windows/security/threat-protection/TOC.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 45f8973196..c85b7dc141 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -63,8 +63,6 @@ #### [Device control]() ##### [Control USB devices](device-control/control-usb-devices-using-intune.md) - -##### [Device Guard]() ###### [Code integrity](device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) From c822ac3f22b4222a889a6ead4fe5c7497478be46 Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Mon, 11 May 2020 12:51:21 -0700 Subject: [PATCH 082/177] Updated meta descriptions Note: I did not look at the rest of the articles for flow, grammar, spelling, etc. --- .../mdm/rest-api-reference-windows-store-for-business.md | 2 +- windows/client-management/mdm/win32appinventory-ddf-file.md | 2 +- windows/client-management/troubleshoot-tcpip.md | 2 +- windows/configuration/ue-v/uev-release-notes-1607.md | 2 +- .../microsoft-defender-atp/api-microsoft-flow.md | 2 +- .../microsoft-defender-atp/connected-applications.md | 2 +- .../windows-firewall/create-an-authentication-request-rule.md | 2 +- ...lanning-to-deploy-windows-firewall-with-advanced-security.md | 2 +- 8 files changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/client-management/mdm/rest-api-reference-windows-store-for-business.md b/windows/client-management/mdm/rest-api-reference-windows-store-for-business.md index efafe7ae2f..1b4f1ec6bc 100644 --- a/windows/client-management/mdm/rest-api-reference-windows-store-for-business.md +++ b/windows/client-management/mdm/rest-api-reference-windows-store-for-business.md @@ -1,6 +1,6 @@ --- title: REST API reference for Microsoft Store for Business -description: REST API reference for Microsoft Store for Business +description: REST API reference for Microsoft Store for Business--includes available operations and data structures. MS-HAID: - 'p\_phdevicemgmt.business\_store\_portal\_management\_rest\_api\_reference' - 'p\_phDeviceMgmt.rest\_api\_reference\_windows\_store\_for\_Business' diff --git a/windows/client-management/mdm/win32appinventory-ddf-file.md b/windows/client-management/mdm/win32appinventory-ddf-file.md index 8757e65d3b..b22b7284fa 100644 --- a/windows/client-management/mdm/win32appinventory-ddf-file.md +++ b/windows/client-management/mdm/win32appinventory-ddf-file.md @@ -1,6 +1,6 @@ --- title: Win32AppInventory DDF file -description: Win32AppInventory DDF file +description: See the OMA DM device description framework (DDF) for the **Win32AppInventory** configuration service provider. DDF files are used only with OMA DM provisioning XML. ms.assetid: F6BCC10B-BFE4-40AB-AEEE-34679A4E15B0 ms.reviewer: manager: dansimp diff --git a/windows/client-management/troubleshoot-tcpip.md b/windows/client-management/troubleshoot-tcpip.md index b6a0283109..378c042899 100644 --- a/windows/client-management/troubleshoot-tcpip.md +++ b/windows/client-management/troubleshoot-tcpip.md @@ -1,6 +1,6 @@ --- title: Advanced troubleshooting for TCP/IP issues -description: Learn how to troubleshoot TCP/IP issues. +description: Learn how to troubleshoot common problems in a TCP/IP network environment. ms.prod: w10 ms.sitesec: library ms.topic: troubleshooting diff --git a/windows/configuration/ue-v/uev-release-notes-1607.md b/windows/configuration/ue-v/uev-release-notes-1607.md index f3d37601d0..d61075e1bd 100644 --- a/windows/configuration/ue-v/uev-release-notes-1607.md +++ b/windows/configuration/ue-v/uev-release-notes-1607.md @@ -1,6 +1,6 @@ --- title: User Experience Virtualization (UE-V) Release Notes -description: User Experience Virtualization (UE-V) Release Notes +description: Read the latest information required to successfully install and use UE-V that is not included in the User Experience Virtualization (UE-V) documentation. author: dansimp ms.pagetype: mdop, virtualization ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-microsoft-flow.md b/windows/security/threat-protection/microsoft-defender-atp/api-microsoft-flow.md index c27bcf9d6b..c093fcacb7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-microsoft-flow.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-microsoft-flow.md @@ -1,7 +1,7 @@ --- title: Microsoft Defender ATP Flow connector ms.reviewer: -description: Microsoft Defender ATP Flow connector +description: Use Microsoft Defender ATP Flow connector to automate security and create a flow that will be triggered any time a new alert occurs on your tenant. keywords: flow, supported apis, api, Microsoft flow, query, automation search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/connected-applications.md b/windows/security/threat-protection/microsoft-defender-atp/connected-applications.md index 20a35409f5..2d543f5b2d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/connected-applications.md +++ b/windows/security/threat-protection/microsoft-defender-atp/connected-applications.md @@ -1,7 +1,7 @@ --- title: Connected applications in Microsoft Defender ATP ms.reviewer: -description: View connected partner applications to Microsoft Defender ATP +description: View connected partner applications that use standard OAuth 2.0 protocol to authenticate and provide tokens for use with Microsoft Defender ATP APIs. keywords: partners, applications, third-party, connections, sentinelone, lookout, bitdefender, corrata, morphisec, paloalto, ziften, better mobile search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule.md b/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule.md index 2c12d1140a..873ee01d4f 100644 --- a/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule.md +++ b/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule.md @@ -1,6 +1,6 @@ --- title: Create an Authentication Request Rule (Windows 10) -description: Create an Authentication Request Rule +description: Create a new rule for Windows Defender Firewall with Advanced Security so devices on the network use IPsec protocols and methods before they can communicate. ms.assetid: 1296e048-039f-4d1a-aaf2-8472ad05e359 ms.reviewer: ms.author: dansimp diff --git a/windows/security/threat-protection/windows-firewall/planning-to-deploy-windows-firewall-with-advanced-security.md b/windows/security/threat-protection/windows-firewall/planning-to-deploy-windows-firewall-with-advanced-security.md index e8ec3acdbe..ba9cedf313 100644 --- a/windows/security/threat-protection/windows-firewall/planning-to-deploy-windows-firewall-with-advanced-security.md +++ b/windows/security/threat-protection/windows-firewall/planning-to-deploy-windows-firewall-with-advanced-security.md @@ -1,6 +1,6 @@ --- title: Plan to Deploy Windows Defender Firewall with Advanced Security (Windows 10) -description: Planning to Deploy Windows Defender Firewall with Advanced Security +description: Use the design information in this article to plan for the deployment of Windows Defender Firewall with Advanced Security in your organization. ms.assetid: 891a30c9-dbf5-4a88-a279-00662b9da48e ms.reviewer: ms.author: dansimp From 533be11c0ab3b2807c5a7e82f8bf163aad3c8b28 Mon Sep 17 00:00:00 2001 From: Mark Goodman <19527097+silvermarkg@users.noreply.github.com> Date: Mon, 11 May 2020 21:33:02 +0100 Subject: [PATCH 083/177] Fixed missing word Added missing word in Acquire Dynamic Update packages section to include 'updates' instead of just 's' --- windows/deployment/update/media-dynamic-update.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/media-dynamic-update.md b/windows/deployment/update/media-dynamic-update.md index c981469bef..8af36e4df1 100644 --- a/windows/deployment/update/media-dynamic-update.md +++ b/windows/deployment/update/media-dynamic-update.md @@ -42,7 +42,7 @@ You can obtain Dynamic Update packages from the [Microsoft Update Catalog](https ![Table with columns labeled Title, Products, Classification, Last Updated, Version, and Size and four rows listing various dynamic updates and associated KB articles](images/update-catalog.png) -The various Dynamic Update packages might not all be present in the results from a single search, so you might have to search with different keywords to find all of the s. And you'll need to check various parts of the results to be sure you've identified the needed files. This table shows in bold the key items to search for or look for in the results. For example, to find the relevant "Setup Dynamic Update," you'll have to check the detailed description for the download by selecting the link in the **Title** column of the search results. +The various Dynamic Update packages might not all be present in the results from a single search, so you might have to search with different keywords to find all of the updates. And you'll need to check various parts of the results to be sure you've identified the needed files. This table shows in bold the key items to search for or look for in the results. For example, to find the relevant "Setup Dynamic Update," you'll have to check the detailed description for the download by selecting the link in the **Title** column of the search results. |To find this Dynamic Update packages, search for or check the results here--> |Title |Product |Description (select the **Title** link to see **Details**) | From f8bc93d68809c3166dce5586f75bb107121cba77 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Mon, 11 May 2020 14:36:01 -0700 Subject: [PATCH 084/177] Tools updates - high priority --- devices/surface/TOC.md | 1 - devices/surface/microsoft-surface-data-eraser.md | 11 ++++++++++- .../surface-diagnostic-toolkit-business.md | 16 ++++++++++++++-- .../surface-enterprise-management-mode.md | 10 ++++++++-- 4 files changed, 32 insertions(+), 6 deletions(-) diff --git a/devices/surface/TOC.md b/devices/surface/TOC.md index 5adf5c3ca4..92801e4289 100644 --- a/devices/surface/TOC.md +++ b/devices/surface/TOC.md @@ -33,7 +33,6 @@ ### [Surface Pro X app compatibility](surface-pro-arm-app-performance.md) ### [Manage and deploy Surface driver and firmware updates](manage-surface-driver-and-firmware-updates.md) ### [Surface Deployment Accelerator](microsoft-surface-deployment-accelerator.md) -### [Step by step: Surface Deployment Accelerator](step-by-step-surface-deployment-accelerator.md) ### [Deploy Windows 10 to Surface devices with MDT](deploy-windows-10-to-surface-devices-with-mdt.md) ### [Enable the Surface Laptop keyboard during MDT deployment](enable-surface-keyboard-for-windows-pe-deployment.md) ### [Upgrade Surface devices to Windows 10 with MDT](upgrade-surface-devices-to-windows-10-with-mdt.md) diff --git a/devices/surface/microsoft-surface-data-eraser.md b/devices/surface/microsoft-surface-data-eraser.md index 0cbf9dac52..9d8fae753f 100644 --- a/devices/surface/microsoft-surface-data-eraser.md +++ b/devices/surface/microsoft-surface-data-eraser.md @@ -13,7 +13,8 @@ ms.sitesec: library author: coveminer ms.author: v-jokai ms.topic: article -ms.audience: itpro +audience: itpro +ms.date: 05/11/2019 --- # Microsoft Surface Data Eraser @@ -28,6 +29,8 @@ Find out how the Microsoft Surface Data Eraser tool can help you securely wipe d Compatible Surface devices include: +* Surface Book 3 +* Surface Go 2 * Surface Pro 7 * Surface Pro X * Surface Laptop 3 @@ -164,6 +167,12 @@ After you create a Microsoft Surface Data Eraser USB stick, you can boot a suppo Microsoft Surface Data Eraser is periodically updated by Microsoft. For information about the changes provided in each new version, see the following: +### 3.30.139 +This version of Surface Data Eraser to be released May 11, 2020 adds support for: +- Surface Book 3 +- Surface Go 2 +- New SSD in Surface Go + ### 3.28.137 *Release Date: 11 Nov 2019* This version of Surface Data Eraser: diff --git a/devices/surface/surface-diagnostic-toolkit-business.md b/devices/surface/surface-diagnostic-toolkit-business.md index 11a032fb45..a2c90b3b14 100644 --- a/devices/surface/surface-diagnostic-toolkit-business.md +++ b/devices/surface/surface-diagnostic-toolkit-business.md @@ -8,10 +8,10 @@ ms.sitesec: library author: coveminer ms.author: v-jokai ms.topic: article -ms.date: 10/31/2019 +ms.date: 05/11/2019 ms.reviewer: hachidan manager: laurawi -ms.audience: itpro +audience: itpro --- # Deploy Surface Diagnostic Toolkit for Business @@ -170,6 +170,18 @@ You can select to run a wide range of logs across applications, drivers, hardwar - [Use Surface Diagnostic Toolkit for Business using commands](surface-diagnostic-toolkit-command-line.md) ## Changes and updates + +### Version 2.94.139.0 + +This version of Surface Diagnostic Toolkit for Business to be released May 11, 2020 adds support for the following: + +- Ability to skip Windows Update to perform hardware check. +- Ability to receive notifications for about the latest version update +- Surface Go 2 +- Surface Book 3 +- Show progress indicator + + ### Version 2.43.139.0 *Release date: October 21, 2019*
    This version of Surface Diagnostic Toolkit for Business adds support for the following: diff --git a/devices/surface/surface-enterprise-management-mode.md b/devices/surface/surface-enterprise-management-mode.md index fc88993c64..72d0e017aa 100644 --- a/devices/surface/surface-enterprise-management-mode.md +++ b/devices/surface/surface-enterprise-management-mode.md @@ -7,12 +7,13 @@ ms.mktglfcycl: manage ms.pagetype: surface, devices, security ms.sitesec: library author: coveminer -ms.author: v-jokai +ms.author: greglin ms.topic: article ms.reviewer: scottmca manager: laurawi ms.localizationpriority: medium -ms.audience: itpro +audience: itpro +ms.date: 05/11/2019 --- # Microsoft Surface Enterprise Management Mode @@ -227,6 +228,11 @@ create a reset package using PowerShell to reset SEMM. ## Version History +The latest version of SEMM to be released May 11, 2020 includes: +-Support for Surface Go 2 +-Support for Surface Book 3 +-Miscellaneous updates + ### Version 2.59. * Support to Surface Pro 7, Surface Pro X, and Surface Laptop 3 13.5" and 15" models with Intel processor. Note: Surface Laptop 3 15" AMD processor is not supported. - Support to Wake on Power feature From a1c6a026055cbb99394aa091c6c6ecdbdadc403c Mon Sep 17 00:00:00 2001 From: sairashariff <57646455+sairashariff@users.noreply.github.com> Date: Mon, 11 May 2020 14:50:18 -0700 Subject: [PATCH 085/177] Update hololens2-hardware.md --- devices/hololens/hololens2-hardware.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/devices/hololens/hololens2-hardware.md b/devices/hololens/hololens2-hardware.md index 6b8175e59d..048dd790da 100644 --- a/devices/hololens/hololens2-hardware.md +++ b/devices/hololens/hololens2-hardware.md @@ -133,7 +133,11 @@ In order to maintain/advance Internal Battery Charge Percentage while the device ### Safety -HoloLens 2 has been tested and conforms to the basic impact protection requirements of ANSI Z87.1, CSA Z94.3 and EN 166. +[Product Safety](https://support.microsoft.com/en-us/help/4023454/safety-information) +Eye safety: HoloLens 2 has been tested and conforms to the basic impact protection requirements of ANSI Z87.1, CSA Z94.3 and EN 166. + +### Regulatory Information +[HoloLens Regulatory](https://support.microsoft.com/en-us/help/13761/hololens-regulatory-information) ## Next step From da79469199434d74d968c177372144becb74bbe5 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Mon, 11 May 2020 15:09:16 -0700 Subject: [PATCH 086/177] meta updates --- devices/surface/microsoft-surface-data-eraser.md | 2 +- devices/surface/surface-diagnostic-toolkit-business.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/devices/surface/microsoft-surface-data-eraser.md b/devices/surface/microsoft-surface-data-eraser.md index 9d8fae753f..9dd191c303 100644 --- a/devices/surface/microsoft-surface-data-eraser.md +++ b/devices/surface/microsoft-surface-data-eraser.md @@ -11,7 +11,7 @@ ms.mktglfcycl: manage ms.pagetype: surface, devices, security ms.sitesec: library author: coveminer -ms.author: v-jokai +ms.author: greglin ms.topic: article audience: itpro ms.date: 05/11/2019 diff --git a/devices/surface/surface-diagnostic-toolkit-business.md b/devices/surface/surface-diagnostic-toolkit-business.md index a2c90b3b14..0a38bee15c 100644 --- a/devices/surface/surface-diagnostic-toolkit-business.md +++ b/devices/surface/surface-diagnostic-toolkit-business.md @@ -6,7 +6,7 @@ ms.mktglfcycl: manage ms.localizationpriority: medium ms.sitesec: library author: coveminer -ms.author: v-jokai +ms.author: greglin ms.topic: article ms.date: 05/11/2019 ms.reviewer: hachidan From 28e89ba80688cd916ae4a5849c86ec7e6644f3a2 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Mon, 11 May 2020 15:24:58 -0700 Subject: [PATCH 087/177] Correcting date --- devices/surface/microsoft-surface-data-eraser.md | 2 +- devices/surface/surface-diagnostic-toolkit-business.md | 2 +- devices/surface/surface-enterprise-management-mode.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/devices/surface/microsoft-surface-data-eraser.md b/devices/surface/microsoft-surface-data-eraser.md index 9dd191c303..ca46b58a8b 100644 --- a/devices/surface/microsoft-surface-data-eraser.md +++ b/devices/surface/microsoft-surface-data-eraser.md @@ -14,7 +14,7 @@ author: coveminer ms.author: greglin ms.topic: article audience: itpro -ms.date: 05/11/2019 +ms.date: 05/11/2020 --- # Microsoft Surface Data Eraser diff --git a/devices/surface/surface-diagnostic-toolkit-business.md b/devices/surface/surface-diagnostic-toolkit-business.md index 0a38bee15c..6ee22d5391 100644 --- a/devices/surface/surface-diagnostic-toolkit-business.md +++ b/devices/surface/surface-diagnostic-toolkit-business.md @@ -8,7 +8,7 @@ ms.sitesec: library author: coveminer ms.author: greglin ms.topic: article -ms.date: 05/11/2019 +ms.date: 05/11/2020 ms.reviewer: hachidan manager: laurawi audience: itpro diff --git a/devices/surface/surface-enterprise-management-mode.md b/devices/surface/surface-enterprise-management-mode.md index 72d0e017aa..fa820435bf 100644 --- a/devices/surface/surface-enterprise-management-mode.md +++ b/devices/surface/surface-enterprise-management-mode.md @@ -13,7 +13,7 @@ ms.reviewer: scottmca manager: laurawi ms.localizationpriority: medium audience: itpro -ms.date: 05/11/2019 +ms.date: 05/11/2020 --- # Microsoft Surface Enterprise Management Mode From 74fbc19e2c06a1e03ceb4db4bd755abda782e6ca Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Mon, 11 May 2020 15:39:53 -0700 Subject: [PATCH 088/177] Feedback updates --- devices/surface/surface-diagnostic-toolkit-business.md | 3 +++ devices/surface/surface-enterprise-management-mode.md | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/devices/surface/surface-diagnostic-toolkit-business.md b/devices/surface/surface-diagnostic-toolkit-business.md index 6ee22d5391..d916f7d91b 100644 --- a/devices/surface/surface-diagnostic-toolkit-business.md +++ b/devices/surface/surface-diagnostic-toolkit-business.md @@ -41,6 +41,9 @@ Command line | Directly troubleshoot Surface devices remotely without user inter SDT for Business is supported on Surface 3 and later devices, including: +- Surface Book 3 +- Surface Go 2 +- Surface Pro X - Surface Pro 7 - Surface Laptop 3 - Surface Pro 6 diff --git a/devices/surface/surface-enterprise-management-mode.md b/devices/surface/surface-enterprise-management-mode.md index fa820435bf..723c11249b 100644 --- a/devices/surface/surface-enterprise-management-mode.md +++ b/devices/surface/surface-enterprise-management-mode.md @@ -231,7 +231,7 @@ create a reset package using PowerShell to reset SEMM. The latest version of SEMM to be released May 11, 2020 includes: -Support for Surface Go 2 -Support for Surface Book 3 --Miscellaneous updates +-Bug fixes ### Version 2.59. * Support to Surface Pro 7, Surface Pro X, and Surface Laptop 3 13.5" and 15" models with Intel processor. Note: Surface Laptop 3 15" AMD processor is not supported. From 039915a4a5604289d9f8686842e1ef4b24b808bd Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Mon, 11 May 2020 15:42:04 -0700 Subject: [PATCH 089/177] Update surface-enterprise-management-mode.md --- devices/surface/surface-enterprise-management-mode.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/devices/surface/surface-enterprise-management-mode.md b/devices/surface/surface-enterprise-management-mode.md index 723c11249b..819ef39b6a 100644 --- a/devices/surface/surface-enterprise-management-mode.md +++ b/devices/surface/surface-enterprise-management-mode.md @@ -229,9 +229,9 @@ create a reset package using PowerShell to reset SEMM. ## Version History The latest version of SEMM to be released May 11, 2020 includes: --Support for Surface Go 2 --Support for Surface Book 3 --Bug fixes +- Support for Surface Go 2 +- Support for Surface Book 3 +- Bug fixes ### Version 2.59. * Support to Surface Pro 7, Surface Pro X, and Surface Laptop 3 13.5" and 15" models with Intel processor. Note: Surface Laptop 3 15" AMD processor is not supported. From 80b86e6619ff8077289f4a6cf70de669328a9a7d Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 11 May 2020 16:14:39 -0700 Subject: [PATCH 090/177] Added blank line between "span id" and a "##" heading In preview, the heading was rendered as body text. --- devices/surface/surface-diagnostic-toolkit-business.md | 1 + 1 file changed, 1 insertion(+) diff --git a/devices/surface/surface-diagnostic-toolkit-business.md b/devices/surface/surface-diagnostic-toolkit-business.md index d916f7d91b..39033b02c7 100644 --- a/devices/surface/surface-diagnostic-toolkit-business.md +++ b/devices/surface/surface-diagnostic-toolkit-business.md @@ -119,6 +119,7 @@ In addition to the .exe file, SDT installs a JSON file and an admin.dll file (mo *Figure 2. Files installed by SDT* + ## Preparing the SDT package for distribution Creating a custom package allows you to target the tool to specific known issues. From da65f788050ac043fedae5797cda1d1dd48a3271 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 11 May 2020 16:45:56 -0700 Subject: [PATCH 091/177] Added white space between paragraphs --- .../threat-protection/microsoft-defender-atp/machine-tags.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md index d5509569dc..12547646de 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md @@ -83,7 +83,8 @@ Use the following registry key entry to add a tag on a machine: - Registry key data: `Name of the tag you want to set` >[!NOTE] ->The device tag is part of the machine information report that's generated once a day. As an alternative, you may choose to restart the endpoint that would transfer a new machine information report.
    +>The device tag is part of the machine information report that's generated once a day. As an alternative, you may choose to restart the endpoint that would transfer a new machine information report. +> > If you need to remove a tag that was added using the above Registry key, clear the contents of the Registry key data instead of removing the 'Group' key. From 38c8ffe57d828083029de698ac8a1c541632384d Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 11 May 2020 16:53:32 -0700 Subject: [PATCH 092/177] Grammar fixes --- .../client-management/mdm/policy-csp-restrictedgroups.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-restrictedgroups.md b/windows/client-management/mdm/policy-csp-restrictedgroups.md index 1f05b67536..3b7a445092 100644 --- a/windows/client-management/mdm/policy-csp-restrictedgroups.md +++ b/windows/client-management/mdm/policy-csp-restrictedgroups.md @@ -15,7 +15,7 @@ manager: dansimp # Policy CSP - RestrictedGroups > [!WARNING] -> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. +> Some information in this article relates to prereleased products, which may be substantially modified before they are commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here.
    @@ -86,7 +86,7 @@ For example, you can create a Restricted Groups policy to allow only specified u > |----------|----------|----------|----------| > | 0x55b (Hex)
    1371 (Dec) |ERROR_SPECIAL_ACCOUNT|Cannot perform this operation on built-in accounts.| winerror.h | -Starting in Windows 10, version 1809, you can use this schema for retrieval and application of the RestrictedGroups/ConfigureGroupMembership policy. A minimum occurrence of 0 members when applying the policy implies clearing the access group and should be used with caution. +Starting in Windows 10, version 1809, you can use this schema for retrieval and application of the RestrictedGroups/ConfigureGroupMembership policy. A minimum occurrence of zero members when applying the policy implies clearing the access group and should be used with caution. ```xml @@ -162,7 +162,7 @@ The following table describes how this policy setting behaves in different Windo | Windows 10 version | Policy behavior | | ------------------ | --------------- | |Windows 10, version 1803 | Added this policy setting.
    XML accepts group and member only by name.
    Supports configuring the administrators group using the group name.
    Expects member name to be in the account name format. | -| Windows 10, version 1809
    Windows 10, version 1903
    Windows 10, version 1909 | Supports configuring any local group.
    `` accepts only name.
    `` accepts a name or an SID.
    This is useful when you want to ensure a certain local group always has a well known SID as member. | +| Windows 10, version 1809
    Windows 10, version 1903
    Windows 10, version 1909 | Supports configuring any local group.
    `` accepts only name.
    `` accepts a name or an SID.
    This is useful when you want to ensure a certain local group always has a well-known SID as member. | | The latest release of Windows 10 | Behaves as described in this topic.
    Accepts name or SID for group and members and translates as appropriate. | From 205839495f71374bcce9e745b57c742449337e25 Mon Sep 17 00:00:00 2001 From: Obi Eze Ajoku <62227226+linque1@users.noreply.github.com> Date: Mon, 11 May 2020 17:14:52 -0700 Subject: [PATCH 093/177] New manage connection endpoints non-ent New manage connection endpoints non-ent --- ...-endpoints-2004-non-enterprise-editions.md | 203 ++++++++++++++++++ 1 file changed, 203 insertions(+) create mode 100644 windows/privacy/windows-endpoints-2004-non-enterprise-editions.md diff --git a/windows/privacy/windows-endpoints-2004-non-enterprise-editions.md b/windows/privacy/windows-endpoints-2004-non-enterprise-editions.md new file mode 100644 index 0000000000..a224c93fd2 --- /dev/null +++ b/windows/privacy/windows-endpoints-2004-non-enterprise-editions.md @@ -0,0 +1,203 @@ +--- +title: Windows 10, version 2004, connection endpoints for non-Enterprise editions +description: Explains what Windows 10 endpoints are used in non-Enterprise editions. Specific to Windows 10, version 2004. +keywords: privacy, manage connections to Microsoft, Windows 10, Windows Server 2016 +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.localizationpriority: high +audience: ITPro +author: linque1 +ms.author: obezeajo +manager: robsize +ms.collection: M365-security-compliance +ms.topic: article +ms.date: 5/11/2020 +--- +# Windows 10, version 2004, connection endpoints for non-Enterprise editions + + **Applies to** + +- Windows 10 Home, version 2004 +- Windows 10 Professional, version 2004 +- Windows 10 Education, version 2004 + +In addition to the endpoints listed for [Windows 10 Enterprise](manage-windows-2004-endpoints.md), the following endpoints are available on other non-Enterprise editions of Windows 10, version 2004. + +The following methodology was used to derive the network endpoints: + +1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. +2. Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device). +3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. +4. Compile reports on traffic going to public IP addresses. +5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory. +6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here. +7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different. +8. These tests were conducted for one week. If you capture traffic for longer you may have different results. + + +> [!NOTE] +> Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time. + +## Windows 10 Family + +| **Destination** | **Protocol** | **Description** | +| --- | --- | --- | +|*.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft +|*.prod.do.dsp.mp.microsoft.com|TLSv1.2|Windows Update +|*.smartscreen.microsoft.com|HTTPS|Windows Defender SmartScreen +|*.smartscreen-prod.microsoft.com|HTTPS|Windows Defender SmartScreen +|*.update.microsoft.com|TLSv1.2|Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store +|*.windowsupdate.com|HTTP|Used to download operating system patches and updates +|*dl.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft +|*storecatalogrevocation.storequality.microsoft.com|TLSv1.2|Used to revoke licenses for malicious apps on the Microsoft Store +|arc.msn.com|TLSv1.2|Windows Spotlight +|cdn.onenote.net|HTTPS|OneNote +|config.edge.skype.com|HTTPS|Skype +|config.teams.microsoft.com|HTTPS|Skype +|crl.microsoft.com|HTTPS|Skype +|ctldl.windowsupdate.com|HTTP|Certificate Trust List +|da.xboxservices.com|HTTPS|Microsoft Edge +|displaycatalog.mp.microsoft.com|HTTPS|Microsoft Store +|dmd.metaservices.microsoft.com|HTTP|Device Authentication +|evoke-windowsservices-tas.msedge.net|TLSv1.2|Photos app +|fs.microsoft.com|TLSv1.2|Maps application +|g.live.com|TLSv1.2|OneDrive +|go.microsoft.com|HTTPS|Windows Defender +|img-prod-cms-rt-microsoft-com|TLSv1.2|This endpoint is related to Microsoft Edge +|licensing.mp.microsoft.com|HTTPS|Licensing +|login.live.com|TLSv1.2|Device Authentication +|logincdn.msauth.net|TLSv1.2|Device Authentication +|manage.devcenter.microsoft.com|TLSv1.2|Microsoft Store analytics +|maps.windows.com|TLSv1.2|Related to Maps application +|ocsp.digicert.com|HTTPS|CRL and OCSP checks to the issuing certificate authorities +|oneclient.sfx.ms|HTTPS|Used by OneDrive for Business to download and verify app updates +|pipe.aria.microsoft.com|HTTPS|Used to retrieve Skype configuration values +|ris.api.iris.microsoft.com|TLSv1.2|Windows Telemetry +|settings-win.data.microsoft.com|TLSv1.2|Used for Windows apps to dynamically update their configuration +|storesdk.dsx.mp.microsoft.com|HTTPS|Used to communicate with Microsoft Store +|telecommand.telemetry.microsoft.com|TLSv1.2|Used by Windows Error Reporting +|tile-service.weather.microsoft.com|HTTPS|Used to download updates to the Weather app Live Tile +|tsfe.trafficshaping.dsp.mp.microsoft.com|TLSv1.2|Used for content regulation +|v10.events.data.microsoft.com|TLSv1.2|Diagnostic Data +|v20.events.data.microsoft.com|TLSv1.2|Diagnostic Data +|watson.telemetry.microsoft.com|HTTPS|Diagnostic Data +|wdcp.microsoft.com|TLSv1.2|Used for Windows Defender when Cloud-based Protection is enabled +|www.bing.com|TLSv1.2|Used for updates for Cortana, apps, and Live Tiles +|www.msftconnecttest.com|HTTPS|Network Connection (NCSI) +|www.office.com|HTTPS|Microsoft Office + + +## Windows 10 Pro + +| **Destination** | **Protocol** | **Description** | +| --- | --- | --- | +|*.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft +|*.prod.do.dsp.mp.microsoft.com|TLSv1.2|Windows Update +|*.smartscreen.microsoft.com|HTTPS|Windows Defender SmartScreen +|*.smartscreen-prod.microsoft.com|HTTPS|Windows Defender SmartScreen +|*.update.microsoft.com|TLSv1.2|Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store +|*.windowsupdate.com|HTTP|Used to download operating system patches and updates +|*.wns.windows.com|TLSv1.2|Used for the Windows Push Notification Services (WNS) +|*dl.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft +|*msn-com.akamaized.net|HTTPS|This endpoint is related to Microsoft Edge +|*ring.msedge.net|HTTPS|Used by Microsoft OfficeHub to get the metadata of Microsoft Office apps +|*storecatalogrevocation.storequality.microsoft.com|TLSv1.2|Used to revoke licenses for malicious apps on the Microsoft Store +|arc.msn.com|TLSv1.2|Windows Spotlight +|blobs.officehome.msocdn.com|HTTPS|OneNote +|cdn.onenote.net|HTTPS|OneNote +|checkappexec.microsoft.com|HTTPS|OneNote +|config.edge.skype.com|HTTPS|Skype +|config.teams.microsoft.com|HTTPS|Skype +|crl.microsoft.com|HTTPS|Skype +|ctldl.windowsupdate.com|HTTP|Certificate Trust List +|d2i2wahzwrm1n5.cloudfront.net|HTTPS|Microsoft Edge +|da.xboxservices.com|HTTPS|Microsoft Edge +|displaycatalog.mp.microsoft.com|HTTPS|Microsoft Store +|dlassets-ssl.xboxlive.com|HTTPS|Xbox Live +|dmd.metaservices.microsoft.com|HTTP|Device Authentication +|emdl.ws.microsoft.com|HTTP|Windows Update +|evoke-windowsservices-tas.msedge.net|TLSv1.2|Photos app +|fp.msedge.net|HTTPS|Cortana and Live Tiles +|fs.microsoft.com|TLSv1.2|Maps application +|g.live.com|TLSv1.2|OneDrive +|go.microsoft.com|HTTPS|Windows Defender +|img-prod-cms-rt-microsoft-com*|TLSv1.2|This endpoint is related to Microsoft Edge +|licensing.mp.microsoft.com|HTTPS|Licensing +|login.live.com|TLSv1.2|Device Authentication +|manage.devcenter.microsoft.com|TLSv1.2|Microsoft Store analytics +|maps.windows.com|TLSv1.2|Related to Maps application +|ocsp.digicert.com|HTTPS|CRL and OCSP checks to the issuing certificate authorities +|oneclient.sfx.ms|HTTPS|Used by OneDrive for Business to download and verify app updates +|pipe.aria.microsoft.com|HTTPS|Used to retrieve Skype configuration values +|ris.api.iris.microsoft.com|TLSv1.2|Windows Telemetry +|s1325.t.eloqua.com|HTTPS|Microsoft Edge +|self.events.data.microsoft.com|HTTPS|Microsoft Office +|settings-win.data.microsoft.com|TLSv1.2|Used for Windows apps to dynamically update their configuration +|store-images.*microsoft.com|HTTPS|Used to get images that are used for Microsoft Store suggestions +|storesdk.dsx.mp.microsoft.com|HTTPS|Microsoft Store +|telecommand.telemetry.microsoft.com|TLSv1.2|Used by Windows Error Reporting +|tile-service.weather.microsoft.com|HTTPS|Used to download updates to the Weather app Live Tile +|time.windows.com|HTTPS|Fetch the time +|tsfe.trafficshaping.dsp.mp.microsoft.com|HTTPS|The following endpoint is used for content regulation +|v10.events.data.microsoft.com|TLSv1.2|Diagnostic Data +|watson.telemetry.microsoft.com|HTTPS|Diagnostic Data +|wdcp.microsoft.com|TLSv1.2|Used for Windows Defender when Cloud-based Protection is enabled +|www.bing.com|TLSv1.2|Used for updates for Cortana, apps, and Live Tiles +|www.msftconnecttest.com|HTTPS|Network Connection (NCSI) +|www.msn.com|HTTPS|Network Connection (NCSI) +|www.office.com|HTTPS|Microsoft Office + + +## Windows 10 Education + +| **Destination** | **Protocol** | **Description** | +| --- | --- | --- | +|*.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft +|*.prod.do.dsp.mp.microsoft.com|TLSv1.2|Windows Update +|*.smartscreen.microsoft.com|HTTPS|Windows Defender SmartScreen +|*.smartscreen-prod.microsoft.com|HTTPS|Windows Defender SmartScreen +|*.update.microsoft.com|TLSv1.2|Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store +|*.windowsupdate.com|HTTP|Used to download operating system patches and updates +|*.wns.windows.com|TLSv1.2|Used for the Windows Push Notification Services (WNS) +|*dl.delivery.mp.microsoft.com|HTTP|Used to download operating system patches, updates, and apps from Microsoft +|*ring.msedge.net|HTTPS|Used by Microsoft OfficeHub to get the metadata of Microsoft Office apps +|*storecatalogrevocation.storequality.microsoft.com|TLSv1.2|Used to revoke licenses for malicious apps on the Microsoft Store +|arc.msn.com|TLSv1.2|Windows Spotlight +|blobs.officehome.msocdn.com|HTTPS|OneNote +|cdn.onenote.net|HTTPS|OneNote +|checkappexec.microsoft.com|HTTPS|OneNote +|config.edge.skype.com|HTTPS|Skype +|config.teams.microsoft.com|HTTPS|Skype +|crl.microsoft.com|HTTPS|Skype +|ctldl.windowsupdate.com|HTTP|Certificate Trust List +|da.xboxservices.com|HTTPS|Microsoft Edge +|dmd.metaservices.microsoft.com|HTTP|Device Authentication +|emdl.ws.microsoft.com|HTTP|Windows Update +|evoke-windowsservices-tas.msedge.net|TLSv1.2|Photos app +|fp.msedge.net|HTTPS|Cortana and Live Tiles +|fs.microsoft.com|TLSv1.2|Maps application +|g.live.com|TLSv1.2|OneDrive +|go.microsoft.com|HTTPS|Windows Defender +|licensing.mp.microsoft.com|HTTPS|Licensing +|login.live.com|TLSv1.2|Device Authentication +|logincdn.msauth.net|HTTPS|Device Authentication +|manage.devcenter.microsoft.com|TLSv1.2|Microsoft Store analytics +|ocsp.digicert.com|HTTPS|CRL and OCSP checks to the issuing certificate authorities +|ocsp.msocsp.com|HTTPS|CRL and OCSP checks to the issuing certificate authorities +|ow1.res.office365.com|HTTPS|Microsoft Office +|pipe.aria.microsoft.com|HTTPS|Used to retrieve Skype configuration values +|ris.api.iris.microsoft.com|TLSv1.2|Windows Telemetry +|s1325.t.eloqua.com|HTTPS|Microsoft Edge +|settings-win.data.microsoft.com|TLSv1.2|Used for Windows apps to dynamically update their configuration +|telecommand.telemetry.microsoft.com|TLSv1.2|Used by Windows Error Reporting +|tile-service.weather.microsoft.com|HTTPS|Used to download updates to the Weather app Live Tile +|v10.events.data.microsoft.com|TLSv1.2|Diagnostic Data +|v20.events.data.microsoft.com|HTTPS|Diagnostic Data +|watson.telemetry.microsoft.com|HTTPS|Diagnostic Data +|wdcp.microsoft.com|TLSv1.2|Used for Windows Defender when Cloud-based Protection is enabled +|www.bing.com|TLSv1.2|Used for updates for Cortana, apps, and Live Tiles +|www.microsoft.com|HTTP|Connected User Experiences and Telemetry, Microsoft Data Management service +|www.msftconnecttest.com|HTTPS|Network Connection (NCSI) +|www.office.com|HTTPS|Microsoft Office + From 82ce8d1bdad0754f9ca1c9e54efd580f8aa584b5 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 11 May 2020 17:21:58 -0700 Subject: [PATCH 094/177] Adding branding names --- devices/hololens/hololens-release-notes.md | 18 +++++++++++------- 1 file changed, 11 insertions(+), 7 deletions(-) diff --git a/devices/hololens/hololens-release-notes.md b/devices/hololens/hololens-release-notes.md index 555fca2c3a..38498ccf8e 100644 --- a/devices/hololens/hololens-release-notes.md +++ b/devices/hololens/hololens-release-notes.md @@ -26,7 +26,7 @@ appliesto: > [!Note] > HoloLens Emulator Release Notes can be found [here](https://docs.microsoft.com/windows/mixed-reality/hololens-emulator-archive). -### Windows Holographic May 2020 Update +### Windows Holographic, version 2004 May Update Build - 19041.1103 | Feature | Description | @@ -163,7 +163,11 @@ Improvements and Fixes also in the update: - Added ‘Share’ button in Feedback Hub so users can more easily share feedback. - Fixed a bug where RoboRaid did not install correctly. -### April Update - build 18362.1059 +### Windows Holographic, version 1903 - May Update - build 18362.1061 + +This monthly quality update does not contain any changes of note because the team has been focused on providing you with the highest quality Feature Update, with the Windows Holographic, version 2004 May Update being generally avalible for all we wanted to bring you the best possible experience with that feature update. Please take this opportunity to move to the latest feature update to get a ton of exciting new changes. + +### Windows Holographic, version 1903 - April Update - build 18362.1059 **Dark mode for supported apps** @@ -188,31 +192,31 @@ Here are some of the in-box apps that support dark mode: - Improve hologram stability in mixed reality capture when the HolographicDepthReprojectionMethod DepthReprojection algorithm is used. - Fixed WinRT IStreamSocketListener API Class Not Registered error on 32-bit ARM app. -### March Update - build 18362.1056 +### Windows Holographic, version 1903 - March Update - build 18362.1056 - Improve hologram stability in mixed reality capture when the HolographicDepthReprojectionMethod AutoPlanar algorithm is used. - Ensures the coordinate system attached to a depth MF sample is consistent with public documentation. - Developers productivity improvement by enabling customers to paste large amount of text through device portal. -### February Update - build 18362.1053 +### Windows Holographic, version 1903 - February Update - build 18362.1053 - Temporarily disabled the HolographicSpace.UserPresence API for Unity applications to avoid an issue which causes some apps to pause when the visor is flipped up, even if the setting to run in the background is enabled. - Fixed a random HUP crash cased by hand tracking, in which user will notice an UI freeze then back to shell after several seconds. - We made an improvement in hand tracking so that while poking using index finger, the upper part of that finger will be less likely to curl unexpectedly. - Improved reliability of head tracking, spatial mapping, and other runtimes. -### January Update - build 18362.1043 +### Windows Holographic, version 1903 - January Update - build 18362.1043 - Stability improvements for exclusive apps when working with the HoloLens 2 emulator. -### December Update - build 18362.1042 +### Windows Holographic, version 1903 - December Update - build 18362.1042 - Introduces LSR (Last Stage Reproduction) fixes. Improves visual rendering of holograms to appear more stable and crisp by more accurately accounting for their depth. This will be more noticeable if apps do not set the depth of holograms correctly, after this update. - Fixes stability of exclusive apps and navigation between exclusive apps. - Resolves an issue where Mixed Reality Capture couldn't record video after device is left in standby state for multiple days. - Improves hologram stability. -### November Update - build 18362.1039 +### Windows Holographic, version 1903 - November Update - build 18362.1039 - Fixes for **"Select"** voice commands during initial set-up for en-CA and en-AU. - Improvements in visual quality of objects placed far away in latest Unity and MRTK versions. From 507101b5ff4e6bd00aa24bfd906bd4f417d94aea Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Mon, 11 May 2020 17:29:08 -0700 Subject: [PATCH 095/177] Updated meta descriptions only Note: I didn't look at the rest of the article for flow, grammar, etc. --- .../app-v/appv-deploying-microsoft-office-2016-with-appv.md | 2 +- .../app-v/appv-preparing-your-environment.md | 3 +-- .../hello-for-business/hello-feature-conditional-access.md | 2 +- .../threat-protection/microsoft-defender-atp/api-power-bi.md | 2 +- .../microsoft-defender-atp/get-alert-related-ip-info.md | 2 +- .../microsoft-defender-atp/get-ip-statistics.md | 2 +- .../microsoft-defender-atp/get-kbinfo-collection.md | 2 +- .../threat-protection/windows-firewall/exemption-list.md | 4 ++-- .../restrict-server-access-to-members-of-a-group-only.md | 2 +- 9 files changed, 10 insertions(+), 11 deletions(-) diff --git a/windows/application-management/app-v/appv-deploying-microsoft-office-2016-with-appv.md b/windows/application-management/app-v/appv-deploying-microsoft-office-2016-with-appv.md index e90fc8be78..ba7107286e 100644 --- a/windows/application-management/app-v/appv-deploying-microsoft-office-2016-with-appv.md +++ b/windows/application-management/app-v/appv-deploying-microsoft-office-2016-with-appv.md @@ -1,6 +1,6 @@ --- title: Deploying Microsoft Office 2016 by using App-V (Windows 10) -description: Deploying Microsoft Office 2016 by using App-V +description: Use Application Virtualization (App-V) to deliver Microsoft Office 2016 as a virtualized application to computers in your organization. author: lomayor ms.pagetype: mdop, appcompat, virtualization ms.mktglfcycl: deploy diff --git a/windows/application-management/app-v/appv-preparing-your-environment.md b/windows/application-management/app-v/appv-preparing-your-environment.md index 57989881e0..1ea3496ad6 100644 --- a/windows/application-management/app-v/appv-preparing-your-environment.md +++ b/windows/application-management/app-v/appv-preparing-your-environment.md @@ -1,7 +1,6 @@ --- title: Preparing Your Environment for App-V (Windows 10) -description: Preparing Your Environment for App-V -author: lomayor +description: Use this info to prepare for deployment configurations and prerequisites for Microsoft Application Virtualization (App-V). ms.pagetype: mdop, appcompat, virtualization ms.mktglfcycl: deploy ms.sitesec: library diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-conditional-access.md b/windows/security/identity-protection/hello-for-business/hello-feature-conditional-access.md index a1810a0b03..c2c8040070 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-conditional-access.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-conditional-access.md @@ -1,6 +1,6 @@ --- title: Conditional Access -description: Learn more about conditional access in Azure Active Directory. +description: Ensure that only approved users can access your devices, applications, and services from anywhere by enabling single sign-on with Azure Active Directory. keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, cert-trust, device, registration, unlock, conditional access ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md index b05666bfbf..3d4d9a401b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md @@ -1,7 +1,7 @@ --- title: Microsoft Defender ATP APIs connection to Power BI ms.reviewer: -description: Create custom reports using Power BI +description: Create a Power Business Intelligence (BI) report on top of Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) APIs. keywords: apis, supported apis, Power BI, reports search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md index f012975e19..76f0026262 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md @@ -1,6 +1,6 @@ --- title: Get alert related IPs information -description: Retrieves all IPs related to a specific alert. +description: Retrieve all IPs related to a specific alert using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). keywords: apis, graph api, supported apis, get alert information, alert information, related ip search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md index 9bc08c2680..5d0c64e02c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md @@ -1,6 +1,6 @@ --- title: Get IP statistics API -description: Retrieves the prevalence for the given IP. +description: Get the latest stats for your IP using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). keywords: apis, graph api, supported apis, get, ip, statistics, prevalence search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-kbinfo-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-kbinfo-collection.md index 55e74662e6..f922b6a35e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-kbinfo-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-kbinfo-collection.md @@ -1,6 +1,6 @@ --- title: Get KB collection API -description: Retrieves a collection of KB's. +description: Retrieve a collection of knowledge bases (KB's) and KB details with Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). keywords: apis, graph api, supported apis, get, kb search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/windows-firewall/exemption-list.md b/windows/security/threat-protection/windows-firewall/exemption-list.md index 5911a0bedc..f66bc68daa 100644 --- a/windows/security/threat-protection/windows-firewall/exemption-list.md +++ b/windows/security/threat-protection/windows-firewall/exemption-list.md @@ -1,6 +1,6 @@ --- title: Exemption List (Windows 10) -description: Exemption List +description: Learn the ins and outs of exemption lists on a secured network using Windows 10. ms.assetid: a05e65b4-b48d-44b1-a7f1-3a8ea9c19ed8 ms.reviewer: ms.author: dansimp @@ -23,7 +23,7 @@ ms.date: 04/19/2017 - Windows 10 - Windows Server 2016 -When you implement a server and domain isolation security model in your organization, you are likely to find some additional challenges. Key infrastructure servers such as DNS servers and DHCP servers typically must be available to all devicess on the internal network, yet secured from network attacks. However, if they must remain available to all devicess on the network, not just to isolated domain members, then these servers cannot require IPsec for inbound access, nor can they use IPsec transport mode for outbound traffic. +When you implement a server and domain isolation security model in your organization, you are likely to find some additional challenges. Key infrastructure servers such as DNS servers and DHCP servers typically must be available to all devices on the internal network, yet secured from network attacks. However, if they must remain available to all devices on the network, not just to isolated domain members, then these servers cannot require IPsec for inbound access, nor can they use IPsec transport mode for outbound traffic. In addition to the infrastructure servers mentioned earlier, there might also be other servers on the network that trusted devices cannot use IPsec to access, which would be added to the exemption list. diff --git a/windows/security/threat-protection/windows-firewall/restrict-server-access-to-members-of-a-group-only.md b/windows/security/threat-protection/windows-firewall/restrict-server-access-to-members-of-a-group-only.md index 223595ed41..92f54d794a 100644 --- a/windows/security/threat-protection/windows-firewall/restrict-server-access-to-members-of-a-group-only.md +++ b/windows/security/threat-protection/windows-firewall/restrict-server-access-to-members-of-a-group-only.md @@ -1,6 +1,6 @@ --- title: Restrict Server Access to Members of a Group Only (Windows 10) -description: Restrict Server Access to Members of a Group Only +description: Create a firewall rule to access isolated servers running Windows Server 2008 or later and restrict server access to members of a group. ms.assetid: ea51c55b-e1ed-44b4-82e3-3c4287a8628b ms.reviewer: ms.author: dansimp From e229d06818533c1266bf2caf8d75d2bd073c4780 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 11 May 2020 18:31:55 -0700 Subject: [PATCH 096/177] added 2004 --- windows/privacy/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/privacy/TOC.md b/windows/privacy/TOC.md index de11fa6d06..7b4b3156b1 100644 --- a/windows/privacy/TOC.md +++ b/windows/privacy/TOC.md @@ -21,6 +21,7 @@ ## Manage Windows 10 connection endpoints ### [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) ### [Manage connections from Windows operating system components to Microsoft services using MDM](manage-connections-from-windows-operating-system-components-to-microsoft-services-using-MDM.md) +### [Connection endpoints for Windows 10, version 2004](manage-windows-2004-endpoints.md) ### [Connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints.md) ### [Connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md) ### [Connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md) From 3502670d8b1984d7a15a82d203c451ee26013fce Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 11 May 2020 18:34:19 -0700 Subject: [PATCH 097/177] Fixing toc to the new page --- windows/privacy/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/TOC.md b/windows/privacy/TOC.md index 7b4b3156b1..aa2eb4186a 100644 --- a/windows/privacy/TOC.md +++ b/windows/privacy/TOC.md @@ -21,11 +21,11 @@ ## Manage Windows 10 connection endpoints ### [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) ### [Manage connections from Windows operating system components to Microsoft services using MDM](manage-connections-from-windows-operating-system-components-to-microsoft-services-using-MDM.md) -### [Connection endpoints for Windows 10, version 2004](manage-windows-2004-endpoints.md) ### [Connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints.md) ### [Connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md) ### [Connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md) ### [Connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md) +### [Connection endpoints for non-Enterprise editions of Windows 10, version 2004](windows-endpoints-2004-non-enterprise-editions.md) ### [Connection endpoints for non-Enterprise editions of Windows 10, version 1903](windows-endpoints-1903-non-enterprise-editions.md) ### [Connection endpoints for non-Enterprise editions of Windows 10, version 1809](windows-endpoints-1809-non-enterprise-editions.md) ### [Connection endpoints for non-Enterprise editions of Windows 10, version 1803](windows-endpoints-1803-non-enterprise-editions.md) From 57f13617a89f01d310f8e9d96a71fe960bbb515a Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 11 May 2020 19:03:59 -0700 Subject: [PATCH 098/177] Update clarifications This adds year to update lines and lowers build number to a bullet, I also added "fixes and updates" to each section to keep formatting happy. --- devices/hololens/hololens-release-notes.md | 33 ++++++++++++++++------ 1 file changed, 25 insertions(+), 8 deletions(-) diff --git a/devices/hololens/hololens-release-notes.md b/devices/hololens/hololens-release-notes.md index 38498ccf8e..803ed908c4 100644 --- a/devices/hololens/hololens-release-notes.md +++ b/devices/hololens/hololens-release-notes.md @@ -163,11 +163,13 @@ Improvements and Fixes also in the update: - Added ‘Share’ button in Feedback Hub so users can more easily share feedback. - Fixed a bug where RoboRaid did not install correctly. -### Windows Holographic, version 1903 - May Update - build 18362.1061 +### Windows Holographic, version 1903 - May 2020 Update +- Build 18362.1061 -This monthly quality update does not contain any changes of note because the team has been focused on providing you with the highest quality Feature Update, with the Windows Holographic, version 2004 May Update being generally avalible for all we wanted to bring you the best possible experience with that feature update. Please take this opportunity to move to the latest feature update to get a ton of exciting new changes. +This monthly quality update does not contain any changes of note because the team has been focused on providing you with the highest quality Feature Update now available in the Windows Holographic, version 2004 May Update detailed above. Please take this opportunity to move to the latest feature update to get a ton of exciting new changes. -### Windows Holographic, version 1903 - April Update - build 18362.1059 +### Windows Holographic, version 1903 - April 2020 Update +- Build 18362.1059 **Dark mode for supported apps** @@ -192,31 +194,46 @@ Here are some of the in-box apps that support dark mode: - Improve hologram stability in mixed reality capture when the HolographicDepthReprojectionMethod DepthReprojection algorithm is used. - Fixed WinRT IStreamSocketListener API Class Not Registered error on 32-bit ARM app. -### Windows Holographic, version 1903 - March Update - build 18362.1056 +### Windows Holographic, version 1903 - March 2020 Update +- Build 18362.1056 + +Improvements and fixes in the update: - Improve hologram stability in mixed reality capture when the HolographicDepthReprojectionMethod AutoPlanar algorithm is used. - Ensures the coordinate system attached to a depth MF sample is consistent with public documentation. - Developers productivity improvement by enabling customers to paste large amount of text through device portal. -### Windows Holographic, version 1903 - February Update - build 18362.1053 +### Windows Holographic, version 1903 - February 2020 Update +- Build 18362.1053 + +Improvements and fixes in the update: - Temporarily disabled the HolographicSpace.UserPresence API for Unity applications to avoid an issue which causes some apps to pause when the visor is flipped up, even if the setting to run in the background is enabled. - Fixed a random HUP crash cased by hand tracking, in which user will notice an UI freeze then back to shell after several seconds. - We made an improvement in hand tracking so that while poking using index finger, the upper part of that finger will be less likely to curl unexpectedly. - Improved reliability of head tracking, spatial mapping, and other runtimes. -### Windows Holographic, version 1903 - January Update - build 18362.1043 +### Windows Holographic, version 1903 - January 2020 Update +- Build 18362.1043 + +Improvement in the update: - Stability improvements for exclusive apps when working with the HoloLens 2 emulator. -### Windows Holographic, version 1903 - December Update - build 18362.1042 +### Windows Holographic, version 1903 - December 2019 Update +- Build 18362.1042 + +Improvements and fixes in the update: - Introduces LSR (Last Stage Reproduction) fixes. Improves visual rendering of holograms to appear more stable and crisp by more accurately accounting for their depth. This will be more noticeable if apps do not set the depth of holograms correctly, after this update. - Fixes stability of exclusive apps and navigation between exclusive apps. - Resolves an issue where Mixed Reality Capture couldn't record video after device is left in standby state for multiple days. - Improves hologram stability. -### Windows Holographic, version 1903 - November Update - build 18362.1039 +### Windows Holographic, version 1903 - November 2019 Update +- Build 18362.1039 + +Improvements and fixes in the update: - Fixes for **"Select"** voice commands during initial set-up for en-CA and en-AU. - Improvements in visual quality of objects placed far away in latest Unity and MRTK versions. From 1150632a365aca6a908a863c0ea304ac8ccd4195 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 11 May 2020 19:40:18 -0700 Subject: [PATCH 099/177] Charlie's feedback Fixes based on Charlie's feedback. Need to make a release note page split. --- devices/hololens/hololens-release-notes.md | 24 +++++++++++----------- 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/devices/hololens/hololens-release-notes.md b/devices/hololens/hololens-release-notes.md index 803ed908c4..49ea582837 100644 --- a/devices/hololens/hololens-release-notes.md +++ b/devices/hololens/hololens-release-notes.md @@ -23,10 +23,7 @@ appliesto: ## HoloLens 2 -> [!Note] -> HoloLens Emulator Release Notes can be found [here](https://docs.microsoft.com/windows/mixed-reality/hololens-emulator-archive). - -### Windows Holographic, version 2004 May Update +### Windows Holographic, version 2004 May 2020 Update Build - 19041.1103 | Feature | Description | @@ -36,11 +33,14 @@ Build - 19041.1103 | Improved provisioning | Seamlessly apply a provisioning package from a USB drive to your HoloLens | | Application install status | Check install status for apps have been pushed to HoloLens 2 via MDM, in the Settings app | | Configuration Service Providers (CSPs) | Added new Configuration Service Providers (CSPs) enhancing admin control capabilities. | -| USB 5G/LTE tethering | Expanded USB Ethernet capability enables support for 5G/LTE dongles | +| USB 5G/LTE support | Expanded USB Ethernet capability enables support for 5G/LTE dongles | | Dark App Mode | Dark App Mode for apps that support both dark and light modes, improving the viewing experience | | Voice Commands | Support for additional system voice commands to control HoloLens, hands-free | | Hand Tracking improvements | Hand Tracking improvements make buttons and 2D slate interactions more accurate | -| Performance and reliability | Various system performance and reliability improvements across the platform | +| Quality improvements and fixes | Various system performance and reliability improvements across the platform | + +> [!Note] +> HoloLens Emulator Release Notes can be found [here](https://docs.microsoft.com/windows/mixed-reality/hololens-emulator-archive). #### Support for Windows Autopilot @@ -56,7 +56,7 @@ When a user starts the Autopilot self-deploying process, the process completes t Learn more from the [Windows Autopilot for HoloLens 2 evaluation guide](https://docs.microsoft.com/hololens/hololens2-autopilot). -**Contact your Account Manager to join the AutoPilot preview now. Autopilot-ready devices will begin shipping around June.** +**Contact your Account Manager to join the AutoPilot preview now. Autopilot-ready devices will begin shipping soon.** #### FIDO2 Security Key support @@ -77,7 +77,7 @@ Provisioning packages let you set HoloLens configuration through a config file r 1. Build your configuration profile and, when you're done, copy all files created to a USB-C storage device. 1. Plug it into any freshly flashed HoloLens and press **Volume down + Power** to apply your provisioning package. -#### MDM Policies +#### Line of Business application install status MDM app deployment and management for Line of Business (LOB) apps is critical for our customers. Admins and users need to be able to view app install status, for auditing and diagnosis purposes. In this release we are adding more details in **Settings > Accounts > Access work or school > Click on your account > Info.** @@ -108,7 +108,7 @@ The NetworkQoSPolicy configuration service provider creates network Quality of S Support has been added to enable certain mobile broadband devices, such as 5G/LTE phones and WiFi hotpots when tethered to the HoloLens 2 via USB. These devices will be displayed in network settings as another ethernet connection. Mobile broadband devices that require an external driver are not supported. This enables high bandwidth connections in scenarios where WiFi is not available, and WiFi tethering isn’t performant enough. You can learn more about supported USB devices [here](https://docs.microsoft.com/hololens/hololens-connect-devices). -Hand Tracking Improvements +#### Hand Tracking Improvements Hand tracking has received several improvements in this release. @@ -143,10 +143,10 @@ You can now quickly access and use commands with your voice while using any app The updated app integrates with Microsoft 365, currently in English (United States) only, to help you get more done across your devices. On HoloLens 2, Cortana will no longer support certain device-specific commands like adjusting the volume or restarting the device, which are now supported with the new system voice commands mentioned above. Learn more about the new Cortana app and its direction on our blog [here](https://blogs.windows.com/windowsexperience/2020/02/28/cortana-in-the-upcoming-windows-10-release-focused-on-your-productivity-with-enhanced-security-and-privacy/). -> ![NOTE] -> Note: There's currently an issue we're investigating that requires you to launch the app after booting the device in order to use the "Hey Cortana" keyword activation, and if you updated from a 18362 build, you may see an app tile for the previous version of the Cortana app in Start that no longer works. +> [!NOTE] +> There's currently an issue we're investigating that requires you to launch the app after booting the device in order to use the "Hey Cortana" keyword activation, and if you updated from a 18362 build, you may see an app tile for the previous version of the Cortana app in Start that no longer works. -#### Quality improvements & fixes +#### Quality improvements and fixes Improvements and Fixes also in the update: - The update introduces an active display calibration system. This improves the stability and alignment of holograms, which helps them stay in place when moving your head side-to-side. From 70516dd58e69567d3ad7b095b15bec019dc2623c Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 11 May 2020 20:08:15 -0700 Subject: [PATCH 100/177] Create hololens1-release-notes.md removed picture links as they weren't working as due to time crunch I don't wish to find out why --- devices/hololens/hololens1-release-notes.md | 84 +++++++++++++++++++++ 1 file changed, 84 insertions(+) create mode 100644 devices/hololens/hololens1-release-notes.md diff --git a/devices/hololens/hololens1-release-notes.md b/devices/hololens/hololens1-release-notes.md new file mode 100644 index 0000000000..a3161db695 --- /dev/null +++ b/devices/hololens/hololens1-release-notes.md @@ -0,0 +1,84 @@ +--- +title: HoloLens 1st (Gen) release notes +description: Learn about updates in each new HoloLens release. +author: evmill +ms.author: evmill +manager: yannisle +ms.prod: hololens +ms.sitesec: library +ms.topic: article +ms.localizationpriority: medium +ms.date: 05/12/2020 +ms.custom: +- CI 111456 +- CSSTroubleshooting +audience: ITPro +appliesto: +- HoloLens 1 + +--- + +# HoloLens 1st (Gen) release notes + +### Windows 10 Holographic, version 1809 + +> **Applies to:** Hololens (1st gen) + +| Feature | Details | +|---|---| +| **Quick actions menu** | When you're in an app, the Bloom gesture will now open a Quick actions menu to give you quick access to commonly used system features without having to leave the app.
    See [Set up HoloLens in kiosk mode](hololens-kiosk.md) for information about the Quick actions menu in kiosk mode.

    | +| **Stop video capture from the Start or quick actions menu** | If you start video capture from the Start menu or quick actions menu, you'll be able to stop recording from the same place. (Don't forget, you can always do this with voice commands too.) | +| **Project to a Miracast-enabled device** | Project your HoloLens content to a nearby Surface device or TV/Monitor if using Microsoft Display adapter. On **Start**, select **Connect**, and then select the device you want to project to. **Note:** You can deploy HoloLens to use Miracast projection without enabling developer mode. | +| **New notifications** | View and respond to notification toasts on HoloLens, just like you do on a PC. Gaze to respond to or dismiss them (or if you're in an immersive experience, use the bloom gesture). | +| **HoloLens overlays**
    (file picker, keyboard, dialogs, etc.) | You'll now see overlays such as the keyboard, dialogs, file picker, etc. when using immersive apps. | +| **Visual feedback overlay UI for volume change** | When you use the volume up/down buttons on your HoloLens you'll see a visual display of the volume level. | +| **New UI for device boot** | A loading indicator was added during the boot process to provide visual feedback that the system is loading. Reboot your device to see the new loading indicator—it's between the "Hello" message and the Windows boot logo. | +| **Nearby sharing** | Addition of the Windows Nearby Sharing experience, allowing you to share a capture with a nearby Windows device. When you capture a photo or video on HoloLens (or use the share button from an app such as Microsoft Edge), select a nearby Windows device to share with. | +| **Share from Microsoft Edge** | Share button is now available on Microsoft Edge windows on HoloLens. In Microsoft Edge, select **Share**. Use the HoloLens share picker to share web content. | + +#### For international customers + +| Feature | Details | +| --- | --- | +| Localized Chinese and Japanese builds | Use HoloLens with localized user interface for Simplified Chinese or Japanese, including localized Pinyin keyboard, dictation, and voice commands.
    [Learn how to install the Chinese and Japanese versions of HoloLens.](hololens1-install-localized.md) | +| Speech Synthesis (TTS) | Speech synthesis feature now supports Chinese, Japanese, and English. | + +#### For administrators + +| Feature | Details | +|---|----| +| [Enable post-setup provisioning](hololens-provisioning.md) | You can now apply a runtime provisioning package at any time using **Settings**. | +| Assigned access with Azure AD groups | You can now use Azure AD groups for configuration of Windows assigned access to set up single or multi-app kiosk configuration. | +| PIN sign-in on profile switch from sign-in screen | PIN sign-in is now available for **Other User**. | +| Sign in with Web Credential Provider using password | You can now select the Globe sign-in option to launch web sign-in with your password. From the sign-in screen, select **Sign-In options** and select the Globe option to launch web sign-in. Enter your user name if needed, then your password.
    **Note:** You can choose to bypass any PIN/Smartcard options when prompted during web sign-in. | +| Read device hardware info through MDM so devices can be tracked by serial number | IT administrators can see and track HoloLens by device serial number in their MDM console. Refer to your MDM documentation for feature availability and instructions. | +| Set HoloLens device name through MDM (rename) | IT administrators can see and rename HoloLens devices in their MDM console. Refer to your MDM documentation for feature availability and instructions. | + +### Windows 10, version 1803 for Microsoft HoloLens + +> **Applies to:** Hololens (1st gen) + +Windows 10, version 1803, is the first feature update to Windows Holographic for Business since its release in Windows 10, version 1607. This update introduces the following changes: + +- Previously, you could only verify that upgrade license for Commercial Suite had been applied to your HoloLens device by checking to see if VPN was an available option on the device. Now, **Settings** > **System** will display **Windows Holographic for Business** after the upgrade license is applied. [Learn how to unlock Windows Holographic for Business features](hololens1-upgrade-enterprise.md). + +- You can view the operating system build number in device properties in the File Explorer app and in the [Windows Device Recovery Tool (WDRT)](https://support.microsoft.com/help/12379/windows-10-mobile-device-recovery-tool-faq). +- Provisioning a HoloLens device is now easier with the new **Provision HoloLens devices** wizard in the Windows Configuration Designer tool. In the wizard, you can configure the setup experience and network connections, set developer mode, and obtain bulk Azure AD tokens. [Learn how to use the simple provisioning wizard for HoloLens](hololens-provisioning.md#provisioning-package-hololens-wizard). + +- When you create a local account in a provisioning package, the password no longer expires every 42 days. + +- You can [configure HoloLens as a single-app or multi-app kiosk](hololens-kiosk.md). Multi-app kiosk mode lets you set up a HoloLens to only run the apps that you specify, and prevents users from making changes. + +- Media Transfer Protocol (MTP) is enabled so that you can connect the HoloLens device to a PC by USB and transfer files between HoloLens and the PC. You can also use the File Explorer app to move and delete files from within HoloLens. + +- Previously, after you signed in to the device with an Azure Active Directory (Azure AD) account, you then had to **Add work access** in **Settings** to get access to corporate resources. Now, you sign in with an Azure AD account and enrollment happens automatically. + +- Before you sign in, you can choose the network icon below the password field to choose a different Wi-Fi network to connect to. You can also connect to a guest network, such as at a hotel, conference center, or business. + +- You can now easily [share HoloLens with multiple people](hololens-multiple-users.md) using Azure AD accounts. + +- When setup or sign-in fails, choose the new **Collect info** option to get diagnostic logs for troubleshooting. + +- Individual users can sync their corporate email without enrolling their device in mobile device management (MDM). You can use the device with a Microsoft Account, download and install the Mail app, and add an email account directly. + +- You can check the MDM sync status for a device in **Settings** > **Accounts** > **Access Work or School** > **Info**. In the **Device sync status** section, you can start a sync, see areas managed by MDM, and create and export an advanced diagnostics report. From aa3c21db004983c5720d2d5a5d3a995a5e813f0c Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 11 May 2020 20:12:50 -0700 Subject: [PATCH 101/177] Remove HL1 - Headers promote Removed HL1 to it's own page, promoted headers. --- devices/hololens/hololens-release-notes.md | 110 ++++----------------- 1 file changed, 21 insertions(+), 89 deletions(-) diff --git a/devices/hololens/hololens-release-notes.md b/devices/hololens/hololens-release-notes.md index 49ea582837..eada20759c 100644 --- a/devices/hololens/hololens-release-notes.md +++ b/devices/hololens/hololens-release-notes.md @@ -1,5 +1,5 @@ --- -title: HoloLens release notes +title: HoloLens 2 release notes description: Learn about updates in each new HoloLens release. author: scooley ms.author: scooley @@ -14,16 +14,13 @@ ms.custom: - CSSTroubleshooting audience: ITPro appliesto: -- HoloLens 1 - HoloLens 2 --- -# HoloLens release notes +# HoloLens 2 release notes -## HoloLens 2 - -### Windows Holographic, version 2004 May 2020 Update +## Windows Holographic, version 2004 May 2020 Update Build - 19041.1103 | Feature | Description | @@ -42,7 +39,7 @@ Build - 19041.1103 > [!Note] > HoloLens Emulator Release Notes can be found [here](https://docs.microsoft.com/windows/mixed-reality/hololens-emulator-archive). -#### Support for Windows Autopilot +### Support for Windows Autopilot Windows Autopilot for HoloLens 2 lets the device sales channel pre-enroll HoloLens into your Intune tenant. When devices arrive, they’re ready to self-deploy as shared devices under your tenant. To take advantage of self-deployment, devices will need to connect to a network during the first screen in setup using either a USB-C to ethernet dongle or USB-C to LTE dongle. @@ -58,7 +55,7 @@ Learn more from the [Windows Autopilot for HoloLens 2 evaluation guide](https:// **Contact your Account Manager to join the AutoPilot preview now. Autopilot-ready devices will begin shipping soon.** -#### FIDO2 Security Key support +### FIDO2 Security Key support Many of you share a HoloLens device with lots of people in a work or school environment. Whether devices are shared between students in a classroom or they're checked out from a device locker, it's important to be able to change users quickly and easily without typing long usernames and passwords. @@ -68,7 +65,7 @@ FIDO2 security keys are an unphishable standards-based passwordless authenticati Read the [passwordless security docs](https://docs.microsoft.com/azure/active-directory/authentication/howto-authentication-passwordless-security-key) to get started. -#### Improved MDM enrollment via provisioning package +### Improved MDM enrollment via provisioning package Provisioning packages let you set HoloLens configuration through a config file rather than going through the HoloLens out of box experience. Previously, provisioning packages had to be copied onto HoloLens' internal memory, now they can be on a USB drive so they're easier to re-use on multiple HoloLens and so more people can provision HoloLens in parallel. In addition, provisioning packages support a new field to enroll in device management so there is no manual set up post-provisioning. @@ -77,11 +74,11 @@ Provisioning packages let you set HoloLens configuration through a config file r 1. Build your configuration profile and, when you're done, copy all files created to a USB-C storage device. 1. Plug it into any freshly flashed HoloLens and press **Volume down + Power** to apply your provisioning package. -#### Line of Business application install status +### Line of Business application install status MDM app deployment and management for Line of Business (LOB) apps is critical for our customers. Admins and users need to be able to view app install status, for auditing and diagnosis purposes. In this release we are adding more details in **Settings > Accounts > Access work or school > Click on your account > Info.** -#### Additional CSPs and Policies +### Additional CSPs and Policies A [configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/configuration-service-provider-reference?redirectedfrom=MSDN) is an interface to read, set, modify, or delete configuration settings on a device. In this release, we are adding support for more policies, increasing the control administrators have over deployed HoloLens devices. For the list of CSPs supported by HoloLens, visit this [link](https://docs.microsoft.com/windows/client-management/mdm/networkqospolicy-csp). New in this release: @@ -104,11 +101,11 @@ The Policy configuration service provider enables the enterprise to configure po **NetworkQoSPolicy CSP** The NetworkQoSPolicy configuration service provider creates network Quality of Service (QoS) policies. A QoS policy performs a set of actions on network traffic based on a set of matching conditions. You can learn more about this policy [here](https://docs.microsoft.com/windows/client-management/mdm/networkqospolicy-csp). -##### Expanded USB Ethernet support for 5G/LTE tethered devices +### Expanded USB Ethernet support for 5G/LTE tethered devices Support has been added to enable certain mobile broadband devices, such as 5G/LTE phones and WiFi hotpots when tethered to the HoloLens 2 via USB. These devices will be displayed in network settings as another ethernet connection. Mobile broadband devices that require an external driver are not supported. This enables high bandwidth connections in scenarios where WiFi is not available, and WiFi tethering isn’t performant enough. You can learn more about supported USB devices [here](https://docs.microsoft.com/hololens/hololens-connect-devices). -#### Hand Tracking Improvements +### Hand Tracking Improvements Hand tracking has received several improvements in this release. @@ -118,7 +115,7 @@ Hand tracking has received several improvements in this release. - **Reduced hand stealing:** We’ve improved handling of cases where there are more than 2 hands in view of the sensors. If multiple people are working close together, there is now a much lower chance that the tracked hand will jump from the user to the hand of someone else in the scene. - **System reliability:** Fixed an issue that would cause hand tracking to stop working for a period if the device is under high load. -#### Dark mode +### Dark mode Many Windows apps now support both dark and light modes, and HoloLens 2 customers can choose the default mode for apps that support both. Once updated, the default app mode will be "dark," but can be changed easily. Navigate to Settings > System > Colors to find "Choose your default app mode." Here are some of the in-box apps that support Dark mode: @@ -135,18 +132,18 @@ Many Windows apps now support both dark and light modes, and HoloLens 2 customer ![Dark mode windows tiled](images/hololens-darkmode-tiled-picture.jpg) -#### System voice commands +### System voice commands You can now quickly access and use commands with your voice while using any app on the device. If you're running your system with a different language, please try the appropriate commands in that language. For more details on the commands and how to use them, see our documentation [here](https://docs.microsoft.com/hololens/hololens-cortana). -#### Cortana updates +### Cortana updates The updated app integrates with Microsoft 365, currently in English (United States) only, to help you get more done across your devices. On HoloLens 2, Cortana will no longer support certain device-specific commands like adjusting the volume or restarting the device, which are now supported with the new system voice commands mentioned above. Learn more about the new Cortana app and its direction on our blog [here](https://blogs.windows.com/windowsexperience/2020/02/28/cortana-in-the-upcoming-windows-10-release-focused-on-your-productivity-with-enhanced-security-and-privacy/). > [!NOTE] > There's currently an issue we're investigating that requires you to launch the app after booting the device in order to use the "Hey Cortana" keyword activation, and if you updated from a 18362 build, you may see an app tile for the previous version of the Cortana app in Start that no longer works. -#### Quality improvements and fixes +### Quality improvements and fixes Improvements and Fixes also in the update: - The update introduces an active display calibration system. This improves the stability and alignment of holograms, which helps them stay in place when moving your head side-to-side. @@ -163,12 +160,12 @@ Improvements and Fixes also in the update: - Added ‘Share’ button in Feedback Hub so users can more easily share feedback. - Fixed a bug where RoboRaid did not install correctly. -### Windows Holographic, version 1903 - May 2020 Update +## Windows Holographic, version 1903 - May 2020 Update - Build 18362.1061 This monthly quality update does not contain any changes of note because the team has been focused on providing you with the highest quality Feature Update now available in the Windows Holographic, version 2004 May Update detailed above. Please take this opportunity to move to the latest feature update to get a ton of exciting new changes. -### Windows Holographic, version 1903 - April 2020 Update +## Windows Holographic, version 1903 - April 2020 Update - Build 18362.1059 **Dark mode for supported apps** @@ -194,7 +191,7 @@ Here are some of the in-box apps that support dark mode: - Improve hologram stability in mixed reality capture when the HolographicDepthReprojectionMethod DepthReprojection algorithm is used. - Fixed WinRT IStreamSocketListener API Class Not Registered error on 32-bit ARM app. -### Windows Holographic, version 1903 - March 2020 Update +## Windows Holographic, version 1903 - March 2020 Update - Build 18362.1056 Improvements and fixes in the update: @@ -203,7 +200,7 @@ Improvements and fixes in the update: - Ensures the coordinate system attached to a depth MF sample is consistent with public documentation. - Developers productivity improvement by enabling customers to paste large amount of text through device portal. -### Windows Holographic, version 1903 - February 2020 Update +## Windows Holographic, version 1903 - February 2020 Update - Build 18362.1053 Improvements and fixes in the update: @@ -213,14 +210,14 @@ Improvements and fixes in the update: - We made an improvement in hand tracking so that while poking using index finger, the upper part of that finger will be less likely to curl unexpectedly. - Improved reliability of head tracking, spatial mapping, and other runtimes. -### Windows Holographic, version 1903 - January 2020 Update +## Windows Holographic, version 1903 - January 2020 Update - Build 18362.1043 Improvement in the update: - Stability improvements for exclusive apps when working with the HoloLens 2 emulator. -### Windows Holographic, version 1903 - December 2019 Update +## Windows Holographic, version 1903 - December 2019 Update - Build 18362.1042 Improvements and fixes in the update: @@ -230,7 +227,7 @@ Improvements and fixes in the update: - Resolves an issue where Mixed Reality Capture couldn't record video after device is left in standby state for multiple days. - Improves hologram stability. -### Windows Holographic, version 1903 - November 2019 Update +## Windows Holographic, version 1903 - November 2019 Update - Build 18362.1039 Improvements and fixes in the update: @@ -240,69 +237,4 @@ Improvements and fixes in the update: - Fixes addressing issues with holographic applications being stuck in a paused state on launch until the pins panel is brought up and dismissed again. - OpenXR runtime conformance fixes and improvements for HoloLens 2 and the emulator. -## HoloLens (1st gen) -### Windows 10 Holographic, version 1809 - -> **Applies to:** Hololens (1st gen) - -| Feature | Details | -|---|---| -| **Quick actions menu** | When you're in an app, the Bloom gesture will now open a Quick actions menu to give you quick access to commonly used system features without having to leave the app.
    See [Set up HoloLens in kiosk mode](hololens-kiosk.md) for information about the Quick actions menu in kiosk mode.

    ![sample of the Quick actions menu](images/minimenu.png) | -| **Stop video capture from the Start or quick actions menu** | If you start video capture from the Start menu or quick actions menu, you'll be able to stop recording from the same place. (Don't forget, you can always do this with voice commands too.) | -| **Project to a Miracast-enabled device** | Project your HoloLens content to a nearby Surface device or TV/Monitor if using Microsoft Display adapter. On **Start**, select **Connect**, and then select the device you want to project to. **Note:** You can deploy HoloLens to use Miracast projection without enabling developer mode. | -| **New notifications** | View and respond to notification toasts on HoloLens, just like you do on a PC. Gaze to respond to or dismiss them (or if you're in an immersive experience, use the bloom gesture). | -| **HoloLens overlays**
    (file picker, keyboard, dialogs, etc.) | You'll now see overlays such as the keyboard, dialogs, file picker, etc. when using immersive apps. | -| **Visual feedback overlay UI for volume change** | When you use the volume up/down buttons on your HoloLens you'll see a visual display of the volume level. | -| **New UI for device boot** | A loading indicator was added during the boot process to provide visual feedback that the system is loading. Reboot your device to see the new loading indicator—it's between the "Hello" message and the Windows boot logo. | -| **Nearby sharing** | Addition of the Windows Nearby Sharing experience, allowing you to share a capture with a nearby Windows device. When you capture a photo or video on HoloLens (or use the share button from an app such as Microsoft Edge), select a nearby Windows device to share with. | -| **Share from Microsoft Edge** | Share button is now available on Microsoft Edge windows on HoloLens. In Microsoft Edge, select **Share**. Use the HoloLens share picker to share web content. | - -#### For international customers - -| Feature | Details | -| --- | --- | -| Localized Chinese and Japanese builds | Use HoloLens with localized user interface for Simplified Chinese or Japanese, including localized Pinyin keyboard, dictation, and voice commands.
    [Learn how to install the Chinese and Japanese versions of HoloLens.](hololens1-install-localized.md) | -| Speech Synthesis (TTS) | Speech synthesis feature now supports Chinese, Japanese, and English. | - -#### For administrators - -| Feature | Details | -|---|----| -| [Enable post-setup provisioning](hololens-provisioning.md) | You can now apply a runtime provisioning package at any time using **Settings**. | -| Assigned access with Azure AD groups | You can now use Azure AD groups for configuration of Windows assigned access to set up single or multi-app kiosk configuration. | -| PIN sign-in on profile switch from sign-in screen | PIN sign-in is now available for **Other User**. | -| Sign in with Web Credential Provider using password | You can now select the Globe sign-in option to launch web sign-in with your password. From the sign-in screen, select **Sign-In options** and select the Globe option to launch web sign-in. Enter your user name if needed, then your password.
    **Note:** You can choose to bypass any PIN/Smartcard options when prompted during web sign-in. | -| Read device hardware info through MDM so devices can be tracked by serial number | IT administrators can see and track HoloLens by device serial number in their MDM console. Refer to your MDM documentation for feature availability and instructions. | -| Set HoloLens device name through MDM (rename) | IT administrators can see and rename HoloLens devices in their MDM console. Refer to your MDM documentation for feature availability and instructions. | - -### Windows 10, version 1803 for Microsoft HoloLens - -> **Applies to:** Hololens (1st gen) - -Windows 10, version 1803, is the first feature update to Windows Holographic for Business since its release in Windows 10, version 1607. This update introduces the following changes: - -- Previously, you could only verify that upgrade license for Commercial Suite had been applied to your HoloLens device by checking to see if VPN was an available option on the device. Now, **Settings** > **System** will display **Windows Holographic for Business** after the upgrade license is applied. [Learn how to unlock Windows Holographic for Business features](hololens1-upgrade-enterprise.md). - -- You can view the operating system build number in device properties in the File Explorer app and in the [Windows Device Recovery Tool (WDRT)](https://support.microsoft.com/help/12379/windows-10-mobile-device-recovery-tool-faq). -- Provisioning a HoloLens device is now easier with the new **Provision HoloLens devices** wizard in the Windows Configuration Designer tool. In the wizard, you can configure the setup experience and network connections, set developer mode, and obtain bulk Azure AD tokens. [Learn how to use the simple provisioning wizard for HoloLens](hololens-provisioning.md#provisioning-package-hololens-wizard). - - ![Provisioning HoloLens devices](images/provision-hololens-devices.png) - -- When you create a local account in a provisioning package, the password no longer expires every 42 days. - -- You can [configure HoloLens as a single-app or multi-app kiosk](hololens-kiosk.md). Multi-app kiosk mode lets you set up a HoloLens to only run the apps that you specify, and prevents users from making changes. - -- Media Transfer Protocol (MTP) is enabled so that you can connect the HoloLens device to a PC by USB and transfer files between HoloLens and the PC. You can also use the File Explorer app to move and delete files from within HoloLens. - -- Previously, after you signed in to the device with an Azure Active Directory (Azure AD) account, you then had to **Add work access** in **Settings** to get access to corporate resources. Now, you sign in with an Azure AD account and enrollment happens automatically. - -- Before you sign in, you can choose the network icon below the password field to choose a different Wi-Fi network to connect to. You can also connect to a guest network, such as at a hotel, conference center, or business. - -- You can now easily [share HoloLens with multiple people](hololens-multiple-users.md) using Azure AD accounts. - -- When setup or sign-in fails, choose the new **Collect info** option to get diagnostic logs for troubleshooting. - -- Individual users can sync their corporate email without enrolling their device in mobile device management (MDM). You can use the device with a Microsoft Account, download and install the Mail app, and add an email account directly. - -- You can check the MDM sync status for a device in **Settings** > **Accounts** > **Access Work or School** > **Info**. In the **Device sync status** section, you can start a sync, see areas managed by MDM, and create and export an advanced diagnostics report. From ae40a6aba35fd7a160d22063fc373b5f89043df3 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 11 May 2020 20:35:42 -0700 Subject: [PATCH 102/177] update alias --- devices/hololens/hololens1-release-notes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens1-release-notes.md b/devices/hololens/hololens1-release-notes.md index a3161db695..4002d4b7ea 100644 --- a/devices/hololens/hololens1-release-notes.md +++ b/devices/hololens/hololens1-release-notes.md @@ -2,7 +2,7 @@ title: HoloLens 1st (Gen) release notes description: Learn about updates in each new HoloLens release. author: evmill -ms.author: evmill +ms.author: v-evmill manager: yannisle ms.prod: hololens ms.sitesec: library From b698fc68b45124dbb5f7f67a2a33d78ce7aefcf1 Mon Sep 17 00:00:00 2001 From: yogeshasalkar <50020908+yogeshasalkar@users.noreply.github.com> Date: Tue, 12 May 2020 04:34:41 +0000 Subject: [PATCH 103/177] Update windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../mdm/policy-csp-localpoliciessecurityoptions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md index ed5184af57..ae3db17fd9 100644 --- a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md +++ b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md @@ -2437,7 +2437,7 @@ Network security: Minimum session security for NTLM SSP based (including secure This security setting allows a client device to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. The options are: Require NTLMv2 session security: The connection will fail if message integrity is not negotiated. -Require 128-bit encryption. The connection will fail if strong encryption (128-bit) is not negotiated. +Require 128-bit encryption: The connection will fail if strong encryption (128-bit) is not negotiated. Default: From aec29d2a88bc34c0ab9824aa8846511b5bde6694 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Tue, 12 May 2020 09:37:09 +0500 Subject: [PATCH 104/177] Update configure-block-at-first-sight-windows-defender-antivirus.md --- ...-first-sight-windows-defender-antivirus.md | 20 ++++++++++++++++--- 1 file changed, 17 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md index af838d196f..fb691c6dea 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md @@ -117,14 +117,28 @@ For a list of Windows Defender Antivirus device restrictions in Intune, see [Dev If you had to change any of the settings, you should re-deploy the Group Policy Object across your network to ensure all endpoints are covered. -### Confirm block at first sight is enabled with the Windows Security app +### Confirm block at first sight is enabled with Registry editor -You can confirm that block at first sight is enabled in your Windows security settings. +1. Start Registry Editor. -Block at first sight is automatically enabled as long as **Cloud-delivered protection** and **Automatic sample submission** are both turned on. +2. Go to **HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet**, and make sure that + + 1. **SpynetReporting** key is set to **1** + + 2. **SubmitSamplesConsent** key is set to either **1** (Send safe samples) or **3** (Send all samples) + +3. Go to **HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection**, and make sure that + + 1. **DisableIOAVProtection** key is set to **0** + + 2. **DisableRealtimeMonitoring** key is set to **0** ### Confirm Block at First Sight is enabled on individual clients +You can confirm that block at first sight is enabled on individual clients using Windows security settings. + +Block at first sight is automatically enabled as long as **Cloud-delivered protection** and **Automatic sample submission** are both turned on. + 1. Open the Windows Security app. 2. Select **Virus & threat protection**, and then, under **Virus & threat protection settings**, select **Manage Settings**. From 8099e145a664d53cb8e44135addcafc6791110bf Mon Sep 17 00:00:00 2001 From: yogeshasalkar <50020908+yogeshasalkar@users.noreply.github.com> Date: Tue, 12 May 2020 04:40:52 +0000 Subject: [PATCH 105/177] Update windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../mdm/policy-csp-localpoliciessecurityoptions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md index ae3db17fd9..8eafd4ee9b 100644 --- a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md +++ b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md @@ -2443,7 +2443,7 @@ Default: Windows XP, Windows Vista, Windows 2000 Server, Windows Server 2003, and Windows Server 2008: No requirements. -Windows 7 and Windows Server 2008 R2: Require 128-bit encryption +Windows 7 and Windows Server 2008 R2: Require 128-bit encryption. From 8d7916858dd8d9c56be8ee1a2177ebbe278d4049 Mon Sep 17 00:00:00 2001 From: Obi Eze Ajoku <62227226+linque1@users.noreply.github.com> Date: Mon, 11 May 2020 22:32:15 -0700 Subject: [PATCH 106/177] New Manage Connections ENT page New Manage Connections ENT page --- .../privacy/manage-windows-2004-endpoints.md | 135 ++++++++++++++++++ 1 file changed, 135 insertions(+) create mode 100644 windows/privacy/manage-windows-2004-endpoints.md diff --git a/windows/privacy/manage-windows-2004-endpoints.md b/windows/privacy/manage-windows-2004-endpoints.md new file mode 100644 index 0000000000..a8c5513c4e --- /dev/null +++ b/windows/privacy/manage-windows-2004-endpoints.md @@ -0,0 +1,135 @@ +--- +title: Connection endpoints for Windows 10 Enterprise, version 2004 +description: Explains what Windows 10 endpoints are used for, how to turn off traffic to them, and the impact. Specific to Windows 10 Enterprise, version 2004. +keywords: privacy, manage connections to Microsoft, Windows 10 +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.localizationpriority: high +audience: ITPro +author: linque1 +ms.author: obezeajo +manager: robsize +ms.collection: M365-security-compliance +ms.topic: article +ms.date: 5/11/2020 +--- +# Manage connection endpoints for Windows 10 Enterprise, version 2004 + +**Applies to** + +- Windows 10 Enterprise, version 2004 + +Some Windows components, app, and related services transfer data to Microsoft network endpoints. Some examples include: + +- Connecting to Microsoft Office and Windows sites to download the latest app and security updates. +- Connecting to email servers to send and receive email. +- Connecting to the web for every day web browsing. +- Connecting to the cloud to store and access backups. +- Using your location to show a weather forecast. + +Details about the different ways to control traffic to these endpoints are covered in [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). +Where applicable, each endpoint covered in this topic includes a link to the specific details on how to control that traffic. + +The following methodology was used to derive these network endpoints: + +1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. +2. Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device). +3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. +4. Compile reports on traffic going to public IP addresses. +5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory. +6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here. +7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different. +8. These tests were conducted for one week, but if you capture traffic for longer you may have different results. + +> [!NOTE] +> Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time. + +## Windows 10 2004 Enterprise connection endpoints + +|Area|Description|Protocol|Destination| +|----------------|----------|----------|------------| +|Apps|||[Learn how to turn off traffic to the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore)| +||The following endpoint is used for the Weather app. To turn off traffic for this endpoint, either uninstall the Weather app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTPS|tile-service.weather.microsoft.com +||The following endpoint is used for OneNote Live Tile. To turn off traffic for this endpoint, either uninstall OneNote or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTPS|cdn.onenote.net/* +||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser. To turn off traffic for this endpoint, either uninstall the Photos app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|TLSv1.2|evoke-windowsservices-tas.msedge.net| +|Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available. It is possible turn off traffic to this endpoint, but that is not recommended because when root certificates are updated over time, applications and websites may stop working because they did not receive an updated root certificate the application uses. Additionally, it is used to download certificates that are publicly known to be fraudulent. These settings are critical for both Windows security and the overall security of the Internet. We do not recommend blocking this endpoint. If traffic to this endpoint is turned off, Windows no longer automatically downloads certificates known to be fraudulent, which increases the attack vector on the device.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#automatic-root-certificates-update)| +|||HTTP|ctldl.windowsupdate.com| +|Cortana and Search|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana)| +||The following endpoints are related to Cortana and Live Tiles. If you turn off traffic for this endpoint, you will block updates to Cortana greetings, tips, and Live Tiles.|TLSv1.2|www.bing.com*| +|Device metadata|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#4-device-metadata-retrieval)| +||The following endpoint is used to retrieve device metadata. If you turn off traffic for this endpoint, metadata will not be updated for the device.|HTTPS|dmd.metaservices.microsoft.com| +|Diagnostic Data|The following endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service. If you turn off traffic for this endpoint, diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft. ||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| +|||TLSv1.2|v10.events.data.microsoft.com| +|||TLSv1.2|v20.events.data.microsoft.com| +||The following endpoints are used by Windows Error Reporting. To turn off traffic for these endpoints, enable the following Group Policy: Administrative Templates > Windows Components > Windows Error Reporting > Disable Windows Error Reporting. This means error reporting information will not be sent back to Microsoft.|HTTPS|*.telecommand.telemetry.microsoft.com| +|||TLS v1.2|watson.*.microsoft.com| +|Licensing|The following endpoint is used for online activation and some app licensing. To turn off traffic for this endpoint, disable the Windows License Manager Service. This will also block online activation and app licensing may not work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#9-license-manager)| +|||HTTPS|*licensing.mp.microsoft.com| +|Maps|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-offlinemaps)| +||The following endpoints are used to check for updates to maps that have been downloaded for offline use. If you turn off traffic for this endpoint, offline maps will not be updated.|TLSv1.2|*maps.windows.com| +|| The following endpoints are used to check for updates to maps that have been downloaded for offline use.|HTTP|fs.microsoft.com*| +|Microsoft Account|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-microsoft-account)| +||The following endpoints are used for Microsoft accounts to sign in. If you turn off traffic for these endpoints, users cannot sign in with Microsoft accounts. |TLSv1.2|*login.live.com| +|Microsoft Edge|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#13-microsoft-edge)| +||This traffic is related to the Microsoft Edge browser.|TLSv1.2|img-prod-cms-rt-microsoft-com*| +|Microsoft forward link redirection service (FWLink)|The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer. If you disable this endpoint, Windows Defender won't be able to update its malware definitions; links from Windows and other Microsoft products to the Web won't work; and PowerShell updateable Help won't update. To disable the traffic, instead disable the traffic that's getting forwarded.|HTTPS|go.microsoft.com| +|Microsoft Store|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| +||The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way. If you turn off traffic for this endpoint, push notifications will no longer work, including MDM device management, mail synchronization, settings synchronization.|TLSv1.2|*.wns.windows.com| +||The following endpoint is used to revoke licenses for malicious apps in the Microsoft Store. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft Store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.|TLSv1.2|storecatalogrevocation.storequality.microsoft.com| +||The following endpoints are used to communicate with Microsoft Store. If you turn off traffic for these endpoints, apps cannot be installed or updated from the Microsoft Store. |HTTP|*.dl.delivery.mp.microsoft.com| +||The following endpoint is used to get Microsoft Store analytics.|TLSv1.2|manage.devcenter.microsoft.com| +|Network Connection Status Indicator (NCSI)|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-ncsi)| +||Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet. If you turn off traffic for this endpoint, NCSI won't be able to determine if the device is connected to the Internet and the network status tray icon will show a warning.|HTTPS|www.msftconnecttest.com*| +|Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser. For more info, see Office 365 URLs and IP address ranges. You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| +|||HTTPS|*ow1.res.office365.com| +|||HTTPS|office.com| +|||HTTPS|blobs.officehome.msocdn.com| +|OneDrive|The following endpoints are related to OneDrive. If you turn off traffic for these endpoints, anything that relies on g.live.com to get updated URL information will no longer work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-onedrive)| +|||TLSv1.2|*g.live.com| +|||TLSv1.2|oneclient.sfx.ms| +|||HTTPS| logincdn.msauth.net| +|Settings|The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it. If you turn off traffic for this endpoint, an app that uses this endpoint may stop working.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| +|||TLSv1.2|settings-win.data.microsoft.com| +|Skype|The following endpoint is used to retrieve Skype configuration values. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore)| +|||HTTPS|*.pipe.aria.microsoft.com| +|||HTTPS|config.edge.skype.com| +|Teams|The following endpoint is used for Microsoft Teams application.||[Learn how to turn off traffic to all of the following endpoint(s).]( manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| +|||TLSv1.2|config.teams.microsoft.com| +|Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled. If you turn off traffic for this endpoint, the device will not use Cloud-based Protection.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender)| +|||TLSv1.2|wdcp.microsoft.com| +|||HTTPS|go.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications. If you turn off traffic for these endpoints, SmartScreen notifications will not appear.|HTTPS|*smartscreen-prod.microsoft.com| +|||HTTPS|checkappexec.microsoft.com| +|Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips. If you turn off traffic for these endpoints, Windows Spotlight will still try to deliver new lock screen images and updated content but it will fail; suggested apps, Microsoft account notifications, and Windows tips will not be downloaded. For more information, see Windows Spotlight.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-spotlight)| +|||TLSv1.2|arc.msn.com| +|Windows Update|The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers. If you turn off traffic for this endpoint, Windows Update downloads will not be managed, as critical metadata that is used to make downloads more resilient is blocked. Downloads may be impacted by corruption (resulting in re-downloads of full files). Additionally, downloads of the same update by multiple devices on the same local network will not use peer devices for bandwidth reduction.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-updates)| +|||TLSv1.2|*.prod.do.dsp.mp.microsoft.com| +|||HTTP|emdl.ws.microsoft.com| +||The following endpoints are used to download operating system patches, updates, and apps from Microsoft Store. If you turn off traffic for these endpoints, the device will not be able to download updates for the operating system.|HTTP|*.dl.delivery.mp.microsoft.com| +|||HTTP|*.windowsupdate.com| +||The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store. If you turn off traffic for these endpoints, the device will not be able to connect to Windows Update and Microsoft Update to help keep the device secure. Also, the device will not be able to acquire and update apps from the Store. These are dependent on also enabling "Device authentication" and "Microsoft Account" endpoints.|HTTPS|*.delivery.mp.microsoft.com| +|||TLSv1.2|*.update.microsoft.com| +||The following endpoint is used for content regulation. If you turn off traffic for this endpoint, the Windows Update Agent will be unable to contact the endpoint and fallback behavior will be used. This may result in content being either incorrectly.|TLSv1.2|tsfe.trafficshaping.dsp.mp.microsoft.com| +|Xbox Live|The following endpoint is used for Xbox Live.||[Learn how to turn off traffic to all of the following endpoint(s).]( manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| +|||TLSv1.2|dlassets-ssl.xboxlive.com| + +## Other Windows 10 editions + +To view endpoints for other versions of Windows 10 Enterprise, see: +- [Manage connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md) + +To view endpoints for non-Enterprise Windows 10 editions, see: +- [Windows 10, version 1903, connection endpoints for non-Enterprise editions](windows-endpoints-1903-non-enterprise-editions.md) +- [Windows 10, version 1809, connection endpoints for non-Enterprise editions](windows-endpoints-1809-non-enterprise-editions.md) +- [Windows 10, version 1803, connection endpoints for non-Enterprise editions](windows-endpoints-1803-non-enterprise-editions.md) +- [Windows 10, version 1709, connection endpoints for non-Enterprise editions](windows-endpoints-1709-non-enterprise-editions.md) + + +## Related links + +- [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US) +- [Network infrastructure requirements for Microsoft Intune](https://docs.microsoft.com/intune/get-started/network-infrastructure-requirements-for-microsoft-intune) From 2f1e3dba7042dd3a219f660a69be517e5ea5c28f Mon Sep 17 00:00:00 2001 From: Obi Eze Ajoku <62227226+linque1@users.noreply.github.com> Date: Mon, 11 May 2020 22:33:28 -0700 Subject: [PATCH 107/177] updated TOC with new manage ENT 2004 updated TOC with new manage ENT 2004 --- windows/privacy/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/privacy/TOC.md b/windows/privacy/TOC.md index aa2eb4186a..eb2b637463 100644 --- a/windows/privacy/TOC.md +++ b/windows/privacy/TOC.md @@ -21,6 +21,7 @@ ## Manage Windows 10 connection endpoints ### [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) ### [Manage connections from Windows operating system components to Microsoft services using MDM](manage-connections-from-windows-operating-system-components-to-microsoft-services-using-MDM.md) +### [Connection endpoints for Windows 10, version 2004](manage-windows-2004-endpoints.md) ### [Connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints.md) ### [Connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md) ### [Connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md) From 20b54ed6567a065ebdee3c7dbc586477edaacf60 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Tue, 12 May 2020 11:44:11 +0500 Subject: [PATCH 108/177] Update create-windows-firewall-rules-in-intune.md --- .../create-windows-firewall-rules-in-intune.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md index 15c54f8ada..e7201d21c3 100644 --- a/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md +++ b/windows/security/threat-protection/windows-firewall/create-windows-firewall-rules-in-intune.md @@ -74,8 +74,8 @@ Comma separated list of local addresses covered by the rule. Valid tokens includ - \* indicates any local address. If present, this must be the only token included. - A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask nor a network prefix is specified, the subnet mask default is 255.255.255.255. - A valid IPv6 address. -- An IPv4 address range in the format of "start address - end address" with no spaces included. -- An IPv6 address range in the format of "start address - end address" with no spaces included. Default is Any address. +- An IPv4 address range in the format of "start address-end address" with no spaces included. +- An IPv6 address range in the format of "start address-end address" with no spaces included. Default is Any address. [Learn more](https://aka.ms/intunefirewalllocaladdressrule) @@ -93,8 +93,8 @@ List of comma separated tokens specifying the remote addresses covered by the ru - LocalSubnet indicates any local address on the local subnet. - A subnet can be specified using either the subnet mask or network prefix notation. If neither a subnet mask not a network prefix is specified, the subnet mask defaults to 255.255.255.255. - A valid IPv6 address. -- An IPv4 address range in the format of "start address - end address" with no spaces included. -- An IPv6 address range in the format of "start address - end address" with no spaces included. +- An IPv4 address range in the format of "start address-end address" with no spaces included. +- An IPv6 address range in the format of "start address-end address" with no spaces included. Default is Any address. From 0c04d85dd5539f6db7b531006eca9c855eb85d16 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Tue, 12 May 2020 13:15:32 +0300 Subject: [PATCH 109/177] Update windows/security/identity-protection/remote-credential-guard.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- windows/security/identity-protection/remote-credential-guard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/remote-credential-guard.md b/windows/security/identity-protection/remote-credential-guard.md index ce1b670266..189d0aa7d5 100644 --- a/windows/security/identity-protection/remote-credential-guard.md +++ b/windows/security/identity-protection/remote-credential-guard.md @@ -143,7 +143,7 @@ Beginning with Windows 10 version 1703, you can enable Windows Defender Remote C ![Windows Defender Remote Credential Guard Group Policy](images/remote-credential-guard-gp.png) 3. Under **Use the following restricted mode**: - - If you want to require either [Restricted Admin mode](https://social.technet.microsoft.com/wiki/contents/articles/32905.how-to-enable-restricted-admin-mode-for-remote-desktop.aspx) or Windows Defender Remote Credential Guard, choose **Restrict Credential Delegation**. In this configuration, Windows Defender Remote Credential Guard is preferred, but it will use Restricted Admin mode (if supported) when Windows Defender Remote Credential Guard cannot be used. + - If you want to require either [Restricted Admin mode](https://social.technet.microsoft.com/wiki/contents/articles/32905.remote-desktop-services-enable-restricted-admin-mode.aspx) or Windows Defender Remote Credential Guard, choose **Restrict Credential Delegation**. In this configuration, Windows Defender Remote Credential Guard is preferred, but it will use Restricted Admin mode (if supported) when Windows Defender Remote Credential Guard cannot be used. > **Note:** Neither Windows Defender Remote Credential Guard nor Restricted Admin mode will send credentials in clear text to the Remote Desktop server. From 20d816017010b11e6b4fb03282de75c1cf2d6664 Mon Sep 17 00:00:00 2001 From: MSFTandrelom <54631941+MSFTandrelom@users.noreply.github.com> Date: Tue, 12 May 2020 13:47:43 +0300 Subject: [PATCH 110/177] Update vpn-office-365-optimization.md Fixing bug 6506 --- .../vpn/vpn-office-365-optimization.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/identity-protection/vpn/vpn-office-365-optimization.md b/windows/security/identity-protection/vpn/vpn-office-365-optimization.md index 66699d9e0b..d067b5a21d 100644 --- a/windows/security/identity-protection/vpn/vpn-office-365-optimization.md +++ b/windows/security/identity-protection/vpn/vpn-office-365-optimization.md @@ -239,12 +239,12 @@ if ($VPNprofilefile -ne "" -and $FileExtension -eq ".ps1") # Extract the Profile XML from the ps1 file # - $regex = '(?sm).*^*.\r?\n(.*?)\r?\n.*' + $regex = '(?sm).*^*.\r?\n(.*?)\r?\n.*' # Create xml format variable to compare with the optimize list # $xmlbody=(Get-Content -Raw $VPNprofilefile) -replace $regex, '$1' - [xml]$VPNprofilexml=""+$xmlbody+"" + [xml]$VPNprofilexml=""+$xmlbody+"" # Loop through each address found in VPNPROFILE XML section # foreach ($Route in $VPNprofilexml.VPNProfile.Route) @@ -349,7 +349,7 @@ if ($VPNprofilefile -ne "" -and $FileExtension -eq ".xml") $In_VPN_Only=$null # Variable to hold IP Addresses that only appear in the VPN profile XML file # # Extract the Profile XML from the XML file # - $regex = '(?sm).*^*.\r?\n(.*?)\r?\n.*' + $regex = '(?sm).*^*.\r?\n(.*?)\r?\n.*' # Create xml format variable to compare with optimize list # $xmlbody=(Get-Content -Raw $VPNprofilefile) -replace $regex, '$1' @@ -367,7 +367,7 @@ if ($VPNprofilefile -ne "" -and $FileExtension -eq ".xml") # In VPN list only # $In_VPN_only =$ARRVPN | Where {$optimizeIpsv4 -NotContains $_} - [array]$Inpfile = get-content $VPNprofilefile + [System.Collections.ArrayList]$Inpfile = get-content $VPNprofilefile if ($In_Opt_Only.Count -gt 0 ) { @@ -377,10 +377,10 @@ if ($VPNprofilefile -ne "" -and $FileExtension -eq ".xml") { # Add the missing IP address(es) # $IPInfo=$NewIP.Split("/") - $inspoint = $Inpfile[0].IndexOf(""+$IPInfo[0].Trim()+""+""+$IPInfo[1].Trim()+""+"true"+"" + $routes += "`n"+"`t
    "+$IPInfo[0].Trim()+"
    `n"+"`t"+$IPInfo[1].Trim()+"`n"+"`ttrue`n"+"    `n" } - $Inpfile = $Inpfile[0].Insert($inspoint,$routes) + $inspoint = $Inpfile.IndexOf("") + $Inpfile.Insert($inspoint,$routes) # Update filename and write new XML file # $NewFileName=(Get-Item $VPNprofilefile).Basename + "-NEW.xml" From 9c30125dd869402edebf91c4e10dcbe1c7513d27 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Tue, 12 May 2020 18:17:11 +0500 Subject: [PATCH 111/177] Delete secconmgmt_baseline_intuneprofile2.png --- .../secconmgmt_baseline_intuneprofile2.png | Bin 38644 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/secconmgmt_baseline_intuneprofile2.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/secconmgmt_baseline_intuneprofile2.png b/windows/security/threat-protection/microsoft-defender-atp/images/secconmgmt_baseline_intuneprofile2.png deleted file mode 100644 index 4b1576ec238e64494d231e2ab020696a6ed1e6f4..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 38644 zcmdqJ1yog0)Gm7HE-7gcrCYi&2$4oXq(izp51j&{2ugRSbb|;8NXMbOyF1=G`v3pC zcZ@sk_{V+Yjq%1i>Oj_Bd+)W^nrqH)e)HQWOj%I|2a_BV0)gPj$-Yp9K#+VP5X5eD zRM4_Yq#y%+VA#pNbA&)}f5HDDd}YO@0F7u)atbfemeHtCsDvGF))W6Wz0`D)a&|Ja zb%5lT{E-Ds*iNA7g^8n)gSnlPxvdR^5QB~$v}3~CpWE8GJD8iAIYEl>{s@Cs+`p|3 zCI;}Xv`*&MCJ?@JJPdFI1Aau!_JfnFfrAM|$L=299qaGK%^i)b3_w>0NKI>HG-yVL zH)|L;*qGaxLRu--LO>hZzw@0Pj7%V>_W|4g+3mTlwY7_{p4zd_a}swjzN7){a3-cFPpQZ2RpkF*KK~K8*WrFD-8Nk-B<4YY79&(=sO7@TW-z5A}VZ z*su=gzAyx#$;OoEE>ZoG<@GD=)a`?m0r2ygvvU>7i@%?ffc4$gRlYfM+DGtD26rpu zQz-oN`#Bfn@!z&1d~8VA-!@TXq*fnxcJ_^(ofqorqi&4Zdi2zDgV;sm3t^UBBJ89E zIHkAE2tkJ`7Z(x%T_W6>xkuPG9`#t8i5wjky9cCdjn6|E>APr4Sq2tzay<_Q&o(uM zqgJhpqM8cM3+z|9p_J}cEFYq_5@rng_PrqAjbhfnn%a$w>|S8%UW}l`DK)I#q5Mw7 zcNa!~=}x0_WaMV}wSoKW()>ju>Www_(Tp+A;>qU7pc!vwV-8Jl0Zi4tqqEevP`7oS zhNFv^)$cq~$(GZ=@0%Xw>*?$0Fr_|qez_QnIl>Ro=kH$*8OCdRg*c-FAR@%E*f z7}?B*p9j6{1{WsxH3cnijoRw;d2PRmVs2Zsmvm9s=@nnh;@yk9UA0ogK5OAQI30AM zN(ue=v-#fE%rEKHDvH!CQu*IWiymr4E)YGxs-+9gGt zyKm@bwj*hm)dccqDEU{Gj7NlzvYZ+?SgTE@SPG#HGxi($q=C?A>0|ufrL;zMe0AUW zcv9({$}`*TO0Ji4*hw|UBthx!NIU&4@-_~iqr;EH>sPuCF5*P4w?~wF`cNA79`HsF zy=>0SMcZ#Y#-wR*zG*njv_m+X^JybpT)-~!}2_fX5 zM;d|iYn9~dSMu`rOq|5X=td4n_(KChjRRIU{9DjP9y2;FW<`Cvnch$B>bn&#@bsg@eWgVU{#eDO_Po4hg(>nDmmuje^O z{#e;TF*CDTLFf>{gGl2G$6d8fuwL){o|2hN7ZeY>IYi~7Z8}it+ zPnrU<&0k}`pOWy_xc-Ed&%F&o3dZ!G|g1#!LqEAvrZC( z<-}yXEiAWRmTtUQickhaSqf*JNxf9&_qXvNJNKH2ayfif!YO&SegEtzp_V{CGaeIP zz2K0YbUaov=;fdV6(tr6G4ku8>!**%-C4fA3L3gb$44ecMq5sMI2WZ8y-AQXbnjk- zFt#M9gJkn3ucPGrZcO4%Zz5YQeQNEx^#{&HWG!WbeThVc=|E?)>s*-iboJuSWQEND z+O%~NVE__d5QIh`bHb#)X!2NQhko0qITz?A}= zTg1nGx9)zh*zC8^s4VtI4`>}rlAC^6=XYn{W6i5K*|b-|CAwTG+7XdpKv|971_;z|u@65%z zLPC*hz0Ls|+T}az^LaJM4O_EU8i%@?ofWsYYS-Nf)8U>G@to3}##jO`wjezKO)79BYyKQc^iTH-Qqc?1cO77I;cc=1~=3OPT$+ZrI}#d=rhQ!$uH(X@HM1AG4YzeO2A5?*17Nu_t-m`Rd*D-3M@3Qy zEGF4fG@f@tc4rhmJmHzN+tm_ndTU8VXw>_ zC@_t}1t+W2gVY8;1Pz6*K@;U`0eOQB`cDN;B)z#?TXf7GYC#%fyw|Mk(`RZ;SOUl< znVQZ0J4=4c3?k?PJ5xbcFSWvp=dE)~=YlBwZGQH;kqLxtv-QXIF+zNIzJ2CgN8Kr) zw)wsiLgT|QVd|u@APA|P8w{O~s7Y?0<+gAl{v)l?X64mTMiFl-!udX!3`&rr*)^N- zb5?1yT=(ww)DP=zTP8dHxK{kgsU7XzQS7xqI?LBnXfqSeYNu$Ab&R;< zv%`qZ4_@j^EIJ0Vx*GxUO4wGGrxFcxY}i5LYdNKEiPQr5zeE#)8}t2RU7_y;i=nmT z&)Qm)7Z!5pgv247B4oKN`5mh!eizje_viUqcI|r8Iwdfh7R&-aFMRdZ7#noU51EAv z4<1L1V6i-&e@Zbww}iy@HnUJNz}YcpVZ4LnW;OK(#X2yC#0N;bpL*Xv{7hP4SM$Yt zPqcJOth7)=H`mOj*Z}gR&Wt)|gn1Mp6v-ZPrF>Z=$l0v&a_K_m@G$y=pXKEHT zI!=@DcI(Td%(J_j#K@AW<{#F=(a|f{&o_QuwNy{Xmm}hg_mSOvdpJR2;!cQ6tjodm zu12ApT4Qxp^hfGeCnq(@i2m$(ruU9Hlsx<;O%)T;DN^!nSByg4P7AZfCb?aJXt5nXvbXBIsRevg~jW*8I-3oI~h$yZnsS%lK12MURmgW}uSrVYYg()me*GB2_Zs z&iT5#m(ycN4Z~?_sd#zQrYjM;h@dpe*JZ~ayVb<6pU-{wbJRJNxHdM&Ywbn3bvIO- zYuNkFv*E60Z`Iwa1HHU@et#-oo$lCW7hPUJ zDIQU#O#776{;6*Yh>K>fbuPEM3l>KodBbE|ru0Q*y5w!4{k-@2;wel|Mn`9M;g|>- z8ejS@(zy889N8&v!e!WRij{L^dVjvUy|wZsVWbV-5C`A1r;}cyBy@n_7u0 zu-ih)nQJ3m{wl&5O<@AcX{T@}_wDt-qj%ZQoZB3-Ft3Y85)=(j_j=3fCc5izIq6T^ zzYbSkLX|p>{O^2KAkBY-!@e>QzD9#d6&6Uh9jV`l-5cMZFzk?C<-$tZrAB;aB0S6W zW~jeH(EY7+mhQ(_(XX#-)>kZcnyroxdLB#M96TKo&um0&^DmOvT5NfHXWk+2uix}( zyMN(4#AUbfo|OmPyGenDDl|+0VMk`TH%uddqdG zAJ0j{Q(P#)c*$^@XR>c>mB&S?*sNZ#ddcxCSk&w@F5Rz@y_!$tl!Oh5X7 zhvW=n%HJInwU66aDLAOL7KgIbEd0(#h$S%5pp01F#T(>?jJV;$kp@o$=6k|`7p~U^>@80osPfp z1G-nf*5VyGvSpEAu#C}ZlG1Z%L~QRjqRJFd!VnS97r(5d=JZ|MdS5J^KF{0J+vEFj zl83uWPdI%jL8fJXx8hlibUP9ul|nm!^cyxNQ34e@e|#Q2q8lwzD&)^Hj(F5Q@bdnU z1lfS-{WnbCg&=FZE`wRC%LB)Y)8yoFEP*1@0!^t_$ybP6wjLBG#E75iG?k=>-ALzA z5b}0gXZXH`t6PcEODY%5bARa$B-QgG(9pI=v8i1|t*KE_&XO6$^lls{nDDD$oefD!ogxHzp+kf9aH;TzdG58O9>V%I@zn?eHui(_fFDG^j}av1#39NpgYIFqNi9j2ZjgHz)>oeABEheei|Ag7LkFv+XwbdBB{X zb!~^R^^urbI`jhDOTwy^ujcj3A*JUKjjmtn?j9zq3T2ae5MH$=zY3&f$~aOwqU{vk zMVRZ`pXYD%m+RlTb@ovcahy!NuYQCc9pQfMLV-K~Aj}j60d28%CRunoBJe_aV&6gP zN_L%8V?8%ZUfJiZZQuN+6ch9jIXOE10#2XRrRcc#g`XS84U?~4UB$0H({)vjvnF@M;Y zw@>}xFG^%j>0L1)`eAUiJT-JG9rt$H@syWFdnDBdVf|oRB=NwXw~59EE1P_CVECivBB>!QfF$V=E18XUk95>{rO?-S5UOGzuF2_bt%n z$oG5YO{hZS)6)?ey6z|h1O%E@J;@O-q2zem>7<{jR^HsZOj(uELiDV@A*JFRZStS3 zpG%2ucn1_wTK{@=m_Xadsk_|L8Z0EP%&|s<+@|u%s>f!>q&7!_yJz*Rlu0VHvDu7Q z_F@ToJ!0l){iTnw1s8oBr-O1e*l?K{0r!jS3(`mxJO~PUIAN@ywvRu7;`u@)t$y0` zSA>cwXKlrf$msLasd-6IQr`}XlNmyxmDq5BG%(mzd>cvY>X+iRc^IyAkomq%JVAUr7%swKS0Sq5MmekD=%X zoo6zXGrZn<>uycBXN9!$cuP1@Y+MhrcKrel)jl~FQoDyBqubA`qNS^S_a4)!eDdm(QI z!{4{vlSK$qzX`%|jAei@Aj()#SH6iYPuwCQ@xjm+N z;2V@ah}kMynZEJKw>^UDp4Lnr`;I{&Va4YF4bsh8ei$L6k~QEvz8EyxJc9w@r{3sr z?6t}j3)OQM3+`>+e_1Mhb9dLuhk(@Oaj$BZb}l5)%MojGeo}Ms$lyt(zwb!+>KW%0 zf8N-p{l!$TU5%4ZJiF4&`cKKp*lO2hgp(;-CIX!mb^pE~i!6zuP+wRgMxjb(!P-HLIGC)Xgn-YY!y@iyDo6m{Mrdhp*?Y%T%Wea4}|_6hpMO#lOBY*dJ}6+Yr8QJL2KU~z2HaFL^Z9rK^qS&Dvo9rx$>$MuP@OeC*INRO?zxY zJE|M(eLnZt#VXz7VW`<{FNvE_Q(1gIOV2cFRe5J$l^PiC@mOrgFYu#$(dI)diQagz zQ64&!$?-g{&k9;y`;vmw)%{knC`!{QXwvZ=%?DcxOME6R7|+!6tlSwM|5CEIOiWBj zz$YXOn6_>44t4+f(bEO8ZK@ZN>@jI~t0-ElW;-k9Yv}n!V=kIBPJ$^p6K!p1k?TR) z&>2+XqQwp2=$OUWgpQ1LABxaRBf23?jJ5`h5NR?Ui<-+jf^{?oPYxYB7HJ#-fu!UkV3Ww*#Kuj$AE{ zzzk!oM4*iXx<|Y{N17EZxT*Z=`qfr9x7!~UCm)+`qkLBLKbRQ5I|WzHt#MoA7I2iW zU_m}Fweg2-y|scq#wDw`K2BS})_tEwt!16_?D3C`6QtEViKdXZ@1XWBDH<_uXM77% zleO2dcfHS~!wGanSPycOArF2Yn)_qW)P7I!6Xn6(`H}^Bykmtp-cg@)KJ~uwux$%- zhBkXd>n-nj@G=r}vTm(})J|RlajB>iDuv=XQ~_OPzW^UX*DlVGWUs5+zt}dWaPg%Q zN6r3s^;w%AmdKg$=h2DgeacTuoptogBu#mKu<`J_H4UGO6F$gkHDSHD#OBGMpIj{Z z*vDm%yY2FxLc!H!mWnR-P6Qv?Oa()49hkuQMz&&m14yeSczQkhiG>>PYCWyV(%voL zSy{{YS2#}7uF?z5;R$#l-H6LoH{#VFWSZ|;@2zxyDR)?Xb_0#oOX<5r?_m z;RoB3d|8ev8F`D{J&KCHyImGA)hI{Vmcey5!NUi0`|KG%ctE?ul5) z$~sG#(Iy)<+nUx+9+Px%JC%>b-Y@bz^;Eo~fysVJo|J77U%mVfQdPPs&FOJj#-bYK zNb;unT%UeXTzYdxdC)7k+SiTOFLbj-np}J8ye^;$ z$`lV~S!G94T4~q@j_ajf&>JF-LLMM6@fdnLpn)0$==^y5NFH7QZz*TwI#$rO?;w_a{hG3HB@J|%uCWbi z({D`?^X#;0qTlQw)kB7?tggycK|PwNEvm@LBR`0Kk^Xn#!Ed9G6bUG`#AUaV-Nk_c zxGQ=`M+X?qM1w0Q8wnOB78U^s2|tNk%+7QT-sR<`nS}-U$Z1sY=18vmeOE_En?Bb< zqHQx-7t!Cj9eTmbz~?LCx)-RJ+n(_&~iMgbfrJ@W64RAsJa&S-Y#7h0Ejhn8d`wZwz#F2sGX&F}#tq=)e2> zQT2;4h;j+Pe*H?v&aS|Huiy7V{?)6j%~Ovi!@J5#-Xsa=++wAPiHRyB$I+>&i3#1K zM~MEkpmv7%?%g}pE{>&}>$6=X2%Anl5oi_=&?w(&!!{N9YhW8od|Q0J;AAfHNaez@ z=N_GBxGh|BkkiO4qpLEF%P2S^?|PLFN`tC$&n!T zP)XcwDyit`MBdzZ&3GO64fBFCE_Nyg%53Mw&3MU+^jdUd=2ljWA+68x!~)C8xOOJW zk$@$DtHO&|s0!D+HS@R-U=?jJJ!quByceNxa=$^vpN}80H=KkUPAMX#;mh@fLE$HS zqEb_%!RQta7TZIkqNEiSab0#M5Rw%`{``5Z?Xj6%yOv-%(?1_Gq4;+h>VIoWzq7Y5 zNAZ2~IrlW%c8wC8p6Fd3DtDQR{q^)RRkPePMeX5qAm^;Fp=` zNs-Ph&l|IlH!{kct>+`}OPj`M{b4=LZ|(+KUKYQ75789AIe6Y+uBNI=v^{Lb>(X1M z$rcADMyEWPB%R z%fH>)VLF=Vd$%DYfvAtea^fMjw6rvnpj0@<(kvh#fKTrvf4vijcqTPOF@YC@nVA{BtEoLU(hXqx-2r)hi2@?Yibc#KUKeFV+N*18 z^~8|iz(7bDYGKLvVt8gk|JIg8%^ET69&n!1k*ut&NczPFjmq@p$$z)F(;?XxhO}tW zBXr0@pTPVJEvG!tqrG-Vo31#ZUuaWP-Y~=@r*)_``=H}+Z+tk0- zAqcVqQoXazGK6c~uSvbOe!ogD{@ zgzX`3WX4xk4ft>H9Uh(X{rh*-r-~Z7UWYF`t~x54F4qz@E6oV*4nibqzXrE`{LiI+ z`GL(dX=u|a4(yWrTzN>`%LtNpVDjnm*A-2h9K#(P9Cp?Yd|bc%rxt*djV-p5M$AKf zi%JbxIXIqW(&LFxrCHPz5H9A_We><%GH>2PGX}6!(V0SJjqyBY6kI0eyI}FP| zx<2|Bq|HvsF_``alK(NJ|9@rZ|BukZ|M7fzHWDs;Os_!Qon0R?uz4m^Ljb|wD3nf9 z67=_CqU1@k?*{SQ&Ur*A{PX@eCzvw?hnz^)4RC5Y#SJe?qVhw5+sD%ZX+QbYj`_*VNgX6{R4y>?ZenPv(et%p?n#LxN zh21eU+frQ!;vX@Vlau^GqcbVvP|V{Tgt;QL9E^S|{&syXpiV+W%u1At=y-$@u)Dhp ze-y3a;8z{b#9}I|tCxVcLdU`R>JPECwPk*2Wo;caY1Nq}_XVGbhKvd811ML;L31UnWlo8UveDf(lyJFMch2l2-S*<)Rp3g|% z_52mA*ES{j9ZKeFyY1TwAw<0WqnKNv>8tpK#>1nL8(Qz%-DdPnHiOO#+_+6&(#=iq z=g*(oik4gt2Zx6I;8BQ{R{x`_Y)O)sCyBSWH!yqO($dnA&HDO!JK%ONuC5;O@Hk+r z$p8zYNP;^|{h2D!%-k>+f6=UlKhV>ccn^dDlQzD}F37L9Au_kET9b2MK~2OM13-;e(G?cvGkX?k6qI~YHG zn=wzD8LweaEHg)d1Oy*hs$i4Y@-!^e%u3-K7j12Bd#KBgZN)q748 zkd_<&K9&yAjXH8f)87yc3iTz!&2<;^=Il>W)-~p*YB16?Cl;f+M_s#Dk05S&?w@$t9l z{`wl3c1yo7yskELA->FNIRI47+RTB6933CesHhk*A*{&Ac+_#8m6b&xD}?YV0ZG`i zzp$(fA6WeF-@lcy&kqm%fY}3_4^{|GXCQ`NMxQ^i+_-zNl%~2D!I!nP@yI`J*<4FY zD@`>Y|G@)8fxRG7-A{KdTLpzXXG35|*j=5NBcq^z-8-;&Brh)yDx*a094CUsg@w;w zzC`)Zmk_kEv4N#ULNL@}_G}d5@+}hm-1YwPjDdxU7v6ESbjaj}L&~MZnBhpdNZIBD z)gVV=6l{cZ=Ytz)V0aDaz)r>1>E7na^~D5!D?Q>6_+-AuJ!&INO{z|m#%DV?-II!l zh^qv7i9hYa)plt}hhdEP*w`3-H9U_0?(X*MFl;M$QwY+}PQHr~iz+5&=9uRF*#_62 zC@OVzb-#OhRIwW#4(~>llyHPl`D?pOnoQK%)7v!c^20Y6qheASxDhfkD(X)wmpP*P zygc-Z4}H&6RUZHVicdii0k$2%Y%mtc=Xd=_BcyC?LDCa3LY_{@sJH;+G>YqZ7#QUZ zo36jicwb##JUgHL3i$CMRH(DFGZQ;IRlIZJYlaYsA7I%KA^bKop+Kr3j6K+~>{K>2 zH!-2PDfp&vOtnm0duV7#_SLJSjfMT+G4y!_1?2n2_(Ou*?yweHz(%ZDR7o&}cFp@7?#lHK|kzq#^}zs>9P$XAh%y8X9O45)vIa3xB>p z6}t+yd;I-1LoS~%#BOJTJHE*q(|=){m5!X894p#2nYL97?7`+kXkd}+=oC@SlT#Cu9JC-78Z=$ zn#{14IO}i)Zl(va7X8F6oX&Xbnwon8a?^GAb*}DK&z6}kkGVHJmu3%ZJ=#}syJjn$ zF*x+dLSQ53&l;@id3AOr`WGWbBw}(16GQgy+hI(e4XWfmT_qF*6?QA0wNJnMEl6HN zluugk3#E-3$nfR`XBXXUOT{0Gut9bbEyJqh0>(PO#>VPz4rdRa1DMAwNtEbHLP{z> z0CCpP(`|Sr*Vrf;3og`` zz&CsZk>xWwI^2ep%DA{xk2-->eg=}HVS3wemYgxea(Ggyl`1>esL(97BzSoi-fJ(N z5*Hgwlt13juNM&!5%cX^o>^2PNZLqs-4G}QY@ELDwVefc>4kxe`|vk?wCo5R-inC4 zCkMd+pOkdnsUf&9H@9muauw`t|Fbg}Z2*%)!@}$ZBU4jp5)vp=NkL@P=lQOzp|Q@p zL6{g828y=aj%%+WXMMvf3d2C=M*u87A%WbS{Ib!P5AvX)_x$+SQBy?q&6^<53>ly5 z0TDpkef6u$W_Wn`&zU+$DvtNXZ`-Z-=^s6Mrq$9Yty27!UR-=`@k|e0L&{H6jhKuq z%yGS6NGG_ZuGf8!2aJXH|VB6iLA#f`d`b z^}?>-HFGX4FQ>mP%yu3~;FBlkEYVA0n9lil^-7l$*zr4sJd7i&mwgoQmCt@D530r-s6)EQ3zRHdJ{w>5eUZNSVl+?Pd%JCja z>3&Hq5KSSb&jtZ?^PqHR_mwD!F)2|{q_!A8)df_Dsp7+|wR8b%oku8MRri7+pCxG8 zsTyozJB1u>yv62fj|pcgox>_A?cFA)zYdrEYLK~;mS0-(epNW1_vI%MF!t|FAP z`2rDaeLJDjhgpCM$amkkyS@I)l-O*K7Z1BZhTS4M5F@1ne*SzGBBd%PhcP@dlD)b= z-=aqlSo<8i1Q0tQaD4n(#_ZhM+6nVP26X>e-G~l59OLk z;?Nvm3yF?03T%Z11UL(am&!e!b|3EB<7;PUeG zV-lF+;^Q*`R7jBE;u14Cs7LM`Ng ztfHbae1Vl;XWub)J==V>#aiRv-{xUYeEd{cm>dvgZEbDg4A%YCrw#kfYP`%&Ye4=Q zzPZvCo0pOCY=~E-6vo;K8y%Ismb2<-RivS$ESlJtiK3L!*H7bZ27@UV!@$I$Di|8~*5ziq?n0^Mz9YTZ*5F)N=QKN*gK^TCw2@oY-QKrN_sVb=izvvh4nR;} zUeQA@J%?-Wy$*#p?|U`0EO{*M?G+31pQc!R?F?I9Wf2#P1n7XJ69}md^GpL}dl7vL z1+>Lks^ECiNJ^>ncJF4NlVWgUJOH+5H``E92g6$QYlkxLj~BlO=9HO-!NSDU8bu{S zG}3K3@QYm3wehf%B77Clj&zKSroT611q>8kzg8c$&;`tkO)jH=04X3)!Y={81E<+K z6!fK}{7&u@_$+s9@L$I3dgL1>ed{+(aYuy{1ng#phL2PMKQ(ZH6H;*t_xBCEpKSv) z-!tU!0raMBaSu694DPn=TtT%AW)epuA|?)k!?M0w0PU@;icYp`w2C`HJk6$XxGcS0 zx<4`9HmIikG)Hm3TWNYEP=q6>~vh;n3V%6r7sEjpv?t>Khpu8NSw1T}o_MT`Vpx z9&RGi6HrjVf{cd7YGF-&2i%DdD*GN2Rd)@a#-lDf(JWY1$zd!(2fD2RKe;b@f2=ksP_} zKSPHP!Rf%eHqfB_^4?;i(Wd$Wu=lVJel8(YogneENbfXouA4K%dkLPZe{x^BQrBwOCZL& zY=MpTM>cHRe%2X=Bc6_R^dT~%sEBQ4eO-PYu$(ixDVeP@nL}WkDw3N{H!9DKs@fc{ z_2re6#Q7-1!+bzT)?swbfNrcsD~Zw3(OT>cz$_|jYqNpKb~em1*E&5%NiApx>58U7 z)89pLx;$FNU3Wd7%&K!-H{6@4V`5=>_T~*SFdmGG$sJy|lfy%M!PnI4wV0v^mVGge zn+wX5<67a{F5`3|Oyc6ya9^aN5;KyMOAiP629O%#?g!?{(Cg`WyS*8qn=a^0$gC4c zLN~S@=d!3C)^b-Be}76Isrpn_X4+%*tHvvVHNy(6_Y7aU7kykRldF$)(5G)%@aCw# zuJ-pUhO~ufwzJ>m8B8O)KMpgQpMLKyqN1f0UfO(x*}BlRsoxdRSZArA5V_Q7!Sj9R zNZ}9QI?+LX`6o$8ZR_henQ51?n_I2=^b|04;OW4T(Xla*^>%DN{SC?DG36yshi#+n z8t1_iB3(h2FD3m?s{4G=de;GbXjtxkM@F9!F&&5w3Gkvtp%QATq3OaT+|BbB&s=~29=&d#BXk}=a5o_vCtABN}$+CPlyfajpuarc*?xByZh49QzYm0 z_az5mp(?H7T0d8pr~4ZkP8tZAg1U1GcXp}81gUbLUG*e1_oJ&fiEW?t_V(JZ{EkuC zyj0CrZR_en18%_OT4{ypfUv5ns_xGK@EsutJ0NKs92}%wEv~R8UKerM`F8RVrq97! zOYuh*Z3Sd3s$>KK3qu<#zXt~J;8#e#`W@hH>fz}Lj&X1FF24lGuLE2}Syz{1%ti=n z3Bi&*&Q0e>@wdCqRyKkN-aVm>po zzSsv!KBG8_J{rtWGsExr3X<)&nFK2$=9-*N5@TLOQq5n2Psqb=p%>)7e1ew6`;vCX zzC<_Pb+@&D69ndFG$jnXha2Yc3NipUsj4a2Q+3V5mM^Z6q@LLsL$tPMZMXP{o{ma> zD#hH@3AnegE^J>3k!Qp}cOF`QW?(=U$DtDrswYgr5d)QA^r(}Qli_KyJ5DB#K_OoH zu(<{fm5Mb%yl@gujumgxwbiivQ267As!E~Rv^H@Wp3jS#Sr-aW;>-OV4V(hV+p!Df zvTn#4;dL^;T-O=<5S`{J2j2d7^=OXM)-`kz5_&_wM)~JgmwCzi%3yro0P@aLXUV0i zt2N{$C!nO%PrkGjq?st9o=ecXynQ^RFF@`(4yM* z_4PeZf$4M6K7MR0JCM=Y(IGc**_R|l2*$#pXG+`5|8oqFBY^75;^Lxebj8wnP7cGj zzBK}z0szq#*Vl8+qV@`2*S@Nmw0euYdbBq5$o)Iu!5)tBD83-<4a`G8_T4nVI@q1` zK6v1TPv!Cb{qbm3lBAjj`z%jXzAVjhu(!7#+;j@R`E))bq<*xP+A7)1 zz`&4ER;C zjBH>JKuZ48iofB;L>#n&>_~0q;5YP^#FBJHp?8Jq2S6usEjc0ubp)xbmB|`6dR7Tc zsdGaWW)@XiTa8jhn`Ty4v1>TExNk>eJG#2$`zShAdn^|~ewCbKnFSmVJufejbS42n z5FH9!XkooBXDRYB<}Nik-rb*{ zgd0t~@u`313JQS$9Ws1nESJ$Asx%*gXAB@V`~puWVbdMITHx|El*7i~B+oT8Gq0|Y zIyd3okL%v-HC`fKTN^6|#IiIsH!(T`9C`Ya#|PJp^KCMIU*uE`Oweo!Mu$H1_^Y*f(G zqrpZ+dd)z{0OSZ8#~hh2y~J8yxaTgo<*tLYdbp5DyJ;%Dsfh|Oyi!t99G3T;@*uW@ zb8JJC%`7bg0Kzmg+equ$1Vu6f{zPu`;VgR*#jsG($-sQDLAdVC(a$1&ZLaZndAdma z1nzPpGtT2;XM;bZ-Rgy!2Guh!#$_3`x2^KuloPr341fA{w;@KsuG8w;DOld%HNNpa zINS?DLGIYEOLeyqs`+ z{6+YZJF#zLYYYD31z;g(O5Tvk1FPfX_x`;QTxUP~%I2yL)?a zDOgk%eKZ6Fkx3YDkeFaI&Ztx$kfs_Uhvnyx8run0;PnvXpEtQtj+l(i!Ee*D3Avm! z2Zu4-3VjD5w2zb}-DuNN+|J)AcIzQ>k{6SH^5mJ0Z$-+S9$8m*c5%rlER?VRPJ}Fl z$pDHXvmWjjW)uVD0@I|j(I1pjpO3*{A=TCVCnqPZfc6G;2v8mI@$mtV^ITc^Q|~!i z)D!sCc4&>5{?Zk5#ynE^$jk?TUP;6UbbSnCV%dKb>E#s9ZTlndOT zh}IXIWYHVX%37G=HNe9za>;*%Gd%9CQa?fWqZKoblz+9enP2DsrCi}h_**l4^gq27 z{GVsG{qJ8M{(rmM$9E8*9H2w@KN;FSh4_NV+F>V!pEhPeg-a>{r+s^R9E6(zyh_lE zO-uyhn!kxzWp+-^BLM-JO>L%A_he4n(2sw5Ack;m4B)2Nt8Hd6fzJZG#nO_Y*X=1R z-29h4NdyW|iO9Zw9otL_82KkpUS6fd$A^8Qmwiny7_ zIZ*US;R8@!BnyKx9j$z(lh(kCoKhfw=p2~J7mh7O3d}u>{HGuyhz#d8M=TiG1fwi*I~$0*c_%D0upAi+ zZUJfyhJcgA?Sh_7n%3^sZ=>q;13so4dha8C{ZBwd8VM$8d1)!j^pckx2UH|>b7Caq zYuu05R21N1q)M&g_kKCLr8V37((3Qt<)hpD$K?Lt_Qv@u8R+gc8$YU}=j6l#(8z`F zGl*>A{o2140M{v*IW)m8Lz(*h`zBY}KeJ0<>Rc7`g|nm1&ZllgS`SD`Lz0pxjZI9L zQ_dTfqeMQXrb?`=&f0fT0a+7e_v3%X(a1a?R|is_9gAxqUh$LXY;vm95Q9q~G6B>g zIC#Rq@aXB&k=5gH2n?P7-fS`EaLW z*?+G(Z}?i+kIZ&J;$9T!bRZBqIyyI?>XNb65l+V4Z@Cwzc3be1%JtqZt~mgj6n&7} zYS!4y=4G2d-kqr|xSQvci17NR!w&tm!pQ}HVaG3Y>3jI(l>=~5%d?}yMb3_6b6H5 zAujEJrWmz270e3dKqV}|*f?D7I-E33HJGh;1}ZaY7Z-k;=F1O_M?I_nIZ=-Dynp}x zFq7t1_KE|QCo{Xcdc0V_DkB3CBtcYTmDn=!@)3`2i;IgxBO|H)so`RZ&*z~uz@=T> z91jq;x7?n+x0)zJ05fnWnEjEV9)z-s!!DZTy@q{hIBCenz<_EAE9ua?ztRBuFrVMO zAH%}_s=q*5*Nzcf?@2+IpDRb=H}54tnpMpT7gJ+|bliIAD=tfU25k@)Q7B;^CjC0}x0_)0vhR(6YJR9Ci%>@c<~^83Ee32;;E` zAp^w9$_lR5B5q4H>-Cm&>j(#swb+g z6N!F@O3~;Sld*Dg#&6AnNY#)Sngpxe@e z-tsvKQ-M-6C4V1LqHQ?Xl;u{FJdknI#g!^e@YpU=3V?Q8>rZCIiAQ_wke!_kG>oW_ zhBW!+Ik2&F2MAL{TotuYA@L*Pz`EUl@9;0R1O;7%G=E zK>QfPhQc?BYv!KG%A$juK8>m;^mx-rm{QQL)g%K=+s?p6&?c5vIMRO^t7K4S!Aj# zBS<+rK{X=+RA@A|Akw-<=$c4$<==CYLiN3;^caZI; zeiFYH2EGWtoCMDr=mn#L+kS@?xB-Y(Xh1*o7zOHEW%R9!21*H1HhAL%7LyQfiGpM@ z3RJ=vum(epYj}OYy=0j}R{P%lwZ0W?&)q7`GJOPpe}AI(^}fUqARy?l5sWd@Mry^A zxEaj!mry!*j{6sJF+4Dpq7IO7FagIte*Ac-Ee79!1TivX=cfPh?LKB!|Mxfk7!4zz zfaNET7z5%Rct5QFtG)MtYHC~8h9hD}aa&OkEMUPxFH&_QYN!ed(ov)rr8gm{Td_b; zlwP7#5eP~k5L!UgC{;j&kYH3wL=vI`2@oLPyKwLO-+RwJdGJ>&l48{ZfX0|{Ac zuDRxX%kw<%yRzpc{|w(##d?JwF2pl`^$5xm;A*Qay`4rGI+3ecI_%vm8d{!&_zCU1 zcJbM&*frZ{@7oqA#>j5IJ-m-DY^$|Pm7cK#Z>#^sbWOe4XYry2eUo}w>?~dzLU_P#c67t%XiXsFl}H%aPY5M^VD?5_N4mN(f$$ z99@fA1h0>_FOPy3)Ty7 zxTn@lEQ}D<9=GlkGSq+7kWarsiBX4&k)9NC!x6dQ2rKo@@}`zVS^jCz4JU zcE=B>lX|L3oD)p)vn>iIX)}vqNb~HKTTtW({%!^@Ff44QXzpRNbFTYSKhkVY5KuoF z8Q2JhPenrBh}!> zdVPD#t&LA_DCqZL5|f&T_C#AD*DvQfV1Xh>&OQARQWGEu(fW`i=OEc1NoFK*`0+X0 zmrsBzrq7!d^x;(F?EH z;$Q)q+K|Yg7OGQX0@)7cR#p&ZTqPW`i9MD&+=5;o^mEH zOgl6)NprV|-Zn|ezPZ@rPM^gvvs336|1^K;3qrMBn!DFe#Ym%BDit*ESH4BZvmZ;N zALbR@Y<&De{>o2vWY%WA2ZTN~G+cclpT6qq?%5mXpIpCw{Y1I9Ma8$tsvKJUYiabb zq*v$Yq?eT&$<|`6Fe#jIZTmCtB#E$t>A{j*k0TdrQa1 zs_4B&!M3L{r#O7a$Cns9LU4O+6cbI^@i;gY!<5pZ=`dKSfnD-X#2@l zc{rH!QTs^*aw<{6{Y9smqU!_y&>aa{g6|n^)uzH-z-wL7$iRyLi>t^3v8YP*1;omHa#vMF8DNkDlGU*Z(rEmF z)7BCpE!x*Q*-f@YuQO&oDxMk{u*N_>*MIot_T_%wY0Ii?9UKa+i~HDw{qdbYd4nHuh6=x@)8E)5FH(@D!*;pwxLM3h@cw>@9aEVc(%H>XS9Em`5QJa z&f6;Iyd>+3I(D@dVPJN4nxNHgUO}^~)KE_`Vy#yruyqor=YBV@N^$N};T=ykYh#gf zX=|+t&UigpbC`Mhx0}fvU zAkGhwO+%%f%4bQok!G637KRxnl)6h5G=r{*f<~KtcXomuRW{zJfB$LsHv-o+85Qi{ zD^YkxmdeAA${L$@k4`ehkSqQkXYmHr%MJoeF|Wb#dz=+D49yO*LC4Em!l(7R^w&%3 zVV`(tNy_!>O2$nNH7A{@U~qUt{5t7<%Y`BY^V$_;IP6&&^ZDe1dz1@(i!GYRE|psw z^3x9DSUf(d)4*IZ)mtvyq~MHM1?{ZZP3{!+tektDml7?1i$6CxKk=jszX@;hQAO9q z!2%&-Kb%nT*YQO)|O^WX(!6Yj)Iznyf_X>|6_+*Y!Ws^VN89Fe&&Kq?H-vc%rq z)z$U;6k_*2fvZd@I$2lLY5mUBG&{;Cb< z#XQ2pX^AI;s{3u9oXhJPdD7w5I}X904~96{`NzGt7qhl6_d*Y6`E^~dEUs~PILS(?XGr) ziHevAYwrAzpA|a3C4$PC3{z!++gx(=QFF6lweIq3bZwVfds86Mg1Hz!zxY)VLw?ky zRbC;}Q$MnS8L!3f!#aVRqEEwytm80$H(4u8lvCoKmC0~<)!{4Qed!X7Yn;XoqDhMD zcUTX*rm)K4^4iBI03Hj^2oDK)0yTrQ52KTQJWN=oYY8RLZn~}nr;E`Et3mEaUSB0@ zZ|j1wL=)*sHf#3w;f%mz7Y0wNLjO&7hcHgYcPbDdX8);`ag5^A^3i0T_Uo!-m4 z`?^Nd2=AJ(1EcAIYCP4bI|O0e`V2ZXULn`7Ddw~+hUIsOZ2Y>Cs3bFL807@$D(ku zsR~*zYVX`O#OHibw}_Ya*A+blRqLVlc-v0;F1XMZ=jP)w)bMvXw5WAAA9K0fF$q2J ziNw~$cKDJKe_eun_0E0!DqaxXW~os`w-!_1D_4qqDheaXC1JJr2FGVVcPJJPGr^L7 z3#tynKuERKF_*lUu+KpS=k(!ecjw&P90|IVW#8vZAXlF?HITdPa#H?M-GQ%PPaa)+ zfL=i+m%#EAPsU=geq?<$arqX`mlSrbJ;$Cr8GPl67Y^&5ysTOs>twmpl`=g&?i!kz z?^98IIqn85`eNj(jhLVn$mGt1=54YoVheAJ^M{}jY;=m9f#1L0wlGiVMJ*m`pe-z+; z-62}`RTwSFQILSd`H&f$W?lr^Y_0Ij{9JXvWnuS*n~z~^2fO?wPF!y|5_`OH>2WkP zktC*SR2MmCjgCKH_X8Hmw*U?Qxs-v{NTt^TK1NUiml7|1 ze?Xl}r`YQiTM%eC>r}TUv(2#$ErP5FUx{{a_>#ZBcKB*=hq1@?AgWW_Ol`MFm7}%b zQE3}rvJ_1B8QY!t;@;=5Ta(E0%}Wp5CQ||PFvX)*qNcue?}s4pfXLN>ALl^$76$ou zHcc0TD+2YQGz4NJgM%-}-~;mw`YW#;aZiPL-*0RVw$HvKU)gx53jakN0Gay-NA@Qe za1AS01PxCq8-sjBMQu&{`1{exO^Hrb_(E_#2Dv}Kh6}*BT~vA^5*GtbcH4hSlm5m^FB(t`H zF9Cn09F{^`?^^I~l`j;x=D0fM45yD!ruf2+t+?%iOLtv#ue zXhgDYiwI>b1n1?_BS03dytcgpqk1vfu~Zh7%?H%gj?2*dKX3yW<{*&zryS5lJ!&s`|&S zH%(i_HiWQLLNZ<3AzIqs7-QvbLo{%)IJ}K=A9lsrLdXjGLsvJ`16K!!&dmgl%|R1i zKbfq%1}@-a5{bb*T3UbX8)}UV+FfJ1d%X>QR>IT>j8MHU?fB9o`+lV>u#%)L*STfB zfxt`ZJ(lFqT&7U1=v)^g2Z@yQ$m#uIg+j0Ow1>8qjwj`f)LIa1dyvRusN&|nA1!r> zRw{Xc61Yk5$8><3Wf*GiR!n)-mqwtl& zVHpxS7M-eEebsa|rjxDh{O_C^xbPoRbf!Iq3F73*# zCyq74*+Q7%ZoW`{||vkf5*FB zeURrq(}|oNh0@YBSje3IRlwD;$3l+977qZ`Nm9r#8B)j2%*{8ATe8U@kjXX4A0G@t zM)7IK%8e+Qf6GRMuX>cHO1}-X149>9duW7nWC3#%Y`U>3$_lUzIc)@cLrrqp{^*mOV7A2WPb|{*W>B6gj%QCq&kTmL+8b0zqCFOK}3D{}m|PI3HaR zJ#jn$Co(uIh>g+lC*yy)Q@R4APG$vr(d%r?G~fpFxQDUXb8`{ZnBd@Gdf_rVaT@8{?1 zq(M+<3jTw%th{BOi`zHZGQZ&lhrdc{_rmTlE&sLIM@2By==${Z^xo)_7C$@7qif%c z*W57W6!naLn+*G@)lN*R#kB|8$)K~2XDjfs$E_g#Of}m5D{z6I!5@I8ksWjQ9x& z#~u9_@K$$l=J7eO&0zy=mTax@D2GTWKdd&B=JR?razbAD--d;r>~V0~$U5-8+jP*T zIMKS;Vyu!yq$a$KB;!0OMWrccwa35l_^T++SlnvNU2HQkX&XL!D0h6d{9$m04j-iTh-uvQLSYVxO5jysH6bv$MBvLQ?2UaU(qb&j`lSH$@K~Jh1(`KdD*u zB)n}o3Em%KX<+-aUxx<-fU)s&0?e=b?OXI%rPtf9AZ^Rwt(~dERpS&y^uUJnAsEk{ zozR7XeR^Oi4B|WAdr&)S_b0^Ckp*)lb3FeW06Y$bX4>|2$4Tivl)im1TKU@cd(r?u z!vWxaLauS9)y4mO8anjAj2(rzsAQFeMP#c^9aU4fNfP_9Ai2sYF(S9@+y>E7+ zwN@KETuYdB1IXrnwnbGDWiY*V?}(MQdx*rRsaQ>`n)h~4Ona+PR&-@1@)h*r3 z>g$Dth0HO;7S^w?#R%qeqoWx0=q}}mk)!Y)SO+PYN672HirLCKwdk2e;alHydLe_O zTcr&#Qie&7BGDv&7sdBOXQK2gU#;L`?7&{^K>6g44P7G>Z^s3iz##={WZd9GR6*C0 z)7%6D3_;&m85IxNL8o##fF<*tdhyb*g>v1)I0Kr9QTUKSaV}9ouLJfbJj3<9M|t@l zWeZ#mE4(LA&0`+d1c9$s^!ZAK^T-onY>MB(<~Q)-B>q)@MTfy z;J5!%ZtKbEDGEq1$ju#!r$!J8FXSD2*6l%ca^><1ABGfEIv&X961S_%OP=&(1J$m^{IBJ4Ujb$l({{&^?0yPIFJq zbKjs}07=c<(Y3w2qiYATYMk)eOzq=lTlG)FhZ=2?Nx&;*NK-r6?z^l(}RnMzJ#)oousJb&DUIa7zx zyZhP=k0JJ-9S03t6ebbwhKHgi!7pLE0q*+(vD$pM~T7Ed6opblF57lAg4eLdX*zaQX5hc@c!V zgZLEwWn^so#f`a+@<5W|PcyPgXNCr6f@Wp%5%-skOq3Kr!3CXvmZI}=dYVM6s9=Yi ze@QvG%XTuL%bCKU)87R4pNRA1hC#Yp`1axjhO6PlSjg~l*+4@syMA=6SAPKdg)lpx z(`EQ;lcANFWn#5g8(17JkGDDT{KrYP3O5~CgH5CI7(M(b@Plv1Ye&y zcJtPh0RD{41!SGC5W&ESkN)`aqqYy?{Cbx^!Bhv0*@R|ibd$D-Q^(?yFXYP{Iw9Bv z^Z{s4=>n?PFgMMc&*#TU_UJWQ06CCr*5L*uC|okoT9%nftMP?c0X&|E{>?I|&7#COk$!gEy}L@hW^8n7>KvpV#TKJ&hgE4Uj2NrWN`+Ucq!#?kT=!Id zn%3dNR+X}qM!9CsnHGg-HG2rS&tC4bVC&{d>Bv#5Y<6ea$=dr_Wf8Vm9*An zOOPj5eL5sg7FtNv&WQ?bhc^H?m3f4`o?2VLh+p{DUup*p_aG93~`-2gTkK zYrl(s*ZcnKxDTTi;`e`%{^Hi}OX{tQcT;@*N&soiQH2F3K?!{)=26~P8^;0Q(Fr>+ zrJy%=5MoW(Pllq1hprd;j~>W|udAuq1#n4(Lt*!r$m2Q=?FaVwF7Q8lZq%z|dp32t zP%wb+zr9$RNQA|MDzf}6^hwulfhVu3skt)p7`fJ|Xas$PG%J=ekjsbYweHGv=?5L- zl-%=88W6~k85M=LdBWrPZh}Q&dD%q*5LMkC=y<@;9OX{|hBcrLETO0*pVeDRBRI)> z1E9R%S9Vf-S?8odL_i%N&}4>Y)Q)=}DBUJOb>UnHJ~xyj}I0A~&PAt}C9|MBjB4~ULs3~+dSATp3Z ztRITLy)cl?`rGyRKs*L1o&Bhray&B>Vra-Hxal6{9_?E|?ob97I5;B~dz>eUDLB&! zIi$AQoh%Z{uHX!7p2b9_%&~SpWMol`hPwJa>A!;7`F6pyZv6Zj3;;t;lDqEgET^$a zY&bHch`>9=Kde@JH?AfAu;uygQ_hg&1Xe>bd7&aDz7>|99E+#3^!ibsp%&pL{cV8ix;`mY@(b>`PpE z95x$_*2ls>l>@$uPNj-o9Y!+pVCeXWNH$P=MjAwoQtVdH`uaM7;L4^9@gv6?6bPX4 zP6{XQO$V45tbW2=OQP#cogCUA{ur3%I?iSPO|38qodA}y`Ji(c=C-%#!fZrM{*|@6 zioy)<%iVX>c4H*~DCP1Ow{(ptZx(_?j@|Ty^K9=CxNux7Tu4=7;==-0gyW61!UqvLI> zhZ($sy8szQJ<}1d7IG`noJu+3ery3^0GhVi8WcfK4RSA77F=QU09Fj>e-7HYdk3s67vmu=g- z2pMnGHOD1ukw5uoHDiA-9FLN^hNv>4uKk<1;a{Ug+prt;!9xYOCK7vrnqm?m0tGln zlNNx`KNCj>zVi5hsMU=XS`;2+w?7aVH4Dmtets{jMje|C;9kqFD>d-)s2w5G zdWCPShynx{9AQPPFd2Hq(7Dj11&W~X5h8&8L!O6@-)n5He>$M#k$XsHh5SpMW5pI} zt7_7ujm`N$VxV_i1|7}892gn>9H3U6%65h{IC4G5EEzQg{u@GMo1@j0m4Md!H(Une z1CUa?BCslhklv2~SsD~BK?%Ou0Fow1Q)Aa$9tFB3ATn~kvk?x1npgQ-JW;FC4q3o; zk)VgFfc3UbN{V^yyaa`GPt~TBR3zM0W07zH_91|Kpjd-6qTozGNJt3B6F@O&q+yN- zZqoOerXN%a{FBtu!w!7K2zVH##TysH3xxeQUG!UPO0Raal*Y^5a!b2Cw5x2pi|QeL zpfer&(lZ2+WV!ZnmWngQqsiU1!f-tI35e%F2?KNqm@u792^B81j5!;Hfp$srhudMQ zqgtQ;*Eq+C^4jWZ&t~n`q;aZaNN8w*N4e~Xs>nq{Rfy;NU4hIn+yp<#CNwqig#feM zcoQC4b>~lGj>I>r0eGPMHVQX%n!N)mT3&>mTp#gfM{C3Z`)a$beOqQv@zd zfbT&A00O0^aV;oGpb>LOzP7fuaF3B$B!c@{&{=qtgl;rHMDtQ*6M<_I$B#bk_Hft8 z==%|Ke3zzR0b%VO)zQ>!j#Ud^omWO+aA3B3+iB^#DMlNFuV(GF)|dw$-4p1KS+zR~ zTxm#%8;`MZ5L{MNxuM!S%=|cR0;IV{C3rlG2x;!ZFM@HLK&z_1!|h?JAvSC8>T8Z; zj5fGY`Ai|mH zL=@-)ZP_w;ky7CiGrZL@B8VD9=t&(I*9XN1A&<~tg78yLSq|L)e1O`(V|=lbFQmB05TA>1_=Pl<#Y#2Pyhr)pkf+O zIlw1^fa;tBnTzoZ1Fz2ao~MEdZyp)vsEU7 zr=s_|I13VCr$sUUOe{btw`(Dp9=>J|VJtHg$Xt;6ZI(464L)^@pM1AgL1GPP)i~Sk z#e~)RaQ39HmZB;ek6T;VTLViieY>{DI3A+r$pMP!>gYyWvCP#LRK-4LBkEVX+~;vB zv|;d@FCHbRXsYc-8C2v}#+`4{ccpMa?Qx8y3yiOl!Sz3Hx{l~=O;bK3C*W^X~KRaPCf;M7lp;@Q* zUMOEKV@AwQod$0MFi#K`bRD2C@fW@9UTzJ2$l81po1Mc==~cf!A_XgH3cy^_*lpSk zf!xS;XPznKBTOC6NI)vTCb9ScRP^5S1_c$3zXw?d#?SxECstxQ8M@09_?j5t4h-U@ zd0ir~MNV%x81XYVK%CwJe64>Wnh-CYvcFwfR01M(KMCeX-Sk8KOH%<6q=DV^Zmub9 z82tYIU1E8v<3+r7^-c}V6Oeu32UCLVdNRU$n-yISwHl0Sfd1oR^Wg{5&mVUO+ATS{ z9n26DAk)0hm(_VWrXxXPr8rpBK_)twc@U>mPwdOfOYcdixhYR&9D%v@lGrn3gX9gU z4KH4oEX4n)57+-^eAeH~3)Er9%4sj;Aob(fe~AG9XU_SbCEtI?PpVXt0a~wOSQJj? zjN_Vo(@8x}ugzr>GPO20gO=k4u2rKCoB@Jhc>}t`S9@*%z4QP*_rt(c)%))?LV2mC zAv}fm?kPK4+d(1@hw}^$wu}coSRb3q*)pgEfr>%b`#M;pk{iqb>W17y*XI!YI>@i9 z1N82bKWH4rFe2$086zwft8E+zA&}Hc(xu=O-!)<6kyGD~qT>fGt{*ydXplc|D=#6k z6yonLj^vk1PC`u)mg68q8mb!eU*paO4HJZuK+D4k?86YfZ~gJ!zsW^@euCALz~KV| z9o?@gu_o}!mGo6NfpdUpI;3>}(FMtOYvLvitdeC_a(~5>i{Q?On-mC?hv4g;niqCA zvDN0r!5h(OOTWpa;R1g!9?oYhA8=d7-;n}DUV1w9A z;`^VFsrUQzWI|tSMCv7N9zXY!OeW*@pV$WJiY^+-5eU>X5IjVN)qcFr{KBSH1j)!l z0=;!Lq!=_M|I4tswl4>#w!pGj07r0Hy=)GYF}6`wDklgL;4g2SPZm!DJ2@G~oki4% zm0)ZPx&oXFoGWPMg_Qt+fF_GZR{-jP)ZS2ZE6-h)!DEZLSn9?>S`rrK!ASEg1ek*2 z2XV8qG3V^>soV5Y^ZFPJ@;D+D`&0)(kfemfUXe!9TDKPtVmBds3OPfQ(v2*;$^sRK z>fpuepMSwpNyN{gnYE&Ae^5ZyXHd0zH&x!^P|`->s}TZd?GAd!YFU~7k4i4DVO{O9 z!EU8I2g7=WQL)GgVl!}5VUT*{koCN3?J;Jzhkt3ey_2^Syv{0swi-1vJME8;3F?+; z<$`JkbluD#jcvemP(D@RuWf%*OqblYt+*x=;v)vnTZ-DQ4ai3Cd^l*7p%K%5nhM}u zORrzez+Gb06^nSlJn=j%!%N7EPn0fd_@l^q zQ^H_B=nOGXa}YEnhPXeD@yQgEd@jRRV)W-vGcdh~>U?M@_lr95@#{b!DRzZsR(#)= z$5W{8+;a0go~4LhH#alsIWi5}8OhPm%y{YN{IS$*kcAXW&>-uH&84w*+_0vmrvBcb zI7O$X&d#|hG0VWL+!`4h?A8g0iX&zw&>-^!Afe23w~CXh^EDW4a2ze- z4}{3j=6`&s>Eb|5XtK)tLx~?&1RH87kJ=Mq`692Y08%;nRMy_6Vr!jlfZ2e~@o%_d zw-9@m??7zHxupN-KiTbzFOthF3(sbxrw{)AL66Ph6jHtVcyp1u!J-T(vKxz3AK}iE zy;8oy@#a#N68h9qi~{`pE?A~~QEw}U1$FRw&D~Ix!3KTRPe3!NY>f?fa9t}LH{V}J zt%E;FaE*ipuRd7GFR&O_EvDw1;{2S`c=zoB(?PffMlK*A;32<-W3~_<*u|!sEDML!QR2iR$!TZfiO9V1EAaE$X9++FBr{CV)3PQPJ;H!4}Qa#AZW!Vp|E+ z8fc?PKhY3d^0HE*?rp>E>u$N3>LuRo5je8=q)VL2P%3p}Ib`~K?t905r6siLUu~h^or0~=Uzh3n^N zvm;(WpU&2~*pp2W7NEqG;;l!vWUsBs%)>ry_zC1eum7JX{db0s3`2&R9LL?7Cn zE|vftR5uj@Q+4XV-^(`*K(BGOx_@5#`jy>)NF(J!K*fR!t!)QL4_MfYX==jm9pAinak+aWeP(%a1*}nnYKxn4xVp9+-?!WP;t6cY|t8{HT zNid=^vYZTZ!Ag|_o5)R@2f{)IE9whG@A&w*E$wa}u#AAA!9M`9d?jelQ=ABew|Obq zUJiFHcDge6YVL8tCT3I{fdBDNEH8gzON0aA8`IS^hxG>>TtoN6aKCSW;X2fYS`jrOE~?nEV8OBw!v}x2vJ!Xy$j?(r}Vb_S8xzBDS+vHdou=5fnp255LS!AVu2;}4pK6i zxosClCubfQD1%!DveG--zJ%F_gN)n6)RfH!=#KfKIuF2-YE&MSrORN8%BQq?2L4AF@Z_x-!mle>0<|tjlZ$iMQ&{T|L5uA z=hjI9X|XC?RV?*hc}rGlV_KRxpMz9HNi;(7@mTGOm0ct6=QXiTKyyOvgALqoa32u4 zz^cWMf(+qr{GFG=U;d671$u$M1^&Fv`Em2a92C8^cT_YmgFP8>B5Py*pUR8r11XTxv z7glQC(JUpS0#M=Qg`AG5$m81{Wd?d`u=A9zD|goC@DygFrr0iH|cYlwX5)a5wa$&9zE^s1wWwn{t@f2XhF+Y zwCsPTzV=HTbLYnEbBL05TA7Xr}H$Iuqg(4hU!Un6p7{yf>7=9!RG|W8FJybS(bGk$DOPoT_@p$vaPQVHqlL6!7_(Jf<2 z&N)_jWtTe?a?SQx`t^F0`|*thgt?;ZK?QID;dh&kC%w(IlubyKg#SPVu>s_PEd-f# zYMt?0_hO4`UL`aS$b-@rTQYULrQC&oPC4nWfdj!Q;~=|r3^c=L1!dor+PVDqoz^gB zpdYGSA!RBSlu3yceb-t5E17PEQ67cPnjqeh7N`efY#_sb6+E1$; z`l^>wPL?{%@_0P|p(l->-*NXK<%k}tX&@}^F)it_3GGiXa2}H+c~t|T4S_!v9`;mV zRzO!ss{pAf2!;{nbk+3|X|Nzr5U}?SWb~lg0x&K>qnw#mN4QF)vEczwK=?kjJtXH< z4JEun^oZslDa9m!dtuiGr32>c3waQrU39JFb_fQ*diF)+)l`D2iFC4Sf@*mj0gV1D zHEA~&$}+sS^P${gbr|^W$VfcYE980u@Y{G}MVu~X{-HFK01pctTc94fbI{=;7qr>TG5Uu&}1Qo$N1+$)D$$H(p+YcPtZhB|go`9rf?ho#|*o=lY zhh4bj-twD;OvjLIb?Sp7V||w=Z@=^`e{YzoWZfnvpJrar`$=X~-@9d%S-YQ6yQ!M(uU z{l>oZa!<>#Y3K?U#%e6c)!I>94KmNY!czf8-Z`BWoc>nf~* zu~(0th>ZPt!rIfr1D?2{w6nAUUsa{Sv%m1_&PLL{25sYvC8($ihvgPK9y`DM!0{}1dcAcMY*e#gLX@ypWZkH~_LA7lqG~RHUpPl~kvsvy0 zI5D4Zj-AYlFAEC_M$$j90{38KFZ?V~({v0{>+AutTij|icFf~U)5yJ7Pn}&|neHk^ zMdzOHRC}eY%ku7hwnH(+=zwkI_ZV~6MW{#T+Gr>-Uq#_f`)Bo!K_8&naL%gV|IBO^cG*u3&XA3R*^kz=dl%ePLy{VZ|!_Kqzu&mTU{CthMm zf-r%Ufd@^{vv=nkoK_3@HPBhQW z(H~shRgiGs9EEDiK%H|@w2X_nb&D)0JpJpFvu1yOfs~@GymP08_xv-QrsCy6kI7Ir z>=E15y(sl3q+PsAUn&?_{)ZZevT#nXzt$#g!k!@3Vf(W1M1xm(tbo_#x^G$WWx*FF z%hV?(-Y08~4c?DuxL2y16lHE=xQmI2Kb0;w@Bp%D$fJH~{jFOhOS=uGj0pDwl|jd} zxTAAFyzU>b{TRk`E35O9M_x~lSsJ9=rk*actiYI+szy7U`%N%Yk+g{&NpLyy8jqPa zdnNzk#;cWI>Vo}n4ihbz*NE}=DYLj>)?vwUNk&Fmo^{KIf12z>U6rH(oIUZ$3O&80KGrqmPF#lDy@xUFytMJR8 zzTb`~^4K_5>}{u|6d1HzNW_PjrYZY@jE3I?T$=4CswAAKv6hgRjalYQ&Zi}xBq6n2z3Or<=vuZlL^<6qaefA zx-#BdNthp0ogeoo%$kYc@q;xiI#9b9H;kVfGbMb^${r1|6%2iTUOajZxj1sj+yMPy z=au$~2zb0LGAU;q6r~fdjDLAD*ZD4F2qVhtt&ooSI5Qaj9B$-=NVcSNT_#)b&{xmk zgUhj(iMkTEjmf$a!FFo0ud(W(k7l&hu-IEHw~x2GyT05k5s7<#mdcZwp)ULJq58yt z8qYK)BHHBTHq*d_vi93K7U+cymf-XFtWV|_tUQ5ZH~Qs^7#gpJ5nvj=2o4+ zlehjSf0cB7~97B-?M=%;GPV4Kw$B42;2A3M%6 z354T5*{ZrXlNN86lvLDe2y@kRPB8qq_e0=;;qJ`HfEVmQ>XCaAtB~0UnPX=wln`a} zjNf1-YKe0XdY>~xv?_8hueR!+XhMebBtubo{`<%0ax;P9xnJU_8HRk%#c5J_n&q>r z&8dPn*hjlPr(If~#4rwJi2X(_zlsT(epfkmUvL*$EB<#^F7}&0dBMTJBLP{?P2Evz zqG~7US%%0Ref2&(=yihV*qz@J_K>+*;>TZ&UXqF(#XpIu8cE2HAo_$kYt5?-IL)O= zQIJ2)CihA4=;|5^H#g0G%PRb~--=5lV)jeXH!2;fmgkYcwBcx|VdU7?$6r4jtahop zpW#RHFcf&X{d`H5+N-WJz_6d&n>owAI(2u1s*>!PWV^{GSn4jaF_9Y&OCdc?Cv3du z=>=qozY>o|7TlE*Un8{YRrH@%aaJF?N=!H-p61KTZ|)J)V;+H)v^%&Osf}q|N+&6M z;Kb-QuaDyBVnv47wvL}yMuSL;#!U@_VIA&Z(F*3HcIKY=qp`0L=MD_T$=*t_NB zA~tL+oM9fByn3ihaff0XKp2l=5(c+VDQy!nVZ13bx^?HQ-F^4BnT5h($ From 6785c3cccec44cf55a28ab54158efaebe1107c52 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Tue, 12 May 2020 18:21:02 +0500 Subject: [PATCH 112/177] Add files via upload --- .../secconmgmt_baseline_intuneprofile2.png | Bin 0 -> 31688 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/secconmgmt_baseline_intuneprofile2.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/secconmgmt_baseline_intuneprofile2.png b/windows/security/threat-protection/microsoft-defender-atp/images/secconmgmt_baseline_intuneprofile2.png new file mode 100644 index 0000000000000000000000000000000000000000..bcfd6506d9c18c5144ab2639f90ce29cc147ba3a GIT binary patch literal 31688 zcmcG$2UJt(zb=e3<1qGuh%}iI5dncwdbd!dMoI{TrgR8M4>d$VQK?EV5|l0>K}zTl z8z4m>K;raC<@GbJkFTgA2FMl`#KMn<17~JN;_KQ$}KYsJLWqON;r#j^r`@v!0 z?<4+qZG(7tPJTZ4KGfw`?#jax>0qdP%PP!~I&&(@9-PnR3SRw+yoxMN_c>x%AsoVq z9dv_P;IM}0xocxMqaixTdd9i%()#FcfA7y!Twa0enHKj5-O5YHG<#zVC(ircra!Y8 z0XG|6Nw=8XDm&+SEaUgBNDpnvXH&abhJmSy)K$amF1008M|^)thdXgQBjDS?W7>8;#_}S{ za~%m4MMW;(KRpG;gGHwd@av3E(97DGO6?zrl0%2TAtU@rH&;moOjLqLbLr=SB$e4l zPeS1^NN0v9X)!R$slsozf8Kud`sZd#Rroixf~XlaEQ+@+lNR>buD^EW@(zvlOov=b({!Cp%zLev|7TQum~_cG-4UN5VV+ZqJooC=*~%^vGH27>qgLdYXFw9_%6_`R8d z$k}cC;T`+QNuAXZK`y6X4XgcNjUW5Tv!F<1O|>AhC-FKSX1ae&DSz?jTzl-Hf?p7y zCt-fCL0D_28-9yF@ZubNUITSfW5@FK3qcEUJ<|BF*5uNOrWgre!Z6m35CwXsthF3>;txde4OAN`* zBe55C_Q^W^xk|lCZe=gpq8LZ;tPg)xjV0MJ@$14&hrP*K9ZthQs43q@0Um$HPeLbR z?65R`w{*|(`ra2Brc7-7+{(|Hm2H71`^)i@IM~?1teI^a2=QppZCI)9of?w84P zvx1vxDxhx$IUjoTjh9{ryha^{q;$0JXKq_u5kcr2zfE$xg|gRj+u*L|P@X~f9&+g} z*4Du-+?DPfuPDteq@)Vk8WYi_G5f#`QG}qQop4(hL_((nSOH(bSNf<8q$O{Ib(mr)$wB?7<90l#FRBunCqRc29|5XEX87?&`dk8hKDyhS=X-!mm1P z41qNF7}OwBThA-%tpkos2qWaP-7&{dGN)kn{gf=~{x-D1F?hc_dYId^d!*q{MXEch zOVee5ti6xSMSZj6gJbyqz#ipAN5_Bw4={?qW<^abGbEx_OzO{ z<|RXj7^46m?YxCw4W&jhViaaV5uK8EWs5jhCUM*e0d1}>M3B!nxUcJb3x0wbzYQAt z7)*Cbnc1wi$ZMMPmCppD$~c34PPpdSLf>H)wpkU`uQ23 zCr@GvVw=4_O$x~3D%6WNa(DDkxXISXBX;@6_Pw~s{Rqz}8Tl6K8T`n$0l|HttNPc% zPgul2D?^z1ZJ%9WMJ&>}7cKA8zyGtsTl5Q*rZoRuYom3WrnQ^o7e#&{iSjqK)h%F3 zZ1>x5o?3$8D=Qqf?W`s$>hCJv`KC}}9_h;AysE2cA6jY+A}M4!`ln{#yb!i(9Li~u zr-9*NkZ^;1#CFBeLgR^x*=_-e&H4Qx~};0>D{K8#^orP=W#Xi zcouW)0~J`R;*r*mo{+v-8rr91VzSH*m(~tkBURdb}ChQK4L!fiWLhPO;MuZ%-pd?@?DrF{`VqLG-ZJ z>gwvoMjL96oYT%HfpmzK^&W{cLpmWb?viX?M6WB+Cq{0xK@Kk*)vBna8_J0|$Lb>H zeia-1Bie>^YXOY5rVx}}-HK|UBkf_E^Xuymah|eC_o;-tg#?lu|`?{m6C#cN) z(3QlG19%&!ji#{0@Pf#7*O^6Ll!eRir=ZNsAOpKyz6NbqW1=Nk3A^)bV)U;DAa^0U zQzcYLQQKID7JJL{C#tj~sbb6~qigWt#V)!-_4c5`_*Rk=l>kT97Y{DpPYR`~z6o{3 zwX!~?DXdRM;u}7z%cPD|-En&$owE~7af)x{N#sIkD>y?_scZbrH$5wad5O97{TZ@`7(T+lAd zc5=Ch7*UH1dhxP9#csAoJbK$`-S1Kc5gR~TL#Ln&GKk9s28PJhm&<5lUXl>~+|JBc zo$rROs5pw0lSV&8zJ<&dIJ7S-jpQ!d+J^mtoC8NSP% ztvqnonEGzS?qTnMn7MI%Z02YA2CWiKNXCN*HQ(8Qo1n~|=wG}EU8eP>JD@bC{SC{F zi=*Ws^z#qM7uv4itY&B>6>ujKL1-e=`xSTHnoP<}^gpCn5W1Bi1Cg_^D zJ2uwM&5cf{>*?u9C)7av{Ho6T&NLIDD=RBeymlpMwDHr_)YRnUlin9Y25l)oD-foE6iBZet{M)488M|-QY;J7??7K)!VM~e?+h|#M!pv`_A=}eg!MU}* z>MX;YQ@(`KGGa)WQg^lJEFVb3=r52KJsrHwEHgljw!|*_Z3xsmn37K*!z&Pz?uReFU!Ra$JGCk#tdLmD#6IUu)Fja+Oto1 zWp?kMERz@QRUFA_Y}4pqWwkcG0`@6wp}Ljq8`i^$sK+BmTmS9 zKPt466*auwQe`s7G!q{Osu0rcIQ`LDuO#uIQKcjrxk_q66DR9yUIotJ$ov>mlVmlF z)-lKXYi$%fq9>}j8_7L+s%thU=I-m5~mv4Xg3%;2K*jlG*U0Akb zT7h76x0Jw2**#&Sf%f*gBavP2Yh-&&H-1Rw2dAQ4he#x+dvon}!%|;tZs`ow)z?Ft znwr9gOHHMBG7ld+?uZ^RYVbguTls62*1?LTKf#c=l`A>qARqfj zZCtE+{(vvjW*%5>736AEA->m~IEC(rfp(TDfdmUg5oJ43KB9qBKqdZ7h1BZWof@^? z2j;;ADMy&>(za+01^YpGq~LOnQMlo_+-i`6jCVgg*PyDJ1~JoaNxM_;S9rC}J@^8G zcP#fs+)(cT_)?t!gS}!r5CaoEdML-~er`(pVXHyDGC!F}uxrtgsjqP7KAe8Bh@$bf z`osFn=!gbJI&(ZxzL>p$9Mlv&k!P3Awcp-2qJ7zIN;eouU;mDrec!r3G2HZ!W8WH_ zDk>~%r)jPjuR

    7vF?#0f|IoBdkj!5ZUWPLhT+84hX2`zoy)j;Mgq_H;TRNDhtGt z(X%BFT3T8#vE^&$b<+Cgt68;D@9N@k{%(J0Y$Bkla>Xj}m1!2uMy28+2 z1uaI3N1skM?Gd&-S)|qK(hpYul$(*95&d=eP|8E|q?P*vG0`V$RXjloBf|0M%L_Ul zxK$6`wyKFMh3I8d+X3^Quc@fi?P60;UVbv|w$a4XGhR0sUg-g2L!|bu?HWQJZnlQ5 zKGMDvjiur$I74WN*b(J|`_ z+HIOzd1}!NW27w$lI%bpwpbt}R#mf8OybYrUud?u(|S_i{>O$quWB`6Q`u_`G0H#W zLsw*&9Y&@mDVeeK60sv|mxGnnt)pFm_T=Q7EAJ$Y$y3r1hK+8|+PmB%|5}jZ#x7C} z9wP89J%1yA0c}?^e>;3FGH0RoNL!?*35K8Js30U8v3R>mQR!rUNaUOp!b|U)f!|x{ zvVvoGUwL3FFc@DyztD_p@$qrdhsUv1IdO4u{rzSb7#JCU)#%k%>_oVr{A@VT>`|5m z>L}?yvQj&53_;<44SBjY+>bFGX|s-aYxC)J8)ZE52{>qQ3f*o_R}Z4U*3UyHI_9#% z?lA_G#a8dTwY@0*BHrBw+fR>eC#{`7L{N?B{kk)ex$klh#g=@0<-TO01T*Dfk$Nk+ z8?62aex2rLY*wEFxBEf4Ix!W{Q~O46<>o|W!}8B$RS&NH^I1E_Wu3&39hTfzRq|Yxh%i1hH#<(KUqY^xrJ^!`?^+D|E9vUNM!LOOQiKWvogg`6zm*sRkXBda4y|X*Ev-BrnHN;h6~$tMjDxXuHY8xB~<2q zjyZgcEz!}fXin%UkRHpjXp&fuV*41r)j5_MJ>@sTY-hF+7NrU3d!(0w^2rxM28ExQ z-rRUd5qm8dYU)=M%^z|vp`AoSEDI~_|5@&}90?ND-|KW08UqAFUfV_K{&h%tTr9dj@d;=#sA0(J(${Xo?QK9UuJMywo< z%o|QCEbDBT`kthG1tQw))tQV8>0j8TchP`FGKkA=G_&#@Z$@QqWghlMtV^$@6tL$1lA13W*+kl;bm=O** zGKeyeeDYltD=&ITYj3T#VLGtaGbm#meQ8QchHyz#CGXMVB2>Ik-k5u1IC&2|j;B#y~rOVO-xGhzbZq^eO_53yTprE5tgf7fxW4IXVg{qKT8aldfsfa8krzI)6=;{ zTS#jYqPw|us5haO>DYLPG1FK zKO`iiqoX5}c=m;Ecz6?iQ|($sQ`1DIw2qr*L-Bhef$#vK=mP?QSkpsZ4BZC=plppW&XO)6DmlYyimx0@Wy7#M*9^1Apm*QX2<>WQTx-s z{rex)l>yMp`_HWb@bTm613)t7FR1DB6vUc~2P)iM^CJFxoUj#@N}XwoY>=&}sIZ7M zHckK^;`#8(wXiVb(o?rTEFBy$Vc#=FDd}i!X48Na6l`r>QE?9J=(zv*RMdyeUw9sg z+w6GKr%3yZRAaet?jDIWGoux>Xp$fRpi+}{UTGnJ+?}eZs)9TWqJNGJ%(w_tH)BL% zNC!Wp^@oJKIj*r$wdphuk4X0~2I!fVP&^&u*S6iSA>Y0;k3yjg#1K}S&i?-Ii;Bp! zVNhuPC-Vpx3>LXo-DS`5x3IEuecCJ6Vq!2?TfnJ282XuO{&mfpox*%Co&;u`1>4%@ zz>+#D(CDhh`J)hE)l_dEPPQI%2+hBkCGQkHYU^QZ9G{t)8K&t71`{VH!WVNqD(+Jc zV7wox#y4iOOHlju7$9&Ue{HNtN=lLr4h@~MfRWlFLlKC!8NG)bj_eO9A6ef?QV3R! z&1k@fB#4Xp{Gu$ARJsrJCHfw)NDnu=3cctojFv+(f|rM9xbMCye)pT7;#^;jf`eAt z;-WiUN>0vNgzps4GVY^Dk(wl2<;%nv5nd`|_Q~=ud|NhS~On zd*WkzyEdf9?A903C}I`UutIPeNz2U@!qJ#a$*eB-0o2UUkOdeV(k+qI`u&98`%WKq z4Gp@DqvLvKe3xwd+IY2ilV&Uo+tiuiTrE@8YLSB9r&nRTGiB`2OZb*>AikBO{Y{3T$VGX3WmcCdjup zR#$H(D)fgp(df+K!-uhon!r4BRQymE z4}gCndtvrqj-19?$m4M$)`zM5A~056SN`$DVVtLNdfd4`J>E*CjG0??d%R9XDbRhleHe8fPjFWca>2;{uw^?w`6OeDTdD*P>j5aii^MO z``j`$O>$rxmFYS&EQGjQ1;G2%lzcg8-B(%T+F*)>PP?-7 z29mo++yWr?0s4ic>AjOYJf&ix4C!*+OK-ot@pQ|(XVb)(gi)LASQ45=3{NET@XuEU z7ps5%C0)#pd$Xfs^M;67P{HpeIq0909fA^!qs>PRTv+=nm9otpIdXr*n|3Q#7+~@O z5rd;{ zs(G26$pvRLC_CfZ$w^w_{>#~`cex#X;}d0#4?mnq@l<*o?8%q%;4-^@Q z9XO6)ukv0@_OMYeW@?|+pne(OE$ea@Srtl(zTN1@yhlFlak4~i?s=%HKAO9e!W|@o zAr5Xt$|`n`m#MkC)-8Eabuqh-cXz^rym#`o|EOVCd+P_>+|}aW{F&HswX#n4{9Gm1 z4Xx8Hp`mM^YMskabI_Nj+Fje#WzKe?UGW2pVR6^zS1k(^S{R)dqb@O0w=H4?{C}ve zt>Y}Ptgi;zfqT@37FHd7Zg%|h-tQnS$~&JXqq^m~G*pD=#v65VIgU;kx0USb*N`3S zHbyvSyjGx5=*K;B3<}Bb>@)VlPyv^^6fTI~5$!H~tp*-=ih31fCKv&KBtH9{A9D>N z3#}_JD*CKs3gRtz!FkvcNPL{0@JKK}aQ-nDasM8A?ka70fBbQ5^+Z{V_en`no%9d& zl71I&E32b;dE@#aNz3U=9qy>Fo5yc<-7~mRfJR5;uM)9Kf2h`o>Jy}M(e8a0zQ;sO ztw#TRnuV>C&v1Z6M{|p!F(n3&0-jTv=ku<+-0!R&XpXqXXxS6XW9Eb~7INc6RmeFm z$>EFbn$g*-8yi(sRXW>!3S>jEz45N;7{ais^7GEhiVA289Ao$Q<`rZ@6VOmtK_D$X z#lyx6F$$;D@I#E+eHBDVTDz6M>1SGZaZ1SIyO|%@d%O zKb#2vy8AsQCtMV?JzTI)4 zUi#O(BT*tI`#0u-q7kGb61yxsG^%j^wPnE=J53fFGG5)Ky*ef`Z3xi@u?8*6K8 zu~@8{*8uAJ{ujjO6DoB$oY!xN-#2Dj8d_TRUP$UsvUjew?Cji7vrDY`yX=pQ>gMq6 zMU9Qt;hwaO4>wm*_Cl(pSev{{`0XJz7!u#BbYfUCOh z&kI-zFQTHaz_;EqF?qCDsa+A!_FU|#i>m%NpAw?`xDKgk6D3pau(?6P@O6{!nw0fO zsQmr5L@tLaA7c91EP8hE1^Uc4fDd;3P*PIjvcrg?!kqRF5+JzrueMp5`Lc9&+!b-? ziQ~uDrWyvoHw5os%!WHJmx=K}=IsL1eG0~a9b>dQODusvI3XRMU? zMNp9{wn%!a!7tSG?hv6jtglv08O74bYia{>vCj7=e4YOD(yE-n!U7Td!(Y8_6cTl~ z+d8XD^*$8u*G)!ebt3PtlbW5X?U;U{JI9{xr#jVbK5n^aogn{J{^3rWlQ(+We%Osj zaP+33)GrhS^!-KXi3%n^)}fkst^KO-^!~;dA~}}Dc5tOTjiR6WR;&5H4U;%s9%*2fELiY4ZQr3;a0*p z{gB!tZPfT1t+r z2D6=l&U?7OP>)7CF6UlCsobfOgY@4mxYGi6Q@tau!=Zra4p;U^^k_qGx#RbWB3OEa zZ4t)jI&sVth+sbMn{=`z`=vd0j_BDh?n1A>L|d5S5F}6_S1<% zn_)uKkqM6i2P>=eK%bf5XY#H3q2H1{Xo`;YqL5pJkFw9#T6)@Ney^^v;VmL!2!3}D z`;Li4Maqo?F6D;;hW&wgJn%yZE%>S|700Bl^0cu3m0>^;i90zIqDP=T~3uyLttUUK%Y2EBlPUiGi{; zIkkc_@*?fOOFDu;15#zLEv&8ULpL196n%EL7II?)i2(TSU>OY+h{i8ewZoid3U;~n zt8;Tq9a@l#4~xaENIA;g`}~Bp(@D(}v$!Q|J=h%mE@H)4Rt3x*ffkCV^su;*@L|N> zMkCUXwyIaa7DJRMPL7pg_JHbT)qP}o`Zcwi)eVX+)XQ>;Zc46g-*oSP9S*cGXa_J3 zU7=4me|tbsvf43d^l;$;FDq@Ql2oO)LU~pr8!y(wdM;~G)YC0@$L~=6U6+bVJ?U}> z;fNov417Yq869@Q5wL9xs0^AA2Tqv8fLK3@D)E^WwaUerK<$W9M&>=Th7=VfPFhw# z(Ev+B{PFT(sE>B;`<|65xQ6p6b`v}b^&Ts_QmS8_lQPQHo;xZv>KDG8x4 z-cuug57k=lnOH`IFZ5(Y1k;NTiq&>E0LYJMUB$MHe1qz`;mYq*+iPQ5Y$llIpYGYF zjIMjR;tMk;<8+hSXHH$p%_#p_ro%C$j+U2D#Fr@R`PeyxE78x+&$yCB~a`Q|r zg0HfFfEgN|heNiFF%l6sZ>%?FaN5y9G*3G*jmh>D^_}ZQZXxxX#KQjE`X2918U4`9 zBZtO-DA;%R8OMRUD+77)m66L-MB**gAMHOHf9+e5TT4wiN;pYLqCESWT!!~p z24euOW57#axim?9)Us&zgdxks>K+LBlQ@CGEg#o|>4i#mDf(w;C)QdY1)ra_>~~1o zj>^D~d2>JWKEzULIvecqAC3ks=C^EoFSE+t6}W@H=DJkAzZjqOnj0S!cm9+yd+jma z4*o8~2}n7Jd=@*6p`}59nZ6X3eq=&@tqu+0Rg%D|ee z?GkxJ_bKAw;QbsI-S|I+rh6dv0Z)6N4u`>edwT=wtJlEb`rEY1sr8u_9RRlQikr+N zIosLg*}eAKqO9Y&`#|s6q8vd^Qdys|n&uIbIaq1jnSE30BHq6HNPSkRq2B1SDP z+q+{(4g?&!HvTr;+d3MxZvsGbFx@0eaS0 zI|Bzm{wZ3F?DpCeghNQH0pf*ssQpTW4in!zaBW>iB+#R)nN|E6NNE z@$2nxV`|pdsaK+)z0$$B;Gfh+iaE7Ad4TX$ zIZf8C-UlFCd+HyiJKSIlR3RCh+DvM<1z>?VI%m%kiL~GwyiE7?BmyYQUi6pmKB*5~ z#&|(S%|hIeo1g&iF|mudpRRaLSyjeHI~c4aZ7ikvuAiHSDIor0b^43geh6BZOPY(R$R<5Zxoa%m|Ej2rDwt{vcfBe(aV;qmzA1HPtY0t4E zpNZ#kSbtOlNdZ74=wXZrk176UAFpdFcn#Le+S@G6w#CIopde}kaE-x$VNe=2MA0n! zI?bc9Xn!G-)CQ!gOzwbIR-5bSC%onl$wP>1@3swhIVUz7S{Gzleedla(W5aS1S~~; z_eYw8lr2MSMNlJQc9>eEM}u#;=qm50rX{~Ufd$_r(i{Sig}n4(a2b#>XL z0$RyZK8t*+zrpF)J*5R97^=%Maz)1y{8Q`)D|^K3-6rqnECy}gJ?BqOg=xL03PJLc z5N7Mu>#@_wmlAGv6ui>el}D?~RBq5p3NK^zu~8jG02lIMSbnn9(u9x#5DF(7MSaNy ze-Qd7qu)fOnY-o?0e?wo!Lq|Ra_6%cEo|joIQv0?B7g}K zHW9W1`4_2+OwYfb&dvZz05JrOP+D3V<($MR#xjl2J&WJ+Jo+_hV~s)HzP<<`F#*t` zu&{8(isNn%q=F!KMySP8)vVTIV6=#|y8M>~`v89K_ntgz0~i6#VxoQNC8!jM+%uLv zG17L0?hrjTJDwwXYUYpEWy^vIiGE!Ku~)Sn@`#9C_}+(Y3$woBMxc41nLp6t*yfxg z99bs!sIOW|aw>14f;AQPMbjFb?BCp}C|+1G)VL_N8@3{A+~UWlz_O}86-a2wfd<<| zWm*)16RbB?hF#O61D$;=78gN3e~5nta!FqJ*5Iqe8UcUSp|Mr_D!7(G_|WkTcUt}2 zO1H|1yxQvLMSgeMhU$(*c(Vonlqdf+bm~4-Z=eWMs15&Z2r@u={z8&$Li;Q1`%?jE z!W9>-VOw4W403n#>h*AfQB-sDVlM2L#R@U|rhw6e0ZlId(i&pfkiT;C6l@(AQX+2jHZQVS|?Wr!{&2e3tABfLlEo?V7T-HM)6&@8MhB zW?>ifp4Hda1I4U29{~n8*MP72m)Q8wSBO|elU>kf{SAGc)yi5qJUcL{6hXM8g@xi) zR?t=O1cNOA?7o>sD2vf4aPV#l31~Svdx+D#-X@kXIZnq(qtPYh8@#95iLYY(;h26BPeyy8;OtUjA5Dc{7 z_Zuu;%#UbjOqb>RLEKmNCKw&0Xbx(RxevH>y;TxiVN}4e*&<=BT}DEIZX%b006JKH zO!S`9`sI5QypAjth)AHZE^2=4c)ogbbL;*6*J&suYq;x+g4hoaUh*lefT)d8NxO*c zy`=Rooi+nw&Mk4jr{r%6RA=F3;gra@9(!vdm1)OTIZ!uYc-Fyf$UR=Yf$#1&{^!W-h7 zF}ve~SLC9=KBEcF_?O=Y4m*D)&gvyr}1G zOOe%OOtG2{jdra%J=yqm^W^SGZ}x(UC1m8UX8QJ>?ew9FadcID{;O8(k|dm1IR=p7YCJV6z94?2DYa zi!*D(E*=H*&>>0?n)~Xlj-2{DKD>;%zWm}QCvnxNyC4PgCgpU?lK5m(UEN53pp=yq zXqi0v%ae_3tRK&RUtgX>`RWx>es#ICC6KQhyX^8gdUAAU|JSYg1o=^e+{q$wg9g># zfgXLY;mI)rmWrUS^)UfC6SbVTh>?>kS9b?)uWrYRu|IeSXsD`x@~)ogZX`>?Fj)Z8 z!yv%y>Oye*crOWeMEj)I?Z_DR5ovB+d>m1gbzyXPX+WwX7Kg43Q1lRep!fJ5uRY`9 z1>gxm+=Q`|HDUE8dZDd2S2*UpxP@Z~gO%9s9CDL=>t2f^c0aiP`Lnx+HPGJZ@hj}Y z>KE;CzV+&pEV=i7GHKd;c!P+ZFFL)sD8|PF2W686n~_Lb|G&zwC_~v z$*aQ{g1jj@a&)np-R+Np8e)0Xto0ev-sg3XlLH>#SCJ~`w7nrs(tR#dE>2bPoNqc^ zj+_T$XRpV3N`Ou^_Szf;b&0X~o;eD!Zcc9hxOejFW)uItp01%Mxo>el?4cE<}$S)uX8nK_qCd*zTRJjr);(MQTcUz4VF8aF880bM6AM)uwN5V1Jn za!Q*|XJKc&mwQS3soy%~VdM8W->G^Ebsv!CHd0FStTE7%g6fL0b+N~4Q6pnx_%%2A zNT5(|MeH%;5fo$AgyO5a<0VfX(Ofu;F6XW<&!SgXzL4YgC5+m_Xkm8o(PiA8BM#|YE!^1&cqM?n4tFx7ioSd8hZZJbbT^(TE zFw>Kh6?)dzT-{6Gd!^zN5{kT}o}SOh%9?8KG$!&VAkDDOlxj#rm1=zTws8Cc|b(pO*yJ!oqzA!w{JKc4ttg` zJByuLkbaiiM>)jvsK^rFeqQJnmX=;2`@Bdpy*(Jb08L9(Q9WTU9cW4(2BeG{7Pe#YFC`P6w|7$JFeA2l@Eh>;d`WU-#c>QvZt;{|^}Ld~9qiR`p>E zoNA9;#c04a=T?AW4u4#mSi-Y#$BrF6YL5`Pt&iTAjT&w>me1E<9>xOH*59JjQzX(< z?PmT4HiRDVNBAxOu4LY?U>=_PlTGi-J;$*5*c;l@|2NN+CWOiK4ckerq9cQ;v0^Mj zKg7Pk6FB_w5E$%-GY_^3i2{)q1;gM!A!1iqpWK$B7rrfV3fs%~PzWx9>DX`qcmyl2 z*b}!w@xU|pBy-QB$Sc+3M-=9r!iU41R>Hp!CCy1%O!jaKi6U)lQ*frm^hO?$+Q4j9 z2e!J;#G;Ocf3_b*aeA#t&Td3Y<|DSMe;sh=prP8+%d0GT`A|%n+d?RQ`;?yp4dX{z zTS+tC+arr{278WL6zq;jV(f2(VoPZikPKTux*+oKiWC&MN20^t@AeY&A3pXGjG9(z zd$qT#OF>r+msb-N+?x-lxdBA12Pz~J4Xo}D$sbNG+}qnrI+I~Z=wd1S_u1r?n3&;| z19i0rXV0(EB}K?VYo0L`2_XgcZpk}stbD!}Xlwfs?F#g++S~6yvyp!IqXLdLv=<-* z^yw;feYSeL%goktNC_p z#E=3A?NiAx5T4sclnMgEf#5>&^`bYP{6@VY1wkby+Q_NT^4vhDfwnyiD^^GI?MlDo zNvP5c7!tiaT)=*UK8{9=X+%UuTI~={aqUE{8kayw7JRQE_1H6O^OmDd`zc5WNVW!^ zfpM_9*8=tNmzl~o7wS>b*8tGdvaUoK?OAQ~Q2mj)$&a9cwcsdM7?Xu0|timbQo=a{-Jgy)S=t;JAZL@OP9}WMw4^ zZe|Q~2z&5~F5vWjSaYSQBxQZpH;GaxoS_HM4Wp48xEgB{Jk^kFSER2^PRu!_O?!ij zOrfg%0GUnW!fSOr7?V${jA?XRH8HWBxo4Gc1SjK#s3BFzHl@+o5lCc4 zbH9A^)4~6!B-3{inlB+_k>pB|rk<-J_;sc6VcvsHHOyU4kAE#y3bniQ#gy zPQ7sFSTal9Wl<3R?FXe@yR|kmO!6Cq$DL0$EKcbz2ZasL5PPy~-fb{oICo98&xBd^M)PEo+{O{7L|Go>p z@bdCH1WecaOw1b{Bpp*PuXi#@|2F!VKM#aq|0T-agzQP2ni5Xw($LUwK$z4;fWa9@ zm2)p*5XYfVsA3E{(GKXc^|w0}suLCMd_MvC>*k-ss!)u5Qw{Ld);2@zDyyvY@%O)% zf<=jy@VT9nQBhQU!fL=~l+elvCIBT-YMSQ*?3(IpQ|~$`fN*~J@CaQ@xD?`_p$RaI zfb=CKG?d9?wv>wB27|#tK|wGW8ZGHk5SRz#f=8dni}lg;)v>XW5myt4_Xuzu{S{Do zSp$l+dk{!N1l=2!4jkhEP+YCa5JhCupqczG+DEYJ>ARUSMU1Cbhg|1wNJq1mOnfLH zi(h?W(7c^^wn$ z8IR9jv$>x&e(uFJU)N$iC?Uf8^q6|oQ!Jo4+%k1?Du~Ii@HS~mE&pi+h}k$mJqnbc zGci9Db8~Ym9qa-ypMi5CCleBj3K918J~_Vq^XWLrvq!Wl%xz5(b!xcs3UZN`jToR3 z9CRhYGEmsgm*}+-Goa?{=~0Y7rmgehQi5~RQE2fpdBehD!ukw-;{AizjA1GCu5QUK z-NVSI4*?YTDA>CHZW@6Wh4i)Z>Mn2uPV3yvOVoLr@k$4uv8k9>c8G(OwQuwXCT4ve z`HRVfvD9F4;ze*h;5VlS&rNq;G=;c)1v^7{WP_gf$Uv|ra)N~fd&<41PoH8H&${6z zYCR70*h-kz*6IG=7fx%LO2pros`sr8>`{cTjej>X%x!hfL4R>}aBzt2-gd>J^6`!n z7_V+0e$v9*p!ZQ`{#a9F-i8ngF85TNBf|v&ILb z2MXJxa{H{T;xA`fc#TKqtAyiq@{0^I1mqoks1yLmWB)n%`s#CFpKOe2$8(B3&gG@x zpJd%gI)iIykO^>a<@Y&Q%2)LQLZiHm?d|Qr!4Dg?g?fNAal#{X(LcBG6j|gNEp2uJ4 zc*OKYK_erh$*C!-_GUSY#rpK=_P+W#9-i!bmhfAE@^bF$zdE_ayDfkI0TirH|I?zU zD?bX3&(ydj$N&-0LYa!iJfWq7U2w+nc2f+v*jQ|vQoxvsg2X7A8MMg&Y`eHJSjf{W_42Xyc2?^k& zE;9VKOx|1c3qvSDNrE^w)^gaZtbJryrM|AtMy&cg(%d4&{?2bab5|AL5xfD)6%Y?n zC_RB0=ikM`gbZC=Ty6|~Nr;bMyY!~a`_ij>4**pw8r>^2>@|~|ocu$t<70gMQL#@} z_iooP08J=N5n7D$hS=^J2K}5V6nseTO!D^e^$j_g@JRMrBxY!scp)%jClUitW0w7D z3q`=f*VGJo+~{}%oZOUYz~}*iHyYL>MUG_7)i^?&AxIK;Ijn6vXo}Y>*qs#)V`eZ3LAH-l=!c}bzSFl zWi}6F2i}@dXK%dFb!MzhSijE%dgEq*`bZyk(bCd_FZR7G2RfAzU76}&rG0zi&`@Dl zP0bCoe#w)va=nD}K(yb}i2?u9h`;kG4glgFM|4@a(aY1byuAD;#Tz&1^Z6X0^Itia%AQ&9_4OTfN`F1_*Q>ibG7(1~?C(n_)jyn3 zhmn9tr<6N7YQ1;jBajx1p`)fdh?{_vdh_FtjTXQ#?z2m`D)|rEseeak{U5i}?3diQ zIRIk#$Do>}WMxB20_F-lfd3ZpN8GU(U;_W9zW)DJA}Gif0rn5p{B$4*H^EUNMghTk z_}}laSTn=ke_nfMm}CtbtrWa)!9N2qo0Hho1|aq{o&{!Rl{eyvi{`L^bdpFhN;-HG z)$p&BC6kq&4kXY{asYo+f`j5Y*gH^7O-Owp5{b_MJRoi6S$V81J?l@7;0;*|+dF!| ziajct23%>OH%s8$x#BXJUhu*FyeuqKe0Dq+0V z{2(Z(b^+6oAW&u3AUB~>A3)aEk~XFU0N6W_^`+CZvY0fQXNK;j>myP*oitB!`QXq{ zs!uXtBJwuxZzd4{PkmH0@ox$43ke3cu~{B4@2+v{t-SA%DkLOS>3z7Q9I!8b*4`ey zJh3D|*>|#dEAE8w+N5(pz$Q=zg5M98q5xyTU@+ci^i=3|H4$ekfI4R6|M3EC1zYeP z+gpXNjID5eR_5l_KvjV${KVefmX!tuV`p}7pd@{Mvl0LBs*yQ7wGv2YW-knTc7RQ` zJdOEMh7MS)n2!4WMg{aI^!@$E^CQ6jQUG6-k+E!X2K2TiA$%HQqa@Ns6~{KgQ1Cpk zKY6*H5}DY}0`xV`xLbQUVAB8wRcl_Cci^qB-DttwYAE3@61nH z##<Y+yP59RZxA%o( z0Ma)=;-K6vt*aZ!=zNSs2_76__@`d~uSsS5>JqI1Z`k|;JQH&h*z1`=LjVGN`0?_} z+S*8|5+CG1V*fE%3r3ut)>N%5FZcX%ZfI!e#^jUqyO({~A*-WF@R{n8OC3^Td}uV< zcdYU#AV7Zle|pdjA;3%k-BZbM&+Ibl*uKUp-jEf%QxMdr3v2#ov8w4v2N$0$b|p>fSII zaR?AmOi$ZGAZ4AvIj9i3M*p|;?xkQzc=#^hij|eiwf8^%B5ZKRV7NX&mtral@MO|x zk4vwBplW&Rg~v>D$Y@z%;U{H}ZbOAS#-~r8fbaP=T;*Wb)B>jS$Q)4WTm_(l+BwGA)-Sz0H+e0=NE0b>A7*RKD%) z+!=MmQO5!Zf{cnnLQ`qd4@gG{AwVEBkzyber3z9UD^;Wf5Ty5n1ZklOhze+s5=!Wz z0@6Wx5%8|)-1mL&%(?e@&b{aTaK0-^_TK-ser>JY-Cg1-R~FMU)G+(wqfB!~$6GMa zTcivjndYpADJm(02LKR|SwaL0k{Sq0U2Wm1#UNHIT!(4~iL8Pde;a>V(PHNtqavr? z^HuiUy}fxnHj#qE2%)@!0#-{|4o>#szJrfJ%bdR9qnO1-Fsv+6QB2RtpgH%)MzMOH z^%ci-qDduN6j`{fM^du>A)rs&#Wpo*p`(G>8u#w)<;2MhpMEBfc#Gh!)E3Sz8tk+4 zJ4(MH*Zr|Rw7;)!Qv|cUe<^INTH-dJX|$`8Q|F{H5Y-1nM5uAPzT_wKtQ*#GJ+{3? zc5u3x)LU5|S7sO;Dvo7VHB-~mfD)F;5o1dc4NfjDwCkA=xV4fsya`vpPO)mW$&-6q zp$0fxa`N%Ov}-L-WE@Mn{P|F)Sh%+Jy@{uG=E8rO%qa1gXa`J&4X%%h`*go2OCpPk|GZ%2`FX4ore2)c3(0rA z4Cweg&&7Nc?YFEM^)eF!gO3{5PN`FE93vsUraqP3h1q~I;9&iCD5y3pHt;QZlF2hH z#wjHwh5Qk51I&iga{JMyBGjl%!HhjUNI+yv6La$csQaw2To!_p2P|x8aUYOA7`OH{ zS{e-Oq?E<%Sl#&xKD@c-Y&}9v zR)}0Ic8{LP_ScU#LPoqik-C<3_z&{*A7MfUD4ZVMVS@GQKuj*+HB^AL@kJ-ca2eE*z zgB@Esam|CBAIky^U~*g;rPH;m66|qi@DUak&eAp$j1<0*zCxP^Li;d!ZWsC0T(O+{ z(*GvaS38*c^Jrkk+13s;g7YL0xDQVMak!^rBGmXo^|y~_3#vVa`MI#))x#km)*dAc zF?R|@#M^Chd|XgWthJo7zBoqk)KQyE{ndU3iH{@}52|K`jSFOWiX4O)x{11$)JtMu zn7FKHc@<`es~^Rz$occSU~vkiT92IW;=%n>6tH7IIDQsRCjJR{a zZVGBC;s*T8m!>e`l5+vhY=Z;+yENwWzmll-th@f~(pyvyb#X^_B829!+`G4Z?BO}Q z{LdtIhMs%XGs?=aQNmVMpiv5|x4-%``{N2{GMT_tU`&&R7UEBW z*TO8Yvch1Z&spT5Lp$rbG#n<{vjztTsZsLcw$tuTDkOXDZauTB=zvwBTlDx#CZR~bjDupje z+ER&9&IX@J`S~SkzJ|T&@nrx5QgV;nQnl6@oMxW(q>{;1P&D%|N+}NIET+=z+6M zZ2RQq`l2$}UhWEi`w7o1+g`mWE&3(5Zjm080sZmf9ASm>T4kys-#M_?rWPnap z9NCRwwd!#J$8*83+!q-$U(yi-4^0X6Q|!E$s-S?wC#jn38C-{n;?%@MVKU;JXa;`8 zKt_WGro<1r-$W&4H{$57P(_ZkO^O;iM4K)RiQ=CnH!!BvTA>^w++Qi0+uQRp?w{5c z)vuguae0>jkclX=ZfCpI6cs3-g3;zb^ybqEMo|ub&f7_3VLW|8U=rYkYJ3s?G@B8u zb^zk_Ce-F4a8G7e*C+>n$Nd*~%{bP1p99wts>vL9?gAA~2#L%Ogzm3$35`ahP!V*d zAax4w)bq5C+2sed^J+M>LvG{i`ic5LAxwBnmU*sHB>3(r9n+SZYQ^PQ5c1BAdT+&? zmn>S21Ep&F9Z=@zQ;PAMNs>?)!iEf!SuFIzi+{jP{cBk|yfF0Zz@J5=#kcSQb=O!j z)ql)C{|`w?wp|HS=n#$ENe+G@e}%Rxj5^D*)Mno(-|YNkDwG^4TZxBeziPU=x;E?q zmBZm`Wpb&bi_38yW6+acMMpi3c>pt)pyR+$2$|nBdt!E0&s18wjts5d8R78q{yrBV zInUG1Na84_#rBskKR0T}N6MDd@vsjD?hi{c@)b5lqag$U`&G1A4tcQZi>_#6s<|o5 zrg~xvEN2q-+X=8#x_n1?)>wkVd;R~WIvolX0e;*C=LD7=Bt)6pvHImRpT$4K=xz@| zSYu@eENOVYoXmeQzV>PEqqt{o7ha_t!1Rg=`56c&anm&l@S`OsNx`)RS5?X zW@)Qnz`djUJ55h>GlDw=w;-wNJhETcP#X(nTCwpcp)*@V1aUXmOzN%r;?-hM1a|G- z4f~w(6YhKsf3dKzFg|DjxlFID4|S|Dar-|Zf{)0T(`QIx0rR177^n{MC$T`+Eh5CV z?I&stbFWE#?9D$SA|j&uvKAeW+JAT!p7{4c=Oh{0!Yr!bb&m=lkYovshy$P(jJds* z+=m%i!2TE>Wx8>%0!S1kdH#SE{8&VIZ^5tHHZ~dTz}s+WwDqV{;agGTjYVsEoH0D@ z9mz>nk1ZjTGB_Q*x%K{x?}KtSz*EK?o_f$o4C^HK6$^O-nxh_%ERq=#@HJpTh4}Z4d>c0{q08~79TRt}sq$qNjIviD| zClL+!P`71C#_@X7nWz=Re(tXMJ=B^S%Lgq+_Z_socrN)uFVD{VLmsLyB6Kv<%q7drW$yeUSpyFC1H zuW&>H&d+9v|B*#*dxl6z^2PQ_reKYNuaxFJJYUs|+&vP2*w5zKy(-p4_`IM>aTCyK zRaIt$*PMpqSlpKmcw%c?XChPkxNsd)TE_+iIyR$gfPc5}}zBj`Y~ zH$JD51@cJhB5uo(hQ`K~y#i{-h)6>h7nhap#7^q3Hg@cOd_vwH9z7?CGbe4JdCZ;S zZY=w9&Pbn6h`{6gf<8G>#%^Z=>n?{(-9PJejcZ`)P-13$l6_0B*cd(`bVu|F+1t5J zcg(6NWLUbmq2Z9H^jpmx?ycWwcbEc|CkU(JOP!6V_6-x$&3Gv;g^kdL>h$m!4|`HX zZa#;Qs>bIj(yudogLw6tJD>OleQEm~_%a$ha_@N6sqWU|!c6t)PukzP*-MLR@8Glb zY$;DfW?mArv)wnY4LKESHWwSK8b2Rp<=-v1N~Ug+NDPtV51_M`8$?-XbO>Y_b+B`A zRJNz353?xDZ5&&3FEPrrnW%09ZDTKo@Y5oTHE~kkTTJF^FAetjp(90_H9T67tINx# z6}D?CIgF>&BOk=7f%<&ek1!jm@vmY}KSpoZ&Aabt^^+WuvnJG4Co|a>;66IecTe;8 z8!yFF7%b#1?G_()@$&Sfm=vm<(kQU_wCDkO4@M_U(xb5HDv!*G5j-i8jQB&%91w_p zeXyk=ACNfLi?6embj0JZ-w`$`X#dGC#`EJr|`fkADB)n63GpI@rTWWZ>OP z<0#LyRy`K9BM^`BHYFoX;o3Y*N5G zP(!V+4Zgj>p?ga8a2UN;D&fTn9+Gm#OpfSgQ?(pYMR<=@Yvjk6B#HLpSzkY9N=>e! zueb3<$52f4y7X%-gf?;{j|H}YbK;D0m*)i#^LFd9A|><5g~FS5n}gz4dQ~E7oP?WA zss@vWTQ${O3(&pX^+Q1!o?DW_?3=;+j&;zl5Y#jdr=*ARHFnqz6uovhRvVl0)Tn+n zcs418#LG8zIEf@{f|?gMRNkTpBfngiuT589{}QIOxq|uOBES$r_>(|7Es?v?Gh9BHanK1G!w3RO`PJ9xY%ms|K5e5)TlXOl z2nSc!vf?PnKqzKUvs9Glkq^G@F?h?k`3*E(fc-Q7*m8nB>jD?c{&Uda$G~v7ME_Lv zHmIeg1yBq7(zx%X9s4W|46fL*pYbpQ>XDG}hne@l2#bv)67y0uzD3!Pm;RI*01$f1 zf#t|=EKd;}9nWVANjd`B+8D1Np5NXMU1Bmg*+HOOezWIjzZzRw zz5|CP7JME-!@N|IfuXl|8J*1}lvC_D?u3sK!x(+Pco8lre4%fGX1EA8JT~;Q76%1p zSaL4Ft{aD(JorUm`*mHZwZWI!ng-fkV14SscUYtAK}8~wEXLPQNzbnakgJCQw3$ky z8UN4}iwwxCr-K>y6p;V(plo4Wuu9k6Pson0u2QhxswxHGax-hLeR!dI(mE%P^^rvp z7}zxgtdBXQ2aRaQ2r!5VOE3w52>%N)h{j<^@q#7{n`A7B@PM6Pd3*s9$$jZ5e^alC z$dReClL;reOMxdLD@=upbLKe+7LeC{l6(j}xK5W*SSP2o9hbvy4vuvx101VnU8Az! zbiomp#=x4<%yACev^2OeofQx@1{iYdW&2+Q3@tS^NI(dgpGGuRq`zTwcT0nejeV2& zZy0ZH@7WGCd?8ly0zQ7f&EKI9SJ0;tG-FR!XrFf=#>A9sFT9Gdz#KN3$&a!y3A6m0 z1jE__BR|`!l2=Ozksv+MJP-bxd>NsDiTTgd#281iGy;}@mIM6ae&PL9tvaQPx{-hy{a!M zEAvKm5A7n_v%GyW4cdxyA@uaV*scDP78V;!GLo^W9a?nBU zQK_O7;@8v9pyis_8|0(!a&t?|pqiv%OCK;6sqpmllY8Bn8aq?cOXQ&4>a(ECE-gNN zIkFHSEE2ryh|B&-^t*MgDk%rCHcJ{jAbM!FS1FT@B&KI7Q9z zcD&(fIv!f2J_!T7cm72mA0JSJB(tYmzzn6N+7Rv?k-Z`nB=~ZDn=uT>P@V9N6GU zO&8HwU?BMzsrJ~T3IVIX!mhLIGq~U^^85%Ay`Z1#=;UPn>_#C$+lKS?G{@5qp0V#_b{rm&l@0dWiCk;n+xy>u(tsSyvc66Byc>A z=_gSNv$NGtRJ z_FT7JPJ?J{ZhPGOtnNRE~c>aN(V<^Ws{dizJ(Ei zQ|U6jqHx@D&5%@dCciPJB_ynm7b_E!9mg|Vaq$GBPBPVEmuFKHrf8lrNXzXija9J2 zaVy;NT@pXCtR+K&O3BDkRNMGP{J5w>Y+T%wR@lm08r43xVLTt4l&EghnO0aCR0=N( zxwHE~rEe4oVv<-sEl@H(YQh;}g9WXs{c$jH0VjcdDc8;IgMQ#p2eo$sy+z3}^1phF z&fy?3C1$K&6}utii)-@MH^mecanBsGWIHxc;IjEJ_wvmX+;y!ovitTWzN2bT@MaM$ zXJu1M&AyH+;%*i-wVCoM-C*lir5hM+xoixUh4=lmluL3J?Ipl!|LggK5vh;Yt}6Tc z-7Mjm8D4MBYPxW-pHrxRwto_FXUqhvK;hkS>qxYJ!5=Bh^fBtRACbHCHEzMs!UA+2 z=d1f`*6PLju3Ap9c*!;VKTKoTRe$>$)LEdEH*cligWaKutxUaKB9 z`1Aa07B3`5!T45tqN3?cI?*EcJmVOtBsR&H>wv$#n0a{{-Ajv+>)4^0HdweHsuZ*~ zW_*zxOIN@Bkiu@zGb)ww%ZD!-5f^1ocft+UZAZP`cQE3Mx-Oz$U0nOIkF2MDLZN)z zd~i#AxV&`j>t9ayf6)HGd|M$3FY>`G9=ok*@g^R&d#;DULPQWZc=&FtXQqr_WvTg_ zc(%iTDg260Gp?T))y6a=!Gcb|68eJ!yVDIP?`zV(X3vc~9A_Wc(Aw_2Ov^lP51JS} zyxLg0$wZ@Ss~+tprKtHV->@ksWZ4qFCt#w-Tq)c1@%_hT&FLDq|(Zd zF(Q!n**%~0u(MZE%_U~VTTE+dAmScBmTUXs4hDyoQs5_!Uqba>ww|r5{kW>;v>7uP z-12JfwrmieKqcq)-}0ut#gTocknqJsDY^885V&Xa)u_qx_!Z$Eh9>nK|0trkB|t-B zeZ1Xc@-jIn+!g*|^R-tmN8|c%XNKWBW(G|Kt}=e$X#mo*ckkXU*Aq|=Zk)tfbF*rq zs3=H>6Vkv0ubDh9x=Fbu52#NNyS%jY2$Izgl)iJsm!?82WACrZ{C~OG?!;Hy@ju7j z3JSsg`03?N<$v&R{Z-a~Ol6QVGx-(sYiox}^`7PR!DAZF0Xn`xjVUDIFB?FloY#Bc z1IJHMB2v0bUVz#>II-H->VwO`um`c9OWeMEBMsUIJj?Ia8l)?IIoK3n%>S^gvl?0T zB-+q$WKt{osRd+S2X!Y+{}Av5RVsY%a+iYIry!>z4=l!bxifu$32pM33FjPG)S*Op z+lEEXYjy?pd^H6l8haNe!qG5ff%g(^Cd2^i_WA_3h6t{kHoLnp>k4n!8K-chi4NUT z^(st*?GJ>$6DwwAsjvSinJSER0K%I61VGz{kWZ#LZEALwISd{)WZxmL1I@(9cnl!- zsDMa&Ms51l>&S|CZMS?4ZGc4{r(_irh*f-+;VL7aBfbPnFe*dQTMxVlEu&+q{p~UN z7eQmzZMYIGNqR3Zyn2#l$f4$tV~*fT zbIM4cae?h1eWj2a6cbw&cw-={>e5eZCIYLpc6AK6*p|a8n68ioRm=-}?c$(qPfvrK z^aUx#%)|JAO@t^6K03}&lVbw5SQ8;~n3YCOVTgj7m5PT9M zs0rD^D|+^0xnrHHpeivAU!KTm1E(04vtwoh#gIsYcOOMPckFn07Q;bNO>=|^98ju` z*iFkOz-(kDsQe+X+yP)Wimz#Ty;*b#SU6*4X-$b)GEl{OQ?;C4Paox%|^m4WK zSd%s2W#~cfy7M<0h7?#XMpNdt1?!xh>i?JEyjCpN4A%F06Eknfzw7OtfSd)$@f*3R zFnM;4kK4;|OG9UoHH}N;Zx)wb^Z?157IG%GsQXm=C;rv7Uc4Et62PVR-i3^99Kk7Z z*N)4$!~h0~M)QKK8TC+T@7O8}H6da2*aX6AY|v!@O)_tkprzopbQ}Z>?xmYyOV)uy z0sBq~%_uO?Zb^d!wR6X;;gWk)OxVM@ZnHWLU#(y$Plh z)vcs`9>Ic!^N*DRYgmzxNS2)Rr`$Ic#&u06LEU*uQZa%vcEAkS2NaCSjH23sYz-FM zpI$Itq9?eP5Q35|+Rq1|VaIIk>nvrzs_=r_e7b&XP0{wV%u7`+@h!`tjgqIkkEE%O zHZ?S;dp>ng75ltiH*+$>{5KA2rBMxkY*-d4H{8+%nfG zeET!bsB;JhwyF~=q5e%6G?1|&+`c?KJcd8R zcI0A|zuL*sh!LZLI+!dj75K7$AK8!D(P0zXd4+FM`{*`3<784e0y;9B0Pc@($4eg@$n-bav1_iU?Uj7Zijm(|Ub2YZ>y zQCC2~Ak3G%K9ko{Q9yoJKFsY{cY7y}L?P!mTX5+#wlUi+dk!))=uAA;v(%e*>d>S- z)QiJci{?tTQ7i@jeBicUs50afXuplVWI|wf38C0Ip&z0hdqDVs^H7b2T^1YP&KMDp zMDjQ5#RAZFDN=yzo!!B}C=!ZbJKRTYC=ANJE8+U?8T5IwQ$-pGCoNC1K3{Lf|3rXy z9z+C;cxdzECS7gX2TDBoi0uxMX9`@5O9wlz7nANUR6Tw%M9AvQy)}vx=epjwb+=SR z;UI|N`lehukrEa1G}v1!_mmA4V70ke3bF$p80UlH?;!=4MS0bJ>&1fu28vFmbgoH{ z-0{-_px`I6mpBMz1||Pin4cQqCxowp_(Z!Gam-NPh@l*+`bLYPto+JK`fbXm6nQNP z)tlBI#7-sNAA702pJ7x&P|VN#g&1iN>2Qfo| zxu*&o>Eb^_9?9W5ZNG1B2bbsw!S7K~#|bZWft2z`kxEu475#!r`=5fm*f$G`QOO{v z2#EeX$2h8L$5U~Iz5=J5q@ww_>M$iSqNpqiEm*jyE|WQp`z%DT>A&7Qz&y{)70z-4 z_Rwko#mv#P$X0733k9uA8grQPs=W(zPGRt%*UxZg9`Wt`h|yDAaCQU1DA9m|Xd5J*wFa_>dE#hL&{}fd=Uc2v$Gp~k>MbLRM?rC?4By%a$M#?zg^@METxPiPS*<)B93pK zn=a=yFw+rMVZBd?#I29|9S7U^E{i1GAB@-uw?=qY2^72?XZ0{XOo$@=$I^uV;k3b} z*MS$WK~#kbjpXcL41o0Z3!huX|5W2}f zTl4>n5b8f1fcZYyxdc0YDz=$s-qSapcSX1qUrqTs*)1w8D0ppo+U4D*$yS8d?3cx2 zYQTu>s86E=Hpwh-;xQ~2cpm9u&X}x{9+H@A*BNW^|DDV?I6E^pH`BY;;@w^8>y;DW z*u;25e*30X&VDFI+hQl+j=^%#pJ#jKcT~`;{#ZW{)xn4++kRz~6a#4}0OjRB&yw<> z8Km{fDJFF*7}&y&OO=R+#s$yD*|(=i2LjhVJmB-%+n`!885p=)OLglkciT3-lM*<; z-5O(g4PO3*;P}!}+tL+B9vKra2;APn*8VMnWtktX&Ql^78JzcC58P~owSVs27KsJb zpB%eo&nOM`blg}jSC6mJlbwy{tG@Y=9QLNEMK10A(%1_~*c`o+7h#-}FoiWWp%1~S75-6< zAg8J?8!Cq?zU#Cl<0oJdB|*|rP${(skIXGL#u{0{>V7>rrM{xotYW>jw^J!|lLsCB zMur1r*48Y zv@O1RHi^s(Z7^#grByK*3%mbdE?n&E%#>9@mQvM>l)^jrRt10m)n}7N1=`dPeqO!j z)p8ri1(w@dgaBJO<8n*RDSk8cUH}ogRi)NUm~9E2ejqj>~x~tiW3* zw5d>()Mu^*8*6J;D^zn@ctnyLugv+(wINQMR{Jj7#Z@bF5oQM}h(<<)?(Gp`fuEh$ zn}MONS#Mlle}_9Ak@IY3#^{YY0waUpFb#ffsip#e6}Y)xXl%j-?$*WQbUD^Usr zjJ*c}KVF|d#+fuXsg<(XKQRK9l9DMrRgV!(sR+Qm*ed>7kZr|MmXWxuMnVO5bko&?NU3 z8RPM(s;h!}r^R|o1E6xy;WxGLVe!1cO6;rL78I*6ydw zy6J-QJFq{lzX$6#oJa^LVqVb?fp=HT6*ay4Jk{*IE+!dEjGOB(o2zxHP^+6-X200I zyBZcwOq^qk6~zqVjm)Q`Vwpv^bADM3cYW6b4@WdgQSFDOQaw~k`EuIOjO^#&?j-k* z*RKhE#JNSaTQ3 zy$-jHZp(^)e%6*DWaWA=)HqAa0(Fu~wRPN!H_YAM$a~6-#$aj&x1A-`U9s3+J>$H@ z(n|!_?G>p}zo@}!nxjf|F;2Qij4&q?T% zFPolh27IoL?MSvuDcf&rdq?XJ1bl{ty)%Xxp5g*Yeo;7*Sm2kIB)PBt>ut_+9SIg3 z9z>Jr4c)5RjZh7%fOmV~j^v}B%{~#>FQ3sMX6ZFME0D6@7U4Cib1y>lXo#`WvoFCn zkNe;vr^s*220?nkg^;`zW#FSRl)ilAzt2HN?)(QXu^9<>3!eikV~9@ zRV2PQNO3A&^5)9=>dI;r9gTW$g_-|s+o=xGDi?BSMyv5KyjDXa^7_{Ny_x>9A=-8z z)b@!<4e3!56szW)V9F(1Oo{P1uT9+fk`ln|iZB=83w$eJxw?6OWT+Xw0RAkM<>22E l6lFrS{l{me4ux)go!T)G*&h-PG Date: Tue, 12 May 2020 06:36:22 -0700 Subject: [PATCH 113/177] Removed monthly qualifier For subsequent monthly updates, we can look to add the monthly qualifier, e.g. Windows Holographic, version 2004 June Update, for example. --- devices/hololens/hololens-release-notes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens-release-notes.md b/devices/hololens/hololens-release-notes.md index eada20759c..f9a6957518 100644 --- a/devices/hololens/hololens-release-notes.md +++ b/devices/hololens/hololens-release-notes.md @@ -20,7 +20,7 @@ appliesto: # HoloLens 2 release notes -## Windows Holographic, version 2004 May 2020 Update +## Windows Holographic, version 2004 Build - 19041.1103 | Feature | Description | From a563d70a1abc132bf323c3193127762df464eeab Mon Sep 17 00:00:00 2001 From: Baard Hermansen Date: Tue, 12 May 2020 17:38:30 +0200 Subject: [PATCH 114/177] Update mdop/appv-v5/how-to-install-the-management-and-reporting-databases-on-separate-computers-from-the-management-and-reporting-services51.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- ...te-computers-from-the-management-and-reporting-services51.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mdop/appv-v5/how-to-install-the-management-and-reporting-databases-on-separate-computers-from-the-management-and-reporting-services51.md b/mdop/appv-v5/how-to-install-the-management-and-reporting-databases-on-separate-computers-from-the-management-and-reporting-services51.md index 56be1281a9..ebe96992d3 100644 --- a/mdop/appv-v5/how-to-install-the-management-and-reporting-databases-on-separate-computers-from-the-management-and-reporting-services51.md +++ b/mdop/appv-v5/how-to-install-the-management-and-reporting-databases-on-separate-computers-from-the-management-and-reporting-services51.md @@ -75,7 +75,7 @@ Use the following procedure to install the database server and management server 1. For each database, copy the scripts to a share and modify them following the instructions in the readme file. > [!NOTE] - > For more information about modifying the required SIDs contained in the scripts see, [How to Install the App-V Databases and Convert the Associated Security Identifiers by Using PowerShell](how-to-install-the-app-v-databases-and-convert-the-associated-security-identifiers--by-using-powershell51.md). + > For more information about modifying the required SIDs contained in the scripts, see [How to Install the App-V Databases and Convert the Associated Security Identifiers by Using PowerShell](how-to-install-the-app-v-databases-and-convert-the-associated-security-identifiers--by-using-powershell51.md). 1. Run the scripts on the computer running Microsoft SQL Server. From 1509d37579e0e19dfee144b67816a01b679e4b59 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Tue, 12 May 2020 21:11:07 +0530 Subject: [PATCH 115/177] removed duplicate entry of %windir%\Ntds\EDB*.log as per user report #6700. so i removed duplicate entry of **%windir%\Ntds\EDB*.log** --- .../configure-server-exclusions-windows-defender-antivirus.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/configure-server-exclusions-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/configure-server-exclusions-windows-defender-antivirus.md index 97a45e8794..78f6412fd9 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/configure-server-exclusions-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/configure-server-exclusions-windows-defender-antivirus.md @@ -284,8 +284,6 @@ The transaction log files are specified in the registry key `HKEY_LOCAL_MACHINE\ - %windir%\Ntds\Ntds*.pat -- %windir%\Ntds\EDB*.log - - %windir%\Ntds\TEMP.edb #### The NTDS working folder From 6b67594d0d7b9f0c7bcc645dfadb772153286fc9 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Tue, 12 May 2020 08:56:19 -0700 Subject: [PATCH 116/177] pencil edit --- .../threat-protection/microsoft-defender-atp/api-power-bi.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md index 3d4d9a401b..cb5955d6d3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md @@ -25,7 +25,7 @@ ms.topic: article In this section you will learn create a Power BI report on top of Microsoft Defender ATP APIs. -The first example demonstrates how to connect Power BI to Advanced Hunting API and the second example demonstrates a connection to our OData APIs (e.g. Machine Actions, Alerts, etc..) +The first example demonstrates how to connect Power BI to Advanced Hunting API and the second example demonstrates a connection to our OData APIs, such as Machine Actions or Alerts. ## Connect Power BI to Advanced Hunting API From 7c15c18407740941ce650a21ac13b2b77a7909d5 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Tue, 12 May 2020 09:10:59 -0700 Subject: [PATCH 117/177] pencil edit --- .../app-v/appv-preparing-your-environment.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/application-management/app-v/appv-preparing-your-environment.md b/windows/application-management/app-v/appv-preparing-your-environment.md index 1ea3496ad6..991209bd1b 100644 --- a/windows/application-management/app-v/appv-preparing-your-environment.md +++ b/windows/application-management/app-v/appv-preparing-your-environment.md @@ -7,6 +7,7 @@ ms.sitesec: library ms.prod: w10 ms.date: 04/18/2018 ms.reviewer: +author: dansimp manager: dansimp ms.author: dansimp ms.topic: article From 754e225d387a945d1fb1262b999d9970dcce00ae Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Tue, 12 May 2020 09:50:46 -0700 Subject: [PATCH 118/177] pencil edit --- .../threat-protection/microsoft-defender-atp/machine-tags.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md index c5b370ed91..e54b496b2c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md @@ -83,5 +83,6 @@ Use the following registry key entry to add a tag on a machine: - Registry key data: `Name of the tag you want to set` >[!NOTE] ->The device tag is part of the machine information report that's generated once a day. As an alternative, you may choose to restart the endpoint that would transfer a new machine information report.
    +>The device tag is part of the machine information report that's generated once a day. As an alternative, you may choose to restart the endpoint that would transfer a new machine information report. +> > If you need to remove a tag that was added using the above Registry key, clear the contents of the Registry key data instead of removing the 'Group' key. From 2495d870fe59fddeb64e9dbc4d8459911219206e Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 12 May 2020 10:14:01 -0700 Subject: [PATCH 119/177] Updates to landing & tools pages --- devices/surface/get-started.yml | 54 ++++++++----------- .../surface/microsoft-surface-data-eraser.md | 4 +- .../surface-diagnostic-toolkit-business.md | 4 +- .../surface-enterprise-management-mode.md | 2 +- 4 files changed, 27 insertions(+), 37 deletions(-) diff --git a/devices/surface/get-started.yml b/devices/surface/get-started.yml index 9b0bd74d7e..86beba22d0 100644 --- a/devices/surface/get-started.yml +++ b/devices/surface/get-started.yml @@ -28,20 +28,9 @@ landingContent: url: https://www.microsoft.com/surface/business/surface-go-2 - text: Surface Book 3 for Business url: https://www.microsoft.com/surface/business/surface-book-3 - - text: Surface Pro 7 for Business - url: https://www.microsoft.com/surface/business/surface-pro-7 - - text: Surface Pro X for Business - url: https://www.microsoft.com/surface/business/surface-pro-x - - text: Surface Laptop 3 for Business - url: https://www.microsoft.com/surface/business/surface-laptop-3 - - text: Surface Studio 2 for Business - url: https://www.microsoft.com/surface/business/surface-studio-2 + - text: Explore all Surface family products + url: https://www.microsoft.com/surface/business - - linkListType: video - links: - - text: Microsoft Mechanics Surface videos - url: https://www.youtube.com/watch?v=Uk2kJ5FUZxY&list=PLXtHYVsvn_b__1Baibdu4elN4SoF3JTBZ - # Card (optional) - title: Get started linkLists: @@ -53,18 +42,14 @@ landingContent: url: surface-book-quadro.md - text: What’s new in Surface Dock 2 url: surface-dock-whats-new.md - - text: Surface and Endpoint Configuration Manager considerations - url: considerations-for-surface-and-system-center-configuration-manager.md - - text: Wake On LAN for Surface devices - url: wake-on-lan-for-surface-devices.md - + # Card - title: Deploy Surface devices linkLists: - linkListType: deploy links: - - text: Manage and deploy Surface driver and firmware updates - url: manage-surface-driver-and-firmware-updates.md + - text: Surface Deployment Accelerator tool + url: microsoft-surface-deployment-accelerator.md - text: Autopilot and Surface devices url: windows-autopilot-and-surface-devices.md - text: Deploying, managing, and servicing Surface Pro X @@ -75,15 +60,15 @@ landingContent: linkLists: - linkListType: how-to-guide links: - - text: Optimize Wi-Fi connectivity for Surface devices - url: surface-wireless-connect.md + text: Manage and deploy Surface driver and firmware updates + url: manage-surface-driver-and-firmware-updates.md - text: Best practice power settings for Surface devices url: maintain-optimal-power-settings-on-Surface-devices.md - - text: Manage battery limit with UEFI - url: battery-limit.md + - text: Optimize Wi-Fi connectivity for Surface devices + url: surface-wireless-connect.md # Card - - title: Secure Surface devices + - title: Explore security topics linkLists: - linkListType: how-to-guide links: @@ -99,31 +84,34 @@ landingContent: linkLists: - linkListType: how-to-guide links: - - text: Surface Dock Firmware Update - url: surface-dock-firmware-update.md - text: Surface Diagnostic Toolkit for Business url: surface-diagnostic-toolkit-for-business-intro.md - text: SEMM and UEFI url: surface-enterprise-management-mode.md - - text: Surface Brightness Control - url: microsoft-surface-brightness-control.md - text: Battery Limit setting url: battery-limit.md # Card - - title: Support and community + - title: Browse Support topics linkLists: - linkListType: learn links: - text: Top support solutions url: support-solutions-surface.md - - text: Maximize your Surface battery life - url: https://support.microsoft.com/help/4483194/maximize-surface-battery-life + - text: Protecting your data during Surface repair or service + url: https://support.microsoft.com/en-us/help/4023508/surface-faq-protecting-your-data-service - text: Troubleshoot Surface Dock and docking stations url: https://support.microsoft.com/help/4023468/surface-troubleshoot-surface-dock-and-docking-stations - - linkListType: reference + +# Card + - title: Participate in Surface Community + linkLists: + - linkListType: learn links: + links: - text: Surface IT Pro blog url: https://techcommunity.microsoft.com/t5/Surface-IT-Pro-Blog/bg-p/SurfaceITPro - text: Surface Devices Tech Community url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices + - text: Microsoft Mechanics Surface videos + url: https://www.youtube.com/watch?v=Uk2kJ5FUZxY&list=PLXtHYVsvn_b__1Baibdu4elN4SoF3JTBZ \ No newline at end of file diff --git a/devices/surface/microsoft-surface-data-eraser.md b/devices/surface/microsoft-surface-data-eraser.md index ca46b58a8b..1ad32d8518 100644 --- a/devices/surface/microsoft-surface-data-eraser.md +++ b/devices/surface/microsoft-surface-data-eraser.md @@ -168,7 +168,9 @@ After you create a Microsoft Surface Data Eraser USB stick, you can boot a suppo Microsoft Surface Data Eraser is periodically updated by Microsoft. For information about the changes provided in each new version, see the following: ### 3.30.139 -This version of Surface Data Eraser to be released May 11, 2020 adds support for: +*Release Date: 11 May 2020* + +This version of Surface Data Eraser adds support for: - Surface Book 3 - Surface Go 2 - New SSD in Surface Go diff --git a/devices/surface/surface-diagnostic-toolkit-business.md b/devices/surface/surface-diagnostic-toolkit-business.md index d916f7d91b..f67a1290d0 100644 --- a/devices/surface/surface-diagnostic-toolkit-business.md +++ b/devices/surface/surface-diagnostic-toolkit-business.md @@ -175,8 +175,8 @@ You can select to run a wide range of logs across applications, drivers, hardwar ## Changes and updates ### Version 2.94.139.0 - -This version of Surface Diagnostic Toolkit for Business to be released May 11, 2020 adds support for the following: +*Release date: May 11, 2020*
    +This version of Surface Diagnostic Toolkit for Business adds support for the following: - Ability to skip Windows Update to perform hardware check. - Ability to receive notifications for about the latest version update diff --git a/devices/surface/surface-enterprise-management-mode.md b/devices/surface/surface-enterprise-management-mode.md index 819ef39b6a..d8d1715907 100644 --- a/devices/surface/surface-enterprise-management-mode.md +++ b/devices/surface/surface-enterprise-management-mode.md @@ -228,7 +228,7 @@ create a reset package using PowerShell to reset SEMM. ## Version History -The latest version of SEMM to be released May 11, 2020 includes: +The latest version of SEMM released May 11, 2020 includes: - Support for Surface Go 2 - Support for Surface Book 3 - Bug fixes From 1b7e2385c4cda6682c3bab7d949baaf1b8baabd1 Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Tue, 12 May 2020 21:25:44 +0300 Subject: [PATCH 120/177] Update machine-tags.md Adjusting note to avoid any potential customer confusion. --- .../threat-protection/microsoft-defender-atp/machine-tags.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md index e54b496b2c..23a14e3ccd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machine-tags.md @@ -72,7 +72,7 @@ You can also delete tags from this view. >- Windows 7 SP1 > [!NOTE] -> The maximum number of characters in a tag is 30. +> The maximum number of characters that can be set in a tag from the registry is 30. Machines with similar tags can be handy when you need to apply contextual action on a specific list of machines. From b2f9665372c38b098dd2537853df2662e386bb35 Mon Sep 17 00:00:00 2001 From: Zach Willson Date: Tue, 12 May 2020 11:32:16 -0700 Subject: [PATCH 121/177] Update policy-csp-userrights.md --- windows/client-management/mdm/policy-csp-userrights.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-userrights.md b/windows/client-management/mdm/policy-csp-userrights.md index 09b30b65c0..719f00b4c6 100644 --- a/windows/client-management/mdm/policy-csp-userrights.md +++ b/windows/client-management/mdm/policy-csp-userrights.md @@ -1285,12 +1285,16 @@ GP Info: This user right determines which users and groups can run maintenance tasks on a volume, such as remote defragmentation. Use caution when assigning this user right. Users with this user right can explore disks and extend files in to memory that contains other data. When the extended files are opened, the user might be able to read and modify the acquired data. + GP Info: - GP English name: *Perform volume maintenance tasks* - GP path: *Windows Settings/Security Settings/Local Policies/User Rights Assignment* - +> [!Warning] +> If you remove **Window Manager\Window Manager Group** from the **Increase scheduling priority** user right, certain applications and computers do not function correctly. In particular, the INK workspace does not function correctly on unified memory architecture (UMA) laptop and desktop computers that run Windows 10, version 1903 (or later) and that use the Intel GFX driver. +> +> On affected computers, the display blinks when users draw on INK workspaces such as those that are used by Microsoft Edge, Microsoft PowerPoint, or Microsoft OneNote. The blinking occurs because the inking-related processes repeatedly try to use the Real-Time priority, but are denied permission. From 603e52a612199228890670198806e31b49e41b32 Mon Sep 17 00:00:00 2001 From: Zach Willson Date: Tue, 12 May 2020 11:33:45 -0700 Subject: [PATCH 122/177] Update policy-csp-userrights.md --- windows/client-management/mdm/policy-csp-userrights.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-userrights.md b/windows/client-management/mdm/policy-csp-userrights.md index 719f00b4c6..0278d07a34 100644 --- a/windows/client-management/mdm/policy-csp-userrights.md +++ b/windows/client-management/mdm/policy-csp-userrights.md @@ -1095,6 +1095,11 @@ GP Info: - GP English name: *Increase scheduling priority* - GP path: *Windows Settings/Security Settings/Local Policies/User Rights Assignment* +> [!Warning] +> If you remove **Window Manager\Window Manager Group** from the **Increase scheduling priority** user right, certain applications and computers do not function correctly. In particular, the INK workspace does not function correctly on unified memory architecture (UMA) laptop and desktop computers that run Windows 10, version 1903 (or later) and that use the Intel GFX driver. +> +> On affected computers, the display blinks when users draw on INK workspaces such as those that are used by Microsoft Edge, Microsoft PowerPoint, or Microsoft OneNote. The blinking occurs because the inking-related processes repeatedly try to use the Real-Time priority, but are denied permission. + @@ -1291,10 +1296,7 @@ This user right determines which users and groups can run maintenance tasks on a GP Info: - GP English name: *Perform volume maintenance tasks* - GP path: *Windows Settings/Security Settings/Local Policies/User Rights Assignment* -> [!Warning] -> If you remove **Window Manager\Window Manager Group** from the **Increase scheduling priority** user right, certain applications and computers do not function correctly. In particular, the INK workspace does not function correctly on unified memory architecture (UMA) laptop and desktop computers that run Windows 10, version 1903 (or later) and that use the Intel GFX driver. -> -> On affected computers, the display blinks when users draw on INK workspaces such as those that are used by Microsoft Edge, Microsoft PowerPoint, or Microsoft OneNote. The blinking occurs because the inking-related processes repeatedly try to use the Real-Time priority, but are denied permission. + From 1eab3da419c5874210a5ce3ac3101204d7f8fa5e Mon Sep 17 00:00:00 2001 From: Zach Willson Date: Tue, 12 May 2020 11:35:33 -0700 Subject: [PATCH 123/177] Update policy-csp-userrights.md --- windows/client-management/mdm/policy-csp-userrights.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-userrights.md b/windows/client-management/mdm/policy-csp-userrights.md index 0278d07a34..cd9fa29f64 100644 --- a/windows/client-management/mdm/policy-csp-userrights.md +++ b/windows/client-management/mdm/policy-csp-userrights.md @@ -1290,7 +1290,6 @@ GP Info: This user right determines which users and groups can run maintenance tasks on a volume, such as remote defragmentation. Use caution when assigning this user right. Users with this user right can explore disks and extend files in to memory that contains other data. When the extended files are opened, the user might be able to read and modify the acquired data. - GP Info: From c53a548259db7400f37123793c1245cb958b0108 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 May 2020 11:59:23 -0700 Subject: [PATCH 124/177] Update configure-block-at-first-sight-windows-defender-antivirus.md --- ...configure-block-at-first-sight-windows-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md index fb691c6dea..d74cf4da9a 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md @@ -22,7 +22,7 @@ ms.custom: nextgen - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -Block at first sight is a feature of next-generation protection that provides a way to detect and block new malware within seconds. This protection is enabled by default when certain prerequisite settings are also enabled. In most cases, these prerequisite settings are also enabled by default, so the feature is running without any intervention. +Block at first sight provides a way to detect and block new malware within seconds. This protection is enabled by default when certain prerequisite settings are also enabled. In most cases, these prerequisite settings are also enabled by default, so the feature is running without any intervention. You can [specify how long the file should be prevented from running](configure-cloud-block-timeout-period-windows-defender-antivirus.md) while the cloud-based protection service analyzes the file. And, you can [customize the message displayed on users' desktops](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-security-center/wdsc-customize-contact-information) when a file is blocked. You can change the company name, contact information, and message URL. From 891e5841ef30959d66187bb6e476e0ac58d8cd60 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 12 May 2020 13:43:52 -0700 Subject: [PATCH 125/177] Update surface-hub-2s-recover-reset.md --- devices/surface-hub/surface-hub-2s-recover-reset.md | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/devices/surface-hub/surface-hub-2s-recover-reset.md b/devices/surface-hub/surface-hub-2s-recover-reset.md index 7493e10c3c..44912c169c 100644 --- a/devices/surface-hub/surface-hub-2s-recover-reset.md +++ b/devices/surface-hub/surface-hub-2s-recover-reset.md @@ -60,16 +60,6 @@ Using Surface Hub 2S, you can reinstall the device by using a recovery image. By When the first-time setup screen appears,remove the USB drive. -## Recover a locked Surface Hub - -At the end of a session, Surface Hub 2S may occasionally encounter an error during the cleanup of user and app data at the end of a session. If this occurs, the device automatically reboots and resumes the data cleanup. However, if this operation repeatedly fails, the device automatically locks to protect user data. - -**To unlock a Surface Hub 2S:**
    -- Reset or recover the device from the Windows Recovery Environment. For more information, see [What is Windows RE?](https://technet.microsoft.com/library/cc765966.aspx) - -> [!NOTE] -> To enter recovery mode, unplug the power cord and plug it in again three times. - ## Contact Support If you have questions or need help, you can [create a support request](https://support.microsoft.com/supportforbusiness/productselection). From 0ba6a072fdb0e185bc417c43967edc0651c6dee7 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 12 May 2020 14:14:20 -0700 Subject: [PATCH 126/177] Update get-started.yml --- devices/surface/get-started.yml | 13 +++---------- 1 file changed, 3 insertions(+), 10 deletions(-) diff --git a/devices/surface/get-started.yml b/devices/surface/get-started.yml index 86beba22d0..d35baf3ac6 100644 --- a/devices/surface/get-started.yml +++ b/devices/surface/get-started.yml @@ -30,7 +30,6 @@ landingContent: url: https://www.microsoft.com/surface/business/surface-book-3 - text: Explore all Surface family products url: https://www.microsoft.com/surface/business - # Card (optional) - title: Get started linkLists: @@ -41,8 +40,7 @@ landingContent: - text: Surface Book 3 Quadro RTX 3000 technical overview url: surface-book-quadro.md - text: What’s new in Surface Dock 2 - url: surface-dock-whats-new.md - + url: surface-dock-whats-new.md # Card - title: Deploy Surface devices linkLists: @@ -54,19 +52,17 @@ landingContent: url: windows-autopilot-and-surface-devices.md - text: Deploying, managing, and servicing Surface Pro X url: surface-pro-arm-app-management.md - # Card - title: Manage Surface devices linkLists: - linkListType: how-to-guide links: - text: Manage and deploy Surface driver and firmware updates + - text: Manage and deploy Surface driver and firmware updates url: manage-surface-driver-and-firmware-updates.md - text: Best practice power settings for Surface devices url: maintain-optimal-power-settings-on-Surface-devices.md - text: Optimize Wi-Fi connectivity for Surface devices url: surface-wireless-connect.md - # Card - title: Explore security topics linkLists: @@ -78,7 +74,6 @@ landingContent: url: surface-enterprise-management-mode.md - text: Surface Data Eraser tool url: microsoft-surface-data-eraser.md - # Card - title: Discover Surface tools linkLists: @@ -90,8 +85,7 @@ landingContent: url: surface-enterprise-management-mode.md - text: Battery Limit setting url: battery-limit.md - - # Card +# Card - title: Browse Support topics linkLists: - linkListType: learn @@ -102,7 +96,6 @@ landingContent: url: https://support.microsoft.com/en-us/help/4023508/surface-faq-protecting-your-data-service - text: Troubleshoot Surface Dock and docking stations url: https://support.microsoft.com/help/4023468/surface-troubleshoot-surface-dock-and-docking-stations - # Card - title: Participate in Surface Community linkLists: From 454347f054f9859558b91e490c143faaac612b2c Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Tue, 12 May 2020 14:44:08 -0700 Subject: [PATCH 127/177] Adding HL1 Release notes to TOC Adding HL1 release notes to TOC. Also adding a 2 to HL Release notes to draw attention there. --- devices/hololens/TOC.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/devices/hololens/TOC.md b/devices/hololens/TOC.md index 431090fb6d..3dcabcaee0 100644 --- a/devices/hololens/TOC.md +++ b/devices/hololens/TOC.md @@ -16,6 +16,7 @@ ## [HoloLens (1st gen) fit and comfort FAQ](hololens1-fit-comfort-faq.md) ## [Install localized version of HoloLens (1st gen)](hololens1-install-localized.md) ## [Getting around HoloLens (1st gen)](hololens1-basic-usage.md) +## [HoloLens (1st Gen) release notes](hololens1-release-notes.md) # Deploy HoloLens and mixed-reality apps in commercial environments ## [Commercial features](hololens-commercial-features.md) @@ -69,7 +70,7 @@ ## [Use 3D Viewer on HoloLens (1st gen)](holographic-3d-viewer-beta.md) ## [Windows Autopilot for HoloLens 2 evaluation guide](hololens2-autopilot.md) -# [HoloLens release notes](hololens-release-notes.md) +# [HoloLens 2 release notes](hololens-release-notes.md) # [Give us feedback](hololens-feedback.md) # [Insider preview for Microsoft HoloLens](hololens-insider.md) # [Change history for Microsoft HoloLens documentation](change-history-hololens.md) From 1d90b8cb60ad81de4a98489863909051c86dda1d Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 12 May 2020 14:58:52 -0700 Subject: [PATCH 128/177] Update get-started.yml --- devices/surface/get-started.yml | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/devices/surface/get-started.yml b/devices/surface/get-started.yml index d35baf3ac6..344d214bae 100644 --- a/devices/surface/get-started.yml +++ b/devices/surface/get-started.yml @@ -30,6 +30,7 @@ landingContent: url: https://www.microsoft.com/surface/business/surface-book-3 - text: Explore all Surface family products url: https://www.microsoft.com/surface/business + # Card (optional) - title: Get started linkLists: @@ -52,17 +53,19 @@ landingContent: url: windows-autopilot-and-surface-devices.md - text: Deploying, managing, and servicing Surface Pro X url: surface-pro-arm-app-management.md + # Card - title: Manage Surface devices linkLists: - linkListType: how-to-guide links: - - text: Manage and deploy Surface driver and firmware updates + - text: Manage and deploy Surface driver and firmware updates url: manage-surface-driver-and-firmware-updates.md - text: Best practice power settings for Surface devices url: maintain-optimal-power-settings-on-Surface-devices.md - text: Optimize Wi-Fi connectivity for Surface devices url: surface-wireless-connect.md + # Card - title: Explore security topics linkLists: @@ -74,7 +77,8 @@ landingContent: url: surface-enterprise-management-mode.md - text: Surface Data Eraser tool url: microsoft-surface-data-eraser.md - # Card + + # Card - title: Discover Surface tools linkLists: - linkListType: how-to-guide @@ -85,6 +89,7 @@ landingContent: url: surface-enterprise-management-mode.md - text: Battery Limit setting url: battery-limit.md + # Card - title: Browse Support topics linkLists: @@ -92,10 +97,11 @@ landingContent: links: - text: Top support solutions url: support-solutions-surface.md - - text: Protecting your data during Surface repair or service + - text: Protecting your data during Surface repair or service url: https://support.microsoft.com/en-us/help/4023508/surface-faq-protecting-your-data-service - text: Troubleshoot Surface Dock and docking stations url: https://support.microsoft.com/help/4023468/surface-troubleshoot-surface-dock-and-docking-stations + # Card - title: Participate in Surface Community linkLists: @@ -106,5 +112,5 @@ landingContent: url: https://techcommunity.microsoft.com/t5/Surface-IT-Pro-Blog/bg-p/SurfaceITPro - text: Surface Devices Tech Community url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices - - text: Microsoft Mechanics Surface videos + - text: Microsoft Mechanics Surface videos url: https://www.youtube.com/watch?v=Uk2kJ5FUZxY&list=PLXtHYVsvn_b__1Baibdu4elN4SoF3JTBZ \ No newline at end of file From f071bfaff5d4bc1b7ebc9eab7c4cbcc7e469f123 Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Tue, 12 May 2020 15:00:22 -0700 Subject: [PATCH 129/177] updated meta description --- .../ue-v/uev-upgrade-uev-from-previous-releases.md | 2 +- .../uev-working-with-custom-templates-and-the-uev-generator.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/configuration/ue-v/uev-upgrade-uev-from-previous-releases.md b/windows/configuration/ue-v/uev-upgrade-uev-from-previous-releases.md index bead7186c8..5bb179c9d5 100644 --- a/windows/configuration/ue-v/uev-upgrade-uev-from-previous-releases.md +++ b/windows/configuration/ue-v/uev-upgrade-uev-from-previous-releases.md @@ -1,6 +1,6 @@ --- title: Upgrade to UE-V for Windows 10 -description: Explains how to upgrade to the latest version of UE-V. +description: Use these few adjustments to upgrade from User Experience Virtualization (UE-V) 2.x to the latest version of UE-V. author: dansimp ms.pagetype: mdop, virtualization ms.mktglfcycl: deploy diff --git a/windows/configuration/ue-v/uev-working-with-custom-templates-and-the-uev-generator.md b/windows/configuration/ue-v/uev-working-with-custom-templates-and-the-uev-generator.md index a2663f503d..3682792ace 100644 --- a/windows/configuration/ue-v/uev-working-with-custom-templates-and-the-uev-generator.md +++ b/windows/configuration/ue-v/uev-working-with-custom-templates-and-the-uev-generator.md @@ -1,6 +1,6 @@ --- title: Working with Custom UE-V Templates and the UE-V Template Generator -description: Working with Custom UE-V Templates and the UE-V Template Generator +description: Create your own custom settings location templates by working with Custom User Experience Virtualization (UE-V) Templates and the UE-V Template Generator. author: dansimp ms.pagetype: mdop, virtualization ms.mktglfcycl: deploy From 72a589b35a5126a96e2278be0f730e0bba09ca95 Mon Sep 17 00:00:00 2001 From: Manika Dhiman Date: Tue, 12 May 2020 15:06:22 -0700 Subject: [PATCH 130/177] Update policy-csp-localpoliciessecurityoptions.md --- .../mdm/policy-csp-localpoliciessecurityoptions.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md index 8eafd4ee9b..1e8a860af4 100644 --- a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md +++ b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md @@ -2432,12 +2432,12 @@ GP Info: -Network security: Minimum session security for NTLM SSP based (including secure RPC) clients +Network security: Minimum session security for NTLM SSP based (including secure RPC) clients. This security setting allows a client device to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. The options are: -Require NTLMv2 session security: The connection will fail if message integrity is not negotiated. -Require 128-bit encryption: The connection will fail if strong encryption (128-bit) is not negotiated. +- Require NTLMv2 session security: The connection will fail if message integrity is not negotiated. +- Require 128-bit encryption: The connection will fail if strong encryption (128-bit) is not negotiated. Default: From 02f9f9c4e7c0763fe4c773ef0d97b5215546c22b Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 12 May 2020 15:20:10 -0700 Subject: [PATCH 131/177] Applied proper styles to alerts --- .../ue-v/uev-upgrade-uev-from-previous-releases.md | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/windows/configuration/ue-v/uev-upgrade-uev-from-previous-releases.md b/windows/configuration/ue-v/uev-upgrade-uev-from-previous-releases.md index 5bb179c9d5..fe1b881f81 100644 --- a/windows/configuration/ue-v/uev-upgrade-uev-from-previous-releases.md +++ b/windows/configuration/ue-v/uev-upgrade-uev-from-previous-releases.md @@ -30,7 +30,8 @@ If you’re already using UE-V 2.x and you’re planning to upgrade user devices 5. Install the UE-V template generator if you want to synchronize application settings for custom applications. -> **Important**  You can upgrade your existing UE-V installation to Windows 10, version 1607 from UE-V versions 2.1 or 2.0 only. If you are using a previous version of UE-V, you’ll need to upgrade from that version to UE-V 2.x before you upgrade to Windows 10, version 1607.. +> [!IMPORTANT] +> You can upgrade your existing UE-V installation to Windows 10, version 1607 from UE-V versions 2.1 or 2.0 only. If you are using a previous version of UE-V, you’ll need to upgrade from that version to UE-V 2.x before you upgrade to Windows 10, version 1607. ## Upgrade user devices to Windows 10, version 1607 @@ -48,7 +49,8 @@ After upgrading a user device to Windows 10, version 1607, it’s important to v 3. Type **Get-UEVTemplate** and press ENTER to check that your templates are still registered. - > **Note** You’ll need to register the NotePad template again after you upgrade the device to Windows 10. + > [!NOTE] + > You’ll need to register the NotePad template again after you upgrade the device to Windows 10. **To verify UE-V settings using the device’s registry** @@ -68,7 +70,8 @@ The UE-V service is the client-side component that captures user-personalized ap With Windows 10, version 1607 and later, the UE-V service replaces the UE-V Agent and no longer requires a separate download and installation. Enable the service on user devices to start using UE-V. You can enable the service with the Group Policy editor or with Windows PowerShell. -> **Important**  The UE-V Agent used in prior releases of UE-V is replaced with the UE service. The UE-V service included with Windows 10, version 1607 and later releases, does not include the agent user interface and is configurable through cmdlets or registry settings only. +> [!IMPORTANT] +> The UE-V Agent used in prior releases of UE-V is replaced with the UE service. The UE-V service included with Windows 10, version 1607 and later releases, does not include the agent user interface and is configurable through cmdlets or registry settings only. **To enable the UE-V service with Group Policy** From 6d63ddc136f594197208989e6e5f286f5e53a76b Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 12 May 2020 15:26:17 -0700 Subject: [PATCH 132/177] Applied proper note style --- ...ev-working-with-custom-templates-and-the-uev-generator.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/configuration/ue-v/uev-working-with-custom-templates-and-the-uev-generator.md b/windows/configuration/ue-v/uev-working-with-custom-templates-and-the-uev-generator.md index 3682792ace..d9ccf3ec0c 100644 --- a/windows/configuration/ue-v/uev-working-with-custom-templates-and-the-uev-generator.md +++ b/windows/configuration/ue-v/uev-working-with-custom-templates-and-the-uev-generator.md @@ -98,9 +98,8 @@ Use the UE-V template generator to edit settings location templates. When the re 1. Create a local copy of the settings location template .xml file. UE-V settings location templates are .xml files that identify the locations where application store settings values. - >**Note**   - A settings location template is unique because of the template **ID**. If you copy the template and rename the .xml file, template registration fails because UE-V reads the template **ID** tag in the .xml file to determine the name, not the file name of the .xml file. UE-V also reads the **Version** number to know if anything has changed. If the version number is higher, UE-V updates the template. - + > [!NOTE]   + > A settings location template is unique because of the template **ID**. If you copy the template and rename the .xml file, template registration fails because UE-V reads the template **ID** tag in the .xml file to determine the name, not the file name of the .xml file. UE-V also reads the **Version** number to know if anything has changed. If the version number is higher, UE-V updates the template. 2. Open the settings location template file with an XML editor. From ae04245d42a3dac666d15033168eea77c4006f92 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 12 May 2020 15:27:38 -0700 Subject: [PATCH 133/177] Corrected "Powershell" --- .../ue-v/uev-upgrade-uev-from-previous-releases.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/ue-v/uev-upgrade-uev-from-previous-releases.md b/windows/configuration/ue-v/uev-upgrade-uev-from-previous-releases.md index fe1b881f81..d726744568 100644 --- a/windows/configuration/ue-v/uev-upgrade-uev-from-previous-releases.md +++ b/windows/configuration/ue-v/uev-upgrade-uev-from-previous-releases.md @@ -39,7 +39,7 @@ Performing an in-place upgrade on user devices automatically installs the UE-V s ## Verify that UE-V settings were migrated correctly -After upgrading a user device to Windows 10, version 1607, it’s important to verify that UE-V settings and template registrations were migrated correctly during the upgrade. You can verify UE-V settings using Windows Powershell or the device’s registry. +After upgrading a user device to Windows 10, version 1607, it’s important to verify that UE-V settings and template registrations were migrated correctly during the upgrade. You can verify UE-V settings using Windows PowerShell or the device’s registry. **To verify UE-V settings using Windows PowerShell** From 454e8cc273a2e4e14face0e0e9ed48493980a49f Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 12 May 2020 15:33:52 -0700 Subject: [PATCH 134/177] Update get-started.yml --- devices/surface/get-started.yml | 18 ++++++++---------- 1 file changed, 8 insertions(+), 10 deletions(-) diff --git a/devices/surface/get-started.yml b/devices/surface/get-started.yml index 344d214bae..0a02e29fec 100644 --- a/devices/surface/get-started.yml +++ b/devices/surface/get-started.yml @@ -42,6 +42,7 @@ landingContent: url: surface-book-quadro.md - text: What’s new in Surface Dock 2 url: surface-dock-whats-new.md + # Card - title: Deploy Surface devices linkLists: @@ -54,18 +55,18 @@ landingContent: - text: Deploying, managing, and servicing Surface Pro X url: surface-pro-arm-app-management.md - # Card + # Card - title: Manage Surface devices linkLists: - linkListType: how-to-guide links: - - text: Manage and deploy Surface driver and firmware updates + - text: Manage and deploy Surface driver and firmware updates url: manage-surface-driver-and-firmware-updates.md - text: Best practice power settings for Surface devices url: maintain-optimal-power-settings-on-Surface-devices.md - text: Optimize Wi-Fi connectivity for Surface devices url: surface-wireless-connect.md - + # Card - title: Explore security topics linkLists: @@ -90,27 +91,24 @@ landingContent: - text: Battery Limit setting url: battery-limit.md -# Card + # Card - title: Browse Support topics linkLists: - linkListType: learn links: - text: Top support solutions url: support-solutions-surface.md - - text: Protecting your data during Surface repair or service - url: https://support.microsoft.com/en-us/help/4023508/surface-faq-protecting-your-data-service + - text: Protecting your data during Surface repair or service + url: https://support.microsoft.com/help/4023508/surface-faq-protecting-your-data-service - text: Troubleshoot Surface Dock and docking stations url: https://support.microsoft.com/help/4023468/surface-troubleshoot-surface-dock-and-docking-stations - + # Card - title: Participate in Surface Community linkLists: - linkListType: learn links: - links: - text: Surface IT Pro blog url: https://techcommunity.microsoft.com/t5/Surface-IT-Pro-Blog/bg-p/SurfaceITPro - text: Surface Devices Tech Community url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices - - text: Microsoft Mechanics Surface videos - url: https://www.youtube.com/watch?v=Uk2kJ5FUZxY&list=PLXtHYVsvn_b__1Baibdu4elN4SoF3JTBZ \ No newline at end of file From c24506e1668799a385c8f6e7cb3b3c0694de2560 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 12 May 2020 15:47:35 -0700 Subject: [PATCH 135/177] Remove trailing spaces that followed "> [!NOTE]" I've heard that having spaces after "> [!NOTE]" can cause the note to not be rendered correctly. --- .../uev-working-with-custom-templates-and-the-uev-generator.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/ue-v/uev-working-with-custom-templates-and-the-uev-generator.md b/windows/configuration/ue-v/uev-working-with-custom-templates-and-the-uev-generator.md index d9ccf3ec0c..0a5cc1a242 100644 --- a/windows/configuration/ue-v/uev-working-with-custom-templates-and-the-uev-generator.md +++ b/windows/configuration/ue-v/uev-working-with-custom-templates-and-the-uev-generator.md @@ -98,7 +98,7 @@ Use the UE-V template generator to edit settings location templates. When the re 1. Create a local copy of the settings location template .xml file. UE-V settings location templates are .xml files that identify the locations where application store settings values. - > [!NOTE]   + > [!NOTE] > A settings location template is unique because of the template **ID**. If you copy the template and rename the .xml file, template registration fails because UE-V reads the template **ID** tag in the .xml file to determine the name, not the file name of the .xml file. UE-V also reads the **Version** number to know if anything has changed. If the version number is higher, UE-V updates the template. 2. Open the settings location template file with an XML editor. From 8e1a5afb94dc468482224c4581c7fb465d645d02 Mon Sep 17 00:00:00 2001 From: rogersoMS <44718379+rogersoMS@users.noreply.github.com> Date: Wed, 13 May 2020 08:58:33 +1000 Subject: [PATCH 136/177] Added Teams as an enlightened app @DulceMontemayor & @Dansimp @derek adam & @way vadhanasin & @rick james (ENS) as tech reviewers Microsoft Teams desktop app from build 1.3.00.12058 (rolled out ~ 10th May 2020) now has full support for WIP. I believe it should be added to this list as an enlightened app. Please cofirm with suggested tech reviewers before publishing --- .../enlightened-microsoft-apps-and-wip.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md b/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md index 48c612f49d..89f484d7e5 100644 --- a/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md +++ b/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md @@ -73,6 +73,8 @@ Microsoft has made a concerted effort to enlighten several of our more popular a - Microsoft Remote Desktop +- Microsoft Teams (build 1.3.00.12058 and later) + > [!NOTE] > Microsoft Visio, Microsoft Office Access and Microsoft Project are not enlightended apps and need to be exempted from WIP policy. If they are allowed, there is a risk of data loss. For example, if a device is workplace-joined and managed and the user leaves the company, metadata files that the apps rely on remain encrypted and the apps stop functioining. From 95cf1b62d974820e92c530e8954e2007ccdf1be9 Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Tue, 12 May 2020 16:21:15 -0700 Subject: [PATCH 137/177] Updated meta description field Note: I did not look at grammar, flow, spelling, etc. --- windows/application-management/app-v/appv-evaluating-appv.md | 2 +- windows/application-management/app-v/appv-maintaining-appv.md | 2 +- windows/application-management/per-user-services-in-windows.md | 2 +- .../client-management/data-collection-for-802-authentication.md | 2 +- windows/client-management/mdm/cm-cellularentries-csp.md | 2 +- .../client-management/mdm/enterprisemodernappmanagement-xsd.md | 2 +- windows/client-management/mdm/nodecache-csp.md | 2 +- windows/client-management/mdm/personalization-csp.md | 2 +- windows/client-management/mdm/personalization-ddf.md | 2 +- windows/client-management/mdm/policy-csp-appruntime.md | 2 +- windows/client-management/mdm/policy-csp-bits.md | 2 +- windows/client-management/mdm/policy-csp-browser.md | 2 +- windows/client-management/mdm/policy-csp-messaging.md | 2 +- windows/client-management/mdm/remotelock-csp.md | 2 +- .../mdm/windowsdefenderapplicationguard-csp.md | 2 +- windows/configuration/kiosk-xml.md | 2 +- .../identity-protection/access-control/local-accounts.md | 2 +- .../hello-for-business/hello-hybrid-key-new-install.md | 2 +- windows/security/identity-protection/vpn/vpn-connection-type.md | 2 +- windows/security/threat-protection/auditing/event-1102.md | 2 +- windows/security/threat-protection/auditing/event-1104.md | 2 +- windows/security/threat-protection/auditing/event-1105.md | 2 +- windows/security/threat-protection/mbsa-removal-and-guidance.md | 2 +- .../microsoft-defender-atp/get-alert-related-domain-info.md | 2 +- .../microsoft-defender-atp/get-alert-related-machine-info.md | 2 +- .../microsoft-defender-atp/get-machine-log-on-users.md | 2 +- .../threat-protection/microsoft-defender-atp/machineaction.md | 2 +- .../threat-protection/microsoft-defender-atp/ti-indicator.md | 2 +- .../windows-defender-security-center-antivirus.md | 2 +- .../create-an-outbound-program-or-service-rule.md | 2 +- 30 files changed, 30 insertions(+), 30 deletions(-) diff --git a/windows/application-management/app-v/appv-evaluating-appv.md b/windows/application-management/app-v/appv-evaluating-appv.md index df7f76ca07..9eb57e8521 100644 --- a/windows/application-management/app-v/appv-evaluating-appv.md +++ b/windows/application-management/app-v/appv-evaluating-appv.md @@ -1,6 +1,6 @@ --- title: Evaluating App-V (Windows 10) -description: Evaluating App-V for Windows 10 +description: Learn how to evaluate App-V for Windows 10 in a lab environment before deploying into a production environment. author: lomayor ms.pagetype: mdop, appcompat, virtualization ms.mktglfcycl: deploy diff --git a/windows/application-management/app-v/appv-maintaining-appv.md b/windows/application-management/app-v/appv-maintaining-appv.md index 3b54154537..e03e524b5a 100644 --- a/windows/application-management/app-v/appv-maintaining-appv.md +++ b/windows/application-management/app-v/appv-maintaining-appv.md @@ -1,6 +1,6 @@ --- title: Maintaining App-V (Windows 10) -description: Maintaining App-V +description: After you have deployed App-V for Windows 10, you can use the following information to maintain the App-V infrastructure. author: lomayor ms.pagetype: mdop, appcompat, virtualization ms.mktglfcycl: deploy diff --git a/windows/application-management/per-user-services-in-windows.md b/windows/application-management/per-user-services-in-windows.md index 1100a66787..4245e9fb23 100644 --- a/windows/application-management/per-user-services-in-windows.md +++ b/windows/application-management/per-user-services-in-windows.md @@ -1,6 +1,6 @@ --- title: Per-user services in Windows 10 and Windows Server -description: Learn about per-user services introduced in Windows 10. +description: Learn about per-user services, how to change the template service Startup Type, and manage per-user services through Group Policy and security templates. ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library diff --git a/windows/client-management/data-collection-for-802-authentication.md b/windows/client-management/data-collection-for-802-authentication.md index e866b0d7c4..58f94bd27e 100644 --- a/windows/client-management/data-collection-for-802-authentication.md +++ b/windows/client-management/data-collection-for-802-authentication.md @@ -2,7 +2,7 @@ title: Data collection for troubleshooting 802.1X authentication ms.reviewer: manager: dansimp -description: Data needed for reviewing 802.1X Authentication issues +description: Use the steps in this article to collect data that can be used to troubleshoot 802.1X authentication issues. keywords: troubleshooting, data collection, data, 802.1X authentication, authentication, data ms.prod: w10 ms.mktglfcycl: diff --git a/windows/client-management/mdm/cm-cellularentries-csp.md b/windows/client-management/mdm/cm-cellularentries-csp.md index 567dfd207e..02f2910d16 100644 --- a/windows/client-management/mdm/cm-cellularentries-csp.md +++ b/windows/client-management/mdm/cm-cellularentries-csp.md @@ -1,6 +1,6 @@ --- title: CM\_CellularEntries CSP -description: CM\_CellularEntries CSP +description: Configure the General Packet Radio Service (GPRS) entries using the CM\_CellularEntries CSP. ms.assetid: f8dac9ef-b709-4b76-b6f5-34c2e6a3c847 ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/enterprisemodernappmanagement-xsd.md b/windows/client-management/mdm/enterprisemodernappmanagement-xsd.md index 99150bef80..f7544b10a4 100644 --- a/windows/client-management/mdm/enterprisemodernappmanagement-xsd.md +++ b/windows/client-management/mdm/enterprisemodernappmanagement-xsd.md @@ -1,6 +1,6 @@ --- title: EnterpriseModernAppManagement XSD -description: Here is the XSD for the application parameters. +description: Use the EnterpriseModernAppManagement XSD for set application parameters. ms.assetid: D393D094-25E5-4E66-A60F-B59CC312BF57 ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/nodecache-csp.md b/windows/client-management/mdm/nodecache-csp.md index 9072c3eb82..045b8152d9 100644 --- a/windows/client-management/mdm/nodecache-csp.md +++ b/windows/client-management/mdm/nodecache-csp.md @@ -1,6 +1,6 @@ --- title: NodeCache CSP -description: NodeCache CSP +description: Use the NodeCache configuration service provider (CSP) to synchronize, monitor, and manage the client cache. ms.assetid: b4dd2b0d-79ef-42ac-ab5b-ee07b3097876 ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/personalization-csp.md b/windows/client-management/mdm/personalization-csp.md index e3914d786d..8d4f260502 100644 --- a/windows/client-management/mdm/personalization-csp.md +++ b/windows/client-management/mdm/personalization-csp.md @@ -1,6 +1,6 @@ --- title: Personalization CSP -description: Personalization CSP +description: Use the Personalization CSP to lock screen and desktop background images, prevent users from changing the image, and use the settings in a provisioning package. ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/client-management/mdm/personalization-ddf.md b/windows/client-management/mdm/personalization-ddf.md index 2492302fed..eef4903c8c 100644 --- a/windows/client-management/mdm/personalization-ddf.md +++ b/windows/client-management/mdm/personalization-ddf.md @@ -1,6 +1,6 @@ --- title: Personalization DDF file -description: Personalization DDF file +description: Learn how to set the OMA DM device description framework (DDF) for the **Personalization** configuration service provider. ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/client-management/mdm/policy-csp-appruntime.md b/windows/client-management/mdm/policy-csp-appruntime.md index 7c7efc8c73..c5b211a563 100644 --- a/windows/client-management/mdm/policy-csp-appruntime.md +++ b/windows/client-management/mdm/policy-csp-appruntime.md @@ -1,6 +1,6 @@ --- title: Policy CSP - AppRuntime -description: Policy CSP - AppRuntime +description: Control whether Microsoft accounts are optional for Windows Store apps that require an account to sign in.Policy CSP - AppRuntime. ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/client-management/mdm/policy-csp-bits.md b/windows/client-management/mdm/policy-csp-bits.md index 07a7f51c0f..d7f56e3f4c 100644 --- a/windows/client-management/mdm/policy-csp-bits.md +++ b/windows/client-management/mdm/policy-csp-bits.md @@ -1,6 +1,6 @@ --- title: Policy CSP - BITS -description: Policy CSP - BITS +description: Use StartTime, EndTime and Transfer rate together to define the BITS bandwidth-throttling schedule and transfer rate. ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/client-management/mdm/policy-csp-browser.md b/windows/client-management/mdm/policy-csp-browser.md index 64a83cf92a..d3fa4df77e 100644 --- a/windows/client-management/mdm/policy-csp-browser.md +++ b/windows/client-management/mdm/policy-csp-browser.md @@ -1,6 +1,6 @@ --- title: Policy CSP - Browser -description: Policy CSP - Browser +description: Learn how to set the Policy CSP - Browser settings for Microsoft Edge, version 45 and earlier. ms.topic: article ms.prod: w10 ms.technology: windows diff --git a/windows/client-management/mdm/policy-csp-messaging.md b/windows/client-management/mdm/policy-csp-messaging.md index aefb521407..b96fcd749d 100644 --- a/windows/client-management/mdm/policy-csp-messaging.md +++ b/windows/client-management/mdm/policy-csp-messaging.md @@ -1,6 +1,6 @@ --- title: Policy CSP - Messaging -description: Policy CSP - Messaging +description: Enable, and disable, text message back up and restore as well as Messaging Everywhere by using the Policy CSP for messaging. ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/client-management/mdm/remotelock-csp.md b/windows/client-management/mdm/remotelock-csp.md index 3ea4ca8ee0..57368cb103 100644 --- a/windows/client-management/mdm/remotelock-csp.md +++ b/windows/client-management/mdm/remotelock-csp.md @@ -1,6 +1,6 @@ --- title: RemoteLock CSP -description: RemoteLock CSP +description: Learn how RemoteLock CSP supports the ability to lock a device that has a PIN set on the device or reset the PIN on a device that may or may not have a PIN set. ms.assetid: c7889331-5aa3-4efe-9a7e-20d3f433659b ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md index 7831cfbce6..28421dc466 100644 --- a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md +++ b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md @@ -1,6 +1,6 @@ --- title: WindowsDefenderApplicationGuard CSP -description: WindowsDefenderApplicationGuard CSP +description: Configure the settings in Windows Defender Application Guard by using the WindowsDefenderApplicationGuard configuration service provider (CSP). ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/configuration/kiosk-xml.md b/windows/configuration/kiosk-xml.md index c9d6d3b2c0..f09e5ee991 100644 --- a/windows/configuration/kiosk-xml.md +++ b/windows/configuration/kiosk-xml.md @@ -1,6 +1,6 @@ --- title: Assigned Access configuration kiosk XML reference (Windows 10) -description: XML and XSD for kiosk device configuration. +description: Learn about the assigned access configuration (kiosk) for XML and XSD for kiosk device configuration in Windows 10. ms.assetid: 14DDDC96-88C7-4181-8415-B371F25726C8 ms.reviewer: manager: dansimp diff --git a/windows/security/identity-protection/access-control/local-accounts.md b/windows/security/identity-protection/access-control/local-accounts.md index 2c744d7f98..7e7c2236cd 100644 --- a/windows/security/identity-protection/access-control/local-accounts.md +++ b/windows/security/identity-protection/access-control/local-accounts.md @@ -1,6 +1,6 @@ --- title: Local Accounts (Windows 10) -description: Local Accounts +description: Learn how to secure and manage access to the resources on a standalone or member server for services or users. ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-new-install.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-new-install.md index 9c4dba47c8..3cb290695f 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-new-install.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-new-install.md @@ -1,6 +1,6 @@ --- title: Windows Hello for Business Key Trust New Installation -description: Learn how to perform a hybrid key trust deployment of Windows Hello for Business, for systems with no previous installations. +description: Learn how to configure a hybrid key trust deployment of Windows Hello for Business, for systems with no previous installations. keywords: identity, PIN, biometric, Hello, passport, WHFB ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/identity-protection/vpn/vpn-connection-type.md b/windows/security/identity-protection/vpn/vpn-connection-type.md index b6fab222d1..92c4d2b8c5 100644 --- a/windows/security/identity-protection/vpn/vpn-connection-type.md +++ b/windows/security/identity-protection/vpn/vpn-connection-type.md @@ -1,6 +1,6 @@ --- title: VPN connection types (Windows 10) -description: tbd +description: Learn about Windows VPN platform clients and the VPN connection-type features that can be configured. ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library diff --git a/windows/security/threat-protection/auditing/event-1102.md b/windows/security/threat-protection/auditing/event-1102.md index c1d44d55e0..4a9b1e8b3a 100644 --- a/windows/security/threat-protection/auditing/event-1102.md +++ b/windows/security/threat-protection/auditing/event-1102.md @@ -1,6 +1,6 @@ --- title: 1102(S) The audit log was cleared. (Windows 10) -description: Describes security event 1102(S) The audit log was cleared. +description: Though you shouldn't normally see it, this event generates every time Windows Security audit log is cleared. This is for event 1102(S). ms.pagetype: security ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/auditing/event-1104.md b/windows/security/threat-protection/auditing/event-1104.md index 5854f68b90..fbcbb7dad9 100644 --- a/windows/security/threat-protection/auditing/event-1104.md +++ b/windows/security/threat-protection/auditing/event-1104.md @@ -1,6 +1,6 @@ --- title: 1104(S) The security log is now full. (Windows 10) -description: Describes security event 1104(S) The security log is now full. +description: This event generates every time Windows security log becomes full and the event log retention method is set to "Do not overwrite events." ms.pagetype: security ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/auditing/event-1105.md b/windows/security/threat-protection/auditing/event-1105.md index cd3b89cac3..e00e49b666 100644 --- a/windows/security/threat-protection/auditing/event-1105.md +++ b/windows/security/threat-protection/auditing/event-1105.md @@ -1,6 +1,6 @@ --- title: 1105(S) Event log automatic backup. (Windows 10) -description: Describes security event 1105(S) Event log automatic backup. +description: This event generates every time Windows security log becomes full and new event log file was created. ms.pagetype: security ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/mbsa-removal-and-guidance.md b/windows/security/threat-protection/mbsa-removal-and-guidance.md index dc96de376a..771169d40b 100644 --- a/windows/security/threat-protection/mbsa-removal-and-guidance.md +++ b/windows/security/threat-protection/mbsa-removal-and-guidance.md @@ -1,6 +1,6 @@ --- title: Guide to removing Microsoft Baseline Security Analyzer (MBSA) -description: This article documents the removal of Microsoft Baseline Security Analyzer (MBSA) and provides alternative solutions +description: This article documents the removal of Microsoft Baseline Security Analyzer (MBSA) and provides alternative solutions. keywords: MBSA, security, removal ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md index bfafa218ea..6546ddbb9b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md @@ -1,6 +1,6 @@ --- title: Get alert related domains information -description: Retrieves all domains related to a specific alert. +description: Retrieve all domains related to a specific alert using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). keywords: apis, graph api, supported apis, get alert information, alert information, related domain search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md index be84e2c9ca..b9deda47b1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md @@ -1,6 +1,6 @@ --- title: Get alert related machine information -description: Retrieves all machines related to a specific alert. +description: Retrieve all machines related to a specific alert using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). keywords: apis, graph api, supported apis, get alert information, alert information, related machine search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md index 59e1357d2e..b5b51cf3d7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md @@ -1,6 +1,6 @@ --- title: Get machine log on users API -description: Retrieves a collection of logged on users. +description: Retrieve a collection of logged on users on a specific machine using Microsoft Defender ATP APIs. keywords: apis, graph api, supported apis, get, machine, log on, users search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/machineaction.md b/windows/security/threat-protection/microsoft-defender-atp/machineaction.md index fdd4146f99..930d43341f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machineaction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machineaction.md @@ -1,6 +1,6 @@ --- title: machineAction resource type -description: Retrieves top recent machineActions. +description: Quickly respond to detected attacks by isolating machines or collecting an investigation package. keywords: apis, supported apis, get, machineaction, recent search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/ti-indicator.md b/windows/security/threat-protection/microsoft-defender-atp/ti-indicator.md index 8e4d732734..8342b664ed 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/ti-indicator.md +++ b/windows/security/threat-protection/microsoft-defender-atp/ti-indicator.md @@ -1,6 +1,6 @@ --- title: Indicator resource type -description: Indicator entity description. +description: Specify the entity details and define the expiration of the indicator using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). keywords: apis, supported apis, get, TiIndicator, Indicator, recent search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md index 75d23d70dd..77eca7df65 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md @@ -1,6 +1,6 @@ --- title: Windows Defender Antivirus in the Windows Security app -description: Windows Defender AV is now included in the Windows Security app. +description: With Windows Defender AV now included in the Windows Security app, you can review, compare, and perform common tasks. keywords: wdav, antivirus, firewall, security, windows search.product: eADQiWindows 10XVcnh ms.pagetype: security diff --git a/windows/security/threat-protection/windows-firewall/create-an-outbound-program-or-service-rule.md b/windows/security/threat-protection/windows-firewall/create-an-outbound-program-or-service-rule.md index 354ed24f32..d1211abf11 100644 --- a/windows/security/threat-protection/windows-firewall/create-an-outbound-program-or-service-rule.md +++ b/windows/security/threat-protection/windows-firewall/create-an-outbound-program-or-service-rule.md @@ -1,6 +1,6 @@ --- title: Create an Outbound Program or Service Rule (Windows 10) -description: Create an Outbound Program or Service Rule +description: Use the Windows Defender Firewall with Advanced Security node in the Group Policy Management console to create firewall rules. ms.assetid: f71db4fb-0228-4df2-a95d-b9c056aa9311 ms.reviewer: ms.author: dansimp From cf8d4f39597f682ca895e05d82d8cd105ca5328b Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 12 May 2020 16:25:59 -0700 Subject: [PATCH 138/177] Update get-started.yml --- devices/surface/get-started.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/devices/surface/get-started.yml b/devices/surface/get-started.yml index 0a02e29fec..9d70d7a59d 100644 --- a/devices/surface/get-started.yml +++ b/devices/surface/get-started.yml @@ -68,7 +68,7 @@ landingContent: url: surface-wireless-connect.md # Card - - title: Explore security topics + - title: Explore security guidance linkLists: - linkListType: how-to-guide links: @@ -92,7 +92,7 @@ landingContent: url: battery-limit.md # Card - - title: Browse Support topics + - title: Browse support solutions linkLists: - linkListType: learn links: @@ -112,3 +112,5 @@ landingContent: url: https://techcommunity.microsoft.com/t5/Surface-IT-Pro-Blog/bg-p/SurfaceITPro - text: Surface Devices Tech Community url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices + - text: Surface Devices Tech Community + url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices From 7513ddfa63f9e7190913d21909c37d1da0fc2697 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 12 May 2020 16:44:25 -0700 Subject: [PATCH 139/177] Fixed broken "Important" note --- mdop/appv-v5/deploying-the-app-v-51-server.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mdop/appv-v5/deploying-the-app-v-51-server.md b/mdop/appv-v5/deploying-the-app-v-51-server.md index d74e853493..ddfa7f25d1 100644 --- a/mdop/appv-v5/deploying-the-app-v-51-server.md +++ b/mdop/appv-v5/deploying-the-app-v-51-server.md @@ -19,7 +19,7 @@ You can install the Microsoft Application Virtualization (App-V) 5.1 server feat For information about deploying the App-V Server, see [About App-V 5.1](about-app-v-51.md#bkmk-migrate-to-51). -> [!IMORTANT] +> [!IMPORTANT] > Before you install and configure the App-V 5.1 servers, you must specify a port where each component will be hosted. You must also add the associated firewall rules to allow incoming requests to access the specified ports. The installer does not modify firewall settings. ## App-V 5.1 Server overview From 412135470f4c5185a31a3105753381b3aec7e28c Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 12 May 2020 16:49:49 -0700 Subject: [PATCH 140/177] Indented a table in a list item --- ...eploy-the-app-v-databases-by-using-sql-scripts51.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/mdop/appv-v5/how-to-deploy-the-app-v-databases-by-using-sql-scripts51.md b/mdop/appv-v5/how-to-deploy-the-app-v-databases-by-using-sql-scripts51.md index ee53d591d6..521bf090aa 100644 --- a/mdop/appv-v5/how-to-deploy-the-app-v-databases-by-using-sql-scripts51.md +++ b/mdop/appv-v5/how-to-deploy-the-app-v-databases-by-using-sql-scripts51.md @@ -29,14 +29,14 @@ Use the following instructions to use SQL scripts, rather than the Windows Insta 1. Copy the **appv\_server\_setup.exe** from the App-V release media to a temporary location. 1. From a command prompt, run **appv\_server\_setup.exe** and specify a temporary location for extracting the database scripts. - Example: appv\_server\_setup.exe /layout c:\\<temporary location path> + Example: appv\_server\_setup.exe /layout c:\\<_temporary location path_> 1. Browse to the temporary location that you created, open the extracted **DatabaseScripts** folder, and review the appropriate Readme.txt file for instructions: -| Database | Location of Readme.txt file to use | -|--|--| -| Management database | ManagementDatabase subfolder | -| Reporting database | ReportingDatabase subfolder | + | Database | Location of Readme.txt file to use | + |--|--| + | Management database | ManagementDatabase subfolder | + | Reporting database | ReportingDatabase subfolder | > [!CAUTION] > The readme.txt file in the ManagementDatabase subfolder is out of date. The information in the updated readme files below is the most current and should supersede the readme information provided in the **DatabaseScripts** folders. From eb02af4ff75bac7671d337c378d17c60da017738 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 12 May 2020 16:58:05 -0700 Subject: [PATCH 141/177] Applied note style, adjusted indentation --- .../identity-protection/remote-credential-guard.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/windows/security/identity-protection/remote-credential-guard.md b/windows/security/identity-protection/remote-credential-guard.md index 189d0aa7d5..4e95da0531 100644 --- a/windows/security/identity-protection/remote-credential-guard.md +++ b/windows/security/identity-protection/remote-credential-guard.md @@ -143,13 +143,14 @@ Beginning with Windows 10 version 1703, you can enable Windows Defender Remote C ![Windows Defender Remote Credential Guard Group Policy](images/remote-credential-guard-gp.png) 3. Under **Use the following restricted mode**: - - If you want to require either [Restricted Admin mode](https://social.technet.microsoft.com/wiki/contents/articles/32905.remote-desktop-services-enable-restricted-admin-mode.aspx) or Windows Defender Remote Credential Guard, choose **Restrict Credential Delegation**. In this configuration, Windows Defender Remote Credential Guard is preferred, but it will use Restricted Admin mode (if supported) when Windows Defender Remote Credential Guard cannot be used. + - If you want to require either [Restricted Admin mode](https://social.technet.microsoft.com/wiki/contents/articles/32905.remote-desktop-services-enable-restricted-admin-mode.aspx) or Windows Defender Remote Credential Guard, choose **Restrict Credential Delegation**. In this configuration, Windows Defender Remote Credential Guard is preferred, but it will use Restricted Admin mode (if supported) when Windows Defender Remote Credential Guard cannot be used. - > **Note:** Neither Windows Defender Remote Credential Guard nor Restricted Admin mode will send credentials in clear text to the Remote Desktop server. + > [!NOTE] + > Neither Windows Defender Remote Credential Guard nor Restricted Admin mode will send credentials in clear text to the Remote Desktop server. - - If you want to require Windows Defender Remote Credential Guard, choose **Require Remote Credential Guard**. With this setting, a Remote Desktop connection will succeed only if the remote computer meets the [requirements](#reqs) listed earlier in this topic. + - If you want to require Windows Defender Remote Credential Guard, choose **Require Remote Credential Guard**. With this setting, a Remote Desktop connection will succeed only if the remote computer meets the [requirements](#reqs) listed earlier in this topic. - - If you want to require Restricted Admin mode, choose **Require Restricted Admin**. For information about Restricted Admin mode, see the table in [Comparing Windows Defender Remote Credential Guard with other Remote Desktop connection options](#comparing-remote-credential-guard-with-other-remote-desktop-connection-options), earlier in this topic. + - If you want to require Restricted Admin mode, choose **Require Restricted Admin**. For information about Restricted Admin mode, see the table in [Comparing Windows Defender Remote Credential Guard with other Remote Desktop connection options](#comparing-remote-credential-guard-with-other-remote-desktop-connection-options), earlier in this topic. 4. Click **OK**. From 61554aeb8a2c3e23236552bfb2cef1e1fef0de23 Mon Sep 17 00:00:00 2001 From: rogersoMS <44718379+rogersoMS@users.noreply.github.com> Date: Wed, 13 May 2020 10:22:47 +1000 Subject: [PATCH 142/177] Corrected Teams 'WIP enlightened' to 'WIP work only' Verified technical changes with Narendra Acharya. No additional tech reviewers are required. Corrected Teams from WIP enlightened to WIP work aware --- .../enlightened-microsoft-apps-and-wip.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md b/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md index 89f484d7e5..85d9523c9b 100644 --- a/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md +++ b/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md @@ -71,9 +71,7 @@ Microsoft has made a concerted effort to enlighten several of our more popular a - Microsoft Messaging -- Microsoft Remote Desktop - -- Microsoft Teams (build 1.3.00.12058 and later) +- Microsoft Remote Desktop > [!NOTE] > Microsoft Visio, Microsoft Office Access and Microsoft Project are not enlightended apps and need to be exempted from WIP policy. If they are allowed, there is a risk of data loss. For example, if a device is workplace-joined and managed and the user leaves the company, metadata files that the apps rely on remain encrypted and the apps stop functioining. @@ -83,6 +81,8 @@ Microsoft still has apps that are unenlightened, but which have been tested and - Skype for Business +- Microsoft Teams (build 1.3.00.12058 and later) + ## Adding enlightened Microsoft apps to the allowed apps list > [!NOTE] From f458e4402913300a51accf4601095773a3c25dbd Mon Sep 17 00:00:00 2001 From: Thomas Raya Date: Tue, 12 May 2020 17:34:24 -0700 Subject: [PATCH 143/177] Update surface-hub-update-history.md --- .../surface-hub/surface-hub-update-history.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/devices/surface-hub/surface-hub-update-history.md b/devices/surface-hub/surface-hub-update-history.md index 8e584f17b3..f4616cd18b 100644 --- a/devices/surface-hub/surface-hub-update-history.md +++ b/devices/surface-hub/surface-hub-update-history.md @@ -24,6 +24,23 @@ Please refer to the “[Surface Hub Important Information](https://support.micro ## Windows 10 Team Creators Update 1703 +

    +May 4, 2020—update for Surface Hub 2S + +This update is specific to the Surface Hub 2S and provides the driver and firmware updates outlined below: + +* Surface USB audio driver - 15.3.6.0 + * Improves directional audio performance. +* Intel(R) display audio driver - 10.27.0.5 + * Improves screen sharing scenarios. +* Intel(R) graphics driver - 26.20.100.7263 + * Improves system stability. +* Surface System driver - 1.7.139.0 + * Improves system stability. +* Surface SMC Firmware update - 1.173.139.0 + * Improves system stability. +
    +
    February 28, 2020—update for Surface Hub 2S From b832f0649f7e40ea71cbc8de9991223b7b3fb4fc Mon Sep 17 00:00:00 2001 From: Andre Della Monica Date: Tue, 12 May 2020 18:10:40 -0700 Subject: [PATCH 144/177] Box update to reflect live device data --- .../microsoft-defender-atp/configure-machines-onboarding.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-machines-onboarding.md b/windows/security/threat-protection/microsoft-defender-atp/configure-machines-onboarding.md index 1f672b58a6..d3f378cce2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-machines-onboarding.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-machines-onboarding.md @@ -52,6 +52,9 @@ From the **Onboarding** card, select **Onboard more machines** to create and ass >[!TIP] >Alternatively, you can navigate to the Microsoft Defender ATP onboarding compliance page in the [Microsoft Azure portal](https://portal.azure.com/) from **All services > Intune > Device compliance > Microsoft Defender ATP**. +>[!NOTE] +> If you want to view the most up-to-date device data, click on **List of devices without ATP sensor**. + From the device compliance page, create a configuration profile specifically for the deployment of the Microsoft Defender ATP sensor and assign that profile to the machines you want to onboard. To do this, you can either: - Select **Create a device configuration profile to configure ATP sensor** to start with a predefined device configuration profile. From 564db77098aad1cecbe0332cd9d5dec1cf9f6f13 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Wed, 13 May 2020 15:39:14 +0300 Subject: [PATCH 145/177] add "machines" which was missing https://github.com/MicrosoftDocs/windows-itpro-docs/issues/6402 --- .../microsoft-defender-atp/get-machine-log-on-users.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md index 59e1357d2e..72860031b8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md @@ -73,7 +73,7 @@ Here is an example of the request. [!include[Improve request performance](../../includes/improve-request-performance.md)] ``` -GET https://api.securitycenter.windows.com/api/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/logonusers +GET https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/logonusers ``` **Response** From 0691f6fbfcc3bc27c2331189c5cdfb1282febb25 Mon Sep 17 00:00:00 2001 From: Herbert Mauerer <41573578+HerbertMauerer@users.noreply.github.com> Date: Wed, 13 May 2020 16:08:30 +0200 Subject: [PATCH 146/177] Update interactive-logon-prompt-user-to-change-password-before-expiration.md The description of the value at zero is incorrect. I verified in the source of Winlogon that you never get a reminder when the value is 0, only when the password expires the same day or when it has expired already. --- ...ve-logon-prompt-user-to-change-password-before-expiration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md b/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md index 300344160d..cbc2288db2 100644 --- a/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md +++ b/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md @@ -37,7 +37,7 @@ This policy setting determines when users are warned that their passwords are ab - Configure user passwords to expire periodically. Users need warning that their password is going to expire, or they might get locked out of the system. - Set **Interactive logon: Prompt user to change password before expiration** to five days. When their password expiration date is five or fewer days away, users will see a dialog box each time that they log on to the domain. -- Don't set the value to zero, which displays the password expiration warning every time the user logs on. +- When you set the policy to zero, there is no password expiration warning when the user logs on. During a long-running logon session, you would get the warning on the day the password expires or when it is already expired. ### Location From 8216f0f6e58b7907d46b5b0df89bf0dd56a409e0 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Wed, 13 May 2020 08:19:38 -0700 Subject: [PATCH 147/177] Adding release blurb --- devices/hololens/hololens-release-notes.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/devices/hololens/hololens-release-notes.md b/devices/hololens/hololens-release-notes.md index f9a6957518..b98be63493 100644 --- a/devices/hololens/hololens-release-notes.md +++ b/devices/hololens/hololens-release-notes.md @@ -23,6 +23,8 @@ appliesto: ## Windows Holographic, version 2004 Build - 19041.1103 +We are excited to announce our May 2020 major software update for HoloLens 2, **Windows Holographic, version 2004**. This release includes a host of exciting new capabilities, such as support for Windows Autopilot, app dark mode, USB Ethernet support for 5G/LTE hotspots, and much more. To update to the latest release, open the **Settings app**, go to **Update & Security**, then select the **Check for Updates** button. + | Feature | Description | |--------------------------------------------------|-------------------------------------------------------------------------------------------------------------------| | Windows Autopilot | Pre-configure and seamlessly set up new devices for production, with Windows AutoPilot | From 8abae80dea5f2d4cfabba451018e2010ccef036f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 13 May 2020 08:48:46 -0700 Subject: [PATCH 148/177] Update manage-indicators.md --- .../microsoft-defender-atp/manage-indicators.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md b/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md index 9f02877b9e..6c323a4a7a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md @@ -82,7 +82,7 @@ It's important to understand the following prerequisites prior to creating indic >[!NOTE] ->There may be up to 2 hours of latency (usually less) between the time the action is taken and the actual file being blocked. +>Typically, file blocks are enforced within a couple of minutes, but can take upwards of 30 minutes. ### Create an indicator for files from the settings page From e04a974e1f0c8daadc8205abe979ad51a142b17b Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Wed, 13 May 2020 19:46:50 +0300 Subject: [PATCH 149/177] add link https://github.com/MicrosoftDocs/windows-itpro-docs/issues/5904 --- .../surface/ethernet-adapters-and-surface-device-deployment.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/ethernet-adapters-and-surface-device-deployment.md b/devices/surface/ethernet-adapters-and-surface-device-deployment.md index c35dbe0630..24cf375474 100644 --- a/devices/surface/ethernet-adapters-and-surface-device-deployment.md +++ b/devices/surface/ethernet-adapters-and-surface-device-deployment.md @@ -85,7 +85,7 @@ To access the firmware of a Surface device, follow these steps: When deploying with WDS, the MAC address is only used to identify a computer when the deployment server is configured to respond only to known, pre-staged clients. When pre-staging a client, an administrator creates a computer account in Active Directory and defines that computer by the MAC address or the System UUID. To avoid the identity conflicts caused by shared Ethernet adapters, you should use [System UUID to define pre-staged clients](https://technet.microsoft.com/library/cc742034). Alternatively, you can configure WDS to respond to unknown clients that do not require definition by either MAC address or System UUID by selecting the **Respond to all client computers (known and unknown)** option on the [**PXE Response** tab](https://technet.microsoft.com/library/cc732360) in **Windows Deployment Server Properties**. -The potential for conflicts with shared Ethernet adapters is much higher with Configuration Manager. Where WDS only uses MAC addresses to define individual systems when configured to do so, Configuration Manager uses the MAC address to define individual systems whenever performing a deployment to new or unknown computers. This can result in improperly configured devices or even the inability to deploy more than one system with a shared Ethernet adapter. There are several potential solutions for this situation that are described in detail in the [How to Use The Same External Ethernet Adapter For Multiple SCCM OSD](https://blogs.technet.microsoft.com/askpfeplat/2014/07/27/how-to-use-the-same-external-ethernet-adapter-for-multiple-sccm-osd/) blog post on the Ask Premier Field Engineering (PFE) Platforms TechNet blog. +The potential for conflicts with shared Ethernet adapters is much higher with Configuration Manager. Where WDS only uses MAC addresses to define individual systems when configured to do so, Configuration Manager uses the MAC address to define individual systems whenever performing a deployment to new or unknown computers. This can result in improperly configured devices or even the inability to deploy more than one system with a shared Ethernet adapter. There are several potential solutions for this situation that are described in detail in the [How to Use The Same External Ethernet Adapter For Multiple SCCM OSD](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/how-to-use-the-same-external-ethernet-adapter-for-multiple-sccm/ba-p/257374) blog post on the Ask Premier Field Engineering (PFE) Platforms TechNet blog.   From dfa2880a69f48995d846056a7301f7d95b5cd8bf Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Wed, 13 May 2020 10:06:44 -0700 Subject: [PATCH 150/177] Update get-started.yml --- devices/surface/get-started.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/devices/surface/get-started.yml b/devices/surface/get-started.yml index 9d70d7a59d..a11e35c584 100644 --- a/devices/surface/get-started.yml +++ b/devices/surface/get-started.yml @@ -112,5 +112,5 @@ landingContent: url: https://techcommunity.microsoft.com/t5/Surface-IT-Pro-Blog/bg-p/SurfaceITPro - text: Surface Devices Tech Community url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices - - text: Surface Devices Tech Community - url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices + - text: Microsoft Mechanics Surface videos + url: https://www.youtube.com/watch?v=Uk2kJ5FUZxY&list=PLXtHYVsvn_b__1Baibdu4elN4SoF3JTBZ From 84b4df63dc9a4fa5ca322c798f0a834dbd03a458 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Wed, 13 May 2020 10:15:46 -0700 Subject: [PATCH 151/177] Create cloud-desktop-surface.md --- devices/surface/cloud-desktop-surface.md | 175 +++++++++++++++++++++++ 1 file changed, 175 insertions(+) create mode 100644 devices/surface/cloud-desktop-surface.md diff --git a/devices/surface/cloud-desktop-surface.md b/devices/surface/cloud-desktop-surface.md new file mode 100644 index 0000000000..14f3e92b65 --- /dev/null +++ b/devices/surface/cloud-desktop-surface.md @@ -0,0 +1,175 @@ +--- +title: Cloud Desktop on Surface +description: This article explains how Surface devices deliver an ideal end node for Windows Virtual Desktop solutions, providing customers with flexible form factors, Windows 10 modern device security and manageability, and support for persistent, on-demand & just-in-time work scenarios. +ms.prod: w10 +ms.mktglfcycl: manage +ms.localizationpriority: medium +ms.sitesec: library +author: coveminer +ms.author: greglin +ms.topic: article +ms.date: 5/15/2020 +ms.reviewer: rohenr +manager: laurawi +audience: itpro +--- +# Cloud Desktop on Surface + +## Introduction + +Cloud Desktop on Surface represents another milestone in the evolution of computing, combining Microsoft 365 -- virtualized in the Azure cloud -- with the advanced security protections, enterprise-level manageability, and enhanced productivity tools of Windows 10 on Surface. This fusion of premium form factor and Virtual Desktop Infrastructure (VDI) in Azure provides exceptional customer value that spans user experiences, portability, security, business continuity, and modern management. Surface blurs the lines between the local desktop experience and the virtual desktop where touch, pen and ink and biometric authentication span both physical and virtual environments. + +### Virtual Desktop Infrastructure on Azure + +Customers can take advantage of VDI on Azure with first party Microsoft solutions such as Windows Virtual Desktop (WVD) or third-party desktop as a service (DaaS) offerings from partners like Workspot and Rackspace. + +### Windows Virtual Desktop + +Windows Virtual Desktop (WVD) is a Platform as a Service (PaaS) solution providing a comprehensive desktop and app virtualization service running in the Azure cloud. It’s the only virtual desktop infrastructure that delivers simplified management, multi-session Windows 10, optimizations for Office 365 ProPlus, and support for Remote Desktop Services (RDS) environments. Deploy and scale Windows desktops and apps on Azure in minutes and get built-in security and compliance features. +This model of cloud desktop still requires customers to maintain and manage updates of Windows virtual machines. + +###Virtual Desktop as a Service + +Virtual Desktop as a Service (DaaS) frees customers from having to maintain their own virtual machines (VMs) by providing a fully managed, turnkey desktop and virtualization service. The ability to deliver customized desktops to users anywhere in the world enables companies to quickly adjust to changing market conditions by spinning up cloud desktops on-demand - when and where they’re needed. + + +## Microsoft Surface Devices + +Surface engineering has long set new standards for innovation by going beyond the keyboard and mouse to imagine more natural ways of interacting with devices, whether by touch, voice, ink, or Surface Dial. And with chip-to-cloud integration of Microsoft 365 and the security and manageability of Windows 10 Pro, we’ve seamlessly connected hardware, software, apps, and services the way they were intended. +Although you can run Windows Virtual Desktop on Windows 7, Windows Server 2012 R2, or virtual machines, or Windows OEM devices, running WVD on Microsoft Surface devices provides unique advantages including support for: + +- **Flexible form factors** - like 2-in-1 devices such as Surface Go 2, Surface Pro 7 and Surface Pro X with pen, touch and detachable keyboard. +- **Persistent, on-demand and just-in-time work scenarios** - with offline and on-device access for more productive experiences. +- **Windows 10 modern device security and manageability** - providing the flexibility to be productive anywhere. +- **Reducing your carbon footprint –** to support your efforts to cut carbon emissions and drive towards environmental sustainability. + +### Flexible form factors and premium user experience + +The Microsoft Surface for Business family comprises a diverse portfolio of form factors including traditional laptops, all-in-one machines, and 2-in-1 devices. Surface devices deliver experiences people love with the choice and flexibility they need in order to work on their terms. + +#### Transforming the virtual desktop endpoint + +Surface 2-in-1 devices, including [Surface Go 2](https://www.microsoft.com/p/surface-go/ (10.5”), [Surface Pro 7](https://www.microsoft.com/surface/devices/surface-pro-7/) (12”) and [Surface Pro X](https://www.microsoft.com/p/surface-pro-x/) (13”), provide users with the ideal cloud desktop endpoint bringing together the optimal balance of portability, versatility, power, and all-day battery. From site engineers relying on Surface Go 2 in tablet mode to financial advisors attaching Surface Pro 7 to a dock and multiple monitors, 2-in-1 devices deliver the versatility that has come to define the modern workplace. + +Unlike traditional, fixed VDI “terminals”, Surface devices allow users to work from anywhere and enable companies to remain viable and operational during unforeseen events -- from severe weather to public health emergencies. With support for persistent, on-demand and just-in-time scenarios, Surface devices effectively help companies sustain ongoing operations and mitigate risk from disruptive events. + +Features designed to enhance productivity on Surface 2-in-1 devices include: + +- Vibrant, high resolution displays with 3:2 aspect ratio to get work done. +- Natural inking and multi-touch for more immersive experiences. +- With a wide variety of built-in and third-party accessibility features, Surface devices let you choose how to interact with your device, express ideas, and get work done. +- Far-field mics and high-performance speakers for improved virtual meetings. +- Biometric security including built-in, Windows Hello camera that comes standard on every Surface device. +- Longer battery life[[1]](#) and fast charging. +- LTE options[[2]](#), on modern devices like Surface Pro X and Surface Go 2 for hassle-free and secure connectivity. +- Support for a wide range of peripherals such as standard printers, 3D printers, cameras, credit card readers, barcode scanners, and many others. A large ecosystem of Designed for Surface partners provides licensed and certified Surface accessories. +- Broad range of Device Redirection support. + +#### VDI Device Redirection Support + +The Surface-centric productivity experiences listed above become even more compelling in VDI environments by taking advantage of device redirection capabilities with Windows 10. Surface provides a broad range of device redirection support, especially when compared to OEM thin clients and fixed terminals, Android, iOS/macOS and Web-based access. The Windows Inbox (MSTSC) and Windows Desktop (MSRDC) clients provide the most Device Redirection capabilities including Input Redirection (keyboard, mouse, pen and touch), Port Redirection (serial and USB) and Other Redirections (cameras, clipboard, local drive/storage, location, microphones, printers, scanners, smart cards and speakers). For a detailed comparison of Device Redirection support refer to the [Device Redirection documentation](https://docs.microsoft.com/windows-server/remote/remote-desktop-services/clients/remote-desktop-app-compare#redirection-support). + +#### Familiar Desktop Experience + +Not only does running the Windows Desktop Client on Surface devices provide users with the broadest set of Device Redirection capabilities but it also provides the additional capability to use the apps in the way that is familiar to the end users – by launching an app directly from the Start Menu or launch the apps by searching it in the search bar. + +### Persistent, on-demand and just-in-time work scenarios + +Cloud Desktop on Surface helps customers meet increasingly complex business and security requirements across industries, employee roles, and work environments. These include: + +- Multi-layered security of access to data and organizational resources. +- Compliance with industry regulations. +- Support for an increasingly elastic workforce. +- Employee-specific needs across a variety of job functions. +- Ability to support specialized, processor-intensive workloads. +- Resilience for sustaining operations during disruptions. + + +**Table 1. Windows Virtual Desktop business conversations** + +| Security & regulation | Elastic workforce | Work Roles | Special workloads | Business continuity | +| ---------------------------------------------------- | ---------------------------------------------------------------------------- | ----------------------------------------------------------------- | ---------------------------------------------------------------------------- | ---------------------------------------------------- | +| - Financial Services
    - Healthcare
    - Government | - Merger & acquisition
    - Short term employees
    - Contractors & partners | - BYOD & mobile
    - Customer support/service
    - Branch workers | - Design & engineering
    - Support for legacy apps
    - Software dev & test | - On demand
    - Just-in-Time (JIT)
    - Work @ Home | + + + +### Offline and on-device access for more productive experiences + +Traditionally, VDI solutions only work when the endpoint is connected to the internet. But what happens when the internet or power is unavailable for any reason (due to mobility, being on a plane, or power outages, and so on)? + +To support business continuity and keep employees productive, Surface devices can easily augment the virtual desktop experience with offline access to files, Microsoft 365 and third-party applications. Traditional apps like Microsoft Office, available across .x86, x64, Universal Windows Platform, ARM platforms, enable users to stay productive in “offline mode”. Files from the virtual desktop cloud environment can be synced locally on Surface using OneDrive for Business for offline access as well. You can have the confidence that all locally “cached” information is up-to-date and secure. + +In addition to adding support for offline access to apps and files, Surface devices are designed to optimize collaborative experiences like Microsoft Teams “On-Device”. Although some VDI solutions support the use of Teams through a virtual session, users can benefit from the more optimized experience provided by a locally installed instance of Teams. Localizing communications and collaboration apps for multimedia channels like voice, video, live captioning allows organizations to take full advantage of Surface devices’ ability to provide optimized Microsoft 365 experiences. The emergence of Surface artificial intelligence (AI) or “AI-on-device” brings new capabilities to life, such as eye gaze technology that adjusts the appearance of your eyes so the audience sees you looking directly at the camera when communicating via video. + +An alternative to locally installing traditional applications is to take advantage of the Chromium version of Microsoft Edge, which comes with support for Progressive Web Apps (PWA). PWAs are just websites that are progressively enhanced to function like native apps on supporting platforms. The qualities of a PWA combine the best of the web and native apps by additional features, such as push notifications, background data refresh, offline support, and more. + +### Virtual GPUs + +GPUs are ideal for [AI] compute and graphics-intensive workloads, helping customers to fuel innovation through scenarios like high-end remote visualization, deep learning, and predictive analytics. However, this isn’t ideal for professionals who need to work remotely or while on the go because varying degrees of internal GPU horsepower are tied to the physical devices, limiting mobility and flexibility. + +To solve for this Azure offers the N-series family of Virtual Machines with NVIDIA GPU capabilities (vGPU). With vGPUs, IT can either share GPU performance across multiple virtual machines, or power demanding workloads by assigning multiple GPUs to a single virtual machine. For Surface this means that no matter what device you’re using, from the highly portable Surface Go 2 to the slim and stylish Surface Laptop 3, your device has access to powerful server-class graphics performance. Surface and vGPUs allow you to combine all the things you love about Surface, to include pen, touch, keyboard, trackpad and PixelSense displays, with graphics capability only available in high performance computing environments. + +Azure N-series brings these capabilities to life on your Surface device allowing you to work in any way you want, wherever you go. [Learn more about Azure N-Series and GPU optimized virtual machine sizes.](https://docs.microsoft.com/azure/virtual-machines/sizes-gpu) + +### Microsoft 365 and Surface + +Even in a virtualized desktop environment, Microsoft 365 and Surface deliver the experiences employees love, the protection organizations demand, and flexibility for teams to work their way. According to Forrester Research3: + +- Microsoft 365-powered Surface devices give users up to 5 hours in weekly productivity gains with up to 9 hours saved per week for highly mobile workers, providing organizations with 112 percent ROI on Microsoft 365 with Surface +- 75 percent agree Microsoft 365-powered Surface devices help improve employee satisfaction and retention +- agree that Microsoft 365- powered Surface devices have helped improve employee satisfaction and retention. + +#### Security and management + +From chip to cloud, Microsoft 365 and Surface helps organizations stay protected and up to date. +With both Surface hardware and software designed, built, and tested together by Microsoft, users can be confident they’re productive and protected by leading technologies from chip to cloud. With increased numbers of users working remotely, protecting corporate data and intellectual property becomes more paramount than ever. Cloud Desktop on Surface is designed around a zero-trust security model in which every access request is strongly authenticated, authorized within policy constraints, and inspected for anomalies before granting access. + +By maximizing efficiencies from cloud computing, modern management enables IT to better serve the needs of users, stakeholders and customers in an increasingly competitive business environment. For example, you can get Surface devices up-and-running with minimal interaction from your team. Setup is automatic and self-serviced. Updates are quick and painless for both your team and your users. You can manage devices regardless of their physical location. + +Security and management features delivered Cloud Desktop on Surface include: + +- **Windows Update.** Keeping Windows up to date helps you stay ahead of new security threats. Windows 10 has been engineered from the ground up to be more secure and utilize the latest hardware capabilities to improve security. With a purpose-built UEFI[[3]](#) and Windows Update for Business that responds to evolving threats, end-to-end protection is secure and simplified.4 + +- **Hardware encryption.** Device encryption lets you protect the data on your Surface so it can only be accessed by authorized individuals. All Surface for Business devices feature a discrete Trusted Platform Module (dTPM) that is hardware-protected against intrusion while software uses protected keys and measurements to verify software validity. +- **Windows Defender.** Windows Defender Antivirus brings together machine learning, big-data analysis, in-depth threat resistance research, and the Microsoft cloud infrastructure to protect devices. The tool is built in and needs no extra agents to be deployed on-devices or in the VDI environment, simplifying management and optimizing device start up. +- Windows Defender is built in and needs no extra agents to be deployed on-device or in the VDI environment, simplifying management and optimizing device start up. The true out-of-the-box experience. +- **Removable drives** - A subset of newer Surface devices[[4]](#) feature removable SSD drives5 providing greater control over data retention. +- **Modern authentication -** Microsoft 365 and Surface is a unified platform delivering every Windows security feature (subject to licensing and enablement). All Surface portfolio devices ship with a custom-built camera, designed for Windows Hello for Business providing biometric security that persists seamlessly from on-device to VDI-based experiences. +- **Modern firmware management** - IT administrators can disable hardware elements at a firmware level such as mics, USB ports, SD card slots, cameras, and Bluetooth which removes power to the peripheral. Device Firmware Configuration Interface (DFCI) enables IT managers to manage UEFI via Microsoft Intune, for simple remote management. Windows Defender Credential Guard uses virtualization-based security so that only privileged system software can access them. +- **Backward and forward compatibility** - Windows 10 devices provide backward and forward compatibility across hardware, software and services. Microsoft has a strong history of maintaining legacy support of hardware, peripherals, software and services while incorporating the latest technologies. Businesses can plan IT investments to have a long useful life. +- **Bridge for legacy Windows 7 workloads** - For solution scenarios dependent on legacy Windows OS environments, enterprises can use VDI instances of Windows 7 running in Azure. This enables support on modern devices like Surface without the risk of relying on older Windows 7 machines that no longer receive the latest security updates. In addition to these “future proofing” benefits, migration of any legacy workloads becomes greatly simplified when modern Windows 10 hardware is already deployed. +- **Zero-Touch Deployment** - Autopilot is the recommended modern management deployment option for Surface devices. Windows Autopilot on Surface is a cloud-based deployment technology in Windows 10. You can use Windows Autopilot on Surface to remotely deploy and configure devices in a zero-touch process right out of the box. Windows Autopilot-registered devices are identified over the Internet at first startup through a unique device signature that's called a hardware hash. They're automatically enrolled and configured by using modern management solutions such as Azure Active Directory (Azure AD) and mobile device management. + +### Reduce your carbon footprint with Surface + +At Microsoft Devices, sustainability is integral to our mission to build products that create magical experiences while empowering every person and organization to achieve more. From product design through sourcing, manufacturing, delivery, and product end-of-life, we are driven to make a difference with our products both in how our customers create with them and in the impact their development has on our environment. + +- **Surface Environmental Impact** – For each Surface product we produce an ECO profile which consist of data about the environmental impact for the product. In the profile you can find the Product Carbon Footprint as well as the EnergyStar value. Taking the average values from those reports and comparing them to the average values from in market VDI desktop and VDI mobile devices. We can see some big differences. 565 percent difference in kg Co2 and a 158 percent in the energy use. +- **Surface Packaging** - Integrating sustainability into our packaging designs and measuring results is a business priority. We focus on using less packaging and selecting the right materials for the environment. We are committed to designing and delivering packaging materials that achieve measurable sustainability gains. Wood-based fiber packaging materials contain an average of 65 percent post-consumer recycled content. Packaging is 93 percent recyclable. Packaging weight is minimized. + + ![Surface ECO profiles](images/surface-eco-data.png) + +To download profiles for each Surface device, see [ECO Profiles](https://www.microsoft.com/download/details.aspx?id=55974) on the Microsoft Download Center. + +## Summary + +Cloud Desktop on Surface provides organizations with greater flexibility and resilience in meeting the diverse needs of users, stakeholders, and customers. Running WVD and Azure-based virtual desktop solutions on Surface devices provides unique advantages over continued reliance on legacy devices. Flexible form factors like Surface Go 2 and Surface Pro 7 connected to the cloud (or offline), enable users to be productive from anywhere, at any time. Whether employees work in persistent, on-demand, or just-in-time scenarios, Cloud Desktop on Surface affords businesses with the versatility to sustain productivity throughout disruptions from public health emergencies or other unforeseen events. Using the built in, multi-layered security and modern manageability of Windows 10, companies can take advantage of an expanding ecosystem of cloud-based services to rapidly deploy and scale Windows desktops and apps. Simply put, Cloud Desktop on Surface delivers critically needed technology to organizations and businesses of all sizes + +## Learn more + +For more information, see the following resources: + +- [Windows Virtual Desktop](https://azure.microsoft.com/services/virtual-desktop/) +- [Surface for Business](https://www.microsoft.com/surface/business) +- [Zero-trust security model](https://www.microsoft.com/security/business/zero-trust) + + + + +---------- + +[[1]](#) Battery life varies significantly with settings, usage and other factors. +[[2]](#) Service availability and performance subject to service provider’s network. Contact your service provider for details, compatibility, pricing, SIM card, and activation. See all specs and frequencies at surface.com. +[[3]](#) Surface Go uses third party UEFI. +[[4]](#) Hard drive is not user removable. Hard drive is only removable a by skilled technician following Microsoft instructions. + From 5cd251c6f806de98ed1248def16ffbf23af13091 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Wed, 13 May 2020 10:25:43 -0700 Subject: [PATCH 152/177] Delete cloud-desktop-surface.md --- devices/surface/cloud-desktop-surface.md | 175 ----------------------- 1 file changed, 175 deletions(-) delete mode 100644 devices/surface/cloud-desktop-surface.md diff --git a/devices/surface/cloud-desktop-surface.md b/devices/surface/cloud-desktop-surface.md deleted file mode 100644 index 14f3e92b65..0000000000 --- a/devices/surface/cloud-desktop-surface.md +++ /dev/null @@ -1,175 +0,0 @@ ---- -title: Cloud Desktop on Surface -description: This article explains how Surface devices deliver an ideal end node for Windows Virtual Desktop solutions, providing customers with flexible form factors, Windows 10 modern device security and manageability, and support for persistent, on-demand & just-in-time work scenarios. -ms.prod: w10 -ms.mktglfcycl: manage -ms.localizationpriority: medium -ms.sitesec: library -author: coveminer -ms.author: greglin -ms.topic: article -ms.date: 5/15/2020 -ms.reviewer: rohenr -manager: laurawi -audience: itpro ---- -# Cloud Desktop on Surface - -## Introduction - -Cloud Desktop on Surface represents another milestone in the evolution of computing, combining Microsoft 365 -- virtualized in the Azure cloud -- with the advanced security protections, enterprise-level manageability, and enhanced productivity tools of Windows 10 on Surface. This fusion of premium form factor and Virtual Desktop Infrastructure (VDI) in Azure provides exceptional customer value that spans user experiences, portability, security, business continuity, and modern management. Surface blurs the lines between the local desktop experience and the virtual desktop where touch, pen and ink and biometric authentication span both physical and virtual environments. - -### Virtual Desktop Infrastructure on Azure - -Customers can take advantage of VDI on Azure with first party Microsoft solutions such as Windows Virtual Desktop (WVD) or third-party desktop as a service (DaaS) offerings from partners like Workspot and Rackspace. - -### Windows Virtual Desktop - -Windows Virtual Desktop (WVD) is a Platform as a Service (PaaS) solution providing a comprehensive desktop and app virtualization service running in the Azure cloud. It’s the only virtual desktop infrastructure that delivers simplified management, multi-session Windows 10, optimizations for Office 365 ProPlus, and support for Remote Desktop Services (RDS) environments. Deploy and scale Windows desktops and apps on Azure in minutes and get built-in security and compliance features. -This model of cloud desktop still requires customers to maintain and manage updates of Windows virtual machines. - -###Virtual Desktop as a Service - -Virtual Desktop as a Service (DaaS) frees customers from having to maintain their own virtual machines (VMs) by providing a fully managed, turnkey desktop and virtualization service. The ability to deliver customized desktops to users anywhere in the world enables companies to quickly adjust to changing market conditions by spinning up cloud desktops on-demand - when and where they’re needed. - - -## Microsoft Surface Devices - -Surface engineering has long set new standards for innovation by going beyond the keyboard and mouse to imagine more natural ways of interacting with devices, whether by touch, voice, ink, or Surface Dial. And with chip-to-cloud integration of Microsoft 365 and the security and manageability of Windows 10 Pro, we’ve seamlessly connected hardware, software, apps, and services the way they were intended. -Although you can run Windows Virtual Desktop on Windows 7, Windows Server 2012 R2, or virtual machines, or Windows OEM devices, running WVD on Microsoft Surface devices provides unique advantages including support for: - -- **Flexible form factors** - like 2-in-1 devices such as Surface Go 2, Surface Pro 7 and Surface Pro X with pen, touch and detachable keyboard. -- **Persistent, on-demand and just-in-time work scenarios** - with offline and on-device access for more productive experiences. -- **Windows 10 modern device security and manageability** - providing the flexibility to be productive anywhere. -- **Reducing your carbon footprint –** to support your efforts to cut carbon emissions and drive towards environmental sustainability. - -### Flexible form factors and premium user experience - -The Microsoft Surface for Business family comprises a diverse portfolio of form factors including traditional laptops, all-in-one machines, and 2-in-1 devices. Surface devices deliver experiences people love with the choice and flexibility they need in order to work on their terms. - -#### Transforming the virtual desktop endpoint - -Surface 2-in-1 devices, including [Surface Go 2](https://www.microsoft.com/p/surface-go/ (10.5”), [Surface Pro 7](https://www.microsoft.com/surface/devices/surface-pro-7/) (12”) and [Surface Pro X](https://www.microsoft.com/p/surface-pro-x/) (13”), provide users with the ideal cloud desktop endpoint bringing together the optimal balance of portability, versatility, power, and all-day battery. From site engineers relying on Surface Go 2 in tablet mode to financial advisors attaching Surface Pro 7 to a dock and multiple monitors, 2-in-1 devices deliver the versatility that has come to define the modern workplace. - -Unlike traditional, fixed VDI “terminals”, Surface devices allow users to work from anywhere and enable companies to remain viable and operational during unforeseen events -- from severe weather to public health emergencies. With support for persistent, on-demand and just-in-time scenarios, Surface devices effectively help companies sustain ongoing operations and mitigate risk from disruptive events. - -Features designed to enhance productivity on Surface 2-in-1 devices include: - -- Vibrant, high resolution displays with 3:2 aspect ratio to get work done. -- Natural inking and multi-touch for more immersive experiences. -- With a wide variety of built-in and third-party accessibility features, Surface devices let you choose how to interact with your device, express ideas, and get work done. -- Far-field mics and high-performance speakers for improved virtual meetings. -- Biometric security including built-in, Windows Hello camera that comes standard on every Surface device. -- Longer battery life[[1]](#) and fast charging. -- LTE options[[2]](#), on modern devices like Surface Pro X and Surface Go 2 for hassle-free and secure connectivity. -- Support for a wide range of peripherals such as standard printers, 3D printers, cameras, credit card readers, barcode scanners, and many others. A large ecosystem of Designed for Surface partners provides licensed and certified Surface accessories. -- Broad range of Device Redirection support. - -#### VDI Device Redirection Support - -The Surface-centric productivity experiences listed above become even more compelling in VDI environments by taking advantage of device redirection capabilities with Windows 10. Surface provides a broad range of device redirection support, especially when compared to OEM thin clients and fixed terminals, Android, iOS/macOS and Web-based access. The Windows Inbox (MSTSC) and Windows Desktop (MSRDC) clients provide the most Device Redirection capabilities including Input Redirection (keyboard, mouse, pen and touch), Port Redirection (serial and USB) and Other Redirections (cameras, clipboard, local drive/storage, location, microphones, printers, scanners, smart cards and speakers). For a detailed comparison of Device Redirection support refer to the [Device Redirection documentation](https://docs.microsoft.com/windows-server/remote/remote-desktop-services/clients/remote-desktop-app-compare#redirection-support). - -#### Familiar Desktop Experience - -Not only does running the Windows Desktop Client on Surface devices provide users with the broadest set of Device Redirection capabilities but it also provides the additional capability to use the apps in the way that is familiar to the end users – by launching an app directly from the Start Menu or launch the apps by searching it in the search bar. - -### Persistent, on-demand and just-in-time work scenarios - -Cloud Desktop on Surface helps customers meet increasingly complex business and security requirements across industries, employee roles, and work environments. These include: - -- Multi-layered security of access to data and organizational resources. -- Compliance with industry regulations. -- Support for an increasingly elastic workforce. -- Employee-specific needs across a variety of job functions. -- Ability to support specialized, processor-intensive workloads. -- Resilience for sustaining operations during disruptions. - - -**Table 1. Windows Virtual Desktop business conversations** - -| Security & regulation | Elastic workforce | Work Roles | Special workloads | Business continuity | -| ---------------------------------------------------- | ---------------------------------------------------------------------------- | ----------------------------------------------------------------- | ---------------------------------------------------------------------------- | ---------------------------------------------------- | -| - Financial Services
    - Healthcare
    - Government | - Merger & acquisition
    - Short term employees
    - Contractors & partners | - BYOD & mobile
    - Customer support/service
    - Branch workers | - Design & engineering
    - Support for legacy apps
    - Software dev & test | - On demand
    - Just-in-Time (JIT)
    - Work @ Home | - - - -### Offline and on-device access for more productive experiences - -Traditionally, VDI solutions only work when the endpoint is connected to the internet. But what happens when the internet or power is unavailable for any reason (due to mobility, being on a plane, or power outages, and so on)? - -To support business continuity and keep employees productive, Surface devices can easily augment the virtual desktop experience with offline access to files, Microsoft 365 and third-party applications. Traditional apps like Microsoft Office, available across .x86, x64, Universal Windows Platform, ARM platforms, enable users to stay productive in “offline mode”. Files from the virtual desktop cloud environment can be synced locally on Surface using OneDrive for Business for offline access as well. You can have the confidence that all locally “cached” information is up-to-date and secure. - -In addition to adding support for offline access to apps and files, Surface devices are designed to optimize collaborative experiences like Microsoft Teams “On-Device”. Although some VDI solutions support the use of Teams through a virtual session, users can benefit from the more optimized experience provided by a locally installed instance of Teams. Localizing communications and collaboration apps for multimedia channels like voice, video, live captioning allows organizations to take full advantage of Surface devices’ ability to provide optimized Microsoft 365 experiences. The emergence of Surface artificial intelligence (AI) or “AI-on-device” brings new capabilities to life, such as eye gaze technology that adjusts the appearance of your eyes so the audience sees you looking directly at the camera when communicating via video. - -An alternative to locally installing traditional applications is to take advantage of the Chromium version of Microsoft Edge, which comes with support for Progressive Web Apps (PWA). PWAs are just websites that are progressively enhanced to function like native apps on supporting platforms. The qualities of a PWA combine the best of the web and native apps by additional features, such as push notifications, background data refresh, offline support, and more. - -### Virtual GPUs - -GPUs are ideal for [AI] compute and graphics-intensive workloads, helping customers to fuel innovation through scenarios like high-end remote visualization, deep learning, and predictive analytics. However, this isn’t ideal for professionals who need to work remotely or while on the go because varying degrees of internal GPU horsepower are tied to the physical devices, limiting mobility and flexibility. - -To solve for this Azure offers the N-series family of Virtual Machines with NVIDIA GPU capabilities (vGPU). With vGPUs, IT can either share GPU performance across multiple virtual machines, or power demanding workloads by assigning multiple GPUs to a single virtual machine. For Surface this means that no matter what device you’re using, from the highly portable Surface Go 2 to the slim and stylish Surface Laptop 3, your device has access to powerful server-class graphics performance. Surface and vGPUs allow you to combine all the things you love about Surface, to include pen, touch, keyboard, trackpad and PixelSense displays, with graphics capability only available in high performance computing environments. - -Azure N-series brings these capabilities to life on your Surface device allowing you to work in any way you want, wherever you go. [Learn more about Azure N-Series and GPU optimized virtual machine sizes.](https://docs.microsoft.com/azure/virtual-machines/sizes-gpu) - -### Microsoft 365 and Surface - -Even in a virtualized desktop environment, Microsoft 365 and Surface deliver the experiences employees love, the protection organizations demand, and flexibility for teams to work their way. According to Forrester Research3: - -- Microsoft 365-powered Surface devices give users up to 5 hours in weekly productivity gains with up to 9 hours saved per week for highly mobile workers, providing organizations with 112 percent ROI on Microsoft 365 with Surface -- 75 percent agree Microsoft 365-powered Surface devices help improve employee satisfaction and retention -- agree that Microsoft 365- powered Surface devices have helped improve employee satisfaction and retention. - -#### Security and management - -From chip to cloud, Microsoft 365 and Surface helps organizations stay protected and up to date. -With both Surface hardware and software designed, built, and tested together by Microsoft, users can be confident they’re productive and protected by leading technologies from chip to cloud. With increased numbers of users working remotely, protecting corporate data and intellectual property becomes more paramount than ever. Cloud Desktop on Surface is designed around a zero-trust security model in which every access request is strongly authenticated, authorized within policy constraints, and inspected for anomalies before granting access. - -By maximizing efficiencies from cloud computing, modern management enables IT to better serve the needs of users, stakeholders and customers in an increasingly competitive business environment. For example, you can get Surface devices up-and-running with minimal interaction from your team. Setup is automatic and self-serviced. Updates are quick and painless for both your team and your users. You can manage devices regardless of their physical location. - -Security and management features delivered Cloud Desktop on Surface include: - -- **Windows Update.** Keeping Windows up to date helps you stay ahead of new security threats. Windows 10 has been engineered from the ground up to be more secure and utilize the latest hardware capabilities to improve security. With a purpose-built UEFI[[3]](#) and Windows Update for Business that responds to evolving threats, end-to-end protection is secure and simplified.4 - -- **Hardware encryption.** Device encryption lets you protect the data on your Surface so it can only be accessed by authorized individuals. All Surface for Business devices feature a discrete Trusted Platform Module (dTPM) that is hardware-protected against intrusion while software uses protected keys and measurements to verify software validity. -- **Windows Defender.** Windows Defender Antivirus brings together machine learning, big-data analysis, in-depth threat resistance research, and the Microsoft cloud infrastructure to protect devices. The tool is built in and needs no extra agents to be deployed on-devices or in the VDI environment, simplifying management and optimizing device start up. -- Windows Defender is built in and needs no extra agents to be deployed on-device or in the VDI environment, simplifying management and optimizing device start up. The true out-of-the-box experience. -- **Removable drives** - A subset of newer Surface devices[[4]](#) feature removable SSD drives5 providing greater control over data retention. -- **Modern authentication -** Microsoft 365 and Surface is a unified platform delivering every Windows security feature (subject to licensing and enablement). All Surface portfolio devices ship with a custom-built camera, designed for Windows Hello for Business providing biometric security that persists seamlessly from on-device to VDI-based experiences. -- **Modern firmware management** - IT administrators can disable hardware elements at a firmware level such as mics, USB ports, SD card slots, cameras, and Bluetooth which removes power to the peripheral. Device Firmware Configuration Interface (DFCI) enables IT managers to manage UEFI via Microsoft Intune, for simple remote management. Windows Defender Credential Guard uses virtualization-based security so that only privileged system software can access them. -- **Backward and forward compatibility** - Windows 10 devices provide backward and forward compatibility across hardware, software and services. Microsoft has a strong history of maintaining legacy support of hardware, peripherals, software and services while incorporating the latest technologies. Businesses can plan IT investments to have a long useful life. -- **Bridge for legacy Windows 7 workloads** - For solution scenarios dependent on legacy Windows OS environments, enterprises can use VDI instances of Windows 7 running in Azure. This enables support on modern devices like Surface without the risk of relying on older Windows 7 machines that no longer receive the latest security updates. In addition to these “future proofing” benefits, migration of any legacy workloads becomes greatly simplified when modern Windows 10 hardware is already deployed. -- **Zero-Touch Deployment** - Autopilot is the recommended modern management deployment option for Surface devices. Windows Autopilot on Surface is a cloud-based deployment technology in Windows 10. You can use Windows Autopilot on Surface to remotely deploy and configure devices in a zero-touch process right out of the box. Windows Autopilot-registered devices are identified over the Internet at first startup through a unique device signature that's called a hardware hash. They're automatically enrolled and configured by using modern management solutions such as Azure Active Directory (Azure AD) and mobile device management. - -### Reduce your carbon footprint with Surface - -At Microsoft Devices, sustainability is integral to our mission to build products that create magical experiences while empowering every person and organization to achieve more. From product design through sourcing, manufacturing, delivery, and product end-of-life, we are driven to make a difference with our products both in how our customers create with them and in the impact their development has on our environment. - -- **Surface Environmental Impact** – For each Surface product we produce an ECO profile which consist of data about the environmental impact for the product. In the profile you can find the Product Carbon Footprint as well as the EnergyStar value. Taking the average values from those reports and comparing them to the average values from in market VDI desktop and VDI mobile devices. We can see some big differences. 565 percent difference in kg Co2 and a 158 percent in the energy use. -- **Surface Packaging** - Integrating sustainability into our packaging designs and measuring results is a business priority. We focus on using less packaging and selecting the right materials for the environment. We are committed to designing and delivering packaging materials that achieve measurable sustainability gains. Wood-based fiber packaging materials contain an average of 65 percent post-consumer recycled content. Packaging is 93 percent recyclable. Packaging weight is minimized. - - ![Surface ECO profiles](images/surface-eco-data.png) - -To download profiles for each Surface device, see [ECO Profiles](https://www.microsoft.com/download/details.aspx?id=55974) on the Microsoft Download Center. - -## Summary - -Cloud Desktop on Surface provides organizations with greater flexibility and resilience in meeting the diverse needs of users, stakeholders, and customers. Running WVD and Azure-based virtual desktop solutions on Surface devices provides unique advantages over continued reliance on legacy devices. Flexible form factors like Surface Go 2 and Surface Pro 7 connected to the cloud (or offline), enable users to be productive from anywhere, at any time. Whether employees work in persistent, on-demand, or just-in-time scenarios, Cloud Desktop on Surface affords businesses with the versatility to sustain productivity throughout disruptions from public health emergencies or other unforeseen events. Using the built in, multi-layered security and modern manageability of Windows 10, companies can take advantage of an expanding ecosystem of cloud-based services to rapidly deploy and scale Windows desktops and apps. Simply put, Cloud Desktop on Surface delivers critically needed technology to organizations and businesses of all sizes - -## Learn more - -For more information, see the following resources: - -- [Windows Virtual Desktop](https://azure.microsoft.com/services/virtual-desktop/) -- [Surface for Business](https://www.microsoft.com/surface/business) -- [Zero-trust security model](https://www.microsoft.com/security/business/zero-trust) - - - - ----------- - -[[1]](#) Battery life varies significantly with settings, usage and other factors. -[[2]](#) Service availability and performance subject to service provider’s network. Contact your service provider for details, compatibility, pricing, SIM card, and activation. See all specs and frequencies at surface.com. -[[3]](#) Surface Go uses third party UEFI. -[[4]](#) Hard drive is not user removable. Hard drive is only removable a by skilled technician following Microsoft instructions. - From 91896af97d29594b70aec0fc220a157a71f052cf Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 13 May 2020 11:44:35 -0700 Subject: [PATCH 153/177] Updated releease info --- ...ew-in-windows-mdm-enrollment-management.md | 1 + .../mdm/policy-csp-update.md | 25 ++++++++++--------- 2 files changed, 14 insertions(+), 12 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index d9beadf585..e7f3dc7a8c 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -429,6 +429,7 @@ Policy, Policy/Channels, Policy/Channels/ChannelName, Policy/Channels/ChannelNam
  1. TextInput/TouchKeyboardSplitModeAvailability
  2. TextInput/TouchKeyboardWideModeAvailability
  3. Update/ConfigureFeatureUpdateUninstallPeriod
    4. +
  4. Update/TargetReleaseVersion
  5. UserRights/AccessCredentialManagerAsTrustedCaller
  6. UserRights/AccessFromNetwork
  7. UserRights/ActAsPartOfTheOperatingSystem
    8. diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index c0774fbced..9949285fca 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -4151,19 +4151,19 @@ The following list shows the supported values: Pro - check mark + check mark4 Business - check mark + check mark4 Enterprise - check mark + check mark4 Education - check mark + check mark4 @@ -4180,7 +4180,7 @@ The following list shows the supported values: -Added in the next major release of Windows 10. Also available in Windows 10, version 1803 and later. Enables IT administrators to specify which version they would like their device(s) to move to and/or stay on until they reach end of service or reconfigure the policy. For details about different Windows 10 versions, see [Windows 10 release information](https://docs.microsoft.com/windows/release-information/). +Available in Windows 10, version 1803 and later. Enables IT administrators to specify which version they would like their device(s) to move to and/or stay on until they reach end of service or reconfigure the policy. For details about different Windows 10 versions, see [Windows 10 release information](https://docs.microsoft.com/windows/release-information/). ADMX Info: @@ -4445,12 +4445,13 @@ ADMX Info: Footnotes: -- 1 - Added in Windows 10, version 1607. -- 2 - Added in Windows 10, version 1703. -- 3 - Added in Windows 10, version 1709. -- 4 - Added in Windows 10, version 1803. -- 5 - Added in Windows 10, version 1809. -- 6 - Added in Windows 10, version 1903. -- 7 - Added in the next major release of Windows 10. +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. + From 3c20e5cf51fd43428cd7b8fa6f1b624753791493 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 13 May 2020 12:14:47 -0700 Subject: [PATCH 154/177] Added the new policy in the lists per PR#6651 --- .../mdm/new-in-windows-mdm-enrollment-management.md | 1 + .../mdm/policy-configuration-service-provider.md | 3 +++ 2 files changed, 4 insertions(+) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index d9beadf585..b642ea835c 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -2563,6 +2563,7 @@ How do I turn if off? | The service can be stopped from the "Services" console o
  8. LocalPoliciesSecurityOptions/NetworkAccess_RestrictClientsAllowedToMakeRemoteCallsToSAM
  9. LocalPoliciesSecurityOptions/NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange
  10. LocalPoliciesSecurityOptions/NetworkSecurity_LANManagerAuthenticationLevel
    11. +
  11. LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClients
  12. LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers
  13. LocalPoliciesSecurityOptions/Shutdown_ClearVirtualMemoryPageFile
  14. LocalPoliciesSecurityOptions/SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystems
    15. diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 4f6316b7c7..752518c6f8 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -2399,6 +2399,9 @@ The following diagram shows the Policy configuration service provider in tree fo
    LocalPoliciesSecurityOptions/NetworkSecurity_LANManagerAuthenticationLevel
    +
    + LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClients +
    LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers
    From cf7e9be3391b67e19e1656ff37067bedf9755667 Mon Sep 17 00:00:00 2001 From: Yannis Lempidakis <51840946+yannisle@users.noreply.github.com> Date: Wed, 13 May 2020 12:29:39 -0700 Subject: [PATCH 155/177] Changing number of AAD accounts supported to 64 --- devices/hololens/hololens-identity.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens-identity.md b/devices/hololens/hololens-identity.md index e1fab33818..08af92c386 100644 --- a/devices/hololens/hololens-identity.md +++ b/devices/hololens/hololens-identity.md @@ -32,7 +32,7 @@ HoloLens supports several kinds of user identities. You can use one or more user | Identity type | Accounts per device | Authentication options | | --- | --- | --- | -| [Azure Active Directory (AAD)](https://docs.microsoft.com/azure/active-directory/) | 32 (see details) |
    • Azure web credential provider
    • Azure Authenticator App
    • Biometric (Iris) – HoloLens 2 only
    • PIN – Optional for HoloLens (1st gen), required for HoloLens 2
    • Password
    | +| [Azure Active Directory (AAD)](https://docs.microsoft.com/azure/active-directory/) | 64 |
    • Azure web credential provider
    • Azure Authenticator App
    • Biometric (Iris) – HoloLens 2 only
    • PIN – Optional for HoloLens (1st gen), required for HoloLens 2
    • Password
    | | [Microsoft Account (MSA)](https://docs.microsoft.com/windows/security/identity-protection/access-control/microsoft-accounts) | 1 |
    • Biometric (Iris) – HoloLens 2 only
    • PIN – Optional for HoloLens (1st gen), required for HoloLens 2
    • Password
    | | [Local account](https://docs.microsoft.com/windows/security/identity-protection/access-control/local-accounts) | 1 | Password | From 00d2b4ba8c16aa7e7a75ffd16615663492e2386f Mon Sep 17 00:00:00 2001 From: Russ Rimmerman Date: Wed, 13 May 2020 15:11:18 -0500 Subject: [PATCH 156/177] Update waas-servicing-strategy-windows-10-updates.md Fixed minor typo --- .../update/waas-servicing-strategy-windows-10-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/waas-servicing-strategy-windows-10-updates.md b/windows/deployment/update/waas-servicing-strategy-windows-10-updates.md index e82f2eebde..eb2d701314 100644 --- a/windows/deployment/update/waas-servicing-strategy-windows-10-updates.md +++ b/windows/deployment/update/waas-servicing-strategy-windows-10-updates.md @@ -28,7 +28,7 @@ In the past, traditional Windows deployments tended to be large, lengthy, and ex Windows 10 spreads the traditional deployment effort of a Windows upgrade, which typically occurred every few years, over smaller, continuous updates. With this change, you must approach the ongoing deployment and servicing of Windows differently. A strong Windows 10 deployment strategy begins with establishing a simple, repeatable process for testing and deploying each feature update. Here’s an example of what this process might look like: -- **Configure test devices.** Configure test devices in the Windows Insider Program so that Insiders can test feature updates before they’re available to the Semi-Annual Channel. Typically, this would be a small number of test devices that IT staff members use to evaluate pre-releas builds of Windows. Microsoft provides current development builds to Windows Insider members approximately every week so that interested users can see the functionality Microsoft is adding. See the section Windows Insider for details on how to enroll in the Windows Insider Program on a Windows 10 device. +- **Configure test devices.** Configure test devices in the Windows Insider Program so that Insiders can test feature updates before they’re available to the Semi-Annual Channel. Typically, this would be a small number of test devices that IT staff members use to evaluate pre-release builds of Windows. Microsoft provides current development builds to Windows Insider members approximately every week so that interested users can see the functionality Microsoft is adding. See the section Windows Insider for details on how to enroll in the Windows Insider Program on a Windows 10 device. - **Identify excluded devices.** For some organizations, special-purpose devices such as those used to control factory or medical equipment or run ATMs require a stricter, less frequent feature update cycle than the Semi-annual Channel can offer. For those machines, you must install Windows 10 Enterprise LTSB to avoid feature updates for up to 10 years. Identify these devices, and separate them from the phased deployment and servicing cycles to help remove confusion for your administrators and ensure that devices are handled correctly. - **Recruit volunteers.** The purpose of testing a deployment is to receive feedback. One effective way to recruit pilot users is to request volunteers. When doing so, clearly state that you’re looking for feedback rather than people to just “try it out” and that there could be occasional issues involved with accepting feature updates right away. With Windows as a service, the expectation is that there should be few issues, but if an issue does arise, you want testers to let you know as soon as possible. When considering whom to recruit for pilot groups, be sure to include members who provide the broadest set of applications and devices to validate the largest number of apps and devices possible. - **Update Group Policy.** Each feature update includes new group policies to manage new features. If you use Group Policy to manage devices, the Group Policy Admin for the Active Directory domain will need to download a .admx package and copy it to their [Central Store](https://support.microsoft.com/help/929841/how-to-create-the-central-store-for-group-policy-administrative-templa) (or to the [PolicyDefinitions](https://msdn.microsoft.com/library/bb530196.aspx) directory in the SYSVOL of a domain controller if not using a Central Store). Always manage new group polices from the version of Windows 10 they shipped with by using the Remote Server Administration Tools. The ADMX download package is created at the end of each development cycle and then posted for download. To find the ADMX download package for a given Windows build, search for “ADMX download for Windows build xxxx”. For details about Group Policy management, see [How to create and manage the Central Store for Group Policy Administrative Templates in Windows](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra) From b4daee35004c411a642403530be8b06ecbd7704f Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Wed, 13 May 2020 14:44:43 -0700 Subject: [PATCH 157/177] Update windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- ...ve-logon-prompt-user-to-change-password-before-expiration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md b/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md index cbc2288db2..b98d74a6bb 100644 --- a/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md +++ b/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md @@ -37,7 +37,7 @@ This policy setting determines when users are warned that their passwords are ab - Configure user passwords to expire periodically. Users need warning that their password is going to expire, or they might get locked out of the system. - Set **Interactive logon: Prompt user to change password before expiration** to five days. When their password expiration date is five or fewer days away, users will see a dialog box each time that they log on to the domain. -- When you set the policy to zero, there is no password expiration warning when the user logs on. During a long-running logon session, you would get the warning on the day the password expires or when it is already expired. +- When you set the policy to zero, there is no password expiration warning when the user logs on. During a long-running logon session, you would get the warning on the day the password expires or when it already has expired. ### Location From d09038af9608a3d24442c86231968f864397faa8 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 13 May 2020 16:19:51 -0700 Subject: [PATCH 158/177] Removed extraneous angle bracket --- .../update/waas-servicing-strategy-windows-10-updates.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/waas-servicing-strategy-windows-10-updates.md b/windows/deployment/update/waas-servicing-strategy-windows-10-updates.md index eb2d701314..ae0773920a 100644 --- a/windows/deployment/update/waas-servicing-strategy-windows-10-updates.md +++ b/windows/deployment/update/waas-servicing-strategy-windows-10-updates.md @@ -35,10 +35,10 @@ Windows 10 spreads the traditional deployment effort of a Windows upgrade, which - **Choose a servicing tool.** Decide which product you’ll use to manage the Windows updates in your environment. If you’re currently using Windows Server Update Services (WSUS) or Microsoft Endpoint Configuration Manager to manage your Windows updates, you can continue using those products to manage Windows 10 updates. Alternatively, you can use Windows Update for Business. In addition to which product you’ll use, consider how you’ll deliver the updates. With Windows 10, multiple peer-to-peer options are available to make update distribution faster. For a comparison of tools, see [Servicing tools](waas-overview.md#servicing-tools). - **Prioritize applications.** First, create an application portfolio. This list should include everything installed in your organization and any webpages your organization hosts. Next, prioritize this list to identify those that are the most business critical. Because the expectation is that application compatibility with Windows 10 will be high, only the most business critical applications should be tested before the pilot phase; everything else can be tested afterwards. For more information about identifying compatibility issues withe applications, see [Manage Windows upgrades with Upgrade Analytics](../upgrade/manage-windows-upgrades-with-upgrade-readiness.md). ->[!NOTE] ->This strategy is applicable to approaching an environment in which Windows 10 already exists. For information about how to deploy or upgrade to Windows 10 where another version of Windows exists, see [Plan for Windows 10 deployment](../planning/index.md). +> [!NOTE] +> This strategy is applicable to approaching an environment in which Windows 10 already exists. For information about how to deploy or upgrade to Windows 10 where another version of Windows exists, see [Plan for Windows 10 deployment](../planning/index.md). > ->>Windows 10 Enterprise LTSB is a separate Long Term Servicing Channel version. +> Windows 10 Enterprise LTSB is a separate Long Term Servicing Channel version. Each time Microsoft releases a Windows 10 feature update, the IT department should use the following high-level process to help ensure that the broad deployment is successful: From 693cc50f42db700bfe509ffbc243b365e3e879e5 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 13 May 2020 16:26:27 -0700 Subject: [PATCH 159/177] Tidied cross references --- .../ethernet-adapters-and-surface-device-deployment.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/devices/surface/ethernet-adapters-and-surface-device-deployment.md b/devices/surface/ethernet-adapters-and-surface-device-deployment.md index 24cf375474..abc4672793 100644 --- a/devices/surface/ethernet-adapters-and-surface-device-deployment.md +++ b/devices/surface/ethernet-adapters-and-surface-device-deployment.md @@ -28,7 +28,7 @@ Network deployment to Surface devices can pose some unique challenges for system Before you can address the concerns of how you will boot to your deployment environment or how devices will be recognized by your deployment solution, you have to use a wired network adapter. -The primary concern when selecting an Ethernet adapter is how that adapter will boot your Surface device from the network. If you are pre-staging clients with Windows Deployment Services (WDS) or if you are using Microsoft Endpoint Configuration Manager, you may also want to consider whether the removable Ethernet adapters will be dedicated to a specific Surface device or shared among multiple devices. See the [Manage MAC addresses with removable Ethernet adapters](#manage-mac-addresses) section of this article for more information on potential conflicts with shared adapters. +The primary concern when selecting an Ethernet adapter is how that adapter will boot your Surface device from the network. If you are pre-staging clients with Windows Deployment Services (WDS) or if you are using Microsoft Endpoint Configuration Manager, you may also want to consider whether the removable Ethernet adapters will be dedicated to a specific Surface device or shared among multiple devices. For more information on potential conflicts with shared adapters, see [Manage MAC addresses with removable Ethernet adapters](#manage-mac-addresses) later in this article. Booting from the network (PXE boot) is only supported when you use an Ethernet adapter or docking station from Microsoft. To boot from the network, the chipset in the Ethernet adapter or dock must be detected and configured as a boot device in the firmware of the Surface device. Microsoft Ethernet adapters, such as the Surface Ethernet Adapter and the [Surface Dock](https://www.microsoft.com/surface/accessories/surface-dock) use a chipset that is compatible with the Surface firmware. @@ -67,7 +67,6 @@ For Windows 10, version 1511 and later – including the Windows Assessment and ## Manage MAC addresses with removable Ethernet adapters - Another consideration for administrators performing Windows deployment over the network is how you will identify computers when you use the same Ethernet adapter to deploy to more than one computer. A common identifier used by deployment technologies is the Media Access Control (MAC) address that is associated with each Ethernet adapter. However, when you use the same Ethernet adapter to deploy to multiple computers, you cannot use a deployment technology that inspects MAC addresses because there is no way to differentiate the MAC address of the removable adapter when used on the different computers. The simplest solution to avoid MAC address conflicts is to provide a dedicated removable Ethernet adapter for each Surface device. This can make sense in many scenarios where the Ethernet adapter or the additional functionality of the docking station will be used regularly. However, not all scenarios call for the additional connectivity of a docking station or support for wired networks. @@ -85,7 +84,7 @@ To access the firmware of a Surface device, follow these steps: When deploying with WDS, the MAC address is only used to identify a computer when the deployment server is configured to respond only to known, pre-staged clients. When pre-staging a client, an administrator creates a computer account in Active Directory and defines that computer by the MAC address or the System UUID. To avoid the identity conflicts caused by shared Ethernet adapters, you should use [System UUID to define pre-staged clients](https://technet.microsoft.com/library/cc742034). Alternatively, you can configure WDS to respond to unknown clients that do not require definition by either MAC address or System UUID by selecting the **Respond to all client computers (known and unknown)** option on the [**PXE Response** tab](https://technet.microsoft.com/library/cc732360) in **Windows Deployment Server Properties**. -The potential for conflicts with shared Ethernet adapters is much higher with Configuration Manager. Where WDS only uses MAC addresses to define individual systems when configured to do so, Configuration Manager uses the MAC address to define individual systems whenever performing a deployment to new or unknown computers. This can result in improperly configured devices or even the inability to deploy more than one system with a shared Ethernet adapter. There are several potential solutions for this situation that are described in detail in the [How to Use The Same External Ethernet Adapter For Multiple SCCM OSD](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/how-to-use-the-same-external-ethernet-adapter-for-multiple-sccm/ba-p/257374) blog post on the Ask Premier Field Engineering (PFE) Platforms TechNet blog. +The potential for conflicts with shared Ethernet adapters is much higher with Configuration Manager. Where WDS only uses MAC addresses to define individual systems when configured to do so, Configuration Manager uses the MAC address to define individual systems whenever performing a deployment to new or unknown computers. This can result in improperly configured devices or even the inability to deploy more than one system with a shared Ethernet adapter. There are several potential solutions for this situation that are described in detail in [How to Use The Same External Ethernet Adapter For Multiple SCCM OSD](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/how-to-use-the-same-external-ethernet-adapter-for-multiple-sccm/ba-p/257374), a blog post on the Core Infrastructure and Security Blog.   From ec8674b3c53ef89332e2dab4f09efb5e791e7cd7 Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Wed, 13 May 2020 16:36:42 -0700 Subject: [PATCH 160/177] Updated meta descriptions Note: I did not look at flow, spelling, grammar, etc., as such was out of scope for this task. --- windows/client-management/index.md | 2 +- windows/client-management/mdm/applocker-ddf-file.md | 2 +- windows/client-management/mdm/certificatestore-csp.md | 2 +- windows/client-management/mdm/cmpolicy-csp.md | 2 +- .../mdm/enable-admx-backed-policies-in-mdm.md | 2 +- windows/client-management/mdm/mobile-device-enrollment.md | 2 +- windows/client-management/mdm/oma-dm-protocol-support.md | 2 +- windows/client-management/mdm/policy-csp-activexcontrols.md | 2 +- windows/client-management/mdm/policy-csp-bitlocker.md | 2 +- windows/client-management/mdm/policy-csp-power.md | 2 +- windows/client-management/mdm/pxlogical-csp.md | 2 +- windows/client-management/mdm/sharedpc-csp.md | 2 +- .../mdm/windowsdefenderapplicationguard-ddf-file.md | 2 +- .../configure-attack-surface-reduction.md | 2 +- .../microsoft-defender-atp/get-alert-related-files-info.md | 4 ++-- .../microsoft-defender-atp/get-ip-related-alerts.md | 2 +- .../microsoft-defender-atp/get-machineactions-collection.md | 2 +- .../microsoft-defender-atp/get-user-related-alerts.md | 2 +- .../whats-new-in-microsoft-defender-atp.md | 2 +- .../windows-firewall/basic-firewall-policy-design.md | 2 +- .../certificate-based-isolation-policy-design.md | 2 +- .../change-rules-from-request-to-require-mode.md | 2 +- .../checklist-implementing-a-basic-firewall-policy-design.md | 2 +- ...ning-a-windows-firewall-with-advanced-security-strategy.md | 2 +- ...g-information-about-your-current-network-infrastructure.md | 2 +- .../windows-firewall/gpo-domiso-isolateddomain-clients.md | 2 +- .../windows-firewall/gpo-domiso-isolateddomain-servers.md | 2 +- .../restrict-access-to-only-specified-users-or-devices.md | 2 +- 28 files changed, 29 insertions(+), 29 deletions(-) diff --git a/windows/client-management/index.md b/windows/client-management/index.md index 3838366e1a..477c88252a 100644 --- a/windows/client-management/index.md +++ b/windows/client-management/index.md @@ -1,6 +1,6 @@ --- title: Client management (Windows 10) -description: Windows 10 client management +description: Learn about the administrative tools, tasks and best practices for managing Windows 10 and Windows 10 Mobile clients across your enterprise. ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library diff --git a/windows/client-management/mdm/applocker-ddf-file.md b/windows/client-management/mdm/applocker-ddf-file.md index fde531cbc9..ffd93b2784 100644 --- a/windows/client-management/mdm/applocker-ddf-file.md +++ b/windows/client-management/mdm/applocker-ddf-file.md @@ -1,6 +1,6 @@ --- title: AppLocker DDF file -description: AppLocker DDF file +description: See the OMA DM device description framework (DDF) for the AppLocker DDF file configuration service provider. ms.assetid: 79E199E0-5454-413A-A57A-B536BDA22496 ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/certificatestore-csp.md b/windows/client-management/mdm/certificatestore-csp.md index 1ed78230d4..6e878defd1 100644 --- a/windows/client-management/mdm/certificatestore-csp.md +++ b/windows/client-management/mdm/certificatestore-csp.md @@ -1,6 +1,6 @@ --- title: CertificateStore CSP -description: CertificateStore CSP +description: Use the The CertificateStore configuration service provider (CSP) to add secure socket layers (SSL), intermediate, and self-signed certificates. ms.assetid: 0fe28629-3cc3-42a0-91b3-3624c8462fd3 ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/cmpolicy-csp.md b/windows/client-management/mdm/cmpolicy-csp.md index 1dfca8abb1..67872d03da 100644 --- a/windows/client-management/mdm/cmpolicy-csp.md +++ b/windows/client-management/mdm/cmpolicy-csp.md @@ -1,6 +1,6 @@ --- title: CMPolicy CSP -description: CMPolicy CSP +description: Learn how the CMPolicy configuration service provider (CSP) is used to define rules that the Connection Manager uses to identify correct connections. ms.assetid: 62623915-9747-4eb1-8027-449827b85e6b ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/enable-admx-backed-policies-in-mdm.md b/windows/client-management/mdm/enable-admx-backed-policies-in-mdm.md index 3a054f1155..00caaaa35d 100644 --- a/windows/client-management/mdm/enable-admx-backed-policies-in-mdm.md +++ b/windows/client-management/mdm/enable-admx-backed-policies-in-mdm.md @@ -1,6 +1,6 @@ --- title: Enable ADMX-backed policies in MDM -description: Guide to configuring ADMX-backed policies in MDM +description: Use this is a step-by-step guide to configuring ADMX-backed policies in MDM. ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/client-management/mdm/mobile-device-enrollment.md b/windows/client-management/mdm/mobile-device-enrollment.md index 38e128bd28..1d91d3ec3b 100644 --- a/windows/client-management/mdm/mobile-device-enrollment.md +++ b/windows/client-management/mdm/mobile-device-enrollment.md @@ -1,6 +1,6 @@ --- title: Mobile device enrollment -description: Mobile device enrollment is the first phase of enterprise management. +description: Learn how mobile device enrollment verifies that only authenticated and authorized devices can be managed by their enterprise. ms.assetid: 08C8B3DB-3263-414B-A368-F47B94F47A11 ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/oma-dm-protocol-support.md b/windows/client-management/mdm/oma-dm-protocol-support.md index e852fe64e8..40757af748 100644 --- a/windows/client-management/mdm/oma-dm-protocol-support.md +++ b/windows/client-management/mdm/oma-dm-protocol-support.md @@ -1,6 +1,6 @@ --- title: OMA DM protocol support -description: OMA DM protocol support +description: See how the OMA DM client communicates with the server over HTTPS and uses DM Sync (OMA DM v1.2) as the message payload. ms.assetid: e882aaae-447e-4bd4-9275-463824da4fa0 ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/policy-csp-activexcontrols.md b/windows/client-management/mdm/policy-csp-activexcontrols.md index 98588acfa2..d14be473a2 100644 --- a/windows/client-management/mdm/policy-csp-activexcontrols.md +++ b/windows/client-management/mdm/policy-csp-activexcontrols.md @@ -1,6 +1,6 @@ --- title: Policy CSP - ActiveXControls -description: Policy CSP - ActiveXControls +description: Learn the ins and outs of various Policy CSP - ActiveXControls settings, including SyncML, for Windows 10. ms.author: dansimp ms.localizationpriority: medium ms.topic: article diff --git a/windows/client-management/mdm/policy-csp-bitlocker.md b/windows/client-management/mdm/policy-csp-bitlocker.md index 3ab3d8246b..7e84c5ac84 100644 --- a/windows/client-management/mdm/policy-csp-bitlocker.md +++ b/windows/client-management/mdm/policy-csp-bitlocker.md @@ -1,6 +1,6 @@ --- title: Policy CSP - Bitlocker -description: Policy CSP - Bitlocker +description: Use the Policy configuration service provider (CSP) - Bitlocker to manage encryption of PCs and devices. ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/client-management/mdm/policy-csp-power.md b/windows/client-management/mdm/policy-csp-power.md index e5adaec521..f0f51bdb9f 100644 --- a/windows/client-management/mdm/policy-csp-power.md +++ b/windows/client-management/mdm/policy-csp-power.md @@ -1,6 +1,6 @@ --- title: Policy CSP - Power -description: Policy CSP - Power +description: Learn the ins and outs of various Policy CSP - Power settings, including SyncML, for Windows 10. ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/client-management/mdm/pxlogical-csp.md b/windows/client-management/mdm/pxlogical-csp.md index 5e0bc0b2d9..48baff3fe8 100644 --- a/windows/client-management/mdm/pxlogical-csp.md +++ b/windows/client-management/mdm/pxlogical-csp.md @@ -1,6 +1,6 @@ --- title: PXLOGICAL configuration service provider -description: PXLOGICAL configuration service provider +description: The PXLOGICAL configuration service provider is used to add, remove, or modify WAP logical and physical proxies by using WAP or the standard Windows techniques. ms.assetid: b5fc84d4-aa32-4edd-95f1-a6a9c0feb459 ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/sharedpc-csp.md b/windows/client-management/mdm/sharedpc-csp.md index eaae458518..cf00680823 100644 --- a/windows/client-management/mdm/sharedpc-csp.md +++ b/windows/client-management/mdm/sharedpc-csp.md @@ -1,6 +1,6 @@ --- title: SharedPC CSP -description: SharedPC CSP +description: Learn how the SharedPC configuration service provider is used to configure settings for Shared PC usage. ms.assetid: 31273166-1A1E-4F96-B176-CB42ECB80957 ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md b/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md index 6b319f1404..e519d6dcd8 100644 --- a/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md +++ b/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md @@ -1,6 +1,6 @@ --- title: WindowsDefenderApplicationGuard DDF file -description: WindowsDefenderApplicationGuard DDF file +description: See the OMA DM device description framework (DDF) for the WindowsDefenderApplicationGuard DDF file configuration service provider. ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/configure-attack-surface-reduction.md index 2cdb364929..e959cf1bbf 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-attack-surface-reduction.md @@ -1,6 +1,6 @@ --- title: Configure attack surface reduction -description: Configure attack surface reduction +description: Use Microsoft Intune, Microsoft Endpoint Configuration Manager, Powershell cmdlets, and Group Policy to configure attack surface reduction. keywords: asr, attack surface reduction, windows defender, microsoft defender, antivirus, av search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md index 89838eb90d..eb293e3f1c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md @@ -1,6 +1,6 @@ --- title: Get alert related files information -description: Retrieves all files related to a specific alert. +description: Retrieve all files related to a specific alert using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). keywords: apis, graph api, supported apis, get alert information, alert information, related files search.product: eADQiWindows 10XVcnh ms.prod: w10 @@ -97,7 +97,7 @@ Content-type: application/json "fileType": null, "isPeFile": true, "filePublisher": "Microsoft Corporation", - "fileProductName": "Microsoft Windows Operating System", + "fileProductName": "Microsoft� Windows� Operating System", "signer": "Microsoft Corporation", "issuer": "Microsoft Code Signing PCA", "signerHash": "9dc17888b5cfad98b3cb35c1994e96227f061675", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md index c0088b91f6..3313e63989 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md @@ -1,6 +1,6 @@ --- title: Get IP related alerts API -description: Retrieves a collection of alerts related to a given IP address. +description: Retrieve a collection of alerts related to a given IP address using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). keywords: apis, graph api, supported apis, get, ip, related, alerts search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md index c9883c2e4a..08f5fff7d0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md @@ -1,6 +1,6 @@ --- title: List machineActions API -description: Use this API to create calls related to get machineactions collection +description: Use the Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) API to create calls related to get machineactions collection. keywords: apis, graph api, supported apis, machineaction collection search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md index 0eaec5311d..b2e2bce19f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md @@ -1,6 +1,6 @@ --- title: Get user related alerts API -description: Retrieves a collection of alerts related to a given user ID. +description: Retrieve a collection of alerts related to a given user ID using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). keywords: apis, graph api, supported apis, get, user, related, alerts search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md b/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md index 2d474782f2..394a8eb887 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md @@ -1,6 +1,6 @@ --- title: What's new in Microsoft Defender ATP -description: Lists the new features and functionality in Microsoft Defender ATP +description: See what features are generally available (GA) in the latest release of Microsoft Defender ATP, as well as security features in Windows 10 and Windows Server. keywords: what's new in microsoft defender atp, ga, generally available, capabilities, available, new search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/windows-firewall/basic-firewall-policy-design.md b/windows/security/threat-protection/windows-firewall/basic-firewall-policy-design.md index 2ddbd8ddd4..f8bce090ea 100644 --- a/windows/security/threat-protection/windows-firewall/basic-firewall-policy-design.md +++ b/windows/security/threat-protection/windows-firewall/basic-firewall-policy-design.md @@ -1,6 +1,6 @@ --- title: Basic Firewall Policy Design (Windows 10) -description: Basic Firewall Policy Design +description: Protect the devices in your organization from unwanted network traffic that gets through the perimeter defenses by using basic firewall policy design. ms.assetid: 6f7af99e-6850-4522-b7f5-db98e6941418 ms.reviewer: ms.author: dansimp diff --git a/windows/security/threat-protection/windows-firewall/certificate-based-isolation-policy-design.md b/windows/security/threat-protection/windows-firewall/certificate-based-isolation-policy-design.md index 1be717ce49..71775ab476 100644 --- a/windows/security/threat-protection/windows-firewall/certificate-based-isolation-policy-design.md +++ b/windows/security/threat-protection/windows-firewall/certificate-based-isolation-policy-design.md @@ -1,6 +1,6 @@ --- title: Certificate-based Isolation Policy Design (Windows 10) -description: Certificate-based Isolation Policy Design +description: Explore the methodology behind Certificate-based Isolation Policy Design and how it defers from Domain Isolation and Server Isolation Policy Design. ms.assetid: 63e01a60-9daa-4701-9472-096c85e0f862 ms.reviewer: ms.author: dansimp diff --git a/windows/security/threat-protection/windows-firewall/change-rules-from-request-to-require-mode.md b/windows/security/threat-protection/windows-firewall/change-rules-from-request-to-require-mode.md index 11af4131b4..d953de0a48 100644 --- a/windows/security/threat-protection/windows-firewall/change-rules-from-request-to-require-mode.md +++ b/windows/security/threat-protection/windows-firewall/change-rules-from-request-to-require-mode.md @@ -1,6 +1,6 @@ --- title: Change Rules from Request to Require Mode (Windows 10) -description: Change Rules from Request to Require Mode +description: Learn how to convert a rule from request to require mode and apply the modified GPOs to the client devices. ms.assetid: ad969eda-c681-48cb-a2c4-0b6cae5f4cff ms.reviewer: ms.author: dansimp diff --git a/windows/security/threat-protection/windows-firewall/checklist-implementing-a-basic-firewall-policy-design.md b/windows/security/threat-protection/windows-firewall/checklist-implementing-a-basic-firewall-policy-design.md index 6d74ea9356..2fec691406 100644 --- a/windows/security/threat-protection/windows-firewall/checklist-implementing-a-basic-firewall-policy-design.md +++ b/windows/security/threat-protection/windows-firewall/checklist-implementing-a-basic-firewall-policy-design.md @@ -1,6 +1,6 @@ --- title: Checklist Implementing a Basic Firewall Policy Design (Windows 10) -description: Checklist Implementing a Basic Firewall Policy Design +description: Follow this parent checklist for implementing a basic firewall policy design to ensure successful implementation. ms.assetid: 6caf0c1e-ac72-4f9d-a986-978b77fbbaa3 ms.reviewer: ms.author: dansimp diff --git a/windows/security/threat-protection/windows-firewall/designing-a-windows-firewall-with-advanced-security-strategy.md b/windows/security/threat-protection/windows-firewall/designing-a-windows-firewall-with-advanced-security-strategy.md index d67461d012..95428bb9b0 100644 --- a/windows/security/threat-protection/windows-firewall/designing-a-windows-firewall-with-advanced-security-strategy.md +++ b/windows/security/threat-protection/windows-firewall/designing-a-windows-firewall-with-advanced-security-strategy.md @@ -1,6 +1,6 @@ --- title: Designing a Windows Defender Firewall Strategy (Windows 10) -description: Designing a Windows Defender Firewall with Advanced Security Strategy +description: Answer the question in this article to design an effective Windows Defender Firewall with Advanced Security Strategy. ms.assetid: 6d98b184-33d6-43a5-9418-4f24905cfd71 ms.reviewer: ms.author: dansimp diff --git a/windows/security/threat-protection/windows-firewall/gathering-information-about-your-current-network-infrastructure.md b/windows/security/threat-protection/windows-firewall/gathering-information-about-your-current-network-infrastructure.md index 0c27975e1b..dc11219314 100644 --- a/windows/security/threat-protection/windows-firewall/gathering-information-about-your-current-network-infrastructure.md +++ b/windows/security/threat-protection/windows-firewall/gathering-information-about-your-current-network-infrastructure.md @@ -1,6 +1,6 @@ --- title: Gathering Info about Your Network Infrastructure (Windows 10) -description: Gathering Information about Your Current Network Infrastructure +description: Learn how to gather info about your network infrastructure so that you can effectively plan for Windows Defender Firewall with Advanced Security deployment. ms.assetid: f98d2b17-e71d-4ffc-b076-118b4d4782f9 ms.reviewer: ms.author: dansimp diff --git a/windows/security/threat-protection/windows-firewall/gpo-domiso-isolateddomain-clients.md b/windows/security/threat-protection/windows-firewall/gpo-domiso-isolateddomain-clients.md index eda2c2ccc5..bc1c471475 100644 --- a/windows/security/threat-protection/windows-firewall/gpo-domiso-isolateddomain-clients.md +++ b/windows/security/threat-protection/windows-firewall/gpo-domiso-isolateddomain-clients.md @@ -1,6 +1,6 @@ --- title: GPO\_DOMISO\_IsolatedDomain\_Clients (Windows 10) -description: GPO\_DOMISO\_IsolatedDomain\_Clients +description: Author this GPO by using the Windows Defender Firewall with Advanced Security interface in the Group Policy editing tools. ms.assetid: 73cd9e25-f2f1-4ef6-b0d1-d36209518cd9 ms.reviewer: ms.author: dansimp diff --git a/windows/security/threat-protection/windows-firewall/gpo-domiso-isolateddomain-servers.md b/windows/security/threat-protection/windows-firewall/gpo-domiso-isolateddomain-servers.md index bfe618f15f..de34b9c3ad 100644 --- a/windows/security/threat-protection/windows-firewall/gpo-domiso-isolateddomain-servers.md +++ b/windows/security/threat-protection/windows-firewall/gpo-domiso-isolateddomain-servers.md @@ -1,6 +1,6 @@ --- title: GPO\_DOMISO\_IsolatedDomain\_Servers (Windows 10) -description: GPO\_DOMISO\_IsolatedDomain\_Servers +description: Author this GPO by using the Windows Defender Firewall with Advanced Security interface in the Group Policy editing tools. ms.assetid: 33aed8f3-fdc3-4f96-985c-e9d2720015d3 ms.reviewer: ms.author: dansimp diff --git a/windows/security/threat-protection/windows-firewall/restrict-access-to-only-specified-users-or-devices.md b/windows/security/threat-protection/windows-firewall/restrict-access-to-only-specified-users-or-devices.md index b34c8d48ea..117070ef88 100644 --- a/windows/security/threat-protection/windows-firewall/restrict-access-to-only-specified-users-or-devices.md +++ b/windows/security/threat-protection/windows-firewall/restrict-access-to-only-specified-users-or-devices.md @@ -1,6 +1,6 @@ --- title: Restrict Access to Only Specified Users or Devices (Windows 10) -description: Restrict Access to Only Specified Users or Devices +description: Restrict access to devices and users that are members of domain groups authorized to access that device using Windows Defender Firewall with Advanced Security. ms.assetid: a6106a07-f9e5-430f-8dbd-06d3bf7406df ms.reviewer: ms.author: dansimp From f5596eef5c59da482ea9af49f4f542eae9228b4a Mon Sep 17 00:00:00 2001 From: Obi Eze Ajoku <62227226+linque1@users.noreply.github.com> Date: Thu, 14 May 2020 02:00:50 -0700 Subject: [PATCH 161/177] Removed 1909 note as folder is now added Removed 1909 note as folder is now added --- ...-operating-system-components-to-microsoft-services.md | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index 2048fbf29b..4bbec23cef 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -9,12 +9,12 @@ ms.mktglfcycl: manage ms.sitesec: library ms.localizationpriority: high audience: ITPro -author: medgarmedgar -ms.author: robsize +author: linque1 +ms.author: obezeajo manager: robsize ms.collection: M365-security-compliance ms.topic: article -ms.date: 3/25/2020 +ms.date: 5/14/2020 --- # Manage connections from Windows 10 operating system components to Microsoft services @@ -36,9 +36,6 @@ Microsoft provides a [Windows Restricted Traffic Limited Functionality Baseline] > - It is recommended that you restart a device after making configuration changes to it. > - The **Get Help** and **Give us Feedback** links no longer work after the Windows Restricted Traffic Limited Functionality Baseline is applied. ->[!Note] ->Regarding the Windows Restricted Traffic Limited Functionality Baseline, the 1903 settings (folder) are applicable to 1909 Windows >Enterprise devices. There were no additional settings required for the 1909 release. - > [!Warning] > If a user executes the **Reset this PC** command (Settings -> Update & Security -> Recovery) with the **Keep my files option** (or the **Remove Everything** option) the Windows Restricted Traffic Limited Functionality Baseline settings will need to be re-applied in order to re-restrict the device. Egress traffic may occur prior to the re-application of the Restricted Traffic Limited Functionality Baseline settings. From 80f3f3ae43be49cf66aeaa086129230ce2abaf6c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 14 May 2020 12:03:28 -0700 Subject: [PATCH 162/177] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index adcfad4d3e..942f37ced7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -29,7 +29,7 @@ ms.collection: When [endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) in block mode is enabled, Microsoft Defender ATP leverages behavioral blocking and containment capabilities by blocking malicious artifacts or behaviors that are observed through post-breach protection. EDR in block mode works behind the scenes to remediate malicious artifacts that are detected post-breach. > [!NOTE] -> EDR in block mode is currently in **[limited private preview](#can-i-participate-in-the-preview-of-edr-in-block-mode)**. To get the best protection, make sure to **[deploy Microsoft Defender ATP baselines](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-machines-security-baseline)**. +> EDR in block mode is currently in preview. To get the best protection, make sure to **[deploy Microsoft Defender ATP baselines](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-machines-security-baseline)**. ## What happens when something is detected? @@ -83,10 +83,6 @@ Because Windows Defender Antivirus detects and remediates malicious items, it's Cloud protection is needed to turn on the feature on the device. Cloud protection allows [Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection) to deliver the latest and greatest protection based on our breadth and depth of security intelligence, along with behavioral and machine learning models. -### Can I participate in the preview of EDR in block mode? - -EDR in block mode is currently in limited private preview. If you would like to participate in this private preview program, send email to `shwjha@microsoft.com`. - ## Related articles [Behavioral blocking and containment](behavioral-blocking-containment.md) From 029274fd76ead39bc4cca317821fd37d6ba03959 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 14 May 2020 12:04:27 -0700 Subject: [PATCH 163/177] Update utilize-microsoft-cloud-protection-windows-defender-antivirus.md --- ...ize-microsoft-cloud-protection-windows-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md index 68f8c4587a..71f811db7b 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md @@ -11,7 +11,7 @@ ms.pagetype: security ms.localizationpriority: medium author: denisebmsft ms.author: deniseb -ms.reviewer: +ms.reviewer: shwjha manager: dansimp ms.custom: nextgen --- From 846151c8f566341dfe945b077ebe5ee81bccfab6 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 14 May 2020 12:37:41 -0700 Subject: [PATCH 164/177] Update utilize-microsoft-cloud-protection-windows-defender-antivirus.md --- ...d-protection-windows-defender-antivirus.md | 19 +++++++++++-------- 1 file changed, 11 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md index 71f811db7b..54ff42f744 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md @@ -54,20 +54,23 @@ Read the following blog posts for detailed protection stories involving cloud-pr Cloud-delivered protection is enabled by default. However, you may need to re-enable it if it has been disabled as part of previous organizational policies. -Organizations running Windows 10 E5, version 1803 can also take advantage of emergency dynamic intelligence updates, which provide near real-time protection from emerging threats. When you turn cloud-delivered protection on, we can deliver a fix for a malware issue via the cloud within minutes instead of waiting for the next update. +Organizations running Windows 10 E5 can also take advantage of emergency dynamic intelligence updates, which provide near real-time protection from emerging threats. When you turn cloud-delivered protection on, fixes for malware issues can be delivered via the cloud within minutes, instead of waiting for the next update. >[!TIP] >You can also visit the Windows Defender Testground website at [demo.wd.microsoft.com](https://demo.wd.microsoft.com?ocid=cx-wddocs-testground) to confirm the feature is working and see how it works. The following table describes the differences in cloud-delivered protection between recent versions of Windows and Configuration Manager. -Feature | Windows 8.1 (Group Policy) | Windows 10, version 1607 (Group Policy) | Windows 10, version 1703 (Group Policy) | System Center 2012 Configuration Manager | Microsoft Endpoint Configuration Manager (Current Branch) | Microsoft Intune ----|---|---|---|---|---|--- -Cloud-protection service label | Microsoft Advanced Protection Service | Microsoft Advanced Protection Service | Cloud-based Protection | NA | Cloud protection service | Microsoft Advanced Protection Service -Reporting level (MAPS membership level) | Basic, Advanced | Advanced | Advanced | Dependent on Windows version | Dependent on Windows version | Dependent on Windows version -Cloud block timeout period | No | No | Configurable | Not configurable | Configurable | Configurable - -You can also [configure Windows Defender AV to automatically receive new protection updates based on reports from our cloud service](manage-event-based-updates-windows-defender-antivirus.md#cloud-report-updates). +|OS or Service |Cloud-protection service label |Reporting level (MAPS membership level) |Cloud block timeout period | +|---------|---------|---------|---------| +|Windows 8.1 (Group Policy) |Microsoft Advanced Protection Service |Basic, Advanced |No | +|Windows 10, version 1607 (Group Policy) |Microsoft Advanced Protection Service |Advanced |No | +|Windows 10, version 1703 or greater (Group Policy) |Cloud-based Protection |Advanced |Configurable | +|System Center 2012 Configuration Manager | |N/A |Dependent on Windows version |Not configurable +|Microsoft Endpoint Configuration Manager (Current Branch) |Cloud protection service |Dependent on Windows version |Configurable | +|Microsoft Intune |Microsoft Advanced Protection Service |Dependent on Windows version |Configurable | + +You can also [configure Windows Defender Antivirus to automatically receive new protection updates based on reports from our cloud service](manage-event-based-updates-windows-defender-antivirus.md#cloud-report-updates). ## In this section From bc8abc567adfd85648073d02b43343b4dda26df9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 14 May 2020 12:40:44 -0700 Subject: [PATCH 165/177] Update utilize-microsoft-cloud-protection-windows-defender-antivirus.md --- ...d-protection-windows-defender-antivirus.md | 22 ++++++++++--------- 1 file changed, 12 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md index 54ff42f744..3f5dfd4f74 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md @@ -61,24 +61,26 @@ Organizations running Windows 10 E5 can also take advantage of emergency dynamic The following table describes the differences in cloud-delivered protection between recent versions of Windows and Configuration Manager. -|OS or Service |Cloud-protection service label |Reporting level (MAPS membership level) |Cloud block timeout period | +|OS version or service application |Cloud-protection service label |Reporting level (MAPS membership level) |Cloud block timeout period | |---------|---------|---------|---------| |Windows 8.1 (Group Policy) |Microsoft Advanced Protection Service |Basic, Advanced |No | |Windows 10, version 1607 (Group Policy) |Microsoft Advanced Protection Service |Advanced |No | |Windows 10, version 1703 or greater (Group Policy) |Cloud-based Protection |Advanced |Configurable | -|System Center 2012 Configuration Manager | |N/A |Dependent on Windows version |Not configurable +|System Center 2012 Configuration Manager | N/A |Dependent on Windows version |Not configurable | |Microsoft Endpoint Configuration Manager (Current Branch) |Cloud protection service |Dependent on Windows version |Configurable | |Microsoft Intune |Microsoft Advanced Protection Service |Dependent on Windows version |Configurable | You can also [configure Windows Defender Antivirus to automatically receive new protection updates based on reports from our cloud service](manage-event-based-updates-windows-defender-antivirus.md#cloud-report-updates). -## In this section +## Tasks - Topic | Description ----|--- -[Enable cloud-delivered protection](enable-cloud-protection-windows-defender-antivirus.md) | You can enable cloud-delivered protection with Microsoft Endpoint Configuration Manager, Group Policy, Microsoft Intune, and PowerShell cmdlets. -[Specify the cloud-delivered protection level](specify-cloud-protection-level-windows-defender-antivirus.md) | You can specify the level of protection offered by the cloud with Group Policy and Microsoft Endpoint Configuration Manager. The protection level will affect the amount of information shared with the cloud and how aggressively new files are blocked. -[Configure and validate network connections for Windows Defender Antivirus](configure-network-connections-windows-defender-antivirus.md) | There are certain Microsoft URLs that your network and endpoints must be able to connect to for cloud-delivered protection to work effectively. This topic lists the URLs that should be allowed via firewall or network filtering rules, and instructions for confirming your network is properly enrolled in cloud-delivered protection. -[Configure the block at first sight feature](configure-block-at-first-sight-windows-defender-antivirus.md) | The Block at First Sight feature can block new malware within seconds, without having to wait hours for traditional Security intelligence. You can enable and configure it with Microsoft Endpoint Configuration Manager and Group Policy. -[Configure the cloud block timeout period](configure-cloud-block-timeout-period-windows-defender-antivirus.md) | Windows Defender Antivirus can block suspicious files from running while it queries our cloud-delivered protection service. You can configure the amount of time the file will be prevented from running with Microsoft Endpoint Configuration Manager and Group Policy. +- [Enable cloud-delivered protection](enable-cloud-protection-windows-defender-antivirus.md). You can enable cloud-delivered protection with Microsoft Endpoint Configuration Manager, Group Policy, Microsoft Intune, and PowerShell cmdlets. + +- [Specify the cloud-delivered protection level](specify-cloud-protection-level-windows-defender-antivirus.md). You can specify the level of protection offered by the cloud with Group Policy and Microsoft Endpoint Configuration Manager. The protection level will affect the amount of information shared with the cloud and how aggressively new files are blocked. + +- [Configure and validate network connections for Windows Defender Antivirus](configure-network-connections-windows-defender-antivirus.md). There are certain Microsoft URLs that your network and endpoints must be able to connect to for cloud-delivered protection to work effectively. This topic lists the URLs that should be allowed via firewall or network filtering rules, and instructions for confirming your network is properly enrolled in cloud-delivered protection. + +- [Configure the block at first sight feature](configure-block-at-first-sight-windows-defender-antivirus.md). The "block at first sight" feature can block new malware within seconds, without having to wait hours for traditional Security intelligence. You can enable and configure it with Microsoft Endpoint Configuration Manager and Group Policy. + +- [Configure the cloud block timeout period](configure-cloud-block-timeout-period-windows-defender-antivirus.md). Windows Defender Antivirus can block suspicious files from running while it queries our cloud-delivered protection service. You can configure the amount of time the file will be prevented from running with Microsoft Endpoint Configuration Manager and Group Policy. From 253c4c83d46a776459d1f8aed1743c76d614e5f0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 14 May 2020 12:44:47 -0700 Subject: [PATCH 166/177] Update utilize-microsoft-cloud-protection-windows-defender-antivirus.md --- ...ud-protection-windows-defender-antivirus.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md index 3f5dfd4f74..4bf7025062 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md @@ -1,7 +1,7 @@ --- -title: Use next-gen technologies in Windows Defender Antivirus through cloud-delivered protection -description: Next-gen technologies in cloud-delivered protection provide an advanced level of fast, robust antivirus detection. -keywords: windows defender antivirus, next-gen technologies, next-gen av, machine learning, antimalware, security, defender, cloud, cloud-delivered protection +title: Use next-generation technologies in Windows Defender Antivirus through cloud-delivered protection +description: next-generation technologies in cloud-delivered protection provide an advanced level of fast, robust antivirus detection. +keywords: windows defender antivirus, next-generation technologies, next-generation av, machine learning, antimalware, security, defender, cloud, cloud-delivered protection search.product: eADQiWindows 10XVcnh ms.pagetype: security ms.prod: w10 @@ -16,7 +16,7 @@ manager: dansimp ms.custom: nextgen --- -# Use next-gen technologies in Windows Defender Antivirus through cloud-delivered protection +# Use next-generation technologies in Windows Defender Antivirus through cloud-delivered protection **Applies to:** @@ -27,17 +27,17 @@ Microsoft next-generation technologies in Windows Defender Antivirus provide nea Windows Defender Antivirus uses multiple detection and prevention technologies to deliver accurate, real-time, and intelligent protection. [Get to know the advanced technologies at the core of Microsoft Defender ATP next generation protection](https://www.microsoft.com/security/blog/2019/06/24/inside-out-get-to-know-the-advanced-technologies-at-the-core-of-microsoft-defender-atp-next-generation-protection/). ![List of Windows Defender AV engines](images/microsoft-defender-atp-next-generation-protection-engines.png) -To take advantage of the power and speed of these next-gen technologies, Windows Defender Antivirus works seamlessly with Microsoft cloud services. These cloud protection services, also referred to as Microsoft Advanced Protection Service (MAPS), enhances standard real-time protection, providing arguably the best antivirus defense. +To take advantage of the power and speed of these next-generation technologies, Windows Defender Antivirus works seamlessly with Microsoft cloud services. These cloud protection services, also referred to as Microsoft Advanced Protection Service (MAPS), enhances standard real-time protection, providing arguably the best antivirus defense. >[!NOTE] >The Windows Defender Antivirus cloud service is a mechanism for delivering updated protection to your network and endpoints. Although it is called a cloud service, it is not simply protection for files stored in the cloud, rather it uses distributed resources and machine learning to deliver protection to your endpoints at a rate that is far faster than traditional Security intelligence updates. -With cloud-delivered protection, next-gen technologies provide rapid identification of new threats, sometimes even before a single machine is infected. Watch the following video about Microsoft AI and Windows Defender Antivirus in action: +With cloud-delivered protection, next-generation technologies provide rapid identification of new threats, sometimes even before a single machine is infected. Watch the following video about Microsoft AI and Windows Defender Antivirus in action: -To understand how next-gen technologies shorten protection delivery time through the cloud, watch the following video: +To understand how next-generation technologies shorten protection delivery time through the cloud, watch the following video: @@ -54,7 +54,7 @@ Read the following blog posts for detailed protection stories involving cloud-pr Cloud-delivered protection is enabled by default. However, you may need to re-enable it if it has been disabled as part of previous organizational policies. -Organizations running Windows 10 E5 can also take advantage of emergency dynamic intelligence updates, which provide near real-time protection from emerging threats. When you turn cloud-delivered protection on, fixes for malware issues can be delivered via the cloud within minutes, instead of waiting for the next update. +Organizations running Windows 10 E5 can also take advantage of emergency dynamic intelligence updates, which provide near real-time protection from emerging threats. When you turn on cloud-delivered protection, fixes for malware issues can be delivered via the cloud within minutes, instead of waiting for the next update. >[!TIP] >You can also visit the Windows Defender Testground website at [demo.wd.microsoft.com](https://demo.wd.microsoft.com?ocid=cx-wddocs-testground) to confirm the feature is working and see how it works. @@ -79,7 +79,7 @@ You can also [configure Windows Defender Antivirus to automatically receive new - [Specify the cloud-delivered protection level](specify-cloud-protection-level-windows-defender-antivirus.md). You can specify the level of protection offered by the cloud with Group Policy and Microsoft Endpoint Configuration Manager. The protection level will affect the amount of information shared with the cloud and how aggressively new files are blocked. -- [Configure and validate network connections for Windows Defender Antivirus](configure-network-connections-windows-defender-antivirus.md). There are certain Microsoft URLs that your network and endpoints must be able to connect to for cloud-delivered protection to work effectively. This topic lists the URLs that should be allowed via firewall or network filtering rules, and instructions for confirming your network is properly enrolled in cloud-delivered protection. +- [Configure and validate network connections for Windows Defender Antivirus](configure-network-connections-windows-defender-antivirus.md). There are certain Microsoft URLs that your network and endpoints must be able to connect to for cloud-delivered protection to work effectively. This article lists the URLs that should be allowed via firewall or network filtering rules, and instructions for confirming your network is properly enrolled in cloud-delivered protection. - [Configure the block at first sight feature](configure-block-at-first-sight-windows-defender-antivirus.md). The "block at first sight" feature can block new malware within seconds, without having to wait hours for traditional Security intelligence. You can enable and configure it with Microsoft Endpoint Configuration Manager and Group Policy. From bd64fb1121dcba3e13246c1201804ce06403fdcc Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 14 May 2020 12:46:37 -0700 Subject: [PATCH 167/177] Update behavioral-blocking-containment.md --- .../microsoft-defender-atp/behavioral-blocking-containment.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/behavioral-blocking-containment.md b/windows/security/threat-protection/microsoft-defender-atp/behavioral-blocking-containment.md index db8a4231aa..4084d8b928 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/behavioral-blocking-containment.md +++ b/windows/security/threat-protection/microsoft-defender-atp/behavioral-blocking-containment.md @@ -38,7 +38,7 @@ Behavioral blocking and containment capabilities include the following: - **Feedback-loop blocking** (also referred to as rapid protection). Threat detections that are assumed to be false negatives are observed through behavioral intelligence. Threats are stopped and prevented from running on other endpoints. (Feedback-loop blocking is enabled by default.) -- **[Endpoint detection and response (EDR) in block mode](edr-in-block-mode.md)**. Malicious artifacts or behaviors that are observed through post-breach protection are blocked and contained. EDR in block mode works even if Windows Defender Antivirus is not the primary antivirus solution. (EDR in block mode, currently in [limited private preview](edr-in-block-mode.md#can-i-participate-in-the-preview-of-edr-in-block-mode), is not enabled by default; you turn it on in the Microsoft Defender Security Center.) +- **[Endpoint detection and response (EDR) in block mode](edr-in-block-mode.md)**. Malicious artifacts or behaviors that are observed through post-breach protection are blocked and contained. EDR in block mode works even if Windows Defender Antivirus is not the primary antivirus solution. (EDR in block mode, currently in preview, is not enabled by default; you turn it on in the Microsoft Defender Security Center.) As Microsoft continues to improve threat protection features and capabilities, you can expect more to come in the area of behavioral blocking and containment. Visit the [Microsoft 365 roadmap](https://www.microsoft.com/microsoft-365/roadmap) to see what's rolling out now and what's in development. From f26a6e78e77c0af23738a1f9b5237d59c52d2b6c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 14 May 2020 12:50:07 -0700 Subject: [PATCH 168/177] Update install-wd-app-guard.md --- .../install-wd-app-guard.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md index cdf47d7a4a..69dbc2ae77 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md @@ -85,9 +85,7 @@ Application Guard functionality is turned off by default. However, you can quick > [!IMPORTANT] > Make sure your organization's devices meet [requirements](reqs-wd-app-guard.md) and are [enrolled in Intune](https://docs.microsoft.com/mem/intune/enrollment/device-enrollment). -:::image type="complex" source="images/MDAG-EndpointMgr-newprofile.jpg" alt-text="Endpoint protection profile"::: - -:::image-end::: +:::image type="content" source="images/MDAG-EndpointMgr-newprofile.jpg" alt-text="Enroll devices in Intune"::: 1. Go to [https://endpoint.microsoft.com](https://endpoint.microsoft.com) and sign in. From 8be0356447beae8280ab5bdc2daa2abee3cca529 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 14 May 2020 13:25:57 -0700 Subject: [PATCH 169/177] add videos --- windows/security/threat-protection/index.md | 3 +++ .../microsoft-defender-advanced-threat-protection.md | 5 ++++- .../overview-attack-surface-reduction.md | 3 +++ 3 files changed, 10 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index f7ed889815..50eef5e7fc 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -44,6 +44,9 @@ ms.topic: conceptual + +
    [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4obJq]
    + **[Threat & Vulnerability Management](microsoft-defender-atp/next-gen-threat-and-vuln-mgt.md)**
    This built-in capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md index a4991649d4..7ed525627b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md @@ -26,7 +26,7 @@ ms.topic: conceptual Microsoft Defender Advanced Threat Protection is a platform designed to help enterprise networks prevent, detect, investigate, and respond to advanced threats.

    -> [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4obJq] +
    [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4wDob]
    Microsoft Defender ATP uses the following combination of technology built into Windows 10 and Microsoft's robust cloud service: @@ -67,6 +67,9 @@ Microsoft Defender ATP uses the following combination of technology built into W
    +

    + +
    [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4vnC4?rel=0]
    > [!TIP] > - Learn about the latest enhancements in Microsoft Defender ATP: [What's new in Microsoft Defender ATP](https://cloudblogs.microsoft.com/microsoftsecure/2018/11/15/whats-new-in-windows-defender-atp/). diff --git a/windows/security/threat-protection/microsoft-defender-atp/overview-attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/overview-attack-surface-reduction.md index 4fda24160f..283cc65805 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/overview-attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/overview-attack-surface-reduction.md @@ -27,6 +27,9 @@ ms.topic: conceptual Help reduce your attack surfaces, by minimizing the places where your organization is vulnerable to cyberthreats and attacks. Use the following resources to configure protection for the devices and applications in your organization. +

    +
    [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4woug]
    + Article | Description -|- [Attack surface reduction](./attack-surface-reduction.md) | Reduce vulnerabilities (attack surfaces) in your applications with intelligent rules that help stop malware. (Requires Windows Defender Antivirus). From a268da7b48a768b0051e874d3d729f179ab14460 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 14 May 2020 13:51:33 -0700 Subject: [PATCH 170/177] Fixed hanging indentation of second-level list items To get hanging indentation of second-level items (with a, b, c), we need to rely on automatic numbering (which means 1, 1, 1). --- .../install-wd-app-guard.md | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md index 69dbc2ae77..e5630f24a3 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md @@ -89,15 +89,15 @@ Application Guard functionality is turned off by default. However, you can quick 1. Go to [https://endpoint.microsoft.com](https://endpoint.microsoft.com) and sign in. -2. Choose **Devices** > **Configuration profiles** > **+ Create profile**, and do the following:
    +1. Choose **Devices** > **Configuration profiles** > **+ Create profile**, and do the following:
    - a. In the **Platform** list, select **Windows 10 and later**. + 1. In the **Platform** list, select **Windows 10 and later**. - b. In the **Profile** list, select **Endpoint protection**. + 1. In the **Profile** list, select **Endpoint protection**. - c. Choose **Create**. + 1. Choose **Create**. -4. Specify the following settings for the profile: +1. Specify the following settings for the profile: - **Name** and **Description** @@ -107,17 +107,17 @@ Application Guard functionality is turned off by default. However, you can quick - Choose your preferences for **Clipboard behavior**, **External content**, and the remaining settings. -5. Choose **OK**, and then choose **OK** again. +1. Choose **OK**, and then choose **OK** again. -6. Review your settings, and then choose **Create**. +1. Review your settings, and then choose **Create**. -7. Choose **Assignments**, and then do the following: +1. Choose **Assignments**, and then do the following: - a. On the **Include** tab, in the **Assign to** list, choose an option. + 1. On the **Include** tab, in the **Assign to** list, choose an option. - b. If you have any devices or users you want to exclude from this endpoint protection profile, specify those on the **Exclude** tab. + 1. If you have any devices or users you want to exclude from this endpoint protection profile, specify those on the **Exclude** tab. - c. Click **Save**. + 1. Click **Save**. After the profile is created, any devices to which the policy should apply will have Windows Defender Application Guard enabled. Users might have to restart their devices in order for protection to be in place. From eab69304df20c11699d735a42ad6f3cb1a178e7f Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Thu, 14 May 2020 13:55:03 -0700 Subject: [PATCH 171/177] changed Device guard mentions --- .../credential-guard-manage.md | 20 +++++++++---------- windows/security/threat-protection/TOC.md | 3 +-- 2 files changed, 11 insertions(+), 12 deletions(-) diff --git a/windows/security/identity-protection/credential-guard/credential-guard-manage.md b/windows/security/identity-protection/credential-guard/credential-guard-manage.md index c0f08da439..7e98cba59b 100644 --- a/windows/security/identity-protection/credential-guard/credential-guard-manage.md +++ b/windows/security/identity-protection/credential-guard/credential-guard-manage.md @@ -24,7 +24,7 @@ ms.reviewer: ## Enable Windows Defender Credential Guard -Windows Defender Credential Guard can be enabled either by using [Group Policy](#enable-windows-defender-credential-guard-by-using-group-policy), the [registry](#enable-windows-defender-credential-guard-by-using-the-registry), or the Hypervisor-Protected Code Integrity and Windows Defender Credential Guard [hardware readiness tool](https://www.microsoft.com/download/details.aspx?id=53337). Windows Defender Credential Guard can also protect secrets in a Hyper-V virtual machine, just as it would on a physical machine. +Windows Defender Credential Guard can be enabled either by using [Group Policy](#enable-windows-defender-credential-guard-by-using-group-policy), the [registry](#enable-windows-defender-credential-guard-by-using-the-registry), or the Hypervisor-Protected Code Integrity (HVCI) and Windows Defender Credential Guard [hardware readiness tool](https://www.microsoft.com/download/details.aspx?id=53337). Windows Defender Credential Guard can also protect secrets in a Hyper-V virtual machine, just as it would on a physical machine. The same set of procedures used to enable Windows Defender Credential Guard on physical machines applies also to virtual machines. @@ -113,15 +113,15 @@ You can do this by using either the Control Panel or the Deployment Image Servic -### Enable Windows Defender Credential Guard by using the Hypervisor-Protected Code Integrity and Windows Defender Credential Guard hardware readiness tool +### Enable Windows Defender Credential Guard by using the HVCI and Windows Defender Credential Guard hardware readiness tool -You can also enable Windows Defender Credential Guard by using the [Hypervisor-Protected Code Integrity and Windows Defender Credential Guard hardware readiness tool](dg-readiness-tool.md). +You can also enable Windows Defender Credential Guard by using the [HVCI and Windows Defender Credential Guard hardware readiness tool](dg-readiness-tool.md). ``` DG_Readiness_Tool.ps1 -Enable -AutoReboot ``` > [!IMPORTANT] -> When running the Hypervisor-Protected Code Integrity and Windows Defender Credential Guard hardware readiness tool on a non-English operating system, within the script, change `$OSArch = $(gwmi win32_operatingsystem).OSArchitecture` to be `$OSArch = $((gwmi win32_operatingsystem).OSArchitecture).tolower()` instead, in order for the tool to work. +> When running the HVCI and Windows Defender Credential Guard hardware readiness tool on a non-English operating system, within the script, change `$OSArch = $(gwmi win32_operatingsystem).OSArchitecture` to be `$OSArch = $((gwmi win32_operatingsystem).OSArchitecture).tolower()` instead, in order for the tool to work. > This is a known issue. ### Review Windows Defender Credential Guard performance @@ -138,13 +138,13 @@ You can view System Information to check that Windows Defender Credential Guard ![System Information](images/credguard-msinfo32.png) -You can also check that Windows Defender Credential Guard is running by using the [Hypervisor-Protected Code Integrity and Windows Defender Credential Guard hardware readiness tool](dg-readiness-tool.md). +You can also check that Windows Defender Credential Guard is running by using the [HVCI and Windows Defender Credential Guard hardware readiness tool](dg-readiness-tool.md). ``` DG_Readiness_Tool_v3.6.ps1 -Ready ``` > [!IMPORTANT] -> When running the Hypervisor-Protected Code Integrity and Windows Defender Credential Guard hardware readiness tool on a non-English operating system, within the script, change `*$OSArch = $(gwmi win32_operatingsystem).OSArchitecture` to be `$OSArch = $((gwmi win32_operatingsystem).OSArchitecture).tolower()` instead, in order for the tool to work. +> When running the HVCI and Windows Defender Credential Guard hardware readiness tool on a non-English operating system, within the script, change `*$OSArch = $(gwmi win32_operatingsystem).OSArchitecture` to be `$OSArch = $((gwmi win32_operatingsystem).OSArchitecture).tolower()` instead, in order for the tool to work. > This is a known issue. > [!NOTE] @@ -209,20 +209,20 @@ To disable Windows Defender Credential Guard, you can use the following set of p > [!NOTE] > Credential Guard and Device Guard are not currently supported when using Azure IaaS VMs. These options will be made available with future Gen 2 VMs. -For more info on virtualization-based security and Hypervisor-Protected Code Integrity, see [Enable virtualization-based protection of code integrity](/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity +For more info on virtualization-based security and HVCI, see [Enable virtualization-based protection of code integrity](/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity ). -#### Disable Windows Defender Credential Guard by using the Hypervisor-Protected Code Integrity and Windows Defender Credential Guard hardware readiness tool +#### Disable Windows Defender Credential Guard by using the HVCI and Windows Defender Credential Guard hardware readiness tool -You can also disable Windows Defender Credential Guard by using the [Hypervisor-Protected Code Integrity and Windows Defender Credential Guard hardware readiness tool](dg-readiness-tool.md). +You can also disable Windows Defender Credential Guard by using the [HVCI and Windows Defender Credential Guard hardware readiness tool](dg-readiness-tool.md). ``` DG_Readiness_Tool_v3.6.ps1 -Disable -AutoReboot ``` > [!IMPORTANT] -> When running the Hypervisor-Protected Code Integrity and Windows Defender Credential Guard hardware readiness tool on a non-English operating system, within the script, change `*$OSArch = $(gwmi win32_operatingsystem).OSArchitecture` to be `$OSArch = $((gwmi win32_operatingsystem).OSArchitecture).tolower()` instead, in order for the tool to work. +> When running the HVCI and Windows Defender Credential Guard hardware readiness tool on a non-English operating system, within the script, change `*$OSArch = $(gwmi win32_operatingsystem).OSArchitecture` to be `$OSArch = $((gwmi win32_operatingsystem).OSArchitecture).tolower()` instead, in order for the tool to work. > This is a known issue. #### Disable Windows Defender Credential Guard for a virtual machine diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index c85b7dc141..dac2499b3b 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -62,9 +62,8 @@ #### [Device control]() +##### [Code integrity](device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) ##### [Control USB devices](device-control/control-usb-devices-using-intune.md) -###### [Code integrity](device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) - #### [Exploit protection]() From 4571448c1a0932ef9cac4533262f54e946a359d2 Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Thu, 14 May 2020 13:57:50 -0700 Subject: [PATCH 172/177] Updated meta description --- .../advanced-troubleshooting-802-authentication.md | 2 +- windows/client-management/troubleshoot-windows-freeze.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/advanced-troubleshooting-802-authentication.md b/windows/client-management/advanced-troubleshooting-802-authentication.md index 124846eb32..6b594a81fd 100644 --- a/windows/client-management/advanced-troubleshooting-802-authentication.md +++ b/windows/client-management/advanced-troubleshooting-802-authentication.md @@ -2,7 +2,7 @@ title: Advanced Troubleshooting 802.1X Authentication ms.reviewer: manager: dansimp -description: Learn how 802.1X Authentication works +description: Troubleshoot authentication flow by learning how 802.1X Authentication works for wired and wireless clients. keywords: advanced troubleshooting, 802.1X authentication, troubleshooting, authentication, Wi-Fi ms.prod: w10 ms.mktglfcycl: diff --git a/windows/client-management/troubleshoot-windows-freeze.md b/windows/client-management/troubleshoot-windows-freeze.md index c9691539ef..3a584ddb8f 100644 --- a/windows/client-management/troubleshoot-windows-freeze.md +++ b/windows/client-management/troubleshoot-windows-freeze.md @@ -2,7 +2,7 @@ title: Advanced troubleshooting for Windows-based computer freeze issues ms.reviewer: manager: dansimp -description: Learn how to troubleshoot computer freeze issues. +description: Learn how to troubleshoot computer freeze issues on Windows-based computers and servers. ms.prod: w10 ms.mktglfcycl: ms.sitesec: library From 8254710c530437f47a56c8a1d0b3d1032a55ff6a Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Thu, 14 May 2020 14:10:10 -0700 Subject: [PATCH 173/177] Update index.md --- store-for-business/index.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/store-for-business/index.md b/store-for-business/index.md index 71a8c271d1..9ec42cc879 100644 --- a/store-for-business/index.md +++ b/store-for-business/index.md @@ -2,6 +2,7 @@ title: Microsoft Store for Business and Education (Windows 10) description: Welcome to the Microsoft Store for Business and Education. You can use Microsoft Store, to find, acquire, distribute, and manage apps for your organization or school. ms.assetid: 527E611E-4D47-44F0-9422-DCC2D1ACBAB8 +manager: dansimp ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library @@ -10,7 +11,7 @@ author: TrudyHa ms.author: TrudyHa ms.topic: conceptual ms.localizationpriority: high -ms.date: 10/17/2017 +ms.date: 05/14/2020 --- # Microsoft Store for Business and Education From fc8bc9effc758fc93825b1614f46a7ce6fb41dcb Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Thu, 14 May 2020 14:12:57 -0700 Subject: [PATCH 174/177] Update additional-mitigations.md --- .../credential-guard/additional-mitigations.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/credential-guard/additional-mitigations.md b/windows/security/identity-protection/credential-guard/additional-mitigations.md index 03924d7205..5a88c7b645 100644 --- a/windows/security/identity-protection/credential-guard/additional-mitigations.md +++ b/windows/security/identity-protection/credential-guard/additional-mitigations.md @@ -18,7 +18,7 @@ ms.reviewer: # Additional mitigations -Windows Defender Credential Guard can provide mitigation against attacks on derived credentials and prevent the use of stolen credentials elsewhere. However, PCs can still be vulnerable to certain attacks, even if the derived credentials are protected by Windows Defender Credential Guard. These attacks can include abusing privileges and use of derived credentials directly from a compromised device, re-using previously stolen credentials prior to Hypervisor-Protected Code Integrity, and abuse of management tools and weak application configurations. Because of this, additional mitigation also must be deployed to make the domain environment more robust. +Windows Defender Credential Guard can provide mitigation against attacks on derived credentials and prevent the use of stolen credentials elsewhere. However, PCs can still be vulnerable to certain attacks, even if the derived credentials are protected by Windows Defender Credential Guard. These attacks can include abusing privileges and use of derived credentials directly from a compromised device, re-using previously stolen credentials prior to Windows Defender Credential Guard, and abuse of management tools and weak application configurations. Because of this, additional mitigation also must be deployed to make the domain environment more robust. ## Restricting domain users to specific domain-joined devices From 2ef3819c7bcb4eccb02820ba01ee4145da476134 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 14 May 2020 14:17:40 -0700 Subject: [PATCH 175/177] Acrolinx spelling: "authenticatior" --- .../advanced-troubleshooting-802-authentication.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/advanced-troubleshooting-802-authentication.md b/windows/client-management/advanced-troubleshooting-802-authentication.md index 6b594a81fd..4af9868736 100644 --- a/windows/client-management/advanced-troubleshooting-802-authentication.md +++ b/windows/client-management/advanced-troubleshooting-802-authentication.md @@ -73,7 +73,7 @@ The following article explains how to analyze CAPI2 event logs: When troubleshooting complex 802.1X authentication issues, it is important to understand the 802.1X authentication process. The following figure is an example of wireless connection process with 802.1X authentication: -![authenticatior flow chart](images/authenticator_flow_chart.png) +![authenticator flow chart](images/authenticator_flow_chart.png) If you [collect a network packet capture](troubleshoot-tcpip-netmon.md) on both the client and the server (NPS) side, you can see a flow like the one below. Type **EAPOL** in the Display Filter in for a client side capture, and **EAP** for an NPS side capture. See the following examples: From fe5c8369081c4132d3fafb439df998991a760829 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 14 May 2020 14:24:51 -0700 Subject: [PATCH 176/177] remove center --- windows/security/threat-protection/index.md | 2 +- .../microsoft-defender-advanced-threat-protection.md | 4 ++-- .../overview-attack-surface-reduction.md | 3 ++- 3 files changed, 5 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index 50eef5e7fc..71fca8b044 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -45,7 +45,7 @@ ms.topic: conceptual -
    [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4obJq]
    +>[!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4obJq] **[Threat & Vulnerability Management](microsoft-defender-atp/next-gen-threat-and-vuln-mgt.md)**
    This built-in capability uses a game-changing risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations. diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md index 7ed525627b..8f19799fd0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md @@ -26,7 +26,7 @@ ms.topic: conceptual Microsoft Defender Advanced Threat Protection is a platform designed to help enterprise networks prevent, detect, investigate, and respond to advanced threats.

    -
    [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4wDob]
    +>[!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4wDob] Microsoft Defender ATP uses the following combination of technology built into Windows 10 and Microsoft's robust cloud service: @@ -69,7 +69,7 @@ Microsoft Defender ATP uses the following combination of technology built into W

    -
    [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4vnC4?rel=0]
    +>[!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4vnC4?rel=0] > [!TIP] > - Learn about the latest enhancements in Microsoft Defender ATP: [What's new in Microsoft Defender ATP](https://cloudblogs.microsoft.com/microsoftsecure/2018/11/15/whats-new-in-windows-defender-atp/). diff --git a/windows/security/threat-protection/microsoft-defender-atp/overview-attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/overview-attack-surface-reduction.md index 283cc65805..967d14b25f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/overview-attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/overview-attack-surface-reduction.md @@ -28,7 +28,8 @@ ms.topic: conceptual Help reduce your attack surfaces, by minimizing the places where your organization is vulnerable to cyberthreats and attacks. Use the following resources to configure protection for the devices and applications in your organization.

    -
    [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4woug]
    +> [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4woug] + Article | Description -|- From 57898931ff8a4182523d210b4b5ce144f432c63b Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 15 May 2020 08:36:03 -0700 Subject: [PATCH 177/177] typo --- windows/whats-new/whats-new-windows-10-version-1909.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1909.md b/windows/whats-new/whats-new-windows-10-version-1909.md index 5d019f5d03..6d20ec5fa7 100644 --- a/windows/whats-new/whats-new-windows-10-version-1909.md +++ b/windows/whats-new/whats-new-windows-10-version-1909.md @@ -78,7 +78,7 @@ Windows Virtual Desktop is a comprehensive desktop and app virtualization servic #### Microsoft Endpoint Manager -Configuration Manager, Intune, Desktop Analytics, Co-Management, and Device Management Admin Console are now are [Microsoft Endpoint Manager](https://docs.microsoft.com/configmgr/). See the Nov. 4 2019 [announcement](https://www.microsoft.com/microsoft-365/blog/2019/11/04/use-the-power-of-cloud-intelligence-to-simplify-and-accelerate-it-and-the-move-to-a-modern-workplace/). Also see [Modern management and security principles driving our Microsoft Endpoint Manager vision](https://techcommunity.microsoft.com/t5/Enterprise-Mobility-Security/Modern-management-and-security-principles-driving-our-Microsoft/ba-p/946797). +Configuration Manager, Intune, Desktop Analytics, Co-Management, and Device Management Admin Console are now [Microsoft Endpoint Manager](https://docs.microsoft.com/configmgr/). See the Nov. 4 2019 [announcement](https://www.microsoft.com/microsoft-365/blog/2019/11/04/use-the-power-of-cloud-intelligence-to-simplify-and-accelerate-it-and-the-move-to-a-modern-workplace/). Also see [Modern management and security principles driving our Microsoft Endpoint Manager vision](https://techcommunity.microsoft.com/t5/Enterprise-Mobility-Security/Modern-management-and-security-principles-driving-our-Microsoft/ba-p/946797). ### Windows 10 Pro and Enterprise in S mode

SqXo23^e(En|0;PZmw3Nt%_rTnJyt^a+?>!@LZJz1|tg+=y%PZ%u7rMNKgxd*?b zJ2n8ZA0j?h7Qtfrs~~Jy5XkT3T7f0K?g>1#bFDnmLV?|cxt|M&?tnc9kdAhxgdGpL zHZ}fA+`q21_p31-<%OfJ zsyF{^p_e^!jL{A8GQx&F{FeRGS&pf|)8Ym_rYL7++0V5FYG&*4{`>VK)1Xy7VTd^; ziHlNOqQmb<=w87=2B+v@3Q}riug=uQD_ z!unfC9c+Gq-9=ML<=fGP0Y#9j9!GRr*P(}PX`C4(dyt%?i&qhB(xe5zN8(`oIr6D9H^a~nB}a`7p}PCXur*Gg;5aK1M}m2jY33Rh=&;%Ad@Zb?|)zGm9-=Yb_?*@@7)_8 zPGRAQEJnd7ml=Z=#F}6Q9Yn~M5-oB@l76$oAOx(#FM!WyZ{2zt^t|OB*~=T16Dyk0 z);O7}-h9~;shPT3PfAZ#oxE1xPq|pz7fATv%CL8I1R)g9XPlvI2-K-{RX;esfpyF( zhCY~gohB9Qr<;t2Qa!Ai;Za zcisYP_Py>;t2opts#*^#aM z+Z*ne#o1AY{4M0;b})*#+8}F=)#HR>qe-$?ZuUlVH|tt0Muce&MkHh)alAY%OKk@J zzi2j4@*B40kG__93cgC+sY$I$o2|5m*(^|h$0mJ_P)8VmhJ!jqDjJo? z!e=No35g-VoHYWkRN!e)fvMp{kr+pb*#8((oIVwSq@eR(bKWvF%fBFVuKH)l;M%gWqFhh8Ze&?zR_yVDWa&_ybhKsA5`?iQ=Sb0qz_3YV! zFSSnLar-gMX?phjXnJ1k<7$#%bpi*J-)ZOOVpmJFns7mjoqXJG#o(@`X1KxsK~+J< z_*SQWaL%S+=uD^IO0DgsR&}&pB#CPy|1`z@E+ZJeh`+=LVg{6Ic$ zwVT{w1z6DngEn{5@+U2g)EdR_*S8b(yLUE6H+QFBXOBnD#sxk`4pOhbu2vQMja=1& zHalo3$Q3Q-%i(@|^U}}n9(hMB1D6!(%rL0GSv(`B27N0puDspJ%zh9t;Fu+ zT%%7yZs&o??>G0=`o=s)j`{7)bL^n-^#Vg;t3VE6LXo* z_S+nD?jCLz>C?(!TnDMNoH#NK;aNar#lIN_JE4s(31gt6rToeF9+rI|rmZ2fsQ|lma zhnB=?hvqMyPk_(rl9kV$q~^g88|*OJ;nL!6{r-;n``KB``jvyOjAnG7q_Qv+4d%z< za1|$TnCE|&_}zDqSWEEu(cLzh`@!h`+(*8jNJt_guaaJ#Uf-17-)h|L!0wgr_V(`s zz5T9is!L|W`F{3^b4qC&l4zNJ3DQhGNp zw(5VoYjA|);D^R@R~vk{C%&eT-f?}mYx2Rah^w|Cy2tNS=VkMU7ydV=bd8rBcdz`< z1^nBtl{^K+fayFbMgH)#&T?qYO+?R~U}^|i<`!2%yx}BL!q-q%xb=cyznt>K;d}x( zZKWEbqOj*qfHgPy^q_Z{&pZdRMzMwosMgK6&-)_GDnXSGlmtNVPvfA%YrEI7?dNwg zyMNdoE2~xRL1xi>8h5i0W^g#OhC7ph-zLSJ?^dYb z=1#caIXSIw06W)~Q=RqjugGaW6mkWT91Oi+6r| zBwy09ro>+~*Ey5ya@l*$o>e9$CGu{)dfR>l`TmH?{(2B6No1Evqg1QCrp5IUv92T1 zTOtlnI%v9ChnK8nhNfFRf#4l&J3tV|T+}7wCw;hz%LrUj@%&sxv z4I8udvE(hciuQH8qG#BQH;cd0ouIp#N7s24Sz7P*e;uW!-+V9iy(*Ndhow=H*B-P- zAC11cd!l!)GJw>W(H5_%usTk@XFMAlkGZqA6o``sE1tguXJ8Rs*uyisiT2QWcQO|P z-OiBN>C4$59GA6g(cZY0Yq|jf+t*lc{ho5tRmZD3(Bj(TD~E$FW&iIm17DVwl&XjydODl4H6c$#4^`N2 zXQUN&FUSn)PFz0tY!k89FE~?qE}Z}Iu%@?YIhXLN9vi+QySX}RsNE=1=Dz)!w=vy7 zK0oYfK85ddT4=DEiRQ0tU=W#?J7DrRh4Noq-N+sfHzgFvW_|e03_=pp1`h68U~^V` zxt6-Qy-la6YF$Nk>P6Y(l#i+IxdO*Ip6I|ScY+FQu%>o+GWaKCP+y@j^PY%Sm!`lf z{5^tG9WF_?-QCJeFL~{6`~C_aOsLi(sd+OCU#7~|uFSwHyhoKZ*njkxCHexhVLvKq zr=cS8R+GO+iZ?se*B&=*^E{2Eq31Wt4Uh&y%9N~ZHI@@lKmLB6K6vvYd_%Rsc5_&wsw-W@)`;=_`cimlqZCHQJYm7y^>9519Whijh4vyeZwdC7GNHt8ml0T$#c$ z9PFZ{D~@#7K2>^meF>R8YRPt>>f$Gevg0v_Ka8!#H-#jf51O`$Pc0N)b9*dy*nEEX z#3Jp^Ps#6k(&y@?l;^h3BI$faSIK|9Zbx@CbguNEm&0%1Z=zpZGo{GTpN;KF=$1P4 zVs_uJM^Ee)+#MhLp;)0}@k#NuC!#~@|K%@AmEnGl*qM$hzl=8}$OYLH&2)HQ~3Ku$OCtzA4I$+oL=B8kwan60t%He6{D})XwW7 zEtxI`IN^y(CR^^!e*(>HCK_5kaupqKG_|ZAr{6s5xJH{SGs8+WxRbs+xVGRNh-upr z1@k&C8n$FnGuv|v6Mk!Uk0g3fns;=A?@|V|qB-;TXJDHS-U7-B-YKrrFEM^RP_9Zk zyUr8bzfnG<*3=!uKVFNyP%QA}D+q~vih`I$4syHr2AFl63xPIdKO^l&nz3}xOJ=4QX%|Rc-bZ^7lD8->{}GW_|X7<}8C> z%WQed)n}tA{ij1{h$_!zSM>e@3$fov(7{?^fhPH^zD`{3v#!K2h15?4^+mJ4gPO%p zUr1<(niT)9d)0v{S>tAkO$k#_-2OGV!5NW&D85M_)QN?3o%>$+?AjQZ0Q|^BGfpeG z<6qpYvo9VK`$i3H!-ote2YFz^{mJ)NTzidY@SVx&pe!7o^=KTYyG`naFBWOp<_&+m z&WuX#_Xz*!H3p`TjgZ(n?%TP$^j#Vldfe0K2o$dzr?Z zdE8R6{;2uv`(ygD{nEg6@lO}#hx6eNA|bEbUDo6oM(bRk5K887>Gr^FXF>*+{e4n? z)!Zi)`d=Vxuo?8Ymo%p(KOs^9UZuevK}W1VCW@Al9uwAdWuzMEpne^ZooPw_WpK%> zJm3*^>W!K|jd$wxLypq)j3?R&%0acV7n{x%H&;ocoCE=2p?W{bEO`tAOKKgYtSG8dctu7`jy_a!XTsIQtc=vWU=+LAFeY+v63;2?a z%ar>IfWp1TlYWUQcGZRhsWWAI6U_?~f}KQu#vpUeyoJBnd{*mU-GwE#GXE7&zTiTfEl{<@$zXF2eHz z+TusL?|(lnxEqvr(54DoMH9IFu1F5Auv~oNb0Cs#c%Dm3=F8{j0^<-mKXIwuZK!eF zlNIg0o_FC+Z`v?U^SdGqLABYL8yz?mxcQtucg#YT5^i0aEtz1nlp^D2z`lLqAPep` z#zjuEz@+>kNU$QXIv}1A0PDkN-+O*}F_hYTGW>1dQn0owu7C!l-WJay?Zn7jlsDSo z=18=psU(QO|Mo3E8$?cT)M?~%+npZkcd@wp`h9Wx%R`Qd3SSQB8i)CC1xLC6x}Q&; zxWT-An%|O;ee+?@jN9~i?O`{Q@coQ2Ga9DuY_2<8Uq7krvm&&{aEvb{>a7`+YE9&f z_X!c3>2H0rwU(voVqX^I>F!Q%LMFnd8vRGWklU|Q zt4_D@iEzt$sxh{9qemUwP9x~^N0uj=@2<8nF*Sq?Q#T-SLvOjrhzOx=f4C7TU4iF4 z{AI3>U{%9EJ{Rl(uZZG_9IHahcv0(uk6Ti;MxqTx#eY?7I@HwTQZ_SqnFVtL*Mm0- z+7=v%B|AhWG{QAd3pBFlNU~}Qqe_u5X58Vh%dIX0bB}pWb4iPX*VI9`lC>qu6lNs3 zZ}oV%D8z6eQR(N#@w8B2Obl|Je0I9DZ`IX5==Hej0T*5<_Xuy-xvzpM!(%;~93#G@ zSN>G{w|S}?+VhGzC8H>gdYrCmZ!@j`I-QVZnmp}di^aqo=p1L2ctv;iRG~tmcs$&$ zGe$fmrL#;aA>jR~3Nx0mSgVF41zS6>U4++#b)XwxsR8#r+@(k;H~K>yhR;?TL}6LDg7lD;uOU=X+a{j0)jZA}UXlaety$j$ zZ5Ah9el&S{sTj-nLW%9Bx4S&WQahMf`{Ls#n`#;qO|HvBEPz8$9GG8-ts zY+?IqqB`7OD?b-_FL(|)>$1Mm3}GE*^R9}z<|hENrJF>v7a%#NtF3s+K#mF280t%+ z6=E_onF(1nP2Lrkd-T0;KHDrUcNt(mJH^hJ#&)Vw(k;xG;;Vf9;>`BhsJK-UCZ@nU z0<2=7RZm-%h#T@UL0!7IVIvHBa3G3lf(x_H`YWl>MRSHMOeg+JNU%hCr7lA#*p;%2 zdq{#9?l=@m&Uov}I+{)O>4Y5B>n{zrgaStvxAQZxIR|iUrN9X>TDTS!Co$2+E+{bG zV9w11Sj2jx%uRF8KQ+bQty1XbZAj|Fv;~IMo{au7ddVF2lvCI?Q-{x1wryOMg3m0! zCfZ=uRbc*h+?8U&DL~sFOO@+@q6HI@u$wiF9cC1T!Ukq0SU3jVBDzDavo}%{C?+13 zUXdRc^-o%J8XRKyIEuPStA~F)5Qyj{2vShz`azbWNyp9h^i}Km(;1paGzSuxe68HN zfv@Q>T^|;Hv5@M_d_z$HR!XrznIamL^Y8~ItZ#@lRS>)F$f@A5>vSsvU1TZ=;iEkJ z#R(*@6ysc`uXs-xsS+p+L&|0%w7}k;v;7iSAHSs2C5GWR=~8!8g0wD39v%m7uSq^; zQ|)p%Qem@cqb;6OujC6Z3geDUW2+MzSImLu zt`ge%_*F(js->!2Y|q$QOF`Z>X!Fy*=uRt*+IX5jq$JDcjUSH}N9U0QCWF}AtLkJl zrjB0ZnC++aL}eC>5c;&`Wg*fi%B*Ddtu31Pl(#wdCNKF|Yobi($3iIHiv{y`QH;p% z(l_Jb)^RnHXWH;bhJ31L%Ok$&pu&Wk^bvRLAcDx=vGJ2kC zwN%d^0?E$8RB_j34wD{@uuQ=V+cfs1C80{9*B@(@S9{;XFfNHH(o*YbSsP}r6)Y-c zgb!2wUBnzkw75l^;{0H~ICET28^e_JQlx2y2y37xLV|TZcQphz$MUOe`tWPGBKmu7 zfvzFjE567StGEr?WGcK`48Ivf-P5DvD2TCT?v0J16&CNT6qjv5{o4-5->grjM~>21 zI$jGLp;ot!%j-QU*6$cnpkV28F|k$d`aotW6KKQ$3tTq4FtPC3jIy^S$FFy+XEtBt*(qux(9*YXQi<#A$0&D}H9 zrm6<>vXfj*a`;`Tc_JLKFI@#@f0pobVIc$FbkB(vN zY@f}4Y?*DEO}V}6L$fqA&n`M`sYXi-_J{K72J9wbCaciXqgT~JYv!$?Vt&&mQS(Yd zr&n$AtomD8wn7|LQO-9+66l9h{Nn#roM?mX-h%Qpn0+9Fjq&3D{hB`J-}*$nko5Xr zjEi`S@k0di;QziEQ4B_W4AgD^zkBmLL`Gz5W24oH0(hALYygA^Fz@TxL69wm51MiX z0`3qaLkLmS@&dv{)&xQX%!g5sa;=O>z&&@Vo*lfJLZ7xyd4BpYQo#a6Y2S2COz3gi zy5~i+m?!NvK-IDxyNK@mOfU!@I#T1bQLND;~yh939;+V9-}>bFtL<-`i0OFf!E#trTYYHsuAhrZNs z*F)jbo!OUbv^D^y3km_%#zbt%MkFJayiwjy2|*_ytdz1CEmJh^6h?Uoq}zB0oG&sE zrqr&WEl%H^)jAIKfk6fC(qB$c92#)eBc85SA;=MiDZc5g2bO02HsxWoL7+lp%P(6M z2x`(Ez8HZIrbPuaRfbd5Z<=pO3@EO{dp;R?%)kv056BlbOe&5GJf1<-d;2PX$n}rp zIAB~rKWKiBK|@0W=Q=N0q)9Vkszd?BTa^$7#ZgOMvh0!;Hm^cZ4LtY7?8q3ld{+ur zAy};~MU;6CtqCNT`4oY8AuIG**t6K@$&HJFAY=zkvq}LMS$B5Qss~Kz$K7-u$cEfu02w9srL(Ffjql-u&+75>V5&|NAasV0DX- zPX&L6$7M}{-*)01_K#AH!Z`f$=F?(Od%5&2_nEf5ij{0#4h-HAjF200e-oQk3+2!3<~Y*(MJW2Q@eZnH>Egu=o8}-(RhQOhpeP3i>b+ zSax=H(BR;pbEO1Vq&F9TQ_>B9ee5+JE2Vkw)u}+=#IC$Ze}#xI*;=BqEXS@W!jC}> z_kmy(&(?ZDfzpLbWQ|9frr(cTtGZoQC>ea-0wR-O241#KZJMd}fAJzLOL9Cj* zyAsnwX=i1y&I;{^qeV=0$Ek$DdE8z_o!_#)Aqhbd=cL^pYmNq>vm=uCjnup8$C@s} zhrTU0^%vij#@4NcbA0`+?;(KDL|M`a;9dr@-ab|wU1zLO7!JYjZA;VdPV&I5x`yJJ zLkfLZ);G90sSGIbExF@!afJl4A^;Jdl!+#keRpny=l4HQU0`u*z(W;!8?TezOr=lu39#PLSh%$fWTfUHYmdn|8 zjF%K7@d$gb7GhvW!&I$ab_>93P88Wz+Lyv6=VcwcXtK)SF`Ba#G|dSkU<6h?>R*g9R*vgG(La2|+cz>=xCYcJcBCs+1- z(Zt&2S&gpQ!);2Klix`gzg1>bd3(59ys_J6YfIX&A6b)^trdDk6<=nQH<8eFZ{p3> z1FR$1&T}L#pz3D^c1-P-*XMD1Ve8Zm%HxZo*CxoVQr{A{hd(A_<1gR()S$&3Hs1FX zM4XE_ICyycnr|5i5Onj8%G#*i3F^tF07x%^7wm&yx_}v@nf(8KerLq;Rm!2n5euh8cIrlZUG@31#qg0yEo3K3O{Q;r)SGjIE10 znbR!XJ=yWqA|D7OKXxArblC{$#t2W1h_YfFotHHki||vlsNsxF=(lH$Of|F4pBt#x zTKmtM%)`%a8_?;yT%z2)s{~M<%R5gjxYj-pQUS|bWtvZMR5Gxmj5&1MioJirl{rK; z3X67^HXmIYAJR?5(QSWymibeKpebu^uB^#a`t$c4=UQLuoonh4+61#ETbykck>&`t z(p=)5Q+<7QVCiUpjq?G4e|SfbbCdjkS0Qp@A3DS&G$Gi?qqpjvtagp2PPabVdo@ge zIR~gWG_;RFga?URpM(++#qCx2Zv5~eW^(v)t?s(9uTJrJz8RGr6SKyy$X9SR^isI4 zdKKev{!EJ)YB`_AQDrwRIqq?Wm+^h^DRxK^z#~OmHH*AcR0AsP!KEI}UrNpiklFyi zqA9K?o7NDJSVB=26CW$>PG364Wh$65m0VkMNYjYwTJ8T88gUMPuR!2bD{l~G##CZQ zPX2sZFt@PKX3QiUK6W=1y>{_%Xm(blfVi-!Z8h>;w~Jyz7Gr*a_S_Z_@_m2-L2S}T zGVDDsO{+9}fie}~Fd;b57HOU#lNA;Kr6Ew@Jm$BQ_BpP0{~Gbi;^N|w1>mDBgYAEP zOjX$ouop40umIIu!SIB$s4rg%0RxQozgY%j$U!U7*u@pmQe31;9H<1#Ew40yBU z7?7S0J#Rkn8K95z-f#X+)ZNXE+hULcU{*Y~e&zMQ9=}UE+tn@n+drg!^0IYfyRKV@ zS1}vF9bE>65D+c^PXss*0K}{C8Pq&#t_}r)*0Op4wo3$#%iO%Yyc>vjZ^~!fm1|M( zuqJ@oCJanag%4VhS#_#0=g%2dQ!vP~@KX7ncfC^ZOb z|24kFYqCSn=ET@}l5sUI%6HKG&L3Z{PexzbEoq(NQZGTG!VXf*n@AWAwTxYxuN1M1 z`}~d3z}#kKUk<9yNF1};!jYg}B74~I^%MW}z5O5W!?1pp@3PqT*+sjjl@9y1V+E0F z(*e)@Ba1sYN{gF9of~Sf?f+EQ>~0unUk01hu+Z&GzT9$MDdiFYhrV=wa6CA{ro5x< z>sE=BgjNaWuIJ93uQv0Jqud*V022~K8_;#TQlH4YSg(m??`a%?61|=rgNtY0ZoBM> zB00;}&5oPIlhakv{X?8C>%y=+_F7!{Aj=SlG~Ssl_4bUN+Q1KM{EyAO&fF6V(|Aor zSQlf0=8XnbqihbAMm_-|Ao)BFK=jPJUxxZ$$mWV2?-&h+OEV4DhNewxoBXu8yKapA z4m^PqefFN^>Yf&t8z-7wPU@&D*w=5GH=pEilpA+(i~25heXyUyHeEGYFeCvkvVg&u zjcFU2`s*O)txW7nw1}3OoK};$kpJ2I9a@3$*Q#f0gWd@odROXK*USX#K|T{(8)lKB z4(s!I14L}CuB-{H`n`dl!d0po*Z(+Cus5B&2VhXYiPwT@aHj(w0WXm-LauLQ)S}lP z=5FBr9bLo*e@HF-KD#$=|G3$iGgwCJ+h`$mw<-;4^08_u8K|}!e7Vh<=53GNoE{20 z%P0e^{bm4@L3FkYP^)tphgdjGS>+)(s)i>P-dPgki-ECV6$A7thyNv%L}u=~((~9H zp(zOv$ee51!*s&3*~5kabE)gO8V{5_Nv>qo_dU(_)$z)wqR>o(Goy_x8@KfsD!fj$ zEyYQwW{A=f9p+uP#}C&8T9Wtn_KqAzdF^%Ppu~D`Az(b51jyU@%ZFtoDL2||;1mh_ zid$_5ZW{8jzX6*J5&2R19JGDGfM~iabaC!VN@$RHn9@0zKE1At6)cs@Qz2!2I2~Xv z!}AF3AYj7X(3C+*b`Z(v8!jH68B*nbOkZmx6&F!?leo}@ZKWZKQ9`-0&OrV9Bg#o`w4_vc0Po>pT*PyO z7g;pjXKJmF;K7Vc2E@rvzDgRePeK{md!RO3NSsG?PWgu1Qo13f5471Ad!eBO?dY*L zZ>MoS%MByHDm}@&^oo7)^VeGxkFGELN3wHq5$3V6&j+~kyX0*?ykoh8X;-FP^8Xp3 zA9(($Nd1movEpduyBV&`z!BUEKTD7tBiHcN%SzqW7qrh`WX5}W(qJ8-)frJ4OXi^s zSYr4khK#n$u4Ia%R}qgx@<&~$a31xZR|5irH+MY;AeGm8T? zyM@Y8rR==C(C6|8!qEtgWlLVU(GO!o$}C(t=I*`MoimLkueIXo*8+8u&QE>GlEmvF14=}{ZBuR|gIF4H}98S>T zAZH{oD~kxk`TN7Hb~cM6b}}$Zei1tG#=kLJ5uSb~&yxbtA+hF@e@Lv2QMQj8dU;17 z3#1rf(HNd)6x>UKtPK8wr(>g9S4(eFn4UY?farYI6@Iu1?BBJEHLx`S@zy{HO182- zy(FBHJDHCIx!!0h%X|jPn&~{Ul`>@CXtU#U=&mj9c=Y)COA9;r(o*?Sk42r>Bek1! zbB!#eoWfQwD+3snpfH{l@uh`eLDB)<-1r=i5)4R%E=SMdk%R2nN8?vfRNR!6O$pyL zY<`w}{kXrnFaC6WzNS1V{i9D(G0soZViGx^_KSyhb>`CVE!KKuwk?+xG~LDR8!PCK zP%`w7<)sDHN4%y zD@k0AlETzX%=0Y(+f!OFQsz@p(IZhLCKW1M8M4ToPB9M&#Q+U_nLs6%=cYNYzkMX8 z!i0Fr%P-+}eC8~QFyA(OBtrE?(}=}?kRFfi{RrTQmm4GBf~*(?z0ZKdkS9W#52mYlbnu$0T=ytW zl*zD?rmqFF54{gPMe!jU#jnVpmD)&my;;k>pIG~m6~Cwdrs$!I;vO*{)+QT%_vdC| zv|qr5g~@ALI~)6(JOO_7qtCpgLXM7{hF$XE=5D{S$DV!q6Ot?Q=CuM!a$G4)Zs^1E zjjt7|cYs$j3!l)1@PLN*59^iDuWLrU)ikb0_zaW1)qTWzq9vAn6u%xw4fqHdO+6#^ z{G!6`ED_!D)l2|KW2?OJ>EcR*q)u-+SL4f7)Siw(>z@JJ(NnZJa>*y$q;S*8>H)xe z9!R!GgD45Bd>;!ptOEE=kalWlNCkoxzkyy1uueyCM3_UZc7YZILS)tN)(iXO91mHE zhf*l2HAUS9Qe%v@olpcoOtixy{A>oPp#;#?O{-DQ>4y1%RZ7hY!_D`WANAA)e|u98 z(6sXvJO9uu)$7Q55k6UEA;8x9`{>Qg!2&KzBD=|KN)@YKb-@my1J}sHx9%bjCp=RO z2*qm_v-K!D+qp)rdH#UaPmKrd5*qBf{geBzuyVA4+?Q+P?~_OTJ2Sz1`IT~xlyn9% z`1NjkW?e^otU7g3pKlau%zBuckJ8f@UD9tKR;2%cp6zaPMlk24ITJ;TafdeFqLRby zOm?SoPR{lyFg_2pqbgMI>q5uv$RSN`kMw4*p@voVqwHQ+>dbtJbsVf>T6ju66xr>s z&o%CL)9=$jGHAVLRzog4;?gDI_-n(KwIii8%X~;A3+YCwYUwNC>l@ty z>&SVL8y(RPYgRL^@E;&6fffKX04i)Z3%(A0r8alpndm~q1?}$oDzjx3aqH>nO6$1; zJM*(7zmAz%b#I>EUnStEkjo)`N^AaGWbij0j)$(*U{8ez*uvjxR5%WE14vT$oE>>) z{D`K&WO+j>L|ItEa_oS6=!QO3gJbnAv43nh$K|t%H8yjgg*jwh?sAPyAWf%O!EJkb zcE;s@_mGHP_fLu5WtEXt3SJKr8urQP-}rOw=2}|}a`z&W?KHMadh3r4RxwhSbuUAP zHkM7OUw&brzDCYnjEyZfpO(2>Z)prK5hsK>l~plARw_&npA_j-5J{_WDtN2WwE=7( zq{bfW$(pD#8KG-w()0d}nZ}@E9k(*iVP4cArj_~lrXdiu>4+?c5 z6`~*L{V#5_cc$uo_pk{qvgljyfOB+r@F%55|`WGzTvmmmL`F`4lrVFy!{zB*-|P2yCZv>SY$G=HPES| zZ=^yH`L_^$1oyv%gSHtbJ%+GQV^lhgG6QFx{_)};X8ZaoUS3`kl~(wO+^3;oKm~xY z0Pz;ekp_QZhXv8()l~@%Togc4Qy4V`J2Rp)6@I*o&r99e;C{2)`DhpiQ(8H`_QduaTV%EtIB?$eW( zj5^E@I!!OpiZPxSe@&|hCc-e{p|O?m41G6~#rIxiu;Gj95wqKS^PDU`-bd}`QZf>; zkH)rcDK@6Vx06Xiy62ko&~#Le_GqwesXFO8+6VlH!urjG%;&rkpJr^%;!fhqc-lOA z{Zrg}87}PQwT0PDPeg~&N$D9yq_tt0FEwCm+Nn#0FLCsyY5!-;>lsI*=MInodfJQz zb}6Qxq@6?7<{JaJHm2mb-Z4^1k*Jj!?|-Qj76hxrd3BJu{&usA9*Ul_CcOOk;>+<| z;n`erhn}YPo!?Kw;gh2{o-c}PaC!7EM{ZM%7=Hs^v&>}^Yy^FHkmA{!6@Sj@={IMR z{6IVQgKk^TzBrY#Qm_krYTad!7V;o2go(1-|kp=-e1qd zbmp%#M7;)kv}&CnDW&`dp{K$8Il1UvnexFGob--I)FO$~_7}7qf08<`=lr;@-FA#d zLk4ttPG2={D&GZt5^KEyty|4_f{nH(%WPQg~JhxOJMFq((5WzZUhs4K12}Te?Vj5v*25#3#daY z_}AD5H|;L~0?NWsFa7yIl86J6!PSVS*1?YM+|B$wbxGq5x9Ig`xZrZO#X%a6l2L!v zd^eWD(Ok+m9fu3i`!nVH_E4B;=rMckXAXV07t`naIm@pS4-@@Q{f`CwPu+Fhch5b} zCK>YKI0vN;zG$j>H!(2X1B8F|p^Bbob?JIjvxEJ7^7O7%&F-dK4KfKb>eq^1@#kN8 zfaVpxLKLdPAWg6ww_$72_n=;JypO?8A7*~9P%HSZ{Nu#e|9gSN2iUHFi$(7B@t%jj z=z5Uaw*sXZ@6skeo8n)UR+C?3BJX++7RAXdzh-D?zU~}ICwbXOjl`BRRPD>soFx23 zQ|OX}&7NNIM@I@4?T3B7&*p4XaS2!N3w2*h5f*2>OuGClWj^?QlhVY_92u3{V@U2{!`TwRmeF77qu}h#{8T<* ztUuX;P0)&0T1^G?=KcCMmNHr8$<}hYdfz41e2cBxoc2~%mjb&X9wurhCDqCHV8@LC z4Lca0fHwfB6OA@`D^Jzz_l_4&-(qTdT+q(>-@Ai)POuYx_sB2rS1FaYe<9U7n}WC|p05bE;uk*WBEr0Zyc&0NjEA`hs|;89Tg0d&bbX_L6x zT0xM27!0NMlY9O80nm|p!N0~7s6)$9lN5y3VzJQLhVbtAh>9zQL3$UpV1sa{whU@^5yYz8UFXHO;);)$Tc%BdQFb`43!Sp zMX13Y4t-R5Yr+6IIB-OPB3-As`x5T+?^Mae$wHXaTwy;~)LNY00)fK^uiS0vJPux; z@Wtn6rP3{4TTSN@{&?lK82-h;d3Q@uS1G+OY!tSDkQ)NDCeh0kI-qZ_7#d|a(cmCJ za|nd=AEwk8L37{9U{b?+@$fH}smXpjb!dF3(rzIoCGE@VI<}mp2dZ?}oPxC+I8<{e zx+}z{qa}702^_PnD;(w{x#~1_+U{#mCLTs+)^q*Dmwva~20(EHNls9YsM=Of`E@w` z$Qu_U=Q%W32j+# zI`@Mvv`NPn$6WogS+%@CV7Z(s{EW zslTd&QE_>LTm!Fd=fx)%IacO_5k^ag_ie$*bZ(|Td`>CN&@Vsno{Ls8GSgVoz!q=O z#nqc0XiAk?=7cE`P-wSNTxe9QeVOQ$MQHQ7`yGn{+43jaHJiPM)XK|rC0lgtd9zPK z=6xpTeOSD+7;RXD{f}hw-nK3dzp;ww*1JPKnOy++O`jHjLWo(f$|EF!X5xB=A6k2B#|;ev#SHpnSpjC zdSGia@--=!(?fN7x`wkov$2gbDUq<;f}ep)MLq>j`aP)9JNNH5MHH$~-_g=?eTkZ_ z$8)>DUH!|K(b~7~pW%P5kIr8#b`3N+fn*oz<)=rV%Yi8re3N40)2s8nr$qIkRt8F4 zMFQ{iAkyXg%7cIs*7|i>(0`d( z#zqL505k5(S|uP(pq1D7v&QUq8@kONRc> zyu8fOzYES7;J%Zd^R~Hbm7vO5oKQkS0wDnF&ZoBs8Nqix)<=4#68(&n-{Wa$hkyGX z>x;cZ#fK>;8P)B`Bon0N-#^}Vduj6NY1yrM%se#9`HSMVi_lGIGhyIh2_p8)A=#lS z2rr*(altnj)c^b-$+};w#s_KI?NjVm%|Kwi^|Ll6H!{_6dz{ji9}URx0iT&cAQp|3 zHyZhzNw?7>*{DMXm;9PU`lDiM^-#Ww2~Zmi`fH!rSe^9f?RuHz;bT^F2JAwlzpDpP ztA@j?!@qWWcyBf&Q}{6!mb(dRiIzS7#7T0%e7f3jweJ?ow^|2A?Kfl!QAL`8OE+x|CEYKNm`n8;Q!Ec zPSJI>T^oMm22C2f9?W^q>&o<> zipE_WnVtsBP)UFa^47ASLbnqoU~8dV_3njJkAf2*ngYl7bS_7df9&i0eDE0zhJOe( zNy)IyD5KRTeA%oka#tSKcDH}nd5io4U@|1Vm;B$5PJl?j8O0-Zu4xDD~wMvXK1%zUoEi+H4W8(MJeg68V|ph z%dVC(91Bi;2fqmtYImA!mAtXVNjuWTYI|r8L$**d)zq}1(5Aj_n+HMf{_lpugov9A zLELdMB@+PC_K&IG*XJ`~MjEg5cr2KQq%?~pDJi*C)%<~L=-pM)QVLfwC^k~vd3VYi zcXFZ)_>g&cGP1JhAY+40GFZBDxRcqfQ;k^`f7IbvtQ0~Si^~x+mf%G$Pe$J1iN|0K z=ghow;S&JlZ5d$crbq4*mm> zRp>1O$Yg&t&FgMp+i4n00FNOQ7+FakmyC%eAwFT?vUL$`*=$NeazZWda!C-tRe(Hl|tPduKs_%sOl zh=@xd6H|XmN3GmR|H}w3a_BO>1?3fl0XBATDW9rqyCqb2z;d=BUh?UXk0pzVf8uV4EPu z<@&%$Ew3oY5uqY(LqyrHM;&rB$FbBw$DD| zB%=+R-)rQrcX2ce?HT>M3I+rjt1cfwF(>lhJd~L`JqyZaly2|T;C2fXFM+Nm-jBvx zbNt)s^TUTl8-IEV_y#EnfB;EMO#Ba^41glRaT3w7utor)^5#-WX(`n|QZMkP{*$W# z0xcqD=6^_4fCK26aFt}x{mP*5M;V*N3QecU?y>&VL-iY4!Y<0w)4QOemM$XA-{WYP zi`gJ}WX^_?1l74Q8z-D#`&?WyKS$TetWdFHgd4awseVcjw6>?VW zyXq#Y+ZjSK`qA}0K@C!gHW_10{vr5cXPj}!nE9y1X`8M>y?QIt-VE@GeWg?9UH7^t zr=|}6`(zHu_7rtEDy5%YC+f8!v*KzeVm1X|P9u}f;)tiyr89hMUbbg~saVl`bstzH zoAZnwXk!APMJGPZnC(K{khs5$`bUQqiszd9hWg52>a0G@&DR6HIPD2n|^(d z<>X|bsH`pIXGlQY{>bDo;vh|Xa3Gv6AJezZ8jQGF4e1w^(qK{T?)dbg-5rG z1qn8hKdOEGvGdxWc|1>#l_=kP&H>?ORbCFe+?ZNpJ~jXIXSpTFjxTI~C0l|ngFU(0 zHj~w54NdpwNz={#k|CW|9bBk;HFZmNgXMh2>tmx+698akHlNb{e6L=#Rs%TBNG6+I z5G}gkz*zWUru_kc0*nfb5^1PC?6GTud>F{9|1TdJ^tQimrVaI$L%IzU?w=*8`<s5aiVZ+-^+0l|%p(ZUk2L;;k6__(V9-U}-= z(V&-mv&9%ig0)zRTQ$J@!ak8%Qa1_^{fhu89sp+F(ee3vdJkM+V4LmN{f))u_nn@{ ze}VzT*B+o>{twU$&{{-NOaUXGH1O$t+8$v0*44#&Ualia%1fIc#VG-m*hc+NQj#wW zb{ieNVaWXeH!(x5U4s0>ktCPHCPdg?INrqVVyQ1~OBf9k{przqJtKM|O#nW%KWLcV z`Qr=Hc;%ZLJ*h<0pdqHm16?}6M~IKV2G6bzaom-tb6cmevZ9rg^A@+W;{X(8KY(N* z9=FpkfC}A-yjMAQ`~?o~AAmkhwwUwm#lOjc^L6|az+E#MbltJ40p?&}0|5|dl$4=> zK>?8S0YE!|qz_!a+}hs-5lzxhtQ!8%tM!?(gS=nO4kpqf))lMjFcT6ry!g{y8>t9T zN8Ga9Ffk%2vhKrhMnJHLQ=$4lM$=5g0@c|MQ`pZFk^X)uH(-eBt+e!4h3Xa;Hy*Q6 zT7S;sYfYRnmhgy635PhpHPI47hrIGooS;~s&ysk{&P>`jDTpAj`YIj*+!XuGsrUBP zl)h>8)Hd~^rC_QU(nHOHNBrDUa(MlM(i89%n{_p1dVeL{xbP5j7aGrXFpH-)0F}}` zF(vcNJeSYyjRM1i7V?~G$pj{0b>F-d@`_c9An3%jMHG)<83{zzV_P;a&CX6w%ONUT zuEuL6)?+vmpOYmCT(#dxhIu;E6aLUdM2wfsV}Je{RaPXMpB{nzsq*)Lg#xX*_jtMSMqVM45 zNk(uzp}9g;jB&&%;D_f3%`-VfH} zM&pD|m`f+p@q0F{4TyM$?SwTtoaPup4*k5gHk4S6ddgSfoqu~nv*o|*NNOEqO`~R6 zSs4Nr)Bn)Z4qRz~UI8Eg`#>a-Q&Qeu4-=}WsPyOXdp`lg^W$;EA^>L?39z;OR!N;g zz!Auz1w;!SYSw>px@XFv&+JrdN?9)a(D1bz3o2{Tfa8;TNr_0RQ1x0zS+YKDt@Ans z^!*8ZzO0Q2TKC&N<3FPiAhMn5G)G!#u$Fm^!4GS3MO9PR>~_Q76^|~qzZ4K%>xi7E zetPAN)%j1YxTEFgLzPb4GfDJ3ZHm)P2_ZlrL#oiIA->jP(QA9`vuZ^3W=v4NKUuxkVR>cWdZcv37X{a!Z|jt83{g*dx>zpy3HnTh)AjN#hN9Z zPRAc4PA=c!;Nd!cWRhFZbVo7trN=Bl-gZ zdbZPD@QfjR3wd`59V2F*n7HieUTKAk;it*)ITOh3+zT2KsrN^<>57JmR;x{-`+p9J zN#8_*1byTU-N@xbgM%Z@SZz;ie7c0>XT_YP!S&i*cb;!mMU{k7)BsWP)S1@pTTmET z-^IH37evHjpg8mAkCEBrN5lujOD(4jW@wk7AG6PJw;q!-oyBJ`W z3Ru6mQ{VW)=btWHlOwFE@fVB)wEFwJ_&*L2;wl}Vp69ue(z*1w_^Ui7+bNa<`WM8= z-jRD5^P|5_=;J92CZ`AV|NIzW5HN{}nX#2U=e&>qOob3I59aUg6?ItFqtlWlay^F) z78@Dyq(if1#+)lnwhE6I{QvqWz%yX-@z!c_K(I0}bM7|RrDwilluIJBRqM@uvZ212 z1uS7e6K9zBvZEh>ziV=5s_n?SmWeUB;4HTfHi2Q-drIBiBMWm(Llg@?PpB( ziqoMTBw(M|4%+k=)wg42C~30DPSp|p%wb zV+c`JMn7!D`seIcy-;wm$IUdDKsBtzF;$=cH2@AUzT7;lcK-%}P-2JWf}jcKDm{%~ zpziZULf!r`_hayRK|m4+2;=nuGM4ut41r>DCZ@QsurHr=@AQ3XpDE{z0d#5Q{8bT@a z2=}M-to80zc>xh)?%tlPGD>||xNihHCr9t#avZ!5YRAtND_*l$Gn@GMOgWoA)QjOk zCq{}Gs{&Lhr~)WF`LM`QGG>9Gv{&X1$tb9k(h>ij82sC`>vQD=fB&d7Ol~f;XnvJ! z1_#U4K1Pa!n=OJN5Q`$ZEC(+sg~CB!zhsnIc$5xy)CE&k!kF?|nj;Pkl~4Lm!HA|& zZee`V6-xbJh!RVjUc$uMC@HK~dxi?99dc@pyx$FJiVyk(CvC~~`##~w$UFg7;)a;I z7g%^~VpzvxSgAz(9tK9<^TbbG%YrK@=wxVAB$V9vOtpx{F=_2P6$j5SueT&#;OKI7 zM~xEqxI+$$L^>)rO2o@LJ#G^2!KWU#-XiNI4etb;b-}N%uYVTHl^bkR(kkj|e)m~3 z-pMDCl9kPG(T(kg2mk68p1K@7z%NC@Ly;p9U$;bugRZ5nDk-iFDsD>=gG>bTm7}+; zk?zQY%MlyCBB4#)iLfHE7yl_z$kvJ=(O4Yq6`whY^ z0r^}3SY_6Zbb_*h6;kNg?9ayGkR8xB3{a3t$#gq^WI+86qcq?rgcQAtAal0X-z zpX!NyRZHe^x{+aOBO5z$!J=0K>Qd3@G8(%e>;L*pXiA05nCahmbTVk73Y2Nw+# zh-nkvnXLFuaM$%@+AvX-9MG>VGKF_YAPXf3`q6N+|f0m8dEs~eC&Mh+(f zLyo*&yW^fF*Za#O`SCF=8JN)4@va1$^{(L4ub~pR-^;UuU!|O@aSlYQh)oL5=saX=+2nwIA1KmUIS<(4mFLKk3a#@mJlq9?sia)(L=L2OylRGGWR3VG2hM z4%Hfxeu0IB+Iqc20$MXYuWVGB_+A8Jo4`rE>!>_BgF2Yz8S_}REJmPH=c+$mr1WRM zG3B)w9K5=X$@>9+i;bI^{A-}dYrg|egEKlNro`NIri!}$@naDUEiEa@4o^WS((V(| zwn;Gsv+s@QR2Gkdm?ynh@IF_z9UaD3ML==)ft{!Z5a{P9z;wG@-oMrZwD{{G){AkQ z1hVjd_A;O{;|!SY07urT>DVit_p*_9LI&23drJ(b#I8&O%XLj{kn`CI3B!GlIjym9}z% zL#EVY#SA+3y%W`I$j5=cOh1l>a3k!55WC!X;D6s=GWQE z_+Lizty*|8%91~At~x+L3Q!)Aad~_b{O~|1P>StU{8z)ENDK!s@qK-LKvM+tsT(w8 z!Vc(s0r$w0!ELhL%b38Yg8jeV$<40MZdUJ)yy9YLF(p92;MZfyhQpjL`$_ZTzI)K* zS(9!utfxPCjuLC81V#esLf9ZaG7thHuSj8O)c+&xSf%9pVfAx@xBG+CcGdMjNg7YQ zJsEeqSxex8_l^e>5k11XTB$=FfQL74X!L#5fN~BGvd??Zm(DEuRne6WCYIVQi5LH0t(|&vIa|; z=R6;C1-H))Iz@ieo8fJ=hgwMug7H0F^CY%?HJp1;~iLLk1COXlC1$RKS%4 z(VSWM=J;{Oz0zPe%J{j;`1G_3UAYd*OsYhIBqHX|yiV*oICu9SZol*u z0v=7EUR&Hz`3qGdrq=it8ezYPC=#t(`tU3~u~M^MX0DkV{Xp(DgBw1D$-LKS#djlW ziPrteY>yLf$t$X*WO}*LpOw(>3d8@?zgz4SG5h$BHKYoK@92EwA>c}ufTp=uZ@So+ zPO$GL-Bn9jpsgS&1utKfKAN(9yPH!eG&R{JZP(*q4O|T;YH4vjMSKs0zB+Z^*nK4Q z>)SFU^-Rf_N+=rVe)8qgs$pTyL>LK7JWXYEeCk1FQD$*C`U>3TQw5AAZrv|CrYXDa zr)Kh$&{X$!zO7AQcV&>`G7v|wOtU1U-%q-WigmwWo4l`m6rb1hngpc$zCBxJ1>7#c zy9Q`>fLzrOFxm$QJECwoV}PUA&CR}ys1g})7ym613If`RE)b%abk(d8q9Zu*q}ps08}o^M)de-$d3n=3H4m(LO?U{-LW z6eQppxcUfk&^cF4)%Yj>0pe7WVrt~`jqI8>>P9<8WmR)Z`r5_GlhicSQlo4ZOKCed zG(cGnF?9|JR5`@c_uXx#QN_C}hXYEHDKi=Y2Tis+4_NN}P-7*4Dl&7f?-gdZdMEBg@#uY1X`Voxp^F5`aRwrGT2!e=EokJACMq1efa$9u;7%(${Xb6IH!~u-&Z0P@enanVu{Yy)m%0 zUBK;l0B)ybeET~GL+$Sn{5NJSS%fbH-#0(_v3Y#HxYh5#Xw@mXTh10jV3$4r9B8}W z1i6meWy#xv{oL6$701cte2oHPuKDFG9GOAuKqb)V35$eqkR*I%05JG1++D2WiYc`? z?&3^la8l5|lFzG|@~x~vBBD7#B=nt0DraHc+G@YVU~yXV5XID-@WP^=WK3!nzbp7|y-psubA$pVRt*fPSyT7agnjQ_KSg#{KME*drg z5q)7$g=Ekb5Xs$uh~p>nW;^6r29x~3jy_xPdiaZQEq2sqc!w=9?j=ec-^=;ojh+sg zbXOd@-szYmBJ!rRs@f3Pn%Iymq+Fw8ZX#${^i7}ju+4qhv!R^LNi?G>bs7WX`-c_d z45V$Nhln;iy>kJf9I)<7-5%rujBkR3 z7#Xi|Tqc?SbCsIuF*Dew*^8f|z|Fv;!{5Gs8H>k-3gDUd8!;QQU{ldd?E)>qN)A#b zrC30hxA~k6YpV{Fy`p=1?AF>J|BD>#1JW9O>+Q{Tt5tmdInu-Ow$Dx{n3}fYG&Ext zD`Y>J3n=p|*bVF3JW+B*6NkY5HO@$^Wz~Vc-{{DQkeV9M1Rfd)-<6X03+eyex=v0( zp{$}J0=V}8x%Lj=4Eho%dz6e3&xkdg5%7D5X&JPmB3*ou679jLt;i9>&`f|{4R zobhM5(=~tgt*M$tAsu*H;mprd(8$QGg|&=hI+tA2FoxE*Gk{zsXk6G4Y2?h*?KcKS zZ_TOa)l?Lleb2VJ_AfE5!a`J zTOeuHBg`UcEh-`Nf2pdBU)XCn?1%Py+<8HUW=k;FA!M_K)6Ui{;l;UgW?r9%08xto zc-oeztp=qygFv0Y=u@|w{@Go=NqM0|I>W^_@~kI6LZxHIvZnN_B#L_Xe%Tbf<*Dcn zw77{RGQMKx;f*(k7Y<9UeJ&e25aF7ULuyl2v;y%eI3vjp>`N)T_2Su%sT8-k3U%G1 z-OSzlLS;^OV(F6y0Xe@(Z^kp5)k0EXDP6?ec&pz76{~sd&RD^#rmE1r1(D3WE@8#E z3^1Za4}{FfYjrdT_@YFU&}`f&Ddj%~4x%$_wPm^J%m@U0MpEJ+&X)Y6vXt>jyVK;K z;#F{d#{cg4K7LI_GjTW&Pg<$hiq~EZZGyaPwRd-oTB+NNTY-yKF>vRYh|OyVhgl<< z$5{4XWGMMArnAE-a})-Wnfce#F5IzeQW>eq35w={iMc1riKiQQK(`wg@K?jrhufJT z-cg~BM=!%Vk0$U3#H_I92;x6a=1YZ5&4LiLTAyA0H&oQYiS+tWMk*54=AUbQC{ucE zV-xlViAh;wKp?u+;{!ZTQA4k{Stixt{SW&XoV3T=7BQglB(G{nlTMX1vVrDgSTkJc z!#Ar@I{&%<;QZS9Zr=216GuMI0-|#UY{bAh z^PlH2*Y^P%Fr*p*YAB$|2^37Q08c0|IKDm3*j)&W6G1{kGP$0pcDDmpMc^zLLo5<9 zQ!I!3&l9|OvA)zuiO@`@qE}#i(E-(9w;YlJR)vMkm(@vZxYq8Os;}pL!@>_C7I1ST zz0zPiJs*}CmLIj};%sBUMG6CL%$io4K4D^R{!bOQ;(pfC(;M_uDP`Pbw<-QIj_K2E z#jeNWYNn{@-v;HjA6h_3MOWo9`81A0dQpoN9vi-wDEN^BZ!Z7BN(y9n6o!E`!pIZ^ z5%mN0c?Ps%R&HqQC`~0pv2SWqp?TqdC~f6VKurAmsTuw8T)SY^s;k+^5~D|YZYa@m zi_0-uE~lNCVy>`m+a0NwFKjd}JMqp6KN_P>^&C30+ZoYRR!1K9ED6Z#1IEb-g5h9yE>0yd$Ta%JOH`#WxszJcUEAn3tDa()W7|bq8K3Oq-F zy$7WW*i!U|MCbW`egG0DY3T^f>vI%=k3FQji}`3N)b6c{vihZNPQ1*jm=Otg%gtik zeRA!ru>c6(<4t!ax5&^qz163~NB{nkuQ)7bcaYF9NajGd{cN={I9rEvHs9D?0N!GJ zF>#2={RLC@#fv~|P%RHGi`y#>!**q^bMpsq#Sf}(%6PC{b-Y-E`ftLFme=hJ5QH)S zUC#)>>V}NRmlPJJ^RZTWf6566@4wWzNeB;4_Di^9VX+O=jDAmU_=SOOvw#u^-LS9G z{UQN$y7FcZbN`fT8GrAKF=DcGPKGauz4a`BMmX9G)#vvD0by2X1Uy+oC0NJUTqdJE z3m%svq2ZYGXQMUEoB^?XF54wJFN&y4(dO#T<3Fu1fH}?VPa!psEHSRv;&P$NYO>Wq z#ac@LXV-NE_FF`(zI9%t*+okwjxN3u5QycUM-iAvwftL(46GkTzy=D;!$M`t!}I{v z10VqagU{oVXFi?NV7Hz!v;K7=(U+#ESP@(Cg#H90OIxEf#KtS zp1=1X=z6bto_{4wDMu)~l1M$?W{}adGGCxfA``Gx27d~53qUl;s-P<;vTMvBp0A*` zd1E5BW2+^HM@N>3Wj-KaGvi=8aIG(O$j5d4XZG{!=^~5Op2Nh8wtg}BT$MA-%iV=k zJI6T?-Gg$hQ>a^Aql$nA`Mg{C`0yDI#}pY4Ke$}1#beM5nx8gBCnaITr9CA9m~kbQ zf?K~_X*)Xsz>v8OD0+by6i{XS4#XXRDlOG|8x+W7l*DWzP2SU!8agPzPS2a!u`e}> zfIR>M%=T!BIL=nbT}ic6ZGB)^u*h=G3{b9JU>f!50-3?J(@OtJD0@ z%bd3wv|!6$JY~j-w(qd3U;aoYs?dL`Jp#SbudQ>Sax*5h`aYv=R%s1oT)p%8#ETof z@wYYFi57(9{%Ln-I@fv3vu@sSAy^7ZE4jv7bqNe6O;J`eBtBN72_N>5gIh~7a z(u1&Eu4A?3c{Exd>Rju%jZ!K&R8%A0s{MJE#4aR^uh=)5r~}*W5Rxf%tlEn9_I#EP zX~$_~OAp_jHgdGVk3G{!i@)0R`*Z8Z1HPdA@6o`@@7D$3A#CRo^70t!%Rf~NFT(wGVJ;G~7E5Uu73lv^7y2DC(Lfcr616?m%4Q`8 zEiLPb*NHZjx818bCR`abj5J+uc`AEBK47c{Ms}rHi%Wx?Z6-8e#fpN9JN_JriN)se zC0>bHbWrqmev$QQZx;#n>`y>-_R2qzV%t4IPt-GQ3+`={ql#HV+zm=azl!}IFjMlP zEMC`y_0{G)u5%)|q(d`QkS*qT7kuvl^ch^F`IPZ{akj}Jx_9T&_Ub6@a`!fj)jgsv zD7^Fc9Jj9%dktI!Q#;YFCr;uJ!tQb6@L!yX0kT3C^HG|caVv)}T|ZTj=WU@zk72aZ zTcI*y6wtouxsfSt0Wngar|sdpll4@)&X+%B)<_x94I~yb-*WimOf~|a@%V2bKzqL{ zsd6v7^n~@z81{n)v-q6ChU9Q=gd?YqnT^o+d69~3>*b@eSt6pcH0bc!19mg*6;%rQ zNmeAK>3hu%&ExK!Uo)G!F%s1@G=>3DYj|WNDKT*XAn@+~hV=so3F7g%jN~TX0|!At z9eQ@0XkevDjEfTjPT8=quz&w9Jilh_>?i}O+we$F*_}D_7CbvVGhSw;I(w!e_lu3; zy-A4g0U3SDC0>n620ia=biv1u&kySzMs0&0$>Z){;67hmCkfUtu_SuYBT+o06*1&OJ-lYtDdV5zjEr@X1&`X{)F=dNZ4&OAT8&JxB@i;U4Cia-*I&-Q#B1nF^|~wpswnOkx=G5A?X{|`~rfw zlmuxL6E>yUSl}n=S5*noG8kV^gS;5#D{3N3T}jXdMN~MH|D@TP(YV>uf@6j)(~pk( zZsUT`*jOV+C`$p)&Fx7>#<#oOFDWfE?$`?1End;kkhN!W&XpxkUm%vEyVmA7?d{d5 z%Wl%4l_8#>e2EO4%XXhc?KUE}o-16|5->=^;p{R4_DW(sQ?L}gR-6I-ah>CJMvP{_ zQi}%)DyruPU-FvlWIVFioL@SE`VOHWDa8xy=x7<>koS`LM007w0kR1|cpxAt2@O!l z#u5x|A)lja`_w` z9ZgQW9sc-61$=?X`1q56!+gXiIdc8rVCr1*b93LsTrn;;ax+3Z;N}laLT=IXCMg_B z*(fy`xj;c>16J-*XGea70uKB3-ZH$lRg4A+m^}{f-r@cgAN`>JXScKhInN0)@VM?B zqLa$_`w95ab8@DZDC~OP>@mmg7L--eK#`rf(JCn^{Vd+TT_+6>mugwJGtnCQ!2~2I z=|Ld<_{2mpQ&Vn0;Q2GKyqt`pFb-&z$-99m?BvF0+<;f?yVkZ%9uRRnFy{pb0zE9? zHs$H*$>(|VYiUUn(4fD)TGcO0%E{e7&dHY~rlnz7S+k48R#wvG2>MU?CsRn(fZYQ2 z((tgbt62Z8n{NNh16-BU_OCB~ADlWZv;>$`1U}qarQjoOh#{fO#*;W0_M6gs?-dBg z%kk8SU1W4;UrxJMN2}vH@p$~B{+u|;U-I?eTyGk2zzviXq3{{86%0k2zaPliEH?%< zW^&e(x)2^RZj!%Uc^3OOzRB&vs|h)(1*%Rc2%Zz|g^Gys$%!4Z|M@0{Evm#CSF4@I zZ%8L&CTqM7DzeeH<{9~}!vV6|*Iuw$8vW_l zuhn6KJ$uZ2v~GH~+7=;08Izze7&#A%AF@DZON(=7Ro?V$`vrug?Ji9v_77=cC{^AOW zL@@H=TA|hG1H0N}XLj54&5z47UIrNni^mGwb1*rBynOzc)2+0+a%XFUNu5sr=cFb~ z#ILIAl*mKI>&ZWInow71PzQ3EgE_vTWvnY5!*sPSXDEpFudqQ<1AC?WJsVnCy!A0} zH#Fxwn)E)+Heg5>o8;8zP^tDC=BGIhlZBi6fKf{U4)Wn_MgFPxeGe1O@-;MY&n>T_ z>R=>Zgw1v(3VpNMXs#)nPQNSRa>0Jb&jf*{)?0xplhclb=7tz^I>*T1$S&d*o{Euf zZ>4qa?szr3&biCTRuikeIi%is*DfZTThvesS%$*q;O~?URquLI2J{{HMoDl)*$aD-d1E#S%Vw<9eKw%C80=>>HWAUOLiess1TGx?Dk# z$0U~zc1#3kyHb7l4Phyxhdwl<7QD@4kHLRh89J3mvv`_fgTW`0?k>FlLGm%we?pjy zMoavCkWuU1ao9;%E4^RKhU~q6;VJhAd1kr^T5icEtUpmM&`1(sr_RAqwPb4x6qQ>% z2V*3vC+xd%zxnT8ONJ$Iep@|dIFgYQb`040lh4$73yqdKSN~&3-L%tI6_EWJt%&a)@+s%Xua_z99?;9S!QzxAeSy((3Lqb}RnP zi>|%D1YNlSN04zunP2~wdiE9M-`zR6ZC(n6wite`~s`lb-+ySS0-G zJOyPOx}P}(ev*6T;(ofn9sB+clyG=TH;UEyo8x);IV!MTzw@g1U5$({5JC%s+xGyE z{{>P>zluI3EWs_u_qBp5!kt)>7b$~6$s0NgaTWLV_s9zWzMJ>k5cd5PT*S^}hxip& zN4Iy4MrV)fCi~U>?|XlBHFV)`ifH@O2Qc?RagEML51ZCq%?p>5r<=K5m(McYi`~@` z`EP?CZ=Xr(pLn4mAx@7MdO&a9tsOsd@P-h))~8aN6~r!FlG#?y zBHKoz*igGNXCguJrK@&fbfq(}M=9>d_@FAWaew1`K(z=D;PbM#9LDquCG8zm3; z)}5=xv;PRCpgQ!<9jTmcaE8J^+7-xglf}{HwK-^?lvYp=a~@&KiZd8=_SGWyxBA?} zc|U}Je3nT}r0N6E`R(}frL$*y`%5ViumwV%exa$dv3x^cvqKW^3@?!I`>_uy`m350 zR34Z43_!p{p3IIZY)jqyv#43WtolPX=UHGDtW0r=95^uZfvbTP=nZcN!9N{8St+yJ zGV%PUw*7GrpY?pqHSEVT`kQbX`T7VJ{Ku`u;+$=>#g@J!Y8PkHWk1rEJF*k6a57L~ zqGVtQQ7Rbv!J_kSm)zxl4~;6A%`>`viR8F5Y<#u^if<_m{i~*7IJ=1A{7E4adQaJ2 z9c2}ZYY31s}hPx=vG@YG@*MvR%9=aU$}A179ex^Qm^7U_VAf=8pZMY1aN&#}!$5 z0j_N&u+*)GdR4QE{rg`VRr{RO<(wzIoSP4S9zk28*DVdfV)mlH@+H3nhEY-1tSk6p ziOf?tl8_MCtA~Y1fzuN37FIeqgt9^P@EYuWb;LV z`yxN-r>oW=1uFkJPH*XjrX_6tcZdtQkznLTzUdRvgj(O-03Eq`ICyW6UjXX}=Lx;U@I%TOh%3(=q9 zHWIWKZ=eu{K0nU2&@TysHiPOQ8n+d8&0zAzH1H*oQT4=szosOTK{L&gf5c7HXkULG z+S5otGts*5Dkk!_@z7mZjO^LK{eGWGl8#(xg~!lNXp)YPA-j@Sqo>erHn3Hj>ByZG zmVX2TpHTVYuJldUBMWg-S7c_0zhZe?kP#S)ibP8IMdqo91{*8Uo|jM^4x9Lfh&&eIC@Ll;6v}-d3Vl@`X*PP8)uHxyEpOjk}ojdGI!&@t(9BT#DR-$|9x-rr9n{d-X~(_WI+G+cQn(_on)$rqkFHsbL{|x`$?$%3YTOwIkbw1weP1onlPp5nZEFSH_ zP87jOa&-W-qRaIY{KE6hy}@pEq^N#s=eQ*2cl)XcNk;!6l8Ugni0SiXiqoT-AW{0r zH_4$i_h)p#H<0@W$}S;Qx) zYh=CitF*kb840)k0S|`i* z5#F9LPJPq4gL_DD0k4-fPseMLF7HG9j!sWf1;JPE>Zh0eN)Kb~r4{*7Rz5}e*%J4>`9yKLSWSuoHwW^C5q!Ju)b(DC9Z~;9 zd3r!wy_v&bouKkGP26Qj7(evHR_L zy5+W-@a9OxpDd1Mp=OtEWl}Xh0-L~pkC;IF>OX#d{yrhPy`H~ezk+O5n}Veh*LgTP}t!=UN$8epMC=sQM~Wuh~XJR|6($GN~N^ zooYCnFBa2l_UU(5+G2IY6*@r97O8tq~SUomus7H%{Q474mAV|t?w zRY9pGCG5|AeGyLanTD*Z7)=77xl&IUo83Plwwgj4h#`LsApu=kPC3ZS(j8WF;)g4U}~zdFR@_5Np4XtZ!3 zZZlGzQsq3GkQVjBNHd4}E2;=tc5Tl@T%iA9TNOUg=fr0E*fayelO?^k#MPx_{KirHS zw}6-W^qic*X5Kq;sA6-Lz~>q_Td7&@v_tODe#;^O8DIPUmJXUTt0>Rzt#BMF5p_8u0_WHx)Xuv&*wE} zpA(hOzLL*FL1%yjOdJwkezw#V4u7CKL~TB?^YZKtGIlS4(hhNDRcXETZmu&u6UJ|B)Zht8p6eP-;M)DO$JDuIt3Zf+ca4)|zL-Z@4d*C`@Nb$Wa0HDEdZtHO0NLi)Vg{jT%zoEx(>WL=ZrTmsLe*>VMC zHpK&AJMWNvcI-c5M$Hv=pMf)lYIVK^4XwU^5Uzboj0DEpm{+Y<;xN_qU48dKxBtVO z&(5V_Z^_57AhYQXT1us+Bp34DHgE3sv9|#QO8Cs~`F=!2_u$5q11c!vMe$x(2*8g{ z`H739(AO-U%EpCeI4b%3B#^OVL1h$cg(UF}>HL_MU=GmjI>N$lq69-N4~EmOBRRtt zgMk=(4s_0PEBzr>PH*~q46YoXrgZW9r>xL?BlO6hLeQ6SW%BrN*>X<>ng~e^yHI$V zWDrx+4AqILiz+kacmoP?Qn}GNqqTo}1kD1aY8Cg76nZ+TexZP~5r?m2VpNb#lrmA@ z;3_s6q8U)dL1HkVopd&wkS}t)Urf*|5+JnP(sUY=eiMM$8Y8}Hm2;VvXQVlsIUn%2)E1c7l#u78EfGxA$~i2?@@S3D zrN73(Bbunm4oGPNP)5rt*rG9u2%48nHTq(1j3$?L(G<0@{fuoIsfc~px|OB>RKUbA zMtfbHQLplaZza*jS4`tEVdbVN0-^H&&1LkPXFAelACbS(3fD*J`8Z=r_~KR(O844j?LBi+fcAl7l6y%S%hw0Y zh5>dv03+T%TI|VH1Q5b3*iM8NMn=8_fA7^QeTw7PQl?h0==j8ZIL5cq#~4DVscCEcWj1c~ZV2`q&GQW%LH6qlk8Y(w zXFzX&fS1=Qta!*5%J)55Ei?oUn`Qa&YQzQmrM{489XgFltn@F?bCsJdnJEhdWb0lV z`OL}$hJ{(bi;Quft)Nk(ee_#&(WQp9lFI&j$9)|cC8tR`K3y5r8BeYC97k+>@evK| z7cFqie`X@5k3qYwb>H<`uv-sjOa?bi>uPEq8K;(}Li;)xQ~l$1tjeX?1>`u0<7VfJ zt3?yxYQjdOMcz0pCk4VFEvBM4s6NZfKrtv&97=SW<6pXjyv8j;6S>It2;J>VG*zWC z|89hAT0TIkzw*#f>w0Roq1zZ3ow?C;K?+@7&6FSo+S|uGwy`hreMIDWY+%kpDN~gR zCgF8&sI?te2hdl8IsEujzh-Qze@z2$uvL9+w(6Q8D?%$==H?+nyV1Es-NkI}Cd7kM!yS1;6oa5ix+uJEGTpJN33Dy`vF9rxOj`pmDH&D&qa@iOyu>1G#K<@oUO zk_g4CO{k-OiAm)3obsyIkI#unSYxho*cmEZs=JsNdBc-EhKC9(G1e6{cBen(mm%p9 zs_sO3r5A_iQ%NTLWopj*;N0c!IgOq7w2fA-aGI1>VGk-V0 zF*%eF_utHjG(h>jm0lI^7~_xtC^EmY|LDXxPGhDkZ-0dE=w`a+d~Tc2uA_jIVZ!3tG<$77eH z;gvy&en^Tr9934EZ<}5|RBBJb;cv-bGOWM9FSN`+{jk9TpOKJBAcG$p;*f6DwXH;5 z{^op27o8)hPAHal`jRI3YjzgO{}^<-3rx6~?~f$|Tx!7oC9tx(inN;82z=VP=9;&f zmnt?CQD;cy9pKgyU!T;{P^>7@retTI2|ne8Cm96}=CKlkgK>!ixBWj&xWi*2(&K}n zqJ^uK9bT%mkz=#sDb+Q|4=SgOyWBjvzKDednY5_R4_W_5`B)58kBE zDnOY#v;{0YQ;{TjV8DT*ATZ>&3|1RLalr56q{t#@h(f<#723&Vs)HFi<QJNymm(68!bB33D@VC~xSgrFI1Jz9AC#<f_*HVL0p6v4__XqBC47kp!pVTNB~7~K2!CAwu9d&+(wS{tepGAV8zSy?&+E(CS# zw_)&ml%`sgaCL?lr?6T^-2C6ribq_~S-j@!3bwt$LkE=JB7Xk_fz-UK?}V$O;B!$W?L?`)VZ8@lDgLQzpi z?9Z2CABQOYRz(R%u_`z-8YtJEWb*<|XeYqF;-RaRlt%;zNTp_%#y|t_k#pft=; z1{+eHc-6x4v|FRl$Yon)h6R?IvhtI)MX?3rucLwD+sozony%5>Vl{hlRRNl{&D1M( zy45kvfa`A6wB=JfV^b?DpD6k5>D{OD zg(}ZGe40s>sbk}&P}$mxzRb1O%{8t-KOR3s`1vo0E@_hRKT-Al+HN2-RZ3C7?~Kd%w^oxzVK9KE=9eD+%tCT&H}KGqqSi>Ztxm6W!{-bCMu#;eZ_nPc9%m_= ze^e2!_Hhx8Mhi<7aY_eT#EZm^sBZ_F3u+ZJZ4M=7A~uE|WQIsISJmHjKReBI9OVh2 z-Tq};TUaYOew_3?jk|pb!WbfXZhxMe-;cN`H4TWkUG13{Sjn^Fn8~{gGU)tB^i1;Z zSyyzPfa~Y)R)KkpMj_!}-h0Php6<%^t0KAH`vno6m!mv{BqU~lsQ(nn%+1|BS+1C< zO`F?@@5t;Okr~(Q%!YN_&mVmzN!HUPPA~U+myc_&xxT^yU2B}P8tQQm6%mysnKtER zC7Jw@kS%OjsW2@$e+_Rn<+g&PI%rXkw$>yO_o7<|K0ni{2_pUf`LNAlmyNiVdO&S? zfgWBsxHh#iPTFfLbw#d*04|COa74%_(JN`qxUTWvFQss;Qs2Q`*FIOXuW6_& zLMsmb-v=r$3n@d=QGD(@RAE0^&@no!--28jg4X}{R7w2Wj4sohQo7eR4HU(t?fnw} z|EDSo@ha|rTxN~!jOHQ%uflN_AS?gRE&dRmN;D^cFE8h2@`fKpZ~{lTUaffPV9x~# zR{q>Qa#@Ms+=^U~3z+^uREJKjIGtIn1HM)@CxI370WwO~nK0^Ggikk?0mqO>@IN0` ze5XyOGgya4Dj<+;hsZ_N4SqZGSOp`dbxAt&zo$~hG8I|ELp4VidVZzX7$`q0iFxwQWUw|jQq?fDs-!`5n-(y9KJU+q&7Bk zyPvL(j^zkgTU!@2G&DdiGIK{i_3KwWz$VZKl2j{eYh%#G_;0m63v{vpa;k6`$o2m3 zb3dR$(Sa({h|bL=1yr7A-tDk&pxX>s3~JI;=x3Nlr9C_Pqa@EBpJ7A9 z3Mc7>^B|Z7okk1atBvpf`$Z=(nGuGIaS|0bHQ}cXOEKY5CCOkW49FI%k^M@VgB*`+ zZS(S;WboqN7aYo@mH?b7K0cn-?49KQUKPv{6`D?zPjUt!P}5hS`U!83)f z5xjv}pt23M#`k4QWa4zK6&t-{`jUU<;y20bKojiYpMtr7{OZ_w(xB%r9`maKLw!fr z+@f0KnB;gd8|R)@wze+Vr<@eF;G&12)Sp6-^4~C)Tu=3ON!Gszxh{0#zxt3puI`7h zqy322^wsdGnr|mP{T{($s=@c=)c@(a`tV$+=4tZUy4{_>+ww`hN@c5muax zsJ)JV@8{8vkzn6QQex39(~&0NAi^R>^qks8g@!2AuAzh#g?6jHNupmjJyG5CTzNWjE!4(#0LpjU$H%(TBEH~={!q%Y*#sQ-CK{Y4@`Izcrm(b60V9P1^cYb}9r=SuOUVZ$UGVdlG$$3;j&P`>5 zHRV_8b(GC>&tCT;3SVQE-252P8D(D5o}J4rlslx*;O2JbHxw+jo`?Zmc6MvZ)c^3G zXBInFR!?uQ&sA9pR0dl-LVJv#{6%WDV@1ikAVcO*S{xNdMXL^jkt@mj z+k8jXv8q{vOSmC$1S$*}f#FfGff~3_s!V2; zFRHk&x=W=I&hJXgiK10~s)+Nm;Ohz(6i$EEFhw<1n18{WmuS$1M|Ez=cCkyVz;#9C zM0Kr*ou4-^+kCQf7#EgCo2=myJJ)O%#Skg$cgr=NFNlPWh`&jsuCkm zM^K#1InF5EC)lnqe=C7MZ`8u*ZXZlpW_sgLSWr|@P`E_yf%shbQdE0e@I2fxA1ub7 z;~Foa`pv_WY-Rj;FA+hrfA!R?qksMW@l}bI4bYMMKNK9RV~lOmC_2E5j4C>~(hk2JDQ@ z+Mj_;2tN_l zOdT_iC2-)KkzIlk5_|}{o@62P8!?P1$zU^fSzeNUP=Rx9A&NC1Hu!h% z@!JS9Z~Ox%5e;4p--H=)|BdC4S+W(U94mpV(bCpA=!qvHA3M6{KQo2NoImP2z2)he z5(uk&@ISnL%n^qC@F$83|F7#}#;6oM*yK08K~sV!r}1y2^q>O&Hj1Xe%H}*3CSVO{ zF{7{*X%WL=?%vo3Q(y?cCN}ux!RWAAE}cI&UW0rM$buX^hcij3l8Dx=y?=|0_E<^y zCiecsa{#G3vO){vmcq`6k!C_sjGBK?H#?c6kSWL_I6PW!dHTA6q&fAv5Cu!9$Z1C#>!A#RX8ZqiD?Bp1NDAZ@j>0qRBV;ME`je<+G z#A@=53!SXO7olxcnzAhe?JkJE{5Oa#-B}Q#QGgEB6$FI}5=*OLn}$WG1%w%6@wxr5 zVNFf9y03E~&q3~0^Qj)FI;TTbgHUE~8^jw>qfs*rqoKd;Z)GjaDAK$LN`${Zo6?GQ>;H>C~Q+7ocfR&Qs%x^8FV55U6i@{ z&Ws^Cyo5_Q;F$ZV*{e>ZF%dUPQl?m~*Mv>HAaRQZ_|)F5bBuR&*gZN=8w8{^XPnd~ zV4WgP<|hQM#jWj85?o-%NXbx}^lr&gCK3D={SqkRtTKpQQ}pUaey^Bf*0cs3s3_4w+@TGRnJulM(#dzlVl}8vah% zRFIS=H6AMpKHI%cDB-u!#JSb|GbNT7Ws()*ab28IYtHe_?c+1L??TtswKpLtDJ>=< zCzKYj+JOV`^`3$!Bg3+^DG@UPhtR{!MPkFkw2x2E{+%Ed_ooI=3n z{)uK)2pbqHefLNat9QC)RU@XQ!~P$FG$Cq6HdCxJah+NIo4@4WJ_WSnCu%N5h8t^5 zj$)VC-7L}>5thzIGosq5ODD(t4Zm&epv9CL---p{!zOF#y3O?V;Rq^qo}2ux_e zhm!s)MisZ4vLnV4Yp>7f>qCrx>fk8e{BU*oqH5P*XD{jASXIu|v--2qS^_W9_ET+j zM2J@%H8HBfJAL(1oZCJ#H9Y>FacY#J$N`*&e-EBWIT zVsiqwX6@>OZ%BUN&Zi%Xc{e3qp0sISV~5bYhxz+n)rK+Ujqed`G}eCh!B8uki9pv0 zirleA43DD2q259QrZ6cmO`B6j5RVe9h3j8P5h2vr3}C7J7JXYo=lM5r=lWsDtPZTK zHiLkkM-W;4pm?7Yiy42H<0WEHlNS_3vCJ$oDU)nPJv5P@rmYZq;U!2)nS==pqsrfb z_4WL%;ySby$7Z%z7NR)pIB7y6B1-Hi;ONgi1!3O=!Lw+Cx1TkNjS7Eo3JD@vd3j}M zQ=C9{!Yf6I1>(8`SE8n+INn#I<+{ zD6r(&Sy@FXv3ic(ROu5iV?EEqmtl+81cO*%>@il20<|gQMfQ8P-cb{w@D@b6%h*;` zflxlQvS%IvTBmWZTv*UiaDgJEk?!})5)ko~Np{^gh!6QAnueSo!b#~Vsb!jO#;Qm# zl!0fa`CrjzNF*CnNRLLK66GSDFj&cFL#Yazp60?At{-u854YAr&&S9n0cT7 zG0`)CTweW%r?7w+SAp>_d~1P38NC3!jqu0DLpjen>axu%T*Yak#hZ6wC?|Wz5<$Qo z_lMnw9KRMp>4ZZ^Qx*_+n{Ed}X@=6lbHZs<1%ERu)6y^-%2#8cSQK4lFb#!^FFbugc=_~_ zj}uLREQJ_R)N6vYu~7OR0k}YuFcf$R191v0cF3RLdwL5Q*n7M-YdP)H^32%d#_94I zNzgaX(XnG9vQd*73yy9d2?+?gj;@o3%n&2sWWWi5$QsCHzD--V8Psgm)-A2xMBe)f zgTw|nVHNsq&pz<`OTVSk#=StPB2_xu;$yU`TixzvGdI<)fE;FQNKuKMT!q18Hb`_d~=0vUhWZN*v{Kx6bix9lo^bl8S^iI7<| zgF$^eGrzPON)Xd*HbMlNfL11&DOM0w0mrOCmqRkmgRI&vBE62p1`T99 z+s=GIQd0K&G5p)f8C4}=7);YbdnvYFm5Hl$g>F(wQ}ep8?e5!!5C9ociJ(f-zrt`Y{7h*njDCA0hE4(hL>8 z9QB-n$RdboREfKwKu!v^B@&VCZ7z{i|HC|qn=pL1>ad?hS@c2^U!f zX&vYV50}|-9*q3)J6W$)8e=wvOV~`4EvfI;wSF!j$4h6k0~)*BIv>j1b}gFnM0V@A z6JDpmxzulS1;n2+P@fK5A29v>n%Vo8w^kLMGZLbK&D(Kr^*U~t_dM^zzrW0T9Z69Z z9s>M}IhfsGC*Ak3Jq2L~sU*6xOL1bGY%K!JwCh>$dfW8rWN7W;VmQXy!NG<7^1h8i zPoe|3GkUdQ3tj`lF*9pc=2zSQ(+jXN+uxNR<69s}PA`rh!J)HkUjwHj_C0p&%RWJo z8zGJ@jRIKMxrjK3caE(QXOAJS?(XN0-(R{kKN>{X4o1x5P~*u@tgR{6YEzRYTx_c+ zoJZ{Wj~68f|4~;K>bo2l8HccMIyiU;%K7>EwcTyT2;QxSxO#X97zeobi*_20{Dw$Y zdjgQ~;N-*|TMMjMh+bv8H&=q-1tQo9AQc5(8>BozLC^@h!N19CI$!t!Kjr$t_q^Q& z%RKXq?l6EhJtm@Edry=rhfe}@mzTr>zymVWn^4(^4%e|kOvGReAf8SQR^km5fKwUU zRE^0t0<)U5YSvSWhtI+ad#9@u8nO4ADR2-CPIn*t3 z5m#~gP0$32(EY@qZ&&eHgJvl`$w{qQKsu3C;@t!Xmxh!xs=7kzrc88_iDnz!$3YA_ z&x4(hgWI+)6a5Vphijbu{skMw)gku4(0-|JyLy^#yV&J_`MK?;#q5{lSM@1!?+@BW zFj!#h)k3%NX1W8GnY85=VWp~4$uXhb!X3T~AETtz&~lk3-5GyTY&fIUIq%46RqG9b zA+UuOm+#Xr5kFsRXI)f!+^#+)Q%|n0jsbuo=M?x3%fNM`#}`%#d6#loTv^&|$KTis zzOb{I4~3;tbCo`EEc&ht)dl%*Fb%A8=TO5Z!^tK-g`6{T=p&5I%wy5TG4$Ji3ZJW< zOVo7?{H`?%C#_c6h(iFD2Pg}XMZ3t1`-mN8p-qJL<1jwCcc!x zI*^&G^A@h5nay^XSfYF>GsoeYaGh>BaqCe%Xt;~Uk#cNysq8P;nx|x{l`BvgX0*;k^n6Y~0Leav z$P?>ct`9Q~t%6Z^C{niTlhcM+i4Ix%E%Yb>tCno0gve)AIH90BGVw(O0Y`&rMa zUmDfRJY9y%h8IadHycU7Q|+?%kuSIXvLs~^WyavT69PJM-ObO_9niQp{($C?qJYM+ zeX)KGH@Fi65UKZs-K}AjrCUQ6-clDa;suhtBs(6;f};zTiUVBRRBvOGWWMbmAJe1_ z*ZMtbm1KJn84BLe(<6MjH@XNcWJ&|#;*Sil0 zYU~-Y9H-Tw*Go2q*6CmEz{R3%O_I|09BLe}sek}YABo@9WZT1Gg%a|uudu_YlU(BP z4#0W$$}6fjBdOvcPeLJsJ&a?FHzW(ln7$)C+7g>P^}iJW_qgu~YPpNP^(yoeP&yPS zb)ji0GY(9tC9U5R0P1^oXPU4H3IWuFeJg9D38xRFA}>SA)<^raUr7qqc5p@Ua1(K3 zq@=~ZqG5(+M9o{0taOKj}BFBksFy9u*|Gwh%GA2(XUT8-$)^T3!>+>fK z+b?9Gr?q8Mp^FUN=kHGoxGaxGDj1t$(O!YBH0GRv>Uiei^-?bklBIIeY9i@z+Yc*e z#G25G9tIvwpLg%Z-wpNFTd-dTw~)NH1Z)w13Zfh^w-kHLT0$p zgz)e_yt^m^DTK_t#-F*(4#InH-euiQrR_r4a)6d^-=6R-pMCqa*1(+rfy_K{j_Khk zd7|cPD}XXXFoXvo-)Cp6P=HXza-q&V!u61h)~w7eJV3}yYD=P0zcY3;%RLYY-n{Yi zr=Fy|dyLJ=?D{nrXi%45c#7oel#{C1{mnGJ)RKl&h}24!A|&5=a5VZD{>$JUs^uXd|=}gbB=!VON=dbH=Duo z;^A=C%p4A`w6q@pFZHV_p*aTnjnQ)xCFv^vy^nOwWG_pPi91?due6?KVC+t*{IvEy ztzzW0pXYuk;goc5Sy+28xS#%wKF`77;YL5P0}!oX4+1ROf08$3YE#9NdJQhX)T>!l>xzQ&Uso zA3h)e0Qls@zI?X4K0Y~ThWst^1{eb46Ch29aBcwrabijta}wri8UTrz(`;oz$&+cR z&r#76iIv#1l>k(S71!_N<12}6?G3L-9bS*>{p9Hf4Prd#yu2iZ%&eNu@ESdThJySw zq2sDb{YN~*yKYsW)ko>={g6nLV?-XkhF{V-4t$Q=Iwf9Aq71SGKPIx8s)p|EPaMUP z!PGxj=;%pAL+snvwZ45>Bmoz&20kvusV4%FOJw93gujpQ3DMPSf5`M2|2E-I6|D@w zrOHv-xi6plD(~{FMzTA3>HJpoIw^*fRd}g~9h>I&U}Aw%SQh z)4jEK%L$LgU<8RSy9>YL3~tr?s0#jc=cuN046wsU0VSrPcOJ`POn5HIMWFiuK<8C% zLz_UYIzr&283t5bz^(-o^IL;d3EMz%k>V{f9}<80EF<99cDVu3Xca%Uae{r*lFp?q zP{hu5>_&oUBN(v`0^}Z4fjT;bk9fOLuRNgH+x;FRX}X(z4SbU@+nMprHT%fou%r80 zPQlQml#4}ujUUE&VnXP6NNZwLAgv!fx317pqNlu1U8j%P54O@6QPf~1y4MqMoqU^Rg< zS2iqz;vl~uNJopy8P^`>nwo)q1ho^i$7Mhsn?kE-0%rW7&{p632;AJ7>+J5N8Co39 zl{u6Q?*rZQZH&xy{H@wu(c+#Z2BW3-ZNLxL=UeqBSJT8lkt6m*H1 zi5x8fxu%Akl&mLOptw|HtcWqaR@iZr&nfem(2?t$gF{h%uqx@s$o2b&m*O}i86 z+u}$u=ogcLPoWFYaG?g=IXcqt8opDsm2g^&iT`SAGK_4ONyoI=u2=VE28*(aHUXLzsSLT9#oTOVEv=#y}@+yYYQPBUmi$s zcRr)X^KK&gpM{+A>HMo(K%LifLGxH~y*JkE>oSk`8Sc0nBZ3qoZ5_Ru`U#+S<7LdUHip-;q=-+HOA;i&En<1 z9yn114fpc)iRl9nG?=s2sxcS^G|<^Is}3FawC~>eSS|bt!+*UZ zv7aYD_xutcuk`Zs4DKtFPtI7bzg`FV*$;@`2 zCDj>Z2?-d%%aK#B%TY~0TAgc|cTdGplINi^Sl6BcjI#=TFC;^frOW9>VQCXpR>lCb zUFLvZBpYZ|f}{cz3fBoQ7wB+)1Vx{0FO}P67Yv?NPbv(-Gbq4= z_pPcbPRQqmm7P6!e2*#>dzGtZei#&e?@v5BZOuhuLH(y082#p*ubisf~h9Vq}uc1eBxG?JShc(KaD_tYR<;8YfQ=7c0(Ac<4TTW<5> zU}^i2=w|z|u4u$NQ&G(3RGy-7+)XGGU@*c74mUcr++I$Gj(-+Rd2n5 zxBP6-Xtz8h&%(SDH?M^W@Lp2V{?prfk5dCW(>-8yBhY0}!@mCkT;8C=XMLR<_!LP> zF$V{h|Ni?A*m4Cw%p)^s$g@PkpD9}P|)?d?vol%}O*EV#(4@6FY`i867#@hP#jx*oE7Ftg}c+`MuXA%Qs(p6|xne>D=Evzgm`Fuj4=tNODASCGB zajLgmf^Q3H*MJJ394=3L=^B|}J@m8DW9sx` zsEZ*LDZ7@HT>*jd%gCOPyW`>`QKWiaGzM6lr=OYQ{mW->7&fzwlkS7QFL{4qZoGX zF_{F{Tv%0wmN4*v!mx@sY3}Ud;ego6((*`4*WKQHsw_pemt#zi!iPD2o@dZ&PkAqn z$G~NADc9$th{wRu^~KyLhsn7)Y04zWc#N*2+gkGhclV#iCLbS3705~B*e0e?%Hs`i z7p|u!d4cAa3si%fGV!@WreC{ITZ20qRIB?jWvX1k5kDlZ09lLq%hNqjPLI}R>IVt~ zBv1`#-L4ktv$m_^b7AvEg@|W=a4&v>)|3$rCVY8U_kVqR&P7@@6RwQK><$ipArdyA zHZaBo2iigo_VWMee0sY zpxFng5H&WGa99i6SoU#|>rWPW0nniOULwx?as9pFJ@Q8bFPgo)0Olbx5>`Z5-)z4d zja5%S+;q&d4-0iIxTvhuaIX`XRAtoAooOqrpB9>}VVFBx*_QIla8TeD=6}Ti?yB?C zBjd4H7oB$d_WeDr@socC=7t|Jz`e@cb}%C#noP1D&DZqZnBkUt@weW9cDJpoHCNic zl4FOWg2{#Xo%uySLb*NGE0X{9nRX)Z@-Tsorqzfw|et~NG zrn{%r<8-$dM|pcp;M5GPeBhUSh4WH&TfxRY4S0Q2$Q8^0DxbLk!%8J~XiL&yl%mFl z48=hbVnPlJ$Bi(2c979QJYXy#2L!zW4JEO$u@e9}ahum4Q1-vT`St79UtlO9Decl) zM_fw0z}I1x_VkwyQUh;mtdE9%|LrN{j5*Qebnhkb#fx5tCinsp(Qnf%%JOI2YbTU7&9oR<@oq$x7)n4%;UOy56P~sjhBN(of~Z^dyZ4R>h}pnon5tbxxFl;dR-l>!e85KgK=oHyXjtbUyb{{ z_FSGv*YfQg=r%lq6y{+oE%v=IIP!c}tTEM%Cx1gw4Hyi;t~RgBySb(gkWQ5}HKi%g_5g?q z$h_hufDt*%95=iy9tQxxA%aeak00?N?(%mq9N;?(D^veo=X#(9D%>z{fs-1`)JxNI zM)Fwo`ksR12(%A;uPY39fH*K7L`r+=o2;JOtfucxecq11+C92M=QFpm;5jT{KQq19 z9)e^kByKaRPx~K4C@~SwMmWYD|1f+%yA61~B>~N%%f6SRSJ&5*^Ya6CO)LF?R+sm3 zWGI{az|6k+Ty8lR8Z-!@80z+#fAo)2AIt9M!_OW+m@Z*IjegJjkj`?(lXnN}VmZG1 zJ8z|@!|v1lVxQq=hfjd4kEKXUVQ)`@@ED)ErSsxJ3g7jNI^X?v%KhqX2jqT}RKE1F zboAnj1dz=8KJ)MDKXHxmx!|SH=JqS{tZbXv{hX(%Ff6^_(nAh=19D`bBpcZmgO7s> zA0=G`F`>ZnbO5-%35Q%=HSlt!e-2+@ipo zw)JpSvv;%PUVfY5UodGwO*{;jyt{y)xcB9Qlcu#$m@_gYfvpwH}yLZ0v-u!py?y~0L zuw9?`6mUP!lKUsMX=OD2`u*Qu&Pd;tgtH3HSkqbmF7>V4K7CohH~dper)1R4@SV-& z!Rz1h;$g4-iu?0_3PPrg9{!I$Bdz}`6!`6s>zUJgcHdQLd8&=3n5TEAa6QLHwbk0A zOeV2od9YmWj+l&o#bXq$W$ix6$!b|I<>A3L}J8{xd0 zVae`u^O>KYU*&BWP|>{zA$tmR8RLrpVplFRs)k0BF*U5&V<6;dzU|0!oLflY-I-xw z_v_bL_Fm%QJ-jre&LD8={)<}CT0Eudf3qO_1Hl1Z_QrN9 z>&HyMI|8n)$eM^bEhg{jiZnjU5gT967t1o+jduL?AmQl@!Q*_Z)gLhvn*UocR<7?A z8}lzC?qczzaweyPoy%s=RdYR;X|!zNdsIMg*CU0m-`j&B5<9-Pb<%pe3#JR-<^e1z zoyUO`vRxoM>~__M1x!G&!5jLUBe`_AV&w*|*)U`I6UGfR192Tl^}^P+i;$MbAONPb z`E;+lo-=#ngGgJJi{+RJU?ay;HS=>^VTSj z4$6Y=DpEu27v-sX4}7{jPi#^TsIv0O$;qKgo%-z3+%YAr__@W!ZngoEm;oSgv(A$s zIMg;=O`9{QHn!WcarBXOZ`q~gx$#rWdhjK9l}LKd_r;+&SbyZ;bW*k3_Tf5Sc33#J zVuuuRc%xc7oKRAf1;hGkn55wAG&3Sd{jx9j^m@xulq@$x)zcq~W4zYWI>psB+#5ez zF8*{u4D(C3a>a0EJ8H`iysLnd!6i%^?i)YtOdxyyXOGv>mgx1-@b?$OdS0igjAf^J zp}z|Y6~#;?+0a6L(K`XVu^iuPTZ$u$c;!33rMzRnilJ%VJ$&zV7WC+KUyR@Ec+&#% zg{7cM6~R%OG{Yf@1Yt3H%-vv}y^B1N*0iIVj&PiKfn4xyu$))92j(u@p8jB$jA#Fj z`mSI!wavk6yQm=@t)o%ZO_MeTa*fWh?3l5wm;uthr%(2qAd;ia8&_lg$dJnDdUCw+ zbh-PZq9FwBsEPGprhfm_1)4}%}t##qfrUxqaJNiFbnoZO?O9JG6X!Bzvp^0;_JI&0Xk%8-hJOe3<=Ov{pOr? zrO6?0OXuS885E>I(aCncdMDduY-2k`c{d1wG{3z)=jFwpUqHa?>^DNoSvQIf5TWns z=>ZyY8Pm!lIgh8Ed0@Xg_Y+#4O-NvXB_#Ig6EO(OECDd4ki{Km`1&wE7WuLc;gl%K zYODLX*5P)l-}EuS&mmytKuOb0(;T*2kdT$&Gphxw(XJOV1$81Uppn2-2xP@m#}WB z>?7ZJ{Vg+#(Esv2n$P{|{ma>t3yFwVboUfHBO}+p zzwHqnF!0Vd-BN!vZK_w>q|B~llma~B>2wxKE6U3_GA4NlRLeDIG%8yBcLYe6TNOhJ zGFzjX2uN{%=L)r!R?j(abkq1>SG>l&6Sz%G%8)lOCahTdq`dY6@kB^QqDrgYb)f=8 zF7d&^g3&SZd`_FxIQ`1B7TbScG0n;}7!SNuYiuBiC`cFE+623MdhR!4Snfdefsow{ z@!;S9JT5gIouQ}uOD|wkntktqnwaYb&@drD1?~Oi&CWZ>fL0E0<*DfFLvrhMu)u5@ zGXMSi94lSa>-rWC4;u^X_mV?rT%Sn+;2Hr&4UCC@OioGRb6kf~7P@{5WGcRxxdB)!+UUQ1|}xSirG3~@`0w)Sh0NC#L=~0t9#u3zEwO4pSYi&P+wo)=f6LKfJi5V z-d0>y+N2weGCchJ!19q^>+NKj&qwZ)#j*B*gh6`7?WyBW-^?v8Cg=Ve$r8wlK#I~x z#S0mgUXH|S`(?$T%pTL63K*{sT>f^L^0auty?y)E>3ER~s7m!Bkok&A$s_V`zRsgnT zXHNzygien)cDkQFS=-wK#x$x}629c+Wj%83L0<4@5M(!H4FIibNa5JNiMZWhe5KWc zjQ|x&uiZNpgqg|r+Z3>$|1H%eF-+E-v&pZm#j-QUO$sRj zR!{&DqUL}t7l#+1;C$W7k*7Q#Fj&+|%TN|g zFC$_JxH7wuapV3|BFfVJ+q^;5k4hF&A{jS5^(S=S>FRVb?SpKB)lbfptdG6D)*K6U zJ}jf?ba#GtE2N!QD*}O>oJkxIWThXvA|@jGHV&z=Ly#K~^Z`v6H8u7klm7ENRXiY_Y`LEAuh;5N z>Ns&|WwQFDBltKHv+vf=U51Noi`k_JBais}e|iBd=BReZ^W=eeyzN|N(nG_-XCNQ} zp|q~nYYARE1ysYypy-B0MwZZL0;wV}={_Ozn+pBskAXp2Y|^NE$LbGLv8p@C?6}i) z;-^4J7BRk6JUQ39kF-U=W{=8)eX62IWOi=ge{T+|IT*0!Nq~IX1ccn6T?AD40Yfnj zGc$VA(tm8aDc_ZhAIIJ$`wq`72Iq;MkrsWB_nF#3F1gARbi)3`ZQs3exW1YL`^)24 zT2__K&CQKBM~R4-7)TTv1H6$*r!Ms2!5cJReXQ1_pri~2<+MwXBAxwtUtfb^A)8&kE!e)KQI+lH3tys7qepn>%G#>E4)9A3GoZ5&U(bMq37sbok>(=Y8*oA~{ke!bR z?dLO<6JeQ>+OmvYTH*){QcB--a^#DPq0ym2kJH?5B|=@tZjR4mT>PCgQ6CKq6y%HE zeUN{Di8rz{@ev{8@lc%m_<@SM2BT(pJ!%6Ht(;5*K?6vliqYfSAT0L z{a@F6VS9#@lqLkPdo?fdT&EopMYA&h{t^JuZCd)_tDd3}Uz2{N0u3Fhlv(L{rJM{A zA9Nk%soJH?va)iE?ZKqB$CFklph=!YAwebM^Au^*jvi7Ql+fs4`g=2M|4J8PxgMrI zHhUkxA*xDldt&PDen|S_iUHM0hEDbn-B;75^}X;q;C*nT=*9^QLj?f3P?q_JgXI`X%X++Xk}^+;ckAF#n19UM7K7rU^W(9){w zl-Yd@7+p1i*CXM7V%X|WD6CVH($|NfHN~m7Y#;gLP%T+hR@l;#@pyY$Z@YD{;R96hgk9F$6GqE8Kh>I0bey zqHNZtbh4E9t`8a>9d+yO9A|qMH&I<>B&kOE4C8f8#O2W*+grkqwM?uy{E!jNp|jK&_Gnx zi8Lmyt^3nyn_^C%c#^o7oBq4hhKAUv7}KpryVCNC7Vk%H7T4oHJ6Swz3!mvZiQW>S z&3(n2(bPReoqdb{&E;~@ORK&8OB()Ify?*3zfBGpa>c;_YyrZ)&p{~oHHB4EMRPg&hN+L(jd9jN4@pb~LLTITtEy}#V6cR$vhvEhn9 ze@Ds06bqt0RZUGPe}CckAFItk{c>go*7o!4+?<-W_8`!7fs{T{Q&Y1=0&*b^>R^iI ziyV!ttn5ghNZ##QKpsG`PS!eyL%zY{b@C@<)PJu%z4SwkC6ZG$ha;2<<9uw>;F_79 z_&eA?nnl3DAD;Y=#MQhwosp4XvQy+}-d^(Kd@tFpZ+||8>bH{O>CX;*W_2oRYW)#p z_9io>Z2LBccPAroxi5Qbj(dwjsG1h8v(m^H$OrQ^Wb-wK-wO-Hqu;5QX{hDYz5c;~ z&Ig3OaBy%W0`9Ru{XID&gQ3sjeX65U)pJWw9Cue@Ruz4pag$Eol9a!EOffzmVxB z0M({*SfY2{k2=W6w;(_h=N&&qW|;17Ho^x=mncS2ygd7fp{YUn3S(S{^Y4!34lK?d z1%JUp&&-PZCM;_SV7W?9FMj=(GftoQobPZy%AK_dcw$+`X{KQBDjVL?8g8u_{!^0D z=Kx6mNG5lNDV_2rd}fXqUs9pQXmipQg91ySmZ#g?d*8d0aB`zF1c>r3#&TV;se* zYVwpF3>h|^K4rE2wJMwsO1V_^rNNaE9`~M)()~&qvJDM1`_zxRLw|8y>3i3zXcdZ251N@}XaRU{k9-9J{yn%OG3 z_H1*nRP)(((CT8L&LMr%T&p`upDJhIwSx;%;T~WI&L5vEKQ+bA z8~DT(7E&^tcmNIPtD|`cd9ZW>sp4S~XXO~)vZ!gryR?DP#oJZO>x-t}TXaSqn-1=0 z=Qkqk-2CvZRfH0L?{G?#EJh=a`YyoGS~{mSHfWhk+`Ps6Pq#Od%l4Z>x~8V))!}Rm zNJ+LX?+1s5DD0;s88!a6ML#$FH zN=00}{wY8S$n?Q+vp1?yA=rJ2ly2htEfneUcrX;;8vkP6*LFAJFfp&8R;I=JSsOO1 z$v1RzQ6@u8s(toPg?w7A+a4K`=qL6VBXO9N$*u@8|3LtQAi)N6KW?Y^1?JtM+3GwU zif4~$L2eeP;TB(u-1V{1_Ko&$!IBt!W!4^y$Kcs?`nh@Qb#}MhR&PObPUa_LDvx71 zo@0FYMOLE%2#5p?B(xMJ^Es*WJ|FAobs>=1?X+K$O>H_Oh~z?-^32r!yDt9svc(*W z=GJ!JuhzluPLQ?oCp=+uAz)p-Fd{CWw+0a~q1V=$4l)lKKLjs~=wC42=9(Ef!K(k9 z-yi*ZT-E#!uM0j1{zOkeN@IpVDX(+*8KLEEszy>$uDqNaV+vhgt>rCxm&DV7B2L*MhrjEs88QQdTD6$wWhkI76pXWx)2?DB)qW@k4i0={-|xzwszBoM(7C4QNBH;G}-UshJs(vfs;gylKyCG zbNlIP{WlEoaq(IeaQm$HlWTR)X;3ntzykdB>R;B@QMQ((Ql!s-tD=d^7q4} z4;h$d5FbJ|Q*W;T0h+g~X6on2*T8_gh)&BtU#wkErcwbbKejMu^w6}W6UPQ=vAG>r ztc^`s_0-vFd6Spv0ybwVt_HpQAymjF8F+{zE37Un5U(hfDah~JGTun088K{2Km5f%X4o#*dFEKX+5!A+ z@R${K&9_j>u;4#LXvH-53OPWfYs*yoe7C~a?;q>)!_E4N$H#){S;vcQYyaC;k;IEL zB>wiKLNzYJ1*t1Cg1)9TeM%0Fl%SA@q|8ilDJedS`qT$+sys4Yg*9QA7l}lgZ6EJ; z1G!pZvq4NSt}UgiiWP!@VF5NN(A@FCG>jvVB#Kv_~~f2tS-z#Aooo&HaN`imHp?0~4Y+~Wt}Y;<-1fc%V*&-vSzZXpJS zC}0r|kB;~}&&XGPxlxIT%6C4mw5K{v(-v7zs29`}i&lMW zR*PFTGZ}8ILM0|q($wLzP^7_2ji%wStlLgCFKxK?{b`3$WJ*`4_EBB8lRU1j#%q}ZVcE1N#rCdP=WL?zPK z8)x^Dm7-m`imUB05Y=yAyB}YqYV7p~-!uF^bd=|+5FCR_=~voSMo0)jFo}pW_Icty z6LTpFf%>sgblleRAe7zF_zk))oypCgmMQ{uUCi6y2SII3YWc;R?rj@7m;iA5AkQb0 zjwKknb4ua6AJu`h!=`=c5Y6ot;$cY_1^1rKT9bcmS##kU8!kBei7Elp!C*Lf(w9>bZrs8u02D zNdCTcTQk-IC+=p~oqTw4W)QT@f%G8oEsqRTe_WjT=pRkB!VvYfY%@=@w;-B=#E?MB z5h%5J9hQA3;QmZNB^_&YceW847RF{ZK@N#)*G?f(5ny5rNl!9u@#d?Idv~>U-u&(7 zenYr8tpe#t>idsB7XAh1gtn&bKd7+~{r4Ld&EEkkN2_nvFzWs?W~N*UMXd7 zvPWcOWbc)got2Ok$Ce7B z(<3cwxu9!c`n#RVo`v3g*M|c#@e9n`a@{#U>K5<<9#75ge6F0(-`^6guI1N=$x?AY zaJGAnb%1p{xA*b9v>j)O6E`(=7zOFq#gIZGl&3}LWz$`7hKPY29v-rrG^aex@_)M} z{*s9L{;TY++|bbQrNg?UoRK8HyMl2fvoyA68(!rC>B1fx%bd0x z8=m4ZNofza-_3X2x#P*g{&lWqf_$`TSjl1L0JXu3QYf>8-AE`4cJ66SwQ(H1SJ5po z>TNuh%xUOTI=?opcRAj~Kb_&&ClHvmdDjrV!@!)N)ac@^epP{nkr8(LuWrjX*Q2C0 z3$L|CS7=)vq>CG5y-65Ez2oy&bS+b9xT@tpF#7vyQji$-&*U(kBk=guu$UL zLjH%WxKUVcZhYEU=zr6wBBSoMN_eE~po%Lrz6`n>@hZ(ufMoG=<&!RNzzR;3%`Q!} zU2^;s4*veb@SD~|d_vsU_qT30WSxf|9Jv2G-0p$YC?+{Ms6*|sv^4Q{Tiv?~i@WC` z3`*VK5|fkTj1P-*5)u-)-PhD4PM1jR?CrhIPk5l`kBnSlC5URK$V1o> z0#P6zCf2a^l^*JRXaXT~EmNOeOz13s`0&9Q%E#Y+XO4GO(qthr!-O0XYfViO@L{m# zstShNq_~)NHB>m62e?7W}C-`PlQs@zfpdEdOyEoEv`=-Kkk;^Sw16Q{ux zrNXi1j>XDW)4czc6{;F-yQ1qe&3++I{m&Q)x5ed*b%Gjm-fRrgAgyfJO$47cIN!-rq zg`dRLx!c0R0_<;wdIVX73oaeygHQ@Y3O+~;A@e}xPE|&(GPwLl7WY$?Bk9D`u2T!5 zIM21CLWOWgxEW3un&+ja!i4;LJ@ohae7`%Ks{{-WcAmyhR$lU*6O>Q;Kp^6?krG z&_p~tXa3?^-y3|~GQ1;w(RxjP%i1XFP`10ml*w}^S8tykG#F7^vnO-pVr0Qq69#!G!U!HUaWcpKV(DFc}!$ZhX zOj#vI{#YU*xsWMlIsUKwOPktjB&?zN6YF7b->$&C!V0wS*iBnApj`tkczA5kvn|$P z1H+A^;0cVY)R@6AR^sZAC4Ko~`^nd8%6fLe9gKFoYnS!O>gu=4QwAx9?!JkBJKr5# zCG^lkJ~;y5ITc>})-(jytgBK_PCS8A5()&y^~2h}+wpqUHpC4L4b4YW_C}4a!px}X zET<21OK@_3b^{ux1M+~p2HWq6gIS`{(J!`9v*=B!vANd{Xe4}6;5kD2`07!fIaoey zmJWh*7o&?#p#5oG^`veZCIVWzx>df@oQxr#HPlVUbd*#{m4f2-wBGa{EWxF4459Ie zqyN41$N!A>p8>TaMOfvz^4&<92l{>@<8KT;N4~Y*{{2fYoeIWLwjK@T!ZS8@*Xu7( zaR%?#Vd#hL?YTmd+6i`;BILq&{rYnNJK5O@L{fmF9=8c83B!jjJSp zpzN$BjX&bYyLNy!NxEQN!yDb1$kKey(=|sP0|MnSQw^C7B`j%j_Qxx&GS{Gp&BP zwDC3mSAHvlsWJ>iX24(ZA!?(8R)kzp@WLK1Yf;fhzKO*nemSNBi?=T!JPd3 za7?@vuphFGBOPpvu~J>#AAF8~jo#8og!N(;{r=hBDt;}}a^=s8;Rn#Yc z*U^>J#NOuTn=z)O-@idgEbw;p#`7j`edyOk!o~@BbbfD<&`Cu_#mvfT*J}w~SGYcT zme*ipwY0QEL{I;?&F_Mlg9Et@h!+VVq>szWiq)6iVFA%4GoP>=w5pM`%|D_>p-bf1p11yFv(GX?Q7Q$u@Y`Bf5^-K z2D3DY%M**eJv?xAzFvfIst7>=&xrt0j zt?fXfm`{q_@s{|h*{_g~T8RmXn0V`Qa&nc9(`4}Ngbp_q{f;;IGK4NTFq!faioVl` z{JUw~c+BwU2`ju{)Z!HZ^Vhwhx~E^ha=ov9pjh);Dzi^HH7CPuHgn;)?MjzULg7Pk zbwF1L!A`oVWKZMsZB0l9YV0RYl3|nd9^NBn4$Yh~YQ_5G2bN1Vr6x_ma1s9<6hc2V z8M@iw5fNTH48hVtSl9H0^O8P&N}~@fmPUsq?=2dCFCgZExR?r5my-~d3`)p?A4to} zV!S-wdRV9hy>$ILC)#0&Gj@m@1<)$b9r+TBM}7ju!3%gwEbvqS3C3zt z`Ch1L=%7vH3Ej*{a3>Hq6}7c*vaqlmY)^@P_;WBb1tN07qdcwk^=H>(E?Czn3t^OiPV5V0P+;7Nqa9ojExq5irOi_^vVv4ruOz+qMEg@=A;M&$j^$spqVY_vt6mkCjSuV(I4nL9GR_ow$- zikKg6{$H$f53Vtbg7W>Y&ADsQ1JT2TSu{dl(u*d(**xo5w86~MeY8`++Hci8_iCm- zJ#b{@L!rsAuBp$1wp(2vKNiZUn<&?D4!fRrPn-lmJ`8+WqkRn6Q3`%*Q15nYweEpgvWvs7HNk}KwZe2x8 zPTsq~RHiYlCSOzWmerW!M~wi@zXgW*C+Hsw)hvEY#P9F$5MN+%yUci|r8@}y;#_HI zj)^Ap<*W$NDbkL66(I=FDI}?}ItVf=9tZfWKEzTN7ZC{60BF*Esl(LDK0NMUm@_#1 zW>iYpQ$?dW=!<)83G)eFG}3OIx^tCr8V3Hf&Q?}`w5rPGys~uvWP`)ASjDH(7Vq)J zg{13>1NZL32O7A;FSa^2MZ+c?I=(Njwu#DTnY0vY6&CWX0aRN#jZ}WSRU86IZa`Mx zhR^3{I{BFs9BKL<>ulM=cAW1&H!_4?hPBSe);IH}77Zx37q0$2U5t#%3@vTNj3z{L zq;7Y5X0;M&yD?LNS=Re%`Uk9e$HAv2>nZ-ZFZ^N`EB~`uiAYfPyVjPoa_ePQ+ zYEuxFG^Rq&AN|^!_$*x-vFKeH13Ro=O@}fipE~KCbG2@2>YAc^3b`II$b9SWxPaG%l0|Ox$~ko8rSnbiu$%pN7jVtf?H%^QH^5^`H-|3eF!v3?eIt5sE)FbxFy|VGF&SkrB=O{5Z5E{ab+|V>ZXiKod7X~rlvD^;-Y9n47`Wtzk zG##A?mK)kP$c&INM83j)f(|yUhjy67WO&C~{Q-CjJvJdB!bZ-6q7AqyP~nlX2yVce zgL^K3jM{y3DiKCDRc@=QbmHE!R#r?mZ{94vFr!7sy8c1F>>YkYxaCH@UaOFM%%?Ov ztwg&@*Gm2RH7k>~1IDt}+Sdu+L%#ogZc`K_5C~x$ZY15X#Qw`SgwX(Ww2h>vA6OYm zS1;5us&{?`iktDNsVXimEO~j$q@-j3%kaNJvYkD#E)3N?pY`Be54q_b7&}jx`e!1D zUrNd_gOcp(>IAr=e_R0K^*NfJ>*kd&5VMfpEiw$UM7m=DO?pE>+mH0hBVRCj^}+9R z^c}$4^@4X&P*l7Hw;UB6%Xw=?xY~dNnj-M9pv5g~ZJkeQudS|r>n368$B$+(Uq$Bn zH`rKl$tETy+@Q3A5>FMtP==Yj;!vw{7}gTe(WwFu`_HeY`)(_P^RSs3lB)MQMe59? zNS7hm#5=6PZ8a`7RvPB52-gUV(0XUC!+raAB21^-mj}pM*f|$=V!0^EZuYrln%v>_ z#u(wb-S>6q7BtY9tN#2*|0P-*ADh;{gyYhD{M(?i(rsjY{p4V5n1a`m8TLgp!U?@X zzXrqO$KZ3pGL72&;=xv2_g5Sv5APoQ6WRLRGSD4H(g4sdm>dKKq801di_Y!Np6>py z5XG!~O*-Tt$mg-4hgco-$3N6Sn{s2iE*g9hs2l8fiVbE6#{(i)5kCQBOofGEcJujL zt~}wMS|G=T`DU-XdqY_qGt1jmbiE^iJz@1_f19&(znu$nAx{zVCkU#3vR`H&_|Gj+^f>P7 zH17-kYCK-bEBytZ3hi0*E?J+Vv~6N;Pv3@Z)nxPTZT7pd1T-ESGd+7Zw=pKZu40wN z{5etdb&f`Ta^ab+bieWNuhJ^HC=cu1G|hrxB9x6Gom$`OR~_hQyf$W%cVQ{%=2Q&= zO8@kU^~Q}GaKB)-oOVm*%??n8vPW!Cz~Y`j`2fYMBIYbaOBI5q7V$2 z+wMCvY!Cko{V&*6^$ZmPuQfD5USFqaFaN0Uxf|;zeT~6TPB7R02K~Dy8Z)v+${b{P$b|!{J_8Z<+@W{gtO{`>!&HSu?@3eJnJCii zQBqRk4sxBg7fe@a+yed)vL_s}ULMyah2K8=DoE!Am?6LbjKA0V1bV#4ze7K$3i8Un zuP}y3@B@$`Kr{tB;D`6`1E4}i>Pm>`l!ENx;!ToxpPyg`7Ip=NkeN_9VjXQv14rR9 ziIVSLeEeC;U~#XzZ{aYpERwh1|W}mi_lB{8T)m!F&VUN@xwwEwn_qjNnIRC5Lwg9Q|4ZZ6aK%p8M zOcUnP%VI_0D^RsK8+YXYj``CTz{sWIP5QfErzbat013Yb5-q&0vi!a;kDp9^=yNct zdxv9T(Etz&qP2hX?c`Z}X6-26hktv(7lc8g1tXBn)*^!!&%&{<$n6 zeMg3{Tlw^+*2Fls|2*2igU#Xku=r3ax}j6NWapPY9cX{wz4ui)tjUl#ya!$Dke}x9 zm4x9J2ftr#?_QqSe@N2=JdNMQKOXaLg};BJgp50UEdh;QLvFMORk~ z**M^D4U4|GK`F$YQOS!5s2A|UJeCSV&=wATOZPREuj4fb96z9g_rmrPgaQRUU-mei(xoPK_FY5X~gS_w)@;D9^^J<+A*o7}de zq)5RCL%XoBuz8rEF-l6BR_3Znof}OJlUaJTn53nped+Iy3l9m$4>~QVQ#LT5 z`uX#xO^pG30QiH=q`l@9dLK(lpl)aTsP)NgoV_FoqB+22yWlZ-9jp=S>+6eo?ntp7 zu&1!_l!5o&J)AH_kgH#_B)NDZA+T$_nr&&oB(_+C}csNTe|26f{A)D>)VTDJR}OR&<5TXIXZZRum}-;SMl-V zf={1ti++Sd(-7KfUb9^#H_vbnQMsSVsNq?d*^O{tgq<{Gm6fS{pUE=KV5COHYS=-#Cy@ zf+dB<#l?ASyc61awY{!qTQemndU|UP=TQn;2Z_TuD*U5@%1h7f!xNLa}35Mh6tnNil!NxIYZ z#te1o8X+AKB_+$vVS*@e(yV(;zf?_3=pZ#_xP3clWo5qXz!irP)*Y;78!=*wi_}Erkn(+A*vLehOM_kiKQYk=Poey^?D3qKJ}1 zz5rCN9w2G{Wq3Gw3zWdQsiFqc??*$&Ut#oV*@P05vfu*m@$jg-&hYW^O{02X`^j59 zeTs~8fTi|jXebfaW46uTbV`>lTAnq1WO9=El*5%8yxt)}o+-`Lo=Nsn-(08aWZm$r`1qZ;pS8Vm{|ho~8x z?|1G5eBAUyi*|$T$#tUzoU)W@Q!7bKSzrd+;x6wsVeJ=v8Lwj3NNf6 z>2Md)Gw5-oP@O!x9_WXvFS(7ZBhFAQILO^_7n#19mMEH+ZO`cE(6g>uP?ageL_dAc?diQ{_YU!BHP_zV*wtR}P99*oiBDExvv5g!IPWfk zkdOegdY!Cl%j_L(&9|0&{#icHPJCMFzhA@6B*8c?Sc=3g|IV19DOo~5%~*l$Szf1y zGZ#zocJA<eLI<{{FF=3Y%sC5a!U!9&2V);mzHsw_Ao%SDx ze$2+5oi+?G^dgDlX~>kJ-GvWF??d>-(840uQvUR1Ph;qFka6C;W4CATD?ty848Zl% zrkv*uZ6C+Kd-oLpLW)XC@&BGT7y*iM6dK;RxVQmxtE!Q`HvF}w_EXa(xhoz`q6t4C zxjJum+H33i=YB91U8AOUeU^=EY4&PwW!H16L|fj?rRi5k<+V0$eSa^Wg_RZSuw`|K zd@^h_o~St(*u?MiD=RhP{BdkkoQq$7S1uTXV5U~61!k+*$0gfgF`t3=p3#m`zeES8 z80Q<)B$^AC3t^1`2Pz?IF=RbJwgDr?DP~E0OKXh$5`(rkQ$Ggr51ewf$;z$9Od3^n%FpdAlVJPWl8n zh9PHN-Ss8UpyxGWC36m_ZPaxGw}cxALS(3NLnH8>yDt&M%xrbyfVqs)I0zbwz6`Zr z_6>`_l41zxnzy;uoZW))Sco31WD2_$#LX4fS=-CYvrxRu9c4)@lDE-O*&PL`VetnX zGi0quQx}p?jVsvkaZO6$;GU#Z`A>&Qhgy#b+-q8sk2g4O=_iN|(nS~0PT&4KJGJn6 zkznr7@0o7dL{u+zu{K$ZE7!kiTwD@mK_Z*8I*vDT-5RGpsA!HF576e^Pn@g0orR2e z&oE{e4~1Qt+OC>|MOJ{33$d7f(t!W;u%x7f){mg)(A@N&Ppe1!u0-RbAw^lscsDV3V<-D zuXea*JFt9I_0wVV==HgGbnop=#a&~@6(H8j0$9ybclX!Y@!2%$ttaGl(<-1wQ@pBdwOgfp`KcfT+(;p|Apcr-Vpukj ztHyjM>2dBzwS|)GmH9?sA`2H+asV{B6DeqJb&v$ed~i?ZlYAh@JpS2?TTNe|1y%eO z5<707-+PLS$#%QFxI8z;3-^qL6c?Z{mNL7|*cr8Y?C_bxZmxf^O%CdT2;29r^Y;S@ z7L;N=CE>9JgE`;6XoIW>mX6R0VS8vq%5%TSAxJVK!W8IBF|*UNpr70{9o3^~mNhCvi-$@WuZOw* z5%gnTyc;)T*JWTnzEP4(;(baXvkI5V-z-`U=VNm)TB;g1<=^JMvr`^Pai$`S+(=rp(r%iCveSxi}9e!rsW z#*&U1-nJW{yZ0f$FGIBsqjK)7QMbe2s+O?Y|Kws8{YKmD^k?e^oX@BiLYnuoqR$)E zR!v*!TtzP%3>353qnl@sj%=>zMjoUdzFk3;JRe&7X!<@AU#K>xrWmJZEat&OTF>XnUJ>{<1XpZu02`Q@gw${pm{?{})$A`)3!D z^((M~_M!??->J@Uv>(@u@o64L)vXNMdC~#eQ?(G|+z|!UJTvjv#Y%q0Dk@P+&Ny$B zEX_#vggdOU3&cqsaN4!>^%ZSxS)h=+@r{^Wiy7~Zzlqqrty}GB&Igz&L}rSS+8=I_ zzikRVyx~T=R|WG@92D#VO%w&5$HZI=PgfxCx?|Y4$wk40dIKYc$OAy`@eYg>BqJdi z!NkJ@KOgPV@%TMig?1~>0k&6$QTRu&U{M_F$42*3ZmCmAeUV%?(?7VU(aM(ih=rrx zZ1MF_uuAvrLTk=8yjNJ^4HTskom?$erXBWxk88RCdZ;=*hpuXOK67j^O^QFsJwHG9 zI3`sT8?>&{@~N+=P&c2Fy<5{Jfc+0fe9hC3Z;`)dn2SYcZm?kUm(ZfRU3&B4^*hEh z@Gp{k3kL=gSWUlvJH2y-DzvM|wnT_BIT}eVEfTWA2lAe}PB$2p(tnBTwk`YRw5^tO zw>@BnpmR4yRCMp`tXcZ~Ql+8uWHHgs+;Q#CVu6%R)qoPSeUhE}j#d1AOmsTzbD|xb zr|M#>t_@RtDGxIFg@yip;UQ%Y_T(VKRpN|w63^v-5n&s5}Sp4XF z1uojN=!si>{{jb%xHsD-*d|N1t^Cb@tA>!beVL#eMSI2YZSOSjIB@`_M_Q4&>Go5_ zhsI)0@J29#?nqV8;Nz_nqmgWIJzR=CS&obJORXpedBojzy$T$XzrAw1Al^kDVQ zk(~|6HM|8;o`h5~6m3rG#QPn;FKP5kvN*orVxU2;3_yVCzJ}MDTr?iSqPHiRyyEaX zDZzO@yA{20sY*itY95)2EwPiwHrH&*AFm#+Fw_k-xPVf6tfb z?R)3yhs}}BSiyX>{c1QbvEMupIzz(LH!4F0VzJ=8dbEiGu zXp~t`0JSyo5tEgb6*FnL2aj*y;SCh+0}cuW)By0R)w*_eb|1bsLgGQhf)Znff{9Ib zmIp&aKnX#@o+r+*0i^1@nuH(?;Q&V`r=)+-?tn5%@h)?6Yq^r8w8@mE7)1C3XFAx>gzZ!!C$NU!s7vZFoOOxNkWqTSZ}ZX&=YR zVafG9xEVg?WPZi{I3AO|8tf?Q*dVnNlZ8ojw+16gy&!sv)TIDv{&^{Cd@Li*H@_XNF1hWw2nq;<7%e9+`Oo!kAA6Kvp^esb=oKGbyE!z}Aw!ft z^tNk0=c1QovJ6GPlZ>|JXpn96khX?CVx8ortimf9{pfEg9dEaY`-KM5g=C3JZZn)& zsQ9hj8rNt&f+EJ-*vB;7e(vSY((xIS+U?Ibytm)BCO<%pGzw%hkUvu(Fk3de>Rp*8 zUVD9{{6UBTTipFmXx@#oiwqLu*R^1Bf$y#P#KnzWLzk{_LyWk&9&j?5$6yc<@2a7h zVLvr!HZ8x6hTUfog`vdwR6@2^WZn$#jeIv--=h1{DEmm3^VTwo!oh8+P!!`pN0R-U zWq4Rh-QqZ8vR@f-a59bZ?i3BWB^(C$aT_uVBIT6O zUnDoAK$;?;ks=u?M+z0;l!SXC#EawsS^>HvWj^AV^*02G?Agk+nF1;l1kGy<@=|z5 z%F1)iMwWOLc?4s9^78L8TO=s)_xO=*WGSTW)nQ2k<2>ud8He46 z{QVzY`OYNF5RZp6#JUb7klQT&AD=%U;dCNGD?8Juj_e=EejyhCb@?u`=1L=<_|jOn;@RVjha5G*!^OWE=zK>8LFLdPblV|UaV+X_QiQhF6(bL zN#+>Q#BBVh^6x+8b~E0{y)(V6$XW!y%yLYnf8&7x_;c13QrSC_Y z+L{_|@5eTR?cXY}0~j9jj>TqZehu%Nz8e1hvR7Ao`Qq|;`03Vq!|~U_ZOW|Pr*iVW zxR0(g#e9>&$yPv#Wqcp#Xi0QatNnp`c>v?uN9IQ(uVQl!l8EAB)E;2ta7cMSR#jEy zYHIQK->4e@xw?e$oPBX-;P}v>%NUEKKb#MrT-&Sv4^F~}lV zcIU5u7rgk+F!0xq7_VIKzR_;v4|crHNTceowC9@Sqk6l)yvq`aiSdn#?RBoFCN|XY zzNrY*)f;fSo=u|?=u*zBs3XTIQf5;UIrb+KE#DgZ#n3i}%tIV+9{ws0-%Ey1)^mi+ z`KC$v^M{RHX~i**lO##;JE$yg8Q`IpNSAubarck&hBwNsJ`uQz!~$tu@dXL{a@xY_`(T`jFI+anCM9Is;Eo3bMT4^b8YyrDj~%U3z*>p|ykV(hJ<8BZAUe1wd_X{TZ^(THaTiyeGlmd`^FHN}={V`{!&MYn=*>zS>|ELPj$! zchLx59IVG;s~$~;hfFE?nj^Ow%d9%@?NtTdNFO5Wuo2DtD)`Eg-BF{MXu|PfEy;FW z>+rJcLlnib3F_?Y&O$Vfk9IL1Th>A0=*fSZv$|U6x-NT3NTK%V9g0em`|Hd1h}5vL zwD~!TX?ZVd4!%`+zh-%_fA4{krCoZP)-hwos0LMXG(xJSU` z)N^}kIr|8HmH5Dfwbk5QMuWa(*B*?>5l5<`>&2~6jAC_@sMt`{S#wAn5;5!2YgC$?{$ogMfDX1)< zMd4J}q#b$zpm~sQh`^R>;n3{UlL*v7p;tl&wiaXFam8Mg-)CH>hrfykt3JIMQoHXo zqX5;#`^8-m=cde9d>b2-kLpVA^KJR>-+v-UMcNr|bL*kdgIgbY!{>lA@D+d#ux3b| z9Wzt>WfA}lp`SkpbK=|lrX$bEpGWj)8TK|~vy^`NM4F&H|774GG-#Uw&1~C=_1*8|5 z&~*b?@(CauVdKL+xR1QEz+r+piJ`6G!*u-tI@&u5G0f36&x%%lr0IfkE$Cz}!t-#f z(ZO*Q$%IMW9!O}E!|?WK>la>%eePjqPFv6Xm%w6FLD}@M^$|yF<7c_AtN>U6qMEVW zm1*3yR)1NT4N}M>{3;lf@EO_cqCNVX-u-7O|K#I-^ckJMHAyMcoIcPDV(%~uuemaq zuhbS8l+vdR)@ywbcncm`qU>nD*7C{H%;r7TRT31E2t$vV^8@o# zu`+jfU>|9~$lvrE*XeSYHgs5;wAqM^pB71`aIfFElm#WArS@08C+JS3KfWu65pB># z6EfM%?X$X~@ZYb~t9G~>aD$4K&Flu%V>OqT27_m6JEvk|7YC*(0``JYQG%&uv(Myk zeGW$Cfp~cbrYMor_um5TdZ2>+vlldOV73_D+XV;+OYQ=jp^}?c5(4c0OIsFtUC)SsHj-MeA5*_{IFxn ze`Iy7@Dr=FJi8R?c&%1 zBA-xboRO$Bmck76`=cO1fNH=L>h=`o;9+@la|VovV2Xnfe1W6{z@At*nlCTK=pGM> zL>z~nvh~y3UxwE78OV=pp}B`kknh*QF99v7UtHlp@j!arEDgu7gf>Uz>pVGrW$D=S zM%9TwA{V@WR!1%M6=6^?XBd7V#;mR(sQ8k#@LKvR_vX^^ZRQH>NBZCiL#x5)Su<z{G(sMu{I0b6bf_NHfUm0g=qur`JsYP64hJrxwJd;TtRiQUS7| zz4;J&1lvXV&TvLkORF1jXhQC5F_yUIr(ZH8eA7tosm8>|-yYBbL_L7iZ%=79>vEGZ zdfUUm5{AkMjtQ0z$sNc8Iu083z;;3eXP*Bh1vJ3*U+?GL1cQj**XAU|6(tKjU$_HS zbL*oG^CwQ3hAffi;Q;FyCDZ-}Kc7U90?S^e4S`?8x-(v0`g)c5eFKPa|) zE=JuKf^WkPo#*@yA6^3@8X#`KaSpeMx9EKf3#~tX{Kx=><#=y@btw8;G>vd4fHtho zVC#{hA`X1c|4s8LcucN$&B2L*7FrAljm-Lu>L+5!g(A{#`(k+!nY;&SmleWP+fVha6aOu_a(ls_iGnV>JNYeBwNZ5eWAK# z53m(WYirk?Icdnvtr~i0Bml4jFr_&lPa& z*WVvL*|zB+3X1D7fe8x><_)F(06YT#2!hjrA4hd-d5P=^8_B%}65PnS0m)AuqwB^> zHb5W}R}ktFLHOR8;fD(KJ4dP>kqyb3CAC_y9#HakjySlEkjx z3FK7vj;MTFI4eX88u;}6@Kh8576wB4uo47nQiRBc$n*o~1-SjMT^2thl>fdR05R+W zU~k9&a`@^Az(ElxGJtgCtJ8;9yB2p5r0ME!$Apq}$MnvR-UIU;mUZ3YG zXBBfzlv&NJ5qCe|R5)vz9%*{Wv&VU0GIc>Q8{(W&+1|w8ZV6wHSY}Vqxy- z=GDKOnWE3<023XxbBYq5O)u#uRyX5{2LuDJ?9DiLT?bI52Yw*`^!n*eu7Gl;NU&;VOGUKb!7F_0su$c@+*_MID`T1BN>M}G)`FPItUkA#=kreTlg1|Bt0?7#kx3@oZU+Gm3cxFmb4|W8{ z3XTI?jIsc1oC9m*|A>REysu?K}}5!++4T_sczr@^v7zK&h~^P|8}4sNf@50tE~?a?qX{1$zcJe4-=B1fEgo9d4}Tp`V`PUM06NnnDzktgC`V2 zc}Mne2FNc1JQsd^5a6*5Kx7mKT3KVMJO;<^sgKXedQB*gxhX9$#0INMdwX34gg^vvwM4K?d*;PeB2IUqE0NYBXnfT6^19m)meBGXa&p*NMl4h|oT?`3d0U z9*}#OZ1ZoUc?m#IVpIu?iv?*|POOn@wTbN>e`}P7q%lSMB0G)PWgK`#Y1@ab-(CIB(PrK+;Ud3J?3(~~>X$W&Y{!Sqrt#bSQGB85WnV5M z6a79(#4L(vaqYjTcPc5nqFG!hph=#W04=v2i;*il?#%)${RjR23*9&%^J-cFcxi~M zs1R|;;d&<#{DsH*9@M#f;Ld}Ood@EOq`w5bkchtuC4ydqD-%4=4(lqHlbt7^X?iD> z4lex5?G|}gSKh`_xAPMhr-o&+zO`WhU;|uOu__(z0e~AoR1)valc`Nf*c}4uz1Ncm zf~PmFp%y}%Fe20?e9dhifURgCV8Y9pj9xJP(AJ9*tNdyX6=0m5tDauXG{b$%pRdlj z!iTfaWmapLlp6jJ)>XPqNPM!V`dDN?w^^sl3)JP94~9>_#N7FJysZRq+3*~*I#CKS zON#w>rc#gylH(44D>8g4aj}M;MzxNrFf8<-SJn7rZSgU8z_7$@d({2QcXhLV=?hBa z?P|hqydf32@;ke|S#t+i+$hPS4wWB@sD31B&rDy^wf@`{kcduxFWC+Y6&aMX`!CZD~H5U`h+ zdqeFs*K+)O@%)sLlu1feRS@FGwVq_EF4^&8g}mC*KpqRZ{mZmyn~yI52T~6L`Uesc{>->c zxDst7#3&XZLD=2%yr8<8hP$Q$GQBwfzPrAgbstmF;5&veHws*&OAskn2YEsO_yF)9 z+)@=#s?!{!0=`;Ae>K~38xBAP#(PLh@Xco}L*=(*R7mvDEBUJG-FL;_yZu@40u|oV zwXVk_0zzpnk<*v%w93`ItsX980m zB1caISE~Y)^5Hq$j#K;y#|7}#;K)uc{G3`(5pF=p@TvuD4FDw~7w0QfK3ChSOz>_Q zrI}4B2Gm^``Y&d^$N{CY_-NM(Dz{X=Guy4UD?bLBT9cDVVHyIEFZX@@lUT!o;LWb;^ z_;&}E6TTS5oBCneN4M07G=>K%sTm0`rnu^wZ*P3~RLA9 z?L>Y#d?yfP0zZ8M7mYpS z!Vx43hC6&4jpoFME?@GTVT|sbvdJaR#ul0IgyeL6n0jvS-0`&$Qa2jr5Q{~go6ohD2}^^;6U)PbhRJyn|Fj&&Dq@9)4py!@#)>A2$=w3NX-ckJJs z9{v}r^>;;-^u-NzAE$)(Uf;?l$juJZ2o+oW8CiG!{JVazc|QOyAin_in@5gTltEbd zOZ!}{orLv)@867Dshfn9gwbV+R=qs);C4@=rc$I6i7adTt?27}8|%sHG2|LQ>A}nq z6j%v?(M<#K>>uYlU4(gBKj)pHgCGN;3>vWWklP?~>oEsT7pE&Jch>wgsVK0jC#kvO*OH@b&Ly`7mN)I@P61UY!m%AB-wt z1WEt>`?nq%0x}k2?QX;3UHiksi7Sz5)^ocjll8lJaq*fE{t0_}bdd%EB_*Z%)(m9r zqxEpFDJ7k5Smo82Nwt@e;HR85>yyzMlbb(Gw0ytKVb1{Z;XSbFX2!9sFlp z{y_=ZT{fSJuF3SSy2fS3e%{NAI2p*IUv9fvm(wXdCz1)dIIH^O{Fso_m>r!~r={x6 ztBY&d*Aj`ojRM%VSg#`R5257iq2G~Qa|OVQ1w=a{<_Mc`pk!N&m8X-|9$LIb_i}^B zmY`r=1nvza&*e{t=}_K*0*cr0&_g_o-9~YVMgz^+Gu(yE|p2yQMp%LAtx88w8XtN$CdZmIf*5Zn$Uez5kEvx-dI4zjNOA$qY_QNS+#` z8XJ7;fcGc*O!64aPGGdhd{OJ+Rh3#5a{l`UJnhshEO8)jciUB9slggM7y-2q+;%{= z4J0Ly_y>sh6a0QK%xC;0^QXO4?VO0wZ85*(NeYkcJ2*4h2mQ*B3oeeNH8Thb*3f5@ zCJarkps~>~)q1W>1B3!=r#^#u!W6(s7ZD)ByW2Egc%XhlgpukSxWm$55z!h1zKUq> zzxsP6;J#5X$4UNilfNa-O{lLi7(aZ6bRrwf7W^*7ykeGThS=ne`tr1|E7l_7G25yk zgq!udg*7u&0dD$awF-tygo!yv(I`%`$0JY4N|FbGk4)$t*%JByn!LBZ ziR8=b6q~sD|8Wln;FF~7(+Rh}y8WIqhSwqGjD*2r^Vbtg4U>Sv_Q|Km(2ao&z{XZC zILJ>o`h;w78==MUrCbr)O|3{3Zs=j$cd0dAH{MowU~zs*g1r3Njppl%4v3gzsOogW(8FOzhyC1vaOFB>zXSP~Owt3!cWoI)0Ri!yQRclK&j$>fn9etVcyf=ust)=pt zv##-UMRK|ZCwmPluWG$7AW#n26P=H3%gSl_`9qln(KiS6Nk~XZG=lTjaVWnWxj$SV zjpy2bno`#25ACV%8@&FjzvRPp#p~ zn*^Os6y&hl3USFnVlBZMqyv^K3_@S~`-`2YhlNgBV0;3HY9jCy0;>AMfB$U(@I}AX zHA7VN9>rsAEz(+ztoSa8aI)v{?bbD1aeM+{`y>tv@mW0T>tn$41R_pW@&rx5bpjI_W#Z?wb@jY2#9)stg-+&NzQz3 z951@?6oQneiTFO$_&tAt)Y)}DFLy%9JRmp+fbIaCX$C+Z03U`CJ3a|pB99j_Y(g=M zRF9;NEfXekgawHHdd=g@RSNfRQ&snTo2Ruir)9W(urx93@&77fK_5jD*ZOL+6BV#s zfz?NSJR0yg5rF^~g7}h^MAaKI^6@#?sio z7?U$rfC6pDJr5|I^;&W~+E-b4og}G_L~=$VdTGw8%J)27Q7q%!;;99h2Z(`81~xpx z3vfD9nN0Cs3iyPBFggs-R~SR86jqIDP@gfUwXIv>)O7b---RPp3MkATlOgD=ORW1w zgmQBvE_|cdjSs@?Xuq?EzG>vrnVK+o^cCgu)${7GynPy-QbMhhqOJmP%p?GKBg7B@ zih@EWk_|pFsM48X2si`4HFM7wpfCS&d%}GDES(F223A0=_VfgZcwq;YXRxb)@H1@s+rZjfLV2K#sm!!T2#Xx6_x3Ou8!rk|hF^yKz=v;WZ2*@`}- ze|zz5{!&b!fGmsWV=_M@@BLQ=2e#wsk>}x>ETS;-GS>B9*~kF^_Z+JYqb1*-cFw!~ zswxcXb1;xwZzFak(eowgML;$0-6Njjt|jXM7e2&uU8s`R4rEYgQG!+nwDDIfg zw98tud_p6UvF*Bd(P}x28$Vk2#?c52MvP1N$_1yOcJ}bjsx=LpF5YQ|%%QYne%35! zT<|0K>hb6J!xRjwa-%D~c+s+s=RwZpbP;=mI6QyPVYVJ3DPi zFY`a3W&+Wy`T6-!8XEkd(1tV~F>5Rgz(Jt67t$sm#`lm3@{B=43gn-BKtD0~e(1+_ z0`Cr(c)#5*g1$fi$~Mk2fY2$h`hW!XJy0pN0o?BpN3WKaEWjw-+YB<#{}H{L;2-UQ z|45L?k@_dIL^C?4?EWo-A=hfiw)gFEzFxfd;>9g0%Dcr+2*hkC!Ctqs*vP~`$bog~;Na@$PvpP4 zawGah;<9w1O+Q0_d+tm$>+s8#!*K_$*=7~kvt3(9b_TC+6{De-(g4OV26BQ~UY>kt ztx-k-zR%=1stJ?0(l4g#G@&yA*BTKY zZ#kC9jp-*2=@V?(%LNDSIY2gRJ|o3PlazPHZqS!EE1_Lq#lNCMtsW2o&{9v(`3UCf! z`+#sZQMindhApuFfDZw*2fX!ya^UMR3P>(>nLOJ(=htbrf<~9mkk>F^UK&*TJbLW$ z`R=no?6pERBT!j?Omn{Ue~K%)P*uj&WY$xByb;!ZZStij(r2pL+(}Di`*KAPg@kvvIlcm2ByCGs?<94~4nwAQ;i7stg1h9oI=mp$}c`&?cdg4iWs#pHw$BT-zQIBr^%bWwxS2sB-y0}tC?R?hPG zAI!46KAykEj#h6`VG%R-aF3rX9Mc`A3K|DyrN9veKt6L{;EINXHUVG8d8Jj;oboMsXQBe*-GIixVOBiVuOU^so!3undYPLEFm-(m(dmxnqW-7(jHGUAW# zZd;XYXH{mk+;{p<2%c6*&um)BK=VEq2)oTO=l6z}i&EBF!Z0iF9K|Zg=iQJ44(|Js z2(+m9YJT&#uV4qQciNW8R-^-$AtePxpe(7E6sg@aILyxXi{hQ{FU$e12!?srf3uJT zeW24@x|!2NxH=f+U2dGw)(h{Q{~cG|$Wh}cI*ywSuVK2A<;Z^0!H!8h+}-~8L5`G# z(5E&o=-Su;+7ZVqGs{02cY(EFev=3^>Tq7k4&4pw|`SHT+#WC`CyjX-cG z;O(DwSpA`mz=Z};vjI(mSH~xSxB)>MAiI;mGy*P4Gx|#~09`DvzoY_heM9D8Sy>&( zkOn^m;QgRbSuvYW97uRT^2jdu>bf2+CU(ADSA*XJ;#gx^b@lasZ}oqali!~>Uzy?4 z{gutgusgEjd~^D-NKc;??MO*ht)Q_aG7XPqm$$PcaO-37e&*Y{7mhTo%O=`d88i=l&zHAstntyU2Ad3o(r5Djn12P55Nfh1%;6neSa z2J14|6VbtfPTKKw@zG0W5_FqrgJO%7eQ-~KK~e}{eE?bhz*!FNU#EvF>*23J<@`bB zCXy~U;!RzR_pJlaSJU@O0&{Tk*RN9GA%aAHoDY)ifxlq{sGWdeCNdx<0%C+Ip#OpN z&VX6V6EJ4xLzdzxDLe8xJc%J4tAreO7)66I8}+folThJ z>9*$6SM(vhtXaxm=m$~6V~!4Yu;`-f;lAOVZ*{nXpv9}>2mTO+(V&_vr;fcz_S7@Q z#vWK#G6C+|s{>i^czHgZ4;H_*05lNTKp+WJl}|)cqW&Of&UJq>5WJ0GNgV>6j^@pm zK&bXU-z)na>#pQHgu>uLQgL8}}aygY#j0-P-ivg#nC#VpHATj`Q1?+CH`Dp4eX9wCl zJ~5z`0B3zMATc1%74MoSELc50vbOgD4sRzLQ>+|_*Z@upNz?;w$Sd5IFV_s<)f)js zZCZ2>urDCfC=Q&1Gqt9&VBMDl11D(kpag#iLSRPs9l+55!D#`=F~iuwy4psQ#37WT zK-`r7gKh7i1*jch`Etf1dL#S&s)$AKm~$s8{U2b#zADq#;sOezAgIT*{w<)QAqh#T z;qu5cO<>d#aBmJDB+XEiw1*G9FC`GQz==E;Cgk{xF+-jd#LXU|m&_a$NQ7%$kAh+4|@(vLHqxU_Gp4reMx|i%!VI@ZN433~*!+-6J z43xWs3!XFw*KQ9cay*Ev>9mJ|DSt3WJT{8{Ho)d);yEXO$Vox zwc?i#U|?^Kmp=aUHKitq($|t#*r{w<8_DrllY^ihKnnz7Qd6d$A)7UG(~1OOLn04*v; z0Iw1A@ezVdQb5k*Y=HQUcJ%bN-l!V}L}^Kb&+%?1@1+k!y@Q0|44fpO2#*6t{-|UW zcpjM*^bQY+?=O?<52jlL+r6*NC%XzNp6@sr7;U^Z??a!?cbE5 zV%A5VekXDTcDDPB)s5CdxB})ULyENRgkf_o}5UiqCoJxbXRz zJYkM@a1n1PDsh2(zm2V6s)KzB*_kh6Cj!A@HyH2uzc=dASN>K)L(I$54x1b@Hqa%BEGu>P?>Tj?(+G=4cB7975ZTs>>@zTiH9hj{q1rRFj zi)3GKkqb^&@Ya!l)LzwEF%Nq-* z9&t`^00VyE|JSFXFV+nI1MG@2R_cH)-D!CbG?_rYC-YxKD60&3 zxFGsXz$<`+W3a{Qwa+*-spx3*oCq)TWoF1s-NSH64pwK1#Jef*DDLber=?AVy6jn( z{h)Z&Mzcb?6ROaCL5LUT3Gev`a(q7R8tI~$7th`KK!43AQ}#0I(H42x_XXnk-iKJ? zq2D9@yH{ZgvaoFGin&8Oi?vK3+V^)xkVMcI&x5imN0ZYI*xk%;5kJL>3oEi=!{d{( zv_6&4KkiwwldPZ^Q{b7N;T#&~9|y7elwGAI*4bdQq~!XU zFpoT0Y)u4dE&%Waz#^3~5^Ed>0bj@ObwLgEihxv*39#r~pMd<4>plo5I#|p+B*%f~ z@Rak>AN=pTvaig+fG-p~j~?^<~#ne??u)A9$UQ5cf13CAs77CN+T z?x$UE4sJn(8bGCo!G-vpzB=*nds)Epaf)d>P+bDz7-Ay=NLL7FJCOSTvIZ=O&VaG7 z_JiN$mjH?b%p@1~u*-`J%5gnxSMcmb@PPWpT_DZnhzy|IS_}f84J3xk?}-oK-vyR7 z!{Y+owMWS~pBPf2x9(l~0Ro1{wpVK%W)s((ztvCnSw&56Jk4KE$<)-hPam+BkXC{V zBOQ>)!aXXHg;4TiA9ND)`BEZMM6_$Ge^>*hjd?=S)=qB~vx1Q=Cq|hozTI)?$WFh1 z-w{w*kQwyEsjkjdKv?qe`sF#p*`Kjfbs$5{EB}WXiQJx@xQLF9?C{VK`E8$5opb!m z5!XTpxB+Sb1P$6*DS?mW8$A+GY3zWdY5MnA*)xW{I}>A8%oWwU(UFpUJL5iDmxCVZ zxNpU>`nJ}ME=-JiRZdZb8}4o9dKUjT`^YpEsG7m1TXguP54s&Ja2LPWfT-Wkuj9%C zcy}$p9PzEVc$l-YFB{~dY=P?%sBn|g((s*fv-YdOyT_v646-=L1qB67M9Rw;Cb~e% zg*hN=AroUx4)b0;fuKn$#p zQtg$#q|qRY7oF_83r73R#u z!U~?4gFYk`gWE!87uhJk0lOPw&g@Ky0 z6PosxQo^_Px3Z%6Il9*RlBODQpEf1GhgHjdNA)M4e2CjG9@CSelNDZgSks0wY`4Jd zPy9*-RiY0SShayjE~1RdSPBv&j?c{U zGJP3}wIBXk$3B=dJKpi+|Pr$vpoN6mi7kQSmW~dH) z7lV5JGhlpQrFW_3MXdq`9@onK{_F=rSXB@a+bi$yMlPr{)(ASIC9?i$`aM0qGx?h9 zD=HtEsQd7Q5#mfzo2;Q)M|-O3g=ipPJ$5gm|4(Yj(pFSQJm|V@?tJC&`akA3AyhbF z%j-gX3)^nw^BmQ51neHy5wQ|S>*8XA+dQXp>SkubjGwk#xm^Ta;Q)71{Oub`ykJ24 z($%JO+i&2?8#{LYh@cwa2F+AyZ*={!KFLi;hRlPi@b>LGzO8rUP2&sRedIZ5+>n(j z*cM6SSqo!f{FrSp(!W_Fbz|(`dXf-KH_yJ41QEXj0|T0uat+bf`jiFiY^QVLT5Rfh z{G_NP>ZoJYTOOg6$~cY~os8<58sg`Xut{!e^c%eQ83FvLT>$~hLW85H?tul{&W$1R z(qk&8XP)QpZTiHg3v;CSO*2}9meRIFHeu;LG>Eei#9)xWMM4P1d?xdaCwMeji8!3U z?3K!p&eNNys@rAGtqt;pjss4n^8LK|#)umQtnKsVxR02pIQLN(+R!{9gJHD46PYe& zk1w{Z&WBE&QIS^5;ZSvtwuBc32zugGd~N}P4?5=oMEr)$ey(-!AMafnf=+?UcZn_< zT5M~0zAzXW`UvR2Hvlt-*3mRnG_%{O{!7VBc_VFZhmjF@^>Mlvr6%+(&mVfnEcn>} zHkB{u6&jcoRQCzbSu&Kq@f*8l{JCn0g3-w|6EY31m>jmmRIqJK?5|LcXGe&cKc2P_ zl#Aj?Zh%7in41a8`;<^5c2K>{rRiZbP_nHG5?(O3X(S|P2b!Zv7wlIaa~?%a9Gao& zD!abExua;PEflHCeU(a}IV@=U(&*-{vOR*aU3N_AlSj=tz5K!C#Sl?v9oZ~$j1frO zA&R`pkn8rIO>G~fy8onvN#o5Jr0$Fky({*zq>_y|;EHSs!h8%hG%~6qN-Sv9lB$PK zfrO4gW`9yCC172sVeX*D82;HI9v$`UKG-U=WszQ_nt$F6o-33$mC5*GHsj7!S@N*i z=t_aDh|_BtmPzM{!{qne?3~OZsOlzVQ^&R|FeR9@^B6iHo9r3QoHdVGAQ4F={FD1^HBir?W@F1BVuw##pAK=?stXk=W~VI@?$XJ-lp_A%>&+%J$E zFf!!Po&O2p1#0F>N&bY*lkyup_X3tQJ2MH4pYZRaVSxiKo;e_9BitSHjsub?phPmu zC2bZFbZHNRV3%jPB04twe@O*d&7J=bN4DMk(mySib*n$;F__b`W*as(7lqa=#ummS1S;Sv~+1Q zla)FaAL?T*G$~gX;q2#o4fU=~)JzH|_T&Zp1o^KEhbdX|Yz=%7FE)+*-2o+;sca$_ z`<_Hk#ecK*J`GqzJ2)i;nH%PM;MR4s>chm<0Rz$7qWNyCrDubWGrH%^+A_s*+Z?wSXz zo+MACTTn2RnM4IPDEs~rj}35`Q_Vmt>Tx3C4yei?Z|dGbSuHL4hoqQhJxYqweEyjI zCSh)?p#Ykc1_RACC}@2(;-9+_oUeYnE2isrmLCJB9K|svv9lU#&1HloaPwcsGu+(U zo+u7%2$Tsi$<@+~Eue#-VGR(ac{3<9IE&kN1u8Zg(x63@DK@yOy;t0YI*?p5dylbZ z&jnW(563v!f?mY>nz7_&xLV}yavYYv%Y0w&_q@LQbwQXnVaZY#wxk4|x1LlGx2we* z@Pp85V6U+VG5_K}m+yhT1iGAI|2UV`pgocgT&C>Gd#6lf@Uf!vQd%&xB(Ee`i}g*Y zX4GLwc}3DVxpJj4ek&c)bYkUZl_5k8BDO}=569TxVhwCxma9ITeCB6d~g`Lf(xHXyEK}7W#LlaVH#K4$+iy#yd z%4GAQhq%Q{%#*Vr_msLvNcQ8!m?sQ?RT6tM@z=lkKo zdy^RiBBFm7^Vn5lQ1OK!Yj}8`zK#?b=BtP<@o}G@=6kO1W#z1>D?8zz369rw(`gNH zQr=8V)!gfOPEG#A2*xi2CNd;se>^_IJD^6@@aUTV3N1 zf@RG!ntfgSbo({8B(ti?B;WKVz&0SdfQ433Rmo?lZ`1oqQSom ztA%Xs{t^;l{7(x2bX%A~;ivy~YA2X$wEQ`C2bH4z0BM{63;;Ww926{B>+T+q^X`s) z>PqcA-8dNBySVyo`Ch=AyUz)MVuNn~X91&v7^k=+EK43Cq1;e&r7qUtE>>KUDJ{)@ zntauL=X>}JQA>8R%BPs9OLNbE1~G(ux$#;R+ZRj7%}jeS1gfx>q}4bGvW8F4yoT|F zk+P`G?CNAPli_a^%9?TKf3;)|Z_@(YNhI4ao(VJ^F&T}0gG9!ynQ)x#o-lvYE=ANn0_^3-vtaK84j(N|Z>guJc(QJEmT<-EMq>Wdt0_(|SxQwQg_m5{GH4@6aFtR|0oepTHE;7yLXG~$TD{gU}E5*rXpzJW%N zPf+3K0-rpnL{7)~F|~ikdGk6ei3b>?PXtMn<nKYUGV z-1VZ~%H5Mq-*vu8Lo4lGvR3aI0|wg}_fIyLt>9mcMig`$aX|%Jmzfg50sko8{hXo3 zyjf`7mCo{&YFJ0N;PB^zWP<1pg0Dg2{YhSQMa%%YzrPg>ksnGwS1AWd?`*`6)`ZY} z;#8L$6cVa^c!Pqfx|nFK|BAbYkDJn`LnR~@7Uniw7ggr+;dC?==F#DG@{Q>I)cff! zfda+T$MF5{s2+yYR)10BKsJ&mr^nUS>L%JwrIbG)E)4>O}rdl{o2`a|))qVG8r%-$jZ*r-Gr?{TKTRmri=tOjrstVU$F;;+58(v4jvjHzjT~bVu4T z-emkdpm-m0(oJF~4tu1SXU@r4%#=wKXq)az35w6-Hrd6N6`3w z%s8LGKS2QjK7kl$ICZ#TausDU=W)WX*)C{2{Cl*LGhAG*-(1G|_p}Z8*O6}hI{a74 z{y9huvW++Ub+&6VmqnN9HH{13We=tbBaW`0AB?U8 z)UhKNVt&$S$CC3K*r>jt?qBU%_NHS$7;bh-tEviY2%%QLM*3H7Ta%e3TYGdfV7tqv zH^u#3$W?{T=<^%;2Af%#c1uznxbi2=(g?*O_;BpulRrLi{3L(b_-hDPJKIP_UyD4w z>@6?DR;9u$sQy63%)YOySu(TM>pYD7o!$^8{mCaXZylF31l|kDe|73lcw1iE%&CKA z?}6(`bd{h0MO3zcbI9Cino2@)bT5MukFL;^VK}zZx&>W6w?J)k7+hQMq2+ju*@;k+ z>9+8Kio|#cQRRtzLw3KjwuaFH#^*z(NKEM2IZa*|_VOZYLb>|z-nY6raw1jzabqm7 zy2%;{^$f+?!|v(tawB5ZEDJdp^D=`dXSp>#@F06Qtdg^cBz>FZdzYl)KHFj3>*5%7 za{h&H`TA`A74=cctS<9K(c|x}sJ%nYUfkM?_d6&|YGS@IuKARatd^`z@`;Zg$H7N; zkwL?_-;;if@R;f5%}ts8&XhUPk1LMAZqkm2#jKY^a2L%!u}7TxkLr5V}wmGa#BZQk6k zY(ITYI8mWRlpq^PXr|2+#CUKEd1V#D1Btc%utUz#!p&o-s!TyYb=V|omW3uNc{UTh z6XE!zO6k;|B#$0fB+(~A!(U%YwwpPZ*LhxXkfb>a-ZnjFFA^!hVklH^-lE<-RfucO zM1P;Mf>@G)E4!q%5r&SIT3$V6*JX4MVcT-Nhc<9>0}5Im&+A;$HigEF%>=)!#@c16 z&K=FNoi*XBK}dHPUE3sAaxri7oc7AW{s6HO_=c@^eo0AW&l}r1yK%|?xv8ux7QR9- zOdCW!6vskt+#Ly@Gt4yet3nZdD5=I2*EIlF3i>9Om-lCR|^V9J(m^cAT6SvzxtMo2tF)9q!Y<+cHcsrcn3MZ0)#x-6?OP z_~0xdZ5RWGVgFqNH9{fIx+ZX(VPv8b&E^m%AY$xWvM3e5epNL}gB?~noL8a~{vV{E zfMF9_a<=sAtfqw2oV~-oD@MmJg* zQ6*hcG~7+e6~9Ue)Cl=X$Q*+#;}+Iwz2A%kguPz+TY{QdlP--;@6s${?%LXX69k=& zx-l83R-*A=)h(^mr>)8E;uWM0rS@_wB18h5vTEs-m3CStycR1hwiYx0od(<_BiRB? zuYih?d`Z(u@7+L2S4x5GvG<;6Q~l`uu(O~G4#9;5zxvc@BA0ok12?2ph2x8z3Ad3< zHTIp!je{nupoFp*xselY%qX#mv~+)y48@Q*hq z8-K2m&337``%Zqq*6LQ~4lVX_k={P+A(V?Ee%@((g&X1^ip|~n{8RUt%&lg1eaBEK zOLf8jS0tZ3?SwAL2cDy(hyhBY+Gx_!2@Bg_ z>k0_`$SiV-D{cWWFnCiz(q9h~{XA($(Sj7w7+L~SsYeu;N#SdV;xCVvib{4n&@;yo zRebthZm=`6B=*p-TCCeHE(g}hqb?SCuhC;=>PuyQ{NTPBdz#2>o9{DNzxq56{nz_e z1u0uJMc7A)7$xjYsZJ*i4e##GS@}f^F>$xfVzq=ukoOLoY?i5Bx zBw8WvoI>nUY7-9ufT#a~lhUW5MibP`I(p@kq6=Exy%#N|-okjjCTxaIG^}>yaqNt5 zIpx0P_G->8f4{F`=4CiW^Dlu#G0S41aIK<<_MY7F*_rg(!BFB4`Ee0rucqNVPh#m^Dkm^m}{_;XF$^Gw!=TU!Ya&;h~9~&GL(@e-zcxN1tu50Uh8Qzt7GRXt+aPtI$~WrD^ywpxcW9U?iqYd{ z)QqfY5#K++1i_r&-j+5t&L{WG*}8qBE#1Je`-+F>v~bIli0SlIb6-fYl{#>aX~;+& z>#W5y6Mlv+-|;(w%D3j45Xo@GTC;vUCdDN!rMP%18lLRF^fz1ECPU-Hy+&?Eur@#O z>Y~ce+R6UYcNVxtqG2e8N!D~AC%`@r(DQ(ekRRz|W$S@;_$h-Ng@8&?VEnDbJRvb- z?0^$ryTKK=R*ul>cVTH%_wHnXG}lCnCVKo)%aT+GIZ#g}Z#w_K?Iab2T^thC5Ft21rB1X9b;s2Z>=kR32( zR4j4izD*7Tg)yj67bx`qjVqw)0@S32qW6pst5}Xm$l_`&`v3a}Ax2UN7 z3kzu=l;6k4C-c1&h!AxZAbIO_E(Hgt`pIx)XU1}|&Vj@UQze2&un-mr`M>uJOmvi# zfsf)UUo{z=pk#>Y8(6wA!;?3%co%CeP+Q&~ypdsKpL+Wj|EsD&DJ8W~l4^E+kaCBngxs$o5}V1=Oe(7*p&=5!1*u}}8Pd^v&N~lY zTdIX06cw)~SywcHx)W#-L5wvJ)x<|7mXe-%PfGjQJSqh+@y_iSL%rsWTeZ|jqDNai zMNnV5dW6u7E8!SrLchUbbox_;Ye(g(^sL=DfM|3YW67^<)Hyq3ru|1w7P$)Ugs)EcIj;h>yMaH z)E0@j8N=y*RN75`$o7J6X1%S~eX@fXxR@W~9bi3=(k3n**4IlcPtp0jjYWxm1`_l7 z5b)FqDv7KHeR{s&y*d^AnlK4v=gw)VXt3#6-MAG==hyw({-Cv6A)=@nh%NO271`*< zGUs6BpE-!qc-@~iedpw)v(j-e_EqKdJnPfX{Qgsa$-O|yNR;@^za5fHnZog{Q4AOq zg2KUWw(}PkpA5H#*F`|g!gJ1j{a!+5I-H`i)&jdvmr{(djF&_D75E4{B=Sh2)EX;0dAg zK5U?Ei3fW+unEL3*_Cv3
9d8O95yx7xyxwF@D5~BWGe)yRyE!DIe)n?jh3e_z zobGP)qrdssA6%TjCCX~4-MM4Yo+rG_o)`Gco-Y#J3y|5ID041ug7L60O%?A{WM(feoY&c6%sKl3F^d9L=CLv>s%oPo|4lCstEDHf2; zK$X1AfIz(;et0j*#jLyz;G}DX|2hq+u|J) z^ zexDrcDKC-C9v)Yu|H_ zLraiAPRdlW1x9jG-0(lCf_b389|ao25AqSc%!?ZhMDIrw`%Nb6%nw;^NQ7iSYivY~ z(H26SU3-w4^?-7jk#_0uU+Gz+O06J;a5-D4>IIjxJ{C=T-QPI@Ms@)brui~IzUit+ zN;sn&@-Wd*{v#DopfRTKSZs5{UZYb~HBd%yKNImuR1$qb3GSAXQRH#KXE8dzFqaw} zP%iyW2b^gDqK3pOfP}rtGVZ7Qr9Dt44YR;vP{PKG{@Nyv@{S`h{jaLJ?hlou)lDds zjq#LAl#{to{9L~v{MRcwP?bodS@}o8D+L;wO&e-BP)9>j$CzbFhwyh!Q@~+|N2KEL zZqz3>D%!DAOAkK&k2dM$CrdGWNA z9BA#`|Cy)?%viAG+g87XNYj{NcK>yCoT8omxn%cXf^b{ym8_K=4QGZxGkthm6*6c} z4%NcW-|+PO(eqePUfu?YC?(Uo!w*;mV=pbMiyS^1HFe(@Fy8x^krh&IE7O0yL(Dbb z`D3kr)e+SXcO7MeMtWg#dP4R6t4xI^voX6$h3Mz-pWe?y@~p-OF_Cv9%Tf+^BryWt z?GvCYG<6iuDoKu3`D0x=7T&89)#|=`w{+Y;%f4N^kD`u~!shh^H(#Nvps3070fU6F z|7po(vCRb^{y>KShhfcUhnqG&ud7nfkJ_x%g_kSB`f?8g4?C26m~io81SuiE?pF{= zRwJADKUYdv$;kyqx#+mPt%GPE9?y3=_e*^5jSpXb*sZta>NQDPD-V68p|g3XUeLtQ z?8TT~9IaTSK7`z%`{^J_EL8zi67G$YK%}ieeFX6qnACpWpQHd~ije6GsH#CWStKwR zVc-+TT5(`wzw1k@x8SrGQl^w7Ro2iPr>O4D7I7n$Zbz$!@;D8zciq9Ox)1Z*FVy&{ z`#CCPrMWu{h>(6W!nE~mh)W*)DMGj9wU@MK!^XfGiAa>>_c5a5@#PMx3h~v$`+PH` zS;jE>o}r4I{e2EAJ~JJIKwy~-d_PSJ971TV>ypjW30#d|ujVeR_V1jwKpb2x4E(&F z?3PcHEqbCRTbz?NOff_Pak!VMn68(k{8K-Sg4ul$oqYCKsB_RHeVGLttG4%ReWmC` z$g8QN%NMF^fLRIfMv2ssKspFaRpFhTq9AnYov2?n2vRAUvdUDM_hY$H3$7^XoNJ%T z8ryv(=$bxo1@6oPTN|BM(geCKt^)%%1+)qolBEN}yN3togK1ocm0!~CilkU4P6=cJ z_OKBg!V{4Z0U>fVCXL)qFRO7SV{rxv_3RER6ue#2IzONI5@PS;VtAG5krX_ry(cac>v-P|B0;v~5Ive6Lo4B7?8%80!W( zgzJl^|JLmt$o_5m*`EYxsYORdo^#E=@chv#0&?pPvPD&f6kz(#0RAJ8{sJ;efh?T` z4iVA6biz9*Qdc-ooC1Z6J@ts@ z>s&$R0lWW;1QT9?m-@KPfbczheb`+(A_~D|&cy?kNfITW`#yQ8BB`ucpP5UY*@g2> zwQ!i`wp2OZ{-vTv(1gCMS`NDU_9S(^<&5390pG`zk%%56Djw!EV^dnpwCod1TY4r2 zNV*)*hU70;v+e(+?vvs${{5lV{XXL6)K@GVU2xOm5s%O4Xv6DB&mYe&pFwkSyHZIG zX-N805tLk41!rP%%2+p5TcjM4q%D{6Pf6!5c!xapCC}lfQ#ZjpLXS^sE5Cf9i)!QA z{L&WdeK}PE#rb~1q;DMMy8I^P&5Md+xcG>a&f&ta$7=BP@Uwoe`^zuhaCDNv!9jeD z;LI1_N2litTxU*BF|7A2Oxs1{!I4T#l0^<2r$^3Yslc64Z+GI#k|!deul)ub&lZoV ztKiWMzxa7jPL=JgEIM0J|q>l)AA-h*DDlG3)U`^#ZWXaZdXi ziRt=}HP9CLLmUJ)wZ!GxY<_&t0&e-Xw=4~g3xOi`t(e=y(!Rk=yktB0a-Ha3k}%R@ zWJ-%WTBF)TL}Cay-o=hYDN>n!l=j7IyJ6ZM`RR?5GLP}jISHFi3mXR~RtC9Wx`j!f zFImgbp+B7LYO5FRcz>mx*wK&gD+RWeioUvZUi=!J=q?N2m9_#$?}S+rRNzooGB|zF z*At+)coOV3eE)KB4k${g7)mS3fUf6>ovVXng4i$b(3ZOS{BK|$-Muk4T+p-r{5Nsi z=Jc}9UuOHS26{N-;Mc2)tO?fE50zQoBCM}CxGsOY#7mTNgN)dQMUr&LDXFol+XwmF zPM8q%MCe%Ux9)xf-yuqo^B0JlOZG(kQ4N_Y{G0lTygZGJig)lY)_e^)xAmevaO}v- zqW}SQzZKV)FUIsK|3S=d!1DPP)Tje-BuI6UWEsboKKcT?FrH)i@9zBD0G(<=^2bti z(L#m88`q~A##QgDf;m0N8zE}RvXZZ8+D*%f{DuKHvK!jYus!K(GhFr;Mi<&Ki`74s ze{nVQJ){##V@P|?ecNh@4nOPKEH$_iy=W;VCS^x#gnW&$^Lrh%JeV&>Cv!iMS#~Eo zdqK?E|5J%C(sWYe_-b6Dkaw(t%cXbpPS`0GbGuYcqqNsLcr#e0)^EomiZj}5Leyd;e=1a+pE~Xt9O398`w53fO5gBXq^7;e4hP`L@Oo z&7>_qFUxmJshRaQc`O1}aNMx~Swz0*foS=^HF`0wTC;I#L+=AZk&~rF=x6Usnev4U z9!tErsxK!KRWwP(>7869?kvrabLHamRc*G zT;cM1H_>#ncK0waM4lP`_RIT;*GfGecAG10CE;QNXB9t#Lf)XU?m^#&TKhrwiPHwb zooCsinG1slCIE*<0dX03xv?G6T}O0ES{f&)>IV1|Th`dVs{m+NQ~IFH7Bu`O>4Wy? zH>|HaG&pY8xdFk7thcbZiTZvq-gd|7R}3~~qvwA--uxVo8D>IuLnXK)wAFNU&B^=e z#3Xz+h*fndcS<*L}i2-a^J6ruvkyl>IID zN6YnTUqd{RoH@j?eX8}=L zFbQz8Zb$+@4?hm&xW*t6!53x+^bX|M;xE>H!CV@~B)3Ye_@YQA(iNgoL_f@!U-vDj zd~HFy-I?SQDAk5I4S`A_Jf4)ilP&xzTiyL=tta%OrFNSiDzM&)6-_xAt&4wgKkU6Q zx7BVn5k71>GI>rlcqi-@ST5pMvHUB?zz|Wz3WbmQzTxQvk<<1iO?|ekhOcYuvuqOF z)wMZOHcw%D}EKE9}D3`C};aXBW|9CFy5 zjbXYQelRv2co=Y2v09d~DS#28XV&j~?{dN?UedXCz`Uk+KBw+gV~_Z@=B-d=m3fb} zjc$vql{k#b5zY_|AU1V3R8dLE%Ws`5dmgP+p{L57aIf3dSN>}JOXMLQh=5@?x2+@j zBKL4kA`{)A=Kj;iIV9022LqINj6d`cwjappV@KoPFkDQ|P?0;i7gYAQpLsR;$5Fg6f2A=j$ zzZ7ZgMycZax6XO!RPJ~Px})>)THsveAqI zHK++xzxE_7sY}xuk{+*YXdJbi3%AQ-2x3+&7vY5~{y&YoIW!(gd3D?w_7$7#%{m;TV z<8U)kI%!tpPG|CPtCj(wWo8mz9%d+x_aoYtr?Au2m-r)&QO_k3*<6>=540hawWXRJ zKP%$xpgy|3NKnneZTW0+{ABVVwNx$c(61tch_T@%co88G%5`Lp|G6;|U%qLZw%FW> zTm%Ee^Q?(BF{T{&+Aka{jyCpLc{9~@NvY33+S3hUnfeWH=v0*`c`7l{iGzeh<)r`I zcZ?=wxwr(Y{Y22?h~g__4p*r5@6Pq4EhFFb6|TS{MjG~999OQ|*7<$rjCM)cf=x!1 z-r}IUz)2pu&@f>`$~da@A`W#3be?Ur!p5W6T_%j6Q{hyz^vawza9}q{Vr?L@Xq|fF zW1YPP`Fm55iQSh{2N&K@5#BgyAf!^x8qh-Y+e5i0mSCkJPMhbZ%4AunR2w~~ROee0 z`gpUsu7g(@=Z**8o}Sw-t`TB_zY6@00h6(v-k@w0(Y%6>6ub)6R+93V@7WixCs;nk zlX-XwFBT)Neq2a5MZV)kG3O?w0u`C+&IH2k!`b$u`R!_Bq?n=M!W=xo%5kJR(pBz9 z?z+=qzD&V`fx|JHDJ_0ie^}2}QUO-g*3}4)la%aAd*ZGk?#2Q<}~3 z-=^y+3r}6i_TM|l%82xjrKcChJ>Be|@elf`rA+@m?x%6Nz76aN>#F$$%mUxQo)^PO z;9bjrFf+lb{W0NzMSz5!YR z3I>LgSWYk!P5`FG6RB}Y)hwz9=kr8=`@(ex`pH9IFK)jLzA=#`%eI0NNI{c$EE8hU!KnB?7~ z`6?(kPftg{A5{1~*YYQ2*aX=$5!05r?%;3&|#^Sw}o zksi*JYyw{1EB7C~Ymf*Wi6@(5qIn*h?o630C#iy3L3hY#u;UZ(T1))240OhRd>dC) z(Hq?(S^q*mW34S?r1kz!F&#c@s-dSs_SbnMfiIgzE2dbGhHcs-d3?9N0YFE!gI z%Oo{J>^I)KJ_VLTgvv#}h6Z%TX~3l({q9cCIs2vwo6B$d#K#K;W5xSkNL1)j+{r)fOi%7Zqs*e10f8daG&J_wY_V$( zt`(XQ?{{}!4=cqzs!^+`*8g0R38sT@1_P@uzC15P5C#eRHxqNb(2 z{1Od5ZD0^L7YysY26AI#Ulc5nrK|`fVmipU#_*@QsYJ1Gul#=g{9G*8ZY%Es{o%uZ zKV=a}Nkx!QF7kgdA!1;PA*vL80JC}0(r=}tq>PNWV-gdER{3EYc8P=f_h44Dl}_w; zUxm`!RYgn8x&|hGMi!ia%%wtqyx;L7*Q@*7 zFCV>5TbBM0?-4>(x}rD(QF^ z4i-vAM?&XE_WeN=?H0pKejnbGt{-RgL08C_oSLwHJ`v(Wf=;(%W=`3%?6ecemC5QUkH?q$mgeoW=^qA}Dd(%0b@b2G~ zfBY98_e0*?9-jTbE3V^6T+FI|K`U9fii&Y^%G_VfKk=V1RK?+q3V(hMGcq>D#3Gck zl6}wqA(sU5r-+7%l{Ppc+d?tiGDK>G62ccg5XQ13on;aa-6TRzN|_OJ_PNsWqC6S( zjR*W24YbpR&fij1e~Rlc;$uWamAR>@;U!Oo6VZh24-y5 z)|ScGd#i$J4PlY4kcg1n=Hise{1H~Cz7UfVgeB-AM13Kmx4%+bvGMU2BS^8av4i`K zNV&Nes%%zTy;DJ>eZ^Mzx6d+R;|WPv9)};(7h4sq#Zc$f??ihjF+XI=ij{PVVbyL{ z?+Z@A(iC2j%~$Toa61#Wm#mR*uvRh8iT#auh=af6_^PNSq+tP*OpP@4BccB}?ZcM$ zsHn9&`#AcBl>7)K3*}dYjR0+x-o&kkcT(gK{wNLA`5?;%GA{D8fDM|_N98HyxcAs{ zIx5^1%wN^$DMwrLW)DNbqto^)WUe0Wp9yr%bd;2x9#$$H_iD$pCCOp(Cjlwr8DhbYR>;fNhlK zOV=Tmof<{~=CjYR1wlEU*!Cw!NO7zVV>l&0lxJAHhTv+CuSppo=@)qL67m__$F-;N zv6_-LUvW*F%g*+9bNc$|yBR`{Rw`o8a|Fn?bfDz1WO4bTm+_;?%-a9>-K?GnOUXkH zG}w{8GRvkig&txvDrxFOel4MbaL2VbwR&Cm3&Oyj8nUIO<~kjH#g~G)Vi-4bVV$zRvY8|Rg(O+~F z!?RU}56fDFwgSJ1HsKyoD%aF_otdZ-Ey)YV;eNglb%9aA;$%!Wxr&1X!LM|itHdS0 z@0f9>RlD1UaZrjcpkvq`gdc3!c8p%Yqv-E1_;>ukJg7=XO3Q=Wq=c^anSPKALh-t) zm79&fdwU^s_eV(qG&d+{m_UCs{_nH1Ls@b2hQp3`!w>T+Knux;R5T@JrVoE@U-){n z0>>XBYFO=Y`=r<)Z?j!+)}W&&ZnjVdtX_?@kPVIjH%fncQ1@g`5m|Lbh2# zA#3|JrS!*=BelWxlnCJOjGpeVUM)h3iePTLq1PM~=?nm{5Uje;>59lM^=^A~lj8E7 zzrMsKr*!@(zyj@6&`1ULQw0`MQZgpTDUn_^n;6Lz-;_-X_wGihx)F^6wB=1zRaGYe z?gSuhE^9)R0pJ{9=GHDp1*k|!pnyFboF>6*81{sH0B{v3JK(-?Ihqsl@@j5=--P$6 zQ4Ry{BZC$|8FxVdz7`Zy*x1;4%g>dLCtD63VUo7~GhzUKi4V6(!h-eN5t3HoiuuP;RpT1~+ z?R)laN@ll2Sgbo0%}KbsrYUKE7RjHle4?dOq4EeU`cx9m^7Mijv)!6(d#AIz$^Uaj|ONcIsg(?;+3;9mIeC?h6HX4zw&aX75802;64}yNE}=iqc`BP zbqo$73t<55)GyP~mEU=Jn|2|R?*Q5Qay>Y`-s6fJs?KIP&->w~ptMvhPOs~`+`m(S z7?2>G573rj?D=AoBl6T*{nkFL+ncI@ZSin11vxZS2D2LoRh^Eek~xkANZ46>S%a4i z!7b;0ocQSe*YHE(onMDYlrgh#=JE9O$p|+_*SR;Jy>qnlkSedhk_!dUn-Wk z98Tn59?tOJUTg&36Qsq%HAnL%8f+$dycL$gD)h>a0jQ$;>*LX1LYWuQoGYYkUrag@O)aUo?C8%UU9E_#*%g3{?ANfb3Hez{x>J$j;?D+5WUER9W*iLjH*R;5<#F zKT^)$v9{UXp>)3BR^pp1>&03x4yQNMHS8?q?0fjEmhbka@vf~`d;C_O+;)#^{}D6& z)Zu$rzncDp9y8Zy4*WjOhBvi*|4vo{<%ydW4(nFdhRy@c@CMHKJwuXS?qTSC&bjym z@P`M6J^!d2;Bq(sBA*qMsFevU5_4<>E?*o7r6;NsKvihb-yAv75aGay!=N)~e=d)m zHi;oy_hrS4!{D=Rt?lr}_Tbi0p-S%)kLz9as35|>6Nwj}K({Jq%>Y9Kd#L|%6THq; z@Ntdi#SFU0+;=l=U#lEWPHdoMC9k?tSY^Cgow}gJ;4z|rpv?^}{_`3b7>O*es$wy_ z`YWJbW56yVfIq@x+cK!D^GF+vPSjnvEU1&&5mb!>au zp`Si8GJw7Xp)%tq@WdSO__?kgwo9ZpRqBn%7B_m>;X&#Ru`*Hc1}3H#_otkpN>-1B z>ug{fT(;4;I{q-T8g9sPlqSpI3P%QPQwz#$&x+Yyn*4@sOg4U3q;WeBVEyK^TZ1amtfS=Q#EwaA zLkG$&ut`1#pwCwl+Qj6fI>1!}f*KcJqm#+4pHDZ!QvPT9$l2#pVu| z@q-dqP`lNK7&7i2LP5fv_vchrypF{*9yh4J%W3t+IUiD&mKx72IiujS1m?=9TbmJ!%cREFR~_ zOiR_+G?t>j2DPlt3v@0={C@pbBIRo8_uDYs)xJp_wlxNVFRexX?pSOz+XVL}fO#Yo50DmSwtyxh{COFEJ*LRhRWb@(?g#DXs?g6U;S5z7`9!VbtIo@Fz;LtEfUUDLtH9e+#n?KO5~(?!0vASW@sq=of3)?M#n)q< zqVejax4wT;z0rd3zbl$M7w0tx?&G~5>{c30?_MWY=)y{1a?q1Oe6k)8;3lmxno-$I-G3lc_QJG=UmaS_c91c*+E8e9H5o@G@qvCE*K} zcrVfy$ z1_8~>e7=&RrSY1ahar%VmV@-;oHl zw>-QiHu)JIVfoKzY%gAiayuiL5@w=YCaG)C>e*6*+f}{ljXt>h5L_-i6uNY-==9W^ zY(@1LP}lgv;@Ag=X0z~3F~9SBI%t?hIhy|lY+>czr#7+y38{77`{(wyK2NuXyf=@T zcZWq~ueecA#CSE}4*eN_Y}vMaTrbGSo$`gs>6O)+c=Sf}O(#L>ily;Ce%n@m`)g{Tac zO1;7Zi-TuaFwu8RIKM95}I{NC4Ri@cB~%0!S5fd5fn1(w03& zTF%<6IZ2aKc4}TmE2qBASwe0lG@;mribvS&gR!Q%aP+n;RFP5^Vzv*sBr}+(f{zl+KL<>)r(b z!M*$N0lqIxA2tU4{WYyDM8v zrhM`Er<2C>S<@rO}!8bz!2UL=eINUHq@&&)3{5Bjcps2ua1XN;Xlk zpq&OMG{QsBTARZ8>OUaS{9d3$rKI*buyHgva^uw3S7gKvN!(zQbbscF?D}XPKI9ei z2uQ77-rhjU348)^gGpr<8iT%emw&C{iY6%%7!B%hn9Y88)mZWn-<xrrw%#mXgW4~k;k7`R*;em7u8IXN8x0RRYM`x0PRc*`;BTO|=&%p2vKhGGQqig>MHj zO3(_64nS3oZ;;bQIBPn)P-(!aBegX|1)o_Tv-xtAvw*Jb7Z6tha=P951x2(HJ^|)m z&C?nRW?I5t5hsI}CZEUW{(LUadjc`|T#^p&7ZQ!O@9wve27!><4icO@$kk#ufAeSa`VC;p-1k72y*;X2wpo;~*wu!_4GcEFTA*_IA98x_EfkPRjicLHSkBiu^C>)^M7!xW z1y4gGU;*}CppEv!7tIwY(tmqXfzvXo0dI1@iJ=gTMF%2YfBjGUyZEBtO;43<8e3vx zBOZWxjhwBMQ8SkPuKpbtxAB&rkT;^$8^I%h8Oo(;$wGhrLQM9>_o&7Fhst#N>9T8! z<+Agv_rpqpkLU8q68W+@GXgWoMi5F^1Sv@X3C-6Wdm@Z9c(F7MXsT>+xhXDmdqHK< z%S2nfp(F5p87^&f{Wd!f%Ub{b2;DSaQbqQcVHuCi+6BV1 z!_uZG+S2-fnHd$BAPSGUWK$&_^>6F9W;2}O!}rgEGbNlc{Z4Vi6jHhGj*6Ft(==^F zI0@h@g9OSLwGdi(xv19>cXs9~3xd2K&^8x>I-I3I*EZj@C#1ejWJn0vrI;sV8dgUq zkOX=J^G)NtPHW`AfyP2pJWiB?_oUE4Dq3YxUQ~i^X>Jacn6)<rw5elmL51+#jZ_-xYds_SxOAiiG-8A4{LBjbV{VSp`R*O( z)VW4|dhL?ng3q+MAbn5abM|Vmq5topkjaY>9k%OW{mh@+!sW+!<0*zps+g;DSX3hs zZ!blzGa%5~mB)fxLQTKe9~RyAt0osw`%*c3icz(MGF6r&PW=Fj!pBF@8|rppyl zrXFVe)tMhM8BMnjMsFR4Ev{$S{pg``lD;1o6$)ZE%#$OViiv%j@JY>^4?k$i$qAH8 z<){FnCBVxRQdPyawze*`1~m-QSjn-8iEOs~b6(8K3|Y!9pbnV_(q~W$dsT3QB8u_2 z40vD5jR{~Ossx@6pjQ%MNKz86kI1~++Wa7F*kI0zh=;dtX1*<`R29Ml1sJjIfV>VM zqKtE(hs5*nrod=WpB&*9tu`@x{mf@V1A&06zRADzn#~5PKLUxLJcXO7sS2kwG%(WA z=nn&9Ze^t~6z3#K{Geh>{&x^#fi$cG*wf}KTGFgEJ|m>uaDJ(E#$T*U_@b^dvMH0f zqdGg9ORw*T%2Ruk*TNHB;HB`((-*ns!+%C7foaBiCRN2R8^|*WR@oHO@(h`9bSJuQ z=w;0p@7URE>WSuvj4sg9`5@ARML{oZpXgK*ld-~6QmR*V@9N5p8Z!FxGwDsoLSZGz zd7y%u6F2fw%M53VlR?Oll+NQiF*EZQU;&dktW(~_{8mw^J-t6HGX+Z&l#`1Ki`T8B zhew>7j-S5TUSmIVF9EPT2><$1yd?MX49jIFSl`B=eGjLUC!5>Sf;D={wY1dDuBtOK z8O^vO*u`IKGcPLPN&AYu2m4&=#X8&F`pu}#Z`i)kd8ukdZ+{y(!!Ek~7iT`7H>>NL z4k(#G;>lH5RAg>zy9*L1qxH^j|7QjUIi}lQR`Bg~S*g)-BdTnM7tzBFCrqdJSS5kg zqVeAd#!!6wW^E;|RdpYP0fd?meu2nzh&A>G&(Tasw|uuJ1D#sC+FhWlbdulWSfDu z>78BQ=EbjIt_~?{JOAit+ZJxl%DB-ha4g{|f!(_AFm2qnvHmT*90hCjgXLZGqK)x- z_Cvq<9ZZbz4*SPtPvWGJpSgLhd8uv;T0Zk->XoUI=%VyRx@b6 zXLylXs(8csM9u2>hGNM>0-fq-32jbyHe`G$LKx4~pP!qw*bMQGt+Qls4b+=%VtbQ4 z&dc`uAyY?7J?%cd<<6Vjt+6xhciPWokuuTEpOD9i%DMt-Dxzt%I1ru_@QPyj&yU)P+CNE z7yC}XPgaZNgnWh$SH`MUXD6N=!3z8uBWqZQiZxAfUi>m*Vh~yZ-Hy?R8^i4Z1<2(P z*u#x@TIgW3SLSCLF5IyiN|Uoje07>vZ%D5&?44Lzk_Cx8;8>HrdZ1rzvdOaFn@$?T zftoC!w3OjhXAZu7pv?e?bmF&^*JHFkBa?S_eE8bWpsq$<@LbBG_&0;@L zR=}6eSW_C}Ri66&J6ZF~c>d$00I^KZi1u7wpmB&-K&d&?VZgrE*$EFukX15t8jm^6 zjX?cRsJU_*KC)4+NbC%4@vapj{7mY|%J=SU(+I5F8RmEKumL0>KxwM%A1l;AlGa0EX>@kROsCY6Q_l0XFq1U3=KYLO^Y=}z0q-w6MSdX_v>B^38Ar8T z64Ja$Vhl;NzswVy$=@MeMHDC(suFj9vr|tp{@FRp%c0{v+f`W%;{bD4bV*u6)YjE`WnNym8YX zUC#5+ea}C*;phP0{J6hJXdk+u81tSL#vOe%B2GH&Zg+Dd{xXQ7w&;n8bJd9u9Lf<0 z3AK&7jP~TY7@cI`zJ#AMgfbF%F_IJC5)HbdRx0k>v>Utr2M>!#s32lU7^iX zN&KSA(Dvvc&%ICnYLNpX=K8e&WH*p5;0y5e=?&HJmSDu0%e5PnI-+L|6X z$G|Fv3tsgshxjQZOC*>DG|!9(ym-C7+jf6g_kZI(Ky+|Clm;pK#W3j5XL70K(9d}H zbgGN+MQ|$s+2mr*P-cuRGVk6y%}v<%`nW(bV7jU< zDtBaMn6?GoZZ&UWhW`4aJDrvtPk|8?Gy@SoI-`1Lh`k|XZoZ>SCedyfmGdp0pB*D- zC3WJWZ3P= z&-^q=e=j*8aI@r1JgenRmbib}-YHRkKX7P|TA?%F2;JHhG;Uh?7;U?eLcQX7gGxF2 zvnT6>mt!op&#wPyumRZUk-U-+Pf|zeIdvpFHN!)aMSiEaZ;w1`dY*9xQR)uRqr&T6K*%>9}1(zN16Z@9I{E^D~P#Qt)kd!tiagD{8(uv2-B` zJU}wN&M@K1y)}^pp3W7_Aaw24-rjsv>AXSoxfE-KID&{Z3V&zFuwQBPY|A!dGa@VhYppSC^0f((wj26no^A;0mfW87 z77`5CQ#EGu&CbJG*Oq;JvS$~;o3(i`-QD&w`!d*v*~N7=6%Y2JG@DcrCjWl2syAFH z0S}P09>`_{>m1PJ0r|puRxr`4 zVhLnzVBUKa^qhfB7)iQ3D+qe|@3ydHCx3(EMAZm)_|2-jrd4U_VB)kT4)@mkcZ7U! ztue=V=tTPMzp&;jsz`qz(Tkq>5*^uOcv~==MrCxaGjx1Rn{oadmE0fDl=K$4CZn^@ z`FyMse#z_Vc&(#qF!8L;_klBw(;W}?K69ubKgwt!A{=6SfFdnjS9I0R?8L1RWw+mh zeLirigR;%eOq3_r786YD9jCR@U16o;=7O6ep4Raj$?$HtGC#(?Rp7P*oooMheEm`7 zAeZ+ZlXwJgIIBeTW>1nX>Ly$p?$AAv&v{E6maT7M#FD0lr=Mu zGvHOwv^33I_(r?X=}5vik)TJN;h@g6`%Jq>ND3?aa0%6P-cD9c<$dx`;B{K;auTzF zS!8@%c7oTqX^vs;blm&|r#7!9mgU^XUSs$5<7&hAK+}Elrp1^}MGPI%xRC}pwXG`~ zxSX)Su;-z0g+V4HyRitmxCy1}Wb+Wj5#w)p$ZreII(ly4pUE)({c2@|dxXMgoJw5G zh}zZMa;~_Y%Npoq@peXUfWY|&=b4rhqEe%%yYM$B6)nN@EMOh5P+>q%SC-K${A)Sl zUyL44edoO+M{89SxQXZHUv$re*1DZf{D$7t4_^aA>%-^dfwz7%)eWRC5y7+p?B0>e zlv4a&uC*pef^Wr&RfNa>@uIKZfNyvBnN$NPBU}!hkx(KUKP?V9()TLem;rP#83r3n z?b2a#s+G45r9~n18!%;$i>l%7HCGWKXqsjwD-SL(EI$tFfyD4 zbKfPThnrW4(|=Fi=Rkls$(GQLNr)*uO^AxF`x#kQVCehYLtte1!hs z;}N6(woA>0pfo6D^dL?IHu}A_iY`fsRr}%Wyj5FBCz)+At555waS)m5Q}-Cz?HnN* z!#L<=wm##@pLtPWj$o+VRhM0X&OHeJ@^mX+fnR(QB?9Bee3qCDE8mAx2G|xPt1R+6 z1+>cc+@}0=*HzE>(A_8zdB2kkj-6!>*4Hmvpy;cvsTp5bkd}}@EKm*u5wtzvrB(t% z@^qdP_ptkJdT$(s43rsAi!aq9fohzE^GKG61P+f2@8PVi=&W3=)%@Rff2z3ttut>R ztYdIpvQN^Zx%4Iw*;5P?G` z9~gAq0{syLylydxGcIUE+``6?%yRhL%gWf=2al~g6gwiX zKw<#u+QfVqoGMN zoF8w`-x|RS`5g*!U}0*gC5pMaQq8W~v7_@>$2jF7+TERX-Qe=LuxV@ak;j{xXmh3B zU7k|B;gyv+QV37t?VMJ9!IK+2e^`CVkcy}LpjH`0U~b%g9(cR<6#Xq5LwNYN%;Gw1 z8lM9WvCo+V!J_h^DMzX?5Yq70x=|-v>BJb9EcO+cMy#!6k?B2Xv1|&TG#wK45X?8X(m|1YQ*UajS66?6b!l>QPDQVd~ z)3NZW=SnVDd1CJ>a0efx=dSIzT_;l|yR1_jnOk5+_!A91ZyN)<%@c-O^L=nqvfGGT zwU^2fVaV0qdhXy)HbV}y@}}kh!{>A2y?wJDbSo{d0ZSTO&k?xmnbS={C04TU8AAPy z!+nAWO{XoHtfR@FF9KbhSpU30bui!v?kAQITu%CCT}g&tjMW>jXnkbV?vyEe_77)# zqM)V^-gzU&b_>@UX_#uYQte+g3a;I{N|u+)uO`<1o+_XIoM>M0N~(^zaYMJ$*`UjJz)ds#@+JwEIyQNaaSs#%jL#MCOcL=lOV2i_5ZhBEf}p&4!W7dIa; zPHd5q$uW@1Pn&L_DI+qKf6NZ|x;W{#r1K;J*I5w6ai`qt&S7C;p&rCk?l;S>4ZxNu zm8tx5We7@Y% zp!kG>y2@H{1qX)*=l*;a3$(Jlro6shr-Z<_H}dCej#`TcdwP00fw_53PF3pl$#0F9i96fG z{8LXvbqIXrKr-u%iPL0=U?L8708|&U977a^U?Q3P*gq7#bvJV@-ENvU802g}qEK~6 z;M}m$(P?=}aXDlAX?5?o<|=tV?G0X%LtzvPd`dQ7Gu*L~HE(h0KsEl=jz<69AKxb+ zmYqyS#ms;eC0tpf9`Q}xXXr{<9(bI!H9Y%f*PF@VJs@K-$hX{p~6yrw0EFe zCAbQyA<@ZdDz*3Y{yj&fI7+Skl~_Y4tg+UY0&lNjB=GyWmbnv+8AWc}>s{;7hDMhY z^8F%`N8qx-8ot1)gA^1#}EQaYyJH7J+ae%KMMz5Vi$LA(+@BBrCaSDckX zt`I6c5ldZ53z40Ju=i_XdMit6ueqY}IGdcmHTxUyyKiQh`rFLbA}#!jC_I!vy8*Ds z{2_jd%_w8g(E}?$=Bx#n?`)k3ceTab0H~7<{B|300 z<6gr=*Wpt>DkK*5a5hdpT#bA1BgvpcP8KFcDX0IRt{G#db6=krc!tcf`=E6)d8)G9 z@+00-)3f=3Xy6vb0M&1!Ds?uwoYK;$!a^FL41$2N$*ZLs$g`*tq+df~pW7~C2k=yE zx)UugF9W*3PmqO#S#c=H$lxpR)kM6U3p`VS_A^ST>1oef+n3{)uPEM}%WT2GAr+z} zKSa%!s((&~?y&x^;Al|^-apv<4M%BhEeCipAno~-I=Odru%6bhI`oQT04o=;y)=N6rkRx$dFt@Q!omPp%FN8nHro9~Pzc;e zWs>-XXcDrDih@N+d%(i_lkY*%rhc9B`lJL5lT}zuCq1483m9|+Je=`Hi^xSr;Ms%T zL2Gdj<)f9Fc%eXq^PN;%n(&FNF8Uvd37h@~;_r(}x{kv092TuPH|n{E5wEN2TBE`l zTOyjU8OU?Z!LdQK%`ke?mGLPayr@li6jI*>FE|YBb+NqcMaywBxyRov)_Iq|% zs#^AtK!m4&+FCRRNF*+{R(G~oz*@(pSj50n_(!`%>r1FiU_N9r8zV_%)RkvR{tYfb zu1x0Isn413tx?aef%jQA<&HXcRP1gn;zt&*xi38o^D{Hz;Hdm+Vh^J&>vZ9bs&=&> zXJj-5)u+j^xrpTH27_w=LiT0!&^ba%G(PWEQgFDcnf-;!9fe&IpJ9C2FEI$YmU!vD zXH<#rH|pD}1d`pTO^^Yro5MGnTnGq$Z68*7uEVms_g~{n@G46Q7$y$~XB438G z*2_Tck;T@ARYus zy1uZ4$!zKA%OFV5YrVCis3*doDKQm%*_65_|G|DXnUHC}FgBU&wep@{>zrA;AC4$y zyz0|-D^4B$OxZT#%fqSLdL5%;OVh_$G`G!~y4P+*P!AL?nt>U~&oJZp8}Z}?{Z{p?G|{s6aZKEG|=|!mh9%TYV-bb=u}t8bxl%}({-uA z4}1bdAJ);dx(pAxsh2!=z0P3K*x4N~Vmg|y4`_kk>&O@pDf02 zU6-A)Ypo|ICOZ9~Vb$tv2osIRr>A>>A=(}AxyBT!&$I_PY$MR5{ zH>S%-d55LBHVX7$ zgFUKRy7Thb62j;>(vZ$r>l^8ANg{Y%= z&|+_lV%-V7%tEOrmYi=NB*>=l`peczsP|uLr1TQ&cD}ZlgTpe{tLcalP)m6M zRc4yULBVSnvQ9R#HDFn~+aAlYeNQ(CGWcYEZ*GCReuX_Ce9sY&GysZoFv?9ddbzi^ zr#F%YdHk0zuw6YVZwSas`n)|t0Z^cwn-4^Sz2*93I4oQ58Jdn%LFYV({N=?XxZ(|? zAc<1(dF6T?-f0d4=DZhuIc^ye+Rh)a{zhcC*5binPh!}s14$$0tGE+17!deAo<|UJ z`tR!A64DbckJqDkq40GbUzTo42;9Hiy1y85*`Fa1%)XcoHC%C^)z#4U%omllblf^p z+Wp-Z!S&h@9Ki)5*v#}692-L!Dt^|U{yF&`;2{A5lzENcV*0%fJEEgw`BL)!4N>nQpM zU*Up!w|+7$-=`Y#cgt=Wy_?YjBh>k6ogtWHI0DZEL|$k5Bk68LMf|!V3Uyx!-4m(3 zCPb1tJWpEVmE`$f$y7`hQ=cBr*Jz^R8PF|6-s?&vk4B^pW$6bN=3KiSMzr2(XCe!9!sKm>FnaIOMvdtsu{ zX9#Y3>twR&UeK2|jS1sqqdP&H2xmpQBPNI6YcRODJW?7{q`#vQ_ag-=tba>-7BnRt zuHI*LTk}Vhq-=!FtXuU6q>djo2AxnSe1=@6k+`EuqmPLh5#{9xwhKcAR45n`p7r&& zY&C=%)%vF8O^so)G{eZF{JoXLW3q-6Sbu(>iX-4c znxDb@L+N|kNH4K>nDLvk{J>$v`qPy=6o@$q7|SqeM}loIKe4u=rtd|o^X>g`mqRzW z0qmqkz*CCC_oPf2K|BaC95p${rro#T=`8bovi!(*4~NStOKFu#=lRHd(&&uVYW=0b z5z#afZ@A(~VXYb2#QrHw6XN+#t=2{>*w)C+W1lPnlpJ?;osdkU1(LAj2|AB-pTmGP zHPnuL(C~ii(*5pkHC`t7+&cKxAj)hSZL-$x4+Qg}lffB7;ccE#Cnxft9j+fF27|A4 z>N9;)`(47zhRtiwdb=Hpy+&N6!tV@;8B&IZWZ=0r0Tpg1SJ%x4e#X{Y(ze?kMzvNi z$ano1N%B{{GZ=PNJ$y2Z=KG8OvQ7+fedNLe4N9#gLD0QVTI!WrjC#HzSd)39YgMDF zg`V%`{NSU+pIW)UM-q(s#gD9g6W~=)EsWovWZdi!Q;3rax+}-1NOc`)Njg#K`15dZ zILdlZT!BK&AEhKO5bsEtJ{qsUCu6A@{8QjN?qBKqqtdyKKbT#R>z_WdDQux2-7)R! z&#&6cqEM?H1-x7fX`=ACLMO|JZi=xkYs++easHjOJ5lT4h+U`svCW8uq5 zgDoa_)P><*QUb!2Kk`2Pn=DqV2mmdGfXc<-aVe9-?LqwJD^9X$);kNOc7A;Y86(x*?;P3Fer6## zOob|5nGN|K!XXY*j-#OXE2Q1?cg?}We4GCMbe1l3<;LzqkHBLuT}$r+XFZf~-H6$v zjP1g03MK}!F7m@%m+IxqpGfMA$x`CGvj(A#>iD0W{HMqn)Q|F|A{Rcb)|gzRb1IFF z1I*XcBt>e}XHP#)@r>MCzY)(FIZD-9EelphapRbvX^$%X_g@bfV3-4`6F6QB2!pw1 za|?^?#>SM12}NKJPZsdy2V6AxAo!U|0?^GN<$OgXEmP;XB}of1F!E&C;A20=Hm#ft z%a>B<7R1@~sBiEm%+>rKn$9`At}fd8VdFHmZ8f%S+eu^Fw%NQ<P@XaiU%ma59i17JMe{H8||!WeL{k>aL&4URlnw_~O+0EUMEKTv&{2lG~WlTB*v znY!I}SP5JrCU$<;ch!y}eVy$Gy9CBcE?|bIzaNs3fO~#8VV&15EYEMEbjo}I7g3?C ztTMYHMKy#(IU^IeF|#!ALv7u1=Hp>ZRQj>W*TnRam-gn@qu-3jSk~Ct5K)~ix2Clc zR2$K(orW%8V7FNp!KlYsUtJs*0U4S8=3w-uY;8@e$LUyH<%Vye#})itY`4LFgVW}b zWB3t2e|-ycQ9Vs~H%azUxwki2!LH@p9PTjKFo)C{__&1ET2zd|GeAOIEJj@*WM zc$=rih4uNdOrt7<6$qipzm}+QNo3fXwzg?|%~eqNvxQP=_({4f>pJ+FjwS~cv5d?e3u zGCX_sh`D~mT1S2~J_9%2D{AyKBCpi6H~rHh>v3IEQprbnl?YydUwcbZNkeZj@(ASo zt%=cP71_NhA`@Iw2z$-i8TLkiQW({>u8nuLbvgdpZbi|KXL^8LwLHz{UM?#r&xJdtL(EH&5STk2A zG+J)HBMe-KW!~c;xloa>viWbI)ywa_?yjQZMqeiCGnE;pyScaUkK%^N_qSYyv;=Ap zPkfJkYIZ}#?v*&f^j*jLYqa8iD?rNb!`X%ve3POm@zQQCH1^mjtl2txj+J3n1R-8O z@ZaWjd&P<<*Atc)}maAc_a zQmDp)+bm$b@Vb_!o$23-``|!GE!{wLQ0HkiZH}}St~&C7;15-VPzqQCjXU>mR{vwx ze>?Jevr(d2h{_YIA~du!j6yRC+z(T`<8~1Fk2FY^UlK4byyL)ynJZscLIq>ndNLpm zPVJjjjNCHh_D$@rkJTCVbM|?-K;fKs%eedk13$N05a~eJ=QZ(4sC|_;hUEDhhStXl zO7_D}pnbUnwZ~d~7fE<}IMiE<1U9~-(653&0lf{-fmBpf?y5yJ6%^uSRZ_;xr76&W zaINbQS4YxJ*_4S=VA|I|q^byl@u396VDkso8X7Y>N!(oB;zTkl{*Iv_5BwPfBMn}R^%EzlxIY+>}y2u$#|;MHckBX z1$pZ9_qI+ye^u{6lfQR&A&y-CF<>xGC6D+O`b`msr+o2N#7%}dbI>u#z}tlsIv@rxr|yN#rKrg&DR1q^rx?cLW-PNTO_76J?1Sp^_a)-*4IW`!lua zJVGc7>qPK%p$W6QouSnFphJ`<^G=YYPeTOm9ms?t1XqTbqki!dT>sS#w%`KjKshGZ zU`{f+m*WhFLPXA+S9<`1RrB3cM>2T!+8aC%nryH!F}eXpb)nS$T9 z2bR0Jq|(fh^exMx_h?_IcW};Nub_lz344WyD%dP#Mxws4q1Gb1=;@^3qC*y8zXO5* z0gne?<`bL=nTT^w@Ql~=%1xjS@>XO*?@$3ISNZM;2Kp)W3=#1+a2MYQWN&9M8H@v` z^=eah4h4i2yt_#@-1?LCwwB17FU4pfgVGaO-18uuAX~nH6pRp(8Ep8k3rO&34*R*C zI1!{_hd84k27$O}%$cm^!B>*1ek`aj9-Po^=B^Pbq;5)skC0F;BD;92!J)@|+~OJR zGk?O4#=nN)XF!Y!MwFVJOSaWKo7S{PNRMBxueQY6cf#vQSK8`}K!rR*kdY7?Y3<9* z9vqM%=eQYYxw1O!#WZ4wnG3|yOPgPMf)zI?K5u@>vdjE|@P!mSi`#F5WRgiFDEzpX zK)T$kU@_q+WezvsP3b`FkufUkXieh$dQ&ze#|#{yi9(7{-5rle0U0+AGqBJ~9mPLlgn z6Y%L58Dwz#Amm><>9^+IeDyVqC+d^2+)?)_8ugKtVnV}jXQCwfLC5uL zW&8Mb$e>{K{?!7n5!@&^f2uzeAiQ%p)P{ex$@hB>X(zhD?%h3wZh%jd2d0#3L^3Y2 zRud8q@PLc!s@4EwlOO)nW=t)nGT_tB1Q`rE1HkrtdUmFQ-wQ?4z@4B)(zL;9@2jNL zaBE4|93{57rHDlv#a*-W9;VlE^{9xB3X^U$v5xb?IDF2E5rqKHkf$m}XneXa$VL^*@>u)) zF|-p}idiZN4x97qrZ@@f*@0Q1=KzZ}Z`_7~d2?Stqt*lmI!s;l7KhW+duua{peT^GvZ#JYZ)m(#P=w9su=#Ydo_eIhI{2HM>>il48b(0NH}9} z)uuZ}ZyQ#$)KWPNHNs*aIz*dZ(WlA(&EuaWKbiGyt;Jr?>rMC}7%U2n;*Bh?F7ZL7 z9pTH~!yZS73{TpuXg`msGhlTV8md}`$|Dm&$IL>}-o4m`z3>$-ZsUOL7o~X}8fpQp z2BWiGgxhxOi&02(SNLJ;fD$an8W@dACS*#;W|_CF3zVbP^bdc;mXXt(qV~=%$e^i? zeKy!P?&>eFv&!qSat|NPfyK)+P1;@r?-Gxa9C}E_=Yt`9P2Q)-do5e}JZ*Xd#e_GwOo+X{IQ=3&$9Mk@}#O1RX&0 z9Mekfa>c`%DZ=`BpsRW|4>7AX-Lbs93~>>40uAql6QOa7n|W8Vkgi6B4 zT7CzB^j*q{D7ih{TOfNn^6h#FY$6VdHi$A{6nBfVa4AO7ZX_C3LQbBa9Y~~M;D^h# ze=|sF&0rHt4egFMFt97c>SLRQ#GZth!JMxdtZ2YRAQ&io%*HFH)hL2zNWjBjZ;e*8 zAb3(?gnQjHg@qkQyr4qTPKGbXw8h z+YGgnzQiBq>TZw@(D*({$PyXtfBOpEP+TZo#oPm-BOHvW@@fBHX#v1k%U z?bjsA@OUz$0FtA)TMN2-6bO8aHCeDNR7vHXw;fOvEAFE=tb$PxR)AzxXwwGz4AvZsUQ&UE$v35$U49s|zfMp7rUE-vlB;@>#(mEc z4zedJc*DRGAp{XX1Sll2lC!}%7?}ghR0_g=HWj-QBb8;%>9A`1(RQAf2VrP}|9e~^ ztV5z&tiD+q-h9rF(eNqeb*~p}G^Q8z_av%u>WV7#oltj*UnC_HiQH3vo16(<`T)B< zbZN|iDn=;Xz!sCkU5aS8F1m$2x*(LHNH)Pp{{sYRm$$?L9jAY6ZL)*z-A=4oCVakD z8<&sa>_t}bL>^RCwRcQLjhiNg?d zY2x1!oHApYH(27Vvfv79TntzRA%uLkg(uKGvEA;{JAWRD-`RToEO9}Jx+C}ZZRjZ2 zpFT_;FGko7G&3`+y)!?TWcZxZVATOV^`X~7;LQc zHlPVzYr*fRkN7Ze8yIT-3HueCRY+MTW(kE}wg@7*p+p;(Y{X3%wj%aRcE$wupzY8K z>IS;lth0ZyEs5Z&w~(KZcN(Q!v>%qvx9Dpq8zvqX{Dd8nOQ9XC7%0Hp(oi6EXaOGP z>=T{`OO|Q3=bEkQW?(+{ccDRxz+B+ zUzI#_4s-NB*NHA|c}>S4OcSu(hFM!&{2{$9*u}-B|lxsRlkpx#WIjHm9m(GYuaM#UF$>NoX*e(rbyh(+EGlZd*$*ln(Ncj%72zLU^p-# z&Rip2$-;=r1J+vKeJOtJ7ugojTL!s2Btx_|4MuB|MuMdZpPdbH|zRLqM4h$$@HfXN*4@K-r7U#46zBgk;|$wg^4+LUxb?@S`Ip7Ojs8hL4fB_%0x8% zSZ|SGic^a@flbR0k@4GWhgkg5Q@2mU1|^2@hRUJ1KSpxG)4)D41WQI1<(2Xx&s2G>MRE!wO5(wQZ;=eIT(4R~ z{;E1-8$L+ok{^X`B+Vs7_LX=6Y1aPhMlzj}N*WpY?c#e>>Tf8FV~eI(F23O4WZn zY=Y~X7`(jMtM&X)gRG%e^Au4U1V;|)AqHJLYLs@PpZWI$@lr95ybuTRaHbvl;MQ3E zmo$^GIGyt>PtOJ0yNK*Rc7Be2FlNbPv496;i!Co~Z7Gl?(>P&Ip8PRk+i!18ma!PK z{8P|rOxe2W5-Tlv=_@;7vL4PvDvU!TcWQ|~Pb}xndz*9_V(MH!v`nq zXJi6yy)twkjVDKPKxf>>`h>-&p75OK1OuXp8aunZgd*E3q0Ukc$+yr! z6$#0KtPjY%7I4YqO(^O!WKCl7m-K}F#BtvRA)Y`#9CzgW^p;@b!1WWv>j#WVN}L4q@0bm*aN?oVF4WMG>rckCH4{p3Vebh zORZyMq=zNno8Oy9K?b2!eu6u(-bxElY8XKUQgMzgN2&6q=}V;BoN&`&eAy`W=Bj3O zb&TPSy*I&yBNq`1RdL2vIu1U%4%jvqGhp556REiPi0nb@O1f z*qKmrrQi}wC7oOM|NJsuNZOx)f&octKH3|r-9y%2>Z#mmf>ZH#VB!u;fots8HQ9;w zK+(k-b~A~UnUZ}dOp|Bf%MNv2ymH}_4E4A3oa?+Mo6d_EZVpEBlrVU7Iq@%~B3M0e zd8F)r#J9V#k`S6t2K;HhdSGFXwxiC1P_8XAOyCuKk}akYL<(KJ5%n!3XcTSoSDFps zv1by80!KaM=rs*dSiK~Iq!!rS#AsqUCWf5+8al!+;L44H*ynEA^#=noxCkYxlBN%5 z70A)pOQd90lcKEWkw-eU8!1`F%-L336g)klz$nvO%&#v`?Fw+}Fh`glHIbvA^Ojr0 zv|CEg`Ts+x%_$pVvMaTopPLh5!$qBto{-_q)!dmlN$uU}2u_~BhV4QlkVD7<{Bhol z5IQYo{91O*4ZpmlTaE9S!kT3VO?5KDuXqR4QfKQa!62{&7UGLePA{!ccl(`3BW~uJ za%Kq?d$@=CDoxx7z>v>P?JX0r9xH_QO;_F- zXJfVNBP($Ec2_JflUrr6=T(z#i6f0LdwuFFBD@KJa6kf)`b<)a69;Wc-w5TIUC`rv zalG=lDf(g(L(SO~*ieV2qDhGpEOsJE%wfbsbg(zz)Zao$V0YZx0=Nf6&v}jU!p$Wb zuF$|bYUqa*VL=VJ^!!FHRL^tt@P(f!k#YWUC84LkA&;z%b_7O&)(5ytQ8P5G@j8-| zmHq$N835S${_uQpw{pP8OGifsARl1>Y#@N!2YwN-7eulk76~^#uYimi{Z>d2!i<-& zqr*$BWq+UfibCqDsr^g#nXQO64&P~ zT~?E#;?pbx>Euy-lJg|m;u#}Se3jQ*V%Nhw@$*5pBXGg0L6It>T8_bntbBdsEijyi zCCtf)wmJ-LGUA+OL89nwVCSAeLZ3V5GbD`HfwJBtuL>SzM-|@Ww0K#55Sl22DQeD1 z|6}o8w3R?7{|bsijTJ#x_=lc6RB?6<^`&MF6cTA{4fE!)`8Xs3OZTkkk=5>ZTAe4{ z+U^HV=I#e@rH@C-?U!9Mz^kNUyyz;CaxT$4#NE!jaC6JTO)~UG6Wf z7+D6I3GgViRh^aA8FFxP-5u-Q%+9WE$~j>&$*>B?pkN8i(38L>Vbx_MT$3TRM#kL0 zZ6QLE6lI0i`-&UP{)b!q06)BK%qj7gBLL5{!De9 z);L+b`BW*BP1zFIF}lujpE9&%4s%mns;My0xM|!u@z0Z{0CnGa>YGOonR@Z(J=T}B zW=0JyeOKYeJ9FC^ZDVKbOSUYA?LmnYe2e+7!_tp6SXsUFT1M6PvCEaJ$zP8Qq>n*i zUPm!>$6F;oiC>8alKlyBktWXPB%@}BdJrX=^Ml4{CumA^)>;i4)07m~I68ouZA-vl zwBE zcYTdX^T=?lPCjR{z9j-&kJSA9zqz|=r6P=mZ23~1?k4kxcX8uWrH+zcBakj;2B2Nr z{m#1Za;x+j^8!D6fjR5$S6*pr6^Ns7LL?G+)E1%M__xn{5@I5Onh*w6=VI}&E#}Lg zCq-M&?~P*O`_>O^>mnI6;v#6?&KH~kpUgs}-)B)GkS0x^lM3Pp`7&N#eJJ|&TqSmyp4dJcS~bj)2!MZAhtFyl82nax6uf3`6xS1T5IN(@T_nnN(J`)SS+O!TwOL zGmUGssUT=28QEr@U8G#BMIQPi|Gs6v zBVemE$kJ=^ORPi^n*tm+5Ko~%YKd}ii%@6y&fhyO0zscBWA2}pBC67te<$?bFL!PZ zt~|HZLbamZJeW?kAeR$TPIpRl8u_+Dpd|FoJtK6E0`b7m_Dd?}$kaPc796gg9X zhAgKDMs79{Ro8S$BXcI;CC^^5KXef>DU(MYy(^V}u>&UIew&2sCBd_$Rar9}!q6tj ztc>3TyvZr%a<5q<%1X)+dB$0>Bu%f5;|f{u$x_h==VZlyfjnc#sM2NsWr0R6I)ZH&keVdryffEktnN(`g8uMXeas#ECmPvZOM5Nm~8e`<@4;#>-xL z2!l*9`lwBd90w{dq4k|#UCe$Yo0Y_ z*`&+(C3MfQcje}R_+Lul!%1l=6)-YWr_Df-I@YTM*S-?KenqU7y7XBK(NH+|iy+KB zib7rz9}>pWc|WWR$$~?JQJ#8eSmDCU=Ed~hzPh5^+1s1+Vx`)2@|1vXd|YO5zsjIH z!D#bIPSX73=fY|FkrPRHTFk<#ve-^A?z>R$a|wKd=@_>(+<+kVfn+?1<0bcSe6BbN zLxr)ZGPdo}&-c&|M^^husNyJnvstIs48Y)CXEA}r@hdf{JOs^+W;+vex!A2=f(1w2 z)+$btyuH2M@8eWqoX?QnVndcOM!e&ZK|v}u5)wndqc15qi=AT`k`}_6*2R$} zMUWEoU5w~!(!dQ8iY#`-2s&-LZdnDM?5rYoT7T*oAqfWd#*7?q5}f$JV2TUMs-lAG zuMj3qL5|4u%H^M}Z|WVp)hRBV_G^<#RsHIkY2dV$^7+HHfe#1(#4yg#@idJ#MOsBg zWBk_~`EzUjJ9C1cD^7G8Ud~1?vgJ&!Sbki($-s9gL{W?&H>fM2QE-f)hp(J|`~bFcjTw5eST&Gd+McTgI@yW)7knfQz_KPw{$T^L z#maqUl~ApW3oX)T&ITUH2U*r+)zs*ir7FchA%RvH#Jo!#Ud*Ietnv*m5LVpjhuz?U z`hqZbFc;3b@p|R2$>vZ*3-nKEf^5DhAp$w0H*VD4$m=bl<70OoUkA^&9^YTms%*Is z81p}ALSVHo1u@ODa`rqrj92N^zVMkhNW*u5-jSCb{l0igr^TjF=#b9bxQ-!+o>iq5 zTHz{1S%V`advOAj{(LPl1=JZOOwn!1K#veZGU(+xGl4imP#nULLi>2Lqhx7GC8~Pp z;f$);8DGJ-WaXx-5k7n1loGf{rp07%4ETO*eiFt@z5pO89BwC)PEUZ3GZZVW>bsR8 z+Ab9E&Mnyp7f2$?jpQ^i2U{{kiLu=^9bcL0q^r>N_c35Nj$qpNre~_zRtq(Zg0nL< zCB|kT8AmV@k|J4~B*?IAZ++=PztbaBTAc*TQHzA0k&zlLdbV`V<#o`xBF16Q-B-PN z3hF0UR=f8fUM>WL*>jFCQx%OY#=I18)N-6+2om1478fGD7W*MwwA+#OMhMBq=rMHa zyGNr(NZREp!?8md?>L;~DS!u_Y&9b;UA+1@X;~_tJvw{IpqRs}DAl|&p;gPm=81vL zWN3PuWU|>|Q1PjNapaSpG^0R=I%LfOAQ~c*qUL62`yMVBk`v?-K6f|w#*_(4_SvzUTDPOfy+t5%^K>-PyN&ja{OU6Q((l?)btL0iFrGQUpG&mmVnhGXz zJOniOF*@5jFM|JN)t4#e7FJJ5k3d@ga_o2TH08vn?Q)L?#h6xck`sp7<Cq0F#iA5HC^zcGU9na+N^G#x)vd<}zSLu%UrX*iaY@SDurDL&fU~ zfE>p+akkFR&i+KMFE7zCD3*?LQ8>ztk=4DxS7~#$Xq9ErF&IpiP;2@^UihOB*jt7p zI^66HVmj9GK!5(w($NlEHMnaQ#!IOuEp=*fB@pn&^&9_eD~_u;$Gf+e45`R8fKU9b zC}xl8IT6#Yr&jGiz4ynd?2uDaDQ=h(=A=iUWZ4|I36E)~;&3v3gIzPD(SHliFu+}i z6x_j}H)6#k<)+^%$%$nUh%?rB=rxCriIH2F34#h=fo}_VAS>a5H;3H5|IpYeF43tZ z$3b)j=IYq%Qfe)%Wl*^sHh*?CgeY?>iYMJPNBtbV8-37zZPAR0aZu6rf{d3eQnhs4 z>X6_j&=6^%>1z%Vz0`y$Rt@ua_|MiBHJsbs^Mc3!m7&!k6HRH3GUqN|v843*z4IQ2s{p{#K^Id;Z^5)dk*rvq79P9PUZD@cWk8uPI z-owQab4AEy))?ElesF)&@#xG2fn0R;^nlZCQ%ehg_=*5B+L_DLwl1Dt|K@jUR!WpD zn6TqnJ2;dAkk`hwO_}uv!?(MZf8~Z0IdLrQNpI2V>IDa+Tkg zI!Yj=zxRO)ot|I*kz6brbqvBYW9ub2?G0yut$hBtQKdMoL6QM9`8Xw?#hw*3Gc$fv z>E&|mXXyLjemtEQIYt7LBuXYJ_Ca_&nb-eD+&$9w&x&068%R>~WXF2E+iX#=^Y&ph z2@ERBs6Kwlt=;|Fy0CwU2Zw9!|32M$7(Xh3D7lFJ1gyp%e4b2G)r^QZ>`CAAH$;wu zJ`dyY;L!YB4{1`V4_N~)xk1B9B=q#Lz#}%}%r38}Fa<_S-Y48iD6M(7)5YSB7 z@m>ICzz=q7GyuSF3{3M+<_I9fYSf@s{Hn729DtU`;mZ5W0${$<*qTgwlfU-FUdjOD zBn~e{Y_%SjS^cWl(b5XeHxsmAV;ogl2mP_{S0ErncPn+W=L0Zm(zqTo{jBN9GKasn zw`5~`{l|04VAPe@{3}0vg7|$qr(K=XDjJMyydvxMnc?+*>Zek^VUuLNLAF2 z#|Bvm61&j0@b8+_|Gsj?oUOQ3rrUOpJHFY-;eMUoT9-AX?Ml`DlGYPIzWHYL?Z+Zm zMNL75^#b*u$Idrg0S^iz;?Ef2(Zn$ML?6qMMh3$UC^+pVFIqm&?y6zUhVi_dXj#fa zKet_j2qePEh_V${+hqoyhw~x8Cd3Ue)q$exC2Br!Xw9Gv!uV!6brdWlAkMOTFp#Cj zpx5z(NT7q&YSuUcamsS~UE(wjivgL7@2P8mIpD>%!_EIk*Bv^y%d>5gcnzlhel%|4 zpFYU1Nx8WSK<2_CuXyIfke*|=#7v$5u7D4_|LeU8;4zuZ7s?L=IN+tgOE{U!mmL$s z2JdKaP$u-ob&32fX~2e~(fL4cQ~IJarLFdy$l~t}bHn?3vrY*vPmz#D5Ut6v~M0s(0V znG@kP3NuwajW4$ciBSk}?NVk8dQCsJW_qRR2!5AZlNb3qPM=^WflcT1%HITJ0itF; z@X?L-7nUSLQp5p$RauD>Bgt!t)F;fPb;Sgzu;Pb^s$`cE3))hN*9JNrUT}Yor;5JU z3cC3h114LCOzUQ0Gc$n;ty)v%zk>HSYw#?06(`AUg}=0mHEKUBq7e`Y_5A1q?6d>L)`|5_d!|JG_bQ5k zzG#(0gEhI#Nn9obUj?5@c#0$&{D$z@zkDNOGnl=|lu)a|I{fpDzJS9*k{TDc4bW|o zGbe!DJaWK$wl|&IX`^7|nwn7{Ch2tNCs?eS^Y;5h6|cm~sM^6^r+VdeR})nYEZh7_vmShG!b(>+u%xN#9smR5eH27{=E!r1Tutso-c6%dgbTb-wK6@ zl8)SXf$AYzyK>;fJ!{jf&44v&`3+!iKD`3M!C&Dm;84ewRi|4GAou~6o`%DFw@2;A zEQwqS#r_>PwPFsirUilYRk+?AB^r!q!dU;ZzDaZ#?EE^uS)Frxe_$4A-YxV zBvJZn)#wh#q{~H%W0pGwE001)W-QY6-E|Yf)2GA77n2;C4A>86Urf zf!Vekc-D8LV(gBzaNV6%X{RxWD_CJ?6ZC}I@%sozj7rEOqvrbBC_up{QzDH38$&Yu z@@Lv0ZiWbM4ys%`#5S{bwl^>kh*XhqwuTe%c{sewQkpHa9=do^G0>5?$?N70IHci> z#f+R%w6LHAs^=a6VF&w1Q>Ilby?r^!KX~v#l}IiuB>VD}Xc8b;-uiR{u<49i{r+Rd z8ReZSlZE5zNw0n9Nl6`(n(~@2oom8pSK0ShOSv&1)hdhHN^p_ppI)9w<7n)uCU zkcG2GCw00`SWFB(QHV8CA-felfg*}p_5EC{*JSEHjzx7%(&0jVe)o{;M2`bm6^p8QIEw3A8g+Us}Wvba6hue8a*2IBa2Iuhy8L&HaI0;$S#o z_^hrzU<*&PR#(Je%K#{Pznd?(Eb4=$(|Wu9VEw_KmMF5NDl%g3;R#TO*6H9BFdL3P zimmMt7p;lK%Md{G&(0G6Pp>2@j3m12egHY(X~W3%^nzK#b#^M7>znVRoz3+!DHUZy zM7;5ClAXgQQ~%K;8XOF+kPihuS5;ZL%=DnT=9bBOaXA3U%2k%{Gp=v+8e`*h+zMH^ z22)+s)B;u#;@i$&?;xQ00)^}!x3sH^ABYun<|gpsCjvbAKzfbkU=*s~ z!;)5*XoIk@hCA+-ubV`fWB<()Xw!9u&13)y4+!JQq0kw-1{UhS!vSEC zRx>b&U%4o0ZcYa*jCad`Bh-mIYUH5n?Ya{P$q8Lv)-?3Hldzo0Q?RwAPa&BH`tXrb zMe=Xo(35PjVZIU$aE&B3kMyI-k7bWWEZLI65f!Ch8xS3B4pl;-$s`a7O$EM#v6e{c!RFAGN^lBRDl{bb)o=SYoKBI5owH&O zBWJDIp*egCY|D2{$ORLwv_Ddm;1Okr+Hu&MT`^*_UMFDpp=V8ur8RTKW%uL9uE{i= zzmSIBn#|4^`44l#nzcO|oQpZHY^TUzt?LT9kk-q2q_Ik`9jdcDUYvjO-CGHC^Y`;+ zakKjO(W47!(HcahNJW(BdNfX%qlrM`^s&#=0Q0rDtt$qq&h%m7e)1Gx-|whuXh0XQ zJ{?~GqNU|gLE zc>IpmS%GP!!z?vNoXmWut$Bqu(DouLDGIXFR zUb4|>-2x7&ieM9mnf5?|A z8q}_s0gZH)JkS!$Q=xwe1hEnS*Ztl zbZ-5avUDfFiy)@&wS-NI7Y}0I7uf2G6;l>N7TRz=HK(PjB7M?fT zLnnXA)f*EE;htUt6>g+IF1&7N0{=n(xKB*uz;5`-zI zUGHM8J1$^AERrL=Ix~du{Rh7@8c}9;bLC3?etG&JnX^YvU2J>fNl@D0SzR(8UG}%K z#G-H3XMALlQZNth0Ul2J|mYy1!chIc+$R7)YZ2XNwpfmK1!xCCU0|q+wtx@=Y{kZ)Qh_ z3tylr1U<7WJkX7%42g+9_JF>ZPXCbMCskEZ9}Jr#r|oo?!|aI~frhWaOcC(I(9A}N zUlwk45a0%&J-jS3s87CQggh~cUvmdgL*+uzqW^Ce;DgvtG}A$V$M-Ww-UK0X(exc^ z_YnpRmGm$u4Mv;~A4_0(zC`Yhn&ii+GJSmDm)|rF!c6= z*PfSb7xaS5Wx_!0_e?~TpV}`516r98R5=SVA{G?inG85I>JfL1jYyey>EPdtPc56S zs86>Gq0g@r;LHCGD(2s;@!)M9GA#fc-vl4W+)S;RV~GOOrS>xwf;uIX5^=-=Df@+b z6C0I~YlH1uS3p z-$Ya))jAadBAZ%l&gM%HfP8y(Y;nQYQ*sv<7aG9h2)M?8bz5W9I}LC+UjW?74;GUU z{>-G-BWLcH+tAQ|u3KZ4DCXVo_p7Wq-0o;_?G90CgTU%r`*@E{lHPCS_BvGh>I%At zM(ZmxA~@c2*s9lEAaa)p{@&tvRBj>Hrl%G^W?ooOp6t29Cp{d*a7pAHFb;Zi*4IQ& zbn{OticBPdZLo^jI4~PN_{Q_RHxk6)r=p@dnVIiDX!O~Y2|VFj;}t>fO;V`d%q|u3 z)zAHWxUwMil#Y2(Nu+Z*vnvCL5C--<#8;hGH`a~3EeR5)1?WG+aeWpX&Xu=#i3+*H zc>=y(2U8zVAts!TYr_dAhG2aF?q{>LY_;1JCiZ0V@N?(mzmV+KJMn$~KbuUJQ@&`u zLegwmg9jdL4wqJsm)jB=7Ce@XSy&46l`H&HDVUWSQu2##wP8(GO5Y8_pM}5v#6zueN&C(=mE+#0Uju)3REUbgV*vV2NAI!aS{58GV21sjK{-S?ie6G zU~FtzjZPdR(XZa#^MdWGs3%qtbBwC?1&^5znAZQRxSEy!YFr2oQ6fz0Sn;wGEqDn~ zmHXp=? z+-lQj0xBqAzRwj-fRK0N&Ba@6X>KkzQw2-vH&zCZlPoF#lKOz1V&bR}*fM~WnI)Se zz%C3_@`uJRp(4;~fU*TB7ljLFi@UnDD}SdxJTG^U2I3{jd2K`fM2-~u=mNF-e)Lk0o_ocox0kO>*yQd&uRRGbcRvEP7{VO<@aV`H$ZOURQOF9# z=dwE*!uAM-(v1%WY~rAo6QcknZt`?A87gQ_JN=0T{AHAcXVgJh%T(lWrZ&q57tX3c zyv*NY6P-^Derxb4qA}Sk2xCONaoJoo&hM)#RB6ye+xTxhpdl^w^z=#y ztZH2(|8H;3e>6$qRQj$SZb8=q{LOAz4PkL3mY(Tj5D6$P^0Sxvsn8 z0G}s(VQ#d8^Kb-2{6*pt8~)wY5r^jX=dBy!K2vv7wvDs3MlL{7R2IRihyAxQKEDc5 zLY&$;Z2R0mHb^0UKVKZv@9_!$mDGnG_p1;K4MJK)`n9k2DBYfZwZpygJk`SW4NlU+ z`V~9RH}BzMdH2a%yM3Qlv&IWPaYRB!2Dkg|zND%mVy0JcFwHu3?)1O|$DLIYXf#g02Ye!i~^n%SYO=u~(8Bl#&%{DwlAAZ8Xf<-oL`vp1PT(32k6y)VBZ z)t47ZrR!Xl@RnmzF9)_E0CZ zb8w*Ie6x*Pu8(jn|Rwf$4d0f7X< zd@dZo6u9j8Kg|IR8c>LFfJDpR5lChL$>iTD7E}_S-pk{Xw$}I^XvLxj z3*!id5|o7gR;f{4+*v2y&AT!uAxhk3U70_gPlU^@z*406`EurOIv+T5>qiwv(F|(z zr;&!jj4ckTkdF}xw;Ayo$>y(Y5T zP%VJ;R|#x`e|xw_3DU%}$D(&^j_+j9pKt$|H3%!Ri@rR_nLk}b?=Y^!Lqn0!-oBS2 z+4)prE5*^1s0m`6uPhsO!#X9Lh( zcP9c}e_ksQ$0v97KQRYnR(s5-m6&v^d=zvTsn}lcfv~)QxM@O}l^TOFg4ukNHS)E( z2i%+<*nVwYaP_ENmyOldzZ^h!I(U$%L@i{bd0}g9T>!i(r*8HQ&+$;@6mB=m*)u{P z5UR9H`9i;g1pVh@`9Nd}qDk71i*z10-kAA9lQjmNKxAi)AFBlTAQWk0;%E1m+SbWCkuCRCRUN;mm2li&6{#%Q$eKHn+Gq2ps*Lcyj?^0jPJn)fwyS zy1)-h_EfHLzh@)6ZZ#I5Hit9-y%8W-Jv;!xAmtq$9coTCjcdTA5`Z)s#Zz8_$cDldnXh6hWFt=EgjY(nc24sB?pc3FS`;}h zCCSS@MHh}vF!xRZr%G^OON_(ghynDdeUHvNpYF@`=GgD~{+iubKHYi3G}8WJ2oe_Q zhjEif^XU_VWY%WWZXUy%r6s;Ak-us?V<8}r1D=86q(qL9;Bo-6Ao9KqXo`;)j*+I3 zpT%~IMhpDfQin5FLrllK{l7k`KhEL0+bXCGj4QacG2QHXkf*Ly9U0N-G_0bN5) z!H@|2g}rZ#KdC)Yy7?+8X?ELh=&x?!uAaxufbHK>EB#^MNu{WH^SpW+ZH5mX9MTjN z6tg@W@+d6Y+1*pB2^9}o=Qr#=%6Q3gj~txgL==U7($~oo9~~nq8q0o<#_-~YYOr-VS(uJL3k@J_s=N?6Pcc?Cb{i9IqGcZ}b8k*OZ-~JqqP-18S;|FKD$1Any%bv*To>t9EPoWLH|p$AMfWl9(!$zm~h|gs%U*# zyRa^7*=ivNF@n>d-A?}-EQa(4GhFMggz*)_N%V0O)6h>cX#CibMkeWp8J$~?0g3`4 zBh-lAVCHQJxO(f;KBQ6c_h78ZvegF$Z#i3c4n=l{I6QM;piQgGW;V@@C5>|;-}UX^jU=+g>dgmMBfW5F*5#dHI+|GUeOm&gd)?c z-AY)me%i^=Qx%y|r6>tHSeTFJ+(eZ<5)OSxM@Js~%dE2~OmK!lgu&f(uuVc?N*t#G z5LRp z;9`)WfuEC1&J)dG=qAmr^zuF0uelNtje??uGtZ5`GFs2k36uPz_^!I7UQV2+Gi{T{Gm50A)iOI}s_x)BrIgc~op#jkP{vgsMwb=W-+Yg=o*n&_1 z69s4OtIhi5*~FiARN~iKK*ST5`GZ>;=X%^8IeG% zz|ebfm-+!T%U)M93?JCA=+)`&^sOK4_k3xgzTB&JFhBQ{`}kSw-h-Mt-*~FbL9ILBI=3e`CWD2J$jq0(#`=Cqod>X|v6`|wRP409hw4Yb)lNJ|WDX6-5>@LU=A@LU}!qElRXYDXH$8<~~#$nCIC z80yBwp%p)vFzQ?#VWLf?{Yyj$BOAB2M=X+vA%Gz8^r~9i=QQ&2i^gCKdki`6%CYEj ztgFsf7ps{I0p|z`MK@HO+fsvy3AS$peh{7vO(z)%WbZWvkAJZInVzJMXT2_ocUGrzaUqw}0;R zX5NBcBE?vkF}}yvWzv3Z{@>46q(Gsr!YBxXN7I1hADnMKUpz#wvB+sV*^$3qlfA*o z;IU#^-q$m8$-D?SAo=6J#`}}YbMeJ1Kwt*mynmRQYQlgl`Ld(u>SRv$y5-O;4x|3K zL8{eT5cM2SrCRWjh`86mAUe1RIixe%%qr~>05asp8Lqv^h@f3@)(+XiiqpF7=d*3F z`ZY7`+Y^(gwVyuRr61tn;W0s#L6-weSmyfl5h#g95w)%uH59F7%6Wi3Ekj!bJ2Vuw zlyTv(P|5DVV?7wyNafMn*ut)L-lYH*0E-qXF3FcWgt!>|*&{jPZZMqrEVOAZARA^u zg+O#4RKWXQQuX!qdXU-DE@!e%BX|pYUNBP&FpcuAb;$B^n(N55YWGRX$WR560(3D9 zva)v(K!`oNkX)EZ8QLIdf;mc^931rP^k|gvI;h+^9~sISxw*NqlBurjsuWp{l}|bX zD6(|0GK`pd24rz3&exseK);)NZo93Y$cLnlfA4yJ`Sb^|ea|_{3JpZ}ucWO!;2Yqq zZd35|6ah{Rfgd7fkMMSi;SxKtJpEO_4$==3?bw+ndScAe*TTLSooCy;cLdz&+I?h) zKqz>Z>%K%n3Tyo0;SgtzRa3;fbe_k@L&8ipC{eGG*rUR5@|Ig@Mv+iHJVA<>`Z`cH z?sYP(Sa0#=i#cD$THdr)SMFOPbwcbub(DK~)1S{PdG+Rsm9;e3GT)y-x?otsC<{e& zGN!UbdwrZeiL~!YVaJC8lI``+1o#48U2+(<{~mv8-q*^NNP|Qik3F;yP&XZpDH8Al zf4(!@q9{gf4|$-7^L;2S1UxUrbn;u|h}oJwL$F8=|NgGKeV_K6WJxt)`5>&0 zX^F^$>wb?SflSw8FV461UtTa9;q~RuC9xdm#csM4BBP|)iyu8-Wi1Bc19B1U4iU}}4HTj==q z;>Zd9*vls(XQIwT(Y;s^ero&#>ea8-L@Sp~JFmGPz5BX6bt0>k;oNT4>@E&Fb@xwu zI(C*l@842QOB7aK0k@o+NaWQRBH01S9>n3@R?)%|vovvkRvAl^KMY_}c(1+v@h@TE z&!UP`8F&Urd(?#DCs!BO@$Pwf_Q#0jI=A3!r*78b1IHMG@$d1>j}e5@K=x`~7qI|v zZu8I~lUL*_51Y7Le>a}au}}lfke!pm7Qki<+yUFY`GVLXn$PdOaiD@Or`Q+m*BLwh zrg|rFI={N(lDbDs6+ckDGqwZJfg~8=4SBHMFo+d#7c@53y005tpZ3c_*eh;0F2yH+ zkN~r5JKv~qQ2tavO8#elXfj4>_E=X)c&cE6M+efo0TC5|glbneH}j82>=4p=ix?9t z3iLTP{qbu+4#+LHtTokn9|9&vf(V-hMTTBkK;7d}ceDa;vcaapHKc`F@GH&DA&NXSZ! zU9&X39ZMx?@m4yXMsZgr)9=M871}RBa{~q?C{hOIk*THql&ofxY{|e?(C>DXy##(1 ze46vwfH6+2KvSi4u*GxUD05ohi%UQ z^(wE~r-pmIJ%)suL&wh7L9omDrSTBR%2iuQzZQ9heXq$mO?nvZm9+1_#5Cd10>wHC zNtOgi5Z&*(x_|m_*+H#jOz6k{-w=Y@7oUCl5_09HsuBcT#`HR5j_|tmaIw5DwqFho z4cUDDsgj`AMH;pEZ=%qkC4=t}7 zrOxTglb4C9c3i)Hg(@)kl@>AqtqC{LY68&caBK&^LT{x*r-_V&s4?EjUa^B1v~Ou2 zbb>)96~@Rz5UTFr)`woKihK3*#z~k=e->om9-G<5|0ecj~6!SH&{Enj%^5i&FsMU)M`6jOF(#j|{m*ovlhrPg&;jWK`}y zBg0S>EVIo~lF~9DRF6`}^vu_vlT!&Xn$s#Uxb)cVg%9^+D}pQ zunJGUWP^0bjcZOL(59S73ZjzeztI?{&AQeikmT-Ei>+B8;~)v(8d9FjV(Z&cxe9Y<(wh|a`cTW~CN7nUUX~(~aS^DP-w1cN0z*nP$qO9PdMUB7 zu}e!!^-kC$*@r52Z9IG=CRPX6s@#b*fNq6P*QI$}J;yK?5(sy6VXZu^($;HM$} z=9pzM|3i5H60)sEk%IpFs;X5GmK&LvfS{nn{w-q?W`SPh;-XE~#s>cr59;%c zr!ea-W@?j}G6VH6>sKpjM!KHIJIZzw)xpY{W-bv@<+So->{xPE{;malmz8roH2Siv z{qW!by57o9RLg5?<6{$Q>JB9w=kt4~^2AXXmTFOKtnqi%D`bZjnL)N{Ar0Wf1HFHA zt@n)8wT;H@a@FK8udlc;fh@{3QGL!o!PykIf;MmNp{g z(^GU(GRyALZ-fa<{FF``ZsX1`U7;h-%BEuH=2jtJP%Cq*XfDlpq7?9TsQS*URKhoV zs~)he#0(QbdHah!L>47+#k18ov1Ec8wh)-#iAYmM=;2^Sa6wHCVY^lJ_j!og?JHD{ zG14p9^Uco6;-j=1dieBdg$02zm_K1FG_QGp3>rkopt1=w?{+H);5F|IkcJHo$SdpO zh6b{bZaGLT23r8&EERGZ6_W7aCy35ym3G4dz2?-c5CNa}RU9`Zht3$K-=uwHpdXa=GEpBA8XPg#gKvF`pL zX)teUKt&AG64vpZG(`>ivT4%lnepq0UFtgG98jX@tZB8-4$YB`mH0^$Mv=r1ymAn` zvr+t-H9`OFJq?3oGcDQ(S88w;q9-uRFcA=*Qsil>Wf(B-g-vw{57fuHCViS=Qa`Y z+Mv0M_LdET(1}Cx_!u#%198_@YBdEd8rFf}J42@oQB2n^TK48B>hh^g`Tvv!C}KCH zOTC6l49awDZX;P$H;p%B?2ghUYK*rnZ}-{|c~A$A-{SW-NVd7yk6^sknM+XlTweZ; zx<-+Sn2|cZeD0(fHCN6~Q{M zK%r;%Y|FIOl^_aru@qi1{@Uc~OsC96sUwTFe6CB+p6wYU$CsWgn@=2xVYzXv$KtD? zMjV49cAwVc`c_ClqCw<-VjHGn>njm;?}sd}q^1~=WtocTLgh8e-u`AnSHu1}?h#q0 zl#@6We+Mr~qi^zx)o?pv>+seL`*_)rAO|xc-ucARZRTDU`l~N-p-=Kt4)!Zf+_mUP zGYFH~ml?hx4H`)zMX7w=uspiBa*exZNtc!!S8AvpsXV^Mky+eUni%z{Zy@t=f_1L_ zs|QBE*IIWwMnNO^eU6BpJSktCrYrv791G2s(XM1wugW8Jt>D01U(as`ZJAZer|MnT zCYj5{qHLAc4?yMMwt$K#9|p$cK|NasBi4ba0S*QXrsP~^U2s27S}?;MJXlmlX0SmirN=8OMr298}?K1#)Slg1T^LAN0R|nEKwSo8(^V)l3kuv## zXV6JxY2T|9LYu)xLoMU?8m3|(eC0o^g+)aXzVSFJQK-ij;6mj{zf3+jfaq@bpYNS{ zti?xDa8}2Pd}ZUQWt8>zwd+5!IM1>zuf{O|xx|yf#c8eQl56-*$8ALex#{_BLo=`J zjSb58CX!9gWDs~7W>V4b*f9RRu%Nj)H91*;k}A6e&>YyJNN>Y~&A_Wh1d+kzepmZT z{RntHgXexBI1DN#qd^l^P=L_1#M4M3G%aHAQ;^%w!;D#ufp*q~>$!I~(utEW!akUT z`C=NR27`<9v;!ZfuB|Q##?MfkqV^j%*01czGsn9ObSxmnzU)C3uiH~Z5wPG1v*OScjVE9rFpDj&dkvagSG}3 zg*0DP`|}OUNDFGH2QY)RMob0dYP~`*3+W6O6Q9o5L^V@4hkdG@Gd(x!H6txRm5Y7b z{W_G|g(W39=b2##V|4L%i6P=QY?RnU)16#tu_ST*gh6W9WJ=0Qu0PP&HO3w>-bs$x zyO9NlxI{VU@J(*hkLs zdi!k2$>kHvS}bxB8e3tGA#<9BK^n)}N8^*j>tC)GxOzEd8V{*!Q)u6-ZAh60$y=EQIM`Hi|b@Ro-@kcB) zCc-sW-;lV9lBFCT00G>%)v!O(BepA`w4gsl$UL8YQNXZ8R)hoX+1{$fmzY&9K9*K%~xL#)8D4)E}&L$a7=+ z2EQs(^q5p#`65q4bY2m@ZfXg3(|6HiFG2(RINhB?45hOigYD#_SweJb`=~B?QV{Si zz0|Z7Q!yQTIPb2|g^GNaypBkdFKp!7Pt1Ta)ilypa=Fxa5SH; z-}ULpU>qfO+7(wEfw9Bze@IM=3F-cFAFqMC_1+Ez-4C^C_toT*0_jy{$87~SekPrF z^#rf8Moy)jvE5w%j#Y7ov$Xrg&MZA$QT4gl&W)uIRQVOri&WT;icFNP>~qahq>W(? z-e< z8YB!|Y#ba63=F}%otMc#YZ6mX48m=!UuFb1H$uip&TFOh;srk_a3&^`r!3vmxhs!dVewKM#i5!uVRo8D3)H}8wzc&R3{3z_d`T)l409iNs% zud;kRWzAaXCTio;Ki+;%w=X`k3ujw0$x|@5Tmv0vmDhg1(9X!1W31GJ%~ANhd3#>R zeiVGKS0>cc-!JI4ss;GPkfE-$GJFQ0yn)(N9OSrZ0|ROZnO@_w89g>q#3$vDGGX2Z zQ>v0y5^k)#KUC!RKYN zSpEwdDzdOjym7A+pGui2Z67zr>PBm+VZ_dm3F!oUKMgedglBO&zLP(H9EPl!f7v>` z@LyZ* zuDA~Pm(wk;To-I&d!L4U6CeT&`OvS1rypjvD}VHc@N^z~E4Y=Tzqy=Oz3F8-nx>mDuUNVpCPs}PPb>YU-eG*%evsaU0#nB*L({b?5;-dG_gY$> z?-QBX*0@mJ(Od0*IDQLy&F$n`qb#^p_CCm%W5key+czXAh=zA({sS74DW5CVIhQOk zV+h>?5-Blyv3^CO^z^ff2Uz}|rLu46LcRyFiCdr)M7o<%J{fLnz6q$$ITzj$Bl!~Y<&ZRPr>LoYHDipfM|e* z#1Ps_2y=*viDBgC#>>@F_4AVgym)0f$&hqq#bsrKzOc~Rc6CBjk2BY(RKUD_-Ok2G zcYbI^gEUJadg%GsKZ4w|olQd+jNrOApHcsGJkNiQrq8xM#ZxdunU@!)wJ+Qx=BDYk zn~W|h4`=fG^Js*n_hB%OU~p22wkbPlp_DMErKYEk7pW4o+ydnmmSaN}V#1L9mpee+ zKvT2=eh@l-{-l`OytR+)DMa6^uU|^ z7KW*z(D0HzID=6&9;R^w{M-3G+#PaDU0WN5UL0YCU67oqABY9Nclk_zRI=mg`@v$n zlJSx3>Ghk3l(EZ^IvIYE{p`dwIGFgzO;ptQMAeEKD?~|B^MzYyH{Qgwxk!V}0Mwk6 z;K*oQ((=k=+_O=@UA?1@_xzskn_YCXg>~b=XD=jjL1UkDQp|^?V0JXhD~;35x#;P$ zcS}m_KDYj0qUiab;D2L>^)r>BxNM+>A7AKQ`X_5^)zHREh&gcVLf^PJ_Bzm#R*E%n zEb#&d>EK8H&1bp_<7Evr(CX9Cy{fiOP#4fYf013BpBY z(aur=tpH03)_>mNl9Ce8fg2bYAO_0;3d_p2}2`~m}k3{_IvX!Y-uPG{=$!W z0u*i6tf>D4#+TRH*njbgGR>%z)4#|1j)GRwC(HAhq=A`U-|rj+E2~p%!*^dk+149c znJ5NWVZ~Tkslb}WlR&kzBZKimIVGAIL&9QEc0cY4LIy8M5FBA3VsC*;n}~?WX}UHH zbaQp!%mgM7EY6^WI@oTS``+&R5{R7Ti9td!|H1^F&xUA<>^TKb(lts7!TAJ$?A}U- zwd=|d87X$yY|y;|Jt<^!-Q`;=FOba(|7IM?gdB7)dipv@hem{Ob+6;Ty-S~FA4;JP z&oG~S_}RtR@3NHtigln}Zc{gT-XCX{WF$C!;(g6$TC4#_?(X_d!g*qO7hk53hDoVr zQ4S`GPXs9D$lqpQp7N(n?f^7fdCiYj&7mm`mp>aWv*gpKIOh+~K1@>|>=JNH`WP*` z{M_@h?EcFlBqB6?Z1a!s-s3$htYA|ehof5x`dRtD{Pc;(^T#i$8&MwHAo(Hh-Eu({ z33g$h?|*(0MEds=j)8V5l9v);m*PAxe(iD*%J-~OW)Retg)UrNhfpgo_!^v!cG`Py z$(w+C6LGtPgHpbF>TpDKZVUptGFn@WwK8 zWav0%ee5Cl*jch-v7I01miT9X^=sRt;?Rt_BkFudvhkT}<@cndfZHkGzV_mjwT*QM zo_RCh$$s|U%Y$smIxBd3S*~pC`@|EQHObaHiDIuW+iZr0I3g1g9>eG&*Ul=~$@ah_ zt=k3@iQRYq#f>2VvhGWny0xbL;>)0P-YP3GB3 z17h--ZD)@!x^A{oK8O_wyd#9fXKz*V!d%qr%QFz~BG@GRuQ^c`m8&qN8mcWL*eGO*nE z2dqpW#o+j3hEuMmM@i=D$WT0t5555!hKPjZGcaeM)x@QdNDafeU1&HpuJ=x%jN`$| zMu`?>=j+<UZDP-YQ(3*{ay7UEPhLLrpDSm#kdjt^~d6N-0shd)zVLIBbgJF zU-47M5!i?OCeHfapcEDph;QjD*K&~$`x8m(la^pwvWRe>c~)YwS=AKDA2=bOi)d6)YMfy=8S*@&n>s165HSfOaL1JWI_ z=WI?@8v+vS=*R(odkg~t!RmttzrOpY-5mO_1~TD^3bF|fY_raX%!VvHZ|jvbA1bqK zigfk`y-FDv0y^QIlFvWp>!q6uUi`aaaq4qjRL{9UyXs6W{Ek+-}N1T^nz3)49>ss&xT9{g(9mU~u7TwdlD0FfJBBJ#VvT`>qWAux7(~|-M~t>8FiT`#X~o|dx9=+O!y$mN{aTj zM#*`{NlanSBKcRnW4=V@50G#u;`p*|}1Idfg`DnEYk8pJFWAnFNg;p$HiyvzSzaP6pi(dZ*v5#Q!wh2fRPv4Q< za^weGDv9V+ddA|n&&iBoIC>#B?WQUrW>5-@Jq+)l@xz0TjQ>=*xy^VCue1G ze9h@ls_Ukmz2)a6#nUqSC;x7=kD0`S({^0tgdMxaRD7QHl+jfErLr-{Qa5uKx(4FJ z!a5Y%ZxM`y?*F_l(T>Pv=FaGMcdv7NGFDXOP3Q>m>n-HcbzK(se~Ck|j_@SM*{Mt7 zv1Tz&xSUC3lHja45u9Ni&*_o=H4i=_sO7P2mNPLShbA^F3t_APVI|xEAD++2IR9y5 zKWQ$ns(K6DE$l*|GB!s%8hEz3HL|@>~3Zj3C%!RnYuH_mTL)xvM{TSiy_KvjBdO7d-Z5qXu?Be;+KU6r>nT`T;`Y2m7Atsa%( z99-NRzccsL<YLmB?tX*cnyp+|N|dh%84`eqE0Sy6tO7kc-k` zV0uwU7T(pZ$^SZ<2KXp|O#L8rUh#R8&%u+OtHax-_9NFl^OB*5=T2VUNvRw;ov0vs z^9#l}=ih}-oJG(XIgw{QBSK41kZ47oTd2BzFQt3(52^c)DT92_N=pCkp*P`v82@dB z7cbapB;DojO`R6eZT>mCdw#VaW&2w)?_$l**%{wD@JbjDPg{(JxaiSPVp3b9&9OB| zJ%Z5)FAX^N^hVNVo-!~B#{De~$Px3zO8bZbdeBFzx+`DGD!SFut4qQ+d68<-EJEH# zyqeV0euEpKq<7n7yx~3?nMEA+;KAwaDUAprIvQFI+W3PjWWJAP{Lis8O{zXcM@}?s z>fSQ9%13SL?@MJL7xP)Rt!c76eGxosxL2LagIQT*WM9`ZdG39uyZ67EmrE{v#Ga9r z^;V?`r|+_2-+YmXO<>iJ3S-1kKWSW4X81;*Lazdkt)YRf0o#aDP@@5>0XnU9j(ZspM*b9Y16ja&DSvGkG`ut?Ircv{Ed$!y_>7 zTm}SIq~`3|ya4G>?Zo@5#*@D0L z^*c*sl$~?CpIMui&k5df_Uzs6dhq1qn)t`P3+18V@~DkJF&Ou2#Ov<7(J4cb^`epK z>SoPv)4U0ND73K^gc?zy?#$;{^LKx#d$A@W`DzcHF^0Y{7I2U6f)eR{;r4_{=SpGH z5x$J(1y6B)*NwShR}W%KkM6Cuj(tBI-r*y0{t_-(`)QQq30B5{E$M>W${+jR1?Opd z7dr@x(LGAlh$_wUr`XCqxuJzY)_!Lc>guRtjvjOxk3b)W0-5OwyO)za(p`~Od5v`sjbjy^ zjQZ7C9^|HR60P3DCJeoYoiiip7f9(dJolT1ZzodO`Cg)clz;CEH4rDJpx3@{VV?mh zeSS?O_37Vn?(pC&j@VNR26N`TzUem)IHuzy#C#w`30ky5uvUcHl)C(%7NF`7%X`L{WAag@hX%UG z5amR zazh;*0wpKJXKTZ@$&t4D|5pFr#3!)91AGLHBO1!9d@IWvrR%97Ub4XhAeq~rz`+8} z&E!}SeH$W9F1C{C2lCa=SGT4Q0T|8&wb|K~N)a-qUPUPr;~}|2Q|1;oHW%iHX}P7IM8yPY@JGH-dH#DTZH<7+iC|nz%isVra1o6uY_rT1 zn6otjtWv-rnN_3no=^~3`ycsVBYv(iu4>w?bRkOBrUJn+(b&yC$Jorwc0eP2Yc;*w z!ZYmXz<&zcVDP+hNfkZk1wOPLAh-%UzL!#U19ESOZ-TcE8cck|b=pm1iv~)ImRb`cQl56sz@oEz@CzKJ zFaa4PvwTAG)Knup)p?p3hqaIvKYqhmZa=-%``*h96~B1k{U1G5 z4{h;`YRh>L{PlUK*9TMssjfWm=SOXnH+)z%NW)Y!Kq*9cLX3%H&UClPTjbu|1=l=yMiNjYWbs=zGu1J)>Lk zyy&UkqI)JA`^dXM8>!v)6IJmcpnWm^OgHB>H90*z{p;}4DWHdiTQHo!ZZiG181l>Z zEURbvD`V?aKanqK389XzDu_aiOG`~v($K(0(7QlvEu8Kz1);rptCjibjeLmL*-D1G zhDIUW1F?7bQNUI=x>oezLlW42Tp(m2Rf8EJ?f`%mGnkI*3Kp*&*nWd-2Zp|pw}!0c z1%#(@T0Q!9iSF*Tp!}=pSwCdNt~_2p_7QjaOXq*VJjPy&^V?U2gkbXM8<7v+uDkP$2g|YBxHu!W$B#8N2ULR_xKF1Hidfszh{wAJKc-k)eH5_$egX7 z&+L9CmYHcInN0jrSp8z&cNqA$?@a+}l=|O3*4C2;jje=eyfcl@S$KHDLC*^UcF;r_ zo+Z4y)2Tf2G76}VD7Gx2z z4bV`QmX%@M6XZ_fifPEymAMK6iiVhmMj3c;1eUb!Ui+vYAEf#ketszJK7HSKAJR$A zdCN9`Rf5l3NkIVxFlR)6{=D-l9lB~ki1~uNt&!(}7xy61EsQN1LiXaJPfvj>3PCUC zkgY==gO@U>q|!$NMtil40ett3*>tP+R)N57TnP{7QQ7OIIYID!$(-*AQhUB4`pi=E z@JeK3lL{2(l#-rXUF+^cayvlzJpj!Ruz7_3=S@95zPfS9h2>c{?c@QzbzFLii$!+*{i2m7aI2LuG3J-tN7p}`F8y3b{oC9 z6?pRUrtfFcAtd||rcHWFU9?tNb{d5CFBJ~HvH5(?eH68++u4kEejN39=ZksI@kZQ7 z6J&<>-jA3$t;|`H$|H&0R(5n{>{cfnPA#2r@#3`dWm1$m|Gc>wTTuEJUC=$IrK3Y$ zXRlLYnxJMynf7U~JF2b8jjG_u*rMHV)E1dyQ?pm0Pv7DB<<#Fl9h@Haf*9YXP-Q+qizd1R*(a!eFk-TUZqC!RPIN#s|v4O(wYucm8 zouM!0hRCn#>#1NJ5m8LXfr*P~Trw|P^!dWE27V#T2syYs97RAdjnC)eq1Iz-eLK2# z;oW{kE9mVcXQHDMuf!^D(YRDeVtX%7;S4LWDM48IL-Qb7^U&0#PLlQJu zAAKe~hzGt;PU*jUUr^ZgdZQd0HZ>J!5aAEVj0+9Q02}ME6}ZB#+K-a?T5i$=9kyfb zr*Y}Lfw{)Z1^@&y_5q7@a7-?wR862Q0f>o>%p($6jY1&!`YIW5;Cpx+!(p71lk>%Q zw><)S7D2(>(^E0e-7~a|negFfOW^xm?F_i^{hFuK>wMTSVU8x1ns)oZrhm?DyU)9; zw_9;;>^f|XLWB#w=v(X*$%CKs^f^CIxFzR&VoF~#u_v!QvEN8!N`H20bf7iG9_etx zb!+s`Cloq0I!&~k4y313mG9tn!Lbcf0w8GN!S=5PQ10EWG>H~Kpr;_|fCyqp)k7qK zKIlRM&Og3?35c!n63yE@)*Z3Gogae{5%N0;nr7nYFrl2Vv9S?z|4TSVNqA=IEYbP% zRmR%LyV`o(gkf!Eb8%SZT=zec27wpt8|Pcmrkz=p`_&N3XY)CIL@Q6Gk}R=q+6nS$ z_&qj^5DdaJ#d-IwyL>i1m|$*${$W}6=1{i9WdX&a5<~kwcgnk1yT#%UKer4hAKMwT zi;J5BisJrJ#lRqZ|Ln1KFsAr4`lWT?2|?Sb|9)M*La5Bq9l z%D(Td>}>^6gTTRovccx8LbLgWps_}a5l5zg9X6nb$usSU4Gwbu5K>`pZ*f=x%rY{0 zP+D4HG#mKqA!YyW$!d6>C{!w|tc>3LTL-veNS0cHJShZ9ez?ZF=+ewb@oa1E|ng(ZB5pfP1(>*)q_awx2?= zV7HF|!8GJAn%6%ef)rEvGNVP;mOCK#03Xym)SGv-)X;C@$GE6jS?YDxm<(ZEK!q#o69R%JuA!LVf(f1 zrpEoD!d};3Z~l^;F2y%R?fjtW?2q|u!z|KBK+~$~w%`^~o=vn?+u z{O~)b5BZl=@C*2OV?bg=I9VYo-fQ>w3;wK(S*tBxXW+(3YT4!|xpV>)XS9s4pFLJz zEQL_(%CKf>zxunq{*zni?KY!BEtgiCEVKX3?`niLD=rSUFv!FHJdjkRt~*-ne{oyf z=cqXc!)x1uW3+zt#e&$e^Uaq_PCQ3RTq86x2Q9f``f>leK)T^y#;9 z$Fj<@Hy;Y}pa}z62yTsngKz<657cS0s)}e70PBJMOiKN>A4BaW@p`aH1(`nS;McFK z0Nl0x`}LHGh2{H)N2)@OWjeNB{_eM3TWHdE%xv3FmK#F~KkmEn!IyK}c0G{~h1NH* zCUYmIrp7rx-ZibZ{r>(XhG9*y4|c@(K#q5c_sLadP>iW5*J8r%4&nfv_`#vxnKH81 z{h4pF?9Beec`>C=O<2Q9@XGwbm@XNL)zzP9z@1)f4ag6+6x$@a_KCgMw_bda0txAh;)cysyK{hmM$>doo=Z*lKH{tWn z))XTI;CDze*4FdFTclk`YEeD00V`uU2 zie#P4-5}|QdTjpScludl;_)0|R3A!ZuQgPtm=p-S_JcR30!$$2O8&aXarv$Y!<3KD zO>;Yl2q&}mBWCZl#eR>RUfTNwa9Rf(V_lt}Bz+%Lsxfbmr4Wv*%$`Fhg1u!OD3rN? z3vQ&Q=W}l%wFp+~z=h&p8R(V1ml?8xfakj-4+KZ>flpKB=F;sibwK*-!_=$G4t_QcfREO5##U;doTus`>t=x>&RSdh6nx<2op! z<&c%%d5Z}%=<`-6((Ff{+@G}4`@eEesd*Zo&3+kL;q2lZFnn~Pnol@W#9G)N@pqr! z%LRMbw6Z@=sV*-)Pu|^~bjpyou$-r)Tr6TEx%DU}X0WI?9R8uy^t&JwjmF+ z=c)GGWhgDJARx9zlTV*7p5Nh4R%LPJJ}h^yyhi$oMy`|DA5ODdSZj8=GuEVZ{P)YY zq$nF(TZ}>hqQmIv?M=zd9Qjc>1K}tv0OZRBiOyLLADG@omC1_31AS8pu#u=WAbGMM z$x<$T%VpH+vvo=jo#DVhGx%9h!JOuIvMmqR#1@}p2}nbH47)m_skgSC6EF@DHsi_A z)FHXLmkRq1N?DB{#DMACo>+Gm_+4*O;U8_AzC>hlYk`G^9tfkw%-e$Ac4b%hMEZg|1P=lbdbRJ|Zi4hP*;V>DeSWJSW2 zx&_q|9GeK~4xE`FAG-{YeenWDD7i<<(IFT?-+x=k7HYSEVF9pewU32C(&KG?4Q51d z^c*Xlmp>dHv7k8|`}uPKp4)5nWE5&bd|V9*1ueh3J||I+z6PIxmd#0oiYEg{pLDvz z|9{B(%CIQIZe5j@Qo2J*>F$=44h5vUTe`cuK|(+}q#Gp1krwG@K)Sp4!`|oY>pR!^ z;}0C*o#BbK?sbR2sNg9YxREJAb5v6D*7NdU7|hiHTtxq5EK(p9^YX>dXDh3}YC68` zPdz^x8!Iu~Ykm#pdGXl-%i!3@KHI_VjonWa%k^pk=M(=oRnFD(aDY_P+kN60S*q1L5=46ty#n8h?p3ltDJZSZqr(q-A~Wj zg^>a+)+_g|XPQ@;1j)#A{1chxL4wKU3O8y_txqHggDD#)k0=79IwYR6$j&m>A z{Z#?hS0JZRCO7Dq&d8Y4B>F;&a&I61`l>@0Z6_^!(PF@g6)04qJHixK#9wIf*e$P; zKOP@O#Kq9IT1z8>b1=S7bIr@m{IZxFxc$3#3b-Suz2zdudlohD;qqd!w9Nh|;*4a( zK2~-1Ab#vb(L^0*8`>2DzFr-I;1Bm3alFn}ETkXK(*o^BYt9nq;na?z`oMoxvCVa# zfYXB2!vg^aKMfEFF`smD!0uT^W%1YGXpb3>5hvHl*~F;RUP=8X29UsmJ{b|pMva9N zHqkR8Vz;UPu<=O4&mS2cE(1vR@0YJ6)?nCxl|)BJ7nZ`HkqGt|7}dR{r|(&HSb#j> zzkywA*AbJU#+x>Lh7Jt@KFRMGRp7^If_V!opDeMWSD94LFR}Eflv0uVSeaV(nQ8I^ z!f$?btC-l&A)#}b^yK%b+JXt)zsJ5(ipVQL&z}+^~5DEl;Gx#e<$)SDKjVo6dwk z?AN*hLiH^C1%caGG5a2>jLG zkJRl)0vLL~dY-Mg1uRGFSw6~q!_&NW_=b$C~1DGNI zkAn|z-IY*R$KlV$Kvu3+b2y#4L?dSlAE4!eD3KV+{1ycY)_`YtQ8553IUWzoHD;e{ zNl8@@Ul!XU-tRts$;-ikLu_7GF)~PgrAe;(;hc&qlRNy+T$*8Pu#{&`{=yN!1UY8q920WgE@n1l_rPc1v_Q_f< zw+t~m0Gd?v#G!|sUIXeK@n9;Gb^pI+k5jW$W?lNEG*HPWCM8{i>ZwMP5pX=mXG)|C z?D9&-`yPD42!X3*%14@D(bQKzRvfq-SH{w)&!P&7q;`mD-3|Yp(NyTQq?iREsNg)A zL_VEzzf%|hoTIC#fLi1VvVG)aOcCz(fbOnZK(oIaRX~40}VL4D>(| z1WXZ3HWlA-DH}a-*4^(nwAY@YXJ(?oj~#6+HErYbpjdPGXGpy#9A6A|JTMU+9*`PP zBKe&q^ zy>BLkD|}f!yiGPXL3oHVvo3GU$Lj8q%7LlEp1*m0raYk8H__8;M9c0EC3ZkPx=&!J zzpuVXwyvLf7PW#_gvt+v%6uRFX+gj9;W>HWWayXyC5>>#^&oY8!|m=UA)gg%Kh5=D zdirsz@9G_yLLa|;ksu5PFAxhvL=WWkm2#UU3lI3CLo{|!q7r# z_b}>)Zmyx==rbPR1RMSxBcoLLt1oq#PppuvClxorgXMlh|95Jp&x+p}^QHVw;X6XCceX;%a0wYmcabWv-=B^f}BMIuK&LEm+Ii3hU z{KAmc(LtTqX3SH!}cE6!4ZL zq@v0;Ki6q~4{nY2UU73oTzGW>?~yS6JX|IeF1Mnld-zS8VckR{iV!e0 zpb--e&T$EhO}5pvMPGpga4UKRPi)ZL(!R;ZmX!R{P%>!+>i6ER`}wW{^|B40vKFoU zd!VWSzBz!cO9$q(vB1OMfRz;tRKS4~IlU|SUG;c~WAw>NPn4YztPk+`NmP;FGI4U1 zjPSte$3`WMQCw2;EF>RS9yo3#~8%i{-ZjYVV zmdZ;|ay!h^zatRDIEupC*%|csW{Vbfq5B+O_~8p3OXpZdVh?>LaWtnDSe<^)S?VpL z%8Kx+C;H9FedI?ERFd)23@j`PdAs~OYaG#Jw!)^jdra#%Y-W%z$oT@0-X)qg3IM)5 zn)Roy*s@lfaod5V3fNS`q1e&Ub}{(`@a8S!{7lb<&dD|JVLWb?^KfadyhT)l_4Da>9Q6X>B664~YRi}1W{mYO5Fd!^RSue)JJCLh@C?Un-Qo|*Z; zC6LZLU-aOXI>%0<=Tm$irjR5M_h$p(E`Vj92%JE&Z9>5bSd-lLON?G&LS&d=PGkV` z)=u2a!5iT7zWU)!3Qnywecz1Y9M8z1p`lNsj5xp%)*BQ9uW@nv7iOJ-wv84DMfKgb~IBd#lYW)>j99vVB#9+r5f~+X{OwNd=r8$hB8-t}!B##$>N)ipDZv7T_d=^rOayk(A1?MxU}E;CLz)@@!9PuE#}*cb zo~&SjObUoko<3=ig#j>xF$+#nYa*+r`C&j_e!`8Pg7UyCz;Rj&1V%R8S@PePz#svr zW0;pkz{`MbI|y0x7ZiD)KOt*53z+%E3R&Dw={mrftJdq%ZqHQ!V0EA;$OImB<6vqC zWLGmCx2U3#INrcn6?E3c9}ArU3R$7kf+bq?Z)*3v{qAJ&%g*13^mGF7NI*t|1wuEU zKY#yhRB6=^>bLdK-`Dqqv#YA9sgzGLYX0yClL9t}6;Uwd$`JIZ9eOnfA}#?|F;j1; z#+voUf5LR5H*N{Gk%o^%N=>#j*O=gFOlR02b6-GDFL%}Jybp+rFJArJXap-r9Z*ps z;&umD#Gp2FKN9fg8l+X!P~U9TpQDi`_K^ENlE4O{O-CwbffsCa1dPsrOWR_Kn1I6! zZFyhd=&{ai>Gd3Mb!C2z5$lK8U%d-pL2i{9J=YwJNJWYa*-09tRC+7pcF5i)R zU*F}>!fiVW;*U?(@OFziD`{ON^dIKzmCIP z(|yw>tOO=^SI1xWW)hxWF>luv0w9wo2vGQH1GQ@t&5V5u#TT zjs(L(9^(I7@^M4S4y$4u8NAkS2hi z(xe$bf6ir9k2$I`YIYxL&`8r@>suV@J+xZ5?Ge40~&-yCh&C+J zsi>e95y^exDg)!(W{P(|0Ic#w7s49tF2cdizP39_Tqr&y4UBsLV+cGoKuaS=H+wmC zllp+T@yb2224^2jMZbgBXvY8Xz=eAL38N&<9=|bR%#0CXe=zR%uTiRv6%zF~0kjqP}j&rb0X*Q8QOuCNSD@o(zIA+6I zM!{O$H|Hf$Y?+eqO3Y;#KU{Bg=gP{DTU!EiH$)5)na78Fln`;p=Xc()X|lxX^Bb&4 zZueZsIvc(*{lHrf^zt$y%pQYG+9#91qAa_}G?-QY=W2ZAk0}V@b?oAMg{&*m+KbF zP9ab#)H1)se_tzX?dv3*nBriVY2w3tY-v%O=og<9LSp|{$Wg!cpL8q#F<=k%%@M$j;iLpJ!D^-$HE!9^za>Pt)Il))RYbEwWpBh@^WKfXz+9~fS8=V zyY*;yp|xsiS(HO~`)jCegj4~_bfhC*-+)*3R+sxyUo&xN09XU)(d!SEnRqPHiG|#| zR2j_?wR3W>7STLTT4={^_7~ml=ex zx_Co|_Q- z9_XNQ^hRszQaqVyZXGwY!&P@bgj6t^mz%8CvXo!RoO^ zkQB_^b>{>YM}o2*z0+4gU#O2@8X}#RSF(3Cj29&f4m!tstP9RXps5l8H8LL?hJ_;ZwmE9lxWfgtorbi5B@&Tyrxj*C&%y!NM+VnV4cz zwtoNmGIO#Ji#H^m^396at-zQlv2B#w^rvLF%0kh4NsGjGX|KSTGzZPp6w#Y@@v4~^ zCE5^i>owlWBD+*m8f1QOL%$oQ>hO`{X2CXwkz(85Ljzj~Pz`H0Xq2F47E9T7EYMf? zuQuC*l`IH4jxynBs|Cb#I?hq|-_s`vQ{>DK%DJ|~%U2Lr|43g+$_zw9VM-scYP}MU zjfLrqU3oaudED;e{*u&gpGHYiK6GZTPhBIDO~krkx|_w31i6@MDk|e*(;%4ELMtS6M=&OHb_(o-(%nFk161q^I z^USEoW4Vo{&HcEl-D7{8Qe<)VzN-i))tIocuO7Qcjj|NiElLmiD#^)3w$NRslv&5J zllIXs^p$2#Eo&_@T(k)?)Ek+vi+nau!ag)uz8RrwVz?%qA`8Y$wXpW;(|J{EQYT^W z^Fpt7zaL*x)(M(afx7)uTBIU9B1_B~UTlGiZ>_$U@8EWCctkjhY8IZ=mifvy!;Fyyj7R;TEPSboj(Ywwa@%GD7tJ=A?_r*)WwK;VOY>PVW1DcY+Jige8 z0m0wI>D|PIqNy9fKjHIrRLtqI6|idbDG{#R-MLE4 zYMDVSew4?zl#{HijCM#Glq%x65^ep?@f9woBXt@AJ3g_hmQC=9Ttj+H*-gt!!zkm@ z&ySg9&WSUS;sIbFB+{+5$FwHa(|PZ0Au%-JP=a z>WjC*mL0mJQL0tlf2NoIYR0umxm{DoaIDXDVL|Pkr*IRl? zNfz^Bo$W5`?(=eP#u61hMf;6-(ng+f`Umg3^%CsIy_Y0aw1bYS z^Zi~5-pnrH=gIAZZ{ruzE~-u+wxakHa6Mjr_H!SZt}+R4O$vdn>(-ixF>|$#21En} z7+Qo2l8oILuU;ksQ+14? zl|)s?&Tro+eLIC-(8gOK0bgDpcdyKV3qvY7N;KU!juYJjoG#Sw0^c$dr8ojtNO=l^ zemv{$A8a_2Gzvu_%x!%-NhS`W5fa_cx#$B-jd!KK8t{GM=U+9C;e>wp?{`iW^S60j zHWgp*yt)Yv-{_#Q%u2lTH9mJ`rxUF&sRQw(AmFMAaWI%}K&ntd*<5kh+tpZY^qKp;J z@do9Zs(rjrxNNF8rDQfeHLwC+xdB;EA=NZ+b-a^0u_E2znhntoM9Owrs8ZIuEukGi zx##qVzf}7L{D3Nsz$k25?|nr;A!{2oI;CMy%cuu|gm9+Q#hx|8t*s`;|n zvqY7pLi2|vwy8W;iPK_T9T(Ze+`Rmaulw1Ax)lY9D&0LAt*`Mv%B#c4LxeWDQ2Jcw z;wzf9@+|um5c|)?=TipE!~WktA6~NuIxtmxij&GyF_5G5Z4EQE7U0aF1H zfO;Rse$~G`rpDoFy}YzsHvP|eQ} zL}JJ6Xxub|{!FV`q9U4cy)R<(Ry0~w5k&(3^j^3NV>ip8?`KTY+)kmqpgo9K#;3w^ zWT%t~miD3vqe?Hsn?6JKqtTtjIzjjz=w?eTje)g~qX;einm;<>wKh&oiaYiLB>qO^ zSy!d1esqBktG5}eoPr-v9MTy}p6p8}48?u4DQ~^i;=vx#){Ai_$|d|m&G58e!O~TQ zkq4TXnwvX=jOvLxko^Wi<2}!|#DFt_2hbF3FLm7V#Q{Wd9AsDmge>RP#B#`R%}Edm zZ*$rr;XJ^V;BGJRu`%AUbX^4xCD#(yYttY8_PSqNkp^q=r`Yt_welY zAm|84RpIoV=1IVju&@{}FL|GwIs@H`;cg?TiOIiOV>j+|g>Ssjmr`eqVkox17CMu{ zS>jIwY{GAXY?hl_T!#Mt9aYO11yB*EQK8FMF;dt=2x=jo3QxcRaP71HI^+&#p_$q} zrg7^iy-9o(cjz5d?Y%L0caqk%R@!xGa5-`(v08-=#R}Z$#|{8JaE|YdzUDO zHp;W=jP7tTxZg!|{kiQ=>X`OjuF)Xqg3rugo!5 zMLwyk_kpRu2gpeTlGboPx|PdYK==-qZvM*|^FzeHtCa8^j@`LE$I#T4Cx*lev77U4 zxoR?@cLEOanPnUcZlfJGi|sUuwR2R`&=#ilTpwX_@EdG%3YBc(;8a?!B|0hVsX2#h;r$% zlA2v>wsu{sO5Tr1BH!|U;K(`+_sXNn&x^)#9(%{pc^oA`w(ox%s0V41|NJ4ppkv}H z?gr~k{qpA?hHkXR79bx#nfR~h9B1ZDgvKtu?QWBhGf~^@)DO;S9*gBAql1Uj{RJO; zIsn{66n)lAwPqlU;H))-(Wf$NiOsIU2x4P`26j?VXWCbVA~DIR-e?wmr_>7}*s_Xn04g3pZKMY6~~WrVW+rnR%8PThJ8xHx8bd@AId=`6zr~ z=8_%n^-t&9J@#w400R#y#!UFT74JM35cDT!U^G4{GnSK9V%%0`tXWuS0vYa?lZmI0ZRW=Oxcr+(Ei{ z$Gk*O!XNoF4vRG}Bgm%s2g=-w%Ao1>$qpG)g znb7I9t}p0mqrY~S7*=z*b*lz8pSYP8qJ+G~!0H^}x9j-l`oWd7zY2+36!UpZG~wwB zDyd6K4m#rZjRcEzENy8OKlQc4A{2hH>jcdF(5f@SO_GW$sBfmG%^VP)&LZOE9)E;x zY9=_wzsa>0j4%$we%6*D6lH$wIclEK=FT>XN!kznO_2(xLQDkL5beJ4&P;)5IG(M} z-E)O=1YXzaRU#Mn;Y?3CRT#U;`l}ms;=a-weiLHFoKo}aKa+oRs*EpYcnBX(9F{UW zqf0P|o2p^wviBaw-uCPl6^Qbjvu|dM;@gVDk70BtcTtOkJjX5>RM2$Q`fOl|@z|DH7(!9^IiUEBThoIT;MlGdMUJs~@nB|7^Iq)wy^IA9l8d z;p>yic4_FFKzH1b;e1JdWB&bNH%lvCMsaCK6o*@9dQK}oEKEP>%I-7<`_g&udC*?Y zF=5^=`Cg6c^}7$b+iBrwS6`=4j}Fxkx1Cv?9LWBoEy&ggB95~h?> zBR&~TQl)L?K-yo90*d6Q}htq8Gq*91^8HqtCaN&GAsYIa>KMgugCv*Eu7<5ON_bb%%gNkB=IpwVn5>LKo|GdmZ<5xRqk&)GqO^h+yR%Ls`?Xq zBzAVM2Zu2e+ge_Ir;+i1KCil8bde_(3X(qXN$#&RcPcX?XGk0VHa*dC-D_{ZcJtVg zpx1F*$F}*3G7lP_Hz4zga|>4V*plL-E!V9iFNcSi2|fi$spx~=10k(nlqo7gx3xBF z>fF`Zkk|@c8|cW|m-j-UX0=|sih90PJW-o02B#zYHnSZe1&|Mp;=V`MgyZGpgN^tq z3r3I|vmo4OgVNn?sOdK!$k|U%+-nahT+MI_cB+1QU0qQ=JSfvmF=j)S^+^Wcgrt;N z+Lle%*G~t6*#u8!-s^Z7OFuX)Hng{ykxDD&uHL(3wN$|r7}HzgA4WU-Nc~!aAmm;F zTBx7?nEyl-y!gAg;Ji%k-mYyP7+?l=lSo^#O0~jDj#sP0MCG*Op^w`*tbcQ+ooY}Q zqZ7GF@4-vzYzKlGCo-JPqXW@zT^R0@wO7@e4vg;J9;lOdx5iL2V=kB#{Cs{kjIdCOx-W@oES1*ddhM&%Tl$5IW6={t{3Ta z;LLa7q?qM+SO0DSnI-& zuG_-kLyr?ujzYd(x^*;^z&~1f2fX_S-!pUxWT;3wCdH z2c=(Ld^SOq?|-8_Ex()=%IY@qW?hsja}=VWu_U#W`gAYRw0PWYHu(*dHBD1-4RWey z0~y};_OVkG3>*^ii|&YmVqo=*iYYRYhPa69z=cCSDGhelMXXywlcS%Ya2QpC|Lo6o z=zYe?KV+wuC&xU9TfU=kI+yxg>-zj(R`k1W>=&+A?rlb)v^dCh2OV5rI!m!N9xmLx zw;A;R)gI~&{8$aLC=+}hKoOMV8?Z5t%C}XgV;f-%BVdNkwXNBjp%Kd48B*F0r4P=_ zO{skP6rrRt+ipx{-^mugw-4wPJ}4cb!-XoLi6eR_By!A|LENb3Q=j?#9&$2YZfD~4&n(}JX_sdhXrHBLYp>yA$%Xoj zF+~O$d_rsOmwidlc8JOeIlYnJOGkfm(0|wc`}0BTNgQJqdv33X9~lI(IHL}7!REK4TBP_jOcHf?9Co&K{=&ZfnAWL} z%R{aHef#Ob?od`+AZdm)GCwWtaD^6IeA6bTDda)zube;OzwNFCnY1q9fga4paRUop zjI*}Qk4uD|{&^}=rp_2V4`)het;Q5tB5w;@`$t!eufKR~VMr-tDNQYXc*%iz;+|IZ z_lAag{*Ag{B%Id#_Qfx?tIs{@s$9g=LneDO)0&svo_F2P%&o26y`TcozA%>$gBXT$ zcpeDXpaM=vyX_E%cEf#XIb^}vn~$oXud>wJL)NMiD=)7}6vb3_E)0I{jDK=DP1n3h zs=VQ8a?ZGFL4|&9&gXRluSTn2x|8o#YM=UzO&nr>pPZ&g@_YWU5-C5K{P)HKGv>r$ zN`i^mAr)O+Ff)%}$Rs>^u~Lo0feGUI;d{w`Sw@590PJWVXUco2*vojvx)k8nnL?|D z|DUkpRZmhy!u@UC#eNfXz9XsE6lu$8xnoFIFt^rN8bz`P^ur;3x6>@g=PZ6Hhd!IP z-kWVA>yJM7?7n`z=<@pY{!leKHsC<;<>wEv^QIpzi$tE71kmo2I(VzmlYy~rM$KBh zE_hXC+POXR75~-tCMTxP%?QJru$-&|^W~}_iw9P)i59*LSCYJ|_!&9#cJ-MYp3>^m z>Mve?^M^0%tl4_wSrGy%^EM4Lzwq`dGSKE2TpstWm zQMhhp4nX9HABhe$vp;_4F}@8ane!}v|W=+?U_x^cWg;` z^}4N%L!Bw?1#W9y*|*LK1!wL*jv#(pS#hjt|L3=Tq(s`hr>zfr^xcs2KBN;_qkHt> zi%P3Dn?E42Yq`dVJc<12UsjM}a`+B-i;IX$pc<@#Cb>U4movUno7HXQ_>0o>@MV+L1!m zf#lez()072Fo}kTB4kgb`!=em&f!MYsSac1RbL-u?;2IJ-5s~hZG9z_uiEI^D@n7~ zgsDGlC;mCM2*dLBXnh1rt*={z9I}5g+8$HuVMUl}|~2zn>`(Sso)8FyH`XR_J$ ztGI`4$_r+JaLP74sTK3%M4k+GKf)|m5^8g~=So6%I5CDXKP>YQt=}zlq|mjU=NAoN z!t;G`pu?t%HG@=T^NM~vC(QBuXUTu3hSYhzZ-1P9=#y6M1KYj3Y3f?N#`knwpHX3c z9Ip2886w_eVRq7m*`)Oa+ahO@C4RptWo9tin;&%FiHVS4(wWen&P&MPpgZX$_YQl! z8qnAtTg`2`|3){{>BZtIiLNW)YBYQ+V2MU7ic|5dd`W-wFAu(o_YuME$?xU|o=a7& zzkQ{(@4xu%RNv)dkX}_k-taA7O~q}EtuoxLm}`s`9LA@Y8VFFAXS+!e;e$Ef|045G zTWH&O;D^Z+<4BHhK=t8SxcG*A+#z0<TKB zwqEh|O9GiOD^L-|Vx(j6I)x8gFKu3@g{io2;ed_&=kPjbNVlEdj(JAYCAHHB@p$QX zL!Kn^op)r=t;X`ccZNVyc;A1uhlZZ4qoRv-ldi+=V?OyGK|rykgnccOoNMYSO1$RG78C_lOtkcxvuP z)FEMtj;(AfDBi1-TJQ3|6djNM=j2D!i8K*jwK`e zRbfD>`}ghkfKG%VEqr;{)Z|4>V&AtUIsy@2#tzT(e7*{!83Rc;c|wlNu-1!p3sX3z z$&c-4dlS*Q+;N$B=-PENSsB1ov?GJZjjagl&7YZ{F^|r~v)V6Fcp4on^eNqR-0)K% zJEBPX#-xW`JXxEbf&<63Y6bzc+FPNpmrc!qg@mZZ_$cs%r#r;$To+6qoaKJJr;o+? zej(2XhuHoz(GB0B@mr|O+o2MCeY4R_7l|G*PMf>bgO?k$HrjOwDsW+rCF`P$kzXTh zB*uG~(kIOcuH==b>;}KL%eqpn@EOe6RrCrmq_KI7iAKhyzOJ`j(rwJtK#E?;z}GjJ z>d`WgDy`rhII5|0Z(P>g38Zbiz!^KYUrZOUr>(`3n#Ap?#fme~Q2r85Y~M`kXZ(zT zdR1V4C=}C)fY(OQd`Iaumo;=mzdslnbY*aFwPT&>vGIL%$kY0DN{V^>-&Yuj_9MPg z(1}gpN*ehnkKLr}f$qg^2R{)j4JV@hsVBG;n-C-r$!Sy+9~q!z8h^{^yN&#==F;x} z&Btr3?Uq44i#<&R7RqXLM-dw1ogGGYL+s;qS={*#M|t!QO;QGj7n_$;T;2;>6}-`% z(KD3lAI?f_tqAbmXxk4wMe<)`S$0CL#_|#G$+sYX*igfN7axbkId9tAnO-+HaH@wc zA`&;WU+g#!X*LHBwNsG{3H{Q4yrT#)-GJxB^}ByJ#jM?SHCZ{u=kXL)(o)&6+paQRI@@`do2pk_o`Hu4U%S-3U>c_MJ z4zYY+T#_UqEo+afZh>@8Uw+W_*Ma-vUJ{9KVy}RkKnf0LP<-0O!C>~TY5V>Q3!Y-` z`=wa43!C|oDfC_UZyIimcFPj#Nk_Mtgje!z|6)i%v|jnl*M=Z;FLquP?I4oGnO0A@ zB&pc%g$^Q_#+0y7eaJWkiHUo4nr7X*pp({Du8f2U8;!w3ml~{wW6xd=>Topo1Y&t! zZVi7V6>wUSc}IXn7fWgiy239$zR0h!GlNtR(YB=H4wPz~`c+R}Izivf3@)vy?s#Kq zwe&Bz?kx#P%}FjpHb&M_YNtrO;ZzCsltx5m~OaIXpZf+LwuDKm@@5a5H91!pzjiZSCPU%ULAv z8+DDkT%33I3jM*V(LTMu;$4u|*@acDbF3)ukerfWPxCl-ygCmO9^#o#36C7@5EYiN zf={ms|NX@$sdEBI?R7bHrXyQd8_#i`smoMjM0h8QbA&{A_}=Y{;Xn^f#e7S)8=j*1 zLb&1GM!p;EZU#?j@Vz)KMBk)%RtF0$>%qp z!{M&hlAMIXc+=BoNa#g|(ota7ryZ9DgtP*UHs9x|l#ceReUkikj#%z4?W+tH>bJj^ zm2Z48MX2uJjy}BK9KF7*)*XOzTl~$y^2Pk9B!U@Q%XQ*rUoc1mu6qH-iiX}RJT~hsh_g*Qf!IC94-x2V^z4#ZE-hX`dE-%3N4MRhPx4kgWvIElN zjZ)fiL$z;IdG$5bX)5zKtw^jyEm0UAR1ae~(mk=*|QTE=0#o z80GIer4U6f1-l-hO4lbE4>2r$o4a@Gk;|-}C)D(@B<6mfgeRnwR{9c*(?w?zhz z61jY*86r977vMN4;hkUmm+!Q|dYE8=dfQ}gI`?Z8hm>y%ku08bs!C@#-&C%|vJ4JV zxbuYuRy1t>D}DPff(he_`?bnIJ6j;j{jP}Ptf~Iya+fP1*eeFT7ead?$|J^c57`qC z1~DFGZ!GI+laqnIS@p^6zMj#l3bzb4FB}0ko9;i~_I_IGdATqG8A9Cl(I{#2T~n9A z`ph_qpwo+q;M5(n8^MWe%v6@{#5V@5)N+&J@;Th88hT{i2Saag6b8D#IP=XKY~|6v z{wMF3tzezzu(l=3Lqmj!$lnmdM8fA8X!t&?ZaZjF;(c)`pL4h{%LVLKIN&C~uL0{40k;^)>-cgp7TJcd*MOalAA9b)+`6JirSGOVg z33*NYe0{)gxBToK&1~XB7gxOHb<&($Uirdk$yBRzrAE#-2YlU+ApAje*E^EGehd-?XfITQ2maBL3=YKOME?kUw<{set}y&OFfnUvs+LRq+p~sFicaNp(ZzS4 zIyrJF3+Pn5>)HRIeqTu=vGSoe^n1pEC7Fu$qB|Wa*;du>PZ%zO5PguXnsY4|Th%RP zxZw@THEt#`XJ%I5)eGMppO~$gU!kO@Q7`0NsER{~c3BH3dpc<|cQcQ;kjB*q8@@zs zwzH#5Pp)F#l%Q~_IF$wBX*ngaGzE|QsIb~j+n{4l4BMb(2E$IjSsl2|tPq%4m)P`* zTHA>`;i%h8=QA;mlf3ME^SV{~Z=kVx=D2Y&qZ)$r=1}R&pGB=zul*#b^4kg=&cd_O z@djyU)*+26Go@0DoQ!uebCx9D{t;C(>GZ*H{J=b&v+*z1$3TLbCGBVYoL{Tp2Zyr? zLtID}Z6WJW>M0}s9#1hNCNB10T%83_md*FD>F)0C?(XgeLAnH_rMp{N8tG6#1f;tWkQRvtkPc}i zrM~4i^PhR=bH;I0W*F{g@7;6Go^xGsRdXl##>Gf8p)2hLIXw(L|fOi#9$`de(XQh`fu?}Ii1aPVXHr0h!7(N_s=DY)96CQTgFzH%@OKt zlIT>etO^IEw4VyGU0D0=NhM7C?Q06tK-K|i#{KsP|BQn`#^O57;Pe)01Hy$S`1y83 zuF(nNqMMmj7wZRj)W(nEh4(N3HFz++AMx?aN4QY`&+zpjTGjZ-YReKy-}x&G3gC^G<9{?9b!n@aB8K8v$_IKD6C z&sH1Yz-@L;&&ZJ9oBViw|A>sf;6)ChIjB z?p9b_lqybS%F()l+*~P7l2a>=v6_S~`@(P8`I7zUBZf2hx{?~-01QrWnL0Bj@lz=mO|3AH(|ry81?8r}T6 zpeQFU8`fWp@J`5N5!oFC6&MXxSO(!tDo~SrtR`_x?0oP zGg|XhpR~DFf)_D_sv-#V;}%6k1hQQu@jYeU{QR=`4u1QSZOQkOt}0mRiI0i)eDMrX zecaPKNbS4P$jP6)f9$`D9K+b&i+Sbt$@3}uaF59>}GG43odl(G+Oo-rU^R!co zp}v8e=Mp`k0-P?lmcGv;5r*7=7t%%fC_$2wg{sI~ImJ{@HeDZ4VmoIAwG4!P3nrSk z=Db4ce9LW4Z~wGFa)&Qa-=@N%j>RMP(*9U#RFhO{1{GE?T}=` z-}qe|`3>GmC>9bdgo#rGFX%t9iB0fAC|E-u;Nv{`L!?){q;&CUs95Xe`r9#)N{s}h z=VRgP>ZHT8O!4Yg{pRs)hGNq#jGDF85gD($A_zoZ-)B61?(hvH*$oE++{KeNVT;w$ z7jGLT8THC%NrDKlWLh0^-NUBu$s1A1H%~`ay{W&)|HG5N(}SDUTP{SUb~i)UZeT!@ z$fpY6jx?_Mw%xA#Mf~gfqr=;Jv;okeEkGj4Irt_DOr>lOsSd;8$xEk|Va_9b6*wB8 zF_L8)`^QB}Y{paA$^F;87sC0KfPda2_u+lz`Q0#R9)?0eL1{gx$a~@10<)3@@Hf3Q zU;^SKcgWi2p!HM#B6lHZ$9(Bkbm_i(17I0gxoq-@>mofP{lX(knPD1(dPq4u@wS8f zvWub1BzS#S;_<0fL`DfjnfE>H^^Si@5RyqW`}(Y1Y=n*DPOm%Erk&`G>lcTx!7N68PsU~CLz$i-W3#eayHxv z?z0>m%Y0uvIW&{F6`I=7*(io_Eh?P8U+8QDNyyXvHa`%I`cg~4z^lEBctuH>FziTa$RXJ5>_&#l`^#Jx+46wesiVm?94kIH zfn#*u>QTi^vKBM1N=XKvfN{`D2i+85#1ol`LE~t*?stFuIEh3rA?9@`^7nYs?$z>U z3&(5?CvvM1f_!BmlD@_-a2M3ESybkm-x6^dU*{GNH#1oMwGOu$A5_ld*g%{#n`0mr~=5?~GF>fv+}4N0P{peOxgcX^P}&>S{fSN~n?6 z`M0?0PYjKc+1zW_)zLTkl=xN!Llr$fk8wWXK2PbRh9rd{CKq(7b9`W8)c5Ib@1-OG znmfq=`n^)KP~t_LWLI#K<101?jAsM9Q(^;vtLg_jZME@`>*}4*A@1VYCUbmQHcLrK zR;=HXl6JBCy^Q)k%x8bbb?31ZvJeue+Qbn+k7eSqm&Q1O46M+z3I$e?7+*vXDAb$I z35`tm37DvVaA~Le!Ch~IBxuZiFr|QEyx0yA8_=8nq2M`}d_b*o!qK&jl8m8*onqa$ zi$wxY-M#E$)Bu+n8)hXB#XL-==BWnLjFYVQNm2hO1tlI_Bjd0%e0OnTDN^Dvj&}%m zi)9S);#X%NK@cG^B-yX!stJhZsS&OXIP+24|-Ru`fBVLTLYwwbB@5AO3 zUcX*=*OrC~aaL5rrM1^*#XfuOPh$8MZ~K#Kt##jPG*VAgCp0!=2At~%*qIa(MkDIN zLIZ(fYF6s3{Dehx48!mmQFi;cib%U}7n?t^M`jd>wleIu$CoK?9ge!O>zkrG21b-**tAtd)Q<=~ zlKRZtmMI%FP^EQ_bHu)X#aqOrqC#V9WMJ}_>LG}eV3ffLjOG+~|D`tiMA&gu;w@WG<9nTX&hM2K4umxasseEjOmw}* zAq`aQV`>u54sW%)y!=LtrS$b-!lYm<;c*&YS2#2q9TM_L^bcN@))I2|U8g;wlK0p= zcO`p7$TyBUzGYpm1fvR&p*Qh9=pif4%3HI8U>Amq95d{UB_DA&M=|@%IppDFWN;KS zr2xA0E5eh$SXbd>GFS_Xy!m0GHK5Q(!=@^8jN8H?hd6Tamd1pW=p)f+1HBtwF3npt z+U>UuHskm-&RzPY8&H`Pw0PX3VvCy|Mjy~~>Hht!8pU~%%0$nl-ohHHqpj6)7>o@? zPa=j6xA%vo8fg+qg3pv^L$Sc)-9&_--%?xCV$Vf_cpt-_A*~qO+lD47vLZ%0F|@Y* z+M^vhKJ2qG99dqG^>A58mQBXQ>#*vfhBB@snl`uvxYcNe z9s|OL|*#2f>!5^7E|-SR-X^lZ5Gmrg?IZ zose_>HzNyq&`E!CSw#pM;2U67-p5+MEgE$%f!J;N=~&E8p;%Q;ywE)QBGYV0aavtwI}``8R-V6Cgcw(j($Yux;VKUmRpT}@1636 zW^i)ZELE5q&7$dl=*xfdw2}zmPAgZ94Ba&pHD&(@V}Qq6g>{A4H&f4rj6G*EDism# zAPeU~+zhKPhFYCdub*rcl5_ z0>}WITKqBz{WDafOx$0CG5o}MpMcb>zWzMCR=q&c^EOzMf{dRD8m< zA@h3c^0V63?2shdX!uV~@o_Z~Hb(D81@?D7eUan_KlrBgOxX3*(swLM7Ey3SSPV=c zR)-2Sqda{-$>}CMmGKd(2;z{lHDE^HB8>_)VAj}Iw-s4OI9ucjJQsG|BsElx-2~mQ z-4FZjtqHER-K_Y3s@lF0}>=$ zyp}YJ_8^OnHa!04s*kTQJc8CJJ-#&gKzj!qxlA3LJd#@{S9NWgcuX{1pNfX`{JzOj zQrSSI#m96k%dH}a?%$B%v9uBufgXKFMohyfMvMZltn=1!w>%6=-a&SkLH=9}Uv%BO zHos3WQbxrY*&{{GWHY-Ff}m|WFz@UzzZ`mCv1Li6oZbt?3*XEvZdr@#-=G(0Z4_#k zn+=+N*Z)|kmaamf6~@3IkXG;G|QP%^v=|nss>7Mm?(2*vrc>0B@Shee|YR zdQn3ADkgD{^+!$tImOp5b_67`jc<0p6Sj>+`nhBnZ1M<_Y!T7m<}U1($;riFHFa{{ zZ?;Ic7QrS(rK^o5T#Fl3z|NFWzTMlm&%J!T1fyqKMTh_gksqN8L)-ljWCcCCPJk>$ z2PIE%1}`?$|9)uB3XcZG00xp)T!Dl;l{D(nj*)7}_oHL%$H>?NT$$>OUPxZ(x=k9J zZjyeX4Sg!;aScuP#C}V5X|EI<^=18*ZX8OvLBxp+8W~g4SHBN>`2!xZU~~e71ZA9F z{wEUpa?)ZS7OKrX1|yol{BLxJnj_}9Ht@xcr``7)ia^n^U`t|X9(WEP6&1xNDEJLb zNKAjnK&w*Ip^Bu+QF~f?$3r%<@ug+W>P1$Yt}HfH3T9ErMZE)QY5!mn2j#56k2l21 z(SYHVfBD;c5Ssn*-fVuf2q5aHcUcvAL52ZJn5u(=LuH`7km%)srf|sFjT$F_16RHT zw_rGzC_2p6$P$U57jP0@Mk0)w-r_s{s<8y@13m$P=#kqBI_9}sFS5Pg;u0`0ffa-r zbB*7=%K_QDakCS&NPzfrn$RmGTL7qdVba@4-V+0`S}_1LG-kkHW2fAd1FtLqB!Fp} zVZce(bay`&EGYV}ckOAKB}dZ-*veC?Kzf?k@4yQ|tMfhvfXS-vnP6yO;2r3m%n!Zu zNL{fAw;PB?2juLSph_l`RHd@H)>{!xXM&K9+iEJKoMPORf}Eqvl!w%tE=wg%Xe2gc zS^Y;X=DA)kG&qi0PJhdPehijMhAEKr)btGRd}U={#Jb3YYWY51*;3poxT&ucHWAkQ zX~(zskj!{HRqHkG@CX&n%;JikfHF5Zlo9k}&qABetpzkKueK4PX}%{);|Obpvd(=C zl>Iq1iX%|#P_*1mC;4Pc12vaUDQT;W&rnr49u&pARA8$lvmNe;YW~pc+G1Ubq))Qe z52rg)_hY)Z34TB6^jwYS~AyFh%6mmlt5gcb82g5EF z+bd-;I)f;a)wy^oxu9Z^Jto}s3VI1e2AO^2q*24a2d?0hm?!GNumDlPZ5m$*k}i&w@}*7BQW9N?cjfO8 zzYsA=%Bk_Atux}uO~_`)_fcS0eDghp`r+xO2Qv$vjs+)Xur#o^no<`o4H@VpaVT{(wDNpG@8>&YbwB#Jl(dQL1@Ly z1DO(Sc$5Jd9ki(-93LMeQETBv;jkS4T!HReR-(f> z5e1G`K)}nrb_zI4v8Vtb-o2fA=}OHwR|_+VT6kX{<9mhJ76J zV}A2aX0<&FC;vV$A%=F@c;|k7p>YT!?Rw6C7_m*!)|$TIH_Tu8jJ}+Aj(pF}`<`b} z^LtRg^VG@YrR^IcUgCw|lUhQ%M)uaVb&pz!qrk6|B4%$SKl+*XJ5L7v;7z{wau#3k zvZc6R>FG-Q;Y+-=d*m_d?za1=dXsp$h%hd)`YefTXVwy8V%|wd74dN-_)X8)`G!rc z_uSU`k3B~5f?4vbm}7kR;XO>TF{6i$b1;AkX>PmvWegN&81;rVbHYByESvGH|Fre= zU_!T$LJFxiK2B%zs^`sD|7Mg7L8?8(PE;6pSb@s@!&(ttiM6kQQ|E3%PW`Y#6#`}S z8Hw{@7a8G(BB?So|EEsBvhc!{)=#0nY)yJTGE)gs6)_zDDl+k?FO`Sn43In`pB)Rc zfIZkYHO(-)5+jb><2&5<7favB!?yfCRY@M~w@lQV2orCF73VO;6Vw{$b){=pEx|w{ za=SW+b0Nv>QS@a_AgXNJo6IBfo+r{H>{W>SIP7kN*cS-}NWO*s^WUt<3PR`w+q8 zooLJZfhtEMJJHLKOLE5?vS{pLo^N0XqpyBz~@8LnIU9j1?rbtj*sWeT>`+ zJL5`=5B%CrbA-8o+xd5`18r4`~QO8GbiV>!`cMO2y!C+KnUIcYAs{L6KbfgkGK9O5qUhPK&F#zzrJ7R^LZtmI;QM-X_i#88!3_8x=^T#-~P|w7*65WTZDK^U9vH~m#s7*~? zfH=hKBgn@d2B4< zE^xrVIk+wHA`RvGgTbuZCXt25r+-}F;4iIlBOSq{?1%efOjBe0h!AmqwO$ZIQR+KI zZNiT6CT*(w7Khe)R*~1!`<33i+wa^gH%H}F@4oT{vxj{#(#tq5zO%t?f2*a_kf)y4 zy{#vko{xqal_$4f#|deRGh5}bF;;Fv3(#n6*!jkfMlPOYtjJUmKV1RaOVLE6D03ny{P?FH zB^}qcse`O zt7MYFFk;hq;@ddK>g-3$_307!n03HBbA9rAq)U~6*ZV00$uRTW@j(l#61~ajoRRh zxC{AR&;c-54UlyKcCl6N8zqt##|n^Wjgsb1RZKwa9g?k(iLtGgW~2dVk{Y*-Iu-*$@O!_!=fNZg)@a1_@2={Ti zc7F^wH73yLbQmQ{O%iB!c})8#in;{)y6ZnMxHe@K+(Y%h81j-@9K7iAkEH|fFF*= zi(XO+R`yt51R^slE0EY{zT{>g;Nu2tE)6jXJJ)$oXj(<=w;5n`boiqcTLB6S>*Nf{ zBx8@s5<~6mqH#_9I_-z5=Fy{sk1FyGuC4$});K4sudk0MKZ;`gkVvK4(D0omfvw@z z;I>xD0GzTx_t&;S>9m373jP8VJe!GvYcl#?X2Ey(yAvH4`txxk=_Wp_S1ax#Fn|X+ zGDK+JPwvB3WZv_X@3RK~A_+5p{`u@a z)XAo@wXNIEIulwu4{eXWvRMyQIuc7*(FqF+Uv_n(dc4uFey-R3a9nM99-eo1{(K`T z^qe-{cCrh9w0t295eOW_e?)XY`heH_S;8}P=!V_$@)p^%=klHZ^`C({>H+3ueKL|~ zLDLXgzekU@zt`|;Iq&#`?swgGzH1*bu}q$YqT(s~M_|0l;A#!g{N>D1#GG4lz8GAQ zMBZOP9+e%M`(8`C6L7~BxZnLS^K_mymmc(*@)&x3$Du}9dlHrC^H*q5qX z$=!*Twv(Om{@w8+H(T3{HlAdaG531=;pzGi;j8-6qLlpZ$2P~lueS$Lgy-Kc%88WZY}R{Cb|<iM7R z_Aa{Zar;z1)>E&?<+Lp33&RmBVd%kbI{8-}I!>y<85s?^v)I4I^vnH^vR~JPJr9;Y zR#&Q(mVL^mdRJc6`998iBt?)Z3w(pxoFMjycQJMLqdI7F^aODYEhQfuUTGHloED&w z3WRUaD(Jj!BOI!$m&>(jE3jDpS>5I{v%3EJQyf!}|K)ZPoXPB{Qrt8Bo#~H1~7S?2Hh~og;i8$Vi|SB+jJcM^b>M9H)j@-%SM+IT9(vHyU3kls<=FT6loH0m$FO zEs3017yHhzOPM*C?I6v^mxqv;sb3*zLZ90EFNHl?>jE^B1RA}rZSLqCpKjg7e4n=( z8RRv%m z7{P!5# zwkvQ2M(3n7$K-=F+87jKu~m)_*FKzF{zpW)#>O%kKbGd~+!n}v!d>cHYQj%UId_2k zN?{I-CY2~pAV@j*3Cql1d6$v^?`XZ}`Q|x>(9Ad0MyI%~Ed!r5cmV&^<<`&7!y44K z6%IHFL)oG}96qaFgrYtwUr&JYrtN%~wC%9ABX-CN@Ht;@Uw$loiyfNV;p7`1@`kH= z!(}%~RuFV;Bo%#tEck&PVMI=K*!MEk7TB1gR(ArT} zZg@mO_q49`v0pk_uMi6@hzLM*xHTzyx=q+~3;%-11R%hbpqo_yYc8&0fwZ_X0;C`? z4#Ds!Uf%zHmRKOr##E1b zD+(;TvF$##w);4)`Eh)NFJC5p16SC4zXu*-=~b0 zy3kBqel<$TG{H6V7-XV2?=c_ejR#cDirO|87KQ?Q=hw2VghdRWUN)y@&Nv-i! z4dO_1wre$QY-YZ$A|W#o#;zR^0hud%dnluwv_q-%Sl7pE8ed%qFYa3ww7l23b~*(9 zUY4p7@jI}n*Tc2rz$#i!6`*8FcK;6q3`C$Ws(_aZ?fuzuR8ZKXrbxCXLI5cQ*aLY0 z72lxNL>WL?03PW>#w#A1eWe2PI~w8qM_!0}8 z+t7RzJ?dK#{_FSWvz?o17LZ6xHyzR+LClebeijJzKOF8gI4uqQ{7F_)Vud*|@dXqj z6kPrdaW1u=t48na>V7+g^3{nlnBybcxVY{(o&M&-sb=g?58}og!F!U-721*BcFbQq z&VM{}^NdBsb;mQs`!5f8l^O7>s;=G7hqCHC?24aF{K&)%CyJzB{#a$!K1_Ph4annatTCkBMRz zx4ex$gGN0ky0!a$#5=YfAa~w7+b9jJKTv&#u=B0DjE~N!Kb_8Txbc9k`-Z|qx3sh= zZoI>5?=O0u?HBa{`kB`wpNfS8>r1oKkFjfPaPJ=5FD~*v}}m^NoSjvJc>nUiNQ5*sbjB6r-yfwMlcVZHoq+Xu=m*&kKPPNMb28el&g*(^x2c zB0Us5rL#raR0lwprHriK{=W%fc$XS1*~Ra#_iT*O5R-k@f+C1{-$cTR?H{f`=CB() zw1lyZj=jX&-#3jnI;f1ouxEe%90WukqwYXquw4U4`uQkhp_LH^*q=S7zSwMk*9Q45 zP8=SV(lbhu)GBCqb(f?kMg54(pl9&h0DdjQRMxEO(W`XDO7k{I5>-#!5l zIb~$976NMNq0+Fv$-u^0Sl5d0fY@+Sda(^epw`;(iR#2}pZg(Wp5y;|0q{tVY(z_A z(DvmTx>;_+U9xUUcI9YCk|`?#S~!j*eM8GCVm6_g54gN9h0FpD^s%_C&fGHBp6k#e z)W%3;F(n#5KnNaCAYNMd%wyQwHsq@wHQmO9+#-TKN*3U; z4rWRbBVy33FSFx1udYcLH1dC(ng`Di(z|h?C0Pinvt(|%hpUmNDQTp6(ks1=`bv)W7__-W0M01!T&90@uI=3H%H)*mEj)!=JMf;JK|M#!G4F%>>HfaONzKxV$HLb>0=BMGXqS#1Z}7&-_9fW!fs>_k zq{e6g+>Jq6PPfBRpAw@Hj5yVhK7AJMU+5(3ETxt@>^wsDm5C-u29 zQ0@RrOdH^xLHY=ulv*CQI35v-M8!^u5(}GIXEs4~shul>sd$9=J!X`!QEiH_5pRXM-RPz~k}Bi7_8ioyo={E!mtx@(mDw7_ z9DZ9oR`VcSTp{nG$hcSN+kc%!l?>N&N&Z%7mIt&@pb<;NcL#Y8fiw!38mz&MPbYBN zg5+ZM)Dasc3gi>9F_ghXpd=7@%LM{c;EsdS4E;h%_nLHn<``$~PAl5%b^V+gnQ(S; z4-=IY(wUkLdEz#DN7};LJr-i}Ij+KAAd`oUr1)KA@h>N;@Z0U7e5Q>pC`%dHoPRkp zoganyJb8UNr}^Rv2ckE6kO#}ECh%EAh5iP^9}m6|QE)7TD{Pgfqk7o&^=Mh8jPc(0O(MuKj{p^yxou9a)MTo}kx8G4HWTmGSQ zBk=m%A4`OlGUNj@ZEfmCI88sl$MD&7nw^`v5;FS!l+oDU$;qbwwm$IR zlD`$RQFI@^mVR5-xi#b2C?aJlzP$p>=ro`>EPHor5-p6+hI?Ys{5A+C} zsU<5Fb8U=}f5`DhL?>@|c^$@iHF9}cxT>i3l$3YDPW=Uk+Q{wQRES1EK!Bl7H7Hui%dn>H2dib8jK8vUizPonT zxUhE>yLy8O^>|YMv!a)8}kC&=kC z@Hi}P)BG1E0nl@t65ay5l)zM-+;D-@TTDAUc7`1RsCk4Aj*dIqqX;CVdCClYuXA4; zU0pbuNZL{O)5wdFpeh@%VefVESLcWvzfGc$B=}{Q`*Mm(oKXo;xb`&1Ytt&0GQHkU z^fFCmEbvVmO|RVa)6%Ywp?tnI7Y=F{*P~wP@R0;3ss za1QnvDRuS4XR=P!-}%9O{4Ln8JWG@_>O@fLz{O-c$Uoil8_%LXGdM`-E1ncV2R58| zq`iGj|L%DW_C1+9y|G|W-${u~EtyE9F5}xBxacaJgbE@FE4-FfKTL|V6UZr7(3qUY zufn44Cpgeh>?`Fr|D>@!xa1P?g>7m<(7I4S|O8=k_x+T!X<5K85k&l$1Ce9 z{9U;KWUlV_$1SCYB0$)NMk$dGtW0F2Vvs%+&*@SKea)j2D#mo+5!S1ny|Z62hr(YB z*K?4>hh5EsGyDWshilWUD%1;q)LV~)PNJkpe`#QQ5=fyp`d?kxD3CSqm9SCY`*)y; z7br=nK^Tol8HhEfwpUhTcupFPPKupY19qGS@8c26)*`I4j^AB_DbxcXS!3H-kLm;A z6IZ~s(`#c9dxxY3zd4L{?}O1*A5Iyh7<10fL~vY|b(N+r<0`%!DR&!~lh%+-7&rZb z*VkOQF;g(8d`)2vbBc8~Gp==L_72Y0-_K0Ixe5_$~Z??#G!Oi^yo=<^Aa5*i_EoYib_>07hA%OO(mxbB0^!}+ z8Mf6qo!3>R@AbhRk)$_FC8=>ee?pu!L)}B4tuxdcnu-=un!9n&H>p#HrLEE6>X4i8I-sd$i7R-Sdc6K;#>>qf<3$L4Tkd|NZv#8Ga5a9#q*QXQuWzCiiLjlktUH+x?qu`o<`nbQzWZXXy zw()*0vvMFh4)0G0jFR3+~HnMPT-3a z(@*Da&biB)K3rRPTd6%vUi(*jO*JylsVZO>T1XKrqU4ICr9q4I0=tNvi@!J zIY1%iU_v9~m+=VrUox2d?Du!d-LxhByF5eNm`dxj^Z!?9#)>D1lY8+}v;u=F z0Cl3+-JlO_ey%LAJXvx4TrC>s+@Y2y5P>OSsH&)lmqO zx)Os>eeYu2KRrt{oIW9o$NwkYNvkz9)u-i-ys(IWDOtahrQ3v8e76!!#Jva(7lIH9 zCUwUt-dtoXtTRDzS4_30#ZdYtB?)AUo{BszNIugJD4^Lcp0N^(zZLV?{b79-;Oc(p zEck9io)9>z`D#B3MaF;Snm34j!oh8q^8`b12Zf};3 zCzBIxJx+qOmED({%$AduDkSgh=DAoZ_Gw^QupsbOsM#GnV&WdhMg^ViTeG&_U5mO! zCNQ#@EMO@AdIev|TjV1+*|V*~(cOu;%K3n89lcZc_6pImt8j$kwH(-J_g6V%UTiC% zfz|D}Y2n?)wlXkBsR5j;Yzzj-44_xujkEupS9V>U{3x0OlCc+k6Zq%LapGQQAC9te zb_EY>R8+#1(e?apv_EqRqgx~OPD`|xCwb$acZmp6^w^DDM|u0y+$KKMvjrTvzs-Zx zr$im|k6(E-2=H3nYU$A{uYYlLbhO!ZfRa0^H^Q zC=6kj?AVqGeo8nLTKy$wtt)=B@+~ESvpZHg;(~~eDcOj3Pe?{!7ZMJD&UYC=QyOc-3sF4{6g!F(&avObegv(T|#UoK|>i008`U_?EMZD2cn>F3>3e(^7w7(y| zXwqo_+y z0x|F2*{y2?%YG>&o zBCkcu+&uZ%K2+V(k~#zb{u7g=RDf~XW(kUUiWC%saZAwTT2T3sWL=CBos8d-8S}>R z0UhKu)2jP-pQgdjpO#frze&?T2VhccrlV7y>pLKedK2hqcV~f`?kAP}W!#uM&qsu+ z>goggs;$8p5>Q?p6)}_#P#*uHL&=}BTE3044T(oc*?W0IKS@e*|Wr$@UaRFgI z=&}bbqbGEKPlPZgCML*gBqD7Cid*FvM&Fqd0?n#e^2NnF6rbZFPakB6fa|vX6||&} z#`IchQOO@Fh!39bg+B90@-M4A1E!56Mxob1u^%BmFU#}g3by-kKHtd+^AI#|563NA z2j1;4fbFk;gLXveEkpFy2252Bhr;vF9;vX22a*`#h}P1@5QEb=s-q^g9*b)8ESc^D z7lh8a5~IGlCha0(WIBx-OMv{?ee8w|__k%8eseh5+FsiN>k}|iZ{D77eX1G*MzJ>F z(;EmDb6baMb}n^n@NKIeygk~&R3_?PORUCq7Lm5~Vn1v?8vM1nejwCa5<_V_JFm|^Pk0Og4w%*JM0rdyW5gp* zYBNoimK>?s%U%Pi{cI^Yj~)MFReHhj{vH~%8eQGDZTWa)dG^v*n`ED9qK5vet#wHGYd;BL5XPug87wfJ>g zdcAB%+A)Y45Hj}eEJGPA%`!9pq#R$`gzSfI#&VTSU%}|?B-n!<8vdxgwvDTfP?yT| z6qAKn^)1Yl6zRJLABzE{cJXz&fEX}2DLThA&5*dpFbFy zZvrWxC+@7n)(B+KFk5rYrZDtf zKdz>i+%iV$u?ym`U^c>w1F{i>n#Gc~;C6H3Y%7)MXnA7#W&Phz_s!C4{#DLYB!lds zxvLNK4dWS9T79ke70sa=pWh@>fgx8e!4lbb$IH^XmHDJC{Ec#XHvB_X5d@=|wvL?o zSd-8}_};rdb#_jHuoS2X*&pH)XFwG%2B3;Y7F$BdDN!AXr)ejiSteLaNv1Yq6V$oR` zr#8FO&Jj%=H<)wN-}ohkQRFGbJxWr6H$Ds~l!~i$qy`xc`)B(+>YbDv1iGV<`p;$3 zqTE0$hph63p+lO3Xi?6EiLV6{@&~>CQ|lZ;f=HAKPgeCOnCR#fT+#yEhOZV6e`XlY z^q%A3JL!bDb(*ElRT-(AB2nW{A|D+f0wAviUB(jkN4ydbXRp3X{t@c@`avDyJSQD59Z`Z>$mrB_;-`#O;c;|k=Yk@{JnF&)Q z+fYffg~bqPxBi~vH#dPamo6t;0D)VO!6&9u-T$aWAfw3bMKYnW*oKR9@uQR4*=nihphmE4#=nzUhsi8|JwWTXVB(#OWzYYDS$GdtM*;{8FuD{QFESH(L?PIq>|h zW)lsAu(j}a_V}Tln?3S2VoIavDccVjdVZ45$gXLmUSxjs!s*T_|6sHMjda2LI~t+b zT)OQNMa5L|b~AAVf2n#H;rOUfckzK?1;>s1POE??;?OmuSiVtTfy`__BOnbgEo73=3V!n2k6G}CGfjcH$@ zA87VS-vyd!?MsRprCr^G{`VzEB7`F*$u<&Y;2qri5t!jgDi&f)K2Z0t<$Vp++TY9d z$i`TN!{xEg8i&EMSR8?sT51t8C>Q9+8 zTU4XpWA0>F2-2+Om8_;dE!)2do)9t>dq=O99r5&*0e>ZCqa7zVZt^T z7}O;ntMHUmG1F9Cs#!Aj&BYPBFl|soqUMI~?JGrLDkp{Ce^9O{nX#_~cd;dh{`M<~ z)Q-}ko~*I2a4m9Y(|6$X?dRxv@u+Ti`gEc25yO&trPit3-0Mtb{a5N{n&2`&uP-uW z+IpfWehc)rAaN0Li3Cm@EP_8NI#w5EOBLqXBKrZNWUvJeF$FcDYKBRPhsro5e;hO^ zYkT$h-J~_k>LxCI)p5l+`JN(r+Fha#BW!CALEmz-bBq})wcM@nD`|+-G|m3ATK_@H zbz=ei6gvHiJ3E;yye5t^E3N-5kJCZZMWiR9T?)A6Ok$s+#)s|W`H^B{lo@6#yg??d z!&|;tY*{&4b%s@YX{Fp2GOd@8%`j40-560By|pk0=}oLu&a@8yJgSWKJiB@BTX|kx z#S&jK4Sq3ap>Ho@G$#&OIZW9ofai{tW^*^?`twqXXi&4TtoyUR1_~0Pd}8|0Z;Ai5 zP>iMH6D8Skz~;Dm?f&R-?)aElev_*3_TQNR74Ab6>gTd3+i)aKRTOhLVWT8RC2gp} z*f0#Uy?nNqSaUIcu6buPNt5Y@t`r-;;MO8%h_3<v&EovJ^=EFG#-cs|=igKStNc$Y8>kf;8F zwvX&L%cypU$DUD_Rz?K-Z|on92|m3+u)`zikF$nwqfJq55HZ!_r?HLPSO_;0to`N{ zr_W@aD^VK|SH10TRyRpycr8u2)EsyAcW|~%=n3rYBl1EAf#0YGC%k#Z2q+A5DR924 zX&R*XWC;I=7!C8-IP5gKAUUdgjv#COcI|VdL07Hol97DL>vNLNHiFrKdS@$yK;QOG zotDn1_ApxGOQ_ALGr4m9!(<)r-$Nx^~U4gik_!Y;Sj;K zX**~dOw&S3X9O*`^+eR?3lHPVE4!|T)q(HAT47i;)MwDYx1d+Devl1=lX+U~@vW)u zr6F6hVKR_8^7muNxQXEmQ4gk^(XulHay?Cy(ze;r3SO#Ob|;_m0$g%>UU@ z9v+>ApVd7{QfRbGMsOi^?>;^EozqO3J$pUAGq|7ZBqY9BPz{+vGe-`F%0Cl2khA41 z4H5mw=w!HCFM9g>?w*p85nMEkoSCN7=&{T*W3qBlh)*4EXN)~a)}ix8!SbLROr=v0 z3}7;%B8NSbEj?9a+NKEnELVcV`ZdDclpWa88vHhsbU=3Ks)%;87=pop!9k$2S#OCNzc;?yl7)M*NlO$T3+7!g3ooLPuJsITt zp$1dEiC$PV(~LHiTLkACc(L@@x3_y4DDlyUq@NcXoQY41icZ6go;{+f{R$Qw+V+&E zjAi&|PmLiOsOCa0B3Hu^A9fM`k^AbXVokdRh3`{MJCTnor_(ZXyc<6KyjOhiCR-NI zByuYjO@|4q|2!`9Y$O!vD?im~(vH<(^fQb4^QXgh3Y?ntVAAN+>rnr7dxbqx!fVxk z&s2BAF0#k#$^{)v(eAm}#^ErVqYk?F za0E}uk*M|}z85i49{F|T?-&%nvndZ{@;ZiY4noOS2~lgAprRsT;;ygc_QL8IH#4UO1;y~mAAa**McxJikT|F9Xi z>McA@ZN=v;8YLkTW!Zrvt^dc>Sw__nZ0k0-ySuvwcTaG4cXxLWvI(9L+#P~!65QQ2 zxVt+9hu691-8bGizxM!|?%GwWtG+d7cWQ+xs(@>uA?dKDOLD0zdj6`tkdukNiH+BT zAaMt^BA!9$7ct3(rMbOkWMZMPTFl^6K1UrTY>Kcp;9tN(!&>>>BQo_h`c#ydKxvEK zCkM3Mh%^qZIbrkp6gj--or9}xnq5L-KP?E*Dpx6n$qB7zBzc%X`tjY^Ein)$U9P0^ zhyX|LE1RN}bSIOs&L5X9J+WvBP6QO)_y{_&x?8VK=wd#0mNq_{Z*)?0Yz-Xk2psU$ zxN8Z%8C*`hB&YZ8WY;mi;3{BeFHNSObOvEwWbP21djB1M|M>g@b9Lc7u(W$Q>2n#p zQEl`z*_@j)u|rKB5*(D}YQ*-sCT!gbe(>)O_DhC|_*mRsr8s4SW&`?U<6uuUvm9!< zSe8RxP!2ru*-tI=If-5@iPr|p=0QSL?^Eek3g?@hDJV>kWl{pzk8APf{s{cf`SMgN z-6fI#8+fQ}Z`MmvMvr)$!%%b9I&M@1X!;4l}HkyLy zMO~a6M9fn~ML!|j_9t$z6iJ8{I6g!*H1K=?8Xu-@vS!a5x1h+BhaddMFC`5l$mgtf zGGrP+pmAHF?Jb9_2m~X+X#7RU{NWC{oP9yq|IGqWt0l{r6bdr7P?_(gM2b5G#){Ub zT)DCk)Sn(f&-4!_kN|10^ah)-S=IEi}pk zVru)kd}Vy}QdoD&R~MOM{g*B(x2Otqp|*eY@0}7@*%7#3pLO`Sx|LmeN0GLa6Hg)hvPv^ zU7?8c+xVU3f^EPiZXd|PtJIeM^CDQ9dMojo?puK)i;f?r5Yj07V}%bd)hFbgf99xv z{_@AS`}g!9{&1a}x6e8qcx;zNGy-}wM_00u`IUT>q{&rd>3G`sX`eWwBa|g}MM`X+ z>wojG@{q*vAe&CRJaKui1&ThSWs@(P7BB_DN0-aG(P-%D6Z!zHlE5bGR+Q)y9_zUu zL;b$dVEp!s62?_J#}2SB^wy5G37g)MP_Iz3ie`Wuhg=$Cr8%RooXt zLs;ZKf@oFa>5!C6TFCxYRUEzF6B!Wh z^z73~6g(yS1=IrQR)|#P6v(ks3h|l-GQZ@dxdxLEdU8IjsJZbVi*yV6~$$o{Xk26OXFA0r07H1H3^LeHDw5tYFu(c$jPQnsxl@_ zo?Aa_5ndP^PQ!p&R`G`zgr@~35`>*3EQ=|ZN!2yIIRUz;`HI9LI>|F-*efsv8F zv!u>c8OQKA{zY^QB&-JrNGdM2pBq=$S)z0l?om8Qju=$CA@aX$jqAkAO1hI&EB{K4 zlvrACAA5iN`Av(MlJs}4%5aE<=C^aRe&?Lc{S~}gt1~)><+d-t{iqKdWEC;&q@eb0 zG0i_J8H@e97iF2ugq|{D6k1l}q8QevRSt`@HR|YmwTdOL+i(lfLBA%ks>T1iF=t;m zE{#EZAVq&B29I`3z@%U85FUFHdKU6?UM69S{m7z+_WqD>_2p!>H;B|t2n7vmcHTw^ zM|^>pdKfes7h!Urde`=TJ{n-uCJ&NY;8oLaifZRBEsxXji3c&GACqAb4JxPo*qKT? zwhE&BUHz-DxPXActfO>%=iU0Et+%KG{QIJP@ZCQ8zKfW3>pJn zJei)6o^n5eUR(?vhXx*2MO-X0E8kY&AnP#8-Fwf)?IAEYtK!(shS*ADz_(=mU}+6U zDZBn&#Pq_u#{1_N>X4FH`V6emBN2&O$_KCL#432oX!0<4%0og?pJW^l8RQ=bqyiq% zrMW>F+6SGH%7_s>-#wOz^oQ9P5b%*bT;xbHba0lLjyVv9M##m!g=t};EUBn)jYbWL zQL+dpHR9IL3btcMwd3fzct-$R(?g;pvc#IBGp1sdpQW|4ZF00?Qw}$09Cx*?YyFM{ ziC60qBIo@o)w&~41s2@ zB;pV9pmSz39Cue{%WH4Pk#>iqOr}=VJSuwdfI>A!5(o<8hw>aY$6$d8aDq|9;czuK z8|*XJ1w-yL>*99T78v;IN7O=RiI2v~wN~Pg;Gl#*&1>ZZnu^pRr2818;>crpj`ELw z^S#Kn9P{78(fav}o$H{xXrViBRGXB6Z+)lCeq|bh{!ME>4`RIfL;lqfd5DEXY)K)E zz_0QF+y_~#D+GOC>piuGfLHF~YDOt)`8DfC>{t<56y1z40#|gFgIX0e$+g<7rCQ=8 z4uPU#Fm(6j1jynphF;H4Q};@T=nJ!MkW}&9lY;7l*_oijyBW!|dEw8UrWf)MGd&UA zw2zM5{beF^axR4Abzb^n=Qj9dLBWg7@I#-u6NMpW2ok&HAfek<*g2*qkt=b;p@Zot zshNPs{O?(}44~y$z=Rt{97sO`F{E_SV3B0%{IV8lNXQJZ$!b=?A{U{%e0h!YZl$B3 zMC#ABHpsuEA_`W1K;~F#dU0C{Vz~{q4Lp?dT1Q=qi|KhxpUz({#J8ooT~OaW)&0li z_XC3*8xqQD{JlI$?oujAeCzY@Q@CeNnV@l~*V-0oHK7ziRw=ZkAJ z@{N7{{8vp~`>V>djJY387!lVjn5&5HGe+<(^e|nD%;=cp{Lf9qjsaZS`%Jl+bD`C0 zlNq@#E|+Gx#ilKm5@Ei~?Uz)sD4!2xCFSPFsb7=^qt=WiOt&uo zXJwRCOj0wP;kVuslQS~L6!d^YG}J$(yigO%_haX^6{YU(YP1ER(K5otpHngZ(cAx3?HlY6d-59#FNfRokiHan+a-->#4&2sD>#kE4$TK z&S#M~k3p_GZgkx#0xIZT|Arh-Lqg5MG$6;h^JSm~x?>d_eZ*N(XLjZXGTe(UfwSWd zkR8v{RgE@KBI9rVLaYR$qos;Fjo@Ou1~F7rONf1Tf8@)~imZUgFER5hLHu6K0xxnR zC6g@W;K7PhjA~|%SzgUh+EJZ6GUBF`BeQjwq@D#5mXY@-Fj4VpiMFg6+sUS>seK!r zU0NW;%THu|U~(7V7I2LHw(C8Gt6A%!jujo}eTCNzvlnI={P z01|!}`NaSsbUhUKw=2CM=?bf<)y1CJS!>Ss=~CS`7lZ|)XT0ruveNdZNNH!*{p8V_ z&5X(x*P{zI>lNesooVD{7_`g==baX!^IbIU)vn*c%>eB16T9=oNtQs)m%}@9zbuEP z+Bp5{<6-BZ7pCf#ZNhb(Uxcmd{j)Pt?<@Xw`-M;n!KXNHlfg!Pxk2w#9eRxk8JKu< zYWLRh*J9Mb78)e-FZ#Nrmd(PDs zQ+fUmZYvA;U_5P4s(UZ8&oA-BTuUP)ln)-Z~uoX1a)34-7{-^MSRANK_b zM4difUBxt=vJ}zKd@Nd^Pn|ICJ!|~CbGNWTPQj3)%oEs`+wz)Z{C19qOv3+lnA3{= z=Bl}<2rmocRF+1NCjP)UZE(K^ZL|O5VKYqsGWlkWWer1#kYLP#m1v(c>l?=VBN?8n z{GLRE%5e!n}34B4|HM-Id@|c!>IY#?&b$H63<~iQRvBR*g z*MgBrhCHq4B!P_F+naNB^SLshMTu(=5X>M?%1Ilkg(!S**%P4s+WsRp z_*&hmrG(6N&>iCyQYk7<@_9!Wd zkJg{WO*si# zK@zV=xaj2PK9o!wYkfpW+FK4))!(Y>4^T9giu(R-`of)}SwBh7kk9UvS@)XtgeOQ&UXf}HzVzUA4xlkFR{zBwL^jY*Inn4gjPB*(Z` zbKH9kb3#8-(|3XQX!ooYnLyn0*U(sXMMF_S57VB+Mv?>ZwS3l*TequwiT?>n$*cN^#mXPiZ=iURrv$5 zy*cWuucE>GN50N=k5a^6&U~vjUP#TO#=6w0LexekNMd#Fy7lIrH{^?FLgI6KogK`s zrb;o+Ah{cGOO*Vh@r(oG%1#wP$0z0dhSD{eejn}E>%YyqR6e@)nW+9Fun+rf@YZ=hbENmQ0%Vk0^32dD@L4Hn-lhoGx8!U)LkrdUL6(84U@0 z$8Anc^e$#B%f!fUFN>~^6{_cwiwefBjxmcEw#HsjS(`aGPOE57mJ)e$+z-Qq60;Eo zQ2@jC;qQM}ct*0S*bJ*#K)=OZ^dGC--EOD4Ms{A9`Fy-C5!Tq}3@*id871ElX zda)Jw^M!0{)g7r@g`eE5Cq)24JBdf9`3L8k$LPuTmh7W?>**=xt?SV7X*ne$+LVDw zN~-3sv(1lfFRMZ=hHk=={&6O^T^P3){L%I`7o+;4^HUnC6N!RwV83w+yG+F{ad}T3 zbGQj|{uXGqaScIm+WQ!j)LGmB&7w`?LZUl;M$~ym-%%AV7nZ}>IPrRY+*UiB+hlfc z^YzGyugfxWg%V!gF9CwU*}z?rpAy;vDOEiMy+BCLOho67rfd^$)#rtKcX!ZbcZgy= z?VZD!ZAB_b7c$pTzgzvrNDTdhdP#msn(}XUdd4%wNi_1``om!3Fs(p zK23HCxO&w7hKJ{NEQNiKlCH2iZ6KudrKJV-FUjKQt}U91o+k12FbEWD{sJ{CqcDu} zXki+%VOd(im!NIzpOpRC{OUsx*0Nz};&ug@vN=q@ZE2dYFS0EiS{TEQ+p_BuwN}+e z-|^&qa;k>R?7EMYfoMo?RJ{#s#+<;LpAAwWtU|ZZF+_R9?H@Luz-hGxlDKYD7|Vmr zlicfpJUZK-PWffkS^Vy~+l9&^{h=`{T(->4n|BBMH|H%VyQ$w)v-QX1IjxhDlB26* zWd3Rqj#i|xd-0^FqomRH^%qYc{8inxoZqqeo%{{aNpR`Nc2&>}^YsaJYq`^)yEf@{ z@wc;RTCMdBY=c8UE>;WzJ?xal&hO#+#fK|WP$hBJgzQd7w|BA^<5F@qh*he8^yyx7 zdlW@~NI{8?pEkYKFM)jDhSI1MN+YE#oB;V)ICW=NGINNDvNT_q(!F6!- zGGIlUTPpQ+IJGDd;`{#S%(^@G!`S>NxpC=o30GvJITlT1t*eP4Wme;i zJ}H7{8Dj+eBKnbx%yl*}s{C%Cv^uVMoZDIw(dL8tjlFa8_B}A}QHc7lQug=)OpZ}A zD&6qcoIifPFH${VEM86;)URRPuF3SCHFJiPk}F6d@Vrs60||3A3=#9U?Ebn`Uda(_*I!oGkRTG&#W8vGbe1<#!8V?-cz-NhN4dl zYW?-lef`yejt-S}s+KpN?gGF2$c#v-D>n0275)HPV01|jk4h!O&{Dr(rB?mD1%ORT zL`It)?c5KKai&~+A&wXBPEj5=ecz&Ls@qP?>u!x*H|@{xEZW0S$%6z2d`zZxO4FNlNz-HJ}Fj8-6jRL-S+kVn){^_Dye{g^_@iD z3;fm|XHjaEjG5VU330EQrT&Fg9)j$r+9#BBIdw_SiYgsdlJJ;9Md5E3EMf2+DF6RU zR44Q>CNu^1hu%H6D}e9CVLpKT&tbiWA;VY&0g_dJy!S+ZjH-FQ&z%2deZv zi?M#ZomG6$Wa?|I*6YRvRoXw=O)h*T^d>Wcu)whxSN1q{jYKAv6jwrdT+;nl103W8 z5X@SWC~H@3Vv&+HWn?s4Z>kjRFxEbQcxlRHB3KNBmYx2x_#Ia+(_OdG3}w(OJFl$- z`A2K^_Mt`O247;sr?^78nY8yOd1m8l#33#01aIvc^F9BIl+5qQPGmd&O5~2g7^L2x zH<1#0<2Q_l3zIYc)}v+2SB&D`FQvgN)*1vna0;5OS|e^PJ8+URt_b|{0%;Hxt7 z3av|c#cOrLWaW|aLIpz3te3CUdW3dA5z@;pkGF9GI-cQiN>6NrlE;dO;M5GvdLe#2 zX3EOOY*nv(n$=kiJE|dPaV2tQF&e23SLL$f5h{ocl<%;36IQ0+henkmF`ci{by#`h z)>i%?@;MqQXh1LZj_h4r%~=Z$$;eUd`*2A<#TVrl z;B>Bh*~O6sv2LHgp{Zz_4`b>R(#V1IKB!%l`k&qlP=iVHPk< z74(Rpg2b$>v6sgiUx)b}Z0sMKcTctzRaC5uk)F8$5{iz(^#jV53z2Lp8cbY1J4bRk zX)o;VIerHhh%SXRxnSFcFaRK0RW-M^=% zs|xU@H!NQcV~9oZCH+%SWdD@e-|6APi<=&1hd=r$3!$88IZ=A6lN3J16_VE@CTvkO zeoVPzS^&GxvdS?reTXY4vp8>kb+W5$>!aS|c#p#aoKUbisahU2Bd;kXmwj!`#Qb0+ zZAmC|C!)z=$D^jK5^1o4iZq0asz&12b>sR$zcrrQ!=*TMIZ10hMCSNFWJ1UO+1|;} zkUW6by7=fgU@rBUZd%1qe7jtIEI5cmS?I5jNWzbYz8#^bK4`DAXG~oVStZ8JH`iGp z(*4Dvn9lXM&(*2z+RMRH%R*4~8^6!P2Oz;sD?*c6@)s7wB=7s&et)=Li1rL@@uHwJ zb0)3~qpuM!wx&FjWevFB;Hj&wM56-a1uQ&&P`JN$Qs#HL_jTc=r$=ip?)jaYN15Rv ztNqi`#mjzF(9K9)DGtZqeF*Fy4LV7eDCuK;KCo*%#L6jfwJG1hKjucY-53QRAW%rc zp)SrWCJYlc?c7~j+M<2kb1as?jpa7>g>zKNnBND!am=Q@o-+MuSh20PG3m>O(*5NF z(f=KWi}zc-*WL5&IVb2(6`=)`nb}VB)pExl?8eXnb@hzF1!E_Zk%wn7h#!V#d#$7R zB3Agur;AY)J%5!KZl>Yn`M;sdE6Ni^6C#o3j8>pEm}%#OsdELLn^V_Tyi$JnXYg1f zY2M+i3VTrdcZx)B9MN!#r02hWn$|n1#Vk!v%rzR!TfbM;P?0fotjv3tgS8#%Na`B?MUpZizHjn zeWvJ)bC;vg%a8?W&>@3Tw!)wkz)Fm;l-HVh9RU7JeeTW5`zr}niAYaF4X`q#Pxeh? zEqYVuc;%v&gj%?>7hKrHp9)I1ZuS&DFSYG+!rtPG<-UdM)S1D!3Zikmo<9$d{_OqP zHJDqocMZsVor9jR-VRDdt*^flwABT0)Lli@&CRi2gdWI>=!EnZQ$b&A#~7h)4jwpl zUwqg3ZN|;J?jtPvHvGP&-TB7WDKhiX&q%G2?&44svN=-T z+fNaLZg+BL&Xzmb-|u*%W0j?NQBcW5f?e$sR&-m;zT;5$gk<&B zDd4jwXSK<-5k{l3EpZHgCHNSh+=jUtZ--gnU2nQ4w;eC7dSTOjepT;3&YII4%-XQ; zrNHIoyfLvU?tOJ5&$frx*_kC#na_aS4e;0L%}&Sv3YR#-ABCEkD_fj?9A5jZR7O`@%(fl)|YLZ zis6P!Bv(987ebvje%E`g+HCcYtp-i;)xP;;?crGhLz#CdMY7v5JMVk3;17eR&p~f1 zv5&d$uQ0|=OXBi{P+ZxISabxg3;2j1m8kp-^U5t~G}!|-q3!G|Y|3i(X5$2X_xdeE zO*kaTA-th60tEkis|=G#Q&SM-u%&u-b-5>IQOD~-RP1(|9ua)wI*gfYs*VK@wbmx@0{QOUPf z9a5hH8eNB^)zF?tC-MgY*#r;>#1|w4`gQBz0mY?2Ov=l`LpNQz9U~C%ZS|Kyg>s|1 z+7z+OX64M3+DKhlAT_O3a;jejct$TviOxuyQ=~C&wFr{w{NDf^JQz5)vwTl#&-yCZ zeFVZBv9lXuVlEXm5ahQVjWOExvcI>T|2QyW2l zh0LSmbI|yq?Lx^B)AYx|ZQIS)Y9FcU!G+2R#iIt)UL8|Nhvv@60y<2C+TFKIOwyK3 zQS8}rrx+1Y%9fFKDGRmece3z?qVXl@%ax&^t53Tg0WO`f))yHYMd~wWzjQe@E?%Oc z7A*LaqaQ^-w^P*~41v0vin^w{J=^+5i6rI_aEOv6Ty%?-QK-xo9IKBz_=3ibcc2ZNby!AUqKVRQ`34cHO(d)ONA{J#P3|eh*m|FDUR^LHpp_$uJ~1h2ZbMuS zgg!xS$TM~h=9vQfMSUpQXhj^&-=GEiyYB_MsYoQXtuJM?`7ZZ|p>p=*Pa41|hCIXL zP?QgilCjEzMYlP?YzAbIB5w=>u0~Ffs%I$CN0eT-k|+f<>hWqREg+OO@FWKBP<# zyUNu_5M(P7b@<;cnB#0E7k}}F3CC8{77Fs_%p_>;T6-LVli!;QEahdU5y`IMpq2Ic zZk2GhFlsy&DX<02b_z~+qhy4I^uOJ5V9R{rp*y9Dyr(!U!%7iVT36x^ODZ z@M&c&VU*7t*xa>}D3YQp5)=$((d3BW@5*Cmf5S?`QG?*}<m7f$B*4PJrBm>pm z(qb$u&*a;zfWKq{6Oo!kKA!9L0qqxQG^5Cg*f=n`Tm4c}iNZ}UxYIML7&vScwDuz= zK3%sI0xY(L`FgKKP(Y48Mgd3HYx@(5ju?w=rG8`x%0dgSqP>6V=|JJ*6oe*(0+jS+ zIK*FExP10Zfi%V@LsT(IOvM1BlZ+V;jLyUVR3;DkiB+79Jd+QnWA_`v5|#J|k8cv2 zLh;sKK?Fu`fAOq?omd(OOv%1zvGi))byNniPtb3KaIQ>gK7Kawdcs@Qw)t`3^X}-f zuK0kua(@vOJn;H7+4cDAM(CoBHTZtA7j19m^#_ISfy0Lbe1*;})6&^F1il+e#B|7> zj*GVI4O@2ph2C4D<8FeBpMEe2_7Q=O9s#&KR-U)<7!AFhft()vA%t0V3Go6RZ=s(K z#5sxQ>w2H}ve4d~@yWw853}attVvF)#93u>CWIm}=siTxJ}8xD*rww=90qCM+fvPU^RBH$-2SN+=Eoxr~~-Mz&a9%*w7< zANzIzY1mL#7-(f;s>~afZ_iQ&o}cb8c@5tQL+Jh>F5Vx5lUNQ=>Z&P5Bo=Sx`C1ui zP15pDM!TT<#k_o>?2s#+xf;o2>z|~ssHem+`>HeN`}yawf6p#}^7R)!k{rlENoh*X z3c^ZB&I@`w<1NHF5n2aDloR1+#OEK)Q=SqKrG->6mOXt@m5@n>MhCH@n&7&NYe{gqZKq&tl|9sRQ^ zH%0A~QmMV{f*@;r-ptU`+J?{D)ZSju`n_~5yh!lj=Zq3l6JdQ~QtyT5m(0n@3*7hX zf2Y13C}C)PjVp2ER+7oo0H(**!Qq8&fjJC5=;5J5R_pS;c>pqD5Q`GNfH{8zF>Es7 zGbXdEIQdCKq^)i+)RCaVtQ2P$=S6Uqh3D6Wj}@#Gqp5rAVzqK6j-NSUfOA^XOo-%d zECE`G4AUfT!1EI%lJd2l4oN%=$7sSvn-2ov&*$*ORYMAg>Cd9(yjCuulOJSZ zbw9h64}n4>qa(00UQSx@&?QG4`*$R8v!cxsEwW@`C#Tolf3eAck=2ic5Y9m+o{XOc zy({KS)a#qH2PaW(#g23g1pVI&jJv21d|o?LL>WR%>_{$9>opSMaEt0LjEI;4lSiBHT@@Ex*I7Z zPqbt5Kyty8OYxa>w=WydF`P~*)#GbkCzPJebkPoPuz5{nXo;<%NM{(R$|ZuWI^g|g zqYDv=F^t^A-dooZ#Q-_AGA6XZk3%6TZ(eS}Gd3bUubf<7AX_;q)M*I5Aj&!5&E>D- z+kG;#r0P|x@O(jtsm`mT&M}Yf!h`{lz+`w}UK1ly9?HxMXrGRa>UJsNLTaW^ROm5@BoE1dJ_nE5I8Y7 zFsAP|{R!qSbELsxsS$ZJOpDc=D+}fM8&t!HBfnaybxr5<(1#KAz`r&{n3MNX!%lW6 zZPw9;d*IcYO@4Qh46C7FaFQo!X*TcpafyGAb4OpK zS>>?>w3t0c!exD>QABwF>0cUXIOT^{nl00C{vN&q-J@*QR8b)k{ z4xZ)4tqL~-ZeqPNrMk7Qeiq!${QSFt6jOBG+z6Kr6U@PquxV(1+owm17E0hlc~R)%gQE8-2Y@AwU)JqmX%5rpf#-y@z_26zU}-O z>;agnQiW>6Ey^Q#Ert=3nMp*!W_k48SBAZ3cM&qFPOvlr`?`TdJ@-=JJkDXn{%MY0 zFTDN1<>BPLA3sfm!SSGwuV3@L6Pdebm+NlWlWFAS7AM{ThX+-Z3@-j*i&GLZ)M#T1 zRvo0q8l_H&*Wdi!ryghx!^cc&d7N+P!ynnj!ByI*)7HA_#5w50$?%CCVt*KZG9|lx zYWK?S35l2`ZHno#<+m9vX`7_U+iBGGL9)-}2&$qLth*VlAVnlsLT4D9NwzJNOF|YiA}S z2RHn&?xUkkDjA60X1<8S2fL7|WXAKo89LWe79|Dg$pgkB*70~s91Pi=F=0A-jOo-U zcq`DPk_Y|LW+C>miheYbpw=P~kD6)I8J9VkddsVot<0d7$#(PJe(xwC$5MBIi-kXn zxzaGX#5wHldEyR54t`R=ZSw{-cItlo19FD`@s!7j-$#$yl>idx0X9l_aU`u;=wnB{ zAbpU7A=Q@V92d>l!bzs=d}9y6WVFdUjBKhMA+W^<9F@Ezq8re3)>g^_XD2nWNa8@d zXV;cXL_AK%6H%Kr)5wVHG6}^-)s&nNiG}#3PWpj@fS`OZk;m9?8VgOa)FWyct2P?DG>@4i$34Ft@chvKu$qag(mijdMMipWTBc}Muk*yK78a8+H<)5uk0@&#T4 zt`i9sFwdj6AnX!L7_}-L1@(qj$-vmEFEaCw20`5j-Vb3R8}^D3+=_yubn<9UCFauC z!f46GrjK-9$w~gj0I1IaJhU$z>@j2sUUiE5fuSl-M@L$d#J#S zEQti|$rlU=87&RNC+jXv@U{*fC7?S#;7H%;-*I-IsJgULBMbYm5y*fuIc2pH4NSuZ zSt7!Wb^r={+vO#^bso)1PsQ-2B%;e>4HbqSz_x?sxJW`O#c_C3sH&?w z{MP;~K8q%-xaE=)xAPQjn=*SH7>JiUzOM;aO*nf{5{{ z@hb?)br>_K&FcLH6#FDP=xMbo5S>{(}GdN$bw{aJY`)?Zc5?9>e8B3Vy zlbyHcfnaZ{Y?0sP*l+!6%vC)jdSDK%Kk(d+tB-?-B zz3mDYxC05jeUU~KF-oMbrw94?>8JndnO8jkM6F-87&hvB@4^Fb_p<+d=HQ`C+Ugyc zx}WGiT?*v;r8q^#L~%uZg-}|>^Z4^iSj(~%Dw#n1!pR`}*RHT6*GSQM-oz?*kwt+W zgG}lHI`*d=3=M6qt@~%mX{$RwPJ z6riCGx=zVuw-`eIr-=wxr&Tx78)%n|x;f2iw$Z6P-2$_8|GE4v=wq>s4ICUh>$ZkL zz)bijo`Ea~%JkTw8@^h3L^#w`F__(V)bIti&`N z`{(D^Z8y=L@FJf667LC8=vwQP2{1r~uXvhX&2Wg#rMbRS&$qWi^!|c09vXVkVA_X@ zZaPC*^_UwcUJSxlzYS*qzPFCDsTE9zR%sDTn^ei^siUvvz`pnzKDmU6ZZ&h*7uwA` zz6ZNOC-BYa6_d5p0cZG1)c3qEJ70s6q!DTybQw~VvkF!$gNuGu6T&PuAITd9n6a`n zc*R=4ghiKuF|WG?7Z?z5bv6I7990LE^WZ7*Rg87Vcj0K=xQ?kk&m8mJtsa|Qt4HsM zWVIe1wWJXedV!`M|HO)x6JzofExD|oJH4fmO{ykqKdU|O^2*CIRR;b1O z@JGdX7!=jFOAqww%lhlH>*XvnAU|(NBx)dpbpbT@ljBYe-P@V&@;A3E?TE@x6=)~|GWXM zVwRkwq`Hni3by7Zux!yLrY4V&1qCB~-^0mw)HIYtKtji&(0wN#ZgIiT`8O%x9n2&^ zVaOXp<0-Jh<6hCTu~`ER{}$HP<{7D--}8?Y2sm?!YdT}}F<3^w=Y={zgEdWMf2~3~ z)eJs~@MUs~YcfZg9%@Z}P~;S_unw_3rUzMi)-CCOKvBKco1y4B^2(<&E6^2ZQIL^~ zE7|B;VW2NVPOAFzRp)7yKcuZ~Ml7BJMe`doK_NnZmXx?Le$TEhXmuEmR)>p3O8oar zBK+IHawGNg2OzTKL=NiCqd?3*yaUS)rNfOPmYKqE!{>hUIa8`kKn{P}F9~rON(Nff zY-oY@iQc|sq!!Ocnjf=O=;srE1)Pq&m_B=Fe=vmEodR*4OElcwXp6onI*!9*R&a^X(#)sPH3(iV4Pk z6o*$w%2FSZD~NAMkD=Pz*_&gvJGEy2>7!O?HxE0#@|8>hoXhB>RwT?PoE|!^Vc_-o zd99u;4*|(eG&)?KOqM^q;+;oHRG-~|e(Wh8U@3~$x@_v64DT@5%7wFRF0qZg<`?gR z8-dQ%mY6dP`AR6)x^MkAW!C5F%L0qU&j*O5W$nD0m6a92IpM{9&b^?!yE_1L{WV+A zJMtKFl~xEySy;CA6c=vofJgTP>@zu6hz+F9g{*nlRoNBnO&?qAoh@!k98JQ0t`RNM z(&J=3-|mcM2+v+~a++*Isi%uL(vB;VxP2a_#A_@4d5~Bl@6&$Hs?KZ^>MxGbS3jgo zpBTA;_q2HKm2WPcz#ZC@rc>SeL}*uOFY$_Lzz4i}+)(Rglzb`pEX|AzOn6%uK^q8R z=q-3u(|A-(=)T|{D2a#^=Gp<7+|lt@$IlI zE)jxOLEL$QdJYzryUE|vl|T8hf*d^f4}n|i{_>y-cAsIWq5q`%3T-LP{re6ZCzrO9 zKBaG$PXX)HOVqiuJ~7j&IWj?XT~0#-bI!B4?S0D)cFmJ_^hc+%ms31V`LxFjRtg8T zJY?#R?}|=dsH{;b4-Y=cDJiZkh7?MN7%%krMSB)WiOCAnM<0p3&@3%+eA?H$HqXfU zx?P(cAvWN{tE!OyXFq-XB5jjC(dU%SIn!~*XBiPzWOP8AD2j0x315!Uv=RaRT|I1mi~Y(xGm=pst!L4t+9~6 zaDjoPlAMYvE@gVKtg;dU*??7^M^k&Hul&#lm6Q)euY;wWJBgP}g@d~X5L?lcXJK3) zrd;*(Pffapcj|mjjo9<(*>dLxU;~th{5#eqBo#S~9oNP*c~|@JT2T{|jKfCRQnJ;> zBn^erHl3W|Gz)*1qz-`OB$|JREN6WBdm$=grU2>5{o6)occ(80YIW(AXF1S`xF7+1 z8n9e>V(a8A2{B`awODT{I2ZE^-Cm`{~wdzgOAyRECnr zpEEU=f{VMs^?H|qkdP1vg&ysS;#R!_Xu;^17z$xwz@(xy)#z-T%B-(Qe4AqpVefa~kaD=U%CdN1z1 z{aE1+W~8O1v-n)YzJ5gpgTXGX*)}cFqiYk@hOJFMKeNsMeEs&&#MMR$r~@H8;y;3p z_xgY2Sgmuq+c-K}4sSR9n-gLXZ09MzE|3Wvgl$p@Q>AyFFDv;pVoQ-rAgxMCqei*s&zMY20WWcw)9SM2PW7POB^qvlLdZog1HV zl`h1-ZA6;$49&adN+em+8E3lYpOlsvgGZ9z@!d$z2Ku=! zY?>-$@O^h$t2PI0>!GsNQCSo0I9!Hi-C>WnN3*d2GIF~0K3j;-mN0B3VJj6N#ro|F z@x;QN=XM>|-MjYwT=Tt})3&j-msZzU^@2k(3i{p+1v}FiEc)g%u34pX4}nQIgy>Ed z^p&48cmKOK-cDJ&O10V(els0!3~W@Degp^A51TPLFBaKPdtn$QGsH?e;-MoTR+h66jhf@cqGgm6S*Nyl6$aSc+ zo1RMS@0uL%cVDUk{9%#@t)-KuP;%0_Gq<2%DVq%FgVOI#crUvmhJjREQcmOQ#4iSQ zhVlydVHmc@#~MCE!%)b84lk&CG_o(F2bT9q;X(qI0?Hy>DJ%Y~19NNDTh^kF3_w9g zO-ILR^}^?O+Yw%uLO0_sX8e~}RKZu0C3eGTU@y2WOuu!br&qlMD{rhGvF zxdo<_$e@+iuG;OW+c{ck6m9hGjC=kRZ+bH@DWUZf#a?7Pe#QUlPl|i%7L9a_ zd%>U=5Ys`(2l4t|TL8+FiCWWMd;t%7V1B{Iw&DcDMXoO}$sD70zkkK|_RbDOtOu(>QzD>I z;Pg0D`KOs_a@|Q22^7FH^uTEMyZdJ!0H*B3^z`B4A4Y`WRZT6ekAP3%pL{2gLh|3W z{BtqrH#(sRqtPj(i2;PcbZ&dxfAD1M$$tivuh-YtO82stz9&~cI`vj4|0shGms|g| zHNd3+#wBm_w2zj1(*JZ}v8+#QPj@8$0N1fAIKRepQ>#+v^^E*{NpEt}dn+_65B(3w z)zrZgl#EfRBxX~25VyyHL^~H`y^6f=U#d>IsAV^=2FWZZvYN-zuHZYL&x(s^OY4H} z^r|~sh>(o^vnin9I2Q6Vz36&K?@oMT z)kT;^Oo0rrHW3gI6qS@Dr>D#M`3V3mslXWhr)6VE!erP`M_9N1_jze)N^0sSfaOy_ zZ$!T411)M{V3Vw=s@k0=9uBM?bscCg1U|1nZ`-f5Ft6*;r)*_L4?;U6bsyg3UP5YG zVlsnX;o`HuO2E!{G-kvU4ww$9=+8>1no19)3kGZ&w)t=V93DmQr`; z?v32&U%opjvo9ND<6mkpM*=3oy!JJDhaQe6l(y{G=fbK@ydh%I=G<0TG{B%?v3$lO zwiE8XZrM}DL2jQ0mYY0poO%A6^X>b$nZ-pJLqif_|Fv#=XJ)bfqS~qm!6@YIpWfQr zxUWDq7t50}Ql9Nqvh1R(>%bePNRe<92W zuM{^=PN`@o7-KIsJ#toeoa?F0sBw6PSAgA;&9;Fc`oNakb^pZK*BpVQihThUZc=<# zwgp39D7wNObYxyk%vrL`(O*%yQVZ=q*@_1KkDkP9o{-A=NUo*vGp*jvf6oPhuO$qs zH4$6q3nj1`146b`IMTGfbzwMFi*P{A2J~BHSa~G-7MIWf8iuuRsXy}VQeoWImg5wH zE-BhbW3WCePoGts*gD!kL9P2Zig>TP5*a(cW@UgNJ(k4v{3!30a>hE+r1SzY5if_v zbeYrM1#DpH84qFYwW=(Ro36CdWT39yu4R=+ONxu*1~OnvlyZ9XnKnKpN+GIqHt%J0 zs!Z!dMRfbe{&4lqeLD=1$F-@hfKe?jsLCpzExmecy--zCld$zA_#KDR1WkszG^x%e zI%zMDH+>4;x%E%K8tPTZ{D`9;h*d^gT)uSM+zbbYO8N;xWCi?%)ccn5xCke$>*Bi3 z?osfz=?d3OISUdhl{Fw%)YuotmE%f7dqGWIf3p2PZmW*YD(ZU3R8QPg2$haBD&?Ga zbts~4htE(aV)CG{wl-1qKHlmG)OaOJ$@(L9aZzVvWW>ha-W(v{e5=hCxWdU|?gKYs#5%yr)b5&)h2$;yiM15mZyo-8Cdt~3CtjZr}HG6sC2qB&}8 z11y{den-WptIhRT&4_xx|NYcI%N5{?k+HO-0dSuI0Mi^;IzkT*Z8T%vO8z$s0QBp4 zZv^rdeu^^#W>|=i)>FY^&VXc7&ha;iZrEy=4r$iMjHQJ3$ilU}=AUUljQzj*x*t$I zbx9QzF#Z5w?rC!uHImprL&(X39w_cNf<;S}bFBdQ`@ajVs;Zh2HUJ7UpqK;(kOeRS zYiMXhEWbvHzJwkh+j$rs0FE+?k#7vU2M1K}kTf(j%!V!BVzB5U3z&eNi%bBC41DWh z#eiwye$^cf5DTCVbM@xt1Jhx#a;`{Ue?Ne145J7Avnd*Q&gIG|%6IMjR##K&X)heC zJF8s#KQvu;AeM30mK86)=o_(b5(TeCAGfmgh&+MTB_@?Wl3n{o?o`g-!c`@sK> zJbIK_lf(KK`;rpf$c$O>g7*v+TRy>*{N918Kx>18zXxfoLowwJ{6qKxb^2?eR_J)f#HS@ zhyRvpiG&x})MCi7QaL=C28DR|5-&&Du?+l<36fb1r5dJt`$qRT?D}X(bMBX#%dA3q z=CbF<45KWi)YVbj;M*0?6$V_RTKutK`EpK4$=iqsrix1EG|n?h!k_+l*^_Ov?nkT3 z_s4KIWF^$I-CLUfOjS;ww^n_pAs6wA3WCICLEuz$4O4z;+Y4p2lUee<0|GiR|dj#>7wRlHOEpgGMy3+H|V#Z|zTS8LO zc|>7WyMF1}mUVhj>{j66gGRz@5pR34$F6BR-t+Fqu-`X?pc7e}5-wX<&IQ@0+p z+KRVs!^R$m?Sm(;}Gl9wW#zN%`Sj!IApQCjy)rP8QQ zVM!$a0OiV1rGHKBWmSGeTU(UKCFp!9T$Pgz?&QqLBK>>USGA4DKc^)EZPq#KZchBg zUUT3g&3PZPl4bD|XgaefM%N&DpdhwHdfr`IE}INYCD_z~oiR77C}Xw;gH6vGxO|5B z8;5XsYZKNDJTjxV`Eaa`MR6|I(1*X}NhcR6OxKj#U7^2!uWPdJSzDxeX#R7tn9ofN zmA9!P&d>K^WNb>&$Z=!Z-otFoRBMMf7?)|7#3TLLk>Y0C#l>8BhL4SKiNPV&GM&Pw z$?1sp#plHu&dXici0#TyCCJFhwVPLFYZN}>vm+(G(*Y=98aUB2Pxe$quV52FX-kzFanG1_OoP zN=;9HJEdO|oFhD|CpeMneFFoFagP!h85!GV9hmK~A5IG7Z%*5=5Wm8EK&-X@-8NI} zuTXH?Lx;m-KJwW2?`4fe8IzJmp-OhTJavS1d4u3^yP?@}wiNl~sfVu?3t?9@NjKlT z4|O%OpkVr3lXvdOCPs)DV!@u0@ENLQOh0G(z^A;tI7pEANzH$L5Gc~Fl&bK%RisxR zKU%0Mcf~wdU2Q%-g|X_s zp1q=Kn4cZTthg?Gp4@4Yos;th+?_mKg4!Q9L8;vGN|)rH2Y7^$oo`01^I$dy__sf9 z7fLtgTZx9jmrbI{vUw(u$|eGf*-yTmGN%nkj$WjzCdD9+z~T0E>*n%^f}mEd>0O-| zys3|SHy7lW4qG(Bt>ZJ_$5Qx)s^#3x<+HlaoHa2{$>-LM=O2VdNE1Rh4x|p?9Mi6eK74#!wov@TI8jSk=O zr5<-6>x8dLA5@)M?w>;PkFHs2(Bvu^EX|#a^Lv+lWT)+7W4!dq$=rnnnXe070=-h6 z;S@!U-P9Xhn{3ULi+Z0eJ^Au~)r(N)+w2o@BXdk-#AhBFZuA3Zt1o0 zL2%sB)@UT`0f!;#_}3?;H@6{18&6i`A?bZ{Nz;xQ%(aM7b8D<8N#P>g9x74mo}p~H zxyH!tj%r`O@65A}PW?6}uWgZ%IB;9@aKmdp=!*>x>a!`E-Gz$J~lsceWdpHx3w6pu>wcnh#Gd&l*!dnN_hM~ShnU|hEYkF>fCORka zEQolyGh*)hNa6Q9_03EanUCqS{YXo?@TB2{!*9c(@s`NzU`i~DX2GtWMQR2{=IC-g zWE(?+?uEs654&07dt@SgIRr}OMb*QCC;k6z@d z;6(&mxzy+J7;zBEZ2qHo)yZd?#ad2OM6O6`vG9vBIP3s4qFfFO&tWHIYr|f1KiKys zjOr(h3{ht2D0rEl%5IE|7?2P9TfvLvY82L=%z1;aG5!5T1yRwFJ@aBW|3QS<{b1m^ zO7K}Bosh&TjldiFA#l-b#%vu+v9LA*8&f*W)UPEAv6*VpB5U#ROsmEgR@wZC-Sym^ zd4!IwD4wS(!+7WGc1bp064#e`wW2PHvA0YHT3jit>GOG$XurBNL+4gCTh0mE$;sMb zJ5d^kDLTX)zi$1_+<|RQFqpT^lA9BDdGOlJNb{2>2h1e1>cR@OY!}0Q13N1#-5qTjam!JS!}Y1s6b2XMgE8}XBs5yd64ennYl*L z_}`DEZOI4U1>@^+dm?Z`Fj%sL5)_yXJ5WxMbQWhvNwh2ep~)&(PbJbx&5uXoSt!0V z{U!aUlg)<9+udK{#%~j!umgjVYEkQr0*mj??3)jJlcOiD|fchbh2O5p>@Evrnjo}?3;@Hm>B=}r8MV>rk&S1I#5!!w7TE#2|JkW?rtTS4IhO~6waZCX`9?8L z2+tFt!7fe1H($tOrln~XKA)~(f4fgAZP4^qZgv+JYoGG2bm zBk!TH-yGHp%EC8CT$gP~5|j|zALL5KXSfGRwWK6l#va?-z3Qn`sd~`%%gFTj{lm#d zKa|(l(Hv_(k||Cu*W5om^Cqh;jV376tn}J>dh|B+n4UOnp+X?-xJQ1@bNh8zYjf?K zdDqbkM?sSPGh~UtqCbV7Vu;u{>M+ekbCh+}2inEoI-QwFec(JF%bZ2LlebcQmF5E` z{mHEH+aB85k8)qc(9zS=+wI&btA@?rknyAeG<9*Z_o8rg$*sYWpA=s(JuE(vD2-4nVxp&g_+Z`rYOO=tfV5Y z0kA?tMO!6iVD01Q&r$~^!`sJLWI|fVs$y^2DC}y}VUf{3EUZQ5kQ;?^abvcD4;&#R zc(5p@4Sw+V;;L@ePAnS-_G!a%l6d$RB)|hZ4+lla-ERQkt#DeE-E`)jQoO?n^3$n-=7^MCIx5z$XsWSElS=#CA<@zmA(hGxT)jS*DLdU%0H7C);@c zy{)t*@&Wp-ET03+m-&i$b#*u|g3u}@V^s56Er)UMplP*S!we*^I3sp>Zd}uEmq$%4 z?5|d|8h=V*Ze$Akz2TsiT5_uI85md{(vCU23Sa&b?d9Tj*E;e+^sKyG>;Dp`N!!og zz7a=D1$CN;7LMj<6mk$pZ@7Fj^x)`;xR;^mT-b9nKC}2OtKm9h^=42qcgTo09o`&6 zQXjwE*v^+(!PTr6emb!Pga1;n%p?OX**kK2xh5``o;C)wPh-9Q`}5m)>e&iaV?g<* z_rfhLp`a|>N8uqzsvEfXW{#cDDPr^5=n1zqbusI{OawC%)8DhkiO1%4$@uI>Moc^r zPO|+6o9SbbzI)B$k+lSs3QEqA=^s9r_*`SWN(vE5b$XJoWJpE&mO-?lME}!^LA4V7 z!S1;Q3j8~N7n|K5aUB`=s+)KHwzBnd^~L%-qht7_ShxRtAiYe0gn@-Q+x>>SS?GXO zQ3=mHG8!_Z09awpM=I=ds!>eM%~KzU6DJ)8y@j+iE^>GQr-a_Rz=$Dcl4B}ksK!zv z=~*njxAfYIRyK;v^R(vy>De_y2|9g@FehyJ(1}#c?OZFXw47Ak-JE=!G#N0zY_u!?|VH$vc`PDhf3zdf2y2U571yKcIW7y?b@wJ zFFhh7A|RMR>ArY;UN%kQvAP<~qWe!RD)X_Z6|l$0H14MxPJa)J%SCLk$)im|y;KSN z9&Lj*l)hH&KI!&W<2 zhkqT9&`(Gttc+z?=xq8)zI#qUm_xL7|(4INw**~KGlqdPc#n?%*olq)mjun%*H9XEAk%7fX ziw;EjBfT$`o^>WD3Cqyn8Xv9=z#5mwU?J^`t*cHd05}1t4C_>2A!W2__d7_8*omVX zul`M6_P1Q#1*|O6xgF1SuHKm*kvl-Tl3iU*P&xVIo9i|azXOGJHF3-QAS4g`ewTF; zk#^PZ)3`lZ;DWk8Ixo9lWDfUZnK)R$P>Cf_v(&kE8vI)^BjeI{PhM+M8 z4&GmK`4%og1*MV0@s>IyIk2w61QIxWLPD^4#8J`Id}(MnSY9ygTx;-$K}Bm+L8ZP0kS6sbxMD8_;^7bwa`CRJnhqYiVa^4(myM{%vYHE>II= zqlmtLrkLsFg}FW6BIfMOzBj^JaSIb6FWqLT|9*!)exE z+sE$z>6rN=!9!m@DXK*36w~5heB|2beNq=bGU~G}{8Zbj#odR4 zMnLm~`uJj>swfgY2%=*6sCAN?+mYARywAx8dj-npdWM|NgyhVM_6AJ-LOz ztezy@>R;883s2v34b+_4ikb+TG6_p7t2SF+F0UW_2M2dCLvn+ujKu;eoXIkJw@LV9 z1XHi2?t9Nqv@N|-TEaecOl856+3D_-d&ED(#@qNUGw|v*yVnX4nV$#h#lI#wQ&X-X z29Kul*}u;zT470j8c?}V(2uB}`C` zkGDo)0VuoEiuC!vo&MYyVcFNw$T1CZnX}|eJ&Svv_D4vth4wq}AmdCyMZN`6S@{#Y z`?8oH`D~|pf*BJEic8z)*GzlAOM>EJto|`0acl}`f_O8Y5 zcQh?q4akiN*?itK_}{$fipgj_=w&vRvLvmI@S6zP1mQBF!UGV>z@#~;f2>&d(K9dZL6I9FD=RAi{X&66s;sK|W^f(Bc7(1e91#}n zSxEalJ^4JKC$Jee97-uZ{7C2%`L=;y-1*ZTR$8H+?yN?oL9zm@$DD57(CLN5TZI|Td}Ha52HbWL=_?l%Mr0ns%UKHs3`CdNjjd?&N+4#2(jkaz#!AC4W0#AY2!hJS;2va5UlP?$0p&G z-XA`g-$+g-gte8F!&WQU=vU0hCJm5b#6z1UlTogcB_R0%{)KF& z|MeOF_d?fg1H_KB;Rf)}SBN|p(PuXQ!GN$Q*h4JNfWMTaX%JWR+62qp)<2;ak6xyC zaaQr+!$HG^p%>(xmfXk=SLd$ggBjv`zlE{L1>Q7Y4SQ^*rSJlhKB6AcCiMg8D`!*EG}$rV@kSHtpghx z;#!l2EF}s@P1uQOa5QvvBioExp?3?xHe+>e5Tx! zLz}EbSabk=qc`2D{z{gh0!*rV8inr(mGD+qlU7z%z!N*x>;BrZ3#89|+d^z6Gk*D6 zwyx8p%_!^^3wYrH^T>F`U z4MX?EIl#Mz$;Z#{c)-otyijcRrF{J%0fCGeQ4Sk8^$;;iU-v%~95MpTPoAtpV8_SD zhj2c6Pev6+D0+cbyUt}(HMD;3QGa3=V7Lhy^o?u7iZ+a;_c;0$)N{XtEMo09F?GJM< z$adg($hzY1^9Mdhs+^Q}bo@~bQQYbL$g0GkNmf+!mS#nTfagEt=wd&tF?7YuhMwa_ zF}0`EuE$J?)&vr5dxyCHyn6?G>G&@0u-e_02-0izc*kq+U7-V+B78jMiD7b=#N2vy zb+ukIsVO9cAyT_zF9GMZ zD3_*GZ$E#Q@?!w=wPCIWxV)9sRTUkb2*vz_HJ(=Buh3Lr2uL%tveLqu+^?|TBqD<5 zJ2s_)g2J!>72Cl2p^Cn~f`I`U;&rE_bk`3}@3=8BG1Yk;GeKfI?A^ZT5E~aK3XRol zWsI0^>Q2==3&!k3@V2305eoiD?uvEI&(pJ>d!7P48O=M}p@3kAaNh#HA6m_Q{r!mL zc2!ksUP>7KbKvgt{Nhj?_h;Zr7!Bm>^muuA;^N{cZ{;}f%L8rU;S+WWD)I!Au+t zcmg8>Ll}zo_Z)S2z$2RyP^nhyIM(Y8-ymx-;@{cY-p<>`LPs&Ld{nLT_{C?+)F>F3gNCMQ=cUzVkFe0I zbc#{ELI_mq(ywMHvMVoN=K-GAm$8zMt{wNBL_!?(vOM@3&U7{wN}%+mL7rZA{LPau z0Vsh1YA-w&8udURn#YSNN$t2kvwhsPvnGXG)yDOpnA@hxIKYU(fNrry&g!FV%+OZ^;kT z=hWq;D^w!M9)@k43>>03R76qrV&}f)srPfFcY{oH1xfGC$^Im5Oj3Ia(z>a!F{VJb z2kG=B*rBLfR9v7dbu9rp!QdoRAtM>>o>L_>F?>^#8d4%CbeoiR$WP;!CfO zr3Yz6h5z>?3TbDn@hWXqn~jPMqJ8e@XQ`xqp>PM8wc(5ig<%PLI*eCQAbh}BXiUcRu zFJcX`dcfl*;0xz+B$LbKsV?q&eEItI`||!rjlzP0f;eRC5Z#Z{JIPC*pnR3h!-d{I zI9;jS2chkhDwcPQ%qk~oG&|nEC&s^nb}v*sqI%f6x=xSnw>1xdA`P=__4hP1G*tEU zF0;y3QrRE9X4tMKiZ+J~3*rt#lIz4D$fr;=(&Hlfa7)ZBAQ6vJw0K_1Wy&G=rQo_7 ziSxTUh~FyXSCtA!yE?mElMT%`QDGS({aLT520zYACVOpSROa_a(QiCLlrJsk6@%kf zPcCQ)D{hK(!<8w5F*=_I#N51;nORl1G@R=O28-=PS>Vx;3pzG&2eiTl4_5nW`Myl= z%w12s`=;mk)}t)V5>uvXqBTbMFg}BRH=U)Renyggzu76dO`1EPOafERf}fO@RE+a> z$eW!(ymD&}8x3hD4oy*Q60%;Q*yI<13&zI34|oFZu$S^m&9J|_Cq@TkD22ya~?XXfYEg~PK?7W6+K zpIu&-yFQGTS{~-3iEw!3+%W5Nu~Q4TAzC5PUrMl!{J6DmXRI@0tP)A#m!n@_Om7x* z%5?FNgxtGJJr$)})_51xLpls8(}CD$=z(?qy1KeEH%oPwWCsd)g5gN(PBLR|0!Vj5 z+fU)>Y_E`*A9#m3CXZ{+J;~U85X<7$39u^<$8_x>l>hZ=BEmw4n8L`+ zObwYOlxbbsWx;}34mWropBJc^)K04~B>`3hfmNkI?f3ZjG9))hkfOsWf!xXrm}QNy z6%~OS0fj$DjmZjpkd~gGTHL7amr{HB5oLxgfKn#@NXarsXaR>7)PS$%F1u9v zP5tOk$jiCd0t`9PH0=n=Cv8*ZKi{)^dC)?az^G^}yLL{mhfaxJgnL0h#1!`hCwwrx zFYim}#tW6f&!0cndG#b2*Xx?+#Is10{OQ~x&K{i(o}Z^19p65Fa7Ti~VA;4LY%fH>yP9K+Q;xy5TnB(d}-0em>gyx5n4 zIN1&j-x=b#QB6s(CBEaf;(k>AkuiM>T_s;4q}J51D=1cCJE2iHC;Gsqv!0ce)lq}# z>?!^sO`7+InF^W~jVcu_)!?4#Wia=`Lb<7H2!yw)`fph_yu#lk`>vwSt`jP8B&yYIYooqgO_|w_Fq5YO2c6lCefA1={=LxczK!zfeX1I4nfkW?Z zud1qw02^t4eHz(hU}b#;ixrD>s_#J6B%7B5eHN2PE-;=_3-B^ktRY~ev_m~f%Z$hX z!KhWKG-A5NB_+{p#)=S&R{_FEhk`vGY823&2zVWR=}~NoZvX5WYvPpNl`@fl>J|6hhiofB%Bk6ll_bJVWM)BXxSu5 zsTu8VQJ=p9p6Eyh3yf{2eRJCwEokLVXsnst+weif&q%b9HnJ}1xOdX|HOU%i6Jt6u zeCka+8)lC>_Ey2XJDB)vHb}VqVIl^3rbnNC^>tFWC#|32hdo4~T)w?DpK|amvWC{% zFwBGV%pHnPndQ5ygK{nwmk_kLd%hMFAYQb~=5Pog&(2U%0>Ux0eGKyKN{@Y$OphhZ zA`Rwyp(s%Bk8CD7*qC(Fz7%x8x>jZ193c zUc7v1@$qvBmTu6yry+Mjt1+8&f>c!^RqWe7)^|EYP&aSiQb5G5t4wJ#! zRdk8L6`T$ioHKD3m{hFNbCg*di?4f`i9xio&+bGk%JA1Ifadl~syQ(~Lt~W(5ibO_ z#k>FA4G|!Yrkg!W_D{jU+FK!GsNI@TTud03DVxNUQR`WaD5aQ^UaLqXdPv=3Fe5UD zrcg&*6I5i0pM%*$PaIxP5z*{iPi!{c*~O?LN)VB^ahF5UsXyztUn}{;Aj#WhjB8>= zO%HMwR~!|?lM_3xV|6ERv#7I3oZMg3ugXYM4F!7C`23_{T0b~rDt%F*fC1@`vo_gw z>JLt=$Hn6ATajk*ma}rC2@=YwS|=Sg68bBLO?i2e)(t*~qIJ!fGBZSXLffmVs$3jU zlDhr+x(^itsN?Wam*!cK>-xLpg)_gup{Gxmc42MQ_oqiGJUI3j)YPqCRjb3GJ2aB! z{U`FD930qOFv$)ovtBbXDDpVdK+KzO*y3k9Qx^wmfq~DyWR(spBqv(M8ks%^GMQdm zjBv87Y;4*sxt$Kz6nW+LFl&}L>{#;Y|-^7FbWc>d3|N^q|tMX%bh^e?%A>LEbDP(C9z1!M(OiU*|p)$V}A1;QmnuG z8RwP;?w+rp1O4r%;kLeHF)zHNI6q6*znPtwm`^K+}cNr~ROl zKP+`X0{4+hsKmCx(o@3jm2%62RF$)}lm!IC!kaOBWI+YQ~fVR18O} z$(?3|E@!0DYqYT&$nP2aUtjJ#Av41U?F}5?tkUN52n0C`$dz*Ynh4zbaD6ZZgAK8r z8iD$^-xrYwDuu^F;BA1$dFhoh0e%jK4P}n=z9;+X^OtV{;4ZTnX9L{tPRN_CE-A?A z;VgmvMgSUGo6UB$BuxfN>gq|K!W7eaqoLCh7auQ{CG5K~-y$+yYu~+on61n}#AA&= zlCQWtR1m}AyCmWD*#*3M^9O#vM}@QfHP1*++na8>Zm#C{O#TGdH{SFbG>h!h-gnz+ z%P02>Q7_G}`VyOBIQ9IdDinIxxF>UmNI)W?q@@kX$w7{idWK+cU7k4uLIY-(T{OPm zk&{m(=tazw7uVNk4e)n6*od@}Qa&gffYSmS%}XmSho}(U2ateCD=55zjx5{`2qF;4 z35>133w;`d7EC^kGlWh5o3e%mT{*{fzRB>@ekC1LEnG7iWU~S_1ZH;HZ+I;R>4{rI z2I$8QR#OaBL0|xlxHb3x8Uj?fJlZ9kTqC0bnf-Q~+)|tAlvkV)yO^Bh$>QCo@Zi+sNF*k5^F|A03qu+;Zydh7wWM zoJ#H^&VD+R`-^zpUR-UI5QvH0qoQ`Aam*Y`!r_jZVz>k%L-$Qcac^aONe>GOe20JJ z^x%ptIzr;d4ggryK~6OJrlAdD^*tf9bG$t-_}$L(xKzD4|$Ebl^!5rPxXU z3&)zQ&%^Npnla3JRhHXNduJ|$$YRviJG|2d%rR~IC7a*A=GE1EA1KJ!2r>ULFSj0> z=FH~+OaCQb(Bjh6SW<=`zqYoPB_3q_R9^lde+1~>^h57iXz=e0&CHOF+dJW?7#fnF zTuS^}b9uU4v?L-`7KdR#F_s0$&Ev6jBGZOhvf6NpIm2)=R0L9_2BAqZXPUi=tEexF zR^m4ghe&ej`hjqA_Z!-XQR`?DlGrtk)`Bp&(&x+x!bPY~F?5b&5#1?h1Oo90G-1X-ZeuZM)RN7i zlV*cNg*f_cZvs8A{LLA!3v+VBOr912eXl^R!g*a0p#}t07Gg(YQqn#Qrs1?2rUBm! zAp?=;`uUFVyB^`27bjDPo&eeKscvm!jLtUA@;RoPe^o}@@|x3@tuXORY#mcH|I4ea zGpCzc?x#gQhpX!@O?)BZhFQ-`D^>K=er}gGwduRhc81(t|59AI6r#=yyvS=-2em+{ z*DIr%1{TA?-34EjO*yAFzzz^3(T;FDH4Tj%)dH<5%Lg$+2N-}=12zSN^PiDBSD1$UgpS;t@ znIb4hMAoH_@OupnwUPA@h~q0LHFbFH=YH(YHsm?S%RmJjO4H?}8U^XR_T;@Gk4Q+VK&3HDx|&KFtZj&4|(y z-*rm*@`sz3m(G>P+Rje#t4j~7WiP`HWwP`+>=ANYr|(}!+y6+=x=j#_?!;_@+R_qj zD&q5^sRC$6jG2RbC(cJ39DV&?!_`HgzC(8rK3#Zb%L|ZQwUDqg8&lrBxF`LaQ7ZG@ znNM(uyK5y&C?ZoSJd0wLC(v;2p(3A7>Fn3?;{Ejsz?sufVmWi*{{fZJBN0C#ut+vL zW~{2yHxgD#>>pU9{<_IBw!#Yu6U(kE_RjM$z=%w+%=LLT!}wM%;0Lf5)~QmU^kVgB zGMMu{(KqnkslHdvkDSWO&0XfOCiql`+7Cw3o9Jwdm7^>tk2Mx_~HA9;eIP|wz6CH-F037KqOJaiQh z+`F3B(}>9}FwTiZy8;zBHItPVAQ*lEE*|RFUlS7yO*4D->tx{UAwd`VH(|=6Rfg0s zs|b$h1Hng_MF1Z-Jl`&bK?RJAMNoEHaudUusP{SJ1XURv*2nxAig2LV(+AAV%{igL zDtvuv3T*@D^`EcKe_MSakoAdXlRv+c>1BN@M&uvXs=B$g!YkXE@^^O6q*O|eP28*) z*jnVry&DcEZ{KDdXlNS_arWE~(Ja%}`SMjcSB2zkWqAGT(-omrzZX-n*dikPh~Nlpj}=4zfh=089q0`R5d~zTJR+BWQ7nFbpaduN zh|9bTd=9j1Jqg+L!k{yXD+2A?^~?Pj|4%SK1LjKtQf;{}*gvSda@G%w71VDMe`Y}Y zcD4|7ANow+P0FQ9LZ~##5#5NLmAyqaX>N($0V=N}kFdnVOrj|B@HhoFrlbhied#WA z&_nImFx$H^kZ_AWe}s{7ACWKs)#33^Xe@6U^~w^uy8t5z<|>E{WZ{kOF-q>bm`|$Dy}0Xg)aUUE4!jX)#(Lp_v+ZQ zdhnKxz-qcDn^yJ~Q&OjS`bo?>Zl5yecQgbpX`v4dP*8Hi{1?Zk84UP$!0u3hS*e)M zWyi7{&Yx3Nb4q!KET*xPN~;Js6Yu+Xp9z*tDquuHvHw{v#apY%dZ)Ms)ymo}K0Up? z%vijjsAz4acjWTl{LOP$^~bO0j0CAe{#+}jU}LzJ8H76~Hqg<@dJDZo&7ssG&N$V1 zfBJW}wtSkUqen>W&vb1Jw7R;_qf*govxmfq9C&JR(GBz}lVNxaj1IwHZ>D$mPSCXr z`Cbp@Eey_}9hI?*#-&gWAo0Y~(|bb0e$acPB-KUfo}O^?Hf+y*Z*Bm%3!iFesG||Y z*>v955f?vKooLY`f^Eh>~w#5ve~x*-=YHezX-e*3VqMbycEPVen>eX@IppOwK@#V z6L7yU8m3+R{xb=nmaVR?0^>IpYI+zdrvcdW<557(oB>vcYJ%u+LRFs&NzUV$xN;0;>8*-p_Qwz&*B?^^vbKL8DYea zSNFtx9$>1fYyWJynr=A&J#1WyPh%F&4*u?Urn1-5yw^whA{@Y+dH??X(@UZV5Aw5< z@2m7G$xjT~cD~MAJv5MJCrZRGfo?U2-3&kc_+9sMTr*$#0Q8wV8F7n?iyyyP!XqH8 zomODL7b_eEl#Z&CENnYO6^OS2M!2v0`}>!b{Lk?Kf^oME-H5T|?gNkWh{rk+b<3{S znWfa5GfxU>T*3sEl1=l+j^ghNn6v=H8H5T(Svlgqe$+m>m`;+nqrE#<;YvO7S*gQv zm`V#n=>vb~&1Ke2B#6#H>-5R_}wxOQ2N=#~xBX2tI5uzDSxiExh(MtVABzMo z9OQ}G6=pJ_HtmaUvIm}rYvpb`Ix;E>`1=_?(HP-UxuilKvA`^s;dtJwM{^4yqPDu4 zV-%(zTC%9tS$;=f`D5;9k_OpGn)D@5IG&&E&MuGDdOhen~tOlkKNI(1xl`a z7!j@?_*0tC)<{0fr{O*nN86VmHo=qflP4=g+t~{?GbOqc0s-*xIrfxjijU9g-kO;N z(Lu+$lUxzf_>O!Y$Ac>hr5Uy@7I)Dr8zSq)hgcQpSVXPBCn%rZfqW1O|8{UasoYk$ zz+rkdlp_hs6etVDt*w~^1O#v?#i1%P^w~!PWp@rRl%Q#E{v)+5M>3L~2n!ss3?p1? zry1uy2(S^1tABqcgJ$hgF2nTM9_Hoc!8dRMFAshyZezpzU&aobVY58^cHoLY_W{A` z$~3sf=Pkyp?F?(kPF63>H0wIbuh%yJB$hB(5>vxz*Y^@X=_yCO+6qBdUO#!m!KU}^ z^3C7!#5^BdZFqBvDwo{Qzo=WDx!gRQaUIuRS)Kh@RTQRPs9E8#=mUlBsJg2q521nA zK2KMaPhtco51-Q=#5@c*5gmXCai+l#69zC=QW3uoIXP4Zhllkpo4DYY;P%M;FCE89 z^nr5}dww~hB$5Y;aiGmW`bCoyn?+*gLKuXaD)Aoq?8LfSX9@$J$?)elLzaoxZf}Yd z>oYEYQ!sxHeyd!#<@vYmw#Q<~C>B|~qNyB-@$(HN>+1KSLFoH4&VwAb6YN&+BFI-8 z8-)-!PEk>!UdRet2!vu1K0Cw|C74%Hs8PICW@^Wqj%fMANF_CO^;`R9BugI#JWdeAOw|a5}*yaXRojy0`)+D}r?bHVUL8n0?{y;MzAhNDmScnA24ESYP1S z8R$Izr|sl4t3ZE+!x#Xd8x%mmKl*K5?J@}JdW~Y8&elMbUhug<^msZpGb0c28|3+G zQ`I((u5jD|AAJeO*v*X>cqc0>1~^i7|IY1fL90hGEBl_=67geahJD1?f%WWq) z5v3Anz@USf133aDa{TUsG2QLeHUb+}pWO&sfqKf?K_MOc<~!*(5f>5HWA*1@H8mO< zB|e#xm1`q>t`wb;uP|bdJMiv$E{3cl0jGs{mi&*5iZP>GdZe=j7o^82_(NJhG%+eA z2Z2>u@34rRub2^mq6s7$=z9V&512hLZK@EZSJpX!L{@?EYCsUIQ8*XBRtw9_hj{b~dV+^k~ z>U4Xmn!m8^1-WkraBcx5$0s0g1jR2CGxM?@JH5jDj_uMGvhf%b=LUFBKr8zAm=taX zK#V$%eJZfI|4e8|=VdLRm8{!2yYj2Co&4VDdHBg0To?pSBonsxIFWHo3=9jPDa`%$ zP3NiR<=EFzYv4*n00Yvx8alvHqt>hNc7dpq0B5rIfMyGtPYg^KU^PWXK28 z^Vi9M7v3xR6;LG%1wTJ9{l-fTQ{Ex6H4w3VB4H7$ZH8iGhWO!L^yklXaE*xn)7jbS zb2Rh<2FdWeyUZ^ykAq56R#vtS{^xDx4@hqJLWAHt5R)rl78oC&X2f1!Z!aY<(x6-D z@&)vBFxMp%K4YaA`7I?eapB~m7o;!nu!e~t8bOa!?kU?%256mU>Kub2A3gyehj$yO zf+X<8phL2oYwQKJGfYs}Eo+08_?Lo$P33X3gUH+3(8n@`!8ob`EsFWn)YL%;`@ERH z$+XDyM28v#svRO>AAUfH)@JIRp{okU>ah~{A{Eq*JUl$m*39%=dj!e3G|=DZ5-@>W zG_v`rv5^$|8V02n;9R2~alHln?gRAT;b9=`5{P#|Mr3zhlLt0&UW$Z@$^-kxeRSYm ztUyi$-B=hNWHwgh_uy3svc3X=^((eP;fC0xLAy?q$XG+?wCDyylZE!fx=edf)8cH! zgzjfIL($?{WVxcHuLl2(dz9Ib!=Tkr9jkoymUyt6L&VIC!pSs#eGLP@RmtJ=<28VZ zf2)lrq`&M7@T0EZ8!WI?yNAysyEd3Lh(H8jh7r^i!000LJyHPyX4modIIykY(hkAt zD?GK+U17&%2sgSjuYJI6l88sa4e>04X6n zf+(rnL}}pI8JBB471hX}QMoqQeN!D_t*ZLX`TA1wE!N|%+86#|&JQnPEG+`rM2wp7 zJwJ-`YaB4=0$h?FD6QUmO(`(kDHbwvXJD#qPH|cM1b^rQZ~YOw5fV(};fCyU6(GH2 z788WmD#*{wfuSD=-Y?F|}& zV;oB66$VWQhz88{yu?`Oh=lX{a$SVWqyqyX(8W^{5`{ttdg(~ubq)NlT%mgIX*!wf z2V}wXd^4Xmg{oei5s2cTJQ@e&<@+LH3KcagYc%M{IA2e3e{!<>E1DwoRcpZam*A zWYMW&U|SFd8BTi8)sk*6^&Z($l@%7DjTWsR0o+}tjOPf9I;MS% z>0VQAZe4}%&55^vWA(1@_N?o8gZ*67KZ$A6geYt&44g;7G^k-_In+j^4o0oF=!JOE zZ`%_6aWugqvS4qUkf3~yD~1sZqJl){d$YwqN0WqMMDw6ZH4Qu2G}kiUluZV$y1VOW zL4vja;M_%nW(f^1Z!%P2i1V50y(<6?`j=}4aK#a1a)66?5S@cBD!J0~@&FhbqOk-d zr=~K9B8YDQ$#;`^M?sv)gfTyKN|`@uUTcUDK73ed)P@Wq^cQMs_=v&m0nnw z(O+HIFe7K*bW9i{e9mC>njcZqL3q*CaUF!`_`BdGVx9)fDO>tCZ4dLto}Ky#Yn158 zh>0OHYZNVj1ZWL(8%r7PbH*0Qa zII_POO76Dp*Jw3DhZx2N3bJ14PMq%8`}c$CY1i64cAs&)4dhjGKs6fwP1yt--#deQ zufN!BsNe4*35V|lSQ%6S*pez9z!5?y5&%YJ!lRR4fZ05zK(%XxXZ$1cS-RE8XAYxQ zB*??iv;rJQJ}V&7+@rnuEEoa638inQ-?@HM&vp*I2aYt3-vo`m@kKjii?K_ zTc+hYbP$0UfZjm1!HJB^KcX6XdZdt2<^TqxlLXC?4ifvuwwCMd7AMdnIByQqLUz<0 zL%t3qqF2znNBBlz-}5rSGdMXpfk>VUIU6uL5)iZDZlRzfkg0;Oh&tvrs#DOujsQu- za~CmhPgNBcehq?84zTzEBACL=D!aNxbQ4q4$!eR2fXpF+9H8XMLZ>*`>aM?&k``RY z|Ng1$PZK#&iI9EY`$Vwwt4Oh#!w+t2Vr;gg)r5qsKJ1q5&Kf1Rm#Haoowo0gjr~XKUEpvYvH;vPZHvw;5Sx-w` z!4(BO-ZC7#IHZ10iDuka=xT!p$-;G8%(=F<#$c_>;^GoEyYQDga08 zbte<(xAzQDjlPzYBzHq`FWH|kP%);46t=O zkjhmGM?RG4DC@a3aL8mqZ{m?Y>$9%`r;DtiAr06brv1(~k)*5cZdLVRM5qO;LK;mE zSs#csCg$c@zyIZJ*rrj>bN5et5TFxGDNt%#8iuAB4I(M5_>}wsKxqSP6=X(Vp`&lf1b@9~5Zv;WRM zK9mDy@V}P2@e+x3{UW!^^SOuZPD3xmp}%REp~TzkxVgg zon0u_kd4vOcAT=BLD8#@p-d_DJYwSux4do)YiGDq%wkZ6LSONk9ODk!Lx81sL-FjX< zRm&>jSm=~tn%+P=?T^yRuUGFS3{@~_+%S#D*+RF~gOSC>@Ba4@JR~%|$606F{?W@l z=`s%rn~{2~gTbE`AnDe5MmUPy*T+>H)Wno!cffu)tNbRi zc;Jm3nAQ7zlKEfkpR|QrhlYng?TIgn&n4HZSkZx}cKI$g){>g~FDFkm(nNhfP5B)svOAw9jV#Fz6|t`EK4b?w&%E>Q#m=T4VS0(#rH1fW#h36rNEo= zmW4#sOheq08DiHNZhFaX%ZBcr3B%<6;kS{%53pbh~S z#T-mShFy(R?2x3)Os3_mMba7r4izANCZHq*j(-`d2JmViMrAOtAeA_zLm;FR)aczl z3h*&-;|7CWuv@Li#;))asOJH~ig~$!|3+~+_AyyZnm_z4cX)Wg=c1B@mbN>Bw<|h- z_I=8#i(O&Am9(>>!BAnpDoQIE-(EGlwb)MMggE3@R_+yixz*KO?qW@MClP=u3960? zG1pUW3fyop&*A`B5-zT;%T2`~wyCU)g|ii=UwAZ}{=Id$J=>pj+uD-$F>HKL8X`0S zY<2kckcu9Pp18-+eZ{s?%d5KoyB#<+@Yr>3?Z;||1tK&KynQTE|!}&!{K98 z)zoqYw>@f4_ImhKl$A5`^TVJ~aG7$bQW2>_Iu|HO75EL~Vq+1fAt9|;6ZpLlKPs|6 zH$8fSG7y#*W@FG66m(Cpz8Bqv$^?1_QaZYy@RKaR7NIejcIn|6@>L6+;L+8I<1zfk z@400JRwibbXYg5(KsgP7O{s^kvDYF>>c)J$>)w*e>Ay93xPI=YM|}@^VdAq)UcR^g z+0G`Tv@Vq`ipOeKUM=ULL$L71Fo)*ul)b;au_6Iwsozfn_P6v-uZm0I0RHr&qoc?8 z50vTxP~yQ(FDQtC6(7r`jl6oq0YyRK3hpfcoAscQf^yCpE?^SWZP*=f!x#H|?oL{28$t zCW-PeIPXQ$b^-pLOWxYh?p<%9K8!RjmY3%zfLemZwIx?g@!9F~TNd{^9%|1tjpQWV zsc&J9uyy>_J__*W&v0@rIOc-FROKxQun7Hnx+y-I4f-DK^q88k82>=BqOM=R&N|Gl zSNxJiDUy|q4I=<#bEwE$3rq7Eq~pf22jI|0cdzI*XcJEK+c2nuB; zCMMaMX`FBOG^%WNb$&MS^OUkD=5#E(A9^2PSIZR^hFlzxm&#m4C$qN8P?q+8wN6BM(f zH1)Y8|4&55O%6fL_hJHJM89Vh4F2L^PE#u?z9e93Yl=*j&m@M5`a_Cbu-S8vEg;}H zbas}hGtmE4AB-8olA90X_=wnC;~16o2B0nX_~?76533gFvV<`&=ihJ~_k(rszD^wE z-y_~-=t&@wa}E|LV0Qvg zt^T`bZ=oxFsHewC)e7;W2%}o-x&3s}^c%mA8*{krftiEDt%|38%VE;o*W_FAUvM=> zckqbL$SAI{{r0uKHf-IOF*>SQYhFE#NuK7ue)(f#(iJlAX(il3XD<)OVPm0D=jFQ| z?=ThDZdHNUh!h)r;_JFSyGF8{TF>a3th9Hum8S;jlh0siAbE&wehoDUyaeEF_@ICdPxX52<42D=8$lBaBC>_& zVm8m7<6efGhP?KE4}r1T-&c97t8XXGj8b-@Lh=77({V7Upwi4NFnu;!&Li6DQ}2jlcSIe!J>Z=V4d!J zBVf5FVPE=c^~w@jSp_Af+h#53i2f3Rb^zu>*YSYs3@QOyaTnHME&~lHScHN8kV2vY?sGz1Dh4p!W*xew`#UkxJKf2m`~(roEc-ufp?LO_ zg|~C;g~?MyFzsS*8XnGva1Jt;yd!usOaD^#>42e%XeB?NjWXQTCW$I zD)g}gYyN+t5CAr~{%=B`4i!#Jn2ipDkA1|z8N(*vEciM*Sit%)t@2ytZSOIk_`8Q< z^qwJSGq?Niv;qo(Z)2IN%w}fJ?YjEYav4u+fBBmh@Tur<53+q={GcYywT&ZI2B-pbh0O`%LIRv;00uyN`7ExANn=a zmo)tH{4)41t7fX|?AdMMbkdXk;>TXU|_0$ChD*gvX@jaT^+lQ&-TeaJFk!rfh z%NiO>e!CG)IQ9?>r}6Tj1W_FUfNTX1dD>&j0YUH~f;pbYKivBUpZxs+PTV`CFK|lg zzT>))yJ2|BlRvm{WWK$L?QhT+A3|>uh|4L%IX&y|cjg-tlQ;PLcOM)lAo94Gk!go2 zlU-RD4H*v+n^TRfl=#j^Ge>({k~D*rUo5E3Ctnu=+e%GC1JVbGq|#%*Prea=h90)R zzP=6vWMdt@(eObwqvCIenuD%a@tPZzaU=YbSn=o2(beVXf3Bkx09%F@4<)xg#XQ>N zzyMSp*;xUNo4^wHydhh=NVf--isCZ z5;$@gZ>o-qGD<04#-m4He_RcJ1|0$%(eVz<#Y}x`T+*{c*UG(?RQI%BbDQCC0=e{U z%JBoQF)&)lQv+-*7^;EJrhVjdV44i%g#%#n&NR&A<;J1+Q!Ah-!GmZ43x`$;sxvJfqjul!6f_3MJ< z5LgkBj2L=f?c&_jNO<3Rv^Rk=$K|K+cqc*eE~)v;v)0D@4|O992?iGq2L3#s+wm%* zJ1rg0%}h!a^GJnB8eYF>rm!XI>n{FEJZ0BZ#6h?6&xJ$}xXR()2P-nLiE5>bVA2OU zBBZIuY3(T*Og$IAD7;yukbyYHu%N5dop{L@3(+f^dBxM-3IZJayF}i-^p-wPS zm>g@`@2Vq&-e;b{0E@ASX~1rov(Nd7$m2UlXnc(|H>w)tlPFLg>xKO&gOd!DKZrI9 z0mOj=OV#86E53fk%1&pi|C6OqXId4N?3v|jq%JOfd)rr+jaD*s9mARs!2dcM%cWtC z8-rqx@&;+!x6Sm-f^gP`>k>+8YIp#FSpbOQf`4}5x6+q(YyTBa^c%B)OlL0Xbf#-q zF1(UNjXe>KQcWvF-}r6KV@5;Fe78EwvfoC~MfA)B7u=kdx*{Aq-?j4L<#XVH0X2mM z$wj6CgnIYLzfXyn^G>12gxEseb zhc*=E=gZ^#9T^pQjdR<&cRq@*j{6LFdW8SjYBuaC?hW`DCElfRVSlj*sg zf-v}bw&iB6nDFf*AiYaSqt1j63`7utnhc~33Zhv6We{N#IC`zl>t?qh6YL!<;KN&Wo}{XsAscmlu+h zQZ8hXB1B3Lhp0qFV8YIa2Z5MdhbZn}e~yd^y~25E&9{?cIx8dZ`^9pEEFVvOIF?au ziS^d4TNW_rtbB${5um6K0HFdM{1T#1SrTbAhLH*fK;kmE4WKgnzLu9VQE5x+fuL%M zV$RI4K!!hQL7od`!^NSY5pP1y3I!JoAQJEfs8_%A$*bv+-4}P@<_t+N@lvTV)Ya7` zB_)-If(Xgt_x$~m13JpA`ua48MnHRo0{t1>G-FZH)|d5B1N12V*mvmDsD_{J{#D~M zbo|c5@Rbb%KdR=<0^W(wVO;D#@&D5TtaYfT#wzz!;{~CVJT*tVmF^#A)l(?&6)^Oy z>}(s)DwSxfL?!?qjkju@m^vT;Y_3UmWb|I%*Y7caSjRJF!@ka|tE=mA_C)zqP@ozZ z4|USZ;!s(V*|>y+9`DH+3=BpR(qDf4aOmM=0n)HkRzFc>K|Zh0j`j@aIa{GliyTLx zQ%ix)qeoDkb07m$;IR3(Ih6p96x2_eaPq+DCm@=YcXS^-U~0}TRdLhe z>eImu$e|ZU<&-qltz4X?Vf`0NA3e$?-|tuZR)SC% zeivT9rl#1~cHj%=>^-fDfw>Lu;J?d(+n`c|5I9ay1|Yo#85uDJMF-&cvf%%L_Izo{ z5}_ag+(Gtuy5A`m!Yadd6KwJUVJ#A37cuQ_a?wq_!ei8wxwv+WpLV{${BUSEzp&^- z>})~SE1XG={^yHMP8peXm}u1Lb&W|lEbR+6UsuY_C=q-ETE4-tv0&R|0C?X3H-qzx zjt~nL+bZ~vp`p$WP#i$g#-UR{NNphZ*oB436MEjjIR+9xBM>bEaGPOE4SOcG+nE0k z*6>^!!FnRU2iZMN8Ep$G|HD78TC=40ZDy|=ln|^YdZ2*KpiS@xu-3iO-?44+)K^B{5Hf`8M%Y}u*=PRO( z*=1z{sal0;$;me%PfQjDaAoZN_@I^~>VE?R<8hrT$oN1J1Xvx|$!epiIm6|AeCpJn zI}o_gm9(PPbg#X|$NaYmQg3eCE-&8$g9Q%Og`=A>S$?yxF4RM#a?7d-hesfG%Y)u` zhlD?~tSl)j>v}4$=w)jsGq16OmW3-SEG zVyNqg%?TqTH_a%^53ahZ`)GP~ny_brkl=_b8?+68R6w%B%fI=b{xdy@&*aDaa|8=U z%ydoRBsI(NhD)i?F~;!h14MV{@^}%UJRpx!S?xK{en=iyZY~C?-qj~*Z9RimT7v^9 zt(CuEA#3y|3xhGe8PRq67;$rj5b3LbYD=Ibza3O1QrFd%<@(3w(a2-St&NwtZ?W7h z%x!pDxS=GB{zbRGd&f*52+ffZB`*Y|lKkS%*Aro?&W~Oy*Oz-?)?7Eam9(2z37lEk z=sdjxSh&`V_DvfzD|2v-<=dHXlOPWZT9oJxAVi>t0POS?435{)0UALLTv7b^uYtcE z07A-R`!~$M8%4jfh-k|DY^B{_H3VYUn5LQ1oQ~+t?S|BU z`<>C@x6Z*)%*y(M$HV8Qj%{Qg#N4$1Pj` zd$nz9Mzg=~qJ6%smzC36L)Dks8}6EIF&^N@N2n~o6v5b^`j!Y>BpLXrx?~uT`37Pp z1t0=pxEAPdpk3Gh{+y{bgvc5iKV)bPP?mtH=EnVbO>~zLI#h_Nih&js(J-j0#*l5n z)eh4X5C<4E0|;Yl+1J$f(z)rE@GOjd2893_?cM2LgWu=>4@OHNJWUXfdI5 zXM^SdsM5XeTP1V5FJK}9$ff9gc4U!sIQR*Glb?b-8lO%g7AUqyI=OY_fjPiZTTY|1 zYo>L7p3vJeD2=WpO|q#8E1>!uey@pw_2n#6Fd?wX_A0I_Kr7?)dV<1 z0Mdr9%96AUzZ2V+@xP;AU^{_csvOK}aL>VHTr0TB0c21gI|HVKm5VD3j(Gt<2|!z- z1}m16n_FSr9Z75lmlA3~|0>hcQQ2W!LKuxGb;%b3{_ij5@4(aJkdQFA8F|+~x|K_b zN{BUB+;f`e!``V6D#8cDY??!C6s!IZ-@K0;5w_`aCq!C#JvNJzmE+US)a-Oq{n2zt z?Tk66o0t*w04C59lE`YA=)HI^U~$iRXTU@z`&)4g8_{gP@c20g?3TAQqLJ_v0jQOQ zNGzbKVVaFY%&9mT?k*yO0RC58T1W?Vxat0R#(Hmx_y<4H1FPn=qlXWSx+ML*5?;D) z{jhg!1l0}$bZU9!HTe9AcipLJejk%2?zB-%g+`?-Um0TZoA>HDrb|Y}gsZM$a!g~; ztfz$1NWPNyCc3_J@)Aa}u`bTSDnJA^sJAHI=h>1tzBYFRn1z%gp=m>ZA50f~1CPF+ z6~BQ*0ts_oq%lU=CZMlkJ`f4oxdCJNyL0+w)qZbbC%^_WI6Pgz?G!43oxH1dFZ_f~I!dprKxp?SVNboTMbg}^J(lk6i_#XryrydzH z38yBgkW>5a%5MaPJsJ~H_>Sl0iwZm20aO|fNQUbSxG5qMfvry^?!wA)@9i8UI=)q|VqBR=@O6l7VYzZ%)dIXIKiVU+Yw~E#+Rz99@PAG8yZ`I>Wq53C_7em9{?X2UdP^L8?&6_X_j#A_uK$9#F%3R2GBXKrjPJbtb`31fZXiyMO2HbF|UU09Z zt^ZS5ZXK9N1%hudA%4oqK`*r_klZ`alfCb#1cDIP=8^k>ez6&G>s(S&#zX!oGAg#> z^`|o}36dV9BkC&i{_`yuz@D<44u4#NV0GkI(Z?EWhY%|OhalOV#*7>rQ(iC+T3isq z`86giEXYBRco{%501<77UKJQZ;NTEZ^*9LU;-2V4e}pN4s=*TLx7SY$Y3!Q$Icwd* z7L|s%usf{CKk_X!H7u2?rMu4n+62TuSl&1nE1j#0_yOtK(f%uRqnu~?e~7b+N8AXcXzf!AqBvcr+B3nbg{bXM%H zyOzSr0st3Cn*XVN!TkeMYEdWZSMB5P)IIw4pq7ub`48-{+?3@0RhArdu~Z*oCD&_- z)D9X4u?ghw-A~caVvat1d>NRLXMvW0+rwG+=oR(fQZZvOQ)SgXv!0efv>HI#T~x!v zagKE+gROFPQai=kPFxcZ8kFFGC*CkavMKYm5;kTf_7ENu*v(^8@Ut8u>7}U4cIRBG z#e9xSjZ!p*S>fRWuKgUeRiSrYdWa5!2+icthfi=%io% zG(y60=(Iy}9`a+r0W2NBXg46iNiJ^fk-~%lZ7^knW0x5F`R+p;itqv!b3!fJ{+!~1 zAr~o;NBoa)`&Z{Z4f83~GcrnpRX61&gf8goR$=^F^q42!s_^8+S zXVAjd=_r7ToxBG3Wb!q4CJOEjQ}~P^TQ~|=3;6)yH}tvdti)LpuO5QDGDtFQ=3Sp7 zsvYnN`S~i>ZQY8qXQ`I7Q{u<|vZx6kcSmARY8qy9tFS$HRHOEMjJ}*!66p z5loyz?*{!~B#M2Kh(od^AF27lYuTnn_CF3C*ceSC-0Ot*6lyVE%gPn>=}LMC0Hj|~ zbMKZPd(OhaDN8X8Hac_6_OIr6VsAoDCc+TBgdPokn|BNXyv%KAxHmNFWEr0r*Y3OG z38FHYKbt%={9(DKI`9x%mmg^@9;<@O&&8NO>g(;vneAae5aMAinKEv% z^ghEwBV$^S^yU@wHl30lcQ-a@P?!N@N=cD#TGThcd-reeav21*X$@C~9;j=RN1V5e z-1l)DAdAhQD4Bh&iRBzDosl(Vp7(DjGUP^i`&)9)&rjN{@;|F$%U3leX1=y%luZ~X ztz2=q-?9A9<5}XdPR}0h_nG(m!~Aa@XZzDSTvi3XaE4pHC)+HsHBh+nbhM~NURq(j z$NDEuC=#crJ~pt!=)W2H8mgKu&CCZ)T+KpKs!SRG5*t_Sk#+F{H;9Mje|3 z=%7wq{$|Ylgj{7OYe>}Pf)%$(rC+1;f+FALcHsoBAntBs|LTWXymnD0kKF4L0m)+D zUWfICscm*g&?#f*KJej-rLH}Dd;FUpA7HP>s$1j(nfxA4WrSYc_@stb^fY9+I6>(n zCGXSDXs=@Wk)<#XD|Ry6%ylnx&eEz18{Jm^C07XT151Klqn{Lvj|X20BF=!KTOa-) zIZx3@{nODtfKD&PR7PCP4_eNtT@*^;=O9tE+Ckd~*fgfP2=X?F}(AVg&8-hH3 z_&-_69`U=ci!!xkk?O{EYGAZB{j%*qn;N?)tO;G?YVfR<`1R>_XLTyjIg?T5cW~#N zutW~m!}foeeyRXDXpP<%a>e(%@`wE!izfUIxHAJ@E0K5c(9w)V_#~X_Lj7!P>=Z@| z%a-;q3!Sa>ob|IB7R1qO8NINhDunUlh2)Y0BVS493@o^H<&Ta1jZE}JO+PrxsG_?+ zD1YN5#9}RDA6q_&AjqIEn9ba>#rnZN%CK@0Kle4#{Ec}wO zt{YN`sEe{VfoYCOOZy1~mbm+0GI)2@#$ae$34`ijC8;V(WteW=P=$`yi($L-cz~aT$3B~8n`3a1-KD*B_T{W0< z#oh~&q&1TIb8N<3C=svIA3pe(@fL{;9%<^&$eqW&N+~!I>6G7s2T?y4S`QZ&M7bMB z{h=@(ujT9=JCOXvL54fI(zDEyxga%|rgLbQTkEM|y)*h%b5_c~jcmXnx7IeZ;ASFS zJf}86V5T{BCV%Jktzf?|-YpafGAh&R2IV8qt7|S#cn5_v(3B*_NYYO(E*+<`Y8&`9 zNOg1`=zPUHi6*WURxxTN^n2qb8tkWDc9gbJ6?*XVFMgYKo1vZAk?pRelg#?DMo_4D zzB7;luB$VBJXO=`s;Vv>^^G0;mmygCa!^h|1kP3<4mvNUg4P1le7U+m>i{!^OV8PETuVOm!qha1>0#jFk4M zNl1OX7puJRgL{wE?Tuh|nc`Pm z#$y|eM3@qz{e(ThhBKqaM;)`;j}+y{HEv10w#{y6 zTzIP8kw}Oxl^A54BCz9i;X=A-x6D9q=}r+~cVt14xAk#I+p9auG|2GYs^ajL;S9@F zojJobY3pdK*?RJh+3_qZO3d&q1$s##6V|4;d4idX?E`8k)0% zgz6elE~9zL%@44M-V<7>veJ*blUGfly+~V>D^zvHSl&3Bo&6yrDyhtLewktQE{0mt z2DSbgH&uXH#;Fu~J$?RCM4e6I{G30@logi2H>E$3?)UZdB-K108!+PElT0XP{PMc6 zEtc2q-fD{JJ@oq&{+l^8X{!TA#21`>HuQ`JOZV8eQE9x1PwVqDtJDoMj-ABq%|2k(i(VI@KACh_Jcq4nW zwnxp{{*g6Xj^v(P>3)=Gu?OmBupeajP<8#xr_1f;Wg8Ehg7ZpK$MfrVQ$ zI*QWhxDqdNB0ZA3k)K+(@4-IV-$*tfwYmHX*jNbx%f zcH@gOd-n56xK9lIwiv(c-}`9h=3afmTRr`f?wK9kza}}A$`1Am#uLfcg}mccFB9BW zKeC$t=EnG0D#S1x-UDUQJ1@8s&VduCXkn39qi*;5eskDsVhEO%aNyUCT1$3z<+o8_vWuuLcEp48}7Bo?*=Dh$RBe`)>cs^8W)zx zD4e26+GnRZZ`aDkkNWW@q{PGsu2Uq0k=DjwW6bi`1Qs%sYZ?)B2JWmx@Nynq4E-$# z4g^NBfaJuxwQ^Z@-N?@}nk@&+sbI#OynFaHx0ZlzSO^e`#w_6;`VzaV>Aru~SJQqU z2PXXu%3fz~$;SU7QokSg*qeepUR!s@O^2~(%??#4IfaI$xWqq7=}aHWy|wrBCud#D z7rXGxjNzH#aW^e`)Uvo#oeOW%xAO0t_`In99cnxWX`g3k@-T9^CMlIjNm{Lw?BEd3kMk3H~&UC zc3o#|W({&g-+hs0^gXdZRlI`pX3dE6U#+2l8=ZS^>NcdmM|E88aK6*v36i7EbEMMB z`I2F0;P1}(dEowo_8&N9sp2VW1Eoe|H38g%$_c3Y$(tk_zPiT7KS7W^33fSAu{e}9B^y&F>{#`ZI)*z&_SN^V7Ild&pXv@BuMqZ2lsjw7X|{=ehM` z*@PbVNgqv*YJ+GiEcFHttd^PW7hX4$IQr)Z^u)j2c}1+5kP?0KFFW<`rzC6m<$ll0 zrVSXpHv~Z1!zaq&u{F*00dK14AW&=zTuA>_gT;q_+t@g??kDB6S!iQdfte&tN1V6hS zGW8?!#Iy(~X3ouy##_gsxYaYFn7Nr2)#jvLzbIN$M89z7%w1#39iL^dYGyRoHLUdQ zpZCil->#Oo_Um~>PEC)h><3$NYc0+a7nNvVOB=5_HWQB(Z8dDa_vbzFN42!FPJars zM}TMQ>@W797<2sT;ONK>2qCcdphrdl_-3iBgMJYNPN5UR4b-|nzQk|m?s#(A%q+g? zsr~Kdsd-c;LDyIxC zVgLHm&63{eO_8;wsq+Hy>1rLcC!5mAbR&EhABV<`nKv4N3A2mlz3<@q34QYQZX^G#eQCDUg! zHE{yj7C2mwA;(=;yVmKUcS?!ZF560P^1DwnJRLeq?4h#!e~38FFm%0d+1hr1u^Wgy z5&=xhTAIVwTjtirRW2L)4Ad`DZ*=0mFe>yrVKXs3WB(cH;l{{zAm)8Umm!tP2z14e zJNGXhJ!x7?ocl0r2OpsU@ijU&?X1UorzXEzZ~)z;otRR?bS0gTpan&=WHm z2am$$aB6d~@_~%sa6KMpbeX(2MK}dWXOJvedApm@*0t1-Re$tZRhbF(?R7`t>BWvc z|358&xAe!}?x$0SGeRQb1H$&b8mfui!&-M41o&!9#%sQ1p~FBFG$4}M!2ew{do-vJx50onD2%Sf?@fp-pag8reU)P^FP<&0uiQCs9rd$9$uiF z{5`du<&>IvQbeI$rHnCfr;n>EFN0Lb+Tgzm+Y9-m^J+J7IPgk znb)|v4lPC{ls-C9mbZs@8WtNU;`v9KrP2Jj8EQ{O=P)o6d4F{#GnAA-!egR%Y!uTjCm^rhhD#;^LcG7F{Q3B4#1liM54T#lYfLyzA#>3olv zkPXV>MASlvZ}Dc(Atl@3-M}%U>DI+vV%#@i#M+~kd{I%`=k92I7PEA~Rj%@*;-)GJ zDS0ctS&;^A@VwHvZ$PlAFg7acXn|AbHmb4g!$&D&p5JudM$f+9@_a?*CwdKN*K$p{ zwZDva23RhCrRSHJfcMH;%h zm-{d82b##VR@S?b3kTr{2Dh){sYGYz-&lLoZ~ZQ;Rp}w6piuDX%8kiycN;Zc3jM%q zYQn#k^0+FFjGFF|DN18L2`)qSYb~8Zi&h09J*btQa7t_z@g8nm2HOrl)$4T&4io*H z5o}S6Lht@#PUDEzSnT5{w0b|L(`s?c<#N@ z)?!#kItwMgl`kz}1i7Xtfe`m&8GpvNdu{~j9W-ShD{JeG|CM=sQu~{(@m1#u_2+`f z0{x51=Y!@Sy)Q9hqk{{mU{D&G84Am(0?MzIr}pP~Eu;_RGBeaUo_vk-m6ul4Cs=NUL9#4Hz z`MZY7IBt~M&(<3^T$<+p1+7-3XAIGAS;vVev1E|oa|i)nOVk=1ne#Q*II`rnub-)zbDGCyV@^tQC3mV;^H->XS6x#K#{vcrL(9J?q6- zgQcHl-5Z5b{>;L-Lq=Y<1M4^-03%Ij*Z`x|@lU}40jj!f`IWuwV@~|aA8PHSmppmOJS*boLB*=!Bx zsB_HHuo%Gy< zfoiRznLnSqQ7A~P&?j0xs68bl8tcNwIwis z0aJqr^y~cah`(Rl6;dzX?;F~3)_(Y?H>}c4T^K!2*0zhSygzkmWDQ?XleU%N`Qkw} z|ErDE3RVUUmUZ=y&u*!`8s-#B?;p(O0vSwGGA*ZOw3nD2&|EdH;rjD7Ks*H&L}^TcJjDn26D zE!!O4{L!Hw&y5-kZ>^to+TVg_lTdUl4C=)N>5 z4K?{99|i`gQ-a-HmLySYCaN`Yqnq7|4~!Gpg+#n2t5@wKt#e&39}2J!{5F4QJ-W)W z_=0*ZzoXhMKlE1(d*2HAz}Dg7E@oG^1SE!KG4iGRdN*LovxwdThb*r8-1F`Sd73HB zfp3m>+Y+XBPhKxAr+2KC2V_Hf`%lK@P64#$XyK17`$ED8oB;4OT{?>5zbh;8JG zB*_ynL6YE<@|n~r8yHZ7wLXEKIE{*LGhX*t{1rD&soRN2+3OFQG^un$bTMo6KYgUv zFfDD-`QHeCp^3KAFNecZ*H<1+y)(IayyKSf8(-W8{AlF}?>kdnBgN<`c={yJoLu<4 zx>O8jg7Tioj0As#{giJ*V(R?Q-67wItspS+TC5!q&wna4ZcoKM?MQ|{5lXufyuI617;7-tFE>i z-wO%9C!iU-hRjR5^KU@j2!tByiTtl1qX5F#QpWCup)y=9v#j(tegMKY8q`EcS}u48 zjuB_h4r1v=RN9Dl`Qbx3b#;8;!xbNpfod4hydrWJ(D{R)F_?&-9->AFIPEOy$KzfU#9=Dn9U?$V}TRlbM%@iiV zN*~72d)MMp3msC%9{lHfFC?HMwgwRj@|z-ROKgY^?1K0nIR9b4?&8ykyoG6zFtF*W z|F^f2lCy*D?CtHUr(=@)8sEFdXD7zT#fjB#s4OwcETuX(iHN^$rc}pVr7e3WKxy&J zCGxr)8mb(2Q1pE{eY<>DPxs}5*&`))ovPC9I?t89>FOinyY{1U8o!9t-4YrKpbc(ygT?%A_~UaNX=v8fI&MOVhKxRhwQ$ z`f11V3;NyDf42geNQ_5c_%2G+xNGFtk1L!WX+2%Y;W|Iv^4@vF96!%Mwu8mpFV60B z()P55!-KUwnJm00{48D6z@*za?U1LQyzX~u| zIy7>|C}i5p@#N;QYl>ark^`eqYN$?~YWjtz80`wkK%Nd{$hvJzya&g~&^HHr#DP7+ zX^t0c+?yu)4r|*61l z;m*;oz&g3urvGG^;OBF6p&QV-ySPfp|3qlU>mWxy;jq%?gUsQm5&xWr*T4w2wiLymRpV_5y@n@<6D_7KspIbZ$QgR+VGV1QueeBv_ zf3$mc#$Y)xm+ABE1P_yyXrcZ{nw7a*xjejp>b%sOkL6xuUf*Z{r`q5z=qyDFEzXb2 zJ{P>@jtI?af*7wqV?}td3)rQlqpDr4hril07a4qIFg1w0 zPLiMhImiA}-^Q6))$$01!ec(;zEITHHdFspB&r-c0x6yj)!U2W-gH`2T2}7nx);Tu z^ofw}Wx0wrvU(b%yt%$`T5q-!OnYB#+fLSyYiXqZ2)hW`nJvzfuZV}Nh0X_6)8E&G zgNf*56Z(v8$IE%-KZNWoe=-d)Q~U}VDvRsaCHO5?o?#NuXpVoBq7?98HT3j(6Bf)j z=P_Ylz)7<60tW4J>|6JnwO1zLQwhEe@<^i;aN({#dGklc>;b*@M|zFf9LIkfqeF!nxr;1!IPP2mlb(yun>N#wU%QV1rX>hGn(v-w?z0oVefh<>-CYdFV7 zOXv!7ERZBGjt&P1K}HM`Aip&DYS#uakg4ti#Z;8Dmo+l+BpA9LauK#>l=|0x64p#G zu4`WVr+MwP@w#P_z(!_f7L!H$Foup4X8AwL&KR4wI+wQ@dvLH7wTLqXI%5{4rv{zR zjyXHaQR8geW#VrTm1oWUq>>PkImLN>rI~TC{Seb1w|9DQ!9G{daATK7`jxM_>G`!O z2D=ryt4p%ZQ;W!mYdY_?Ssc&8<|g_X*H;h6CoTc@%v}3i-qN+m0ZBVs3qQwa=YEaS z`q1-PYd?IsQN}S*wT*%TV}-JfYY(4I9THSmzeFiCstyO#F6M(PoytQPkzw5yuKQ=E z)=9{zdv50Fw`K1H$qU~Dkf1PykGX?^za#UIPQoo{X-Sq=+9TO`cGK*~jsOT%Vcw-V zr0gJ82=M(w)Y%?L^dWR81PIIV@!>2*JYJ*kC{2*@YCH9f2TB)KVr*jY|G*GqI!O;! z9v%W69YnwQ9a4S7y$`v|xgj&L2@3cmels+<#UK@N5N7`#Zc2x8+Q!C@-yfg5dOxc+ zO!lz_LMsPg4I42DzQeEiX zWf`fp%l};XbS+#*J*A#FK~yy^mWA_`SApuD&4r~a#C`;huOl7=$c+dG#1okx5BV;g zNZ<$}HG>`kz7R4s0aTC@WW6Pg({ddiIAqhE@(JWOdu~yRSaL#?HROTftHeMmp!vd* zO7BO>kYq24ai^8RrLL7bM=kr0V&k+8^%b3E@3vwQEqsWY{ZyV68%oJ|_E#}TIectZ!YTsNGBlw9o zA&kwFS5W~M0tf1h@$=dbHom;277lkh^wCm&8|}%Ja^~kMYU+1HP*u>qqcghO{KaXn z^MeLgAuq?=Zuubu(j*Io1-2OeiIHvoinh{kAY;C|6@>9Vnv>))s}LjWJx*?3^Q~U0 zLN8}7IR~C&v^l(?y~_|vNk>5pavjd5S1?BE=n`wDr7&kW* zTbROL;+Z@dS{jUvtGRE*$@|l)_j_~Yvq5@%;#}g2r_xAz7QD^e!n|Nt{R9`orGN71Ud>tKw=3FmxD zw>}OPsC+g`m@fUcgC@tYiXO3@UDO`kH`GTBZm+cdhzwsJn;=%m(@5{iYJ;f7b-Bkv z9=?q!^itm1CJ)}=bcVO*bZH5A{zl_yvHBTz6C__5#feb={u1V!%4wz_&+DvGz>BeFh^b^cz@tDf@fmg0cbn~d>}MIz~zL=u*2XDK3;hn>oe%AfjX zUTkM;g>edA%3NDp)nZnt3+NSvSyVSLbygH1uYC!WVu72`*QFCBFF;0C{MZ2XQ@1*!2MfbklbIB4=aer*Fe9C_Sr zdbhLO__A+oqD4dB;-=Dw=tWEHV^tC(FD807Hy6ARR^j zYVzq--nHbc)!4Aj`wP-a#_xACHncGH2^&i3!O`nC$x@^-k!|ltz?|R1(nDX8WE+LY50A|M5wMZ zS#0NnzvREFoRHM)E|}^LVW<16x2c3|u>T)TXBkyh7p-CGknZj-N$G9@X{5VBy1To( z^P@WiX^?J^7U`BwLFz8&X`q{O7HKzW$bBHUo3NAUp%6OEeoz5zxkO5uqX9?tNg>A)VuVOAJ}AG*W{+!e=Za zKwJUi+hCp>FdGU0X2y2;o?(!BZ^X+s4mk{(mVj)W!l-Y0rFqWh-{>Pi(`9UIJQA*Z zdqa^metpEzb~~KNe7`cq*X*=noR`OwHTILjZhsHl2*xX83ohr$@~&O3Jz*3<&<-z7-Me(OJF|MJ%Hg2&5X}x4DHuL8b2J|F*Rs{Dk$&R z$2{ZWRHs*_Sho%uCJ;PkIw+)qV(E5z70%oa9gRVGzK<6ROFFp{FLT53vvuwt?680L zj?F30B1evE;U4BJ=LtUECAl{ROjK8?EpoCtj94z(d&CaD$7S=sL)y;uc|;{DQhW{E z-N&UE$!c;Nt(1hRsHWRF?DJ*vcSL7Q>ly%@%*l3c1Mx+!seJjuQ7F`8uLnp-0!yVY zDpTjA{vlPN+z1|>H^+;~ARNmtB*ja2{p;TnK9^I@&VS7}D98tGOc@;64|Ao#Ou?1t z73CCL4KzM&X8aV3eCL?ZVKI24-B6F{A!va1Vsf%PYpN?l%YVSIP|LUO^-9@(BU?0t z>vkA~2Bqb`pD&ZNix&<2KL;xo`L1`Xyqs@>liXHe8lt4bUtPrces?5zXg5`d<{64Y z-r0$iG&7rsO|QLnQn4fesOL?`LQmWCUr5juJD=O}kcEL=Bt(3^KIV9zN8c407Ffv6D4gY;fNkbLYIrbs7cRnQz&= zK0SZmA)N9%yS##6$yr}|z7Hf`T)XcN9> z%_n8~lf_1MOh!9lnDpx5Q!=)9`}8{S1su@0$K@j4spoltOX|leAkoQ1r_EI9xJ$+2 zMONC(dkaozv&N@u)Yd!ExJJyk%UWLjhdHX<xd$JIRDh9&^Y#dkL|2$?CL+qFDBDpX<-Jzp*wf-DBg$g~-mWzqtj1Bn*@Zwp6E;^DaI-4h(s zio<)3Pz>oT`8!oL*`6<a1$P z)z}BJzT+TUkju{1a!8{2rydmkMF6(jx;hE4mKgxI1!^^?{R@y<^%2^LPhr`rgD|zK zOsz40Z?ODMZmExzPqLPr>M0lz*S=;%reCud_|LzZ{kx|^~$t4f#A9J&TA6Sikui^Y1(}b6bQduPkIZsppI5rg`wb(cY0C14}Y-*{vhP8ce$=QW%d}N%jxS%X`-<;lxIx$u;!MGrxlm; zjq7`5W;X2?l=Fol1SZ@HY5m-U-SBCO1#PKqw6V=+ldd_&;K`wZ@bsSt!6 zKq6z*Y4H&qjyt7iVuEH$_+~n5tfp1?UwOv9BIj0k?nWR)@FTL}v3Yb0?W1_y#bEMe zmUGSb09dwxpQ#@>z7DyhF=>vR+4q?A<+OosB1nWzMk3MEZr`PJI&W{e({<3y#cm}H zWTJPF!|>Q$cyxN!&r(S0MK3G&>gp}e#8|h!Ev*|a*P}~F$c0G$RGZ3?E0mj-u>Qlq zHfvd47tOw0@O={p_32Cq(Qa4kqvZ&sf$+(?VynLIW$2HSe|~U+UT(%OL0TvGZj6N7 zH6^lh(f~}>7j=JXvf10Gv1Nlv@aOqPj$q&?u7T(h8J>EO?l)^}0JNjUh~yj_{>d2& zBmg9yyNOa!4FDcc06Z6<##)1DcWatPH<-hH`6;T=*;rr{P-!fKp&}tME6Q%Nxg8Iw z6&9wabfzf9>)2bwHWKwwJYK4)NVz5-TFYH!$}h<7&VTvD29ua5^Z#c7zN;#V_3Ut5 z4(nu02f~*|Vj9mCEm=TSN|7D_GpK{O8`_E68n`0V-k+*pzc9@Uk?_Kb{T)yKgf2-pEup8ewBYfxQ zXD8e$Z1L#4XSy=vZsmxOQ9#e2B4IidqXi%(C;?z`OCL?n7gMg5yt+GeYIi%G0<{y- zGH$1R3{3p)t(2SWAt|JsD@Wi1wt}BC|IOTut@{MD_}-YMm#ti9Qc9C9`pj^ z2cy$?4`LME@&IW7Pz9(kB0>5N0IWD|7Gprs0=lQ*r>0=97>iW{m?&>VQv)!o@z%sB z1i3@_piR0PVqg;i@DxBT-rBYE^wD=aUm0GGOxA2NqFku;DjPS|G6h#D=(Rasd_awF0II)?^pelk3XagL!+ zj{f@gm7_QuwHO4n!1EITVavd@54qCKcLa4EBrrQMW)7ZG>h3C<)COF=uIwMQIZdh)ep8FifVyW%h z@9&Tma3N9&J$akYXTqHEkHAtl(v}#%id$N_C`ZS1`80pv;dx~2qtAT@>G@Bd;qUru z0;N|W1W6rrUSgV8TDPy4>X>S(W?|K)I>V#1ls3_iII zDi!6CkCrCcTg~mLxDKzr{ly6?5hi|j-*Brx6Pbd^q3`z{Pk*WVKnP2=%2kv*q9>`r zWn^kf83E>^|Y`%#=Wml{`Cn(B0NAjSnQ3ZI*wVh>(^z!L4EgdH$bjkWHqGJ z=iBWZkGHt#UghA;S*pBxXm~YaCK91g0C&BXBP4%M@QjpA&fgxH-GN81nEm&)3SL7a zjl<(Yr2Fwq2jH`NOBD#;1y@!g0)Dm@n4Wl#ci27#_Hl;`RdB8L8&XTI|97qeNu#E& z_Ory9f;Ns=IvqPNizkxnL!AV!SsCe^V%}EZ#)e{MRakp{{y^T^8;%U#%h#~C>X@6= z?FP?fuAp>%u#-C4!)gz)$}hJlu>7i5?{z4Vau{ApVt>+LWSd&9qO!cjR%EdE_=?qS z0B_xQhnRH>#7m6^B9uKk{h+l(;qHij%Pr~a!AnDCSh7i4&J{7coz7=E(^q87(o3kz z<1p(FEk~-(1R`J#U+n8-!@u|Y5tKha&jFaf!7(w;0dI^r#p%2*$2Nj@a`l!IhX|eR zN6aDhC-sD2SK1G<{KUgPJ`d$!yK?|$(nnKG>B4&te9H+Uy z+7{;K(EKo?)H57*Eg!bg?+?#oJn3zJ?(lFR6Vi)b0=CN;z1u2KAe0T;TVc{@y+H8qMwWu(8l#9#Ra<+A|GZQB^<@++p#@fm zt1b40lH;ZGi|QEg_h=z#Z((!5LkBQeY0Lu39O3-Pj=pK`)t+LjWSktKTp(@*;U34m zF>FxCfY>cKFjSUF3aLF#Nll#vJP9xs@pX0`g>)ZWjX*aGBZ>wVw>LWD+aeqjg9Kjn zw&sFEKa>nWe*i5yc85(7(Cd98Y=3v`SN=`NX3ivMpdV;W5YdRG&ddRTt~@M9)U^i_5R zeWdEybEXN9SOKtqg`gn-y3oBv>D08e#dJ|nIH<&YZ-9O<`Ut&gJmmSS z*>ZGYTq_MiN3Vb264L`D;DLq%@UlVR36I-IU|P`|f_P-2T^^h*jP$4*jy_~NFrLHK zWO183x2wY&2^;lE`}MgZM%%F)@1mtK`6m8@MI}IkA1C6?ixMWgc(4GZ`68fHs3RYz zz{XY=;J@{Jxn1fh`L8o7p`25j|L&-`jng73!GI7h5JZTz}625Q&gnuHQm}DZa2A%oOX`d)*x#OYma# zkHKJ?G5+MW*>}my<3y)E437w?`Y+_8LROL|TQ-6HJ7jn{_E9LfH!gec=A$0J)#42T z`v+5=q)TupqC3+5NkP1~LD@x5I*ICyu==ansvod-PTxHNxD#OQ@B-aThubLy8(Siv z=1Bg1Oi^|fLFWSRK65)E-toe(_W{H=_$6Zb%4vTEIH(oceK(C_pvP}Vs zq-YFuWpz?U4JK2O9`ul4KJvo6pN#?}{+(Ppt!FevBO_rFMpnE_&esU-T>|``kkbm8 zVmw&A>N<*UZYZbxR6mO?41NT~82yMqFZS4p<=#G#i8UG>1-{Oy%*s5ke_Ay1IWd*^ z;K`Z8Hdp0tkmqm22fn18yZan%%a-;6y^j=lH-OI_jW6Iq2AD*fe-;=6MCq^$w+Ale zv+o2z_u%JGV;rW8VIVCD8{hk}=fvjs zR!D?gKP!^4-8?NHG%>-ZRa7(S!RW7k)<^H8ezSzyr9J&`4d+^_asPh$W~5J+Z!thspXl1Ul>lupZyZc0f>>U$puB;ryb{#fd0 z1E(>EcecPI56CsVv)A{Hg!J_E0vEkdD5tz2wyZ=KvT<$!nusod=22T6Sn_GLd}7Fe zZ{#P{EQIDKiFcBsh_DZbx$fV=P{LMv&jYug<5E{=rx#^w6_b60Fx8-SSjNE73*ks% z0#wWd-SDqchlft`1AG2XOZzBWGAU!JX7pUoy?Rplm2F2zQC`?aQ~r?u#towi5F^Ni z!QsmGz!9hQvG1avLd(bgZ4|urD2nK~luBRxEISNkmrhY~oWiJ%wEJU@$c4Zebvf6u zGgNZhg`5P5_oj&Gp)x5zf(xCQz?lOYew-oDw38!W|3EkViFtxI9px+JxO zySSkI+vK-Kpc0=~ufJY`C5^=wfh#MS3ZBBxA6SAcezv>n0M(A{Y6}8r35Pl# zu;;Yx%^#WEkj{illlTSzFc*}9>UXC-MDQdi1r>0!S2I1ROo+xgu7D1AN}=Gub8Lj;4g>lJ4`i~uN{KV4lk{O;7-k!akl&qv+x zjQyziu|)cBt-wkVHi-Pk>3O57o<}?3%OlUTW>E0A+7|<=E4ao3YxO#Q7K+2YNsWMH z=>DP~6?EFs3YA9Cl>udr6sX@*RKFbGTw)^q5f13I0nM{n^;o$~Tznn}GJp;L5B!;C z+m$4)<3$x+?I7AsTJBdG*-@yGskT2c$ug|H-K5 zGQzGwS2_aw5kYE417ulcdVXcbAWt?>K^=_)#Le_g3EE14A4b@wlg8+P|U%j zFC24g!GFa^4elQS@cB)&004toAHRMAw4Aqt;Wr);s6l|}4)pe90M;GkSzXT8Q$gRh z!Tns{LZQpy5($$wcKcFVXSVK~RX;;0bH%xg-Sonem5k}WEhlvfOijKmd!=)ruPcST#mn*>4j)!Qw_K$5c ztC_N5TFLEv?KA6%@!zvzm*X^fv9h@4qnWI!HE?LyZ$q~QZzc(YbhMG*@>P4b!-5pd z#PFuE=!m{T1Set#^QDK+77uH0E>LB47qL0sSc2A3Y_(>~M9V3^< zxuvwa?)~$Z7ys+2j&pv7)XUE*tsNw*@H`HNq|Dl!7NGqY(l3f6PKkwBZ@)nTZW-C@ zeFc1eH%`!q0JcRI-SMtC1S(X5kxH&Agz$dg&YP>%;|D^?U^)r-`zO#Ji=H~=PgpLb z?1x1*zrDh4wwX)w>Pi2-t<(8$pRoDsS{N;fS4d>>FuVU9(NH{bcu~c70Xvjj9;v29 zW~(KkKuqa4l^pNnshU+_ASRbk7w6u5Mirtc{OYaEX)pV_{*0HAGSO;qUVrjQ@&K5U zEPyj21ZH-OpA-3xlvm_x2I3yl?zevW9IBCjK*F?QvNY*V3H1kd+Ytxw$VbTKciq{; zuBvd;+O&Ut=>pUE;x{KNx%ypR0Hoss$kUrCgKvusXmFOQmPtrQy6uk4g0&_}^$Qzd zD}iQbBQQ$Q5}2v>_8Fs7QBi?GNwdfc`5YNQ8vz;sR8Y5`{Q5SYSw@*S5|7CKIvC6( z52YSM23-`oi4_Vg9>zoS6*)qFL7my5M0{RRYmX?-Hxh`h$S)az)kezF@>L^QU6h-S z!T8Kncw9HgYwS0tCTfEciO8H>cT$JS{Y$W1Dg#LkgIKd_E0Lz70cewKoC?G@@EMRJ zLSip($j$M>VvF)>CrOC^6!e+{@)yhDi6fG>ktXg1%B~o2{S1~N)NfhpoJDe1i-#kPnFQq+=hjr60w>GLSPFrsiwI{1OMn? ziX-OzQ`01H5M{l`<=}NWp@WOl;$np~M#B3A^G{+H*1N&4&fPN?%}!owQOr%>K=7Em zdVi%Nnb+-!%vF7F9_Nb#BV&95<2z+*{ja&Jo;d3fy8-%yyDNrsfArroX(iHB^_)IC zVZF=J44C&)N1_^x(vDO?Q$~bf=f0YIcpCrP=5tAdhn6Uywv^(urAuxMfAYsNil`X% zQxVLI!YF_&47hMi4CzRyDRU9kRTdn=J63)XZp~kPReN;aH9e}7S}YmAInExad4gDX+DJV#&uC@i^;ymsw!DC~8zVoxP%7<JeVwx2 zjh&m%HO4R|E32@ha>rG>yPIgBc{Xu<)^0sjQUb7E3i|p&N!3m_yP4(U7sC@7KXe{) zc$^Y`S808(v>BP2Dy?sv&=!|WjjlLI2uvs}xECwvYiP27|Fh^7UX%<>2Kyz^y4^0R zSF7r8endZ(>!}K1zO!F2YU(glz&9qw!q_x4(qu?8C= zMgIHmhK4r2%$c4eJ!zHOfh#4^X}_~+JxCrv^yw>({xfKo__Zg8m6poYO|sym;bl!Y zGBpv!M~)1xDHVgI0H&%%pJKW1$CdOGj7}nHMj>q}nQ~)C@&p3d0TFaR_QoG_CS_>3 zC_@>S?8qdr1_Jh6>gZT#C8FT9)5U_TT$W4OV3y~{ol`TI;dB6I6T9tDQUdCT19k*bMK!0KG4&bwYf5q zZm*kY;m9foikt6y0+VfC-9?x;R+U9mDcVw zpOQW6zA}n}ej8p196VPBMy$w7{JREMXSi97x59 z4l!#lSE3rtW4RdU7hLl@wG~@C?i*%1e-`M_(M8c_k;li+QQ^}FVk#-e8M4d^=m?Tb zLocypzf~$_^Qf1f$7sSpB}$2WN<@Z>2oXbWfy@f2%2>zxCx4dtl+=%QA!vdpW`6lSZRv} z4Jo3jLcB>nt`XR4;*DDG^?<0a-wx*K4J#mwv7Wi#C{_MdtT_OAE zw~rd$4;}0$Qe4>{gUy(Jc}aVYjt&JaaEs%n+-q>!mm+_l&siOHhfYajQkS9OqO8Fb zCCfwij=-odoGR=c6gieC1{Y&F9*ps2;s-rdC9ddmRCcie)QB8`YvS>=>8*)TCM0Ym zri+p&vM@4=e@dM8)htdf4YQKGEQx3Y*1z$bcG&Rkbq9h^B1#9{7p6}S?kw#6Yh@N! zQq=g|PePVXMOD@0*F+MlVVJQn{9N?(>t1Q=mg1ZOVceLYXr(M$jz)xC755bp?dr3uJjLLBZK5poQFj& zF-!c{Bval3G41(ME+izacdBlSWKGKF634?KP+ZU+{R?S#)?m-N`= zIc4Jn|60ECG!q+N7gXC!X=5O~$NQvPkuHU0muff?y(a@Dt3jx|$R(%|qZv=n#nV%a z$2OcsRTV-hcJm8K&WJ6`j%?g%KG7nmJjkww*GN_J3R(oJPsuU5aCx-22h-kvd3&_o z?qiZl>-@9vJh~R5wErr`&Wt=7^|AeG#R;qb2@LJ8vMiDgf91%U;Y69;c$J-4VVaNK zWE6*KdRR564AFNi=&NmDDDbO3clBj;d1;pqzZRUBMB~Xfk0JRR`?tN^!i=FL0VnS- zT-c1tup*C|jhJzSXc-dey)SU4l(0ywBIrT0xGNEmPYik9ez495%uZ48!+gDeR?Ew< zP8!G~a5$tn;Gz4cJk-^4L!;AJjdv|gCB+wFq*SvP$`-flcuiPa=%YevrSU(9-4#F6 zqy>cFKT}m9M&UrgYmfy{lJG8Jg|MQ!wMXlbb6ucy0R%ndU3_6J5Jl%Af;7Jun zBq>CG%dW{l;KXQGQeS}3Y_H{pR0uQTIWG~+A8zG;kGDGf0%|gPBI{<>dtDZdt{V*J zGR3m)Qi4b3h!B|O!%c*6N|4h^%=61jNofK)vH~eutp1RHu%zitwT@2`h(`zP^quOT z=;$!ev1$!Ej_{sHTCpESyPb&D*@%(js>gZ3^U3+h2R8jDO7K3cDkU>z^!zn9Z@%8t zLN=Fjq#B{A7ArM|3!D9!Z5)woNo8Z7m+~Z?`ivTaC*ep(nu7J16~MoK78NZ_Myi5H zuidA}QXX9_NFB*Ycb@xI7lf`vH_{!+PqcLtD*rP+fA6toL;1|Q{*RfY!8?1UOW8)@}BXyEzN6GHcZtF>PuHT=^g2|%Mc8UZpYMu zPUtR9s;06OvE4o{FS>{l8&}}!;6u6bK;fz0)b~%msp*|ntvs$&*lKiL>SDh#=dgD7 z9PWGn{_f62Emu?9YcgB4VKQJ#=hlDDd4Ke9AFPg*zW-ARN(Ej-YFK*ZRC_9?ePoOB z5xhMrbpM3*p9H4)@O)}GUsPN>va-4D65Z|u_`6pmeS>eG)CCwa>2G>dwVUv6c{>0F?6|_EV5~#8J*%lzJEGwUx&A(%ZkF8 zRCSWPmLR}))mGDGKx|ZF7L!1FN6=1Q{3lDi6&D+Gp}yjL@mUi^6-rBkFj8?q+DAgm ziOE?nPE$mVn<$|KN?YU|v96JSwM&%YDQdRzjz-JBPm5gg{gB!%luL2F>sGyyMFC_X zIgcFjjKV7eW8&$i{Y5XC8YsmKQX)%CkFxROg51o>vT@$~ZcVYDR@n@*%qipj=&;1l zpbvhz=*99<<@{BaSoi@?4uvGQHce&BTT?tG8Q(hObw>kTf;T7e(?t%8VqNA7(m=qb zPfPAjLurw$hITN`Xn+WhZanA~T*6oa+zclj>2S=o z`BHZc0I0K|i`(LVO-wWE0x?I>g!4Emf-8nH(r!}e6rlC14XNepMqft54zJH{M$?A+ z`4F_Vp6l%2;sy>XA`}XKy4&GR1|pOqIt&`vMuKtt8yF^>bo0XocjY|;Uar8dw?ksclET(*1~G7#zQ%j>q7Zo8bs zsjrW3$QFD#brwTn8qDuMGtf#S9$dP|IY)a0+VmD_sdQ>qWHr&vaYZ2`u-mNm-@~@U z-4CuPMAYcUDeb$>v0=*T2>|BKFThQ@_WQM$GDo2!pgd!q6Z-ycNc}|o|7QWhp?*8R z7C)W641a$Ol=i%i{aapLUQE^#lF6~}_-9uu2x1&6!MiKK(-}88(GTHEZhCa)3e_#~ z$c>eA#>ZPNAwLUjUflRb`@f&PXpuqZ;Zo@3#el?o`94#(T_dEDF~c1G0!oOYPkVnd zcd~)fqN3)GGW4lHXT86mEUl}!tb`qK=WszfoNa?d+gH$LyG~6_kzm56 z6mJzUF8VJq-8(s6=sw}rhB>rOgbvRef)ycBW8vS=##In&NHSN*a$5S}KZuDc_+#S0 zBEfwP@p@^|LzaX!B|WX{$Gk<^T}8;?m;cgArb#JF$%(lnUv^B8&uqjp}x;kH1T!h({X* z_bwBej)RKH7zswBdeS|Vu>GgqA(b9AJ3go@JH0GoeM=Ojj56*#-B+SSUfpKz6YX}F zXcQ4wro_vb`pebC_Ei_Ve?Zt>a^bb!QU%Mjka6I>1y=|Zj%B15HX(&5oT(KAxkeqk z7kUyEuY8J>EkU&m4h>xrkp&Wga_F!7Ns-wd5yO;UsBfKE}OL< zwVu86PY=xT3mSx)-umkl;*5Kg~oA3`sW<%)*?`q(PwjGdWR2M>!|B zB3IrrA)$#IF+nh}dD)))Rlszijl!++4TCtMFT)dZAd44xB109tUMb#Lt!Yc^yK25N0zp5)~3m4(uL>!K(mAzV&!pDW52 zb04|HU5A>>89qylLrY@~dxj}r5TiD;*3e}LqOe(V9;$1B(K$HN$U`>K)SXR)=pJo0O(DL;&Q${~fKiyMWZlKe=GPG`Nq3AKZns1}n`q_)Cd)od)ZfE8 z$BQ#ceuSK%zfZ=Qv{>_>z5i}q!_a-G+Mhq-)Tr@|9slxvx#jqs_>j>5jKWT8T*gqbBig#wXBrnI_7^m@zC9F2O2+(^>1lGxYsA8O z`N>%JyzhUNX}Vc+gDq4Xv6n6u|19CNS|fcc;(F+O90FQK?#PqhKDw^@LEZ2W{?H0D zvy70<4|FM-?p((9qLvpQ5+{^iPhg9`Ok2A4#{{z)pefr)Vl;oM(_p151Q(NN0qitTn zAVrmsk}|MY{XPUnn0JY#$@0>+#pf2Gb=*FP!D(v*|6j}5Cs%#^Z;}huexA&f(y<3K zmvi4KF*Zne22?q~Ny&*v?HWUAb7LBAdhKTRX-84=_aH1w!`bR1pXVcs0`U>-{}xPY zw7z*T9}Ry{O45m<$D17;?p4c?;>dWhD5{``;EXG8w4P&Tn$sZ_+yUFu6L#4zbv4!AO4p?vM4%*NyA)bRBha6B ze&@(h7okA7VY;1Ck;CgvlFmI+a_kx7?ZuEvLWuDm?R|o5&>p-GlsETIxs7 z7sP2+V@SRkJQu4h^qMs+u{mnn9o;2$7d=KL^F->VxzR8iVlhFrGIP-mZ#C`h)FsIq*cnvM9oB)Q^}$e^^3(wz~nQD z5U4Qi2p1jVAk!g&lO$?REQ4+F`68+4!XTOeqIYwa&=IzyuA8VTGuxsiJO8-lP07Wm zY?ZIJr|}WBhOA`ZDUaEpn2FF6D2lL=qqQH}X$ozWclbd$s35`3TrAY>&_s2tT-UvE zM5-6>b&g!6sD=rxC9Y8fsn#CIBuSJ&9m@PGQKvp9`VLhlLjxrZyNJA+Q6o=-GhcG) z7SC6RLBwo96*_)6oEZ`W;MEH#=^+Ui(A7nTMN~{Ssid$&G?|qt+cQz-hFL|`ic(}G zorlhHryy68?Lje!p0+I1G3}x@_^C$emaHAUZ=QK>C?bf2+*bJ?)e1($PfldXZxes& zYtc2Z)c8LYW*;V*ONteJY#=`_M;~OEE6N;cbe$}vk&^5eiHrycp!4c|ry8E16p!5a zV+*7qi^UZ$04^CGlqrF9G8)~u?()KSHQAcRwvH~M-tepFOx}$2%#=L^GY?FR1a|Rt zY@1PGr&!ck@h))R8-?Xmp!L2Gc8zOuHd2jX1lb1O8SyW)N27MZ?e5^)0dN9GlOE$ zbbOd#8!1GiwROPYUJeHq29Z?O&J(N2^iW*NN+LBO(#p<9qLv)`mN|M11nwfVA?b}B z%CnD?tNO>b$}#-8a+jxdpY$$1w-*Rn$@G!6*6QsIypVc$zR0iZHYHUztJUfWC?4-C z$ehgN{rBIC%b(@cQpJ`+?|jqlB?$*q~y3S9r295$A8JpK(ZCTH+O@G(7lz(e= z|6M;=UvszESn;%QOR^Z+!S`;6jb-CSh$IUVF*PZQ{YoUmJ~~80U}93#hfZi)FZ*!_ zIyqQIOa>ArM1%qnVNat~JGY~X(f^EeL4A!mV`b%b%HzzNcX}>&AF0u_~1eAf6H%($yOjF;(H(tnE}+2rtLN)Dsw(U0`Nw+Efn89tUSJRJ+af>CFg z67e5OB-WWfOitlgJ$5|=L_ZjfB5(%T1yrZc(KsLWTG?{h?HFSV6d)Evd*t5QzItI! z#}JFJw$wcIlb#){;Og(H?Q7MhtQ+4iAADEQh&5mc7(?_EM8cvfAyTHg{FILO-3eBDL~s>5L-PJ1QHW# zvRea)+Q#YY_t#K8{1<46cwGp>*W^@;?bo$BgZ?lS_X2ZjT3;|+vh&Ae!x1^H2QKsJ z%)Tv3Z}<>`3$9;nNxpgWcY>GdJPqk9ntv}3It6aA1&r`}DluU{`dl*?5B2o66&c%U zEH-Y&wys>Bl8CL71q}yI>ksBweYjrxVo(f6^?MG-Mg5+gK(C6>k#~(?_J7ul)9!EAOtG+mF@KI;m*U0DBzn3NNbCjH@^CMNI z8qDUVWF!=aPHXpPY6Wed?%$)F3dnr5LSEzlyIH(oQ?I@<%XQ%;c0jEAUr-@focQ*i6MAXzusnf^y5+c4l1^BnOKJ18AQrp+nl z?2j!ewlENJp$}YJ<19xLLB)7|6bsjpie0y z0qeQj?zx*yUrLHxtZ(ksg+{LRR}Wp{iLAW+L`D`Gza#kI_mhDBT_~OG2ER^H* zZHs(+kv8(WtDsbg=7N%#(Txbt=Tph}ocsV5LQ%+Bc+Ct>1L6eEH9qs>aFe7XW3m`D zB%Mqe=NJ0Ja?9^fwTJDl;jRoo^y7#5`$fsrkH9|jB&77%i4`wqe1BMl&1863x5Mng zt=*$~a8WzcMt9CJt_I?<15QhO*Lv0rK>iP9(`-kPWzpQo49^vjw)zSkAI!hExQ2Ad9`nI+z8m5(9 zw%Gj)G7LqEI;*p`6l3;>ZgrrcFfz-gf0ns3EY+r=Bi)xXf7rdqi*2@iIcGAsByrxa zGd|1CufKX`_Gz(#^CJ(b{>N(F=mYKRR;r+|GqR<+eEeI&rjaVA#Tw;oZL$c)+4Jin zBZvXzkc)@0UZ-m1OiYwkH-^zl2@aN2l`IRALnG8;t$|T;WnIRaqS+(LgBkq1L;e)P zgh@CoN7X2ZDYeIPR#1g6-giWam9w5)H(yse1fw1XIb?Md1=t zX8ZM9O?Aty2hi!j29(Yo67*y&CW>E28?ky?0z$;5dAzbR7b^C3ySdc%^~W7GY74qB zdb?h3NXRWdsD(;E01(oaTU) zGIpe4uf^A;iC($@;cCOPQijYQxZ2Q41Hs6XF6Q4HsFJZ!U(Qn6*pI1KYk>-m;)vOf$ervCliA~6oKradVht|kh~ zi9aa%3};3nq{<6}@Wdp=f9}c91Xwa+)e~7pV-Q@X8y_TV6_r>IU6=OqpuuZi_Z+#R z<*#rN`AVwRoe|K?&_2;q zL`PN?mAaDZg743R#!(jYF2*V_02Q+{gG^sJW;3{`f(;WLEjF(#ib`4}EliH}DK3FZ zdnphLrx<^I<+4(gqV`6F<(khW1`{xkgJ*bw=TQ*TVGj~ZT2vQ8mm~_ zc}^Pvgl{2;S~5fCKkcrKSTkl|yq;c_rU8h4{v032CNoEuM-7xj<9e9% z3Fv3?uJJ{JBlBHgird_+n44c*;P9GIJrQ<*S5|TGhSa6+9=#|u8JT2;B}Q~&nXNUW zwLb2G?&lM2ok%SrY_?06iJctGoP%M?c>DMaa_uc8YI9@CqG_%Ovuw?x{G zcVd<4@%~pP-ve={sT9Lj7+HClLb7vql2-JGD-Rz)HOTIlzQe@$tp<`^cfZqlJv{i` zEaNXko&}P`Q!bEdYfUAnS$;y$?4kXQC?4y6{tp?{lhbH0WMR#P>auj1O+eV_Mro0+Z``d*kBD+O-$T^>=Y?v zv*8(2*s|;Zkb~wBDVnh7>IbHN6Jtpox=sSw+stJ*Pn~ZVf7v9;7~0%3hqC z%m-YEx>ejssR)872C|UYB~E-7Ns(ma;Yopbuum2pRKwb9iP2Ma?x1|fL^afDA0W=r zWXYFBW2Qp;2^kTVaz%k-oE*QhmfT)~k1t78#nc1|$`}m>Mv)GyMpBvWrzk;KJ>qN@ z4zajWFDWOHrZW7na;*SM>#gTPjF2_o=k(c_#W8|_+io;YiVLZJ>*p5F6;2FP*w86~ ze3tmtU);?5D2C>eG3?PYQe;<3*rON~Xp(H7i6;f58<~c4hnF8PTcUFfn zdJj!`94O`MtLO6iPAj!~NA-v347Rw00-VAu<+TDUBmufxUK}bhsTjO`qAdAIbO2@j zimhXmtNG5a(&mQJDL#p%#?mF}>XF#WO2@A3iEFdPz@rf<4g+E_QSk>JCNGmAmaD7+ zJP6l__cXFeSc=s1E;d~=*#a-BcNX1fzQ@zheJ}o-n@?-O)ytgUDl2u{oI-)5Oa-`| zrVsj$Z=E)KA%LM{435;N7kI4RVyfVd2Nb+_KpZ=1E}jI=N8s$cZgD`;83f;mJp{VH z!*+8mxPdgo)OKsSYJxwyPHu84<9eBWKE&<;b|4CF*Ea^Mn0Z?X(Zi2^PZ&#s_iFAu!lFxpUtyTpT`nSY2A$#FbcR?x?6+QPQ(z z-V~QrPY>!l0`VKbKD?>;z>Ke5?l@p1G}*230dPbHhXo37Y`v+rM9AKFSefje1dQqa zKNga-iEhc;-Hyg*`!hp=q)bn)_NqWIe}7~a>M*3@+uH6euN45LBgbzX`a53Rl2^pj zZhiQs>e~>rVBaP(`UZn*Kt-(3|(_~4~8Pr-Bsh!+l^&5b{QY7iKXWUyp`*67UqU`41 zkqZ=9pUsJOPY3Pm&*thb+NsHUx2c;lFSZ#ybP?6LmNIib#$|Ho(+amjcdSj-j5*OL zdWWi$`V1`)E~IQU&%QLUn34*1>&+i@g9rquH)H!Fbz4lsjK69?mvlmY} zGUP4%e6T@L-vNaj{XWh+mk7yzbV0e%^_NKOC_}{2C%@2|g!_v-P~%r)UXH5TetG(O znl2$@d{J@2_G=ePSp3^}1#RRaZwvJ!3Xp!hk1f>bLr-EQH3;*$_jq=a_X)9G7GsQs zY$cx4OYGTQ`I>BEI@w}8EMK}iG?zwgHla4_d=<-4v^#_50@Q{M_y4vv*u^KP%L2Oy zo0DG4@TrAWA=|KlRov@PI?M@K6T<7e#VV9jhXU|&R)`wCT?h2<6Hgi+hyjiJ!0;8ju5!Zfj+P2ONL+E`Rkab0JKf*b7 z)QB(qEwf$ZMvRkH*wRaEc~70Y1p}lqIg2WJi`MbJf)vsO@omk8w|`qFCnj7M9i3Z5 z)FY17Ln*wAd9y!JeA@Ap@7JpLiw=n+FzDoslB*Tf-pcnK2u z{Rg3VaV3}i`EvkpaB#HrKk75ZtUqS_n>jj)u_VN4&VR;lpB*B3N9%}et`V)apW1u~ z8-0)#<%XQ5+lO+u1y#mGRx1wK1FsIrZ?3cJCW+b+d|87H7+Lw{_D}s5nqNEwPvoCe zw}(^+r}XWqGE9U=Hb7zQvVox|qNuLE`S0pr3(l{tL;1{Vp}~6Ii65LGeXjOffHpR8 z-V%I;di(EFZ~MP*0q?4QNktKjtkRVoNKyut5_NT*-7Qzm|B^X5o|KxGIPhp=qT4c# z;*ca}jmm}c)cfQ8V-$=; zKPTRv7F1iJkCH_3wH5z^p8{PM*b-L@Zh|-pt^^g5y7go7$uE{WfUw$8GWp%7NXS2U?dx*< zaaH`&?Rix2+N6SEz30%!`Cqv{Vl?vc0oey$RG((-*u({DS1qnR2m}MR1>@D}LaSgS zwHmnqYj&H-VmZW-y5Nh9;37a$o@`Hsfj0th8h|ii1z%mC4@hi+u`<{GVvFs{QUoE9 zi9%YpGv=Sq6BXyqXEdyh#OUGMs}d1mQGeI|3Vv`uMLJ&fi8%P{Tvq&x+dP;~kLTF8 zc04tlg4#8JHK<5^J9QKRXk_b0r5(PL2^+jjY&Zn^7D&WKjI(M-|Q+Y8*= z*i|t77QI<&j3XCI-(L;7C;WBJmrUq{?C*harz2V|_?Y|^0NQuOWc+*@cr)#;D(OP<>0m;C;@GEnqvPet@= zHIc-{kj8n7>2+M+h@Kl8-94hWRWGcrGf5r~GE2T>m6!aeRcy3NU%TDdJ2d8Huo$OF!6= zcAS#y-}c>W7Y=-E!lYKre7{dmJvHT9^hpU*4P}%~zan9uV8w-c-~8d1%FyJW_|>n) zUVoiU=RO+Z3h3~~%|?+5Ce?})v?s3BO0wo?aIz|-SBhC|Heh3qp+%gp6A(CSjvT#{ zM%3hV?atcN#E(Fx*Na&2VfR{mDi%YUcZ!VbN*?1j(fK^6ze7VU&5`=)X@(BNpQ~pm z4B?7{?&sqLW48LMPg50M5dGg?08##X@2IsiGsfXztd1)wuJpO-+-^-s&K97m|1^cN z8A`41G3$AvkuPe``(J!J2Rc&unxW@X@yp0^R3vXNpOP)%?0PUWytf)~%m<_kI6pj_ zn&VGQ;Mo_%PJ9wpWJ2aoQNK0p`5|Z6tg0=PBBX{rBURtIvZOe_8#yXDBbX*(W#v1+ zvdjb#Al)1M0R!tgxs!qe_GGXh8h^HfB!lJF^0$({E5vK@n5-YXM30` zg7?R5?K9WW@wmsoYgBbxD~~GCw&!(oRMEmpz-CFw$xt&1!hv{&kc7l&p&4qA|6iXv z0|!SUtOYDAEPpQIw4h5kJa5v4VTf>iL4b zLj<-TJP%pYh+fWmbE{huV9EL}b-$9G%`&F&YH1Q{Rgy|7w+D8$D|o~r?8|Lz%HXgUJ$`T@MsLnM(UVglYI-M& z_o=X^82$nW#utj=PmafUc38CGgwAiCktv%VR(!8rZt7}91Ug{LhkVa__)R9U%Ey>7 zEM8P&yfgw`!sy|5-05{b_gX5t-R0Hp^$uD@Xc3N`Cp0l;H<9A$dRE=tne0`VZ?o2+ z7p5Gu*_rGYL!*ur#d5&K_cOj@_kBc-iii3q*)==*`Oi%B&d_DwwBJKD%$=Syg}*D8 zCJka=axy42 zU?f;37ptJ(>Mj%?j~%(!LR+-!5cf)&x7YGI-7T=s#@J#jrCe@?-ufBjNd1GEMUKq> z-WREEVN8n%Mbvfvn?=&6S$<1{6p!g^n+4}w{&PAch4ZMMJ5v#`+yGd_b5TFLhcl-5 zS}vi>7i-hj(ugH<;EtxAUKqX4plI5c4U+OT`#(S2X8^_FD}J$I>EO7>%O7s<>N9~+ zOh-M8?}jNSH&rs0X?doChhpNl!+>bvE1!TMg0fKRx(FGL+RF*isOHo zB#A@AJNxPv>e%+`=J5p{L&2drq_{*pp$_-`cf#Y<&$xE{636k-FkZ)$eY2~#8tn>V zApgqu2;U^ z!`znDlAI>25{NmiME_}oRYfe)&E}l=?3n!Q>of$HRfVi?EtoG!N;1VLDvLPFK960Z z%O&H8MD02%l&=jiCDv?KD0Xhe@r>ArdePh`I}n;#8LLv3+#j(@t>zOY&2g1x67 z9odj#e5?&`aZ5NZt)q>g9m+=dtGnt>U)luQ%+%$HqhAPrudZ#Jooi^|ex0kKb6