From d6d0893942104164a8e24de29c1248097636b23e Mon Sep 17 00:00:00 2001 From: Lovina Saldanha Date: Wed, 6 Oct 2021 20:39:59 +0530 Subject: [PATCH 01/33] Create config-lock.md new topic created per 5475844 --- windows/client-management/mdm/config-lock.md | 95 ++++++++++++++++++++ 1 file changed, 95 insertions(+) create mode 100644 windows/client-management/mdm/config-lock.md diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md new file mode 100644 index 0000000000..bd05413472 --- /dev/null +++ b/windows/client-management/mdm/config-lock.md @@ -0,0 +1,95 @@ +--- +title: Mobile device management MDM for device updates +description: Windows 10 provides several APIs to help mobile device management (MDM) solutions manage updates. +Learn how to use these APIs to implement update management. +ms.assetid: C27BAEE7-2890-4FB7-9549-A6EACC790777 +ms.reviewer: +manager: dansimp +keywords: mdm,management,administrator +ms.author: dansimp +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/15/2017 +--- + +# Secured-core Configuration Lock + +Config Lock In an enterprise organization, IT administrators enforce policies on their corporate devices to keep the devices in a compliant state and protect the OS by preventing users from changing configurations and creating config drift. Config drift occurs when users with local admin rights change settings and put the device out of sync with security policies. Devices in a non-compliant state can be vulnerable until the next sync and configuration reset with the MDM, Windows 11 with Config Lock enables IT administrators to prevent config drift and keep the OS configuration in the desired state. With config lock, the OS monitors the registry keys that configure each feature and when it detects a drift, reverts to the IT-desired state in seconds. + +Secured-core Configuration Lock (Config Lock) is a new Secured-core PC (SCPC) feature releasing with the Windows October 2021 Release which prevents configuration drift from Secured-Core PC features (shown below) caused by unintentional misconfiguration. In short, it ensures a device intended to be a Secured-core PC remains a Secured-core PC. + +In sum, Config Lock: +• Enables IT to “lock” a fixed set of configurations on Secured-Core PCs under MDM management +• Detects drift and quickly remediates +• Focuses on security features +• DOES NOT prevent malicious attacks + +After a Secured-core PC reaches the desktop, Config lock will prevent configuration drift as follows: +• Detect whether the device is a Secured-Core PC +• If so, prevent the following Secured-Core PC features from being disabled without IT Admin permission: + • Memory Access Protection (kDMA) + • Memory Integrity (HVCI) + • System Guard + • DRTM + • SMM + + + +IT Admin scenario: +1. IT Admin use MDM to enable Config Lock +2. IT Admin use MDM service to set policies +3. Policies are targeted to user/device +4. Policies come down to device and get set +5. Configurations are locked +6. A local admin user attempts to override the policy +7. System quickly remediates policy to the desired SCPC state + +Helpdesk scenario: +1. Helpdesk support engineer investigates the device +2. Helpdesk support engineer contacts the IT Admin to unlocks the device +3. IT Admin unlocks the device in order to make configuration changes +4. Device returns to locked state after a defined time (default 30 minutes) + +## System Requirements +Config Lock will be available for all Windows Professional and Enterprise Editions. + +## Enabling +Config Lock is not enabled by default (or turned on by the OS during boot). Rather, an IT Admin must intentionally turn it on. +Config Lock is controlled by the presence of the Secured-core PC Device Identifier (the “BuiltAsSecuredCorePC” UEFI variable) inserted on the device by the OEM during initial device manufacturing. Config Lock can be enabled If the ByteArray value of this identifier is set to “1” and IT admin pushes the MDM policy to turn Config Lock on. If it is “0” or the variable is not present at all, Config Lock cannot be enabled. +NOTE: BuiltAsSecuredCorePC actually accepts ByteArray values of 0-9, and any value from 1-9 will indicate Secured-core PC to the Config Lock feature. While we recommend “1” for consistency, OEMs may optionally use any other value up to 9 for internal versioning reasons, or other purposes. (Technically, any value from 1-255 should trigger Config Lock, since BuiltAsSecuredCorePC is a byte.) +The UEFI variable can be set however an OEM likes, but one option is to use the Set-UEFIVariable command from [PowerShell Gallery | UEFIv2 2.3](https://www.powershellgallery.com/packages/UEFIv2/2.3), per the following syntax: +powershell.exe -ExecutionPolicy Bypass {Import-Module .\UEFIv2.psd1 ; Set-UEFIVariable -VariableName BuiltAsSecuredCorePC -Namespace '{77fa9abd-0359-4d32-bd60-28f4e78f784b}' -ByteArray @(01) } +Below are the steps to turn on Config Lock using Microsoft Endpoint Manager (MEM) +1. Ensure the device to turn on Config Lock is enrolled in MEM +2. From the MEM portal main page, select Devices > Configuration Profiles > Create a profile +3. Select the following and press Create: +• Platform: Windows 10 and later +• Profile type: Templates +• Template name: Custom + +4. Name your Profile +5. When you reach the Configuration Settings step, select “Add” and add the following information +• OMA-URI: ./Vendor/MSFT/DMClient/Provider/MS%20DM%20Server/ConfigLock/Lock +• Data type: Integer +• Value: 1 +To turn off Config Lock. Change value to 0. + +6. Select the Devices to turn on Config Lock. If you are using a test tenant, you can select “+ Add all devices” +7. You will not need to set any applicability rules for test purposes +8. Review the Configuration and select “Create” if everything is correct +9. After the Device Syncs with the MEM server, you will be able to confirm if the Config Lock was successfully enabled. + + + +## DISABLING +Config Lock is designed to ensure a Secured-core PC is not unintentionally misconfigured. IT Admins retain the ability to change (enabled/disable) SCPC features via Group Policies and/or mobile device management (MDM) tools, such as MEM. + +## FAQ +QUESTION ANSWER +Can an IT Admin disable Config Lock Yes. I IT Admin can use MDM to turn off Config Lock. +Does the Secured-core PC Device Identifier UEFI variable (BuiltAsSecuredCorePC) value matter after it’s been read by the OA3 tool in the OEM factory? Yes. Config Lock will always read this UEFI variable to know whether it pertains to a device or not, so changing the variable changes Config Lock even after the device has left the OEM factory. +Could an end-user run the BuiltAsSecuredCorePC PS command to disable Config Lock? The PS script is accessible to anymore, but the BuiltAsSecuredCorePC becomes read-only after boot, so the command will fail when run from the OS. + + From b95df14f27d9a1840986144743282773ffb40fe3 Mon Sep 17 00:00:00 2001 From: Lovina Saldanha Date: Thu, 7 Oct 2021 11:26:00 +0530 Subject: [PATCH 02/33] Update config-lock.md updated per 5475844 --- windows/client-management/mdm/config-lock.md | 67 +++++++++++--------- 1 file changed, 38 insertions(+), 29 deletions(-) diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md index bd05413472..74aff00b7c 100644 --- a/windows/client-management/mdm/config-lock.md +++ b/windows/client-management/mdm/config-lock.md @@ -56,40 +56,49 @@ Helpdesk scenario: Config Lock will be available for all Windows Professional and Enterprise Editions. ## Enabling -Config Lock is not enabled by default (or turned on by the OS during boot). Rather, an IT Admin must intentionally turn it on. -Config Lock is controlled by the presence of the Secured-core PC Device Identifier (the “BuiltAsSecuredCorePC” UEFI variable) inserted on the device by the OEM during initial device manufacturing. Config Lock can be enabled If the ByteArray value of this identifier is set to “1” and IT admin pushes the MDM policy to turn Config Lock on. If it is “0” or the variable is not present at all, Config Lock cannot be enabled. -NOTE: BuiltAsSecuredCorePC actually accepts ByteArray values of 0-9, and any value from 1-9 will indicate Secured-core PC to the Config Lock feature. While we recommend “1” for consistency, OEMs may optionally use any other value up to 9 for internal versioning reasons, or other purposes. (Technically, any value from 1-255 should trigger Config Lock, since BuiltAsSecuredCorePC is a byte.) -The UEFI variable can be set however an OEM likes, but one option is to use the Set-UEFIVariable command from [PowerShell Gallery | UEFIv2 2.3](https://www.powershellgallery.com/packages/UEFIv2/2.3), per the following syntax: -powershell.exe -ExecutionPolicy Bypass {Import-Module .\UEFIv2.psd1 ; Set-UEFIVariable -VariableName BuiltAsSecuredCorePC -Namespace '{77fa9abd-0359-4d32-bd60-28f4e78f784b}' -ByteArray @(01) } -Below are the steps to turn on Config Lock using Microsoft Endpoint Manager (MEM) -1. Ensure the device to turn on Config Lock is enrolled in MEM -2. From the MEM portal main page, select Devices > Configuration Profiles > Create a profile -3. Select the following and press Create: -• Platform: Windows 10 and later -• Profile type: Templates -• Template name: Custom +Config Lock is not enabled by default (or turned on by the OS during boot). Rather, an IT Admin must intentionally turn it ON. + +Config Lock is controlled by the presence of the Secured-core PC Device Identifier (the “BuiltAsSecuredCorePC” UEFI variable) inserted on the device by the OEM during initial device manufacturing. Config Lock can be enabled if the ByteArray value of this identifier is set to “1” and IT admin pushes the MDM policy to turn Config Lock ON. If it is “0” or the variable is not present at all, Config Lock cannot be enabled. -4. Name your Profile -5. When you reach the Configuration Settings step, select “Add” and add the following information -• OMA-URI: ./Vendor/MSFT/DMClient/Provider/MS%20DM%20Server/ConfigLock/Lock -• Data type: Integer -• Value: 1 -To turn off Config Lock. Change value to 0. - -6. Select the Devices to turn on Config Lock. If you are using a test tenant, you can select “+ Add all devices” -7. You will not need to set any applicability rules for test purposes -8. Review the Configuration and select “Create” if everything is correct -9. After the Device Syncs with the MEM server, you will be able to confirm if the Config Lock was successfully enabled. - +> [!NOTE] +> BuiltAsSecuredCorePC actually accepts ByteArray values of 0-9, and any value from 1-9 will indicate Secured-core PC to the Config Lock feature. While we recommend “1” for consistency, OEMs may optionally use any other value up to 9 for internal versioning reasons, or other purposes. (Technically, any value from 1-255 should trigger Config Lock, since BuiltAsSecuredCorePC is a byte.) + +The UEFI variable can be set however an OEM likes, but one option is to use the Set-UEFIVariable command from [PowerShell Gallery | UEFIv2 2.3](https://www.powershellgallery.com/packages/UEFIv2/2.3), per the following syntax: + +```powershell +powershell.exe -ExecutionPolicy Bypass {Import-Module .\UEFIv2.psd1 ; Set-UEFIVariable -VariableName BuiltAsSecuredCorePC -Namespace '{77fa9abd-0359-4d32-bd60-28f4e78f784b}' -ByteArray @(01) }. common ..] +``` + +The steps to turn on Config Lock using Microsoft Endpoint Manager (MEM) are as follows: + +1. Ensure that the device to turn on Config Lock is enrolled in MEM. +1. From the MEM portal main page, select **Devices** > **Configuration Profiles** > Create a profile +1. Select the following and press Create: + - Platform: Windows 10 and later + - Profile type: Templates + - Template name: Custom +1. Name your Profile. +1. When you reach the Configuration Settings step, select “Add” and add the following information + - OMA-URI: ./Vendor/MSFT/DMClient/Provider/MS%20DM%20Server/ConfigLock/Lock + - Data type: Integer + - Value: 1 + To turn off Config Lock. Change value to 0. +1. Select the Devices to turn on Config Lock. If you are using a test tenant, you can select “+ Add all devices”. +1. You will not need to set any applicability rules for test purposes. +1. Review the Configuration and select “Create” if everything is correct. +1. After the Device Syncs with the MEM server, you will be able to confirm if the Config Lock was successfully enabled. ## DISABLING -Config Lock is designed to ensure a Secured-core PC is not unintentionally misconfigured. IT Admins retain the ability to change (enabled/disable) SCPC features via Group Policies and/or mobile device management (MDM) tools, such as MEM. +Config Lock is designed to ensure that a Secured-core PC is not unintentionally misconfigured. IT Admins retain the ability to change (enabled/disable) SCPC features via Group Policies and/or mobile device management (MDM) tools, such as MEM. ## FAQ -QUESTION ANSWER -Can an IT Admin disable Config Lock Yes. I IT Admin can use MDM to turn off Config Lock. -Does the Secured-core PC Device Identifier UEFI variable (BuiltAsSecuredCorePC) value matter after it’s been read by the OA3 tool in the OEM factory? Yes. Config Lock will always read this UEFI variable to know whether it pertains to a device or not, so changing the variable changes Config Lock even after the device has left the OEM factory. -Could an end-user run the BuiltAsSecuredCorePC PS command to disable Config Lock? The PS script is accessible to anymore, but the BuiltAsSecuredCorePC becomes read-only after boot, so the command will fail when run from the OS. +**#1. Can an IT Admin disable Config Lock ?**
+ Yes. IT Admin can use MDM to turn off Config Lock. +**#2. Does the Secured-core PC Device Identifier UEFI variable (BuiltAsSecuredCorePC) value matter after it’s been read by the OA3 tool in the OEM factory?**
+ Yes. Config Lock will always read this UEFI variable to know whether it pertains to a device or not. So, changing the variable changes the Config Lock even after the device has left the OEM factory. + +**#3. Could an end-user run the BuiltAsSecuredCorePC PS command to disable Config Lock?**
+ The PS script is accessible, but the BuiltAsSecuredCorePC becomes read-only after boot, so the command will fail when run from the OS. From 0443ae280cb36e375a8e48c4e58f981cc58a2fb3 Mon Sep 17 00:00:00 2001 From: Lovina Saldanha <69782111+Lovina-Saldanha@users.noreply.github.com> Date: Thu, 7 Oct 2021 11:31:14 +0530 Subject: [PATCH 03/33] updated-5475844 Added new images per 5475844 --- .../mdm/images/configlock-mem-createprofile.png | Bin 0 -> 92936 bytes .../mdm/images/configlock-mem-dev.png | Bin 0 -> 54105 bytes .../mdm/images/configlock-mem-devstatus.png | Bin 0 -> 48408 bytes .../mdm/images/configlock-mem-editrow.png | Bin 0 -> 43533 bytes .../images/configlock-mem-firmwareprotect.png | Bin 0 -> 14066 bytes .../mdm/images/flow_configlock.png | Bin 0 -> 27467 bytes 6 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/client-management/mdm/images/configlock-mem-createprofile.png create mode 100644 windows/client-management/mdm/images/configlock-mem-dev.png create mode 100644 windows/client-management/mdm/images/configlock-mem-devstatus.png create mode 100644 windows/client-management/mdm/images/configlock-mem-editrow.png create mode 100644 windows/client-management/mdm/images/configlock-mem-firmwareprotect.png create mode 100644 windows/client-management/mdm/images/flow_configlock.png diff --git a/windows/client-management/mdm/images/configlock-mem-createprofile.png b/windows/client-management/mdm/images/configlock-mem-createprofile.png new file mode 100644 index 0000000000000000000000000000000000000000..f43f6b7ddbf09ccec5dfb2419cc6859794752453 GIT binary patch literal 92936 zcmYhi1ymbf&^}xoinUN2N{hC*Q{16A#oaZyySKO$D8;2X#a%)O6f5ot?ry;y@=t&7 z`=0N+=j80!Wbf|1GdnZSJTr+_Q<1}cN&fQ1ix;@^pQY7byg&|l@d9ZL6B+SMdxK&F z;(+9?E+_e-dW>=(ae`_ip)B#@MO`BHqZu0F9Lwdip8Jaz#Pt6@Nb>4*r!QW>i{+&y zG<}SZo-kY}c7b2MnO&Zq<|f72$p{`-8mDfq zG{HvuZ(LDelXJZJH)fb$@tA)2H_Fm}dA`jO(Q!5g0;U(V*4RHg>%r=3$7sXQasFqL zIWh!0z&mFEy4ZZYRA&!80U<65Cs4yHVXK6_`M=xr*DZY6w*Z=N*84+l7kMYx4 z@90D!6eXLF@@#qkFpJ+&_Z5Z|N<`Sdq5oBwujb#Tildupy+R?ceQ z&ciC&e_Ea>X{zvo-Cf^~n%W#u_&mzGD5%)kGj?J@=jS5)IGU@N>G&T0&W057hl%HG z@=JNap1m4&e`Byd)+3=ruC_Wkn!hapRV_RW;J&rjt}y_ePZXzLH$(m|M&4xOGJ2TR z1OOeE$z9@PRWS_Z0N(dO*!V*vN^Ut4FG4T-XNSGvKEFE3sa7?;>>eOgCeAB$le}pI z_q@z_D^U)P_J=1&d;14b7edEKM+3`8;lN>GzG|Z;&qGMq!NQD2Bww|k?)r26+sf#H z_SA}m+=P9n3g8*9OM@JQva#8$XC=o3wzP(&FrlZ-y6kps?P}0aN$VF?y9Y$ok~-f8E`9D)r^~YUtFrim8r%<|6yjLv2f2;; zCCvZK>&kyp5dT#vmGC}ZFun;Uqy1kr^*O#kugI{vhZDDJtumqEZ ztu}OCavR!l)2??f&J7m_G=(VfB*$`^OaeOnW=krKk^VLl`ve9u<%8M|ruYp+v|03k z=Hz7FxaNKi8m`eK;M{8irJ(ejA2X>o#}0kIE(zy#oea#dz9=02kc1rd5sue>%Cr9T)MB4QTrIzb{A%bDMGv0eE6a`?hMkeyn;;fUG8 zHGe);Q6%)H#sno(A9Oh!pVd+qcg+c|um|5-#=8d!Bi>3NppT)Jp`u&;rvTJ)Khugi z1gVA3ygCTvG#gVhajs>nkw1?jR^)!S^fep^sWikBeJ&}^bHo~x?keTwgi#r`xDA#H z;bELgKxnWQo2>fI>DN3^jo@0$U4oS+pqb@2x3%^nd^JYqRUhu-_b(*;;XR!yD zzVLC(W|U0bcI&(3W8jSixxU6p&}Ll#RvAp6#f}$%r%UyYb-M+8CsRCMsdR*he zYL&8EXfkv@YZBxp#HHAO0)ARfW7es3Yuc=C^J==-42g#s8~k&i{EF2UYuYxwXn4yA z$5<%WH_J>sW0*ghTLE5aJ{}kr9dQ2EigO#|tfUpljTt~q%JG@x=WGs$B4OpbC+*&C z)r1rYsKsf%emh9+vVrWh-7{y)H)rJ+sk3nXGs-w^C%14zPsq&n()_dMi|XQ?F6g1x z5qOGEyx@E3ndh&TngM(~Jc85XkD(8$%L$a3=?p0)4|VgA{8e-Am)f*uEUX4dAYaB?S?d6x2|AL^c?hl+%zX2*%{Q*yEbpP@ba9!UPPjtxCvItu~W=%pCy7j zE>3hzSg;1!U@#iIR|6%b51TdAx=-8pYmNHk89bs>v{Qi0ag$DO_Sgxzql34FN~$`2 zMyt1d$rk(t_l%{brGw$D-^84Z+)r&?&}tM7UMFh|jGIT%)Y^9Q ztV8xi?6s?x8jmg*`Jr)z?)yOX;rRSKmdF|D7PD?w?7pEw0Saq(#rdAlwT zQO6AXEh&3KvzI$}vMMH@Xf05}X?r6orLwduSA7fWE#5f9K0ha6nJ=F`QFIC%Pji0~ zEuo0AcpM z%YLFY7PDjP#BBpUxSFP1k#fpMl(}gPucbKTJaZq1O0m0@N$2a8J-X{A@2jLiIzyGY zB|a&`Eg^98WKS9fOE?E)c4 zc}f6&GCD_GqHTIT9sFtq$5O${9&{LoMNX3speUs6t#CM@N6mWX`(dE4_pHJianqL z!Afll9qSozYWuIJl#q*wT{QFxdR`31ZHI2rPaUfW8!rx}jnMClgMi5Jh2#wNIan=|1)I@d zr@a<3I;(CQ=cVBkn%@iQwL{wNxziK`1U4R@?wKFG9M6}|KhNO(i*5JV$1jb+KY3(c z;^G;e@5^-sk}361O0BZr9TlE_e@9?%@$)Fk?m?0QSy@ zz2S2$RTaSM*WN-OP6mcM*-&IfZngKujQqPgs%3L$L;T4)Cg)lYuIJ@xN<5QS)QDFF znFqF)@2^dxB|o`yfA~=~ZQj8jc-w+6dbdadJ-N2CoCfN!3wTua7m?)7)txT~2fU5n zeL2AFe79A5r+%+iF3bTMQ1dYNnQKj-;ml5bdLLg82sv9urz|$I_|< zJkQq88u0t%qi4r)A8tP#D_1r3LBS?DOR`^56q^ICYi`bgGnbIolOSH8*?1;gzup`} z`4>PmScKF6vy9Wj2`Kpa^6O1@@)uFfKk6f>*|&Sk@W*#(avE{OXns~7iyJx(obc5f zoA&uv9%@)wQ8G_5)2V=N@v@$e{02HK2JN2VrPCo7zA@`XGp2%x;e!K{<-J>{Oy8nT z!1mDX)9miq-Q``Nd@BZbr3$+0cxf^V#ims{$K!BSq8q^sc+9-sp%bFqN z4fWQy`m<|n1Y57OJ8l;e1p)Ri$8ecDg_6r#_SM;_bU{J>S2#3BO+W|bO>Xb!|e^Lqm9 zO1HtGZQy)+{+4W8b8saUcAMtGyrXYUz7Q9~S(_~qiTsU0ak{PIEF;{{8h*!XLU}zd z%Tsx|q1h~(N^!b8RBS-bK=*hO=g(h1TQ6YRC1vSoRSk^{US3pD^M>>XJ{TqS{T>zY zbOBvJOwy2Ic{QHX_=>J#ScnJ2gZ5GtGnhnq`xz4)d2fE)%UWJiX!7KZw!Gz=rFE?7 z=8I?E3RgywNMgz9VA|0g{cbpy0rs9BfL`b;ll$44vQSKVTdfFO_H=JX;yDQVRA$C1 zX;Pi(*5Qzz-dp7bQX86j*#1t2m1s>ix_`|w{zyk*#M z@0(aUP~vIN{^n8$=jb$xFZgUH9opPGl)TuRH$QclAil8g`7|dy1*h;=O0H z9=(P|6Bu|;<^-z`cf(8EqGUboD`Uf$#$dU#2y~1FFFkirI<5u zglY%eXJ7Ils~oz0s_YP8a*xO)a%Coy;~ddOM!~Dz&W>6p zuTmJoqj)4TsU05IH$LL5ikFM6bFIZQgO@xxzZUbk?|yd37#tx3ZTP<6ephR^t@N_z z$YsQaaYZQ0nd|cte~m!4g3F#wf}=^h5K*blI>`AXM_o{`;0Bd=(=oX-g<`dh(!`2? z0ws~fs0k3idp?^M@RCR{GQH1S#cQ>FXH{8?CO|NnOKK#pqn;hTj+6`Eakb+rcgD7+ z)8}-e$+oHIJwp>}Zks@tx~)J%%Jc;lJqi15;caw)llgEZD)v`PpJ)@Hx<)@&tyOS_sy1l38|fP^?OeUPg20>&1;GB(nN5c+My&zU;}0kC8W?y- zPiG6o(~JDRPP(9gMW}!EYTNN{;O@q+oZR8GV0e!n*ng$7rRK5Lee+-b?c zY`H@0NEd9~cOWH}+wOY3SKU-040RR=y8eB$d?*$KdR@sjQT-&g((bwpeW+d)so|Ep zrWSVFxX*xruMIol6Lnc62@WRU$3>}9aSd;_+)l5nqnliy#>;`(xb-qc9oSOm`4iM$ zM2B^;-t%VEU@y~9@O-r0Y8XK*tnX}dKky$3dtXo0!MuH|7km!3in--Fjdt61<}!v? zjG>*Y4R$>X2o9-w;eON`TAeF;dUft7_IN;^58nE?Pd=c5Q1U^`+bG>RWWMp5tXm`Juny;`?JwdoMN0_%aVn^P`kF(4q zY?Mna&JUp!I%CJHYjvAlNm*&C$4jl&i=jPGcB(rsXv75xd)`uu8602E$@o*deb2eb z0~qYPefjKY&*vA$?r|lEKTcT69u~jv{xoupTj3q#Ps)N8;GGuq=mp&YL2HbK8$F+X z#tYRLwgm)0cRUYUazP%WyO2I-VQrX*OYh<#Tbb|KM8Y!A+XU?Q9GPR!{|EaYEd~}t z@}6sRhY{uN4YflccsHZt%B^F>r7+|h$3M$piV8v#<3*22W`ddE&fO5BbHh5z<4i3B zKA(`UyNDw+T>OA}e71tW#-Psnj=-ZAXI$&;FjyaS#GI(b%U`(ykGW=ofq|I*B zZ6XSIexOC6&1w+7G7WUv1bo-U(>4V)l=JS<%H{=L-L=nf)yK>{_b|eB>o12r-|l^X zlLe{n05dR8NQgngcum?}pAMRsJM~+vubSiE<}!m3d5znl-ziy6tnneGQLn(OflMn! zejh(4bXFFVdb4Hy-3~>*f^jqflJLIjcF)-dq0_LIj!eT_DYkrx**X}mQK7gJ$ zYs0o$?tJKH+NJs?Do!GYJI%@I)aNK6!-jW_U*T<*un2e=2%qbAZWfYDxt0H>lRtV0 zaae7-xg6ZwRn7Z!_LR$NpXS^lCW!GL@0(SooLkZ2IG>)KJ1@V7@*ak~>WTHko8Uf0 zgS*9X>BWJV;Ddo(S9KDDjxeR)#?>o9HVi@Yey(vX=C^V6SpOK|s~te$!0(*JX6e3u zl)~e^ef#4hF9FV5?5X^sauBnyp!EYpIe#b2cU9$oxz~F~)NIef-Ghcw)d6~jG#v

J$M6Kd!GuTgY{rd`G9R zF3lpI@y7Z;23heH#{%wKW`yCaw*klyk5_FlPJ4a<5C`q(gVF!HkK;6T=W-L(K@&6~ z5ctcO`uI^E>mU2=euytjjDO%soYtKh)l2@@9=Sl`2WElnk{%{1vK~wD#0Orrnub>b z=3MDi-=XNhz7rLRcd!0ppJEhiVqFO;zSrL45xjw-`8Lf_;>AkUOlK*d{=h^I?f5Ve zV&W}<5)@x6SjkW!TgaKAbVBgoJ^%LyBbNv;af(dgRC?S*$op4+W07%ho4)Ip$i9hE zD4F`ei_L(TZB#34-i2=4^$K%KCKUbg0IgEz{g<^fpA20-4h{~f9N(FUUr1m!T}rQp zWm_IZ6cT^Oj%M3cqx)3@3l6bEX0zPs3 zzxC940E`sf6;YZ)m1uUiw)S}aUcD02U!TXF12l3KF{E6Okrj?fCxO3y7cW8Yr#qdXjtF}5W5UNLuqX6)V}f$5iG zgq83wn^{Y~__#RCJ6roivx#q7t%|eeGNuA~Xqi(KZV$!LQc(+LyDlCyB7$0UGu-qg zAM0M@`r+)vi0Vn^#h?*eaTKIt%mUP$I3eNZX1wD9!-r^dZev2V#8zDqD^nAmdC$k7 z8?mKYMA&-h)N3=Z@>T)+Z^Y)4==3k)L@~kV3G;L!zG{Mwz|XhwI(RxIoEf7%P4i~* zqym_sRpwxkJhs&>c2AwJ;z3|>lpt2r4O6@n6at#isDX|0?E{Pygla}5M-%NXX|?_| zH2sm9zg(_T&l-HAJ%;z5i4(PZn<2W}8k^}?4j^fl@0@?PRN`UIx;%6`|Et2U|AEb}!F5M&z})a|thw7MU`gMw z^-Ofv;^=QzH05uys8WoVcROO7@=mH^@o-~Q#_vRTTj>WzdDRmq8=Ad zaQSJVjQJoq*GxyT`+K<-f{g0SO;6{GEF>y(&O>;Rg&4osmNCyyK-KNVvQUiGjH3cnYm3vz+XCpl^1^H>x}O3`dI zL}^qj5bIbzkWgKwfcycsp)G7k%*WpbrG z-EsSS7&q^b5FLx;wo8>zHdi)xtE+Z0CdT;BuZqZ#@L-%dz5*uL2V~w#19jQda#%Nq z#a93cHJjtiBT4a>Ord?hW_z3S`)H-L=hLmtrCrdN$%sh*nx{N6roGW((sFjLQM>)h zwzuZ?mO^{f3A$Pz z%F+33Ug-6EqqmwUFX(bTO;N{L7jA@Zja<3m<2iFrWa79`=MAeKH3?`GEGi2&vk6nq z_F12Un!rSAgW(DB6=HWj7J^RwBKxBE`v>%}=R`-w>LrlZ_QW%&LhNDfNflz%tkFfc z9B{J}{4lKpOjzltg&$VQ9m>)P3iKUL+^cpPc3MDJ94R0HmuG36^T%D52K5~x+HCOK z!bBZkCt;Vr&f4Kc#|9T*QBi4GRVKPb@>$c<>iGh) z$^H*^Lh410 zY3raR>*@NOHnBD;j&9acXaswT6y-?SSUzw6j62L!X2nN9@n%k9(UjvmgFIk1rCo^? z9Zmz8BwtSz45c;}48P`GaFL#DBMWOx=cWCV=NuOW^{h&;I~83b?+t2J4Vel`b7rNfy>J@RO^F`}4u=ajoJDt+ z@y){4#Gc0S+4^|e|A-PWT=sy2b7OWtxz`&2)2akX=~@Iwk_BG&Ii?gXlz|`5z{t$~ z6LA5Td%wj_K-sYSKU*^p*1X4U>3~@7-7+lU%aybTS($3QmPvvoVj&|r_L3_RhD`eCadS46eSDqYVTY7hDT`=&TuX4bwi<3Ot?a?@c?M+YM z=Vq=Je>}@0eTjo@s^B1Kq2C*kmdz`xpwn&)y{GD7;)qMB#pm`N7NX_ECGC)&@>nObA9%UY7vvJY-N$SwGvO~v^^vwAXZ1my~ z^a17V(DmIK7*1OrWcFiUI%}h8H#o2v7`wU9k$F2Tv;sGG2gvi5R8nf_xgG+qVC>5R zAqzjgEiAs;4t|&m6+xsx0jFu+HI^Hb0=*~$+Rt|5+rrSFbi{t3ixat(X!_LckQlnv zY1k8Vb?SbJ>KXq#r|e6DKVwv4js6!A?9XS=t3@f|rFa}1pJhh)nT2$`5X_~Ko-z>T zOyNhzClqWuE(C*hYVYY=#JU_!*uYLYv`$8Tk$%)-UWJcS>>s}yJyFI$&z83oD1Dp> zLE*)VY^<@|4hDI5F}Jl7Xc%i7CvRQc0fR-e6gm$lmIsBxgfH6@?Ps+(GR+m!5`m$ zyrQ7S2Ij9?Bhd2|3nYXJy>q;~7=E6oNN_Mf?Ln)11qgkC+8nVZ1YFhgG}S#~;v@2- z_OTfpLmJ!^v##J-%K`^AcT@MqzL*z(9)LZasYh@l6BFRG!*4)3vDq4wMeToYR`28h zu$0_6FAL`wF?da|-sD#M)sT`{%MNu#GwSn92sHSxu|k2B`k-sd)813Z|1&j{USqEv95EP8%dUK2G5h@)ESN)Oxb)t;*Q_o#fp5 zg%ZCYA9;E;;)M!vP%^~nz&flV;#t!fFTf>j#cjL#zPtK-r5Zf%yA=R1cKzaZdmT^V zTyhi6z5kWM1U@k39C6}JpeSe07j&6-2nJ40tU%@Her_|A@M=(c8Qlvc!f%HUzGjY% zm7Fiic|GmsJ^M@&A<_Q0$XbO*?&9ASw@!Xc(Bt!WTx1M3Xk#p`FRZD-*GZ+yT#XYB z5(z{lyj%f4?R&VGdF$8|tj-t1;JXK`p<>5jEA>Y;c`U0(Bw91e(`n>!qS|;~ zNNYfHoASW$?#wMFE`9ePj*a_uM6=M@;DCwK%5|W}@*XmC1K_qVsZ=N6I*}*~e+Rnx zN7Z4jnf<&@1yG7q^YA!MA~pTe99DI|kwRa=hrY}6I~$tORM{`hh}zblar}p#S4t=mO-I7UmHA@yZd_c2`QhiZ|;%4@L4vAfDan32cyl)5}RwO3G2E2HROcm6_RB0RN#T z6MaG8(H&=2Uzv7AJTVk77q1_$U+5mB3zPu5w4vi7>rWg|gKa2~eHVQhP_#d%3Kr`# zd_ms-!Svlo4e0<%h_D0v(-;!IHGZ@-q&#K6iE*4z@gUZq`4A$4V!ik%nV99tTan4- zcS!a5E)u+DCh`cFC<10iDVYhl+J!%S_UH@yON#KP9*8MbK*3}EBCL%B_!5T5YM;-iEetme4$n9-z z1yGvpcnP^5Z>qK7HHu$BdI!$g$XMT>4zI|ka8|um!?oO+vWIg?DG5Knu2LAy&1S$I zW!Azhn91^B5CQZnG^rPA9LAH2(C8e#3YWm$LBp$>0>sHyy-gBnwk^Z>_rx}8oP|o_ zl9R;IaInNM#PYcnv|UEm6k3-KnI#) zdbnjeW?jkOb0}7WVeHh;o7BPZ2Qg8&$NreJYX8nGHVN5PhJAQK=L59ntU=6|_bArP zYJ=_Q(N*`+62%(N9EB}!u4&LcXJCkz8A92a)g?|XX@sLqG`ov2PPh`SOcma-p8%q0 zG51@lfrpE~`z~|gZZtvO7Q?7{JWdiwzHCX$lslTv({+n(K(WeTHm0ci z+RV0rv9~kjimPy8KrNVsowJaFB|LOs%T!^=VuO2V&{|^kinbfM;xz@8f$<~}wd*Kz z8)X)W_gx3Imf7SWwE@zHd>!+y=Pd2Vo(o-NieEKpA*{pg=RH5+_t0SYy$6fN&FzH3 zc*JbT=Qr$dkq2!rXgo|Mk(CrUiB-($d2!E*RG#XN^Yb&EDR&8lK~_0_gi?SCozyq~ z&c}qUfOn9uA3kbKtM{3YQX+?npIo@3SL&3ZNzOy{9>pRs`HHb?vMG~;v#l0jp*j1^kBbay}vY?S-US+vCD$DA!a2TcbyYlT5N)LiA)>8YOYCuMjG zdqxG!kk0PD5iMINRlPhOjnL1x;a`huj1y`(xm~$@u?L!+7i!@OTiNcKGU|@~ z-A#yCeU@h6b<&!u$e}o(8Wdb)KJxSu?H@nN12*kq$vx`v>8ExY$?fNeS9m`$=*I9j z=*{?x6mc{i|KOvTss=02P* zudJ*fnwIbH@6XTcr#1*~MiS5HP`t_rRfEp<58OQ(dYJM+oi>BXIV2R(D1oeKi{OCZ zn|Sq#o@8IICm?g8D)WTeEEC<)<0HEm>P(2z@~Bksqp2JQRebZ{6({_5nwmez8%PXY zRM#=qp2m17Kexxe`mm*LIoQ=D-nseocJ6Kxq+TSd> ze}e)U2!@9{6Zjo(mg>@{K*7r%OdM%E!vt;_$KTBCp~p28awhG=1Enk`ZI{}TcQZIS z5)`eC?#EbpZna2pO~BMIa9e9D}C3Lw1+AnZ^?2H*JCi%{`*vD+loNEc}5ReG23 zeKGguFx~;;(RvvhCf#>H)>yVze|hWWA|ig4H!)QW-BH%+mm{rLN)}9%#cLOiezleO zC0jKe_K{0E(pKxH;br+kS<76U_GLNU?b2z=cymzzL6wI8!yb_Oc;9-FQWlcoNgdP#jlI}=GDKflRt`4t zqFXVtP8Vo72+w);WH5v8BtAPnWw`8z&-yF@^31z_*M^t=i78!b8zB3DxzM}{ORDyi zTkkU}eLU~h3#;W`*<2*lQ1HG}sv1uyB$*$RiN%NoKRuET-noV%1-ICn407<8A_8Q= zV>Xgdv8mhkw9=ih+!)CRA7r%8AuJy}MEijGTr+T zJl^>j%jeJ1G(612id|w!pDOKm%8sLDujo)9++)>u5A`DJZ# zKxUJo*wX+QeADtTNzOcC@3zZa-K2o4YoGAbDY8&0q640M1bizVsBt z;|9YX5Vk&$oO&n%2}4H|&z{#*;q@Cnzh|9JhOp-wkA_u6O>VdwAuV1dJ!NJtRkJ}e5plR1lu+I5lE#P z5MMkU0><^bl=0jw?hL-W@jm$x7v^Cx((Mgz<`V?Bx7Q>@W6g@ha=T9URlJ# z11h4UaBr!l-CIo``~+BxC!4oWB@jC%KlRwIN(GLO3a|fS^w%1h7g?5cB4R_bSNfaxKBO@bi8Ui=1dS$ZvLsStp@t-q+{zT0*`NdYlb%R?62P z@PU}v1Nk(}uv&iDI+jvf`G9O3%qAxK!D}_y@ds0*EKrMfM`39cf_Czl20yj+LMyuQ z%|sI7Fi43@xiug0Bn5MEob8Jz z&f96;cWrJmC2cH6*!6PlZ1H^x0f!7U-Oqm!BBBFAra^{Lt%7&mbUXjF6~A;4ikvp3!!sCBu7N+2m%}3_>(?EFXbC`n_*5 z41QGhZ;bq{otWF28G9`VxU#mQZl+_SVG(9%?zA~rM?SgWMnCEmo;S)PrY0gI%K4%u zvn^_vH~;JBkJi2P+s6L4=i!W@S{F}RqsM=r`e!bmlNYpg@>()Qz9eZ6NU^*q4EyrK zfTRC@9~}`kzVD)tpB`4rke(hxGK!FhKWnNgR=14A@a(8P2ADzv)Sw-z580nLPtpV1 zk-%h+$w**_5p9sM^Mpa1Y~gI{Uo(M!DH+ngasn#@vQx$&sVwbU3E6z=j$UdvM3B)r zH?3)8IBVCER};(No8PH{X%`ef`<@ktlx5xfLiC^CovIZ&62nFmi;QApL)iJ%F>9COkpb zy=Cpk%aO8sst%F;dEDEq`a1m>>4JvO9@gb68w8(Y8&zMG?W_s}WAJb0QlE2+|Eo`r zk0YZrlUFh1>`M^um7_bT+fJ4A<6ZMm9XmdCmhOLcj)nV}+>dNUcQ$WjlvngDKL9DF z2QBh58#*OFYEa;MMb10%FXHa`$LI2?6-$l~e(rm@>rbNTmL%Pk_FOc^u1KF6duyIS zN=K~XH+&g~jw8Hbi|Z>lcsseU-^06Q@}_JjgP&4a+WBY1Bl3Tx_lt|J5CrYeXZuU( z%MY&NK2rqOFh+wPtXkH_x0ESCA)-*$$MJD?Wd7nw`AxB~PjYPykjvk1&Z>*))lAG? zPHJ1UtGql``O}-wFNGQkvwrcDMYFVA#ge~ge#cwq%zs!XVpws=_#rex91fA(XX;E@ zw&eK~7ljv?gc8-Eh3=A&uS2U4Em=H4-pD{(fW}tw)BX|wQmOhPuO$c?{Z%lqv+bQy zj6S=8yvHv)Zrk-Dw4aM@CLXJ4b3C6j)Jvffnt6gRjC4o#KdRgfMasI`savnR{Bhae zE-M`>92FkC5)v6iH)B1XJV#FF?Nx7?8}M_^$2UKNE{#DgLgj|vG9}Uwy;A$YvZ3cS zl)dD~3^cW5rDIQLb-1aFUTXRHm}*n~dafNrHuWu7#{#lnO|W!U7N`6 z?n3hFv^=JNYjFRAE03)>q+dHm1gwclemDPaE~qR3w;=u`6BQlY9kMxaZ(f2vP@Ie% z`015^%~b!5r>4n~Jz4V0``!+Mdyk>swLla|%m=BvL0{qBzY;SMOHsFyQ-4kM9WFu4 z&}51TT|z2E#!pwYqde;JG91t7EcO!YbEM*Rh*NhyF|XlThs4je{O9^&`$Fp3nB*z& z5q4V~?;>qcmHu^NEvp6AtXeA+`{z2ZUGK}ZP{=TD>wexEiOZg!?P~T*a*i#X|24h0 z(p~SG16(+DE2i2B#Kmm7u*1za80 zLXl$2dj!t*c`_st=U(X>7#fr3&{OnoBKjA`=`3t8$k{L$uTs9@#q)5V>JEnddA|>) z%7}Fy5~EH<^yvHKw0-$@r}etLjdu_GydN;lZ7(Ea=;Up0Aldb;vA+)T2NQfQ9~r$* zNGw2CD=@>8_xEeH9oav@YA(ZFbZLEHJS0$;*xsLNw0N_9og(ayz~*b!7HKVxmUsXHE@D2@gjYF#L;_*@Y_` z1B+;`$h{2BQdEkHXFSZ@YZzujeOs6B_OH^r02 zmAk8|?+~Ng$Ck%2kw*}~D%!^Me$7pLSXV>dL%c7&CxWLGb?Gc&ED>kf8&c{` z>?I);6!<@ei9yNJ#hE?4bw1Z2*JtJ0hs=rj4H5VS1*W75w{fnw@o|OK)=y0b|EfK! ziG8-gzkF@WEr^E9RAC8d(&U+%)YaBBG=_91?ZpX#vSsX<*n9arl}F@dxCx2+`sPYF zn-oOEc>A}QUPXWB8(pi*C@c&g-7ao5W(o`WZYU-;qyOCm!avAKq0|w*KGfl62z{5s zY&EVv=#Ct(UYdHoz|1jspBpW}kXWMzJ`N8>6kxCZ$7d%ln`4|TMjsySANXn-9UBoA z628L>`i+EQw+#rFEDVn6q8qiaur0$CjGeV@B3B}BQ+WTSj7YFy(i)P1qtK-AtAVu2 zI>&fBVB#~a4pR}JN+CSN>s9!mDX*Oe6V^RxGBM|3oOU=l66-qvM>k-KywQ!QU}paZ zK&|YDy?9{5imjTR5&kEUdOYV}h@K(8|CJ{xM`9mJ!lK-szb2}%8NmF21cwy!c6;1b z!m7+f>L1nnzYe|t9p`H3zY2gl&YU$TIWFJC3}GF>2RRxG6!{v#|I#BiyZP^e23-_w z_Y#2OxmyggY#VwcpuOlr>eF0+*Xt}6xz!y@YBq&4)pBBh(KZ4lIKCi1rC>(@tK2^F zQ%x-|bA2Z%6b7aW2kW1j*%Uoog0I*td`v%=HDnT9qQa!+t1iru=yxpDZsJf!Xv|fv z@RgWyV7fee#gu~KqbUcem=-^!Eh;F9w|nP)EZjDJB1f!D_W!ps1}HQMRrdRbiW=L4 z{Teo9Lcoj&?)JXCE7m@410iUowE2O)B}sOn1}2yR<>L{WAtQK0OqB9HYq6?DuQr;b z1Nqz!9i0n=QZUUW1p+01tC{BOf*uNT^p|c;Ql_aIEHaYQjF@aPI*Dk5h&7(g^>CX$Jxy+N7-bq@;82xO`BDZM)>7NWH5;C}h>=zuMeN$OVE-isj@LRx=XS)BT~4$BD*DYiB_0JMv<3B+tF5~Fci4eT z)J4F{d3{8q+}}eyo;7}Bgz8C-@R++Cv?^x0qL#mj4QqP#tyRwDypG!ei=t}{q%?)wdS5z5_HGo;1&|) zV@NGg!k4BVYIvjKLLgDp1h|1 zR%02Kk|k4^LA|m_QkGuL48-=`O2`otw%=~dB;M5sv0HXAm6IpgrB1a3R1QE55wL(S z%hSV$bah_h==g;8S{#IW6_$s~WUi{J>W!$jIxLT=P*yjWWRC8%wg{mjhYEk|qo`H* zovdgj$tg##vp>_$sPHtW_5=Id-`7n_XwSbbu^FEVG`X7k1%`NL5LCgWt*xDti_JUm zTfRt@3U2aA|E&M27rGrthj02%_Fv|eTs;xC?%X#o3@t1i$Z2XBXlO~%Yb41zsK5UL zcwH!8sHG4R%q$&{q)CSoY-M|GHVpo-*2(qO#woWdr2FQA)J3RzJ}0!pkl3G)7?I(L zH25HjRGujpU&C_!e`K7kcTNUL1_#3=>oShy!cF59gcet)C#5EBajjp|ii(sM`@dsg z%@Efj&1T2d9OOmM84R)gLGVq#oI5O7L9Kd<$%M>5T+FNquisShQIK zG(#x}0AEo&)ZDO(3pW1#_*N{@+%T`zeV+N+tG|y|FGGcTBYp=Tsmr83I`r#GR8ZZZ zjFqInWWho{WY8HUT#Stvk63MI4j%)1i?fEMa*KO?yDRRNy9oAe*sf5SK}6rk zdeziz*G4vwjJOqtyfnf!j+ENyYE28GxTimOg(9;3J*`x3wY@i5Hvk$;0I$RN3ovF?R z7SC>wY9shG8uw7UqY0G0j`zSCH19cwG}~>Q3$0n8obb9 zHDZzK{=Uk={_2p76mPPTLQ_eKVMG4NLbwLcsQ!xOW7VSJK^)3(h3kkn7Rog!*5b zX-vu%D$ja9GgjH=b2Nj8XX9&Lbjl>~>$i=+o+Y}dVQI96ge)o&J#f8$>1nTMt8T8Y z%pVs+u*J$<>Uj-9j3wYC{-PPl&^@!O!Ot^j4F>uBx~@_IpK z?CxeAx_79m>g2F7u<;XTHQ*x+-=w|Hn>V^ZqX$o^2(cA}$nz-as%h!Y4=(UY8vFWb zrhIk@6Cd1{_J9WO?h?%}$T*xoeKWMXK3AE+M)NOlY7HGUe6c09Gz)A4){2uTwQq+r ztLQY}j)!DuljU#dq-f5XYuu6(vm4f^(+-OJP#!K$+{a1V-uB(~>20m*gkPm#q;A1R z7t<1S^&BpioMuL*HN&5aONs#ftqjz(ttp8J-m9%e)PE)FIALxbI0M6t#YqgE7EXXNJ!V>S z=QQF^O0^eb-m0C`md&OB&flXy4i-QU#Sp`aBL2!|ggxjRsvFX7@|-PC$ag8z6jALz z8k|zfbIZUt%H5Nt7U_Bl;UU30KJP;Pq=r^+yD^*8BTW5K!ag225 zw>qlRquJkuH7C@u?vSrvg1}d3paz&9byF|vM-x#@6pz>Yfzm(~-Gn~wNKTb)Qd`H@ z)FInzfkkDZ0D2(HQyj&a8A$=M9wM;qTA*~Mt)#2S&TgDT7rR4fWUJ2GwBT9asX&L+ za!q})B{u?88Mb1gmgiE+SKqET0<-!GOSvcyQ}79pwJluSu(wK#IE|FW28xtb*!ZYU z3W}rwb#{ZGN#qcIfc1M-b2^W=xrm=2>Kc)%wIg8B_00Mhpn z2g2#53cp_8XgKkfS>1n;b5T)UQz=15F+=0|8;MSW#7511i#xgIO1Db^Dwq>GS%jL~VUW&}K?h(DE8F3KkT{d-}<(8(ZxP39M`D!k0a&^(bzVvXo=I3wK3_z^6Dx zJs3FB&;&I_zJC9_CqnCTlhX+86>BRm&QR8p5lP}imoYNJd(+XY#2pd{b(fczF|8sg zl3z_Px>V^C-r_(eOARKco$%5$^6HaB-n7*K97OGI&onMh8PWywH3p(g;BWYEP@F{x zajhJf*lF=oQF45cenFZ^8j5rCGe@`5rdd)Y5Jt_Gc^o_dwJHv@Lqsoc^lJD!+Nr;;A_OJ>zkZ`8;r_WE+ zR=@V>07=o~yw=5irj0l)5!#}J_R3lQC*o0Yb`+=x@Aoh|T4X|$lsgr{|p~RI$^igrAK+&f01QV)H z7?5^ftbu>ue^clmhgMUWK7M@14&nNR8Fn9Oz?SRi@Su@5UJs&a+asmV|%R5 zzE=hWk!W=AL0NfLMNbI7%n3);02_P;Rbtgk&mw6KZ@lW7f^5 zYOt?^_3M`GYYf_gEDqh;RnTs;7RmPj@$wWJRd`qTgxLUVK-K3-GBsRRb$lM!N)GGN zW#h)o7Vp%1#-E=Mn_(djs~FR>C{0N)#Foc7DA717h#bACY=<84;D6bC(*lrOUAus8}Ts$_?`H8Y$i!}2#&XZhAo;h z4(@M)emM{RHf-JJh%KyBv!0#+i5Xmds%Q7vxNBnTey)JqG4vKij=DqGhemg1fbFk);xHf;GTq< zr3&y0U-avJG|wA_{TYOZ@M=0Hz1QvXO&s!nE&-^5xqM%SYjg1QI~evV)`fzBeY|A3 z^B$zrAA{eHt*H>cd#Qa7O6B8{F)#jMVkNN%*bI1dJ6rLUhCX-9$U42n^RarrXy@s7 zG_lg~(a;iHGcPrE#=mya^xRtZHY6++r*| zLOV25S5`q3F%|=4ch>?u(Eq3mIAFWRV!V_se19DL3gI=A5T4e%9b7C9?%Z#InJ*CVlue7`UN-;B0_ITBO@;}ZJ0^$ z8rdko;9px_fWrOd6h-^SB;@bryfGi%v`p26vbOfC>|Rb;#nB?h5yD_l*8Jppm=hI< zR*==s5#ypE|IAJ{UW(j>C@c>TnU=X8G2@wmtJwNeY`~fGJbsw?F$ek2##%I$6&ylz z-PMU>>&d!|FZr-mQI>^C>u)anvwUPl4)#rdTEg+<%|yg!27xZt60($3$D(L@*5?CX z+-2>?d(r|BNFQS59xlF&zX2r_KR>0%%c6|h$SF9?^bsTL|8x?hr5w|{=a~)o&g>0< zm4{=2_=Jub60=Nxb^)DqV* zTu3|T=^`x!1b8{MIyiEukyuJS$x6*kjxkqLvGx7P&35Fk&N%%x?68fTpSVV`K+b7q zc5>4|&TxeAo=b8b$&fD!<*0L`>Z@yNZtjd+1~^_9;g~ELTy2c1j4Ao$3(?)p)#Qo6 z^P`fg08p^MLK#A7ikUtXk{4aW4aR+qOm0Q_uZuH9A~6YDL^Qw%wxyj@UxVi7aP^#A zO>L#MIrh>e$Ga=@#$OKxquF00f>q{~H#74;Aw548S#TJ3ZV3tVugovbF0U_cFC#vn zEv|2F2UXUTwzq@Y;Wk2QMvQIFqN3q(5jhIpyz*>&kDqyLID~jZK@lNr zrTVlO<8#kyw8@}Zea|gJ1sw}vt%`)gr@Aw!kk*bkqo-UFYbNw_Y~*mQQKJBm40LHr zt$obP>X2KN61i#N73-JLBWOGw{x9)}gGK1Gd|CKmWyff-613EW_)jw&Ac^eKcb>X-&}| z7Gfk0%>S8RcO!^Emin*2!?AFOQd*rt{Fj2@r|VD*Khv#2M_%h8AL)uDI75SAYpQV0%4 z!3;ECl8Kg6K#YJAzT;63YG0j5(^BOWf9EY>zxtlkNnrci#lt-jRJ;90Ua^Fk7WTC6 zG}HJ`zrU(hBT~B;kVgrWoMzTdpZfp?t4&AZ)_%e!B{!QOmzC+fPMih4z}S!9#y~m!Ur;;ynmZ=? zYo7Jm&->BkUAt((aaY1_ zZALR=y0$-og)h?k?~i9*NNv?!lfu2id~A5&^fgOU*FnM0jh6qRz$B0~N!9RD=(>|6|HG_SubT>crqPn)EB5Q3*(Ut@HDh@xDJdDCbGIU1hJ=F0OhfU=_13ZU z%*60yM)q&|@5Byy!T$stdHLy%NH~e~Lu3aA#fR#Y^BNTMA6SCan8l&-YRMou?=Sd1 zoE%jXMyW8wyadWZmn>}d#2>6bvzHP*pB=zi7zge{h<}%3U9g$-x?Jf!jpMRWy(w#4 z+!??LJ_pA^A^e3Wi~w;I$0J*N?wQ)M7veRa=gICMQHE9q?q9>9#50}`Q&JBy4<-}u zgkXOo&Pp5tGMsy933CJG8xn!q&urugi4U946OmlZtzD*j#sT}kuv=f zTI;vobh;rlWP_q4P;-R-uvsipY?CK^ur~Sbtpr&ppmu+<0ZKPeibPEsQ?&LQgK~u_ zJZZ8VQFe(^W;O2mAZ+AVs!i%>Q0QMGFy(9eW5dM6WCSpxyEa`b&xIcw{CR9_tfr=> z_MUtdgk;u$+u{PG%I3?!L0=I0-EdUaY#1fM$<6Gt+9H^t4D_q(`#pR6VzTwzYH!P} z7SeMHpxm z#Qp-+6AT#=uwa)uZnRLHWV$m&Ekb#(Ll2i?(K%HnPT*Qzyl@WWh6jZ=T8W8w-)Eeu zT`Z3B)MW{E6skWPpEPsdC^nS9E%fkyfh{ zm50M&08+c<8b5R%YM|gEq1^1A{d=^xRn~_S3hIb;1GbD4Ko6IQU zy`aIXYxxR|3h)_SwFFQ0D>D;UWBDvk!$aW*Js~bGoWN?Te}q33MO~Q3haxl4vCYV1 z{3B|ZHfoz-eIh}M?MAjC?!UyY~KZGN$w6lL{AjgA4L3h`|h z`5EcBglMRWOA9*6G1N~QX;>a;d{vzzR6MoAJDylJy^F6opA0^Z+bTwL@Dg2+i}kNg zF=s1Oy^l06Z`Tr=`L%$h!gvPi$!WB^%PRU<1U zrniHUuedGmQich2g1ai6swXin7d2K>xqzGaeC!DPgA)rtr%55lTskPVJZeqh%ELxW z)ZjjGtZ;#M@c~V)#~eFv(!_Gnr-4E^WY#Y}<%kO;DWxQ+d{gTpykTAyismqM)|BAt6)RY2oE=|M=E^S1_2W7oh)5E*9<) z4iWY#lExm-EljCnGopZu;B>rtdp)D~y8gLZsnxo*2GqL#Vy)9u!Sd$)HvuBVap)k_ z52DGji;;pufPt&V2H6Sc%a{nM7+O_x9UVvE?nS$pcLOvK#9U{0R;==>!ah-UR6Y;k zpg?=kXk}|kg*C~XS0Qglv~r!&Mf(ef5E_m)2isiI}9 zqGtIyVUD7KWie?J`|kFz&#OJ%U0-RGIWQ_eHcEVc6(I-A$THD5f}-~5X7u}tGMbI} zk7b&%@BLIfmywr9goc)soSK}M<$v~Av%aqV)J$y*&;(M2AN4pRvf#VD{_)FzCr$4= z1U;B{E*Z16%RYD)<6gWqX9EEm4wb-3llnGi#)yt{K+_QP`MCXDJD=tbGI-TChgI{h z)P_oo#ME;j52=b6C5`?ze8ehwy6si%bfzoxRqV^Hi-m-qR2XF}8#8rlSW5m zG*;I2R6hDNu#^%ucaR@0B+n&xOxEhLXrhw}uyeCyg%n(2(=c?h<7`p#U>>2Sl%O)* zrJC#f{clM_foZ_HBQ`^9v`AA+OUonS?H>6)Q!s&(JEYCj=Mo$)to1v-BL9 z@*omk?RSNO&xP67S2H3$?(BqQ$*6z z5z!N%oJ7I4(s4G``~@D4BS%fy%ON?LZ;@!|If*I>*$GN4^jyJRrX7NUq;%Z{IS5bK zU{~w^P3lgJR33wvXza4Y-u`+WB%sicD-#e4E+Qc-tR)& zz6SGxwg2B2Ud8{#cT5?9^;HQpjMk};N^6T1)z_dpuz!Vrlzlj6--h%5%gqb5m-`^zR{e+zkGKDe7|m^n za!ABrB!Oggc2ZWUr81QRinOvf%*fI_RF7+S9d<<-IJzeOPJhiVQ?^Wlf+Hwg{GSFO zS#*!sUg;Es=hy=d27g!{tx~)F_|gIM{_ch409It2x>AKq??iq#} zFnYckKwq^Vp*?w3Jt-F>D4&=Y5}>&Z2ui4QjhHK$tD3tvsk;Az0WQ+PcFSjEs2t|bJMe7QkTfXV zD2V)Q{amF4SzDATtvpfzi>Y;3k;C>qyL2svjgqR3__y5Ui*Ap$nPQ{GdiF+`6hk*)1n0u) z;`m4w(Y(djyP&h(C4pSALtpWke+67s0;vvIaRsnc2KSCpTOuaRr{-{)R7-dNYN8|z z-GD()<|DZ{L&?t6u&&T`pTv zJkDRJlC`1Ov%i^KtbtLlT~O>Ku_VgZvR50`j7FF@{^;DHm}@_52urElXF)W$IH>3r z9xTt>4ZiCn#B$P?agtMVw*{ajizvh*wK=T_3;l=$oJPjLN5LV`*jb*P*o(q59yMFKyy2sP*380;}%wS!ADq*^e<)OgSlx@=k!dG zN)-6GC_=f#KzI_))g?tIy_{5-jnZUi&-wAf*bE-7+>ELL8D8z{pA{sGulA0vD>19R z{pI3NfIl!$6icm#ruv=e>m%QQIX&0U88JM}JN2qzn-mmf*v;`cP$i4khQuG=-g11~ zMtw%6{V1nYW4)Q^m$`Y^{6iSi5HyG8Q2PSCfVf?ch=BscT-h}hC8ONEE0(^`O*NpJ z_6s+iQm{JmK?kQENlCBP$YJV`kOuvdUgALy5cSKHvuMyiHRE;Jvld3R(xfS zVZ6t4YeE=Q)ZARspincfe9ft^uOwG&3t8mln(Chqu1R{(a$8$`jXe$q^D4(`%#v*& zZ+{|S4aRRX_*#z&mS7*UbdPhd*<63EBl7m zbIxTz?!Rd%+>9-MxBQbJW3FixZY4s98Ev8VvQId@Ks&We!{vaI%UN@dxIYkWlP{)F-5wIVxDFwG&d0{xdkl zZUDknia#=BoXnOsUk5&WYq@bhdDRvFN66XB6t`^W@=Mu)>T-LPV3=Ed&*SY9evR(E zryO|-Rg3a4f7JZ-SAHFe#oDCCqO2}xT}toIN$X3h2?i4@>!vYqwaQ=JS%lJOGWX!T zj!#G}Fw*l4Scah+8Vg}mqCi&?27s$s+&}F~JgP~24>7kN!;`fsH2CPSBc{8TWp8GN{`*-EZJbW7|gw{T?4CI-{ z$S%fc8KIo)e|y#aig+#w$=F{PiQeK17>kUb&cqgI8G(QZd=mf%TUgBGPfbnfq5SE1 z21~rb>a|mhN*L$kMaI3x55nHpm2b;FM&}=QOnZo7SF;7+*#Rvn&q+y|Xel{)X~9Sq zEmXC5w-{GCcu@2DHQ^mfTOO>&lkZF_#4n7rUjWssDCr%OZnlVB{~2y{wOD zKw3fyeaL_yOJC21+S=RZg zOy$cf=aqBHCbzQRV*t@4U9>&#PIQIrQ#^Q#LuiB%YA zp`w+`XOmpTOCgr2XrVHNoYn#5bSciU@}-b)vFos>_)8I@mGfr|T#f-MHYlY;1Sh}( z_^waqi{Nc{$$6XFve@7?F5w*0BS}aA+m(mxkNMXlO&AXoAsK<5z=Xu3a<^{l|7d+WssE=TEFoGD?wF7RAQEW_39 z)IS&NX(F8-oN6Jh{`1g%F4w>#vy)%Ys1O*YY%?{JG)efZs4G8S4^6MXLLL9 z2?)F&Hpe#oiCik^dc3?5H4-*YdY}dL)N*u$VA0-rtvJcNyAjfwx9_I+PX33Q-FbxgQ#X=B5KAXD_-n)a$z^O^@*;wF5n{q*6v$su9|h5?dbFPhQdv?rxSoHAIBXM~#-Tzr2_V4}) zt8&8hGk(jKBbyl7f+}{}k}H!zy=utRRmk(SzgDA>*LKjbDSJ+|Te;t~u@|p!p&C#F z=SQ++&Km6Xt-m_0LDRMd+(D|swj**W)cnY}m!S%#Td= zAVK3LmCYH&Kob%a@^B)xdzXH$y zRStuRi2qSz{ugc+1@DkWb$?pOWSV5G6zOV6Y5?dY(O8vp@CfFC-Y5Tp3jSB=oevf# zYL}%%rKCcRcM+LQ)i>J6Xst%WQ&@-1_K%B{s>Z16u#hiK{EI^Q4}i|F9l+^KsZg+) zUZa~`A)sD@*iXk@S^#e?-c;ad5SPUKt%@-N_4EK9+$8-+t*<{B@G>6!GR|l; z%lse?sQND};`+~9=)Zog1>6OQNc#IL!afB3KljE$rU4&19)VSA(9PB^rX>^r-503I z0lt!@LxL8qXo+aDNXg3Lj}Mn$fYSh2zBFb!#6IsB7DC zSRqB|Ld}2G4tNFqUla*cX94C&G{ug2RGoU1$@<{VLB!X?2ouL$`qW(qwxRMU3W&g6 zqc02#I4DN*C+yUs#%pxp@>C{GP)*4Lgm$?Ms6kRCZ@gf^a$)i}Wts=?mM~s`rQKPf zi)n8#F$2bF`Tz4g_3E{zcNhl4(SLCmHdC0o6iI!Vb)Ws)u0=~7O**dQN&D+|B?x*T zR9%)NQK}s4=^9w*NvTTnMx99daXy-kE}_Jqb&=!hGV?Dxo32z9Rd+9J(ie09T6-7& zYsh>55^Nt1QERy~}gIT4dC`8hPHJxLa4!BV7#+p0r z6VQ&8|L`>k1h5D#*NIE6|Gk(+C|if2{=Q)*6tcObsJaevI?98?H7W85I+%V7yQUHR z0>6{%Md$v=63guPo#gR+mBr<^&la&{^u$yzGO*KSCd{z%yCsC5(J{M`QrzAcU5#%^ zw~D1>dUsfT`89jdQ2wvV46(hYOYF)XXMGxo!&^)r7YQQT{=L%vUaH^29E;w;Ss^1b zp+sZ-4!7bY;_i~YY%LP>b-)M^}3SM*Y4zJKZSL3+*g7v&N9=Bq7e4)_lWJn@ zF&t@H4Z$zvZs8B7uH(v=c0Ao>tv?z7u4q%~em9^6dIXa|F$<_seS(0igYKI{>sz8L zR6OP~Y!NNrQ!o&2d7AZd*s-C0%74r{g4;C-s-)&XjxJ(gudgiSeDr4f`ev>~W%F6btG*t^}>K#g~e zQQKJLx0vgs37aaRhaP|NgwSAZPE`@HCPieK`d%w~Iwa96Kg^Obzw4A>h{z2E9gg9l za^e2&sNrN}Y%T7-CH|r4>}WYe!oy+1$Dd6fr941R7RE~zo|KZFO);zUT6G6;^}+$H zFKNz`g%MzaTDBzMvQ|)XbW~h`T`+E$M$HoK?$`N~Q9BffnR`+96&9AxnskHkwRLyY z=ZUP6|Hu~k%+o~2OH1ESd>3P95}$6h%TK}8t5b7w5&;QbdNNZ@tEPXh@5GDNuL4xa zz)#0eSG03`tpm`8FD_zBvYGG+b$+n*k+e4lJiuy9N5K5A0GCaIEw zya3hvv(T(+rI||Gp^PS6RiV7g1Q=-A+fOWpsfz2yVpkI4>34{aYhi5z;ZN8ohdC_aX~&Ub`x;ey$}d3ymKE-DhN)b21Mbv-X=K zVk(8Iwv15aOJM-}W@&1V3RaAVnU_Tg2?_4ECRatRmd}(Yi9P-edV6RIxm0Q98TdTx{_pc7LS>yx@*`VqDIPRA3sCZKn2pS8QNfYD028JkFa#e!qTdA3pO2_ zCU*%v4hFh_ktZuOe`s5`1K<&c21Su8=VEGUScrOSqDZIuiLa8TCeYnn$8V~g@XS~C zdNB}=4foBQ(XU0iN2o8f#l*Zbcs;O=ju{y_eo$o*xznu(6aD-`ZIRcUEBY2vM$;J= zWa8UZwg0@0RERs(%^2dv#1qMi=F?fBOy9vKzdsNPDqX6*E9~3tXH84tT#ND#em|b* zKM{N&)i31yb$qccc79%1mJrYzqnm^53u76Gm44J@{-<#Lw-7R?~D+i=m zl;pf*^ms1H<@RZ$>ZW&bN4m0-2hJa{nuM*1T;r-f-p1a__O6cF(&0nDXYZ)c$b*e# zHe$K(Z7_5+^pa3ewz)=~Yuc2!R5pa5T5J6MEe(Up43qQQgcWWMrcY<4c9As86&pRH zgu@&EW@GO~^DM_xc70q9yj}H74p4T@>}h_aWAEiEVr7@l(&eP0E*RRK=Y}L{t)B~I zrl4MAYp-Xb`R_R!`dZiLJLodnq#s4x9+uZ^_1AL;x$qMp6?$=q4;<`^BxlV#{5#9=mueR95`%z z)bo+Bl-X)Brh4;W<8UykYhfD876@um2%pja%shttLa8nk~2Yo zBsHFEeA_%6zPwwHw|=|VcqWMhwDuCkk}a);=gm~+1brf=?s2q@6SJSVQK%M290#ps zu0?K79+UA!?>_}|8>KC!VJU{?lX3$vewCwwOzlh7xOtq@rUp#SJ>=MjPm?Oc$I#`L zYVA_J1tY$>KhYqnOXw@mLFyC>2=%nUq!Z|rHf8wW%~y`(NV;cdt|jNI%KcI*n+V45 z>$v6Htw(Q`j``^Uq_r_8Az=%oQd!(D<8)VG&Deig%j~+&{u1e2RNvMSIC<}+h0o^iWY zmNKuOr8UMhR++TTmn^B-A&)iTSyRNlJSwPbfScy?#4iB&%};m-r9xn8D;9AKr6+9sOVPgUz`u z8vZ(Zy?#xn)oIiuL4f~IaKKBZhWQs-MqnftKiMz{J!m+4O6lTqCnkmpLX8YvTCFrs z8zjj)jqFCzUyrDYx_ViQ~yR*Q(;-yg^y|r zp;%85?&`cBL%nwOlkj)9zxd>hyse{_mXH#aolJiOvm0b$eRdk%wD+nRwS6D0&l=ix zi*Z%rOiMO-$B2VZ8fGArBUxg#MlRjZfTU^buKhWY>U<`;^CY+5bWSh!r&?FQ=XedZ zCC+IC0ILUcetc9+*D3lMkida1KCgvGH5eC4&!m@w9)Zj}2mX*r1MGOQyJ|n8H=`Dr0DWhtHdxj%~N&`u;n1u#iCT1|{8vJtl)o$i@EkD9@{d0 z?JqaP-OP-9^=04lgtx8NQ-c-X%S;)s1b-ySeK*E*wDPDDN5<#xQ9-d5O5O$dDn~2 zU@d7yYb~u3trO>lb6A9b{wkQnrK(}*Li6S2b9TcG1lUJ0pF#d<_bX^HO0a9Dx9a=D z6gDId^|C2#O>B!?)Aq9_OA-KO8H@~5NGZJ0!U^3-7k)@}7WGQgyqy8e8 zOZ$q#r0W87C<$KeG}X0ZKHC^9BPrV(AT`gG3^6v2r(e5dtxs_7+L9)q203(r81$=T8>6zaxs$GBBO{b>f# zBkgc|heu89j-2zi97nsaH4Qn#{yM7gTfH`4o<>Z*W5(bZ_of^aMmvAz%U<^o?gRPO zb6MqKUerkU?i1-H@L4@KVTwuM%BBPFjX+;GO|uySL)QuEaspn zi%AzcZQQJV@BOfc5c&!N_X-bub}PNdht1Op3$H@5lpXg@&R0JU_7pgN{jNNna}w1D zRB3W(C~t}2RoW39$-81;#1{#hLp5=C+dJ3OwfW;Q=w;@q4E&nLhDwd*h-&SpLFVyH zRpsO?bhpW)Y<5%SK3Hkp?d#jM+lNB*EUB)p4hmw41iu!@g&uOBt>mbm-!}xmuZ;i+KDt_^<;^kgcv}!v}k1 zsGRf<*58E1X3;X|_=_7rRv^+sNQO*b|K_4kV#P7(Whvu}x4Wwdnw6eKq>L>21xg4L z$wjch(6NZwa6BUEuMkH1g1xvXMY$yXaVUhye0j$0pb z6cdloJU1zb`DXg8k>8f9bK#OHf9tuR)yORP8Z<+rs^PXZkjdXh1e$=&@SP z@6w-4Cms=~Ks=(*K7&&|9~lv0Td7%d7)Kp?6u>~=oeRNS}UJD3n-9qWz?WAiAeY{gd4MwGv?U1D4qq; zK_3!b(v8gp6AXQmU@42%+|3poIWi{8C;xy~nDJ?9*9@dqz zRyvVd(|}wsA9N=rW$pgF6?h|OCpa~jbPgm7r9_dQ!ou&Ft@4Jb&gcmoPi`2crsf_$k!rP+*+w-DS8C7+zc(~57N3s zcsn%%@+C7X7MQ4wt2!4Za1Nx6sj_VQ>4V=F&@7|2u-ZxqI*E??OL^kQs#OU5`}<)l?P@@L3A2n(gC@gjF7i&m0?6ngZ< z5~u)jn5J3^`kye1`(J+;-sBQOElsukV10uEAM7*eu+K~=RXBfaRDAuqcJJuTBBEBc z``P$Z_rsPGal<7-9R{w4f?}FSD~>Bjey;k5^%a`zuH$>^`db-ico^HN%iw!M+0^r~ zwdoqEdKjbmbzhmKx!c5yXC1TryvEtBp7rBtsPLgTx%B+A?=g+r+#i+V!|mJ8(v4WG z7SC*NMthFD)!iXbd8Ui=@puZ(SVmT zwgnd(d-pVEMUq`To>WakyyLkW!pB=*v|pFTzww3NlZ}T+%93~D@?iet)K6E zW0qu#Hzb@6&aVT^EPZ-*ehwEqp}BTodq*7^Ieq-MeA2}@r_{xpR&TV7Xns{zTIEWb ztwev+P-$8bGdnWYP9Dy|8E(52M)DTdN%+Ou#})`{@8*w-&W2~w#4RISTlx%)z=y^r z=msIuL|&`NwFfyiRBC#rO=iA^wxU?(UDp)Xz)|@TyyG%h&4GtOD;X8ZgD`ppKKGC(8m0fC9`!OXeY9&YxC1~`i;}YFNto>KpM*zKbx@&M*Z=5y`ZlbZ7P=mUVsXar z!M;Q4W=pRnVY_bdvy^)&+q5F7wI*fag-ZyDR-=xlu2$pJwN>nUR*Uyv&|F~Ah3JLy zq%N^7DWjn4eeL05>JgxWMp!m7Z?1v8>OlNjKNsot;1$sFW;Ng@4N3n86IrdhdXtARC2Rt0~U zL}#4P)5dss1Us1sKfJVek`R9g$)CI*(n1U9>+w>~>p%^TUegpVk>*v{WMJT%#RMH2 zey{Vv4V4gW@h@TO2!%i18m}^>m$RVJ zmzslv!G?4WYL_p(FO?; zxA-{!a?H;D$^XvU5piy-uK%zac1~GxXd5taHEB&kFBErIxhKyZpGyY5k-3B8+gNbq z(hPWMBz{^BY^<9+yn>BEvDp7~ThVy+g$c1d-w<}Cf^0QNsqhQ_EBq26^k3zlA@VRm}e zZu&Q)SKz7^AecL3q9Xa`MdBh=~Bba ztHq3ix>zlQ71ThYK&9{K)}Kj(<#RL4@kq#j%{_{_!hM>Wb4*`>5fi3te{Z*EKb-Ri zsWWK;fpX3?;L;>;4bwJla@V(F%&2*-D418BgqGbz9fZ2sEk$j9k;s0l&a!1=3N2b{ z^l&WG-7jq>_rd72M9+25loeqXVzmvAtjZ~Sdg*iuEpqKL>NJUn_T)P^M1eJuJgEbi zr(?>9g=&a99*TN+^5p(;8q%d8Vah-(vjhpAx5lv*0--lASWo>l3*4o^Z{jd~mR#;k zJ6gES`{C;>FI9NZ*umrvO)$n|HE#!hZ+falpD9De)U@rKRl_L^S%aq& zQn=sLF-O&EIjHnlmS@CPzVS?h5#@@Fq3CJr!?*Z?z+A0+ zVgm1s3c)Gvyhc&n^e)$kZe2txOm;s@hVZBX)S#Iq8R>iEY&xD7j~>mT6quy(U%mv5 z-l7Ijuoc#3j6;EV2}38fDFwh(I!Dj)sj%APGX*D2b}QBb5zQ9^-i2$6_#WVQcl+8g&eMc_oiP}!X;pzw%?uNlskA_+pv!c+|BkIg*8Z9(djJ)Nm) zx{F$NE9tU1)Bz&kmV!93V;C1wVNsCxL4_eK1L*`=C#B9DSCNN8qvDfwcC9$j# zv@w)xsL_yRLJxUq7qML5zhX*=!iT(if5xI$yu9iafV_YW$GEGU3Ul49uy6z`xHP~^ zOrWSLP7dqSYx^<7ZJLY7xG6aQuo4yL@?UXlY(xcIZsdiFtM~DC7Y$Fi-8Va?#Cd$iy2y+a1;HLj*7nRMrNAj(u%1ffVzrUi@yx}R~jY-Bshp!9(@-% z`KRaS88nfAn2?!~Y<-3fN>K|3`7%pu8J2e(rJ9JBo1KDFGnes6se`vh)ncF(PG2Rd zAkfy%bHj7QgoLR8^G+VnRS?oDO)s~g($0@Ts#LmyqJ|0sZ5=mcZSqk>6~uN$qSjm< z@Z}nmtdJq8{VeA5Vmt3i8DtTSdVV;;WLGh;s4R_!xx#{^$I_39BO%SNd2>Wbp&jZv zB(x;hZ6wJ>(rtmigf*)*Z7QK)J6}KcBWu%b-=!Ns-o;@56WA*-fC-%a+B6Qw#9dN- zIm^?3E$s>llZ%RI^+ZR^07xZ|p^= z&CN{8!^(=w3*`R5z=M1BfVY3xrf|3&Y{P8y zTp37$1qO-qjp%M`1CDpUEC~mV8u20}iA5&rCmif4AZ!u*t1t0iRkQygMlYLUWZ(S*HeP=YhB>$yvM0WaR5S$}ba(cck5n$D zg09WLyP2G{1)w!M-cOFc+yOILY)GmVMgVBaFjEMUqCjRp#{qkaVy~+(MNmZCQE6%A zlFM0a9-)=9D&`GLcrSD>TFe7#7v!AUP0L2YAtre>j%7|CoD1)MTsk= zHGZ|pTiabX_GckXkQi~HSZwHzf2+B;r+DkdLory=WPNc2^qhRfsA{ArlTxRIiQ91EmZ_Ga%SN11UaVZQbA-d024 zlD=EFILCT&c0hV&%$%;0#tCPaob>WhlKvdUw88nnV5&>r%=$FjNmJagWdO1TxG@|o z2M+_FP{m*&SzSMO(8L7ktY`)l)yEv{s(f}7t_kc)a8%$_H5PpJnd%u-baU1dJp3+PBu!zCO~6ZxeH z>pxYNr3Abk)@9X{YcHrwCWYh;{tK#B)y3!-jUu#&-fYFB%bosNhxPOeY&AIGr41?z zJqM^ngd81upz}|#&Nx8ef@I0x*N5Y_51_u0$M`hzM@Y#JIE^^Ga~~PMKByI@_Fz`% zgU4vG1*&_Kq)n(@hKK$4`|c&+tgLJ;EzZjN^B^kV{kU|09CfR3`jk{u^A38r>Y|;R zjg69=<;`*3Q9+k*x$Ek|b#tSxjsyJs!3{Yy;zPK7 z6V~{ts?4l};9tnFy4#zlQGq1M&I9OAk*XYFi(dEMuC=Hks}$$uBr|i3l9T5A07sOf zotB1IoC=u4z#k|njbs`cE!04L-lmTz$`jU0JgD~TrYFXZ-wGr0#+IG*dL09u?V}62 z-t4RGWBS6yWW@RL-K**Ebj&1t_-zQQGYnk+c~mSgK}ob#XKUc{(Ds;t+1rIu<=exA zM&ql>NfKmTnSyL?MUA|`0&P(Jb`M^{&vPY1 zIkUhv)pghn;-s5gn3E4#q~^EcpAovLn_+Rw7kbH6O`n}yQ;m@Dy4CD#qT=F}Rymlq z)EDD)*Z&@rii&Dz(Tp@t%j`-rdHPFg*vB_X;mxZeuD*|cl($QMb_|)wi&Bx5 zg8%`BFaZ)GaG1UWJ9PW;~WmoA-^zkK;I0`uM9kT zByT2F8ZVch#-?Lq4*diA)$hG=Y*5f0rVpvSwJ9=aNU%h^YqB6EPq|Z5Fi&CF;APlm zJ=E&%=nxXeE-=h4Oj_pG@(Op<;*71DP&}DY_k8NXW85 z&&I`9M^j2Ft>t$tFCn{~X3U#~N;U{z=_~ zFTw7~3?|cV|MRDv>C7QxtoxqCRtQ^>-c$3l%mX{qqHxSW9w96Xrz3{dPI@j9ZC@RA zorWd&WM5(sLG?zJ*UK-i&3Rf;LwE-*F6(JZuG=nwU5&5H5cw}~QJaW7y@wB5YEacI zxogonXw<~cwPf({1GvFcKd`c)E@Wyiq137DzA(9Ov~N>$#UfR>GyDD7Ses%`r^*IX zN5@E~eWAN-?j@e0-R_?}PaaD~v8RXFCF!)sR?$_(O9*F%a6PVuZI#dk`Xp>-=1rix z>*|2nWu`V#%;GY=dxHJ=EsE@L0V^{t<|j7McvXLO zRchv?C+gZ1GOl76Jh~DeJLy;h%#BCx0cDB^ER)OaS1@0rzt{FQ57?R_97yJ(%E7M` z?c^Bdm`6|}>pN#Cy*`3JS>pQ*v*X}kqA98?%wRKj-4fz2i*gIAn?SMait5tA1T&L% zGx=u5p0TBY2zBMQU$6c3@WYHc>vB!Q*t?Ic&k850Aewj&wC-L?o%Q*Pnv8FaGTmhV zh@++HW!D7+r=FgosVox3r>)FRk7ymp%7D2>P%k1N0_QjQsFdlsuBR_sZwIPx(sWVE zol{Vk?Ih`pY6f{rRuf zYC~8{uIm~hsVgt7%&C1HEkMu~8^&!a@SDJRGVj9Mik6-N3qpsUa=1*<=|lQk+U8Pe z&ve_Xz0X3PZ;jw1KCJ0lfhOJ)0Q!y6_T1qyAW`|S@S?;_lhS75welgv=VR2|rA~p^Xu<U$ zz_(=|E|p51^38c#h!X!<9p)&5{$cMtKrfizV(r#6l3|9(T%)T6-FEkIASAeq!C&jl#qCa4V!k4+BwBVxJWLu5acP@XKD6dvW5(hjv0q{8 zKrVes3>TYb21#s#kfj`B-oKKCe_l6+Inj=;;*IWM@M-m9kxod_b-NKIQ58f`?h4qGhXZ88Bx%HQJRWHN zhFa?Raps~zZB8DBF)~>P2)+ovqU1)h$+fi}ky&YT{J3+KbFfCM0_MB9a*{mliOY{fChNGjyu! zN#{VktfnB+C5-0pKyV^{l?=(!qzTQ`XY7cwr^)8cP{IX;u%hu%vt@}Hyr|9uaJCTa zQ<^NtCw21ap(wO)J7skp^#JyrMSZ;q4C@Oo#z&^lE)=S;95|^j)|RJ&3PexgJ3_&RO$mt?O>Llp!kB ztGvfXKWBLcz!KhrNDl*jNhzvFRR)ph$GwG*kY9>ff41_ ziJic@pVH9<2tFW;9I$!*J4aU&=>Hp`{`SKEL7n%> zsM(Y_OU+i8?j∾VUI~?hXULVg$^g(|Y&`Agk=rFp^)r@wk6U&0+e@T=4wgjp}?i zFTbN%Uu<36e42*ddR8!gUa%H^6pTMLPGT0WW&2JGf)ObY7jI%*Vb2E2oVYU@t#n#n z7sf-{C2w?!Mz6vwD{lIx-pi*e&}*LWlp_OMbUW;88m={jmuiV|c1+-PyX~8vU5ts1 zhm6&1yZGnvs&?MCHJ_|$Zn~Y*S~_LTyI*sD_Dwfw1aV|akm{Dg{mVOGi4TZuN2kuN ztZQtmtg&`ph9CFG$|GGVEh#xH>+`n%crsh3&`QzWlOhB2c^=J!B(88Ra?oyPbUxp+ z>2`21%quXBPoK=T)ouUEc~HiCInnAi0|5Da0{{X8_$@fP0G1G#O+b9PnBM-F-+ou1 z?eLX5b~$a`PQ0-B&NFK+EKlVwxVX5)QvjuY01q?ijaHX?et`3Nei%@NpKvL3`u0d5 z4^vAn@JvY^@BanQaD)B(_vS)lRUc-{_5ka4F1Wh`S!-_gX}U`fl4{V5XR6cK=R`U| zgSf(@piirJGIHu_L16>#WV)3kb&8OX9W^vakfmxXQKofwJJbE>q$Rk%=)9#mR+{=b z;a&C7zEUk}-L;*wwDs4&FmfSM>-+XEv^*{`AEz8&H>MNa3*1cPKB4GMpibADS$=`} zOsYF~#!o#c!tKL}B!S-ORiwb6V_ykjELdmX>`4+&D||ES3p@-KvDdxQW5XX07&6<} zOZE?6tbnvdn6d%LEK_gtP|el|JyDt74nScTxe z7i}y8yvIQrNGAi=ycQFYL9A}8N2pYWvD97T2Gx@FR0dqW2+`&GnOT02L+iKc@Ck=x z0kR?Ty#N?4t`*52uaKc(Ue21N89KTcSoqkN7;)sW#niVd%KzfY3Bj(PVwVNGImfBE z+8Nf~Sax%Vv03W8tS&dEdvk7c%(Bhha?0~9ghxGPu};@E>Sr*%;aqKd^*jagkyiC@ zKf2U1we*vens=-Xwg=|d`i~`NhbIU~)+rPafIHalPE07z4#CHh_EGgl zUALUR+ez@l2HV@fi~SV-%Ie1H#p!?#Sq?}SX~wT00{;NoxHm9Ne0|AhsW+EnrrId%9)LFBvU?&?Q?hitNeR=n(WuuC7wkG zPrlrU2ECm|e3CNb)TD|lDZhnI2kkojK#tOX5DrA^-p4$Wh?w|mfNF@Eb5)b6@fg-7ey77lvl2FhMRSEt zXFuZ;^E9yjkxm}~kk5CTa<_KKrLlp7X>65d1#T)h_P9)tC>eV~pkOLhw{5-AAr~I$ zi&Ma}BLqj~9uy~rJ>>!GSVWX;=mQf*QqX4Tczt*rttGX-9bdr8Go#~J01t7Y6gs~v zw$QVB%lZ5?iUCBFdRvS-5H-=JBcyaB-LAoOv;nEf*4HPBwRtezL{bS~j0C=lW>Vqo zf!4tB%o{O!94Ym}DkoRhPk_%n=!r5}OOt=h-5Aexr%93qE zS)^v?n*1}v?(U3u^T~Qco;^Ekbz-TLFqIgjUg+++H(7W3ygmTkqbzI{Yx3p?5?Y*#aoty1`vy+!sfSXB^tv5aI2*1Q=dtxn6$aG z2I^OK1QlQf*5|I1Ar?Y@ z<|Rb8U-xM{_y1;Xw@LxOSPl4xO4A%Wsz*YSU5T_cM^Pc%$p3x5SB2bBs-b2qB<2k! zNncwWGKrlP!sD79YDcYon)6iha~x8H#E3=7b_Cn2sO;74u>MTd=1q`eV%-!iQVK?nX$G^f9sB>HO-#PNwpF7PCYx2?KHwb6P zS*VgI5n~P>PL?+58veqBa`uq7c*=KYuJ6;IHx-Kc%WbAIJ&$>ziIqBVwU`m@!G;wm zEvivKoDcz;8r+Y|l*wSd*aDvsc=nq5aisTO_ zI~|aSG}Q0>cEGll>^}~BUeM9Lx`M(@+SJ0)V)aVaN7&%@3z za}=38T~!9&Vhb4*aQ@NK_6zb1MaeeQH}_{@;bh8P-q10_EwJ5E-?Tb|RT^pNV&JCf zJ+ys@`m9Oq+=7G-;1J)j5o{a>Ti!6ebzZ-ted`Yr;@jp8D6%Xxa+w~uYzPNi!hRS?z&Sqjd*SaSP;vD6X`3XcWeOay_ zptnmjTkCiV;)hOUVce*`>ANgkEa6gT9TgTOc*A*zlnmJtnMH3Mi#aGyA0gj>>wn76 z=WVrbHZ=BU5Yk;lhWSrny~_1;txe+WSW@yqg@Mi96%oinzubRnkTf|Xpjqa2IBpNv zRT~e#a5QOa9=@K}%GEkO$O(rp&-#hsbL&(w!8c<|Ki=mo|zF zD&vp=$$OX`CheIruu zeEZy68fuzFg2bMU87mrF%wlHQ&W3ER~cMeB1BwHq+pi2Qw8jzo~g_6X?}e&TeW~<^fEklY6Oq>=6Z%O?hUkhU>6J0rbZHU_uon?boRztEh`?C7#@{E8 z7c!EruITD+7_wk!89`-QNlcuSx?6G7(LS@?O=%?qq#!mOrtmHff)J{wz6zBLPL&dv35)#^N*K3I6|_cy<{+NaDBLi#Clm>r_y9=^$wvFZfPCg1zTXxpDZsm zZDA+6yX>}V4-|b|YguGvo-`OBZ@vPzuerP5W$Hnq7Rptfgb+^+9%W!DlVtG*5vu#4m# zBmnVhB}1gmX>91>WS!EtwS_j(wB&eoqcp(9!u_|wx9#LqTN7GCx-9ddyi{cf*WbH+ zW?yYCt09QGOH>!366`qarNpnfE-?(8xP($LMX$ppptjL8=jc0rDJLC`EbUzt^CaF# z*i~z-5R>EPlNa1xu{^~p@9a;6#(Nk!+){L3r=Oq9&lJnL`ausoJmpRQ^Br6Pl*I%a zDq^eE$;BbMG&WYY7!QJMEi2JgH|6S^-cl!RMnF;JlWIqq8 z$%@E#y;Z3+Y1*(xf^!!VcFt!H{4#vx83U9OE}8{L9-+GyS@u>vu|(Vt0V4T9*Qq{- zFOG<5H+k}y@{utB)n>(r2p7ETRvstGFaNoF3+mvbyDQxN_cwfD8~$TH)bD^~4t(e{j>g_Wqu$So{MO)w?|Bm;SpT`Akaz@Pd`4PEm* z!$vs=0>M$O7obk?EF%P+P;=!g#g0a-4UeRWR1^&r61rI2j#0Okwkg(B>dO z66@UD;uqCc)D{*NrLa_R@Bw7jyWgKHT5gl@@H1N8~ImR+d$Kd&PMYh#(oLEZz7`vE_L{3I{sjm53fMNw6Y*EXCuIMtH zY(JQW7RkimquY5I^jTBsf$}Z3xX**@5TW53gWtlt8ZPy*88?Klva=z`6qj&Rvtf2~ z1=J$awnptuqwWiR;ytnsc&Fm(VdR{CfW6k=wLxGEqGQU^>b=_C8C+5Ls9JmSDeo#eP~aKHZ|2~Ut;2Pc|I{(FQqt9?{sM2OrSMQJU*XytelHbqgg*) z{5)OMY#~v0O&VJw=^K09W@G>}xI1ry#g8{M1tK=@escxMz!0(J>pfd z?+1(}kJ|62h$P0hQ|GBOLfp}cxs@Z#p~GKg2+o~3gBp%lGhhYfxQaOq{qT?$27*gH zX{9MH9oc(KZIJTvRX0!+_ELP6k$AJ>)ul|XFLO|BS7SJAu2@bpOvHZmXj57|yF=c> zPK^lGBJ=bjOS8(88~x>4c~u7OtR=%HOS)yMASTumxU0d){Cz~z+V=gE`Uhd+06K+> zmKMnyHYZbzHfs!7`#3vJcJPw*!(OzlP3k>xfku%MHR0@_urX=kq&`-Kyz!;ci%-I3yg&ea8)-4y^Z=flkb za0E7=&F3~%)%Mrsux9~tqTFNyyR5>8w4*uIzSD=c*7wTu#s=g;eQSSX$8|4x+r#ag^mU9vPS29j0W4s z-Y#;-^D2cZzKHMjZ0WnnO7G%5gUy*-eE}NWzKc83kIyz??=Ph)>tt$#f(Gx(udJza zi~H{EOCI=A55V9wMy0!)vL+ihKJRrrJ^=g7f3s&72CLN9ZQa3}I!q10Q-Y~VL9lie z)l_wb_dFm;8+~`V>CqJDc6+SpbZru>P_ORTF}wYD5-MV9Lbmg@=lUw*=KgAeE*eW$ zFIr>qPb<{jb{DQ?)NQ;sXyD6 zJgQ#mpr6J?Nz&wUDAL}gvoDYos0xD~ckqmI0K444AYRu8C^LRbk$mrCmXDx1l0!>? ztaG-IE$`zm+Z~pCKJP)2B$eIISvhbsG|wu!mW9;?XmeNCEFa)hH(#f?edFVSE!|ut z{*4V!eBLE0_)^!>Dw}vH`fszhffZH6iH6oJJdPKA#B)t8=iV48tPa&$t=Pl#CR-cc zUchKvoloaezeE=R001`#gxj`Qa&$XD*h+g-iX`#7;_uc^8_RtaVZOWkAqMpypQ~Ul zN3U-j*JLpZEa;VKS7yA$$?q8@RG%GPeIZIS$uwefB?N`?v#K7h!9_suZ!8<{M;SC zJI?pt=idBl^acy~HvBsCxJS!%r;fgtJj>e~AP5WqfXs{{Bs*SkexBN)B2bPnbJks5 z(_iil_69#1aH!}D!QlQOY73@yB;9TeE?t-Z8HA(5uYrEP=iEE-taIE^`=qVrZd0|* ztu^KVZ05_c7+DuU_mY?@z^&O{<@Xr}?%!SjfZfMT?Osrj@3F>2O9?e%b#L|)q5EdF zYl=)3;oDJMkq2tS{Uvi##5V=D!cQQOU%U_;0s{abGrIwr9em(sszcze6K>#I^MTJW zGz#HP1#nJGv#u3e5;Lw}xR?qaADSIZI8LfPNVh~HO^X{Ut2vL#>kTAbdN@w)w4kAT z9}wj86A%at0HEaL7k@Y3Zo(XA8Ds!eXdi^@9)Esg9OAHbn8e6he=!3-i~B*ynS*Oj-1-G39_Yk*(dhw+Ae7; zhAjFS{yo3E2<9cmT>Wm|-37OGA~Uwk1Cu%^lnx8=Qvt{_GCNltN8@`vH4}O8`BXF+ zMm-P-kf)A=tiWRs6HPqpVmff?k1AYi*yyJ&N6BjMy=YgRYFqOj=e^~Bv%3qD=i5CF zJ@w_qMO&BA(ylw-V@K_4`twsO-y0RGp~{{K{_7pl&cyZJ*ia+*e1$b8zbRYfkOAPW zdmJ4KW3UxvMlU~d-(Q5EpF=@#002MPy-T3ssdvtSB3L6w(8+9C;c*%+qkD`@+QEc3 zx8l0ig@u1h9bV?~rx;k&7Hj^Ex*xHrSIR5o-&AtV>M)lXbTm7>`wr>J2aL$=K|u-g zfn{VblVU~!6`uWFHS~KFAd%g5(wU5h-}GSDoBtMV<-;)jtR%5GgL|i|XjWVQl%}{w z{k{|;ebi5!=is^2w6Q&+;Q$SOvqNKP`d@b1!Hv1<*;5rwA5aL+m>BTYRp3>UGnF4+R`71kI{NqNm2|Rbd%<=?j@j*t-Rri!XZ?QX}@OP|J@q)0MnvOrY4INqSi`@ zFq$Cv>*t1Opx#cB946>be(v~n2^2CQ$Bx0oN#x;4f+2w3d`agW`ab_s(%J#%g_09C z6A@zYYVg`03010I%|yG?r`ySm@?b` z*Z%ZfRegQ^e9hXl#K$YQLB(j;Hp%!j-PB=-)s(=-w6-ocH-P{Ec<|pL;7IfX2JBIy z4i_PoqlOwXzz0E*B-tM`B8tg>y$v<-2LRlkz^zkTym^RBO>sEN=Hbg|fX0Al1|rS3 zg9-rdzC}&gFXF>;Ka(Ac`6n3WCs%U=1pA2fGH5CC|}>E=jhpmSH$}GZ(&7})zrylTXSP{1kA9ZJi4oN{L3C8FSc*6?Q`Bl> zOOo7cE z!o+ouV|%*I;@vBRL%{e1l8diGUdy3qF$9q8fT4zU^qB$+;TQ=~C%-8XVWc}7Cakvg zH%N#vBSiOK2$^5x#fky6pbjC)FEJbgXCU!RjWKnaBv*(`nWC7n^;`CX@eUgEZ|_VF z6XfcZi;q_Ct9FAFnITQ>s?{@)BY%~A&gAdOJpm6FyA_7OfY*xN(?batun&Xq0>B?4 z_c5xIjfOyaa=%g$C5ggGRSjfU&Xnj4wqnf@N3T!wVpSY9is0}fP^LtcH36O;Za}{M z{{BudD^u!k2_xMP=NQghIOEO^PLu_CIkMEG6#R6;H8DDj?Dr=3VEm1zyr$jkfCv7& z?skuXy`p^ey`~~C5xMphaF?FVzqe1~7;+U4aUjYufID0);kefZz>|;Vk7sJN1WA5k zFrLDAQN!8+og70V9S#-Nk3-| zqWtNJMOIycOwbn%fZmfCbV@yh8HQ}7-lF*<$(x>~zup;6x9`2f8G;e2A1FU<67Nqc zZ#`cJH_y*bnbgm5UV5f>4rKpEYAYKKzH!q)e;A9}GS5(nqlV{j;`6+L&W|9E^&gE6 zD+YdNTcgQtBn%>>yAZIn#S~g9PB#9T?Su*(-dDHhMYreYebnw}>=%T|W3omb76Y?SyZ*ifN6Eq# z++->kVC`|Wb{;!nt}po*@mRO85Xa-LkSGY~iy0sG_xGnQqe+FL^u)H^>|P+7>kCt+ zWNNFGGV`$*PaN3X$k4co|Ht{cD-*kZmyZ&`+wlv5Y6uq05kOF)K*^LO_UZkt6V(<$ z;}N|$DA<~G2JWWndz_s-&vVx0q-VzMjqoWMXlx@Q8TyritPTeo}u{rakuR;S3fJfM24j^Gw8|LGAn5j&m2y%T$k~!8mp4~W5A*+x=&UKHQG;_M#!BPkAX%+D zRV++6c(oZLT5maL(wPb|A2$=npb`a;MzCmS|958Cej^N}{W{F+%*QQ^+MOkvQIC`T z+f7%?=M6S5De!P@skV3ynj}U;jGmlKj`0+n9kV`lah^;Jrqcb`S{Zc+N0Yuh; z45{Lzd-1VcApAi_AM(yYxmxUK!ShjclXP1ElXNP68hlHz({zMH5p3_;m-0A>r((l2 z&Te%Y9O;1=xd zH_lbqW!p6Vz1zLZ$AhrX_tWWowex-F%KHuTj{rJa=dIzzL*UFOFSC6H!zgL_Rbz0&x?Yj##{aWz~}Uv$!cRDo3XYLo{rAJ;(6 z;VEQ;Jy#_=uNp>&a;{`m{ib~!O~b*9WsmuC*T@dvK*m|YMc!%<&Jc2xODwVSRSs7_ zE@`9*c(qRCi~XCR(8CA5RlbuuumAu$82?4<_NU-nD9`G*)Jt-iUHXLk+d^damfKEMX$Tr;|KmGhej^)e0zQT#` zCl*9L>d7{B`L9B=wZrJh|8p_1qeaq07Kw6J@z*e6#QgOGxFZVEDN&$YQC)@#*45hB zHwTR}ZSNy^{1QCHw+{YEBYK=+3;40)c?=AcqeuA=LxK@KI1?)0Tx3ECO&oLJnu(!O3u(d9 z8DkaOoATIB#0(80H3e*LF%Giy*{3%-)8G~}1g%;%w=wW6lA=}F$4c*Wb? zM(W0@m5ipTvZ7;$oPLy`kO|B_^8Yo~e}$iazy4_ectCtH4O;kr@mdUkHPkXQcg;qM#LCi6rWEMwIUXlluE*|F(J$L&`7|?) z+W)o!YisXitbw)5#dFU@aX$iI-TrH-|Nmv<9(__|KeOed>S3Sm2E=zcH~pS$%tzvD zZ_R!IcAu~)itetPK8QqcjLP|q(s@|+@;tS~OI&XhDzc{4dDk$*GxyVTG8J*6qvAs5 zmp5$F3zX@O>Ldz5hDmNkb#`~a2liswcjNyn2sDZxv2{Zk;PPx&{ z;Qh^xzDTpLOgC)2>JAQ3V{+5f+*}IZO_UXVO|6HvShMJ=lcC8&J}f9bR#3SNy`QoI z4IQcdXAX#)I;Ym5Pd-hSCyji)zXI*`QN#mCUKf5t-~aa)*FZC)`c-rf+0bBmm^~li zPo944WPadJ?)(ex{l0Hz@V<`ow~r%tBXQ~AM-=RHq$e{A=Z}+$!{PNvk?p%-4gSV@{nf0n=DLhha)pmAV(cwq8Kbdh8^3#8@)FZrU`(x816=tJaMv5kv^U6)cq5LLYSdekMlJ&b@N-RHRLXt^?aM^n%1e2AIMHA zD)$Er#BHOlH-N%j;=_97&*6p)5IBBq9w-6%%r4%2rHrwWr|e)L_lRqJ>yJ!wwOpUf z=Z3D99IQdAF>pDZjC=BVKbfl9GD9B4I)i!YGw_+Z}86HlOpr}q@Ab7WPza#FA81}_e}A|98Ft+T0Q)7@Uc*rn^JB3Tc6 z3KXdDTIdGFAUk+K|$sO+!0S-91dEK(Bd&JJ7FNo9;Ff zbpWk?T!{D87nCL1fCD07TSuO;*nw=x<_D7zmUU-~uSn^-jzw98CU1lR z4d$ZI{Xf?u7vUyk@jofWmUv1F#_2+rr&%}NSC%!~shYDN~nwmZi2^b$dHO^YNMLx{4!O zEB>^wfVwPbYS1DD@dJCSmCeaVsGqi9Zu`^I(|16oyXK%U`)wmw)@-w5+oYh!`)>VzIhujKhiv^|b zgk(8Owb2Z^=xowWY0JKXvh>x~u}{{`K-($jPQ;t$G38zH^4%gfdc zHAX|zW(U=(!W7%4NoG72*6PT`=j2JE$m8LCW?SEqD7u;N;=T{aei_$h2!0l3iL{UiKULqpQfkUfjhbK94 z2{^>-<_IRpC*#T!)W|bmapMk#ZqF9O`yZfbYo?S*9XH=@!+;W6**~=p)0y z76!3JNFcGA+@uxHU7+J6_g1PUf^2u2-B`m0aLp zqTy$O#lo26$mdgpGhky@oUhKA1*Hp~?*(VP-Y=g$c)1k;3q<<5Hl*zcH{6d#_}Wx< zw&m;_T=cBNb#~Z8W{P-Q=}Te^r;|Tcz^{s@#>RKaa6{5x>GkiU+ z;IqWrVXTH(e%WtO$XcPR4rVaQn41;S%y;U%&vNbHT&L~y&2mJbwgm=wg^Hg!u?GbA z`jxLzBN+d&1Ef-x@FGb4Nn-4o0r_t!%|SnpH~U&Rrhi0~zcvVmOrh8tH}O!B4}_u~rt$Btb$ZD*+ok zwxYAS&f^w}C3NJBUiZZxGeD^%=o=Kkz#B_c;RO8tW`ESK?Ha-;-P93qr=tvabUznxHYve^Q&-vYEpYT`CPqZsa4T&IeVxalM09X zAD3losl36{rKEU>-w2@wF~pL|Rf)=6TB421cWYD&!v}BLjlf{%Ru}91;2g%Qp$b?Y z@t z5J5n^C$`8to<90JIyw@rXaAv2R6qgdgij0{UYkVWp6W3hWYQl;7hCC#rH-iyiATMA zs&A^10>Mcz)ECy$CP0cfy+_Enf?!`syf-k}wT3KX33-hE3|XFNR3&c3noC6%Q( zq}M{nx5;{Z6kjlV#hq?piLQ1SK93s`mwXZ#gS~*;536sULgKzj$CxdiZzD@uAA%olby=p9ROq z2y%-FobGQIHCSFfeYAITBMp0QRmyEib@uG20F10`+5dIO9+qFka|q8NeLa@nC)N2r z8|U87@qvSjwtmYWpJSi#rw~N>U;zzI9C->u+*;*!8~jX?S;#^K2wBo;6&%SfWX^EY znqirYqkE{B-OnB-?`LKT9#tnhx(;@@a_+kI``XJIdzYu*|@n;1EDv+mW;9C0J?>~xj)yQs~CDAmN z($HwHV%oTlFGWLpq11*$N?Hf_WVdeMzLO3y{c2_jwwS_-D~{(2wzSUvRZeBJ~>X_a35p# z#Jk}{cp>Dz9fL6)JN1VgLrTp^nNR3S z`GS|pgh|=;Nzy&a!V|k0W36+2oWmB_rsf8(A$F(|j})J-cb`Wf{6=Cp0m1FQP&aKu> zgPIto#_41bB2z4OjZo7amZsHRlrLzv78$>kcsfc7bqGiN_$|9MFEF`SKB0S}+okSM z8Ph0FUzkwrYq`BNu~ ziiE_74BShE|G5E$x)_zH8b4m&fgTM+eq$(lIf{~L31M=`qUD{5{bHeWDa*AyX}T+&}o!PPWmur`KyA0Q$vj_ZHKh2t5|O zH#nghF)o^G-gGe344n@mfx~;mh%#RW!i6y)d+bmc#Azt*K7G@@r}|a3FAU2ze$IpO zlM(3|t``Pk$0kVy^;2pkLo!N0aNNSlNlV(uNQb2DnTl+{tE+fOS_R>WSBvo)X3O`@ z5C2MPeb+C6Pr=tgpmN5M^P|XaD7U0cZ-;qMW=sL+*if9uOi`}&3v((Q>vmaal(qd) zT2i*QrGPR!eU5%P3{ORmLQpZVft5%4`bhLa*U^xuC<_?3xW+yV$X?_?!$5u>r#<*1 zR}q#r6CE?MzFlZBCG#f*FG>@oWcKkVEx|}!Im53*J->6q9-<*pMi4*m4%>u{rY<&< zpw;KZpW3I_o+#~YlSswFHGa8exmz4YXCh0 zz5JL(jg_r|=gd;r_((nLvh_H>%)85Bq3$hy_7(^0g@=spUzajnm@;OOXkr?EC4pGLLzM7L5Z=KGgh7WArQ zfq}*1!xt(DESdsqv>T{EiXSn~2vY?RT%RYa6}%gJ{Z@@)OSw5AI4>;}C3%Pwuw7iqdQy_t=KaCjPL2;&1QEzVWV z+BJkrf7aWy0@k!Xsx;3YKT>Nmew6u(e4rCNx zcUk&$PTm$e!dHAM9e(ny0~^Q|`Jr^%BRrQ-u=AwLI=O0(yPOXu1KRwexL0qey4vO% z+HLr{*}IqCi&lZ-OaYNR9GFZZUCja}%G1}D=7kB-lAg0~+}RKydO!UACw+Kx{8^r7 z;Q3{EhGvtVEldKOR5BLPiV~l>TsnNY*g76H9QL7`k0VZ?!~3h{ylzhvzMbKBEY=&z z8+S70U4eQlQkt}1a!u#$d|;bR6&k$1GaMcm7S7il=RP-+ zcI@K4@Uge^k|xF3vozcC&=mEMrRi1YPgXuBM!>JmFLc0w`Y0(G8z73~b>*6Aj2lqL z+M*MfWXQ5RexTqS-f7IM8UUV<^*^|+KhcHnF13ASY;h5Fs8aboqyiZ&fP zDOt9a8X1#&g7@wV8?(pG%lhk`>@9nqopb#0B*7&-h`YfTQ2s~YjX&_bqH&dSy7pPO zd>f0qRyh{@IV!Q0&Fbk}v3%>N+WdlkG%Q5;Ynv^W(37Ruz^+g_EH+YGtZ{7mk7?}O zjQ4H@b$6Y!+=vPRrY^;uE*RWqFU6+T}jqP zSL2@yjLQlt53o8HRk&W51~3CTQ2SQTXWm2yPICnbvHN4bSxY~1h#h2nq0UK$}N zl9M!;xcPMQqzyh~<=liT-Io<*@EX|e%S&Qp$gNmEy7N{7mzPsDg^#P7kaKu~8Ga&o>lYVyVzj;|b5cY3%qf zu5h`!8#8LIQRVLOl^M&&z|(oZNds$z#D6qxqi5k?`Fc2VP+N04Z&)VmIH;3tpkuyd z3jCCfi!H*nFg2Mhq$5zSL|m-CDkE<7wBJ?Wap|-hHQkMk8J}v*KMUwMRxP_9f+kxG z@$wAS06s0M$Sf~O%ibJrvj%qWOG%BAX00gFy%jywK>*jv72Zp)QLL2BSOn`Hlt-I)RnYI?z6aNC)dYGfHW`eOHuT zeR@ipIK58FK1ha1h5P95LXnudxaptmW9+E-MWMn^*0*2f0lIBXMCj0((ShWy4}H~h zI|lB(c8ZJ=P{SDY(>J1{3pkrSwl_zfO_9kRWd6X)WD3huX8BKn$4e1Ol1AjCV6TllU5DCe z6-cE=9I}hTbvJNDlPX_ZV{9UB+X26Kyg9dY#x%wA>+N4FKjMFufM&}Yt;HAXY24(o zQ`_ZpAiiGnba2NUIr#Gj@F-Gx3tQTjNQa&j%EYQOI~Ga0O5gK(*O?5lOUAQuXm!;% z4e|pQuJQrdaFvRCifNHK107W81vfgVM5rcwwfF6jnU>L%u;s+0O22jkPd+@cs|@t; zf%X@^xbNk2ulDbxKeKdG&3$Bfy?th|!ocB8`%fZPwh(xtluFhJ!+SseEMiBzyg!jA z-Jtgua>exd(8n@h$p^RbjDkLA4Yv<|Y)oztM&GMzj-MQM|cxT7A%I) z=ykfw8ia}YWc@&r93(!0ulDaezRv^B>sAhUHg;0`C-$t@Ul#?z{!YJ=UClZZ`>x1a z0)jv$H#cZ@{|+*%m}nlzo%}TGQVcur|2Qq(bpwB?tmN9Wg%aNW{_Vwzu5i! zu85UreXlm&%&vfFMsUva_Z!>}CE@&hxxI^^NIOValGmKiB_r=+U6RLO?G5NT#jP(w0&dx>UO6dd zeM$onD+^#|<_=qhPn25Ur!}C24CYFeA~ac45drda5uP+5nO|vbR?k}40cxYA8y16h z0vObnu8gdbt7`A{g3mCWMIjaoSC;}!r*c19+XBer{l(7n>8v;tbP+?iF6;>cV+ow$ zEJ!@Syy|ZF@jHK#gDn7|oTiqB4n^z5al|NP6fSFrE$UPftd@;tOj?6rtco(lHX1vR zJV&0NqI*X5e7oHm7s@TdA3FbVq!EAqDwTmE;sj)g-Ox{+$d3!67iDEfGQBqd(>0+B z5S9<}>zsVpgp_gPoKS)DO@z&YdNQ2MnV<8!tvDgLIh%|6Zo6U3?kaa%Wu3voHoRXx z$p`^C%p!|^33r>+bDf@G#ZGIBeN0pqrKUA1I;{wY$p~5y$nEiJ&yd8b<#0*vBRJ({ z1U$9^`&8_7UU7fhaE}`ncn#%XJN&wkX2=!ui#{Qiqvd}_HP_-H!a?JpH9H3t2>%Y|p7=%F&gLo8P)Y(aQ`*uJ$%~M9uL6#UH)cyTTG0BK`1a!l~y-amCreYFaz0p-hsVGV9$zO9*!ZfLd zGC@esm;s(u@A4%5641fgw|R)5i<6SZG&i@%?rDB~3rXL(DdqOGWt_XET0?ESmLDUh zw$Vwn#3ui^QCfV8ZQ1ehq1|pdt~DC0r%u%mC@-pU>CUTfzzr-@k~<9K+9fIiRBXT- zP*WKh3UNwVVq+Y`P``h4Wseu7e-&I^jegBha<}UU=7j`*O9J~Zs?h{ag0B70 z$&>dn?*UKnX`hVsMB$XCpQ@TrPXH&#uZ2nVvrBMu8n8hqm*2DDasijb+g<=n9the#O3ye)k^q%iHPv5BNPn=2cOQQ*a4wv_GuhErpqnPHMn5h51H`4exrk40tS zrC|kCE|&n+ErM2KnZ1NhF!t4a5-R|CFlWLLUd)H!Jz#j(9t+`|s8YCSUX<9Ov)7b~ zdt9u29(l@^R`!?aBjS3h$bd%`eSEp*I6~kGLho?#t$6^`I9jx8LKnL3JAd+m%O8b_HXg38z- z=xxUYzKO{nF)&4n5_+v^kAg7xOXFFWBuwL5fNA7YLG7ERBi{H{YmD%dB8nXcu#?E9 z-%CgZXTqEyb;Kqm2vvGoMrMF7is*M{C+Lqo-1ZRNeQNeTD;L=O2Vmv+654B!Dl>5C z#KFEt3G;#n3X+8gjMTF2Hb$fGITFtW$+;dfV^8_AlRA(9yR>^PQ9vV|Yf`Q8Kp7-G z10M{EIXEoj&vF&@Rc8tyfq^Ls;dN%*GdN5UC}?+Kyyt8_heHr+#+-_W(5mFY$ijE- z;w5(ggmf8x0VTzKDWpI*so!(T=EwZz)9U9j;^#5p+oHY~TIZ+!$MEJSq@PthyGzZK z_%KC6wnwHsHww;6F8F!j@ zU#iXF8tvE<=rAIP{GhUT?%jjE4cK8@Iw3(i%>RQGNQ<5|e%yBgPM_@{JJgLs>?&|N z>P`E0aiu1$^j{C`_=`*VG%tEZ9v3e4JM7+~BAwQHeoV^-LGcGzbH_>eY}wu4fS*>a zv8=-mu%Ox>D~z2Grl73fBBMncHYb*JhpN0yw1Ze9DW}t{9*B5Re{>;s-j076uq8Ie zG6yudRdyuQ;f-P>x3C-7u zIdN?sy#*F}OdwqR*AH`b`F3&1j__V2dwCgt_bFt5$Dnz#Nqqjkka)4`_fYGny*cGx zvlc25u{;aU_gNaWZhQZN1UNa6s6t!A*~KR&0%jg>|IG>>W`y$u=p|#f9MKsC3^gZj3VWq%7tA z!!O5R^g_Qtb3CVOtI-2*6j_hR% zat|aybw>kW_W0^c<)pOPR4mUCIvq3}hLZ81Yms{XZev*G?GyYu4`2S-4#i>flFe@i6qVwuSkwAXs(!%e$nTH{BZhr4=SI!+-K zesz`N3cCcNdlXQe*qW8EUOUImeJGCfzB1PnZ)#*=D00CWKc@Uw(8@f!Sy%k=3sDa# zE7d=;)q4QS=hGONlg}G&t{01FJ-ImI!$pgaroclLIa4JsU2wNcSn$X8Y)X`L3;|iR za23;4j%uCi$UJm|tPjz$#6-mbjmqvA{5_7qjgcQIT%?bf$#>5kWz2vfq^Elq*wu7l z0?7#AYN7#U&M%FfuRQ2reuB*HEBQ~Z?Qaa%+2iSclI%Kf2a|r44S);d=0Qe!`1d!{ zPLaMA{p%l-=}u=8jj$C@&d)A%r6kKpR0Z&?Z=-=vOmN}TM9XN|KADhxK@`4uDHhOm)UWf6V(6;B{tygxK?qBTr%EAoJN;lZfL&1Tb z33t3KEy+Zo-Ox3zl-$Fm1PEe&MPe=is=Bgea+4#00eU9|{PWL=OmtY#!{ykZ_8 z`1|{PDF{j!{u5_@8#=++vEE+a51o8AR4iPJotMEPW^~r7{ABn5)<1)C?Y=~rO;|8y z!P`f$j$=fcH7P_CIT1~mC~gGPEkbm=`;D=M7P%S|W68Qffs%7+on}u!OC6|h_5Sh? zlB4v+XbIG6TU_8{8@RNX0v`8+nDlL*5383STS=Ebr>lOx?<;JraKQEOa#MAI>ASn`?8dGO5}di#>{+_C^%RWE~3JUuv%}_?YeZ)Tx(Q zZ_rsH_K6lm%v=t^)oHn4eCHq;KqpnY^x>w>S@94CQJZ#wW#e|+;wv7_V|Ze0pAw<% zBQ-(rEYi&r8dA10&>s{#ybts2&7VGg;MnXatC(|{lld0 zEdV0mXipu|)P@|eLVz&vYlwn9{Oe9?KTyQv{_t-A*KHl>ga{O*8yAY7W8&H^GQt3= zehSB(%ZTS<8Un|4s<=H|-6VqYIy)Lknr)1(;pG|zo=7j#oxzLO+L$AixK2@(4wbU4`}1@m zKM}D#EfSo2V3W?Z;##7C{I{b>q3q%@1=gc$QK2b@L?2pkvMHdyEa!WdVGTHFU$Q{W z7$*KcM$xP}41(VQjT&gY6!I1+p#{od**qJya5+g>Kl3tNBqHyN7hew@H1_VX5 zHE*VLa5KJ7!tIC%b!L84CE$Q##FUKPh5abGyRhEADpheiy@A^h?= zNYSJ;9vV~glhr#PJP-TE1{%5x746PTh$wAWlCGPqTqzQRh!G-rP(nxuDj9yWN`>G+ zdZN)pRPb3r3v1q2?9RSED@}aUPmyp7RG@|x452G=cbT-}#ye{piNCN0Ts(tHfXW8r z7n&f*=hXeNhjGi-B|CITmR&HXHoSDdOm~A=*3-w5Ps{uGv%bCXpKw2B^ud%hjBxgG z*OW;@pQk$%Sb z^H2tKV&9RzF%skx8WcPXlPrV2NMK9gndeg`>jB$7ca0%OAZl&N?H#}Rl~B?r;Q$JP z$X)39$@_8r|*6`-_USCgGpfj0Qd8vLo#^)aNs=8S~piW&Y1KHW7^-o8ko;jtGMZN`r3HH zZP$Kpc|PVzY)sJNRk33`9yr2-Qoop&xYprOeV{l0{&2hw*1vxFmO`ioSJKe8-VTp5 z-(5dismea5>-k8nY5;G^u~NBNVP(_lvEQ>-$`-rR5_~N!`1uTr%|pTo`95G_pOw}1@`ov!5luOnwQuF>9|&8P#6Db{UHzV zX_absX2{~WrT1N z1!_~}d-jc|4Sny=dG*bcoJf*tG#pV>B8K)ysmVIVcv=mzw{0z!&X?Iy=5P!eL-bAyxunLxeX>q+Ta{B zPdK>09^QZamUp~K{?n8hLBDv$GE+A4I`437M9M9cTR#V)UI?pWhP3Q1dOfbf{Ta4E zL)gVaAtBgjJlr;U>K$pO%VU2ur8bWp+hrr{GmfJ8n0snAiUCgX$G0xxCuJFj?&z7# z)aK?qU&VTl*5=T}+YknC2kL`YW$|^EAxaJpLdYVQ_P_#lu7%{;Y|uANMQF$D z`c{c>#Ml1RPn)Di`f&XA`e?JstIvC|w>wok{Kb_~Khk#xF)(Djx+jM8DYGQ(HZ=Nz z7x!gXJjQgEXaUQ|XEaL$mEsVzKxx|l*USt*Z&MGtY~9t>x%8kN;~w`#7uyKTbaC*H zd;cilUs9k^aj0Bch@d=31KEhM1UM3z^QjO@2;EsPjfV~Tp3!eJ^23!el_c95#4!3=Odt2t6@K5>QnVu9=Ej7D%;O*-1 zgLCe4IwmgmY1K3`t(zTR<@EL4?!V1q+)bAe@|vGpG&z)H)tN5mf4or$U?1VNcvP55 zTJ6-kPHVij{=6PIp=Wln-JP;guaJw0QB$vH5*h71Pf?G;UTT|J=&!@whhJpiXt;N& zUpu5Z$Jy?i$5nrM@hWX8)?%pR^0;jGtTC0IThOdnQPr`yU79TlB=itCkRt*I^NoO#_rl9CDkW=`7FZ36e`s^;d3U)-R5scVk)O~3i- z-6B|Y>h{7*9Y-wv#CA>@4_W*%{Zg-t&>YabEOFpPS2}>Z2plg~FI=Ja*-uaGWiNk_ z27E=-SOn;0=vDg@AKk+I7pP&x3y5cGigUVJ^p)}Pu!oO8I=3Uu3v$@hpJ|(;bT@Gj zAPDBC42$_@Kjl_eh8RK=yJ0@nY`_^8V$>=f6;1`{#vbjP<=_3F&8+Sya9!~cjFrt( zxw42NOQlbh;zo#-IrxDCPtyde0wWBlYj);QPNW)+;71ULw=7tV{qFl1HxM!~`;q4} z@D${(j4RH9%?i-f&G<7$Bin6F{Iz-98n8EH&T<_4W_y`4fCNWG)Y@x*G-kp=zF+81 zabndxuI9;Xui4nNEu;V{`A3BBd>1ufTEbnwMj|z1lTEBfQl*xvfH4R%G&JY?Zx+{r zguX2qddu-@>oxudU%K#W3A2a_J=V-I2w6zyo4uJD_N<8@8;J8bDxB~l!#LSgjTV#d zBS~HI4>x`P>rWstt5z@cFc@|be0hygQZ4oGVSzF_9Z|)wc8dr1o{~^DcV$IVw5U1& z9-Re#_>uU=xTwAAma+n8T;DxL#I~9o1#G_zf|~~|n((#?k?v5R@--Hy_%0P|!swn; zIH^e6w?vum60}jqO3#Lczd{tjrO=s!X*u~WjjVhJ8b#J zp!#IlKf_XDfj2_-NMDXSs2s5(sj9CkbWDG3NurDR%;wCprm{z8_(c@y)TE~<)}|@I z8w(0>Xw0iEW2Ss9gCThMN-sNX^F)y@7H__^^y#}B!WOd+8-8OY(FdIzi!I>xCJ}EB zO01VC#2l^z(H)D2CYUYXq45RtO1uB8m;Y6OaK!6rPm8o!hWwGLmOznukL8&5qa-83 zo|86V_{sZXAOue|9MAw%qv5{gBEySSh?T8d`|*~Omo4s(lQMVyLBYTaxHZpkAHLs4 z^9GspWMa+g4t`vU*T4C07`ByN3txnYxvRMW^^@e+qN#&d&%XNaADnm&*k=LX z&zx*7{+fbr&%kwL1`!tec?tAuI_|G!Irqzi03!v;LvAt@33Af(H6*)L9@3%v8wvbE zOxOq_Mo-V?4eAYaPhEqm|qt3|FSc(>rYC5GhYanNpZ_sIV@2!rZE0hG}G*5OWx zDY`v=8w8X0yVmUd-o>Bc|>HW z_G^~iyHG`T`kW0h(zxX`r6mP?>hkQOc;#}~8eAyvM3Q=~J3yZCvlycowvb%Z-QXd& zRXTo+9!5S1knY@yg%KqDB*2U(V~-!*i)gkc-D==k%dzK77<4S&v~;7md1?UdZNxe3 zTTvm8We}sylx!(iV~{CNWx%MVnmcta7;z$?z=+;{=&!vn%)z<|y`s{KRUg7Mt=-oJ z1!16U@>e#8!8|YOSC{BIWc}N`0)+(Ke9bB?ZoF;0Q}xAFqBarRg~<=e*TPnP&E$p? z)QQqFs@Dg+KEA6Nl;l1;R4sHz-w+??>Rq7b08JJp&l~q~f&)_$kFHp~N+H9Fw)r{) z<;d`Ej){Y~;%u<^32R~6%8MFYOPeaH^TksyePEcK_cvZ;+8EWwYUQr5h1{oFt5#*W z=6fXp3nPWda%~#%aO3!Ar(dJGLq>2n{T?@R2z84PIp!Ddr<2?n zO-e%|&w&;5j~DaKh%0{*<+vS+N-U~AY*{peyqCKFe<)FOkP5X+>)QS^NLM5@5LZC_ zn`K#xYHzMjzg0nSO6AKcK(ljK$HBaiv??>w1*J@)oF!r#8I5l zYoet(_?GM&>QLeKVDHjU8~d}egF$c4=Jn@@$wWl_6hp``MN2~_B5X3t0z%=KXOm}< z593dRuX*m~p2K;%X?x*UsjyLs6IszrD-*TJ@u5-D=jABL1cT88LS(wAR@C0`W32;e z+hw;{7*(y#tvdh!f>lEuyM(&dEY&M}v#fjZz8f?96&X>xyQ`~w_hp4q=`|0i(s`Dc=>!V~5a9NY3*6rb z5kp9sER2ekyFw|s!!b%^C(&8wh3boZAY=Ejw6V$>{!JzoudeOq>*8LZK#Q%G+MD21 zR(2Z0h_jk~mYG4OBtc8@4beH;es=JgA;hHjrSMgDw^oPVFQ=@`s~-vzOq;`2-7zI7 zkM6vjPJEwxmaglP$oBkFj$22{I*O&}& z@|Nf-PzoR1E=dxhV*M~MojEqCb~eJ_qykcf|7h@szh*$=MY95>yd`$W1j`NHmZEAu zf0`xpS^$R=UTqkb`pakuo6_eM9v_iggQ7gB%W?*R*FaCttW1AchfZsUG?|?0=T{0l z9Fv}z=3|GIwuQ*TUf&`TG>6vA{dnU}Ri_`sS{}WqD?ZRZ-WhEMSEfjn%iG)?ZZov( z@-|u{ffQ)DY8P;+GI=zaeO~+?ho1XW;C8l_in-L6^tBXdmn9il{_CiM_z1NE;pjge zbNHedtQyjUORT&0V4Cr9rCDYZlxJxJa3u-Do9~AEWh=;H%m75u3U$VhLDu4W-cE|| zA9qK^PyX&q3};NZpihHJHUI=azd9%>#t85c@59+ z6W@$NW7u5m;2PfoAfqowq{5@(tmDcNh&CAR+I~pZ88C}%xVnRVFke_CV;*+R4bp7r zGlmh~C!XWlbT%>U&(X66;A0NzB(GQCBc~M9LFlBhK}e%e3Sh&Xa1>g=Wnv1HMESaz z*$FcbqKMasHX6RX`n?U(&D}c|tT3PgH}Ygmh7>c4#Lgf}c0qNNs1g&s`)?uvzuaka zPP`b3FgtRPtDb+Ot3cIi8C333V)_}Mm(C-gn?)xq&$5ulV(SqU-4kQ9>EPg`5!ajL z4xMl-H#vo7a<@xy@A+<>m?I6ms@hYBw_O+3cgw;tMeVt0p7R%MneBYrs;#=MbbWWV z1@fww+%{jX$MlZE99|jp+iNTvOAcd+My z@ndYqXM2E!Ywv!e7WV6xQ86nYj_lT{r$5?+Rq8&EkQIr~AFY?F@&J#dH}%h*)j%25 zH>1mHUbBuU(1~<6bn;6E^NHNwA!i>F+oMK5K(@+&nNH2Iv(Qh1DV^2~`!Zg1E(RwX z{T!7p3L&TZA0GWVu8n}|%O7qfg$}$}Q|#*=RV7L)x*bMTn6lh`y#h}IxTMt2H>V7Z z)nOM|RVXul&t7(Fckz%`8}6qk2U+DWrgT9D5g#L7B-)m0v+YFKfPjb56f7wru-W@Y zND--zE?q~>uJMG?*Ql)0Zdth74X^hZIdCVsgbP>Z6!ZH{k9T?(!@Y5Jy~DFoFNV#H zpsGHC`}5a4=)N`YL%{W@seT4S-rta|6#Ty~A7IAck^Oe&>pBx$Bsa&UelzV1kGt$5 z!=my$&V9~CGQ&Q&&m-_N&Y>@elBd-5TidOs)Y_i`bE$ndUn7HV2IK(|uJfE(Lk`IH zKXslb=98C&>($I^An$)hoT?hYXrn_g9S#wU4exLcmEstThj>xm|hM zMlq}+YDUAW3=_1s7W#qp(mrmM@(MBT&e)4S?wklcTBT?|BGhX|^TVX3Z#GwB4-n(- z+UZ_Ki`6}DwAX!-c|*bdV>w6s_YSk~q4oN#PqEvuD+aX5r<7b%6&saRwB!PEQtJz; zcMLa9K5tVP2*9N@gjO9ZM-r*AMU5`?Jv$3rM(}U0hw0o1=Ma?4_`(y2M}PTNT-%Du zN>`dMrn>?bR2xJYt$muFH-;LLH`ir!2U5a+@4>rWtW_2t{ej-~kXdrG)4G_s_G&R( zM8p(ZmE^%Pwd>fh{?1qyb@M|ZBZx1*@Ku$qLb-fgW@6T@)|26yK6;%#{G>~ToKK2-tlhsihUsbrXAm6N6i z1e6=k!0H-Dr!S4Ogn|TqJXE-`oVo<8x?PL11!0(azyt;A1ctqt31lgkiO|9+P7qU_YB;;sT#`wWGwx1vc z@PxF2eL)`aZ|h5p86WOa+xCpf)MV{AA1w!xFVYc%Z`-jA1bRPz%H7RA+Wbx``!NOzX2#}X9^1+TLi&UdGKy?ZVul2 z<9)pJZvIF7%qbCsJUPFI4r<&%WjIL*5w*|go7T9o_G(*%2%Wor-Qc^lYf9!SnUZ?h z!*p^{CIa&TT(dXK)(Ryc`_Li#F7&2AzO#vGR zZa~u{XCH~GbcyXE1%6-FgR16h-2F!oB!aOfrLQR3U`a5?e+ExrvYf|N#)Q-&SuiNngajO4Os=BzDA8WL z`Mo*!5Vu3K$Bmny?1VOCD`Et7`QxT+VEB6aGRCgTkB-zC4hK_bj&rVM*1KoL# z_?T?H2z;$p6}(|w>LTS_@H>gDsyg^Z&}tY5X{B1)IHx?J;w8I2Ze^Z`V=*oSJW74+ zCFjQBYy?x2GK4{6Wneb4s%-Gu1WWX3onFlmq)U#=b;3Tn@c8S@>ym@L9l{RUJg?ha zhsxJbm7VoBAMFbl{L-u!>qhG(mADoj3LH&G@E#!mpWAiQ8EW~yG_`}Bjo^)tgVKP) zkQhzXE{AU^w(eJm&Q{45cdI3hRs?s`uC$)~E^XC?j^?J2*Jo{yD~R;0a>cGGEzOYq zaD9aCO?et?)E56Z5^@*jiqFQTN7 z!%fQ3bQSMTKP7la&N_4!na4A-+8!UWfqq*pHtk(}_@w%Z(?SXE1ETx-&F1+oOsjR@ z_3!eByG4Fcz1v81;a34dIe)kna-bY2oQwI_HkRopAwl?I{;$~#^Y=jPfthGV)`QqU zi(|SZHeSZMuKq4;EHV4=UCT<1SS}sS0~TCdn){T7kaeJ&rCCEvV);WF^u;ws4Uy4p zEW<{JHq(eE4_X9v!bq4wPDNIt6Rwl2_Bu3pujN17%oCH-n(*qjz!h(dQmFHOSdyCNZ(LO=GL0Z|Io( z)J1Zq87~2+nOZ%DT#c*VO;qO<1R_%h=)%U<8TU{6! z*D|Ka{rIrwA<9f^0_4-Nc!zgpr6U;JZ1|HhrNg3=p&)j{(p*YI@>`J~+o1K}l`WCcr>upi#u+gF)cNX{=U$SKJd z%EZ!MnJ&zG!6vt{jLCz?5K7NeE>rTIty|IkfIn#Gt6V=JiYrlJwwl%101aumiwfyS ziXflWtPK-jDT%;Z22PjW$q~b8*(_TFMQY=H_JjdG{lOOLUydK zLz;#%GOT)K`e?Xy-UzX7LHewPRsc3cS%u=cXA{|GG%Tmf>lMhb4vrWuEuzO!>!M%nMapB1u+UyMa8-!)RVD>i{TGk6Bfs;MK3-^TLMdlA^o@Qs>Y4_tltb<2l_d@f zw>kilLpF7~Ov&6VgIMPlHTW_pO-&0a`q*jBkXdUUXd_a^c}`N5OP}zaco5zO0y$_D zwB;gp!r_(zu$s?;x#0Or_gHOL+fcNknS;9{mP;eNp2XSt#}{#9Fp9M5_HXXzpUHJu zb2hePWMuEz*6{S_FK1rWD+Wy_j-2o3V>3ROo-Q*dcXyBNN>orH`=%w(vYUt#j_dk- zfs6A`LofMNr>Dj9m0qvY=c{~J>FJ=w9Zln<-{U+-$Mr~TsF;|1@|TQgUV5=tzo_DatM& zrHNEAj7W@lir4LWE<<M&MZDnUh37ElszeStco8A!&P6K(mjtyKQ_*YaE055PhjH>6!`$IgeZzMN5n92 zXuJl@Fq=WQCje@#^QxO&Kj>(uTJpJ5B>7eOt2=;qD7>-G^QuX!Ja>aVfNyoh*?2;$P%3cu%pmxhQ(Dd&L;g*{*o1^7g`*}4u&Y~~>EC;g0DEVTRl{$CU)<*&~mJlF5vKrN%DnhiODc~W31?K(Z&dx#d}YRooeLUL~;_7cj~%39Eym zob$7__Fj8!b?*y;O_zm}-Y#+NL$ikXOMLg*&-b~^Q;X#8>Au_zkdGSw4BfIkT zDoO3v=F>Q4#@Nb$#%TW1YI2(ws=|Y2M?h4Jn){_T9$CB`OXO1|l}Jq6iM2O3CResB z{kipNMzwurYb)drtI>{1g;N{*Me^Q&p%CRVg_J2bU2Kt9Nm9;{{1}{6iTEX>K_P$d zzC!vh_X1`!C#NZqj6-tumtPDe`E_@$rNJ6f4N37f2Y){*^_qmW04RudrGE;x^el)U z&{InfJ(K3&Hhkg0o(ZtNZJ7;d;F-&*^QYI$Y>3S( zEWkE$4jb)vHfl&98td5y|MC9F$ni(i2<~hh{hB}*5QDjJm7*@(=L9LlLnlghynuWEkZF$-PmtE=2ly@GPw_&+# zi*eM#)Ut?SNS@x}p~2r7%zqS0*foN-`;QlW9OG+`EzQJUYb&#~51)Mtwjw+QwGdw> z_WQ}R+`Ko*tdunw^xCzj1dNa=-c4EOX?+BDUMnq37g`!Tfy55#YH>8I-N8Juyh0m4 z{E*dnO#)fQY0}~*dV+s6E}ZnGg~g>PhITbJdeu57HHxDUrX~8$ufEE?iFvNp$!Nti zLgHlSW)nSwT^8K{_*2(CqnU<~xCpe6LuG!m&;7Tt_TR)BlPTyXGU}Vp7O%AL)7$dX zlpwq6vetv%>t2p++rwq-U6dGR7WKN$<1YaZ?f2UHW533UHa&&hkqCl8Jjxl3?&pJhN!Uq6g0$;xGY7~-ikDVPsYf3PDv)LyBPJfa+MTA7X~@+yMh^rg{h6&+ zGR{zm%nR}_ki5#c29LiuZw>NgjjT~OHkhrUMk2cqJ$961*8hi;UTi}#U?H4h_H7E@ z4_Lk(Hr{qTU`zXM`C2wDUR>fm)`#lgy#*w35m!rE*d88}$d8uR-M-r$oEG>&)rL4j z7YveV<2@WT?2EQ(YH!bCV_uc}W}aRO)vdMHdqgsr#qjPQd_Qa6;o`|H04horXShPG04x&o@CKjPRDJYR)XrIt7I$hV3 zo_2Czz2fMt@i`vquMUd;L{7ba#dLps8*)wTcwKpXI}i4Ko&~J6EZ?Uw>Jb!yGDm$r z%v)-sUbt(Q3}JzV^a`zho|K!v@@q@{RLWlc~g&A!3qKic{;9$BZoZjCMauRxd z*q(-;9}x>45LW@xYTgwPAj=z5=;jZB=gL^%$me&k1RK2<-OulGy3hxbrjILX+=UYm zgLIlHh)kdIaep#Wn4;M+Bsl_gVD9DrSX@wVIB~y#y_n$;|F$dorA)W6V5e9(k3)oy zOLT~jx6g|Af$9pvbiEwc4ifCX7=jTle?9(};*u2(=ls_{;)g#=;Xj@Of8M}|Wi6$p!{=GGLrjNas?OlOaH~&j0Ja!RO-uvhfMZsbVqPqMf)m z_JG=|%;=T_Y{*=;W66DWQ&^}KLpW8ZD6jE@+q{8m*A9ajN!ASJV>U2WsXAGjG9U*+ zpcVsVG5yquyG>Ter)(sOavfNBdm;IiRJpSz#f%)TPkCUe*Hyofn@rKo)_+#zYjA9e zFozm-CBE|#AoKh}xX+3x;z7sX%w3M=&~?!}M%#Tm8BJA*8Y4J3_}-2VO`0;KVU*k; z6nDD|0^;L2;>Z7DtQ3zC0~&u(*8h#B2GIpQ98Aj=xLMiAVxlbcKc=3kG)TG-GCYaN zi;I}bzqPNp(g{sBOnL42fR5|Nj!cwzw6xN&)$Yn|dKBcPUziN_JkQt1)Yh6O3a&h; z&Zbq6#>y+sTQrVR-0U)^UH5dS_#$T36fXkKbTwJsjbEmuOqbhwN;|$?W#?o9t!WIH zm5dFQea}{SXUc+!rY5Ac97UGm$;GadoP{YfH1z4$@%n>rc-jVJ+2+v@0)GmB2aA`_ z6W)VobQaO1~GD98USpEm(@zaXRi$HPIG$RikYYnoA zL`=^QK@zfcK;{3P;Tee6?0UwzHIx=2P2V_P2bU4*Ak`8K>7z_-QAH{+Gq<#&_C~Ba z19hT`hT7{(4={U%KSVT2mS=&uIgGEFH-r3^Bo>z!_X+Zv;W{1*gHv>~>Yv1(NPZMd zFPEg4ck!88Nkt~|{`M86O)+5B80g`HwABMfq4XLsV>!OMkwTn*`}YH-m~^5I$+b>u@5SMrUiXS0Hq^Ip)n{2K%KP}AT6vQcUy%WLIzBD9-Fu_yoSZ}Xe zsQ(N8j&27@AB!f6M_66?x0G@@d>M`OPVVWkF!7uLe`;wOd}7s)Z=)EaSXJdl{*#lS zny&&9{#OrtSp!i*%wFo%IZW~R+PplIfMJ206MJy%{LdEfujJ^qKCm$-re~*?W-AZ9 zRg|`^AE#gpPK^`A>m$P=U2O%hCM~^_DJtJkrVfxa&erJ4%#9W?PMStsKo>H*4I6VW z*;ZQRQQzp06T;X!c7|V24j7~#H-mDi98@jl@5zSEn;{Gy>JE-f>zT~v3ZqsHSWa^_C2Wv#6?+jhf%xTpQs-t|X&5b|UkK4pXuF}5an z3XeAO4`%LhpfDQrvC}7yo%y+@e~X64S`Lbkp(h9oR~MlBu0%N~(*{eT+N&1$gEHc& zX*E%?D-EY;uwiT>+B{4cbr3leIT5u*y~zx@lOZC3Yg6=#F^ym$yVb9_A`Ybc+bPeH zTHf1eJ=+L!X>|_TLd8O^Ne9jZ_}a-Z`Oi78Uph^uZ6cy38|rnv`o(`AMK*;aA|i%E z<$R$<^W@K}`T%i``KK`ZpOtg}_1&AkaE={09{olZCIkfazaH;zZ`c2yt@%IjhAYr7 z+?@^0j!Q>k*AQjXfkeQ198XSj+B4GbK^DC;?mw6L(_ZASc)gm9DqoZ8LgBU7Z+#M> zMeUo~ySei7iuf|8UU^EW%#Z&gCZ5w1==%BT{MyBOdv%ORl7J(v7a&f%x-;pfMC27r$lG=i!JS|iMqc>O6z}2_l<^Ob|LFRfl>;2R8gsFU^ z)wOXYyx;vL0g3Diy`J;EJ6?zJ$t=j0dbEGlGNFZ1{4Kz>SG+wi)3bg{SdYs zb1tY*BjZl;sQ0MIPyXM>AK!Ohy+0=yxLC(NVE^XK7wjW3d^j$dc9p%GQ5G!v-O*)x zG2x*;z(4I9FD1CY6#dYy$<)}9C}Ni}R`B5f7Ld#un&{l@ehT7m+2EfOi0dnAox^F- z+~G3S2xW0XlBU_n;aFcwqt>;6^pw^dhKD%Vhda?}H88T}j%N?K-a?!jTZOUX1z^jL z7(Y-3DFFFDUaGRq&h`%&Z*{iV0ITcQ!o}THYy3<&k#5OC`j0wWG9}P~28;Zxztz{6 zE21_>7Hr~yL+z?nH}AgSEe`<617lH2xa-)Or$+n?!!ul@y^(awkqdXzbH_!kmi zf-Fbs-O`a2=8T}&B{P*HwhM;~c(j|AJaey4aUq(m%qv*7E7wCAXo+4e;g+zbWmkKR zhbJ4N?o7UQ^d^-h$|$zfqzxj~Up{GRX`nG2v=v1gcYb$#FSyZ|qiE^ImpNqQz;!IO z(=~csHz#{d@eYEI)-5vd0eOlC0x@JgX*wT@@To+0>c*g@UB{*CN9&J zrqAl0NP)rK(m`~rFCse7E63isB0iEwPn@0$_kNb9HG0`J+bj>ls33pV(B!2Z?+kLqa5q^3`p861OGZY8RWW*jxS$a@Eo3HJ}e zBVL98N&FwxMyj!zN4mR6@JRPJEAmA)w0(w-mZffk9J6y?MK!WDM|KOG9z1wFo{x7Y z?S@o24H>(i?>tS4taUl#CKnbLTbr6qo$-S_G!KJupB4jPZQCDbBN#H~c-@N%EzC@u z1J}khLA?Q2`R%-Ssk`RouaRNIUU!qJL!XbbRC%^e!R7LRR9K{&QEO?`@EBVBv`5dg z)e>F)>*Pq)#Z>&oLh|Zhs73T&ldf$sF9{mWttwJ6Wk)v)BzQDtRGs`g|Lhw)LuV_{_T@Ob2g4Jr-mowb7bJ0G{2KCwfU-w zRjCTC7lhEq8UIp+Pjrk4QY#Fuf52GyzjApH9o^WW{Q!prf)8EbdOD*=8u*iucdavq zdAvB}+8u|1rbulF;Y z{G->8n~V-?X`W>uBSQu%;WkyLuFHAnb85=&6c9c~7w3&HO&n z_D63}%!P~pyx-Qm{juemHN!EGbt{vXmEX0nsHg=ip_Dw~)_d)1Xg+z^Q@gZweN22) z*k=3LlN?cOFduik`pmbPnH44H8Hqy=;^%CEy>os<8fX6JtR3%y{Zwv#$G|e?Gql;1 z0dQlA=>CMu&?B#at}oQcmb@#TxD8j!HWqEikOVdNtggiSfWu!cMy1&`lS~-pJ&v7U4F_bM9 zD9fi4UEJje^u`L<5-(f2Rh0|1J&Chn#^Tc|j&POCIXuYEE1H&{8~`tuj*b5%-BbH{n1-i| zc!f^|&cm)dTzTbNKf%BO&)O+je=6KD+SI)fPRS{Y9odzW>tzj0(2my1Qy0RIFAfOr z8tcI28fap;Hs%(=ed1B~(bJ!~5knT#OW|K?VzGaP)rDo4>y{P%%=iIV@y5g)Y2o_S zoY6)mcwJh6&lM(_6CWzMbfk{btVGd2AYY+8A39Qrk8K9uo9Guq>TN$9>VxY?xD}uk zvp46@2tzPlFyx(u%xJxS?pC@@XT)QGHk(K_P_#FsnwQ8$FRB$TK6m5qaH}0iY?!mA zuf2)dzA(2s_%6{A@lf9h>P08~tHCusjwVd4#;Dt-1~vyo=Nu%A*Pf#@WRg??loaYV z{SNnoFp1V+VGVq|diT)vn6Tk-T-6fedSAa*M z)Diw^YCje#c@u9nrIN;NNY9os+ik_ralDe6{f8I>y)?SIhV`@Sc_L^F|YQ zy2%|qvBvUoU&+I_M8EoW`sh9BoE=ZgR~}l4y2rju&v6R0uH(+s@r8D^BR_62_IidI z9_oy@+owB*_>#BUw{!1FMQKGP?cm?*dokGOc-OUHFOvh^EO%qK*iKCJBHkza$@mxj z>jUbHu9cK-iw}zV*^e8HybQYL9BCu5eG4FhR>)qZ>Md zh=7RZc@Ds=NFOF~oKbLpcK&Gg6H0vu&@Rg)Zz3&=oxoOG2PiN2F1E&@FZGjp0f zRK(;+vsqh*`q!W^#kN{!V%ud8zb+eMjfoRAIdY?VDx&J9*aAu=*-%dVrQHOghM(qe3{-6cn&OtO5xEBvj_xA%qlO_yQr|mz z;)FXGrk}-#n}^EvS|X`v*u`vfo!3-HU8>rH)GQdrU%J1R?ZVu+v+r`b)+0~m>I1A} z<)9h8r)e4o_N40zEzI9Ri(r&$a_S1gGH4UADoN9Dryb490yqQN9EGv$(`ag%pdVz0 zjgfOJVP$WPa&*UfGj{c9jMO#q12eM*e8d>il8(dFKfDj`Lxa259D~>Ptw#bAA_&N} z2k;NyzTkW|StR2m-LQt2Q zZQtE_3W47dC!BvdWNH(GCqb4ae6o#nme|PC#->mcH6qp}dv69H!c5pqW7+27)@+;1 zL#;_u>L^M^ugU)!0P)ls`Gw_-?Pw)5d_bAe|EgcaJNFr%?$G~_2J8kBs{IO>=vVOC zEmSO8RT$cET}ZJrG*e&ALc4W4QVC&-qOJu^h~kmSaM(K6K7{TNa#mS&nV{53=*G!W z9?fCe$aW#h6+PH756OsO_i*{qqHhhumV8|ku#0l9l`Sari%cRoWmxcR4+=Oe`cY-@t7RBQaevS-yW-#Q)Ni?g6u9tQGauSZNK*aBJlsUid`)-CxyQ*hT%l|A?h%_Q2N`*Wz|}o8)B^$% zTJ2d{A@7GfE!R+<*Jly`;ZL266-t??ka98AQT~%#j+=}LN_Td*sAe1aO2~n@e}m&M3U(evwKm$FXNUQ-A#Cx zPRaDH=aMv5&@xMUMMTYMt$MDN5bb1ZrEw3ue{;)+ytB&VLa^vAR~*YkheIwVwY4P7 zM1r45SsWqE6@TO;73s@_)aH*VYFgG#d(^s-iqrqohU7FK}v#NN^{NSYj^Le zvsNx1*T?d))4ZkC!~P83QR$4WX3;z}uJq2(fY}$KRxaF{@;jEOe0;2wuP!#KFAa(szJ2g^H2xI;YNo zWrX8?p6k?mH0pC#k@y{qA{=)rw22_o{GPz?G<18s0%n(0o#1Hrk@sPYT$N zJ*@qfcH?z=6UEM+?XaP7;3ZU>4BC@U5UbSyU^qTBz7>B<(;{Ct!Te!yek8a%H(5OQ zn|+a0PmUUAacO1if{Qi*!8_@s09DQA|rS?1d z78#b3gECuWwX$iboX#Bw_qI&K8D?`+stga###%^-GjLBVSAn@^c*Ju#H%}-z{QNC> z9{c;Tv7OLY8kc(mR-j$y4x(QC?HG>=h_WXK<`IhE5>^_!{_}?&J{x)3rALN$U^`5) zT19J>aC6&F&zo~O<#RHJd%7x>3cY8S!J1q697pwd&F`1ZR6fV}y@eAdXV+IMe6r&B zz1W=ktC0a|-r8j-6GmsJ2AoB5WA*bp^YZhv&1|GvpC5W%T^-t~Gx{FpzAZOzM26B# ze0O8uDo>IxhEGJ8p6s!>P%B3=e(M~e{}rg&(=3fojCYK$enAzhLMwz$Po$649Bi89 z;#@v)4I)gx(kM1GfGH`~kk;9!^fWO(b-GrOBg=R%TazO%zFQc4b^{PcV4Ue`+0;pz z3Y6>JvXAR>0!9yP6-;Hry@zNAJ9oQ+*Agda3El45DGQXKryEP3t}F@FPw>7dD$kK( zmuF%F#fm?J3%*-%N6u9cR%kdmv!GVJ4GmEPBv-U6u3#2bb8CGqu)27^ek&}Gdy#!t{^cKH7ELYGx7W zCAlAdJ?odCO6<;74#g6rDJYEF~6n^ed?hHT-j832B7GZ_9Qslh4Oot2xx+`#HH~6!gDNzQw8s zw<|>kE?0;OpxQ6x?MtT=fA*`mX9;x^?%k_Rmf=XF$2bRN>cGE;fLMe11N%R%r|q4< z-*d#tP@;#50-wi;irz!4{(C{(iFAU;`UI?|+XLgstN$R%D-$RNu*cYYuB7|Kzsx@W z-upD6W&NxfO~8GZ#s;Szgw zKd$dxuRZcF`j*7 zN_iys9CF)*zVSB5^M-l5jq-;68sJ-f>CZgr0ddXVxd1&o`(+>?vk2THFrn0_EmeRX zQAH_6pFF8r;udLdzdL#jcgXw2jW=nY%W3ral<>&-J_1I&Y~~r#7x9`34sNiKLZE{Y zEu!vC@J;H^c2Pm0AGSdySmf=;{cs26$vH6j#=5xnko1{2nKbrxgb~s*)N%{|T7n@< z{@rm76jUF#^i|IlPCfC8&Pqci>IHS2w7ORA%pz&wSk(7wUbka&wzIp12vvi*VBh;G zSPM(?<4Muaa7xHAoF-I-7qjYw{w$Ae-VE@Z((_~N(I%_Xy6G7`R_`rBY@<5rDSau| zcNbQ72k*-jw!}?KnMe9Jx6veZzedjktsD$uDI3Wowvy}FszYjv@WxEUBy{ms*82~~ zid8vyx$>C!8GF|#Y&9W!z=ORck!N2(3br8x!)eT_jR9gs!Dyg(E3Ry-5wY@fk#EB} z1ys;786s~x2o~yRFRvp`?)JT3V~wO_JiXPnZK9`DgL8%vCS; z2@o>IQnmI{(*3>8VOXcAxcQ?BD<6lv$U15M)C73{HFO$~Z}+CtDA!#XBMT2b#9pqi z&?5J_rt50OTtTWO{(GEKA`M0AV%x&MCXu=pQc_rIjOEEBPJhW~s(*Ks2%6=#sLc$X z30mO;$BZJ=28}KRniZ6O19g+kw1|3%~yc4ZUnGIbjp(MGJ~^Ay$i7ObAL zGIlniQh-=%$%biBWkQc1$y+o~XxxCN6dpUB@J$BiRY1(b(&a)rRvJ=#nzu*GtMbLj-B`{&TjNmcLqd#4wN<{sUZR@kte+LI}@LOMuM_+reMz8Ij0&lzJUvis&!T$}D2&1MuMm2$ZQ$*tDEg*^y%G(;j zXI?bUWnj>H zQmWE!IHeanxW9pLsZ2)+wQIZMA+ikt0OO6#%bzZ`geGEEEMr{w4|UZygM@|py+A#$ z_U+@!(0^=^8`1uz+V^Nc&n?sIjw|(Ra67WO3@@M1zky-fRSy^#ssqz~5=`i`I*t$D z91mw`Ri3<@?s!y2v31}0luFd8)%5USUt`7Um8jzxy?-gu?1uf`(b$>w|8|JYTmH=f z$fpA6xv>yPs?@0yi(=FBaaQnm?Xwl_jPR&e0vnE9;=#-uf&_6o_ohoR_ag*Sv>A$2 zXx;fDwHc%-^zhISAl$J3gc@4?{S*-tT9G}vJ+xZ?L4Liv=kYwCt1~jx`b+gQ$>wi- z2?dHYqR_Z?Ig;Rx$Wtd+XPHvdWSYvlH|D2F?pw|;uoe`JH{?t8OvH|Nge6uyL?aze zuwQ2Fr8HwYF2Q7*AsF1yK4olAw{maPONS)Hp90A=$3KCj}~Q>2VE6t*6VgCI57~|J#;4|s{a--+urn7 zpqum9K&!K>sON*3v)o6p13)G@>Si%c-F|1qy?u`kq+IsHk1zpZL=8xN%U2C);`8s` z!Tl*laqI{j^;nFC(<#xQ@yJ;1Mzjbh15X4@P~)ltG=Hhm_!%N5qx5eRPo2lAV(;C2 zcoAo6+*>LsSr~@*P!pzKy;*l1pK?Km<5I&%SLroI-GJH7o&=TUBczVvDW1onrsouG zTyHJFf&;v_=RS<~PYXLtT2uJs>aL8u%|0IZEUJ&PVlu(WkS5fJC_Wpj_XatGI}VNu zvwK)zO?B3SOk&S2MtGJWcviJK|4$H`neWVtkDwifHfQ=oMM;&3?C{M$BylueBIT&3 z^;W%iT39;2K^F^2b6p3W32Sq2I$d4-F;_RT3eg@seM6Sd$Z z?1yqdMNyoHA+-0%v`oP%tK{S3)9$Y6?w-VImE*?NfHzJJd!pho9n#I6thF8D&g9Uk znC;qD%EaqKb(;r!-n=f(3E{vd=E7v)GG5hF2si)q96yt_WPIJyQNRi-8GlC4Q7r9; zlD-q?Juw(-ZxaAnPg`6ZSyT(v0gTsM9CGWID4!Un8YcdzOym#95;Ctm@r9fHV*Rk< z#5YqKkrw^ZnS{iI$=?wHNev8rBENtOIqiJ`WNj*gvh2}h&s;8Z-$FDbmn;(86!W9+ zd~X8;AKW@)0lY3HB6q}5h8#{jW9L+Dai0x|y?H87T8&iWhUz-jnhl9x-W|$0D-_(^ zY@eT>KR++ta6;Jq_uD=OJ|8d&c%3(eyKg#5HC7owH~*FxsE*?E@A-CoDmmmDlx5*e zI84-+W#%-}su1cXRa?)*Oxkh{fddX$BD>9AjR73b90}0`m+_YlYJP+=0ys7i=#B_r8l8ZW+2B<)=)!#pb1&6 zq0x*PGvmrx>|z|C5Dv=t$E_n-p{H2>?Qtc&H4~lLn4~(MBGI9}W73h--23Dc#7oJQ zxQzz|LhgAY9DQI+Y>98+u`51RlBR1Pneh=q0R6&uTUJe5ZF%w#94gZBWw=b=!lbBG zVi!FtiZca3q|81v>h%k=i%Y&Z$2)6_ApI+I^Yp8b)McuA3O1JE2FhR+Ys1g^Mr8!S zd1CHoB38IUbn%k8W*LSsGC?KeDj6isvsbm`4lTU?!NEypYxlWS}?zsd*e$pGwv9R@l5 z=+j74?qbZi_w<&!_TQCMIz918k$ApG!|&kTU2sU2n>ok2man7lvmpE2*>eq~Jv?Su%-!XjD0F2n;uUNb3>w&KbcMS$DwDDLau7iO z-rO6omnQ^Vb^S#q_3gV#3>t1=&uY=QPKD(%!EQasoyrMX-J&qa?DqWgfO)^&pH5nH0H*V1vx*{U9gDK)W2J6i#jEYYa6?rkq4`$AGDuqZeC=d9b zwO~CdBg_bcF-7AF42S(j@f6`28tRP6a|kFKJT+xA3Cp7pCPMdLNu^(6HC_Zd)Tf(C zs#O@mf96U7o!hlL_a68FAh4H$I0U3GeypsC;{m}S5=D$Og~Np?DPB~t;YRk__gWLy zh1<99bL1rnqew`#_rg0l>?Se4BIPf8Hy0w2pEDWVnwo|M8DOlHvycv#h5FZn4(UFT zG04lsHKkkgX<^*qw63_0anMb>l_>4F#Fqg8K8)7{J>|#ML$&>jW7@9wM zVaJ0d7uXY{&$Ws2(8dtH5HG2B{pjqyE-X4su5X`4m)TH&KyMo-%FR4KwV=d&Y8Rww z>OBVQv;(9vyP>QprXPm=i#3W$+i)3Hc@E3MNKw2r%MAE2(43%T=onlWi09(qY<<8X&-{-f=E4N(bmu}4Hu~BU{UEFF^ zMh=aSLb=yOhf(i)EsEQ_W=KJ8w*9$Cj&**Wl)lwz2b)mtmm;FoUr%!9-t}>k|c5Ep= zug|VMwu+A2=_`gK-^9aVz#Jaslm5qO+t?NgeK3~*D~5cce!LdukiuXxDE<7s#?ZWd zIj1*>F=;HJqv&=xHG@{F-!34b-3(l{zRx_2hPTjsGrY?NGHB|(+YYN7`` z*2RBrYZ|`FKGLmt#grUiEl>jJR(uOf5T;Fg6%HsPCj?<#B`8rQg?2nnrop@j#L!OD z+5yx{z;-)MsKc1L)>l|ie@fL?KYm)jBL$LM)L+l<-vI4s+JaLLjRC{uwb_!A|}i^D;;+d)BBVH!mw1R)fGnERANZ@j48d~ z#*;>q#1g1os7*gpR^TA8VlgG!7{e$|PbKp#1YgmFB-Zjdb|ik0cX)eph)>0@)VK+9 z24QIQtMv-4br~QqLaZQB-sBRfRIgNtIlLg+pk2yoIcCuglknLD(%A|wk0m3ES9nk9 zxe{9)XjPz8&RGU%^qXBMFaRh9i~v%fBIG+dfPR+sseL=fxrsbw;JpU+-rP|OB2^PZ=7 zWw7$(Ci^1u`{6L|LV8JuAFrqRhET^a<235(WZg%#A+zfEc&h78WJLt(!+_P*!_oPy z=I_k&I*PJr*@f-3&f210pEt_oDkm}*08&a+VhZ%}x41_-B91KHRZ7DpxVa2wHt`0>lg7oGp`|@+|=ZvIAS_9RVE09*a4D`l`f$i z7XGfN`9bGZtl!j*h58zAgT*yw8F!r(pfeE0+S&}OhYJI|80Pp;&$bzTCR+M;tbU<@ zCh2HR=GOPSN_=)|tMeQgO}$-WNV#{v6Fu80c-nNY^gKv~sI~fSh05oYUH{+$C>9W_pT7NEKf}1jpqnH&kVddXHfLXUdy5)e>OWv zFQcd%CHA^TPu-5@5o{Gkmu7MleCq2hnQ|TNLqet-NeHVCB&i;k>XDHvKf(JdZK(dk zJ?p_q*-BM`vZ@>%*At=9{gbg=1k!QNP6y*HlALUS@^5h51ql+$htYv%eE|{DP%hw5 zKgK7MG8qjq_1qnbCp;;sgL-}49CY2Uk*z+oU9+Ic>NLsSVIJNEr=$;xLq?9|$Yd~2 zF9?$cwhQdlWLPur=NQ4fxv7HPTKVSBu~G9eDDOTxQxa~#bE}JWOA$!YaqlpUDZjhH zi?zd>#Wu-&ex%wO-3rlVo&!~o;%=^o{TlELTL3Pjnub#5DQ8uzx8e2{eFPvmDt%NL zRL#>=9iZh`7CV%C7t}11v9?NC65|o`GcEf-(;MFs^A~2JSmn0;c2}~8rAeB>s_D%M z9MCcAWpg!dA*X_v4@ZzAy>>1ulEIcc0BC^sCpGq5_~-d2EBvCKFIf2OakN#$kB2O3 zCeQaQG>XmTzv%+}(18vleMI=F{bz-UGct7h4HiM3u-v8kWX5_~dea$c%uyz{V+TKE zfk1XsUS17~k9;xf{Q*PXZRR(U9n*@`ixl#{0;P>97xJbA2Zt9fcQ9Xb_r_%7n(9UE zj4Oik>qa=9D9s%zHTf1LX-S7pG9UPdUbpuLcOp3wRcDkY;(*_@J~#~Bp7$)P)c-)> zsxW>l^&Czq&b+cKb1H2Xnk)HrVZDf5@xb&5`xdwr6_11OTdkf&DSXEAu`ar@flG+zAQC$o?zRWAlI@;VtV=r zT$;9dL9!a!9`ReVYjGp~=Lu|))13-=yB3FWG1l<*k#O<(etpmZM z>>8!o3`UlcdFOHBC}No|t7pmFNJiHx2niJoDu?EGL&9fU@`4Xm?!hU;32bPYUk<{} zaJeYg3bACTkSBFVCeH(4?|3=XFSDnbSbkqOq*@+a=h367b2#z?mur{6P) zpUT$5BB|cEW1(n2%}Q{;9M+0FSd~Oey<2(B7EF}g4Ff9C;@m!w7N;rZbxhu0k=Le} zjqcf%^rmegZrkOmNSFq!Dv)M=&d+Qd+KF2Tq56naq$$E(aG9dch9*@vD{G{;toVw^ zJ8Wz@f!<$f+PIwQ#+OQCa+L%^D%t`-kN2TNx_(NbYrR!0=3C^$x@mcdQQ#w#4{CeW zXG)RpxFA$Fvr*}kZG!rSug9V<57ZXm;n}=u^7L$p8B91G0^^4cN$}~IH(djqdq2Lb z@YLRL_iGlt^T6wLfnRDLCRJLeo@d`owyx!%>3P9ppE_fKO4e1t?c5yHG>SuQinuTB z?$oFHL{~aLlDIEwNhj!Ji5)hk%VB1F)ko;P`szTMMl%3Pke*&quhDL5b$Rki!(I|X zX-*@Xd2OE zM#(x!a$%S-Yk0J+9^K4aao`1(^UgHrL4(6r(4X|9U851naubYE0o;1-2LSRE#R#>jIB%|p=UFH3Onx%yc(7uKQaxrNJw`kVeU2ZgRfp4_rgCk zwBs~O>M=dV$-6qo+tj_Rd+2tpVlJ(6q_I0}q-T3ZEAnla$7GNcv>^0G`SumkvrRWf z;ip_DQ~BKC6>#=<$NM~?0#%(>WC#eGcYi}Z@TC_VAExxY?$_EK)dGj+yl;(}t26t-0 z=fDaE09aH5hNIi`h+IC+puJ&6@jY3bg*KHsJO%^Ts>_d13lH8H&dY|qF|LVw?>(?w z4TP4s{Er@g_{D{iM~#S#teMo(V1+6VVKggHCZvL7l90fy1*{>!oS2GG8vCm6{W1hF zv=gamwRrA(u`a!ube{pUUdY$Hecz?GV4b*pRTfUR(M`m=D8g6e#XJBs%n)P6c&L}e zkjxoriOv&#z?I4vgS8bd@pby0?e7y0_dUF_^B;bSk;qZxn{Bi(^(LvZ0jeOA8vQ1p z3sP`G|1Z^2HWUM<)X5svdZAy87yvRSo}_M*E@AbY6Y5_XEkvXgr@?LMPZBE|HR4im z=}0)U2GhppbPrt2;Xl=1!%^6n^Pc8^%mh`vHD; zC;wvpLOW{W>$KWJG~Z%FxA770PhvqkoA%e0+en~b@a%8}n{ND-?sL@oV{C83`cJC# zufo2+1qk58>3@Av!?q(wv3yRL`gCm|2Nf;wA;FSytp~aZ>#xn`FJYCoPG`q1xzABt z?V5+(tC9fg+g+43i)+EkKHitT_W)k|i|i54zmV>~6%KI$qig97F93JY8{65#66mtg zWaaIu##Zq9YgD&nnnh0I-s;rFO0Apc!iXr;svD#YsE!7~2tlo7YV$6L6U`2wdIkGT z|2yjwn0zGOKetOLR6O6lYCeIZlKfnkIAWrA2h z*Tkr-Dzk&7`e!56TEIB*>VL#VJDK+Ff0BY(Wr%KUi}$D8*K7(8a}C35yk*bh8auw= zUyP=|T|s4wb5_|tqf{~s0Ag+}`IvrLmeI|}_DA)j5I8ZhQ0x}l!wlP8OP?NL6b5v*fvG+rB`_Uwc*^*k3Ki+A_z{i{Ug23JjyY*&Gor@eT32jbDo2*|az4s`Mn zL*C!0bG3AIKtjO41oprdXR#JtnMpXraD%Qx6>M38N3^;p$^ds|)#|N6NEP?R}|50h#rcoVi0?WmdQK1Xl!v?u3 z{#S~PVciu9Bj@t#>D>u1PYo>cuu+-REC?CfpmEM*e7IEF82$>oYTVx-sWSLr5`@ui3NSP^HCWV|ka( z3eg(;Cr7bd^_Gkm1O~jvBp;%$} zI?85Xma^%iaH+V=Hm@b_^EvqRx0^%LOeyTOgpk!+J<8HSR8{CSO%jS6jvDBGL| zUhA=AOWwikh3C&H`JzNJZ0Rfej?d3lDiqXPxA)2m&qUUz8#PRNC9@>gb_%J?SxeZ~ zD?ENgqV>pmusE`9v?eVp3<**bp-R>9?H^lJ%lN?^Pux%;+@k(1r^xg(qg z|2jP}*T(Wt=cqrX^<|i3M#=VU`F!+cV+LJZ-?GHl$iu7ZiA2auD52PZ(b-w>^e80( zI5nZn9pQw>HWVa4n36{1!_-Q6qtz_<`g$jDDj2SJ-8AV3^BEoR!A@)ww`wkIxE}R|FjZ%~D1zhvV_S8O!87Z>EfS9-w7AtLM9;!37Qv z>IWFWo~jcRAaucs1ID|W69=4a{x4ZXI)9SjOJ6Vwk?X`vdtKMHTlEt&d0u@MdfxsUtqKpNy3O4e<%`!7w>I$Er$63|P!HV)=)%}&mfC{nwW;;746 z*7jz~2PJaY-OKL!E3&mYXUoq*ChtU&Vb@SRCE9Z6HW+hXBFd zApwE}2u^Tm+yX&@yM)Gr1`VNuH^JTAg1fsn?!nz}k^S%e-Fwf&eK_~~&O<#`t*X_t z=NfCQG3KOIa4qBeT}xAyB8%)syN$dCQ%9|-BI=)KB#;dwD4N45==5-(5oiMmbeeH} ze7W!q(Y^V9`>-E6y$d6pVH^u0u2)JHWbXX+M+p7=(fo=MGrb9HC~+63O2Lsfu&UAS zFbVQcUPjPgx%kg(zbmo^iss-l$%cUqeGM0DC|T*f|3`BJx}um?^ZHYu16j5XwS}Z)8lI7*F}G%W7W6qMt_*?|+C0sa4$Ufdse8 z^V>^Mkdx3>1XyNFXKx9Sbk(l54l-y}jQtRx6^GqdonZ}iC*DHd&sk!D?f#2QoDh&y zrRvbW6Yq3c5(9MV_^N7w=Pq(iQzEfbTzG>O|1|Z>N$xC~=wJF(*X}p|q~OsSXy5P_8Z{sVpfWQj*6>a#1tCpr0(6zFaf5nU60MP?;pa5CTrj#9Qi`C9-cazW8v zGK)>Bo__(B0r@9Q-BRO|8hkN_ZP}PEb%>~lz4WV@IXGCJcGQ9!DMECP zYL1mi$rT><^5tKFZIm2bMzQ4M`3!8~;lQo=wjjy}62dUD@eBSpXU- zJM6O6>c+{fCiH1RL%7B(H!IBV;I2VDckkC|J zErBQzQk)X&y-t<=-bUTt&ShGRT1HCti14E1+7lVJ#@Psrb+lq9mu$b54}f3^|0lID z9}k~#E;s3rS}23lv9D!?L-D#I2Bw3e_4d+!-CamO4B8d_Rq`y$KRi4&K3*7Q!_oEp z=Eby`y4EUzGu@?MPy^4I&tuLZ9vyR7|Bif{Ohs|Ft&*a=g?LsWfTnobd@eRJv{6^f z&=O@j-O_)cXsc8Ie ztUUIZ32foq)SRO5@b0A zzu9B*ouhOj$03u@WFI~F_0DLw4{yI}en&?_-r#nYzg#s}eWvfjw6_F9#idp)f8+Zs z*i!PWqoh#g?|o(J_c}XVwe5w2blLJnLP7*3!)lV|oUe3=7cmWm+0=$~FuJ9hj0?ew z1kUL9XRySp_!@yaDdA#Bo5%f5XzXj=uH!kL0E?Bhm|8I>YK&=IsC(n^?Zyv>ux=%4 zR+S+~LSj>+guF4v;UN&sshlx{E8bc}F{zruZlKabEc?vab-;cif3a+qz^X+Mc0P+L zN9s)a;_4jlYeJQTAjGMAifM<$7-yf;^ji_b9(|1k*yTdGfI;5IX%?R`vvGm`8Nd`1 z+Y@-WGN*7)Usxh&{79) zV;a;Vqh8P1Af=|SH!$Fc^hG$;;=b1mQ?xN1l7NAe&m9-tA~g2O7S}XKlrft)l`LdK z)#+2aBhWo#TO%&6J#MXE{f}4tzE=hVRNTuTThaMc*@(t;Wv;Q$c6O%=8BerpGurdf zB+rfuB$YqQx=@&K6%d$5R!}2^WTQ-{OZ@Bl-DVz`g?@|p0)<^!`eRNA3(X%}v>sh# z+Y0ADD6S8Gx<_IN!klDSS>Q5)BH+#6MOPwuhmGgZ6Xd|AtVi|<||7l56YZyo#QWFD-v^S$8)T_4TG5Q@bD*DW!?&Z!_gaWDnmbxUt>fX zbVI-tKW3gZHGl%_bCBgH7-EA5LLfsVz zV~A>?=P^Te1MfO?Gk#if;FtBH+nv$QB1-Imoyprhe%5r`itIsui|bC({>|GcmjLsH zoKO@6R#7<~_Ly(u+Wn7u&Kow$fp}Ai{_FO^9qCK*vmw0U=O1b#e*+Zavn#28QYE9j zoaa1tcCzG1v^>sgh4p9gT*!QcL6-Kw)@dLI?AJoi)=8E5B{7I4i`v+ib*L=nm_P6&tN)|`{wKrig#S>$bJq)*RSV25i?{YAjJ{SA0*qs>!X0T=m` zy7LGVfY$p@^7_AuNI`)3tA2uMf6>w*P=0Ej98hlmZGhbP{J(o6^evt}UY@v1?hDZ@ z-5=Bl(;W5qfMUJoX&5MAR>FKMzSE~ond558xM;LCofxH9mCL`-c1X84R~HVwX!kl(&06^mkz*%lGZw)5JpL zvbjn;p+v!)?tac4JHrbD@84G$Pb|w-n-`-eqml0wLiXH9?s4r{m&Jequz(}(1?sj{o%I=W8nHcwKhKS%$2C!@Y8fT_6C{j~ z5vj%~(On(VzsK&``=##F}tHDc0ay5?Xi@sfQ_mx(1G&s}jhR*i{QnGH{ zbbGq=s;(Frwi5nmh9sFTTa?c98~vO07gHqGQGPFo(or#u*5lr65m$x?>o2xl<5{ds zb<{TsK|ju{AJvb27BAVLgtG9V$LM2zF)~|xWidx+qD6w2doK6~R zqQl)HgycI@K*t-!d*R80UFuT_w{p%ikUOC|_D@Y>aK88`yum8xan6fw<=(5E;b5EM znctpK6(8CLjL+%KtIv!bP)9v93K40uV5XyV+n&m7?d;6#hH7@4ZeK9ZbV7-393nhiyvq6{Sa%_?Nb(KTtECo0D$G9(M zUp>5kZYoyyEt<{F-x_*1rIiNC-$|3U>7Cs@U>&Go@vP_J1T8pIFSe=$bkX!OU`b=y z{8sq$PBQ&mYQ*lDVOs;feU<94bh4O$Hl+%A{zcUJg$XOMGgu!}iPumOx#_}5npHhN zjv1$9+O|4~dRCU6_S5pqwjb{Gda?|Qn@)zDD3E-^!;e4`TIL1(`}2T*pT%aU`6g}I z?oQ%L5Nll=e){lT?EPTsw}-hX#O8VMjP3F36({1K*(z@wq*67*jbvP>Ya(f6rUI69 zDo8Nx5nkoLPIZWq(L6*cgSWFHxW)PIZQr+@r9V}zb25-NNo9~>RfW5Yq%xRh54rnD z+mcA8GrMWB%K5NulhD$&qM?C0jIN+NryDG9ZgE51|{ z^`00+o>%PF=qaeo9@Q7BM)PxOs5h>t9;m4eyyfk0(yRF3)jC)M1?@!4E)4%#A6nNL2bD1_Kpzo`1*^cie7iddaz{GOvv=kEOaQeTto% zHtm1{5_oCDi7~6;Ryx?2YI<97y7?lL8xYLc1Elot{knQzf~g6^8!8HyBe#QIq^qIB z1uOmM5B)%LTRXT1!r3n@w1`1uH$JY7(;Az@`%I;oMpH7T-sR6&ouXfB(I!rZmGX%@ z5*<+(UWR`mHUq^-)DV+bhIA|HScqMTvH0~j54Q_gKqcX5WK=}CmVk5rxu;aQfWk+L z=8wx0uH9|gNPh6QPNeg*%$@`B^U+muPI!)mr7ccoy93{{qodYmemNzcvkFFs@+}bf317-?uBbLp zhuVgiuwf68wGN8iG$?pi2PXj#+Uk+l2(AO!UT-K*w446>@V#(KGCdFNi6Ta*#I&{^ zd4bT&q4%9rS*s;a-5>uG(MwDUwJ{u(LuiKZ;(?yW=Z~>(S3I~H<-3&uE9Zpp>5$^zYKb^IFJe#NdG6$Nt2-RT>Uff^ndCo7_7sM4 zMR*d47>>lOVFmHHUmeYua≫n7=_%e`HLU58117#K2&lo9bNKiWnsr4dk#p0$eix zUJIZ6p$$Ywc8tJ5W{V9#>HWouUp~QYHUDZ!QrP3>dHP{={|zZ&GA-LWlW(`#PEzO% z^E8|5_Y?udnFN$b{nveO;0%4IT5Fj1+kr}_e^KBQ*xVw0qPw2`M*r`C&;J*k{96|o z2KUbb-KVAL$Q3%%w<@3aUJO7i zG{Ovce9S!C7fHICS0;`c$VFbYp~wvfKg#J!F%U(u7Mq`z#8fBZQ%i$4i&U0OaO$== zBEGKIkU5EmU6 zIyV4)7clXLD|k|uDS!u+#7GUFeX0rYyR}L}*c{5l5rQ1IP+0<)-&mL5+;=)FXUB5! zc5ziUO~rT1i257q8p0CisF?g+dP;2fLp(qOL0hR0XOFiIIqZ5;vPNTf+-7qAiPf*( zwPQy7u?JmyG-(9Iglgr*Hq2lF)7Z%WKaLJdg0YLtJ9XZx?&=fj`wt;czW$TGx=P1a z+I;NnI=|yMUab*%Zr%n-$-rxvwtbUKvK`L_g=J;iIlHZj=W!ZE>*!e*EGXif{z23UQYCpEk}~Mhf>?6elXkK3h<0-^071rYWA~<~y1Pkpq}rjXQB|{EWv*M&uVJ z^me4w#ZL8F6*N z%o|&h>t=qaAY+BIe>KAxmL*=JH*8K@Fph9>jE1CWv)YctdhoRlT zT~dEhD(1rLJtf2kw!B1cTQR=#v~Y1{G z>)VJ>KP&JR_fKkjAtda>4XJA^L?;r@Oq=8jkJlDQyK7&+K4@opedDzn9&Fn0_I6tH zItX7C?c!Xi&&6E#s;-~xyZXba_z7cw(8OHwRUq&?~k|UwTduN zHk6ImX#f~YU%P)2VKUov-fmAlHDAphL`#(dZ>YH@^ERg`*r&b_m^}!y%Wf-oceo-V zR!%m=&e$f@ix2-oI0xmIvIR)$f1`{7}S`+qzHD)0u( zCMU9f53S@KqofIGDm47`5MCo0r$W3R%@~@kldONQ8M2$ps#6>aa$4CBER#-AGE3;* z*R4$A;j!B!(#QMphGs#{X^!f#u))sgSAn?+1ISnI_gZgv6a&(x)HGw4mWG_}Zqv;7 z87NDqe8wV~qY`^2j;ou<4oTAVRk_aQLI#5p=PT3fgyI2~!zNDZJj+zQjtkw&lpEinkx!12+sO8BE2fg+qeH?{DIPl`p(&hpAh|ff zqF>V5j2bIaKv59WFpQUeR_gXd+(07H{Y!JR literal 0 HcmV?d00001 diff --git a/windows/client-management/mdm/images/configlock-mem-dev.png b/windows/client-management/mdm/images/configlock-mem-dev.png new file mode 100644 index 0000000000000000000000000000000000000000..3ce6cd456d9abab23178607948545ed182fe4838 GIT binary patch literal 54105 zcmaI71yEaE)HYg5fwowoxKj!gr?^Xt6?b>n;Gwt`C`DU}ySuvu_u@`~;1=8^2^Ze) z|Ngl%cjoSyOy->I+2@>f)_&Hrp0yILtSF87mgMb=7cVfs$w;Wac=0me#S5gh*Ds&W zwA9MgK7Ap%s!D%(Q87lg|8(%mN?bww#f$0~beIXs)A1W886DRbF9>L#KS1o@YoG6V|=v^sxiM@%g(@5hG~Q(6>B1a0EDF7|I+tSqg7T2q!C52@)Zp61|w zcjf;XqSaYQU&Wut3bHtIXwdU$Azgac=nhXQhiW?NG?Ktj_8mw!cjlYLCjzpwp2x9# zr&r(!;HURpexjlG)zv)YJ30)-M)~D%*VNsWSr94)%JZmqb6BYYLPMK)SABMSDzE*4 zYs-n!xWKfgw}_z2FhQ(i7t4WLlYD(HjJ%1|L6JTl$Yl)ohj`_t2WK25~bgZi2CfW zg@Xq-={F!%s>uB93NKwtgkh}5}`CYzNV zZniQnM6$b`rel;I=pba5ryOnjB9&P;bgh_qA*&W->9wfxkC?WJvHE{#%gn8E}(wY$SpWF<{kJVigd1>&v75MYF|UI0>X&~ zMe@Faah4{qf!~qb)n$%8-n@Q|fu) z2?V+2)euu?J>=zo2D2V%nRRTt8@o0OuU_EwdzkEnoeQW!UVvIFYthfvqAL(1#1@&9 zEth?huavDGsz)5#&c^1hN-HbZ!!U{XU^|#l7e*5A7TqzQ76!mk3Z|W=Z;fbsVZ>jT zjapt0TFe^{GN0XiOuH_Al4i0bVYTu6%JOxuyEe&Mt#@Kn?Vh8*ctuvg0Vl+r^C$k> zeOgAV_Xj(Rn$D#26|ht5x5cG)Rh1q^9lRIaV|>P{5)+yIkpDYZJEK7A?*lO){`OS@jza$P^M3S%SZOPyK>qQAy?ag&Z;+}Kf8 zunpbR5)l<5eMRqE<@=a$Wrvd+UcSYHLG(%tIv*u-G->VD1lww{%G9a#l4H<8uE{Hz zX7l$g4hvX(ypC{YGSY5zS-hWR;wjT<_grC&U47B5yp~>?SgD8dR;x^}*=PF6`!+R$ z4*R*8c&U(%Q?5!A%8?af1=z~IdnwrR(~wkcOtI;U#FeREsCDSnyU@N~*z6qkNQjik z9b=Vu|4MrR3sjn8^`}@Q(>^M(fCk<;>Z5DcTQ0h$HiAB0NG1_tm3v<{?nV+xFMG`?I zSSUHlF*^q+K@&6JPCX@r8D3Yla<;LUBo!c#!}c%2&h6JVkEL2cz6(v3i_0aQVFrYa z?kgo%rCI=e^f?TX2Z7l16{{_^VDz6?&Z(WOfp6_%PhPxl%iM;|7YdKQO`= z)0L;=jeb+#^{cyTO@LveWe;N&BED8{u?EpkY0;Omn<4aD)%K5?lF#XKNqni*Jg1iH zO3K0jk`ZEg^~)2&3Tvkbqk)JbnmUU~pWt$gzP%e z#tY4sUQ?a613IY;3?MB~bzBZAsCD=ClYcCF?DRQ+8w{X7LBhzZRoO9uo7WO7@6$6K zeeB`8yCEfFGf-<5(YxW1#Fp@d8>7|J18=leYci2U-U+Ym-rvju=^{cCag>j%^Yp4j z%oK?|xxl}^4Hny}Mr0>s1u@Z_4-wOl@2spK45lr`^V_(325Aw#3>NP1FR|dtUys<0 z-U=y>9tq!Emv*iPv>q~(ohS7h#yo&C{T{=1Gkw=xbdc*azvQxe3fa#6zL^(l{9OHx ze$9ohKh%wt-ef$m)=Dl+`V%}@UL+=LNT}v+kq{)5B5QH+U5GVZ8@?Z5Ckp#eO=#5U zalsqE7f5XjS@;;X5{&SAsF3=FWv|;qDgwF~tuNJd&_Vo@I}0(D{zOvs?iZFYd;$F| z-xpK_&Q1nZIjk(U+0OC#Mh^9wAA_q7Hka8>^J=$xokG|T>e5Q*Mk+NZfn~w}f zRUTO%lcPaU;syG1>Hz+Z(_q1I%*la){{B|waIm32OL2O4KK9jmNermT(|6hSozZTN zpbiG3YmmzC)7d3L!v*&bF@3uV(U>yKJH>yNgHO^)vtll>BF`7i_F#X2xWNPI612yD zHsDfgACIx@L@dK0V&WWCH1RtL$?maHrY?={mU3sN1_yXkLHvg`=exS-^pg%RW_+Jt zDs*uv9@i0#5P>CW;{AQfbr=4XZ7os%-L<4;3|8KcTm1%LLxI%!K@ux@`ABn0*dDy{ z`estwY%6=Gt@mcG>{az`8x7hM<{ya6?^62T&e^dc5BOR@ci2SXxAEnvV)sY$h6vau z_ReftAq!Ni<9f-?h(bJ6V4Q@VeQ9Y2XnGQbb1Ft%Vlq(O%Vydb*htw5yIYs5Y&$== zTAygN>kOX8bsqR3Nw0u7KZ?`Q4*bF|Y}T6_-G1|#?r_?-#n%d1!3;lUC*O+BVA+?! znVkfaI|Ft;dV_W5;P<(jhox5g_zYvqh{fiw1bN#(ro^}yasj`Fx&21tk!f_Oln|1^ zS;&tD@oKf6agjQ!$)V{m zgwKkV3Idtu4{qXY&(TZJmVY~e=h0kblP8N%QoWlitc0xb^#z=MW?w2`Hh!eXXJA2+ zwSZ*@*PB$HPtC=ttIRMQj{hs4yUWdM$(t^2&yKC^_;|I+%i|cS7eVCoQnp}|Q__v0 z{HjOG5U@@3mxikrNQdZie;7|2Zy_^+bj9fMxAKzbkL&AcurCD*fVShlq7ZAnm({aZ z!M=wTeCJ{@$5%J+ZT!qVS#-Wt{ncQa=gph=WVQEi1ur(nc^JPM>fA(oG&rD4UWD?! zi!^LYNdq!u@a0_pych95c|HFwjifuza*k0S$HcjRzmlo5{$)9JWd>4()(79B?u>6y zMsv>AyI>!yI#Kv2dVHSsOfZAu35nXP_&Q{8LSMN-z2)f6OhR~oPWaf^KgDp-6!p^D z)X%ivXxni+GJtmy8Nwv#9}>2-)N-lq?h)-4M>AFP%9%~jy~Ve=J)v?POY*qhcv~Zh zoW7Hv>i4^$dUKAg)V5*I^zkvo4aHG^AbCswTcrPb@j&2%Y~CL>k-NQ+LQ18Uw9fUa z%6T1Sy}5EfcoeU=GI|>RYwg2AG&WlEziX{tE%&Hmhu~S!g{4K`57ZY=sAz>rbhfss zW#|o8m;eH4pPbG-+*XLDHs2~m!RBLi-_ey$o{g(V-kh?EjFtPI z-5G(ZY{7p=7avBuE@3$6tqJHT`tE0c`k)x6JT}h`Y%_09Ewf-vSR*~Dy4&nOE$U#OM z<17n;^?dS}$93MAZ4Y$jP42Tox$^$~3$WtE9jpH2q$mPN`g@10x1i%*V0gFIsvW*D zygg#LTqk1L8P7Ok4G_=K&bKZ*Bv4X0|HDp@e!Bs!q?BPSoKAkfX_^`CZvu5*y3$Zd z?>TCA^!IEdeUx6rd8l`I9!22y64;?+ zWnPl{2^G-Ex_1dbRd< z=e(jv6JbrGtr>`s%#2&8nIOp?PK<3N&)y(QD;%J&p3im7bOA zNDuIuH#LJVy%)2&ZY4cExJMqTzI07CV={YesnzA~+;IR;>^a_w-5=&+S4eiI20V;O zb!NT#J6_7K#4FXANg4gP;RMTw)4I-71f}R0LY7w}Y1C)U#_6{y_|oeh<);XxamCV) zWJYNvJ84{2ZntaEVs=|{s5_z?TpuzF!*l5^JAuL0H^mo1ss1nAtvcVCkn;F*Paa;jCya37*D|_(9U0?qua8kY__Er+ z@=zm7%(L1l9U}@{a{+MKGYGw8#S^m*AvzuFrp^qhg_k$gk7)IlYpd{3)hXscbgv#F z_QWH8Catb+*Rpp3S79Fwq1YQ9l*5eK-gz^^cA4-))8rlorV^G|L5Cta$}-)C@^lMj zY=TT-T}$5Z03^<)3d@=Oj>o(53=?lk){As(+aPMKyLn1LBqlta+qm8Jd;_5nVs5}r zl&@jP-_+4tkRdCY$bgL!dN4*$sMgNY)m%Q%VK5t8jRp?PtV-Iym3za$(MTMJpiMBD zyVd~J!@_CsKX$13(29ILKD|s#gKceMH~OC=60ke$RRpw?#y2%t(NNo*@1`kfHScm1 zTj4dUss2XCSO92bfNQR&(?lvm;CD=HZ3)4Rd##G( zo^iz&)TsKiN19lN3zrYR`&WkGnUL{>avhLqU&KlM&vp`*)l}$agS~cR<1dn{;kanu zt9^P(|Ld_*qocuEf$}@b_BMC$xA@VB)w|XF<)tFM?;Gi}R%-hum3*F%-Ao_EzO(9_n#Mw#1B}!Ibu0_{Wl&$-wQ|hP$38vyCCx`~Yl^o9n;!b|)jS3SGTB167jF z8v22wb&yxv4w~n03=$TRWpShd=V*AFX!9Kqndu(}mJCL?Kc%dOUB-?}F1@1&8!O;t z#(W1jes{w)yl-2C8v;28R#WPvyr)+qE6HDzN`aPO56C)6Kefmn?`mdC=PQh=Egze0 zBLqtlhw=`)HpAGk6m`gLKZmj9{mmou;a$PGOz=4$o+BJ5@%^3POX=srH%bw8z~6i8 z7(HoDkZ77Rnz}D}0`@+u5wvC!r~}}089yh63e_qTl!ptCS3_Gq>S|h#?}|NM6a~*{ zt;}c|MmSh^z4y8gZ-@7S0*_a_mQ63C-w&NQLK>S?CbACZqM#j%tyYi+M|;EOb!g@F z;rE+*OwtCw+LO+C%J%E?2ugC{rrjtOyLks6o0C8@!m%`g`>ThOj;sB3xS-Kujo)+% zK3h9%=XV@EYZ`y^N!c9LdyJgvp)`jR)Z<7RzVFxuy0 zas;Z?b~BVXaP5Z}?#DmzIp@}%9r6{#rd+z3yyrbHr9b>LIRg(<%;39ynmbo%2s-NH zjV71AHh3x8u>f~_k;mKkLSM<4SnGgi1ZVH{@oIkl2WkgVa1(P1hxg`EL2Qi=zyNC zRzl#%B|yLHow@l{Vb6`*a2hnMBk;v`E3^TG=<55y#GqBNQ6$?DT?36O+~5KE?d`oe z4IevvJfGES@B>*rW{fu&v_juCdX9#&ftEb3FNe$?Jjj=>W>cTib1!JH8og4QaNF)g zSG%{U&&`U~s;HOKjd$vXq3`2`85+pX;bJLq_3>~JF%I$cozCz@19^E&dsF)R*`E+r zI_jS7cvF%KHeIwQ&H)Uu{U*3cH|92Jsc$x@`?eW9bEbr>~&B1J8%8mvA zXB*O!fOmEJrm4rSvfceuU)Pl>d`6J>mKd@k9eKyjzy*A<+8w~F2vTvXE7(1^T?0V78Q6zDNXj`^8Lf8)OW7VDC^xKU0Q4>4 zk2C;&wu{jKwwJcY%XJWBpCAo3D+To=#CTm^*7 zDkHiJn&TesS?sg|;{RzF)_P4JY}@_*+)m0UhnKB z;&<-I#_SFFN_H;$iv_A_0FH|vloOo`6gFz`+)Qz2%7jz_N99sC=PJGY;0GFPfLEEH z8}{9+8zXuRd#izWH44yqM-)5lv+e>+sHua|LZlEO9(eB;A%XU6iiX~ksxnF~mnhod zvUpxOEHLZxIg{6+mNDfI7C^7sXL^}6aK*6N9lnIglxY;!CcJq+j|KWcxHE?hN{E8) zfPUZ)ZmL4(Dwf*(fV^`KDBFXCAV09~>1gFb8!LeP)_o%&B$(N{3F!{MlcK^%^k(PX z7F2TXXT_- ztJOqG5M1`q0T)v0gk9&}v!rF{Z?~%jzByd3-pu7~EZ3{PTLSYxubM?6;h@v8lkbpv z@k{nTR9b9MaNNTRW%wbq*b{}8&0+P`0b~JYWz$*fn4*7oR7!u0O?|R0wwhG!13!qL zht#}z){U>$Y+aWR<_(t;QhuXEHh5V7nBnDv_O7wX1mpTB`K#*QGqC}XxOeN}o+Rve z&tpc3X07Z=*ITT2wX#$+{K{DoH8IQ0j)9ot-4q+DsPuT2YYcZU%Kop|{o69r^d;-V zajK)w{aKhG2=?+>z~*>xn{K-mfy$rhyK$4(Ug_Z4{+k;-EU|$inndUde(o4QN4Tps^(n`U-?)o zTg0@5t0eW)iI;)PKcvf~peu=8ww#L}eh)57J0ftmD zh>}W2?V*Q$tUD+x)kKm)o{e){ju%Tt4!08bYQi!#{J)SKWjN0&=jq6$gWF7 zmx;$K^%nb|An` zHrp5c${OdokQM@@np(}jtujoN~pyI>r-BH0{(aPv9T>LGgUcv8mO) z-kr7~E!D*;AMw`T+^XCc&9B21)BA{=ELuwpxUD+FoK=6}6B(L+?@kdm{xIyDwP1UN zp#-*Lu&m+9QU})#5n!p(lel}TsGDJ}03_dJqqx%G-64vu1YgT@(^v0e)ct;#l zd&uXnEUhbs7yGjv2rL;;?Rml6vY4?eripS}oiV!_+UkUEI&p4#@m^Y`K&{-3aMj`o z!UARY)~Xh%0t^3Op9wqy`J%b_kyM)mkGGbJzga&0F{ST1#71TOIXv~v>MDTIZn?qu zuYj;HX7@z%KeFEq01f)ED9eP_DmYH5C5B{Go;^Gf-q?y`pPO*mWi|hO2*EH|PYN5IJ0#}`wnx=mt%#8D zO?a6ml~;c}6xWZPTG=qtVKc$^`v8JupDtAx6%#YQy?Yyt6f@2B1_QZ8yoKCKmU7Nt z`D4L;`<29K(U8G(MM6ukg)bup#4r1+h;b^MIWWieEU|i+GEw$k;`pE9Y&=eBSH~&6 zMYYaf9NAB9gaWhAd+MC?$?ssux{*k^y75N`Ns^xJXw_41BIpTotyMpyw*&{LlrT_6 zl&^BW!r;@N&Ly7?3&wI4(WK$z8=oDn#>JM~j1&BF@nKDjz0OE11Ia^4QLp69`1b1lHbB$XPuG3|cr{%^vj&E(PWJsG z%%wiy$n9`I@*TC|0RPC+-35N*RtxjBekc?bvMU0KEfC5z8_1xTm6dun)b!#+{-Cif z_3v-%WG~e_eDNQg1b93C4UOIRQy8QnPUuz@Z(utVudJR?2QP5%3@WHq(mQcM=418++`zC-6?8uF8|XdJ~Hh za#7+d{r{dqU8t7LQPDC17xkdg^{tjJ<_IB!qzC$E{4YAo`E>>aKAiWp?2i9I*ofX8 zxq$Vy8y?&Jzb`hkCQrQ}7%hdB|KG^~i%yfoI9m0`Gv$$vLrTBW83a(C3aQ3lBxw8f z?0Tvv`~L-R1zKnk*}lcvafw^@6nZnt{2Sw;Uh+w_iN_GzN7Td5IhAWEt99XG!PL@f z>5Oo4fhW(`iyL)`Cj*^m9n37HiW2xJVelPV%dXt*`6EoXBPb0<%a6%(>SlN7cg+;! zq66Ef95e2wQ-m#Qn`JulIg=eZE>60Ww41m){4b}!3_m}&eYazVr%%r+?thWi1^aVK zq;0(yt1G6mDM#`SN5qyU>S6T)x9;>v{(+IfoIS%71wg#6Sq8nP@^4AKZXCEq`H^!% z6?1|7r}AufLiGN!>ATSwFf| zG6JY?-4*cqij=7!a^I&G5QHxzR@R3H zIdZdmZ9xbTXfN2I6oF_g6yZyn&`xMZ+%?^fB`@SSHYX#Y$#c#!&>KbRUH5LrRQld+ zF5h=8h7%&;#8lLOJc}B&%YcC)TJ}D1T$_rI>lMlpbB6wRR%VOv4Qn!e{JA zz=#-KYIo#~8ArBZjcN5h0q}$gw_3k}1t5*67j#&Cqu>{4uT?pywG9N>#s(d3>flzr zR!^EYSB&5?Hu{t@f`_NAg z7Fw%Ir-vPnh~nvm{e?M@g*Y;npt)AZ!YQ<)tVuN}JNBVg(f4%32yv%>_s&K9UA20e z*8^{dpS}N=p|y7?TInln>{2VLy#d(jK?S#4Y>3;1I8TE%+U5BM@R4RI{>OiowbT2r z-UN58U93z}aX&MGg%=?2jhS!)`;jxX0ju=yL$FR^Y4L3)+glIrAqkh2I{h1k zI1FAn58{ zfkun&T8Pt9`stQD8M?e>_`glP_kw0}IW)8nln=AI%SFWc>|4Gq2jg}Pt`4o1b7_->r_T|I%&U8WM9N3W?)s?#oKjAQczt{!fF z!Uxo40W5tjkkxG5_{md%aQkhVbzTe+c7E%jhvVe2dJI9pJ%bLx6Yu>k2OJUisIz32 z@o9HGmGfK*`kdE9IN(cA{744m{Jf+CzMlVe)-^u@O`?;4X-eE*_~jhwCHu>#P!cPN zv_bF=$xN@B>Lu#rss8?-TXE!u78ah$*`1n&Lpr7jdjeRx){$U~12R@fuHaepuF6gm z$w--|hR*81;%Bv0+yXnZD0j@$9qqd%+mV{La?nc!RLT(hzOY6Z*fE3YAfdja=x@?yN*>s4Qi&3okZkbZU& zH1a;s>hSim^U^?5s<_}Uw|B7;XBfi?AB+7%@z}@ak#8(N7`uI{ZFhj)f!GA;a}2)L zGeuqI-%S^_?rc(d|GKyotL<_GGN5t!VV3OI&~#?mZKJ4&D^{x*;bn`c@bx!f%>0o% zzrJGFG-+fKp9AURWhx8ATy}J@?}urd%>`$N_nmSE4at?1YSmcrlp&*{P)Lozvv?`FCnR@jAERFGi{02}}=X!mEE z6wxX1ZLwGMXPqHCXh7>x31qlcPu>YXVfDhcYw1JgQ?>0$WMg~marA#^v`Tc)ZA275 zK`4A)XYj>ARxQ8t$wkbgFkqzA@rlpW6lUI?YF7vlbe$j7&nDil6?;f0G@trc7xAY!om^nMmPSEVYTv zSsi?0EhA34u%wMkO4RwBp8^%QCVn+)p`)dG{z=VpQTa~I-!CUX=<&l~F5w*h&hD1E zMV^(pc^Gz!__H$~E7U6B*c{H6NeNpE>jJ6|CXk=j*eNBbRT#F)pJxNLc=Rx~y z9CeX^>ciGa>vsv3)>=n_M4t!!N7d(+&5(D9UMdmT`e)|fxsIjzC0B?{g)DFW)d{A0 z7&vq!gnv+gQ}^SwM9m@=tY6hBzSMB2S&U>f)q&M^+$OTL*03~sDHA`-53wgsF_;VM zF`%G1gjLCH%;J;|T)O1;^&8J58B5H7!;_kw;m24O_>H~2`x;*wy>`RnHeu}NN_{tvcV={fX9|VmSW3Zk_wk~>P|(HcsQr4VP$GL? z7~9aFM^6oy5!)}s_-(TPx8E?=nyn7{Uymmv8@=Mw?HxDhPj~ok&|sqg^{|l-oj#co zYrTUiPK2b}Uy;r*jfera#v{^g`wcyI6c&hgL8sRu$o7KdgKi!YGRD}cN!z+s@gINr zq&rczQJ5L*pMON=U06iUBdoYO zRFG)t8UQ?uog4kr;Xhb2hVilPS29p`9dyY6i`E95nkMz$Z6cUxF~??OECJ6Z^c^q9 zOgh_Vudq*{@eoj+w!g&iAk4pb5!LybwDvACedd~jb@Q0y)E&gz2*+NFtvw_6{j7wp zBI8hJllpDAms`VKIY~`^__Z`eRH)7t($cG_@~ZoPIR)q4C36&UI@~>%_dH&v?kZ+|0b)%`MOg$7z^}BnRLo!8wIzb0z45~s&D zGyej*eKXO)l(fbG=YRK+^VRS)5WHHt3Uv&cnxE3w3T3pCNmpD^_eE(*?N(>db~moH zg??uo$1A>+_`+!MM^uCk&$Y#wM$NA>eQsKHdZGIdYz=StIczj1E)NIPCeiH2UB1aR zIg#Oo*fQeCw}HVmjz0$3ZKW<5>yi@3a~@?-+q46aJQ}Wg4S(Pe=VJT`lbQ%&u-H2& zyZi?@rwSFTB`H|?$wiQxYv$(i8Z4hkB0gh{gISQbJu`<#pBMi+O2(=tV;VBUzvt8n z2cTfhcTe+|$jR_j=@UjpkRYnqANg8Pp%4$DiaYm)Ow zQg}!-*`3;Ha0&A3TKW#Ky&^ZR?>BB|UPjAvPfUtXdo18>jynA98Y5VW>~csnOF4yw zBQ}P0LndXcOUUN`_3u?+xe-Uxxmw?9>klkwJAPXU7%6qIO9z+kL?eh1+UVKimh%mD z7-u@dx6VkZ+Hoq%nkumgTEStJD9@<&kgP}S#2VLNm*f^Ia;oF_AntOrYBE*WPTm^! z+AY{trm!q!eTUuVCL9TD@jm?sPPKDU;<;y;rp&IRraz3!#O)P4a6)_nsF2`w!2{A3 zmin3#X+^{h1X*xmXR54z&@6WI8ab2*Q}cCbLM%iy_)hI$1tIMvvbS4zrY7IyG6Zru-IE|e0g@8;#& zmdFl67jVCFZDhO6Xlc!x3WhmQi6pq?$Jf1-o|6CL<@vVH+|fi)McAa%eDcPWNyWWB zorcWO-pW^#yCJ8jtt5qRQm)7W#bUe27EiKB!^x)IoSMBa!!oD4fZk)n9Z2f=Le$J9 z@}2F7%HBcEVW>&9q!hzHrc&0?;(aT-S7sj>>G6O!+zIMDbNKjLt{R$%cNI0sTr3;z z*r#|ozkhXaoDUCUEk(+W+LBVB2zC;6M=@AAVtadiE?WMe?rwpST&Xe|i5uF9FXrUc zL`%6?dQJ^mEluvdQ4=a_|##&l_6D;g# zTpE4TNWO1}A}|NJ=FZ;lEBNKR;_%Q~ebP8fhjktBe@w9P`%kUAs@TchtptQleB&jRux+eJ`jn25BAeFm#j2+gUZCv)odXtCf5}4@N zP}666hVr$Gs>Zo-HfvJP)En;{Emq{zc!CmR{PD zjrgfBji5()(74H50Ni6GMBMN{o_f|)jMO?BO&yq(CZal&WuSHSiCnn9$Xr>xC6b4O z`CSW3^s~r?j0}?gp`YuU#G!6Oo`HLD*!t5h&r#XD=^`xt*?cadPv%2)Nj@@+n09?1 zD5-ey#c}T^hq&3umfRA3hF%JW9ApBVpBxye68Ms1V$zcS_j zpQ`!4S|r;4cT#6NuW<+qU-6aVfsgWyly2sl5;N7G2elfqFi{Z3V8kQR68ej@Z_LbwzkP$C@!;iSw)Ngw8jAJV|BmY|`)31=1(hv=)PpUyyx$@kEBk zp2?6UueW8B?H;oc-)8|1Me+jGp$po?VM44RM{vMRBNUOr{Wx=SF1=KcX5FA*k5FXa za^hp9H%uN8JElNKycNX+8ku`XAmZO{XYj1_8E$SPO@n|dVeSVkpW+99{2PD$^bSR} z0M6J8mK=NPEyNLB_H%mwyiPqpp!uzo(z*v4 zg(`i!F59RB`uj&XH4HN8=*znp4`irv_JEZv*HB)5TGiVxldy|0x$+*S~kSH=w7FOFa>)jRhbmeb~czK-L$G6}9 z8#AVSpVtP6BC5&oR&049PWU%m$faca#a*auujG57Rp@8LRq*{La zxA8gC`vL-j`mFQ%`zu*q-Lsv}^VJ4nX9=4Ub^?p5^w)Hltj3+1$Hv3OG&+m?p8Mg+ z_{aqd8cLnpZl1rQAn7 zL>DH{aA;-rmoZtYLSsn%BJVFFCJ8e8((~>QMB;TZ;0m$g!3>(bMcT9{dH4EG)bC# z`;h&&#*0qA`eTrZB_6n^R_|54!>b2mu-Sbu>c4GQJ+NNLba#J&RJ<&=mRDjDw=vg< zd)2hdUtuIcA!Y1ssSRTL?mWklF@5knB4P|8&I;L+Vj=DFd-UjLlE-QzSuP+{I zM#-)~G^d6&r>hn*@jSWg0k(jxeV_HLk+Pj_OZDM2q%-5M4&w`l8Oc^edzwJ5vXTL_ z*;Q>741m7^lNt#o*zVV#Vq2pb>Jmm8-5hbC|5rmzSydNBHLFHy0t2;gB-|!T z-uMk@^|cphm`x=GvLA7;u5NI?^)~0U4jf5$hB|X(yE-*IfV=Dfd)!g-b94t-X;FZZ%N*n;&SH_nAK1Cb?`faXfatU31TSnRI?jw-`X*l zND$*KbTPWvghyWA9~3aEYq(2Zxd+;7NaBZ$I_sWT64ucZDUxvv+~}R}U+b6Tn|9;0 zn2-Zoh55OWdqE_|X;%)apIKO#8uN>*n=Af&h?Tzxts-)>F|noB5}nhUWV?}0UzYuH zW6wqY8NFnrHEpuU{nroj>@nSZ6^Y`b4e6eQo%{Q5@J55_!;Ax9GzUoocVkY0c%41I zW&*DK)iOD7|yHlWC( zrrr7b_qhNERZWAQckG4?#73&B!egmvDdwm0JR;56bq<5}b2Hpqu3g94x020#zGdN> zEatB}8OTk3O?@?&iT$gjIWImVROLbBKM{aL5*0d@_22^v>_Q4NbEa7XDBw@e^6k?p zdaH&VCF7wvZBQ4V9DG5wCxbGLvSxjj8aleVYgW)~O;4|TTVVD<-7lBJ(L0;S<2xSoL#q*kwFXAd(%grvR*CfG@MWm=?xcJ4_qOq5T; zCE9Iqv*kX`D?}^|%1~B@_u-AM@Pec!%I)kNQmc`fVm>7!U#0he&}RJ|M*k7LGNsh0!{1o5fK@oF02-JeHad+8il$K*y>DB~9OWrse> zkw@Kzrj|}k*E*Zy6m{kTvz7+L`aXYgm$D^j@O~)*e)W{zzXzCfdSuZOS9M<_?@G0f z0@q=E&HoI(Fc48sqR5@TFEr$ke@|6h6|pS0Wk)fCusiR(6 zDS@}CC?tVWk;|V0qR18n>1l@MQCuUOu54k&XjLEA<%UmjLNwtsXW~bSqEzGmF zDbXWJFTWe94UleDx7+{WVYqJa?#i1sVm7^Uo#L0Np~go&L%th4g8$eO$#FH(2y@ry zr)^OKJeXS0yMxueKWl6{e~`{FV@#f_{96ON6r}%kgivAA|G)VhEbrAzB+=)9RQ4tW z0PXuJnu9d%fb_B%DQ+ll*2dk7{JFhpTvfLm2<%UB`b75j2OyhrAi&IJDNPwWoJ=!p zd^5FP`-y7>zId4t06xCv6XKozfU!U@-PWx)Xj&yE{E-9tj}^_w9rbCBk6b6|3s$JR zmt%n>QB{vQa*Eb#6cqDGz2z}aHt18MQfyd?C+eZ=T}7dld+QT*SZZ19_p8A9xWn@F z&yN3EhAx^W1K@zitB(1ro~Pax9b_K888h!f*=xTjjE`ajcw?o&uo`L{o*d6@W$YjS zRlNs=DoC9sNZl6o4Sui|%aFX00L(w}HfYkIvc#M|EhFNFwo9}R{m)OAr|P@$WZSS@ z!ifEqZaH0UpMBk{G8v#DO3{P9=pQ6-J;zw@!rrI(L+wj_!u5cGeR0d)KQ*C)WTW=$ z%qgGkoxjdI2-7}MLn=9oxd8DQbj3gAEajeyp7{CroI%L}^iF!H7;R2cCSDy<_k*8T zX$J0oMxTk4#Rqn`TEvM&Xq469#|S80^DEx)Pcnz;n_cPdXtk2oER?gxjNY}o6ba7$ zd1{Ob&&w;w%gdL@fq2^rZ48Q@4QUOqZd+!f$eM49RAD;W510Lf?7M}Tv3&500rT1w zP*I+F37dQ*-@$zwcMeTo4KUB~|Ct{t)eR`@Ar(s)eW!Xun?ODL0jY5Msy)2$*;85B z?K-Jo8ZvlX91f;#LE;wjHFS==FB^!&?QJi#%PO;aV-9y;w*UI`otfvUq%>OE_R3T2 z2TQfztcih^-Q&AmpTfT8in)d`WBlQA1axRmqQs{sU?{7d{6&h^ntVUMfrfm@TY!qdm#5Wwq)jU zdA`h8z7Mr}Tbn3}Z2E0~#R*CA>k8y{RbAA^G88Mgyvu3PM73+zdk8)xN`2~A=~W!n z2Fk*In^~cK#F{mpEG|P${HB}Xb~n@aSERrNNcs$Vgvs2-RPWBEUjEhz@yP~19fU2G z%(-UnM-Z|&BlR(oX3CJUeszNkXlIlm{sqMimLFu7L?Xhv^XW=O&F6%SnURvg99P#m}V4+}S=?Z}R ziN5xUp%6WYLK5QRX5oJKGo+|if((UT-VA~T+z36#cWGil`XIC zH@(#>A9-<8ug%z>+}(swAs}bskcQ1DOvFcpz*arWm54ic(FY*D+#DX+btM8J7|V0U|qAIzLgq%ZVv)SYL<^})GsX)FujurILuic zbmo*KZ}>;O>FCO(L;ywnEzJM))w<$geldk!&dq;t+Em+eZ2~gKyZ92zPTIlQ1f2=@ ztydaSSWtSVx~f)U{9<<`$&cB1iyy~hB~vb{(%v?j5dnfu=Mn81A5AT!Y%u{d7Pz^p z$}FQOZ!l?W$7Gx>-Ld~4w!SJXjwR~$;7$nc?iOrtg1f`u?t{Ap2oT)e-QC@S!{F|o zAi>>3xRZ1K|K6AT!V6zbcUN`SUVE>#b``MnVh2^wTOSjsCvKqUbb^y2vnCe6rgZIx zPaa(=Z3Q&=^%B(VM3b%=__RgVx@Cay?fo56%B%NpY>0;sB565!)W^`~~8p|o_P5(L9 z(Pm`zd%r&G&-ng3NQ+5h0ZV~a=yB*G*mV4V-Zo4mseMy#o(7+M&t0ke_%G>23cLLf z5tWF?Lfd5@bVS!Zsv6j#s*uP(spQEl_9l(s1}ftNVDBjnd##8sa>t@7eDfKexRD_1 zBuf5uNVRUl(u1$%N9evBe3q_JMA1U{eT`oZ8bKbJQZ?fgU+X1(!e*Lhs~A=|zjh7Z zRPnU~ab%yRhgPX6K2;1u9?5rog9O*B38tagm*0n9C|jxOs*5Xn+FEcOUA)g$c#z$F zbZ^M3^)R!^3tbysU2c)f1wS^Gu`|`Bv$AIvS4VD65}w5i5y!kNk}QSjJZlKH3{n!1 z6km%reH2WfaF-T8TpmxH{yI0gzq{IOI7%j_Q5YdXnN!jTrh}J)8_An@b_x4NYQyiTj3>B0awB%{ zKTqx;Y*IInY6Wy86ld<*wW;qb{-Z>#g9;PvMfy4g?>3w@s59^HyMe z3|9BzSRHU@{fU^i$Lo#v-!T4xWA7K2e`jqe`a*bz>V3;SIr{fec+~y2waVj8qvDA7 zy+khyh?Gd|z`uw0c2t4gL=6EFWb6QZJ+v$h9DeT=w`tS*3f~;!XoCDi?C}2eRAG%>3GowMuzvCHAsJ)z)Bej$1+H#jzc?M zaaDmoNy@rD%iglau!^0}p0x)WXm%Zf95v^_jqj#gHE24=h(`O?%_6py`X6xdy>Nwr zhn7MSgs7-)ilx3!?sHL@TzB*DB#d1&b_5U~cGz$yZ8@LM8FmdL;qoO^PkpVKwal#w zSd4DTtbwTRxdco@xWk5_SP?C=L|Ekhg?{FrAA6x@#vQ~)w0u}R-&qz^gaiNQa-`TW zpYAl zi5rP5TcUzQ#+FFYA`1aT%qVdgkpx$pq!2(1$=@&<&0*k8F2X=MjDt(G4`!ur+6iQz z(3<6cd+7ueBQ7Gnk#SezoMcTR6Lap$z)m+I|1EolrO-f7pXJ6{^)FReoZRwNf*faw zk_&nbk}>=%Ts1)&;LNLrCG+5qu50(HmH(cZ`~#n-X`c}fLw(^tE0{TKls`5K6}x94 zW``9Nmdj*q!|ApXtQx4--=X1<8M{F3%H&~_IC9~&i5jdRDF^Hztcn=-3htIF(fM=ls( z(}*VplBIIzEyYil&`M2mX8PR;p$I3oykB^ymc?fvfDxN>_lu#i0$xewNA~+U-PHFb z(+PRWWv$2>=Z;ovP+z=c;Ss9o#>*DzhmIb2;YyV$w(#Oyq`+ybBoAZ4EF>6O$3V&Tj|6A64G-{?@;EWt2uRv?ulek3p85@OnndJ`DZ5kME47k;9wPJAWd#2^s|2`1t(rOr(moB%iKA34Q$TmVmSHB_8KWlKqc zr`Sa+{j(a0HlsO4*45BQLUpVAObvA|#*Eobg`ZTT>GFUGd+T4O;qd_YYAOSKJ5Nt} z#ldEpfMgL;%Zs6aUON@88*w{7H((HG9;3z#t_?e#`ydPQSIa!J4wD)3_C^h`$zBi| z2f}vMC9pA`vv%pvE3H(}u(Xsrj9^<8_aw;hWR)y+lqh5n?*vn#v?NjMf07m)`*QFZm@7U;mGSH9YA+<_F7sE4j1hsXFNpA5#)dndeNoQ7ef_1= z2o*-s3ZwlTWl{Nf+H$!}@sh9fs+;1VQR`q4>!DHmaLqLpq6G6-vP%hB^ep2HQU)3M zs&dh#0PST0azF~Z;#_&C?%Zc=JqJ4n+VY&xZOcMFY~s!ak-YNo?tT_lL2fj7V1Uy23vG*WLA=}mrqA3n0}jjTNM!c!5fd+7 zF$e1MJn&Ri{IT0mC!abtzRsVYkkm)0s3;W2$(zryhrt%*OHvlDDsshm*$*qsQ1 zV*b$s&yNw2GorKMpItKN&&LG#`tq`0SxY}i^rE>G*U>2Sb6=y?uN)LujY0SZ9f0n{ zesrLpB4tK{rNp~k>R|=y`2xYZFpceWvp7sBGdhfCc?Ut=?6DaY(AT~t1gJr6V}X~d z#k4h-pJ1@DX>qN41<`51~V%7#u=F$Sw&{6ik6s?_yyamP+A-TK~E;J&a5E0r$EiBkZ zb3v=9iD9oxLKRq4xOhWiF z2e^k$nFh5!cOO2Sm_}|A-OG(PHmylL*<^<0(h#x5FW9;3*{$HXZ$w~~`u9-3#(Axg z)s4UJCGTfRxi2E2;Wr{q7CLj-yRc$Cpnc3-BgCM83PJT1HIcP25R$fzk{}5p@uTha zZ0^mW;Xw-PDyQtxm=@7UPFdobEsJrT5;wH5b=P=}=OLsqL#g~yoNw0*lcS@pucHoJ z0bHO2?RwQWcDEO{=9UEiET`bvZA)BdFYH)>Ta!K4K3Vm$wb!xs3j-G9Kbpu*s2W5Q z#H4TYgRl9}>;aNEEK@ik!;1t9s5!F`S(Zlh-3R%**fA(Of=cX|!K!Z6DzENJ-Zta~ zV37(wEmN>+g)aV6m*tR0;{q!S*R*GJu8C?D7FzI(@7%EzWZaZq6- zXL{>2kRHDtO=5pkeX5+Y@|Glq@;R z3?WMRg68T{#^&+CoVB5`ng4+uDF1Mg17-kM)hrz;;{=#+E;M7 zd=h=S+9egkJ62s#HZ9$kA`3Nc7)@=Ij+diNeS+}kQ=uwL-taEbHzjv1rdI#pX+pej z{w%cYO;uHG+;3-lsDhx{OybI#%43oo5-gOC9Yl5h6IFY4*A5Uc;PSlM%EoY8#IY08vsz!+)UY%ud#R4Y7i-$rKXep)zrvEM_h3`BPs+F z#din8oFN!>GBW$ip^WVjo9&n8rrOqqita#;$&whZGTdZO)adoSL5X;Q{jWT`0#u;P zk;2;(o2r@IP7!mePvpUyJFo&*EiG8Cb;AEBB*DwL+r=BV(JiD{YDz0vV~Os?O692E zyVL9rR11`3Q;0HaN>q}jo4OaLsvh*mr>A~JfoLJoVfG?&Bx|JZA#{_09UVV+25 z@Hxp~Wj#GFJHtTH;-M_nls6JC_c25ScQgmTekxqyk;p|GhP!IT1}(6eL^gm~4J6Gt zY0FWTHy%)AQWq{1O?QX5zpIbd@g9Nrs@LSoZzUcjGCOlhj>!h*LK=!(fMMKkeY$BD7^$fkhm+dM$=;X||ElkycaR?-uTV#r)Kw#>>;8p~w;NG*_%FsQ`GGO7LbK|$ zn3?R`QRp78M6|~g-x0UCu)j}ukP$MOzW^X7iA)EmvPRi>mCFZ@JQ5@Zz4UMW;n$*~oq*RKnWgsUgwZhA{h1TKC z_v~In*z=wJ)z_O-eDqXNSX|l_^d)W19dTK3kuI0|LJrC9+Ko zwNU2BVh}q|nig(Qn6ka%q#_oq>dz_ty;HMaxHsKRG+$38!c;N z@mK5Je57%s)KPhI=+LMUt(>y`7f5S*J!d+7b3hbX$Y5vzjH2}F?lUAFS zW%I&&u`EE{%DRa7x7{anYN*D1wiwWob;4g^%YT*a_^@n&({HVIb?n{hg~E%~%9r#0 zDz)$R`gz+m!mHK(T@vr^F``8cnHaTDJaq)9k4AOC%ii@;_5><3Es8iLmB? zT`Kqn zn@{|6lm5)y&d<0tNS(*8+ravm{LZ)Rn=-o$bBp z4cslOtx+L(#S!m1GNlAE)Bg_RgsvDz{hw8bOv8U!CVG-$Srauz3Y}BrzJvQg_@P7< zbh)WS(q;{GNCb6>p%v89AwZ%T9|o83Ee#=hPsUv22LqY-Hm3e)>q_HyKLfV?0-D`N zcrhnkH1JHA4DYX71Y^)meLW->ZOo`vO%pn4mCkvH-wLJPYzTI(#rV&&!*0wxa}B1b z6~^Y1Ia?N39W#{n1jf6wdb?>X9;M_968Da!Y$8- zOBzh*ew@`_0zwNrOz$0v{jz>8fPSK$%-IPeQ{CQ#qCw0s6|xcUE&#NssmwC4MHZa%Vi*c+ZnggvgMjyWuhA_2-rBU*FO6r0{+QG#0;kH*DTsTexJTJ27u5k zeb|W6pAwKr2m1dBFCN^B-#KEpX;Bh(F%SI)l{Z?uL|6+zOLxm$!}&J#6hs;|R&DHl zgaZt(26vyMCv6)$lgkHw@*&A*^(n@Y57CPJ!1%E)c2UiFb@mb>*%Z}Si2`>fBh zBXtsits_JI=yU~}VD<_BDr_LZnEuRD;EunB&cgurT7U~8|B4~DZ1N)3jM2P|Apuf+ zkU7-{U*mEgH`7*e!cGf*-LH6&>8n}zwfWhI4HG?N04i>xe8uOe_MTF+XW3jjmOo(B zVV=MZ#^4^frjN8Axc7%=7pdcRVx7RLwtErMl#LvFj9|9-u@X01Wrwx6m{{0}VQ)O7 z8aZT`N2}B8H~d!(%xQQ`(zK1+b74|&T+COO_OwYDB)*;&i+G+zO`!s3Ft1R{5}*V$ zx!>H*dOH~stxM}!&BpKAxe8={N{%7qykbEYipqQU}H;>!pU3b zoJ7DG@yX;R<8>ML4^-^vLt8LZE z$qBo-K z-`tw|CnBOhGZBitw~dXeB3(i~y}d_EIVVDS?C^v{b%U$2lQ_laSWK<9k2n&Z`Dx$| z#cG~jFlvWOJxev*hLx37-p}k!U64Y``*v!|#9MrV{DZf=->z=RwLLhK0~#xvCn)FF`bBQ+izW0td-)N-^Nyandp=Q) z37ollKSk{iUeZrgOi$lKYX&a2sE<8qM&dIQpI45?_8~q&4U6_Ib7GU@yZ`fvnQ_>r zdwry^(Aj`Gzf^0fbrc=`b80}@f|Se~I6A{k@X8DUE^9+Vytea2moY*-C}!zizXncc zhnb>Ri3$&;+#&>Rlfgw2P0HpU+Z*?#G>`eAZO|fs6Qau=Jn~rin4bSKiP-u*ZRWIw z{t}w>(uPr5S(c6|3YlJvp{NIb>)U0Y89wIh^g?V!@t6tTUC;<5BXDzcE22cLG>jy0 z;=-40mj1NuB(oEqAnRaHv38#NP&wd{ikbJltWoQb6A1z@cnQNK7ma4;YjD)ivwQkD z`OINrQrztgazMb-c)QRLxrzhjhf%W0#I-G@1MQ0p!Z2Yr6_u@x(aRAWz@1|FD1vQc zRwn{cU16AlhgbDGeSmg8HB;AjIB`6JzT?PMpc0ntDvXzymb8Tfy2S|pn%>T|ghO>~ zb87=Ozm(5?JmN7DS3Uo_lojo3mfk4#94H?p#w-7kDe5-vVGMF5bvFb3&67xc`mX39I-ok5XvNx>0s zuMLVA{Hg?!YXZu&CA3CLpP2KEW0y-k18Gd&%&mQyWa1}?DtekX6DMA0N=gmCC#$cS z-?uw0@r~iYvV;#%coLCRk?nADry=>Q&ke&=N8kb(G6X_crjBzsWC>QgZN6c<)b(k;yK!!HmFK_(1R}Ce7r?xi)TT@yY z3ZObJXP{6UIYq(D9CaTsbdzGp6g{pJS(-S1xXApS_yx107j0>^YDuP{ynESXTtuKX zio&g&R?e329BgkwT3H_cxrX%E!RENIsY5J?Du3@0FBPCt5nWilKVpIpB@6+#*`1Mv zu~7UmpH+-DD(WlPXiA7(dF|4;QVvJZ;q_PWck)d&fs3f>p*I|Lv6X(&%bT0JzgLav zD&foAw7vDYLuOUBQZFJYV_Xf@?t&?(REYOUrP7%^i2>OS-j1*ZcO?`_? zzw4EmrKJHssE!b-uDJ{ODv|MfkOyKBhSnuLw(z*2E7f~*ayy1|t^$`=Wy|hMic4a_ zXsZg&$6kyA9uNzK1t|Ry!#!+#PW0b0G&&4@V6fkIT0K%>7{a0HKm%@_d60X4tkbBQ$3F@ck`!aCK+LvaM&@ql zisK&V?tqyK2;r7drOV9oEr7Q=H5{#0WY!`x0n``C zh1u{~lb{$!A3kt(IDuj`UX){QO+I%YDH{EgXFgQO@FP~IH*!7wtX7x}#oew?D7IyB z!4C8JB`xawGx!{%UblkMLk>;W+l>&9IF)k0kQ&Z1a<>ntO zx5_Y|E?H_yJxgeW6frKdn3&ufy+icSRrXyhCDf0hBc+m@9(9i4Dh6Sv$Cnogx_u2c zh3M|?AJ~~!9H&D!e>Z#`m}T>nJ8ou_h7b2MkL4l6Xad2iJvR4aIcG_NKN7kBlGr!V zb@ZWe(6?L~!UOek8>wLP~rQ2_-P4 z8HeM|v#gjWkXbg2e-*#0BUyk4U3ilxFF8Mjr%ogJj{ho+GfkS-IS-Hn{^XUV+R?^{iA-~?}Z`Ger`QgMU~O$ z;>h41h!|P&uca4mUJ$%TMwJxC5L~$)${^Go`uglb2X7apQ?~<;y2P5iCh0Gy zh`SpfhP26Nhjay2Y>(2OcfZJbAd%5e3< zy3iF{Aai8+aCuAn#a%~4{)!;qNd7#?)bFf;2RxG^z;0~ZY#C%9Z{=5}cALg^j|U=( zG|f>ZKj_Ok()bgLYu4wP6R*MDhuNPt^_Kcv5Z4(18!cd(p_5bNUvfX436U%Q$ComaDoc?8>{xQL9(_a>&*T}*L z#lo*+@r7`lF`mM2?l#kx2~r^lL3-_(UekLjP+@y;r~>g~yLtci<c0YzmB6{D}Cxw;3Rk7R}vf{IzU`(7P((1A4T#F%mu(hmM^S z8SG6FBxQ=_wX?cDl#WFt<(r0q|1JC}(uk?G7ihkrYwXj4%5MCD%NT5m2fJbL7ig&m=OKDk|{^zfI z9DyO-7kAtQMP{6@hbLLbID7!bm9Q?#Uu(bC#h#oFgJg%uEpduzjCh?1_TYulgA+~5V{YtqIF~RyLN@bjCq#Qi{CyIUmeIIe zdPaB2A_X@oJS|S4c`gcoOXmcm%5Yko(TORg<77N~^KhOrZy!MorOM+vmV0IC+ZmqXqLH zCOl2@yE12@BlL(XO47w<*IAprz;uR&j^F&Q!oxx-J1YRq0)Qz=PK-=cbZyaLV`hZ5S#vJVa)1tC#6S!wPRg z|5A*q)W#bZT~ze4e3X%V3v7XI{VzIBiQuG>;p`Q-Zl#$wxK4s&lW~AF| z9KN$3%j&g?k>a4ioWDbk?-G43nD?_M!UW;CzfPQ8Ob?huX4JW6K-sndx_emY?H zcH>B9U~6nt8Ph!}*^LJe_$}7Ixuzg{D6AJ}U)p30qC?cR7CT+Yc-b*heHW6vt&$j~ zl7@Ttj(xFKQ}@;NF!MtTVz=Sh2%MY#uk=)^t;;SUMiR=+fcfFUohwfR8AO1u9mph%?x~xPT zY5PI@=}iX@>k7CQ;~ACVjus9jP12q%2FFWEH9p|g%)yC5rti`!p1w`E;dIqnXw znKl`)Y6KqL#PkqhJHGUQnybk9jNAun%%vnX{HQny(L8vLmQfXM!fb9Egql4*bPYOl@3&(rC_;a`(8)Z3*I=gGWvozs~8@tfk zS40fu%WJ3RuoX1K0FqPM(B+DevnD=KHm4rl_o=`5DTm8eGf6yxfs8TR7+Lw4&>b6) z5>=qSWtFPqYw6mR(R3skAB*okzNe?IpQLw#p{?;O!5ZJ%Zr#L5<_a>Tt_7ZIQ23Ct z z(@XIytEveZIk{>|>1@A}smIfWFx?r8v4RpoU}0@7w|g}cS7|&Q{>OEyv}h$uXM5zY z&dW+}I0D(o$)8i%y`4rb`XA;x&W7&p?y|D7>aGjbkT2vLMCI^bneJjX zAkcK?b)60MGKfiOvUH@Ncl*gF73yA<5t6q`a97RX1%1-@K4cV#Ldvpc3 zhCpN~5WA-qQxUQUxuJ}%KQe4uRE*X0N$N*TF3&}9)3@)X# zP(hQ(5LvDML?t9$QOJUh@-^ExEYM$Y^L|ZLMo)UK1aa{$ZvnSvDOxBTWiXvWUuCG* zgJB;6#A|=DG0?aS4una7t5W66u(*8V0_1CxyHdIF*#Gv)>%fBX$gHsp8g_&D0P_dB zXsb9giN_bnUt#CSkC>)a&}xP-3IDw6tJdqF8=cgom7hZu?NH=u^AwT(&eDaH-5p z=s{A6tf8u@FFh-Od)LzymmXVXM?GV4XhyfZ9GNhN_gz{g#@aq{swWx~GP}5gkZQPN z)6s{@UYi863n1}1kn|Wxdhw6i1b4@wpll6Yry>Y6h6D zcLH+DcS>_H$rmsPsP#L>?19J?*c=rt4gpjMA+*=puC7=aRgpEA{RKbTcvd{vOANbG z*~gKjiqy@39e~{hWlyf9AIHS3Jt)$}RXA!HBgp6i6#@2l(nX~9j?!j&o?7xGns~9g zIA^$SZy0*f)pHfpttJsU=k6r-jJ$fxu+Tct^4z=eTMyPb-Dc}F+|OmvP#r?_4X{sA z@6AZ`ecT8QVk=heH}!AR+i)b@rP%`O{Ywui23|kk9N{JS6-N4{GMnr62Zj?V>f0%f zfgi0SBb8(-Na5+WsmRDc1bb<8XH>ES>h=`~t}@1G5eS~9Wt*xylf&Yp_zQ`J@;)21 z=dPz=n?}LX5$@+j;2fWWJ8D~(5fbO0kqeQTW5_YpMWxlQ$x|inZ5Uya3uY`+yZ?kM zC04$`(Xuv>7a&q)9xiHV%#B#P<1BF{039<>bl)_QS{o8ru+iKW(G-;)+qm8DKX7ri zPM~q<+Y7}^nIeT$i<(*q`?=+Jg+cuWEQVC<9@{TYcg7~j{=si(ZrB|QjMvy9gwx}W37bW7~g;V6slx+hL)6yqm z(iSh+huQDAlCvIR@OIP6{5uR0tG||BV~-&8rNVMVD0|Ti{UoGS^w}||7BW#xE|~ts z#(|235MZ?K6U)Y0Il;Tdgv3YF^ZNY>QyNE38mUZ~RKVxLSCWnnyA|7rPicQpY49}( zBL}E#Odx8S$(Nm{-?zy4k~#NtT}47*ZdCzVl!15Xi!7QSRgnQKKUm=dK)n?0EU+{- z-G1U1OUFKHt6Z$v4vrvhDwK0^`y2(`qoq52W^}#8v;|qp{0*~P0GvAsY&J3R z9c065)P|4*AB?eq;=7TY{HAflpauWs(z&OBDI3p>*=SNNXZLMCmT>{VE@T^%7h}|?_nWR-Sl}Y?YwJON$ zXdX0l>O2GSvxVV5!O)a|Qm~#4qy+>rT%5K1XfzIy)`C+cEhx3<%`^Ictkaf_=&||r z=hu~e?$R?pcm!%-uI;vwfLO_r*ZWNhbIEZu+^0RlggDcIhA>$Ode}XoeSAKU=J3n0wuV)^ZsR%9PT$^g z23)^L=dX(DW>}#h zr1sIS%&3Wpx%RKFY}G&AaFSDb@@;Leg`{@QEFoE=Is2vwUh_QeuPbR~fx<8=eZinA zPc=_?PVe$molW7vIqwg<7lP2Cg3+*kq-`4{zqg?e{;CZzMl)%Pz+ii zow1{jyvuCwaXs`Qsh5je!9#^N%c0HJq$k$vojHFnVuA_oZ}r>Xvw6Q%{M9($ywC5hm8NtO_fY5Rn1mZUo3ehC>L@DG=ad2_P9V zyi0mDYtxij%Q4r8czJ>}cbZ^h%^8SBql*2TSUvdbXkFpm>l=F5AW}y!QrKRN%HJzd zLtYt?K4}tKdC3p2Q_Z=aoL>S(3LC>|qC zU`P@LlDnH%fAl+kei0M#Faz{zym-)JjaSj%6E83pKx@nScyD zLV-Y3zYysOQHvouI&<8%m@m65kZ#U5oQHvI#(`@*)J?JUb}N#pdNtd&b=1MXyXz~4 zi%@eB{&fExJq4-6>vLOKG5ndE{4?qjN;*Lb`(k@BOU8*nA1Uxffo8Wg^UR6T{a^e< zbpf$I#AwzbeUzEhYYu=EJ>YX5M5qp~yZ2%=e(F_ah*V7w_|K4(GA1-M-XijG`SH40 zXt=}FE;vnKK#m&mj6*r%XbUuCO3OH^VJ}n}Z&q4O_*d>U?5c&jigRm_I}HzuNiI+~ z;0x(@mr+z?glEcAfN$5cv5O9Ev4HJAO-QWDY}`j{X>_qvtRx7vqy2^bBTEZKR(wN7 zH3OVX2Xp7zb5IX_+35Mz3k>=BVuTbv7U6!vLVUJ-PWtj@yB;@OSpN?q#h1pj+p?%| zP5)KO49jQ^#Xq1`8pUom#+n2hXWkrA^9z!;g=48dml>v`;6iyq*l>@P>NTXyQA=&o&pBn(yg1eNGT9%J>AH-B&5F;#>F6>&lv z8i_iKddq&ckmC?|86_{ZG%rbAX}Jm6tSa+x5YD0FmcLfK4_T{t#)09U8rs{+BO9|z zCmiKLzZHE8RKiRuGQBgIcfG0Xq&=JoL+C&o*mL^ZoQf2hvH(m%P>*)(-AX+{+?#$U zI3jwN$Ltun3Wbc98)~8%#csTZ{cf!BsP4VLWO2ufU6@j`NOu!zjp8m!G%^-EElOP< zBSrE%HT7aSxfmAPq`r$$xGO(Uu?RB)tFqz(_a!-6KjNZn)+Q5NxY}bL$Nbp07U^(e ztoS1%@nH>6?%jg~cTdcq1{qk9YXSvdkn9vH(;gl591ALLswvRIjgdhFzz7zjfA{%D zM+Op0TSnX1Y|s$FjhF*1f*|ZL?%y-YteBk&Z`%bSM!gauws5!mFQ-0sr*)ta;W&KK zqF?@ec3yebvqa2o$lvhH`s@yezTZrj-Gt_{6bkBv|LUL|pF+i#=jC9c9Vm_|M&xT6r$|OY4@i0C# zS2Oz}S~Z3)Q1EvXbiul)M_G4hKo-*dJa)#~?*ZWrJfEC3HlODJtqTbHm5dEf>VKn33$u z(6)>hQ~9Myb*o5CO8RE$sc^h>PL?4@TSr@G<=d%7ridbJTWXxGHS0L*FY~dG#nhp0 z7e=V81l{0aGfu3in!SHITK45kilhWmaueqRYJ1#RBPJJaGv3hdm*6U5G&#?L|CJFc zw%_{nnMB1rXzJFg-{3G0Q*4uUkFPRyCkXjc6`8JdrSB-GpfAhCIDzAzAPm{ua z;qtlCs_+}Ufg=@1_F=(F&Q%f&R1gjx{)VqW!E{JMDWIrXG}r05{-@3? zmqq4y1%zlR(tjhz1ygLhb|cTgo1 zQvBPa(iol_O}V8}Jr&{q=ID?sI5a6%v%ewHJw4L?`NXc?YnS^%15f?bFtpeUxPG7K zrvuYpUma_R%;f(aOaRGu#bFE!|M!^? zAf}1$1LhnA{r->$^hc_0MIZ-!3P&OT_aA>Kh|!5q;ji!@>H1OomP6Dq$D=Y{BNr(m z3~sugILB%DfQNy3$I^+U;Rxz8AJiX>Ag0s5hX{1UU4QA(Jca(WAIALcbtj<1ZhBhn zcTvV$+ySaksu1Gc%4UJECAtdsRoi<96r{4?tr7t5iw7aHR`VA~LB)c(Jlzd8zP11? zkUQVc%Z|atkWwnQ@{}Le_I5o`AwX;A$?57|L|@tnF~{r){lN;HN|q~!(YU`yC+v$t z5ndVW*5cPMfbJpS1nb89s#_ApmK}bQnB=V!qYG)+_;d^26N5gh^vQL3H{28o2G_%M z;?`$CW`0{O#v;ORE1cc^pWZk@U7D^LY#szvrp_~%$F85HHfFCGt)@fRlcDzY z574Gy{Sd{QnVC_sm|aS2J2troPhJ<&vV6rJNun?ze`8;QkdYT_a*ROP&L>^~GN-UN z`Tw9ju{s^WpRwy|z%xlZrkpr#1VQ%1#EcA~rMJ`ZUodJL$zv>R-ie_!aTcHK`Zx`8 zS}cOt#oZv5PYF|Zyjp(F-tq{+^Cp?oQ$`f|$nlNWJ9yRpH4?3+`Xpp?IpZ=p{k&X* zc%vC}6!r)o;WbYWeM>E643*($t)!+gV(Wtj<+i-31Ldd}T~3<*aw9;t+&=i%YIgEw z=7_^>;h-IO;BU7gQtW)F9XLptX^WOgX-+FtYMA9TA%9 za{P0Kz68}{c4wjj^@7c9Qt?Xk0*#qwX$ksmndrJqRsWr;$bgk9hji$TQmN;hA~GYg zFhxWtYVZiQaUT>KUkDiIE)B0Jt7KWljwHV8Z&B)h7G4Q*=x*2NB=HtjRbH@O;ifr}Bh;Qwz3(w4VnVRVe5VX@G-Cl*TlH4Mb#iitANL1%?7#eQjj zHI+|C+*uxT8Aya)ux>0Hg6{r5afkOLc?sKaOgbgykQOKZ)&Aorzwp`MT6+3lxXOz8 zayOamQ|8OSJ~kc0Y-Z;f0P<>!pQ7Rt&Dv@pQcL}*sT_QefB~dV8n~M4%-R!GxYA^+ zT#^#55L-L)jVZ%jgCT;>7WBeE*xJEB$K%et9EaB7`gJuxND8?CT|;#%(rUZ&r*L`J zkjE|qDxtCk`nm#Tt?8H$4mVBMNZOReSJGgi!ZCL7v(7ntAc~jVex50~CfpVMz8>{NtlONG3s=VAT(x#j6*KbSOb?B zX_S-LN!|oYfB`#zogK}m^APIqmlS3&D;ibvt?UKP^5$K%>AfR2iH~B-@RN`E%sv$Y z-RZCOF4Mjw=7%&%l3u0rH}!|vye5P|(kas48a6xizI!{LLAl3Ntx5354c|@3()bpa z+4Ey^I44b|tbB+hW6M81uLm^6B{E(*$){&v;QK)tP z3Sj6wDe4B-oBdXjSjI9Dn>?Lt&bb@AAnYX}q_J;cMs4sdLY4p$fPtXp+|0EEWp@CO zs(~R@CP7)VR6<6^tTd$GwW-VHkfdMu{PD+4eTkW|cGFeFj&ju{r|(RLLQ-|Y*E#(| zCB!b9n@=mT6ppIt<)0tMFWmOYTM-#KS(`MZTE@K=OhP=AWcyPH%<+E~BDFKalvn2% zT@nB(tIBu|OA83~ z)W_?&hWq1+43;1;;y?HMPG8m3Zu@w7x%swMqm!HWtb=xHOHlyE6%o=b3gaVtuLM+_ ztZ5+&(jz=8mR5^Q=X>QV11B_XD_Vs}z!>vRMw+IYFfzT~qTWtHsiVor_c_P~Rb5X_5g{UX@wO`t2l0-A zDlT4~??>Co6IP@QSjs|0cB&*JBt;#5=*wB-b>VMfppL4NPAx6=J&_j;+}{*~xn_eF z(}~WVJdv2{W63l~MtEuuX-ku@l$oz9667@V#`*ZmiXK+X-5Q!;XydESvIekPT`VI< zpWQy&Rld%-w1bNZ&?8lRFX`7Q%2CqOK;6-;LErPq1ar%TkDZttIUywiWS$II~O=rlZ3`aSJ1;*qo!Tt|Po+j2WwOO7!tX$-I7 z>GiiAt2R`+BsCHt2$=}`hg-XSdqatkqJtxjRr#j>=*6Y3p+n%k#G>oZm2W|nLiD1) zd)uMGGVJ|auKPTAS53*a+tmj_LZk~w1qc2yI-k?8znzXQFuwQ3=)E^+x|eP=w*vp{ z%-oFm_RJt3L5NgVVPYuxS9MmhQMX;DC=>w@#}eB^9}feSSjD%MJU0r@bfwEm7KU;& z-sZa`JXR03;Ut(P*oI!>hqU!fi@ET9Tkb!)v`+#d6k#(<8^8^y4eE6s@h@H%?WjJ!0`A{3;gNb`^>h zfiN2-ll0vk{qh4}QjPpm@f@a0{Evv4a8sAKEkwr_P*zNhuq&uktgx*w97JM~?E@sqxvQSCP^SyM8WHWh=@#e|BLUb^R1X zmb|T%yV1o%fOpdv01upXN=g7HfiaxTX3>Zgx zLt15sR=b$oKHY)L)C~Prk^_qT(|;pEprbK_v*z6RVm=~_M*nr;laH@V3axWZfz4MQ z`d7c+AO03of{l5v;FavUOmo#0v7T8-ISl1G2%b0@O`org?t?}UnJBcTvld;aDJ(T8 z_$C_)M{STn+zMBB>k!jzE1Isdc*W{LL7+@3E9$BzC&kF$y_Nja<5NWvoRI6I8x;jv zS>0!W`C;8+QT(cXzkofdmL12<{RfSa5fD53a%8-Q8U` z?(XhzcXAHDbN_W8Zq%BE} zZU_eK^0)(@wY`$oXG9=}6%CfrC;M3ib@T+~-K zcyh4KZ8i(GZi1p@^m=_1UUwf2CQyVNXj}mgqYh{i?l6p;7SKUaN zm`(@hKNY0ni+;m3hR2EH9=iJCre|8r)XgYNQ5SNj*(AXID>*qH&Ev@yV}>55s0MBuhq4Qgos# z5t0qx!^igSU5}+w``s-BCm}b4raL{rif@%4q^b#>-iHp81TE%P!95O*DZJZ8?;c{% zmk_;7WUq$7#;REdR#?Z1dh%%N1DePWd9_#cmClF8lp!RiQMPNtDzfAp#6{plOgb}J z>CUD6G=6h%3(HuUh~pr*3Op((>K67E4>8i|YdJusFB;4l*JMt9o3A#8+tCYZ$KhZ( zGw|bJO|0MQ1n>p!J)FmiKxCX)YU*K#;9VPA-=-g6B}s`!Nb{y9+Z9-WbCdW(Xr&4> z#?$SP#Lyz{Se&lHCvC3ITSbu|fBv-7xx9*BXa=4>+Ko>yO9i#$?YqHa$BY|^q^y+X zTl~AY*wqDee3^@=@mJQbN*mTGKjKp*1uO;eVq|CW&I0yowH(tTNlEe2s(>!WCM64n zSuKgaZ(BBt5We{426>ML>py@BP8>d&=Xc$1@s|f-RWEquwee{b7h6xI(a#M8&@|Vs zEQEK(cEyd=H7rgdQiGaMM2F&p*@9BK4PxF&oKwX>&lhQEGE zt7Rfvjm>AXmP-BpdU%vZ+;AYg=&M(%$zG_tK5EEGEVu{zu-1W=6CRVQ#>`UkmAVEw zp6Q^@cAAPpb0qENvnIWn)3+im_FpNACTC(#0%iVULsCsz^Eq73_-c026FHq;>2o?Q z>fj*oTn@TfVV)_nCn7UZmaEb$?S~HkGHmw?S(20P=l6DtSwCScwLvFxKYjk!#T~_e zOIlDfo71C(GAJitgGbH^Tok4q=J$BI>$$psD`CT(RM53#3(xltE6W^QVl&ggpxCQ< z7tG3(%A2kf7_EsHWq>|D$(Y*Y$}Px2XR49gVW=%YkgmZ+{#BCu9&1cXYTy)A#cX3; z7>#P9s^)hoA&*@HtKg%AUdRfyFar-g|qg4(`)OLk2LI%HjL#e;k4yOdNlwdB2r ze0A=m_(;oj4Pk;b93&i5HA~^ONf~1ovO(-ClsQZd8M?XQn~8^#N@5Id_iP1!xt4(B#ynJ4Xfl9|kzMD$B-}v36%cH!qBQsy zJK7guu5*Q>9{EO|y%Hh66Dga^4WZVL>X{ zngcJs&8_Yy_qt^k(^1s)zI96vBWebfe5FFsB+2MP|1wR8rD&j%uzNXaKwncNhiIo( z-Qz={FrcmLXB*~f!1B*6GeTsi4tI^yc|<6;G?hETn+A=vhUE}nR~>Y(#f3Zy=39e? zl<;{JmgHNnvXSQ&ugJMppd~e!z)*=tSmfOPh34sKLf5vXbE~prSb5ia^FUvyqb9Ls z%MHcqS&#R!?T6)#v(BcCO5W0Ie`3d!jLIp&Mf29L2z68IH^U7_W(L`df@oj^$tTxi zpu?npTs?DS*Z0eW<4c1IUTH3;*Iqji{YT$TfO{4p(Vf-zJv&vz6IlMjK<6ja6 zbU=;qPm^hV`kywOC0GzV22mdU&k+CPJ;46(b%6g7OrQ_!S-<}I%HBWBnj`GzoW z+T)k_6QtIrL5MM1lD@+*Vmg-h}Ni!(NziIXvr3K#)0h% zsxY$1NH7>kVK{OU064h=z*_YWMGe_$e(rqCpk;BsaA!qyF;~k!N9?Y9e1cLfax(xbh5dux0bNwvh}jHairtL%fO5U>zi`#1lh#?p?r;2 zkTj|eS0M*aF>7W+!S5)Xk(ph3Ac3bRKqn6joD#4BKKmsWx5 zK5Svlih$gqRIGg{B;*vc_L;A#%}s=ZY-(%}(Woiz^vfB&&bf}P5f|t3laz;|Fq=hl zBP$mL8%011t%`IAk25W+MM7QBh-CJRYUtq3aHwy$hD=|xXuVc)Tyko3tomFV4;%i) zphbis3*Mzn+rvU~@#y_ZZFFYZOj@vwR}@QP6ji1q529h$cu#eH{;wq)RKPxx=v+0o zVNN+E3pY(eBrp47it|$}*NS-(8k23g_0%`APIM~r!G)O9=0>h+8?!hZKWW{3LYksY z`*SBv<6XVW3)B14F~+uJ005$01^_7q4hdBpM=K(4P|_XA$l*YPh@;s#<|idqbH?i! z9d2A9D%$DXZo}5>1|@wO4g-q~W)DxSgGNlML#{l1BaM-q2DB9*u@-3BZ?00gWAgfz4wu+K6Ipk<(WqE* z!AEm-4eRLo{i+3jhkqdTHs^LJ-hcb$Dvb_Kg?k>y=8sDA6dIFq|ImqVpg>F*aa9E~8AC!(REDyQsl z?)cqtBwBhR)uuIPY=2zAUsrOl2<9>bw|r*A7oDJi#>geUR`DknI5@OtDmZKcBrH6T z`de#Lwu@u$*`aFJ^OQeVuL2!iWx2ndX!|tWO`~*)5-R3du4mh+>s&+(57F>iExj$*_HNA>hxRZ%p%QOuAp#W>Y^-;ZZ=i4SMsT-{ z3;N-5UPh{+f$WH1bn~x`B*u=1{sxd@aszQ>G@|cg$c%??1MafBf2R*l@8{zXwx-ck5v0nqKvu zy9RW7+7a$dSAitaDld*omF^sxCW@oA*%Q1VW-@;MW2Q(pVuH^xzuKyeV4E*m}l~vq%m|S95W>ERRcBl_{9VKP2@(xs-vc zNA>h3W8-Qon#@uq;i+`7;jx-Yb58Y-w|C}_=BpWS)=D!LA4v0D?^x3nj*N&R@((n~B?c z^o&!`bC8P-P%P?WIGUq4%Xg+QjBS@Owi9voD|YoUQk1=MLHv@nbt! z`8O~?Ogj>S3ez{4pM`13lTY6@E*F|xHBCLNWN!PbZ~DykKMf4ENu>&E)ER!w54;6H zG{L;Bpk)_$ZNFjxo66~_N6op%B+1=ouhE>v2w5o{Ma1vZ;(5eeRJtv zc$np%as(#pE@m!*PL-rHpW5J$dL3w~+EiJh1bZ9`XOxps5Fim9!66aBc%j}g!!4D2 z+F8%+1%Gg`<+iZp_CS<90a|we2ao&}=-MvWRj7$|+R@)Mz2*;997%g^9jlo$kC`l= z6ILh4%R$h%BpJu9Z4^-r;OQ_Y9-j|pTh9fC*Erb&);wVci zd2Uc-IpnP^% zMw@-OAKyt1=U_$VV)e!a-IYtfcT+*xd%lz0xgbC^bzO4w@)**WR*36Sk#;M(IJs^t zm#86VTHRk_f8>3oIa+-ud=4z4*epXnuR4=%zlH!sz<10aiR>FZa~gwa1Ad7%z>*kJb<=-GC)K=B8sq4yg?mRDe9 zW-N-~;^>y7hx~YzmsnjMv4NrVy?0fN7-^MMZZI4paIH!@pF;?pJjXhdmdUfXsV)2v z!QJS++J;<>emV4jlJ;}FxUAp~$ZG122+|42bliY`;7WLNao>+{SMXFJP|{4>a0V_i zBoq6asDJj5x}m{MR;dsF2mrpQCJf2exl^{BrdQhn}`=F`M4G-lpZBOjX@Y9jj-^TA488~B_4B0LozdS0%55B8Nw zd0&pHVN4fDX-I`gRew(9ad}G!3D{!=LlVtC6jWBM+L!nuC_*?sKjET)*V5t9T~q}p z|8ll6)E$WYJRd(lt~xdx96p+Fp%Uo+n-QPzxgQmNp{8u_K^u&Z3Lk}(VbYwQ{b+})6TFX zb9ZuMyZyVZps!`}NM3)C)}9SnU%wK}JG54ANwu#>-pVM%8Ks0F4l$|Q@o@yO+kSn1dA{)|wKWE5`~)7Y zttE}bPa23tEk%{gBs2_l9vP>u)(Y0n=hMKiGPd8Xtvd&f;5n=4DJfs{PPcv-Z8z-o z*Rxq6@V`7!Km-0=yr-}2$cx^^t!7X6Qw-@md$=MZBjSdnR>{~kqo0z04idQ9N+noS zKFpx>_;?avHYBuFwg$N^TVi)_NQYsnPfJl@{S1sn&Qt8xj>kK)_eo-UcTj>HqBVdO z7|IzS$AlG}?M(NuTqEI!Cyy~}LyrYFjudeGY}fhx9^`!9y)W;qp^R3{Wp=e(p)1ia zP$*qEqLeqygb=XUXTC(Rj^e$;L@!X$aYXsIlNmcrj~5%{Cn#c&s!EHb4;>Lgp!t(~u!2&Cpr|}Q`^|{BXcWppoF>H4X8_X>F53fs+3bP=(ASN%Q zEcomkx!=or5KP;14Ur$Y-R7ca(H}SB?bgmS*XWxpZ?|^#(8giDG)YRY70DfIGA*!j zGmHWW3RrqZaKIhrT84CZ<0oGifdX^)1qwJFHsmUt*ccD_dEdxk4Wu zz7tx3Lmh`JlPoh#j4J7ExQH>oyY1cx#-r!4jfdk#Jn@<-B*?vdhAfUMx{|nFKLGSL z8HBdIH{g^Ol{Is%b=`>3G`+B%o?k#o~=Q+jFU z%MO6i#VhhC6p~z-izl&+tqgU}@{tX-BU)y7nDFW~;z#mss$_IE7LU-;z z-AzC~!Gc^C2Dpa0Q?* z&E7>Uc7$ERoRcBkL4ia914RNa0q~umF`{i(#8JMOSmG@m%q+KkYIj$!RFr?ie@2ie z*7xGb9a$f@0VHcn=H!VgYiPm2cI5vFDb$Wfdoo{}+|jzyPlCMpVV7*voBl}!f*0ps z8P;q7rc#GNErPH*=3Fqo#gLrLGIef0rJ<^%j~zkQ1_HTzJ{C|%mMS5l={#Un=8oJj z^P%~r>ao29Rjwp!sBhzZ0`R8T?+hUxn$R7MQ+AH4<*6m~`k^n_A=nEKf@Nf2rQ zC?)#uaTN1x!k?asnAGqOaW;_y`KeCmf)DSf+<-WP?VSrg7FJ1(gEpTcQu~c}*6}=1 zKo0Vsa4peJI`UQJP+6xFiPop}FeB7rXH5`-cAe0{pQYTg7E?cR8$Vdz#)xa1b>&FM z!AO7Tqle2Yv4viKX1$}1P%f&Jy%kT6Fw~1J*k7LuLI9uJDT`=}PFult>_3e&=dU{g zw;6tAK+ioil~OoPwC!k<2d>MR}7!0}yq<68g3vyc(43lAx& z45o7Ik)SneOExo4iDysY$e6SYydXBJcEK;>vpfi59r-`2+Cc^WGYRD*WkyLwq*atQ zN;x)wez-C}tq&LHw=@y&)XjYrfp*yOizvPs5~NbOBq)_Eou&G z``wS}U|=JCYVbsOv%VJ3_^lNEuda|WoIE*z=BjS)UYhSg*as`-0ZE|9Zpb|LGud^cvAj8;<x`9@YZ?T_02U&?;CVrFIA17C#?c!fMphc$aM4_4zf=enZ>K z#RS);fCUp9^mXhqsTdT93uT@L7=15UKzU@+3p0GiEeKZ1}HO$Ul8k< zA00BaRMbsBN0A>DINyw>D~)z^$0&oG96m@wvStRI7)8`YH-zgD#*Eo50m`f&TdD{J z@i)$~aeicgR&0VW2}I-8pt6&$!*wJ+SQYfg`1sWYhZQ%m{u1Yt(R77TZ_hGl*n|(D z3`f*ay&VE?KnMw_n71f!)q*>{AkeP&E9`Ye&nA6siKUt;)$&%w!bNOlRERUn-(mlZ zy7HV@=iAPrhwC=zgtqu@P56@b$~B+E)KMdhBlMe$v^rJN@dB2DJwE9^+zB#;lrKN3 zPWxpqPh!~uG$k3#U9`23Xc>!-5zv;|wcsYt* z7w}%D#xZi_!=h72Z*@3U+ojb9bEi+T#4r{vc`FE<*5*g5&5oY#AX|k1hyLLk4{26w zJoRvzbM$2ME&#RLP%3EXeB&7^=;wyiA=ZRLi23Q9B=>aths76+AbW5o!VDbHmIa{- z+;s{-84Yg)*Xrkaijw^O*^L&!X8{9I4UFkCR1+Q_6q|BmUYOa9vr0e`D8EC7#m+$0 zLSr_)S^lI@vk0yd`uPMUObJ7)c2$o19?gI%Gs@EjhVbU3SfxD-1Q-84zw)kpMt5MZ zEh1^iWBF46rU8=U{7YajIjqGi4@XrHh!ROLerz5r4~$0|hXZYJ(3TE6^9S85q)C+| zATnYr1CtPXP!NwV!>d)B&RQR38ySsi-T`z-inuE4+kk?w1%I4xN1EX{AXRIpem`Rs8fP@U~kr68`l~%W?E(H6V5q-fbU)CKWa*9qmAN%qprJ=>K z<7M>9kcDF^7>biwuj!{;jEhjb^bY&z2Wd8$BG^@M4Z(j^C)DVPWGL?Vs7#&U0fB+K z@?wyq3t$4ST75868Ed?4o5$Z_2IUe(!G_H`^6vt8#c)Ph{9|5`TYLPv^u89=P!{bH zLM9Ji^hhofgd$ke?7@jXifR9> zFWNnm7Z-BvGABLoRZdMYMn|`v`MSHHWmoNys;Eka!Z5E-!QM`xn}SMIAucC- z$8a>rAmsQuC{ObGMsoog`rpY}Lzyv$#56cKyFkwB#(Va0BAm%PpvyBbW$$OL5C(&` z@rS90dn5xaEm|u^ta3%IsH8~s(S0KPbTg(=>K5kdDfwUM=y)k@v~o2V>0kOsWp+ZX zhsgBwI%#Pqs}R_l`i$bBdE`Guzjqc?wb*oiQ>rx-{ny(7_LVJj{tQYTv)dA$Dr_b@ zE?pay;6C@=V;jUhI^+jTj(*t=Ns913A(cjHB~?Q+`IWoEUvqXWEG^$fskOJlhid$5 z_S4pb&esi4J#sBF+DujHw=Wx~nE^;E^tVBkWkZ7&VpJhh_$rSxT85;^o1MAIhOFdy`(YDIdNk0AH6$NP5E zrM-iEV>${rvhLjAQBC}1YF>)!sBjT<*i3S@dqT)T-U-A${}a440Ls#B2gfAB9r(RL zI}t^QLyl3?o8u9zY}#%YUS%s!r(*#Mn|K8j1-CL5M7yBHtvO|kiOr61dB=?NX5tOt zqqt86bv>Rp=?k~ohT6q$-<2eL)oCMI&pTTjmYfgG>pV_td9@?*`-rmQ4rt0eCOUd` zYdqu()Ve~*VgGO9d{ zOKUo5oN)k8!&G*1$#-H7KwapLJTy8Zg|nsrBzGhAi0iIb47c9qEr6AR2-ClzFp^rw zM-_MO+1#Qm$-#4AtyFYfM84nge!}8uG5&S+*8S>2Fg%6-Ap)lD_4)Kprv0#x(X8`} zML4GzxWLL)6p|f^7P$}~Jdixp-D2$9SnJ&aoeQDkTF|dvaaZ2|#T@U?fFawdU7og` z8PyC;tPgIXR5wCnbY&#l$DU-0(k(oBHibMptrl*50pLp5J7e~)Gm8NaD(F5`jC~>G zfm8t5cp{fIET)^LQpzH}mfe+Af<^WQLa|IK4fQRFgcN7mWSmeE8@%4`SMR1eD}d3We6gBJBZuT=xXM27=XI<%gtn3-R825NwLG$ z^M%-0jfJPz|KLI-^_sC2_rsb!hkQ${kC~|6*s-HiYu7Hgs78vjTRK-6wEbAm1iJ?| zQv@*~WO2~*kfg_QKwUXkgW}kdlgE6q%TI}Rwl~wv^bEM)2h!tfVOpZyA~*A`3LyYw zU*{L6tTM7R`&`if8Kgy_UHIpWje~#&o9xQb)Cnp>$O7}ejf=S4KCO@Z@Hrfn*PraVZR4S>YCHj?z3pN&sHGN6 z)V1vylPFI~(X@`g<5(W*!Sdj0@h|Met@83gFiHylM2gdL6?h)&pnB4t_K25Xu2+oM(gbSKbX3VHA zbS>p;FU4-P`9tzxdpS5kI}xbf_-2nMCge~IYavr*o7?xuJg|9|MRl3t+1&_JJ@!I@;pa@3Uwf%P1wd^pTGNV~e^nY`70z(4(*Lku&dMbB9BxqRx;$@!*|2!)Mf+VQ#Q@j}ouH7Pd z%R$-Ko4V6#Z2tb;1^J)n2qg2$S$5+INYQ-UlMFV;K%d8E2c zV@9n1A1|NzN4qp$+h}Qqu78CfD?X+}V?be=6dSJo_41q}*z&Z?H5z-fo}AyK_ss~A z@7>x=5B3M(Kq!ejtrq!5i2p>ULqeEHeLXqmxQN82^c8W8YQhNm$ya=Avm!7}A|1*d zG?sMNzWwI?g1|XdW6$|lv%U+x{Ali99!v@jf!v>|dj7H7mn=Z~)#{uy==a3_y)aF% zd`TAT{HYvhE0?aW_x%L8VAz%3JvOH%Fd`B z)Dn&WsRPx_^O{pYy154P4U8jXQ`cLE76zT_*QMWm#hlhVKW@l%jE#X#ek0sp-=k?O zYDULew>B0OXA(1#FjCgI8WjA(@~*g;l3V`MP?ZS|JN=D7kiuP zdg`oN^Y8k`tu@WoDZ9=&b3fGi8p_-sSxERF4{=f@sX) zoUfrahk}KvPB!~Qf{t;FULt&`ka~a*lYl5D(T$!Y%Sw@3PE9UFJ}z0Sy;%kOoia81 z2JZs@e>%rBrRq{^U7L~gl0)WTCSCX$_k-$OexQ$&Zv(UZcS%caRM+QM*<$Le%nF2U zgP9UClalJ9tXNg$y8Rayv~aC_{#B0JA7W(+aO&13oMLgBD3KBKxiY6sbBnv_6_-!= zz1@Z+TC}<#s-IL1BT>VxK`G3!JkQ12DwYY&bXW;WJ9F-EhsveFXLAS~)x*Zdk4XW$ zL@i2zEZ%_(L#)czgB z!~Ot?0Sdvc^NU5`Ss*YfvFe6grWyKOPBPE`A;5@p+&n;zg`0<6pvKJp!?jwDLF0AYTQeT=9r3a>QuhXVR6m_U`ERt%V@2{PmXYV}!`BBAb6mDxb^NV6Z)l^A}rQ3Y4my^}G9ZZB+5p1%okMeSN?aCenNBUcR_{WSj z+bNTIavynD(jw8IIJ_e`+^s*&_+TBKVwVIblv>D-KZ(F_X76v}9k@5^u+~R=+7&?< zp)}tJjUz54m0kZp4)4)`h<50jc0Hhofa-LaOCq{qdTCNA$(phcsxyh13J z6j~ajnUs_MSkb9rBh|0>w()#+yJfga_M1H-bN^!(KD7rf{T6F!)OgAffUNLBTXmj;bi9OSl{Q+Jc@usXk`BzT$SGGwT5(&Q=jHd9IP z6IE{Xqi1fKWw`HbGIj29h6!CmH%!I$`f9Jw?-AWag#^n!VrE%CK}{;VT#@T&K7n|w zhPr7tv2mN12BMdg7D$G*qW^e>aw#sm%58LDsDHfMpbHs{O6bOf5k9gYe)m)bw(xud zq*S|EuWw*A4t3obxsJ<7g>u^cl$ArWL*c`;ETM~$Ox0sS2-vo5VZ^jZ)) zvXv5Ex!CSLqQFn#ix_q4bQ18}m$a0(-5IF0J z8SI2_3-1z1Oi}IN(p3>Dsjm01{^8C z{*(g$;es$g^a&k~3o?$?Vqc50&$R(74o!;#U0A$5*9l^z8;H-$HYBW&^f|(ta|@Xu z?KuRDqrGuFg`TKY(FkI=g2MCHU(~tV^}27D7^lY8u7PmGk8$Czgl^iuD~}KV@Qmi? z*jgx_rT+#6-#RF>x@1=9lRPu((;Ok>@S~^ETtmb%_?C$TU+zzBouho(H=@m{pO8Y& zZkTAU5F8c38s9`-!DQC6uA)zPo>&_axTS%$J}a1ILb+f&FC34hP}K*`ya4~w)fgOz zIQpd3ObZtFmKMN+zT<*Z1x@tZOg>!FW_qS6XkisASBpb+#?kKww8QmMRIe=lRnNJQ z(8y}lv9=s;{P_YH`x^mD{f@blKMVbuzvCps8ig4LZi#42-1HoN0wT!1SZ9lCj}DxJ zPE3=~tQ|LGqV~PFGHeFd8&nGOJVurTp>zRbNDB(jkq@2s{XP3!)46udYOP&*Q+D*J z0?QX7!Ax8Wm|HIiqZX#pc#bvAy--2NGvaI#aqn`Q8bN;ZpX?nMKn7X3GQJ}#&skE@ zmyyeirUjy~c;jUcMv@&z@_TleBj7I4oZTHgdorw(%7=WC+P<{=Jh3+$u57J&$I6w7 zIq43zyfAgL@&iZE55~h1@1de*s}e9IvzE>&o<{A9i_qx~>CmT&TwS{!1F`xbaf^uq zWY}5zZj)vC|6TeFsdiXU^>12x-PsA5LkA1K&whEK!d7DQxpx&)v`9}OGG^AHtVw-g zw~xfLryt*ST#swx`jWCQz63EGuw9eL04PFVeYnKyla%I^mUlKh^%ti|!NX0S*;5#4 z5E*g1R663W?M-OslFbedL(Y;QQ%OrtTP+7N$QM|;Tgw+mDfk-JS~nTpk+zuW+qx=| z#*dCjl}KJMZH%MI%uNqhelIxw;+!>7oU}PY8_L^y4vId14PF5rd!DiJQvHkIqSRUp zF;u1n#4bLZ_!%6HJ`H5x#FyY44any-U2*39{cdWEu{fyQbM;2U3 zBd}jqT++b4dP{kZz4|ImRw7h7bR?f1$>sXAf_nsdx)bAOJ5EtCcl(yUq`I3bCl8Cf zH)jiDD@|ggus>90L}nt=$8uSFOZYql-FbUN^t{Z*ATJ%_P4PV2Rrym{B%B$}b&X*Rf^(QO1gg2*R zLJpF1fspboff#^x&gffrIQ!yAy z!@`&>*)(ot!3uVTD6Dj~B8~!D_;3Ecdv|n)*65@tepEf=pL4#?&BPOigvx{k(bV@B zN|qHdNS5f&C>V)~<;JFt!3koe$HWq)q7fxxr(Z;SL~SBg43v8ul9 z@CMIRwB@V)Ste2j^D1zHjaD5vsAYkv2S4Dbx zu4g{|u_?B1L;7%$(MTfsJA(=SOU~nA1@dMVqf5^9D$V#6mF4NjG42Ilei;77h#-y( z2u&uTMdO*37WRC-03hPclFOZ}H!UCB-9uy<9LJZ2JqQIl&Df*K>o-!llM3Aa!!gJU z3n57_1Rq>v6p~g!m*Wh$-3C@?MG>ri?CsHz+$=+l-vtYan!VM}@;gZXU2b3u_7{jBZs)sGF@opd%##BR#q!)*;!z8C83gHvlG)+^3e5Xl5;g8u77 zJC(sj&8T@ttKCQIV&pU|B5m1VJZNXbPCo#e@D981XznKR;)-B_hSU99vi+LUWQNKDG}xValJ8|~NWQ}Q+rq>#A?v&tG+&8go z0A#j?;FEE#V`84E>5X7hPZ1WYnHvqXGWnCoG7y_{{%+fIV~eeaI+&JM2#GhTtD~ zy8RcPqFNWFKTou5vjL}Z+GF38odkAA(#0U=>k^WrMC%~&%)>px_Ag~|+WW7$`?w}dSEr#vWc ztdZT|DYqQX=^hH=U?YmlK#97T%awY>>#g9D>Ak%{tHY~Jhbx)uM@^)+kQeKTigxVy zy|3!O7@ zhw-F)1BCYoULE!zUdkXDl`%g6Rlp5?_)&GArlfvGm$+X<{$jH zjTzkWjl1$^qo~S%+ZNg1MK=q)MUXuj9pAzFXs){ttnei}dmkqm@LnxSjQLx4Io05R z{EMPyyLHMK=69%&PsneRFY!dBEGo3$k=}~^RBgq~sKX|h=ECa+=?Vhl0SRnR^-_WX zM7-@pZ#Kz;0F>U9aJ2Ms(TO_UL_0%Jt71-bfsuy9pZ2T)p~_qAV%n!jfIFzs>n|?` z>RSsmmfLR_Ez{NPjNcE~Al{FYZO-Sg=(X|q2m>IyCbW2oFO6lpivoWFbz=VA`#@B1 z(Jxou?mxA`e!q9z&j#bnGP&>w!!#zn4QR!%WQM`B#+Y+D%xuOH6!mNa^@jWf0K6jY zu*qH1jkfIB=akb&mx|x8;p(leBL+yNFA6*%@UR1bp}_;Mig6wUS-gfmOpgMh9AGkZV6}Sn@?Vd zf;L{re6HkCO9(Ci#;RO+ta^E=+3~X}+Qun9F!o;q>JG;&$4eENu5cyId^QCzBDvIX zgleepUdAo|l-h5>!>Bu!v)=sqNBas$r$~wR@E&#TjBk+m>0|p(5MFwicNndC#f!$2 zS3WZkAfx!wKAh{9qbyT^Dy1o^|6%vki2pIb^bFCeOnpbB)MeTnm)Fkj?L; zKDYNb0rzO<94qvtLzg66U?Bn`b%<#O&SvQ9DbLd2&B^Epw*PCjOtO45Lz4f()M@eY0 zVQ^LTMN!f=kF=C8k-S$wOjehz`0G-QUnQnCNUo|c&R6|w+-Yhb;~-B63Z8G{!uf}i zoQm|f?*fU<^{RBlSIFnaxKqkiz&}#{8}$I-t(Zs12qtvN<~%Wq#`f0>YUPXYws_0s z3t@XSCr03&w{H>Y-(xs`F~r+xnZK?G)av*50O4PR4qD4Ur+oe?)BitTshURwr-c2} zh_Rb-MLied-C$T0D zP6G4BZ7IqKrHAg032z=WNV#|Xe?-&>@gxw%pgUsnh%o2SzMtzWjw@wApucN5{50M( z8fe~m`XLpeWm{j5&OJaFv{-Ame|m7N7{KEgZnrUNr;RA=N)E;~j~{**TAOKEQB5BA zQd9A;rp;9R;E*)R>zlw_Ua(Y?(9<=aY6m7v6cgbRu1&{_P#WBp9ZZ-a>1l~tyNUw7 zZLrdpRdCX9a`Fl=2v%V=MQDwt^IgxDt@1=Shzv}XiBTxO&L7@#@2LSDrvhvH(>D@m`mWqOpT~!eGpP4~ zwJ0z0(~xl1n9aj3)!f!b!B#sk9ChU)TA_6zF*cDBjcMmQIR^@&gVvY3#q%FEGPu^Z z+R!fLEv)C?U4zuPyqj zJzgiq_ZHx8B}+j)$N#R5YrUuR5bEg*=pM2vBk!B%d!hpPWSg8kk{2m*mmeL)%J%UX zy*(6R=D5DR({S6peJ{ z$1>3k`5Y&rxV^RbWakFfn$|9HlQPr1BRP2~OA8YzQD=K*R?xnbI$c{;N?gStDxxhl zEF|WieZcKS$7*>7hqON`Dtb=saO&3!Q}cKNgZt6Vq4w;v7m-f+W3^|?dIl~=r`1oQ z?ekp~C3Tas>E0aoqoXw^3w!Jqy>M-Hg}Oz^_Hq%^j^3;jY@TATer9rw<7=1eQSXBDCA!iXW*c?b_|HSTa+RY}dM&mxEYcc3GI&5^+ z7FMHH$mb7S$V<+u_~+26OEButt953p>$l%w(P-Z9-Ms{}UhjU~q}OQlA3B)IqE@S~ zp^5t;fPewO?{N#*YPJsd52q%l78ev}Wn@)XRGV}r6c8{#Dc3Lv>v}LtFXqP`4LK1R zUbL*Z&QZv|1_TTMevezg=wIQ6@ZERbz5A}apZxWc?QQKgvkh9n0M(Ez;GGNz7y$ep zyboAobXXl4h344NW4+zjHIQ!mf`9=^0Re9T0tNuT2N$r`i2k*iY$hH0A8-4DfB~xc zFag^YQlZAxziPJ_bqba17s#&CY87&sa9w!Csjuu7xk_dFK=<+WVmIjVp;z(^9(QO) zf4zHiSX5G#yxG(WLvWPW^L0>3uM1A_RRyipN;=lXEi+4} z*XLkS?(u>(-L)DR1PlOv&o%*H9xn^}Kc3s)~_yqJ0TbXZmgda{ibA9@iJ zy&?DHncn61e}`?liT>8wI_8WJDbp&LS)3Z_W7TyCTqD0s3PDF*U1xV~Y(W0H{yGG# zP%7{{008(SJ`%7L6R_D}M#V!QTQM8WT9tO&#!I8$T$5X-jO0+yY zC$%W}lVcNly>@JLqN}MkJ@@?RiUvJjw>ejupI=qh*gZKX(^@QAX=_PwdTLSM*rr~x zG&#vL8!d~YT_ejXi&oS(zMvEfIFXcxg-qo5O53Y77>W!)bF^ z4JH$6sv@cBEOu51uunFXt9dkr8Eh_~Ywa6h-dr?UrX7y^NKJIKL;HGx~e7K24B5DPbi*qOXb z{xGQ!u*2$@pPB!|3xDYD=yp2(c?~iI0-+`#UFpUV7w_M@9xmE}e%O0)bEy5HJKnakdF~ZFwy-E%SWodE`gbAa?&@dR@TS zpc|c`w5as)#~vTx4uF6m5b6U0hCnFJHUY0Ju4HFqj}48XKSmVyA0`#2pv|s1hDr)c z273n`R)>2d1OlNfAYcfD;#?|V^zZ7@>gdp@-E7~oFA7D2uuzfPI-emB2xV~#*!`i< z)!qexK)ju{=C(^mL8Dj50*a$+1ZY1mf+C z4Ub8LlCADukD*S$5D3J#G3(9f;{XDIP?Ha7b83zMA8MJSc;192$N&HU07*qoM6N<$ Ef=eb-$p8QV literal 0 HcmV?d00001 diff --git a/windows/client-management/mdm/images/configlock-mem-devstatus.png b/windows/client-management/mdm/images/configlock-mem-devstatus.png new file mode 100644 index 0000000000000000000000000000000000000000..2e78bf58e54431c4c01f00b3b8eb55d6abe6185b GIT binary patch literal 48408 zcmaI6bx<5nv<4a=fdmb~ouI+pEqHKucUjzFfhCXt!3pjJ4eqW9?yd_gzQE$LI6U&Z z_uYS9)$6LQsp*>O?Q`bn_w^4|WmybVV$@f!USY_6ky3y43Nh%_D+J=Vh%Ymkt*)al z7X){8S&3Jb|bMSI9|; zYx)=;KE6pLmFwL7F@KzKZEXV|6%rDv<2qRrYI635SeG71B=PsDs=t$0FXE`e)>0l^ZjDM6ykGUY_WTcQG)$3iCb%!GqcO0e~m$i`fnTzywhbnU1h-p zcHUY;n(nVDZZIF-*r_58|Cubjst86#|DUz*mRqd0##t~?Fv&%|&gSi8Pu#B&S(`;) zfyD0?-^i*uRaCnU>3*IJ`jz`{7;EU}T*Mp=j0cOym9@}}R&1yd9_ zF=5~HOU$sd$$g-a)|LJLUX1H`*_>FWcl$cN+c?Aes8JWVGk!@LPl<(W?8vAA!;ypG zjgBEjW(yQ6)Yt{BZ*zTtYh9_V%kX-RAcKtec&*X*x={(tSFV3O2hHFuhwN8dua>ek zIeNYNt{~%Ue&-T&tD=;UIDyBK}38Z(yy4zW{@2$M7S=K8r&~JD@Ybj z{F_<+Q+AM-gFa||edA*M>-^%vbGwGAxwV>tjkkq?jU?0VpQ{QZaWx{Fb}@%_jtSt+18q)F%fJayP4@h%{?ooKdQD` zy{k*f_X7j6u3zy1xuKYgFS>3dTW<1(z{hm)qiUaEMmk2N%lagokJnCmSadaG8ySn4 z=`nYC1`r2utzAgKN--EkpRY z>lK%&f&--4>*VW6*|Ok_Kc@3q^}Oh;{)QTLDtWR&ok~$orX2I**f?3(HK@*;B-yC4 zhz0G%8Lr%?@KN3uleO7mfm9$@?w6=c6%GzgC&pnZO;|lyxp|M{$=yEU5F* zVmme$F@T!QtecW>wcRd`QC6*{z_$D6OqS?S z^t;bsGnw$5KL=7dgfUeK9$m~3>FNgLAW5HdR+JH07#=UTJhQJO;h*cGie zJP2_zF#uD%PAv0_mHU$Gz_n1h0UADNU?JxSRj~)(Smj!@(Q37{3k2+sMXHtA2zhLq zuheU>+G?#ZUAY4M5f;w;=4r+!aJW*BS>NeMol2z(SE2;u*f{tu9IhNzW6YXh%@Z~% zcWW<&CRM$0ea`RpV`>y#2$5cFHzRB0loHMlk1=4Hf_0#5nnb1{mbvU4o z#{ubIj7*s|%*)E)JAB;D(1=-s8U;Hb`-ACg^BUj1?uvSJ$@G3F z>O13pU1`)t?j_ZgiQv36EztCPK6kn#l*{0`ekTg+hvVml^K`|94&cMGK`Cgl&I&Rm z^ zevY6lm`foHh%Ad-{Px?1ZZQR~e+$p2!sKrQN-CFUTEqRY7-M51B*~D~4h<>9U!47R z_XK6*LbB)+AKv;r*eX2juVN02BYX1VK^6mPn|?PrHv`O_oEr0Q&c6e!Li`=3zlo-d zpzu{1G+A6hAvg3IxOB6WcFG+Ww>jFkHXi$`Nx^OFZGZ%CiKoln!QNR-tI-M;m@K?wB4!YPhm<>TJV9RYPce(z1_ae2n0FjSOccU~JWHy^+NPI6pQe^;cilo&r2 z^+7}rX1D}rm$;NOvzX=OtDMQG*P*o`l}Afgj%pgfhgIj}*8^DB7+BZA=V>e5OyGs! zx^GHCWb=p1o_V=maZ=qlvc#;<)f2RNrq*r_Zub0B_bVGGnQdXAf~{evK8CW|gK5-F z14JKOTE$5|wY9=XPI_z8hNkxSe>DpY#2UBG@d$EFK@76rUyATg1i8NC^V$2NI{H|O ztS_lrWI|Vu55C3n$>FlNFIeZJP`P6Hkz;s`0|gndR%1 ztV}JpKLV%aSDdH5&|EI>NBHq0eClYD4bUxurYXN#kf?$t;=L$RWS>1m#S%eWml>P+ zi4S&DJZ{2Dv@wh?yG2bE5>R#b<}ygq>j!Kp1OoX;b=TM5UOkB0sy~x}`%_z98t>+J zZuk3QaOK)}`Hp%{5#bV-&lc|s?(P;m*ce;BrGoiBjHF}8C;^KW&Wym_2d|L*IXaE1 z@EYb)Qt+(S1R6z4vcl89>2YjORs#9U&=KJYw#gjkon(=_849>oZ4%QJVs^{X%Z)GJcHYB}v$ z6iNo^3MlK584W_J-ShwZ+Ba2H-QD3NJ6-RiyQ%J9gG)%qesY+KM=r=!1R-h67`)5f zepAgry&Qj3`?!77`y1uSE{Ri9W3P=R*LIPH)>?X{D(%%r?vb%uWhSCuyf)GUJ87fC zQlKjJA~{Kb2*?(y{9eS__0^x>&MseW0=jm^W0F@qclSiv2c`BHup)sd=n3pD3`vXwr ztla6}-LX0WaMv%Y-G_&x`GOO3F9qZ^1^?S%{q^$C-R3H*aI|nmfPy)F zr=9prq~J7rtshW$*W;}U=y`^~dleG--EheJ`)zF%g%k=Iydo)un%b)Q)S{8py_K zftv<+-0*(B+<&7|8>P>wFO~B1f%W02sq0R|oJ379o?<7etq&A!KZs$|%WiT!gp* z9v*J?!Ff11{@$(VVovf?Is~Abb^s7^Iyw7Vg^4+~b%mGq<8D~xW8d@QMnc$^p($|z z;X-`K!qm#LvLTJ7&#iWxbb=MZeEA(JjA^YsaAX|mPYK=@bwaa1qj@Emg+HY@|JLN@ zknj2FdRPvXmVRl=EmUIseC6Tx&mdiXu)p;PcGPD zNa4DFR`9m>E)2t@$~fRuvtyE5$7`of?D;97>tSDFC|tVd*s02qER}Mi5oK*+L!tMb zEMEm=dsJ-?jWqyDlx>$hVYmeUAv>5U*9QRD?j2`PVm8ts(}&|`rjh`3s*LYkNdEOK zz+V~zF@e`de7djO-N9)%1KlQZ$h5isa$~f9oQR_C3(to}&oHMyO~Mi(`CJjh2g9W# z?h&Q_5}RZq5~L!M6KiNM)vX1O`0MuTBWDwQh$P}&e_w>t$Un9^eZ&kb_ZKPzh zp@o%z-S+|B@Kwi*ZU;x#i{q5Y)BDDX#|_2w{&Hov2eYll4lOj)HB3=pmgj0+K0-i|(D>5huciKQ%`FQhK+8;Vh{1HlxU4&}? zF!?W*7k*pgcR#-@*@8HB9gxuKT;Mo4>c<)tgY0v@2ERl(w##iE)40GwKsT^+DcT6h z3$=X*4?n?J)zHX9*BDBY9XPE}G|HMTnq&S08ToQ$94q-!$CMe2 z?~TZXb;CFLowA#{K>CSZI*bXWE9L2($kh@k>ndqM8LpwAL0-O!Ci!wZb!Yf*BSQZB zB@?*GwVAyd`*27;3SZTLQ$}m*?Dsr6I90q1RZ&csEB+>e3xYeL*Sr8^V8LV;aoN6TboV)t~-uQ=H5Om6O_yYzAA28_WV zxOIu#xR1-6V^9h1%!N;dsV#jl?( zmW|WpnQgvTsy<`&#v=ntTllghDl6@p!}A~PC&1`F_pMcM$lJUj42N@O$#O1sIw$9+ zPRno$ZMl7^QUqy&8HQo-~U`zgJr4kWE>BM zM1;J75gy6I83W2|7_zFG{NPPcpItbe76*a#yTtLo8GOemr5Lr_LK*YoNTI>OcP&GH z1eaI@PR4F%N~4Sb*n#8z9&)Mk{wPz~7~^lo5_<>x6Z_*=2TriPA1W;E>%@MS4`VuQ zXvA-C{v^Q`oJd8g1CEj-2`aP19*&Y(gxDa>o@X~rKrga3sE^}wOms%$ac3YbyD1FT z5h)uR=zTsurU3MISZg#JJ9frg@$@`9bLnv11djpcNreLY26|S(eP=hFMbhj~0+u2ldqbDH<|j}QE|rnA60F^-~fiDE3pG2d6)k2W`b z943m!U^*u&4UnNFqS2wT8Hl4^$6fbV9OWifiY55b924IJ8Mw*!u`%*RTcQCzBfHTy zY!DCcHus0_7{?6Wr~I! z*zIl-c!7=8?qIqEN$8r)%hT1X#T^EZF0+YsSoS?lH8FM3Jq<}WYs}_z@q8}EG`L>v zgl=x_@48+bz9=@k#cON1#0aZOkpFP8dgt&vEc=*MnXii9xW&bEX4x6@X?^!#(-)ea zzjXx@BNc7G-s>>XiFE*99$njHIvK4r1#Iy_a$12Gmm81Z%GGAijnhWz0Tm%5u{sbe zJw!G}V71j_J0lv*7xHM`gC8~qWm`Qxce!c>`kpjmK*$AmHg+Q_(h|bpM-Rs_ThTae zO~=cP6H{mNEdfGJ4yyq>yJRZGBoF}y{+mZTEbnr<#q@hD(q@>?QE#V`ZidPUyXwoJ zX!ml`?{bFx0k2{2G_bIc!83A5z=9bSooFjfHAiQwy0mlAd?J58Kk5K67mLOKI*!ZD zfeXB0V=!&UwdTNU?e|{-8hp1xvkc~)4C_#V7X7N}>eD_EmI`BL*PEX$yr zZPG=z$+e-wf8hlcTw2w& zVjch*j8Tf+wPb-$$10hQcdd1L_7pYb{=tAaG_fw4&>mQMb3&HW{E7xi~6C7!S>;%dYGAvf%W2S-Hjwttk zWWcD9b~J_ZrOqKUoJB!Q%yrTM!OdhcQ|xY1r!@yq_dA0Q-H{isTl*m*=m7cj4>+u` z60vn>YFy?E!f1Vy8SJnW)N$R@+79Mj1URi#n+?#F?=~t;v=6=hhrZf;40FUJVHIkf zYxEM~T!*3(vj29!O`hQmE6xV{>mdbJZC6`d>`J0wYP7`a(G_D zD{`L_@SU3A1@==vl3k+@%%5?oFmn(*W|qHva?zEJGFVUwsg5D zIk{5wwCQ&}YNBDMk84KH9c|VG?|)JBWvh2;f3wZ?yR2dTS7BI(V!nraw{^uY76n=iIcV>nS|?kh6-e``gw#~>iNOVfPOu+RV~z}DAI zt+Wc`nEV+rL;vpyYXa_5osfA|U0r@oVZ`9|^N91};Pn(f)5z~Elc@Fc>2zFQtKx~* zf*h$idmT8zTq@M@w!?Js?eFwxA3guA<(FxD+Y)GY3 zhqP7SY;U6aoj$SyZ?O(XnVz=Ilxqw1n=Z=S%cm(aymklQ3hFv0i1) z7Y}K?#A2aZk@;ub_-5@77K7vUrz4;%MtPyW z0$)o4a4+D|?k86xM?|yS(Frp3k#5jKD5giLaGqpptPalLUqBWodvp;8!&!qe^NVG^ zJ}>ea19S`H#}4cc6}r)7y?gMH`>t~kJpL*FXxPf6WY>tnDlk)-+D@qhsU61ikWRFe z^+6_OP*`keIdSMWQ39DVP21H7>at!6ai3tw$NcytB~`rZ+Wa8*0jwZiYrUDhHL0tL+L)YQImA$SGer2=Z)W9!#B=n9()_lQx>>LrKpZS? z`o^4tXU@sP1*Q267aaK!y)yk3yd_dat(o%C-6i2@hrNObSru<9)|0okXg1scFb$u^^v0UENIk&Mf`~IlUM5=$%=S-1?EFQKwt}fB9t-Ek7^UKmO z{LxAi=yco(d}?9uxFO_npIIL58B~5~fly6>A(9~p8VT_BtYUN@|8Np+I%eiyS!Ex> zJT5?A3S-`SSh2KY{}QZ<>Cw#K6kNjdY4H}xC#YeG{79SPHm`r{BUq7<7Xz@ozmjWd z1T0Rl3y27C3tMuExcZrLTWZ!+C|HEWK>M45e&d?DR9JYtw`zhB8O9|r=GjXT&n9Y( z(Cw+whUI{n2T!2VismObiFLQG4Z*SskBdPp{XzQrA5kKsX(NLlc-8z#=s{C~f!+BL zPsEDtOSHZ}Fp&NQHxP4`T{qig8KH|cMp?3B!>5Y*nh0KoIXZ3j$m((9`uvOpzN(Du zT|-!WQ0eVayX)7b-|y))-H0R#RX*m2R%UI%mKbM#GVEjAl?;^#JY$QB#c(y-xIr32V5*Pozk zK^1cDemE@t9}GUP(1-!0v=>IMNV;WeY@?-WT~z2+^F!zUf|PRv{-uOK`L#}jltwp$ z7G9+JTV9UhS$uL?*R~+vy2PznM$3JcZvveI>|Q&yY-A7Y(!!g{F+)*p^ zY>~5**7_K%ND2^3R77Fc0(=<7+i#Pc=7+y(pdu5Um9DRpZCbw9Qn>40QshmOYP8Aj zFXzDJ;Z)Id6%SF%cgyOZo$a~%73|*eQ%_|&Bas+NhYt=vkd7GTEg5zgby`<0V}2`} zI>V|~%KfXbJVWcD8?{s?>ogu=V(g61lHFPR!m!m!xQ4m*n`d1jurOIgGhIo3HH34w zLEY(#m_+W6M;TnIme)IAAl>wAAvL&u4tznwC|ooI*!_ z*PzSP$Wt;$h~42h{jVtS6>1Ma3T+qmOQXw+0oFwTJB>e^5PM4gs|NxQiBExV-kM=p zNB<$u{cq~=4Ke$FWrH(=Vlilpkv8e$ z!*JQvbIa5jq{_Se+`f=g%6ezUWZi`7fB(FE5DlG>@QC}z#Sep-=acct4Q7GK=XQ~s z5+K))ev_e)UkLxU{koQliKtq-khrfd(6?^WGCQk?5X?w zoi=~*|3uK64{8X{bIgQ8Dm9-XM;6yS`uOb5jTqj(|8j^xekcrwRB3xDPkwHor8f6# zLoQF4`Es+QM;e&TsJ1BPf9Xf4`LLW}<` z)n`*7;-A`Yv6%tg$SqW*_}=VJ4xrH4kH&}Z*;a7bYUSV7=AN29=sF-_Y8r4-6*XCR z50C%+=8obO2wxC;*pCI>&g4A7S34}X8^i=nwReF2&-W02&n4(fEc;;985RH%G%WL=-}W8TqxhToHl5*8$z=e!P#S&Kj*vARXD3A|wITJ%4a zP?Wh{-;*-1(sq#PupCN3G$AKD8ZHJc?xk8xqM!2+W zitJ~ayms?0JX-;994YR6JzVp^Orb}{OO7&MC?l!vk5WdhPY|BNRq4p=Zz=Vy!M~@R zzDQ+3yWJ9dtU3{KD;Vilrz`o=z4Z?FrFT*1wbzp9RJC{vjguNgLUUwWD0z*BR4n%B z(+2GP@=5hTkuFQ0RbwwYc3_TyR+!u*IvRj`_QvgK`dy@rJ!#-`F&D!GpJ}0H@77sC z1T>TKH}<=n0i2OUQ*#CM#d0lILgut{J8Hu}L1JR+qIa|79I1!(u2nchzU}1LAH(|B ze>*Bza}3h>UnNAEPk!k$uTDg+kO%nK6YWs3X8n=SRLLf>6;KpZpsa&thkcvK;}Qr* zz1L5W|7#Z`Tz5U&hfSQsCVt4Y@Oy)k2tB4-lp{ZRBHc~2<48sVEo(@9Z}hhw7M$a; zXX3L#lpyo{UcSCH3&ALoPHup?#XmjAejC|Yb8Y1k<#3wF-&?#{G=jFRe{q`V`sdT~ z!R!L&VVeCQ_^-7}>oQv5q;KA35g4@@>O{=^Bmkb$71$U6Nh|M{1OLg=OlZGT z!Q7xFdxISV5WT&CEF4FdWxm46^|p3=c%*nbKcmliI7$$Ex|(Tby>s}nVABOL7P5u~ z&tK~FlP=aCOn~mTPd%$vzQtXEOkf&Kmq^_sMAb1WU#{9Z+*b)e_ai0?4q~Lqb5y{a z{m*s5TBKVwz?t-}$9*;vfkQ{bxP1NAxgd=iqIuWgSb>Lt$NgjJL!75ry`dm10<7vI zUy}2*jJA0zEZ3U)WD|1e+2ck}7$&)}-%=S!9I^k0$HO>-d&W zYsP~nJmP}LC4}o3(iM;;ly8Dm(Bo$P>Eu{C2{pTg#xZ%u{cjeC z|NPM#c%9iw%)*gJeVYyBt?)i!o_E=}%ZNIL#&}Jff^*EIPIa&=EXURroWRMg0 zR`!3~fs!=FXT5=zNaJGU!ez8t{nrz*4cn=KlmON=Qf7*g<#qFzLxu_E##F-aUhS&C(CNAZ%EPD#xlPh8=fs}DtfK3UOwpP9MIjd%vkJQC%ut2U6Hfj|_|sXyS7zUyW|Bn7ecg{()V zigmc(%mLk}+00D`u0n~c-~Cz?gsEfOzUNR{JN2~Ci12}Wn_ zb>=g75)+OqAm8b*WqpL_SKVzOWu5g}hvKBD&*gHJ;=n z4o!Oaz~SL>pZgW^pWX^dppiy;3l&ig=Z2ekvBLb%NJuhVH>E>1fPi1(y}(42Qltld zi2hoF$8C2@Ssmq*7Q#T|`{e@?!TxWk(dwh481fHXl=&@okz|jOLjXC$E(?;skqpD^f^;Uf~BoTA%g4hhYBHpmp7t zHKF253Xgho9-L8Z5GdZ65k}(cYPWJFUvAk=*}daNdtX=bO#G!)PuwK;LeAqU8dY$R ze6Z-;=R@HQ24VFdQ&k4MRhs$!g5#>6D4oiE=!*xvu~%BC+D~#4kRRtuFP|b}+IwB6 zOU#AiqJ(@p%tJco_KJd6drUNnIH{Kj6SU$Xj7VC|&@hzqd~LECZr6a3#`NxSmFjBrlq?vt5OO!u2d*B|blSix+eV2#!L1vUCRcnjNohfn$82xAR>+31{Sm!bR3)5WpcJRKSMOg78_3v1z(@9dQl2<-avYhKjy zHeL=sk^9TCS0dOE{|$iv>ZAuK3Tev>)IF8fdsvb}AG~0Y7r2cI1%-u#MM>GI+Z;vlyoLeQLo7>$83lcs6 zuLzBUE%Y#zPvwl;ck2>(I9JZ_krSy5BqyIYlTcJa0yakV02;-ySinBk3aH4*G zx17j;1l}KER4o#PJ_?>W9FO(rkS;Y=*iT(1iSh?-2DjBINNLu?`a%XC&N+}8--cA4 zxH6?TYX2p@UL2rrrSKAGV#uOr7wZ@P8CK@q=3+VVbb>TPd{gB$kx3>M6Vy#WV;PSA zt&0+#G+e;e!X-%=hn0Qy!=j=f79vKZ~^zpgOt{w){3e?BJm zxH+@fYSXr*)aQNu1dp_sF$a?K=bucmbuL5cWYz3F|I$C-+3Du53PG8+Y8*lubT(R$ zg)vv+18lbFO)_KsEW0nR%(`x`RfJPG*6a53;q6IJ%nK$@@Vd>kfmrmUmD}TmvKS=* zb7Ws9=w=7H-=ShO(M0(##QQ_X;%Fds6wkg2P6R`u>vG!M>p#U~M4YYayD@r`45>@$ zwH%h*8(*-cV)ajvxTxR9cf%X}M(cGu?80JvUEf5qLY1{P92Vvrk)x!$slOW=u$t<8 z&ne)%>pupZq2nU~?BgX0>%LRnx?{wBrI0@rZrWM@Zic^GF|)J~W7y%?K^0w!4_0wr zG7xnGdN9k)Oh+JLAoII^D zD8W})vHvx3ETOWYRjchXzsxzno10W$VxwXfkvovtc-I%E$_T4Fqj|#$quCFAvAJ_{9}Ie&OD_l&P-Ufy6?iBAb0GT_5A>V~jLE8-`LicNqlP3w)(tc!ojXvtuFwDEOwdNP(NI zwj$FSgthMAuMgtyAM){O`}Vuny48WY?@A+Iqr;R|Kb02wLHKu$VZPVKxbryCW<2W; z#&Ht(%Uvc-EHz_+XOe|+Lz>psI=fA64?eFOl_O}n}t50uK#Z=P0y*#aJ zbm0$7=WvWgSHo(|(t~x^U3<;)uRV7$op21M=i~5hG$VzKU_?_O!`nayM_` z?J4rZrPO@&`3`FGbUT9q<1II+dr5lbaK*z{*tb%i+c9%FfeqGM<77hf6?YCN-(Teo zT9fRir5CK4JYQ|G={Q3=-3N}Hhg~H!6-3TXx^5m6Np%@yj<BtyCIslM4 zq3kE}$`lncw!J?h4JFL!!b#~QAo$e$HYXrmhmhm$#P9GvrTfn9> z)T4!0)JIRJQy*g*&@5AsPg&KDV*|sFdwhr?oKIZJsm3%y`jaIXM#08r?NtQH) zyDBX5uj^|<#oIgb^aONsQsUGUahF+hNNj}45;k#0fJIhsyYj2Q)1tVW8IvB3%F8J! zO&pVh{P6zuoI?FVrro&qc4~6+UVqLe%e6{EObXGT1S+p%YeZBIw!U@F*)gqtyYgbV z5IKj5IoRs?0QrVlZT^GAe06+vT61l%M+k^CO!O%v^_5Rz5bB_J!%Twsdj6sbhD1>K zkl6D?N0UaJ4RvP@y1*LrX2|+KNbCIR6po=w^C4O#Dyiu@fW*iOxaKX;A%r}dRxVOw zwOX9xe?Bxo0fP4>lZgJf*yMZuxvleA6zX}Yi-YhVz}C*!-W?Q=*HCb7@sf!r#>V=j zWW!{ojL^ePk_4L>J#BxSh)%c7zHv-ECvsoZd9oh7T=2)Z&gd=JQMEg#UvtIy2a`5*qN;$@U$b3fnlYO#)L#kn+C z`U||%=?Fpzks;((bsP#$HSP;)(65kUKIm2BqxX{dk7yj6_-2K%NU24)K^F_>&D?i> z`c=H4X`<16sftYG9hgh&i2$-Ghq|Z)oUhRQZnTtAeCg<#1q=;6JZyb>-#j;0saLn< zrp!P#?_*L#AVJY?+LGcj+R9$Wa?~2FhbivT^=W6f#l~n?`l)s}V|_^#Ar|?WvN;@n z49tQR^R|t)QuR}=o3UNC4je;3lG1cRzX5CL{%i?072FTwA5q#)@FJdH31@)Qp^r)7 zj4ohpb9AXQos;-iq97>XcRXdn>+wsneb$lg*st~qGQF3K$mQB)w}#3WG_Dp7BQMUG zLyy5+EH(fqWeIp%h{L@cI{zzQsVI|k{BnW@UpEJrhbUQ_hv-reOyD>slRp)>P`k13 zyn+~o95Uo5FlWw**j1lwM(9|mZ)OoVj;m8Sb>Lu9z(bVMV3siCz#BqTqa-n-bPg%@5KesBD_*h3U}1IFmoAcIB}8&Z)n`v-*5eiKm0qc(hA%tNG1S$7>A4>{VyS z@ULf2@6t6{C~*tvcV_E?qYlIHuc&?$} zGR+x3y83M^5uL`qCUlW>Y`bD09a;SB4LbQ8Xl`q*ChnlAIG_sBnu$w|ECZ1BMDxtX zj(O-Ls<`4&rYFV=Qhe*f!!JUSwq_2mp-d85Rhtt2jf7nks-~r(l)TS_XsD%ear)Un zCa{>;EOC3T+VWvMg0WF^Wl39rlgB_$lXZ$nuA}hH7*_(z8*2aAQR1?F(t>exOZ>SK zMe7FBnogQkF=p4~@qI`8zpmVF^HRQ!AaA3&*JvE}zFIHU-O%{u!-r18HT^WM{+hm- z($Ku}P`OHF#P$|zk8-Xu|Ig0b3$x46()P}Pcz!MLa+&5kMke69nWJc&-jdMF!GfsF z#NWNabT^70{<+r3i`AVa^rQeYRzlmxy?OZI4QqP<0q~MbMU$Q8;QmgX+n~EEPR~g= z!pOdcC(n^zT&@y+;vDnOvs*hNenB0|_=Bj{eRyqsrn#`eP`X_u*1>HyP z0ZXkJAK@A)GuXTAlgcvNCa-P#eLT-A(#bsYn%0`irsAr)oNsvt{q6RpiD>Alk%NAM zrFWqN2ln7Uzej6Yr@dA*4a_JctBSAjc+jU@Lavaw@axLy*u3rIk)LAXKdp|jTu9_c zi0B!E7qkqN;$AJt+AF~529}xb`~O&?2t}aSHZ~bC8Za>xwIFNulvFUEkdW9N=jT~F z6$Vre;(4;5eJfdRG;Wa5)S8n`b*Lc8AgLH)vm@I$zvWDV7aQFFgZF(slle^382#!Y zcDaQf*g6vZc&wv|Y~#`@SlNKG;~n<4#YB(4QnM~>|HVhK76h0S+V>x7L`!;hONAHA zM4t#9879VuSu6IFgLQvS;pNQyZp;<-2VM(@$sQ>EP-6alf=m5#t#ze-?|*@GBP+uUKkjSMFWyd&v3BdlQES~oha|{7^BhgFrIqS8TBRH+ zYeNUsMX(^#LZwsk%gg-)X8}hun%`6y$K)r*8OT3&?k))Yqj}C}s>=~busuzk?>i$h z!ADw6%j{o!Z$qb@hij`EHBB5V`3REk3gO;dsI49NY``E9ibiry&?^}lL!%U@Msq@c=M5hEy z9JYNDPAW#?U{VUp2FC9VJk^(2^e>S4j$6ea!8eg=73xHz_;sE;gtKmGD{y2xpw*!m z>i^3C{{KAmwaK|#m^G!Hy{ozT)s?msUBVtWqrGok)!Bb1 zanN*!g0O208Puq$Eah$^ucna|^VJ2x%d(*;{W4*>YY{TC$iOziV)_~t@&8WA&|Bys zA$Kx;Kur^_Rb*F#7#;!HMTbL{RAAv44TXMb&{9i`K7*XR&I^2J8Y@{Mt3 z|HF#(Vjo+&^Fed!0Z_wV3P)M@7iYp!(({2a+nQY&1DGSzgwSs5`=#3u`dz<2i^7TBrPuwp6J)rf|a`GDt zG>+i)4>W=d%Q4a{pZxihVrV#hnufUlo#GgbwfN3zE08mxZ>jR*H6nuSr}dyN1zPMc z$x&7dvFxTXe+j3<>VG!$Fe{D5)hF2B3qD%(mVckx*zis6%?1f5a_T!;b**Frqts~4 z&iW|LrowGx!upHl7^&@5qCjcKY;Jkd-%$zl8zCUl_@Z?=z z;4a0`2w`s6{T1C(?Hn&>0SdaOpvGSM{}w zwT#sMDev3BMw0r@Pi&6Iw@9p68uRZRA-`pP88tp%YsieGQH)HmRaBLh9uY5?LvorZ zCBCWyMD)|@Icq*w_D@^KO?|?XA8qI1tkGp$cpENIa)n-~S?V)AWADk%hQaVZxDQ<{%p1bQ1M@6h}h5A$@%eB{l~%P35Lpd2vNOBSU9RaVjWaJ3g7oH%eSx=RFQ~T5@Kl+BE;K$$b2Zh!Jyz ziVTnTf&z9B={;|O=KwoVv?*47E^?tRjrP}$zf{|(6?kLTv*pR}zJI_-mQ<^V8o&;} zVtbSux+Ng4#x7C3zK$Lr9I7ZfwPNhJvK-Hy-%~W*lurwy*4Br8&C(vTuEEA=oY9Z6 z4$)^#e9QQE>q1_}>>I{c|I?S!)vYFT>{s;rWgp>~aC&5vDjQn-@Ra`yX5FpbKF&;x zvosq2*(sjIF@$?DRZGZBA%n$lTG!pl&)QWEjX-Vk45?6nfq_UGO?}KkM_W@}dx7$M z3wvflYNnAUw-Vh>FCCuduCz>HlsaxBzK4XmxEfDz`mzF=5cH-|;`_H`y!CDDG?9sQ zUL7fV%eiRGYl7{@#odrb{xw1Cs(0%Np=E+{#C;Otj@0LC$SiE!>pzBmyx_r`!Zr2f znlyg)kq?C3Px0*Kr;aIaygrgw)T$-N6m$DFnCU$$zka|g%ZUnNaVML5XE)YZ`7W}r zAjw6ZIwU}(J!Bg7mYBM;wYAgU!^6kaUl|$kYVBPAmxN)$HZeBg(Jqcwsy6oi7P%gG zo)(u|zTp>$M942cqt*H#4Q+J zw*F5bbmdmTyXS52wHN3m>ah)=B9|9b+XzA3iOQwvzDt`FuwgsK_uE{2onn0nKe6oV z95Lf1a*FsQshpDi&3TB^V%zrVdB5|Wwa(vOtE;Ljd7i4h_kCZxyfEKq!BrPCNdorFp*%xvU3Jih zn34PuV{w{MDXNf&&q>%sTrH{{ds2CUaZw)&_l1a)v$DKJD;%Ey;X`h5&pSR*b2O+R;cQnfmdMz{M^)T5d2?SzGLb8umJOsG#`KYCi~op*xJ?ZK4glXyY`-_qjMqwtItrFzH7>R|^`vF} zRg0aHp>B#e;KsB#`(7N`YPJHsQH8I0gEU0i7LZR)RZv`@5JFc{U0WJO?ekM475L^* zC8w*R1VeTZG48(}xgNJ!O*08BBFwiAOYh*%Of6%qxW@phafCt<-+el8mw4wC6O}@_ zYSE4LZ1p#>4u{`Y6JBp`Rv$};PIophV;zY(Gv=BOF&f3HGrMLy@Tsw-N3U{45fUQ< z%THEU0fpeX*lP9UaMBbFW^0i_iBV=;(@~~*1xbbc>C-RV8IJAZ-{f)5OJru?vaIfe z1nn7(?(9W}@awj)$*PpdsQUk);0{a5(O;d>OIl_W2WDF~6d0A)u(cOjV|kI*k(A_j zhryu$l}P<&FIn{iP6Tnyf?4P{A)v8H;GHt0+t9_tCy5Q`o^)WTR&w;Vg|}g)aCn#4 z(Ymjq!`CYd?mv};9(dEVHPqKxVoB%$%}(OJLQY$x1tr84R*`HA$qSOn1!f+`mfAvk zPtOC#@1XQF72>c)YPvp_KmSbnAKb4N?%FvBn#45&b5&0<@N&_QQ?LmkJGc9{?DfHe zB~rh(p&7`Ehcw`-i>}-EM>`Wr7Fe_yXx+U-Zc`JV+!j>p(1)HM9GlPDp&}eIO z|Lt_RKe;?)+gs|@27dB_6gGmd;8Q6^?&83)9aYrI%}Cvc;&9mb zMXSM)3=hJ41`G712Pl~e*f$E%u1twKa2ma9K9>RLkNfvS6`MX|;;lY7Z3gdWwr@ICaPKO($x-B{vstmi}G3WNHA_$~HgtUzN;Y z<=~zImb!xmxeU_>BbO3SI8p8jI?xWatA(ys<(gz2~k$r z5nIb#gu!CkR@3D1{LyXl#0>c!YmlfCdDo~6h@_xg(VJ=Nor*3_zT`rbjG{t=Rg29e zn>^4mo$Q7q4OOozoKldEDGv?HGlx-XOcl;VmLZKQ)~esQ@9{cOhVkKLVe764GO+!G zAkt=$v)ZPP-WCmr!8&FRTEf}m56a-(Oif70(9z^&=i_3LfE06nhc>ih9;T@2YRS)U zS$1{FVp+~fOkU*@g|ghlOBfw=6>Cgh*Hq~s^8Hz70nEXrnE=ZhKHaGxGOP?P_?MG? zWzlZ(v|ZxW1t?77rS>7cXISvBEiD}0Zs_}36WnA`6JCB^(!lIz z)&U*v^~`n;Z@@SB?TgW&#J;qI7>N^!gR4AIVI>_nRs&$D@FL|g4$OL0dUbGTW}U8S zX8|wk+B!IYGqWIg-Ph=VvBY~ZaH=kQ`)!4UAKS zgnU*!`yr#lO}N1;a*^0%BbuN=0W#FI=&S}K%s?ju(6mwiK#qX5QUfBShz{ULYGKHN zL?L^!D}nOH0aOzTZWUl zu5Yi@{#mP?&R+bLaxGI%Nc$gjh~K80=|5E^l~Lk2qKOKB2OE?#W0+MU$^U+P(4XRY z2(>v9!2^~FPied;=>ZX#sQ|W$h)GqLTsT^Tkz6;t2 z=7)9qc?w18-dXu9d19xHC9JT-xAunGwvR^o#36_;D+8Dn8iX1 zSu6ec#4tiTNiM0UB?xVnN?%%#U*oi!M;TpjKCoqo`&TFH42^9+O|KmSkGwh6qzPgW z#bW`Gd{98d0S&P4{YCUGm?Zl{+M$XPViVNWsdzgcDW~cEQyQb@C&-7M8lj5CF zMP>^|+S*Y6oJ$)ES*!-4q^K~(p5P!#4DpCU!JsEu9dO*H!Y|{RQ^Qp6Tf=vutA~YL z4-7_adBwMW_`?vJHg)${DqglizTby)=YPov2aYtyeI`~Dt0R@<^Z1KAbMn3?m}KMQAc!p@40$_AU9I4NiI^SgzS zqqP*V5MrI+7nnx@NEUqhMk>6upCr=98{gsbQ~Pgpr^p`gAw6Z(e~ZWew|Js+e9gGI zrSl@8>17#Qhlj3LjoIj}0cKxhsjJd6Kq=Z6N%Z5I=FpW zIu5O`8~Bf+k9`477AQ$>Bn$y9?6q-1Te>@ypwtw|MX(^K#sUwscsU$2O}^(Fe{hSR z_M*M|@N+U%S`gI!No)>7-%w;A`KWC8Cs(RYa;>0P?Sv-{JbHib!D#~>Ql4?aANyPR zAb$Y*fBgro=0j-@{osClsXQBf1acdSKKk)#KG%I88Kwq5J-QbxT5ot9@s~|SA&uFa z^w<$IE*D!<%fZJ%5mGuf|NARY`K-d3TY*-|!7QmevUo-EZ*1EP)Xjm-fGjq3v;{Ha zTT~%SW(7Q?0x4Tz2hJ4~wqDLa!waiI++Q(lcF29gA>hRytV{-jwORG(HYdh5xU_XCrRb4`#4BPt`30L9OS8-Sze8^;4!us|cu|f}W{7S`g4n8bil2 z2}@}(_V%*S)B3IGQG>kzOG_QHt+T#4Vl6>z+QMUoC5rwK29xTVq8m72qdq zpwO{UU9h`Vi*z;Pv33qFvJ_cB%^VA0!Ixvsha!N(eX3LhicMf4+JlI#w8Un{_noCkxz@r_sL;<{ z33Ol*=gc|AfU24zyxN0Zq8tpQ7NLkO8$ulJn~W8Ef#-I!r|QV|EVk1dzike2c;k)S z>Cn zhMch*A=8{XY}rVV@IyL=AnOrz-j9!#lkVHvy%L-m++Ph%=BYk*V*6T_1|#JOiX$^K^yH@~ zbbu;h+TBy3l#To^7b$6N^nfBT0T^0PGuR_XP=XwRg@uIl#1-a#cB}?^qa}-j6c(>N zo>HDU948joy*U;$2yyJ6g85V>v{rT|MvnbWec?E&l@SF59k7dV*n6VPu{}FdO3mR3 zX*qhE%_F1=lMTRYcxDE|yj@|c31#IiYK;z}q<9Fjx8Kuhr)NH*}9 z#lOVQG7nfK*(s|)VKJ@bpf9no00AM3Q%C$q{V9B!@V5otoeI7B)P4{W)8IOcM;{gy zMX^79Y{@H5VvOg2j!L|Zu!C)4jOkeQK!o_*5i=HQ3(Jh-r&JXmP!(X>x0yVu@I(Sc zRJ2WSJ_Pkr?_#Q^+DRZ;T&2ZNaOq{SvrlZhj?(8=)qV*85-aNcSvXJn9NcGe)T!&( z_*Vs5Y72O2IxM{Htn%xvO1sJb(sg9^B^Vae2tFV!m#XPXOK4M_FMav!{05@U7f#VQyVIy?(}swWJCPa1i`pKz%a$6>Vi!3v_FjHufMace_UPbUovKSen%4+qyS zk7;ZaSb;Mw@u;w4k_&&J5W>Y_m?p?Q#jd3#^0&#bhY+$Dc#Q;xa$}@0jN`$TpOzu= zBh-l2_=7QM%P0^N?L(D;fDZYB2igE0e#P`06-5;VR7>2-j!>xA_rUkYaUERkw^Hc) z*TO=;-`>BOE$e-iLyip>5{&6<>+8a1i8l{wVuLw*uzar625j3eqoo7lcr|6^Ex5x;r;ApNt}kqmK-wH4&=|6hZwdjnq+=h{kx18z_e2SSRj+M6 zbQuo0Dw6!=8Nx5Z!T%!2xYFG*M*>EY1Yns5Eo3<=shmn)nHdOd+HXq^g}4>faMyJ; zwscf9P?nMk)$p#G^sfLb8ax3*)eACRoflVC+19dRF(?vF&O1(B;+e5`#l*+8Fw#+N2kX?!bc!E*qD_MZ%2-%x4i5fvvCOPSxo}FpGc}S~{rOsem z6$y#tODE$@@YHY^N{M+x7@8G#0m8;+u@P1-444VB=#-<{X=4}iH7GGh;0HVjF_Jj7 zl+;-mMRu+aRz6lt79vt!iNAxIJaP(<|!Oz`K;sEH0x#1=1UQJ+ja}bB3HYFgwd=D_CDJ{`>oX zVTHa$k03^M7Un_tWRfahf~hJPix>AJ5IYs&L^;mXyX$ z3Vk&+mp@Pxfw?$}4hOVl{6_zuk>(_XR3ldzSAweJhUl?j|IrwyPJuFJtynw;lj2DW zPtGCN(uN?@^Mmw`)l&UhOMm;yGF*jJM@!n9JAv`<2v`7k#(3b=z#s+^ekGhJZ9Ibx zo#!^+lLPgBE9MN1V5~_sTGEgrZ_qO#B?Arx{ z;r-XKe7p7-WQfdAA2`CZInZK5f#h&^7mN-h=9!uQPfWUF26H!1685`HbO1F1JZSSe z5c*k)iVOe|%G&u;k)7Hm2f5_ow!?wA+1Zj!cE;b&w|@0}swMX3CZS@q!JO4@G4a2E zIIoDDLVQ?Uq6g#-9bVJw!2szt6Fpoh)<2j)sJO3Wk+C}vBrDwK!8QraOMcwi@`UJa z@sW1_!_darJwUX{{C^yAC1enF20eB88jJ>V_w5W{9S<1ur|r>0=?eTC@v{t~lQ`6d zMxd?bU?q^vsw3u#;iNc(RVGWbhvq}(lGJBvc2Vlg9DL*Z(80>*BvsjDw0Ho3XE^i*_I^i%}Lgfk~Qq5lez(PNRjK=-5>Db>QwLdN_c7%iHb ziNp&bzelN!vPrU%6&!PruDuv~Ol8|gtAf6qtW3MhjWUank&@!r7%V{>52Q(xwOV3! zey6?=400<&`vCiB$bR-neelZ4$ck{wX-Qp>$R_wS+jhZD!E2}|xKNX}t=~_-Un-3^ zWLJo~*zS%%4`uM01l(EuKa)a(i-bi%~HI@unFGw*{yjuf>C(;Ppx6RA(!lOluR>!U2IH1R2 zWNkNxaa&TLwL{9v2k@1$R_jupCp6|RqHklTCKWx*Hf)1fbN1Uh9vlMl+>fTi zwxfiIzq^Th_9)cc$lkW4(;m{otd@C*qPC;?xObMu_W>aWLCzK)oS?u@IhW0#LiO*) zqV2RMh>lr6mw`-_B}>RlNezOF%Y{fd$eN}yy+p9VGO}WlJgor?spem!*{VgS22q$f zoQn8yREw18!hPv3!5;Kc15#ivX;Wnr0t_RhjYpjhi;Ip4Dz-z4E;Vr5dN3%84_jZO zo4InnAOEVjkrMy1)hC4VFTsurOKGzJ%WOs69)Kil62BTXm$;CZ#Qba4=4 z?)5bamb$KHTV1eDDnD)DiW^tg=l%lf4cv6MhYw5-oZ7q10~O9?sBBvGDC+agaB3Tg zcv{=?GY8Ucv02n0GAu2*_GE*ZmGO|%)|VoTl_>6%=YHJ+hN+Sh2lmeag>B_4sW7q4 zApcYr)9z64SZwtcQNlo^EU9b&*8YnuK+qC&wc+!3h6i;H)tsd%D{Q}iAv1f-L~4<^ ziBq|KWPMM*69PGEpH?~^Aw%S?L!>Q85s8hr&aZLO2y0us+xZ(HVkNqC>~?G-dSYj1 zC!-<*002msMH{M4KcN3%$6V-nUH`=2!6Cs0_3oFE%# z@bi7~2XhR(%(npWkw9=PaB5oY!P>kr|6WJ^p7gx*?1S-b^sUy3B*^OdQ=C&=@h}P7 z)g$7Asiu2Gc!bB){j|N+iQ3n>(AXmV&(t|8IO{~y`!TDbhPp4%08#Pp z>gjWIsJ9LOsq*Hr8Ta*eq=4zpD?$RCmXfso>Li7y))v;5#5U-WOx5>*$HS#Z-`KwL z6o4nL4&=}fwo{I-q_Or@kFe6@y`Z_oa=m1QiSmjSoRxZ1hPOKhEAXF&0ccrCLBYizvXW#w6h~y4f>xZ=ilp_*Rn@}-xK^_>eJk#0VHoM=|V0= zk0F82A{Bq42OMQNs-bV*gBcNc%7~B;NsPi>t0n)Fu_&u1W77RA<3-L1`~|M=_8*+49{jyBE-+AFYrpE!bLbAmbh?uW2%tFWWTaPUDM z{IrI&`M|u{f<{33&Kx?uFZrJ`B~WkXKWPcjt4+ME^777i(v@Y}RjUXp(nf?v{M(g~-11@B%eyaNsCnB$|ewj0&XjpCiNZ-;#7MR$*gDjVcDJ zF5L{ajKhzUf*%ZF{+pLy6*vfyD6L3}lPXy&B@#)XKRA-4CYmOw+Q`;OXMWXnWZdP{ zi5x~8#wcOoalVNRq_Hth>NCtY78o#>e?z?A19zvcPJ?OND)6?b(>-StWrpg5IRQqx z#f%w$4!fm5rXDNVWc|5kdj?26XYk~k@XSyIIgI07;oye*L-qE^l!d_E4U!AjO-mjm z-#T~7eBuIGG@9!{;2DxkA-H*iZpUN=ju+rsa`1fJkRIciv-x;%?ni_%$xASdRxv@| zh^=$sJvr^w%pmmRFmfNq>u~bs5h1-t$%A!97GwScal-#WT;`Kgz&ibDeb)3BpW)?H z!%f5|a)dkmVK3x)Gx3Tw@j|$2DZr-=5m%`!o|@Iu8iUPxk$JVh?l654r&(7NJHmC; z#M(t1?AzLGv{i|$9fwO2WCF4Do`84S*EKTon@W*LQK6AjWye5EOd~w?tAUUs%cEB4 zchn0>kv%-zHxL@l#^xGhhBtss5}=cnicNL|>?1Wy{Swb2Sx^`APBn z_d7fsf+ama*`sl_ysAp#rdVI?o2Ke{Y^eBDmcRlpxK3emc=*V3aWp^ZmVO(&=T!L< zy8Sxt$4q(RAI=U+fcZCWB?(h?3rX3HZwMws=GWA3{t{S66vLu4m)!!8jp3T293j4*uIl##Z!Y5F#`aJqh;i`hi_UOuNl$ez^j1pjzJXLME7tEK z4dritan0LlzGzdY?noBiUsglRjo8`DZEj<_@mkql?A%v_`HcGuv$JrTeJBr`J>DQ? z7j)KM71?Vu7x>nSzoJ&aqgyr*hvr-8T4ggYZS8+X9xB zgu1ZVX2V4TU^V?S#CsV~N+BW18+LG%ep>4-V?mH256Sw7@W8!%`|VB|)8X7~f%S{? zQSdT@2WDGWVRVpVX>lh*S#c!$tj3-&IUuDVN%^o8Ds%|rd1+nd~&s}m(mV#P&vsQf(%`x%0av_P>;et z#_>IUp^@bm2+e$Za0cATL#!HGVUX2C`hQq|?D=rQZ$f0PHZY$uI-uPcJ^$;qQzYPJ!ZwUqt;DC*+RynSn{Ik2Zi(HwzNa>S&#iR`SyQ24A+SuH7Fl3*lZ%Kg zpIP{<;_43^)g>TDlTx$a?a$U#!g^mx(%Y*U@}@~oO}^G?*IGM?TjAL1wq*H%8^?m2 zay@>!!VlTF82H_Ed%)WOExdC_CXX4Oc+$KvweMfva_w3we+UvHu>;m#7gp>%%zACxfRcrFb9U|HI8lM7*n2p=*m|u1S~e~z=LuD zS4B_6-HPA4>vIsd-b&KmPzlReUS&=wLZ;8*>F_NC&64D((mGnf{AJscEy!vUtcPgH z>ZxX=$u9I$apW&$veW+Gxb;FmLa(twQntS~lLIg1bzPL4<drv5!ip>fA}!;XJU^uNtjG}$H(0eY5B?yB8|~J8jfyThl^;!!fi6muj=#z>j}?o`oFb$bd`d1H-| zz^GC!~KxdRTBxZ(#1Vrpp|}aU+m1yh(j%nd zp(-iHTU$HoYNi-SdCy?nQuge#~3H zsOO1WY_!IDd+`9ATFUz7`E)4z_}V@UB3bv`cYB)iji{s4Q3w-s6!9(yxjF>pe*JbB zWUDX^ycI{##5*}t1)X~P28r(5R#Qs!a7foG#r}tXZkd9*sG-rNu;$C3Njwjf~OHNKi z(otM4ZPbLsaSBoyKg>J74eG)`JwTS1nrv}4EccQY(Rt25^{qI7Fyv71Fxh>J>fSpG z@86v>4mkn2gvW>3vZ`9D2J(fK* z990s!m%0>Cj-O35&?AmrP2R#+9@9K;1#SQ0sPHioMXG5JzivMQGYa z2FIL+?DV{*2_jLy-B4G!I>}xuy~xWGcf9KWZs)xx#*Z5lEMBE_i(I7N;l~{RB+X9$ zJeR(kxCC1bE9Z{dwb$*|T95%f>z(9C4)thA4aBVqcMtz^>GGtZzD zSGb||X}Gv&JZRX;OA>aNz9gex7vbD-I(K8ukO%|^H(VggdddKU{(nGl)N?Mk#-t90jIhqqv*w&|5H}KeAi&i%STQ43|n_W?q ziB1CXyVrxS1cpL^Q$W8VfWvCk;QiIQ)yS0l6HH)hXPECM^!?2@#Q?AmiMdQ$V6pUN zhNMw8jqp%MhRxar01Kl>S5x)O;lWVb%)Pi$wYV7fNLoQy@l_HVEqiEI(-Uwlhn=>J zdir%MlUp3F2*%U%bi+$S>EmXpf^+yIPed2NyTmh5sOXJ&@MbGpsZa zkeiLPb^e1f1|G9@h{{!_uuMhql~v4Q%|YC%Gb@Z?D;ntZ>khG&hHLpTU8rM z_m2qflC^H>L$CF>!=@Tl?mhk@@umpr0_%$_;WdcxNrlvdB|&CF5BK}^{=22W1BSAJ zbW`kK>ys?`))wWY{4E`RR-X0rd{wSiR;g4=(l_0X{Avc;oWtzc9QYeE>#NP1oWdlLsa)96Gc0`k z%=9Desmv!`J5KZe!vun(ukytN9XG z*2&|#S&fMq#v`GDux*tzrFVTvfQOBfg8{91bBQT!##)|x>@rwl?L@lHW#Z}DclX$B z>F`LLJi1mZ_K z+a?Ro7=?;~8VED<7jsIc890w|8Rx$Y->P%G{i=0|K888cwF}WCD)g zk4L=(^KGkhc~S&jMJzUUmU|(4&#k}6ps#RQQG$9Z@6Tq}^@Q49+Ta4(5qiAh!s22M z?&*HgQYi=SppDT=&3M7;2P8hTI)+C-m$!E{%K$}tE7jI2AL2W__+8+YSnDZ7|K%mW zE(>=G;W3U5&tl>!A=Fe;JY_vQX?cDfBT;erAL5I?LEt&85ckkM+hxIoQdzt1-IL1b zlYRNf%Rj4P($&%`Aw!o{;^w!w`3u~>bHPvQLUSavqkz3BUAS+ zT719xVev-Fi6i}#2jNJkg841FYPbBgm-U@Fs^405q|W=goxAK}ByXLYUaZsPMIgvC z%075tjb4YDC|xAIOC0Fn?gxtqM^L)Xa+b)*IG66CAgHI)H*T?K;xWQsQAgtxKqM{b zR-)@J;4JtXPh~n*PHd}gxwtdy_>rqgqY&%qse77z-yfAreWd5kD$CCgrV_UL8%-utO%wJ7810>iA$ilz z#A$m0LI^~Izy#2|eCHB%eVhZ=`BffcHPSWG3dH$KqW zOI}dC+OAJ847H09&pq{>pkm$$ILjI70|~*xJjRk#!zHgoz4CB>dwD%vPza#X0>=;g z{;9}@$eV$C;Do!v)yy;{fPoiChfQBA$H`T~vDK0l)95mBsTy}|s;y8r~IybK4WNgm^foT@T)lNP}7y4R`o94re zeg6`krEw)e-nP|=qRYdru7*MQ3Ot%UQ@^abW8)a5N_{S$Wmf|c%6`^8A!*^LA4T0Hll51Bx9j&?`18E zB`S8*<^0y3jirfk{PkUa60Y+sYpFVI-g_E9t`>Jc$&s*QYE4H|XzWh0u z-_;C!$NH%vx1-%Q!th%Hu!qb#YNu?X)H2O50Vzd?-X9%yVG(y=f=eGELdvDx<3}^L zfEK><245j3-vSenTv1x7m%b~kt)S?_1TvN7gSty zqKR^XEKR>YYWF#6&p+7EG?h#2FVLbUOf8S|yqcsWXnaWLhv0EDCxJy*6F8l!&7%-eTm^`#6$OLv~sZ_c< zc3V#{Ing3LsNha#TmYqhqDf?o-XCZpKk_HHp@~C4*epv>uw4~`5gLW4Q?%{xS`UD| zI@&6=GuuzHEPl7#*9z%DGBr9}&vWHBV(_$dqH!+F7Z7>`r>Lc}T+ zX;mr^#A}qPy|6km9+(?s%>nX@`6#e2`EvMuIz;oNC>h%33suM&%2C?z%oU>c;&M18 zqLDGy$}mSj72mtYUqQ3r>7G3^OpCbhyTC3ij65O-(sYpe$xjc31n;~Vu{GpT`qTiz zc}_Im0JHC1Xu+jk@`kiFz*iGT&EfpzBvkSzUD@*&P(GpcLG`l1f`gl#5 z6X+0Vko}d({D{~{Llq+?z zxgwNblHlv-=UuY4s!}T^)GFjDC-CH4dHg&w$(HpOV35G*GD=_UN1ztU3VU|ESivte zj3g(=09qs|G+5eaWmqf|$d>65_a-rn@6{yLLIk#EuKISJ5aW?zG;sDFX&O_g z5=Ji`C%gi3^H6p-<@Kpb(de8zH-FXS^=x8a-}RE}(8}K5Jbk}Lkjlf{y2T|2nN>5GEQprt)~4V zP_-Y9&^VjV(d8Td$X<_i&t2qEA`+%lh4f=7N=ATz)~Y?Y|3KgrG2mUKKK9g_=qc%F9Bd->QLdO&NumMBV`*&F)cfh zk%?Vh<7ZZCs`vov|M*>nz&>9L7jS#0@`Y9ZH9}EjC^ALBlKhcMMHcSY_$=_IDBwiq zyC3}rT_+(ap|6s3_ zD4qF`6uyD;=;Vc_h5h9H%)dC>fOJ?Ym<^{%HPJCk0v& ztljUGeNZc*$fSWNP;=F2tD46h36n{jZhd2b#RE>r68so^>M$V}hmNy!&8YfpAkKmU zoAoSqQ%eLjEB8#`X0?iyjistN_^@4+t&^E*9jMCiA*}TncU6Z(p2#e2?*d^-vjKq( z7aV(%L8|i#g=O`zTwLm93OIQTU7CwsuQcPyL}=LE-CYua4PrC}`&i^$IT}tgJTeS& zy-*%di}gV8PpLKuly%@XK{7!sYwBz3DlW|NMEH=&6=f1yF)+|lSDYF^-e1Iuce!BEmaLNI+mgNnKI%FDs>Rw0O`U(SfsC8U{vk zED~oq49^dDC#Ijm+(FuMnRsN1q-F+>PQcR&Bb?2XZ6uuzvJoWe!WlAVwwxvFfn4X! zv*u(cpCZfiPl?LO1MI4-o3WIyq1sWhvMF=<1NnJWz_yJP9DBBsHM4-ORnFgUh(F9W zO>}J;k~r12m}-~OqqRvmeHs>_XeNt?m(rDNXDV_tk$_$CegG9*9Q`bi)s31Hdm&6h zy-FoyB~-|tJ12TpCHag!T=b3g)g4(h+lvP!Vx_>R>+pN5%CKi7isuTBla7Uf`xCTX zebHs_MpA1R0jsluf=lXvK@8eKSx6YEhLq~Ds7srdyQih6k%K6|2z;M%&}=w03>}D) zr7RV6-Nc?6SI9+?$RxxMC8m-=GO32|iEuiydpH;|4{2XecqI=W2;*IMWz2V7b#=Ze~IZbQGh|>f+0bCGwBINtQN@y-v_T0>OYSR z#;Ni{F6mgs)|V^>GyzD2t}vxe5fuKhi-}DfG-WY&n!)+b8$gvnlM)W;$++NE_B88{ zpo<|==($1z?ZM%`|z;kpZj4DMfgG|nThGtMo0R8WPPySUlJ!rQdC!Z-J$L@f>I2o$GU2e1 zlJuu2H1LG7c<_Cm!Q47&KLc!erK=PiSsJ>zn1BsxSbe+$*7UD?xQ>OI(yT>&)3l3l zYGkkPVrAj4UF7Yx@M_?yj#E%V-|am@$bvoFLZ+Davu`RD>+<)vXLx$0SZwGj-yEh? z^L@!Z&mgPopt~ICigm3g(=#@f>$a@ZF@VCM0*gBO9D@@wI54sgxJTxZH6Z_P$_}3t z3jt%nU!F~D8D3rke51p0n2fnOxJ>XMx;-1Jwl|`kHpBBbhxu?UNro-yOtO3d#M_jn zl!MT4lZ7E~f0;6fd?y-C5{TZpJmp1JmbHAuMD1BE1GF5inUd6M!X|-X2;P7&Hnntl z=KiE>N$K*$_ocLyB}>|JeTXitW!=1#<+vPJ+NLFwfu?U@`7Wh;zg;&bc?z?7ikugQ z-^}ivIZ7l-73k)yih{=fc2p_%-~D~FB2mubJ}F8dI)Zyy@&p-Pn^BVn5HDB<0;zf`Uq5kAQAB zZ6FukC__51nn=-bl+v}k3q(h?;mNh;ud{b_%!bB%7QyvFW(}9fwuWi06&2j~i1OpX zAg4o72|X8Ed1)K9E8b@*#HPhvs%YJ~BHYJ3YrL|2NK2q>PgC|U7XCZ?gNSX22N#6x z$3WVR-$<6xDzrOJBVSas5*7weL;Xr-h8Tnn3@1R@n9+b_s`+q8d@(L|SpsvxWH8iq z8(h<;3goC&;pBP$zK7_XGpfKg9Pu)DZwJTt$^(MTEM?L$nLJ1ShY(VPa21pFO7MF4 z%=!C32iHK`3ISSH^ab)at}0Hl@;uPkqtur}D}$aE=r)@kUr-4v`lt4Ng1kf?akMP9 zzCM31--6k}#T*>89O}qX%CiQwq#bTl5*4n><#2zp8q3i}&>$mUB6?2Z2F|$f;WAV5 z3B$6?(8@@_(CgvuJ0*8uCQG4 zpA(_QZAlRM+|w+l_rxeFr}|G#r4vh_nQ>DBD3uDAB*&1ZqP^K=1`QH~_#gD#rvGGO zFr$KoeOhs(V`D%H4!+ayi|b^QK>^8Gt;sqIGW3JXoS6nwLlCFDG0HgEQ~ocTrk5gl8cOSq~3e zc@s^kjV2*7T4)C;AmWYMzD(uVc+zx`>;U3Ms=a-K4~#5Aj~2h=$=6?DjT4uZGy5t_ zUm!4(PDQTbiI0RvX50ytaDak?YGJ4$v=|a^Ny?@{pK#FbLg}oD8jNu$vZ-?m9|5Vn z2fpHz*~kZUZ)|*Qem78sx}!GkwGk{`s#`zV+>s= z@*-^cVuU5_*=T^0^(>585@V1P^)Jw#mH;f@9t(|N*ei2BgAO-dN zpSPW{F3IJec<5+}`ugdqO4?#%^2Nhj6f#P^x(areL{R^ytapsAELzrv<8<7yZQJVD zNyoOGj*X5x=-6gQJ9fu5cWm3{yZhdA?)b*|eytyCuDNEdntNB(e5#(>%*097Se;+t z76bl?Asz=R*ka$gdg%}~U4zm2yGT0g_$$~xvMA9oP9aU4?Skm9@}(}wf|EYGnQ5C# zD0&}d#euy>tx6*J9tHf92nbQwnFaJO?W=X@y@j{}HdLgMX_4dRh zTkNZ;A<=M9kw(ep$&FJbak2~WD1z_857(RV8J4pCEV<5Rgx2O&j}cU1w3$7DYVhL2 z_IeooBVvg$zWXAH)qoeQi1b&DcUdPnHF}5lVV^S#~$HkP6^HH zMMz#R!1r5b=lB~WT{e~o4paiv%yCtdB}X0|axrOFO;Hg8zt9>x$qyT46DWkoyCTgb z#ZtA}FSnwRqj{_+s6A?*ppK^ncxE+Cb$Ne&QL$y9lEVE?90diXsq#CS(J;NzQi>Le z>WdAc)-@9&uq009MJW+hP;3xb@K3daMVKnKvhXfZwpSdinQUFd8aN#ACs5k?T(s%^ zHJp6x^%;1^1LL@VaAe}_U0&;%UJ!RQJOc~AifA@$Mdnai4 z2~KV)hl8${t>aiiJ3&?@VcI~#SFhu!jLRUOU7TCRZ`jK+60p{uH&Fn4(QFHskWa9A z?lbxOI&L=3HneX%zToR(4PClgn)ha7UanBmDSFm=a6!SURCOxK*4%}meL))b33)XP zW~OTbPIJYvAP27P(kIdM!TXr2eL^xElLo!lKtr1 z+K44Ad~}>#GG9j!6BB)D$@WI7}6)Pu2+6C*4_3+E7k-j7g?Inle)6V2Ug-O=&f( zv(if>Rp+A$u6)x_V=cqd zuLn2Vg_9T~{$PmENi!(SZkuKY5*9t%Zld`G+@9sM0joL({u+zBmWP9athc1$yth$h zMlE|KMQBh(%XA%#-M6??OnEMoGmb)TnJ@+3EG8-}3$|#iSlP|K_+9goOiX$58*(HZ zTItARlL8%IKWRI-rz+0F5a5*TIG(YxT|{P-kBK(+)A7VS#UZC+Ar0Ck_By{*_1G^0 zvy8i+k*~3fqc4ZW4P`a2Ob$Xp_of6G$=KB4_e|wy=VJbJIh=Be-&%t_;Ii)b%pH~he}fIr}38|42DWi{BgY%%3? z)_80r-;<9Za|{YNqnRQS_^^8Mz9gH<7f3(;jtwNeM71c?u3o_BfB}_@(ELfA0e$2I z@-?9xfn#LAm3R{lU60a~0y+3_v{;1o)WcOIq{i_nmGmr!w z%n*qrc(-cO^8%3crX)A2WDj2cjKs_&HkYRnDfl+SY~0H#9)M{w2g4xtu;3s@5X95( z{eR93Xyau=+hgGoSaJE~%VCPO26Z$o|W;C7}mpQj;&O z(x4_|q?6X7NVxho(C-$mr%M&^iC|&;6qyP@!iob1o~vr1#%PdZMNz82&GXX*s+lwi zhl6;FN#eK%WnmDZeASpzQtl?#M~JSNh`=EtXAJ~spgb|HJAw07@+nDiTfCBbyt;^bS>bh93UeO9{+LR*P^` zt!5Ap8K!jphiH+B{9Cj(8>O? zS%t+|(AXm|@pIF*mO)pzdaBpNBQ31@TL8$fZK^8(LBs|16>WI71%Sp(a#ZG( zDc4zP7k~R^uuMF(?{=5;|l+WkV&(kcjfRnU9N?wT#A!(e8Mvng(}6)9U>%I$t-^Dk((*v~baK~}7y@Q&?7LL7)|cTrvDoTTMj6$w*iYKMXGDj15cbUmLAs zqcfRx#wsW0-_Xk~H7@#FLqShp4F{_s;iA8t1+lL0m)EZpGWW@DNEGhiFsIRK)H!VrCN>wc` zR2Qc&dxE?6cq|cqL18a1O4J&kd~L7Xtb(6JF~=UY9bK^});Yzv@ugi4%t>S_$s)FF zHZd?UB8)!XN9dwOvXi}MOQ5PgX5B-Xpzperi&kHs6FofSBqAgM%8>K{k-D7$2Ra*p z^xmbkO&t0BwZ>r^U)`r>mO1I#;h!oczcEK&`N!$?r`TGf5Ab_rkDr<@(?L3M&R~i` zafa)Coxb~1oxqu3z$rrgxF@;a?8<>9VLp%GHU5`JI5&-rh|AASS=oIeX-OlUSD#po z=L?#wg`rd9L?EUcYAXfp7v4sspaJm|l}TNKBYUOj7~-4~OiEZuOb*rUNn^yvE1FNABWcU6y|RUHJ0x>AM9C$*Aw=XL`?DJWNImdmrj` zNi7t98!@RTQhiBOXGI2Ww@-gIj1w2KIy!Ap90K?Hy&_$9;Mvg7@2YcO3ytf5cKtX;C`_5(Ezae7&t~cx)e=`5s&(3 zW!v5wiOxQO6I1tXJLeen9y<8 zxuKnyG#etz&`sxjU`{`-5E#V304PpW$v<_AcSUUvxC%-WpmDS^feOKkC`o; zsh(ff$dv7oQxk&}ZXkllWBPBk_YA*5@WT<>t7t@=p(i#y4g`Gk4A5#){GiyXV%Xtm z(%NW!>^I%?b5A>RT4Ho}#QI5K5jB@R8g|Ce3;#omFv>EHAz+u?cWR;RH4qm8vTv6H z4U(I65-mM*0YW~1C<&J-Pl0BMP21qt7|Y#^pbpXA;n%SW!vS;OAoN#j z(T+>rWDO{nhyei}j+-$g`wIwaNkHei?p$gJ6O~;^=*ng5(=aYq;k+k0!|Zi7%91X= zGuGhE8Q|ocQo|>*wlTJ-(!fauu5?D6I}3FaB(@>FiQ#W-?XEy@w|vy`=F<$@#9*Ms zF*yCV@d~!{`J7sRAR~i)j=Mpcw0g_yXW(W7+u~srhjBBW5^pp=%0a0H@2PJndx#m1ejIUh(}3O%b9(2qSfR$;VM~?)FJf z7MKvRZ;uNk6x(@Nn7+!KTdYspDrH?7xVPU4P^JDFxI@{>qK2&&cwMSsCs;@J59?5+ z?`426U;wgeSPmV+i58P$L4vQ9%|Y;B*E(L~sL@H8ihIVpPD{b?&1AYLlTM+PNBuV zQD`QRGGplSy$%J80G9#SfM|dfB|qZIU{0E3>X8D(I6-(1p<#TZ#(QW)>tX)w;(_$7 zppr1FWJIZ~7tbZTv^R{Dm2Q|tYm11X&YCNS?XnoHrLpf35F6H)MSOs{&do_wE^~Lp zW&p7cep8w7l6AowP(`3k-par;T%lSD%>wpzx3sq!k_>E(1TXJi;&ny=^Unu~Ru4ym z7y2QR`ZhIsM2!)zG~Cxkj`ZFqLP4OAulr+@?R_09E6|L8hj@Zbh@JfNE$ieKhf>F- z6y|D#E2?)*oDVU%$gR^>tFiQ~W1&MD)mE*2FwscJEQ^qsFfB(Iao+9?6){|g!v4(JK(gOa_^fovr#L3>A@wROw3#d7~fnw6P&G0h4 zwX4-^c01oeXEq=@7@Js`NCs5s7mD4|1v6(#dRKepDhjYJZTgw}&TX;Fj4&G>W7VW} zRJ)->|Gs~aZ{Pm=ll9$s@lQ`VaqEl8X5&Xx>MP|d*FH>bbA^v@5*~7Idh@4PnTL81 z7z`L#i*EBKte#SjROfIi6m^#*%iGDyOsc0wHnoo2dT_m21D8l&JNy8O#c~%nlb@5$ z^%jOsZkCF#oje`K#v40@nKuny?XjE9erM0t#G#Iqkl6IdHi+dkzmHI+lr1uD>M+VY z;aD6LPmABCn>_W`G<)p96-RwP+528!%IE4;=){IZJ^Lf~)JW5w!_y_*mkO)#_`XNF z*P83hR$j=ECVjk!Tm-?{l!LG~vk^~~BrSyON9sUJ#k6-Ae~3DsU~)2 zK64-IVUA~xHX527(aX@=V>3Pk^0~vhGDHF??4KKH->?&;9K}uWCyShiMY{(Nxv|i? zL)T6%L!rRHz#L91!6vCmlrTPg*xz(tTbc0@232nVEWK3^_Bz@+3)gkm;`mnkqwD>g zZFDVx?=l!x=lH(K27(!;e(pMvrF;qRLj_H(c{aXX^r>YZQOhYE<$v}Q*8!$`s?-cOw$^Eb3fZM`T z0Lpb%0O|c_`uuObZ-5W#*xSqf4RHcd?(oai2>@B+|iMu2!br6X*nb&||wY zxMqtdDZ1EXMpum^L!OlOHAR~b2){K+4!R8nc7L5~VcEa!zPQKP~^<;yOvNa%T3HPMO-q}QWM{$Bpsv~UbX zH-^h>v0YQhsgwIE?cwBFxn`n@YeyB+yD>vfTv($lIk<}hfx8AzvE*nn7hilsP^J9j zc!fWY2thQpRVa30DJH;Rdr_yQ4>9CLVOC|Yd#3y$^tJB5Q;iRA2 zHG#$Bw(PmWSmohQQTQJ*_2>4W;zI&Ei->+upmV*nBF&GL0pVIwkb~Ch|{% zR4+TjPl!ijkqtWP0{f6ntrnnW=dXmG*B-;1Rvw~%kneu_ zJ^zI(KRn|j4QKT)j`|zQq2~+_FV(%CM0^B4QI{5$nPV9>;3LA5`-=pLpolZ>cc>~d zT&`51@rzGOyT_f5_U^V+8#FL&A7q{m2CZ#`o3r9^Vyc)B@Vwp8)0 z0zivblLjje)2uKpSf`?=ZPS4x>uDNjC1}e^wETATy}P*OcGzm9K?gk9wb#=~I?sg^ zo~v-iJ`RmL1g;24OaACS>|5J?8yEaAf^97>j^NuuUUIkJ!MgU_LGxthN;t}X$5;i! z03c^-FW!Q>#OX$-zGR<0*LSBC&N`1%qCTEOq1x^h@x>lF`>%jdWA_Aih6e8Y4f#~% z*ZXtp6}-lAsvj0Ga#~rqdjwu|UOc*$MSg>B$Ueq-xx?I=b;fY1GNk}yL;QNtYHH2z z&7bogLcF89>Jq9C6@nC#TCS82Dsu9mH!)H;d=1Vi6v- z5$>ZY+{XT$@HVk`>i6y-Z{rngC`QRTo58FqzG+*OcWBY0!}zriDnP(9-7IVq7BPEeQ7^Zv}GUp zsO|h*(!qJnui>h6&qzeg-_fsAWwX(LZ$Qw(s&L!nbRsDnT&X;1IB{@&r|SC4QZ&v?mQeTVq) z=ni)mema*0dB1&QC#8xFGOz%&DZ`#sK0Ffv{ZXx zd9~pLc;7jqSQW4?+EE5DO-ydfsQ7)6k%0g4)_Q?^O`1?gd3_>qI$dq9Pz_&s?${b7 zmRI9`xrfl@ef6}-klRiH>a(aX#NGVZLSFU(`&Rw8;W~YCJwn#b*i-h{y7~YwoFd3> zHAVm&w{SCombe0E5$5HUnkGI?bKKzM1V3%yvWVOr!rj@zCW}dBFtOJDZG8Ry%(h|#vXqqhcQR#DR_bp5nA0DeMAv&q^@#p33G6U5L z&b^Jzg9v1~^JH+>CH`Kq&ZS~s|L`sj`uk>wDtxY1vc^JXdxa#oDuX`piV0`Z(h?S{ zy}|_!!u_-;KBaH%3)<@#`W1%6RP>5?NUoBfL9!Hl<-k?p9V;hGZxoZofaw_;xo7&8 z`xx`TP}W!b*#$H4Kj8I)ePdh{@AV!BWZsM|?LiRmCm0t2pkH%p7XM&JARn1<{Ju5&3d2B0!bMR`}=+~R1Nj|uk|O(?cSMn zP@SCz91Kml|7Mn@%o4gFW%FC^tnE!qs{0rTk}IrNJ@`id_m>Q7wm9ZVMa zalxeC{corE&OW-v0-)AF1`S}Oq{n4PjBD>NmI54WuwwHR4761NcQA~DUt2E759-L7kt>t6RcP%(yI zD+>I!66Zj+e*Nnwuq$9^-{i~rgOr()JjE|vZ2ZyZYkG2yb3k6e5nil_e{q0h6;Qro zo)W{Qv!kRJFMQ|5Q@lZ$ zeg$vTzIyUVS0qiY#VX2{%&&#hShca1gIr`0Ek@qS&wL|UMEGa1nI~j(P1#igmGucO zBD~CE=h^~|IIYWKiZ%qC%gG7_b7pMcvkE&gRkXoz1__>$4np-en};2`fJg5)t})bI z_^?&0l+cP>YNvW5bXH8~g|j-O(aaY46zS2tG6%b9f1is0u<+m>YU!J)ahgsEZozRO z$rHz`a1_N+kN4&$Qq{Aimg}PDB!2=lq&5A>n>O~tjGi!-$lJ_M@;OTv|lsj~L%o^ru9}^4L%I2RXQV%<= z@6~-$vib9~{_SII1U-@YNP!eFE;*Q=h|+5*O(qPW*T2E#Bycn{h{C`=+5hSlNl*~vu>zk=Eo zcsW2?FRRs7>$gNmW%7`w%JeTg=7to5+~>IF0*xw?OW2#{bxtq#R{TdzghQf&zf)f~ zGE{`_ux}4Pd_UGkd!9l6wBDB4C8kW@DPg6?6_N?Gg%`MJ7tO*gOt4$uFIN{^LnPEs zO;p*qX8g=ECQNFIR~W$`t{16r8L*US>TI~fMvjK^aFtD#{}$SRG}42(H==q{kLOPs z4ftMqEePnV<3+$W4SNJv9s}OShmEHCHa|ASM16RTv-A^4klJK>8!0!M`VAddX`iye zVzta}J&|rAtIT@&^&0uFl9LxIy&r|sI|uYMDlEH6#x~c=AyCw@<f@c%)a1ywE6uHU#d&*5Q`>Ks0L#5flT+2Ls&>l=GCk2R_Ffq% zK!eiZP(^{7q9Ib!B_y_VBqSFR zKW*m;rB)s;FygUUGDcloxMD|8Ym=Mn&lA>ger^ zR)UjX9wWTVV?|BwKsyhdm*rfW3xM<2x8y4h#psW(Kh%BY6R7)!Ov3K2s_Zg`B$wk+hF*Q(B0&-Z+XN)LazqET;o1=-&9}q2a zhL)$(gK;-!ZjLyD`;x8nCv1|~Sh;E?i^uN_a!N`I9NuO*fNtYOmRx(08Dp*MyB=SKWQ_bBDQp znh)CHG8%RWHH!SOyCY^d@(iE9@(TPG;%_=<9=)P{2?5~vDuup>G`sX1+Ic2RqMR3irqgLmCeC4&=0o;#teKNk-% zzIzh_EtZ?-27u|IF47#sNiS!*n)lt=BT|GWLYX~V))VJ~J#N(^Bj)VOb}~G=p#mvx zcnURDQU+TD1osp(Q+}iNLUo~W2+I-tNoSQfez0^{F->IxRsn15k>BpHq|g?30ZxD= zYo=sXA)(|dLCMz$xJ>J8SRc#m;P;Vwhrpw*l$kyAiw`R(y}hmd$ohn zuiM-ho|pGQUSeosjP0C{?Nh)@F7zP%t40As+3`!dhqh~5!z~9qEIg@HIRea# z*kYVeyvjFY`sm?A0A-~wmx76?Fr$A*w1_Dk%1rP^qM{(|vmWil@GZcyg8*5nxIT>Z zZaSk?oC^nl1` zT1zHeQS>`0ev@)VY=a?u3oJcPnM_l?>&vGm>4d{EBqR0K+ksS8?SXQ735_Y4hNV%JIcXUp1ewO+w+i?Hd#zFW z6mK`rny=jZbfYIc-s0ABv-cF{VDC=r*%O^lV@wsnw=AoRR;ientC4?4f4S#|1!mKmZ&ScCZQ9gd z`KdT^bPrN)S+oW&R$dVBIA^o~E!Z~z+F2+k>+!1o@9(!em0*%>UBys$ko0#VjBl^7 zSFpgVPu8CK;Hy+>!c9FlT>&_XFvpByRS)#;aJ-3U=t*LQ5h3By7Xiu0g{+eXFva7= zp+jja{LX{yjG^=yViL7;ypQ3(MyVZKd{S%~@)}Ysm+OYwc-EY0)%4wU>WFUorka)U z+{qI*3G*?6Y)2Y^Xat~glv7rtqm<4(M{flFG3)6va}`~D`c^lq|4H2%QfxfbMXJqo zi8>vIj?W*iZm+(-`-O52F}^pwHV@R4#DpDb zaCsM9{3Dd5UTtdF!V-N*3l`erh*O52Xzn>Vt>~ zms@OZgr;t?eP-|ErZRcL<0T)6plXyIpSIs#h9upEcqs#%(5jRaM}_&wlye@~i);pW zd49a~R#n|LYAyMg++yjXsE)b78MY<9ln_=hu>2pV$3|tojt+2bpLjw#OZCVD=e>~l9 zKEc9s8=+~uu<2~^s*`#tzIyjB^N)^!d0Hvcbp6QIEF5n zI^RI=w^Q-E-T)H9fOKQxb@*rpnC9qf(USw*83=I1f2+6T;|!$#?ya-?L8tqPl!IFK zIUw;#cAv`dJ|9${uEc$t&W2cO!aWs%^$#ck1LK*~hBY?dDf8qYiWxL@q}j8f%V`U@ z?ER~_ZIrVP5=J^jlcrg|8so>gJStNH-NVy_GF zlH@*Kc_cin|JNLhY0F}QNUES~MSSYN;ajB#AFxh5Up;?PypBijkd{1$6O0w=jV;2p z!BX$HH{-?DU^JRYwE^4>`)Yu|X8!rQ-ETORT$x^vAMs5ac7p;M_1wVL%Sknpp>Rnt zQ1HiFE$Qgt0r)q0clrfQpz&Q1K~)#rAH=?8v%^7d#oLm$Ot1xFq7SFoSD?BAkFND* zo$voS=0hC(wo#s?a}wHwrkS&iAu)9gREyA=6Xg@uNtIFKfW<-%?8dp2#iCcDJ?G&+ z-AvO2*CtG6{^$AChLqCkMYfwhPvHfAN_2!sV$Yua0j?zGXx0xjd@qii$L7^>6wXz& z3F6`Ob~0^9{StKxdnwEY9~*_j@vG?Rc|={m(CM>>3u^&F5ATNnqLpA{+b<)Jva{z= z;&H99Py}QW7$fA`DE~wwY)0AA6G)B{yXMi85$Q2A4!tZMccrM?Wv~-f% zD3+p>Vi@2?(g3tfv(sOVhQ5p=5m{W#h-lPeW)Gx6F7l7Bs4eS@AXz^hV>1(a8ZQE5 zn-~d*iISe`=*H=%?&a|anO-n0Kq(ZDwTP|rfC8l{ll_}MGoN9TfAU(jDu7w;mL>8C zV9|FGRBR{gA3g`UDB*mj@8F`t{wV*>1lM=zDPWY^_krPmIHw9aGoTaZ4_-KAk=;Al zsNxb4qgw8k!7Od&RQ;=7-vd& zFD~)-JBv@1yt0+U?p(BwJ@6=l)S)0Hhi6ER5Eu~bfmb|OGM+-cFScNpJ26R%$<(KS ze(~fL<2I*W#Y=0+iTRQ$i4|F?Rj9*BWZA3hF~#bU z_L=R{eB&IMxEq`wBeg|72^wNQ7wUc(C+N4-Ubh(VnN=GvatVeZ2?Xm-w85l~z!duX zmj5=cF2;xw&o5XWR`FScpD1zkf#^deWydrnqB=k`ytHM8{3qkrW`r%MJ96EZsIaqK zeD(m(H2+>iP8Aki{Ey~p0%1kB@V+v6+kmSH&~7G(3dt=fC(26l1BctvAO(LbQ-$CG ztgbHeS{VYc6Ga(HDgun6Thb$5u_MLFXLLmxjSGC1Aj!o^G5O zDNR8Qetp9woJRtQ`X<^kL3JdH)>e)ZAbRvtH2nPfh91p3KVFpCdZ&4ycj#~C8FJ=# z2zirv7bb=M)WzL)yOjhnqF+Rml@Q>nR&cjYRtswWQoP2ifuKI+m4&QHq5)Wt+gG_) z7~%z@f#=TcI$ruP9-twI_hE<5*xsv<;7FvXgs9ePm8j6CRy4}Cs!9F^wQok)UmyVH zjaBTTrgC$fpH6u5p18HY#V^1dQ)T@cVo#P7I{v|no~{CY%uG&rr^S(6!C?#Cyb5a` zbtJ&MblL!$=WI*$PkTo^^nvxmn-l`r` zE{`VP{B_I!+!Q}RIX9n5N9Xogd>6lGrGEAZ7C@Biv*u*p7jSyPtm1*&EgXP1U~VwRJrn+ajcV5MJecA@z8wTp>8xXwJVeK1$?>Mze+;cWC{c!=?rZnI37x3^b0rS^ zm(u|j`2RP{VE?2#ZmKuGatxUxJl<$nz+EuAs zq#9#3a0$||J3wg4h&u)a{%M3J8{xb$IXcqF>j`fm;_rji^UD(Jym#+HSdH!E7rfouKOP;`{WX_4> zdVcb{`UfE~MtHlzwJ(I^NhNsvf5if&4w&99`3Qu^IhYI2!n8CguJ2AP z$+{ke-)gg2T+RE_PnnT11nuENCJQ7lU67G`~I^rDLQ`N{D35lHf-v{~ahu7ywNEJnI73FmU z%#UH1KGZ5bo4AjU)2D&pz{icAR)7DqZtsDede+tL3o-Wno!4rb4P2mi>8?iNm>*JA zRN7)oDJ+0ij~;J#E_)iDSA z{cVccvM&M|6$9_(^JWA}^nZ@{!Xp0nkeo>b0PgvCa*OZM;%0~nM?a*^0nXHTTgV{~ z{I}l>xm4mqwX{H z$^>6k35xd0P>0Q0cpdx(%n;Iodwd(i6(1r43nQ%l<4VF8v_G}zx3Jqa(Tt)<_q&34 zu`q6t*DSE0kiFf}g#n5pg51tSpy%Yi%8VPh#ZF)L<^TSqTs64I3AP`jN!vpcdLA+e zZxq#vVJ6jEDwYVI&Fo3PJ>AK@^x$3J2t?>jQ+s(+XQiq=>>Pp2oI zxvtdto|sgDpB|%|U0P}_>K_22Ev{(0jShj3<%W--2R)aKhsSI(54Vjr_lXB#kO(?! zB;k6?t=oC5%SIUL;Bd2x+*mi|S(3&Pup9R9aO2Yd$6l+0H@SAx;%X{Kq)X5R!g4-W z)wvHdkT^UqKDCneyXh_ zcm3Raw72$7iv$FFw0_JB{qK~^xq|BK5i>(z_VxNMbbv4~X_Bq{`1s`P;MDEx4b9rp zqCY2p_;Xec=Cn$LL=4Z`YV%Rb2{mxd?DrE2Ml`s?Nx@kgzqD#=)xcz_)}+(v1j4Ju zV%Z^K!yDTD*y$Kz0Xo#$SZ^X|nj1Zo`&mLzdd9Wo4y}G0DTqbH(CvFNZe~GSd)jyH zubUV0oJY6;g7+`=nI4JOnl#^qxH=e6w6tOZfhnYZKGL&Vp7s7`JSM%q1KIu?fn~o6 z*{?=3On_@up8JibHDeDNRX`fC?1&R*nPW=NoW!9P=_}^DC#M~mjz<=# zjUTqEhjAwdOKY3RATkE3THtflI?=c#pXqrJw6efYyq{%4@Av1^^V=+Z)R* z6>rQ?86AUAC*O}-H#!zICKoK1A1&*vz#CX=y@9lb3#+Z*i1B2J&^yK>TPJ|scKuz|GIjT@9TW!nw;9I-+*F~w_^fe~k z#33*@kKPt00U%ZnAc~^Fe;(2bzwHN#GBX@~*noSERHk`E&cCpQ0jp7t>H<$d{YsI% zomQ}0{3_8Jqh^FD0{5rXaw2upqpcXMMASeJoxG{qFo)jtHVY~aw~T9<2L~>$pJBD2{s;(OA8*|N-xz7QI1HyH0c%5W7YIWb z4d1-KGU$-+gBL)wfi`CG3 z!1x)6OfB2if(URC7u#`i)c4 zYFQUrf69&A)kMg5G*v=7Ip;?4jrN%c%n}|h2b=xbtJi!>Acee|!x-mP6Q-cE&Vwit6hSSr(?JMy3qw zn301N5+7?5I1r?NBI8+4tHr2O9x9IAxnW434<60^HAmTWx$IqFp}xfq&@4tVF#G0k z9i4K`$w!4bI#9d~&uC0t1*p7YBPH3z0eUG}UEV9Zslom>RQ7 zSy`1;JiQvRZ(tS4$x=_7a`frrKj)89rrknefT;cLuiHKnp+7$Jz#w_P!GwypKDu<^ z2e*$(vfq{^-{ia;(WMc;Hk*o|3293G)*Ik+*RfdD3b=pl+%lpm2JJ5tHOzF~jQsyj=<;IjJx#2Dz?(ykgtd#U>4T-nx5PEA71vLaCWw%a`T%qy zJFyv1gdBKk4~iab1RZs%9opbYxcw@qT2$XH&4Y6_6$mZQYuP6x>DunJ_z}#rI(_** zvax<4ucYD+$@14yDIxg#RgsI0o;yyg!7-)TAT&gLL~em*oE`gcI?r%@tD7y{@0d>+k%VS#&CkbEci`vE z)00^(4oj~12`B2s@j!k|*`C}rF>ca&dtKTu6fz)#v-*i%37@7Q)ynPUd6FMR9yFbl zu{Y2);S9o4_%WWs+2+rQ?G!IGeV6dzlQpWE8C9*g4l?hp$)RMg6a|oBa@gg?rmFMeGtvpKdm9leu{<#%KfcH|H4gY_+QN!mDV&-C~~)kkUf)^1)=cW@0L2Ux3sMx#BNAz1E8>`@+g z_IM_&#ikUcK((TNFG;Ow-kBf5*;SdiHLpPf^2!(TcF^XbFFpU;!aHNjvhi)yW%jX} z4A}bF0I%J5UMY5qTeo6{wIgIpokDHqgiHM$w|B7m;npi*#@0k|=zR(;Nd7EvK4_M* z`=cZa++Hl`y|vxl>GSd0uRp?Hs*=<=D6+dJa|f$b;`-WuzxNGVFxFxr@a{PeV zdonqfM9E@d@%yyyuV%rFaY4$gFr!awwB|`bFsx(I1?ZmW^3vB?k&OKSeaIyt(}V}{i2c5>bR%V5Y_MFKR7C`~DL*rR1@ZtDefc5Hev>}4e}mAv5{2xFNnsj4uc9J0*Iu>@$Q(XT zZvmS>a;U}2Ubr@M0Y6+?77uVpKJ`Puu-&r@7~_iL`p_&&q~Z|eDV}tLAjOD~dV25G z-VE5d+vc4I1bXZ9X85OH*JCk7c%YEb^tSFG4g4{ObE&7%PMUG^+PzFqVbI4%B(31l z+AWA;fX}FYyE&YY{Z!CXBBf3->Zk8rhedBQB+3aucLQr*c(Q`o0{400#~v}Y^}cJ6 zEu5b8z^il4-p56H!H%-#)Q0n_Knb#=hi_`HqubdZpW=HrBIyLIs7Yk*>t@|WUxz@}T8C@V!~Cda6)!cNnf{h|f-cXnOr zg~t6-Qxc*1F$V3dcHCrXwVKqbbY&JtywS~7_=aD%Zmk{bI!Ahzt4|1F2Z`WR76(?l z_Kd!^3t=q+S=zq$-_F(m`LB=HFcE4yrC86uzV*_Lot%yrds_7fzj8)R8(^RA2oeH2 z5}ASS@7A%|GGe>K=c^=1jPW4(RTO?vNs1%KIGm>qZ|f|op?AgFb_7gUd+=6ZPq+2Z zY3(ZM=~%~^`Q!ZA^TWO@T@6bh;BT0^8W71hdWj^k*sw<1;drIaegHjo&M0iB*ySTS z-N1dT2|P$R=#N{vZ)>Z~#e$QyfxT|WINMv99_OLB;5*WP++a9~tq1=1N>X~0yRRpb zj*ks__g}t!4DNfJiKZ8$hQoHtQw(g}S;=%4o0o(O-&Io8s+8q*P=#I^Uq^bs_&NRR z*WRa~z9szU950W;O~OJOg&aZxTa_V++jk+4&A}J;Hh(PG|u( z@32K!cS3sPr!Y|H@`Zq8=AlqRdaLv3jnZFQGQ8gHQ|KzU?zi9vYNEQ|ik%<5)X3#e zy`a%?#hL|^i)y9BZ&J|QS!*tX)CuNF3kcT3E;fohIn-@TM#}XSAZ?T{CR!aKBm^P^ zF1Fo6^nm-L_9D%gSQ4^)Ha_D=FW&HWkF!GFJ6BL}oxCkg6}UHS5r<)Oiqrg&v0?C3 zaIwr{tg=9)@q(hpo^5@#Yc>g3^Bg2+`Io!|8JXIrXx8nh=iN!O)5u-#^V0MJ0ift; zynS7_o%V(2+g7E8@PG*qt=GCM*E&`fz1@C8<7sChOMUfku@5^%Yrri|0~f?aGb~?w z&Zi74P9Gmq2z$hHYXlDkdICHizfD+o1O6U3h|Z6PlJAvhEqxyRE+wKl84I&GeTKv* zwS-cnJMvA;Yt>jZ22H0Z{$s2G`8F?VkPDKeD2Y>2P0Uvo^tFLO(mZ$ShJT>cWBUpu zHa~Ekb3iWHl0O(IFTZ0)~` z*rMiPBTb;vea{l|UG;_UNj=hL+x0l^$88ehe$A=TJx?)7^#kAfZ<_#T1-nL}B2e3d zF$4%PZaz5yZX|Mu28eCNSV(&{4()sYqIo>;8>4EK_k3L5mH+;Bs<{3$MnP6+=;Lm1 zJfo2(;O0;xMKjUI_0#^v3Ux}$NpE^t%W9iCm5J+RCW}_c-P@3fwgHxcmpPfQn$ILZ z{!+HKX`&&(3OIs@%1C{T_wbBcCP8T)VE>i7(N<=!3gLGNz^j?x&l%Ight@1x>8vmJ zoF1un&5TRk!$F+_oqz|p3x!P4VTkla=fK3H^mxBV3;b5ss~b3s4Sv4O7CsWGF%1@I z(sj9DzYp0EyZyUDz097c{X5H&57Wy=D?HoMXT_^GB>YkG6-Q_5*5C&3%rJF`%n+Ky z69`u!1Yk5uRW@_2n=2N!ojz1DBhzRlOv;BqW?{}-y|@oo1FT7=-^SRgPap%nx7SgQ zN5|X%H+D9UYWD*=byXf^X`zHYS+Cn+N~fjZY1%UcQ*F z!KL^vEZ+XSt-+~(yxM&ByTU^j)Nr-z&q^3}u{A7gk`&^734#^4uC|?SwwBeHNk0yq zx|xVngLXl zdu5;|-P0!Qn)({{`ks`cf^)IjgP_01&Za}|rcMz&6LxULnZf%d7Y3g^ z+#b0LdpLXyo-UBNT}i*8KVAvnTKJx40_^VGKk{b13%}e-Khw&6*qi4rI01!k-A59( zR@Hz32cBJ3a z9h<Om$=cFu52;+=#fOH4$+&x)Ui!wMHP`BXFJF6e>ch0Gqcu54CVpgIAi|w>jR! zm(ne_dp?3X(kx%~kGmk0oJMO}FRimufQ!5}vti^ETnV5MW_`Vy6An%_60RudI}X0# z_2`BTm)?vru_HvyPzMeDSA?)-q@|}51fF*{yxA-Dbpfw;gl$7a5jp~F+WwptM&I54 z?DOI|N^A)b5IixQ2113iOKWMU7$Ke3J& z+P)C&Th;20S3Mkk@{?v|liI%;)g)|p3I9kmqPvlfjmEY=At$*TX~}bYcr!&Ic`BYO z@MN3}BpT_=nJi?uw~Ejd0m!)EgxsG1bV;9i49|uZzkzo<3jKHMUbTCxZq#y9ts))) z2X9&aqeG;8y+NpUu-k>*^qQVdlrY6|$pNx3&8*l>*we z$BRdJ*;^^yEzGY7Nw@oXOGTwu{2Del5YxNdZ8Iz_7v?Hk;*NXB5M&Fne2|9l5t!Em0=_7D8OI_~`l8sE`U zqD!x2kPy3YcSlVH`r_hZ66Ul1qHyGovu`x(9abmR{rhtNt4`05Mq2PAPlR;@0}UQ; z>0|BgRqu!vaRXxN4Mtc5qZ3@93#Qix;JhbQg zZzTWedMYEh1tIrv;-RumnFwSX@!{#1cmHl}S8Sv6TXfy`lc=E)7tc9bCL)ZCz z2v5PHwXZ~OKQR^>iV@rUKB7^Q?b~)*_mr_6Pq9zTh<*+4e@47YW*q>-e8o*!y2q?y zP@?4+X2yS`yZ*_FuuC*9mbb|i#>RQsfcJ5o)smW&4-F+ypPbQ>!Hh0OrH`bEgPS}) zEq+&Sm~bHyC7MgtRHk;`r4>{d@rr1)sE!C3wH+e-aC_^gPGN6p`Ln)Wn^{MCmM|L8 zRB%lm8B{F-Fvf-Brzqy3H%bYZ@M1 zf~2@gGDd(9;3wjf3Jm=+OOBAv?^4!I!Mf&+`06@xBqo+93vs{)8?W2et&z0%}ae=M;yI|x@cF>7JRd5v#1 zJ;Ri%o{nbVhsBvSo3A}bgG_5w@-#H9IC;(50!|mkwnutoLuGyyxsA3ZE0Cc?K3Q^| zQ`IT5Ra5}11XpOw2?SzY1y||HuY^!|+{s$wqEKW&gVeK;`h)TGizU}pb10H*ONZ3~ z>4hP33d!P1#0og_l93A+(8-oJMI33iv#+vNCOz#PNt$Ao`ax^VH4d0T`P09H%$YES zg3K8eQvQ@t&UXTWBylqd#U^bFUaVwtbk2U_vPvLWQi&pFG=QU|v5&@na&R^-h+DKQ zNxIi7SAC80J9xSOGqMvMv!#lb4Q8+PpPJN4@Yk#^@t-%fRgF#GyIJDbt9%piRGI1@ zEQ=vGm5SM@Ztton>P z)Tx##oBO49u#qJ(j)%Ws8HV|;Q$ODx^`647<3kJ1Uww__N&rtYAF{@VY+STc5Mi{JfW~QVf zx%VYv*Kb?CLJ@Jq`|zFgv%CwDCwkvVBZt%?kxv-6hf3^Dr~Qh*@bBKei%h>6ByG4^ zaaVMuv=Mh-rSyF9UwrgW9j{JUvjh#WR)1@5X{Qcvd65??1q$gn^@?SAjeH>dZCx)X zDwK)+*X@uzLmk6p=40jc-=FEqIvaz|eB0S|bd;gSzC}hjOPwxq+0wt%4vEPwk5f`0 z)NYlK7onH~LSm&@g!<`80!WkB&=zFJGpX5=V72i0cG)sSNEp zek)dt<^JT9qs8=x<)m0!Ufosiy9<`ZNr^PuLJu|a zu_42{E#d6{qLpWzc2vOKi(B*yUFl8ok7Oeit%29Z6L%V) zuuH^?%!T$mz?lP=)h~|j+pfjvUMO1^|I|CZS!vGF_|T$$7b?L^Q`^4Iao=Jr5!|)d zYZk4lK#IehNq89%!LIP z(xw%0y`ny<`!me0CZQbhJ=1%2X#LJNGyxeo2cSe7r(JWZsC<4@;F#+DYrKgCy}USA zJ7m5}uqy2f?YK%!%9{!~|3YCZw#_nR*Ku^*fQdNZo#G5#yqxD;9X@s|qX1{eLdbXz zJ}(L~>Wsvq&I;uiTjl8fqUi4HN?H=$x5Z|~f10gQ(0y|3ZW zMS71yvB>I~(moNgp^Z58Nw%VCG{4rU&m5y%&hzLPcE{s;#|eLGK86poQY)40>ESdb z9XKm6BqRMqO-W8gV$8gQ{w3ZfP9c#Gzuv4133 z{hDi{<`#7xQv70qRJ~GswS3(AZW)t$!LL=aG7VJib6Ig2pSK$E(2w~R4FWrP$FSL@ zkFMc}Q`L5Lqv4LNmA+c-c^}f{G}Ia@QKFbXR~^vCuE$0iAZ1<^r7)`%Yta`8W{?I% zc$^wuL0UXOb*QLlDC8=cq)^_>wuBr07<1?V{gPYQ^SoA%)WZ#YvG&=@!;wX7bTR<~ zhVMU1r7rDXv27=vm|V0PScIJbrl>^=zH;N{qiwvJMLoT~i=d^lzu)(OhwYXzdF?EV zOm6lBdz`pM!T4&|-wy4;t2h78HlPt&24eCqiG42K@^dgvbZA@B41+2=ok zc;V2iI#&iu+{VM3jBtO(&KcRx&hx=ji)v}r(1i#kkJCen@aO&Y$8Wh}A46t3sawN+ ze%TF%?=F`nK)rU=!olluWKp>a6ZqiP8-s9=QgV=6Q+Dg~)Bd?J1{?i&d(R;NXb^fX zUxrj2wRu0{a%bidv{OQZg(eW6+m+i)y|lNtk8y>&8$-_L$dF6tuz9v|)GQ$#Y4OTv zil^nzi#8x|_tFqnLXa_n55EgK`POGvXkI_uuP;v8vT`zPgMqfjlcaj2xYtoT?=0|& znI?*}jv-}$gs5`;u>MhpT=0YZF1<5>?jDtyd6Geq_oO2VQxM^KCK*zwbp?UZr~B#T zBG5^*7^(%Ep|y9=CyTlLw1-|Mf$UXA}uK z32T!i2xROdH!F|uaJPU#zHPV7RX9mRiOBDB_G2fP-QMw z5@Ijwds+i|fizTM3xK0;@v?}BJA@XoBN_~U$dS#RJit$-&dT&Re>$NUlaAz)+bDQw zwRn>0h}^!y?p?oz^tkM9VkOE3vvE}2pR-EZ=nXvq#Wx0$r-PVA1K2IlYDo1hZ1?WD zM>JuCP6i4!@0xrc-~)^W>FKJUR<`#1l728(#zONVoK1|?iqo1<^%kRHcVdqni=DBS zV6()smC1kG#|f7)>C3;}DV7a)vSYrPo;p`xKC*ZM7nsik8TPeQs~H4j zzydW~5^~Cpanw{+lymU%)VTgGr;%9~f^=s*Z!ex;R)IWeo4=G19tS~z&$murdoiWf z&w=3QznuwvNDYm*8ms97*l{Jyr3g=sn@*VR%u%R;xx7;3Y73uoTL<{)w_EEDR zAN$pU+B5twTy3m7;EkF4LL7y~TBwA{NiXA8Y9gH(>@R)T^IplPu;k{t4nM#>NUb-R zv;I|pq!7aX_^hm~zkmKdE@J%oxkC>V{1u3JBdQ_Suq{F__E9G2>a4aG`atc`1s?{( zFGt8Ednx644uUefg;ivhug53CVdo%Kslt8Gx<@E&J|>!L-r;iF!&ye$c_g%X4UYTR z0)q~L!+ndz?t_aZH*t92p*N-9vO0&Bie`Dup^x86`OlG+O#{dG&uW5iYHO=kFT+%g z0n0x7Nprj!+kuS8E_xF2 z(?9hga)v%Z$$5HKesahP=_I%m2r?TvIrfCI#Nn$MrTq$c8g~Y!O+v>`M*q@SDNXdg zFL@X3ALBJb*`uff*%HU;RSk4JAHF1Zako^oZU)_NQr|nElk(Y$BYZ(P7ZHetcRaB< z3dTEp0<&V%Qyj>0%s$tq+_x%p-ZL_13RPWpBVL;0VnvW{qEX^=G34OMQvTANAwm3S zFXCtI{4JaC2((f7mgzQ{&flzw{{Pnk(mD-~zHiuJeq9$9Glbn4E=U)eEp&qsKfvfhW)erYPeHYxd zyW^|CWBWY*bBs5&+GWkM0Za{u@VS!wnANRWHD`U-ej@NHMrP;(^>am4|afTrJ0v13P9 znc}7d_a=X}G~W4~I~fp-dJk?#|J0!BHY|OvHiSEOUEe4kPJC2F%*iQxx|*%`GuQng z+A*EWTjQIUg6G320EI_s(;ZPz_JsS$ZUQb{m^4&MHKtM@Q6{FyA-{i5jI}ezrQT=m ztz{NSxL*6Vwy?M%w_@SeR%v+g+OS{VgB(aU;?T^*%kqJr-OZN_pRM|$N0TqSt|F0? z=-krn`D?o9hbX0u+Qmg(WuS?&Hn)O2@)31Ig9@xx%}Y`q6WE_u^x@!5&f;6GzrVz@j{#Zfj*C~a!PdY?f%mcT&$4!ENS&C-vT6t>DB>Tlz5aYT|4PL3|`&urrLy zPkV12&RYw4s5AZie+;--ZrvU5&ZJh{5@pnPPlXCpAu1mFW0c zPP_Ptc1qAF!4G?KHs-#ll>jcL*1)*+lx(BV#eDx1vhbHlBy~o`6z>+Oz0jVy6M`$> zy6R5I8YN{7uQI&bPa@IR3w#finw<<} zm!I|~YM%mczS)p`2=!P>GYG%>!x^+;9J-qU zjsBz=wAqPzQ1Rj_0Gavx+7xZ50M&@jlsUC(m?Yxa1$@i^jP5jlGDp!+OG zM9yNF(a~P&{D!XUhrsH**yIbm7XO6#F}D*pGqZrb9XYd^Oi)R%~x`e6O; zr{OKhq||UEknTjbEbK^h3_lVby^&pmAu(?G`N#tBu4)+X1tvtWs+{YK@?dpaD10}= zTs)vEQ?7`OTc-a#v=satw0kOevyK|-R#H$Kyh~VhyZQNNr>j=y!(s39yJNhbae3;TlJye_Xivt-xSqnbu{Ow};<}!-4_jaGp=1q6$M}aRx)>bA* zK^W|c>Kdru#>u{_6VNx-R#(T^>rXD|lFt9Ctci<$3sn!sX0()Pr$}Vk45D7e96s3j zmb)hLWvY*se)6r_Yn&}u5@OK52G$^}{mS;g6nhSdf|_v`a3?pSU3$1c86Mr~R5%th z7iM@Y0}qz;YI_2IJeGg70QrE1d*M%=O{G60P*<+?lWU|dHhO#8YNCTISdntaw&TsA zHx{+UsOzTQ4+d2h#{QnBM>Eh6XD?VK_~}6vg{~=K4w(syrOvl` zaVk?@*eh>vyil<3dkyiGopa|1SBbZhHH(53KFwy$Vf~A&#e!?5Ut7*DRjU_FmgKeC zLjCCxZ@L4rC8o&h#EIQ3X}i3ZJQd7@sp567vVMggJY+}PNB=&Zn`$b0Ae9)nRP0XhqBLm)AucXX_l;f{ff z_<3bnFPvY002o&O2S8ZbcX4!|> zgz_kR7e5f1eNRdwrlf0W> z5VFp4Nml#y+>z|#5NBEORcwkNd1ICq)1Gbm?4VykR{hd23E&SZwox}` zp3tcin_k$BiMW{f=r1U`dYD|FHX)W+!%#t#Tsq(%jw75PI@IO5asQ8 zf($3-7{E`o!Z$)bv!QKV`;_KAPt=CrJglA+goi#s+CAXcRnLJ8J;;+Ed@lxrO~9aL zm%A7cuqO1`l9iTH7UNW^Yb&W21_N)b`_qiviE9XIgO3pghlAn$HH2W$Q!7y4?Csh4 zbMzQZu=Tub_Y(ns00r*j!tgT;c=D=m5^nlj`g~J+W(v64XCOi_F0_W%QWPk++qQ&v zI}Xev!_2z|P3mfA8)R;@r`2D(Y0Wl-?dNbfy;4?Vz8~q0R}}tU_*Gt>nfoKCXNkNV zCs|{=k)$Z)%H^|i_=X$ZX{E;3_&BYpe*WZO!zZ!m;7T2wBj(60r?Q$>2|zgky`xT^ zgq5#zkTgNy0W#Vrr2hiseHBCz>I&z-p!#28g(C2<9D^DX;)(!0qC$mbi~aA)9xBdD zlt?aQMAm%^Xm!R*7e`SyPGGf?XPA-xZ>vn5K9=T4M$)E6%Dmh|xuzLD;}xG|N4q&~ zL7fvp9o<4C-5g;i;{QK_R&W_F(!TpEK|mzY+vj`C`qLwUz+P~KkkGG0(8*zRd8Y1U zB}MnYV6{F%mX$kgKZf9;7Kx6Xa%UKzct zol!ex8&R)x6*=m@gKorlp#WFq12~XP$kuL)7Md!9qGm(|XV(&F^Iq9h8rSz@ZqAIn zY#~;F~L>wF`XbTo7m3MW+cUg1bod#^misC0q;kGZ$xK=R}fJ`Sb|z{CgAa zEVFe%$Yt9XQeA!RkJ_4=!Ov}rY%T!yDelpef>d0`d+Z9M5k^0vQW};EF`G{!{JKAM zW~F~$qR9^K&tDmXR((b}wU0`h=n528*OnNrMGMV~+se8tyQ=dmnw_8n_!>8Mfq`bW zkrPfs&3a@z>H8FRw+%O{dS#^~>wWqwnM`@iC3bDtBH<1Dt5D8nv}om5r%v2euBY0o zCo}>r)xSPZyL^ z(D2JcN_4y?WjVdp>+O%QZ4z5u7Xt@x(IGeOLKBzh;pj#|$O6Yl1tq~0L4EK7$CAl% zTWNX?963Z~=JTZW_u}j$?M#A&%>|!eKWD)pAD@I}*{{yiJV!YV%cwJP%AV|*QvkQV zqR_=e^}Gp(j20iE3)H0XOXJbZy@bzSKjpK}d79~y=(86BTU!WpMl}FY%JGF&GQAVe zxoV1iyR3?~3lpTd580Yuv}1S@w0OB^;*y-{3b(SWoP$}-PRk%A3i%%Y zOFYZ8V|oVs&6#e(*XM(>XG3YgP(3XWKTX^(((Rq1A6a9%kXb?8WmYQI*Gfva*w-vu ziq?jPl4i$^E|MS@O!i_kHk|SZz|qh5!7g*C3;?P#r?UgdP$Bz=I!_M^lU;@=5IA|B zkMHe?QbuaVd@4bip32ZdTB{%R8QU^*fxD|ahVjNyW<>#PB#f`DlwCv zs*t}nFjF?pxr|-jjkJ_<{mUWco0_+Th3_Pt;08Dn!t3ja3N}nrzHVH%0rFwA783Id zpG7;>r^GAPiv_JKbUm8!gjy3kQF%o^b5Z=)VZPP~-@P5H-|dmp@0QTM{yD677UBNr zb52wmD97^qUBDNe;@HoP!

    Mkt3nCSbUT*_;H7xmE1v=Ww z>v|jz$_S)dO?W=?boL>{e%IDW)80ycj7ahv!o*v!kY|!?pqFm2G?lD=>+{D}rW0=+ z$n*opm;*O1zRLTu(Uaymsv=KU?iU;FwKb^r9+!Ax^UJacewbTM% zlcWAeI4FC;=fztu=*e3@Vnx`MwXlt%G@5hrJ<>E|AkuW|W;qq7ecJKr{%pG8<$^%_ zpJ!*Lf{8=FPI)pdOMc5Ax-~6eS&Utf|sDOIjK8PuOy#ZYatkZxK3 zlPO&HNb8hr1~s%Ok}=|AVosIWvvm0dOr_M(4xb9;pM>U%gr^b8M;Qqp+GPmpe>06Z zI^OSU{^cf?BN}9uETN2 z0X>u`P%?37v;0hY=^nG5r}L7E1y3f! zofN#fD(dX@*rhKX9=()wx}9zI0U`(FvswQjqhJ#NcijZ)YLRh~=Yh7HsQ8jqZts6BZ5|i#;ofxkpQI5p> zQ6RokIm8b=(E1YFf&&$*f`XWNE;&-;C9^OsY?h^0GqMPJY4N80;D zhuCxRjF}icQoB5Hzp9!d34xs;V4E%{-3(`KMFlUXt311F|1RGjui3M%nMq!py;rhC zNknxz+23^)Q^2sP*q9|VD*BW>i_Gt4U?(3CPOT}f8t+VOub!dkI4gO96ve7iZuz%S zn+h%)nDB)Wx<(p1FsbBg6w{yR@!M#3@`mkh0w;~24y;m?0$Y#W?ame6wwsk zpG+UEg0(C_roGD5?p?X#?diU+cm5>3RP(!(oxGES!$W=R>Tp<14d*(@Nz!lj)LT@U zJi*)E`8Oww5Foq&t|rYw8KA#ItEN**(-mT}+dC{>60m+&HGwhwxPk7VW?6*aXxnR? zLojv%|7UgaY)Y)P_3bw|?>fXVD{d{XZuK-+<5B8RW-Ptg+Qd=oPzfQ>bKBzXSS(|- zO}oQS(zR#Z0se?qC8e4{u@HvkUSJ^yC)`|AoDBSso36G|X5JS}jv46$;W(GIuRR?6 zVfSP#p>uKLOjUDmUhVYZaZyn0M~l%3V=_SF2tpUn@cx`GM`&oVF(<{K@IhbM!A}$Y zPqecW{*+!+Ug!|z`Y2j~LBfQTKU7iK2{VKedNuYJ%dl49<)VGwJK3rb_m9oKes^kFS$wH1|=7%!z;H;3Gj#`LB39G*cbVc=ro-Y$N8(7l7paJgSVm zw0VvE&$Ue<8v#4QmZ&abG8|8SA*MlAi{-jnBMa*tG%30H@8{J7IyHp9EBUmKlu@}j zaqExTJ4<%JP^KMR03?}D)GsdVm}9>?cr*9Eatt=J`x~2lztE)481-dbE%B?GdOQye zRa%f+5u_>EguhjC*v(HmY;j?;rI(l|pK&tTd8u2#Fk4hI3OT3>P{;h~0* zGVhf2y+J?b%c{P$WF4wr%9Q_OmqS-Ln}w3MzTE`Dx6he55`hR4B+a-j9?Fvo9av+; zDq7>%;Xdc#*g6ILia_>@`YfehB!Cu~$6cEAeWZ+A^>JUM9G`&V9_%haxyDmA=Xw#) z&C)D$zDfz5e4Y4deCiNyEft;5Wzc5f`wJXBYotf8dNIL#)@9%80u6DQH`za^%tVTj zDd|3b6b~7&@#u_xV&M7|!EG#=Zce>gpCz`G=zQp0>Ei6%#tX@zI-)LPDN8uF!%McC zd4nh`*iSNVe&LU0k4s8ye?b;QNAkPHOS~QnMZ}3~TkxLP6e~*n9o;XY3q?jNKdgXH zD*m4kFRcAHhBIs`g^-pE{7U~iOT}c7aZx zeqLjazE?GzP|TUSvZAV@r=qK?&`g^_6WC)^K zK;+1cMnajBPQL4Xb9q>m>KE%o~{*6_9di=ynd^JS1OLJ!>|F53%zr0K$ZK+(u z$d|y7VUaG|u0Xpkqp#!^ClVcE-2XjjrZ{4kWo8cJaOSrWZ*D=z7T!s?slzE7 z(Ff-9!tHpxW%&>~3og7R-ZSkW#SM_ALIE;iqK$>LuAAuuj$WT&$wIOt>YK`KIcWqx8D?BBSY}_ z&MX^20jBvwcP_b;U!=_b5cH|I~heuDlF zWA7MbNwjqVc9(72wr$(C-DTUhZQHhO+je!ayXN+L-#0Ocn3x~==f=&9%yUlW*?aA^ z)<&me*5jCad&Stjs$izqDJI@fZf525j(S>{YNl#$$5Uaq6S2+o16ip&HS!8Gb?gu! za-ucC#TTeUkX|`8FhhJ;9~SDJZB+@nlPW=a_5rr+(W6h0z;P8Pux{HhH#6J5-OygN zVS)}3!pj5ioEj(;KXB~mALP9?b>8>^g>g7$*H)ldGXMj^1WuHI5a+d;#>gW~qtfr$ zb;e()DKYjsc>LW?hn476VFQ~83IvALD}kQ?Lh8U@-CK$51+UYK=E_Qv%TNK4Ivb*k z;`H7>bIpfV!OGes)TbbeVHWz~AQOL1FHI+~1ROHw?^TRHvPewH)!-y^`sjhW5djGt zNNRaLPlT8qDNp&^u-59x&19^DXQ?L@u=#S?uvl}NJl>}UG$Ax zS9w-(JH2l?D|+Pt^TIAlxp~4=SymM_;|P+){_tI+!i3N_t+=_GG8niCTD%by({O=) zBnYIC%wS6zs+ugdb#FC~zZ<&Tu6S2CM>6on5zZOkL1NZZQdpf6YVnNH;-Qo*lLEH7 zT?ifxt_W?Cp_VjtRu^kPyd5roW>!*cfnDq5c{Uy&R%OwTu)@ZB#Q8Q|?;ZcLgt0HL z&@yelH#a0OYUx|sqGup$Kv=g|6&B=(U>44U?qkQjwxOo5GnL3MK!dx20Kqvc^@Qtr z8}+8M33hc&B|Dbr_@1%uyQO2~DNL;pFp6LyMaKU`qf6uF<%RW}=BlCFCn*|$n1=0K zHc-@yOXD3fW6EIbk}X>Cx3Wva)~rUaC|$aU57`wYK=Fq#19JBP3NWy;nzUdFR0Yj> zthk_z+Aw0&boMmSs~3n71LoQuFRM?N6Te@1je_x=D1Zp9eER)+ z`yTp@=}!o<^4KR0aP=ps41Hl{pz2+}XbE0tx~sm^`Cytzb~l!)Ub4e^|3t3kjI+<< z=?nO!7PkEDAC@NL#HhKQKeyx|B4}M*&rL&^RPQRs6@LsbPEsb&+v+$6lbr_RaLTcq z-m0IM^zklHyC5OG+I&0<AynP2nlTr z1eHZuT?)bVeY%J+myo_^9j#esDF!F(Q;sM3L!{5Vv7YM2?vgXBNdcQV<;17_6L`hiCfiDMDBzYlBTR&!}mgz+YtG5!5?C zslvv}iU|Y80B!yTjs|U9wM0#^90kED=EIIZeeMVu3__^^Wql`~{l2~XqQa6Ygepa1 z0P{z=zc)#cVA)a!4xI*aJ=|ZX2vUOrAlFQl=!OJCBugz0FXLHg=rAH#DFDlOJsK-& z>4rH<5u@21verugZ*Be_@o~e%L_|Y^WbE5+-h82=7L6sh2Y;Xju&=d&euA?qD>VbC>7jp~Fn5k3S@d!y#f%FY=c# z)jDfY@NVcdHoo^G@6cgZ1#F*Z(@zxkZN98^jzv7Tccs-IN-=8=`&&-Oiq{WAXXH10 zcPf7lhz$q#_hLa+5qz(OOvdh`JxZUd;CCaYX=l28%w7|=w6eI~zb@d=%8zFITpNQy zW|`aBd*3pDfOsDbme?Sr$2-1ECHE#QT9+APC)D1%n?7%xgTYlCOuv>zVSB2imThec zXpu2HvH^EX;}9rSEPuvOqd){a0jA-{PxyVXdyZ}m5->SH6&wo}J10AP*r-7%1LXq0 zYPqPWNI;30nAobM6MPBSa|Ib0*&Rr49DR|@vcDoIC@8;8s%Sx=rQb+!4i%#le`{}T z53rHA%>nyIgGU7AA3^g`&(DBTLskZ0idPhAwV;`(I--IFWu#|g;A4*&I>?r3ny_eG2i)DZYTCke?OZ&-3 z6@4G^)aG{2ZxXVtWA%dsSeg~>UiK*x+^?CjX5cv_fHg|+&={1dZEK`E-tIRjm({Af z!tHRb{63QJ%5lx|YxBfGOR`;kxB&Arb%O`=_mGzCqfexKJJ`7@@kCU3UrxexE(#?UvZGnvo=kMJ@jG8 zO)pZSPhoc14i)4w{=GB}{(MI5W~mNAKGeT6X_`LXd231-k2^Q1ids&;)6S>`WNjuo zekp0|JT4%I%`N5dfwnsDMd(<`zyB>FM2eCYquJ^@;?Sn;_;a(i!BL?Z$=mGp?Z3T) z?sn~|1pj7S3B~WlT9UAw_%R^9$2{FTu?W4FLvQc7NcOpZ zA+oA+cTuFS0hi}f{X6T|5NLqw%1Lu(GmzC*0X=`6Kuga1;Zt;Hz(fM!V*C6NN(dgG z0$(wRAGu^19I4y1dyO(--px>yv#KF_U9vyGzv`>Shf+gpsYdxs$unEd>*fYItWJI7 z#x=&B>#~2W0JG=soVyYW7VJEsgu9R4e9nqh3z@RL^MD1@W5-vR8-9GYQYFakz=1=) zI@I;}(L;Z2CQue35E?@pXPE+(ABI69 z_62VH_Z&KS?CB3jj-AzLS8u~_B(NI3i9;v;OM$z+diR<{2@p|Za?EAAaOiMh$WbE( zto@O+*YR2S^~<1;?u{J*(_o({&DDq3@$R9cWW;U5Iz1VQ8>OmO9>_aw#6ySH5PESL z%X$t6N)md$_({9Ch^R{nE1?zV7+Gkr$*CpeW?^B$r!LCRixt>;wtp@?`LZ|ztg05< zZH`x;M$gM%s`|NN>)!C@q( zwI%9tsQ;}d;_fPbXJG7UXJqzxQq=~b>^5tS8=Cr6Je4Mdl!(3T8Ryy!cisIQK3{&! zWvdXC+Ys7Z?WweH230m;#%d3ZRIAf&4{%a3aoyx@ay(j6s?&iTincm_Zk^-bP19P4 z6-G~bGwboBqWlnZ_SDi71D(Ur@GmH=>Ai~eKS6oEp)N3FC+-v%B;L4D* zc|BW26ysd~ST6*_zc-=N=X7B# zFjKlkJ*3Tw&93|Wo=9~ENwQ?Vx$y&I;332VNVR)9(@V3z*PdR$p+*+)? z=Jxc_vL#+4^>#Qv`~jI~{|F;#Wf2M8r#kb)k3>^(&+Kpnjq?3tg80DlM3PXvFU~R> z%SOK4g_(o|Nz}KnYxhq4a_q=w|8ClX<*~iH%S~htUZGkf940alD!+^xDM~_^1S*8+ zdCwlccztOJn9DpL8_Khvu1lH*1z0i&3W<^l{hpmk>iP-s9>l;dz8(L*qsi_Xs1uhA zHfh2nL}tLK0U#z&VM-Ao@IQhI?`Wz*&KCB!V$R0g_qwD&ZRck=I&4z-xukvRU_3zm z8vXY=(@sXp=#WExJ|kgaVMkwEK`Si7wbRFyjjO7DcK@*>y3|2t_oUkHKHv{!h!61+ zY=T3Hu1=o1wmo$S6@xOC(Y!KNo@-${O-eBC?36{TyLaToUn>+ltSvl`mhDTYg2lR) z1$<5jNDsABg!(T2x^Cd0Y`)m%!Ywb*{qO;_l<9KTnTN8=P#3;Bl2egm|7EDn?CZkN z{y0hxAJU7H9s_YFZt6@(WgZ(fcdL*cTk2^^iz3j!2sSeZC(4IiIV$jMO- zKFYTbnx;{fR};WPsV6gCYr5p8Jh-Dg z3IZ7q9MoLF3pYn#=s$eixmNr`nHvNnl9%@-x;#DLNhyzxli|%m7bQcaW&sm`*SJ)S z7HJZ2G;7+X`Bmgi7q(*L_R(!O?;YeMR5xYVx-OvFD>0sR;EJxp@6IK6z<=p1l`(4J z0;n6tt(mrM_Ul04#RyfhYT>|X?;loZ)+u4q$aT$}-q&TV(V;@Jn)z)WHEUGor>?;w zy?zj@6=@NmWZY#-oTnfKXxPE>oKIaTOs4#W=CzAavTWSEQKQ!Q3C@HQkv+6&YnHWi z!$9Q@^fOB^g17hEjB?|KK{^;H#UY?C9&8ba4K->Qt46Fg9{9{*LubASR?ZipZOi8s zi1yqg$gf7NYQW%!8jxju7jV&-8}bhVDg{CX%#NuIe(v-Sk}X1{=LuP*UKMtQ&{sn?-MOPL%Mz~Fog zA7Z2wE>DfHHmQMh_Zv2+YaNbRmWOQXMiVsF6Cd@U#(%dJ-6!|Ub7uEkQ0_E$@n6-m z?oi|=5{>m0w^h3pm$8-FfnA%=xH~D=jviS6m{dfp+jh8xZs^5evtyr4(ifBdgD)w# zGwlKujvNJ*GxQ!_xKOGIyX&g_2YLI-a3;RLH$FEkjzusV4bWu!$ztq+Yo^I0eiem$ zU!6XG!{x<_K?|Uv1WGnh?M0a*+yCg;V5X=y=t%Wg{*2}*F4=G(OsmsrM-$xtg2Qet}yF|!GQ%G4>z%zT?^DB7}w`O1Yz^X^D7lXw^O9T&e~86P@$k1tZ&*V6~_ zh*~*0+oW#qV^>6rS>UgNi9n;BE+}N~elo|pov}v?{-lR= zf^6rm$)E582Tz+%$xsm`Gq%(1W-VDRc%*;54={emJaY`8%Zu7jT+zTms1IE9=4SHo z=h#kF6~RaezrV^C$I~?$HS$wZmV_`ArOLrK#?ztX@yw=C zdL=qKIYk*WLxqBlqk47)rmF8wqC#M>FlhkKsJMwq=~#k;W`|?8UqezkJ{2VL4?wwk z5=2eo0R4WfK(>kXTi+`XR5v|QVULR^i($hy2crJb`+_C*ITnMLCq9*7B)f~dl|$Gv zHdfkf7!N3jy&o&GJ$C)zi=s{5;qE*}9_|hfUY?G$+auw#8!v7F+W(ulTNJs=~^aDwYl%BM8`TiTM1uIJx<`S}=CN9C6L0 z#1t(x>dVcU@d$N43hUFaBw8LJ|QV z#j!?kTYUj*T#gFk`T(miONpw~-Rj4vt~k~OH7q>4A~o89fTAh`zqmo+{NPi8Rw z6f$HeUbLBZpJ5$uIslW^VZjSP-^r7#ZMk|xtAKwZ5pd5TbD~l0I~V?*Q@rLUcQD}5 zC7Jg3^UzwSqk;VgDdx*&88$57*68NorqiJSN|oZ|oi*@5jOV%MW&Tgl7{P)*cbFOk zjB~%@1ppbcMd^ie(6e(E&ghaT^<&*2&Q}DSNdkawvKv zfz_D(|INMmSA6pRFZ>ID4uLY@|3e}I`S;7eist_VyZuM-nFiph|6$9c)T>oEVLtN} z?HUUV+6w3aU$25U=@Bb2ojuh9AiRG_y97d=0>QP2%YV^Qt_53nn>v@+w#qppxu09k zA5w`l-O7o49DAhLpLns;}B6oc1YOTxiyQ=EXUH19*a>#y=LZ_T!r`p-UsG81 zr${wkQY3WG{b+sY)Q6pw%nPXBhPb{8UDM`Ab(UFM=R&;nk)9AA!9BH<@{p4YcqFWK;Xw_ z__g8Va)d=vgB{b2AZDQT2RSf( z8T>i5=QLyCIg8y`DGOvWV~ZUAhS#~Ls*V2Z{`Ak8^m>x8&#+)mpt_P?dL9y9f&!hZ zM-Q2%?BLCKaQ5Q|S?jOobl=x`cl>T+zX{QRV_w8 zXw0Ew2uv298+(@X$nG3XzFHHi-3gz`SkTD9g6z$NL4&ThZc)PV<)PD?-!%*rrjZ^x z0=;gC+@hAU?(~ZG{k2|FECsW{f8r3G)?&D6cJm6Z;8+T=10yBw>p69v13addhr1`a zmcBgwTwFdy$gV9`jF(k-uBCDQGQXafx*EBCA5VQIuNy8go~=T#%2MUtQ&SW)qq!zr z8x|63lG-*Q7$(G?go!S$Oel*iFn1{_Rk<8ES8x4!8A%LC4CN_LEJRNV-jRiJve}Co zcuL`o#9og$+%j1>f5C`nTf|1ec6f3U5r$EE1#&0qh_UHgbQS3wVHA`!aNFDPBb^-g zBbXAf^2Sm?tTsAGPAHOE<%tiG6z}!AzDO~t8Xz%q5z~b%A9dj6nHRVD%D@~S8X#5@ z3(@b)+9_=8@I~RJWO<)l*VH<6j9J%4MMJ@M;ko{C)kPn?o`AFzvbGORAhfi@UdWOzgD3G?Wn5nv`loft9?!)F`EDQaXUKxm0Fk!CVAeERnnFW3_Sg{y> zDFE+|5_LfeK=W=8)#=Gd&sbew%6WGqs90K~Zt`xOvWjmwD zTQdtQ1*N=;JH9FdMb z#xi0y3jWB1+!P2qdmDKhAiOK7Ri#LkZq|$+$Ppy~)~O%YaR)fgI5ZLiwr*bb3JD`d zjHjfjm@}?y2~NM>+p~KafPP{Yb=u0=}?>X;pDsGC8tk@8i&{t|tg=Y}AUq`Nk79VOKjz zJt)CT(3P1XwjzaCUhQbp^Di+YS$AVV_AWbL6m|D^{^^h2(O}&nY~`3 z4w)Ex6?v5-X7!ennO*^AUu2;hGZ2)sQ_UN-V4&dirfp+tjHXj_3dIzwnIb>CY!b9REezw>FFz?gA$L%g0EL-pRAPsW_uHWg*cHwTX1F^J+z?KHxcVb2&JZ zt~W)v$Kg6^8xfQ#Z%fPRecf#$<*E18#R0^-UQ1)hK91Vkgc6CRq|R}=g;u$TRJe&& zxrs^A2^#<_{L~&E-oh;B-kXi0EH9eA|6uOYn0`n-9YvHu@09PqmA*Nvh*suBkJYof zx|Qp5to9T+ZnCsAVag$0jUtaKf(EJ+!XtEUjk91O&N)GiDbI|412Tz`)k})Aq;l8T2b+$?72*#1jpW0H`GGHNyp*M_Y;EKcrEA zja;vuk)bYy1`cmNgHq85BTFvFGJ>j}LI_)ev8EG`v$VMeGCS@*bi>2tyP?J)fBpkjgeuaZZS-acQQ&zNV=!E3R zIue>{>(hO|xw?*poVd)_LS`0Atc>g!W>KJEjw)-CGi!Z&fsca^IF|Dd3nM)kDu8ke zjYV~tOm<};`rf>{$Jdb}YnlPV1g)-_sJ<``7M5>8Le5!K*du^5qTZFyWdiaG}^D z;sWSNo1ClaUf5PrGVRwIL&)K3;Bt2;-=lz=s2y>d@Jtjv5dNx0ef>&ovw)gH)0dPYdo^VKnqE5Qx>!25u9fKP z=s~D?%H}PxOey5X%CYo*;Lg#~#>U3WOEs2GT|ObQlMn__jdNFGwbqJxvLGvu&}8BtN)W6NF* zFgbg&OsmGF%@;QKh7V80y7@sN)6^8n^kQp|nf-LLq7N@>@GdQBXsikEzZTx>syK6o zDpTvjrOVYQ4?$q5lf^r_I|PPpTaX}uLjf`XP7M+x69e2kV!go6sijD&@<)T&ejMwn z+ah=+h!$YpofTskSAAjl7=Np)T5!MF7Q}*>WK1n-Usuhlp);%tD>_dC4xi(<9ud6wjH{pfJz`4RJ5Jkbrzn`XB0AQhokb| z=F(Bf?+u=o62JBu@}knn+t(jGJ+(W2s@4d~OVXtUR8tw%7qy{!JP!HL7I@7sCMs%H z-n6NPYxawMapTlaXkWMb^B@z^_f7Lmb0y09;RW&lEx7s;di``0RkS&tG$G(=c2 zR|C$k^Wcy>LBhi2e9`{GbJaE-UMa`1{-U%Fs>CMC2~KHCN=t)txz%`uhtO7xB=fAz z%_}F4%O8!CRE;3hr=&$$4MmQ5>RB$&Lgz2xZ|O?CD(vyvo9u;;8zL?5oPXgG-Rg-` zs8kH+Rox$*p(6>>N7dQZ;EJ?1KNB3hjz}=Y2@)@@>F|3qQ!~B!XbKC`bnx}h@VW2f zxhg+2;qpw0;6$;++gc4ZkN%YZh6E$)6^;I~>;z|=aY(4xIZ{fp?{28>EU2t3EU#dp zCnv3S$6B_Z=+b_o<}Sn4^K#RL0=Thg3vJL&gAf^f``&ku9?j6kOg}^n{N1f3LrIvv zzP!aM+Q;VVQgOrKL;uHN(;`o?v}B%q;2t=wngm0wBbWY8rSPIv{QZe>(XuLv#?XHg zuZCI@5)x8Y$~sXa;EIQ3C1U8zoeYFyhtW(8<;kwwk7a||z68SMxph_cM?D-kJ%pGO zlHG2%bB8T_+omKpGoKlhz%U_N&E;h&V#x-KDffr{6)5Y(!`hHh7Nc|7n)z`el9Am` z_#7S*fPk3MSiLS7FhfRWKC;Gusd7jmTDRW@C+9D(w3v~E(lJ+5ODiQkQ%6N7g^7rL zk1AQfc=2b+>Q#6z%b)!D_DT2*k!Xq0B{%x}h_&|3&}eITQOS zkuI1l_Hsvzij0pcZU8m>7%M4M+nZJXM=YtJAF3gSx{l5^ADoN^Hr`4IZXM;69R`SN zYhmTo*hEnUsc4au{W9id)n&QTd{4dcR+NMzcv;`qR|G=jG?(o4#d$W9)t@#>N(x5x zsy854X(9ebAYT<09WxPVB7?f7u7c7ySU6;LeL+H9;K}Uc(ZEEiL_wY%wY7`p@~1(1 zaWgl~>&4Jh&xV;rJbd+_%pXmj)ld}y>aIQMbZBfMXi4N?g+|PjGzAh=%-p&@l<&Ci zgdA-)zp4zUQaV6Efq~NI3T&vVkAUU1L{8G6#XG!XAT^_Uk9AN4kDCC>@F8$fv^?eA z_>@^UuaTY_$hD%)a<05$_PWYM!Ru*?UqAIDl`?XaMNN#k6P2qtg#tt>l%2$%h9=_= z2$0*FyCEC$&5q4rcdgi2b>9Cv%Qa0{+QQZyUBMtRHWD`zr#zTi)c52}Qo`V^DaPWN zXO8Ubpj?``scX)W;4lB&0@>0~3qb6&4UBGQDpi(7CO!`ABb`jBxm2bMH^ML28GVptGyJmmC!al-`3h<6uQjl(=r z{hOi1U>|P=cA9zLA2fmaeZMzfXo`tX=3UjxcH8kXQ`bsaD7Y4}P4)8BxwfT>w_p+r zhwH%MB_^FD+%jE4gTddG(($YBl zda0r*B4NIl3Tb2K*p(K9iv6O&;EUTmjT}}d17B0R%q6{@m@oe!(*#4udRLz!p*kB9 z#dvyNa%2Qd7Zz4#D7MhY6dx-mA(`Ry`I97=wYD~mD|0Ci8x0W;Gc9|ueYv<%Gh8bw*d9kpD$1Zq z@T_UB<=p|+j+@7e%q3|fKbP0xHW96}Voi&0c-rqD> zxU#^pNzqJGqpl~XqW3F_C6>abb7Lj`%@RU`M{rzDMrMk_cs#cp)|mq*|EJsF!2muk zG+I4=(}D#HZ)w)$%eH0vA9r2&Qy)8Q4gWs_OdxSn@An4KCX^Y*5SzTAc6Yd^U`|aB znK58ZBc~n)`tQtkT@yB9N&%8`SqskJJA-sa4!a2C_ersw_wF?N`;9!Mk`Iek(q7_b zftYnuMnK}q_vb#(3&=Ds@9{Wm9MGSN0n-VoN=2PlSr? zGGs|tb_HvoeDg*v;Lz8NrJZ7}MyZcL+Zkg=3|O#g;`_fwuX>s;a9yKzzQ;~nHfP3N z88&dn(VzYK8J+BXck=n`;1gHb9_o>N}Abj$1Tt8FP>A?$m61;w(RLK zak%zh2LL__zbF8h{SOHjAZ^JxZ#4h|$^ecK2_Aa^WsU>=AN)2Pzio?`g+l^|KtU|D z0)+{HD33vSl-Gd|&1d z{}1)1UP$-tn(Z>@3s;uh8JHz-;t$Q@d4H93R_Xth%>aa{AOM^;NUJRI>N3<>ltY(T zb4`3H1u6bV#He9$eQdEZWxQ3BnaKart^a8!vjJ3YXQPVSCGVY3m7M`5U6Cw1Z7?Ln z8woTNU#8OESA3pcc@H{*-AHOr!f&iKbf00bTys*eI-M*79_Unup6jfDyMkVJh)2?*5N)4PdBle`K-(6ac`ZM}sfLareGo z2+hA0G9Ht3Ml!fWh0+e6fJSzKM1|T8opTP4bVd@GN>nOCcn!uM!T)KH!e$IvHEP5F zH_@`WPdTmqm4$!b(oz4C4gBTS6u|ZhMrjU|~ zirQ)<5^K1^Cq+{(0Gvy~87+osHkLSdkDNQF$podNM5$gl@c*)mA2LYy!$rxGAx*51 zm90bs&zv-K;Gk8BP^ehq$~Dc{Ikd+M4bQta@!Ps^(ZKnwUgQNAjwtIaI5^S1T9jy=C7tfi1jo--DDN&}A6hk8gk_@*QWr#M1!w zf9i>cg+OJh=Hw^F?<{`RP0B`34Ey&)K{j^+@>&2R**G#8093Yfti%K#B_9-B>_+P>Y% zjYkLv2#ps$<@*cDuSwyZV;@x5f+eYyCf|c#<;)Z&xwfvtM?+PsrKwh-I=EA%V79N? zu}E-ucZgIhVFmcudd66U)+t~GjJQy>=n$w?!myq1pRx95BuUkpEMDx3T-F8wW>Bmk zH@A2zdbKMAFbqXn^l8?_^M%r~gXwmX5BbkZO$Z_j`7EW{Fi^zYqEH=Z|F)iIy1C#PEtNblFFp&Sk%0i!=5#xgoP0@<~?KLpp6+bK(9_S8`ITA!OGC+ou5OH3S#77?XvX5$ zwhj2Ve_CW1s0{9)eE2ht<1cA#{EogdaQ@TWO=XmopkKnPjpwYXXSVkR*|P-iQpog;gZeC(t-roNw~C|j89c{ER| zKdu5O1#_rIlb0y}a54}qKrE`J!aUp@ioUopezuO|+l)15(c#nzC{{wE14D5omIj1i z;5kbJN0WaQ7_{4Dn$Q5(34&Py@k0lUs5Gi(H4)r_rbBy*w5|E&(F4dv{gc4e-d}*N z!w2r-nZQnH8b`Rr75eR~;P&_51VtVBI0eI3u534K2aGwxAK=_Has&pG_Xy|Uz%#Ij z_ecTbrcQhMwhkZw8|efHjjDywkx`%C*C%OodVn`^KU9|vT^TjUIQV-QAzH+c(9rMO z9c))#8&4}Pg>z@Ffm?`TKM6o(b0SsjF?z28&DYcs&&RB~zO|vG;qvQ7q;PV~Qre=# zv0Kbi+Dg^jSa&(X{jhkHKkrw28&gRVI1-VSytK9xZ=?;Q6twVT@wkYG3z}KzHVP8v z-tumM-QCG#j0EE`{vZy}DpOd)vO~n2F%}_02Gl!2ZCr_c#d`AZSiMsg>(G(3`OpTA z$eF9A$g=x&#sw76n9GdPCbLp=5g6kVDPi zpg%#sL|E8ZT3ee77tRqMC3IzT*dkCNAFA z+Npp?3Y9Let!~}8Dy&D`;^5-Ks=N_u+QYXq(qFpT7#fNSDnUi|vr35%886M(q^ubq zH8ABx>NwL@__Oip*)vy^R=xawA0BuxfKTTS?et`Jl`(pBFMdd?eQjvw%VT<9PkCDm zjV|6g@p0}_R7=az*3sUJ#9tX&8u255hjuqX;3iv^gMUe^Aj;d~h#q1_#TrE@O&eE` z5Dnh--CRG0(Jp5%5B*#K7Di4EkYfq8Qk4vK=s8yWfRVOImj2*oG@?Ygk0S;;ntP6b zMAUz)_YtJQ{<(!+G&hol7+)-|nUu>v&H6Tl4&H>>5l~Xv8aj3oAcpqbCeYeehQ1W^ zAg}Mrv2xOYKC9Oa=9wXCYx1Q0o7NmcHij2@U>a8jNQpTV3W@n`bW~3(-~J~^vYMJ& zsahqkUEEd-k9cWG$4Li9f*wFwZpBvszOuT?3Lr1onmQAeRyo;-+1dM#V1b8)l5%ya zajb4GF|!fcYusHU#lGB9qbl<)?`XUE0`WK0fmiUSh7~kda+CmD60$J&M+e$D* zF{*NVb#m};K`x0o1a2iHC3~6*_vmFU)umue4D4&n>|~5#V*-s-eK!mMa-0NeB_*$EY+@`qrgKZu< zZ|%66R8HO8yI7&q&G|(2+hqxFwE{?;qyV=VikXQKX7mpKJGw2TUsJioZ@7G8H1(|-dTn~maC(&T3 z-`7b2-=M)`2{I_fsQt~154l}qiIvQ0%3CC!j__;>w#WMIDRWsZ%mb^e;#e;{?Olx= zhbNO#I1Cj(py%Azmv;q7$2_NO-s!CU=f?*bIXO5u_&ZSkZ~Rz%iGI5(SF=dm^F2>q zxgf1O?^AxtapuQ*|2&#&wj@bH6i80*3>ovbcK)oq9ko^-mP!UdoPpTqX(DcTO~WD6JGqB2^k5V$MXqT zi8Sry9S0BYV!(%%DM~4MNqLFcj!&mE>E{?3Hh(?*Ox{4Z$pwB#1#G&L(pA+kIP8^; zw{m^VG>i&@adAH`&ZsacYv8)E^-!O8-yYYeE1BS6q@ic3h@T)s)sd_Q(sVJtiz(s% zswZLT!83UXLEIQgX-E^!JXedaiRnm7Gwxe9LP!eBt*n{!M~0MGX^0WsoFh zzCt)Rn)&1=-t>B5)C z_WN0}dz1W*9x|ppKc6}_FFK!LorX=@+PBlCUaR^O{`&j!s?K*G%`bwXo-U7jhxKR~ zdhD=$ z>4p{J!+@_}^rMwCrK#mk3#!J20bh4@CS2ZpHgXbH9@-vC7e?T+i>c0J zT}da*i+z9ZLB#eUt4EN5X2V=>H$6_LG0Tp^dZ!@%B@l6AN6nl$u7J=VBI^nA1{z>y z^5Xl#^(;^hMz+_FMxdE*IMj`$$MW+ka?ywzL*i9Mj`sVbr-`MavWw$GOGQmhMn`gr zBTXeoGxFg*dc+|CrAD52F*AD;OpbmFst^F(Ow`(~@%b#(EL}#AntpV_brEqtpEooS zA|9|$&I?P(FO}NPf^Si=wBZ#gJV+rG4b|?Hk1{-SSz2DNIHlR;lZO;nb|0D@?@~MJ zN=cFn%h2$-o;o`&&QP;Ey^*zPb0d0uSqR=iR8Y2o@S3SPF%8z~_d2t-g`D4ictRIm zfr0Wp$*gy*8*VH?V*J2?Nk*Uk^8c5l0xWABfWQh@C|)!=ZX zIP{drWG;VGRs=PxI@uis)dl+WQ77+_OY-p8Nr(Oq*~y<1^m_TK(P5K)iR2rJ@oCU< z^SgauSG)4NUBazh%dJ;)4Dk~04_2rEO@lunKLL}Ju^sGbS&Q|5dSM_j0NU(`{W)Qq zfi5f6E9r4k$yEmDku-~-+%MS^%vk~e&3Z`d^@H*=+`cOt8;iM zcN+O*daE{iE2kQ288rXP`EKfrMEc^;|4=G^WoZn2W6ys14QYO# z!JhsuHvB1Xwu1ftzNsoX_TlB8)Z#bWuc!o?_HEYZ;7;^I%v}DDqb}i;FU94)fDiF3k zoUs6At~}6AP#D3QMaq=Vd#jY+(hz4MRnzEnGI&vSR8-@Nmej#gc?-A-ct(fdCCxLjE~|s77(T*%W>C>6!f{ z)zk_vJvl2*OHDmJJzZU00RucE8VR5ofJw#yeqif{Er41FkSC)(L0|-bzxIB7817Jv z6{AFsQWUAOs_x|M*q~`wf%y97JN_2|u_qYHst2?`F=FoX7sOZ|mtDwbw^_!Z1*;M& z{Bg;8h0pqi^MBP(%aiPDGM>%MxdEIN{+GhnF9gB^Xrlgqim)}*fYch#W$4sN;y3dS zl4`(GCgAjonwu?1V6d|25u#}2KX#|X9@3wwrhMoPwS)jO^dI>(^g3^-l~hCob>%sG zJARu$SuCOtGg!zCIeZKzp5{UYUVhWdZv#6z`xJJqQPqLzMF`CF)z_5R`iD0A*;QrI<6&Ri;Tn4I)E-pU zCpD}nW$fm&5#ie)87;_~fXUM`g02lQxinRW{DLs?7K7|*>994CLK?>sX-;K(E*4-{ zz+RYO$wXaJNo8QL+%QOn76Z?!y@j_XRuIAJ5h?}K^@*FQR=d=JE0U4H$HO^`SkWTH zkGm?IrU+~zY%inmnW61LB4%RCUxMgZTDD^mwC-q%;&qj>zO5;aOfX#hkvfii-hVM` zukR#&7Cr*diqKN!`il(1$OOt>;@Zscx)DlKsAD{9nK+P1%BzEi46Io@4M}IY_2-bz9075vWVIc;k z)vwhwwENjC1!;r%GBQvtVZi)Iu9^M$l0^7`94>_gHr9DH_s?H7NgoFh3n*Qz_20P> zxtZbT&w+!5fz@z;Mm;E>vhG?Qmfq_(kGK8)fwFw6I7y_v+>UpwFKXtarY31-Cn#>R z*dD-V@cL7Ab>UDk*g1*^TaK}LF=g@G&{2z|Vye=zzOI&<4v#m%)2I9Q!J(d2aMq7^ zY*~@I7%tS*{Pg_Hcw-6F8^g)b(b->AL~|0%_mB|^%MeIM2O1NeS=w#>e*|3EdHL5dbdst;Il>Ip@e{$UN}U^s%| zr=*w?i}WzMBs?h~Y(bKe;s%Q)I%JD%)aF@A)0)f3sFk}7d)XnHq`Gj!_RaGO?cPY) z6~F+C1Se*Vi^r|95{sQegzVj05V?f!=TdF%9Ko&1kHY3V@S;Rm2yg0wsb%!Y8LYfR ztI=XWK+Qe}*-FzuOpCZNe#F|QHTGrv!_`Gt>?_%?I(;!Q&|HckgpgOlEg3mUv(A;^ z#Bo`SnhOM3mzcd9em7TB3I+7&)NFqHeY~HdI6y4kfR6gl;iznB zVP}IdZL(P_My@L4=h4BBu~Cc^DZ->6@EK!|Y=2p-9I*=3ImG`laHUD~&+(KKv)~fO zZpS!Jm3<8>W+%pk@1toFo-RTSUd!SrfkemrOnOaR99avK!HO|M)`k(aHvR$+pRyQg6)}BX`lF7B z6WV&6L|!Le1fC(`Dhb#I-x{`TcXV<8W5<9L5$=BnZ-zIO4di+bi>Wce4jb5XGx&5< z=yX%qWJ?en&^}McwMg&-Rp39|4|jIM85ow}VDXVr($i(v2$RU(uV-y`qo$@rPYj%} z%nY|CG-nG~6@vYrBhG#=1VsCXEzQ zIY^HnAd*UhfJzK8bT>+O4nq$i-JQd{gSS49|97o>t@r-;u657XxvuM+v(G;J?EGz2 z3STh^K}iwTHISZ@`RK#<;SDsDafvG0UB-hSOfyVPKb0-mR6ht);r~SGzNRVl$R=7~ zI(fWj?yDN(w-e3(FEzEe|r8;h&HDd&mM5}n&`GTsz_f!_GscVlmLL4iG| zQ>M+G7gOtd!wB+de!j|du`HkMJ!Qyk0~d0<(al@&Gq;MKHA z%SCMH4#J-#33XXaKRs(v^FgI{8BXyh@k=Z+a2}5z*)Upr0znyFHtu5Va``QbE~~J& zDPOjxS!loJXG6UX`@P=8J`fC2$X4QRwlge?<>!A8jVBMZ@1_~<%+cO)OBT>Hwu7X# zedN3p;vL{HWFD6&1Q+RhO$rAw!i2X-sz&mJsGpSd*a)shN9MFZdBnEuF=(RXXe|?w ze96Q%Y`oK(ywvO`h$IIJ=T2kgzGs&en{<eHP#79G2oU5!u=@>u(0e zqHuoS(o~vB9>uxU0shc*HMG$a*7*aQsD4UAe~brk-gNs+CsjJ&Ic8&1t}t(rihXQ? zth#Gv{rScbZo0ChzA7BSX!7bHZ+*|#9#*08O-yU7Mj!%dME?bnjdu{u5GxY$B@0XF zr6?wq^}T4>I{}nysrDoYjf|bm@T5Zilfj?x_19M2xgx%NusmQ-^ydY z-fG#OBP-_*?y%$IPNJ9J#T7skLmw05bm2%L4Ui5%v&~x_QrHdVB@)O~N0}$=YU2(l zLD|vOmV+~9hVPLpx_5Rh+LDsQ+4jEQbk1Vfxzjpo9whVVmNxC9T#>>^exB(!5)Cg3 z<6>u_KfAFbcsfZZa1uw!^ijsoJzpq|93E1<%qiw*nL@>5xe_Ff+|eD!#Ua8krp6Rp zWfW~gjJ_=TLhUix@yUB?*KcX-*-&BLyUtbG4*nkZU(KxA|pZO4U zt?TeOf2;TW;xLs&zBS{))9d0t+N^)YVt!dL8*c%NH3U)ctvz9JrIZnyr~FXW$L!0@ zO(s(o6*!1~3-udqWIK#-^!2KhwD$b!W1otJ`SePgP=XcDe$D zqp40jnxh$*(Y6<6O;p=0?i+I|8M=D!Xwc0x&iG64u%A(wJ$iEgAMG#vz~DO3sX&?= z<|LV_JoIp?Uh#Nz_YA50(L4&;Ksl@7`@f>IRvO;-ew)MBvFo6Xj>srg2xN6+1l?(q zK9Z%K2@r;Z!X-`a;JvnLw^a_N(Om@5nSc{`lqzr$Hg!b$wU_||MQat$#%OEI>yI7 zhqlz1e-?#ye;CsP0@DhmzFyerpM>3qG2q7e)4jT+E1H(pV2z#ZaQ_2n_RERDh>osX zsoO?`di{yVGhn1nO#Zg1=R0xbC_{-W7p%KI z@wF9EzI6Qmn5Lb|hB>S6r$L{@!a9YI2J|2Oq~Vkw*qe)@>ZoY{vP{tpCR8`nS!bN% z=Z)l{Q`vNUoD3stQ~XP(q#p!a+A*^G&r*#4+6Pwx?V@23fpgx-Wl8)G2;#?n($Q31 z>^QuH&n|Jz@hJLyh|xi~LgT-zT{IN*vlFe{i^O~9QK0RY*0WrbHR(jpJ#J;)1C*j$ zz5}0-y|oFJCy_x5n!jMmC?nDsHBgPO&k;5>l11s~o-?BZ8&3n~l@*ZC_&vxnOQAaP z-@*24E^#FoC&Fe|Y1DX$T>0@8#ZH5}$I$i+d-#i!1(I6%TL8Mbi~nz9x;mx!kaZ^Z zmB^1cHP13E3SL>(1_DE@;7jb^xdw~aL_hLiV&%9O(g1=2*O|9CfAf(zrs3afyng2o zDE5EIsxp{@xo(;j{ZKhS8gbjC41WA%-4QWz=jU;Kb}lDL7kY-aE)=OsH7xFTp#5q6V3+$214 z9kw_^DyE_8X77p^-(6DtUb_$G*y^#$Pt*__x=j7Dhki)DWw-$6GgYK=qtho%?t3@} z^EzeNf6r80dXTfA@jd6&fY+pd5jAQhFEmqS_ABcZA!5W(STUce3r%-P{NKbE2B2Mk zS-K28LYo<^4yq6FSi1H2&Rg7nkcP=_xOh$om%J?UKLqOh6CV6KLqg&tO5_{Tr#*Y` ztnkBK$&A%2y_!?qDldbyITV4(O=^NVl16my#PlyG)^#3ArR^bgpG~R=5yCO zcbKjk(vFHEpppq?CzJ<`kC$%~b>8(F#|mcm_$@@Lz(>K{m@8QX>$U=m_pWq-$GXJt z_o&!%OakrD(dshlx4sqK6aSl~axE;BuJ4mv1>pVYfG;ytW zrd-8r9#1bx!S~Fx#j`vA@Gvc+L&1N^vi~p>=-;rccrF;r5y+e4PSP-YdJ1s@|1|wz$FzU`iH4(<3INa8o z^o>6|kkt~M%S%%HEyTnzD|6iuuDxhQUJp{>I9L$Uekh(MO2*+cKmC(9cF>-C6|I}} z(EoPYG8%`-dHCsHK@5lPXbHI-gL?LEV zF{(5W_;gwcpenm4i^-(n_%%=uiT&DUZ$CyVXmU8nK}>7}R42A2RaMOK>I**;le5py zM!I{RbBmIo+nD^XWzR37_N- zZ{^ZV@K#a!;U&L17`RSftTr(Ny@Y-_E3s=SB1{SEeKESRz3L=UK786z6`^A>cGIyl z3O@=1E7~{*18=K)KC;=r;)v7zQ1gt@brTo^ozd&Dk1EQCDHM8%6$#KDlAK1j-ZWNV z!lnje2jU9Py~>-KX&UnKf3@cOox1bnNZeqsk2j4m z$cSj?46CfR7FfZW=#%ho%!41M9){;<2f3-fzZWy4MW80l>Wn z0N~18e-|47I%;56O=!7Ye^#$00jX2lo338U{xd8#;8=vBOwkkZlWoW8L`ZmbKT-GY zgoYw0zh`l7>juxzE%ZP)FzH-cY3nN|P%nMIKsm;Y-O(AZHWx?zVYYpGKBX!Dz$aDv3y3(8Lnkeqjhj6k?6$Fnkc3nj9a!sPC_o(ZF*r>{Iqf-Is<` zm%O#&e#x?_K z^)fn#;$M6D9&__hW;#tsIo{Xo=~#={3wlxbekxx?9nsyH58i`RVAvlz1rrp**GL|x ziRe5`X1UP$gv_ZXAvNc;Hys2lt9j+z z+TV1`sr`f4mO_Q4&T&~sx3AJtM*90lzd0t@i(qom$vd@sZ$UJyjs9}3HRdU#!_pnv z4No5uyhtVR{>|dpcqX}bxAxC{lsr&HmwANihK{2fge-=Bq|_cb*ZlMp93t|Y!hhK2 z2KT*dwtE5w-1<*B?!T}8KOM~flIg!>`oCoL|L-gj3Q(HH;^sM&sZ*cltXd$!4GfLI z;MR9RX9wzo5-M6IhYGLEEE4yCTVtS?b#3OaRRk)nD|8_vNvD{Y;Q3FK#wk6fm5F-2 zmgFtrJ0<1XquYXl{A0N`8?3CXn;`E6!W$UDVURCxqaZ?)1s~kJr_=iT`&;EOs5wb~ zV9E&JApCc?;J>Bp&v=Y{l#)I+MvE*M@bL~N9YHWf!tnT@wr!5U7%fe(NiYz7uhw{y zj;}efejvMn9q{&E3wLj^)ghLhiw6z#ejtaqNe8WslPsD4l-}Xtp)R{+S#BGhnDg;! zRM+V6>{#*}r}uRt%_Mb!9@3ajD{>;uRJ4~TT!J>kZpjnp_+otSMu}QwMZ*cFVu&vg zNL_t7Kgwq|>svri0zt);VLgf8OnAR;2Yv0$ZKehz>4HH<6V3*1upVZk=iSlQIw$?TvbU`Xa#ccI4= ze+hZc)8BdWnfsK4=8`6;l4}5FYiSM3YkO4TXkuw3kJ3G3VBSjd9OGivupL#YVt#E# z*i}28wVrnlsr4G+bm@a5axNAWy?cG(q5e=WX`PST%kgJBcm#Q(@Tr*zd^h$R1#QnCp0|WKLtXI!4#cy7#62kaSE=YW}leC^n zhV3%FjG?3rVk2F%7hF#DA7}PvZfC=lK;oYr2H9;dd-f{3n01Z1t@T4F+=J^ObD ztaSaVixz{noq;nUGO@1p}7+64hO$(B_g;nGH#fvCum{9e`~Y z8iYb}xy!)Bq^`7Q*4R98tmTeQnHTab@7TJ$jQ?bGV$)2oYCC7`ed@h$El#gTCSf5i zN9!*3^B>(eDr1wyho1C(>k8|c#NXZerDq5MW_74opht~53z9`1D7To`Mz$x7gq8No zX_vPBQvUFBdtzntns7_RcN-(mpbZ3HYHekIl9j&fv0;ITkA|Z+Z%^*5K{uf1?eX?f zU5aUq;)t)Wd&`LTmaO}{dx)-oX(1=5S-tew*3o_3E2Az<} ztG?hTVOl z6cf(1i&}c;ps*3QlWZYJDDldjdVk+0bbopN#y7)_nZ1bZ17KOx!znV|Pdg2hbE!Vf zTSRh(l4dhg<4Ngeb;^F=p5unN(gk%>S=e1Dr$n8H?Ri;KilcRbo}^f=cIf#F62(;H zHrh85@6Z=vv@!k(es!|sc}Ixd{|rT`&%$PyypIc@Cqe6K0nX%eYRiQ<9STMhc4coK zytcA~*U#uFl_MWz99i|)FlamGu7-Lc=Z!KqvJH%Urfi72&7Lnk>`RGAoxnxy5iETzPi9H*m4%BnHfBrY125Z4 zT<-`jP*-EhhQLtOVmKCk_FrK*=yTLR;Qaj(xzscTJJ8DJa0AW>e}fv96G{E z^Wq{5CMB`ZwM>R5TNkt3>1kHgS`8NNO@fLixi!H}8v_TujZqp27bLZsMaL7K4Ep?s zK4gH%wFqp?@6S9oCG8xwa`>k2B7E}u!IGo5Q4tyRO#@WhWT>W9c`zQW1DJ~+n`&7b zro7L?ckCsvby*_&<74UYr!XomeO6X#LN#rt*)NNiw$*jv=@=ac6HQ-~HpSJD34X5- zr?PuNr#d+f)8kDRtD!Udc<^wpL;ul`6Y8c(ynN{a=G$|(o}$Ol1gFGxO0pM*rmiX? zi5SS$vXa!#S~b-!=M6YG^Xfr;b`B+pie@Ig+3{gGIC5t8m-7IRKoyeRfU>F@JaHu} z-J=7%4n;8IM{Yo4S1~5EEZA(IHAgaw_|%-b?fIBQbt&i7?!HTzuc4!lXE-;lZFf)M zBTaB!vo+r7X9HxeI7l@t6d1#rE_QlrC4eMET4Vz9z+`Wul(B2^_;Xjy{Cis>wq{&C z;j#KDVyAVybUucIuDGdW^DPfVVU%P&;mQCjrxyCtIk`hd`HvN$7#?p`NQ!4?j~w-q zo9arHkd53XRvO3?A%1<{Hl>d|;PdpHS?vVZ^VSJIi0go5RFH`G@@UfL2s$gQRr;Mx zE2g-b$Iga(6x7kj&H$M}*=Dr3>Yc=R{GgM#2-1pD=la0qe@Wv225u4GUb;<82|0av zPI*gSv3)Z9k-w??4Qy(U6crL~brW~_H|(J@?PK(3t9OzxAghhF-7cjK7plH1OO^cz zpfv$Lw-e4)F$0KZq}8eSErkJ*v6lAF6w@TUH77r4;Kij` zD`$>u5c-@}%-kgjCc^{eN&$?xr>iFK>|K~ix`8STla5w&;$GNI4c_417DOvsG)WlB zaHKV)4kC1!5^;3WE9m2wb~O~UttRmHAiLkQV@h*Xx`$-cc3H>*c7dwyDXs2JSGyyu z`_;$xs~1((^r*4x1ps6y#=8b9S1pq_Ai21l-!>ll-utjDh6*aViT^k$KOQ<>?A(9& z6NsZYWNkI{)jjt)->iiCPY-PpNBu^pt54D^M^C*i&SPbDJuZ)frNGWr_nX0;o!G*P zCufJjaj>tJ-n#{A1?j1|4UWD&T$S3IS{`v@HI}j1g_GRB35fPUi5u~M<}iGa07^HCPL@to$rC^fL=J`iKtT0R;=04ptOu*iO|0z9*6RvTFXs-)+@m^J3kK%@|hWZheu+l z>?eyseepmq-?h@$VffrmY-q1kxB}Q}wW(^TvQG86NC7{Nwx3y|^{(aB_i2d}mdy(d%GUHf)s#DRokS7YhU|ZF z5-32!ezTr`Bu`)@-waQj`G_N*+#eEsnpgY9Fw^ipsN$`a%I)4_OmWlyJsDBWH;s+i zuUWAevp4s#BNgOZ>r60ujV%ODWy427ZS5t8mPD}R=WzepES9U?LQ10=LlqNVfs{TD zGZO`lJ}Scf2s!C%fry3PFtn7)D?55CYXuE+*$UflZ_XiQglD7Xh`(OUM()}SwO#(Q zLiE||jR!XtqKKA@F!=l^84w${y5{^)j3^733aYFhgEMMmr z6lhE{EY_1@a5IGhG@Jb0&qc`>w>BdVLGGZL@{cC%$2sYRFC^<0O6w-|rXu7R0k~*; z>T&Zra4pZxJ-D{;l@>}am}XHL4Cv$|18i@t3($r)`LCbI;>ZroTBAIKe*eh`Y&MwZ zEbF@5u9!l^BTS;X{)oY++UtH!%GD76IFt6aX$oV=LTL>eUQ9s|o4T3V_#GzQh2b)3 zuInNtdbWJ`njPw<94b06#oK4wF`D1-y8tW`orS7!$4%T5lNAlodXJOUw;>ds@9Ws3 U^twxL4D|20tddNjlySiS0isNj6aWAK literal 0 HcmV?d00001 diff --git a/windows/client-management/mdm/images/configlock-mem-firmwareprotect.png b/windows/client-management/mdm/images/configlock-mem-firmwareprotect.png new file mode 100644 index 0000000000000000000000000000000000000000..1e315bc4b1328c55718d5ff483ec932cd3b75c5c GIT binary patch literal 14066 zcmai5Ra9Hiwrz2Dr?|VjyA?0)uEn8Pp+K=>#T{DQ-QC??gS!QHc&GRNy^r@8BP1Ck zIeVX#C3CGgcesj@3^D=%!iNtZkmY10)joXqr~z6dsF?V4 z1iXQ=5>piW@S!>e@x=rhcn|L+tK<6N0}j={$45CeO7Mpd+@W%kVqZKB&oUof^%va_ zUKL8Ncy^Ot*f}&FA>+c&#+KwVgVfben8(=SxsSG#EC@>v#5-S_CxxmfZf zV3A~n;`GiY1!@_1{YAPF=W8V5!qBs~ z=^#SI;`|^gQf8I$fl3KIMo7 zZ&Cz5K1*^Hgmu7=U(kEb|G+JgfUK6V$H0V+ZMiaQow(GG`WXm5B+%$(iDA}f$TeE+J+AJSd-<87K~|tc5V8~NO_KtD)-i$X|H5Yu%%a26uK7g z$TohRfm-8)vX!O*Ei!=fpf2LXy-3|@?os%B``&4Ahg#}2pNjj8(Pq0O`V`;6Ccd6K zZGAWR@bJ*r*SEX7J2!__Q+S2DtcUp)UHtZ!vy%UMTNR3>eMU&ye*Fp?CptR%=KeM+ z5~-4rWpQzS{)?7twZ7BM;n@)#J+rBpW+hkJE1RI8AU{99<&P`H<#c$GafRTReKF39 ziql3rL--j{cz1!4&NIQBO{p`|#ww`C$7hlI(gQ;wudDWZP-%JT@R)2&Ow6EY^CoGK z!1wRpXPJ||+XayN!QiRBKHfnMY>l^$w~AppFNNG?8c0aUpr9ZL35gtExrYUNN2ZH$ z!HeqbMg&927K#!DL{ywM+xadDU?t-<#Lm|<*GZw|3a4Ua1-UAfrU#9}LfuptklvolQ2c9xp-$rhbNiTa{k zX1+eP`$VRBg~ScF#a8>D)i0WvnjOU^*L68L+Bf-NS^wr}baZqY4JGkA+}SZJYdxvu zm_-uCoqFi$5j;y@6 zl-R7;`1scep9>Y-s>I>3k)cu7DJ2UF3r|m8r8~E8gEW2j_o#UV%M+O*&zFNF_4N(x zP~Bu?JQe=233wuWT+1Mk-|cnj0gFEE(C8p_HIzVYZS5gDBjf2<>bD)!okbppZ|?5v zO8o$t#-VWs>BrH^%ShH~0E_{bBp2f`UMZppEbM>oLMlRTUM{ zdI$(t-@p5cONeg>TpLPT?yn2Tco^k+LGcR+zz?0DpMyY#>UR_r6me%loH00KuWeX& zIl^e;5!}#Jx`_WAfyPs{wR)sza&-^K-urC#;{7rEeQzz;H9$;^QTJdXyVLDR&0X;f z_3e#hGJ`M3EH+kk;~8}Cu-4|hceUsLGA)uR@VZ~`d^_n34-11sMtNMG^h-)jOpH&zZohbsVd-q^o}#9vemmCc zL_vasLqV`ajk9b7y!d@5=56aVl>=DV`O>*E!) zf{(|_epeTH*L8KAkp(xe+Yu}!^rde*#f1on2u;-7)cb|XB0_@f?83r#H_Go6+{{Vw z7ye*jxsH~anrul`1x8vpm z-pQ!T%ggsGmiOnUWFsJZy=?&d4jY1NBnr8_$P{`$*%0h(sTmoyGtz(FtyNZ6SNDG$ zwZhjq75V;j6Gh0gyKT2vktyPz6)@|9B>UbW-HKXXTi`^tN_V zXf$zPoggZGU|?W>e?KWHsiA>;26EZ(m#wH0 zsQ2v)zx2%b{$T|z=ErB)&#n3-emC94ji45JDlmik9itn+_eM$FITx^!GAm`!vlEKV|kk9$)No8liWm}u` z^}bcINPT`m+s#b)))qQKE|2o7SQ647O%eZdMv3>eN*-gtqVgzRmU>8vEkK=4qRd!X&cw$xufU% zbB?cdpRlpNu9Z(W6&Dwi1y}jo+uD-fjeY6N-QTNid8PDHE&aRlwaBn>iQ3bB*u%R2 zODmnH+=VtN5A)dM`*|>~@B^5_D_rrS;~FKrqOR^{<9+9yPeFkfAD#HE*2*u0P@?d09f&5Y^~qb}FUS9SrK)~@pTjcW5I{fdKZ|F@TB*T}2+QY|CDy*)K6cs;j} zEImWtOR31RB3eg#Yhwsz{WhoVJ9+ZRe-v=)6I zwq#h^uMpJPgoPhx3;hX*i7V`9tvjAda&iJ?rSEQUZ_Rx;=JmK7g?rOeQ`tm{u0g}O zGSdZmmwI?5>mkQWo63P&j^1LJn)N|ClV$;HqaTM;b23l7!iBa>wuXm?&%P36``y|2 zSP{}7A|MENx&-fy?4@=19?45tP!;s|55(qpC7-d?935I0+IM(fntsU>VBqHA>Uf=4 z1@daE%j5N*uC9s-rC)G&Gj09s$r%|>D|VIYX7SYqvm6;vWv`pPsPB_N0?eNj_SuQz zd3kx!)Y4Shu}T&O%)J$un!2pV);*%6&(poW)2-XX4!MdvrzU z*fz1Blb46}&DPF#L-_mCePz}SDqKotdTCjS;3Y=BANfh}BvbZdvsW4ax3`xI|M!(; z4y&cMwdFQUBBH&M9iNNy_T|)OW#LDt!G7*27`WP+8unNrDTbQD9xF4Jy>{y?ZK-Sf z{bA{ap0|^W-Nem#0Rb^ga!=i42TAbFcnL-0Myvm%c0ke|mC#U7|M=>FjP(G8o5R-9 zdfKx@8T1`_#xB7!?$q1MTF?I1`@~TN1xA`rALQJPoqqqa{OXPjY2EFMxH=#$v;1*< zVr-@?qi@C)cS6-Z2C0?A$CRCh4bNmYSYJZm_4PXdc}(#(KkYDJa=`W!CsxO zoqlTn+){9ezOkmPQJ~*c+g2CJpIs&&E10pdPCkp z2CqW?<6?bVPP+#O6h3z)pfoFyjoDc)l3CRIC$cK42hpP!hf<{c4} z=Xd}m0|NsO4-X5AGN+NDA#?qA2?@wFM@PrxaY5{&)LkKutGM0ljLoAMi;(^hDj5e6 zYkODKTt3;Qv%AR1$c&6nsN(?OYwD%sptBW7hC zD$fWgM6XoPyu_j_?)n75FppUq`l32u5Te-t zK;-dA?O;Uh zBEt(Plosdr^CB8_bo7G#uiWWe!vM~R-vtm{UdhGTSt83;3b0407<}SD9#t4Tz<75I zo-5G&e+Zu>z+Z3+Hk%8|>&sh9BX&AEKs7aLNZaczEh|Y$nn|?HV~}eAj`*u_>+R3T z$c(kSmrqGkxH_AbMo=x^Zt~-ri;D~C6HJkMD=VAugdcp&oE?kxuVC)^q_p(-T0N#- z-Ky1=T8graF$+ygOL=))4UKu?cAu^)9&T=xmEy(cAI+v|DJr)sh#&(a|1Me~2!nIk zGgX#`AU0{VQX}7`sN1O9nX8$!6#@w5OnzBbySxq93FxebhWhneg7>Pbs-dBwr6p~; z(=!hr0Ixoy%Gqn&y1Top&Ff{)r>}ZqFk#*+!e?pzz(H;=o!mte97PH&9AI^1@xY;? z?5nISFI=8s*5|!&QB+Os>+kpQ@NoVtPE1158;~z`FLNITrR?JBIyw%#TUuLj*NysD%|C~R!0cU^J1N@R zf40!zYKTHYcEu%PBIq3GGM^>Tz=_IRJ;Re*^prX3|6{@$-^V`q(IG9jkCL-#kg}qo zp&~c8wzM_9u_8}{|ZqX7o>sR| zjn5x{E2p?sT$~>2yS>BzUNvQEaQ;yr2}v=g(C9O8frwE64-enR>>3;lq&WfYi>g`RNN^zo$8X7P7n(f@CqDOu_drx@13VwN++% zdUx!R4Xy{fu)YK(Tia*kMOKs>r6OZI^)7s7*BBG!#+PAC`@{1iIVB}(p9pnLadGjU z-rn4t9CHp9IbtR(92|KKN8!?B$8~fCUU8P1s6orm8YDvggt3qS)?Z>x-)VJXYU) zDk=}3r{!9!5eE7rPBu1Se*O@uKRG#q?Bwj!)GJ#f)2gxOofT|bhHbF0p+FN>N?(c>5Ypmp<;-R%kU7!z;`>=~vWkPDqtO=t z2=$GXjS%krk~B0lY|5#r_^PV0Hz_H<(J(R7!ygNaxgLc(+;g`6W4^_`s^bv1Qu%u2)d7<|m#em?#RgNuMeR*;jYzSAyF-Q!GWqUPr2r!T4N3qOT~ zguwf?kdzdOBv8(Q!YBb{u3~I#ZOv+yl917dRSTge9_I*0IndtG;pgTyCUi6%>-Fe` zF`4r1_Igqd26U_8CDnB>40R7n6_x zqvwW_l2VO3G$aHK?Qb_3l%lS#Zi`TSLRv;#4|FO%es3>@l9imeshVZT`r;yuurL`d zD=$kYsUTw{T0%MQd1FI^lytL1Lq$VUxQ&C&#Kf=%@0E5Qyt;J9kNnc2utajwuI$^1 z$wd|}DlUHdma;NInniRR;t(qISoAV|&ciepDk|!z=*SAjN^{FR8XBtV4D^{X@&NIK zvCoqUNlEJuS1>5#tjvceB&0n{bJYe2NJ!!~b+v6ZJqQ{qDq*;hG$y#{#5x;O+S_jA ze2X`A53&_i%cozo0|Ek6(N#@M&dYO|#-*z!#+w_>@Kf;2{+VzNy-|&g#VHrA0H(S*IH1ppOLW^7dHd+aF@>CTBtWup2{M}!Y{*j zcdtP-K|MSUO7=fIJ`@zL;=9^g z7daXa&;<_ttgpXil%uusbtx%mNa`L$bL&ZYczT+jTd=S&$Hv)p#kKsBpp{o>g+`Bw z86Qb#cL=Ojs%N75vB#s+PMM~zsP4=|&(#$ZQXDbztG@ncLoq)mCpfRs*aKs*&O-{i zblf}*14m&~5ic!mQF(h%n}L>*ow5Q=&kiOg$IPsO`Yd#C@SC5XGyElw!@BAD)%8`e zsrKP42YVI5Y8fk0-0snO`vZZ7(083u@8y9}R{>4K1tN9uF8o|5OebCUY*Of^&NKjw z`t$Rt7CRq$bhb~=k8ba;3qh7^_$L@v=+|00s?Dq-2Zm(p2zAqz5)wi#RMAdxI4Mf> zz6-hwS3Ts74m+kfIxMiTA#rhWI%3XoqqK_nvo?#I4b|ir{LYu~#dHlJEz-YsLk3_d z7Z+A=Fg}SJ*K^mSsUcAXg>|Q<>YNV8rcV1n^2aF4=ACaEmT0=zl#E*@G1W~fYvNeu zm(^hf^bZcGsaMsh#+wnM@4RIerqSCDO--rv&8|&JvQkk~)w1$b^Y8K(6k2WXY!|az zBRtc6o5mPq)cEr8=;&xD$d-y_L#(OxZm;(6r_8`Wf2;xneJOPzwcK|Kid-bFSbDzS zmsVId@yn!X#VXcT_P&8wVm$|e10gW2LQ!e7JT#4kg*>FJQ?V!3c3){6Ssx5C&!zDK zPS;LbR`@+k=DF$t%!iEZJ|^r~@9wr)BSeu~{1^W9_Zj@}oNe-+MN0)Uie8N0iHYGC ze9g;*gy$}4UA0zu5q55Au|Q}NB__m;k=AAxvXZIqU_pCGSy*U#a4WD%vEbg{-jn^< z7Ppf4P9YWCM?K6$!;}0Al4Z!z-fD{P02T%o4aQx@S#J1niC10jm;y#S-18o^?&F0b z<6QmhNWvz$Yq%Y-bGpXpJvKCAuBWb}BZfRg|2r{LM^CveA2}v+Y-}Pf01iV_w1kN~ zDlw2yVRS@WzoxckNflGd2H(Rn-l@E#Vt*j*m>x-b9x0fKE73bRf3_WKe?K9yb%&2f z0G28jF}nQW`MK63MMDT0t9+Q-Fl&BRKm+ocVe$;mAH7Ym$bTlVFv*y+m_ZNPZO*)kLC>U8oTie>wlDeh7aJjeu81cYUTiFZ`Ex}dy>>?wf zun%ID>~2+uI}gOV$y`8@t7oOzn)wC=LE6+-RAgxbNZK4yn*Fn)VwOv>h@^lp+rXiE z$nP?3yVMDmj;4j>`F?RdmEV)(2AZm3-5I~pWQy&v9*-D5enwT$-Xp!mzj#uvWX zEV^QEW0!wU%S=e9GQm>0_3H5e ztB$j#p#_JCNUqP^%BuRa%5W`2v~uMA&7ImLt_l|=mFj&B63}MOeOZiKpsgH=H`_7G zpX0i8w%E(xF*7@-Vg!8^WLakCjmT76VeQ{CA^W_sa!l{VD@+zJmSL-Ka(rx}#>!4E zh!kH^YWI8NDebwL!bII@Lv&rtq0Rjo#tv;BA5+&*lV6att*%M(5*vfySB5q}kU(D9 zg7PN$?P}G-^4Q{#%6uX_o_^&JEIvIy&75*`Gn!GDMUs7wB|c2J5vBfwPyBa{l!P}T zBYI7cJcBTmNRXa($V~Z*w*DC00iR2AMAOL7(CP8{-xe|&^~5P%GYN{-kB@}(%_y)G z1E(xZOfGC&KVRb1)MRTJZIOtoO(v_96_u(t=jP_v7b&?5Vp4M$%bi*!iZzy27iX8x z4Vm#nSt|Xz+rnfteZPO#*%?Cna(k*UR$|z28JTXs!xn@uC>mJU0!9<`L97|68*Of}eMG=bm^y0+L$T-M=(e1*Jrz3vn8FqKvn zGjWcM7x&J%;Suf!-ykC~Gcw-YH)rG4I3E(?k#<%mB9q55L8Qt6jj~vqv2aM(^ z3Lc)FJDUrz{%Nd?sm^zn9~wy`u%`?g23toi46OMNxh3dX{}w_gMEeJC)Z(iN4JnTDEbd-^+gBppl4aIJ>M&9Ku`JjQ1Mczv!EiHN=6u3DINReQtuHqWrK zv~;gLe=q;427%v2d9D5Vv%I4+iSrPGQlJGH#YdILR{dF^dZEZLBc7}++&5WTS%$)f zCgI@1K0V``Pq?{%!;f(1+6rBVGxoAbWw-URNktdE!yxPv+>sM6^xYgO8KLI}Lk3Ae zWuX&BBxGQr{6r%x1@O*I2(N;I{PO2<7Dm(E0)eHADjahw%XmRJA74ouNF zJ}%BMJqj+3dCC30CEn!fd@IGH)8nrbsqBpsITeV8?d2u0(PEn;YrerqF^8N}3U&&_B&b)^97c*C!F%34MKXJsijHff^pF0^u;1K2(c1WU>!MmxhtBcg1JE7?Z`Yd3mV@~KO z+^C?eyrBwSUtfpIatQ=qqY28-1uj~n@bfr=62AIsYiob`f)%K&q?B~AR3m15?Xd}^ z>@R?jWw*pvTRn(VDK4Em-PG*76LQ;Zps)WaFj;wD5{!+FeY$mzCV1=vl$5?(G{IyI z4Gjw`EAB>4WjrJOkGkGj7Q!&I*!wh;e)PzT>*3&qw2afXXvM4 zFuCVrN2V{9atL6G{YE>~q)h<l+UHZ&w_Yin!aUN1zkzBLpP{cFON*TuzkRp5^h9~&EMR}4KVGw5|gwnnVU z<4o69-d06L#nmErX(y)FQ+CO{Z3Dhh@%^2Vs zD6K91Tg^s8Ll_YsAGe~rTI*T^3Gu>ES|TA42*6b*7B;f(*yM|g11(*(xTGv@HZ~n~ z1I$lYb4zn!y%k6J+z@zw_-CzAm`=C8VYd0U;&d<0%?)j|@HYi!r)Q3jjGUgFFjN*f zB_#k^pxV>KPnbfey|A${KR>^zX=*QRVq^^HlS)cUBYyolCc%pgi)5r{K0iJW2VN=5 zA|ayY4o$l5won%~@$wC~!xxp7=1&xw|29gQwnpJ9*jz3pHtpVMZs$8oGt|@5OF1ZC zZVvXc-=45Zwwr(WPH5{#u$2UK1BrXsbEBif!*ZXxHakFX3kylrm&1wqiK$06pq%mW z;bNfl?D%Ktmz=YK`ater{XmnjL!8n^ZqG2wd^#Ao?-kQLJK!D&)f(_8p43k?v{E4lA0NJ>vji6)Mp2DU+pLB^QIMC{jC?PJD>8-vcPDXhu$sFGbAD*6?lOEM#Y=)qDYZOKqG4M&c+omun-~G*vljwYT zodfv5|Lq_(HT9f<7^-87+p=g;uPUMK?dfEH=SMn^qqK~SQL{^Mw<#90eiJJzE2*Om zCv0ji>BF;L`a?@g3qUoXRNYp-9ako-bzWy?zwFXHuNl|kez@)FnVOnnsBBX+GMZ#l zB=dX9>9MM++Fk#)kvJlr%eVO{Jk&$a31fDzZT86A?)4SmZ}O83 z+d)b$E?33sg-c!jFPDQn4r^Tv0GabM6CyKitA3L!G?0SI)7sXyCtz6a{vB`pOrQFI zWC)PE#5p)PXjXpfdCgX%qGqSX>m8k#n5eF18#_5X>|$*O(!#UJaTrT(_ zrss!;v@9}6yg0o3yPKQFIy(5x-yQ4iIAwn1QhNr}WZ3I#Yloqt1g)*k9z^f#z#& zZmzGN@h_Up*`P@X2ul9NnDZT)uOHA$1Ery|yd2=}ZSCx4|J5rVR4iX9so;Mfmuv#c zQDtQ%-NVw-QeGYjqTB`9!}+!)_DImjQdU8r*?Ffh2f%|DqLz0jPL4 z*Vl+hNSq2!ySwI4${{=oPc1F{P#b_yvCt@3O1-@lu?+P@jGY_!YFcDcy( zxwq0hzZ+fx5v2(t(Z5dyKqO8}h49wY%k8@7v#f(Oum>6Ug#!1@hs;kd+G%=UZD_ zKwSp%4M2v&3DeLN0vttM9aeX3sH1}e;Dv`rM`B<=@&e~)Ym3lbo6Zd#LkSRQIyPng zh7B&BXECXmL9T=+>ED#CK6hjYK57o^!ai2abZczDGh7*buItTq^@hpS|vWau#gr8W6o|FC5{1EnO*j>PDlcEi2g?QVQbPUe1Q zP^#hplNvOUA(+X<*5IkvvS5vZ4wr@8<{K*vNLJX`Vv(|AV`G6Tx=GcW4uF(1qEDYB z!N5!~ZY#TP^9ZJUHa~Q8c(*bydNHOfn%O?9PO;50Th_)v*52@;$a?>m>%Nt$*~LM# zFkMy!v5xBvv;UVv+w2uj0U!3k4S`wBdlNcsrVOxaz!xzs*$o7JR)TdkY21&gSOD#Uu;}%h$!F#&;a08y6d! z>;ZsrAt5l2Md2XA8|M7k+P zt+j2=j_$p$o~Q~iRu1ayjAiTXt`~1>E9~*xmuFIprGEKo?V6dx$AvQ0WV1w zk{%yKz<)=u+8)VXc5nr!(8j$G4Lf`&{zI{nZxlrVlEavoWN$-m@V}KB{l=9#WLW~O zV80>|ty^7bs`MY%3m3Ms++LWMC+j^qKF)RGb**f4`VjUO5QuyE>zCq}K^Ort3Za`{+gKbL%{7hS{Xm8{9mHWC#TRZ&4hSE6#< z_xR<-(QZZ9iG89vd2!b_@e~H4_ms3n01-|%fe!;|dV%>T)FguBR=4fXaJ*m5cu_~Z zqKRriCCJW>+2>$qFH4IF5AXJuCSzp$Y(6;^b`{VKp#uR01Mui7MN^!=o%U#^BPPPl z)sH24pFK)f0E!pu`s%VZ6*QcnHaQAI+?{^g*0?!MA?y9mTAul%k8hd^k?doJx4g*B;c8Jc>PS&p1-StD{LELey5Cch#mHv;9aNIp-qC^;JB^v zn>SA=R2L4Bc4$;f4L~DM0`hgEkt3efsc;JF$%6jOsr;4Y`9H?A!jgQ9gxiLNfy1L? zoq6XrSDmu%F!;jjAQPyGg#yK)s>p`;r5;MKIC`jXj*G$T*l3QqUyyI+<-uU4b?$mW zd2{^c++Y%s+>jy1*@UGVk#md8QxmtPj@oN^SluT@jyM;fMW+CLq;-}cOZ|6%oJ&1+ z<4=m3;`y7884kM0rZ40@TW!X+e>FC4J?zpWrNW(tz76-lD3;e9RNFbC5Zk>nX~N zs(Q4^@ZFHkn!GrG$D9(s-a_&{Is;hxJGnBlf8#6~4yoU#go=lEc>tc87k<+wE9f+1tT!s5DH>TSrmkZb?um5|r4qki7U8qg= z^3Zy!Uz7Wsy+qU_(MaV&p+h0TmCU zrJ!fnR`h2wzDjSz++HdGpsrO~1xq<1yq4P)gkrYyvUu1p8j#zHG|cU!hJ7ML;6aiG z*2ZB5Ci8*@BTAsOUBz*QEFLc9tU}FhhUFOw9~|z4m{rWq6qD;(3a(4`YU!+7i9(QL~f0SGVYb@6AC$8ciYXNQ4#)*1pUVrPeN^?DIrzi%86Kwnz_NZN_Xt@QN5 z6H5ZWkK9#`*YGuQTC$breiHF=ZHin&BRvTo+;k@?qL34~b#4CR{G8G4})8O#?}t0Y-2ppq%wZgp$`@+FrIQq8-x|? zCTZ*8F^`Eav(544I6#bqW98fzCmjsT0D4^%dQN1)iLkZ+IM}$1!!>$$46-9McNLV2 z0uQ+hOE%OT4|OoPnrbPm{0t7D{9)~@057yrKCW}dpn8%Q6Ax0ZrjI168TGNS(slt# zolvZBlW;53bU0XaJ`>cqdBx&f6g3J{G4>kA4b`&+Q^Pq21V5gHJSITU-aXf*v*cq< z+`3oGUwUd`7E_wztNsE(L0Npp9iA~U63(Nx5m z5iy2;)*)On#bUl6>gPq%=7q>m$Ij5)vA{c4 zC|V~mW^%i&844~k!ky_q?%N*NSBt+(?lOD;*DZ0p&=(!%@kJnPGZ70pL9#Ko@3h|! z8nwg=(s4ZERO-6m6v)Ii_nIADXeq4ZH8}q@kywr{bc>cSu1aX?lGHKSeGWx_%{E+f|P{)Jle9VehsC_U?AD{<-ZqT%7lbdu?Y8QeYEz`%`UHv#v<4oQY zCxMZP_TxoQMIh|I6B!J^c1M*Nxh+^m1{qX4!rkFj%#6jPWpeo~bWl1pp zQ3CofOEyDcENJFOz~P$2aaH4-nA|iX)w+S_k4-VIo#5jIQF{os>4f$dEag51G}I{U zuBfY3(WpV@p(3CshQ&_vA+Ij)`HnaZ5yp=cRhqyYmLRDqZ;6ut*RGPYo(YRc{Kd?$ zXo4y1yJ_hXQErGBW zVYsH%52RsQBWA!6CkkDa9#*t=IC*iLf2V!m-APUrz<&rp(4~qljI`H{Dp_Xna%QB+uAw;m78cs;{g`Ps0<*$ zh}sX!fq1q1(|334DF}SBz=kueG74kfY>y3*IH8&#YTxe9?oE@|OW+3N-Y@Cg>OZ@e zlAbw%uzNYuxoj#uo@# D(wGlP literal 0 HcmV?d00001 diff --git a/windows/client-management/mdm/images/flow_configlock.png b/windows/client-management/mdm/images/flow_configlock.png new file mode 100644 index 0000000000000000000000000000000000000000..4310537887bce7bdf9556303dec470edf8762f13 GIT binary patch literal 27467 zcmeFZ^;cA3+dn#VcS(+llG5EE(jC$v-QC?KB_$owDbn4gbPnCp9YYLtw$Jmv-|zVY z&W~r-VzJ!paSwan_jP^hB1&0N3JaYK9Rvbl$w+@v1%co;fGV}E4bDYX z>LcjqIK=_*4@3(w1u+n)CLZI_=-&^~9Hq5gKp^7x|Gwa4RNtM0K-L>FpTyKX4Nf{D za@9XCo%y^Z_?+?Wb)5N(3vk56p~DBij*HQjqMT)W{rX3yd=dw$H2$B&kiW0_xLivQ zvs}jc_9&ts^c%j~X>%%D&*&=%P3+y4O|02ecR-dHedp`kPnMtos|5dEE;0n7(NR%R zEv0CA1O5H|db5a=#=wi&8s3r(c#&|y)u#ck=nRmKyuAFVgaU|(hK6Q0pC*v_-`iDu z1oPV3m}*GfO8hWz)<;ELsn5<8RL&xY1)UjRg3EY2eobl2Gh4M3jitiN#;tvaoGGZJ z54B%8gr%g;H!dDVK!@Rca#gvWR!RDBek~h{jd3Xs`uiy2*8^i24GH$H839u7FXl<^A8Z!3%XcO1T zr)AikCSBgvT>`u49?IxyHkthi`kPvep8cSBrzT#Ufvq>u&>;4rE#@^6F+%zPhy9*V zh%Yv)$XbA=0A;VzLe!9zWaRGHhb?uh@l(}_)a~N&#RLY zJOvXlqRnxEWQFTOF3Ybk-|Ny>iHFE3g+Lk77`N}c1Qk~HIw3aJ$r&Do<24PRL>4au z!an5u9XA0V%`I9>V#-$5a)}3MSu~lg<-99Ke+Z6(iBg**#^{3eXEr?JD=b6<>gXjQ zyifUWsEQo|Wb6L@A2+#mC`wQdy0rZ$8^uXwoH~zBEmfqjKK{1Wt~FetkAwcX(MU&a z(c)m=-P%1}ieGy6qPNio8P+;pymJuDCsW-CvziTOy0lUpPRp+c?w$egt!>Mf150#p zuIop0+CdJZIAxCblZFAbfu~@&{m)V`(n*ml64Bdumo!L-^|~J3`}(+BvuavI)^}A-s2V>0`L6D*xX_rm zp!~aiTzlyk(~5bp?3B(<^d;Fi@j7GGJo5wP(#B1gNb9$7~=K0xn7vhrMVm4MZS7p*3Y#;g^!dc(d z#_QT217fre2($Wa-}e6U$kDIsqfIh&P{P&Q&f354mlgWt-9hMb64~Cb+qq9`}bO3J?VV>=0 ztN8Zp1Nu&B zk7Zu_SvkyX_iG>hO(1g5wWBjF`<9+AGsL*AqE99walbZ!B`m_TenbZav1F;{{7_S#0fvy`m-VMzGy_(tJjHAG5G^89vfYjSyW z=QEV@T65#5LBOdWb6|ab4;kE&ZfLL!nViF(fn7DI6gSI$4aKiLq_vMRDsLvz&`_Pz z(OA{^yzbwlK58pQgqA1K@gDBFdvXTR(pNrr|Ldv!NS8(^dH<*8qU)bFZ;F5obJu)j zeDiE`$QMtLBRw?I{QXk&r?>xPi?QHg4!_aIG~&C#M|=V5uD`M?GT>Q zH&c4O)Su;z>%~zYQ?O1YR~H~B79Z%3ws)IsY@_82oksW*QB{X(|NQEx?^V(o2;xeldE!YGOvEF! z6>q5!IfbosrEXVN(IynGx62W>DjXFrf;-%4m5~>uUen7jQS_b0r@E}Af%WER@xH4f zSfD6z9gyR_BTCmuN}h2%cK5gOnV$~%^Lp(!su1eFrUgpe1^PI%{V=l?tW6VlCE%I7 z>x5)>-Y@#*{n!Fkwe?2U7E4PKQpq=r}<~7Rko@g>0?v8)cH%mTdJ_g{wsH!aAfD%m-O#?kbIJ2G%>|L|8!d5 zBnbRzWf|a5<2@R840836;%UQ+S6{H=1U`vR-{T>>t3s&IGVdtDTeAoH+ zhyNaax<+Q!vg1<5R7QanA{mmX5WIIV(Ifyj4AYLKP_e_up^ zZMY%r2QcGg*2%4IE%?%GcL{f0l{g7c#M}-%6!ZAk3%38Pp?=er^Zay-xXv;!VaJ#B zM>JNkI(FhGSXd}fe5^{}Rewx_DZJmGF>mig=JARb%d{W7+7`%^>WznScKA!Nz@isAV~4gL$qsW%-D7|XU~g|rf^Sn9ydj8 ze14TzO<)Ae@*`luaP~)x^jV3K6-hw^tzxrCdEL$Wq2E+@RbHJqUQgvKjj!NMv}{A9 z4))x$2sQZ!k8qy0qL^hPTD~w3F28~vxl#RZ4YZ5%cE_4e;~cSB3f!2|y$341L`sz> zfk(ltL&ka&JQ*QXo4#oML{}^Y_ZUT%*6N}e-?nb^h5F#s@;$v5R_@O@Pou<>fMsL$ zL;v(~JM1K*Km=yv;wF9b$#06{g&RI;GiDHk!^+vhNR zuoo&h9UNWGwiJ2)h-W35*^9xlGTs{nG@dr-B)EK1a+0sQKAryCeN?x&e=hJ!j7<(|LcMdt~NJ zpB6I={oWV+!vNkHpxATAgJ?#al23)Re^a@{RYBKhTnRB1PxH=j7XldKT71}0PCMRo zs&tL3sajSFEG^Jj-PcTZbn=%HVZ%tjGe zywcil-W8K@|K$5F8QcmAomfi$mZp}gzoM=@)f;8G0<+Y}sE98fG=tP+YR}f+%AT%Q ziAemYH_;3?#9%He&4SNv37v8Y25LZwVC3<6*B7Cr;oc6JLd*}xx#aiMwVlxgl{IAr zjh$6zpVihOE7SLLFe-zEiO`5M`SrY58oM|nBe9~IHp_s-PNz>ZxDmS>S9rH@>R9Ac zr#=a``)DaNkcgN}TH7OX4A_T8G(?4UTUDO2G~NU0P;!|!yZG4|A*kw zG^b_``(zdQ`PJa*7rHdUhb-p6o#{$(*AWk!4Dj@&ZOpeAGI>vhW}#i@vAIgF61q}6 zYlDpN`*7tYn3Iv%vWD0cEEvt#<#(g+t!{YJ8gy`<(=_o@ur{4iZ8 znDvn&Zpq?S3Ni2D*3Mlk-l47_5zbY!DeTX|y~ATp_D0Fs63{(|)JwE)roNsB1d!if ze06mH{Pf6=l>HkZ8Z{MfT{(4$GD1g^{SJO3{9ysL4Df79 zNq7o*a2=@V&HrFmN)}( zU_!mORd`pTtT@Nh9=xVcDEs>8V=Xm1TUnBlhOQhJ0yD~?+_nxKk%bd_c9vywglo80 zhJAQSg9myZN-cmPZP=u3**{hWb$!~m(i}mpr*xLyn|Gp$iMK6TnGe~N{N2|ZKp(&M zE8436e*4fvROHxil5CO!X>vmG9BI;}N=f{*BVPmm6Yr6x`uwc+=k>LPmHRsFr*Bd| zZQ-KRg<~~ni*60Elngp@djo;S-}-xB+L8|L%?`t5fQBSx;qh7jVVIg;Tu^~RVYuuz zs(ez(G|@-ioHDK0#agslF!^$^DFNVR#G;rKOYpx2O=oK=y;d2u+UDvB!%%io+)jW_ zo_GjZkcaLqg1pZO1M;(*)g~ubWQqx+DmDnskE}%ci~e%W^0;v~xvruzA$7_V5uRlQ zOt}#Fk{m1i#kFb92*;kD75UXltO}W3`m8@cjzra*Q$ZQ$K^$g)L60=7r|B9FllbiC zQUdY@9a$mO|0ZqW&4W{rm#msU?LV6^C)RA({m#8DA}sRf?6(4RJA15zV@;Q$^}scJ zAfKwYhkEyebRnl&l|-k|ck{1RSunq2k<>8Cjw(ff!5&O(`+_)^i5gA-Hsb9I)>NLF zURr}LlI@(BYdaJMLIL{Ll=bJGnVQ~?veL{Q)>LRU-*_2>^ztanQIe z#xaQuc@}aEb0mrtVCWR~w&CPa77SPC>59Na1+nuZe zt>?wXYT>z}CD~>{o~wc__aSCr>|UB6F(SS)YVX-DURo z?@%-eXPm;G6O|i7@XOcqa39CFl=H<#XWNlAZo$>4FSZJQEh^?#qX2M>lS_5p`!0Zc zO$S%-W#}EgwjU={$#4-=70LbQ1!#w2cJ57vzk5+880`SqM73RH9bOj^DlL5<<@*7*^iA5O`O;?UxExoiL_q ztD^d2;SV#mQ@3c^u~t4v^AdZybgvg|=G*79|(- zq+9WcwChuzAWw*A2v24F-^#S3L6==O9v zM2e#f?p){dx`Fom;0I@(a^unVFYr$$j1d#8FMf)XK#jMTN^ZhgVL>y@tmq^!N|@E; zfoLi(fs1~ksYg^APA!0^*~jNf;!o!?L;Psq>N$+>*tjjtA{=2cQz*FlA8}^a-#qyx zi056Y8sd&&eqmEgpn7aQHgfh8T}Njm7n}=-jG(8h`TAZYj<#~6-=?PsT!ot3OpomM zvy%>EyZpihpd@15sg1n8;;RteZB0P$v0VM5Nu@$nk9<9UG>33ZU7Wc|LMj$;5`;Xc zx!K2_b&$086y3^n>o`sSt^{OhotEt6=^~q9^mD*?(Uqak^CphaatL5mt%KM)p(iA? z4-WOh9Y5i)m_rCEo;zp~Kl+RRnJ=%t+vmU(_uXW&n9ZixO$?}xdaZ^csC#cVtiVYDSw8Mz}`gMNby-j=YJx%Kuo#zTK85JTn8gPpjj@$*A{5 zVT?iR&7D7QK|&ncY1=*;`DdP2U2if@Kasrcyo%)fL|k~&c8|^bYVgOOx$P5!s#`5A zM4VPkc93PYP*nfA7hC4ZW373^w_H+?T`uWabW>?X9L7Ayd$g@X$zsTs0KuJz2o!S5 z#+f&tt2|K%ZqJb#wV;Jr@pu8GI^0)LhM==*563CsVesrk;!VqY1>WuY;%9C8z+yjA zcANMTmBy9n;;$Kv0achyxh+AR{=U!4CRPDtdmQElxcwF+qG}9+*Mvtxu_EzTVeS0^ zavkQ}S|Vt&d``Jh?KdTyfkz(etH2k1Pa=H$z4lwmUnJmrVyt$-^h6wxeAABt2gB z^2KW5w{~On-=$|ZmNe#GZGL!qJys%@eX%$JdUH*7BGDJ&*c!;%S$94MJn^?wXV{?n zukty}outixWmdCGL~3 zM8WFyOAca93a<^F}8CWT^9eAzvgh!;uL6=SgM!_VC z_{l{90@o3C(j#!!CyQCCw(Ni&J$a+um$cGpk)OLcE7QA~MrJz=c0lXig)r}nd;{50 z>g-0t4g8h6^0bdN5&L17-S;@?i~8aEh%VlTWP^soPi4wPQzEAQMamIkgR#3*s<2h} zE1y5I>)v(n+k;66^MGk|n*Pahyd8ranB6+osdmTKTw7t8#HQet)nUTm!$odA^4q*J zu+C(usPB78yfLw+;+t7AutP5_FQqEy#8JlO*T^gCmG06hts6GHHpEWOxtCnIz7MO! zI_bV{HkUH0sUfm-FT;KGAEYm)t}VOBKP!@6tJ^V^%YIUNlpL0fgQQuzw~*<5Rg#*2 z8~Qu>+jUePf8P^rZPmf!p(eiP1;3wQF}S)^Y=o6tVN^TVk8C+%Q@F{c!~GA^S(Tmab>(WPWN?0hkm>p3(BD09KKuLt{6djOsy z9rnSX8mYeiAp{YNEZe|my5u~2;D`DWKrk*xbb<*goW2+tN~?0w(NdCa&CDe{v!%>d zojQA7XjUn7nFd^j%)DVjn*3s8YfkA;p6)G`4Ct)8I|qlGX42NR-?OwgXIDQmM~oPH zzfPBnmapg__$+)9(QK4ce484+rY!P)?3Lg^z;yAeR$>Fe_iy})=~{;l3(CZz<{%Xn z<_yM2l3StMyAegR{id@{>9zp*c>1FKYV+p(r=J*>I^N?y5l1?Fc*N&C3yex%)5tvK zhX5GGAnka_j3eHuXBL})SB;puM_LS_wX&6qxgw|7+o<*h5REvDR7uD<<;y)+)VkuK z3uGvrR_YA<&#Y>(3cON5ooPQ#sRXwAJ9G!sI` z^+V8%oH@t>Gvf>?_~TBBWX^Gln8{)8SmXs?js#h+Fl%f>KD`)u#;@ZF+38XsQF}xx z@w~=EmvIL^rpY(ZYxqAI!s5Q&oK9+(jE27@?ic6M6X6fOkuhqoX5SSu;(z4i|I2;E zD4&ZhO3i%#9*1CCLV(d%6~|Rm|HYQ$y1vw_yq9+hH$~?2H&my69AErceLtKG?-`by zq9Rv?&JI>Y5-d^ikRG+U^$SPh#e;;AQ|Y5I#?@<}wgX@}YuW_D$+>vYA2rGy_J(rY zjgD`#e~&#@bQK}0tg*${Mm#B5cGDkrt?MVDqgQ;m2DwI~tz~YH6VDSKF#sMJ1v8y| z@!hyyIJW5rws#EH%W9Q4W&0kBzwBXc(C3bypTx-~cOX)exi5of=@*@by5J;JFS$0= z`41MBR^L@%rzjkPZYAMImEA(A&WD-&+LBK7#XtN;(lN=RS~@!FGWiM`YeE=icruS& ze4V!rk#X~^P_3VJq^;z9nw}Xb2&r09)|Vg>{H-^{CvwG69tNZ4UyGj0_R3q`2j69D zt)>k-d=X01n4Gk$**NTEm3i{dfU+bUW%A2b=#reMiO`s94DvBlsZ_%XkqV}5?oHnm zY0Jpmae{>WbhA!7OnXMfiktdI9D}vkw-Foa-D(zWkM@ll#y!pZr#k_c$xVS$p-R6Q z9*}G)w~L5Pc{L`KE_It(qW%P)hwmzyKee>sOQ*XmFSP*ziOzCcI)cHiYL_GVHc|h_ zZ@m2_e?Md``dfpZLIKCY>WGgkiS5xa=SHqm^c$qiYCm$MyZ|2TRF_a^DW(bll|tj2 zP?7o6XrNSpx2$^S0EGu;%=A3}B)?ZWMU?a-C!UmpB@HT}swjjcH{xL0A&&SkP>t;B zBq0ZgeIv{eyyoe22?YQSnRLEg9Q>{*nb+!dY4_Ld=*9l{jxX9uy8zeXeugXIgYH({ zVRz`ztt;Wx0BFaHNhEnx5KanKIfp`=S4L-@qE_mnV|ta2c?kZSeZ%w?mz!-c4HcTo zu)9zWNIhBY@45M!Hgk5UI$1-$p{0p`pmoX{tcuUC0nt^cKf7;p=*{V)Pud`tZxUr94 z{#FJC-Z2Ok*Dz9FpD^`%k_$7vep`j?5G}ETi*vOc{qa_BJZPSfg|jTf$+*&NwqXos zoW;)mXn&l+ewf~BFwBURh40&A@4GJQreq&%62Q)>UN=M<>fx!P%F+tUyt&E8?VTgY zhB(+NtumRGL6e%i-&yX)-SwzFJ~%5i zk=X>8&V8XAtNNo!0NnK^xtHfH=(^8r^CX)XyT|FM5Pz&_b7~ts^xfw=R1-zxhiU>} zX#5W1Wc+tGCi3pE<#jgJLVFTu%Q_iXqqSlN{wII?pW!k$wl- zaE7jch#nPkf|Upv`)kFgHvB&{dtC2y)>-8DeyIwF-oIuwc=~?buMfQ$X=x*nR^FTD zA=3(kH0{2@J9>f@k7E>Xd5}a*=fUD1Iu{AW$=MD?jche2p%cFHLfg4pBpi$`-tJCn zrq;2oA*LNe9!!PF1Xf6;5s@0}D^U?ee&-KOi3n?k`D+*#TB1qRCkD$4o8589AY zk5@;&$4oZ0Eq!=HMe}-jVLIyS;dLHC?U7;nkItQk8D8)c5!NaGh?eB+5aTR~T3}io zzRN6m=pyny(hgIMo%xqIU`@b-AKT0J2V|aMKW~q-FL1@E^Bg#TffRHnl^j2c=n_O- zEibJN$P#c)3hh0*5`exX-ukj5oz$QZIX$qVh8l|d{48p=VTl6 zzZ*1+&X$VEX+OTVE;+~LKHWm=5M@Rr==t@9k`{2v#}9Wqi&YE zXL`I>T(A!4Qt*h)Y-(sg=Dx+#s!E<=j5p?X-CTkkPB~n-QiKJf0OxZaTC}!bK{}o^ z@BQ=Ns`lM`5gMVZhHC#GZS$vy&ZcnBk-A?xDuR$KcR#kGD_j8*|I5|R>OxFwZAPP} zMOi@H>+JO9ZNplB{hzr%^xRp~O|8b%gv)dGj%D)>jGEvqcYnJ<_9W+XVS*-A% z2bQE2(;F354?4+IVbkgXCC3t$Ftc$A)H?BkeDQRls3@nxw}{R!e2t0UOA^=E|@>}*nm zE%m>{qX`Er!A-=C6pTC{{TO?)NTmozl+8mvf-#A|t$~s(N*JKF%7g=OOnzy-j-d7< zB_!qA$FHQer6D?jBDczb=r{9UE_7<>!YT z+VX$5wEaob#fDtq(S)Hl(T2b6!>Dfv%|poV#+%dD;_#_FVOR)ig$Rh0T&{#zbf*K!D4 z{%EUVs8~$GxkX>G&ZTwAb`&CwJ23^caIy>m*>YVVrE)){PORBT)t)nSoT7p7rkc=+NEWW*HYiYaP;|r^A4(W<}Qf=VCc`dP$&lljUHt0e~DlIjTHEq+CGX zI>}y5DB~(rGhzDM{=gFMAql@f^fesW)I{_75__L&;LTgy*x&JyyZp{pqG}t&UR}RrD!iNq zh2rKXri{afy7U-P{5@CCo;fGpLBh)yfs*4 z!2t5ueJ${L529jfSNRP*Zia{Tn0?FA`{q5DP3N2Mfp8ES{pJ{{pUVyr#2bKAI_erzLYIrGfik zQ=~xz?Q^_WPlWwnJKi#X89{qLLMz2Jd~x0=WkuQXEI<0ZQ2az}{Uf`hHk8P2eB85~ z(|W*hst0c=J`f%@Vei8WYQXQKNThxV?^7vYS}=QS8VgjmG4x{qq*9ovmh5W75k#b2 z6Nht;>>n&|MK%5vWydh4lwM}*!pEA5ylJ^^qx*3LuM^Dx$W5UyVH?SQSXo=)?cfbPMi;xqE(rBU3Rc-z_QS zx9}|eGfk%WRI!w4JZ;j~ne(~+!En*#R9Pu$4U*p&i&*9xEAe)rw~FcG`fD!9%BLvn z!R#Mv_g`j`sany?RNiItO1X`c$CcD&UdmNd`|*RMWP)btx~5R}$z7$hQER)br!|8h zort>&yRO^)L$aWgyo9=B52OTA!W@zQDSp6(o8)Ou<03gxm<|~Dn4U@{|7QGAD9V8e z^M}cX`hkbH9vU;CPRl$AD?c5`bkCldM1|jW^UDydOK^ffOdk=j0q;2(v}C{#L6Tyn*^+?^lb9=fADRahDm5!I!&nigKd9b97J=1}o^; zVK(_^NNV=@Qdy@wzf;q%vZCm^NF4ONQ`s;14HGrs|4q^$PTm+>HC+B8!-$F8qq$>R z%B}w!2op982so9GDljICm$@CnDPR{N!-eEkJCZ$Yz z6Rp!tTxgrhA$@hcW~qp$+wUgBcmER$LY(YMgav)<_MnBnbhtkZr~`WSAz&jxDAcGp z38}1~emWeNqdpZUZw(V0J6jI?Nbd4IDaegqapeyg$9%xAI}&L7Ad$iZ)F8lhMIvGX zw4pN=EH}?1g8&)8dVd$_Zh@9}66PUjED8GL?_-3ThTOw;&@iY(szIgb<&+4WloihRom@>k#CsjK3aIKrHWXD5YwTR}u%?KToh zTL~DT!W?TJr}jukc6)W8i_&yBfq=%R>fv=77*m#m{fSPYE-M<*T)y+kD*hvF>C>q@B_e{UPWtDXW-4a zy$ft4!RjAvJ^nHb7~xX(I}<>Nfj(VS*upkm#8JrMWo`v0HH;08WhpiE%=cV!t@$kf zB4NlOa`2&e>fjB^&mEwzNGZKKvwPgxjBf7qHh4M4SUCPXxy&@R1Y4Vmih-yR9i+k=t#p9J#jf@q3 z2r5m&7Zv!u6lb1+bFfZybe>vL*4?8v3ofsz*#0G_*>hH$0?mk`f$ZVO;tJ0>WLLhy zzh8Z`1Lbp&W&j z&c{+{d8l1szVGv;UGc^Tha_rFkm~)X_ePo_b2bHl45mA7>U&}L_uB5_ z^~1tRu-nkgV^siQo1?=tkUeA3S{EiuRDXI}jFHJSk!Iy<`cdBLw;Wb^LQ;E_!T)x~ zdPs|s@j?DU1>UkL(-ER!+@VMM_yW}n5cqh3-e-?NJo3j^ zq2vZAu)_C&?z;c2D>uDOlpHK~il$zgO-K$Ne}YV57eI&<{mAC-R)1_NzP8ut*AcmX z!uRzw{T0)i6@gRz^Oa8`V;8yYS5e%)-rZH_?AY)3I17n5i~n-(lfMS;FHXyg=D-s( zT>bLDv<$Ra1KPss)-SmZv;W(2&p8GLVxiaT3eVp3t6$vk@zuCDI6m-N2=iR=Bb zY`A;-RqcB;uwG$7`*E1H-)z9+!+7q{{o{^JF0eA5isyrbt^Qx@Kys9IVmbR&l1kI# zmti1eMH;5?{&Us8w#4Y+ri<@<2#BPaolMWAP!Ven{o(WujyIew8Frwt_w8&V%`FWa z1;3o0qOSSc@I|!9H1yXE)Tde>m4_>{(F6j<2TQ2h7*^b<8VN+(s{SRr;4OV(Gm4(S zFB58(z3d5a*V$iw*Lu>#M5*2rTL#*eLwr$e4&^?jiowjJiovowPpu$B)lD~arBvRyTH=!mY6V`u=GcQ$Shtj&EKm4Ah_UBeq5&PTDj6r*tf3|KBzEuebg0 zQUSWd|L!?~|NDejwSm1c=YVkC429o+#tVc5aIMETLbE`v0i3^)Ku-fYaIPY#qFrq3 ze4;bbNlpFOsgj2{0G>Ze{Ru5NX-|7fjHqZA`R#YTL;#^iwvL}EKqq*MR;u5(8FH+{huhWm)Zp*$1Dy%#aCMI{92fD51@QE zn(yNr9X5UtNPBD2brvQr_%HmdR#Nr;RCl6@7w{Bu@WAC0MgIJ3Jak-LQ~v_JVMJ99 zESRKxax106bF4~NJeek$I+PKX;N{p!c5M-82eQJ&y3hN02(mkbBd_9c87Rh73@5Wq zWSj%_kB-(p7EM5a_z&Rwap#UFFHicFP1Vh<=WS66wWe@cnVAmW{!;T)a8 z%+Az--S38X+)HY<*GUgP6A;#2GIAi48nyQPX$x!g4(O&rvc!zAe~NMy6d*$*iT``& zTmNbzp16WGLTyD&y;w)u8_BPQ*?NB9_z;GzThtcA)#wT^i3r9q9qR>7u4rDp;E-mD zh(>>9?2_iH(orD0zNYhPtA*=S^^1%}>cGEbzV?6u;PJ&iF`2A;@y&eB(NNyFKIe1R z*oYYEB{@@yldW!;^HjQdC2GT1X^W;<&OM}=zFn^MEco%6ji{+t)*&KQNS*>3#o)m^ zB4id<@t5O6QEO}Gs>T#E03x%2bs`xAexq|URTUsmIV*C*7S$Z3ZbqX%U^eIG+Dege z5*wxtj1e?+$EBW2g+@GUDc=pK^JYO^QNLZ1CTpc=U*8SEWx>~9K~`4$Y3bHQ>d%cX zu}4Q3%bNy>eOf;Vbj97cSvvWwVvRf4xV3}@Ypv_bc+H#yO1Tl8bw4h_h;?mw8V!(L zt<0`kbkkE$%|+xb9L)PmJ}(+a3+WRl>B&6s*Ee^Jua8%jepjJ&XW?qQ8I6^4OR3}G zxRTY|XH0*tT|>FPU)E0bbEcv>&;G_7=+Do@U6lBr>*}8auq)cgim&1I!VjN?qm`;k zU$}aZP9+I2i?LgXmY2;5SFcr_4$>I~hB*YR;4NzmIDn~*B$`0?X<(Y8!yFjppj7~! z0H+Rkj{!#%GeArK=02bqz>zHA-N32DM_j-WKH%NJsZ02R&(PYhWYmcj`KnY5aWs3gd|5j=(@<@_#if(!7q7y~`trGSNQoJE8Fq~u zQMaPjD$HoT>e>pRAS+;)h7v@0L5CZAhA9J^J2i4ZCFQ#RQ}>S|#9I|Unh94gty z_8!yGf6*y>=Djr6(ry|c;yWQxtJzW>27D3 zl#ho!3pJJ%xr|NC;&II8dZ|fUJsFUE<~Nq?-k^UzhjlmT>2|b501vo60-hgeYsbT= z$a^*}6tn><)i&41d17kv9E}5-Jk5v&Kd$oqWB`2x0WTu|tGE7W0A_uMrn7Cs8S=kX z;En96W>W%aRzgkDFnJcmn|1#;Z6iphGT@dJ5nx)w#wB#z@0~^|Ad#>RXe^O!Sn&YA z2T&kG@GA^+%!$`q;<>ENH!?9kq7OgZi`AFIZg5f~`YZz0)jCrT34W@2g{c z`hX>)gA-UBVk?-!Hac@W8T3g>XEd^}1SRW+ss7*0M(kuQa2KSaA6A;k_!!T#C4QhS z+FykI0G8wt+~kKEAPOUf9)bPt5CIFy8Q{Ub3c-IeZDZNPykO-cl)o-4D%lfI*=aQQ zEdRHpp}x`EM`!sFN+dX~;OlAinR4nfpl#4TZ2Cf8-@|^0aC!oB9nBye8Bi5)zRte@ z4&o$0_m&VRf4+yS2U?(=^#A{(C2y?B>cu~slV=bh`vc6~0C&5CTgt9Wa7=J?<`IT4 z<)2HXq8=gcJ^yBMvah#+%BfTe>yzja8S7uida#)xRV$W$MyDx-n;2Ri7Fu2d6h2RC z0*%64qU1+vNv4lk-oLH{5QtiFdH~89`M_>Gfow_jIJRr#jqZTfdoKN1U{#z%IRr$; zq!CF@G@g(d=e$-P;`#ZMLJBAOHqteQKx!QG*TmKonPZ^&sjKaiRrw)BKD21xXY@$2 zj1EUZ)Wy>_R<~Wm3rHUgA3J`Hmj2J9J&A{h0h2suENC4>2E?hKQ&kqy>{9}4ciN%} zRVm-TXiOQhpnO-(nb45J%q0F7qBUF-bj?`w53CXLERS-s3>DOfF^E4i=~J_Qt7;?I z8E*n2k9hURurd~1zH~YQS%J;3L70K=2R~bza9t^VL*5jHVau)-gVx^R9l#k^2z6yl z%@YiZI2g}627Wa44)fOEl+M z`&LonK=ht-WCyhh}aO;WGo+@mA4IKXWX zyQ@YxG5J_=^(--FrwnyNKFlIKLyOTfSYsLcD0sD(;JWLDH3bv<*17P zWfmCCn0xLig&v-Nl+g@V;{c}N<>-9p)y=!wu@%QV$+fwSX+YL>pUC{$!Veh%V58Rd z+6aTaw~0UN3{jNhn~g63_VC+}aoEJgvDk|TWM49~-a$*nKTKA_z8o*cqE2F77;PQ} z436q2e3mwG56j>D`u@0*#qHL4G}%p2S#mu%lEDCuZ{ZtVY#S9ebu%@|szhMV{@UL5 zw4G4PnW?b8tbviKD@gBDQbQfm2xsZ6S@s0`M2+#_m|fsBi`s<4dHtmsZ>#XXRRP!s zBAH)b_g{iZjB5W8O;8K6wo1JHJ3Lu zRQW9SBzMK#X16g0rGcJAM7lUk%MZqodcI_Qi!EW#$=r`9fk4(i>&z|9*=f78dX<*6 z4%{zgi6-XP1EG6>)6t$1cH2uQ46w?ifzAp(fbZ7r2}I3+ zt;q!}`+>Zgr&FznBCHt-Op%ea^N9dNmM@S-%-k|DUp-l&?Y>cd&LWU$Mb1otO?~vC z#U)wPZ+oPf&M&f3CL*VpnjDSH%taF35+GW39SD}uJ8LO-AVKJJo%LFkMzFe`58!dDN(Y#<@UiUVfrB#+HfMtuwA8(C zkY3Z!e_NVEas(XBoDn{6A;l~pYciSyjAd$G1x z5PzW0?Jc32B#|Fz#s2&>fnCUySJ+w8-3u>_pQycn`t}8g`?-Y!^Gah&i)McqtkD%q zpB=SdrAUU+n$C0B03m!Pp|p=%8lN%%y!%zU>PI->Y3?h|;&6b|HD()uh}Kq=O+Phk z5EvWc?LS1}C-|5&MHJypmzHQH^Z5u!99^S(lQCxAriM!WQ)& zpH)BS0D1}vjrvJvvdg|C)oSAB*`}fCX8vNt`Uhj~j)bH95&#R|4`_5Yy-U{H*D3SD zdPkI@DrDl*p0q9f-v(Ia0gA=Ja9r1U^)ViZy}dF?d=~PGzO3BT^fh0-5J0+1yyF5& z=#H|oF;@gC5OQ+f&^ZOX@V9CRn2KGQ=*|wv<=s-tHxH zvwb5zQR=NW`k|mI7WFy8;V+y2!kRP93{?VhUOF;h?~v95DR!e*+lcS?xL6ZD2z~3F zLV+7=!Sq})4fmF^xCLNGDP3Hxx`;1FbwS0$3>O|cO3p6%n<7y}-w>ZBcuq3Gfm}Hn z-1(Gp?g5QP4_5%yNY$!y{e?H3wF5M17aNkQu2WC4nY|1XE6Qx*+*0&F@kVE9flL z^z22MQ^AFfkm^Vzuz|0$z26sKqNmW7(EDd^Y5LTw`=*3zp?sq6O}IIRkWv0WCN>mB zTRNy+gv#w>-YT|$|0xy+7$Q1-a@^U&p#4$R+4!p%Vo`E@QJW(qQI3z@xccA?>!4Q+ zkL!h}6R-jGU+*484AQFOTm;2H!J0E=Un;F!_ICV?M z66IKM%yumUMj0@w7Y*7)w8ig@0?n~}m8feNR{mNdVBN`q>O1|2h>LxDUc->e(nKL)&XBDgH-Kd3DQJU?I)7%BLnV1LjL zEBo18&Lvp1+k(~^02@Y`PSI%UHT;T~ql2&upz=otf~RwXiw3JsFOhOr_s1;g=)CY~ z5RqC^@syyQVx2O0azygkYSaFprz%AXJ12lo4}Nf$J@RTl|ms)jbzN#H&nYoD1M>g z<04MZca4T8zqnR0v}$eJt;}C{MU2}d+qgZ(6a;Y}n(1q$ z(Tjfpk{kz*yBYT9+2ZjlDje}3mKeh1d2rof27fSqc^Y}Qy@H7V-WN_O@S&IzhnH0H z_7)orSDun5i6fB=AM^uWbEq9jvJXf!GIQeF`ksl)%0*sY(hiv4w7=_*wdQ6h2e_$(pPo5o+lMK- zsJ^DxI7y(TZy+6A7C#wFl@WeR-dS-WFW6ya_vVak6R%_HD+yfdgcNU^xMFKjlF#*r z4(Fr{dymme0&QX^k)($h9e6WiAI#;-;as~-;GPDSeh)%^Dl_Kwd^IppT%wR;a|}l1 z^J+TJ8JMQd(-syHm^w2SWs93=7m9L=r6iG;_!S}(Rv-jV#*-y~F-#gk=pRg^RB}qZ z<+V9k({U}zKH``qw);-9xeYFZ-za3)#{R_HM(npz6H%GAJdmGy7#iV|&&`}LWq0e~ zoTEs;!N_}Qc$-B^mP+idHrH>;#|4Zw>IWk&PV5?I#FQm;iYe4~?536HcL;%&e7TxK z2eAB<0*s>R@JrflJ5Z`}w*oH#76)#tvTsY^vQ-%US<-Fsgbs{spN>rXFaLthT*s<>}RVAOx5d;yGnYDn&3t?pL+xbr4GZfSGw(^TYW;7p=S=% ztBAl*C;E&0lNQ(xveSjH_mRLdaeOu9u1ompd1PL=|A)7f7T908iI;5FJIp==0RwDx z@p3ns=}og_NPCw^sAlUf!{M?Cj7=0GzfT3r2K}PaAUy3%RtEduHkjpFR%<=L<>Z5CTTu0!0@Hj}B_P@881SE8V!ljcxZ5_0o@AoJA zmX<^M6&2YeFp^>;%2MNhgyYcek@tnh_oc@M$Isj#Nr{b1%!9Qk5~f z4npOXMZ5c1bW7#T&nu=lmi^sdnEsp_cnJFaa|9>Qj8kMK0l%qlJ+N7}u}S~8aWAVP zT&->uPd`0_cr<&zMVXptcn+%u_%pRTkOqcQ)Vp=BV*-B@Lf1oZjKXlh-c*NaJIe*? zG6{I@ugTueDs2GcrW=B)?Rg@}KIttPRqBQBf6I6Qd0i`1d z(nSyuA%xzGH0elJYG?te0@4)(LT`KV*LS~X&YXQ__M8uA&YaI-NG9cZ*7{xdeXaDz zEGhn{r{AL=n5gC2+3kRm7of3Ia81=&FvbH-=6USJkDw2mifHG#@xf4`0$2f{Dlmo= zGU)?71KK=+G*D`)S#VME^`x&{mR`m?k<%X)@w9U7)RI~lM!=P!L&?IF5it@Vn$+1j z+^{K|I5-!-`h8jY(VrD*040j&sJk@k^T!g~pEh=D4poE~FP}j?X>Zg%V7*cTDwY)u zKcK^r@uy{B3G7QkHqdzd^U80A8->`(cW-RO6=@FfKQzFx_Jlj?)a_D@VW~lzHT0iymm~u?`CD0xC)2eluTddEARS^!t3pXkZJE7uUule#oc}%V$Y9?%1Ob z$9W%y)F0EDFf_db5{MzxbltX2{n;s=uj_k2!z%g0#lx??Hv&y=I#;Np_d^_a4p-BZ zOebxWrnCulSDVdBr-Oa-FHtNHM0tYUwCQs4X$AEIv*V1bLRX%aKyRgOb7yjVr||XR zfe%{l(P=_`sSHou4JW{~X!0swO?5?0+KY|I>NuU3nvDv7maJf7e={0EfosQHk@1N- z^xD9oMetB&7RUhUHJG-R_3LiWnIIQ#+?HtDTZ^vr7khn;gaw~uoAVa-B*5;DU6D!XKDH;Csxazi)kwF=&WhI( zF8`jCH2}8lM!n5@bq3RRZ?ZS=?jQ#AyfSBDbV{njLVZ1>w{H2m5lV)vn953R!H!c@6~St#H(oy!S4fL&5|yQm(rVT7OO(0D$oEbf^`N#;{rGk0b=TF>PqXq> z>CU_AJ!91@E(UI_Du7RGOd&#< z$4wRom0+cqhdaElwyOSS@-OBlmh~S=xfFnePr?VX7c~*8W&Y2K{jV z)eB6i(&>1TmF$QDfzS^8F`jFw>nQEzXs2fj{9b<=qt9t%j%B6x_&6pXdhah zegm2-96dq8Z!`gI?l#7 zSou(TlXDZ8KT{d7-{4*61y9rP!GHn)p0|l}27uKW%@}Eoc~3V$4(M)6bexuu|Fb9t zunuS#O8FC21yZ6#XhIsRp);97USmHOPo@5hItY+3Wx$bd`?bp!bx-lMfbHhxjuYEv z{4L}XgxzNiM1w&nFJNB)bp3z&kR*=xv^SQ=1wN?NP7emoas_U3kdQ;?lEC_lEU*S- zHz#he1a8uhYzve~O@cr0WVZjU1Gt~f7oAFokuq2e<3YW=jF*2ZQ9=)zOo29OM`)L9 zrNV)CNZk|cJUgE|#+Yx*s_R@jki;cW(lx_qV)g3F0XD+fl@5g2j869Oj^C_?6S6no zWkJq`+30xlvSCq^c2Y=cMkikv@YI#nl#48(Mc7@E3`ra?^#%hGW&lA&G0a00RQ?(Gxa!w@!e3!E}so zW~O%-P)~iZl5))pEEtjlF$MxB=6TESx1#0TXFSN|XU` zTYPyQpg8e+jgS!telkr*mC@>r%Ycqa8B?sid@_gEr5~-Y-hrp_IO}t!>GgMFquSNy zUktIpO_6n_jwT9B(I>OO`<-35w-UGj=NJa@EJHV@qahbCJs#V8tE0wB6XMt_qHM#Y>kQ2le)R4psP?E}6E2lAI;H@*gm>^sfIOFvBfXompAg zOKsd2{mf8*MGe*~8X&RpO#FqgM{hK3n&)hhpkLQ}@YF0; z;1VbF2J)3SSkZ}(RyPgI^r$>8tN4en{STb0FrOM43BE2sI`;nx(E6{*nGruueQxO< zz*!sTbz~!QTg6pBZyGy%%f$om>CxEDdZ&rHfzY9fJJoo_ zq04SL4p`R!SE)mF?ZA^4(j7{LM)VOgS>%=LHkbd2#*Zbdd}yA>OHa+?t_fIc&BiF^<}U+cq;7Y-XEGIRrO>YDGJdGOE897jR#Opq2{v+jB8 z^0yO1Ix*enRj=;$3BJ zRmz<)JSD#4;7lb2AX^jaOjq3apP(0Vdy(oov6_{S_~lh2zz#(@0y3S28?cu{poK%^ zui_2Hlh<513-iZ2PrIR0?sulfoZ)+jf37)L{fDUy+^*$tCz`$YkcE9BL)grjv|8+R zUwfsGV+^V;wu2Dffq`hJHk{5kT>>at6ez9%)m-G(bhlYTa~%_FOJh2tY*C@}h0BWx z?t9q(#1k%abJh1+sd87O{`q3#AbAsgZmC%k?+QtHFb&01-&^>-h6Oe=j+Ylk$!v!o zeV>OGqz+2t`w5?0Yuad)8fz$C!Yhc)vP*1<>zlR=9H2V`!~VH6l~0$DY_nGkTsKIs zP)ORYtsOb(0IS*GOXA$Z;c>(2{77f;CLY*wR;@oSybLVVAO?qHsb3!(1m`6?g%Kg& z{Uu!b5DXdisz103f?f6p$Yk}OeBdRb`RAVbkF)IWL%2vVh_$z|<1ew{EBa|4XX|Hv zQbPpdARvA6pMNsWpdPDSAPSdUJpENHgrQrkeB_Dp|DAj9RSyTZqwu1&6(`I6k7}l>u_~Mt(1WCZzg9@ovVoD}3vCBG z%SYb2jNE+H75P=JCs)AD^3QVR5*=crcJ51n{Mf(Vi~r3#`CmLVwS|ST_jD7*AWc7H zA$NQF0>_)^$j+R^(oa}0$J59mcWmHtFioQu_4fR(p-v&kb{flCG@MGGU+UFWR+{t+ zATs=w{ErVUSY9&I;9*#}R>h!EfSIU5V8TDU(FhfU@p{?)ARvfNbegsklY_4c&u?KOciX z4$?L52HZYCDN?COmD{F|$1Xyp2sG^%tHpxISZ;2&n9#_*1o>}CiPkMJa#~UCG;N^p zpIf#3Daa1SqNHkt><1w~kHMWSkY^-NMunI3VHZGVVjHb@p5=#K<`7f5Jdt%4jv zYC?gk4+nK*4Kct%H0HaCRk8%Ex0(}V%7Fa@b0GE*xammezD#-ZMarm?Cb3vw@humM zl0pqx-YIl|Rf&Wn6h(Z@{eQO~w=*V~GHBi-CYjm57ke)0JoSo)D^I^v=MS+Ifut~m z>)S+>u(pl8(YleKJ>0jCP!uR|H(hHCfKi@@4rpN~GSsfuu<>K~)&zmhR(GCu4 zxZ6Mq^r^rCU$l8*Vew&yt^FW9i5**rr7-c$x8Q40tr2m+#%&%K#mBzwyiP)6N&p#mKEMzs&_io?8~DqJ?kiO?$cpf z@1Fc_nf*VzhZD!Z+*mL~uk!M!tO9_;#TVmZpri^j@0N&sl>TA0J0mtR z?84l%oa=+QKARZ0J&|`6x@@eY4y)7c_?A7nhK4r2~FtodoVF$xJ{o>L(iu z@s*gI8L}aT{*KW+(ZA$f1ZPsj2$0E88}T#Xk{LXvxgIcGZ_}78ck;GP+kU4v#kJby z#vF{UN8mo>Y@DFkK_PdnSTrFsEOQ*u0pINdm;I*!a7S$lVrF_R#nP4eE(`x;7xRo2v(=}w!st!TJ{^HNKtKnR^e zKk;W4sYU$+8rfaa)#SWKr04cq}Ht&7D^Aer8otOIGOYLE6(>j%SW>qhfSZ?D%O#JIr_Z(_wlj^ zsfB{#_STOcc}l`wMb2!yCpvp9<&Mw_EzRT;@~xwy8-Gk+_4}&wn^nTkxY6`3TF4`N zNd!@=4XsA4I^<`nksYoKmuok_>d3f<%ce6p`yQ$YOuAs`nh~-Qn>XUKtMp+@HlfJ! ziTVNR?**O%xwZkpXAt}iCQD-VHc##VU{E9TYD@M=Yo3ge_ltCAB1Ii^o?AH-tM3u`EEw4{GU@CdN z(+01WnEdM0EVmelnJQzk-BQcF2TJmwhJ60q@(^4~$+yD`pGIlEjk_1ndYi*dEajbO zn+5^{TsBGN!%BU9ZC$}4JAJO}q-5_P2-6P~Hxf~%}o>Fe@UtfA;gvOZs!aQHaVrnyT>`g~RY%~jAFNxIxL?ZMnu8hBRnSTvwH+bh7=Hg; zv_rS0j>*6)7Burfw|aR~4Qa(?KebS?zA9Es^bMJMIPNhSQGY*CsnWCS0^Yb4L$tnu z*GH-UVnAI?NM)*+eS7H_H|>8eK<1)(w$>{^>MKMqD#)okAfX4l?gDP$*U*F3;jJ~@s)h2<{opxfz z#;nSdBDiMPrys=r292Ph^_?XxVzOpS&FV9Lmnq=9&3)-DJ3}I-6HVkgI{-sIchJ>t z13tiuvoRPU8Dn%WvoNw)B%zoh5C@4xLCN0G7C{YvvUE!t;*A#Xdi;LAyK7VVn+bN3 z3T~<&C-mcXA@*WXay_u!<+yoJ%bV6iBzrosqGMI$f~0-5ayjh?=H9?gTfdCnB(X`U zC~T(p*1C|!qr3<6s~2Ag2*_AZ&vLle3R*rIy!>iA0U-9maFE?km$Xu@z)g6&&(~!N|WH8+}JRmeH+lYI~PYsX}0Jie~^``rxs36fH9`S)Q$UUW{)8S z7h4lkwbyH_To}z0Jjays*``je(1~C8nk%nv!g}St){H;hzjNh#s{Py z-(;38q?izJv6T(#6|uecV`KRZ+VHL+?4&PQhg71hvak%zyPGgxI2=1N&Pb|m6HM(cT>zK5JNF4FJ?C_KjS6Oo|Y*UX= zutfZ92Hb5pNRabM>dDCXVAPO2CS^_U7&U`Yai z)bKaUR(^Eg)vS({{8C>!<1Z2y3e`NB+IRgtvrTlRV z@M6EES<)KDrcgoEk@OiYz+I?hileV8WMZYE{L&#^gesnhZ9I@vwUAxd_cwqFv57_e z<}Sj?<0Ct_3>Y;CjSu1W0r>BySYuc`Yo4`jR%aN>*WP!tkBLMuk}Ra9YGXhwBB zbr&UtWslm>4_(-dv1P@%(FDuzvhNIA_oY-y$-vgM4;rtF&Br{}X=Vu$s}W~R$jiI4 z)hbuhgIoR6anPc;P9TStksS52rdA(}Igs?`PER@Y_NyvY6orH86$7d`NL1Du zrIEYLh-K3gjAMEUEJox-8W@a@H#0Sq@*Cz#BMDK!V4f`XO&HSerf@`v-r}O!RJL>6 zQsTF<*c97T{l+tw4g${=B{s<-w;m0iq4WHJxuQGG6@rOLuY66B zq#HZf7A`uIUB2M5KA~%ux@ZS-P_FNYc?aOD9T=bIVeLDotQYEfa*$OZm}lf8V)+*D zMPx91{vx%$cl)QTv@jy?8=|8vF2Jghe?@Ac+iE`$QO$zL;cQQKRYi0AoDf&YNTWHEN&B5eU=cXKgvHXy?Z>nWH$>KL~Qsncj z49*0|n1KwqR?&L(I%C8QyVy3hng+04@`PqoZpgO zh}XA@JFa=-+j71Mw7Q{Jb7y7}fwX%rneh}9`+MYZ)zTfB;&$S_uwZfTNJj2AjMiKg zvPA1E71VMnoebtYyEtfZy0DiM4a`-uS>hirbZ*4Lq&M#{Kb+!?v4BU)Xg>!fsLYSb z)>pSZ%*!_+HcddZ43#i%p+y}V-~DYd*A)6ZnQTU5Vu8~S(?P$-dl@=nSywK?!!4uD zVKAmbZYv>yivOnj_G!fwn*akCJ)S%U!iO#aRi z_~O#55AxZX(G6%0S|umn=Rr42sSqfWv7X4jYsG4Dk#c2CK_VDdQYxSO0jL z(n=Pf7@>?#3e|3W9#G-0k<#n?qMp_(eEaJ${cWb@63{O@cZ9Eynd*=CrncU=zyz=2CqH>FE zU;Fkoe9tL3XSb)pPAGo#7)AFaeEhv0vRVJ>PSya(olfM2pun)= zHOh$m!b897<*E<( zOy{jEj7S=EzBEKWdT0lXS{B(~Z6rz)*7m`K0vtw>VVnHb#`Pv=L-zZ^EdP9wdfbp> zn-@3Y;4H^-`o8tzFF%7F@nPo#_IBDcPTS#^piAU_+|yoAMLJ})rSde%!jLuS!SO9^ zu&8;WM)tZabMpP#JUi@FT|oaw9d-!2o6P`5-GXT#HKKB`(b(i$k8fc6NxYZ8{Ijg{ z5~if!53!8UPtUeHRB#qt=fhNV$!Pq*wf>hfVRsYJYuYr^4SK`#^RPZ+MwcF9d=LC=>k&gN>d2l; z)EYE^hrsY&@f0I^E|~m{!TlnSEy|rf-6bu})0{=ieznz^S7Y$z28N{7=IsJy2VWe# zf^g&>&SN@Um&auH+QMTWueaVk;M8KtReM6jAD%5g@g!yM$ex^|+4H4`=#;p2%^g?c+Db{Gc#AWyrPvw2TL&SB#?V}AmviEj~n z%=%^$$6fqQf~{dLt`?F=Go3Y4J68eU!RMUTxVEh&MpDI7-!#>&+Lxx0VprsJvQ`#Es((#os>zfF6tj zD%NX&fOjXQCckPDm{fnKk*qcp|Jn4J;G>LqqPr(}Q)g7MSEcjEOT3sdB~c>9EiYT& z)6e=iM2|qH(q&Z!9D{R;cAb+O z7x9_^C)gC1WKHdc)n*_nLe{nC$$^yL)*eStuxO9?GNInOQ5T$h*dnd~I;6v2-h-oh z@TQ~P!dG_N-`WF$LnkO>wJJqEGT+VJ7RhDoK*GdsRgJ)kuCDQN6n`fOIwNwQ062E@ z?)SFFnLAnnB*>RA`6jHR^hy$F!3gwu-%EKUPH8;Ko#~`7NZR4$AE0RCAYW3l-r2D^ zB?JDE*JXYB6r`{b^f>U>Vc`f2d3vVlkPd||VT!Ac^u_%hr|jOd8ez_l-ff{a5em#X zdp?HRsxp$Q{OTf=THBLp$tnC7PkGV7l7y(qo}ons>_E* Date: Thu, 7 Oct 2021 16:09:44 +0530 Subject: [PATCH 04/33] Added-per-5475844 Added newly per 5475844 --- .../images/config-lock-mdsl.png | Bin 0 -> 63277 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/client-management/images/config-lock-mdsl.png diff --git a/windows/client-management/images/config-lock-mdsl.png b/windows/client-management/images/config-lock-mdsl.png new file mode 100644 index 0000000000000000000000000000000000000000..d61d54aec5e935051337f0ff159e0de896212367 GIT binary patch literal 63277 zcmeEuRaBJy_b;8&NaKJ=DBU12G=hYPfPj+H4N?*V(%s!4q0%kgAR#H;ol-;1Ff-@z zeSg3Ixjbu~i*t1@SUfX4^^N_Bz4s#Gm4-4A0UZGv8XA$x3x(HcXc*tn(9k3BFo18y zL_@`ZU+8YHmF3VXe=!^YAF!-s)n(DpYT^j*O|gN`_|7l%-O$jeSpWW@tGs@4hK6?C zqoN@D#>?m!;rZsxLL-W(bL(c$Cr@JFa&_%=)ouJTcX{ulomGQoTWOHEl|$=^$X+(9 zvY@46S2o2iTH$AXer7YAHkyQM|a1WOMc(J6ZAPIJWF4zQI2VtGqS7vF`H@U zzgPY&5*4Rj@QQU>t~=l2Q_aTyE3jpxnXO2}D9}H^NRk;Ew%~4|m&pSX@v@ z#HB|Ut7S?LJt+vZ*5ZDYCF+!UCDWmBMy$%;)sZd1p8!I{Lx!avSQa ziG|~Gb3$&e|G`x8T;etKVEXvj{`v0iZl+FE(EYtH)M~fpbNWQM37KQ%=1~q0^V4J~w}e7@rIA^G~)xrn^Wx?=MF5>nt;F9%07*2`6KD z?)hhVgLSdVX{|^(Zhd_{gpm3X*#G|ImaE$HbXD39##iW#@~E+!s{|f1SNR?eIW9A5 z|MXqAB9+_FQu_MMdI<0uj5IV}d%qa#zEPg-PqKubZT}9Bi9sx_Aw5nOg)fm-@(ewp zMD%j<@>Zkirn6Lm-j}OY&(Oeg}NOC$LoIA?+KN zSwYCux2jGg>=c56D}(%kN0=G}4Aa=e3{Xc9L{(WC$0gDsFkR~LA?@YFnl-@{Q4tDmqU@%VC+U`aBZrwDv;4+<{pS zstA)5Yec|r*sD20EtwwP#yKyvd7^WDE}N||)Yec@=^pO_*~d%z1-)(c;I?XX-5LJ* z^Cxh_zHnJt*=&pB`=JCDU|3I(x5stkc$7w*;-T}Ou8;3leNHzhN;Gm>fOVAexwcZN zL|cc`S_eJ_8&mwBySqC}30(V?mWKqlTOd?=e7uS7Le7~n@`5@z{YDYfxNq|QL}zKGe}+iE!IH0=%TM4ULiL~2M3 zZY?==BF3EjFI!G&lNoZ=P-0b2wM)`(c)K&>8Jw*pKJK4|f$vR$py7+TEB_duks%I2 z-sfGXu8((Ti@PDArC^8U=E*is8JpXEQ9{X?UpW%Y;6Z!xk<*pd8+xd0JV<2;2&Pe= z@!qUr$maX9o#h{H$@~vSi_*7q?@w1e*SH4`nhGL(f9Nn^B zUd=~7kGO`WOEt&nJ-d2vNghc$ugmC-qu~l-Pd&U`CH9C>Nyx0D4AysXaoNT6DIeV= z75zJpwP9pjFsp;JRSA#dctb*=E`A_#PB#0aUI$6^6VnE(e^Dp$s;c?YY5(r@}#=HllVf>j>B%W#w9%HuoBr{R7(M-s`R zPODtp-I^tkV}gy>9vH;i;}GO!z0LHf58Q{3%S%@`)w}A}+sgqqs6#|26pq*R$*_c` zdhleip;x98{-+h2kSe{wiOxtJ70|Um2h2!M2;ms~;xiCrTbXNKBD#&?;o(fzenC!1 zJr0<0jTv@ER}8)As81FVYNEy6F6sdT`o@OnbN54NKeaK}`<9t<1b-+AXf$MI)U_wUeTUCT? zrm*mL+c)<%8rJRy7fUqr{_O3AQTXmqJrZ}_PSTWKXt2|pE>Vvvgh)R9!vvt+bbkiF zT@(&JR^tnw5zs?TRB*hFjZJoC;=KhEyEquURw2r)(9ig#v^4F^f#j7O3^!ej@aUTU zA(wy(4l~%L#XMTmPo>RBWpQ0Me4qAnbxWD2e#VH3gep?JKUd0U=p+)gn#x&?n@t$I zJ5~I$>P@cH*wB#7C4jP>U!xi5O;{r74EERP2pwK-4n?Z`^2b1cz0S~l2Iz98O7hA_ z+kI}B#FyI*3ArMXli7k%bgcK8^icy--H&(M8QpeA1Mipp6~^>g;LGhko&YHOTpe1> zK1VZ5IbF!OQS36HV8F)lJ)HTP=*#@;p$0T=9zg%=qd85-_kq9GASl1{gvXT!?Ki8O zcXO%d#iwnTu~!8WjRZszyMs=oV%cEid7O%h%5FR6DjlLOG&o>4hVhF^pAM^#xZ*jm zr`S)~cl-58Y0RQ_gC0+mYJ!N-20L^s3@V{Zep(cxz3v>)Hq8~C=Ym~-i&s7=o=2DkV6v*R#EHh|0 zyx1A}Dl3XF=pC#pMz?L^J@nMH#K;w9#VT%N*yJdDYHZdUN`wWk6)2ZXaI&{Am+Yws z4h^M(Tx3+WO{#YF84cl9#{P}8mj+cvQg(PHPxHPQFbU8+|7d-6_}fN4TCRI-ZH+&W zli<}1{InD7v?_Vof%UfilkjzyOaQmtY&k9c2WdDz9&t}^@8rAaz=7a^C~DqaGENF| z^2b^GRL9{(z3*E+Dts;Q*?Q;rpn0f!tGjOmqtv9NGJ#B6^b+&0bR#f$qU%#;i0GGo zxRo*wG2&6_x0`j`zzm?{wY?tu0f}na`gIk$o9RhOK?42Rs<%~uUWqlLUu8|EUb1vc z_!*tO8sbq5d5~4aY&#K!eX!VY1c;l_K}EDuSuwA(by)x<&0LRVP z8Sy+})BRj~-?(FBw$Z`xTIp~FqxSB0D~{ExT&pOQ0zuI<)o##Wdq%-da1+_k?E$DE z&k@>q(l*YSmqQQo65eh85R2zCi=yJr-UqRDdEgQ=G@B0+(`_x-$Oy=?1@;QlFW4us zYYtF}&wI)2W2tX$ZS718Pf?|l!-F{_`gPzpr&gi`^A9<7*F!AABPiI3 zA4$%CA_+JNB3yWy8e$(U)uT;;E@VGHAoH2w*FkyT${fEhm3w73IDd`#-xsW#6k+zzJfjH1OmOlEf zB43|U()$Ra^26W8x z}NjDNw-Fj0bs_7eCqaj#pas z0B~`bkdc<~By4VT*&4vadBAu266dpjV=qA{U;i57k7qXC55J%;^WJkua5_W+s#&iZ zu#-9Gg5&4wJ4)X_-lbUpx%)<(;10Nl{+BI^CMNm5>>+}?3Mi}!duF9*Lc#A0Xg6E@ zjHqwH6dK#Hlg*ZB6Xeol0?rS5nYll@5siv>kv{vg+SasCSX8vsV5jVQYWsnVjEqKT zZ~DrRxY^$DDvvl*3%A7m2^I3nKWG^%KR$S(_Vlm_3!on>5WYmdN9lO=Hixjyl)~yPxkV(* zjrT#cjVkSysU2Q=b}E_2-n_^DMEBG}1X7~HvB{qy&rgPb78~s5 zdjYS*QKvAL7sY_$SAz9Tbdk_ zrl3oFh%H9v=dt?9ES2wmV7Lvf;ZBW2AkPmb>b`I}%9;?n z7(7D9F?-hp2_{%SFh(5erJn9e&Qutt^=Ucg$PCCdeh8_rmVUP>l9~+=KCl0I)WLKq zV5_=7WT{hKZM+yjfS_e1w!XLnyu?|{*4l5e&(pD6Ndl|O&m=ytFjw4MU8NYZ!}jdm z{P8|*&vJ{s|6<&yw2O!fT>G#RdG1FgARv$_>VyOYG_#~+TUlqYlGK+Uh-5O~n-x!8 zrI&JDiBu?dovN3pizY)ysho+nQ;{ zEbLxPn~JFQF)M2b&g|UIyKer$vvS6#%tNhs;fzHDWocJ;fNx-NGRtTHlc1xcm;cqI zV{lL}H^Myc)?wDlb8`KuBW~4&>V@TJz?U(T1posA?k|h0cu>M24y+&Mg~omC5~fV3 z`ZBi@RD2R_mG0G6CipZ!ubhO~xhlKRtb@^QqX)at{^-(c^An8f3YU8(Nyjj+c03P^ z0zj!^Dek2UG@Sd;X-7qZA<4bTiyL;j)a2Cu>FUWtLLwpuKm%%>s%_HZNABp&iv_C9 zx)W}jYaNYYvcuAvSflQ;K+Z6z%@gV?Spf<7Z#`p0W#z1!evCOj(;h4g>328>Uypu< zMZ5gjjUmLN;%4hwq0j}yfN>gdEuB^&_9!mhj zoM;(WyoNq50h{$={Z|%kf^@>cSF4gk!^1sj3@c46>3AM??J9qPD5T%F;}vE2OJ_Vs z$bC?JEW#ZoL}b>uT84&?kI$eq*z{Jc=Pd?*jJH!5AbL6eO6|d@+nSg5wHi6k``h@p zu-IW%JbfUACfB1#y(x&T?V-eJ+tzLFJCy*ZC+QxMsc4RYm;F!a0kg4G<(x{&g=aTp z+e&QO&5cMRnj-vck`jqQAEVdpA6W{a%4kp|YLY%%?+)U!*IN1pEE5$XDQf-IJ4h1Y zVy{?voPEwdSW1eKkVAU6-#ei@X;zy}98gxztTZ3}kb67p8vCWqOa5sqc6Znn+rtcy z$F2w`qqyq_fQ(1!se^-q>m8P6+n!=nDWU*LO4XpxBgD0+-j82bxPm~;hacx&hFW>ldZ=>*`63s>PTQFT`1Km{9vf&{yL2H>9Y0Z?pV|(_>7#&KA4|B;UUK^ zC#Cs7w9W5tDX*lBvMzTNo~Z?5TF^e!qKu_U<8G>?k@TwW@6dp13MpM5+=jF!qU{b? zN5LN8ZJ}UCRb%vUT+;d6E#45o@nK?mly9KbwrN}+D4>FkvttXJSATZB)1_ys;dzQElhrnFF}4w5ylri( zC~W|2t8=zfwqH9&VMrTDzb|14+GH(WefTzaOB7`q4oD~2)r~)-R8&gWajnS%)fz!K zM9Uqek->l#NEhYl8ZqhHRVU*RN0{$BgEis>jzaZ5=N4dT+u**6uwxroYjnthG78&L zPJ7hrbFbxKd#T|u4FabpU8m+YRij#} za;TSSJpEhduDgZzG*F9=B}|{lvGVJt!;H!04d3;X?LHuH&U)5GiS)kA%a2#&2~{qT_o^&A{X-ctKmT^FNs0me-24G}!#w03kSzCJi5S0o*`TzU@kjyJd>R(4a%CF|qc&(EU3Yd+qKEF@FN& z*@k><_I-OsR|JxuPHk^Eh11oLl1cn7h$>OAeBo+Ljd0r`7IL%pRhxYuYnO+BChw}E zi&oI`)z<7)uX8MI1jQ;B!u*D&{yvx0DlR$XX;fpS3<`(~eJ9=0;^Kr8eIxvGqxMX7 zm;2#L76io+sZra76ZHm;tJ#2nvU^yf@8sOWQjMIRk@yPLnGhD1-z<27AuVW(c%l0t zHZ=nMkYr+`G-RoImhOxXGwT;f05d<~U=!*6{k`f1(O%*NI15`deMAfE9)Z}Y6CtIb z=p}Q0gVQrmktKSqFT-4B<>7&D7n_ypwxNIu=oPd2#lS^H7!e-M@zXf4b|iZLx@xEk zNFsiF^VN)uxp6R7jGK`dOZdZUQg-RG#f}BTP)m2MT%#!y5K4LUFL;Y z)H(m?R}jIt`y4fe8Xp`lhVXe`e0Wv??$igYR?=ka6!;BvxRd} zIkgb4{;SLI!hj!50A^Lh`DZ~p-H&vqp1#Nwpna$!|C7bjR|xqDpqSnER&cb-7sw0B zn~iG;;aI>9a@?hQUzW&zx&g>vcK3zquqn?^&ua1OW|~1y;bpmfV`*_$Ldl{nSl78@ zr!>B*28xvC&hCCB@57#$OqU}ndj+4h0JTtO)$8jR^rmSY+O3xA$(H}&hOtv6l8|RN zh?~86suS%xQ`nA5NTy|X2+NTfdJ0uW#jckV)uJ-iwg%%Ei@XW>Xvw!LE?8ftn&9g; zn{PNwfdwD4aUR0I1+at?QC>E((nnqf0(ly8G|hff-k%_t+goQAML*0%vOWSY1K(Rt zl;mI!eJSK^5Ccxy(JhaqR+s!HztPPWdkE($8lsN&to=ihLadnb-K8BNfRs4vup>}q z^=g-bfXBNTTAZHR)XsfC7^uXCp}}~cDf(nVNhTAWA|R#IBRV}!zwx(=-l^Q|G)-l% zx_NIUu_?XH{rG2KpMNB7ZnD@oY`uhoPd2(bT~l<3 zD`&s64D1YGRS=M0)z1s9W@+|s1b`2qVF(a?e0iMc)R-E9SJ+Y;;)9yafF-J~Ni4&S zEQFvN{sc_(s!!#QW|sY5pVxQBe5iq>caD}b6HvKeuk%zl)OWj<%O?2|xYQ}_l?5F? z^gHjTc0>uh;PW~&nY-c34j@i>rt@596QvIvaq96{(lQ1LyH1T|Jw{t8d@}HAw3V{b zs}33$h&a%MxDwq)el8N#zGrAdhv9B)Y%n~D<>6TevPmwmcWV(yd=WB?)8Puk7qG{j zw@PZNCU4c6WoR@cP0w)?`PJt}ySOC-k>=*+=ee_@0k1-#&<1JUuv>AGp#n+&doOZ{ zQnks0uJtNSk7$!jLY@j5lV_6qM@<|^m?;(jXgbSVB#zD# zX30>LC#s0@lD{yyTTZ4;d2)`yS^(KcCxlddRPHck0o4>#Px~-uKNXm(uNS)PcuT2? z!qEK+K_PczBuIVv#>|Ei19aXgtEs604riIJ)Yo3EE3nB0{%d&Y3*`a1oFtLeWUmXsRj19Bssbz_b zou48#v&CcsqQ?`LHnn!4AZlvm+f(RLdoy?2B_|lJi%%@q$3M$I(v6#wZtnHZh#8+#UL|GDb61-DOk|yCT&gN< zSBK#O)7$gAd2EIMO`%n(g(qR~{jO-Ii&R}@{@CAQi5{}05PK?Mv*_@2=1nK6Xy`!tMTr*HAq3tF)ymRr)SF@e)ON2(_FJIyGy9nw#osOD?t^uuV9Z9y5NE+aepxFuz%PhrEW#9miC z;PMvGSzpUMkC_cP`vIJJFm;mmvs(3HoGcO@H?TMf^vIdejLAN|`Aga9vcWd}wlJ-XbT@xT%tR@dA(e04TyO!{lY`DIY%Eff;TcW80an-qQg2 zek({6$vHq6O7rh$G_xp!fan_i4pdxN4|c*U-?vg-t>$hvoGn60qMFC>rl+P%tlM(G zTYaJa(|gdwT{8kC-2#G{SXuiYi$8Dyc7@j-aIJVQ2Oa4^A}OzN2ZQI+6d+4o$lqZC zC@S?#A(wk)VP|=uh{va#U9#hNad81;v(B|+!R!Klu#aM^6{3SFOHB zX6CTe$ZGEj&lQYP3*LUQE$X;z@^qd$b?6g4PRLw^q4F||ao0u)2fFZ36BlS$-0HEt zke!hvqUwEXDl=1Dc{!IyJdvWb!YYv1b!97k5}LwncsNxYwPif~zRfEk04MM0wn$T4 zT)Z0ZC*t~KiTjyc()|29kn+)Q6augot9EO1O<$fWkh?d~3@x@YBeQU|XNT--1PcNr z<{Z%Vxh9?XC^a|tk98RbiUdxQMcGhM*_BI+Azc^UhvD+9)#;~|@v7g=ip_M1zFM5w z@zd@6mz_ZO%p zWIL=e_?}qPX9Y7BmvH1i>-~8u+N=naAHDg)DmkdIkVquzE)R9Et;SW|8LNf&X%iG# z`>DTFukdiZ`4*k;x(qU- zkMe$Y)O9|=2g=k>;sy`jb&@0}By{ulMF1(h$ch5OKg3cllMFR_NEhCX1Yc0nANCb= zpWU{s3Pv=9xk0RlqTptuS%;GyI@xy z>p~ZJxT;)EA`O^M{TWXZ0|I`YoDl-WW*O-(f6^J;3WsRkg<%3#jVE-S-|V9Z0Pa80 z_h=dOjY^(&d6@G0?gK?iu4`Aqci_tSvuuiAZ^JhOHgwa!F2&At0&MKKMl-mVcqDHZA7kUv zNgO`;`4CB1O@)9lj+qrTuhDU`fDs_^fc&@hFWY?brC@%($gQ}Qo-uNCra%sYjC88l z(Du+(hR&SG8?I;idt{7^2OyFtCq;V%?24a#XkgNdqe$}{WG{{m8@%8rpO$7ot71}@ z<3~3oeb85Hf_f{gZEhG*u<)@-L@mEJm#X+dqDtFaCAJ$$Ck_POTbJcaq=2htJV0?sexw}~+a>9TzM?iM+wxIODNNuBHPM2y}qb0C;q zsJ$@jaxl;My1TpUyL+oAKW;o6ksVL;P2zd>EHWUPk#g{eAk?F^ZZwuB_OwzKmEEm} zB!15Hwr{HMT|_)h$Q^mu&u|SB9*sO>(g&tBl_)%!bBeQ1(DB?2@2F3$_#g+1XR-Oz z9laGKg;MBjKUw{$=2Fws-`?|nA;(YjQdCm3#Knc5aUgOx^!jz+3j9Od)#V`EzDWE!+iw1I8evvK~sy=rWt?2up z9ajOp$6AG{dY12FWtx)`-jdq6(B&M5l@kuCZ>yHPy{A@~SUaf|!{`lICksbsTDUSa z!Q#mNG#H(oGHAIy`n&`8QZ-+&qk}^lXSB)7#%vqN8O^iDXx8R(<)2x{^H_WCNb|70+RaUpIvgrN`?L<=9oO@j#>jOE8owzq+&q6kJyv{cj z-@bjzZ@m5H9_yc5;{0uT05&22n*A$0fbV82-%B7SbrpXmq^4eqAHyaN&_?yUGr8Ez0H{z!zN>lS$3-_~4-wnvI$7ehieOIdh%tAJz|0Mzv@~QS(}rv6$(!5hjdp{lP`Jx2`~;tucrukcT$JnnI~WeDdZM$6xf04LaV6)2NkmL zZT3i~L1RwSP}z6U3|h*q)B)ZWcrsiBj6t_z<%enzI;bfJ;R0vXp(DO4JDOE3;I+P& z&6B69c+Hf4Td!ZXy$phgRxR!kN!v(mOzWC||7~qptnXaBZdHGmkNP=|)Y_U(HJ5e} zzndoKXq-1BXJs-nq2)<-dI-+yottljj8sV*n80cTwv1m zRNep&x^^9eUb@C;0htjkUfhcT)?M}vQLr#n&TxNk-16hW$z9sNVfPpaA5L7!%4?md z8+e|O_3Akp)VS&`JYIelj1;<`P5i9(m*}xc!&Scljae#iwJW&g}seDxIDao)<=W|jsmRGmU@?89~ z#qoQVf=8Po>qZT9Yku=~on*0MGetqNd%!{ydzm~Pz@9GBObHE&R<$&^gp$R+h<%~FD{W{0#f2vSYmg=U%UHdwaf3hPMQXh;Br4Cwm#x`==Ym*tJh2tSyBu#BY6kB_6s;HrufzEbc2(Fs0d zAj3%#?g^oD;Dpl|6IV||?26hg|LNOxCUh!>+zM=qe?7Cx6NPObMWi53=_Hl?(koOE z$ltd9dc|LjQ$pp3Zkca~d!61?{O+h7cd&ZQg^qySuSmYVF4C}*b`(WTmoVq~3U2LK zp-RDU<*{cmVR|;3h7B8CaV?9T-s`DI%s+Y+3x9yMCnBmCLAnRWJs)^1yK3Ov<^{Ex zUXKF`j0&hwA#)zaRgi0jNI0T?Cq3?YB>-XiI&?(v>OCH2pGDv6I0GPlMcj`_k0f23 zn*W2Z8x_#;hh`I(@Sv&hvnTo$FwvB-J-j-)wNN!7J-*wx^!rE^j^YE@P zsT;by8^I>>U4l=$3gg!<=HG-|{mr}LXZK$HUd(xh4YpFa z97ENJ7=8EqJ#{;+4EG%qMV)LU6l6V&^7{Q>ay%`D1kE3p`c6e8~#5su%KMD{66H)iK26xsJSQ3*=z zDyWKQxKhIITeVf`p6~xl*{ZNGV$4U7d2=g^&Q_cz?3J)PX$LB^YDTDW>5+2ItR6v| z;eu#Yt>z={ujR+aXp{bnLd~_OBgVLN$>+#*!n5M@Cht5^FGv@Dk42S|8%?aPpyZ-Th;U=~~$HcVZa4kMxkGPo- z7c$TC)po@(PlU+zvH=1Q=_2s~-5=)>fe)+OUa!l`*K}Edpx~cvH0N8_Bj0qK5VC75 z0}}-zLZbdJ^Np&8(QiHw=zNF7&?)hm-dk*OW8{;-ipdCQpeS#73_N*Js&3J>+XYbC zq}2U?F)VEgveTuklL@@qbcJe=w9e5-VAso77{f*3at?VSB<$RkQ_inaa1cNQn%;-! zA~eyS!PgM=`pxGf;43%{nCMOGB@jZYkC85|ihpsX!6**cu#Yc;(02#1+IqSHezsT* zU67_pH!3y);oTy-)1r-Uzpixx+^utXr9^voATv;5Q2H_j2lM;u1(S8<_ac$HsMp9r z>O}CqPqOUy**|ZJ9dEw5`_O^mTjuu}XmR_$j=vQ;BUbD0>icOdO@p68Ey|VTW58C` zYjhhuo|k}*$iPT8uF#c$3Vr;(mZrBwgnzIj^*;=BH3msMAl+iTAi>EN_MeM0j55P~ zM0ap|mX+e?sPib-Z~@hEp8N@Jh?tSj06mbj>Tolm#-5a0ouP-+f^Og7T@}|44p^*^ zd*7~nr@a00dLnAr-}4!qFY;XzYp5@-*7_~v{J0=`|~{TIZcOi)y1r$bjT*_NoU;3swEcIdNSyV1~VmR%2I zmhm-;w&Y*UjZ=UE6EzX#9f|Il#n4*O9~SG;8u3#fs;{nYR!RRGv6*}aYl9*mbxlSW zTBc(~r-28yJsuazB}Fy-`$9a!>B#BhG#!ufddCXY!KJjh=;^Ui3F&8r3wFk_1e7e7 z>O?n!m9(Xqn&9)=<9a&9cS3M2^>11f?z@92#A%aAhp{*R7=l%tRbqs4uC1dM@jce` zneEIMk*rKxk$k?Zbc9HQ{WAtihH=U?MquK zZ>fZ34r>qo<~Wqwn2d;FoWsRda8|X%;T&m7FV-)WWl|6e;Tz56ABAU14gAjhSf(-_Zjd8q3(eA9vT|wX zF%|Bhhv~%C2oL_TeIO_+=~p`Ic&fMJY2(MC%d^eoFngDpBX8RUxwceqjVWIcFIQ@s z6lQ-SYC4e~O;xXeo~u+!K_Mj1)SmyEgVad0GHGn^#8%SF<2}~vM*^jP=5u0*EI!*o zb6(T4PFA~F#{}}bW9a?9F*MSAywufK-IEGQU5 z7qoTq{fVCh)|))v=7VOb7%c%aO^VLqtBj|FMs#EW|7@o=qBd+;*zZqDGxk#(d87lQ zm)yQ-zrUldP|=I4W!lbH5n-8ff)kLz^}}Fn{)4g7Jo{foe~RpSq^hIHco-a?ADAQo zgX^hEiW4GQnwfwo`Y9w-5F5X(3WB)rQ>1(Fdr+v?45dP|xo*Bt`Bzkc6W4!QFAFUeg^^VO%CXW2>Y{*m71u{cA zGR(<@<2H-9akyHgqVoQ%r%HQC4wClKT6i_)ikzrOzSK1Hh7#@~MP~Hk;{K7pF_g|Y zsvkejPRvVVCE}-g;k03}y|tLVtd!7~*ZZAE;dH&bbH%RrNH#8(LvpYhAm zRg3jf%?Pu(7cLBO6XAQZv56|)=}L9dG_|UTsSeE0=FFrEvzM9Kc_~tkkkc#$Fn&VY}I}4t_Ac3ux9=2#|qqzdZ6*FPq5CDt`fa__qT3neen@VwY`RC zI}_gS1s+CAcXTuJ9usMpmNVDy4XWJpcqap8H-6=A+1>G0kqlBWC(w~&l(r*KN0K#gtMB4 zCRaa|^HuJ|&^<$78$%V;KEgr4qh7P>LHEh#s@>fQt$dd(GF9YgDMKF7nnA+bfeVgTMVs?;EJ& zZ44e~q7M)ArCcOlnCKc33qhVps(RWEDaUO4WXjfjD6Fe9kTLl1)2-G}?z{Pk6B58D zN@5la8onapc588t5*{qIcv*ATKLGTR^N;>mu3f8NMCUx}jU9mRUB|U=EYgy0FHp6! z&x$1DmlO9UB*>%Ih~SYQy=SfmVxgLm_7f=Ytr#c=9F9BI;!8Z;w0|vbu}hz{`uV5a z_W=pemYr-D7Ac{dA)LDc_p5x(nbg>m*#j~y3ay-8+vv45p}tqGzuK~O6-de-Cg5iB zF%G4t@_G884sj5gmHp47HSF8gKXI~QuogZ1>6cbbH=4X&bkk>0PLo+jw{bo&4TM2U z=v*}fZ>nvt*}$*#H`_KHsSOrExlHHKVmWg+R!=A6?e7Wk(8ThG^vcyCND5+_yb8Xx zA?>Pj?yx-Pf9SY>scWeKax45nzPI4=NciY}9Ken1OzS5L3TV~g2^YV<6GqWHA+2bl z@xIH>%b^n3Gi5I?s6M8V31jHe8B;THvPz%nzjNwAvTb+lW}$wn4=t8{5eji(?rD_o zq-*-_5{5QZ>(Qho%=Sc7R!(B=aC>>e^!utYo~R~x(syd3Bs%qV@4dH=5_HvKLg|xovRPkcy&4rEV zM|Rg8(lEcY_se6w!cll!`jqI!d4ycJjkV1LN}Pq-X&UwNF})lS%chFWB7d3ET!Qer zkLeK*J4*I8G_@VwO_-ew9c7OMv~n#>H~UB><&yAmGwc6c_Mc&2wZwe;`I=MDyAmm;BIS=IzUyW2_U*+3gEQU*|<0#D?kQ*g^pq8fZ zsLu8EW0Ve!zfb)wdVu zfa1kYL$J_mUdh77^K)_hCIIBIum(zLtTKC#Rt9Gu!$Ch9$TIn`se+%daA? zKw3%8=;|~%BAAvmPB>8h)R|lB&;_zFQlElHC%EI4BV2ex*7~3R)rkL4=H6$Y;~B>` zC;OF)VQfY^3wR!esyV^T%Z29RG(?eI-5f3a=30}kuq;9YvM`Cf3D)J!q}3d!rEO#$ zTODYYa!|l|(xGI2zyZ1PpOp?q_`od}q_dw+BhxTKv(q5F?C-r;L-UEay@T0weY`)^ z*K3Yh+vkO7xeap-^|Khz^)6hI)r5Y#Rwetj|GFAS*n*DJ1j!r#O^Ny>;Es{0f;-lU zFZ8CCke>&hr}08Cf}Vqh@YdDZoJn^*TEB#8g!4%I+y4xQ5q1+FmCtOZX+C9rVPidh zU~~85*i->UJFth%2a9{;eg9vGd>D!RG4$~yq9KDPZR_QfXQ}FV=RYEN(;>fbveW31 z|9@gVKn2z7AnoS2Yw1Vp*O+VcDP=?W((L5vQWo;}UhTh1_Hi(Bji~yHMv(P`3kZcB zbT#$;K~wm8$kwZD7z!2{z3WesIUL3 za@+#c8t%d&_Mg0ly{L>*+X05EiZmk&kK*6CY1eVN6eahAGXFXS;kQs@_On;p9XQjP z^r${v;AY3qC%JY%oK#X2ru?n46jGkEz}A*bU|-oZAYmsiY4O3@J9b99lxIgQ~YZJhR@hwO>WmS=3^zuQPA;A zJCQr(o7;jJ{GT)>`fJD#s>b_GSs&Omhr>oMgUQ$#3mH^+$vmv z%^D>tDIhEaYHH>0QFgEs`s7noJx1gcTlKK5QucN?^v%?J%O@7{y_>zU0{>PqHo3bD z_d!ZeZX8ba7{5_;gq`4wl?&S1u{86UIVH&o9)*@W@p)JQ&Lm4i#fAV|Lu}%SvyR`b z7l2rRs0%9CctP$m94|WRFu|;*R_XFY@X{_;&PaC3E*J z+tUMJLLg1q#4pV3KX4*l!p22-Gd=%G$ND$2DiYKDh^16M|6CI~c;YC)Q9}GNHk5)y zL^g>GKc;7kPNV+DOyMy-l$LDG`Ruqwf&D?>N#8cxgt$Fpb!`WLevBC31nqK(Gj*(H zu9c!6HhyJ}EWp3CT|f|Gu)LvbD&?;`5~524Il@+%JU(&^GwQR9&r1RFO&?m`r~i%#2xH4DVa?v}xy;pqoU)c*Iwv zfue0F*q&|g4B-08K%?IGY8n!94u&>IFMo2t^lAe1r61dz9IndRP9eIiQk;u$0SZve z0W&^IG$;#Dj?HmX+aod=fDfZ5O#LutjzIdjk4aYMW!SL2HC6b7gB=B)!>Y>H9NwrW z+bnEdR*Mx`4rRA+P*fNCM>*!fx%gMfm{*)6w!bsG9g!0O7GxUWFrg>;w36R>Tr>fd z`AJjYQw?4)%K-e}s)Sa;hPo3n&z>r2p~p$T{gFA50m5TKZ-QQdc$_Fl&(la_BqM`6 zA2PN1SGq*m;0;`uZU3aC0=n`sM?%C6jbT(kK72lt(6L?#Z$yqsfcZznY3(O0bXhyP z;BqIK#_v?$^CwgFafW2M%_fMWB)%dRtX+U)jJVAYv0erkm#a42*9O7`f)J0C(#X{WZcl8PwQ? zr@#gh&UBI3QoEdpA&PKM$0jG$sM?5%@VAw{98D_)%s=Va#LG}Tqa~C1o|YiXSyLtd zk)s+)z?VI!Mr}cK<6iW8b(%V0-W3*x{aXV)r&?Epf_JR7Z^_vn0isM?ijw#)VMT5u z-WV_&NX|p$W5FrU$C%9^0+M&{!EEi`UcM}wn9L>@2fs{(>hyn6_0?ffuHDx(Lw7d}FeuU}-QA^P(WxRK zN=U;Hf;0$-bSg@Uh)7E-sZvTKC`xzCx96PqT-WbAf1Ltnp69;zUVH7e*FF?^sVrAc zL+BlD=;{6m%a zV+vJPN+PjkR(fCJE(PM6f80y7guxRT8}EYh`v3FI-Ot!u_cNClJCmFA+74*nf5;&l z;Wv-6UXn8@`?)_RE| zTE(aDLvPY+IPJ)8pFbK2Y3`zqyT@eLblIk*IJw5VdS$}*wmV-TMkn=y;uDJ9xR8z& zO~uMCN0j@O>sgi~8V&#FBkfdPMgQANnZKZdZCp403rGI{e`rlQb7n8&@~hw6NihVN zG4R^l&^hPzmj?y^A`t=Mqe`X*Wv3gvW$F(|@OH33WTH2BpZ(I3GSRqu>??i`P+dYR!$-GpFXGcTHseG|rw6?xreqvP6wVU$%KT3er0^U*O zn>Q>iQE_C%%7I7pSw2e#*r{G;XX_^4&9-o2r_0s8TZ<%WptbZZHW0m<8K2h%^V2mo zH8AkEa=DEU=YI@dS=Em5i$IXfaB*=pu!Lb9a=@zrEK&?rHck%jU(p%~%rcFSjRn)2 zoWM469UoE+@({ca5eusiU;+y)XEruAKm;$u8{0ppy2 zg)RzLt!Wi@92c8!ZwufcfV|}g(K+E$^_L)F$86_fn(qHJ`kD`B2QW(yb5kWvFmb6F z%lKS5m@`KS#{OaMM9?6EnvG50vI>;Z>ISJj09)3{UsoXYw(y;lL+$8lNTp;W9FBTNd5*h2RC63 zZ?QKeTJ0sDc0AaA5cih+SmO8x>}_5&Nm}Ll#UbS~)Zn>b83hwJlx!D;m6ViVGK;lL zQA&!Ql9GgE&UF392U|x}z|qbsXj~^7AH1xrTwfV3Oi50jtap3=@XvJ=1`L3T)(CJx z+r%brN3hujjuY>_S0x<#Qo);t$6;-}`u@+){Qc`+UVa1dAuliQ$jAuHu_S7xs#we| zEJ(r(7_)qd;j@Q(YZDz&RD7hD)6NM0{gh7dDKX$4fSg7i!Cax>deleVp~8ZKt?lh= zEVMhbvo?5meM1TZ6idcgQm!Wln;x<}ctT3-%AWHYtnjX*W@kUfGHpn`6*S5Q7atvC zV{Ii>EhD4PU@NkU_f(Sof~%z0Voz_1pdb=y;&hXh`bN*tkn#ddv?g2P@|%9KXvF(J z?-g`_YptR94vXMx;67f(BXj@~tJzr?HU~YjfV@1Le+iCr%KIoZTD2Djv5P2f2Ep4L z8ZsF<9UHSiR>egS7Om5hl9J9IzxP?ErB<0kZZ>_+Rp#P#j-Km?GS?Em(0j}hZ!^FA z=@|&Qka)}z4n6g5Q+w+(#yX+diHX!&esD730UH*d$N8@WY9GOX;Irp*?*bVaS?}@v z`}aZDj6lqO2Q!9__hO1X?aBQ5;CE1JkmRs10AfHojT+@n85kkR*P$2zhZN*02{p=p>_k`{y7}kYE3E?NqqNZG5afe3Kig zSB1Fe;Nfo>1~r=CYY3##FER`<$&Q#Un&{eJY`=}4`0(t+Z$1(nScu;IzG3=5NfJIo z`k5jl1QkAE%LWfyH8s4X&}%nr|NF0cn4B1An3HB8`QK58|FD7j$8784REQ>~_Nu_d zY%sdOz_#{-Oj>%uzXcf?6l9c-r0&oCih3*IZl#NDx-y;qgsVtinS`S63NlrzZGc#v}LS?#`mIZrrhx%=C4)G5VCBp1phC# zsjjqmRsGoyt+zgeHq3-|%jVU8>&eI=%=^&67Aj+Qr3X{9LNWfUmm|LomFu2%xmB7ackvH}f~>d{e7V!S&Krk% z3kwTNt=|gqs9mH~0ILb@1a{&FgyDMllcNp3nM))`waW0jAcEkoa-Bo(f*iilp*I;~ z6CC*s(vMrwNA}(E-{F+NkpZbXH(uT*7?U-iWAYs)kpcoEo}g|t&QX{XN^81K$jbdV zULw)Ey02*~HGXw<6>M9`f7U-4yZO!wogUrjzx$%>D$RdymLc&>cjoHrn=Bk05c*2i z*4Dt_0fyw~;F5ze4OaX3gjHI^s%gC3ycEt=KkaaXZi;}3#OlGDJKrFN)drm&K~M*+ z=cbgXXu^RC=P;2h1m+*$x?*d~qhUnOGmK*p3?^0AKR>&afLH)&V+2Q?5DJw?@m*8N z@%r-5pT?OIFgPay5nj6&ey+Q_TVL4jbN&e^*#3?G+^3SiVN?(%PIRt>STw`PHT8w1 zclUojT>rswln@;q;_d#ukEfg64?6a{tF#=Bg%dkW%o}Gx999v*qzYN zc+Rr3v*Dqd1^*foDhmY18JL1Lkq41?cao5u7%2N$DGc%jrg87`94490$ z-V&r(t$F+QIXgeSei)db;TMJx*>@aZ@?m6boDdru8y6QBA1|=xd$c2zYD^F2IPj{# z)C8iSfE_oY0o=M^9!QAVphpmIiSxect=BnKvoeA)@1n@NH-KL5)R;ohWsmP)r6p;ipqhBE!`QKXm(4kFl_XO zQwerLIqB&SVYma_=Kf67b~pd1hf#-Hjoz-1!iJO!RW>YWiLuGUDV2n<{_cbtE`NT2 z72(GK<0^%JHLQ^2xldEvQVKho^Yil|3-XH2fKMId>qeh-qpb@Q7%*+?NTDK*`W^|TgrsB)j+&a<>^cAg2#YYLagm#Q7GCMY?)?8Iv!MyF@{B*Nn z+4Bc_>Z;^Fp!xW%Xz}0J`K*3(?V(+k10>*~-Cp8mjg_xMfApQ}Oe(|h0KRqL(K z{fkclk|(s)V@R50JWiHFQ+&uXQj4(6o#7902QRhJ#6^sx#=kh3LJiYGR`Z3*K%^mi zYu@uL<?(dlv41~v@Qvj>U z+R;r-O>msSOsW01$ypqWBpx1KnXaK>F>d0_j-#8h_Rkt!2-kz|NXy)*2s$MZysOm)Y8==@^+ok;N;NSs?yK`4+zQ#o~Aq^H^UG8^8a0@uu%-W0tXJAeLzX_ zpz|l?;o;fplBYLf%hA%-?(XXP4DNy0aQD!_fV@}kj;7c8`ns}1Pa>Gag@uKI6N{jL zKuKxoV3u^O6=Zl`ygV{be4h4i*1=B*T!Q*ih5FMk)KcAv;3ztPgq%-XEhHplG2#dl z{5ye=XaN`dY803I_(lB}p*AjIbep%gwtBYUJOx08UCEUWZGxZG#Z9)Vb)rB6(p2ey z2|oAf2Jt`LPuP6sJ4yKVgLe=lsZWaQCdv{L5(YngN^_?&iI0mza%X^39n5E!W1Wd0 zx%X_TtE=7+!Z*WhKy>C+gFJB9v zrp)9j_<4cBCSaY&_1>|$>j!6m$FE(x2EG{us!)nSF4k!SkFePTIJgC&?d@tchX4Xt zf-eFd2U9^;(V5Aq8pqgxI_&#ROiTpWK|>k>KQZ6B?4>Q0r0S8sCSr4HnA-b_a_3o!zJyU&qH-t5(Z`*Tg=pUI3FRET z0Y&hu%mW-LTBp8(p=ztY9$J3>%IoX3e$H!MNT4-d-ucp1MDeWNn~PyT znCi;WRbSaW48$P?zpc&ycl~@6AIw=FbjHx#TWv9`dgbLYC*QFZtc+ZzQr`lgT_GZz z_|mL(0mBKhrwuQ7jtT@HM=_7u>V0-c`XxmwHd~?~fH$#o>SOlTXQHTz0=}JHGJ@hH zAUxPQ!sB;BVUPqk{p|rUpg)+4$16*x3&Ax@ zuBgbf^HYI;D^J~8wrWqWLsMp_9Wg^vgJoRi{%jZ=MRfo!=EuB=n*s~Wo7l&jc3wHR ziVy*gya85LR;Ct5dP6i$j;k;R3a9dCx{0fbqCJD=9|iu3-hqK8k2$UBdEKp;(L7+R6`E)Xz6}HN;?&Y;F@V?><&G3`c&o|5e>jA-5GmX+57+vLZ85 z+9VSJxz!&Zj>8Da7M1g&?@7_Qu4v&FpuY=oXU4}Ho@DUnUjn)SD2txlu3@vqp}4D)GYy`6C{%Pg10&;z4dBo%jE!(+oQ~uU2?a%Q zEYmP%J?!o-e#*8eN8l!Ey_f0|K!J+arTboPRJGwH?q8Kp%zYIVAen{2cy(u2R{?VM z0RZhhGftS=b#0Fzi6C@ngzvw{dfZUG9V&$36j!j-OiFi=_Ffqh zhp9XkiHIQwNI8(}o4i+PrH6-yg*ghv?g%i`(zajsV>lmhT(Ay-p{ui zp3P_9TM86f?N_-NBYprqBjXMs48655KkqbW7iWpJy=ZT3p zwjHSutAEmv_nnVZ6KyB-@?N2HHArvXkfN}08QBM(%d^VX=a-~}gbV(DN0PV38UUMj z=yiVX5YOR6v3YPO1scOyI73EJ@dJd3ibXh5&Y!bmq zn2YfzxX}n{m*ABl9$s>yNpKNR#XmYYIH1O*<`>gG7ef`H?f6EKpt30Vbb?DWGu*sT z`M3}zxM6t&c%CaxGmCPjBOaV7Z#4(V?igeSFy&A?p$B!kGkX9YO3~6guF7+Z%O~`Ne_OFv-eno|L(bDSE6CH zJ#XYBH*3fXu)_Y}&`ZlpLLd2zL^RqW&lZ`t0c6?A18}KMeo)5bN-c@|32I0eEOFV8 zX=4YVtIROKo@;`roQ{h-O2U3PHeE-6T^09SJ_hO#Gw@Azb8tXPwLqN=$yh@5kgGzN zn@%;jof3~ShnL{%)BSTG_Kg-yJ)5Ctzq<9L@)sLTG$Pi^Yin~r+ZV=(>MKo=6cw|5d9Fcf(p0t##>4! z^taw+mLwHhEN1cft6>ARu6oA=Ifa`!_dCIk$b+Pgk=_AhRSWpj#XbK}Gm4^3jVoGnv zS^PRnbllRBG?h!W_V~G%WA`__@59@G3h%{SX)P=mE3v9To9w1J7)VCiR5Udy)c)$8 z73z)%=g!*DlQDXdVmD3u@P3%3Rc)VSD*>?OO9VN(81^8E?_jMy{o!P06LPId2oGcg z0Jap+vs#b_me)`+K*Qf(j>EOfe1%Tb0AD6SR&8oS4ylK4v<`8`)4|*CV1vg|VG>5k zSJCgG#}XpF>7#*@%Hw+T3s@;IKlcb_#lx#pqg3zD3j<^3ejmJeE@dOhY*xocx`2%x zs5~u3a`Xxq`*aqBI^)jh6Ir;pj1^;)egKnTF7S~ag@dH#r@rLi=-6v+Vb@%je^pQK zaRu``B~KhSy}0%xZi=NCA`|B7I^>y+V*|q*MdBYi81RrMaEN$T)|V_nXeUpOvt1ZT z{p6w<(Ot#Lx_q-f+Dj%S#RPs{=LrR3lc---C)~Z1_E5Y_MWLoqpPvwEZu8sK0QY;9 zTT#9-aL^EvNx1wvEkh*vt!avx(ky8R&-rQa6B6iU`p4reamYWkvFItK%_9;-yeX!z z_l$i9J|3ynh-MmIV@=~b93CkA9`EH~~Ksc1LqOvnsA?Cy*nGpA1A z`)oRv7a~Oy-;vxbQO7e(N%N79REqA^O4v+Mjumf2`d1GHN4dJx@@qLvIzCpe0v)=d zlSAXQB96b3L|=^HWJ1IIj+TX4#|6h_P04$T6fR2-b`l~X6`vi?V2s$cSnOY#754#= zTaEiGrV&N`7ThM|T4Td6g0n5?NMkQTLcxYA$Cb>o_=fttypYqdJ;YcQ%flz*)llv9 zsLDJtM836Y!^@&+<+%+vOPIAC*y}+Rf?!~j98#h8VWwkX;Lt5j)ZPXLA;{JeZ&jr~ zB$t8DhzDcevhNkwB&9Saq42s=VcABF(()TF&|EPoHR6cyh)yJ5`IuLxhtr30QQK+# zigOav#6}F4sMGWScya|hm!jd2>>TcxIfS#RJJ9nHpEX)n0)T2*%jORM@=U@}&%z=V zDg@K(fS7{KTTkb%Z3rDm)auQZ!!%e_2Uxn3RGa2NG^n!e$iQ2Z0UHF!a^UiU9(V+< z(@>Ry`>|rSc8$J@N>DafO0%=ac>-OY8*g4}^u5-Z3hUg9)2;H_AU$3uMcFje``vdi zWZcp9L1i!5ai6m_kzwm?;>E>_lv#~tKS-;1esSYBfXumB@b)*Uz5V6fIa5(#Ve;g^ zKR(D;mR$l*j{<^mro(7W-MXXYXYPp??@i0hGou`I_XByfq@v_hGeHwYBtlR8YG zz@i+$gvk!K#d!}N$8$diGV!;+Lwg5uEh4lf3E$biu4olHJpzv+g~6el^nJg)N*$13 z6lfsnY5iI|0Uw2lvc%%a9zkN|acu;fo;W;;j-kX$I|kfp*4JUZLK+?^5{b;CeF9ZY z>}LXAF;5p4l)M_05_r6{q&-DeKXmfM=`?Kpobg_K{`^^>M+xvh@P!CgXwK;z6^q*v zOK&K?0M|ChXQylmV+#S`?0QYH9Z#VBNUR$wdy7K&;JI{=?zBWOd6EOTL{C%+-J|8Wn}0e@a{_%RK2gx z+Di~5qT)2b{R%bZA>c4|H8sm^=n3xZcoP+Dg54B0GMm(RE@<_|jerN}vc$tR%Nz+Q zqj0pk|8I?B|Kf)uXqBcg>hn@QOAav4OXkM$FX4Zi`fVauDOqF)`Idl! zfY?K!i0m4+7zSR%yA%f(80?M)a&6|e7iwi<;`;loXDNeXB0o9OX0M{I)v5W-Gt1;y zYWT8}I?JGP)$ZOEW|6Hk+y{z=ch2qF}Kz^r5R3lE*kap|8xT`rrm#qVYtzEpL^ue{wz0-fB*ZoeJm}KaEHC$`_MDw5gHCy|uR5p9?j8 z6^i+9`4&Ivp?8I50;^n~3i;yz?>t%(`UXwJ_gDGv((;A+-{J}JW%?65W;N?IPZI7h z4JTkV5p54OpyPf*Bvsh@a)oci;ihShUaPrWO|3+t!4p=i^0~{58rRLJA+2@I1NYWP z++(4ms$>1|9KGXXs2CG9k_EC#T%)2!G0*U}c`@lt(-mgE$bY_>#9nDrb^E?x71Rs$qEvV5`2Tv%)eX zm{-{bTlTy-@b5PcHtnZsxlZ`#06mW{yn2QkbZs*tuRFM|ap(WM%Il;VYdr$va~mOA zI=Xjhp07&rUdAQDovE~}4zu!-hoA`QS7vnqOC$t4V}8v%Ut6dz^~qIiz{)@$FenYw zD!yY>Q2aZy^9+s#e0U6`dT4zEX9K1lkCq2m4wHrHtf1O84Vt;oGpJ#LnmH|9 zYW8wj)e4;-ofgM_Mpot&ze5p3;o{QLaAdVh+@#AJhzJ7cWvS(dK$rD^5QFf- zD(?kF3WI#+qe?d4#jd6Mb=AaTq?!{UwdMyXYs_D3Q_k7y9jY|2vLR+w*L8_Ik(QEz z8aKac7kFRT4aCmOjNoVw)4=~%+aO3%mz$g0(t-io<|vpjL3o#mte|ssgL0}i^XPWad8nUSn*Ck z9eaPjlTmb3mJt~1KLfA?Z9%H zatq68Xpm{7n->$3adurA&K3ir`o0^og~x&V42b zdSV8lu3K4P!zaZU`o(@&K@88A|Md6Z8LE$60|#2KkG=4WKc7LwoG8|38c$u6L7@;Y z_|Q*cVlp8Xf!ssaAz!884^&9gYJ(=C4&>^s4IUVPG$eT33_YB`&}7i!mj)_YhDd}R z00hJsy^mnUelGzjPA=pTUANx5r zdy6wo+RuL25!K}pTmNHI8;z*u-98fx{TuIWP9%|RB0n%`XKElh{4TDIoth-+GQ^EaM}-D(FOZ&*8| z>+YY`ii)Ryc}umBtn(d)?0TGCu)G^7~Ej*BpFuwP$fa=3)kQQHM0ZBVA~G32qUL0 zwxV@=mF1~ONJ8lWY3hYhG9?E9kYaHi8%;to`>3Nr_CuFf5!&;C+;{Eb^VOr&Hn2dR z-S}_3M3rzLjfi`D|1(Tan>-zb3g&>YMsboZFAo`t7}5E()H0qQIl#}y7d|(;irr=g z^$4|W1=T4XS8E@T?T+#uN3f4eT>|eK>CFpLT=eu213+Vgw;RoQG2S`C+u#n!$del5 z4w4wxQE2?vU?2xI7X*Lv!b zoKHtbCo9UXQs8j!PjZ|p4X?SDz=c=FH8S~~ZDv}_P+qwTb2xglKB6~))}5&lM9T!h zzR#bH^z_0uJRTxHB{KFBrwuKFrpz_GWmXEh!At@rxM>On_MrLMO$9Xa7~k<>U49$^ zJEH`TD=mFC*^?wJbjz6^D^nGC&Df_Q;HP}|0ttKj(#x{~wloJ>RQLeke1Fpfx=!ts z;01z@7ib%}GfRDq+nJVm57Pq@RU;#klLy+^7;^fnb z@YaV|D2csI`Nq=(BowX0ri@qhaS@@W?%7)MMafs?^b{Re_4Qdz>dC~s$nF($>QET3 z8f7*S6z~TMc68mCi$hw^2_=f)%*hy9{o!4Yk%}y#D4^~!zjw_tY0WbI;S`i`gjOYy;Qgw&8-O1XPs4vpsII^mY z)Y0EZ&-T9Hag8JRsv+zrNmK>4<4`lU9YKN0UsoLHN|B$G;mznPEZuauyroe=#RIBQQsD$2|GuA zBYjf6HU7Wn-cOn+p2O-Br{Dg@^Ny15d7B1!>&fTD>#kjv0)boNm1akNeG&+(8+4sS zgGsN{uBMW-&jziebJI%jl}7!_^Bbq%3g5OdB#)b*Vc$T!F3wI#f#btA+1d=9XMvp} zGbM)PYwA-tRvLJlxFm8Hij!FjR5XTRb4()`Z;D@&E`5d*c2$kEj@M9-LokDzw}@Y2 z*aO&m@N|{3?*tT6NL$}+Zsx&hng`G8h6%ppRJA>^8;DngYzaKc#Yydl8ac2^Db;g1+Z!=dS%GViD5Tvt?JzE%)&Mqi^1CMDzo4; zC8^Vw8w5sI%mTn&c(z=h7UfF_11#5qYc4YKAgk0USkxQmaG2Tv%hc@{l%^aSiU-)w`1A_sm_-(ET1OX4C9z{vRn#`M02sM8OiA?T7`ZAI%94P?AEbL+TC#_QZUWKYPf(Vt>w-aj4a`!Au%Pa zToGOOpni|!=LcC(M6t>t(5zt$UlT)c<}`>p-{`12-_KVh!gfM|Zb3)2!r@PY%#F{H z%%whFRG;`2^i48X#8|Sko;}mY)rwf|Eh0haRLJ^t`Xydc13HW+aFr0P{v^6sUW)2e zJ%zlD1pR7G=Nye@e`;zfc6Z3vjZ2%v`rSiP;ekur50H`?pjDKWYQw!Qj$(OdBK>KI zr9iU>f*17o`rP1lIMRCCArKi>7VTf-qBkJcdWW=cZ*SXr%CNzFCP`|Nu}vtecm6T7 zHBgd{TL*x`CE7q=$~lY{3qv76_v;aHP11TESrS9QNbu>J@nqq<(&95vW|{{5$0gwF z#44~|1`#Iitv0lUnT?$BpWuBeTN9Q0nKaH6i0Zbd3dQetipeM%ijyy=@C%oGkicbtA9l_I%XeT!s z?xJx}0l6I50d6(~Df6v#I z%EcfRd)m{tl@6}|JgC;t>6T!OD%9GZP;UUD0C3YUWr!75aAFM+)$)DWJc=+=R|l2f zVvx4&lgXA1t) zr(D|>bhlFYCGYyZg$g(TU)hn-QRtvRHQZ#Kk1_|O=mKfvUdz$`y{cEYO{@%C_`aOR zgWPn&O8O-Jgl}U$m;y!-ePyvaj_I@9l^h@=NaHpD_kj@OVFw6RL53QQ6Ew(x6(MUF>_Odt8c=XTPg%VIDJL>3Hn<J)=FPCP?Fg!N^2 zzL(?1+^5-|gWys3Gx(fKk!Kf52&n$F=0U-NMI2*TZHqOne&w=0 z$vi(eIM@P9;oPRRaN-_8_=I~-%6kC-_0`fYmv#XsC#UA6nZQR2sGPH<^)uIw9c=5f zyMDv;-_~ay`;am*?c?43ePaUy;W`Z83H0lT2nbrUw$Ktz-R}aSUUfVSd_d}zQEcE7 zp_3^>tD^Jb`O~MDKzjof!!}}w$hB$TLmX zXE5v8D~22bS;J++VfPG%%j=ppr2kZcVOy#gF=7kod78{&hZO(~QyMAyZ7sqv01f!; z801~mMOgfYRW3F8R(qU4JE#nLmAq29iHTJ%!@QQ6Um9S!D(IYe*vzo>W<^EC;-W*& zYgm674!ag8;3jrFhlbNDV5LJTXAt1 zpCCbLOZj^n1Wpabdi+;I)YV`s4Gq*Mz{gGkYy)OuunDq4hqr?nc^~xvy2=Jjo_kUW zH_a>vj-nLC1%%TjB0Iei%c!2wTzm&wvaCy@JopS$TFy(3wzpQV<@8zEd~nyeTp5Wa z%klz-l$~j_cDA?WK^y|NpXYA=2y9}7zl#EeR3Yqkr68DrQoX0A2NXF;_pw?_0f9*E zqFE50-TCt33-rujb8k$-jYe-F`u-yo%$DdCSQ1OJ4`#tm-SHft?=&?vrDk~2``NEp zJ`Hpnw}H*aJKp^*SdFK~C~VnU2y0go3m0@vw?Ia#BS3w)H|73wFn7?++uIuoerR}d z`?_$tLdfF)f}~9YfH!lJ5bRg;0TmVe)k#;@%^pJnybeMhJ5vEYhvHx=;wyd2UESUG z7R(p!^Za!%U6QA5~Ldv`*@k}eF%6KT$4Q%3KE-pv%PbXZK+=F2Sc0%=bK89<#v0|S^_ zVLcfG^{!{M8pc;DIIn zdqRr6NY(IBC0tNb_yefB z)OS=OLQ^y^jc9bX?~`{%!(GKr*`V42eSVGUHuKuNj`k_w9a4@PhrQ4+eX@pIgFUxE zTa6(;8s#Wt9z1|og1!I3D?mF$MxkwN?#f9wH#Y+@=`iXi1^9kq69h5PVz4(dk%(-= z1GPTx*KP~3Nmz%bt)X!f{O5<#S$R!)@fTs!XMxuB>#ScjRpS2efaIwjpO~_Uf0rHg znQT&mfTk4HOC;Wj-6aZr8HLA$c4gUQMs!Dfk3Flc>>LZ64N_gwhGhvmDGUgv?v0ft zjkmnxwF1XkXr#&J1ydqJynC;D1j7$U)O*VLjzhR!z>0Hlw9PuCeEv+Lr`oxO<1~nW zpr38}NVVe6XIRoHu&(KUj zHjaC_ko?Yj=;4h&mpX+zNB%grh~LidBaJ$K56=>>oT~72WMLG8M;j_~%XcIrgZV_D zP*TWhwck5~ei;8q3`Oe_ZfEu9GVamSM@QXzV$3pTL37MsJ0q5%i?^BJZI3eqzWYc!eg}{6N+cqrfjU`B;7@+=0QsZvZ+?1DA%Ow=C$k*kU=+pi)&S;4rDOcH1FlF<$ zuBg?VF;oJsO|FdV2r?tB=2jJtM$QPwQNFnGs^&f@Cy_X198p2A_l^1156WWsPbQIg zZx8fNL}`d_CB~q@UuqJk)2tVDMezcQQD4EcroKFb2not82{#vAAJcLDHd4qG-D=QI z1YuW%BH$k_rEZ=NU3a5TW@4L2&jLLOPaNjiY<2ho(D+cWMni zR&q|VHj7z{fk=%*V26h;1O(5v;^Jwnq@)ii@YutqP!h#T5N3B$BueS-fk-U>1eodi z+g~0#u(}G9spSROnS@=DDHKhg z2M4WT=Ab3$G+H8G&TkUfU>KdjvK3j{thS_+_r|M2U0MeRsrsDrpqm-TF6#w!8|^6d ze4bcBRY3g%VAeG_v1xYK>O;)`N-1rR`fGH)D{mxRS=E2lX*n z(vaAdVmwSOpSzOmi(otC-3C2ns_sOLri+Tbg9P=(0cvc43D^eukU~Qlr3wW(4WSBF zJ2Y=%{EeT>p{4F=3QuYCJ7&_iQQ*^*Hemlbo-)J^7581M zx$F6EewU*4N(9o(>_6y9=JZXM&($UWCMFCwgx0%~C;xA5IeTTT9v9D$A(#0Q`> zoP_^JNKDN@Tv72mlsD|F%IjI1Ewnibe&FWq_<*KpGG~S=+Q8!IYAP{3BcqZj$b<*i zFx9;@P|=Vn_@49Y{}@M?>1_7TY;$e-)e$Pn+=jn1#QzRTU}u-V+f0?J`kbvk+w;jy z!EDGD!!PzdO)#Fc#(RBYm+|i$G%I!(gN>$jJ=`rA29s-=t2&g4rp_L@RPVqf)-E*7 za$ydHb$kvUk->ZKC_pSq<{(J!Dt#eRwSxHoqjmwL!HR3El~KyzTv*c-sd#Lk_vb0d ze}OZB{>`)W^z;`dsT^3PWJU&d7xAdbtt!Yb(4etmcq~Ccc^_62f?lcQ)+7x0LBaE~ zRdT`pit){=!1gA$f5fw6htH-W1<$$@?N)=~Rf9T4;6-2s{L+n5$eN%>ko>dNjrHSK zQww{Gp)D<7pM@))!CP74I%ylYTNyM9)z0(k3C_P=7FAa`acvRCg`0Q`JsoXP3|Zz05;@X!C6&Q z>`ZR7AYme&l`2^EB7^sH8@zrPMxPA^)Y~BauHYB0({>8S!TC8kkq(ApT|d10!oxGC zkN8d{FRf75_k8}`3`wK%<67DI((ALSB}GLJ4i1PrjP&#{Kr{#U5^kcgzJC9}K+%u8 zw=pvn8A9Vtezn=b+o~k3L*DfKAE$4n;f`_1KNLQHJ~r&~{eunLWtT4qYCNU_TPv%a z2q7sIrK4>`#-AqQ73;H=+`zVo0ol~q+#UK_&nwywuN74bOgFxcLA0Io^74Y-!{vct z4?K07Lv}_MGFfs{3!iT>^wQFPxzn^{)cO?iRu)XgM7N*nA36Va6tTPd5hn%JbH3+>>+!OH~s3p;*piTk+%F+ zkbg!}a_EJ!4goC*q5Aqy!))}lQLfT0B~1Mqh?4HYIn3Xr+ULoV{FcG~H8z6lKtjr$xO-|pyrN5jfdL&XnDCw4}1Dp?r0 zfnHwINQky~lGFU{%+J6Jmp^6o&JeecJPDUhGEh`QdBnQ}EcVdQ^p65PQ*d!K>F*E1 zD}~v^Eq58u9A0pMswau#=Vi{#b2o(2%<6AfT&%#CkCp#;Qf6#q;wV{Xiv%y(+vDw*`(ov|w&8Oli!- znCId}Mm{DAM;R6D8sUM!!>y(15vI8@gB%4}A)y$aqD-dH-t-$s#0FGLJgYz{n~Veb z1C`vw)h14-h)SNQF5&TEATi&#&*Y$RTXZF}=`}vb+o=E-H3m`^hC6v(gM;fZ*#v7& zBDH}A9q7uHy)SU?+-;acboc^Dy#1%w6zq|_2iV}_O|jg#w@SG zjlL$wImgZtTk0X3?Ea%k7yr6h_>*hGMhjq1K+Z0c_=V`;6Lurp*!?^YbX@;R$oSK# zjSUaoNgTIvc_~{n@-}nQ0S+3&lT3WTt@GhQ@MY1$a60g1YdBw`Tv@kV<;~k(7 z*A+y0#F|zQXUpW&l#ZEnb%DtPkbF|GzcMbW^ZAG6w8NT(y6*hVRKm8Pu6Pdpb72z; zlAbpkG~%N6bh^G9W{BZ-wB8~nB=ltWjqr%a3Cai+doYlL*SC?1gQw0=-xV=ik)U*h zxL+VXwR!k6mrg|tMHCazKpr^6;tGi4W2Iedfij^~xAG`+FL_&of*K-+xOE>Dx0Ow^ z#_}}YzlWa0is0cZg;8ajl<`|SS=V-;$OVvoaINC;4f1$q#&c+TTkngs3*j0Q`oH`@ znIoBIa`1L0==@HCrW!_vPodLY1Vo(b@ugj?aM`qX9$)^U|YyPJRop1TqmF{pADwzp|0yR zU=q0*&A#UX8*yEf?v9I17M>f`t~e2Oi_54fGqeRc{Xoy}AGPxY>B>jM2f{bWZzPa) zn9>qcOV??xpr57Kg2W@}4c*L^)Pq}o@492KkWKdD)eM3h>hrw$yf*xYwwES6 z_io*-02a-HH}pvt=eSFw{c9OH7v{IR{4_)tXI@-BKfsxJU{Ij$kB*F_`I62)wHo-Cf?t2Ao*+|3CcD!ujo;ep%E=I-vtm;Kl5>5ZuU^(3??3MJX` z=Q`%_ZeIEtPnI^0PC-lELMJ7@GS^3P6R=01A*1gYCz>T#Z4$2;Z$ z@R4@LNEIaexRh20r+o!*+jYo0&fyccDoFV{CVNW75sloqulcWcj+&OVs?D(^bsRpu zANFbPVQ9eB5PTJWEv%t`qXm=K8?JnGxZ4?plB`e^Cdyz>i6 z@~o7Z`(6l58vV8Q1`~m-QRdJHVR{F{GO4G%`X*MZxhd$$23lHH-eH)aw7oSXDUuM_ zxilB&aid710!JzKeylh(jopaC$6F&wdJ25Y-OcI+Fib44*708TP?PFtjVVQc2)qkU@XjkbU-)pN(1w7lyw zUa^t{%*gsa%K0NpTtp3UYHQLHG|L*H>1#s6IE0kKubJ<37s-wlU1CQ1DLlk0k97`T zB@q$lS;LhtWx7Y#At2y{5RT#w(en-ok(DQ?5f+XlU9vA5qf@dgX6C#?`g`>Go<^>v z5WZ;%?X%8NV6==rBj_~fMl?sn*p-aZSbEur6x4#%aOG$xN1ozo89geo7fE@VcQUHn zSBti!B^1VIYiFD1r{Yx5@lr2~mbU565Qs2Tsq$I3;#E2)&N?72EF9+%it+-)xh8TJ zT}QO;YR&NMK!RQT;$!Uv8yodHTzzkxqd{MR9#H{*NsMKY zCo)khTE(d=UrlEDW2mb5H1AK+t@OJI9%-zyk^|^;OUY77s@TJVs-{~5=``VV+~(?; zy%O?HbzmfunncAh;J8Jb>VDL1R8w2aW0Y)j!nzmoy(WR$4@xgOK|CAc2_M$laD`&U zuhDL;`xeQkh*NXp>r~}GfBx)vp26M~?x!*c3Z2OMa@&t$zT`wqLOY^+!gE4F6v2Hf zBeeJ5tZ;>QdwWikck8y@g8iHhzlN!Qw`!(O5|OBEIvx) zqbKUccAb{n&X-=MikYqXDbaLtn0dnKY&MCdxH6}0ZbYPINz-{1$u)w6CtrBjr&?L7 zb@2$NS)CGGs}GpZEk8D#w*i-$cB|QJQ=FFqSsDmRx{fY>vl5ns#F#%Zr5~4|aU_F8 z61ZpQc+b?bJiK7#;cliw$Px^OH;(wc7C zQJ?Hb{W=M4;#8S`*?>$CRY#F;N8TW~mwM564jO8-|BtY@49cqg!oKMSN$KwHZX_h6 zOF%kB8tLxtlx|Rz4(VWD5Fm)UKAEYXmgWcV5u?(R^=zB0aFggTw2Z$bauk>idZc6~wW&6|pD zEiNHaC)asaHd5`so&Msvgg2ub)bG$Dh4rmHFRwAuN^#kau%2 z7?UWWJZ!?9D`Zwo$)cR67`mpHNzlAC3IQ~3wi5I!4}F`l7xYaC0jeE2>0M7NPrg!Y zJ=`Vyv^vo#?z{yt7op||QgKxbJOc+NYyZlS_N!B9awGF!_Wr9VEIl_g=yr9qq z04531*a}KNTAxHDgcBCER^puFwXD@NZ5G*R8bvM@i7K*FP^OR{+rsFV1{2xS?@-cy=A1$q`% z83o*H3`(fOX*;v|f(S~PX%U6cyd;D>Z)vMYB<@FCi}BAZ3Pj&H9(*vC-OdJ1KIH5g zXC=s=yIPcHnl4sEyc0&YFny+N#?+0hLv;Vk2jw3YgM49f^$^bp*RoHMNeFE%?F}Pc zUVY3>X<=PXEQZ^OX80eA(Tdsgqko58FDt-S!H%Ts+*<`h!8Z;wao{f)88RxiH)PEY zYl>NtpwTPW;imB?2R_m@ zS)x|KjJ$MP5lDW4*qXk3dYgZ&xx8&1cT@PYMqynhpG&IT>qbvLw-3u3j1Rfap{@h)5A%@e@q9pkJWod zV1(R1FW#rDllB+y{Ko2|4ui<+xCQa|b0@(seetR!a|qB<0ROC)55S9RK%=PP+8@Pq zu>=)7j)!J8QDibV=4;IUs08a*i#=2kr5LTSZ=-f@0*$6|PN##>AGPf=dSl-Ra;mb9 z?6FP$EbnOS2T=g&@oWJnQ!p4&#{WY6ZaMM04qNW8k+&~$Q45C9DJNK-Fz4jpzkI|8fak&9PA?|v<{M>mB9bXJ3(8PjnSDfzi*Faa-`ga?fG>cj0 zjSLiNNEzYKbhy)Y1+(?eEw#JM(;De`fam5ou>3l(vv=Ny6Y37WLkZ!P_#5cL0&9a% zUhubOr$It4@lg+3RmJN)iZJxjW~EbUABI{ItW3AhA(UW}J-H`-27IY5+EaR#(UVKP z`q%&$!iZ_Cx?4RuCwK0bo2pldk1g1TEw~G#zquG&`F0qkNEW)iyJa==$)98(KuQLx zQx;dv1ZXza)zxioZi1}`5e`l-+#JY)0h>5zs^tQm16+sNo9t<@+Xr*oKRiPdd8?qK z(!(%bpfuw#Bbu5opQmtz)dI#C4Pd27{v!=lrIxDHM`<$z*pGo2!plXF@IER*9k-^o z=m`R0V1Vq&K;O6qmmhdYfvA=eSihB87SjsuZ5;&i+*fHOL6hQj3?6qAip7ro&tU46 z*p3sZ=U=c>Q8vRqjB827=(22$mpBQjsh^LR1^>K19Aw3evr3`#kZFH$&rg5``*Pgq zdqqHi8yf1ePaG>SLuAZ|Hwwbqe%m5;F2oTE)Yx-!cPO_AEa$Au%t+3)I0;}X+DS=I zx5`n_MxgFiU^i%9`=e)w?6tkKLj~>KTOU$_$F9Chc~adTHRo!F>|!ctQES?K-c%!l760YTn4_bo%JgAG#jFiL3Xw)@(9g zQdbF##-{6^EDw~pltc=LqjW89f5dS|iHVK|hGF_ZB)VwF5DN75%O1HI(koz|l8Ff5 zF@@JeK}9von%C5$dcDptFeB))!}6ge#p!5tt>4%JG$iWkbk~5NAQLN$6SVUhTLC{2 zn81L9+@sB@$;6oow1erSYmXM7k;IaTe&NF{Pvl)6Gkv8#;MM;@fsM_MgMQvbJ`v99kLK0cw`G!t8`)z$Vzgdx!>LKGDo-GU# zyfruIjT)XQnB|u*Op?2-4N3UtI9k#DN+Xyd z<#4J9aT8elCu)^s%c4K)I{rF`JV38F&4IXoy1oq~Jxp8zBGqFDW~ru@x{&4K~~8F8-bScH6pcR(Rp_lQAuh@Mgn_NmNf z@$U|TpXB2LtE&QW-rB=Mz&T-90%Uh&jX_W_7MZl#%zz$C79<6M=b~H=r}79isX=2k z14QFrAR<&Wz(^|qg<3ia;t-&K1!fp;*EJDLTE~A06N1w64CLr%Wg>Q9!gcB%`@vfK z8i5Ynz10mr5CuHX&FMm0`_MQLmdllrGhV?aa1porJ$aoKsIttIQ3UP-_3P}XE^4$a zw9R>}Yp!XHhb+bwNC3Q7Y2(w5+U}YZu%N-Dnn4Zj8!MNjjYC^UYNByr0Fls~`FULt zF2C1`)b{!K79vFi^ls6;GNPZzIs?!9N?)Q%NS1p*<8W+__)uk%=EvLQ!PAmzbo9qKNFC@b!=gBF+48#G=g-0Y6+E95L>9hm?G3e%E49&ibm z5FJWulklRSYbci!r2Rh${zAH-h3T?d=LEKaD6^gjPT`2OrvV>MMgwd*#V-xO6_Lad zQ{)eMzHI<)hOJ4oU zr0<}uc$`5&y#WoPka~?^_acqgtcSvbiiBj0qRZ3-gu`AV>JYCu#Bex=4)A;g!X7sp zGNIj85%fQ&D%`QqQ$0s*W~3*;(!nb0Ezb83lF4WW3pB)Cm7OKdW<9K&=1(#05#?uV zyr#F=;ZMfdpm8+FcWOa^_l#8*qvaB2BP*)cs=2BVBSDTQaVBp#+o0)1DaQmF>?ha1gT3bU=52l*cz%hg@;;LrU z4G8vdacXXvWin8s3lM>qMhF-a+YaM)-MI_0)hgV=V`v(EXb2c2L(f2_N|qClHNf;9 zVXLDPkpG16#`HjND1rGHe`W)ZKJsTz6^)*UOpw%JHWAUL2(YC}pTEgW(`BKFg&S#p zFG61iHPa)r2~0AOpH%7~eib-jT_lwUAQt*=ikx}F_B3Q#B|%bQ4qq&0Js0o%&j>{j1~`C0C% z5GqY9xu~Cr>DCaTnwr2Qv!EaW_`A{ho@AoF*Jy9bw$nmFDrQP$2K$U=^>2eb@ zGjkKMIQ`lpNC7HUN_8`IT(+FkX_{s%QBJz{+tI3sKyF$X{~+u%0rd`+E}%{zC_w9{ z(4g(2ju&--7jDJi`bN>&&ptM|mGZ&60wr3NOw{n?pvvHz!i`DsK1OJAje)tfuk&6p zQ5098wVdLlzs2uZ2i}{dobWx`*F+Aq@JM8+Ru&#nm@(lnZb9zU0c+C9gKI^c;-6w9 z1%d7;7*T@W%@$ju)kZ@XV!FJsY7?>UvIwj~OshIaGy@&u1#2=Z6-)0-qhYckWEeb3&b?DnNf*gwLA|EzD<(X~N9`_7j3jkNl?U2% zR@^+n6uqWQW_7ApE!`Pj((QVQ{PxuAxhMs><3QBxLhJc-3U%d@K zDvGwQz3%OGub~wa*KEK@1Qxc_5~WO- z%Sd{!%dKI<%Jred{?T-HgT_zm(3RsFS8svC~v3^`S5#e)v)%+t2O#uRO!-&s6^;H zQhZ2vsq->7Mv$1_lfVw@y6P+J}efCvryHeZ9M?O&(s6^)+DE|5#}g{J1j)3%D)5 zgB`v_12KY0X<>HsAo%ui{L4PK)nD(^wX-@a{9k#1Ym8q2E5|4%Miwo@sT z1k4!spmBlOnB)##!l^nVx9a;cUFh#6(A%)vrdJH$t7Jlp{Glo~b5DimsknnqoGK34 z;G+e>*4x%6>*TNKkHJ=VtBI_1QmnI2OMLpD4xg?L*yG6kt+o}G?yp|WRStjQ+6Els z#__BwY1wBGwWyn)4?ma_f8TPskjBccUD?dz@ORv1CYPS>Z*1hxX5;Raa)zb9?Tsah zRs92ow6t#5nVz*v3tb6Dt zjN^!^iLtY*h@H{?0y&1}ytG-0z%nj&2RZlx{{XX4BuZs zvr-6b_q*MjN)~ocYO;&QK-Cxd{4W?4|Jc%somAZKx>$bh6?upI(|wX!(T;MS-^tdn zZ)Btk3=ALE(DAb8WmjNpMTN@A>gsD!Qtr?HB0nG4C*C|f$f@LJOZ^47!;0o+LM$xe zQWgKG4>{tUG)zoF0s-ck3Cwg_3Gi{#n_N#tACuBlOS$ya#7-S+5zX-@Gh%MYu zOeq?uxVqYt{!Os}$_YO|e(9hp5F>KA5<%BMlIGUv5lw>|EG;$3y*wM!Ob&(z575Un zV21ui0INp93ygQhUozl?<2t=gPuGtwcJY6G;hmYgIsMzt&Stormx8;w+hq52-xH0W z+~g3Cfu{7g>t6TbZuHZxueXV{`-wt+k)Dgom7;2oYy8Up?~$Q~wNJk01(jSD z1Fzro2k!g%2dNOV!QAhLPc(veQ(t&*+>g9!O?s2ty~!OG`|kWm$RRw8`)X1>y{!5S zB9Za_Lr10WUb!FpG`k)3ihAeT&7XqQwp@m?^LZVwEk|DXX!>ed+sEIV)N*7Cqbk}z ziXTI|Ho5`_YiiWJT6ooDUy#WV7PbdFDOaE5HKG~ytnSdR{-)jReT%nn##?Y- znF?fAj4ATzjf^FtZ)2esqucKtKRviRtkhzKvAyrPVxcSLpbKM2c3vOL44s-%_Y-m{ zwfidqNPLZG=U=mK>_>ZEmpP?UU>&&7TnyuJl1K(MtTkw09}=#d)r7E%R$O>lF+h5TpJLq1juQnfS~ zZ*+1sSU9GWZ3b`f4?BNj5@Nf#-b-Fv=ilu26rP<;?(E{<>>P@8{&#y+98?bM%m?9* zkKTYfqpIq7(i2J!9NO;BB4NJl+%x0fM7C4YrkU9%5&}qySK4geb~tT@f79`Ab{l8# z_AfOgDi^qfcu^pC*Z0k{aQCusa>pD^(~gcEFN`1NW-P>izYm{l_!oorxy)Wo{eBhL z06^d+G8HM5i6mEqF;$VKwPU2jF}$az2cQ*8{BI~=0%Eq4YOkUmTzo=34DbHUj>?xB zq~IOrUmDRwKt*xZnZ}G)BDsF~}>;vDYL4P#HG%%dWL9#$<9hzf&3L1=*3bH$aU-CP;*wE=k^?%9vyPE_W_@mW7 z)!ssGUWmF;d9cyXfLB=b0|E$$;NR21)K8sd>4s!3?Lp5j&dzaUqFx3C47SGMKY#u# z{m>%uTt4?G3>{h+6M&`XPi^0QHV!c6{^th;@qVI*HQ<|V^Io3i!5BR{>(;!4^V6QL zA=sAxNn)tRfxxEA@-GV_(cx_IKa~t*r2y{WAE@{L=YIyGK6@c6 z)Y%SSXDV(i#?C)Ohz(etMpvJ3Ccbokmr{ETk`D_&4v4yIg#fSCvoVC03&@j!1=!!g zVb21SQONU=|E>Gp-_KORWsO!h|DCZOL_U4V)0hyQ$Mw8$kO~1zK9JGxI|xSHaY!im z`Z)I8R&u1i-adM8CA|~sdfp0>tHcLu})fdh^NC}7w6kQy5u#9MyK<2+AcZfS0=y2oXD~?osuO>mf#T z<2nq#wx&a=%e5~_#Z(SgG>75*(BxP@R#=IZ8pXB7g{X01e?R!zWErG8V?iwkXmmJq zN-tnX6kxrerK3~N5cTHU#ni~mBn;8teu2=WOlA<_9;~$90Narz00?%=!PIqynXsNgZ)XQ&pK?*$z+Ygytqdz*t1 zQW&NsnFT*Sn6Q`tP!$QY*I9}}B0@1|d$y3XBH{3K228%NN(t@j(S0+l3?d>0BfaU| zw3LNDU`wxhUl)d6(hWi^HZcyVWz*O;B7jcLSVo{&IxrLP6|mI~v20rbFYx*WkO<5} zeMp(8^vB@whZ{#CNClq+4miG6aty}Bls~g_8D_yLK%!55E!9hCBL$=u1DOX}<_(Zp zJZREjE7`zCCgIJxwQ<{`97j5acNgDlU?EA&4`?>1K;&`zXFcrBBf_Y$<~S9D&}RC9 z1?Dm_D{EAPB6vEK3$|MrXgU_9O3(oJo-I>d`bKe!I3+M?tO{y+f|UMK>MTj;>zIC$LZ~&xFk5gbbc|msq-HZfw1gyG2F%XwQeHanv>vvU!B_E8ij`$w^N`^4N zofz0m3MWI-7=nFj9ZgXm;Z3)V-kC+XW^x^kQ8+JWQSP@7`VA{46W3Mq;XzT^73lMc!0!2V^?*xW7Y0xWx;#QN8DJU%P+^c^ zZ2Nrhx+BRB#G>+JM5~3{xZdY(+#+Eyn86-$bs?1Z83;ButBqWmRsm=6f-4aRLoX+r z@xeaxc)~E18DAy08vC`5#rPGp9!Oz|xPRAUN^@D%_|HN&xZnD(fO|3ZJj>U)e7+1eWkuLef&>A0an*P(Gm6H_>ZK?OIYP`Z?T@S-pVticO zK&$CLh5$^$#DN&Lv`7*m=Pb}`hkPJ9-{Gkdt~Vd?&@7w=<8qvut!2%&Tu=VyWGB=R zBn+iHFJBxVoH>Z3L#hoM7IC z4|^}dUji+~V9%_hP@!PsC<_ORTf{x^00ZC%;=Q=XDMd<*A`uW}WQUKX>YIt-HoQ)M zx(14c`r3r8;82*gW(PvUA^-zrq(FeB`GUmhMq<>IMtm#C2ff7T8BoQ!$4OGQ=1eFE;8i(VTJ@TuUJQNUqe@ zy&=`)uU|9wkIj#OK=8)LxrM-jjRy|2#;|?N@O3B0ZXV-@YG`uuJco`ugrc4?%n13n zVQZ0hYIeK>})=fnk`{JbrV4C2{zW;RcBK;H60dUH;`gxA5gU zfG>Ld1)Bjt#6v}uCJ)<8?O=FAY+lHLz~YeU$n+lPb*zT05eAY<=kvX-tj@iEu<=1b z3kdRWeAIP$#1@VYrlPSxtdU)2c^Kj}f2dX|Ps9mtmvp`rb@KtCgF{W=pgrS&s}dkL zV6%^^4)D7E@X{TVf~mLW=G1U1~t7Y!*^&*qvfy6sf zN+a4P>04Fvh_V4q7RmYM@4YMoyG_uGXK&wMXRY+$m@q5FKIU2`@cfA6kbme_wTRFqGw;p3TMKC|rgTEVh-&(|wW%6{fF`AL52%^=S7{sAB?M0e1aT;7h zCG8+d_BQ+FZfx!`tn+aS45Gn1GAtL0mH~bqN_dUII>~Nsu+d(Bq0=1j|3j8$`rYfBvZk?NW3Y86Ir7; zgprF8YIQd>yqc7=B!+k&v>1I7syO0z;9eg$9Qhq#6)88KzU2 z9&4;oZB+@w-xC)h*HbueYY)Jw$>tiLL``YkskDuwx5uGAL78~b zj;Q{UCk64|%J)n-o4?C>vp^4oX@7l^1u^1?&H2wZ!@qu)s|DL_GAf5G=lGhspOsY$ zxCK-9YM*M~8XysDm>WeRS6iaR>8O7LfCMuJ-B+&B!UJ3!(gTH}fs|DwP?ZTZSzD25 zJZ1t)Bv!HQwHumA=G25IvfeB)Yq0V0o>)uRPTZtH@j%S#LMLF5gKzC?OG-)-5HBCE zkf1vfROI4S!VKEYc0^FcL+0ti6wDsO>YPZVBYA#)I9X7bEkaN3U#CLR5)8jJ(v%63 zu5^7_>k|B*B--dPP?LK**Qh!4MDQQwN>~KY=Nka#99vc0^1%^2;w^lr2Eyq36`d8` z#|VhKTo;6Wa7v@GYRl$f{cv6n?%0eG?k_d5>&GjaQV5x<@tBE5x>J6rM0JQ$aw9jB zU^WnUlR>XQLzGm)@JAfyHhqEU62`@4FvMpNx%KC#AX|9AaeS6CRK~=j=W+_l7HgSA z;Gmjja8&Qp=JdGS;-QT4VnC#p)5l#)mB*5;j&Tl&JdXr;m6sPx@|F6%)hZ_eN+I|0 zW$Q^ttJ5X|J!*W2ow0cR7TyFPOX@5zW)lm;7rF3pGO>g#m~eY=W3U|KruA<*3ZyJ( z`(R;U3RBKf8_U3G_cczVsYJN<@MF(y5O88YlA&|3enNZbD_rv)=*dZXSHPiyoX%-h z8KH`2TSlmc%GXOBhc>-tOjLw+9W&PtdlA7l)R(|egnfmZA#9TyAOFfCpn^IUhV>=Y zCXGJbY{BM19QKB=@(b)xUw=9m?|vw{1mPYF^P$?Q*S#FA5{`E1n0d9}H3IeKZ4F`u z3z@1O%!ng5Mxv!IvLy3Bl*;;R@17Lxt6ry2-9^ui&Rl zy9MZErI9RAMyCmEIE0)TaD3L{DhfEoh~ODE$2}FYB{S8k)kd;u2YPlKgZ5;h6kCG( zU4B^0PDWvI^IV;mlBA+V2_}WBS-QD~qY3;#gDcXA6dSShU4O z=YMDPQB^mE@)k2Q7vZGD|ChL?RcOGn)Ll})DOx}f7*f{#2;vZw77^s?=K4;}V>ymE z6QQvE=xVYsVREW(7XueIgXe|aFf}Mi`XEs?-S;45)T?6BQeP%~3>w*-L9hNKbEU=D zyNY;Uvxvl&NG{!)DnqA*r4Q!3(8&_;tK^!Men}JFy~N(e-=22uc&spgTTgcT`t%(2Ne6pQ0!e>RXHu2!<($&IFza&XM5Q3sStj zP#XN#ei{EQ(Dl9JNCq@C$+vMb6A>EvKA+d9j>{adNjNC;lwg?JSiE5~mJfy>8Z~93 zS!;!rKlIy*0M+G?dBC@IlpQf*0MA@#IdJh2`F!idjd zjg%i`O&Xl0irI82UWa~;bQ}wd$fOA48w<4*a8V|&VL8vlZybkn%F5su!?_zvgbi)P z?lunRk)V)`=5$#Wcn3#|7Gkd}yg(73Pss#!ru+RcT#~YsY*q%EsWKM~9->dMoEnUq zrUIHCa43$f-gH;5%LAo6M#yFY;#_yryu8ld?l7x-=Q7ODN0DH%iQksb#44dysW8X= z6}%i(Bqs(ovQPxGemoeoVUagD30j{s8grDPnM0=mWGTi7m%X()J) zsIQvmA5&>f3emBxKmFFNOFo|UAX1$N7?@}WR<7u#rVZTzfp zdkSkWMaCK<0(IV!b3LaHoO&r)Q6b?sX=zi!;5|$7K_2>Cs=#7p9~SLChDtt3jzl=% z5@imA{}ZQsHa$BTeT_!Xg%!6VwKN1bPk;`kaE{AS$WyBRu{l*fvOy!*T-HQLL`q;6 zBa?yR2*4L-4)!~Jp!5Yj&uIj4w1`)Z22wV&#(aXXhVC97}4q@9*d)G4zK6O zm0Fl(m>L{U^HkQiwACYRQ9Oz;O|#Ll?|G+{x~K=^!UP_?ZHhOWKO2w*vh26E1+tH0 zN)hX1s#B*@g)0mqv`r(tEkWD8)%=(}GTjBc{`-QOd;1a=((N=Diiybh`1Dti9#O(M940|SHD3gWQxp^{c@l^Q zC1sGR)JvhObJY_JfhA9|qYN57^;r}KbZpTm)L0c`9a3w1V629{_dAy*mb1G~Ju#Y4 z0(EBm?*fu7m^^<5T`^)kfijbso&A-RS0M=X0ZR-J+oH<+P3Z*hqWCeK2tCvpN57|( zQ%zy5euMP4UJ)M%bp8GPb}#wI$jC^LLKF0VZnH^u10%0+K0Q#K8r)ts zP+Qu)ieD&w$y&w&uj}Xe9}og{765(v8-$M%irB>?hX_Vop)~$C;;QOMrx&t%eGK<^ zl=BGomhj}1h&wDHW!9L(EQ@m>#@B8&`H%*eiIQ~)J5^L_fNdn{dtqoL778zyoiu|Y z&@@Ucem(d;&vg!V&baOP?&kc<-o0PWyZD*s{qy*s<7CzM>BqwzWI_;9xk#({UhiAQ zg}A@Bywi3Z;geO8JYD8vr@R8>{m8UXYUA*pc(M}L@D@Y`W#2!Y#lj{>-Zmcs;0P}; zj!$%%m3D!>04=iP^fQQM{ONt!3D>ascN9#&yoX@DQ1!Qv-@^Vz-#2?cl6H=&r~NSu z>IxM$YO8lH`#lYMMZF-|@xn%l%rvjPHV3i~d*|bMGpq4X-GZxxxMRv4QtpFE0hWcpA5`O0M+|s zcI;1(PR_YX?(F}TEBUkZYtUX8rq8R~xp@ZRzcahz31^F>VZE0jCrTL{CO~5HwBDiF zgYc*0&i%ZNb?ES@YW8qC+c(4(vy4=w|f4#&|7$s3o?u3x8NVMU8Xy{7TM$ z-FRy#5u8~rmM?9D=tMk2p|x;}LBS_&7r&bRdPO^EkqOKwr5a9&z3!U;opo!UnRonG z$14vj?yDst1JeSsk%K_zA=F!~Z(Yzy(tyIE|{cHEBJ zjp#hTdz*T!Nzj(}0@Je2!er%@jS4w<`r7`u*C1_&gXwDjzDZyp$H;W3ru0T`+WfIy zHbv(Np14gZHE+c|02owG+GFD*_7e z_o>AzJ(8Al2?!tO@mpv-@ok-!pLD`tI0}f$hw%%Q2?BvL1HONABH?p??yQ*;>qAt8-a(zIvbCjOsmBvhgT^8 zFH}OZdXc(5NQxF;%^(0(3Fdzc_!ku}FRB-!kEefdTL7K(ia$TO3iWcopnnC{LaAW3 z##m^UKpRp|7X(aJ^c%2McM%;yFBbilVR!k6T{)qyytn$i*gB&ud~`NQ&d(@;R|gW6 z*l1g3rHcXKZR73W^cTn!$k`QUhgmD7K!wRsQa1$6UQCEXz)e4kuvkMOwN1xB ztlZI6l#FgwziArceUq<>$XOp_SvHkf^!R;ovN93xM@@-DhAEatvF9U?6vXn!S?o`R zqPR9nuQ+;lwRApwzS~X*w(6D0M(ruOWjzVhsBBa(7{9MDcLmu@U&7G{rFwbi40@Sm zxxEUbW75Jd%9pR?v${m&o7hSD(SB*YKF~r4_$a#__e}1w7Ko!P0ByhZVPQgG6Rjy3 zB&7n0`0r;mR0_tT*;@8m4t@ylWSDV$W9s@$>TV}=HLG#*b2k@=ik%=ereo+?A{7AZ zH0yo!TPK_zAe9)Zp1`F&i>wTi-H}}DP#d(y~ebu*#V@Be9&u6VGFlA8uybN(N zFcslweQEN`ipOSbP#6$oKKMUf0q+-%P(bOUUDFEPFTjJ%i!cHHtD6<~JUi@V)#KB) z=lg?=cvQA#iBYq7(LebXT`K~gw?m#ykX79GCc9GvNy`Q9wvsJ!{hvKM(2xq?E%Pxj zjs!@~U2h4>Jvj5d4r>NI^l!2HrJ7fE&+7yIZ9_XvVAD861KQ6=n5mRgs$vZ%#2#2^ zVNlBg5EQ>kbK4OhWD=|pMp~5Jh2k4>@VLuUF4?#2)2W(&zwY|fc?t75&860%?Q8&% z+~@SP_mu`l``4}|xP5X?(~!t59TVTztr}!|tHl7f?*s0OR-?UV8=MT?Cqy#9gpugOmObM@{1AL(~#IIu{=K z*pnN}0fK)wM+A@t(6?a`&>Vv{Fmqgf35pQGiQcLbMAXBTM)$| zEcKxyRn*}7TCa^-s7$q#EaV^>Dk;-25l0nTlMPur)Rik@;g@qOX20Ffz9l1i+#DAb z$Cs%D1-}bY4(vz{am?PLjI0M@SHNHy<;z@+H3!3Q z0LPn6X?*%&nNigSfe8~;F(S_|V{7KtJpYTZJKJfnHh5WsMmPHjVKA>X70bsgil zmf6OjUn@ZsCV}TaJk?LBuHVr(AxxYhYPZ5j2$e|eBF-H=z*2HF%HCPu)`FvT7^wMU z`6(A0{Z#0}av~RfBP>JQzvE3PEF5&e57Z2=5VH?Zdc^ao>jyb(+~a%xzKQw%#OU7_zP!4aq}{1P4<(v$D%z9tvM64RsaH}MUKYPts@2&t zAMTkarS2L$c{$iU5xZkXpcLfq3jB#zs*J?D>LRVRVvrE>@ifu`(G@A#N8q@{G!Qrp zss#0;yEt1cY`O|eY@bJBNs2Z-La7ki8KAjg*H^kS_VAQQtlMQkf;Nmd3AAMNUx zw5K}DK}0CbvBpGuCSe|w{k z-2ZWE0<1VMxV>8+#d44JP<)uo$-qI^PPx;BzGR{}?%x^C6tFBA!5kdu>N?v92w&n} zW2^~%4pbwuF2!MZkI|eWjNGG7Cm4v4v^K}Nc9w&Z;r7iX0U+{Z-@Gg^xTied>jfCG zQ%55;q!6qCXHhA2cU=3S(%!PQ=`Y6bAL9D)5PnMKZ-Y_3eZ+d??xgdZ=An_*Wt>{G zam4%>)$8BE-J^H@J-eB2nRd}lCRoUE<5?G`+}R5{4@)1hr2{u&LzG>DI3|=_$7sXEAP<9er)%~W;8i(O*@WYWK zZ->uRMJC&g1WH-tO#0zh7V>jt%%~{8B69ffPc?Y@2oj8awUU>eD4d61e0ms8aa`Ce zpk87AyXE;Y;WUX*KM&>os~=cP1y$%HoZ~*Q%LOwPmHS?d^D|-*4u-=#+5smu+Qv< zv$ag5LW`J$v?E360kU?BF#`0J8|k6EV6XH?z^LYLlorU`2s^7bc8z14^L6Tc+l%3>K_k2x!~aq%F9ms#9SIs3oZQbhvAYn{V7va$Jjm zm72`29v6BqdT#rt-uNNRjY51J2`#NiN87qJ=B6z1uM`9ijEi|CSoPTeLM799xxv15 zF4TtQ`l$=WYO&}$urc9>Uni}fcVe+Uftm>WDwVyLW(1?@1m%(MavYHbuZMfk1FNhj zMTD+NX?a_Ka$Cb2ux|XpdW|FWrvgJbzjX-n-UbQ_uR0=G+%LzJBD)`W))meSnw$Z4 zQtEX5#4M*SJZMDZryAHb@UVb~M12kaNdxEPU%w_SXD==S8o?x>N(k$NjY`fa=@b1{ zX3<1XUPv!h=v_t?f{hq!q+uv3_J_C6o}QsLgPQSQCpG3{q_q~szQ-mp(Adb=C&oJ` z*)|vtC(*Lm!TbX|hJY$|*cv9z8D}X-NNY`&2=3|@r`x0oH=gOpg*~Set0+^-oUY(1 z4JI1;Yu0-v`PKlrln|+SHDbb**l%V$rP4oR20kLU$!N{LZt&X2eiJVGB~j|4{CAf` zfr5Mdn=mv&etQG(T;C}9GH}qEq2rkkaYfudsvVp+2#91H{pQTE4f~1_rUBWQ0eLI{ z?h($T5H%8;6qURpNxlH@v@SPvB-NHstG-{t=6lWKY`~L=XAGHLy$)F+M=A9u83-`A z!)rnZIt$I&$~We>P5IwpwI1xy`-C0(OnI@z8Qc{>oT*5T%hihRua8EX5E4_MC5g8K zpGV_QMSN_)$dQ+Q8>lo>V%s0^_gzE4xB!(eh)Rfn?PO4Z z75A|D5i%U`FADgDev*-d0Eh?)por>&T2_1esA&~p7R&?MF33zyc|I_B9B9@FQ_j4- zLEc;)dHK{Yx4-6Z=-U?0TDm*M+#4>*d)mPvET)RQ)}efP#)0D-CJ8`}NRzxcV`@cQNHKwS?s}E%(usWzmX0q;w@*i_L)bDeuoum8ppv_Qe+a|2}?)_t|^5 zsN+l4W6c@fcK;Mk6rX5ix#>|-JE*)Nj`!OIouXTnB5dhEmLNX<+hU#dCi?52ac~|j z7aQHwwtK(j3H}_B`Bnm{W9w+&n+wN(DwTivWQ|k=yl2OrY|lG!Mm;G*KQnc;k`|fY z#OeP#ZjF8+?^!YW_)&|bX^5=9wT@K+Pru#eZIHluF!9JD$ zsVwGMCzI*-%C~1v{#Ab0JXunll;Z8wgA=`rPuuS39zP)YiBAX}xHh}Ji#+z9OU_q5 zHW>YAr~UD#{7rmE)3W%d%~ew0E;W2>mkH{L8|J;%CrK+P`%P_~ip8CYvP!~GJX?oq z-(=LPBcp?2`_Wjf9SvDXs7;oa_pBhI<;QG~_vdyO^*&1oco5g~D|d{Jr*5lz^hadN zD?PW>*7Z9_k6WkowX(cL#ngXfGspLxSN<)F&_J7Lm4P`4&tnbQgC1wYRC#QWx6*nb zU7&rx+XGH8-<6xtWo2%Y*!5a+l>l{4RSRUUmAo@4qX-RrB#S*=+(CB*C%a%AwgvQ z(N_wr%CZntIhU|d9EW99GS->D<3IoJDdf@Q_T9zWYma+|q{RDZr` zoMSw3fmG96D=j%_G%Y@VPf^J_>qpR^J#_u;d%j8M!(n_nDkOGxc@U58ZHIUX`S!-) z2vYxbMdp?1QoXl{0^5_lW%!Yg@j;>)-AA9PhNtwp?_=N$plXB?jV~G6ZlvG%ng87U z`8nr9ob@-K~&OwP~x1|1GFzee)N?ryfUl7+SFR~x(8-RysyZO|(6 zEmbW1MgKKtxpq5^Pl{cV|7J; z{mh5TNfhL6_W6C1NwWk;M<9#!F3$ZbT6Ts-Z*II(Tkmk6&J)fw#FEI*ANAuge0j4S zC&c0j?PpfvAI=8*xyAC@mmO)R-O&9zHWM8>xUY`n$qlCux}W1a-~KMH;BNf3ofuK~% z*QbT_6|Kv<&fN51hu}2PsON_+AGtV>)-W0UxsK~N$*+F?(yhfbq(3;c?3(v~3>vyD z;neN0-9C;A66Lwvt&A>c|F<3(JfB6YF4x(5TcmCs0rc*#*Rqg9yb$Jg~nQPno z-}@i#E04!NmbBQhx7RJjzH&HUDoPUXJ&g|beAUj@avZpI5rG{$`f+4W{M{1Y?bY$1 z@AY=Jd#R5>(sR>~i&Kp%-Aub1QQklWl*aLRfgir?+wI3*wbr9w?r_>a6y@nSh}dt` zhps-UZnLvSGtK(=F1NaLJXs!T0^bN?>|DS^FGf=Y(JJMg@?TOseoJ8sKT|Ig+e+rAt+k@@W5^x4g9&}$ z@u~f!15)$PuMGD6BqY(wAV;FH+M!>4(jT0yswohev7v7~`3xQw);@pnZp<(96l5WH z^)b(Pf41IXW0rC(waE_V4nNSN<i;U->TKT$(6=+ucE=Y=Rf%7mr}MNN+Z)1KcqME zqVv7LQ{BQ_A!N~pDqZi1mR+02+nFL9bL}7T&%3`MmZR;;3daZHSFEH@ibM_{_+Jev zeCA)efEywAI!|q*4P_nu$Tbe`z}!F5kRyRfse7FUi|=~$pEW+u1?-+b*O=yr9^`^@ ze40Mbn_Kd?r5sBU#1>^wya~Oe0P?o&pDZHT{G(JX_dR<`%=3kf)@9Yl10kv*TE+B^ z+k5eIbAyuSH1C|YwWSlfHsL2LYwzeUk`VC^!P6ZjWsu_0TAz}Z-`C>4Qycv^;%DkX zzg7QxOxxV+?2CV8`V*IMIcdhO?6?=#afh|y;HN2Hq^(1D`mL7hey-{AGLNpzIQh-< zBF&w_AyxHi8}2G03-NH2#bxJtJ>9)ZhhJ^CU!->`Osf|0v*~V;*qzTczLD?K!AhKB z2SvLldJ{uzR?Bhlr%)nE$d$eu`{HSU&#ImCJgex_?hkF{&;i0H{FjTVd3z2?52rEO zS4l{Fs9xRB`~mr=uaU;~wCjK&M&12)hc`}q7a?}yWP#twNB=j*{fW=^lMFF=O1O1b z>&s!b^9gPh{-4IqDlE#dYug}5igZW{NXO7fiL|uR2+~~=QVI;xjdXWP4G72(0@5u* zr*ugVImFEO@V@`?AIG=%vBM4)T4}PPF0#3gDq;0$S=dQ|+>Zw@q zR7rl04JyHfc*2klkJ^RJ3#5&bQ?38xcZPt=>7~b6Jx%DGQ!lTgTBkJ-tCRZuo40?L zyzOM)8%=Za+^Yg_erf_Yf68d@!Km)Sd5`Umo4%gF`RF1x9qH#+zNl^Cv6kznzr;WI zn)W-UaMv{w5wE1uES%!#l*iZq&8kUFDM)a2b=OP>;__F zv3>i6XfKFtZI~H6MA5U%E{W6*My4sOV8pl7mOEe+I4YtXHGtDnIz1t+$Z)Y;%*w<2 zapIo}pW~;Sl&m8!W7*Edsp=Ngp7b5`di3;IF6S<>L{+H`?&Y#aUD5o!C@`bemG^{~l+GCm9`beJGc}O%yxNZ+>VsjkU~}*le+Sdwx)= z;xjy&=hrb^;m2kzS-WEM-d*0DI)ZsCF*@~% zmz1C?2)IyNI%VCkUEhuFWAGi~3qyd{E{w8z{ysG$8HVDV%-oemfFcyY>J={{p3KbG zz!VonbMBCArXU08+NF9h>`Ll~D*Tb&;g2*F(6xcE#qHKDtKF@>3G)A+7;6yfR_fFO z{sLM~zrnOuEYAccH{bkh9&WHHWo;0?fV|#9WzEZd2Ke(d}<6r$Sl!k(K zXf3OINot`LoTm8GFOEYm6?`L8tzTN7=ap);-9Z}ua125+Fy}Di&{L`%=sp{-Z@Dyo zoC}+#Y0c5}@xBRL6jqa+qrC^v0q8QraEnQv-(Rr9&MR%{ySrukJfyL?pReb$dr^tA%q`k- z=Yic0p@%E9P9_BTdm;+|$H5u0W>)Itp!`&JnkOl~#=Yqb_+9-jAeap*$|zl$JBNPe zyZ{8ClcFpqCqGkjA?7OY+TO+jubG)DGN{$e?4<_P;tB%Mg}Qm{N!x&v(~;BrP+3c5HIKoX>!vr`;Lk!<0iFhaB=7D!XSTM~Qw(h%3SSH|-sQ`(dk5Nw z0-O6(+T+6L@i<<#UGR@mXQyKLE|oBq zI1l+foafQLy%_w)tcKp`mHb1(jbJ1?pt9#=S8!r ztU=T2_YFR$8sSaKCzRq`Q!hJgO}BQgc3T%^swdkA8E%#fw=cX|R-QR6+*C+CmE!7K zs2>v>yn3%6gZ8t^)8Oa|`RCZ}qax~ivfRzbi5pJRj_=3g%TMjdU2nASpLYB$L0n?z z6!`TFe>@J@HGE6PcYDZayDjm)u-f6u{~&bf2RVb=U5USN?_u`O~mn z-4}SxEaOl@3EGb4h-^elIX0!a+a1()%T!1Ithg8$f2XHd4DB~})(a}HPBP7oo2I#3 zpUczmjzjjh<=jc7$i?loD8+ig+~UP|oEq*EfU>qkS-+#6#qZI)_VkryvnaaJj60FwavUpdA}resKbC@Mg^lsx+fc)kCa*1BFUJ@(jEUU?&| z`R}LcB<~QV-|cdhA0nvP6g&xD9gq~SWTSk}RXUnaY#Fd^lh;)v8+*BYWNczPG3z|2 zUa6F)q&u30au#3GKcjd7b`pN{x2wULCx7-j+r=Ar_Ef}*QDJ2l?C1*D_MiKv_3V+N z_>=)xa*QL2aT(wIf*}q^kW-!VcUQ?==bp+ph`7{ zwZ9xVH`4#Mi|+z5Z$e*xMJwhPJwwh8>gg!H0!$>CKTPx;E!Zh&ynjDzZKpSy6FC6 zJDMSVx*Xq;EeP)0sbBPNl|Xo=z|S%{9~zuPtSI81f11$l*9N2Qk)J_UPAUuUL5H_X zZZbogv2RL8?hWbBrLSI2rK1q94}Vv59S>fxdlPaUv|jw>>8$C>WqY9;o|~dK=mc-I z)N{Xu%%n5SrvFTtN?ikrmiZ&t3f%{isPNpzy`%nnr`ytp%UpQy*xOt^UFrO3tVPjL zh~`Bf&B3_NO7*3CwO?P#jg<(WlNc@KAQ143)<~uaKi1N+LJSI*` zDZAh)RWx$eJ#LsNf}mQP5__yZajrr3NFT4>^ln%g*thrWY7K@k(uucoTw1PoD&brQG~dU!s7vIXGyac*A7EVczlK94#i%6lb6(B`iAb~u zA4$5%D`@%qqHE_1@-4(HGU1LTOr4Nxo=es6hOms_va;oP&)1k27#gDXugb`r8%<#% z;kFMmG+ptk^7XINW9bc8HwWTId{N_!)7y~e zzZM`XI5>egDN0nL47%{RchU5Hn}5^#A?U%xdpu&PaybAV4zMNJs=D&+-Jg;}Zcom}aIBhobojpy#p| z{W8(n$|Muq0~9%nLtvYORKS@!yhP)(Y^2F?2kMn2U}V9MFJ%~w!1~T2jy zfOzE&gB~Mqg1)hvg0X=h!W6%A#cR=-FBs?emnZ_1@U*KE(#{ziti4I<7lQc90L8|vG+91U8?_!i zh_Ybhj*sX!ZXomR!6*FMy9+DwP@hpC?!jq>6E=I3?>S}xhBRC2t#eRz$7&G%<-Bd) zQ#$b;)#fjN-VS`?VBp)!s{NW)UVq#SEjrT&F=#DlB%C22ox}qgIS^h9y3!Kc$@U0A z(Ppn@GZDmWy|RJ==0t27HzA3G+Tc8xH6X+SKkow&_crQ!h#1`#-za3&dMPByPAG?x zd4bG5B2(>o7-j)erx-fRPc6wSfr(lC09Z5 zLs)3*{70lAg%aNJc@uSbx+#2SB}G;wOo@H2Zo~1jXdL%kGL_AGk!EQ)-`Uhvkb}kD zDH9#qq|uUqzYCC8giMYt^)NvjD)$HVe}>FlbTY%>R8l5_#Z0ojGl=kPV8JDK1CWv8 zbl{+s^r`(SNlgc-#OtJ-0Jqr?tuo1~ocJ&8c@poJ3#SR)ZJ9GEGOowugSVy5$K{sd zd={8*DDO8jt2`{q)J_07JOWK&^`aAl@cd|bk&O0k))f3fjrrIrBXkcy3$L(e7hi;+ zBj=e`fMR0r)35v2?`)K~@ZJ=2;*qN3JNc-}W_U)sk0`1Zug=hh7?N2Ym1fJ>#_&Xm zYA3L#vWiHbP9k00t7#l?r~xHLm|mZA?0~0fsjK+zOn{iO&oGdb@?Zj7yj4{~?7{K) zxePz5R=`l~zMfF5(GC{mKhmgXo9k=yZwMgn?}r%mI|2{j$8J5U1Q?WB8 zokQTmZQo4XG+n3GfabrL9^80I*!OQy6tU7;q!`<>o#_ZAIhO?NYm{z!r?s$jwAlT$ zy%20nfwDI=@qFgII?JE;tAFNwOjNe*iOv`X+fpV258xG`z{Txd(`E0*n!1~xWf+|z)C-K@10N`y|bZJ${ zSEH?yx}58-8C-+_Ecf~La+1g+z|qEWo5`H3QuI~!c2ey9iMFPca2GK_A;Fh#kNO%a zS{5OnnpL2%G_4I`-ImWuOo@#;*g=#-Z!t!{{(3J5sa>4Eh+XZ?e_o$0pX^a9Mlf1Z_3X3Zm#X%I}Jpb-GAR50}Uok zq#lQT#X!#>*?TKR{~uHCTaBFrCHg@hLGpxjfigcNVyAxeGgC0&0WtgvRVRr)-b^p; zZ5l`oGJn%Gl>KQ!IhpT|N%SFmQ_3UZjm*}1s~Z(6r_uzA1u!E0)IWR(O| zZetrsWQgg3@ZP3K47X-+)UPa+n>{yUb*gx)omHYac} z(~e>`@Z5;{>2rOK4L`T%0(QA4W^aK3MkccM}@Kff@=w4eWB{e+lef>lVANIa4U zzd*bBY#7ARe|1;e4<&on1gQ2kx-MknkKZ2^(ULW$Khb$fbQDL~RkW}OLS|cTHkx%W z2VyO))mShr^C#yE0Tz`hqRKTrn;~(KiOq!=y zKq9>dYd_&)K8VLRkB~^|Waky3h~>{V5n^9@YiX#d>sH1xZdX9%WScQ0`*g;{h}J`h zy;H*FXwV?|>{HVw%^{iYTu&$kr9oaqptV{^OKweO^WxcSpCFa^BP7}x;^%Ft#5nn;?c+$Lc=gW5CG6Gi{A~s{Ra<89sI4vKbiGh7HTwJd*gC;|CuUnYQx%#opxV_Vv({`+g^AAl(Mg^Xt+>Bdc@yBx4HjAAO|spAcePHEZ&OD|MCnKf(fqD&7W5D0}D zlSq(<8-HT?Sh`L#X_aN;$6tR4bp}>F)H3dpVLW5{Aooiiqs73W()@=8bN%-ytPCqH z)=<^0^_;B}={UCVqZo-Xw?aC_P2#Wk9c&PM(|&acR>`o+AQ27Pr=+6nvx&1?TD0b4 zlY82-Cs6}N-Yg3=@2J*fgO(9$ja(BQ9{-Mh)0~mC5h%iDIku}L`^q#zx~ytb&-U zQl4lI$UMuOoa8463Vpi%>$|IB!IYoz1?rA=$An z96a1L zy#W$DHE<350_nKy$hC_I@krfT(ocor8w&%0kA?VNEs)`1H99;gmACVQDNvT=Rlj$O zhmDvlT%6|+qTl-vxE#x1j@HjGA9;s_{KH$zRmvCpD`1HCR*p z?V{QX7sA(sGcqWS-9w>#DxBw%aCwnO+h)UvhAX`h1V6iwM4n!tFHDqtvP`CLLTr;d z{kzFKRkSI4;tbg9=6OTxii7s|w-z35U?Em>dS_y4n?&Vi^4y`wr+`*}yMNsv zh3bX6*>CjI?pz1P53kRsYz#x!LQkAz2`I6=33(Fu!vkN5ef1e#-6fxprW~^GG4u-Q zMTZh#z(xYkxgHgQ6T+F*1a;$@O#%cKiM=*^x#H?mY4z29w?UOOsDQ9+=n;=fEuHE_ z+79ijGBR(B9`kY6iY4wOE4#P7u+t>HU~OUMBQoI#d!cV@gQrawrxC%{vwe|ftzy;j?ZnFnt!?T``nJY|S18=C~^wLkb!!6c(- z%QVhzNQB8eWPDslY;zn!YmqNDQaVW%!9rr&nK5l9$o*a|05d2UnPXDwE_6e^AmmxF zlpB@ffx&vr_RJ}P@s%tKRgml?rV8^voY&$N79?8&6e1?;U#kSS-x%SkY|`mGv%^hG zP-fi%^3=u=TL{I!nqh-#hbCc~Ph`OF2ylq8XDtU3KTc?;X zlmO6G&6-FgeoD0awPNEPno`1#0M4VFP>2sq%zZj-->e{J_r=SUj{wLdj*crPe^k>0 zW^$gNN6 zdiH2P{Peo=8xn>+8|%evrlL?4%<2>+Nup*+Rw#v{b+pa|U=`7>FH$BZr0ddBB}`OE z^u}Aw0%iJCoG3QIe=WuuiN3ujg0*ptQrw%f%$pHcO^#qjrvP8OV-7wb6 zMH9tpmOd~Cjx3YVWN+yYHh+{{GJxtaF-MBA;dz>yXKPg{vtbUx@{LdkZWbE zES#`wF3G6C#+Z}d7Pn!6nut4GLe_JBS`Bjy{-Tre9`V-X)+oL{7Io*PgQA%QJbb9* zSDZ)Ngc(=vN22e6l#TpnEAB@7q491TXNQ?84n8ee^P8t(oMH3H*OF8I%Es`$vb?Ak zgE)%A=ap3$dG?M==R%}fCrR98OL%7p;vp!D))?Ps=;wG5+2%R+8Y4#ZL?D$GB@$w4 zL;13fyAi-*ULAev6VDm|c+v_ad^X1+I8P$t-8_ciaL_mym)JTaWy?_Bt2P}x@B+vJ z8p_n-RK)pFn|SotoAFp|_iW%5TYn}U@B6^?H-Hi^9B7PQxbW^7A+DIOOYO2W@5=F* zOK16*So6gQ*5%}}jz0QGebQnn;uGKxanDG9B)A^66;v$qBxm8ZLGGBU&sy%rQ_hb; zZV7M6DSNx7UH8o@6q3p~Z8%AXnTpUW*=?OC3SPUK7%M4|gsHAzhf~FEpKEl5)sDuj z_Xa*ms59p0t+WuHv&R!)9O1)E;&b_oJ}LS^mqM#BwvG6)vx8hpXV57tRrG7g3DU+r zt>S3XLcWqsYL)u`px2*qlSXL>) nJIem+ngm9JR=<+h*HP#ozdrf3=cmqSz?ZUuhJ1~zS Date: Thu, 7 Oct 2021 16:27:01 +0530 Subject: [PATCH 05/33] Update config-lock.md Updated per task 5475844 - New topic --- windows/client-management/mdm/config-lock.md | 136 +++++++++++-------- 1 file changed, 79 insertions(+), 57 deletions(-) diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md index 74aff00b7c..a45eac0f5b 100644 --- a/windows/client-management/mdm/config-lock.md +++ b/windows/client-management/mdm/config-lock.md @@ -1,67 +1,78 @@ --- -title: Mobile device management MDM for device updates -description: Windows 10 provides several APIs to help mobile device management (MDM) solutions manage updates. -Learn how to use these APIs to implement update management. -ms.assetid: C27BAEE7-2890-4FB7-9549-A6EACC790777 -ms.reviewer: +title: Secured-Core Configuration Lock +description: A Secured-Core PC (SCPC) feature that prevents configuration drift from Secured-Core PC features (shown below) caused by unintentional misconfiguration. manager: dansimp -keywords: mdm,management,administrator -ms.author: dansimp +keywords: mdm,management,administrator,config lock +ms.author: v-lsaldanha ms.topic: article -ms.prod: w10 +ms.prod: w11 ms.technology: windows -author: manikadhiman -ms.date: 11/15/2017 +author: lovina-saldanha +ms.date: 10/07/2021 --- -# Secured-core Configuration Lock +# Secured-Core PC Configuration Lock -Config Lock In an enterprise organization, IT administrators enforce policies on their corporate devices to keep the devices in a compliant state and protect the OS by preventing users from changing configurations and creating config drift. Config drift occurs when users with local admin rights change settings and put the device out of sync with security policies. Devices in a non-compliant state can be vulnerable until the next sync and configuration reset with the MDM, Windows 11 with Config Lock enables IT administrators to prevent config drift and keep the OS configuration in the desired state. With config lock, the OS monitors the registry keys that configure each feature and when it detects a drift, reverts to the IT-desired state in seconds. +**Applies to** -Secured-core Configuration Lock (Config Lock) is a new Secured-core PC (SCPC) feature releasing with the Windows October 2021 Release which prevents configuration drift from Secured-Core PC features (shown below) caused by unintentional misconfiguration. In short, it ensures a device intended to be a Secured-core PC remains a Secured-core PC. +- Windows 11 -In sum, Config Lock: -• Enables IT to “lock” a fixed set of configurations on Secured-Core PCs under MDM management -• Detects drift and quickly remediates -• Focuses on security features -• DOES NOT prevent malicious attacks +In an enterprise organization, IT administrators enforce policies on their corporate devices to keep the devices in a compliant state and protect the OS by preventing users from changing configurations and creating config drift. Config drift occurs when users with local admin rights change settings and put the device out of sync with security policies. Devices in a non-compliant state can be vulnerable until the next sync and configuration reset with the MDM. Windows 11 with Config Lock enables IT administrators to prevent config drift and keep the OS configuration in the desired state. With config lock, the OS monitors the registry keys that configure each feature and when it detects a drift, reverts to the IT-desired state in seconds. -After a Secured-core PC reaches the desktop, Config lock will prevent configuration drift as follows: -• Detect whether the device is a Secured-Core PC -• If so, prevent the following Secured-Core PC features from being disabled without IT Admin permission: - • Memory Access Protection (kDMA) - • Memory Integrity (HVCI) - • System Guard - • DRTM - • SMM +Secured-Core Configuration Lock (Config Lock) is a new Secured-Core PC (SCPC) feature that prevents configuration drift from Secured-Core PC features (shown below) caused by unintentional misconfiguration. In short, it ensures a device intended to be a Secured-Core PC remains a Secured-Core PC. - +:::image type="content" source="../images/config-lock-mdsl.png" alt-text="mdsl"::: + +To summarize, Config Lock: + +- Enables IT to “lock” a fixed set of configurations on Secured-Core PCs under MDM management +- Detects drift and quickly remediates +- Focuses on security features +- DOES NOT prevent malicious attacks + +## Flow + +After a Secured-Core PC reaches the desktop, Config lock will prevent configuration drift as follows: + +- Detect whether the device is a Secured-Core PC +- If so, prevent the following Secured-Core PC features from being disabled without IT Admin permission: + - Memory Access Protection (kDMA) + - Memory Integrity (HVCI) + - System Guard + - DRTM + - SMM + +:::image type="content" source="images/flow_configlock.png" alt-text="flow"::: IT Admin scenario: -1. IT Admin use MDM to enable Config Lock -2. IT Admin use MDM service to set policies -3. Policies are targeted to user/device -4. Policies come down to device and get set -5. Configurations are locked -6. A local admin user attempts to override the policy -7. System quickly remediates policy to the desired SCPC state + +1. IT Admin use MDM to enable Config Lock +1. IT Admin use MDM service to set policies +1. Policies are targeted to user/device +1. Policies come down to device and get set +1. Configurations are locked +1. A local admin user attempts to override the policy +1. System quickly remediates policy to the desired SCPC state Helpdesk scenario: -1. Helpdesk support engineer investigates the device -2. Helpdesk support engineer contacts the IT Admin to unlocks the device -3. IT Admin unlocks the device in order to make configuration changes -4. Device returns to locked state after a defined time (default 30 minutes) + +1. Helpdesk support engineer investigates the device +1. Helpdesk support engineer contacts the IT Admin to unlocks the device +1. IT Admin unlocks the device in order to make configuration changes +1. Device returns to locked state after a defined time (default 30 minutes) ## System Requirements + Config Lock will be available for all Windows Professional and Enterprise Editions. ## Enabling + Config Lock is not enabled by default (or turned on by the OS during boot). Rather, an IT Admin must intentionally turn it ON. -Config Lock is controlled by the presence of the Secured-core PC Device Identifier (the “BuiltAsSecuredCorePC” UEFI variable) inserted on the device by the OEM during initial device manufacturing. Config Lock can be enabled if the ByteArray value of this identifier is set to “1” and IT admin pushes the MDM policy to turn Config Lock ON. If it is “0” or the variable is not present at all, Config Lock cannot be enabled. +Config Lock is controlled by the presence of the Secured-Core PC Device Identifier (the “BuiltAsSecuredCorePC” UEFI variable) inserted on the device by the OEM during initial device manufacturing. Config Lock can be enabled if the ByteArray value of this identifier is set to “1” and IT admin pushes the MDM policy to turn Config Lock ON. If it is “0” or the variable is not present at all, Config Lock cannot be enabled. > [!NOTE] -> BuiltAsSecuredCorePC actually accepts ByteArray values of 0-9, and any value from 1-9 will indicate Secured-core PC to the Config Lock feature. While we recommend “1” for consistency, OEMs may optionally use any other value up to 9 for internal versioning reasons, or other purposes. (Technically, any value from 1-255 should trigger Config Lock, since BuiltAsSecuredCorePC is a byte.) +> BuiltAsSecuredCorePC actually accepts ByteArray values of 0-9, and any value from 1-9 will indicate Secured-Core PC to the Config Lock feature. While we recommend “1” for consistency, OEMs may optionally use any other value up to 9 for internal versioning reasons, or other purposes. (Technically, any value from 1-255 should trigger Config Lock, since BuiltAsSecuredCorePC is a byte.) The UEFI variable can be set however an OEM likes, but one option is to use the Set-UEFIVariable command from [PowerShell Gallery | UEFIv2 2.3](https://www.powershellgallery.com/packages/UEFIv2/2.3), per the following syntax: @@ -72,32 +83,43 @@ powershell.exe -ExecutionPolicy Bypass {Import-Module .\UEFIv2.psd1 ; Set-UEFIV The steps to turn on Config Lock using Microsoft Endpoint Manager (MEM) are as follows: 1. Ensure that the device to turn on Config Lock is enrolled in MEM. -1. From the MEM portal main page, select **Devices** > **Configuration Profiles** > Create a profile -1. Select the following and press Create: - - Platform: Windows 10 and later - - Profile type: Templates - - Template name: Custom -1. Name your Profile. -1. When you reach the Configuration Settings step, select “Add” and add the following information - - OMA-URI: ./Vendor/MSFT/DMClient/Provider/MS%20DM%20Server/ConfigLock/Lock - - Data type: Integer - - Value: 1 - To turn off Config Lock. Change value to 0. - -1. Select the Devices to turn on Config Lock. If you are using a test tenant, you can select “+ Add all devices”. +1. From the MEM portal main page, select **Devices** > **Configuration Profiles** > **Create a profile**. +1. Select the following and press **Create**: + - **Platform**: Windows 10 and later + - **Profile type**: Templates + - **Template name**: Custom + + :::image type="content" source="images/configlock-mem-createprofile.png" alt-text="create profile"::: + +1. Name your profile. +1. When you reach the Configuration Settings step, select “Add” and add the following information: + - **OMA-URI**: ./Vendor/MSFT/DMClient/Provider/MS%20DM%20Server/ConfigLock/Lock + - **Data type**: Integer + - **Value**: 1
    + To turn off Config Lock. Change value to 0. + + :::image type="content" source="images/configlock-mem-editrow.png" alt-text="edit row"::: + +1. Select the devices to turn on Config Lock. If you are using a test tenant, you can select “+ Add all devices”. 1. You will not need to set any applicability rules for test purposes. 1. Review the Configuration and select “Create” if everything is correct. -1. After the Device Syncs with the MEM server, you will be able to confirm if the Config Lock was successfully enabled. +1. After the device syncs with the MEM server, you will be able to confirm if the Config Lock was successfully enabled. -## DISABLING -Config Lock is designed to ensure that a Secured-core PC is not unintentionally misconfigured. IT Admins retain the ability to change (enabled/disable) SCPC features via Group Policies and/or mobile device management (MDM) tools, such as MEM. + :::image type="content" source="images/configlock-mem-dev.png" alt-text="status"::: + + :::image type="content" source="images/configlock-mem-devstatus.png" alt-text="device status"::: + +## Disabling +Config Lock is designed to ensure that a Secured-Core PC is not unintentionally misconfigured. IT Admins retain the ability to change (enabled/disable) SCPC features via Group Policies and/or mobile device management (MDM) tools, such as MEM. + +:::image type="content" source="images/configlock-mem-firmwareprotect.png" alt-text="firmware protect"::: ## FAQ **#1. Can an IT Admin disable Config Lock ?**
    Yes. IT Admin can use MDM to turn off Config Lock. -**#2. Does the Secured-core PC Device Identifier UEFI variable (BuiltAsSecuredCorePC) value matter after it’s been read by the OA3 tool in the OEM factory?**
    +**#2. Does the Secured-Core PC Device Identifier UEFI variable (BuiltAsSecuredCorePC) value matter after it’s been read by the OA3 tool in the OEM factory?**
    Yes. Config Lock will always read this UEFI variable to know whether it pertains to a device or not. So, changing the variable changes the Config Lock even after the device has left the OEM factory. **#3. Could an end-user run the BuiltAsSecuredCorePC PS command to disable Config Lock?**
    From 8fa02b591c958e8a8730fe884d4bf750f74f7c0f Mon Sep 17 00:00:00 2001 From: Lovina Saldanha Date: Thu, 7 Oct 2021 17:08:15 +0530 Subject: [PATCH 06/33] Update config-lock.md To fix acrolinx score --- windows/client-management/mdm/config-lock.md | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md index a45eac0f5b..e662f8090f 100644 --- a/windows/client-management/mdm/config-lock.md +++ b/windows/client-management/mdm/config-lock.md @@ -57,8 +57,8 @@ IT Admin scenario: Helpdesk scenario: 1. Helpdesk support engineer investigates the device -1. Helpdesk support engineer contacts the IT Admin to unlocks the device -1. IT Admin unlocks the device in order to make configuration changes +1. Helpdesk support engineer contacts the IT Admin to unlock the device +1. IT Admin unlocks the device to make configuration changes 1. Device returns to locked state after a defined time (default 30 minutes) ## System Requirements @@ -67,9 +67,9 @@ Config Lock will be available for all Windows Professional and Enterprise Editio ## Enabling -Config Lock is not enabled by default (or turned on by the OS during boot). Rather, an IT Admin must intentionally turn it ON. +Config Lock isn't enabled by default (or turned on by the OS during boot). Rather, an IT Admin must intentionally turn it ON. -Config Lock is controlled by the presence of the Secured-Core PC Device Identifier (the “BuiltAsSecuredCorePC” UEFI variable) inserted on the device by the OEM during initial device manufacturing. Config Lock can be enabled if the ByteArray value of this identifier is set to “1” and IT admin pushes the MDM policy to turn Config Lock ON. If it is “0” or the variable is not present at all, Config Lock cannot be enabled. +Config Lock is controlled by the presence of the Secured-Core PC Device Identifier (the “BuiltAsSecuredCorePC” UEFI variable) inserted on the device by the OEM during initial device manufacturing. Config Lock can be enabled if the ByteArray value of this identifier is set to “1” and IT admin pushes the MDM policy to turn Config Lock ON. If it is “0” or the variable isn't present at all, Config Lock cannot be enabled. > [!NOTE] > BuiltAsSecuredCorePC actually accepts ByteArray values of 0-9, and any value from 1-9 will indicate Secured-Core PC to the Config Lock feature. While we recommend “1” for consistency, OEMs may optionally use any other value up to 9 for internal versioning reasons, or other purposes. (Technically, any value from 1-255 should trigger Config Lock, since BuiltAsSecuredCorePC is a byte.) @@ -100,17 +100,17 @@ The steps to turn on Config Lock using Microsoft Endpoint Manager (MEM) are as f :::image type="content" source="images/configlock-mem-editrow.png" alt-text="edit row"::: -1. Select the devices to turn on Config Lock. If you are using a test tenant, you can select “+ Add all devices”. -1. You will not need to set any applicability rules for test purposes. +1. Select the devices to turn on Config Lock. If you're using a test tenant, you can select “+ Add all devices”. +1. You'll not need to set any applicability rules for test purposes. 1. Review the Configuration and select “Create” if everything is correct. -1. After the device syncs with the MEM server, you will be able to confirm if the Config Lock was successfully enabled. +1. After the device syncs with the MEM server, you can confirm if the Config Lock was successfully enabled. :::image type="content" source="images/configlock-mem-dev.png" alt-text="status"::: :::image type="content" source="images/configlock-mem-devstatus.png" alt-text="device status"::: ## Disabling -Config Lock is designed to ensure that a Secured-Core PC is not unintentionally misconfigured. IT Admins retain the ability to change (enabled/disable) SCPC features via Group Policies and/or mobile device management (MDM) tools, such as MEM. +Config Lock is designed to ensure that a Secured-Core PC isn't unintentionally misconfigured. IT Admins retain the ability to change (enabled/disable) SCPC features via Group Policies and/or mobile device management (MDM) tools, such as MEM. :::image type="content" source="images/configlock-mem-firmwareprotect.png" alt-text="firmware protect"::: @@ -122,5 +122,5 @@ Config Lock is designed to ensure that a Secured-Core PC is not unintentionally **#2. Does the Secured-Core PC Device Identifier UEFI variable (BuiltAsSecuredCorePC) value matter after it’s been read by the OA3 tool in the OEM factory?**
    Yes. Config Lock will always read this UEFI variable to know whether it pertains to a device or not. So, changing the variable changes the Config Lock even after the device has left the OEM factory. -**#3. Could an end-user run the BuiltAsSecuredCorePC PS command to disable Config Lock?**
    - The PS script is accessible, but the BuiltAsSecuredCorePC becomes read-only after boot, so the command will fail when run from the OS. +**#3. Could an end-user run the BuiltAsSecuredCorePC Power Shell command to disable Config Lock?**
    + The Power Shell script is accessible, but the BuiltAsSecuredCorePC becomes read-only after boot, so the command will fail when run from the OS. From ece1814ff6e3c2572fee584a7bd8a154d4fd7725 Mon Sep 17 00:00:00 2001 From: Lovina Saldanha Date: Thu, 7 Oct 2021 17:10:32 +0530 Subject: [PATCH 07/33] Update config-lock.md Update --- windows/client-management/mdm/config-lock.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md index e662f8090f..75cade9415 100644 --- a/windows/client-management/mdm/config-lock.md +++ b/windows/client-management/mdm/config-lock.md @@ -122,5 +122,5 @@ Config Lock is designed to ensure that a Secured-Core PC isn't unintentionally m **#2. Does the Secured-Core PC Device Identifier UEFI variable (BuiltAsSecuredCorePC) value matter after it’s been read by the OA3 tool in the OEM factory?**
    Yes. Config Lock will always read this UEFI variable to know whether it pertains to a device or not. So, changing the variable changes the Config Lock even after the device has left the OEM factory. -**#3. Could an end-user run the BuiltAsSecuredCorePC Power Shell command to disable Config Lock?**
    - The Power Shell script is accessible, but the BuiltAsSecuredCorePC becomes read-only after boot, so the command will fail when run from the OS. +**#3. Could an end-user run the BuiltAsSecuredCorePC PowerShell command to disable Config Lock?**
    + The PowerShell script is accessible, but the BuiltAsSecuredCorePC becomes read-only after boot, so the command will fail when run from the OS. From 43bf2b92df0a7742b43f37bcd39b1e6f1e921e7f Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 7 Oct 2021 15:22:05 -0700 Subject: [PATCH 08/33] Update config-lock.md --- windows/client-management/mdm/config-lock.md | 23 ++++---------------- 1 file changed, 4 insertions(+), 19 deletions(-) diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md index 75cade9415..5cdbf0d2fb 100644 --- a/windows/client-management/mdm/config-lock.md +++ b/windows/client-management/mdm/config-lock.md @@ -42,7 +42,7 @@ After a Secured-Core PC reaches the desktop, Config lock will prevent configurat - DRTM - SMM -:::image type="content" source="images/flow_configlock.png" alt-text="flow"::: +:::image type="content" source="images/flow_configlock.png" alt-text="config lock flow."::: IT Admin scenario: @@ -67,19 +67,8 @@ Config Lock will be available for all Windows Professional and Enterprise Editio ## Enabling -Config Lock isn't enabled by default (or turned on by the OS during boot). Rather, an IT Admin must intentionally turn it ON. +Config Lock isn't enabled by default (or turned on by the OS during boot). Rather, an IT Admin must intentionally turn it on. -Config Lock is controlled by the presence of the Secured-Core PC Device Identifier (the “BuiltAsSecuredCorePC” UEFI variable) inserted on the device by the OEM during initial device manufacturing. Config Lock can be enabled if the ByteArray value of this identifier is set to “1” and IT admin pushes the MDM policy to turn Config Lock ON. If it is “0” or the variable isn't present at all, Config Lock cannot be enabled. - -> [!NOTE] -> BuiltAsSecuredCorePC actually accepts ByteArray values of 0-9, and any value from 1-9 will indicate Secured-Core PC to the Config Lock feature. While we recommend “1” for consistency, OEMs may optionally use any other value up to 9 for internal versioning reasons, or other purposes. (Technically, any value from 1-255 should trigger Config Lock, since BuiltAsSecuredCorePC is a byte.) - -The UEFI variable can be set however an OEM likes, but one option is to use the Set-UEFIVariable command from [PowerShell Gallery | UEFIv2 2.3](https://www.powershellgallery.com/packages/UEFIv2/2.3), per the following syntax: - -```powershell -powershell.exe -ExecutionPolicy Bypass {Import-Module .\UEFIv2.psd1 ; Set-UEFIVariable -VariableName BuiltAsSecuredCorePC -Namespace '{77fa9abd-0359-4d32-bd60-28f4e78f784b}' -ByteArray @(01) }. common ..] -``` - The steps to turn on Config Lock using Microsoft Endpoint Manager (MEM) are as follows: 1. Ensure that the device to turn on Config Lock is enrolled in MEM. @@ -116,11 +105,7 @@ Config Lock is designed to ensure that a Secured-Core PC isn't unintentionally m ## FAQ -**#1. Can an IT Admin disable Config Lock ?**
    +**Can an IT Admin disable Config Lock ?**
    Yes. IT Admin can use MDM to turn off Config Lock. - -**#2. Does the Secured-Core PC Device Identifier UEFI variable (BuiltAsSecuredCorePC) value matter after it’s been read by the OA3 tool in the OEM factory?**
    - Yes. Config Lock will always read this UEFI variable to know whether it pertains to a device or not. So, changing the variable changes the Config Lock even after the device has left the OEM factory. - -**#3. Could an end-user run the BuiltAsSecuredCorePC PowerShell command to disable Config Lock?**
    +**Could an end-user run the BuiltAsSecuredCorePC PowerShell command to disable Config Lock?**
    The PowerShell script is accessible, but the BuiltAsSecuredCorePC becomes read-only after boot, so the command will fail when run from the OS. From d1e565330de212cbd25d5171ac03b0e3f5df3cb4 Mon Sep 17 00:00:00 2001 From: gkomatsu Date: Tue, 12 Oct 2021 12:51:10 -0700 Subject: [PATCH 09/33] Clarified Web Sign-in feature is in Preview --- windows/client-management/mdm/policy-csp-authentication.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-authentication.md b/windows/client-management/mdm/policy-csp-authentication.md index 83bbd6d38f..b30980d636 100644 --- a/windows/client-management/mdm/policy-csp-authentication.md +++ b/windows/client-management/mdm/policy-csp-authentication.md @@ -517,7 +517,7 @@ Specifies the list of domains that are allowed to be navigated to in AAD PIN res > [!Warning] -> This policy is in preview mode only and therefore not meant or recommended for production purposes. +> The Web Sign-in feature is in preview mode only and therefore not meant or recommended for production purposes. This policy is intended for use on Shared PCs to enable a quick first sign-in experience for a user. It works by automatically connecting new non-admin Azure Active Directory (Azure AD) accounts to the pre-configured candidate local accounts. @@ -596,7 +596,7 @@ Value type is integer. Supported values: > [!Warning] -> This policy is in preview mode only and therefore not meant or recommended for production purposes. +> The Web Sign-in feature is in preview mode only and therefore not meant or recommended for production purposes. "Web Sign-in" is a new way of signing into a Windows PC. It enables Windows logon support for new Azure AD credentials, like Temporary Access Pass. From 3956c25ebca67b34e51d0667fe8d3a8809115967 Mon Sep 17 00:00:00 2001 From: Lovina Saldanha Date: Mon, 18 Oct 2021 11:44:05 +0530 Subject: [PATCH 10/33] Update config-lock.md Updated CSP links --- windows/client-management/mdm/config-lock.md | 70 +++++++++++++++++--- 1 file changed, 62 insertions(+), 8 deletions(-) diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md index 5cdbf0d2fb..e6e42754a5 100644 --- a/windows/client-management/mdm/config-lock.md +++ b/windows/client-management/mdm/config-lock.md @@ -19,22 +19,75 @@ ms.date: 10/07/2021 In an enterprise organization, IT administrators enforce policies on their corporate devices to keep the devices in a compliant state and protect the OS by preventing users from changing configurations and creating config drift. Config drift occurs when users with local admin rights change settings and put the device out of sync with security policies. Devices in a non-compliant state can be vulnerable until the next sync and configuration reset with the MDM. Windows 11 with Config Lock enables IT administrators to prevent config drift and keep the OS configuration in the desired state. With config lock, the OS monitors the registry keys that configure each feature and when it detects a drift, reverts to the IT-desired state in seconds. -Secured-Core Configuration Lock (Config Lock) is a new Secured-Core PC (SCPC) feature that prevents configuration drift from Secured-Core PC features (shown below) caused by unintentional misconfiguration. In short, it ensures a device intended to be a Secured-Core PC remains a Secured-Core PC. +Secured-Core Configuration Lock (Config Lock) is a new [Secured-Core PC (SCPC)](/windows-hardware/design/device-experiences/oem-highly-secure) feature that prevents configuration drift from Secured-Core PC features (shown below) caused by unintentional misconfiguration. In short, it ensures a device intended to be a Secured-Core PC remains a Secured-Core PC. :::image type="content" source="../images/config-lock-mdsl.png" alt-text="mdsl"::: To summarize, Config Lock: -- Enables IT to “lock” a fixed set of configurations on Secured-Core PCs under MDM management -- Detects drift and quickly remediates -- Focuses on security features +- Enables IT to “lock” Secured-Core PC features when managed through MDM +- Detects drift remediates within seconds - DOES NOT prevent malicious attacks -## Flow +## Configuration Flow After a Secured-Core PC reaches the desktop, Config lock will prevent configuration drift as follows: -- Detect whether the device is a Secured-Core PC +Config Lock will prevent configuration drift by detecting if the device is a Secured-Core PC or not. When the device is not a Secured-Core PC, the lock will not apply. If the device is a Secured-Core PC, config lock will lock the policies listed here. + +**List of locked policies** + + +|Policies | +|---------| +|**CSPs** | +|[BitLocker ](bitlocker-csp.md) | +|[PassportForWork](passportforwork-csp.md) | +|[WindowsDefenderApplicationGuard](windowsdefenderapplicationguard-csp.md) | +|[ApplicationControl](applicationcontrol-csp.md) | +| | +|**MDM policies** | +|[DataProtection/AllowDirectMemoryAccess](policy-csp-dataprotection.md) | +|[DataProtection/LegacySelectiveWipeID](policy-csp-dataprotection.md) | +|[DeviceGuard/ConfigureSystemGuardLaunch](policy-csp-deviceguard.md) | +|[DeviceGuard/EnableVirtualizationBasedSecurity](policy-csp-deviceguard.md) | +|[DeviceGuard/LsaCfgFlags](policy-csp-deviceguard.md) | +|[DeviceGuard/RequirePlatformSecurityFeatures](policy-csp-deviceguard.md) | +|[DeviceInstallation/AllowInstallationOfMatchingDeviceIDs](policy-csp-deviceinstallation.md) | +|[DeviceInstallation/AllowInstallationOfMatchingDeviceInstanceIDs](policy-csp-deviceinstallation.md) | +|[DeviceInstallation/AllowInstallationOfMatchingDeviceSetupClasses](policy-csp-deviceinstallation.md) | +|[DeviceInstallation/PreventDeviceMetadataFromNetwork](policy-csp-deviceinstallation.md) | +|[DeviceInstallation/PreventInstallationOfDevicesNotDescribedByOtherPolicySettings](policy-csp-deviceinstallation.md) | +|[DeviceInstallation/PreventInstallationOfMatchingDeviceIDs](policy-csp-deviceinstallation.md) | +|[DeviceInstallation/PreventInstallationOfMatchingDeviceInstanceIDs](policy-csp-deviceinstallation.md) | +|[DeviceInstallation/PreventInstallationOfMatchingDeviceSetupClasses](policy-csp-deviceinstallation.md) | +|[DmaGuard/DeviceEnumerationPolicy](policy-csp-dmaguard.md) | +|[WindowsDefenderSecurityCenter/CompanyName](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/DisableAccountProtectionUI](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/DisableAppBrowserUI](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/DisableClearTpmButton](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/DisableDeviceSecurityUI](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/DisableEnhancedNotifications](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/DisableFamilyUI](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/DisableHealthUI](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/DisableNetworkUI](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/DisableNotifications](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/DisableTpmFirmwareUpdateWarning](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/DisableVirusUI](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/DisallowExploitProtectionOverride](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/Email](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/EnableCustomizedToasts](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/EnableInAppCustomization](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/HideRansomwareDataRecovery](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/HideSecureBoot](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/HideTPMTroubleshooting](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/HideWindowsSecurityNotificationAreaControl](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/Phone](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/URL](policy-csp-windowsdefendersecuritycenter.md) | +|[SmartScreen/EnableAppInstallControl](policy-csp-smartscreen.md)| +|[SmartScreen/EnableSmartScreenInShell](policy-csp-smartscreen.md) | +|[SmartScreen/PreventOverrideForFilesInShell](policy-csp-smartscreen.md) | + - If so, prevent the following Secured-Core PC features from being disabled without IT Admin permission: - Memory Access Protection (kDMA) - Memory Integrity (HVCI) @@ -65,7 +118,7 @@ Helpdesk scenario: Config Lock will be available for all Windows Professional and Enterprise Editions. -## Enabling +## Enabling Config Lock using Microsoft Intune Config Lock isn't enabled by default (or turned on by the OS during boot). Rather, an IT Admin must intentionally turn it on. @@ -106,6 +159,7 @@ Config Lock is designed to ensure that a Secured-Core PC isn't unintentionally m ## FAQ **Can an IT Admin disable Config Lock ?**
    - Yes. IT Admin can use MDM to turn off Config Lock. + Yes. IT Admin can use MDM to turn off Config Lock.
    + **Could an end-user run the BuiltAsSecuredCorePC PowerShell command to disable Config Lock?**
    The PowerShell script is accessible, but the BuiltAsSecuredCorePC becomes read-only after boot, so the command will fail when run from the OS. From dbe0a69c2c68ddf035667badaf55b7ee223858d9 Mon Sep 17 00:00:00 2001 From: Lovina Saldanha Date: Mon, 18 Oct 2021 14:38:43 +0530 Subject: [PATCH 11/33] Update config-lock.md Removed unwanted para --- windows/client-management/mdm/config-lock.md | 15 +++------------ 1 file changed, 3 insertions(+), 12 deletions(-) diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md index e6e42754a5..2e215d289d 100644 --- a/windows/client-management/mdm/config-lock.md +++ b/windows/client-management/mdm/config-lock.md @@ -31,9 +31,7 @@ To summarize, Config Lock: ## Configuration Flow -After a Secured-Core PC reaches the desktop, Config lock will prevent configuration drift as follows: - -Config Lock will prevent configuration drift by detecting if the device is a Secured-Core PC or not. When the device is not a Secured-Core PC, the lock will not apply. If the device is a Secured-Core PC, config lock will lock the policies listed here. +After a Secured-Core PC reaches the desktop, Config Lock will prevent configuration drift by detecting if the device is a Secured-Core PC or not. When the device is not a Secured-Core PC, the lock will not apply. If the device is a Secured-Core PC, config lock will lock the policies listed here. **List of locked policies** @@ -88,19 +86,12 @@ Config Lock will prevent configuration drift by detecting if the device is a Sec |[SmartScreen/EnableSmartScreenInShell](policy-csp-smartscreen.md) | |[SmartScreen/PreventOverrideForFilesInShell](policy-csp-smartscreen.md) | -- If so, prevent the following Secured-Core PC features from being disabled without IT Admin permission: - - Memory Access Protection (kDMA) - - Memory Integrity (HVCI) - - System Guard - - DRTM - - SMM - :::image type="content" source="images/flow_configlock.png" alt-text="config lock flow."::: IT Admin scenario: -1. IT Admin use MDM to enable Config Lock -1. IT Admin use MDM service to set policies +1. IT Admins use MDM to enable Config Lock +1. IT Admins use MDM service to set policies 1. Policies are targeted to user/device 1. Policies come down to device and get set 1. Configurations are locked From fb3e49244f4b19235b697104f8970963abb303f8 Mon Sep 17 00:00:00 2001 From: Lovina Saldanha Date: Mon, 18 Oct 2021 15:05:19 +0530 Subject: [PATCH 12/33] Update config-lock.md Acrolinx comments fix --- windows/client-management/mdm/config-lock.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md index 2e215d289d..b5f3e187c6 100644 --- a/windows/client-management/mdm/config-lock.md +++ b/windows/client-management/mdm/config-lock.md @@ -31,7 +31,7 @@ To summarize, Config Lock: ## Configuration Flow -After a Secured-Core PC reaches the desktop, Config Lock will prevent configuration drift by detecting if the device is a Secured-Core PC or not. When the device is not a Secured-Core PC, the lock will not apply. If the device is a Secured-Core PC, config lock will lock the policies listed here. +After a Secured-Core PC reaches the desktop, Config Lock will prevent configuration drift by detecting if the device is a Secured-Core PC or not. When the device isn't a Secured-Core PC, the lock won't apply. If the device is a Secured-Core PC, config lock will lock the policies listed here. **List of locked policies** From b1d10ae022211c97e94f715a4578e8e7c95e85c4 Mon Sep 17 00:00:00 2001 From: Lovina Saldanha Date: Mon, 18 Oct 2021 16:43:10 +0530 Subject: [PATCH 13/33] Update config-lock.md Minor correction --- windows/client-management/mdm/config-lock.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md index b5f3e187c6..e34ef24e89 100644 --- a/windows/client-management/mdm/config-lock.md +++ b/windows/client-management/mdm/config-lock.md @@ -31,7 +31,7 @@ To summarize, Config Lock: ## Configuration Flow -After a Secured-Core PC reaches the desktop, Config Lock will prevent configuration drift by detecting if the device is a Secured-Core PC or not. When the device isn't a Secured-Core PC, the lock won't apply. If the device is a Secured-Core PC, config lock will lock the policies listed here. +After a Secured-Core PC reaches the desktop, Config Lock will prevent configuration drift by detecting if the device is a Secured-Core PC or not. When the device isn't a Secured-Core PC, the lock won't apply. If the device is a Secured-Core PC, config lock will lock the policies listed below. **List of locked policies** From 03e8420ba6622c5653c05e49edd3f37413b14589 Mon Sep 17 00:00:00 2001 From: Alekhya Jupudi Date: Tue, 19 Oct 2021 13:19:21 +0530 Subject: [PATCH 14/33] Add CongigLock node in DMClient CSP Task 5499285: update the DMClient CSP document to add the 3 new nodes used by Config Lock. --- windows/client-management/mdm/dmclient-csp.md | 27 ++++++++++++++++++- 1 file changed, 26 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/dmclient-csp.md b/windows/client-management/mdm/dmclient-csp.md index b8ddb3ffeb..e2b23b7bf3 100644 --- a/windows/client-management/mdm/dmclient-csp.md +++ b/windows/client-management/mdm/dmclient-csp.md @@ -22,7 +22,7 @@ The following shows the DMClient CSP in tree format. ./Vendor/MSFT DMClient ----Provider --------- +--------ProviderID ------------EntDeviceName ------------ExchangeID ------------EntDMID @@ -45,6 +45,10 @@ DMClient ------------HWDevID ------------ManagementServerAddressList ------------CommercialID +------------ConfigLock +----------------Lock +----------------UnlockDuration +----------------SecureCore ------------Push ----------------PFN ----------------ChannelURI @@ -598,6 +602,27 @@ Optional. Boolean value that allows the IT admin to require the device to start Supported operations are Add, Get, and Replace. +    **Provider/*ProviderID*/ConfigLock** + +Configuration Drift is a major concern for commercial customers. Some customers view it as a security risk. This node mitigates the customer concern by bringing the capability to monitor and quickly remediate the policy configuration when a device is MDM managed. + +Default = Locked + +> [!Note] +>If the device is not Secure Core, then this feature will not work. + +**Provider/*ProviderID*/ConfigLock/Lock** + +Supported operations are Add, Delete, Get. Supported values are 0-unlock, 1-lock. + +**Provider/*ProviderID*/ConfigLock/UnlockDuration** + +Supported operations are Add, Delete, Get. Supported values are 1 to 480 (in min). + +**Provider/*ProviderID*/ConfigLock/SecureCore** + +Supported operation is Get only. Supported values are false or true. + **Provider/*ProviderID*/Push** Optional. Not configurable during WAP Provisioning XML. If removed, DM sessions triggered by Push will no longer be supported. From 9d3b480e28b8be2e3d8db37d3fb853f4dd9dbc2f Mon Sep 17 00:00:00 2001 From: gkomatsu Date: Tue, 19 Oct 2021 17:07:53 -0700 Subject: [PATCH 15/33] Updated document for Win11 Updated document with Policies new for Win 11. Remove contents for Windows Mobile. Removed the table for Win10 prior to 1809. Removed contents referring Windows 8.1 Changed order of document and moved the Win10 tables to the bottom. --- ...ew-in-windows-mdm-enrollment-management.md | 326 +++++------------- 1 file changed, 81 insertions(+), 245 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 272489e4a8..66ab4b5579 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1,6 +1,6 @@ --- title: What's new in MDM enrollment and management -description: Discover what's new and breaking changes in Windows 10 mobile device management (MDM) enrollment and management experience across all Windows 10 devices. +description: Discover what's new and breaking changes in Windows 10 and 11 mobile device management (MDM) enrollment and management experience across all Windows 10 devices. MS-HAID: - 'p\_phdevicemgmt.mdm\_enrollment\_and\_management\_overview' - 'p\_phDeviceMgmt.new\_in\_windows\_mdm\_enrollment\_management' @@ -18,215 +18,24 @@ ms.date: 10/20/2020 # What's new in mobile device enrollment and management -This article provides information about what's new in Windows 10 mobile device management (MDM) enrollment and management experience across all Windows 10 devices. This article also provides details about the breaking changes and known issues and frequently asked questions. +This article provides information about what's new in Windows 10 and 11 mobile device management (MDM) enrollment and management experience across all Windows 10 and 11 devices. This article also provides details about the breaking changes and known issues and frequently asked questions. -For details about Microsoft mobile device management protocols for Windows 10 see [\[MS-MDM\]: Mobile Device Management Protocol](/openspecs/windows_protocols/ms-mdm/33769a92-ac31-47ef-ae7b-dc8501f7104f) and [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2]( https://go.microsoft.com/fwlink/p/?LinkId=619347). +For details about Microsoft mobile device management protocols for Windows 10 and 11 see [\[MS-MDM\]: Mobile Device Management Protocol](/openspecs/windows_protocols/ms-mdm/33769a92-ac31-47ef-ae7b-dc8501f7104f) and [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2]( https://go.microsoft.com/fwlink/p/?LinkId=619347). -## What’s new in MDM for Windows 10, version 20H2 + +## What’s new in MDM for Windows 11, version 21H2 |New or updated article|Description| |-----|-----| -| [Policy CSP](policy-configuration-service-provider.md) | Added the following new policies in Windows 10, version 20H2:
    - [Experience/DisableCloudOptimizedContent](policy-csp-experience.md#experience-disablecloudoptimizedcontent)
    - [LocalUsersAndGroups/Configure](policy-csp-localusersandgroups.md#localusersandgroups-configure)
    - [MixedReality/AADGroupMembershipCacheValidityInDays](policy-csp-mixedreality.md#mixedreality-aadgroupmembershipcachevalidityindays)
    - [MixedReality/BrightnessButtonDisabled](policy-csp-mixedreality.md#mixedreality-brightnessbuttondisabled)
    - [MixedReality/FallbackDiagnostics](policy-csp-mixedreality.md#mixedreality-fallbackdiagnostics)
    - [MixedReality/MicrophoneDisabled](policy-csp-mixedreality.md#mixedreality-microphonedisabled)
    - [MixedReality/VolumeButtonDisabled](policy-csp-mixedreality.md#mixedreality-volumebuttondisabled)
    - [Multitasking/BrowserAltTabBlowout](policy-csp-multitasking.md#multitasking-browseralttabblowout) | -| [SurfaceHub CSP](surfacehub-csp.md) | Added the following new node:
    -Properties/SleepMode | -| [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md) | Updated the description of the following node:
    - Settings/AllowWindowsDefenderApplicationGuard | +| [Policy CSP](policy-configuration-service-provider.md) | Added the following new policies in Windows 11, version 21H2:
    - NewsAndInterests/AllowNewsAndInterests
    - Experiences/ConfigureChatIcon
    - Start/ConfigureStartPins
    - Virtualizationbasedtechnology/HypervisorEnforcedCodeIntegrity
    - Virtualizationbasedtechnology/RequireUEFIMemoryAttributesTable | +| [DMClient CSP](dmclient-csp.md) | Updated the description of the following node:
    - Provider/ProviderID/ConfigLock/Lock
    - Provider/ProviderID/ConfigLock/UnlockDuration
    - Provider/ProviderID/ConfigLock/SecuredCore | -## What’s new in MDM for Windows 10, version 2004 - -| New or updated article | Description | -|-----|-----| -| [Policy CSP](policy-configuration-service-provider.md) | Added the following new policies in Windows 10, version 2004:
    - [ApplicationManagement/BlockNonAdminUserInstall](policy-csp-applicationmanagement.md#applicationmanagement-blocknonadminuserinstall)
    - [Bluetooth/SetMinimumEncryptionKeySize](policy-csp-bluetooth.md#bluetooth-setminimumencryptionkeysize)
    - [DeliveryOptimization/DOCacheHostSource](policy-csp-deliveryoptimization.md#deliveryoptimization-docachehostsource)
    - [DeliveryOptimization/DOMaxBackgroundDownloadBandwidth](policy-csp-deliveryoptimization.md#deliveryoptimization-domaxbackgrounddownloadbandwidth)
    - [DeliveryOptimization/DOMaxForegroundDownloadBandwidth](policy-csp-deliveryoptimization.md#deliveryoptimization-domaxforegrounddownloadbandwidth)
    - [Education/AllowGraphingCalculator](policy-csp-education.md#education-allowgraphingcalculator)
    - [TextInput/ConfigureJapaneseIMEVersion](policy-csp-textinput.md#textinput-configurejapaneseimeversion)
    - [TextInput/ConfigureSimplifiedChineseIMEVersion](policy-csp-textinput.md#textinput-configuresimplifiedchineseimeversion)
    - [TextInput/ConfigureTraditionalChineseIMEVersion](policy-csp-textinput.md#textinput-configuretraditionalchineseimeversion)

    Updated the following policy in Windows 10, version 2004:
    - [DeliveryOptimization/DOCacheHost](policy-csp-deliveryoptimization.md#deliveryoptimization-docachehost)

    Deprecated the following policies in Windows 10, version 2004:
    - [DeliveryOptimization/DOMaxDownloadBandwidth](policy-csp-deliveryoptimization.md#deliveryoptimization-domaxdownloadbandwidth)
    - [DeliveryOptimization/DOMaxUploadBandwidth](policy-csp-deliveryoptimization.md#deliveryoptimization-domaxuploadbandwidth)
    - [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](policy-csp-deliveryoptimization.md#deliveryoptimization-dopercentagemaxdownloadbandwidth) | -| [DevDetail CSP](devdetail-csp.md) | Added the following new node:
    - Ext/Microsoft/DNSComputerName | -| [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | Added the following new node:
    - IsStub | -| [SUPL CSP](supl-csp.md) | Added the following new node:
    - FullVersion | - -## What’s new in MDM for Windows 10, version 1909 - -| New or updated article | Description | -|-----|-----| -| [BitLocker CSP](bitlocker-csp.md) | Added the following new nodes in Windows 10, version 1909:
    - ConfigureRecoveryPasswordRotation
    - RotateRecoveryPasswords
    - RotateRecoveryPasswordsStatus
    - RotateRecoveryPasswordsRequestID| - -## What’s new in MDM for Windows 10, version 1903 - -| New or updated article | Description | -|-----|-----| -|[Policy CSP](policy-configuration-service-provider.md) | Added the following new policies in Windows 10, version 1903:
    - [DeliveryOptimization/DODelayCacheServerFallbackBackground](policy-csp-deliveryoptimization.md#deliveryoptimization-dodelaycacheserverfallbackbackground)
    - [DeliveryOptimization/DODelayCacheServerFallbackForeground](policy-csp-deliveryoptimization.md#deliveryoptimization-dodelaycacheserverfallbackforeground)
    - [DeviceHealthMonitoring/AllowDeviceHealthMonitoring](policy-csp-devicehealthmonitoring.md#devicehealthmonitoring-allowdevicehealthmonitoring)
    - [DeviceHealthMonitoring/ConfigDeviceHealthMonitoringScope](policy-csp-devicehealthmonitoring.md#devicehealthmonitoring-configdevicehealthmonitoringscope)
    - [DeviceHealthMonitoring/ConfigDeviceHealthMonitoringUploadDestination](policy-csp-devicehealthmonitoring.md#devicehealthmonitoring-configdevicehealthmonitoringuploaddestination)
    - [DeviceInstallation/AllowInstallationOfMatchingDeviceInstanceIDs](policy-csp-deviceinstallation.md#deviceinstallationallowinstallationofmatchingdeviceinstanceids)
    - [DeviceInstallation/PreventInstallationOfMatchingDeviceInstanceIDs](policy-csp-deviceinstallation.md#deviceinstallationpreventinstallationofmatchingdeviceinstanceids)
    - [Experience/ShowLockOnUserTile](policy-csp-experience.md#experience-showlockonusertile)
    - [InternetExplorer/AllowEnhancedSuggestionsInAddressBar](policy-csp-internetexplorer.md#internetexplorer-allowenhancedsuggestionsinaddressbar)
    - [InternetExplorer/DisableActiveXVersionListAutoDownload](policy-csp-internetexplorer.md#internetexplorer-disableactivexversionlistautodownload)
    - [InternetExplorer/DisableCompatView](policy-csp-internetexplorer.md#internetexplorer-disablecompatview)
    - [InternetExplorer/DisableFeedsBackgroundSync](policy-csp-internetexplorer.md#internetexplorer-disablefeedsbackgroundsync)
    - [InternetExplorer/DisableGeolocation](policy-csp-internetexplorer.md#internetexplorer-disablegeolocation)
    - [InternetExplorer/DisableWebAddressAutoComplete](policy-csp-internetexplorer.md#internetexplorer-disablewebaddressautocomplete)
    - [InternetExplorer/NewTabDefaultPage](policy-csp-internetexplorer.md#internetexplorer-newtabdefaultpage)
    - [Power/EnergySaverBatteryThresholdOnBattery](policy-csp-power.md#power-energysaverbatterythresholdonbattery)
    - [Power/EnergySaverBatteryThresholdPluggedIn](policy-csp-power.md#power-energysaverbatterythresholdpluggedin)
    - [Power/SelectLidCloseActionOnBattery](policy-csp-power.md#power-selectlidcloseactiononbattery)
    - [Power/SelectLidCloseActionPluggedIn](policy-csp-power.md#power-selectlidcloseactionpluggedin)
    - [Power/SelectPowerButtonActionOnBattery](policy-csp-power.md#power-selectpowerbuttonactiononbattery)
    - [Power/SelectPowerButtonActionPluggedIn](policy-csp-power.md#power-selectpowerbuttonactionpluggedin)
    - [Power/SelectSleepButtonActionOnBattery](policy-csp-power.md#power-selectsleepbuttonactiononbattery)
    - [Power/SelectSleepButtonActionPluggedIn](policy-csp-power.md#power-selectsleepbuttonactionpluggedin)
    - [Power/TurnOffHybridSleepOnBattery](policy-csp-power.md#power-turnoffhybridsleeponbattery)
    - [Power/TurnOffHybridSleepPluggedIn](policy-csp-power.md#power-turnoffhybridsleeppluggedin)
    - [Power/UnattendedSleepTimeoutOnBattery](policy-csp-power.md#power-unattendedsleeptimeoutonbattery)
    - [Power/UnattendedSleepTimeoutPluggedIn](policy-csp-power.md#power-unattendedsleeptimeoutpluggedin)
    - [Privacy/LetAppsActivateWithVoice](policy-csp-privacy.md#privacy-letappsactivatewithvoice)
    - [Privacy/LetAppsActivateWithVoiceAboveLock](policy-csp-privacy.md#privacy-letappsactivatewithvoiceabovelock)
    - [Search/AllowFindMyFiles](policy-csp-search.md#search-allowfindmyfiles)
    - [ServiceControlManager/SvchostProcessMitigation](policy-csp-servicecontrolmanager.md#servicecontrolmanager-svchostprocessmitigation)
    - [System/AllowCommercialDataPipeline](policy-csp-system.md#system-allowcommercialdatapipeline)
    - [System/TurnOffFileHistory](policy-csp-system.md#system-turnofffilehistory)
    - [TimeLanguageSettings/ConfigureTimeZone](policy-csp-timelanguagesettings.md#timelanguagesettings-configuretimezone)
    - [Troubleshooting/AllowRecommendations](policy-csp-troubleshooting.md#troubleshooting-allowrecommendations)
    - [Update/AutomaticMaintenanceWakeUp](policy-csp-update.md#update-automaticmaintenancewakeup)
    - [Update/ConfigureDeadlineForFeatureUpdates](policy-csp-update.md#update-configuredeadlineforfeatureupdates)
    - [Update/ConfigureDeadlineForQualityUpdates](policy-csp-update.md#update-configuredeadlineforqualityupdates)
    - [Update/ConfigureDeadlineGracePeriod](policy-csp-update.md#update-configuredeadlinegraceperiod)
    - [WindowsLogon/AllowAutomaticRestartSignOn](policy-csp-windowslogon.md#windowslogon-allowautomaticrestartsignon)
    - [WindowsLogon/ConfigAutomaticRestartSignOn](policy-csp-windowslogon.md#windowslogon-configautomaticrestartsignon)
    - [WindowsLogon/EnableFirstLogonAnimation](policy-csp-windowslogon.md#windowslogon-enablefirstlogonanimation)| -| [Policy CSP - Audit](policy-csp-audit.md) | Added the new Audit policy CSP. | -| [ApplicationControl CSP](applicationcontrol-csp.md) | Added the new CSP. | -| [Defender CSP](defender-csp.md) | Added the following new nodes:
    - Health/TamperProtectionEnabled
    - Health/IsVirtualMachine
    - Configuration
    - Configuration/TamperProtection
    - Configuration/EnableFileHashComputation | -| [DiagnosticLog CSP](diagnosticlog-csp.md)
    [DiagnosticLog DDF](diagnosticlog-ddf.md) | Added version 1.4 of the CSP in Windows 10, version 1903.
    Added the new 1.4 version of the DDF.
    Added the following new nodes:
    - Policy
    - Policy/Channels
    - Policy/Channels/ChannelName
    - Policy/Channels/ChannelName/MaximumFileSize
    - Policy/Channels/ChannelName/SDDL
    - Policy/Channels/ChannelName/ActionWhenFull
    - Policy/Channels/ChannelName/Enabled
    - DiagnosticArchive
    - DiagnosticArchive/ArchiveDefinition
    - DiagnosticArchive/ArchiveResults | -| [EnrollmentStatusTracking CSP](enrollmentstatustracking-csp.md) | Added the new CSP. | -| [PassportForWork CSP](passportforwork-csp.md) | Added the following new nodes:
    - SecurityKey
    - SecurityKey/UseSecurityKeyForSignin | - - -## What’s new in MDM for Windows 10, version 1809 - -| New or updated article | Description | -|-----|-----| -|[Policy CSP](policy-configuration-service-provider.md) | Added the following new policy settings in Windows 10, version 1809:
    - ApplicationManagement/LaunchAppAfterLogOn
    - ApplicationManagement/ScheduleForceRestartForUpdateFailures
    - Authentication/EnableFastFirstSignIn (Preview mode only)
    - Authentication/EnableWebSignIn (Preview mode only)
    - Authentication/PreferredAadTenantDomainName
    - Browser/AllowFullScreenMode
    - Browser/AllowPrelaunch
    - Browser/AllowPrinting
    - Browser/AllowSavingHistory
    - Browser/AllowSideloadingOfExtensions
    - Browser/AllowTabPreloading
    - Browser/AllowWebContentOnNewTabPage
    - Browser/ConfigureFavoritesBar
    - Browser/ConfigureHomeButton
    - Browser/ConfigureKioskMode
    - Browser/ConfigureKioskResetAfterIdleTimeout
    - Browser/ConfigureOpenMicrosoftEdgeWith
    - Browser/ConfigureTelemetryForMicrosoft365Analytics
    - Browser/PreventCertErrorOverrides
    - Browser/SetHomeButtonURL
    - Browser/SetNewTabPageURL
    - Browser/UnlockHomeButton
    - Defender/CheckForSignaturesBeforeRunningScan
    - Defender/DisableCatchupFullScan
    - Defender/DisableCatchupQuickScan
    - Defender/EnableLowCPUPriority
    - Defender/SignatureUpdateFallbackOrder
    - Defender/SignatureUpdateFileSharesSources
    - DeviceGuard/ConfigureSystemGuardLaunch
    - DeviceInstallation/AllowInstallationOfMatchingDeviceIDs
    - DeviceInstallation/AllowInstallationOfMatchingDeviceSetupClasses
    - DeviceInstallation/PreventDeviceMetadataFromNetwork
    - DeviceInstallation/PreventInstallationOfDevicesNotDescribedByOtherPolicySettings
    - DmaGuard/DeviceEnumerationPolicy
    - Experience/AllowClipboardHistory
    - Experience/DoNotSyncBrowserSettings
    - Experience/PreventUsersFromTurningOnBrowserSyncing
    - Kerberos/UPNNameHints
    - Privacy/AllowCrossDeviceClipboard
    - Privacy/DisablePrivacyExperience
    - Privacy/UploadUserActivities
    - Security/RecoveryEnvironmentAuthentication
    - System/AllowDeviceNameInDiagnosticData
    - System/ConfigureMicrosoft365UploadEndpoint
    - System/DisableDeviceDelete
    - System/DisableDiagnosticDataViewer
    - Storage/RemovableDiskDenyWriteAccess
    - TaskManager/AllowEndTask
    - Update/DisableWUfBSafeguards
    - Update/EngagedRestartDeadlineForFeatureUpdates
    - Update/EngagedRestartSnoozeScheduleForFeatureUpdates
    - Update/EngagedRestartTransitionScheduleForFeatureUpdates
    - Update/SetDisablePauseUXAccess
    - Update/SetDisableUXWUAccess
    - WindowsDefenderSecurityCenter/DisableClearTpmButton
    - WindowsDefenderSecurityCenter/DisableTpmFirmwareUpdateWarning
    - WindowsDefenderSecurityCenter/HideWindowsSecurityNotificationAreaControl
    - WindowsLogon/DontDisplayNetworkSelectionUI | -| [BitLocker CSP](bitlocker-csp.md) | Added a new node AllowStandardUserEncryption in Windows 10, version 1809. Added support for Windows 10 Pro. | -| [Defender CSP](defender-csp.md) | Added a new node Health/ProductStatus in Windows 10, version 1809. | -| [DevDetail CSP](devdetail-csp.md) | Added a new node SMBIOSSerialNumber in Windows 10, version 1809. | -| [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | Added NonRemovable setting under AppManagement node in Windows 10, version 1809. | -| [Office CSP](office-csp.md) | Added FinalStatus setting in Windows 10, version 1809. | -| [PassportForWork CSP](passportforwork-csp.md) | Added new settings in Windows 10, version 1809. | -| [RemoteWipe CSP](remotewipe-csp.md) | Added new settings in Windows 10, version 1809. | -| [SUPL CSP](supl-csp.md) | Added 3 new certificate nodes in Windows 10, version 1809. | -| [TenantLockdown CSP](tenantlockdown-csp.md) | Added new CSP in Windows 10, version 1809. | -| [Wifi CSP](wifi-csp.md) | Added a new node WifiCost in Windows 10, version 1809. | -| [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md) | Added new settings in Windows 10, version 1809. | -| [WindowsLicensing CSP](windowslicensing-csp.md) | Added S mode settings and SyncML examples in Windows 10, version 1809. | -| [Win32CompatibilityAppraiser CSP](win32compatibilityappraiser-csp.md) | Added new configuration service provider in Windows 10, version 1809. | - - -## What’s new in MDM for Windows 10, version 1803 - -| New or updated article | Description | -|-----|-----| -|[Policy CSP](policy-configuration-service-provider.md) | Added the following new policies for Windows 10, version 1803:
    - ApplicationDefaults/EnableAppUriHandlers
    - ApplicationManagement/MSIAllowUserControlOverInstall
    - ApplicationManagement/MSIAlwaysInstallWithElevatedPrivileges
    - Bluetooth/AllowPromptedProximalConnections
    - Browser/AllowConfigurationUpdateForBooksLibrary
    - Browser/AlwaysEnableBooksLibrary
    - Browser/EnableExtendedBooksTelemetry
    - Browser/UseSharedFolderForBooks
    - Connectivity/AllowPhonePCLinking
    - DeliveryOptimization/DODelayBackgroundDownloadFromHttp
    - DeliveryOptimization/DODelayForegroundDownloadFromHttp
    - DeliveryOptimization/DOGroupIdSource
    - DeliveryOptimization/DOPercentageMaxBackDownloadBandwidth
    - DeliveryOptimization/DOPercentageMaxForeDownloadBandwidth
    - DeliveryOptimization/DORestrictPeerSelectionBy
    - DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth
    - DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth
    - Display/DisablePerProcessDpiForApps
    - Display/EnablePerProcessDpi
    - Display/EnablePerProcessDpiForApps
    - Experience/AllowWindowsSpotlightOnSettings
    - KioskBrowser/BlockedUrlExceptions
    - KioskBrowser/BlockedUrls
    - KioskBrowser/DefaultURL
    - KioskBrowser/EnableEndSessionButton
    - KioskBrowser/EnableHomeButton
    - KioskBrowser/EnableNavigationButtons
    - KioskBrowser/RestartOnIdleTime
    - LanmanWorkstation/EnableInsecureGuestLogons
    - LocalPoliciesSecurityOptions/Devices_AllowUndockWithoutHavingToLogon
    - LocalPoliciesSecurityOptions/Devices_AllowedToFormatAndEjectRemovableMedia
    - LocalPoliciesSecurityOptions/Devices_PreventUsersFromInstallingPrinterDriversWhenConnectingToSharedPrinters
    - LocalPoliciesSecurityOptions/Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnly
    - LocalPoliciesSecurityOptions/InteractiveLogon_SmartCardRemovalBehavior
    - LocalPoliciesSecurityOptions/MicrosoftNetworkClient_DigitallySignCommunicationsIfServerAgrees
    - LocalPoliciesSecurityOptions/MicrosoftNetworkClient_SendUnencryptedPasswordToThirdPartySMBServers
    - LocalPoliciesSecurityOptions/MicrosoftNetworkServer_DigitallySignCommunicationsAlways
    - LocalPoliciesSecurityOptions/MicrosoftNetworkServer_DigitallySignCommunicationsIfClientAgrees
    - LocalPoliciesSecurityOptions/NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts
    - LocalPoliciesSecurityOptions/NetworkAccess_DoNotAllowAnonymousEnumerationOfSamAccountsAndShares
    - LocalPoliciesSecurityOptions/NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares
    - LocalPoliciesSecurityOptions/NetworkAccess_RestrictClientsAllowedToMakeRemoteCallsToSAM
    - LocalPoliciesSecurityOptions/NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange
    - LocalPoliciesSecurityOptions/NetworkSecurity_LANManagerAuthenticationLevel
    - LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers
    - LocalPoliciesSecurityOptions/NetworkSecurity_RestrictNTLM_AddRemoteServerExceptionsForNTLMAuthentication
    - LocalPoliciesSecurityOptions/NetworkSecurity_RestrictNTLM_AuditIncomingNTLMTraffic
    - LocalPoliciesSecurityOptions/NetworkSecurity_RestrictNTLM_IncomingNTLMTraffic
    - LocalPoliciesSecurityOptions/NetworkSecurity_RestrictNTLM_OutgoingNTLMTrafficToRemoteServers
    - LocalPoliciesSecurityOptions/Shutdown_ClearVirtualMemoryPageFile
    - LocalPoliciesSecurityOptions/UserAccountControl_DetectApplicationInstallationsAndPromptForElevation
    - LocalPoliciesSecurityOptions/UserAccountControl_UseAdminApprovalMode
    - Notifications/DisallowCloudNotification
    - RestrictedGroups/ConfigureGroupMembership
    - Search/AllowCortanaInAAD
    - Search/DoNotUseWebResults
    - Security/ConfigureWindowsPasswords
    - Start/DisableContextMenus
    - System/FeedbackHubAlwaysSaveDiagnosticsLocally
    - SystemServices/ConfigureHomeGroupListenerServiceStartupMode
    - SystemServices/ConfigureHomeGroupProviderServiceStartupMode
    - SystemServices/ConfigureXboxAccessoryManagementServiceStartupMode
    - SystemServices/ConfigureXboxLiveAuthManagerServiceStartupMode
    - SystemServices/ConfigureXboxLiveGameSaveServiceStartupMode
    - SystemServices/ConfigureXboxLiveNetworkingServiceStartupMode
    - TaskScheduler/EnableXboxGameSaveTask
    - TextInput/EnableTouchKeyboardAutoInvokeInDesktopMode
    - TextInput/ForceTouchKeyboardDockedState
    - TextInput/TouchKeyboardDictationButtonAvailability
    - TextInput/TouchKeyboardEmojiButtonAvailability
    - TextInput/TouchKeyboardFullModeAvailability
    - TextInput/TouchKeyboardHandwritingModeAvailability
    - TextInput/TouchKeyboardNarrowModeAvailability
    - TextInput/TouchKeyboardSplitModeAvailability
    - TextInput/TouchKeyboardWideModeAvailability
    - Update/ConfigureFeatureUpdateUninstallPeriod
    - Update/TargetReleaseVersion
    - UserRights/AccessCredentialManagerAsTrustedCaller
    - UserRights/AccessFromNetwork
    - UserRights/ActAsPartOfTheOperatingSystem
    - UserRights/AllowLocalLogOn
    - UserRights/BackupFilesAndDirectories
    - UserRights/ChangeSystemTime
    - UserRights/CreateGlobalObjects
    - UserRights/CreatePageFile
    - UserRights/CreatePermanentSharedObjects
    - UserRights/CreateSymbolicLinks
    - UserRights/CreateToken
    - UserRights/DebugPrograms
    - UserRights/DenyAccessFromNetwork
    - UserRights/DenyLocalLogOn
    - UserRights/DenyRemoteDesktopServicesLogOn
    - UserRights/EnableDelegation
    - UserRights/GenerateSecurityAudits
    - UserRights/ImpersonateClient
    - UserRights/IncreaseSchedulingPriority
    - UserRights/LoadUnloadDeviceDrivers
    - UserRights/LockMemory
    - UserRights/ManageAuditingAndSecurityLog
    - UserRights/ManageVolume
    - UserRights/ModifyFirmwareEnvironment
    - UserRights/ModifyObjectLabel
    - UserRights/ProfileSingleProcess
    - UserRights/RemoteShutdown
    - UserRights/RestoreFilesAndDirectories
    - UserRights/TakeOwnership
    - WindowsDefenderSecurityCenter/DisableAccountProtectionUI
    - WindowsDefenderSecurityCenter/DisableDeviceSecurityUI
    - WindowsDefenderSecurityCenter/HideRansomwareDataRecovery
    - WindowsDefenderSecurityCenter/HideSecureBoot
    - WindowsDefenderSecurityCenter/HideTPMTroubleshooting
    - Security/RequireDeviceEncryption - updated to show it is supported in desktop. | -| [Accounts CSP](accounts-csp.md) | Added a new CSP in Windows 10, version 1803. | -| [AccountManagement CSP](accountmanagement-csp.md) | Added a new CSP in Windows 10, version 1803. | -| [AssignedAccess CSP](assignedaccess-csp.md) | Added the following nodes in Windows 10, version 1803:
    - Status
    - ShellLauncher
    - StatusConfiguration

    Updated the AssigneAccessConfiguration schema. Starting in Windows 10, version 1803 AssignedAccess CSP is supported in HoloLens (1st gen) Commercial Suite. Added example for HoloLens (1st gen) Commercial Suite. | -| [BitLocker CSP](bitlocker-csp.md) | Updated the description for AllowWarningForOtherDiskEncryption to describe changes added in Windows 10, version 1803. | -| [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download) | Added the DDF download of Windows 10, version 1803 configuration service providers. | -| [Defender CSP](defender-csp.md) | Added new node (OfflineScan) in Windows 10, version 1803. | -| [DeviceStatus CSP](devicestatus-csp.md) | Added the following node in Windows 10, version 1803:
    - OS/Mode | -| [DMClient CSP](dmclient-csp.md) | Added ./User/Vendor/MSFT/DMClient/Provider/[ProviderID]/FirstSyncStatus node. Also added the following nodes in Windows 10, version 1803:
    - AADSendDeviceToken
    - BlockInStatusPage
    - AllowCollectLogsButton
    - CustomErrorText
    - SkipDeviceStatusPage
    - SkipUserStatusPage | -| [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | Added the following node in Windows 10, version 1803:
    - MaintainProcessorArchitectureOnUpdate | -| [eUICCs CSP](euiccs-csp.md) | Added the following node in Windows 10, version 1803:
    - IsEnabled | -| [MDM Migration Analysis Too (MMAT)](https://aka.ms/mmat) | MDM Migration Analysis Too (MMAT)
    Updated version available. MMAT is a tool you can use to determine which Group Policies are set on a target user/computer and cross-reference them against the list of supported MDM policies. | -| [MultiSIM CSP](multisim-csp.md) | Added a new CSP in Windows 10, version 1803. | -| [NetworkProxy CSP](networkproxy-csp.md) | Added the following node in Windows 10, version 1803:
    - ProxySettingsPerUser | -| [RootCATrustedCertificates CSP](rootcacertificates-csp.md) | Added the following node in Windows 10, version 1803:
    - UntrustedCertificates | -| [UEFI CSP](uefi-csp.md) | Added a new CSP in Windows 10, version 1803. | -| [Update CSP](update-csp.md) | Added the following nodes in Windows 10, version 1803:
    - Rollback
    - Rollback/FeatureUpdate
    - Rollback/QualityUpdateStatus
    - Rollback/FeatureUpdateStatus | - -## What’s new in MDM for Windows 10, version 1709 - -| New or updated article | Description | -|-----|-----| -| The [The [MS-MDE2]: Mobile Device Enrollment Protocol Version 2](/openspecs/windows_protocols/ms-mde2/4d7eadd5-3951-4f1c-8159-c39e07cbe692) | The Windows 10 enrollment protocol was updated. The following elements were added to the RequestSecurityToken message:
    - UXInitiated - boolean value that indicates whether the enrollment is user initiated from the Settings page.
    -ExternalMgmtAgentHint - a string the agent uses to give hints the enrollment server may need.
    - DomainName - fully qualified domain name if the device is domain-joined. | -| [Firewall CSP](firewall-csp.md) | Added new CSP in Windows 10, version 1709. | -| [eUICCs CSP](euiccs-csp.md) | Added new CSP in Windows 10, version 1709. | -| [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md)
    [WindowsDefenderApplicationGuard DDF file](windowsdefenderapplicationguard-ddf-file.md) | New CSP added in Windows 10, version 1709. Also added the DDF topic. | -| [CM_ProxyEntries CSP](cm-proxyentries-csp.md) and [CMPolicy CSP](cmpolicy-csp.md) | In Windows 10, version 1709, support for desktop SKUs were added to these CSPs. | -| [VPNv2 CSP](vpnv2-csp.md) | Added DeviceTunnel and RegisterDNS settings in Windows 10, version 1709. | -| [DeviceStatus CSP](devicestatus-csp.md) | Added the following settings in Windows 10, version 1709:
    - DeviceStatus/DomainName
    - DeviceStatus/DeviceGuard/VirtualizationBasedSecurityHwReq
    - DeviceStatus/DeviceGuard/VirtualizationBasedSecurityStatus
    - DeviceStatus/DeviceGuard/LsaCfgCredGuardStatus | -| [AssignedAccess CSP](assignedaccess-csp.md) | Added the following setting in Windows 10, version 1709:
    - Configuration
    Starting in Windows 10, version 1709, AssignedAccess CSP is supported in Windows 10 Pro. | -| [DeviceManageability CSP](devicemanageability-csp.md) | Added the following settings in Windows 10, version 1709:
    - Provider/_ProviderID_/ConfigInfo
    - Provider/_ProviderID_/EnrollmentInfo | -| [Office CSP](office-csp.md) | Added the following setting in Windows 10, version 1709:
    - Installation/CurrentStatus | -| [DMClient CSP](dmclient-csp.md) | Added new nodes to the DMClient CSP in Windows 10, version 1709. Updated the CSP and DDF articles. | -| [Bitlocker CSP](bitlocker-csp.md) | Changed the minimum personal identification number (PIN) length to 4 digits in SystemDrivesRequireStartupAuthentication and SystemDrivesMinimumPINLength in Windows 10, version 1709. | -| [ADMX-backed policies in Policy CSP](./policies-in-policy-csp-admx-backed.md) | Added new policies. | -| Microsoft Store for Business and Microsoft Store | Windows Store for Business name changed to Microsoft Store for Business. Windows Store name changed to Microsoft Store. | -| [MDM enrollment of Windows-based devices](mdm-enrollment-of-windows-devices.md) | New features in the Settings app:
    - User sees installation progress of critical policies during MDM enrollment.
    - User knows what policies, profiles, apps MDM has configured
    - IT helpdesk can get detailed MDM diagnostic information using client tools
    For details, see [Managing connection](./mdm-enrollment-of-windows-devices.md#manage-connections) and [Collecting diagnostic logs](./mdm-enrollment-of-windows-devices.md#collecting-diagnostic-logs).| -| [Enroll a Windows 10 device automatically using Group Policy](enroll-a-windows-10-device-automatically-using-group-policy.md) | Added new topic to introduce a new Group Policy for automatic MDM enrollment. | -| [Policy CSP](policy-configuration-service-provider.md) | Added the following new policies for Windows 10, version 1709:
    - Authentication/AllowAadPasswordReset
    - Authentication/AllowFidoDeviceSignon
    - Browser/LockdownFavorites
    - Browser/ProvisionFavorites
    - Cellular/LetAppsAccessCellularData
    - Cellular/LetAppsAccessCellularData_ForceAllowTheseApps
    - Cellular/LetAppsAccessCellularData_ForceDenyTheseApps
    - Cellular/LetAppsAccessCellularData_UserInControlOfTheseApps
    - CredentialProviders/DisableAutomaticReDeploymentCredentials
    - DeviceGuard/EnableVirtualizationBasedSecurity
    - DeviceGuard/RequirePlatformSecurityFeatures
    - DeviceGuard/LsaCfgFlags
    - DeviceLock/MinimumPasswordAge
    - ExploitGuard/ExploitProtectionSettings
    - Games/AllowAdvancedGamingServices
    - Handwriting/PanelDefaultModeDocked
    - LocalPoliciesSecurityOptions/Accounts_BlockMicrosoftAccounts
    - LocalPoliciesSecurityOptions/Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly
    - LocalPoliciesSecurityOptions/Accounts_RenameAdministratorAccount
    - LocalPoliciesSecurityOptions/Accounts_RenameGuestAccount
    - LocalPoliciesSecurityOptions/InteractiveLogon_DisplayUserInformationWhenTheSessionIsLocked
    - LocalPoliciesSecurityOptions/Interactivelogon_DoNotDisplayLastSignedIn
    - LocalPoliciesSecurityOptions/Interactivelogon_DoNotDisplayUsernameAtSignIn
    - LocalPoliciesSecurityOptions/Interactivelogon_DoNotRequireCTRLALTDEL
    - LocalPoliciesSecurityOptions/InteractiveLogon_MachineInactivityLimit
    - LocalPoliciesSecurityOptions/InteractiveLogon_MessageTextForUsersAttemptingToLogOn
    - LocalPoliciesSecurityOptions/InteractiveLogon_MessageTitleForUsersAttemptingToLogOn
    - LocalPoliciesSecurityOptions/NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM
    - LocalPoliciesSecurityOptions/NetworkSecurity_AllowPKU2UAuthenticationRequests
    - LocalPoliciesSecurityOptions/Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOn
    - LocalPoliciesSecurityOptions/UserAccountControl_AllowUIAccessApplicationsToPromptForElevation
    - LocalPoliciesSecurityOptions/UserAccountControl_BehaviorOfTheElevationPromptForAdministrators
    - LocalPoliciesSecurityOptions/UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers
    - LocalPoliciesSecurityOptions/UserAccountControl_OnlyElevateExecutableFilesThatAreSignedAndValidated
    - LocalPoliciesSecurityOptions/UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations
    - LocalPoliciesSecurityOptions/UserAccountControl_RunAllAdministratorsInAdminApprovalMode
    - LocalPoliciesSecurityOptions/UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation
    - LocalPoliciesSecurityOptions/UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPerUserLocations
    - Power/DisplayOffTimeoutOnBattery
    - Power/DisplayOffTimeoutPluggedIn
    - Power/HibernateTimeoutOnBattery
    - Power/HibernateTimeoutPluggedIn
    - Power/StandbyTimeoutOnBattery
    - Power/StandbyTimeoutPluggedIn
    - Privacy/EnableActivityFeed
    - Privacy/PublishUserActivities
    - Defender/AttackSurfaceReductionOnlyExclusions
    - Defender/AttackSurfaceReductionRules
    - Defender/CloudBlockLevel
    - Defender/CloudExtendedTimeout
    - Defender/ControlledFolderAccessAllowedApplications
    - Defender/ControlledFolderAccessProtectedFolders
    - Defender/EnableControlledFolderAccess
    - Defender/EnableNetworkProtection
    - Education/DefaultPrinterName
    - Education/PreventAddingNewPrinters
    - Education/PrinterNames
    - Search/AllowCloudSearch
    - Security/ClearTPMIfNotReady
    - Settings/AllowOnlineTips
    - Start/HidePeopleBar
    - Storage/AllowDiskHealthModelUpdates
    - System/DisableEnterpriseAuthProxy
    - System/LimitEnhancedDiagnosticDataWindowsAnalytics
    - Update/AllowAutoWindowsUpdateDownloadOverMeteredNetwork
    - Update/DisableDualScan
    - Update/ManagePreviewBuilds
    - Update/ScheduledInstallEveryWeek
    - Update/ScheduledInstallFirstWeek
    - Update/ScheduledInstallFourthWeek
    - Update/ScheduledInstallSecondWeek
    - Update/ScheduledInstallThirdWeek
    - WindowsDefenderSecurityCenter/CompanyName
    - WindowsDefenderSecurityCenter/DisableAppBrowserUI
    - WindowsDefenderSecurityCenter/DisableEnhancedNotifications
    - WindowsDefenderSecurityCenter/DisableFamilyUI
    - WindowsDefenderSecurityCenter/DisableHealthUI
    - WindowsDefenderSecurityCenter/DisableNetworkUI
    - WindowsDefenderSecurityCenter/DisableNotifications
    - WindowsDefenderSecurityCenter/DisableVirusUI
    - WindowsDefenderSecurityCenter/DisallowExploitProtectionOverride
    - WindowsDefenderSecurityCenter/Email
    - WindowsDefenderSecurityCenter/EnableCustomizedToasts
    - WindowsDefenderSecurityCenter/EnableInAppCustomization
    - WindowsDefenderSecurityCenter/Phone
    - WindowsDefenderSecurityCenter/URL
    - WirelessDisplay/AllowMdnsAdvertisement
    - WirelessDisplay/AllowMdnsDiscovery | - - -## What’s new in MDM for Windows 10, version 1703 - -| New or updated article | Description | -|-----|-----| -| [Update CSP](update-csp.md) | Added the following nodes:
    - FailedUpdates/_Failed Update Guid_/RevisionNumber
    - InstalledUpdates/_Installed Update Guid_/RevisionNumber
    - PendingRebootUpdates/_Pending Reboot Update Guid_/RevisionNumber | -| [CM_CellularEntries CSP](cm-cellularentries-csp.md) | To PurposeGroups setting, added the following values:
    - Purchase - 95522B2B-A6D1-4E40-960B-05E6D3F962AB
    - Administrative - 2FFD9261-C23C-4D27-8DCF-CDE4E14A3364 | -| [CertificateStore CSP](certificatestore-csp.md) | Added the following setting:
    - My/WSTEP/Renew/RetryAfterExpiryInterval | -| [ClientCertificateInstall CSP](clientcertificateinstall-csp.md) | Added the following setting:
    - SCEP/UniqueID/Install/AADKeyIdentifierList | -| [DMAcc CSP](dmacc-csp.md) | Added the following setting:
    - AccountUID/EXT/Microsoft/InitiateSession | -| [DMClient CSP](dmclient-csp.md) | Added the following nodes and settings:
    - HWDevID
    - Provider/ProviderID/ManagementServerToUpgradeTo
    - Provider/ProviderID/CustomEnrollmentCompletePage
    - Provider/ProviderID/CustomEnrollmentCompletePage/Title
    - Provider/ProviderID/CustomEnrollmentCompletePage/BodyText
    - Provider/ProviderID/CustomEnrollmentCompletePage/HyperlinkHref
    - Provider/ProviderID/CustomEnrollmentCompletePage/HyperlinkText | -| [CellularSettings CSP](cellularsettings-csp.md)
    [CM_CellularEntries CSP](cm-cellularentries-csp.md)
    [EnterpriseAPN CSP](enterpriseapn-csp.md) | For these CSPs, support was added for Windows 10 Home, Pro, Enterprise, and Education editions. | -| [SecureAssessment CSP](secureassessment-csp.md) | Added the following settings:
    - AllowTextSuggestions
    - RequirePrinting | -| [EnterpriseAPN CSP](enterpriseapn-csp.md) | Added the following setting:
    - Roaming | -| [Policy CSP](policy-configuration-service-provider.md) | Added the following new policies:
    - Accounts/AllowMicrosoftAccountSignInAssistant
    - ApplicationDefaults/DefaultAssociationsConfiguration
    - Browser/AllowAddressBarDropdown
    - Browser/AllowFlashClickToRun
    - Browser/AllowMicrosoftCompatibilityList
    - Browser/AllowSearchEngineCustomization
    - Browser/ClearBrowsingDataOnExit
    - Browser/ConfigureAdditionalSearchEngines
    - Browser/DisableLockdownOfStartPages
    - Browser/PreventFirstRunPage
    - Browser/PreventLiveTileDataCollection
    - Browser/SetDefaultSearchEngine
    - Browser/SyncFavoritesBetweenIEAndMicrosoftEdge
    - Connectivity/AllowConnectedDevices
    - DeliveryOptimization/DOAllowVPNPeerCaching
    - DeliveryOptimization/DOMinBatteryPercentageAllowedToUpload
    - DeliveryOptimization/DOMinDiskSizeAllowedToPeer
    - DeliveryOptimization/DOMinFileSizeToCache
    - DeliveryOptimization/DOMinRAMAllowedToPeer
    - DeviceLock/MaxInactivityTimeDeviceLockWithExternalDisplay
    - Display/TurnOffGdiDPIScalingForApps
    - Display/TurnOnGdiDPIScalingForApps
    - EnterpriseCloudPrint/CloudPrinterDiscoveryEndPoint
    - EnterpriseCloudPrint/CloudPrintOAuthAuthority
    - EnterpriseCloudPrint/CloudPrintOAuthClientId
    - EnterpriseCloudPrint/CloudPrintResourceId
    - EnterpriseCloudPrint/DiscoveryMaxPrinterLimit
    - EnterpriseCloudPrint/MopriaDiscoveryResourceId
    - Experience/AllowFindMyDevice
    - Experience/AllowTailoredExperiencesWithDiagnosticData
    - Experience/AllowWindowsSpotlightOnActionCenter
    - Experience/AllowWindowsSpotlightWindowsWelcomeExperience
    - Location/EnableLocation
    - Messaging/AllowMMS
    - Messaging/AllowRCS
    - Privacy/LetAppsAccessTasks
    - Privacy/LetAppsAccessTasks_ForceAllowTheseApps
    - Privacy/LetAppsAccessTasks_ForceDenyTheseApps
    - Privacy/LetAppsAccessTasks_UserInControlOfTheseApps
    - Privacy/LetAppsGetDiagnosticInfo
    - Privacy/LetAppsGetDiagnosticInfo_ForceAllowTheseApps
    - Privacy/LetAppsGetDiagnosticInfo_ForceDenyTheseApps
    - Privacy/LetAppsGetDiagnosticInfo_UserInControlOfTheseApps
    - Privacy/LetAppsRunInBackground
    - Privacy/LetAppsRunInBackground_ForceAllowTheseApps
    - Privacy/LetAppsRunInBackground_ForceDenyTheseApps
    - Privacy/LetAppsRunInBackground_UserInControlOfTheseApps
    - Settings/ConfigureTaskbarCalendar
    - Settings/PageVisibilityList
    - SmartScreen/EnableAppInstallControl
    - SmartScreen/EnableSmartScreenInShell
    - SmartScreen/PreventOverrideForFilesInShell
    - Start/AllowPinnedFolderDocuments
    - Start/AllowPinnedFolderDownloads
    - Start/AllowPinnedFolderFileExplorer
    - Start/AllowPinnedFolderHomeGroup
    - Start/AllowPinnedFolderMusic
    - Start/AllowPinnedFolderNetwork
    - Start/AllowPinnedFolderPersonalFolder
    - Start/AllowPinnedFolderPictures
    - Start/AllowPinnedFolderSettings
    - Start/AllowPinnedFolderVideos
    - Start/HideAppList
    - Start/HideChangeAccountSettings
    - Start/HideFrequentlyUsedApps
    - Start/HideHibernate
    - Start/HideLock
    - Start/HidePowerButton
    - Start/HideRecentJumplists
    - Start/HideRecentlyAddedApps
    - Start/HideRestart
    - Start/HideShutDown
    - Start/HideSignOut
    - Start/HideSleep
    - Start/HideSwitchAccount
    - Start/HideUserTile
    - Start/ImportEdgeAssets
    - Start/NoPinningToTaskbar
    - System/AllowFontProviders
    - System/DisableOneDriveFileSync
    - TextInput/AllowKeyboardTextSuggestions
    - TimeLanguageSettings/AllowSet24HourClock
    - Update/ActiveHoursMaxRange
    - Update/AutoRestartDeadlinePeriodInDays
    - Update/AutoRestartNotificationSchedule
    - Update/AutoRestartRequiredNotificationDismissal
    - Update/DetectionFrequency
    - Update/EngagedRestartDeadline
    - Update/EngagedRestartSnoozeSchedule
    - Update/EngagedRestartTransitionSchedule
    - Update/IgnoreMOAppDownloadLimit
    - Update/IgnoreMOUpdateDownloadLimit
    - Update/PauseFeatureUpdatesStartTime
    - Update/PauseQualityUpdatesStartTime
    - Update/SetAutoRestartNotificationDisable
    - Update/SetEDURestart
    - WiFi/AllowWiFiDirect
    - WindowsLogon/HideFastUserSwitching
    - WirelessDisplay/AllowProjectionFromPC
    - WirelessDisplay/AllowProjectionFromPCOverInfrastructure
    - WirelessDisplay/AllowProjectionToPCOverInfrastructure
    - WirelessDisplay/AllowUserInputFromWirelessDisplayReceiver
    Removed TextInput/AllowLinguisticDataCollection
    Starting in Windows 10, version 1703, Update/UpdateServiceUrl is not supported in IoT Enterprise
    Starting in Windows 10, version 1703, the maximum value of Update/DeferFeatureUpdatesPeriodInDays has been increased from 180 days, to 365 days.
    Starting in Windows 10, version 1703, in Browser/HomePages you can use the "<about:blank>" value if you don’t want to send traffic to Microsoft.
    Starting in Windows 10, version 1703, Start/StartLayout can now be set on a per-device basis in addition to the pre-existing per-user basis.
    Added the ConfigOperations/ADMXInstall node and setting, which is used to ingest ADMX files. | -| [DevDetail CSP](devdetail-csp.md) | Added the following setting:
    - DeviceHardwareData | -| [CleanPC CSP](cleanpc-csp.md) | Added the new CSP. | -| [DeveloperSetup CSP](developersetup-csp.md) | Added the new CSP. | -| [NetworkProxy CSP](networkproxy-csp.md) | Added the new CSP. | -| [BitLocker CSP](bitlocker-csp.md) | Added the new CSP.

    Added the following setting:
    - AllowWarningForOtherDiskEncryption | -| [EnterpriseDataProtection CSP](enterprisedataprotection-csp.md) | Starting in Windows 10, version 1703, AllowUserDecryption is no longer supported.
    Added the following settings:
    - RevokeOnMDMHandoff
    - SMBAutoEncryptedFileExtensions | -| [DynamicManagement CSP](dynamicmanagement-csp.md) | Added the new CSP. | -| [Implement server-side support for mobile application management on Windows](./implement-server-side-mobile-application-management.md) | New mobile application management (MAM) support added in Windows 10, version 1703. | -| [PassportForWork CSP](passportforwork-csp.md) | Added the following new node and settings:
    - _TenantId_/Policies/ExcludeSecurityDevices (only for ./Device/Vendor/MSFT)
    - _TenantId_/Policies/ExcludeSecurityDevices/TPM12 (only for ./Device/Vendor/MSFT)
    - _TenantId_/Policies/EnablePinRecovery | -| [Office CSP](office-csp.md) | Added the new CSP. | -| [Personalization CSP](personalization-csp.md) | Added the new CSP. | -| [EnterpriseAppVManagement CSP](enterpriseappvmanagement-csp.md) | Added the new CSP. | -| [HealthAttestation CSP](healthattestation-csp.md) | Added the following settings:
    - HASEndpoint - added in Windows 10, version 1607, but not documented
    - TpmReadyStatus - added in the March service release of Windows 10, version 1607 | -| [SurfaceHub CSP](surfacehub-csp.md) | Added the following nodes and settings:
    - InBoxApps/SkypeForBusiness
    - InBoxApps/SkypeForBusiness/DomainName
    - InBoxApps/Connect
    - InBoxApps/Connect/AutoLaunch
    - Properties/DefaultVolume
    - Properties/ScreenTimeout
    - Properties/SessionTimeout
    - Properties/SleepTimeout
    - Properties/AllowSessionResume
    - Properties/AllowAutoProxyAuth
    - Properties/DisableSigninSuggestions
    - Properties/DoNotShowMyMeetingsAndFiles | -| [NetworkQoSPolicy CSP](networkqospolicy-csp.md) | Added the new CSP. | -| [WindowsLicensing CSP](windowslicensing-csp.md) | Added the following setting:
    - ChangeProductKey | -| [WindowsAdvancedThreatProtection CSP](windowsadvancedthreatprotection-csp.md) | Added the following setting:
    - Configuration/TelemetryReportingFrequency | -| [DMSessionActions CSP](dmsessionactions-csp.md) | Added the new CSP. | -| [SharedPC CSP](dmsessionactions-csp.md) | Added new settings in Windows 10, version 1703:
    - RestrictLocalStorage
    - KioskModeAUMID
    - KioskModeUserTileDisplayText
    - InactiveThreshold
    - MaxPageFileSizeMB
    The default value for SetEduPolicies changed to false. The default value for SleepTimeout changed to 300. | -| [RemoteLock CSP](remotelock-csp.md) | Added following setting:
    - LockAndRecoverPIN | -| [NodeCache CSP](nodecache-csp.md) | Added following settings:
    - ChangedNodesData
    - AutoSetExpectedValue | -| [Download all the DDF files for Windows 10, version 1703](https://download.microsoft.com/download/C/7/C/C7C94663-44CF-4221-ABCA-BC895F42B6C2/Windows10_1703_DDF_download.zip) | Added a zip file containing the DDF XML files of the CSPs. The link to the download is available in the DDF articles of various CSPs. | -| [RemoteWipe CSP](remotewipe-csp.md) | Added new setting in Windows 10, version 1703:
    - doWipeProtected | -| [MDM Bridge WMI Provider](/windows/win32/dmwmibridgeprov/mdm-bridge-wmi-provider-portal) | Added new classes and properties. | -| [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md) | Added a section describing SyncML examples of various ADMX elements. | -| [Win32 and Desktop Bridge app policy configuration](./win32-and-centennial-app-policy-configuration.md) | New article. | -| [Deploy and configure App-V apps using MDM](./appv-deploy-and-config.md) | Added a new article describing how to deploy and configure App-V apps using MDM. | -| [EnterpriseDesktopAppManagement CSP](enterprisedesktopappmanagement-csp.md) | Added new setting in the March service release of Windows 10, version 1607.
    - MSI/UpgradeCode/[Guid] | -| [Reporting CSP](reporting-csp.md) | Added new settings in Windows 10, version 1703.
    - EnterpriseDataProtection/RetrieveByTimeRange/Type
    - EnterpriseDataProtection/RetrieveByCount/Type | -| [Connect your Windows 10-based device to work using a deep link](./mdm-enrollment-of-windows-devices.md#connect-your-windows-10-based-device-to-work-using-a-deep-link) | Added following deep link parameters to the table:
    - Username
    - Servername
    - Accesstoken
    - Deviceidentifier
    - Tenantidentifier
    - Ownership | -| MDM support for Windows 10 S | Updated the following articles to indicate MDM support in Windows 10 S.
    - [Configuration service provider reference](configuration-service-provider-reference.md)
    - [Policy CSP](policy-configuration-service-provider.md) | -| [TPMPolicy CSP](tpmpolicy-csp.md) | Added the new CSP. | - -## What’s new in MDM for Windows 10, version 1607 - -| New or updated article | Description | -|-----|-----| -| Sideloading of apps | Starting in Windows 10, version 1607, sideloading of apps is only allowed through [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md). Product keys (5x5) will no longer be supported to enable sideloading on Windows 10, version 1607 devices. | -| [NodeCache CSP](nodecache-csp.md) | The value of NodeCache root node starting in Windows 10, version 1607 is com.microsoft/1.0/MDM/NodeCache. | -| [EnterpriseDataProtection CSP](enterprisedataprotection-csp.md) | New CSP. | -| [Policy CSP](policy-configuration-service-provider.md) | Removed the following policies:
    - DataProtection/AllowAzureRMSForEDP - moved this policy to [EnterpriseDataProtection CSP](enterprisedataprotection-csp.md)
    - DataProtection/AllowUserDecryption - moved this policy to [EnterpriseDataProtection CSP](enterprisedataprotection-csp.md)
    - DataProtection/EDPEnforcementLevel - moved this policy to [EnterpriseDataProtection CSP](enterprisedataprotection-csp.md)
    - DataProtection/RequireProtectionUnderLockConfig - moved this policy to [EnterpriseDataProtection CSP](enterprisedataprotection-csp.md)
    - DataProtection/RevokeOnUnenroll - moved this policy to [EnterpriseDataProtection CSP](enterprisedataprotection-csp.md)
    - DataProtection/EnterpriseCloudResources - moved this policy to NetworkIsolation policy
    - DataProtection/EnterpriseInternalProxyServers - moved this policy to NetworkIsolation policy
    - DataProtection/EnterpriseIPRange - moved this policy to NetworkIsolation policy
    - DataProtection/EnterpriseNetworkDomainNames - moved this policy to NetworkIsolation policy
    - DataProtection/EnterpriseProxyServers - moved this policy to NetworkIsolation policy
    - Security/AllowAutomaticDeviceEncryptionForAzureADJoinedDevices - this policy has been deprecated.

    Added the WiFi/AllowManualWiFiConfiguration and WiFi/AllowWiFi policies for Windows 10, version 1607:
    - Windows 10 Pro
    - Windows 10 Enterprise
    - Windows 10 Education

    Added the following new policies:
    - AboveLock/AllowCortanaAboveLock
    - ApplicationManagement/DisableStoreOriginatedApps
    - Authentication/AllowSecondaryAuthenticationDevice
    - Bluetooth/AllowPrepairing
    - Browser/AllowExtensions
    - Browser/PreventAccessToAboutFlagsInMicrosoftEdge
    - Browser/ShowMessageWhenOpeningSitesInInternetExplorer
    - DeliveryOptimization/DOAbsoluteMaxCacheSize
    - DeliveryOptimization/DOMaxDownloadBandwidth
    - DeliveryOptimization/DOMinBackgroundQoS
    - DeliveryOptimization/DOModifyCacheDrive
    - DeliveryOptimization/DOMonthlyUploadDataCap
    - DeliveryOptimization/DOPercentageMaxDownloadBandwidth
    - DeviceLock/EnforceLockScreenAndLogonImage
    - DeviceLock/EnforceLockScreenProvider
    - Defender/PUAProtection
    - Experience/AllowThirdPartySuggestionsInWindowsSpotlight
    - Experience/AllowWindowsSpotlight
    - Experience/ConfigureWindowsSpotlightOnLockScreen
    - Experience/DoNotShowFeedbackNotifications
    - Licensing/AllowWindowsEntitlementActivation
    - Licensing/DisallowKMSClientOnlineAVSValidation
    - LockDown/AllowEdgeSwipe
    - Maps/EnableOfflineMapsAutoUpdate
    - Maps/AllowOfflineMapsDownloadOverMeteredConnection
    - Messaging/AllowMessageSync
    - NetworkIsolation/EnterpriseCloudResources
    - NetworkIsolation/EnterpriseInternalProxyServers
    - NetworkIsolation/EnterpriseIPRange
    - NetworkIsolation/EnterpriseIPRangesAreAuthoritative
    - NetworkIsolation/EnterpriseNetworkDomainNames
    - NetworkIsolation/EnterpriseProxyServers
    - NetworkIsolation/EnterpriseProxyServersAreAuthoritative
    - NetworkIsolation/NeutralResources
    - Notifications/DisallowNotificationMirroring
    - Privacy/DisableAdvertisingId
    - Privacy/LetAppsAccessAccountInfo
    - Privacy/LetAppsAccessAccountInfo_ForceAllowTheseApps
    - Privacy/LetAppsAccessAccountInfo_ForceDenyTheseApps
    - Privacy/LetAppsAccessAccountInfo_UserInControlOfTheseApps
    - Privacy/LetAppsAccessCalendar
    - Privacy/LetAppsAccessCalendar_ForceAllowTheseApps
    - Privacy/LetAppsAccessCalendar_ForceDenyTheseApps
    - Privacy/LetAppsAccessCalendar_UserInControlOfTheseApps
    - Privacy/LetAppsAccessCallHistory
    - Privacy/LetAppsAccessCallHistory_ForceAllowTheseApps
    - Privacy/LetAppsAccessCallHistory_ForceDenyTheseApps
    - Privacy/LetAppsAccessCallHistory_UserInControlOfTheseApps
    - Privacy/LetAppsAccessCamera
    - Privacy/LetAppsAccessCamera_ForceAllowTheseApps
    - Privacy/LetAppsAccessCamera_ForceDenyTheseApps
    - Privacy/LetAppsAccessCamera_UserInControlOfTheseApps
    - Privacy/LetAppsAccessContacts
    - Privacy/LetAppsAccessContacts_ForceAllowTheseApps
    - Privacy/LetAppsAccessContacts_ForceDenyTheseApps
    - Privacy/LetAppsAccessContacts_UserInControlOfTheseApps
    - Privacy/LetAppsAccessEmail
    - Privacy/LetAppsAccessEmail_ForceAllowTheseApps
    - Privacy/LetAppsAccessEmail_ForceDenyTheseApps
    - Privacy/LetAppsAccessEmail_UserInControlOfTheseApps
    - Privacy/LetAppsAccessLocation
    - Privacy/LetAppsAccessLocation_ForceAllowTheseApps
    - Privacy/LetAppsAccessLocation_ForceDenyTheseApps
    - Privacy/LetAppsAccessLocation_UserInControlOfTheseApps
    - Privacy/LetAppsAccessMessaging
    - Privacy/LetAppsAccessMessaging_ForceAllowTheseApps
    - Privacy/LetAppsAccessMessaging_ForceDenyTheseApps
    - Privacy/LetAppsAccessMessaging_UserInControlOfTheseApps
    - Privacy/LetAppsAccessMicrophone
    - Privacy/LetAppsAccessMicrophone_ForceAllowTheseApps
    - Privacy/LetAppsAccessMicrophone_ForceDenyTheseApps
    - Privacy/LetAppsAccessMicrophone_UserInControlOfTheseApps
    - Privacy/LetAppsAccessMotion
    - Privacy/LetAppsAccessMotion_ForceAllowTheseApps
    - Privacy/LetAppsAccessMotion_ForceDenyTheseApps
    - Privacy/LetAppsAccessMotion_UserInControlOfTheseApps
    - Privacy/LetAppsAccessNotifications
    - Privacy/LetAppsAccessNotifications_ForceAllowTheseApps
    - Privacy/LetAppsAccessNotifications_ForceDenyTheseApps
    - Privacy/LetAppsAccessNotifications_UserInControlOfTheseApps
    - Privacy/LetAppsAccessPhone
    - Privacy/LetAppsAccessPhone_ForceAllowTheseApps
    - Privacy/LetAppsAccessPhone_ForceDenyTheseApps
    - Privacy/LetAppsAccessPhone_UserInControlOfTheseApps
    - Privacy/LetAppsAccessRadios
    - Privacy/LetAppsAccessRadios_ForceAllowTheseApps
    - Privacy/LetAppsAccessRadios_ForceDenyTheseApps
    - Privacy/LetAppsAccessRadios_UserInControlOfTheseApps
    - Privacy/LetAppsAccessTrustedDevices
    - Privacy/LetAppsAccessTrustedDevices_ForceAllowTheseApps
    - Privacy/LetAppsAccessTrustedDevices_ForceDenyTheseApps
    - Privacy/LetAppsAccessTrustedDevices_UserInControlOfTheseApps
    - Privacy/LetAppsSyncWithDevices
    - Privacy/LetAppsSyncWithDevices_ForceAllowTheseApps
    - Privacy/LetAppsSyncWithDevices_ForceDenyTheseApps
    - Privacy/LetAppsSyncWithDevices_UserInControlOfTheseApps
    - Security/PreventAutomaticDeviceEncryptionForAzureADJoinedDevices
    - Settings/AllowEditDeviceName
    - Speech/AllowSpeechModelUpdate
    - System/TelemetryProxy
    - Update/ActiveHoursStart
    - Update/ActiveHoursEnd
    - Update/AllowMUUpdateService
    - Update/BranchReadinessLevel
    - Update/DeferFeatureUpdatesPeriodInDays
    - Update/DeferQualityUpdatesPeriodInDays
    - Update/ExcludeWUDriversInQualityUpdate
    - Update/PauseFeatureUpdates
    - Update/PauseQualityUpdates
    - Update/SetProxyBehaviorForUpdateDetection
    - Update/UpdateServiceUrlAlternate (Added in the January service release of Windows 10, version 1607)
    - WindowsInkWorkspace/AllowWindowsInkWorkspace
    - WindowsInkWorkspace/AllowSuggestedAppsInWindowsInkWorkspace
    - WirelessDisplay/AllowProjectionToPC
    - WirelessDisplay/RequirePinForPairing

    Updated the Privacy/AllowAutoAcceptPairingAndPrivacyConsentPrompts description to remove outdated information.

    Updated DeliveryOptimization/DODownloadMode to add new values.

    Updated Experience/AllowCortana description to clarify what each supported value does.

    Updated Security/AntiTheftMode description to clarify what each supported value does. | -| [DMClient CSP](dmclient-csp.md) | Added the following settings:
    - ManagementServerAddressList
    - AADDeviceID
    - EnrollmentType
    - HWDevID
    - CommercialID

    Removed the EnrollmentID setting. | -| [DeviceManageability CSP](devicemanageability-csp.md) | New CSP. | -| [DeviceStatus CSP](devicestatus-csp.md) | Added the following new settings:
    - DeviceStatus/TPM/SpecificationVersion
    - DeviceStatus/OS/Edition
    - DeviceStatus/Antivirus/SignatureStatus
    - DeviceStatus/Antivirus/Status
    - DeviceStatus/Antispyware/SignatureStatus
    - DeviceStatus/Antispyware/Status
    - DeviceStatus/Firewall/Status
    - DeviceStatus/UAC/Status
    - DeviceStatus/Battery/Status
    - DeviceStatus/Battery/EstimatedChargeRemaining
    - DeviceStatus/Battery/EstimatedRuntime | -| [AssignedAccess CSP](assignedaccess-csp.md) | Added SyncML examples. | -| [EnterpriseAssignedAccess CSP](enterpriseassignedaccess-csp.md) | Added a new Folder table entry in the AssignedAccess/AssignedAccessXml description.
    Updated the DDF and XSD file sections. | -| [SecureAssessment CSP](secureassessment-csp.md) | New CSP. | -| [DiagnosticLog CSP](diagnosticlog-csp.md)
    [DiagnosticLog DDF](diagnosticlog-ddf.md) | Added version 1.3 of the CSP with two new settings.

    Added the new 1.3 version of the DDF.

    Added the following new settings in Windows 10, version 1607
    - DeviceStateData
    - DeviceStateData/MdmConfiguration | -| [Reboot CSP](reboot-csp.md) | New CSP. | -| [CMPolicyEnterprise CSP](cmpolicyenterprise-csp.md) | New CSP. | -| [VPNv2 CSP](vpnv2-csp.md) | Added the following settings for Windows 10, version 1607:
    - _ProfileName_/RouteList/routeRowId/ExclusionRoute
    - _ProfileName_/DomainNameInformationList/_dniRowId_/AutoTrigger
    - _ProfileName_/DomainNameInformationList/dniRowId/Persistent
    - _ProfileName_/ProfileXML
    - _ProfileName_/DeviceCompliance/Enabled
    - _ProfileName_/DeviceCompliance/Sso
    - _ProfileName_/DeviceCompliance/Sso/Enabled
    - _ProfileName_/DeviceCompliance/Sso/IssuerHash
    - _ProfileName_/DeviceCompliance/Sso/Eku
    - _ProfileName_/NativeProfile/CryptographySuite
    - _ProfileName_/NativeProfile/CryptographySuite/AuthenticationTransformConstants
    - _ProfileName_/NativeProfile/CryptographySuite/CipherTransformConstants
    - _ProfileName_/NativeProfile/CryptographySuite/EncryptionMethod
    - _ProfileName_/NativeProfile/CryptographySuite/IntegrityCheckMethod
    - _ProfileName_/NativeProfile/CryptographySuite/DHGroup
    - _ProfileName_/NativeProfile/CryptographySuite/PfsGroup
    - _ProfileName_/NativeProfile/L2tpPsk | -| [Win32AppInventory CSP](win32appinventory-csp.md) | New CSP. | -| [SharedPC CSP](sharedpc-csp.md) | New CSP. | -| [WindowsAdvancedThreatProtection CSP](windowsadvancedthreatprotection-csp.md) | New CSP. | -| [MDM Bridge WMI Provider](/windows/win32/dmwmibridgeprov/mdm-bridge-wmi-provider-portal) | Added new classes for Windows 10, version 1607. | -| [MDM enrollment of Windows devices](mdm-enrollment-of-windows-devices.md) | Article renamed from "Enrollment UI".

    Completely updated enrollment procedures and screenshots. | -| [UnifiedWriteFilter CSP](unifiedwritefilter-csp.md)
    [UnifiedWriteFilter DDF File](unifiedwritefilter-ddf.md) | Added the following new setting for Windows 10, version 1607:
    - NextSession/HORMEnabled | -| [CertificateStore CSP](certificatestore-csp.md)
    [CertificateStore DDF file](certificatestore-ddf-file.md) | Added the following new settings in Windows 10, version 1607:
    - My/WSTEP/Renew/LastRenewalAttemptTime
    - My/WSTEP/Renew/RenewNow | -| [WindowsLicensing CSP](windowslicensing-csp.md) | Added the following new node and settings in Windows 10, version 1607, but not documented:
    - Subscriptions
    - Subscriptions/SubscriptionId
    - Subscriptions/SubscriptionId/Status
    - Subscriptions/SubscriptionId/Name | -| [WiFi CSP](wifi-csp.md) | Deprecated the following node in Windows 10, version 1607:
    - DisableInternetConnectivityChecks | - -## What’s new in MDM for Windows 10, version 1511 - -| New or updated article | Description | -|-----|-----| -| New configuration service providers added in Windows 10, version 1511 | - [AllJoynManagement CSP](alljoynmanagement-csp.md)
    - [Maps CSP](maps-csp.md)
    - [Reporting CSP](reporting-csp.md)
    - [SurfaceHub CSP](surfacehub-csp.md)
    - [WindowsSecurityAuditing CSP](windowssecurityauditing-csp.md) | -| [Policy CSP](policy-configuration-service-provider.md) | Added the following new policy settings:
    - ApplicationManagement/AllowWindowsBridgeForAndroidAppsExecution
    - Bluetooth/ServicesAllowedList
    - DataProtection/AllowAzureRMSForEDP
    - DataProtection/RevokeOnUnenroll
    - DeviceLock/DevicePasswordExpiration
    - DeviceLock/DevicePasswordHistory
    - TextInput/AllowInputPanel
    - Update/PauseDeferrals
    - Update/RequireDeferUpdate
    - Update/RequireUpdateApproval

    Updated the following policy settings:
    - System/AllowLocation
    - Update/RequireDeferUpgrade

    Deprecated the following policy settings:
    - TextInput/AllowKoreanExtendedHanja
    - WiFi/AllowWiFiHotSpotReporting | -| Management tool for the Microsoft Store for Business | New articles. The Store for Business has a new web service designed for the enterprise to acquire, manage, and distribute applications in bulk. It enables several capabilities that are required for the enterprise to manage the lifecycle of applications from acquisition to updates. | -| Custom header for generic alert | The MDM-GenericAlert is a new custom header that hosts one or more alert information provided in the http messages sent by the device to the server during an OMA DM session. The generic alert is sent if the session is triggered by the device due to one or more critical or fatal alerts. Here is alert format: `MDM-GenericAlert: `

    If present, the MDM-GenericAlert is presented in every the outgoing MDM message in the same OMA DM session. For more information about generic alerts, see section 8.7 in the OMA Device Management Protocol, Approved Version 1.2.1 in this [OMA website](https://go.microsoft.com/fwlink/p/?LinkId=267526). | -| Alert message for slow client response | When the MDM server sends a configuration request, sometimes it takes the client longer than the HTTP timeout to get all information together and then the session ends unexpectedly due to timeout. By default, the MDM client does not send an alert that a DM request is pending.

    To work around the timeout, you can use EnableOmaDmKeepAliveMessage setting to keep the session alive by sending a heartbeat message back to the server. This is achieved by sending a SyncML message with a specific device alert element in the body until the client is able to respond back to the server with the requested information. For details, see EnableOmaDmKeepAliveMessage node in the [DMClient CSP](dmclient-csp.md). | -| [DMClient CSP](dmclient-csp.md) | Added a new node EnableOmaDmKeepAliveMessage to the [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) and updated the ManagementServerAddress to indicate that it can contain a list of URLs. | -| [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | Added the following new nodes:
    - AppManagement/GetInventoryQuery
    - AppManagement/GetInventoryResults
    - .../_PackageFamilyName_/AppSettingPolicy/_SettingValue_
    - AppLicenses/StoreLicenses/_LicenseID_/LicenseCategory
    - AppLicenses/StoreLicenses/_LicenseID_/LicenseUsage
    - AppLicenses/StoreLicenses/_LicenseID_/RequesterID
    - AppLicenses/StoreLicenses/_LicenseID_/GetLicenseFromStore | -| [EnterpriseExt CSP](enterpriseext-csp.md) | Added the following new nodes:
    - DeviceCustomData (CustomID, CustomeString)
    - Brightness (Default, MaxAuto)
    - LedAlertNotification (State, Intensity, Period, DutyCycle, Cyclecount) | -| [EnterpriseExtFileSystem CSP](enterpriseextfilessystem-csp.md) | Added the OemProfile node. -| [PassportForWork CSP](passportforwork-csp.md) | Added the following new nodes:
    - TenantId/Policies/PINComplexity/History
    - TenantId/Policies/PINComplexity/Expiration
    - TenantId/Policies/Remote/UseRemotePassport (only for ./Device/Vendor/MSFT)
    - Biometrics/UseBiometrics (only for ./Device/Vendor/MSFT)
    - Biometrics/FacialFeaturesUseEnhancedAntiSpoofing (only for ./Device/Vendor/MSFT) | -| [EnterpriseAssignedAccess CSP](enterpriseassignedaccess-csp.md) | The following updates are done to the [EnterpriseAssignedAccess CSP](enterpriseassignedaccess-csp.md):
    - In AssignedAccessXML node, added new page settings and quick action settings.
    - In AssignedAccessXML node, added an example about how to pin applications in multiple app packages using the AUMID.
    - Updated the [EnterpriseAssignedAccess XSD](enterpriseassignedaccess-xsd.md) article. | -| [DevDetail CSP](devdetail-csp.md) | The following updates are done to [DevDetail CSP](devdetail-csp.md):
    - Added TotalStore and TotalRAM settings.
    - Added support for Replace command for the DeviceName setting. | -| Handling large objects | Added support for the client to handle uploading of large objects to the server. | ## Breaking changes and known issues ### Get command inside an atomic command is not supported -In Windows 10, a Get command inside an atomic command is not supported. This was allowed in Windows Phone 8 and Windows Phone 8.1. - -### Notification channel URI not preserved during upgrade from Windows 8.1 to Windows 10 - -During an upgrade from Windows 8.1 to Windows 10, the notification channel URI information is not preserved. In addition, the MDM client loses the PFN, AppID, and client secret. - -After upgrading to Windows 10, you should call MDM\_WNSConfiguration class to recreate the notification channel URI. +In Windows 10 and 11, a Get command inside an atomic command is not supported. ### Apps installed using WMI classes are not removed @@ -234,17 +43,17 @@ Applications installed using WMI classes are not removed when the MDM account is ### Passing CDATA in SyncML does not work -Passing CDATA in data in SyncML to ConfigManager and CSPs does not work in Windows 10. It worked in Windows Phone 8. +Passing CDATA in data in SyncML to ConfigManager and CSPs does not work in Windows 10 and 11. . ### SSL settings in IIS server for SCEP must be set to "Ignore" -The certificate setting under "SSL Settings" in the IIS server for SCEP must be set to "Ignore" in Windows 10. In Windows Phone 8.1, when you set the client certificate to "Accept," it works fine. +The certificate setting under "SSL Settings" in the IIS server for SCEP must be set to "Ignore" in Windows 10 and 11. ![ssl settings.](images/ssl-settings.png) -### MDM enrollment fails on the mobile device when traffic is going through proxy +### MDM enrollment fails on the Windows device when traffic is going through proxy -When the mobile device is configured to use a proxy that requires authentication, the enrollment will fail. To work around this issue, the user can use a proxy that does not require authentication or remove the proxy setting from the connected network. +When the Windows device is configured to use a proxy that requires authentication, the enrollment will fail. To work around this issue, the user can use a proxy that does not require authentication or remove the proxy setting from the connected network. ### Server-initiated unenrollment failure @@ -254,41 +63,13 @@ Remote server unenrollment is disabled for mobile devices enrolled via Azure Act ### Certificates causing issues with Wi-Fi and VPN -Currently in Windows 10, version 1511, when using the ClientCertificateInstall to install certificates to the device store and the user store and both certificates are sent to the device in the same MDM payload, the certificate intended for the device store will also get installed in the user store. This may cause issues with Wi-Fi or VPN when choosing the correct certificate to establish a connection. We are working to fix this issue. +In Windows 10 and 11, when using the ClientCertificateInstall to install certificates to the device store and the user store and both certificates are sent to the device in the same MDM payload, the certificate intended for the device store will also get installed in the user store. This may cause issues with Wi-Fi or VPN when choosing the correct certificate to establish a connection. We are working to fix this issue. -### Version information for mobile devices +### Version information for Windows 11 -The software version information from **DevDetail/SwV** does not match the version in **Settings** under **System/About**. +The software version information from **DevDetail/Ext/Microsoft/OSPlatform** does not match the version in **Settings** under **System/About**. -### Upgrading Windows Phone 8.1 devices with app allow-listing using ApplicationRestriction policy has issues - -- When you upgrade Windows Phone 8.1 devices to Windows 10 Mobile using ApplicationRestrictions with a list of allowed apps, some Windows inbox apps get blocked causing unexpected behavior. To work around this issue, you must include the [inbox apps](applocker-csp.md#inboxappsandcomponents) that you need to your list of allowed apps. - - Here's additional guidance for the upgrade process: - - - Use Windows 10 product IDs for the apps listed in [inbox apps](applocker-csp.md#inboxappsandcomponents). - - Use the new Microsoft publisher name (PublisherName="CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US") and Publisher="CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US" if you are using the publisher policy. Do not remove the Windows Phone 8.1 publisher rule if you are using it. - - In the SyncML, you must use lowercase product ID. - - Do not duplicate a product ID. Messaging and Skype Video use the same product ID. Duplicates cause an error. - - -- Silverlight xaps may not install even if publisher policy is specified using Windows Phone 8.1 publisher rule. For example, Silverlight app "Level" will not install even if you specify <Publisher PublisherName=”Microsoft Corporation” />. - - To workaround this issue, remove the Windows Phone 8.1 publisher rule and add the specific product ID for each Silverlight app you want to allow to the allowed app list. - -- Some apps (specifically those that are published in Microsoft Store as AppX Bundles) are blocked from installing even when they are included in the app list. - - No workaround is available at this time. An OS update to fix this issue is coming soon. - -### Apps dependent on Microsoft Frameworks may get blocked in phones prior to build 10586.218 - -Applies only to phone prior to build 10586.218: When ApplicationManagement/ApplicationRestrictions policy is deployed to Windows 10 Mobile, installation and update of apps dependent on Microsoft Frameworks may get blocked with error 0x80073CF9. To work around this issue, you must include the Microsoft Framework ID to your list of allowed apps. - -```xml - -``` - -### Multiple certificates might cause Wi-Fi connection instabilities in Windows 10 Mobile +### Multiple certificates might cause Wi-Fi connection instabilities in Windows 10 and 11 In your deployment, if you have multiple certificates provisioned on the device and the Wi-Fi profile provisioned does not have a strict filtering criteria, you may see connection failures when connecting to Wi-Fi. The solution is to ensure that the Wi-Fi profile provisioned has strict filtering criteria such that it matches only one certificate. @@ -459,17 +240,13 @@ Alternatively you can use the following procedure to create an EAP Configuration > You can also set all the other applicable EAP Properties through this UI as well. A guide to what these properties mean can be found in [Extensible Authentication Protocol (EAP) Settings for Network Access](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh945104(v=ws.11)). -### Remote PIN reset not supported in Azure Active Directory joined mobile devices - -In Windows 10 Mobile, remote PIN reset in Azure AD joined devices are not supported. Devices are wiped when you issue a remote PIN reset command using the RemoteLock CSP. - ### MDM client will immediately check-in with the MDM server after client renews WNS channel URI -Starting in Windows 10, after the MDM client automatically renews the WNS channel URI, the MDM client will immediately check-in with the MDM server. Henceforth, for every MDM client check-in, the MDM server should send a GET request for "ProviderID/Push/ChannelURI" to retrieve the latest channel URI and compare it with the existing channel URI; then update the channel URI if necessary. +After the MDM client automatically renews the WNS channel URI, the MDM client will immediately check-in with the MDM server. Henceforth, for every MDM client check-in, the MDM server should send a GET request for "ProviderID/Push/ChannelURI" to retrieve the latest channel URI and compare it with the existing channel URI; then update the channel URI if necessary. -### User provisioning failure in Azure Active Directory joined Windows 10 PC +### User provisioning failure in Azure Active Directory joined Windows 10 and 11 devices -In Azure AD joined Windows 10 PC, provisioning /.User resources fails when the user is not logged in as an Azure AD user. If you attempt to join Azure AD from **Settings** > **System** > **About** user interface, make sure to log off and log on with Azure AD credentials to get your organizational configuration from your MDM server. This behavior is by design. +In Azure AD joined Windows 10 and 11, provisioning /.User resources fails when the user is not logged in as an Azure AD user. If you attempt to join Azure AD from **Settings** > **System** > **About** user interface, make sure to log off and log on with Azure AD credentials to get your organizational configuration from your MDM server. This behavior is by design. ### Requirements to note for VPN certificates also used for Kerberos Authentication @@ -479,10 +256,11 @@ If you want to use the certificate used for VPN authentication also for Kerberos The DM agent for [push-button reset](/windows-hardware/manufacture/desktop/push-button-reset-overview) keeps the registry settings for OMA DM sessions, but deletes the task schedules. The client enrollment is retained, but it never syncs with the MDM service. + ## Frequently Asked Questions -### **Can there be more than one MDM server to enroll and manage devices in Windows 10?** +### **Can there be more than one MDM server to enroll and manage devices in Windows 10 or 11?** No. Only one MDM is allowed. ### **How do I set the maximum number of Azure Active Directory joined devices per user?** @@ -499,10 +277,68 @@ No. Only one MDM is allowed. Entry | Description --------------- | -------------------- -What is dmwappushsvc? | It is a Windows service that ships in Windows 10 operating system as a part of the windows management platform. It is used internally by the operating system as a queue for categorizing and processing all WAP messages, which include Windows management messages, MMS, NabSync, and Service Indication/Service Loading (SI/SL). The service also initiates and orchestrates management sync sessions with the MDM server. | +What is dmwappushsvc? | It is a Windows service that ships in Windows 10 and 11 operating system as a part of the windows management platform. It is used internally by the operating system as a queue for categorizing and processing all WAP messages, which include Windows management messages, MMS, NabSync, and Service Indication/Service Loading (SI/SL). The service also initiates and orchestrates management sync sessions with the MDM server. | What data is handled by dmwappushsvc? | It is a component handling the internal workings of the management platform and involved in processing messages that have been received by the device remotely for management. The messages in the queue are serviced by another component that is also part of the Windows management stack to process messages. The service also routes and authenticates WAP messages received by the device to internal OS components that process them further: MMS, NabSync, SI/SL. This service does not send telemetry.| How do I turn if off? | The service can be stopped from the "Services" console on the device (Start > Run > services.msc). However, since this is a component part of the OS and required for the proper functioning of the device, we strongly recommend not to do this. Disabling this will cause your management to fail.| + + +## What’s new in MDM for Windows 10, version 20H2 + +|New or updated article|Description| +|-----|-----| +| [Policy CSP](policy-configuration-service-provider.md) | Added the following new policies in Windows 10, version 20H2:
    - [Experience/DisableCloudOptimizedContent](policy-csp-experience.md#experience-disablecloudoptimizedcontent)
    - [LocalUsersAndGroups/Configure](policy-csp-localusersandgroups.md#localusersandgroups-configure)
    - [MixedReality/AADGroupMembershipCacheValidityInDays](policy-csp-mixedreality.md#mixedreality-aadgroupmembershipcachevalidityindays)
    - [MixedReality/BrightnessButtonDisabled](policy-csp-mixedreality.md#mixedreality-brightnessbuttondisabled)
    - [MixedReality/FallbackDiagnostics](policy-csp-mixedreality.md#mixedreality-fallbackdiagnostics)
    - [MixedReality/MicrophoneDisabled](policy-csp-mixedreality.md#mixedreality-microphonedisabled)
    - [MixedReality/VolumeButtonDisabled](policy-csp-mixedreality.md#mixedreality-volumebuttondisabled)
    - [Multitasking/BrowserAltTabBlowout](policy-csp-multitasking.md#multitasking-browseralttabblowout) | +| [SurfaceHub CSP](surfacehub-csp.md) | Added the following new node:
    - Properties/SleepMode | +| [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md) | Updated the description of the following node:
    - Settings/AllowWindowsDefenderApplicationGuard | + +## What’s new in MDM for Windows 10, version 2004 + +| New or updated article | Description | +|-----|-----| +| [Policy CSP](policy-configuration-service-provider.md) | Added the following new policies in Windows 10, version 2004:
    - [ApplicationManagement/BlockNonAdminUserInstall](policy-csp-applicationmanagement.md#applicationmanagement-blocknonadminuserinstall)
    - [Bluetooth/SetMinimumEncryptionKeySize](policy-csp-bluetooth.md#bluetooth-setminimumencryptionkeysize)
    - [DeliveryOptimization/DOCacheHostSource](policy-csp-deliveryoptimization.md#deliveryoptimization-docachehostsource)
    - [DeliveryOptimization/DOMaxBackgroundDownloadBandwidth](policy-csp-deliveryoptimization.md#deliveryoptimization-domaxbackgrounddownloadbandwidth)
    - [DeliveryOptimization/DOMaxForegroundDownloadBandwidth](policy-csp-deliveryoptimization.md#deliveryoptimization-domaxforegrounddownloadbandwidth)
    - [Education/AllowGraphingCalculator](policy-csp-education.md#education-allowgraphingcalculator)
    - [TextInput/ConfigureJapaneseIMEVersion](policy-csp-textinput.md#textinput-configurejapaneseimeversion)
    - [TextInput/ConfigureSimplifiedChineseIMEVersion](policy-csp-textinput.md#textinput-configuresimplifiedchineseimeversion)
    - [TextInput/ConfigureTraditionalChineseIMEVersion](policy-csp-textinput.md#textinput-configuretraditionalchineseimeversion)

    Updated the following policy in Windows 10, version 2004:
    - [DeliveryOptimization/DOCacheHost](policy-csp-deliveryoptimization.md#deliveryoptimization-docachehost)

    Deprecated the following policies in Windows 10, version 2004:
    - [DeliveryOptimization/DOMaxDownloadBandwidth](policy-csp-deliveryoptimization.md#deliveryoptimization-domaxdownloadbandwidth)
    - [DeliveryOptimization/DOMaxUploadBandwidth](policy-csp-deliveryoptimization.md#deliveryoptimization-domaxuploadbandwidth)
    - [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](policy-csp-deliveryoptimization.md#deliveryoptimization-dopercentagemaxdownloadbandwidth) | +| [DevDetail CSP](devdetail-csp.md) | Added the following new node:
    - Ext/Microsoft/DNSComputerName | +| [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | Added the following new node:
    - IsStub | +| [SUPL CSP](supl-csp.md) | Added the following new node:
    - FullVersion | + +## What’s new in MDM for Windows 10, version 1909 + +| New or updated article | Description | +|-----|-----| +| [BitLocker CSP](bitlocker-csp.md) | Added the following new nodes in Windows 10, version 1909:
    - ConfigureRecoveryPasswordRotation
    - RotateRecoveryPasswords
    - RotateRecoveryPasswordsStatus
    - RotateRecoveryPasswordsRequestID| + +## What’s new in MDM for Windows 10, version 1903 + +| New or updated article | Description | +|-----|-----| +|[Policy CSP](policy-configuration-service-provider.md) | Added the following new policies in Windows 10, version 1903:
    - [DeliveryOptimization/DODelayCacheServerFallbackBackground](policy-csp-deliveryoptimization.md#deliveryoptimization-dodelaycacheserverfallbackbackground)
    - [DeliveryOptimization/DODelayCacheServerFallbackForeground](policy-csp-deliveryoptimization.md#deliveryoptimization-dodelaycacheserverfallbackforeground)
    - [DeviceHealthMonitoring/AllowDeviceHealthMonitoring](policy-csp-devicehealthmonitoring.md#devicehealthmonitoring-allowdevicehealthmonitoring)
    - [DeviceHealthMonitoring/ConfigDeviceHealthMonitoringScope](policy-csp-devicehealthmonitoring.md#devicehealthmonitoring-configdevicehealthmonitoringscope)
    - [DeviceHealthMonitoring/ConfigDeviceHealthMonitoringUploadDestination](policy-csp-devicehealthmonitoring.md#devicehealthmonitoring-configdevicehealthmonitoringuploaddestination)
    - [DeviceInstallation/AllowInstallationOfMatchingDeviceInstanceIDs](policy-csp-deviceinstallation.md#deviceinstallationallowinstallationofmatchingdeviceinstanceids)
    - [DeviceInstallation/PreventInstallationOfMatchingDeviceInstanceIDs](policy-csp-deviceinstallation.md#deviceinstallationpreventinstallationofmatchingdeviceinstanceids)
    - [Experience/ShowLockOnUserTile](policy-csp-experience.md#experience-showlockonusertile)
    - [InternetExplorer/AllowEnhancedSuggestionsInAddressBar](policy-csp-internetexplorer.md#internetexplorer-allowenhancedsuggestionsinaddressbar)
    - [InternetExplorer/DisableActiveXVersionListAutoDownload](policy-csp-internetexplorer.md#internetexplorer-disableactivexversionlistautodownload)
    - [InternetExplorer/DisableCompatView](policy-csp-internetexplorer.md#internetexplorer-disablecompatview)
    - [InternetExplorer/DisableFeedsBackgroundSync](policy-csp-internetexplorer.md#internetexplorer-disablefeedsbackgroundsync)
    - [InternetExplorer/DisableGeolocation](policy-csp-internetexplorer.md#internetexplorer-disablegeolocation)
    - [InternetExplorer/DisableWebAddressAutoComplete](policy-csp-internetexplorer.md#internetexplorer-disablewebaddressautocomplete)
    - [InternetExplorer/NewTabDefaultPage](policy-csp-internetexplorer.md#internetexplorer-newtabdefaultpage)
    - [Power/EnergySaverBatteryThresholdOnBattery](policy-csp-power.md#power-energysaverbatterythresholdonbattery)
    - [Power/EnergySaverBatteryThresholdPluggedIn](policy-csp-power.md#power-energysaverbatterythresholdpluggedin)
    - [Power/SelectLidCloseActionOnBattery](policy-csp-power.md#power-selectlidcloseactiononbattery)
    - [Power/SelectLidCloseActionPluggedIn](policy-csp-power.md#power-selectlidcloseactionpluggedin)
    - [Power/SelectPowerButtonActionOnBattery](policy-csp-power.md#power-selectpowerbuttonactiononbattery)
    - [Power/SelectPowerButtonActionPluggedIn](policy-csp-power.md#power-selectpowerbuttonactionpluggedin)
    - [Power/SelectSleepButtonActionOnBattery](policy-csp-power.md#power-selectsleepbuttonactiononbattery)
    - [Power/SelectSleepButtonActionPluggedIn](policy-csp-power.md#power-selectsleepbuttonactionpluggedin)
    - [Power/TurnOffHybridSleepOnBattery](policy-csp-power.md#power-turnoffhybridsleeponbattery)
    - [Power/TurnOffHybridSleepPluggedIn](policy-csp-power.md#power-turnoffhybridsleeppluggedin)
    - [Power/UnattendedSleepTimeoutOnBattery](policy-csp-power.md#power-unattendedsleeptimeoutonbattery)
    - [Power/UnattendedSleepTimeoutPluggedIn](policy-csp-power.md#power-unattendedsleeptimeoutpluggedin)
    - [Privacy/LetAppsActivateWithVoice](policy-csp-privacy.md#privacy-letappsactivatewithvoice)
    - [Privacy/LetAppsActivateWithVoiceAboveLock](policy-csp-privacy.md#privacy-letappsactivatewithvoiceabovelock)
    - [Search/AllowFindMyFiles](policy-csp-search.md#search-allowfindmyfiles)
    - [ServiceControlManager/SvchostProcessMitigation](policy-csp-servicecontrolmanager.md#servicecontrolmanager-svchostprocessmitigation)
    - [System/AllowCommercialDataPipeline](policy-csp-system.md#system-allowcommercialdatapipeline)
    - [System/TurnOffFileHistory](policy-csp-system.md#system-turnofffilehistory)
    - [TimeLanguageSettings/ConfigureTimeZone](policy-csp-timelanguagesettings.md#timelanguagesettings-configuretimezone)
    - [Troubleshooting/AllowRecommendations](policy-csp-troubleshooting.md#troubleshooting-allowrecommendations)
    - [Update/AutomaticMaintenanceWakeUp](policy-csp-update.md#update-automaticmaintenancewakeup)
    - [Update/ConfigureDeadlineForFeatureUpdates](policy-csp-update.md#update-configuredeadlineforfeatureupdates)
    - [Update/ConfigureDeadlineForQualityUpdates](policy-csp-update.md#update-configuredeadlineforqualityupdates)
    - [Update/ConfigureDeadlineGracePeriod](policy-csp-update.md#update-configuredeadlinegraceperiod)
    - [WindowsLogon/AllowAutomaticRestartSignOn](policy-csp-windowslogon.md#windowslogon-allowautomaticrestartsignon)
    - [WindowsLogon/ConfigAutomaticRestartSignOn](policy-csp-windowslogon.md#windowslogon-configautomaticrestartsignon)
    - [WindowsLogon/EnableFirstLogonAnimation](policy-csp-windowslogon.md#windowslogon-enablefirstlogonanimation)| +| [Policy CSP - Audit](policy-csp-audit.md) | Added the new Audit policy CSP. | +| [ApplicationControl CSP](applicationcontrol-csp.md) | Added the new CSP. | +| [Defender CSP](defender-csp.md) | Added the following new nodes:
    - Health/TamperProtectionEnabled
    - Health/IsVirtualMachine
    - Configuration
    - Configuration/TamperProtection
    - Configuration/EnableFileHashComputation | +| [DiagnosticLog CSP](diagnosticlog-csp.md)
    [DiagnosticLog DDF](diagnosticlog-ddf.md) | Added version 1.4 of the CSP in Windows 10, version 1903.
    Added the new 1.4 version of the DDF.
    Added the following new nodes:
    - Policy
    - Policy/Channels
    - Policy/Channels/ChannelName
    - Policy/Channels/ChannelName/MaximumFileSize
    - Policy/Channels/ChannelName/SDDL
    - Policy/Channels/ChannelName/ActionWhenFull
    - Policy/Channels/ChannelName/Enabled
    - DiagnosticArchive
    - DiagnosticArchive/ArchiveDefinition
    - DiagnosticArchive/ArchiveResults | +| [EnrollmentStatusTracking CSP](enrollmentstatustracking-csp.md) | Added the new CSP. | +| [PassportForWork CSP](passportforwork-csp.md) | Added the following new nodes:
    - SecurityKey
    - SecurityKey/UseSecurityKeyForSignin | + + +## What’s new in MDM for Windows 10, version 1809 + +| New or updated article | Description | +|-----|-----| +|[Policy CSP](policy-configuration-service-provider.md) | Added the following new policy settings in Windows 10, version 1809:
    - ApplicationManagement/LaunchAppAfterLogOn
    - ApplicationManagement/ScheduleForceRestartForUpdateFailures
    - Authentication/EnableFastFirstSignIn (Preview mode only)
    - Authentication/EnableWebSignIn (Preview mode only)
    - Authentication/PreferredAadTenantDomainName
    - Browser/AllowFullScreenMode
    - Browser/AllowPrelaunch
    - Browser/AllowPrinting
    - Browser/AllowSavingHistory
    - Browser/AllowSideloadingOfExtensions
    - Browser/AllowTabPreloading
    - Browser/AllowWebContentOnNewTabPage
    - Browser/ConfigureFavoritesBar
    - Browser/ConfigureHomeButton
    - Browser/ConfigureKioskMode
    - Browser/ConfigureKioskResetAfterIdleTimeout
    - Browser/ConfigureOpenMicrosoftEdgeWith
    - Browser/ConfigureTelemetryForMicrosoft365Analytics
    - Browser/PreventCertErrorOverrides
    - Browser/SetHomeButtonURL
    - Browser/SetNewTabPageURL
    - Browser/UnlockHomeButton
    - Defender/CheckForSignaturesBeforeRunningScan
    - Defender/DisableCatchupFullScan
    - Defender/DisableCatchupQuickScan
    - Defender/EnableLowCPUPriority
    - Defender/SignatureUpdateFallbackOrder
    - Defender/SignatureUpdateFileSharesSources
    - DeviceGuard/ConfigureSystemGuardLaunch
    - DeviceInstallation/AllowInstallationOfMatchingDeviceIDs
    - DeviceInstallation/AllowInstallationOfMatchingDeviceSetupClasses
    - DeviceInstallation/PreventDeviceMetadataFromNetwork
    - DeviceInstallation/PreventInstallationOfDevicesNotDescribedByOtherPolicySettings
    - DmaGuard/DeviceEnumerationPolicy
    - Experience/AllowClipboardHistory
    - Experience/DoNotSyncBrowserSettings
    - Experience/PreventUsersFromTurningOnBrowserSyncing
    - Kerberos/UPNNameHints
    - Privacy/AllowCrossDeviceClipboard
    - Privacy/DisablePrivacyExperience
    - Privacy/UploadUserActivities
    - Security/RecoveryEnvironmentAuthentication
    - System/AllowDeviceNameInDiagnosticData
    - System/ConfigureMicrosoft365UploadEndpoint
    - System/DisableDeviceDelete
    - System/DisableDiagnosticDataViewer
    - Storage/RemovableDiskDenyWriteAccess
    - TaskManager/AllowEndTask
    - Update/DisableWUfBSafeguards
    - Update/EngagedRestartDeadlineForFeatureUpdates
    - Update/EngagedRestartSnoozeScheduleForFeatureUpdates
    - Update/EngagedRestartTransitionScheduleForFeatureUpdates
    - Update/SetDisablePauseUXAccess
    - Update/SetDisableUXWUAccess
    - WindowsDefenderSecurityCenter/DisableClearTpmButton
    - WindowsDefenderSecurityCenter/DisableTpmFirmwareUpdateWarning
    - WindowsDefenderSecurityCenter/HideWindowsSecurityNotificationAreaControl
    - WindowsLogon/DontDisplayNetworkSelectionUI | +| [BitLocker CSP](bitlocker-csp.md) | Added a new node AllowStandardUserEncryption in Windows 10, version 1809. Added support for Windows 10 Pro. | +| [Defender CSP](defender-csp.md) | Added a new node Health/ProductStatus in Windows 10, version 1809. | +| [DevDetail CSP](devdetail-csp.md) | Added a new node SMBIOSSerialNumber in Windows 10, version 1809. | +| [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | Added NonRemovable setting under AppManagement node in Windows 10, version 1809. | +| [Office CSP](office-csp.md) | Added FinalStatus setting in Windows 10, version 1809. | +| [PassportForWork CSP](passportforwork-csp.md) | Added new settings in Windows 10, version 1809. | +| [RemoteWipe CSP](remotewipe-csp.md) | Added new settings in Windows 10, version 1809. | +| [SUPL CSP](supl-csp.md) | Added 3 new certificate nodes in Windows 10, version 1809. | +| [TenantLockdown CSP](tenantlockdown-csp.md) | Added new CSP in Windows 10, version 1809. | +| [Wifi CSP](wifi-csp.md) | Added a new node WifiCost in Windows 10, version 1809. | +| [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md) | Added new settings in Windows 10, version 1809. | +| [WindowsLicensing CSP](windowslicensing-csp.md) | Added S mode settings and SyncML examples in Windows 10, version 1809. | +| [Win32CompatibilityAppraiser CSP](win32compatibilityappraiser-csp.md) | Added new configuration service provider in Windows 10, version 1809. | + + ## Change history for MDM documentation -To know what's changed in MDM documentation, see [Change history for MDM documentation](change-history-for-mdm-documentation.md). \ No newline at end of file +To know what's changed in MDM documentation, see [Change history for MDM documentation](change-history-for-mdm-documentation.md). From 803cff32ceae1e95e0277082975556f75ed95101 Mon Sep 17 00:00:00 2001 From: Lovina Saldanha Date: Wed, 20 Oct 2021 09:49:15 +0530 Subject: [PATCH 16/33] updated Fixed comments from Go --- .gitignore | 1 + windows/client-management/mdm/config-lock.md | 120 ++++++++----------- 2 files changed, 51 insertions(+), 70 deletions(-) diff --git a/.gitignore b/.gitignore index 9841e0daea..d660b56f42 100644 --- a/.gitignore +++ b/.gitignore @@ -19,3 +19,4 @@ packages.config wdav-pm-sln.csproj wdav-pm-sln.csproj.user wdav-pm-sln.sln +.vscode/settings.json diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md index e34ef24e89..d8106677f2 100644 --- a/windows/client-management/mdm/config-lock.md +++ b/windows/client-management/mdm/config-lock.md @@ -31,9 +31,56 @@ To summarize, Config Lock: ## Configuration Flow -After a Secured-Core PC reaches the desktop, Config Lock will prevent configuration drift by detecting if the device is a Secured-Core PC or not. When the device isn't a Secured-Core PC, the lock won't apply. If the device is a Secured-Core PC, config lock will lock the policies listed below. +After a Secured-Core PC reaches the desktop, Config Lock will prevent configuration drift by detecting if the device is a Secured-Core PC or not. When the device isn't a Secured-Core PC, the lock won't apply. If the device is a Secured-Core PC, config lock will lock the policies listed under [List of locked policies](#list-of-locked-policies). -**List of locked policies** +## System Requirements + +Config Lock will be available for all Windows Professional and Enterprise Editions running on [Secured-Core PCs](/windows-hardware/design/device-experiences/oem-highly-secure). + +## Enabling Config Lock using Microsoft Intune + +Config Lock isn't enabled by default (or turned on by the OS during boot). Rather, an IT Admin must intentionally turn it on. + +The steps to turn on Config Lock using Microsoft Endpoint Manager (Microsoft Intune) are as follows: + +1. Ensure that the device to turn on Config Lock is enrolled in Microsoft Intune. +1. From the Microsoft Intune portal main page, select **Devices** > **Configuration Profiles** > **Create a profile**. +1. Select the following and press **Create**: + - **Platform**: Windows 10 and later + - **Profile type**: Templates + - **Template name**: Custom + + :::image type="content" source="images/configlock-mem-createprofile.png" alt-text="create profile"::: + +1. Name your profile. +1. When you reach the Configuration Settings step, select “Add” and add the following information: + - **OMA-URI**: ./Vendor/MSFT/DMClient/Provider/MS%20DM%20Server/ConfigLock/Lock + - **Data type**: Integer + - **Value**: 1
    + To turn off Config Lock. Change value to 0. + + :::image type="content" source="images/configlock-mem-editrow.png" alt-text="edit row"::: + +1. Select the devices to turn on Config Lock. If you're using a test tenant, you can select “+ Add all devices”. +1. You'll not need to set any applicability rules for test purposes. +1. Review the Configuration and select “Create” if everything is correct. +1. After the device syncs with the Microsoft Intune server, you can confirm if the Config Lock was successfully enabled. + + :::image type="content" source="images/configlock-mem-dev.png" alt-text="status"::: + + :::image type="content" source="images/configlock-mem-devstatus.png" alt-text="device status"::: + +## Disabling +Config Lock is designed to ensure that a Secured-Core PC isn't unintentionally misconfigured. IT Admins retain the ability to change (enabled/disable) SCPC features via Group Policies and/or mobile device management (MDM) tools, such as Microsoft Intune. + +:::image type="content" source="images/configlock-mem-firmwareprotect.png" alt-text="firmware protect"::: + +## FAQ + +**Can an IT Admin disable Config Lock ?**
    + Yes. IT Admin can use MDM to turn off Config Lock.
    + +### List of locked policies |Policies | @@ -70,7 +117,7 @@ After a Secured-Core PC reaches the desktop, Config Lock will prevent configurat |[WindowsDefenderSecurityCenter/DisableHealthUI](policy-csp-windowsdefendersecuritycenter.md) | |[WindowsDefenderSecurityCenter/DisableNetworkUI](policy-csp-windowsdefendersecuritycenter.md) | |[WindowsDefenderSecurityCenter/DisableNotifications](policy-csp-windowsdefendersecuritycenter.md) | -|[WindowsDefenderSecurityCenter/DisableTpmFirmwareUpdateWarning](policy-csp-windowsdefendersecuritycenter.md) | +|[WindowsDefenderSecurityCenter/DisableTpmFirmwareUpdateWarning](policy-csp-windowsdefendersecuritycenter.md)| |[WindowsDefenderSecurityCenter/DisableVirusUI](policy-csp-windowsdefendersecuritycenter.md) | |[WindowsDefenderSecurityCenter/DisallowExploitProtectionOverride](policy-csp-windowsdefendersecuritycenter.md) | |[WindowsDefenderSecurityCenter/Email](policy-csp-windowsdefendersecuritycenter.md) | @@ -86,71 +133,4 @@ After a Secured-Core PC reaches the desktop, Config Lock will prevent configurat |[SmartScreen/EnableSmartScreenInShell](policy-csp-smartscreen.md) | |[SmartScreen/PreventOverrideForFilesInShell](policy-csp-smartscreen.md) | -:::image type="content" source="images/flow_configlock.png" alt-text="config lock flow."::: -IT Admin scenario: - -1. IT Admins use MDM to enable Config Lock -1. IT Admins use MDM service to set policies -1. Policies are targeted to user/device -1. Policies come down to device and get set -1. Configurations are locked -1. A local admin user attempts to override the policy -1. System quickly remediates policy to the desired SCPC state - -Helpdesk scenario: - -1. Helpdesk support engineer investigates the device -1. Helpdesk support engineer contacts the IT Admin to unlock the device -1. IT Admin unlocks the device to make configuration changes -1. Device returns to locked state after a defined time (default 30 minutes) - -## System Requirements - -Config Lock will be available for all Windows Professional and Enterprise Editions. - -## Enabling Config Lock using Microsoft Intune - -Config Lock isn't enabled by default (or turned on by the OS during boot). Rather, an IT Admin must intentionally turn it on. - -The steps to turn on Config Lock using Microsoft Endpoint Manager (MEM) are as follows: - -1. Ensure that the device to turn on Config Lock is enrolled in MEM. -1. From the MEM portal main page, select **Devices** > **Configuration Profiles** > **Create a profile**. -1. Select the following and press **Create**: - - **Platform**: Windows 10 and later - - **Profile type**: Templates - - **Template name**: Custom - - :::image type="content" source="images/configlock-mem-createprofile.png" alt-text="create profile"::: - -1. Name your profile. -1. When you reach the Configuration Settings step, select “Add” and add the following information: - - **OMA-URI**: ./Vendor/MSFT/DMClient/Provider/MS%20DM%20Server/ConfigLock/Lock - - **Data type**: Integer - - **Value**: 1
    - To turn off Config Lock. Change value to 0. - - :::image type="content" source="images/configlock-mem-editrow.png" alt-text="edit row"::: - -1. Select the devices to turn on Config Lock. If you're using a test tenant, you can select “+ Add all devices”. -1. You'll not need to set any applicability rules for test purposes. -1. Review the Configuration and select “Create” if everything is correct. -1. After the device syncs with the MEM server, you can confirm if the Config Lock was successfully enabled. - - :::image type="content" source="images/configlock-mem-dev.png" alt-text="status"::: - - :::image type="content" source="images/configlock-mem-devstatus.png" alt-text="device status"::: - -## Disabling -Config Lock is designed to ensure that a Secured-Core PC isn't unintentionally misconfigured. IT Admins retain the ability to change (enabled/disable) SCPC features via Group Policies and/or mobile device management (MDM) tools, such as MEM. - -:::image type="content" source="images/configlock-mem-firmwareprotect.png" alt-text="firmware protect"::: - -## FAQ - -**Can an IT Admin disable Config Lock ?**
    - Yes. IT Admin can use MDM to turn off Config Lock.
    - -**Could an end-user run the BuiltAsSecuredCorePC PowerShell command to disable Config Lock?**
    - The PowerShell script is accessible, but the BuiltAsSecuredCorePC becomes read-only after boot, so the command will fail when run from the OS. From 8249f113027ba213be95c233a3018bb2cf0a5741 Mon Sep 17 00:00:00 2001 From: Lovina Saldanha Date: Wed, 20 Oct 2021 10:27:34 +0530 Subject: [PATCH 17/33] Update config-lock.md update --- windows/client-management/mdm/config-lock.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md index d8106677f2..b843607c6b 100644 --- a/windows/client-management/mdm/config-lock.md +++ b/windows/client-management/mdm/config-lock.md @@ -71,6 +71,7 @@ The steps to turn on Config Lock using Microsoft Endpoint Manager (Microsoft Int :::image type="content" source="images/configlock-mem-devstatus.png" alt-text="device status"::: ## Disabling + Config Lock is designed to ensure that a Secured-Core PC isn't unintentionally misconfigured. IT Admins retain the ability to change (enabled/disable) SCPC features via Group Policies and/or mobile device management (MDM) tools, such as Microsoft Intune. :::image type="content" source="images/configlock-mem-firmwareprotect.png" alt-text="firmware protect"::: From 1fda460b2bce9203b34a5785b25b9870807dc006 Mon Sep 17 00:00:00 2001 From: Alekhya Jupudi Date: Wed, 20 Oct 2021 11:21:13 +0530 Subject: [PATCH 18/33] Updates dm-client CSP as per comments --- windows/client-management/mdm/dmclient-csp.md | 16 +++++++++++----- 1 file changed, 11 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/dmclient-csp.md b/windows/client-management/mdm/dmclient-csp.md index e2b23b7bf3..61030b9687 100644 --- a/windows/client-management/mdm/dmclient-csp.md +++ b/windows/client-management/mdm/dmclient-csp.md @@ -604,24 +604,30 @@ Supported operations are Add, Get, and Replace. **Provider/*ProviderID*/ConfigLock** -Configuration Drift is a major concern for commercial customers. Some customers view it as a security risk. This node mitigates the customer concern by bringing the capability to monitor and quickly remediate the policy configuration when a device is MDM managed. +Optional. This node enables [Config Lock](/windows/client-management/mdm/config-lock.md) feature. If enabled, policies defined in the Config Lock document will be monitored and quickly remediated when a configuration drift is detected. Default = Locked > [!Note] ->If the device is not Secure Core, then this feature will not work. +>If the device is not a Secured-core PC, then this feature will not work. To know more, see [Secured-core PC](https://docs.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-highly-secure). **Provider/*ProviderID*/ConfigLock/Lock** -Supported operations are Add, Delete, Get. Supported values are 0-unlock, 1-lock. +The supported values for this node are 0-unlock, 1-lock. + +Supported operations are Add, Delete, Get. **Provider/*ProviderID*/ConfigLock/UnlockDuration** -Supported operations are Add, Delete, Get. Supported values are 1 to 480 (in min). +The supported values for this node are 1 to 480 (in min). + +Supported operations are Add, Delete, Get. **Provider/*ProviderID*/ConfigLock/SecureCore** -Supported operation is Get only. Supported values are false or true. +The supported values for this node are false or true. + +Supported operation is Get only. **Provider/*ProviderID*/Push** Optional. Not configurable during WAP Provisioning XML. If removed, DM sessions triggered by Push will no longer be supported. From bb207e5bf2eb2b689318e88e8f02519d0b8042c8 Mon Sep 17 00:00:00 2001 From: Alekhya Jupudi Date: Wed, 20 Oct 2021 11:27:34 +0530 Subject: [PATCH 19/33] Fixed suggestion! --- windows/client-management/mdm/dmclient-csp.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/dmclient-csp.md b/windows/client-management/mdm/dmclient-csp.md index 61030b9687..9480172d90 100644 --- a/windows/client-management/mdm/dmclient-csp.md +++ b/windows/client-management/mdm/dmclient-csp.md @@ -604,12 +604,12 @@ Supported operations are Add, Get, and Replace. **Provider/*ProviderID*/ConfigLock** -Optional. This node enables [Config Lock](/windows/client-management/mdm/config-lock.md) feature. If enabled, policies defined in the Config Lock document will be monitored and quickly remediated when a configuration drift is detected. +Optional. This node enables [Config Lock](config-lock.md) feature. If enabled, policies defined in the Config Lock document will be monitored and quickly remediated when a configuration drift is detected. Default = Locked > [!Note] ->If the device is not a Secured-core PC, then this feature will not work. To know more, see [Secured-core PC](https://docs.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-highly-secure). +>If the device is not a Secured-core PC, then this feature will not work. To know more, see [Secured-core PC](/windows-hardware/design/device-experiences/oem-highly-secure). **Provider/*ProviderID*/ConfigLock/Lock** From bda1938763d39a64784daa8354ca9776ff8299cd Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 21 Oct 2021 08:29:23 -0700 Subject: [PATCH 20/33] Update .gitignore --- .gitignore | 1 - 1 file changed, 1 deletion(-) diff --git a/.gitignore b/.gitignore index d660b56f42..9841e0daea 100644 --- a/.gitignore +++ b/.gitignore @@ -19,4 +19,3 @@ packages.config wdav-pm-sln.csproj wdav-pm-sln.csproj.user wdav-pm-sln.sln -.vscode/settings.json From 3efc9e627eed8fe514ffc25f7fd7ef82c0788756 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 21 Oct 2021 09:13:37 -0700 Subject: [PATCH 21/33] Update config-lock.md --- windows/client-management/mdm/config-lock.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md index b843607c6b..70ff584648 100644 --- a/windows/client-management/mdm/config-lock.md +++ b/windows/client-management/mdm/config-lock.md @@ -83,8 +83,6 @@ Config Lock is designed to ensure that a Secured-Core PC isn't unintentionally m ### List of locked policies - -|Policies | |---------| |**CSPs** | |[BitLocker ](bitlocker-csp.md) | From 9867140313d01db4f000c538baf4707e116aefc0 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 21 Oct 2021 09:19:46 -0700 Subject: [PATCH 22/33] Update config-lock.md --- windows/client-management/mdm/config-lock.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md index 70ff584648..4c9db2792b 100644 --- a/windows/client-management/mdm/config-lock.md +++ b/windows/client-management/mdm/config-lock.md @@ -83,7 +83,6 @@ Config Lock is designed to ensure that a Secured-Core PC isn't unintentionally m ### List of locked policies -|---------| |**CSPs** | |[BitLocker ](bitlocker-csp.md) | |[PassportForWork](passportforwork-csp.md) | From 9e5fd91fb1604dc7faa16a657c278b218512eff6 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 21 Oct 2021 09:32:10 -0700 Subject: [PATCH 23/33] fixing tables --- windows/client-management/mdm/config-lock.md | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/windows/client-management/mdm/config-lock.md b/windows/client-management/mdm/config-lock.md index 4c9db2792b..4b499e9ddc 100644 --- a/windows/client-management/mdm/config-lock.md +++ b/windows/client-management/mdm/config-lock.md @@ -78,18 +78,21 @@ Config Lock is designed to ensure that a Secured-Core PC isn't unintentionally m ## FAQ -**Can an IT Admin disable Config Lock ?**
    - Yes. IT Admin can use MDM to turn off Config Lock.
    +**Can an IT admins disable Config Lock ?**
    + Yes. IT admins can use MDM to turn off Config Lock.
    ### List of locked policies |**CSPs** | +|-----| |[BitLocker ](bitlocker-csp.md) | |[PassportForWork](passportforwork-csp.md) | |[WindowsDefenderApplicationGuard](windowsdefenderapplicationguard-csp.md) | -|[ApplicationControl](applicationcontrol-csp.md) | -| | +|[ApplicationControl](applicationcontrol-csp.md) + + |**MDM policies** | +|-----| |[DataProtection/AllowDirectMemoryAccess](policy-csp-dataprotection.md) | |[DataProtection/LegacySelectiveWipeID](policy-csp-dataprotection.md) | |[DeviceGuard/ConfigureSystemGuardLaunch](policy-csp-deviceguard.md) | @@ -130,5 +133,3 @@ Config Lock is designed to ensure that a Secured-Core PC isn't unintentionally m |[SmartScreen/EnableAppInstallControl](policy-csp-smartscreen.md)| |[SmartScreen/EnableSmartScreenInShell](policy-csp-smartscreen.md) | |[SmartScreen/PreventOverrideForFilesInShell](policy-csp-smartscreen.md) | - - From 89f1bd802929bdc3be7856f10a5d7a5bde5f0783 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 21 Oct 2021 09:36:56 -0700 Subject: [PATCH 24/33] Update new-in-windows-mdm-enrollment-management.md --- .../mdm/new-in-windows-mdm-enrollment-management.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 66ab4b5579..030f2a420d 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1,6 +1,6 @@ --- title: What's new in MDM enrollment and management -description: Discover what's new and breaking changes in Windows 10 and 11 mobile device management (MDM) enrollment and management experience across all Windows 10 devices. +description: Discover what's new and breaking changes in Windows 10 and Windows 11 mobile device management (MDM) enrollment and management experience across all Windows 10 devices. MS-HAID: - 'p\_phdevicemgmt.mdm\_enrollment\_and\_management\_overview' - 'p\_phDeviceMgmt.new\_in\_windows\_mdm\_enrollment\_management' @@ -69,7 +69,7 @@ In Windows 10 and 11, when using the ClientCertificateInstall to install certif The software version information from **DevDetail/Ext/Microsoft/OSPlatform** does not match the version in **Settings** under **System/About**. -### Multiple certificates might cause Wi-Fi connection instabilities in Windows 10 and 11 +### Multiple certificates might cause Wi-Fi connection instabilities in Windows 10 and Windows 11 In your deployment, if you have multiple certificates provisioned on the device and the Wi-Fi profile provisioned does not have a strict filtering criteria, you may see connection failures when connecting to Wi-Fi. The solution is to ensure that the Wi-Fi profile provisioned has strict filtering criteria such that it matches only one certificate. @@ -244,7 +244,7 @@ Alternatively you can use the following procedure to create an EAP Configuration After the MDM client automatically renews the WNS channel URI, the MDM client will immediately check-in with the MDM server. Henceforth, for every MDM client check-in, the MDM server should send a GET request for "ProviderID/Push/ChannelURI" to retrieve the latest channel URI and compare it with the existing channel URI; then update the channel URI if necessary. -### User provisioning failure in Azure Active Directory joined Windows 10 and 11 devices +### User provisioning failure in Azure Active Directory joined Windows 10 and Windows 11 devices In Azure AD joined Windows 10 and 11, provisioning /.User resources fails when the user is not logged in as an Azure AD user. If you attempt to join Azure AD from **Settings** > **System** > **About** user interface, make sure to log off and log on with Azure AD credentials to get your organizational configuration from your MDM server. This behavior is by design. @@ -277,7 +277,7 @@ No. Only one MDM is allowed. Entry | Description --------------- | -------------------- -What is dmwappushsvc? | It is a Windows service that ships in Windows 10 and 11 operating system as a part of the windows management platform. It is used internally by the operating system as a queue for categorizing and processing all WAP messages, which include Windows management messages, MMS, NabSync, and Service Indication/Service Loading (SI/SL). The service also initiates and orchestrates management sync sessions with the MDM server. | +What is dmwappushsvc? | It is a Windows service that ships in Windows 10 and Windows 11 operating system as a part of the windows management platform. It is used internally by the operating system as a queue for categorizing and processing all WAP messages, which include Windows management messages, MMS, NabSync, and Service Indication/Service Loading (SI/SL). The service also initiates and orchestrates management sync sessions with the MDM server. | What data is handled by dmwappushsvc? | It is a component handling the internal workings of the management platform and involved in processing messages that have been received by the device remotely for management. The messages in the queue are serviced by another component that is also part of the Windows management stack to process messages. The service also routes and authenticates WAP messages received by the device to internal OS components that process them further: MMS, NabSync, SI/SL. This service does not send telemetry.| How do I turn if off? | The service can be stopped from the "Services" console on the device (Start > Run > services.msc). However, since this is a component part of the OS and required for the proper functioning of the device, we strongly recommend not to do this. Disabling this will cause your management to fail.| From 273fe23eb56d0b86f8be7d2ad3b94e442af9d5e3 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 21 Oct 2021 09:43:07 -0700 Subject: [PATCH 25/33] Update new-in-windows-mdm-enrollment-management.md --- .../mdm/new-in-windows-mdm-enrollment-management.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 030f2a420d..6975c155a2 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -18,9 +18,9 @@ ms.date: 10/20/2020 # What's new in mobile device enrollment and management -This article provides information about what's new in Windows 10 and 11 mobile device management (MDM) enrollment and management experience across all Windows 10 and 11 devices. This article also provides details about the breaking changes and known issues and frequently asked questions. +This article provides information about what's new in Windows 10 and Windows 11 mobile device management (MDM) enrollment and management experience across all Windows 10 and Windows 11 devices. This article also provides details about the breaking changes and known issues and frequently asked questions. -For details about Microsoft mobile device management protocols for Windows 10 and 11 see [\[MS-MDM\]: Mobile Device Management Protocol](/openspecs/windows_protocols/ms-mdm/33769a92-ac31-47ef-ae7b-dc8501f7104f) and [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2]( https://go.microsoft.com/fwlink/p/?LinkId=619347). +For details about Microsoft mobile device management protocols for Windows 10 and Windows 11 see [\[MS-MDM\]: Mobile Device Management Protocol](/openspecs/windows_protocols/ms-mdm/33769a92-ac31-47ef-ae7b-dc8501f7104f) and [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2]( https://go.microsoft.com/fwlink/p/?LinkId=619347). ## What’s new in MDM for Windows 11, version 21H2 @@ -35,7 +35,7 @@ For details about Microsoft mobile device management protocols for Windows 10 a ### Get command inside an atomic command is not supported -In Windows 10 and 11, a Get command inside an atomic command is not supported. +In Windows 10 and Windows 11, a Get command inside an atomic command is not supported. ### Apps installed using WMI classes are not removed @@ -43,11 +43,11 @@ Applications installed using WMI classes are not removed when the MDM account is ### Passing CDATA in SyncML does not work -Passing CDATA in data in SyncML to ConfigManager and CSPs does not work in Windows 10 and 11. . +Passing CDATA in data in SyncML to ConfigManager and CSPs does not work in Windows 10 and Windows 11 ### SSL settings in IIS server for SCEP must be set to "Ignore" -The certificate setting under "SSL Settings" in the IIS server for SCEP must be set to "Ignore" in Windows 10 and 11. +The certificate setting under "SSL Settings" in the IIS server for SCEP must be set to "Ignore" in Windows 10 and Windows 11. ![ssl settings.](images/ssl-settings.png) @@ -63,7 +63,7 @@ Remote server unenrollment is disabled for mobile devices enrolled via Azure Act ### Certificates causing issues with Wi-Fi and VPN -In Windows 10 and 11, when using the ClientCertificateInstall to install certificates to the device store and the user store and both certificates are sent to the device in the same MDM payload, the certificate intended for the device store will also get installed in the user store. This may cause issues with Wi-Fi or VPN when choosing the correct certificate to establish a connection. We are working to fix this issue. +In Windows 10 and Windows 11, when using the ClientCertificateInstall to install certificates to the device store and the user store and both certificates are sent to the device in the same MDM payload, the certificate intended for the device store will also get installed in the user store. This may cause issues with Wi-Fi or VPN when choosing the correct certificate to establish a connection. We are working to fix this issue. ### Version information for Windows 11 From 8934913a6dd9f049b873ef571b17166cba6a5d62 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 21 Oct 2021 09:44:57 -0700 Subject: [PATCH 26/33] Update new-in-windows-mdm-enrollment-management.md --- .../mdm/new-in-windows-mdm-enrollment-management.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 6975c155a2..427e0ffe84 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -246,7 +246,7 @@ After the MDM client automatically renews the WNS channel URI, the MDM client wi ### User provisioning failure in Azure Active Directory joined Windows 10 and Windows 11 devices -In Azure AD joined Windows 10 and 11, provisioning /.User resources fails when the user is not logged in as an Azure AD user. If you attempt to join Azure AD from **Settings** > **System** > **About** user interface, make sure to log off and log on with Azure AD credentials to get your organizational configuration from your MDM server. This behavior is by design. +In Azure AD joined Windows 10 and Windows 11, provisioning /.User resources fails when the user is not logged in as an Azure AD user. If you attempt to join Azure AD from **Settings** > **System** > **About** user interface, make sure to log off and log on with Azure AD credentials to get your organizational configuration from your MDM server. This behavior is by design. ### Requirements to note for VPN certificates also used for Kerberos Authentication From 3c13d9bac57e67676ec41b520af049c8777d7a97 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 21 Oct 2021 11:51:39 -0700 Subject: [PATCH 27/33] PR issues --- .../{flow_configlock.png => flow-configlock.png} | Bin windows/client-management/mdm/toc.yml | 2 ++ 2 files changed, 2 insertions(+) rename windows/client-management/mdm/images/{flow_configlock.png => flow-configlock.png} (100%) diff --git a/windows/client-management/mdm/images/flow_configlock.png b/windows/client-management/mdm/images/flow-configlock.png similarity index 100% rename from windows/client-management/mdm/images/flow_configlock.png rename to windows/client-management/mdm/images/flow-configlock.png diff --git a/windows/client-management/mdm/toc.yml b/windows/client-management/mdm/toc.yml index 9472789042..f82377ff80 100644 --- a/windows/client-management/mdm/toc.yml +++ b/windows/client-management/mdm/toc.yml @@ -48,6 +48,8 @@ items: href: device-update-management.md - name: Bulk enrollment href: bulk-enrollment-using-windows-provisioning-tool.md + - name: Secured-Core PC Configuration Lock + href: config-lock.md - name: Management tool for the Microsoft Store for Business href: management-tool-for-windows-store-for-business.md items: From f725bb32df26cb8cf8dc2ae009d64cc788c4979b Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 21 Oct 2021 12:29:59 -0700 Subject: [PATCH 28/33] removing image --- .../images/config-lock-mdsl.png | Bin 63277 -> 0 bytes windows/client-management/mdm/config-lock.md | 2 -- 2 files changed, 2 deletions(-) delete mode 100644 windows/client-management/images/config-lock-mdsl.png diff --git a/windows/client-management/images/config-lock-mdsl.png b/windows/client-management/images/config-lock-mdsl.png deleted file mode 100644 index d61d54aec5e935051337f0ff159e0de896212367..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 63277 zcmeEuRaBJy_b;8&NaKJ=DBU12G=hYPfPj+H4N?*V(%s!4q0%kgAR#H;ol-;1Ff-@z zeSg3Ixjbu~i*t1@SUfX4^^N_Bz4s#Gm4-4A0UZGv8XA$x3x(HcXc*tn(9k3BFo18y zL_@`ZU+8YHmF3VXe=!^YAF!-s)n(DpYT^j*O|gN`_|7l%-O$jeSpWW@tGs@4hK6?C zqoN@D#>?m!;rZsxLL-W(bL(c$Cr@JFa&_%=)ouJTcX{ulomGQoTWOHEl|$=^$X+(9 zvY@46S2o2iTH$AXer7YAHkyQM|a1WOMc(J6ZAPIJWF4zQI2VtGqS7vF`H@U zzgPY&5*4Rj@QQU>t~=l2Q_aTyE3jpxnXO2}D9}H^NRk;Ew%~4|m&pSX@v@ z#HB|Ut7S?LJt+vZ*5ZDYCF+!UCDWmBMy$%;)sZd1p8!I{Lx!avSQa ziG|~Gb3$&e|G`x8T;etKVEXvj{`v0iZl+FE(EYtH)M~fpbNWQM37KQ%=1~q0^V4J~w}e7@rIA^G~)xrn^Wx?=MF5>nt;F9%07*2`6KD z?)hhVgLSdVX{|^(Zhd_{gpm3X*#G|ImaE$HbXD39##iW#@~E+!s{|f1SNR?eIW9A5 z|MXqAB9+_FQu_MMdI<0uj5IV}d%qa#zEPg-PqKubZT}9Bi9sx_Aw5nOg)fm-@(ewp zMD%j<@>Zkirn6Lm-j}OY&(Oeg}NOC$LoIA?+KN zSwYCux2jGg>=c56D}(%kN0=G}4Aa=e3{Xc9L{(WC$0gDsFkR~LA?@YFnl-@{Q4tDmqU@%VC+U`aBZrwDv;4+<{pS zstA)5Yec|r*sD20EtwwP#yKyvd7^WDE}N||)Yec@=^pO_*~d%z1-)(c;I?XX-5LJ* z^Cxh_zHnJt*=&pB`=JCDU|3I(x5stkc$7w*;-T}Ou8;3leNHzhN;Gm>fOVAexwcZN zL|cc`S_eJ_8&mwBySqC}30(V?mWKqlTOd?=e7uS7Le7~n@`5@z{YDYfxNq|QL}zKGe}+iE!IH0=%TM4ULiL~2M3 zZY?==BF3EjFI!G&lNoZ=P-0b2wM)`(c)K&>8Jw*pKJK4|f$vR$py7+TEB_duks%I2 z-sfGXu8((Ti@PDArC^8U=E*is8JpXEQ9{X?UpW%Y;6Z!xk<*pd8+xd0JV<2;2&Pe= z@!qUr$maX9o#h{H$@~vSi_*7q?@w1e*SH4`nhGL(f9Nn^B zUd=~7kGO`WOEt&nJ-d2vNghc$ugmC-qu~l-Pd&U`CH9C>Nyx0D4AysXaoNT6DIeV= z75zJpwP9pjFsp;JRSA#dctb*=E`A_#PB#0aUI$6^6VnE(e^Dp$s;c?YY5(r@}#=HllVf>j>B%W#w9%HuoBr{R7(M-s`R zPODtp-I^tkV}gy>9vH;i;}GO!z0LHf58Q{3%S%@`)w}A}+sgqqs6#|26pq*R$*_c` zdhleip;x98{-+h2kSe{wiOxtJ70|Um2h2!M2;ms~;xiCrTbXNKBD#&?;o(fzenC!1 zJr0<0jTv@ER}8)As81FVYNEy6F6sdT`o@OnbN54NKeaK}`<9t<1b-+AXf$MI)U_wUeTUCT? zrm*mL+c)<%8rJRy7fUqr{_O3AQTXmqJrZ}_PSTWKXt2|pE>Vvvgh)R9!vvt+bbkiF zT@(&JR^tnw5zs?TRB*hFjZJoC;=KhEyEquURw2r)(9ig#v^4F^f#j7O3^!ej@aUTU zA(wy(4l~%L#XMTmPo>RBWpQ0Me4qAnbxWD2e#VH3gep?JKUd0U=p+)gn#x&?n@t$I zJ5~I$>P@cH*wB#7C4jP>U!xi5O;{r74EERP2pwK-4n?Z`^2b1cz0S~l2Iz98O7hA_ z+kI}B#FyI*3ArMXli7k%bgcK8^icy--H&(M8QpeA1Mipp6~^>g;LGhko&YHOTpe1> zK1VZ5IbF!OQS36HV8F)lJ)HTP=*#@;p$0T=9zg%=qd85-_kq9GASl1{gvXT!?Ki8O zcXO%d#iwnTu~!8WjRZszyMs=oV%cEid7O%h%5FR6DjlLOG&o>4hVhF^pAM^#xZ*jm zr`S)~cl-58Y0RQ_gC0+mYJ!N-20L^s3@V{Zep(cxz3v>)Hq8~C=Ym~-i&s7=o=2DkV6v*R#EHh|0 zyx1A}Dl3XF=pC#pMz?L^J@nMH#K;w9#VT%N*yJdDYHZdUN`wWk6)2ZXaI&{Am+Yws z4h^M(Tx3+WO{#YF84cl9#{P}8mj+cvQg(PHPxHPQFbU8+|7d-6_}fN4TCRI-ZH+&W zli<}1{InD7v?_Vof%UfilkjzyOaQmtY&k9c2WdDz9&t}^@8rAaz=7a^C~DqaGENF| z^2b^GRL9{(z3*E+Dts;Q*?Q;rpn0f!tGjOmqtv9NGJ#B6^b+&0bR#f$qU%#;i0GGo zxRo*wG2&6_x0`j`zzm?{wY?tu0f}na`gIk$o9RhOK?42Rs<%~uUWqlLUu8|EUb1vc z_!*tO8sbq5d5~4aY&#K!eX!VY1c;l_K}EDuSuwA(by)x<&0LRVP z8Sy+})BRj~-?(FBw$Z`xTIp~FqxSB0D~{ExT&pOQ0zuI<)o##Wdq%-da1+_k?E$DE z&k@>q(l*YSmqQQo65eh85R2zCi=yJr-UqRDdEgQ=G@B0+(`_x-$Oy=?1@;QlFW4us zYYtF}&wI)2W2tX$ZS718Pf?|l!-F{_`gPzpr&gi`^A9<7*F!AABPiI3 zA4$%CA_+JNB3yWy8e$(U)uT;;E@VGHAoH2w*FkyT${fEhm3w73IDd`#-xsW#6k+zzJfjH1OmOlEf zB43|U()$Ra^26W8x z}NjDNw-Fj0bs_7eCqaj#pas z0B~`bkdc<~By4VT*&4vadBAu266dpjV=qA{U;i57k7qXC55J%;^WJkua5_W+s#&iZ zu#-9Gg5&4wJ4)X_-lbUpx%)<(;10Nl{+BI^CMNm5>>+}?3Mi}!duF9*Lc#A0Xg6E@ zjHqwH6dK#Hlg*ZB6Xeol0?rS5nYll@5siv>kv{vg+SasCSX8vsV5jVQYWsnVjEqKT zZ~DrRxY^$DDvvl*3%A7m2^I3nKWG^%KR$S(_Vlm_3!on>5WYmdN9lO=Hixjyl)~yPxkV(* zjrT#cjVkSysU2Q=b}E_2-n_^DMEBG}1X7~HvB{qy&rgPb78~s5 zdjYS*QKvAL7sY_$SAz9Tbdk_ zrl3oFh%H9v=dt?9ES2wmV7Lvf;ZBW2AkPmb>b`I}%9;?n z7(7D9F?-hp2_{%SFh(5erJn9e&Qutt^=Ucg$PCCdeh8_rmVUP>l9~+=KCl0I)WLKq zV5_=7WT{hKZM+yjfS_e1w!XLnyu?|{*4l5e&(pD6Ndl|O&m=ytFjw4MU8NYZ!}jdm z{P8|*&vJ{s|6<&yw2O!fT>G#RdG1FgARv$_>VyOYG_#~+TUlqYlGK+Uh-5O~n-x!8 zrI&JDiBu?dovN3pizY)ysho+nQ;{ zEbLxPn~JFQF)M2b&g|UIyKer$vvS6#%tNhs;fzHDWocJ;fNx-NGRtTHlc1xcm;cqI zV{lL}H^Myc)?wDlb8`KuBW~4&>V@TJz?U(T1posA?k|h0cu>M24y+&Mg~omC5~fV3 z`ZBi@RD2R_mG0G6CipZ!ubhO~xhlKRtb@^QqX)at{^-(c^An8f3YU8(Nyjj+c03P^ z0zj!^Dek2UG@Sd;X-7qZA<4bTiyL;j)a2Cu>FUWtLLwpuKm%%>s%_HZNABp&iv_C9 zx)W}jYaNYYvcuAvSflQ;K+Z6z%@gV?Spf<7Z#`p0W#z1!evCOj(;h4g>328>Uypu< zMZ5gjjUmLN;%4hwq0j}yfN>gdEuB^&_9!mhj zoM;(WyoNq50h{$={Z|%kf^@>cSF4gk!^1sj3@c46>3AM??J9qPD5T%F;}vE2OJ_Vs z$bC?JEW#ZoL}b>uT84&?kI$eq*z{Jc=Pd?*jJH!5AbL6eO6|d@+nSg5wHi6k``h@p zu-IW%JbfUACfB1#y(x&T?V-eJ+tzLFJCy*ZC+QxMsc4RYm;F!a0kg4G<(x{&g=aTp z+e&QO&5cMRnj-vck`jqQAEVdpA6W{a%4kp|YLY%%?+)U!*IN1pEE5$XDQf-IJ4h1Y zVy{?voPEwdSW1eKkVAU6-#ei@X;zy}98gxztTZ3}kb67p8vCWqOa5sqc6Znn+rtcy z$F2w`qqyq_fQ(1!se^-q>m8P6+n!=nDWU*LO4XpxBgD0+-j82bxPm~;hacx&hFW>ldZ=>*`63s>PTQFT`1Km{9vf&{yL2H>9Y0Z?pV|(_>7#&KA4|B;UUK^ zC#Cs7w9W5tDX*lBvMzTNo~Z?5TF^e!qKu_U<8G>?k@TwW@6dp13MpM5+=jF!qU{b? zN5LN8ZJ}UCRb%vUT+;d6E#45o@nK?mly9KbwrN}+D4>FkvttXJSATZB)1_ys;dzQElhrnFF}4w5ylri( zC~W|2t8=zfwqH9&VMrTDzb|14+GH(WefTzaOB7`q4oD~2)r~)-R8&gWajnS%)fz!K zM9Uqek->l#NEhYl8ZqhHRVU*RN0{$BgEis>jzaZ5=N4dT+u**6uwxroYjnthG78&L zPJ7hrbFbxKd#T|u4FabpU8m+YRij#} za;TSSJpEhduDgZzG*F9=B}|{lvGVJt!;H!04d3;X?LHuH&U)5GiS)kA%a2#&2~{qT_o^&A{X-ctKmT^FNs0me-24G}!#w03kSzCJi5S0o*`TzU@kjyJd>R(4a%CF|qc&(EU3Yd+qKEF@FN& z*@k><_I-OsR|JxuPHk^Eh11oLl1cn7h$>OAeBo+Ljd0r`7IL%pRhxYuYnO+BChw}E zi&oI`)z<7)uX8MI1jQ;B!u*D&{yvx0DlR$XX;fpS3<`(~eJ9=0;^Kr8eIxvGqxMX7 zm;2#L76io+sZra76ZHm;tJ#2nvU^yf@8sOWQjMIRk@yPLnGhD1-z<27AuVW(c%l0t zHZ=nMkYr+`G-RoImhOxXGwT;f05d<~U=!*6{k`f1(O%*NI15`deMAfE9)Z}Y6CtIb z=p}Q0gVQrmktKSqFT-4B<>7&D7n_ypwxNIu=oPd2#lS^H7!e-M@zXf4b|iZLx@xEk zNFsiF^VN)uxp6R7jGK`dOZdZUQg-RG#f}BTP)m2MT%#!y5K4LUFL;Y z)H(m?R}jIt`y4fe8Xp`lhVXe`e0Wv??$igYR?=ka6!;BvxRd} zIkgb4{;SLI!hj!50A^Lh`DZ~p-H&vqp1#Nwpna$!|C7bjR|xqDpqSnER&cb-7sw0B zn~iG;;aI>9a@?hQUzW&zx&g>vcK3zquqn?^&ua1OW|~1y;bpmfV`*_$Ldl{nSl78@ zr!>B*28xvC&hCCB@57#$OqU}ndj+4h0JTtO)$8jR^rmSY+O3xA$(H}&hOtv6l8|RN zh?~86suS%xQ`nA5NTy|X2+NTfdJ0uW#jckV)uJ-iwg%%Ei@XW>Xvw!LE?8ftn&9g; zn{PNwfdwD4aUR0I1+at?QC>E((nnqf0(ly8G|hff-k%_t+goQAML*0%vOWSY1K(Rt zl;mI!eJSK^5Ccxy(JhaqR+s!HztPPWdkE($8lsN&to=ihLadnb-K8BNfRs4vup>}q z^=g-bfXBNTTAZHR)XsfC7^uXCp}}~cDf(nVNhTAWA|R#IBRV}!zwx(=-l^Q|G)-l% zx_NIUu_?XH{rG2KpMNB7ZnD@oY`uhoPd2(bT~l<3 zD`&s64D1YGRS=M0)z1s9W@+|s1b`2qVF(a?e0iMc)R-E9SJ+Y;;)9yafF-J~Ni4&S zEQFvN{sc_(s!!#QW|sY5pVxQBe5iq>caD}b6HvKeuk%zl)OWj<%O?2|xYQ}_l?5F? z^gHjTc0>uh;PW~&nY-c34j@i>rt@596QvIvaq96{(lQ1LyH1T|Jw{t8d@}HAw3V{b zs}33$h&a%MxDwq)el8N#zGrAdhv9B)Y%n~D<>6TevPmwmcWV(yd=WB?)8Puk7qG{j zw@PZNCU4c6WoR@cP0w)?`PJt}ySOC-k>=*+=ee_@0k1-#&<1JUuv>AGp#n+&doOZ{ zQnks0uJtNSk7$!jLY@j5lV_6qM@<|^m?;(jXgbSVB#zD# zX30>LC#s0@lD{yyTTZ4;d2)`yS^(KcCxlddRPHck0o4>#Px~-uKNXm(uNS)PcuT2? z!qEK+K_PczBuIVv#>|Ei19aXgtEs604riIJ)Yo3EE3nB0{%d&Y3*`a1oFtLeWUmXsRj19Bssbz_b zou48#v&CcsqQ?`LHnn!4AZlvm+f(RLdoy?2B_|lJi%%@q$3M$I(v6#wZtnHZh#8+#UL|GDb61-DOk|yCT&gN< zSBK#O)7$gAd2EIMO`%n(g(qR~{jO-Ii&R}@{@CAQi5{}05PK?Mv*_@2=1nK6Xy`!tMTr*HAq3tF)ymRr)SF@e)ON2(_FJIyGy9nw#osOD?t^uuV9Z9y5NE+aepxFuz%PhrEW#9miC z;PMvGSzpUMkC_cP`vIJJFm;mmvs(3HoGcO@H?TMf^vIdejLAN|`Aga9vcWd}wlJ-XbT@xT%tR@dA(e04TyO!{lY`DIY%Eff;TcW80an-qQg2 zek({6$vHq6O7rh$G_xp!fan_i4pdxN4|c*U-?vg-t>$hvoGn60qMFC>rl+P%tlM(G zTYaJa(|gdwT{8kC-2#G{SXuiYi$8Dyc7@j-aIJVQ2Oa4^A}OzN2ZQI+6d+4o$lqZC zC@S?#A(wk)VP|=uh{va#U9#hNad81;v(B|+!R!Klu#aM^6{3SFOHB zX6CTe$ZGEj&lQYP3*LUQE$X;z@^qd$b?6g4PRLw^q4F||ao0u)2fFZ36BlS$-0HEt zke!hvqUwEXDl=1Dc{!IyJdvWb!YYv1b!97k5}LwncsNxYwPif~zRfEk04MM0wn$T4 zT)Z0ZC*t~KiTjyc()|29kn+)Q6augot9EO1O<$fWkh?d~3@x@YBeQU|XNT--1PcNr z<{Z%Vxh9?XC^a|tk98RbiUdxQMcGhM*_BI+Azc^UhvD+9)#;~|@v7g=ip_M1zFM5w z@zd@6mz_ZO%p zWIL=e_?}qPX9Y7BmvH1i>-~8u+N=naAHDg)DmkdIkVquzE)R9Et;SW|8LNf&X%iG# z`>DTFukdiZ`4*k;x(qU- zkMe$Y)O9|=2g=k>;sy`jb&@0}By{ulMF1(h$ch5OKg3cllMFR_NEhCX1Yc0nANCb= zpWU{s3Pv=9xk0RlqTptuS%;GyI@xy z>p~ZJxT;)EA`O^M{TWXZ0|I`YoDl-WW*O-(f6^J;3WsRkg<%3#jVE-S-|V9Z0Pa80 z_h=dOjY^(&d6@G0?gK?iu4`Aqci_tSvuuiAZ^JhOHgwa!F2&At0&MKKMl-mVcqDHZA7kUv zNgO`;`4CB1O@)9lj+qrTuhDU`fDs_^fc&@hFWY?brC@%($gQ}Qo-uNCra%sYjC88l z(Du+(hR&SG8?I;idt{7^2OyFtCq;V%?24a#XkgNdqe$}{WG{{m8@%8rpO$7ot71}@ z<3~3oeb85Hf_f{gZEhG*u<)@-L@mEJm#X+dqDtFaCAJ$$Ck_POTbJcaq=2htJV0?sexw}~+a>9TzM?iM+wxIODNNuBHPM2y}qb0C;q zsJ$@jaxl;My1TpUyL+oAKW;o6ksVL;P2zd>EHWUPk#g{eAk?F^ZZwuB_OwzKmEEm} zB!15Hwr{HMT|_)h$Q^mu&u|SB9*sO>(g&tBl_)%!bBeQ1(DB?2@2F3$_#g+1XR-Oz z9laGKg;MBjKUw{$=2Fws-`?|nA;(YjQdCm3#Knc5aUgOx^!jz+3j9Od)#V`EzDWE!+iw1I8evvK~sy=rWt?2up z9ajOp$6AG{dY12FWtx)`-jdq6(B&M5l@kuCZ>yHPy{A@~SUaf|!{`lICksbsTDUSa z!Q#mNG#H(oGHAIy`n&`8QZ-+&qk}^lXSB)7#%vqN8O^iDXx8R(<)2x{^H_WCNb|70+RaUpIvgrN`?L<=9oO@j#>jOE8owzq+&q6kJyv{cj z-@bjzZ@m5H9_yc5;{0uT05&22n*A$0fbV82-%B7SbrpXmq^4eqAHyaN&_?yUGr8Ez0H{z!zN>lS$3-_~4-wnvI$7ehieOIdh%tAJz|0Mzv@~QS(}rv6$(!5hjdp{lP`Jx2`~;tucrukcT$JnnI~WeDdZM$6xf04LaV6)2NkmL zZT3i~L1RwSP}z6U3|h*q)B)ZWcrsiBj6t_z<%enzI;bfJ;R0vXp(DO4JDOE3;I+P& z&6B69c+Hf4Td!ZXy$phgRxR!kN!v(mOzWC||7~qptnXaBZdHGmkNP=|)Y_U(HJ5e} zzndoKXq-1BXJs-nq2)<-dI-+yottljj8sV*n80cTwv1m zRNep&x^^9eUb@C;0htjkUfhcT)?M}vQLr#n&TxNk-16hW$z9sNVfPpaA5L7!%4?md z8+e|O_3Akp)VS&`JYIelj1;<`P5i9(m*}xc!&Scljae#iwJW&g}seDxIDao)<=W|jsmRGmU@?89~ z#qoQVf=8Po>qZT9Yku=~on*0MGetqNd%!{ydzm~Pz@9GBObHE&R<$&^gp$R+h<%~FD{W{0#f2vSYmg=U%UHdwaf3hPMQXh;Br4Cwm#x`==Ym*tJh2tSyBu#BY6kB_6s;HrufzEbc2(Fs0d zAj3%#?g^oD;Dpl|6IV||?26hg|LNOxCUh!>+zM=qe?7Cx6NPObMWi53=_Hl?(koOE z$ltd9dc|LjQ$pp3Zkca~d!61?{O+h7cd&ZQg^qySuSmYVF4C}*b`(WTmoVq~3U2LK zp-RDU<*{cmVR|;3h7B8CaV?9T-s`DI%s+Y+3x9yMCnBmCLAnRWJs)^1yK3Ov<^{Ex zUXKF`j0&hwA#)zaRgi0jNI0T?Cq3?YB>-XiI&?(v>OCH2pGDv6I0GPlMcj`_k0f23 zn*W2Z8x_#;hh`I(@Sv&hvnTo$FwvB-J-j-)wNN!7J-*wx^!rE^j^YE@P zsT;by8^I>>U4l=$3gg!<=HG-|{mr}LXZK$HUd(xh4YpFa z97ENJ7=8EqJ#{;+4EG%qMV)LU6l6V&^7{Q>ay%`D1kE3p`c6e8~#5su%KMD{66H)iK26xsJSQ3*=z zDyWKQxKhIITeVf`p6~xl*{ZNGV$4U7d2=g^&Q_cz?3J)PX$LB^YDTDW>5+2ItR6v| z;eu#Yt>z={ujR+aXp{bnLd~_OBgVLN$>+#*!n5M@Cht5^FGv@Dk42S|8%?aPpyZ-Th;U=~~$HcVZa4kMxkGPo- z7c$TC)po@(PlU+zvH=1Q=_2s~-5=)>fe)+OUa!l`*K}Edpx~cvH0N8_Bj0qK5VC75 z0}}-zLZbdJ^Np&8(QiHw=zNF7&?)hm-dk*OW8{;-ipdCQpeS#73_N*Js&3J>+XYbC zq}2U?F)VEgveTuklL@@qbcJe=w9e5-VAso77{f*3at?VSB<$RkQ_inaa1cNQn%;-! zA~eyS!PgM=`pxGf;43%{nCMOGB@jZYkC85|ihpsX!6**cu#Yc;(02#1+IqSHezsT* zU67_pH!3y);oTy-)1r-Uzpixx+^utXr9^voATv;5Q2H_j2lM;u1(S8<_ac$HsMp9r z>O}CqPqOUy**|ZJ9dEw5`_O^mTjuu}XmR_$j=vQ;BUbD0>icOdO@p68Ey|VTW58C` zYjhhuo|k}*$iPT8uF#c$3Vr;(mZrBwgnzIj^*;=BH3msMAl+iTAi>EN_MeM0j55P~ zM0ap|mX+e?sPib-Z~@hEp8N@Jh?tSj06mbj>Tolm#-5a0ouP-+f^Og7T@}|44p^*^ zd*7~nr@a00dLnAr-}4!qFY;XzYp5@-*7_~v{J0=`|~{TIZcOi)y1r$bjT*_NoU;3swEcIdNSyV1~VmR%2I zmhm-;w&Y*UjZ=UE6EzX#9f|Il#n4*O9~SG;8u3#fs;{nYR!RRGv6*}aYl9*mbxlSW zTBc(~r-28yJsuazB}Fy-`$9a!>B#BhG#!ufddCXY!KJjh=;^Ui3F&8r3wFk_1e7e7 z>O?n!m9(Xqn&9)=<9a&9cS3M2^>11f?z@92#A%aAhp{*R7=l%tRbqs4uC1dM@jce` zneEIMk*rKxk$k?Zbc9HQ{WAtihH=U?MquK zZ>fZ34r>qo<~Wqwn2d;FoWsRda8|X%;T&m7FV-)WWl|6e;Tz56ABAU14gAjhSf(-_Zjd8q3(eA9vT|wX zF%|Bhhv~%C2oL_TeIO_+=~p`Ic&fMJY2(MC%d^eoFngDpBX8RUxwceqjVWIcFIQ@s z6lQ-SYC4e~O;xXeo~u+!K_Mj1)SmyEgVad0GHGn^#8%SF<2}~vM*^jP=5u0*EI!*o zb6(T4PFA~F#{}}bW9a?9F*MSAywufK-IEGQU5 z7qoTq{fVCh)|))v=7VOb7%c%aO^VLqtBj|FMs#EW|7@o=qBd+;*zZqDGxk#(d87lQ zm)yQ-zrUldP|=I4W!lbH5n-8ff)kLz^}}Fn{)4g7Jo{foe~RpSq^hIHco-a?ADAQo zgX^hEiW4GQnwfwo`Y9w-5F5X(3WB)rQ>1(Fdr+v?45dP|xo*Bt`Bzkc6W4!QFAFUeg^^VO%CXW2>Y{*m71u{cA zGR(<@<2H-9akyHgqVoQ%r%HQC4wClKT6i_)ikzrOzSK1Hh7#@~MP~Hk;{K7pF_g|Y zsvkejPRvVVCE}-g;k03}y|tLVtd!7~*ZZAE;dH&bbH%RrNH#8(LvpYhAm zRg3jf%?Pu(7cLBO6XAQZv56|)=}L9dG_|UTsSeE0=FFrEvzM9Kc_~tkkkc#$Fn&VY}I}4t_Ac3ux9=2#|qqzdZ6*FPq5CDt`fa__qT3neen@VwY`RC zI}_gS1s+CAcXTuJ9usMpmNVDy4XWJpcqap8H-6=A+1>G0kqlBWC(w~&l(r*KN0K#gtMB4 zCRaa|^HuJ|&^<$78$%V;KEgr4qh7P>LHEh#s@>fQt$dd(GF9YgDMKF7nnA+bfeVgTMVs?;EJ& zZ44e~q7M)ArCcOlnCKc33qhVps(RWEDaUO4WXjfjD6Fe9kTLl1)2-G}?z{Pk6B58D zN@5la8onapc588t5*{qIcv*ATKLGTR^N;>mu3f8NMCUx}jU9mRUB|U=EYgy0FHp6! z&x$1DmlO9UB*>%Ih~SYQy=SfmVxgLm_7f=Ytr#c=9F9BI;!8Z;w0|vbu}hz{`uV5a z_W=pemYr-D7Ac{dA)LDc_p5x(nbg>m*#j~y3ay-8+vv45p}tqGzuK~O6-de-Cg5iB zF%G4t@_G884sj5gmHp47HSF8gKXI~QuogZ1>6cbbH=4X&bkk>0PLo+jw{bo&4TM2U z=v*}fZ>nvt*}$*#H`_KHsSOrExlHHKVmWg+R!=A6?e7Wk(8ThG^vcyCND5+_yb8Xx zA?>Pj?yx-Pf9SY>scWeKax45nzPI4=NciY}9Ken1OzS5L3TV~g2^YV<6GqWHA+2bl z@xIH>%b^n3Gi5I?s6M8V31jHe8B;THvPz%nzjNwAvTb+lW}$wn4=t8{5eji(?rD_o zq-*-_5{5QZ>(Qho%=Sc7R!(B=aC>>e^!utYo~R~x(syd3Bs%qV@4dH=5_HvKLg|xovRPkcy&4rEV zM|Rg8(lEcY_se6w!cll!`jqI!d4ycJjkV1LN}Pq-X&UwNF})lS%chFWB7d3ET!Qer zkLeK*J4*I8G_@VwO_-ew9c7OMv~n#>H~UB><&yAmGwc6c_Mc&2wZwe;`I=MDyAmm;BIS=IzUyW2_U*+3gEQU*|<0#D?kQ*g^pq8fZ zsLu8EW0Ve!zfb)wdVu zfa1kYL$J_mUdh77^K)_hCIIBIum(zLtTKC#Rt9Gu!$Ch9$TIn`se+%daA? zKw3%8=;|~%BAAvmPB>8h)R|lB&;_zFQlElHC%EI4BV2ex*7~3R)rkL4=H6$Y;~B>` zC;OF)VQfY^3wR!esyV^T%Z29RG(?eI-5f3a=30}kuq;9YvM`Cf3D)J!q}3d!rEO#$ zTODYYa!|l|(xGI2zyZ1PpOp?q_`od}q_dw+BhxTKv(q5F?C-r;L-UEay@T0weY`)^ z*K3Yh+vkO7xeap-^|Khz^)6hI)r5Y#Rwetj|GFAS*n*DJ1j!r#O^Ny>;Es{0f;-lU zFZ8CCke>&hr}08Cf}Vqh@YdDZoJn^*TEB#8g!4%I+y4xQ5q1+FmCtOZX+C9rVPidh zU~~85*i->UJFth%2a9{;eg9vGd>D!RG4$~yq9KDPZR_QfXQ}FV=RYEN(;>fbveW31 z|9@gVKn2z7AnoS2Yw1Vp*O+VcDP=?W((L5vQWo;}UhTh1_Hi(Bji~yHMv(P`3kZcB zbT#$;K~wm8$kwZD7z!2{z3WesIUL3 za@+#c8t%d&_Mg0ly{L>*+X05EiZmk&kK*6CY1eVN6eahAGXFXS;kQs@_On;p9XQjP z^r${v;AY3qC%JY%oK#X2ru?n46jGkEz}A*bU|-oZAYmsiY4O3@J9b99lxIgQ~YZJhR@hwO>WmS=3^zuQPA;A zJCQr(o7;jJ{GT)>`fJD#s>b_GSs&Omhr>oMgUQ$#3mH^+$vmv z%^D>tDIhEaYHH>0QFgEs`s7noJx1gcTlKK5QucN?^v%?J%O@7{y_>zU0{>PqHo3bD z_d!ZeZX8ba7{5_;gq`4wl?&S1u{86UIVH&o9)*@W@p)JQ&Lm4i#fAV|Lu}%SvyR`b z7l2rRs0%9CctP$m94|WRFu|;*R_XFY@X{_;&PaC3E*J z+tUMJLLg1q#4pV3KX4*l!p22-Gd=%G$ND$2DiYKDh^16M|6CI~c;YC)Q9}GNHk5)y zL^g>GKc;7kPNV+DOyMy-l$LDG`Ruqwf&D?>N#8cxgt$Fpb!`WLevBC31nqK(Gj*(H zu9c!6HhyJ}EWp3CT|f|Gu)LvbD&?;`5~524Il@+%JU(&^GwQR9&r1RFO&?m`r~i%#2xH4DVa?v}xy;pqoU)c*Iwv zfue0F*q&|g4B-08K%?IGY8n!94u&>IFMo2t^lAe1r61dz9IndRP9eIiQk;u$0SZve z0W&^IG$;#Dj?HmX+aod=fDfZ5O#LutjzIdjk4aYMW!SL2HC6b7gB=B)!>Y>H9NwrW z+bnEdR*Mx`4rRA+P*fNCM>*!fx%gMfm{*)6w!bsG9g!0O7GxUWFrg>;w36R>Tr>fd z`AJjYQw?4)%K-e}s)Sa;hPo3n&z>r2p~p$T{gFA50m5TKZ-QQdc$_Fl&(la_BqM`6 zA2PN1SGq*m;0;`uZU3aC0=n`sM?%C6jbT(kK72lt(6L?#Z$yqsfcZznY3(O0bXhyP z;BqIK#_v?$^CwgFafW2M%_fMWB)%dRtX+U)jJVAYv0erkm#a42*9O7`f)J0C(#X{WZcl8PwQ? zr@#gh&UBI3QoEdpA&PKM$0jG$sM?5%@VAw{98D_)%s=Va#LG}Tqa~C1o|YiXSyLtd zk)s+)z?VI!Mr}cK<6iW8b(%V0-W3*x{aXV)r&?Epf_JR7Z^_vn0isM?ijw#)VMT5u z-WV_&NX|p$W5FrU$C%9^0+M&{!EEi`UcM}wn9L>@2fs{(>hyn6_0?ffuHDx(Lw7d}FeuU}-QA^P(WxRK zN=U;Hf;0$-bSg@Uh)7E-sZvTKC`xzCx96PqT-WbAf1Ltnp69;zUVH7e*FF?^sVrAc zL+BlD=;{6m%a zV+vJPN+PjkR(fCJE(PM6f80y7guxRT8}EYh`v3FI-Ot!u_cNClJCmFA+74*nf5;&l z;Wv-6UXn8@`?)_RE| zTE(aDLvPY+IPJ)8pFbK2Y3`zqyT@eLblIk*IJw5VdS$}*wmV-TMkn=y;uDJ9xR8z& zO~uMCN0j@O>sgi~8V&#FBkfdPMgQANnZKZdZCp403rGI{e`rlQb7n8&@~hw6NihVN zG4R^l&^hPzmj?y^A`t=Mqe`X*Wv3gvW$F(|@OH33WTH2BpZ(I3GSRqu>??i`P+dYR!$-GpFXGcTHseG|rw6?xreqvP6wVU$%KT3er0^U*O zn>Q>iQE_C%%7I7pSw2e#*r{G;XX_^4&9-o2r_0s8TZ<%WptbZZHW0m<8K2h%^V2mo zH8AkEa=DEU=YI@dS=Em5i$IXfaB*=pu!Lb9a=@zrEK&?rHck%jU(p%~%rcFSjRn)2 zoWM469UoE+@({ca5eusiU;+y)XEruAKm;$u8{0ppy2 zg)RzLt!Wi@92c8!ZwufcfV|}g(K+E$^_L)F$86_fn(qHJ`kD`B2QW(yb5kWvFmb6F z%lKS5m@`KS#{OaMM9?6EnvG50vI>;Z>ISJj09)3{UsoXYw(y;lL+$8lNTp;W9FBTNd5*h2RC63 zZ?QKeTJ0sDc0AaA5cih+SmO8x>}_5&Nm}Ll#UbS~)Zn>b83hwJlx!D;m6ViVGK;lL zQA&!Ql9GgE&UF392U|x}z|qbsXj~^7AH1xrTwfV3Oi50jtap3=@XvJ=1`L3T)(CJx z+r%brN3hujjuY>_S0x<#Qo);t$6;-}`u@+){Qc`+UVa1dAuliQ$jAuHu_S7xs#we| zEJ(r(7_)qd;j@Q(YZDz&RD7hD)6NM0{gh7dDKX$4fSg7i!Cax>deleVp~8ZKt?lh= zEVMhbvo?5meM1TZ6idcgQm!Wln;x<}ctT3-%AWHYtnjX*W@kUfGHpn`6*S5Q7atvC zV{Ii>EhD4PU@NkU_f(Sof~%z0Voz_1pdb=y;&hXh`bN*tkn#ddv?g2P@|%9KXvF(J z?-g`_YptR94vXMx;67f(BXj@~tJzr?HU~YjfV@1Le+iCr%KIoZTD2Djv5P2f2Ep4L z8ZsF<9UHSiR>egS7Om5hl9J9IzxP?ErB<0kZZ>_+Rp#P#j-Km?GS?Em(0j}hZ!^FA z=@|&Qka)}z4n6g5Q+w+(#yX+diHX!&esD730UH*d$N8@WY9GOX;Irp*?*bVaS?}@v z`}aZDj6lqO2Q!9__hO1X?aBQ5;CE1JkmRs10AfHojT+@n85kkR*P$2zhZN*02{p=p>_k`{y7}kYE3E?NqqNZG5afe3Kig zSB1Fe;Nfo>1~r=CYY3##FER`<$&Q#Un&{eJY`=}4`0(t+Z$1(nScu;IzG3=5NfJIo z`k5jl1QkAE%LWfyH8s4X&}%nr|NF0cn4B1An3HB8`QK58|FD7j$8784REQ>~_Nu_d zY%sdOz_#{-Oj>%uzXcf?6l9c-r0&oCih3*IZl#NDx-y;qgsVtinS`S63NlrzZGc#v}LS?#`mIZrrhx%=C4)G5VCBp1phC# zsjjqmRsGoyt+zgeHq3-|%jVU8>&eI=%=^&67Aj+Qr3X{9LNWfUmm|LomFu2%xmB7ackvH}f~>d{e7V!S&Krk% z3kwTNt=|gqs9mH~0ILb@1a{&FgyDMllcNp3nM))`waW0jAcEkoa-Bo(f*iilp*I;~ z6CC*s(vMrwNA}(E-{F+NkpZbXH(uT*7?U-iWAYs)kpcoEo}g|t&QX{XN^81K$jbdV zULw)Ey02*~HGXw<6>M9`f7U-4yZO!wogUrjzx$%>D$RdymLc&>cjoHrn=Bk05c*2i z*4Dt_0fyw~;F5ze4OaX3gjHI^s%gC3ycEt=KkaaXZi;}3#OlGDJKrFN)drm&K~M*+ z=cbgXXu^RC=P;2h1m+*$x?*d~qhUnOGmK*p3?^0AKR>&afLH)&V+2Q?5DJw?@m*8N z@%r-5pT?OIFgPay5nj6&ey+Q_TVL4jbN&e^*#3?G+^3SiVN?(%PIRt>STw`PHT8w1 zclUojT>rswln@;q;_d#ukEfg64?6a{tF#=Bg%dkW%o}Gx999v*qzYN zc+Rr3v*Dqd1^*foDhmY18JL1Lkq41?cao5u7%2N$DGc%jrg87`94490$ z-V&r(t$F+QIXgeSei)db;TMJx*>@aZ@?m6boDdru8y6QBA1|=xd$c2zYD^F2IPj{# z)C8iSfE_oY0o=M^9!QAVphpmIiSxect=BnKvoeA)@1n@NH-KL5)R;ohWsmP)r6p;ipqhBE!`QKXm(4kFl_XO zQwerLIqB&SVYma_=Kf67b~pd1hf#-Hjoz-1!iJO!RW>YWiLuGUDV2n<{_cbtE`NT2 z72(GK<0^%JHLQ^2xldEvQVKho^Yil|3-XH2fKMId>qeh-qpb@Q7%*+?NTDK*`W^|TgrsB)j+&a<>^cAg2#YYLagm#Q7GCMY?)?8Iv!MyF@{B*Nn z+4Bc_>Z;^Fp!xW%Xz}0J`K*3(?V(+k10>*~-Cp8mjg_xMfApQ}Oe(|h0KRqL(K z{fkclk|(s)V@R50JWiHFQ+&uXQj4(6o#7902QRhJ#6^sx#=kh3LJiYGR`Z3*K%^mi zYu@uL<?(dlv41~v@Qvj>U z+R;r-O>msSOsW01$ypqWBpx1KnXaK>F>d0_j-#8h_Rkt!2-kz|NXy)*2s$MZysOm)Y8==@^+ok;N;NSs?yK`4+zQ#o~Aq^H^UG8^8a0@uu%-W0tXJAeLzX_ zpz|l?;o;fplBYLf%hA%-?(XXP4DNy0aQD!_fV@}kj;7c8`ns}1Pa>Gag@uKI6N{jL zKuKxoV3u^O6=Zl`ygV{be4h4i*1=B*T!Q*ih5FMk)KcAv;3ztPgq%-XEhHplG2#dl z{5ye=XaN`dY803I_(lB}p*AjIbep%gwtBYUJOx08UCEUWZGxZG#Z9)Vb)rB6(p2ey z2|oAf2Jt`LPuP6sJ4yKVgLe=lsZWaQCdv{L5(YngN^_?&iI0mza%X^39n5E!W1Wd0 zx%X_TtE=7+!Z*WhKy>C+gFJB9v zrp)9j_<4cBCSaY&_1>|$>j!6m$FE(x2EG{us!)nSF4k!SkFePTIJgC&?d@tchX4Xt zf-eFd2U9^;(V5Aq8pqgxI_&#ROiTpWK|>k>KQZ6B?4>Q0r0S8sCSr4HnA-b_a_3o!zJyU&qH-t5(Z`*Tg=pUI3FRET z0Y&hu%mW-LTBp8(p=ztY9$J3>%IoX3e$H!MNT4-d-ucp1MDeWNn~PyT znCi;WRbSaW48$P?zpc&ycl~@6AIw=FbjHx#TWv9`dgbLYC*QFZtc+ZzQr`lgT_GZz z_|mL(0mBKhrwuQ7jtT@HM=_7u>V0-c`XxmwHd~?~fH$#o>SOlTXQHTz0=}JHGJ@hH zAUxPQ!sB;BVUPqk{p|rUpg)+4$16*x3&Ax@ zuBgbf^HYI;D^J~8wrWqWLsMp_9Wg^vgJoRi{%jZ=MRfo!=EuB=n*s~Wo7l&jc3wHR ziVy*gya85LR;Ct5dP6i$j;k;R3a9dCx{0fbqCJD=9|iu3-hqK8k2$UBdEKp;(L7+R6`E)Xz6}HN;?&Y;F@V?><&G3`c&o|5e>jA-5GmX+57+vLZ85 z+9VSJxz!&Zj>8Da7M1g&?@7_Qu4v&FpuY=oXU4}Ho@DUnUjn)SD2txlu3@vqp}4D)GYy`6C{%Pg10&;z4dBo%jE!(+oQ~uU2?a%Q zEYmP%J?!o-e#*8eN8l!Ey_f0|K!J+arTboPRJGwH?q8Kp%zYIVAen{2cy(u2R{?VM z0RZhhGftS=b#0Fzi6C@ngzvw{dfZUG9V&$36j!j-OiFi=_Ffqh zhp9XkiHIQwNI8(}o4i+PrH6-yg*ghv?g%i`(zajsV>lmhT(Ay-p{ui zp3P_9TM86f?N_-NBYprqBjXMs48655KkqbW7iWpJy=ZT3p zwjHSutAEmv_nnVZ6KyB-@?N2HHArvXkfN}08QBM(%d^VX=a-~}gbV(DN0PV38UUMj z=yiVX5YOR6v3YPO1scOyI73EJ@dJd3ibXh5&Y!bmq zn2YfzxX}n{m*ABl9$s>yNpKNR#XmYYIH1O*<`>gG7ef`H?f6EKpt30Vbb?DWGu*sT z`M3}zxM6t&c%CaxGmCPjBOaV7Z#4(V?igeSFy&A?p$B!kGkX9YO3~6guF7+Z%O~`Ne_OFv-eno|L(bDSE6CH zJ#XYBH*3fXu)_Y}&`ZlpLLd2zL^RqW&lZ`t0c6?A18}KMeo)5bN-c@|32I0eEOFV8 zX=4YVtIROKo@;`roQ{h-O2U3PHeE-6T^09SJ_hO#Gw@Azb8tXPwLqN=$yh@5kgGzN zn@%;jof3~ShnL{%)BSTG_Kg-yJ)5Ctzq<9L@)sLTG$Pi^Yin~r+ZV=(>MKo=6cw|5d9Fcf(p0t##>4! z^taw+mLwHhEN1cft6>ARu6oA=Ifa`!_dCIk$b+Pgk=_AhRSWpj#XbK}Gm4^3jVoGnv zS^PRnbllRBG?h!W_V~G%WA`__@59@G3h%{SX)P=mE3v9To9w1J7)VCiR5Udy)c)$8 z73z)%=g!*DlQDXdVmD3u@P3%3Rc)VSD*>?OO9VN(81^8E?_jMy{o!P06LPId2oGcg z0Jap+vs#b_me)`+K*Qf(j>EOfe1%Tb0AD6SR&8oS4ylK4v<`8`)4|*CV1vg|VG>5k zSJCgG#}XpF>7#*@%Hw+T3s@;IKlcb_#lx#pqg3zD3j<^3ejmJeE@dOhY*xocx`2%x zs5~u3a`Xxq`*aqBI^)jh6Ir;pj1^;)egKnTF7S~ag@dH#r@rLi=-6v+Vb@%je^pQK zaRu``B~KhSy}0%xZi=NCA`|B7I^>y+V*|q*MdBYi81RrMaEN$T)|V_nXeUpOvt1ZT z{p6w<(Ot#Lx_q-f+Dj%S#RPs{=LrR3lc---C)~Z1_E5Y_MWLoqpPvwEZu8sK0QY;9 zTT#9-aL^EvNx1wvEkh*vt!avx(ky8R&-rQa6B6iU`p4reamYWkvFItK%_9;-yeX!z z_l$i9J|3ynh-MmIV@=~b93CkA9`EH~~Ksc1LqOvnsA?Cy*nGpA1A z`)oRv7a~Oy-;vxbQO7e(N%N79REqA^O4v+Mjumf2`d1GHN4dJx@@qLvIzCpe0v)=d zlSAXQB96b3L|=^HWJ1IIj+TX4#|6h_P04$T6fR2-b`l~X6`vi?V2s$cSnOY#754#= zTaEiGrV&N`7ThM|T4Td6g0n5?NMkQTLcxYA$Cb>o_=fttypYqdJ;YcQ%flz*)llv9 zsLDJtM836Y!^@&+<+%+vOPIAC*y}+Rf?!~j98#h8VWwkX;Lt5j)ZPXLA;{JeZ&jr~ zB$t8DhzDcevhNkwB&9Saq42s=VcABF(()TF&|EPoHR6cyh)yJ5`IuLxhtr30QQK+# zigOav#6}F4sMGWScya|hm!jd2>>TcxIfS#RJJ9nHpEX)n0)T2*%jORM@=U@}&%z=V zDg@K(fS7{KTTkb%Z3rDm)auQZ!!%e_2Uxn3RGa2NG^n!e$iQ2Z0UHF!a^UiU9(V+< z(@>Ry`>|rSc8$J@N>DafO0%=ac>-OY8*g4}^u5-Z3hUg9)2;H_AU$3uMcFje``vdi zWZcp9L1i!5ai6m_kzwm?;>E>_lv#~tKS-;1esSYBfXumB@b)*Uz5V6fIa5(#Ve;g^ zKR(D;mR$l*j{<^mro(7W-MXXYXYPp??@i0hGou`I_XByfq@v_hGeHwYBtlR8YG zz@i+$gvk!K#d!}N$8$diGV!;+Lwg5uEh4lf3E$biu4olHJpzv+g~6el^nJg)N*$13 z6lfsnY5iI|0Uw2lvc%%a9zkN|acu;fo;W;;j-kX$I|kfp*4JUZLK+?^5{b;CeF9ZY z>}LXAF;5p4l)M_05_r6{q&-DeKXmfM=`?Kpobg_K{`^^>M+xvh@P!CgXwK;z6^q*v zOK&K?0M|ChXQylmV+#S`?0QYH9Z#VBNUR$wdy7K&;JI{=?zBWOd6EOTL{C%+-J|8Wn}0e@a{_%RK2gx z+Di~5qT)2b{R%bZA>c4|H8sm^=n3xZcoP+Dg54B0GMm(RE@<_|jerN}vc$tR%Nz+Q zqj0pk|8I?B|Kf)uXqBcg>hn@QOAav4OXkM$FX4Zi`fVauDOqF)`Idl! zfY?K!i0m4+7zSR%yA%f(80?M)a&6|e7iwi<;`;loXDNeXB0o9OX0M{I)v5W-Gt1;y zYWT8}I?JGP)$ZOEW|6Hk+y{z=ch2qF}Kz^r5R3lE*kap|8xT`rrm#qVYtzEpL^ue{wz0-fB*ZoeJm}KaEHC$`_MDw5gHCy|uR5p9?j8 z6^i+9`4&Ivp?8I50;^n~3i;yz?>t%(`UXwJ_gDGv((;A+-{J}JW%?65W;N?IPZI7h z4JTkV5p54OpyPf*Bvsh@a)oci;ihShUaPrWO|3+t!4p=i^0~{58rRLJA+2@I1NYWP z++(4ms$>1|9KGXXs2CG9k_EC#T%)2!G0*U}c`@lt(-mgE$bY_>#9nDrb^E?x71Rs$qEvV5`2Tv%)eX zm{-{bTlTy-@b5PcHtnZsxlZ`#06mW{yn2QkbZs*tuRFM|ap(WM%Il;VYdr$va~mOA zI=Xjhp07&rUdAQDovE~}4zu!-hoA`QS7vnqOC$t4V}8v%Ut6dz^~qIiz{)@$FenYw zD!yY>Q2aZy^9+s#e0U6`dT4zEX9K1lkCq2m4wHrHtf1O84Vt;oGpJ#LnmH|9 zYW8wj)e4;-ofgM_Mpot&ze5p3;o{QLaAdVh+@#AJhzJ7cWvS(dK$rD^5QFf- zD(?kF3WI#+qe?d4#jd6Mb=AaTq?!{UwdMyXYs_D3Q_k7y9jY|2vLR+w*L8_Ik(QEz z8aKac7kFRT4aCmOjNoVw)4=~%+aO3%mz$g0(t-io<|vpjL3o#mte|ssgL0}i^XPWad8nUSn*Ck z9eaPjlTmb3mJt~1KLfA?Z9%H zatq68Xpm{7n->$3adurA&K3ir`o0^og~x&V42b zdSV8lu3K4P!zaZU`o(@&K@88A|Md6Z8LE$60|#2KkG=4WKc7LwoG8|38c$u6L7@;Y z_|Q*cVlp8Xf!ssaAz!884^&9gYJ(=C4&>^s4IUVPG$eT33_YB`&}7i!mj)_YhDd}R z00hJsy^mnUelGzjPA=pTUANx5r zdy6wo+RuL25!K}pTmNHI8;z*u-98fx{TuIWP9%|RB0n%`XKElh{4TDIoth-+GQ^EaM}-D(FOZ&*8| z>+YY`ii)Ryc}umBtn(d)?0TGCu)G^7~Ej*BpFuwP$fa=3)kQQHM0ZBVA~G32qUL0 zwxV@=mF1~ONJ8lWY3hYhG9?E9kYaHi8%;to`>3Nr_CuFf5!&;C+;{Eb^VOr&Hn2dR z-S}_3M3rzLjfi`D|1(Tan>-zb3g&>YMsboZFAo`t7}5E()H0qQIl#}y7d|(;irr=g z^$4|W1=T4XS8E@T?T+#uN3f4eT>|eK>CFpLT=eu213+Vgw;RoQG2S`C+u#n!$del5 z4w4wxQE2?vU?2xI7X*Lv!b zoKHtbCo9UXQs8j!PjZ|p4X?SDz=c=FH8S~~ZDv}_P+qwTb2xglKB6~))}5&lM9T!h zzR#bH^z_0uJRTxHB{KFBrwuKFrpz_GWmXEh!At@rxM>On_MrLMO$9Xa7~k<>U49$^ zJEH`TD=mFC*^?wJbjz6^D^nGC&Df_Q;HP}|0ttKj(#x{~wloJ>RQLeke1Fpfx=!ts z;01z@7ib%}GfRDq+nJVm57Pq@RU;#klLy+^7;^fnb z@YaV|D2csI`Nq=(BowX0ri@qhaS@@W?%7)MMafs?^b{Re_4Qdz>dC~s$nF($>QET3 z8f7*S6z~TMc68mCi$hw^2_=f)%*hy9{o!4Yk%}y#D4^~!zjw_tY0WbI;S`i`gjOYy;Qgw&8-O1XPs4vpsII^mY z)Y0EZ&-T9Hag8JRsv+zrNmK>4<4`lU9YKN0UsoLHN|B$G;mznPEZuauyroe=#RIBQQsD$2|GuA zBYjf6HU7Wn-cOn+p2O-Br{Dg@^Ny15d7B1!>&fTD>#kjv0)boNm1akNeG&+(8+4sS zgGsN{uBMW-&jziebJI%jl}7!_^Bbq%3g5OdB#)b*Vc$T!F3wI#f#btA+1d=9XMvp} zGbM)PYwA-tRvLJlxFm8Hij!FjR5XTRb4()`Z;D@&E`5d*c2$kEj@M9-LokDzw}@Y2 z*aO&m@N|{3?*tT6NL$}+Zsx&hng`G8h6%ppRJA>^8;DngYzaKc#Yydl8ac2^Db;g1+Z!=dS%GViD5Tvt?JzE%)&Mqi^1CMDzo4; zC8^Vw8w5sI%mTn&c(z=h7UfF_11#5qYc4YKAgk0USkxQmaG2Tv%hc@{l%^aSiU-)w`1A_sm_-(ET1OX4C9z{vRn#`M02sM8OiA?T7`ZAI%94P?AEbL+TC#_QZUWKYPf(Vt>w-aj4a`!Au%Pa zToGOOpni|!=LcC(M6t>t(5zt$UlT)c<}`>p-{`12-_KVh!gfM|Zb3)2!r@PY%#F{H z%%whFRG;`2^i48X#8|Sko;}mY)rwf|Eh0haRLJ^t`Xydc13HW+aFr0P{v^6sUW)2e zJ%zlD1pR7G=Nye@e`;zfc6Z3vjZ2%v`rSiP;ekur50H`?pjDKWYQw!Qj$(OdBK>KI zr9iU>f*17o`rP1lIMRCCArKi>7VTf-qBkJcdWW=cZ*SXr%CNzFCP`|Nu}vtecm6T7 zHBgd{TL*x`CE7q=$~lY{3qv76_v;aHP11TESrS9QNbu>J@nqq<(&95vW|{{5$0gwF z#44~|1`#Iitv0lUnT?$BpWuBeTN9Q0nKaH6i0Zbd3dQetipeM%ijyy=@C%oGkicbtA9l_I%XeT!s z?xJx}0l6I50d6(~Df6v#I z%EcfRd)m{tl@6}|JgC;t>6T!OD%9GZP;UUD0C3YUWr!75aAFM+)$)DWJc=+=R|l2f zVvx4&lgXA1t) zr(D|>bhlFYCGYyZg$g(TU)hn-QRtvRHQZ#Kk1_|O=mKfvUdz$`y{cEYO{@%C_`aOR zgWPn&O8O-Jgl}U$m;y!-ePyvaj_I@9l^h@=NaHpD_kj@OVFw6RL53QQ6Ew(x6(MUF>_Odt8c=XTPg%VIDJL>3Hn<J)=FPCP?Fg!N^2 zzL(?1+^5-|gWys3Gx(fKk!Kf52&n$F=0U-NMI2*TZHqOne&w=0 z$vi(eIM@P9;oPRRaN-_8_=I~-%6kC-_0`fYmv#XsC#UA6nZQR2sGPH<^)uIw9c=5f zyMDv;-_~ay`;am*?c?43ePaUy;W`Z83H0lT2nbrUw$Ktz-R}aSUUfVSd_d}zQEcE7 zp_3^>tD^Jb`O~MDKzjof!!}}w$hB$TLmX zXE5v8D~22bS;J++VfPG%%j=ppr2kZcVOy#gF=7kod78{&hZO(~QyMAyZ7sqv01f!; z801~mMOgfYRW3F8R(qU4JE#nLmAq29iHTJ%!@QQ6Um9S!D(IYe*vzo>W<^EC;-W*& zYgm674!ag8;3jrFhlbNDV5LJTXAt1 zpCCbLOZj^n1Wpabdi+;I)YV`s4Gq*Mz{gGkYy)OuunDq4hqr?nc^~xvy2=Jjo_kUW zH_a>vj-nLC1%%TjB0Iei%c!2wTzm&wvaCy@JopS$TFy(3wzpQV<@8zEd~nyeTp5Wa z%klz-l$~j_cDA?WK^y|NpXYA=2y9}7zl#EeR3Yqkr68DrQoX0A2NXF;_pw?_0f9*E zqFE50-TCt33-rujb8k$-jYe-F`u-yo%$DdCSQ1OJ4`#tm-SHft?=&?vrDk~2``NEp zJ`Hpnw}H*aJKp^*SdFK~C~VnU2y0go3m0@vw?Ia#BS3w)H|73wFn7?++uIuoerR}d z`?_$tLdfF)f}~9YfH!lJ5bRg;0TmVe)k#;@%^pJnybeMhJ5vEYhvHx=;wyd2UESUG z7R(p!^Za!%U6QA5~Ldv`*@k}eF%6KT$4Q%3KE-pv%PbXZK+=F2Sc0%=bK89<#v0|S^_ zVLcfG^{!{M8pc;DIIn zdqRr6NY(IBC0tNb_yefB z)OS=OLQ^y^jc9bX?~`{%!(GKr*`V42eSVGUHuKuNj`k_w9a4@PhrQ4+eX@pIgFUxE zTa6(;8s#Wt9z1|og1!I3D?mF$MxkwN?#f9wH#Y+@=`iXi1^9kq69h5PVz4(dk%(-= z1GPTx*KP~3Nmz%bt)X!f{O5<#S$R!)@fTs!XMxuB>#ScjRpS2efaIwjpO~_Uf0rHg znQT&mfTk4HOC;Wj-6aZr8HLA$c4gUQMs!Dfk3Flc>>LZ64N_gwhGhvmDGUgv?v0ft zjkmnxwF1XkXr#&J1ydqJynC;D1j7$U)O*VLjzhR!z>0Hlw9PuCeEv+Lr`oxO<1~nW zpr38}NVVe6XIRoHu&(KUj zHjaC_ko?Yj=;4h&mpX+zNB%grh~LidBaJ$K56=>>oT~72WMLG8M;j_~%XcIrgZV_D zP*TWhwck5~ei;8q3`Oe_ZfEu9GVamSM@QXzV$3pTL37MsJ0q5%i?^BJZI3eqzWYc!eg}{6N+cqrfjU`B;7@+=0QsZvZ+?1DA%Ow=C$k*kU=+pi)&S;4rDOcH1FlF<$ zuBg?VF;oJsO|FdV2r?tB=2jJtM$QPwQNFnGs^&f@Cy_X198p2A_l^1156WWsPbQIg zZx8fNL}`d_CB~q@UuqJk)2tVDMezcQQD4EcroKFb2not82{#vAAJcLDHd4qG-D=QI z1YuW%BH$k_rEZ=NU3a5TW@4L2&jLLOPaNjiY<2ho(D+cWMni zR&q|VHj7z{fk=%*V26h;1O(5v;^Jwnq@)ii@YutqP!h#T5N3B$BueS-fk-U>1eodi z+g~0#u(}G9spSROnS@=DDHKhg z2M4WT=Ab3$G+H8G&TkUfU>KdjvK3j{thS_+_r|M2U0MeRsrsDrpqm-TF6#w!8|^6d ze4bcBRY3g%VAeG_v1xYK>O;)`N-1rR`fGH)D{mxRS=E2lX*n z(vaAdVmwSOpSzOmi(otC-3C2ns_sOLri+Tbg9P=(0cvc43D^eukU~Qlr3wW(4WSBF zJ2Y=%{EeT>p{4F=3QuYCJ7&_iQQ*^*Hemlbo-)J^7581M zx$F6EewU*4N(9o(>_6y9=JZXM&($UWCMFCwgx0%~C;xA5IeTTT9v9D$A(#0Q`> zoP_^JNKDN@Tv72mlsD|F%IjI1Ewnibe&FWq_<*KpGG~S=+Q8!IYAP{3BcqZj$b<*i zFx9;@P|=Vn_@49Y{}@M?>1_7TY;$e-)e$Pn+=jn1#QzRTU}u-V+f0?J`kbvk+w;jy z!EDGD!!PzdO)#Fc#(RBYm+|i$G%I!(gN>$jJ=`rA29s-=t2&g4rp_L@RPVqf)-E*7 za$ydHb$kvUk->ZKC_pSq<{(J!Dt#eRwSxHoqjmwL!HR3El~KyzTv*c-sd#Lk_vb0d ze}OZB{>`)W^z;`dsT^3PWJU&d7xAdbtt!Yb(4etmcq~Ccc^_62f?lcQ)+7x0LBaE~ zRdT`pit){=!1gA$f5fw6htH-W1<$$@?N)=~Rf9T4;6-2s{L+n5$eN%>ko>dNjrHSK zQww{Gp)D<7pM@))!CP74I%ylYTNyM9)z0(k3C_P=7FAa`acvRCg`0Q`JsoXP3|Zz05;@X!C6&Q z>`ZR7AYme&l`2^EB7^sH8@zrPMxPA^)Y~BauHYB0({>8S!TC8kkq(ApT|d10!oxGC zkN8d{FRf75_k8}`3`wK%<67DI((ALSB}GLJ4i1PrjP&#{Kr{#U5^kcgzJC9}K+%u8 zw=pvn8A9Vtezn=b+o~k3L*DfKAE$4n;f`_1KNLQHJ~r&~{eunLWtT4qYCNU_TPv%a z2q7sIrK4>`#-AqQ73;H=+`zVo0ol~q+#UK_&nwywuN74bOgFxcLA0Io^74Y-!{vct z4?K07Lv}_MGFfs{3!iT>^wQFPxzn^{)cO?iRu)XgM7N*nA36Va6tTPd5hn%JbH3+>>+!OH~s3p;*piTk+%F+ zkbg!}a_EJ!4goC*q5Aqy!))}lQLfT0B~1Mqh?4HYIn3Xr+ULoV{FcG~H8z6lKtjr$xO-|pyrN5jfdL&XnDCw4}1Dp?r0 zfnHwINQky~lGFU{%+J6Jmp^6o&JeecJPDUhGEh`QdBnQ}EcVdQ^p65PQ*d!K>F*E1 zD}~v^Eq58u9A0pMswau#=Vi{#b2o(2%<6AfT&%#CkCp#;Qf6#q;wV{Xiv%y(+vDw*`(ov|w&8Oli!- znCId}Mm{DAM;R6D8sUM!!>y(15vI8@gB%4}A)y$aqD-dH-t-$s#0FGLJgYz{n~Veb z1C`vw)h14-h)SNQF5&TEATi&#&*Y$RTXZF}=`}vb+o=E-H3m`^hC6v(gM;fZ*#v7& zBDH}A9q7uHy)SU?+-;acboc^Dy#1%w6zq|_2iV}_O|jg#w@SG zjlL$wImgZtTk0X3?Ea%k7yr6h_>*hGMhjq1K+Z0c_=V`;6Lurp*!?^YbX@;R$oSK# zjSUaoNgTIvc_~{n@-}nQ0S+3&lT3WTt@GhQ@MY1$a60g1YdBw`Tv@kV<;~k(7 z*A+y0#F|zQXUpW&l#ZEnb%DtPkbF|GzcMbW^ZAG6w8NT(y6*hVRKm8Pu6Pdpb72z; zlAbpkG~%N6bh^G9W{BZ-wB8~nB=ltWjqr%a3Cai+doYlL*SC?1gQw0=-xV=ik)U*h zxL+VXwR!k6mrg|tMHCazKpr^6;tGi4W2Iedfij^~xAG`+FL_&of*K-+xOE>Dx0Ow^ z#_}}YzlWa0is0cZg;8ajl<`|SS=V-;$OVvoaINC;4f1$q#&c+TTkngs3*j0Q`oH`@ znIoBIa`1L0==@HCrW!_vPodLY1Vo(b@ugj?aM`qX9$)^U|YyPJRop1TqmF{pADwzp|0yR zU=q0*&A#UX8*yEf?v9I17M>f`t~e2Oi_54fGqeRc{Xoy}AGPxY>B>jM2f{bWZzPa) zn9>qcOV??xpr57Kg2W@}4c*L^)Pq}o@492KkWKdD)eM3h>hrw$yf*xYwwES6 z_io*-02a-HH}pvt=eSFw{c9OH7v{IR{4_)tXI@-BKfsxJU{Ij$kB*F_`I62)wHo-Cf?t2Ao*+|3CcD!ujo;ep%E=I-vtm;Kl5>5ZuU^(3??3MJX` z=Q`%_ZeIEtPnI^0PC-lELMJ7@GS^3P6R=01A*1gYCz>T#Z4$2;Z$ z@R4@LNEIaexRh20r+o!*+jYo0&fyccDoFV{CVNW75sloqulcWcj+&OVs?D(^bsRpu zANFbPVQ9eB5PTJWEv%t`qXm=K8?JnGxZ4?plB`e^Cdyz>i6 z@~o7Z`(6l58vV8Q1`~m-QRdJHVR{F{GO4G%`X*MZxhd$$23lHH-eH)aw7oSXDUuM_ zxilB&aid710!JzKeylh(jopaC$6F&wdJ25Y-OcI+Fib44*708TP?PFtjVVQc2)qkU@XjkbU-)pN(1w7lyw zUa^t{%*gsa%K0NpTtp3UYHQLHG|L*H>1#s6IE0kKubJ<37s-wlU1CQ1DLlk0k97`T zB@q$lS;LhtWx7Y#At2y{5RT#w(en-ok(DQ?5f+XlU9vA5qf@dgX6C#?`g`>Go<^>v z5WZ;%?X%8NV6==rBj_~fMl?sn*p-aZSbEur6x4#%aOG$xN1ozo89geo7fE@VcQUHn zSBti!B^1VIYiFD1r{Yx5@lr2~mbU565Qs2Tsq$I3;#E2)&N?72EF9+%it+-)xh8TJ zT}QO;YR&NMK!RQT;$!Uv8yodHTzzkxqd{MR9#H{*NsMKY zCo)khTE(d=UrlEDW2mb5H1AK+t@OJI9%-zyk^|^;OUY77s@TJVs-{~5=``VV+~(?; zy%O?HbzmfunncAh;J8Jb>VDL1R8w2aW0Y)j!nzmoy(WR$4@xgOK|CAc2_M$laD`&U zuhDL;`xeQkh*NXp>r~}GfBx)vp26M~?x!*c3Z2OMa@&t$zT`wqLOY^+!gE4F6v2Hf zBeeJ5tZ;>QdwWikck8y@g8iHhzlN!Qw`!(O5|OBEIvx) zqbKUccAb{n&X-=MikYqXDbaLtn0dnKY&MCdxH6}0ZbYPINz-{1$u)w6CtrBjr&?L7 zb@2$NS)CGGs}GpZEk8D#w*i-$cB|QJQ=FFqSsDmRx{fY>vl5ns#F#%Zr5~4|aU_F8 z61ZpQc+b?bJiK7#;cliw$Px^OH;(wc7C zQJ?Hb{W=M4;#8S`*?>$CRY#F;N8TW~mwM564jO8-|BtY@49cqg!oKMSN$KwHZX_h6 zOF%kB8tLxtlx|Rz4(VWD5Fm)UKAEYXmgWcV5u?(R^=zB0aFggTw2Z$bauk>idZc6~wW&6|pD zEiNHaC)asaHd5`so&Msvgg2ub)bG$Dh4rmHFRwAuN^#kau%2 z7?UWWJZ!?9D`Zwo$)cR67`mpHNzlAC3IQ~3wi5I!4}F`l7xYaC0jeE2>0M7NPrg!Y zJ=`Vyv^vo#?z{yt7op||QgKxbJOc+NYyZlS_N!B9awGF!_Wr9VEIl_g=yr9qq z04531*a}KNTAxHDgcBCER^puFwXD@NZ5G*R8bvM@i7K*FP^OR{+rsFV1{2xS?@-cy=A1$q`% z83o*H3`(fOX*;v|f(S~PX%U6cyd;D>Z)vMYB<@FCi}BAZ3Pj&H9(*vC-OdJ1KIH5g zXC=s=yIPcHnl4sEyc0&YFny+N#?+0hLv;Vk2jw3YgM49f^$^bp*RoHMNeFE%?F}Pc zUVY3>X<=PXEQZ^OX80eA(Tdsgqko58FDt-S!H%Ts+*<`h!8Z;wao{f)88RxiH)PEY zYl>NtpwTPW;imB?2R_m@ zS)x|KjJ$MP5lDW4*qXk3dYgZ&xx8&1cT@PYMqynhpG&IT>qbvLw-3u3j1Rfap{@h)5A%@e@q9pkJWod zV1(R1FW#rDllB+y{Ko2|4ui<+xCQa|b0@(seetR!a|qB<0ROC)55S9RK%=PP+8@Pq zu>=)7j)!J8QDibV=4;IUs08a*i#=2kr5LTSZ=-f@0*$6|PN##>AGPf=dSl-Ra;mb9 z?6FP$EbnOS2T=g&@oWJnQ!p4&#{WY6ZaMM04qNW8k+&~$Q45C9DJNK-Fz4jpzkI|8fak&9PA?|v<{M>mB9bXJ3(8PjnSDfzi*Faa-`ga?fG>cj0 zjSLiNNEzYKbhy)Y1+(?eEw#JM(;De`fam5ou>3l(vv=Ny6Y37WLkZ!P_#5cL0&9a% zUhubOr$It4@lg+3RmJN)iZJxjW~EbUABI{ItW3AhA(UW}J-H`-27IY5+EaR#(UVKP z`q%&$!iZ_Cx?4RuCwK0bo2pldk1g1TEw~G#zquG&`F0qkNEW)iyJa==$)98(KuQLx zQx;dv1ZXza)zxioZi1}`5e`l-+#JY)0h>5zs^tQm16+sNo9t<@+Xr*oKRiPdd8?qK z(!(%bpfuw#Bbu5opQmtz)dI#C4Pd27{v!=lrIxDHM`<$z*pGo2!plXF@IER*9k-^o z=m`R0V1Vq&K;O6qmmhdYfvA=eSihB87SjsuZ5;&i+*fHOL6hQj3?6qAip7ro&tU46 z*p3sZ=U=c>Q8vRqjB827=(22$mpBQjsh^LR1^>K19Aw3evr3`#kZFH$&rg5``*Pgq zdqqHi8yf1ePaG>SLuAZ|Hwwbqe%m5;F2oTE)Yx-!cPO_AEa$Au%t+3)I0;}X+DS=I zx5`n_MxgFiU^i%9`=e)w?6tkKLj~>KTOU$_$F9Chc~adTHRo!F>|!ctQES?K-c%!l760YTn4_bo%JgAG#jFiL3Xw)@(9g zQdbF##-{6^EDw~pltc=LqjW89f5dS|iHVK|hGF_ZB)VwF5DN75%O1HI(koz|l8Ff5 zF@@JeK}9von%C5$dcDptFeB))!}6ge#p!5tt>4%JG$iWkbk~5NAQLN$6SVUhTLC{2 zn81L9+@sB@$;6oow1erSYmXM7k;IaTe&NF{Pvl)6Gkv8#;MM;@fsM_MgMQvbJ`v99kLK0cw`G!t8`)z$Vzgdx!>LKGDo-GU# zyfruIjT)XQnB|u*Op?2-4N3UtI9k#DN+Xyd z<#4J9aT8elCu)^s%c4K)I{rF`JV38F&4IXoy1oq~Jxp8zBGqFDW~ru@x{&4K~~8F8-bScH6pcR(Rp_lQAuh@Mgn_NmNf z@$U|TpXB2LtE&QW-rB=Mz&T-90%Uh&jX_W_7MZl#%zz$C79<6M=b~H=r}79isX=2k z14QFrAR<&Wz(^|qg<3ia;t-&K1!fp;*EJDLTE~A06N1w64CLr%Wg>Q9!gcB%`@vfK z8i5Ynz10mr5CuHX&FMm0`_MQLmdllrGhV?aa1porJ$aoKsIttIQ3UP-_3P}XE^4$a zw9R>}Yp!XHhb+bwNC3Q7Y2(w5+U}YZu%N-Dnn4Zj8!MNjjYC^UYNByr0Fls~`FULt zF2C1`)b{!K79vFi^ls6;GNPZzIs?!9N?)Q%NS1p*<8W+__)uk%=EvLQ!PAmzbo9qKNFC@b!=gBF+48#G=g-0Y6+E95L>9hm?G3e%E49&ibm z5FJWulklRSYbci!r2Rh${zAH-h3T?d=LEKaD6^gjPT`2OrvV>MMgwd*#V-xO6_Lad zQ{)eMzHI<)hOJ4oU zr0<}uc$`5&y#WoPka~?^_acqgtcSvbiiBj0qRZ3-gu`AV>JYCu#Bex=4)A;g!X7sp zGNIj85%fQ&D%`QqQ$0s*W~3*;(!nb0Ezb83lF4WW3pB)Cm7OKdW<9K&=1(#05#?uV zyr#F=;ZMfdpm8+FcWOa^_l#8*qvaB2BP*)cs=2BVBSDTQaVBp#+o0)1DaQmF>?ha1gT3bU=52l*cz%hg@;;LrU z4G8vdacXXvWin8s3lM>qMhF-a+YaM)-MI_0)hgV=V`v(EXb2c2L(f2_N|qClHNf;9 zVXLDPkpG16#`HjND1rGHe`W)ZKJsTz6^)*UOpw%JHWAUL2(YC}pTEgW(`BKFg&S#p zFG61iHPa)r2~0AOpH%7~eib-jT_lwUAQt*=ikx}F_B3Q#B|%bQ4qq&0Js0o%&j>{j1~`C0C% z5GqY9xu~Cr>DCaTnwr2Qv!EaW_`A{ho@AoF*Jy9bw$nmFDrQP$2K$U=^>2eb@ zGjkKMIQ`lpNC7HUN_8`IT(+FkX_{s%QBJz{+tI3sKyF$X{~+u%0rd`+E}%{zC_w9{ z(4g(2ju&--7jDJi`bN>&&ptM|mGZ&60wr3NOw{n?pvvHz!i`DsK1OJAje)tfuk&6p zQ5098wVdLlzs2uZ2i}{dobWx`*F+Aq@JM8+Ru&#nm@(lnZb9zU0c+C9gKI^c;-6w9 z1%d7;7*T@W%@$ju)kZ@XV!FJsY7?>UvIwj~OshIaGy@&u1#2=Z6-)0-qhYckWEeb3&b?DnNf*gwLA|EzD<(X~N9`_7j3jkNl?U2% zR@^+n6uqWQW_7ApE!`Pj((QVQ{PxuAxhMs><3QBxLhJc-3U%d@K zDvGwQz3%OGub~wa*KEK@1Qxc_5~WO- z%Sd{!%dKI<%Jred{?T-HgT_zm(3RsFS8svC~v3^`S5#e)v)%+t2O#uRO!-&s6^;H zQhZ2vsq->7Mv$1_lfVw@y6P+J}efCvryHeZ9M?O&(s6^)+DE|5#}g{J1j)3%D)5 zgB`v_12KY0X<>HsAo%ui{L4PK)nD(^wX-@a{9k#1Ym8q2E5|4%Miwo@sT z1k4!spmBlOnB)##!l^nVx9a;cUFh#6(A%)vrdJH$t7Jlp{Glo~b5DimsknnqoGK34 z;G+e>*4x%6>*TNKkHJ=VtBI_1QmnI2OMLpD4xg?L*yG6kt+o}G?yp|WRStjQ+6Els z#__BwY1wBGwWyn)4?ma_f8TPskjBccUD?dz@ORv1CYPS>Z*1hxX5;Raa)zb9?Tsah zRs92ow6t#5nVz*v3tb6Dt zjN^!^iLtY*h@H{?0y&1}ytG-0z%nj&2RZlx{{XX4BuZs zvr-6b_q*MjN)~ocYO;&QK-Cxd{4W?4|Jc%somAZKx>$bh6?upI(|wX!(T;MS-^tdn zZ)Btk3=ALE(DAb8WmjNpMTN@A>gsD!Qtr?HB0nG4C*C|f$f@LJOZ^47!;0o+LM$xe zQWgKG4>{tUG)zoF0s-ck3Cwg_3Gi{#n_N#tACuBlOS$ya#7-S+5zX-@Gh%MYu zOeq?uxVqYt{!Os}$_YO|e(9hp5F>KA5<%BMlIGUv5lw>|EG;$3y*wM!Ob&(z575Un zV21ui0INp93ygQhUozl?<2t=gPuGtwcJY6G;hmYgIsMzt&Stormx8;w+hq52-xH0W z+~g3Cfu{7g>t6TbZuHZxueXV{`-wt+k)Dgom7;2oYy8Up?~$Q~wNJk01(jSD z1Fzro2k!g%2dNOV!QAhLPc(veQ(t&*+>g9!O?s2ty~!OG`|kWm$RRw8`)X1>y{!5S zB9Za_Lr10WUb!FpG`k)3ihAeT&7XqQwp@m?^LZVwEk|DXX!>ed+sEIV)N*7Cqbk}z ziXTI|Ho5`_YiiWJT6ooDUy#WV7PbdFDOaE5HKG~ytnSdR{-)jReT%nn##?Y- znF?fAj4ATzjf^FtZ)2esqucKtKRviRtkhzKvAyrPVxcSLpbKM2c3vOL44s-%_Y-m{ zwfidqNPLZG=U=mK>_>ZEmpP?UU>&&7TnyuJl1K(MtTkw09}=#d)r7E%R$O>lF+h5TpJLq1juQnfS~ zZ*+1sSU9GWZ3b`f4?BNj5@Nf#-b-Fv=ilu26rP<;?(E{<>>P@8{&#y+98?bM%m?9* zkKTYfqpIq7(i2J!9NO;BB4NJl+%x0fM7C4YrkU9%5&}qySK4geb~tT@f79`Ab{l8# z_AfOgDi^qfcu^pC*Z0k{aQCusa>pD^(~gcEFN`1NW-P>izYm{l_!oorxy)Wo{eBhL z06^d+G8HM5i6mEqF;$VKwPU2jF}$az2cQ*8{BI~=0%Eq4YOkUmTzo=34DbHUj>?xB zq~IOrUmDRwKt*xZnZ}G)BDsF~}>;vDYL4P#HG%%dWL9#$<9hzf&3L1=*3bH$aU-CP;*wE=k^?%9vyPE_W_@mW7 z)!ssGUWmF;d9cyXfLB=b0|E$$;NR21)K8sd>4s!3?Lp5j&dzaUqFx3C47SGMKY#u# z{m>%uTt4?G3>{h+6M&`XPi^0QHV!c6{^th;@qVI*HQ<|V^Io3i!5BR{>(;!4^V6QL zA=sAxNn)tRfxxEA@-GV_(cx_IKa~t*r2y{WAE@{L=YIyGK6@c6 z)Y%SSXDV(i#?C)Ohz(etMpvJ3Ccbokmr{ETk`D_&4v4yIg#fSCvoVC03&@j!1=!!g zVb21SQONU=|E>Gp-_KORWsO!h|DCZOL_U4V)0hyQ$Mw8$kO~1zK9JGxI|xSHaY!im z`Z)I8R&u1i-adM8CA|~sdfp0>tHcLu})fdh^NC}7w6kQy5u#9MyK<2+AcZfS0=y2oXD~?osuO>mf#T z<2nq#wx&a=%e5~_#Z(SgG>75*(BxP@R#=IZ8pXB7g{X01e?R!zWErG8V?iwkXmmJq zN-tnX6kxrerK3~N5cTHU#ni~mBn;8teu2=WOlA<_9;~$90Narz00?%=!PIqynXsNgZ)XQ&pK?*$z+Ygytqdz*t1 zQW&NsnFT*Sn6Q`tP!$QY*I9}}B0@1|d$y3XBH{3K228%NN(t@j(S0+l3?d>0BfaU| zw3LNDU`wxhUl)d6(hWi^HZcyVWz*O;B7jcLSVo{&IxrLP6|mI~v20rbFYx*WkO<5} zeMp(8^vB@whZ{#CNClq+4miG6aty}Bls~g_8D_yLK%!55E!9hCBL$=u1DOX}<_(Zp zJZREjE7`zCCgIJxwQ<{`97j5acNgDlU?EA&4`?>1K;&`zXFcrBBf_Y$<~S9D&}RC9 z1?Dm_D{EAPB6vEK3$|MrXgU_9O3(oJo-I>d`bKe!I3+M?tO{y+f|UMK>MTj;>zIC$LZ~&xFk5gbbc|msq-HZfw1gyG2F%XwQeHanv>vvU!B_E8ij`$w^N`^4N zofz0m3MWI-7=nFj9ZgXm;Z3)V-kC+XW^x^kQ8+JWQSP@7`VA{46W3Mq;XzT^73lMc!0!2V^?*xW7Y0xWx;#QN8DJU%P+^c^ zZ2Nrhx+BRB#G>+JM5~3{xZdY(+#+Eyn86-$bs?1Z83;ButBqWmRsm=6f-4aRLoX+r z@xeaxc)~E18DAy08vC`5#rPGp9!Oz|xPRAUN^@D%_|HN&xZnD(fO|3ZJj>U)e7+1eWkuLef&>A0an*P(Gm6H_>ZK?OIYP`Z?T@S-pVticO zK&$CLh5$^$#DN&Lv`7*m=Pb}`hkPJ9-{Gkdt~Vd?&@7w=<8qvut!2%&Tu=VyWGB=R zBn+iHFJBxVoH>Z3L#hoM7IC z4|^}dUji+~V9%_hP@!PsC<_ORTf{x^00ZC%;=Q=XDMd<*A`uW}WQUKX>YIt-HoQ)M zx(14c`r3r8;82*gW(PvUA^-zrq(FeB`GUmhMq<>IMtm#C2ff7T8BoQ!$4OGQ=1eFE;8i(VTJ@TuUJQNUqe@ zy&=`)uU|9wkIj#OK=8)LxrM-jjRy|2#;|?N@O3B0ZXV-@YG`uuJco`ugrc4?%n13n zVQZ0hYIeK>})=fnk`{JbrV4C2{zW;RcBK;H60dUH;`gxA5gU zfG>Ld1)Bjt#6v}uCJ)<8?O=FAY+lHLz~YeU$n+lPb*zT05eAY<=kvX-tj@iEu<=1b z3kdRWeAIP$#1@VYrlPSxtdU)2c^Kj}f2dX|Ps9mtmvp`rb@KtCgF{W=pgrS&s}dkL zV6%^^4)D7E@X{TVf~mLW=G1U1~t7Y!*^&*qvfy6sf zN+a4P>04Fvh_V4q7RmYM@4YMoyG_uGXK&wMXRY+$m@q5FKIU2`@cfA6kbme_wTRFqGw;p3TMKC|rgTEVh-&(|wW%6{fF`AL52%^=S7{sAB?M0e1aT;7h zCG8+d_BQ+FZfx!`tn+aS45Gn1GAtL0mH~bqN_dUII>~Nsu+d(Bq0=1j|3j8$`rYfBvZk?NW3Y86Ir7; zgprF8YIQd>yqc7=B!+k&v>1I7syO0z;9eg$9Qhq#6)88KzU2 z9&4;oZB+@w-xC)h*HbueYY)Jw$>tiLL``YkskDuwx5uGAL78~b zj;Q{UCk64|%J)n-o4?C>vp^4oX@7l^1u^1?&H2wZ!@qu)s|DL_GAf5G=lGhspOsY$ zxCK-9YM*M~8XysDm>WeRS6iaR>8O7LfCMuJ-B+&B!UJ3!(gTH}fs|DwP?ZTZSzD25 zJZ1t)Bv!HQwHumA=G25IvfeB)Yq0V0o>)uRPTZtH@j%S#LMLF5gKzC?OG-)-5HBCE zkf1vfROI4S!VKEYc0^FcL+0ti6wDsO>YPZVBYA#)I9X7bEkaN3U#CLR5)8jJ(v%63 zu5^7_>k|B*B--dPP?LK**Qh!4MDQQwN>~KY=Nka#99vc0^1%^2;w^lr2Eyq36`d8` z#|VhKTo;6Wa7v@GYRl$f{cv6n?%0eG?k_d5>&GjaQV5x<@tBE5x>J6rM0JQ$aw9jB zU^WnUlR>XQLzGm)@JAfyHhqEU62`@4FvMpNx%KC#AX|9AaeS6CRK~=j=W+_l7HgSA z;Gmjja8&Qp=JdGS;-QT4VnC#p)5l#)mB*5;j&Tl&JdXr;m6sPx@|F6%)hZ_eN+I|0 zW$Q^ttJ5X|J!*W2ow0cR7TyFPOX@5zW)lm;7rF3pGO>g#m~eY=W3U|KruA<*3ZyJ( z`(R;U3RBKf8_U3G_cczVsYJN<@MF(y5O88YlA&|3enNZbD_rv)=*dZXSHPiyoX%-h z8KH`2TSlmc%GXOBhc>-tOjLw+9W&PtdlA7l)R(|egnfmZA#9TyAOFfCpn^IUhV>=Y zCXGJbY{BM19QKB=@(b)xUw=9m?|vw{1mPYF^P$?Q*S#FA5{`E1n0d9}H3IeKZ4F`u z3z@1O%!ng5Mxv!IvLy3Bl*;;R@17Lxt6ry2-9^ui&Rl zy9MZErI9RAMyCmEIE0)TaD3L{DhfEoh~ODE$2}FYB{S8k)kd;u2YPlKgZ5;h6kCG( zU4B^0PDWvI^IV;mlBA+V2_}WBS-QD~qY3;#gDcXA6dSShU4O z=YMDPQB^mE@)k2Q7vZGD|ChL?RcOGn)Ll})DOx}f7*f{#2;vZw77^s?=K4;}V>ymE z6QQvE=xVYsVREW(7XueIgXe|aFf}Mi`XEs?-S;45)T?6BQeP%~3>w*-L9hNKbEU=D zyNY;Uvxvl&NG{!)DnqA*r4Q!3(8&_;tK^!Men}JFy~N(e-=22uc&spgTTgcT`t%(2Ne6pQ0!e>RXHu2!<($&IFza&XM5Q3sStj zP#XN#ei{EQ(Dl9JNCq@C$+vMb6A>EvKA+d9j>{adNjNC;lwg?JSiE5~mJfy>8Z~93 zS!;!rKlIy*0M+G?dBC@IlpQf*0MA@#IdJh2`F!idjd zjg%i`O&Xl0irI82UWa~;bQ}wd$fOA48w<4*a8V|&VL8vlZybkn%F5su!?_zvgbi)P z?lunRk)V)`=5$#Wcn3#|7Gkd}yg(73Pss#!ru+RcT#~YsY*q%EsWKM~9->dMoEnUq zrUIHCa43$f-gH;5%LAo6M#yFY;#_yryu8ld?l7x-=Q7ODN0DH%iQksb#44dysW8X= z6}%i(Bqs(ovQPxGemoeoVUagD30j{s8grDPnM0=mWGTi7m%X()J) zsIQvmA5&>f3emBxKmFFNOFo|UAX1$N7?@}WR<7u#rVZTzfp zdkSkWMaCK<0(IV!b3LaHoO&r)Q6b?sX=zi!;5|$7K_2>Cs=#7p9~SLChDtt3jzl=% z5@imA{}ZQsHa$BTeT_!Xg%!6VwKN1bPk;`kaE{AS$WyBRu{l*fvOy!*T-HQLL`q;6 zBa?yR2*4L-4)!~Jp!5Yj&uIj4w1`)Z22wV&#(aXXhVC97}4q@9*d)G4zK6O zm0Fl(m>L{U^HkQiwACYRQ9Oz;O|#Ll?|G+{x~K=^!UP_?ZHhOWKO2w*vh26E1+tH0 zN)hX1s#B*@g)0mqv`r(tEkWD8)%=(}GTjBc{`-QOd;1a=((N=Diiybh`1Dti9#O(M940|SHD3gWQxp^{c@l^Q zC1sGR)JvhObJY_JfhA9|qYN57^;r}KbZpTm)L0c`9a3w1V629{_dAy*mb1G~Ju#Y4 z0(EBm?*fu7m^^<5T`^)kfijbso&A-RS0M=X0ZR-J+oH<+P3Z*hqWCeK2tCvpN57|( zQ%zy5euMP4UJ)M%bp8GPb}#wI$jC^LLKF0VZnH^u10%0+K0Q#K8r)ts zP+Qu)ieD&w$y&w&uj}Xe9}og{765(v8-$M%irB>?hX_Vop)~$C;;QOMrx&t%eGK<^ zl=BGomhj}1h&wDHW!9L(EQ@m>#@B8&`H%*eiIQ~)J5^L_fNdn{dtqoL778zyoiu|Y z&@@Ucem(d;&vg!V&baOP?&kc<-o0PWyZD*s{qy*s<7CzM>BqwzWI_;9xk#({UhiAQ zg}A@Bywi3Z;geO8JYD8vr@R8>{m8UXYUA*pc(M}L@D@Y`W#2!Y#lj{>-Zmcs;0P}; zj!$%%m3D!>04=iP^fQQM{ONt!3D>ascN9#&yoX@DQ1!Qv-@^Vz-#2?cl6H=&r~NSu z>IxM$YO8lH`#lYMMZF-|@xn%l%rvjPHV3i~d*|bMGpq4X-GZxxxMRv4QtpFE0hWcpA5`O0M+|s zcI;1(PR_YX?(F}TEBUkZYtUX8rq8R~xp@ZRzcahz31^F>VZE0jCrTL{CO~5HwBDiF zgYc*0&i%ZNb?ES@YW8qC+c(4(vy4=w|f4#&|7$s3o?u3x8NVMU8Xy{7TM$ z-FRy#5u8~rmM?9D=tMk2p|x;}LBS_&7r&bRdPO^EkqOKwr5a9&z3!U;opo!UnRonG z$14vj?yDst1JeSsk%K_zA=F!~Z(Yzy(tyIE|{cHEBJ zjp#hTdz*T!Nzj(}0@Je2!er%@jS4w<`r7`u*C1_&gXwDjzDZyp$H;W3ru0T`+WfIy zHbv(Np14gZHE+c|02owG+GFD*_7e z_o>AzJ(8Al2?!tO@mpv-@ok-!pLD`tI0}f$hw%%Q2?BvL1HONABH?p??yQ*;>qAt8-a(zIvbCjOsmBvhgT^8 zFH}OZdXc(5NQxF;%^(0(3Fdzc_!ku}FRB-!kEefdTL7K(ia$TO3iWcopnnC{LaAW3 z##m^UKpRp|7X(aJ^c%2McM%;yFBbilVR!k6T{)qyytn$i*gB&ud~`NQ&d(@;R|gW6 z*l1g3rHcXKZR73W^cTn!$k`QUhgmD7K!wRsQa1$6UQCEXz)e4kuvkMOwN1xB ztlZI6l#FgwziArceUq<>$XOp_SvHkf^!R;ovN93xM@@-DhAEatvF9U?6vXn!S?o`R zqPR9nuQ+;lwRApwzS~X*w(6D0M(ruOWjzVhsBBa(7{9MDcLmu@U&7G{rFwbi40@Sm zxxEUbW75Jd%9pR?v${m&o7hSD(SB*YKF~r4_$a#__e}1w7Ko!P0ByhZVPQgG6Rjy3 zB&7n0`0r;mR0_tT*;@8m4t@ylWSDV$W9s@$>TV}=HLG#*b2k@=ik%=ereo+?A{7AZ zH0yo!TPK_zAe9)Zp1`F&i>wTi-H}}DP#d(y~ebu*#V@Be9&u6VGFlA8uybN(N zFcslweQEN`ipOSbP#6$oKKMUf0q+-%P(bOUUDFEPFTjJ%i!cHHtD6<~JUi@V)#KB) z=lg?=cvQA#iBYq7(LebXT`K~gw?m#ykX79GCc9GvNy`Q9wvsJ!{hvKM(2xq?E%Pxj zjs!@~U2h4>Jvj5d4r>NI^l!2HrJ7fE&+7yIZ9_XvVAD861KQ6=n5mRgs$vZ%#2#2^ zVNlBg5EQ>kbK4OhWD=|pMp~5Jh2k4>@VLuUF4?#2)2W(&zwY|fc?t75&860%?Q8&% z+~@SP_mu`l``4}|xP5X?(~!t59TVTztr}!|tHl7f?*s0OR-?UV8=MT?Cqy#9gpugOmObM@{1AL(~#IIu{=K z*pnN}0fK)wM+A@t(6?a`&>Vv{Fmqgf35pQGiQcLbMAXBTM)$| zEcKxyRn*}7TCa^-s7$q#EaV^>Dk;-25l0nTlMPur)Rik@;g@qOX20Ffz9l1i+#DAb z$Cs%D1-}bY4(vz{am?PLjI0M@SHNHy<;z@+H3!3Q z0LPn6X?*%&nNigSfe8~;F(S_|V{7KtJpYTZJKJfnHh5WsMmPHjVKA>X70bsgil zmf6OjUn@ZsCV}TaJk?LBuHVr(AxxYhYPZ5j2$e|eBF-H=z*2HF%HCPu)`FvT7^wMU z`6(A0{Z#0}av~RfBP>JQzvE3PEF5&e57Z2=5VH?Zdc^ao>jyb(+~a%xzKQw%#OU7_zP!4aq}{1P4<(v$D%z9tvM64RsaH}MUKYPts@2&t zAMTkarS2L$c{$iU5xZkXpcLfq3jB#zs*J?D>LRVRVvrE>@ifu`(G@A#N8q@{G!Qrp zss#0;yEt1cY`O|eY@bJBNs2Z-La7ki8KAjg*H^kS_VAQQtlMQkf;Nmd3AAMNUx zw5K}DK}0CbvBpGuCSe|w{k z-2ZWE0<1VMxV>8+#d44JP<)uo$-qI^PPx;BzGR{}?%x^C6tFBA!5kdu>N?v92w&n} zW2^~%4pbwuF2!MZkI|eWjNGG7Cm4v4v^K}Nc9w&Z;r7iX0U+{Z-@Gg^xTied>jfCG zQ%55;q!6qCXHhA2cU=3S(%!PQ=`Y6bAL9D)5PnMKZ-Y_3eZ+d??xgdZ=An_*Wt>{G zam4%>)$8BE-J^H@J-eB2nRd}lCRoUE<5?G`+}R5{4@)1hr2{u&LzG>DI3|=_$7sXEAP<9er)%~W;8i(O*@WYWK zZ->uRMJC&g1WH-tO#0zh7V>jt%%~{8B69ffPc?Y@2oj8awUU>eD4d61e0ms8aa`Ce zpk87AyXE;Y;WUX*KM&>os~=cP1y$%HoZ~*Q%LOwPmHS?d^D|-*4u-=#+5smu+Qv< zv$ag5LW`J$v?E360kU?BF#`0J8|k6EV6XH?z^LYLlorU`2s^7bc8z14^L6Tc+l%3>K_k2x!~aq%F9ms#9SIs3oZQbhvAYn{V7va$Jjm zm72`29v6BqdT#rt-uNNRjY51J2`#NiN87qJ=B6z1uM`9ijEi|CSoPTeLM799xxv15 zF4TtQ`l$=WYO&}$urc9>Uni}fcVe+Uftm>WDwVyLW(1?@1m%(MavYHbuZMfk1FNhj zMTD+NX?a_Ka$Cb2ux|XpdW|FWrvgJbzjX-n-UbQ_uR0=G+%LzJBD)`W))meSnw$Z4 zQtEX5#4M*SJZMDZryAHb@UVb~M12kaNdxEPU%w_SXD==S8o?x>N(k$NjY`fa=@b1{ zX3<1XUPv!h=v_t?f{hq!q+uv3_J_C6o}QsLgPQSQCpG3{q_q~szQ-mp(Adb=C&oJ` z*)|vtC(*Lm!TbX|hJY$|*cv9z8D}X-NNY`&2=3|@r`x0oH=gOpg*~Set0+^-oUY(1 z4JI1;Yu0-v`PKlrln|+SHDbb**l%V$rP4oR20kLU$!N{LZt&X2eiJVGB~j|4{CAf` zfr5Mdn=mv&etQG(T;C}9GH}qEq2rkkaYfudsvVp+2#91H{pQTE4f~1_rUBWQ0eLI{ z?h($T5H%8;6qURpNxlH@v@SPvB-NHstG-{t=6lWKY`~L=XAGHLy$)F+M=A9u83-`A z!)rnZIt$I&$~We>P5IwpwI1xy`-C0(OnI@z8Qc{>oT*5T%hihRua8EX5E4_MC5g8K zpGV_QMSN_)$dQ+Q8>lo>V%s0^_gzE4xB!(eh)Rfn?PO4Z z75A|D5i%U`FADgDev*-d0Eh?)por>&T2_1esA&~p7R&?MF33zyc|I_B9B9@FQ_j4- zLEc;)dHK{Yx4-6Z=-U?0TDm*M+#4>*d)mPvET)RQ)}efP#)0D-CJ8`}NRzxcV`@cQNHKwS?s}E%(usWzmX0q;w@*i_L)bDeuoum8ppv_Qe+a|2}?)_t|^5 zsN+l4W6c@fcK;Mk6rX5ix#>|-JE*)Nj`!OIouXTnB5dhEmLNX<+hU#dCi?52ac~|j z7aQHwwtK(j3H}_B`Bnm{W9w+&n+wN(DwTivWQ|k=yl2OrY|lG!Mm;G*KQnc;k`|fY z#OeP#ZjF8+?^!YW_)&|bX^5=9wT@K+Pru#eZIHluF!9JD$ zsVwGMCzI*-%C~1v{#Ab0JXunll;Z8wgA=`rPuuS39zP)YiBAX}xHh}Ji#+z9OU_q5 zHW>YAr~UD#{7rmE)3W%d%~ew0E;W2>mkH{L8|J;%CrK+P`%P_~ip8CYvP!~GJX?oq z-(=LPBcp?2`_Wjf9SvDXs7;oa_pBhI<;QG~_vdyO^*&1oco5g~D|d{Jr*5lz^hadN zD?PW>*7Z9_k6WkowX(cL#ngXfGspLxSN<)F&_J7Lm4P`4&tnbQgC1wYRC#QWx6*nb zU7&rx+XGH8-<6xtWo2%Y*!5a+l>l{4RSRUUmAo@4qX-RrB#S*=+(CB*C%a%AwgvQ z(N_wr%CZntIhU|d9EW99GS->D<3IoJDdf@Q_T9zWYma+|q{RDZr` zoMSw3fmG96D=j%_G%Y@VPf^J_>qpR^J#_u;d%j8M!(n_nDkOGxc@U58ZHIUX`S!-) z2vYxbMdp?1QoXl{0^5_lW%!Yg@j;>)-AA9PhNtwp?_=N$plXB?jV~G6ZlvG%ng87U z`8nr9ob@-K~&OwP~x1|1GFzee)N?ryfUl7+SFR~x(8-RysyZO|(6 zEmbW1MgKKtxpq5^Pl{cV|7J; z{mh5TNfhL6_W6C1NwWk;M<9#!F3$ZbT6Ts-Z*II(Tkmk6&J)fw#FEI*ANAuge0j4S zC&c0j?PpfvAI=8*xyAC@mmO)R-O&9zHWM8>xUY`n$qlCux}W1a-~KMH;BNf3ofuK~% z*QbT_6|Kv<&fN51hu}2PsON_+AGtV>)-W0UxsK~N$*+F?(yhfbq(3;c?3(v~3>vyD z;neN0-9C;A66Lwvt&A>c|F<3(JfB6YF4x(5TcmCs0rc*#*Rqg9yb$Jg~nQPno z-}@i#E04!NmbBQhx7RJjzH&HUDoPUXJ&g|beAUj@avZpI5rG{$`f+4W{M{1Y?bY$1 z@AY=Jd#R5>(sR>~i&Kp%-Aub1QQklWl*aLRfgir?+wI3*wbr9w?r_>a6y@nSh}dt` zhps-UZnLvSGtK(=F1NaLJXs!T0^bN?>|DS^FGf=Y(JJMg@?TOseoJ8sKT|Ig+e+rAt+k@@W5^x4g9&}$ z@u~f!15)$PuMGD6BqY(wAV;FH+M!>4(jT0yswohev7v7~`3xQw);@pnZp<(96l5WH z^)b(Pf41IXW0rC(waE_V4nNSN<i;U->TKT$(6=+ucE=Y=Rf%7mr}MNN+Z)1KcqME zqVv7LQ{BQ_A!N~pDqZi1mR+02+nFL9bL}7T&%3`MmZR;;3daZHSFEH@ibM_{_+Jev zeCA)efEywAI!|q*4P_nu$Tbe`z}!F5kRyRfse7FUi|=~$pEW+u1?-+b*O=yr9^`^@ ze40Mbn_Kd?r5sBU#1>^wya~Oe0P?o&pDZHT{G(JX_dR<`%=3kf)@9Yl10kv*TE+B^ z+k5eIbAyuSH1C|YwWSlfHsL2LYwzeUk`VC^!P6ZjWsu_0TAz}Z-`C>4Qycv^;%DkX zzg7QxOxxV+?2CV8`V*IMIcdhO?6?=#afh|y;HN2Hq^(1D`mL7hey-{AGLNpzIQh-< zBF&w_AyxHi8}2G03-NH2#bxJtJ>9)ZhhJ^CU!->`Osf|0v*~V;*qzTczLD?K!AhKB z2SvLldJ{uzR?Bhlr%)nE$d$eu`{HSU&#ImCJgex_?hkF{&;i0H{FjTVd3z2?52rEO zS4l{Fs9xRB`~mr=uaU;~wCjK&M&12)hc`}q7a?}yWP#twNB=j*{fW=^lMFF=O1O1b z>&s!b^9gPh{-4IqDlE#dYug}5igZW{NXO7fiL|uR2+~~=QVI;xjdXWP4G72(0@5u* zr*ugVImFEO@V@`?AIG=%vBM4)T4}PPF0#3gDq;0$S=dQ|+>Zw@q zR7rl04JyHfc*2klkJ^RJ3#5&bQ?38xcZPt=>7~b6Jx%DGQ!lTgTBkJ-tCRZuo40?L zyzOM)8%=Za+^Yg_erf_Yf68d@!Km)Sd5`Umo4%gF`RF1x9qH#+zNl^Cv6kznzr;WI zn)W-UaMv{w5wE1uES%!#l*iZq&8kUFDM)a2b=OP>;__F zv3>i6XfKFtZI~H6MA5U%E{W6*My4sOV8pl7mOEe+I4YtXHGtDnIz1t+$Z)Y;%*w<2 zapIo}pW~;Sl&m8!W7*Edsp=Ngp7b5`di3;IF6S<>L{+H`?&Y#aUD5o!C@`bemG^{~l+GCm9`beJGc}O%yxNZ+>VsjkU~}*le+Sdwx)= z;xjy&=hrb^;m2kzS-WEM-d*0DI)ZsCF*@~% zmz1C?2)IyNI%VCkUEhuFWAGi~3qyd{E{w8z{ysG$8HVDV%-oemfFcyY>J={{p3KbG zz!VonbMBCArXU08+NF9h>`Ll~D*Tb&;g2*F(6xcE#qHKDtKF@>3G)A+7;6yfR_fFO z{sLM~zrnOuEYAccH{bkh9&WHHWo;0?fV|#9WzEZd2Ke(d}<6r$Sl!k(K zXf3OINot`LoTm8GFOEYm6?`L8tzTN7=ap);-9Z}ua125+Fy}Di&{L`%=sp{-Z@Dyo zoC}+#Y0c5}@xBRL6jqa+qrC^v0q8QraEnQv-(Rr9&MR%{ySrukJfyL?pReb$dr^tA%q`k- z=Yic0p@%E9P9_BTdm;+|$H5u0W>)Itp!`&JnkOl~#=Yqb_+9-jAeap*$|zl$JBNPe zyZ{8ClcFpqCqGkjA?7OY+TO+jubG)DGN{$e?4<_P;tB%Mg}Qm{N!x&v(~;BrP+3c5HIKoX>!vr`;Lk!<0iFhaB=7D!XSTM~Qw(h%3SSH|-sQ`(dk5Nw z0-O6(+T+6L@i<<#UGR@mXQyKLE|oBq zI1l+foafQLy%_w)tcKp`mHb1(jbJ1?pt9#=S8!r ztU=T2_YFR$8sSaKCzRq`Q!hJgO}BQgc3T%^swdkA8E%#fw=cX|R-QR6+*C+CmE!7K zs2>v>yn3%6gZ8t^)8Oa|`RCZ}qax~ivfRzbi5pJRj_=3g%TMjdU2nASpLYB$L0n?z z6!`TFe>@J@HGE6PcYDZayDjm)u-f6u{~&bf2RVb=U5USN?_u`O~mn z-4}SxEaOl@3EGb4h-^elIX0!a+a1()%T!1Ithg8$f2XHd4DB~})(a}HPBP7oo2I#3 zpUczmjzjjh<=jc7$i?loD8+ig+~UP|oEq*EfU>qkS-+#6#qZI)_VkryvnaaJj60FwavUpdA}resKbC@Mg^lsx+fc)kCa*1BFUJ@(jEUU?&| z`R}LcB<~QV-|cdhA0nvP6g&xD9gq~SWTSk}RXUnaY#Fd^lh;)v8+*BYWNczPG3z|2 zUa6F)q&u30au#3GKcjd7b`pN{x2wULCx7-j+r=Ar_Ef}*QDJ2l?C1*D_MiKv_3V+N z_>=)xa*QL2aT(wIf*}q^kW-!VcUQ?==bp+ph`7{ zwZ9xVH`4#Mi|+z5Z$e*xMJwhPJwwh8>gg!H0!$>CKTPx;E!Zh&ynjDzZKpSy6FC6 zJDMSVx*Xq;EeP)0sbBPNl|Xo=z|S%{9~zuPtSI81f11$l*9N2Qk)J_UPAUuUL5H_X zZZbogv2RL8?hWbBrLSI2rK1q94}Vv59S>fxdlPaUv|jw>>8$C>WqY9;o|~dK=mc-I z)N{Xu%%n5SrvFTtN?ikrmiZ&t3f%{isPNpzy`%nnr`ytp%UpQy*xOt^UFrO3tVPjL zh~`Bf&B3_NO7*3CwO?P#jg<(WlNc@KAQ143)<~uaKi1N+LJSI*` zDZAh)RWx$eJ#LsNf}mQP5__yZajrr3NFT4>^ln%g*thrWY7K@k(uucoTw1PoD&brQG~dU!s7vIXGyac*A7EVczlK94#i%6lb6(B`iAb~u zA4$5%D`@%qqHE_1@-4(HGU1LTOr4Nxo=es6hOms_va;oP&)1k27#gDXugb`r8%<#% z;kFMmG+ptk^7XINW9bc8HwWTId{N_!)7y~e zzZM`XI5>egDN0nL47%{RchU5Hn}5^#A?U%xdpu&PaybAV4zMNJs=D&+-Jg;}Zcom}aIBhobojpy#p| z{W8(n$|Muq0~9%nLtvYORKS@!yhP)(Y^2F?2kMn2U}V9MFJ%~w!1~T2jy zfOzE&gB~Mqg1)hvg0X=h!W6%A#cR=-FBs?emnZ_1@U*KE(#{ziti4I<7lQc90L8|vG+91U8?_!i zh_Ybhj*sX!ZXomR!6*FMy9+DwP@hpC?!jq>6E=I3?>S}xhBRC2t#eRz$7&G%<-Bd) zQ#$b;)#fjN-VS`?VBp)!s{NW)UVq#SEjrT&F=#DlB%C22ox}qgIS^h9y3!Kc$@U0A z(Ppn@GZDmWy|RJ==0t27HzA3G+Tc8xH6X+SKkow&_crQ!h#1`#-za3&dMPByPAG?x zd4bG5B2(>o7-j)erx-fRPc6wSfr(lC09Z5 zLs)3*{70lAg%aNJc@uSbx+#2SB}G;wOo@H2Zo~1jXdL%kGL_AGk!EQ)-`Uhvkb}kD zDH9#qq|uUqzYCC8giMYt^)NvjD)$HVe}>FlbTY%>R8l5_#Z0ojGl=kPV8JDK1CWv8 zbl{+s^r`(SNlgc-#OtJ-0Jqr?tuo1~ocJ&8c@poJ3#SR)ZJ9GEGOowugSVy5$K{sd zd={8*DDO8jt2`{q)J_07JOWK&^`aAl@cd|bk&O0k))f3fjrrIrBXkcy3$L(e7hi;+ zBj=e`fMR0r)35v2?`)K~@ZJ=2;*qN3JNc-}W_U)sk0`1Zug=hh7?N2Ym1fJ>#_&Xm zYA3L#vWiHbP9k00t7#l?r~xHLm|mZA?0~0fsjK+zOn{iO&oGdb@?Zj7yj4{~?7{K) zxePz5R=`l~zMfF5(GC{mKhmgXo9k=yZwMgn?}r%mI|2{j$8J5U1Q?WB8 zokQTmZQo4XG+n3GfabrL9^80I*!OQy6tU7;q!`<>o#_ZAIhO?NYm{z!r?s$jwAlT$ zy%20nfwDI=@qFgII?JE;tAFNwOjNe*iOv`X+fpV258xG`z{Txd(`E0*n!1~xWf+|z)C-K@10N`y|bZJ${ zSEH?yx}58-8C-+_Ecf~La+1g+z|qEWo5`H3QuI~!c2ey9iMFPca2GK_A;Fh#kNO%a zS{5OnnpL2%G_4I`-ImWuOo@#;*g=#-Z!t!{{(3J5sa>4Eh+XZ?e_o$0pX^a9Mlf1Z_3X3Zm#X%I}Jpb-GAR50}Uok zq#lQT#X!#>*?TKR{~uHCTaBFrCHg@hLGpxjfigcNVyAxeGgC0&0WtgvRVRr)-b^p; zZ5l`oGJn%Gl>KQ!IhpT|N%SFmQ_3UZjm*}1s~Z(6r_uzA1u!E0)IWR(O| zZetrsWQgg3@ZP3K47X-+)UPa+n>{yUb*gx)omHYac} z(~e>`@Z5;{>2rOK4L`T%0(QA4W^aK3MkccM}@Kff@=w4eWB{e+lef>lVANIa4U zzd*bBY#7ARe|1;e4<&on1gQ2kx-MknkKZ2^(ULW$Khb$fbQDL~RkW}OLS|cTHkx%W z2VyO))mShr^C#yE0Tz`hqRKTrn;~(KiOq!=y zKq9>dYd_&)K8VLRkB~^|Waky3h~>{V5n^9@YiX#d>sH1xZdX9%WScQ0`*g;{h}J`h zy;H*FXwV?|>{HVw%^{iYTu&$kr9oaqptV{^OKweO^WxcSpCFa^BP7}x;^%Ft#5nn;?c+$Lc=gW5CG6Gi{A~s{Ra<89sI4vKbiGh7HTwJd*gC;|CuUnYQx%#opxV_Vv({`+g^AAl(Mg^Xt+>Bdc@yBx4HjAAO|spAcePHEZ&OD|MCnKf(fqD&7W5D0}D zlSq(<8-HT?Sh`L#X_aN;$6tR4bp}>F)H3dpVLW5{Aooiiqs73W()@=8bN%-ytPCqH z)=<^0^_;B}={UCVqZo-Xw?aC_P2#Wk9c&PM(|&acR>`o+AQ27Pr=+6nvx&1?TD0b4 zlY82-Cs6}N-Yg3=@2J*fgO(9$ja(BQ9{-Mh)0~mC5h%iDIku}L`^q#zx~ytb&-U zQl4lI$UMuOoa8463Vpi%>$|IB!IYoz1?rA=$An z96a1L zy#W$DHE<350_nKy$hC_I@krfT(ocor8w&%0kA?VNEs)`1H99;gmACVQDNvT=Rlj$O zhmDvlT%6|+qTl-vxE#x1j@HjGA9;s_{KH$zRmvCpD`1HCR*p z?V{QX7sA(sGcqWS-9w>#DxBw%aCwnO+h)UvhAX`h1V6iwM4n!tFHDqtvP`CLLTr;d z{kzFKRkSI4;tbg9=6OTxii7s|w-z35U?Em>dS_y4n?&Vi^4y`wr+`*}yMNsv zh3bX6*>CjI?pz1P53kRsYz#x!LQkAz2`I6=33(Fu!vkN5ef1e#-6fxprW~^GG4u-Q zMTZh#z(xYkxgHgQ6T+F*1a;$@O#%cKiM=*^x#H?mY4z29w?UOOsDQ9+=n;=fEuHE_ z+79ijGBR(B9`kY6iY4wOE4#P7u+t>HU~OUMBQoI#d!cV@gQrawrxC%{vwe|ftzy;j?ZnFnt!?T``nJY|S18=C~^wLkb!!6c(- z%QVhzNQB8eWPDslY;zn!YmqNDQaVW%!9rr&nK5l9$o*a|05d2UnPXDwE_6e^AmmxF zlpB@ffx&vr_RJ}P@s%tKRgml?rV8^voY&$N79?8&6e1?;U#kSS-x%SkY|`mGv%^hG zP-fi%^3=u=TL{I!nqh-#hbCc~Ph`OF2ylq8XDtU3KTc?;X zlmO6G&6-FgeoD0awPNEPno`1#0M4VFP>2sq%zZj-->e{J_r=SUj{wLdj*crPe^k>0 zW^$gNN6 zdiH2P{Peo=8xn>+8|%evrlL?4%<2>+Nup*+Rw#v{b+pa|U=`7>FH$BZr0ddBB}`OE z^u}Aw0%iJCoG3QIe=WuuiN3ujg0*ptQrw%f%$pHcO^#qjrvP8OV-7wb6 zMH9tpmOd~Cjx3YVWN+yYHh+{{GJxtaF-MBA;dz>yXKPg{vtbUx@{LdkZWbE zES#`wF3G6C#+Z}d7Pn!6nut4GLe_JBS`Bjy{-Tre9`V-X)+oL{7Io*PgQA%QJbb9* zSDZ)Ngc(=vN22e6l#TpnEAB@7q491TXNQ?84n8ee^P8t(oMH3H*OF8I%Es`$vb?Ak zgE)%A=ap3$dG?M==R%}fCrR98OL%7p;vp!D))?Ps=;wG5+2%R+8Y4#ZL?D$GB@$w4 zL;13fyAi-*ULAev6VDm|c+v_ad^X1+I8P$t-8_ciaL_mym)JTaWy?_Bt2P}x@B+vJ z8p_n-RK)pFn|SotoAFp|_iW%5TYn}U@B6^?H-Hi^9B7PQxbW^7A+DIOOYO2W@5=F* zOK16*So6gQ*5%}}jz0QGebQnn;uGKxanDG9B)A^66;v$qBxm8ZLGGBU&sy%rQ_hb; zZV7M6DSNx7UH8o@6q3p~Z8%AXnTpUW*=?OC3SPUK7%M4|gsHAzhf~FEpKEl5)sDuj z_Xa*ms59p0t+WuHv&R!)9O1)E;&b_oJ}LS^mqM#BwvG6)vx8hpXV57tRrG7g3DU+r zt>S3XLcWqsYL)u`px2*qlSXL>) nJIem+ngm9JR=<+h*HP#ozdrf3=cmqSz?ZUuhJ1~zS Date: Thu, 21 Oct 2021 18:13:45 -0700 Subject: [PATCH 29/33] Fix unprofessional image --- .../mdm/images/faq-max-devices.png | Bin 6176 -> 5555 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/client-management/mdm/images/faq-max-devices.png b/windows/client-management/mdm/images/faq-max-devices.png index bf101a02151e0b4a6433017e18b899800394ae6a..f2d177b92f57670cef076b333137b202eee6db20 100644 GIT binary patch literal 5555 zcmb7Idps5EyPuM6r;Ez13)*EWt)hh7vnwk`tSoCL*KR7Z7!r#=C6kVhuB$i84bffLQB}p!Gmd@{UexGwbd!K#IAM=@a-skf^^SsaZ`F@{w=673` z#RA#ovJeC*9l# z5C}pr2mug6LpTKC7=!}|ry&A@2n-?sM9>fkK_mu|03vCKf*=ZmC;(Bk#1lkg5Dg%j zo^c6bFa%(ThG7VXF&G9gOv4BSBN&VT7@=Vtf^iJS0gTfy0l@?Y696V?n1o;wgGm6B zG)zG-g~1enDOwU8Ok*$&V49u@6T%P(AP|kf5CUTe3=o(`5C}mq1OW&_BRGWM7=i-? zrx5}|2n-eohC={{XdH%c7{g(J z!!(XSID+8_z!4h9AsokW9N;*O6A(^dI00~i#z_b#F`NWAN#hiRQy5MGoT4RJ#Aytt z0Z!91>4Y!>0t7@8Fhsx@0RsZ22?Qb#j6eW^&;$+`vfgQpq2v87B!4L&w z6bvYsrVxliFbV+_LQ^dn30f~2sQ<}zT8c0UHY2I2A2F&%fbo7Iug;g`xtfUPKS4bvh{1F?b zOqZx&lu2>a-KG6+3TKzZ=FblJa;jUiNKSWujefrGbLt z+%s9L-`b+EN=(deJJ}a~|78qzM!PnpO9yLoC}9;vWrMzJKODMME8_Lf3=WQ1d|%ya zEx;#A*zJp|9XL5`3q~TUOi_dIBh&E)Cct=1_y)FgZPQ{US7Mx(Np9O$8kw5&(V zXmkE{l_~aCo75-c;ZO3nIIL?mGV|0Dg~Z?HZish&Qm6W?Zf;ub_%!dr85OlS;a}zL ze@*I)k;?iuJY^PoynbAD1ZPi;o!(S27=B}1{Vy>18(-i6O-+opSH3-PChO%sPUW@< z{mDLC)F1e2fCEl_k!R-jk4%rovH}du?_PZxzR5t`IKBAmTV_%&Jj~owr+Wo8I#^ zDO=x*cQuI?J~=D8zH|~*-NahTQN57B8Cb(B^#F^FKhgUFFzY!T9@c9 zSi`7BWj<^XoM3mY0p#dq@$Q_u4?XKA28AzrP?_q(jQ2^LBwkZO-#TQ^zMt*DLk0=OJ%=BAE+pv;{_+uN?+mXcrQ)UX3HlB}zQ9zP$+RMsJs_2}M0^YTKIg z1cE=%$6Zd=Q6J+<@9?d@o$T9Ig)W#|+@_x0pk|XHuB?`iSjJIJ%F|XfUo&XF$8FDu zDIb84n^QWbUB$HzdpQ0;%CB)x*QwxXDd7pTPaiunW8F+I@wLU$YHKYSer3Hf>&n{Q z`6f}}&0p~38#!Oy)7YANp%HO{CuCW#oy}ZnrF5j}=`lTXeFbzWd06Vzb}-Z+jypnK zxHr$^J*;Ol5?t~y$)xJSXa0bJhI^j9-hO9OR6wEc<*wE{q+~509XbJQ zE(C>jUU9jb#kEb~R(*Em?izPGd(Md;+j2zQzs|A$C!6ZyP9ee_n}(*4PkFaX`BvFM zrk@i^{F#Sy?*z}UMwQXx^!@|(8gt|36hCl3SCD+rP?3AN_;X{=cBED~PJX!`we znYsq~gUkzlXJC2mr&+ARE|-0EZowrD`*G*y{=M}k#+qRYXfI>R=+0QFjJ-KFe7+&O zx9)6>*U}}uTBWO`(ynP*wgR!=vMfg3Y6Z{7MFF2LH@>)T{>~VW&zDhpJIlZJLcF*@OSyP`tg$s(kk}sHvtwtu$L*h2_b*L8 zJUnzxz_oo<)p$&CW=OLnKHGa7lcV3nYBdHvRvtei_Gf+dMY8z0rkXDY`JR(sTG zN#kcY8F3|bj%H%5%>tv<6XYI$pk5SMpd&C+`=~9}`Ysd_>$Wb*%un5@@$_rs^xhzc zf}u$xot@|$#mja)h;=D&#G6!eSCmgGw~rdB_{3UyloVC@4a7k05uE? ztr$vL4;~A`o`_yWc&9gs)cA4+SOq0o$}!!#GFIdrFWfBTm>Og*;WUcW(&QeYfmNI! z$xx*lW!s|jzHpe^*_v&86s4IZ2hA`A1+i~<+V;a!bxnkr{SOgA6B zI)40XDi9>fdYR_5Fk6el-ymks1${_JqiVq5Fmwo2m+I_}JUL!_2f7HKo2NwC3t=^zWlU)*NH+)+0 zB;;(UKOx#5(mLLd^6_Kg(8{Ta#tG5qc?_qhM~wUrEw&cf(d<$uzc#yFQ89C+Ie8;7 zWhtj?mWp;QC_Tq*-4rOlL2jAf#UIvL8l);;npeb94P924@C(DS;Y!^C4J6k4{T)V@ z;`sI45cX63gaoxgr-@t3B%N%3vuJ-t`N65Kk8jg~lPT}9?nt!De#4}_@J+paSq_g< z<_UL%HcmVhdF^G)u{-n2t47Hl_iRXt(Rq3Tu&bYncBwUSY>KZ22z)_S0>$U*2<+l( z!i>av&h7oekc&f8X+~oGpyrX0u?j_d)q2sLB>9m!1`jWBJe;Fsi>FjG%fdSdZEax< z#Y)=3L$|-?n-uO5Z?CfLes(tc&j+GUqA>HP`=8=9*RSbBaY~Za`Bt@&iN(h5T4{#Y zs?Y|rh}D7U;fQF$Ses%k{kVOivl(u^j4l$;#_H5J~5zU z;liH+75USrI}4{>yqt!98Lf2M+|Zmd$8>f>%R=YVx57q+$gXp1)Gw`D$rA7WjdLmY z`JSi^&3D>!d^H8%zDyp-oI>qGn&lKYQ_(>d_jW!UM%mXb!tP6M5{AVIVnFDU|Ip#I{H&8*`?9QmB02r&`nHpFMtRhPpmyfk3-xNpH>OJVWz) z7AFM*H%bmDO-D%HvRJIb-|J=lKqXUmuv@(0VQhuQB#pA~tO71>@+rJ{4?_E=N!{h# zk!gmZL90c$>&;l>r2PZu8-LI%)pNVtaAogrce+DTb|j73>(!|+sJ0Vx9M6gv)79NK zA{k5O7@Hw~|H<=La`#`~L;q-`vToB6*rL_`|8Kee2i4^c8%ETBZm%3wvqfV=Ge@Uy zjJeY-lD?sNGjizU>rD${dhdI@`<7}{b|}15cR6#k?fG}?)bu+?Dmr~MfXo@zjA$Mk zd&HSiSCu*^kyNAa7)!8|ApPC=pNc9OKO%FjS`cuz>uM8WM`U=#DE9YjDn2{Gt5w`B z3f|=`Z*xG;ey41mz>}w^T$fm+l+o|-PFhd1?Tf==-u$Q!A9QS-+1J0W(#!e!s?>9} zvE?o|zPqx@Satk6D{HY+W@(SpL_#Wfx#`ytZpq7gkY8C^D-KYA2v ziM5fRlcU%lQ0Qdo>7?WTL;8nH+sc3Aatl0ccK2jOwYc79*aV&pDoAma?uzUk*?E4) zXNMOz(YiH)BduxO-cJsD#HNehSj1=d>z2BK)tq~`p6VF>GSYm7aMTRWpglHWx zr!U}rs@xNb6|f2nXBtyswsOa@eo^U>{6c_IU(Y4kAx)JbPfnXq&!Elh28)1 zQ|ONYS5v`!A!yM(>a*9YSR`$!J#fydAme_XUD3@f=TFbiuhCUK78<>0_?5_CwsE2R zaB@p>?@Kvhjpaol=Tb^?Vp!V8mCKnUG8b(uru@istDF`A=V_*);tLT6S&?_RJtEw= zTj~?ZxgUSTC`pE6=RW@`%WfWb|AxEwxAp!hs~4MfK7-%$gLV?rqUCzVW0ZkzjjaHJ^o&pX`QALXP?SQb;9Hl zuh^RNkHc17>%KOwbmO+7SKy`{$NC$C(%MVjy>;%0JaqrGs8?1aTgAHAU5(3d&+66D z;e&$*j0`c}aEe-U#jGM;C3_Fy{TbK@xq?fSD?|Rp2H}>+#v#^Gsig}C5;@jb9emPa zQpP;JAggc(KEx;4~-al2k_8^+i3-+Jh*5q@~utQ`~DL<;bouR($1cggs2U zZ<*Gl;7I-$%g3yZsd7IWn<+bMV|qR>JeYEv z;+~aNXtwg9QBIwv-@|roy2WQq|4Ob>KRf>4n){uJGh(X&q|+I)G2DL%^WU&_$F``3 p>4LFevz-2^qTNL>MH5kR|)Rj629KOWD`4Z)K+lGqPki%#1DBx9pWA``DwB z(nvxGF~6zr`Tp_SU*~<_ulstup6}PW=XK7#_q^XJrp7vS)ST1+0MO~_YC-|v9}oaY zE>V&aiS1p8Cecy(>D~zh0Q$i{7YR~~o{I=6g7l2EDAp(#S=bmH`V~9=A}y<++wh?K zz5xKHZcLYmXoHAI(>2gJz}+v%-PZ?Tq2j+n^;w6wCavWkj|hK7c|zP?G}yt%o#g@uK+wY7_ji>s@vudlD4pC23! z4-E|sYx)oo5s{RXl-$0anwpwHv|3zNR#rB8JTEV=;Pqx+9Pt+Y6M+ff~hIN%8KCVNVtEW;O9pO4JE|H5R#Gz z85xA9PYK1vgsLh+eLbPImC(~ec>S6%F+rH0C#=2HQ2n2#)$*v9nu-58n z-UdULz7^W}e$>90n5~`jjH#1ZQ=(fqRJ0%_B=$T@3O zQPixdzNl-`xvIA)3PFlOOo#WWMBT@UXt<&4X!!91oN3<192q(VJmm%%leKS)YYZ z@}_t=8c)cDBX~OmQ3!Y5%BIz><>m1ML(ETCfliax`KS>T^&u2@m{c!tgEIl_vIF~$hGo=ecX65vAVgpF8?@6@@x&8Wg+ov-+x26_r3=4 zEOH`o=%--gl#;QoFGElHYoBOk{o+1*0>7am z6eTMIDOki$IR|LpVXvb@N<)sm9sH4e?=hKc{wXEwXn z=7OQ!$V;?%)pw0a*|0?%nPMo?yx;#cE?#6jM;sYuh`G1Ze8gQ)XPfD<%$|i%iI)fD-CX3iT2eqfl$G+2xH_Bx`djXO+7;i4_UGviBDH{(RfN~(Jg%5>= zW+=)+pWnq8@(X=clVlTRIw00~L;c*qS@@rJ{p9b$;z$mRPv`aiNl~DLz%DE6DD&J$fT<{5Z%Ae`O=zU)+5^ zwQ%X5m!X3Cvxz7OvXlj$Kx!dsR?{L5%Y!FGa4O89a3w~=2o$8X?)}P)F%lX;xIju9}f@( z%A;c@bA?fANlILY=XQ5=?+-zdgV|{baDbgll|t#aNNG`a0^HFlvU|`8GuQAoq(6q= zuHu>jjFV+_Ctg*%>MhhCxYZ0cIbm)BMb=nWgCUY9D8+f;*N4I9AUEKDm&OW0A1lsk za6nH?+{GC40=1ct&x%M{l1VnqoUNH;@j2H~YM0yXA3T1$GaoXyGKvd>?0#o#9enTI zncoq`J&QS&xeUDAbt>TlA_+{ux!aD9HMjgjfYuVj^d^B(*AZWq7BpRJ@{-an=m+gU z76WsZn%koIa2N4&_Gz-^l|bH|q#BljJaP^5g{()sSn&@Q-W}#(42SvQ5&DHjWL8?) z$pOB=rYj*)hi}5hc7MlAFUQc14QFCWAe_oiX>BDnQoo{xHNQ(X#QZjLDSRWB>g6<} z#e~V#ba`m(5~!J=+mhSCjompcUNt)-tbhIR43_H&GGnl0uvdaySMwHvM9uXoMw9<3 zC&Bv}N#O-A^h3{TAtnJU}I zTq=^E*4*=tAslmq@7mEV0s_+BA30eU|D>Z9R9}{Nr0=euf5-?l^#)#q+E+fr8u-TW z+FVP+KRu)HVL^H_Jn~ShR{p6doyZTlPjBj}$y4?!o6=F?eIiFm`d7-I_%^JZBbKuq zyF}Sr2TJIe;+hiB*XM7iQGRYq7p=smR%7Xs;tb6#VUivtqSup3Cnu}U#^94cul%WR z@pzkw5KjheBt@diH)Fo!5)M5|HDqDhl27tz*GHZcY zGKX?%I#cwz@ocgJ<6|jFl2@j$tv<_y-;y;e6}cPq&MBQjsU$U4NooE;Him1GyyU)A z)w~?N#*ztFy3N^{6XA>leU*vHUS~)fQkLvh!iehtk`p3j}zY*)$|bRm^Fu#0M&n$>-Ibe4`? zRvMqIP%6YjIr(XSS1D>&>Vm_aJ|WYnj-HevHp!B`7p3y@_x1O9MOgSJ3&%h0Uc@nz zh|9I8vks_je{S>m;e0IfYK5dmfzlMFT(F7UhBR@h0 zGaq*{%!4EzKEZ&vJLQVQpeKmfP&5yF?~*TVUu@na2GU=T5P7<^+kvgtIoLnfE^^&x zhV03`e`O4V=_Ed%c}D_sn3dpcATLW7X6hA?n$5AjpD|>%yjMcni25CtOM(Z_Pws(n z(^Y$xd@6EDZg%G$#+6jK-@*}JrVDPe#hcl+=Ut|8zrZ=1<~EdCC`)5-CD=Yvj@&SG zk?~>JJb^&d_}oZW?1@elOWj!^YpQ0vm@s@4PUC>H;9;5xfNdE6KX#xj$ViI zB>s>M)7;g=IuLv6TU>6the<#>+soe0A7{TDv>DnN8Cgi^RBa z=%Xaas!PG4>F1Cz_pe;;`$Hu!Zm3Sw*U_zM5JTQnsbhUDDn+=YYag6%u8pv*fP78E!% z_oIV_@M=QQhMpt_`^8=4QbBRc)UAW(-nd&&N6?*FAvMT0S&h+vvz#4F3kx6R$2i@F z3dQYRxBB9W0GT0a%%DZM{Yhl=x{z*o0o5Y zDj^q}J{kest~n5OocDw%MHG(je4Y`%TaZ|I4;!>@Y|f?<-ilzdaAx?S-BD~28g`sL zW2;t_w&$KRTOWDch^*b&*h%XBrTwBme45OUP(mOTS`$FFeU0}~c`GojCmc1CKZ0%J zqE@qK=~~$-|v9 zxxQ=PNjBf61?1c66%lr{Zs$G9~5%LTH zsm{`gB@9IfV9eg>L7N<*SaT_)~_i zt9FJprknx~zjiz~s{ngesneB9T7PLow4WxKwZxJ{<7O7y_c6R z-g=0@3lY0Q`O&0{V`WeS*fip07-HZE)9M-k{_~b=cY& zbpnY!&i#i{)KNh1^;Lv$00PfB8o{ULdvbn)&%I@+!2mECv+1?>Yh&!4l($IL7_~~88*+ng4se$XcuQHag77I0l=xbqC zg>gD-$Lp^h_~QQsL|9Q}AR_gD54uEfYpPnGh&!lN;?^wX_ry3)jof&g8T;qUf;2;u zOBXNHS|-LeGC$ZAs5I5A-{>aTOP$_trd5$q^2AveRAVm;EVssUf=+e%+2?H#4*T8YJb zYYp|ae<`j$sWR2dN<_vTnd4<+)R4*f6SlhA99N^%$)tM8Sb=PL8J8XN)UBbRAkk*I zD*>MRdVEVX*ydMcIO}$KbI!NVkw+>hxcyXoM9D{|iP31SgP<;5XH75oiEQKBJ0t*LK}!OhfBNWRno`IF-||k-A?ErqEBQq z*wkaFY7dN(lUK-r6E>yuSP!Goz>SK?zWl*IE%28^H=y;P?No8#^j{JaLoPGupZ6ZAa{C>pOsIdTPP$yVHmn^)x`dbebt#*IK{I+N(=jYkpaQ>c;J+Vly&Pq(QA9 zTxfS(po2N)ielBWxSn+je++MoK}rwQV;X08MJmfEh61ctsx#ef>LJ7JFSmA7b)@!q zUE?}HD9X&_i8klRo=+cWD?fQ8OjTnt9NhB_OuNcXm*ze*=f*aJ`V^(j=uNK3u;9eC zrz(fv@Dwnhe457w(soE$dC~cs%@`Nwtbh;8E#Zr0_|cA2qn?6dtgw}o~y@X0rY&d;U+Cb8QjGC=oQ;%_oYStgHxzpBP}LDfKQtu`)f zrF;H5v6p8?yOwGSvEjdt2gD*&_n-FQQ^J+a>d_EvDz*&!U)=exXZq0Gk+sdvfcqB( z4DH>-kA4T-b0KQ+qiBJ^SumZQg7nt|Mh@8ucZg1AoL;jz43sZ@$ViRVO3|X>f1%QO zQDCy(q#guWar0(c$Y15#9Jk`FcxkMPf7u$gYwTSr#i|PZB$P{U@w7~ROkzL_sHLwh zHpk)S{IAmv{Qgb(aPrkEWt;)M%E0Us4fy3yc3P^T|Jk1 z*ICu7Zz0>13Kux)&{~R>Yn?Y)s?IsGv}Y3&IoRdH56{!F4x5+Ho;KYo;q;#30Qq7n z-oNWmwvHXHd<+e4Jk;esa^v5+fXyg_>Z1{+qNV?{Q%9MX#OqTbnIWkE?oRm1Pi!y~ zRZ7U|y{bQHsQO>k|K{A8X2p z<=zpQ9e+!b3J3aPhZNt~V^m1wZhv{cpij@HE#k&z84#}_ke`rpce|@a(mLx-&o=dC zH=pdliiHbJ8D)7@WMz40?ks+r4gc)-MfQ(IoJztx6OGvx)Bf-bw-I@r)uMU zuz#Jl>b1mcC-(6*9%Kl-^QGhLr$?)G3PZL1UgSTgN>AQg1fUdsmtLvu1m;CnXwE%( zlX-5Mk}#D+2jkJoEZ32rX!FdEPNXdeP5WJP*An?LlRvB>oj-(Ml$PC9l4M>C$@ zGoy=Zi)i!V6CsII(0ghkDjM|hRF1SYygD5(moEG?PI+=g zVf>|d~KbwJSNQ9;r2}?@d33Ivy-K26xb7L!4|T=cG0?bJJiYR-NXq0YBOs z*uA~cEyHq+65gkKttR7{%$AZ2=wyGcEg6ijcEJ^y##5(g4&3P8)|YH_U6p*D&bTmO z{3UAiNE;~!A~rXItE3HBJq~A0VKxDlv>oY-VlKfW}wNk8CsR)^km zI_;(t{XXj8KJVG^4?=f73B}%)w>Y>RxEb!Sd)~Wb@mwv%rT$afLQ}(nsdqNRyB<@X zJ(c!Sfy0c^wWh~~QPe+7ltP|=yi7|@lFNTVvuoCXvaM-BJpt+Fq{pC6uQJv}5c|eI z)e*5Ytz0Yf`iTQ+^x!W(!G2p^$+Tq3m{|O+${^lit%I=R2J?-~s2xzbxz57x~@5K9JTiBk$G?F0i}7#o79Wtj6Z#y^C~qZ^s8Eu&B^j8XHi#-`dtxs|KBj zwf@36 zSxv>6A(sz*mHQ2SsV#b=-iJe From d4a2f88941c2f6f39880dad097dd0fdbe5b54053 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 21 Oct 2021 18:14:56 -0700 Subject: [PATCH 30/33] Add borders to images via updated image ref --- .../new-in-windows-mdm-enrollment-management.md | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 427e0ffe84..b5c53ab7c5 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -218,22 +218,28 @@ The following XML sample explains the properties for the EAP TLS XML including c Alternatively you can use the following procedure to create an EAP Configuration XML. 1. Follow steps 1 through 7 in the [EAP configuration](eap-configuration.md) article. + 2. In the Microsoft VPN SelfHost Properties dialog box, select **Microsoft : Smart Card or other Certificate** from the drop down (this selects EAP TLS.) - ![vpn selfhost properties window.](images/certfiltering1.png) + :::image type="content" alt-text="vpn selfhost properties window." source="images/certfiltering1.png"::: > [!NOTE] > For PEAP or TTLS, select the appropriate method and continue following this procedure. 3. Click the **Properties** button underneath the drop down menu. + 4. In the **Smart Card or other Certificate Properties** menu, select the **Advanced** button. - ![smart card or other certificate properties window.](images/certfiltering2.png) + :::image type="content" alt-text="smart card or other certificate properties window." source="images/certfiltering2.png"::: + 5. In the **Configure Certificate Selection** menu, adjust the filters as needed. - ![configure certificate selection window.](images/certfiltering3.png) + :::image type="content" alt-text="configure certificate selection window." source="images/certfiltering3.png"::: + 6. Click **OK** to close the windows to get back to the main rasphone.exe dialog box. + 7. Close the rasphone dialog box. + 8. Continue following the procedure in the [EAP configuration](eap-configuration.md) article from Step 9 to get an EAP TLS profile with appropriate filtering. > [!NOTE] @@ -270,7 +276,7 @@ No. Only one MDM is allowed. 4. Click **Configure**. 5. Set quota to unlimited. - ![aad maximum joined devices.](images/faq-max-devices.png) + :::image type="content" alt-text="aad maximum joined devices." source="images/faq-max-devices.png"::: ### **What is dmwappushsvc?** From aa350b74fe479d1371161140dfb8138f8b081c33 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 21 Oct 2021 19:49:02 -0700 Subject: [PATCH 31/33] Remove unnecessary bold formatting (**) from headings --- .../mdm/new-in-windows-mdm-enrollment-management.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index b5c53ab7c5..482bb8a067 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -266,10 +266,10 @@ The DM agent for [push-button reset](/windows-hardware/manufacture/desktop/push- ## Frequently Asked Questions -### **Can there be more than one MDM server to enroll and manage devices in Windows 10 or 11?** +### Can there be more than one MDM server to enroll and manage devices in Windows 10 or 11? No. Only one MDM is allowed. -### **How do I set the maximum number of Azure Active Directory joined devices per user?** +### How do I set the maximum number of Azure Active Directory joined devices per user? 1. Login to the portal as tenant admin: https://manage.windowsazure.com. 2. Click Active Directory on the left pane. 3. Choose your tenant. @@ -279,7 +279,7 @@ No. Only one MDM is allowed. :::image type="content" alt-text="aad maximum joined devices." source="images/faq-max-devices.png"::: -### **What is dmwappushsvc?** +### What is dmwappushsvc? Entry | Description --------------- | -------------------- From 997820ed16995b09d9d3fd9b6fe282eafe84fc92 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 21 Oct 2021 19:51:40 -0700 Subject: [PATCH 32/33] Added missing periods --- ...ew-in-windows-mdm-enrollment-management.md | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 482bb8a067..6865414070 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -43,7 +43,7 @@ Applications installed using WMI classes are not removed when the MDM account is ### Passing CDATA in SyncML does not work -Passing CDATA in data in SyncML to ConfigManager and CSPs does not work in Windows 10 and Windows 11 +Passing CDATA in data in SyncML to ConfigManager and CSPs does not work in Windows 10 and Windows 11. ### SSL settings in IIS server for SCEP must be set to "Ignore" @@ -85,25 +85,25 @@ EAP XML must be updated with relevant information for your environment This can - For Wi-Fi, look for the <EAPConfig> section of your current WLAN Profile XML (This is what you specify for the WLanXml node in the Wi-Fi CSP). Within these tags you will find the complete EAP configuration. Replace the section under <EAPConfig> with your updated XML and update your Wi-Fi profile. You might need to refer to your MDM’s guidance on how to deploy a new Wi-Fi profile. - For VPN, EAP Configuration is a separate field in the MDM Configuration. Work with your MDM provider to identify and update the appropriate Field. -For information about EAP Settings, see +For information about EAP Settings, see . -For information about generating an EAP XML, see [EAP configuration](eap-configuration.md) +For information about generating an EAP XML, see [EAP configuration](eap-configuration.md). -For more information about extended key usage, see +For more information about extended key usage, see . -For information about adding extended key usage (EKU) to a certificate, see +For information about adding extended key usage (EKU) to a certificate, see . The following list describes the prerequisites for a certificate to be used with EAP: - The certificate must have at least one of the following EKU (Extended Key Usage) properties: - - Client Authentication - - As defined by RFC 5280, this is a well-defined OID with Value 1.3.6.1.5.5.7.3.2 - - Any Purpose + - Client Authentication. + - As defined by RFC 5280, this is a well-defined OID with Value 1.3.6.1.5.5.7.3.2. + - Any Purpose. - An EKU Defined and published by Microsoft, is a well-defined OID with value 1.3.6.1.4.1.311.10.12.1. The inclusion of this OID implies that the certificate can be used for any purpose. The advantage of this EKU over the All Purpose EKU is that additional non-critical or custom EKUs can still be added to the certificate for effective filtering. - - All Purpose + - All Purpose. - As defined by RFC 5280, If a CA includes extended key usages to satisfy some application needs, but does not want to restrict usage of the key, the CA can add an Extended Key Usage Value of 0. A certificate with such an EKU can be used for all purposes. -- The user or the computer certificate on the client chains to a trusted root CA +- The user or the computer certificate on the client chains to a trusted root CA. - The user or the computer certificate does not fail any one of the checks that are performed by the CryptoAPI certificate store, and the certificate passes requirements in the remote access policy. - The user or the computer certificate does not fail any one of the certificate object identifier checks that are specified in the Internet Authentication Service (IAS)/Radius Server. - The Subject Alternative Name (SubjectAltName) extension in the certificate contains the user principal name (UPN) of the user. From 7355c5fdb29a1a78f7d1e1e0c46fa83494069b03 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 21 Oct 2021 19:54:49 -0700 Subject: [PATCH 33/33] Standardized cross reference style --- .../mdm/new-in-windows-mdm-enrollment-management.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 6865414070..c21357f4a9 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -217,7 +217,7 @@ The following XML sample explains the properties for the EAP TLS XML including c Alternatively you can use the following procedure to create an EAP Configuration XML. -1. Follow steps 1 through 7 in the [EAP configuration](eap-configuration.md) article. +1. Follow steps 1 through 7 in [EAP configuration](eap-configuration.md). 2. In the Microsoft VPN SelfHost Properties dialog box, select **Microsoft : Smart Card or other Certificate** from the drop down (this selects EAP TLS.) @@ -240,7 +240,7 @@ Alternatively you can use the following procedure to create an EAP Configuration 7. Close the rasphone dialog box. -8. Continue following the procedure in the [EAP configuration](eap-configuration.md) article from Step 9 to get an EAP TLS profile with appropriate filtering. +8. Continue following the procedure in [EAP configuration](eap-configuration.md) from Step 9 to get an EAP TLS profile with appropriate filtering. > [!NOTE] > You can also set all the other applicable EAP Properties through this UI as well. A guide to what these properties mean can be found in [Extensible Authentication Protocol (EAP) Settings for Network Access](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh945104(v=ws.11)).