From ad6f77669d1c77c8478e84d3f5cd5520a420459f Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Thu, 23 Apr 2020 20:58:23 -0700 Subject: [PATCH 001/145] review alerts added --- .../microsoft-defender-atp/review-alerts.md | 67 +++++++++++++++++++ 1 file changed, 67 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/review-alerts.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md new file mode 100644 index 0000000000..562daccd61 --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -0,0 +1,67 @@ +--- +title: Review alerts in Microsoft Defender Advanced Threat Protection +description: Review alert information, including a visualized attack story and details for each step of the chain. +keywords: incident, incidents, machines, devices, users, alerts, alert, investigation, graph, evidence +ms.prod: microsoft-365-enterprise +ms.pagetype: security +f1.keywords: +- NOCSH +ms.author: daniha +author: danihalfin +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 4/24/2020 +--- + +# Review alerts in Advanced Threat Protection + +**Applies to:** + +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + +>Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-managealerts-abovefoldlink) + +[!include[Prerelease information](../../includes/prerelease.md)] + +The new alert details page in Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) provides full context to the alert, by combining attack signals and alerts related to the selected alert, to construct a detailed attack story. + +Quickly triage, investigate and take effective action on alerts that affect your organization. Understand why they were triggered, and their impact from one location. + +## Alert overview + +Once you select an alert in the alerts page, you will be taken to the alert overview. This overview includes 3 sections: + +1. [Title and involved assets](#title-and-involved-assets) +2. [Alert story](#alert-story) +3. [Details](#details) + +### Title and involved assets + +In addition to the name of the alert, as displayed in the title, this section provides additional context with impacted assets, such as devices and users that were found to be involved with this alert. You can click the asset cards to see additional information about them in the details section. + +### Alert story + +The attack story details why the alert was triggered, as well as related events that happened before and after in chronological order. + +Every entity is expandable and clickable, with alert entities being expanded by default. The expanded part of these entities provides details at-a-glance about the entity. Clicking on an entity will switch the context in the details section to this entity, and will allow you to review further information, as well as manage that entity. + +> [!NOTE] +> The attack story section may contain more than one alert, with additional alerts related to the same execution tree appearing before or after the alert you've selected. + +### Details + +The details section adjusts dynamically to the selected entity type. + +By default, the details section will display details for the selected alert. As you work through the attack story, selecting different types of entities, the details section will change to display information relevant to the selected entity type. Selecting involved assets will have the details section display information on the selected user or device. + +Aside for basic details about each entity, the details section displays historic information, when available, and offers controls to *take action* on this entity directly from the alert page. + +## Related topics + +- [Incidents overview](incidents-overview.md) +- [Investigate incidents](investigate-incidents.md) +- [Prioritize incidents](incident-queue.md) +- [Manage incidents](manage-incidents.md) \ No newline at end of file From 873de166e6fc334843891b66d4b4477e2bf27d0b Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Thu, 23 Apr 2020 21:13:10 -0700 Subject: [PATCH 002/145] fixing typo --- .../threat-protection/microsoft-defender-atp/review-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md index 562daccd61..88d4bbfbee 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -16,7 +16,7 @@ ms.topic: conceptual ms.date: 4/24/2020 --- -# Review alerts in Advanced Threat Protection +# Review alerts in Microsoft Defender Advanced Threat Protection **Applies to:** From 302dcc067fff6b69e94112899d8f0c0a4cc4b5cc Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Fri, 1 May 2020 00:59:57 -0700 Subject: [PATCH 003/145] changing the style of the new alert page --- .../images/alert-details-resolved-true.png | Bin 0 -> 39171 bytes .../images/alert-device-details.png | Bin 0 -> 35743 bytes .../images/alert-landing-view.png | Bin 0 -> 80610 bytes .../images/alert-story-tree.png | Bin 0 -> 65436 bytes .../microsoft-defender-atp/review-alerts.md | 51 +++++++++++++----- 5 files changed, 37 insertions(+), 14 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/alert-details-resolved-true.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/alert-device-details.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/alert-landing-view.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/alert-story-tree.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/alert-details-resolved-true.png b/windows/security/threat-protection/microsoft-defender-atp/images/alert-details-resolved-true.png new file mode 100644 index 0000000000000000000000000000000000000000..7cd8e4cdde7fa49e93d39558d3a21c023cf2ad2d GIT binary patch literal 39171 zcmd?RWl$VZv@V(u0!i>B5ZpsTumHgw26uM|4ub`E2<{dVT!OnZxC9+w&>#a0?k*W- zaCpNx_x^cx-j8?hxmB;~byd%*?&m^tjgFSEd`A%*BBv?Uq@7yMkc64J3vtu!;?HF`Eym)V$F?*NmJ-RG zUpR7qLDbAvs(aG)<-%l#Ek1=^k|b?w$J+d5Xo{%$d)2j)Gk%i^=d;?ev*I+(f!2eI z{a8=N5sOAUcm4r!&O}cEsEq;s4v`WO5izJi9P}uD{%?vXTrte`3Bj5)6VJDPy~aIt zY;|W4F3oKW-rBYI*fHKz^9#bb>o_eZJa|9|s=$b<6fl<1hG*~l+N&C>; z&Rm?DD3BQ}kq3uN8*4=NZ0(p+BQlJ?Nh-b@!&1zaAL!gvwO%i@BtUJy@?KxOEQ6W7 z4TBDWKRjdv`f{C&EQb=W+^AO0AD%6#toBX5CHdgDN9xkx)rkgg2zV%bwgAr6SK1rF;Vk*@T(pgkl1^E}jeffUwG< zL7hYGWF70XtDLI$m6RTIN24kuBGgTW&BkhG1jy}&-2Tn@1~)6W(;l|2ve3uwq->7E zH+RJ-Jz}Ew&~0+P#c5YVVw4)y*8fC@Bql&_2AA1PV*~sMtdv$y z-&B1>4k>l9FbH0NVJ3GU3_PREc8A(O198^(*>Zqco z`RL9bdiwF}(N{F60v{Z1(dt`gHRUC-_xUlIOeqH@`{^d=HdO^FNrM{%_Ivd5yiY$0 zuKYt2_AKR*s^SX;I$uvR>5$FfC=1@3tEU%h)*T zvlodf(PfJ{i1Y)hLpWm9S_NWImDol0;6HYKQQv>3(AeyvrMg{sD6Q3BX?*#hVfI)= zsF@-@YVM?|C31;99$OID{97bM)T$S9?>LyU zXY!f(_NB}ack6x@6OLz~>LR~N4Qgaz{ zcxS0ot=uB4a~7Pg2*4G@6Z2}TG1Wr94*4Q(4~s4r))QeTXQMyv884fwq<6ftYp+r5 zoZO*7#7fR-j_?E>80I)=ueU5a65#GcPF9!$Dpsn;Sp)SC_Xmw%K5f-eV@;|+awmxrV2~A zIlszoT}JG=&%AmjLL3$*Y&zY=v+d?sgepN~gU@wq&Y%8+k~koKO~(C&q42Jd19$5s zWD*|`8XCa|0BmcH(Uv$t{dEF`5g0VOimluf0xXm3`N0wQ26ZF_TnsiF9ksWYKy2pV zHAC)jkiV{Cd)=GlA>Rup^SGU-lZa1s3?Ch#7!prjuS8w!tp9T)8ay;_@x_(Cs2*r1 zxcHs->2a{Q3VdwkJM=Iso>(}AUx@V!Oq=)ntiGEd%U`B^ZW}DN?Bk~qK*N5nzc#V+ z$0SYNYM|X7PB2-`wXdJ@P|3A`h!(9o?4mx(HZg8m#6AfhH zp6>1L=g0LQ8vvgX>`uwK8_Yn4jz(%6ic1g{BBeIHlS&l9hqntK0To@_HR@EQf)%?~ zOGBOw2s0Ta+f$=YRV^+bXbuWaQ~42DZ`b8*a<{G zA@5;LY|w!L-)E}e1{bmr^In>rBcni)@rEe@-0~xkk0r(rycUs?oOmw>OD6so2%LjyP9Hwh!9(!vHzUHq=Nh*l%9DNG{rwF zB$skA-spP9US&&M0oEG4-r<(i*CT;Ck@~idHx@kPy^1ccxn;bmTV^7!it6QnUFpT? zCF7mdj(U)L>nBrb_Zv7btiZ}yru0dn+7j|kO2=_d+jfwTFhuR~Nv6dC;3EE4`@P}% z-+nrv>--N&Xn((1As!OWa_cqm$vOD0q?G2yR4&=Hd7I2=V2BogqN& zc+j{go242G(FF#qG=E9h72U*)Vr!+ON^jRj_aHDP(nANIQY68p`MSFL? zNz+cG88nq`8gW0{-iCVpv@ilX1oAYShW|bx(reY(iF|j^b23d7zz3Xf;T`61tQOw8 zG+8%0bGo3}ePcfl6#D2vC0fi)yj)>`EgAZI1H#e~yS0QZ{HBuX$+57;d$7eU&jzG) z61j>`J+}8VJ>b(+oyoQ)pz_n<|cNjMZ+v_h`< zJ!ncUu@C8uO^L!5fuu z6O!Z#WBPGp%$}{vYJ1C&na5HP-iE};o`u%eM2 zhgx(6*yCtNu-DL&tKUsET%%S>!j*(7cDa9dGc_Ea`Bsi%qeX$4+*C+>bpz36pp~_= zb!FmRrnmEt*0r>j3Szb36MluQ8*#3F%~hW%$79Ed$Ej6V2E4JWxF7e0d0nDQn;}d< ziV%y)8SBV$++;3kbH+gPpkcDo8!T_M2(S(ghuD(SAg$Sjoqj|p4ncUIt*PY|Z5 z4yKpP!>iEI-m#4o#KFfL7bfv<@p@Vu@4f6O3|BzSW6&heD%=}h zZQ~thR&Irc4zjuG-0&05es6=!x4xqhX%`JrDLdy||M*X){XN8}RzMoDQ9HgVjsFOk z#|}gV!8{+#!j5E@UrjnxJtZI%Z?_gqZnJH%xc(mYyvq%g=^(3ZtQ2MVX7f~07S}&n z%LJueJosif_@O|c49m&$iGh1|5+*ksCT{1Xax)(uR z-!{f=aOi_>@8^>(f!W-bUm9G!9I`EX*YY~Grv7Ua5w-8@;czmvu{Kmeo zpmz@A_QtwK=O0@sr(LzvMT}@9_7`E1UabRo)D{27b5eul;qA|~c%JuWkwMCkzzCzn zNIPBqzlQBBdPmtIk{R+kTTbzp$n4jl_^|D|S|+F07@#tot^|@fH`P&Y?=k}NgF@fc z3uUhTK&G(e$Vw{bMK!1A*CbWJ19<-SGrNcv#G#Uoh{hbNWfR}qoENV4I)sQESynAD z_)iyKR(?E{Ub(7=p2&1bg1|l6+Kxezb56AVy?_4%K?4`*&`L4m^HC{g=aRG$fphll z_~R%kt^>2nPi_`+XV)z*@gDEFid-^3Np?X_9^_!6U;b%r@PvfNS0?>!C3^2A1VVav z`$uosmq^*m{S#JKI5y%Wghlz4JKcUD+*_AS?6@$~xBpx6p}L7-yq~K?=cVS%M}ijZ zbC!Q(+Haeaiq`#TXt7y>E-fvRd?wdAF;kr31_9@nZaJ})^DT2Nru<=`FTTz886nHn z{7b4d_T%o?_zgP`s*538f2-M=yz7`TWKDUEOmuwGv>>;Ps>*>7O-Su+0D=d^q|5Z#r>H#HwJ;A)4<}-v$57hI z)ya`dy!1tlAWPf6s~R;(VFJZ7Uyw|HW2k?&1^GrI2|5*41U5n_2F8L5gF!9-u`PG{kZ@!&&d&4nK3oToOK=d4t5H-U78ub9#?Vz(>mq6h^VYl zEBOs5xGU(eu%7+qJ2#ALKK#8iCAY5|vHl0x#myOBTzApuA;-~PaM|TAD&c|il%3r- zYT=g8ySUn%jU^gzRW@`&=Bw%HVArKi-tV^C`Nxg)*$aMkDxSp(PPmtf3=}wVCU}o{ zSN63yW&}#sJtRx;wHy)71uV2Wof*7|AG+10f;CkS3XA5y=B9?9Y5`zzia$C1BT{-0 zOn!0WVprsPPODb1@Y7#8^@*e+(&YK+G*$6Ogo!-Ql8n9>WX#54DB3$3wJuxk!(1|FC2i^@Ou#; z%P*L6A`K@N(mzFC@t>Ye`n;6A+34fK2bZ<{h$Y;Rie$l8P3+@|7WZ<8M&x#ZJ+N5T z3-|J{nMcvE{rD>E=X`c_!))&OG;CXYv+zx8mQ4>Pn(`95=kSIs0h@Ll)>6lmC;M#a`*MkCDPF+y5XMu*EtnVTm7enj*3t9ei)`+ zo)OXe7pf7Y#^0#)uF{^DM`4{(g?Uk7*I&G2WNq;uE)jo7!|$q@(YbHGBdaprQN^d4 zR`UJ)t>3r(l!wd4^*u!rMx)eS+jM-XW?8(L{EWw+o{fKE7}JGAy1}8l}aT zBxmzDT*jt`<0OV=gFIQ8rGHjxi5XkD=}dwb?D~91xRIPpeZQ*BjpMFMT#NnfKi%0U z9K~g8RV#q0uMC*`4?HB$V|s3zStUiZxd;jVIdc?Y`lv17(L6H{S_ozOk70J|?Tk+n z`teU-Yhm>Ya3OJwqA4cw;4aXYc7ki}456I~eR_*&@|UTqD&5oA%NCb* z`Yj4{LuoGjA)rG8b{NNgDZac!uOX>Fiv)A;09%8d8)9oGMFH~f%uvHiL_XyV!jiU5 z)&gnk?Sy@ee1%mT@})6g3Sm1B;{a|0<%`awD0dvEyC^^vL^t?U7L5V{?xZKUKNkJ4 zv{|hjYesyknhJk)eWGi8^O}39?z-mMU90apd9gC?03x82O=^*Lai)6bfcGH*C6RaVfWLBkgZ=NHOs00W8a95AHI#nO(V28w4vMm}Rzy zQ0G(&@4CgN#GMtOi~3eA=x=og`K`XLH$Q*MdV736H1=7{W5!ZH0vohK$6J?rs#Mu+gMPaBr05q# z?{po3w$=>}Ul~yyf&R@Z74KwxZ1VhB7|rj|HKv-3voHN@X$D=_>wYeIRqt&fadk1; zPGZNx>zR4wjM)<+*H#A9;Qp8`#G2h@NxwstZO=VrRKGQt1Pz?AkhiS+2>a`O{ETI) zAK~nat@Aj_`L0CH#9I(U0sg;#A*j$-MdtK)uUzgy?AE`8-!Es@E?mc^I#f|4sZ<`ge_ucbr(egCuhw^9Jt z=oUYIsW*>|D(x&fN+dF}{~r)b!Zf?#guCih{=XNCkU|? zo3`_p_5pr1>zICZcCb*A^@Zf5U^oIM)Qj+?rOksa9%;Tg*Kqv0N_&=g)N?FJ+#na5 z5_W@O3bNqBSS~IaHJzbmUZ@;Eacsjiv=S=rEzZ23FgyYZdy*ktf16hP^>aqZ(5}upT2Y}WwD9>^DX>wAn?N_CH)bQs06GgOII$XVkf{IB$hL9s z7+wTgrj@fDY(M`-x;jx*E5oHpa7Rp z)CB#rH9vpaBDuZ6%9j3$p+`mga_;Bq( zy@VebolJW6)r8_k1OY}~-Lu6dn&EqYwC8Elm-f#O=m|@llH7}<2I&MrzLGMg^u~XQ!^&oP)3MF%wOvf5KOWZ58|6wPC8vchx46}wLUTA zJZ1ZO4XFoh7q%ajC*I0M2#x62Q2j}oSeP}Z3)5QP(7*XSCV|uz{k;-f9(xLZM|FSi z58UUT;vf~UNY&+fk-z>I;U#C(m`(%%+Cpb)wPdh-#Jw9M1Zk~@|4i-BuuFs$EX^m_ zUa+dzN~6dy_>!exP=%h!+^eq$B%#h1d>u+HYP6>pSGi424Pc!Huc!~vy6QH8usF>t z)zW5PO}3ruQP5QqDaFkJgU-8WCv}ZHD!rI>ZC_1Y-=AK_(m__UtSt?F09`wdT9fa_(UvQmClNqhxh1P%ylfmk374% zpaU))iuC>@|6g*w|9?I??3d%$m-nc*A{6p7B~>;aiTR>#l*fpQ5xft3jNSZqiTh_| zfTqwDCw?JJEbfP>(Vg#8>j#kh&H%|>^-j-%Yl<>#Ro!nmUF3X$7u@$jGa@?Q#7Atr zjh~0ORRtq)J{?F#$UR~R%K>SXQESK>{eb>SA0{)`CVp$Za0lLX>4C%9%6V3@LBdOWAd&&)%WhT5aj|puRS~SWmn;mU?c`&n6N9{d2SPtsocA zXirOGgzggs3e%c?$83dv-evlIZ@6_fxN;xm5P$W1&zS9NZ+P+9ED!YCdfY!x{$>m* zVRxP?|D^Ev#)qgQ5u@Iet3SImv1f-6e)y~lc--?Z@h`NDPO3l z>C~rj`*r8-?I(U$I1BOjf-Vh7sKc+CE4ccl3(nyoMkbh@hsmG-w3$=nnbCi8tMEiJnW9@q-?r<*FLv$w#iRC5<( z*l@|BH& zxV*c+5*0=Ucql5ioh}jD1^lMnFCQ}Ht9cF)heeOqF<8HAeO7ABFHCy83^N#S64qJ> z8OY6S^~Z%O3JO#Db+&X2D8;8m?}TMV@BC<_*x-Iub#hGlv(dO-1bhSQ0#^eUwxK6y zL((~P<*R7s_Qv7Lby&>J{&i*zKE*7yv}nvuH#6o>2ez&~zt+Eiqzl^T_Wx)acx{s^ z+`-!Onz&Z#=NErID1*m>ZMXKET0F7ItK(C- z?I39e$KQN$Vd~Ho{>p5o+--(E*NZh>0S*9bYzKVfq-;6g-rKuPO6#l z%1l=GbI!M*{!KdmqxJM-8W7Vs9ggZPJtBqMS?ASsqXHS+9pL8rHSxH*kFb6USvH+y zhh=EcILRF;DV6QcP8wZpR}0c2&H`ai=y_{*!{lvz95;T%4YFN3*YjYto%4U%@7;-t ze4S+(HA%4@)KJ`|9>oX4-4T1@#ybND3Q9*YpG=$`gQzNVe=8E+o06^Ym1*q!l`$Qy zaba`a1TV?akCa|Vd|IZ+2Am6?W#*@2~^zXYOL;ZzB{=%d_YG{sZ@73Qjy*C{wqX2WBMj@rgStprSG;l z$8c@iSAJ|GZZey+eQqMe{F7M#>LH)T2TR$(tU8F+v; z&lhL2#PBsUS4fM&hsQ$MK^nM#kKN>;eb@p0T+F>TLGXU}VFDwGhcx}gGjVo4YsSVh zM-0UQ;uH}0tNBKW!qW3N>14&%kV?U3)TA6Do_}YJCC*I-)GH9LoSDPEn54{?XC%%HoC+umhusZ0$x;ORIH0zJXJ6--4_u_~2=K zf<-_4oo?B3Q)@H#2rIRP zj=3uhXkjxUC|RBlUehvpz$;&M@(hm`1J2Sm|6DFI?ZZdYyhmcEboz{4DiKx2)gAXVt}Fbj&41>G{*vu{CRc{oX=`1`h}7 zeJ~5R=?k{QK>onP2JX}HO63;X3}e?i=9)tiTg?n|@!F9~bS5Hjnb^GVy4ta-4=B&g z)3S7}n~mifRHr(MhJ;0aEh)5RccIJU zP=xeoTBaSf{ip2DnJIS2n$UvRt*WpY&lyn|rhk9fGml(-GM}Wmg=v;@0X zKG(HAr(4IylgPF7X8F;Mv}B<-QHQB4{l_263?&|}8+nWj4KE3ixl9>Y6;K0P?o)+G zq-F^xZ@PtjBS;u?!Ax%f=M}bOr^l{API0%Qk1}(lfJ&1EPE1vHd;r_97(4|x_e_2z zcP7vHR1(qlxz2)6v&wVKw`FE8bIS*ctDs*hyuLO1gbYRls_$H!9ocf|49*k5tj>Ud zJ4?o`r2p0P4vsI??`(H=J&SuCbU)pq0$L5s{?Jh z4Y|`N1rsayTpUl_grn9P??`OD(RWA_lBE09N6WrcCt=2bG(wHaGkgsSOIoXQkfXC_ z&HZ0*wKUOqfNia>Jn5S`;v7bLOToUUt=Fd04QpAvt&7Cpzax))ClLSQWroXRgr5eC zofKmmWul7^U_`+_$hC#Biuf-1mJB{IZ*OzT&kf6e(Z8&nc#fCb9gP#;K^jGdAw+AO zLphz@DyYnI`H|;HsJ6LkE#=`3x7SD{vbS?4;onKu+JtRv{{;RG1GK-PYipxY_aVIL z{vyceHeUX6t4>&tR}->!%R96aS6d{3L1~|MDaF$BT>{^kYbDU-l*^a$XP7vpkB9Mn z)DF@wpvy>7I}-vF3OKWewy5X$a(XksR1_;*n)MZaCVC|A%~aJzqNQ>#N$&hHbx~Tb zgLaX+F=WVnCRC5U+BW#o+w@{hK@Ph}OjAst*qwxEri79|*)(^}bJIQp=~!RrmGz4M zvPj*E=VD?u|xtmlQ3M6mD()PViPiuk5JxjT>h-kX;O`gb+P86@4y9dV0YUU zyY=~c<)IJDaR0ZzrtNRG_*cKm^K9C>OpY%}n{Q6}G6%atVlLv=9_&wlr;BsFpHJ_p zm_|&eC-qtVx^rWG7D(#Gvl6&Gy?HsG5@JIs!Y;JBUfbl~NyJXeN+}PW(siO3W<_7K;i=(?(UeZ|-^LyD1Gq3-})v6e+2v z@!bwNxsqvr^H#!y%D`LS+QcJVmX_DN?5>trvm z!Sx7saC+X~Hl^n?2#9+bMoN4>g8kF2-qPTPGsBJeF0`aZfLgH77;YC{wyf{frbReW z<4A!$A`qK`w-l;Pdm{FIjS$w*Eu?e%aNLvFmvs3rVE<=Db%?r4Hbfv*(9+YPZCx{SQ+Bv$EPrggf}w`Ci!_G7kKcEU-R_yb`(_|kP=CC3O9XqPQJU% znPV17&$3qJ9oQ-KtS7guU}w7b$$M6Nx0YLGQ`%tkuoLj-@Z$c@;N-ovcS`xn%T|oR zdohoho~dBq>Uo)2YGm1^<4N9BIr6=F8`DVIvWE&58!hibwYE=zyNY7l@wR{shm;^I z?#b2BQj?Nr-XAX3%Q=Bg596+kt9ySY#t%NyLkur1+$pDyTPE(op)J-3Vflx2;23&ur4|;RZ8wf{bw)ld@oNJC+!dVz~SuA zKnW9t>FFE0DOnHUwJS@ZEy2g#lNXv#NL4UB?rgYnB-y8S){c&n{a&Sod)6v=TquUh zl+btH2^(X^Z{LTAofQYpx=lPSX6HuI$6-u&(_&D!R^G)t3lFRsHN>Ret4cB&Ql(d46Jrn!S;q^m-+P;Fk#Vp0lg#VmKZ96n;F54BG zlVh09Zbal%oa};%9MBZb#Ot)Lw5Y99d2ReDfA2fy=Xz<7KF1Tj`@!G)l-=ofFmXoi za1_Z!uq2G)W*>d-|K9w&OmCKm&jPl_n7df5J`jj{XZ&7ABhCk zEpmaffybhT<7g!w6aQ3o`~DB`3Wa$R6Zf8%Lf^WGTfZ6=rCa@M!yUJVoPf)3X4*Mu z?^wKy&SbQwP))4i{x+Xs*LDP^_8FIar4|D=%}eNN@*v>p@F!X)rQ8x#$3)w!tHG|K z0U_1Je@ZB3wA)Z%ZU3*vVSAaSb>~29pZzYMXGuDPm3I6CoAA6FrS|j})Qh$Ji0^o? zi3jJ+u7`Z+-d=cF;aAI&o!TT_q02!TPW?csoHteK>05Iblumc3+~2OAxC=cq;*#LY zi1T0&iVfG_9W__X$&OR@SAl52=Q)Rr&0zY<`K81UR^Um`4^!z?RkXJ9g4sTGvCG)d zJc?|u3tM*RKAJl#aiycaKJw)<$@>B6%3elI@#BEy%MT#?8=-spY!{uCk`h0@mY<;) zW;0%qb$+HzYt4EEJXxayH~K~S89Mh0!;JRJz4;;p@*>?KT1sFPF9*OdvL-mAypPp6 zXZiGE=*im|vT8HhWNAU>S!R;)jNW6MfrQg^or^ss0*Qk1xfZ^c7q}-ev&#$EZB)2x zGEfIHmmXgBO90xRBFdn`pJklE*#P-E!Y%)8`OTl=BszFE2icb3&+ z1Kkulx6?~=L~o+_%DN_@(c3GZhgE{G&N>luBGdA4NYW-vvK09CpmS9%Sm3U0? znN+oMKi4u?iC7qb9y;>SPgA*~pmdO>u?c+ec9V!V;`P?Rrz z>8bDwR=pR$dTQfYT4|u{v0v|THg+GdhLC;e3FbPH>Hz0RPOqx#T%0Mr1APuXf(&(o zQh)feS~Uc_B^&a4kv_Et;-#(RyeFcuMc=HfI zW%kSh{*#=t#|6??QC>yXvUm&`Dm4rLrWsPhXIKI2pjs;OV<9R*OZRcAUeiH!LJ7LT z^ISDtQMEI1d`iH0&DVktV?A9-B4Xc8@Tb+~597>+cHN2Fnuw(OSpP(6+UN)?vHbfp zV^}}wF8aEvku<*VN_MV(g9W|ZqQr~swm&Be9OEV@vZm2UO1RIp%XlyH*2TjwG$uH# zTT)#k_r_Tb9ymbj`J5IQJLQfi%(RW7zEw+|Ux>pKRfeC+e6oD;nkL^cz;)Ol+&DDXlfSwOb%UsiAf)U_e+jZdL z7X{fXQgFZ}>B)FzoLAUFYI>j{zJbfjZI-zR=1Q^&FLOU6_besT+*{4d&dggnbh`9H zv+Ni0H%ddGs`cV?kmrXbO=G&?f6iUt#I)?t>I?s)JlQx@TN%_n&wa0>_gGE$7viAV zT|S-7uv4R54aHHHQ|jyfIMG#T(qyINyO^cp`0QuXw0P6LzVt@>PJ}0Tj=|xWU9oUH z5u1{%((kkRTI--h%^G*tcdo>ZPl|&+nC$mDC%)nX39N}Qt%x5`Ef4(R#>=%ydU|<* zd{weTTTR%>_JNQRFrCL0QIZ~2dvq^t*TjjzdV|XqZT;{UIf+0^jsb=T4vCbuJdQa6 zk`PM=@J=E5_X1}kvDlStR{P!%%$$LRcOnB1p>4YbijP-`pVemg4>m+65aOE z;;j6G_{;`2{LnWFS+PYQuW5l*G3@qKc?$Bt{SFt|1f-$C0Z`O5^Zs&=z*|n1L|v2J zc9+qMYM=7;bDR`Ct5)XV@Hv!BruiGnVr zlr`{;$p98)|M3R@_oXy~SYqKn@QL{Qgy}8Ho}=Cf&{T|~ALBEMX_;GCE$LY#^GIp; zZzHHcg=wkp_z4e`ZQn==bUdHTm7ObQc;xr*nI*%1FH+U36lbKh~u%e-K}zxc4n!F^3*)93S8)T)6#;Yr#zFFW^hKi1)Z|R9}kb(L`>? zA5Yt*$ls7A}l*}5me(qD|2;7GdCmVpT87De8h zTZw>2n%xGkH5J?72N#|q4&05|no|ICJybXN$tr<_!;w*Ym@36#>F(cNtx%nT?}UM` z)8;g-6;%`$SE#YtF7z`X9PEy>L|m-oavUL)x>~V+EB8b*b6c2S+bWk`1=;!6u|ykS z`P@y4wVUWm<2sqfVL8Ka4_@NJ&x<%=?wRTPV+DYPlt{O@vMY@+4Ik`D2`01oTk)U- zY*D!OYPE#1XfY5-Nsy+MNK@jTWfte*Gm1w0LtJwuQ)*X;IIOJ~drI%B<9jVbiImSd zF8eZt)|;hXi9n0G>O`Z?nMgvqCwNry|1jcG}~XU{E;H9q+D#+mB<=!_Xo)jJ~CV0|%< zHUV(0F5D(aY#9oW%pS477^47I;CtCJCyt^q2hP%%#%?v}(OZn*)BvhD$N21Z-w>GS zCVh~)K(W0ewdT86hnv2|M-eQ#>*=M4277d!b)+p8`9&^8{6dk_qMUBK67n<6mSx3IZ7L;BS8L37=0~1TwcyUAZE%Exe*eiE0E6WbamVu{c0zUgti176 zYoY|AspaL(w{w(Jf8D7Cw3%^bI|OT zt7cwjT{$!1zj;+j`RU^0-x>{jW1Mm3=XG&WbsrM4W-Kf z#mnwRvd~7WIy~(sug`})Jp@f&ywbsrS%vBk3$xESM-#JKm|AWPM^6f>6vWGFV~FC& zo6L$a8!V!+?_zN2P4v=9i|Z6IazhwV3V-vp1pY4_1SPv({oI>>N)_Loyo)W(l78;5 z8Z2pt6pqba<^EasJpU{FGkx{yoc@v|eX;>}L=Pv! zHf~aJ;7~fRi&yEOZX8CZN{*2R@IozJ9F*moXP1dhlJ#q0!gHzb8D2D3%K>Gh; z?DJlS)<)!oG@$AX{5o=&^?!s=|HIk)Ur%m1dzT;iV27bfb2)B_|H}|ttRR%SbMg&g z-+xr~zx1lcB_{S*B5)~!KEpnv(BL52e^HRoL^kaj!1%ZEW|-)5E zdzwe&Xvd9L(I(uE6RH+PjZ$koXmG2EDE8w5CwFhV||{ek^drfkv( zOO$6Sz6JdK=HRChY5>vFPN5b6$#C<%her0sh@-`uDNdlYu?6{$_+7{of@EwEv$GFM zEdzp8G|TBSew)@Rk5+N&9F42MlWYx?t%dy=y?6MbqI^fNQKUV53u$Gq${CsvX{yf! zviDu_VWcH3zhZ^xUNAOwyt;_T>p9kyE!!JA%XD_zHljZl^?o;a~`;|NeCeZGLk!T2m-#y@q$d3^7`JG~?kFR$^q7vvOqII^* z_>{3k!4p1lZhlU_D`46M)cj_q|L`oo0@BYn-uBe500qn?=Rfb4OmIidxhC6xiTK}6 z;uFVZidKFfTo0DfAPfYYfar!_xrG23teCpwXM;BMBB}!^}ybt}I)0DFA*^WtbmetChs*DBBN=01e?OML&$I9E`#vaf1L*eXQf z3m?aI)=2knE0T($9lk4)iX3c@s(1-pUTm4o|28WOm}OwBdYp?)z_diOnJ;ax|X0`jbuQXLSXr%@m-{x!Ju+aypL5RhD-V`jO?Z+=%+v~-2= zX{X{L(;qLhq2;K|%jhNb5Obub;r}wUT&we=X;9!iIx*8$Ny%h|)khI!QzhBuVsh=5 z;M0i9{SZ30HYuVfZJM~g9^oOM>Kt`$D?Ys=2v|JHx1@d3hDzE}qxq&Abl1Ff#z6nH zGQG9bjU(-ulQm@vk?qQK26&nGNv3Qh0M3I~hW3}FB6d1ueh^_d3Jm44**jQ(40JbJ zNGn;yf>l;|5p^c(xeC!XY}>WEM~&J?>;SyV7z;SoOL2}TqsD<cZW>>%}{}5j zgX)N+mZRksiCC|%59IP+`$!=+T)JQNcpn3?ygU+$vi~z+iztn0d73=vhHD$KMUc$p z1+2r5gN@bnaj73{Rn`KyGw8O72hHk}-JCMjy3KMqXdLS;hDSijC#54T+td;}&e<1PmN@tXEd%%f9$i%Y2@``&OVK2(TT?w9TNLZALeb!+ zma!;SZ@s|X51r&#uO8>DqmOdvXNB0uYeNibT4xj)CuitpEJAG)UHJ@!o5Tw8>Tkr8 zz+qqKIYZsPHU71Yz4fhR-^OlqbXR|)feIp`;s9Q40whD!KR<^)MY)2eFY^Ar`-~fz zi!3TFB@P@K2=EeRUU{2zH0MgVS7zqwc23IhED25KoDVmr^h4;GaY+Fza3t_;Xd)cX0ng7sVj7MA zCBIp^i|^`8N`yQnsg7XqZ&06QHMvqDLp~!M*9fkr6U_ zQGkQbAKtdq1Bm5@H6YQAY&I|QcyiR#d5p4f)e|nAeNfI5R02z5z@>7MlJiH=Zyy}4 zM<2E+>jzi34b4~D^x`U0`xmIUTuP4Wlr-YL17wMw6sUaBuCFjZQgY7X9obb;&q(HC zn1s|dICUUps$5!dE_oCwiT0IIOnZAnP4xQ;t3zHq}@G6rB z{}L8?0~gm`^M_p@kE{M|yxUM;CpWc+m2uAbFWuX<&!saq3R}vW55L;AhB%ifuzlYkp_6 zmW7`$fVp92iLgc%rk*|QL*c)a1hb?cOP$`GJJdXHi^&2@M$|q3Xz#TK_Lk?z58n

)-`~4#@=uVlo2P<$3 zQ1r&L+6qMJFNc!4sgU9QjsrTkI@Dc_cr&ZYX0K=_d!UJMmoUZkKSC>8mGbfE!3+O< zn>904KRdaVct4=bxq$anuMC3nZ0_9(*33+UyTN-Lvky>H*RPoo%+S(5?&+&uPJY>V zDoL(Wx9*CuZzX@;D8{}{^!g=;p0ymbIgQ+{oEe$!yTdUTA)Z+@BRjk^B`0jU#j!jR zF&Dy}Zzv)n94fAY>E$ng9Akw=3fKNK1J`C0tDSm1`wa-dRT7L`PkW!we6 zajLIHRHQSYY&P8&KXPe4y#(2h%A<@ELTo>~D7D3ZJhT64+RX)x$KOl|im+CaI7FKT zFgW>bM}D6x!$uTW96&K_GMe70!Cg>UXjnF%T!3;@=}`vLeY~@WgO-Id6^g0{!&lA% zWqgPKmfilv`Xn?Nxv%ev z*I&M)TD=bUN5#kH^3sPJzdCD`2*nKkKE+P3wwHtPKKBQzPP%{9bNBJp6XYO z(FnafT66$EKl7ctPSx``!!PLX`+6knmxwK@Z0BI*2=uj!_GHCXbtb-b!In9b^pUH-qzumF0e%5@2UZxG#gcu zan8}7e(z$aWC@}GTRziC45wA=sl|-H$9sDMLZw+|Jbr{?Bp>CZK^Cw@ z6b>rV>zv~kGJ-1}F_wAW=^DN6|Dx?J=h*_ht9we8*_z&JFSu%%QL=*`>6G zmh;PG`t82CFwI_d*L~o8*+2I8p|z}P?uLmT={M&8&yh@p2~Y=dQ8`tg@`2+QR@T13 zQHHRlx#3S2lNo#!|6Qx!#Q0_|G#e^Gz@oMqa(5PxtEv^KPnXwpFi?EA$7iJeys23d z|7c|~jjN>|UJ7XwF?<5gjo*5}1{$)~85SLMe<;Cot-$smfj!WOgSVi=7!Ru!uMqC6+$kG=wOAlW>ttiyqfPTaRhU4Ogu*Fr&fC4L^BjgRv zZO#uOE;~Ddl5%7aU5YxUu^}X+Z7{Gr7JXrM?RUC7B5Se3)=(h}*=lZi?M$$9x;;Mn z(i5J)%+OuMaJwuuN!QaJa;^P_7w7{kTzbc+A0Qb1pHUwW(Bt`$gs6?Z2cB;>P_6m& z*M$zebIHqenoUyr^I?C)v!6U{G5K~}{ zge2+Tp@xrdD;`b>8D@NNho8`3x5zRGygXtxLiH)SWx4U4dK8{eSUhMZbj{x~F)=N= z@1$v>RRxp5k!LTEio_18L&sX(eI?)hGhN)^b<0Y(IOwbOWgxz|T}LEWDqbN=7?u%6 zBc<;pbo26ZDM)SR7O6xOe0&7Tv>W}U6W_0u4aF;*mM<4!p?^~IX${qTuOq%S6t7rm zC{`*i2}CWb@z9r+Z+L~M0bm88W&t_Kwh2UfZ-o{d=p(SQ7?lDz*QCYrYv>S8Fd61o z+wDG~woc4AOUNr@qR;{>;4$27g_zjU<>=W}5#*saaPnY;Hi6K8qd@+*%;ZhvC{!?6 zhlr$WCCPQX0WrF0!}EA>THLt9Z@-fR4t~I$4ZicaLy(R}`RMBvoF-W4E_X-s)8HP( z`$qmz{bEX3&ekYZ5OA&gld25L(`Vw1qDcT40G*Dg>EjL5Qm7O?1FEup+^cfa$*AD#`ol1TysC?6d_xiofHv@$MHI+te&;U|?#0MU7 zLG*w`uO-*RW7(kC?F)C*h3h$5Ap8P3;eyHN*h5@eLR9PWn49~o;q+(fbRN=3f#=Qz zE@m&b9l0hu-bGCvN|r?8d8yK^JQQW(iXIIr7bxYvZE0pjhMqzt<_x3YO zu32Y#&*5*e=`vd$Dtp==f&>#J!Eh(IIkMu2LN-1uO`1`jDzu=lBk50J?Rc`_;D2`_ z_z(IY3h~Hyxf1xi1s_OmNL!lpeph|!FGdahY@1uWmqG*B4P;K&5p2Fl?@BY>I5S&?FX}vVFd+X*nWknE}?gqbKw=XMtlsbQp z0yr6vA4nQVWi!0ckBv1aqbztLv_jgYs(RC4b`v)G$i46;M=vVbbP()z*=@2YQ8e0*Y2fPibN0<~A_8njS@`k~mI z<`@6X`{1G5wPVo6s#>UrB>mQESHj*dhX>=>v5wX9JxTVXa^(qQt%4)bvHVfY8&86b zOLjd2`TuH(xL`jSs~)&eZK5w`lBEmJ{#HMPCy(O3)wyhU&g42v5 z#*y^7EkKB3MJS&9(>l>JZn4C4_q5(LYc(Q5udz%ohKThTkhkzdu~yWPT?n=NzGQ%S zm3xfa{Wk?v_FD3zCz9Mk_#q_rd`tDG0lZQ>__I8Tn2Q2$O(_-4h`y%_uhm3dBWa4^ zJQl*|VGd~J&9fWb^(5n0Z((uvx2|((I+>`0yarJTc>&;Z&Ofz(Mv=i%a8 zs#PI`rf}~CwRMXbvYImL{A2O`y64xbrJdr5#DVf_-*T(tE~lJ+5ucD*EbE|lKHIW+ zq-*-4y5MK`u8xPAkqgJ?y*_Gd4!>zvs0_zzC&WG)!@*1Ks*6cn{j;&b!pVpC#J*2{ zQuxWu{HG=Zv33OQ;5Epi4-uj5*k;P=f=TqT9X{@I1^jb`{8~|QK_Y0#g47|6TI6(I z*{^^m@AECfoMtt-L^=N%I4IezqMt3&EH6*C96h>i z|9fUe`b8v+O3u{TMKLbkSq!t%cld>-rGX!QKwiw_5f!&4uJ#z`f*{5Fc0&~&wVJ8l zk5L_m4ORqts%Ca(3~v@12jCs}f&eQ8(nqCn^4%^uuUN9K;oxyMbq=FJ>YTXa2-u9( z0OGRjE_<&uhNlvOu)Lxcy>I!Ia_?Ew2U@x%Xh@7d#WZ)MQ1S^cr zY^@?plD;T|8|v^%H3}lyDOYTI6{bc}st!Njtkwg5%PT#i2Pw<>DilXvU3vJ8W_!KN zoAclHB6*EpHiC&%U(6slFJ_PppARU28>GpBNLswUd$zTf8RP<`S|ZhbW^bVwN7vEb zPg(MGpyhRH!=$awjA1l`Rs2*CSq;f6>BTs8b?}`*mxRj<@_}qKx9$xQmx@aSr$cMS zmQLRd%#+W(xd$d1z?N(I7Ss5ZCU^xxRA;+^1yd+i2EM+87XD_{uTR+55Md2~k#267 ztXs)}uyX5?odwZL-Hs*3X^jil>Z zO@_z6%_qxVr+zL{EX-?Cgdnk{us@j%AN`5*0%xLrxAZXi(6PTcH zP76;~c!K6+MUhbQ`gL>N`xA1#YB5}x4NI?zr6ge|_U4f;30roc%p#*VN0vl*vUBo8 zqt` z-Vq(w(@Oqn1y_4W_e^G25Btrra-=W{Ac>wR=${xJS%8aj5?j6j8H5ku7Y23)X7J3K zccA&ClsGeJ{<1fc80CH}WnI`>R!h11@onjwueGY9wyFMB3-$wkf)kRWPSUYLX4@`a zx-a*+Df$%Gk1t*g$_%%_w4f#(cRSY?Hdb-2`#-bw@jq^1&E5YNjcQ8* zMzkpdj@lO;#dM0zU9Q>1cVYu*4EVqT;P`O?KHTa4JU~*)4;F3D@s&a=T&5toU-!&v zO5TR&MMvj0LdaHf1bM>y^VHPBq85Ha^+W^aho<3AB#$?Lf3=0l*#53Sm#mr-3P`D)<;L4hD#J9W6DXK^>~;ZRZL}A#vSo$^=h=Sh{3N_(A{0 zB|!F_f2TIuY@2_T^~u5=kkZHCh6Olb0=_N8C3C=Zdo~o;&-L>ioNUM>Skgw9uNPwebXVClpD3PsEZnm@%qb@ni{OTmRW`Q8 z`YPyk#PrqVw^dwBWwI%toB=3$02djr&L+0OlBXiWY2|_?NrD=QO5ILIi8I^{*|Z|hcizCN^ckkf>qJgOsELGo0++@ zMX(W|5m^ez@o~*%O%7L77HgCZOieTX;hx|j7#5s>M^{Xxy!kH&|n<)e?7 zz^z?QjYk0e(`Rs=48)2XOx6Tdl%v*yAcDe<2UsBB7(DxyVJ7*Qv4&%#azLS}gM)An z`<^5oWm=duh)Y=lH=jd=I%Aaz{uCUSi$`#ACcf?q+lLM`|BP(F0yrxC|KyYw3Px&&r%D+Y1)a%MPIR(AYtlfnWJv%aHq#*Wy;wF51b=`L6l~NM!ujq-*@H+ z^Vm6!BHeBSrOjxXNOHi~ihwF5V_) z=YyuqTeu&`WBC_9k;$%HrzN$D@T4n;TUZCi%)e`QwJ8#MADCEi~$ zu*iGMWNw}g6UmWuP~YofCEs&HK7PV08kC_WH0>>B_Q#5mo|jh3GRjza9Y%b1sKg?q_QT-5mWi^a}W76KzHBXm9c8vzx3ZiA(P$;L*4pcmedE?{9Y zxK&CRPytifNM)PtS((f;^#0aPuh|8;{rQRag(``_WmW|pJuE9b zKo?_!9c(UK_FL%#CD#}H;`Y3w*-YmPqEjjASXdy$rdRDDc3t#4+ZxW%Zgc=RmZdVF zc8)SYY$w{Ng2xDc8|9d;uQ}Tm3_{TZ!~Q(iP=B6hzBpVK(tDam(Z;C$u)gKQ$9kdE zvB$5DcS-5ta_}Ynv5$;4N8hNcu@#Xyt9>!%-J~zySCm3xjg*nEsASeh%=a8q4vpm% zfif%!VS!nO?MBKS;v5ck4vcwySoI=+H9a1i$_iz;>ubn@F@CI*3j=R+LTJqP$qd`n8# zum>@|IMm*jTaL0&>t+)1sUq95svV;n14t?;ccE=YXtGZitbQKA)mRzO%}1qJJ-(~q z-HA3OCw(&8wN=-E!Sz%h>O2)$m-irobNT+;%y1VsqSaxX-Lv&;xjZ{N^>@=T;5!2v z{eHJ((AHM<=Fh9D=>5qfaH(_qjW13#p)cANxGYpawXI-A{lT0YC5*JBGbGqR)0D#s zIGo2XX)n>h>;*KMZd>}FF2E(rX+bR;@D(1nD0oe$y99!f`sH3F8JH25A&zzrc5h9n zy|QtnrpG`H=q)bo5kVS76R0cp=m@Puz~780H_SREyVC zRt^NILKi1bkxSCYp&`B)s=Rgk2*xWd=LjZV9^$e(Awxc`cJLOAmQ}cG@vr5-dq@;OV+xwn>A91;uO%tAZ(BX%`+V#7 zAvSu;?bFDNMP6#O81Xe{-zDOd{+_H^-6M%Zna;~c=cbK0<+O{`!m5IVDGvH6h4NL8 zFxU_H4cIY2Yx-XK3Nu*T=i28$um>BBKX6A=8||>Sw%N|D_loD_bc~FymQII{r;od|SHXaK#zlNf8fZ+V+Or zpzKe86CLci={~Q194IqjFBJjie$wYV>E3oo|D-o6Dlb%`v?%HpXS>sm(C@ooa zt?n2n=}4*o=cWw=byk8=bHt=sV6Hn(_M|JxTHJDdp%q!W1QMjkXI(} zXRY$~r2?aM#UD(&Pt!A=JP%p5d4ni>Lz$Ej*SRszsinl7y0nnZhH@PGc0sxELI5n)s3{OV1W%mb9S*xm&RrL5w@(JZ#NM4#bf zJ!I9GF(aI!IQx>dHP~QV^{_yjr;Qe8^h$XLVvDEhQ;ZYpc;j^BhIBx6os)6h)q17> zE~ehG-wp5u-M39wrUO`ph2LgSoKkG)u()amc}AS%*^<}plhzt2x}=&U!bf+(X9{Og z_+lQj)WtZn_Q$rwLj}B~`|^AwMaY_@qQTk@=3ED~4`=1`n26b&Esab5upK!x0owAg z>~9$;)01u%%k!j5?ItpVQMm^)OByk|FkSS>CFsk~x$ZkNzuV=23i=smr^vEkP3NAB zmg-p2+r)_t77L}fXU(I+>+liG9L(_aG~uYbjvpu2ESZ^p>3u(wFnb{I;%de8s`247 ziam)J6sIZ?TK|>5nuZf$AI7@+>K6YL4;?=S+8N$JsY|Ja-x-pSmcV&IN+jfr!s^Y3v}8e^3k9Gw)&uRgBBSv{~}$TCH2 zpyDpv4BV&B9>+_xd-XK>2v7R{M^M``FSFyrYoa!lJ5zji6me9o zC`sbQYdg!p@(PX(b@*2Iz4RuZj>;5InmIvDsMpl5X#S_ zRue+fYC?sjkW{=D^JAK7A+SpU`h%g=*$mi@|TDfjd`9(--QPruL zlI4kAi$%Z*6yVO{K9ZJhduYjxcqfEj=6ka^8B+3aTm;DnpaqVGew=)ep|l-T%nj^= zW+}?&TK0fKI9!qYH5s@-*%`_syjc@q)E@BRs<=+Er-q(P$4|1|mA?3${}&!#X`!%;mGZOb zN)~j5JNm#j=`IXc@O@{=NnGF}0nmd_^2Mb)`TaT(ux8BDtnW=LE?c)OQbR+-b2iC$ zHA$i)I##DY1|n^)Hh3w^#dLq1o1zHushlm2cO-^Ai~bxIYlmK(19qRItof6zyX40} zlwd6kWFj(KQs1Yi61gX;zj{z97z39g>z&dZmt>(Tr_F=Z-)$X(Dc-XY1!0M*xGp_xrGo z3f<}vBf%aj_i-D)=s_!Cd)1h~ zL5Z$(=6rzm;Lyb z{9j0|e*1Ws+8QA%uK4sdcZYw1Ft?IJCpq6w`auDOo}yrkzo&p@kRS`}k`X7x;)$H6 z*EAkq^9e{8mqGX$e#Fpwsy%juC!E2Xk2haA0joq(26{|7 z)6vK49}&!}P^|@WkQ42xdRKeOW!*8{J_ZWx*#yX_2_M8YB`7Kmit9QKf&LVi#cK_u zb@+C~x+n0-egO4l;&4aVVz(KY^h0oR*ZbAkFr&1_?}fhnbkAdtl0mk+#qP!;37cj4 zL!C<>2~wXHXt-`Gpi5xZ*ni2qlWuh+7~us6J6BbryC&CC5ey_#G+P=FW@ ztl8lXxz<0nVX>0#TpTC^z51MGzKMkXWpl#941Eznw|S+vOIE`Jc_4`4=lcg34LU;b zm_VkZ9Tz`h$TdkvV|%?=KLLo3QL-m}vMS)W*k*2dm*<|tp@rGxmVq0wbkFbyfu3aw zcdqm&a#f$KnNqCT1df?93kCU_lcCP9vu<7vFBHU#T*!kdIWO`}3%EH##H6eoqh46P?qOJMIjjzh1R^WARHy zzB#^?i#Xd>Opko;b_>?$Cjc13x9t&z)G?wG^F!BuZw(YdaLXCyzRWbuK?lj#<6AiXbP*LPrs+;FWsB1iqEmpYO-?&8u99o<%-m@Tw~;1B&;aD`&01+3K3m53RIMBP%uaku+A{H* zkarpDy!SLRwSh>Y=r(j#GJVoFQ{l;O&D*wM<+0Hk&-a}oO803uA}K{v$1x#5F)D`J zpyaRy{WcIy2TlgXIaMjwzk~0(|4ab?8-HF*3Cgp_Fe=6NCtAFSa^M9~2 z6r0$8Vq?6~2)=s^8=4{~u7(jlv8<5Qx6aaCUGOskb;*#@hnG3z?T)>y!erKmlOZsR z3|?3)9k-;9H6EOtlu&wz(5_P7YZ*L(s7spZ$bAKUty|z0jt@yy#*HigYgZI@-v-*| z!ryzQR!Q&#ylHU)IbToUlC4!&7m2Rcrm4ZUhYs07Sf?mxv8P8Y+ z$k4wmhvtA%Bo5!VmYK|;Y_r*DzF-r)4fyl5-s+J60e{7?dzjk`qOc>Cvr1RnywaF~>lk#Z~zuJ*64yP4oDTUVCy`)_Vn zwcwECTlCa`J`qjknzjTs=mmdJ9D zvqG*aI!&fYOFR>s>F98o4YK8i&(MANC20cKJ`vYOdN1v57}Y}#NtA$(Q(K~c*P=j0 z;$e^%Q3KcMQ;T9u@^}A-qw3h3PEaKBug;;c%2^i_GafJG?V#HTr6+_ay#UmFSN|AD zj42XE+gX1>AiHGhEmq5{4sgO<+;0^Q$KkF^Vt)cua^uRFKE2hwSOSM9SAZcQwRboUg&%dl$x8zop)^LadhrE4pegrTR}rAJq`7E zf;DduQQfmfd%_UPc91iIp;@x?IY&wt!jZH^=jke2d7xPso0v4&PJ~)J+IFAK*k=|T z9FD3*O9T%ivM?#eE3^LMGQ7lLlDADk?$Xh8RBR-niu}E&5X6sW&n||2Bt!z)Oxc8z z>?y=DVWN(ujS@(nO|zUkmvY2!iNvCW$RUF(rjcop|ph@A0K^ByFR<=?((;@lA(O0 zxZ{=}g@QPl=5pU;CF7hux@R8CnXxn`XtI&uT1*s-^PLYyXSmxQ9j}ETG}e!ZNRV0vu7RoZcRHqE`{MV)wpznoYe=UOEvFpsnDQfNXe5@Y za9%xo+|}e+Sl@&Tx|fStD23ZD`n+)+}dI5>NaDSnY-1-{nAj3=t=u&qX-KEg|>*^Gt3udStW z5M=SWGQu5xFq|*8TwR}i-M2UMM&!b|k4@-Xf6uMevJE2l0_QQ>j5B>*@%+dK?m2`% zW2(GNsf*DEC|Xl(b^28eeTc-uQ3%>|hnHK13$UXqBpFRE!0aI!CNg%qDOxgm-TUR} zY;pkik|08mv7h`jfc<8SS!Q25vr=l~{EJ|V0)-L?-KQ_lV!bI zaKGTmfJsEr%yS^dyl^ndzRn(|2Dg)(P$G(SD(jP*E-W=nU^wbC@xX}6B(yc9->}vYn3c{qR41%#naute!JQL}6r& zf3{f*38?7ctfEiXNeaq~`!Mzl)mTHI3B&0>bL3iSrO zIVM%ed8x$L*S2#*FSP)Lr$b;-5)_k0@D{~|EF*R{O6_HtJI{6?AnZ6R{Xsg zI}zxD2#s{}sR|+i(H_tY4FC$v5K#Z_`_gobS~mWm&Pa!kPY1^QZk^&Vc0A&MuN2P5 zi63}zNC^VNk~flavMco>X;i(a<^dU|`?UgR^MlFs?%KiDgRg4FM(2sBQ*P%AsLITD z2$GHIZ3%1gSV7sWUBY>1{iMF?KKF;5!+_4oxHFPgO(f{E=&(CRKKw(OMkQ?De!hwt z)bUr2NE$z(!2~Ly;n6~AUao#;Btrc#ZPSb#SqahEnPDy9FTsrCa&)Q<4iE^= zmrvKlU2|f%JDrOWBS~p(`B}Q*WW{lYM>HaqW?Ri|C|wqMNO)z-M`FEbz`wH(KAF9E zk(H@czYLDP629qe91V7eqDa} zz)e2|2?V8lGv3kEY9~T9PxG04up-V>EEaf}aCrrZZu@$$0WI?F_s%;L+1TaLUN=`D zBYP@&;c5j}#cni+GEA6HwgAzlRwYqY&&X^#`Jjzh+Fe`pDeiupM@Q>=ZP0n*PHyfP zWpZaQPq=?yX$EzDevUWBGG@4fJlLcS&-fl!7n8F5_c_WA9sH9S1$sQ=mNACXhVkqF z;bZ~+Z>Ws?dXpAhs06#byj-AO2|8-nKmlB|B!JCSIX86IrT70dRGXVZ;C}{*5_%C) zp5UHVHN{&VaQ8OIpV2*D*kxBf1R?Glry)nYhL2D5Q2@Ux`Z)lee3v2mV5FxGCF z1;b&H_{-(#Yxke3GxZA+#EcO0l9B6Z`TxU`&9|gK_EYSQiFx}uF`|0nM)r5;R+&pN zkhZ;+m;%uX+5*yz+CGZj7o`27`6nKI?K7yKzlnp>9o*Ylq89{O;Xf(AfT+g9vRz(Q zoc(ro23J+^t)*#iW%PKWt1rezf|clmI*S0nxeavwi8J(C7f)60{rv91Df^rcxQ3=B z;PqKJb=9C!gVdwzQ$kS%)dSXK{iOF!@z`l$Z*5yK6V#*`aSopCS z5wdXqdarQSNS2Srb#>B-3C7hjq{srW8=)`xyhRn-YE@{IVs{%pm74Bp;A|Pn5c_k6 zm5LbIu_+X_s@#j)NgYf#92s{%86Oci1yCt4>I#zY=r2 z(vOLNj|GAMPpE?PJ84mxW?o(iP)ja=kevF)1fDu>WsJkd{uMoGllY(DqnjmXgl#f% zTUa+|50iG(Ih(FczsFz_z|JJKyb(o0>o-;@_ts;J-?|ES#5{Ac?OmheA8XA`)&+oaqEJZE4C7PANAhw zW1_eP{>!IS26Tv2C2tNS4scb$N%5n8I`ROl`aJMXA1wjQGDI)Yu>0x@J#palUXMk*!cDg%4~cD@s_mLaGS@zr2j*u zj~oL;PnEF3Vi6~;=%ADLgW8&#zFr`nWdbl$?bdAyA-w%~Txq@PxG5roM;Ot1`{m!A znWw(?4s&*$1Zp5yC&$RI_pi=n8J&!v?>>f?sZFD`RN1{u&wxs0fPk10E1K*0iG zru`$`(P!3ZB+t}$f@F!?29G^JtDAI?T0MReX&=h?%MT%JO1Dh#zm44{cYpu((f|UN zv#Anj{AI~<_(Z>7KX?@vo0~eX;no0Uw}xN{5-=8!4QS>(&T{slrF<2x zykxQbF#nQZMZ1NhkmT;Mj00Nh=^6Ip`F zO0q(h6ZT7{ZX_yl`Gn6GxfTK}7zVsixj%XS+(XZC9}#59k@1!yKUnN5_vX*A<@VNa zvW3+4*RXj?0#8PV@**3`k`VgW{9e$x?tQ7R_Mguxy(&LQ2qdZcClsve_;MT}0ahB1 z*L~#UzI5q!N8d{>w+8z*Kh4a5sYD=ErfypNz@7N=bSgk$ML$qtc^X(cD21eHy6tws z3V96-GHY37$0&}{fhDpmb9X!tKUY71WqEVDg7N|XC5e;1(M~K5uKQO36-dDX`aN*+ z;RToB;o(R9wB~Mbl8wKu1}3;WS`lUgm4xJ%nj|n+jHQ1vN}8WqUbsP*WFUA@=*+U4 z*$$9I_>hDXS#k8c#>`4MA1ZV{VgIY>$0>a}N)MkQ=Z*r6i}%c~_;Rw%0cf=inN&O? z!4TodZ*4NsP{@sf%o_?rfVWr*>nPFa#{ieRqO4BF>xCk$FDF|ml_0)Xx)zY%N)P8e z5fshUc1I@pwZatvG;y9@-azlg|6J*cbCN`b$3G=TONgcIV~u03f#!*k6-w8(V?o>p zl*_iI-j*Zz^|=`(VvB_L-YNb+C^AIl=a6U;MjzI*Q>=+U`ZHkK7U*!l9O+Yaye?uZ zah2-8^4Jpf;r#W1BC}SRa)YEs6<)f;Xxs4K>c^?ZOTyszl_tUR2cyEI`}OvVjfDGX zsUCyI{cp5*GxmItVPqdR-33+Qrna;Z;*B`+9m~{_on)?KstuNkLPW@(7kr`}I2J$*BW38C?I0>i#fz}s`I6T? zqpzFP{%$K~?1ufu&V%O0?9r`{Y>nPGQc69b=ZAbJFC)$d#^(YwA<+MfB?{nqB9X&7KL!4;tq&o&a#yJ15Rx`{+!`#mapmO!K;WyXh=;}O15iu+~k>98k~ zpUX>BZ&NNvO2BN^@vZP@H+x40fwX=Dw~F=#l;r|kqF^Xwu>#(&0WD`$+5ip`jxRFb zcZ;7et4EO;52Q&%R27; zOl($zICm(*V6i9y#5jbA_iG-~GHeky?Z{Pa{12jyMI#3IXnlz(26t!sm^O58vDJi>u!B#_qA| znQwUYo3Gv%ex~}2{P8SgQKxrGu_d#N6&_SN!`O+~G~GQo{L#HcmX$wQd%@ zaSAa*$f4pSQx`;F#QTlnSuvUnyP7zXYFt46bc2rvor~|sZ>HS5CTgp>S{&%883u*N zhAmGF6*@I5vIjyIZi>fWLQ24tskkNwfkSU}xU9D<02gA=feThoEXR=mIM;s00+`Sk zT~QNkAK~KvJYlN%@cWUrFNCPrZ!o)_Yp_LmVH%MpMDfNeY}I?uCbdA*6!V4pvK0hN zy$~BtsAaX*KQF)CGVWuREPsPOzJG?F_8I9UMn3M}Vx+yf8T&kictiN-Nd+eI!dX4T zll1kY#riUDTjw2ehQ6yD>{O{1vMR8q9o2z4a{Syj-0&w-~ zHrcr^vhbrhnve4*Z70a8qd$U51v&da78A0XNH< zpQo5`(&w@5{dF6h#VjkO`|k7 zmWl0I{?5y7&zZwxVO%QhgaqJ;oyU`L$_t+z)0(#>K`W(ONFsOs??Z>p1HL5tV(I8E zJkh!FPY|&`$DX6;FG;8=DwhWia^_5?huW@pFVe#GlpREBX&uY*3RqpX^z^dDs}PKgoa`cO=7y(<_beo% z-4o}0>gIimLL`_`9&dT)M%fo_o#U$AmK63gY@_mQ!ON`{FT^$9ReXBVv%+qhsAQB2 zkp(xN6rtlwrSe#QmTtGbmln}B(`?~zZHhul}z zYS#16qY_cze(eg5ys_j=BibZp13wp{d3WdNuJ#bY$RgGNEUtvQ0WFNE!D3eXPon8K zA{66fj5zex>_Q)xA%#g?t|6f!%RtHsuA6Y%V4=k9*HS{jgVY({{p%0wR_sEFF8v#~ z4e~YnbmbyrnPGU-lce#r0rUcv)?=i;4_VW2+^7z1wKA1yPgqQ-?$FQ0)a=jad zPCg`-k>_uTa=c0V&L+N9ue{P#htgYcpc^h(>zfB3@TsTt;C%@lf&*3yy`*|e4J0_C z2JQFtxMP5bFuf64l}mUXfZDjbrk5C@`?lSQ zto<@zm{$f;BRSuz5iAx1Tu)24-g>A!UZ2aAV(#K#XTGvw z9N3gnH4;hTyx`YY@`7_kBze*hYKsH`Te=D1ZxyzY);3u{N#J_e0Xj({4S;dWfG)4- z(vD%!E0rS-XnG7&eYa7x8Z&(VBLhr+gpU&%M006Dj<*(Hf90z(wZx|fc78erDhb%j z5ooGh$p*^Hl3$RrH&AjIc{yyqNDq?}EEqYoH7!GP+polO-RqlWDlrF!V0-6a*sIrl z2fWS=(HoVzICo|(kjRAC_cUMrVQf4mHJ?ukvS!Jl+IPJw^iOeBGJLGjzM-bQEpJjriiEowqmown zVr*jnSu``BQfF)((>ln2;sG7IjD+*oW*yvf3KhF5&KUE6tVYR&=p;yT+>}EIHCsM4 zkI`i6zL8yN#fG!h(T5S+9o@^?$7q1iEP4=EWRF(JgtY|6e9h>e=9a2gE(WtCkX|HSfpzxg( z&*;`}BX z<1)|ixkJX1xR$`LaaHuTdas+3B+fOXh{Y(%`pLqD;soOMB7CREGl)7U<#(lV!Ka+b zeGr46<0aL++e=-O^^pCK?<|}h7>y%!Q&rU2t4^tI;pWN?OD0$5!%y6XJY7}P@^V}W z*jjbQcr)~yc#&`EweCvS(&-9{zbqGZB0~R$#NKt z+f|mA?Z74Xe*NVFe85eUe_r9LMNQ|rAC@Vl3DsmiqJO_ljK^1kTU5;bk5W=*$t?Hx zW|?CH`Y7FQU^?Cjo_HBJ=eHQhu)YPn^gYTV&T&KT5~3!?!*R}26@WuX zn-&D4BEtSdz~@&jCwrrV1FGssl(^_D8qxtf%$tyDuS5sChuE8MBq4rPw9+V#hLvjX zn-XFi`>SJ7ec3LqzdAa_w zhUu3>&(^60GTQ%IK=I5`R-mZ;Zo}p&n1MMU2Mx#{X6tW|dRc)@ImH4ZjS_Lexd_$q z*g&HP|3fBj7MTyQD`z;5y)wO&wvek|L3B>Dm6^{8*s-%+Uizu8V|zA|Cgs-YD0+Ao zDcS_erww9FTf0y3?y!K14j3s(!~)5fYRm{JcM%qSet(;-Yjm2w#YO2;0Y^#@Y@X(=Pz!l9Gyr_pD{Jyw;k!SlPJ(_(NVLTn z3?6BxzgycvT_LatrjMV`^yIWP_Okzov~PFgC$#%6Cdj7cn`Pw~4hj(XC_tvRU5xSG z>my%Q*f1ayya>qC|0bfr(z9S`@|FfVq)iSatg`wJ_%wCu291hL{&e6lAX=9nMSg=S z;I9gqoB4z^jq|Q7dbj{!7I+~7m5`gABlQXc*T%O4siCh%ijTn+;YRsT&Gat~} ztX%0M#Aagi3;KPUSbBmuT}Sb{*rv5!^mVGGzj6HUIHovzV^r3*(qNp`*Ey zt}Cc;8izb7ypZayH8a4i8}0p{yIMt~UT!$lA-I~E-OL8=IIp{&16;fK z%;qg-@u5k$A{_I@k}TF{wZ(IL3->G(y-RWWmpR3I!e5k^jBuLBEp3iBpQ`#O-}uZg z8D5>GKfW^3x%nJ44{)k=W8Qk42#DW`g6D1i-V~Wl81w&bsl;E~Bw%y-6^>6tb)hw~}KHL_!Mash0J@`*#GG?PkHBD!s=uTarKdwkfX|9i-}2h{+Pv z9@~*_*ELJXzNtFE&{vvzEXXo3ZyOQb$W@yX6=U%Iz4Aols7@WEg{7b002 zAz=k%lu#<`H^c3H z60@EvC=Z#8sR*4QCV9A>sxre#Td>Fi?A?TqpvnplSUS$RA2Za=)zOiyQ46dD9wo>F zty-hAg()>oJJt8M%ZmdmUz&C8Zhj$#l$#%zm)`Tl+f!8-4z*UyBA?4EbUL$FEHe7i z5zjS^!0W%nl|)WknV?b7i(kC?YOOqk>4(*@=QcC3AmNY~i7s=6L=t4VdcUc{a4^xV z_0pM*;aQJ+3Q)tvUVO@Szxh}e!K7<&o*s%inc9n8QuWjnyQeVJLvJi$ObaMhJo}k< z3!YU!P#&SQLJ&-vJ>7q`qZowsefrm-f(?ye+9c7gAhjq)E@ZA zU2Ic@oOOeIlsli%V2YsbEc%k`$M!pBD%&`G;eDR`pgCR%pw<~Z+q3-1yHluzRtdz` zUN*~;93*uLw?6bB2$I~@FC)|T-HmNQP@xyE2rTs_U=4BZC&}&K1;~a>A{;%!yh0!S zsnL*W^baSVK>{y1elV_FwqCiljk45yhgYBPWosJ;5-vdnLH1RAW zBSz6kmG(bn?7>Tkn7v?KmG_xLuxY3qPfYklp|VV+0_rtWOnYwtYC{cgMQwOQw8r=Y zehgFlil;2Y#^{oVk_AYoJHwADP<#P$MzO_h2sOE^G^zzJqQPfGd&DS9zv{r3JWBFQ1lh*N-KZyut^RWH z)LG^;I7%Gly~lY{h;f4AgTZ*#6(aImYNoR|Oq#nP7OCHZg1Vj3t)IYlkkA1mM5K>p<>jDIuUwVGYUgT^^CTc810nyo(Ge$nk?G1l=htq38tJs0~)c z3K_N98&eB7pJ!&Jn_V}OLLkFAH@lo~7PKzXuDQ{RUV59k7PJNu4F+vW_4t^C4(dFe zkcOPlQ?+dM$=_V5RniL$u;97qHBu?P9-IY6Fn?l;qZ=93;TH(I5 zxWH<|mS=SCjRxC^(uznAfmJh0p&(lBHHWjTY0ZV(k<%{We{|4HTVT6j(>A!m;SLxp zgupC`ehs|cr5l4^b{cGyycv~Mbuc;~#_jIq;ai_dX3#QEJjE{N`Urb#?Ip@C1t*A) z;6CS9VI%`+pP<{_xL9@Z5|~-MPFlnL3)??p6_pZj` zoor5eZNq@^s7dX*ug$KBC`rb%rsLigc1n}qod$VrzFtm5HO160#isCx4)2&cDf@FW z$2F-1$^Z4tX=zKTHk8;3WN2rSihlbV zcV*mGEmi^HIrZRJ=M18$MYL>WO8ZtdXK_Lm{Pxjo*nD=2)?~pw1Gh%@o`@R)HO!$4 zyLcV*2|>!}C<6GGU}!`wkMFSE&tVa$nz%OS@l&(S!ryRxPO}los==B-1FZZjl-=U3 zH^Ib*<2sUp!^TYHT1~Y{14PYmrleUZeOKAx2)!Fy7Le1g5z1oZ$LHv6hxwPZlo-}- zON+J)vj1jz+1jB#yAWwXl!QRwl+#ZM6=t*SLi9-0y`lZHVBY*i7ueIaym03KVC>q| zM~$5e>4yk1svq9jdv9ZWV_J-cx(e|5f-9kY(7JwFeo)|UfmF)9sJL9K(PNzs9i)^_ zCoqX}nC5MlT*jWFC@)F8V6O3mA0 zX84}{g-oiSU>*CcEB=Y-i`Qfr?NDeU_GV+g5fzTp;&?$p(TGvaBrsGrN(^M2Fm_|P z8Wpll-yyj9Fm&)DMS)+D>r$LUQ&EVa^F8MylsnR zsWzdn`H!?|Ew9NCn8nlF}yazCEO73hJwdQSoF*)^32U^XxC-DQdaqrw^@;TQsmF0oq zk66z))D8eTj@j2%(T$ed4lEB{>v+8B8pT<|Y>=*;+uj9t3mL}s6K~iv6B9W3!&n(B zKQU0c5!1!YiQDA_wW0-=^p(!=f#xLNxc(~dwE+FUTV;}L477#DlPS?iei;_#G14>D Jt=D#l_!~jQHq!tA literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/alert-device-details.png b/windows/security/threat-protection/microsoft-defender-atp/images/alert-device-details.png new file mode 100644 index 0000000000000000000000000000000000000000..6791b18a417e5b63fd0a297d91d00e60a990ff66 GIT binary patch literal 35743 zcmeGDbx>SE7dD6!0RjX~Z~_5>yN3ix&|pCacX!trBm|dXaCc{LcL*Nb-Ga;D?z6-D z?pCeTZtYLLs{Lc9YUWHH3Yd2%`5=N&FC?zmj9z69dNCeB;a=YL>z{NHL8p;kAX7OK{UmV)p`FFoI# zx5@vRF9xQ={*8t5jhp^ykJ7g`LS0F)kzX>9rKX~y8i;tw%7H=3jtNhOHlaP@s(yT- ztZNZMYgg8th14}a-$3kMdYPi`A_h5uaYh`&vAv}}yXtgNAViFcc}+HSRI2a+GOe&2 zGdzA?ihN_}ZlkR!NT!@Ky3ha6+~V^!+lN0a3^>>RQN_~(w~lo`AoM%%J>tiTya`9V zrq?`&0cF>^z0i!hjVf|C&%w7XGiOpc1Lu43uQ=@L`Azz|8Qo29fYbHlIV7szYlUR& zwOQgSfGwaW%UW3W@d3PHmS#|;_zSrZ6I*$DPsIGIQ|-hd>O~+ahwqjsVtiD61K&2_ z+4N-D-j5D%qeEExz>*O1Nr$}v$cfxV0+Egp#mcb|*?7UP(B-zihwszV+S8|_$g3NR z^(0vpn)?aMZaKF%JvXYu!bN+_!AWzt%In6jytshe#mE}J@ z>oc1ZXXqe;`YxvNM??7M+Q^nr|r-7WNFoKXA+Siln_d4H$wH7W?1m%@gdn9aHAjxH42lwAEypRe5wjBP^*iBA}i#?ORG#& zy1)1ft`<8KuXa!N#-u<&mLFA#&-<}gBkb<@RwyQ3*(}s{Phv`blz_;~wN<>hnH{85 z|GKF$lr%$D^U{wHo3)&J+WJMczE#7=zjEef4#=&VHS} z4=b#8K+@5x)Ud&eJx~gE!NYN^#ZfqCoDo|6!=ds> zeL+ByviGNd2{zEhs#on4!p6K8qxk-rGJQC$`al2BnD(g+|7mFu{R|@bt92msetIM1 zSuIt+{4_2a$Zy)yp`=2n?eC8QeM%q5k9phVSX!5__Lf#lLkY7;WMHU}jnKrlFg;@DELiR}M|O>Y|73 z0l7aGT%|N+wfOt9-n6h1vhSbYzDqlhTfq7J7kv)V5aJR{_PZk-arsO6|Hr0d!~5l9 z<+OTu&V8!gG7Ni92w`a1B|$X*^$by#A;bu!<1Q01b389;$2TZkhznJaKKuVOo6SFY zBL;lQ_?`JIbI4)xF9}@OAnTS-oNTfkbxuI;=b>;C4W$}Rde$Vjp@u;D*3MUMEDQMW zdYgm0T{gz{UvQ~JtmH}}{N%U`p*s6Lj0$g^z+ii9#eB&t3YWaBIjo?Yl- z(7BDXaGLhzx!X$QoE*YRgen+g1dxM1iiI8`I^GSGp-HsqHn(We;YY|(-33K%9AK;xAYLSV|Y8R||>9En=XFqM-j zM@>AxUW96*j{>G0Noi0XY3Y@cjrZf{8n4_264r<_n_hzr4kM|5a}wdOl6pXkz(QLy zZo$Q;!J@P<4Or&Dj95Yx2JZd2rkGGxA7Vzw!CPlmeoRWkRMofpRDApMc-h)Ezr9BN{z;T! z*XfLL>Dt>6X-r;wLb+z#J`PMz^l?{P?S+2H+@2@0ASK)jy(&*VgWTBDWRDr z3%(Jg*dkV8?WPUL_{UpDES$kD3Aei?@})w0PmZwOOUh5XiabiBhd!3#s#nZen-A8oGUjVao8Kcwbj{jdQfcQQu&qv7BSB zR-|2@E+?i_^Muq2(0vi`?0R-h`|U}qm5a@&MAR%)_k?kD$XWF-c32njbQVZk{|uB@ zobp}Xt5dac_R%9NR{XMEOXqvd^R+cd7n1B}5fiK_>Lwb1*MOIu`7$KFuucO@v0XRv zB*crN*xg7fT>N+Q00$9E&|8TV5=wU0oppx4=a`g`DNZ^gQr-t^06wk$T9ERRd>+ay zad-geCkaf=0xKwo8rQQq-8_Nl_lj`hdD;Ud9wV8>_>UjTS|A>$R{DeH>^e6S3KjRM zjkuo0sg1AD$f@zf_>#e0l>zlRWb8?*JDq z`n|J{4?2P`!iJE}6!0%NCF!}wp@s9TR!{k2x$us`7rWC%WZ|FHn=pZHToTDmml7#e zrZ*TC<2`jY@`OGySB6b2s^s`Y7|=(O*r{Hdal0>DpKL`hq^k+d{r^I!#?L6Zf}!-5 zuWMP`I=8H%h!hr6%fH#wLRi9eyV74-NSPW0lP#c7;yu}7e@{8m85$QU?G*?LnXBet za2&SQ7`sZ2{XRPle0eq3$?zv+PbKUs70=ED|` zFsLAp#WY7_?E$Ur-@d<}ZFME|ApuuJ_U=Besm;X@g*&=*;>=het$-S%(z~|H!|ISU zFt!HwSEe=xa|}~xAn1T5zF~BCa@e7z4#E?~+T;o*J|b(6wXQ(J!PC>g{^kyzArFz{ zmY`a+ph^SpPfb&AI3yWEU{qsgrRJ+NW@;D5vTo?(6p}>pF4Aaos30sOw+qdZ#~VRs zi^LkcHk&_3%qKJ@Is_Vk(v@YA8ip*h=N(7#2Z&v(1!sIhR~CaIWy;lR@#amqZo;oH z#unlc8pFl)H$x9n*jkRLIi|3V#7c(@$;I;S8?jYA`ASdZY~{O^(6>?w_XVK1u$>DD zy!K9z9SvZ-Deld8fSbjtTJWy0W*Wu^nyq%~64JB>b-MpKH$#xGTUafG z@-!cTXP-TLEM*bW^r0~);-g6<9>rZ5>WB{U%A5(Bc3d`PCd9o`$qaeJ^%PV&q znqxUQ{-fsig1qvW%bD7o(-1mWL8Sdj#XOrdYKl!y>`QTL8dZlJTwR43i+k^KSw$qu zqxc&=gMUU%f~u#ziMLux4N^+)Y$Rv_4z#S0Z|*=PYVLmE+w>Dkv zrPrH6=R(F6Qh`$p{o@VZC*HOVi@OhzAUa?oHG$&z*V-CA_()^(P;r>#UaI65MA}m5 z8x%}I`R%F(TG>rJb2j_L5f%_Zpbs#8(=-I>2~Qv`5^`!7w_+OWUA8@VB}P~B2bHZ} zOwP^k24~8%jc`S)hP3s3)zsB91HtwD0Wf2E*`IV4#bA}4=2VxaY5rJLQd2Q`gL_WI45ALKMaTa` z$dAB9d9A0y2yNl&5dMDzi2i?hm|r{e=z4EyzWTG*{_8T`R%qYSg5&m3$OAGurCpmR z@GU|d#qA%p-Qih7F{v2*bkC9|u}tgtD#VkGqCE?XZEf_wL2+w|`mT&XZmJyly{zzi zlb^-1I?qsQ{4(B4dgy9MB8stF$A5q`1!*IY%s*5eZg zL;GENCsKps>P}0ktj6i`SBZf5nHCn!5mhJP*8rZVE0e>niHsT+H?*YKcuZXsW)EdB z-%f3vnY00aPpbSC-z_(y<7`rft`6DX!@Ye3hNo0}rrEuL42(pNABI7%QtGs9TD&`Y zY2*~E$rL_XSERd9nqCS8k4{cul_2d)e6lH?ePSE>qgqBy0I@~q_K^Wogf|5YH_G7+ zH0djsCLJBNf%ya%GFU#epz(k$?6T(ZT7UlMoy=Vw2Y~ZFU0#u+T#e0FV3tS9D_l$hba@* z&XTQmK9a-Rz9lh;0E_K#cq(WWAYty~MmSt@S9YU}H6i%`s>G;r|Sp2pH6Z~(>sx%cAJxbP$m#G@9 z?hhZavR_N@Lwoh=n7Kd#@7ZVe%1{K`@KX$jSCoUWU*<^{^82emNCb=M^Xoq2Q_MkG zeKa`m3juQFLC;`-7}5FD%J&7JR1T>4%j8UEyEbO5devJRaxNxx#m{7;e0qVimo21g z&D}$VmJgX>jcwR~*ka2FHk>Q6WMa$*lUuo8t=+OVgQ?rMW4`mOhb*xbGX+hvrv&ZN zeuy`a(FMtjKMEbfZ8DCio0akgcmD$shN94H{)0;Bx!4mCHiXOn+V6P>jS|fz8A4cc z(f!{}ClQ3v&Wb`in08vTmm0Af7R)Q^^>3Mzq zkV(2rB!mp;2qYujY_(`_V4g^mFX} zwfCP`&9@r0L-9D^0c1q2QrNnLq#R#&S2}jOW_flu1dIuN+tntRHjXR9#<@<_PIdoQ8qkj9RZb1HtZcd*go^iF{AiZT zQCvz)_q9?g6|FNMH+o5M`BrjP!?z8A(rwd`WQM3JJGOog?(%+gG-s*N%(M%mSWUHRS>FX|;Eof}6i z6`u8?H1J|c#4Q2eE7EdG4-R1c(aHPuH3jpJ%^p3^E6wb!^A2@xH)H`JsR*xtTcgmN z*+G`eVA;rKbQC*hgDz6QRI^|3-+9g~aFSYWrdn;x@qTn{@s{VrG@hxM&7hh~_)bGE z%V>!9Vt)Zmx#dL@!4?oOd*!*|Qqc=Kl3ai?dL0Lm zHD6opa*XWU)B2T6R1p|7hz2?ZP`Z7Q8P=>N4`yU4&{s?)&-zpr(K!^@I(CL8*m+2G z#Y`033wf{Br$n}ug4M0oz9%)%10U-9c3oSX{|Njpk9+r^v9pwuJh^$BUbziNU!<)U zzg>sIeN_|j+;9mu@-s^-u}#L@$JElZqJ!z*A;PDkf78X7IMYS>(uPx^z=Fus5g2*JMMr$wRT&Yb5YCZJXONzO& zP1*EY+FY^3DCzHyXA@d5;)d&PAOM{NdnWB`oHb8MJJ5C?lV83m3@`n&xk*az*d zmTkhiADU_tLIn~cA}p7KZIIS*qe2b&)`+m2Y0!7&pD+7qJ|M!9IVU2kp!hB|Wl7ROlfP3A>grT4nPynJ|51gFH7gU5$iD=# zt^TT|p5|RS{G9|-=a&{sV)~#eoQbr3zwfEX(RKi*_X5D5rPNb0NdrPd>GK^9J|)i|=w ze$kJ52l+s|&7{6+@Vp2bMWBAo9z{s-sgelIcgxVeTH?lW*V1@%KVND>gEeeNl{=F8 z#P{nZmO#*)JhTd1b=HwYvsTdV$yfg~5jY?N_Q!ba-Wr}mMU#?^YoM1<31Nq11)?uz zq#Pqh-E@gClMtJdLE5k7nmiKXH70Z{34W_CH|a0B*Xl*vArc`21FYs3VlSMk7I`mG zS3TcTd_|7J6jk`xfZlXL5zLsf(xoO`w4qBFzz_n);rC`I5quwx<5F@ACd*71{uS8D zULnr!FEE9t^QG8LR-3%Wqngk%9_xGJ!ZGhY$wG{~^r);@EdRvZjoxD(q;7W$;1w;l zY%laRTs17OP%q%~F&;FlRsps{Plm-F+ds^;X6E8#oil6Z%sA)O_6E(-kHfYGH+UwG zW?a?6_ipg(niB&{Wqedwd}u=DwxfoI?^z*$?yW&xnJWJ=sYZ0S|MEWbjL0pjb*Yu( z&i6AKOUmvK=4T(}2a283N&G6;qUy|x%SsuJPByfDXcQktYg4n>^jV{06`?<*>c5^y z7S*2190_xHG~Q$w^FveL1gt0InEHdhK7FF?re&gu!&Bm7Ul2*wRK74Q{`58OTJFod z%wS7i{Zz@Hci=G^2ij~t-R|D4|6yG7IOLJD84 z3@!uZAt;0iclDU*e49o=)oP1GMVgnGl>BPu<7w>kceX)?ZLhYI^83xX*E7PuMnhibyGqAytFJ;b8#11UW7kYUpFX-gcFLqG`pzBH@nwGSq z!c9LvTsZ}-vYNg5>@lN?=^+lMrE2P*Sm`YhBb8P3$-B2Lufol-`OaMAOckPt9u;VB z`no*Xo8(BwWn|1eT=#?TU!bZ~YK^dr1%(|4B+$U#o{CBr{O6(J^{4J(Niq1fy}JC! z-4u_Sl6dr~ABXzmI1bFE^ap;yJ;@w5N$pY|v8N9-_#0!$gOY-IUCQ`&Pe4RR&L159t$Xy!^>Y;jV;IR?kM%3} zlYH@#L9jX@!l~}$*u-g?3tUy~_kJHBax6~KoLK|l?|PqA5l~5Bam$E+g-JFwrO-b` zF=k#@#TOC7PW69jQ>V|y&;MOv2B52|RUh6dV%StjH{|ZC=s3+dwzA_Wjt=_A{$QxO z)%R`uP>oS?>Ld4-mt6CQ=Eymk%sC`7I16B7GZ(9}%4ZQNVxiHN&iWpjk17U~8DjgpynS&WehHG}`M1aaIb3UV%T zWcbVOX87)Z<M;}`5bA;}vbBnvf ztD?o2NqDfrcn`m?7rnOD5+Eu4BL9L!B3rHw(;D!$W4rQpy`O;x^Km=;vHZv>AC+M^u-Mqi^qv%E(G^Str#D=FmldX-KY~lLm7dkkM6SC=R|lPhVR=5pV+0A+AW$I*emPNA{zLy zgE^8=8Rl6*k4Sl-+mYxf@u|1niI7(t&UnAbki?MnE3pXcq96t*oz5#ZK&PcM1&S*J z_9_L_!;)sH`BSs_|1p5 zUa!?#)6eWs1C%b$k3Kl>tsYE@3dAk&XZ*rxmC^*^f@ zixp<{(v(sL9s!@NARb)R<9g6o+cwdph7aQ8jDCF-ZSQUw<2wG~g}BpL`jFTzm9pCl zjk(T92$tA{N_7AA-BnV>*2=x(lEiYGwe$td#0TH9ZT{JnQ_?h%yJoDFcF-_jwUgtT z-Dvb&|E*fLC0V??+l9c)G}Gnk{&h6do^0xQzE_V`5I&C*(3FHVnaQf~sEOe9*R&Dx zo`h46v8uq(sruyr>C#siX1A7`lCag0wZ3ZL>nJUb7VZ}3KqvhlVrjs2g&IfcvEO(rmM1Jf2ZTMXl(Wp6jm%laCK3R*zdL zDpNLPgKgfU?S=x^Od5casDqe%5UUkId-CK#&tf_tt^bSBOIS8QV zUN(5I4LWp6z1CyZ-JyP!_l6;eGo^i~`PK`QG3zo)^yW02gD5g`<`pjgg`n0OB}xm= z*HkbXJGD9oo(cpo=T39B3GdG4A*xbGl@M45of{AjAlSo5p_s$LgIrFb*aY^%-<$0=*e@1^(>RZc40{= z;WW{uivTu~+Q8(=?q0=OoUf}3^<6|n*>uL;Z5Zkbw0r{^892Uy)r+B-(n*8CiwO}x ztMcp2N8nZ4%wwEF?nN8B%+u_v>aW1?YtQlw-?<$k5+)k4E?P@R)i$`9%-+}l*@^F+tJ^K(R?2!p zdc_i$94d<;HaBwi)X!e zy^R+O;7f3Q{+`$6QoK$3v{D$@VupjJv~Moro=9L6axIi}kMr*oG`Z6yv^-Y_Qnvy9 zo^4u!tsIdYI~=t@x?ne#_R>2G8DWb)jxOZHu!YA0^0mRe*RwSp!VPT#?ma{T4ZB}w zYu;lmcJ=-sOouoYeOq5($196J&l`1mSi5D>Au3vrl_%9^L~2w)Qo?G^P7h*o%;D&8 zMpQ8IqAXeUtOxH>+2UMCCts<%p+`r|&NdxR4nM_?e!nBrsa~A681I5IpWU~eRkNiZnV;1ARI1wjJ+ zH5oeiD96s1_x9yh%Io4hM{Kh_-J)f;6i2SL#3lK84JCB^l2SX9_o=s^SC6dzuCPUy z(T&1>?mC%*Y@*ZXHh3yoa%L*k%SS;JF^Yr0bf5BBC0*e~mwz7NcbBzxiy%FL8=uyg zt7+JSd%1F8YZ(J%_Pb6oXY9jV>xdTm&ccH2w__WggO$K*PzOZM`<4d0>^Qq9KhSuz zc{eLDY9ag+W_%#IV<8L-hns8!m5o?>PSf=@wADbcGtcS%^}>BEuPaM++ti($4;#qG zg{5B#MNp`$ThG!I+4w6m3xdD{bDF#CZ>^vOB!e%}?hh@NWcuchn)XBGYt@7obBb$Q zVz=kRTBh%GYx9c)-LrLVx<8R|2D*BFc}XO+G?Si5mE61&XCw{nExlQ1_wPOMYs|&2 z^Ag#LAi`@RM+-9f_-o@jf25D^F?xUzY}35M7QX#x4Fd`YShTOt=%;Je`8AX44U=ZY zPm6v&dzEcuy(69PW&!b7&3j~v($2%!IF;F{JQhRuLCLtqqyP&B-|Lq7_FgAp%8qC^ z5&WQO3QA7PM$-9R>)`TQv+fO-OmYh`AV9S?-K zggsD$)n!#+-+JevcN2ZkN(Bpi8am744HVnGBm})Q*q4h_$@zENxbCJG!QAoIg31u& zLuk7outzj`p<%vAH=hq=qxQ~F%#OO+7-Vk5#n*W8?y3AOIa|C8=8jmI;dS;UJWhFI z@(Smd28l_0e2JGOVz=I5{xw>;IjcNykTIMdVbnj=m_C~cluItC5~?3~w6TFQQZ3!r zUflDuO~INc>TEXJI0>yoZ zsMYj!qjVV3>Y@dZ&A8jo-PN4Jd4H0;7GqCQ)0gCMyjg~#rdaVCWE@@4*VXGw&h;3r z`!~qI+oC0Mj2u}FAG$RhJVQ(B+y?&5K`+W$my98dAy}%4u|}z-Qoi9h1$&#C=2n4-Qo1*BQNj%UMeZ~Qu&aHtO?O3hJG z3sI--fEvF<(FAx)#2Nfj(z@=})y&wHjd*`G_}$UZE9J{@hX2WXb4*$b7^8k$*4a~LQg52KjURP7+ zc|~38GiInIQ5y9nB!`*bH)+TvP4yTxrzdMHf#G>_PG(v>rK_Wrv1J7pKOTj4GR$}~ zRlM%D9{DrEJ(h2y_hF^Khbz|5h-k3S8@n<+uxn8NSpr~&D&ZQ1k^7IImM2bE+D4A( zHAqMOSAxD?RA?RD<3OKwo7n0Rd&;ZpfEh{ieq$NqAJ8oVB|QA`3l}fE8-29`p;z?RlYQ`T;r-X?mVTKPk4{D`O3$X*wd)g zEU#2d)?II|Hz?86U;R=oxzD?hwN)N?i*AND&`Ty3byTO|y7j3oqY@j`Ik4_+ILBBe}SC6D$9sNCMw$Yw$kbh-LA5G!2mf%fE457Mm8C z9$u;i9YfW328_AlbM2hQld?6B+Sf9Lq;cFVpL3x{gPEKjW58AM1F1?D4fM5x1rF;) zLjM61$9-H2N(Ogp=Q_M_=kt2DGx7_y z=me><)l=l0=F#%*ing4gyfS1&(#C35C08bB;E|&^2i;Khuk@wU(ClR_xp!HIiWGfu zm_Mu3JzsH7dMw`kPK&&0 zRLQrQQ|BeAh)bL%bDXnU?X;$`>|m5#$S>+{>Hubbq&~y%sWxHLAEyaK|~GzB{HS_E?ynfxqC7U1_ep$_15VryCZGRhTUX2+s2OjStwSn9^`JE-t)&#Af`#E ztbijKv`^<{iyq0(C4<0p#;zu_9!2m4%hX`siPpcPa<NikPK)AEN9( zKzS!UANI>TB9BWvU?es#Y4@63tG$wMos*oY@kFAZNZ4k`V!{o5tmfCg5rX=CA7~it zWI^LDXLP+2L+EDbPwY^(=Ju1%rftfvy!7b9RBag7H^$|&LEs1AHqsPP>cvzxC6SHL zc?o&!x7dqPIHzFImoXk=c9iDgcf%Is@b7=zMI0+wz0T`P42M#X=S2-aWoR>{v0$tVUhO)jF4|i&(QdAWa~zKoMIP9HwP`*++M$Lj(liidw=hI z4lEB=Q^OMdE&0xGDjkRs4)@|HUI=t2t4<9Va(#?oGjUrxrE@gsNkDb@+dOr!AXRd6 z_i|rQaq7Xgi(9$R$g{4W$MCnwoFg0CmC8iA48DJ%ibpd65P@!;}-j2>!dwh7f@0Ou$jthW!BJnn3dB~g#xW3 zfIch_E z_4Fz^&q=qXd1kt7zPW;2#NM@@@_w5iE^mK=-ly*QqLQWOu zTAeM^;kpYbhk#aI(tjOb?2vU2swQivJJ@PQ6g@KV6KV#F+d?5RJsvnxPerL|hZO zXSwDPyaUCV|Gd6O!(eE|4)dMjOy{#SU_>I+#O6QG_~Z8?=m1r$h{S2ObvL>R;-<#C z|Cz6Ff?*mGT*VGTOS*hC@p-%?9LW%d81{tjHNJF`TgGf#bV5;{eZYpxwFGCT*01#k zon_fQf==qG8ZWfPoCOhr;F=g*DVVxgpqVJT?ORW{80JUe; z21wZ`Kk&;w+`W+|K<|{1C+K+9(HKP+9LFLyi-C|tksv-wpV#t~;>K_gEta0hzhGcX zwAvE+G!tD{7p_d4@Z@N)QNB~*43p}9x}y7;dXE9$*Cxrr-kx^CQ8Zo45EK)uuP9=R z>kXYH@6I#}+c@rt3F3@`U6HwKBG+Fp#&x>kVy^}CVeBy!EjGC@K>?-f<19K&V)8C^ z$^}2OjDoOwIdV>UM?&Vuk8i7O zUg6(p(cjbmns?gH)U37atq}IQyW;th9d3xQoorItPoG|2!ubAl_@Q19QB^$~Wp;`L zl;;rei;zvX`(KA$lg!j+{ac?VecxurDZRKXz@zyv)8N3DfLfNll0DU0sP#^xDhqD4 zw_s=2KGFHybx$+5++5#0q-$Y^!)S%Gj8-|Dmr?Q587wJteHFZorGx9M(pK6)(s4fvl_BCBmi;M+(is zr(bb=blU?tNB| z%TQuJa#&9NsIi_OC=`jkZFYl&W_1N-X;g1Z{MwsrCX@&#+o}#7N9X30d-+4ScBSp{ zj<~C;G>Tf{U(O!a5{#VJ`3J7VlMkEE9l^FK{LEBbec`Ua8mn zdDv!FUprSFfaO|O_fthN^g3U<6KB_3ecB)6GrbA9?@GU!l?T?|Wug+7kC2s#;UyV<0e!yuc}!&OIDtPMWbrYDD?oI zV%KKCOoy1yLHDpBwn5}hAv?>(g?hV;V)={}R(#WNgX6ucEfex2wRqesi?*xz)w)t| zD`91-Ma$K;G*Ak`@#7U;?PIJ((IKji-m@!f5`S!UC)d7%k$B&3{3hSXm?|%s_dtQf zH@>?)9xCd~AF+IB=LLRHA+k@f)WKc>xMg^9%Evi8MY$6&P zVj7wdrR)ZebJODL#wG}?)V zNn#k@HRXJEJ544}se+TWnR~8TZww$`B-TVR@)fD3ayw)S&PcPwG0T{XCS7_vb@->5BDN?>YPttYU30sOO-@3L(FdHe6<;PnF_rgFBwZT8z*++wizY8N|vyDyE*irdGT1_n(L3GcsNZ{z5s}hk4 zM%c_Qfh%Z)Y!^^Y6p`Ba`&#W5%S>|gDWD_cgIEkBayUFKN%8QjGrLIWsecxh<=LlP zm0F#f^WTb>N#sh|_~hia0y+$^=s>utJDPv2gw*9Tp_C1;7mNI}Id^8lA@abggY@6K z+ntQ%X)s=TlgqKKY<0{Z25hFk0$H_|B=;X-wNMcne+}4;<(Ast4B>V~AU%S*mYSN- z;&Ho5k{SVz4hg2mh=JJeO`NkO9kA*)2D-)5tv}=yySGX?ydMBHa|j(>3v&SXD0UxI z6uAo%S9g3+K4uSfJ?|6&CaUc35UGz_2pvxC+G|}bwoo{&Zg-&GsDXVoNb%OrZND*i z7x?Vh20A&p5;eSqUD0yl$s_{q9dkf)f(=ZBTCF(C^v|ZFF?adKRLuGOWc1_zMM)_b z!85Dtf5Y&|r=>=E3B>HUu*3cro=#(grEei-)$-ucLf+X* zyVa|8h;Ap1-~jO__N#BL7B6}mxZt7(+oi$6Yb7}dA+t-U|LLn%iLgvTi<$~j4E`h{ zs|ywpvwD&HI#_Y4+r}5aL}7mVPz+N2#){}A!f>_)5RA=jhHv)^Qvcu&Atjvt&oQzI z+GU#|Y2HKMl`V+jUVPe7bXks8{>BzTEtqjsngzw+&Nj&rrI_j|Fj8W&axhhHd_(t+ z59=d=ofQ7wC$0XeB=-l%WupU8(>LmqFpBuOv>eu_4;-W=< z@QYkJz%-)#u=uhrWp(yOvr zRo}MTZ8<0;U)%b}_!dSI5wxjpqJ>fBGtKhMNMs>4fAGN$4J_0{g^*I|m^GQYzD+2K2_!+APHvm9jQ zcB~;QF*AnecaSly;ZL~7f2w9rtXE6jZ@@isZ6>_H)z;T+*OjPkpUh^&pdJZGY@WZT zwFva>=go&sZZc|6PmU?spoaqCZUpe~;p%2;cy_{=N4}=kDN16+#yjW8d7$_2!>``G zza&-Q9cgn~MQj9RfO8)nf@#;Hk6%m~l!6U;n@_%9lPAU$Qxn)m*bRrUz{QoK6H>14h)=P#g^;7QS$P}PP{D>rSP44ij^ zN+RG|&tdJh9VCC+QK#vC-m18(P|X|~Ul@vYxSv^w&X)n!34?ai`hnSF?5(ZmB}K>nl%UKm#zp#`!up}vy97E8l(%Q3(8 z(fDsQ6jL!JH zFYSe$7D0d6#?WPT-9k>Rr%}O-V|fg!9f*}XUdp(P;4AM;vOk)CXqi`$_Lj~Tk-02h z=JssgFw5B=-KU-6BkfXi&qkJhs=y<4{lR03eBoUeKid0516P%KTnbHVPwKMm8O;8z z37Dr06P#g7Qyku1vyF{hz7sc0*?NmL7g`q@@2zgr&WOT%r9FG~VR>3z4@>{&s(njU z9#IoGDeyL zIaMuRa6hZnF=sb<|0OoQNL-Prh1hX8C6Ga{Z=)vs%R5LMTr8VwpY2*h_PEd3qpdPEj@cq+mKT0=6cweCWN)PH)uelGlXgy=)jsAeOwV-7QCOk|h zd&Z{raUeiDn!#s2bgq>Y=YEiwj3-`gW11sv<=$>6k*UjfE?{p%jq+)iSi9+wJhnj% zLW>w-724;-(ol17T`7R?;oSk_+y_OinT@VqDf|F&()KVmIzU%BSJOs+C?r#{Ymb#WP$YnoVRfIMR8i-+ z1G;9}ve5g^(p@bJ6xouOys&T{gL5gta*#Sfa=9SB4iousYWhl0@$anjkaqYAa?Yvr zO-`XoCFR1 zPNFH8KQd?}cru@c8%zSnUTma94DsdjF;98K-W2ZXFXMK&z~gp3tLL-!aC=U#T9TL^ z7F-o73uJtzx(9QHK8J|^=Z8$?5hn&r42V4#&nLlj?54LAmc)W0{V8AR?gX5$H34k? z+VwkQMj^Wr2LIhG@rEQ=o?aQ?A4%-`d0Z0d!%qiy`C)Dk-m-1(Urof1+dfQwN$5pj zp-UpFfw%wJK-DGu=FNoD$3$rvI7r6|iIUZrf)}0gwGFqKrf#cUV5-i?GXU%t*uoEQ zXn!XAzeGmgy}rZ||{^Gj(%Mwsbly))L@XehKrh`rk$e7{Yi&B7!;IywYgw$wt&$(=wi8C$1g$bkEUZ+^uRsqLjpSUfo`JOvq2nt7&=oT}K4Wg* zCpx|sZ?F68JakG`o`Q?^`y+KoN;TU|l@bf%pcG(lq1I}dPrZ>C!Ch!qZ+LTizSFlm zZnu_~@Wo)a!r;cSN9_e*tyHrS&*NxlLw9smubgv6uf^SAb1-2vNAqfMYY-O^W5(hP zVCr^S3unnfONNXs)PfKHwgH1Qk2m%gYDu?;Q;G|c zcOE-42$vRPH)35qICY_-Ch8G-`L~RkRPHzx*yy?j>l2xSs=;rV~UIh?CpZg?>`tZsXwiVyWqKie84eYBX)G!VTO8UW_P z|8=~QFpo}o2uvh0O7`#3+wc+Z35^T)Lge;hjbflW#jj1_$M@h>PQfv+7#k_|3JSIQ zqh+u+B@9^UVs*`HqPOWe@RZxTV0P~jvsxtxBMNx^m1(N~wp^u=^JnUbXJq$Jkr@16 zTh~SqA=8$how}tgi@=Lsr_DOc>4DY~*@Q7m{-Qd5ZDcl$_F62TKDOD|i$R#a z#cI~8fhC{zaf-iIuC34MlW`YHK3)d7GqBRqG=4^;mwVxosKj)d7yMwlpsJkn=SYl7B{GR;2_8)t z;EeWD><^190KS>Z8o}T4g1epL77x_j@QN$7h}pXZ4A{e8D@J3jD!F5$TF_2fr36p0 zim;~AS8p`kt8-@GK}JlBO`hhJXQQDPKl3u-fD4*EcyC^&k*9^rgJWqQFDB*trTsUz z8I~WfSM8SQ^M>Qa??%(Un$@hHNyf*y3<6vFF;zPwYI>?{nu8)=_d`x55X$`)K z7RCM2DA|Z+Hxy>QzddISh-K{hCNt!j#&^rorTR}6 zyBM4hIV+>f*T`#}+Uozaj%Jd%N)B|-lf;URr;ZNY+PptGSQ}bB)hZu$TlKPfAW+f) zuHQK1tgc$Q<~)-Y6+=s+Ic{y>ZCraVZyhxl=C7XJZ{CuA>257~{GW<@@2IG{Z%gz;MFa%|MKTCT&YT4Jj2meX(U0Z?dZ&r_Ky3&4Y%S&vG{G#qKZ`#yXUd%Q(xU!Ac8*?WQ_K!$%g(RR zUo@S~yaY9|aXPH+s9Mc*3*}NKco-4V0?(q-e1^~F_P&HNyYw<=TP>15&w)iSvfkI& zz{O7Gb3w4;Z3#I7cOw}Pw&FTT4ESzxjS>+bG-smqN3Bdd_OnaM)j868)-YM0i-d5^}g}qOF1ifFqwFjMpQg1-~ zc-LpbDn=9kDpgYVQL!%>svnuAeJVijVk>?EBa2oDTDP$DrV&j5Ht<&o0O`xQL<27EjaadiDKI5}?C+qkhwG z3g1cHaQ5F|I|<0-CYx|7P6+o*{B3;8PWJ5KO}kNg^4Z)+{i*Cp#|@c?n18hY`dopr8NKtOl=AS*jz z$#P5O!e%gpNtcJ@d~z#D9m2A5G%$F$>jdUIbS8KA%VSemSbX}E9P@sDkXoxOqZW%k zPIR?nh-)3R14MZG@lVLjaJ7p5gN?z6ZyrLK9)f?47H-lc2BmzOrYf0xh*&=>P|jpU zkyToGH3_2Ym2@qQQ1_KEEdMfjxp}Mc2<}gDQA&1RhGVp@CDlfoJ2oht!sV8*wXj@9 zmDNO7TBXby+;{|QS36D|Zw{gRez+CfwmDxQI`i5oy1@73;&}n2Tqlk9kwilxaBwD8 zIWGW^ynm5k%JF$ZnWZRGgXuEks+yMy3tEsDi#RJvUsFF4a}!YJC`L?`1RZvE&Ul~h z;&VgVlup?4^8pY{U?qitRe9sf2kK=Q|7jS44I#@$LA|xMdC52v5(+-6HL80&xZ!)e zuVfr9ibYuNHOdA}rU=bIBxibpsh$W0+zXe{tTcMm1HlUymo}Fu{8zCQecfMeA5bZ6 zBtl9a&$6GIZVEzED(^XolNaaT!)ynxURYii>IQ3bv04<|+KeMH*i*;lHExys99yck zW-SoLy}7Vw)hBi%uwB^!1cYG~XfP3Gmw+8#TG&9$Q4wEgwrw z1*F`WeBP8n^HQ|!Z-~pRH%P0JD)8Gb_uuB{e=%EK7C*S{kxprKR~~#PJ^8E%C?``< z*7u_)uJKpEZQVzFojd%s{obI&G`3HTu1Nv4ih2EpJVmI3c^Jx-ltRFT6k>fBB^t^> zV$Si@u-35?Ap4h>J0rkKJ%ogWLzz;(E47^YDyfnPJW8m?f?O=4GR_4_#djcp(zpME|loaVLpq)s3pXOm2kMqKtfu~^xnJU`9R#(G^xtNR*SBU z(1Wvzc5lzQ(hK($?9~QQEFn?-2L%25oqhXJOTjn}N$fyA0tm)|3Pk(l0fF~0xd1{_ zt4ODxG-o|)17UvD_eicV}?hW;?eFVo+CABI^ zt|jIk;O_Qu-OjCSr4+8o1~_?{^R=TjFx&7cnuC-ESZ1<>Yj?s@KDH3wy%wqH&*~ay zuJgWSH|OG!g?-SkEH4Xi3@X9Z>T6m*?TAEX>tY(E5hlOs#?=R_?ZRQFNCGMy1XFWa zLTzE8rN6!Ci2k@zg+=wN z@^yl!S5L=qaNp#KUu|Z~96aT@9zG$}%bBq6Pfyx-`w5W~{w(set7?fQj?JKI2=;;r z)zaId0-ypq=v=_vjezf2F)F2}{;NkVkP#wDIHt}0R*|yvU5mQ+w#&~I(&bYTRqnhb ziD68=fM7w{@Q@t=A$Y(uEz%^{4M&P)V-vDYy!Y@NdLZrrD@}Ny~3jBpOq!D%sZ-bapqDB0a&$ zZ;O3ThddL=jLbax=SxAXXHq>CYl?EsnHWqu3czE3Zx~u zCN9yzd7-&^>SIBwqD3K@Y5r+hRDDg9{Dfvhm5tm{=VW=0fA_8a>c#d%kHh8F zT7X}^iV3IB{HqW8mUp{LnmHQ=Ht46?if=E+od>S$pvf@kTbI_8yYqezx~*CaoPI{Vw70RPxt33tSG+By+fAjVro&YMLc-U z>{0pY(^r3H2}NclA{MPj`0>77AkxM@A*}H5aGAHP>RCBy!pHJlF@@&S_}K54mX>7R z#~fQ|%NqdK>Ak2sw`G?aon^PTFHydD1unLP>+N;Sss3!-B)=LuAY8vO=s~g~VhPYZ zMlg^T#?RL+Bqp0rJ|7^NF+K7F3tylPJJ!octYT}NyUk^8v|fr z@Q-uB$k5qvL)bMc7i804+Twkb>E~T&Bvy6jOdaCq@+kYoU7#(?4^cglTJFKMA`Z~4 z8{P%yKdw?$iD7#5M$9qa8?_W4j=*K*-Xv=|bh~0c;Oo>A`>%2D9_$%CShlPj+^jr}GenAd0FuxRJ!g!$$YvNtD~KKl)Fc`}L# z?wUiqm6K1=LMjOJA@y>1Q%|qD1bneGpY$Thn0%UZPKH|sM>rAYl)7Maq&uIr8e!QO zO4QlNN*Ec?c(So(|3mZE(Qmkv?N&81VDC`!VrA9J=n|O>IMW_f2Oi^R$dBJ+@}ArU zvrk6HS;{xQLKX-M*B>fq!$gu8$JIuj8Ye1bbc<_x~ z+`%Prb4s7zvc6mKJAIK$OED7Q4~78fEoyUglW0ae?n?NmcvlhRYfIr+Eu|3ACx*qN zJOk55&|#DqH=e<(`e-+_3fa?r@>+yXdiEzx$Ss2qb~Z7X!N8 z0rLx=QAAmM?C{)Kx@Z(9GRQ_Jbme<@zq(%Zea}BPg`)(^Z=5oq9t`g76aGX1=|-!d zY<;cBa9OK()LAi_eHZ$W=s4TzR1!XE8D@%S+JRW4>bx6oMqI$}4nmI`^8pnGq0-Mn zQzQl^o%c7KULJB z?>*8FBk!d3!>g<+3rTZh?GPtAUZ? zGF=A^X>APF4+ztE@>>n`qj}{>3M165Y(PcBA^j9lCADyfYkMm)%m?gPJ8d8MD2c;i z?gO&yY-!~w)K0+UUB$0{q=-?erUz>%O=hJo49)KMNMne^>k}+dPSRb;hMNhOdDh^W zb@sgM!1>@}&&BzgLX~8<*L`amapN$aOf+m>*Bq>jO&Nkm71&n=%EHr{korev+}79K zA^8L*(dl0~ta9Gyv6FBz6lh|da3k@lhm!l1JI6#`=2+1@q6Ulf%NtqUb02iFrpFKC z0q>uduQOrt0+xISURY&0zdZc{?nxp=Gt-Ao*hDLza}X`-({K0gL~TA7f3i4rKVB;} zB%uug=6WfX$UWOjzoQyZ_U-sBx`a>jgXeuvyWVO0vQN)TLXU^mod&xLV<(SLLX$7AS5_At=Srx!emDEw3n{Lu{r>l~ zjBZ;m7Ym?wa%K3&^AfC;NvgnO09!&S>!m0)sWZbT0 zpczB1ZiCS9W>bp_x*iPE_pW4Z0Et+dX)~yweZxe93IMDy{<|j?y=(ukQV0O+ffhg| zEnaha1v#|dg`ewCz)PfvpT-^Yz5WqL4N0rVI-i4t0-1^u^gqgCW2*#qQ0x~UM50Q) zQs7_L&$E=u=Prr2;63F1ESR;Q?a$-NAU zDX)`nRI#1_q5=x8&0Ef&7iDE}HNKcECdK6-&5$fsi^}e6o-pNFd01>rrM`brYjJb7I$; z^iim8#!4>NjxbA9gXN*c`O(>~9*WPp&yWgv=JDZ$DJpj6Y*)jeb|(?CXepNDzuH9r zns-fGt%WptGXIg`@TdNu^ zud=>1)Y5F<{jC!W?cEGG?&pVsVpOisG9;yBfnibO3HI5tJo;BVyjKth6c91Ga&Cyu z`-(1DCSe|Lkhgw@P(xxMRn)N`8tvkH_FO8O;gMuyE1%!Ylf77&{c5gXD(4W;RJ+e! z?a}*sni%C%0q^yn9W+Fp?asB|POu`sO%9X2Xfeq*q*MfW+OGWlJGU3SEutaiKNTE7}Hdh`m9JH=BF1OILy#rhy$sSe+FvMZlI;--hSwGlE^{1 ztZtR8pVP75Iq`FzK7fc-=V&VQ?d$hbLy#028XB29Ky3##rx|4hV)&C@aI+%$T9aIL z8HJO~8RJ)v-l}&IFP7W!^Jzsy=B7-0!(y`M+K*7>vefNSl(U+~rCp{kTMw_)d;W6D zNsCb?l4Bt&B$G9-_E<@B5P6YvDaUKQq0bmqHo3dyxv)82?6ky0yiKT-<09d#%@Nm*B)UQQ!)=Rwyp97;&M2Y(t52Olj z5F|tXO5FC}PAC@qg*28ex0g@Sz)aMij`Le{l?ylL`MaH?|AF zy9mk8I9oJ#uTmiO%d9H}gYwT9O%k0Mka2`LFkJG;d<7tx)WvjDZ?ZZksS=q_AjdohL}gGH=IJ|>|BBa3WbPPx!Km}x2}3Y*Bi2Wxwivbb z#cxhDD?;W8*>W21Zc&jM38k$jx%ofTeq80|1J)g0*!Kn|C4p_NC(^%FAJ z>|47?$YLu?KYMnrWoeiE#y)KaSkehIw>dR8aTDx;+w)!svJJ_BaQ6|o(!k=@sP%#G z>XIz9P*Y!K;O2mUZf^JLdbg6ZBBeN8)rz5;M)jY~+c;y<&}Mt_-zU+N7O3vtw`wL2 z674^x-3R~SMzvZ9Q%0{*N40-aJ{0hgz};XDzPhnlj%Peh9t8wkn%%N>?xZ)SNzw%| zL$3i%WwwiWYtY^mc1Fj}0}G%+&%(;YvfT8>K~LB)$yhap0s}|;PzmRXCNkoC=^h-K z#tGVHcv-yh9vXKkB#M_Jo^SJ4gcYEHYn=$nGv8@&W14hhuzu$$c|$g?p0AG&O%Wnf z-it!)l$-wYo;ueP@ua@LeUctlGN^?B!ToLy723@}fV4Kw18Q)MWpUdpUL5XNrS)lA zu%j3XU%OTw{+XovtH+S^r?AdLf5R`Z#WCl-rmr}?u-snfmykP^NPxhz0P;ozS1-S3 zsu9}O@&go7F}!I2sQ=37y!!R()SD=dSJsRF{T9%DmCiv zBu?#Znx>=rdb>eKxvo~~eI~v7#XJVhV$T#engWG%CqO%6?{jEo(RAp11uzyL^?DV6 z^(6Rwp2)E6GE*XWW#_u)0j~ zn?-RW@7#(=v?e8@gZe;PyxF+a=X0z5;YG#a#nRy|I9+7W<|RsLGV%YdQ|Y^lsPMaV zr4Vp_i=R6`swy4{B)yR|v^~!W`>v|Rz_=Fwwt09*Zk&I zk3A?!CN=jvOF-QNvC)$qD;Kfp5jpm})mF`y$>R4{tK&c;LEV=Dl$v6UXP~ib6H}8} z>=T2rrqXkF%7<}h+j74@Bnhrxb-wygXx%>(!(8c)<_ zay;~>O9Spui*Q%c!*+ae5@gINftBok1FPv*-wlPE@VO})&GnjRVCTjf@o)fWXU}V1 z?K?%YkTZLHEqr#_J5z{vSW?2hQC_HU#W9P{ZtFS zf1%lzH;5d)Mf!gb0Y*hpttGMr87bMYaq(BXL7f{du-W)iGjG}G(^vWH`zar3I48#2 znZpc&d@`53e@~er{m3<654xmnjF_zD4vzD9s8}VJRD2tGettbse7PWYI-kV3d@LX?Ek7(sw`=IOd)@ohGQl}l=vnfkq0a$eEfz& z+p|WjwlH?ZadRBc&QrD+(vw``xV}BLv&7DIbzwatnMsj8CYa9x=^a3dP=pPknq5f< zg?vK>PULSIRG-yP=!DQUWcskv7p1+qmE+2f{N)^NTVM*5fF{L$a_m^5*7QUYbXK5> z(Zg}JzZea8fP^&Lrx%)i4-eY$=~UB1E&u`dsUGdoi(i^aL+&2~Rf{`wLx z5k?f|7pLKEf9^68>eERaN)P!;jplSr0s_y!M|w7xI^xLKra1Ua=i{~iJTTu&*Iss! zvx=i>A6FJ{Yf>i3#W+oKPUO*BSz|CRuPChuRnn=a3;AKVlwzgGCHXsdH{?BjQMcoT z&{N#XRN??hsl8E%&X&9ec1-Y=+6u*{+cbT_Sg!M^yhAl~s~}$Ml7U{fvM1^nug=$t5~x998tlsn+w305 zaH|04t?~SR=o7iq230!dw%3xeEoo^6*-?WppphD8ZZlj&eNEJO2fplux=ojsqU`rb zG6%lPI>!#)du3)C(#|5-eYk?)Wlxb0k15`0LG85zDvfCI+l%{vJ!VW(8OYJV#|kv( zQ{!eJXVW$^%%f41!d#Fm_iWSk*u#mViak}a%Z}!h6GM7ep6I?tz}j#wG6B}GU9q(gfGTl0@u*NUiXM;~{Sp?ukH}(d)p}5$zZ>Lt))3gC= zXXVgv6OFG{yVX6f@OXX?%?LIAh9$bE%LE+SunJx3X{QT~1{!S`L7>i>5BG%CXIku0 zoqxW%G4q>KDnLu<)-M|iboQcuQr}O7`e-sSA6=5YkV&d|`}k0ck(Gqjwm zu{yt*m0@CUY<@HsQp&{yl@aAigZIUultsffdP=-K@wH~adTtj zq0XBRFOj~RnW0cyzhBD}glb%s3T6r3@nT76^6EK5j#dM0@V?zs?2iqTPUJ5sL+0qE zUF^S_?W70G)HBOJ#g-s7luz@}yvo`wo4L*jcAQIy2_RKMKCh^5doPMNFpAin^pn%&r(%c@%Z;nSEO8$nvX%#2D*lRjg5dpGk0Lbm4i+=Uk|I9qQ<+Qs8F$~ANw9V}}s8aZLUg3|%mAJJ*0kmhb~tcn&ME5A3C znL8XAW+4`;FWKBVWN^=)m{|)~R?EaId4pS3e*JiOc#Smvq@+M zs5}50#?4Dp;I4!j8=N$f*Na1sD7UoG;NrQb1Kup`CYZRTih&PR&(EGRI5eylk(=yJ zF8+|L1n?M^FFETh7%H`2qS5yC@At)A&CN zvMbd`5~kEt4&ym2o}Ld&B0g@}x3RE~JM>i`+`| zGsAW-TVfJ5;c~4~RMo+_=YZ$!c=c(E=n(nnw-Wt;$*gk}T*!usepRNfzj#F4^;?Rd zo3%iS{M&D3hr6|l4Mn>-U`{cy1rkmS`A-@xewQbNfw6z+=v~gRFkIJqtakPRqY*$5 zT^azAwCm$RanUFm7M7l=fPyTgqCOL9E6zYn-ctg$agC#Sc`AN`dKwVqi)sL79<9lE zS|S=n(CMgi`N>Hqqz^5w|wJ*Nd+v-STC7MZb!n(7r%~k|9HFRX!vSz<@teT zfG1Fqv8MI5rCn+MpL9|@ukY-(Qm=YRb4@hpE$xeUy+jKR!TK^PD(cYE?eVvkXIB8sSOc176mg~1^jVv7De4FMi9P}#jP*CbfW(7*Y`vxk zTEkW-P>Az1S@b)ORL`=CInz}YIeaitVr;L~d1-(53PX10!)3DSj9#jU&&VUj5l;H| zBX~-M6jte$-z)GdqA?%8c-_JvCD+JaaP?uPszCk7vYNXx&(NXPvf*H%r5M$?-@;pC zukB=z)6wG#897s)sY6Tt_D;cxKc>&SldTt>^h=+JpN?tn{jpjcd^;gqi}$ed1Kk#q z*iYMw&`Qk2P33EhSpp$8fkqZRjSSU2Cf$;hG>dNza^zKGa=*TsfiO9Q_0IuXK&{r% zn66k(Ehe9{lhSK0@F6Z4$%<8rc99P0id9Nn@w8L~QC^Onn%pd#eR8SUCMOJg|Fm1I ztLe9Jm%*sUW9#2SVyN3(D~LN1-8iV{cZn`nY(5UXmUk!*Z9~hwzm@E3ahP*sSd>F} zvdE*+iWvnz7*+j|6g9@KW$$Yhr0^6k~hPc?9qHuPYB5f z;ClQI40Vr8F-!m3+eCT-LHxyfz(gFZ4Y9?nj0iA!9TLuj{L^X)V9Vdd0o|4!6RlPa z?puT$Ms;THz%$E5wQ{|33KhNyj|~W9xIIq4gV8T+D|dU*0}QqmB)Hd!)m#6LQ}bSu zJ7BRqg*mcIN%Jq(yKO)h8$EabI>@$*qn%lu4@E!t7m%Nn}AQCGCkf6D%R1K0!AzD{FRv4fM zZolY9TiI~+sMpRG7gFD(g{7?YCGoKKd$(iI{jQZ8nwt2JsIz$r49yFAskoIxxA@+8|1-!KJZSsKk zrLV1bM1Az}(b(RYI*Gh5$^j0QxO-c9bvjgbDSmL3GS78qBjkKp`(CLmZ`=vG@v!eV z)$yGt_*>y9UTnGS>0Z)|m_E@)_?>@XCg*FuNrLhx;mnxD_gT4XWFNcvDjQ^=@(-Cy zgx4U79Y?y`OQ)Q<0i-60Te1B@W&sEVfF6jW0(4_*PIB+dy-LmN)2s!ELkn&mf-c9c zy?qBP{KiUo&SaZIye87P7}EcnWY2Eq-xYhgQc=daR2LSmjB};n{rwY~mWvOsw~4tK zF^ag%C-kex&S@6>%h^gkBtZ)nuN1r*xk10Yi+e}MrV{l*!kJ@MZ%lEJDn5&!)Wu!7 zAAar?YUh$uzRR*-(~6EqCuT(N;aSHELE&8lXC=>AwrrPIYb(pH^{h^y?}J=BkFqRN z#Wv5TtUg@YiK-NCwc(<&?Ncir4RDVByQoiYVuaP^>7K^%gMx(&5ug6sl=W8`Yz-}0 zHHH<>S(-0IB*$UwjVt}~%-A@R&h>d=?~Cqf;~>v!og{pYv(%{cW3GPYE#_Wn3hMw@ zG3(@!04$zG7wF+v=C!7-p!y8;%(E!n1$L07oi%X}RQp3+H&BtMJ*NM{{kPf4-WZib zaxFruKvk)-f=OHHywEIO_nbkO>L(p4W1yaM=&lp~e!}BP%dM2^5q%^oVY~dV|4}Nh znwynK!{nwoO4phlPOPzJ;}L`V)DKY1ds0FX zn*Wgip#FnPMbbK2Nn`-zZrv>cq(F0b`d&C8!1Vjgc zWr)Yw2P;dDQkx%kXC)5jclpY)n`$=*IrT0#a+Q%1V%Bf6o&2QAw1r2Jw&<3A7r zNt14==+mFpHf!7I!Vi-XNc*~t_*YOlK}Mq(t2W`x{#(bfeL`=`nocRQWXg%Wh17(6 zQ(%_l&d$osv$n@$m;-L|227!7J@BrPqhEdMkricNbnFBvkDtJ79(sf|L~20w%B@Ek z3(r{C!hfTy!S$gy3i|qBC6byNjpbk7FN~$kwtjiEkFGVh{f!IzBlj)=2L^{D?)qmu zDJ(BoQ5ar(%xg~c!T6rN<(dtwt_*}NdCY5nu|8dOHwJr9pq2x_Y6LzgUu9_#c%pX` zr0!u`1tMQif5$c6DlXyR{vfSf+p5PCM2JV)i=H+s{sJssW7pG2^;FncziXm9(Z3Lv zdxE9>_>aRJ8x3JTbu{e58Oug8mIDNK7!ykV4Q%(qkwbER945~qHcrLekkh+){{F7| zzT!Q{ADr6RZ%^_oV`s{-Z3Flkv;ECJ{{7Z5b>C`Zul1y7qJ<9^*q4)X!<-GHMhzR~~d{<5s)~O=Xes%i67*w^zOHw(x zi?{?js_v{CQCOe&kUq0e*(B&jE9Vy=aJuyzswLUw#Gql@A>yg;#)HJ@YxxC`!?Sph zM8?o*orCd%*A}DSIeAHZ53`bc!u5edPmrY9G$mvgJT*M94{+#bpu6r~aEHI2=#EuY z(u@4iz{-Ffc;KQx0^2^}xiLKE=1@+=on+&rX`@!P9Z3o7Z3J#G;8Mx~?N}A!i=q&A zKT1?I-6K;XY(;zTmydFt&c-Rm@2GS*!A-n|T8x&1G3paFb((E@?Z-QTmQ#Pqa(d0LBXcT|E3yu&Y~6*Q(QWi$02hvy9q^8S`hNO0_ByfLs@IXk zXU&qr8Xx&-BN?Wh*544-)*x;vNt@8BfnOTHeA9c-pcSf;@GZYrpv+UmB%r)p|J_Uu z=GEYIyXZdO#cw~LLnf(piz6#QE4{=-daJz3NM7jt~umJ z`{q^4@kIfXSyB7s^(|+x#d)D=IHOry((Yp9ef;w_)bR_@M6gQTo!o19lyRPgKG(J^ z2Ry?$iTO#8m?4z2K}Y9?u?)4*s1|Ud~VYDD`4UPMhk{?$F-zU!j z#8=h+t&LX7pvmlI_4?>~d;-F8vx9XsliwkG&iDx8POU9Lw#g-KoM?h00-k*lxsL=QCdfF!t zGbWZ)S6e-njHQAc=yjXT-6=6vHJD;nq#m+xfg9+Ym_;Tk#gl>lw`_tzW4A;az9p;7 zIakNDU94=F+K_vh5*tsSH7=5f-HjT2kgyu_DgMg6LlaFA@O3-pwD7h`;!)x76Xm1y z_CgX$rrNuYrJTAlMGd)q=D?lYK%XNHGgj^hY-TZ;GgWxUw&pIL(OB{PXOG>FR?7 z)$gDC5jn%tg0JBIQJCd{qRh#4u4LATJ;bG(L|4&-Zz$D%?9S~1bvb0;`a><1NSSXP zO))XTmk^(`45kX^w0bck#0y$7ME(6wp#h)*n%80cL}l{)S!^BShCkx&6zG|{Z94|@S#_?7-Injsv|6K zs6P%_9O_-jh&Mg+CB;nN3nZp~XaV<>_%2rIyjT8^IT5xt7|{`p${c;nKC~67{m4#` zY`=;PbF~1P_DnWge&G~0R4JMUJQi;+ZAEY%qTbK0Nws`RBsf0nwX1)zDauYY?yDkQ zs%9D}7gfsl>D)hX(v&oaUF`9=0!@`V^Uido@VE>LUM}uUiezYlP9{=Kfcirpl~4!= z3jaDpJa5JYMUp`16$%^eOKG)D`@KlGw&S9CAf|r@3D5 zhlgd+`U^Fh6^NLjg=PYY+|7gzv-N*w^Q+&U^IMzW(LuOwPr3N6fW5!rUHM;^`X<9) zNf*#;46W7p{~5YUZv*ik;mJ<}%yEXjA-ZoArW1$_Z}gs|(D+NCPtu;w{mh+BFe~(L zFXmCq7kw6zPx&ZFi0U68&^^O|IBo?S%nBRQUu|iO>MNDBh!$8zM@GSLEO9H<|aj-Z!qs;b$NNrp@kJ#@; z-m<`#;%;*3V9Y=usDr2{dE?himH8Yf37qLR+`V8X?kFPE?-=b|v^_$tFE$?f7}zkw zDoRg)v01cEzt2Z0e;)R$m^KqHU?GGN%~IFs*Z}{bl7Oelapb5Fv;y3Kv<=#;&dd$z z=x;h^@Y)P)ifJ~W*&`s3b^9;4Vg9|*-G3oY`p*xQL)B;TZyXC!aAz<1?tZDNUU>7y z$q7^l9if0xoXTT#P4pI*tagp1Y?=^Yj-{t%fph*>Xea|xn>`Y!@D#afrHqUPI-USO zxyB7a`US4zhkB9QKaQ`tpnlvWiM7S==4?e{&@(l{ra1$fk6|p`J6`(lky!e_BC(U# zE+2TUp8$4Bp54#>u;!b(vK=#qAq+Wj8z+1PPrQkHnvO=+q;*K4$$ZAR}o%#QYp2m0EO8_~Le^5DBIgb!D zDI7@4EM0%&EJNrGRoP7Rk~A<8#0xh?L|ZpSFl;24$3PxB3~m&C^%}w{zHY#0NsVaN zs$N*r{l2s-7;&iH+A~FcO17ZS8l&Ri_Ag2X#%KS5F|L6PcU6N7{}l%%^j334?Q9MI zurtN$&}iY51U2(|ryeKe&hv>$^cUGRG2X*Y8(xCLSI)~>@9(n#&=Og=#280tq4iNF!&!_fJ<>@}_@g_<~CM6A)ojeMQPhy?R_ z6*tdbN*~3g^0b@boG>bMllr)aq#v&DIK*I;_Y^lyWZx^8ul^4q4jgH^ec01||F8~P z!KBM47p;D@s*K}}IHSAealTvZrL~QEIk%Q=S)w&8*?>QlUS@a$Z4V~yKbR`>e+-?^ zk}<~Q$P_VR>8FO9V8eh#PRK3}@d@&_9i`mQ}r(e>p(HX^q$NTw^E z^QmrrvhL3U%!hLb9@rO;KK}ew?W#=W|*qWRg@(V(Mp&q$MZG zb@39NdLCr`#EQ3(hnxw&7k;$C zD&#-&0Z*r_*FDbUym!S}lVJ@2O+0fG-fiF@$C`;FsGvF6{~^FKv@&Ndpd?n^7jIkd6t!|n(`5$Np3KPCMi z$*1@&+T6o6f|;_XDjcaH)8*j;Mer2S8d6ig22w`Xd*Q5B*ZwKu#KBE%ZFTKN=!MVJ zU*g791WhOn&Rlgm9&T+H=h{YLsomL%%C8ngngC>#O4=#xs;Af618zRHH9WyY&x=V@ zwIO{{981itiOM|xXe*$RA36vK)W5vxWU5~13C-fFvVSac{=3(k@u6D1Jaceklwa1F zY~=m{SqmN*k4{!R^c!;&zGN;HwZ&?sPr3hc@8*f*;}dT>9N)*7Mf4y2FgfYgcN53? z3^LBEytQ;uv#evL%(TEdigEgnyZ~vo-QccJ;@_Y^Jp(Oc1!!ut#r;32X!F1GF1nsh zdWG?!xA)#V(F_rd2g0)tk%3CCCtgiFdpJVP#xLS6r+mLFES}+K`(lcIr3t^-JdLe$ zdMo&vqfpjonyUI)K^FP%VjU!jr(az;J)lSmTu$e7s-F`Q? z>#gex-UH2pFV*}{)2XzRsCtR}L%lu?T2xoFH*@mrrHdOP&%EX|w82kePrf!54hg_3 z^|BGO=fjIW-&P!pYV5yiNSl^^MqG|)SMTn3Y}Zem6?=ep`CXSOS447No8SX9uX^5b zNl);D%CU}q)U@_ex_IN&Pr(9&o=QWD-=Nq6MOw`$g;0ZaZP9Pv*7~UAp!I{Mc5qkk zoxj^DYNND7Ky-8FvItSJellOed6yq5`eS$CcqYnMe;-m6#b|51fU^BC>)!;P5-J&s zGMsQqe^IM>CA#5Kk5_bPoxXUy>OmE?Cz4W??n!k_>8Y%VLPGF%HWqxToAbXTKKP2F zm(6IZ7-S~<@n%7vf0&`mL4!*`mdO`-0lP*AhuH#e#%-$RPf|Qz zKTxlE0}YJ!&a2aZsJ&2+-t<=-_Iqy||LaoJaWq*P+4lL~4=ozoS$Xa9HoK;4ygwrP zh^*%YPl2)fuXPAh7JDS4LOY(%JltLhuMi(n&wRAN3?>k-PzG8>597v$l=iCepJT9O zRJY#0qabz)3ArTdu%_90uiG7O3saMAIs`HQ`XmWZdlvkV8(gU-4xfAmaGw# zZhHee3|7(NGwr?I4Jl*M?kQQr@YtnI`kjg9k+bcVEM1q)0Pv7A4puBq>$hXyIflx( zLvugFOI49wf`Pt68E4+#`u}Xm|4xFEJ2UD;H{vbzO$v_mU@^v@0XP2eX*|$zh$>eR z!PYonPPq3L8yolCaW>Tet?SQHjre=sO*{vKf;vp~{!#QM7@yqgrH0EX0~q3AME#$S z>caGEAal2oKc$rupC}tx%?=tPK1BY39Qe-Vm(jA=8o&FrKLiQC=rUG#I7ghKd44Ib zikN^iVsfwOmE0Fh%OW10s0kqSoV`sUkGAPKhod8fm-l>GM$f81M~tkZ>2IH(<>QK` zF+FF72s-?uYL(ZAWbTr6y>It@&%;M~f7axuOUVXtA9yE!MwWTlRUBj6%~V6oaS)`k zWGh#i&#Eb+3iP-k-UW*}*sYXDS2&rNW*|MDREQ2T8a1c)ocN~#Fo&tqM?9W%3SFlJ wz4jE3|MhA(vJGvG`A;*i|3}|_^y}_E75jt2tuR{Me}EtPcPi2)l4hU&9~30+ZvX%Q literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/alert-landing-view.png b/windows/security/threat-protection/microsoft-defender-atp/images/alert-landing-view.png new file mode 100644 index 0000000000000000000000000000000000000000..e925e50d7f9a19e4cfe3444c6e6e35bc11bada80 GIT binary patch literal 80610 zcmcG$2{hZ?_b;r~)}t++R`D1@TP-bBt(hQNEo!JSX3^FhVyIaRZ53@5)f#H1=EO{b z7*Z6iA;t(IRFz1Gn5P)7w$E?fb=Uh}@BiNQ-uJtfT3mefHV=vp>gcgNK@I zr}<7ZF)^_{(7I>D#B}lo6Vvhcf1NtIGx|2s}w~^*urZSuW<>Q(|%n|9t-6s^b^`f2pdF!`$5@Iaw$UM1dLU zRyB*XHb3W8sL~;;OW1P_ly__jgSYs_zF&alHRBeoFyc6Lm?{O_8@-ldqqFdE!7ex< z7-i;4UqG#W_Brsit+vV>T#hM-ygwT zOAk6(4$rFqy<)m_D+~`J9ZTT^{`8tuoUP^?r^r5isVs|jzh)m3$#S3oS6Gn73?b=T z`bxN!6E**EE?8Ty~~$hbh)f zw(R`D{p`GFwQ-r&V={``9T9Et~jK4{#c8b@R@Yfsl_n$Zjs6J z&e#>HeV^|Vd|0{jb9nQV;!})wOML$*upfkeflKQ8)>5kVb|bLC9u@&xs@;cz^@^e1$!sTY;WeL+0AujJI9VW~e8F0Ukpp1=Jv-+Sj~@l5TAmtz z1NYDL7dc!x{S(GZkHvaI*-Ye}m*$(f4ZkbuITY$ENeEcgy>_ zOsbw%?UHdO58S|m0nOvc)<#v#)35dt@L3!BRe?wgTy)wxt`H51@4Fl1m+oTgRWRa? zB0frps-d-~U{IPudKPBY1}mN`y8AVq5~&+M_@8g`bBL{P@>?<>4lYK}t~Yb8d*OXW z%e2p4%Ud(lcth9@I4q6bm6*#xu?X8KJw;hzwMj>c$3w0C@rs2k^3V~z+WB};fTZ_r zhRyc81ZI|Sb%0>=osW%P8}_#B8@}oh->$`LN47=Ik0bR-(OCmF!gH?1QUpi6{HoGB zj4Z;>G$+K@$?&Ly*@IW~u*`wdz%v=Hpni0bcls3Ep}51=ze#Y%cwLDd+hh=)0e>>Q zC_9c8J#Q>DQGKWTz&xDsGyNfESCX!ip$ zs-8A!zaUJ*J?6O%8~yfPV}ghLn19X5vzO3+%pDP$?s1>P5AML=>)bYD^+&44JlD#3X}}X zTe1XHg%nHC#AAmg58hqe_KGm^+zOGs21A*htWHwWS@CJ~PehN-R0XZ5P(vaChWvbv z&_|Haye?FA?3C{O&y2M`IZ8bKAT0rj)r*QIQ+T@f*M5}H$-)T^kl^|x7&^D;jL&6Fwp|Uf|6)()Q_26Z6iVfQpw_`3h6fhIS+5BNOe!iZeZipujVBzS zeRm}+T^iz&63|Ct+&gKR=9V2~Wb7-XVurQgEH3aEPwes0jI43C$X<8bIi=Se7&;rK zPWZ;|`E!ow&&{ksOmI4;^OnFp`BtB?PkGf++1Za*p zS7!#Z)$AMUiN3`Rx+oGTN{2!FB?iRFYEtYLn)_v(6Ao-+QrRQ@IM04m757H^Z}w4guOrn5@&}Bb8o)tsdqSw!V|-U1JnVeHhR*|wvH?iK?o6KM zpueJS6K&zz{Q+|Wew0w zV{d?7a0}2Mx&Lm2Yw)>#V_A5)3V^-SYL1=YOAeU5%a5iOH=EUG3}&51^}e*jp$wOO zeg?@AI=VxP7@oHL^8l6WFxR(jS*YR9nu{u^jbpxwq}W&FhHx2)+7D7`ftrh+J9hx? zp_$F(sgi}sfd=%2ACtcN8ZY{darnRSpj^dxDi| z)q~Ko(N*e0rA})k9>2^&%~&XRD2I$vrwEstEat;_)(zrfUw5DVvs7O3u_S49yML&8 z(ks@>OH#Ms^~)B|d(pVyOOD2ueww&PM#Ut&3-Y*ArnL1HzrCmTT&$DJMqxA4^Pk)y z9Nt%cGv=ip(ND9MnRlTHCiWN0wGdg@;6;ZF7qTivCS%C;-P7|)^H29S^h!|~N)GQr zRm(nDj*szYjy-5|f17Zg*swL&NU6h>=o z0;ca{l*v*Xd{qX-#rdx*B{(_22-;RtyG^dq?R^0xE!Zu2-Pf$wI|%oxk_tmEqZ@iSP}*3fC6aU4kX+4Vyv-gxwOeWfd;Ld;xGx!q5DEoT|{x-UNhq zSytKYP=g-|jo5pxPI1Hf-ZzJASP}kNLrUkLVh*Z(>+U^DY~HAqj?A zAsuwTm5MkKG!!vI3DQq6L0Oy+VkR~ZR-fX<3$p~Tm*o!+np_gx7OqY8{dUj>9bL4} z@DAm%@i&h1RNyqsfCZ_$5;U|`(LGAFtt$v4DT0k`ABDH@M3+tG@K?X#_ooRO>KUdV zTxr)DmM1(|v_F~_=(=`p41aIT7n7kGI@&7{dN_td)NFm<8e6U!WH)t|c*kk*4(Zx# z3xnQGAlZN!3$*35@j1~>r%lsBHFyzzvp17U?DfOiWW(U;C>Z=(C|!2g*UY3gM)$XA zd8jOV_J&T4A6VCUKFK^S&o<^vg5~bE&~B@rh|lsfHwmJ1LF&A4SU(au2kik{K+m)L zvLig7?D<_(7rK{hr7RF6Z*+ONr{m4ks)GP<3cr+UAC{xP{-7uNQJ3ng6Fy4CR0+j- zf=aBfBafan+7QX3KloW(N?5XJXVFH2@3!<{#}l>_$iJOptnwvXGY8)|4Eb(-zWK(= zSbi2p&ASbXP6%b|ZP1T?uZ?!~B;nW7O+U@T^aH^KGr=A9#Mi-GWijEq3e#z=oLWA8 zS1#ql^xENl3+ITTu5GSlD&7~F?mFkC$4_YJ0`Vp6T|E%G_+yuFiD-!GiH0u-5ceSi zX{TYtJSW(pA`Z0}r;}M7c6$rOKe|PAZRkA{s$E0lK(EhV55dpe{h|F^X79l>=acBV zwA_O&3GhIs6kt>62Z)I5XNj-f*N`!pQ5)P?^mc8O2Zs3?5V`x}Op;?}YD_a^Jhhu4 zkhQu~k;#Uin!KncJSvrH_cv+yD9~h{g>>dh(A!w@DedX@flnx<@rNOsZ$nqqo==Kb zvl6DInrefJPcwUTlx5=syDBqw1D*?ZNe6)h-cO^cEMVK2oTt*7i-+JevxGpSFIKK}O`5{veAoaB)O7iIfir&ouS!FV7)&VK*HvS5KkMDHV_-*QPU0}KUwknR9W|oOe zGKBG1!ZQbo1Siox+XGrEt~#t;7Hyve!6vDrB1AeIXY1oF=+xZ4^jO_yJNL1dwt^${`!L)mf_6r!#z$RIB5N5VQ(R?9ey`(`=steUR5{|@aS4V|$;W;5!fx`(QD$2Q?B@4iYZ&e@8^ zN1!E(#)%07_wDF0jS;|vtil~xw6$F7Sya}SH&!;!0K8wf_r*X8PqTM$zqc$#CJ=0VIyt8 zLhjw0k!4`GjA&SilH6KH<_IGClxl^x_<3F1mg^RnkTD(0_wrhbWEs{zZ_A_Q#hAZ? zSw9QBc#c!+rg=FR$Gtueh~_;ST2nO52fGOG;(L5OLx!~zi# zeSnm_;~iP!)~XC!n_9HFbL67O^toJ}s7=H^8aLm6t`gSa(p5v0x?znNRE!+6L;VLBnnh`Sou!z@ z_=6hyCcga1)RTkWhtzY<%rfG&nzG|xf8$c$zl?l;)#gXAa}fJy3~cO{<^@>ORZFt` z=NOah=Cm|l@P_)T*c&Ix63?oy%^)848^L`8{F!yyQ|qL(<9Nm304-?aV#)6Z zUUWE-#ALwifYc0<{9a!dSFqRO0hcwd<)EB%>H33;U5Pouyr7AJ--fN(@>l-sIEaW} z_g)9K5NL6YCUD8--&Mb#@JVm%Xtc7OUVU|Eu!F-o)f&;?3*A!fk%Xm^}BgU;f`~Q|8G@`&{cS0 ze6tPlYoW2(hLF7R$#w_7H@SB7=q<&CK#iR8^vwN}e6uC+VQOx}L#EG_|4OGQ$6I#! zdFRHcFwUt}Z+DV>GF2+Ca2I6xsm<>VV$lYk z=`N@<%Q2?de`n&E<%ofWdL**p?s$c?eH6gdc|)CVV&*c+!#}=EVD;T;kX&20$*ro= zQ{=Rzd_FfsVxQdX4GzSWLsejt^bJunta&X#_orA243XXU*7ow+qt{6>3%T7SC^eZ< zh@JR(gN@0+_Fn~nPPyp$My|~??L$oJ{5KRf`rzv1$p-E6vTuZnj=qJmb7wXt&Gd%X zo`alm8;*$PRO4-yrXb^_A%M}hsHvfkw&nf>VcPyqO-LttsMbkFuTP?4Q7enL>_U^! zJXunqJLoay=|iQDK6oD{HPXKruYkkVpy}ka;dL~N&z6IPuVuBjF9{}JJezrPd>K8w zTr=b|{>>2+sU*=xQEm5ea{2zUxofvz$fE#TSuXAN;Vz@6&OW1LsCkE(6spM~TdB^( zM2Y)@4;wHx=}ESBU>NS2Og%zji^H&G z)LZt&0K>#1FMi33H0jvXVH*;!wEj=AgNN}Y0VXQv9{^g7woA=MOIQ_sGTuda5JZfs zN0hcMT=%}$43PylGiOatq1L{PHb7tQPHjcv{*keX1MN0K;KA8X=rz?!u|TlG|#i^e(a z(ls?dIcrtEwat1^BMK+`TR!vzXsWMa=6@T@BRNne(%iHdliTY352SzZjJX#wg? z65?lDxKh!Ok4ANYp8`{M^S`k9aDRiP-;@MqW7A3ox~ZcS?3HO+5~yA4l=kW zYAH2!KiKwI5qmR`DUbPR%0I8ficSCO>(TY!+r=Zx``Ifhd5KBEa(jvC9s3|9A84k$ zUPeO*LF&oY#FI=~PDg!=1^#;B{?$hKqeqI4>sm+Od|o+9Y#jai=w+bQpXHg)yN6eg z(jN+Z&Tao~zTlYridBn8JV(>N1` zA51uFEdE*vf~ogy7T67b{#JLn(o3CzgX1xL7TNYmO67OLwLvIFJw1n*$zsK()KS&n z&v>?e=aGeN%Eex`gY${cr1NKbwzY~e<4;=E*v7$6legt$QqsoP}K_hmTYhrr3+(MKCp1q7kY^v*+Wrv`t=v51T#dF~_;y zzGZ!Sd4)$?W zUS;_te$ZB6xPsE=JDtKtQ!AcM0rk^{JO*2Am5aBGZhQl$O_`x~N&Y4RGj!x)8Q=Wg zwXSacXpln6`MEhk9ZW)C^^4FDip?JswUB+-#8mnHl1bg{$*9%axCnhx9dz;ul zcGIpiXtt!=dlRT5uYin6K!^=Q?%koj&u|U`S~SUAdwQ1U^q}$4qbYZ;*~trv9AovV zqXT{o>9gD9&o7nlH=qa$I=v63`rAPmOP<3h8i#YLFKXAZot5oi22N$<(u*k%(4Y+3 zc%B|92sv{d4Vq7QNF~8?JfGM-rN#G1Ra@3clwwtr)2fu&t zy3}Q2XbHBw$NxF2R5Db(XUip#@y}i}z`|fUvN8r*6Z*N`&8 zKX;hZ%2?Vch`WLP3`D#8?tJ$`3x)Cb`gQJPkc$;;8(pP>Y(lkwrZ$b=pmPC-f0S2^ zVs*8Vw1L@2PbY@%qN|5So-x!E?Tcw^A6bBFpB*~D$X)MH_bV6sMf6gXjB;Nre6{^M z^eF4L>N58C;W5SC=hCX=>Dzl3DV`&MVDpl%W0`{WmX3^`y)(3MCx^~Y=xvz!&2M@p zfa-iHpc3OkVMtH^r+AE%k8#A`)t{tjlMb=DhfFX8z}?6>Yxw77@=5?n!(*&{fvc+< zYZp(djtoByW1{f@uanFONVQf)_EBrrSO4hF!)68UDKjpeg%mm` zNJhE^%moh49dSUbh&(I#J|AM6LO=eYw=;>a%tuJi;7E`XsUQ~`WqnuF zGij~2_uD|2^33YR3J?RXUdssiEAlf}U5m@|UO!w z;mlXrtLwTHRbz=Uc(y>@Xwp3^w{bad!8*tpRSivTWIcGZsuRjceX!J42D*t5v+aBk zq*!rd%_nWfw7%CLc_}r@40Lu)``DN--P}W`c5J16XY*2xab8#18t(^Km=r~jn`pyPe$LJ7Nf8hf^hZ6+?SPKmMi96$<1ePW|*~m6t7nJVHq5#o{FXiuMR^T zv`?fRi+9DRiOB869W=ke-Y6#|wr(X_nEn)8>5Qr&vgz`Ss)?CnnTh6pxWBhm&g>j&|#`qod1idz?Il2kZpvgY~4-ZZ(hN9#YzaqxCIh1Q7BP<@0Ati zror)o2jyvt;rV7KZ=w-acVU)r4tohpB1@w#%1>xqk8;Of?W2|U*PFo2lP9JJlUu|Z zxVF39KaId9j)CX%dblBG-Maiw>MlK+?fkTvB9?NAEtc&{$WmMN+M_J2sz8AQdj>MO z0oI@BrERMr-TCB0fil2jY%YR7MJ!m!HUhRcV>!0osYq7Pmm;@dPuaQxjIRnjaKVE^ zKoCT-DtiBp5H>Gg$hQ1usau$DgwE%b^I?-ar;|*Tk94zz`i*9%J+gC^6Nt%A;#?-+ zOHkEG_5vh2vINJaj?3GuB<4?sDzp;0#E&GWRk!XPz`MdcS+W58Xf9)6h9LrsV^p4h z54{KW^;fOD8aVUXUpX}$aM+_!dghm6B0OKPB%PZ!Qab1?^;^XLb=gQepDOmY_!do8 zi6eM=@OtPse*Nth$-l=_qPkvOK`NV??b#VJCZ6Tr<=T7%cgEeZ6|lMdH9^Z)y<1H1 zYqdr>;fqZ{lWLg7^R*-rIAupCaZIu5r*@(K;45KGvHjsWnM7#H}y}5{EP`+aChY*e# z8#rJ7b1fo64!m;^ExN}ec|x0Vq80Io(&-6&0-HSsbn70Nu4U!jQT0|;m#dqB+QLF?We4&}Jx`w? z@S>xgH>@s8SHeRuRel zAyPRqWW}e0>!Q3c0tuJ6pf4z_K#GVS`*yr%o0asK=? zMcX$=LuVLW8%LRXQavOi^tLHarejpQ)X>?G2Ox8wIHk-dQI}vJ&%Y_Sms1RR*dK`) z9`|Qq8deJotf#$~k}?XY7Gh%BxHo<>DQ<6`8_+1G^E#6uu2l4%M}LTh<$ow^%2Z~@ zYu;R2mvtKVjX(m3AAa~Y{UZhAV5KinPq7A`Pz$;Di1i}iR{$UD@4{nFtqxZT81)lH zPP-_@80j#T*zuS*Bk$Lz4ZEz|%J6;lJ@VGOtj(_;GidBKs18pg6Ndj)r813mfP{OnD6=DnSkh6`!85oqIv38PV-sgbRxY*R1EKq%F zlAKzoOzz>mX6Z0QeBOl8T}W;82)^TmhPK~W0WIh7R{nf>SPT>iq`>LW$ER> zWOu`QK!R#2vTu|^9qaI!bDsDv;G`u6RRTc^nj!v0uhrpxQ2cvVz5&;druQRW1BMUB za+LZeUcz>rC*z1g;l{&zo&M0EINhQA^xNu*-bwNkzD3sb#;Ut(VRE|3d(_dSW|ed2 z{=j&MUXy4+rOo_ZL(DCW+~`h9J62#IK7?PUNt5bjr$^S@z>^o)@u>UKQbbDXr6HNa z+APy+DrteVyG>1f^+JcM>5)$IRqDn*P?i|DOKq&cSRtDn+i?;?3!c=DgIDi24;mb*8QfR>g~JBwlNPkSMM$;9`4m; z^`=5Kd5vpNbOHvv_Xnk4&0?5iJ^sY(&!E8day8!Cf|M?|#2imuAE0 zL)YpbV}Wu6Pszv4bL6Sen47mHN4yH9yHg78T5+KeJ36&x{WX_t7UdL#hR~m+4-vIb z#Kp|k>JqTIVB^T*Zhxzz27E#v^01|W)4(|#*VnsF_j<;v=VfSBXFg8d+yinEUzKdi z0gR^m_5#!Oqt69VIDulZ!(|Px5IC2UhrycS=?g`u20iiuBCE6?cvv&@Y1CCF_-*rY?d$q^>)CNB|CeP|okhM;j}sfO6kxV=9o`d1P7}5=lYI(9F7?)c#$W%?UP-;3 zzE(e5JPO|vi!rYn%9tc3>BzLCjaOpEQu9cyCFE>vBd<5IFJj3D5%+fQ(% zaw)d$QTSy(ifomkY0c<)Y}a~VXz1&VIlkV^K(Ku#w_oNn3FFIz4X{o?jQ(Kk@TV>H zFq93Gf&crRn?D$*)qIyp$1Vbbk64P+`bwkw3+cjh1A~Y55a9mT$PhpKlZ@CKSUD+J z7FP>vZl@mU35(EJi2Y9X-1PK7ma1k_*t{NU=iu`)BUvc$=A?2jL&!pKwLtz8dCV<} zFH30bb~QPEt|gFJD2#Z%?~oGDw&nLKRdjb~PpdBln2y>;cv;`=j$8K-2c*+p31kEqH7vb_rVqXDo`Jx7 zSyXtugT)&(GQ3qp1Ijpc7p&8a>2yvChpj%o-bpM?bO#or$~_dPi&Yr3T~T7yo=&}e zSMsPybHCwEh`b^3Ji{vvycco=B*N@59~qYw%Id=!YjtCE%ZqWD3aZwjdHMn7i=8{{ zL2LEG>TUbIcCo#&!b8=}L*sODlbAmU{4;3x-Zup{jth2YN*j%BENl9A_6uFWUcKEr zfFOtX4hhs%Y*nXg+p+R-I+1F-xXcnEVnrw5WWwR*!;O+V zj92;kY~W-T@ua%9*YG-aa41zA40~`n%4B=N%kr^&1?>yl?z)b*wJM>I-dIFIS#n|G zrQA~sd8Wn+`$)bDSI3A~Vg z^B2rk&r9mT%Vy@WB)Qk zF47zJa62&j#FSzDI9kKvmd((In=L7evUZEZZ$r&oLb&NcGh5f11K)X&un%K?Z)h9%ifM-FcY=4An|Hl~8-)5%P&fbq{xcp8~k%LB8mc2u$QL#yW zt8Ee?r#PEWSJ0_W%`6*&#p37Rt_`o1tx!27nXdH?_a|=#K5tECtp8|=zx8RorB#a< z|n>@y=cR$wi+)A=fb(6QEV1*0;4$*?zij{ zpyOSwP*c)PGfJ7(yzj0{Au_%}FDAjuT|Xw;m6eR=01?I*B7{>JRZ6EU8jq;`s z+_u_8zP7QcbWwje?Pcgrair~|sLsTri8{ErVtw&1-zB1A8j8O5b-!xQ$o~vd5~#^s z1*^>*de{I7sktv%T1^^bPTtN-FY@h%5c&Hw>CV-* zpSmm--m*j@XuRmHw`e}9n~p+qkWXQ?EPlY6?E9Ax7uP{ahLj#W%-ePlm{`Lwx0wx- zfq6lGpk@NbDN0T4JAAjqt7hrJ&Nz43T9=u#Y+LFzbNi^h_?$P*FT~;(ea%STK?IYS zg`axK1I1X4y)QJMK*nN#f8iY5#;DReWEaM(lvQr4*cSWFl;%|s=M77Dk{1?+7Zprq z&1?ur6uY^W2pY@!8WiwcIkbwDdgvP^k}x4Vvp0dccK*r~%3w{y&%hg0>bI19Ae=ij zoPj}8y&J-;bv7orB~@=s)mt27agA^Gy$aE*g8~V9ElwmE@R}%*g!Y9R$%a=?kz#z)NISjRN z2p{xStQ{V4KWpvD1G5X*iN@z(a!8gUc{bt&u_J)ez3TR#E1exm6`%h1Qa zh9)&{yq}B1Xp`k(rH{p3>Ft8~;wsaVAmjid1i6K#Y*d?H|QBxzZq? z(4SYYmX1>zP0>J?2S?mkmBPXh6@$UG1*1lzk9gCS@$KDW7XfEq1rX(;Vxp_a_G+Ha zc&3oTBuaGc&B3a0cZRE<0?|hcD7QNRvtpY!ov9m)FLrh3gEpK&{oo=8O@WKR=nGD3 za5(jSZl!l;WzCrzhk?u4o1xpys-x9uar+-<9>@NUeDl&W#Lcd)OA_rI?6(MwSJzrE zJuf~DFY21(+j5z*b#qG4fC5()X>u@A9B)}B&%G|Ih$QRWb6%5}hCs8P3L6iW$qC}8 zuEEFW(l-1WH}~Fi4>peuMhHcu=Ud{+Ofnu{QMg%%#xFbhH_+5^4W)&+GeSx4xNYR` zMnh{z%^8*lpHG*cuwL^DS{WjZ@2#Fv+4^c?!znpa+#$CSXrI%uGX!fgZgT=d9#5I= zFO(IKYtD}iq1s9v1M~ApZR#tla672c0EqT&H)k`E^S!$>+8wyR8dXmViKm! z;`~Z1G1fp*Dhao)Q|KDxkbg@rEm4?EX$LjsvT+K3>(mjtukE~}EtFDt-(yT{CTnr{ z6GQZC`Nv{+SR3ARMoHY5)_RAilX}Z9_4L*#K$@}9B_pw$OW-G1kSXsynX0sg=(hRq z!mL%tKJjw&oH2Wj&t^yeblQlEb`g5IEi6f;`O7&62Q*0**T^9vlOt<{8<*6lm&^Ag zoUoxO3g)^lX;Ni_!=jxL$bENSp!Lv!xvyK|ps(4GwrIw^I20Ttln&K_Dc+F6FfMNGwrmNwTR(kZaZF|rA&3U~Zf zQPRPx9Ew{@Z|Yw|5^A*jQjFd{_-2Abg}!alP7B*N+Gb=sVbk+;Vl{SX(PD35iJu0p zQYqMAr&;gRgT_*y%#gyMQ`!fY6_4iNylF@0Z^^$a)3&w9JEzh|pxD;JeuU5#pd?p~ zZ3j-MDg-d`T}=HKn>1`F6^LK*k&ctzXQLP0Pk;X~zfXUtrVxGaMWT8Z!lzG_C_F2} zA!>N;$g5avD1;LSYce8FPIgT=ErY=)E*wQ52bpN1#juBHk0SgP%xGr0WUwy~P)&i5b?i`R_|1JszWPL=ZO*tgrN^NoP=La7nyTo^l{%u zWu%x3&rT={9}quhxCS2VuUN_J?PNZ$*J*|-EuuA<5vt*%HzK=EE^|d$CR8Hl&-acd8cP~rx zI{h?Jzly8!u88>YNydA*!>2_m2e?oY$~q$M1mwj9(>B=C%`j@u!DKTKy%$_p;I1uT zQ4ma0G{!F;aZ17Zy;fwmJ^`mg$yhhNxpqIR7t_AT1IvTL-sf_v8FoR$yEJoYNb(h^ zm25k_!02dSN98^34dAm;hVUQMsCUza5b2)$s1&Lv&9j%EYd>kZr==TZx8k``GsTjk z(m`pz^Uck>!m`fE8GB($ZStC?acyH!@&00#VR7MQo@*T{(TlPlOa!7ZokB20JtPU9kXm32?$Z)p^rps z=G)U(;?5`GP0Kcn3td7|Xt2TioUu>L|0L<3`8Ysc%G}{}Gr!J;?-$}UHRbsa!^i+2 zRN60F5Mr}+UrW5zLzaHayKZ;5qr3c}!G?5&48ELUotssc72HHVD<+v`4A$pW1mW=~tw_s**TTG! zJ`dmy^8%!K{RZl>3|V@_vdjZTNdnGw#5ZXU>pX`uAh1TuG}-{!Y`>qyUMjd;$12{b z!?Cj_QD<)DvHAi`h}EnyY9o2+XneiN`KJRLrfKYayWMQ#^$KG=!I$E9k2X)b=6LhW zIkrt5$yi&7kmdL;-&mz}NT~$<{`B0ll24{`Ms$&k^_%yrzE)UeHV_eajHT`fZU z!w+4x?_+ed-kWVOa$OgLxF^as{m%Xw*0XW5!{gnD$~v?&p`2J!=UUmwG6$Oa8Ybkj z4TkJ=>urp|^M_z{*me8Gd2#k1!3+FVZZ{6#mB``m?)M1yetqgOuHFE<&&**k7#V3$x!i|<80{Ltjkj9 zJpQ>-?GILZ1YHm{fsP#@)?xAbhxdtn#mmA(0Q!FPuFes#V#hG#SnKKk(ULBr*@To=A6c=#rShNd1h!ifGA!0KmJB zQ#xF`A1G;v^yprFCQ-yG9FIrozSlyyN&}3CX}Gl73Wc^=SqV9rjX~^&9($Hs+SoYZ z_kfp|7mak^#y4}i(3IUpq+_gTMCFuIqHODjTVaQ_1VdiqAP>iaO%t2~Qu46e#%Ne&5qhOn2ClsGo(S*6=!|ColbsS=+KkNBIETP?gifD6nDD+X5uel1Z0VUggo+9>Qu2Hw_x5_Bg* zzqEfnOCO(szF=pt*5e0J2>fEYvk7v4^s%_d)$IC(ja5M`M(Qm)=aE;jHpC`AQ|#&1 zbc>*}6w4|dwNRfpIPAWkxW;L07#ww)K=TaUG<3Xp<&@`>%m1=MUtPb>n*co==+7aV z=*@%FEN{zLQ*U>*E2gFv0W@UI=KS@F=CA@CmA>((N@_@zxGoc*o8?ryY>e>1q ztUlV-NNPae)@bNzYBA=fAYzuVIUt*Cdc%f7$zBnNenU-qt^`dPF0eQzCsn59`7EE=_|IWUFoV1dvV&e(&urMyDbnZJ-QdTZI+RSOg?69k~?Uy1R`i%>m)dc`VmWEbAdW1J|i_fyFpZfHofET1@ z(r2f3NXIPgx9Zo6DdQ_2(u*8^0S6mq^$^Je?OaTlj??I+l|X#HFur|iAev>d2=T>4 z7Hg+o512M1oq)P~ZOldy^^!9hIt{~rZa`Jmd{#s9FfjRa!j8jbr*T_eV6cRb5 zfO>SEg*x@nzawe)7X_bMsy+_?eg(CsPvlQ#-BTST_4fT`!gH9qlo@ZmyyfVXjo8W7 zu*5EXDB793K@ufB>Wl;Gc}Q-w88|iR3l8suFV;oj`tL6ZK+FRJSFQ))Z*Jk;ZK2Pm zA{|SZ!w8d$)r(TNLCI9X!S|ldNB_QndbgLkyEIzndxPA%H*;I-PejDw-g~WvcP&)H z^XUjutaGq79tm{bix0uf?Qk2y^hAvK#&c9*QZU<^9=VVj;h%@Oj)|v&hujy;T|z7F z&9$qetovLB5-8)9Pn^@2fBB>ev4HJ{5rA{vEc5ZOxx}02fFUi3w9x#fLs$6B z&XgponL-#I{2#=R?`=49?^wwtGYO&~RN&}aij?WAf!GTY++v5;`(5F5 z4}vBVE{xfUSdimR>>`#`Y0q{E@gLNRX9fxRFZv0K9-_2_>b;xxLUB>*sx;wKI**vP zEAL==okF#Ad(1kku#Gpm@8Im3qZ6gO-Aa1&4l0s?B~|dBi@TeuYx+1w?RZZDDz~1y zGd}r|ltSTVX1r}V_g+L|R39&iMJtbKhpr0IQit(WZOxmNXga*GdoUccbrB@Hc|LaN z67Z+d^8s-#y8aXN4^N*`Fe@~AT8q+Re8tU;@3ql5^wxN#lwsiJ+H5#@?|F3flXv{u zb_hR%&U*2Mqx0w==xG^M)OYk1)^$7x+w|b+(rs|_vB%>$Y!C31y_^j+NZV&LyFKgg z|16~TsJ_d$Lu1gnz+_Od-|?Z$EcHQQlrUmh=zDpt*zrN{1#ZEGBHE%6Vb3y?*L8YL zbVXu@o10k4DwThs|9-2!I!KQ zxI9a#l4AEebLu5}VEQfJm7nRWU7Igucaq4wIFC?;q(ANKy5SgP^IT7xz>7E#!KS|{~?z79WpHcg$O+ijL5eM}fBX5`kG;v@f z7e?I$*o+8{3@*f;nELG3a7P3DEfJ9#GaV(RH-s~%rg!f@WeGVi*n5)P{3J151bFZo zPg!Vy1bx~|InL$hS3C7TvC=8RA`NiDK-gsP%bTZpCL}Hx5DpC$Q!BGqgRCt$k3PdV zEOz|s4Sr%2CubUZ4bW=z--(%wH;!-YW$yOg-gwYy-rzG<@*i{WHuxzIB}P zkJ+Eh6gUYv0{qm-D74cn(^}?S{7D>q5xBu=09Jq4b~~fI(=9)0=Z&P@^fUM;dH?vYqXBC%rGczDmJP{wXH}~}?*3jA40AsB zZ2-b_rBwqDOq?_lr;c*60U-zSP~DTer}MbJ0$bC z0l*FX(udQqS_k(85F=sLS<=?}M|CX#ZTe)UFUYpQ8>uhTpj$2W$mf~;j( zJXFW#A};Br6ug91x^f6dD=a4@1{y0t4?S#HNIoUO@P+3GH4;;m-N4snKK1eMnv)vJ zwsxztP2o)EU;B^lWage1uzlYr#%s-2naKe-Q~jwWf3{1p6f$6qhjum4uM~cF^WWDL zD~qb2naC79TahN*E}u5jrfEOiP_rD8Ft-#ZQ_Sh4s;w&BS!x(=Vm;nq4_L*#<>1uI z3tze8xYQY@e!i!>ayIhaI?{mx?zf^?AwC)u*bx1*kU5b<1uiIZ;v7@&Rvs5i0g-5M znw+py)T$TKbjLY{1(8)>avl+?j2KalXJnZNXObz0{7W12z@==~cGXeaP8T&>&|@;* zx3o@KN*>IIS>yq@K?K+Koif2=|3L9vg~-UYe4LG3X3Lc1S@H{wqt@iOCVk&-HBzI0 zc6urlxgQQ!7g3M85WwXfGg)q{*a0oxt}qGrZQvnxqVA_y+!4J~{{XxA-A}`AP$HnC z?Ryeyy?wNk3o^f8vH`JGQGB;0rK6_28V`(@p!j8ZCvw|jxp$xcFIex zuX4~1?CcihkERw*M^5%I^e8?DwnCSopI>&acIhwuE6mLK2f#wKE6H6FB-;}%=0eh4 zRb)^}#uD~7{VVi6BYlj+g`2d4M4WT-mGIdT87kq)C>@e+u3|W=UGGJEFeE|CfSPW* z_0wZxnvKUZY7#u^#Rt%dx6NGw(-H-yUBEJtqDP68;kI@Eme7jJgvDn zl2)@k&z4?-;LtTqC;C}d2{G6e6(y75xH^&h%ue7vWN$UkjR;ADe zz(mazb$ZL{CEEXi7USYR(OvBWCRF<1e^3{jv!#Uod}u|j6uUBm&IruDDi zTw2ffaX&oWGqxXRTw`ApkdR&ypP!Kx<4rpEQbwz{$!F)qLY~{}omGQ9dwRQhd65yO zV?RUsMgZ`U^W9p?du9uS-oSYBJa>Ov4oHj7!}~cj4>amD?TaY9so5r&y$71zUhP7b zd#x-Pi`nkRkpAHL{eHWQl|tSJXxJ-0|5`QY@mxTYtJ8b7OP}>%)d4zM`7ql?YGl-; zBF?{y19Fc-Cp0#A-#xvdKk28E*+o3AnA6VU`;xy>amjMr$3lT5f}k%flz`-0o6A?u z-xFTT%{!{F_pGzeii($aDdDWGEfkj7bC(k(n?Vg-v@{R!Y<1){i$&tO>xV8x-u;!1 zslIS2xCxT$u3~n5|6@@K>)J%!h%$pn*mk13n9ezhv}8Rs-{NP9RL?(_X6$7QRv zK#?ud6k&uu-(Sz3TOegC8A)*WMTP=^>k^j}&jr`W`0?7w2>hYtp8iz)M^1T(WXw2C;DAH#{+>CN|3Q3x(dvTZCW#u1@BT!cm@Qs0Q=a# zWe+ie8NwYmCDJTuz$tQ#lS$-A|8;c1b9ur>ftK8ukVFd7dOU|uF4dX}VN};HTfd4> zz5CTPsD)%%Q#Y_8xa@bX-M5P)RfK5{3jO+MZFW*Mo~7ZCsV2V}&_RA}Lsq11ZeOW8 zCc3__m49Dwm|7SPb9tCWsox|K;`=bTn{x~3S$^ajbH|K^QdE<#M%}&2L(2@ik*~~E zl6scG_bxW%*-AF9sRyEerwIksMg1rG$E>oJ;LEiG&zjI)jdw_!4u+Pm-k0#NR^Ky? zn-Jt(YR-C5afQD(#k1!ov|IDG^Nyi&J+)nElB70tta;NM6T|$fVOXN<;9OL5N3fLQ z520SaE4Gl%q31a6i5$LnIgg3;n0ub4h?an6z3e&tymAcWNQ59Pr%^1%HfpJK7C)N% z`pKYy%xoB`%72{?-JM6ZV4a>Nrb@rEJ#V2)Xhcp`I(+kimQ!kPj!5%t>X z%=d9S5$2g{p2c=>tQkm41>)nplcKB^&E3ryEet49{Fm#g(@5pFue#{N(#}*Qtq{th(WbT3*5UK`i-C9T0%ud%!TqtLMaiiJ_A3)m~th~rp`UtTyPvVX?4r(qhb2H^vAjQksn#Y z%P(G)tvG%fTh*EKn8@k7S6cG}mAjmnu(BE+mxc@-{}>+ll1J3GmhoVRy}^ID1n=af zTREpce>2V3T(Q`9fiaDoR=Oe!(mUQcUW!TMTI|u(9AJiz6^rg=EYTnLzJKu%+31d* z^j^3KrR+#eJhsO*w^_APlAwn-p@QQa_|2upGvRKn%?f=6xpy2*Yxp2zlM*9*8_+pZ zkky%y>0G=_;jPP~(W)h4YkqU*s(V2hk5(l0FIfaJ2oE|P_o?`1X!ziB0{2#KkoATR zW8Z%nNeLrKJPLGleZGwt9e(k8WngUnG0*cYFf79aoW7QQ3rW7Y-2h9Z_Ixj7?iWf; zPbu7|LqD_~zn`ABeCI_Xn%;e$;tcwuo&EQwaK%ex*+ngQY`NB&D|mvz(%=p9l@C@P zukd1us3PHbEcV>)rh1`TkFmhuUMY0qW4C?HAaZ`i*%uJMhEXMB-K*kPq@`E%%#05_ z8v=IVi%Rk}dm{$>_^HM`u_LLg`ZCGs2rlcR(qSeky^*!!Iu0*E$AQ@EF>$qbm_2)OoS%mvj?(RF~2@O2mcdUtR*M=F0=kmU zKyy#DAy38 zHRJndMy`4z&#{HGPQsxb2y+lQdB)Is$fymva3JUA6emGHPQv+yRM(v@vms*$&9yzu3VYm@qB5(Bq=_mf4{g)R<{kSXBjTvU^Mau6N)HR(qu#7iEhld#0(*~ z%ZLqe!Zmq~1CvvSkpZyXOG0bANyJ2`)(TcZ%5xt*iD&;q02&=2I^PuAKoCjJ%k%l6 z+)?v1X`THc$5f(~^TRYQ-}hHMwKLg_^assM*-Xd!?Ix?M`CTzbr6ZK3^*1c?XLJIW1^QM4ty!C{#t8Q1~b#{%@3*{^zIAM#1priQUZ>4KQ7wo z(tThMuDQZ4j4g$0^Bjun8pH*Byw29BGkfg$a4oo1wXm1oWckQBVP)r_RD6>tDN~xs z5fvP~aBX?_E4$ha^QU$ZQQhmE54ytI2jwQ6*y4{wi}qRHJG>i_&(*m07P%_p-fK`c zj+TP2CzrUWBMfb}4jFG?>dSS|ldI+DfoIAS8fd(O)?>3OotYMe_KrMfN`mpWt~}nk z3i?AZis}Rd0tTWm)L0;o|ApRYbgrm958q{Q8y2ouW=9$Dy{`IvLfc2J4EN;ey3mY7 ztlThipL3KrZGu1&UI>khl+`*l?&%#u_h|U|eP-tt>U)fUyy0&Sa=o`BH}w?5WX{M$qE+H86)}gp!kHB@%}mL_ zY8K=(^Tp@p@1GB^VJt*nN)aSF<#^)i&&xGC97jv`ll6*CD_xUp*t6DJS~A1HUj*0( z3kS-cvc<YX#UwXAIP??OsRo@ zHP?aG;1zgY<-X1G{92z6*GshGuYWuBOf)5yf=rbpRhV3Pw zSBKsI5I8+lJ1bl^QGOT+z&a=63v_-AO`22>mpMEZC(P(L%FcNRHBy?e+uiU=MgV}! z{B1A8n{~W4g$0U}OHrWwk@KXC@i zU+rqO7%kZ;rz; zvD~#}cMi1vCz|(v0@(f6f-FGs7XB}QU2Y@??zjL(XmX}3XZUli0U8is7^jX6z_1a$ z^xnO<+uGWQy?W1WZR_OOq?}fdiUj_%fyN(#gYW+ZapWxlAU~e6_a|Q6F7?@}cTbK7 zfKgTdjZ4&G@_F#mFCbR7o?Euj!$<9tv@$Sr1Y-4F^PQewOT~GnYj=PTKw_s~eEj#P zk#K#{RDF;1!D*3{SbxPOZ2Lt9+xE0rDRS!r=+_iaDO~tN5a}2hZz^SMVoW=n+Mk=e z=T#oY1vkvi<{F;XHxXY(^QQ7GtNs&26qtzj`VSDX@h#vtL|Ct8MWMUtwm;1(UAe3F zUf=Sk$DsM zx3Hbra!#l{4Dz1xw<4pyuvXq+lYhwGdvH7`oLSbK1>He6bzUFq1uh{+FS zpGe{>#nPZ*`)8|PfC=0sN*ve#vUc`Ni<^wb0L1b24>@<8_&aRlmcVaMQ^gm`Y$15e zhRtdwC}rvV!Xx>|;%C|Te49B~#jfF&+ztj=%nzz;@V>|ZFQatx!rA2+Yb5in*o6Ga zp4FFS401^ch1}VPyLXytuX#c++r@-a7ThG@(AONHGj^(hoLp0y zH9bBLf|?wuiT%k3Arb=c;+}CG^-zDf8%e#aR7+xMitLDR*DjdMR2%)>wSlO!D;b^QFW43zifL}8t@RfeBW2HrR5?6p2{O81j0273fEL2ab&WvabfIqBgtna z-X4xHc>~ke1>Ld^ebDvPaO~X)kfs;We22ToN)SG3;IAN9!uB}o z7IkXI>uMr-Rxc664$~v>!l?F-6@+rPx;MDJt+YP(^}wVqkF{Obdss#SdfoaE{F^j>Oki=psCN*yvH@mwz5Q$nyadB zR?4|vGG$L}-+QPUr1a$tqN5uKV_YW6GOgz~Q=lu~Qc&VCKVizXPZtGosN(?Cy^gWc zeCJQv_QF2uBA4VwI0ow7J>xK5Dy8)nC7WamY>=2LwxN;?OVK}@-d758#`Z|bnuUNr zH$;baUD?A{_o%u5h%q47CHE4 zB}rvb2u~!XL4zDuq~kIDrjB**Y|**Ap!qo*KhYeurn&&2+IQ2(`rH}6w(Ku)axAMP0G2)v8-_kh&BoQ zO0}xjj$y-uV^E1WHUl@O`fg!d>W!54TJ7GzpJMgJC8i^fL=5(J)|N4|C~$2z#ui~2 z^4vVuYCK*1zC}qzg*)Ev8Ln^(q3b(Hd&${Xyi`bi&?(obaVkC6K&US3Ax`()!d)k+ zOi2H8UqKvXUB>p4cVX|JjCpheW#&f9azj+5nCir8ImVuotM>QZ!d&6{4`rKPo=>-h zIvuu!7D!?Zf369UKnu&Jo(Doc^PeEBb|IX%DH66J0M~LT{$F1DX$o`=h{p!^at0#s zaT`baX`nf~HI14304O=4;b*|n2rfZA>Vfuld84zUI1F9`aRK(1HvZ22r+__9z$eeG zA)-$M^K9buhT+;t!E~VIANZ)(PkfY5I6}7}@50!a`F7gZaJD-671iJR_d5;-c+tQ) zdZl7$U1=goS%}Ew=Qzkbe$W-cy8hOi?B^+0HRrnRI1^rYtp0S5QRphA{z3Nmm}Mbl zy)6`NJ2S>gKF~lM>74pVO~*An6T^zIbf64}=E(Rl^~=3CmgDDpSC^oNB@t1RoKAY4rIj-%C=Zvx-sC8LI? znJZYgp#q`BHGaLMsUa&j@*uy2a}-af0B}0|by7Uhn$f4UXimKT&9L64fja@#G~jt; z1OM(=F4}F94U?)&54^+){TPk83xu)K%@NLlZn$}gz|meAr(dyYuJ6v`phg?!GPF(4 z``%X(PdmUgeuBAEi}i$VfA_D$vJs*EdE}nYj3cPo_30qV*w?$Hgc8W{)W3XzNzP?N zb4#uUu}j_#($-w=JzfYWArhyuY*i&!0@*;|t0ISrp!CE7`+!}4+f=dRIVs4%zJmIG z4M(yR;++ZY;RIL2z^f_w!s}1SAFz3``3ud}=gW?5ham)>N2nh1yU7g`_Vc0a3$NZ1C3vS z1acVR+r+sq0{TLZBv0zhA_H=_x#0s`>7UG}4CS;(1TVaS;7PBc%AubL)Z3Ix}FP&rR~7;59^6-x9Ch>^Uv$#`fr$KLQAv#|GU z!F0Q6$JO5zKkJkIJcg6F&Mfx<1h$_=H5o0TpB+rm$xRpeP8y8Zw@KPIZOT9l%u9&o z$Mm2;QG<(9#HIIei+8?h$VvL6$M2k_T9qN??t+u-s<|$wpw0f;lZZ~mE(OEA6qW|; z<}H01sXqkmv$Vy`Cdiy}wafb6=U6JCI0UbU^VGYc`X`9MlRQ(wY%kA;yn>`>F6pP+|FYJfzX8yc}JbjOd}K zKt}0v={;8~W}C88cy_>bm8?kD!L`LV_iHg_sD1lFQg)6O2_}i9l~4J|HXfj>(d7U7 ztH!6Uq*hM_`-CSWCHDEtGXYbs!^awCt}D09{HGtw)p1wsyj2}$nr%jEzG%TT?zaUu z?myA3w2-o&Xg=#RliL$`h`vATnE2d8JGAqA#fHdk9LuaR%IU(1UtF18~MP6Zhj&+ZXYStXi zy!`V0bv*P>eb(Pdj&%e$;pWaI^@9;n$wv!gnByAdgqH_fa8ws8`Pvr9Kb7k& z*9ez7(`xg=3>Wp36S2_2th{lLfJ{4{`WRC4P=wq=Q-}N>efpZlqu24IZ558-xZhOB zkMXHRY5^Ya8uz|m^vPWkLZgd0*ta6#i;6W7TOBfcKSZ{gQqucB1Dqd5kju0Xd7*<> z$}JwHb}_xvlVWC+u=pmArfT|V$!DHGzdeH!c`*>%zTE_?8q!Pfs5Ryl@iisEo7CV^ zL8;b7-VWg~u!=s?(BOR@!Dl%vPZKgZi>a8f5jZX}D?Ktk=lfmo?&6es>R!C$+QeMI zsgIb~ie0>@D!R|AzdJZ-`C^(Lj--j8*e2xqV9yl>1;mBdARNZfY~dBRhWW$nh7z^R zVCy>brUBZ7V*HU4MY~81UpRcKmwy8T=rL7d>BojHO>oD^TmcODV%| zAuN_W-N#o%E;T=${zl3}Ju+a;e zg=ugNS1LNn{%SoI2&BbIzd(~_*Y7XQ6Dt)&Rwr`L9`9xVmF^Z z`Fy$cza#$?Jpxr9_X8fjKSu%Ge<^SH7i!Y~Kb^V$8x#1)#hMXuV1EBkbmQdP<)r*u zL_=Y_zA^V3?DSixc1T3^#dg*}YoTBK?E$tx?mv5|;)CxfJepvGzWaCPpnY$wg%E3w zhD3^2DL`%lLL|i#B2>xveYSYz_VyJX`-2LzYE2pUX?2a2;h~-DY5h;Q{^TMn;r}ix zdepA?)EkBzt_D)dQw1i!NLd|NY{T7-bZ_Bp~0GlmH7vx9zFMtz1(|ZaC%~X%JHZ69ng`>sRH5O&b>l+r-WFf z9j7^akVTMc@A3$X*C29>YHJUFl1`Fm2l4@@36vdGYQ@VZV!>U_tRi6X*g_^F=O&0_ z`O@#2$8hRcbvEWwtj~LffQz4s8Peg-JyX<957a7)SU6Bn_RP6{>?7$~Af1+s;vVQt zfcvX@zdI^83w|91r)1k`c&l<-j0fcW77r;%aP&Eovek40>MK>a;B~piqer)LeY4ve zP{m;k@fzF3&T9k1X*+GQ^W3sc#?EzV(BiI0s#x1p7I<0#I3WTv(tKdr!(V;&JAZ!> z%n{H3qXqJ#9NgZe57@j$ox4CUip2ySDqLvXnK~3dik4rQ>3pEZsE^sJ6s8!-Tl@FW zDH{KlCFtqurWGD2Fsj)BCspel!N-BjRK4a23>$~F)R zK&E~Oh>2*PqohfL=ym$h;gTN&2fsp7aaMQ2ZLQxs zF&G$J(rIG!(8!>(tIIJVHY&=p?&Y$#zgm>=a$o-r_;YN4DNudsB@n2?@~VEE6krCC zkM#gE+c$iVrH#BXyA8=$rv~)uRiq%JL&QXJw`2^{a=orq1z^B^M>F|0Q1l#Q354vg z7W--74mj|lTNH>-wAe>hOX~qLb;Jb#LOS zd3!iV)~<8t452#cJ&&!eYVBUNjMuc7OxJrXP$H~7ZQWsiea>{~VJ8s*)B?d3&NX4< zRe3UZA>mxc^BOmP9%}`uNI`8Ug?K1twEqCx@C|4CI}HW()|U(@5?{(Z3)}F8Ke{OS z*)&tsI;2o?`navwKeeVCY|9BhY*9*^)ns!9-Jn%8xH|8oT!t%eQpo04cdo&)*i^Ty z(Ur(gN_w{{DILkM7*>-*ow#`FC#HEPWfR6h=#@E-qa6splwr#4s@OC}=$5k8~ ziQ7p_0^Q8g@EHQ_Z5+7#FBkWtXSgxZuEJ+2NTJDnoe#_9Zb?v{a(SY6QA;(4H4$n} z#+$CRyczRnS_@20ZD&nKb|zYJl+Jj$2L$1`Bs8|RIh>Ch_5{Y}y;dYhUoMHYkDCRA zjRgB1ob3vur2TOAU2W9&G2`m-t+=D?+(0aUyl4L8+A{n2)MH}%6l`t0aQBe8w_Iiz z150*%;vqtnbf~su2sW*jp0qihJqAcsL)APDo8sCr65LaCw3N?EOhtyrj-+8(p0)8kif*cK^Y zG|*3P?}8L!h2j~3{ID1xY3%F$pO*O#bxO{~C;iIwoNiS$N`21N%#bGtKwDb$dx7IO1b(h>P zrEZj4K8l^TxZh(Tk8es$wyJupo4zw_x>;3ehUpD_r;#Go*z5z-8=ibma;d+S6FM@o z&UKx*-4D*pJd#P%T)=D7Oh-P2{ks$fkdpzXmhYP66R%)|E49HVORgV>gEUq|4G})fg$`&CQ0W=Xs@mb}xx_(Sa1R z<0S=n|2jE0Qp+qjhvH#190E5!m2NcFAu}7Pbcp4yYOzDHhjeLA$Ipt5*pxgtk}JDA zD1_IUf4?MW8U5gV0B^2T9bDp&BT&ZOtCv;IB=&P08JrZRU!uKOMxfEs^ltLa%D|<< zV@g~DxM(+y%dQ;ECbu4XcJlD8zsKGg+_P2fzXsh%4m}4+uxn-5rUPz@Ayr3^^{q;< zn6*cvvX!PkxHQ!#gh)uuoClD3S_|ODUEaR zT?w-r;niDcv6K65n$P3MGB~!wh9S37I@thXj6W z{F_^QD$|$AjdS_UUK3-FXF8Xb!IkLzO5=Twz!x;C=6zz^@EZTqa9`ct17c5@v*zKy zR36UJHYMf05l~)a?g)&_#7lwPZ^cL()1Zi9D} ziiKT~!f3dwhTi7jfnqyV%{-T~)613D!smOHKgneB-Dgw1y3WG@E|xGA>W_V1(V7}* zk=2C@Ia8{d2XahZPU5*cin@jlP8WJ~RU%E`6Q}Ji4Xo_Oj#q8&;F+$_*gF^X93{E6 z(`JnsCi9!ot9QwZR5k4!Hr3h4yvqR1gA;SR(iygYMi-1T3vjWx0gl%Qt!dfANZ1@D z6Gf(k{$fj#gqd8NAY9}O39FE?eWSLg&(BjJiesz`ckR`^3<}u!8rI&T;&H^!zSi6* zLw2^ASPS{Xo!%Gxu^S~|n-+?&1>vL~vJMOE(91AAiW8TFUv+IX$a?VgDM&leJ_|t+ z^An*EG{$C>gABs%xL{Vj3%rWkYSS6aeZd>?V4WFG60v{Ut=@{M_ULdas9o@G_+Mo7 z`|;u3g-Lc#>v1V=8VJ?H-P0&f+BVvbppjDdaOJ{PuePzqA594r;$LMalGjLH^tJly zp21OzUP{PM4y0!LqmOYCGV}B%yje|6d3$03*(k9KRd~8h$76y=v6-}4Z@m@G?j&E| ztN=W_ow*_JEKFT;Bks->Q5A&qcVdg+3ic&_D?WT<{bTWDbp1v|E!*~b$mC$Or zJ|kn=Iq)sqV84x8hFBk}7!P=_XTSQIRex@PiZn93?NlfAIPO54ehHjTA2~+sraJBH zHz~OfHfne|M0MF42I^_AReAGpr~H<44SLkBOJC%zUhk!hcXxAF9QYoPtq`vJSc0u5 zHdZnKWn`PSl7&1_iZB4!d1%C;y&2&SHMc`_b8LZGfvhJwK_h69>4CiMu{x7_lWG&C z+4<mW=BM`U{^4^oa8OuiRUk+ z16n?~6kfm+kl)9Pl|qdeVGb@eBYwlcy+@|*+Fj_d#ne=uwV^0m7;oH7ylwOL?~%7A zv~n&zG!bN24Qs4ChUz#otmiBhQM$4?;M4c`+lGR)lC#fVB}b3hP@)C>pAx;1LNWf?{c z#o18eKpti^Pp`+MTAsXp>HNf6nx}HIR^gVpP=8T@Yt%}q@syhDqvHsb9j~klQ;S72 zvjGU=tPiq*VB8cT9RsfTzQdLn&N zrn3C*J) zk(D$_{5#r?>urA|d=al0;!Z+*vE*qsN3>|4jw*z)Tzc-FW@V|?B_l(<(?R=3D$UM? z+)wID=z{4Xf!sM^=WjYDpGSgcHt^wu!m;^$r%DL~f^+?{l8Q2=Lh* zz4)*$D@`eL$r+J^Wa${qM_$w>)S$`!*TgTduZ_CS?;5<|Y@T$V=Pc3M9HYiLX<3y% zcJF4kDbZ{kN~FlmrlmAsm{Ujeb1g1lkv{2*^xWsyGzUwZKT>%O5Zd0f8kPD#appQh zenl$udLkQT<#a};>9VD4;7VbIeQ&TkEG_i-8^b3qjmJ92zPyGAansk*J4eunL=Ve zn-DNmW5V~)eU7NrjfZ!VZOn=rji$={Paki{Z6EfNhs3KjN@E%`-@!dl!bkKt3y%L> zQLcz5j2^Ye%6Hi1tuV{y(Usy6NaltWIzE5L;^fFWWdlC}MV2YFDLKNv1Xb!?*pfac zwLCvkCjj5rh7jo<%g-=q1%^Z;zNEBY9O_oHtEZ_EAW7B+K8!n^e#2BlrWZ+Ey|+3B z<9#>m=%U#D9Eq?EmlR1E&EfOz=brscFr3$fsa1LfW}XjA<$A=X_u_$ilW`vH9VW_C z{f;j9gcPZk^yMPsjrxJKjLPV(NjQ((Id_3kkZX^A%Fxx1}ako1yg z{qskOfU|QvSD~PYT0zn?1cw=_W!3#NB%xp31!ld-<14Gq_Ym~`mfP7TgsMYQf>Vb` zAls#ZhDf$(ZduLroL8jf+hmvn=~TQgy@4c#_NvBtaSDDuU?l0|sNWh`AJSLKYWk6O zkLTO=n_5Sc#>R4Ef&qH!MqqTN)2Dd#50}aGfA6GUOwX`t(c`LKQEw*xe>(`YGWz)V6dA-fnuj?4Tj&NX)tA8Ivlk(Sp;*0iC)&~k8Oe9k>9>io19ld_z=ZHk8F&jmXz94!^X}$_Ar0NrEjp`FANu{Ke5Vq4whYRIz>Mn@ zvJ-cESBl8pl6dg$&&PJW^8dz0h-|Ky9Q}VqLl8Oo7aBrZI{32&)2F9=9Hc^ohXHiH zF#3FsgYEQ;+yV9GWh5j-4fOSGeZQ>M86Hz>VTNaD_4BuNH-)ucyM^&A&2_4t*=s?H zY33Nu<*9(@ud5;HT!Y$&rAy$Vj>SnI#7vn+>6J9VxTg}G%|5A`4k*khGv836ub(F`xE85;tyJL>I_*%`q#uK-FaUy|3j43(!X{u#1jmp+02U(~$M#394R7WDJY)`Xt zij~Tc@)mvjf^{)vdgDlud$mb=C+261pdpnHq2-0+G?xK zBS`*ipft7!gVEtdSg^m-F8hmw0Y}cZC(g+i-o~1SR~56g8TIB&Z&Qp{zO5lUBMe@< zJ{G?o^~$U1Mzmad0gb~8X^-1L-Q$#s#z{Y~vS71CE##J%U2^}oHAg^#*TsBT@IR1D0n%Pw3gt9N>71EOjalD*xAnD{{tu1V zI|)D|Mya{?;oFKyn1^=A-CW_9jO@QKf6f0MDP#PiV9!P2dgjkV+lsY(f!_^Y^ORA! z3=LVT{HW%Gj3?9H=0==vk5mM9%Xh{rbHO7?WYDLI1m)A)w1L)sRPhBGKqbTPq>|BG zk^a9CkVTRD{L}&jx6U4zV-`bO}%~csRI91+IVu6Dqf*# zq~`LN@Tu|>=omI*_{&`9gz8R}mDC)qMP2aLH`{4r0I+@eIqZU(H}9TsfdPxBpF<1& zySM?|*8gbzm+UKG5#&yD?%v)wG2-sWsY!Vi(xjU&1iRyBE4Sy2yVq)xV063-rTPB8 z^jt>K$nHePK7qHI>y*~YZ!lQmJ9SV~w9*d|EW@#TLe<=@;Mn^F_q6RF>CTj#$Pu|L z@DzH)?6}HFL*RXBMC6D@1f5*(BEoJjW@}c=LH^Xo;eV8ZdZ>IzlfBrg15;E@t0_>t z`EstBauu*25Ki;9(Z$i6Dk%MZPOOIlu4Yw-a?cE!$DxC&kq|M29vp4&k4A)Y*dm|? zlCnDc{rVsgk2gYWE9$f0u@Wtrfnp4Y?Vc!h>~JRU$KtMaUCw73{ERsYRw>jE{*2%L zk~C!gp15c@|}N#-N@cwA`;;^Z5%F)Xy*DS~v z_@A{McNN3tKbmX3k-Xe4Z-MwrdLW7D;fiobDRVQ85>Efih};Gn+93okuX;kU?Oo<> zxG8aPXFjdNjX5uD_iWr%3Cp=%>*6!mnKke`YpZPBsyL+p*RUbx2DO<9QqI-TJayOn z7w`B~L|Osj`vOuiqRQDK=OLi>r{FcPN3T@2i4R+2P={@PcGHBwYb3wJPboF2JGH<$ znN1fx*81BYH|Vv;-);~vK}x>J6>B2`GE` z;pu@tepjrLlb21VCUePZj?OxNJ8uGSkZ_!>s(8c)gF_iZux$VO501X}H8mmQn}5h; zBf{igOgW{$-{n^Cb?8_1Ii7_$*zVuCJ{FgmQsv+Ngkn_6PC!{jo|a-yEvyP#0?H4m z9PZe}mY zFjt+NlLQomfW%Q%PsxbAhRF?@{njzQc@F3pnKO;F#%Qh=YOJtQ#}<@`9Ph_&UOCjJ zL0q_TyrbNcycw(7SaqnP_K$lCREa}DoXu4k+5T>f*>sslM2|$#|`3 z%?}5ceF1ch%CRm5>o@ktQdMCykqBXPSut5NO5#9J0Mq8Wmu~L3`jk~gSe0H-PgyWF zbGF;QovKaWkzU_`-e4&rN&aYEWl6b)3Np#lQ7<%QkvB#xa8#-C?{62Doe%;i{}Mj_ z-728x3N)L+@GkF;Itog5ZRS6&j7Fe?%kq02J|=ey%9Q=sjftHkE^kdVk{TK zTY#R={(w4i=$domCu}BTx5@n^$v0>(Y;_vINKC78h%#%cbe!SG+f4Kg6WPy)&?G{} zZHzj5JoAChXUf6g3jem1>l!| zxJbMGKvtK*)pFj)*2_!P)-PS$vczW%`6>1G|6=VcgW~GCHA4s%++6}ef&_O>u;A|Q z*0{R{cXtR7+@*1sCb+x1yX!RX`+oO+GgUM9)~(q;po(tJ*?aACmOSfOYbz{Nf~*iP zXK`sp*zSga4ae4f@Lc|bj@|s|`F*8i<2JXdw6Z&R;PUp5hj3O3-aV-LT~a z8|Mx}WhEO=34|q^y(ZS%77IJ4dy&6ZRVL%oA*Nwz6x!Kk)Be?yEjIo)Be$ekS2Xma zQoPh+gm9drQNuu$3U3n?#-lt@1>F$1b;kPsLj7U!7vVSPJxO7hjYJ`J_Jh;Q!*cOX z;+H>-s@ipzx=PnV-3qezH^M5I#Oc;BDu1{$Q%pd#b;1_l+D1=Wosf8^9C3B8?|%j! zg8yzU{4Ou=kFZwPFV(mj=5D25xqO)7EN+&1NC+z4ksgx!63(2>PR*Z8i(@lq>9zJM z7R$_ubi2fyUBJnpU^u!>L>c*wn66F~QqP1N0(iWIjQ@||f z(5ex(t^~xUvx6b{W@4|~gOnJOYBdX^g%R*7V{IO9s1>KgQr7GF5=;dr$Z1D z3+>DEr4zvoOTU{bxbvYo&KgkErt@d~`xL+$BDClNOmWIa?4gZNV;1}MDdrrmMA{_k zx;PFd5z|!zSY&0TJ%?Vz#K&RS-D}*+N?TuDAE3fyEfA;8-nd@OKfEPt+z?l#sf&q$&m;Z)(!oKB?|m!wqfnihYYwxeYR-yT zhlFz^^52Jr7vj+`L*$(6qmuBQL^KKiQ^NH>>Jao+aP;rwn}dbOV{gUgo7H;H>rpUk zY609m=p9K;Zwj5I%JJP(^euvdrsmO$q_C3{@Ug~rv+rcIN&Y|BQc#McfBVRhKxCgN zuw#X)N<A$Scnv0+=E-~0h zuDO6Dod0&r-sK_wf2BReH2r5{UGWHs>faOV;2IIz-$FIUNpn_H>_#Of#k%ds5C>f< zH=EaNKB|B5ZnyLS z(_;`LedqIIphk$Gk}q+YhX59L9ziLavbK-I_cs;zw@Z{C0Yh%Z%;n1QrirZ-t)p^0 z$a1%$Et|=aIqfi!Cyg8f<}P$877fMrSk8F2UZd01Pnx?pB04%Nt*2V>G46w!aZ26= zAKGPxDQ~!&oIadJaV&0WPx`Ji&bl~8IX`X6Kl-i8k=JalJ{mu(?9ffe6EQxbzdUar zwJ%ym3AUV0eAGWF`8?uW7f?Tb-!o5fi}w*Bsx`mZd5P?itz=G<-|?yWn8T*Qr41T6 zr6P9p2)vU%pHWmvh0CUZ3V}=-tO_E#?kqP`D%S%=&U-5(xaKRx3DT$W$C7eMTxJ`o z8F+D)L=#Qs;%Oe1t5ph%vy$NQ@h#s0o+(Xm`4s-H$Ig}c2BL~eDDH zI&tpM?lH3QV0j3M56|wHw~kCF#npBHndCH(Pzw|9fEa&w(v^K(@H@F16TL$B(e1AS zNhk$&Dif(T=v4dm9f~@j!O*!@gGKCPhFKdj_|U{QiMVM->sDuN{kB|-Ah%C| zwT#!Q&^G@JPmL`P(VmYwo7{CmjYUD)bvByjQsCFKm#p3WO=I!tsYo>A!Cez?jq z)+IASZV)tpHsscd^ycag%bF>5x1L6(ADpCdROelS&!^C~CT>p;s?uwesO$8!IVT!O z>VeBjf#0Wp6xqjv}F;EB{-^pA75pBHup-%DCQVj30Kc@L!;eK|BG;J<_kiUb#j_cAmB zuHTz@U!Y~3{*`9V^98bJmX7!>IL{3E9gxt|_xjgHSwR(n1b zbG8qp<@I>e1O6^3@?Tgge%KZG1Mil-dm|{hBL-OKZ+XPbOvq7NSNz0ndu{G;7U-w#ySH0l@of6({ z>DPMeskj;|rS|iv{hwdtJ5Pr@n)HdPElqqL*Q&kizc-fEacgGKc{x^8&$9nm{(Aj> z=<{yKwh}x+ksMrc9z|)JaS8duv)A?aioD>mjXiqG{ExZp5jwwzb?WC=lBqr9rVqcX zuuF7{hv3_3RN=({5==--n=MaE%#T znSuEJXHa@czte}P-}V6hN`I|{2>TDCDt82P)V030Uy?qCu4`+oThOVNF+Onpa40X~ z*%{$v`rU8UAE}kp&Fj6hq`Xvd2O7H%*o|uUl)DwT(SmdJbxhJ##icn|fm@n1e$22} z*r=G~mAPpPQ)}lm)~=JYPM=@t2SO*N=xVJvDxuBq7Cu&oT702ecibN3SHNG^3rT3f zs{S1{?DlL4C>n|c7olBSO`_{X%0>O5rUs`Kj$d3rU6IJ4OI2t@9o<1%z+*uIFyNZ$S| zz-LiQ2WMKLQ?mtTV--`;w|6zN9}=b0)8Xq!N$6&N+|bq-U$U_+)OpY3vP|B#+dV73 zblCkgZX3~0CtsFWAkdrQ8NpGFnf=pRywb6JlaRd|7!QZJ_%pRrL_7mf{?l%_)Y|%=caH zj&O~Mz5toS>E4W)M$wC7p!#6ooUK)z@o97S&~3GSVF8b2QZnz1M$~=sDYAD%E|s+} zFXf1>&5qXuG-rag#J8PHxRWq<>oog}64?effJy=P%k`06VwH_b%LHhLC#AS9Zkdg? z`%_%ecR(9DS8DNSf?^8mBAZg`mi3~(uxC*6DbKAN9$IL8u#AIcPb(6d)+EK5-O0XV znI$u^F=x#2?MX;+u>kj=HpX*C6(FOY-rnuYiyIC1*O3M>*H5?Hqnh43USZBzDW_Vm z+*D6u7!=CAn$9DPS^5i=2u~vec*magP3_3k%~{mXBcUE9NI>tFvt;wBn9bOfq|;@U z^ONI%*`WK}+?wHaV^zOZ!Vy=-VGPOO7eeKjM(y-f%XJEY#Nx45_KeGoC#=wB?OPYl z_OvBqh@6V3((#wJx$6qCx{scOcmM4&RHgGSapGTZxHOh8dF+_vEWMW`p*FaQ7romo zq5Q*wIxF$*YmGC#job|Q{6qf7TY3#Kb8W1t&vGL#D$Jj?j{VBNxRfZ;(n!Pzi$zkH zH>41;l3cr(wdy-jB?#Bj4!>KR#%RflHzSQ*x8nBGqb52{OI$y{dwtH_y&d9V9zy6A zCOp49x!$sGA7!}AIK91<6p4bt%UOq%(H#)-2CNi$`|~&LMB!X3>Ex9Wy!W;oD*NT# zD6135Z5;Me4vQeGquG-rc9>KWZG%t)v^RasNhfKWoAVTNXp|IgQg3JYgCHOVO;mS- zDK%Le%XMCXl{Ym&*6V{%YX%{%wm_S2x%{(+$%Q%*9zf9+X?7^9#zc7SlQ)!Do1nD7 zG^GB)Y5JwkcxsL@!9#qZ3fEU26CqAb(5@2A$eYQAJc-c{jVV{u>(BH+a4)tXFAi>b z1aZC}j8zh2oK9Yy1r66GSIU5R-4V5`Rhgy6!SILv%boNxUbfu0Z(A2vL&O@F?=~`V zi*!_OCwr#QsuV;zWE_}C%xTzJ>2?oZVs%a;41j|ta^H-~nA?QHEM?-pao8fo`M0Vq4KW=0gh>f7e2ys)NbNBcf) z#FYDQ&5$(A0bc|oQgz)dl^t}ru)|f1bQPNEmsnWWj8dVId*C|}r=rDjkzCgIkxbP^ z5%CXLI&x)@dvYVDY{(nomGN+DKa-M@$}s4vg>4jZ*hk}IMy@lhC2IsIG5x?b9|^ESsO5YmE#PGl8H~lKrO)2+ zNy1mpk2ZTwxZfyMt>IGIrIpQwF#}L*_N7-DFH^d%7z)rra+-;tDA!ruD@oPqe1XI) zt|xGwbO64KIMDn+mmcd2dst0mcxwv5BD%Adf3)>Xdb{|^^ccea(W_GsO_o;T)QJ1n z%!D?(p@8|%nCJZJD00W}1!QQ#h+)ghOCkC-#Gz@V zkY5?KgRGQ1=y4;lPl3-k2C^x0nd8jZ%ZZ~FUFXF^VDYM+#eeB9bCg~clFR3Fo3P*G4tZhFbPTT}Eo5xC&-yHVA6X-vrDZ>%9nxuHq z#&(J?LLOWVd3zF>R9JTIKg+!YK@8s`(8@4-<)LTPJ+0i_4z;v@^`D3pz5VT<_M*0S zvmsVF(UDD#ii)Zf05PbZV^FZFQgk`=rIheR6yUbi9?f~-ynyq1;wi`F4c58d5ZG<2 zzVnw7??hNL43mU3uR;K`E($eExGhAn2wZy#5>p`K-hfUg#7gFDt z)!K|dG-!U^gv({oqNiu6roIM9Xv{aosF}tS`YBLwRhonfYq?ML)hY z^q(ur&x4eNhn*0-!6u9R{%xxXo&yy_XLWpIf^8zS^Zn5&ZcawGJK4X=gcJsss-S(v98z%s>`Ah@X2 znk{5Z^JOLK999?JVA_?1JkDwZT)~I|$Iw=Ho=^JNUYS z#6b!)z;Jx>BGBQeLXpjmZtZgM(_IZrr?@{>Z94mh_DdTt@N3&t!=NihbSAiJqOm@Z z(Ci~oU~@HvnJuO>q{Z}Mt_F+v2tr$v3FbNVor*M}@ILukIs9+a8^EfDI+_)Yn7iue z4MUPLMVNI5wP5b;3^W(wg{O2z7GxI0y93QSgmkJ9oqP?sM4$Lz4Ly zvX5+chCaV=n78~Hj{Lkf?wpG)Q^Z-Wo#-PRjUYv^GU_l?9cHT4E(LkExOfnx``yJX z(k4`uf%LdWZqF&@!tMC;6dBqdt>cj?F=5=|e{bJtGuiWC9jAs`@Jd-LDClTgV|C*$ zb~_<3%~^gB(0ErJpk_=OdPu(d2r$|qitZGiH!j%6OFpI3$j>c%TG;-}Gc4zG#cG5z7Jp~{P{@{y01vrbkm3QxNVPavGPbIWHz$% z*gdi6^UBpj%qcs=$lwsEMt)w+EHLd+@WnHZA85L1@o=ry>8Y0KA=S^OXQZp6`50rT zhFpSi^7)oUWK$fP*z*amTl5+otWr{*51O(cXpYV2>5HSxTWPqX$J~*`1s`+PZ{5$D zaV@SXf2I-MgIPW=&OA3AP=JwZ&=y_Do^4X9vTqz^Bw2RCu8f7FwAU{bor8kutt5Gw zhLv&zG?9WovBznxGD7TGPca=QdP?d(Vtmm%B2e#(77T4HEG=lO9w9_D>w7y&FeAw- z;@jWBqgtyV(J_ZP^P-Km3p!{}bE*dz57WfVANyui?5*luT++Oj==}(O*(la&Z@W1y zvs>?inucKk%*kGZ*D*~rRQY*y>H0$~-)eaLJo=gb55c8f8d2?UFR8++4HP<8aBcb? z{U|M5kL_pkyO}UF7KxeXwvz*uTS=Y?RX-d|>^(^7m$3}V8wy|3MIMvfm%3pK|y^x6JhE9FqqS*rImk(uNcg92~rN1B$gN zZlNitq-4e%>?|S=sA)B69gFP)AC27t= zB!tApM+8+gun1zvplLGtTdX*hZzu87dIZ}<9Z^jkdr+f!2LCY{Mq{_xi)fK*oNUk~PeqbgUY4EOi<3+)N0 zXlOal8tq=5$EzCKT|eQAkxl0+e;tsKk{0uVZ&yJAnFvv)Uh?U$n`UpBqCzH0gEf|r zP#qy;;uhvVGZIBm<=T~kkZ_Fv--o&+2M6W<_z;930lwn#-56mpu;p2&gzsO=$T@Ca+G!}QG4IE0JTccUz~2KX6L9q!W#{CQ{57|nv>@<2o9Ki-6L-AujF*Lf z$eFl$X)zSKE5haZJi{Y=Nvp3owAiaEW__DS~Bx3cuGc;iGiXy>9AVmt#mogbX-** z7Q&LxR7ShfUb)T@Z%&^nU#`ROz6m*SQ_~2}vreCe426zR9Qni1=MFEuFQbVW?~Qjiq9H~?<0 zu4B+L)D?GmE%DvT3e7Fd78u@U6CnJX3>3fa%y!6&achpKItANl<>|CNNxdltuA#-4 z5+5P#ORMJD<^maE&Lukczr?2m^<7{lX|s#eYxk;Jv1ieOoZ65s&%+0)CHyBeWC4m?Vu>uGvazv1DAMN#0^k`8h;TY#oaZ7PIbE%4;(w!4${L1;> z&DWI+X!iFO2yRFXL-yYrR!+RA=aCM4w;iPAb-e-b`U2zcla zTjVub|hjIu4kn{1EoODlnmiy`W$|DBF!i2&n->H69`#U_iZF)u z)Yg#q;s7URBJ&X(kQAO%$3A>6G%!bHY|?NJ1>>kwy4Wfo;KbtpTS+RpT9MXwI_uK<64&g1)kOV;IiG3=Iln;_HLJ(x^Syi}3kMor>{2m?&%fmke z*{o*%-bolEaD*=~Gmfuw*IVM-mW&1CYlV4^11It;ryWY7Hoo8Ot*8Gex}Y9vmZSFQ z3-;L<6~PmLhzPremycT%ut_Jx0{L;qYHMxw$ z-vtY<>Cm752&nu-Hb%XSLg)#vgQA*K3*Q$c=uTkLy&-zfUS!!n#J8`A8Y-yK&4*o+ z@6hXD;9ksZ^0NtTNsAvz44TFryS+4Vw9f$(z@y!waoRX<6F-|U}ySyCd z>rAD54)3u?J)(w7Ui|!;qBg76njUB!4{}@|ZF>5I)_iGT^f=G0_r`vIr9GV0i$c)W zZVp9ve+f)yemL6NPOTFu97Hqv=3W^}YjCrs$HGLzK=*Mxk-@>{xIU%OTuG;LI-N;nMLnPRd%=l(ojsWr zay54EY5!=uf$Mg=7R7#EC(N%-OrXMQs2J>1HjRH|H@HVy!&WM$Yc4SHhEJCk+)0wg zOXo4`tS|62sL84wA->y^>_=In&!_MICgq*`z~k_c3|s+u-&(urD%fLtY3W>l1VtK# zzIq445l%a4@CJ-u_>a+B;q~!6Ln+fGNB)YT&zVJU2N~M;<>Oy>>vX4n`8EeWgV^gf znO5c%=;6wR8pCdjRoep9DIW6n1pDdy=z!1g>e>y{1_gwO&7D2_yBM2e5VcB3*O54u zx~+{&A?U7olT=%3@o>>Xj6MNTXh45p&cl0icm?crEFHIw4F&9sNQ|#02Y(tB)T^1& zd`kR1#xRhj z@XTSrroMzIFIb+WC%C$o?pvdLe!1T$yocL9`hstf z)ZY=F1@JuKKLR`&gCD^wd||YhZ3$mBE9>f4Dt`eU_LLv6B(glvB(m<_!BFyA4FE7! z(G#DDM!)U_Ie#?HKHZiKcL5MoZdsHP$P&8_2CmIdLE}8muppe?;jdkJ85%;OR`HH0 z^67%ODmcUM=ysg377v&Zi9!6ZPotZAcdt{Qhw1P1wW$KXT7;}i7?b9co%KFiuOAaG z+S1y<-L&z_mbx>GAO!bT73}C)N%DV~ZigL=M7AxQ&SKDf>GD*UJSBja0DM$NdP01; z_I|;acpO-7*Bz!gJ|9dn!y!yV7*u$8h{g>2s;{!^k>ZD)`p3XafZ#Ig?0lS~_UVY% z@F|~O+jR0B_U+fsv1Ej+I}&WMsFYDO)R?3u;gkeuV{m{s&DH6W&?yeqa7}Pt_jc%s zSZuxU%UttNG`}O4b9x$-`kyAMP#$LYI4BS;^u7FtL-h90o=}=X)~)fMp-%)mkvHz= z={GxDna_`+_wRBvUxq5q?`SL-DS;47eY_#sWC}J-APX0AS*gU->t1e)q_uP6m0k%g z;_pFg*yj)BI=R15u`L%M(a|3_^u=l2BGkfOt!RT_HU2{C1Ml?`L3Brn#iqmiY?n=%{c&>t)KHD8| zPYzOu{}O;4CxWVc+4ZFJVGM^=fc635BgDt4JMqVTcYw#PWBA0(B^TBSmv2cWi6h`M z#q%)LL|Z8DX{crEBkKs!OGm91qj&jGVf^-PO_k17hAN>o-RVma2R=OI;bmm%6B1ii z{9!D*%ql<0}-{}_BH^BX{UFs zO!Daz4ELLs_HmH;CxmpcD5+;AL5Hi#UJJ1OBm8BQw?$09|JLcKr}m7MXhqip#|{^| z!$vDwt3-yld!wh)spRq6mU+x!egVVr>4n=9%Vll-#Pp$?4Lji}1fB#pn-n}$|}c8)_0Ig!H46vB%mg87cJZRHx>uPak%5nA69 z(QoXsilh#MlNn(6Vd*EeBS_i&AI6G^A-vYU<%3d^c60v;u*iz_;ZC; z&-xHRNo46=6z>8O<;NA#k#d-^G6{Re6Q-}}=n8l&LRy+VyY6jcJ5#Je3jB{;b6^3vEJWvCcO}O+hKCz&|D%9W>!d?JK|sm+FNDminKsD1B2_6 zQSQ2+^*I(0Jo;+@KM8sWqrR3w{zkVw;<%8MCCUWhHz=LWvsd@`-eV%bZe}?`U9kw^ ztGip9DkBq1J}rBP!$l;1PcFnixRNBSY zf7#NTu!CG~wUw8O@v6zwY1!#?9$SL{9X)#k-~#{K032BD{_|)F3H^_8t^Xg2x6Hl@ ztceQxNV%xd#u=-UQ_VV+Sj+mfIDOM)oVzaK@XGViHR7(GosK3x_D+S(y_!+nq)+aa znJoZUhx*`HOF82yfLVdh=40IH!XiuEI7yDmh_gQ6sD0{OZ<#ywId22?j60BS-!1bySiDq(#i4t%6cuav2=GKB7@xeP0$7wN;m@01`Xt z&rIz ze(O*Wrb3dc%m~}M03DogVBHLU8R#yP&V7PJ&Lku4QC$ zAv738?JtQpjudU@+pMaB=0i{N;=&w{o7wDVW$lvFuAWn-ryW%2cF^E%*g;u&Rz^fY zO#xfoI#5Ez`TFCl(50R|eLny&zKhjg>apq7OO;^7RSdy7 zqACj=wiHP>$1>I+@;fwZW=1yk3z#aGVtv*>na>sJ3L#YfyaTHWB~Ozo3mOK`U<5&U zFVx_w6K|zN+f%@dyMVr5*qt_mUl|C6c4X5EBTLa=Ue_G%I{B&sJ zlSyPoUZr(c_YR#f$y`n!a&kp?&LH+te)O6QC#wqer>AOKA=s(&r5pem7w05ZxJNc>)6XJFA-otpS7fk`F$w@Wo_qqLus zdiIp1laVVZ%$bZq;Hxb`Z=)R z1h(wc=6rh$JAwdp^dKbX5;^uc&OvPgPVcy!+`PEXfqVX6vptWDvo9t1s4F4t&ZX^n^}%k&(|7VXH~K-nAsH{gWT(JDnLen!+@zY(dgifVjts)OLK2iC7PYw% zB=%$88lHgY<%LLyUb3@g&xs?Z5t?%v5OrZArzJF^7CL8T#L@EP*y6rT-ts)6d1Zah z%Vu)aEzB90wt1z=9WIsTC!JGqUkUYa-+Tv!HL!Vnfwx1a6H?@jGP{QDd4f;DkI3xT zRcGf)$4pPR$aj~V7O?%pLB5VM?)K! zA}I|-d6Brf9|OUTYK#iAcn?2c1Adr(Cfc)%-dT?#L0g_N%2)5CpRQH@43#qUSBLzt zmwdC7M3PwDp0Q=PQ41amTyA>0LjVB(!QGb|v`E8|zQWyUC;eU?k=&z#Y83j!u+`|O zC1J8UOGFPZo(ZHsmI?Zs0out=Md^(2aob*>-DL;9PtRUK(56me$uO#l30b{q9FbP{ z12YJ*TvxGzg@BE5V>j#0B#raQMnGP8gwR#6YTnU#T}1AGQ78| zO#g{h5oe8CD?04-^x!A<1CNjU!8^nSo{-Fp@|?9X{%Hb%MG&#*Ws~E0ttV{i=7*7V z74+gl%K|Wnc}v8zP*gM5>9jXf#(6Mf87WE(kCt`f+L$s(L+&#j2)%_nBx`N|vsC za(XT$h36IA3`p@_#Q>ba(|e0?#SiINz|x{}&1L75ZXWxqd}%axlf&%6 z#smzJo>>G#o6nUVB@NzyGzz|?vdcfS2hi$3D@Tn%YE_3NcJEZ56@xiBxU>#2o@$jf zIK0H?wBb~cQJhS1lV4$H-}{Q3$y6nHsaU4i8RDnyTu#!%H8zUv9Rok`;Z&46P?b3k zUh}ac!3tSb6}{7R_mQ!v3SiC;I^jSZV-xA=7Z_62$j*4Yz^wp#U0cr{WBhDL85$3{ zQm3Xoi_i@o{eJSA-%pxo)2(07j3o)fM=YPlt2cEK?gj6WV|VSDt14*Ubr z2gtB04S)i-e-=JUzNff`72s`m!a-wxcRgaL*9;I5D_W#SG9W_q@lNx?c`3aEcvqod zoxApdX0an`C+yFyA$6vj#f*dBc7QScq`a1;eCyo{5B~qv*ueeuiB_jNo(TObsIEe zaNRd)`XFSo_h~WE^njAjRQpa$Lq?%$CI7;OnU2Hrx|n07LQZxV&AGldsHw0(L8F=F zE%P!nqhCHS5Lf#yv&d5hrOK6G_Fq=Niy@QkJSa*vapcFXo2TN+_6WQ1$jGqBNi#>ey(PkK&Ybtedf* zEaH5$m(xFx@#dA$e;miELk91lLmHeHng!dHgbIaAYe(A2B--NaBhTzm!-(V~I`6G>DJ(=ZRY^_4f#YpHg1?`Y%oE%)R zrN-CYi+nrR^hi7hP)Qt2&i*f!p;Vl(o-IOwQU3KhK9R4+|7Tdks6=Ev;;k<~1lw}6 zQh&D(O;qg3+3?MK;2KylMLq!PTlkbC-#!6ua%N9R^fZFpjy8CLAkYQXA@8mNK z`J0v~&tFyQoanE&b7KO@^9!<6v>5^^oq8+9`S!q`R&a~fJM|akC;NUsg9q58rzgms zS2`+2z9hKa(fC5XPWpG>HvC^aM_YehSLZEG^*YF2qJUGE`zo_g(>i7jC9}Q8gDWYW~*hqL)e13-cs#w%&fyDcDe0~Ny$0mS7 zC&lJ?0=n-tJFJgub^n1{`Xof7JV#kSKU~*&TPMI{e=X!wd$+X}w3jByXGrOW%V0dM ze|1a4Pur)v8SsNvkU$|$B-pG~=jP8hu z?Vb&QSEM&@P4O{_!BP?jFJq(==8sxGuRYweiFI#sq!C90Em|Bq>-X2Y5SRR1ej8(Y zzCq}Ro|}Mn@I}rHtH}0M8Du5xt1DoVcz^y$`R3vToXbpJX*3{D_0KVH@@XFdR|h-- zL4`2WRHURoaly=x1ajgobeF?Sb-G1I1V!Yix45Tic?p{hUV<{H^E6Gdg^>cyU>DHE zsWIFjHQ1TVZO^bkph3TbAJNE-x7mwhkDti5hw_ND;<13;j2$I%b?J}7ZG;%fauHM@ zRpK0+94yNZ&zH$WWPh2?a~BjGYz1emDqqLg9oy0+HT*_L$w~9YO&oF62n6S<<)jS2 zzowBcela5`|AUKx&o}zNvsQp_xFQ?vzOn1`^{f){n_C#rXun&`ciO`SX2;-zm#DbN zs0;oQ7`sDYQr$n+DF#1MR_rS;w+RpuyKk2UvueoK|07KPFGw;)%J*-W+J8o}SNpdM zci`Byr-9{YHZY!fKACz)!|ewmP2!LX<7u$nrZ<;a=MJKGU%=dF08g&S+p3m*k;*v( zZsIZ=m|sFFMsyVH-;gRLM6jFcuKDyH-lR1uOiR1F<@Xm=76XKZr>sHqoC4apI!sve zRg}kD>|$H_PZK6(zS~nqnk_jZZ~wepb)b9FbHl*`YFm8uAk3qq(I0!G#T38Au)LAa z=!qqSV>K!$sVnZtcr1rLbCiokAw*o&$U3W&g!C zchBL~U&pH@oLE?8W(irr9YP`zYyA>E>3s0DQ0?t=YTviZ`*CfKi|80!w;)#*gpw~p z=^P6zkBz`KwKEf4E(X!Jw-)EWfv7R|CedsqIInG2R20D{5$Q}z*WQECz#NkG}Hqp7N+Trn*WIXldqvK56q^YFx8M_Z9p4 zOtoM~Kbw;X(K6KU8KyJ(cRg3w-*lUmh(WHBKKzfBvQmdrw!S!aAfAdnFg&o35wjRB z*!P9Ca6CyXxdQsP0xph;R#x}Zj@i!f7Ja4Vs+G4Eu}P#AX!70^vvquTEUS{ zzsYfR9p4Te3EJsDR~_E%T~MnxYxi=uOD%ElUuMC-1V&t^jV6?p?A3`2tsH)pOuZmc zPHr|iLEH51Y~g1%eS>cj-VnL35nLo(w&Yl?=V+-KE1grAI%)4CqsY|X1QOyut|&E5 zFw(orpV_xl*=!wXt0?SndKgwbxm)(dG_;a{e=#C7#Iyjb_ zr!I}yO}@0^j7ZXA7AQ zD`>0u#}8D8K&vhS)yppcv7^wj9;(|4CDNv6mNuBGZz_!O-`=ti#UH><5xD0W1wlpI z9Y^$I*_R*o$OnIbbY)t+Q%VYX&yUUpo@8wF0V}(Yl8>`21*rvJx>wB=+{{Ck;zM=I|l`AA7{;-ZvNX_4fWHv-pn}eyn? za7-IYtHtOUjCYFdn+%3b`bi4X9)GFxa4I{N2hKX!OoV``5U|J7Qtk9lO}|V`8AAu4 zmai{Ocz1;qxmgWYfF9b7RBDiElFNSn zf>)cJjJj53;GNE; zfD0^?e|>TdJ;?t^I$@cBUQ|2)RDgq8s(_x7HZ<&+hXjR+b?|i%6a(U z6+K&^gJx$RH>Oc;l2&4|)>-HLZNO>a@~=JaqV$mcv+c}S#={| zw(Y~LI(0eIM6Gno6K;SXq~Ab5-W#zrBP#NYHuhq1fHMxRm02Y(WZANG3vk=Fq; zWlJtqeV2M}eawKzP0PgJplR%zN{)jM7wt>5Dd-`68bdf|^4}dv9BPe~SIKSAaUrKc zQi;OPQ2d&sTCGovIaI4!Y-1`9L*OdWRspjP4He#hue*3K6uNToLZoiHDc_q9pXsRI zWOV`y)KjX#%hPf{!GGm~=tLzT*=|>LDVHX6{4$0*!}ZM{Auay-mrZy%N#>$~Dl*&8 z(Fm!hY!4R2-;YbZ6-U|3851L(Vub_IGM>)e2rNtI_FnOSI?`qxMjeSEzoPrBX}4b>Eq=vrIjx2u3(^keqsN zn^^}phlBdZEt?V|)gcoo7@jee4ag8R})#%;c3=te?z`9 zjbVVF1wpZoNv zY^(*Xbk+p+pemG8IfqZQs(#ywlnr;oYDUw~<)`o>FFm)r@Dv zd*FACq=H*PDVn)`zO?aWPo44FiwgRn8-dR45^R(C$|gbe2R=jgqE z*1u5>{`lztuOJw?b{wVJ+BNVcX1ja>{3G+Gj8PyEktxSVr&e2;Kb~&16p^wcDDKj^ zh<}-~^Zw$C(MoQs@rqaH;`@u?2#;($-8 zL$Sj-sqdU`Hm!|PJj`i8~>19PswRe+6|*TxP9j+-KR+wi-;(!NmD700DuakW}-f}SCovYz*-rk4ASA=spocB-xO zstV8O+0_jASKvrejV+Xw?hsev&q6c^J2W>2#5lM24lGo0hepn*Hbt|3N{-N)xRaZ_ z@_HBjgTE&w-%~D$6ORaAxms~81;h|B{Y9X1x#d|C`Yaw2RzV2qq{@b&t-)$@oVlCma5|>5}KJYb`D5?dVcSp?DWmTpS7F4-6 zgj$SGe6Yv7pd4^Q4mai2aQ}i@wm4B^C3JGB;|>bQv3!{PtYE1WVwEq)Ov`n_*T5~K zhh0@VyfC|KL^PBNp~RQ%IUre2XpX39s5%t(>A=rXF@I=IE3F^a9~y&1oNmtD9J_8n zXMW{S_SB_SOa7p)1Stz;*I5C(E|$C9YQVkMBYdWEKGwFmg>qz0DDE=bcNzZQ|QqNK7|Ka{S=L%TDu#eY)rQ)>&Cy`Q(qU6B3T*rgxrS z#Sa$^Qgf}k$2c9)rcJ*DhaR#;VbDD<`qUgY`jeL`fk(JZR)#3JcC}G;u8_7T^!Zjw zBk}&uv(Sai>3iGpvmc|G3}%F;JX-i2`xcq=F@7{_Z~ zF8EX)DC+8M$3DX!mq!w@8skZn??qebL>&2|$yweMANcN<*A#==3;3F%w~t``5s|r20>j0X4DmI}(z62KuXmxw+?7C3?+6mFoBX`rMEb9~Pf)Axd^obx>g=h#B$3hDdb*)1d>6(EBKM zjQA;iP~lW+%DQqt9BSUnkrC4aJ+yBBEke9~p8jder^|#I?DC*;(QoFn*_R70m)7zj z;nAY{YNl8{JqRKuaFy1D)s;M0zxf#m47gId``$&V25{uiqb|kLC@isEEAh8~J2fQ= z&Aoum1`%W&>M}obP{F+o?=2Q;?s@_0lJe$GLh&# z6%q8HF1cK3*FQ`(N`CyJqo$EU7!I+cWjX3=itlJQ((B$lyLsc-xccn{Z=lU?R>3bc z1{uerV}-oz8cZUydZ!B})XRpUUcA`#`F4fsuMjL|rm;DLV%FxJH`1>KO$s9?mgn9J zJhr3nN+F>lom%JI`*ZOX<+r%WO7$dVT{ zZ@jI)#OLugas_)VY1Z%5!|^=4Wn46QBbEF!+s-}y^h|g&(bB8uTjSgALxRju}HkB8;ffr9T*1_CyFDIGgmtox+U7fUFD|4Li zmY&z7mUl*~&*a7&FvAhfm3KiY43NCgY@gJ|EPC=Sy4DSHIjVS}@Q?=YAOjs2%>Bz` zoxYAwDvoI7#jQk#;0)fK?(raN6`wLT{FFX#kg&P?f#mV@B&QNC_P_{y^aGBDjW#!V zF=Gg6diw6fZ*TRo$>R@e zMAoLKLwGGAcqRc4i5SI0UNWLC`**pn2d9E*yNxN@Vs)|$4DY_uti*T(_K+#@RoF5K z#R=C!{oA{fduuVN*b>Ev!4hvRq}E@l+QbDsa?BoLE&J_f}7=IY(kj986pl1D=X%#kK^whui{kO8le*mQbc=jK>e~O{#`lgESv%;+o4^$J} z)uk_{O)WeWXp@x-0tOFKhB_J|kg}uqF?Wj3lE7&X8w4I#g~y2EzgC-liEal=#qYzQ z^}^n)>cO^rLOeM2*WBHZVAw`!w7%{y9I#X$7s0r`6Sb+9J?AKyntsK_^3$E8&->jm zacmJcrRE0Rj;MPFTjjI2?xp+PY04r)&DRf8RC-#%CQr`W9K@QfYzH`U0|*jt)KnnnVVNj zhTf3@UO4TNL3c>!$e#UFL=t$MTbwsJxV!oa=IBZ!1qxH08P#w5F>7W20=hOZGd?gb zxvj{f;}7vT+IG zMJ5|BvYCme^@yp5pX9v1mradOz=dW$h&er^gzv?DIQmtx?DUGI0!B~Ze3+#+wYLGX zm{u4h9xiOXH&}X9cJUxroYj|XWPU9rzpY-_3Th_gLd4FVwKph?fknQ7?=$A<8z!+! z{hYFIb8yiQ2E{{r80~cxpnH%5th~(Tm;8nGn#h;<4u;Sxrfx-uNrkUgKZOhVmd*)5 zlL^s@P=Ce>d#muJQbbp!RqW7N>bs`^&Zv5F9K@JcEQGMgA`}~F0@$%(4NId!3@Bm_ zeYe=>M;rK4R^sVdMTO7b9Lh#~%D~$?+=uV{0Icg{R)1Mnl3)xEa>aJ~y&M%deTSE+7#SI`6KU&O=nH7NP< zibvmI!^}zvCd!$*j+bps(+eE{evw``ZPv)>&eV)qw+v|`SDZwfqILlzCo@pdj=XX# zlTjFhTsB4{|LjlYz$-OBD}6!@Q>!=Qeig-n>utkvx0>F zt>D`Xqu-~lz%fKZbM3-3VgEVCG$joMZ(b_dqWOA}iC*CA9`;Zw9IKb6aujayfO&Ra zVtjR}#>7q~LusAmoa(G}V|Awb5^9Pz+0#5rjRE?@#K^*vp3}0^OHx@iPkr6P;`3wd zu8R&=`-|p@AMXWkW+il4>hjBet)aUm*I}_1XN#@$)^lQ6WJ*7flq4NJ*QNTa>BTG= zXYr$}<#GxQ)=ft7Ts&pUQ8d1Bz4xqp9`jt(>p>fMc$H7g_Ck0I$%xxS)?33)TZW{` z!JRp&bID`1`3Jbi8EiUBPrighx#Wc>H14A3gfQHsUW)X_51rVKSLC`lkA<2%3sJBg zHWpA!l-kwhU}t`%oBqzt%tC_XGBv$W0NTdGZqRnQ;-Ww<2V z#GL!8hyG%Z>NgBz6J-uu*yTH*?A=)#1%a-Z*gVcqEsd{xLcX@I-b+ec@`b^mQ#5mI zZ?HnSj*3`)O*=^3VcnrIo8~7OW~gB0$N|xWl)6_?nNajc^o2fR%)p+EWNoig7Tr5+ zE5paw;f$$j{VVeiEcy_Wi{mj=2W(_)1e1MCCFr~Q-(X>bEw9;9=ODLqYuVa~A$Xtc zChVj6EWNdH89yOu4@!N>M%QX~{uHWYROV#`nwVZ_bbP-%34T1Y9EW*o=NkUA*EMQR z_}H)dp__vJj8`{FQ;aPyl%`g~l9EhDQ_8ZX(z-6AkmdR&_u@g;+$=L`X!XT+ueNYC z+DvDgvx+7Vsk_e0F3Gdbu~X(OO&`G*?C<0p!{$8Rr+Lz_mqvK7E=?j1lxzl2yz zU%hjoT3FLVYssv-$f#CC%inR_GkZUv>YUbE@RpWJkcE!(X_TkDI`1-)OMBGl(Sj8* zq&|YPa`l_KRe%yO8Ch#96Vt;tv>8G@Cm<4-iHl*RH2}5minx2AzFPlJ(?%^dqhhG{ zieDs#TNFF_6?A2}y@S`SSW36}1fY+Vl$8O`pwq6$yo6E&14Ma{aG0%jPm^Vs=MTZo z9y>Kd^|%E1#R0HFT*~+;9EY7cF_3aeonvO!D$*4DgO{EFL&ywQpOEt}X*D15OzB$NxRJuogYICH)tGBX zF;sO@5=c)Dxl&h?bOu8|N)q6$u+%d z{=5uM2V-n6*V|en*rG9Xm(r3x2vnvO#YM|eRQoC!oDv!~=E?UMw?mA~`sA?~$#UPW zX+Vv(v8oVD8%Z$V$W#yGG2!RH$BLF$wi{V_9s2174tyz>P^rDcM{dMKq#jBf$5=#1 z4^JdDzO?CDqJq=drjFp`;Rbfp96Yq6hWYFll9o35>bkBD&SiU)s@~MnD!lf5=zQS3mdfEmGNCb#230ZLad5d$~^ zURGwqCd2Uyc;Ji+6DoqC)WrsrrbE1~czxQ?kE(GVp3tz~`wIAgLZ|uSJhYgbn#Ko>Sumi(#bXV<82@2`f_Yhmj7fDwS{TEQo*&^#y`@)&Jak{;gDjZ^ zaz{%|I=_F^s7o@WPaV_Ib#76=j>{^wHx8hBYevQ*2YOepHQ1763_EoGvxqCy*JH{J zG+2TH&lmf3`?EdaZPeCP?QlkPVqWjO5j~ain^wzXW__&*@ZLP10w-z3cKF+Y5;2Vo zxwvh-r5V4KUi0cVbQ!tE_vED?=vDR)kC)YfqfDqn#(ooM?&egkr4f~8^I>mJ#~tpw z0sVusNZdg2Tuq#w886!tD+nvW$%2b`&Y^wafrd`Ld3Bpp-ID$*oAlI}sUnlzEGEg9 zGzC{#wO>L%_Fy3HghWB$+2Jtn4{}#AApL2c?yJ)9oF5c@zCDE?M;p^?m2dpxSw#Bk zmdR9D{Q&7%kB_ErPF_lrvCeJQKOfA7oUuVb5q0;Ar44Qfs?@ePM4ir!@VABLI_VRPPiPgrCgy5vrTSK5+n5tcF6+kdq~))`kX$K=cdO@o8+tO(g#FGl@n<7w z&bY|VI(R~*AomX9lzqthXwSx1!Ag8G`>JLx%=FQ3bi708@D2Cw_04a6zZq>|I3@i- zG^#e-nw0c4vc(ML%KwbVh)SN0atR#tB`s)R_%5saRMnx6b89EIz&76Iy*-;K?+g0< zl`E{Dfw95EJI*$AJj%%vBcmN{^p#*dO{uT6_kJVUL*EByVzb z&ygGXI6dFbdhP0Ky$W^jH(4ZWw{tEY4#TTxP(z`vryTvv?5zJb^l4p!Z^0)a0TJjXnODRaGfo^X_(lgl{~)Vv^{zd zHEpM6Ml@}A{cz~2F(bT%|2HIYf&0;S#F&=XSq6{xKUbi7j1qYodHIU#*_EXwTuxG| z5}{?)ayME$Dq6I#A=@i^`a1UqW*Cl|CnRUj-t4*bP#CWNBfBKhW`&;e$$P+T(;AW+PZ9`C!Ha9FxjX#TQHqrt$cGIa@aJqUB; z2)LN?u1rQhkn6fME(t-?Z2KLBT@`rRxCE{2mzojP5Xp_}t5mwC_tpW+%AAE~{toF` z(Y>3mXhC*N7w^a+d{eMHhbW{Eo$)J?)`I_i`qXBqsPph$PdkE#oa|-#YE($L@h3*3 zMM;x`-OxDRjZ?c_=EH|2s}wO3J}sr7s)^tP?mVK!x=XQS!ph&PzwVk2Q@iU})i_qE zamzL0!@I*8kYfnc0|~@tEIzGx*&PAuUZW)ck?@o`AQzO(jNhz(|IxtBKsYQ6l2*jcW`Y5{Tz#ox4*0C~_FrX+ zbs?Ln%XW@A_+RfEtwaFgXXVf*Nygf59&qM%S9eHJ(hmxXn!8*eh(#Z!jQl?ZRH;c6(blZpvRnv= zW`tOW7{K2Jchr>|4xDj>*ngcNv&fxETlDFFnnL zZG`9)PT)I|&8oe%UMuYsn0ea{e8q^H>prsEV@rz zJH`us)mj4IC;R6x3-f9M^}30`y&X<%3rI|mZUs%AwfsW-Ed4@RxTK0gg_APmWlAn1{nt%@16GnWf{}IdrS=!|hw}ySfW!^lU^?7vD1aJ48PWCx+j~NOO3Upo`Vz z>u!>8rmt1dyN6F)4bq=-CWSN(Pgl9iGm&u;@uk9K6~laGDiQ?jK0Ku~ZhWNnxF8&M zMgt?IMQ@%^QrkiZh_L0)tu4zD9;B}7Y?#MV{T0XbgbGxPR3-*UD=Tlc_st?h~# zSkbRBq;HYcglm80oFw@$tQK;c@VO^n)v!7?$?m|;MrWQj=RJbY$?km>AhHY?pR&`G zUC!Uh#2dJrAW-8YX!sc?xZondEbk{Z1v0*wAW*ryrnTJO3jTmtHC_Sf`-*hUU>YMW zF+pz5w0wl52+*i6=Y{<2-VkB$#+?jg0Y!&EBkeA$y7M0+7r@UrUUI6gDML<%-U;j-}Qj6gwURqdp*3D_v z=gR{YLOj{QcmFJ)G1xcg(EVe5*JySvc9Xv0_M-YW-fH0VdE*P=!)8Amj+?Jsx>cRj zF(s53Yd+ey)P+YP9rtBnvwG@NBkKIjm)yO{-3Xr-#Qq@J{(#g~z^TTepQJsO*!o$L z@hEhDE_^i+6L~6Lc6yHe^zQ8Q(vJ|ANuqQ$SbU90xh(JVID0dr^+yURCwwtL5%^D* z2}MadP_;xhLKJUuiQ=B1F_bg0i8C|kEgS69|J+Gd*{>wrLsrjr=z?OE_|J@&w=fMQ| zQ3D8v$keh;ZxbbX%Y>FSnF#{pf_FvC)E{a46v`*Q>Gxb|`+NB(k)@m1<^s^e2hx7% z<+RX<{&rECb#|ZNWkQpG6Z9{|aD!skIVZ&PUB@Yv?e8fzuxCp*{gIN&-(Qr25EjTg zGVz&KV0inaI;#n0F2#k`%j00cCoUF{iLLRj%}|Er50|uq++>l2f3GaU14j}_BKr%v zmmB3&0+)Ox25DF0K(krN6@>91#BJ7&bEG@}WBRvurF`zLf^Sb1TAd%dRIU~wJIV|9 zF+2=w6cv08R)f74VKQ@pQlJwJcJ?BlVlSVmB~J>GN%FQzBO`I%SM?LE&2xgtp(FAl zv>JQXQ8Zlxwb2P1GOx#ZrDytlM`7!{*F2V|&{AO`a8Vflc2Q?=K4B*-H_IBTFO!r` zT2e5?#KfORVvvTJJg<|`eBzkjx($F|6pg1-p}bfJ#?f8svE)D4J-^>V1xmAR`YJ@0 zY{^Ljn~1Y|x|O4|%BA-r77YJ5mKFtKJ#Gl!(acBSE~EZ^m-qL7zr^74`H%(PY^){z z``S|T&)On0;;!>sz~P#zv#3z~)+G`uxBvX?ENNwyjkvfBrHO9=icd^|$$5bSpHDf2 z>|csURIRE0O8mm$?V-&(iO55d#gSZ&-&0UeFKb9OC%%Mypm`2&HnxzxenexvUoEtn zO2c@I&zTJSN0Ob(VWM2S9uv+QTxxbxTmc9-!gIk>MBU^uKI(d{bV&i zeot41>(wUzbixRz7F0az`@X?pDH2Uo=n2g@(`a?AE0yb=({@T$`X3^sF=s+*8yd}7o?(t8c zKb-?FzCM^rSq$C2*fq#r#;SC_am4mfq3p}5hPBatriZg0M|*ICFPQTJ(2Ic<7xZ+1p0ma`nW-EpPcV5MHAy6)jmYD&YSl+q`y0Z^*?$0p`y4{~2@lKNdmYBK`-GuxJGkm1&L} zpZ=@>L@ukq@{DV%n8Lw-{^l($Kvt<<0uN=*FBq7Mclx}KBpe^0@{H`OqH_pK#2UEU z)|0361Y3OAq;@MR-5S-Fm}zaj0+VYN2FKqL>Bw%|ei*Aicd=ui-L$)krO*;|h0nRr zzn{k6ziqvDb*fzVU^qp{Iuvon<&N3xWy2;_8}cYvxY_-CYl3b>Wy+cxN_CzI5hs5- zV~!& zvw^Z9Ijk?se?F)A{R^C^Ys<=#w2FT~o`Gvz@fZBP9@kH(%A5$Kn7T?ERx>(izGp=Z zyE+JRe!{iB{P$7`-`Jytv2O4epHuum3ZkTLYJBv?oYZy}Q;J~(KYabn8n}i^5A5E- zM#g1qJ&u;wHhC~YMF-0EipsudYmM}ui$}R^DwN;vwHtk-&<(v~=@=3i`F+FK=lWP* zw8IC1PFptO6#U!h6|tm>)xw!Ux+z*;Myks+R;r@8u~6t7N_4rscZ642>9#f_vu+5? zJ6Li*7V&27`}UyIWxv=a-791^T{>|o=@`+LQW&Xv!}PodwP2gu%s1;7J6SrLCNllnj5QC+ECo9 z_7BasaBXx=zSffES%==!za^H!JG9>k=x5EP&TRk(OC-zws(j0;=~3nWxcOw+DJ|;F zV3}%bwa3~$;MG?pzzEg@Tqr4~{{>9KQDRis@t?pXG`CWo5RWc3$S|^6@uS4 z!bP0dX$c?Crldyu?~(0Q8Obh!Im$R^ZC}l{m=(35@`i26*3|fOt}_$ak27v; zYd=CA7wR>*_(^eJ_ zLvec<@f*1021Q#EH0>c>W{0!P%p?F<($5`@1ZKE>t(~gpB!cUb&*?hvTMq zhlCF!B%6V@v}3bYlA~dt)j5Vm6by{3Ph40~u?3xE zmVB3>3aoJhWXITu1t6FqIIxu#4GC-{lK7T55!egEw-AjgTL8%aG3ktUDR?C z_<(6+uRn*On1gV<*CPjKS3G4Ye&^(xqk6{t)=_AD!eLAG<=6a6Y3*~W?Hx`>?_+>n z`kUv%QKD4nEsB6p+q^L8<|@a2DH-RJ6JbS#*Jt~Hn$tEo{^KKHGj_QhtN74TcYLBB z0z*g;+_8K4D_zG-`3@`y9+8(#8lmB|Z*%_qCp2q@b-xm^6dagR4WBriL@Wb{|0!Wt zu+G}(qtF=_>ld}zk!j;K_jY*tSe?9xS=q_?BDK3hc@VJc*Ls;Cp+I5N~EOF+P|sp=n6HDcv_gna2Qtr&=$Z?|)ME z*y_kDu_w>rf}+BM%M#ker6eN+44f|{&qF2J@h@X8%%`R%6v7Y*8Fmj~g>y|eub8#& zK<{ByO_SLtk}^NEBY!i{D7Roe0@DwP?!n5(J-@)nA!-P5#((*&1*7cY4Hep6tUgh7 z<|8a6hWbMjvQ9I-x$pPvaEhy{5B}LUqUnPAgcO%{3to25~-)F_VeU4|)xk zDTJl;|GS7P*{?8$ZG(l|!g&`<;+>Lv$dd>p!NH_CMs~5%lc}>H>4C0X{;*!(?LAel zHn{!RM%8$~e;pOKs?K=Vqm#p2D)}yS8p(>~ZB8d4b7(`wOjbUXc-n_!N;x>V_FG74 z8wh@0h6UzWsJy2)9L`X`kuToGiNXYP`Xa~DUW1HuY-PqWPm|q#vq+{p%d->VWA?{V z@Vhw%_1{~3ZcY<5xW+OKeD2@yK|xApOc(Ry_H?Qi9zTRlIDn%fqI zNN%lC^|#k9Bv=Li^!{yokJB;w_+x4uEF3wCc2(i)gm9xKGwGIlE4*@qPw4`#TA9^T z=LvL6J6eEI@lm9qxopD#9(lC; z8;#EaE)oq_uWoFih}gkO}kMfG?M%e4mgs+((NV~oy{N+5CmvgjI9<5={p zKrNy06DofTNnqGs-`z6tb$*reCn_g8#<56S_&zV(C8iaIzOw~TphRC=!JfVjZ^!yW0W`J5isgl00&(!kLy&hiPMD6wuPDaqA+zNObG&b za3F~%$Hcyp|0L1W6ems5<%w{W?RO4 znJ@uL)}e{Qm-LC7M*j70b!PsVmXP}CcwzHVE9QqMU@H;lm3pou`+U(p;=JHr#>)u; zdf)|GS=4~_MIQP$S0dTX+a4RM&}{{j_v0s@d;3^Ouvw1CYpyOth6!z58trkepDfwO zvXRrvsD%@6HTj*T_-icpBH4KLC)-;u92d9)EzPTJ+LS(O*VE$#;@FaW;I2XBjwo92 zZ+hBb+?fQst=|h=ABTQ}1*ccIR;&C+3*D354*&5NT|Gm)<84OTGM3H)!_q^TNF>{{ zz9yKPFoK9iOsAdHV^nGOcs?CTeC(5Bk57NkIbE~vi2s}GRdy@(?dRE$o5`psndGAh zMMiHB(0(3DiJ9ofBnbUwON?(hX5V;94N7@UwZ%!)x+4LHaX?uu_3nwxqCwNS_rU!X z>W=q}+e`Ea^Aqod@|l@yzFRjpoYlp^GI^58WvlCnVcnU!Kp$a;6MB#kw#F;N1lJHQ zEbc;x>5?=i@m34UQa!D%KsRdS^YncW6Qq-(XPWB=H-wsTXXa+vV`p+;c_ma)9>3A> zw0m`aspsee#FZmn80xuoh+GlKm=EGb(9Rnqa4M`5+ z4hB!H@nNxLlXZqyPuU6Cczh*;q;sq#4U5SY-@*AgZc>CCbfRNfM0OSRV%}cujyM~$ z>rNNe2Wh3JvK+6lb`>_S6aSG}I0Orlhc78`C2>d_m2ujGsEjIKahxyGMWRHOzr7i2 zPvPLwkcZ!*$gFqdbz5kNyK@CXmoiI9ZYp-PMAD)qG`L?L+UFI5Z}ho=(5t8g*9edu zMyfdwpENSlUXuDm4fAz{Y@#$Cc5R5kT5i3L!6{bPP@?I6Zf(+|46}&VF`_0Ay^x_} z+pqF?Jl^RAvbGMI#T-c4dfTdZqucu*R!Qw+YZgv{Me^|?N3zLxJM3~OfuGHW*1g%N z_BmvLptok^mGkIw(~M)4rT5CAqKeA}x`U6xqpQZqJ4a~QJ&)}vl^I`Jbn1>K5U*+) zX|f^v4KM1B{3hgyG8@aqeQv#}6h9SEbgVjT&e}d9Wc@-zJKJG-Gfy+zPi7cg{}6}} zd+bUSiYiLRbq@uvNWP}D8%l^~w7wAMUio2%>L&L@{e7`dzR}mz#YE=J9wPh8|HhfL>h-|JS2tIPdju`qjH&iSxWLMWz2M216D19Q zIUO5T4GR8TXi;G|PWymrW4;uI81@sS5RlUO_J^8ZY96yeIHpCEl$xpF*Tr_HV^qfvDRlfD_#Z7P=_omYb9F#4Ov$7(=Oi-hQg z2r)@4#7e>S;jl)f531vQF`a{0SN2cUpk%@zW+*4tokQVL`=<^P91oUs`xmS6MHnew zqv48=O|V2kiV-Lc)#GE2I}o;3soDk_#K${w3oWyUi$z9aNfBo-whX^=HW^m~)py^+ zB~tJGgi=|hlrCFSk0pZ7286)pAIXHW0M<&WF z*~+7Wkamd9SG%TcphRd!gLh7DNBr6_mYLR3oy|l&MkrYWIBwaNli-JoxCKzBh7_cA z$Dh95p69_N6qjXf4d6xX4}MkI*TqWtb9n{%#&$VeLqb z_;A@%t+!GALkG;aC-C%-wE&b@R~WjN5oe2x{6R9WN%vFH)1$hYBbukD*t6bQNg^fp z85*X3l)j2W`rvm*qI}(5xHGf3xJ}Bnzc*v4;X@W{4;{EKATOe8? z&$L)J%}tgp3+hl~fy!U^VS5^HFdQRg;a%&AI|2@&G^{ddDA1F6 zH#zAd45-an4!^a)EsxL9sGbUw>V<3vs6!g6lsmxsc6 zIWs>IJm3H3~q%_~jXYH0hp*G8(a2gXfuGuW8Vxut}jj08x znrUGqL01qIKealpp>g&tuqxjy+nb--K#||Ej=8;XjO#m&I^oY6I7}KDkGjGm;f)d| zl-F(wxfYliGPZVMwY%__RHV|e8z##={XlMD)`ki)TnfhE|IpX>^jHIFW(o1!k1zRwy@~OIe9gTMO{D2k&^6-D;ZeS|7O2 zW9C#*ZFi%5_uJO^nii?ZFqZ=yswCi00U{*v1U-Z_?xHmhQ^BM6CCvOB`XWvH46^3+ zjtBGyO|Y257SdTuqyGh$S*v64FXoTJ*|v>H<7@q=#a0eu!)>$w2UO-1QSUO%%KOM- z$asdkp!WFZg5o~O_SuMX$iQAN{9o~ro4eZv&X7bz%kH`8OZ+w_SPH3;Ke}OTwobM2 zd8Xb9TK0h8phhHY_8)%f$MTXcJ`dlW{Ygm523W-N z3w?6jh@57Q?Km+;bP~tG?0(IV;S=TLDV_thx(M(e6s6K{>CUL2U|$#9DkzTXf*OB< z!YxAOKo=`7s7;BB^(_xi^=I5Frd|?L4E&<(_TLXj84eefY1vnVjm(plreacz4TcUs z_m^<+a!;59{(R}JFFpEbHih{p4!UV1u0AS?DWq76tf_rx`d!Tic#zr8W^3nJz#T5c zejYa9&hw2Uv{Of9i0rTAm176QlREkP6G_;N%vK20*oTL><_kHo^K<*vP%k-oI&tk@ z7_KHwPs~bcVxYkb_2XqZ1XuV{%0};}IoAs{9+!CB(;%U}*^pUvBmYU6^yxno>Y-${ zrRS7ytlvxZj%+V| znYE>jE0gI@i0I3gBytGygt6v33S9{mBfGy73`(tn7Q?;MSiRu-cb=P#+K*r?JN+bE zx411REN=ljOL$}B#!2hFz%-j1)Q)gq2CXsGh5;!`x_;EmoI#(sHP>i3lG(I2oLuJD{Rks9L(4zO$B{myOuUOPmxH+RhQh=n%!vS(Px z&&KfqJS_D`;Sz86wWz#st})OzJUJGgtxFF9Neh=3bb+oHd-|K261NM5uHKeKziFw1O1|KhAFuF+ zTh5-Qh9$}skC<`ciyZaN#7>3tl<1nt6d~nmR{`A%)B5f0PC)1oXs^G zYy_{~AmFhndIFewEe!vW{82VYC4gjN_;r0)eQGoKSx-^-?bA^3scHF7jYa-oXi2*X zcR0UT)_i&{r$#&?$VVa`P>lF9tV>bni-4lZc>An@WC<)jl_m34`$ws3Z1#L-Z7qR=^frY@XxBX_; zf3x@kIpkT3z(TH~x}>*%k)O*SMXG0+3ONM}`?f~#TnX+yJOZOcAL;^_(*Ax8BN8-}2uT_2Sp=gQpd)pa` zX1qR{4G3kLN_+BFs&j{^D;f!|}PZS^`#fxwURsLY>~%*>+ml zQR4Vj{Y9f5xP+7{tX-uqf8-3MHGnG|k0g(BH=EX(4f-0#e>?Ef^<$ts(&|7Q5WIX*rB0E{6gjjLv$PlQubD%p z9-(8gr8WezyoeaCf|9Sb48DWK z8Sg?{67av;@U$b?Q&N!403-~wnpUjno{PmOiWdOu=Blo8 z>5)@OIE@E*%C939+;fFPSb#%L?;yoI&DDxzGzgQp-VVJNZu4nch z5-B1y=S_1=w0&l_8+Okq74yc*A0UH; zsG$i|kb-$1vLegN_tD0F57*y$3#t=O+oZSCsxkC7dhc}$fIZ?CYUdtB3r(JH7;Oy^ z@HD`s$9~HYGY(8FxF11UspP}or48xH9hHV>kCh2D5G{j!%SA?1R!s%Jbia4O?QJ6q zguxqU?<&`7o9{Wh8cT*8`4wgzq&DCIF!c<+RSNAVD--jYFMe!F9Q6P4(WeH>l!XR! zJt4ImCubc?16Iwj=@ASOrUos9D(kMCbJQqJrJVmQCwvl1p9kcGJ%)6rCW66K+((az zs56uwC*%3gkwOa}HAWPuch25@5_9V_x@S0uQ$Byl(KG1}`jtX^_CNv!$45S%OOvKXMa4*e73F{~O&@X&7 zYQ3AJP2GPVOQqTKy?Gl}4tlgfL=hW^A)NiVM z3>Xg)F>3>9fXmv*+*#g8=NfzdEr@e4q27uiB89qhePkh_avk*;4?6%+^j(8O_ylVU z9KCg7c)jyo#!Ix;QPs!2KG0 z9ut~j4D}~Aiz`cdi7PoalRz>zGBoIKZKqj7GeOo5m9^1Kl7a^<%(&6S5O&l!(t`#D zbvCeLcT!BDMTo`=(T&^&Ma})?Ilk^HaoHB0k8f4#89L^v5CJ?_m$ zd3q%7kx}y_3xCYSFs{cBYh;1R9<97`F&Hr!S((IUh&-X8xK;H_x6D@2-Ah1@DUs}& zUngU74TmBz_|@q?d31@hTyW#Ue|dX{KeoDpm1(6QSlIWi$3RlQ@_E`STR|4Wxk$|% zJ+dNJ&H5nr=)HL*6gZvS?A6sT+yFY!z8oD${j3q$cSwE3$*58XF{$~om$Q=N`Ae3P zR$2vzwkRlGj#^)yVx4Lav1Y`atAOR4*}%%`e=Phwx%$uRdK>prlu{ISa~?`xiCWn6 zu|ylMttp^WOMo0c#c;XdRPzEh=CR}b)$Y6|82^Z@1#IpQ>!_N1pw2c&@r1TKbUxlR zq49l4n)2B7^GXko7Gj*GNhpQ@79bzmq4@8Xr#?!wz?linS{66Bvs=tyhYJooE%95- zTvJwBQnmzQp03S^xvCPXFVjW-sUD#Gs7IFUDqK`WeO=inTo3oB&2Z)af4ZmUzi5-1 zo`C%iny>3_QKITiXIsAQ7vu2j6h1pA++Q6Ow`pwthjpttX2l3^hJBPv|0J!TxQ717 z76CS^{t=PSIQ`Wn{v~$&ztnAdNN_0O0si;b_l6xj9rZYcotM1jpGFNB%gygifKq%W zqhAI@;^o53NI?Jxt?XvHrcTAyc86=XM5#MwFKG7O^_w-_|5w?0MK!VaZCgN!Qbh&n z0wPG2CLIePDqTQ|K#(4q^xhFcklv&tNDCbyl+Z(w-djRZI)s4K07>8*_kNze*ZS7` z9=ti3H79eBOlIak_x-yro16e8%2_7*Io5nu9is8AJ>hq^A37`(+2lQcY3)L_@~M30 zD7X+~77lJ&5F0Yq7v&~nv8Xg!!m-7dN7J*~hA1e=wY0t3-(3~e&-=JDjf#|=9&$&Y zR2tUe+afn3p{0%gA)ZQSYHR4)zEzYU`S1Bu{EE>%rYGa&_gX)nC4|OQP>*-{x>jbBZ zEvHW}BePtW(^sR^%!e{4y}E;QmYHkk~xJdXQ1xGWUiV|+jnElpE(Yl zlo$eiZl3g?nybdPpNBedd}Mo5U5p=gMzJOz0$s0>PE}0~FL_TpCsy5+ozkIfXN#4+ zdMgD{lWcsxSNg-zhnlrokWcnB2yCqA#`({GM4~6HMPGi4m||yw9M56WzN#D6P z9PR(0@>cZO>gaFOkT}bk{{7UK z!+P-cKj~Etazuq^7 zeF!a8?G?5la1nxlb-*kip`Kb0#gG=TtYudkz8(jN0=A* zbwS1O68F9XbRQk8y=dzFHV5uVxs1Zf89_FPrT;`)DYM5>owk_u++YJ*B}% zN7b7se$9MwmvlJJ#rUwTmqA=#J-J@V?ccSM_#V(Iiq46Qo*^+ChG_iWJq50=-juGc z!=F9@#X2zX_vmOeJ#OpHfO&?lx8m~VXvRM_p!m{c4|vQk&V)%abF4j@J8 zwS;xF!i4wgZZWr#7%d7jCC=#6(AE>89vcRO1FsBAy)TS+4B^_U2yv+~Ru)%-MsIDvtAngAXK%-^aIBzqJd@voXO&y&cp%?J&`n5J}Ig6=ZkPMW(2@db4 zVZ5a4IdTk733$4BL*|OZR89KgP2mzx8bjz-IDO6$sUTga*^t-O{{ni13aJAh70%dd4ro-pj+)7S!h08sZ#ZXqh1&RP^~oGGj3c{G6`n z4x0n7f+zp`-cYrN^t_3ONELmK6#pJXMbRwg7ly-#Qg?c2o=!^*C{{TN>8ZaP33q*n zOS`0HWBTUTd^pG^jD=Tf`ltkU1CyVB49_cY{bKYNhuKHNWmm|vVp5MRdo8nc;hg{g zTN|}~E0ulyVQiGb$3$wYWUZYS*ShKjp^!Jd0L9&P+Im-L>>Z!(WtYZl4h zoM5tG<~46)H+Oa=%;nZn=&`>V)DBx7NTcKgMoPebXa05E80-1*%UV#+W-WdcBzl5< z@B^KS)CfN`Me};b4$LSuqUYj~pWxeWSXZzca1D^9791(+@nHJ`-WYa%{QjpL+Rc}B zV#L65$*vYV6}nP#n!fN1QCG(To7d9|WZKzHvo-47Hs-@*mcwwuTa`*MXN33Y-b%l* z5Pp7kdTrGRoMlwM;`@XclR0xqSxh`gy;C6b>SeW`kC!|h<(NtV_L$*=H@1t%Sp$c; zVZgXZ#ez7qJ(Qlf-~NWqXr>;w;!B8ATiI@KEU)?2#c{zFlACf~wYq}xfvsio1{Y8? zG(S!GRBE19WwO(D=Rr)tzah{BCke35Z7tu)atx8S*=L%vJ29o1mUW|iOP*P)U1F)W z7{-;ckfbRycCSoemB<(2fPYFXQ~C20Opo+b5dw|Sp@jRZkQx^Rl{u{+S1u_tAGBOQ zy==0|77Wm?SJH6>3N*+cTHoX!vx1BrfesjMI2~U+I^5DZ<0(Iu-e9#o{KL>%?#eVT5$_S zivk8gpC#ZzHt2)7yyw2KLaboHNB)9rJS8k$XU1B9CpBd1ceG~R-RNIH7mi2$^Ruec z*9(79?69vqID?IQr0ecJk&IM^fNM}Dt8N)0qo(z&W8JsHW&GalMQW-fB?d)C()A>r3ppoa8G0qquA(W1-{bgJ>>$wO|2QAK=qh2zxR#rsc3GY&*9ySM-C8d^n z&(lvh|GdGVqyF0qZnRf-Vo2%30Ov@YI-ht*5&vT9Tx}qIIP~}!r5Ltxvx6)O7=_BP za}gB-(sw|gQwx$XSs_?vX2JwB-3EQfPGLvzJhxG7V(dl+AVeQxMwU!E(L@J5;F!s zLKksozW^X43qSL9|4w}IjH3)|T=j<9b|9!R8Qhe7+L@JfCqgIuirMc|d)4}8YkGvJ3V+n0)8MQwa&~h zv)H}PDgWd@?5+3Fy$1qek{3`3N zuiN*(Zq5iG{>4stH24f1EGEd>#95femdBZj-)7>ZLD0m0n5;%}pFPQGLk#U1h0|co ztMlbHHc@x*pgUT4FQbx0XoMpr34b5fcrN(E<0GY=B&E~4mxRN1)R!=F zb_MRAQ(xKhG#c*pY*co4KDdmL4}8&e^7j0Km*_KOrb`gs6$a2nXQ%nDFHBZd0IOpM z0*%84nEyvdLnbNGsi%V$l*OQ$g2 zJuPxQ)qcPxD`mlqsfaCA*q%A|yJcn~sF-L7XuJkYx)`RJrwp2kogf47yCdb963n75 zp61UV3!AXypD{NHe3~SL_&iET8B4medk>{WlI-x*pj@x)Mcn#mH>Zhcjp7h|p{9Y<$r?AeIzn6uNjnmSf_=IBW4!-S$;t(o># z!{+XRJ_e|&FHKNHkCp2Qr@(yid>(00E`guX>7q+nCK^om=16nIn+sXV?8<{mq6s+* zL*QUf7IO-NmiNshuQD979T8@L6V+x^+V-xi_L^o|XYKnWZm8nQ&mqgMZ!8aRk>>nP z&D6&8q$cS9tsZEx=|u8+x?H(GGONm0UFr6nj()u*Z{n|kUc?V7MQps4514`&4p(Sg z{3sVA7(R52#P%5NOU;4a_{@OAzgWI!hbS;S;*RYt{K%-`2T0i#hp6-m2)Z36)gFJ z7+f|!)AdS_nQQZJidYGoTyr&=rsE2o8PXxuUI{qcDWYN0S6 z%T{;7eY|C@Ig1M57eS=DZAiFl+4#rBwwC!li5^r>vPf(2&OwaOzjw<{ijZNBYAw4C z=}$QRgh_|;$$!I$*YlOsi(W(Rn{;xAaw$HZ&!W9lkhHKEHIRB>nz&MPtE-j zKh_4ysafkhuKB(Mx~x#d@%84MV~+RX5S($&2gmEp+1dev6>^ZeH^ z_Xbp}kbK_m=C-6OKC#-oGVnEon#Jgri=5!$XL%?5&tqchjBt0CY+};MAf5BRtvS!dbadl9CS`k^i}5q5dRVTal6?>Co*RR*3rpe3_(>hk*>uTF1R^7}SaE?aLSHUWv4g>x!9ux>K zl=P9EO{N}7+*MMZFMR(56H0X0Oob_dX2Q=z_exP1m5IjDSrct(`VHhPeK@`fo&Vh( zh0V*7kjj}@yN72+R5S+o^;9j0zlKA-*J@6%b{UQ`bW-XtLG|JM0Q3=dxJiQwYu9?Q zHXLj!VZ7ob&m6lHf9BWFNS)L%0Tk)Dis(s zO8_2?|0COIzAnn&H;~o2KKS}nqM7jY{A==(aeLa3m;b!s{BalC4SbjJsp-6hy)@DM z+RXKf*7juBZs*wG5Ra~1!|jmXzr>=J))rA06=W1nsZZYoh1H;?t+aC4?LV(rX)yE@#kU2@g#U$-3H}+Vy)5Rb( z1rwLlz(l6@BxKskfcQ`af)~Y0cAZ$fiDRC8WgEH=vCq*|Ph80#KXS3DACPq7QJU_j zH%_`w%>*`LN_$#b!&Qgk6V;4%wd{YLfD})Dj`%^rX?jd%?k$HM7yLf<%IY?kX@l|l zH`{tOyF@kPx85zTQC-=(WzJ7>k@t!Fmx>N#Q-$CaHgb%BYDN&jHYs9MzA>#3aO1^` zBYx2#2AJIg6RmT6aU$2u?fMZLz6nf(G<8ju+=c_)8#j5&m(?Zsp*W|jZ}KQ#IxJA7 zHP(0&$idaysC}bm3LUWVh2|5Y&G`eCJ6m(X9%!)P_Z3ylQ6ES7f)=t>IoZzB6Cg>E zRJOdIg9>1f$(ktXwE#DPoDM;i#O{45e~_~&jP0HV2p<1Jd|@J*wE6QpF!W$oQzKn+ z^eX2d{NQ}FozCZD?f#-weXP&NBMNJ@nB(n0(Kod{bgAecZ*bC8CY&7shG*Dz#7+m$ zR%LR~Wn{>6xePUg%~DTD-Nu|gMER!swREI}q2s!@(zpD5uG$Zo>coA5R9|G#Dxbdi zVw{FW7lMC3X{MQfLYXGE9YmkK8&n8ckS~>{{Jl9rv~P1}o#8c@X~5tY%UE*y;o-!e z6jAn%R3rj;S*zD{_?hiv8BRzRdblL))V)+ETp%L>4_vl5^2%jrl>dFTQ1z&HJ?mT| zHQ(+cLJM@Pgy?6lx=k{F9U4xsGZIA$+WkpGQOnH+sWD788W7Sl{QZPPmYzO|JWnb> z*h76O0CHl=CPB~v(Oiod1D}VoA31D>SYk6pB6w`DdpiTU531J3a0ybsxn!(6gnEUN zZVS4;@tuunymjWazk8ilO?bQMk+@#L6CeG1FEqn7@-*!$zS=DUb@UbT-6_%MhSUl6!p^?ul3~ zkvMaQ6&;db3r*GX0WZ)fVSasxmp}gv>{om{=Lz!r!9suYM?3Yi10Uss7T$%E#nscr zLPBQ*7HlHvvg$6Gc{oPDz2MAw%=rY3jer~}% zGGC|V@VQJn=|f_D)9HJF826#LXpUK3l`vf2Xp10q$9AS|mjS zX?w&>q;P;Yjk@lV>I*7~pu2LbQrlHiclUcg)g)o!^q>?nwCTu0Z)gt$=HSKmzVS`=rbM>If*(uk)~V^$Q!fddWblSI&)0d}3oPsJanmL-v#C_vUnEz|K*DOZ z_fhSB7yT{IRWZTpt;%%f8Hr^-912hP^B_m)$QQ{X=L?y&--((<`fj{=8^ zOcA-Hr^Lt5A3uvu4+KNMLSJiQ??$-#JRCe9W!dD)GJI~)t7t!AO}k2OSEp94YG_qI z`*>fUH7doMtG>-kuNxrUw^}}&FhXz>=^PMHp2LGIq^zq3rElXKMOJo`N-cN51wUfa z0B7e^UVm6uA)(t3+JayPxynWxklwa_kP6IoTW5+DYF>c;en`ro>m@%lNWB!_p~%o& zXM*Lq#clQWy9atP7W#3kpdtp-w3$h&ziKxGHTm)?l#5eFa|HLO!t+sAdC^Vm{Q*ol za&E54=;bNpJ3(ynURqB}x#eXa-tA;@V_m$Ac>d_My>~V<2!7DqkC}yx4L}?ohivZE zoj0+VWUN)x-MA;(cG+*KYI&OA7dRS{vMr6w3XcSl!sE~`=@vO$khZ0@PMq{uU~x6u z#p zp2ok|8qbhOFT!p54lea#+wF$3ki;mmy4eY62_iqYt#|?haMx;W$&94jZ_#hpJ%i&v zdEq;+^0RJs++6wqv~D!`|73P`0xG?y;b!MvA<3U3k2zp<6#qWt;`55vyDi8Z12hJ@nlgk=)xe$=lNP!_#x zOvNtE7`eVVRIcnIsoTom;=Jt1WUt--sWatsl9meOdL97DLKhiLrN7)yb?+!UbbPec z<`mD0bL=rxtk;^LP`(J+D7s{cm2)D;^g+#W_PSG&@ z{?jHA5RE5L$xG)FC0~PA+zI+BlVJ_)Gll=FdHd5NVq&cl>&wCHNirUTB7Va{aN?I? zXfMM2@Q*($v>77Q?81^>CSN|+6$Ls35ElE#@;^K*-aDLdjFtBS3OQRKO#`+7^x4B6 zp5Vx->}-l5zQraNMlQ2q+EKtgx-!l&xadt#pd7o5+w~JBy`km);{ibat<+u9s ze$&6WIt%sy;LhRO?Yzf^pL=5p&F0MlyLvy~z2`xQqt|${J=R;bn*TUb>hHGCpRcJW z!3hG*FrWf2O+VSKw{6ZMKSlY4uSIM^|Hxzh{wx?SnGkXuAN*EuO*ft2Vyk{iu4>W_ z(!)o16oO-I$iMWNu2Fj}v|Xc8^Sh!psn5~m|4%zWv3@%AX`u%{e*cHUlXoR(0&QqO zpqrD;-oa1C+hwb8&j?#ed9F-I`6F4bzXtZ3Z|2aNumVA3-P1E}zf%6b30qAddV5S4 z*5^AfrY2vkERbJrjuOw^YMJdAeD$}=9g3j&cY;5@o=3{CE2!WmFwEs(%2qW=l+cSs zWYYyW4Y7YaXChExk_zBC$}Oml5tj`8S^(U6r|$m~pys{ZydINN5lYvl70T1Cw^VF$ z_Apz#0K#VT3#5EJ=XM9dYKIH#y6N|mN~`=Igx8IQXBS?D^uL?@`s+{b{Z?sLu%+F7 z7Bwz9&HdqVd?2-lB)GH&K8h8lf4uyuFMMB5+d%5ZLN*XZPXWI_klW^6F14~`UbzB) zNHcJu?HTMxt{m4RX&>NpZK?4CkyBO}*A?Is$F5KKXUh=sf8V7MKD^??moz!ydFcA* O7%!F76)T>ZhWtNY3JS3R literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/alert-story-tree.png b/windows/security/threat-protection/microsoft-defender-atp/images/alert-story-tree.png new file mode 100644 index 0000000000000000000000000000000000000000..e7757be9b99aa8c109ce3e17656dd0c5435682f7 GIT binary patch literal 65436 zcmce-cT`hdxb6!`5v7QTGyxR^M0)RtfJg}-y;teI1PEPFP-#lV`MNgSxM%c?_9I|p6C6np{7WBhwcsz4i2f(8+lC} zoLg-;IC$5$39%&>Hl8!sKe(Qnimz}gh8}HV-{9NI0%UP;s$=h7S`c906T7`J@WjC( z>-zJ;g}N5K!@;@XQ<9g}_BGv}zia+*B2(m=XRIk{=A(0eZ;y#wEp(#EE|<7fXPU;%`$rP81y@6=3Db{s(|fUDk?)DUYg;~r@xoS2<@8L(|@kq zjINyIe@h>Rnf@*8HwY;Fw@`dtB=}`EP!Sd)dY1=v>TYZkt~rg`HzGmG;4p|}E|;zM zkej12Fgf86Z9<{8i-Q%t^92?49g(gIy{e+&r^l!e=g5&l^=#kMM79aKxLDN9c=F{k zAh}7Zr;*Hdb~A}w?X(gxE#iNk>pYa8_mBlF+uIEP{7;qCY%3+t=&AN!5j1DNikJo9 z(*;@CY&;nwY72JijFoA-$LwO5NVC9-*-3sv^$T(_oWAr8B6Pi~j*6Pq(Etra%Lp%< z_P#pqNQNCTp=dts-TY>0_e$;85NKQOc>1XrM{wfs{yy1tUvky3$!j3Wjy6jA?zU7j znfhgN>b04=`GvI_Z=k^$Wv4n_Mu>?&0cnRHo)))InEXFi;q&5xwt$=IDeAI`t8pmb zsTQ~+;tl=LF6z)KibjOmszZvL)I@&(G~M*k7yQg7oPQrmlXZ47G}a8pGB3)8v9V>mEG^Y+fh0{3h;|D4gwWu06K97q%X=HpM>l!u&UlSN{$fmC!-{Z zlUjd#xM`cwDg4Hv{@_{ERf<5-DX3boD~O;}8|Nz8d`E!d&oyel9(+$?iu&7)HKCl6 z#<}8LfLi;+kr=rM&$ZlZu1{v5c?V&s15Qb;izL@(5c&i+e(*@l*6KoBBu97F_wqg9I0lKxD>VdcKj#l6~3zTtY{8pM193df*BuD)| za=-ko=iGyy z(@P{0|Z)<}ckc{A@zqMfh=-Erw`O~ca`|y&HIcqtD#1pnH zGNr|_4h=6rjph=Ia>mB-E|9hLs7=xfqxM%FJm|~m+^C{6=E&vQvEVPiT*MicYR(v@ zPKRZB&3U-O4wi$F>#iO<%s+m=8Wad__*=J6KQqFbHRJt;%=o4p!^{ zzh(c9BZ^f{!vFgl&%M~esKTqM7I5s}#uoWl0{*vOXk+IOcl?jL{O(1c4 zzk%AT^S5=>mE}nnq5N---2budQlq1{rWzK5<~-(4N6Qoim;DieRHx3qR2Q*Z6oqf- z9c+xFzAQoL`QN1*WmMGMYQyYRO`8&;kgygRaiE!tG;-izU5>l zuUcW(t{&OAxy{c@)_I4F{2x1wjZ8_bwsR!ok9e8OfD-eT^~a*FZQj%k(Jb)5`wiA> z$Gs5+14`;k-esUJK_0cN7~UGGR2hrr-v^j6$8TQK(C#PD;q2HUzp?yg_|Jyqk4_ln zcxRg`nRC&smot!5Zao`RL0QXsE!V*#(QnJXp->L0K6EEgHGbK#5G4}Z5fHJ{Q5*0@ zFv3|ci8w00brL;Xqq=d~I7#IP@PISUAre+062pDk5Z4xQ*Ba^M_CZxDsUP*i6PLdkTvYoi z2&CyrMqSl1zCNqc!5~vy#o*)cayn4AN8Qmum=!ViZw6?eT7zbygVMjEr@x=n_9xKWG|t_`EV% ze&^=Na7TXkbVQP_KpSZ}7X(U2tq@p$Uf6`6M^qfVs(7=-A(*6-9$4OWxm3?i-uxu9 zX=X(sm9B{U?q#P0RJKy?@Fjp8xqt3Et2JNt)O-YATU(jYxhM2^C@BxE0~zn2)Ej=E z)>YL|8%WFgOZtPRh<>SMO0Zl&pW5hZ-h=AryTUpm;0d2)T|t}slg_)j>4R!7UMWo* zj%SajS3Dh51CfvbotUOwn7VR?P$bzS(O}}3EeaXi)km*(l14m?jA=U<1*ObF!%JJv zSsU+$hRWvg>F$gsRRQ(a=hA+1Xs4nLyzHOT_4b@PbA(>-tdAMOv*mwz=cP~ZN0(1o zg=eBi*`wOzP3Fgvh>hqQ#$WTkEjV+JN1ZJvryl8A<%$P6s?IRcx>jVIw1=CtNPKU^ z7ZP_}N%Q+TDCC92KlW#_t|j3+eWcIuBlM$3;4t(9i0ad`Gr-pL;C1GPD?Y`sIMiD@ z_Qq*&sRYbhL#R0R~*M1I>oe#)5Txg+w zyQ=N7U>nQV^~!`C{E(HH&e>z$x19~SJ#a=Z+f`bu^=!S$ldA^rZJu2#zF5+l1JwgP z(RCZmGj{g5FH_P2MNAcdpYj*7Q5o^P1OaT5krKC})}ZPtL)@T?V3< zy-2q;IQ$?}70-;=mnkiVG%)g>7(5F7l*G^fOP-8k&wAz0I)A2KEm*{Ua!3EKTHebw z3Eqpf#S-W>bc_{Dx1cV4P!5`e6!Qh45bSOedDeO4cM=t@%VajT|MhiK9Ys>JT( z^5$67e2Io?r9ZZvBq8zK(OA`R-dyqxV&RuxIsNKmkzd2Rto64WHzIC3zU8hTcA(D; zyu(9I^|U5-tV1cS>@`q8a$bVm4F)11r}FJE~JKeCFS}?ORo9M2{dS?W#=Feh_OHM9{)XWQ+I!m$3(@ZoXvFB zS_qy<=bl*k)-}7#In`d=XZvWwJuXI*({AnyfnKS5jjPQyoxOJ%!gbHF^{jlnHBqmW zUwGOiIoEM*8AAv+%!4OGgzN28yB(dsYA)EAjZvyvZMYxu!INE-28q6H|9-a8SYNqy z8U4YOX=&xrBm&38`+GxbS#h;8>RpjJ+iwltZVJy9a;oE{v}kLI)p3bk{u8%!*5D^U44!P!92}KdMJ8ujsU1wqRyKHp9%X1`2q} z7onzy4Bx&Fg-q~29}4`nnDBjsh|Bv-$9j%UC+K574+gDCVZ)Oi640DA&|%~B^@{#U z+-jlO5~RS!gz?Km*d577&vFMDkWq?E=M<*CMT7vGgwoAvqJy7sa?7rCn-6FhU77E> zqJFi509o2wTC~IiN=CnXH($B;fwz!9i4J}N*ZihFVyA|C5vFBteO{HkgtbwanH|a{ z1RKBJ?Z!-yTPYpiodUff4ZbY(4d_F-Ezj*)E#u{^DbP-L6*Ki6Cf%8fgT-pO(H@5x z>llUJDPNeN@?8D@dX0oAwVa&A9w zCBAc1)8{(QR2lU5~g}Q=^-=NmcvGCDNS8 znmJbdieIcfHafAKoe$IC?8k{5ACY+Yq&@&FtmQMtGU_beu1%o-(S=f@9%dMfneYwL zDa9#yz$}uS1}u8aYOrHtMWvgoIeZ#tXl=PrbfTU{34y_n0eQ+8etS*VwDJ}%vT=x| z)jMf>yce({7{9ob+DkT()Uk0>k(Oj&U-aR`F%4QMIQg>n7OdWGWK%`UTjH%JkI3M$ zc-z>7g_Cmu(&e|iN8f?2#N*9uA#pyYm2gvn3{%=sKuI~j>#9%uxVXQy0wZJ3{d9=Y zdPe?4n=Armp?7PQpUbV5$%JEbpo+F81H;OGjK@lA%XrjtYe&9sSpC9ySCum8xo2M^ zz0LfJ__|~~7(Ov1m;a##yk6H&IhNSwHGV9)_{h_6zMJWhvViMGM6~#A1j54BpC`H$ zn)sxH=sx=lW^)bYk;RG6F(?|iEthmGwUJ09+4J7eA7t+EOK#}HjMwzgJ9GdOoGzGw zeYKgc=RT^=_Y6G_e4cP4@)Ul_lIt=SOybgkF>{;9q~slo@`%1HbX_Rn3BHBMc75G6 zlpSJkc1^9C&QEv?R#cXMH();GG=83P{|;fB)KA>jDtDP7TDJ$H{`bO3#qau}3Ff3c zrG_9&rR*I`oRUHqM#-CpZj(6{qU%lz8wR!(>%G)fsIu>DW9lBOieoMIN<8kgXRl2w8eY;hG2YT5Cj$4grVJJuMOZP2~DSJ~4QFqlCVOOD)VM_QG@z0uxfZ z$5r2S98*R9&ij-3QruZ)acZT# zQWITKOLz8Uzj8+){a3gPiJcA&6(S9jugsNQkX?t}iiu*rn-A|_P77)1Vg?g3(k=!= zOK;yH6eBO2i+IJXC@R!&xbS?_UGt*KBOFuVTQlzj_4 zZJGq)2->|nCEES*On>Bv+?`D~9e@lBKAx*Ozi4v8Al!CJP+NQ#A{`-~yRAfKqOLfE z89oHNZJ0-`RnyIwxwCFP_t{dt?|#RmqKdJbpw=`RbOcvsm32mrs`Syy{CW*yWx zm=uqyvd^^u?xly~O*wU=cSHjpXV}-Ga}5r0si|ISpF3`}p8A!R9%%vDHWJL`uHgEy zgv1}_S;JXrUhhMtdWh-|p?cyX+~0BSGqeUW&aUmY)~b|O3+Dzq@?~y=Pt=1spV6y1 zTb6(ksh)UnRmY@Dn5FeJ%a2r6p^OqI*sYR$PSC32d_Zahu3B=w?il{_XXyoxW`vaQ z2eb%Td&Ij2en5llpFC!1nv`NQ`4+J4?EierIy+wY$x-|Qx__#iRVH6}Ty^8MxSgt= zCks#x!u}9wx?J^pu`zI&L*insevA33fLp-D+ixFx>P8b8rw6kycnl&)cZ`cp%mSxC2$n2sEL#15Y*BR|{~$)OR8n+HI=A zy6}Ex5P5*?eyOkbdsHrXc0G?i4a^oZ6t$1!#Zs*ES1wVc9LEC$f=tW0NYF>3%wPRf3UJ`XJ( z$fxxxt^{=e7~{%o(;Cr^aaS?T7w+N|8Q=kz8gfH1cm|R3))Y^DnE&bfPxJZ4;-@eA ziqpfY~i(Vt3?4E3GH8_*4cz&Zc)dlbKCHFR2Y@J-{@|Z;y)px$B9LQ3Y4* znL{_j5GZTJ%fLYaE?M{Butc>cf`4p#-UUEOuD$BFXUwzugJRofV5h_T>(h>m)optd z&c(lLL54LR>KA3>qN9LI*UXz!qSjDZ*H||kwCfp1R>#W4l;~=_-=LUP#n0=AUFfhk z!_V&~GSEQs9jJ~~hFP?Q$jv<&np)Dv`I>fHVb`QJV{hm8UYic7;@BXIsb-80Kg%>>xs1*N_J>r|emPDygLmF|7~7n`X;i8N|^C7aElL z%b5zQ5O{MPT(xQ<7wgme(hoEv*IGr2Pe7?4Jy>Q^{$Nk~MaeNCis#hfEQ2-7C1^T0 zNyYF^cVnIn-TDgf)PpJH4I4~thqatF^9Q|`g3I|L7-->m`AE~tQ}1;7)gg{7(&!{6 zam6w1)JN-f&)?G!Z~36hm~`10F)uwE#v6G8_#TAl;}`4u`QXy%Ct1@+qsk? zx|K8LaRYCk;1j@neBg+3aG+j09=R$FoX&O2FBG&U2%F!MA$r#NcDV*rse4z@*}IQV z{p4HQ?#c^Cn~cK9fvi~RY{XNW`c|c;hN7Bd&0ojDqS-;6abIQDPESobqEgFNs|vFwoV zN_q#16bkg>e>CGultj|Rq{B>ZwJvd$dFn^L(>-h&fZNf-=6+0F*;$3#IeJUNeM7E` zH>dc%4-@2;N~I37K$YtrV}=Ch6}7BZe7YU5OS&@Bg&Pt&j?*X6dHF+M*+9#!MJ zt9GE?7O}mCwpd1U%OHfWV7u?QfR13G#yQUK{v%!{W@W7*mW`lG<8^e6{B+;`sZdwV zl)%wfv;f6w{=9?{pYNMBT!AoT)~oAxqlu?h!3R1tRgU!1&E{B?!Rpm`}jUQ2x^FIYkV_6 zCT-p)dw9=B2iH{Da3}+{pw0A-`Kh=G?*hI{O^?0|Jscmc|=vtT~|%3ki9&E*gwPRf@61fpW}pSg89=Y z_CopUclP5)TCVU0dp-xU6x=ObUug>K?WVI+7Hm+HGW9Wu2ENw%VvMQvOp$tmd7z%I zDH*gy0=YkdK*yn+5VUwKJdKvxYUNX8wY=i;!Q$_xrUrmOtG$3oy%=*kwg2+#82z%K zq|5tBVj5woe!j1H+P=GC*xk*vJWgjX?G%$wLL|Qm!iwJdzx%dKOT%V=9Mh4I$WCq`T!u4Y`Q8GOn%(qx63X>Fs6y?!`)A*zOBzY1>hJ4cfz91N}b__ljVUC>dP z&;{)doK%(>M-u1}oj@N=agT3VrRhP2Qw=(bn`54QQ_)O0~PH zq!nCx9S8|+o+UW7NM@^@oIMy+X-se4JpF!pC-o7t&wN6r6)ZM4;4tqKBOfz_Hq5k! zq^l>7@G-yBJ;JDFBF~{~u^{ggh9;juoD2acnroMFH*8-D-oa#}-cNU}J~jA4@NvR! zru`ORSnsj0SdeU7Kf@Yzdg{hF ztstG%+gPs2*tcF7!<=d=|G}z9i<3!jY5YHXw$^@=38GE2p-TOpg$1uE9@BMLKuf}( z*CLlHR@k7&tZ6V^FA`<~Kp7`J74Cu2Pej}AOxsHro$bFF0}7FF!0?a8?WD^k$neqrZjX_MVa6LCSvSch|kP@^Q{NweF$~6g@K&p zkpFAs=N+1UCX%A^^;|aFu;JnHIdr(W+KBRg=SnFP-Kl0;uoCeXBg2U_`9tfX!e5HA zi@Mz>sj|Sqtx~pP`n#u1FNhj)aG%l4XUZvm$ki}H_?6komVaG(Ei<3BBwfe`^c=7v%yQoXqz6f+}W&$~A}pI9vZ zRx;ZUbH-u1q@7qhTDdHR!qY%^$hc6&_N4;v_y+-g=`#Bw$p zwomMK3ptHyVd%;3V0dAZoza;r%d+}^$t!G6;eHTQYFl&Lpvi@FN) zmG1ht-ofv<%EjJh6ttJ%B`lKvQ2QIxL%8FpOc0SF#fuj&OA&%ES~oRkOOHF7M%C_R zEb_~$#b?l_*o)k{JI?68tg|kKD+CCgvuL!B#dOaI@^~O9?W9)*mxbd!8o4%s(9|J> zHfMO^q~JwgQ;TyUx;x$qWVpxWdeTR4JGoBQVt>bo_10k+#HCj0yR=O~igWBN;!E$( z(3j4#HY@r)aEtYV{#h*ZOmaxGWa8PQNddo|tfO=$EEq`An|ycWl6ssR_6{oUoKN2OMjz{cX( zc(Faa*+j@D@!+m4N=wt>KWq}iIoHw-I`V5GpB8jJOEDe2b1?a#PY zZyESIG(ZBhDdNadTNRZ(6sxUShR36tdF`{MOlmUP?9F;E+Tw2>Oj{3N{6b;i%lF*O!~txk>;8F;Q;f}z<#r>_(zj(xnG<|xh9)H{l{o6gsmytlpA)!{o| zu6`txP#)+))xqj}zx#r0H;yABd+8M( zNf7Ym0S^1*&#nko`zpjL8TvQ{2!SJKM6p4+VPg=`zWEekmR#U969(S~if($qufG~T zZD(>x3!FV^!ZdG+%<^BXaWbQ|wgu0|)`zI$h-{>9uG7!TuE=NAHuyI;tTT__1o@p= z@5Bb*m>gW*@!q{eo1Mf={Q@Z7Sg_EmGNf?PH&l$qNO}iW+xTi~>5A zmmk$QNp@`4edLF7rih&Q$&X!)by+~il=U9RKDs`(?H1qte$=jyuIpFxrS)1r-V1Xz zG;huaIqc+RL5;GtOy>ds21!odGg3pBE`}Livt79Dmv@pVYn@SidI1BXn?SG;^aZc_ zQo95i5EL_OPyB-DM;!!{B6xAqm)%HgPt|^y+@yMl4mu2saaG}3&7%LlI`_SCc{Or# zTT+#cb69TDqHv%wYM$wh?d6>CS-NnbZu^HF&#}WN1I5RFn1QNvlrEAeDYj63YCsf? z0Y95}$uZ+uPae6qr*g(YIky`>Ly=1#VBicAA<4UJl5pu1YEwBv4K926|nx&={ zu|2pHtQ1dIT&_K!K-g8*C0Wk&_6q?7s|AidsNAHZqb;~O&f31vhn0Uoih%r{-@-~p zAa->lYu-p!Cru;n0l~E8$3k~Q?C(nikWK!QF1F_n%C+xJ@}M=+-wB(@SCL6fYCX>C z7Y87pp?>zD)ID30wNsT=#$R@)LrVDtdc-P<3yX_ebaId41K8&EbY1Gx{0s)3y)aYC z-k;q&g1~Sm8rBnY79A2JiiFiu3JAJ&*TaPU7_9XR2UM`?>(guTmmHH92G7#x+0bL- z)6TDV%U)a~>oS=XnhM7JnEEBcHN9bcjK(3BiHg^3hiW@-Ks9OX3R#COXC=uD+97Yg zcxuOdG+Glxy}0*99Q9(*-^ye6fj=zh8CKn1E>~7SZ2_{#;rewwgdwQV$I?QoLe-t@qf#KOrXm#+!hueEP$^q? z_-uPl%|NrjWXOH=Ey#m6p`u)h_Yu+x* z+7;Usb3(p>_E*T6kIZgCi<3)x)aP@n=Lg)|(9!16Se2G2$Ttkw-##uNKBwe0!M4j| zSLAVEeJOH1k;xXGj+L(zFTvejN?pmrpC-yBTcW7R>P~IGfb5wV7ynLUfBEvb5fPsZ30DjbK0^zQ0++UxgWk2t} zs(hl`nO)|@!bN0ZZ8+pFFuhKCb-*maYgov%Z2%)JKLTHyt4(>s^7G>gN-q>#s)FD( zUq^)o{1(_{H7@gFCnFf;hMk|)1^ha51kYY;h9$bxI*A3D!V$msQZtb&?+fGJHj`|O z`Qv7(2hDp*gE~k#D%)zl^;N6&_@^)`w1Hr3>5jtB`dJo$KwInvwvn2K?@%Cfi{JA< zNAODFRq4T>n4+e`XI%_pulxp!5e>!s*Fll(`Z|m5n6MX2wr=eZM7Uiom2aN}pUc+- zuT)hhAt9r!UcKPyk>YuvL*Tr2C2elOD2kQH6k;9G#r^1z)4k?D(Ak&^e;v)CRv2Sm4-xGCPERw8k-V; ziNvx|-}RzyFM<;^Wj)D7Zqdr03zcZ&Mm1;F1&EUKwxNViFE2wWMg5`bjE^^oYH20$ z>#U8ro!@efn#CtozA`ea(6f(h?ELJrDAXjG{S$~f8bb7wDC&$XL&TymRx`w*{%i%!zt@4_**Uu5^}UGG(#kMTZ|@_V?CxHSb@VBa4t z-Op5X!D%RmYR!hwGc_~m1wRn=GiN)wp%O)p1d&{i=@iz1YUu-%3bVy$0cuIbrR^Zi z0BdJr(=qtCwPWo?ohES1xYwU9#VK`AR9!Z64N5t`rVHttX5S+&7Nn0a{ECdXw_hs3 zo9TVc_9g}~lWL*h!stb5TzWPV$}%BwKwtb)JT5NK8}HpkvEN#~;+OH>l5~3FjQKVF z)q00kNl=oF!4}kg>-SSQ{u_e5yAul1)BLGpfUt?!HU{5fdV(T%lVhMlFdTF|Aj6IP z@O(mWJq4PvwgkT0!PlQ8X>eKzKZ`dR3S%_6TN)-)_y`Iw6vuQK3aT)mlY9kUn^DTA zPmI4!13>n~wANW=_|HJEH@h z-qXCS41(39xh3aFzdC2Br1d;#ct# zt#<~VF&jC22Pq#B{Fs0{h`{xD#e$9(H{;)2mdbVuwjFJ45Kb58%2`2YzlQlkq&zjG zhXk)o3SwJtJN;{YWMA*g=7byuZS%C>x#jKL#YSD`)4t$z(M5icc-GNlz0UCSZuI&> zRx-x{!Bu0_*leQ@`4B_WncmIMzK`-I@792;A4Mtq8ehD(0o4o2NKe~86+c^%)uQ4k zr@z}=Tq3758GIA3Mo0X0l6rvxB_|1-OTw##$K)|85!_PYg;IMd-HqT%9$ehhi2Z@t ztb0uEC!9=ZO1w}llZvHvJqu4#8^PuP9$Z_K_a$bnAylXH@987RJ5iZj%&}M`98taU z*=C|Jqr8{A1GjeXLfZ6FVGY+6;gKcj1K2Sj^zwXAxR$VS^w1Te+V*Mu5rJ!aezWJR z_<^U${NwwYo=lhKX4k%itx|V~3*ovO$BBMesr}vbX9gqkCk+@JGUs-t$QwU`_I*Tz zJ8DgCs>74*x~AR$=3ep!lcEj#0(p-p`z+M#b?#yMY-4N9#jD@TUErm7b881eMP7;= zyWrEMi^QY;csAWhudTXp20?3%G%+>-dyokCjq}R9%NZ3nH8uy|7BJ|q=l<;pES>g9 zv(f5bs%!Fb?_Yl~1?_)D*9Vc6wc2)m5Hxp));#c~Ya+-_W z5+WKT$sBDJJrn=qS1m*^^~6y`P6W$s9J8h-MZY}HRpIH4vniDEe?FET>g2fw78Xc| zD!ags)e>=-6}-i4JN|gy6l>#s>++|A3+FyqON`W+0880$ttZrOPOMXSe+_;mCVp@W zSIwOd%d9MaQJR=lvZlSS5VXT%oR%h1u;KN09=a9svHX+%<_kIjVzh9!8+&GAu7Sk< zuipUz391w}g<@)%WK*l(d&bmuYlH0E_)09lxrhy7V=&%=?dIH!34I#b{2FnM0a}GX z72@89X+IdBp+GoQWh4{=uj&67`G5w9$*hK>E+VQrl!p0hY>h`ZqhxtjqnJA`C^&4@ zUSqo{LEXQf_+AWCZv$JY+pM;b%a-6^;2P;8>5ASCorq?KcA}E(pA7I&7`Pb9E99-_ zx$aA8GVe6Oz*GO8A2p$4=T!DH(ZRUYruxA%Ysa^)6M|Sv5J|N=2aN+C^8?g*0N_0U zR+_q2T0IUcytQ0DV`H#B2pIi+_}%uw8>z>b6WKm zCA0C&3i!KnXo*2IVkB*C)ZzlIhB=4%sm9wHD1wBlTx#gnogMicj!rT`uP~+!LLe>; zlQkH%{(8vD07Dn zYbqK#oMctLbay8()m*kA_tAaw#ii(_QzE@vgN2GSz7~{xLayTSU_do~3%g$NGaA26 zPRg|~&J^KlN7l2WjJKl9q=?b2#}`7n(u9NY)@WWP9p5?p$ou&dvF?-4;k}c(;6NVX z;LGw)<1W<=%z(&wpf=R8PN&niAW?>@2r4esF{=MDv1lAV`Ji7eR6HRCs9F}psU$wO zR~eL|vALEAUum{Wnt4sj>t0XS=oETqzQ<5-V@Cq>VeM*POjpY%RUOatrdmIY-z=o1 zV)FTm&GdIzEBfeWIChA9`p(YTFE;?$vjpwXPn9mui0ntsbcyET%}cPVzdAc28a?us zK%Qfsw0#i08H*h0sHDxwvNkK#^DK2d$zQ81&>=9Aqj;_>tDmzbSp3J^OAutllHyp= z8~StXtB=caeFFB7sbJ+4%cy52r9|+{LUx>`?3=j}2~SUVukNq=vOS53Yk_*j#S9;( zT$J4D4UJTH3XwL?9}2oCIAsqeD^n=nfd$bV7>@B%P4$kHfa`Z+iXRJHn^xlwPy#x1 zjo;s?RhMJV)2163Y>lggu*sia!DK{oLoYRhoqdbUv%*&cM;PmU4!rJyQgG2vI=i2{ zXaKMSW(As)>=)fCNkz0%+ddxPMQwPE6Hs@9BQ(PFtg*5)msam_<)#d;&$;F}lef)_ zR_Bje7mg5xWkPYvqIHb4gSEJcksZ=MlSo^sD&fRR(c$_z1*blff|n-=#`Si1>wPb& z@Lw1kdd)6&vbv|b#yPKk?DF2h%ratQyl+(Yz@9GJi{>%&d5T zgRPFCvakwH`X+T|{E8G-=X*ZtY*4}pXl3wkl!`cS%$P2Ypf?U#%7-~q zT~$A|k4yhSl$GyY10h-EdPc)=IaY<=_$j9|D%QmmeY8Qh#Gws5lgRyJ@ZBP)G^m!g zd-lWGz5BxomWF>H-JCGYuXPu4p-7>5f3HMlK_|%cp?|0L?RMx+T79)(;iRU zJb9r<;ZppF3W=}lZ0j&>n2-*f>?(IoptA<)HH^;&or7CapQq^*hU%TYiEm*#f!1n% z#=1yE_JDAko6mWRo`WrrAxNplk}Gl!uuZOMVqml+q%bMlbo!(;Bp+0nLPVuj?!Hvb zt|){;VHd^RsH05{)eiNGY99bo=1_x3TR7H2V-+s`M`9H9p}Fz8{T87idlRKQw-iY8 z1*9M$;Sz91y;yL=`%iCwCXITTW0A%7Ar*{%Ky3-^2<9d} zbh+xScNI<-d~Y~tc4v?FWK#G0fW1~ zeu_x0bc3LIc&%ExOk4N&=k>?G+H0sa5D$3g*tcxys^j&SWM1zK@LGILegEg9Me#I8 znrZ_V=|LMe7Vu2#*WQtGcGK0=iZSW3fA-ZK82(*ZJ}!!mKy$g5Dj;X^U*mzM&N63|1?zWB{n& zNMwoqHW&<&cg7gq5P|%Ub=f}y>tFVqF!*BSMOw<&ct~aQEPK|rHoBD7CJedUpKfQj z<;6C_j{Q#L;YiJHi@xav;R(2i9h(K0iT%vxIfkeD*-VUyx_Es><2>fUNy!a^)2*Qv zUlPLWgXB-`1#6CHq`BB#^fxA=!$UI5*|ZBcs0o};PddDyfuZ3n3{Y<;HWO;Q=Z?4A zPs-KFM83pz$yn(u7Wy;J(Jd&r9-F7w*V zo75$vVUc_%KOZ{Hy59o;()sq&_}I5v?xG(`e%b(8|K1H8I0$o15-)wT)`eK$c5HJj z8Srv;Yxxp)vAQaT`E)wn+U%(Mlg?xS?R|Og;U5bHHrB`zSH^H-{V(=fYzwV=J7cOHNe(+4n5M3GW9CZ15T4mbb$J!!I{BTcRXUktDVR+9y z<;I(Q+%|?Cly7iwF&g?wKwT^9#|E^L>{ z%aakdjoD=^0*;x@1V0BLjkqFWC!`*wv!RsRXASd}%?fQz~ z%t+E;#*o;w;;V>QS&Ji~)-!Uw1&rScK~u%{)4H-XJCdy|v{xeI`I)sl|{qJ)T|GTpw|I9)jqPh{!JPW_KI^FLt zRO_0H=CTukL*_=?if%S->K^fRvDvvgC&urZV`t7ZKN`S4=_%f8I}U!csERIAfwC)z zp>qcvz^2O9P7W6J&-_BWiwBG3^XTpY8$}h-GMH?|)Iw;5I0*XAk_@&g`YhCq#++Vr zWE!w$V!aq~`4fFIKAG16QI?-+D_dAD(gXoS4!i=e8sgci!&xyh0S(VilG!6jyy~CR zmbfg5Uom28){Uv%;EV-%u1&ipU5A(G6D5bN^jXSD4f=WAL>sv#{mB-^-xX}%8#(ME zuSGroiM)9!-PiZ*&O{)Cf zp39Cs{msA$+4Oi2RL3;bvTx?5H%;(Mpf;mQPGa;B>N6O^|C>&-%95`lHf51A5kY<> z!#R(Wxz<_>+c$7nD2wC`>~WYoZVvLBjNiLw=)K+ZZP{l3fxUk{<2OD}4Na_Fz+gN8 ztSN}Rvr9<*0jf*nP*qca*GMAL_5BO4MS!I0BRX2^^O>rGhbh5flKmQlfKF|mD{M^b z8vwDmiBw9K-A^BYE;RBF-CtN<4Cb(NzM&W|e52*bFqt_2g*YrjNkK##r{1X5T(}r3 zD@{$6ymD8xvS3+x|N6l(c3);>NBGBi1i|J8Z&A(Ub;#FUc^C_M=g=;1oK`>i$_JQ; z*N_f=rYk83bL{o!J%6yKmK}9i)7RuY8hbC$h$qxUCitGu=7B@%rjGt;3$vOQYHzZ* zn9FxZ?f6xQI+Z#7yGICtwI$=>k*Lc|@&dEQUexVvEz@@b- z9^`!N3L+iY(?+L@6OlVfd}<>lUur0>*#S-MNBHLLzPm_m7O868mYyF3?Lov$uQ#uR z0DZ14g>!d;u=_XgW*OpWQnhpx<^dm1+I7@< zuV=YX7`Bs8-}?EayWy!v1!px;b?@yvsxR4Dnxc2qNQfnBqhe!9j6SJ@DUT=?`z4ToB{Ibiu@S*9C4IP4KY*ve{Viq^tr%R28kG|GEDwxbaKcLwaU_!@B4|#23rH75!FL zI5X^Hrn!U_hX$v*k-(#oROHZtRlc#WUI`fJ|`@#!JUHRjeOS_@GNM%nqpNlUG z!1ER?F!F`QqA(SiFp(}?lQ3TVUczIyRD?VNZXBU+ZSci>T0MBf-qU_VqPow^CN*bc zOtTyOA>XXr{U^U;EA?DbF0z86k(39Uj7wu!(4e=Low$j#wdCptIA12#Kl6Rww2M6< zKRlj#I@`eH^(Q|ZNQqs|UmWo?;oO=v>*dKc5TxTi7iX+6Ep_w)vI(WQc0{d4X31Y{ zxGuGjmv`oVHfVh_RcW?#(WT^=rK52!18!6y=?)=JN9I&r3C0_P;)dq^tA_n-8&}CI zOL5-eoTppNR{Q9@ao%%9y{9>(fTOtbpL1iG3MHo!R+aRoTpx-H(Zd^JsqY+x@kO<< z)M{vlBK(Tqo)CEa59;1JEUNeKA5>DLR74~Pkr0sXp+pp^p}V_Nx&;&z>1Ifkt|6pb zx?|`Vx?|`b*n^+%cc0(x?|Jt3?EbNP?fHv~nQP8D_c`Z2_xn|E@yCwnk}naVHBP;> zk#6C;*ERpBSvXCd_GtR_C@tvIln%L9)5*n*`>gs3MMG3G;vX3MbTM&vsf%64K6q9b zu~jc$=)rI|VQbw@*w2Lsh&oq)Y({ywF97qz_U=pm>MIwU$#X4>qP2^4KehMd@+WG=nOz@hiBNCmwbgy0a z(pWzDcAtU_dbvCjmCo*zLMC;_Ww6l2?4ajGsRo-4jjswfn1K0xb{V85%5{Iai9%e5dz^y)+KXu80V2yts{X-9lxkTEas7lJ~uQh*tD1<4Q!yZ(r zgi9YW{QNt166pl($5+2W+k3Ea1^YW4bm;R7Qm#<}Ah@CBZ$yJ4gCuqJqg;M}HzO{R z_UNqU9af(~9^C%#r5H|ct%C1fyOKMIsgM?N&f7=y)_?-o=FpJ&YVat<d^ePH0##F0rF2++3=U?G6fHE z<@3RZ(~5;J=2UHz@cjK9Z8O@tg8^j5aSVQeB4HCj@sz>wEd7 z{q@Fg*zvIDR@@t6kmxcc7l$&-q!R8^J^p(Th<&2t5`LlXF@_dFePHW{{#U?kKtt1` zq%Xv=uDnq_IFA}kxLW#wY?sr#lXiLr-(Cu9O|$)(bo}!Ce9?D9^qfYvZVio#L)`D2 zPH&qJYhs=s3sq&)!OPa%a1S1@Zg9C_XqNbQ807lA_%BZd`7>*OiQkaKN1(3>leIcs zjqZDy#m9WUJK`_t?O7lX{B0`thcn=*YyQiv!6@}>&8NOQ<<&MrYzIB|)BR8X9^saj z{o)V5`ES-#b6?ok&?NcqlHY2eOa|JY!4K%N5tnF3Gw_{VZnkjy z`2@tu6{#-SWHE~>S=lrBKpXkW?QHWEB|&resf0S-VvU5I2tk%c{Tt)N--Q^5y>o=-!rwZntL?>Fd@7FGx9e>$Cy)&A=(ry$@TDEw zy6vhXCPbE?`nRvI&QiVv@73HpaXlL}&pSXa4PeXb{k?7x5jvj_d&b<)wfPJsd(YV2 z#;nzbJOz4Ib@i(Xu1WB?m4EY*AAGL@lz}yJ3OY4nU)sW&g!1GQUy*w$u$y8-D`nKf zBu%qimRVZHjK2yY<FIe<0dLL6R+ZJ8K^ z>G@HvRmENeR0F83=ZvpOefe1#E8i^?;0J6zULI1_Bhe{t{LAOI=WYOmM#H>Pp^`sN4Qf;Xk^)2Ql8(HIH9x`iLYU`u{cke z3y(d528aE}b~w!Vvt9u*X~X=wv_;cI*xN1^>=nbe!V8#Y7m4hqKxRmMf$Y-=b%_!) zHFgtgaqHe!eN8Q)AnyChz2iUi&{m(WE`ByCgVDq6Hn;Bay_?y49?}`++S8sf{9GGQ zPX7rcXSl5wVxaj6*S>9P3B2e$SR?gFysAR}TqHE}=DVBZT9XG2@92w@)5jFP1(<_& zif(Zv1mZuEQbvX+_P?_4$&S9Sd)xZh?}SwKwsTaEub5qif@tqIr7 z0lR>FyVK=h()=BFR|>hsqhG6y3Ke&6ZzGi0#U>>?MI z=jDUPGWj*jZJ6=3G^k$PtYw?k@7%6bd>TkUuP+uZE&7^btpsHPDNh^o+(KfgTJ2c3 z$G8i2jVbosqfMjBB1%^b*_%eAUcGXr;ypiA$76M%Qt09|#k7D}JZZo#l@QL6w{g=x zJf!Yi2a;ZR)fS~S<;Ba4BU?)4-}Y#<6|CZG`sII2x6+cF>JjA&kl;%cEy2Wp)v~dG zp0@^W)93}T_u>d2JU8Ff<=SN5#crGr0AGyUUnE@IA58f9@sfMialPqRBkJLuj~vy% zqB8AwB=c^Dt@&a->2b&1l59@BF?0gK`!d)3z^-vyVTs2u9$HbPp`dL5otlOyp!%g6 z%m%Z~WZgz$$7~X%dYFisDy!Qw1RxlP~8 z&*0OzR+{#P%p@J)-4Hi_tfg)F_~PitnN4-0`2dFX(5)DKCf-@9ToqQyt|^i|ta0(2 zovm>$c2kjdp$KGL`70bbsg=`Rg%K4N$CSv`**h;QgyR!Bx7L&2TVm;jM!B#4VvYCx z8T6fC#SuQNw(~ueP9nktD9&FFs%L2M5$gxx7`H}@C3*k^LtE`Hw3PfFB zds^x=JX}yEZ3MgwM28x2!>Yj2I8#|b9w24u0H_GLU&@hKXMs7c0#lu{67n1j0}Rpw znJ)lYe>G>QGZrO?rJaTcd5r5{AEmDjZ}N{OOtviknRjzQ5}&vD@EZQ1pFLGeFH$wc z(?#6Y?^CCjx+2Q$xLUE+jAb%~JC@tjC0Sp(|HquHmOK|~Q__L`rxLbPQp3x?dQ*cR zZ!sGhp>--(HDD?XI_?O3nLrHlTC8E55*PgRiCD0nle_7v8h1y4%aCJjwu_VHA@%S; zCwEAZ&;ZDfnO@S%b@nn=ve<1D6)GN`w9=L9f-DNQwpI7(tx*Z1Er(nGbb z0qrZRYo3&S>K14f#MX`CPoOeh65Sar)&*mgHG0CtTRAxNyk}M#@@9YUYq}+LmaF8(9ER{`CVwfd&D#l54)0DJD@#`nhR6*pb z1ePF@eH;4~tH)PrB!>)_ITuqD*iKKYSH zQHHJ%YG0AUT|ou#5x@fPl`yb&8a?9v0I|)8T#K^i7@p-P2~+f6WU9(mfqr~DzarD0 zKB|=EJ)zQQWQ`DTUW0|(f5S`fB zGdCR(Fx?Un+I@LwQ}<@sk`H8x4iY`#*`F7afV1u1g$-5s(g|UyuL2EZCq3Z+jpK^)&tubOE9DtRr1X{>WNtOZp!2MS)}sk-TUM|J zi#&TfXPJ!4X@RgoFrHQ}I?KhFY=p(Wip?$LZXMR$Vc1!F``W zSKOR=5IJB3WMzb!QoO(MAqnCQFNV~&s8ay9XRql5erqq+Kx>43g55nk&Sm+E|0Npz zZLjgl&U;;Op5rev?abuT-!SF-y7r7Rv;nzX-4}{84J4r!k{wI+p<+p+e*DY*%7$N> z{jc=Y+7?9}U!?sIgA`x&X>}6J>wo9$SX~L$5NC|enVV%rtGoZz3jQBJT;ThESVeET zX{5jTm3@_acEK%jw>nSt6h_HQnO!k_2c{14rh@VuhH{Jz(h;JWxK!$W(_J5w6-@WZj)p^J!hK!xfk!DCZhG0^ss5(euu-k z=;|ih+@#0P%_$j>lcsc;h0ctcO%+W!OXsu#&kQ}%!W%+o(tqn@|BRTq3!7^dbA>`k zH%DFNk_KX#y^{7=6W+ax#RC@Qs#v}rFR1hy(c*}Lf2?AwY8+v6y%>G`j&C-2Cfy`* zhPT<-Jn7$UUNoG9WpMN z>NY!`A&V_{kq`@DyxxS=PfpL8pK)`emClXpTxkt!sO3i}4;KP-UOm`Vcp&rqKodU} z8`S8W!^#B8`yAh!nSxF7lBAMG$wmV6VniqSg2lAf#;l4GfZ7HOfz^*RV*XhCmhi0A zBjE;DdO$cdeq5!Z0ckLCdxjPMJ6UY2<<1lM)9x$kzUA;aPDyL(o$~r5dPUeh^cMlf9u6FivhtqXQ62kAvd6*}n`R8Z zyg$eFW*%}FCOtGuhBsFdJD3m+v}0p?>;|zXdwVTf_4)Ta<~XueLjD?lpW=r)JqLc{nJu z(>j|}Bb}rg@Okvh0zrq_n`E|bn!3u+h~Z@;4NE?$IO_cAJeDvS8?3^KtO-NDDwk97 zN_{>2!epDQVLLrC$?fR1bFc~dfpZX_`j}W>^|0O}n;D{+kgl46*qzL&x*Iql{@RA25R)!{Q?DADK|PB*MZ+m(2uuxJFw> zm*;-Bqa)dG?k@JRH9Etq(rf1Nn$1|L7`5(~`tZFc+&V1q>mre#$zwe2UXe@jT>6f1BWn4T6V|FX6~x*xlwxXti6G|awQOa0~pVJ_V$7N|xctajcCPDcnH1z+ww zkHzZ|M=T5)t<*HP1Wx%r`d+JbQ}dX+BbtvO?%qJ%CWYQslUO`docPV}{N#7K*17X@ zF4jb-iXfa2W(7mEDt9Mc%{#O6r_qKfH;fzsz8xZ$A=?J0!hqSyYHd}r6l#qCPlkP} z5XsV7OSxQ3rCzM$`@ODN-MN6-%0I05KJWcZVv4Qng4Ynu<(HP9gswR%!~yx)$?8Sh zShi&i1~Tz;o?T1YuRSR%@npdSMN^ zTl&z6UY&pND~xtv!vIN%?0LRGbs(`KpbD%9WF?a-Cv9#}by00J6B=cB8WjR__ z_XWU@Sf*a{wWtvdelmh}j5w?9rxo47yY@WFr&a}T#~JVI_Z2-RqIb`Cv|js?mkQf# zyQ&{?u2ilMez}!MlAj@&B_paZOvoY&-_7)}_UY;&Sz(Cku8iG@h|(1qDIF=S+lN{w zH|cbMcHT{>zld&kEVHhyXl@N#Srx^#Qz#D5vGmlZU6mX7AfR6VJN%C~j2^MMR8jqm zSXT6B_GYl)mJa0PP50Qv5%YWKNf?FKFJ7xyh> z!({ZV6GNShkzNUoaWnOr0hV!c%o-=q%AQZN&Q+s}2O9p$GP!{b(%h1fzt(w=@m*Z% z$7Lt`KP8h~ovKgJkb0&jTNl0o%UQK$36#Musuo8zq?Nk|ti)9?_o*yzHboQwP%ti+ zfRO4lg}y!{ZPdMU$bc_`N6b(>A9_K1+=|7VJKouLEHgx10Xr~Ig(lX`xKJgwjZfSM zzxrrJQJ~iT1iG8uqdf@RvdhM?KfP(!e{=3P2qu4fbL6}}s~zfDhvUULGCPw3ug#vB z;ag8R6rO#+8)*N#=X)${ORBbBhN`GM`A7@yoEG1%(9}r$xLcV~nI+;!kLLz0VQU#q zF@SbCK{;|fawAVJR#zeU-0w@@`3)oNg66uHCEqzi??ga|u7Vzg^SZcd<7w{KqCyz! z$p=jDI?N>!e)=7ISxtYN-GO&!1U~c-RpXnAk$aEJN1G?c#aFK9@S??RSL47&6c>W)^a z$#X)AsrBlc;||hAsbjyD-Tbo$Z=ga9_iT>G{s{8j-Z+vfT~%h6^e_vmT2bm9nRzsq zXxYwK5rm8#Ksiv4evl#1F{E-*gG@Zgw=k;cuA+uHq*X;DV3o_(?E~Wl| z@WsOax<>8%%M=0iUv-Ok5VZ05uKLq`{4WDYD%1avAO9c4@}j zlAIrhx3<%`5Um~2}9>e6gUOXavw{4xM6~67Z+c72cAAndkKOIHLtmrg(*bTLlRe_mlg&WgQ?Z?`V}NQ4YfQoi`iBt%8_RpP*XRSiB*9Kx<0cQMu4Pwhf_ryNYuLX;I8 z7;?>?tDtwdX2-i}2jaMsEWs%$s}auWHDt>`I)mANbR3QCA)b3cK21I1jX_!AVdmp zsb=L|Avch>vX=R+KfX0NE2!G}^`Xlk*SU4HOM6xFsa_Sh(x_te>*!~098Wb>7nsX6eQ9-~Uy6auq z^VU2bC!TAp{cM7jSt?%rdKGNeVb+6?aNxh-4ct6U6@2I1Q-3tWaBw}@a&BpYfq1SR zup8CX+95Che%Zc`>6itGTvy|+CxgW~L*r^88IU7|IhEgd+bS7l3s!#RqeBq~cSp{eXSuFx@t3E_+#ZkvV5X16auRS{f24;*^8jGdFap+vzm=i{sA7m&fk`{sh(0gROIGPTo({2@l=JC(hhgrf)z_UCnJyy#N^76@yd z0>#{;bJQ(Mm(xoNY~tZ5Mz)!_iyDb?TpT#}X%2#nYb6#6{iwc+8D7yt^3d;Z4JX^3 zu3glTHyH*vFc7Zr2d%dXUH8~w6@`ZhrenZQ9iP}HxE%T@P`1T3k>J)SbdiZL+rO4{5qUh^?dZK8 zlY8~2{~Vc)SuEA0_eC^K^qDB~=NVD3gv1Yy$`5C~5Y(MgsGHm0_bxLEr+8M&F!ay$ z`q*z%qGP1^$i)|odZ45%?1SZ~8yAx4a?7ldW5%j(AIQZhOD0yz)S-0{WFY zEbfp?s}p&bRD$}pv`IBt3T2ZZ&vKes8ba*xIsWe?BIQ8VN*?+SE4RoN7a4| z%kIW*agG9RrmAckmLAm%?Jv^ir~-x`rDfBCRC8PVW=>>KKGn4cO=870$iZ z&Ea|Us+V`*icND}1Zfyd^tCCVVLtkWTWxasVD2%7-O|W(gzfjaYsa$|NKPGPL4Ebr zdO_ARJFPzFxM$bp%B-^}=R1!th$btx6n+0M6`=giR#jOy(K>9qCc*Yy)6*d@1^ zoi45uJx-+vEDA;+jnej-@NsRV%P}8 zo55Wa@jj7Vq?@>?hG08{+2Q-yKo$|+CfNqM_RtVNj&hOdcQdJb2w*-A=bPbR(@-|^ za318?ai7OCp#u@ENpY>0EWC0-tm-QT0Px?s$O3??0jc=<6ygPqkE5vFpGeE?qg06D zS0;k9s>h9={8?NQk_^syiYcP4Q``EYTH~!HzqL<<%dO})Sfx2P_|`|al%m(3isQ&r&-^dHZ8srM*F|2bhX(KSbqoAcmXZ<>C=Mq3v8g-EF4T+ZnW&OgVdYXOH04)Mp5 zEWa{mtj(aLlsmbfW(zp3Pbbf>IzZp~w_R)cfA|r%-q)2WM4R=CKbBUwczAQAo`2S> z|8~Xrz$ZpaBQ;%0gxd^R*X#3P+Ux5<5jOf2H=19;JSc2J#99v_!}80Cg2>94YYpQB ze2;}tsH7zP;1Tk^IEH!hz1cyCwfAK(ja-eSUO1@ zYbr~%N$8h^P4Vr%&(`(GYEB9DqgQS}S}Pe_8zxGtY!>Wfl_Vlfx}z zZV8JMPbdhsVm@HD&esvkI54Q0knh`Ruhc;Z{BNHg>7e8V%f`#->Sw3CVLIwa_mW?*hNbnqILFIV7)s6Slr}@kW zdnKI(-wp>=o944?%3;Y_Zv}Dq$+T4`jiaXJ;a)~y2kscHS-G)euyc{Ki{=6)+}UHd z(VDV7e)=l`T9(Aq3hhU#_tTCdY22R9Df~DqlBgnhg^RPHyq>@+YS&*aLlvK>w%w5_aihK$2qX>a{qteH+Rx!}@T742GHfOcoD-*4cX$-W&j*qbq!gZ5PeYjug zZ9j$OjnqR`s(Aa0Da&<(UbJW#Yi75TnjZy#?dJ}l-PZzgM^>=-z9J6Y`Z}wx6r>#dgp^?C_rVBP* zYMqg`9Y?Y*dtOD^r~E9i4iPz)8RJJee~GZAd=HQV+3Oe@LX4 zoTlR~TJIx!NZ>S4gO~1_yg$!NsRKFIc83*8b zBygiT6PA<)*&uJpee~JGf6`BN`eoMSVgwl?8D)wXuKmy?p>l4JH%?eIq_Zn2M`Ca| z4-S5vteOjB+a48`33618!$+ z^>E9&+1Wm}Ay(iv4)?$wc z(*v`|9-I3L7vXWhXQwM5@Lbo2x2 zW442t{&hML>V=|5X?EW+dESv$6!!fv?Z*cq8gv!wK&DX2c~s881|#wq3{X!!wAAm* zcVjQ;Kw3v}AXSANTECnLR99kMaWS)ePWpdQYo}-~!t!T%b_4m{H2g_>5VuvA5~DgL z6za%CC!_oJd`FFT%=ht=^`AUeEC!Q_FWV+8M_7yN&7%Ii_4b78=r~l8W)lsC2i>|o zrL#{K(@qyTcT^PBIa3@rAKo-P8&JceiuO42NFyDs+t5NhdFScg44@;<)BMZ*T09eD?w^gwOC~9Yr6EVkeH=qPs6U;kkcPTAUJV z=(#=X`(<&C@)R1pvzO*#lYa7h<@aa;)pJc+u8-2!5jK8}<}G74IMf#*?;xMGQM%8vQ#A_y0z6@qY$A{9n`2{}tkq@;?C; z_WO}Pve^LrMy!%L#=kn>!!yo#e zg4O@e-eOOZv&@q3?&j$PcY6YK!cjYEBG2zJ06kolwphgMONJPpS(ApRQ%Hr}na3YL zKB2z3H&K&Qg=u`xYZAySR@x#KgFRh*>R-sGhboXKa-qU7hY0cf-T#IOE@HUuZ12){ z4&%3>f6>tLN#D&TaHLsjRL9Z>aer({mJK4ekMl2%oAQ-!YkS>u#LqqcG3_zLcrnAk zS82MPSxw=)$2Vbh+ z>Z9a4Yndj6f5Em)GN}qWJ&v?dmwNg^s`4AUB7u5O8WvOa&h+PCwP&l`94&iS$buKd zJB@6&%BU?-&hMH7uM5EIzaJg^br{otHUA*{Q>oQX(j0>>o3=)8Y0t+{Oy|450`z$# ze(G|;%70%0{TO5zPgXJ}SZgVt^Z`dY@p$)&-}kzDE9K1uj`y4|13zzAIuEIV&1MZs5Z@^un$=GH$ z9Osu6qlE}R%L+Q z2-RL@ZlCtZHBLM1dhYXNBkJ$BV~vj+8ZjE^vA%YqJt03A4FVnqPtu(I9>2LiuUDrS zXF1y$H*1>(fxK;Cd)2wo!&WmlQFVRrN!SG_i*PVFMByG0(%bZ8_ukQlj%P#&g z&3|_={TMvEz3t`ef@I_P6zUkD%OEi%+t-|t@G(HSWUg7g`u4ABRne{tiQ0{r10IU3 z6oW0F)LRC|oqrBb`?#U05f#B_P5=Pr0+|s^TS}9w`dI%wBQ?@{C#!bzHD_*@(RZ?s zG**N^Cu`s-$;>}T>$X8S4fTy6d;IJ^aFHom-~1IIZ5&5~v48;-=(HS9xqk2ZkFn#rL^@u7F22Bm%6>4t} z%2dI7&5{VEj+DPApeGO18G!3bWrOY5jOEfyy^4lcc>+;VetmK;d~BAlSS=x^GYiaI z3=S0XI~rNfD)-uaJ`TK}=T9Y+6ByWY7w{m`SC`b=lpCk4$I4`M%Gu(hcJSG_E`8X< zOWWhzNYy1Mabvu_qPg#0r+c_u3}bvTVJwVzo$fC5r_%O3+?2PIhGX~J#25Ii;}KE{ zxa6K+{~LMi|IQE}%d)X#eD+lB*PXFeSl@qgs(X6Ur4K& z5&wy*9Y@Fqv+^G1(?b=nWh3V>wlD~2~5lB|qpdI#ayi*j?BW)Soyfs@(__&)Q@97>dz-vXp#LU&z z=`E{a7OyMZE#1i}``pB=`^{fjllP&@wo}EvnrzDNzQQIlA`TpD=cbCnI6}k)IgPFF zPasa)TG21W{_7zd<9(|tjm<6Ji)B@+x>f2g$DM^SEnzA8n^YRKrgm0<2+Bwo_Ps;) zPi?=U<+p?vx@Myh@27+5rnYQEH2(C6{Sl!A+9#fPJ)5!ZuYeJUnP%m4n>*Co^t*hG zgS@qgOD1`rXnVMkCGFCXU&!Ub`vEqCf{ZVxv5B>g>F$%ezFnopL0&3^NlHvq!4CCD^Hjauw?_csAiJ5X4kc81nv6z0XKfSgCe{3qyRr@T+}aV^n7Weip)hOD2vZ zHbVlKpxvchM?5EdyxwxrMfdrO3peYBiVJ6H$Nts$k~JqmPEzYXzYFYT>Uu za&N!YJm`VkMeA@mD7{nExAk<2nvKnCrb{;1Sg~r2*CKwD51Ox><9HfDPDw}=EWbZO zsf!ePet^=@f(vh9H%VhATBC_s48JC}s1#bOTOBRS1*+S)_1aLxZ%b$-|$h_k-zb&D?xJcIYeKwa7E@hG7{G^+ws6^zZ`O649-%4-K zBM#%=i>6yC1v2DcyX}L7UVGH%jNN>W3j`1VJIj+|QUE(Bxc3h8g_;A!T>UemP7^o8 z1A+MtghEj1#=9wUpkDfJY_U6RszzmH3&a4CX7VH5rfZtWyri!46Hn~Ji`fR2I=;ej9a0zAdVE(fYmKxeNWpm5}7qTU}%~fdrqC_%YDr?fSyS=6rLT|9PRm z@PDAt@{t(z@c4VmIrn55fhH^ZSPjlrlqdlv5kKPWxhwWGE0NDl*Qyd}Ul#d*tbaa2 zb)O#nvGcVPjgQC)hp|Mazs)3pW_`z6-tx6E7Bec}f*ehs+Xhhr>f3Pae$sjNbLg~2 zzp3{!sv-g(clk)L-!=0BLOQ;gXRT;AzC3!3wNC86W`-jVhJ*!I$<|)H_a>d&%-K0` z9Pq7a-MjhBLL_I`L*wc@ePJ9Ahn(^X$Oor7UrnTg?M)H?ZsT}h2HF)0UDtnrGDePu zY(V3BMk1%xJ=h=nu}4R%_AVtv1pH~npD?J&gD7$3p^drx*zQhiOscRmQX27pyG6F4 zGD0a+hqvVsWA|azLk35}{Gx<*^CFp3lrAh=sJq{5Vey^ksfStW(F@bLBsUH#XChH^ zy}Fw8WYPD=0feCF^*6!rRy3pz=s3l@X4= zv0X)iKZHJ~wkmNsyAYF+7dT|qvA&N#S*sXX$b@xFX*%MCptEo9K{>}7OQv9!uOwX-dGh$Axj%3iC+8f_Q zW7831nE6_^n(zRT8bY`6qZufo&H6J#Cf?Sr*Q!)}7+Z{|=+aUXeBeNTh`8cZ>|ZJP zZdB*+O|}S{3uLkHq_JoQL7DG_S7B@N!G^f#A6&w*jPB5nJi=GhdhVBEHtz6HhX&0+ zV)@$#%xbnBVqE#93MK+9Ybx3HjO(X zWrD%s6}wyKb9N`NP|^LF@G#Npre#6V+|Bd3`{s?e2-HmYobA?p!rt!r#O*Asv%%}w z4;+3o7#05O17ef^a6n)1=JM3fjpDL5T@V32&k0ArI(5CC*h{6XGxB4nyL?wab`Y}( z7xXQgC-p=vE>d#wHm>41*CR^Ljl3pb9KA*uVzu3*JNG35A?iTBK^PqUNO1dkR0-9s zt8f`>(tP1y`SOc~@W+Hrb`t!wESw0bh(hHckdpS8a)0HVVX`o61|%7g{Hy{p1v?j^ zO`7lQTiy$nYAUanN|5DR_Sq!VrI#Ex+)a?PUh>_#J~&hwx6ctMAxN;9=rzCPyfFsp zr0c&G7@omhNmg|ok$SD|cwp%YHStnwnv%;uv9Qy0s(X`k^f_DjwS1v>Wkk#|gLc(E zB{qX7s&ho2*Q8c3CGpI0@d~8$4DBLv?o!A9T4DS5I==4sG}0OV-kU1NyM3K-iUBh6 zlvhthVvYptp^^antqZu%G3>~2l8F$?R>hpD<2$g19z?^6$t`o2&k-6)%6;&;_+Y3 z#G!a~=_i8sU1~jcDP-)0Jy8e87bE0}Ydck><0w~;=##qEfzreEDx>uuPvo7hHQFMo znO6zeHGX1#F*v;CcEiC=#(OKq&@g8NvyR8h*tAh6f@=~p0cmKr;I-)wpPjM8}%OjHvC%l5edLEV8%W=G1vr@=C4aC8icD!5tO*p9`EqQv# z>~e2Iy2tUdpUQk1W&*(g)}*%>*4oylgV*=SQcvmYI1L?esJ&=*s4X)*wpo`-RCn ztjJNcU_Q&3>9BJkp1~sm()7zLyodtXp%zzmd^i}EX+xE+AxD=^l>9VDJHo7?7rNsk zi^7=iox#J0ehTU7v+DYD9-amMm2$Wdxz@Tluijr~3GK%AK(b#`4me*h_8S+u!GjWL zqT2;4Jm>tMp^c~@@;04%7UQ;NL+$;dE9~WDVh%r(G3UgOocWfj_Zr7-`V?IX@3>F* zK4}yOk^(J9ieTEnEnOSKcskCw`8;kiS^_$ij{@2cu7o6DM{NoSbx+`N0=a~V8kF|= zIw?|4K1C1cNO_6b!tq?Rtg0t?^~qA>$$sz{RBZ7X-!17h8U8e1RaNRY*=raY;=JJ!hu0v})r)x=HUELbLM^ zj8n69XlIIDQeRKm+&+VnX^*uJ$}_P2@oOF9aSS@r#XjR95g6Px&Vd_W2Ex5zMwo-z zJQFN&uK0C6VGguS*}2;jLKh9S&sW)-;9wZ%H6@-G%JiIK9SSa{Qa4jhP74R`A&^C? zSl`VwVFXFGe70=w8>GFiYsvgz8uK}H5cNr9ElSSbbv|uF4*h#^`^kG$f8^>*lEq8E z`UmJ&P($_ko9bf_3@{RNw5A$N>_0osUT|wowJHm)FSmb}K}O`J}8A-3HUJa?pbFMb1tnwjpNi`e{w z^oMH=!ahfvbsP}7WT)zFT3%wpXzQ`*^9n|HTdtOr#xy9o=$<+Ln|>(zcR!W#63Teoa=~-N zJ+JSyKD)!fmUEb?Ct{W5TiBnNxvgnMnDh7)L)17M%QLRFbdTHR^`f7-rpSZ%L*3U| zT%eMVU5-kYde5UjFdiv~N8C>9{~JSHG#iDyH*+v@w<$8$3J+A*_<^gU}7r}~}8fxQEb%V~#!YI`-7R$WiR zT_T0{3y9bQC6E;DOM90u0CBYekhQVaU^%i^TM9;=Q z`o*4~iP%U+$YdrqWLRpzOm+_2zek=7kj%C=;T8I_#ou*`&O3|LzRlJoq)oxzA*jJR z_eBDUz*$$}`Ap_FY^%NK(%bH}qnvvag)#cdnRtTt>%G6tdfba!L>l}-I`8vI3~0i= zemaweiOT+tNIjFYcN(1rI&G-#xm4m0ues+RyAT-8dv}$^4O!C0e3}?by@MOUUkD6P zEc)$73Em*`9B-uv0rNi9$=e~+`Bbqu|L^VfYUB@8wNVE0EtX_ule5g_#n_My#}HX67|f#R(sgLa2JUjhC&KgQ8C$*1bfwO+f%y@7S^+mBV7w@wfCI{8MqUCNid z83hn{ua5`CHbGvu{Yp3IN^SMi1UY$$XAHzEi~e?p6zO_d;i?*s3Iaiv&&<|hphPGJ zYNa@3ALF_)5)9hn52nrdYE!?VwO@9P)j%Z=U$z8*2U45XrG(-eh45E>6*}?EWO4+q zmklhB;ATKLCz_JSy#>lE&Nh|Eg>mS4@rMdJx$=GkO?6#&TZ{T{S%oC7PLl0KSMv zksQ(Dc_8D8v0dVxhU2OzGXwyEXC#M44K_zrJ3Px}Q?xZJ}3M&5hIHSvY}z9@ns zO+f@f;BNz^OD_T{3QAY$5Q=mH0qMO8s5Ft@d+#lQKqw+0C3FZ7LXloVXd$$~8QkTb zbMHR;p1aSzukO4FpUKLwX3fl+XFcWnD`p>03av>xrQtYJEg`au*nl1gz0vMW-6P5G zc3G|Z7ZggG(?~;qu_<&C&iTeQQ3`L`hSdQ+L)i0Te+V#G7UZbj=`QF~8$<|lO-})ep<`z8T8K#1L!QPSc z(&EAjAEkAO+x5a$2#{$k{KC^M2CNPw7L&2-ymR&35_z)u?9DI7=b*Bcb5%?36+e_$ zCQxMgNq)9jTnMMUPi(!qeQ6}^Q|BG=95r@^rGt0pZju)%$Lm{}+UMQb+_Fl5CJ(~HBgsTf%jNIE~3@jPbnc6c#KWKe(8zoln(+U61 zP#YA_=K1O8j3PY#A2s=Us z0TsQo>zbG5YS&G4J|&!MA1wmEh-LXhTe*lh{-7VG=)4XDL$YVM(3uIi{r9w0^ioi^ zm$oaH?oN5j-af})_nxnyU1&yzR{E`|o&pjK$w6OMU;Xw1^>;ZkZPRr(CIAt>)&0LN zMw7?q19|nfE6jZco;1tKERpjgTdfjGxYp#fg!$<6(_-Mae;wIU7je9_zGdX(zeez~ zM`-^oO7{N%6o2X|lov~BWdE;z`X5MC3g8b{JdL?vc>=|IG23c?p_)J(;lDzk|M$Y! z|9w@>VNcTDUJjF^3S_1$K)CgyTOMZ#Jvapm3$}PN9Uc#cKF+M>pzICb^Il z;_PvJxK8OA%gYL}?poU`!;B!$r}4s4#7U*-nOgvaMXW9<%ghYJ>7ELI2PE_|N#u~P z9Rvb{3ugxqKayoCI#5y-v?k1xPF)MTZx5gag8HbEzCV9@W9}9sDRl)$$g_We7p^M) z&46`MHzTh>Ek7gCnfUf4t~vW@OeJKGB6L{yNpc-&RQQ0HT=y*#*W`uKHGdGB9uIa= zW+RlGF^B8+T70`QFxD55#aE-$%#;s+s;#Rw5;=wTPueD43QgoJO3{+UUsP9Gwf73N zxlY&`WAe>Wr#Jr48-;@^X?bfx z>gA+qkJ&21jU%Ld<0XgR*ATqPzJ&pJ8fG!C`kL$SoaM+qmQ4HC02PN15+!{L*&LUm zj4YBhaIH#lJ9C0ST_g3vdXx1IzWnvk@_WnE^|v}JWwRAkyHAbNdGte%3V$we=*0e0 z<{Mt4nj{K^3Szygjuz}+=emZ~v0CeGmgh(s=9FFTonNxalvRWn1-uq2e{MM9XS}taS17yL zr{#{mUT}bN4(p_L=1?D4@fq!LhC>IN2$HmgKa8JXyCO$VKit=;l=-&03`A#cP4KFeg^V#B zXn%2StZh7r=m@_gXSWydF!ulj(_e?-Bnc7NPz1{v>4qab=HCP$Me`6_AtdjOR>9+A=dI-^&vH!8hTl)^s>W{QKZsGr9RN#PxWDAiMI8_Kd} zwH~TC3LUn_jH+rSWHseo$q6!Ij-R`I^H$={5E7im29h%fF6Q%75N0O})G`Ivqv5cJ^TqfCz)# zfGQ483gBkD^BCTI85Q*`&X_BYQKb_yi@doer zyGQf0K9@qUSb!!v36OwYvPi=_fLZe7b!Xyu@z9LsHHgJGi?O0PO_|}vtx)1lsm34n z+F_&@rgqZrkJaJbz4G#!Ew0$Z6frmYlOPQsn&z$&?Q&xa;2r*BJ;S~HBKQM1)t#s3 z9g^_(tfK$pWTJulueBMC#t{6N6WjuVFf)SrG{y>+4IxCacQv#h7RY^phg?6lto?Hv z*RFo?TIHPGN-Go3u{TOha^pDmog+Q;U+WiNph_Joi2CMuQg|+v258;@jJCpSHFvgw z5c4~JAQ$A~y$>)iE&z0YxBoZgtFvooS^=Ki1v-|hV4=?l;x=YqxN~)96NWiUH?g;4 z=xG6kA}kJ_HG~#EhTpxpX_2|?|1Ugv&kN=V#%wNu@z4Acck0$LW#7bB<-gK~&6s0j z?0#0WT1}P1$71}eZ3_HO{ss~+h`-r}5ij`PiFNFpGgY44^3KLJ z?+M<=>b;K_3b_M-o4$^jbW8U)0g!a*rb@N(NA#t3GYz-+w`|1dA3p|4EqEq1f|4Ha zbpj#reutW*!oyIsH!>G{bTRm=qd*itHcqVaARyxR$u3=Kkztq!H{?}x5?yYPIt8C5 z>=b2@yCSgOq8*$csOzp#wsJMjbbGuf&)vf4UZj^+ zzGhTC>^fzzlU6+G4bWcd^?Lr+{dKRW?~#&be?FETX*~(K>w8CO%l?-~O{&L=@0r>} z<*7tnv#YQ)5$C=fXh$^8q;$kGbXE>BNS{yUcd%PKi~Dy?$LpRK+dsA>W`f{J!!Ixo&z67r7v? z=>?VAM4T~;!%T;%z;;y2t9@P(qh9+P(i_*qPsP6{xZOaHPlp1G$jFA>r#yAoN+i2& z@$259+t0kB=pD2nR+rA)Z`jWh-0gaA-ikK}+B+%1x&}9tIMiJ-;UcY-una2yq0E* zTs2wmGktIxv+0ORi+Ti`L3kA-)EFHZWMwlI9)Jpe@opBR1DkvCYJj`l4W}Q;?p-sg z`&y8_ncPix1M~ru4-P_W#!mC|4p3;LC1vM;RThFmTm; z2f|9WeE3s684L5`z(eZxqX&C8%6w?-*&x~rMqNVul^#y{A@cG7YZ*4=cnd$4&jSLY+H#k$Tha@wuR0A6ib)*xVDBbspzUL7`AZNc1QDIL=8cdjd) zVR}v8$mLSxsWTfyUn4XqsG>~_cQ^FFa%_9?ZN1Ogi1>tGW^x6)BF7oGd^6%EZC`2# zI^moxIA^j+;sapybi68hic(43@D~)ibd*?G${gMEUP#47$foti1@5uXa&;st(KqA3 z6qhU`nPzA2N&P_Hx04Fb^WNEIM-y{0j5wE>@xn=CShX=#2d3`lho4fVN?UneTuiI4 z5Sah9dG%tTmUw`R`*(}2`OlLV|BDUHR~<@el$KTH{wg)4g*33}4?^-?8gjheosS@` zBtC|y4bDt)abnuakEuoQ0?B{ts5bl1WBbs*ldaB)OWl;ONOGU?z+lLQ0M><=)il{f zLi3j}6&TYyAxZcst0gda8rOg9@z#ujV%pQ8xs%}v)#?~om|3_#me1@z>uGBffY_yP#*m)49GtLihCa8 zToT|&zsZ0UTu_GPQzeR5o zD#E0|Wse0^Oz85Q_C;*ncL_{_J5oB%BTJ7@0sOApe9K&UHRX3p3kj1@*X*SzAdSO( zTg2VC`=NBJP)R&fcrtoCtf+g`9gb zd|)Ge-*h?ifueg5FvaXei(uW-=6pW+Z3@liH5VWGH+6v?E}5=9*lZe5)IdH0CB>Q9!n zq0mgwPywKbWEPvC(rFjw`*{`Zd2{plD5zd3O1oFN;wOBT^;7b(FHBX%u1&~I^+J#> z|HwX0d(Z1tvev9=e2S}B{ODF-d4f*~jni2D692eK^yJL6rCzFak|SydT;kUY*6}US zn;n&KH%7nMv~#}!Q;D-1Xb+M7#p1$=9_T{^ESVG5Ec!3r&%0{43Ts7QwDj0SJl?bB z(F^S>kGSf&{>rTBXGIJ9rM(L(6y6X~u|(vqc|>GGvRn|*>ZHbx~jN)Ek`EOcV>yG&GqGzE(KDZABF4iNCZ z#SD=aVX1Lsxsb{SV}$M#75B`0FT8CH0#ZFM2DAO*e)+V$o#7uv+uq=V{36guFrHK4 zu3Xm7W7-WZP;XdfI$LWV)2Z>4;Giw;_)%auf;*=<4CP-)Q5rp5uS@h$3Nc>xM1!wa&51!*SQ~-_kMDhW6%=r2pSM`!^<80U~tbo zy}XGzyt1ygO`I0f-xF9nTS^o?W|}eZ5c74|=XiFEz|CcZZ2hDZY58T6^rXYrV(YSU zMKj|A&Drl?!_rQrP6gwCpZRX3xEn9o^bwmR$#IfSZYe+_+GC#Ja?4oepX-u-BgiJHUd{!v+%+P@(+G9lNz6?U&MYI~B-alp9Z74U^}l zy+Rvk9=ZBbWtb*&D%C7pyKRtW?PT*{((}W2e^*eFM85nG_4>rWQ{~x^XF$ zja24pMaV|hzWCE-^}sbvga+le^KAb^fZKVLQBc(b^i3ijhrHW*lwcHj&%=Ysecpkp z&9Dj2D3le`&+c*acm>~{_dvFU&i#^n6kA|Z)4lrr>X&nA559*?6dmln0>s#Rt)htt z=nc{_nKVKNSfDzkLIYSNJ^d8U!uFPa>bcYGpX(a+D#1a>fU(-xwp^NthdTNp6k00z zc**&KWn2%L$1%c`6G2kVrdU9_~8=P9%$BZL`aBFeXN$@j1cRo+7}R_sI-Z$cJeGd&Gsq&UGVdHac5BWtcJo_FoLehpyS zHW^{L1q7QRS9OdzbS6(@r(2{KZiWN4biEmZ9fPAN0K6cedrNZSsMqSFaH5dKHK18d7jp`An?h6EtxGT^lG{nY2%Dc zU{Iq`S4c!f@VHI7-#e?V)}s&M?E!iOJ<_=tET z{`_)lyZGJRt@YOIk5m$sH#ZEY^JEX44`~OovWjH+SdS=#x{9KmWl6~+n=Y@^p-k|_ zNGp$xYp%p&1s%fX3#z6+H4Z<|E-{H;b6**}iAWEyL6DmJi9zR#y&9)xQ8%#pvIV&! zD3i3)qlaQT!ypk3E!o?CgxaA|n(M4rEOrg8S!}c}fq#sfDOO_rqC}odauh$6GD$gN zlBSXTGO}6gVv!^OI1O(~*#n&6sx!KpE4$-T2qf2c=XiCqS?rWk*l1<;l^pYyr7VBn z0${Bwb;Hvyh+?Z=M+u&>7c??8EQ9PPbzyhY^V_O zF0?7yJW*=rgVoWQ^R$-e9hmH{;4V20iHxU2`N>B%-**xeFyw4_6J=TQOj|^JzDc62MRnV2?k*SE#;lr zQUzI#lLG-&v#nw+tK$^3ZL1}Gtzdvp#YzGvOlXvsAEO-`bv_w_ly9F4%=-Iw(rM><|W%LT!^s)U3e1wA({L;oGCLehHOBMWg z?D)qC|EBD=b>>KgCr76kwgW-mr*hI^w?H6oO+vFXt|bbHgs8c7X}XmXnPy~t?_LNP zDcx`hyb?$m@QvP`Q`G4lkM8xp{zYlj)?gEplEBK9AjONt%2pj9Z`8kvX0!xQTFvZ- zBr?Wup?+~v%l);S>}i?xb5+g@{>kWv-=Ssq3%0;N{}0yuW9zE76H19sUqvR8nlnXjWq168%(+cbXHpkm7Krmou1L-W8C}0x!SGF}f zIhlC`C1ierw*aEsbU>wq3*Gj?KBW|3>J4>|j^LvH?@9Bq0S~Gqd6J~4m&^g*pbPWX z@fx4BFQAvitR2B2ZPxTxV|1xSv|YZpQ^IDZn_?kq6Wm5Q@a&6JzUKTStnUqQ4!|mZ z`9C7fzmxngljgGxi}=$M_ntUUui(yBdVO{V2_Fl1wgLW3Y`-6ojTg&kvRVI<>eNAY zpWXXrKFBE`DKSg-l&%8L60~7|H|R`X)HH>0&d}ewms`MRUqI->{r)PJa;ALaje!9lDeBE(VMS%%uFIe4Y^X(l+k$|y9tM^X z41@0z6rm4<0vxBQ|7+$$YI7vI|PnFPffzznQL0vOY6?8Ia6#`@+*pHkz9=@0k%*3Ueepxv}1JW?5K91K-s*% z%t17%r*XHc&t~(i^}@T&r8lc&lEZ{&7~vCDYLtz%W7jR8h4}=$tKLAki0AK_4Hhc5 z(KS2RFDI)|XwxYLHM?hilK6*qE>&%S&i{H7+mL+QurNz*y0WqxiA^0}$qz-tu?<>c zs1@E6!;0DlUOb%F9oJ_r4@JG2ZKt7xHj)k5Q74rj-xizweZ*X|bi6jXY+0*h=4FlU zsU8?Ynfqnz`_xP!IIuc`@kMVbr;wD3ei_Cd%a-)ELU#HdQ$hrZm_}(i^h%2P9#U#K zra8^vWP^X8j<+#_$L{+AF-#H_o=H80(+_AOI-vVcof5DE!D$Ig-bxDyzP&^#Nlp?H zP(cOT;j)L#7aF52@UmZ~)RwGgTf!jatv@3fBa6v-$6K)Su_USHg2sdNEUIK@(n;}<|nU9Kf9GmmVjPXHP_Q%L_Sg*2G5!C^=UB+HZl%-eN zvMBsh7p*+9+S+rcrRY4kTJGF?JAEJh~%QZ!A@z`!zhs z%BP$IpJXNl3_Ye|aUoe`HIq+5@$ZPwkIJ&=peq`FeI7S@-CXZ$kWooE4r%9f{-OWT zZn9dHo!!fl>z1r@0+*7}csz#@k-zC=4g9?vUM8i? z+ZyFCjERMqRD1utYmN6jr}QXCxywHu8iwweXM)C;X6_KJW$d7!oy{p<_D0A&hNPTL>TU2ee z*4HAw)7bcuXA>2}(afM|jT**ldreVY1xjAFxxfSDGI< ztve*$-nRLUD}_<)#!q(MXZcHn`d!@YU3&Pr7N_f|G>m6h!v}h8+lGw{rKp< z4U7zCv1^YU8`)&&Q%ffh15=s4Ul$&Nl=_PBPiYQQy@2(_TRbZ19W{6*)-w)ztNHM_ z@ku**2~Ep)v~k@Fr!Mm*KaNIO2J>B5`i4kjTwkH5UN`7K99zAVycsE^jc>HZ>}q7X z7w9r`OD`MJyJo4N8B1Q72N`_n#U~4M^d%c_YI+FOm7?_MwH2mF5^+9M`aAkkP`wAl z?mx9?SH<8=^INWr` z?l*pdfBPXe;M(gwdOmFbQ{NO+_TxpuC}cxE>F8_{Zkj?O$p8Kh@`$-5u-?^a+moey z8c54)gf+9;5~iL;`$xkwYE3k9z3M1-B1EW7U}#40kK|PDSgGKq&Jx>5*0snE#u>1r zTJncC1a10J8*Ob@op=3wHPR1;`;)w}*6l`hv3Y?>#AiZ3NgCzjOc*T~Uuh?JfWk)L zluU$<$XRtMrVGt|r{(uX;8xud-3VmT)0BkdWAGrQ^J3{c_{oey zZ7HPTPW<}3ymgn@&;sE zrj!SUX8k%<783W0-)(fh+G4lG`=T5tG)1_m9+)Z@zR{#(n0B&Zjf2E;#41NP^FwX7 z@BF#?efz9ec&*||#{AW(e+(Yk$meR$JzIj$^r>m`d zPnb_69=->~v$B{q%?T+LV=IdxxHQOkZQvF)@_T_aIzy-dJwmSUHS2gX@NmFG)IFcl z*L2hv%2;Nj8g4MiBr)zI3bkRw9@sXzHJ<1@wfJRKr-JXXXgpw;zc;3L54|)^?rhx= zYwX*Zk&t>H^b6T=8#`rp9v;ldSM9=X-&OHEv<)p~BuUdl;y)8HNJ(<%r;Ual*>B(I z0Y|kG>L#e(;>+3Uxp@VsS3V1`Mz{Yfd1E9d82XQB=46lMV%7)NFfC_fTOx^8pLD9| zqDra$Lhv=OXS#J8P`mc;eic^zs4KRFr57IXoa8y7F0=O)@Z<#_RX^-I`k(JXb^Ilh zner^kQiU&9zyq5r;c;csSmMl)m(2t%_?0Q>BV|?6=2GreYr;O46Ao!Q zs`FI)L%mgGr#G27R3lkzk>A46m z>0^UV9HgvBaRCZLC+QL6Se50+mxp|M&tw)j8j34f3`_51eM=V6y$pt@Vw3h#-zL}$ zSlxiirEz%P8zOJtTuJJCn!lXu2ViCkIDz_RV)iqabe7be2@eIg)et@1d}2)m8n#6FwwXNf#cx}r0|-$yf)(1z45m^}wR z5^)*U;U)zm?Ij=A!=U*3hA!qTMw09%uTL1FZ`+(Nqty}BxlE^VGa{qP>@m zR8+O`;MM=Zp?JwoY)ew-!JCN87thx#mLIj9_ALl^Ef8(k{dD);hvCF2BTaf&ihd$< z2?oepp(`6Q-y)6>cxO*;ajSVPOISKWE!igfh4A3xL{0*6eqzWreBuu0Ru;VUl>q7%&e~UQJHm}lCGbr*#9;iY7njNn2y$3t}fj? zGRF~JD!RpuNJtbc4jD-CyZbfxQC?SZ6%_oaOD{vTJ)%IueU4NtWMOigx5Dc8VA!d}|x2r1$D~av-6xJ6D`dQ&Y33xp_wA5(!BrxS1V0 zgm6Pt49y-nQM)+_Vs%fzyicSR+|Gf*mH=0*?KlNzdSQ&3q%NoL;)CNaEUM!3SJDOx zqTV+6^qmvivWF=ztm{?s6PIpK%lnMGaxG(_)1H_xMgHCF;jsFgi|@ae7x>BkYfFE* zRkDj;{JITXQ((KH|Jm^3^SSNLKirEQL8T7QDrv#M4*!Y**~OZPtGYKmqZ$9UeXjO% zBn9X-35mls#KnjI1n^qF_~T<3@bCcJ7v7ir7oYz?|GNgPo*-IHwc$nMdVEH0<_-u} zs*YRdBqXB75nK5~3$>#g(0hzFg)Fyi-S(ta^aRYBkL*8#{5%nQm|V*fZ)#*Bs&@M& z<{&j`!A{ncCAbo8ptE0c{Ud>wD9(D4Zldq}F{4o~-KVEY}4w}(O9Li=AHyv1drleBRoTJaixp+V>I!DEdDz(;! zS%H=EmxIcRV#ih)tX01@*2l>H483t& z5d@)=)`?*&d7Jn>f$dFimv;B7G4-R*5{mg`zv$wqr!p6%Aj7r=fSJf4-~OrBvrIEj zJ|4c7ZsAa8fzydG?Di?pjTke1Z)ft;bIe%Gmnx2mk5-nJ#fsZixN%Uoym+Tbt=RA5 zXW5SjUQ?O-VRR%UbBC{1$s&JwRe&dbVC!H*)XJ0NPJ-b$I@DHsImvTMD-h+|)mJfc z+s|%o4(ND5N)u$*sN|?B`K%Y&RaN5?q4i46Fr@OMHFu*Fo2JjhS9zL>`pI#^=mu%Y z0rKB3%zbsjw60>@W6A`)FpdQZP;~L}+6y<3kY7RyHrHhdIbo>oQM-`~Ulz3v&|lW9 z4MKUw4bw&3O&R@TB{tJ$DqPiH5ubl}a;t3G6TJ&HY4p8%vdA9lbKdPT{Ow7!Pq?dE z{{)H*{Q+Hxi=G;=YRs*LK)!cIDmOm9IgvJ<`HRHw?NQ<9k>f}>4vKk?OE^{zPwl!w(z+80tl6w* zp&3Ocs3b1gbLX|(5fQj&09(0!xjAL|n03nS4bBz`kl%UP5&X{pvL^>OEJ*)P$T7c& zk?rhg7pF`vZq_ZL-+Mz>8eyHG?{AvtqWzxX>luVAgHBUL#R|Lp=I)wy{x<-mzE1YE zkyUCy^PZjC%GVsnU)J==w@W%*P?}8r$+shireC;}H17YsaFbj1;lL&4Yy|ZF;)3EI`kic%#4h znIdzBd8F(kEK=Nj`k=wse8@o!uvSE2rqG>pN%NvG9_m2o@-3Aek^_;!h zRTAWatxD~U6|K)IY4cVjuHF%VpPYa^lxv>_@x%s5cE4!(w!TShqnlVg3e}P!W-<_C zt8A6L5U3A`$N3;1@;U_wUrTB3Gxs%4TMgd&E#1Yj$k8=pb4?5(L{k=vgu2E3z5+hf3$JhZ6>0k>jY-H@lEu*jsq^Dn5T*Khu10*DfTd- zm))Q>-UPa$pQ^fi9vOMFM4zpCTTLzckiB608r-T`FS+05`nh2;%)ZdJlE*8Kn?U5&R@X?AO7 z^Ia_0cny1gUU%-#(*BgbXxz1r{FV03-h{xzGK@h*2>f%;{YxAT4MK#yDTf95uv^Y` z5R7@dTLYyR^nQwZ9^(|qD)kY4z4DE38fQ~(q%;$XAJyl1QFsww|5{D#FAc^@gSZ;U zG-{p6#s~TgCL$Bm(c6ZlKXyctSv|faQa4fORNIdjs=wj;bZOEnF_99PPi?Et-!z;N zM%`o@o4Ov^s}+Eu^J+8e9e-+5iDji;I}j@WGDDkgi5bk*h?`*vY`xnMCDAjZbraMA z!ZVThFI)xYY4z=YN@7%^&ta*9OGKzg7q6lzFR!6^Pq+RIeJ}r}h}6ARlpQKKUWfUK7(iDH7ht?t1vU)g zn}$AP0V4TIzX|T8>M?Nzc(MkrAzE)T9e3DJA0t2dEaa!`4>k+Al&9F=ujXTxkS`GR z8Q_un!G9vo+|+7;i>lKUwHH{kdl}iIvrJlMJ7GJW`D%X#L@#N!ywsE-7PWiFMRD|y zFyeXgRCIO5HX-SG?So+z@%qpaqhdw+Z!r`Ef6j^&7w492+SKCsK)#Oj-=t;AB&s|V z*xCwBbtF6o7)M|UxCj3Q$UB&L*XTNQ>mCsRB4fxIP6;jS#7AYHnqECZ}af&aN zhFzB;oYM|M!WFG`x}o<3;nZFR2lxFE{GywZ2CZ@#O;Bn!Gjr~_>qbT?%Jqu&xxIVe zpXMV2%ZD$qI1uNgoac{e#_KeXS3OL~y}~)RXGI^aVf3+~UNven(lbeb8?*8b2}xIm zj9mzen$vdcRR~pAO_{#o(Dy9HhNAS2bok5~IHcWG+*^m;_b^NBu3&pW&{gNd!F$w9 zR+q00#wokQ?SR=T^a);%R@lEOmg?}6LNZH@J;w1Q@%$v{_3CRwz~;NB{{-|tpRqyq7I6LK zIzkNLVx%OJbMSTfMg~$6l6^X$&GV~)MvSir#v~+zCpSF*ntoNU|7Z5&&HpbNRE-p< zvG2`_66gW5^7-_wy|j$MutaMo*^AEHW#6?VdCBi7jk`4bsefg=;uG4|^GiVGc=E8jScdwqs6KVQ=$$zuC`Fu9~73lXZB?fbrQF&p* z-eqjUoz0;9^iO*t2g7u>gUY3mL9I&L7e@0R-eZg`L9Xl?Vl{1=2seb0J3&qeICu;K z*X0V{)LSC8EZRL3mmztkck@jd>U%m zAj_7%2^^T@V+Uo^!A3J7Zk8REBg%3(FE)lr8Vob+0F~}s;jD2hFG$;5mgP(}KEole z0PSxG&A9pOrOo;h)CMjC?K`SSvKSGmynDympEiNjfy53{*C&wCQ{rE`biEme#+`|h zUh!yEYChBXqTz4&sNTlZ4=!=$hpd%7Tv(3sKO${iqXrKBE1Fo2^I3^9Bay1lyZAbR zwa;(ZwDSLY<8q4o(6Y;HMxfgw*(LY0?$B(g;fO=}G{8arkx@NbEO7qwl{0bvfo}&Y zcqS8O$wiX#=_UW}T6dP1=Q?z95bVna-J7yqm0k=sWbsEl-}GgZ*}Q5>A3#No6YUY|k3r)~uF?!(R6)T8q z5h-n*v!e76pl6GhD=69z{4AzVyUPCpdq$t~Jisg||rq z2m8c-J4G|dg{Xa17FfjWt`}vY(xGi%ZM%X-#F=2{LJthhQ6Wb5>D^6d-h1aVMR+3k zWwWu=#o;2;t=`nlPPT8`_|aAXLi4ipu2^ptS44qW$|s!Pfn}wy+4M=deF5^#xc$** zLmg?vF!;5aiPV-#O4~;3rpnbZ(0Rcfp&(+AvE|gcmk{+i?N#8g{-$l`hLE7r^Ra0k zOPJFpPmE_!hU>45-?nmPESHBqg$;%^dFrp${hR}zD)h490Eae-|KXvZ;=s1A1-T*c zb@qOUmnZfut8_&Br@fkv&oh@udrz$|x{R19PeXFmWub!6R==sMUpO1C4{1H;Urg(} z!&%2l2>Bg@zG(Ijwkrlxf}!V|-bRjnAn&*COI59%c(n(+1M(%(+v zsufbozd@Cj2OEgi9)GycHdY|cPLj84HJx>8x_SHZSfwe!R(}FH%-WKLcaysS33X`bBLzU zdP(SbT25_ahe0hdOBLqrTM22g_^j#*zST+oL#ayLgQF+0pBIN<~nGg@400RDZIo^O7Kz1pDWO2b;(fK|iMRk%%N3g2jc-4_3#2RyS( zMZ0l6(5op4v(+?tb^`K6-hrsnSb|D=5k8IjZTHw&Ev+V^0$n|HAI&szJ0G-M-HYrz zvmHhAZO7YE&7i1QR*r<;rNVxA&PIfMd)6|Q2Ac#rpXlMYB8oT|1|UW&hFG_~NF5;J zGp$$f)g|hn_1jvNgU$)TCo=+hQuk@#1@?Rp$u~v*sIx!X#>NWOBwzTl&XWgx!*1AA zgk{=Y`!TQzfvp|1LFhmsz_O}C)1#zoEd~PL`C7*ea*h+TiT7n$EB2TH+=hN52t%=c zO>OD&x!G)2kW`RMU|SgrmYgLr<=)gIVX)XxA9fN_tJ|0X#l^E?x6r=mB#bTE4YXC+ z=pdyFmsObJs+(>5j-X@O1S^32^;Z<2(wmToJIkGAw%FSYn1pcip@A+MYwQi5Gzn;5 zNgpfBNi+!?Z<8?Uu~)Cpsh{F9xTR%*MlV4l&Nd|pkKE%8h4v6cRjHQuE1Jcu!z+2L zPUCiG!o8yJPYg~y$TM%?&W}Gy%fd5!lbNzn3feZ{KP_vMl=($FC=i2Bucj{I1z4=$ zjANhM_64Jr_LIG0i!nWu%b4j;YYgzxjjMui&DjHkl8bO>uWe>g$-#17vAwSd9~`1M zXeX{SzPaoc?Q?=}Jtp9*v}smdyd+IWt(;@ z?BH51Yc!AE9h`06DeE4=r8#TR#dj}dc9HeEsT}rNnGWhqTra~*gS(j1Iy*&v0I&hR z4QXl`f+sZ6eDY-B=Tp8#{JX)`CMJhGV$tm|zM+8%pDC3?T+D`23!}T_RQghI>;a}) zKa`Q}v0(;U&0c1WLz1^h)*Q0Xy|M4auaTU2DD43YW6Yl+t7#r{h$l5d}^Ru=U3f;aZN z5(LkvPf(9MH>QVCB**Eu*DgNpHmBjsIn4h-+jo8)GD)aa(3#+xISW*5M?G$ z8CAFR9WA5af4r#*8T|Eb2~tc@R7N~iQVY^5GvY<23v{X!n6IJ<$yHlOIL8Sdk=wF;aePE@)?Q{`k@;}^T(SaC*ku^Vl}T5Fci)c%NN z-5MS>K%UjJ{nOrp@Gc|1htym}!L|B> zk51CI?{}TNJ?Riwl}uZ&#=;gx@*@alb}J9Ij@g`xXn`4Ht-ByrxrFK}XsgCWq93*8 z^;2|An!jMYYGtXi@d0+#UREDus@r78<6yNl+rVIheeG_*sk zNMZ*(kghp;Y~Fh3Yx(dHY8DP<6+CH~rr=D-4~+@M1V3VaT%94~Z1Fb#7e~zq+VQ?h zz|E!6H-tAKj5vaf9<*G>R2za>IIZ;->z0IUNpROg>#z|)$#Hj>@3YPLJV(BDNQadiao(o9;P=QO}M{rK`=-W?X9El)%bX!y-Z>BPB3<-{2II9P@!G}Z;H9SUvx#qp_ZUWM%Ev5&{*ju-!6(c0v1DJj zm3+H1HR>UpP5h4OGUztx<}xXR-(gq24F9?zrj@wI(U?i6p(cfQp4WhB+rKG+=5vL- zU_f9xK3677s9Cz+s&7A04e|=h7*FX{)@K}r$n8JjSI@{&1I;0~gDXVP$3o{!*_yMq z*i?cL&vPZm5?MN^SLC-7>72c3qm&9v5LYF|ZVcK;;K^^@Wp_jvsXo37cJTNp+%A+` z`8#%QX0LF2ppyrIC;|)|^+W`JiFp#sfcfNysdujw@(paqD(?@?Mn18A|MU8Z1GhGk zdELdD=BHM^_Xe!kBQ%!j`-4RbD@9D`FY6_@ zhvI9p&v{)GON5c+`2wkAl2#i)pr4tgb|xGKfvA7fh?9?WVZ5|S7P$VDgO4pqlpv(O z>8!nT+1K49PZO^cUjU-oc5!%-k9kdh9w--_vL3q*-)5WJeHYW`_khumJZk7ysvjSG z0toi@vKoys;tGe=#kd9bakx>&ilz_R85b53ao2hG);C)JsJ zp=#F%AxiZnkaBxlCD4cb&OEjbobCHl{EJs@8fPa|=%~QGtmXdnUg4GGOxTmD8A8)0 zS3%9b-f~CacM5lF6Oa1-a4r2XE7){4?aFSb6`Al@f6;)zhkn=oNAIN%LZ{=ll#kHT zSs$iXtV_lMP#KSxYoz7A@}uph>`L)+`*B9^vRjFiR~WVQR%ZXW*)^~92S(j|e)FtW z+v8hQzc1_hetUc>;1MaOZ0;jyXa96Davc-))45eNF2AJT0%QZ^E|v$L9cXlu?AaG? zY^93!2@I73@p|SI73J{CF*Pwyv#Hva?_7`qE`&@47f3s82m{T5(rnd11WowoHC^n) zN7wN-Q*q9WPa?zp+#rfoBcM(Y({{Qmw)hxZGI7LD=gz1?9%p{ujAGc7n6P6slyvnx zT7tt*HN+Tp)&|zr`F&IiGFJ0RIn#?xjNk_CGT8jao4_ObYQt0dTxl&~wh_3%M^Ye3 zAhQB>5(NIaO@NGE#$+jcqi9mq3EmHxlhM`o5Dw_ULDyt6Ej2Sv@XZ@+8((F39+yHv zSs${EHqn~E#F>dVB7%;7Yn*gzU2IyZLj1R1y^b8AX{+Gpx&!7;3Wn)RnTQB#uHnfU zs|Q$8iceRHdt68RlN2i&M$SV;7ZSh06Q;Xowq6*k$ij@gI#U>KK6B^c6%o*)Svq9TI2Qzviu~Ve#6s^O8Vd*Z#%)Sahd!%vpr zK5Gxl3cqeSb=hI-X4e(!T)&sB$48D@iCFE}SnqdWZsQ`q?ov24JvYL+e68qz-_h?E z-P&kH=X{lRg6%To7Ush1pPl>ue37U+!zsL?M06QL8j1RqvFgsL1W!HoGRkg@8vdMZ z63wMI+r>U^nS(K{v2wGw(LwGnHM)&yMF^GTO_uzGDzZ55Q6G-=%r#FBgV|_sM)-JS z%ZTPHr^>i49s=zOJ-K*qb90c<12bHMo!hKKZiL+zFuQk9kGZ7&5*1X_q0!vLC}mFu zW8zj|kMfSkmQ22e*0{++mMyhYBd0JWm6pD@+sGmWR^9&D{A24fNPM;;Ixtw71d;9Y z-6i49Y@|X>o+qB;aP+vNZ~fhFugh7_n}1clhvxP*$_gHX4K6%})i2gC;UCl}TnR?< z=`*Qr#5SQibL*c*v-(i zMzphL-xC8uZW)Cw8+~I7k4J9z7GvsTTFR)s?qz-oqMIizvBi4_Q8;38Zdg1p?j;Q- z6+z0Z1`oGANniO9qi0nl8FBM=9A;P1HhNYiovY#hv0rUwB@N~VZfzA58zVaqUET6K zMx3=MG?$J)plHJM$-J8=X`KwEV7S8(;9l91|GOd*P07Z3CSyaA29qu7tN>-h;w{$@ zJHa0CxrRoUnI{ltg}Kb}GaRwldq71Vzm`+bBU{cbLm%a-wap#M!=jN5ipTCJaWr4q zFw=(=oFutO9@o9{+hO#Z?{wVB_??!@+_3u5i>;Jp!Ofa55&A(IaI_a~;Sa2PVz4o# zq);XA%4S0Cc4o57%bEl&8*HqF3fjg?(5yK_RvHx-$jK+dlJ>)sAD5-u%`yU$R!d$; z*GspX{qqskZ-JMp*^Zq4Y`FM(RfS-$RPm1JL2Eq?O_CPf*86ODx8=PFig8W)QYH&_ ztc5qFzzBJsMRQg{(Xw)0CWEh&5?)*$;v#<0Cj-sNJ@PvV*aB3Bl{S&192gbisDg8s z1p8P+!C(M=SJX#2em_b7msq<&(-iKw)%gI%=l-pfcclx~_&H}QxDB0Jnz41~Mhp4$ z?u|1Fv4@+SwTHuM#bv`(IkH6^j6UJ5l+ONtW78?SKtBhmxz7rn%2UApJ%N#%|rRAR{~bxV=6 z5gHwxw<%^A7DA=ygcv4_%wcjEHYO>`F^0u#PBF|(4jY@z@6!GGe81n{_w)HYzQ6DH z_xSzs`*W9hUvJm@y5868d3u@dBHciP7;Nk&0ATM06)F=t4a)*l47d{jaYE{RKC50f z`B87vVlXdz{+X1{>04Jz85&$fTE+FxfxY}{**mYT5rK*-IooN;4ZGN?a~Zse5!eM3aBWoBwSl!Z z7s~tWxL-er0D`C8M0V>hY}@ML4U0xEEBx5H(5AC|DC$`s;szTF^rt%c9 zR|~t$Y{q-@j)X2;URcNsQF}+VHp1N|ybU_cW13HggC3Xkz8IWtx*z;MW<5f$ktqPV z&HP8GJ!-}dNc1sX`ol7iI=Rm1oFvt@sMk?KllkS`tb(%(2lROrE`4UC`xJoI(m{uy zdWrr9=#(Zeq&NCuV55dVibMPjl6gxZg4UY__^*Y8OJL&R#xzTqvm>fv3ct8SB{g|W z4W#zR=)Ud{2p-n5@5~~}E!VyWYa73OLd&a1Cj@QV?H|UuLv(Hm(l+AO(s&%xFYz80naUQ>FC#Xg2Q_4P z%GM}PVzgWozp|OX;0xgv)L=ul{QAdaXa#$?uA zPm@P8z+F|>0C#FdP{1@?v)8xk7Xpuct3KG8KYM1< z@o4vbwf2JN6CJILa9Rs9Nc`?1d2~QG-mz)S?wB=zvs+D5{vBrnIg3*rSP2Zn&pH${ zz`J5x-;FxCnZvF`eXq;rV#R{lB^b5brMIHf(sXqMTr8L>4COz=?ASk$Z)qIvh!GF} zRmEK;s&T{W1o3f*3v=fRAN302RMF7n-99-?ak3~R#@sCP%|cVh!h{ER)Gx|x-}xu1 z1gftdrM7DJ5+a3XSPWV_zF={0mV*mFCi8mS7%qFgyXxKAfa~H6IOR|ANIGtaq{Zo1 zb1iNRVC?d(ALK8n5C0}4a8gv~aOEcBIt1uKYgMLfP^?h)NLe{YUeAqs5fe4mKJP+a ziI#!=ZJuepcMq&6h-}py|&$wh(f8wwVAYX&3 zqI@q!zA$kLHs*6Lg&IdoUFdccb!BQb7!7Ip{*_y4F%kaY;{niPU1e z&SgvDh}zq2z7IT%;mI2K`B2;OYeQv`$ZOFT=}UFv2zjVSN@pqi=`%dLb|oUkUg0eM z?=*~L^1q^C>Tg%1*8j#FB)FofHN&o_C>P7Yg#-IXjw0zvUf;iYNmN{xMogG7gvvvo;q{t7GPt?+bLTxDqixh`69*t1v2-Y{?M7@%5lw)Q(AuK z7M$hgI#~2R89PXj&8&4VWcq9W0`FlzS49_@B^Oc2Fh}H}#b07tisq+pi+bCA7e{vu z(UfHv1aDTYDtPb>ieQjGSJHv$6S&_btUmtTGZou-ku^0M7Skc->p~d3gbqqKb|K;v zYJ&ls2+`W-#;cOs9BWg;kuVut4IrMprND^_Dt$U^cx8EcUZ3f!Ifw5n7`6*-w}-iQ z@xxruEqi~73i@&WIja34(qwqxh^b?>9ld%rO?$A`?-Y%`FZKf^QP})ldY$t5#Y6$8 z1fMqIlu9$iRVB>VOUs(!gEFBRdowMJdvHu$hyppF;Eu>XVpuvQpQl%N1IeC7ue}k3 z?h;3Ya_;q2k_PLHNJ9;*{l6v(&1h;O;d>Wa32)F_DY$r@y&2+H=5Bq4T5P7ZdHUnR zmDa+xCg5%ttvT-wq?je3+D?G9vd13@>DU0MwfAdLfZVp^RMBi!-9iR82;JBz%uH#& zCp2mvPTxrS_&3G}=wAKKRzt?9crDN#(&+f@%Imc0EiQ$(Yl}bPJ~)zA*`VU0CDO8E z4B9!V&?l_aBbMV^v7Tj+;nplRK68qMITI?MzC5ilKQJ$+dmkCoIKXQ%X>TcdWol3> zyiZgN+GTpow)Z%_UC;GQ%TUk}SttBWv+^~*y+!$p-hk8O!v!AP!}p~dUOI$4;OD1Z z!RCFNDj8Mu4Nj=UM|_#D2>OBWhY|JBt3-moeTE%GmbvMgk@uDbY?c&Da*lk1M(0z4$1_NRYanHRSQ3mhUr6$vKAJJ>fsh4kaXVedA-Ipr z^}1`6`h0$y|NGU(fO&6hkE*rs?F;MG^5m2-SL5oM+P5fF`=(wXmhKJvYwqg z!&`*EM8p~)B0)KjufOIZX-^&FvhVq66@71~rrtPnX>zyh6RHILlE&JfA7qkEDm90} z?>+#1?QNwBZ8X$Wa`nbK7!*Zox3bfGhd{1Xed%n|fst~(#`!&GKgDD(j#*Ay z&n~;fk#8k9jF&08d*6Jhz)ttajMThhHks&Da8u0U4xL`mR=ZRYUm@2Wy7~3FRcG1U z#<7mc9h9{J_UgjP>aQ=`ojsK5Hl#YRU446RCXDTJ=S7!F-xt5j?dS|+2}52&{AK7z zP?b7<*yel>>Cw#3tX^A`Yyd@=AlBOy_~<`yM9;N%%XTWLoc4TNQE~gqzjpF{P6>F?U0B zymbgJajdxewCj=W>MtU943H|WJZh3G28|VC6khEEXa&J z>iwg9pKmFev{GyG6b!KQZR;Yrb*|Y7#`&;bOM9_ZO2=|4b4fg$c4DsE01ao9u0$I8tq z(;qO0SU<*h7I+CRgjSwHxZ#X-YHbKw<&fOyZD^s--Kz)$*qpwk7y9lEcT9`?*bA>7 zjB1E^?JVG2aqZRF$d{LW;O<%o)Uw8eE6Xe!GZyM@-*(+7#KIOoS9qfjfd{R?q2X>|Qpwq| z1Js0pv(+@xWww)Q?M^TCY?nGWOO@dj*<+(QKoE%gZMu%RvDf*Ra4~Pb1Dkc~K&h<7 z;8BvyI>V zXww>7pJg|W_nfd;m2f7-?k$3t>c?eakhubRhq@2u*RHNe_tm&_$v)+KiYsFHGm<99 z4)a6%2i{^gKbFG!{*g+o*ZaE zj?VI(tadq)+!1)Fk!dji*v0MU32^cQ-8{pF>dQ+t2gJ9?@dMXibByk|E;$GY8_FR0 zWRFxrMjp!B%k zd~`sy8(tPf^X4_5{2Q-e6tt@>8mgmF0lpO|2`oqxQ__%FW4_CBPCxs-uR72d{OH4= zk;p|92ocB_0o9kZ`-a0 zyO-#7+;|S6f}J5ZX?rIT+TxDXHT%OE~B zGNOBg7_k99hnu)!pkJ$cnsaSFh7nWz3(>ahxQ$b7RH_DWw8knP{>e zffGGs@F|l^EY_ZF<$deSg$N}W{PHg}rXrSG09!h?e)l(j^v@6_I*YHErU!RA1zIi3 znjKn=`|*HrA>~zwjKpK{Z1;;F@fChHp`fuI`zXeRxWm@)4zhSSb)f9@2!X3n=-7=w z^0>`U{sY;Qndggc#{UD^GhRpWpMNAEcZifTZVudZu2ewIS5@B7+I$*jb2#jJQgJ5y zL_>|}Lgv|={6Q*P-L|*qvRx*O9zt(5^3vd}o>ZOg8RRcY%E(C(dl4+^k9=#)NE3Cx z!Ca(5;}1V}veW6?lcs08>~hIfBJ5`*9`O9_*XUn6XB{A2E&e7-6th zUT)moQaJCZW&+R=2XXN8dlKv3G+1!IUS^S9zOSGQtqs3rS-Af(7nA{HJqX5m6B|{% zeCEz&8FlyA8)wtj(%wsbzkrhsv7NG9slqu;#_mD)=s9($&i(X4{F>yJg;^bcm0x+6 zBd?+S^I#ot>#YO)e`Ff|=jN*=Z|%Y0wCF8H{tqCIQb9Oe^_fVl@Wsb8q;+Zh3GI@t}l z;AMR#pGj4|r@!k7^vNs_k2r&#TnsJuFsFXlPw+0FK~o7^S(Z-W@l}red%|#fK$qcc zaW>Za5GUowN-Wga-7@IzTq>zkWqH4dc=iQtf(C>m)+!rHztV43y%Qz}xrNUBz*W7e za+hQ20!)=PKzGT!vu`a)d-HUYD!V}rb$abNXF&WJS?Sq?)Cn2B$O!6{X_Ig6{Yi!upuIP}j0k~FL7Xn_TkN%P%ZD9X`85-1IW>Sfl{_u3G@k?Y|S9~hr-J6?k z#lKrW6N;q%R+7w~r+g$R)7>nE5oP8{(fI68{4sj#vR%%jKNu3pbT~_YF(~%>GLgC(<$po z5JpmTQ*8)_8XGsfw?$lMEeLFH{g%=q1IVIZSV;x|0RQ!ktl`IVkTavFk4Pp@SJ)2q zwAn|Lq*$%Q&dMXwI`*BhS%ZGOUVhQ~D}F*zWrMZ<#*YuE-o358*VS)xPZz!uTm<*u zzy8YlwQ{i=SE6J+hWbSDnAY^Ggr3RAxoLIN{jehnss-JfRazwz0UH528$_pER3Dt| z>dlQMT~6EkprxTVtyr?ySiX0j37gxu9*fg#T6O_}E{%lvYJGhD-snx6D-d7_%|~J~ zd+~YUFtt$`f={otdoMX|FmU**5mYc$KCrk21bOgst>~JnaY&&Ub*O+aK!yl7BwfJ1s#ElE<{G=f2puRfn`8-OQA-mDTaT3VMMVrvgIE72Bb1IWgzZt zg$T*M9keE$7Y(cGcYB$KbN=%96cr!&w;+qyw{dI zE)q1o^!cT6pRz^Y6a-XwU6tq5yNS=%(%(ig8CDFeKTvyk$+D!iV%&c?TC{yT6ywHx zhKO*IUi*&=*sx`BwCZ@B0Q_N+ASpYoTSq{D+(F3 z&p~!I6xD^4#Fce4Tok6>s0M+@Y6xK^DRDvYFk4;&V~jjPAUaL+Pq zMi79f`701(+-EUTs`a(MfqFFBVMh3Pe zNIWMQ4qcE1R|Q6O%uVc9S23tLSazrIa#G=VRIbCR2wSz>?OuJ4P41|iz8#ym?u#jA z%xp35bs#_UaYx@G3)N5+6UJS*H$$)3)5!MlH4|AEYxZKN~wlJ-YIk$^grMLpbrY|t9g zj^rDP=HJZ9)B-U_Mfp>U+1YVprtAQnH2tGXbNE*(8l~3vcn5;VhpNbDiiZ2oy=y4k zf#M7LdT{4U!Z$c1WW5;0S3CtgiSj4vw%ks|-tgL?_Mt)4m|+h@_GEWAstQSQ4lyzl zr`C#HDlE17p3LR>A*#cxx6kSjdxwt;hwKQU@IiDM0*D3ncVG4x*z8T1&*19VMtDil z2aF(kwdjGF#%d2s?L*;<(`h*ig;}I@?=7a8+hE^RFM1Y#9#}YZ3sT6?OKCtoUU(s2 zthjq|-P=BSSaVq=Vp%6VTtKTZ=n_TJ4lj=G^XY0~!@n-buEl3&geHJkPi)`smtKgnV45BI0u`J$i*YQK$|(9h|o{zCg3B zYoa2Iu!)%FyUFY8kv^l^0#XOz(!~Q0Z$iT>5Vj3vD{MMqj-Og%!o_O%KBQ z#LZGW_|{8YHiK-hB_hZ!`ex+ZMF$i}W~y-D{RMT{eQ&A6o=Ge(;)0YGNLy;IgHG1D zKKxw#c#pzspIm2?hlVZ*y~6dX-H`S-co3Otu9Z+g73Z0!L2#Ja@bg1tk)(z&BSX)| zy;{H~t@s$vO(TuJE>!_bQ_W|S!iWw_pcn~e$@toIY82PW(2lvOWEKC@yWNq~9bZc# zcPmti&|wh$!ZlMcPFN|5Tgy%fEPxT~3u&9*W2PmipQE1`;j2$T?5Ea6)35e6Q>I## z_H^AD@IB9XUJ2QHVJ)zLGMCSt)@Sp4Iy*81oznDndEmPnZ1w|jiHDJCt2r_9lz>#2 zYjCUw^YqndxFELU>aw&3UGJKVcv7+)C_6T6*c~_9{+aC+1fSgz2wy)k8uOQix#7&; zGsAyZK>q=k7}Uvyd>WbhDS3|KUgv{$g+6zJ%lwQDC&2$2?w@3k|K)i9_%>v!4Wz6WlBg#vb`75IWwwN{Y*g{Sxf zn4%jn7g_7RTXQx+HPb<*TYT=84A zeNN{$90Biw)d`;(%Ce;ba-sUJgMqOL#P!D{tNGw!wkyu~^E9U51O^-*B=+^NF><9D zg9+bVVMz}S^{Xscs&X8_rc1Zx=F>UTWJdpief}X<};W>)XcH zmpenda<&&1b)|R8F0&&w#ZgEu2U=*ycm^tNxw{5m)0*6dBVfwxzvSazooTi7DR*me znrbI&te@F%D*#zqKMnPiG!yfYiaRoM2RlBI*wF~miEc%~LVas5qsC#^0c&^K4sm0? zX5aVbTy|^Jiq_>WbNJfUG(Ai;72u|EDezyG{JIR5iK44`jy zc23gu*1`_s#`cHH{)x>>XHLHVIM}Ub=+!v& zT%yRgKW^yqsNOTk9rk%qdxDF%~r0 z{U&hQ@lFZ8Sz@0Z!xTaeN5(p!_>! zsrA=UUz5&U9Rhnosz&_%o3HJYEwXe?SX84Gz{bSS+%{UVX;BSh98Wyf-0P^B& zCQzp80}byaFWfecf^}0Fs5=MXxfoJaCbZK(6P4ID%awx$A17lsZMgrMUS%a?Ja?;Z z?pz(Q+Bs6gxW-+}Af(>0Zp33V^DRx;T6{I}xN|;|QPlBJk~yC!T(CM278s=k><>;u zcG3qB1(e}fsm^-~i6pW4w{1nT{tz1lhrH)o6>MJmz`Vf=JG5PFJ^I@2ME`CNO<|tZ zItS|Oi8-YHc7GzJ`cFWZ427gdYj!BovueituF3;Qn@IPsU4gx~N2(>cQ;3YzIMXYyf@pR48gU>crn;yypl9pg_#68`|eO1#gx7 z_9c&@s)=Zol_1=`@~o)%oviZ2q$#;=^JQ{`X}dgJbf*_)m?&Mzs}tQ?NMyvKj9=+$ zY#->>EQgeG#CcohE`kM+_MF}@1&`)l^XGiOqJopf4!A8)`fL7Gzw`do7MF$41t!cG zdXS%}J~_)!gtPz;*AsiQsbqZ$UW;jqdjmlH$)TYFEw_;T5+hpsuj#Hh3{Zo?($1Ra zlbt`c>DEoU$Wmw^3Eup5y<{tG;gaLc($ah1aOIaxQ^o& z&%ZO|wM_@`U}OD8>?}ih-=^SZzYEA^QiC?+*8^i8gjcwAB2k42jrdZU9)!>71a{1< z1uL!kYfdTH>Ab^6B0Y!**EzM=rmBVw#>a+F-IEqpU^MM0?-eFzhb;hIaOWV6oZTej zjQ`9AIv!L=Uohwm(HI%Pu;t6NN-YpaEKiWE1Zj{-p*{cKWmr6;eGH4tsp6c z9UobPt8=1+51~i&YfqH@0d|ImY9fY8h8Uy{_J>a{!_8lbz{n)m)4(5FJvZ}z4BTlD)kPq` z*ZLtCv(Z~wDIs*7=Bj}9cEF*7Zq@leOOFkJsT%nFe [!NOTE] > The attack story section may contain more than one alert, with additional alerts related to the same execution tree appearing before or after the alert you've selected. -### Details +![An example of an alert story with an alert in focus and some expanded cards](images/alert-story-tree.png) -The details section adjusts dynamically to the selected entity type. +## Take action from the details pane -By default, the details section will display details for the selected alert. As you work through the attack story, selecting different types of entities, the details section will change to display information relevant to the selected entity type. Selecting involved assets will have the details section display information on the selected user or device. +Once you've selected an entity of interest, the details pane will change to display information about the selected entity type, historic information when its available, and offer controls to **take action** on this entity directly from the alert page. -Aside for basic details about each entity, the details section displays historic information, when available, and offers controls to *take action* on this entity directly from the alert page. +Aside for device and user, detailed in the [affected assets part](#review-affected-assets), the following entity types are available: + +- Alert +- Command +- File +- Network connection +- Process +- Registry +- Script +- URL + +Once you're done investigating, go back to the alert you started with, mark the alert's status as **Resolved** and classify it as either **False alert** or **True alert**. If you classify it as a true alert, you can also select a determination. + +![A snippet of the details pane with a resolved alert and the determination drop-down expanded](images/alert-details-resolved.png) ## Related topics From 877ea90171cd719b5b0ba220757c7093070f3bee Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Fri, 1 May 2020 01:00:45 -0700 Subject: [PATCH 004/145] updating date --- .../threat-protection/microsoft-defender-atp/review-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md index 563cd4b1ad..6c83a8f5d9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -13,7 +13,7 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 4/24/2020 +ms.date: 5/1/2020 --- # Review alerts in Microsoft Defender Advanced Threat Protection From 85379dec726123c403dbffaba0a96e2c3513261a Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Fri, 1 May 2020 01:23:42 -0700 Subject: [PATCH 005/145] a few minor phrasing changes --- .../microsoft-defender-atp/review-alerts.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md index 6c83a8f5d9..caa63bb247 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -1,6 +1,6 @@ --- title: Review alerts in Microsoft Defender Advanced Threat Protection -description: Review alert information, including a visualized attack story and details for each step of the chain. +description: Review alert information, including a visualized alert story and details for each step of the chain. keywords: incident, incidents, machines, devices, users, alerts, alert, investigation, graph, evidence ms.prod: microsoft-365-enterprise ms.pagetype: security @@ -26,7 +26,7 @@ ms.date: 5/1/2020 [!include[Prerelease information](../../includes/prerelease.md)] -The new alert details page in Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) provides full context to the alert, by combining attack signals and alerts related to the selected alert, to construct a detailed attack story. +The new alert page in Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) provides full context to the alert, by combining attack signals and alerts related to the selected alert, to construct a detailed alert story. Quickly triage, investigate and take effective action on alerts that affect your organization. Understand why they were triggered, and their impact from one location. @@ -37,7 +37,7 @@ Clicking on an alert's name in Microsoft Defender ATP will land you on its alert 1. **The alert title** shows the alert's name and is there to remind you which alert started your current investigation regardless of what you have selected on the page. 2. **Affected assets** lists cards of devices and users affected by this alert that are clickable for further information and actions. 3. **The alert story** displays all entities related to the alert, interconnected by a tree view in chronological order. The alert in the title will be the one in focus when you first land on your selected alert's page. Entities in the alert story are expandable and clickable, to provide additional information and expedite response by allowing you to take actions right in the context of the alert page. -4. **The details pane** will show the details of the alert in the title at first, with details and actions related to this alert. If you click on any of the affected assets or entities in the alert story, the details pane will change to provide contextual information and actions for the selected object. +4. **The details pane** will show the details of the selected alert at first, with details and actions related to this alert. If you click on any of the affected assets or entities in the alert story, the details pane will change to provide contextual information and actions for the selected object. ![An alert page when you first land on it](images/alert-landing-view.png) @@ -59,7 +59,7 @@ Entities are clickable and every entity that isn't an alert is expandable using Expand entities to view details at-a-glance about them. Clicking on an entity will switch the context of the details pane to this entity, and will allow you to review further information, as well as manage that entity. Clicking on *...* to the right of the entity card will reveal all actions available for that entity. These same actions appear in the details pane when that entity is in focus. > [!NOTE] -> The attack story section may contain more than one alert, with additional alerts related to the same execution tree appearing before or after the alert you've selected. +> The alert story section may contain more than one alert, with additional alerts related to the same execution tree appearing before or after the alert you've selected. ![An example of an alert story with an alert in focus and some expanded cards](images/alert-story-tree.png) @@ -80,7 +80,7 @@ Aside for device and user, detailed in the [affected assets part](#review-affect Once you're done investigating, go back to the alert you started with, mark the alert's status as **Resolved** and classify it as either **False alert** or **True alert**. If you classify it as a true alert, you can also select a determination. -![A snippet of the details pane with a resolved alert and the determination drop-down expanded](images/alert-details-resolved.png) +![A snippet of the details pane with a resolved alert and the determination drop-down expanded](images/alert-details-resolved-true.png) ## Related topics From 06d357d8466d6739e9f453caf2dcbc0b37102133 Mon Sep 17 00:00:00 2001 From: DanPandre <54847950+DanPandre@users.noreply.github.com> Date: Mon, 4 May 2020 23:14:09 -0400 Subject: [PATCH 006/145] Documenting May firmware/driver updates for Hub 2S --- .../surface-hub/surface-hub-update-history.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/devices/surface-hub/surface-hub-update-history.md b/devices/surface-hub/surface-hub-update-history.md index 8e584f17b3..f4616cd18b 100644 --- a/devices/surface-hub/surface-hub-update-history.md +++ b/devices/surface-hub/surface-hub-update-history.md @@ -24,6 +24,23 @@ Please refer to the “[Surface Hub Important Information](https://support.micro ## Windows 10 Team Creators Update 1703 +

+May 4, 2020—update for Surface Hub 2S + +This update is specific to the Surface Hub 2S and provides the driver and firmware updates outlined below: + +* Surface USB audio driver - 15.3.6.0 + * Improves directional audio performance. +* Intel(R) display audio driver - 10.27.0.5 + * Improves screen sharing scenarios. +* Intel(R) graphics driver - 26.20.100.7263 + * Improves system stability. +* Surface System driver - 1.7.139.0 + * Improves system stability. +* Surface SMC Firmware update - 1.173.139.0 + * Improves system stability. +
+
February 28, 2020—update for Surface Hub 2S From 8ec175022ee01b921f515103ae570807c0a3be71 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Thu, 7 May 2020 00:02:33 -0700 Subject: [PATCH 007/145] feedback loop 1 --- .../microsoft-defender-atp/review-alerts.md | 42 +++++++++++-------- 1 file changed, 25 insertions(+), 17 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md index caa63bb247..7094a73309 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -35,12 +35,19 @@ Quickly triage, investigate and take effective action on alerts that affect your Clicking on an alert's name in Microsoft Defender ATP will land you on its alert page. On the alert page, all the information will be shown in context of the selected alert. Each alert page consists of 4 sections: 1. **The alert title** shows the alert's name and is there to remind you which alert started your current investigation regardless of what you have selected on the page. -2. **Affected assets** lists cards of devices and users affected by this alert that are clickable for further information and actions. -3. **The alert story** displays all entities related to the alert, interconnected by a tree view in chronological order. The alert in the title will be the one in focus when you first land on your selected alert's page. Entities in the alert story are expandable and clickable, to provide additional information and expedite response by allowing you to take actions right in the context of the alert page. -4. **The details pane** will show the details of the selected alert at first, with details and actions related to this alert. If you click on any of the affected assets or entities in the alert story, the details pane will change to provide contextual information and actions for the selected object. +2. [**Affected assets**](#review-affected-assets) lists cards of devices and users affected by this alert that are clickable for further information and actions. +3. [**The alert story**](#investigate-using-the-alert-story) displays all entities related to the alert, interconnected by a tree view. The alert in the title will be the one in focus when you first land on your selected alert's page. Entities in the alert story are expandable and clickable, to provide additional information and expedite response by allowing you to take actions right in the context of the alert page. +4. [**The details pane**](#take-action-from-the-details-pane) will show the details of the selected alert at first, with details and actions related to this alert. If you click on any of the affected assets or entities in the alert story, the details pane will change to provide contextual information and actions for the selected object. ![An alert page when you first land on it](images/alert-landing-view.png) +Note the detection status for your alert. Blocked, prevented or remediated would mean actions were already taken by Microsoft Defender ATP. +Start by reviewing the *automated investigation details* in your alert's [details pane](#take-action-from-the-details-pane), to see which actions were already taken, as well as reading the alert's description for recommended actions. + +![A snippet of the details pane with the alert description and automatic investigation sections highlighted](images/alert-air-and-alert-description.png) + +Other information available in the details pane when the alert opens includes MITRE techniques, source, and additional contextual details. + ## Review affected assets Clicking on a device or a user card in the affected assets sections will switch to the details of the device or user in the details pane. @@ -52,7 +59,7 @@ Clicking on a device or a user card in the affected assets sections will switch ## Investigate using the alert story -The alert story details why the alert was triggered, related events that happened before and after in chronological order, as well as other related entities. +The alert story details why the alert was triggered, related events that happened before and after, as well as other related entities. Entities are clickable and every entity that isn't an alert is expandable using the expand icon on the right side of that entity's card. The entity in focus will be indicated by a blue stripe to the left side of that entity's card, with the alert in the title being in focus at first. @@ -65,23 +72,24 @@ Expand entities to view details at-a-glance about them. Clicking on an entity wi ## Take action from the details pane -Once you've selected an entity of interest, the details pane will change to display information about the selected entity type, historic information when its available, and offer controls to **take action** on this entity directly from the alert page. +Once you've selected an entity of interest, the details pane will change to display information about the selected entity type, historic information, when its available, and offer controls to **take action** on this entity directly from the alert page. -Aside for device and user, detailed in the [affected assets part](#review-affected-assets), the following entity types are available: - -- Alert -- Command -- File -- Network connection -- Process -- Registry -- Script -- URL - -Once you're done investigating, go back to the alert you started with, mark the alert's status as **Resolved** and classify it as either **False alert** or **True alert**. If you classify it as a true alert, you can also select a determination. +Once you're done investigating, go back to the alert you started with, mark the alert's status as **Resolved** and classify it as either **False alert** or **True alert**. Classifying alerts helps tune this capability to provide more true alerts and less false alerts. +If you classify it as a true alert, you can also select a determination, as shown in the image below. ![A snippet of the details pane with a resolved alert and the determination drop-down expanded](images/alert-details-resolved-true.png) +If you are experiencing a false alert with a line-of-business application, create a supression rule to avoid this type of alert in the future + +![actions and classification in the details pane with the suppression rule highlighted](images/alert-false-suppression-rule.png) + +>[!TIP] +>If you're experiencing any issues not described above, use the 🙂 button to provide feedback or open a support ticket. + +## Transitioning to the new alert page + +When making the move to the new alert page you will notice that we have centralized information from the alert process tree, the incident graph, and the artifact timeline into the [alert story](#investigate-using-the-alert-story), with some information available through the [affected assets](#review-affected-assets) section. Any additional information has been consolidated into the details pane for the relevant entities. + ## Related topics - [Incidents overview](incidents-overview.md) From 88376e5033b61dea92f99d3873b1f02e6c29380e Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Thu, 7 May 2020 00:02:41 -0700 Subject: [PATCH 008/145] feedback loop 1 --- .../images/alert-air-and-alert-description.png | Bin 0 -> 48648 bytes .../images/alert-false-suppression-rule.png | Bin 0 -> 10794 bytes 2 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/alert-air-and-alert-description.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/alert-false-suppression-rule.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/alert-air-and-alert-description.png b/windows/security/threat-protection/microsoft-defender-atp/images/alert-air-and-alert-description.png new file mode 100644 index 0000000000000000000000000000000000000000..f6545e9184fcb25544cce24497e9c10f36923d38 GIT binary patch literal 48648 zcmcG$byS;gw=G(vP^3@_6e)xjXz}7jgA|Huad#;079<6VyL)hVDDI^|A-KB~PjDyL zO@H6s=ZHKkbI6!j{W4xljqV>;$NOTLFs$) z1nu@22J$D}WFMT7FDTAmBtJc=9HH1lUZ7iu%8NdEQWK4HXY>?#jpZPvg}e!`=kFIv zzkRXklPB$&(&D139{T&sSca<8^TH3TV4eC3oR0+}%CP*s#ff)8*H(cd6+ev2D{yb}XMf|{Bd4UL9?AlA<>HYDVCSCL57C3 z)YKeoZ2z0v-x$NLqoGP{mZW`mm4K{0?uFXNK!c4=i4T(Pkf?o5 zuA_UVhiza4zAADpxlJS{ekZSw&)bQTb>H_S^8C?=PBKw5XT7u40;oUAS4{+MciR3e zv+t}bT5#fzv)7AWh8I!axB$aLLjGt+tePZraa%H0ekUR3)(0MOdhiH+4;2IZhpT}7 z-^K$zZ3$1^nI~+W_x>{G?jR>rbKa+6w7+|D(c3u#hqj%|-I+su>*ER@2&P?hi1>T% zvH|ZnCI48cpB*Zmga^AzSt55AYW%pKUe_uOz`8rgri{C^&j@ArtXjLhs_f6=AvQVX zD`;Z!;(NIKj2Z+yCSh)ou5hJ!rS|X?42fgj(4RVLedd1Gp*sUc?UZ?7f;>!%(F+vM zgm0p$3Z;ZT1-BAi*~Zj<91=rVQi(6;%ZiI6g^n=29-gOGz+GO|yX&<>{EUWc(miEQ7+g(OVb%+#BBRboZw-3Huebatb!Rc`M zH2F`%VlcJn=v(UCIig#?6T`esZ;`a3WbTJqu=LDz>$qE8F}Vb5ukXNy(DSR~Arh)J zd)D$kd-JHil<|Nu`w6S|Y!(X|pKX&SmJ*7(%6lxt^I_3}bQ`I6)M2hQl%(&9+qG*c z)C}4Qc<|zME4-*XShce0T1mm`@&$ct7yY30H@CAECPP&Q-8_AxJtmz@y$$_+@OR2m zO+;Ea(3-MStfiB7jq0_T0*^%75^-^MmOj)CBM)o+?lRVaH(D#@jseF81r{{c1GxEG z!?~;d-)aCJ8YBHMM9<89$EY@}dOcL*xZBdInO6^}59=+fzZ~{lgGdQpg8A5Vc9)*_YFSEgy3Z-!YYy$yLh0g8Ho8=9)q* zYx@|Jm|4l^d62IYX9Gu>^`r%(ipd|GYh*{Gp0X2@>X1YF!&>QR^0E*#vvh4c_%V)R zAGc-4cD=#I@|p%NbP#)`yu_4FQ1Xyvw8=8Wct+MqS*xKR)ZRX7x^XjmFfW<6H}Bcx z9FH9=U#we=+PYG+lSR==n_b=oa5a1mkG;2v1f~}ghQ@YXV_Ch@4HQ~!$BqZLq9(GE zWqGDwW}l`OG^zMYghQr1&%1t;ov|@XM;4lF|8hy41oXE6d&{AHhRX>;Gw_3EU#y^l zxw>eHXzRmYZ8-q$pmTxR7~c-yW7EwYp@;RXNw3d*6KwlJlxiDcG&HHTn}^42Nt>iQ zISY}W3UxWb0v^szynM#~&q1RbrDGlb{ODUpa8kE*VePQC$Bs)OPM3by?iSmrA-nXT zS6Vm)A-#iw?JvX*Xn^(IE_++e?2(6>cmhXBy$v@Bs_GHzCzy#0#BD zR#1a|`KlYGO{*CrP*_N%N<>`T<=mK>&G)o=D|z20luB4 z(BRobEhZf2JqutGK#xa7H7hLG=Dnpm5ai0|yx zQ$&Bv)D7HMWw5vn|+2`s@Zi#yKJMF~AoN#YU$}EtAaXTof%e1{S10L=JOw+9fcnxvrWCkcI z)p?Y+52H^<=mp&PWNzuj)RbR%^?3TUoM%MJJg$Bcc)$~f;%xwF`#C*pK*GP+rW45b zf5*~16xI))0(Q5uPKWD&0bzWURRvXdjf;r_IusM zreHva(dX$}l78h3k|Xlf6oB7Njz%~8YgzWKF}?F^qb{5y%ibMBci|B(94PLC(oEIK^x8Lj8e{=1$3mQM{>S# zea_5u{&eLt74(+ru6aNCETc7QWyf2E6{o$@M^L~gFehoR+t=W;2bJ$}p}ptaSyhm4 zN6G8g7lVJkj(pbazrH%Zb?x}6w6o2@w@S4uzrefd2UmW5R0SOS`OnDa3A$E#64?~^onYD1q zvDcG#pj@PSB2<|{>|vy0j@;|Lo8Xmm;8pcLjjG}PIE{@G+|fSpF_Q2@HRb%*Ha{_3 z+oyeK){-qV_`vhy;Zhf?iIua{8eMu+Fon;K>UGrJA_QzY>fGUZRpor|SN{hQkmyYO zLBue{{$};!qv*x%+a2C&2qnb=cnKCQJn?iCi~m$~3&jF>llO3+?o^^$Hyr+5WmaPK zG{=uaqSEGv!4Vj|Z@pB%#B(-oRd0j|>2&a8|LNI&!PojAlhWm}w%7HvVzvDxy4w8% z3(8OM$;VNXdVBq*>|%^Ff9u1lY0Pg9M`FZW5jY-m-5#A3!_Ch&G#?>LM`~AWaw}9x zovc^S&qk9)9^Cb2Fe5uMnJf@VZB~ki%L*Lt>=v7(BR-$7C{+yqf=6<~Jqq5P4s%FV z6_^sM^dbK3(MI>kT}Ou}x0Sxv1KxLd3ib0EVp5Zhk|}%Ko;bZxqiy0-i~ZT}K*gcH z;*Oo1#~<}`&bX^*R+hC?;f*c=_&a-U3!I(fm_3JSfw4J|Kh~#j;5TTOJ|keNF6XO3 z9d&C^HOFbdr(@&gqa?)D{6?6TX5&tXUeb{XMKQB@H0xgA+iAn$o=XH*7{WjqNIR@VC61QGIsF+c6ubmHC}@xiSTdT=-S6QDNsEKlzuDwJndc5WRky zDwg28b?ecM8@-(L*0fCu5_Qn>ZG-{kxw)W{L}jPVF=~}gKmyz!0 z8dpE?g-1JRiTJz)T_7!De5p_pzW+0EoX-q^44kd6D;n!jJp@+iG^00#h@Fz|4LDED zSflwY%7%9f^ttdZs0DUt$H1Q2n1^^(^6GiXNMDJcC;sBu(oy2GfD8ArKE4>6FG7ZU zTefW&nR0SI-3CIO-JC9rNrI~(G~Cu~(~k^agqSKm{7TaXj_Wh1)EJLT-B6TEW8B;w z)jFzWoyG84`utW*r@6hJZOA+lr2;M#jtaBe$zAp1PhAm3YcmRVlT}O=bOL~{e2U7u z;^1ig^XDzz+F5SIzGEx|@xz#M3$(6nO3_xp4>qkq_u#vLE;02AanGf!veEH{F4em= zW}vTJi}Bp@;VaxDStd3wIq>iRqCn=)?2Ao$KGI|=rOTlJX>?u z68pLG-RkrEK@Zx+A37+s&_z`iuLtz$#bg+t54+oO4LIw^G#~F7lUoB>0Fv0u2-dyQ zZ|+KMDU9fjQKFAr<_7jrV6{b|vB= zRP3hpUNc(a;ONwMDlh82eLaBC0x*30PFwQo%4IF4)$by{Qv-f<6q>+!zvxk!8jO8} zvahQXQVxy4m)Ef{*+fgM7_puK?YxpbuEsN2I1_s=y+@jtZd9}7xoUwRG0$BxRA*_vHpQ;sCNg@9K(nR&i?8%O#S#Rw)gdfzf6zl_SCN_IWS(sGPtWhS4oG4o{5tV6 zp=}(ItC$}xbBe_^4X*bD)L9ID-daR-O*z_Th7&)UCaaz|GeE^Bn)c->?%W3fn)aP%*?CPA$^H`p0-~E473&JF`i?e)WA4ogSpEX--`$@*z^ALn_x$kPkeIt029S^) z3k%+&Xv?z(HNAAUZ|D5wGe-J$yfbmcEqdHFi)CrdB&q5XPZcJ(ordlF;zAxvPT*<+ zublPAAwD<%RhF)zVR!O_*KJ8{G3;%?{0!g}kn{EKo^AGHx0sG%K|_5z@O)A+ZGORB zAMbi*x#|$ig%E0h6edibx}U)@MXy}^KYQUb6^u1bf_3sEy-wur2}nvTuzlZ^in6nQUh?!WB#bp5WsE z?A0L$MW51c-C0+A1~%TKvau>hovL^MNbUl-vy=x+b0(0uUDX(0!P#f(uULIo_2I-! z>ni2q2OP_gEW@jj`|KxJt%p3Zp^7rDc;15cF<`LnQ2GYOgrV$&fW`Xn+l-~Vf zn?v7q>9zOReV=cCKABX4FvwQh8HYIK9~q+7qtN>tk>Q}-k-5;W&J5-X4SGa9EHCQZ4I%_^{ zJZPeq&f66OqSHW`kZ4^h_>ngth>V4ba_j2@M2_YtEi~rn_%_*i+YIsi!4pSa^D3p& z*ubL08^Ccm$zuqL=uTUl*kTSzDACmBDmSS!?)|DzQ8L}UbYbF{2=|$TbfS4qSN{Ha z7o(UpxO$oU6VG#IJ%0>kqM*(!qJt)~V@G}D-0b<`PP|gCu;2OdMYD0fJ*)@rZ68#; z-S0JXZLUAr|L`l0Ylz4BApO*G=$>J8U@&T5`%gN^r=`juPRlLHetQu6wpCBNY=5|Q zghxgAt+lXY)8xZQ^jqCNi`zNh!AnG!v8mVrWexDVo83%A*6!br zo>h1aYn23yt~&lEwXGNpzW}sZd+t(=^Qs=`ICoOqMrV|N(ucx}5J@)p{6~_dK2Uqg z!sz9V*KV`UPBRG&`WrMIJhQ>YqxaU{0s$HaT@m91_qUAKyyQNTv@{fX$R{S8f-V}( zu5XMkQQyKTmsDd%^JgcBBJsBoc z{L_thYFYzojdO#ft;LU0y?XqM(IM`yU_0}O)grpXRkBkIE=yQZ>7DQ!!I##T^=C#X zFkS)kJZM+*WfLen*Zh6dJ(+m!H8GWZi8#^1j=W~4TOj1cJpvu@<4tZ1Qt|#1_aJ)2 zdiAS#^(L!Cd}i%|{dSonmoU&Tc9$pzfSc}0*+Z?Y^Y=#GXsQAl_&WAfIYp1TYA*fp z`s=?MIp=??{MFDe>pWf{OETmmt=O0=5X>@HP_$^TAxaVf`gy3?uotSl>(rx--jW(= zfmnKqPxt3~RV!S1=3!fgg&%UkUwRt7?jtHrhlgh3r6>Gy`g0EJjJ)Ddj}35z02HB* zxjJbwCZ?Db2O$fG6b%KVQNwWgeGCQPWc{FdK3;j&`FPt&5bWk@PRY1BzTw+iZH%kr z@hAn9m$aar**_C?C4?=ieH{h$;Zz|T2QEwOCN_=AP0lQAZfZ((bFzskK98BdWhN$l z58r<(N}XD_H&+QTm8g7@oo1J5GhlV-%yXf&h)Ca=@|7?;kX5M5u48q6>@O-g_OLuv zU!l4h*>6vkY#@zDx$YU~DdiPO+=pFP4N`k4`A_8nVP21(BE> z)g@DAUXbdbGpm^$=%7XHF_7%Y-}Vx=NE$*LsA^{xv>x|a5GKC_^flii5Zu38m|Z;UZU=&2 zUbK{Edvt5^Vas1m3VW=IPnGnl8lLZgDGxFadGBL;G1mw&^NNXftTG|d}d({IXGm=|992IjrS*D#w9qVOXHJK}Qr=eJ7*_k3SM zHHn6wEe?kZ96APE%jJb4iK)E9R{S`%0r4a&77{<5JKF8~;V7fgeyWNN75oB}4&~WJ zwUR|Q8kwxt; zO~Y=LogoYMtl-q?T{MhNKf+Xec_cvC`|@J}pyI55ZRFM>?=-YN#ogfT;g4FvMgT;0 z?IDw2mOY4%F<6CU=fY{dezu;w`!)>#oYqSUmbMHT2W8%(ylm!z$5V$Y zWJ>Cd$qx*l&M)nB%nwQakaYtUYFL6t^ogdXR-~OVj&yB`kG0Z4OAI`iYifcoZuxHR ztJQKGVBI$%p( z_&7S2vTr8jXtBa=(s;Jl{z$?ui0Z%SZ2Gc9_cYh8uu^K;NhXtwMbu_=XewDNQg+_I zQ06kGWm_PL3Vq%@r>hsR44M;cLKXYstmLLt^-6N8*Kwh5g#0o(@*>CRb1uAIcgu4B z7@u!ovS5F2094uzt9i5A?rO93`AGaAIOJ1!XxCgDJO0y{>?RNNm*;}-jINDsM$oV! zn?-QV+SOJx%K*$4edy-;;cQaKu4$-W*IdMbj+>#b`Yw*ePeqOxb=?nHN5nfS9S9Ac z@%lmfgMCg@LWtE0ltHY0@arcQ``)E!T!M7BWjIEy=yF6u4en$)hfKAES%0sH+R7U( z9yy6}_=3$xX^ex_!J!N@4qkcJhHPimvP*;f(Y%-If|Pms5R~GD+I#wu#9<#@^UUR? z;rUXz9p1&c%WQ2r!gq6i{yDV}p{mML?RJfGxM>HVVnl0m!|6xo%6OvJP=^OT>%AqK zKB5Tnk)m|u{fXCUGX%_g1M~juQ|D7452_`0ZYEbe zDY(pJHPIgSHbGQZaS8M$*R5A`Z^@BN?@C+inRu#{uu2x*Ljwj7erA^)nR`92Ykf*^ zGPRqMo8dOIZ@F7l`%q!8(k^gCXSu8Kz0$jWB($Qk^~ttP8p;A`9hG)L`jJir~@!kdTeqT2Q8eEURM1hJcuZNOK8l`AI1*q8y=kaim>|co4vR5s_7Ke>hwI9UDf$4)HL(<_^4;&0>Eo@ z#Ip6n*>Qe)_D^jU+)}J@)7sI*DP-;HBHUqPnj~k@5_$A6eu)^$b#-;4{WND9X4S}M zbdK>>z$+q)d=C0yK|QfKS%1To&y5b8BBUfH!t72brng8mjmV)rPjX1q+FvOm=SK{P z!NvRw{c~?Nciz*`sQL$F5aZV40Tq>{$i6%BH+>e;fQiLf5j@jYZzrYs>B|PAh?@0U z``+FdqVSe|JRyxu5Z{@cLkBpN4fsMDx6{oy``IuU&Y-pvs$Nzi&29gd>W1>v!GBO6 zqib>!@&#W+_4@#61rFHJe5{9+QiLP0|K3a{`@<0CDMtl9R<~Bp18=k)8r*| zIB3h*59zdN^Ntf<56isdy-$r|EFuNKEk{N8B;A#3j?7A7e0-=(bToGvgaB3T;Wx$Lx zGf$xOglNOJPB6G9QOoYCOg5bhI&$k62bNvt5PPFhhHV`LSs$a+Z&%UA`SiD5X125x z(>a_s8T{Y*(%27V<3lEx&JUhkV0TWF5h(Sn%Y)KThbcQ=t1{MSd1t5mXqiqv3=L8E zj2lrzdqwhdIzDry%?ZrOOfX);Jd*Y|*G4`6@2M=lo=N^%wZAC>&`?u{f%o+S{+f9T zRsT=zJ^$~N<^oyaeo!lwlq-TBrvk~N72wakYcv#p#a8JTNrr?NEABjtpz5R-X#b)p zetA6Hr5>8tc#qN~G3q>YU2wPaF?;um7ed_glBX;0^r+MT1-P%(zg+kDT=o8$$JcKV zMx>@-9O)W9|9@gAt3ntN=3dT>t4_Q56`#oj&~#%lpu3VFJ=GU zlt@r6;o|I*eISvK(EWI87w~0M*7T%|7c^urRpmm8PDzJZ)KRdHI5|&$l$zQ~R_{kkR!V4ecU5~1-DjK{_(Y$<%TZBqyZt~jOq@z@Z4d~z`vehbP1_F{% zpY4%X@~XD&KNk*pY9l!-p$6@v%Tn|Bx zFW)wy{drbUH*xI9;n&U%Co~tAoh3d8qJ{TX;SP=pWP^a3WR_wzPBoPZ{aJD+rB~`?uo&&lQMaC9y4)yYPCv(0yk@p6oct0U2!}4i2J2m~{;M$T zSDdt@w9?;hHmEkK!Aa=(t>1v4=Gq;ywenU!`Pw_`)DJP>DkU6_ecSg}s)Tl4kofFs zfK=*}yN9bTZYosx@TcB9cNvizR1c}a>vr^*cI$7eZI-M$LMo_GjeWB+00s!Y|HG2U zLH5J(x}sn1R@ck{%k76 zw!z2K?hfOOjTYRmtc=Z}K%%D}3Xa;%v3_OJG%{gsJQUP-;Qo^&(3y#e=mwfylI#Zq z`?a(Ejo(*)8Lj#dM8`UcSBeRZ$=boPsdI{{|2%giKDBQAo~`2xUWU+%-MpenS`Q!E z)XbLS;97luXtE@#JJFQ*LZrA5qgNvrG8O~72>^eW2x6#cy`Lr3to76r47lj%O z724^RaPD*)j!xA0Fb4QpbgQCk#;K6R5z;1X#dyorg?SnAmBhlIwAGUiZz6<5=y2JK1fpuUW! z^*&HTu@i1nLtDcdhmDo5(8l@To$!QT_WnaZ4jcVTwS+uTH`KN(3WCcbj!|E~N*7f?2kgGo^ z{zqvRuEJ%Be>S&bZZo>Oh665lRtUeU9C}|Vc5@d#x`eNee-3*DIWppzGO@{gRC z6d#}Tf}c*E(NNvV`cL+a;SV+y6Ya8OE6h}J0t6j(xH6;7K+aJi1JtpHP0{t9uKK!`Dk$3{%A93L^%gdIY!%DB~9JVf7E{P2eMOn zs5LCpk!%z=9sCMJx)+`LEH68~HjP_$GG~TcN>^Y3eH-`-_}ttBCuNwPFw+%ox@)hT z{z9_F#(lOlWlAhkUXLd-4WECLg(s8Yk4~9%=TDO+bAM{U&AAoHm(9*3J^wZ$e%}=h z2FFKuMPWjf3jI@CcC<3c_^YMK{B9VVVB-#Fp~XF}h^}j`JoJz&+OdH^kzVG>&!Cm? zs`<&n@XGk|Q!B%Mnyz04sEtcZ-P`bQcfz@`jk4x+v2ei6)%1%!odu7z1}0ikVQkaU z1nbO*^efUtR4gTiIGH6Lvg^S8Tb`HAUfz@Xm)y*F9o`A~J$wbni1P3K>q_&(lry%@ZQ8Bx#gpV z+Q%cL+0@R;G2@H_5r@W!gc(aOedGMNG>&oN7_vavncKs19%qA&k|9nuSfn*`z9RjW zc=c32u$ENhNIOW=&)QOUnW-3AE2oWPBLqHf{j}z~KxBPQl;dIpzhK0K^MC*6WN-W4 z1Zk@%u9a4qd`EC+6Ds(0KeoLCQM(maeZoCaSZCdQp}a4ch%CWfsQ=|eM%Lq$OcH+; z3W}kB9M1ohANDi+NxBc zd}e-?`NmN&DErvk+R1JX0#}Ov*$Vw9#>&nGlpFI_b+W|j%kySk9<`YyqqI)kJUD&t zlKS(?Lb>*PiS{V%!gPDMT3u0nq#ZUl6w3;)K20jqjN`}r)gMu{)ohUV8R~GQI1wd= zM3`{>R+mf>+M01h*6^V7 z@(MR@vnrDx({eN#u3)E`EBvNe&{&J%#SBcMV#swSzs=xt7+x9KVmsNKO=8sy)weie z+a;3ed$BZ1_C?B%irpcHAPj=fNR|7K;vjBb)lXAXQ`D7q2~BBeuX&zV$!5B$AtO(1 z1xgC%;$Ai{3QcVv+VeTkVe17J?LwiAPyvu~^<9V^% zc{M1<=XkKmP77lqKd9lsXuvP2)QtHdel99CkefI|0Ifh}ms_GIU@1yw(->8N^Su=h za^pA|>GAw|pq8-mZpHyp8veOwRe(rllu&8W`63z?g7))Wb`?>_&$*op(^gi~;nXVg zCwQtIOE%nj#>XPy8ENrx6T^JoI;xdYrzl@@{ z!yL19OOqqoASGouq*biKa(S^7^nE?NrWLK@MU{U|Yuz7@gb0Ds#S;~0I<`4NSK9v! zl3q%8l^m-FsHj%OeY~YxG_l01JcN)7cR`B)pWXE4SGPCJJ^tEWKGS4QNTDZ{?$)U# z->JfSsBvyM?!ifarmhFOG+EgK?h#q5ZB|(cA~I@)P_9+VUJuPy223WvGAzpW_&s#$ z70Uv)rc;WOn)Rc*5S6q3#dS);SS0^g4*lq7C{|()Wc4(QivDUhD&8gY1sy#z=SBvW z4RQid>+MGEq`Gd1Q(?H(dA@ezkvD^~HRDAh%*+*M_(1%)rSg8x^)wkiHK4otu1WvP zPmES(xTfCX(?rVL5k8nVdS;f0-jqv2)emXKmZs6*_MsB)b7<+r!Dsgya%4-3X+{SioCX#eIq%pmd1ee@20?=vQN_NyqTuN|jIc z(Uo<2_=-ozUbTajgZ(cyQi3-RL=xRQ_478q3q|Q4i(?mx)1jcz#O5J23fjE+zcS>u zA+UY{g5!atIB!yQmH0S{_ZeR_;i@a)v1}rep1Ibd#^~W6>0c$?whNr6e9)=wSOZDi zs@i*f7moTW?C>I!6p7?fhiI`;-kZVR*R&{TnD`QgT0cP|#XPF(yVx@JKyW|P8 z*22bv?Sc71^%o4IjB@*#GT%JV^?UKmsUDWNt*F)|JezhwG+JjCw`ot$8i0oCd~Yh< zc5CR{sGdVjJ~XseIGK3n6XfCzP$if@1ocm&lY3yR`0O}3LwLrf_hKsKu-gdVobf4zlBIuGbH{k;v@c@xtv^+%|p`E5MxRtVzd?m zb_I4D#Y2l#jQ?Yh=L^Lbt;|W4@3;z8uVidvx%H~jgfq89hqKiui)-$=iqi7~%uXAdUdEzx8WHh~531ofv0dzDpoW&%!KXf@= zZ2QXtbhJOsqyPfh}ZQaLN5PC9$@*VnkJ_a^Xpe!^c**3Gt_sLQQy>@ z%L$~SBu0NdqkP@yN|BSyH0;$bq9zn{4PQW_zFYQSt3gs}R0cG*uQ{qunK#2m}r0N}2C+&Kn5mh0({A9y*cD9s~AzS}& zVXeV85lkbvgmd}08#!4>8UIqsHnye%y9G1_QVPcZqqJ{?Ov)y!gmn<|`ZQGNJG6=L z+!!`*_K!QB?8-berRIv|<&MjB=gCy(s#d(ELu%58+XHKKMvDolC`9~=7C+N905t(y z4N-a1r#ZymE{v$j+-(K}XQ$7R4h|K6{Q%QY&_fIh*<3lt03@^z5un7UIV*2gpBmuN z8EcFu!1x}vIi>M7$fJmKIJG9{A(nz`#U(<%4~cF_MUMYNToEVz7n^?t(0?To!%SL| zBQGEBw2REC2*LU3yVuAMdab4t;h%qU*nz+C99*1U+{4cHWvO(v5EP%{7cn%g*>RGB zXn2#W@(jr>7^at}JWTVS3?yS-xK(MUCQZ_ae=i(Zpnl}HN_q9M3-*2_vPBm>`uali zg}K+o#+qMkX1QX;(Ybj}3IBK4fY>lqS~O#MgV#Vv*?W`R_+aD-Q9(-h86TomsRGo9 z=MM2dzWjxKwyw43@=GTIx1Cn={-a^yq}GuPR<&m@K{|_U!;@yK<=)aNapKMWLrBKG z$LZ;QHk}`z@Tf@w@b`yo;1_elt3us;qc%N-h>H%dyYu5;SKx`6Edum_xJER! zm3xuD(k=s9VvCrWkeSSsCmV8iEq$9&)lz#~ZYIbE+39S#8ShY}o=SSnGnxkBMIjlb z?JrX>S#KP>1nb|BRKq9Bc&|uI;o2PYW@JrjiVyjS49mVt7J&$JRY_C~JOC0l7@y3T z_z^tw^2FG!d4ox=oR}1%51OzdpUzWOmapnf%|X+*jb-m75wrwNk@KYc6ja8m!%ygs z;jhK}BanZE@W18MJ(pGW_bk&l6&_@RcrwS9G0fwZD@(`}kps|`MiK&2`JBbE$_V9U zl{OQV4{Z|hhrJ_&ML@#H8{`RYqHx!AO_FnS`w&xq(J zj$U32iCl%K?x5XY|0A(1m4NeE3vIc);8p#oMH)EkriNC)qFJ0P1cUOP)HPWD(Tuk5T^l5#oyc_TmJmcv zo0Lqp>pTwQsYP8>nFU~q!lW7LChOn`J!OPhzFI@!JQdt54`MBAhO@_4tE0TD90}x9Mr9>;bv8RaH%7+$ zy6e-(F_5QAwi4wtF?afX+)|5&APFpv;jcDN1lz?hKk;}iGlC`itVsV-$ZDRW3smXQ zN<+%nQjNcQ*T6S6S6FJuk5UOfS=-t9QrX1u@jBd6ttMnTs}h~!V`qEWeC|(Yi%d>` z^Oo~7Q~%-D$=&IE`W$V4y4suAF1_66Xc)7lE`Q9c72<}g^`#>FcwMbLX>x=5?n{H& zPNqs^4oJF+*MPx9AH0t5(oH=zfSsR{d>gHy=^8sE*aT^f+)pUxG&am{%B$rnYE~=( zi<^0m%OG2B$R<>(KohT3IGd>~hEvg~h#iE4FaRLIpk-u32UlR887^AJq^7+2jemA5 zeY&;r4rhoHkXs_D_1#tWec+9LF7fW^Nz=`@G3)`k9_0&}c)1zgsO?BI_4x`otr_t) zS^(yt*2K>Ior57a6z2HO>_s231qSe&I1$=;y99}lw^+@v=h`nonAImiZxf-Rmv?U> zkh=HyqE3Lefw1lbtov0NvtA#@{gW_mbm6bY!V$(v)`ye6DetCgyWBZrfEX?Z z3u@5>${w&XQY2-lP3H=wcdPjq&-~Zqw+iFmS#Yv{Ya*QT=izr=H!ulT6XAB0nd@B! z;r5k9C_kBRbZoKMG2ME|pQr!X-0Gz)n?H;NO$q;TiLrJcHyxg(+*WXQ-81E(;fLPI z`~Dpjw})E{L)lx5vCVl(_|2a3$fvnFz=*%t#;Qeg_~4dOxC&OlDT`&{8*Wupo}Nl7 z)hpn3t<~%g4dt#GW+N@#a9$VB%ashD)E(di-#h*qBn1;9w#fbC)M~P%mg+WobMw1S zU{J3FLB@q3C}+XEqkMd2k};W;b68gW^O@bhdayEckXzaJTPSs|TK}+qJl#@O$)dVH z!*3DJF0mkw3wH5kL2HUepA2(wSZ>AE`}s$wos5B+{8S&NQV||3&4Q#7qmR{stYgxS zTr%$yX~gV18J#7sh1fzB*pOm|VruV$VJ`pDQq#& zzhz|PNO1b!vM-`l&>R1JLmdNzkh~&DVJ5j7OrD+rEizA=bg~#-6Gbq6z|Z0?+%o>; zb)-SwANjY#{}*h~ z+GF*<(#?DRRODVgl;|H!z8sfTY}mGY$RJ(9@lku)Q1%AoAiy}@VORiaZafHXlrfX` zyVuP?RtlUV{SoF|AD=*06hi32SaBm>k;|8{vJv zRg-OVIFKJGDRm6hR932FC>v%WfBP%y6+^BBVkQY6q@6RO zqjy#N|KqiSXRpA66tv#kvhGoSL z*QmBuey2^{ygJW@ovIdu8S2=QiCrpd>+p)SP>3LUG-pt~pXAUZuOyya+oAw=E%rg< z;&jwKOK0}ugHK?VqRT`{)^{AY&EEu%B1FhOxDTJt&MoXbf7E?WBQ5ifEcf;_OTym% z7p>emsPo4;l@S-^NC>Wzhgbuvt5LR#^?jg%7RXa+-p{gNL}O}}S-8p9cB*Ll)t@ytRdqf}Y$hzySZ=_(#ZP7?IlmE;lGk3Bir3N-**3Pi>V|w)|7b5W zZx=_C5W6KNRnfV=Q;XN@Xa8ZB*+9uxavkJuiI5=`db&}{SgmIUR+s#>QDX&KE1Dt< zimo24`bRBIJ@gT^FCyKce*2EEdK4-BD{vs$5?Z8Rp|ph(P?C#FVztfU<2!Bn%ysU6 zlI1#@sN_^pB0BB+z3~^HW=oK?QD6=DCa+Y%GL(Z(lau^4ZQs^&>?v;77ucoeZVa5& zUhmFpNaf4dw+UTQk%|eBF!ufY#5Rn4|6_2kgamOYb{Nx3v_*T4+D?amSwT!H6s6pr z;LznX(#fq+K2cP>k(_3r$7z^H`I|yp2G@?Jw4RD`+pAzO24g(!SNe}d|4WIn7i{rn z=3TV%ZKgKv`^rC~Xu7rYZ2D;22Kb9(NrA)ry9eJyxYEl+6WbX`_T|O_%;*j5cPK4{a zZGp6Yjzl1P)-c>TWp-r?qSJjT~b*ZCL07JIvmeoWJj!~R`op~;sVg3Ib= z@^jF8wMNMeoK^j8SeE$cy}O%-gV!1NTj#HI{VyZl+6?qYxBo%97(2D%T-A0Rfy-id$)uGVVD*Vwg#sM%COzM zzctIuI?v&;eL8xe;tExb-rp!zYu*;x9nC-9@^%FX?864uLna%=RCek-?3!f&oF z?|6Q8z`5N`ME>_9NpJ_Ir+)cz>_DY14rr@8c3x>4^h#zzFOOONvXsuIIsd=~3>i}>m6;qah18Yx)DJ{#D`!N7UlJoGT|H2mVl=3$$-($0 z&H#7_X=^IVj0y_Go974%*~#W5zoKjf6vppM6_EE6=sj(7^+GescN422QJ;%z9;eFj zri&>mLX%5SeRGopXJ|6#MKa&ciqJ9cI(zy&wag332+V@rSVmMfws9ubzgN)eY|O3h z7M*B2Nf5h$tM82o)?761qBB-mW+T#T1i?#5fvs4Q*_Lr%pRD0385dBG*>cFMjCWkp zpY*iDd9lvyEfbMTi_^0Xd-1waJv%ZAClvHNG*CzKb1Zwpq&(n;A8F`0rEqJ4NN5xp z6z`A5!y9nkJ3lTYYwfivQKhB1)w#lK~m z^g@u&3%$l)B6@AN91J@fX+g0=gXBPfAm$uhFr)7r;FZ)uV&ZpsRO$%M8r4e|rbMX6 z=Oqk}Vk8FiR}~d1e``mIx8iodEWIZ8Dc*>yjITv-LwrZ~-QBAcuTTAz$qK5Ht^9kG z47s8EN?U;YFH(|DuQFkr87h*X=tQLS$YN*{H<_)>wbbdOaVblOW;%DePui z<#LRCy;~GU8|?bONv_F%2vq1^5TLzI?kO!Bxb-{N=MM`XWKTm=_McmiPgJRyI|Z|v z`BponRs5(C_$d6OMlQIbP(r@3_Upj=eSW>IdB~IgZ;Ct#`AT}>U(4|p?P_!a+Szyc zkSP+FezGTaENq~R>=t)~O(+&{v%jnxa$tL`sJR3Q6+tP#fF|+}d6tDDW+Ffz}59UL~ zfYzfEABbZP8ODz_3W+P~d%~@<~R-5N~CX zjGD(v@~QOBJ_1L`zDH8mG30>hyWQJTu|g5AN?bfhwrSk*C^2=&majB{Fz}wrxolrx zAa@=FMGk(K3t86aYmnW#EoOa2Ti?8`OLz8_399*$60y^j1xMFzztUU*eo)NF+VS$VSfA3Tvv=0C0XRU#76oFc*7euzg#|QN?drVq zm#QhSsBG@maS>Qca?(Q3c@YlPoUD2bW3R0nR{dcew018d7OcsrXqWTv>X7`L$reTN zk#1)$5L=cFDtvV%_{}!}GA+$o*Qkx59IwVvL{0+MX&T5E(64QQ7Y|Y}x{N=RT?qBi zg1rc5z9`Imjq8ma#IsEYp`&j)0O(C4K~{PRH=J<@(zwy2ZKSRU!7}h014`67z)Pn` z2l3u_ahU~J06IwXk`@1!KYUU0>CDdg=EfOxy-W;?&4qn@!7 zCMn-|h!kT-4N)G&6!1earqJ1%KZZVbe2G^XPZZJ1ye?$kd4%h2Pu_UYAdwNRb{7nk zv88FDo6xIV+PWn)Me_T(=e}ut0GM|X#jk)CQ}vSA@RcNXRA|+`=z^=sI`Sab6}(&Y znD&S4NkUo>o*+NapBBD*FaAa8rP^W)o-gJ1T@?959Q3ju0bkw%4@nWfcr7552YUh2 z9mabR!{`lhx5c?-Puol;uB^J=exbB{sk>2J`I_R)*WYks;F}T$vda~KF<4AGruMNG zVq;u@fV8q(B)O37lT%Jc&;EM62sjhv%$ai>7H6uHnPBzV$vh#P5%MArhi_CS3Mj)0 z0lKE3tVetuAsY}>$_{0V8{gNa9DlN z(rp3g6?ZV`L3NZ*NR3MqyoYWNdEfC?J0RTsvNtXzw|)6l%9Ql=foLJQHf6o-dxGBo zSR4_VDc6A!1BqETMm_&xZr(r2tBm4it#+M|FR$lYNrL2_0d0N3!>NYjSL?6pq2yv`mWY7{#ZjxJ;l2w1LxBn@9dudKOMa zBk2ynoVTy5TgUdczyBg^mp|d6c{+o)(ggkuxlBl5z$$1LT zU%um>!BkHg>DVtUC5`Co`L(fYT5&Zr+iHT=V}f!ppt(Sl(8R%|r3Ize7oT>CEoBs& zqe(j2+BEnA5vW(CI0Y{_ZV?^KhO26AOK_g2xht~(f2&{h+! z**x=zmJU_W%JAIq5E#lj1R-_V{iyG>)1H`RBkR7ZwNMH*T#O~rh>MNzL8W2i#_3mp7JQUyg0T31_=k(3rlM(AZ)ocw&8_69gc8Y3;RS;ysJ0ioRIxXVjd{!?IwmXAlg;4$zc z;fGwi0!WwlmK3^3WmUTIPemQf2$*qxi`9>KOsg}mgbLWN;DI5xP^Y=#ONT&R8>|lb zFpJe0Re2ZFY+8rlG(o^X*Dh&gUZKZ_WNkP#> z`Mkz&Ae%rr3Y|&(*Z&lH7xAwNlK+%wDW|C>*;*bB_WcI=F;h0QFHcf@V(9ci=GYfF zg)||~lKZ;Pt%}v*=FhyE`M<5~M`Wy%xgZL{@$cRE-^*XQ7kEE!Tq`jrwCCcZJT7Nc zTXgPYA~TuA5Am;6B{ok@4NTR_J$CIar*2Oh)oe*tXRl8a$ZT{%%HK%_&(3B7IA|G;7&0Ii{ul8tv+1^TSd znzSxMPKXJ}3#G>f;BF$NX$rZ9s&dHZ*&?IK)LZhLt+zQb=moR`Nf=}wM6%w_dctLJ1p0n9EXZSC^`J|Pta?E~~zk{^bWdQ+xeSn`A!DqXB3 zjxMa*egI)j(Dm;9Ha+U?wWb8hB!kxe$Q(#f>08~u2z9-j65TIdT-0BPNpEEy$p$jW z{4UtG3=XPEdtc2$nU%}us}`3XweAAJA0hc82yGvG&|@XWAzn_$9+Qyl!nfS@AV&~s(+X*lRb zHD!h3_`fJpPUdFqmcV2(w_%88a} zOAnHK5}oIo*zpD*ery75A^M>6{_~GyUg~my7&g{d0G@gHHv!TT+xEv<-kI$2rq%1c z!Q(hnvI(w}vdy<#XSs&9oXhG31s)t~#^n<#kb&L5jYZ9q%&di0g4VWX;m<*>je!8Q z%L$NO$4u44A^!Xn2n%qknWTLUD3o79!y6d06VXR7*FIIVlPd|=m`3+{S5L*c0rda`h))~PGS$mn3l7dg9 zp75{?psN9*8z7Iw$}mTBQGinh_Isx8cS4w1M^sIdz!&*IA4WrU*?|Mm$i<{tf&Ic9 zH8R-J!r9m$z6SKK`^i?>6jfp8m8~g2VubTk|LlGLhyIm_`AA<`MPDiVn}ZbXP{@%f zF;_M5>^=gDwW8pxe9}Am`KNQ4={$h>#x1Yz&Hd9I2q^fc{i;Ai->doV$A<)arj^gK zbN&+t^>4UT1ig-Eopvy!#WQx0c5e?%qkY+o&i+4`3}SU{mV~?4Ch(*B%k}N3qKp9} zc}nr9zW|NiKY#{h)%hdp>}jC>%1!;*pm9u4G(Cg|$C;y?`{TX=rWXn>nMY*$ApC6! z9UHl%r3{N=%$An8mdgZQO})T;SyePIS5z*qkDi%18{8ZnSCUtTQcKvGvj=lsph2|3 z6Wmzu#$kjMon3-VPdt{{C>qHdBt@Cxq{Dl{k>M|A8$A9;RexSQ7E{#>O!sPapITo` zsU&%XnG-b)0)sz^Lm|BJe7!;vaJhS5lt@7I!;oiG3*lD-SjBFic&%SIKU;Xs8m!a1 z@(T_{rm8Ms5kCebmF{PKOKQk`B=M=ZfAJd_r#~`6H`qM5=;bq>y{`duUNlxx8e^IA z;mCVnF+K$Swkn4G8IFWtXq8efHu&^A*=OGBG%&+`>y?=`)~}%I;0X9mcGw*3XoR!F zrBQ2uJn{$dK#7&HPrkb{G-OwZQ!h<_wl;vI%@D$=c|H-EKWZHCc=Y0Fj5b|rp1$hiV=yC?&nwnX=Vjc3_XBKOseW01IJ1~+lJ}6S zZj-y&L)e!WisS~s{BM{0n|=C5Ow$P9k&`xmsQN#8*_Uu1TmWal_1X4I{9REE$gz-XKeio=km@o!}%VOyT^d+ZQQ~UyIE)=mtRmNWag2i zPL}G&4TZs0_Imr(R0DeW6*BprVb9_Fwe0(Ra3(ReCCY*ld>eVJX%45^vd?KPUw5`O z+kgI@yS%CsR+!ZvX9BzBaGcw^^|@+vJRIS**-q6c`FJL9QbW!6Y%(Gc?QhaHuWVjx zYU_yy2&`13^-*SK@H~(7Hqc8{j{KF}G)KYHj!s3fj6Nf(vO4-?W)yZBTm0)R zYIEKW1~UtVlB0H-yTnfd2i=2G%LO@$lG$yntM_me7iCNU!wyN6fMxRmGB0>tjdW2=6V9AWLGY+r4xCXk z=t-mM6=hzcm{s+nPbGnU=wK8Jv}!wFA5RMXc9`dZ zqD5<9U9rctVV?&qJman3P*9Z^06v#vW%TFf`-fb$y5hwNk4gSu`$61j?`&fqcj-aU z(T_Vk8W@^6clC#%rEp{83t{qCM%Pb}5nqg<15f_3JW6*~SmJ#ZoL2bhB!AN(I*j4} zVMIJvI{w?7UOMFyG>)vCuggth5q_Cx=Ek4sYg{oy3o z8(8pC9I8V!~@z5&5Xk0#(lc&F;yh3sOVoTX5KSq6K|2k`xj%COt{Vv`@=tp*4p8^8Q z_g{d@G41<`c{WxC;{-;?M03>sp4G)M)?!J6;NcgwC$sE6)pjKfDiK8gI=r4;Z9DpUC4x1BEnrwUk z-BnD1eAOSf$iTaf~R(4MJpC#wNK$HLWbP9Tr#n;a@w`}bgzd(T=a062esS)TL>8OdAcSeH;o=cBS zH_$<}fm1I#I+TBql4%~`w!W6sh1DW5;esgtoQ%Lw{9es}>rR@dV1Ulqp>X2+_VC7F zhA(Fds~8Vjj;EtGPu{ff_&vb;piw<&R5rMg<<=trLSJ0g=%-blI54RnUs1PQ z$nQ`Kp~#kjUJQa!_r)lxtIIJb!oO;ZT|k<%rDBwyVYrwLyQ*cGC=vtq9Qu+C4!d6GH~K|Ew^RAEhr@xc;BOvV zsGQBd(1U?}OzHEfdhMzllwzFka|brLJ!P1uLBPOaGpl>@GO4=qdb*V8J93oz%fu2B?QZNA$E>=$ zoc!XeB??Fn5=}d(jj*r>L9Do1Bx3KQALjj6bWf~{>uxEIC`V%ycQ#2rzlxZG*?mL< zDVN@*;&;>E3qKH_imDRQy>jjV5p{{*BpTD4oUUEqwM*}c2n{Vg6(J!(f?GcvwwTHz z!ixSUr2z}*-pdDB^Z|4Qw)0g<)DCc{u1B1|8Uw~|5b#bzE&P!&FuL3WDr+B#)fzu_ zzQWwta%Df(XnmvDJm_+fy9610t>R$3u=jL(ci+mK2d!yeq$8$hodZ|^`m8MzxCNyt z)~sfxy6ove5NzEX&cXQX=nYRbJtGRP1M=pZOy6rHNlm&9wf(=nnbB5_m1 z9nbHFyjRAQ@bgEUoS!>ICbEF<^z)p2|2lOw{awwWJZiGn$%-t-FfrYu_|S3Q^m{Lz zqm_Xq=?XjFLWq)JR#%AJDja;xSm>6{Hhjs=W|W)Q4Pd2#ftdf*?%jX?)B*qLey%PZ z_KmpWQBdt|?nt|#2*50NoloOS0GnMS`=-pl8s}qGvxMGSk#6fgu{?>7q@&f&F z!aUD!qLi~&J=q%Q4iYwjR^cpGFinTqk_psGJ;%*vZJW|Ks;QMv#5Zu-nhMg{47@kZ zs;OqGRyf`&r0p5~0Hn}e5^xHz2f<`Hec6k(B@{=hDGw(T(9^hPix?1)%(n5>(c5;v zI=7yhDoxQ^?96n4F5AZTia18I8|7ZaYKFe;O5+DRc?AHrnih$|pZYCc)uM1trvVi3 zP=KBsbUHwrUqA)7C+zNeyZQa@AysM4O3+KhRz!IJAZ-fz!r_1VhLU`;_bL?QYB`;Q znH&ZB;tG4h&@e26bFS;tdU|21yq8{#n$B;V z8%;W0sOxo|z1-kc;7+*r&c=QD7XvD+CXJKrrK&_h3sC{~8&TDZM;^~jl~+gIRd(kf zZ-k%W6uN8bT&S|%w5O)L`I5J?bnp_e#5sH=*wBB3-0wEb@c&fKUX;`y%g0o~u7MI+ zE1R6?vPQ-dKm5|$Ii;O!e!4-m$^JOa7_cHN6gqy8enlFskK>xv*{AG;wH{{stObi( zIn^%2mLQeOnnWrj74>5PciM=OWV}T&XBfa-+ofQ7Rn%^H=uF5#gC<$x+1;MI<6{I6 zq)~)aNQ49d+=f*Sp1Ifu={Gq7sM#@r_XF-R$GSm0_(kG3()Fsn{Eqwi*f{!HH1;Ek znVOnI5oMhtRiLBF$}z+9&mBl`XhR`rT+Jw(gn)KM4lv0>D?2p9J2cu7%sx{-qTWQl z7jsez7X@)CiDhf>+JBum?VuZQA#KwvyC~#)t}D79a=a!hf62qq!x-VcLkl<>7qLu9 zS_YZCBPr@OKWS3#TX&gLp7XxPn+b>b_iDIdpW~_1rEbJ?BNdV{fNPchiWU=g4YF~H zSxfa7;U$s>YC75Z)`zI4W~IXS<95n9BSmx=nC|_z88V=x58E-UhsQyXymi$c$_#TN z#k@$^8#a2yE`Lh-cA^;6#!V&WNJ3;Av!~4(d_^26SH%KBC%?ZaVm!O|bGc3vgq@l? z`=a+>T2cDvD3Zx6Ad#xZ!Lc0*37mx-Q;P=-icewy4tju68!xGeJOxAa)OydF8k`^1 zam`+rRuVdFuj>4+9N-{@{H^}l)V)r5topbQ`6i8|WdB6_eES~p?3&|tK*PYGL1sjM zMVJ7sQVW-iQ;b(tpMpoTSe|cgCTdu*J}RpHsmeMPu(rOBrLU$J+Hws%_eWI&VYmd2TGf9irwLhmormD`oClwq@J_XaWIrP=x7RcP!Ug_iEIvd zkDA5XT9f5VdWIk;i|9orCC1bO^RUI68CB;@E9s>T z!sIgLrMZU*ae+=Ubq>dN3IIyxmBYU*QD$bbyQ`VOKG{}-chyPq+KR?(3`>9cV|hq2 zIqJ|_)0xzeY_Dfl{F zcDvR>_2qzlKblhp_^A(b7lRgi+JMO;M_>j>HV3qrdZG8v&g4)S5fsf_8z&}rv$J|gQ|KXzbhpN< zpM4B5cD?!9E_5;W$uAb=)16W`b~h7|a^{>CG9PMYdQ?=4@ObN{eqc!|)19OQb}@|Z zAD+!yhZr{ZU|5#OOQR>!1;s2vS-tQN|8eCO0fS0yH8pMu5gAU4BdPb6k`UoLM|%J; zgNWZd{+Sj69K-}ca-;wz81n=E)(v)Aa^;zIsftg{H}*Fc^j~rn75TYTZwYm#xp$eU zgL(dHQtux(uS@^6a0|%Z+$mwH`PE}1oHTzf&ejO_#ig$KY-i&S6{qXS7d@w=__B#^ zww$I=CP)59Xr}ID!%EG^Pa0$0vl)iJCwJWS%;uN(oT1hngy?k+$3~2K4G?jN9p35W zV9vDqmAH=;+q^u&yyfVzi2^|Ea_dy1$ry1*8NknT2k#r{-{7peu{|c3$xCIOuvogp zdzHd|j@5ENMuo6G>CQ!)c{CcJv8tDk__%W71ASL0t3ev!5q0GLc2+^nt#?QJY&Oqm z-hn0fx|;1*&683P;y2aXHo8jQ>pCcR@h`y^pI?5+hAl0^jHDn^22lsto%BPx?C^UJ zWw%!ciDWYCNh!Z0{eg_I`p9b{BTr9y)0tg`UtNd#(>VKzQt64eMwwTc6p2n#9zIdN zZQh>Ku{&qhFDTrT(;td)4CjIM1U+vELsdu?_0tfXpuviZt)I_z+{Rhj3ZnMsKw5eW zhRA$IZezuA!Z)bXD@H1O9r3>xx4YY%g?qv7KDX!Zwze>fNvd|0Dcn^gNHnJJxGeKs zaC9}F)imKNM7*ivj0|S&!mmo=l(}5K!IPl8BG(n%HMOnw9N_mhYEb9GMe})yOF;&- zsb0*Zh1dRa6FHn3=eYZ(YKJ38C(iGBKJpV$N>8TljjdW+Ie@kcOx?HHWU}{i(Jg!9-GsyIr)|F zAZI*Pi6>DS(i0_+lR<%e1OQitINY5`f-VK(5^l|+ zYTfmIv5i1tc`Nx@*eEt{ce&TQ;|}{(S2^l|6_nD*?dFL8tc&v&z5wtAC(AfkqP2EY z(pYcZFZ>I0j-aIf2OP>jSC;=LxsCr|-T#}5RR7wSk9ITsr;stZ@D^L1-&J-8*2<U;(S%w&btwL7f7bb)+MH<&&DNv`cNqx^AnB1(1L`%xR#NVbKb zhgC6=v?dWtypq`KN`x3=y%=uFaZVsmBW^^f%S>?McopBH3LIa_k+7cd+*$t&>Q#lo2eAljo*qnE~9yc7e~@VAKT`y}khDcUC^d zPobA?q2*gL1()`4vf0L+gnFr-w!0H^jWg3k$6pkhchR;+N7)vAg58o>E|3nrHKnBO z23n*X%Adg=)4}}(A7?cJ6@`_r$@E`dUvGmIX*1daAi^@$12=Q5QB7Yv=4T3;wpOo+ zu)Csp_NQLhvUJJ&0tsW?WL^r*L|&=FgmpuD5qhBP72*V(J=pYeDCEl zE9>{EiT=-Ix1V2D2zhHt$7!_w_&}i81zBF(t$^b}(<|CL4Gve2%_rE}wvqpLaVAR}Z`k*)HR;RY-sz&^1h(3ucF5o~`V%>*A8s1s>mC#Ro2?!5#JNL6$Lry^ zM1k9Pecx}5G_&n0ncpklx~e1q~~`c z#CZWmnvok4hs^A01}u3}WV{PZ7M9_Po9~)J!K*3_c(?qv%juE<)+8~?hqMi`reTNr za1O_oeU=xlOL6kLaG1MG$(t=sma{BAy2v84+oapp7yzPb-{ofR?9g_wvmhCzTrGxP zo8=mIwM&Us*pPag;g>Ux`Nq zd9_+DRyVI$UP)&?3NY-1*{fM9L_hC+|Nj)?1aWetk1|=YWLWq8w&|^JEQ0 z+q;iMc=G*72cdArXAdYw}C%HbevEbZUrkDXQ&4)aNgn*(cyF_ zMz`fG@a*RgJu27x!gYSu3wf-!gIYf32jdCyuG3-9xq zvuCb5#RaE@(uD38h|;9~{q^4esw(*dmyQK+FCmWjEn{OQ80$~^l8qik=|0Q05Xh|6 zR4FTnXoI{hP7g5|VNhP^Z8>brvOaXVi#udF%4+qmZ~EoS(*+DD$jDemGJ@N(Ub$)Su!dnQ^V#__g@` zVj|^!VmLWsJm-g0YT|XL&5E(vjw%xkm;0a>MwBa~x_lVH^8L}_gX?|}Z&ie}1YFp| z?K$PA@cquaSU#a}o>0?`^SfGvh8WHxj~eaTA$WC?WLtp0*}>Ti{A?SM%bDx)3JOE5 zWf_NEUA}tZHt{+HcLWJnG4@9ESog;6R^=zRm!RiVkdF~2O3(SR8cc5QXAQnq2Ge(> z2%XPlhpo86Dj`C}JxH1}27N?42KyxytE{f(AAbydujm)!`gYKD;33>uN*Gt@26Npg zXbtaWAX+Oz60w-JyqNG+@8?sezU!V*U|3%?h8Jx8{Nkp2iR-C+MXJlxO0r#kM@L`g z(#5>*fo`fU{~XEY0;#t73fYuS)$o!UI7Ik~1cUsaKRPNHM?AIF@YixE?-HE43tEm9 zhzRiXM6KO|Kap>-uDHHk*6rn0hd4bgv1RG!?Ve63pZ zI!ahx4m}x)KrY$Vzm?=M&@pE+#dgOb%fF>$760h9)bJ6vn3YMywcDuvxP1gl~JbG#gsR`zavW=Q4ekE=bTsT+|c|_o7_#7ViO(7V9IWmLJRxHZ_9ghfveyn7hgX4^W8v^7Wa*@*2Oj?7g+Pv@Jjp?hUdMhQ4*nRV6 znQ}IVSLw~N(`{ukJ*Rfz&(GjGtXQMH)@5eb8>}ehMvL%3#St~wugkM?&f&M;PejBC z{6?0K!^goZwW=u)IY3VdaadY@(YXm+PhZr*|G0 zbp^%wqFgt`b@4x5l(cZoUc0P!_eQzReAE`?Lt1XLNl&Mm&#Kc)xPf8~QfT(OYW4hR=51D(aVJ?bz#nKJBY(KZh(vHG^*^^7^u!892hR=7DTC!qTZ&8Rn` zXC(v9aNsI8lE8V?6Y^_>PWVln-8rx=%M*M~@38Tvb z^B=5WOlbOocR>00z>zF1R;*X?-N9Ytr)F^>93blTzbO4f0k$mU-kQz@*;h+%1YqIX z-;@JZgKZ*=`ixRW^%sTRaIm~?1^bt5;PsnXVij6<>2^IycwMBGdqIYl^M|i$hJ>0m z7eDjpdLRX~CWJG2lzcTdXLq7fBH1Z$scXa>D4q&u5xEmpe=tJ0qV6>tgKrxK*WA;MnlANTpAQ02KA}e z_Bk=nqP1IHvaFRF>e$)wb?087kuK|U7rK4~ z58)mLo?-EVjPQvZ^x*Kb@@4PFLb9-bf<;*+?#;mLbpTHMC(P`>xzYUp$9VVu?@ENf zUFiFlPWv^+=x`wn913)_;1*VyNu&LV-TQ0b$AZ59&qJbDH*RTvw%w^mC=6bXU$$=_ z?w~_rTW_eqUjpaXH&A66qiGu6`j7{<%pQPkd zgsc&J`m4&ojn%W21ofbR^w-#OJ$CBCMr}kTFh@x(>fV#~g)^6?b6Cyg{R=BEhxS0oj8&g6eWNPU1Mf=WcB8ZEy4H|fS_n1ZbYIR z%tT%p7E%rtyDA;*7L>ixF?@!;g6oafP6!!0yW!I>2`@@gQ!HVpeUBl;W6 zhmYL=>Dg2!&N$yA=_-E2Gw52O zNHkRb9L14pltSEaN)pN@VvNo!%+E*L&|<~;i5)!o!O>fl*PhoHbT-ag zbrS*hS!@nQ|go1etAi-ytJZO1Ex3uri ziAK+Mu<(p1jOu}UDg!>p&!_A1?>~i32hRQ4)nWAI zApyDB#ZqETYExk8#4+xNK83chE<{9E0l%TizN%%c+JT48q4YKTQ_L>!8nlcTG^N{r zy*=aTC9~~cb9I_~o;O%l#R}ug3K)#BzaIGLH5c(gsB^wkHf>^o4lgVLq#JcUEaNJ> z^`7@6O`dul$)3fNzQZl##;rVcSqtWh^F%hSt2KNTLcZF97v=t%#4RLNc*#>|S~hOx z#|4|@Bvab-Bbu#>2y*hU%!}Sjno;O0!8_!Tr1pAMpAHgrMB&K^b?xUwN1NW5IWLRR z4}Ws*A3K=5mh=~^I<6u`cd zXwz%}v*k~;MxsRTK2Z+I!of1D|d#Bx@Mn3XQG*)f+Hq7`eY>`8a=^UD3KS|@`|k0D zO20Paf|R>xG5JEp<{R5awKF%rW=adUn&syk%cvfBBT-2f8D>8`Cx598RbQpbMdIM& zZ@_lxw?RI!!pexZc&;x8uTzz23r`a^rTcz869w|Ta44ABYBaaGb$cU0HtQ{TWmLM< zz0VHcX3McEecGcHRSXJiXUvF9c%OOo?S~DYQr8so^Qe$9)Wr?wS7*{}%AN#{CaOfm zJU->&7U^%N;rTb~+BbxR*=!q93K_e* zJ_u>Uc)h<_;T8F4qw_@u&yg9ZOKtdM0*_7gv%*s3Bf)e8VCqovjguZoxg-xtwLC!K z?mO~WoFuWf)b;H@RbB+~&AiSC=3~Wq5$Eu1TXDZlP(Fn+`bYNgE{>0Gf(_;62>$`N z`18g&9o+Vz^;ARI414NXv-(Z$@N+sX4|ySCUFK_a8!!W8@(oI_905TbFoD|scx#^F z-Z<>_hNY+HQ`w-KHi}G5bgC4gfDmv6)2tA>9nKHOj=Fs>Js#zUSu7mt$T})HuzKX+ z1-&@=BfR>VeiX|g%$BF2HdR!rhe>%(_$j=F+bk+hRh*0$RKFlm*!FqGX7YWv#U`^1 z>okr8w^_!W#Ar9&g)yX0-uY*rCVal=mspXv4=r|e^^B!b8dgU;<8dCGHPfCGjQB92Dgh08>9vp zBK^Tnd3GoxV{rGZs?cDxIT++DkUVBXD zkh4cZ5^m!aZF^!|B)9LX@=%!^3U1so#vI|d!g)d#;?!Xn+^nToY3v{L5Ta&Y7Mjd} zS&avHJ+yrw>v-fiyC>XwRjXDthdGanhu@!CTAQzf91}q{CoOp4siSBcHzgJ`o~*9%m2ICykE3!`{J zMPD8X^L$CAmb&i~F_xQbtID|t#S=$;pTz2^ql*T6Cg~GmXw6zNr5v-#b(x18_Fl^@ zl#@;jcv=Xs;&HGKA+GsWyahOYPVYCGb(pVH?%FtBcF3e{=in9(w_$^0#K9DCD|~e@ zUG(?E@YcK96h+p!s^Lg5ylygraqG`C02LQiT$S%sEU4VG>GPpwYqd`h78?Jm(B|$S z$3Jfx^n=wj{axN``-k;rXh%In99OJ;FX%$RA{_bX(S4jiHb!4hyA;C`Z@U}RTM=n* z3rgpOWGaNPQNj=w7%0a9FvQ(7z&{jR|CE!ly0K&=Q0n=?Z%17DyjI?OX}=A3?R~EJ zWPS|UeYQ6r$^Q^Q{s-+0>AuMYIFSE-5}4%mI7YawWv80J$an)66^sbnLDtvLl`FW+ z+q|fN9)1tEH8olyz|kF|3cCAnhLPMh`us62g`|%AoBvEYUR&DU53NxpXT#LUPsJwE%BzEwi_pBZZ8IgN0@(b3Wq56plV#+Gk z!r~oRNYm}8zqh!pq-~#ssgBvZ(K+R^S4$f)niz7a|+TcRzeT_2WPgYrS%Rwu$Ao*47< zAvzTeth>?{1!rk(JGwDv{JNVGl4-t*8rR|Jp@fH}-G%r^&a=2{kku5*nI#{~VK`<* z>lMAw#0g_O;5iAf(r+y8*vi$UI&rh~c|Jf&*9z~)Ic=6I6>fJu0&cimWUBPnp>&Bj z@ylH%pBqW_1T&`s>1wbfP*QrX6R`6da=>N&9x5`)zNutJXeOWMNwL^QclQd8KS*Mv z;2`L9N*er4p{_>$7UFK<-93 z@ZJFq)etM;_&Fqh0H2i&Iq>+lWwp-7?I2u?%~RU_VM?5FAoZ$Yc!MFnsiM?yX9~Uc98Y+$|LOf)CQC7y6{Cd-@?mO&t0cSjL5OfAYx{=nNvw4nv z@rYJTy-i!%$ud*Kl$PrGyrr&q$11o#9;#kPzmk2p(|I=UTZ654KyMUKTxqpg`IBms6YYb55y=KnQ#4VO+N`Z2ciico%BD zeiO!34tO8ouGSfR>Z5P~jVRI}^%Ncn^>eP&!I@GiVgU;dIXvr)rToOT?G+!|!}v6mRyn!Ph=!zwaaE zUDE71J{OywZ};QaV{cUs0*w%?4QF~J5zSguRIBs0^}stnozO&sSwUweE%c_m{t3+N z3!qSli+-CYp3K&wdSF_QM;B#I?+;RI;30}_|FD6q>c*>k;_n`o!(y9pJg*&Zg0k=q zXf}^2!`DC^aA(r%I4;!iXdKeGTba?~1<-C)o~PH~LwAK8_A5C8K4>l9OjQN-sM~q7kGfv80aW6}U;_pZt8M#RUI)7gKQKx#?p?d^=}2o@ItP+N#e9Shl#|`^ zR!QKhDS*w=L~!_a^+D=HCDn8_j~;nvfMn^^!lcnDA9|!{k{m6w*enkQRHe2k*=v5b zCx!qb--5n0^I0Xrq3U^AqWZBW#^Rhp%OqES@*1P{pQ#VdT|I zxB3Q)31?50Iw|JAw)xvgYU$#*c$P|bwFJ<#vKVMky-NMu^eFDvY6o^H1fKOlA+)NL z-i-gL*7j8|rPpXE7dr(plrqEb+TO&)7>l&^_R-I~3kR1Sh=vD~oGLmo`!(twkLTIT z)#$#9L$mnRbi1xdc1HmYY@xuZ4Bdc*M&a;)cmjj@*n&@2X-QJkbl=LT#=A^#vkD)D zOx;u~bBB?Ww_s(F2JD5XEL?|F>hiOUPvb|+IsHsu`KZI#6$RI86FQA)o2XEG|b|dA2kc>m=ysZG9^K0bM7UxH;#gT;9=b`9X+B^ge6r+J`t>9iLr>6qlJzw zR?v^`65lSUI@R#~`THo?4tTKTdx&H~A?wMVDo59Zos%<8tFr-Xu6!dd=zY3m1rw*8 z^r1mw(+eV=T=5Id`h+c16i%2l&k>WhiK}UKY@<9wMv8U0^%PYb<&-HAiMQnR{{O1& ztb*En`*mI13lxeMXpmA|i$f{e777%1FIEWd!CPF5yA*eVOK_(Icc(}RZUKU<{QG?~ z`(W?2=UaPb=O9P#WRjUA&+mDk`@XK@NA$x&PG(pXLaX$ttu+5`gCP_$hgsJAVX%)~ z!)6x<03Xo_CzIYXO`eBLsA1z7>`?`&RofZx1Y&c z53x})cKNwxShF5#Rr~$Jlm0R6bE(nW93C>ZyUSQJmb1r1SFh8{6N0|F-~?(O%Y|o= zooXp>Uej6lAvzzLn=A^h*Yzyd@41-FdQXnG4jO#Vlpk2ig3>&urJszsuOV&GtjV!& zf9P%-Upjo-S)BD%>AD-!&(+5-6xr4#R7ioZuR6TBGBzsTes`Z{f1B9l<uW9X$Y;etrHSpC zE##C}CY5iDdfdWG#fE0%SudSt7&E9m4tpRW4DFn8#bn6~Dfelf&~abCgS(nm>&5JC zyW+OfKG%}qU4-roO&68?XUEPdX+=&+4W`X3ooMmKCdzKAirfmh1-v7(pQvxuG;Ze1Vr&ffX~%nA~% z+7F{OnuLwNeuYU3v3}PBdql5nBA0E%?_)|f2>)0~5xrEAQ+!7PY@dF@78f~*1?&iG z38LG7y{`_*2##}(aDW?&vgm@xl)44f@EqaQzy&^ljhxOWBmE32)4|t23I-;+cojeX zl3I`w2gT1I%REzWzDsQGL@@v79_LHE9(Hyys(_pKdL#AqK13I%SWk?Cgbt+EzuKEmVt#W-Jz<{6N5S`oe}OHmkYLJU>5qq| z(eEoeUn0RZheU%_0v(Stzr&m98c3SN8%455jfCZe)x>w696UbY331?n@@zR?g&#b= zc(+ZyYdqiVMP-=-b%%a`?4L+o>#pVk1!o>wh2>onQ?HrbX^MQQ(hUeLRmWy<$Eni<^xSA3)|l$5Iud>u;W3PFYh+CU ztFRST*R3CrPEdohx8B)OowZ{=j7S_=DbYv8pX{o4R$Ig!(*(4{N( z#&&IYc!jn$+%*#N=&oH`OA0rtApe$6cO!Y0J7ItJZQ;8U8S=;)cNl6iBaU{mF$*9q zUn@&imG?Scuy{bUbUoDA5j>m)WC`ISVPPY(f+Vb?+MoY+~sGHBXGVCXzVCl;u!Sg_;G4#FR;>xuLE(etPTND-F`2l z=&Pr|j;z;~IF}M@zIonu8;_6Vm~?+jFGoaJKjvzwR^$TPBU>5`rB)svNU$of>^=?r z;eE`0Y{gXmsyT&XseSy|KCi|>IapRNbQZ;Ux2~V_=SIWBO_}6MqpG{7jH=v~!_~IN z!5J-0ef?k}|Ij<$<>Fz*{}L`98b3$4v33@=lJ|H&>-STE)3YvZf`zMOMRAuOOn~eo z(W}&RAdO-EMebMz92Gn7i#StRCcys)pc998%|iX|Ar$eA(nc5mRwT`q%2!$DnU|#D zPHTufK?<`!q)08~&SvCgWmhYQ$3 zVa{Z7UtGE-B}EA5GlER!vZ@{%9>0l01@bN4DtnY$i_9R^&vzo6LbhCn`dKjuC(8{; zp1^!MKPFrt3q-!Yl*J6EW6~7i~h-#?r4ew1Mb6_!QGvurj+mQ z{Q=qX1zolYtXt0!ig`(Xg%$|`;@{pOo{M>TlO1XMy{T+|z`7b9Znn&|-gZ%J+YnJ~ zgJWb!Adh?aY8wp|2KG1OzEOBCH0E??gr)K>>qM?R#^3B3MWoC7 zj@$-5Dg*Bc`r$QNG0~t2nq6QxKK?`Gk<7nKkFeaV90H_BLqCtH2d}bqWpojbmVu;x zL8`#uDSzIFn9@jo2Ir8(IHaQxpVkViUZuRq@zAXE=UWHG>-U(G;UlU*f&6Is@19v2 z4(dzVQUdx8Vq;Z0aA5w)q_S$$0Y`a-t=tsWv6=G9qsh@Es916TTPkSOJJ#ics?iDI zzt}G>c|LB%vyHs&dB@2l{qO=B!H~l>bq)KV9jy8 zohftmd=1GUco62)T+tsO%k$9)IXKAiLXW#gZ?FbE)o3s0jr5{f<(9PS2=LN|rMpI7 zr`5wRady`rF^{K}Re4u*kbOU&--v5G@$^qRZS{(o{mC7U#LPPty*=(xa@oM^bNN#X zpPL?Op`X57NBoq6K#ckj^VdigR|}3Z;Q->}h$b2NuqaHK--X#pFY+MS9tlzt52${jJ34t3|K`2?KUT~B`vSoC zls&gn>mC{%rcaW1;uBw6i`oa*;1TK| zkL%(io@G80vMljpOP|?b5P{OX_nx#*q2)x4LjQ{yfqA>9Yy)W4%_*Hv?ZfsMLy@s! zSD#mxfA6bG_pcxIDR1PKLF2!kNr~0SS2@x6oLr?Bi(cnuJu`aWWoO%9d}#Mt$N-ub zJ&oiIl<{!F_PnBB0Yo%;d}2=7_4zl*^aK6!O1-KS1veI!u*~)jsVx-$&Yu#aJEOBiQmV)LWS$`;t+oIq=cH&qaTN2oOqo8zD@Pj^^D&Y&5!wx`9q z&_zwrJKS(*@JWQN`2)17o6Fvl2>MV(qL_Kfb~?)kK5&f$sl+atlF|$5ssE|~Io8mU zAyqCU#4oUF?oWO-8-=v=%wItL7N=A_Nnl1|)E&Bw80k*aGwxhh2e62e^XzUqIzRN( zHS6x#5T@!E=$vW#;Y=hmpk79EPR>3$ysEmZ-LqVD$RBX^g9>h;SQ}~?ZD!cTl-v45 zs@!=QpzAtpYQS_TzoSoSR)Wk7=Iupkom(r5pk>q)QL5NJ`8p(@X!t>9dg4=8(PwD4 zzz@FwyiZd<6uOkaz5x-OLU=~72ef7Ws}HGg=BvYGKM3F)X^~M>9+(?TJO%3tX3^f9 zvx<2)2{JFI2W7+mMA5FjAFy)V*F1xqFFEm7;T{O{SqzYOLMru{>a(EM4 zBlRx4LVD#K@?kJvGgP_JG1;^%0ASy$<^=`ek!;Z2RFS)Pmf~U5k>N^OxgB&5+``6c&Xhgm|w zceE&E;5cuK8JW+OL?%wzJT93i8GBlRn^8^2P|J<9JDQ)F1xbD{-h<44(^0FmZ7A^{ zmdT#pX;_ujpJj&}gcw80(-hZ$og~T-VNI`0sj@5DRhw=E!|byE`DA4uQ_*qX z79ldr;(e8e)U2!MH=(;08HL;W4tG)r%tY#LOPRWhAMX7_T|*8oezQXm!uK*RZM`bS zU%MmlkPGXw4vW5F81yr^=BK%U{m1&eyn+~Wkl_6uU)$}T%QEjdWrph|*SI_v-fkW- zpJN{efydd^Da8+?u%A-<4@RAylC2nm_XC#mEhn1G;0^yQTOqC&aIWkK+p)y}c_6gA zcj@eO)4Hd^Q|o%^Q;8BQ-YCuVEgs@;ms#KAm9TOF62;Lrpdd4#tax`u@K5H-30LAD zu`Ma>e{?$aKMt`!`gz0ANM;g`QSMr;MZ)5K;(`K>FdML2Jq0j}qZ)81=<=G%FO~IR zy3d)hlR`g}s_B_>tY?oeUWZJEI7XcHOBxtOJg;u8#BKq-`^*D4@rdUSx`_HiR*ULZ zwm|;o%bGAei*gK~ujg_0kFVrVqW5w0;}^`M;|JeeMaId$)E{e925yO_kgO^?Ubi`*nM(={6P%VLY{wvNZ6<6kI_va6nu5J;tlJzO{H z(Y?OH{6uKyXSS9>Q8u){Eh(<;OI|K2fZI*o+}K$MEw+iWHT=qSE?p-DG3b6hX63s6 zu1l_5m^VrEyM11?wArj_&(WTGIe6x#?Iv0tsPqB=UF*F3B0OVKw6fnK6~fM@0jt0A zFgEDN4W`h$-Z^gCQCbeK>=psv`=GSU60TMcfR6`5&1l4PcS2sSJ<16jGX~l?nJ}_O z!de3syE%V)6DYJdO(q8G)~{Tel?XMj@`a{JNi?h6am2iBJ9ia@!pLYyh++UV@Y~(R z?^_IFSaE_VL=>$iz+)0A9y+Yr&)mDs%_%>c@bwyg(vMmlOYf4qT@X^>ZE>p(r5MCVn&vS< z;SqHY0)qfWTQp7s0jNk8NWS-`I+qOe1EmfRR*qw{Fb&&7Eyp9yPm<13dgrsn;Zu=> z6=n;ap#^M`g*&@#B(a5#ELkTr>Gtgrd;)R89lagn&KxC4gg98LWh(g0jw{qGv_Ye} zx;}dIyDaUZ3h<+BJhlwac?c$ZKELMVmj{=mxr_L0cJgq=!Vih-a-W^}?QbXeFo8Rq zUy=mkzfMr!H??cQCWPCfuAuMkM)@NQ=~1Ke{;rGlsWLlW#L`B5 z6D;U5#)_k3@^>zx!+go~_Z7JM&JQoe9@q{Zgy_PYBwo`c(q+qjDNk`adKsxv21p#D$Sg?(*9+_Is`4f#x;+a3$c3vGE`8;_GXchEcb57YKIk zy=g0!plVhtnq|vYtfmjCe0cJfuLhIIZyu`)-TmGu^%Vz;h6(K$wk$#Y^yjiH>e~X) z+Wc|t;L4jXf9$TQt99)41dRwqhgoX-a_^Ahxvd5F;)Z8B-#MlOe-HvXpAR`%S0wD=dh~`1MesANmGk4u& z@<}LyfW9qHfEqM?qNz9@b@vQynOD>YCFCYY#CU}gWbE&XxS6y^vAWJeQ(_E)8V#eR zo3x*L+YpownHmf{b{|TJzQUUo?$45lo(lO`WHT=5&F5B`8CE?2h)qfSCXA*eG&he` zH@CI?B7(TiDD6c+buq@^Dnv8U-P%R{`wlKPkHVQIZ{6Yv1YFMIRQj@D{5lSk4_y8V zany#PlK)e*@ax2*<2^MLVi;P^y<+H(I)^9-8zCVi^xTmS^*M%sz;M}^wfhH( z!jK1j{zXSUx^E}Rz}^Mxx=~-YrFEt8l;6eUCib0c%YnP}A3DsRh=`!odnIkX=lT%J`7C%K% z2qX<8AA+(?HOZflSLN)x5UW_dSh1ASrj3mj=(aWaS)Hnb8-44EM)iL4?2p^!e529kO{-lP z9R9kB7Beq6Fo&$(MpIk%eIm^rq>Pn$qhz_Fm zIX$RivCfCpySFq;#!SIv3!W~O2+CiaqZ`8R=IxuHr9iB zDsf0Qw@uack^d=jB?%&?{oVQP4A5p!jRvF>!jQk9I$#}=Iv`!34Iyu2q%Q|Q1KPjt zuSaQad$M5!3T~@gGlu)!qeeXb5*p_gi$Mz(?;yvj-CDmk$1*gyMAh6O%~v%q?+?09 zK>xa!9n|}pfMuzcSZ}05%5+vY&T_JtVlDIB@ZpSx7{~TmwIw$m)knV!!%BfyAax5a z`-S$E(d|%$M<$WA0fMgZ&(wg-dyChX+77GYqBKhoNTsXk5WOB!YCJS%`-5rm-0+q` z+A{R3UA6M~@|f}$iQLhLFZZ@gGFzuV{IG3Sw~tm@ZJwsQu}e#1xZN16vc7&nESxHH zb)MEEQv1+x95Fik3EGK}>_tdjFd&6lC>vM=kun#`OedIYM8w2OfWKKKs((HIWga3K zOUMk-_kS`(3V*>wKaqz&0KmWJoWJcp{=d`(B*_7JuJhkrj{MUN}_Tp zyHd5~6o^)xEl-j!saH3Yeyuyh8>KdaBF2ZXrunKmB3-wUW93))Q;9YU(yIhcHYj{=z{Pf&wruNkhog{2--8brJ7Y>I|?>gG02bI#! z+$TKC(LxzECNCUX%o$?&rnsnb^+H=^*P`6=BJ{Ensg{71eev# z(W-jb2djM7l*8-k_FN9_v*CLHM#6Ik@KMTnn~k^lc-R^->EbdSZ-(yIdGRyC*uknN zxRG6jgs(OE`?ap?W%`L-HfALa0^9M8r?e?;R>H>S*4F39*Lt8$*`+Bl zlqV+=@4F^rvVUH38su7-k@G+5{5X;9VpfzO)-K#lKI`+Fn8;kxU$~^&HKkNHDYLB(lKOY=D zn|$#Vv<|o9T#pWWxQCZ$32{Qfrmw;s^bzNRsApEFoDP{kt;m>qTTURJDrq;BhY|)4nMxaur>J;6URlQf`7(4dg$$WHuNn#+{{)b`2DO4gP zWqipd` z>Y`Dhf5t2gs_6^$++yx$&vk_zrp=AHZ%MEadvafq3;cv80Ktq`&%2kCqJK)X;gz|0 z&-UVAq}7-GS*uzbhP*KLz`?PLxX_?+(WQLa$c|&Y1UZTdjD)}T7E0c-h^HcSu%6Oo ze9u2=@wgoeWkx?I3&YBVYS7wT6xkG5=HU=Efg)9J$J4QcA0pD8v+M5W_q?=~a}0ed zn9TH1B{q%3i$>1+;-P49aE>FfiLmA@0IjiubZImkd83OAT}cDXzkyt!n=rMnIohpL zhxuOLc2dHri^Td{@PU*GO@AWp0WneHER@?r`A+moC3D8V-ycs=A3`cW7ZQ#IaAKI@ z5CNJrJd(Vk;BaX(qA>+ggXqVweiaE4@&r*1C~zM77Qg8Ej8c!58D=Iq=z5L`U>N?zc6iB4tlQX3+yOON{=qkns(w5F7m7t9b-SK63_TzwLh%JT@^yH+JSPi~Ua*Ij#65~zC4f)Em0Nb6Ma@RZV?HzU3?iLCLV zP$1~J(q5b0Kz;b|9i^IXlfsxg%OITC-lFir8PAYu zV8|DA3 zTLQQ{fEP=tupeB^xw9Oi7vL)5-(N%7^{pzEO9leZ$42d%Y^j<#cTczLXp6@Y1Q_jA z(2O?oEalO+$qfdz2URoC3?rUMnL&MtNJUq0%y+M&xQc^NoC;!_dgG)c=w5|>8 zHGQ0;nN^L-%Wxsw5+J_EMl$7NVujP54cJE>+fpFMm_PE8*WVwSDL~d)Mm+QYDvbaC z<4mRXO(}jGs14_ya2k`Oyk0%4h_u3KLrQS$`OnQ?$_H{w@B#$*g~FO)*w}loC_=)U zY}}DYX~#X6YFWF@k|NxyUlR0JjDR$c|22)&kuSU_tIJvpPLkO4O$93J1p@)fbHu|pNKydZRvQxgfk!hB#fZ=Y6l5`-MX+p59NAG^_Xu0xJ5z! zPVnWX51LcXm-X4lSi7!dayqVXMbu$GQ=f$#sF9zly3w%P%mgDOvFsb%wzAknkzX8y zB(hTf)U>Er)%5~>)}s7vsIIik1qgRsLJp5Trc~!o){EWMq0Zrgh}hZ-jJDe` zCYLgLvm_H|$HID)5Z>g_8z$}M3e*?yQMVdCk+O)>eOw(01JeUr_mN5D4ULaY1*Mg9 zYC&Q(8E|VnDnbk6X4S=C-zrvI->!cm8E$Onp4ZefIZ`_u#TNKgpzxke0M$ocr_`}x z*Gp`;xze^NIC`sj2c};$A+&q%=6Im71DiBzgt?Y9B~d!W_C6fj%rUM!dTT};rgH3d&!t=v*eS8rCJ z_LeaL^1{gcgMc4SmiRj4T~9yAV1$kCv9)4j!5zM&Q}S;oz=ymfqgSN zd!2_|eK9(K`4l#EyuiXz9Z5iU;7kU6V7l6)ou~MO2dgeDjuZvhlJ+7wTVg|GEMMyE zt}A8#Ajn7TU53UVM~dxrM7B-7XQTQi#7B*GGqMJ5BVKKlrMG5Um5&#i)%73;xLrkG zUr$fPCZxg_F;SL_P$7#u_6s zSk!-Ww@pnP*dY%%PjvLW9Xa-Fdu16Xe3yQP_NOl~0=Xw%kv3M4`RO4F4AcB2*r<&> ze|S%l69nY%$O!3+fp09w;qtGhLC)34kLa$KzvYU^{!~}s!}7N zd$uHPz;srhQ5Vy}-j8R@H8ip=9}{skvwmEazUSQl3QjIAz34@c+Dco@*4| z=MM4Om@$3{F109n^@Sc%gFRrdX3dXy85YX?aUDzU#x*>?U7Kp!UwWZLyO|XYn9*R? zVz__7aMuT~hV@wqNvs6?67FlFX(OZFDe13CiT77RIL8VVpjha=F}1xBR9OD6LlP9AH#e*`<k1SBfOu3%GoL*d~QZfT|47hWby8-DXiZj)N6D(5P6B=zc$24pOJl>|73IguQP-HcrX1wyW9!ofzHT* W<&6f;O6e2iSjUN`{}@CV9E; z-raw6@>o_c5BV3LT@D$Pv<-Pr@_K^Y^Sx8G#>vSS>c>NOFBWKhKe3yWD{W(pw0kUi&WAgL zC}=wd09*u|Yu^t596A&xzh}3`kSDwKoj9>y0RVXM;$rgdt^NBy{|&o%=x_OZv~KPD z8ys>T0JwYiMCb0Uy&;gDgMdK@4^fa7LH@)&Y7y@Es6E{Yc!54UpuHPDXaaFhVmmhf zlYMskCwv}wttoWI-G+pH%K=|OmQ2-14hs&!B?2_vDTNk7C|^1{RM4Jkrm^TT`S zp@>?{nlX2Nh`ZHs@DfAus)&h85mr#iyxXNM%vww1BP3J-H$Tij_Ux-fbnUbI1|oB3 zrLx!uxNdnwKi~7rgJO$)S>SDpG-`SoM+WZJZaT+> zMae+?^Psxg$$YLB^d$bFrZ!iodRJ1(6GtZ_&~#EsKr?^l;m7>x*z54`gEo9XvckZGb$#I% zY$v6$-q26evg~L9vu`%6ZGj?eJP>kF2xifsCe4-;sk`_&GuR^g5lFY>r+9t3+2XV{ zb7bxzUnc($l4!ZLy&N-tdg!Y{(bk1tszLi8XDaE8b_$CiFvy$|bDoSlwT26Rhi}6Q zb(1AE^h`gK9syfv?2G{ z)$2=xGqNJR3Rf#`ba%(ebJ_W^KA*qx*A6F&RA1Yt=sx7b=RB2E`l$cbxf2sCwk3I! z4blMKQ98TIUf`DN6|c=pgjE>>Z8dPgSZR1w$uQv-*rxH7lGBe%@E|@-y*o_T(GXE&!6c_fo2J{z5_&CA|@ z(xT$!(z$Wn1tzTQ5zs>i(ErgmYV}|#Sz1*nfp?k!s>{EI>gcRmjKALXa9I~aO@SXM z(vf&&vsUI^7dUBll__wD-{`9F>^f@fGO}2+ul3lTM$wN-lTTkK)Uz}tW?f^FT)yZ) zHOOIpq(1lJ5pctYmZa;j3CM>W>%4Yq2DI6--?U4CXr({j=bAYmnf|RjhTLNeyoXK- zE^*0fz9+TDaRqPXD?0^3qCtJ1y*Uhmr%sq8mvf$)cD_YDI6^esLtT3opqfHIY6VL>fjd0Vqa8fam zur@#H1H19%qS9DVlV*ZoG})_bxVM2S(lqU(TPj0&zBGb3yOib*QKYSYq~7cL z(e>!y8l-aUx$U;^qH5}5owR48I*#ZdP?L$?ekQ8oT{hfW9&g&;c6(q*MbNi@_#c>0cxq=r zHNDo|1AKn3kw91nbZZWhNF7n0O~zdRny80jTsAM!yJbU-_!I6_*yMogc3UWF7{7~= z&8#OuLA)IuI4pqbN_jI1P=~s zTP3Od4|l`B2hYIslJ8Rt3nbfW%-B;ri(yTQ#9+R6Vej`%w7ve<%wGJ-oz>;lgdw=g z&KuJYC)W&%5u1H=aEWgE4BF$ekH#Atz@iH4^bH9#U*2-F*ahZesj%mTd`CY34&%}5%;jN z;}aK}<|{mCJ-k)V8@0jazwu6fVQCLuY4A&C?z3ubE8MQ)n~>R&TM^yoccEP@Hd1n| zFbMA;TJy(2ux+d@pwkIEF5TPWOk%&A8( zwmm>Ob9$SeZxAZPjAbv!pvv+ioZsrY;|@QmbFS;H-;A)3JJna$KU-IPVwU#zLPTxE zP+rr571^$f4(Dr3h|}PwSyq*NJ=djFcpE_SbWiTG!z}vk^oQLu|1+Wve#f|Tab#%q z^a)HSt?@S%${dTteb`DbQl3>>m>Z}MWjD4SA#P%@O5Vfa!7H5yu|cy+GFaKDdsxt{ zd$&rL@THpas^=^5pu(sW_SeMdbg||O?rqx(2=9k;ksWJe_zZTk?=}P75t~GAGfb>y zWKC_jm#0Bs6gHwcW1ISmff!Rx9TNeuaXmNNm>8eYvDot1Q5kF8FzLdm6Az!lPM%4a zftGwE?6h@^cl$x!Gos^)ZSy-h$KWh;Vl$&WXF+5N2W_~K0G=>%~fUuXDe4&=mndgtq^32Nv!E;fpn8JPk~G0+#kKmrDSAp zj7ym_2Vyp?%Hgk|^&RK*9rPukMdxB5wnZsaX^mr*#HJt&c#9IR_B>Xy|o0a10F&%Ew4_9=;R=t0)Po-kKDq}Ut zYUy)mc%HZMg=)pHnxua=|>W=-FpgxyHC|W5iO(! zl21_DD*c=79z2=QI71hED>UZLa?mNAtF;YW2%IgB zvPu<~aMQXqAk^~6bM`zb|Hfxe7)4EM zS!zz~Sxu~86Mj08rnVG8v9~!WqV|OC~G3kH}wgddQ@)~ zCuMZv?VZfNr{5iCg4vIg)nkC_{PYH^_!7~cb_<4g828t?!`5uRzQB?-jKe@09uYmN za%*j#H`LISx(zi``r+)-{cUW!fuTHbDLAUUfWo>kbRVeB5nd};PTb;CGgbvZ-N$!l z#=vMjTwVklen823bOFuU8NL3yEZ2U;&#kvJ@OjD$vpU$K8NSNGU*Jd$b}`l_w6AT8 zh4%&-&FsFO<>=Wb6BaF0pfhxAMa6t*uPZ7Jfhl{v5P-lNx6cK*Z|QP)jruKOTMw8i z{8x@H-2p9N$m53YwX5T^sUBM&QkCa}j5u?|W%`6@?@sMF9u#Y}?TJFBH*wJ0?uXXs zoy~ch03m_yQ;BVF_@^g(!R}^(kM-FvYabG$yr=ZaSx!vyO@*3+ z8Dc7fxd8=BM02I;A9GEtVs}c)tP)hDTLH1SlbPu=a^l&SPYbeb!BO7%hwu4jxqC>8 zg278uWsEr zkyLi)i|A4Bwul~t%9==N`--7n`xD$!RYMe(@iDx5kfQm~_kroOlICPusfe=t{GXlg zq3y^wd|8`~`e0LjEu*>x)q7o>^z1d|z%pQ9T(O+sg?TP+pkIZHH5Bsy{DW?d(-yGC zK*Tv0wx072R=$EOAnYyqoP2LT4*+K}FaI(-GX?}la%Mdq2lCtf;Zt!RU$$J_1T|eW z5g0VkxGa0q(y<=X{jp)r!btxkcj4?6e@zr(YMSM?j#rGGAE=?>->(LM(e28o7d})f z_ZF%5^oj(f6|)Y%ztkZLX}MzEbjjdXLZUiD{txyaObV^LZ=du7RPkX;Q{mIhHQeDZabVr&;3xC~aBg1w;*-n8I4AIlkw%G@wks6m^=(_?= zABrdVY+Suh5S~}Hc!Y12_b*RhqC(@Qp_M7Cbn#g8LMqJzoa%!TTUd0>sXOzCbj#{Z0&y>X- zyfGVCwE@Ec`-7`SWq5UnGs#UyVm%#scHbEB%|vONfIH}$ODsmIUvL|Od8w&u%+JTa z-)#d4g~S#A{c-Q(@Bvg}QQ34Hp=GLv$?q13SS2Kov)e>_3a?Sl z3Jz|@8@fas`*7{3E$(`$NmXq>=Cek>xi}{7F!EuGSlzGy>5i@)_{MMs;sF7Zd5KV^ z{{gs>7`)mccCy{HjcW%RkKaNXU1%?x?uKI@>FwA7d!#D%VLS2jqnB3iw-kn}Q|;Ic zIknc;^5_dp)ynsS*R*rln39Of1ZQ4-Tgmi{5v#^zr(B;CYfe%=$ol|zaq-eF?bBsT zk7=$}q`%&m`sa7JEvoZyYQP-tk#Ws^jKzr}17dG?9CIPTLi+~W>2w7=Kb(_w?z`z( zj(9Db`o(7GcIRWr2&_YM0Ns4tISFV_CA~y(e{B6I%x{{lUl`Ivd>Gd(eh&p>N>bP0 zVW<$SA>b~zjwhkAZ!kp6{)Wit7wNq4f2F#7cJ}^vNUr~a7wdasw*uX0{&%_|kn7!)%o>%)Xw)|Hr?#+QqEnU_hgBH%J90UMNNwsc6l&+zeAP&2+(M#gh zE>8z=)xDBjZd3D(LwOt9} zcVf`O?7*WT*20_GkkL)9jK%0;E2^gRjK8w;PMM0&eD)>y`IUCxZS%_Vky6<)`Q25& zVC6xsLu`|+rYs)L)Xc5K6y8u^VuR8mx96O93fXtqM0UVPu70C* zkvMhXMt>B46IXs=XYsR2ZHr}SxQ19?ROrUSGjpJuR)jTs`cY*Hg}j~y_oN;I00Lty z+Qwppa$|jro=Jx>UrnW8 zXd$0)?C_b`&H)OtLvd|Y7bPxh9ZzGygfqK`l=zoSdmudn6OaJ2S3tB@Jmfez;CNa8 zz82Ymw}^`VH7354G>5c)-^k4fCEh)sxJ7)%=#AO{=TB_s5=2v-*iyU$BESt>KC~Ks z=;;8fEjp-+3m@p*NukScg9z(CLkqU=Mf0f5wy;@+7OA~}7yc6+rX;z<*9wpuXt<%e zlF3>~S<{s+kZX~*4Dpfl&UVNVTxzSyc<Y4f|r>l<2{!LKWxr>{DHs znXdf=%i<-e?xwxbY3Mjz6TJ3Z)~WHzK9XBu&V(#GNcG7ZT?kbtdMqx+Jug0nuSZ!i zRwq}NB|WeYVA^FCTGMhd!DgOmMfLX4p{gkIGDIY8luatRiq;=+NMtZ4QjwR!K@R*Z zMXvnA%g-|MoY5RL>IetMYW8>CzA6PC+_y1S6m<|%5JS^V#586*hASs``gET!6V;sOYw~sh3M-`4e}l+)}&!knMN$M`yEC>bE%KnpXN%X-c-~ zzQvoo6BCa)Vb@khKWWg*`7z0o!bryuTQmXz``oYk~Id9jI7Nv=$*}yNPI^-yW}@!Cp)D4 zO!!Ij3F~w*)*vgx+9m9;hm^r$dHecG$zF{*$-X+6rrrpLhK(+btewo@I~-=d2XOaZ zp9jvmN9=E+6q!u_7#R`A>dvlxK9dm@H+9uPD?eHE>Pavt5DK9+DcXGiGfMj3Z4L+{ z{dn>Oe_G?#N;c4$87sTSdZsj}NtiaAjSK$TBp1K(Bf;Fragyq1!IOVA z9oGrs@^@;g5)6+iS4#vM>?ng2c5n}Mu5xM}reUdp9p?x|Ye+xHyPef~{* z`d=^MyBC(Gr?JkCoPi&|i?3-y`gsGEY1Dc|)&}!m>Xr_%(QtZo9-(+`Pa8T|rE2kWzCnRv5t;kASQ}QE7 zAhJqr;=Q}nRE3@{cu^^J<_eR{71i=D3sjfRl#1O>DLc4ieTrAnsC>?-Z&V6S?rpD- zP}t*kAFWb}qYs-?2vot}C2pm@I!l#7b^`k!iEB#s7Rh7`4FNT9-Il`%W@p|mmKD#C zimly;HHK|+&n7fo1pw$V4`10lE|A$QXVkgoH|Co2NhJNQ+|UUVJqY{u%sTLvTjkiV zB~-`pL<-KWN7%LZNtbP%trS55@@m!lu*#u?N}{JiqTE8z40KO+g}y?vDx=538Y63U zOt>9R#=V69?lTleHI=-Y;Y*?5mg26R>?W#Dd7=ZOc0bm0FudwGERTlI)6Y9O^IR-lr-%Eeyufa+Fww z9Jk+%Dp#-Yto=(%W}oj=n2mwp+nbdN^`lemk7CpPGrt{Iwel7(b~2lK3XNQ)tfli3zV>UIF=| ztFiwAnqlkDg*$kCS+KpXLSE8;kAsu#Xa#>NAllJeMR%vy^3av^6JXpWm*n9pn#VUYj&cDxJdLQ@P_xUyW2!)O=x+;ic%jd09F-Ohe#nW@foo z%fTBhN1vW0$1cqrquVZJVr6Le2)s>(5!E@BCzJrb}Ed-f{A#Q2SE%N{1a)w%)DA%W4 zuobSj;nXork&_NB@bRr*qx?RdT1_c^L*PfC?bCKP4^i2jN@#(9RUu0BMKL(~m`lZp0>tQp7E=AU0&9631gvagh^0&)51NJsF8e__*!8N_s zqnMm#wZ*5&WM0XOzxodj>>; z^@b<$pHmfXu7q;(j}|0gPG;-FQf{A}1*yz318Np#T|!XBdS6ufjVX#%Dr;TZPTxiRv!1STr*++DG5P+Bt;sc1T1i#}C>NOrA+iqz+pSzhi9*sns`L+fml*vhTZ8 z^U{0Wn6IjHUV#!eoc{L4)ET)_YL93*pod-U>LpSWfmB0t#pT+2 zU7*LODiroOeNz^Q#5awm-o7=qQ76ySVkkeoiApN~d%mq`gmSe;CrurPqrwV`JZ_++ zP!rG$c!euhJ?^mAdqyzDS?;^82S?x#)K@~n zqt{K|&vqvUpD9-1+{ryq(YQP3vLLKrDFx^o1#?jIa~N3$@@5oo-b{0=VY}zH#LX-u zQ)_{5F7>l2oh!UpQji`nd3?!MQQ%YiD|SZeg^&ZU#OLqVuWn6&8#yX7a!5}9UfeL2dNo0)OSeR zZM3Ln`)dr9)Rnj=1Ws~i^HRQbOL*mnF|b17OuN_}1d=lT@g(Y2U|Iv>X@L}r<%Cly z4@}$E&MCe+FL$T0F?DkhR#;Sa{{k!6>y~5sz`_b6E`K`rgJ@`pvxAjCrN_#Sk z=v4zSCFd>5El`w*emCmAE4jR%ypQsk`G@on-#S=k@af>Y)8kH#Hvu&2R_Z;Cw?1l+SVaI8$KLtUg8`HAm0t|3};* z>~{Qd&^NyDEpn8*L*#JdYUG!e+=F#X4l^*+#>V59rDDY)e7;mKCA|*C$;;;7-Z|5} zrvil3e?9IBxTAA>R|Hv^Lw3GX|J(l`1JIKnR>*Y>UM1COK3=(UJ05s_lFsgMIEM0{ZX1>tS`%_}ZnwYbJMcG2HS21avZyUbtN z`R2u5s2$&hU!)1YE0|cD=?i>|F82z`4SYTmRkkVZew<~&V`f1Hb-@xt{Zn8RjSoT0 z^sAV?lW}7(`JE5X|9RKjW1+L9)_LDv=V>10x}Sy>$=+}M<6Inx7Hm>Jf<$bLZcT^W zKiM8ueLdXW?Q- z3h?sa%%l2Q`VXv(_-xAA=wyb68^KOx*7p%RSZ^2lf1iEi7u0Y|acMH7w_qQ9^V4we zQGVbFThmsDv|;ak0N37e0-E6RBkpQnF^ZHJp>}iEIN`ztWyNuo9UU8%b5?9cWuoJ; zdj^gUc|SEC`#5EMCQZ2W{4AVlQLv(wIXPjwk_ zD|SAroe;hc(=#fHY6lDkWvC$|jrS{Danc?gD9>$qCj}8H`~_@tX|eGq*t8=j%Nnbj znkQQx2#+g*_MO5 Date: Thu, 7 May 2020 00:03:11 -0700 Subject: [PATCH 009/145] feedback loop 1.1 --- .../threat-protection/microsoft-defender-atp/review-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md index 7094a73309..cddb450dcc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -41,7 +41,7 @@ Clicking on an alert's name in Microsoft Defender ATP will land you on its alert ![An alert page when you first land on it](images/alert-landing-view.png) -Note the detection status for your alert. Blocked, prevented or remediated would mean actions were already taken by Microsoft Defender ATP. +Note the detection status for your alert. Blocked, prevented or remediated means actions were already taken by Microsoft Defender ATP. Start by reviewing the *automated investigation details* in your alert's [details pane](#take-action-from-the-details-pane), to see which actions were already taken, as well as reading the alert's description for recommended actions. ![A snippet of the details pane with the alert description and automatic investigation sections highlighted](images/alert-air-and-alert-description.png) From 006798b25b7e2bda32dec29db6bc8117b198ef48 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Sun, 10 May 2020 13:18:57 -0700 Subject: [PATCH 010/145] some formatting changes --- .../microsoft-defender-atp/review-alerts.md | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md index cddb450dcc..b466653ed7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -28,7 +28,7 @@ ms.date: 5/1/2020 The new alert page in Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) provides full context to the alert, by combining attack signals and alerts related to the selected alert, to construct a detailed alert story. -Quickly triage, investigate and take effective action on alerts that affect your organization. Understand why they were triggered, and their impact from one location. +Quickly triage, investigate, and take effective action on alerts that affect your organization. Understand why they were triggered, and their impact from one location. ## Getting started with an alert @@ -41,7 +41,7 @@ Clicking on an alert's name in Microsoft Defender ATP will land you on its alert ![An alert page when you first land on it](images/alert-landing-view.png) -Note the detection status for your alert. Blocked, prevented or remediated means actions were already taken by Microsoft Defender ATP. +Note the detection status for your alert. Blocked, prevented, or remediated means actions were already taken by Microsoft Defender ATP. Start by reviewing the *automated investigation details* in your alert's [details pane](#take-action-from-the-details-pane), to see which actions were already taken, as well as reading the alert's description for recommended actions. ![A snippet of the details pane with the alert description and automatic investigation sections highlighted](images/alert-air-and-alert-description.png) @@ -52,10 +52,10 @@ Other information available in the details pane when the alert opens includes MI Clicking on a device or a user card in the affected assets sections will switch to the details of the device or user in the details pane. -- **For devices** the details pane will display information about the device itself, like Domain, Operating System, and IP. Active alerts and the logged on users on that device are also available. You can take immediate action by isolating the device, restricting app execution or running an antivirus scan. Alternatively, you could collect an investigation package, initiate an automated investigation or go to the machine page to investigate from the device's point of view. +- **For devices** the details pane will display information about the device itself, like Domain, Operating System, and IP. Active alerts and the logged on users on that device are also available. You can take immediate action by isolating the device, restricting app execution, or running an antivirus scan. Alternatively, you could collect an investigation package, initiate an automated investigation, or go to the machine page to investigate from the device's point of view. - **For users** the details pane will display detailed user information, such as the user's SAM name and SID, as well as logon types performed by this user and any alerts and incidents related to it. You can click *Open user page* to continue the investigation from that user's point of view. -![A snippet of the details pane when a device is selected](images/alert-device-details.png) + ![A snippet of the details pane when a device is selected](images/alert-device-details.png) ## Investigate using the alert story @@ -77,14 +77,15 @@ Once you've selected an entity of interest, the details pane will change to disp Once you're done investigating, go back to the alert you started with, mark the alert's status as **Resolved** and classify it as either **False alert** or **True alert**. Classifying alerts helps tune this capability to provide more true alerts and less false alerts. If you classify it as a true alert, you can also select a determination, as shown in the image below. + ![A snippet of the details pane with a resolved alert and the determination drop-down expanded](images/alert-details-resolved-true.png) -If you are experiencing a false alert with a line-of-business application, create a supression rule to avoid this type of alert in the future +If you are experiencing a false alert with a line-of-business application, create a suppression rule to avoid this type of alert in the future. ![actions and classification in the details pane with the suppression rule highlighted](images/alert-false-suppression-rule.png) ->[!TIP] ->If you're experiencing any issues not described above, use the 🙂 button to provide feedback or open a support ticket. +> [!TIP] +> If you're experiencing any issues not described above, use the 🙂 button to provide feedback or open a support ticket. ## Transitioning to the new alert page From 257e0b8b1ec2aead54dd6fc212f77b298b8efd8d Mon Sep 17 00:00:00 2001 From: Dulce Montemayor Date: Fri, 15 May 2020 10:13:07 -0700 Subject: [PATCH 011/145] Added Premiere EOD Services Hub note --- .../configure-microsoft-threat-experts.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-microsoft-threat-experts.md b/windows/security/threat-protection/microsoft-defender-atp/configure-microsoft-threat-experts.md index 1ae1fc060d..dc3ec30041 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-microsoft-threat-experts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-microsoft-threat-experts.md @@ -93,6 +93,12 @@ You can partner with Microsoft Threat Experts who can be engaged directly from w 3. In the next field, provide enough information to give the Microsoft Threat Experts enough context to start the investigation. 4. Enter the email address that you'd like to use to correspond with Microsoft Threat Experts. + +> [!NOTE] +> Customers with Premier Support subscription mapped to their Office 365 license can track the status of their Experts on Demand cases through Microsoft Services Hub. Watch this video for a quick overview of Microsoft Services Hub. + +>[!VIDEO https://www.microsoft.com/videoplayer/embed/RE4pk9f] +
## Sample investigation topics that you can consult with Microsoft Threat Experts From 390a82ca007e1bfac2cf595800dbc0b148689df8 Mon Sep 17 00:00:00 2001 From: Dulce Montemayor Date: Fri, 15 May 2020 10:13:56 -0700 Subject: [PATCH 012/145] Added Premiere EOD Services Hub note --- .../microsoft-defender-atp/microsoft-threat-experts.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-threat-experts.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-threat-experts.md index 235ddd3611..740bd18b02 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-threat-experts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-threat-experts.md @@ -65,5 +65,11 @@ The option to **Consult a threat expert** is available in several places in the - **File page actions menu**
![Screenshot of MTE-EOD file page action menu option](images/mte-eod-file.png) +> [!NOTE] +> Customers with Premier Support subscription mapped to their Office 365 license can track the status of their Experts on Demand cases through Microsoft Services Hub. Watch this video for a quick overview of Microsoft Services Hub. + +>[!VIDEO https://www.microsoft.com/videoplayer/embed/RE4pk9f] +
+ ## Related topic - [Configure Microsoft Threat Experts capabilities](configure-microsoft-threat-experts.md) From 0afbaa02b7d9b3334a11680eb6a6887da45ba98d Mon Sep 17 00:00:00 2001 From: Dulce Montemayor Date: Fri, 15 May 2020 10:22:04 -0700 Subject: [PATCH 013/145] Update microsoft-threat-experts.md --- .../microsoft-defender-atp/microsoft-threat-experts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-threat-experts.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-threat-experts.md index 740bd18b02..e2bde61e9c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-threat-experts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-threat-experts.md @@ -66,7 +66,7 @@ The option to **Consult a threat expert** is available in several places in the ![Screenshot of MTE-EOD file page action menu option](images/mte-eod-file.png) > [!NOTE] -> Customers with Premier Support subscription mapped to their Office 365 license can track the status of their Experts on Demand cases through Microsoft Services Hub. Watch this video for a quick overview of Microsoft Services Hub. +> Customers with Premier Support subscription mapped to their Office 365 license can track the status of their Experts on Demand cases through Microsoft Services Hub. Watch this video for a quick overview of the Microsoft Services Hub. >[!VIDEO https://www.microsoft.com/videoplayer/embed/RE4pk9f]
From 5676f358fd945b18d0f118c3bc8cbff507f399ac Mon Sep 17 00:00:00 2001 From: Dulce Montemayor Date: Fri, 15 May 2020 10:22:28 -0700 Subject: [PATCH 014/145] Update configure-microsoft-threat-experts.md --- .../configure-microsoft-threat-experts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-microsoft-threat-experts.md b/windows/security/threat-protection/microsoft-defender-atp/configure-microsoft-threat-experts.md index dc3ec30041..1beb715be6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-microsoft-threat-experts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-microsoft-threat-experts.md @@ -95,7 +95,7 @@ You can partner with Microsoft Threat Experts who can be engaged directly from w 4. Enter the email address that you'd like to use to correspond with Microsoft Threat Experts. > [!NOTE] -> Customers with Premier Support subscription mapped to their Office 365 license can track the status of their Experts on Demand cases through Microsoft Services Hub. Watch this video for a quick overview of Microsoft Services Hub. +> Customers with Premier Support subscription mapped to their Office 365 license can track the status of their Experts on Demand cases through Microsoft Services Hub. Watch this video for a quick overview of the Microsoft Services Hub. >[!VIDEO https://www.microsoft.com/videoplayer/embed/RE4pk9f]
From b6e7c0bb2899d2e807714331ef91cda3cf1cce58 Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Thu, 21 May 2020 13:20:05 -0700 Subject: [PATCH 015/145] Update preferences page for new options for sample submission --- .../microsoft-defender-atp/linux-preferences.md | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md b/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md index 537883114e..bafb5834dd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md @@ -247,13 +247,17 @@ Diagnostic data is used to keep Microsoft Defender ATP secure and up-to-date, de #### Enable / disable automatic sample submissions -Determines whether suspicious samples (that are likely to contain threats) are sent to Microsoft. You are prompted if the submitted file is likely to contain personal information. +Determines whether suspicious samples (that are likely to contain threats) are sent to Microsoft. There are three levels for controlling sample submission: + +- **None**: no suspicious samples are submitted to Microsoft. +- **Safe**: only suspicious samples that do not contain personally identifiable information (PII) are submitted automatically. This is the default value for this setting. +- **All**: all suspicious samples are submitted to Microsoft. ||| |:---|:---| -| **Key** | automaticSampleSubmission | +| **Key** | automaticSampleSubmissionConsent | | **Data type** | Boolean | -| **Possible values** | true (default)
false | +| **Possible values** | none
safe (default)
all | ## Recommended configuration profile @@ -266,7 +270,7 @@ The following configuration profile will: - **Potentially unwanted applications (PUA)** are blocked. - **Archive bombs** (file with a high compression rate) are audited to the product logs. - Enable cloud-delivered protection. -- Enable automatic sample submission. +- Enable automatic sample submission at `safe` level. ### Sample profile @@ -286,7 +290,7 @@ The following configuration profile will: ] }, "cloudService":{ - "automaticSampleSubmission":true, + "automaticSampleSubmissionConsent":"safe", "enabled":true } } @@ -346,7 +350,7 @@ The following configuration profile contains entries for all settings described "cloudService":{ "enabled":true, "diagnosticLevel":"optional", - "automaticSampleSubmission":true + "automaticSampleSubmissionConsent":"safe" } } ``` From 0ade3ada666ad66c5d0201755b1b76e5b82fb3e8 Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Fri, 22 May 2020 17:22:16 -0700 Subject: [PATCH 016/145] . --- .../microsoft-defender-atp/linux-preferences.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md b/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md index bafb5834dd..828c7b8f00 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md @@ -256,7 +256,7 @@ Determines whether suspicious samples (that are likely to contain threats) are s ||| |:---|:---| | **Key** | automaticSampleSubmissionConsent | -| **Data type** | Boolean | +| **Data type** | String | | **Possible values** | none
safe (default)
all | ## Recommended configuration profile From b6fed0c419100fb14b8a593902d80ad4ed5e8eb2 Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Tue, 26 May 2020 12:56:33 -0700 Subject: [PATCH 017/145] Updated photo to fit better --- windows/configuration/images/Shared_PC_1.jpg | Bin 0 -> 40769 bytes windows/configuration/images/Shared_PC_1.png | Bin 55388 -> 0 bytes 2 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/configuration/images/Shared_PC_1.jpg delete mode 100644 windows/configuration/images/Shared_PC_1.png diff --git a/windows/configuration/images/Shared_PC_1.jpg b/windows/configuration/images/Shared_PC_1.jpg new file mode 100644 index 0000000000000000000000000000000000000000..7b993b00a8918f4ad6e00522e458bfeea2927649 GIT binary patch literal 40769 zcmeFa2|SeT-Z(zCB>TRb3Qko8kqm~hWX%#nQ6~Eqld^APCrj4I zZe}FA8CeFi{O_LUInR0OocEmbod55AKfm95Xzouw?p#|o+hjA~{K4##C5)Ke84ILdVJ>B`38>2zjYOTn+m$)cQSfWnX&}_>_i@!qjXTZ zz<>8!Ma<1&|F5t5_S#rU#qI@~p@QBH?Gz(!pf;U8DuYM$r!K|k1EX4z zF7@zzQ@bCRc##Sk(q=$dY#1C`?Xc;Wbr)5c5nf=<8N4RvJf`lND#-HY#Qtzl1EmqV z+)EBdj~5~r(Tlws&<%UK=l}G}+5zmYZOoGekA$AQ$pCVqf&e7he}`x&(Vhw_Evp~5 zthW&&7!x3$m7+PJAF}3Fyj>(*BxXyEgh)j>6%w-v-|Eqf>V{Kfx~4K!BS*0# zl{;e3_m?`DOpoP%)YIIG{CY89gGT)fZ2mVwl|=1W7U4I#*!^|5OlGVsY_4l9UV z=(w$yq$=GdDE{?gV6ceDgVTJey~bwCy_R$AJVtbjH>jYqfs_i=YHl^sF}5Dj$$#SvkCE@ zhY87sWupTx6i?8-+%|LGxd_u%XWrq0HJ-=c4se*uCc3AUg@00cr(JaJd8=#HJMW<` za1q)cVGri^?V1okgdliH?Ab(vr3r=Xu2iNh|1iy)7e+ndaW8j_7)K}~#PulzA6zsJ z>l>fX+`U)ZL2|mxxJADuhspicyy$%`n+jBlGMIRH(tpjo;NH4n$Rvjnn%Sx{!&kDV zS4c*@DwQErg0q`9a0<*mfv8uZf^I{>^C?FLl+d9EouNy7Nxn%ekFXB3sAoI=BdQT8 zCq(mO$+^ldBT_As?_5IR`Z#Mt%uq1t03xgP;fTgF?kR}TNrtna;Seg(SV>5cu%sdKbYgqdk9{JacW1X4M3tVrGEt3>_TrZ z#ybR;!R=jFGmtIJCfqA=)Ql%JMqbtK9U*+%1_cN>$|Ps zXptSXmQ_()EUs3j_w?8?PqFxABtz|Sm_CjQ@^`K_pBg{yD0H>c*17%i`CHH$k#J8_ zLGUX$%?>S571tVywzHOV2?q11^QX=p#NJLesP5Hn9yoq)>+u_&>6n1yqrB_DwD_fO$j;X(O``b#ACv@MIE*2c+DCXArqRalwY=NO7D9W&^jZk92jyN%{ z#e%%qh-89soAji7+c_eTow91_aoRRQEjB=h{(6K+$}^fxR3O|W1AZD`n26Qbv#N1c zci^>UvgPybQ^(pgCog>Qg}`n5(01KHNv%;O$;>tShW#p@rGskfgJT#SRgP0BUrRh) zNZeXUhM&!lpzCKV(~mZgH$yo?x?u@K^6yGAm&vGU&gY?xv5 zgyj3AKAEbyVxJQRY|ll{-c4~HrIS|oYvo-=uv0S05)sd~azSuX^MLJ&dS_ zybhx<`VR0XU339IE_9bYyCZ?bSzBJMh+3X|${%BUJtqUFc6w>v;HGZ_ zDjU&g=i4WPJuXC?nzvoNxj+jo3X>TBV)xRv{iB-mYxa9Y&Yg!aI$U%_2Hv4)u$mvo zd-+2uF==SAza8{p_`?Ufm+sAQ>m3(3Jg^B_%HB}!LJ=mun`x}y4rQ!Oq2>@5Q)&;Iqlmi6TS7EKn2AV%tMJX`>;Dx?AavAIT9`#QGY&>qR6}frGkp0 zsURmyz%o!lV2Fb}1Lb3qNn~r-*9xT3K!$?Dwq`O-$||AN9w)NC-)^FuJ#ezjE`V|v zwmn)egbX3+<2Rc<@@!fS2zOGP#R#5Mkg4AEOA$6Aw$_oHRRDL%MbuxcK5mCu;hGcU z8x%gR-Gi#ua@u&}-0J&9dw=BOs9&qs3T3}&X$rm=q6h~E)U%>hr%PcAMc!ag~)*}wj6W5;;+ zPrKLvc;gdhl3P>MkqTmk8z2b!m@n@P5eGvEQo$BlJf{Zs9lL!77B$Cspqp*a;6l=7 z?u!Fq(=iDrdhXfT`n`6S*f#q(G?YjMl>`^KWz4NwIZQGhol%&Wf66UVD-pvcwAZpE z=la?6kiqLYxI=!&9zyx_cARCjQ@h+V;oy>|y1CTl8nSMC@@e2Ix^8NMEWY4|`q z`{9Ek0ohNrK@VlXCA_wDgW;eML%Kzk$@LG2r}=8ySNlv7FBY?nj-BxM0>U2aBpj8PNQBlH1icmSbsyWk}cs0UOwWvue`fJh#G6GzL2+&l3i{p`v`BgR0b9gE!_)f4B zXV%9Q`_+NGe5IT%0SMGDTN+(HjOt7@GDgQD5c715b=# zqafGJ-1N(~uIi4NxGLXeHyiCtM7@HqusKZkDt?^`3RAa34O@*W7sSqwynXesL}Lke z_)EU6-vut2#Us*mop9kDO`>fBg7!MmK)QUeT2?G&`&Ixsu`7wMO)Z>3@M{ijH5Ihs zP7YB&u%kqb+PRFM422u#43C|`Yp2g|2Xx)OTc~9#a)Y0Kisj`?v)%zC#x~#Y?$jNU z%0RWb4+>`6WTQxYAWI6i>@Z}S2Ry~H7h&B;Ox`LQg8Ys*dw17E`~ioQaq1hUn}uAe zuO}zA?77aIRi5IBq%(&T^N`h3xde_1E5q&3pSwmB<`Ye~rs-w;CJJ=NOcNT>2 z>Hx)rJK zLKcf(H*lLcMMPj$!cqjQ@hjmE^L<>-RgZrCJWgvHN6+~ZY{ZT^4d#H01JA+Xn#6iM zJ7yVms052*(ap0@h;yv8@y`=DTEedoQT#Uk_Lz5kz4H3XV_$lrejS8qhUktdP@k<8 zj_tFA$c?{0Bypy2C;6mXtgBm>J4F~j_+pB@r%}824X%GJf3NAp;2`JYaAg4#u{zUC zkSBC;bVqF#@}9l%ggPgtgRFbG|3F2;7rReFD#;Hc6X?^VTf81v*|m0mcENNn(O~V> zjdKu=M7!pmoO1-m;AP5(N2lk?r-H?c#8047XJ50Y_|j7vC)qXWh-of7!?h?ZlD|F0 zoWK}{G8q4Cbv@|BzKp0TyNOEqa3m1)3el8>Ly6u5{wo6|`UZCO^5UOIE!1yL+??i; zWC@BMr|?;9T#%+~2AnU{uw5gf_)Q8Mf@9vR@Z|*mKybDl`8h#4R;%nwoR^B(7tv#0 z-}DI`84IUaCv{-i$ zImJHWX7IL*5Fb=m)Bm|7DnGkx+S-yk;888RAZRK;@wk;?gUe^B1~4U5ebAE^qyul!6jLzC4_?v(js^N`#UJO74s&v{pvAs zda>ZN_wR#SCe*xPwgGzw4r+4+X&d)|PSCzF2K26px3%U-YZu=j!7}WYL&oY;xlP*y z+o+5by%kgY*R%`qR1mK^_iZ1iov@`sb!|J5nDb~E@xyUP>H_wv2OLIVa%-8Xpk5n1n8Gs%B|R$c zpF%cv88LTs(-7}0FXJ}*tqjvgt7Fw%J3FsPhDpSF&Ag(5_VHtoWNtJQ6*Lt!L@g!LtJWj7WhUsTpoXLlDkusFsS7@_Qsj6k1Zdg$3utBpEdGnsH@qm95G zQmtLMAoM848I$jwW7}WiaM$lyEi?QL%?XWWkWY}(9R1zZQ)%)?JL_oHv&ETs6rZ;1 zXff^|s@n#KmE0lf?OY&g!1X+F@{Ghs1KJr*s{KsUTfL;Vi|HYwC7zp_C2M9OzT%Ez zbj0KM84dXcp`i%*6(w((+cmv&<85U*>BTIaiXP+t4lI zSSyB4Dd7(%saB3qL0aY4`sQ2CM3`PFU%DkA+iJw>IRwNP?N>s*S{IY^oHlD&hF08R zN~QMepOQdjYE2atTIC!?&X;v)zJ`N#*n~gd6C6Bj8}k$se~k-mJdzELhg31hTADa+^^iT4YixE1$6_=WdU8z>^h zX|{&hyqLiE*|`fC(y1OrDZ^K``8C8d@gZnA&oW zW|0q(9UNI*9sx=&{788pA~WlxB4%m}m3lPn=~{dh;EMg#szBm$sDZ+S$66k(wEEzj z<)G4>VkVxJ7GNHYb!t<02S+J+gC7gIPlVx|qG_`HVjKs3*@Lyb%F>kfy?-or^ELRA zTO9Nz&O@on$DR&{7|zD{qB9+l;KgkGUJ~FimW|NrlwfPyOo5ZgOpNt9fk$H<(`R3zRmg)`< zpU~0T-UQueT1qKdsj?qE4HkjR;u%AWsi4nxts@MRABcFVQvbKZYJN9 zsd(}rg3a5k4@|qZP$NFo9RQS6-g#G3*1L2wX##s(B&Iw}%k;A1UX92{I~sHC$3U+c z{-4hG#D;?`4om+I1YH8r0)ibTo~D8Z4gxhu=Q7=ub6*{iAF{c^) z>zcjOefrl>qU6LnD(ErT8mMx@B-4qR*>f++xp78b{rWts>I5WB(It?3l{xr zb9Bk=D18!KC8W1fsZJs-UYWW|6A zLjgQHh1mr{T=$}ac#PLWfOl&xO|GKKSJ{8Q13V0rB~n4N3R7Sb-voj%zrOt^U$MiH zr&mW8YjE&gTk5l5Q$d!Kd!pY!zCc~s?@>YVKCMrwpr4SQL+K{20OXDSoxEmmEGI3- z-)Hc1boRbH)q)8pKj_O&UtkA-3>-y&fj*f2n|VThBJHPzwLcAMdd`A{Z=CW={>0La zI2-+GOI@YBV25Lun&?SgewP^4g*4xO2cb>l7kXR&Q+gLYcp&JEZeQGZb# zKl9h$s*a)A|9%erld`x=ivK=ku}ccTpzcZq;CuXyo!?bZ|EfQ-tDt^RP{#qUi{A$D zx^naM3H{pr%cw5{>P()zZw!u)w%+y-KA)#}RpFW6dC~h$Bl%LzQ-}tsf(KNP+!e&^ zdlR8e2Uk>i&Y*J!wicV%xWb2uf^)wn1|3}GzWOeF@!X{gE~h_}ozgA7A&0wkNz&0E z;L&6HP%@uPZ_o|XBg&Gzz39%CG~-<9!pJAuJf=D~w0Vpe{#efDm=Y)TB5Oot(7N}) zNFzNwy};_1_#VAWrEffL5~#Q$g>J8qBPz=%@gHm&CLfYzTEF*6Z*i_q?g+ZOkY!>k z#YuJB4(z6OR!&@&6M&A$y zzaTXxD-gqs*fV|fpsJ)Z#N${E%Z<=}m$e;3)w=D*;mHLzCZoNDZz6*CUwzf;yEe0Xo&$8piTj$(4}@koDXp*|(cSGr~diL`#hUY2~}qdMi~k=g@_)p>32 zXs;^hGU%P?wgAdJkK$`&W5dM@S(Nb++yZ{yS34XPu4BWAn&!w1BM+Hp@O_&?oI?oEVvmF zVsl_XU0_16=b>j|S949*^l__vbxD)aj+?2jAR2v6A=)^pl>bshw4>&AGL8?@;uOl>G`V^+)Ya zF8jzlO`ggQJwW6~nZIj7(KCz?vkSh#3`u`>Tq$D|ZvCFosdd7|p;u z`$|VdL!(nwa{dBBgTI|WueVc`uhH|yQ@rPDi!@zc+(zVpTr~t^UOdTesh>~G+gP5w z5WKq6R(h<#l1uOK*?@VPeKbF3dAGz@%qv(BA)y~z@M{f`wbX}y|o?oQ`_FR&tlizrbm+gMyE4DBciPbQ>*#B@z zY}Ky+;qW;b59!c%f>x|w%)k#h*gOk8T1Gxml6Mq|Dy^3)W7`)jpXl{cJ~8vgN+3IQ zZ;Pip%LaZ}6ei|h=*R46la~|STwK_us;2E~!I4&?iDFRao|5%E5m4 zanB7_ulbMX-z=*x4j&MKPd28!SbEvRNWy^MQWnb=1C< zU#A5LO1(6DHbN2|T$e>)X411s644Ecvm@ix+wtUybk;_0A?Iz#bP%P=_ctC~p;bA;!F7tOsZ1*zw1E&sv_)g( zcNnb@vsoxPqFn(jS%;kBD+UQx($~1NY;fo^WOOAcgCi$Yv~%#q+CU``m?|dS<7r^dl@SEXR zM+#mh4sjaV^dp-5i6nj^HIA}>-gV1js(mWy-gB@qo>zf+7?c~iIDP?Xs zqZh!>*;&Q!uwR6?t*zN`3L24em>7iZ(rMJkM^?^`=)8ZB2}D4mC? zQ`W$ubGT+Rbj9U0!>8&t>qJ{p2JVEqm_1#;eOfq3`v0;^CYczBsnKnoVEwcfDQ;7R zZ^?FNvUIj-I-D?aTFaEipZ?bM2v;T%_d+1vNq__*gjY(~IX>VQut$&0Lb)Fj%eL(I zjVzerPE@_O-F)W%?e)pXckHw!wW{#D(2xhiK!ZLI2YQ^06)V1I0SUp}v)t+L)ZH!@ z2OmGVRyX~rJCX{bdx(m(5e=Sj%8%r4^16$3?1gJ*KTY(y-L~`YKEx@ zKV*x^hb~YKe3~X8nhdVXZEy0(AY0D&>jepoppA6Dnx> z${>27-G$8e={_;Wm>ARM`w_8v=6huF`gaGgWH!CVb7&C=q)Ld_K{n`1fGn?*O}N@8 zEaVBqY%9@{_-_4XuQqSkQy_ywV|nR&_QM6pezch+rKejpdt?k7(mzq+YKV$G(Ecu- zp2KHvv&}D#;hwT_Wi0spor>(aT3&+atMT=cf&op*PwH)VUKkIl$~EqPxw;n;=^f~* zV5J&b%SdEw9?3|GdXEv6x?CH#GG=8dqvm7iHSzLw8cqXg>*X47>G=G^4s0Zt5-a~Xn>>_yMY+5!#lhbc;k2E8=oR`_QizI*`@c^_yW=z=gqX3zEjzi|Tl%>+9T z&8eU>Vj)zJ-xKY(L|Hf>zO!-2wbEAToQ~;*Yasrc>3<>EJF6X}vqWUim0yy(baz706 z%S@o(k@P=16IZxFI(X~JwO^4bMUtpgg%DJV03tl2f`l-@z6F281Qo>6kAF{jtO4}3 z(*UW%9drfaxkbo#^r*#Podpn`7OhkeEjP(t^H6UzsTrWONvTB z^bz+*Z0i4r=|W+OU^d2%yw?j%p_K*yK=fbPB`C)O0jS91<$%D)=>VyMl0*u9HnI12 zWXpf2SRwe&jFbG!IMII@=MR+s*T<>&u7LhJP9LH{KMlxin0`mq6_OLcr$4Z)?jM;* zHsm|k-S|xq5ST-~h*_E61ObVUot<3c`*(|p#e`#%nZ_?L;kJI+CX zz5Z*V*u~E-eh`tn^7XT^*p-W2x!9G9zjdN^b=va0>rN=yLIfJ4qz2c{1-ki_NI|izoGHEZ!0*ai1%E+$J=_6f0 zEs*wq#AVu#z%`6gD&$vr@8tinV*QuW%)OTwJfThOBM3}c!z4E(q}l+>-@hJ;u?#7V zHmE9>5%w7z=ebxuwTZfVFP@McQF~yRq(&}->w0)%x?Gxy3^CsJ+NB}c&my*@IIUbVl56yU74uBcP=*Aw(OKt<{6fk5W0a!g_8|7hu#x_eFzJ@4Zkr&Wjc$F ziMcNMM5QK*tBVM2xiw94s%zoEbd&)LQ&f)6yT-=(jmo>4=NzVW20NQQjs%Qt-ZZ!c zOWp{sCSJiKr;tHPH74pB9w__!T@MOAWOd{S%fPUwFK7uBc}NiA_uD3ccFu%v1#a9R zek&l3Vx>ai;9OX+i-<$%po32~F~MM;!Qsi7Q3=I!y=h1nO`1Euj%kMIG&OvyWEMf`1ladS!R#^_kQFDP0v(S zP*^AQcFtSE^@ScEY?s|Tx2N&OH)cWR71n+c9PhmEO@t5PlzJ0ooAS_6q<0wxgy(!y z$;pJm(VaV!9!-ps_a^jj_HQ0ihd@-N)Nke!ksG!H>+JjBs)=U^C-6WmWi|Vq(o%~` z%dqP&E;_~nk=Luv>0@R+Vn2<1f0E@PBvc4GDoGd$Q>t+_r+vdQC*)ZYE@J1#)!Etn zPHoCIeC2S;PmgJa+dW54LO(_;Kx)yighG_Oqtjl@NNo;%OaBEUI;mY^xY;bvF!DNS z_8a%k!d7pNn{N5`?m)XZ`Xgii2l0{O^3TBjE8qN8urj_S?lgW&H=40-?KLnP^SYAD zBgBsl=$MCV2LzV;e;cv zCf^tL$uow;>%b0pY0-sL(4;sO6rKqLblJf`N%Q2+G=gBVexrRT#tBl~5@MTgGi*;0 zCfG&rwcIJIs=_Zn-Bjs0kM?8k%3+&%yv*}JaGBVUm;p|EH=%FcITu~M7p{5=mWPA5i zitD-bx$vdq6gR^i7cdnBfiO_cQW}5_nBoYC890#MU=f1=rLgEtU~^+^&QJ43Y%S;^ zza>G+6sVwY-|*0B@Mm+xs;@k$`xycg*b3Bxc~G{%B$FTKS6etvant|1PeJ~{Q~sYc z51h>+UF;!=I7@g(UNNjhTfUw;>cp&*d4AdO#kQFx((zBvqfRu!L?iWmGn-7>m1oXXSb1-^U+ z+o^L0+oY6$1K?-9u}GHB^NHKClOcu6JjF@Q1hIz_T*p4+N)bYkQh@wFk|P=Y4-i`j zAOZZf06h8}sO{P!$^(4_N6}jleu`Z?S#h>M#sP_cPHHu12&*a&f@P>(xYR?9(P{T8i?(C6V zskqOy9X^Zr`-A=f&`-jFqJlK+Nsu2VbB+CyUp*@G-g=-HjOt#n+da6u84oLqY<1>EmD6e^NcVq+_r@Dn3*`uw5Hu z-yaeEFTrL^{85tX5Wh<3*?%mdz+Q6E4be-T2oj0Jzs0!0NB1jR|A_LR_2qZA_T~8_ z54{C{Afmr%8vUUDuKvJK+h}|`{s%SU_p5SVRmt7q7?~Y$o=Ej19JdPS8{|)MxNtu- z&pdi!k*3fVgIMgxL`T?w6V37HW+;cv@L4rW{Ta*ROR*rfeec;ivo)z8i=BHj6EYp1 z&R@gs1YA8V;mVSKSYUtDRCp^M;lIWnvaRosBGM=O&}mOhmc8s1$HWsI;45{cpogvM zP2Pfs4Ze+Ao*x-^$=tbyTohql3r<0ix|0#V=!D2Ws%V|xOh_#X;0u}L-?gIl&y11b z^n*pXto)lLL;S=Tzgei&kY5=g<}Vg7{TITW|4p@;eF9EF00;d&4fHFi{xYxMNG1Lk z)AqNd`cZ=%7W#V{1WNpwpZ-;Q_m83b-M;?{-CqpHKZWkUGTi?Ry1%a<|I?uRzf>2H z?f)IMy4?%t@jtJ6$p4cT1F%i(ga3|J1MC{#ojUgLx}fr@DxS)T2X$P!Y1~?gh|s zhe#TIPmvaZ>NznFnOoO2VQZ)oB?zZO%At}Z+=T(z66pge`VNvMPtWHcQ5ia;OE^3g zzG^sn0@0#EEQ{JeY@4%sd>JlPDOHR-5?6g&Iy-H+WZH8$$}k``u)y@CvvhMw{?fb$ zgkk*&ngcG0_svBpl-E@EEzKmE&VTF;FvL2Qpft!x#B?x`ol-Z5-acxUYSw+TFX~{L zr5mJkTV2?-@v@5t@74jJ1oDg8k1Ix#zZYiy-VHI`{ke>CA*5w;XCJT(OD|klQ2FEH z5V;-x>(^uTR8TpV46OVz#lHf+`O0TQbHtp~;9Xs>E!+-!3vfu=wLw&|ur%BmzrJiY zFw^&`$s#j&_13ed*6CNS*McOD%`%}<+m}zGxChX7zyWDwl!4)s+QUy85-kU<52TgG z8p?hc7aCW(V`9a{sLm$SsOeWnd;$ZuS8VGYU_I6o%@p$tXQUx^C;b(5x5jiZ*h&0q9XSqijHUjmma5F@@O-HulQ_I}4 z%3vLxNK!K>;N*%C(Q@kIh-#C@@s>*T6L&C|(?%)x+-jEx%Y%$CadFmM0cHW~Y`>FZ zu7yZ5I)pDd+aOH(Rrw` zT&`By9M&^&UQV_+_hG8T+q<_tP0wsCJT(*8e9e9YkA6~;-2Hjfh(JG5GFCa@CArp- zqtx{^#8B1A<)a4+n-{?#cpi6+fU2{6QWbWmva-iT%rf|H+sDBkuBPqj_54K0yQ&SSb|GF|#3>+nJp{_5slh3*KM#ORM_a~P6!#a3WmU5 zD#1F-G;Jn$-7CiW=xRB^GJ+kNZYmsU(^;Eh@w0x{czeM!U8@Klb4anYIM>2iz#CE8uJ&_?l{Yc=u-i}qhePrxG`AjiI z5*B#5-&X}L-CrPID7z>>Y0Pih+kVdNvHt}ZE6iIxaSfRQVk&;H6`L58tXorA@iz7( zuBxQ={q^@2V>4{P9Dn53ux846j zD0W{S?899y*rLK|F+`dZ{|1ETB7_S_aZy3c3-6rRlGGKtzRarP`N^H|gjW`KB=IcwGt@ruzL<%5dAvw=bMFX9)YWOwo!xJ{ zEUY9)xCzbSZtdNeu=ycJEA_)|XReUQ%@(0sTH;5Zs!ii!9TA*x7PJe$qvk=pM`VdS zz4d&v@YS-Cl7RV%xdCT$l?xf-xPXo!It}1V3m1|#LHsISwIRoyxj?^BQ({2<%(nY< zqQX&b{d-(S@ANp@?;Xh-^|b!9rW-&yGQr-nzh4;GI;CIuxbXPRuiX{!SYNxkHo+-d z|7$|o4alWXl8B4@!ssZ9ZIT%{EoCfCP;S!pFnh5y-B-v%mg{C-r-03a=u+pBhFaPA zU@aS8TTTIoAt)6vn)*mx>R%JiEEP`ImOt9+pvcwLP}bq!pY+Xzow(TqVbUK zsqbQ3&9yx&_Hd9;%{;_U!j8FZg_MxT8MWJ;B9bA=Q7NUH$ za;R2fe&R@J&^~QDjrf9ht_qbpk#r~N#=O26&x7fTYtG_CvzzEVPZ_dSwrtzewI$qQ zD;fiDe3H1mZQEnSD49i!yMlLV?&fnSJN0TKH_P6a>3uDS)uleqxTA?`)6?V)&O*a0 z{>CH;JR}tE31oEHU^_N|g%1tR%{glEv|nkVB*Y-uD$Eq#SCAE&+>L??SB z=Xx~Xhx`2>a_5fCDGr~a6Kk7}*|e*L_wC&%)NKIj8%m(`&=HGSFvofUq<*76EFF)t z9PJFPDibh$boOBD=slPS-Dxr9H}LZWcHkgFSmB)#VyxtPdh9XA0&U+ zZjYU8tVwXsF@-K4LAz};B7DjfRw@;#Q*ceEN3Kq71>3!O{> zBV|EEUj0N8#C2V%H+Jmz$p(znlI(K9mt>lYIqwgwe)c;a#UyyJMoqgPtk+j?_e)Lr zz^&k8k?s$*60VFVgIJK)89>ngn>NpR)6D_%z69*M<(Z&-y zHL;RxZ4kW57HeR+p*D218iI97j=VBevWT5LPY`VsJcM7U*phVt=byG(in{WuDxj#2 z-Vp|9|4HEFk|&cPXqI)pB0M>LZ?z%L>GHn14BESk$pW6w?|)Pjr~g*vzmfz9;loK@ z`?5-%qT742GbfsQtSqc`#7-JT@Lu-{&zyqN0Oz=52Oq6g!}uH-J=c5mSq7hJehIgf z#CEKnL|m-fhu3?EjCB_Ljq*%$z~L(sNU;|g*9t$sj_`^#f4+W4BKF#<-l6J_jgLU! z-kIPr*i8lLA3!-f668luP(gqjUA15bxSvmla)GM-wnlae@a^3BRX3L{ek`P3{=+Ni z;ttR+qFRU8*z>(#dg%wDkxTX%5aCy0@y^R$R^0@bN6Nv5{r1z4h)c0aK%#)EZd?!54ehsD17`dJIQj+1s#}C=QQDk-*QNL~6W1K3}nGMJB zhx2e?WyN}!fG(@ALhgKfK;c0&>XBT4SmQ~c|HAhkq@lKWL_>N+LneQL=(5caJt_YU z0Qvm`=o-I#C1m=S$E65pO6Zqv@>coxs3azXq6$DR0uBS24;JWybAP%Q@WZFJyx|}D7qgIKi!^A z5i-Of$ebO&ppkbyt9MSPcTRT*Ke@&Xu7%Ekhs#mh%!y;@wk`P|ZvC$?F1<|=ruf@# zc90r(RC$3u7+0XN1}sSh{Y0Q>q5}lza9PupL#%YQ63qsabu)!^Gr`bCM9)#*EyQ!g z9V~iQ4(bZzx~9=T-VEeoSbw12cE9~vI`H|O*zAjAW@LtrW#}%cf9H%{QtwLj|0<~l z^#30fc&6r`Q{X?|4=C{LT?G!9%v}Y(YpZu{HIB6FmhHM_|G)!BZhd$4v4E=|PkcoX z#!0ov(@(;5HZcY>$xb=NT7_u=R#_h|Yi;_88nJnELtTDZPsA6f_XP>IWU4D&P3yn3 zIu7rgzpcEW)t4I{_r%n(1JyRI$p!OTX@Ii8Wz(QRmgA610VB7sJQX#fJ-%L8V_&zH ziQ1PjZr+|zcJFJ?<*eK*ktY`8Yp2q}WsVyGD{k7-WMC6BzVAoR#+&E;;UvRfil1qX zlUT2}*GhgvwmZwTk3DiRSG85QV=Mr<+=&>10JUO?(s@?fI+4(3aJ* zf6ol7?fvp%gYvDN@!m4A`$X>SUk=Zu12+gY`R>P;M&@bp^l16qW^LDY6O6iQcDml$ zaQr&k-bJl~@Z8KCYsF5Q=&@`{z>)D^d)uBB8_^o;Yl9?t{$qZT{cF$CkJ~qvzG{vv zBfCMr{CY4kjr5qbOQjQzJ#3OsQyhMtoa-JPI3Y|RCpPHIN?i)r5T3i6US9oa;?nuY z`m0MeQ?&MUi{yrc+Ee80L&Rjf$HsAj@B)Nm*&V@W0j-~gCF)1-sJPKt?cdjM@YrVw zk^9~pFUc7HYHiB+i{#|wsRK7jMGfcvw>M!^3&x{%klmwr0p zzCB&Y_S#XYx61ee^mtn^&Tc_w*N<-spFkC8 z3QrjN;5Qpp&5r9ma8pTimUw@m`Nij^j0CAzy)Mwh0kbez<3>C2%9P~_*RYf3{)CC0 z#vvJ}9E(<4^>^a$To_C^5{;@8to$c(ohHjv>kU~y&z24ODwoAJnnoT9Sniu}z($HZ z&AM~$;L)eL-BH1Q8uPK`K9)GM$4XF9n0^DlMV4|muVt5ehPH^jgoi>?-p7fX0eQ#T zbT!3*PpzvVvT+ctp#&Kf zzeW__+2bIlIIu3<%}MOrUR|AN@UfPY=R1>lQQ>I1+L_cXkGG5hyh}FH#Gxrf1cbF# zj2K7ZMsgEXMqIefhg;>6?c8rmepz8$e3!o8mN{-9vUZJTotI~P;!~?R+#27KN;qpw z^k!Hn3t!vWyDswta-iW2+o;Lo=OdTA?UZPSdu=>3NN~Jn(F0s)`e4Es?8ptaD%k-S zmPZjr=*jDJtm!8&JIQ09OIr9HoMw$?495Dx>guwzK|@K)3pZz;-T)d{Mhx#Qk*KRF z#WeH4K`}PIBS^+#Du|z*-4HvVk1QsKPCPMBYPS10DLqcV8VEF36rjV9CG3re!0j&| zW3ZDPaxva6nN-l-6R}K!tYt60EVJ+gjFykE8D@gKN)BNb%zgO@DoC6>>s-=Cyh3^3 zx{UquQr0bL8!4mq&-*!_>h7r)#@a2t!WZ_*^TRIpx10fUj(i?#kaNa9w;Ubcn|xC^ z6Dlh)9zk38m4{~Sp0+H!W=D$TSki;IiKc@sU?JgmTnE((*PU&?%p}<<9y2lzv$F*@ z-gm0Rqn3Q|=$0h;&~;IH%Sr@Mw?K#rGA=6bzjwVld|c;Z+Qd1oQ&VClh8I8^UIvYW z)eG0iudCTp;Rge;&J#uN>)+S&cA9n2M|_Os;N}dP(360dcbB+Qga@nDa((+P8ZC%J zO~;*FVUC0IhD=srW`<>Dc9L=?=8wXJQw7`V+g`KZORLtzZS)bf*`v7|IAJeV*4-W^ z$c^|!Hg^?YdC$OEO-PMo!!mX@6jP*qKOtE)*%xr<2#2a9yxz4OO6qH9_a2tTX-GUf z6Zr+jm{9kc-8$_ZTngJI-l{43cBokN46B)LZK#2>=Uq&CJo_0|r~fCqG#NAwNrvbb zNABUgp-p#kN;*H@(g4tm%r4u&NiuJKU2mz5D-$M{Zs4e(;lyT(^~uMz$Cmrmbu)5y z#L@<@G6F>ShT>I zmL=(<&cpAY=u)tcH*G}KOS)GS=2=+I`7P8XsjljT1`K!_8zO>|r+lWTk`RZK#K_Z! zq*-=%A+5_sM|=!`{?!FV8T?B0& z)Jlo7@7XhLzp7G&giy!lZDxj^vsG1~q(4w#p{GK<0T%YXS)%^;Sk~*lB0VvZ^TOo3 zGH{`YtseIEuMt*%f24zfQA5srItD~xKi|u|IF349tTsz(q-?9Sirj0rhM-o0i9s5V~I-$=irx*2~cu< zcoyY~-}oTt)E8>Dbonr(mDOWzusNf=jv&&!ru)f741sf|9H2i?h%fqDpTcjna!cPn zTj17xn&%XbnU>JJwTwEQ-rA6xpV2`ae>p{U2R0qLddn=B$*02l`*2SYJtAWPYVAsU zS9V;o1oZ8;Iv!;7GK>6+=^JT~y{HUy{PD@&pCAXW8GO(@gpc};uhYKz2r(>`w0_tM zbx$T&D6bzjciTEiaCr{#ermXFz`<)bLF}OZOo8d35}HHf&?9Qoe5=LGVxb?wiST8U zp$R@EaV_JbyzBOmx#_U!EAnxJO!W}HH@Ye%zie_>z8{e53w`n$sb0s~gwJzs?feA{ zE;Q<>(NSL0zNlTaPeY;oMiNZ^o@}+iU@r~_fGpGiEeW&=+-B=#^l<2v&5T%WI zM`fY9+Bcjh5AG(@WoPag7PCBp15&5h{L`;yPt<*d^!f;C8HBUd>d-`T(z!aKbST-X zk@3mW#zVNcD9_(LPZtDW<`h>8cl@;l1OB;-W8VS0hVQiKCOk@=N3ii;p=ARm$S!o^ zvQ@uG3lqllt$uK~2tLa+98UCcJ#YW;GaeCpBDE)j2Q#?|2fxj+yzSRc@ ziSwsyTsyVvO*GWCDorO*FqQfQV{Z)^c)TfyFwh7LXpzP^J!uh!OAh5^`uWZ&j_JIvYM<3SfX z0+;u_gBG%#vcq`w%l^Zwd@w$IVqpu@oDRG~y1au$P+o4_KDtV`7d*Epb{**cOz4c_ zzIdGMFonMKwI(uXn7t6Zv^ukxWYzh*FiUv@W4B$9gQdA^69LXMTUfv`rUIKUNoDGd zJ%Ro0#nESFKILAwxSKZ_#yN>24OD^U&IAd$(w7NVp3w&S@gHqJ3Gd#IZXK;}rcC7F zI>w+szsMCt+GW8?N%igxZ^bFj*$GkUDij_HAKq7^4(IWunu3IQspuc%Jw^3;un9}S z-s!b{M!MOHDOGR~qzq1A33Y8X9kq2SdF|JbmpI&`PjbUNAVb+`UsE!nvHDcXUOc4X Ze`5{*ccy(p&3|Z#pRC5VJ{4IR=YNXrZ%LxV_n zorm{RzxO-q{P#QS{BfRziwD=t9sAyU-+N#C+7a5Cs)Tqnc(-odB7C5xqxb$zHs}3MVW-p*HmuuazuHeTT^nY`aLIgd{A^^YM%Z3zdvyA z67nGSN~iZa=sE=11;R=nOI=>>c2TCN^Va8@_^f}j`FSv=RR%VG8}SHf_uud3*(1hl zLGmR`<1{F3?m1;}l+l;9$^l-k6!QRRJt~sxb4-Otj8aLv655u~zZQQVvTMk7#2u|n z@**^w>Sj*PuxGbN*7~{1xb;mvp46Xh6cxo(n3kl)4}y@Z|1;r1`BSQP7NQz6WpE@5 zMHfkQY5mH3x2>8fq7po{2kFthbuH+Y7=k1>`ZMjlUY)E)S=O zfzS8d$I|9ZT{io#T<>cb`%x^c{`#)OqBGS9swm*1nswQLO-2cvlab1%BhLjF)+UXeOGG?> z)vpo><&d<`)MEYXB=hX`kSs)9MhOKqAQi7WbhDmF$VB&$jtwhl_!kuB)53?#Jt!1-t`3Jo-PUQyN1WQ4Ufz z-NaKBvK^!{B9DJ__chq!7g9m^UqY)s?`HYM{gCz!sRcMv#ZX`By|}w=jSn_ys;;5n zdf04x{(Bu&n&ka7Z|RQym6n-Y|Mk1=&r`@ww8M%lvz4^NWU<@fg#MIWlNKU3>Q3uZ7fq>5bB~E99rL=i zGJhq9=%j$Ko?&eYDomO{hlL$@Cp~9WuhpbR<7GDGP`1soUcY91vOG*Dog(5A%pE$v zY*4G+er+R=8fn8UJ`p3Kr%%x~E{Q*1%}hTiJZw9hX)4JH(NNvvr5|g_8d6DXob*rW zdmGUu$xcpo$F*kNKAPDoZC+tTV*8}oC2%FxE_n-%EG@1ceYkvmetp#{C?fK7(!eUl zZLg1mc(pq&@M5vDgGe%oHBPD$PpL2QptJr26*Vwmezo`h=nHXxi($a&@<3sJrceIa z^S`_L7~?_VP*)asxw&k*?W1qnSm9(lYnuLcL=-&1 z19=X(oxRiHz<|16tI`gED0k_87;Ta9ci>RI=I|dsw!KFi^MQ4={3X-Wcvie-K5Io3 zZ$km^>-o!HUMZAKKd_bs;-HV9-+~z)Z^>To%MR>kU0+l#CmSa-UhRYno7Oh1+eWi4 zn8w(gfn8%{I+H_=WWVt&4$1O{Tr4Kecf8d%Gd!BM%i7brKG1q{62W}SLiYM}*x>?D z`x2SJHAP0F4z0kmF^_L)K8}IwgpU>$pzR~ah z=!kM>w91&GIgK^-UI^__W>08f-p;EWfpOc8JyRl?QwG&9#!BLCbq=5^;`|-As>5Y3 z7KA%1`MV8ntxk&|9o_Ty^3nuiw>*5~Y!n2T-ziaDsbSiE~QNWP2>4{ zH;22Kt}6G{`Ie&G*+f~ulhQg=BkT$@RSfzA|V$$3B+D(I-Ct^_}CY8MlGA zV_LG8nujBQEl-7ZQ?!$TAfIyb>9*ghWRE@F8bk5+%5avf$+oHQR!v8VeP>jBr_iLM zGcc)x8AxwQnW4$bU#+()*O{k5&M`Wa5ldGM&p~lc!{cM={jj0jkLw{I)+WiH3M>+%w4j+tiF$EPt^+PTo6x;Xn8~j z@u6Mpm&G>OCnh)s?lDd10=~JyDpZN_N=N>F!_Ufr{#Q5*2Abl_NfLG0o5gHHYG^jaCe0m1SX%uen3he!mUjL@W!g;5RYPm+Fd-{&G+%oJNpQ=MmEQs8+d8}5 zzF!^8^qM12zU~uKFz<&}4@Mj}tx7+!US=$<8j>h#SrkncBuO&6Kv7Oz@Wac&WhMXG zZbgNy;@C533Y=7LmWspZ8vUjuHz%D*=!k3i(s8$FOGWAN+!4H%a33>Wt*$5N&~)!Z z^klEB$nAK3GhM2PI;}9h=>nmc<@XX}oTa<5Co7_@h75-VsxkW_XH$WfQ+o+xiG6JKx`O^y%_Wv(_Fssl^Rk7P$Q5wU4Vb+f%U2w9lzaKKU3K-Sek zKEi8V6*y-r#u1onPhEEhY+kV`&U4=Xc)>Y{Cu@+nG!CIe){TT;#?h%|K1$G9E-~g>}*uEC#|lJ1F!X`ARzhpLz-RhVd3@4yhUmT)#9%t zA9^`lbt#NMn~iIj#hWlPR*k7-5Zc`+tBp*bESGlNpU;su5@CBO!|xSr`>O|y3~5#*-A4TC&SfWXE*Jl9Y^n z;jw54!$wx9ATzR3dkujlhypW!bD0B>;$AifIM788vxOOiOB%l*6N&Gs}CcUf7^XMNQp*6g%3t zpBb{Z{Qd&b0M7d=r6oOvJ*q3R9g%XuA-MO^bSs2IR;_U_)2}{1x{2|vokJm`$^|T} z%>yCl4<)`EWw#{n*IrEws@Dp%7*F)hU6eTFC>zIF%oKc(*o0e1oLefT#Xud^G~nN# z&uf4RJZ_vXv0~V6y75OH)e&hIAZ9DM%U+>N4QUeAUE4*`a93(5$|hY$t3L_mIeBAmb0+9Y6XnHZF;WNom!oQmWtD)Sg`#5B{*I% zg@x&kw2B`Sp$f7$-0MIcWt(1z;epk!)-d=WbA;hf@KufTx0)e}lHquJYzc&hgak(AH2c!TF(CGoQr^7AG zgsYqahQzWLI}6r#2vukh$ug$z#Jl5Ok;t!#ww`KCTSoDGo*Mtic)8|7MP*aka<*ZU z27wo@8Zo=%mL5D2Z7l_h`ge%wGAt^ZzY*Q|b%b;_U)+lo%6Vr#?6)H1Fwd-c!YIlSU3Dd+&Or@>V+17cZF4e((jJs%zknr`)fOi$A_#r&^7c^#4Be>cUpc zATxMkjS}9tEbZzw2VFIC?xoUXW7?I$J|N~7?Y+j4J&`}8FtJUwc_9&iU%i}|bzxoq z<2C+9`h!+3JPiPx%*6diFZQw-aVtO%5~;UV@Lh*}CaYe|+1rK0!imA|K)zJ# z_EmUlrsQHh1#~~?d9qZ6mLH0&X3qC#h3aWf;6=|_bU+@_x-)^r=E-7Q8B`wgzMS0I zw{V&J(NWAW=1QiZWooG4)sp;dyK4` zY0_7!TC2i8*%_RT)`9hz|9kgXgT`h+S<0qB4?Ba4n=6UJmpb-C1t!f(Vocro?sO1% zw<*N!{IYHki_z>uy^*NG!XM7$R>(T4&YuX*Mjm}@0p0hq>C1A!Wb35dv)LU=m2bUR z<|`5f4U-h<^5QSO6!bp>A{5Uxfl+cI5ZVobq~V}M%1qt|>J3h2GqntN zii#^Ao^G07OWcMaI%4&l6h`mN=UyYGTAmKX;D8jqq|INfESyiif%7ne?<%1CPivZ; zeL~KgcCbdBu@A#b?*?D>3vaJGbmH~XytSKxsWRHd`Ym&rQ?G=US57=NezJSVf41g8 zdLfdl)IhmKE-lpo=EQjZy(i3`#3kUQgOTXCoLzbfqy~;#^ODNB0t~9TJL1Qi`v#KR z1+1g=m>fDY!B8%J2&#Lbp zi=9`fWdK)@=EY>4&#blhw|rm{HfRq zGocl@Sh+K`shY~_tKiXBtyhO-;rQATyUT$2eq+T_r=|2ndzhZf%-AH?o2I-cl(`%2 znsbZ70t4-C4!&^^NqD8&s@%3Y5b7y1V{P9?m0xnN@77t+nn>~RmxAM;Ga47%X%y2P3&JzF*j@0+Ibo| z1zvy9llw@ru*Y|9KXcSv>ekjfkMl+cNB4dT@&3H|0!B!7 zAlPB^|BFX8E zYI!(U5)`5=_xeInS+;u4hYBf8EVa{SWVYeGl%P6!a5qlk>ZhG-5fq%yW%kF2@}x<) z&u(p6lp4mVUbl(AT8%#xcQqWd5q-MXC-JK^`k*AHqU{m8)Calt#>90Locmk7Q}Z4E znff)UIn{3u^1b${ZI%cRaByN5U)|1TigK1Q)U0>qSWHjn&J^bW@qHlJC^Em?*m%;x zB8G3#pB>;WylREcdS1v?!jgQn6m9^;l0H;j+lV1G}zP z1F!Nky>2Ij*2$?s9mD%ss1nc;VBSpwLF|NcjC7^+udpj3c3+K$y1k)rKq|_FfCxai zOJCT0Zc@-LK8k%giD!~Vm~0e>j(t{*#(PeiDvY+~cT_S9X}9{41(5oq1{&|JuOIn{j{9(WSI;os2+3t39_Wbi*2Q4|3A4j9kr_GD+s7Gl_Fx5CU% z30;C{+HDcoNvcgt8fwxkNAX%4awY+Kg&3~8ax6s4WR@VcEoWAA(q+q~j_sx0xIjOD zEm?kBx%#C9hrK&8nI@fGR`>!D?iq*x7R|lCfT{5)kHgso@jgt|HU0|}8;3}y8ml;^ z5_|By!{bcDF`noN#p)`iuc+Nj>*_iJ9Txi63xw@CLJYDm9c93pero5H+8XE3Ni(aL zV$8ccLC?;$xwI=hIHQb4KM|l<#VUe0WbmDvtVw9!FvjQA+&~!}XH^<8%0k0>wcbCp z`7${e=P+5A#bh%Ucqh~k$1@=mUT9QvMyRR01L-VLTC{+OiI93-U$f;xFi!n#|w5^9s9%OLL(QEKRUSMbjbMIjWZmMzTM~%U7MPlifC&Y3q zXuCmz1!M}EXBicCk52n(bFVrf%FNLs`Inu2!joIXooylv%qTm3xg3)@9o3Drqi0;j zkx%qMBo=t0s%}0o$?wI&v0QSkA%7vU|U@CwASR6P4>BiQ~uD{xJKJ z<#OvU&RK|8{Pu1e8W=rGh}p9OYnA&i&R?g^SA zHeP~N%?F&n1^j+PKsI4qsz@tHZJftn85T4S4_B5pE_?1PIbEK0vBc5gy>%*QfM{3J zsK+Hs;dz#Bhq*+FhW(NEE|*KjaXmW`^v7&x{x8|fb*(8zLgVZ`k7_D&D~CqQ|xsc#`ty}rRSR$tybPI~oY6i>k$v|z7j)`T;9htT{BO7D7B*%dPfhB52K{f;bL zF{v+6@EzUKIdCg{ZUSP0vMg~s`8nQBV;!bRJT-y6Y-vXeb)TjuYqE2pgAs~E;@0oX zjj^X@k1VQrcI(U_H4~q4C{MA@a5>{varJC7nIl~^N!ks#gIsaYVo%1wT7pfnZ$yC*sZiEGxEy0^Cim-7N=JttPRqem zroKv(95qx0=0#=ozH(>AK0Cb>hZLfDUU7ggk{Wc|%8_GFE=Ss1Wf?y#bul7JAY6Ao z+8(JNGLC@=WJ5~)O~f_qthO+Vw-6r0OOH&Oq7XHAUF)2uVB0=ZjW0|vIVQWBhR=v# zNW3RW8d8~Bwu)#G(cW_H)-xj3pN%Af;x#Q6zAC`U?Y>KN_)1VX)Hd%*G1F5d0BLr- zvKz%A_lwi_G)NbgkXxtui(rVDJ|{Z9`JPV~mzhr2trnslaRu*NuG)g9Ex$au{tRsk6EWMx%d?5AdLlja{-d-VZp}??hF=DNA47)`?qx>PCHB%r1wKf;)D^y+o5nP#|3rC z@*|@^7!;(z_?ZS(U3U=-!2SD+aSe%WOfzcOj-kU&^rJsYZX2}1p?37C84S4@gBx}i zuiAsc3;lehpTtO@6Ru`@E)~C3l|q4^G|5w0MCnLyWYDTjg^F$E&^91ny0tu#NIZeG z_>E?2^;f~{Dq_oDw{?BMLM0~ejbcB?5%xPQGN(@l!YbQ^;iuwz8t093TtFFY#^szW z*?U%5R)Gv%_v|ht+w`We*@LTg<9!@tmMGuE@}uL#Gd%Y~aj-e{KbS>l5QX7_O)^h9 zIg&L*rgMG9KP2Z7?Dc%iJCrjTN7wC+=HE3s$qh^k8$J&|z*&{sm6?;zwcqbEX*)q% zwCSc}CuE^vfNasRnw^Q9e&b7TO>#S_zP_8Et~*w}{@hA3GZ9w}68H=pPa0P)nL?sj z=)8i71K$^JYcjWr5$>;F&6F&bji=;4exTYCUlJ4_$b|HC_)}2e!4>HrdF}qzaMLY} zcQaQ^NN%#Qlh{O6t2ey-JK@+1g5rFGkG5a2au)*x8`aV5Khx5~Y7ToGR_Cv_=EI_% z5PT{nHw@CW3L0IXSvAcZ>06KUtKojFjY-L5N-+=-NBMx_E65NezT1Bb#rDY8ZQj(N zN>0lRgy9YOAw9`kjWNftWw+IcPO6eQ-JX1=OrqY*blElu2XNd#`sBFC)RyehkeOPK zY%L(8MnhT8=%z>!FP#EfU633;vYM_ue)ZuE5ebwu#dEu1v-D6LI`=j~%Xb!!eW^>o zhiO+q(p(0BttU_7e8xY%cn`qZcAPFFo*@}@IrQ?;Rp~}=D4CcbK;^W<=i3!fkScCb zZ-QU0o5LeZD*Nv}q03?tROHZCu>324d~d>Y z=jx_RbP7O4#`CLQV?zlMYS0HAHGeRE#G7Y^+qWEQYg-OWCJKXw_iH!1*04IaOFw#3 z7>F)+m^u0f7Z)-^d4Hb00IpBd=VJ6QN)^l`ZX>X?!K3^tBw7%B(fA49vULI-+Ozdf zDW%5WN6qEbTBtmxZBk6bjK3RQNOYvovD=FU->i9!)MlEMIpqmQcL>Q#7;#L z`^}+r%grZJK5GMHT2d7)>S-kLI}abW82F0l)LsrM4`uYvd=U$wajyD?XOR2J%yFMZ zW216CFYPIFqF)4U+9Nsi_V3o{y2a%2YgHgMd&-~9$8(4N8$It5l3N}HjWvjvV`s2ACD~|Tt z?T>ti@L%FYVU*p#U;gjHv=$fvaJJ^xtOQQ~eBkwEQIFmn^Q~oWroDFB2tMOGaopA5 z=cx5J@I}KA{v-iHN5b|`Jni`S=Ro~%brHp8zVQVvd?s+p!s!YV%Z*bwLmR%+6kK4} zxDzLra+dD|VW7j-5Ep1ES54>41H_b`crXu4-66m}0{}n{bSS>)JG{$YSY&&O7k&8` z#yhuj%waus-$b4L7HNxWX>+gl$VE`OnIJXDv|O5QcPOQq!7%PazfqRY%iM(`gy{f{ z!={T|pDvcz`0B)mq1rv#VMw^Y&gxi6?xEE4=IH`E%-r!9fkg)Ay7BFsdf@43O3VFH zrwGP(!#5R$4NuYjNA>Gd@XSBH#C~knfU#zka+iCPaZ=Gx2ps1X&%b$xNn_F|S3cg7 zC+r<&#DHXJU$BcHEkn*%4N?+K%HWsmxxpm-J48l6$Pk76Y+jq|}RpK06 zj~`OhA#8Hq3;suSa@0h$O{M1j`vJ;9RuEtsj@nHnAohNsf)m^>c-#X1L zLqM_XwdQrqnydw#l0w4?7lTxZA=l&iGEYKDl_XG|d(_uS0txc8mL<>Lv~*J?vc`(# zz!N1dfc&1T4Eog}Y+C?93yu}Bs1Akh+?1`lBbYk%zw53jdG36{nW|t5*l2$>M)%tP z>U4Fgz9U&!&kk{_RcCesGkE`aCCtm8aGEm(V82VQhg3GzLLQ2+kHt^l zsYwgY>vE`FGn2SxYVCE9NR5UUin0)8ibFEooWM{m+lWMxO`n+^)_*e6vT4n!BPcC# zHixAl{?-Ccq``xxaR5O8B-~9m=iGX^p?|3BB&lhTX*C|<{!Xl%cAN98<}2T2Ot@(p z&f?%n-Zrx%4hN_P6b_9KZWP1zE2Bvgln6p~qgdoYYni^d#f$vq`b#y)&g zQmDWKJD&GhGb=qZaBe<)alyS}wG`^zMy;-I;;MX!q8;v|9Ht-A&IzEl`|)0|vQ}_6 zk>fPm5AOfS8)2V6F?^DkM}Di0-Typ&%iZrwNod4yom_3%2Xahs@!IM*u0u~0Q-AMvDFK2+-OQdC$GVEV>`(+HzCGp)asv6~+NCo=tbe|fj5Zx5<&DN6Wx`w_ zKN_@?sY*_5`7~@S5aGK*WITwF`4uZ}_5HBYGMbZbk>pFbFABb_BFB<7s3rAd=bPow zHyNq$8|ezUt}`kr6OB4;W;&eR_g8AYK}}2TxY3}``h+h3GJiy7V?3xVCf(YE9r%iA zuYb{eK(ppa@gP6O@7N*8aAv)41!C zxQ(vYp!g#+d!a&ca~z%My~UUgk$dnjyIm!~IHEPfui#Z%#i3G&25rq>$W?Es>k!FS z8wO|r&6!flibS7@LD*ghS&Z1tiiSS|Zb#5G9(IyP8yZeD88}rnn#0T%#M;Lt+ZJ*m zc1p_Bt|kQ`>G>5|9p`tFUA2`UT?Fzj>=*-z+&)w^r7*BjyV5?$g5N4^g!g%m#FV4g zfOBYk1&r$UNpmMg#5`G!P18OiF#4Utc(7fHnU6jBED2iHP6)?%bu^y>pE=%-V!<=v z!?jpDV}0<=lW+%XQoRI*iQm}L%n^Uwz9g$Fhqrb3IQ*;@e}ezT?sWH8OSmbC7fzJe zdepC+x61yMd(P*jk~{qOWHT#%Xqh6qL@f5~TdlF1@&~I0Aovh^WI#~T{O7oDlYx(0 zw$5|arL+BsA@va{Vvv?Ck2H20rh+AL|F^4B4g+)(tN0jDrbo=SN^%IG>K4AO>nUlD zaC;?D(@toQ5YU)ySZ8Owd{Z&#k5rZF=&j9Qg`CD$&+Z{t3j@zYnLV7(gM3kmBEyNq zZ1k>rX2y2C{>EAG)(<7dX|1rEr}vG5SIJoECPH{t`jcr?g88JwH`DwWOHL-6-AP_l z9tMQ9KC}3WJCZCgr*11~x8p{7OcCr9?C#AB=S`i$gW;C+xuN zDd%_+C!|mBKv1M{xNv@aZxl&Zd5o4>AKx(Ytd@)l;iK@YahQ1vb}|wvhK~<@iNyvF zk>5zGLE_8}F(j@?hD=Es%FY_Alw@;OnYL8cNY-# zqKjn2D?=#f>|SZSI|=zH6@~7KM0;dt(Es3_lpfKNp~70EQXiKq3yaG&wD`b{a<- zkC3R@f*@xnsS)=>W?LX*nw?7ixRBOr=m^ei)7{n*^)!k-BJZg=jxsoJUl~Nt*tR>@ zxNHfz71eewqJh#AnMyni|IaDC%x`=;a8_W-F-vQpUt!kBajM~qhKs=RPpOVN-mj(#F;%d)=F#c3b1Ig(6|*fWy9YeAc`+2k;=1l$=7$GNm`Db})@ zf=$TSx0j~A){^^-4%^%PYP44{UMUb;$`G4noSA*qWQ-Oe6eXs0cPYqGZC=~SxK#%= zq2%wTpGz=Wv;XmHKK(}>S44RUNA+p-cEhd$vKErQqr- zB^dWz0_k{kg*WJLq_o$DJXQi*)+qRLO}%D4c0AGWN?87R_T((1hrfA^G%7Hty{t{A z_uKi>u^(4X?=|B(Lm?T;`i~)lp&tZ1PnT1sqK+KNDEgv&$})N%TaTa0t3FJ1!+bY{Z!FHp%=mGaUfp zDq{ZkK6^1<{lm~Rv(6^qjz?Bm0FxU5oY_dkDmVs&bof0T4tmG%Nh2r4fBpm~=n!D# zPM)j%Uat}xC)4loV7E>$wt24upzrX0xVrgFDF9Qdw# z{|_gy=td_~!ljm&J8+2o*A&B9NT)hrei0; z_)8_FrB`3S1F4i)-A`vLhhfD%p{qZ$=n{`$OUM1uFzefjXm{sS{;eASJ;B7B|ATkI z+wm-PcmJw@S`@=y^%K1N-}(N}-hsupC;V4`tJhxrRlonE#s7Qb|Nq&DCji1sL_zmg zCba*Yf3D3>R1{w+r8m=p|7|U{-+l-TrgE~t2fu0C`m3CRo&cOf#M=|>{Vx+gBw%Zb zT^URj^3L`CD|mdW#=U;7O=aIBFwP6EzX|~Qhv*(WAX9P-_|-qE9Zes2v1!T&OrA{qeAzH#oqLH-dp#!zu))7foU}M+GvJeH{ocb;%d?2t_OKrc zmmH+8_joNI{W8v8xnemSkYB0K5_Wh>_{y&2Lyte|&)_pDkIogV^|Usme2;$m%;PDV zs?<1)SDouU%JJh~W@hu)%<_~+-1}`WZh`z;vWtQGhv`545f9FB*MrZI7y8d6~B|bjUqZ&+H(F@~xhxxXq5IpI>eHZ%OrD%1dM5=2hvd zcd~Sn!-F8Lmq*LcVP7-yXUXOPrzh zr1AyqM%kp=B;PFqNGAhWlqT9)vy9qt?!(fxc=|UbJ>d#AD-%!i!Klrrw@*K#lQJm7RH=@^&q<=3faO>ioy@Gt=!d3x zOd95=1C11l7BK;RhXp0JU@wH$HpkV3zPV|v#705oZZ~bp4P{;?_&|8q30QGu7lrY- zkB%2&r*ZzW6ad9#?*d>$mO~S7(yWisC*F@6kKQ>vFKe7Lf~rdH$2RHB>&%&2JU;*J zVXb|H00$@YNEEHGgbyOu_T8y*>ocf&<-J4lP4bq0!;1ZG6<6|l#1|m8XBUJR>;v_N z!1x9}@1Hja=%u>(*{It>DCOkpY>8#bJ3+jS_~Y7HPvdET>f`|R7FL$qI1&v{ZC%%J z{%oelczx0{aMLr8RU5ypl=G-IcFVuE)Z1R37DuNbW{NxlQ8&(fsP&zE!geTKypHTo zI5SjD8DHSF@d)Np@l^!*7z}d{0SE~0aUf#xrFZ~2E_#f%UgGTUP=9r{xhXm7c14o; z@TT0}1I0&c$5nWURISexu}a(>J&pXT#tgi@c9g>+?)^*L3Ab|FbGXw|7VAx|AVNC2+)N zJdrY=iJ~wT5)_V#Bv|~0%r{wL2@(O?3CuU$qxTbbC@k@5?U$}ppJRS4U=b}=h#SCv$#G$w! zz+Naoks-f|jnj;Zg0%jj5^~6%_PrNHk-Z*90xWR1Z}K>AX`SjUs3^5jr$D5cT1TM*@T~_o%Nn+0j*sXahlh?!( z{U;V2mkFC4#Ik+{L-zR@Pmy~7R}5a^t726sc5+PKy(K;!l;z;f26$Kws{2vQyzu#gZ^mEBNYebAb@`8@dh>F`*#l{OwwTgybh`va zxXfHm2jm)u+K!!+bJsw5yV%}4U@=A%AcSq~-;{KkPP+I?S-z>to{hK-3iOO0tY&!4 zmH(pK(U2M6{^}gyE`5s*EmE<4mjE?;!bOriI0HEBQ zJWj0ce0Dp)3o?Lje$syL_U;o2spj($LbN4 zC-Eq0V@&(3-&*`A5MbjMhVBOe6RgR}DPTTKb81-6+XGOPYCK^OJ=JSswjr7GpL)$c z0PR!sF<;tJ9DkQ*Dc${ylaS61BL`=7YiCT(0%8#LM!3ZAw+kCr-ZW+1yU#qz6sz=YLGK#I4HF0WIrAU|Ihr5T=wJoH z%m+!YL;(s0)1iDZ^YGDtlPOw6<&KZS#h2hnKa6F+b#?R4?Sxz6N8hbB_p2p;D2Eg% zN}lEza|zOWez!OjKm0NH@uojX#(DEqn~Egos)nfQv?U#1;B0IM7*ITkyqk*l5Dtryfu+Ob4Zm)TIl3Ck z#AI_$o1?jjrNqb#s*wKKhC$4obvB;gf78IU0qK}l^k({pdTRXTP1ptaGfCL@J&z&r z)$!GMG5*w`q%HUAh!O{o;&{rLb}Rhye5-c8yd=FM$;&Z=RT_O1Xl*@ASd5YDtk-}& zc5HNL#l#uM5QsiLAf9^+@e%tGgz-5@N&IiO+jimsV7D!KqJW8VC9 zw};YpF!ykTQ0V9i1<{BT78_GwXQFf9Ir2%m{L&Ya2PC48RN~=BSw%qf9^zs_m5zomGhYY7H%G&dU{aE&g)yjL7mAJ z>EgGIDr_Db1MRuP??upchrsQNpf515&9c@2>ALrPrMnCkSQa?0*u=ShD>62aiY|&n zdIq)AO5>D1sdzCv&;oWgutaaXE=kyhu|Q-neE-RPq6KW!O&fzEF?WkZkGKZpye}A| zdAeQ2NJ*?8l3kKsq9k*$byJYcK&4w(PY--J56%u0-eiCcc zoiT-U-Ust|YG5@I2eCRD@R}9lxxwK*7MUFU?aD)Z3oJD3xNO)x7%#Z`#@$Z1hjO-( z!vOh3xLTyqAeVRUwGZHGedbM4Z5Ekv>F`k#QP7hr=v{=d#uls>;$+Gfnj{iNqvkz zVpo#u2O=#sI1S}CXBnnA72 zZqFSgg5z=1%2`7Y^1=IotM<`GQJGnD^i6tkCUdw%z_ypU=E%~`h=#`;?F}?a>yh{L z%ARTy`A2~cf#O`Xk6z6_w&cZ5$0mi?*&@Kevhx2M`=#AMk!*!jqh-Ssi&&XVUAxFT zyk0qU(mx+l9FjvtXMxl}Ty)7X{I6jhDc!t4T)6S7Be_Cql?ei`ylF2MHtlC4GUru% zH|@O`GjJ2iyrAo*XD5w+PRwNFDkg?bVma<$w*UU#B-7~56A^g2vJ}cxDgzyz6dhod zd?H3aj15vUoaJ#`Ql0I^aQ^HqR`cVP(q(UlQ2cLYOeV-{4jP}Nb*5GVcP33@+^ud0 zvqA8I0UmHMB^=-2P8-k;Ndkc|-Stbyx3Nz&3*^{K* zbZWSDQ`?OL=8dBp!URtOf_IjU_zO^d{@0t1%FTK$Q&*tV>d-lq9+BMOCMFv0K^E@j zHbhDiF2Ovs%RpQbK{S%bkhDx8^80ST6D%NuJMZ(^TJkX$-Xk1c^G@2K?LKkoYCebp zw|#9nbEFb~6s&Ss=KQfdK!(-fP$1ZzR)PO&*nIlRI!1W1V3j!ox{^BKjBT+BR z(xXCxy5y(5)kB}spi$}W-Y3UcVv6Hgp z(UcU7L^6TzBaTfQUK6+??UpFB*>W`1j}4W`MqOu1jE!55B-s3s$FqWZS@2SmF|%I} zkUVLtC2c~6R}ZGTUr9NizpaKy8jTdBnf-OaR%woveLvh@seL2N7X;ro62KziXK}+U zMT)q_Etrnsahs^#dXS#{%U>y}l(W-+?}2IgQxp5eYLAU0Eb2TV!bul%xnqI_-L-j`(gt%9JvNwC(=-AAOzYrb~0(fnES z(d-B(SG_}?w`K?3j#-QCB@M>$ zI+(LMY-m{v*OP0cY6L?1O{{Qnujbgia7xmQN2^0yha6$*--G6q&r*{+H_pFAHT@;A z0JOKXUKJS=gUu0HZydspJwHxgPhp_pM&XPynUdL82;O*;WTaCg#07~XVDFP|p_s2b z>`g=X!3rw8W*vKAkCppW?Y}*!_ca>1Hm_IBLOumzlh&FVx80_QcY}#6eOOv|yV7Y4 zkKgS7kX59hB(}B|&?Z;2$~H3h<-=cgBmjtNSmVELq<>nsPAxxGVIzfMVRbOj)&0Gj z*4Zy#D1I-rq>z^lh`7SzuW6-vo#4CZx}mfoc~{eFATiFgL*8FK=Zno;xV7unM>gdv-@z$SRJz>K*$5E*O zgXO1H@PL`u{Z$4Hk6jSz)nnr9oT-s0u_0VVq4(3@x1<+OOM>HlQ6wuF+5h`2C^5fp zmlhuVs5SG7?(H=#NIAxAoH9O4RJzXm!xT4f_oR8?r6iOwW>4jPTBiRBPGOS^Rse!Q}~(Sx{wl2?U?3q{q(-mme(53 zr@<4wyT)ag>y@V)S-i$&hoP0z8@@?Anb)V4ha0|c>7UNk`dN1Iy*2&3WhzrKx;mg) z^b=?dAUq&ymY=g&ZvKB-Y^B$<=R`yYB(v6T+Anl=z>_Pm!m;&iPI%_Ur{NTcKBCC+ z_`lwZTvkMf>%;6VFj_$ZX;P9`%roGV$83SE~ zO0aS*?A)$KVm>*ZTxj%9@*zr-9DI+xsV6!LVc%$D@TD0_6|KGg zbpGYC>GOkwy5=Me{R``9x3{w!hfUD^{wBeq!JfnCoJ`+kN)CzhB=t84d?O7)f~6T2GnxoY!qA9z9YY_~GZM;tmHK98E2$)WS0M z-rV-mkoO8=!PwHeU-BZy8ReeAR#m&s>_7IvgbmicismOjj{3)+50s)FjiODHqTgF` zr0DH+m}cKNz*tfP-+A#}-~RN~3}50t_Vex4~Xegq86S?f7Iu_)rX*ntT31B zZ>?9>CNFIg3Fc8eD%^1mLOf7`{dmiBC^IP^R~lMW9OWFjtHC zdhy|~5m3bmYgoAh(a_#_7rY;a*cg?PYBCrkn$!97Lf(>znE&ja~{2K?u#hU46lNdf{-9^Bkpo8&ic3I92We;uER7Cx(**O6adf>*BE z#I|U3u55Sym!vbHbUiwYq+d$vwKS|&9{R+4hr#IkjmY5goPZ3qS?N^>P%SuE9|?k@ zpy9tpBP8!p{uytXG~9>2kV?}RPuD4)JlousxFge(Ll9&J=)whckjH%3$9F z-ea5?o|CFoV03(es~-py=($eUGXxKh;{w(OTcKL9fYffDqyV;m)Fu7rJ;h%=z7}1g z%}{2Zv^_zF$AOJ#r6j}Pyv$rUc|Ts?iH=k$Kn%b46uIuxqC1&NbZ;UzN?X@|cz%cWJT@Kgt*=bx~ zGkQK|!;`V$xE+*aorL8a!tpBf1kjPRm)J$ z>lLlbz7OQJ3GttItYoJc;7BI%zokup|HUB0H*PsuvzKqn{hJ#CfN=zp5<+6Gw3?g% z#!g+LU_T1coZ7k3gW7|dl9rp6vA9uhH0z1`2pxBee0jH&7G{n&8Q~4YJ>vjrxq#G^ zn$W0OcL)#PIbKo7(T}M%248+{Xm=R2K!QU9s*!^;@f#Vrz}t)>Y|7?U=`y z#3G|H0?@wWK5M@G-r|k(cW!{M;u6u6lqoj-nV#6v`okV(Yi77HwM&ZdcijUB#-?uD zEA1R&bHd{q^CmYR@qy;b>rM*20tZh5s~-_{FOhM9{N#=5;?)egGl<=izG z=NN^1zKf`lK|$uu?05$*1fHjJ%!M*Pf$#!9kBS)B`{HCO9_N>XZn&a23jr;*y)*VME&WEkF zwT3Gm;fgetNwFV2u7CwbvI6Qq)Z@iQWOoDgt98-EIzUBk8MI}!sm?#g*s(tfVTnFp zy{1}-=-joRh8?6I-}O{FZ~7+b4A?2ROX6$t^z42T?dg~ER$=FAZ$yttkTtCgg_-Gt z!_5X301-p|jFDwTI&s+K!aV9N8;E`7E`guTUrrhmx1Uo-Xva&aTHry^3W`Xyt##de z|8tC_3KLq*YDwH)1u$$na1rcnKr5)0sBXOrQ3kIE_z=Ryv8Y)$9QCJztMus+4vE9A zJT5sw^}AMygAd&Z0-1R2Bu-tOE2G*4?7t4KfZqQMR}y%^cV*1lkVDc!w&g=~v)B5! z8XNChXy(gXRV$!K*iomMCQE82=cR?9(R>7F6D|Afqa07l@||Z179h)3K=n>TstQnyF*`PB65Wao zH;CGsc9y4%eQ_=f(yJqj?zjrc)+k`-y{vk?XO8J`?6X5#Yqhhg&{HOOyT(=7Pc8EP zUUB-#&S9vr*^Bdyi*`Sz-PEcA^I>zOF}B`uSjXsk6KV|4PE_0Uvqrlt({}W#qFo{G z2A)vDyVB>CN~t0|<6i<~)#GtT2}iu70QOB-vycoSj4Sx5OD+I8lxUQYwpGP>@!ADu;VnH%uwci+n_QeG-v!$vi+8U)TU1|LGNcTw&X-XgeFoWNw$&o#ne_FDa>@LE#iW^ zim$L_tDEgwwIyq{C+lUMHty_fX+#UNUcs%jqz{KVc#pQC8es10Iwv<(*@6{&yKg`T zmSx8}ch)7JSnIX3Q?^4;%0g&(B=H4pFRu$f&WYD349K!KS7j8v1=ewlx!ijBlxQtE zu2d!qUWZV3=(IWS_`0IsyKaV5=FtXV3p@W&l;|t4f3W+0$-EYA78R%8N$os zAlMjlT$VFAYpjCpU6}>D@?691wGL#Y-m)9IcYUD33k->G%o5;RNyib}9E(qIWi*~O zup@{_JJ{^?C*~zqzL`lNSwc|*-G&hf^Eh$+@;yAgq&>l^^1D==a;!k;)}J`}Lf$97 zb~n>et(&#thR-FwKqS}z1lLX~bur_lcAN$-aWm9Wa<@koL&<^7Vr0mAdUG|vPWB}< zA7twi=p%pZ1cP{OQt;(#n6B`8!GjI0zRacCx0CGh5$ig5T{n=)xNSJ_8d_&QhrNY@D4qr$tY*H8n@)_~;G6yG;aO^4( zHal_A=`P+s5(rXM7&in^ZG)oI;MS4*lffBH8+}8}6}CjT6sv%#rn;L7i3Rlb;Q@&( zBrc&+24e;gFM$_ImyA(NuaA9Xkrp(tXPrV;Ksl?B)u!Fd1{aVk(~~Qo?|Qhv=M5tK zuGErLYfJ%VWdcVz30x-mOSk2(SuU6wyKl)dByMbM?1=4QIw&dHlr$;z@|hQuwB)ZK$ib8o;Ep++g2;{C8Zx!1=S8ALUO0?Bh$CHK5|| zwCB?9FgxujSCfLPaud08YCk&%Hp}Wn-m#f20dk05-t)UUBwi4ozB%z3dWOA@>XxE}iVEul`lp>G#W1EfJ*9ku}M0j=YR0E#B|432;j01LuKt z3|XX#c{;1!81+rwR{G=<+igp1G-k(3nDI22hwJ$YJ<@m*$Q@ADH8nTQglV|gZ<_KF zQc!1Di5dHb#S_~1Mg5L>Wi*dxC%=ykAqHD$N0*1aq#huVBayZ;B-jS>-)`HVD%DP0<-^9jNJBRnm`DOf7fY0&9hN2`GX-SmPghf!j>q_9y{(>QS zJo=I*p%H1!`?(c|O_=PON>cx%Z+4C7B9@#;r=LQkN7G z&R-{j@Sjt_F6*8Cu6%Y==w^)k7zicYrJCe(;aRXWn@=gVKfFitx-my&)FvP?T#$QM zA1IQkCUDzm>pmLyuBT<$j<_a%H=A3?!j;;dZDWT*_0Hn;GzGHPC0e|-6PzD&Bo23V9>4Q@1yZ`K(@}gb zCFeFvl_CsnVcpQSG$C)Sig~!*$h2Q{EU7{~#HAw($0WM@OT9>pN0g+68r>R6F>i%h(~u6VphG)rhwoZBvhRQ(1*fGf$)KVC60K^0Hsk-3HaJJ zm-WIaq_4jgcRD3~9@`id>r6ro9vPWzsZ=9*6wS>4`Z5p=Cp~ppVW!|C*v?X(XXbmu zKeq264%{Nq?5JmnTScrqsM&~S$L;jO@63*>%%&dl0Dc}w$f%tvm zC*j`ZU08A5Q0>#%g`Z6g?)a)~v7P(j498LO5>y)irq|2U3-B}z$@6?rcgDZQj29wr z+vMA1B;C~@)Ie<}+V&L2gc4d~*1(Su6E$p?>=Q+cY*vG076<1)cLE-uO1?dR36$ zZEq>auZE=ikaLJcadN0YXmBgt^ZAfyxf+oe;-A5daTb&^gfdbG80!JL4c^-07HZD! zR%zO~we0;{X93?Bl?oKDD6SC5w7mBt7tGnSDR;d6RPUHk`ql@^%>r&-d)G%}IBJwe zhVg{CP|N5e2CK-T20ind1|NyE!WE@$CD@fOF$}`W1}>GEJS0LcJf;B5^9J8lS^=a3 zZOneX-RjpvYj>X$09b*#@6XnKEVDW5EOk+Y{>U9pVwx1te54Lm2Nx;EW32(iiR4)q z!)u;T>>s%6#G39l$$NQUu~*K#pjAi6d?G&D&a8BCG_|^~c=6Xk{1dVF!IG`lkocC| zaklqyw!K1Tk)Tmmv_RC@-t!^NE2S!xzYmPmz5q5Q5yO=xLPbo;3boi|5Sj6(`jN2p z1?BN(f-vo(Tl`?6iWcQN>XJ|ttRVa=!_vs8!(A?z`i0sZKC;zy86n4Ju@HHol>1Rj z6q5d2O)REa*7MB|nZ&^beU~Y89z8JXU`&%6t`0hx_mgV=P|N95SWpW2^B4xd7htvg2o`w58cr4wcdQoN=!4kKw0 z&QPHvmH|+^6UJ-i>a#$W=9wxq?(pqR{A&%bhuI>wGCYGr=i?>jnD9cPPpfx)U6MHE z>auH_*y;v&=O|VLX62>QR8GaBo%{v$r@dkUTL9OX&n69+55l@lB;C#NR$gk`c#?mL zEg|das;uEsy_=V}ew9P2HGvF|r__|=(oPQIuW{bZsy2B0vzp}F@)cDV8T}Oda59V; zY$o&iqlKSi->MC&#(y8nGl88Ek?FA?(Y+KgGox@Cl5qg`H~TQ=@XF|$03kxNcDqHC zg2eX6d(bV%A3Z!K;K?sL=VnV z`I3p1BFJ_}f_<(Wj?EM&xiXM=N)v~mtXKz}G!U0~zU*!#?y?tvzwUXIzf1GOziUXl@UV5`vs+(~?`dDR&G=uZO}ChbTo}CbeUuv~hHS`pOYU|4 zCSV{$k}6?ESunSU$SMthP>(YB&W&huEtI)tp0gysH45j=jogWQ%nWhq zLEt3CvXn7?pObyMoe!=)G|Cd$lwW8_oUBl3ZA9!$gt5vP>O$B4omRZi8cF{Fx3rdA1JIH?O$+DSg9aucCETX_&yj?9e2 z%U~P;=U{ibh> zZwAc&M!^c`J?UyD7VEw#%Rk3Fn)DTdU$J*pd4<%v#O7(tDSQjphoO6n&fTvrEwt*mxD-d z?6MfVfb+e6*1jC*iC#n4YdbN&UtMP}4y7}(7$lunVh0Jc1N%WP9^BArvjh=dg7^qc59+P$2dMSVx0QbYzUr#|> z>X}$dnbOepD*)49cSxH)iq-Y~a0t4r7yafj0MybCp?I9#$A`TrkzA+*)RqP*Lz8jp zFzxPRix7y^g*`3b_=gev=D1{!bIF)|{iYHSyJ~|J6w0rCSgz{^iD4|skA!389u>`$ z9+6xdxM9oTMe8!K8LoO5a~Ty*qGg>7vOT;tv8>=-(tIt7ZCxbn%Es+=Fs1MAieJyUt`uVq znPZyGcg_#1zmHbL-@@Oi?HJ=L4gM)8Aa*{og zE<#0$rqW*vgH4OSy5N2Eb77zjFDH7BGB;xBp6MYW9fe&7`&qvZz9Mopk$+4cdVn+z zyEb{lmBtq@>gx8R-CtUrLqK%X?UJy&^j7CGth_%|(Z$y;kb>;}*i$#coU?5 z;U#0B3M=(9u2?hp$>^@>@kf3Nz{7ek5CUU4Eg~vJ2Rdm*GXt7-Cw;elnl0!hNE)DZ zEdZWaFOB6kSMBcvvkJ8d#Pc`s0-E;oANs8MJmS`=MhpkcH^$~Um=XYhQIruja4kHyNBmj z)`J*Q#U4v4n&N5}2p(A%*Zc8W(iNfO-0Hi^$lcpyOTpYB<5@<&i4VX`_^xn^($pZE z%6fr5xT7+XgwH|?<{VJKGd~zdhA!zJQgi%(+!)Gtr;H8Q;#ql>hE(VUd}XZu`#R+m z*fagTBmIx(Sx9*KID&_RdCQvhQ*EN^`uM)%c*@B@fL$5_0QaT9GxYU88IDc$CHGsO z@$Wy5KWEmETpid4JBaMviW2OS!~Xq;sA_*g6q(K_(k2QPA&^mo8N0I7NfTzi9gfZ{ zW29HHuU*rcEuD*DeCBi-D!=gQNs67oFrwWYkMXL&CRCclL7PxUo>TD@qC8QEiOYH- zq(EJz96Bwr_hJ1c1fs0_XpE3bKgM~L51if<&6B}A7;mj3r8B^X>KB~l-^U)ZGtK0P zJQ~TT-x}WsW#`MnvTbNx;idrtK^5Pp^!KzlpI&1>m`7t%db&6l2v-$u!pfh%2#T%> z{eAYGu;sdfe=X=xrdp~q&2Fsz<&gwXj(isAWYpeJrhmVDL$RNfQD+`OW^!CzonzDS z!RF?)xB)eEqor8}%6Bb0qNAbO6IRTQij6N)9`5U=q18}@l{tQZqN>+ryk5A*4wABR zxTjT>!S~*Fyv0lzsAsorE1zxfSUBh&XqQJ_6B_o#02K)*9)yL<5W@Dw@xWXG#JXGp zT@?f;v+Rgkq6cN`4rg?nW_AjSZ;r3VDJ8-4yMj*DRmK&1x@7;VDN7gw^QZ7G-B^GI z^{f8ClV1MV_kqJjw%TxnbO2g~m8r7Pebl^kl;f2^GF$$d$<^t^d;lT7nz&?PT#iMb zs6`8U_VpoH0Ae~_##ws%H}bZa18YNjwCAJA%Iq~8W~t*4IN0v4@rwzBie8MMHLKSN zY^gYIAO&QJ84rNZk9M(He4=^ZVO!{X5cByjPhQC{U|!1bXpt-`TIK1>f*$z!5MuEW z)lzTp5}hkkuFjemG0phYs@9_KXM}TA`3j?5qRp_cMOJ(<`}(>P;nyg9mSSqi(ig8C zE$Ot=-^k8)*HxHiv{p?D@U1|5JX+}T6q>580w@&L^U4=+2fqWXxNG@A#$%@RV`RSM z2QB)b_xkpE*z(wZQY~w*^sz6eZPoeXITfywI*E{tPYTWy(zERAIknR|x|HiX;k(w1 zsri1t@1Wy*$9tLPmsr@|Psz1I;`AKiv`R{M2o#d;andc=5j;5>6!^25%DxiKes(Kzu|znAP=~makYV?{+ZP3 zdErGr-doY7NP`-1v>UY z>|7Int-U_||1skv%fPSAfBNyIGX=7CCK(C-B1F9PO<{v+vGc30c=R7rP7VbxGSR)Y z(_pd`#PcIk?vaB#P0kI6wpgnkv11)xr>rs`Im+&oL5y-!8oko!T7Ygmw?UCLht~eO z{gvG696M4Bxuz%+-glb5CzmsXZn$ZkA?R=Z?@Q(S{zLy>7PlwsOPz`Oj&T!g5G?#y z!ZiM2onCtv!wG+Ok-!g9#b5;&2-;W0x0>t%EB%}(L!MA0bBqAbqH)RgIl^rQk*POc ztnZd=}H^!3!bRsQk-7htV2|9N9~FZazeQwlsM7l*!<+5T#7_ zk9M(wfBT&7@V_StXLGniW^Zn>ZkD9g&XOWh1sHx13qdJ|rh_bRx>9t6H%M~7KDv-y z3`l-%@AN$_2){24ui0iFIT`$HLD$WAGy6Hh-~=!|4od1H3@~J-rGp1|b)gqKrkKHl zdt!N~ncE>Z4tT5c4l`l@_7=W$MU^z(Lr#tN{O`-oq~h$JJ76D77M@sib&u=P8mX}= z-=^u<&)v{(%-1~j7`-F(V@e(8YMSC8Vl8DJpN__tCWV+S)scL-JFz^9oV>IpioLF_q z`0^c6aou9)n*YB>&HNx!+cTtiJ7SqUcU{NHzI$Yax`dxYQ#i_$eI`1m+$kYL5y zASP05_3?B+(XqW#AzKim%AmvH!09AWN@MOlaEmN7j#{qqn4t0Vf4z5vEQT+t(`ja{ z9GqqSNowJOo9HjY9Z?s#q@B<1wwv-w2zp3V7E)@&MCxa@{srgzaF+M? z3oj=}+==^XVZHeeniQabTR#WP)vzGX?6`BhQ6Re8BRsON`7n~`W!H;TfNw{Q*au-r zo~WOJuo8Y0>pB;?R(}2M-<&`GTqad;{dn-tHvxX2(z%d4;F{+b%L%*+cuKf?1Oar! znPS-IVux;#Yyx zWpAX*196Jpe^4zapNf@uYu+b4dr%`W_m^t}_nQxmhxHt~rb{;LuWzKUIGz8=>IY8< z{l3K<$#hTl9!@j-gIf4l6~I01o3ZrIFTw|8;oyjuQNTz3^I`X$+HS`Wgatps3jUq* z0Z3MWm*19+=$|*TQ2P_G27i3~|MD{s#RNxQ{}XqT%aEu1=QF-s|G%I2|MYV#@a1RB zMM)LE?*QHK-UIn6Ev|9e-kjgon8YNcl&>`yn z@MfUMRBcf0?>8~w#|6MhdG)1l8;F99AojCu1lCMO1EuaVt5O$E7~o+ajs?!eWqAOp z9LKKY!gXTmz(HkjUDrx*i~wLxL#zRA$+bgAUlwJy{6jcUM=7q$WBLHX~Vg+Mgi>4wE`!v`?=*VC=mcnwXR%pu!=8=5(Lo;a>EE)2Zg$b4S(+s}r(jeqyx3%HYN0A#pEo=M4= z|DDwbR~CK&!uqS^dTc{hfMG==LE2vjz$g3=E(IJ$l=8O-Y1cRnkDlB}O1Ag&Rtmi@Z}_+bsCgP4S&={?v8%|cTcq9bAR24seggDqe1=gOqf!z6Ch<2J0bI$e z^O~YprDp4{OzhA8WuU{K#qZud4!?9{6d3H~bbxj-xxqU_<+Wvc0G+CF-?>p<+Wj(> zqbY{YKrUDc$Z`#DiokVO-k~EOBg$tq_5dG}>*k9;^GU7oU5I=}f(`z2T|+tMrmso9 z@NQ8|EHKva39l2ZAFU_oi^Qfc$b8=$wEz@suFzF-Tmk{5tZdih7sg_`d8Gf%Rtf}*y; zv7ms>M>5kh>gPDu)sJ6to|lS=W&K&non}MWhnzDWj{`jjQwHD+v?|HJ;w{@VJJCP` z%n2YF`>^2m(GNiEHQdJnl&`ZlV~QnEVr+0q3&D z{Ns}?DH*$;1XrYqiD}`?`*2%*+f}q&Jp#Nwo#jqwjc&C}yt5_mTY8Rj(R}3YV zTLDX2R?eg|~79V)EqrC8k!Gdz8*SNC^dF!*W9Z#0Om z88YH9ToNY4>pt4?gO+L&Ig@J@%;mBP+4caS6wF!dya=ym0SjPG%VT{mu}2v!4RofI zjgWPNdV!2T5f29oG9Ud?`0=XWjWj@ARlF?pMMjjA+%bthiG+(#Zy?Z>D_w%jV~80{ zvULTI1828ubVvq8;aY9}O!P_?zMGWqh-7Dy8PCDm{uc0o|MYX!Jh^;Gurr2M%}#@WFX_dUTNkTG}G1;SEdP>eP)AbVWGf5EgZ!dGCX9q z=k+pOSa5RSp2!i^EMCARIdKWV3y%Jd8g*(Fe1Oc^2YAR|1BC%Q45Q|bJW0b`uo)5+ zkN&lTv-m->x0qhS$v18zbKeQZ{<-w}#Z3U}Ur4tT3||ZmK7}(0O!U~k3w`g zb;f7}i#P5f80C(W{xhJfoKWOuy?xKeDVQf_Dpxa4N*;S*EDhLmr zE9Aaf3vP=GC9pU^J2S`c0|{^1P$L(9yag}7cg$;#;yYpPe7n73$V*B14AN#)n*1?aUv_kd04l zyIu$~;Zsa1xZrI)KI>`uCQ&}|PRSJzVfDp7Ab{=_RpgONO|rcdJl_!hwiss;MGohUnu7wvDA@^_TcO(i(YxVh(DXo8m1C!q#6RO?57R`h-N)L-9RNXKivxF$u6I`K8VW?*WJPYFfAlanf#0dRra-O{z z2DWyEyqTQ~Y&>ejCeTMt;%NJ2Dnt9i>76E~Zj-l|16;R&yZG`_4I^XJTfzC(-@537 z6V1N=MJ5CuQIqhkwnJ*U0IM&np_Ki2-CVO)Z2s5fQq}OE)80;nj6k{}(@8*2H^1z& z($AOdgYsXyT(Sm`8GHBNLM~{hxBPqjmQa9IQa1(fbq{W;#VCll(B4))KEb)Fm=s;^ zvfRgWl+S4(2w9p(13uqL9I^BstEr_v+4yd7;^EPcf5t+eFHrFs9vh4Y%)jmN!;kh; z73=Q2z_|yhq@j^zGu1CoKr7##$u$F~2;Z;XJIAXn0=lRq4xWZMFMkV)?4UW+yJ(fz zFTTfQA9rnuMOyAIG+Hr=h3B@oV?8Yu;Vop+7`Ih@92A*bWF>2iyt{+rkK91uT1$Nf zHsxk_ua#M+aTgASX&B!jmfuH18xju!|Go&km;HivJ7y>jZB6T#$KYCH$X3EUR*yi9UQA4*DVQW(jF*{qmVe9u5u)239^2hFGU!u zgw)W|FC&#psvM{#_Rqy(ncVI+6I|K4LYcvQI!z2PRl*5s2(afk>o-QFHfd%TFn`p* zj@|l9(m4B+Px86|&9TDQL)~Dz7T6%XC3!6C{tg`~ z`FI@W7;7dqVUxUL0Dk;u=;MlUnVY-(^>+)ue82iI<)ORH7iR@S+7+@}XP6MV#GX)Y zP%-=Pw=VW!Ye{flzhXGD8-t=Pe?iq`fY$$mA{`**K(G|f^Gb7lhZy(@P+s^o!`11+01SH)DrKzs;KuXM^0TU>7dq%jq;+1?EicI{_12nhM%Uq zyBA`&bcnRw3vX_FKojlexc=k)p3a4}=*>(Xgp?es%}!Rt7m? zVEUuR%O&QfcqOvxeB^5AX?P*QcK*3q;qG~oidUJenY5KH&HwjRk<;h}>dmo4(#u&c zXEK_F#jkKf2AS3e-ThtsnVlV(Dfz zc1*(~d9dE2t1`SVBMSdLqA2T0J&GO+7@DuJGeszS!uRq=vmN4YZihF!4LX^fvZc$J zbFP#op+oo7m8HHG1ev3%jhzbBm*VJ3ZMc&xo7x`jETUG)`#KGbL18!XLVQ=q4KAj! z($o(bu4ep8I~nt*W-*%uu~6j2HZBH6CzY(lh+Rj)$)#DBYeFA-ai>!SL zF3hZb->X_z0i1UF7@c=Tt6w?%@M-FK_1>vYSzPvenE8Of*94dT?`3~4yCuRQ(GE*? zInpnVXC^93JJv=^-JRDGRxLp!kHH_?lXTtHh*_WS@vpYhmG9-BvmfzDWL5eMU?yB^ zx_JcL&P3{VtE%-JPfp({@gl#O2_1xE#&6D@XTi2=>0AG!k8Q#N&94e|Z|E$EI5kex zo+#Z2>@fg+T%4Swi6&vc7JU!MNq;g(-bm1RGvVb>nLk{5wR2EBU4H3cZ4H(z)XGM=)_Z9&)wymQQM3Q+2Fy}^y-Z9so-QO-0Dapp8QW^* z<>A^Om>tV*bJFT|5gZZ4eNooT+a8MXu4Hi5FqC_pOW(TLnfv_dhNMF!{W8C}x>OZq zg5*Ku*oxNvnxCP>H>hJwdPloqRo>|md-vU_$h!hmrpt8xm!(aFmapGxsEx(Gkw>AMfTX%4Y$WSi=0An*;d%AxAxUFh~7wC=tHiR;XgP0Hsk8;K0a##95#i&dYM7G07AhDSxR;D%)&>^Mak)~ z886pG#pp&yo%QbA_AYsy7Od>Nyj?)((8;ys@>G6HX||P%`O#Da1-B}C^VOf8fxtWg z4=CCg&VNfg*3d6>c>ci|<5|d6dPLbFAS9XrT}UU6H61#8>3X~o5%j~h< z=-q^O9vgJTru_|JZY_A4w8UmRNwNr$&L85hbpJKCEIGS?XpTc<8 zL2Wu>I*iLjD^G_nOLAo&z`m_*IU+nnDT_lIe{4Vf*C$%@8+VK<6Lgpz?W_g*E*u|A z|7xw}!H(AD9W-tySflPzPHqEJU~|XmJN?4dyB@0O-OcS^5nk%&_PJCY>O!J~p)f3Q|JES3R%y%W>n zS1ziLXJOB8yT110vL>EIx@^0#(2=#P9tu{w#WLu5Ro-r7hD2e!29Dh+E6P&q{tUhf8yKq zMXZig!DG$x%?5Z0vgKPCWVIE)oth6^3$_7QmC8yjQ;J@Lx24Rn-Xo_63u^S|KcLog zvK=}#W^3Xm)3j1miFoxDt<+b8|10JvH%gE|9oz*iUkPW~)zvR{f6-Xny@r-3j2(B2 z0!5#jHm1Y|*?4NY_Gp@MK)5B2{aPnw5V>0-HLcdi)!T<%k=z&6=hB0mD^)OiJ3-dx zw&s@cREu;6YkGMUPyYK?C4=%!es*UK5nP$m;Z15?e0V)*(%W6Fm;RaF`P5~}g7M)v zTELj!yL&DAl^439h5bl`fCIk|_q+gY9qf~tOzouVYJg>D^y)kBqQ$O6^~EkaMWr3u zoFnI|6v^_sJ?n%5p%DSINr}5T-iD16yg!W`SLnAq&OMHgyHVLMh2J8px5kd76AmZJ zv9|rH1H6IG6hUXBr#91f4xp5^Yc$K@hAst^Ww)nA> zy;*D`a_&h!@D;*V!ADGvS$%0BaXd0j-_a~Bt_`Ya!fk2@@A|K<8u1Zt)Fr268pCJ4bp89Vh` zC;Ii?zYeYA9(7!uY=&M+hedqYQye0~j@7La)K|a zC#zs>F{14|w@1nB2H?pR4$|hbn;ibC~?=Ez%^+Ddqk!iQx zgo3j5`QNh~oWs~LVla=YyW+qEK8e63a36XCfNb z&$L<`PV&p|7JBb-cHE{(5@RsqG7cLQk^TzLclO-b8;-RupU6Y*q7aTFjG!G2MQ0IQopSp3P+t7)-=lL4l z+>rHL!N&K!A=kMf2OXNCa}0@a?~T_QwmB-C+J-8#bh;zw)^jQ7J(jV->(T4R$7Ya- z11T9PQ5S$mn7MOBjU))2a)mF!&cUptIsd@w6+5G|)u?GUw!_kJZ@XlzPwBHpO1X!Q zdplD_8AF(@66d-ryE#s7Up|(FIZ(1k_NERJOY4F}+N&~NG>N$ORcgRA_9W0c5 z{K|gpRqg3+4)b8;`}vt5o&=@zS>Ctwu{!~1NqyMfZg%WJ-BR*G7RK!&!+Gw{mI!ee z;iy@yIqj8JMuQ1eL(w$+*pbpz5h~=bdrPKA9srx^6@jiub^tanMfDF`LFQ~sM(K48 zm(QHGxll{p)#;rufkFdg2BeBhSJ`kp7BN+vhirelAcE2_;3_{2U8wBfF^n@lO zIHC81;uxJKDv@uKhhxcjkS>Q%YvDz$I*ydFz5WGTvlR8k&SXiCsM}b~)MnPZqZ?X- zW~XdEwa{7}J#&cHRdxzWfgi%7xptd`=BY;L< z(8{b~)X$qC7$6G!rn0v0Da(G~(-&?Sw&8+9#-vwOU0_|ELGkRdKJE@5m zqD?mB`M3jU&=qU<2Pv21(iIY{7a9G^)dgZqy@TT)- zR^mf5C-O@6srjUXE00yhDphM#B#xpML^>qOfewDPdtO8J^kl)5ZH0-pFekbdjZv9hf-H|4jd0QHi77Rvgw+%F|IIq zZ+Ob3anrNGsYaFrE1G>)Es3F92daCBk_pm|_~K$>;6^;CsbSC1iRRJ#PIHDoc3ceP z%}BNsDKna{mdW3m4YNc|6!AjDZThF;aVH62B|D_M_(tBE{>h1W{mAMBNG8Wm&g&Nc zpVrPZs;RAA+tLICfyk!U(4`lphTc2a=pZ6Sx`;?ZM|uZAKoJl@0RaK&H8ew&-V6|= zcS0|reJk$Q{qA%Ap3gCKWH=NO)|zw8IiLHvF5DT}!JgmdauYbqJ$xZZcM`B9oAZv< zqYu75Z@VrvvaH0cATe>ip;*zsayiB8tSI6?tp9$k;>z5z{5S)`*PE5E-enm$&$m{c z1B^8QDIHNAxSTtCl3(?i8SAk4#zYu6ATxP;yHJEsY4Y>HQqs#8^OY{EDMSk`en?Jt z)Zz2#Lk1&*q3y4ynPO-FBGZFwoBoYphq`1kxl|bAngO~OQ*EsG);<$wdiFS+W}H^J zx-bRRQlpw2C$j+F1B=sXV#TIkcW3#Q-_suF8L_V}@_RBpRn{)%TG&Ic;VL=X^ey0{ z79whKP4U6JWNWBCA+1x@U0~UZ`5e6PR$58E#;v2_Q!x~!cH+VkxI5Y8SVCPbr&#aO z<;nCnItZDBNZqTJb=oc~E5l*-<1D10`U6(P3z-M{V|ZqU31JYR(ZBZHGC-keLeH$` za_ZYS&bc0&Kn&aF10SGr!d7D@C7+-3B*SB$uZDHV0J&(*|`FK9Q z#1l9fMo33YUn;*O3RObycM${S)7?0)hMdDepu5>z^5^3uly%H{VM&v>X*@2Dg0qp^ z14Q-WOM2h!U^YPjZQQ-xq0b!S{rb?e#K%eo19{T^>M#TW%w3E3OT6y`HEZ@6E5rAg-y<{oJm0(la8lsJKre01Z5ubd@ zh&jjE3C&sky56IJf3xPcfh$6rd9QxzNz`ODn}5x7IYF?<{9-`);7AFDO923tammFH zY6JQx^KGEaRe%Fr97rY4=$X(z>IG`@BFQ+TL#3tk!N}e93Gu5+^$v!UY-h-0p$6<| z$ybj+*#Y7h?NiJZqa$23-X55Zzxwq~Gy?ZY(YXOz*vq&o+poVP43F_PQ9O^Qn;BPZ zDSb?Vevr$crr4xPYTK_#bPEhlWMe63=NBJ{<)8k76BdzTHNNIDFZG4u4~>MQ(1585 zu)*UQQUgugLO8liEdZ1ucH;?yn5J>Yus?qfaQW{Cs+cM*C{H{DD2g69c0jcGP;S3S z&97IxIM9W`J=%4>dm;IB4Zn!)w;v-ePZ9hO`@}v%D7gFMU&>3kQtLDKA9I=NiuMVL z4hjHdW3<5r=fMCb$j#fB+he9V*XVFaf2*lw;$$|;RwU3?_PVYVa9mUtZmXP{QXx)$ zxC!H|%1&&vL2B=|&bs_g+j9GGxR65F_c<2jD0S(RA(MsJ(x9}k4`sO62aX3(d0z3R z=>rSN_31Ot1yTQjI03&vFHm$qx9W>7pNkgdnC6}poRj4|th5pUm5h0VwFdHHcn^O4 z#Ffx(&9U#wI4>7u`1Jq;xZ1SCvP9NNFTZ5ms|pgjm{DU*mixoJCAfE089*P7LxSIz zw)KtFP3NGvL$OLVj>e8vk122|*y+>&0S*&9${_0F@TB8?qB%wnva&EZgK{ifv!Mcn zI()>y1c}ZBZsBq7rls2@1?O4;;>3!FW%2jHk+PiLmFI0WV2(SQ7mD~xSLZvfvLfyc6ig&oT=L5O`|fOdP+%GX~_e$3&KU4$NC7>m6sghynt? zAM!4?))I7pIp71EgTQ%IX$OMzEakT^;Q9ROSO!^w!e6*>Ln2W{fE+M_ea3JkL~cHrCVD;EfFp*%I8q6QUURLw%bJzUE&BNv+?2H#xuCo zz*s8LbFu?=w|0Eml>}K3P>9bwn8wu!&0W`kmP;7+ZNhiC6Am8s$GD2FD&-AeKlc(< zAbhc^iKSA;Bcj)eU#2AU3yJxSrH4W~gZ*0zi45N+l!0SRK+%^kd*~fN+EiKJO7pJg zaxSp6GR@ujKq-o)p5>pM;p0tE@ZjE7a33-Ro@x&=pgRjXe%eecm`?z7dL^46MsdE+ zx3!*JTmv@4u2;E7Sw=V*d=m3;Xp9DrT8z}KR-#YZZX0Oit^#UQ5AZwgi z>bPYf9Rb;we8e0WKz%&DoxU+9kZyhvn-Eisr44+w zFm1DsO}t>$|sY3!QsyEp}Kqy_s zmjS^HPRL+*Qn5$!DK2<079GI8M`@StHpKJThs*jFOlXl|5oj4R2w_%JNAE$-yI~-4 z|KyBYUBu!T_Jd#Y_oYh@y=!V9NHYZAY>MC^({<8ZCkRb)^n;GKFJFtbyg`tlck<08^1JloS#%T_hZ0%;m@ee3lwrP8XaylybZ-K= zhE^<3d7M13R%9`vTRYFD^vgdS#4Q4`klZa`QQ<^$YulMLIhv$>BEbzCB+C^5c>wFD z7kjYkG4%YQ?A+b8>ob0CeLCW+yC~{ED z8BBhz;5;WQVA_5^L$Q}qUdwUyjw_NoQ_gutRq2rd(cB)T;{5kZ#susWir2)M&tYGH z1-kcbii1V@k2D_CWksP_(FbRl!<2zk-`&!SU)&`Aos{z3rpNErn^8ffQw33G#}|hs zG=Y0>XBx&xSx0Q{Njk5y|1OyM?RtrW15%gW_RfT^7ZKMicU~vV=7r3Xw#^ISuO3fk z`ci%5U`-5zn#GF*t~VLq_(Y+*pn~VHrs{$z4jeIv60FMhGeC$2Nk!$0ujJYf6@{jA>&MHSC$nDAEM53(HKD-kj!e%Ooxqyo&jA!E_4o{AT6du zKD#!#c9Qm6LteJ;K?E{%dGZ927wm@Ew2O`vJGC2qGq%EbJD}E;4ic^8^h5D5%i$+T zew&-Rh|=$r?%@~BswA`G7<_wn6^>WN{%fjl>Bk|OBfnUU`B}}+=6hhj@Vv0AdE?NN zaLL@Jn^Jb&5=(M$518c9rlp}48)w6S;!Y_(Hr?Nlg>;p`-zNlU68}8H;C`c%&W(Sr zY*E;+)1z;b;{w;m%_zlTT2%^kBf2}tW!mfuS&XZoQcGPZ5kzY#3ZDdrJhCnpVMgm+U7vSz@?1F#;OKfV@8En`=E)?CPqnP^2?Ytxp?WD%nvJA{vv zBWn`A3zR-wX0T{AeaHbRwWr8l#D#vQRf0uBy^PjW83_ga{~|FwnZ1JP0yfgs#jH92 z%SHc($sCE;TGWSEM&DCJo2et)KJN@Ek$_7iF=q)>#4E&A=OGoh{f5rn0smVx-5m;E zL&mwGrr#ned64sKlaMQrOe&`1Zkl;Kh^C;K|l5d7E8SaQXZX!V{sn^S?x7+s9)iQTbK3 zZLqqE9GT*ID3NRU2TL0_tLj138T~HaAB1u>2XfFS#ozhpT2isQ6qLEWGta!R4}M=% z+5|-ZBw{e=HX+B*JnKL>CKUt)qnIhg@tgZx9!3LiY(xL}NT(XiVt)G&x?z{jiqBMN_mTU{@@O740;32N^+M2cW z_%}BD5p-U}$OtSuHqoRz_r2v^$xRiQ436w3p|r0;_1HO0AaW*7pyIsQO=5>?W2M~p z3tNc@McdL@Syf|u2SH>_L^fQb(=z8`^MN#0mP%x?Wvd=zeQDKPC}^)VMrwcu&Tb^4W4%3?X z>7Wlo!f9YQ8({6dU#6~f4N&t^@d!W5a`A!z%I<>DmxGiM*2U~ekOHztgo-a|S0T#` zs}qi)BrSU*Z;u$DgoK1#kh`cIW#1?*6&omdz8nTH>Wt(YqEwrj={YQC-CMKAvgN|_ zZHA1pstg$dkR-F@vpo2BcRx&%Ftta98|=QS5CJ~|zv4t|$neSH-?)4R9Q}|DeC^E$ zQSw`1LUqtqjnv0VfRbD2rnfUyYobi47Ca}M(Ft&&%~>D zz9csVHrH+_lcL0aFKrU*H7~BZT|R*76BH@4?L=sfY&xIC#xH}MRzpvj-UAm)qc2%p zFzD~CN@F#Y-Tqrev^HTx1m5N&@$%`)F3%?2HN};iskR*O^srF+tIRuV5`zaQ9SI z`xGP#i+`#jFJni{m*f@Xy=`Zw+&3mLl!xvjgQZ}10t zn(g5B92DVA@+@*@Ok})^AjglyJK0b^@F)j07z*pvT@vEBv3vvXgh&2Fq7N1T zzQ+2z6MP^eia4ob|HuvyDl8^tp)np=zO_()cj3Pt@u@H#JQVDb+DYPFb`YCU1P*FO zeRjcaY8{p1*7b326mKbWKV1kVx4FGJ$&h#}-p_u(Z6zgCaX^Q=go&ZN0h7cR6qpOE zj7?{H&Bua}vkYJv3Ldw0_|G!5ktV_15QN1$1%mPxbPX`SUx}^l(Xdt-DVXjvC6VQ8 z_AQ2W?=iupH{8fNbGg~7_J1+7euTJhZzz3ep8R<52>d&@*cflB#z|W_*~FJ#VqwhM zs)sB&Pc*s;<(s8xQAWZ%A2$RYdVCOFE~_Y=(9E@+ost)P4{w93I*)Qv5MM7BH8`nt z?ZL||8;!$$Yu@s9Fm}VfZL0?f&IOJ92v=8#K6ke5`S@OTUcGf3xxJR%5FuC*c#Eb|t#Hg;T?^XooOl*Sk8g}+IF_HIL0Udx zhE)R&lF_{{(y2H7eqP80Z)-Q2Kh?#OX+-M&o<+rF%$6&i#4f7(?9zzD(`#(ijczlNEmHIn+R#!c5LSSv?;A~7 z>qEi-rCkwBFw0Gn>J}jLrai0x1#z!-W;KAqv{aefh5kZCXuKb7AD`QP+On6Y-*cPm zv2jMItjlN1-6+j_b31Lw2{hdf0nE^xcBQ#W8OdowM0RG^LN}OCZKuH`)?l%{t$a&4 zt(BS^s$nd$3x#mJ&V{VC9_)0m*-XAK%SM2nrz!3a<600xt6+MGJm-{C1n{bUf|F;G zv>tIg;9PRZYiW__+91A`v!{qVVa*z~y_!o`E%qipYk0TcAS_8{DO*{|iT~=SY7wEz zKoYZa#W7UwgW)Pu)kS5$Lr-gKty(YLk}+XZFZU81`VOpaClfvqbuUH+U%#nABS0&Nry0ZB-)>ct^HPr^^&y1ZvBGQ67{wPk4VGhYhthlL`}{Ak{-d046kiYqZ-n9 zr~qCX%G(#)Dc}v?-KpZY^=NeL$fq{BkMh9k$hTf4R*wAg@zVA@3|NGz|Ui`uP> z`HLPxJcUGNAqyHLUgz>59!8tU$v*JwN5z=A)2K|VWivr6M7sB_`}{EGBs`&No<+5h zo~;Tarny6}Lbci#njC6EuEOLFvgfD*(<5`@E^_1cucOU?-%11Cr`+;-f{VRziif^FKuxFg?ES5mq zu=_AszTFVLS|G`^!ique1FFu)PISJ4X6zOv^Vb=lP$G(;X}ZB6-G$ZeystC zl`$BDs<5oKS4!9H4jC!*n+dI}a6qjOj0yNDd|`fiTEgA0*_h|wB?5P!LFzM+Ov>iD z0>F${Q(jqK>q-GHPZe^fB!A?u8?VAOv0noRRerimn!knuY5TOoEm36xK2GTmHWUQ)@?}=F-&m8=B(i>C@U=S!%UB9EOp?F&ciddB zHy=@)eO{l1=$J%Q0zUxWaM*&JDOpTCQ~#?Cz?p+^*-ZjsReeAZZEb%S!^9>}m4Jl{ zQYCnwP!i_O<^&z|SWkGPy?~I~i(mWZ75j4ZHsogw z;df55Vgrn_K=CgQ0$%ZyGX?|&-rIZoNY8_kOV(@4NXdImBOEZR=m(f&Hq9QbRY^h; z)=Xc-*ml(XiLSp*d!V$2fha{k)VxbWZWqzC47U#8R%Sg=;=nBZ| zP>G`h1QooGefMMTaip|bx{D*T&)Guke9(USZtnrYf+)9Tr@JwN;qg`Xz8XC3=>M%4 z;=NXg7*sN$kAkdR--GUF+3f*WsIKjk{Aob?MMI2>pT=#9!6j;?Ty^1Ae$P`zIAz6K zB$khTS|I;s6bswpg>L_a&wNgIj-+BX#JhaH`>qtECNpS6QB97ZOz9?<5W!gZ(Z7oJ zzh8P$)T*hjtdsby<~3b?5k{irY?B^;M-1U=*jBcfC3SAkFuCL=FIRmw{~5ubnwSe+ zxKBBFwUwXa(^M5?Mc$@YPz-;_#^*3MHlF#K)@A)*wx`9UzWjQ1#Nl^phmgSBKd})Y z#wywRQSqT4wx55Lz=550wqb}2-jOJ~d{l%9dhr1GK4-g>>E|!`*juDYpYX98f5so; z2uA^jB$qT*7tpgZT*+9b@Mr^@Db{@cU{HgI>tC0P7Ck@(^d6=$SA;yhcHb#qF7w-Y z5!9=<5JQz9y!P|b`GwlaWfi2-n;mdv4@b*g#=X;2WQ*B11sW=fJLc@MY#*nYxUO!$ z%9QsB#sJyg=Xx{=^dA(DG6!YVxFCrWeHxZm6P-eMRbql`{`Zxu2V?P2__RVnRH}9n zprf(Oo%hpsn2UoIc2&kT#n3q;T@WnJaMVibisx@UY72Z^e8&-7GgJmW$eFO z5$efQZC0GFk-Z4D>&cOnZ-O``QFl{UK|VpA%+I_DnA(?GymWb~SJ~nGLhqzsUihZr z^!m5m5~j-<-|fJ=-Pb=Q|15{5$}Mq%X6c7lL{;$|Txk+Y6|QMThgdAXd9E*VwpjT| zuzWOeF-!8y9e!4)nHn&;>jey)OMUnpZDSC6ZNbrSV(u7y&gPir^soE1B65SYObCdM zSA55O**RmYk}iY1?77>WQ!QHw@!m`7wv$}_{&PVJHwN$1BxKh7bn9-DJk~#%VKL;> zb=z%xK0@R*vX``Ui&b-PsqZVtkWnlHU}tSF22%J+1?eW=Whn~lK0?E7jJh?OPE)__ zF3kuTo_1c0x@_EJV!n6b)5iAZa%wwbH}^W_O+)mrQ+c`EqqEaRhjq4lnN=-8|GvJQ z*R5u?nfwuq;|C{L;`=VP`BKilkKx!Snki71=caHhw(%C*C2`CNvFf9CR&N(T}DT}`;Qs%NDEN_Ql-&;plk1xB|0L6cj!cZUXQD)(*2=i zxJkxf`LIt4K`D>ihR(m@)k0zZfti8ox=KF3-nCWsGn@JhNTLXi+Lht9>!|DH%c%?= z82Ttx)t0Ayz1~(tIW5Ylwo?+V=(jjDP2c;Lpt~MV?i=QsHLha|F04g7CjJ^f@nuEc z&Km7mK0p~_{xwT|j{TN?H7q4?jOrYWab>2*>S;B{|jnJOvxs`GktZ;76k|Y>GLG@X_AYmAXl7cE7Ka(`cD&?nmK@0&KGk2=PUi=pym+2`G0x+d&Yh7R|4Qwlc`yg za6>n=y!q3qH-bl;`M~F`uxxL|khTT$`~a{Mv$y+1((s4Q z^<*0-Pb~i=0dXA~LI%N+%vR>mw1RGcNH7A}@qXTZA@HZKQ;&NtGUPj{2HvVa`y>nBbkNnRO{3DfA@UMRSd8;2Gdfzn}xYGyhyGJt9}2lbKON?VSN*?~VB&LYyq4Cl$~peY?CkO?3mhFYOWMhX8t^+vHzO zUBk5XfH2;MsXA1sz5oTi`{oa3W8`gl0ubyU zb^P@XS#cvFg^)6Lb!hcJ*KD`>qx>n~GexTxX#k_i81v%zMPdDaJ}pG_t*b2Z#$pg5 z!xhvptInr?jl8NFK?+f!>C=MV8@%lQd^kD|QGHLqSsy8@*|q-C_w;{sUAUX}sP*TG z>*f*|p1@g*tBV$O zokhjp~2lF8_aFGN01}Z{Y^#{hQ^`epX8% zs`d|l3V@JK92kGz`tK#JCl4iOxI?>;DgK?ORfeAlV(zb@t*bZfr&Q-+9NmzOu_8&T zik~Sb6~edVfgfLC*wGQhsiy~l_xDHm_Dm4Os+};K2gOSoRKGOfHV23K>&;a6*M7!K)_MlqX!)YM#{c)% z^!jlF%x)jVSVz`ILL>q0V}_Wq$0dBFp{gUB_MHvK#oO9p|psWGP64{~w)>L&Y7zlY%DV3vLd zqrq|jAGr3-j6tVd=5ig)?iOX*G9Wy+>Biv%VB+T&8GqAG%%%jzShaF!i-Wv&lzv$O zoejT|vd$heFfj?>ntO4io2!PY%ul^gdayxtx;M)}gst)iu5`VwlD>R&gnx;CU5f*r zq~Q9wAq!y2n>dHd7fn#boRNv%s|IMCFW_7$Sk2nc<-HHqrj6TjTLl7&1&BOi#p4!F z|BUC|HxEw!&ThstMyp@9!vdb$qOsYVhHxDjU{pA=e4b?feaZ>~-Yf|JPCYF4h?J}y zCy>DjChRLmA210&&N^=AO~FYBH!6k=<{R{=K)-WauzmoIgCn9Sz$6-1g@=YsLZF%O zC%kF^QqX7{dnOMUYjRIS7xqD~^*(`S>YJ zYhT7N+7MO&7p|)61W;80(8G6e9)a!+Crjx)mow;$(2WPFe#|q_w<(N$cMDA4v8cyA z{rJ|{tk0ofHc*q_KnAMLD|6$m?Yk6i$6)Fd)kVE1zP?wi(#iKYLT?aephdC*F1C(P zg+7WH;|2xFaXMNj`E^Cgqpcz!tPu@hn1KEHx{jBNm9g?Co4+0b&FYO%cE zZ_9)89PqQX@e!bJ&H#Egq!0cOaJx2aK%S*=*p>Ay^{Ok)x!CtY5{FyMP#^?B#PPJx+(6ZWXppOam^lzVLMa^AA|Y%;KD=N)$X zpEoD?PVSID_o%^@!V z+f~4i4k`7w`x49Ap$-@O_pMf)x;xY1Bx`;3=8}4+Z0@|6Vdz};Gj1@v1CVXy>t>Ds zn|=Htp!U=Q&su{GAx1LFgx0*QlCVY2n|rrhuu{F7ckExMl#Ml@N1H|)(k`s_mSpBF z)r#|~(iIGj+?Mv308LJs6XJU~tM}6e)nd;6O25rf$-E=f-HsQ6m5nGsmFh4R zP1x>`HMZ}yY4c~b{zJ!h6!0AG^v$nn(5D20?_GB}0~C@>vkv4YXpIQ5rx0YvuR@Lx z*#-nq+tsLz4>+5j_x+G-=g5`Q7r#3!nwebeVV;N>vzg5IT=erZQIA(gy6Tr4Fgh)5 z0O4Im^aG@CD=F_;2fc(y_GdD$9?Q=P0U~R<-J=ROmoW_zsqmD~F+RwRx6L$XR>R6l zC?F>s#{L8{d>EmDT&n|49f8|)rcRs!cIXO16?qt+N*CL`6Is1&DT?V;77`Ki5nMMK zZ}a$p$T!UXtlZd@d`9vS|B&5vvjL!G)06D8iCPX$nX?y{kWph!nO!Rw=ZL> z)2AQ{glLy-=2T)D3tH&yFzGXAOQJ7v{zXvhl3oUG>Lt-Z1E1t@{=+7~Hp=3>9EtD+ zrdf>%3Q#azjKA-38yhQhi^^%g1G;OkG~A-kQhJb%BJ zJn@IrFL{2;=HN{vf+%eUyBc8T=xCYkE&?DxobB;PZ^Rf2kDAOSZx=~?t>YcJd2a&< zbEo+TzeV8Y%J(^dwU6ls8pw^tLwy81PTQ#sV@khWmzsKplexzkNnk$oMaWZFNV*9_ z@92vK*j!@AJFsg<0P^QHN(;fkPTJMuyC9fpi6eh4EkCM-WrpJXY4aH(JB_>D0y$gz zF8rc;>O^~-h*~`sv!hk1S%9Ys8&wwz?is%{%1K{rT z>KLzGJEr0+iQ?(gegqM}g%glaxNFF_e}LU4?Xc~XNEl_vnNe;WvLcLHh#x2$ePHpU zQS`%xN58z36s%Hz1-#9Nu~P8+T7omzLepKUe!}`YUwVlhPxnjD$AD8tJ?E`n0s`Oo z7xP1@^c@sYO#rSFX$kK)TDpJ34x*>d?ErAO#;6zhwBPuaN|;!?eZE7NVU(v<(ST&H@!I`!6?f{IhPIwCg;u<}`0pY3u-(TFVQv)`6vYr?H zChgz)+KYj$r$?@R|Kc5V6K>*Ng6{xGxxSZE?j4EYB#+!qiqpvKBa8=TWSf4;<3eb? zl4#icD5`hr29iVyu1R0yGhBXdu&rZu`mU50A^+m=Cp7+c=u98LjZr{q(f9awrtPmv z0rBlL5jqeV3f%W){Jq>!;UU3ciTh;yDgrTm&~{P0_Y9bNdjSwyJsgoo7bJoB^v@RV zO)LMU6D6|m`7PLIuo!udu5j&R5=OBVUt|{ahTW|b@v#VkZuPWZ+->E732O8}O{6{y zw5H^`8q-a`sI2u@q8dxQ;>GcHm{_&g7DH}>>m#al;&^WG;}{FH%qa$OnQ!5bnKOF< zfR_4z#-d5%@c!OYi<&WDIV5)qNG4@>C5l2ZEor@Es&ZGw`lE0PIuc=QU%k4y8Zn&n z@rP@YqBbCk7_g1pZ~$GI5~5dPR_ombt~{>F<&hvma0w(r&o??bE;iPvZGvj(3f-SG+l*Jk5c{ zXLxm1?Tb|@!&{!(Uh%MZ^10X1@SzQE^izucWfuF3hH5F6mlS*6?I6vVBivdwEp>!Q z<;I|n>}=mp*SDOPtT4CUC18G-(e^m;+xsjYh8uaRY8SW$7L+el62}6o_e%Es(LV6- zvMZu2k;BCPgj@VGgasn+$6Q1Zkrz5Li`era(jW36`C^RWK>q`UTPA%txx-a~#8A!G z;tW#rR`Bo(o`%Tq>xrLLEREu^BB>0 zSviQGI2~@;Iz>$gF^zC2Nbme^8n5g|9wNHvg;V^kCRG|qE=E8GQtRm8JlfR;F+L96 z)SDdaAnJW>^X?m*cdE}5B|TC_Y)#tfoEY!W^=fBIY;Ax|APFJ%JBMQ9$V@+T`Gg3H zrK@A&)@}+ihH3dD@`bD(l>opo<_xl#e8jpd51{zkoHVhx`w7li)`qu-*5xhTeOdTQ z&(ENCiZu4893&@XQr%ZiW^O7Rz|tjl(1?vR{ESxVZQyMk@tCNv4S3u?Ief?j%*vP_ zM^ixPR2JQG2FeQQ2W@REhJ1AtX%)5Ynu4<3IO6#Aj^NQ_WZHSwNtnNR>b`(YX>Xmm z2;%mtf6{P(;y=fmDH4TS0K987M*W`Z$+Q8suJhQwAq&98waEn=)44Hgc=x>~MViZ7 z0R0p;KU81mg08*aqqYrM*0|1)Bm#G`VHeb4qep-s%}g9n1P+XeARli?1D_v*+X*DOJK}6%m;StdIL=0@h%{tE;0Hg>%0= zR~zzuKT&`{;>!`sOn1V4Q7;0kn|2=Quqaf2ma=(gv5F-|LH>Pn> z32PoZ%@30%JOUo7tVr?s_#j@j*l_LJS0agrSV%T}KPJ@CugdJ#vHDvs$C?BaM270_ zsQmiL9`H59a#a8v#Ct7U9cDlS`Jh02RY233op3=W+f}$)@~DFGB@XImjF3n;%aDD;t8@<(3eJ$}J_jBwnMYZHc$=a_qfQ1e z0`7oKRW()=>s1ulL;TcGs# zXhc3UquzT@g^qj@X4L{c{1D$dp1Ya{=Xvq~!$I{lB5l`Rq!ZJ$a)U=>Lc#?3CU_Pe z4r*JoH0?przP{>|JfLZ=)X{6dHwpUd%>CRdcU08j zNEzp**B-?io<4&UF+W+wye@>E(OM#nJIt4Z#?7(GG9`!}ONLls1^CB8>bS-sH2y)?u(Kw}kjV?Q9YHl%@dw zgR#?I_tv-tYVif;o0!V11MSPgE6wv<=f+;U69hw%*9av$p~c^t3OMKRFqsjNOWQ!Q zo5e{z*H}1L{@_~m9pas?2K$oLaFLxw<^s$1{vP3aXW@IG9vGcHTg_*mmKo5q4dT5V z|MjnKLw;~_ERT?%+PRz;Cc+YRAN@XTB=L4Ml)2^b;uOP%p~@aREx2;`duc-ne$HO~ z>v1!66j!Gou)<)*ymttZr8pmmn{n+^;_$wao?Mn1>6E|tN=zBybU8%nx$L*}-Qytc zpYvn0tzM#BdcSD$d@nhWf_RuHP3oDDvo4HkeiUeEwox}HpQL}6zqboCcJxy!J~>|2 z)m51s(H@~1S}ZhZ@PBS?+-m;CxIn>W`_7KS^0|_E%ovQlKrZ{?XlYiQg*hZ4nUnc( zjFt?^GI*PwvPIp@WT|+p(DH&ujfCc|B4us_uhH0yLza?ysZw!#Am=pqJpnbP-ORM$ z{hzYb7R)>u-$r|aNlK58tcL@%lP2%7ryvb>1I{BYk3 zy#p!s>F)$LGhcub_}4n$jh)}vP_?%jb4T$c7tZBvm+yb_W|x_2r~-k7aB2wroy*()fU~`S8sWlQEt8!LF+AH?q*>}O#9c$J{K*I1f9`ZonW&d z!skVMMm>Mf4#U894Dbf+PiEk~MdXFOH+tg-EdL_@A~!~hA%z3vol~>TV%DCzzud|V_54nrvbO7Ea zb3jklfMC{IHL?>nQqWYSJ#C^QRUCcDInHVI&Kj&mm_TW=T|cKV5FMn>p#+ z>SvntyUe|5CAnB>g?KEtRJebYC(5oY8L zE?gn{lS}@xm)(1!gEn(`hH?DjkI%Gh7#d6f#B_r`hoKOGt*Z)*zK#4T7!GRR&mK!h z3`e&$Dy?c)TtQKkEy#4~_A(|Px)nkhlGF%$| z9?fN|eF9M!adM4tA0mM_>4X)jcQR-}5-KwGr+(NW6HiD^>bOk* zPxMd#*cm%p-E*pYJ_Ktzd4Yg)N9;289#_7787z^yp*;^0PxUVpa9Vno^52<=w1|W< zcmHRGa#u5_C6!pnAQc(RNli3y>%$ywUq_#d?0fcCE0XH|gBtVD#7=>(@w{ZZ&wmA{ zYW>Qn%P4E_i74wDZZ(sIB;`sxisW7u!SH64nZyO&i}g|o_QfJ~RpF@vyu@^S&cNC8 zg?MWsOktFZ5S8e?kL8d((&P=iS?Mc(fcc+e;;#d)PZh4!jJ9+-3Kljim zGNHmusaCpifU`dM*^`TBw{DRCo<@+3y@ZL~&3eTyt-Chv6(D5c0g22HcJ=Wh<&I zZ|YSaOO9yW`vF<#{m`3K_L!30J^>1cO{+8S+KY3cc*Z_% zl)6OTuk^FODx|Oo3_1idmdu%!{^6dOKqIZ@duRrmv5{#@qD(Dt_KU;oZZ$=zevF3l z=i8y`@Pkq5{UBbZ#5-9B^W6d^?|tqU#1p5=7Sp(!)ZR6av5#;x8~^W4wD}ud!hSuY zy5L z@3OO~q^J@|^mZMY#O?_|bV(j|7xKDrk@MlJoLe?|M+gw|o`0D?@&yd>^#xi{QGblIx#bDlXu&z02el6|T0OeW%B`EUs) zuZGkLx5iyh>Gh<>4dH1BD_|hstE+G+Svb21e{Ljh+*Zfoaigqr`u=iWAJYy;tJ>Eh z8s*KyNw+MYD}Z4}p%C8`xgj1e{Lw~bR9q7OqZqH-VTOAxQ}m0Ecd@QBi{xD4)orG0 z^!(lSMGmPEob9Dsg)xcJ>t0VYDlk^^g*t38W_;$@f=uk`&PMl%DN6rxLmB)S<Iz6#CKly>RGPgiKJYjj_`!!}J4NKp?Gr zmdt*tNl<^L#I+1hu9z@m&09A5r9t~) z5&1dL*YlLVJtP`9Gt$hVjB%LX$^7-Y?E^#i{dV!DI*|xaIP>$)r!$c80V&aMq*_B6 z65pwL=#zXKvLE^C_FI0Y$mDIE57FwHZ}tG|AT9{o+%Z0_wAlh4q%I_v z&w1WFQ(cU;u~BKI50x`xv;U?!m4}GmsArECUsb|Z#JeIG3au$*lXml!# z_tM*XbE;lHL2S>Jk8gslO`5cpy|Zuz$Nm{Di+#Xo`OjcY@ouo#M^zTLn11?z=%Iw8+Pp1C%kggqGMi%; zBTWkoyCaCZlsVqU0gh<()wLdvrS2KH)TcwxMPEJrAJL!$YL3PSkg&`3nA->;sEpcHCJR9&4_qg-&+22 z6W$VttquGuxR}xPpTEJqD1W3f@y|XO_u`U5i2a|n5$?=dcL@Iv{_FPCl75ktE5I*pbpy4pDi2@%Ki;0(k^lez From d51092cf8c179ebae7879308320b01f7494e6871 Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Wed, 27 May 2020 09:18:52 -0700 Subject: [PATCH 018/145] Update set-up-shared-or-guest-pc.md --- windows/configuration/set-up-shared-or-guest-pc.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/set-up-shared-or-guest-pc.md b/windows/configuration/set-up-shared-or-guest-pc.md index 289a37a0b6..78ed562391 100644 --- a/windows/configuration/set-up-shared-or-guest-pc.md +++ b/windows/configuration/set-up-shared-or-guest-pc.md @@ -9,7 +9,7 @@ author: dansimp ms.author: dansimp ms.topic: article ms.localizationpriority: medium -ms.date: 10/02/2018 +ms.date: 05/27/20 ms.reviewer: manager: dansimp --- From 7402727bc2ca85dacb392f771f2c0e2d32b74db3 Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Wed, 27 May 2020 09:52:38 -0700 Subject: [PATCH 019/145] Update set-up-shared-or-guest-pc.md --- windows/configuration/set-up-shared-or-guest-pc.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/set-up-shared-or-guest-pc.md b/windows/configuration/set-up-shared-or-guest-pc.md index 78ed562391..d77ca25608 100644 --- a/windows/configuration/set-up-shared-or-guest-pc.md +++ b/windows/configuration/set-up-shared-or-guest-pc.md @@ -9,7 +9,7 @@ author: dansimp ms.author: dansimp ms.topic: article ms.localizationpriority: medium -ms.date: 05/27/20 +ms.date: 05/27/2020 ms.reviewer: manager: dansimp --- From 520bd31a219bf2c918ce7deeeb6c81bd6ef93341 Mon Sep 17 00:00:00 2001 From: Todd Lyon <19413953+tmlyon@users.noreply.github.com> Date: Thu, 28 May 2020 13:34:26 -0700 Subject: [PATCH 020/145] Update manage-windows-mixed-reality.md Fixing the naming convention for Vibranium to be 2004 --- windows/application-management/manage-windows-mixed-reality.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/application-management/manage-windows-mixed-reality.md b/windows/application-management/manage-windows-mixed-reality.md index b82c42bf9a..ff4fbd3363 100644 --- a/windows/application-management/manage-windows-mixed-reality.md +++ b/windows/application-management/manage-windows-mixed-reality.md @@ -33,7 +33,7 @@ Organizations that use Windows Server Update Services (WSUS) must take action to 2. Windows Mixed Reality Feature on Demand (FOD) is downloaded from Windows Update. If access to Windows Update is blocked, you must manually install the Windows Mixed Reality FOD. - a. Download the FOD .cab file for [Windows 10, version 20H1](https://software-download.microsoft.com/download/pr/Microsoft-Windows-Holographic-Desktop-FOD-Package~31bf3856ad364e35~amd64~~.cab), [Windows 10, version 1903 and 1909](https://software-download.microsoft.com/download/pr/Microsoft-Windows-Holographic-Desktop-FOD-Package-31bf3856ad364e35-amd64.cab), [Windows 10, version 1809](https://software-download.microsoft.com/download/pr/microsoft-windows-holographic-desktop-fod-package31bf3856ad364e35amd64_1.cab), [Windows 10, version 1803](https://download.microsoft.com/download/9/9/3/9934B163-FA01-4108-A38A-851B4ACD1244/Microsoft-Windows-Holographic-Desktop-FOD-Package~31bf3856ad364e35~amd64~~.cab), or [Windows 10, version 1709](https://download.microsoft.com/download/6/F/8/6F816172-AC7D-4F45-B967-D573FB450CB7/Microsoft-Windows-Holographic-Desktop-FOD-Package.cab). + a. Download the FOD .cab file for [Windows 10, version 2004](https://software-download.microsoft.com/download/pr/Microsoft-Windows-Holographic-Desktop-FOD-Package~31bf3856ad364e35~amd64~~.cab), [Windows 10, version 1903 and 1909](https://software-download.microsoft.com/download/pr/Microsoft-Windows-Holographic-Desktop-FOD-Package-31bf3856ad364e35-amd64.cab), [Windows 10, version 1809](https://software-download.microsoft.com/download/pr/microsoft-windows-holographic-desktop-fod-package31bf3856ad364e35amd64_1.cab), [Windows 10, version 1803](https://download.microsoft.com/download/9/9/3/9934B163-FA01-4108-A38A-851B4ACD1244/Microsoft-Windows-Holographic-Desktop-FOD-Package~31bf3856ad364e35~amd64~~.cab), or [Windows 10, version 1709](https://download.microsoft.com/download/6/F/8/6F816172-AC7D-4F45-B967-D573FB450CB7/Microsoft-Windows-Holographic-Desktop-FOD-Package.cab). >[!NOTE] >You must download the FOD .cab file that matches your operating system version. From fde8590b82b31835ca5a5f9fbb4334e7479a86e5 Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Fri, 29 May 2020 10:46:07 -0700 Subject: [PATCH 021/145] Updated strings to new syntax --- .../linux-exclusions.md | 18 +++---- .../linux-install-manually.md | 10 ++-- .../linux-install-with-ansible.md | 4 +- .../linux-install-with-puppet.md | 6 +-- .../microsoft-defender-atp/linux-pua.md | 2 +- .../microsoft-defender-atp/linux-resources.md | 50 +++++++++---------- .../linux-support-connectivity.md | 4 +- .../linux-support-install.md | 3 +- .../linux-support-perf.md | 10 ++-- 9 files changed, 53 insertions(+), 54 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-exclusions.md b/windows/security/threat-protection/microsoft-defender-atp/linux-exclusions.md index ef0797f456..a8aa943686 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-exclusions.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-exclusions.md @@ -64,7 +64,7 @@ For more information on how to configure exclusions from Puppet, Ansible, or ano Run the following command to see the available switches for managing exclusions: ```bash -$ mdatp --exclusion +$ mdatp exclusion ``` Examples: @@ -72,29 +72,29 @@ Examples: - Add an exclusion for a file extension: ```bash - $ mdatp --exclusion --add-extension .txt - Configuration updated successfully + $ mdatp exclusion extension add --name .txt + Extension exclusion configured successfully ``` - Add an exclusion for a file: ```bash - $ mdatp --exclusion --add-folder /var/log/dummy.log - Configuration updated successfully + $ mdatp exclusion file add --path /var/log/dummy.log + File exclusion configured successfully ``` - Add an exclusion for a folder: ```bash - $ mdatp --exclusion --add-folder /var/log/ - Configuration updated successfully + $ mdatp exclusion folder add --path /var/log/ + Folder exclusion configured successfully ``` - Add an exclusion for a process: ```bash - $ mdatp --exclusion --add-process cat - Configuration updated successfully + $ mdatp exclusion process add --name cat + Process exclusion configured successfully ``` ## Validate exclusions lists with the EICAR test file diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md index 31656eeae6..702afa998e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md @@ -268,7 +268,7 @@ Download the onboarding package from Microsoft Defender Security Center: Initially the client machine is not associated with an organization. Note that the *orgId* attribute is blank: ```bash - mdatp --health orgId + mdatp health --field org_id ``` 2. Run MicrosoftDefenderATPOnboardingLinuxServer.py, and note that, in order to run this command, you must have `python` installed on the device: @@ -280,13 +280,13 @@ Download the onboarding package from Microsoft Defender Security Center: 3. Verify that the machine is now associated with your organization and reports a valid organization identifier: ```bash - mdatp --health orgId + mdatp health --field org_id ``` 4. A few minutes after you complete the installation, you can see the status by running the following command. A return value of `1` denotes that the product is functioning as expected: ```bash - mdatp --health healthy + mdatp health --field healthy ``` > [!IMPORTANT] @@ -298,7 +298,7 @@ Download the onboarding package from Microsoft Defender Security Center: - Ensure that real-time protection is enabled (denoted by a result of `1` from running the following command): ```bash - mdatp --health realTimeProtectionEnabled + mdatp health --field real_time_protection_enabled ``` - Open a Terminal window. Copy and execute the following command: @@ -310,7 +310,7 @@ Download the onboarding package from Microsoft Defender Security Center: - The file should have been quarantined by Microsoft Defender ATP for Linux. Use the following command to list all the detected threats: ```bash - mdatp --threat --list --pretty + mdatp threat list ``` ## Log installation issues diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md index 34b6be737e..2227ba8f15 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md @@ -241,8 +241,8 @@ Now run the tasks files under `/etc/ansible/playbooks/`. - Validation/configuration: ```bash - $ ansible -m shell -a 'mdatp --connectivity-test' all - $ ansible -m shell -a 'mdatp --health' all + $ ansible -m shell -a 'mdatp connectivity test' all + $ ansible -m shell -a 'mdatp health' all ``` - Uninstallation: diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md index 3914bf58e0..0db0c18a3a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md @@ -174,10 +174,10 @@ Enrolled agent devices periodically poll the Puppet Server, and install new conf On the agent machine, you can also check the onboarding status by running: ```bash -$ mdatp --health +$ mdatp health ... licensed : true -orgId : "[your organization identifier]" +org_id : "[your organization identifier]" ... ``` @@ -190,7 +190,7 @@ orgId : "[your organization identifier]" You can check that devices have been correctly onboarded by creating a script. For example, the following script checks enrolled devices for onboarding status: ```bash -mdatp --health healthy +mdatp health --field healthy ``` The above command prints `1` if the product is onboarded and functioning as expected. diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-pua.md b/windows/security/threat-protection/microsoft-defender-atp/linux-pua.md index b0cd02009a..415341d721 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-pua.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-pua.md @@ -53,7 +53,7 @@ You can configure how PUA files are handled from the command line or from the ma In Terminal, execute the following command to configure PUA protection: ```bash -$ mdatp --threat --type-handling potentially_unwanted_application [off|audit|block] +$ mdatp threat policy set --type potentially_unwanted_application --action [off|audit|block] ``` ### Use the management console to configure PUA protection: diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md b/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md index adc92e7c31..7014bcacaa 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md @@ -31,29 +31,24 @@ If you can reproduce a problem, please increase the logging level, run the syste 1. Increase logging level: ```bash - $ mdatp --log-level verbose - Creating connection to daemon - Connection established - Operation succeeded + $ mdatp log level set --level verbose + Log level configured successfully ``` 2. Reproduce the problem. -3. Run `sudo mdatp --diagnostic --create` to backup Microsoft Defender ATP's logs. The files will be stored inside of a .zip archive. This command will also print out the file path to the backup after the operation succeeds: +3. Run `sudo mdatp diagnostic create` to backup Microsoft Defender ATP's logs. The files will be stored inside of a .zip archive. This command will also print out the file path to the backup after the operation succeeds: ```bash - $ sudo mdatp --diagnostic --create - Creating connection to daemon - Connection established + $ sudo mdatp diagnostic create + Diagnostic file created: ``` 4. Restore logging level: ```bash - $ mdatp --log-level info - Creating connection to daemon - Connection established - Operation succeeded + $ mdatp log level set --level info + Log level configured successfully ``` ## Log installation issues @@ -78,21 +73,22 @@ Important tasks, such as controlling product settings and triggering on-demand s |Group |Scenario |Command | |-------------|-------------------------------------------|-----------------------------------------------------------------------| -|Configuration|Turn on/off real-time protection |`mdatp --config realTimeProtectionEnabled [true/false]` | -|Configuration|Turn on/off cloud protection |`mdatp --config cloudEnabled [true/false]` | -|Configuration|Turn on/off product diagnostics |`mdatp --config cloudDiagnosticEnabled [true/false]` | -|Configuration|Turn on/off automatic sample submission |`mdatp --config cloudAutomaticSampleSubmission [true/false]` | -|Configuration|Turn on PUA protection |`mdatp --threat --type-handling potentially_unwanted_application block`| -|Configuration|Turn off PUA protection |`mdatp --threat --type-handling potentially_unwanted_application off` | -|Configuration|Turn on audit mode for PUA protection |`mdatp --threat --type-handling potentially_unwanted_application audit`| -|Diagnostics |Change the log level |`mdatp --log-level [error/warning/info/verbose]` | -|Diagnostics |Generate diagnostic logs |`mdatp --diagnostic --create` | -|Health |Check the product's health |`mdatp --health` | -|Protection |Scan a path |`mdatp --scan --path [path]` | -|Protection |Do a quick scan |`mdatp --scan --quick` | -|Protection |Do a full scan |`mdatp --scan --full` | -|Protection |Cancel an ongoing on-demand scan |`mdatp --scan --cancel` | -|Protection |Request a security intelligence update |`mdatp --definition-update` | +|Configuration|Turn on/off real-time protection |`mdatp config real_time_protection --value [enabled|disabled]` | +|Configuration|Turn on/off cloud protection |`mdatp config cloud --value [enabled|disabled]` | +|Configuration|Turn on/off product diagnostics |`mdatp config cloud-diagnostic --value [enabled|disabled]` | +|Configuration|Turn on/off automatic sample submission |`mdatp config cloud-automatic-sample-submission [enabled|disabled]` | +|Configuration|Turn on/off AV passive mode |`mdatp config passive-mode [enabled|disabled]` | +|Configuration|Turn on PUA protection |`mdatp threat policy set --type potentially_unwanted_application --action block` | +|Configuration|Turn off PUA protection |`mdatp threat policy set --type potentially_unwanted_application --action off` | +|Configuration|Turn on audit mode for PUA protection |`mdatp threat policy set --type potentially_unwanted_application --action audit` | +|Diagnostics |Change the log level |`mdatp log level set --level verbose [error|warning|info|verbose]` | +|Diagnostics |Generate diagnostic logs |`mdatp diagnostic create` | +|Health |Check the product's health |`mdatp health` | +|Protection |Scan a path |`mdatp scan custom --path [path]` | +|Protection |Do a quick scan |`mdatp scan quick` | +|Protection |Do a full scan |`mdatp scan full` | +|Protection |Cancel an ongoing on-demand scan |`mdatp scan cancel` | +|Protection |Request a security intelligence update |`mdatp definitions update` | ## Microsoft Defender ATP portal information diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md index 4a25d355bf..a124167305 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md @@ -29,7 +29,7 @@ ms.topic: conceptual To test if Microsoft Defender ATP for Linux can communicate to the cloud with the current network settings, run a connectivity test from the command line: ```bash -$ mdatp --connectivity-test +$ mdatp connectivity test ``` If the connectivity test fails, check if the machine has Internet access and if [any of the endpoints required by the product](microsoft-defender-atp-linux.md#network-connections) are blocked by a proxy or firewall. @@ -84,7 +84,7 @@ $ sudo systemctl daemon-reload; sudo systemctl restart mdatp Upon success, attempt another connectivity test from the command line: ```bash -$ mdatp --connectivity-test +$ mdatp connectivity test ``` If the problem persists, contact customer support. diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-install.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-install.md index 0982c630fa..8ffdc04ee8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-install.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-install.md @@ -116,6 +116,7 @@ and try again. If none of the above steps help, collect the diagnostic logs: ```bash -$ sudo mdatp --diagnostic --create +$ sudo mdatp diagnostic create +Diagnostic file created: ``` Path to a zip file that contains the logs will be displayed as an output. Reach out to our customer support with these logs. diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index 55da60a602..6748041572 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -36,7 +36,8 @@ The following steps can be used to troubleshoot and mitigate these issues: If your device is not managed by your organization, real-time protection can be disabled from the command line: ```bash - $ mdatp --config realTimeProtectionEnabled false + $ mdatp config real-time-protection --value disabled + Configuration property updated ``` If your device is managed by your organization, real-time protection can be disabled by your administrator using the instructions in [Set preferences for Microsoft Defender ATP for Linux](linux-preferences.md). @@ -49,19 +50,20 @@ The following steps can be used to troubleshoot and mitigate these issues: This feature is enabled by default on the `Dogfood` and `InsisderFast` channels. If you're using a different update channel, this feature can be enabled from the command line: ```bash - $ mdatp config real_time_protection_statistics_enabled on + $ mdatp config real-time-protection-statistics --value enabled ``` This feature requires real-time protection to be enabled. To check the status of real-time protection, run the following command: ```bash - $ mdatp health + $ mdatp health --field real_time_protection_enabled ``` Verify that the `real_time_protection_enabled` entry is `true`. Otherwise, run the following command to enable it: ```bash - $ mdatp --config realTimeProtectionEnabled true + $ mdatp config real-time-protection --value enabled + Configuration property updated ``` To collect current statistics, run: From 04496289f905ffce425763e6c354018c5aa72d7d Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 8 Jun 2020 15:49:14 -0700 Subject: [PATCH 022/145] Reset and Recovery Pictures for Guide --- devices/hololens/images/ARC1.png | Bin 0 -> 27108 bytes devices/hololens/images/ARC2.png | Bin 0 -> 40339 bytes devices/hololens/images/ResetRecovery1.png | Bin 0 -> 153825 bytes devices/hololens/images/ResetRecovery2.png | Bin 0 -> 20642 bytes 4 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 devices/hololens/images/ARC1.png create mode 100644 devices/hololens/images/ARC2.png create mode 100644 devices/hololens/images/ResetRecovery1.png create mode 100644 devices/hololens/images/ResetRecovery2.png diff --git a/devices/hololens/images/ARC1.png b/devices/hololens/images/ARC1.png new file mode 100644 index 0000000000000000000000000000000000000000..d4e8369b8692d46203d722f869721051ccab6c15 GIT binary patch literal 27108 zcmeFZcQ~Be_cxq#5|NM)K}ZBAN(f;jI$@4Pca+h)i0CbPH|HQlj~-q0-uqyJAbNCz z(HRUz8HTCPo%8)Y@1O5`UGMY!`Ms};xn|F9_gZVOz1C-~y(4wBRBqEept*A8%561O zMcpe`s8X+7x%%kF??4Hb(W?ab_{~dK<>i&?v4^|BmuvP4nhIC0)Wy>ht*LjXy(`7Z`ZOKv#(rn3{X>4(D%1IK>B>q-&&zwMHI0qetv!hat$WS00SO{YmC5u zHrhVr1l?=9hn8<-?a#BN78^d%z*&yFYBqeHjbG+u9mk^@#sjo&0HgfBJ{M5^g5fT{ zv#uf;N%l^&lH|O*K>byUCdtj-{N5(>p!vHcj;1hmpzv>sqz_Jt9F`g0!F7}2I#5!p zTx!tLeUFecU7>yQ@KwZd%S?q)jr&Sh_s6Je*kSvs6;SCLO(p!&&ECS-HCMg`+jWdj zqDMCPH1wNscy4PdI6=A>7_7YymoC$poe=f5I_*)7?kn^8teTx%5FAjP;QLZjQA zco8=lhZ3zP3cCvhUZ^p-pz~Yu`qTBc!_=I?@6KW)ca}SY?pP#?kbjAkp?V2v9Aj}D znUIr~i>S05)hR{9$+nmgPNGXG12+nM4;DHD&uAv2?Q?d2etlK@tIY*t(*t(TZDxf) zh8Yx|)Z%mo))Jnz`kLo3a|w+R!DDwB3t4!5=dC}!W(TU*zIo!4;nHc3D~Ojr|Itgg zzf|n;6Axy>ZdWicRmo6549c+&#H%~c7rrz5pl1&v7`0T1vQEQ7Ew`e8=6{Qu{7k7) z)@j`P#Zf>67QpERaWZ=oDx4PV4E-TEWLj%hRr7+tgy&H=HJ@ot;9i+f^E}tYFFEB& zFfD=19r%Hdv!a8R{ijA-mL^NIG3e^9i;Gw1i-kS~dFxQFiKH4Wp#MfUBtDDTY000N zUTJr-NMqgf9ATfE_vEm&AWpr}%6mddff49aN2#h)yQ6VkKc^^gf9V*S@uu?Z7gxO( zqJcNWpD()8%LCP}7)Tzsj)kZip(?Z#}Nh;JGx(;q|BA~ zK9UR1dqbt=%AR}`C?Y}~mfj4%io4K*iQOFf4Ji5V^Ir=5mjeI)D6m@NJaN`X2H)1+ zZZZQ^vN8QyP(+FoY-2S5(Kkpu-#fS+#s!qUzWpwMa+9{=7%k{0al72Gw6BaiTqx1M z0C!yhL9>5xk(}3&C~ajm$6so~uE+|sIC8JUF|V*FhJ^<4?&`^#)HufGRR>xKw@E&9 zN%;On8{@#rWau1i|B-Ly)mT>2gBkiLL+XF`MxvQFVq?cPVDM^$Dn2>Zl(Z`qlOe~! z{=nt)$jP9UE18eraI$}-q~N1uA}a503=%Ij{oi9k8hWb>?rmLX$Eio9f?Ey(6)ePc zon`_K;&~N9o>SeQ@6D z9y1mgWT0V`1E7| zY#~^xUVYei^|U-)y+Co|!X8Iko`kskiEf}xI(&0^2AjDVWytuSH_deMMfK$8p)F0u zT3_u^84ON`y!O`8G3i_?bFX?W5%UU!f94p*V0l5>Rv2{R{?Aw`%2p#owD`l6Evpb! zon*zNt91%z$z)bs5{w|Y& z$K1E_n&;`@kU-_5anF0VLIXPAdO0<=k+Tay+$Lh{owwPpiwo+&Ch*kR-sc8$$e*xr zp_cxoNmQ}roQ2Qe&5!$tO1IcN2P#982uK5In~>$v%{zzNpFyR5Pgfk@+P0KD@4!cC z#DV?i`kTl-Fl)5f%F(wCE%jV%mci0k>x2?zYD90&guO5L z#C*QRO-H}`8OGjVP~hZor>DZWwHki)y#{8n(WlnB%#^KD`mLpojsiJ4t@*Z7c`3rX zfQ=*2eYQSJ)u+KP`IBOgMhX2v(BQ;b1zML94wzz#RhZztgIzUQ%HZbMWwTxEp3IuK zgzR}S=)+$>tlH9*@_VS#;lbp+GBeVkhP}~4>uERWyr5Mq|Bad*c{`ztf^ju=4a|xg z3s^!($gfXQ-W|~hi$_SzzgE(fs-Xy%B#~ zT|muowizu77dE#pfz_*8pWDx|H)>5PutP&{wB)>Pwem4Ea&OrQN^IHeHZw?e28URubIPMy(qWMIhWHc!3>V;R23k2S-R zR0WFGezRY0cmZ$syL_D1;(u}TK+foQz(6lW&uzN&C07Mi#R{BFX`E>a<-{XLX z+wMxNi{5B)o6Fo6(z*sGHwq>m(}&TR>+e>_h>_j zn^6&{5Xzr(*@s^;4Uik$21<7Hp`is%1D~elj<+S#YKUKwJSY2a@8~;=k6Z_){0%-V z3J2W`jAB-L{^7v**%f1Z9CzBL!Qszsp$Bz?_}G`?&4d7tdX7;4*aGLPaypFzY5u6Jo??$wq}j-)+{h3ZvXVKk)jA6gNx`ETl+o%2>TIO!b@7|XxS(h7A`8 zEv}p`z5mQn>i7|-3<*akU+JqE_p82J#fa!Gx}9Hc@8*PZ0OT=@@>wKIg3}dj1 zA7kCizozfLaK5yx0IJJZTS>(4_|^y7 zF`9QdH-$MGf=Y%Mjiw!ENw`L0UVd0UB0P8AlSHHEBevJrYcJ}R$PV5}3^Aipx(R*O zBUOo-o9X(U_x!JcFm20LOq3{{3EV_vsla#YcAV5kJ#|iq{oeY1RuqHsXfZqZzQHK5 ztnSe*T5!POnBMtfz6Vij+GTqETT-?EW~WtsdF+cG&XoY;89rM>CTqp0N%93YYKq<^ z05?8LJ_e&kdhP6B; z1Hzds)e9YIEye)MSj^?;xUMbre67D6(+y}cXRzu!H?rjy$I(VL*j;F+nw7cM52a4M; zMAf5mVH?V7zA1_IxGgI~$?)&>k(eqY+uui-6$G~Wp1|NQzP3}pSoh?V zf$Qm*y`glu8>a0k-lOO`UY`pbH6^z5J8m*?oV>*4m3BPv;ka-z)X~*~EPNV50Vduz z=tv;uFKztCiyw{j!Zhmnz5)IwGs}Mc7{av*8xDfFkOPPhy8Nvkm&p+vRDX?|IF-cA zX%gwwjM;fx1Q|E?d8ebNroOkBl+^L;ZMQb=8r4lGZ_hlbKdpRsS;ccZ7)CKn*%lx% zvV_RDWaL1}B`rSM_`8dx$;z%)4^y#^ve#9Y!-i$_L(Npq7?jVWQSL_KL=*ds&WhaK zf_Fm|sF_+SHk)9x1dL$OpA zOK;qV$TM40cBnyZbK;N5q-GkYa@AdeQsQ9{c?lyJ<7Rw$gS%)q9HV(_)`01WD%?5O zHLO0R2~{&3J}USm1Lr!BSNx!)D<>rwtGvcZZ@AppeuKN-<-$@yO-WNG_(DZouYLQe zl-=;Tf{79#SfnaL%5JtuLG5KMLHRLkG2sWOCF@?YzR#qPnxFhhU$w$7`8Y>W_x$6x0l!baLEhOioFAR@O7DWhm35>bkJEF*vCA5$m|(I@8$Br&?a; z6W`Z8o5B_8)V*~W&&#hr%OSpT($R;E^*l23RegSg z+i5NdUbW5Mkir$ysluZz(leK9PWlpstX4b!OZRw*v;42df5l8ayBJNEk;dlDDENc4 zlP@z77MOW>G>|wXH~a2zz1J5ZRrm4Fw5fYM1ayG^P(__X9=RPvGPQj^ton8jhT>@! z#!N0IMzBNmmiGn2I{T}7xWp<=ZHBDY<$#_d75sHR!Vx?ikncipN2h zvZ+M8OA%klzZ$-5;$kgyD%|ajk_|YjQ~T{{Ho-9a<8$Y+)dMr53{z_)E~%rDXF(%3 z^eFHv9^K4g=u@l0Lp(B3+iq?>&wirNE%5o=xOT2JB~HY&QQ9k19Eq*LR1wQ(!A*X- zsPI_9L2azCNo`nSeWno3%@O7gMmA9i&B6M)4_g?SG;`fvAq(MeWU^LsmfJRK$zI{~TZOkfp6?dkoePl?DmA7e`$iYmSn9%nKcGd5aIa9iI3tgW39_kI#uw8BvJq7BKlY!bA^9;_)z$y)3WxIp2 ztI<#>1%xZoZii(&Vy6OIObV5j%?d+#pyKL02PGO|iFch1BkC-~rvj9@(sB*gl%4^D z*Vapb&q@2`OG^jH6P}15MlcMh%c_;RRXeW z<@RCu>RhLB%lxI6nZPnFMRc5{i6+H|@c;M{fR(5UZ%=6)OP@-#XH6*T#Xk=EQvBBe zx8>MhIYpZ!|Io#}((eEX3Vqqqv34q4SF6EKN&)Ks4KK7vL)zOL4vKKS*GM%utWb`k zaeLu`dEFr3lpAQDcwf%Tvz(6GSmtE#b*8`qdyuVYJlRwH9GiPo%u*#T5B{%3kSGgSK7DD`=QW|7G3w2 ztbSxa&-neQDZY>Vlyg_n^wa zgmkKaJ<;3zXQ%nsj>{GAn-Xf(826bMI30yTT$>p+8_(21dgS|=eO|9^5Fe(~WFtet zmba{l&2Qlij5H2AP2-3?0YKHE;a zFVv$YWI4RfV;Nac|M6z(V+u?@Rw)aq;@8tk-_4F-v=Gi8&#N+c&y!6nmOo^=1@&8C zglp_*V%Js4v~w8F6%Q(B(+Eh-?uS<>-kRGicJSrXtTD7?jWD&-QhhHSY(I1$2n-D& zgVm~jks952K+#S(bGv#>gq&)oZ2f&e;<1V+4XH5{ z*Pqli@&Q|I1DIxwB?S~Rn6kkca(-4*@c5}|js;U>p>|-=E;vTySZCDdMnkdbSzt_kz8r%x{`!~fl-a&r|SFs zk*fWzEE1(G`>h?~LOnN%rrXzdYr<0u6noxlZ2!f9Jz&vZ4j9b|`VJqo@ROzNS;lu^ z4{>1nbg2*ptx!mzl;5h-pfK|<3$1!PZS3g{eCmvV>G`CaLV%CN{QfkRH1zI=P0i3U zTOG@6(}AT6>t*#@sM0ZkND;~CA7x;KEn|59a%chqWX`>sB0B1P^HTA+ee zI>bhcdw9qb4)RHQQ#oHAC6b@vH-Fe?-4IP)cjSo`$#-%OS)zvPCy5c$iMCVtocere#o3V? z+)U+7glBRppfQr!O5rbH=5GOC`JLi@=IhrZKJSQx8c!H{w>&U6*9(54^X$x0O#3={mSxcV7mNvKj?3{Qx+fzuzK{$AHDDqIK zl%zL7E0Bd77?7>GV47RH!Cic5hYZb0G`yJOD2$AVe%>WB;GF{qr~dT23Q~!^K8`M? z^vH*gH#h8Sy^yjldPKcdAG@fLaPzWwr! zg(w<32JiwZGgOjZuAlhTLl{XkDC*vzM}UJ`&{R2P1|^P^k46YPwQDg~h7f1m#| z3e?_P*vRJmK=pyH>+-W)n4NKu+;PBB5~qasj;qQ(dt|>4#E~#8Lm^LDZ@85 z{yq)7HW0;jc8H7(7Y7~OEni?(uPb!ku&FX~#`S8$P8QHsBrNJuBlSh- zyrse^be{6O$Dw6lSA!<3fLX=U3T|DK{QCAUU(cfL2KU{;@$uo&(b3^y!KXATTnTxd zt*s)?V+yjBj5RFQm1l98$;`pMeQOf`6~P2WtpaF^TI)%=*oQqw_xSM)kQQeelA*MHjpc3h&=Ew=B#EAE22IPe;eqA z_%r4boWt%;nz~WY-|i|g@4pc%+vl=mU2v8uUdmos_D7NBhR^IuZODM4b%_?ctjlzH zKyRVVw)3>}v|D)nP^_%)e4Ygw-=r5lQ>5$E>;kiXx4H9G(j2Zv5)g-SH9<}d*?e}s z%q!_*D;F9abh(YqxSGb=UFR@5hY=E{aG&sU6r8e8x&k&QQ1fL<(b*{ zc<)Q>{wkX=9SZKT_T)HU3tgoLn(qqBsG0@&O|tnp=-EHe{p9<^^NH|Z9vyi8iPSqiMPQs8}ZmeI6Sx)1%dQ{}u8h!haDn=WPP{JdHy zu`GpWmaMcGjR#_}t5*4VVDG@ccG9XXZxv(wIwyO{QLqFd*3)X zZ$C_Eej(dF{vAR~dy-l*3O!18Q&2J=);#xL>#ebWI;NVe)T7jPUqgk2?dAkGe68sJC0&AHzR7^h`8li0>u2Y6K2Id?aPb2wYcsvxAAHg0+sm{^urd@=y0= z_}bqz7FeB~48(C*1bR&RZCXXngJ+JGmevsO-ggjde2?0=Ib^LWJ$Lk0R6!{0?4)?n z;(Y7qrbz(R#8f15Bu2>!?jJHLFrgT&1%n^0{XH~CKK+<>2w7_$D01@|Ng;KSZ7ofe z6(Epx0YEr{Cn`Gq=-IJ4%9W4WP~*z&_>nP~Ys?;O zuF(C=T*`BI6GI(F;StNOck_SG(PMtTCCIm2}YNqBIcbs?DD7TW5M<#?-LyD*Q1gNn!aqd&-Nsk}^Wz z%de*_*k!*0FbVBN(mcm|yO`FhDYZEkoIl-7arYQuZg{Q%%QA@Y;)E3kQ#ZYgI9^^| z3+M(9D|)glcMi8J1oYjoA(p(d=R^GAJ{=yE!bS(!8@{OO)dj--V%O7SRoB2HCHJSp zAevc2EXhlSTm>wJ1?+-!(EvS5m!HC=e#P>JO)B54B8?ZGqg}63sHx9HvNMH|heeG^ zDARwN&bF7AY#s6J^-+nfO2(j*q(xpc$VPws{7 z_g$q9mUqB*ge4a5r-R+i@A4!ov!-jHh`ygLIn<NIL2WLbA+< zL#Ri72;6_FV`369v3BBdzwS2%L7gw+r(MX6zGuu_G4G@tOXLz|N!jNLA@6S#WZ-vV zzl6M1dpPagJ9^!y83_O!XJ zcjw3Vs9_f+49ad=CbwGFZ)`LgDKqKgxcLp_dmOq3(cIf9%jNGv@vEF&#K4PWVq%4$ z@$D_w9oL^k$Y>s- z!7>iF?ayS(l{&=RlH8zzr7=;Pu{#u^^hXzj$Sm%bYZn0`iJZ0B*q*SF=q#bM<~?p7 z?r2O4%tf?YH&T|de~Y@aiPm6?nLxQ0mIJT9C<1I03E7h~dbnJvwRhbtTg*FfH}@>M z_x&lI;QcL#d=J0y2yy$Xv!tVCODI}+oGA9pAqGagh-Ew*Sdy*ZU-%fT?|Bf5Ara&A z#Iw!@pVbY#)^+y7yEq{v(^}px>2-n-m74noZQ>bzQsf>sVX!Uwq8|bckQwichc-5@ zSY|!*rCd}+?*(HddBcC>nu52>;0sFUiqYeuLt5NHhuUfEEza0VbPcR8g&y84)#4qY zL9X$0OPe1AoZEbr!SOHP)o>t#X{#z>1n`Gr7tw9ToO$g|izVcDtdT6+j=oszO{?CVDQ!8{`iN~mKJhmp z3Cic1$y~AN`MZRX!aeIUe{%MyA#9e|*W$`XTKgqLgyd)uu7v&lN^EJ&NC&a!1Y}@A z90+0$Z@ZEN$RmD~pVSLI&Q9Za;2u-vvC~^L{#daXj(ECkT%m=O5f`MeUyPVp(d|WX z>#ZQTmVJkblN|3Lhu;R`;%+z8xU@Xd7#?fD^uex;P868q6@QvORO6hLbfCZmR$YOJkQAcc! zg(^6ETdjp9X>d&Nb6P)r5UB0=U9Z3fbD}MUmBM`U_j>OPKTY(U3mvpkaKnw z?~*<29I2(;k7vw$E6Mc7Q0X33WG!K{GSTCD0?|)cO{^uvQC02x9m^B!cHID<#NzoH zcG60n+`(}+92=)*fh%(_p{mH2BL%EH4!uSZ>ESni?lk`4%(++@Bw3`DT_`%-{}A_s z&$gvrYNHaVuJTWWll!C}#PN%fa8Ij^Kcco^+)e#2Up6Cj#$@;11ni?ao!Za_7M0W& z#Y|5gkbdAJdonErZuilsfOVf=5eSH=Lw@VCjb|2mNM3%dRvaHo{%btL^c?)=;)Bg_ ze$>^&U{MF*xDkKQC(19Mz+y;=bx@Hj;r>;tl^PfM;kOLR8?^SxnRQ3eeute!BY)SE z-;ULE-}?AfC)1Sf57H)r*kJAlSX$DS#jCjn7C+i&wBrbi{sCGX9p#q>wfavO;omi z&~r!~#m~v|XceXK3R{su_I;Bx6JJav*)HO>eKRxVFG|8wK$ys-O14Q~Haoo#AC4!7 z9%Nts*+yZQ0=I&szJ39HpdOu|FhJp=^8l|_t#|_>7$OyWl-?tD9pTVPnCANc9sun@ zV#=hv;WCUiUKYiL9J8pRrO9e1eeCOr-jqzd_2p5f4ea)NIw>4^DJ*d=JUR01I7j2k zhhwed035ZeU^5oAS{K2?0m|-g5V64vo23R3RHZX9-u8ixsGvcNg0nO@b$Q@jH!a^| zWi@~w)v_f)06%_$<3&PYO~DZ!eB^O;&_I3aEF>F#beK*+yLbC z;9NNSg2(H8e6d*#;R_#ru8yC&S}iXJY3dyi4J%$>H?dkyb$IIay`iXu*Zi~35=UJ# zl+_xrGlycN9B?NswhZHmoa6Kv8ZV@aH#>&7Vl;-pSiMeOKKJ_|aILm7V%&c%AY1Qc z6X7X;fR?~PJiSbE7n8V2MBU({l9bFp-&*?EM4j)RzSOCIlVo*M;+JJ;^n}HlX$ySz zv&#N^b|}7VfHP!go6Ru$<$A6%t7c1wr@Go)Ge3xg^5bm9W=(0!Uv5&b5V(VB{qb3;TUnYm9`Tj*HJ%Ka+#QoHF?;uoUH*&V z0z)oEFQx8ET8BwseDuk^haB;OWE?~PN%!2fQC^^erzKRj=SEYAvlHSi8_u!|HLI=3 zPl7uXEBRh8Gm7TFXD-zA?uIY2O@%zbp;yc~va z{(Mr@pvYv~8K{qlxx3}sdM50pVgL52dQhX!`}7;SlC3cB_K1Aq2qR8=WV|hdJBGa) z1U)dS0XzzdlY*lwei}f|A+xsC>pyN5@!^cPVtPSP`FVjv+^8cpR6=y;oMj{wh%nz> z*gN?rfESe@cRDqhKy1qZQ!EK5{wm-QLrFD#KrTa|djCfiSgkCtDU z1N%}W+eR0ZOgd=0sH>2M{@`z6vHDDkyW994LR!rL&bv^Ic=QF!!U1%xW z>V2VgTnIXhldM)<6s8^6tVvdD5HUA_5LT)&FN3nfT&DaJwjIl4(em(l-$)nrLvO|L68Zb* zYgKh=FC$*IkPO>Hjyt|`as+%^CLFd<#ND+8NE^ZWY7xh)oHkw3xcPA0Vo>}+^Ku}X z9l)L|or{a8PpK78>@1l;GDmCOmurcKudTQ9RK~%LgwQ%}OvB1QA30`l?`y8hA^nt+ zj6S?nF(=uz!7W%&_G6UQwTgHdvAtH974hxKW;d*lL%1wts9+_f>)_Gd$dSvl0w4|FFDVA`#%yJ(Y$2)zFVr+|^=~!=n zA7&J_{O}T;bE=O(FtLC#pC5H>(8;Zx5FQH&tq_4-ZU=PnfvU)cC%+_H8Z&A(Cb#~R z@sPYa*HOr z>I2We2VSh@_Yl8?<-fz~9q-p*)D>9|Ky1c%yLbl+h(f4>LZkh?!7*V1w-+E9Kh}-a zTK@n`ipt5!3Bp9$Yw`;H@gpGktfX5e$-ZHP^=>qT0IWzGheTxaTey!jKAQ?*+m5g>$(|k z{wZu~YYCw8zdo>+$GPg5bAfG4aaCw4G$TN^mtU1Ttw6X&4c_Pv zJW&}w2z!0RB6OI9(YZt92@Tx8{tG}o0yQ~t#gs0vJ;YC@70?X5{6O>g48}XrRD;Z$ zi3a~wZmi!JyyrLGL9sq6dlLaMC=~HqpBvw=H$f=UoVCcEXaAE_F75qxx}imXpZhVS z!mXkUL(DS3tDJdyvcxahgy&VRDVwd3x<8H7o7@~?+7c!mUc#DJN`rCl07^p6TBOep z{sFlAMxW_&<8twCybVtyc(2%6Z!&S4dPUC5L5GRPwU+eA=3W}-J;qZPOjI~kqFNPl zHFj+a-k47SA)go06UgJMWp_h7#s2 ztmsS(rULq>ofmf#e%m+|%rStF>*F!LGqz<=)>l_|Y8XR>%D?fnb0bm}CcJa=oo$@BijlUB&JZ8Ud914D>OcEx z<>^?=Z5aQE1^FP!NO>-22^Bg2*aOg!dv!)~BtmjqdYb}H9Aq>2-3l(}I4&VRq%3ny zSJ$}_K`F3_OXL-=$sdP)Tz+$OJIZPlQMMU;%-xoiqPm_G>*)5iAdKA z#X!dls{|hk@iq+>2X!59U>xs9S_6%@9N{69eR)?lL+LV#QUn7t{9JI@B8bQLfE$iR zRB6mOYga+MR)%v}Wd(&m%g1yq+a)EV_{}=nIgMM1Pap+$4Fq|P1ZE0HwCAKs=z?>0 z6xEEX93=<$2KD(fnEb;@LcI!NgANyd@I1iHHVJd&}MaKWdD0Oe*!UUzbz>=2-s8~q!LEcR0H04w}I-VaJ{D$(*S<;y-32PWyK2| zV|B$5O=c=&jm#va=*ouI!5bW=V}P}u7y`|0rel?Myc#$^}=z#y1) z6W?1RukHAc%al9x%MM&S01B@-$F+~bVyy1H*uFEE?zIiT@jwh22&}Bcb)28rI2U~| zb)6s~FsPI+F`I3AP;+IAXZ+Ex8kM1vX_*OJcgD5zksa2LfCOAgZM)madCFF;7AZ$Y0QF{ds{L#NoDb{{abDZ}^&bqFfwg4xzka_ok z!vD|57>&id^(Wp1pSSTika8X7j`yC>hP?u%%WhY;H-$4h$8>@Mt!KmfqPNE`*8d52 zy6y_}`Hk|i3tq&M#u|WYQb1F_f5^m|>fU+SF6DQqbhdX*aQ2oaeehco>vz6uJ^MKy zUGG=^ng|(3b_S9#O?~!eYOMTt`}H5<_i+iUn^Do+N-Mb`-nIGq>Q3416WKEwx8;AO z_E(HTd4N2!$-U(0AbBEIW93$6tC;gHf$#c(;7^AZOE0h9$Oc-LLaTspcHL1rrK4jX zm;DJ>K^-&h#F56W)6nH74!;gS8fH>dBkIW2)WRcAXyOdAI-fHrPYc^Gf%kC}&=^+y z!YCn?v&AEba^C9rvCUN^+^qybN|XkW=L;anYzT$qizq%ZAvs1s zVBPJDm@Yru)i(sGJOVlBpx(6s-xTI!FzqrK2(vifxwq7I73PO&MhP#9yBotSd*ddO zqz?8nQ@2u-S=+!!W{^ytSxNuxu!9PxwoCGH`IoEhEp8BSpk^kfRvSB&*=tW7Bp^Iy zCUH2VIJ&%eoefZ2-xeyD@A<(`4+_gppVyy8^{lBDwo2UvED$>(GpPIiEo0XX8 zj{Lxq$Cd{Sc`|{e8m5iziHtp|pX~Bq%{NWqe*bt5P8!bNLPTZ{45!ispI5?Jt;Js8 z%4&*7%@WOYSR=FF?E5Rdzub*3Vec5mE2u548G&Uz&h!0EDg^=`N#A$mh6e|B2HG0c z_W&7^ryi2G*}>eRHGc%Q*P&@Xo_akmCLM23$BIZsEsa<^A{E^6^vur&hb2Y41gUh*GFztY!6S zc!ohKCJ_m`4PytGTWa-5J8mawoSp6;^C~^if>wm4w;UttTb&&{|3z|M_oxvr-q>01i*y7hFGsZp7j~ zYJM?dz4e4YPVu?Cyc9ox@n0)=BoM85F9fEf!@0NM{MvHxD1zD8BVrz9CzPE zPvbwzUxqkZN!uKWi-$1-*YBHm+;hP}~B) zeQx|C^^+n^F8uhLzmh|C9Ce&2>n+?5D=CLef161_ytFp#L;2gfRJ%7Ng%|UDJK7;A z6kkf5-e4D@@O+}#r&-3@x{cwUBO|nnyu>Xd79D%y@YAKhjW1^=WGZ%@jZ(GyB1w_; zx2XVN0sUEOchC-;#C2>QlR*RLY_Fp_jAx^@2wl!Px{rD;cE_T_w*j@~14@bK5tiYZ zZS5|izn)vbMJ1U%FJYNkOQ{(iZoWvmu~A)rqk!LjVngL{x>BuIJ;`69^Y~yA$-G6b zvqwyUgmUq|rnUM0m(Is7yp9nQwFo=CRO(*dp5YRgS(%)e?@evkl8*0D>+9p3ZTUdX z9MKj;m1|=p0Y{xH*c$wsfn;oJ>VrUkEwLo74_HqXk6WasTNoSblYfg;9dn0Wdk^qL zw&sO^L!8V}PW_;C_zmu@{h;NW@+!8(X1~60%vFs@R- zWl@qglL{B(Ic=1nBCDTyz}ue>XF8oCASDBg;bG$tJ;Cw0S`GO9?s9On$jdSx;n0iB z$}j;@?Fib(p@eV!vFP_Ng*eb)X$SMK4Do&EX+Quf^m4rDm5|}<6E>VA&HKPxW=z4t z!uX9fx4LY@SHJR3uT=aQEewmd%3{MtMxXSDoPGD8#r za(_hHND&O1)hS&r8&B>!!D0X>V(KuM_u^rS?B$nxTRA+AwTN%;1!Y;31K8aB=0mhQ zW!?ZWxRzk1(fdEe0_{MQJHc_yBP5sJC{bJeMBtqkh!ecLkXMIc3T(}#nfzLNlc;{G zqQ1U>2Kn7-5r>-c(J|_gapCNt4Zvdwkr$M${x_YA@|iT$xxWEJkI|Uw&F(JNR8|mM zxMPY@NV8O3rjKA4X~f@Ae>BNG2u=)U6Xdk!5tH4|Cr%!u#mzrrD)&3o;0;%c>RsDE zrLQEX6wN5Io@KfnsqD&XM%BxA=IiB4mAwLWh(hi&K6yx1uPL4x`Iyi?Bd<4g8a}k1 zpUZJ$S-+lZMul|%E+b|PG0%br>$b!x$o^8+Tjw$;G%=C?5BKBJ3Xl{ED>~kF`A=v% zmF-&ZN}R~cSlq*8!;H^NA8G4DNk?RKb?f#&lGL`FX|$4L;Jgl&xN{8d@)+%7$?@$; zK*IdM#Cg5L;KSZ`BBIJX&Pxr)<*v)=$q>&c2}`_;oalf-Y5N?H1;>)?fI}*yv#y|@ z->K%Z+gv-I19)w@0VS1Q*C#58Z1$j2zPWh*S|0W}nc_%9THjT&#vunrhq@ z%JH9z@HYyENh`_At*WgKBSs*rkPTPv&_E$$AphoybA_fK*h$UOq@-2RLm?0khJNO8 zYDkhFsTK=S`XejND1(a#=;ezowTX}e6AlEKO-YHiR;Y)3vW*~9XF%i!;ju3{V zzv%ho1RcXp);&}^*Ew1|SiF|<6-Z^qaVfn_aV0Hsn(X!=$#WR1qOU5T9{HVQ+@aen- zAW&}VJ`7~7%M_IMTwdo=lD=Av;3|z)L)cNGp*dYo)jV2P(-}3C0qnM^`GxN{EOv5G z_6<$yN;}f7d#@Zg+7l56I~^rPVeD>dQ}~U4-3#E{!XAGpw;3NPYB!o8?K~%WD^_6YIgsb^)s-6B+q)WnCv*gJ@SBn zZjp;Oh69v9qHN8A5gWujvGin9R}h?1qyUdgf8iR~5xg*;&^zDZg3UKY5 z2jHa`$Bls)j-zh90oO$_V+%{C&R!4<16zasmB|2WHxVt4c|blLmdsr$e99bI)@C`! z2flDzO5RZ$&3YbyCD5DCRPKA1?}UzD%y+%9)5;9qls^bRzbh2iK_aXb*bHPobH)Cw z(VDM!{r9R0fKdN^{!4-XI~2HBDK%?3Oi`a&G zg@%USdCkN^&kpPuzp5TlO09c8$nMwn8k)Hpz|>xW86yB{VeJ3IRe9H3LJcCLIkaNHQc5(X-2x-x!%?rx8yPvt3u z|9gwfw+HKMA35nJqg!{UO6JP+`2L4<^R{UgslpaObx$v^c zKj?nlfMwur5pXk$jKi;A{`d2`O0PsKJLDWuq7u(h0$du?j;?0=pJ^R-5e|vO|JB}i zzcrP$YoGV{Iu=G51?fdW!~%pOASLAJP^GDe(u*-5(vcGS45)xK5v7wTNKrrtgib&L zgc=|O=@5D-Apt@{0)d>3GxPlc-w)q)edjvsm+WgNYweY_o~*T==eh4YoOXYNWF*IT z@TgN2%f*%@kM#BRrCJPc&HiyLD&VLg_gJ%B&Eo{UIHH-B{9hefX04T!OQje}wPa`p zJkM71{Kpy|mD!vT*Ysy^FBzxFt&Wu0{?%^b7wamQl1F80KS~6{j{N_lGAlX$G}Sa@ zXT^6Wm@J%fWDcdDYQ|l%*>tk(GDA$=%Wks9^PkBIrZ39?ay^EZ{iXv(j~}6F|6}C0 zL{atro}SbHnNSDF{wV&_x5ZTRsGYpJx{8X;@5gw5{o4RU)I3;#J%Fq#oUkuX0eU~m z`9~p~f6Dhri|Aj@C^WO?QP9q_!pe(pe?MzvYI^4H+FlsOh||}B`T3lj96*@o`d^0r z+R(^I_~x^Fzd5yo0iC5*O`x?uRCVv(?WrY2h<+CI{dtaeGWGA*ATI)5%XT~(jTR3a zyYyFe{c*3xjhRpyM$iHN3D%qT^QZPthyEwMZX(kjlvu|zCeWtOh+p-phTl8k*Q!Wy zpd~?h9oOtxXt1i+D595#ohKodfjNd*jWugkh``?eOf zd|ejiW%e40R(Zw*L>(E^$2Y@tYD5rjJ^@HT`1<-@wgW=rqh%vsL`&^F9{~`^)sWdm z7(3sgS&G&4W_XIZ^Tj$C>d?UGl1?6TPyOZg`t@x9QL8BkQM%|o{@F{k_E(XkiM*@U zFu$J@)kkx{RIN8K@+7l8&@_2orhSo7Zu`U!*W>4K&nu@bdG)r_#2O}DTFI7cfU^bE z{EjSUu!>75Zjzlt@!T?Q_)F9PBN_M@rNx#!OTR9IJ!<~PSDcI^{zea=Wr4_Dznsl| z5`O^NcN@Y^aiXF)Io8q;9T?g4!NLY32(rI^zsk>#e){z37enM`e+FtD_jq_}bqY4e zNe|fx322YP`Yd8%1`^b2X5gcfB(b!#OpAN>-lpg3%ziNzeGhnF4sa@n2+)uO1(so) zO$sAd1Q&SzE2fjS%Km--@-nuVPtwf`?Q+x%PEE9V`CM&!f0HL7 z!Alg=faUacs34l=63({LWmFY}>n^{*hMsU>O+`_#edDBnvZl6sRb{-v8I?oGljr`xyUm|qjH))IGm_xj z$sC`#$sn=cw7fo?l-3GgEjE`}9S+0*xgD=3F8BL)4uQkrkExiwdVS_kd()r)#ndERVC)_YFEEq8jD9I%!)bDaMBCxGmq zo2n1$$J;B;Z;GqOQk&L|g1|3m^@L@NIVIb|ip4Z7YB#H;6Qapv1>r+D*?Le%do{Ixy-}GvUG1klYXfx3=?YLsvyMr zuQIslL%coJ@mmINf$>aIf0x)U;TS5&?_r$c_VSrA05R2mQ-|A_lc&eq{#yAnVtZ{d zN~UesE!T?Al8!2O0kW%k*L4hsX2%J=Dmd_kg#FmNo)nTO;*u63mJU^Phgze!$uYg4j7 zm2F|NKb}${yDlxhl1`yX)G1H6CMRRBvNk_Q&xa7v*B{x$TGEIQZp>M`0qGgfiiHA1+wxOAipWMZYWv@YM{Y44?wu!ros>$jkf34Z8r zKRPWraJ8#xV{mMvZZqY+UT+MA-&hmKz*YxwJ*{Wz1k2xSd}$gxbz=W|(PnE^{`yF8 zAmm=N~ z-0zvf#)U2W!}gCI{N~u<)Xa3tdw^m{dgJElhEbI;g20(Djh^Si5b}ST-fDS z0GPP%y+E9c(I2S;3To{D0>sNNN24!%=#WY%SZG=D>9`nV_p|#~#DS3qCnlnG9mdUWWdeSaH zw7FK*9rxJa%{EBKh1}k$Z%c#7fFVG9Ts)7zS@@eYWN4F`LLnT@c>qUk!7 z=e`CwwyfR&_{AQ3bS(B231JU995k`RTOiqmPK2&NdC>zvk}1D)q0LVqd7{dq8)Ni^ zc+l3JauHh`PNNA2TaY{-1U_0)ZD!;{(vl*J=rWQ;An|I0K`RApF>2hEs4RFUwD^9( zplktsR!{Fmi*`hZcjNRoS8i!ulk31KoujpQB2Rzx&|*1k&yM7kYg738PT~lOIdcf* z@mqFmVl)uU=#Maw_-@<1WpP*a+Tmx6wtU)UY^f@p32O2NQscBDm!t@G;m0pn zJE3c$NH#$27%?AUP{+{vJJ9%Cvj$cll@Mvi+4P>{$Ry`ryq{z*XN&up)1dj>V$_e- zPO7Bc!_H_)yDa3vqEVbVU=S4}hHk-a@s52~84gzb*Ax`a3JS;}A*&y32RwgEFfH~a zWn;Rkx-s9MneVi1Jww|Q4z=o-F3hv40nw}PwJ zxL!WD|rwEz%A>xTQ`;wP}z{wGSo*8tlc_%u zqN#{%Ns_yn+44LM5s#^=8A&k*^~E{rqLtjclf4->>di+2msY*Q&#LEe_Ua_5=k#y( znqGr>oOt;MYd5JCZs}tU@--_%^~8q6D6-H45%d_^*dtpZS4+)($R|}HJLs7>?bfLK z2rM2ysdg>gTi@<(nSf~EU9r4%mu$2LzbJXI!l)5nyE0U|^RLul8&UtYq5AN~v4;11 zgtbIlwd8Wc@d~;?uDZu>+#tK>jS9B@(;t1ii$d^P0aTG``m()Nt@{HyPF5d=7e+%X z&BCGuJZr|9jNA5>Bsz)-PHkqneCf^OSHwkz6+*v$4vtZ4uiU-X&SL#CwXvq&D*<=SFIIas zCS_kyOP-z!ks%qCxrlax0^{-Ow5c!Q2fE?8&!F>KZyfb z<<9_#-pv$${KC^J}<-?7~^q*;aE926UlhW0rV+tU=cun!e zqN@+=?8HtPq`53If<3}k`ZHfhq0$O?R5UHepPSmMtsyf7!ED3DtzDOgHq}GDV^uLQ zy>j)nY#O=Xp+lpZLaiBBI%G7@aVxJ+p*G14(1X%oqrA1D%TYZaN`lWh1CvlH^T_cf zfpho;WYXKq)47L&NzFxgo3m(oLQu8v0K!z0PhG|4Ol=YHgg}L#Zu+CL9~YdbZXLF+ z9#1j!SnQzG3qNkwtbUZNlt|49`|-VCx0xj=_G*h{`*Vs)ZAz|T$Jix1IV@JZ+X7K- z%_7*7eR82fklX}TfPP<0sEv`cq7_zVP1KrD*!0Q)*{2a;4SGDPm&$n-a)5xj{|?4U zFs&yH7F6=wPndMU_a-&)-g35+)K9DCT*OS|ljT2*geAGCov5NtnF$N;TtE6-*nuqU z*Nlv<)>yPXjc1}nL90cB8$D(Xi`ZPxqmp2jZxo+TYtMa^Obb&}3iOgpwDZG3QLFN5 zp^!4}Vqdu|Y-(%%rSAB*^8R=M-SiVW*)?0CJbYXoTD23ueox{;68Gu-`KykmU2w*} zHG|K9ra|rVP7Bk%BptGiOtKCTPl;V}G)dS{3o$<%dh=Fyq9o!6C@@t;BGlbv zcULe%`I1V=3k1i-jNTr!^_`QvP!zs?gSfz0@M5V34nTxa#rJ7ex63B4?C!a(c5aod zK)l%DNR#r^TTdA0aNo*L)God9Cf~fvzl&gQ*Nv5hE)(1DKU(_71k+9~;7))|Ft+pKfmo|*AF_+&s*OLcV2fuMI|C~R1{<#?)MLp1kkZXLJY5L4zmv) zQ=JaV~NT}bF7??55=s=*o zyr9@;xe^O^Ho@iX@R9}75Vl?+%!t~~wMmGY`|aEH(H8^-7Z(wHElf|O{o8Ys7Eia) zl%aB|^JgQ+K!LH^|azsBJ z@NOn75BFl~wJ?gVVR^e^*EDI}N}mu=$6Qh4|B{-^+igMqSo-wE+_XD6us2_FpEvf* zja$yTUbip14AmWHPHIbr$4~M5aX_VhL3940Vg`5CRma2jidq*71~Hl zj&yTy-pOEVutzbsVCA)fa&LAgi_9FRzRuUH!o!$NaP(VbI*HEsvfqTdNZ36qm4I0A z;!3MCHSBh_|H!mQWT-x~zVB~8F;&3u%489utVXqS0J&2<${y2rD zr6?s^lL{~=s?sGntVMgr%zgT>jCe?b#@cQZ*3h3c$J?BV`C*|FX?0$!H*YG(YwKIY z_yZAVe!*l`cx#$@zer|g-JdCFz07He?7cM#{3ZXX$U_)K{`!VwwyM`{=JbJ!XCU`; z+g;wG#Bz; z=@9}ndaFk2-8y*RC4gNY+(uVkZJEu8xuV;W7312z{lUk9im0`0>a#@sgj0>2FOk94 z1@t5nlEV9txQ}iDUdRAb9iqvlIYkVh7(|faa@LJl@2m zcJU$GUt=hAYF>NipODTI7CT~%ODZb;hfY*^NMZO*jnLcLBrC;Gw*Hd7v&lht$n#_+ z)xCuMs|YH;3v5GVdedAgK}ppc={KeILSf%yjwfH`(8}%}a0u_|h2-syT^M*ppnM8O zr6{Lt?j974)CWzBQLO&0>ek*j5m#bc5Py{4calfhNF`J%{b!0h$%YVp8So;KFpIks z-Gcycv#$rU^Q_HRUA&ICMiQZbwiCB?)`wZy_pNpy>o*#CAhQ__3)6hP;z#U)TiibE z2IGbsf|x6m*-P&YF9YycA6gaErX^e8-=Y^_u1{$`K^3X(el}d#mg=0~%qg25bMiQv zhK}31E%f2SBJ#q<0Hnd`wssq94fqM4jl&q#RD7HrG=SP4yg7#(?nY6=pU%f-#{K^9 zUV9btl{eSp?Y2V3O9fB`l-uv3+Ng0g2^eO29~{O?di>;gXj7Hqp;D}3O=Rf!Hg@HL z?&;ImsZgxgvW^oLDKxj9D44pO z+X?{I@<+s9kahRRQo1tcs?IakwKZ=jorbP*3N}K_MJ38jvs;?*@~vl)NkGt}uV+U7 z5H;h;XAX~~9&2&AEMabBo6)>J8L#|=D|Z;sj%~P5c)YAhjLUupcV28OKTm&_1cvFF zY2T0218`3n9D~3e6RBQuLA7Zm(wDbiAwlBBOkW=;4VMHC!sP`llw8*rN;T*RdZ!lZ z+q<1jQi9rOryDxHvvl(?Tv{sE6XJt72xw)-EevH%-MX@r<|ge2U4JCz%ugnZp99|m z@bqo!aVMekom=Yw>Ry(aTqf6p*V>&KyWJR>`=JE@Py4Sjmxiof-+#E-HfA-V5@chO z7ybcsbmTc2qBn|nFhvJVayddgDY+j;$s4QkG@+IbqKZRS#sSlo4|vq)9kKnuum^F5 z_X+Nf{m(*2->19c$k_G?C?|0Uhn)F`Je zcCCvClmy5Tv#`dkUN`Wswg!jcG0k;w?0cC>l9n@hbooqfJ=!AKceg*ulwV}pf4jY7 za$2Pse_*kn)Wunjzy2cWu=*r)=sSxd=*B~=#e`x5ey==F>b*E4nkNxaclWzSQ0nZRmG@Kg`>Iz&(D8Z`Ftwh3Iu$=zJhVx-pJPP+G; z5S4(TiAXlM&EMEMCtQGi^@_w>-~&d!1**i0s^i{Z6#JAgcTca59%;u%>~1iG~8E8 zb3Un5wIJU|;HqF%hBq4`mwBMdzjU6>Js=JzbhczzR$6u};ZWp=D*xGp6^TlRedn1g zlAjN>wOm(9DeDf1tgFukgSL-JD@P!NwQ6q@RY)S}kH2@f=Y4YEqq4!$5%L=4VGe4Q zPN~TPG9sW*6}a~^ybhn2SQDp+b^L5r*47T0_=G04p;UR4x)V-6oTNU>K%TeKcp@^EW0TybF1YQ~+Gwo#u z`{9Jm&FTaEANg8>N$+TduDqFWQ1r0Egw=!L- zV=gL6R5A%HiOv!@g3Erlx%1MQ?FhoiN^I|y5_L@DF^{Y3;1fFqrjG|24bT7G#wBb8 zr#wBB+?S01>~H^DXRcMsj&rP4!pgXGXiHz+W4!_Xl^w{*jK)bIFy z|IYuj-dT&qnprdR-1olszV_bNwVw%*mlc2hjOZB>64G;tk0OdlNGOR&NXV2=9s;kZ z5;nvD{~kChihn>V8zR{Po;)%Yk`Y2es)$6pF+c&HKehX);fRDp0ssB?;89w2IucSk zorH*xvYYPi0;)ca=u-FLqcKm)mUG#U)Q>(Kw45&%<6?dLI;M>C0tXkTY5LkwZC79P z5d-AOn5V?>TJl1&Hgm5I-Is@#K8v0Q4Rh%Wb8|XT_Xj4XrNH(6pN~(+9SsY?mNprt zi}RK=;`Q7Gfqy@9UzlY7rtSnIn?lad`^_fmHzr%3EkjqcV-)z%uWCMrw0N8 z0$op5W-ZHA!vB2!lj!G56Ppr`W8A_;)yc`N@y`C#_51)&bu~pP9Ynrdrhv_SJ(r`$ z>9+G{MRXw(yqM-F5yh%M7k{s#&6+>83jx_KKF0==!kSM))a0yQ+7n`IaC={!w0d6` zal+Tu*LCZ0I=Z?{hSIp-G>(j-A^*PcC$_0?8y7pa@Ae|>j|bU;RyjvZsKvx}GF+)H z%N5ao^!7@i5b%hLGco`6LnI{APTu@2>DbSFrh5DWljnL&rRnME$c)Fw$4YxcnfGsC z-|Fi0>g}?gy>+Tv^e9e2{qw0I5#h+qvfH2tQZ^I)@>(Hg55X{B1*mMgvW)G}Se}$h z)A5F&1c;BHe~q(oBg6BHpPy~R8s4R#G8AuwPPs5@V)BcKMc!+=< z5u-eQ45^cqm91OyX-ccKTmCTf_|GNPjdr$EQ^q}3Cm1#s?N*xIIhWp=4o%qmIS_Yy za&ag#F*o}P!ZzW>Qz{A13EqA+=s3PP6%Qw(Ztd@jXUNIPfm1EaH#n|Mk?^^F`ycM>R3V;Iay%a7lqH5Q%&hA*mKU|Ow4@rBm6a7OT#kPg@(WA|X((E7=Kzj+ zb_q5#WCM8GLZh?N!Jh;B#65H=Y%-twC3My%X@t60sOGQ#U0}khGm0OgNtr+`kh%VB z1L-D_=-oc6SO9K<^UxEu!N1;iM;TEXB&(zmU@WYaSG4~3o%dK9XE~+?CGC}1dnpC~ zUJMG0Xc5nly*{z1L-~yp|9$+|0{^wZe=YF;r3F5P3YjgP6fAN&>^?ifwccMRl3G;*qa-1*JD5eNOP9m{q)-2%J>C4oXhr zLNWZu^nbHgVvJ4XtqFbC#qHoV5r_OBemonEexO2autN-t&Js@F{i%r$O8 z5an<8*UjH}Je(fg*+OSXa;tH>)GLJmDVYzqw6MX6-qXn>#LvU!eNkS9c6W5#V8gQT&F+k zREoFHysy3DS}dHFqrgb@&C%em0`gE^B%}iI-C0}ivhDK}S)U~#j-t|oVOk4+f;AKr z6Y%FFZ}QZGQG>nn?^<&zIoqvn78b(r&4;gHNOta&u=n0y|C~hmeC?=WIV9GxiK{>i zektvnCtm}4bGMdwyKT%7v`$-?C(UsZ>Sfu~aM5XpxMP#T`T}O-b={k>{rQ!m@rNJk z^UWow;ZF10bGGds`&LDC)TvJc>(-tpTfE;Kr2K`DQO^$MiVaiOM}1@`i>eJkojkhQB{B6#h>kfy0)cnN{Am*)EVkv2o<0H)`K=pzP6aTinw$s-I3@nVf07Fsa!dk=lKK8V*||9)XG{HitbD zCx$=%&i(2?dp$`zQYZ`{SXpe~SI)6W+rRj#$_c5&F4kKt(p58bGnde+Nqf4~bFtSw z7{2HJtN&sgep|5z^*vn46pzS!L(jxePGT_eDlRb|2bYY$-gbrI+&_IE@93Tn_Dg#2 zs;{fm^NgHZMO|B!`CYEXHzjMW&MutL@R{R1Ud*+|LQ%%bQv&yXHo=>Uot_XSYU;dv z2DY;8i{;xk8(qOF(-k%eG!Gqa-%M^#7wd!QoLTl?!S&Z`&#y5^8JL-hZ@Bh4Bq6eU zGiPi5Mz-)WNx$zyRjoJ18x=~T#__zmb0bHUh;}8<`+1M?UySfy1ME)E8kV!_?&m#! zDJz7uBA?307c(;PIfJLjm&#kSYjP|we(py7b0#$+*JQh*PW4Y}$7|k>1L)zSbeTpiQGCqqADG1=N=IN8!nDEnzIz7W;Bief^O8yZsvT zmeeWIQ}mQ3Z68nY7x}}Q4OHfM{=}@*D8q)KB0eeMVF-}ekQGu&3 z+_9+fOhQ2I$2{b814W>FbP2~qYYGYt zjxEXPxW?z-&$Mm9L@ltzL^tapAddGA@~Yf<`pkSu$g_FH#|G zb>{8uz|x7r@!dG=KS;51K8+cq(xR@@yU3De2_v`^&SWf6K|Z)S8GXT9oJ_t~s*|3O zeo-akHRx+PU$GUJVx8T*dJ%;IDiY;*w_xkFuAh}WMC{B)AX(Q|!zfgmo8l+|vWneT zugfafEipu`q8BskPZqrK{!qh(zedi_F*Ww$Rf1C37u3l`-xB2({+6+hoLMKWqr(ig z`!Q(O~M&o>eg?Ea_|$YIDArdfg)UFVLh-qlA7QC8QOZZruHnO|sSNE70Sye#yh>(0_}A ztI=3f=8lSyB3HltYvVpJiIi-ji~6WR(Be6omIN_|Fsa0GP^JEGSK3>(8fGM@@W0Hk z__W!%{4%BWBGl3{EOuslr=zC-fYNmfnYXKs)TgBWOuJ)f3U#wz)xtY{M)t||J7zYv zf-i=N&zqhphi;>HE%@-<(XK5WQ5Br`b&MXoIc((SVoyc1jJJr&Q?GDgJBwbpV z=88c^M_?PvEG`A^_tF}pS;TX>MW-p>;=nh&kVtE5(t_H~iLWT-THCUYUI&=2Vf#6x zJrU{R1DdxR3XYUD1d_hGyt1We-?#n~!a=&%<2RA3;%)U^)#QFVKRqq=o+&nN_^EUA zvfl>@uTNHO@Q(}Nm6kP$%arGz#A^8|qfuH$G6?ePpFuBU4CmBjWvvTl=?%%<$~y;O zn6Rb6VKt^V=_-)rm)vHlm#;((=~xzS#{+2(^d^{iHJ!u0Irne!UA1=WU75@+#yALv z<4~4$=X5h^j~mdj%pI@b7u&YcFsU!ByvsZNd7bILH|&=nuxRIW44K8Zn@9)8;ga9} zy7c5>#~A5qwtJrHu|X-gC$Lb%6gWn@)C_7-OIhq~&*_fS5?HdIADd2FqlP|qEjVS7 z%A6kz8uYdno>`U|UKLeqg4)VkG})dfH>?+AJ8fJ%>96~YqW|TeBl0^9Dzz1Us0gIY z%qyn(vKJrelbx?dzjTLq!m-qMy=;3{+?$UcRMxBd8+c5ZuhnHZRlXT!$66SyCUCC$ z2T%~IF7e58uo`ScpTi%psY%C?-qaUbWT(kMM)eWdu8cUlh&lY`s%qZ?wNjZW^(OXb zJKo2R{WfN$G-j2H^M=a_Z*g(w1ifDsDwL*nYHFdb>eTg*1-x2=sy;8pd+@|LpMaXY zbaT~A&AMdZ`vXqR<}qQz>2p~6=M1>mvfVStwN>3^0J|xBbEVOj&Bw&QtcRQ9WSR}SH#adqiWZWe?mD&vG=I0-O~kKaI%oSx zR5P|~jMttpb>LL2JEJ8FLPu?N`xb3s+-JC0x89Z`@8O^}JfIK%206We*%sh&5J+Z{ z&j{DV+|1oNv|HU{cNnq_>i(d-C|j~#e{p+y8J*AHI3+J2;>B1Xs$mR_(bHu(|13rfD?`0RgU>+rj!kQ#D1o`csY?yXS$GyyDJ^ z;R6+C;oirQhDG+y-F0n=%D3bWcuMHPGb=ewg<^1bxw{@k*RU47vUi?svw_GPnp~!R zf@D*29AkNBL^|3gW!9H^ln&>r%&6YqazgOgLKT0(|dp@8P_LX`ml^m9Ra}k?9>=72|K5V5Fs-~ve zT<*G(f*+{7(fq5yR%K@!NP!vgtHqjIjCllWc_sj}Q^H2u&cAF7M4VvzBk9C$$-NZIzN-qKH;D^kmrrt>XML?QQGe!Pm` z+?o1C={<>;!#PL3@aGJ72HD8U`ishFDQv%lrBAa}L*nty|4mHu`A)lC=qemUtIoMyf;nM|#`jm~(B{K6wc zxz)zd2ERo%&YO)NmS7-SaP*NCC(S4>Glw;lazqF$KpQq;vC$>2fOUP z3t~Seg9b5PSoFD1t`s>x&+EoBqA3z<3}u25-0u$^CxCJGGS)RMk(7~YwBOMOf*Rh+ zJ_!38&a}MOH+m7tJ2&#*yp50s5J)>|c_EGI3QTZ-mMvf|gQHlyjV;wI?bKRZK=~!om z+(88=soQwZR)lwvgtI6r{;H8kdftc_d_T~>i#~AA(4^}PoZwk)YNXw^)6~>@AWC5Y z9e+cf^WXz93%f@51+^k)XKHcZerc;*%`N6y9K(s&wiG##OLIQPaB?WRYu&nR@%JsA z$KIfiAUn;!@uJpQ&^Ca3E_y9+wer4{FcA3`G2y_$ZZ_>cXU`^VbyKk*9TYKzCs)K@ z2`!sR$SIQH2#hUvE>Nw`^kb6+l^p5Sva=fZ)-j}H?v<);lw1li>FBs`^TQt+{_%gBN$TTS-cxyd{9coCS&QgDaz0D>H| zofcDK@(H_j`atj44NFYRH}M&>aQ=n)nzsqgndYr^p;^sVD>oEH(cH@+<7c=jZHK#& z zKj8V(mtQejj?w@04eY!sf74`Aam;aii&d~o0^U1IAOofBL<~7Y4J;sbzulH|P?rlva z)~tUaGIcmhZTbzbqrw)i0A=9m7GLA^jqL^Q8q{TJad8Uv1FZJMlU8l%n}3t;mB|ba z2W%o4N}#Ixyj=HAlyoWYqH}1+)5z1aab~7~6uj^?E4Emiaw!R=+=hvft)wL{JdJr! zw{5B2wTO;^&&~0EU3Z^3-mzRaQ1EuOQ>K zRxeMSsa4+26KN9cwl{uGPldW#E$s+;9E?7ZZ+Hh+#nkFmgR@z=q*6I1EmTk8Tw+d$aqE+=tMGOL*z-EZ0d7XSsEqNaYwYHw|TkKBrBTUr6#3|FwOen#Jf!uCP zyo~i7bwx_x;2cQmeulpe#l0nDV7a`E7yYqrbKn5V2b^VP|N11;%N)S{673s$vC|9`Z|*J}^GsZ^@t5w_+NG7}&k~S@xE;rj>|!2&ZF+!3uURK71(^3q~?sQmo8B4D@%Qa+e#!m*qs!wS4c&ZNs z?cO(??NPpdE$wOa)kpCUiFVL9uW){fjf)#F<$5k3&V**+u{6rl#By`e$6DT4CJCzC zYI0jxRKgR3@ueTffH%{ie80LX5LNrp1~h<0Eq-Eo^v4p*W+=rN&@s%O{m256hLIo<{vKvG>&5>*9_gC-#F) zHKw7Tk8^AufCNb@`H)0JVU3qED&ymoHUx0T{mkxR>K-m%`al(A;_KkgQm&aiO|Lqv zAQb9zjV>gv8zC`OjNAQalM6g!>E8`(0TM*xk-kU6WY?lO4@@F#Yv%po`(OG`^r zQ&V$uywn`V7d=>p-H|(RsB5Z=wedY#vR-Z;r};b;6Gy2%uy92OMKACNX>BW27nj5` z9jzJ*ToMvSJp3I6OA-E@-^}ADdfR*JhCcS)d;Mw)HBQ<#an4;8G`MQ*eP9>B6FQuQ zv>w&s>e(dE3n@u$hm!$BwhNd=rUz=A%@8xAR9J-0uyRAKN(o)d1GuuGJ zWZ8?^FH2zWrp{lP=OtgfnOc4+<;pxt*e4aaduhCIq;;KpRY1+ul%#|nUZW#>aEQrw zzWmt`N=nu#uc}zTv+?|ViMw3fW^*eL{6Ky!raoKbtUXvNn4HyWv;OHy)A{abqjhRC z-e6Vgx{-+~NAE{lV9$B>7Qmjtz@9%ezaYjZCd4HqBaF_7Ud)ri-#aV*{Q0+>PDTi> z@h3VB`h9dr%q~M%j^u8KL4s!_f*SI=h1Hv@6~foGR+sCC)Kj@vMS=Kn;jTw}k!_d9 z5iPXOAaJp`#0(x6tMdqJ^49ty(}YY5SCd_04&7fP#Y?u=*B2qNdBzsbD72B}(}yd? zmiT!A>IBFuFQ@8{lcoe0nmzBMmAZ83T2Dg^gIsRUwwhRm2&V_Eo}m1!X1>D_w#urj zb5&QL{+T7*6-GQ);RwA^WlH53?(geO5Z2FSmz9x}ko_nbCKVhR9vKP=i3ke|gFql* z5Og$5%x6#Wuz5rB05mx5dF6ML-Ky|Au8@#^#<)ZS_4M7HuCA_-kkCS-E3u%#he%!i zW38HjLCb{n^aUz@ohBbDYHkV;NPvQZnVFe}hUN{=8&+1<*RNk|;}a1Pk&uw!kl^5x zPvu*unz+0B+}-^)CXVnz%dZUvKfLcxF5n*p*6k}EpE5`Wf$$A95dcmT~PFb!$q9_8~@Rla}`x)N7 ztJSD7DJ(1mXD7YhKvez_R*;asQ||%cYa|{vF%kFK5A|$ssa&-GCT%{y>xpnvv_(lH zL_}8*JbU?}><19e!~WV?iHT~`($ZBXgE6tOqR8VQRy#taf9E%IkYmn5FSCwD3EDslm6v*MSqv%6++*wf-H6$n)~;=KF|6_w4OTjKf&~mfpVorqkr& z7l^(;QfLTZDFCGO;YzVFF$e_0$lrkENe6pd)N;Tpwosx@3ltU>7EVr1Oiav*jFYgF zq$Gk0?9SKubD#Rd{zNDeQew5E6v)CKgJb)i$hJ7RcQ(hva8JP-($)~T(`e) zb+R+Z*Cr~an*WYO%t2AxtGNO{umUa6>;U=_y|g1>*O>wtt+$`#5X)wNe-t#Tp`if| zAR{9KyVsy_NzD?DRm{CT@pKx;4 zRnwTaT%T<%=6C`bjfQZmm%jJ#N=D)}CFL5aMD-J4ErItGQFbziWMZsM@-v?A0wbgiCLjPd-37liJuLZ(?#bMdMFjU za8PSWYHCvyX($XsXnlPT8F}U1+}!FL8ba_dFE3j>PA%a1HFyTO`BXGCLflhDA)A8Xr$RNv}##JLqJ&W=W8|z~qq4_ZVSU zP{_kA6;lzAp-<<~XyHNeFFLS|p+(0-ffYw_Dh2vp40<0O66h7WuP!d?o0@oedFSQ; z51XBxf!vQy&&@S?x&^;$_3^1Vv|sQ%+njCD5>qt+(xjR@JT^M9MxvonBI*rcO<7L)W>+XQ3 z_ZHG;BVk}XH(#CW=@{>T!9~6NsRTsrT%C{Yrd~c1!en4S3im1>R_GLih&DGjzXTrG z*lTrBdXnD4%B=g?D`@WZFj*;SNvp|{>iJyG&e<;2d7M5!wjmR=SIqRe<#pMg&)3mXICR;XtXcYWhm4B(GV+1n<1=zD z{qH}8TCPs5=UR03OT zu$C1@73>cWpN2e@8B47;8_o6{CKC?AB<8e7#F>xNN@uV-t@a4qqB`v@=I8`rGz=aC zIjEz(qqA-tfs2aj>FIg6yN!5lh_+G{jm|2voSu+?hlNGaiZ3L#(0PZ|#QFBEJV^wQ zb&X6-Lt8f1){J+xD3rq9rcdXAK%m3JLqvVgK0)bhwaqB2;F~vnNnkVR1j^jW*~4kUYaj2ZV&mFQfbI1aa*Tv^(-o-cZmdsp8b4+}2TA6AvO zUTq$;EMD5(5+5{QkL}o&crL@bGd!-c#L2w%PleAH?tenARhe`u5M`eG4URKMqOQyh z&db?zc+8E?KiX4m8l2ZlW@4c-}+ePT&EiY2*T)5>oa9l=$hz=U3?M1ld8 z>gMVyRmPe#b*0>o0EQwKWQThy8tPiJO~I^4~Wu-efCR6mN(HFVu0ICl2X#s z12wdVNuatU9~cbow8sh$KXK0V{g0KnVJ`qVwMonFqusDBe_5vEZOKfPO}+X4VBMnE zaq02;JlFZ`PI;56bkkv%7Cy6frPpQO^+B8OU zv%PH5t(}#<{pID2gUmTT+xAuZ@$yCwM723~zAUMr`_Y9&Y?oXLm%&l4eJo7`37f~y zpF%pGPPXt`85dbuW$7?zBD879CmeV^U2R84$5yBUYD+Oh56H5>?4-+h zT5!)tS65eZa&m5+NXm(_*u;dM9Z93eF#k^fiRv!y2AR}4vy7;yuaTYG)TpMXBL}3E zLlO;SLL?Z6s2BxUZw5@1y1`O^S$oO3=&%DIQnKUt zVAc9iI=AOg&D3z~cH>TY{aGWSnjY_75#TBH4($`>D>QOsyyj#6g-TF8XLwj~c?zGi zkk=A-Bq5-HTZy#e2yfv~b_qp{r+ncMB%iM4AaNZf!;cIl-c|(qHjudF|Jlk5x z^Q=?do27wLg_bi0J&e}~{HZ7*ZSUlS{`6@`SXkTw$cX7VrLXtM3tRHcuRniIOeovq zAYLMFkskuE@8#vyNyfI%KF%nN#@hZNCp#M``>GtPNBMc3x8`%yhA~Kab4`tM-^t>R zW50X}R8C++L&}_qTPI|{hquVc407wWH80p$b>47N?cStQu*82OepS@8}4&ddsk&7)gT4mdX zA{%8oB3le(tk97~m;H%aojJVA%fVwUcFRRRPL^`>s`<2h&4W)RX}bfvC1EAfhh{O+ z%z!z8;FFdPEATgtTFzeL78N6i@$>VWR#vbLeWRIx*q)mdL^Mt5r)?H5n9(qDb5Mi0 z>Di@;vy@(J#E^l_PDq3)=TK2lsi|n#0j$TE|Ay5;3lI>u5W=Z}W|wtmw(`dHZHDqz zi>`RJV0txe=e5lW!&%EwF%KY-Dk{dP`&z6_RMW@+1su#{bx*c4E4mnWH9zA&_H>j5 ziG1GP+e=T6<#4`=BUFf6!>bOD?T^rr1G;OBH z7nn?+dInxZ0(E70YHnUWhpY_T=ewM=G*0GgpttGQJ2C_t<`{yr!P%5KIqj5`tCWnd z`PliSC*~@}-+qKI>aLgczx#mC9t8gnJ#N^ zH643+e9P5|>~PPEAPx<3RArK@n*^p*PFrRHb~?HO+k2l_TDhVA{#XXuKO_2|u0$u& ziiUWlve|J1EJJVb#!aNtS)Gr*3VA?A8Nn?73cacKToVbM0lB z;&@17G4z@0DCf$mPGy(j1(Xete(0p6qT-_BqT`}_`;qTqjnvDB#XR`I&jB(xYdpxf zKx`L#RM+ZE5Q~JQL|4Vs{K`B8MNWzXUMNu$%x{=5?;Mk%oFu`yT9zQfrl+T8FAXD$ z#R>%VL}B@H33vWxzB1eNoTS6J@(~x194oILAYrgpva-QKqSC1`s%itWD1f>jq2J#h zUHw2NJ3B2c?e%L))aPV;7AFO}yH*Vj?sUU{$U2}}O=MSaEaEv}3_%g4o@taR2AnOE z%f0>6gWJaQ-N`Ja>x5Fx^>>4VW-%FYF)vApv4N@;=f&pE27?kZ&_*dl@Ni9EUta^J zq^72(qU!3VH9Hj1)(&&)>=Nr2cXCozb^@qOHxUAIEG&cgmIwawOobz4*( z`OkB{T4$j%c8W=6Z^ET^i@;hgKVE39ZEewKQZvnQ8CoQ3PFVFnXC_I8O$cG+(d!X} zEP$!bBk@F&FCwxlw!Xxui%4V5VdLQ7P>Wc$a8m7+Ch5PXp%Ej|Nv`s@ zB<0Tr!?vPh7+IdYEUv7n36G4ljn2%>2_icBxowId43EhA%}xDoqh*v+|9H=P+*3n< zGR)TlS>O2E1Cwfdi&a|J5t@+EYV&a#nG`B&TJdg?puj*#7eYxSolyx{O-&6I74?vn zkB?nIcSjQooATN0$HTYzxBv@qgoTAglM)aBR2Yx@O%J2IQNQ?|GUE}kRRrjYtBp!o zk!zF@qq$Y^gAF@rLL}$dZALm!!_8h5a3;XjCEvEjSKS#Op=D4s$Wb*UhE22<pmAM=2q~a^4e=u;qnE|p z`|`@Yq$Woe@@HiKG^pU6O1f);NH`Gz!E~14^_H46F|UnN+g(fJ>E>*i@Lc|&W9*nB z7{~}O5joj8UxaHu6A)jTiI#`GedJ9bgRg)tE*99`DME;hcKHMo-?>DRS=vME5fORJ z^y8Kom5Kny(r_aU<}G-m7~W-eb;6AQuH-9E>>iEw22o6hH3y9qRCvB^Kz`R8nvnM; z&sMK6hsC+d7$sWxd`CV@Cjuc4wD`nI=pa#M>fpy<;!Yntmh7AyN(Po2tkrn>E_#nI zSoAb~c5kGgH)iD#0FD1R8{5m+*iH|kcUE))QeF_3EP44TzNf=!|2JW=E7<*Uc@IUL zSW;f+Bp+Bc$WR=hOp2xIhDzsZEfS`xJriYh8eMvO1|}5IZ(UxtUdf$j<8g=)3=Ius zuj5<3P_g#U&>$f9aLWRt-9E$WZDXw&*{rFiix-76k!Qcc7pIW6stv!OgW-soAJsX@9hbl4pzy&B?=u_fmZrIfhtBE1}zy7(*x$ zS<57u8Ct(iS0I!_M#>*Po7zfzm`rFdEL{=}?xgOdh32#Oew6zt{X)ENcD7N-?=d+2 z$SR6-RThSyY%}f-&}&Y2WVdWduJWu+VWQ)Rt5OO-qqIhv>XyRT2*)S*&tBKO>!U zv0k!=IoJ7I{X#n*Xl3H0l)@$-$wrq6Q1MJT$Z_v^dlSH;7I;UFRfwVtDlm zDK-O-s3mZcu-{N4D%6w-X{5LL{bRf@1B_IJDm~NLk1L)cG_3rAJB$QmgJ6d&6WwWf zj#{ey#1@5ylNzJhC}^wur9yjG+x)CX5DFTI%*$(e5~V{9QN!`mV0>`d^gTj@M7i`p z#94@lo2d9*eaPLr9(Gu8L_~yKu$*~XQ67Q4J;ExQK2Y7!%*@Qr?i-)Z(Esw@h(F$2 zq&^V~P^;-ausAHrp!3a{7VGQDoGVQCwSDnLz1tg^*m9ZR2y9VXfV**}Bq!$8($eC^ z$HxS?FH=)BT3YdB!{CS0Q*u_HGC?gbjA}{}hw~Sh*%87uUv#0+M=3^k>lt!7UW{U^s4#m?<$`QEJGq~wP zz)+~MgNP=|%5yO!N?!>NylmV ztEZbT!yt2|6{c@uyJX{9wYcVk~ZS6EJWSHWSG9UJTcK!LUM^6H~ zX4c`6Nd>w8-t`I2N}xI0l;GXaPO)AJ$U##?J+~?7OsN?t!oo|#V{>Bb>dIqdLkm39 z(@0i_FS18YPflLUy|OgX_(;rPAhG`BONNfw$?gZrSTu=s{4eGv6uPOc98y++rKP2A z6q6+ag?Kge_sk9C%p?tUmQkqfALZWS5b}S_&YQm13^ZVdz3`MK!K#oFB_360vi(pd z(lWZ#ha$dJ zs@dYGPk>I(&H_m!l%roRj#%DrwjOP`p5f&E&xd15XyIF0@w&<}^nOM}{J{xe*N}7? z7yUgM+$Jd!(h5US;+g6C_1SWi(R@uv){+Sa&%gZz?chLpW6;#53xpYP4EJdQY;$r9l(VB~Ru`X!58ydp`~j3<0{y z3row9ub*4|yaDQYvBlHW#N_JQQjMa}@euu=0)s7D2+*}Lk#%zNcJe{8dr;X_K8J~5 z8~&zRo2l*DkntsN#NGy(m;K4lrxGE(AkZijzx(6*xK3I+1`E)f&cs&1(2R% z;a;NL763wQ@*exKpOOj zspTz22O1?v)T@k33{2ja_F)e{efl$pB06`A7#roNZplazI2fDe-Me=ndWn1jccv7m zX>RCaR@jS7=2`#1K#Pr6uA0B^7yWc478d|i>crVzI043A+w`totn&wx_)K;S7QH=c z4(7|8`xB;QTCaM8G8+(m$=nSM6%`>79r{=3GJ39u1U%(0P)%YSwX%W4{Ddp8@kNl`Y0?ePijfY$Rro0$i^rB4~1s(7_s|j^^ z06s7ACDoNuQAyaZIyey7i@el)W zzgwgmX6Xk8r1Rch>)C8$9~aqLps7PnH)E7-`~LmCJ6Q(z?~x|p!EB!W2>{KRDEh#* zOuf00b|Flx{2tY(QMJI&vA++!P%?1kF&0&IPXZwlG+Ws_L5Y})`0!^LJiU&TdMY&FNoXQF-zdtUd}+J=BN~--4`2I9O*HzeZPlD)b08LM z0*igBR8*qX6hYr%gT)?oXs1Q04__~7zQ%s0#M%}GRM9|x>MkPfn&`%qj|Mo<>Re+; zUgs8-cxNymWQRw_`hks%jMr<-7Hhqm5=ym1#l%CDMDu?O*IhU(11sqNPGBSL_uyHG z#XDL~)3J$=*nHXT@jA5)8&a)0%b99-8%0S)X)7luCnJCmFR!}1};+C=t5|qt-LUIWb z0IIeV5D=w|J{nLRhZ2df0j;IIS?8hR^+#Hzr#}FeWx!#qn~tNU$h*-ia+5 z*4W2Z15DTYCDW|484DRe_alDS8gnc|{8!-LuJoSYdH=T;0Y3zwskvg0-6fqaP^h+) zLE7YEHuJ7cLXu;kO55ej`J&$lImns$cLCp z8L<)aq%k#=L~r2`=J(JeW?(Q;_+&i3P|sB}1}jm4%-}omns3rI#j=BJ3Wgrxb@_}k zoYYF_62=5PxH`%&l|&5f+4oNSy;g&sf%STC*SELdBT;^(Vbvpzod~R;oJzE=?IM6Trz!MH>5LHW3!a45lUk&Bcecr^Ky6NfcA|ZCg&dH zrD5VTL$9y2PvKw`rOH7;sH*Ab3nv8!sq6wgc)jifLs3avy}PGpv6`uv9PM`YOEkw$ z?Fua;nzh|s#$&YJB$*xoj_hzUCAzML7`MG_>^Vvn+Gu()aHWfDOjyZ4{-A?ajrl@@ zWumUPN1gSQEDipVKnVo}1)>H7-l0ZWP7Z zmyD@TJ&L{-DnLTVG`-NQ(=hb(1O){(=ASw6A|oSt8j&+l|wqcP+^2ih2L(J40FHQ7B8B&k7tfqxs+x9y&Si*m0D{$(+e$B&qCHQe2#x zSeIBAS(jk6*|r)Q89OY-8uDaJTZ4nql z@Uw=%dPy+Wp%B6`JclV5ziX-M=Q%I-KfPoKP@61cJdb&gXwJ;4jHdOlT`71tTw`lBg%oQy5rlcZHNgXRhF z`Tn`Ng$@}Sg6z8qZ1ixT#jssN6S4}Viws~Zku|Pzr0n}i)G1P~G-4^K~@qoKumgMhmqWUuz5fPY`o zm@@z-MwK8l>J{0M!%KJ97+?lWtIm47P-;Wq_Bxz^&11D7x}u_D_8WC;tApXt|6=jw zKo4(jkgHn>u%fY!Z5rH05rO#oytKnw%U@$}a( zJGgBCL&#K@5NP`&C`<$y;7J7q+v@A+H}nPmfV=Fsr4URv1JZU0v^M;eH$KR-=8LDY@j> z%<;bd@&1Kzopqc_-asnoM~krrjQL>SATAyN-GTB08s608xrfssK@QBc4h@ZtD&*rP z^n7LmepCiK_9ga-J^$Jo6`*MT#uZ??1InE4dAh|94BmoPx=f5rAd%O!+=>5}!mRdH zBz(LL3^4%%C`nrQEEi|cyJo%c7N zS65?gr)9NVjRvy+vlf6G+b#_ldQ4c@2_r9wYG!2{wp@$B2XAzoFU4opF5$US^smb) zO5Vc`_k70OLf;l-2aH`f0euf(+vzXlyj5cbI2C{`b8xIJFALbykFa$%`#6KASk#m! z1o;_&)ee8_9N`y~lv9*NPqO3#;2sd?SOPa`t`P=Et(mXi37UPqs}gcF8gX>svP1~P z3q}01KmbrXH8G1mgVT&rR#CoUXk?1oImtkr?sT0S1XYnf7syMrk|P{y1tEykk=e01 zbl-@Pz_pdH09ym;GpT(){8vd{;0@9Nm96aTY=0mO{zhN>tmWp+TVE;3o2mdt2rxkb zj?A|$@ieB(MIlWWw&nienPze;{FRyPf1nPg?zTZiWNW#5u~eI zS6L|~(ybwO=Z+!PvHoZ%`wqIQl6%_7@mk7TIRHKfIOaMcJ$JsmUks6R%T5JYMy*WS zKnwr(QZUeDt_4(;+5s~6!ms2=r#Js>l_tQN0Im-b9jP@mBK~z2uWt)T;aJmO=vVQ<@LjVhUZ)g4bK=m^9 z#fuk!BSj{&&0NDoM zyK%}o9@KG;p#64PK63mFUjKxp*pb|rQDI3!fTUZTRXkzk;7Gj*rt7?y6;wif(JKf5ByBlqe%JqVY!DcGIL*6MC6yv}gYM z_3N(g?g#+IId{wJu^j_Yu$^C8dR8jKDE>|GI*^6h#RCOAfJ9!yuW70u0HCG-KNdKr zKe=Wg?@s{bRx^e(>-`69$X}uwe-;h{+%Kx7gWFHCBLz@jdhq1|`$7g&+D~$dQX_@c(S{2a5$t&!*ShHW_#}R4gTa0M{TG>-u2mi) zE%H^FXd=&VbQ#do(?`X`FkZaKLicrUZVrt`yThLr;T*@l0<7-z^~Q#G9trWDZJFxW zEOo5C2@_oUDbU8$9(w*fT~y-hzx6`A0e^Pw*{`lNF{;oINZYu9mlqF>WSFY*z*rHW zlqJewc?Yy#rLn>~WPfi{u)o(cVHrPPQ7@|_-9>+29H?r3`*r|;`VntjK!;K5Czv03 zH{vXTq!wV4YHPn$u)Wj#o+aXjEj>V)13>9LUID-y^IqJD^#NEdz###mCjgQMn5jT+ z-{?AG2_!CN2yA|LG{Ek9V7sp@B~=LvSN(qkgbGzfN1(GWs4v39feYnBLJdBP2qK5i z^bNMv9^o+rtDR49D>KRT`eGQ7NOBQTs%%rID{vH-2=_u)}J%2LrKFJCp63ylwXVKiAbf zU%|Opp$i8CRnepUeR>9lgJI0!=p*}NySGlk8ajS{bva9_VEEc_Lq z{MVamF|f0-$Y`!+h-Js}>ej{58hl;j-y_kj+Au?n@&V8x!Co3Ajj zd=sr+d{c*u2*kyI;-dix^pIBPkY~N9J;S!gpNPu1N`S~1PHrH$PwwodT4h5|4S@eRp%?qj~1Su`_F>wr6Sf9&QpQ+O+6b<4X4^>+YVGn?x)NiPOadu;l7=V zL{-WU9_BgU&EA>SSw)wwq_;c24d1(UYZ45WuG^c$4NibVB}B&nGW6D#u7N0Ue{Al) z(F{LBRa+3|Fk<+*!vNg~fcb5NUNI=v6}|d-AGf8XX?Wzl0B{}irvR_tF(8F|q87-C zfg?Xt=k}8v58O1w^@+gQu8V-Z4gkanx4)|#XM_QJ_#lKd;>w8dxEC0HI3lG=-NQKX zK|Qu@;>y|%v8|rw_h2h|6+A62`N1d0cfW@}A&w+4dw7E(d@5*d9i5(Uy6pZw+So~Mm2Jzt7om_SFUq#hY>gGA=H-rtVUGW zLADSf1LeBj-*;`WeSbq|0*NfgJX z#lQl4|SiC5KEc$o>-U)^mCr-88Koj$_@|ju(aAv zxRPvlOGwDU$*CKSeiIRK;ljo%&mRjvDsiSj^MIg`7FYNf@J<0znR4F^HE&jdUh)1bIyAulNO7g7O8@6n3!sZxej*JKZ{GBy zLZ<>jUbqvAl$Q#*8;NGd`Y-OadfCd6;myH{%~)GrRaGo?`l_%c{AR=bLJkWH&b)wR zk%;0<+Wa6v0dl}A(*cBjii(OoJv~74!X5PO3!I*wo`4qsQk@z|gveFLwai17KhTD| z7k7bj?E>I;?pA8-|GWr2a1}F73wHg5MK9JjYYYC(RM=Jqf`}0N zw|R~6!sbc=+q*~P%{Xqw4wueAaCuPJaa${Uza1X#e!pZQQ8g6t zRU5cb9z6m)36PiZqnmzv$A5*JJ2N>sIWuz$NRff8L!^@FyI0%B+S(cbDl9H8ma~rN zy^~8QEiF|T7bz(L3g9bCazN3wH*`7D@&(v4&er5FzgL%q_^15GFlike z)P?zp;`qwie508F9t3Q={1t}2!F_t~OL`GL3r16+=M6jkyozsu22U_;e|br{9vph? zjB0Xo(Eu2Bi`^wa$HGSrn#3cW7a#D8i-|xwo1M-37oTnckC#-t1cdBBnzZ|XSK+xK z=R1w1+FR3r6D^eUoUOC)1j37->1Dl(1VR62l=hTAB92qOAvkIU@PYuRdgGP9PwBr( z__nN93jy4PUgFE+%2}1!_I72AZu(w-0}pIlaR=W=0QnHrh_f|&)K*?7{+-$CxAeKY zweKnc$jr^*2@5;>MALJ)G|-@`3ExHB7Cc|ie=fKIh}^84>RD%&VpbXw#03Qy0AB0cn}Qn)rKQHhUIhkxPEED^kueV(Xt^uxE50DVS! z|1>xE1>RFKrmY>#uPP}iQC__ZzhW3o%bfc9$&7E{mZ+$xvhwWA%nU#$)I!0#Iy=?A z!2ymr(46#^jaC{ps-dB&p{0d+s|7HTy1D^wqT}k)-M$eZ3{}(tI+5s@c<(Ouirw?a zbN>Wt84lzBjxx`zzx>Eiv&8V*&e73x{{ZK4%QZ|24vL|qwZeg*)>%zE0|+E1S3G%9qf zs_uzi0l{d+AJzaO8Gr{z#{rS$LVPv=9wv+M`aA~jeg)d2fIuCf=`A&7L&-!gm4I(R z3ugMqqNuCc#Qe&CpMAZgC;KrK+E&5qg* zE)S=UIpNwIH|h;o44xXy1CjOGRQ@9XD`912Rri?vYQ`n;ifwV>R&3NQ2$}PkeE$4- zbQjvu(W%~bqyX(P168P;8;ERBgg!q70b!u;%=9ijMc`q z$>zjpiI9U05nh!;r|scdCt!sw#38>;tX`i&OCSMQbJ&BITjMv)f_VRFFHu5W&4>N* zCn6|82dISy@sp0pAufUa4A*4?zF=^aj^~R6ulAk!sJOP%(Q{x`@|p}-{nwk$K)wItbBJte;M>2{-{t=_D0SoUX39K)003?4^E_;q zgAU6!L8P_)7)TiTM9fS1WM_JrIO{uddaTwR9i!{AHP5%T$d%*&Wk^zQs6vYcEpE{* zkgJLRVHTV}3n0%`-m<2pThE@JJhce3}4Jynp?$@#3Y0LpTd z!FTDQHmdZOKu6-!`}PpYQ`hRjS(vK$M^-;JKp01f$*Ei!Cs*C z`KBnJYfI2u_&5dwIG0Y$%*;ele5DsZ^f!j7Pf6~!&37e3Qt~4Av$Zn0em?l0A^a0CB%vzL}DqPZq6bL?Yxm zil{>s%)^k2FG9p`wpy;)^R0R4zPtoF1|>(++kTwxhvDh_xMy-ZE!^9^{KRFa6 zu(__ZF0^_jMH8ta(!D$=cDF+#gGsG$_6T1Hf*+NGO%pdOfnV9QT#o7$Bim(?)-|+b zIThSiY4C(7TWo?}!2(!+s%KSmsaWUi*{9MMaa&T?66pim0tBnoQBIAiCdNtZe61Z` zVzNCoDft!R!?Z3uwn|)Ik8IYps)zFLCy-;4lajd@B8;?XR9w5+@-5Ah=EHYCkNh9) z&oxCNa@%$&8t+0v4Ws+A$sS;sjj^F1)k2(ETBIA5Y1heSXe@Nv^0%TL{sGtxB;uk1xbUC90|v4 z{CBtKnPJKyHN`*6hx6?O)!Pzs+WjS2cE1WWgt=43J2Bv^>{qjtLw?jcT`Sb+A=d(c z>RUV+zk<31heut~KRxUuQ+yVdmzpa*SrJxY&V5x~ZDy#ejBtJ46St|Wb4#;-etN$i zh^itFRe#A_cxi+Q@Psyk^U{q3ZVL-*d%UV5p&@msoJ-X7lkm@_L*<=AV?O|HgQ|f%DGx z0GW5@U}j+Pyue8^eMC*d0%Zne6Fg%wOw~uG4Kx^hOO~HI{#=Lyvt8Y!J-(ZioWiZt zL@qV+x@e?#3&XUyqDtFk)&gI36T6$l&YneD-%qVTjNlMoDjymySJIS~sZb`{_ z;@jIv*Vy?ckLTJ7kuRQXuZ=mKe#1a!f_|9acS##JLqE2)^j;W}_X4T9*+JNq5-VMn z8bc5I%9eZNbNzO3Yb9>|#p(e#BDZT+&L3C4J{gd4h-kj8=1mUb^o@pc2yt z)Q&;mJfE|mwNXK7$ zeu3_5?AI(LYN3K1UL?2Av?I2M1=D=(Hbv{<8_KUjPkrjtWs$lhwHw3ZYNvs&_F_NZU1!_4OMI|>J#CM()3Q%)#bV}TAm9EP zt>c~#QX4eY3+A2OU05hxsSG!+&@&Q4zjc>!oT}X<@+u0b{sD4=ADz}b@0oR(j~T_H zJUVYu{H`!yU`=NFN!PmqXDo`xtXuYoW(`*$?U>p(3IOlmN0f5r8H%b(=cuXkh-jYU zB8u@+bjg8s9uWz8eM*XQ#uD3EnXr3#E2DOkN@E(57f)l|zn6L>}t>#a!RiXlFos44IoaGd6f?xCrSmVQ^5wwPI&- z_d>_DrKv$wY-K;g{k=o`Mg`+*DPu;_Ae`l%Mm-F(!9?A8@Va%EzpRX_sXu&;l^)l= z)X5c^79L24ljGZ#eC%7Qbcl&sO|g5MtlAV_89;TY;{w{tQjixKA4*nor!Z8CJ~i92gzm3=Z(IUgnTp&1GJOotJB`yVVlQ#;@Q; z!9S2*oJ4SS%SL_U_1iy6oaVzKAXdCrjnnKndTA%8)rC4~#IUM%T`QfQ6^HU)rgc?v zXdHc~cvyOKnjs)OS?qAOF}nP3(v(MSlMN za&At>eN$W75_@n^-OHE7u#9ePbU)qNB(Q-bY~k^wDAwAFR%0 z#*-50o|Q|2?YH)(sNhdNPAW9F`At;fpa(rpAX>8-`51c(y#`y&=>A^OR<|}t0L|^p z4QeFUXXlc37M>P0?-VRAMLG~zd_|2IxZ>Opr0;gGbCaOngbx>xV)qZ(@|(2DPL2`< znDF)Wb#eCMY&*8p4_2QZ2P~9)zFE^gAk#LO%$B<01_ z)}8q>&_hTjh&u`-J z>Lc%N!%Jxjg?gqUnj>#o4^g{~s{XI6MU_h_@}c_gL<(T2vAPg={P#i(0#gTC!N}v1 zZ%8S=Tce`SdU$BTLX~7xC+*IWC!gaOZJi1*J#G%(lU|Tu3dVi;j^KJZq`9- z%T^JBnx?i_jSznor$@OQjTqd_5bv2f9eImI+ZiGom9JFv-$B?-M#PflNL;AgrL@hH zwZ!t%nc3>b$5;JBK@fharm8@{la)q~$_g7c+}BBioTrP;UI=6v^$52ApsxG_2c@m& z6SozD&+#+{CnHY&j7ja@tepE^h%dFS%4_>EFBbCEF(yLQ@8g~Gq|H~6r_mt%#7fF3 zx}(=}^og)CiR??9n^gFNY%wb%3O$-*mRK*V-;3HjN~JzZ$Cmlg0==R=5x0&^tV@Bg zcGkkR>`EMMyx)pCZKHxNE+$b*S1sQtOoiO43|nMRwCyg!Zs7|WE932qx#z0a)0u|l z8a!X6bc9VldjTadCT!azV$#EiUxX?)#XyqBN^ z_j;~N%eS_1YeK4_!5aI{%+l?fU1%I%@g;61&yeqZI-B`>%tj2KADjC8sN_RUS3Mt* zg6Ul!HEbv;m@gyC7oV@|3|%M>tz>j|-oA#lJKV%w``~ES&DJS?%~A zT>l8wA33^iTt$vbdQ2x)`qfD?;t0e9{a6x-s-eR)E}5c^vu?7 zsT`%c(fl+}!>T%WX=ufuxgIn78)v{={`8I6h&|TO#@X9-uhOk)|FYvT!|0mCR?tWo zwX?GIQZx$dI{yhLe|LOC;E{+X?G4ye7JD30g_X8-{=rL{y;d$&AxBx0D)F3V*u21K z$8Y@E<#$gvhg`ENVqdhdw7@zHWjq#6*QlDsW7&)q9ba5QU2QctACXeQ&uRbJg#Y9PKQMI>*K@Z>kUk9u5pZS?axgUf?8@2 z_+(In8Cd!umHS%WJrRYILTCfVypJo~rZk+ZGTSaml7~+c6;mIxPa&9^G%U|#4+&W@ zX6#3&-;!G|B15Cqc+F>2Poqxo0+BG?cY8H^y%ZnRE~{7oY+pAss$kQ7z`<`Y`w{H6 z<}D?vyp}%0yR^E-JE@b@jjV?0RGm;5>baEZ>B%${+hDSI_w_0^D97hAquM;)C8o{@ z4+w4{Dy`mMUK;-+lg0LPHXb?ih>>x73pe-l+x){u6~#~Gd+M%F78_4gMjkmD!&yM? z`eX8n$3}dK?I6Na=m(W@l0uj-GN5$y&tN_`jX3;Lwp6X!VZ@7CTE(oJKv96dTb{lb zAl7WRVxtxF^x=ALeX#UVvX!&zRt%w3?kb?j4fZ!kJRe64D9N&FqRo7Bex${h3J7tQ zI0C=TEs|Fz3aQRAd4DH+b>F%ZjclG1r#21BM>J{6WwI9ax0j@g<~ zl*|F5_|gb^TWrOOS<*HMH@0E_=Dr$^R9$nbau}HL8?0VkuYwqEYI2u%vQ4rMSthr< zH!8Qtk#ZHM9AtkeS~c7|5pJ~Kg@VGM=7eJdd+TVY1H^{EWOy9Zs@Y0Zv_ZvF4o&hk zHleY!P7zIG3=DTM_Z0o{_ZA~lD2GRf8&UKWx;7HjK|bYWyA5mS>^_-WvP`^%QE0-H zOENzK(AoYXL&jIMg%v-eX_k98*0=`5Nlyzy!cD|H3^zEEU0izkGA%sj%?4r|K_4Qbswgv)6 zvnLK9`wK)@O^wePa|s74HVvi$W+GC`3d-P3?WCFms68YW3c-5J>H@YiLT)tWMZwi@ zD&j)p0V7(iCi(D$@={M@tB;{n<}pJ4Ru`oII$g?tdQ>AWRh6vGUo)oTv^na(p-7bdFtgR@{ z^egTVS=;<(w$9IPhpVAuNiE#aZ+$j*y_^aATV_h|houo;igOQ0N3+J|zk94@)9R^U zFl)qKO~NY}#aoTO-Ansi##PXVQFIC$UnZ-KY>K*n4DL7|nNM9=9UZ$|zZCYgtUye3 zT#}ArRuOa`&=$S9yWf2UFt*&vE zb}L91GA`tp5T}~zl|1U1X#BX*U+ziz;U(Mu_;h#d*wpl99Q3I!w|>WDqo~=P47=GK z2NTrC{y>P3(D>1ooIS%ci}@F)-;mXc-kd+}0Oul$Jbuf^JjTITa?lyMs(IdZP6DXP zoIRUcEdik%zFmh^0pWB;c9Wc{uA4hhqPn_GyQde|q--TZ zKGjYkq;jeWtXC41ZKt38YWzrAUt%LyP^_W@Z0ulIfRj>W7U>4E{hoLJwShsC99NRKsUoTm zVvK+HZ(R?U1sCf|SF}SD(+yLRZ29CQWHR@RU#pcae&yW8b;K7NFB7O3y-4?|7jh#V zG5#%u)h%?Fc`;cpCEjk7>+m*O`?}v^d#P!8i`Vf|%0*YhKmPDG?_zvp3hxoSrWa>6 z(lt6N;>%vq1lF~!w_E2iA~!Oa%KYLZB*B(QuxhRg9WhoE5H9R79u6uP4_V$5FpI-q zGnl$pU?K$dkrhk%78Aq7;@f%WWVUWi5=w;<#oPDO4R|^a`wT;DsV4jpCv&lCLV8llQ&m4M ziETzim3E5@Q|5UUbuktfp&PBpKjwGFQ^k`5!KaSVXGP^e3WG}lX@DZ?%kl6hWy*|^ zpzK0$`wx+BJueP|qG5x-NkgWy=`-?KOjOJagmmESYcDFC9f&gAzKnPZf9jBoT7P@* z9$E`!AqRo7s|~-{%ztT;m^4hMYZoo+Yy3t^QU20t@8n^(x4TW!HG$D&yCy^E{Wjw#sj+UQ34skSo9 z07p6W*WlpR=j;5SifX^pmFrSJkit}FYkJwMhbAhz(vO+{!ZAjf5hsoV~FMoocgbd^X0v9K!<)Ur5+A`#H8 z53}OyrSo9vZrmO+{dc+b%8B&gzMhp|8>qX^%U{#3UZsOUL1J~&8mxluUO~Oj7-C-% ztQ1N(i)4>J^EqHPY7)NSXe2dA$HLm6*Xv-;$Y0-up%ropND+v#Lm%WllRJefzIi^5 zySW6Q7h!I4XdIt$F4-v}cPYavrt#rn)-E24e6o%x;9%VTrDGZr?8x~L7P{cN82oH? zZg<~CkcV5;D7tR9u~_86{D4k>*g=o~PUsH1y`kahA{k~?axc_Lf|J-dr?-ROBy<*SyxSH6?Ui0M( zz}tKc06X2m6zufrV*Lqor$qOFVa)5ixqZtwfV5wce@0bnG4e*auCyVII5#d}c65=R z@rby8$U@_0zQlR_P0pU>6n)BR_eK@!l=VHr#VjCvSKU-seN3y7duKil0v=YKx>Gc7 zbudE`Th_3`+KjY3cMl5k3$GNB@*>U4s_5@rbm1o)NhPyy+1_rj2?~1Fs1t}+FgTn8 zyN6B;XpX0{0~2cSs+|X|G|E_Q{{sJ5AoE4N-c1TVrLrPPuiRY|)QB`pCq#q2mB9rlBN`>8pcOk?B57!2V5}WQ!@v(q6pPvXzrINdL zcGb)>j;wZD7WxxSCf=v=ktyY8n?(RLexf3%RMes5wmbAlj=h?;V94FE5)Y17Cd@u+X+0yhtPt%@=*)}&K7KoD>KOqsOYujv zy}k@3&_%vh7g(O7;hC9j1TsWp6LC_-);U#=1+GVY(eps!E=;<^=Q*-#<_Sn?sV-hB zWu!>y*;^I%>~WVRdOm6p!DIUPd(fw=C+Nf8BQRf|_S>Ps-*z!K#XFXhz#TS_#e2Ng z-T(dKMbK3~9928Mi8u1TJT?v4=-Rc%03(4!$D_vcCsy6IGix-tDjtD+%*+Qn za|>B~6&@p0aoE=vAB1+RwP1!&hVrX*ss8n)v-RzDRrH%3y7~07nt*?nENy1te~S&v&fS_{~6HH{&RR#=>`24@}N4Z_S2Fn zr8tg`YA zP;ut5_6l04UDQbFAoKaWW$Kacplsr(CLaS+i|3aJgQc3+$r@f%b4%zbWzh<6BD0wU z#au{i!Fs!HUY8;I`S;iY5Kp4XqMtE~)#(J$%RkC2`1O_Heabcl>7|c;XM_9JqwKY4 zr!BFHs-hXkWagZ9VI>ATXdNL!A3k!}5#m0ON%%#LmBHh^gh*Xt$IwuCd=F3Xo4qet zGMS}})xVo-OW&2yEI--b5vk>C42W;>(m!W4_(lrmkL=zxVsMB=$zbI;QvorAf6rU! z4t^wkmvL^Pwxuk@ZIPP4L3h0OeSx1G2tED27tn9mCK@H{=C&Hk>Pd6K#n<>y8cJZ{ zP`%2#N^Yf=`Jwk5{SoBx2@s!>h?LQgrjO-md8m?VP=E`0OPx|!Ry20wmLT~g5_`P)Njk0iCv1d6?bnB{s;5bMEna3p zgrWCRsnf7F^(ZEW0`wa?>U0P#`fPP>$C#EVNgf#OI{jHjq>-{g^HA_EtC}Uv5ow3R zkHqe+-Wns}|&uv#FOpI=}Dm@8}b2LAVJ@AuX2}`<|!GfAui^tnK_nDwyhS0kxdJqG; z3}Hc7*eO0>eb`BP;G$&kKjTo&WJXPj1)3Z=i>S6pfK1NcJwt{5*M}+@%>-IG?Wpp2 zGf_5t1)qQR2k!pA2OpjJl=j?x#^aBW_pgG6eZKI7(u--e3aixBWfWvI|3Z@gXUfnS zZ^!F%MEJVOL)i;z$FYGGM*C+^wf=FIXB1={fiz4BUaZBe*_w4=uwvd*NKuZ~yh5M_7mD?^)KbPXdawOxsqng9ibw#f|{v{mRpf=?=n`kgxc^$t z4&(;9s!LYkr1hMJ>*DJg#Jv*5zdrbZdJHpUKqQ%VYJ!{Q@%5n74niYsF0asXd`M+y zy)v*grc@ZTH^y_{HP%E;E7jD7POrshWw8?0PMoZeZIE;Qd+cJ9_XZgLd^0tY@g>y) z)(*``w-nl(oaYMU6_HOOP^iaeFv#NH6(s#9bUYkRrkMbx^q*flUd14hZVw2b3BnH; zS0Qk7H-@HKV5;$VzfEyvnTNGXJJ4-&F8K@y!lz~BCTmt5u)kxne;x$(uso;52dPg& zLHLDcE`;=@yKh;CiJ9^KnD{z1aKdc}l>QpBRXfg}^^tvX_UzdXRa<>VH}{W|x46pF zT(7PXHW!~+Ez0o~=}DJm&9+m-Kq8-T6P;7~{nD7JxxPUh>4hDL6w)$jWifTKHj)B` z=|T-P(74Uib-iCGT)~!Yhj0DW277HpNn~d$Cy(u$rYUJSPw)#%6Ag5H(U%8@f@foo z8hi}?dQeHX@z`VjiqM0!iAHMks``C{wD9tmxn&1S@lZrZL!nVIuZggJ6z{P{CBh$8 zwy*2lyz)lsh)+tG-HUNqLx|ZUX!%7LXsji{-)^u+3RZRe!Mqt;L0X!x#D%OO$rEdC z@%jim^`*nmt%AV7EhS4sq*s1!Tir*}+KViLxMz{&+7`c(1Z?AQn;grYn*7cb5Wzf; zA;ON2d|6w%(?0S5#SOXG4l`W!(I)Qb+O^aTrTjM1Xf+N6^`fq&Am3ahS8cWOg`Z?V z0<%O#C8SdO`{4RKeDlf)@%n&J~xcXvoJ6SdbUdEb?P<3M;;|#Qk%yfW*OhG zmqweD2I9JzMWs|ajz@q}fwf z9#fSS)%-%!B+A~9x8n2DEUp+X2VuqCPAV-$&1`CR ze&C-^_XlPCQ}@V7yQb{yCz%5@LX@8J(#AfM`=AGSss-GIkdhyr<1z1cnJ2Q(R z6tB4_+t=(ZpG=bHZ()#q(p#P(Kg49UjGW-{@*jsL(Rq39BQlLA(-YU#MwOPvJd$5I zUyoJE`mU|lSaS*7-v2@GbZ^PyL|!(-Zc>txJ4uq}%Fc2#3%1bh6jY1u?+ZlnebjTS z*?r>$q#%YEZqcBY}1vsv2HVOD+hXst%R0cd!x(*x+$ZDFjAMRPPE!>Nb3R zZ0qe#ByZv~qhjb%c)QfFKqeE{Is{YJJD zkuNKO?8s$VH(;O~Fj4}=#1dna%4;+c;Y5!#Bu>I1FEV+gizAU@0TT%bs zFHm48Arw{W&stJ^JM$zIs_*@Zb_XpyIoDp@@FoSAP5bl9TlFqCsdjhZqXV6mlNnRy zI?LYaHG2bCEWklfBl0ns9U+93Itn$~+{I!nPLt9L6ru2&Q}Pencd6{K$>&2si>zwF zQwR5hu{YyUe5ILwK3bv7inc`pju^CaGy2xe;O9^Cu-{(>5V=78k1cN(fYZ}G2l^qr z26{AL(iV4W%O+5){@2yFk-EiIdhZ5X*o3BD{hl62Bjt5aK zJzSS<9=mTDsgn8?9w`9zr5X=57@3%?_&WDA+rWk^B(kkT4+SZcD+t=(3-=!<0{CBQ zYa<717MzER_o7cJH+Cd?sS>G41fCqfJYM0d>9LKSEU`2-<|eJE%GNWb7%?E$mLPG) zOeU7kH?lhZ)yj6lzmTqyj1JP!0K~0@?)DFOVgqI)D21s`nQlN(2t9-%N_ASYa2%MUSHpALo;|?%iHWVQ zm#UVWh+cK5tjtUUL=N-=0Lk5vYscjkmb=ql1W1vovno){*dPw&Ua^-m*dr_TwXVny zvXp-HoK{9HuUYiTdDtR{`zEsu39#)fWQJs;UnnJ(K>KNP$(7l&$xVOm9yxhCDO zKqmfs!YaGF3G;Ii{nWLr$SbX?#we&4P~Mqf*H3mORoQI-JDTt3SQ)R*K_vQAA-YMJkdoUPWp9Uu=ML3)%`}i zVu_=01W;C$gyI*Uh2h5z@c5@$N!2i__oTA#5m}^VR2xqeY{AK#9;KTB_ z!u8r359cg-cXG|$%AupHpW9E2AG4JG9;$Tl*_8*A7k~ZbwXF7^zkNO<^1@v>*Eh@L)fw7j?42JQzd$;tSgZ{_$xw`E%T0+H1HDS_v#k0<* z{4}+2uA;ngjFIl?hjlQ_!N(|ke1^TDF)lXd&AbuVSVIa_|MW&kMErg#ssz#WQ%m7S zrLGP9c~`lAsg-7p?*xx#Br4z#@dR$5Tq&$_C89lxg2c3tB96yWY@cwUHPA%w8y6CDmyX0 zEXpoXTFUDwXElsQvZl(~wsq8d+w?KxB}4mO`(mMLhhRRhwAv0?Vahzqf;;?dzAiMnbz;>RXy8s8Ac49f~U4 zC3UgWip&!{0nhQLS+1VT!ETH6gQphDxlyiz5LV`ut>rP9yww0Bk5k@>Mq85hT&rUY z0#r*{3gwctp1Ts*TCt4jb7Sg}y-L~KD-4x@?uGjAgCGd5Z#YSpXkN2} zLe=ax)Ch`r&-8%S96AKnGER)lYM zWyHlW`W^DZ)???FH+ol2mOdxT7PJZ}zl9|G%Q0>T*(AA!YlVdmTV!1DjqEl_@*?k( z+P&JFeS{S+C*2k5)Qc`0!8M6@3=_i>+s5MOWfI7|9aRm|cu?6RbpBkZslUn5#`E=# z&#aQ~CNkQ(Eu-Vgw&Ro-J0U9ZR;kaAx^)lUF&;8je=~J=R`l1{_nKZz&F}22#bfW4S8Xi6AT1p=bnr=d0cJ{$>OY5p zpbp#V-NY^|N*@LuvMYc0v(a%B=HTMIuDV(H{oT2!jpAjSx!vtA_@fS5$j9f;H3T{P zg5c7XA<)3fJZqbr;z4!uNVAg~wPW-KoS%1V4Lo2?v|c=TIT}x_zr}jG(*v2nTU8ms zcT>cW{uV+Wo=;*-JSVD6{Z ziz1r0@9dFA^d>wxwe`8_U*_c1wf{(~aL-A=gJCD>c`oNQKvR>DsiD9r))*YLcs;vi zKK^$2UQssz8VZ*lAHx#)P|ns9ncE_#Xrua2f+oDWnScLN#JCKvD`~JuNhwe0YJ_a% z`1WDCNO$MrqNrFMI19qMHy-M$zg|A%7`zy*Deog>EXSRm!f8Fwuxf z%t)B-xVAXuKh_fuXM{fQ8k!pAY*!{6cPwrE=)T%qz=@cAAGM$(y>-^oG1?ZR23V(L*K3P znB^&1mI9ARwxsgySoRln>{>vP( zxv*X$*bQYpb2+f1>a@dS*MxDod}gp`EC_Cp>LFT&{UF}Jv4)4?1coo7qpTKJ6*D=h zTX{=1-$cV{^$r;9<3q}rN9n^0A$hG!aspG?b^tk;5426Jbnfd2$D>yo+il@2W1mx# zd26dqAN5_YfE6^}>v)S@+`okL(Y@9MUH-NoShzbPwCX=6 zqFT!D2>A0RY`MDfc69W#l zRxff*fjViImM(0%Vjg%xbSZ7wmAXGY6^5ZCqi zkYtxsPKe(8aS&%v}rLz?8g^Fg0lR0%*Xo{B_h8GZqg{Y{Et+r45us>k$r{}|a-sil}`906` zJMZs2Z&3lp`oiXMnc>8wykY9gVm~*gC;?OR)fxLE-33FpelCYM#A27+s_imDv!Vkx zamkkb+K&J;npn;TCjn-q`|4%J!)AbldF^bFvgFCUw;Vet)?>P~FKaR^`@QgOoGE*U zFY}+9dS%KJ@XayNF5i$|W)j92S^D7c_U`y#Kkx>o0CbFyrKY)G_)~wl*5z>6(${N| zF`Q;-LZMhAE_Tn(jg6nS|NNU4WWcvwRi-!aVgg^(_?>!Z)lBZ|{PG}BOEt%Z0ovIc z_%I2nb2K3_IV7w1m3Sy_Cm2TQs978)yE8jsFp<)*H$oM(DU>_#eX6{@J=upm-l#$r z>n>$Xk56m(gDo&3-3-}0@BoO+u|=Tt$O$_5$5MLMW!g9w{i3Mr7+e- zhQA;90dO{yX@dRzHDg7J08LD)R%J7;hdvATFdo@NKAbs4RP_3!+9*!k;RjLg$b$+p zgvD?;zl}wYik)bUiy|g^b@iF1_UWY#2?I%?(Nt9*dAXjGlkFG7Vn|?B)Eq#~vUu`x}HdXvGFiF4YLEDV|Y1Sq#Je03y zTOrK3YinqpuMrvrj~IuEYqnR~H*9t&x_5cst$35H&O}8qudC zOf(q6%V`?Szh;CLR<^XcQ8~(~B7hc1P$ItYk=yq6YTBnTAPy^0Pr?;4rn&Xi4h>#N zxjDZH6#%S$i}QJYFm08apQn5KOio1)q&wY~>$)Iom&P+9A{LY5sq&TUT%{^D#?zLK z+n8EWD)7gjHME~b0jqr-n{g5y%^v`24^NogNcgz zwroX5iQQBed;QmEG%J5co*Uha`+ZoO{RE)3vr1m{?sj+MgNM+Gf>f0jp^1Z;mDI#b zPB(oWX#qI|Iv|RA=OcMMN3`cOrigX3BcPh$Q?V&)S3`ONi1y2sqy7juh9-^dEUYM0 z2aosnJkjR)9l>;|K~BDz%rXsymZ&SotQavxi(9z7>_vGvvRS@4Dy(zlfh(XXt?xn3 z_!<-}^>uE(4G(M*iUPi`7SY+$?z%)sR+FdumDnv|PI%P<6Qb95%WIDg8WruAjEg&U z-XM@vTlAuASu&CCG%;(juEMn7nHH`#JR@A43oXjHf|0I8C+kbTxZ#SeRoZdqJq?AHzlXI-ptU;%yiT( z36V0jW%&sUSL?|}+c{heexbZI_i)cSc=bucFbLs8EduQMCU~Y9Ad3J~+`kWu%aH#?*P*^;~8zJ@0-eeQ_YrQ;6 z-|(NNW}EMuBMkL*P-n1W(qT4az&IT715?ur9f0kR)1tq~|A18>Bg#Ulj$u8csf)TWPNmx?;&o~6$PYPth=gBtiAd8_*a2+~emHaI)b< GWbPj%L%PfW literal 0 HcmV?d00001 diff --git a/devices/hololens/images/ResetRecovery1.png b/devices/hololens/images/ResetRecovery1.png new file mode 100644 index 0000000000000000000000000000000000000000..859d5c8778f2cbba1e0130ae5c9b041da2a4a94f GIT binary patch literal 153825 zcmd43by$?$*FWm>C=!an5Ym!EcQb(K&@nX9qJ*?GL#pI}#Lzh?(kU&ig!Ircq|%KH z4FjCp_xZj)UhjGTIpjaW$$s&(z! z&5mo=@PY{b23{c>$p{C&{pG5q@c3FOnr0ms+_08alf8DWJo*;S91j>1zEU)By>{(R z+po{RI-T+@u3fvzQG&|qc$scx;QNwVF0@dbXLvqU-}O9`*=>}R6w#2?Txa`x7<#Y# zHBp#Jc380Kjlb4oZp03PhJDIn=6o2Mj_0mpt|To*1uH8XD!W-R{r;H)t}{E5yN&zk zEwshTrlh2RIPm7bFU9L{#@~Z$*B)_nf&ThqtR;&g_+uDDgoXYwe614${!!Atu4NJ72!-sm`Qtl(kC9!pF<$1AT$4-6V9?MOsqCh zHvi0StqUf!mFBNuY@DtTrxN!hyDs-(nqpj9+QigU58A4A&93+Q??=8ihXr8U+oRRZ zGIj%Ayz$)hF;%0lBQ29yc5>V#C#TIcGsKJz7jF6uf?rOGUVIrF6BZX2k7N}V77pfT zVG&OeU>6rhd>a~K=VN0N5~?aFKxB;Q3{52B|9*>WZ7Ba`L@#$44^b@dokZT-@dNw2 zDcd8$olWpkxxUoJJL5?iaRM$xJsd{Ul9QBGAIfxk$HuCgnl8=`H)m(x&6>P38Ewfh zi4S`J{(Wm}>*o_MPtW6(6)TSw>H8U44-#WMg;BAM4@1C93e4nCW-=%%1WvAznYEzN1tGV7$@Tlf!tmT2`dgSud#QTQ4qAOfP65o4LP|=iqot*# ztD6v$ytXk_rpV9UAdpujE}qBA(7>^0C=5rY8^y)yr=^-D>1iaHYGi6o#^}x{UUHW? zK3nByKB!*)*NDG-%4=B!&F6H21>g&f*G{=)PScvP1#?&>6m|l##M{toCT%9-+R~Xg zqOSgR$a!6yg=|dJG3@F~RnNrrK<1q8w=f?mSk!+(zgUVPLqtYe&gX}YQda5iz);Db`mh_Vk2q9~A20`m zqCwW@z4O=v*fA1zln6VBZ`t6X-((H=W^kFTHvJ-0d)2YL%K4CT4Kg$|R96y-1{Hio z6vCh93BVw}CqMtfGo72;!qvyco1~Zx8ERnURr`x_u&>&hG+UcpOWIjzK*u~Lf z=RFpRbu#huv(y!K&^0$l<|R=`w(Ri18A0r^0V6~k@o+}hURQbZro9ye9UUDfnQEqV z##ZE#+0jK$0vLv3cF$fyT)gQ9DMV6r@VGB4V^g`1q(oY++1c4hCWTm~C9@ii*=;b& z>+gSE)w3-{7-7zYkgrf@a3BpU$yox}-|egickT3VLsnRNNf*fMFh*vTF<@Bp@^c`L zP+48f%PL#Yx^s^W0$3a8rYqbE>C`1!jy--8v|9+1)W)Y__8Wvw`8E7aS9 z@vw{$R$S(2SLkH7n_p70|MS3Nb%NFrrP#-2{|wcWMU$0}Ba~Z0_&pJV+1uHrskY4= z_Kh+;qxl^?_>B265afF*+B-_gifam}2T4DF6b#l~>bw(+zC3o2*`VYa5U*VSA&ACW zXB5=7uVyTNG+E-kt&Do<1Y1RfGb0H>k{CWD8nn(=UQ&@i5yB6F`k3M+hkyUXf&Oq2Nzr|S<;gS-aCFTZKAF1i2-~xUlXv(ts7*} zedyopnm5Dxb|HmF#J?@G?WW82K=W|OL8|->(ML3ee8|CLZfX!PWBvj0xeV3plaOc} zi>SyWU)0)Tys&nD9xO#z>FE28q?+6EsF&7G11pHWyR0NB^Qt;Qi1wPo*l(cB8vn!N zv$4C?$Mh@c>~q(^axLiNiBnfZO7I?QkRUJGFn7(s&wdmcFFw?ZG!*V@D3 z%bJ1_F#pK|^iBkbD^|fQpUz=I;@jy>vWLU#3}g@Mdpd!SI?ZO)%UO{J@T`&y6F_y0 zk90y1TMlTQf(;8rYoiWh!Ld@Z zoc6jVG0n@us|Y5AC{<fN<{vCzeuDN{RruCp> zQaB60ou;d2`SO>2*4n$OsHhs_lp;oCwj^+K(&rQYcOTd#O7FO|^_EJNeeOjp&MueL zYah#k%qZg_L*K@0s;d*!?qYPxMOE#cY#cqr2P-z3zYSc@`HnT00 z5}C+XQev9l;exL(21TM=W@G%|_yqb_KQ}jfflZRhOl?MmQRB#2f*H>{8M>?bCyO^= zr_d=SQ|v^IWCm3bFwI1&%*m-?lFc!1?wXHHk<_d;H_{z0w=P$Bucm2Um6p^Mlr#mR zL3Snw@!;5i6bL^<+CC^eT%jUfXY}xZd!Je{+X?Q-+9g+&PAS8d3MNTD&*+SzYosfddUW3L(WN;q7Q-x-o zSFfID!Ld5EM>ca{dW-N%5JI@Rnuq722Lx=(ZqWYbf?xpzc|j;A0n4WE)}l{HpC26UL67UN@u}VL zsMt}Q$7aT=2TZV8aLH8+T2=bMVCn;!Xf;5#VNS7sWh-2zsv_< z4~}3rvtnOlJk2Zm;&XX5%c!F zDhJX1#ZX>=xv!LRUx|{R-C#%d2LpfirMWXo_C5v8jP%9Ed4#&-^$f6SqZ^_JBq=dX zWt(R2DN=S~y%;hT`idfZi|_S=07o=( zYop9e0o4^qX>#)VEKg9S8zL)qG_;N(PL*^C{j*xZp#qePj((;<^cm8&xGcGJ@| zL=PYGsfqUHR&gc-iRd;o&{f@57=>W-_dtOQJ`rly8g(j(uF=C^jf{ayFd+RWyOx7u|DWn-}} zWY!V4k+IgsIt2~M{kY^*TDr6cNwLUedAtaQADTmi?Bz-}e=(T9VKDEe6fZESVtbBKz~dOUDLxgGO%UD?m0`V9abx9sVJR z8|y}GV}Qp(CVZ$C$?Y&qZ_On&Hr!XYziMP?h>;Cb^?qtJ z8+$+RHmHsXL|J5KOLHCvw$kN;F9@^3`brS}Z1igotF~Vn<4vU|f%Xb7ApmzY z?|;snqO45tQ9iPwvhqbCf>8>_Y+-F(_O$%%^yih(rr+zhc5Qu)+{nYj6Oi%h3I%I+ zcCcLMIbN_FIGfda$v85c=^Jxyh&(h@zCB3(TSu-%FqFj`KX`0>qEgWA$uErn;g=BG zZmJs#{kD-xg%1V;f#U-fK=qA!Q|X#d>C-g%#o$@Zga0GxlD-qTwY5=LTENZ4gNRc3 zdFOVu>z*RIPf59joG$K_u*6(P=Y01pm{qzUKfAc8DI-IH`b@bRjgp)wrU~zwD&-voO`1rig zc2%-5(C8u)h0%LD&Bqk|SSCv#CXO7AgWmMZF|?k9Xg;8_jREj6=F}Z5k;7M+kL&@d zq-KpMKi9&(KosC9FKXRd941;M^YCzI`ZtJNyY?;2-#@oJFE0<+CLccr;-+V3xi3UP zb!(hs60S$~+ODqF`blnpI=5(PfQRQ*vp-;mADQTLi#nC^chTM9DpEYm^# zLQD6R;+%x)gzD;?gfSbHBJDhGZuJZi8TX!Cx_^ z4}#{lco!%q9OB$1_XnxNxAYJe&w*`cp!he%x%MR{5TaSw1qwC(fA`S$oF*nF0IebF z?QJMoZ<{*h!bw%3vWZy2gR2mAGi$xkd0{ ziq_57;TpFtDxui7jV!?yBn6KOkv$gV9#)6{%iLc>>l+$w0he+Q_l1_({MJ#DZd8Tt zT*WS<F=6S4AnUf2{n4+b?trVogW8(isI1hsX9~lzzZ6-W~x9{&= zlWn$hiFoC^0e$z9RL=y0beIylxh&-Sk&OS#QeNf&OZoJPueQ;=n_k+}cZbyo#CiLk zoC!#UBhH}forMRns5I06UG}f_I5;_PDRVT7QU1&un6~fDxJ>2RHq&M;&4Q0|gNV4ZHur5MGe%MezKMpARaJW& zLP@J5rPBwBjx2v}rWq?TWwY04N(W|wm6ZuY{ZMQBAToOFVjb6h$IW!Gl_3|MJUpxM zi!Gx5(S6F_2h{OKO)ryWgMG4tTsse7&7;g{NCbC< z&c^=K(vhrztU>F{cU93?OLbNk1AF9${BI614bXaUM86=}zKhj*rFTDQ>_+%oEe>PS z@ekJ($d`r2NVRf;9I0ekek=cFsaXpuIoWG#vfNJy*pt&&isiZG+X-rP6}wEq_dkT+ z-R&+{adJA)C*DiROIaPXYRSR){2;)oWQ>S83E04tTM?st$t&5CJ zD`U0Isx97+X`>XaU-dnGd^o)KUa>weT{Gq;N65XSn^9SZ@J0O7ZYz2$bj-ku+dp9Z3j^i;a~4E=kF_xVRKW zr0NDNJK4mL*T`G1hQZ{)eV0a0yK&J{GC5+C^#s~oQ?|Oub6;zDf%DC1kQ(}lQe&I`D?pQpU;YG+dK&WRk0Dl^qn6dT>&wmqQr zhO`d8R*0rh2q>S`b(H36NR#eZ#I~gEE_^Q&4QIU2yX}a|_bLG&W`c*=GX-Rqn#}K6 z1!a9A6SH9kfd#GxRF~x={+*O2Fsb2@k-M}KZh)o%HOszKoD&e0jw8x8oM)6PIhMRy zpXhs?KHihKQ;pKC#WAP%*a9Tk-R?4$!ooa=X6r7P3WmyOe;^zML8dW;w*$;)R<5cB zCEHO*=qL{NFCb240|Hb*K|$zUdTF;c4PW2JwU7FW|ExXRg`QFF49>Mvu{$aqy*$uj z#ggE;H0}{8srN8>w5VJrI@s@l%Hx}YHum~v!+21#~~@mnd#jxm!kcRC=|<^-b+8@uEtj|@sBf^W}{#9qU-IsG2Acf zcNSiF2IT6@>WlZ}I3hsQ++6|9;id4b?-RFA-@I4Gb@pXR!$`N86ne%V&`K*=iJ_Cp~H#gUo07R*XXT{94PaR>n=?WmH@}}6sBwh82 zL#5VujjYYMuB~5g?bl4YK$uJoE?%0lVwmzx&-ScKEL0>-8!=tcN5Q!$Zoa}suzQvW zc1cnc?b^N;fUv(S4rd&B==q3IJG4PVD@*$QR?GD`u)rI}VB2&y;9-R`-q}Iaq{E1h zU0i>715j>Z;YMrlE&RK5sxVlR*j&ti;;?|E5yzX<)YL|7$b@J^Z*x84Z6cf96P8|{ zI)tJr0c*KGCGL!sVwk`t+#x>Nc?qFI=sMxb8z^P0nF(hsVO(5njU-sdsS{qI7o?XF z+0wLB6+f-=bS%Pz>@DXUCVGgPZY_u?ey_5Dz_S?fNL6q*;EZ_GlpOc^W^oW1Kaj8d)A3bLuQNe1tMetHJN%yU< z%ssm=b}wdrRGAUkKuw(Rg<(RrhbZu!+``k3{1VUp1ZZDe0z>?mQkwg94Gau4wDvl> zU(5LI@EE1BDc)AVB|A?faxuaglA-^B8p8zB=|ukvzbNIY>xJNda{j+Ki04<-;2N3Lpg2 zwRB&gmsc%!Gg)FOmblrO;}r1#Vs-pgS|tha3^|n8(jO$+wZVka(o(==sHLPzXibFG z9Dwy;at?n3&4(A5k^e<(|G$9d|3?o^09%>$zR@CWH+mIA=1X($F#$u+e|>osW4RBN zwY~nI;eWkW$O!xAm;c-bD3kGzu?7J2|GXOz5&^@&Ladf7VbH73;TN=zU%p)UeB;+G zAMXKw32~;o`(Zuo|NPe@HzCsedCV-ePz?fx_f0!$-++l1S=UQo_k-<6A$xL5a$;X`4mQXLn;2PhK! zn1EPq3GqvsLPWr*%k?#SF<`oKb(kgX)6X!I22UALk10--=ym3l;QzvuF}cYi)?2PE z+qDNq9y#h#adb)gImYBc8d+T+IR{4@hnMz+rKJTWMNW)PIvkG(@YVnO@u94+;vy$D zc5dB-^v7gL@dR8PxjCk!BW2w!@xer{E-u}2(a-LO*jTDPdD<#`fAM@_Y;voj$M7rT zGa1^?kfFIb1_{=qFZ2PBtEm~K`Ox1}V%u*gY)H58!CJN~M@pb<;fJX%2KOE#7-2fX zlIMno-tx}QO0u$lo$jY5CF$$v7;76%4^Oe?6Ee^c{E`4e&>$O4Dx^Fss{$y%0{{(I zHc@IS*-%gF;pyQ~?&0n+$SWa{Pf@ibXKiCZS+@nOj)JS>T0d`Lv3;W{#w+krzdigW zZ6CKCLWP%8E<0Zzp9cnUSz22k$(txKyTaM+=N3n5x^LXo+;2WgtHsTv?a~Kq&j!ZL zOV<5#O%ff4sv1zMSz$i?P*CCI946p}%@{GCH!acQYw4SW>G9lp%%-`7D3lNvudA=m z&B>vlpjZX2r6qt{%FD^Iw6X%^IVvh7Qd>o2_2%9NaPvPZ4Hbh~#H51-D4#o_Ce@qP zxHx&8?CqJ8q(bP~U9eDj(_}?b=8z4pvR&4zmBiZkQMYfoNp~t0hgOvgL>O~ zIKPPND)GqXV<}>L2`#pJ~ZLZn9Guz;~J=NrN^=7Q7<$)v| zJ)FU?yG@YRB97~iEFTeJCYgUqU;DG+wFCXt(bx8487fh~xymv$-1*y-=R}z)e6Pe^ z^Mz^V)pC*R0C96Zx6$k&^G%ypIzsxWu2z{q;-}rSiXJVB`#yP91c&2lrOcXYww2BBA z?L8vD@N?QieQ(VgcDYUaR--;J20T~G?UP|`Y3@gHs%UYj-TiH78kLI%5U>(D5 z*8Bg=$4%GR%iPw2IYn?Ks{m$Ov-4bz_ay!K?S5*mNYlXpJFefJ`6H}lP*^B4T zv$C?fv%`CoXGR<{4B?Wb37~ZI;`(>s_?}#GN zii*7hJ)EGvIoP2Kotgf8jM-BfO4`+h9lw>gC84$RFqtctpMyw2>wz+pTK}`+l)M=l zo^y<`%2mhQ{_0qOaq6DR0@md6O-p1 zD=T^v57wSZHLW68sxvx-Y30UfgLSuuY*^ZM_qYsBEv?gAxoO)jN^?(4mBhF2$ z-u=F8mpQPwxk0Vm%kg}Xq|x_cJKdNUBc9P!G3PUM0IY;55v zNNKBkvCufX8T$;cw9T7PY!O^oL^ss7897>C9sbC|-|F90A*|aSMFd<`{V0#^J3ltM z5V1L{%27!Il5z9d`a_wE1HsDnImq6#CVMkX|MUW#3~7LfKv`9mA%>Gc7YGu>jU?o0 zsTn3u4Rwv?v$Vdt(F{U{zzxB7Zo-YZUxIXA(3JBtF_$Hjw0{+CkkimEdh57poAUM- z$Da+|th5FU^x$y9tjwr(2dIlQH#Y+o4^t2%HI=PK3K-~Mhy#=B)X3$KC+Xd;RV;s>-80OOtGdut z4lN4KxlWz9?oDT=Ym%1Y*Du32Igak`?;V)yzF4qS*mM=i8!)!eSwZB%jOyTCj&l_b z8`^yBc_Mxe}s&%@WFWtSO z^*KfEdPp`4IHOnkjf`g@ecbB6UO*WLC4hI#vF-93rK|H1P8f2TBj{WBD{p6bLPh93 zA|MPukX(-xSCPR~oO^i6$4X-VLhvd=u7LGRJE_{C5wCxDRGNtxb#66G;1Ki;wy7g(Fh#Z5s`#Wmkj70zkD0nhPjoLK*^|Y ziF#@2H{RRnG<`(t)FiNtT?O-$R?b#-9IuwVp-wV0lvy2}DB=z9|9-Lzdf|U@DLefl zpiWz2MZ<^X9u0F{l0Uk{voz@;t5y+@~mmv!IMS6;gQisIGTfGumF8 zM<)~9vBi%CHukD+Rwz&^<8)#PMs~}!*~dSZRT=|g zPS~|I&zU#(;f{0iV5;Zc3&F7Q{-?(W%?_EVEzRcJZ3-e++h0~%wx-;Uc`Cu+^pmxr zCZEi7$YCWJr^i*zYLZ&oM6p3HS4KbRDnE%ff15Vv#OShQdVxG0))cGvehVxl+sk2B zfi1|?)%7!$H}Pxh1$5M_FWn21o`zl4=yw`*wy~DX9UaA58hP%zV(&b23@$A$p+AbA zdN2q~q@bM?{!z8XE1i8^p?*gANEfu~&l& zqwAl3zG?}3IFNsBm4H5!57tn$Q}e;`a!;RX;jUAj4 zBEX?M7zN}vhwNA==vVRrgp0_>E?=KtgER7~F5OYrd8fLxjL1+$b?Tox1>rOQt(PlF8naE zKQYQY@s7D#|8q@hr^HlM``0k120K;a4h^cHdO8SFxJ9bxoHmP|`nJn|khcWv$4aNM}a*{i&Y zN>1;rwbzA>XijQPu8al(S&<&I`jh%s8~LTT++{xhEs)^N8Rl0PF_=zZw{hFd+pl13 z3EgTWT(i%Z7S%#}c{6YHv%GEU*r2PNzIeamfv!-;aOQiOe{Dnn3V#kJV=J6WW7e__ zcyKEYtT+6st$kr(;c@Eds7_nmp1~7T7c@uawu<#pJ^vD!*QkCCyI#=FX}@%g;;vUJ-{`=bv5OAacD@x;dE(T*SvX72n6h zU!N$DH=SygA2ys?(YKcv##Y&CZCDR@`C;4j&7?dx^~*F$sXRAbuXe{fulzUD^Cn}< zOiy=DR*$x3DZGUjTIJGqo3Gv&NTh*x&`ogHlT43x&9b|r8pwraWz5m&g!(rYvITuo zwFxCbD>cb9DVy0n_FbNH|F!{Zds-$E!C}_|^U!K{; zqht~|&_{6t2OH`B2OB|S(^kBfuX=a<&~tB`Z7>+T(UQTpIS(2DvzWta%X?dbGl(~C zr#QFEoBv}PPEAr*!TNb6zNpjS;7WA+5wyc{yCRgfudq4}PyCXxU|sC`XXh ze3T{KZ-~(!KS%(hw`)wfLY@vmKHk;Cd>$7janO4)kP>z1-;ms$O(=)>v?}qhm$&*=arR5jr%7k)19i8! zyC2%DuiMxdvuly%<{cj&uOH^rLy+D0EImtzrTMIlsL@74U2Rf%R%4Lc7cZ&pS7THB z#u{Sxj$~jo{LkCfL}%T4xodHUWdVLm<((9bm0iPUGiSsybP%_tt-4!w6D0vF>zXf6 z0aksk1MmD-QuqfTQY$H%A2TTrw<=kCET{SG)<_lltF;4I+3`Nr{wALXjI>|3bzfLVQ8{}jPknLAaHG)4w|~045k#WX9<~QsoeS?mRg|BsB>C1%rB0>({+Btd*%6GAA=RUuuNEbyRU1 zPxmzSbvTe+2L;!^iWXc}41uK0*9T3<2w zib%$d_7@NKi}Z>yu6&?~>QW=2l)DM$aPr6n7&fiPm&?-txiXZ?CpoS0TzCkgNlChq zEugDYt!l3GJnH@RZ<{uuMS4-@Z(HAd0-6nD?=#8IcuYGS&w5_X)a{e=n&L3loXzL{ z{pY*9eml#QW&YlpV-txP83NmOz51P)i-VH|CvqtntBXqo>vq-i)#DcF)1G$CT^>VK ztE;m#C!hUx+M|l5;0mcaZBNN|=De$g4A+UHSD2{V99lC*E?20a=#o;l1|qe7V5|3I z<2apcS8e0XwGP}y19B(ARm8t!z`l?U(5 z^XdlId8&y$knkU?F^G`K3Y5D_j#oX?TRS69kfTOkPX#wS*XP&m-^?IBLWUes$8ozg zFB<>>8;xrCnKLo}wBh0|R-y7kPELN|2EZX$DJiMjtRDrg+|n;Lxa>H-<3m1Xf->=0 z?+>?#1{$&P#&qJu)bY3vPc=#Pz3Zqtqcpekx0AbE62kKo8`~pOP4yFOZ0t87Gm}6_!zJir7bG|Hhzv#>1T|=sovNegx~x84O6tO5LgH58w80Ov_^z|(z$D33mmd;iS454O45mtNkpQZVtc<#cy5Gt%d5**ak6BrdXK7WuJL9G;c2 zb^I8EYQ!|~0<2VyN$=H$3+}p4mSw}fg^$WrBj@4ad{ewhaPCSrW#!6=_UZSxk4`14 zboAC>mcf-5-d5?|=~X)?Rmaj7ju$Y%od+%qmt?5~G)`5C{k$m%Mb>X(VA4-=!^`lhDkhug;~^G^?=RT^?nBIV5KZ_i(@BBFN(i2EF7$u%x^rNn2j zHhJL^?Q}cE*|~>j)v4;w9X8!-6yF`~&<&H;F5`QeoOk5)NER&zv_wRk{(=HdyiWx@ z7H<1cWUibg9vz`K&dz3rhl{ha4r1TNx26yHPvTZ^$0Y&jhOYjGhbe^1?9G9(U~HVQ zES}P#&5iP?R0wj%n%7p6wZb^~t*}-;Nq9j@hOYKnu3w2wPU$TcYmdE4*Rv=3_nwSU z6>Q%&tEUQh$bg(SA4A*Cem9&5%fAF^PPmSh4m-SRvHFL15yP?Qb3Ta!dkntGN}lB~ zXG~+*5E2`T*>ArzD)oQG=zI^`{wc_=M@Q#5pRz=*FM|fgyn5U{!#S$)JDs-SL=KwM z8S_^CsK0p$5e-91HESG|byqZ8GEwut?Y~b3^t)|gDqAkkHro`U>`$B**CtkB2Gk$X z;`Ev4zF+a3R4LDw7Gcf%0e896#5dM+WMqULhk08ZUEEy6orfC%Fz5)L)@PnhlkrL7 zh69W%c}hCJP0PS`!?1-+@CBg^Qf6GtUd|Oe;j3Xra*#`O!f25 zHL_NJ>gkJZ=$){~9lk4h@yhsYeQmht`iFS}EUNWlrkNw92yOo1t>d#wxIqE*0*6$=&Z~ z-x^u;Hd*zIn)PfN@*%u(W-XbMX`41t^*Wp{OJLK~gzUX|y}IM;Y5_tkYK*7O4MT&LlH~#V|?W%Nna6d>@cngOTaQ-@3&La_*BZtJIYjZJjG-5DK9Qn z$#{|ij!I>rz6jo`OQ^_8?77^}-TJC;;VHw|uwC{RvKM$)`sDIlnBEV!w>Ckcdd{yD z$lK_2I_SE;b2%M&EOpY(1Zqk7srGZftpEI=a=>F}>SCX_rLY%7*;0Ps_x%`(DW$=n zixvExbrPRwyAHoI*c}`&g!4YV^jF-CW_Hyet?+B>Fo0S&|N3O zr~xrD-7^!#k?Cg9+;a^$qx(c9n2f!7Lv|U#+tA%v-)-iW5beC?Wj>!kAu}srx7Ybk zsurf!FOoR_bjup$HD9xJ2+15$aX6@%YTYn2tc*>uuyN+ ztXw|LC3WkKU}e;#S4Xorr+PBjiZ~Qfo-Wu7JAJI{cvCbT3$gz*tWxY0P`6X<=6$ii32{|$Scm?CeCd4E^K4l`3vsx{# zF5P_GJ^PZ8{lNwQVa@vjr@yN`LU=15`tKC`jUWy~C6kVXNo@3t2L7o;-6QEf?9y09 z*gl8KkMRM;2vS1O6Z^E5&v|>(p=p(%5NA}rFDHj+AayYWnZ!&|cM+fUj4W)X`kBxg zWbbRJBc0Tb8az%%Dk)iy-ja%jD<+?_Cz#Q;3QF<{XPLRnlW9=y07}Yw?u?kacp!bY z!hJfK@YXy|SfSFXenl6%5ziv_C z_R9Qc{#bxPM;Gz`zg<**LAwS%F6QU>d?on z$D95TOLNWKM@bM(maq4TqoKo$j-xqRvMPS_kv){b1)vrK*@Gw6N{w^2W<2^5eG4~~ zaB_AT8A!(!8Q==Ej!Jo}LX zy0=x*Avc z`9~Z$aUUPd;VSy(?QO?b{xaqH^=*<|Dp{ubf^}tetQPtOM)$L1R}rwt%j2o0vS8Ay zc`H{;S4+2Jv#!U!Lxs^L^Lg*}iqO1SY4~bT<`XO4`OgaxyEXQ+<=%%BFIag}>#8*( zjIh>@-8tFwu?7IHkF4uhm-0DAEFmNTq;AF&jPndAwpW=6^m*RgMEZeC)Pp)T|3UfZ z`2Krx+-w|0`Go~cy2O_v)3O@y7QtU97*oJvyx*mg<)laSrP~ywO-^a7J81hCrQ$t> zjvKug4?A|F)C~{VL0mW6b7`a5OehB--TU8E9I;^9_1l_1uC@&5E4ebS=J4CZVCg`; z&)VCNt#~(9OaQs*H(jC9?&zzxJO;vh3&)#HTzh+0KPuqGWfrVCDlF;_;jLQ)gnM_1 z!lMv`5mC(~w6rw$_b#T0{m>wGvJdb6Hl=w|z%%}XMK*PW#nF#7R{No%M|_5PZ(V{? zXMU~iJ}YvWD7)bUG^W}nGb5oeABqX!wo@CmG-1Q5+?Qdut;3PC)kQqa_l<9|-MVci zrwC3C)>hcg9r^qfkvgH+XrLyg@K5%o$V|a>GY(v##7IqROAM-mKY#Jbp?6g$dGd73 zgw||M_iFlW&5D&eDnB#3;OdAQ#+BreC#V_ol~^71^y!%6ChdFxleWrO3Bl0&{q|7$ z)BS1sxrR;LcIG8l!#)otEG^kgJ$}}$a;v6g?y~kuHTm#zD_CV7e%xf)D`W8Kdj#;gwJ-MAU)`u_#$|4c9;|lhyJ95M+%oL=b!7%KtQv;e3s1hAdI_YRIQ&(S6D86D2&8Xo=YU{XP6u-%vez& zTp7LyBCCaPhO()D2xTJz_Pp-Q(3accXMO@9MX=ig|H<7)o>D=UfY(sdf%9DDd+EbHi^$f|s!gBL*cT!ou z*J`Avw1h{`)bzl>?DRDF;X`S5c3~+gA;^p*-%E^jCcT9B=lA)afF@WWt#!Vr0BY>( ze5zsM_`qs;Kl0xknbh-#125Ji?<3q=C)1cogo6>XBHWqtBYs=Fa1UY zd81F}*=%2By*m!GK7w;O4V*4S@E&hnTukpa2fP^PQt=e!yjwQUbL!^~u^QSvb=oaW zY5BM{5?Q_~ePZ4*D%$J~pP5?yR!p$tJ-_* z3bl39`=N6FH)bA|z2BZVE>iiuPvJPY*B@~*vJ!^Dhg9r`e{K>cPct$scu-!Sn-5JU z*|3$>w4tQss!5&;>j08#?)M{4EVC6&**d{40gsX1gO$9(P$WD|5XiZF6a)_k$tX_Q zz_uqp+S+?X>7-(h4)hgF%|7EoGet~1_EWYrj`IU?{8OD|(&97w(1j8iYqX61Lgq-J z*HT5y$*>3U-Dg8wDf~HEfevAJ4Q3K>HOD*&;dAob0D|ToFge@l?C;g{t99#`Sml|j z_x8Hycl~dY*jSRdxa|xR>&B+inPK3ruC*bSd2Dt6rFl0E!^QjphA}meZBAz|cED z0rIjRBRBxZm|-hDi3QFt7V2PkZ}wktUj;V7@sH`1=7p{HvIA(1FJWc$SBITF3ZnjE z9CpX~hoQXE4F{bCY3OEGiG{JiH&@dOBK;hen3Cjw79+o93EVieKzmdB#cb=M(mb&fD+AO}A-qcGPS`VgKijNxI9(eb$ zI5Ys2e=y`%7uvRA*br2{0QC62O_flxvZmG=93OKPD7;*k!QK$ABdX^fIt%&MhZc+{??`2R}3@$dvFLdrlmeH-Ph96y+}_uclJy6g%u380ZO{!o?l@)= z>bLerdULbDmMrC!_wbjl@IRI;=~sKphkTj62@Qe>f+6g zkDZ0cR~VEoFSWOSlMt`NHD7(NATv|*x4X=?aoU!_DVW|m-oJwzVz z!tX)%MS(1llFVT~1-|X%_rVg)%ztS`)NNhVsbJI%JMDJ(K+ycmm% zIr8&pkxX%ai{`+wfTZU0LFD}954Rsz{+OdaJI9C9P_xVC) z@5MF^OBq6qy`6#Vb${(c*sV373LOVV1I-;WM~T*~FbhX`E~;liE*LQ&acktsvRZ!+ zu;U=k^)F`Gz^5ZbnIHVd53tb8Epmy27X>y=bE|0?lt6!PWx?XjX_`oDtIGFLg>M~? z)iw+^h$G1o#!^x+Xvdw+fH@)S%T_?)iTXMsLL&Ep(`q-RGWr z-`D$nKl#YVuFcwO%{AwkV~hzfFccRg0R@Av>SwlJyr*9uU8idp*3RbO$%sH|F2i)y z@cL10*J;*)T-$pLwvW4^==tqzR>wS!J7fB1u&EowRnU4bb{+R^0QMtvC#a#!HHJ_k zPS^U|g6kl}ZUACCU~Q*hun}-rU9-YmLcdTXw{X$~#5fG6k#9EUhT>#9*zvEs+MmTn zpaRfIUcOl$C55@8%E$H#vPr%ug;frJ7c z@fsZ|8B?xO`mP zr2=oE&cXPBe*J}pyNwkG5N9P{!I3Y|<6(%|5x~>Qx9*`X`EM)A%Fl_yzVs2#<-&yh%dEuyw^Sy^rt6@b>(I!eu}3+s zX!;L8pRK2;sia0CbNfn#T8wt1FIc@i5dKxb^(~yr{M;LN&XH7Bqd6TPYHpSM5bMMN z+zieX(1%dF6EaObmjWfB+4FB0%$KV(GHdfATVR&dgTgfsPQu4*eFts*=Sr$F29#nnpxsDL}dgdo+(ri!^^d$9uWn^fAx^yZzBw9?%=`SKr& zN745iCx#{g^eX7lb=Nn}M_|k4u9&X6W0kCBpJFEg-GpO};%<7)w)t+o1J+R>&JP_M zfX_%|v^coUU_V-L)hL0wE-lw_Xt^|tn68o397Zp=3|coECo~)H0*t7ZLdMBzWz$I# z9xaBYBzBJ=)GaXJGNbQ#+8c<3PrvYEXKM#L;q8{q*nyDQDvfk@Ng=g@?ufQd#=PZt0wVWD&V}I>InJRSdlb{ZpJ;Y_$<2%@ZmVa z9#7Iq-y7~&YpP#+(uAn5Ka3IiId`!5e<>9CyJwUBRx^EID{yoH98Pn5e0@uAcz4ip zAXipE0VW5lB;tHtx*gPGK?{(mrryVR zb=62)6$OtDob}`yb{o46-A}E3gI1&ydCY?)%}nc1VJWqIJSC9X~vvY{w(}O-Up>fpiB?7 z%N6d>BU+uV*sbEtKjXzJ`SHw$2+{wG`M+OI_URI^icS|-VBNSoK15jSvsI6I>caCS zrF@t&*w~)ic6F`50eSTf9LtN(ow$jwywLc_6*|oL^XXJKkq-%tA_#McCb})~bk6al zhhQ8wlcJZu;m%}$18smB5@AaxyiC#)gY63myr(`DLogN~vlt(OIU%PI6$=`sUr&$u zRoJxAE+vrGSi~;W57XBT(*yrH4U9Ptl=2wIA5|;c%%qKpTbl4FXYiu5&7X#38oeqE z3hFObEuoN0m8kzQjgamGyO}LfU;1&*pfQ6**4(JXl%0c)Nyg2|y}*M)C`%&mnKFiy z^oQb40s(4y&*`9$$HH?3)c2Nh$P2_`Tgy+!*sf)!ZHt;%+9`*i-yCp}0wQ7`!B|6Z z`APGtaFBPK=dK!6VQGx9OFapkjV>R2#T=jWdpmzAlRRHr;n(5P|8~d$yu!(_urdcW zReq^D6O#-kq!FJ>E+d=1G03(7ny2MH?9mbd;HB9|Q&Ms}`@mGnCxTEiCWUP(W7Omv z%_=3Y6$-Rx4@Q$tNxdN?-T$kG9)Kw$lIc9W^B{xd)sG|J9;~7vtNkXf%QP+fSnMKO z@0kFG3H1B94fe?obefv-Z@QLoy5=!yR&i-IaheT7at%YYS|+A+)nshdE1Et_xK&-$ ztn6Ny{N{WI>+7dCyBPol>ZWNo-6KBGnme!{!yCA*^gfHxDm4g6zr`Yt6m$9l2}g}f z7D?X|-wy0q{h+AGJgp83@vw6*e2ct{$J{t+vN z-Ej5VPbA*II)Z=g%oExdHWTu$o`j#neXA2xc9P1_bhInesUsrTK;qv={`ZC5^@QkB zGnIBUmUzM4weF0K?@3gpg=65~+br?7-`y6FQ3>E`c6epwM}d!KSTq_#S?*84+*C5l zdyJEl0t>*dEKqOtbCpqs{;4zQ2}(}3#v`k_@$swc32ZQA%sfDHeJVS&(f*tR)N7M&c>d6F;53$%8-_H?o)Ifp~6 zb09J?BgK*~&61|8A9?gBd2~pY((F$zD+5eB%R3c)^>Fh6wza<3#cZv`wAeJSJd^;5 zLyv&PbOc-9Q*aF-jfRNUG8naOCPGYQ7UQgE;rzV_^`~5TYUb#!dA_2aZwM&PGRXR0 z@_cZj9G~*qF~_o;=OV5*Zj0&`{m56mr&V4}vvl+Op7L~j4mYhe5+)zlwusKuu zRY^m`RWh5^s{3IXwuN3ME{kbcvs;wR13+)Jv0>Q7#6U3Wc`3`m78)V8<-RbsD)2tD zs!DRA+u*6gO7UoYGZ(PjurFT0D0i7n+68+V?E6LUHU-_E*=4yj+9Gx-= zdnzd%D+Is!WF?s{QN85KW|-b;gKt5Tup<2<$_ULKyZ=PvKbKP&j$FC~q)?!v28w== zZ)&((9mS@NRqy3?6)rEfs=60w9=Y(v4Ts%|uN)6()H!VzyO}<=h#D3dJ861~3QDV=d9yS= zefqvLnzB2R1Z5s=wBPKDAiP6ELT8A`QVho~kV%S;P8RDAmW)zl%I09RA`F)}6xorI zlqJ3-LkFv>&aNve-XRl$PI62t=&#*|#6m6Rk{G!4Pt4p0T8b9J@xBdgflnG|+vLoG z(Sy@t0ZL6mASm7Ka6IY8S=TAQAmID*oWNr;d7`eL&q^w0^!(6RY1Bxu-0WQu+)5w{ zUc%pr=V27d0J`+-4mkD#+r^bW2e|YMd+>)J-HjIX?L6=2o9Pf)1HoNOsd1*pIIe(d z^9N@&8M-R7$X9^PvL@|53L@RF$@Cx4CHv}oVYuBNAQnSOjcXqRnG+a3z7GQ8sWEay z9N%RGq}->2@e&gZBDFs(_Yyd{-Ao}ASGN^7UATY19KUM8eY<2jSE8oD{ z+OoW?#OxNAh{*o>*ZR>?1A|WEmoEP|745eN*QcBMplwX&(~Z3Zae=Ev$DI8?PazAA z2ey`T+;~xYn};c}sand~<3~%3_09S9g@ui^wY8O%!S^YN(eBqj278IUd0pl*PKh)!h8bhI^N`;VTus*>{$V6Scd4&K|{G#0^ zT8t{%60KY0`Tn1uU9vNmP=q$o{tezU2N{Y31|$zny1K+wl7`6W6t=Ux%!)RN60EC0 zC#B-lM2uo_!amD|Z}Xf-iivbx%UUc+&1g#6$YKyN4`A6(g-g+y)>gJSERyH|go;Ye z2hSn*Vf3bD&k{(*W9*81!TDVpTcg+fiLWhAKH!E2hY_&lqx!^{on2jBH5*TVQm42; zemn{8=TcZLrVcAQV2f52OsCn*1_T_o%Va6UxY#VV=dqIv?bjPc$_38hs7DY&PtS*# z7-d-l*6iZRGV_M?$V&-ctqn4 zP_Y9JbWuA;dJD){;eqkm$M>NWgea^+7*6;?<~sinP9y_KPV z48>+hXEqt?0iy$SmCP{g46UmfvUwtq!6hO?$9;7`K)?*n215Ir3@*+5ZzVeh#NyG0M*D{#mmvQQb zZuEyyB5$$RuYDeZ%T;mm+|)YVYhUK^9&EKRdUYz_Vai|6aK+Og15Hi+H?&U%%!lxoAf>2!g{CpG!4;)u;{iUJ2jngeLT0Fw9+BMk#X#$XMO z^)Mlanr#)mz)AYn`u-7UX9Sl*0;DQ{-}2+ka5ga6!OqaXvvgil69pG#_U;db=Ba|R0W zrlKT|rwDj_`|z_AE>vIhY_{jFWT4dF6svHmay z$ip%I<8DF30*w1+i>LBm1<9ssC@h$sq_}~JEPfClwHYOAFTV6*F-}R=mS6NwTnco zFY;&SXP4E0Nf{9A>^FMk0Wr{e5b;-CW;7VL0+Gxknq>0c%P%4ezyYg?Q0*hr{M#$kRe*sXU%8?!O4oUQiUy*0sb30hxN+dc1o%_^nnfR#bfkK0wcwQk=#RCRn=L|#l^|# zd|cgIj{vqBJ&;G-N7%MJ6ms6&Xa?ZI3nrbye9;u;t)N1t7 zi&3lwIxMGyz~xQFSy3p&D0y;_Ov(Rv4+WMD`Dx7rKpSIiK*(~wK-xmc(AmJh7UkdH zt4mEyOiX07%+>iZ6^twpe6yExy*(Vmf5+-PD@CD!fnRlPw7tWEITI{uCt$bc)QnwS+U*vR8m(t=W~{VYK!$<6U=c3o=yYj_IRW6Dqe(+ zoYt0hdr)lTD2An)Il~MG#Xa+Mi zTl$-1gdwCMz}L4RgFd^alb;zT@-PZO*YHG4APcNWd;cFEx_t%${N2Fl@TNcWe z7D>=BjFy#tEG?$3C@wE9sVFNc$?@yMI@4r9NcKg!{0C8k3+>zmdjWMRo@;txG*NLe zmHc@K)_Et6Gg7dCH&x=3CB(jN+SsPR^-n)+J-78$j}sFpKmckIWj`ZY@IoH2?GR=+ z^w&GU0$uRjJbev_z_Ilk_1-m);T9tBWKS$eKQMZ!`U)k()tWL_E~3Wwsn%)^=u#r zR$ki--pC=;#0vm8_RYB* z)1B`lsHN)aMeA!R>F6qlOQ3ea z0P}}`3FezVGtKZuMWEg#ePGTnz&8Wd7QYx;Dm^0#?A0K_bPXLn#|_|oOOuSC^hSr^ z3Bo-T16s0bli{c0p`qg;ToxHF42PuUu02KH=T3j^sP!VrzFOchF9Wnu-Ug3M+)&Bu z*xs6*onIe;mudcM6CF+~H!b;y#p+$0*{C{jHHN+nO+^j0qUMlu*5DemzOn6?=JBFk zZEG}$8@9^=fhFjj>gtPD$(KwX;x20VOznL|&jde;(VqGBVx9`{f{d$#!z#>#g4GR! zU6st;OmzSc4NI-t)0iD;ewfq!(g}(D%+GEQ2isu2^_!ow+=8;%nksxeNy6Id;}1)q z$nba|Q|8uOo4_G*G1;abMs3g>JU+)cO{h#c8Ed>q-&i^+_b`xK%3n*Fx3ziF^N(kx{`qIr+4$b0&;*tlKf-K*e$NP#<*H-8Bx%c7Ah%G*iE*+v1ck?!sX zso*tyyR>f)3qqI3W(xu@#P4Y?@*lC5&p*vNvS|4TtX|$#&FQ?Z z#{OW-R)BBfDDA1WO2tDh!+U}@xjeP_W5!{O{QkQ4bLeo^8;cu2@5Rh33*2JPhjVn= z_0~XM6Ul$O2h3vd*iCa?1vvkJ%p-TKK5$~CoG zpDrLJ`07B)-8sc?-TUAub)=2zd9xZDKaesrlasT3_>fy)t~XI##hD2*{3J(1_~z_a z%N%K8pWAd_*g!UWJsSK~n5m#_84#ict2Z&QFoObgFRrdeM@Fpe>`o32q{6}p?hZ~- zeb^ILcHet^x9btE;&`Ck%?|?L-F*9phal2N5}Py8ax~_uOtPh+w$wbUD$~zY7%{b5ZBz&Gth;KunYf zm8=6?F9t#Z@5cLV!^bk)V*8FAxp0kh_dB{>S7Mma>hsW(20d=$V~16m9tM7Xe!!Uk za3Z3lyt355xxsjCVX-gT+s939^9d@_cUNyx0WBRVKK|fiiFnXr`@p5FAh=K1VXVgL z8e^HHnkL|;0<%dO>qs5=xL5y5dUzO6#&Fx+$WZbmgoV`(3=H^RUw`tcuwWT)W$Zkj z>(ClLc8%pj`QY&pmLCMQ^C@(iYE=oHw$IB`r5t@OaLa2w{q@!>KJ8Afq1i3Z(#J{0(@jLh-Bb-Eng{L)E}rAyxZQ=f4PWkBMtG<{fh3g0 z%kejz1$SGpBsiM29^I4r0yc1fAuaUmEF>fZ@Xtv4%*4)KUsWVIfd{E!lXceP($fb) zJU0fivE{vu(GO$d(g-mzoi7el&+L?xs)K?kp@RPY{x~P|&OnEtFNNK-)jj*Ceuo9F z_4QgC7vQi)`*B`Uuz^iOQMKygY$N;`Ln9X`m!d#SL_|bf^aj)-pKQx^r<>q$%mXAU zwGe*G*o|PHzO~cGY=Ik6UWSgo1#*{tN|H63^3`+k{<-e76y&<-CYER+2HoZlm$I4S z6!g^tDDhXSxuyp_@woKAK_E_J(8g!jY7#)d&!e{Z{8;A_!Fz&5R?M^m7Pj&k+XM

hDcH|q&EYu2_mw%T{dJlu2Ec6E-DveK{LzI~0h1P_3>kkQ6gA-(Ol$9z*N zS-K5!=f{Q+1(hO#!gdftM1&&1Ez1u~e_KNA@d z8ATK~_2_J{DLOhJBJJq40+O#1`-Own>;;WFE$%=>Ly^1zbZ1rl-BZlCILSf4hNPTQ zF8#wXAmsyQq3E{2`qz*N_)VNw`&I{UA)v?aKdqWTeRs5>omK5klVs3?_&*Tuw!ZJg zt5r7v(Z$HnsJpwHj4Ve-cO^PH8i@GH(^D^5x}McF=d+WLRAp95DA?*GyQOPrYI=1p zjxCPBs>{5LjdL?H^sUclb$R3kPM1$PR@*u4n>9auma?!IJ;U7bx#{n;n|F^-n1}q> z=5w`x1g)v~RM($QJCD+^*V60HyNtDS^7jdFQ){tKn?0wEvUfaxsmEpJPskIM7HiV3 zh-wE8>&mGSGJ%PzD^Qq(gvm@|tQ=>HI^m}xkgnw96)4TdVftSby#isH-{=~u7jP_2 zua@@3q3IVM#AlTNHZZa_Q+yapKfg@;zO=uXpNSOe%k%hWxQ1d~FrSGK&fbAM0Y_^+ z@2?G!CrK=3^4eOu^^R|w(9|?k!aAKEYJr@OgJXPt{t7VpQ?Jo)Cz2L1XUOcY$ ztEsu$9(H;53 zTFD%bHN~!KDhxWBcgF{TH#8{_T}MB^6~oPqSx8_=)z>Z(J14GPSIm8xaByv*r0=9- zDRmL98GRI5TxtaFbU}2rz0YbC84FJbWvgJU%qObEw2V=vv-s>f%~2ZiW`#0Pb|3q! z-51Wi-`gyh*Pb(&S21#fcXh8vcB68fRNl$y3-sbmZB3173fc5 zWC8E3&PT$=%~hN6FxWyrM}A!$9R>S#TO>nd3Ko-zL1(OMXaOyC+NEA^?NxC;L)qo| z=;ft@%=Gm%sf@2!rzB>8(MF+D=-|M05}~?*B?Xqhy#wnkiYz%qxr5fl#rC>TX@I@I z>^+f!gGY9mCLIlV{nJbDu(R2`f&^mX zrcS!v1LTEb9hiQ)FFAURa#>hyQ?#HWtB}~`)QE(I$thhW!o&VilseWDn>-OLDGX~| z(uU+*_N3>zA;Pp{!tVjSt~mzq5x!B5ZIZAO%6j@#l$N?wx?Y~2*VMFmE?ib8C23|x z0-1V2hqmMXQBy&G82@#J&*SATk82oC)qV!@!`V*(*JaP$qB~+l*hy&BqZiY<&t^0+ zi2P`c!6Ymt35x)4bI)8^SDVsYKm7a`AG>T$H7|vG4k>%whtRPV^Vsf(mqkg*zvPN6 z9mIpI#lBHmYEVT5puuSe4wU8B$!bL*y@S_H4f+J!yAvOunu7AF{lezl$=5J|eB`{J zot9EEZ?ZHDAoc=)9ok?{zq}>{idY*CejOefaryZ>3>`v1AIQIzR?j;oWa zy>oqYV`Il%0io&@dPs_i6?~w_SRw}tX zZ@Yr;h}+zu1K+e^2OLK>kH3B?AR{L{*{j^uYVz}U8HY!dV1NkXeCe34vL02jKUc9# zRH!Pk=vh&pRSRhS^}<_payTQCqi@{l=g3!ev{GhUmAr<~>*@yM%8HfV!HfRS^(B?B zt>(5e@w&Wkf=)6`W@TlWQpz9ysOs)oUhW!!OssbUX);ncQd85sHG?jvy?I64g16Zc z`l;ga!ouXBJHW4=Tbck+R?wFW)e^p7%!d!->Po{{CBFzwO#*1}VxobKO; zm5&peiSL@XE=ay%Xgah@m$*ns7_zVCZRRql?f3UfWxpwTpQRa2lV_Smtu3Y?tDJ(z z&PiZxPxSmhZ5DX}Yan!N`UP^z0-aVj`_)!ZiCP)A>+$mGCZ$k?j>(yzz~i6Y;*naK znh))d-xrDJ${%1sWhoq*Y5d#k4qWs@JOUi0t*m@BWTS(FnzHE9_2bBkJvn@&K4ncz8L_5Rv*odi0SNVB5^T;kXT!7B zNSvJi1Ps7E@vjgu*>iQZ6F)aWqkehB^JODf^V6r#BE~cO)A4d+*33U9er%l(qYz_b z6A~WnZ*L#$xD58~{LJ#hXScro)g7r;0o&M{+f9 zfPradfKA)tQa>dd9UmDB4MRs}cDB+)#7ouVDYg$$lwFr# za$s$4jes2a8VRY*VOt7F4uMVwaPx?XiRtL*0Qb0rgv961KY{d2S4U@{!yEPtHA-<| z-r*K703J-+3{>3x!$WL*e0BA;iRCHk!nY)l4o-T(zXBO+74M|kCUk~QjCvb|x(CD? zyYYFYd`~(;GjyazWhl_93df#{t@y2f6eD^fz6UI4Z8+c6ER`Ua`6?4^fF`Q6hQ4jYB3yk{}1Y^>$a zYa)c}@644=%!ohVp_=ZW+hkGWOQxHP5DQkgH`x|=bQwg621*eE9-zQPtABlCFJQJ7 zcKAqMEXliXiu(uOH23O)LN-c`+z}D^_MIlV)ie#iDSnewbcE&EwbbrEppbUDl19 zXZ~L#ey2kU$RN_F2)tVl-2xvZa`~{FzH2bjVQ3cRmnrUUE<5g=#Mb(2K$unujNR z(2;JddQpV@{>$SvT0!i3ZNAEg-yoR8!YnLOguVenh*Og6%wV3|CVHp3$M;%z;nz zvcG8Jq*6&J{YM7u%Pyvjsx^{3Iuj#)h-JJe+nmZ0?%;tZk^B+rd4kl9kb>YZQM8*K znswQOZjPFhH4W4GUyA5&n3PA0-q{y8cu1)JEah22Kk{&@7$IeDx)5cjXkhDQSA<+h zVQE(KVU7*ZW$kW!a9@sxgBBC$6(W`B2+9#Y_YqUA^U-cB5vDE#e6(nOZB-=fpn|;n9cVcgsbs{_VIcqetvkM%!-y)?{+Cp~55b+4fl-10zZS{%DwoI2`5UmP^T?EbSTH|)An6AX( z2U*yR>rog(%HBI~N~q04-3~&ByaNg=g~=BT&`^%mSF*39^IVkl+mjw{`>I=Bt&op- zOG#tfp64BYarrn!V}O%8O*ER2o}n!`kr_|+=Vvo)r?@2biJR4i`*>As**0tDYf85sj zuLy3|=Phl_VcQbFUT6H94$`&-zJKf6bhfT9Mk@r+=6*GqsO&;}@y zngwT{#X)AgFM|Z)7VuIVzuoMM*)~$~H!Cx#=8A-Hr}snKDQB*NV!)N;mh^XZvQrl+ z3mtZ)4)Z@x$YO^cf>*-1Vj9oTQJTAbVZV?up6~a8E=2KE8e~;mU0`#W`AQaYCnUZ# z$q-AX?a~>@{ZMK{ZJTrfc9~0?o8?V?@VS47X06%;sZR`os*NR%_e-HW@0D_pQT2+E z`ZsU7!cr(PClWD|{};~Rroje}P?6hg3Hw=*K|MTb8k8ILK!m1w>1AmKZ@Bz#J{Cg* zO$3A;7argpk+AWn zL_6biw}?1u37@IBT&~)(46p1-Ka_l2m)WMzQ*SP5Wfia72thc9pmDT(CJgYx(iYdt znnTc<)zF;alPZQ)-o92L=;2kYv}p=htf#wTE4dc)LwWb&H$DzAN*@sZLQ>$qowL&{ zz3m`vzh9`b5PKk`$*N-u)>%6%mb8qa+S`ny&Km<|54mxheC!KD!VnbpF4(rUI&xSt z=FYU1m4C>ZZ^otrWuLj2N&!O6I+kbv@26GRo0Xd{z}G8ebcMc^Wmfyt-m@ zrOaN!9(Hn9ERTxk(^8PbNa|Tg)M@|^jg9U9G5d}UT--fVAoZhsip7$j8|>2J+DmR{ z(~NtuhIN|$rJYiXrciOk?8D4U{^zRjO!6})#GJ4Mcp=WP-}Jl6$4zuqmA12}FHIkT zzo|PeWp6fLLcM9WwqA0{V{oybhJ%jmWs}h{FdY;xd+^yf`pv%C<6SoexD7SS{}hY| z6_HJgDy82&Jx3uyja}OUraF1SOfOIIhnM{JF0#!ELNN`HF7jQ246$eMw|~t^3=`3P zqzsWk3)D=m2Oo@;(`M;0(kb(8B^25u9d~3$Xfz~YE=%MW$|#YwsfsFClh3MVZdt3A zVXDmB1TCs(kd13`YC4+|)6**WhF)R;rhq4r-x76uI6`LNQ=yxr z1JZrmK`DVq?1!ndoM%XDRqe89#m6Z{P>%Qxcq$jZV#+oT`jtY%pbdE?s>yosl7W*y z=s1`r>t#hEq#=+QAAACY=3(H@VSCo)?DXV2BWHYO(P9kOB+Mr&FG$1@z zJq)d&J^b?cTI6WlnP;|WwGL%qNhdpl-wdwKMw{;Gq-p#jL|-=>)r z`*{_$%|6iF@TRw?pAg=V>y@wb%r!^~&3dsoKlCYGGdN4j{PJd5H;$syT9cz1+AwY1Tbb*Qyj7>CZKAov5}ERm-@V{Pa2qpq)IW`G5tm zQu=@%kA1nnC__Ud%M>Q((Zuk!u5=7qxOxhyx{j}9^5Xf*K$7BwcAAOziaZmmVWrY8U_&Qg{yN(5S2zu6QMgRk)YL!;OuT-sbMzp=_dz})M_3w!26!KnlJ*ZE!D;AANFhtLnW@nHNzAG?s z5skwXx$Q%$3GRwi`q-v(w1$=6JyiGkPM*TCn=>2}2%cg74jx_HVf@e8F0Yz(ol_W> zzOF4jyM6&oHM=l#l(zB`RyIPvd1UYW@Ou5z?+)^M<~CSlhg$mCqmYEX$$$mC{h6p%}<|%8TtRZD-Oy9k9h9UT+-smm&v1# z742?7q}qj_R(7&gkN%V}?9vw(^z%(ii!L8u!WdDMsH04dkjoCj_D-B_ahfzDYuQ#A zve=iSPAJqtd_L>Asurj6mC`jd>YaHhZ>hj@=Y#F$G?*vXYi@z}K0j3i@Vt^ibp3Oq z96zOI>Hufyp~dDv3PHHn>)(HG>#SqY#`lk{%&d~C=&V3}z^lh#7#S$G{u6Q{*1+R0 zF6QMv^1!lt&z3+c$9?S%?{AD98>=?U3K*3Gq>+n%E5}*iM^WPWaz@UF{>aHv1Q4g0 zUjuu{^14a?If2}C)191|y`{3YxSr@rP?+<}zZFw2&;Y_sFx0Irm=6yx0C1#7iVV|p zxgE-We*;*)b$z;01F=22D8i!04%2_)m4+Jpmu#F~o1< zXE7c7G#LkU8C!szl`yQj<$fD#!gA$d&2_YegMpbA9jC4mNUY&s`S`!qVZeeFK8>Qr z0c015ep@F1*WcRbM!WrNpZ{!d^$eVTroOUmw6ZnMIZRw*;Q{$_uuK=vUe3P(BE9>= z8i|Z`!A$$`+}ieaP|5E~=pRVO&bm*Rv4BVdM_z{v-$3flAs8?$EDHP6mNO&^+XS zT@Mvth_yH+7#M*ug#NHK?OA95mggDFaEKMy773UC5Zy4&IVf&77fqRbrx8pUIHKZc z8BFS0Y&b&NO$r@Zm4whHEpy)^B%2i&pH$|PC>J&OuE#86%|w*?fBB=w{>^_OjlY2d z)H|N}+uOkF>)a9pRDSPgc8`Wkv)on@^7Fhtx29(Qx4F^4bRw1_`(SEejQy_gb|*qP zpnj|h#-J{qMCVG%Bt1}`!&aN%XZA?`k@wo6oM{1CHuYYEo+z$)D)`YM4nb(_6Mk$x(+qU{%1&^ca z0+K$?K2g~7$vC{)>nSW?3hZux0~+D1V%7V!8*rGOF~$dX>rVr3u35#s?~5SWjhNR+ zrW3f74ZfCd{9jN;NCPkMdvHYI_~uQ+ibZ=LJHMzcH3s*x8t8j2JBC0qE^E-F8Eem7 z%QNdizz`^V-KX3+2PFz;AQLCAwg8;-3j>J->RW zF4zKkui>E*G;|g;v}s`>GBh+LH1z3#jw*XFShDENn?YOK^uxKbN0aGzOr8;edRhIw zRmO!fC}u;t`to+q=`nD~itaMO6%s?}Hx+Sy=nD?(`I+Kymt6vk2<`V>xzQi_TdpO< z#_x`HdkRoV1 zcz;i7cajO+wW+sTGqE~MOm?TEp%J*#5>!*Ob$53$G_+K5IH*WzI9`Re6hwA-sPyrl z#E#p}yX;|y@#Mu0q2iNdmkwbKhN zTu$W$HJ$}gar*zaw**#lYQ4?n$+X+6(B7wjtaw#MN<5rGp7!$c-R;BG3xM*_Tdvyy z4=3s$)ZgEmr-u~!4l#6WWJFeO@HN6azz9DwBm#PgRO#we-}<@3AmgT1wIkwjy+;JP zRb+cK-MWqLA~Av<*CASnhf2*6aqv~Bt~!uc5eg|*1`IY-1sP{hyE-v`^ZTEUz>Fu+ zcpI9j0X@%tsKKlCIO;p-BQ3RZldEzxjWMjQe8_~QfvWSvS7xS{&ad>StO^RJ?^rA$ z?vpe$Zm)b9H`Z-YX6Y(ob$$4Kxy2~VgsHY|k>X^<2RmNWHUP!BNzHO(q}Vo#QnAHk z$ZaZj*8)HU0UV7m)jeORHZ1jpE7j-bBK2}zD=6RG#r`Cln*$kodskK10b_zY=(TFy zp!qg>dS8!^VMOULEG#vF$5yIyDHQ`nO?&&If`*E=oMCe9J1Dk|yk`0-((6^1pM?u> zyA}12l-q?sa0-L0hT~Rjcup*Dlxg)1ReIymyR=i=OrPv6ufU!?)j*;Qg^f9-HXQS^c>@cTGDlbB zC2X-!uy;H3o)&-~PJ*)KDCF-i=F99x6HQ#EhWaUc)*eIr{O*8(+xN#Up+`r$HPvU& zp9|A3ET(msdn_J|NJ5pd3d(%T#hTy(gL*#P1@(en24++_Yr%ROunBbYw!vNZ5z$B7 z(0JmTqSAazzgAwwDag=JTZ-chLM6b@lp!LXX+hT)C^ZJwjZ`$Wo%n@!WK)ji^aOFXL-; z@cl{Pz#P^Mb@3y;J*H>HUIU&IV_7Jc_p!(u{gqC|C1;*CQk4@?UoN_}PqRn)Hqw?W z3ZyB?9Eh{px((DZl(*OZZXWP4K7&@-z!ETYSf}%tm4}B58ylzk#e_Bm|6^2|-vSJ*hj&z3>M zO-tpSFMqJ_!?)9I-owGg^;ypjzgR$wpWCIC(@xP$<@cW2_@1>%DX0B-*{@jQh+VP0 z^JbBiUsV9_bdCqJ<~xbDgd zE6VuFkLA#&`TOJsI+l}P@hw?B4eU@=gM(iUt%;T$>dT{Jg-h9@0_JIFqt8@som&j= zeyQoa)q`7gnQkRlT~l&kkG;-UTPaA?laR$Mu{xNVs>#WY7OD`ry?#kUCd$E~Z)Ro( z;LU&j$#_@;xMymmXlf7%SlDm<0Q&_+Qc&cvva>Y+ptTl@(mry6>*t^^um9Vo1V*M6 zBiXBT!%4}4@l(vt>E%2mSd9_>;H; z@uI(8dvh4wqKHn|=Ixo*A%}u(o9ykW zveZfAib!*As3;_PLBD=gJ@^nX*Ko!~C#$Kiea;1uF7UU~iP^Y>6O;ejyoRSHLlH2f zT#|T3Zz@!j*Y}%m0z=^(wpFLXjPnsjF$Q%#SDgVDlI3bWMP~fTEArjLVgtvbv0;YE zXkQE6+C6w1;L$aDBhBVNa%+p1WQXHtnzMS?>po{}NU%{@%Z3624xBHZTriqIaEg;) z7|c4|4dTC$Mb;n8o^aINMds)L1$;2V+`f>uO>*wl$Gs;o|Bd_nmB6+E<`Lw475w6Q zvSQ6%a@^lXu~qzDurs27(cXR{oCms_Br#oyF+QMeyoRzj18WL~+J4w>MJqa59qJ>O z>KRY3`2*etP>94wMt<4dC@=jH;t1^G#roWOByxj{jiF2VJRM)4rvbdD$+l`z5|?_p z2(Vqx&M!yD#)?YIEzGU)*c-Tn&HrX^0OQ|;(r-u6lU{yR{~G(t0n0=q(`{H5-tER$ zV|aNeFyGdyKq2>=)~RSHCkGD;uzKBk>w(#1ykm2j4IEc3QtCfrudR*stRD0xF&pvK z=0!_xWRL{pw`_1p+YH;Z#fE_|PFQCnS%x2S{O2zly97@T2fPBxvv+FEQhe1-O?g#S zP37%bUtvumPZiy#rxyY$pMT8}JK&PfHFh8%zo+pO^%NEy6;)NsXtYluJ^Dq1pV?fN zwkTwZ68}SjCVa`ojix$l?<5^fFS=K1G&lE3yZFc>@17t@(@D3s`PPt+z_?Dg0Xi?e zokHb&qGoG3s;x8>I8`fu$}@d;1LUug{~mqNcTZ80Bg8s7rcVvmY%Kv{WIiYI*S{Jo ze=XQwbrb95gRXNAtN+B0UeN3R$bob0k4|uRLfx*irW-2o&l!k5y>`alCHW`5{nszl zcR2b0j_Maz1i+un@IRZvRUN{wk!1h3KGOgH|0g=a|Lgj&5(#^I9F{e>1Qo^#w}n96 ze#lqoYCOzocfggz3ctX(YRxX}{yVwMD&~yjz}Py8I)eX={(J$z}by zN3T#arYTk`t}1r%06Zr7BG&(5@4cgU8aNfU;S)r5m*%boNIk(0UQb+pZmNv`UiSC6~UC3&up+XP+6?2og_UetMJoY_!!e(1xk2fKGsq@Z&JL9w?8>=$Z)!D-nBRV5t%dU-v@tjlytD8 zX4k?es}$Er>GwW8=qP@EjcVJB(^2q-gG$nks2h&2gFiF8kdSfx>QzoWw#U^W7bsuz ztNzrog~|S9p8l1+hatjuy6p}Gi$1Hbcd&bCUKY}%N6Zuf9PrQkr*9&YE?*(VJANBz z?U@P>sa#vAH263I9G2>QQ>g*finh4IhiQ?=eIjGE@I}R9?t0OsY zyN$@ID@9+%mt9$BU@uy?IlFYJptV=>qHen6`Y=z6$QRoe>yzG(1ky$Ba9+DMgOV@! z7fgB}`s0dN?v(Yt`Ss_ z-4<8pA5nK}eL)mJz+e6TMPP`CwK%q)X{&7H;9rh}>fJVpW+q#k#f?WxbwG>Q)mavG z^oiwgh|jwbGEV1pL{%`oavE6fkUrK*R==zL)qKZ$tNfAkog#iG`FqCK7JIcC0`V4F zm~MZb{BSacX~QA7mFiV77AMRTM+m}*N=Dui$};(qw)@g`{CF4sH5h&iTmLU0h4b|l z$D8D>iyax&Ek&2154IyNuN!G?<&rN*+~mjk@@y9-!&bXI$iUeBS!u0gZx~* zxlxQ$TJOR_$Ja{-2hf&rC7ut4XW8=zoult^-K4(oSri5Oq9nb%Aogy9on5m}!*``V z?$Y(MyPw}Wc02M<(cF0e?5>ypEph!mzw^DDEl>M_)nu`i@Ji(Xj!ak0V>XWTl8RgY zEwfw&>8;nouajiwRH+gsDxCLa+pbDAsMBp#;(fK&{z1HsN)qu^Z$G1#o+6riT;WZR z^KA3%-ifj7I`oEBOJ=TA>q%0dPDA6seoD(63WVmI$IATuFZlv<^!5ML z9|s>49{*3@KLYpkf8F*_`Uv|^;coDI^85cPMht=6y*-0Ul_L4`fQRm7=e)FA#Y_-L zy04Iy$t7eGBkjr2g+I4bQMWYtq*s`7E?UP97#T|V{u z+nmw)yJhfaP>-Se|0y4S{v?FsA-E;`EBEh6Os;}L(KUTwDF1J7)T@785`jQS8mp){ z@F9PY{2`tP<2yijo!55}mt(pPPad$a*>B)pM}1&sVa>HLSzB1qgZ-tNsmFi+=Ldw; zE9=@V;8>wCr)`fvK6#%z7pdIG%d1`O=9&F>YU(KdLw~PbI49?#e(Se`Q$7;MlB)Ti z+ab?4=hH5+u$B8Z-Y5R_@?lBwq_D~F*VSxXMe0ptbX>RQx7PE24~5-%!u55?6auNc z0_M`|6MPez`AtF;TmJ*={SJ#f6)JEooBPh!DR}#+4yTdZo~=2$)O+@&1y%eC-k$+* zR6Irx!oG6fS-89DB_<_x)st2Oe(Sx=ElAx}q**V-?xS|0Y2pCOTI&4_xdqczX`!zbM-Dlg` znt1jxTAXok&boIU_!3v?xE|5bNp?sY(8V`GO@d@!J(`H;%f=eoL+Rjx;;`_sXp zp+v>$2&rbMNFJ_pBy|Ev=dyKirr>zS>aZovsTGE7(cb!4y~5^x;4;*9LaiYu_{bN7 zF`kJ~?k5{|?OIz~%geU67M_bW zLo;|@DC$Y21rm_2luycqf?AgD7V(&>UP^_Sl;xG(44sLKccVe+LnskZ)2*b>pFLcy z$O=nJK+RuDqb|k}P=(d?Xg9>7+-_N!nK?5ihQj{+np6`M8mZyUikDoA@fO88EC5eR z^)ajVfi2B}fz^RH;vjPkn`enNj++f0DipHkw_785PN|YW>B%o|eRg`nwZo!O9MDI; z01t7&C4_H4Dj!FL&`G)-t(I6=SeWAzBzJXmSRU_hn!k+6({J3J|8n{FAn|U3TC?gJ z8qSW6+wLp=x**}iJy>CoNM8j1ZoHr0{pGRp>bayd76i<;6Uywe&wSUz)T{>Bt47r2 z4jQlwQ~#lrW6QAN6(t>)^Hg_UC_EqNc*qx&cd-LwikO1xyTP9U8~>Dg2WfnRE$VHcO5L|#h0gf&oxU! zD;S>N_kRD0gOSm6rYXdL=pZutnZpqZhF%aur{|sp;QS_lyyRJLNv2A!kB<+vfbEA$ zzb`N5P#_9Yrg^Bq_=ud50#uHtm;0ptT!mP4bZx93*M6P17S7r1yDIdKV3D8Mz@mM| zvy3m3PKK;`B$S7#btO>bQDt(i#0=_b8^~WZ$^nkiKF9Z*n=|5-=P8!T%gkhc_;9Bw zgl;8b_RZ#0eNRu1u(+QB78A^x+d=q|{j(v+uH^^cd`WmP5&jt%NCA>-2x|#5k z6BG(s0l9ZAd!;kko-6!*7Xfm{PZHz z0+-f3N`|#v&cb$r!^WGyn|g9?eG~ZfcFAD}3+)0kC{0bx zh=_xu%>g zYDh?UV;Q(9DJkc!?77W%b;+lGRLacCGI(y+2o76iTq3*%PHApzj`SDHXwl4&pFY^wlg}$Hnb=Bb)`-T{BJ|JlmFi#J|~-@*ITawwYO?rM^3E z(kiYkE;f@a27z#4BG1})-zU`cY8#H;N&M8loNUQECpV8@p@{b`nKF^V#x3^aSzTZy zK680}hghD*p`);!8GVXcIC3#ue@UU}VbCnGHb;q4>BE{0efceMeHo73EFd5fs?l#agV;pkP+VD{}>tB*uiiidm?yn z-zzxCxqWlZfVQ5`Wrn>p@50oUI4RTP`$5(r)sJmcuCi7YN|YSM@5K6N7`?}nIp~NN zq;XnEyv?jUI5NUrU6_6co}Tq3E)sPn^-v+&d>)9d*N#g5KAWf(5O2b|bVdBPWm1Fb z21II9oIOpmYSCzK+KDNHzc^s_YYd{&_qT1lixroCM|&H#C0BOcL3hn+-=NnDg{uVqobrSg_E^Ma*Eqr|g< zW8}fITy|Uo+XuEN(tBT*DafwkX`w;gMZ5R$+V0=T6N9!z6lSh|X!)^pdF?~Ju)K;& ziPeNK1Lys-P!TWSJagV%(WNLUDPd=06Gmc_xfI|o`)@2PSOp7s3*AIon3;m36Ao=x z=e(;mV;q?bx4oCT?X&gctmH4y##1X?NXm4{%5;gNoNb+%un-UlmIyA5nuA*d5jXR# znWXyyO$nES){pEK^;_-G=KLn2=qIV~x3AK_m%8;2M@4Zhb@=W$hmM}}60LaM>|+%b zQbk`SBS0n&thj)DAADEdIZ(J3qiLH1BVo$FK<0p}*%zBhf3N}D!g5<4jjEf=r!mBR ziM$)t_DR}rs?XbAA!fGy`JRIQ`zA^A9~JGQDqV@9Ix=_)XjKi3);s%$kP)v_ol8%~ z7SF!CEe)X+69JjN4lXUOuC^B%0ga%dB8eN01U{2X8S?V-8;vyX9P~gbCwoP!FcVeN zw6n72ZQ>Y#3cYK>`3BW>%SRU*V^V_4M>q1#I+@qrPB}UN?bzqqg;4=I3MaYKmypIt z`Q68;s3y6tTb2w>-i)L(t}=;l`|df61GgVYX}TSzGI&{$=S|;@!(rRsf|87G#zplb zHSYMcYGH+QodA-gai4U*S&zY{mS~pS=Sh_5-$l}fky=_e-6X_Y%tIa0#HD-KJhxgW z6TQj=QEaZp=y4Mq69=_J4}KQSyxumLBuX~6UOI%OsEt>gfZ6a#QPCRmDnq}Uthqaj zx*UKo`1RE9gb*6Oe|V_%{Y~Q6uYSl@fGVFK#G{i8N}n@{>E6kedTwU+OuZ~VvvId~ zcYRfW`*gs6I=HcVt&9JMqHu_PXykFxs$3cv`pyn4Ar|NDEmq?OLO&o;=G@K~%rj&y z1(Y=O@KsYq%jCyPk+7u`^FO+8`pHd3rtX17>$6_I*^`c$;V@Q(cQSfQWM?NG<~mZ= zwfDS8nUszBs#rTbItNLqb;AT@xQtT(^i*Iwr}){-EmBsUk>sox#Zi)yg!sS~ox zi2r1CU>DVqNm-upesFGzzHrIus?R0QNEngK!5*}fBP5BsPP{gdk}oDEW{^)0Nt>9H zBR3!t;kwV<(>?T3`6Xre$E6i2M{L0Aun;UY`_S%~5XKM#L)e)m%&{hX6PpL;*-%j? zmQpua2jXBvK!8eJQII-4nGP1=33zERRSOJ&?BtQ>XqW7OMwV0MHx^GRam(IRw`7SN;7+Jwxc3ZozrHJF4v! zMX1wpV?!AeEb^WAEX~Z88gDMDDuBpT-b~&kXy6z~s&@ZP!dMckvO&N9FdlK=`V-u* z&$X`svj_xUb3{m4|Ed-DIh_#5Chvyl5vCux**a)jnY_-iGGAMm$(B+xw0mM?sq|La zQNhSj@9C4*MoKcZyO$bS*h*arR%;4xi^z?-nAXP7rJ3JJnMWPUV#IC4-kUr+h)sNi zFu40ODh+N%ruo2d|6cSn5=nLai9N~_OM&0K9YA3T(hK%Z1L+tZ9^R5rL5PE+`~1^%Ht?$vK(2u4~)lr2XwLNKKI3MmaqKj2!pKYXF z=pMpRhvm9JVa+dWa_am%CiOnvfe*vnu|!vZ|Q4$ zb@q$-p30XV8{8Y9x>}5Sl*>l2K8)aw$l|S=M6oecA)m-YKHUlnouwwGridlFNxgpi z4zj!Zq#$?T)!T?e%Ah}HLfOJBqN+?rzVMYET1w|Bsqp91#Wn?yS>O7QA}M`O_S$cq z$>9-4xqPy%%Dx!u>wC>+SMFR(mQv8CZC}PddBhcRcXl9xhocagWD>idSyHu2alq6(B8bq_ow6`>&p>Agx+KiLFKpUYxF#J-|YQeDpI!M@Q~TAGp3DxX5F z+eP-jTIom`yi$1e*2%y;$?CDxtGDV#mb%hNJ5U}?LnHP}=7`l1VZ5+2C)d4)0`!7# zPCD90BYZ5UGeiDYB|$ z8q{KMC+Yr}U8dhiU>BGv_Se4in0z;m2;K>;(yVqn0VV(1?BWD~CKmge$GwfZ*9OJE zE0eYHqS7-GOyas1xtez{p~hpFNri0yRbv|9n>o6asl1p^zYv#}^n@7OvCB#uk*PVl zSB6u2zs1^?ELHa2mY$i`(Y`dT4^Gft32VgL^($BTm@V zZg;N^#x^`0zO)0QJM#Ixra!{C4t@dSe$`YtOI4J?6>MQ-WMAF~r0BVB>c;`>sJTXx zW`!mVd|mqA?5%UXTjlU6o0Je7{)tc6=AJh=8wGN;nE$NeQbH!_2FMtE$sSKQ)~89U zm0kU0w=i)j+3ikbarEkN-3%}P2#gR!?m6xxn;=>yr83`1UxsQhdV$@2*6p2)L zeHh*}I5<<7J~;DhBMP&<@?jA3>s!-;*Qbprucq&q&&;<%@=%+MYK)6R-YMZl`0cXU zt3KSqay)$ZKSYFirk9-?#H-+3H@%`Xj&5K23t))JJbaNnkMaUS5779*uL=i_JrMN8_AT5I*_<UVYn&nLNM$OEVSeQzHLkWu6zFYi6+znfyKzc5!_ z*y!k}8P9Ddkt>N%fs@-H@89Cm($dPx{WE(9hw13rKW|e6mE8Zofp+~r4fcIp|1HKL z5D(o;{~PS`FE)8j^v6t1(7#yO`FDkL5c1#a|2$~=@3Rm{1_1RwuNU@yv-oxG_?{yBJ{{IdA-$DM#N*;Q{o_HV<{Py};Gfv5&ZupMvpnK+s6d9z0=NCMm9cBD zDCbW^-lUXQuZ8oBnZ`0$?8-Hn+xMmlp7BWc%0SmE1NX)q-{rLz;$J0%=fyiVG+Zr6 zyO6gxZsL)ABr<(}Od5uB`Kp)j`oP{Sjew8<)xpo;gn66JG1SC!_ixAVc_j#{_*uSN zRX_aGFFaspK-QMcK=qFWfkcq-mDF7UgT-i9xf%>#G_6k{zXi(QUYSwxXHOO3z1r+1 zns<7<+oCP(ID=>P*o}npH(&s%`2`63tEy@a1p-}f;N#!cet-%N-rL!+BVo*k=V?n% zd~1hlQb)C~cW9OEOZ<7c&gXlG%Wt%`w=g+5IUo%tzaKF&O6rtYo0*~%nPgy{#5Mf* zRa{dZz26ONy~>}5I357b|DKzRq@8@Au<|lWY8&Jgu9C{VaeAfv=Pz~|JTyrJ`;A3n zET(~5SF*{neU!x9_BV1C5aRT3E2_Zjlv z!_nzFCqaTUlJ;I8@zG5NqK+-`svLPYoNrOfYQlOT4>yYhaYDBF-mMYde!CAV%nQR$ z&0?#B*u7Uo@39rW+1Dsn|M^z}UBXAwdK`^*Kyj!Ub2LhF2z6fj)U)k zAbiN)4h(VMF?rCJBSZ%|#Xcd-W$`W<^D8);TnTr;fb>QyR{R=G$Si8=t;A8jfeRc_ zSh}W)N4~hzkuyLj&<>?K)%uUzyz0k~T)XlQ+Zm%52#f~=Cu-oEkyecfrBPPe@C!;n z#h*Ho#4rtukUZ^BLq8DIp>%EiD|J7golk#fCRQ9~`uPhygqf{<9)YwcI)2m)HN0kZ zj7PsqgsH zH!Nv5w zx*Uf!-k5&vY-gU-(^AC-nteh$G}(NnLWaxn&#C8WeW$|7c~)`zL{G2Ipe|*Rs@T}D zt!4gQ2YhWD?NDc#Cz2%@qGn%Lcu0zOXLyzr&Fq>V4)=Ozv#;f1AEmm_6>hkmEw9a> zmiXPZX=o_ctc8WEPOU5bF0bB2Y&-pjUu#D2df|B^4+@uLe`+=)@rv2&BNVbvw{Y7z z?T(HbnWzUR4%--i%qMSD1`d?t16D<*OCId|u~0gZ-YCOIPJQtDkE^sob^?pp-**g? zepE|0(p)~}PdRPk);f0UC8D0(RSq{8eY2|kUI_x3M8Bu0UCP3oBplo`43BnI6 zT!uG}8S4sQ_+V6MI3t`yvJP_;gyYU{emo{xXGK8fmN&7{OIFwZ;?T;H^{jq4d9;kp zT9Sxu8a`h0_9wTqsWX1zs+{U|({e=Fa0u@-OXj^*LXTX(`}mlF-TiFpA-C(ZM{t3C zfskGYL#tud5d&?uDrqY&M&wAd#`w7p`1j=)J3fcvO-!U$uq~_<31FCPzf?~s-e2t| z=eQcM(PCV?m4MrcCP51r;zQSknMRSS--VRFuYTOv@~kDS8>y~lb3V>{ZyztZ2zk|j zDwZ8>gC1~6Qk)z#*4G~#9fcb{hzC^%y**?Tf$VZn6g%v; zV2h764`;E-FArGR|C{5z?QmRZOp;yNRB2$L`r7E|0(HuxHfVja?14sd!pp7XPPHg0%)tl? ztnk1-O?!SybF(SM>Y2OiuI_B70J4=5=$Su6vFa_E&l|k_VZCB2XusFP2lYzRc<=p< zpTUwp5AXDDwZ^6BPFd-DCrG?@BYAb=B(pibJj`WvhGwa0nP+gWnC(V)nZXLW*V+FZD2vH&uzxg zBu&I0DH^-4=DzFh6yKP!Sk&YdJp0sFjW+i*j^3x_Mf8G&M^^JQtn2470Kcz_ zz*x{aSF~KbfSqTp_*7xp?CA&WQPB2AI7%eg@V@6#S@8q4`-WrEJmdOL*2 zTb8J$(-#37C$6=TDn{G)5ImCFOf=;;Y}=Pt3^Jlzf_{#MXXf_ zVid3|ABhNi%GwtPcII^2B=u8w_xP;jTSXX7B;qS(z5h!vksrcebmtvMXk2{0E}UK| zl(m#crDp7}F2j&GVls?YJ?ZrbU0>~Y6@0eefEUQeQof9 zTch9%|DW#_=L`mv&41qgf5qck@vvPU`DZwd;qr%`eQ~@B(KgaW#_eCirzO97 zDy_Mw50KhxX%B{%d}nq?MJWAHpkmzNigzkSD{*Gr9;;_Af3EBhnYGABUsRlCPL;Xi zlaKF%#rN?G^ucu(t2ff0CDDKBk+JIMcpn0xzA(lBd7QA#V>gp)B^^5!Bka2!olR~t zB4yYCs;$mS`rF5D2};efeU>P1uh&FAS1l=3()cDL`K)qu)FP)VOt>IwH#%$N)rjIV zK^bLAJVQ$SS-k|)^g+F>(U!9I%&8E7Pn=@`Yg;J$PfKKejYIf}7RxQ~)q zi>iW!>GW_`}eh3=e~qL$ndy$LORhLiIQB>HP!f{R8Qr2N*sNG;9qpY?Ym5mbsl7Fl%=C#{+6S zNX>??B^2@*VNyb#@*>yt8O2DP_+eXKvbthJ2(7D;2E`&bEL6{R&Okj{QGh$m-Vo9I zu_ZdEIXyJ^(hm0cX6`d^VgNhYRHAihkd7V5F*&N}yJTJ3& zBXT85a3H^~pYsON75zQ3EwH@xl7>P9A1s*RXDC;yw@iRyW5{b`8+~3*qiMJRCwerx zey-tBa;jPLXq0Tg;wXPYN8k`93J*JHN7})S2q4}5#KMCJklsXXz6Iw3XR?W8$R;m% z%s&P%>VmEC1jy6;)U2wcH+*7)B~wW5G?%{TI_Idc%A!Er`Qrm}>Qe^`3FF+yn8bFl ztE6C@>y>)3!u`{2%-apPLv;y-@awk372t^EG+jWiZi|Z$eh?^E<2sIp^{)|8=r!?o z%0s&&IO791Oo~#2z7IR!O?kB##Uy$hJZ{Qd?by(|W(esRB#OaQBy z#k2Y%UIs3{1`HVlPEaNb@eocNGy2x`O*=i9t8c}!HL5!f9x;n5>@=T6>J57lJWqar z_KAKSM4Z+O@6H$RW^OyDebOgepU=1$W_>5efb2j?cdNNHT;V;!M=~ z+p*#b=4yO_#P#qHCB90<%jL3O!?|hlj0l!lz@t+*HgBSiADF*O*X%69z2ldtNx%C|f>#O2QS?LeLZ-cnX_sP8B)L}fGTFRa#JP@DVq z!ki5B@nm61P<=o_M1b9uf;Q-MsjZ&OvpBMXB3|&Jld=HC=~@AK>InHI-39n$8|8|Y zGShab&nYgH-quw%N71%IVTE9q`iTc|Ut&ufbY~tV;6&jwkJ>UpOFe6Y4iQOIWtD#d zA@Uh43%nN~cg{f=;Te=YR9_*aVYq2GE7~?&c1hJukb{@AIHyP#I?dPvi&$E?YsC;v zrqMsVO{_jJ+=b#Kp9v2I`R>TrA0h(qr+z>nc<$%z9eUZv?jmV39_U*rIrp=G4vf1* zj7xxhem}h*3nGpQ)Cpe`sFd}}sR8%meQrfQ=n*b(%zMYaoC%oce60f$vk=~}e!D9pgoq>xOM+Ft$cuF&=Zpn37edsiK8Jvp~EzQtiYng?n zOCW3Q9|r8#dOmZ1SnJLls!#_1S{XK?IEKc^uxciHOyWgZmY}gfgeI$fqrpsa+ z^4gtd;N%{}@j==-UtJoWYPT?j?!WAu@U`Mq#ueqsQ478Azpuh>htoYLiL>lIk@R9gPDb9Smvui}7*6gk}S2j}cUo z)lyhlTx|)Uhd0E>e_9a8=PrN{UyqPBL$uV_d#UAISwgOFDchlH$xRV#7mxV&BroXcwY8{H{tOZF z&n_aL5M96WbYS>nX&!@fzJXp_j#zVSqH!=YJs46CkjQ=uqk}aA!=FA3taYO}E3X?4 z{R-S@^7`2r88H9ACjUV~6?Qv_C;waO`%1i>{j4b0$D`i4hMw)zPGK+to?U-B^yP(X zxl6p)l2lgkBayU+Y!Jf!Sa?Wyp1ro@u6ePz^~G{;+Es2rQ?yBy>}B^Z?slm0(vTv0 zXX(*4iQj9HO&&b$Bvo21tPDtLB^4nmf^RcjE{k|KPN}nhjvj%fl*7>A>{T}QMAIun zICc5(q5xkQ?=;Q)y(t1&xLZ)zknSdeb>C#Ztrpo~)N~@gj109^w zr3OYd#V@trXAOtiKDq;n&CzI&{QR)QzZtLPG7^X(xcNoE<8&j(vY@(BkG-@7+U;<` zF<)yIDbrJ?ib#@YFg?u?eav z8_=8;B^Tgb_D1X_e>7Q1FKY9$ea|3Rfl2h|I<;R52Au{%1V5I{KbUzI2v)vSPdFXb z3~MTMIv;p?S0!EKh=hel?1b;?(Kzta700p*9u!kv0i$x;0;5W()Uz7e3FhtkJ1j@E zl#`s;OL1ob*Dh`$e0?{j8?Dg#5%CRrAckeCqF{aq z_1*s(+ILv?u3&7d8-?MDtgCU!W~zJ`lUKj&y;OFum?|=(LxreCX5CbFHW_oU3AOk0 z_ty`K#~Y?{-F)^$L!43z(G}JfW@+w3mcH-hxHPv?EHw>q;?Q;rX_2WN}$qDE%Jx( z>5tT7I~4Og!&kg2**!yGH5)VUkW&%Zgf;HcESje=Rd?9ZpLoYU@n-kI(Z(gMqF{4j zeX{T5wc&oNR)rMb6}=!J>LD5#8dLVrmOU5KhgYe^UNs59il;&Kxr(Rj$~go$a|q1l z5iEdtfGsvy-#`4ZXHEv_9aCF97Bw?5hK4Z%y;uAQQ$3m7G0HM{w_A;IwS-@#nV?a@ zf~@h~2@!XR^;{{i$1V;sFt5L=5*j~9b?c1c;MzvsU$9?exUhKjMYd343XOsD zmNDP7?#QR|r^vMS*d~H_x7q}rDOqzuYB~f2!O69S(fA^x9sF5(Dzerq*XxG1A?FmI z{f&uHRu^Z&>@$tHg?%UEyovByC{CrQtLw=DGb#ceBI#$b+Mx`p&)LE`BeL^vy%uZ6 zd}p=0Lq4;K;$#%yOdUv+NgY_5%`f5w%4{u67C}*f+Pss3+N7PnIft6U$G4FCfDH-x zQr+pN&wFE6jr0=j0X0VJ*(rHd_gg$($@^7>M;?YWQ)KPkx`Su99qx>fZ_}D%sj@T% zVu=WwQPD@s7LEh;)spSP_s zOrj}pW&P6k$S>jB+RGIjdTlz(5VxK+Gt7ionVH-7Iff}YgNcq3>8j>a$ZbM$h)+*b z8??G8Hb?rHOCxN5=Q;(Qn_2Kid}Zz4F78AyvD-~X7c*2Qy!#sB{x;jgqN4dJXtFMC zuD=RV{OEI#;CmXCXQ0d?7w``;E$%qKV$?7bgEg$!>r7SFG+`Vm;>olV5<6iw`am+u z0w(sh!S^=MTaip)m9MCgnri^3ME%5Qo=&neIFC$D7|&n2JD)H+ou(H)2)cAl`<{Ys;_*3dSiiEgs5#x4J)nZ1%}AuORW=$gIapg8Dz;xI(>dFmc; zQBVL;u(#J^h|)Gv;dA$-M@>9z{2<~-WEn){R)N@G<5EE;$zGF;vLfP?kB_o&x40oR z_bVeSO8~i+BpceqY=YQMGw$?XUAc>}<=`yVG^FeEA4nRV5j9cKa~1fM@O z?fv>SVjvh=q|5$kbC*rg5X$a6--ecT&2 zVl~t;o_9D1oM8<)BevbaLwjyqepdcMUkw{^C%$YyQsdrz5`CcW=WA82@6A5t>w7Lp zIeV~}SUOp4+!7y@t!&aG>Elh|$$r;b#20|0-Vjk82btQY0NFa1sjJv$*As~k<;fmA z{lY1HkCXQ8M9{}?A3q2k5zr9g1?Ni>A?xo5hR2{8-P#C%Uk$3im<6`7W?%==m$z-5 zVs1GaO%H59)&5~sh6W_}0)}5Zj?8~x4F#RP(x3q7xD9{dqpbuxIa*AfxEoi!{FVFj zjPsjsB112lhd-=uNcCMcV>?PGnx&R@?GgT!HTEPF*o=tHZP^F5R9?C@4xG9)hN zII3!$eAhhwrt2A8+14K7SqFS^_)s;ps(uGlv9UW1ULcjX{guWair=w?No9+VX!tNk z@0WuWf1;_%-<3&BwJR5}t?A23Z}oj4hxnR(v6zDQ`isN3tmyqpJs2Cz?U`=LuAnmf zaRB^+Pvos|*f@pZ;cG842CN3Xn~1``?x#2YfRM<54S%vpl_PJO>^JO)!tIawRsOqX zb3uXI=Dbv~F%z;8TX|I$Big;Ly{ySsj)=$?`C6(vs$fNTgwaw99$LA<0yilsTt66p zxG)(qQcIgcPMf>6iDJyisIRY=L$|z#zcAIy`quI^9fw!>N(uH{(}#6XtHeA+5hsxK zmRheV@p7Uq(PW)^18e^neTp)34L1UkeS{IjXBVHJ>Ip3Kt(@hLycw#o-y^7!Egm}c z9*dHBg6v|L%z8J>_1$Jy5aKBGn@IyIdToY8)rR(X=QQ);AFR|@t-p2D$>+OM_;z0x z^8FUr-QfB|4@{$!(J(B%-y-yR?tba3gu$=fXN;*yiHf=FYo-GWH)0F>U-uF7_R#dr z_%g^UScXI~aJ?>adQ2x_Ocn5?B%@CO>r)UynYdqktU+8YxoDGbwBkLzo%0(A5*4MNN##=GvaV1}c7zBZU2Vvb0{|Ml0E5@kwni;q_{vyQ5R~Xp;d6tmVLQ z93y&LZ6czY*%|k?dn;DxnBIMLAzImM&>?g+bUn27;oOrK(KgESu&1;Ss ztvlCO?NaCO_LCYoNxS8*rVSqDTLe|fjVp{N#xPo4@t~9dfrmnAV^iX-fVg0}f8B0@ zd&9da7#C$+2ByaWkw9jJ-i%9!%%+u<+9i%=FRR8%APdEfLCJ}ZB0 zjmL8IzgMq&uPL&5=LR!8-gq0L-c7zp>u?3-jhK1uaFI#17**5oKmaYQUuhUP-!yLz zT?AB(C!1FXQn#|E58Rq>SQ!@LB<#HOne^i? z_Yi5Zkrd3-bn@&G$yv;Z19`FLyA<#5?y+=AM@JgGQO-EmBwHNro;^h>&YoR{=uAqC zF?9QCbsJurO)d%9k&U2I8)4qoJl^vA!nn*kPTwNZH1d6|>w?Z_{uXFB3G5j-$aO=4 zgfRl6u_ewa0|1Q1pBCC`DsSdH^cJ^NZJnH=xlevVZ+OiYX? z1hK64&hq<2v2OC?GNXaV`UaWpQN44nmIY^u!k!W zKwO8>Zn$1Oju^Nz0R$s6Th>s!D ztl?&c27L_5dYE5;vm*)^22&XR5nwYg$OUW}*^{;@M3MD6zrzP-XwD9$`pJ7EdEHz0 zwc*V+ldKN(3p-<1_XoNVs`mQhI^{PuN18^kFPnPwL$}2PkbBsl?LBfo;99ds2Gtq& zrEZHLtUid@Kj!Ua|5%)2l@xs8O|5^KY!ad}X^Wsm&8kksbk!LX)K>N*XFX}~$B+90fptr%aS;HW_w^U z;*TEEFmm4#H$^uQJ)MPzG|@y!(N`7OGuUq6+t!hWlx!8RA&K2T|a=_l- z{PyNdck&%wZEioF6uL>B391owB-*pt?4 zy*)!3ep!<0TQgLQcJ~9T(*lo?X^7y4!R|%fi{Ts6fP2LaUh+DlP~rlY_H8 zQ@Z6DxnrrBZUKw4T|s+qiiN)R==50neFfFBq7)M=r-C@Km&w-P!ieK$;a-Q`sH&Sr zT5;bcU&T2t3p;gUMg|{tz-1~T=~0AKx2Yd79UEnjAd`SgiCf4xsivp08y&ohEX>%Z zxje4T&8x{}Jdq{<=NO_SP)9ZTX$@p$RZQ(i-x#6WUG)>VtC>PZOvF&U03v*V;n$uO zm79OdxcOTdJqk3xY0c7 zcoWt@-K6V#0U~yJEcKcwDK5vILEy;;;xo=moK`e7C0-`nUBU1oZGIVgP~Tzes+Wg76u11v=5iIXfk&MH8^2?E zs28>2&EYgJ-m0&6q#gh4dCA))2Nxe zY!-z1b4qPsS63+YZ%(3KYdSc*jNNTDyP=HX1M%?Q{_(6xJu$KA+1AZS1H0&cdgVxV zSX%N2Ndm~PE9aB`?E7cj+f_}}%g6Zk^B5X&+!ApdkuVmy3YhZuvkw~^FD5tjYr`77 z)26*9auMcsbcmT-pY43u5Tu%6MI}}81y+Ue2P0`0&edt?Y8#t`{P)wEE>vGAnrzE#&#!5e3_7j#woemM(gsc-MgcolWKw zyWD-DG|@I_V`1tB-1^n#Y^hVF1zL3=v0S8ZCifcC1YBV!^3v_EKM$Pq)g964KbN6Q zlU zGd9ow=ai$diYDtd4hLKJvgO`wfbDW|b^!QoXb!ar*UwAH1Hd^ar!w(8!YcFbxW&`) zmyjBHv406<9lTYKVnN`&mIm2*-CMT4C$-w#2Qa+b;MmFd=8{*79IGs0`84jx%ginI zPxf8#5LUUBK6?k#<^(6@2%7D93U#Xdo{*)!E{>2nlzWtQ4lierbt%xK zlxQP*;4q)p(;YEqMAIQ0j;ipKJJy#K9U07BH%;asgl+0rdMGLxVkr`u*un z$#OPC=R@Mi_T4PLaDrTj&UMu-%n2JQtf!ab_DC#1f*+lG=wcqIGjXJtP8U7hYDIqw zm}AdsuGY%cMJ74E<38|eukYAKD9>DzUNp($c+m#!4S`+sAl>{1-+XJjEO_*Gb$QIS z^vu7*RYYLV^Q4q!wUeqyWWd3FZNaltpKvZnQ)Xz~f6W1jGCaid!NZZ?%6V6;`SN(12LDzfJvz!BKRmga(- zB*3I&Xc$hCP?HdB`MG?)Li8aU_r>}wKz%UVSjaCm%sCcloyQMc9d13Lm~%Hn-U9Yc z{CxymarCsngO)Xrz}aN69OkBelu~p>tw=MJX|Mrqgj+m2eh}I?iys{B6S4p zy&3-(;SV2SF|YIf7(sI1|FnYR72Au1;wv;}*6 z5e>y(ky_vBk~V5blUhKX4J(FlS;TYyY}4Gg-@C{lI#J}KmSLJ$mUieOEAcr=VZf8b zMgmihu;YUTTBbw-Y~ux}jNI}1;OIw7HFXxAoE1Z?0MDTvPM~e;JHOzmubspt%iCiV zntN&WRMy^wa^I#zq)MVP<0HyWWUPJZ5i$U_hm2naF?XJD>zn5;<6b3FroJ!~XYB1Q zRGyuqWP|-2$~xRmuZ`_VB6PZ#2l($kx#-CZ4BO6j$~E7(-hO2M)UDaTuD!2zcu`^p zj&R}5m=bAzX+^KnSuuW7qgO4v?mmE=N<!Bnxx6{;nGEOn3yTrB3+ zHRROYCukE|?#V;fDa_y|6D2R_xKTXVg68dL=>P}S!0>jC z>0rO21$FQ<2#YCEG@Fplbmq%;v(#$s7O)8H(BX>4cwUB(2_Ftvoa(qN>_xx`&0U?< z@?Y!HFl{W%Ppw~sa9jsYD9Q%8y6>uSO;`-X4BdooQP@8)r_%VG{%ZSw5cig0QE+X$ z@Niogpg2kjC^e#lbPb?Vl0&C}(lsEGL+UM{LrTZMAX3r{DXln2Nq0+kcYkZ}e!lnl zp8bBue*f%a&kuj7$IOarUF(YTJQoogN3G<+yGeM*O%?_)K>%X2$3MXeey9{dWJ9f- z^U?OVFtE0tqFmO-k9*hGbq10P zu8KFZ(uL~{9>UkX=Sfyg`8{I>it;~Ax>n_C+VL`Ioqsc)>^(BWepUQXHo_9J*n7WA ztMS-+R4S@w+8~LG5*{s-O%NA%CxL@8-fEi5y=DuVDRI&Kp z3>p`%!B6zGhhLbhnxzpMUSHHvAK3}VaTzy7ZWUv?jO$ZUD-*GYFU>|}bS~J=qUlZe zy<>U~?42=o&O>3JTfhFaJs$vh#I}_;bY~5|jv*@{VqlejvnQo#IB}cBBlb3Mu9WIV zSPO&RWpLArlN9F6$1x!k%ut{APtXtZcq`qrtzInL&p9oKTeA!T{{juU1NnB90HR6k zn?*mdF}lM_H5#get39)l&IrLw*?7uuYPD$L_05RLMYWv}xw4J1h@#U}v+C$5(T^x2 zrNg=5U@la`L*a#E%FZd_67(R>BmbVVKeU}?jgizA{sD^xT(C*`kQ17l45Pc6GnJfHu`vt*~=cQHi<;9(uH|DYq#B zdr(cQna`E1a|9S37Zt_JTZn!^Q%e;qWy6?sjU>5518-En%(aUn;L)!=0FA~rs6+y% z(ya%j>s^mp&|7z|)l9|CqK{6{#l=q33OZB|HzZKLWqa}txQn_uxnFaaUs!E_=S79G zhY4dP6Q^=s8?+_Vu0!cx=D9LE_B#vl=PF|OgGQaq)eS)B*L z9rupYCQ=Hpcnrr2X70!FAu4+Z=lz`zQB0v`A7&`m zMN)Q%$4s|H9nS0-RDiqlO-De6K*zGt>QLcm&(H>?*|(&0Yvjq`x&V^k<{Pr>`1UZS z&an6B6pks)psE+~_H{*%8hOVZy7~jI@U7o(gU+jA3HO-R8ScWa4VpE8|7si34C-9d zW)d0R#uN1|CLhxyU@WC2X+Ew7O?`5enAU2)o4wi$w(+WJsnZASa7*<<**E_Yx!G z`X-uJg=2TUxnc#ROfwh?HQZmTlL--ajdEV5bReD=f|}^7wTx+4jcSNy_SX_<4wsbo z+mlcYE%GwqIGZVOHx$j#)Bq?drePD0^sxV|{CxxOqp}q?Ykd?p%XNXmY>v3(C_lNd zFsDjCyJSbxAv7_SlRdR(-a#&tvpa^P_ezwo79(DRSf)8!&q(zFFEx^a5aNn~aSYG) zpgvb?ej$AndQX4Ec1VMN!=VoBVUkgJlB2Oit;`lfgmp529hjB4m=(LsI69^lIoEX; z=d$G_YHC}D!>a9bCZ^@>W2luKEA!`4zVrV*Y)1S+pVUx zIhOdKL7U}@EQ9=YJ2NNwTRHTFgtPcgu1)EOx;$v+lf#(sD z

`c-2~ajo}t*HI<_NX!*2de~-O}Yc)q(l=YFD(q6`!wvAkkg*J0?olQIeX!2VM zT-jf*6G}ZxuOfp?j1&^te;Z(9#xfqxb>DVgFt*auNHon-GR>MOP_Hi}-0$Xdz|Iok z>-C{&oWAH?g(5$~464~W3Rpt(q^Gzh5IdK}O}BYeJ8Ii>kTQhbKs#gjQ4EVhgnH$M zWHX}q%*bOH2QLKoCS7n$i^ViqI9ht6}ppMRBlWWo)~j$4?nexP#9UqZ+(QB`5yin zS)8O;E?j%l7WPA|Ie0%i@UYAOTo{~73jP`b;rs`fG>`wv{~WHhToZXZetR^UHKv5Kaxv1CfT<%@`T>e5Zq#Weo>g$fFLApT zC=E4rmbF!6=1<)oBMqUvOe^_NQ9_Wv`VS;g(L~)mmQuvPlraKi7*ykg@P=TYkp~?} ze%KC(fyM!nwju4<3i6DZu*H~>PsU26KM)F<8JJ4Q zSw<@EU*xV`Y|>Zvj^r%brvzW@nhdTHfLA=F;Al4&md|xO>9rjfsYvied+2;-mQA6W zcrvb}S!4cZ9rzGM@qYJGiv)4;Tk$9QeH49$(~D4<#!bmfb-C6h&qsy>UPlRqU2JS5 zSZ2UkVM@FA^6WOsDh{nFha*hjLTVlIF!`CcE*af?8_W+ zn>)lb%94eFamX$=p*k20w z4f9&`bm>oD9!G{y=ZgW`&;+9rn??)B#8uzO%opreZ2U= zh5qKsz1t6mo3EV3Z-Yp=D5s%#ztCYJmHT6#S`4KRejQ}d3q0$E%_LyV(4@dj8DuN2U#ogL9uN}PL=F>EdylN)(1tRixD7-$MoX`@%s;G zxVct-#R5TANToh7TyB9CQ>?4?ttuoac0TjU2T5X0=RRzShz+b92vy_2-o)oLf`L zDf9pd!mj1i_*ssTD2}B}5kwre#6ZAv0g?pZ##5fTYBWmEd zQdtJh4WNbq`K=-S47=Cedo=sh>h_}j6uRBotxAkpbhFEWf|{D9PEiS@>~owLN)c^S z<5NaSE5(x;@v**?n{i$o3p6%ToDX|l)^;C*yvWg?r<y}dn~$E3Rw~b<;8b{u?auzZKjx=Zf zSFFIBMdp~#Z|P-=gjkLaJH6C`StYhrKXxjJ)rvZfHRN4${DrvnL>vk zo4l>Gz!Cq-UDgu>?-0vXtKToswx8Psx74|uf`WyqvH*TrhP+Rr9f?>`&XU4O5C*@v zHOQgYc3b4DNeD3Uf}WyONmY5{)lGc7b4yQe?(aDAvD!hc*I5R?a=fOV`z?gmWg?<7 z(+;wFe|~W`)TEUo1P4E`ha)WZ%@dpaTnu^iz|}U`Vj2R*-~emWiGjs|$-CnU_i?TM zAa7}sBxezGc}axLTB_Q98PIMB0k^`pE&SH{k!8h39)m_8BYf4a|~FHL2zH9#{~ zgp*i)4LrbfYCN^J+r)R5>})Es6HW7-Hgg;p%Z+xi?zg3oi(xdE7!dLK27H#`R!y2c z@h^G?jWhKxXMSLVp(gycSh#DUAr~PpK5kbHG2J3$Ls9zkpd7saL%W(Chy)D7L&ed) zhD*OFU}CMgjx(SS7wU`VOt@tr#%vQLiePEH_>PFj1XRvOwzG#ED+O_m#h#_I*Ir}y z_EY6^a&nfJmlF~a;Mz;`^H1JihA{R3f!h#s;b!P6Z9ixr8S@xkSYBMEr!Yq^v5_n} z|BM!FQWdtOIROn-JROm7jYO?&B1iCBqr}jneCrps->V~6f4pC=@05EU&&vPl@Z;(? zv~e_3n=MnX=yt<&IwBI3;Q78!3+beD@)-wUTN_4Bny8rTVMj#=caqo5v_tW>$L5?Ug2egs0YZgokm-Ky$YxW&7K&{7dG3 zq9(cT&3#3i7H~Q*L)wzI&u5gqM6{B)TiNz^ZQ|X`4Eh~5Yfl6@msXn@PYWE|9tJR+ z;NaXxQ>Il0A*4`qc0VLa^ublv!6(sHPczo{hYz ziS7d)QO3#FN0DGh;_Znboa3R3P)-xA8nTF;hN#+lm+qZvx~rM%0}%qdkDWCfqQ5el z^4lknSZ15iG{p`S<9@z!oUOKZ#OxbyT!iBb2T~RLVIto~@4UM?a7gORaA=?7!N8<;YX!o)Slm-`lC{ z(;#wSXJ@Alx=67?^sRj!2^f2jYxDehT~`x9?Px=inxzv?1{j#%?rwH3Cgf!-j$M}X zdL?mU{G_-lTZVt8Md+jcXg}*p?LD36<}%b-LN=_P5>Y=o1R9)66g?7c3w}EKR}`T) z0Nq^t@jy*dS|1nmNZ3ryP5X+-OAPy1bMW7lnqN0R!xn(_E$4&F!NM=XVSbWJWO`db zBjv(~(^IF9Hj#?+S0pA;8}!3r!@dz;467Vhk_yx5gWH)k)gBA(l;7a#0J_a%6^ zA|@JZFM^{&NhtRjfHofF1>l7y6x5+pACd%75J+LySgu!l8$EFvIuywrsS#W4_@o={ zG*&)rKc11R$?}>MDlC1F`y;AAfXVXiNGpFAvRAS9i!v(u7}O>wbsOXhC_wCG=td#s zd|hf&jCRQf8FeS#Nx-Bqz24t+`gVQW^L{#FCL+svCq_boldOvI*(84uG{5l zWLId;1`fuy=Pr|r|Bn0N)5;M&nYWA?obsL#?QDt4aikez8hSesJ+y@AO%tg9RHRnY zQi;HD-dNWkLeAXr%)4Y^VdF36#{CGs&@f*JHpS%2lM?(LkzzhaJBzKPJs(M&KG+q< zBp&(u`Z6p(6C&-wL1<}d0XJPRotM$0*j)Zn4vzc#YH~`TI>*^c>gBqKo1QIf(yMsn z4?2>a(O~EhKs7eFuk)5Li;pM|>@y~E{>r69$J3~S_a%LU-TKxJ;{6@zk3y9Lx7eZ& znkMWFnhwz^K$mjIu?Cy!a8Zwl=C(Kmy2+3f{ zhzeJRcaG=bGFZ8H_Db>_VvJ!Rp{dJRLbn|TtHQVj%>hq@=di8)BBK?<3g(4`W`4Yz79`q56JzVFw4{5o3Kp{q{efaos%R8FQ zw0aXQ{_PneHh#Q`;@@I;d}Ei)T&GmjZ-(Yt&IrsuTprla1UckeR; zrS){5%FD-|0~E1C4b|Vj=gkw{blYNz1LU zOIki`BB<0aNf)Av{vqFAiwg~h-PF3ea7y*@=za12Zf-M%E*kcCzfXHVG9n64h&6Oy1oiuKdz=<4DxBPO zr*bxD+q5(_d;9v*%}wrzIDalIR6Bxyd;D+O5I@y6@jzJGqF5JTt+yQK%ipPD>_&8B zG)FSbWk2&G*x1=~va*1RzJh{6rN@539ty(zA7vpz!SBz0KAOK^l~M*j3Qlm1>kwpe`$;=Fr?2UeySl^w22r0H5Q@ZY$h{z-RwUVWtOV z=22MGZ~GIWPUQ~#)gaVq&u1-dVtD9 zT4O?Pm6$$8KmsG67A+v3D6VJtC|ys{iY|wt2K#wmRO+gmKLxcMIh8y)jeHbka};%R z6jgH+rb#R2fhJXRAMxKRa7xIV@#|-58vo2r5V6#0;g2bP%c?lfr@uZ;ThSTEV^zT` z>={_jSpF%YPfUKgRDh4KJ^{|^HA)o)p2gkM-QQc&4z=0YEmz=bO*}ebJnaLTuA&r) zKnw?^Ul}$xW#A7Q(ksmGDpxkXMMbQ)G$zXyrvzHwW3249PZ=Dz8xpkE4}=cZSX|6- zPYg&i=5@Inj2Yp=4bAEA;QX~1c^OyV&0ma_7etw_wlKm~J$y=s)p23hHqJu{#D1YO zV*h1=Uc<{@;1s;OWQqOK=b|Skb7~ST)YZA@=$4}`oTHiEu>f?*L+b0$i7vpdtDV_< z?5o){w+f!AEF-)YLr+A&5leu(bg;-y-7bP1bQR9lIXhR1BC&&sf*h1w> zQf8++tj@Gef&f=Wy1^17<9d|B#mZef39wr}GC*bG+C~F$2kF@!vCYW2Q;sbrU)sclq zpRK&>67qLV*)CcAYB8e`e{|u;}4oBxhx1 zZ;uO42T-u0z%>iLr7m*hC&tPMTu#POHNS~ZeV#+z0GPV0+tIemhg z(Za_x@?pyX)9CuTHjznQMA20ssL@v6Hzv*zJYxN^DniEHh}+zjz)-CKjP@w8P!xyfMry>I` zOsy=UMHvq3m$yksCNABPz}}}B@9erU81GRa$_7hG+trgQ1YWD4 z5~0qqH8rW-H(JKsk@z;7hNMue$c-WQVFIU|mi7%?g$}aesKQlOC}~rYXF62@T}Sj! zp$m*}mOc}=+~u2Cy*I)q{@ej-4=b>n9by_Y@qXj~e(B}^e{rCKj4tDuG1A1nSHZ1Q z(21=kkA!Ai2M}nhE165Fv*jq4~;@7~fyPkjm_BstmHhN8; zj%vJxiQvf8+CoFtOkf0~oF)k2zz93h4kH{eKQ2TIbXQ8o#n}l28m4ikG4jbhBb(`3 ziKkOl*P~kXsOiXGEp4rAUKZJ*N7`5kzux+?hcY*b#n4*D&E%&}kx)we`V z(9~678&=d0sl2?1tNw2joc=Ydb@zSbb>xRc)&890;M>>RXSg2GQ9X=`)Vd??@X{S$ zt*>$^CF|C^r?q%;0wR8ZI7D5-(Z$rl{UC*3xYqa`To@dN;(PDlo5XgRQP(zJpSk7U z!T{wnjSq%f_CEFC!82kz9QxYEMR%Y2lahx0eD@ET?;B4KZl4N|5gYYQpuOjb{05a> zFy)<*oJ;H~NXz}dy<29ib63fR#f<=`y5fc&$@5iTu`4f_)^|EssH~f2b^f&q_I9^g zfP)lVw6L_a)Yj+BZGD)*!Is6Em6?@o`6bgjJHyV#!bbRYN)75WeBPlSkPBbang4&u zg`3{Uf5?S~Nc3&wF86RxkH8%Ve$_R=JT${Vw_6 z9sHH-PQiD&@z5s;kyGF2l}@oFH|uIz1)g%2lS7pGyGLgBt%)*`w3(miRL4eD+39+M zYK5 zuU`F)_A4KPCsKYIeDXt57egHo=QQzll-w^%`1w>aL4PH`6*lq_GE z;vzDWaO>^kKPF}q#=A@#eS@MFsgbKMp5S`7*uCBIo|dP@S4W)6zX)cSAL+GV>}=}m zEZlrld&GhY0PHuN-K4dUfKKu2B`tW-p*xtakq1lt9v&tXCITiR$1z)4FUMXKMvp&y zeVX)Xq$3npPeYBtE1J1Udvu5Z*`MGwd{>=`E3Dg>%G$X!y@QNS)G}Tu^eh0nz5$$_ zp$~V$Xt&>3pI`9W%+{?|Q%1N~XN-Z5(G)D`y$bezwdH1CDE94dZz9$Mik}-LPaS+~ z+QaOMj=s!zkKdQ2uf0$EDctx*2D>NubiVJlXYp}|yk2|m_v+~L5Zf;mEt}|}Y}5ql z4?P*%Ip#K_ycAx8m%r@#w+#H3_mw3F>x7n25yBD`qc@Iky?Ou5qRY%WuR^d_+0P}r zYTlTgb3T|o(Zs~iv@h03f%rEP&W9MTG6!#0n!kSiS~ZVA0_sD34%{2Qu8oTeq8xn$Z~+OtEU7KAwbHI2(nY)`1i0mm#Cfl< zox~vqKHSg2<8rxEc_j3n9W||C_s0gm*_t2aRW5O2i%3of5_ygELyt)>S9q2SUi9~r z?ySvyTXx}4v--MM$&XHd`m!>jk@p^#Aa}XCM_8JnB$)|Dpe3E7F-RBgYICk__~AgX zrDW8&pW4q_J}e(Zt#$b%XK7keu{`f{90L&*8X zJ-4xXfDbgbh>rGiM`2iGp6Hug)$pux;i3Q+QS=tcM9E+_%QYr_*b z$bsYsaUQ$VbN4vGT1F`uR~-;P(vIW8f7%cNu5dB~BKq+b73y(zZqhusiWt8!(sL@P zjw`AkZ)Ufp7}Yfp*!YY67o*htmq5G1l^Z1_SJJJC6%f# zJw{gh)G)O~XnuYs-pG#@Q5)uh1iqrfz*a^_Mmv&LS5`a;&J_+oR2KpIqMi}nxTbVx z+&7HOKyOfRXIK{krVq3?E~0(_ zH5aNdo&I7RY1v$>=j0s!X8jaNfAr9bs<01FO@!xg9oPNPs?`^;f>ozt3CKt41>4Q% z6Pn~K)a;=X=Uzricai9RzCRziRDNatqR#5{C%w>J86|hR{S^~Ya)|4lRXSwmz;ESV z^ma~w+8n!kN4-C1s?5{&)q=wZjpKsLu|zL?Hb5xBX5{kBLfb-H8$1a9>e*cG?~e%; zf4eLV78}pzexen5=e*QUck5QZ=>5B|4olvA%ON7tE4{F1H(GG|``-E{>z`ehe+jcGoOT~j`Pf&jv_eb- z`JA-E-^Q#Bgke=HEv<)=hRxR3F2)pHAJ_LymB20j#q1fRIQEm(bM#3Y<50pxE99Gl z>$pYN#re4ueeJPwLEnr1iQ@^GiuBgY(X6S)P_+AGVr|TgZ&|KZAl+R=MNEG1i}s7q zFib2V`hDk=9(X53EX0U zGM;SoFJlm9lVrhF2+fXQ={JrdLkguj0Fr57X(7d{ui3}yZ1EP&1w4V50pS;v z@7sah$#tMWc z2(mtDDmm(2O6Trh5Izv;l=-k{>a!tkF-kf2Y&su{UypF1xpb6ijuFFm)~vPGANVCZ ztCl2ksm-BGD%6IlAg-jq8EpY$wrIzQ_0BN=sQ&6Q!urz(G74S|d2{#?HW;+Fa~}&_ zjWbo2GmxnSv8h-sV^8co(v3M{&LQqvV^~llF{d31@H+v@Odv4nB{P_xc*#{eY0R+* zk+-}iJrF#G{~t9#I3bTDMvw(?(CG(y7nyHzcY`BH98)ZY8b5emsh|aBh_g)Z56R~b z7N*#TO;r?%5<}M5D3OD6dK9poiq0o`b_d$2{Qij!pYxW9z5yiH8AZaE4BI(xG*27? zZp}nq{*bjf#exA@V-QmnpE(!qTD2}RI@&2PesI0ss>*2j7_#MCh1 zC5^N$51L3Kg&dwdUV0o+B3IJy673OSf+@t-o4Fi`Oe2^sKtkSjqy<$w+3y@%t{!On zhQ#U(Ah%0Bt{6Xstp1~eiC@(~ui zRshb8nA1iqm3{zqn%H?_3r3ZvKnD2zcMAbZr#9{bEKMc+rZHSVZJAvAf=t zM38HS;6O#}ek?iYuZulY+n}RrUT@(z)W-Ray!}9btKN48ms%Fvb#@7Y`ZbV^yiY$q zkie1lL&U8dTnZ0dic;3du&$k7e|U6$eW(YwRFHO^xXWo*jwJz>nfE3Tl==xD}U z=nKfO*E~OB|h*H{+tnJ~_wzZSUcR}vRX6%3X zD3DacdC1^EGaw+i$4B(d=1Ya5Ibo9Lirb_kimof9eCdA}s`NAMokP3Q=;m5($8dvX z+hhR`6Ma5gI?`fh=YN3b=BGUP;`eK$;xlUX!6%uPcp*!8^9l` zy3T4e>{R3WrGaZ^;EuNMteyS4>4Z{svHb5W=!P|(5mcWwFXD#OV<@AyI1t05Iak_` zW*_5T{!ZMx25FZ8r<(xfd-d0!smIB|ChAukY3mxvE4QI6)egpT5OcNHu?GpaAQt= z>GS)9q$0X)1HWwAcA>BQ42o<+VpKXHaVD*a#r3yoKLwIMZTcf7Ezo1@)$2LRNNcrU zP>r_-t2Vh0kn6qPzX89Ma={i#SXL+)0?@V&4O%mL4!me)Db0hwF!RK#;k^+ZM`8oZ z^OJjoqB1uu^a<9+r=Czs8qJCs_g4x1k%~ zFJS`4C1S~Twzi-Sc@cF5HPJQHj3vo+(g&k`(NB%HRjZ_kDTL$V=p#Bzt|;c5j`qq? zGsVB#&dhCgMc`sv6N=l17 z{6Tej%HBff#Cg?bxtmeZOu6@&BZ~@nEj6ezrg}_St(#PPqoSiDcO}ft(+R}UKtaL= z&2FP6l+^UUC?lj@ZCvZm(h5gcbGmU29T`_pi*Pg=j$#4A4Pgj^uICXIpaMV0Uy9W) z&OM`C=)LPlIs?4|z)Yg^F8NmW@PrLv!rTT$J130qe_+sn1l$@p0DH93H`H8C@^uDq zhM%35xBPu{$6j1QCPyK` zCr?0b%PK&^@)DM<1S}ixEZSjdL-Jh=%r+mq?!uoi-tqgX#v7&QApfthlt6k(MDOtf zEX<-|sm{m5u5MNz18!e0vGY#+@3Dd4+(Q_FEEC`exnQ+n-AgYREAR7HIyjeWf4TA~ z!VW1%Ep-va-guO<9>aeyEGo>klCKb0$g)|?FWjtH(1Mx>e`|_Z&2-WiAs`=L@qHLE zE1fcU!G_p^ZsNg1JHr{^k<{s&a(Ww%=>VuD(sJx|v7En-{__=2KRsbS> zym()X$P}@h{a+_1dNLPlaVSw-)zBj`wefLLyfa=5Bms~>JQHxg zf!LewBHq<4aRU!~mpPe7;AXzG1a9Bf>#CGB_L*JMGf@73BX|WHp=i(8?aUS=98u|R zp3&hWQvjqQ=FSX3ZGb^xz??elN*Uob5@|ugHM@BLx356?$oRRmf*+4G@hL51U7wth zB(!2GJCHN(Z-F23u>HkCP>*uJ?nyo#2p6%|kGlRZTLhGig)+a-WgGC&9yfE8QDNGl z2#q`n>nfuh`<=jV_j`I~`th0MFK39tJzIkK*aeL?0*Xh(-rV-OaJB|Oc|cQBlaA&t zctdkSiD=lD;6HZ?#uEy=02Pm1VjwNeN5#Yk=3N3|6$3h#D^9Vi7g!Q0+wLnYNnl;6 zz?WP@fHS!P$LZZeEG501Abn@$nd+)e3Wuhpp(Zp500TXAP~WTf`CT%B^pKM|lkY z!C9cRU`Q6W_c5m$T_@Z)ItYqQG6Un<`W9eD^HTRy*r1cRC7o2qoSx{5b0k@aQ+rXEZKTy}>OIaCG@o7#VdSUU8`E}BrU zS$IrMSd?)%H)7bim)E)UFjBu~^&j5D-eltYP!?uBC+j%_19S!z$EgfZ;*ykha`b_T z>i>H00z%a&0ti*wER2QTYycMbA16|YyKD{10i3?7tOF6(qf1*BE6roD?z zo8whehL1cQywfUqwqG(c= z?A&iEW+5;o`n(DEKb3Yc-wtQ}82vU{0n<7#T3%b-yFXzb;f5kqd&YeHTI?+6C)e{9?!oF|UyY&IU6ff%h z@lw4UiV8+QLyP`aE4v*nr>D9|LKVb&vS_NGbt~9VAXJ=Z!6)UxJ&ra5Bv z_`FdgXyu37h;h+*&g|VuyddMDSwGZsTVAw!p~?8IM#!a}^4w*<>v;-p9!~zAqGq`= z(a+&A$_yvu;5eGSDObe8N&HuSL477NxwvR%z_Cq)H3t#_Ejo6D5KD$EAK>==T>k@Lff!=giXpkYocL0DK;xS2Rr=A(w`oB0q_$oW zRE0BjxVglfO}-~D@&KGOt&dwn&D{xy;j7mmezo76Fw2$`j5+|Ozu1+6GAdQXQUV#A zzNi41)G5a&;Z_n=R>sB(EF8`k-z0U_*mkiXin_n_Tur-V6GJv9?p_}isp7r^OED2} zoGm3jr>BvyB|yMDF~$IE$6Q~csmmKkn4 zTy+nFqjN)}jTZ~tX=|q`ezgl|ZWwK_D?e+st*%Osc zh}QJ0zPYsgt)H%>Z`V#bc5Yxdp-w#7uU}P6O?`G z;I+nQbpeu9&^+lKPxyxf>`ZtO!NVw?f2F_ULP&PAEAN+`i#_j%!TGcxaV%wRf$|Ng z6$t@l3J|tk*no3Ap5;bVYIf|TZbu5_@AY^1@~RFSi2UCEE$!4__jJ7hq{?{kFt-R#oebQ%02UAp2h1yn zYf=t5D5E#nld?1g_yeJ;?_2$?@Sd5SS&7YSU!B06p96$q09e{Ja;zdC{lsztgYewq z&Y1mqvL8uhSBbOO0wSWGl~!2rzDudKwXB1SRK=saJ%j*IS~vvAwy|R!Ru?(N_Sz`u zkJ|zem4}^$iAVFPvZqIzTcxM`i&fsOCl*J3`(8=kjZ6F#u8ZP$XKFJg672-BB?8rg zInVWatg=^`jHj!o!K;mQOR}oMD5xbiJ;fXKdFmPQfxfdLvk*W&R%wj2yY6+zej^@0 zLQ8$6Rzy513kp1}4X>Yj#$sHyDshzbqUCc* zPO%|2d9>f$z}tA*u|Oqd`KKesAN6_X;Mc;nn#D$W|4#B!!`<*Hv@SX8g1WU_U2@n^ zqLdwG?|9qSlzsFdj|Os${!gUo|3E%*^LR6yzVd$7bwfAjE$cSK-eRKJ@oY=oWJ<=w z-ygrdVSKNYZl+m6WhH#xKm(bUZRPnoHtI;H!>qu@#h?;OsC=BcmE_}@;q9iYl`F?r zNyzEFChKHIJ=Q}{DXBFVsi=y* zyd7l~ix=S?7i-)Go<_mS1J`a*-}myn^Z~HUJ>%!zd=)rhbw(9WGXC{s?tj5#{C!6B zrZlG=7ZTOC`G@FTTQOr~PYBG!7g>`JBsHmZ+D5wZQX@V4i03$_2gsAkcAiYT^wCEsUKtMn` z1ZmQV^bRV$hTe+=Na!V@g_e7QIy3k8t-J31<9q*^wMKY(&pG?-v-dvxc^>DuEiPO) z>3n==hNY!l9JT4tZq4(Z6Xi6(ql|f;BgwF=D!mut5`)B#OI=rUNc%rgWqzLfD?zA- zTxt21xIR>ovcAgFr%z71U)JFxnW-Ydhu{3eU%YJXo1-Sc94wlQ7FS)n2qflDLxi)2 zvlQcsraIbLmK)V%3(^zIRD(w|#78qmT~$l;=s&A_&!~QL?Ny31x39d&F4_)?V?Mz@ z=e6Je)UxZew`9dG40B?C|2t&4YHMnz=o>DSrD|<0O+B7zCxVfEZ?8Aqriy<$K%Jek zQ)p(hZ!=gc%z$-4?nT=U*ANyeOSUzl*fa`yh9F_SAu%n{XU@d^T`=VEAMcp&tmpb- zd!I42q2iwScFOF|z5wTTJk8mv;<=f%uUO-waZ!bn3q`E*6Y)k@0)>NXJ<3CLy=6DVoFB>lr`_ZQ#e*3fa^g_RC#T%C>!KQrnL|SP=8X zOL;zR0_{;-m2?37b>l`--Gj;>pwz<-HomQA8Mqi0wa0_L%{BHxz_I61^tHrE9z75y zF0wI`ccO2D^I3(B^tX2V5)&}JOv0ar7aC*FIgC(Fh>=uw3NmJ_?IY77-l9ZRzXbZA z#2hjfwN$UsK#I*(G8Jl*{s5&Ja9jeWuqWYAV%dBcfn~R!=2Uv(q^oNWC-Mqqo3ndt zd-MCO4OjFkzN>UOTU(s{&P(Ik^yyr(MWDL1sIEuKm&^mCHY5lO(MO-(+aB4YXgSO* zPWyTY*D8)}%r3;4sLR%2Mv+F?!K@<@cFyrl?*g#m;gKv6Dz8KfS5z{}sBFRLs zy!r?o^7L73D0`Y7fFs1tSh!(2ItJ)G)?Pk$=?U&OX=&zkb#-kFk2Fjz@>x0)AVC-Z zfum?1bmkmT0lZ(i0;(Z3VhQeXU9|)K2y|Lol-mPM$PTG6i z@gXcSyq=eqyZ&#Ko-S0z0;UO(d%BjFCVD{~DJcoYH!1}0!7GV7ICwJ!<0|J*IiVYx zK|*VMykMA1KGM}@#YpwN5`9wY3!DU)8>1HnZvpW*Af?e#Jx2pMq7hP(;@_8nTUxUA z`u17{xKs?-v7qN*P66pMEi32P&&j)5M!@op?nFc^u_5zVmfZGIb}0KqX^JN~*ICb# z=v56PPt3zL=P_`Po0+MS`@`Ky`#jku5B5CtzCI!{fg17a^Q|Oe?fdud+daix*Jl30 zqa2R-lig?bPMt&|^=BbEwdX#JZFY>iOG=Z3_D^=9sckM!nUPQ}iH9};9G=gH-ZMw7 zacD@VR{KYwMvxq)&JHgZR(&1}$Fzk~bi z#dk{M9Jy(NS1Dkt`@J|tvx1Ucw==Hk^rKCdZ<$McWr^sOJf@A9NfPvhT1rT~Afe>7 zCqExUN9XSKjQqgvO0{#1+P`S4YOyfnvGG$}k#rFJF;n=}P+kldGJ7GsJG~rhv{3m0 zaovAR4cu{16Q6J>z(eRWUlSJ>$0=Er0&vZmlQ(QO$=#ic^Y|^npp6-(uE@@cU`gRR z_P-oHKrc{lh}_+8aT0V+mmXmvQz^u`y{l} z@rQXF9d-D9$J2%%SKT8iB&Y&bMH)yF*Na3o`W#j7+&g@c-Y7AR$cqChL&kyU>*ls_ zj~qQbJnZf5)zuk8s8dJHbAZc@W?rAmnyGF@kz>a9kv#WSC=4vF7Mcs?oI&m-8JKE6v{^PPP`{XRihOrP!)|7_;41Xl-|!S!H1A`DayU2W}Mpo252bHwrR7_wH(D_q7XUhn+~%N8-x zQWz@eTbs4I)IH2^Qef0>iH+_>i>I=>@m%`T3BP4#wirCIm(FQbWY zVB{8eu$vdpw72A!Q5en7xi-V~z!J1qpLtR&BEl|Js1M8``}U(uzn+W@Q`Pdqj8_4- zA19sajjXBV>D}N#L=N1yfMmPB#Qaxh(1S7GM&}YEv7W%2Wrop$oarhbX9T4 z@wOwONrh;#Mi}Iau-j-LELDHBzjuB4P74H+&e>!GIHwLhxN}gMo`XHTbIK|rZv0|Q zJP$*&T6g%735`e7l@|6(v}uLu<^2pt^>`Z za$ByjJLTQ!yv&**RM21O0?-9au`~O>?bTyc6N_Y^jucj*nG$I zoVJj_jKAP#8s<&W_pG~{P}*?CGca-1nf$@>_Es8^;%mFRxKYMFmXfktLT`HdSo?uF zFTGPZxx?krpWgF)<08Ye&Uh05xyDTCwR1xo{#`3Tvf|i(Qt$=1Lx{+^pmhSMCI_ad zjODWvs;mk(kM)cd3L))voPau!i3yZUp%R8uCuRv4*S`K=!8ac-Jd<@u|6Zn&pqueS zsW(TdH&99SN$Tw{()1lK&OprG57f`oSY+OKW?t)Y_>jxd;HVmK9WGos^oYcC z1PpsdLRfNbB=H@M!lsT6Gs4VqZQ5~XQus;*m;k;X8eJQZru(){-%^#OB@}7ILYZxa zJg}vY%bu(n^rgh|+np{gEftLmj3?pcjvcyV@ayh1_$h18)#t1*{)&7t-N$k+5w+n* zrd)0Z&@F4Fj=2a_rl+Up=R@QHAx{V({MXZte!Fs;A1KL#)Ta+ylMk0{%15aYog@kAWgnQE;pUa+dMSSWPCC1W!|}yE6u>(6^81&8QjCzrxp;@ zHb1k_HS2KvNZiaHU>p)oF`#)oMLPS_r$dB_!_SjJa7I;7v|~@W8=>bXMQ!$y^L2K3 zYhu2yV+k;ZYD*3=4?iVS^sog@ zk?!q2(^qGYAA((e01CA=$9{gjN{22~ZmuF}BE}p(8PIKsa=JKd<>e!0Z z%LH@ve1xrmucIwah>WW}ldZ3*y}#VJn}_FF`+De()bj#>J30Mp)r{7T3-7#rCh`3j z^qo3gl!fh`=vY8 z#}0k5%N$-1y2wjc+z!(vZdZk*-gp%6$AJ*7*pl4w4@YxWYV~CZKj%4fh?S8#2hxC= zjM}SJ))B?_F$Xk?w>Ot;Z*SxA`1ba85IMeIJap(|0)Ph2K&TLWX+Y3*@Z+B|8EzMw z&$olfNyqVzLq9H4(P=;NH*{1VMT;=NTy*?9U3>S^p+h=S|DZvRU;R1f{{S)n|4`@# zXW&l+=KmF-OKq~N59f@N6%*|p7WFSO^DDA=sej&V_ys0;Pst5Sxu z7Yt`lDLZ>@oqzr2zX(wR9+m1{uVFa)CNLIZH472thdLT5_D((SpKj}+Z(UNu&fn5{ z&ZTL2TbunF{4LXQ5DNZ$T$pI};yDClXaaIS*C*+g(uncTT#!AZpBM>`;Mkz!zVnfb zKb!|td4vH4{;%Iz5kkj6(R6d0C)b0eCeItzoLAh>Yj2g0UPvF(DU*2$5S6JN*snYY zaKrLHf35!H`cnbWU}S*+65NZFKzD*ihGkzFN6?0r%^z#mVROq!yw#P zNA7Yq0yxmgh0B?fyB>pq7g_XEM$;#=6c;u-DdJxPs4o8JQ_=QkBV_Z`nG=QHOhesJ zjc|@RlCfhZ;j$l|Nr7P<3Qx8LJX%4`Pd|b32VkC{849-!5hSE11!1a@Id{lO9moECZPCK>JSP5HSlZ#r~&J(Dq9B8kr|8#$^c zzLa`bct3Mfr+zQB5&NGlFxiQ~=_T+;rJbRlyCHZiQ%e*55D3e?h=38WiN#O2(93`? z;)sZCQ+$%85<+bFwl0^c+=fVbq4&qkb??3LBd3p2J9Z8p&^0dt&l=|L@i{4YU20KJ zalbiyiVyS(iQTPLKx?A!6|*32C@yeax=KS>$QP-Dbvk~4Vkvaa--|_0v+Y!$xOnbA zyUE1?-N*p#Tex7(DnM@04v{NP4TQuKW5pEXh4X#EZ4WjX!*DcoD_t-2gwqB_#2e@_ zTXiDdLv0c&Oypup_m>YJrydbMp95=THu8sfdC$d3DQc*X<>8Y%t8_Kb_;D!>YxbP7dFaT0HwM7mFd2Fe zox9Agb^;7rw?9Gv>d_U=AFfAiwN6OG#&qi58GZsZ)AKY;VO){#aVOlQZ}}+?)e~hd zrIO=B1CIp~g*+Y|p$`Aae}`|09(eVRTWRFF%CS?uV&!&>g8C#Y#Y^4jdSdOuEzxjj zmmDmDOCX#F@)n#?8+-|2mW$UdOa~J$ZbWI0z0VK$(`=$!GURB)aD0mINUZ?L_4UxsR%tHy1StjR1(yuPZUpS^P2zT~mcI{BHzAe5_2*L&(11r3?!0ZblB%OpEVJ9lkA?*e zY|Ho}64koR1j;;b`e)wjWPbuOAXE<167ftHeK_5o>ge%;ueQ{sD}U+e+!T#|_RPYqxi44ChGY0S$N2NK0n@Y%Y@<-PQrjk_MBnjU+lOFkr@&;CAmYyfwJV)p9i zB2Lk`B4Nahzv5jS(F3E`dgRP|GGjvO1%Tp(JhOC$pb=MkQGulC zh-`gGU3~~!eO^j^o>6_?^k*XdXFt_?qM(PXwb-wzKm8{#3OB8{eJxUh4?tP3W9Fs! z^{;29Kz&p%K_agl_Jz&J-JWRrjQf_M*0cJelt9+r_8YR{(7cC$h&og(Un4nE+Pq9i zy%l1X90_Ly|I(gf6mPJi|b1AqGOlfRAe>vPfoEcnjsu>dWO zP2rxaz4PlDo_~5_he@?Vx>C~bpRkyvp-fvM$6{ds{%)wH+)xDW<*eL&*`Bq=_Q>D1 z@Dq6!`+y|VazQo*_Ea3>%lniooa-qUeFR5z^FJHt^d)#ZOs}xc(%c+>)MK2` z>ukVjaQ~Mc}cmL>bbBx{*sm6_?7~fh5awC*ex}L^k-^{H@Qyi3u*}1LzbO z^I^8Pe!JS&*98EV)N9ai{}lMB|AMRi!Dj{95D+(RnV}#0fnpsB&`3HS%Wp;CbfTdl z7f3QiGGL9s|84=i^qT+93h-~#PHNK#Xo#Oc--9BPwqyl5%lL3Mb%E`2@ zeY)}TtaX3PU#LS%&0mm>hBEN-f8^mOpcL8=iT42?!_Vg;AOocKwm!WDPc||i7!NB> z4#T4+O;JFDx}3vUajqGR%SWYMz_pjEwmw5No;zhcM`H|>UBu0 zNB>me03XhXxWQ>?r6RY%1*GO-Kx$q$aX_9_+Y|x|77t^y@j(O4b_`n4CLs;ouPnnV zd*r`j^G03;5}jtBI07JU)c&`F$K{|KPZ|xHFh*EG2sC%&@j4%%VeWXyXZVL(bG{3s zY?TbqBLa%^Fg_aw-NZC>Hh_i#26+U|9YGB}n6u{N;*R=x1VTVN)4@Amr~X#5C)SR_ z;B<4}&!|o;&aU0Z#wEAHjb0#dbXM&uXs9^`+X3V^6##UBLt+|8Q{XPt$<|+RYO)`E zrabs*8WpH4E&Tod?}PBi#LrwIv70JY&hbIW@kM>~=%Seb9K7N#)XA7gRVoIy1<3hl z*BJc3z7T-Nb}QeDm`3#}paa}dxF3M;`VZM*%MX>|#m^eZJ6+gk5>?6R&(LXsq;)>w z8`-#p?+-MOl(7u6cVV8AITn98;peY^rE95(L?c^+i*1n1njx|m`tE?TCO_0Em(4G^ zKtx#seGl;8hOqgK&WVhAJD?Ju9n4P!?5W6;0{`QSM46&Dc(;99TY**5b;<6l@{+aA z+*Yi}_=UG@-pOy0y$ew8v;rChO`N|nl;h`qnQAPwnE`sLFrj|#OHq&QqM5) z{WjPxHot{*E-rX%(nlx{|5+z=8Xd~!u@ZJ`%+pn;Bl()La7o~)*jmHpn{*>X{zZUp3wf!Ah5_8e>$UX`dUigjBpaeux&f@;W|#+yJGTsRn3L{i~%|n*NZj`vfoQyieCC z)B+L_*I{Y5EN`#4fy(uIk)p)PCdoI!d79S?@Ym9fU{n|ge=n^?wpk|TZqEVPB==d1i zuXyG;O_Ud&1c5)aFPTdR=8H#d!ieARLU_+U2jB;=S(i?o#rwuah4o?pqb@G}YOQ-- zTXV7CR8%q|-?Ay`g4~&p&g~^5(4SWISM{$A;|-LKZ2{quWj-DS!obv?WG<~*Vyzns zVq&l<;=~u`eUbwjdi=x*rU3S5m!hHoYf4>hhq?$*sS@A_I(vy(=8+IlsA%UIRR#77 zoI_%Ka9ftB@zj&wZk1c>R3loaB)^9RP2JN9ElKR{2vO$i^=Ss4c!k;37d#q<+>T&-I&|?|0)m zAFSWWC~;(cxd7aKt&Z^d=IQ6+#E2*ue56WzW@{Ca?6f>K3MguP9X~#MZW1#U)h(@$ zq?Fu4B3-%pu{YSRCq;7j1>hdCYN|bK+%T}dW_EvkGr?Igc{z_aw~giZ9{$={0S&zY&h)odgFY)3;LdZ;y5BPa_N@7 zxn&Hv{$XBux_kdtR>1D0`Q-~lp|^mHdX%Ix<8hvw+mfkqOl9}p&l&!DhzN3of{u$8 zSz;Z*cQM=^QgZm@oUHWd*x9m*sItF-Ge7`>rT1+9ibgFUxqMXvHqq2i;YhkR%T}vv|ztC+Wp+ zjzN9(BGCqBD>M28Ft))wBa29|;npR8C&Mdt%oP$(P2VwGHdG9d0|}SY%MLcb%T+Rb z@jOo#KxKqO^Cg$AA0V0s{W*aonL(UPIP`eoO=MRH>~q*O%7URv+rj#ATd!^1swZv_ z!s0gTtr=CBUaeGmVYN9e$$4~rIDU63RDV3&etEP7=`qYLxjT^~wtSB`QcW3ud$(dR z2^rG@zz1T^j(2XQQ^lQr&e?Vos49d??MWm^JTrwESl&x)((j8Bkq;GDjZui;n4bg^vpma%Xs*HbCDi6ZD=&(d=v6JL<@7Z$(d$ z@vzltMiZ0rto~GevGuk2!OgL~5iD}QTiZt5t$*2msZwljtbBQY(T1gTZ=+{tNy%lZ zNtj*t8aK;MISUqYVujrPYv24RMHs|BVUZ=tfPNysT`_)kCnLo^{NrvtfP9W0RlfJL z(lemn2)PO(xps)Nm_Ajk4ai5r06{yl!+8`(QDtj4Z;I57s`wk+hgUdMi_Rz2hXncC znXup7^1iAefiRrnB<1NxyXk5TkD=p8KSmkxyK||MmFsWf_XKvT%Khv2g*M-mOSsQ` zlVe6q)pqIYBNu3Q^pOz-?hDH#1o|Qab56f==p$_7KQ)^UIO{b~uMxP?!(eR+kAJS2 z2$J^RY_tVOv<;W$TUc)O2Phy~1Azb^5MeykJA8)zO`8CGH(AigVfXMjqI*meMmVAe zbg(cLyIbTfLErYHbx;ESn_@s!9&lJJpJXzxM1Dxr{}G4HaYK+3oJA)=n|JzoY86W z;oq^=Uy=yG@f|yjax?qT`9)v5BuCuJ-2`8ovv6x@#H?)oZaLL1$bh5l27G}RnCx}9 zK(BYFSX7x-ELZ>!?GUhw&3Qbk@=FIuaV!X8&|PQGBA3lN*>c{T06(7UeadY+%EnTL zI7`mZTJ-p!I-W7u)onVAs8F3%M(obcv}UXK+%i<0@4tKsnP#$XB zE1+^z07@33mRBB=YQ67{=}m8r_mU{(PMyA_)M__yx{2?%`p3ZOAFvA?jk^`i=wyr7 z3Y>wE06Oo-=$ZIEkJWFIZPhDt-}8zY*ywe(W#zlF-(=eCtp*`s+g{qy7S(E=({gQ& z`lBUt!a)+-GiANiSxppck6Gad+&gP1Bsb6x=rU^Q%hraQ*Z7?I&kju@)m94B{h!Nd z52!)m=K50j{-t5GM2={aO{b+R zr8ZS>OIgF+qo?q}vvM9a_>d>QvNxBa$vp4;<>h_LS+RMEy@uwHYA&wIl`*eUg69YQAcdX|UhxY}A!8yQNN7DGU^N+_u z2`I;M@1Z-F^?H_ir!bcC%-v{-s=Lw^Q&H0>`_V=SVg^4sInTn#NPsI#@;NELUzpNl zax)@xDbBcSJTlp%vss2$c@-N3yyWH}^R2Ms87l9cmIH#Io??b${`nYI*J691SOd^S zkKzlK%&EG<#Xw1EFR8DUV&e!Si*YtV;@ynqecryFg?c%E_V&~(o_IMcmU$L_N=b)K zTf#;gk4p+u-cYG5DllG@^CZMq?e##4#}PYia7lNPHzU%1c5%2}+-|2jo;+(+y*(Hl z;i*{kwt}qRMMMdQ1EA8+(O!JT90vvT#)9Q8u2k}lnijwLF`V@#u0*+f?;T6XKGy}w>s5B|2tHFa zd2!`iWqQk_oWG%L2m?AANF28kUB(}$r?q239&~DRup{jdlm@1V3jOdepV*CFJpG;_ zn?F`PxiO4(`4LsPyf`kpKNG$xw@Yv@T36|<@DSmgylui=igTmj2Qx1aWW%be3h>#2 zQ6_sx`>|ych}`I|e~it(dmr~LLUqiSi4&WYEnlR^qFcX{=d$_Nwj?3+9w|>WURVvF zWBB>=vMb|M>>g1;j|b0dPwGL=p&fgXOJ$kP{CgQOTo6=*6t1>_bg?Ze15`eh?=(D_ zF)@c-zc^F}FU8-47a-x$1*>1$d7MJ!>~~YFICr+%mkupdHFdtY$BIW0!+EN6`pY*T z`~=a#I-78{hZ4*|+KU0pU8+15Ef&V$c9X_~xdlQC%b(cufU;YjxyVw!vA5U49;;!W zXh+sthXx&eUp9pNkX7Pdf=nj^0WTt{ZVxPDPDM zJ&hMmDt}&-@Cu#qGPlD;@1iV=v%LB3Att^P zrzyQt+-|Fmm1EV6#O(vjQE*5ds+^7y3RD>slyPb7)3DWSG3)BZrW5E#yU$(8wX3K} zMjIDN*Kgyj3|qR9+ge*&<^4y;NS$frdkrI%`>QFraEy{G!tvWs91A*dyE8tX(uqGa ze$RQOd?%@Dm&AfxB`J@;gKZ47Sn$W|d9<0VPw(vC{kOFB8kDwjC(dcdmUw-p|G$)) z$MC4PTO}8o+0_aZ_H{nHTITz!Z6Fe9D?<~+NqVtYeD0nl$q@8YU0S~arRd({`LND9 zke8TeCcFoLE`T%*8yA!NTM~ADV0<);ED{f=$Wt(Fuo2>%~%J8_>cC2|Xi@XP-&OU#PT+`)-T-_i^4p6>YP3rB| z%SrBii+1+hX)`i7@=Umz{3jMtY&Gn(w2OEKxKV%Sjfd7k!5zwpK^(ZJ&G>V!Rd)cS z5JJ&VrDTwi&W@5nt?c=2ZLY}EpjNL4QXV$V=$lRXO{-Uutqt@{tUnJtx&<#-P!FE0 zc~viuo>?IIHJpCmPe2W~Aq?ID1#78kHR(b8=h~nc>LKgFyG(Ie-*wL5>2{-2(TyoK z6{>WYI-`y*{8sm!Gi;^4>f_ zLx01~m}u`T?%cwCzj$x1)5f!Ad1Bndu)RCnS$=dEdS;r$0!w!`36GJowQNm z+jcG&+c_4?81+FK52PW$b(V$4X@4*3$bO+1+fY?)@&G6Lo(=B4K5;_SsWM%1_}=&Y*vRpB`Gzuik&Zfb+~+t%!?gMm0a=JAMo8a zWD&^rEMHkhDpRHl%TCgo3sWlAFwS(uN)knwBr>?{P9jrEk_?T=8c8xpp1wlC$@3KvtaF#AY@rv6_8q{1K( z2BXYCrp~*$&F2}Vo@#+$%PoDRe7V5VWJk^Z-LSg6+asH}P}&Yx+&*Ecd^u=ybO&dM zbXm<6i%0(0#ENh446{^}!yOwcomXK`-RWrlp}77O4-*1}t)Tk{a$AUoK1KkcFqh+A z+XoeGg%n0BCFKeSy-W~RoLap+JvnJX`Dnt|r2KfG2ljXJR+5g!umtcO(e?ZIC;1MSGjh zqyJXE51hKYR@wl&$`;Kulk07%vJ54Q49VVJ&(9dKOpIjz=&P{~ht7`O(%k91biuJ6 zC)w2Q4IcPHz>5oCt`nGC0Za0nh4%f47K}A&0d~v9;};Nnv8TV7fH!Zq<_# z8Kg$8wCCHNtQ~l|>YGa1fsT4m?KKPh{IM*&1HL{2x5Yzn;6ZC)g} zto(f2HV5ovr>~ZVT}H+ZtscB43&A7omKtKbd`DL-2}?o@+f%& z1dB*9EaX3KXDSzQ<3$(E<-#XRHfdrR{qrZR$qDwS7@@Ss>S~^IGSHv#+O?OFLIc%V zAg=~e`n6!L2tx_2{2y`6TejS{COIJl5^Qx$PT$@7k<{{h6C5{2o)#Bl-fF5h8{gSx zD$cZycBIf!N@o3qt=v}SLiap(3r(0SmdQaNv%7M|QXu-Fk@3Gfjrad^nNq|gy|_GY zFJGY>$1q zL`tPZ9F#zMQe7AJBKfLI?Az{2x)R%BRL2pEwBx&@?^)b?mqVA4^JGcbw&xlv28%-& z{Pow@7wjX_Jl4}*n`hW7cC>rj*8^)6WFt~-IE5x=}U zqkx6O7cIoM$KPQ*7h{A+Whh$brYN54l&Zaza<>_6WLy9t_or_;bo$^j_VgtTIQJq! zD$WkP9M@wIU1(8<<(2SKw-N|6-J8s&CynXxEyvM&E^jNk#Sl=ut*x(;nD=dJBdWFm zy3%vjV%+sd+g10SpA`vuPPHuE;=rB^L5qKGW!4U~EJ04GYE%4M_wh8_d>w3cD6OS) z4Z$^+U)8%BPp2ErIwrZA8=)T?x2Pw+t+&R@vh%tpX}Li|NMfTH0qS3+_Uh2k=rufR$ue6l)t*g|R8Xm?%YQER3Z(Bc` zy>#iHV{02kQ`Fw1=!_%YLr)0KN?=P`kiz>KkQ&J8q~oORT7>er*1dUgJ<`A)WZ7*u z3?$R*NvAY5i(&g%SrBm)n07uhUd7e@k5^KAr-31!BLJsPTnA@4sK)LP#Kt$bGBG?{ z0N{nw_eX&Hj-e@+g+QUYDGrRt@n<`I1Om4Q z-<`#_%(-gXv}0*q44d*!pv#t1B?IJ0K!B^{Mkko06@qfp-_K zmOmV-r{Cpbbt?Vylv&%YZl0@GBu$!;bre>f!E_3R&}PJk!H$y%#~LU_pUE~B{UKyMVVUuptEn?GV zce1Q8S4qm?R;~+4lafEj<`;LAN#nl5himugLau%FQ9AcE@%+`JUwx$3_Nozg z%Oi{E%T0Iowxa6WD-g?Ve~XQ6PJYami`Oh#9}QsH|FJ2?tnIO|zqvWK`UtPPtXnZ( znZSxD7NGaoHpQn>R#_+$(VUco)M=zsFJ(HaNU~*^G#g`GHtQ={v0=Frzag+ko-63L zsah5ngzHop)OB=ptgO6}m!F--RP%VM`Tnd({|&0AM}uHb`9@|fgGf$x29w(D_En_X zn5vD%!W}W8WZ`;7hiq||ZEwe8k{+C^smsY#u{~?%k6H{fgD94RQRR{s6+I^#1j+I3 z`s+cItyyHr91&@nz85dpvcIp=r~mTi{vy4)&T5i2uN7=tJ)0i6v7?Ry-{l4B({>};g{FN!G9zdF)ht)fG`w(4V8nwteP#=HtE|p9CT-T*U?W=Rx!n@0cW2)~u&33;g*8auzf2ahI?~i% z*1IaXUKR>F{{kcl@X|OOgGo{}v})GU#XjwBW_7iGh5DR*xSX6^Dej=Xt8Je+(@;$?cLh3sgrS|O@_KnM|v@vVd8vG zR@dqtP1DsSL^H~n>t7CwfQ3SDxC1JX8BS**9y_6m&i)YF?X}svChcqM>t|?be=XJ> zw>B^dH3--I5NPv5+b=vt#cQkkL?|yh61h5+FWt-gzGvS_MUVIx{chzte9h`h+aPhZ zu6^Ono5MM_$Ei#6{A}bA017ox|6Vt=$@{U@K0fiD%KGk?N#P{NY9EG}#^yi_I>{H)xLDnfVauR6K z?$#yvy5O=1unK2kaEIClahn$@9}sYi{8)HrUxcxBvb>z8=dv+S!}y4Kp0k$+5stvw`~j3Y z1K*#XUPAGcA(E$ZOyTIlw6`A3cGJiGn=?@kPZW1b9>Q- z!t7lG=gNGi8ws9KI#W69`j_nfvO-m{afb?|e89K&c;EEP|9!6mz8@@1Fcg~ORFv&d z)Ud8z>4~3_CipWywMlSUt?iap#Rm3N+|%0Wa&a!RU;Dc#Oy80y!-l)dbN=NL!EbMh zCcgC3Wez2-yun9z`oF)Yg72x%jkc^dNI4|#s>R1UxmKn59*UHv{`M<->!p)H91*Y< zZH}|5;$k|a@1~13a!h)TPEe7ChJrI5;Hur6-?T*)dyXf=(oWu9FeaOBgOAmi`ByG_ z&dk^fJy58OjxG5v8L|^`hNF;(vcSOTweP>Z<9Q1*O zu!=xuMlkfj&3|8FgO0ogSJJ^->f$VQ$JEJofNufIiNH-hLc0*7Cd|QsbjNc}m9Ujo zlwiY5lCdG{&5&f~4O)NqwjP+It*>2*{roeNmIfTQ3Q|2Ua>agWpoZYjqDrhKLJMJ? zt1-FTO$3x3YV)F*Gb>x@q2$m}ppgBNxW5g|K>b+^YqW6!uxB9MTrT z-p=svRvUul8v5rOq4E(xbhzeCM!zWSo)kKMh7VqG5A>ukG_qzh}TxAK{RHJ#Y_*}^N4g5nS3!^enO~9 z=pL-m6-g3DB$;dk#fjhZmUUfike;q7n z92B=WB0{Xy4E*nGo|=?yKkS=-%cA-kALkyKkI9+&BmO$CiGcp$DhU>xbZH zK&eL<(gHJ5+p737&9KKNOg3kLb;pH$pB^?4^Sh5Bm+?}Cnu*oCX}R*2_lyNL)N zEmq#Q6oiiR9Q+LEBYg8iQ4XykPMPzjyyPk#FLw3Rar8)1V}02O88rsl1G}TI&U|ts z|J_?$zVD-Brw>v})SKRh?5e4`-WKV7#sfco4y2K9ejJO2Iyvv0jR7i31@Q~FqB_|& zv(eSp236S&l1jt(yrs8@wX@-cf9=*aV$}5o@Z+BP#NCp)tctm;lBwZk<$c#ytaAU! z(U#?I)q~ewJ4YP?aCMB_S_MvvT8rLs0BjZ+c@Yzw*a~4(vA~R6&Lp(7zI)i|TN({* zK0kLs8Y1Y^ckEpNx!5g}mO94Qa=+fOv$Lb`wkQY>PQ1+SCt29P0UDf6A-XR0=ei2Z zkz{I`P);9DsY6Z7Fh|M7b^E**4rXYKI=?gma5|W*-@Z5M?+Bpay^(?K=5eN<4%rFG z*D*^v9ho(el;bh1JoXWCT|F}!Ww-OUxrfhmII z?pGxUZVp_A4$(Psz0oSRE5r;<_GS|No$E0#I~vs1ZJWiexvFod4>As7mKKS7V~-Nt z%0GrzE`MZ$Px1I24C)#+ETp*sr^^aX9DkAcLlCagKi96T9EuqZYp^xl?2LK$!7@}( zm&15VlP#k09k(PW#>EUn*->wsZ_?1q_x`KHwA;bNYdidwB)_(_8{o!%w;ksRS zRFL^w0`vQYcDlrLkx%J?d_KxPFEvf48r0^Ve=Je1uJ$Qz!EW}AD7>QC%O@4jG&b?^e_LaCAhDmtLCFAQy&(Lx3jpl1TkyM@~YHQAjc=pT(YbMWA9^E`(mXaYy&ZXgT{oz?UTE3|aRraB#jQhqtRJNLn#eo=%+8Jf_p_h!%7bIoRI^FJxJ{Pd#k z$)sPx=U!=U3puU+fPx$ri}8D7rHBd(U;6^};p2Z6%HvV@SI@batyxTCH*amS6fmf7 zB*RZ~qY|!P>((NLK)2@<++0!7(QQF@b=oaI!`5Z{Ds0vlX+pxvIqGi>w||Cp4!beo zid!V$0yE)I$+_2n})FpIS%Ifnpsy20T5x=hIR(H6!?)~7M^anr*_V>Acf z%#E9Z!+AW# z$6spFygbG3s;-r(#~k6lBV#>X$!j!F%n4_Fs>U6$IAZ;%+aZskB>KX7uNbu1*Y9zy zJAjOtr{*QOcLwrn!3p>yVlW13 zd=GA;1|Ubb&i2)9giDO+?@!f1NW5rwr?hSF;GywAFrXvN5TipE=|dAL1?+1dl&gnA z4YrB3$S!&|p=Wy0aXUKsS^ zBFB1R^PCq-F*r&ek=T*#W1FW;=4m?9))XBTl)a0Eh*uT+ovYF%u1S0FHtRAL>Yl4x zvU%sUlsx+NUaR&U%SjPHz@=9 zvf3THfiHLZLwxYb@i_b%5D5m4BsDQn1Qd3$aZItg!@PYwWlwfB^am&R=;69qv63#t z(g~2Q&FNjXa1r@BA6I$Q?{EVOkcWZ8-}wFOcHyb1gBFLsR*XSNnh_g2Q2K4Kv>o9( zFWVpn!th1zsD3bgUs0(ibR%Fvy}Yl^#`g)W1~v5DdH3oA%r=J=UVGZWzO=Z~bsEtz zB61LUoJ;x-`j6KubU#}JTe&C{!wyeYZH1i0kD8E6XZkSB=X$1i6`BY$- zleo-&dno7RWBPwW9%Fkn^*hfKEcGWB1_Yi|u7Gre_am%NJwunsMXDV?3f#a6zi`tI zkZ>M*RK*w*oN&{#6K9fgeeZ#J_qJ&LdgA#gI=@q8m$z@%GkkpB`BB~A_ODX#>xXwU zNiqmKgPq$Z4cl+#gxi_jW~4fkhLq7DQ&bffPK1R_r>rIjrP}KZH%kh=NnC#{t&BF! z{&ehpnfDNTxaiX5InHkRAoJI0s==7|qt7q@`(}_?(;@6|<|f0BOx$#kz4Io45)M@} z=hqqh7~wE+mGy;(ZT?AM&pD@x$?=+MlbbGZxIUuMRkghE&|8qZK;})EF-*Xq@mv$c zgyG-$069tA%z{SJTa;Bx+@i%cyvhkbgTY=!%9KuNj!D_3%?$!Gcwm7P8(PW87i$uc z_-r-9s9a#ucvjHI$cg@F=|I?i6XQnDZRX2-IZxz_owa2jANk+j|NoxzfUOnqCefk?v+l6#?n)?ijj;Aw?yIR2qg5lrD*(XHdG4hM^>e?id=rn{&={ z&hvijTkoIWtmR*>#k%gj_qDIzuHPQT_yMjFNMAL?Fp8Hf!Wc6sO0@P{ZY|^*c|=9q zQJ%_@GohD#gR^O}Ue=DsF?vT`iSo^x1~pT&q8;An|EDhSymzCQ1j3{(T+QK8<;!-t zA+lSa-psumCFYAdR;5>F3s3`+{EZZaL@dhgxn6`s+!>~27Y+m?3WJDo=dQ2R%A^~V ziM~~^o&QwWK3k10!P4~8ih+|ZMW?dM`>^^?8XmLqD{ru?)9eC9w~P=i<4zJ)mA`Mk zvG8U{_Cwo>irR;_)2|Uxwd^wXMLvO3P1ut@5^4%_sRbskk-rnzFTW*^K<62|I$^!x zAyoMFgc8Gs$AuN`G-`V-gAahoU!C0V_!~X4>8xTAu*lwy&`8Y^DXogPh8=nIVS3s3 zRXabC-V4?;Aa&=DI~?dTB#B3qlek@m=3i6QUjP1#Ttupb^b>^O7m zCor1*mT+7@bMrv47%7z@u`~HdV0h@a3a)t2>6b^k?KQQMckhk}zjk+zz(85L{D`Od zdr0rIItaFF{12&E^Q864r}mch45ms(eY>bNx*E+4ZW1Y48Y?NnKk}m*Q z5|z`yZnFSHv4{(AQ#-MiN>!;#kFi{Ks#;!?_0X*O#V878Xf1_fMyK_X8VQE(MjKzCG4d~=QvE{OMJzB z@XeW4U}WL*bf%Zo|NlK%$7(7=JJqytn@AKt6eysU$0Idh4HEg12ec zUsm3Hh8}xiDC5Wzxh=@0tvF(;t~kNgPF<^Gdg%ox6c{a1bWj1-4uEYD)M z)>Q~5O4JCYpE!}>I5-5uZ!zcDTHiU@nw2N;$f8lmvPqdglcWgYzjfyrX`W8-aYlni z0K+)zJFXh7&SS&t*Pu8ewg}^@klB5T=J2}@rMsK=dA8L zt0BU3jmO-{H8#o5lt}2HRg}S-wu`q6Y~o{>6gFbke;kY{B(5Dr+`862a7X{V@kyk& zLxP88@Iqti1UVg?W{!_*s+68kQnD7ihBEJd9_%__$WDgd(mlgh@c3iSqb*N~I1)T! zyWY|;aE^XKH+uYAb*N~pJwkI18EoG_U7uOv693u%@tVT;*;5NYKZ3*J-O8~U=E>W& z%sAo9680%X=5^+gs~sj{_jD5<6Y7tC{cMV8Du2lp-BA*yU4CQe_6%j&Rw%5zw)zk! z2XMfD=8%3AIb(fGg;~ig&0nKoYkCereLxW`u({RD(LhBb-D9Vts#1*H`>fLA#y*cZ zU%!gs{h_zDeox(`hh7XHRSJFr6=#-IuWq%VIu(7l0@b=z+K+0)V$<+y*>Ng>Q>_s` z-O?^u_;C2t;`}=$i+s)pnD<*A6&PIl9Y0S7+@Vm2fJs)SAE(mm1K{h!?t0}CwE z_cGMwf+TAPbyYG<3X;Z~<94J5on=v`a|94vr^zC1J4ms|E1+`@!#-DcdeSZG4n> zvVoI6Arfu-@M&(`#4VL;gp4hI@sFd2M1_&=M@gS7(pGFRHHGFy=3neh#2@N;3w+-S zy$dM&_CHsh6fIo8Pe=}ni4U-7j*2Tu=SAQ9dKnn5i$@eLtcw@@!omVWMm3^!v*+(q zo_qzCuSwS5_?k4qqCPpUb4U}0b#wBW0Y4toTdO-G_ggcU0u5+L&4w$K9EYqZJ_CqI-wQTM%!Xpn0Jn^YZ85J2Nx=ZoA1-hRb1Y6#*`y5q-KP z^HKsr_aFCx2m8;=B^PU@rzhqS6^Z3`VDqjlg>}F2FD)G^A-$N|#;3fcPoL3&ee9NW zKJ}CB@R%R)nez37AeHntwYn@x_O(hU<3VwL5(A#?mr$^`8Bfll?)AKmN~|OfIY+AA=@!Oq&dNWjYUt(C(r4(GBqw-GBr{9 zT=)*6bCr6M(2n34Xi~c3v3b#u95u8>SGkqVI+8TxV5j5 zn??SJ_ETX%sxdz1RKtXH8)2afW+q7am}zUgOeFN2;i zUe~?q94kk;w`m&bHnk3oXQ&HTMBY=U!EB%{SLsEh+nccswc1yiYO=$w4iaUxb%?#M z=R;y7h>Wr|U1_0R4RZNEY-|*vnY3|rL3K)ze=weoV1MqvEPD3tn*(DFULJumSWc|A zBZlTUB@B0G60i)-HPx2$lZ3_g8BfKh(D^qa!6Qa%^_{|_xb>F|F4WTU%QtY2fFIm#otk znjp$n{&0<@1kZg{NorNw`9;yOTDE(&#kQj?XGg;PRZ%L?s_=`-@n0!WmDA6KvhOmD zi)o|HRYxcLqNul0HF*g8czUan5x7YafP1hTZVugSpV*&k@xIALRi#kLala5b0vR~1 z-tk;fttunz`LR%z2)wt=e*v|K$1^B%s6npMtr1T9d&Cf_d~MzC>`ETq0Sx1GQn!cvdNCDBw{F27)G+ffAlQ1JF=v!3v$^1pE$-fU&_aq&U! z{7bwZfSd2-P6r8Ha73)AZ$O#h@@a@MJ!G(kJgHF)3O2Z7sP5`eiD8L{S*U5Lj0bF1 zRBk;(mMf@u5)Bnxp!D04l}k=62+gocim>crIGs2g^w_2*BQ0YRKM zT!e6(-x7cM8RBOB*Oq$L1SdUWIctBC&?!i%I+{qeo)O?LsZiW( zKyiz^iM!njsQXT_^TLz%SE%jEuW_&0yoxL*HUxO_LS3@4py7CA;o^$3aXY%AU&hkV zIgv673!XgA-8abiI;U~cxfT|yne`|>j{VXiIq6{`JwN!0w_mK0bNfeGOnG@1i)!(? zh2li#8VNt*Fjo()3^86=Cy%u&X2%J|p%S?9ROLTXe0P!gA6TzqxvL%V$&r)eB%^MwWS_Ec->HhCWz zqEzbX0npxWSl|lXMFwd6Xf|>n)8Q_kvZ%_?rKh*cd}de-2_q{@e65R}bX#z*zM%a? z6^H+N@G*Nmb|Zd&j)j|+gCsx;sNkp-oExaCY7R|}it~vUA@1O~Jqc07x%22x2-Fff z$Nr6{gttuvtH9U-wG;iQnBP!JdY^O=U(#b8YqyyH0vs3=HY07OV~v&|CkjUvIhSee z6yhKD{=#RFmiqYEP54Z@U70A7ww|l1)_f6Dmq{B>WMDXc)JSA-+{{KVd_F&SiKlEZ z+#Vz@{{T8)*eO+-ozPHU$d~{7jZ3R6H=dSUc4i!fd_I$F4BJv$wrj9~znVg{$Zfok zO3xc6QS;yL;sgRAHvlUia~HY9z(gqb6XI%<9oaq zP@vk#!u!6-)}JR#S%sQ8YW7dll3yG)6e(Z0R_m2`^GkR-Ell{+6bG$dpT5T>COsly z>Sv7JkbD+B@CB1eN_R}vS>OMGy|S^ zqhN#OcqFJdcx^^k@Xg2iHRnd=dzA^y9VGqfjVeZC4aMJ=HVrMEz9phQt5!KfT7kl! z2%%=!s>{S(Nn-U`HH>mLmAFy4YcE>c`0N6o6Lq}DTIyTw+ZxzJM{nj>)Dv4ssfSLY z!A*)4vj5}d7c0l~@n2#)@sOw*^Ec`z>rh>n6LvjKlax=4()XQS#k-`X@IbpO*^2+M z8GDuvDKwAqqzI2iju3Gfh$n)ogmgxar)YnNX548T?29EmUu*J|ul@9rSelnn+1}pK z!Oo!&G*Y*3vni5HYG&5pd<3iJVVzar)Q#~MntSQ8RTgG$8NcRR)1nzO#Iw{3&&@vL z<_4xUZKi@FTU|AGVJxaqap|Hu2KgT5pKqC*+GI%H3~FY05Lns&>^;BaeoIUa{;AtT zvG|Nq<{^Qk!laTu`$ZUWvw+fI(&&lOjowJ8Jz(;(Gh_FvNEcs2AMe#71uSOU*__xZ z#wNxz67;-xL83&Y=c`RsQ5hoP9XzpnEeSaZRZCUa(Wt(r$<;V6rz4FelhC= z4CyznkUu|x6P(S+3DtEcjfkhd482^ZR#qH)F&vL&=XE|j{O8CSPa2ckRT|a+* zi{E%k)zx1{XXu09uGH>65Xjy^Y3-=I;voCFQ;P&J-!?*FeWL*FxK&{tO?tl4^?Mdmg>- zt(70d_uSI%`w3Fh(lzkkbC#7V;GtFW+56xT-B7VM0MQcL!^)|4kTBmMbyy2_Hv7Lm zP$6AMON$JkxC+j5ds43Q-n9I*RAu?4*jozbS z?I2xiY^l)}F)O}$Y_2G@38jQV)6msh@0dl(s9s^zfZ_Q3-}U(L8--_GpQ#vl>6HQG z_$v8vwLoJD-)^|Q88PJUuy=W|Oa4uf&ZyPJ&+@HhJGy8)EBjmNjS(`NfYh-F(BgVkwAW z3GzXJ4YqD00yuV;e=KFw!9DC|2d;AnXmjHtzm5T~b+pedW5bTax@wMheo`NkK~S@c ze5*q=k_=iBne-Ua0V_*lr)3k(ihEB7y(I%#rj4G|+}VnnN*vu*U25xAr!i)b+iS3t zC2Dnq9&D0EH)O{_w@dsjPZBim)_ZPtPs7u`dYHdTe_O_m9wwM;Y4M85S^wVIelv-K zN`R5`x2TJ+Z^QTRD)^5iA2Ex6Mmt6kM`HTZB`(LJt>I>GAhlbY=G|d^f@w$o30cDW z2V4Oo3~lM7w|j*-J=J|Ic!Yu7Mbh^7ru8w+b4DOoHH2&R*Q-$?vgMEbaP_eAnLF2D;gKsSvF zy*JZ=txeM&b%kddZry?JoAC%q0dSL)$SL<~>s9t5726bKWn~l@L`#oBmfQ9Z6%P7e z{9J0E(LLNN?`4Hp0CDj~CpxiKkkt*~1o6SzP3wGORI?8k@Q@VZ=1%{%Dr~>UeIo}y zq_-1)$$R;ibQs9PFX!MFO4Jyu-A`J_+tTRAvOH8ub5&SfaLG{h)6hS5(#_FX0X)_L zF=Da~C)rK+SzA?6)>I8${px|uO9ii_E5jKxjTpbT(M;3vi9XXDduRKOV~L|73h&wV z3bbGFXVCd%x8?OGaD%ZeM0I5~cx)?e%g)}8Ox+B`%F)p+5$Cg`62*i^Xt~{=i1{t9 zx<|MrqVg%pgUg{G1$@Lt*CTpf^J=F0A;_ju|9JNQqS=n+vX5M9!&}KK#wTBA6Rsv@ zMy__Wg2bhV6Sp0l#?bsb%LkI?T)C()(#g&Wl_~4F$GBpfFC=xFHKmN3sjw6j4*@bD zx#$>rWj-wkH}*GJ^bR*rxp_Ae(Mi(Z2`ls5G;-6|FFf@M>>DD;O~JCN&%bZ@5aLP{ z%3LN)+o#RYEC>2TFSm7x1fB6>t+Kb#^f^CmDJX1LDF6!MeA`uKTiYy~|3xc2%8y=? zGN(M0RK{@5M_GbTKjWe3>eOE2o>^+{S*k}{j8f>A2rof8ChrloMyOO z)UPlns`3e%l~*#_?h%s_YD_Gt3|<$T@)#e?15-Qi&k zc9n?e($dl~t(#48lqp@g{yy_gW|Ws6e)S12*1D_(J^W8&8T?}M5(>2h!HUW|>FfEx zzSkj!Hg_ecC2TE147xqWpFrHc>zy8TD;%{5?LHh4xvd~(ZHk%ksez(m$+Vfoa zG#VJ--Iwk$EI8a*TP8Y|qnQr=YJk!n^I}>4B0#TY)e6Oniv>P!qZjn0C&Xd5BIt6 zAZTnCiQ+P2l#lm)ly(lzfZ^rAVTy9Vphee%VvO-9;_5;sGUu%-*!w*ww8A`=F~vDD%mxP5o+z z*>VSXE~oGRq8rJF4EJ&#tHw2YBi4uSUz7wrSL=2=kJhbTr+6*a4 z^=juuCbg#SgD<*B2L` z(M8zFcQ#Ocg{!BfC1bW_C}=04ILm&zK`M@YH_Lve+;-nedG-`|&a0&0beFD>3mW(;Ogcr?{-e)9DeTNF;6C-Q7)0egngBVq(@nmYm}N>v5R6DKyP42kD=fL0w|8*r8nI@OwaG`t`Vg z6%JRdf>SyZ;Wu;huIh3ixylHp8i}e)sjJi5bcd@GD0Zz1m^BqmZ_0xjrNt_w6=3n5 zJ0-{o3ZLO}PQQNC$Hid+N`aEu@1|)?>r%S3)k<+5;IU#l>)IZ)0`*)&f)o~znK>ib z_%bXi;;{o$-RJT4Kmh`q4=R_Hx^sTl?zlyT*mx;8M5ZqlG&ww_rae18h#r_4oEaYU zEYM|EWZ -URHAQCUk+usU5LAhWt!d-5Sr`m^mMX?=F^+R0eP8e*Rd}vfLcYW#WA}?dAlkGr;_HfO7(nPJzLVN^)wF!l`O50idI|cv7y4XCQe+X}uqviB71MsW+`T zYBHEO`qO@6xdHp-;~O3rfbLmnw!*rGrmcmA>-8o@;Ckp*hzMBqgOqCKf;&W4SL)T= zTtUIw)>iuE^0X}8p_R;7&X)}F8^X=!SWbqqP!f$i3*JPth$2@WH3 zl{7TBXA-}XLS1`HkY~fZ;6dJ_Y*@L7eBAJ~PxYpPmQ_=scBvl18&jZ}Riwk*)rDcz zieXgygXJ&4HBQUB^RESToH15aR@z7e_09Fo0m%qK%!f~yQ`*?s z**Q3fxh+K;Bb}qAaMU?{q4S}l#W~2KN#Ak97(&g4#~J(Rs*6e2a5*K7w4xF%&Uv@t z(RfXb0$$T%3zo5!Y%3P^`M7DH7GEKdWSoMkfRpmE#p)v1fs;Ky>%XzWUsc0Xb9;MxclU$yAbf{SY5?+9R=>qF8wIO_BY(0NU~{sKH<33)aD6MV`FB%V9rdHEc|u)+q-!- z>Vh9hNX!NKrR~>69fY~OIsYq?1v&$OqQ^jNSy|cV&!0<5ww{E1Et+pxElKw*J(9k! zNoPPV+nkM`E_H5Q(NjQcN0{#UWnhKGk|aC%5x zUteF+Np8+4VB{V_uQ6JtSkd6li3<8HUUE1(nh-1b^C zZ>mJy8eU#b5U&V7Z?}hQWD+R=Yrj=a!))tY;=HWaNah#!(L10UmwO45gB=Sc;Q(5o?ea^U&?&h}(ebg4=|&Z2W7|&tW}Q)q3xg69 zwVdK~jJ6QZy%MCETxt?aP76iWi*FViZ~H2hj;WJR}ILIvVjL+33Q6ihyc5I0M z5zyfL_nZA$fSZPzdUJE#X?x|qY=jMqI`sekDikGb+s*Id!f;xww{F`lN61M!ZfUel zz4wqHS4j)>MsJI|^tH{{>;KO$M!lwAc2+WW6>R?qq$ zA*;oYS0LdD=cn1#{(Fn^M}0o3KzI1xUg)`nSy4+U@?ta1a0~7dQmW8v8XJ9=%dmrl z5twbbW7M()1IE>?`%?2uotRh)ZEV+pyKLuxe}*LfzzSUVwI@oTwI>DC2*yIYE>;$K zdDgBjrH$DD6K7|YNm`tw*JxXQnx$rfUWfQxbTnV3Q{k2`vSHo2-3MjhjP(iWPb#>j zT>zw0jgfvcc$75W0YjYR4yjDrj^`K=O8?!yU}I$cZW&Q^LxX@vXB1L?A=bzn(pef% zzk_1*_t|bB-}2jls`|g^`r7~bKMxFFHDlWh5!{r0PW-Qc7COIpT`3CB6IJbfu)ek~ zFDEae4DrYSO+xGH5yk4hLp)MmLxy^QGKK{Ox*wO7p;fhYH4Tki%D)wzdjVS$>DmcN zsl>g$KjmhInwY$t6vVkB;UPXX3iV!FZr*Y|))}Y|mymlatNeBn=_!L2S@%TkbdJhM zj30DET8q3cIA^rF0+2{0c8QZ|88gE3uQG3-*pO&Z*2~nR`XF#MJwG49rrzS8qy!%$ zW7}uv|6xpm%lj>W^SZpe?CTqfjEr3FOKbc!Ip(%x;3JcG>}e^xn^Vn1ktHHsRP0pb zGR$gCmoB8MrsdL*x7abT5OOb?sz)LY4lyzI+?w&5n5^0cCa1Y>NlWJhh;ML+#Hf!s z%%sGjl=$T_u#_)P zdwF#^dq}@!z|}_%T~7($|H=OF;W4y*{-3v2uzJ5`Zf@?|w{ITnqnx^Xop`h@jx%)^ zDnCD`pl=(72^M2C3S*uL@OApojcNk$Fcpxqp3AuxU?z4EUQB}9zfq|TNZkn^ti|RG zl9A3FqNgVfKrJ6C$q4M`L1#zD!J~d`sa=pa6nDrNg**Y>aD&)=GsPS?n|O2{ zRFZcjZJz-Adnjhh4GapBj!E_2>Y50Jo)K9rFS2lFiBfX=jcpBAM#ROrb1Sh+D=5f~ zC)Y^EeQfanM!A~4)YRxu3EXn2Y&hTR4mkKqTWnZgHU9>qkn~Js?a2_<3TEqE#zbnD z&jySW#gSxDaZ0FqHF#ZMsl&xjy#{>Bx+bQWZDl)|VX~cHQI0omjN z9-a88i;=&(f*3=m757;6L~!oFonQKq@sip!h1u)Z^PZ}n8&fE{SM2MfrHt2VIfa#- zy@O6zCQkcoBh7++v-T{`+u5K~TVy9%zh z_uE^wZt?Z9&hmbwXl8c*slq?X;N$^jdoBtfn0Re}X5mw?@fn(W_F{`OfMUO`sk+L3 z+JDjJ^H+{XW3O0`q(wFL$5af}^>sDXJ+sPnd~JvNq&3W18X9mXKv3PYxC&z4xbPH6 zcFv}ptgNz35uFAk0`(<@*fde#iB%O5S#mw2sx&p8v*6tPgeaa72@ft)8xzUiCp71AYhM zW%zqvPHs2Uo0^}e7i|pgb=3u{lMrW)4gRhZ%o=~=8(HWwteGB1&JX6!aut|=g~_sl zI=!Kw+lqOUajXs}p0=DmJp=~BfyjFyrm7!@3q(&( zKmVP1%4;DKT{b8sVjwq<@jIHXw(3oZ)f{=2@hqIKz*gLM!^>rE?knCtehjZCH3y68 z@{jqD_g~xhiD*eB$iwcH#2~J|Bt352sZSJabs}q5Ljaw;`FIKr5;vZ{`B#yz_gZK# zcS5vlY|65}`H#2_p|-5{wnYfY?n{h|LHASCyJ~*^=n5qM^ zF8j;VWRiWom;_@iAV|tBa#jLrU$1 zJOcaRqMi`AgL0uue+VR8GH?C!SCJv!VbIRcCc4Ip>F&ECu`OklzgNn9%V26z7E6oy zBny#n28K2O!__*^z4!j{h}WWI0rvq5&`V&Fa9!%Y1{UN-UZyh*P>G9GfpO@`p~PBdg-0jLlHFs#NW*N;eHQc{o;vcj*uZ$ZkEKgt^ePF*KvZ3P@FeMmGF zE0d6`3bdu`)uwE(Ttp3{81VR|?D;8)P^#AEfowyV_ON^+qQ=7;K$=8d^R#l$!dY zmD7K>ZoQ;lD`p_8X&EB^>Z}cNf*BB;@j9cP^}BWqUVHh<2^^F4ocew(UBnpK-Y%(L z=o#Rl7o~dZ0WS@03G;S(v+Ji+n+MI^`@Zyr_f46mnrp#vxsKOy$L>Nqr$NnA)Et26 zY(?(l!~)8i|9;ZL+wXg^ZVaL2y(JNyjGj|_*iGy8`vxWj^+X1&pDRq8puK$JqZjEf zzTv-^C-l)#S(cQkS7$Ueef?24Iw<@R+ z7-#5w_dLoEG%q!Cc>yT1!n)t?>@H5Gx|SC9e80c(U{HScbhP>aPvK%f?H4WAt?hON zRnxhqAok)-GjZQRep>N@45IF{*IpS!^|T7^9s)Mr5}OkZR)w#T^@e8@3?;d^9W+J?~S_$&jLL(;V|@v@UI|V zfquZB;T1D)j`~pR!394q0Uu6@Vd_s5AUC3UVDk|%T0WhO;)2VM6 zR>ra2u-{h!;HPV@n0nx~?iHN%9a0pW2Hu%9i1^O~gtAH_*4FqK<<+YxXymaP&4D~P zOEkJfbeGmG6%>}Bs)J!RN_@;;MY-VfDb ziOVRiqDHp*d+E+9t(Dhp$k!19kVHyNP5t=s<4B=4r!ndrFa}@1YOYDvPxhCu*0dW> z2cm(pJHQl~pzlaLdva5GH|w|xvZ**`bb@5%)OVXebdDKa%^Yg`Z+3x8v@c~(0QMaf z4m$t^4R1vzZJaWYTLdSirj}c8qnes!0YUTi#y0LOaGqx%ua+~6FP00P8uUPBMsB?T zG246b;x=yFrVv^)u5)S()wS(MoJ|NEM8REFmzR^-VpN+vE9DHwEpDhd?f2_ z*YY(x9e27J(cN%jgMFPwVS;5RyoyI5ih_sx&n~ylAiwsZk4D6u%Kwm24LAWcsa%!& zUIkVaEXzC!yYco9Pt{s0Gw7Iaw>-IYK+k^( zTLp^pH#M880JX&aJ})nCY-}tL)&VSP56H`0N5R8KK5>zu?eLMewOB7b> z5||#s6gDpBOZ~{0U}%u{AxSLOayd0mbYjRYxI6hq&jT|@kgza%Y)o5UADs4#Q?K$G zCthwr8qeZOeWj?_o#OBBFTx!g)-DS#QG450Ig3tl<~fzVC$3P*@y?!**!{h@lbtwG z)|Wk+aYJk^8m*3M7HPtFgYQOrV9gtQUTW>=HMiz4gOq4vSp(J-N`FW*f!i%lXWAO8 zXU;@uv9p9${Dg2%+UK0KY_(nI$y~$LC&R~=Pdmw)PC#iV8I}RkHb>!Q`Z=Eqdlc8! z&x%as|N4{p$yeb&ioPtu+C`Wi$>FrJ17N$XjJpiJ+@AsD_sM7XSy);3_x3zD#(}m0 zy^_x|tfK=y2GO&p4?&=w@_DDhBt6<8l z+POB)S+61Xu0|G#vyRfAH;%6Du5pvsa6Kw28%Qcd}*K3SCsXHsF$D+XT<~gDyGF0{?)64F7 ze6&gmebWJ7%3RO@0%v5;fkkZc$x76hrLB%5zAcy|0()_M6{d$_@F-znNN!hT>6ARZ zC9M4Ip7Uks(LJqT#TJ265ew+!O!6+Wte8!B@p8rceu(ms^vTa0?u{DUh5bhb3=xDt)4PWF+IV>i@TMJ%n@5Z7{J@3G`W*o* z-ijEJ*|EkwOlg2Fb4h^a3o8dqKBd?n53P#H=cdAXWgew&FbfPGM$7?vt49hlJc?W&>Q6 z#KP((*J;yVTtXS7MZ>jKgN=@GSfpsgFFK6aC(1ML<&6M}+v0^EPpUuEGBpvxv9!-? zhq1Bd_0l3wYxP`^8mt~(jtV48{i{=;u;BAVOvU?ngLQMr^dDE2H!hzke^dE`!;v_N zu@1%wCFd}37NP{(?ds5i;R{UH+pWOG2MybfB=CQ=^8%l0IwV%K#Aj@ zL|ZirQBMB*Z~zI-B{rVMGxPDq0}UQPD~s-#DZmw zS{(8FRq<;aqVUf^3>{&!eV$0q3*Vfjp`!WYTVb5@8<{zzg!+ZM z9~?F~EmTN(SlOW|c^yI!+TtBuxBY>qJ*4-dIVXfDC9yx_6twI0Xr$xzRD)kkQ2ueM z-cbjC3t(x7D$U)&<G4w2=UL9`a-f-Y<4E#TjtY4ZKB1=>Y%bwbM%5_FWz$60^AX zKuY%0k+cGk78pl}a5ID4`qKvo%eS^@W~_1CBD@ui0|FXzDfR$!#b#WcWK>Uk!joR$ zo7E=5%7k3QPMjU4?}rgj4^N~(N568Ax;@!6jqT!7NN0Y|dRtt-BEz88dqANmKAwDy z#*=ydL{z_77^fI-Ay{rb!E~)1xO+k9Xpds(n^9sk_vl_-WP7}8&65mj^j509cT;rhDr*86$zXC>>fvbw2AJqCKsm~M~@?!Bo7(%3(L{zRcr z_~aawm6dVv@s^gB4l@n9Kz^Yso;4A`Q}z?(*NalFaq3!rE)9S^88f`Q9x;T)#Kfee z#cFG5%?u1M%Q-ofdWF>HQT&)?mG{&qI9i= zykdAKqhlcn72G!bl0(Z3HJJ&g^-fBF>J*iy8Niq;yZAUO@{6K|)Yn~$0oHL#IX6J}5Zy?~;hTtLkw}!7$vETS+-Ds4j4qwW6{i<*nI#Oq6 zJWwp-!mAXR?yzO6l8nViZZZ8Pfj$p<=D88rgIdt(2F zm57&<)zWbx1wG#1eZXJT&=;vdfUeqh^R!lPcHC|td@~1lz|D80Iix7;E9z329Ck6R z9j4H{^vr&(y-MGh`ssY{UUSYxuA=UfAI3h09z+?Bw`pI1?kIy5=_;weZ};aTf(^{< zI@e!50&ISQP{&kn&WBc%FPn|P98;Ia{Rd$DBkK3C~A6L86~u->s?n%y_Eo z+qu560er(G5bf4^thXdKP~W|K>((s~kHhKdX+3(Jcb|nNw^mk!0_K`FfNQ<66egg+ zOIbe=y&3UVX0y}ZbFqI>4p32Txl-c>wr`mRfEgHDlKs%0(q0CRkRjESbjIx>%Ld8D zQbB`$?RGTH_}HCZCp?v2V5W9@_Uxtjhb86Aiz;!w`&Y}u-gzo#d{q|JJwE{BR)#0Z zSok}%J1+Y*AQ;4bcE#>{glrUkTuQuk%m-`-%Zl2~s+wDHplhFOS1e?TTV;1#gxyfx z&SFQ6=WkE`{{4Gr=ey4H1Ta4ij$4#4W|zCOT&ujt-B-E9pm%&^Ppo!NfZwew>Zh>t zE6QL?+Z=FU|2=_W!4}7!Q_E4}(iMm6ngI&;4HExe%g0iX! zt@WW~*4giIUlw^xBh9#9!F1CF2(cAs`TL&35yKe0^rC`5CB4zYL6iI=zvpCvuHXcH*q# zDzguU7;+qn=ni_D1=8Vac%|omAZ9bDLM4#FhrlOz&JcMoO~##yht)+>WTmWk%KH0$ z5(+z=A<$NTcJ?RaUH~9BKOpDg33?*`)ZOlH!MOtD{ta}jF55r9BB*7Q4r!byc}Kpf z$lVbN#N)Y0*ANQP6o{J6i!kB#NcFV<0c z=OSTi5{@_iJm`?xod8|`3jwh^lbrZFwzrpIplk`Fp=5c*rv;!6mau^pmA^j7DxB=;~~uxi5{0rrm>R?`(;Dj1&9S<0B7-0 ziDrBHrNwfJLuUx<8sS*F_^7Z2`qS&X5WqeB&7Nl^y$mBN>bp`c*`G03CUQ+ZvJh!Z z#GLohEDJ)S13bpYwIK(-hiQhKz74kfeQ|V*@F>1?iJ3l+UvbPVfU*903V_1#V4o!5 zX}_|@eoH+THLvf>J{^Ti%5Cu?99Ts zbk06&eOk4ZkduO&Klcb!H)g*=|F(F2&3vEssJ(2bs1?*ieh@sMYBZIRse$j4p5zj} zp~!f;cg7pjGcr8?HY~dKTyNofX{4@wiF9)M{B_6l_3wFaPcKQeMdDQT-fyu9xfrId z>9bUb6{xY$XfHKCHOmVeypMjgyiAgoq3C?sNZl78@9b~-YQBqIRsd?|yCHVeZX*@! zo@l)8%^a3ObQ;U3Q~(gcplu+HiN=K=KdP!G#C_+&x_T%Mzp>=r=q~1G9@3clhiKz2 zo3cS{%J!aqqbOpANd~t$M3w)toh--%OGni_k{T zMPJ>VUaXTO;)2!zgw=H1M%{z414@BpEaKbon^lFi+~l@nDX~)%!_VZIZgsYds}i@xt6bKuG$O{j zpgz?aMbHKAKWT^T@i!uJlVbLL#1=CJl4EHY7HI^_l z8&U3E;p$8B;~fb4{rXN90xT77>OfA6k#P^iVR1P`@&ol2?8co9vu>()K5)nc+}e!r z@`M$mabp-GDz<-=JzPXdb;!sU$=d5guhr2!gd6C$3XMm9k&o3Sul?|~DAY2*o*J27 zX3tz+6^UaF$`;KYwJ0z@R@%gn^vFiuPWb&ALmJ^}^qh{8fruDrgVnUE`=(@VLzUaJ z5Q4_|N8edcYeM5P7wG zB5!L3HPYG@)~j}$aGS~1Ln&wx1JQ=332SC_&Hrvv?!t(`goK|y4n%xRv#E79a&gXX0M%H6jGT5jeM=ht`zL&+@7&ludtW3}2FQS`hg~*xw@B;QU4R_x$ z8gC+jMR`{pBwp{>1dKmbzyInA{ea3pCdnF{DeJ=41oi;3*PDt5nL_D#%q)1c6uW;| zh%I(^9GSSz(~x-5f{Gro6@ZC$?8o*erHN(p*~%&wy&*!$MD{}D;3-gOfdoxtG%GTmqS(-j(VMo?Ug$XrSbgP&Ok+^kX~xpR zTTGP^uWdA{vo?w6MA%N*ET!#1FXi?-T8j|@NqUeJjA1e%B~I|SrhV@B5DGF-f6v5M z7%_R-@L7Vl0Tz72{GixO`QFQx%I!63JIxfh+wzFlN$t{sjIFl(E^;tPcV@i~wL{+x z5tj-K3tuF`>D#M|`M#qizGJ_zno>ovHtMJ^OgT?&n8AKLA7bu{B z3y)J9n3nRjwo=|trMpD92C&edd zA5Gn9_s#*z!tpW(28 zwB6E(g$A^5PeezJ5Z_h%n|E09`II$g)W`c_b=vJ$bu}usr>Hyo_fQo1IrMae40J;9 ziaLJg#jmG^sH2;N)SHaKQ*q9lqR?WQX961@&-A}QjM)Tp$BOpt_{tAmh@Q(QZT+M5 zZZ5_{*c%MgeITCX15OLmQ znvSaZR*0`!7{RDo?tyRhJxwWRequy1QF>JH>TX+sVok9G&B`-L6dc zJ0a2TKkQNZOr$|`hKn=B^RHr|8?L5ErWiT;qG*@~0ZPLuAhsleJ@X%fvD^z0=Nsp* zsY(+2@L9B|WYCSU*!eqjbb>1Obp?md)VsIF zdknK(!?<;~?VQSyZ<(NuObsF$)q?6y*4skD2=tmQA}8u|@Ih9qhv1sezcor4PFvIY zeK@=xweBX9;7n08nXFqUaP&2NHn1!bc@>|M7-c5aa_UV5pfww;f}RC+{F^V$KTnGu zQ7p=ayrBEe@_X%d6$tie->eFqS59eXv6UOsEu+GG+>Ht@%Ny^PZc9yXxf(`5ZL*=6 z@`2XeOWj%AO@H9Mxh4+v<9f#y2eN`N4Sq8RqM)Ez?#1O+Q{my6^w63tge${2edF^ZH*TEK$U>)Js~w&DmcelV9hFzn$6U_M9-y6TtFKO3AL@ zW@hCpIn;mPXXmC>wR;Y$eRb`xU&^9_79hNKp0dJKhP{1awUU!E>l6Awo}Ju5ryfT{ z>&n3%=``Jzimv_63Myn==6s{45e0nBOSE4FOKT@!*MbDXoXbp>@J3O0n6aAIxjRXFFtzIy)`GWV<=47gWE5<7#q zt|3stN(2H7cDqNut?Fq-fZrdzkZfl21U&dGZs_-}O<#7U()oyd)!xS5jS%ZDVlUII z-KmRbPu3;(za#h>AwImDszmBiy^9kDQ8&cyxhZ| zOlSIg0Dtw)e%9CcNd7BYZ2hW?qgf*D@FMjL3seX4ljch-9n`V%6jm)%q*ch`SOq!KH@Dxa8x}Lc3papDj&#jRR<>@WmX>n^EIv7rT zE$Du=3d+sPA&T$`Zd1LK;iq0ksk?s z5Tl7^M_z6kd)dlwaWjYWb~d+JQ8Bfaoixj`j&Wdpg^nP=78~mcA1UW-Mnr6(f+)0D zre6o#gLWHf=T{6@Aa`v;|7?CVC>J%QTPPNTn0YW#EVVqMsFm|YW;X&iVS4ns78>{L zMO?dl_ISTZzqqtl@)p06mNOe7a(r}SzztUf(<*hnFUufK)r=`GvQUR_pnE82?X#mo zYD{SLZ8m1cy78Ai$pE0Nswl#$pQeX{K3-Cl`x@+)ty-_;Rg`A;EMjV>=LxRplz`zM zX2(-wPV@0*GpsxQ8NWqaX+cdBIi?#A4)Lz%&sp@{Po)aZ~C=JR;RuQdZ?0) zh5~~jg=K`XMw%m=2-M3WvBCRzjAnwJGmS%+?jy9#sMoxI(+PY}8%9YT2XIJ%hV zDc@nv*Z86nPZTv6h-(hZR=;pe=;kLb3d-*qkolVa!~j1_>%MYwRyV|!9iH}HBJjLj zD5t4%Yr%_LreTdB7UOcMviW7(BAkv)WZDxCf=td;oX<>ic70*Z+~50&I)dJx1onf5 zMNSS0`-d1+`DuG~OU6AeHa|v-H9F6H2nb@URhq$rTO(^>VSgQh?`MNn9|2~&166wV z6-kRDKUc}N3h~FIvg}aYK)F}ZnYH%Ae;VdSZz|f{G-EE}>|kLZ5Z9J|Qzk%dq?Au; zGtDz5D1W{0SkULuw|meD4`_9w`}3eXAHho0eOE9k&h{Lx)l~sz-C+sY4qmBONpMiV z%Rc6(Q)Sg1F1R)MW{;Z_wl!A_u<* zmo29Ev7A0}yxb+I^bHMmRN$>>y}m)8;>X=G2wo9r4Y5C$wYo)5iL`trC;^vY|QN!wVx}1pc@NLEZ zgV}ZjJ~@j~(%qbO$|3FxPfc6r12hbrfH?%^A*nd_WHfhE6Nf`1;H1yRlTu7OG6bFU z&4w+{inndkDsX1ld+u1e^T@7EON~tA)K_>o{6Q)47@jtts~+OAT33u*exABk=6Cnp ze*74*0tFX5JOn1jy>u1#x}@6bIu0eD4~jUK9Y~2HMh_#?c8`Jtyj1#k%uv;fd2Tb7 zBwzSA+)d&J2yd}-&_M^wI8ZdN4l|@eV!C$7F|p9Ma(B}h;oP&wmy0Zus565ux3en` z#?TGo_Kf<__m|0iz`bGoAq%%jCc{h`1y)HRmGjJ>*DU4*%)j6uAr}GCak=}tGYN!M zxmB=q`oo+~~>N}lMagn?K^F08WHzePUwN6WYcaF+$Q^0lmby`FUq3WdwS{;{) zyv^*knua))qgcz1Ufc*egEA8}#1j4Hs!9`kskFM=%*w$6?KN2bzhdZW{H2AsdKY%R zTOAHLJIckhdL=8JzpEnXzD#x-W|+lxz&BNma~yV7CgvtLb*d7$^E#ugt?l_cK|RVx z?u!8(&+1M?yP_Z@>z=o~{RHJtp9)$1+|RKl>WEP;PM3Yz-cN`PJm&7k;@lHsa}*V7 z2w!^0T5Q`V)`v>L+Yk06*7)Or? z_T3_fP*9+5Q$P~+JC==HO$jKNS1%JR@v%pRItqZ-hMD0f${L`*)?%YnHja)O&{hc=1H#B*F`n17wu0(^6 z2V(+rS7&K!ZZ@IQYENV9Q5+DEZ?}FxxXm#LN&dk7HNoGG^%3$L6hUHP z-xfgY0RY90XjfwKe*+Yg>397F6(FP^UkET>JYrzkR^7d+w5ucN`Q6~t!E0=|`tDWp zOnG{gd;p>RMCZj$NO!^FDg4>~9a0OLB@X|A&&^9Dm@)rQT;?()5Unr}XQHuwxBrc=f%qhqFT@o6g2URQD}{lU1SP5P97)Bv^ij&+X@ z0WMbsLmBnOy=U_$cac6Zx5VgvMY}$q3dR88Jm5!bl=Iha+jwiOvc1@*piP)i)urE4 zjl#DotrbCiBW#7o@#{j&&K zocqB9+5FH!8#6P0!rq8!QkOL>f(5 zjlQD5?(1~)K2d3^x0?K~vK?}xnC3ry1H7#fYVHlJ<%^R?-BXQ@6<&>b>u$>H^3XcM zo#QrnTiXzgWO8Jti#CEf2TsVF`DUqh`rMtu{F8SYHwgpb_-dFeq z$%V8E_8pSMNP*u6CA1tD*3b*Py2`^dDzp0k zS&jtLys%)xES)sTk-P(p%46tWUY255wCc3h%j2xivx%WfllBEG!)Y202wq$HK?tQp zx9;to$-JDIf*@CG%|Smt`Octpm89(?T7Cn=I!Tzf$DKuf+g{C^*$M-^@_p{zCA+-l zh7)Bx1MEnj07NiV|2R*`*IVSPI`1pZU9EO5C4Ts-UtobH68l}8=d)YAgSxu2Z&%Z_b>S0ZX^sLz5lM4RX6WbgUL$sd#f>(q+$)N_* zG@j7b(XqkjdYttb-7Erk!Vt%pc#3@gA>g-qvm%L<6!UTmX^%)vXr(vuH|e-$>}vX_ zwQ4u9p8#1@6gRtU_P-dk)Kf)6wg_T+K+%nRnyUFX%B-zJg5Z+0&vglCTqCP9QF7NE zO&9-R2oSWsQb*sug*z-dSHK!(&GzNZcVfd--8vxH{c2-XuXp?9>sMnbo#uI*QtEjN zxY%Mxfg#8FbK5?GkxY8r zmEU#Ieu;_|y6Z6`@%HbEuz>X}3{}Dl3ris-wI(H#5*ol-IP`|8(yY<(kBvHL!wemOk^UU`AU65!0-7N?qA>kRk`N2K(R8ad@ z9iKQVDjE$=%GSGQf2ddVlj3!a65K!J;Ii;@tDKrsq}DiVNZxG~l;@@(1Y7DY#?yS} zithmaJa7H7(cI$buDT{}3Dw#6Dje;bHmkyaH943~nC8VY-TW3ZqH>mOJ*&i8zB4)B%abkj^Lw2=|M9Dh@sG()d~O zIu$gSU_-C-)~c(&Bv6RU`m&Hk$iGvNbnEd;AYZ=ChHoBGDr#y*%dbHvd#7J{FAJdHOtu3@jP5IaHb8s3pdDkR~=S&q+JoAXZ%62B%nm5 z6Jm(MUbCRfu*p#=yB-xxI7lpgDa+};t~ojHog(9vYnN1IEJlFfsyidfQO~vMwF%eyV8ovVI(WBTu+#@Br&X;S? zdflIIcSpirX#oeU5}4%K@I1Qsb1Z`iEF_FO-VFK_tx4i#h*31Pzb*^C&r*>k3E7gD zDA?+HI$&Y_nm)R}rX;xQj*eVOcL6Td&{oOh$P1K7){~r0N9%(j|K&^)O}iM6 z1w~WQ1a1pjSc52zKEy?xwTdTHw%0@nvA=YF9b@vx&vzdFSs0(aS$E}zL)JqcM^+A= zIgS=~)snG~++OU?mL|0zGqRf-5tA6_OCzawWTWPW&>Qj3$E)r!xp!zSI9R%Exzc9x zI=kbEtTLY>ZhP%6d8 zst-|Z%wtTR7+u+POOSbwUuhsTe@z2jduxJ-u!ivN%9oZy&%%r0GR^7=(_Y5($J?WNm`T1;hqddr!Pb*hHpTD{E-B-(g|1j zkDmNX#^gtGf`x3%dxkkN6sjaEm&X0AgK(yB@SWxjJfK;g+jln9`o03{O%W`*|Bakm zOsEIu?*@R+HK{UuFj9OsPWC{z$lgRx%#z?55tzayy*{`yLoQu+F10fZ>q%P~wTBca z7oOB`59{FUPPv*cyLwOEBWOi=;to~bZ~Af3x_JPxLeAy*Ez2fX*Gkvc8_8-+*TDTK zth<8e^jC+@+Ebg{A`XI{%q_5ab?91=9KAu#$y-LDuUfWZC&ss+Eg@L_$$hUda_nHI zpW7D*oB4b|_){9utdC!!6x6BceD2>;G*^$IepQwQ9S^XtG3HLr3F@K{Fff#(>cd2+ zw=Z4sr?7EH{;+-&GR4+je;u9*FjCs9`u&sqb8@kP-$ z<7Rk4$KT3-8n}O%=p**!2SjX0_tZ~mJdeYM`O=5^v3i9VMY|pmt;ORxrygwS^a1T^ zvRBRYL0hq`7s4#ziXry{V1X>SGX&Yhs>>1ROSg8G@7H|zatg8T$t19lTeVkL9eHy` zt-bS>K1d92g!xo!Jpj+i5aVnWuIb`mBUs46v?rugOTmMr5Tk-5F6|DEhNMatSaH)x zsAtX4c0Om&6wjyXhD$g=|F^s7uy&jeK4Sk@76G_o_v*z4tnEHhrM?_ zTl3okt4Wj`=T=Pe@|L+%j(p_PyO4?@oFiz3rRYUuo}5L7+XMgGrhH8F(T~_JP1*Z_ zIyKE(9dqSsoYMx3&{f<{54<5vD7i0%3snau>8{pjkC#KrwPS^eJ?cvY<9_N0uV{O8VeKr=y`IQ7!I;CQ!IIzHD!2A zGQ~3vjBd(6Tho&you+u`fX7wD|z9dMQ5Ut+4r_ZZDe1 z=0?XBf3MoH16X1*wxs1Cw)m(6QmDv363>|$xbKb%NXlWq0f3Bw>WLZfh4pK5^dkwG z@Yv(^%N~z*urCDL-|Rl*Ios4;<$@FPKN)I=T@Wmb=P~|>+}nT-zJQ{KTa=Z&BK0i? zVVcQU(|n9q{Vf+n&O1!~pK|+ym0uvHT*vd2%`?b!V)nlm3$)QQwLSHS7K?$QwDdmF{2XSgwJ9p-)k)&w}Iucf&&>ExE=k_E*}$N z-QzXAaU4t0gRN>h*n6@FK=0ah*~v#~!X!%7bE*1ByTaQ)sz>6%y=ms*`1cnRw>3NP zE~~yN3MvW-;~8oTS@{udUSap5E2rs|ARF*HdWg`JFXwMTTST(Xp5XD4j}V}Mk)>h=pS?Wgcx6bAth1;S0dlOdZ$?B>lX2UleI@+P8WKPwP6FJV;hi7118L z8rs?+aVRM7(UD!MSZh608Dgk75ucO8Z9Lwe8*oA2+HIAVQtPeNYd*XDf&ca-vEVGLyI^_=ltM()P#eN zoHt0cc|`iVA#nsr-Xr;vg#fHu=f1Ah9jvWgQ6z-Nf)>oFAp72Cub2_ueEnGzyHp)b z3tT%8qdS8KJn!Nmc7FI9Q4ZM4Y(ZghB}Ebgab^pp(N=)XD*rub`n?cQ5*lzW+1i|K z6CqqYwzca>hD?R&%R`^n86{$LQN}&7HJ_VT6_Q4>`5U7aj@Qz_wd{JvQxC^QU5Q2D zZWe`T%e6~bXx>HOo72M~9I3GgbOHW;3^!^RYe3%P8G*azkg*liJN z%GG02bWZ@5ar$5ntYAr){j7074`XEV2!KvJbDEA@sN-uopxmSoCKf~FNW6lOrm$&m zcfatO_1WblQp^DGE+Hq=0(x=|B+8tgCP2^*2SA>8c6VTo&Q&mH?WJ{cQqtt(@Mb7* z`%*&kQ@fJ-ef@vBsa-}tqdZ7DJNsV8VGdM)SHqL*kh9GMA6R3*x>0p_LAm?wPVCge z+1lu>dH%ePf9#+|$<#3c6N9^`>dYsCo&N4X41zz}i^Ss(-4{AQ4b+i8{MbGY@K`^) zI)x`USS5o$r1bSemlkxG%{piJ{&QSV74!!wDXFqSb7+xbw{=$9m7w(Wbd8~s`_LqF z@t}l1|8?#~yozT6RwFh#+UJoh0XGrsn7jP6C~WVfDKZi3I-Qk+)ku#45Z!Ld6N_%_ z{!oHQkUD0uQ3peeUwE+UH*&mAWqEqq$AvvA<-)?I6J+k{I#i?{r4EfXPC1(`mL5*T z5CS3@I2%o-84qVO4K8{xFke%$3CWq1WK$_z!@)#liOHaE29+8lkNej2BwXx>p&>Gp zW85<(u(qVIG*2xR5OvAH(`8Z>a2~oZhkFs-{EnOg^lCS>C@aQU5s*dFymN*pCPZ#m z>V*s1Wf3x4JiP?YX<#~-l$Feg{1tJ$$&EN_kCC>l_L4ze)MWIkM4}fb7`;mC(W(=S zhLx(qQ7;ajJw+J`FjC4CxC@q|+nYPGBSFH9sxYIpv@!NwHty4)HODk#nkD*B2fFZN z6~)~A8x+xzWI_dH;4Wgg+%3LoszexFH{#IrHlug6zJXY_H0xXB zd9hC|yM3;~XJr{R2H#%$SqlhEkX{JekQV$w)&=ZbjBr|4Hh%8m5s|Ne0Ma9| zot^V3Ed}59Kc`*rxu294eVb|*&(YbbH;1H8BT6O}3d6_4vz)60kNY28IIk2^#Rl#m zmN%B`a`;O62gkpTYR!x?NffQWx%@vz>5MjyB(c-j3?WeqXEU(YHdL0g7B^OwQWwX5 zd{xN-aEly;X7Z2+KMmBQ$TJ@@X!LAvMw` z$OuwmVisNwR#w7#mY(&6k+3=RPHWe43~)Fn3&3Q8Ux?p#Y?5{H_MrCM(j!<@_(48~Km2XEG)L zDrlatsa?nP8^>zzo@{z~0Tm)4EraF+e-^XaHmgL}sImVopi>3%>`hr&ezzDwyJ3QV ztSkWQy5|xePwTm=IdkaUhl>=@gnw_)vuakiaXpCt%S+~_)NV^=!0)FLS3N}*@(z(%rfiEuy$rbLT`rk4hqwg3i zH$@6n-1`sPb^arl76Q)HWv~WJa;H;;k$k^F3#es6Zgsa9r# zSOMlhr0(=^wUJJnc6mQr!t4 z-8D5ejc<(o=bE+xbzgzwfu~TfL>s8II{T-1Ua>6+3CUOPi%%KS(9Me3&ri<89%mB{ z2#v&nbY80FyDxcBtam7JOT?S2m~1AAu5O_hsxyx`IR%APj3Sfwq%_(P^sWY`~8wCuYCYXW3 zqkPXrKIM_l!44z#Ak*t~Pxts}h)1iiH3;xsY|yVQaU01Pd03(V-!bR5Lg|Jv~0o;JLK6MnIVcxC}wmV`F20MQf?0Qmk_V zxMm{gFH}G^4YREWYVC&}bvZP_hb~+Fek}FXn+u(mtc|lhjDzLGXZ4QzN#yy+OKV!$ zfZSsJyxR4JYsq5?v^2D|x^*t{*CCP;hgbb#iIWeu+mJ2R9-{10gNp$``=6Yg45pPI zKBchBkN1^Af8qcqlD7xa9u5MO$2^lx-M&ZcRDAsS?qj;H`g5la&`Jsm z&QmakYs@=Q^Vf0n?=d~5D+Z_WJDmnPTkfjkIv!e zOziGL`qtjMy>&#?-H7JqWy5B&Yl!*lhN=w`Bo|(G_n(Db0 z%|`oGW?g{aAbm9Lj_E#=DYf|XRadu#QJy`c`~HtqQ9m3UoQkRQC%vE#`TMdr1E|3G z9zFUBrr*wSk+HZ?ZYXAEY}!317pC{pr8l>sOQLYiIo5X?P@iDyXj&*JIm8|m8X6kV z{gStW?3Kj^D&Q#qTxe@+8yco3JRBYwsVx_;%3NnmS#mjTA7B+6+L?{iX8oeK74MTA z)L-ii$01tmPK51E!Mx@Gt>JK_u_%n#rzME^DE^_%M0g1mH5(6uw7xS2Q0kx6lK@r~%joqA16 zmK@`tS|#13WxmK#%h<|#9(E{j5#s-(C~OThu(N754kRr#z*5;(op9`-!S&!)lOKK% zbfZ0zHXnTQ@|sgDN|v4zLLHOhMtHHM3)!HMC&p!>d{}R*uxAf+iZYkK#&)J5gq+8s zG!3MxrL_TS08r0WuUAf-iHq~LX2Jhhb>PVv1A=jjK#WM;`a$AsBQ|kr^Nx^f#rya7 zL`1OPKE1hm^UjxWX=!O+KR@KJmj#kCs;l{?sprEDo_a^n-o(SJ?R<~UuIo~#7k%?a zlo-kGvNikdW6LK5f&);w$9Jc{2(q;*420jJGHkilIee$optv0(6z2v{d!eI)h>fKc zE|<&*3=CXZu{a?O(j==o8Q&Uhataga|IwVDjZpAzQ907vTJOQ{hi(cpylDYoT(kJ| zet{isRs@R?Y1}Ea^#BKotPAqY6R@>ov$jCLDiN>Fg-zX>@0ux^m}D^AHig&jDISp*Y&Kd~>G)7J8oy0RXhpYVe@!5{ zbU9lHQ5qL#_F)u05&AX^R^VcEgwdToJn6NqTNjyaI2nts!mjpjo?;|no(oO2h_Tb> zo}QlO=H`}`jBF3iCz>MbS;&S}VY1Rt(hK|e=-?A~rk0feO#VQTd3Mo(SQE+q)z$gE zI1x2eHqi*NR6{aOQcQ2kQd8_78UfQ79A1iJGfC;UeppT90^MXkH+S7ddIks(*P>kW)o zD>;|>n!Qh{dZsu0>VwuhJrLzti~z7nlapHDbB}`Geu?%#2%o$-Tu*5e=`k9Z_2$h2434{1bFd_ulc51*&GjOB-G9rBjgfE{9cQ z>Hs~u|ACwL{OvxX_zZFrzWWnY*-Q=3h?Ick%M|oF=*^9}8xAY1SqPF7BkX=e-IlUn zD{%qe@W4RiZEwLok_&muY1V;@p`%^Jc){J~gUqt$RVf{wEu$-CgX#GbssJVM)EwO z>@cM?AMkm9-^IcrkBF|dZDeG`lF=Ipq`m9MVk3M3X&>%>WZ!NwU8pb9-&qiqyg8I2 z+%NcIm@Og#R#%%%OHEw?PvhHjV0&oOird@8oy1XPIq;TxuiPqgu*A`FlqZq9z(f72 znZW!tLV0+aw0n$*;MVuOvIdyyuJ+#iG$aDp_JzwMMb+2{{Eg$aSxT*{wNJe)rwtJd ztK7v=aw5(Xq}%6(Jy zQI<@%kpY+drz~G)q_r+GOYs8Lpt$eC;fAb2-Oh$ajKolh>d9sLp;@BC4W6V%inF;L z$9I;V0*|8u*!j%j#>Pw}GE-cafSC2B&dD2M8}}bDm7d8^iG_IZkJ%-ECo)>bfs`cxs0hQ5m<-@+#SIt~;W#?N1frE)d z8nO(_^4hDcuyq%h(?q;!N!kCq$?YI-yNj@+eJS+T;A#gA9>EBreblv+a-PR3l>OW7+jxi_gw zDsU}Yw`||8^e`M*-tsf?Sdr77%ad823pF+bnF5YU>@d-l4I1be!jk)^~F zo@($4uTj1Wm>$r)41_zw~ zHda@AySgUVtBN)@GUkn}-E6H4xuv=fXg+f}Y%Cgl`6kGdU1I&zCQZ|9;H`F-Y0iSV z6@Mia2anZA_-jgvZtd_S+Pr4J!!FPh-@${cDQH5b(@`>}9!9U-6vNHKjl*pAK>H!V zzGQ|xxIuPCR-iW-6F70mVMv1(_S?8`q9cqiYv_Il>r6xDsjfkzZhjvLRBnnEjk zV=rx=97Uq*R7=>c9#r7dLu+OUv#b5z%ANo|+1X`~uO=o+VA^QXe_1h~8;Lu{ACnQQm5|a$DvGcd`oz zw|0~8Kx7Q-xh$F5GOd$p5q1tirF)ho%w;sRB#&ET` zczaI96PHjjrVWO%6h+UR!g}qHTT?Z)wX3VE_;+~UB_>Xcj^^wLp_rD#JnlS<9dA{5 zJxpw*hq7%owrEUOvRPv;KEqx}zo^xHpD=IErk-_7`HAa-Q?;}0lhSziOv)snn71&< z-7cOmF`&Yy+V1I%>)l=$$GXwo9Hi$--mzkyEB{uiK5KA^=oZQ9To~o>BU0_|)S-#{^ZwzJTmdx4pq`zo-Sq2@bPfNd{-Gh%OI|b@ z4e&25rPM&#etdw@C{}DwpnyM%6!evSJ*;{u%C5cR$_+UfZUsueH>w*io7lpzkB5%9 znrBD-leD(&!#_q`)e82M*|8t<$-yf0ACKAv2ZiHoU^K@b>B`RVV|+99O9iy{u$_N}vGCHr&rB1dOuiLE}5 zQUMiaIjyP(#&avd-Q;^4lkrunMnmo6iZmJwP-sHN7-rqm_A*oolXm5NBml;t+uLM>1GJC( zcHbtSg&^M1UXi>`3P^&3eyH#V+!b_3^8`;wG*o`@fz#9o0P)t$NP3% zY6So(BngDicH@ybojL++Kgo{bXPvxBDibc)DRZ_aL5<-!-AdeoNlk+?<}7xx2Sl^-T+4 zSO8?l=g&`ff?EvRLQx9~f!#ySS%HnEvGb*6e}a*(!tJUkv{nQo-`tU4p6fxTS*B_7 z4S+1N<+`ZY8+Th8v~>%=>@0-1AG;1B*2wVy^xC~JNq%$^T+R0|Vh)lQfJih0w%G!*bl zDmup>G0AXf-vFbM+Hl|5aG13`^sB(c7NhpTmV}xBH;++<%JrGQ+64*AXLYX?4Z-b# znORO@Au}VRCBWiz{=MN;cm6k;n!0RP-@6@hD@|KlvW|#&MT+P94KjIGyKIW991j z_#t?f(an0zF9vnP!oD+pKAbphBv2D5Y_Xb-p_cZ`I3ZWHU?=w4F!>RzMx6@-GGw21` zM@oZtM;{#Q?B;&n{kMjGI=lXyKXaMRgKdv9{#)+i*&6~}g#RznB>#_1B~-toRY3v` zXqEF;!A25KA^AJu-#LNA#R7<0(Vd64*=*3K(CY)mfu*H)l@n87~v1@XU`J}FNB+bTYy@I z8k@r}K!I^G0jwGE@0Ond?@@lIFkir`lXy`F5qF;R8JSv-Lp3JvSRm?l9n{+TtBb%1 z{aHjtPC|SnmPmD`tfr|_>u9(10uXyEa;5|LeB3B*8}9XCa8rQ$`)i4`Ag12Z)<#T3 zWKrBim0q{%i=S_+Go-Is1ZT_mdtsq!JC4tuRG2OG+Pu zI1LC<#CtzuE9}xlxWLUYVlu4@H8}h<+}u=66l2wlYGjH~JI)NpL;jWC(zFQoOTow| zpZc@H*y!fDYsg}7ipa`Tks)Sdp|vs2_E{=V%$r6ZKLpvgfB!l>?a%RNZ21K!0oz5L zQ;k!U?H%RLXxmt=#*AedMt-YKB;~NqZfj|$jtD~sv8UJk4OU~3vYPitpWhEB;mK&3 z>Iv4r7!Ki9;npFrwvbb&cc=+qdOi#rdZ8#}sF2N)Xx22CvB`Fgw6rzy`Vh{7#CCmx z--D`0!@qMf{#zo8w2k-#ehjhhp8Pr?0&W6PF6fG)Kqz+R^u-3@SFH}s&R*WY1!~Z(KTBp3b0B5`Rrel|EHUp zlV>h~Ehm&LaxY#9>J)H~VI)!(t||I55+A@2c0D;mceON2--iWHDW9t;Va{_%( z1wFPf{_YdhG=8N4F1y53opd;^F%*TZ)=(m`byCdwmc6mXQk}%c=)vJ05IEaL_sYC^4ehJR^6B_D7ko05yBJ<@*g1z{a{kv~8L`7a=dPc?k4E&-Q zYWQoSz1N>n0d4ttkNi2o%B?OaV4BoVV<^u+RkpOKdJHZ-zg?^|?m6V9jNd|d;1OS* z2uj0Mkq*iVHau)~?R>1dk~JCm0zMs}F_u&wU(WX=`j>FoFZe|a4Ed#~&!BV_}Z%WS0Mj8tK(cSuXw zKoX2WAp<|K{Y|NbgImKNXgKBCkt%(qMKKjPkQ>2k8Zch=<}dRmEYmP?H23ofCu!C) zyZihSjjMN^r6UUW3*K){`si7U9bZ|Sq5i$F|818w_4|k^R#W9Bq(}$)!NnKTWW-NL zqO{1@ZCZ>U#77Yl>;|M|I*ojFw3d)`8zbbgovSEPtPLm4i^%V|J9W{q*+Pi?i@&0E zv*~4@5td6BOmslB?n>l($J&zI2fv2l)g#?aK>;dp+w0Nh z$z1ask>pF>bYW-TZ$Hxbr2XVnFV|vx+SCC7pBVhm!;Qoowz_m2Om>~s12_4I*nRyA zk5nQOW~}i*yl=TB=*?n}?w=Ln|GM@Fi&j!LwCGlxyKg0p@+f?tf6t3kncKE_IH1yl zJs37EVW4HItH^@v#jWRJR%h5B@W~BzMZznrd48SJ-h#x^EE)w+oB>3~R@c{sKyk#( z`tt8eL3G&~ zH}pr#{{G>it945TC@16O=r}mSqxIqIh-Xc0X|9~yZMjU4mQ}lG<>n@-tvv-IpAwRi z$aQPAxrY!K_X0D$0~@s(g8TZSI5{?^uB7CC`gC)7V5+-tmn|(f z$->6cM$x-vPF&o>!$U*UWPw)-Dj~C>Csnvi-FI8|dW^L!?b{Oi=o6hK{t_z|;t#Pd z<{l4}2l3QyKJTqBJb9+%yEjl=(%ap6LD~7NRK1C)(`EsA#NS&j2O;p?ngB7l)M2ql zSt%)}$T>-PYN~(SMjE$1s>U~qOtL8;a;SycSTdB5i<{dbBmsUSFL-q@s$Db7*!oQgy^o%5x^v~lU=S)bJA7guhyNM?kXoNA z#8Fyb50H#+3nwZmc-3AgPUuPFTFZEdMy6M$qK)L_rN&adsragoV4KsC2{9W736{1} zU}kR;e4UJIYZV=hn)fKw(|p1bl^fr?j=ZngJH~+-j<8GikTcHBBu;6F zYB?5^A_PSRK|u&bMMOFQl_oVJO{573k={!ZiVZP70JKJ;l`zc@^M?_;PAGUl2m=gkDhDi@I;!?L|!+|Wl z&|OTHD%wAVOLI?rbX-iKpa9%AfF2mBn;6m1phO2XBVLrF>Tn zz|^{44>+X_-A})po+x4Ob5DDykVQ^x>3Z9aE((t7{_HvTSfUrjSsSWcL7q>2y>!d^ zWY%J)8O#1b9eqndOy%X}0UfRnfY8nFN)VuyM&BEly<~`7(9$t*0cP_UI@FwxG;-MZ zP&BmO_WHyYg-ue^-W>zXJQ5Ou2nfKDRV_CCpblyWg(_f*Q@vvSXCP^tSnQo7PZRqV z661lX9YI7&tJx)!!wX+Fy<(dF16ajWt_j#7Thdeu=G23 zNxhKE-z9Z}Dj}M3rn2kf=@X}NL^;5cDu84qRb93leWdCCJ1tEd~(6g&W??h zwd?6u`X{@o!30TdC$P^&?It`((YfPB}agO+L^Ix|*@_a(^T+yS{HOc=z(rA>@geKxF_b z6Da9`!C-7a2nGW2+yH2&0ZwHND1;19p#$+QkJ$1Yv73;cpNUoF<>ed-fpHL|c0a=( zez>_Adb(?P*hojm4M^hy*?TY-*Dc+oxH$J;_q?=RRDtRdJ-yiOxtLe=2hNwd>l7*j z2x8D;?mYv^pLR*C6nAr1f&7-qKnKmM*6wAb(Fgk>}=78TFAd7|o{I^!cpWMjl)!SdOx#gdho z>2K2Vt_B>4TXZ#iv?e{=Q^ZEv0D-V~jZ66_%<;Rm)kOF}in!+CCd$hGYwen?EBJ6v z%Z=^Y7DffTtEeREH4k~@)9fhf1#(I-xaGmVmS_WdP65_g{~&-l?M8=mEEtGS7DtSFhxu&ZAU^t$I0@Tx3K@?GpB5kIf~!s zP#1ls|A`oVd-0$LwBU-&YJA8gR|4L>n_sbsAT*3+dl!|!2Wr<)63n)1Bp$(&BT7EU z@ei!RECxhF71w>yFJ6%T@g|?$y*7`c^-Tt5xKa6WL@`dF*H^8H@9=BrO1iVLd*-Hd zMmad!N_!df?Teqm^0L&+WYeHaBw3l{e@yU^WU2*9yq)r6(md*Qi=JmYD0bJRy}9TP zf1}<>j_wEf9&|}T3DbRvO&W!zB7AmcZSq>qUt^Nl@iq*hilRYzGWl^Tq9}K!lqyr< z#nXqY@@8%P0hUvRGLCl^?wL8ak5|adp`@NB;0I}3NU|H*^^Ejp!m-KtFFoEb-JoHG z@6QV~2tle8hVVAB|Ef}X&m^ zf2xL%ftHW8{(}i$w!SR~2db!)4|VDcb?83!*0|_haK9ha9cgg3|M6g7XJ$FuTbx?D z&6`a`QqydU-=b&6gvYIS614m4Ry~bOqL@B;Ko9CiZeCy#+N)dpgd22Tuq)DMsx79m zi9xS>8ESZC&(0B!w>dx1=@+yDVX)|QRo^z21$ibi{p`e7rdJXSf8KAj`J1Hj8q-)U&+0_W6U~k*VjSh( zFnYIhh<`xF?UgFL8HwW zyqQ|90~v5Xt?$5v<%y@wuwqJm(kk$Ym|M}OWS42CCC(nK@`tx{ZcdIG{JeFf z-P*2}^P9r!N@M)Og@gu6tx1~bAT)RCg9XB+O>~-9pWh~0j;H`KC`)}b4W}d$Chne+ z{p>d8dUycfQ0n;7LNxAadpZwlWgRC{l*MPKF?sZw%)THB`XQ5knK`u=yWEV461}zA zu)S^7eC4QA^QE6b|8ms^m^)MOd{-(kVfuS%!1SXo;j?4jIc3}U%ElR?D>viuvH^b` zY)mU4(FPTP5jm9_I%QC!h03;8x8yRc-RU65lka>E?$|+*{Uw~VFK2+jZ5{~DPtehw z10^zzdg*m=0!Xs=r1u|m8Nr^ww!dpM5c|9TtC{*e{{5GUQSSl)<&}KAyrsSi-(DTB!ZjqlG(33kWGq-)OUpBOF{(m$?@Ld7 zeSJMimiplBo73k}t-XOFZqsaOw`j`1F&woYm|=c-ymrQ#2lu$PgaXop4VlkAB1b2y z1B=FLa>o-)%_2mlM1Mu`+fY4^v$$9cR?2-;^W5)tX5TdkJ;TB3ey+*-*Dx?M>*?!f z0ptBjz_nqb?Cn=t;el_a;>27X=5s}Timd1)Dw`ZUqVD|oVn~|+j!~h%#TCkUzD_PG zoJz(#kl{k2RN(!?<;suQ-0RI zl3nM;L)64TH(DwtT8@XSjga55E4Vlvfv8`h%U*%_i~A=DHQ)yWOhNmy@LO+Gk8s}t zm~~A)h9nJu#?GGUhK*Y{^0i2LZ;WfD-H8cjGSi9o0qVDfTJ&S{*F*A2e)*)lRlFH2 zdU@0@KV_)5O>7)3TF&(l%94K|iVwCtrxL(`Ez9u>f_qMkifDV0x|o!i?1mXiU^@EW zTSGs@!=A>iq?b-!&bhf$_B3t*B92HxWG;=raP<~?dUbC+$-^iaT*9}h63|w=Yc^Cnqj@xfqs7H40U~~vqmLy7pazfB9HMb z(jo_)`@7rRBTshDI)W4gu`O{T8tKW3x;nLxS`AXkclPGi$dL7vv#5rt(_7i zbh@Hv43ARvYWG6Q;B1AIFg#w?i%&&k@L76X-|9n)(7Y&u4?XXJRQ$h9oPew&)WeGS zx(pL1KGOSnL^^)+7yqXn`xcS~4(VE3j)Cm7WWk2xcjf?Ibo;qU5pBEZBJ!^~B<)RT z)1G9iH7qeZt8lfAT-mtLvUqJxHdB`t$r`Q(smY((xKoavcHlfl)Hh69DP}>8zCTb% zmlDzGCDN@U_S_Qh9xkG={QCCYra?c(7Qy&0>lIUJL()#OJJRu7+gslVX))#yVb0NB z1+Uc=Q}6fg+d)78Xm5}yQoizhg^RBB01WA-Bho=P1QHsz<1hP+7)_ue)cu92`*Bpg z9aQ0z#MWTBqTbe>xno5C`t5;+ypAyWVv=-k5#^-AsTQ-^``jTb?hdSm&d7*34vZxs zj+AysSi5^}OqOI8-h5KFTHQ=!^A0bTG#_p-IF%IoSma9606Mq~qQT;#6MJe2#ij99 zWg8-ky`46TTG^(bM{!L=UKASe=ONh92cMVm-+wUII7HyRfcjMm-c5wn>-o^o=hZcp z_#$Lqxk3AI@6LSETir&wCcW5=waqLy;pYlV(uFtkJ&Z=8!$zGhfm_(5Tm*2Vqrrk} z`pPbWHLj@(lOMgM)n$ZgV9X@OZS=*5>|aasN55fCRNvcI(x58z^v=Zy<67BQZcq=> z!XUJ=h*Cla@-B2X!cR>OE5ORj1dwq35x)vKf!^~(Up}|z;o$SyT#<1?Y!Z=%2&wE2 zL`eZ89pdow_%>N~L7+{1huO242p>4|PMl5Vz}Nu~dQsFL9wu526GyHrqJjv+JEW@h zDJF0QseZRxJEff7Y=P12+C5FTGKL*zFqh{tcEpjUd$t7r0>J8 zHCeaQB&Yso&x{`pjpjDP&T5*&Z9X`%rB=Q_B1L^@bADscn-`SNnI* zi|Dx~G`H=?I~c|7iU;>KHQ!Ew^utbb?=BjL%~7Zg`o}rmZj4$vgd%k@kXFxx_4fA- z!RU58-)i|8i_w?=Ve3|gf14By!xPoOoS(C=$Gfui8j_wO5J~s8OCFSvP%2!MD{t5{ zRz^fTvs<|P{%R{*v@l>*2M?+WiBJzufKlvhXBxDtUgeC|94s7|JvL9 zwy46f&FqS-ejOc}8|j6G!e-Z=xgYF_ycskAg{p6Ay1~nP2FL_^o2$PxT^X;hx~5lX zE#|fumv`>Az)o%TIl*9M}$@#j^yj4CDX+;QAq zC(;olCLyfRNK$T5o7eKnngVPoe$$s@rFMDQe&iz%dHMOD{?zO0C26ni4!4F1g>jH~ z)JArh`QDbBxyMc{2I{p~AcoQy7Q4jCdW%gCD*FXMSic?dm#qO^XkZ>qPj@$vJC88> zdY5M|)2zR8vtB_is8WX~;5^pDV_at#;ZTJem)c>&s#IDvVk^TbJu*T3=~2QqG4>BF zEqNjI-yiIsWWlFMpfkw?XdZj=q{na2LZY3*!mCf}4Gco-#_g?RTH;lxq=PpI`Cgj^ z?*zTe#2vT0XohXMw|zI5O}JEJuCwIX4wn8R$vWYS9mZ7DwI{NnubRHUkl%j*;5R+d z(Mc;m!%A3^*b{4EDA>ZkZvO04+2n4ay9s3{OwA)i;biH(6_`=J+3sM~@J>JM>~3?+ zD#aLKtJcLW9f{rsw` zs=6vFyqiM?YODgAwysVUVY!+&e&MTrG;c|5rBQ~qePx*U7K8F}7m7x$sA6H;>tp_* zVCV(fUSK-oJqnoiA|u4fXND#88S<`U+>4KyKUEprIWjW|2LdU{d5Td8Y7RNupi%oI3h? z^rI6y#G&Z`?@}2b*kRrw}K=Q3#))pjy>NiMqCgeXXbt?`kh3yEBdOCI9C!5;p=_;npM zfoJwS{!98y_(jEovkHLe*9qX7sHiAB9uIUMe);l+ZC7|0DM_3j$Ya8lanDNc;gAv5 z+umNz6BAfmK2ai+OO=6E7wE8f25HrKM5=6m1lWEs_p4UZWXJd2EEMXE_{mQSVpn-J zQru?S|L~0fADkN)?gn6frAGlD3VN*@XbmKBOWQx${444@j9|FEb$?8Sr%uls+%PGK zvKY6A9d@5cy@y-6v3$mF*D}${FX$N0N{){q&rj1!(*Eg}*&)Q1!xQ@eqVD7kAm&G| z(+nU`Xmm7?DPg>DVeLnMYGo~I1{dHxeM)+>%zM2SvNz_f;yxP9gKLhFgy-4+02+)> zE}{Cqrdj%)=@d2s{nci!vlBYB&IKjrzeo6bm{odd(-$4x|5D8lN%&v2viDU~RPNuu z4~N469r4wT&m&M_GSYKt%4lcKfX;giDd@di3hyh6_*b+~{seX2Z-q^3*pNbxr8Z}v zUod#D{fxa^O<*^az@I8S%`E%8ra#~h>m@KPpneVn%J0 z1&P>na$?haMn44fmHjQv*FU1CFEM($Np)&V^E~RynnCTZVlZ;s^IuByldv+k@9b-c z-vO-(ptvC{ihFr`2S3BsbMoRIdH3_oS-v!H`}^*Yx5Lmd?(>9M@akvbtzBK262(&C zOj|gqX85mRf8~<~phUR?HTEwMxflQd5kC~l0_e4!n*%J#7Pe;XNZr1a9-l`k2?Q+1 zgM>tAGTIYmX@gmrC&c;y-KD-r(?&0aSsL(WchS}~Iw5~~f0tEX;Fhd&pS)%Tod81f zC=?2)+%q;d=J!AleV|qtU2O`!tri?{mujq@lLi+TD~;S-!bC6kjDgI{SF7?c72caD z&JX+IYLEa?4|HKS`mUz8qEEif&f5Su77RH58$}O;exx(XnT6;^rC9nL>*UR$Vim;i za1nJtH5F}&Uw7y^P>0_HhdI>RcF+$&jqiHJVCI( zJ`9L_UBd$aPC;HikWJcaC5RQX{nK%9M zeOmI`+Zy)VZnfKcwvzJy4Gi+Yu7KD7Fo!PK0~k1r{g1FD4}8q+^!_XT9~n=fZUt=t z$!3JD3xz~lTN7uYHRHQ&eW0dIabO^4(l^I^GaS~a7N4u#UHG+-9Lz|6{m)AbZ7U;; zJlF+s)1;EKoM7k`2s|Tu=TjctMb`bziOC%X@nsk8Tq=pka9R+N$Py};@ja8V5Q*5@ z3>*A*`w&p=pkI8><4Q^C7P>3W(!$q#6Sz)^kGBko_|MlpF@)b5c_#1KZZ<+D7c%Sm z28}ba&P>mTP>xmK-`5j@Yeq6;@~N#sxn5;7?1 zo2Bp&zAwOKMAkP_0dnY29`*)na?3lwq>fURcNINtrmx~ujGQ!C$t`qlyO*;_d#E(~ z&@XbIn3$US`}>DestflTvb}G<*o&R-a?rJDh6LhTE(j(eUm#3u+6%1xZx*h5Xj=C6 zy-{#|ex*O!)t%f`T+r`oGl(g<#*;~)XrL7op?9O%H_2%dgAQs&P?9=m!bg@>hr3n| zV->WR^l<+p{Npv68oUl?G`)-%Alv^$yJt^q)|75Kt-Y&`SnY2Id_1~}fI~*{;TC9RG^1U=oFZd8HjEVg)398jRRC}&1LK=8 zM&AxlEViJdXYQ7eaC}kc_=O9w@$*-jc-|}5_XR%>lzyhBBoI`9<_CqL627~9KIjGsQrtprl(fVJARNW zXp*&VFMM#;i!UG}R*B77G|pfU5;;4UT{t`Y6gd&?r0csP=(y6BN5`3(QoGm(%6FOy zjEdhxB+V(;(5tJP=SxsqT1I`9-@9(C{kC)&&ca`@D(dlZ_3TOXwFMXcbTl7WdZzd0 ziWwQ&(Q$8M;a>N(oUF~BH%7(yGH?T!dHV-2=KJ65i0VJlE{9)B5;|W8XBQVshWcDT z@2N1YLCi5*#SZ!YyBDV%mYmRq%|u_D$3DQVz_n<^DLDCfm{ zpFFX~fk4Aot5Ah^{rCKVZ-Oc00hms+*3#qEa%!;+8V~w555lDtOzm(QYm|Fdi;NxL zfqn^|Mji952FB56{Z-TRB)0j}{KX`EW6`bvZUHy7zKALjinOxiH~8A!$dOv?sHH?4 zDu28>GDc-lQa{ss>apPHXlPfC9?sH*#FW`hQvtSY$M|Qo)0AXd@D3lD(xH}=sfe@8 znN;E3!KjKq{|UX?^0@iZcIi&2TFz=u|AC=4e~U<(+?DlRAM-`@lx;HH8ulx6X?i`4@MYles^6>x_OG-jdj~G60W7v z7Lx9AHbP-%vHCnfIMGnbd)!$7S0?F7-7!CqH7XK+f{Q}nUSkt*k7RbQ1>(7=ccYQn z6<#aqGbr`8JsQ`YV-Cg$_WkeF1YpN!HL|blt=-(9R&yUV8=J{As+@)I2F`w{@2WL` z#TLd}WR&*&>IF?Wd0JSxEf|$>Sd5fH>~0K`CQtD(d0vRuvhN^-Q~#{lUR>$9 zR>6``hayg_z|@sRC9?OGbe?!S0iMlr^u@x5mGmNBBVYj;0vS{ zeml-bZi@rit&;*=zYzey81fZphNxMkWynecK26ogW6UC zezfq58fv4%ozfG=pERK>1acjSRKJ;dAP}k0(U%Zt-^}Vp3(!))lIHb3-`}GgCZ@3n znjaSawZT~lD_#`UbQ2@%XKuzwx^2GquaYpr+`q<}W%IJZfs0L=@FMX2%2sqr^~voY zZrlgE_fO*PFW}p$#fj3>(+jxFb}TP1qd;J_sM{lz02R{|z*bR7S@dP|d|uN)2*hyn zNg*Uf_@yBnd=m-q;oWh33NX{Ri4&|umlCz=7dYQj0JD2wVrXcnr`Lav;1=Q4|ENZ* zC1tScFJdHJOrIYVhP{hDzOFysbW4Y{uAbS#%#Lau(aJ>G zN%AX6Js6rYkV}=@F?#R(Qkc6m2vp4fs6^6?XJbvF^HrM*Jp1mM1GMpWn*svH>W1lj zx8L2~0H`T`v%LVMK~Z8(lcbq;uxbn=E2|elgW^G98m?ISzQqu_md0{-N&2ce{w>~< zNTmpDchy7TvOMf}b3FZlGIqa0KcXE^gYW&Czm166Utp z<--*N$3_RJp#k_DfLbL4ViO2gN^gvZZUAI`YkgKh6`N1iGe_ulr@!~~7*L@U7XzZc z+Ig#~<)n^w0K_PBu`%p!`rv zOAB}kv#|A(T$37LsxrW9bcMM{Lh72pH31$Dj>gC8>PEx%JDcR8A;XD>fAucg-DIf| z0iQXLZy?U+3{+88z*i^3`E=CKlF?C7#a=s`JEuZ|SRsZ+!&j}B0E(owp9rGS}*AQ!a_l}$WvZIM7+3Zc8-mO%^U|0`@=skDIf5-iCdR7 z_iCMSVp38=iz8Mv^|n;a*!~Eh0ytj#sm+$4<4vupK0DVZR+jB_=QaEJ0cJ~{vRB3j zNcGYdr1i0x>O)1W)e8Vt=)~x?(VY*|)^w$ixc}32x#cVRRo??PKQ&g(&Dn_L(X!R^ zNVc{1axR^C_h#R3HJ_*8^V+qjP6;yKGCFTq{PpSlm995J4cF%dyR<180y#=+4NK#aCsk|KbwLkNG z2EinpFobKZi~DXtx03(f{tgcxEhBX*RIFn)=#S9cVa-qx2am9k)#u!9150ahyUhBV zH(Gx1iAQOiiwr5?sAuv178ho+)(M(u`t-rV5gGa*mMhuf)7A`%-n>Ktp&*XUm@2rR zqT4kUcmI9edg<+nct4!K3kNsv!FT_i5$=y=#NIW^H^?gJ?#2`t{($I5#k+|Lib#vy z~YY#h}yv{nhD#NpM zHzj^?V}&LJ?Yp(Eaq+Nt;n_wfc~ zLayEDD1ZS9KTqlfg(pl465(23kBG-A6owjFGN9{hqq|QAPsVt(T>9w#mTQlu{QcK% zm$yKL686Qz$lF{81sDLfIU~=-a|Q++>bd_xL_A&wMx2lfl24zp93uZj`t$ZH+G$<_ zI1$DR?k7~R8v!qRGePXxFS&B*_wU@-?`?fJ$UB)|Mwhs+CWKSSGO*K>(QvKHu@DxU!93`HiSRG3#56NpcMZ_Rm_blc0J=*$Q=5(?H zcTLFR(h&8~B~3Hc^CMrQp}*os?)Iu7GCh|{-nzc&yb&)~kY4^iV)j7?{`glSVXley z&6=!5)seKjCl7!E{VXbG3v`9nH%|szSy>5mYIhZ`Wj5cW`JiLDK(iPy&8o#@>7-1s zZM?PftPI{7aXeUp&a0%coR`Z&v7_`vW3m@z#1F76W@0pis83W@=<_WK!OUO5yvzf7 z+wIJ_`f}CW=XK9iw{XUZayFO!1;6`-->X>mb(9j*D@@dI?Z;OCiu8MJ)Q-*54IF=-7 z33xl{IoVm_I+`A&w-aHv1LL!}C0#x0a)23zZZ+WRE^ZWV|IL&RVYXIP#dmFl%a+W) zW0k!(R7iabuu7$?PMRJy(tG|tgj(nFKcjrA}h-cQ z3`O-6ufGMx)kL7tM?;c28vhzA21`PoxdgLxk02YN82 zcGs;CH$LpUJpo+f`+?kd0LP+T&lh9jXpLPtv9>8%5aib6Ze+nRJcNyuFnAfF|KHOP@n;rQR?5MGBGhR0HYd-M9S7H@&Z`c zfMt0Dn1dBb&Ry22X4`Iklbc({zz{lcNx))wH!eDDnanWkzDjYb!SL|5G90MajRzo6$*G4SLilQa6zJU3%SQ8F-tj@zma7W$k`# zoWN4xB5JfIIw>i|y8`=Y2&spad<#*3iiiV(lq{Uv(B5ePh~4dwK7M#;kx4Zs0Qcuj zpx$gKh|#yYwYRskuWQJ$f-Jw)yts%4m`crtr;P*sZlB;;DM2RUESaiem=Zo3ywapP zt`Gkq2lxSh#}oqgu~LA_V;~m<_;r;-uF1JGv#Fb({MX+3uWj~~)+&F9jJ+jNR9HYE z4LAaL8zA@#ESuO~R&i;|kQ$A_EpTvsg$Vq@jh)-0J@765D5FkP@vB0WmLYSBhF-iV zH^Fs0vBKh}tvb3o0gz-_>bOw*A-1BzZFj-%{v68W^PExLaNd21cr`bm63*mN%0WmN zC~A?3X9QyJef<(KIr;@g8CU@SbQreXm0h~lY>^I3y?S8{xCQDLR>o=dy12V#Bx|Ep z=*@$!ateVR0$1YbO0?mO0yC*@)sIC4Gf6(?#{RO~aOrLj3$)+V(@{kT?P~dLBYcgf z@7!s>U4E_c-6v@8+|$_bWBT|vv!RG9*McuBV4j6{t4qD>9&X(sO47A&che+DuNiS3 zd>jBY0hwX$EcmMVRQO~>pE!}Z`PFk-%9qX_LR>*axDMlm^E%!7n%bo6zS-|jhxSA# zHJQ7em){C6BhMNL3QD_;Eq`ML-%W~AYK^!QayZC(QNq^6t-Vl4jirbM`y zk|!+DyeRL!=lL8BcY|p2m{S-B6_-@jZELpq$EnqKnXcKbKH*D{yKCoz!>(wvv$c6& zh6m0jZxu6Qamn2$Z#o1YT{~OHhut@#?(#|CGc2?Uj*fW@jHaeG!m)X#(~eF~Q-CdS z7{#AryIUbS7fwj794M0Bm?l2f`@nmntHUr4*!y^_lmWc(YgYO6LsS^OV2B3oV!!uQ z0SluCCT%kfN@nU%Dcs=VNkeQjaY;TpPbJ$lT=uo>=Q{WFAXeUI-n?2+L<&LIXof_4mG zrZ3jYL;#Gcze!?GvAX{P$aX6fR({IRRc!WIv3ZtXH-`-nLEzMY7n!1-lk2FwY9EC> zCr6F;J0TiPivbrgR|8~?seghhtU_REEAe@EPi0g`5Z;@e$9>@QDtNkk3p?dur0|e$ z^OHfZs$^}Qnzw56@Y+#+t<~>lmD*?A=`nnMlCJB~95!o`Sc=a>y|*^>QeHvo*B2-* zuF>`M8sX$xtdY(l&|>NZ9f?}kP+b`w z;{OG3=iZ<5=6JLlkK5%j^ew)1fAiYCn?V-5qXHRn`r8Z3LsHYJmeR$tP8%|M_$fd3 zpetUJ4`U(HFDb+7zbaXbBXzXH0+;{O(xE?)0FE_LP*9MOscubH0IDB0r=<7b0ExR@ z<;LV#khJZcXng;9OerN+0w-qN_I6sxYJy(~e7)h4y7l|2bB1Z3()4be*TD*(RVJ@{ z6z4xnP)oIrcpci!f<3;a98qXde>R;Xk|37BWBB>Tkx_w4I%1JRKIEk`dGi;0XI$c~ zQ75_JI$CL`lx8%nEv_!KGyc5R+(U(R@iG)W|e!J4O)b7pgLSXA-e@mxg)G)(gmWR%;fippyEAk;<{p)<-J2f-Vhb1jHdfK9 z`EKP~ziK1X>b5@(Xp4Ov<%qmNL|q%@pF=^<1!Gu8gH!GrD<>{IW`}>Gxav?G}1jyk8&Bmn*;Ca&rzL1==a|vDvLh|Z{OVLPwSIfPu<-76;t4Hqs{w$9asw^FT|j|?8vEpvVMOL61&2lNwY1jY)YiwdJsS;&w!V)Jd`Kn3kO(^-g_A$d7iKwH zGN6d{`TUBghRlQ#TFv0J%^w=9(7))NB09^Es8eN=?$$*O5H;hFz$-uRc{UA8b*_EC z)wy>{$6)Oz6MfK(^p7bpc@uj*du$`Pd^aaUt0IC-#26nrH2F)Y#GiA;;YOIEiKa<6 zrAb0l{D%IJlj9SQ>`@(!P@`V`k1uXXXgYr)HFRbI5qBV3IygAk5d3Ocw@zM2i=|_k zVxh2LWE{nGYXbj`E^XiPUkZn)yRLRM_c1d;^~G}MJO*Byo<$SjyCvmQi#xM*{ddMF zlWdYt;dzOPi5VHQfcFAxiBk`x!uQOfjt@Ca@h8v-WDWA9>>-X08>S0=jRl=JSaotS zxPe7Y0cJPVnUfjbtyZUNY6KBoLVdvL7J65=wj~3%5_6q@;^07>X;1TAela7^19Ewr z*Q&S~RVtkpD18twX-;24*?I<6qASs{kSnm94rgb#!r^j@qW<>wb`S%DxVU(j;;W0H z5C;{8U1b27tgJq5Qg2%|kl&O(sM2fhnL*hu>e2f!-Py27m_{Z0ke*)_V^=!nF0A@x z-=4Gvd`F)SxVUe>|Bo!A_@Bbo|E(q)dgN#-GxbT+)72mLwd*_dk7v~I;)5;w3Az+; zjZWl`J$oZCK5|gwDFc0e`<>*#{>ghWjiRpo=*zrs5NRO6-!HD%A5=Leg6~|EVYNM! zqR(LMq5<*YHiMy`Xs1ObxiQrd8-rLGLErBeUmZS0@C?GlAa>Q-Nk`XIPf4r#zLiW< z{aIW<{nqraRu4T53z^I>%7U2hr^$zpDrrZWG?Rzg-p!p@Uim?GU<;UYyk z1+Lc8x?9_mGVPTQ;SMr=+Z7wWmY3JU(1Ti=P4-|}OV z&ipc7G>Qi~n;8NYW<^(WS@kjT&?(ePUnsHCQ|t^@)@h!y785p;`&a#Lw#wwy+Td=A3&-BUl9uob%8oQ z@$?eqg~PAjpxyfq1?~eH9c5sR8e)hI(aY+Uip!NEPusahdWC40h;2RBMosi=Y^HBJ z30&9;c^yLoX7-Lp?3N6sVLs$b<|mUrW0lOUCAZzbI(m{9n z<`i%sGi>vVe!en`IAS#L$9vR>x(_f?2QrN+@;uyI>Jl)kv}w=~17FZpt{SbG2p9vi zSBUHC)G2I>B2HZTvxn{jLzDY6I&!eciKiU?mM~6jsr>x;nT0y^z+;lp+$yV4yuiZh zap|Xpum<1$p}|K_IDE^i_^xdmrcjcUMn3EMsdBSd2kTi{k0?;i&$D_6A!_BbjFsca zD$wVDNge6{lE<(ZBk^6CFrU9s42=N63Py`H>aay;ZZ(jh z;znB;c+p+UFNL-7&I9qo^*T!hasJ+=nF;CM?&SwL?%tzLVl8R;@q%~agHk2f)ST1= zBvg370_steYV* z;Re+lZ+vUh4N3f|o-WO#)lg8lVrgZDZ4UwgX0SLu%Y4tunYU8r6S+L1a zokxS!>1YnOdk(=5;rACjIIqb28MIX>w}Zm-&w&)|55;VH9#wVP_OX7r;jZ=LYN%se zmAm#V3i@1}jbN{)>a_b~KF;~)#?JF81H~4*S_xckH@tg`sNTOOwL%nbe@&+B5&emoc8dDc3p|azhhGtAlCH)8yyFIXaq;cOm2U_KlOH}W$C&&?)=iW_UqMtsurTM zV6y9VDL?>6oN#f=a}&n-dnAnX-dG$|1YO$kNw>@Ng$ah##c|aVk+iPedB%WwYs#G> z+kAn@$j|9lbfL5=b?UE~0@!!Wcb4=R3hNq0R*VZ_0Osg8Ge@89-^I>(DN*q>$UhLF7Z7<^>R7&ixiKLjfp^f{c25=I|VDX zzNoy4j@z@CRE*t=1^Fb-pmHuw^(EQ*INFfvJ@XTR)QvL6>UDADmxQ~jV*bThb3-!N zIR_d7AF=#=DZE&U{#0`EtCbfcbq7Q z`nrfUW_8iC1-T}+G`JM^MP(jEw{5#Ih|?!waPG)HyU6)^e(c&-BWh*2bt%O$twWp* zA|R=>Z7ho&nRSywBuyQEfPS%)3%EF)&(HJ!Rbp2O(0Z2HWX>P=83iyBfA^s1`&xye|s@(6bi`;S2QW;&+ zu9+9J7V|E!`i2!N^Tl|9J?DUdty+Vi)Ehl}T~o`wAOoRCl(2qYIY~(TU6=s*cbDF-6at2kUH^bcZ_`7Da@muFV1Yx7n$u*a=SfCZDX|ymD z9JRSw#s=LR^Yg8gl!WWFkH0PC;VJTZ?s~>_d4FQVB&zI+u4fn4C(tWVt?) z_Su`(9LPX#Wl6A4Xo9IkDmvI`!l~FQdD*6Q=_by7-lfg+U`oWYJ-?w6@X_`|n0q{X z0-Bq8Mq43d^gYcX;Eaa|q;M>ybM8E9&GpOYjL4S*XDacvu-p>MwQ+0Pj3=_mFRgb@ zm3`Wq9ODK}~yt4a?1)JrEuj z{xJfhuIcr4*2KUHGkNc%>GMBfR}aX?f%udVz1elg%JVT|H!`-+rjK>2H%681)}G`o zvHUhK)u?k}zDj}@H~;v%D}A7eYf?mj%xJ+9=He8&ytKi0g$YZ3#Bk|PurSaHAmn1f zLjd#NL(C-Elcqlozsmn2T*sqN-(&j&+yC#?rvG=W{m8lfg0Lem@BQnR969pWemLmJ z)kpt&6Gx7`+Rw!tInDU52Xf>d;0*qApCiZiOOKAc%Pc9`D2~Z9ZQ7^LI8tqv-wRAI zx>W+yT<}WNvi!R#M{es2$7W|_@NT#-=$z0gvlRn)q@O;0s=W^6BH5dOL2EignE>5$ z<5}7U+ak8pf3pR&9{CAUc$g*&|C<5*$je+gpfgxnZ>6t|(k~$a++Y(3#(M@c2QOn+ z3{^#y4DBCPUHT7%0!I_Tf#-O@ZT~d?9jWCi0jlH4Kn=|qyRp&H@r6VV4AI}YZoYZb zw`LLGO=5L|2uN=lv2Je!Tp>5~x9(So-hS6>U08vnEIRd;IHl!rJRe72j9+kf^4)cq zZM)J5;%CK3%uPA1hPz2oi{Ib(>b}LR<{)AG1@RE4;-Vt(ty?*nnR9RXt5l3DJ1w<_ zGEW$O92c~ens=8lWKpIS*EUCuy*VDZ(H3#9Hu{}J3fNGx(u?@o8@@bMwH$x;RQ&CP ztSha8<_k=F%gLwy{V>m{L+6IRUvco4j_zyiz0Aba-P;>I<$qf>%1B*3v0TT>&MuOP zCCsBXib3IdDTg@0VL48)?p7e=LfW$Hf^l7>SRkFo$xB_0ML2L57Q?Asg_SOTws<4= zB4VQIKA2ibe`Ic7Fa`w1OS_*s<;?0E+bw0&Z|&e2fQgusP1!CNgm{y`3`Ohk13Ma^3Bcr)At-@ITt!g`B8r5u`nVvrF z3S_*rT;B!^fOKl=$}1g-%zV;_Isa7uB0JPTK3~qS>H69h!JBGuO#>&I?ucE3n=NbT z+#!$+QxHt?)zVykQuowZY*1NpVtF4mylnlrzlnhUlA7NNyT8vu4%Oqw`WT#%yMQUt z%R<+|2g@&&!;)m6A&FhAtNJ(Bd8GDs$>RBzIJh;ju_9gs5a5{D*kQ6+caA~T_D#J) z?xjv3H9UUe6ek9_pdZHXy*H6+hbwm;;*aDHc(2b$oJj&o5Vdr~ZL(YLE7WBJtK+P! zT*_)926)y@`MEKceo_Qg?mlyl*w(&kL;p^JJxqHM`|iO`?Y);k^4z1z^ydrK-v zu9yDK$|a^8gSF~jL9U9m>7XHxQ6ijQa_{>b_C~xkas!zevSzN!OAs!I$MtDh;&d&S zB;5)q51cT!EpsTH!}blynce9S0ju1gWw5RDDOn48@}SRSd(w@7KIMJUxOx>(9zerk zpBcV#X}fFmgqyUOOI5x`wYNC=yOGM)NZd@j7iB&G4m5Vf>k=v@wz@HU79(BFc3DGr z?B>1)QCOa$qxRrRy)6&)bZw?m=R70(;|JvzP$ricC*6Z~V`&QfPkT%}Am80Mle(lm zw;hweAHjG=o!@H>H128L;^+by85RG^sbdYU8-%_$CL#&Y3h&8|EpKtvb;>IYRHzwY zt%T1H+Mb-K+dW5IXPc5--7Vw4^}&M=F_+gY(NVYI_V*- z%fgq|q)V*s){zvWG#YsnFBWhz8yZ!@7c*?mb}eq(J8jn)ao!5*EpqIBHJ#F-dP=Ye zHf~E`R2b|um!aTanP7&{-1#NwqYE2fBd+Z$@&IGULFF48+x}OWCCW+xSwkR^%$_A) zJEgaAsi|^sEHD#`gI|<;BVfr^a{EVlg~rrEw74DRE4=IzE`O_6jw(NbEviU(b%CtA zWc?#>$lF@ae50~Tkf&zqj#`|w$E=B0O$`TZz9eFn#eYGmU)2;SNAll{JXi3p8^n1u zu4bS1=G#TC?utdd_;`bOT3>hXBtZL?BS(|%mb_LfDhQrY>-ni$>{23oQsQHSA9@?d z&gjhF^sCQ#FRfp~ktzB4%bk+(tc{)$QroIUYFA_S!aJZ17M+|_0bd^7B`+pBlVxL9 z5@0^FNBL#;sj4nkTMO#}ZP9U!E%6fJSFVi>g4i&)tr;I8fnNCbComDr~V?ML#jp)R~0I9Y0s~Z*23(#kT_>r=Sa;Sj9S=l;=?mfdan!zoL$8Hdj_t zYjL^sY8YB>u#XwO*#rE2Mmid<0b={crHE4?#C{Wz3XrV~a;)UW`B)GMdQoO<4-Ccscv`BDwLW*k$ z7Cdkk?|1f*d(Pcw-}CK#&-2{p{=q|%wbqrS27Z~1k!}Y5-Evlwdjl#Pq}&9)+_jKYk_3S&Bk?Yc?*ZQ*ewNp927w5E z-~8R`b|^3ffmHe5N=s_E8=?>oV~90d(O!cF4lVTyo(>4iu4ujYXca)aN#AUjFPx1+lIeFj1b#R5LszkJhEb+Zsi;HF|FZ7S; zC;O4`lA;_I?(GX5kJ&I$Ir>^Zl2{#xP|5W9`l?T&^_OC35&jsc~*7yTbR$!eQu4= z0Wn`dU2kjO?18#$=YQ9>;}^M+OMNZ2q;V)MdZmqEMz&q7;G~Ny5(eTD80>cBr8`jp53TbKeoiE?Fv=Dpx=5L$Xl$P#P`K*;re6yL3kza z;hzy@>K`Apcg%AMrZ|#YJTc^lA2jDbVMgO8OAL+csZqO*Dm0&WF*s>H7>BZk)xk=2 zIT60?En(^n$4Q2^4cA|OE+Q+}vn|Wl``C2s-1Yo2@(PK#?!KPKmKoEHYnjLEPSjbZ zTj|x?WA!hVLOJT}=8h+{jqH%EEdgXdliRd58(gsQEL2MDMSjD0TDIq(&$_xUzjvwd zd+%+Y6N>4GUq?gCu0GV{I3g}zY_B1z>=#hmYsf_`x_NGLpb3JQ*P9$@(GkC2p6oRS zYYfn8=HG)^uwNm6`%#EoO})lGn{`HKG7WgI6+nil>UJBYvLk09LlXtvv+I%il?{>% zSqGDP4lNhEP2u6;ER6ANdU*<3rMj4Nn{xJxy_wZB6{Y0AC>+|v-8Pe^lRWk;nFysz zUb$AQ4QaEbomu&ML{p#146zOQnE?E%8;Nw=^@5y)-Zyj~!`=xJpS?c57;IjFVIy}N zZMp-l&@|Wsz5&uhEd8|zxAspP|&VLQxcKi^UH z!ln74C}-y<@^XNQqQ2OlQg}a6!7t3ud!GAKxyKsx)=*f>tQR0b6GI|d)OXT6a@u^4 z#v+T;D4i!(r8tECba5|5ZmV1){)|ymT_sz{Ue0=?Y>1^%dhF-CC1SG5mW!n3Ht%n6 zTxNWi@Y*p;`*d7gCER->GdOZmCF$s!711-n^F=voKcPBvYLVHVJ5N+dn{*1-Rg|9P zxkfXJGAccLVyiBDoop|@c*!~lTl#)j*0A`CwMxb^;kG(Yyrn@%Vn5%YThTl=+%&o!vm{W|Ru>S!OSs;pW#Dz$73r_#wzY40u>V7P$PJ4xr@c4Q+5ZFoUTn z{qQT+^)PBtPp4%*uLl{m1spA+qiFb)GU}zQmID($Pn`HqpOQhxp{@aC1lM?eq$@@|w=7RAl;e^FOQ)WZ`Ht4mqlb zuIBKFDzx9%Iww|edW^w^Yxlf3QV7$3aa8ydDzUA;c(O+qY1(bdX%{l$32rPMK{_xE zRet??DjUt)pa#qA7b6Q>!W+}#--9O`o4EK{4JNQ~jHxjEtQ|B>O_cRB`r}icVeyEx zp>$-BGV{~iBejYzOwPCrzMC$g|`tc2^`IF{$JTD|fVR6Tn4 zA;JmszT7w*i>iUvB#6J}%N6uYOWJhws&_-Hw4RoajWzV`uh#~Bm5y)t5b#T#p3FAM zREah%52mMSmRRiIe2;_1e=?5r8^a^{TnHDJ7uh@8Hl2X@&o3F8v?}pO>#jdsfBl`? zx24Yh1!Lq(p-3m#_Lw;h2oez#+7%rc|h77JgJUzh}1WG|AiiD9)-Zq*Q(EK`)30N)f_9DBsx!9}>Uz9?Mg* znJjsaQ`b;Yf_<$^Hm4_3IWl@5;D)Sg=@QSd%BS#UtWt8%QhrdCSt-3PQ~h|Z6M;E? zDFZn%w@gX++1vWr6O<#a;|jdbnvfjhN9^||TE~!!uWTIsGf8SaY+!mpID5@tJmbBo z7`JbYjDUjEaqQeXVbNO8qEoyBT_Gtl?kb~g{EadyiRybJ9}fIAbYIY6-haVLI6OB_ zu4z{kh=CduOOtN|$RC>eRg)Bv6tq+@>wTP5poLT(9_A8TXq-mjha~;df27TcB$v-G z><&*$=ht1~Q#=V}sIUT;jg`HGeO75Q zt;9U|A>#$_OKaTBY{4c|xu9JVBCPDMM^C8)Ft2Dym`hzMbz*p$%(U4C%H*}_1?yjN zRk>9KqU&xE_l0+*K8a@Qled~v%Yrb^DNEbd{0mnf;JZNCSjWZp8;Q^ZY*Tz~v^F{N z2EDvLFUWM$=Q9eJJJMjU;~1XgeYr06KbbUXF6C(yh-XrRj`r$A`&gIz#OTQN7H%(n z1t$ttnOyU_|4_)d8vjxQ#+%{63C)Fsu(!3T9jrL|e0!l1Pk< zE>+ZU&X9wx_|wLz=o>k52?1RZnWrt9JNx5)_C!v#kT?2-GvdJpxCO=(%2_9tKAQJaK>`w~ya<5f5p z^JfdstJBPx_6xA@%#tedw{Atvzfk1XP_Sz#1!ihv7MkcRV_~+TEgWpJ zIc8GuwfNIR{+@OGxfd>CE|(}{xRF#}!&-rPq|GGyLzH;kg@tPl!zNh|-;c;>F)x84 zZ1;;4g)TU>7B3V>H7+R?Dv`*X(gqslF{LlM2Y#3_4wu)!<9aGl2!$4qn$r8L(b2tU z1Kd~c|JNH*WIZaQA>+NYHZDl@EGY$g?2sw-M)tM@ z?+ZG`;IO;?)^B9vo&sKX;#=4&27r>HhhQBAU<3^!uBsS->;gtpQ)a*gt17|aYP58> zGLn8mbER(v*ynOO@xh@woZF9HctLmP43dL@v+pqda551sB_*Y@vKQ&~6K3B5SASRBCY67?pryQ6^iu+x@<@LePcWU06G1I5 zK+d0L8o|xpZR^O!0n&U+Em^*mcjS{R^K)I^3-dZrP>??tNgtfT)-lA~G)D=Z1mnUM z7Tv@T-@s@4sZ8jw3wa`FCxdBgyGQqE({|0OD{<@x`%w8iDx8Rk)MD-J!1NHw6YL1V z0-N1%An@EN`0VOvUwrxkmUf3}dWl$RP(GTsQ#$9GNJo2ErReC}3$2Ex(l#pl<%vdg?Rss8Z-}MkM~~IKFuU z{S7k?xzrGHyRAce!fsv2$3Ny%tkh(?`Y1PFJTo_~h7}7djnRkPETaDciZ(H+|lp$p@EjVn1|y)L)*nVGL}N|B&g*dh(Hlt2GCeRj4|TD4pH2x6GR> zKV!bI7aGRr$`!EcaF{&@mic3k+bJLGn-fmac>xb2iaEQ_6yy?8=ph@Y4jRY{PtrjRROx#JjjXD@TKIf&Kisp^k!+a;6egm zyGcz=n}9g<-$9K3H9gom2Z30=;@7UgGUz7eqkign#^c{HOYAEylyka)rXF*3c`vj&JH` zB+p}EnVOGxt2LlHe#6gwg?c0p@iDtX&4J@n{H7&M%w)a7a-u~`sTpi_N-_%#Gqt)~ za5W1bM>}5CvzsY%d*L-doaX2ce@*;)G74ig#~KGrgDNG}ah|eE{pG^qo%yXjKmnn# z5}s_3Eb3&vJ{=2UAp?lc;sI}>+iMpQaWJy#WY=NQN#?9hx*YZi3-a-;i{J9q@C@Ja zm95{x)82;259VP8JAqXeR_H(DKIx+4u~9qKPS(|O5oK@o%k6rLZ)s58ESH&UbWOpj zEnJh{bxWd8PTr_!$l>R+-)t3!W{>C;Q$@Lw#eUQ%#5MF69GuD8;Du4@1jdT;ssbvt zL(Bk&m*{g+RNB2njqCQw!9NsnSbj|VmMwjsckJ({5mX{#m9)fxRZ~loq~wB5A+l@z z5}hxAeISm8TFv7N*s;2?2Bywho;}b}tX)pJfBsy^$W+xYp`$yniudBpTeI(AHL)3Y zyG$ru{zj#ESnS$8mZvwIFfcdeFThp2GDDYMK7|=g`hqJhOS<-+rMPau`>7xbBzn>!92Z zTTE3$^-@xHR_m8NMX@|#Ho&A-jr8Ha9_9OGu@G*J;aAV*3{vYR!l}?j=3(Q7?|9j=7&8QT^cHWSfQN_o_^>jaDrUKVo zxV)c~7Q^DY#4qtMQWr8e>*Bv#WA;SmM2!# z9LkptQ0vgZwuf-Y`0W@os(wNp0rnxa$_-mifz`2PgmeLm>bPA#L&!Vc#inQEw>;qO zdv=VPLwRc!0h(0*&S`EsTzHTG`426;eWri;1odh&yP;1$3P;<7OyQY0S4E*pGHWrP z^GeKimxZgUC|rIU?RVV->(PT9MdJfPrPt<&Ny1cqW1Wy<$o2F-*vtrQNB*d^KzyKST=HV5-WoNL-l#_yHA_x6UFOpKbPv+G~()Bv&dCUG%injT{d9;D*1YrI(z8oh&jlB0ezlSG_ox5)a;gPOu zmqg_122%@>YnNTQoGFlmFNA-}hB>C3^cFibpN{qcR4na$UpK$9I_^*8MkN&y06`*d zO?Oy|h{pj#y#8phcDeZF;=#qP-{-aTG&Wi=_o*l z_{C+vPPIjU0%_J2cc~CT2bd`%zrz9ki4&Y*0O8Wi5H(*}juiJjTaBmj+NlIM zg)rJ4%?(xPc+Q1Sk|ODPwcC6s7w&tS>V`DB+#d}LZE>j?5m=91H*|lG;2lg^Mer&o z=4Cl3c66-Fh+jpH~9{zm?tn+d~gia~}jVr8OMS+NcPw z#z+wet~^%?%+35YI-uA&(04=4a8%Xx{=zo$vn0P?7MZ}yX{FBUU} zN5<|A?2(cCV&Fp}#xP33gE&3=&8c$aj77RnKW8_k@981}2I2N7q&zLYBRsg#aDwCI zCRiD&pcD&TmKbN1((z}!v0k^h zxQ-(IEv5wE@7m zNGJlj{$Ft7e?FGhl#q?U0cBY7i70%z_y_p>&ky?FLfQZ3(WM;eNWePOYKKZ~9krOw=2qa;&KL$e zT%p)vHs9o&8y3+56X?RF~Vgd*z{Ek8UdL zoEV*r_4u`HwyO4u(}J>;tQO2Q5xS6?ZSZD+(OeHXcl!ZJBGhcZdQv}NK{^G0n0ovA zCp5N<%G@-?km$PA|KPn2*y{M_bNm)M^mE;!0yMnEOF5fSo6IYkNh`IlGk|0A`Htap zI?Nl5(m5n*7ek1nW!=$!2=SEh+=NY1sF2-d_%fdB*&mnOx^ST8En5`ry3o-#Aw2b( zPu8<3;D} zd0F#19x^5dx?DU89ugzzP8yv8jsud{qM^2rGDtLZWoLb)MKRagWHYuElIleB!k+xP zhQVXwrCPM@7UTk$y0$`gcDhty?WU9(>O7%37s#A(1Xh4hD_fy?IV*0fa{H};g9kGU zon7|qp9s~|8g@>mO;gh^acfIIz*g*f(T=rEQS%s%_jVF%^Ss1k%=g%^^cA8 z`!65+9t-F9^MPh%N5C_Ae&w|ZmR#*0b-Uis?(Eh)YRp!=NY73P?6CgLoI42XXMd@K zo+KZ9Nc_Qim6?$ag|E#slM=Bw_J$4dJ{#BIL!lU?;>|6~_(V=Be?AR6uvKyq-Fh@R zO!`E5yvX_@l+@LwI#&>1g9y>JncnjAgI$Bbm`*~I2UzE0A@vxoPs?g2e#HYHaz6ie zbdZ(iR#?Z8bJxpZE-vesM%zIPR}CW{3ro+ft!b{`?FTS}y+ci5tCB_;iQB7XTU?_K zltf1)HlmVv)l!Tb=O(02iy>t3l)8RS`HA4f7L9x{NXu$&LD*4p=V=S=C)2wAX7@xg zE$#cipDjMEW(rqGlvTC|*=68ztL^VnwNUFWIXt-AmQ}uW#Gy-H-Gf56eJNnojf0Lf zVhWUTakoEPhwrFE;fNH05T@N&x6s_X)=z-w&7~n#Mk5RJe`~?x zO^eM;H>1MC!d`oo!a{MghlfelG$XWPpwg=J(Nar6es*OqXi{_xk=k1QZJ|qp#0BqS zW1x-qTe1a=!j3;&=R>%w=&Pa7Cs&5a7?yZ9Sy(YEqu{&b1JS~zpU?vH*jT7})1!kP z;RAxK+@eai-{6A6_sHyImQMSIb9H`S*2*ueFS+p?XGX)oqPw;W-Vpqv4(fZ&nOqib zga`PLwNFyMGNvIh>JhG$ta~_?&h3W9WTbb4+*YWh6^JgXPCUR=0=j$O4c&K-sl?|P zMn#T~jaCrtx@dwStsG3%`}nu8-nw*+RRDBxcfEo*T{JQ+T5Tm*=Nfx4G_$}wzD@BT zZxQnvoLhh4(=Y~Gr6mfCt6-)wuY^MBE#A16KJ}KoFsdobcsB^&0k2vgX8->2v7lxq z;0}KjB#=kuD2B-3t8(Scta3y3mIWgLW^9jgH7rIMiCWn~x9>TEKP46&8JZ}Ci8uGX zW0<(h70;5M>dr}gJsNBKPV{4yY%M?c^o!60<;OgrS*={N9Bh`F3ikS3#+b1)VbHf0 zn>1eU1p8}9^g47D%>S5q45e;yC~bbk^l0sH!M?YULbT1mwCrp3#cu|CVmj^wBc)28 z9Cm6w>f};XgK)9m;FTYimYELaG5)=t>6}_Y`y4XZI43G>yUTm5kV0VWjCL(D)HFS* z!bm=1-o-V`3!Gyr8_xMPa~8OZNZQJs+cX>?=Vq@uT1gaQkWnGydo4P@4|o6%uoZW2 z6I;kiTC%QnWJ%wu21R-D6Dx{~^Uxy|yFc;4;6$P9-K2wi$epk-zMtm}fhIoSke%A| z=Lct0KICs?w+?C!71NqF!HRjG1%ws7Yi_sfIM*+f#sq(Y;VQGVRzbH{@YvN3yEMkz z_RjT{TWAf{e@84G^Zkl4S7J)LHO$BInhpg$jLmJ!yBt4gvx=Aj=H$(O9FRF`n&T&U z*F1JKVf7_!Dv8cw@to%}mAe%$Kh^MHp6>VEUuxKQ>W+U9h>f^F&qT8Z{Hm$k#KO^J z;uH<>@Dnnxd&O3h3C!2OP_KKq@fDMJQ|BLA62&G!*FxcMnX$ZPkr-#RIyc1Hjr&56 zeq61M5sz=LkM=inB6pWI^$QKs6w#T#!f3gQW4d0+?YB(o)mN);jqOGLuIr(ijTJe8 zzrIzkf#htgS1j^tH}nMC2kbzs^4@wTe~sSC-`_PU|HwN4RwpZT03W$MIyP!>hW$+j zw}ApvhLVQ4Y}ZCPb2N^cqJh@y+jRJscUVW6x%At?kg1qlJOjKzYQfjvvVOe5tkO14 z$!?78xhdzDva4*ziMWk%*WJlivUA9A!oTOWxo+<>`;&c)k(c1V@EbRoGf!`O%*-{$ z)aQdq8t*=F2RGnDA?Btl%dBf;)R*&bu}Mc19dhzlQ8Lf`+l{-zJohZ`)E;gP?VJ(` z7c&cZZJi^)N0dd`R!orn>DY(7c62vXtey*7m?UG0Xtk%$`juVe$0n?91hCoM1A^tv>nk+D6O)E++Y#eL=3T60DFc z;^P&iM2Iy{9`4H04IRHw$h zS6QhdN>u8pY0fM~9y>0dEXe&JNdl>YcetLKWdeRx0xJJ3;~U_ci+~!Hhft`5<_o$n zPig7C6ancz1|VbiKPjjA4|j_HQI~2a}qmwb9O6K_9%0$(c3T$=kI{YqwR&P3e2(WOWmYOlxwm*_PH` z3_h-z#d;e3`fIx?v3FH&Zyw@?B;rZ*Xh_P+vS7Yvrma(KIi0UpFF3bJF2q3!dM3`0 zfyrMpItbRWkEY@i=9yJhY<3>#Duw$MFG5MPJr3_9XbrOZ-|dx3CFpfTD-r(DHSBegMqDOp|n59Z=ZS5uJ)yTltUYd-YBOhF@#r&irg`20Yi?&k)yK7uyjFTC z_UQh#S7m>x{@TfV`D)LeWxIKDkoTxu>vf4= z7krjwlvND>HIA!|H;5;}tzjnHRR^SQmExsMluxP|f^SVsZjdBKxg(p&cm!j!44HnH zlaSJts<0n5vWD`o@x-V)bSn%Jr&W27Hu8haXwpdck(|Xmq9{-h{WdMXH}= zj6d_UY@W+ehp&i&>}|7xC@wBDvL6~-SlY?gGkWpT$1aE=4#%Pvr}BLEQK<&*>5Cx& zzmye|el_XBC(G;u;L1O$Ju`NRd0dDlq8jI<_U5i#+ZXvfkm+$E%POvZdCi?GPg6T( zszN51=9>Om@Q<*&y)aDyjgh`B4hehpN>q6 zHwQ#U-)>f|K!R&o-U+3De4I?m&b0VcXLRLwrn;LI5fQi+@>&U@sNSzb=JPLu*Gngj z+L}YF{tP`WSU9(P>t<@jndD}(=B7S?P#Ma3-4`sA!{qaFUu|00K#HGlwX!-qjGXUK z{&!b-TBGVxp+yyzc3yJ4>Z|t;EStlN!=za;=i`bht z80@<_P9Q;2R#aq|E#BGr>mVG=e_MK+F;LMFs{=JziNJD<-_xNLGI9?A`t z;lC|r8P+afS2C(}&XHXDDgXh6Xg&dNGMSdK)9eOsC7VJ%&EOiHnwqkXt!pQb)vGR= z)n|T0*N#&~0oMJVO^X+gSNmn}^EcHtJ}~_cnzG1`Bx@BnqfW6iwZi?ylaMqLhZ=8W zXMa56&zqEytz&e)$S!l;>v)~qdco4bFjM<5F;>lPw&-aUndW5??(u}271&BEF)ibU zk`rj6u%d)dF;%Nkq5bRM_-{_M5t!6`?QK!FXcejk2Z$#c@*RO^YAWC^&?3;($A;H6 zG&fPW%LrVZ4R=~saqWJpseq%2FKR1@PEm&qTe}Je(!1*B{)&T9XUCkGN|Loc(orf~R4yEhboV52 z5YHzOY==YaEZSro5d<$EII!iCCTi2YR4J(;*}Qjm&etWIKQy$A?Nwiy61+gor1t!^ zndU=i>nP922yN2j6wd=`vC&WDYg?%*m*cYH`*$+rNuW@L&vLmQ=~j^CQQK#{i{1Jt zst=~WgBO&{7}E=D3f1&ww@4D7Qh53j{yly5K!5}2Yg6|hZ;fC#O7L*%>kSj#>GM2& z{7AOQ(wbWOUl#dhIbeZR(pOq~A2m5Ep#zyyvmP&K*(jAzHb$innqIXz==T=gGA)P+ zJK9j$l=i#+os+P@u_WxT{&J!_dWdEo-1-m+k&%#9UCdFVA2 zMwAHwe8itgu8oN%v&Ji7iQ#iv(WcadwD5l{(NsLY->-nl+Hr?s1SddA8EV{WoW>c) zSo7RBKbfztjQxCV{1!GRW}i9fD&(|764Olz@ojaSyxm;s1V85JK9uEDk(N#ing z_4G^q)ruxIo6LGvwv{x}KAw2o2O`#L2V3!xIUuKoxLm=7 zV(;=yWoNi3q|{oZ$o1pRWRm8X1zUxi-hY4(9^U#{`jkt}?%_G#%Y)#_KiUkpx0=jOqzVVigEsK#>Q3aMnNKl36Yo!) z)mRdZpN#&2_2V~w_HNme&tEe$RWfKW6}FTfEBh`NZ;@ijs%V;%rOX1qj~44C)hnz$ z?tl8u+H|UmN0`oL*)OJ9#;2wHhkohd$uJTA_{3+i{pgbWsxiGcIGZjFkmm3&frssQ z-DFcOEkXw1S6CqVC~=`?D(kv)$_kW-4Yv{}Lw(Rd8laUTGAKuVsCV{v`gMSl zytIiBV-qQ<--;Y9M@xzvynKAKiy#o{L#M?G^6I!AC{iggXwqV{1#(!dS|ueE$A2(W z1X%37I~*;Rd!+%?p0@L0^~jXAmE}uVEroXJ>|Sq5qk6ip<4%IbeSODnN4aB^WB&}( z_1dNW?(F%K$o};DKhc*Vx#_+_7c<}SDfqlEQ1z|^Ac-c8eQ@FAAl+2gy+i|BJ zDdzGgy#A!gY0sY(-LRkJj zcBFU`;N1ub<7L97^Qgaj)6$s zzjEBr#NwoSEp%F>xJ@RKVOkHqvj&AftJ{e-b7cfc2&?ad8$T|7Ew*p28ZygI^_VHV zW8ZRcwSO|;@oDgYgmtn^ugz*KZa_~AdAzEP^uDkl`MEvmTeq^Tsh;M$e+BCNnSO0tIpN~UtVudmix17z{tuTVM^eB~FHp{2rrVK`5A7{9hd?xT8F zDHeRTvzeofs9io`8OZRre0piljXc)jIO%DZM|d0}*OMuN=>CL}y}zWg%V7ISL_=F1 zE@*0m@^0(3qk*zGx`vQkyn_1{Xg1Lr4i}3*5?eX)i9GdL=f0oju7stbPCWjr58Ybv zaTAAi>XlKGvNMx%3ZK*Xr;`O?r}2dDv^0_JeWr8|_sefE zC?UdS>Srj9zQ@)*3o3|pq?9K$4EZqidizH@X2y@nVOaE!xm{o1gY;=Qs0S*Ls8^^(spCmoJwX`oz^D0~N_yMbW9+NDox!l#%!G z>dY8dtBrljRSGM+!2Y~pP^!~ArJ>zgQ9|U&)WzjWgXoEfZGH5h*i}H+*+2GL z6YMemN7;u)Y!^1OPT;qE{(cA{?0PQsDQ{lf`rt=UTA9~g;o^x3Ip1YvQ&1ReH4f)K z*6|d73csc98inP6iMg$`k-NS_q?LtcY$LlRb<0vTSPO4 ztb2ZDzXOI<@hGU9lB#X<+51T?B}^lBx^94TS#hY@bd!nC-r{mno4P_@*4Yo35w($v zY;Gsh%#J$@2l)&pLppkvj|EMp(|GIAzIy}W1uf1eyAZFmz0ciaj8yLD(KxAmh1>ht zzK*8|FP9eIdUk9Z@{HxC1o{OX;PHSKF?ztkaB)Qeo(<>?11I@8X@;j>!jDBVr5^_DYd~)-!qHXV0%cBcxy~l2&7%`@gXowM5$Vcf8hb*j7i{3z)4H>>zs_y&tNl*_}_n6E8VW7SYn zk0!ZVz?^gNBg+77K=Ae`RYy|7xO$%_+dF7A<5+>tI!+Al&Ei7s{1@=Q*K==C4S!cr zaz|U*3>-g0Ft^aP)SolJ>cKkoE?xULRZ2>bCEr)QJh;j3{6dgGGO%9m6Xt01lfD!Z zuiu^q?=-g>U)DL>4lYf%K1rPFOlkGGHSk5)u`1`Ub1b)tK0XsY#<5zN@TJ4woU`j) zASf)Nohu)jaiO~?=Z~1xZlP7rN*8(pMyjX&$~x9Z$lIZghqW!COMjqTnP1qWwCVAg z$oN7N1$&xlzlUtY^p$&;6c)hr}ZBqzY-uVn*w+ zGnj&8F`vhuyy(fOIjq)f7GJS0FM(ns0I6M$N_LVcb5g|kZra5gX3p?ovoeZiE}WuT zzc``OG}6C@#@vsLVW2SWkZ5`)pJP~9cHA1d-zxJONxz{mN7uOL{!z zU0O$j{(P)j?zIvvr2Jl>D6Io5$9eKCPkXj?r+0gDZL&xBk(i~LB{XlLGy)qE#M7ix z(X@0lw6g*Gqfb01$Y<*4Vsx@Pe0aXxIm93UZVN)~_NTmLuJAQrV?!8P1pbhopapo} z(2+;^#6FC`4F^NfU}jDhL15jtguBxh5f)4Q!L(}jvSHHU#SlCDbWN{Fe1#aNDW_T& zfmn5P$rRJF(e_58r%x2a%=T35(kK?%p^(9%p(A^hGnIqAXd8qtQiP=MfHy`K`Sd?RMSuMMo00pyYxcEntUV zcu@*^mlMgkZDBhkEkr!z(ZM)W;zi4gZrD@*ZQto!WSK$PZ0)ij@}j5wIsoVxaxEk0 zIwbrC`+^$?q$ zcGN;cQ`zS*D7GKaMY!`02sQH*xDNcQeHT`vXed483b~waT&5~M*rTo&&h6KVK5L>9 zJI!xlbfMboV#XAgxnK4rr(bSOE^${~7+s@4bfv^c2y-Sm0P#u{F>fn26!SO@5r21TGTdRuFWyjxR5~1L{Rl9V zW^*2!MnmJd9ZAq=bs~kHUWOYVW8vIPRHGNc0V>aCHh(mo2yL9xxHdXXVc8K7WNQ=J zt#_y?)p0lwJLqs(G4d|~EE${O(VyvybEMDARm-(=+u_NE>)6n_@|M^hRt&?+;rH3# zx+!jL+-_AzWhza;8g1{kTWC*92ySRn=-oZJIz0{Yb?p6yRq-j=W{z|fwD0hv^6X2y zFxn4j8A7hM4W9b0kNNr@=^*aow;3Ouz6WZutNsq;LWbb0eepv{qBi{<&=wByvkE*R zw;q(^$Vwg!l{kT$>=}ch1qRCump1ML*&Mg^6As6g>D<%>GQ=O8@ua(CoFF6v+QL zA2>K{m$zNH_jHe0D5YP`$53pYL&UI51{~*aQ4`|gi@WTiXyHFokP8~_oKL85FREd* z+=T&bPK*o%8wzaNJ-IMw(!UD0gR|oc$M>T4Mp5JFH(rRXqmM%uny!w%p{ZOv^O1(0 zzfdO&=aX{|t>PzG2F197ebnF5w8TC7q2cplC`ZfQ@brcA)Mc4lTeNcP8vIkaSjC)X zo5)60I;8P)q_U6O#cE>H<$59V`ivQ=9(gTh~=g@|zFb>e23nA(24x_>TMFd$V6e+$C#6g|R zrDNCko6wN)GI6m3FL9wuq@T+-;2d<}w=;tkKNfP0Psg0Li!otK<`QwzoCh|gXj+$R zPmB_|KK1s-ver8w?Yr-RYCdU3{arA*3%m!yW2dKEHp1`E?t9<>xLoC2E?B*eRuR}u zp(7AR{gq^RK{HycSU*N6mWN&xBoo!p8zIvPp|u8Fm>A^xhJ*aKw0Xf+Me|(sIiE|3 zLSVfPif?X=2~hjEIUjOAo;l=FVw}0RY@iqZfdrI6RTvjG-bmVn#OtfF8E`kYO9-vR z1QE(9@O8>j=K$Sfi#1|jtGffJX?^?lYR-xfI*?huLpa6y?(`8PWJ*h z3Q5$O<}imy$E(K}usQ~)=3DX5ja8F?RC$XS=mO{70AL=Uq{`#*&NrN{4?qQ4n$b|c zBaOn=Gn-MMb@0$SRk+{Mq|4?OXric!YgATG`mrISAl;HAS?p7nN_h>JU^|o;4oIVx zrB|Neusn{e0Mk<+e7TDQsu2eYeL$cZYQXOPFJIX3@3g1?Br^3+wBG(7D{lMuEtUKK zNBi&IBl7=6v8<~G6w;sNV*s1_*v+S7AXxj~&oE}BCWTCzm3uMH5tnuvp11%Jta2g# z8=r}62yrzPYxB!epnLph2&#b>3N-^#+W)~HJ3V|pPXYbqM_>m+H+G=frKoBl!iWZ$ zUtF&P^d%jGug|yZ6ey70tkjgu+=0QP2da7Cv-8t-pZV?i+Mz%DcAh|=DQGp*mV4AT z`mOyb1NZ2$buOZ|r}s78SebLOp%gHv$ICI`9XJ7op!@thTjt%nYwZi*A-Gd(;5bm0 z5U{_ z$?vfKEj8I*R=Usz%c9`Jhzi*B0)BpJ^^_6B4apzDv)8ep;fmY}(`cju5RBDKO778> zkG%w&TIb-+cp3h6E)7F)qDLzJ7(HVHn%E}xvwUUX;Zo-*T{INbE46BoLt;C>T2jI_ zdiVWUnO;p~%hg~@X5opEaNB~1`b-n#$XZEr1!ayM(FKk`cU7s2Xz5UdJGxdXc3%|w z<*^Ub#0(JWjj~)^t`m?%tDpNq3ZkiRZq`t688&`V$;{TgSYKJy3*Xr;nMpV4CW(iF zB`qBI83JK()ZmBDH3fl+RLM@Z(f_oZTV<2^z9;Wjy0PzcaAj)BwbE;Ej$X6(4&9@4 z_xS!3yXFBc-+RhX`LC|Y%<_#~=E{eAw@=-6?U}~<9-sZ^+NOl;(kc2IY<$UPYCPY{ z<<7Gzmjm~#EYUjM^JRPZ)|+keVO!;21vKrwe6xS+CjXO0r%${n<SV47sGKYk{LlQ`$G3^>Dpk(qdgPvHtR%`(L6n+jA!Y*Khbgvf}4^_dbsQ z|E-;s(U*4bI-0&jNYdul^GlOI-x8kz3er=S%B%fnrltG_Rx}<*%kIoNal#0=;))*3 zrDhyk)T-|q-&~fV`)${9ERCv72Flmh#d-r5fPoHe0`4Zdv8U1)G?k=%=0xf1YtW;g z?f^I30C&?~TOaQaQVBem3Ajlr_r``sU?HOLAoa=g_`01y)xh09z*84MXGMklH z1~d4msM_CUpEt^aN}Y!36M;j{2J*Lokq46c3EU{RIvsdGStxt%)0gSReb)(Zl70Qd99~S{mo;`&ncI#-0b(Q$hz{Pur&GDb$gq{Bg*}E?b8l%e66{% zV^`qgw$+~sg+u$U^-7liR~D9&G5)u&^L)=tqt6>9&-=~#x8{0n)nVby@w0AyxO9cn zzpv`iOhaL{UK#U`2i2GN)z+Q6vU0PUjcMtd&HDbeAD?EH30hyiQun*;#f63Gb8U4t z?yCFyYT2#lQL+A}xA*;RGP2!UJSV~*xOaLH`{kh9vp;?h{r}kPqHJ>QnIrFlcvj{z zo_!G%@yJUu?dB?_s=4LUe!Sj3dC44|fJ~oDXJ?!HFTKYuUvuHcjU5RGn~rvi>&Nc; c@}IqDd%^oXtgJS`a|IbZUHx3vIVCg!09|qo2LJ#7 literal 0 HcmV?d00001 From b9c85e035b770cbf10936088243cf703959540e4 Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Mon, 8 Jun 2020 20:38:25 -0700 Subject: [PATCH 023/145] Update supported file systems --- .../microsoft-defender-atp-linux.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md index 0a57598987..4ece6145ec 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md @@ -92,10 +92,20 @@ If you experience any installation failures, refer to [Troubleshooting installat - The solution currently provides real-time protection for the following file system types: - btrfs + - ecryptfs - ext2 - ext3 - ext4 + - fuse + - fuseblk + - jfs + - nfs + - overlay + - ramfs + - reiserfs - tmpfs + - udf + - vfat - xfs More file system types will be added in the future. From 6871121d5e0e04d92cf709ebc48fec66bdfd4e21 Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Mon, 8 Jun 2020 20:49:42 -0700 Subject: [PATCH 024/145] Add release notes for 101.00.75 --- .../microsoft-defender-atp/linux-whatsnew.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md index 4c49223e78..e7408568e2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md @@ -19,6 +19,12 @@ ms.topic: conceptual # What's new in Microsoft Defender Advanced Threat Protection for Linux +## 101.00.75 + +- Added support for the following file system types: ecryptfs, fuse, fuseblk, jfs, nfs, overlay, ramfs, reiserfs, udf, and vfat +- New syntax for the command-line tool. See [this page](linux-resources.md#configure-from-the-command-line) for more information. +- Performance improvements & bug fixes + ## 100.90.70 > [!WARNING] From 1ae027aece701aeb2592bf1e40bd4004e13148dd Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Mon, 8 Jun 2020 20:54:28 -0700 Subject: [PATCH 025/145] Add note on product expiration --- .../microsoft-defender-atp/linux-updates.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-updates.md b/windows/security/threat-protection/microsoft-defender-atp/linux-updates.md index 37b668c4f2..50bbc417f9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-updates.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-updates.md @@ -26,6 +26,12 @@ ms.topic: conceptual Microsoft regularly publishes software updates to improve performance, security, and to deliver new features. +> [!WARNING] +> Each version of Microsoft Defender ATP for Linux has an expiration date, after which it will no longer continue to protect your device. You must update the product prior to this date. To check the expiration date, run the following command: +> ```bash +> mdatp health --field product_expiration +> ``` + To update Microsoft Defender ATP for Linux manually, execute one of the following commands: ## RHEL and variants (CentOS and Oracle Linux) From 0fdaac8f013ef40f4cb594bc13f0fdd6618517eb Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Mon, 8 Jun 2020 20:57:30 -0700 Subject: [PATCH 026/145] Add note on how to check definition update status --- .../microsoft-defender-atp/linux-install-manually.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md index 702afa998e..ef65ef7094 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md @@ -290,7 +290,10 @@ Download the onboarding package from Microsoft Defender Security Center: ``` > [!IMPORTANT] - > When the product starts for the first time, it downloads the latest antimalware definitions. Depending on your Internet connection, this can take up to a few minutes. During this time the above command returns a value of `0`.
+ > When the product starts for the first time, it downloads the latest antimalware definitions. Depending on your Internet connection, this can take up to a few minutes. During this time the above command returns a value of `false`. You can check the status of the definition update using the following command: + > ```bash + > mdatp health --field definitions_status + > ``` > Please note that you may also need to configure a proxy after completing the initial installation. See [Configure Microsoft Defender ATP for Linux for static proxy discovery: Post-installation configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/linux-static-proxy-configuration#post-installation-configuration). 5. Run a detection test to verify that the machine is properly onboarded and reporting to the service. Perform the following steps on the newly onboarded machine: From 27164b2faf243a6e1d50e506d12b437bfdbc7ce7 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Tue, 9 Jun 2020 09:18:07 -0700 Subject: [PATCH 027/145] wired in two new topics to TOC --- windows/deployment/TOC.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml index 20ea156b13..663b28017e 100644 --- a/windows/deployment/TOC.yml +++ b/windows/deployment/TOC.yml @@ -12,7 +12,7 @@ - name: Windows update fundamentals href: update/waas-overview.md - name: Types of Windows updates - href: update/waas-quick-start.md#definitions + href: update/get-started-updates-channels-tools.md - name: Servicing the Windows 10 operating system href: update/waas-servicing-strategy-windows-10-updates.md @@ -62,8 +62,8 @@ - name: Prepare items: - - name: Prepare to deploy Windows 10 - href: deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md + - name: Prepare to deploy Windows 10 updates + href: update/prepare-deploy-windows.md - name: Evaluate and update infrastructure href: update/update-policies.md - name: Set up Delivery Optimization for Windows 10 updates From 7eff29f7496d02e9dec6713cbb90ab09bb645d5b Mon Sep 17 00:00:00 2001 From: jaimeo Date: Tue, 9 Jun 2020 10:58:25 -0700 Subject: [PATCH 028/145] slight adjustment --- windows/deployment/TOC.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml index 663b28017e..7195a47f76 100644 --- a/windows/deployment/TOC.yml +++ b/windows/deployment/TOC.yml @@ -11,7 +11,7 @@ href: update/waas-quick-start.md - name: Windows update fundamentals href: update/waas-overview.md - - name: Types of Windows updates + - name: Basics of Windows updates, channels, and tools href: update/get-started-updates-channels-tools.md - name: Servicing the Windows 10 operating system href: update/waas-servicing-strategy-windows-10-updates.md From 2e762b0ff506a8b542732e3475ed7ee3383ef684 Mon Sep 17 00:00:00 2001 From: 1justingilmore Date: Wed, 10 Jun 2020 17:43:07 -0600 Subject: [PATCH 029/145] Copy edits for 401116 Light copy edits. --- ...ix-a-powershell-scripts-for-surface-hub.md | 34 +---- mdop/appv-v5/app-v-50-prerequisites.md | 143 ++++++------------ ...n-the-mbam-international-release-mbam-1.md | 5 +- .../mbam-20-privacy-statement-mbam-2.md | 27 +--- ...ficate-authentication-device-enrollment.md | 13 +- ...erated-authentication-device-enrollment.md | 48 ++---- .../mdm/mobile-device-enrollment.md | 24 +-- ...remise-authentication-device-enrollment.md | 10 +- ...soft-defender-security-center-antivirus.md | 38 +++-- 9 files changed, 108 insertions(+), 234 deletions(-) diff --git a/devices/surface-hub/appendix-a-powershell-scripts-for-surface-hub.md b/devices/surface-hub/appendix-a-powershell-scripts-for-surface-hub.md index f74f2297fa..9295d1d8ac 100644 --- a/devices/surface-hub/appendix-a-powershell-scripts-for-surface-hub.md +++ b/devices/surface-hub/appendix-a-powershell-scripts-for-surface-hub.md @@ -16,7 +16,6 @@ ms.localizationpriority: medium # PowerShell for Surface Hub - PowerShell scripts to help set up and manage your Microsoft Surface Hub. - [PowerShell scripts for Surface Hub admins](#scripts-for-admins) @@ -30,7 +29,6 @@ PowerShell scripts to help set up and manage your Microsoft Surface Hub. - [Auto-accepting and declining meeting requests](#auto-accept-meetings-cmdlet) - [Accepting external meeting requests](#accept-ext-meetings-cmdlet) - ## Prerequisites To successfully execute these PowerShell scripts, you will need to install the following prerequisites: @@ -41,7 +39,6 @@ To successfully execute these PowerShell scripts, you will need to install the f ## PowerShell scripts for Surface Hub administrators - What do the scripts do? - Create device accounts for setups using pure single-forest on-premises (Microsoft Exchange and Skype 2013 and later only) or online (Microsoft Office 365), that are configured correctly for your Surface Hub. @@ -56,11 +53,8 @@ What do you need in order to run the scripts? >[!NOTE] >Whether you’re creating a new account or modifying an already-existing account, the validation script will verify that your device account is configured correctly. You should always run the validation script before adding a device account to Surface Hub. -  - ## Running the scripts - The account creation scripts will: - Ask for administrator credentials @@ -178,11 +172,8 @@ These are the attributes that are set by the scripts: -  - ## Account creation scripts - These scripts will create a device account for you. You can use the [Account verification script](#acct-verification-ps-scripts) to make sure they ran correctly. The account creation scripts cannot modify an already existing account, but can be used to help you understand which cmdlets need to be run to configure the existing account correctly. @@ -257,7 +248,6 @@ if (!$credNewAccount -Or [System.String]::IsNullOrEmpty($strDisplayName) -Or [Sy exit 1 } - ## Sign in to remote powershell for exchange and lync online ## $credExchange = $null @@ -307,7 +297,8 @@ Import-PSSession $sessExchange -AllowClobber -WarningAction SilentlyContinue Import-PSSession $sessLync -AllowClobber -WarningAction SilentlyContinue ## Create the Exchange mailbox ## -# Note: These exchange commandlets do not always throw their errors as exceptions +>[!Note] +>These exchange commandlets do not always throw their errors as exceptions # Because Get-Mailbox will throw an error if the mailbox is not found $Error.Clear() @@ -324,7 +315,6 @@ $status["Mailbox Setup"] = "Successfully created a mailbox for the new account" $strEmail = $mailbox.WindowsEmailAddress PrintSuccess "The following mailbox has been created for this room: $strEmail" - ## Create or retrieve a policy that will be applied to surface hub devices ## # The policy disables requiring a device password so that the SurfaceHub does not need to be lockable to use Active Sync $strPolicy = Read-Host 'Please enter the name for a new Surface Hub ActiveSync policy that will be created and applied to this account. @@ -674,7 +664,8 @@ Import-PSSession $sessExchange -AllowClobber -WarningAction SilentlyContinue Import-PSSession $sessCS -AllowClobber -WarningAction SilentlyContinue ## Create the Exchange mailbox ## -# Note: These exchange commandlets do not always throw their errors as exceptions +>[!Note] +>These exchange commandlets do not always throw their errors as exceptions # Because Get-Mailbox will throw an error if the mailbox is not found $Error.Clear() @@ -994,7 +985,6 @@ else ## Account verification script - This script will validate the previously-created device account on a Surface Hub, no matter which method was used to create it. This script is basically pass/fail. If one of the test errors out, it will show a detailed error message, but if all tests pass, the end result will be a summary report. For example, you might see: ``` syntax @@ -1446,7 +1436,6 @@ Cleanup ## Enable Skype for Business - This script will enable Skype for Business on a device account. Use it only if Skype for Business wasn't previously enabled during account creation. ```PowerShell @@ -1607,7 +1596,6 @@ Cleanup ## Useful cmdlets - ### Creating a Surface Hub-compatible ActiveSync policy For Surface Hub to use Exchange services, a device account configured with a compatible ActiveSync policy must be provisioned on the device. This policy has the following requirements: @@ -1674,19 +1662,9 @@ Set-CalendarProcessing $strRoomUpn -AutomateProcessing AutoAccept For a device account to accept external meeting requests (a meeting request from an account not in the same tenant/domain), the device account must be set to allow processing of external meeting requests. Once set, the device account will automatically accept or decline meeting requests from external accounts as well as local accounts. ->**Note**  If the **AutomateProcessing** attribute is not set to **AutoAccept**, then setting this will have no effect. - -  +>[!Note] +>If the **AutomateProcessing** attribute is not set to **AutoAccept**, then setting this will have no effect. ```PowerShell Set-CalendarProcessing $strRoomUpn -ProcessExternalMeetingMessages $true ``` - -  - -  - - - - - diff --git a/mdop/appv-v5/app-v-50-prerequisites.md b/mdop/appv-v5/app-v-50-prerequisites.md index e90a62583c..ace08aceef 100644 --- a/mdop/appv-v5/app-v-50-prerequisites.md +++ b/mdop/appv-v5/app-v-50-prerequisites.md @@ -16,11 +16,10 @@ ms.date: 08/30/2016 # App-V 5.0 Prerequisites - Before you begin the Microsoft Application Virtualization (App-V) 5.0 Setup, you should make sure that you have met the prerequisites to install the product. This topic contains information to help you successfully plan for preparing your computing environment before you deploy the App-V 5.0 features. -**Important** -**The prerequisites in this article apply only to App-V 5.0**. For additional prerequisites that apply to App-V 5.0 Service Packs, see the following web pages: +>[!Important] +>**The prerequisites in this article apply only to App-V 5.0**. For additional prerequisites that apply to App-V 5.0 Service Packs, see the following web pages: - [What's new in App-V 5.0 SP1](whats-new-in-app-v-50-sp1.md) @@ -28,8 +27,6 @@ Before you begin the Microsoft Application Virtualization (App-V) 5.0 Setup, you - [App-V 5.0 SP3 Prerequisites](app-v-50-sp3-prerequisites.md) - - The following table lists prerequisite information that pertains to specific operating systems. @@ -69,15 +66,10 @@ The following table lists prerequisite information that pertains to specific ope
- - ## Installation prerequisites for App-V 5.0 - -**Note** -The following prerequisites are already installed for computers that run Windows 8. - - +>[!Note] +>The following prerequisites are already installed for computers that run Windows 8. Each of the App-V 5.0 features have specific prerequisites that must be met before the App-V 5.0 features can be successfully installed. @@ -100,8 +92,8 @@ The following table lists the installation prerequisites for the App-V 5.0 clien

Software requirements

- - ### Prerequisites for the App-V 5.0 Remote Desktop Services client -**Note** -The following prerequisites are already installed for computers that run Windows Server 2012. - - +>[!Note] +>The following prerequisites are already installed for computers that run Windows Server 2012. The following table lists the installation prerequisites for the App-V 5.0 Remote Desktop Services client: @@ -158,8 +146,8 @@ The following table lists the installation prerequisites for the App-V 5.0 Remot

Software requirements

- - ### Prerequisites for the App-V 5.0 Sequencer -**Note** -The following prerequisites are already installed for computers that run Windows 8 and Windows Server 2012. - - +>[!Note] +>The following prerequisites are already installed for computers that run Windows 8 and Windows Server 2012. The following table lists the installation prerequisites for the App-V 5.0 Sequencer. If possible, the computer that runs the Sequencer should have the same hardware and software configurations as the computers that will run the virtual applications. -**Note** -If the system requirements of a locally installed application exceed the requirements of the Sequencer, you must meet the requirements of that application. Additionally, because the sequencing process is system resource-intensive, we recommend that the computer that runs the Sequencer has plenty of memory, a fast processor, and a fast hard drive. For more information see [App-V 5.0 Supported Configurations](app-v-50-supported-configurations.md). - - +>[!Note] +>If the system requirements of a locally installed application exceed the requirements of the Sequencer, you must meet the requirements of that application. Additionally, because the sequencing process is system resource-intensive, we recommend that the computer that runs the Sequencer has plenty of memory, a fast processor, and a fast hard drive. For more information see [App-V 5.0 Supported Configurations](app-v-50-supported-configurations.md). @@ -221,16 +203,16 @@ If the system requirements of a locally installed application exceed the require

Software requirements
- - ### Prerequisites for the App-V 5.0 server -**Note** -The following prerequisites are already installed for computers that run Windows Server 2012: +>[!Note] +>The following prerequisites are already installed for computers that run Windows Server 2012: - Microsoft .NET Framework 4.5. This eliminates the Microsoft .NET Framework 4 requirement. @@ -256,26 +236,18 @@ The following prerequisites are already installed for computers that run Windows - Download and install [KB2533623](https://support.microsoft.com/kb/2533623) (https://support.microsoft.com/kb/2533623) - **Important** - You can still download install the previous KB. However, it may have been replaced with a more recent version. - - - - + >[!Important] + >You can still download install the previous KB. However, it may have been replaced with a more recent version. The following table lists the installation prerequisites for the App-V 5.0 server. The account that you use to install the server components must have administrative rights on the computer that you are installing on. This account must also have the ability to query Active Directory Directory Services. Before you install and configure the App-V 5.0 servers, you must specify a port where each component will be hosted. You must also add the associated firewall rules to allow incoming requests to the specified ports. -**Note** -Web Distributed Authoring and Versioning (WebDAV) is automatically disabled for the Management Service. - - +>[!Note] +>Web Distributed Authoring and Versioning (WebDAV) is automatically disabled for the Management Service. The App-V 5.0 server is supported for a standalone deployment, where all the components are deployed on the same server, and a distributed deployment. Depending on the topology that you use to deploy the App-V 5.0 server, the data that you will need for each component will slightly change. -**Important** -The installation of the App-V 5.0 server on a computer that runs any previous version or component of App-V is not supported. Additionally, the installation of the server components on a computer that runs Server Core or a Domain Controller is also not supported. - - +>[!Important] +>The installation of the App-V 5.0 server on a computer that runs any previous version or component of App-V is not supported. Additionally, the installation of the server components on a computer that runs Server Core or a Domain Controller is also not supported. @@ -292,8 +264,8 @@ The installation of the App-V 5.0 server on a computer that runs any previous ve

Management Server

The App-V 5.0 server components are dependent but they have varying requirements and installation options that must be deployed. Use the following information to prepare your environment to run the App-V 5.0 management server.

@@ -339,8 +311,8 @@ The installation of the App-V 5.0 server on a computer that runs any previous ve

The App-V 5.0 server components are dependent but they have varying requirements and installation options that must be deployed. Use the following information to prepare your environment to run the App-V 5.0 management database.

    @@ -349,14 +321,14 @@ The installation of the App-V 5.0 server on a computer that runs any previous ve

  • Custom App-V 5.0 database name (if applicable) – you must specify a unique database name. The default value for the management database is AppVManagement.

  • App-V 5.0 management server location – specifies the machine account on which the management server is deployed. This should be specified in the following format Domain\MachineAccount.

  • App-V 5.0 management server installation administrator - specifies the account that will be used to install the App-V 5.0 management server. You should use the following format: Domain\AdministratorLoginName.

    • -

  • Microsoft SQL Server Service Agent - configure the computer running the App-V 5.0 Management Database so that Microsoft SQL Server Agent service is restarted automatically. For more information see Configure SQL Server Agent to Restart Services Automatically (https://go.microsoft.com/fwlink/?LinkId=273725).

    • +

  • Microsoft SQL Server Service Agent - configure the computer running the App-V 5.0 Management Database so that Microsoft SQL Server Agent service is restarted automatically. For more information see Configure SQL Server Agent to Restart Services Automatically

Reporting Server

Publishing Server

 @@ -412,25 +384,8 @@ The installation of the App-V 5.0 server on a computer that runs any previous ve
- - - - - - - ## Related topics - [Planning to Deploy App-V](planning-to-deploy-app-v.md) [App-V 5.0 Supported Configurations](app-v-50-supported-configurations.md) - - - - - - - - - diff --git a/mdop/mbam-v1/known-issues-in-the-mbam-international-release-mbam-1.md b/mdop/mbam-v1/known-issues-in-the-mbam-international-release-mbam-1.md index d365a7ce2c..19ad1f3d57 100644 --- a/mdop/mbam-v1/known-issues-in-the-mbam-international-release-mbam-1.md +++ b/mdop/mbam-v1/known-issues-in-the-mbam-international-release-mbam-1.md @@ -16,12 +16,10 @@ ms.date: 08/30/2016 # Known Issues in the MBAM International Release - This section contains known issues for Microsoft BitLocker Administration and Monitoring (MBAM) International Release. ## Known Issues in the MBAM International Release - ### The Installation Process Does Not Specify Update Upon updating the Microsoft BitLocker Administration and Monitoring server or servers, the Setup program does not state that an update is being installed. @@ -36,13 +34,12 @@ If you are using a certificate for authentication between MBAM servers, after up ### MBAM Svclog File Filling Disk Space -If you have followed Knowledge Base article 2668170, [https://support.microsoft.com/kb/2668170](https://go.microsoft.com/fwlink/?LinkID=247277), you might have to repeat the KB steps after you install this update. +If you have followed [Knowledge Base article 2668170](https://go.microsoft.com/fwlink/?LinkID=247277), you might have to repeat the KB steps after you install this update. **Workaround**: None. ## Related topics - [Deploying the MBAM 1.0 Language Release Update](deploying-the-mbam-10-language-release-update.md)   diff --git a/mdop/mbam-v2/mbam-20-privacy-statement-mbam-2.md b/mdop/mbam-v2/mbam-20-privacy-statement-mbam-2.md index 1d8f677dab..d2e12fb643 100644 --- a/mdop/mbam-v2/mbam-20-privacy-statement-mbam-2.md +++ b/mdop/mbam-v2/mbam-20-privacy-statement-mbam-2.md @@ -16,10 +16,8 @@ ms.date: 08/30/2016 # MBAM 2.0 Privacy Statement - ## Microsoft BitLocker Administration and Monitoring (MBAM) v2 Privacy Statement - Microsoft is committed to protecting your privacy, while delivering software that brings you the performance, power, and convenience you desire in your personal computing. This privacy statement explains many of the data collection and use practices of Microsoft BitLocker Administration and Monitoring v2 (MBAM). This is a preliminary disclosure that focuses on features that communicate with the Internet and is not intended to be an exhaustive list. Microsoft BitLocker Administration and Monitoring (MBAM) enhances BitLocker by simplifying deployment and key recovery, centralizing provisioning, monitoring and reporting of encryption status for fixed and removable drives, and minimizing support costs. This release provides support for Windows 8 as well as improvements on Configuration Manager Integration and key recovery functionality. @@ -86,13 +84,12 @@ Microsoft Error Reporting is not turned on or off by MBAM. MBAM will utilize wha "HKLM\\Software\\Wow6432Node\\Microsoft\\Microsoft Standalone System Sweeper Tool" (for the 64-bit version) -**Warning** - -Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the PC. You can also use the Last Known Good Configuration startup option if you encounter problems after manual changes have been applied. +>[!Warning] +>Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the PC. You can also use the Last Known Good Configuration startup option if you encounter problems after manual changes have been applied. Important Information: Enterprise customers can use Group Policy to configure how Microsoft Error Reporting behaves on their PCs. Configuration options include the ability to turn off Microsoft Error Reporting. If you are an administrator and wish to configure Group Policy for Microsoft Error Reporting, technical details are available on [TechNet](https://technet.microsoft.com/library/cc709644.aspx). -Additional information on how to modify enable and disable error reporting is available at this support article: [(https://support.microsoft.com/kb/188296)](https://support.microsoft.com/kb/188296). +Additional information on how to modify enable and disable error reporting is available at this support article: [How to disable or enable Dr. Watson for Windows](https://support.microsoft.com/kb/188296). ### Microsoft Update @@ -102,15 +99,15 @@ Microsoft Update is a service that provides Windows updates as well as updates f **Information Collected, Processed, or Transmitted:** -For details about what information is collected and how it is used, see the Update Services Privacy Statement at . +For details about what information is collected and how it is used, see the [Update Services Privacy Statement](https://go.microsoft.com/fwlink/?LinkId=244400). **Use of Information:** -For details about what information is collected and how it is used, see the Update Services Privacy Statement at . +For details about what information is collected and how it is used, see the [Update Services Privacy Statement](https://go.microsoft.com/fwlink/?LinkId=244400). **Choice/Control:** -For details about controlling this feature, see the Update Services Privacy Statement at . +For details about controlling this feature, see the [Update Services Privacy Statement](https://go.microsoft.com/fwlink/?LinkId=244000). ### Customer Experience Improvement Program @@ -120,7 +117,7 @@ The Customer Experience Improvement Program (“CEIP”) collects basic informat **Information Collected, Processed, or Transmitted:** -For more information about the information collected, processed, or transmitted by CEIP, see the CEIP privacy statement at . +For more information about the information collected, processed, or transmitted by CEIP, see the [CEIP privacy statement](https://go.microsoft.com/fwlink/?LinkID=52097). **Use of Information:** @@ -132,14 +129,4 @@ CEIP is off by default. You're offered the opportunity to participate in CEIP du ## Related topics - [Security and Privacy for MBAM 2.0](security-and-privacy-for-mbam-20-mbam-2.md) - -  - -  - - - - - diff --git a/windows/client-management/mdm/certificate-authentication-device-enrollment.md b/windows/client-management/mdm/certificate-authentication-device-enrollment.md index dd72081354..1441d87c96 100644 --- a/windows/client-management/mdm/certificate-authentication-device-enrollment.md +++ b/windows/client-management/mdm/certificate-authentication-device-enrollment.md @@ -14,15 +14,13 @@ ms.date: 06/26/2017 # Certificate authentication device enrollment - This section provides an example of the mobile device enrollment protocol using certificate authentication policy. For details about the Microsoft mobile device enrollment protocol for Windows 10, see [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2]( https://go.microsoft.com/fwlink/p/?LinkId=619347). -> **Note**  To set up devices to use certificate authentication for enrollment, you should create a provisioning package. For more information about provisioning packages, see [Build and apply a provisioning package](https://msdn.microsoft.com/library/windows/hardware/dn916107). - +>[!Note] +>To set up devices to use certificate authentication for enrollment, you should create a provisioning package. For more information about provisioning packages, see [Build and apply a provisioning package](https://msdn.microsoft.com/library/windows/hardware/dn916107). ## In this topic - - [Discovery service](#discovery-service) - [Enrollment policy web service](#enrollment-policy-web-service) - [Enrollment web service](#enrollment-web-service) @@ -507,10 +505,3 @@ The following example shows the encoded provisioning XML. protocol. This configuration service provider is being deprecated for Windows 10. --> ``` - -  - - - - - diff --git a/windows/client-management/mdm/federated-authentication-device-enrollment.md b/windows/client-management/mdm/federated-authentication-device-enrollment.md index e8ad3c9cd8..8af297cb56 100644 --- a/windows/client-management/mdm/federated-authentication-device-enrollment.md +++ b/windows/client-management/mdm/federated-authentication-device-enrollment.md @@ -14,7 +14,6 @@ ms.date: 07/28/2017 # Federated authentication device enrollment - This section provides an example of the mobile device enrollment protocol using federated authentication policy. When the authentication policy is set to Federated, the web authentication broker is leveraged by the enrollment client to get a security token. The enrollment client calls the web authentication broker API within the response message to start the process. The server should build the web authentication broker pages to fit the device screen and should be consistent with the existing enrollment UI. The opaque security token that is returned from the broker as an end page is used by the enrollment client as the device security secret during the client certificate request call. The <AuthenticationServiceURL> element the discovery response message specifies web authentication broker page start URL. @@ -23,7 +22,6 @@ For details about the Microsoft mobile device enrollment protocol for Windows 1 ## In this topic - [Discovery service](#discovery-service) [Enrollment policy web service](#enrollment-policy-web-service) [Enrollment web service](#enrollment-web-service) @@ -32,12 +30,10 @@ For the list of enrollment scenarios not supported in Windows 10, see [Enrollme ## Discovery service - The discovery web service provides the configuration information necessary for a user to enroll a phone with a management service. The service is a restful web service over HTTPS (server authentication only). -> **Note**  The administrator of the discovery service must create a host with the address enterpriseenrollment.*domain\_name*.com. - - +>[!Note] +>The administrator of the discovery service must create a host with the address enterpriseenrollment.*domain\_name*.com. The automatic discovery flow of the device uses the domain name of the email address that was submitted to the Workplace settings screen during sign in. The automatic discovery system constructs a URI that uses this hostname by appending the subdomain “enterpriseenrollment” to the domain of the email address, and by appending the path “/EnrollmentServer/Discovery.svc”. For example, if the email address is “sample@contoso.com”, the resulting URI for first Get request would be: http://enterpriseenrollment.contoso.com/EnrollmentServer/Discovery.svc @@ -131,24 +127,21 @@ The discovery response is in the XML format and includes the following fields: - Authentication policy (AuthPolicy) – Indicates what type of authentication is required. For the MDM server, OnPremise is the supported value, which means that the user will be authenticated when calling the management service URL. This field is mandatory. - In Windows, Federated is added as another supported value. This allows the server to leverage the Web Authentication Broker to perform customized user authentication, and term of usage acceptance. -> **Note**  The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. - - +>[!Note]   +>The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. When authentication policy is set to be Federated, Web Authentication Broker (WAB) will be leveraged by the enrollment client to get a security token. The WAB start page URL is provided by the discovery service in the response message. The enrollment client will call the WAB API within the response message to start the WAB process. WAB pages are server hosted web pages. The server should build those pages to fit the device screen nicely and be as consistent as possible to other builds in the MDM enrollment UI. The opaque security token that is returned from WAB as an endpage will be used by the enrollment client as the device security secret during the client certificate enrollment request call. -> **Note**  Instead of relying on the user agent string that is passed during authentication to get information, such as the OS version, use the following guidance: +>[!Note] +>Instead of relying on the user agent string that is passed during authentication to get information, such as the OS version, use the following guidance: > - Parse the OS version from the data sent up during the discovery request. > - Append the OS version as a parameter in the AuthenticationServiceURL. > - Parse out the OS version from the AuthenticiationServiceURL when the OS sends the response for authentication. - - A new XML tag, AuthenticationServiceUrl, is introduced in the DiscoveryResponse XML to allow the server to specify the WAB page start URL. For Federated authentication, this XML tag must exist. -> **Note**  The enrollment client is agnostic with regards to the protocol flows for authenticating and returning the security token. While the server might prompt for user credentials directly or enter into a federation protocol with another server and directory service, the enrollment client is agnostic to all of this. To remain agnostic, all protocol flows pertaining to authentication that involve the enrollment client are passive, that is, browser-implemented. - - +>[!Note] +>The enrollment client is agnostic with regards to the protocol flows for authenticating and returning the security token. While the server might prompt for user credentials directly or enter into a federation protocol with another server and directory service, the enrollment client is agnostic to all of this. To remain agnostic, all protocol flows pertaining to authentication that involve the enrollment client are passive, that is, browser-implemented. The following are the explicit requirements for the server. @@ -237,7 +230,6 @@ The following example shows a response received from the discovery web service w ## Enrollment policy web service - Policy service is optional. By default, if no policies are specified, the minimum key length is 2k and the hash algorithm is SHA-1. This web service implements the X.509 Certificate Enrollment Policy Protocol (MS-XCEP) specification that allows customizing certificate enrollment to match different security needs of enterprises at different times (cryptographic agility). The service processes the GetPolicies message from the client, authenticates the client, and returns matching enrollment policies in the GetPoliciesResponse message. @@ -302,9 +294,8 @@ After the user is authenticated, the web service retrieves the certificate templ MS-XCEP supports very flexible enrollment policies using various Complex Types and Attributes. For Windows device, we will first support the minimalKeyLength, the hashAlgorithmOIDReference policies, and the CryptoProviders. The hashAlgorithmOIDReference has related OID and OIDReferenceID and policySchema in the GetPolicesResponse. The policySchema refers to the certificate template version. Version 3 of MS-XCEP supports hashing algorithms. -> **Note**  The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. - - +>[!Note]   +>The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. The following snippet shows the policy web service response. @@ -387,7 +378,6 @@ The following snippet shows the policy web service response. ## Enrollment web service - This web service implements the MS-WSTEP protocol. It processes the RequestSecurityToken (RST) message from the client, authenticates the client, requests the certificate from the CA, and returns it in the RequestSecurityTokenResponse (RSTR) to the client. Besides the issued certificate, the response also contains configurations needed to provision the DM client. The RequestSecurityToken (RST) must have the user credential and a certificate request. The user credential in an RST SOAP envelope is the same as in GetPolicies, and can vary depending on whether the authentication policy is OnPremise or Federated. The BinarySecurityToken in an RST SOAP body contains a Base64-encoded PKCS\#10 certificate request, which is generated by the client based on the enrollment policy. The client could have requested an enrollment policy by using MS-XCEP before requesting a certificate using MS-WSTEP. If the PKCS\#10 certificate request is accepted by the certification authority (CA) (the key length, hashing algorithm, and so on match the certificate template), the client can enroll successfully. @@ -396,9 +386,8 @@ Note that the RequestSecurityToken will use a custom TokenType (http: **Note**  The policy service and the enrollment service must be on the same server; that is, they must have the same host name. - - +>[!Note] +>The policy service and the enrollment service must be on the same server; that is, they must have the same host name. The following example shows the enrollment web service request for federated authentication. @@ -487,9 +476,8 @@ The following example shows the enrollment web service request for federated aut After validating the request, the web service looks up the assigned certificate template for the client, update it if needed, sends the PKCS\#10 requests to the CA, processes the response from the CA, constructs an OMA Client Provisioning XML format, and returns it in the RequestSecurityTokenResponse (RSTR). -> **Note**  The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. - - +>[!Note] +>The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. Similar to the TokenType in the RST, the RSTR will use a custom ValueType in the BinarySecurityToken (http://schemas.microsoft.com/ConfigurationManager/Enrollment/DeviceEnrollmentProvisionDoc), because the token is more than an X.509 v3 certificate. @@ -640,11 +628,3 @@ The following code shows sample provisioning XML (presented in the preceding pac - The **PrivateKeyContainer** characteristic is required and must be present in the Enrollment provisioning XML by the enrollment. Other important settings are the **PROVIDER-ID**, **NAME**, and **ADDR** parameter elements, which need to contain the unique ID and NAME of your DM provider and the address where the device can connect for configuration provisioning. The ID and NAME can be arbitrary values, but they must be unique. - Also important is SSLCLIENTCERTSEARCHCRITERIA, which is used for selecting the certificate to be used for client authentication. The search is based on the subject attribute of the signed user certificate. - CertificateStore/WSTEP enables certificate renewal. If the server does not support it, do not set it. - - - - - - - - diff --git a/windows/client-management/mdm/mobile-device-enrollment.md b/windows/client-management/mdm/mobile-device-enrollment.md index 1d91d3ec3b..1b6590f392 100644 --- a/windows/client-management/mdm/mobile-device-enrollment.md +++ b/windows/client-management/mdm/mobile-device-enrollment.md @@ -14,7 +14,6 @@ ms.date: 08/11/2017 # Mobile device enrollment - Mobile device enrollment is the first phase of enterprise management. The device is configured to communicate with the MDM server using security precautions during the enrollment process. The enrollment service verifies that only authenticated and authorized devices can be managed by their enterprise. The enrollment process includes the following steps: @@ -33,21 +32,20 @@ The enrollment process includes the following steps: ## Enrollment protocol - There are a number of changes made to the enrollment protocol to better support a variety of scenarios across all platforms. For detailed information about the mobile device enrollment protocol, see [\[MS-MDM\]: Mobile Device Management Protocol](https://go.microsoft.com/fwlink/p/?LinkId=619346) and [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2]( https://go.microsoft.com/fwlink/p/?LinkId=619347). The enrollment process involves the following steps: -**Discovery request** +### Discovery request The discovery request is a simple HTTP post call that returns XML over HTTP. The returned XML includes the authentication URL, the management service URL, and the user credential type. -**Certificate enrollment policy** +### Certificate enrollment policy The certificate enrollment policy configuration is an implementation of the MS-XCEP protocol, which is described in \[MS-XCEP\]: X.509 Certificate Enrollment Policy Protocol Specification. Section 4 of the specification provides an example of the policy request and response. The X.509 Certificate Enrollment Policy Protocol is a minimal messaging protocol that includes a single client request message (GetPolicies) with a matching server response message (GetPoliciesResponse). For more information, see [\[MS-XCEP\]: X.509 Certificate Enrollment Policy Protocol](https://go.microsoft.com/fwlink/p/?LinkId=619345) -**Certificate enrollment** +### Certificate enrollment The certificate enrollment is an implementation of the MS-WSTEP protocol. -**Management configuration** +### Management configuration The server sends provisioning XML that contains a server certificate (for SSL server authentication), a client certificate issued by enterprise CA, DM client bootstrap information (for the client to communicate with the management server), an enterprise application token (for the user to install enterprise applications), and the link to download the Company Hub application. The following topics describe the end-to-end enrollment process using various authentication methods: @@ -56,19 +54,18 @@ The following topics describe the end-to-end enrollment process using various au - [Certificate authentication device enrollment](certificate-authentication-device-enrollment.md) - [On-premise authentication device enrollment](on-premise-authentication-device-enrollment.md) -> **Note**  As a best practice, do not use hardcoded server-side checks on values such as: +>[!Note]   +>As a best practice, do not use hardcoded server-side checks on values such as: > - User agent string > - Any fixed URIs that are passed during enrollment > - Specific formatting of any value unless otherwise noted, such as the format of the device ID. - ## Enrollment support for domain-joined devices -  + Devices that are joined to an on-premises Active Directory can enroll into MDM via the Work access page in **Settings**. However, the enrollment can only target the user enrolled with user-specific policies. Device targeted policies will continue to impact all users of the device. ## Disable MDM enrollments - Starting in Windows 10, version 1607, IT admin can disable MDM enrollments for domain-joined PCs using Group Policy. Using the GP editor, the path is **Computer configuration** > **Administrative Templates** > **Windows Components** > **MDM** > **Disable MDM Enrollment**. ![Disable MDM enrollment policy in GP Editor](images/mdm-enrollment-disable-policy.png) @@ -89,7 +86,6 @@ The following scenarios do not allow MDM enrollments: ## Enrollment migration - **Desktop:** After the MDM client upgrade from Windows 8.1 to Windows 10, enrollment migration starts at the first client-initiated sync with the MDM service. The enrollment migration start time depends on the MDM server configuration. For example, for Intune it runs every 6 hours. Until the enrollment migration is completed, the user interface will show no enrollment and server push will not work. @@ -100,7 +96,6 @@ To manually trigger enrollment migration, you can run MDMMaintenenceTask. ## Enrollment error messages - The enrollment server can decline enrollment messages using the SOAP Fault format. Errors created can be sent as follows: ```xml @@ -196,8 +191,6 @@ The enrollment server can decline enrollment messages using the SOAP Fault forma -  - In Windows 10, version 1507, we added the deviceenrollmentserviceerror element. Here is an example: ```xml @@ -291,13 +284,10 @@ In Windows 10, version 1507, we added the deviceenrollmentserviceerror element. -  - TraceID is a freeform text node which is logged. It should identify the server side state for this enrollment attempt. This information may be used by support to look up why the server declined the enrollment. ## Related topics - - [MDM enrollment of Windows-based devices](mdm-enrollment-of-windows-devices.md) - [Federated authentication device enrollment](federated-authentication-device-enrollment.md) - [Certificate authentication device enrollment](certificate-authentication-device-enrollment.md) diff --git a/windows/client-management/mdm/on-premise-authentication-device-enrollment.md b/windows/client-management/mdm/on-premise-authentication-device-enrollment.md index 22c3ac4fbe..8b8510e448 100644 --- a/windows/client-management/mdm/on-premise-authentication-device-enrollment.md +++ b/windows/client-management/mdm/on-premise-authentication-device-enrollment.md @@ -30,7 +30,7 @@ For the list of enrollment scenarios not supported in Windows 10, see [Enrollme The discovery web service provides the configuration information necessary for a user to enroll a device with a management service. The service is a restful web service over HTTPS (server authentication only). -> [!NOTE] +>[!NOTE] >The administrator of the discovery service must create a host with the address enterpriseenrollment.*domain\_name*.com. The device’s automatic discovery flow uses the domain name of the email address that was submitted to the Workplace settings screen during sign in. The automatic discovery system constructs a URI that uses this hostname by appending the subdomain “enterpriseenrollment” to the domain of the email address, and by appending the path “/EnrollmentServer/Discovery.svc”. For example, if the email address is “sample@contoso.com”, the resulting URI for first Get request would be: http://enterpriseenrollment.contoso.com/EnrollmentServer/Discovery.svc @@ -78,7 +78,7 @@ The following logic is applied: - If the device is not redirected, it prompts the user for the server address. - If the device is redirected, it prompts the user to allow the redirect. -The following example shows a request via an HTTP POST command to the discovery web service given user@contoso.com as the email address +The following example shows a request via an HTTP POST command to the discovery web service given user@contoso.com as the email address: ``` https://EnterpriseEnrollment.Contoso.com/EnrollmentServer/Discovery.svc @@ -129,7 +129,7 @@ The discovery response is in the XML format and includes the following fields: - Authentication policy (AuthPolicy) – Indicates what type of authentication is required. For the MDM server, OnPremise is the supported value, which means that the user will be authenticated when calling the management service URL. This field is mandatory. - Federated is added as another supported value. This allows the server to leverage the Web Authentication Broker to perform customized user authentication, and term of usage acceptance. -> [!NOTE] +>[!NOTE] >The HTTP server response must not be chunked; it must be sent as one message. The following example shows a response received from the discovery web service for OnPremise authentication: @@ -214,7 +214,7 @@ After the user is authenticated, the web service retrieves the certificate templ MS-XCEP supports very flexible enrollment policies using various Complex Types and Attributes. We will first support the minimalKeyLength, the hashAlgorithmOIDReference policies, and the CryptoProviders. The hashAlgorithmOIDReference has related OID and OIDReferenceID and policySchema in the GetPolicesResponse. The policySchema refers to the certificate template version. Version 3 of MS-XCEP supports hashing algorithms. -> [!NOTE] +>[!NOTE] >The HTTP server response must not be chunked; it must be sent as one message. The following snippet shows the policy web service response. @@ -306,7 +306,7 @@ The RequestSecurityToken will use a custom TokenType (http://schema The RST may also specify a number of AdditionalContext items, such as DeviceType and Version. Based on these values, for example, the web service can return device-specific and version-specific DM configuration. -> [!NOTE] +>[!NOTE] >The policy service and the enrollment service must be on the same server; that is, they must have the same host name. The following example shows the enrollment web service request for OnPremise authentication. diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-security-center-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-security-center-antivirus.md index c2d53844a7..4d8b9d2e78 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-security-center-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-security-center-antivirus.md @@ -26,11 +26,13 @@ In Windows 10, version 1703 and later, the Windows Defender app is part of the W Settings that were previously part of the Windows Defender client and main Windows Settings have been combined and moved to the new app, which is installed by default as part of Windows 10, version 1703. -> [!IMPORTANT] -> Disabling the Windows Security Center service will not disable Microsoft Defender AV or [Windows Defender Firewall](https://docs.microsoft.com/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security). These are disabled automatically when a third-party antivirus or firewall product is installed and kept up to date.
If you do disable the Windows Security Center service, or configure its associated Group Policy settings to prevent it from starting or running, the Windows Security app may display stale or inaccurate information about any antivirus or firewall products you have installed on the device. ->It may also prevent Microsoft Defender AV from enabling itself if you have an old or outdated third-party antivirus, or if you uninstall any third-party antivirus products you may have previously installed. ->This will significantly lower the protection of your device and could lead to malware infection. +>[!IMPORTANT] +>Disabling the Windows Security Center service will not disable Microsoft Defender AV or [Windows Defender Firewall](https://docs.microsoft.com/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security). These are disabled automatically when a third-party antivirus or firewall product is installed and kept up to date. +>If you do disable the Windows Security Center service, or configure its associated Group Policy settings to prevent it from starting or running, the Windows Security app may display stale or inaccurate information about any antivirus or firewall products you have installed on the device. +>It may also prevent Microsoft Defender AV from enabling itself if you have an old or outdated third-party antivirus, or if you uninstall any third-party antivirus products you may have previously installed. + +>This will significantly lower the protection of your device and could lead to malware infection. See the [Windows Security article](/windows/threat-protection/windows-defender-security-center/windows-defender-security-center) for more information on other Windows security features that can be monitored in the app. @@ -46,7 +48,7 @@ The Windows Security app is a client interface on Windows 10, version 1703 and l ## Comparison of settings and functions of the old app and the new app -All of the previous functions and settings from the Windows Defender app (in versions of Windows 10 before version 1703) are now found in the new Windows Security app. Settings that were previously located in Windows Settings under **Update & security** > **Windows Defender** are also now in the new app. +All of the previous functions and settings from the Windows Defender app (in versions of Windows 10 before version 1703) are now found in the new Windows Security app. Settings that were previously located in Windows Settings under **Update & security** > **Windows Defender** are also now in the new app. The following diagrams compare the location of settings and functions between the old and new apps: @@ -66,8 +68,8 @@ Item | Windows 10, before version 1703 | Windows 10, version 1703 and later | De This section describes how to perform some of the most common tasks when reviewing or interacting with the threat protection provided by Microsoft Defender Antivirus in the Windows Security app. -> [!NOTE] -> If these settings are configured and deployed using Group Policy, the settings described in this section will be greyed-out and unavailable for use on individual endpoints. Changes made through a Group Policy Object must first be deployed to individual endpoints before the setting will be updated in Windows Settings. The [Configure end-user interaction with Microsoft Defender Antivirus](configure-end-user-interaction-microsoft-defender-antivirus.md) topic describes how local policy override settings can be configured. +>[!NOTE] +>If these settings are configured and deployed using Group Policy, the settings described in this section will be greyed-out and unavailable for use on individual endpoints. Changes made through a Group Policy Object must first be deployed to individual endpoints before the setting will be updated in Windows Settings. The [Configure end-user interaction with Microsoft Defender Antivirus](configure-end-user-interaction-microsoft-defender-antivirus.md) topic describes how local policy override settings can be configured. @@ -95,7 +97,6 @@ This section describes how to perform some of the most common tasks when reviewi 4. Click **Check for updates** to download new protection updates (if there are any). - ### Ensure Microsoft Defender Antivirus is enabled in the Windows Security app 1. Open the Windows Security app by clicking the shield icon in the task bar or searching the start menu for **Defender**. @@ -110,7 +111,6 @@ This section describes how to perform some of the most common tasks when reviewi >If you switch **Real-time protection** off, it will automatically turn back on after a short delay. This is to ensure you are protected from malware and threats. >If you install another antivirus product, Microsoft Defender AV will automatically disable itself and will indicate this in the Windows Security app. A setting will appear that will allow you to enable [limited periodic scanning](limited-periodic-scanning-microsoft-defender-antivirus.md). - ### Add exclusions for Microsoft Defender Antivirus in the Windows Security app @@ -135,21 +135,19 @@ The following table summarizes exclusion types and what happens: |**File type** |File extension
Example: `.test` |All files with the `.test` extension anywhere on your device are skipped by Microsoft Defender Antivirus. | |**Process** |Executable file path
Example: `c:\test\process.exe` |The specific process and any files that are opened by that process are skipped by Microsoft Defender Antivirus. | -To learn more, see: +To learn more, see: - [Configure and validate exclusions based on file extension and folder location](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus) - [Configure exclusions for files opened by processes](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus) ### Review threat detection history in the Windows Defender Security Center app - 1. Open the Windows Defender Security Center app by clicking the shield icon in the task bar or  - searching the start menu for **Defender**. - - 2. Click the **Virus & threat protection** tile (or the shield icon on the left menu bar). - - 3. Click **Threat history** + 1. Open the Windows Defender Security Center app by clicking the shield icon in the task bar or searching the start menu for **Defender**. - 4. Click **See full history** under each of the categories (**Current threats**, **Quarantined threats**,  - **Allowed threats**). + 2. Click the **Virus & threat protection** tile (or the shield icon on the left menu bar). + + 3. Click **Threat history** + + 4. Click **See full history** under each of the categories (**Current threats**, **Quarantined threats**, **Allowed threats**). @@ -167,6 +165,4 @@ To learn more, see: ## Related articles -- [Microsoft Defender Antivirus](microsoft-defender-antivirus-in-windows-10.md) - - +- [Microsoft Defender Antivirus](microsoft-defender-antivirus-in-windows-10.md) \ No newline at end of file From 8880251640b8941f2f6ace0845beacedaeede79e Mon Sep 17 00:00:00 2001 From: Steve Burkett Date: Thu, 11 Jun 2020 17:33:11 +1200 Subject: [PATCH 030/145] Update update-compliance-configuration-manual.md Add integer values for System/ConfigureTelemetryOptInSettingsUx in MDM and GP policy sections, and for Allow device name to be sent in Windows diagnostic data in GP policy section. --- .../update/update-compliance-configuration-manual.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/deployment/update/update-compliance-configuration-manual.md b/windows/deployment/update/update-compliance-configuration-manual.md index fc22965271..21fc9f1681 100644 --- a/windows/deployment/update/update-compliance-configuration-manual.md +++ b/windows/deployment/update/update-compliance-configuration-manual.md @@ -43,8 +43,8 @@ Each MDM Policy links to its documentation in the CSP hierarchy, providing its e | Policy | Value | Function | |---------------------------|-|------------------------------------------------------------| |**Provider/*ProviderID*/**[**CommercialID**](https://docs.microsoft.com/windows/client-management/mdm/dmclient-csp#provider-providerid-commercialid) |[Your CommercialID](update-compliance-get-started.md#get-your-commercialid) |Identifies the device as belonging to your organization. | -|**System/**[**AllowTelemetry**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-allowtelemetry) |1- Basic |Configures the maximum allowed telemetry to be sent to Microsoft. Individual users can still set this lower than what the policy defines, see the below policy for more information. | -|**System/**[**ConfigureTelemetryOptInSettingsUx**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-configuretelemetryoptinsettingsux) | Disable Telemetry opt-in Settings | (*Windows 10 1803+*) Determines whether end-users of the device can adjust telemetry to levels lower than the level defined by AllowTelemetry. It is recommended you disable this policy order the effective telemetry level on devices may not be sufficient. | +|**System/**[**AllowTelemetry**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-allowtelemetry) | 1- Basic |Configures the maximum allowed telemetry to be sent to Microsoft. Individual users can still set this lower than what the policy defines, see the below policy for more information. | +|**System/**[**ConfigureTelemetryOptInSettingsUx**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-configuretelemetryoptinsettingsux) | 1 - Disable Telemetry opt-in Settings | (*Windows 10 1803+*) Determines whether end-users of the device can adjust telemetry to levels lower than the level defined by AllowTelemetry. It is recommended you disable this policy or the effective telemetry level on devices may not be sufficient. | |**System/**[**AllowDeviceNameInDiagnosticData**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-allowdevicenameindiagnosticdata) | 1 - Allowed | Allows device name to be sent for Windows Diagnostic Data. If this policy is Not Configured or set to 0 (Disabled), Device Name will not be sent and will not be visible in Update Compliance, showing `#` instead. | ### Group Policies @@ -55,8 +55,8 @@ All Group Policies that need to be configured for Update Compliance are under ** |---------------------------|-|-----------------------------------------------------------| |**Configure the Commercial ID** |[Your CommercialID](update-compliance-get-started.md#get-your-commercialid) | Identifies the device as belonging to your organization. | |**Allow Telemetry** | 1 - Basic |Configures the maximum allowed telemetry to be sent to Microsoft. Individual users can still set this lower than what the policy defines, see the below policy for more information. | -|**Configure telemetry opt-in setting user interface** | Disable telemetry opt-in Settings |(*Windows 10 1803+*) Determines whether end-users of the device can adjust telemetry to levels lower than the level defined by AllowTelemetry. It is recommended you disable this policy order the effective telemetry level on devices may not be sufficient. | -|**Allow device name to be sent in Windows diagnostic data** | Enabled | Allows device name to be sent for Windows Diagnostic Data. If this policy is Not Configured or Disabled, Device Name will not be sent and will not be visible in Update Compliance, showing `#` instead. | +|**Configure telemetry opt-in setting user interface** | 1 - Disable telemetry opt-in Settings |(*Windows 10 1803+*) Determines whether end-users of the device can adjust telemetry to levels lower than the level defined by AllowTelemetry. It is recommended you disable this policy order the effective telemetry level on devices may not be sufficient. | +|**Allow device name to be sent in Windows diagnostic data** | 1 - Enabled | Allows device name to be sent for Windows Diagnostic Data. If this policy is Not Configured or Disabled, Device Name will not be sent and will not be visible in Update Compliance, showing `#` instead. | ## Required endpoints From e12626e9da4e5fb934aa117ea313f49e76ca0519 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Thu, 11 Jun 2020 15:21:47 +0530 Subject: [PATCH 031/145] replaced invalid link to correct link as per the report from Microsoft Employee-issue #6922 . so i changed to correct link --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 89b074632e..02ddfa2a9b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -399,7 +399,7 @@ GUID: `e6db77e5-3df2-4cf1-b95a-636979351e5b` ## Related topics -- [Attack surface reduction FAQ](attack-surface-reduction.md) +- [Attack surface reduction FAQ](attack-surface-reduction-faq.md) - [Enable attack surface reduction rules](enable-attack-surface-reduction.md) From f68acff31774f13f455e99d4eea84177c264859e Mon Sep 17 00:00:00 2001 From: Jaime Ondrusek Date: Thu, 11 Jun 2020 09:24:30 -0700 Subject: [PATCH 032/145] Update update-compliance-configuration-manual.md Corrected some terms and style. --- .../update/update-compliance-configuration-manual.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/deployment/update/update-compliance-configuration-manual.md b/windows/deployment/update/update-compliance-configuration-manual.md index 21fc9f1681..1387e22018 100644 --- a/windows/deployment/update/update-compliance-configuration-manual.md +++ b/windows/deployment/update/update-compliance-configuration-manual.md @@ -43,8 +43,8 @@ Each MDM Policy links to its documentation in the CSP hierarchy, providing its e | Policy | Value | Function | |---------------------------|-|------------------------------------------------------------| |**Provider/*ProviderID*/**[**CommercialID**](https://docs.microsoft.com/windows/client-management/mdm/dmclient-csp#provider-providerid-commercialid) |[Your CommercialID](update-compliance-get-started.md#get-your-commercialid) |Identifies the device as belonging to your organization. | -|**System/**[**AllowTelemetry**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-allowtelemetry) | 1- Basic |Configures the maximum allowed telemetry to be sent to Microsoft. Individual users can still set this lower than what the policy defines, see the below policy for more information. | -|**System/**[**ConfigureTelemetryOptInSettingsUx**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-configuretelemetryoptinsettingsux) | 1 - Disable Telemetry opt-in Settings | (*Windows 10 1803+*) Determines whether end-users of the device can adjust telemetry to levels lower than the level defined by AllowTelemetry. It is recommended you disable this policy or the effective telemetry level on devices may not be sufficient. | +|**System/**[**AllowTelemetry**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-allowtelemetry) | 1- Basic |Configures the maximum allowed diagnostic data to be sent to Microsoft. Individual users can still set this lower than what the policy defines, see the below policy for more information. | +|**System/**[**ConfigureTelemetryOptInSettingsUx**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-configuretelemetryoptinsettingsux) | 1 - Disable Telemetry opt-in Settings | (in Windows 10, version 1803 and later) Determines whether end-users of the device can adjust diagnostic data to levels lower than the level defined by AllowTelemetry. We recommend that you disable this policy or the effective diagnostic data level on devices might not be sufficient. | |**System/**[**AllowDeviceNameInDiagnosticData**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-allowdevicenameindiagnosticdata) | 1 - Allowed | Allows device name to be sent for Windows Diagnostic Data. If this policy is Not Configured or set to 0 (Disabled), Device Name will not be sent and will not be visible in Update Compliance, showing `#` instead. | ### Group Policies @@ -54,8 +54,8 @@ All Group Policies that need to be configured for Update Compliance are under ** | Policy | Value | Function | |---------------------------|-|-----------------------------------------------------------| |**Configure the Commercial ID** |[Your CommercialID](update-compliance-get-started.md#get-your-commercialid) | Identifies the device as belonging to your organization. | -|**Allow Telemetry** | 1 - Basic |Configures the maximum allowed telemetry to be sent to Microsoft. Individual users can still set this lower than what the policy defines, see the below policy for more information. | -|**Configure telemetry opt-in setting user interface** | 1 - Disable telemetry opt-in Settings |(*Windows 10 1803+*) Determines whether end-users of the device can adjust telemetry to levels lower than the level defined by AllowTelemetry. It is recommended you disable this policy order the effective telemetry level on devices may not be sufficient. | +|**Allow Telemetry** | 1 - Basic |Configures the maximum allowed diagnostic data to be sent to Microsoft. Individual users can still set this lower than what the policy defines. See the following policy for more information. | +|**Configure telemetry opt-in setting user interface** | 1 - Disable telemetry opt-in Settings |(in Windows 10, version 1803 and later) Determines whether end-users of the device can adjust diagnostic data to levels lower than the level defined by AllowTelemetry. We recommend that you disable this polic, otherwise the effective diagnostic data level on devices might not be sufficient. | |**Allow device name to be sent in Windows diagnostic data** | 1 - Enabled | Allows device name to be sent for Windows Diagnostic Data. If this policy is Not Configured or Disabled, Device Name will not be sent and will not be visible in Update Compliance, showing `#` instead. | ## Required endpoints From b349c9ad5e3e293fa38d2388a423ff16db3aa828 Mon Sep 17 00:00:00 2001 From: 1justingilmore Date: Thu, 11 Jun 2020 11:11:51 -0600 Subject: [PATCH 033/145] Copy edits for 401116 fixed fixed note coding, --- ...ix-a-powershell-scripts-for-surface-hub.md | 16 ++++----- mdop/appv-v5/app-v-50-prerequisites.md | 36 +++++++++---------- .../mbam-20-privacy-statement-mbam-2.md | 4 +-- ...ficate-authentication-device-enrollment.md | 4 +-- ...erated-authentication-device-enrollment.md | 28 +++++++-------- .../mdm/mobile-device-enrollment.md | 10 ++---- ...remise-authentication-device-enrollment.md | 16 ++++----- ...soft-defender-security-center-antivirus.md | 20 +++++------ 8 files changed, 64 insertions(+), 70 deletions(-) diff --git a/devices/surface-hub/appendix-a-powershell-scripts-for-surface-hub.md b/devices/surface-hub/appendix-a-powershell-scripts-for-surface-hub.md index 9295d1d8ac..d4aee59674 100644 --- a/devices/surface-hub/appendix-a-powershell-scripts-for-surface-hub.md +++ b/devices/surface-hub/appendix-a-powershell-scripts-for-surface-hub.md @@ -50,8 +50,8 @@ What do you need in order to run the scripts? - Remote PowerShell access to your organization's domain or tenant, Exchange servers, and Skype for Business servers. - Admin credentials for your organization's domain or tenant, Exchange servers, and Skype for Business servers. ->[!NOTE] ->Whether you’re creating a new account or modifying an already-existing account, the validation script will verify that your device account is configured correctly. You should always run the validation script before adding a device account to Surface Hub. +> [!NOTE] +> Whether you’re creating a new account or modifying an already-existing account, the validation script will verify that your device account is configured correctly. You should always run the validation script before adding a device account to Surface Hub. ## Running the scripts @@ -297,8 +297,8 @@ Import-PSSession $sessExchange -AllowClobber -WarningAction SilentlyContinue Import-PSSession $sessLync -AllowClobber -WarningAction SilentlyContinue ## Create the Exchange mailbox ## ->[!Note] ->These exchange commandlets do not always throw their errors as exceptions +> [!Note] +> These exchange commandlets do not always throw their errors as exceptions # Because Get-Mailbox will throw an error if the mailbox is not found $Error.Clear() @@ -664,8 +664,8 @@ Import-PSSession $sessExchange -AllowClobber -WarningAction SilentlyContinue Import-PSSession $sessCS -AllowClobber -WarningAction SilentlyContinue ## Create the Exchange mailbox ## ->[!Note] ->These exchange commandlets do not always throw their errors as exceptions +> [!Note] +> These exchange commandlets do not always throw their errors as exceptions # Because Get-Mailbox will throw an error if the mailbox is not found $Error.Clear() @@ -1662,8 +1662,8 @@ Set-CalendarProcessing $strRoomUpn -AutomateProcessing AutoAccept For a device account to accept external meeting requests (a meeting request from an account not in the same tenant/domain), the device account must be set to allow processing of external meeting requests. Once set, the device account will automatically accept or decline meeting requests from external accounts as well as local accounts. ->[!Note] ->If the **AutomateProcessing** attribute is not set to **AutoAccept**, then setting this will have no effect. +> [!Note] +> If the **AutomateProcessing** attribute is not set to **AutoAccept**, then setting this will have no effect. ```PowerShell Set-CalendarProcessing $strRoomUpn -ProcessExternalMeetingMessages $true diff --git a/mdop/appv-v5/app-v-50-prerequisites.md b/mdop/appv-v5/app-v-50-prerequisites.md index ace08aceef..428a2cf5f8 100644 --- a/mdop/appv-v5/app-v-50-prerequisites.md +++ b/mdop/appv-v5/app-v-50-prerequisites.md @@ -18,8 +18,8 @@ ms.date: 08/30/2016 Before you begin the Microsoft Application Virtualization (App-V) 5.0 Setup, you should make sure that you have met the prerequisites to install the product. This topic contains information to help you successfully plan for preparing your computing environment before you deploy the App-V 5.0 features. ->[!Important] ->**The prerequisites in this article apply only to App-V 5.0**. For additional prerequisites that apply to App-V 5.0 Service Packs, see the following web pages: +> [!Important] +> **The prerequisites in this article apply only to App-V 5.0**. For additional prerequisites that apply to App-V 5.0 Service Packs, see the following web pages: - [What's new in App-V 5.0 SP1](whats-new-in-app-v-50-sp1.md) @@ -68,8 +68,8 @@ The following table lists prerequisite information that pertains to specific ope ## Installation prerequisites for App-V 5.0 ->[!Note] ->The following prerequisites are already installed for computers that run Windows 8. +> [!Note] +> The following prerequisites are already installed for computers that run Windows 8. Each of the App-V 5.0 features have specific prerequisites that must be met before the App-V 5.0 features can be successfully installed. @@ -126,8 +126,8 @@ The following table lists the installation prerequisites for the App-V 5.0 clien ### Prerequisites for the App-V 5.0 Remote Desktop Services client ->[!Note] ->The following prerequisites are already installed for computers that run Windows Server 2012. +> [!Note] +> The following prerequisites are already installed for computers that run Windows Server 2012. The following table lists the installation prerequisites for the App-V 5.0 Remote Desktop Services client: @@ -180,13 +180,13 @@ The following table lists the installation prerequisites for the App-V 5.0 Remot ### Prerequisites for the App-V 5.0 Sequencer ->[!Note] ->The following prerequisites are already installed for computers that run Windows 8 and Windows Server 2012. +> [!Note] +> The following prerequisites are already installed for computers that run Windows 8 and Windows Server 2012. The following table lists the installation prerequisites for the App-V 5.0 Sequencer. If possible, the computer that runs the Sequencer should have the same hardware and software configurations as the computers that will run the virtual applications. ->[!Note] ->If the system requirements of a locally installed application exceed the requirements of the Sequencer, you must meet the requirements of that application. Additionally, because the sequencing process is system resource-intensive, we recommend that the computer that runs the Sequencer has plenty of memory, a fast processor, and a fast hard drive. For more information see [App-V 5.0 Supported Configurations](app-v-50-supported-configurations.md). +> [!Note] +> If the system requirements of a locally installed application exceed the requirements of the Sequencer, you must meet the requirements of that application. Additionally, because the sequencing process is system resource-intensive, we recommend that the computer that runs the Sequencer has plenty of memory, a fast processor, and a fast hard drive. For more information see [App-V 5.0 Supported Configurations](app-v-50-supported-configurations.md). @@ -227,8 +227,8 @@ The following table lists the installation prerequisites for the App-V 5.0 Seque ### Prerequisites for the App-V 5.0 server ->[!Note] ->The following prerequisites are already installed for computers that run Windows Server 2012: +> [!Note] +> The following prerequisites are already installed for computers that run Windows Server 2012: - Microsoft .NET Framework 4.5. This eliminates the Microsoft .NET Framework 4 requirement. @@ -236,18 +236,18 @@ The following table lists the installation prerequisites for the App-V 5.0 Seque - Download and install [KB2533623](https://support.microsoft.com/kb/2533623) (https://support.microsoft.com/kb/2533623) - >[!Important] - >You can still download install the previous KB. However, it may have been replaced with a more recent version. + > [!Important] + > You can still download install the previous KB. However, it may have been replaced with a more recent version. The following table lists the installation prerequisites for the App-V 5.0 server. The account that you use to install the server components must have administrative rights on the computer that you are installing on. This account must also have the ability to query Active Directory Directory Services. Before you install and configure the App-V 5.0 servers, you must specify a port where each component will be hosted. You must also add the associated firewall rules to allow incoming requests to the specified ports. ->[!Note] ->Web Distributed Authoring and Versioning (WebDAV) is automatically disabled for the Management Service. +> [!Note] +> Web Distributed Authoring and Versioning (WebDAV) is automatically disabled for the Management Service. The App-V 5.0 server is supported for a standalone deployment, where all the components are deployed on the same server, and a distributed deployment. Depending on the topology that you use to deploy the App-V 5.0 server, the data that you will need for each component will slightly change. ->[!Important] ->The installation of the App-V 5.0 server on a computer that runs any previous version or component of App-V is not supported. Additionally, the installation of the server components on a computer that runs Server Core or a Domain Controller is also not supported. +> [!Important] +> The installation of the App-V 5.0 server on a computer that runs any previous version or component of App-V is not supported. Additionally, the installation of the server components on a computer that runs Server Core or a Domain Controller is also not supported.
diff --git a/mdop/mbam-v2/mbam-20-privacy-statement-mbam-2.md b/mdop/mbam-v2/mbam-20-privacy-statement-mbam-2.md index d2e12fb643..55aa14a2c0 100644 --- a/mdop/mbam-v2/mbam-20-privacy-statement-mbam-2.md +++ b/mdop/mbam-v2/mbam-20-privacy-statement-mbam-2.md @@ -84,8 +84,8 @@ Microsoft Error Reporting is not turned on or off by MBAM. MBAM will utilize wha "HKLM\\Software\\Wow6432Node\\Microsoft\\Microsoft Standalone System Sweeper Tool" (for the 64-bit version) ->[!Warning] ->Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the PC. You can also use the Last Known Good Configuration startup option if you encounter problems after manual changes have been applied. +> [!Warning] +> Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the PC. You can also use the Last Known Good Configuration startup option if you encounter problems after manual changes have been applied. Important Information: Enterprise customers can use Group Policy to configure how Microsoft Error Reporting behaves on their PCs. Configuration options include the ability to turn off Microsoft Error Reporting. If you are an administrator and wish to configure Group Policy for Microsoft Error Reporting, technical details are available on [TechNet](https://technet.microsoft.com/library/cc709644.aspx). diff --git a/windows/client-management/mdm/certificate-authentication-device-enrollment.md b/windows/client-management/mdm/certificate-authentication-device-enrollment.md index 1441d87c96..565fd3436d 100644 --- a/windows/client-management/mdm/certificate-authentication-device-enrollment.md +++ b/windows/client-management/mdm/certificate-authentication-device-enrollment.md @@ -16,8 +16,8 @@ ms.date: 06/26/2017 This section provides an example of the mobile device enrollment protocol using certificate authentication policy. For details about the Microsoft mobile device enrollment protocol for Windows 10, see [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2]( https://go.microsoft.com/fwlink/p/?LinkId=619347). ->[!Note] ->To set up devices to use certificate authentication for enrollment, you should create a provisioning package. For more information about provisioning packages, see [Build and apply a provisioning package](https://msdn.microsoft.com/library/windows/hardware/dn916107). +> [!Note] +> To set up devices to use certificate authentication for enrollment, you should create a provisioning package. For more information about provisioning packages, see [Build and apply a provisioning package](https://msdn.microsoft.com/library/windows/hardware/dn916107). ## In this topic diff --git a/windows/client-management/mdm/federated-authentication-device-enrollment.md b/windows/client-management/mdm/federated-authentication-device-enrollment.md index 8af297cb56..69cdc60a1c 100644 --- a/windows/client-management/mdm/federated-authentication-device-enrollment.md +++ b/windows/client-management/mdm/federated-authentication-device-enrollment.md @@ -32,8 +32,8 @@ For the list of enrollment scenarios not supported in Windows 10, see [Enrollme The discovery web service provides the configuration information necessary for a user to enroll a phone with a management service. The service is a restful web service over HTTPS (server authentication only). ->[!Note] ->The administrator of the discovery service must create a host with the address enterpriseenrollment.*domain\_name*.com. +> [!Note] +> The administrator of the discovery service must create a host with the address enterpriseenrollment.*domain\_name*.com. The automatic discovery flow of the device uses the domain name of the email address that was submitted to the Workplace settings screen during sign in. The automatic discovery system constructs a URI that uses this hostname by appending the subdomain “enterpriseenrollment” to the domain of the email address, and by appending the path “/EnrollmentServer/Discovery.svc”. For example, if the email address is “sample@contoso.com”, the resulting URI for first Get request would be: http://enterpriseenrollment.contoso.com/EnrollmentServer/Discovery.svc @@ -127,21 +127,21 @@ The discovery response is in the XML format and includes the following fields: - Authentication policy (AuthPolicy) – Indicates what type of authentication is required. For the MDM server, OnPremise is the supported value, which means that the user will be authenticated when calling the management service URL. This field is mandatory. - In Windows, Federated is added as another supported value. This allows the server to leverage the Web Authentication Broker to perform customized user authentication, and term of usage acceptance. ->[!Note]   ->The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. +> [!Note]   +> The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. When authentication policy is set to be Federated, Web Authentication Broker (WAB) will be leveraged by the enrollment client to get a security token. The WAB start page URL is provided by the discovery service in the response message. The enrollment client will call the WAB API within the response message to start the WAB process. WAB pages are server hosted web pages. The server should build those pages to fit the device screen nicely and be as consistent as possible to other builds in the MDM enrollment UI. The opaque security token that is returned from WAB as an endpage will be used by the enrollment client as the device security secret during the client certificate enrollment request call. ->[!Note] ->Instead of relying on the user agent string that is passed during authentication to get information, such as the OS version, use the following guidance: +> [!Note] +> Instead of relying on the user agent string that is passed during authentication to get information, such as the OS version, use the following guidance: > - Parse the OS version from the data sent up during the discovery request. > - Append the OS version as a parameter in the AuthenticationServiceURL. > - Parse out the OS version from the AuthenticiationServiceURL when the OS sends the response for authentication. A new XML tag, AuthenticationServiceUrl, is introduced in the DiscoveryResponse XML to allow the server to specify the WAB page start URL. For Federated authentication, this XML tag must exist. ->[!Note] ->The enrollment client is agnostic with regards to the protocol flows for authenticating and returning the security token. While the server might prompt for user credentials directly or enter into a federation protocol with another server and directory service, the enrollment client is agnostic to all of this. To remain agnostic, all protocol flows pertaining to authentication that involve the enrollment client are passive, that is, browser-implemented. +> [!Note] +> The enrollment client is agnostic with regards to the protocol flows for authenticating and returning the security token. While the server might prompt for user credentials directly or enter into a federation protocol with another server and directory service, the enrollment client is agnostic to all of this. To remain agnostic, all protocol flows pertaining to authentication that involve the enrollment client are passive, that is, browser-implemented. The following are the explicit requirements for the server. @@ -294,8 +294,8 @@ After the user is authenticated, the web service retrieves the certificate templ MS-XCEP supports very flexible enrollment policies using various Complex Types and Attributes. For Windows device, we will first support the minimalKeyLength, the hashAlgorithmOIDReference policies, and the CryptoProviders. The hashAlgorithmOIDReference has related OID and OIDReferenceID and policySchema in the GetPolicesResponse. The policySchema refers to the certificate template version. Version 3 of MS-XCEP supports hashing algorithms. ->[!Note]   ->The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. +> [!Note]   +> The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. The following snippet shows the policy web service response. @@ -386,8 +386,8 @@ Note that the RequestSecurityToken will use a custom TokenType (http:[!Note] ->The policy service and the enrollment service must be on the same server; that is, they must have the same host name. +> [!Note] +> The policy service and the enrollment service must be on the same server; that is, they must have the same host name. The following example shows the enrollment web service request for federated authentication. @@ -476,8 +476,8 @@ The following example shows the enrollment web service request for federated aut After validating the request, the web service looks up the assigned certificate template for the client, update it if needed, sends the PKCS\#10 requests to the CA, processes the response from the CA, constructs an OMA Client Provisioning XML format, and returns it in the RequestSecurityTokenResponse (RSTR). ->[!Note] ->The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. +> [!Note] +> The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. Similar to the TokenType in the RST, the RSTR will use a custom ValueType in the BinarySecurityToken (http://schemas.microsoft.com/ConfigurationManager/Enrollment/DeviceEnrollmentProvisionDoc), because the token is more than an X.509 v3 certificate. diff --git a/windows/client-management/mdm/mobile-device-enrollment.md b/windows/client-management/mdm/mobile-device-enrollment.md index 1b6590f392..bb09b8f063 100644 --- a/windows/client-management/mdm/mobile-device-enrollment.md +++ b/windows/client-management/mdm/mobile-device-enrollment.md @@ -54,8 +54,8 @@ The following topics describe the end-to-end enrollment process using various au - [Certificate authentication device enrollment](certificate-authentication-device-enrollment.md) - [On-premise authentication device enrollment](on-premise-authentication-device-enrollment.md) ->[!Note]   ->As a best practice, do not use hardcoded server-side checks on values such as: +> [!Note]   +> As a best practice, do not use hardcoded server-side checks on values such as: > - User agent string > - Any fixed URIs that are passed during enrollment > - Specific formatting of any value unless otherwise noted, such as the format of the device ID. @@ -292,9 +292,3 @@ TraceID is a freeform text node which is logged. It should identify the server s - [Federated authentication device enrollment](federated-authentication-device-enrollment.md) - [Certificate authentication device enrollment](certificate-authentication-device-enrollment.md) - [On-premise authentication device enrollment](on-premise-authentication-device-enrollment.md) - - - - - - diff --git a/windows/client-management/mdm/on-premise-authentication-device-enrollment.md b/windows/client-management/mdm/on-premise-authentication-device-enrollment.md index 8b8510e448..2ff94e841f 100644 --- a/windows/client-management/mdm/on-premise-authentication-device-enrollment.md +++ b/windows/client-management/mdm/on-premise-authentication-device-enrollment.md @@ -30,8 +30,8 @@ For the list of enrollment scenarios not supported in Windows 10, see [Enrollme The discovery web service provides the configuration information necessary for a user to enroll a device with a management service. The service is a restful web service over HTTPS (server authentication only). ->[!NOTE] ->The administrator of the discovery service must create a host with the address enterpriseenrollment.*domain\_name*.com. +> [!NOTE] +> The administrator of the discovery service must create a host with the address enterpriseenrollment.*domain\_name*.com. The device’s automatic discovery flow uses the domain name of the email address that was submitted to the Workplace settings screen during sign in. The automatic discovery system constructs a URI that uses this hostname by appending the subdomain “enterpriseenrollment” to the domain of the email address, and by appending the path “/EnrollmentServer/Discovery.svc”. For example, if the email address is “sample@contoso.com”, the resulting URI for first Get request would be: http://enterpriseenrollment.contoso.com/EnrollmentServer/Discovery.svc @@ -129,8 +129,8 @@ The discovery response is in the XML format and includes the following fields: - Authentication policy (AuthPolicy) – Indicates what type of authentication is required. For the MDM server, OnPremise is the supported value, which means that the user will be authenticated when calling the management service URL. This field is mandatory. - Federated is added as another supported value. This allows the server to leverage the Web Authentication Broker to perform customized user authentication, and term of usage acceptance. ->[!NOTE] ->The HTTP server response must not be chunked; it must be sent as one message. +> [!NOTE] +> The HTTP server response must not be chunked; it must be sent as one message. The following example shows a response received from the discovery web service for OnPremise authentication: @@ -214,8 +214,8 @@ After the user is authenticated, the web service retrieves the certificate templ MS-XCEP supports very flexible enrollment policies using various Complex Types and Attributes. We will first support the minimalKeyLength, the hashAlgorithmOIDReference policies, and the CryptoProviders. The hashAlgorithmOIDReference has related OID and OIDReferenceID and policySchema in the GetPolicesResponse. The policySchema refers to the certificate template version. Version 3 of MS-XCEP supports hashing algorithms. ->[!NOTE] ->The HTTP server response must not be chunked; it must be sent as one message. +> [!NOTE] +> The HTTP server response must not be chunked; it must be sent as one message. The following snippet shows the policy web service response. @@ -306,8 +306,8 @@ The RequestSecurityToken will use a custom TokenType (http://schema The RST may also specify a number of AdditionalContext items, such as DeviceType and Version. Based on these values, for example, the web service can return device-specific and version-specific DM configuration. ->[!NOTE] ->The policy service and the enrollment service must be on the same server; that is, they must have the same host name. +> [!NOTE] +> The policy service and the enrollment service must be on the same server; that is, they must have the same host name. The following example shows the enrollment web service request for OnPremise authentication. diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-security-center-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-security-center-antivirus.md index 4d8b9d2e78..6367bd636a 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-security-center-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-security-center-antivirus.md @@ -26,13 +26,13 @@ In Windows 10, version 1703 and later, the Windows Defender app is part of the W Settings that were previously part of the Windows Defender client and main Windows Settings have been combined and moved to the new app, which is installed by default as part of Windows 10, version 1703. ->[!IMPORTANT] ->Disabling the Windows Security Center service will not disable Microsoft Defender AV or [Windows Defender Firewall](https://docs.microsoft.com/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security). These are disabled automatically when a third-party antivirus or firewall product is installed and kept up to date. ->If you do disable the Windows Security Center service, or configure its associated Group Policy settings to prevent it from starting or running, the Windows Security app may display stale or inaccurate information about any antivirus or firewall products you have installed on the device. +> [!IMPORTANT] +> Disabling the Windows Security Center service will not disable Microsoft Defender AV or [Windows Defender Firewall](https://docs.microsoft.com/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security). These are disabled automatically when a third-party antivirus or firewall product is installed and kept up to date. +> If you do disable the Windows Security Center service, or configure its associated Group Policy settings to prevent it from starting or running, the Windows Security app may display stale or inaccurate information about any antivirus or firewall products you have installed on the device. ->It may also prevent Microsoft Defender AV from enabling itself if you have an old or outdated third-party antivirus, or if you uninstall any third-party antivirus products you may have previously installed. +> It may also prevent Microsoft Defender AV from enabling itself if you have an old or outdated third-party antivirus, or if you uninstall any third-party antivirus products you may have previously installed. ->This will significantly lower the protection of your device and could lead to malware infection. +> This will significantly lower the protection of your device and could lead to malware infection. See the [Windows Security article](/windows/threat-protection/windows-defender-security-center/windows-defender-security-center) for more information on other Windows security features that can be monitored in the app. @@ -68,8 +68,8 @@ Item | Windows 10, before version 1703 | Windows 10, version 1703 and later | De This section describes how to perform some of the most common tasks when reviewing or interacting with the threat protection provided by Microsoft Defender Antivirus in the Windows Security app. ->[!NOTE] ->If these settings are configured and deployed using Group Policy, the settings described in this section will be greyed-out and unavailable for use on individual endpoints. Changes made through a Group Policy Object must first be deployed to individual endpoints before the setting will be updated in Windows Settings. The [Configure end-user interaction with Microsoft Defender Antivirus](configure-end-user-interaction-microsoft-defender-antivirus.md) topic describes how local policy override settings can be configured. +> [!NOTE] +> If these settings are configured and deployed using Group Policy, the settings described in this section will be greyed-out and unavailable for use on individual endpoints. Changes made through a Group Policy Object must first be deployed to individual endpoints before the setting will be updated in Windows Settings. The [Configure end-user interaction with Microsoft Defender Antivirus](configure-end-user-interaction-microsoft-defender-antivirus.md) topic describes how local policy override settings can be configured. @@ -107,9 +107,9 @@ This section describes how to perform some of the most common tasks when reviewi 4. Toggle the **Real-time protection** switch to **On**. - >[!NOTE] - >If you switch **Real-time protection** off, it will automatically turn back on after a short delay. This is to ensure you are protected from malware and threats. - >If you install another antivirus product, Microsoft Defender AV will automatically disable itself and will indicate this in the Windows Security app. A setting will appear that will allow you to enable [limited periodic scanning](limited-periodic-scanning-microsoft-defender-antivirus.md). + > [!NOTE] + > If you switch **Real-time protection** off, it will automatically turn back on after a short delay. This is to ensure you are protected from malware and threats. + > If you install another antivirus product, Microsoft Defender AV will automatically disable itself and will indicate this in the Windows Security app. A setting will appear that will allow you to enable [limited periodic scanning](limited-periodic-scanning-microsoft-defender-antivirus.md). From 51e278c507295ebce62bfafd39a5388c906b9bce Mon Sep 17 00:00:00 2001 From: J Whitmarsh Date: Thu, 11 Jun 2020 11:03:07 -0700 Subject: [PATCH 034/145] Update index.yml --- windows/deployment/index.yml | 114 ++++++++++++++--------------------- 1 file changed, 45 insertions(+), 69 deletions(-) diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml index 70fa4b92c9..4194453097 100644 --- a/windows/deployment/index.yml +++ b/windows/deployment/index.yml @@ -22,96 +22,72 @@ landingContent: # Cards and links should be based on top customer tasks or top subjects # Start card title with a verb # Card (optional) - - title: Deploy Windows 10 + - title: Get started linkLists: - linkListType: overview links: + - text: What's new + url: windows-10-deployment-scenarios.md - text: Windows 10 deployment scenarios url: windows-10-deployment-scenarios.md - - - linkListType: get-started - links: - - text: Demonstrate Autopilot deployment - url: windows-autopilot/demonstrate-deployment-on-vm.md - - text: Deploy Windows 10 in a test lab - url: windows-10-poc.md + - text: What is Windows as a service + url: update/waas-overview.md # Card (optional) - - title: Update Windows 10 + - title: Plan and prepare linkLists: - linkListType: overview - links: - - text: What is Windows as a service? - url: update/waas-overview.md - - text: Types of Windows updates - url: update/waas-quick-start.md#definitions - - linkListType: get-started - links: - - text: Servicing the Windows 10 operating system - url: update/waas-servicing-strategy-windows-10-updates.md - - - # Card (optional) - - title: Deployment planning - linkLists: - - linkListType: architecture links: - text: Create a deployment plan + url: windows-autopilot/demonstrate-deployment-on-vm.md + - text: Prepare to deploy + url: windows-10-poc.md + - text: Set up Delivery Optimization + url: windows-10-poc.md + # Card (optional) + - title: Deploy + linkLists: + - linkListType: overview + links: + - text: Deploy with Endpoint Manager url: update/create-deployment-plan.md - - text: Define readiness criteria - url: update/plan-define-readiness.md - - text: Evaluate infrastructure and tools + - text: Deploy Windows updates url: update/eval-infra-tools.md - - text: Determine application readiness - url: update/plan-determine-app-readiness.md - - text: Define your servicing strategy + - text: Manage the update experience url: update/waas-servicing-strategy-windows-10-updates.md - # Card - - title: Prepare to deploy Windows 10 - linkLists: - - linkListType: how-to-guide - links: - - text: Prepare for Zero Touch Installation with Configuration Manager - url: deploy-windows-cm/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md - - text: Prepare to deploy Windows 10 with MDT - url: deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md - - text: Evaluate and update infrastructure - url: update/update-policies.md - - text: Build a successful servicing strategy - url: update/waas-deployment-rings-windows-10-updates.md - # Card - - title: Deploy and update Windows 10 + - title: Deploy with Autopilot linkLists: - linkListType: deploy links: - - text: Windows Autopilot scenarios and capabilities + - text: Learn about Autopilot url: windows-autopilot/windows-autopilot-scenarios.md - - text: Deploy Windows 10 to a new device with Configuration Manager - url: deploy-windows-cm/deploy-windows-10-using-pxe-and-configuration-manager.md - - text: Deploy a Windows 10 image using MDT - url: deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md - - text: Assign devices to servicing channels - url: update/waas-servicing-channels-windows-10-updates.md - - text: Deploy Windows 10 updates - url: update/waas-servicing-channels-windows-10-updates.md - - text: Resolve Windows 10 upgrade errors - url: upgrade/resolve-windows-10-upgrade-errors.md + - text: Deploy with Autopilot + url: windows-autopilot/windows-autopilot-scenarios.md + - text: Deploy with Autopilot poster + url: https://docs.microsoft.com/windows/deployment/windows-10-deployment-posters#deploy-windows-10-with-autopilot + + # Card + - title: Support remote work + linkLists: + - linkListType: overview + links: + - text: Deploy Windows 10 for a remote world + url: https://techcommunity.microsoft.com/t5/windows-it-pro-blog/deploying-a-new-version-of-windows-10-in-a-remote-world/ba-p/1419846 + - text: Update infrastructure + url: update/update-policies.md + - text: Build a servicing strategy + url: update/waas-deployment-rings-windows-10-updates.md # Card (optional) - - title: Windows 10 resources + - title: Microsoft Learn linkLists: - - linkListType: reference + - linkListType: overview links: - - text: Windows 10 release information - url: https://docs.microsoft.com/windows/release-information/ - - text: What's new in Windows 10 - url: https://docs.microsoft.com/windows/whats-new/ - - text: Windows 10 Enterprise Security - url: https://docs.microsoft.com/windows/security/ - - text: Desktop Deployment Center - url: https://docs.microsoft.com/microsoft-365/enterprise/desktop-deployment-center-home - - text: Microsoft 365 solution and architecture center - url: https://docs.microsoft.com/microsoft-365/solutions/?view=o365-worldwide - + - text: Deploy to Windows 10 + url: https://docs.microsoft.com/en-us/windows/release-information/ + - text: Train users + url: https://docs.microsoft.com/en-us/windows/whats-new/ + - text: Automate Windows deployments + url: https://docs.microsoft.com/en-us/windows/security/ \ No newline at end of file From 39af00034637acaa7a962481aefc4f2668f30ac4 Mon Sep 17 00:00:00 2001 From: J Whitmarsh Date: Thu, 11 Jun 2020 11:09:55 -0700 Subject: [PATCH 035/145] Update index.yml --- windows/deployment/index.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml index 4194453097..5d453feee8 100644 --- a/windows/deployment/index.yml +++ b/windows/deployment/index.yml @@ -59,7 +59,7 @@ landingContent: # Card - title: Deploy with Autopilot linkLists: - - linkListType: deploy + - linkListType: overview links: - text: Learn about Autopilot url: windows-autopilot/windows-autopilot-scenarios.md From 71cdcb8e8b2de2cdbad57fe24528bc80d4250686 Mon Sep 17 00:00:00 2001 From: LE Date: Thu, 11 Jun 2020 18:03:45 -0400 Subject: [PATCH 036/145] Update manage-windows-2004-endpoints.md --- windows/privacy/manage-windows-2004-endpoints.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/manage-windows-2004-endpoints.md b/windows/privacy/manage-windows-2004-endpoints.md index 75e9aa6738..73e8c9e0fd 100644 --- a/windows/privacy/manage-windows-2004-endpoints.md +++ b/windows/privacy/manage-windows-2004-endpoints.md @@ -53,7 +53,7 @@ The following methodology was used to derive these network endpoints: ||The following endpoint is used for the Weather app. To turn off traffic for this endpoint, either uninstall the Weather app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTPS|tile-service.weather.microsoft.com ||The following endpoint is used for OneNote Live Tile. To turn off traffic for this endpoint, either uninstall OneNote or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTPS|cdn.onenote.net/* ||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser. To turn off traffic for this endpoint, either uninstall the Photos app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|TLSv1.2|evoke-windowsservices-tas.msedge.net| -|Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available. It is possible turn off traffic to this endpoint, but that is not recommended because when root certificates are updated over time, applications and websites may stop working because they did not receive an updated root certificate the application uses. Additionally, it is used to download certificates that are publicly known to be fraudulent. These settings are critical for both Windows security and the overall security of the Internet. We do not recommend blocking this endpoint. If traffic to this endpoint is turned off, Windows no longer automatically downloads certificates known to be fraudulent, which increases the attack vector on the device.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#automatic-root-certificates-update)| +|Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available. It is possible to turn off traffic to this endpoint, but it is not recommended because as root certificates are updated over time, applications and websites may stop working because they did not receive an updated root certificate the application uses. Additionally, it is used to download certificates that are publicly known to be fraudulent. These settings are critical for both Windows security and the overall security of the Internet. We do not recommend blocking this endpoint. If traffic to this endpoint is turned off, Windows no longer automatically downloads certificates known to be fraudulent, which increases the attack vector on the device.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#automatic-root-certificates-update)| |||HTTP|ctldl.windowsupdate.com| |Cortana and Search|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana)| ||The following endpoints are related to Cortana and Live Tiles. If you turn off traffic for this endpoint, you will block updates to Cortana greetings, tips, and Live Tiles.|TLSv1.2|www.bing.com*| From a60c83df3d18e01cd2ad59f34f8680096fe5cabb Mon Sep 17 00:00:00 2001 From: Aacer Daken <41165107+AaDake@users.noreply.github.com> Date: Thu, 11 Jun 2020 16:51:05 -0700 Subject: [PATCH 037/145] Update index.md Updated section name of Kernel DMA Protection, to reflect the update title of the document --- windows/security/information-protection/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/index.md b/windows/security/information-protection/index.md index c2050be90b..84ea720232 100644 --- a/windows/security/information-protection/index.md +++ b/windows/security/information-protection/index.md @@ -22,7 +22,7 @@ Learn more about how to secure documents and other data across your organization |-|-| | [BitLocker](bitlocker/bitlocker-overview.md)| Provides information about BitLocker, which is a data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned computers. | | [Encrypted Hard Drive](encrypted-hard-drive.md)| Encrypted Hard Drive uses the rapid encryption that is provided by BitLocker Drive Encryption to enhance data security and management. | -| [Kernel DMA Protection for Thunderbolt™ 3](kernel-dma-protection-for-thunderbolt.md)| Kernel DMA Protection protects PCs against drive-by Direct Memory Access (DMA) attacks using PCI hot plug devices connected to Thunderbolt™ 3 ports. | +| [Kernel DMA Protection](kernel-dma-protection-for-thunderbolt.md)| Kernel DMA Protection protects PCs against drive-by Direct Memory Access (DMA) attacks using PCI hot plug devices connected to PCI accessible ports, such as Thunderbolt™ 3 ports. | | [Protect your enterprise data using Windows Information Protection (WIP)](windows-information-protection/protect-enterprise-data-using-wip.md)|Provides info about how to create a Windows Information Protection policy that can help protect against potential corporate data leakage.| | [Secure the Windows 10 boot process](secure-the-windows-10-boot-process.md)| Windows 10 supports features to help prevent rootkits and bootkits from loading during the startup process. | | [Trusted Platform Module](tpm/trusted-platform-module-top-node.md)| Trusted Platform Module (TPM) technology is designed to provide hardware-based, security-related functions. A TPM chip is a secure crypto-processor that helps you with actions such as generating, storing, and limiting the use of cryptographic keys. | From 2b163375f0406e481b307257bb16e2885254ee74 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Fri, 12 Jun 2020 12:45:39 +0530 Subject: [PATCH 038/145] replaced error 404 link to new link as per the user report #6940 , so i replaced the invalid link to new link new link **https://support.microsoft.com/help/4098906/manage-surface-driver-updates-in-configuration-manager** --- devices/surface/manage-surface-driver-and-firmware-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/manage-surface-driver-and-firmware-updates.md b/devices/surface/manage-surface-driver-and-firmware-updates.md index a1eea22998..0d168ed57d 100644 --- a/devices/surface/manage-surface-driver-and-firmware-updates.md +++ b/devices/surface/manage-surface-driver-and-firmware-updates.md @@ -35,7 +35,7 @@ Microsoft Endpoint Configuration Manager allows you to synchronize and deploy Su For detailed steps, see the following resources: -- [How to manage Surface driver updates in Configuration Manager](https://docs.microsoft.com/surface/manage-surface-driver-updates-configuration-manager.md) +- [How to manage Surface driver updates in Configuration Manager](https://support.microsoft.com/help/4098906/manage-surface-driver-updates-in-configuration-manager) - [Deploy applications with Configuration Manager](https://docs.microsoft.com/configmgr/apps/deploy-use/deploy-applications) - [Endpoint Configuration Manager documentation](https://docs.microsoft.com/configmgr/) From ca5561088e4a3531383d071f4478e030c1dae6e1 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Fri, 12 Jun 2020 21:21:59 +0530 Subject: [PATCH 039/145] Update devices/surface/manage-surface-driver-and-firmware-updates.md accepted Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- devices/surface/manage-surface-driver-and-firmware-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/manage-surface-driver-and-firmware-updates.md b/devices/surface/manage-surface-driver-and-firmware-updates.md index 0d168ed57d..2bbe968461 100644 --- a/devices/surface/manage-surface-driver-and-firmware-updates.md +++ b/devices/surface/manage-surface-driver-and-firmware-updates.md @@ -35,7 +35,7 @@ Microsoft Endpoint Configuration Manager allows you to synchronize and deploy Su For detailed steps, see the following resources: -- [How to manage Surface driver updates in Configuration Manager](https://support.microsoft.com/help/4098906/manage-surface-driver-updates-in-configuration-manager) +- [How to manage Surface driver updates in Configuration Manager](https://docs.microsoft.com/surface/manage-surface-driver-updates-configuration-manager) - [Deploy applications with Configuration Manager](https://docs.microsoft.com/configmgr/apps/deploy-use/deploy-applications) - [Endpoint Configuration Manager documentation](https://docs.microsoft.com/configmgr/) From 874def4175fc9a090c615b65325bafb7fc21764f Mon Sep 17 00:00:00 2001 From: Ryan Ries Date: Fri, 12 Jun 2020 11:21:26 -0500 Subject: [PATCH 040/145] minPwdLength > 14 is not supported at this time minPwdLength > 14 is not supported at this time --- .../security-policy-settings/minimum-password-length.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/security-policy-settings/minimum-password-length.md b/windows/security/threat-protection/security-policy-settings/minimum-password-length.md index b57e36e03e..a47acd4f82 100644 --- a/windows/security/threat-protection/security-policy-settings/minimum-password-length.md +++ b/windows/security/threat-protection/security-policy-settings/minimum-password-length.md @@ -26,16 +26,16 @@ Describes the best practices, location, values, policy management, and security ## Reference -The **Minimum password length** policy setting determines the least number of characters that can make up a password for a user account. You can set a value of between 1 and 20 characters, or you can establish that no password is required by setting the number of characters to 0. +The **Minimum password length** policy setting determines the least number of characters that can make up a password for a user account. You can set a value of between 1 and 14 characters, or you can establish that no password is required by setting the number of characters to 0. ### Possible values -- User-specified number of characters between 0 and 20 +- User-specified number of characters between 0 and 14 - Not defined ### Best practices -Set Minimum password length to at least a value of 8. If the number of characters is set to 0, no password is required. In most environments, an eight-character password is recommended because it is long enough to provide adequate security and still short enough for users to easily remember. This value will help provide adequate defense against a brute force attack. Adding complexity requirements will help reduce the possibility of a dictionary attack. For more info, see [Password must meet complexity requirements](password-must-meet-complexity-requirements.md). +Set Minimum password length to at least a value of 8. If the number of characters is set to 0, no password is required. In most environments, an eight-character password is recommended because it is long enough to provide adequate security and still short enough for users to easily remember. Minimum Password Length of greater than 14 is not supported at this time. This value will help provide adequate defense against a brute force attack. Adding complexity requirements will help reduce the possibility of a dictionary attack. For more info, see [Password must meet complexity requirements](password-must-meet-complexity-requirements.md). Permitting short passwords reduces security because short passwords can be easily broken with tools that perform dictionary or brute force attacks against the passwords. Requiring very long passwords can result in mistyped passwords that might cause an account lockout and subsequently increase the volume of Help Desk calls. From 435ae94ffd0fabb0fe688517a8eafc5d1e139807 Mon Sep 17 00:00:00 2001 From: Charles Inglis <32555877+cinglis-msft@users.noreply.github.com> Date: Fri, 12 Jun 2020 12:32:45 -0500 Subject: [PATCH 041/145] Updated Defender alternatives --- windows/deployment/update/update-compliance-monitor.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/update-compliance-monitor.md b/windows/deployment/update/update-compliance-monitor.md index 311272e93b..bf80658e30 100644 --- a/windows/deployment/update/update-compliance-monitor.md +++ b/windows/deployment/update/update-compliance-monitor.md @@ -19,7 +19,7 @@ ms.topic: article > [!IMPORTANT] > While [Windows Analytics was retired on January 31, 2020](https://docs.microsoft.com/windows/deployment/update/update-compliance-monitor), support for Update Compliance has continued through the Azure Portal. Two planned feature removals for Update Compliance – Microsoft Defender Antivirus reporting and Perspectives – are now scheduled to be removed beginning Monday, May 11, 2020. -> * The retirement of Microsoft Defender Antivirus reporting will begin Monday, May 11, 2020. You can continue to review malware definition status and manage and monitor malware attacks with Microsoft Endpoint Manager's [Endpoint Protection for Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/help-secure-windows-pcs-with-endpoint-protection-for-microsoft-intune). Configuration Manager customers can monitor Endpoint Protection with [Endpoint Protection in Configuration Manager](https://docs.microsoft.com/configmgr/protect/deploy-use/monitor-endpoint-protection). +> * The retirement of Microsoft Defender Antivirus reporting will begin Monday, May 11, 2020. You can continue to for threats with [Microsoft Endpoint Manager](https://www.microsoft.com/microsoft-365/microsoft-endpoint-manager) and [Defender Advanced Threat Protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection). > * The Perspectives feature of Update Compliance will be retired Monday, May 11, 2020. The Perspectives feature is part of the Log Search portal of Log Analytics, which was deprecated on February 15, 2019 in favor of [Azure Monitor Logs](https://docs.microsoft.com/azure/azure-monitor/log-query/log-search-transition). Your Update Compliance solution will be automatically upgraded to Azure Monitor Logs, and the data available in Perspectives will be migrated to a set of queries in the [Needs Attention section](update-compliance-need-attention.md) of Update Compliance. ## Introduction From e5a42df8f32c7c1155dad95884249d1f966043c8 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Fri, 12 Jun 2020 12:43:54 -0700 Subject: [PATCH 042/145] New article Hub Teams app --- devices/surface-hub/TOC.md | 1 + devices/surface-hub/hub-teams-app.md | 28 ++++++++++++++++++++++++++++ 2 files changed, 29 insertions(+) create mode 100644 devices/surface-hub/hub-teams-app.md diff --git a/devices/surface-hub/TOC.md b/devices/surface-hub/TOC.md index 67516c9773..867063cc0c 100644 --- a/devices/surface-hub/TOC.md +++ b/devices/surface-hub/TOC.md @@ -32,6 +32,7 @@ ### [Create provisioning packages for Surface Hub 2S](surface-hub-2s-deploy.md) ### [Deploy apps to Surface Hub 2S using Intune](surface-hub-2s-deploy-apps-intune.md) ### [Create Surface Hub 2S on-premises accounts with PowerShell](surface-hub-2s-onprem-powershell.md) +### [Surface Hub Teams app](hub-teams-app.md) ## Manage ### [Manage Surface Hub 2S with Microsoft Intune](surface-hub-2s-manage-intune.md) diff --git a/devices/surface-hub/hub-teams-app.md b/devices/surface-hub/hub-teams-app.md new file mode 100644 index 0000000000..4083dc8515 --- /dev/null +++ b/devices/surface-hub/hub-teams-app.md @@ -0,0 +1,28 @@ +--- +title: "Microsoft Teams app for Surface Hub" +description: "This page shows a summary of updates to the Microsoft Teams app for Surface Hub" +keywords: separate values with commas +ms.prod: surface-hub +ms.sitesec: library +author: greg-lindsay +ms.author: greglin +manager: laurawi +audience: Admin +ms.topic: article +ms.date: 06/12/2020 +ms.localizationpriority: Medium + +# Microsoft Teams app for Surface Hub + +The Microsoft Teams app for Surface Hub is periodically updated and available via the [Microsoft Store](https://www.microsoft.com/store/apps/windows). If you manage Surface Hub with Automatic Updates enabled (default setting), the app will update automatically. + + +## Version history + +| **Store app version** | **Updates** | **Published to Microsoft Store** | +| --------------------- | --------------------------------------------------------------------------------------------------- | -------------------------------- | +| 0.2020.13201.0 | - 3x3 Gallery view on Surface Hub
- Ability to search for External users | June 10, 2020
| +| 0.2020.13201 | - Quality improvements and Bug fixes | June 1, 2020
| +| 0.2020.4301.0 | - Accept incoming PSTN calls on Surface Hub
- Added controls for Attendee/Presenter role changes | May 21, 2020 | + + From 65e0c5ec71b385837537e557f306f28f5e0a982a Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Fri, 12 Jun 2020 13:49:45 -0700 Subject: [PATCH 043/145] Cut images showing old brand name Per Deniseb, but images showing the old Windows Defender Antivirus and/or Windows Defender Offline name. See task 4116148. --- ...network-connections-microsoft-defender-antivirus.md | 8 ++------ ...eal-time-protection-microsoft-defender-antivirus.md | 5 +---- ...d-periodic-scanning-microsoft-defender-antivirus.md | 10 ++-------- ...rosoft-defender-antivirus-on-windows-server-2016.md | 4 +--- .../microsoft-defender-offline.md | 4 +--- ...nges-to-security-settings-with-tamper-protection.md | 4 ---- 6 files changed, 7 insertions(+), 28 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md index 2992128fc2..1b7bc129b9 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md @@ -87,9 +87,7 @@ Download the file by visiting the following link: >[!NOTE] >This file is not an actual piece of malware. It is a fake file that is designed to test if you are properly connected to the cloud. -If you are properly connected, you will see a warning Microsoft Defender Antivirus notification: - -![Microsoft Defender Antivirus notification informing the user that malware was found](images/defender/wdav-malware-detected.png) +If you are properly connected, you will see a warning Microsoft Defender Antivirus notification. If you are using Microsoft Edge, you'll also see a notification message: @@ -107,9 +105,7 @@ You will also see a detection under **Quarantined threats** in the **Scan histor ![Screenshot of the Scan history label in the Windows Security app](images/defender/wdav-history-wdsc.png) -3. Under the **Quarantined threats** section, click the **See full history** label to see the detected fake malware: - - ![Screenshot of quarantined items in the Windows Security app](images/defender/wdav-quarantined-history-wdsc.png) +3. Under the **Quarantined threats** section, click the **See full history** label to see the detected fake malware. >[!NOTE] >Versions of Windows 10 before version 1703 have a different user interface. See [Microsoft Defender Antivirus in the Windows Security app](microsoft-defender-security-center-antivirus.md). diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus.md index a456334e1f..fbcf3e9352 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus.md @@ -38,7 +38,6 @@ To enable and configure always-on protection: 2. Under **Best match**, click **Edit group policy** to launch **Local Group Policy Editor**. ![GPEdit taskbar search result](images/gpedit-search.png) 2. In the left pane of **Local Group Policy Editor**, expand the tree to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus**. -![Microsoft Defender Antivirus](images/gpedit-windows-defender-antivirus.png) 3. Configure the Microsoft Defender Antivirus antimalware service policy settings. To do this: 1. In the **Microsoft Defender Antivirus** details pane on right, double-click the policy setting as specified in the following table: @@ -46,14 +45,12 @@ To enable and configure always-on protection: |-----------------------------|------------------------|-------------------------------| | Allow antimalware service to startup with normal priority | You can lower the priority of the Microsoft Defender Antivirus engine, which may be useful in lightweight deployments where you want to have as lean a startup process as possible. This may impact protection on the endpoint. | Enabled | Allow antimalware service to remain running always | If protection updates have been disabled, you can set Microsoft Defender Antivirus to still run. This lowers the protection on the endpoint. | Disabled | - 2. Configure the setting as appropriate, and click **OK**. 3. Repeat the previous steps for each setting in the table. 4. Configure the Microsoft Defender Antivirus real-time protection policy settings. To do this: 1. In the **Microsoft Defender Antivirus** details pane, double-click **Real-time Protection**. Or, from the **Microsoft Defender Antivirus** tree on left pane, click **Real-time Protection**. - ![Microsoft Defender Antivirus Real-time Protection options](images/gpedit-real-time-protection.png) - 2. In the **Real-time Protection** details pane on right, double-click the policy setting as specified in the following table: + 2. In the **Real-time Protection** details pane on right, double-click the policy setting as specified in the following table: | Setting | Description | Default setting | |-----------------------------|------------------------|-------------------------------| diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus.md index fdc1e748f8..545f77a114 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus.md @@ -39,18 +39,12 @@ If Microsoft Defender Antivirus is enabled, the usual options will appear to con ![Windows Security app showing Microsoft Defender AV options, including scan options, settings, and update options](images/vtp-wdav.png) -If another antivirus product is installed and working correctly, Microsoft Defender Antivirus will disable itself. The Windows Security app will change the **Virus & threat protection** section to show status about the AV product, and provide a link to the product's configuration options: +If another antivirus product is installed and working correctly, Microsoft Defender Antivirus will disable itself. The Windows Security app will change the **Virus & threat protection** section to show status about the AV product, and provide a link to the product's configuration options. -![Windows Security app showing ContosoAV as the installed and running antivirus provider. There is a single link to open ContosoAV settings.](images/vtp-3ps.png) - -Underneath any third party AV products, a new link will appear as **Microsoft Defender Antivirus options**. Clicking this link will expand to show the toggle that enables limited periodic scanning. - -![The limited periodic option is a toggle to enable or disable **periodic scanning**](images/vtp-3ps-lps.png) +Underneath any third party AV products, a new link will appear as **Microsoft Defender Antivirus options**. Clicking this link will expand to show the toggle that enables limited periodic scanning. Note that the limited periodic option is a toggle to enable or disable periodic scanning. Sliding the switch to **On** will show the standard Microsoft Defender AV options underneath the third party AV product. The limited periodic scanning option will appear at the bottom of the page. -![When enabled, periodic scanning shows the normal Microsoft Defender Antivirus options](images/vtp-3ps-lps-on.png) - ## Related articles - [Configure behavioral, heuristic, and real-time protection](configure-protection-features-microsoft-defender-antivirus.md) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index 5018ae9f9d..5a5fefca87 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -61,9 +61,7 @@ In Windows Server 2016, the **Add Roles and Features Wizard** looks like this: ![Add roles and feature wizard showing the GUI for Windows Defender option](images/server-add-gui.png) -In Windows Server 2019, the **Add Roles and Feature Wizard** looks like this: - -![Add roles and features wizard Windows Server 2019](images/WDAV-WinSvr2019-turnfeatureson.jpg) +In Windows Server 2019, the **Add Roles and Feature Wizard** looks much the same. ### Turn on the GUI using PowerShell diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-offline.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-offline.md index 103ede404e..cb5f4ad90e 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-offline.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-offline.md @@ -62,9 +62,7 @@ The prompt can occur via a notification, similar to the following: ![Windows notification showing the requirement to run Microsoft Defender Offline](images/defender/notification.png) -The user will also be notified within the Windows Defender client: - -![Windows Defender showing the requirement to run Microsoft Defender Offline](images/defender/client.png) +The user will also be notified within the Windows Defender client. In Configuration Manager, you can identify the status of endpoints by navigating to **Monitoring > Overview > Security > Endpoint Protection Status > System Center Endpoint Protection Status**. diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md b/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md index 971482d70d..4a2fe0777f 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md @@ -112,10 +112,6 @@ You must have appropriate [permissions](../microsoft-defender-atp/assign-portal- 5. Assign the profile to one or more groups. - Here's what you see in the Windows Security app: - - ![Turning tamper protection on in Windows 10 Enterprise](images/turnontamperprotect-enterprise.png) - ### Are you using Windows OS 1709, 1803, or 1809? If you are using Windows 10 OS [1709](https://docs.microsoft.com/windows/release-information/status-windows-10-1709), [1803](https://docs.microsoft.com/windows/release-information/status-windows-10-1803), or [1809](https://docs.microsoft.com/windows/release-information/status-windows-10-1809-and-windows-server-2019), you won't see **Tamper Protection** in the Windows Security app. In this case, you can use PowerShell to determine whether tamper protection is enabled. From 4a4f9781df96d5318010680908d2619c590403ff Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Fri, 12 Jun 2020 14:12:40 -0700 Subject: [PATCH 044/145] Update hub-teams-app.md --- devices/surface-hub/hub-teams-app.md | 25 ++++++++++--------------- 1 file changed, 10 insertions(+), 15 deletions(-) diff --git a/devices/surface-hub/hub-teams-app.md b/devices/surface-hub/hub-teams-app.md index 4083dc8515..ecc0410e36 100644 --- a/devices/surface-hub/hub-teams-app.md +++ b/devices/surface-hub/hub-teams-app.md @@ -1,28 +1,23 @@ --- -title: "Microsoft Teams app for Surface Hub" -description: "This page shows a summary of updates to the Microsoft Teams app for Surface Hub" -keywords: separate values with commas +title: Microsoft Teams app for Surface Hub +description: Provides a version history of updates for the Microsoft Teams app for Surface Hub +keywords: surface, hub, ms.prod: surface-hub ms.sitesec: library -author: greg-lindsay +author: greglin ms.author: greglin -manager: laurawi -audience: Admin ms.topic: article -ms.date: 06/12/2020 -ms.localizationpriority: Medium +ms.localizationpriority: medium +--- -# Microsoft Teams app for Surface Hub +# Microsoft Teams app for Surface Hub The Microsoft Teams app for Surface Hub is periodically updated and available via the [Microsoft Store](https://www.microsoft.com/store/apps/windows). If you manage Surface Hub with Automatic Updates enabled (default setting), the app will update automatically. ## Version history - | **Store app version** | **Updates** | **Published to Microsoft Store** | | --------------------- | --------------------------------------------------------------------------------------------------- | -------------------------------- | -| 0.2020.13201.0 | - 3x3 Gallery view on Surface Hub
- Ability to search for External users | June 10, 2020
| -| 0.2020.13201 | - Quality improvements and Bug fixes | June 1, 2020
| -| 0.2020.4301.0 | - Accept incoming PSTN calls on Surface Hub
- Added controls for Attendee/Presenter role changes | May 21, 2020 | - - +| 0.2020.13201.0 | - 3x3 Gallery view on Surface Hub
- Ability to search for External users | June 10, 2020
**** | +| 0.2020.13201 | - Quality improvements and Bug fixes | June 1, 2020
**** | +| 0.2020.4301.0 | - Accept incoming PSTN calls on Surface Hub
- Added controls for Attendee/Presenter role changes | May 21, 2020 | \ No newline at end of file From 886ca1562c888b98d481198b9eb351e9b2797b95 Mon Sep 17 00:00:00 2001 From: DanPandre <54847950+DanPandre@users.noreply.github.com> Date: Fri, 12 Jun 2020 17:38:47 -0400 Subject: [PATCH 045/145] Fix Local settings descriptions to match user experience --- .../local-management-surface-hub-settings.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/devices/surface-hub/local-management-surface-hub-settings.md b/devices/surface-hub/local-management-surface-hub-settings.md index 810691dfe8..4ffa2a3cbe 100644 --- a/devices/surface-hub/local-management-surface-hub-settings.md +++ b/devices/surface-hub/local-management-surface-hub-settings.md @@ -40,12 +40,12 @@ Surface Hubs have many settings that are common to other Windows devices, but al | Wireless projection (Miracast) channel | Surface Hub > Projection | Set the channel for Miracast projection. | | Meeting info shown on the welcome screen | Surface Hub > Welcome screen | Choose whether meeting organizer, time, and subject show up on the welcome screen. | | Welcome screen background | Surface Hub > Welcome screen | Choose a background image for the welcome screen. | -| Idle timeout to Welcome screen | Surface Hub > Session & Power | Choose how long until the Surface Hub returns to the welcome screen after no motion is detected. | -| Resume session | Surface Hub > Session & Power | Choose to allow users to resume a session after no motion is detected or to automatically clean up a session. | -| Access to Office 365 meetings and files | Surface Hub > Session & Power | Choose whether a user can sign in to Office 365 to get access to their meetings and files. | -| Turn on screen with motion sensors | Surface Hub > Session & clean up | Choose whether the screen turns on when motion is detected. | -| Session time out | Surface Hub > Session & clean up | Choose how long the device needs to be inactive before returning to the welcome screen. | -| Sleep time out | Surface Hub > Session & clean up | Choose how long the device needs to be inactive before going to sleep mode. | +| Session timeout to Welcome screen | Surface Hub > Session & power | Choose how long until the Surface Hub returns to the welcome screen after no motion is detected. | +| Resume session | Surface Hub > Session & power | Choose to allow users to resume a session after no motion is detected or to automatically clean up a session. | +| Access to Office 365 meetings and files | Surface Hub > Session & power | Choose whether a user can sign in to Office 365 to get access to their meetings and files. | +| Turn on screen with motion sensors | Surface Hub > Session & power | Choose whether the screen turns on when motion is detected. | +| Screen time out | Surface Hub > Session & power | Choose how long the device needs to be inactive before turning off the screen. | +| Sleep time out | Surface Hub > Session & power | Choose how long the device needs to be inactive before going to sleep mode. | | Friendly name | Surface Hub > About | Set the Surface Hub name that people will see when connecting wirelessly. | | Maintenance hours | Update & security > Windows Update > Advanced options | Configure when updates can be installed. | | Configure Windows Server Update Services (WSUS) server | Update & security > Windows Update > Advanced options | Change whether Surface Hub receives updates from a WSUS server instead of Windows Update. | From 2b296e5d6b2df591a681fcd3d5fe4c8f8c4d715c Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 12 Jun 2020 15:16:55 -0700 Subject: [PATCH 046/145] Removed unnecessary bold from table headings --- devices/surface-hub/hub-teams-app.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/devices/surface-hub/hub-teams-app.md b/devices/surface-hub/hub-teams-app.md index ecc0410e36..a2e25a8458 100644 --- a/devices/surface-hub/hub-teams-app.md +++ b/devices/surface-hub/hub-teams-app.md @@ -16,8 +16,8 @@ The Microsoft Teams app for Surface Hub is periodically updated and available vi ## Version history -| **Store app version** | **Updates** | **Published to Microsoft Store** | +| Store app version | Updates | Published to Microsoft Store | | --------------------- | --------------------------------------------------------------------------------------------------- | -------------------------------- | | 0.2020.13201.0 | - 3x3 Gallery view on Surface Hub
- Ability to search for External users | June 10, 2020
**** | | 0.2020.13201 | - Quality improvements and Bug fixes | June 1, 2020
**** | -| 0.2020.4301.0 | - Accept incoming PSTN calls on Surface Hub
- Added controls for Attendee/Presenter role changes | May 21, 2020 | \ No newline at end of file +| 0.2020.4301.0 | - Accept incoming PSTN calls on Surface Hub
- Added controls for Attendee/Presenter role changes | May 21, 2020 | From 85eee2b34ba7e8150065f4429949e16743dd95eb Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Fri, 12 Jun 2020 15:17:25 -0700 Subject: [PATCH 047/145] Updated meta descriptions for SEO --- .../appv-create-a-package-accelerator.md | 2 +- .../app-v/appv-for-windows.md | 2 +- .../app-v/appv-getting-started.md | 2 +- ...-publishing-server-on-a-remote-computer.md | 2 +- .../mdm/certificate-renewal-windows-mdm.md | 2 +- .../mdm/clientcertificateinstall-csp.md | 2 +- windows/client-management/mdm/defender-csp.md | 2 +- windows/client-management/mdm/defender-ddf.md | 2 +- .../mdm/enterpriseappvmanagement-csp.md | 2 +- .../mdm/enterpriseassignedaccess-xsd.md | 2 +- .../mdm/policy-csp-attachmentmanager.md | 2 +- .../mdm/policy-csp-education.md | 2 +- .../mdm/policy-csp-mssecurityguide.md | 2 +- .../mdm/policy-csp-system.md | 2 +- windows/configuration/kiosk-validate.md | 2 +- .../configuration/ue-v/uev-troubleshooting.md | 2 +- ...application-virtualization-applications.md | 2 +- windows/deployment/deploy.md | 2 +- .../update/windows-update-resources.md | 2 +- .../usmt/usmt-determine-what-to-migrate.md | 135 +++++++++--------- .../volume-activation/vamt-known-issues.md | 2 +- .../windows-autopilot-requirements.md | 2 +- ...ndows-7-and-windows-server-2008-r2-sp1.yml | 2 +- .../resolved-issues-windows-server-2012.yml | 2 +- ...windows-8.1-and-windows-server-2012-r2.yml | 2 +- .../status-windows-server-2008-sp2.yml | 2 +- windows/whats-new/get-started-with-1709.md | 2 +- 27 files changed, 94 insertions(+), 93 deletions(-) diff --git a/windows/application-management/app-v/appv-create-a-package-accelerator.md b/windows/application-management/app-v/appv-create-a-package-accelerator.md index 7f2ec6c3c5..db4fe23b68 100644 --- a/windows/application-management/app-v/appv-create-a-package-accelerator.md +++ b/windows/application-management/app-v/appv-create-a-package-accelerator.md @@ -1,6 +1,6 @@ --- title: How to create a package accelerator (Windows 10) -description: How to create a package accelerator. +description: Learn how to create App-V Package Accelerators to automatically generate new virtual application packages. author: lomayor ms.pagetype: mdop, appcompat, virtualization ms.mktglfcycl: deploy diff --git a/windows/application-management/app-v/appv-for-windows.md b/windows/application-management/app-v/appv-for-windows.md index 459032925c..bec88a55bf 100644 --- a/windows/application-management/app-v/appv-for-windows.md +++ b/windows/application-management/app-v/appv-for-windows.md @@ -1,6 +1,6 @@ --- title: Application Virtualization (App-V) (Windows 10) -description: Application Virtualization (App-V) +description: See various topics that can help you administer Application Virtualization (App-V) and its components. author: lomayor ms.pagetype: mdop, appcompat, virtualization ms.mktglfcycl: deploy diff --git a/windows/application-management/app-v/appv-getting-started.md b/windows/application-management/app-v/appv-getting-started.md index 1b1f6592d5..2e1556cb8a 100644 --- a/windows/application-management/app-v/appv-getting-started.md +++ b/windows/application-management/app-v/appv-getting-started.md @@ -1,6 +1,6 @@ --- title: Getting Started with App-V (Windows 10) -description: Getting Started with App-V for Windows 10 +description: Get started with Microsoft Application Virtualization (App-V) for Windows 10. author: lomayor ms.pagetype: mdop, appcompat, virtualization ms.mktglfcycl: deploy diff --git a/windows/application-management/app-v/appv-install-the-publishing-server-on-a-remote-computer.md b/windows/application-management/app-v/appv-install-the-publishing-server-on-a-remote-computer.md index 7209027bb8..8fce503469 100644 --- a/windows/application-management/app-v/appv-install-the-publishing-server-on-a-remote-computer.md +++ b/windows/application-management/app-v/appv-install-the-publishing-server-on-a-remote-computer.md @@ -1,6 +1,6 @@ --- title: Install the Publishing Server on a Remote Computer (Windows 10) -description: How to Install the App-V Publishing Server on a Remote Computer +description: Use the procedures in this article to install the Microsoft Application Virtualization (App-V) publishing server on a separate computer. author: lomayor ms.pagetype: mdop, appcompat, virtualization ms.mktglfcycl: deploy diff --git a/windows/client-management/mdm/certificate-renewal-windows-mdm.md b/windows/client-management/mdm/certificate-renewal-windows-mdm.md index 26580c5095..415aa6a9b9 100644 --- a/windows/client-management/mdm/certificate-renewal-windows-mdm.md +++ b/windows/client-management/mdm/certificate-renewal-windows-mdm.md @@ -1,6 +1,6 @@ --- title: Certificate Renewal -description: The enrolled client certificate expires after a period of use. +description: Find all the resources needed to provide continuous access to client certificates. MS-HAID: - 'p\_phdevicemgmt.certificate\_renewal' - 'p\_phDeviceMgmt.certificate\_renewal\_windows\_mdm' diff --git a/windows/client-management/mdm/clientcertificateinstall-csp.md b/windows/client-management/mdm/clientcertificateinstall-csp.md index 8837ad757e..0f2ec33a8f 100644 --- a/windows/client-management/mdm/clientcertificateinstall-csp.md +++ b/windows/client-management/mdm/clientcertificateinstall-csp.md @@ -1,6 +1,6 @@ --- title: ClientCertificateInstall CSP -description: ClientCertificateInstall CSP +description: The ClientCertificateInstall configuration service provider (CSP) enables the enterprise to install client certificates. ms.assetid: B624EB73-2972-47F2-9D7E-826D641BF8A7 ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md index 8c398e4992..0842fb0031 100644 --- a/windows/client-management/mdm/defender-csp.md +++ b/windows/client-management/mdm/defender-csp.md @@ -1,6 +1,6 @@ --- title: Defender CSP -description: Defender CSP +description: See how the Windows Defender configuration service provider is used to configure various Windows Defender actions across the enterprise. ms.assetid: 481AA74F-08B2-4A32-B95D-5A3FD05B335C ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/defender-ddf.md b/windows/client-management/mdm/defender-ddf.md index 6ca8fc6f49..60c2372aed 100644 --- a/windows/client-management/mdm/defender-ddf.md +++ b/windows/client-management/mdm/defender-ddf.md @@ -1,6 +1,6 @@ --- title: Defender DDF file -description: Defender DDF file +description: See how the the OMA DM device description framework (DDF) for the **Defender** configuration service provider is used. ms.assetid: 39B9E6CF-4857-4199-B3C3-EC740A439F65 ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/enterpriseappvmanagement-csp.md b/windows/client-management/mdm/enterpriseappvmanagement-csp.md index ab13935f66..22445122ec 100644 --- a/windows/client-management/mdm/enterpriseappvmanagement-csp.md +++ b/windows/client-management/mdm/enterpriseappvmanagement-csp.md @@ -1,6 +1,6 @@ --- title: EnterpriseAppVManagement CSP -description: EnterpriseAppVManagement CSP +description: Examine the tree format for EnterpriseAppVManagement configuration service provider (CSP) to manage virtual applications in Windows 10 PCs.(Enterprise and Education editions). ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/client-management/mdm/enterpriseassignedaccess-xsd.md b/windows/client-management/mdm/enterpriseassignedaccess-xsd.md index f73c18d744..3ee96832c7 100644 --- a/windows/client-management/mdm/enterpriseassignedaccess-xsd.md +++ b/windows/client-management/mdm/enterpriseassignedaccess-xsd.md @@ -1,6 +1,6 @@ --- title: EnterpriseAssignedAccess XSD -description: EnterpriseAssignedAccess XSD +description: This XSD can be used to validate that the lockdown XML in the \ block of the AssignedAccessXML node. ms.assetid: BB3B633E-E361-4B95-9D4A-CE6E08D67ADA ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/policy-csp-attachmentmanager.md b/windows/client-management/mdm/policy-csp-attachmentmanager.md index b09a07d3b2..bc3456d80d 100644 --- a/windows/client-management/mdm/policy-csp-attachmentmanager.md +++ b/windows/client-management/mdm/policy-csp-attachmentmanager.md @@ -1,6 +1,6 @@ --- title: Policy CSP - AttachmentManager -description: Policy CSP - AttachmentManager +description: Manage Windows marks file attachments with information about their zone of origin (such as restricted, Internet, intranet, local). ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/client-management/mdm/policy-csp-education.md b/windows/client-management/mdm/policy-csp-education.md index e316fbdb3f..df04232bea 100644 --- a/windows/client-management/mdm/policy-csp-education.md +++ b/windows/client-management/mdm/policy-csp-education.md @@ -1,6 +1,6 @@ --- title: Policy CSP - Education -description: Policy CSP - Education +description: Control graphing functionality in the Windows Calculator app. ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/client-management/mdm/policy-csp-mssecurityguide.md b/windows/client-management/mdm/policy-csp-mssecurityguide.md index 598cad17d2..f896724225 100644 --- a/windows/client-management/mdm/policy-csp-mssecurityguide.md +++ b/windows/client-management/mdm/policy-csp-mssecurityguide.md @@ -1,6 +1,6 @@ --- title: Policy CSP - MSSecurityGuide -description: Policy CSP - MSSecurityGuide +description: See how this ADMX-backed policy requires a special SyncML format to enable or disable. ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/client-management/mdm/policy-csp-system.md b/windows/client-management/mdm/policy-csp-system.md index 7cb986c7fd..a221c321b1 100644 --- a/windows/client-management/mdm/policy-csp-system.md +++ b/windows/client-management/mdm/policy-csp-system.md @@ -1,6 +1,6 @@ --- title: Policy CSP - System -description: Policy CSP - System +description: Learn policy settings that determines whether users can access the Insider build controls in the advanced options for Windows Update. ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/configuration/kiosk-validate.md b/windows/configuration/kiosk-validate.md index ea34adf834..34b8124fa2 100644 --- a/windows/configuration/kiosk-validate.md +++ b/windows/configuration/kiosk-validate.md @@ -1,6 +1,6 @@ --- title: Validate kiosk configuration (Windows 10) -description: This topic explains what to expect on a multi-app kiosk. +description: Learn what to expect on a multi-app kiosk in Windows 10 Pro, Enterprise, and Education. ms.assetid: 428680AE-A05F-43ED-BD59-088024D1BFCC ms.reviewer: manager: dansimp diff --git a/windows/configuration/ue-v/uev-troubleshooting.md b/windows/configuration/ue-v/uev-troubleshooting.md index 1ffb99a964..9683bd771d 100644 --- a/windows/configuration/ue-v/uev-troubleshooting.md +++ b/windows/configuration/ue-v/uev-troubleshooting.md @@ -1,6 +1,6 @@ --- title: Troubleshooting UE-V -description: Troubleshooting UE-V +description: Find resources for troubleshooting UE-V for Windows 10. author: dansimp ms.pagetype: mdop, virtualization ms.mktglfcycl: deploy diff --git a/windows/configuration/ue-v/uev-using-uev-with-application-virtualization-applications.md b/windows/configuration/ue-v/uev-using-uev-with-application-virtualization-applications.md index d2e019723d..8b68977b69 100644 --- a/windows/configuration/ue-v/uev-using-uev-with-application-virtualization-applications.md +++ b/windows/configuration/ue-v/uev-using-uev-with-application-virtualization-applications.md @@ -1,6 +1,6 @@ --- title: Using UE-V with Application Virtualization applications -description: Using UE-V with Application Virtualization applications +description: Learn how to use User Experience Virtualization (UE-V) with Microsoft Application Virtualization (App-V). author: dansimp ms.pagetype: mdop, virtualization ms.mktglfcycl: deploy diff --git a/windows/deployment/deploy.md b/windows/deployment/deploy.md index 4680e56b08..d86cb2f2a8 100644 --- a/windows/deployment/deploy.md +++ b/windows/deployment/deploy.md @@ -1,6 +1,6 @@ --- title: Deploy Windows 10 (Windows 10) -description: Deploying Windows 10 for IT professionals. +description: Learn Windows 10 upgrade options for planning, testing, and managing your production deployment. ms.assetid: E9E2DED5-DBA7-4300-B411-BA0FD39BE18C ms.reviewer: manager: laurawi diff --git a/windows/deployment/update/windows-update-resources.md b/windows/deployment/update/windows-update-resources.md index 16e2488d65..d7c9b71e67 100644 --- a/windows/deployment/update/windows-update-resources.md +++ b/windows/deployment/update/windows-update-resources.md @@ -1,6 +1,6 @@ --- title: Windows Update - Additional resources -description: Additional resources for Windows Update +description: Use these resource to troubleshoot and reset Windows Update. ms.prod: w10 ms.mktglfcycl: diff --git a/windows/deployment/usmt/usmt-determine-what-to-migrate.md b/windows/deployment/usmt/usmt-determine-what-to-migrate.md index cb04fac7e3..3b16df17e6 100644 --- a/windows/deployment/usmt/usmt-determine-what-to-migrate.md +++ b/windows/deployment/usmt/usmt-determine-what-to-migrate.md @@ -1,67 +1,68 @@ ---- -title: Determine What to Migrate (Windows 10) -description: Determine What to Migrate -ms.assetid: 01ae1d13-c3eb-4618-b39d-ee5d18d55761 -ms.reviewer: -manager: laurawi -ms.author: greglin -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -audience: itpro author: greg-lindsay -ms.date: 04/19/2017 -ms.topic: article ---- - -# Determine What to Migrate - - -By default, User State Migration Tool (USMT) 10.0 migrates the items listed in [What Does USMT Migrate?](usmt-what-does-usmt-migrate.md), depending on the migration .xml files you specify. These default settings are often enough for a basic migration. - -However, when considering what settings to migrate, you should also consider what settings you would like the user to be able to configure, if any, and what settings you would like to standardize. Many organizations use their migration as an opportunity to create and begin enforcing a better-managed environment. Some of the settings that users can configure on unmanaged computers prior to the migration can be locked on the new, managed computers. For example, standard wallpaper, Internet Explorer security settings, and desktop configuration are some of the items you can choose to standardize. - -To reduce complexity and increase standardization, your organization should consider creating a *standard operating environment (SOE)*. An SOE is a combination of hardware and software that you distribute to all users. This means selecting a baseline for all computers, including standard hardware drivers; core operating system features; core productivity applications, especially if they are under volume licensing; and core utilities. This environment should also include a standard set of security features, as outlined in the organization’s corporate policy. Using a standard operating environment can vastly simplify the migration and reduce overall deployment challenges. - -## In This Section - - -
---- - - - - - - - - - - - - - - - - - - -

Identify Users

Use command-line options to specify which users to migrate and how they should be migrated.

Identify Applications Settings

Determine which applications you want to migrate and prepare a list of application settings to be migrated.

Identify Operating System Settings

Use migration to create a new standard environment on each of the destination computers.

Identify File Types, Files, and Folders

Determine and locate the standard, company-specified, and non-standard locations of the file types, files, folders, and settings that you want to migrate.

- - - -## Related topics - - -[What Does USMT Migrate?](usmt-what-does-usmt-migrate.md) - - - - - - - - - +--- +title: Determine What to Migrate (Windows 10) +description: Determine migration settings for standard or customized for the User State Migration Tool (USMT) 10.0. +ms.assetid: 01ae1d13-c3eb-4618-b39d-ee5d18d55761 +ms.reviewer: +manager: laurawi +ms.author: greglin +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +audience: itpro +author: greg-lindsay +ms.date: 04/19/2017 +ms.topic: article +--- + +# Determine What to Migrate + + +By default, User State Migration Tool (USMT) 10.0 migrates the items listed in [What Does USMT Migrate?](usmt-what-does-usmt-migrate.md), depending on the migration .xml files you specify. These default settings are often enough for a basic migration. + +However, when considering what settings to migrate, you should also consider what settings you would like the user to be able to configure, if any, and what settings you would like to standardize. Many organizations use their migration as an opportunity to create and begin enforcing a better-managed environment. Some of the settings that users can configure on unmanaged computers prior to the migration can be locked on the new, managed computers. For example, standard wallpaper, Internet Explorer security settings, and desktop configuration are some of the items you can choose to standardize. + +To reduce complexity and increase standardization, your organization should consider creating a *standard operating environment (SOE)*. An SOE is a combination of hardware and software that you distribute to all users. This means selecting a baseline for all computers, including standard hardware drivers; core operating system features; core productivity applications, especially if they are under volume licensing; and core utilities. This environment should also include a standard set of security features, as outlined in the organization’s corporate policy. Using a standard operating environment can vastly simplify the migration and reduce overall deployment challenges. + +## In This Section + + + ++++ + + + + + + + + + + + + + + + + + + +

Identify Users

Use command-line options to specify which users to migrate and how they should be migrated.

Identify Applications Settings

Determine which applications you want to migrate and prepare a list of application settings to be migrated.

Identify Operating System Settings

Use migration to create a new standard environment on each of the destination computers.

Identify File Types, Files, and Folders

Determine and locate the standard, company-specified, and non-standard locations of the file types, files, folders, and settings that you want to migrate.

+ + + +## Related topics + + +[What Does USMT Migrate?](usmt-what-does-usmt-migrate.md) + + + + + + + + + diff --git a/windows/deployment/volume-activation/vamt-known-issues.md b/windows/deployment/volume-activation/vamt-known-issues.md index 2259c02d2f..b4173bb737 100644 --- a/windows/deployment/volume-activation/vamt-known-issues.md +++ b/windows/deployment/volume-activation/vamt-known-issues.md @@ -1,6 +1,6 @@ --- title: VAMT known issues (Windows 10) -description: Volume Activation Management Tool (VAMT) known issues +description: Find out the current known issues with the Volume Activation Management Tool (VAMT), versions 3.0. and 3.1. ms.assetid: 8992f1f3-830a-4ce7-a248-f3a6377ab77f ms.reviewer: manager: laurawi diff --git a/windows/deployment/windows-autopilot/windows-autopilot-requirements.md b/windows/deployment/windows-autopilot/windows-autopilot-requirements.md index 25fee702e2..eca7e2bf95 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-requirements.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-requirements.md @@ -2,7 +2,7 @@ title: Windows Autopilot requirements ms.reviewer: manager: laurawi -description: Inform yourself about software, networking, licensing, and configuration requirements for Windows Autopilot deployment. +description: See the requirements you need to run Windows Autopilot in Windows 10, Azure Active Directory, and MDM services such as Microsoft Intune. keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/release-information/resolved-issues-windows-7-and-windows-server-2008-r2-sp1.yml b/windows/release-information/resolved-issues-windows-7-and-windows-server-2008-r2-sp1.yml index d559457fca..0e9d00f112 100644 --- a/windows/release-information/resolved-issues-windows-7-and-windows-server-2008-r2-sp1.yml +++ b/windows/release-information/resolved-issues-windows-7-and-windows-server-2008-r2-sp1.yml @@ -1,7 +1,7 @@ ### YamlMime:YamlDocument documentType: LandingData -title: Resolved issues in Windows 7 and Windows Server 2008 R2 SP1 +title: See a list of known issues that have been resolved for Windows 7 and Windows Server 2008 R2 SP1 over the last six months. metadata: document_id: title: Resolved issues in Windows 7 and Windows Server 2008 R2 SP1 diff --git a/windows/release-information/resolved-issues-windows-server-2012.yml b/windows/release-information/resolved-issues-windows-server-2012.yml index 87c57cef75..d9f4e51351 100644 --- a/windows/release-information/resolved-issues-windows-server-2012.yml +++ b/windows/release-information/resolved-issues-windows-server-2012.yml @@ -1,7 +1,7 @@ ### YamlMime:YamlDocument documentType: LandingData -title: Resolved issues in Windows Server 2012 +title: See a list of known issues that have been resolved for Windows Server 2012 over the last six months. metadata: document_id: title: Resolved issues in Windows Server 2012 diff --git a/windows/release-information/status-windows-8.1-and-windows-server-2012-r2.yml b/windows/release-information/status-windows-8.1-and-windows-server-2012-r2.yml index 1d522d681a..01f8a8436e 100644 --- a/windows/release-information/status-windows-8.1-and-windows-server-2012-r2.yml +++ b/windows/release-information/status-windows-8.1-and-windows-server-2012-r2.yml @@ -5,7 +5,7 @@ title: Windows 8.1 and Windows Server 2012 R2 metadata: document_id: title: Windows 8.1 and Windows Server 2012 R2 - description: View announcements and review known issues and fixes for Windows 8.1 and Windows Server 2012 R2 + description: View announcements and review known issues and fixes for Windows 8.1 and Windows Server 2012 R2. keywords: Windows 10, issues, fixes, announcements, Windows Server, advisories ms.localizationpriority: high author: greg-lindsay diff --git a/windows/release-information/status-windows-server-2008-sp2.yml b/windows/release-information/status-windows-server-2008-sp2.yml index cf035b38eb..386d5d16ad 100644 --- a/windows/release-information/status-windows-server-2008-sp2.yml +++ b/windows/release-information/status-windows-server-2008-sp2.yml @@ -5,7 +5,7 @@ title: Windows Server 2008 SP2 metadata: document_id: title: Windows Server 2008 SP2 - description: View announcements and review known issues and fixes for Windows Server 2008 SP2 + description: View announcements and review known issues and fixes for Windows Server 2008 SP2. keywords: Windows, Windows 10, issues, fixes, announcements, Windows Server, advisories ms.localizationpriority: high author: greg-lindsay diff --git a/windows/whats-new/get-started-with-1709.md b/windows/whats-new/get-started-with-1709.md index b7879030be..2b22a606de 100644 --- a/windows/whats-new/get-started-with-1709.md +++ b/windows/whats-new/get-started-with-1709.md @@ -1,6 +1,6 @@ --- title: Get started with Windows 10, version 1709 -description: All the information to get you started with Windows 10, version 1709. +description: Learn the dos and don'ts for getting started with Windows 10, version 1709. keywords: ["get started", "windows 10", "fall creators update", "1709"] ms.prod: w10 ms.mktglfcycl: deploy From ef4ecf6cf21dbbdb04769cbc57e4c81e26883cfe Mon Sep 17 00:00:00 2001 From: "Jeff Reeds (Aquent LLC)" Date: Fri, 12 Jun 2020 15:27:58 -0700 Subject: [PATCH 048/145] Minor chages made to update docs --- mdop/appv-v5/app-v-51-supported-configurations.md | 2 ++ .../app-v/appv-supported-configurations.md | 4 ++-- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/mdop/appv-v5/app-v-51-supported-configurations.md b/mdop/appv-v5/app-v-51-supported-configurations.md index 1883e4284b..5d7e251bfa 100644 --- a/mdop/appv-v5/app-v-51-supported-configurations.md +++ b/mdop/appv-v5/app-v-51-supported-configurations.md @@ -16,6 +16,8 @@ ms.date: 04/02/2020 # App-V 5.1 Supported Configurations +>Applies to: Windows 10, version 1607; Window Server 2019; Windows Server 2016; Windows Server 2012 R2; Windows Server 2012; Windows Server 2008 R2 (Extended Security Update) + This topic specifies the requirements to install and run Microsoft Application Virtualization (App-V) 5.1 in your environment. ## App-V Server system requirements diff --git a/windows/application-management/app-v/appv-supported-configurations.md b/windows/application-management/app-v/appv-supported-configurations.md index dcf1e72905..a1b4f90845 100644 --- a/windows/application-management/app-v/appv-supported-configurations.md +++ b/windows/application-management/app-v/appv-supported-configurations.md @@ -14,7 +14,7 @@ ms.topic: article --- # App-V Supported Configurations ->Applies to: Windows 10, version 1607; Windows Server 2016; Windows Server 2012 R2; Windows Server 2012; Windows Server 2008 R2 +>Applies to: Windows 10, version 1607; Window Server 2019; Windows Server 2016; Windows Server 2012 R2; Windows Server 2012; Windows Server 2008 R2 (Extended Security Update) This topic specifies the requirements to install and run App-V in your Windows 10 environment. For information about prerequisite software such as the .NET Framework, see [App-V prerequisites](appv-prerequisites.md). @@ -34,7 +34,7 @@ The App-V server does not support the following scenarios: ### Management server operating system requirements -You can install the App-V Management server on a server running Windows Server 2008 R2 with SP1 or later. +You can install the App-V Management server on a server running Windows Server 2008 R2 with SP1 (Extended Security Update) or later. >[!IMPORTANT] >Deploying a Management server role to a computer with Remote Desktop Services enabled is not supported. From 1bb7409be8356431b6ec0d910636705c5299a947 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 12 Jun 2020 16:40:41 -0700 Subject: [PATCH 049/145] Corrected code block type and indentation --- ...re-network-connections-microsoft-defender-antivirus.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md index 1b7bc129b9..db0d9fed09 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md @@ -68,7 +68,7 @@ After whitelisting the URLs listed above, you can test if you are connected to t Use the following argument with the Microsoft Defender Antivirus command-line utility (`mpcmdrun.exe`) to verify that your network can communicate with the Microsoft Defender Antivirus cloud service: -```DOS +```console "%ProgramFiles%\Windows Defender\MpCmdRun.exe" -ValidateMapsConnection ``` @@ -107,10 +107,10 @@ You will also see a detection under **Quarantined threats** in the **Scan histor 3. Under the **Quarantined threats** section, click the **See full history** label to see the detected fake malware. ->[!NOTE] ->Versions of Windows 10 before version 1703 have a different user interface. See [Microsoft Defender Antivirus in the Windows Security app](microsoft-defender-security-center-antivirus.md). + > [!NOTE] + > Versions of Windows 10 before version 1703 have a different user interface. See [Microsoft Defender Antivirus in the Windows Security app](microsoft-defender-security-center-antivirus.md). -The Windows event log will also show [Windows Defender client event ID 2050](troubleshoot-microsoft-defender-antivirus.md). + The Windows event log will also show [Windows Defender client event ID 2050](troubleshoot-microsoft-defender-antivirus.md). >[!IMPORTANT] >You will not be able to use a proxy auto-config (.pac) file to test network connections to these URLs. You will need to verify your proxy servers and any network filtering tools manually to ensure connectivity. From c1686f459e91285d36be5f91dfe0661f064ba9dd Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 12 Jun 2020 16:49:34 -0700 Subject: [PATCH 050/145] Attempting to fix layout and numbering --- ...protection-microsoft-defender-antivirus.md | 96 ++++++++++++------- 1 file changed, 59 insertions(+), 37 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus.md index fbcf3e9352..727463b3d6 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus.md @@ -34,75 +34,97 @@ You can use **Local Group Policy Editor** to enable and configure Microsoft Defe To enable and configure always-on protection: 1. Open **Local Group Policy Editor**. To do this: + 1. In your Windows 10 taskbar search box, type **gpedit**. - 2. Under **Best match**, click **Edit group policy** to launch **Local Group Policy Editor**. -![GPEdit taskbar search result](images/gpedit-search.png) + + 1. Under **Best match**, click **Edit group policy** to launch **Local Group Policy Editor**. + + ![GPEdit taskbar search result](images/gpedit-search.png) + 2. In the left pane of **Local Group Policy Editor**, expand the tree to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus**. + 3. Configure the Microsoft Defender Antivirus antimalware service policy settings. To do this: + 1. In the **Microsoft Defender Antivirus** details pane on right, double-click the policy setting as specified in the following table: - | Setting | Description | Default setting | - |-----------------------------|------------------------|-------------------------------| - | Allow antimalware service to startup with normal priority | You can lower the priority of the Microsoft Defender Antivirus engine, which may be useful in lightweight deployments where you want to have as lean a startup process as possible. This may impact protection on the endpoint. | Enabled - | Allow antimalware service to remain running always | If protection updates have been disabled, you can set Microsoft Defender Antivirus to still run. This lowers the protection on the endpoint. | Disabled | - 2. Configure the setting as appropriate, and click **OK**. - 3. Repeat the previous steps for each setting in the table. + | Setting | Description | Default setting | + |-----------------------------|------------------------|-------------------------------| + | Allow antimalware service to startup with normal priority | You can lower the priority of the Microsoft Defender Antivirus engine, which may be useful in lightweight deployments where you want to have as lean a startup process as possible. This may impact protection on the endpoint. | Enabled + | Allow antimalware service to remain running always | If protection updates have been disabled, you can set Microsoft Defender Antivirus to still run. This lowers the protection on the endpoint. | Disabled | + + 1. Configure the setting as appropriate, and click **OK**. + + 1. Repeat the previous steps for each setting in the table. + +4. Configure the Microsoft Defender Antivirus real-time protection policy settings. To do this: -4. Configure the Microsoft Defender Antivirus real-time protection policy settings. To do this: 1. In the **Microsoft Defender Antivirus** details pane, double-click **Real-time Protection**. Or, from the **Microsoft Defender Antivirus** tree on left pane, click **Real-time Protection**. - 2. In the **Real-time Protection** details pane on right, double-click the policy setting as specified in the following table: + + 1. In the **Real-time Protection** details pane on right, double-click the policy setting as specified in the following table: - | Setting | Description | Default setting | - |-----------------------------|------------------------|-------------------------------| - | Turn on behavior monitoring | The AV engine will monitor file processes, file and registry changes, and other events on your endpoints for suspicious and known malicious activity. | Enabled | - | Scan all downloaded files and attachments | Downloaded files and attachments are automatically scanned. This operates in addition to the Windows Defender SmartScreen filter, which scans files before and during downloading. | Enabled | - | Monitor file and program activity on your computer | The Microsoft Defender Antivirus engine makes note of any file changes (file writes, such as moves, copies, or modifications) and general program activity (programs that are opened or running and that cause other programs to run). | Enabled | - | Turn on raw volume write notifications | Information about raw volume writes will be analyzed by behavior monitoring. | Enabled | - | Turn on process scanning whenever real-time protection is enabled | You can independently enable the Microsoft Defender Antivirus engine to scan running processes for suspicious modifications or behaviors. This is useful if you have temporarily disabled real-time protection and want to automatically scan processes that started while it was disabled. | Enabled | - | Define the maximum size of downloaded files and attachments to be scanned | You can define the size in kilobytes. | Enabled | - | Configure local setting override for turn on behavior monitoring | Configure a local override for the configuration of behavior monitoring. This setting can only be set by Group Policy. If you enable this setting, the local preference setting will take priority over Group Policy. If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.| Enabled | - | Configure local setting override for scanning all downloaded files and attachments | Configure a local override for the configuration of scanning for all downloaded files and attachments. This setting can only be set by Group Policy. If you enable this setting, the local preference setting will take priority over Group Policy. If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.| Enabled | - | Configure local setting override for monitoring file and program activity on your computer | Configure a local override for the configuration of monitoring for file and program activity on your computer. This setting can only be set by Group Policy. If you enable this setting, the local preference setting will take priority over Group Policy. If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.| Enabled | - | Configure local setting override to turn on real-time protection | Configure a local override for the configuration to turn on real-time protection. This setting can only be set by Group Policy. If you enable this setting, the local preference setting will take priority over Group Policy. If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.| Enabled | - | Configure local setting override for monitoring for incoming and outgoing file activity | Configure a local override for the configuration of monitoring for incoming and outgoing file activity. This setting can only be set by Group Policy. If you enable this setting, the local preference setting will take priority over Group Policy. If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. | Enabled | - | Configure monitoring for incoming and outgoing file and program activity | Specify whether monitoring should occur on incoming, outgoing, both, or neither direction. This is relevant for Windows Server installations where you have defined specific servers or Server Roles that see large amounts of file changes in only one direction and you want to improve network performance. Fully updated endpoints (and servers) on a network will see little performance impact irrespective of the number or direction of file changes. | Enabled (both directions) | + | Setting | Description | Default setting | + |-----------------------------|------------------------|-------------------------------| + | Turn on behavior monitoring | The AV engine will monitor file processes, file and registry changes, and other events on your endpoints for suspicious and known malicious activity. | Enabled | + | Scan all downloaded files and attachments | Downloaded files and attachments are automatically scanned. This operates in addition to the Windows Defender SmartScreen filter, which scans files before and during downloading. | Enabled | + | Monitor file and program activity on your computer | The Microsoft Defender Antivirus engine makes note of any file changes (file writes, such as moves, copies, or modifications) and general program activity (programs that are opened or running and that cause other programs to run). | Enabled | + | Turn on raw volume write notifications | Information about raw volume writes will be analyzed by behavior monitoring. | Enabled | + | Turn on process scanning whenever real-time protection is enabled | You can independently enable the Microsoft Defender Antivirus engine to scan running processes for suspicious modifications or behaviors. This is useful if you have temporarily disabled real-time protection and want to automatically scan processes that started while it was disabled. | Enabled | + | Define the maximum size of downloaded files and attachments to be scanned | You can define the size in kilobytes. | Enabled | + | Configure local setting override for turn on behavior monitoring | Configure a local override for the configuration of behavior monitoring. This setting can only be set by Group Policy. If you enable this setting, the local preference setting will take priority over Group Policy. If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.| Enabled | + | Configure local setting override for scanning all downloaded files and attachments | Configure a local override for the configuration of scanning for all downloaded files and attachments. This setting can only be set by Group Policy. If you enable this setting, the local preference setting will take priority over Group Policy. If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.| Enabled | + | Configure local setting override for monitoring file and program activity on your computer | Configure a local override for the configuration of monitoring for file and program activity on your computer. This setting can only be set by Group Policy. If you enable this setting, the local preference setting will take priority over Group Policy. If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.| Enabled | + | Configure local setting override to turn on real-time protection | Configure a local override for the configuration to turn on real-time protection. This setting can only be set by Group Policy. If you enable this setting, the local preference setting will take priority over Group Policy. If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.| Enabled | + | Configure local setting override for monitoring for incoming and outgoing file activity | Configure a local override for the configuration of monitoring for incoming and outgoing file activity. This setting can only be set by Group Policy. If you enable this setting, the local preference setting will take priority over Group Policy. If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. | Enabled | + | Configure monitoring for incoming and outgoing file and program activity | Specify whether monitoring should occur on incoming, outgoing, both, or neither direction. This is relevant for Windows Server installations where you have defined specific servers or Server Roles that see large amounts of file changes in only one direction and you want to improve network performance. Fully updated endpoints (and servers) on a network will see little performance impact irrespective of the number or direction of file changes. | Enabled (both directions) | - 3. Configure the setting as appropriate, and click **OK**. - 4. Repeat the previous steps for each setting in the table. + 1. Configure the setting as appropriate, and click **OK**. + + 1. Repeat the previous steps for each setting in the table. 5. Configure the Microsoft Defender Antivirus scanning policy setting. To do this: + 1. From the **Microsoft Defender Antivirus** tree on left pane, click **Scan**. - ![Microsoft Defender Antivirus Scan options](images/gpedit-windows-defender-antivirus-scan.png) + + ![Microsoft Defender Antivirus Scan options](images/gpedit-windows-defender-antivirus-scan.png) - 2. In the **Scan** details pane on right, double-click the policy setting as specified in the following table: + 1. In the **Scan** details pane on right, double-click the policy setting as specified in the following table: - | Setting | Description | Default setting | - |-----------------------------|------------------------|-------------------------------| - | Turn on heuristics | Heuristic protection will disable or block suspicious activity immediately before the Microsoft Defender Antivirus engine is asked to detect the activity. | Enabled | + | Setting | Description | Default setting | + |-----------------------------|------------------------|-------------------------------| + | Turn on heuristics | Heuristic protection will disable or block suspicious activity immediately before the Microsoft Defender Antivirus engine is asked to detect the activity. | Enabled | - 3. Configure the setting as appropriate, and click **OK**. + 1. Configure the setting as appropriate, and click **OK**. + 6. Close **Local Group Policy Editor**. ## Disable real-time protection in Group Policy + > [!WARNING] > Disabling real-time protection drastically reduces the protection on your endpoints and is not recommended. The main real-time protection capability is enabled by default, but you can disable it by using **Local Group Policy Editor**. -To disable real-time protection in Group policy: +To disable real-time protection in Group policy: + 1. Open **Local Group Policy Editor**. - 1. In your Windows 10 taskbar search box, type **gpedit**. - 2. Under **Best match**, click **Edit group policy** to launch **Local Group Policy Editor**. + + 1. In your Windows 10 taskbar search box, type **gpedit**. + + 1. Under **Best match**, click **Edit group policy** to launch **Local Group Policy Editor**. 2. In the left pane of **Local Group Policy Editor**, expand the tree to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus** > **Real-time Protection**. 3. In the **Real-time Protection** details pane on right, double-click **Turn off real-time protection**. -![Turn off real-time protection](images/gpedit-turn-off-real-time-protection.png) + + ![Turn off real-time protection](images/gpedit-turn-off-real-time-protection.png) 4. In the **Turn off real-time protection** setting window, set the option to **Enabled**. -![Turn off real-time protection enabled](images/gpedit-turn-off-real-time-protection-enabled.png) + + ![Turn off real-time protection enabled](images/gpedit-turn-off-real-time-protection-enabled.png) + 5. Click **OK**. + 6. Close **Local Group Policy Editor**. ## Related articles From 5e741c12f1adf735d3a1231ad33ca2e2db5183e8 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 12 Jun 2020 16:54:27 -0700 Subject: [PATCH 051/145] Corrected type on code block to a valid type We need to use one of the types on this list: https://docsmetadatatool.azurewebsites.net/allowlists# --- .../microsoft-defender-offline.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-offline.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-offline.md index cb5f4ad90e..0a396c5667 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-offline.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-offline.md @@ -106,7 +106,7 @@ Use the [**MSFT_MpWDOScan**](https://msdn.microsoft.com/library/dn455323(v=vs.85 The following WMI script snippet will immediately run a Microsoft Defender Offline scan, which will cause the endpoint to restart, run the offline scan, and then restart and boot into Windows. -```WMI +```console wmic /namespace:\\root\Microsoft\Windows\Defender path MSFT_MpWDOScan call Start ``` @@ -119,11 +119,9 @@ See the following for more information: 1. Open the Windows Security app by clicking the shield icon in the task bar or searching the start menu for **Defender**. 2. Click the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then the **Advanced scan** label: - 3. Select **Microsoft Defender Offline scan** and click **Scan now**. - > [!NOTE] > In Windows 10, version 1607, the offline scan could be run from under **Windows Settings** > **Update & security** > **Windows Defender** or from the Windows Defender client. From 943d2bf8965a8a1a2ffd8c69f86b20ad97f66f41 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 12 Jun 2020 16:56:10 -0700 Subject: [PATCH 052/145] Indented content in a list item --- ...ent-changes-to-security-settings-with-tamper-protection.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md b/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md index 4a2fe0777f..3d058b3d8f 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md @@ -73,9 +73,9 @@ If you are a home user, or you are not subject to settings managed by a security 3. Set **Tamper Protection** to **On** or **Off**. -Here's what you see in the Windows Security app: + Here's what you see in the Windows Security app: -![Tamper protection turned on in Windows 10 Home](images/tamperprotectionturnedon.png) + ![Tamper protection turned on in Windows 10 Home](images/tamperprotectionturnedon.png) ## Turn tamper protection on (or off) for your organization using Intune From fc555d881cfa8eed71dcceacb1387a8a9e7a7d0b Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 12 Jun 2020 17:30:59 -0700 Subject: [PATCH 053/145] Applied a valid type to a code block Code blocks should have a type in this list: https://docsmetadatatool.azurewebsites.net/allowlists# --- .../microsoft-defender-antivirus-on-windows-server-2016.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index 5a5fefca87..2108fffbab 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -108,7 +108,7 @@ Get-Service -Name mpssvc As an alternative to PowerShell, you can use Command Prompt to verify that Microsoft Defender Antivirus is running. To do that, run the following command from a command prompt: -```DOS +```console sc query Windefend ``` From a4534aa49956f9a5d72b8e948a4a36a0f6124358 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 12 Jun 2020 18:38:37 -0700 Subject: [PATCH 054/145] Corrected the type on the code block --- .../appv-install-the-publishing-server-on-a-remote-computer.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/application-management/app-v/appv-install-the-publishing-server-on-a-remote-computer.md b/windows/application-management/app-v/appv-install-the-publishing-server-on-a-remote-computer.md index 8fce503469..f08f5dfe4d 100644 --- a/windows/application-management/app-v/appv-install-the-publishing-server-on-a-remote-computer.md +++ b/windows/application-management/app-v/appv-install-the-publishing-server-on-a-remote-computer.md @@ -38,7 +38,7 @@ Use the following procedure to install the publishing server on a separate compu 3. Enter the server name and a description (if required), then select **Add**. 9. To verify that the publishing server is running correctly, you should import a package to the management server, entitle that package to an AD group, then publish it. Using an internet browser, open the following URL: https://publishingserver:pubport. If the server is running correctly, information like the following example should appear. - ```SQL + ```xml From d98285e53da90a9fbf4b17d8bfcf75707b85c5ec Mon Sep 17 00:00:00 2001 From: illfated Date: Sun, 14 Jun 2020 01:59:42 +0200 Subject: [PATCH 055/145] MDATP/Onboarding issues: Localization adaptations Description: As discussed in issue ticket #6741 (ID de evento incorrecto o reemplazado por palabras) and #4775 (Error Event ID is invalid), automatic Machine Translation translates some table digits to words or replaces digits with others. Thanks to AmadorM for commenting about this in ticket #4775. Changes proposed: - Encapsulate table digits with MarkDown back ticks - Use MarkDown table center alignment for the value column - Update 2 MSDN URLs permanently redirected to docs.microsoft.com - Replace some freetext HTML codes with MarkDown code - Whitespace, codestyle, and grammar corrections: - Remove redundant end-of-line blanks - Add MarkDown indent marker compatibility spacing - Reduce single line triple back tick pairs to single pairs - Reduce some indents to 4 spaces (back from 5 spaces) - Normalize numbered list number/text spacing to 1 space - Standardize H2/H3/H4 headings to be followed by 1 blank line - Normalize headings to be preceded by 2 blank spaces - Move the word "key" out of one of the the HKEY code blocks - Add missing colon after "The status is then displayed" - Standardize line spacing in the 28-step illustrated procedure - Move 1 colon inside the MarkDown **bold** formatting - Replace tabs (redundant) inside table cells with 1 space - Correct the casing in Syncml -> SyncML - Remove *is* from "Currently is supported platforms:" Ticket closure or reference: Closes #6741 Ref. #4775 --- .../troubleshoot-onboarding.md | 181 +++++++++++------- 1 file changed, 109 insertions(+), 72 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding.md b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding.md index c8c682d83f..04a9d022a7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding.md +++ b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding.md @@ -20,11 +20,11 @@ ms.topic: troubleshooting # Troubleshoot Microsoft Defender Advanced Threat Protection onboarding issues **Applies to:** + - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) - Windows Server 2012 R2 - Windows Server 2016 - You might need to troubleshoot the Microsoft Defender ATP onboarding process if you encounter issues. This page provides detailed steps to troubleshoot onboarding issues that might occur when deploying with one of the deployment tools and common errors that might occur on the machines. @@ -33,29 +33,34 @@ This page provides detailed steps to troubleshoot onboarding issues that might o If you have completed the onboarding process and don't see machines in the [Machines list](investigate-machines.md) after an hour, it might indicate an onboarding or connectivity problem. + ### Troubleshoot onboarding when deploying with Group Policy -Deployment with Group Policy is done by running the onboarding script on the machines. The Group Policy console does not indicate if the deployment has succeeded or not. + +Deployment with Group Policy is done by running the onboarding script on the machines. The Group Policy console does not indicate if the deployment has succeeded or not. If you have completed the onboarding process and don't see machines in the [Machines list](investigate-machines.md) after an hour, you can check the output of the script on the machines. For more information, see [Troubleshoot onboarding when deploying with a script](#troubleshoot-onboarding-when-deploying-with-a-script). If the script completes successfully, see [Troubleshoot onboarding issues on the machines](#troubleshoot-onboarding-issues-on-the-machine) for additional errors that might occur. + ### Troubleshoot onboarding issues when deploying with Microsoft Endpoint Configuration Manager + When onboarding machines using the following versions of Configuration Manager: -- Microsoft Endpoint Configuration Manager + +- Microsoft Endpoint Configuration Manager - System Center 2012 Configuration Manager - System Center 2012 R2 Configuration Manager - Deployment with the above-mentioned versions of Configuration Manager is done by running the onboarding script on the machines. You can track the deployment in the Configuration Manager Console. If the deployment fails, you can check the output of the script on the machines. If the onboarding completed successfully but the machines are not showing up in the **Machines list** after an hour, see [Troubleshoot onboarding issues on the machine](#troubleshoot-onboarding-issues-on-the-machine) for additional errors that might occur. + ### Troubleshoot onboarding when deploying with a script -**Check the result of the script on the machine**: +**Check the result of the script on the machine:** 1. Click **Start**, type **Event Viewer**, and press **Enter**. 2. Go to **Windows Logs** > **Application**. @@ -67,17 +72,19 @@ If the script fails and the event is an error, you can check the event ID in the > The following event IDs are specific to the onboarding script only. Event ID | Error Type | Resolution steps -:---|:---|:--- -5 | Offboarding data was found but couldn't be deleted | Check the permissions on the registry, specifically ```HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection```. -10 | Onboarding data couldn't be written to registry | Check the permissions on the registry, specifically
```HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection```.
Verify that the script has been run as an administrator. -15 | Failed to start SENSE service |Check the service health (```sc query sense``` command). Make sure it's not in an intermediate state (*'Pending_Stopped'*, *'Pending_Running'*) and try to run the script again (with administrator rights).

If the machine is running Windows 10, version 1607 and running the command `sc query sense` returns `START_PENDING`, reboot the machine. If rebooting the machine doesn't address the issue, upgrade to KB4015217 and try onboarding again. -15 | Failed to start SENSE service | If the message of the error is: System error 577 or error 1058 has occurred. You need to enable the Microsoft Defender Antivirus ELAM driver, see [Ensure that Microsoft Defender Antivirus is not disabled by a policy](#ensure-that-microsoft-defender-antivirus-is-not-disabled-by-a-policy) for instructions. -30 | The script failed to wait for the service to start running | The service could have taken more time to start or has encountered errors while trying to start. For more information on events and errors related to SENSE, see [Review events and errors using Event viewer](event-error-codes.md). -35 | The script failed to find needed onboarding status registry value | When the SENSE service starts for the first time, it writes onboarding status to the registry location
```HKLM\SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status```.
The script failed to find it after several seconds. You can manually test it and check if it's there. For more information on events and errors related to SENSE, see [Review events and errors using Event viewer](event-error-codes.md). -40 | SENSE service onboarding status is not set to **1** | The SENSE service has failed to onboard properly. For more information on events and errors related to SENSE, see [Review events and errors using Event viewer](event-error-codes.md). -65 | Insufficient privileges| Run the script again with administrator privileges. +:---:|:---|:--- + `5` | Offboarding data was found but couldn't be deleted | Check the permissions on the registry, specifically
`HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection`. +`10` | Onboarding data couldn't be written to registry | Check the permissions on the registry, specifically
`HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection`.
Verify that the script has been run as an administrator. +`15` | Failed to start SENSE service |Check the service health (`sc query sense` command). Make sure it's not in an intermediate state (*'Pending_Stopped'*, *'Pending_Running'*) and try to run the script again (with administrator rights).

If the machine is running Windows 10, version 1607 and running the command `sc query sense` returns `START_PENDING`, reboot the machine. If rebooting the machine doesn't address the issue, upgrade to KB4015217 and try onboarding again. +`15` | Failed to start SENSE service | If the message of the error is: System error 577 or error 1058 has occurred, you need to enable the Microsoft Defender Antivirus ELAM driver, see [Ensure that Microsoft Defender Antivirus is not disabled by a policy](#ensure-that-microsoft-defender-antivirus-is-not-disabled-by-a-policy) for instructions. +`30` | The script failed to wait for the service to start running | The service could have taken more time to start or has encountered errors while trying to start. For more information on events and errors related to SENSE, see [Review events and errors using Event viewer](event-error-codes.md). +`35` | The script failed to find needed onboarding status registry value | When the SENSE service starts for the first time, it writes onboarding status to the registry location
`HKLM\SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status`.
The script failed to find it after several seconds. You can manually test it and check if it's there. For more information on events and errors related to SENSE, see [Review events and errors using Event viewer](event-error-codes.md). +`40` | SENSE service onboarding status is not set to **1** | The SENSE service has failed to onboard properly. For more information on events and errors related to SENSE, see [Review events and errors using Event viewer](event-error-codes.md). +`65` | Insufficient privileges| Run the script again with administrator privileges. + ### Troubleshoot onboarding issues using Microsoft Intune + You can use Microsoft Intune to check error codes and attempt to troubleshoot the cause of the issue. If you have configured policies in Intune and they are not propagated on machines, you might need to configure automatic MDM enrollment. @@ -92,28 +99,27 @@ If none of the event logs and troubleshooting steps work, download the Local scr **Microsoft Intune error codes and OMA-URIs**: - Error Code Hex | Error Code Dec | Error Description | OMA-URI | Possible cause and troubleshooting steps -:---|:---|:---|:---|:--- -0x87D1FDE8 | -2016281112 | Remediation failed | Onboarding
Offboarding | **Possible cause:** Onboarding or offboarding failed on a wrong blob: wrong signature or missing PreviousOrgIds fields.

**Troubleshooting steps:**
Check the event IDs in the [View agent onboarding errors in the machine event log](#view-agent-onboarding-errors-in-the-machine-event-log) section.

Check the MDM event logs in the following table or follow the instructions in [Diagnose MDM failures in Windows 10](https://msdn.microsoft.com/library/windows/hardware/mt632120%28v=vs.85%29.aspx). - | | | | Onboarding
Offboarding
SampleSharing | **Possible cause:** Microsoft Defender ATP Policy registry key does not exist or the OMA DM client doesn't have permissions to write to it.

**Troubleshooting steps:** Ensure that the following registry key exists: ```HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection```

If it doesn't exist, open an elevated command and add the key. - | | | | SenseIsRunning
OnboardingState
OrgId | **Possible cause:** An attempt to remediate by read-only property. Onboarding has failed.

**Troubleshooting steps:** Check the troubleshooting steps in [Troubleshoot onboarding issues on the machine](#troubleshoot-onboarding-issues-on-the-machine).

Check the MDM event logs in the following table or follow the instructions in [Diagnose MDM failures in Windows 10](https://msdn.microsoft.com/library/windows/hardware/mt632120%28v=vs.85%29.aspx). - || | | All | **Possible cause:** Attempt to deploy Microsoft Defender ATP on non-supported SKU/Platform, particularly Holographic SKU.

Currently is supported platforms: Enterprise, Education, and Professional.
Server is not supported. - 0x87D101A9 | -2016345687 |Syncml(425): The requested command failed because the sender does not have adequate access control permissions (ACL) on the recipient. | All | **Possible cause:** Attempt to deploy Microsoft Defender ATP on non-supported SKU/Platform, particularly Holographic SKU.

Currently is supported platforms: Enterprise, Education, and Professional. +:---:|:---|:---|:---|:--- +0x87D1FDE8 | -2016281112 | Remediation failed | Onboarding
Offboarding | **Possible cause:** Onboarding or offboarding failed on a wrong blob: wrong signature or missing PreviousOrgIds fields.

**Troubleshooting steps:**
Check the event IDs in the [View agent onboarding errors in the machine event log](#view-agent-onboarding-errors-in-the-machine-event-log) section.

Check the MDM event logs in the following table or follow the instructions in [Diagnose MDM failures in Windows 10](https://docs.microsoft.com/windows/client-management/mdm/diagnose-mdm-failures-in-windows-10). + | | | | Onboarding
Offboarding
SampleSharing | **Possible cause:** Microsoft Defender ATP Policy registry key does not exist or the OMA DM client doesn't have permissions to write to it.

**Troubleshooting steps:** Ensure that the following registry key exists: `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection`

If it doesn't exist, open an elevated command and add the key. + | | | | SenseIsRunning
OnboardingState
OrgId | **Possible cause:** An attempt to remediate by read-only property. Onboarding has failed.

**Troubleshooting steps:** Check the troubleshooting steps in [Troubleshoot onboarding issues on the machine](#troubleshoot-onboarding-issues-on-the-machine).

Check the MDM event logs in the following table or follow the instructions in [Diagnose MDM failures in Windows 10](https://docs.microsoft.com/windows/client-management/mdm/diagnose-mdm-failures-in-windows-10). + | | | | All | **Possible cause:** Attempt to deploy Microsoft Defender ATP on non-supported SKU/Platform, particularly Holographic SKU.

Currently supported platforms:
Enterprise, Education, and Professional.
Server is not supported. + 0x87D101A9 | -2016345687 |SyncML(425): The requested command failed because the sender does not have adequate access control permissions (ACL) on the recipient. | All | **Possible cause:** Attempt to deploy Microsoft Defender ATP on non-supported SKU/Platform, particularly Holographic SKU.

Currently supported platforms:
Enterprise, Education, and Professional. -
-Known issues with non-compliance + +**Known issues with non-compliance** The following table provides information on issues with non-compliance and how you can address the issues. Case | Symptoms | Possible cause and troubleshooting steps -:---|:---|:--- -1 | Machine is compliant by SenseIsRunning OMA-URI. But is non-compliant by OrgId, Onboarding and OnboardingState OMA-URIs. | **Possible cause:** Check that user passed OOBE after Windows installation or upgrade. During OOBE onboarding couldn't be completed but SENSE is running already.

**Troubleshooting steps:** Wait for OOBE to complete. -2 | Machine is compliant by OrgId, Onboarding, and OnboardingState OMA-URIs, but is non-compliant by SenseIsRunning OMA-URI. | **Possible cause:** Sense service's startup type is set as "Delayed Start". Sometimes this causes the Microsoft Intune server to report the machine as non-compliant by SenseIsRunning when DM session occurs on system start.

**Troubleshooting steps:** The issue should automatically be fixed within 24 hours. -3 | Machine is non-compliant | **Troubleshooting steps:** Ensure that Onboarding and Offboarding policies are not deployed on the same machine at same time. +:---:|:---|:--- + `1` | Machine is compliant by SenseIsRunning OMA-URI. But is non-compliant by OrgId, Onboarding and OnboardingState OMA-URIs. | **Possible cause:** Check that user passed OOBE after Windows installation or upgrade. During OOBE onboarding couldn't be completed but SENSE is running already.

**Troubleshooting steps:** Wait for OOBE to complete. + `2` | Machine is compliant by OrgId, Onboarding, and OnboardingState OMA-URIs, but is non-compliant by SenseIsRunning OMA-URI. | **Possible cause:** Sense service's startup type is set as "Delayed Start". Sometimes this causes the Microsoft Intune server to report the machine as non-compliant by SenseIsRunning when DM session occurs on system start.

**Troubleshooting steps:** The issue should automatically be fixed within 24 hours. + `3` | Machine is non-compliant | **Troubleshooting steps:** Ensure that Onboarding and Offboarding policies are not deployed on the same machine at same time. -
-Mobile Device Management (MDM) event logs + +**Mobile Device Management (MDM) event logs** View the MDM event logs to troubleshoot issues that might arise during onboarding: @@ -125,7 +131,9 @@ ID | Severity | Event description | Troubleshooting steps :---|:---|:---|:--- 1819 | Error | Microsoft Defender Advanced Threat Protection CSP: Failed to Set Node's Value. NodeId: (%1), TokenName: (%2), Result: (%3). | Download the [Cumulative Update for Windows 10, 1607](https://go.microsoft.com/fwlink/?linkid=829760). + ## Troubleshoot onboarding issues on the machine + If the deployment tools used does not indicate an error in the onboarding process, but machines are still not appearing in the machines list in an hour, go through the following verification topics to check if an error occurred with the Microsoft Defender ATP agent: - [View agent onboarding errors in the machine event log](#view-agent-onboarding-errors-in-the-machine-event-log) - [Ensure the diagnostic data service is enabled](#ensure-the-diagnostics-service-is-enabled) @@ -154,44 +162,47 @@ If the deployment tools used does not indicate an error in the onboarding proces 6. Events which can indicate issues will appear in the **Operational** pane. You can attempt to troubleshoot them based on the solutions in the following table: Event ID | Message | Resolution steps -:---|:---|:--- -5 | Microsoft Defender Advanced Threat Protection service failed to connect to the server at _variable_ | [Ensure the machine has Internet access](#ensure-the-machine-has-an-internet-connection). -6 | Microsoft Defender Advanced Threat Protection service is not onboarded and no onboarding parameters were found. Failure code: _variable_ | [Run the onboarding script again](configure-endpoints-script.md). -7 | Microsoft Defender Advanced Threat Protection service failed to read the onboarding parameters. Failure code: _variable_ | [Ensure the machine has Internet access](#ensure-the-machine-has-an-internet-connection), then run the entire onboarding process again. -9 | Microsoft Defender Advanced Threat Protection service failed to change its start type. Failure code: variable | If the event happened during onboarding, reboot and re-attempt running the onboarding script. For more information, see [Run the onboarding script again](configure-endpoints-script.md).

If the event happened during offboarding, contact support. -10 | Microsoft Defender Advanced Threat Protection service failed to persist the onboarding information. Failure code: variable | If the event happened during onboarding, re-attempt running the onboarding script. For more information, see [Run the onboarding script again](configure-endpoints-script.md).

If the problem persists, contact support. -15 | Microsoft Defender Advanced Threat Protection cannot start command channel with URL: _variable_ | [Ensure the machine has Internet access](#ensure-the-machine-has-an-internet-connection). -17 | Microsoft Defender Advanced Threat Protection service failed to change the Connected User Experiences and Telemetry service location. Failure code: variable | [Run the onboarding script again](configure-endpoints-script.md). If the problem persists, contact support. -25 | Microsoft Defender Advanced Threat Protection service failed to reset health status in the registry. Failure code: _variable_ | Contact support. -27 | Failed to enable Microsoft Defender Advanced Threat Protection mode in Windows Defender. Onboarding process failed. Failure code: variable | Contact support. -29 | Failed to read the offboarding parameters. Error type: %1, Error code: %2, Description: %3 | Ensure the machine has Internet access, then run the entire offboarding process again. -30 | Failed to disable $(build.sense.productDisplayName) mode in Microsoft Defender Advanced Threat Protection. Failure code: %1 | Contact support. -32 | $(build.sense.productDisplayName) service failed to request to stop itself after offboarding process. Failure code: %1 | Verify that the service start type is manual and reboot the machine. -55 | Failed to create the Secure ETW autologger. Failure code: %1 | Reboot the machine. -63 | Updating the start type of external service. Name: %1, actual start type: %2, expected start type: %3, exit code: %4 | Identify what is causing changes in start type of mentioned service. If the exit code is not 0, fix the start type manually to expected start type. -64 | Starting stopped external service. Name: %1, exit code: %2 | Contact support if the event keeps re-appearing. -68 | The start type of the service is unexpected. Service name: %1, actual start type: %2, expected start type: %3 | Identify what is causing changes in start type. Fix mentioned service start type. -69 | The service is stopped. Service name: %1 | Start the mentioned service. Contact support if persists. +:---:|:---|:--- + `5` | Microsoft Defender Advanced Threat Protection service failed to connect to the server at _variable_ | [Ensure the machine has Internet access](#ensure-the-machine-has-an-internet-connection). + `6` | Microsoft Defender Advanced Threat Protection service is not onboarded and no onboarding parameters were found. Failure code: _variable_ | [Run the onboarding script again](configure-endpoints-script.md). + `7` | Microsoft Defender Advanced Threat Protection service failed to read the onboarding parameters. Failure code: _variable_ | [Ensure the machine has Internet access](#ensure-the-machine-has-an-internet-connection), then run the entire onboarding process again. + `9` | Microsoft Defender Advanced Threat Protection service failed to change its start type. Failure code: variable | If the event happened during onboarding, reboot and re-attempt running the onboarding script. For more information, see [Run the onboarding script again](configure-endpoints-script.md).

If the event happened during offboarding, contact support. +`10` | Microsoft Defender Advanced Threat Protection service failed to persist the onboarding information. Failure code: variable | If the event happened during onboarding, re-attempt running the onboarding script. For more information, see [Run the onboarding script again](configure-endpoints-script.md).

If the problem persists, contact support. +`15` | Microsoft Defender Advanced Threat Protection cannot start command channel with URL: _variable_ | [Ensure the machine has Internet access](#ensure-the-machine-has-an-internet-connection). +`17` | Microsoft Defender Advanced Threat Protection service failed to change the Connected User Experiences and Telemetry service location. Failure code: variable | [Run the onboarding script again](configure-endpoints-script.md). If the problem persists, contact support. +`25` | Microsoft Defender Advanced Threat Protection service failed to reset health status in the registry. Failure code: _variable_ | Contact support. +`27` | Failed to enable Microsoft Defender Advanced Threat Protection mode in Windows Defender. Onboarding process failed. Failure code: variable | Contact support. +`29` | Failed to read the offboarding parameters. Error type: %1, Error code: %2, Description: %3 | Ensure the machine has Internet access, then run the entire offboarding process again. +`30` | Failed to disable $(build.sense.productDisplayName) mode in Microsoft Defender Advanced Threat Protection. Failure code: %1 | Contact support. +`32` | $(build.sense.productDisplayName) service failed to request to stop itself after offboarding process. Failure code: %1 | Verify that the service start type is manual and reboot the machine. +`55` | Failed to create the Secure ETW autologger. Failure code: %1 | Reboot the machine. +`63` | Updating the start type of external service. Name: %1, actual start type: %2, expected start type: %3, exit code: %4 | Identify what is causing changes in start type of mentioned service. If the exit code is not 0, fix the start type manually to expected start type. +`64` | Starting stopped external service. Name: %1, exit code: %2 | Contact support if the event keeps re-appearing. +`68` | The start type of the service is unexpected. Service name: %1, actual start type: %2, expected start type: %3 | Identify what is causing changes in start type. Fix mentioned service start type. +`69` | The service is stopped. Service name: %1 | Start the mentioned service. Contact support if persists.
There are additional components on the machine that the Microsoft Defender ATP agent depends on to function properly. If there are no onboarding related errors in the Microsoft Defender ATP agent event log, proceed with the following steps to ensure that the additional components are configured correctly. + ### Ensure the diagnostic data service is enabled + If the machines aren't reporting correctly, you might need to check that the Windows 10 diagnostic data service is set to automatically start and is running on the machine. The service might have been disabled by other programs or user configuration changes. First, you should check that the service is set to start automatically when Windows starts, then you should check that the service is currently running (and start it if it isn't). + ### Ensure the service is set to start **Use the command line to check the Windows 10 diagnostic data service startup type**: 1. Open an elevated command-line prompt on the machine: - a. Click **Start**, type **cmd**, and press **Enter**. + a. Click **Start**, type **cmd**, and press **Enter**. - b. Right-click **Command prompt** and select **Run as administrator**. + b. Right-click **Command prompt** and select **Run as administrator**. 2. Enter the following command, and press **Enter**: @@ -210,9 +221,9 @@ First, you should check that the service is set to start automatically when Wind 1. Open an elevated command-line prompt on the machine: - a. Click **Start**, type **cmd**, and press **Enter**. + a. Click **Start**, type **cmd**, and press **Enter**. - b. Right-click **Command prompt** and select **Run as administrator**. + b. Right-click **Command prompt** and select **Run as administrator**. 2. Enter the following command, and press **Enter**: @@ -244,7 +255,9 @@ To ensure that sensor has service connectivity, follow the steps described in th If the verification fails and your environment is using a proxy to connect to the Internet, then follow the steps described in [Configure proxy and Internet connectivity settings](configure-proxy-internet.md) topic. + ### Ensure that Microsoft Defender Antivirus is not disabled by a policy + **Problem**: The Microsoft Defender ATP service does not start after onboarding. **Symptom**: Onboarding successfully completes, but you see error 577 or error 1058 when trying to start the service. @@ -258,19 +271,20 @@ If the verification fails and your environment is using a proxy to connect to th For example, in Group Policy there should be no entries such as the following values: - - `````` - - `````` + - `` + - `` - After clearing the policy, run the onboarding steps again. - You can also check the following registry key values to verify that the policy is disabled: - 1. Open the registry ```key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender```. - 2. Ensure that the value ```DisableAntiSpyware``` is not present. + 1. Open the registry key `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`. + 2. Ensure that the value `DisableAntiSpyware` is not present. - ![Image of registry key for Microsoft Defender Antivirus](images/atp-disableantispyware-regkey.png) + ![Image of registry key for Microsoft Defender Antivirus](images/atp-disableantispyware-regkey.png) ## Troubleshoot onboarding issues on a server + If you encounter issues while onboarding a server, go through the following verification steps to address possible issues. - [Ensure Microsoft Monitoring Agent (MMA) is installed and configured to report sensor data to the service](configure-server-endpoints.md#server-mma) @@ -293,8 +307,10 @@ You might also need to check the following: - Check to see that machines are reflected in the **Machines list** in the portal. -## Confirming onboarding of newly built machines -There may be instances when onboarding is deployed on a newly built machine but not completed. + +## Confirming onboarding of newly built machines + +There may be instances when onboarding is deployed on a newly built machine but not completed. The steps below provide guidance for the following scenario: - Onboarding package is deployed to newly built machines @@ -302,106 +318,127 @@ The steps below provide guidance for the following scenario: - Machine is turned off or restarted before the end user performs a first logon - In this scenario, the SENSE service will not start automatically even though onboarding package was deployed ->[!NOTE] ->The following steps are only relevant when using Microsoft Endpoint Configuration Manager +> [!NOTE] +> The following steps are only relevant when using Microsoft Endpoint Configuration Manager -1. Create an application in Microsoft Endpoint Configuration Manager. +1. Create an application in Microsoft Endpoint Configuration Manager. ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-1.png) 2. Select **Manually specify the application information**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-2.png) 3. Specify information about the application, then select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-3.png) -4. Specify information about the software center, then select **Next**. +4. Specify information about the software center, then select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-4.png) 5. In **Deployment types** select **Add**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-5.png) 6. Select **Manually specify the deployment type information**, then select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-6.png) 7. Specify information about the deployment type, then select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-7.png) 8. In **Content** > **Installation program** specify the command: `net start sense`. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-8.png) -9. In **Detection method**, select **Configure rules to detect the presence of this deployment type**, then select **Add Clause**. +9. In **Detection method**, select **Configure rules to detect the presence of this deployment type**, then select **Add Clause**. ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-9.png) 10. Specify the following detection rule details, then select **OK**: + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-10.png) 11. In **Detection method** select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-11.png) 12. In **User Experience**, specify the following information, then select **Next**: + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-12.png) 13. In **Requirements**, select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-13.png) 14. In **Dependencies**, select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-14.png) 15. In **Summary**, select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-15.png) 16. In **Completion**, select **Close**. - - ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-16.png) + + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-16.png) 17. In **Deployment types**, select **Next**. - + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-17.png) 18. In **Summary**, select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-18.png) - - The status is then displayed + + The status is then displayed: ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-19.png) 19. In **Completion**, select **Close**. - + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-20.png) 20. You can now deploy the application by right-clicking the app and selecting **Deploy**. - + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-21.png) 21. In **General** select **Automatically distribute content for dependencies** and **Browse**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-22.png) 22. In **Content** select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-23.png) 23. In **Deployment settings**, select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-24.png) 24. In **Scheduling** select **As soon as possible after the available time**, then select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-25.png) 25. In **User experience**, select **Commit changes at deadline or during a maintenance window (requires restarts)**, then select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-26.png) 26. In **Alerts** select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-27.png) -27. In **Summary**, select **Next**. +27. In **Summary**, select **Next**. + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-28.png) The status is then displayed ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-29.png) 28. In **Completion**, select **Close**. - ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-30.png) + ![Image of Microsoft Endpoint Configuration Manager configuration](images/mecm-30.png) ## Related topics From 1a9a8cec2df8170e41b36ea726b55366710d144f Mon Sep 17 00:00:00 2001 From: illfated Date: Sun, 14 Jun 2020 03:18:09 +0200 Subject: [PATCH 056/145] Windows Update: code blocks vs. translation errors Description: As reported in issue ticket #6953 (Translations errors caused by missing code block), there are several remaining lines of text directly referencing file paths and/or OS commands where the commands and their parameters get translated due to a lack of MarkDown code blocks. Thanks to sebbu2 for reporting this issue. Changes proposed: - Encapsulate (enclose) CLi commands and folder paths in MD back ticks - Remove MD bullet point indicators from the encapsulated lines - Whitespace & grammar corrections: - Normalize indentation, for the code blocks in particular - Add missing MarkDown indent marker compatibility spacing - Add blank line after H2 heading (MD codestyle standard) - Grammar improvement: "allow reset" -> 'allows you to reset' - Add readability comma to the same sentence - Remove redundant blank line in the metadata section Ticket closure or reference: Closes #6953 --- .../update/windows-update-resources.md | 31 +++++++++++-------- 1 file changed, 18 insertions(+), 13 deletions(-) diff --git a/windows/deployment/update/windows-update-resources.md b/windows/deployment/update/windows-update-resources.md index 16e2488d65..c3631a707c 100644 --- a/windows/deployment/update/windows-update-resources.md +++ b/windows/deployment/update/windows-update-resources.md @@ -3,7 +3,6 @@ title: Windows Update - Additional resources description: Additional resources for Windows Update ms.prod: w10 ms.mktglfcycl: - audience: itpro author: jaimeo ms.localizationpriority: medium @@ -17,7 +16,7 @@ ms.topic: article # Windows Update - additional resources ->Applies to: Windows 10 +> Applies to: Windows 10 The following resources provide additional information about using Windows Update. @@ -37,10 +36,11 @@ The following resources provide additional information about using Windows Updat [This script](https://gallery.technet.microsoft.com/scriptcenter/Reset-WindowsUpdateps1-e0c5eb78) will completely reset the Windows Update client settings. It has been tested on Windows 7, 8, 10, and Windows Server 2012 R2. It will configure the services and registry keys related to Windows Update for default settings. It will also clean up files related to Windows Update, in addition to BITS related data. -[This script](https://gallery.technet.microsoft.com/scriptcenter/Reset-Windows-Update-Agent-d824badc) allow reset the Windows Update Agent resolving issues with Windows Update. +[This script](https://gallery.technet.microsoft.com/scriptcenter/Reset-Windows-Update-Agent-d824badc) allows you to reset the Windows Update Agent, resolving issues with Windows Update. ## Reset Windows Update components manually + 1. Open a Windows command prompt. To open a command prompt, click **Start > Run**. Copy and paste (or type) the following command and then press ENTER: ``` cmd @@ -56,17 +56,22 @@ The following resources provide additional information about using Windows Updat ``` 4. If this is your first attempt at resolving your Windows Update issues by using the steps in this article, go to step 5 without carrying out the steps in step 4. The steps in step 4 should only be performed at this point in the troubleshooting if you cannot resolve your Windows Update issues after following all steps but step 4. The steps in step 4 are also performed by the "Aggressive" mode of the Fix it Solution above. 1. Rename the following folders to *.BAK: - - %systemroot%\SoftwareDistribution\DataStore - - %systemroot%\SoftwareDistribution\Download - - %systemroot%\system32\catroot2 - - To do this, type the following commands at a command prompt. Press ENTER after you type each command. - - Ren %systemroot%\SoftwareDistribution\DataStore *.bak - - Ren %systemroot%\SoftwareDistribution\Download *.bak - - Ren %systemroot%\system32\catroot2 *.bak + ``` + %systemroot%\SoftwareDistribution\DataStore + %systemroot%\SoftwareDistribution\Download + %systemroot%\system32\catroot2 + ``` + To do this, type the following commands at a command prompt. Press ENTER after you type each command. + ``` + Ren %systemroot%\SoftwareDistribution\DataStore *.bak + Ren %systemroot%\SoftwareDistribution\Download *.bak + Ren %systemroot%\system32\catroot2 *.bak + ``` 2. Reset the BITS service and the Windows Update service to the default security descriptor. To do this, type the following commands at a command prompt. Press ENTER after you type each command. - - sc.exe sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU) - - sc.exe sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU) + ``` + sc.exe sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU) + sc.exe sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU) + ``` 5. Type the following command at a command prompt, and then press ENTER: ``` cd /d %windir%\system32 From c93f6ac2296f21d4a71285e79255df0fbe61af81 Mon Sep 17 00:00:00 2001 From: Steve Burkett Date: Mon, 15 Jun 2020 16:24:36 +1200 Subject: [PATCH 057/145] Update mac-exclusions.md Remove extraneous escape characters in wildcard example. --- .../threat-protection/microsoft-defender-atp/mac-exclusions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-exclusions.md b/windows/security/threat-protection/microsoft-defender-atp/mac-exclusions.md index af6fa6157c..d96e6da0ab 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-exclusions.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-exclusions.md @@ -50,7 +50,7 @@ File, folder, and process exclusions support the following wildcards: Wildcard | Description | Example | Matches | Does not match ---|---|---|---|--- -\* | Matches any number of any characters including none (note that when this wildcard is used inside a path it will substitute only one folder) | `/var/\*/\*.log` | `/var/log/system.log` | `/var/log/nested/system.log` +\* | Matches any number of any characters including none (note that when this wildcard is used inside a path it will substitute only one folder) | `/var/*/*.log` | `/var/log/system.log` | `/var/log/nested/system.log` ? | Matches any single character | `file?.log` | `file1.log`
`file2.log` | `file123.log` ## How to configure the list of exclusions From 8ef88ecb990c089cd271ed630d1216786fbc81f1 Mon Sep 17 00:00:00 2001 From: EfiKliger <45028856+EfiKliger@users.noreply.github.com> Date: Mon, 15 Jun 2020 07:58:34 +0300 Subject: [PATCH 058/145] Update manage-indicators.md --- .../microsoft-defender-atp/manage-indicators.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md b/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md index c2f2dd8964..e1f2ac58da 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md @@ -95,7 +95,7 @@ It's important to understand the following prerequisites prior to creating indic 4. Specify the following details: - Indicator - Specify the entity details and define the expiration of the indicator. - Action - Specify the action to be taken and provide a description. - - Scope - Define the scope of the machine group. + - Scope - Define the scope of the machine group according to your [user permissions](machine-groups.md). 5. Review the details in the Summary tab, then click **Save**. From 729cef0ad81b4712a206d173435d20d8043a46e7 Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Mon, 15 Jun 2020 15:28:30 +0300 Subject: [PATCH 059/145] Update configure-endpoints-vdi.md Adding line to remove senseGuid to prevent re-onboarding via PS1 issue --- .../microsoft-defender-atp/configure-endpoints-vdi.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi.md b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi.md index b640c52453..bc65d8301d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi.md @@ -136,6 +136,7 @@ If offline servicing is not a viable option for your non-persistent VDI environm PsExec.exe -s cmd.exe cd "C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Cyber" del *.* /f /s /q + REG DELETE “HKLM\SOFTWARE\Microsoft\Windows Advanced Threat Protection" /v senseGuid /f exit ``` From b192690b4bf683fe18aac55f4b4e7a1f11e27360 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Mon, 15 Jun 2020 08:51:22 -0700 Subject: [PATCH 060/145] updating blacklist/whitelist to allow/block --- devices/hololens/hololens-faq-security.md | 12 +- devices/hololens/hololens-offline.md | 2 +- devices/hololens/hololens-requirements.md | 2 +- ...olicies-for-surface-hub-device-accounts.md | 4 +- ...e-and-test-a-device-account-surface-hub.md | 2 +- .../surface-hub/troubleshoot-surface-hub.md | 2 +- .../mdm/applicationcontrol-csp.md | 2 +- .../client-management/mdm/applocker-csp.md | 2 +- .../mdm/healthattestation-csp.md | 16 +- ...ew-in-windows-mdm-enrollment-management.md | 6 +- .../windows-10-mobile-and-mdm.md | 4 +- windows/configuration/wcd/wcd-cellcore.md | 2 +- .../update/windows-update-troubleshooting.md | 2 +- .../upgrade-windows-phone-8-1-to-10.md | 227 +++++++++--------- .../windows-10-enterprise-e3-overview.md | 2 +- .../windows-autopilot-requirements.md | 2 +- ...g-recommendations-for-many-audit-events.md | 2 +- .../audit-security-system-extension.md | 6 +- .../threat-protection/auditing/event-4611.md | 2 +- .../threat-protection/auditing/event-4614.md | 2 +- .../threat-protection/auditing/event-4622.md | 2 +- .../threat-protection/auditing/event-4624.md | 2 +- .../threat-protection/auditing/event-4648.md | 2 +- .../threat-protection/auditing/event-4688.md | 2 +- .../threat-protection/auditing/event-4696.md | 2 +- .../threat-protection/auditing/event-4703.md | 2 +- .../threat-protection/auditing/event-4704.md | 2 +- .../threat-protection/auditing/event-4705.md | 2 +- .../threat-protection/auditing/event-4717.md | 2 +- .../threat-protection/auditing/event-4718.md | 2 +- .../threat-protection/auditing/event-4732.md | 2 +- .../threat-protection/auditing/event-4733.md | 2 +- .../threat-protection/auditing/event-4751.md | 2 +- .../threat-protection/auditing/event-4752.md | 2 +- .../threat-protection/auditing/event-4768.md | 4 +- .../threat-protection/auditing/event-4769.md | 4 +- .../threat-protection/auditing/event-4771.md | 4 +- .../threat-protection/auditing/event-4776.md | 2 +- .../threat-protection/auditing/event-4778.md | 2 +- .../threat-protection/auditing/event-4779.md | 2 +- .../threat-protection/auditing/event-5152.md | 2 +- .../threat-protection/auditing/event-5156.md | 2 +- .../threat-protection/auditing/event-5157.md | 2 +- ...onnections-microsoft-defender-antivirus.md | 2 +- .../configure-mssp-support.md | 8 +- .../controlled-folders.md | 2 +- .../customize-controlled-folders.md | 4 +- .../mac-install-with-intune.md | 2 +- .../mac-install-with-other-mdm.md | 2 +- .../microsoft-defender-atp/mac-whatsnew.md | 2 +- .../manage-automation-folder-exclusions.md | 2 +- .../manage-indicators.md | 2 +- .../production-deployment.md | 4 +- .../troubleshoot-mdatp.md | 4 +- .../microsoft-defender-atp/troubleshoot-np.md | 2 +- .../troubleshoot-onboarding-error-messages.md | 4 +- ...iew-of-threat-mitigations-in-windows-10.md | 2 +- ...arding-to-assist-in-intrusion-detection.md | 2 +- .../LOB-win32-apps-on-s.md | 2 +- ...ows-defender-application-control-policy.md | 2 +- ...s-defender-application-control-policies.md | 2 +- ...or-windows-defender-application-control.md | 2 +- .../create-initial-default-policy.md | 4 +- ...e-wdac-policy-for-fully-managed-devices.md | 2 +- ...wdac-policy-for-lightly-managed-devices.md | 2 +- ...rt-windows-defender-application-control.md | 2 +- ...s-defender-application-control-policies.md | 2 +- ...ion-control-policies-using-group-policy.md | 2 +- ...plication-control-policies-using-intune.md | 2 +- ...s-defender-application-control-policies.md | 2 +- ...s-defender-application-control-policies.md | 2 +- .../event-id-explanations.md | 2 +- .../example-wdac-base-policies.md | 2 +- .../feature-availability.md | 2 +- ...th-windows-defender-application-control.md | 2 +- ...s-defender-application-control-policies.md | 2 +- .../microsoft-recommended-block-rules.md | 6 +- ...defender-application-control-management.md | 2 +- ...events-centrally-using-advanced-hunting.md | 2 +- .../select-types-of-rules-to-create.md | 2 +- .../types-of-devices.md | 2 +- ...ication-control-policy-design-decisions.md | 2 +- ...ontrol-for-classic-windows-applications.md | 2 +- ...-portal-in-microsoft-store-for-business.md | 2 +- ...r-application-control-against-tampering.md | 2 +- ...l-specific-plug-ins-add-ins-and-modules.md | 2 +- ...tion-control-with-dynamic-code-security.md | 2 +- ...control-with-intelligent-security-graph.md | 2 +- ...lication-control-with-managed-installer.md | 4 +- .../wdac-and-applocker-overview.md | 2 +- ...er-application-control-deployment-guide.md | 4 +- ...fender-application-control-design-guide.md | 2 +- ...r-application-control-operational-guide.md | 2 +- .../windows-defender-application-control.md | 2 +- ...sed-root-of-trust-helps-protect-windows.md | 2 +- ...sed-root-of-trust-helps-protect-windows.md | 2 +- 96 files changed, 242 insertions(+), 241 deletions(-) diff --git a/devices/hololens/hololens-faq-security.md b/devices/hololens/hololens-faq-security.md index 85f66c8318..770410499f 100644 --- a/devices/hololens/hololens-faq-security.md +++ b/devices/hololens/hololens-faq-security.md @@ -34,7 +34,7 @@ appliesto: 1. **What frequency range and channels does the device operate on and is it configurable?** 1. Wi-Fi: The frequency range is not user configurable and depends on the country of use. In the US Wi-Fi uses both 2.4 GHz (1-11) channels and 5 GHz (36-64, 100-165) channels. 1. Bluetooth: Bluetooth uses the standard 2.4-2.48 GHz range. -1. **Can the device blacklist or white list specific frequencies?** +1. **Can the device allow or block specific frequencies?** 1. This is not controllable by the user/device 1. **What is the power level for both transmit and receive? Is it adjustable? What is the range of operation?** 1. Our emissions testing standards can be found [here](https://fccid.io/C3K1688). Range of operation is highly dependent on the access point and environment - but is roughly equivalent to other high-quality phones, tablets, or PCs. @@ -63,9 +63,9 @@ appliesto: 1. Yes 1. **Is there an ability to control or disable the use of ports on the device?** 1. The HoloLens only contains 2 ports (one for headphones and one for charging or connecting to PCs). There is not ability to disable the port due to functionality and recovery reasons. -1. **Antivirus, end point detection, IPS, app control whitelist – Any ability to run antivirus, end point detection, IPS, app control whitelist, etc.** +1. **Antivirus, end point detection, IPS, app control allow list – Any ability to run antivirus, end point detection, IPS, app control allow list, etc.** 1. Windows Holographic for Business (commercial suite) does support Windows Defender Smart Screen. If an antivirus company were to create and publish their app to the Universal Windows Platform, it could be downloaded on HoloLens. At present, no companies have done this for HoloLens. - 1. Whitelisting apps is possible by using the Microsoft Enterprise Store, where you can choose only what specific apps can be downloaded. Also, through MDM you can lock what specific apps can be run or even seen on the device. + 1. Allowing apps is possible by using the Microsoft Enterprise Store, where you can choose only what specific apps can be downloaded. Also, through MDM you can lock what specific apps can be run or even seen on the device. 1. **Can we quarantine the device from prod network until we update the device if it has been offline for an extended period of time? Ex. Device has been sitting in a drawer not powered up for a period (6 months) and has not received any updates, patches, etc. When it tries to come on the network can we flag it and say you must update on another network prior to being complaint to join the network.** 1. This is something that can be managed on the infrastructure level by either an MDM or an on-prem server. The device can be flagged as not compliant if it does not meet a specified Update version. 1. **Does Microsoft include any back doors or access to services that allows Microsoft to connect to the device for screen sharing or remote support at will?** @@ -85,7 +85,7 @@ appliesto: 1. C3K1855 1. **What frequency range and channels does the device operate on and is it configurable?** 1. Wi-Fi: The frequency range is not user configurable and depends on the country of use. In the US Wi-Fi uses both 2.4 GHz (1-11) channels and 5 GHz (36-64, 100-165) channels. -1. **Can the device blacklist or white list specific frequencies?** +1. **Can the device allow or block specific frequencies?** 1. This is not controllable by the user/device 1. **What is the power level for both transmit and receive? Is it adjustable? What is the range of operation?** 1. Wireless power levels depend on the channel of operation. Devices are calibrated to perform at the highest power levels allowed based on the region's regulatory rules. @@ -113,9 +113,9 @@ appliesto: 1. Yes 1. **Is there an ability to control or disable the use of ports on the device?** 1. The HoloLens only contains 2 ports (one for headphones and one for charging or connecting to PCs). There is not ability to disable the port due to functionality and recovery reasons. -1. **Antivirus, end point detection, IPS, app control whitelist – Any ability to run antivirus, end point detection, IPS, app control whitelist, etc.** +1. **Antivirus, end point detection, IPS, app control allow – Any ability to run antivirus, end point detection, IPS, app control allow, etc.** 1. HoloLens 2nd Gen supports Windows Defender Smart Screen. If an antivirus company were to create and publish their app to the Universal Windows Platform, it could be downloaded on HoloLens. At present, no companies have done this for HoloLens. - 1. Whitelisting apps is possible by using the Microsoft Enterprise Store, where you can choose only what specific apps can be downloaded. Also, through MDM you can lock what specific apps can be run or even seen on the device. + 1. Allowing apps is possible by using the Microsoft Enterprise Store, where you can choose only what specific apps can be downloaded. Also, through MDM you can lock what specific apps can be run or even seen on the device. 1. **Can we quarantine the device from prod network until we update the device if it has been offline for an extended period of time? Ex. Device has been sitting in a drawer not powered up for a period (6 months) and has not received any updates, patches, etc. When it tries to come on the network can we flag it and say you must update on another network prior to being complaint to join the network.** 1. This is something that can be managed on the infrastructure level by either an MDM or an on-prem server. The device can be flagged as not compliant if it does not meet a specified Update version. 1. **Does Microsoft include any back doors or access to services that allows Microsoft to connect to the device for screen sharing or remote support at will?** diff --git a/devices/hololens/hololens-offline.md b/devices/hololens/hololens-offline.md index b9ee084421..e16ee7df6f 100644 --- a/devices/hololens/hololens-offline.md +++ b/devices/hololens/hololens-offline.md @@ -22,7 +22,7 @@ appliesto: # Manage connection endpoints for HoloLens -Some HoloLens components, apps, and related services transfer data to Microsoft network endpoints. This article lists different endpoints and URLs that need to be whitelisted in your network configuration (e.g. proxy or firewall) for those components to be functional. +Some HoloLens components, apps, and related services transfer data to Microsoft network endpoints. This article lists different endpoints and URLs that need to be allowed in your network configuration (e.g. proxy or firewall) for those components to be functional. ## Near-offline setup diff --git a/devices/hololens/hololens-requirements.md b/devices/hololens/hololens-requirements.md index c8be6947ae..a175ddd5eb 100644 --- a/devices/hololens/hololens-requirements.md +++ b/devices/hololens/hololens-requirements.md @@ -23,7 +23,7 @@ This document also assumes that the HoloLens has been evaluated by security team 1. [Determine what features you need](hololens-requirements.md#step-1-determine-what-you-need) 1. [Determine what licenses you need](hololens-licenses-requirements.md) 1. [Configure your network for HoloLens](hololens-commercial-infrastructure.md). - 1. This section includes bandwidth requirements, URL, and ports that need to be whitelisted on your firewall; Azure AD guidance; Mobile Device Management (MDM) Guidance; app deployment/management guidance; and certificate guidance. + 1. This section includes bandwidth requirements, URL, and ports that need to be allowed on your firewall; Azure AD guidance; Mobile Device Management (MDM) Guidance; app deployment/management guidance; and certificate guidance. 1. (Optional) [Configure HoloLens using a provisioning package](hololens-provisioning.md) 1. [Enroll Device](hololens-enroll-mdm.md) 1. [Set up ring based updates for HoloLens](hololens-updates.md) diff --git a/devices/surface-hub/apply-activesync-policies-for-surface-hub-device-accounts.md b/devices/surface-hub/apply-activesync-policies-for-surface-hub-device-accounts.md index 66dd43f75c..8c94fbb5fe 100644 --- a/devices/surface-hub/apply-activesync-policies-for-surface-hub-device-accounts.md +++ b/devices/surface-hub/apply-activesync-policies-for-surface-hub-device-accounts.md @@ -21,10 +21,10 @@ The Microsoft Surface Hub's device account uses ActiveSync to sync mail and cale For these features to work, the ActiveSync policies for your organization must be configured as follows: -- There can't be any global policies that block synchronization of the resource mailbox that's being used by the Surface Hub’s device account. If there is such a blocking policy, you need to whitelist the Surface Hub as an allowed device. +- There can't be any global policies that block synchronization of the resource mailbox that's being used by the Surface Hub’s device account. If there is such a blocking policy, you need to add the Surface Hub as an allowed device. - You must set a mobile device mailbox policy where the **PasswordEnabled** setting is set to False. Other mobile device mailbox policy settings are not compatible with the Surface Hub. -## Whitelisting the DeviceID +## Allowing the DeviceID Your organization may have a global policy that prevents syncing of device accounts provisioned on Surface Hubs. To configure this property, see [Allowing device IDs for ActiveSync](appendix-a-powershell-scripts-for-surface-hub.md#whitelisting-device-ids-cmdlet). diff --git a/devices/surface-hub/create-and-test-a-device-account-surface-hub.md b/devices/surface-hub/create-and-test-a-device-account-surface-hub.md index 8985f70c9d..b5ce94c19a 100644 --- a/devices/surface-hub/create-and-test-a-device-account-surface-hub.md +++ b/devices/surface-hub/create-and-test-a-device-account-surface-hub.md @@ -38,7 +38,7 @@ This table explains the main steps and configuration decisions when you create a | 2 | Configure mailbox properties | The mailbox must be configured with the correct properties to enable the best meeting experience on Surface Hub. For more information on mailbox properties, see [Mailbox properties](exchange-properties-for-surface-hub-device-accounts.md). | | 3 | Apply a compatible mobile device mailbox policy to the mailbox | Surface Hub is managed using mobile device management (MDM) rather than through mobile device mailbox policies. For compatibility, the device account must have a mobile device mailbox policy where the **PasswordEnabled** setting is set to False. Otherwise, Surface Hub can't sync mail and calendar info. | | 4 | Enable mailbox with Skype for Business (Lync Server 2013 or later, or Skype for Business Online) | Skype for Business must be enabled to use conferencing features like video calls, IM, and screen sharing. | -| 5 | (Optional) Whitelist ActiveSync Device ID | Your organization may have a global policy that prevents device accounts from syncing mail and calendar info. If so, you need to whitelist the ActiveSync Device ID of your Surface Hub. | +| 5 | (Optional) Whitelist ActiveSync Device ID | Your organization may have a global policy that prevents device accounts from syncing mail and calendar info. If so, you need to allow the ActiveSync Device ID of your Surface Hub. | | 6 | (Optional) Disable password expiration | To simplify management, you can turn off password expiration for the device account and allow Surface Hub to automatically rotate the device account password. For more information about password management, see [Password management](password-management-for-surface-hub-device-accounts.md). | ## Detailed configuration steps diff --git a/devices/surface-hub/troubleshoot-surface-hub.md b/devices/surface-hub/troubleshoot-surface-hub.md index 4a30281eff..06b493c24d 100644 --- a/devices/surface-hub/troubleshoot-surface-hub.md +++ b/devices/surface-hub/troubleshoot-surface-hub.md @@ -415,7 +415,7 @@ Possible fixes for issues with Surface Hub first-run program.

Can't sync mail/calendar.

The account has not allowed the Surface Hub as an allowed device.

0x86000C1C

-

Add the Surface Hub device ID to the whitelist by setting the ActiveSyncAllowedDeviceIds property for the mailbox.

+

Add the Surface Hub device ID to the allowed list by setting the ActiveSyncAllowedDeviceIds property for the mailbox.

diff --git a/windows/client-management/mdm/applicationcontrol-csp.md b/windows/client-management/mdm/applicationcontrol-csp.md index 4293995ef5..9cb53ea100 100644 --- a/windows/client-management/mdm/applicationcontrol-csp.md +++ b/windows/client-management/mdm/applicationcontrol-csp.md @@ -1,7 +1,7 @@ --- title: ApplicationControl CSP description: The ApplicationControl CSP allows you to manage multiple Windows Defender Application Control (WDAC) policies from a MDM server. -keywords: whitelisting, security, malware +keywords: security, malware ms.author: dansimp ms.topic: article ms.prod: w10 diff --git a/windows/client-management/mdm/applocker-csp.md b/windows/client-management/mdm/applocker-csp.md index 3a1f4b6002..ea7d1567cb 100644 --- a/windows/client-management/mdm/applocker-csp.md +++ b/windows/client-management/mdm/applocker-csp.md @@ -869,7 +869,7 @@ The following list shows the apps that may be included in the inbox. -## Whitelist examples +## Allow list examples The following example disables the calendar application. diff --git a/windows/client-management/mdm/healthattestation-csp.md b/windows/client-management/mdm/healthattestation-csp.md index 3870f7d385..e24210c9e0 100644 --- a/windows/client-management/mdm/healthattestation-csp.md +++ b/windows/client-management/mdm/healthattestation-csp.md @@ -748,13 +748,13 @@ Each of these are described in further detail in the following sections, along w **PCR0**

The measurement that is captured in PCR[0] typically represents a consistent view of the Host Platform between boot cycles. It contains a measurement of components that are provided by the host platform manufacturer.

-

Enterprise managers can create a whitelist of trusted PCR[0] values, compare the PCR[0] value of the managed devices (the value that is verified and reported by HAS) with the whitelist, and then make a trust decision based on the result of the comparison.

+

Enterprise managers can create a allow list of trusted PCR[0] values, compare the PCR[0] value of the managed devices (the value that is verified and reported by HAS) with the allow list, and then make a trust decision based on the result of the comparison.

-

If your enterprise does not have a whitelist of accepted PCR[0] values, then take no action.

+

If your enterprise does not have a allow list of accepted PCR[0] values, then take no action.

-

If PCR[0] equals an accepted whitelisted value, then allow access.

+

If PCR[0] equals an accepted allow list value, then allow access.

-

If PCR[0] does not equal any accepted whitelisted value, then take one of the following actions that align with your enterprise policies:

+

If PCR[0] does not equal any accepted listed value, then take one of the following actions that align with your enterprise policies:

- Disallow all access - Direct the device to an enterprise honeypot, to further monitor the device's activities. @@ -762,9 +762,9 @@ Each of these are described in further detail in the following sections, along w **SBCPHash**

SBCPHash is the finger print of the Custom Secure Boot Configuration Policy (SBCP) that was loaded during boot in Windows devices, except PCs.

-

If SBCPHash is not present, or is an accepted (whitelisted) value, then allow access. +

If SBCPHash is not present, or is an accepted allow-listed value, then allow access. -

If SBCPHash is present in DHA-Report, and is not a whitelisted value, then take one of the following actions that align with your enterprise policies:

+

If SBCPHash is present in DHA-Report, and is not a allow-listed value, then take one of the following actions that align with your enterprise policies:

- Disallow all access - Place the device in a watch list to monitor the device more closely for potential risks. @@ -772,9 +772,9 @@ Each of these are described in further detail in the following sections, along w **CIPolicy**

This attribute indicates the Code Integrity policy that is controlling the security of the boot environment.

-

If CIPolicy is not present, or is an accepted (whitelisted) value, then allow access.

+

If CIPolicy is not present, or is an accepted allow-listed value, then allow access.

-

If CIPolicy is present and is not a whitelisted value, then take one of the following actions that align with your enterprise policies:

+

If CIPolicy is present and is not a allow-listed value, then take one of the following actions that align with your enterprise policies:

- Disallow all access - Place the device in a watch list to monitor the device more closely for potential risks. diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 430601798d..c2b889cfe1 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -44,7 +44,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s - [Server-initiated unenrollment failure](#server-initiated-unenrollment-failure) - [Certificates causing issues with Wi-Fi and VPN](#certificates-causing-issues-with-wi-fi-and-vpn) - [Version information for mobile devices](#version-information-for-mobile-devices) - - [Upgrading Windows Phone 8.1 devices with app whitelisting using ApplicationRestriction policy has issues](#upgrading-windows-phone-81-devices-with-app-whitelisting-using-applicationrestriction-policy-has-issues) + - [Upgrading Windows Phone 8.1 devices with app allow list using ApplicationRestriction policy has issues](#upgrading-windows-phone-81-devices-with-app-whitelisting-using-applicationrestriction-policy-has-issues) - [Apps dependent on Microsoft Frameworks may get blocked in phones prior to build 10586.218](#apps-dependent-on-microsoft-frameworks-may-get-blocked-in-phones-prior-to-build-10586218) - [Multiple certificates might cause Wi-Fi connection instabilities in Windows 10 Mobile](#multiple-certificates-might-cause-wi-fi-connection-instabilities-in-windows-10-mobile) - [Remote PIN reset not supported in Azure Active Directory joined mobile devices](#remote-pin-reset-not-supported-in-azure-active-directory-joined-mobile-devices) @@ -1747,7 +1747,7 @@ Currently in Windows 10, version 1511, when using the ClientCertificateInstall The software version information from **DevDetail/SwV** does not match the version in **Settings** under **System/About**. -### Upgrading Windows Phone 8.1 devices with app whitelisting using ApplicationRestriction policy has issues +### Upgrading Windows Phone 8.1 devices with app allow-listing using ApplicationRestriction policy has issues - When you upgrade Windows Phone 8.1 devices to Windows 10 Mobile using ApplicationRestrictions with a list of allowed apps, some Windows inbox apps get blocked causing unexpected behavior. To work around this issue, you must include the [inbox apps](applocker-csp.md#inboxappsandcomponents) that you need to your list of allowed apps. @@ -2946,7 +2946,7 @@ How do I turn if off? | The service can be stopped from the "Services" console o AppLocker CSP -

Added two new SyncML examples (to disable the calendar app and to block usage of the map app) in Whitelist examples.

+

Added two new SyncML examples (to disable the calendar app and to block usage of the map app) in Allow list examples.

DeviceManageability CSP diff --git a/windows/client-management/windows-10-mobile-and-mdm.md b/windows/client-management/windows-10-mobile-and-mdm.md index afb9c4241f..7017e40876 100644 --- a/windows/client-management/windows-10-mobile-and-mdm.md +++ b/windows/client-management/windows-10-mobile-and-mdm.md @@ -533,7 +533,7 @@ Learn more about the [Microsoft Store for Business](/microsoft-store/index). IT administrators can control which apps are allowed to be installed on Windows 10 Mobile devices and how they should be kept up-to-date. -Windows 10 Mobile includes AppLocker, which enables administrators to create allow or disallow (sometimes also called whitelist/blacklist) lists of apps from the Microsoft Store. This capability extends to built-in apps, as well, such as Xbox, Groove, text messaging, email, and calendar, etc. The ability to allow or deny apps helps to ensure that people use their mobile devices for their intended purposes. However, it is not always an easy approach to find a balance between what employees need or request and security concerns. Creating allow or disallow lists also requires keeping up with the changing app landscape in the Microsoft Store. +Windows 10 Mobile includes AppLocker, which enables administrators to create allow or disallow lists of apps from the Microsoft Store. This capability extends to built-in apps, as well, such as Xbox, Groove, text messaging, email, and calendar, etc. The ability to allow or deny apps helps to ensure that people use their mobile devices for their intended purposes. However, it is not always an easy approach to find a balance between what employees need or request and security concerns. Creating allow or disallow lists also requires keeping up with the changing app landscape in the Microsoft Store. For more details, see [AppLocker CSP](https://msdn.microsoft.com/library/windows/hardware/dn920019(v=vs.85).aspx). @@ -970,7 +970,7 @@ This is a list of attributes that are supported by DHA and can trigger the corre - **Boot Manager Version** The version of the Boot Manager running on the device. The HAS can check this version to determine whether the most current Boot Manager is running, which is more secure (trusted). - **Code integrity version** Specifies the version of code that is performing integrity checks during the boot sequence. The HAS can check this version to determine whether the most current version of code is running, which is more secure (trusted). - **Secure Boot Configuration Policy (SBCP) present** Whether the hash of the custom SBCP is present. A device with an SBCP hash present is more trustworthy than a device without an SBCP hash. -- **Boot cycle whitelist** The view of the host platform between boot cycles as defined by the manufacturer compared to a published whitelist. A device that complies with the whitelist is more trustworthy (secure) than a device that is noncompliant. +- **Boot cycle whitelist** The view of the host platform between boot cycles as defined by the manufacturer compared to a published allow list. A device that complies with the allow list is more trustworthy (secure) than a device that is noncompliant. **Example scenario** diff --git a/windows/configuration/wcd/wcd-cellcore.md b/windows/configuration/wcd/wcd-cellcore.md index b9b724b0b7..5e739a99ce 100644 --- a/windows/configuration/wcd/wcd-cellcore.md +++ b/windows/configuration/wcd/wcd-cellcore.md @@ -139,7 +139,7 @@ Select from the following: ### eSim -Configure **FwUpdate** > **AllowedAppIdList** to whitelist apps that are allowed to update the firmware. Obtain the app IDs from the card vendor. +Configure **FwUpdate** > **AllowedAppIdList** to list apps that are allowed to update the firmware. Obtain the app IDs from the card vendor. ### External diff --git a/windows/deployment/update/windows-update-troubleshooting.md b/windows/deployment/update/windows-update-troubleshooting.md index 90805fd151..ed26f9246b 100644 --- a/windows/deployment/update/windows-update-troubleshooting.md +++ b/windows/deployment/update/windows-update-troubleshooting.md @@ -162,7 +162,7 @@ Check that your device can access these Windows Update endpoints: - `http://wustat.windows.com` - `http://ntservicepack.microsoft.com` - Whitelist these endpoints for future use. + White these endpoints for future use. ## Updates aren't downloading from the intranet endpoint (WSUS or Configuration Manager) Windows 10 devices can receive updates from a variety of sources, including Windows Update online, a Windows Server Update Services server, and others. To determine the source of Windows Updates currently being used on a device, follow these steps: diff --git a/windows/deployment/upgrade/upgrade-windows-phone-8-1-to-10.md b/windows/deployment/upgrade/upgrade-windows-phone-8-1-to-10.md index 78d70d0d25..6de193cccb 100644 --- a/windows/deployment/upgrade/upgrade-windows-phone-8-1-to-10.md +++ b/windows/deployment/upgrade/upgrade-windows-phone-8-1-to-10.md @@ -1,113 +1,114 @@ ---- -title: Upgrade Windows Phone 8.1 to Windows 10 Mobile in an MDM environment (Windows 10) -ms.reviewer: -manager: laurawi -ms.author: greglin -description: This article describes how to upgrade eligible Windows Phone 8.1 devices to Windows 10 Mobile using MDM. -keywords: upgrade, update, windows, phone, windows 10, mdm, mobile -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: mdm -audience: itpro author: greg-lindsay -ms.topic: article ---- - -# Upgrade a Windows Phone 8.1 to Windows 10 Mobile with Mobile Device Management (MDM) - -**Applies to** - -- Windows 10 Mobile - -## Summary - -This article describes how system administrators can upgrade eligible Windows Phone 8.1 devices to Windows 10 Mobile using [Mobile Device Management](https://docs.microsoft.com/windows/client-management/mdm/) (MDM). - ->[!IMPORTANT] ->If you are not a system administrator, see the [Windows 10 Mobile Upgrade & Updates](https://www.microsoft.com/windows/windows-10-mobile-upgrade) page for details about updating your Windows 8.1 Mobile device to Windows 10 Mobile using the [Upgrade Advisor](https://www.microsoft.com/store/p/upgrade-advisor/9nblggh0f5g4). - -## Upgrading with MDM - -The Windows Phone 8.1 to Windows 10 Mobile upgrade uses an "opt-in" or "seeker" model. To determine if the device is eligible for an upgrade with MDM, see the [How to determine whether an upgrade is available for a device](#howto-upgrade-available) topic in this article. An eligible device must opt-in to be offered the upgrade. For consumers, the Windows 10 Mobile Upgrade Advisor app is available from the Windows Store to perform the opt-in. For Enterprises, Microsoft is offering a centralized management solution through MDM that can push a management policy to each eligible device to perform the opt-in. - -If you use a list of allowed applications (app whitelisting) with MDM, verify that system applications are whitelisted before you upgrade to Windows 10 Mobile. Also, be aware that there are [known issues](https://msdn.microsoft.com/library/windows/hardware/mt299056.aspx#whitelist) with app whitelisting that could adversely affect the device after you upgrade. - -Some enterprises might want to control the availability of the Windows 10 Mobile upgrade to their users. With the opt-in model, the enterprise can blacklist the Upgrade Advisor app to prevent their users from upgrading prematurely. For more information about how to blacklist the Upgrade Advisor app, see the [How to blacklist the Upgrade Advisor app](#howto-blacklist) section in this article. Enterprises that have blacklisted the Upgrade Advisor app can use the solution described in this article to select the upgrade timing on a per-device basis. - -## More information - -To provide enterprises with a solution that's independent of the Upgrade Advisor, a new registry key in the registry configuration service provider (CSP) is available. A special GUID key value is defined. When Microsoft Update (MU) detects the presence of the registry key value on a device, any available upgrade will be made available to the device. - -### Prerequisites - -- Windows Phone 8.1 device with an available upgrade to Windows 10 Mobile. -- Device connected to Wi-Fi or cellular network to perform scan for upgrade. -- Device is already enrolled with an MDM session. -- Device is able to receive the management policy. -- MDM is capable of pushing the management policy to devices. Minimum version numbers for some popular MDM providers that support this solution are: InTune: 5.0.5565, AirWatch: 8.2, Mobile Iron: 9.0. - -### Instructions for the MDM server - -The registry CSP is used to push the GUID value to the following registry key for which the Open Mobile Alliance (OMA) Device Management (DM) client has Read/Write access and for which the Device Update service has Read access. - -``` -[HKLM\Software\Microsoft\Provisioning\OMADM] -"EnterpriseUpgrade"="d369c9b6-2379-466d-9162-afc53361e3c2” -``` - - -The complete SyncML command for the solution is as follows. Note: The SyncML may vary, depending on your MDM solution. - -``` -SyncML xmlns="SYNCML:SYNCML1.1"> - - - 250 - - - ./Vendor/MSFT/Registry/HKLM/SOFTWARE/Microsoft/Provisioning/OMADM/EnterpriseUpgrade - - - chr - - d369c9b6-2379-466d-9162-afc53361e3c2 - - - - - -``` - -The OMA DM server policy description is provided in the following table: - -|Item |Setting | -|------|------------| -| OMA-URI |./Vendor/MSFT/Registry/HKLM/SOFTWARE/Microsoft/Provisioning/OMADM/EnterpriseUpgrade | -| Data Type |String | -| Value |d369c9b6-2379-466d-9162-afc53361e3c2 | - - -After the device consumes the policy, it will be able to receive an available upgrade. - -To disable the policy, delete the **OMADM** registry key or set the **EnterpriseUpgrade** string value to anything other than the GUID. - -### How to determine whether an upgrade is available for a device - -The Windows 10 Mobile Upgrade Advisor app is not designed or intended for Enterprise customers who want to automate the upgrade process. However, the Windows 10 Mobile Upgrade Advisor app is the best mechanism to determine when an upgrade is available. The app dynamically queries whether the upgrade is released for this device model and associated mobile operator (MO). - -We recommend that enterprises use a pilot device with the Windows 10 Mobile Upgrade Advisor app installed. The pilot device provides the device model and MO used by the enterprise. When you run the app on the pilot device, it will tell you that either an upgrade is available, that the device is eligible for upgrade, or that an upgrade is not available for this device. - -Note: The availability of Windows 10 Mobile as an update for existing Windows Phone 8.1 devices varies by device manufacturer, device model, country or region, mobile operator or service provider, hardware limitations, and other factors. To check for compatibility and other important installation information, see the [Windows 10 Mobile FAQ](https://support.microsoft.com/help/10599/windows-10-mobile-how-to-get) page. - -### How to blacklist the Upgrade Advisor app - -Some enterprises may want to block their users from installing the Windows 10 Mobile Upgrade Advisor app. With Windows Phone 8.1, you can allow or deny individual apps by adding specific app publishers or the app globally unique identifier (GUID) from the Window Phone Store to an allow or deny XML list. The GUID for a particular application can be found in the URL for the app in the phone store. For example, the GUID to the Windows 10 Mobile Upgrade Adviser (fbe47e4f-7769-4103-910e-dca8c43e0b07) is displayed in the following URL: - -http://windowsphone.com/s?appid=fbe47e4f-7769-4103-910e-dca8c43e0b07 - -For more information about how to do this, see [Try it out: restrict Windows Phone 8.1 apps](https://technet.microsoft.com/windows/dn771706.aspx). - -## Related topics - -[Windows 10 Mobile and mobile device management](/windows/client-management/windows-10-mobile-and-mdm) +--- +title: Upgrade Windows Phone 8.1 to Windows 10 Mobile in an MDM environment (Windows 10) +ms.reviewer: +manager: laurawi +ms.author: greglin +description: This article describes how to upgrade eligible Windows Phone 8.1 devices to Windows 10 Mobile using MDM. +keywords: upgrade, update, windows, phone, windows 10, mdm, mobile +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.sitesec: library +ms.pagetype: mdm +audience: itpro +author: greg-lindsay +ms.topic: article +--- + +# Upgrade a Windows Phone 8.1 to Windows 10 Mobile with Mobile Device Management (MDM) + +**Applies to** + +- Windows 10 Mobile + +## Summary + +This article describes how system administrators can upgrade eligible Windows Phone 8.1 devices to Windows 10 Mobile using [Mobile Device Management](https://docs.microsoft.com/windows/client-management/mdm/) (MDM). + +>[!IMPORTANT] +>If you are not a system administrator, see the [Windows 10 Mobile Upgrade & Updates](https://www.microsoft.com/windows/windows-10-mobile-upgrade) page for details about updating your Windows 8.1 Mobile device to Windows 10 Mobile using the [Upgrade Advisor](https://www.microsoft.com/store/p/upgrade-advisor/9nblggh0f5g4). + +## Upgrading with MDM + +The Windows Phone 8.1 to Windows 10 Mobile upgrade uses an "opt-in" or "seeker" model. To determine if the device is eligible for an upgrade with MDM, see the [How to determine whether an upgrade is available for a device](#howto-upgrade-available) topic in this article. An eligible device must opt-in to be offered the upgrade. For consumers, the Windows 10 Mobile Upgrade Advisor app is available from the Windows Store to perform the opt-in. For Enterprises, Microsoft is offering a centralized management solution through MDM that can push a management policy to each eligible device to perform the opt-in. + +If you use a list of allowed applications (app allow listing) with MDM, verify that system applications are allow-listed before you upgrade to Windows 10 Mobile. Also, be aware that there are [known issues](https://msdn.microsoft.com/library/windows/hardware/mt299056.aspx#whitelist) with app allow-lists that could adversely affect the device after you upgrade. + +Some enterprises might want to control the availability of the Windows 10 Mobile upgrade to their users. With the opt-in model, the enterprise can block the Upgrade Advisor app to prevent their users from upgrading prematurely. For more information about how to restrict the Upgrade Advisor app, see the [How to restrict the Upgrade Advisor app](#howto-restrict) section in this article. Enterprises that have restricted the Upgrade Advisor app can use the solution described in this article to select the upgrade timing on a per-device basis. + +## More information + +To provide enterprises with a solution that's independent of the Upgrade Advisor, a new registry key in the registry configuration service provider (CSP) is available. A special GUID key value is defined. When Microsoft Update (MU) detects the presence of the registry key value on a device, any available upgrade will be made available to the device. + +### Prerequisites + +- Windows Phone 8.1 device with an available upgrade to Windows 10 Mobile. +- Device connected to Wi-Fi or cellular network to perform scan for upgrade. +- Device is already enrolled with an MDM session. +- Device is able to receive the management policy. +- MDM is capable of pushing the management policy to devices. Minimum version numbers for some popular MDM providers that support this solution are: InTune: 5.0.5565, AirWatch: 8.2, Mobile Iron: 9.0. + +### Instructions for the MDM server + +The registry CSP is used to push the GUID value to the following registry key for which the Open Mobile Alliance (OMA) Device Management (DM) client has Read/Write access and for which the Device Update service has Read access. + +``` +[HKLM\Software\Microsoft\Provisioning\OMADM] +"EnterpriseUpgrade"="d369c9b6-2379-466d-9162-afc53361e3c2” +``` + + +The complete SyncML command for the solution is as follows. Note: The SyncML may vary, depending on your MDM solution. + +``` +SyncML xmlns="SYNCML:SYNCML1.1"> + + + 250 + + + ./Vendor/MSFT/Registry/HKLM/SOFTWARE/Microsoft/Provisioning/OMADM/EnterpriseUpgrade + + + chr + + d369c9b6-2379-466d-9162-afc53361e3c2 + + + + + +``` + +The OMA DM server policy description is provided in the following table: + +|Item |Setting | +|------|------------| +| OMA-URI |./Vendor/MSFT/Registry/HKLM/SOFTWARE/Microsoft/Provisioning/OMADM/EnterpriseUpgrade | +| Data Type |String | +| Value |d369c9b6-2379-466d-9162-afc53361e3c2 | + + +After the device consumes the policy, it will be able to receive an available upgrade. + +To disable the policy, delete the **OMADM** registry key or set the **EnterpriseUpgrade** string value to anything other than the GUID. + +### How to determine whether an upgrade is available for a device + +The Windows 10 Mobile Upgrade Advisor app is not designed or intended for Enterprise customers who want to automate the upgrade process. However, the Windows 10 Mobile Upgrade Advisor app is the best mechanism to determine when an upgrade is available. The app dynamically queries whether the upgrade is released for this device model and associated mobile operator (MO). + +We recommend that enterprises use a pilot device with the Windows 10 Mobile Upgrade Advisor app installed. The pilot device provides the device model and MO used by the enterprise. When you run the app on the pilot device, it will tell you that either an upgrade is available, that the device is eligible for upgrade, or that an upgrade is not available for this device. + +Note: The availability of Windows 10 Mobile as an update for existing Windows Phone 8.1 devices varies by device manufacturer, device model, country or region, mobile operator or service provider, hardware limitations, and other factors. To check for compatibility and other important installation information, see the [Windows 10 Mobile FAQ](https://support.microsoft.com/help/10599/windows-10-mobile-how-to-get) page. + +### How to restrict the Upgrade Advisor app + +Some enterprises may want to block their users from installing the Windows 10 Mobile Upgrade Advisor app. With Windows Phone 8.1, you can allow or deny individual apps by adding specific app publishers or the app globally unique identifier (GUID) from the Window Phone Store to an allow or deny XML list. The GUID for a particular application can be found in the URL for the app in the phone store. For example, the GUID to the Windows 10 Mobile Upgrade Adviser (fbe47e4f-7769-4103-910e-dca8c43e0b07) is displayed in the following URL: + +http://windowsphone.com/s?appid=fbe47e4f-7769-4103-910e-dca8c43e0b07 + +For more information about how to do this, see [Try it out: restrict Windows Phone 8.1 apps](https://technet.microsoft.com/windows/dn771706.aspx). + +## Related topics + +[Windows 10 Mobile and mobile device management](/windows/client-management/windows-10-mobile-and-mdm) diff --git a/windows/deployment/windows-10-enterprise-e3-overview.md b/windows/deployment/windows-10-enterprise-e3-overview.md index e4cadbe165..c36f0c2cdc 100644 --- a/windows/deployment/windows-10-enterprise-e3-overview.md +++ b/windows/deployment/windows-10-enterprise-e3-overview.md @@ -105,7 +105,7 @@ Windows 10 Enterprise edition has a number of features that are unavailable in

AppLocker management

-

This feature helps IT pros determine which applications and files users can run on a device (also known as “whitelisting”). The applications and files that can be managed include executable files, scripts, Windows Installer files, dynamic-link libraries (DLLs), packaged apps, and packaged app installers.

+

This feature helps IT pros determine which applications and files users can run on a device. The applications and files that can be managed include executable files, scripts, Windows Installer files, dynamic-link libraries (DLLs), packaged apps, and packaged app installers.

For more information, see AppLocker.

diff --git a/windows/deployment/windows-autopilot/windows-autopilot-requirements.md b/windows/deployment/windows-autopilot/windows-autopilot-requirements.md index eca7e2bf95..1cf373f277 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-requirements.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-requirements.md @@ -49,7 +49,7 @@ Windows Autopilot depends on a variety of internet-based services. Access to the - Ensure DNS name resolution for internet DNS names - Allow access to all hosts via port 80 (HTTP), 443 (HTTPS), and 123 (UDP/NTP) -In environments that have more restrictive Internet access, or for those that require authentication before internet access can be obtained, additional configuration may be required to whitelist access to the required services. For additional details about each of these services and their specific requirements, review the following details: +In environments that have more restrictive Internet access, or for those that require authentication before internet access can be obtained, additional configuration may be required to allow access to the required services. For additional details about each of these services and their specific requirements, review the following details: - From ea4c2f59707baf4abc765495e8800c8a1812230f Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Mon, 15 Jun 2020 09:41:16 -0700 Subject: [PATCH 063/145] pencil edit --- .../deployment/update/update-compliance-configuration-manual.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/update-compliance-configuration-manual.md b/windows/deployment/update/update-compliance-configuration-manual.md index 1387e22018..de0fe72583 100644 --- a/windows/deployment/update/update-compliance-configuration-manual.md +++ b/windows/deployment/update/update-compliance-configuration-manual.md @@ -55,7 +55,7 @@ All Group Policies that need to be configured for Update Compliance are under ** |---------------------------|-|-----------------------------------------------------------| |**Configure the Commercial ID** |[Your CommercialID](update-compliance-get-started.md#get-your-commercialid) | Identifies the device as belonging to your organization. | |**Allow Telemetry** | 1 - Basic |Configures the maximum allowed diagnostic data to be sent to Microsoft. Individual users can still set this lower than what the policy defines. See the following policy for more information. | -|**Configure telemetry opt-in setting user interface** | 1 - Disable telemetry opt-in Settings |(in Windows 10, version 1803 and later) Determines whether end-users of the device can adjust diagnostic data to levels lower than the level defined by AllowTelemetry. We recommend that you disable this polic, otherwise the effective diagnostic data level on devices might not be sufficient. | +|**Configure telemetry opt-in setting user interface** | 1 - Disable telemetry opt-in Settings |(in Windows 10, version 1803 and later) Determines whether end-users of the device can adjust diagnostic data to levels lower than the level defined by AllowTelemetry. We recommend that you disable this policy, otherwise the effective diagnostic data level on devices might not be sufficient. | |**Allow device name to be sent in Windows diagnostic data** | 1 - Enabled | Allows device name to be sent for Windows Diagnostic Data. If this policy is Not Configured or Disabled, Device Name will not be sent and will not be visible in Update Compliance, showing `#` instead. | ## Required endpoints From 9fe5b1d944155b8fc6bc4511fd97787bc5c49134 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Mon, 15 Jun 2020 09:41:18 -0700 Subject: [PATCH 064/145] fixing anchor link --- windows/client-management/mdm/applocker-csp.md | 2 +- .../mdm/new-in-windows-mdm-enrollment-management.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/applocker-csp.md b/windows/client-management/mdm/applocker-csp.md index 973ba78922..4fe03939a0 100644 --- a/windows/client-management/mdm/applocker-csp.md +++ b/windows/client-management/mdm/applocker-csp.md @@ -868,7 +868,7 @@ The following list shows the apps that may be included in the inbox. -## Allow list examples +## Allow list examples The following example disables the calendar application. diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index aa8a5bcf89..2927d154d3 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -2945,7 +2945,7 @@ How do I turn if off? | The service can be stopped from the "Services" console o - From 618f27b95fc12be3abfc3e2d71c45da19d611a74 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Mon, 15 Jun 2020 09:57:21 -0700 Subject: [PATCH 065/145] pencil edits --- windows/deployment/update/windows-update-resources.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-update-resources.md b/windows/deployment/update/windows-update-resources.md index c3631a707c..1100e81433 100644 --- a/windows/deployment/update/windows-update-resources.md +++ b/windows/deployment/update/windows-update-resources.md @@ -56,19 +56,19 @@ The following resources provide additional information about using Windows Updat ``` 4. If this is your first attempt at resolving your Windows Update issues by using the steps in this article, go to step 5 without carrying out the steps in step 4. The steps in step 4 should only be performed at this point in the troubleshooting if you cannot resolve your Windows Update issues after following all steps but step 4. The steps in step 4 are also performed by the "Aggressive" mode of the Fix it Solution above. 1. Rename the following folders to *.BAK: - ``` + ```console %systemroot%\SoftwareDistribution\DataStore %systemroot%\SoftwareDistribution\Download %systemroot%\system32\catroot2 ``` To do this, type the following commands at a command prompt. Press ENTER after you type each command. - ``` + ```console Ren %systemroot%\SoftwareDistribution\DataStore *.bak Ren %systemroot%\SoftwareDistribution\Download *.bak Ren %systemroot%\system32\catroot2 *.bak ``` 2. Reset the BITS service and the Windows Update service to the default security descriptor. To do this, type the following commands at a command prompt. Press ENTER after you type each command. - ``` + ```console sc.exe sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU) sc.exe sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU) ``` From 55d3990b163826de1853c373d381b0f79e524686 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 15 Jun 2020 09:59:00 -0700 Subject: [PATCH 066/145] updating toc --- windows/security/threat-protection/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 41e116ecca..25821bd270 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -264,6 +264,7 @@ #### [Alerts queue]() ##### [View and organize the Alerts queue](microsoft-defender-atp/alerts-queue.md) +##### [Review alerts](windows/security/threat-protection/microsoft-defender-atp/review-alerts.md) ##### [Manage alerts](microsoft-defender-atp/manage-alerts.md) ##### [Investigate alerts](microsoft-defender-atp/investigate-alerts.md) ##### [Investigate files](microsoft-defender-atp/investigate-files.md) From c1c122c82606dbd4f2f9c4f12f311d22621f73eb Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Mon, 15 Jun 2020 10:12:12 -0700 Subject: [PATCH 067/145] pencil edits --- .../update/windows-update-resources.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/deployment/update/windows-update-resources.md b/windows/deployment/update/windows-update-resources.md index 1100e81433..60c38e2f82 100644 --- a/windows/deployment/update/windows-update-resources.md +++ b/windows/deployment/update/windows-update-resources.md @@ -42,16 +42,16 @@ The following resources provide additional information about using Windows Updat ## Reset Windows Update components manually 1. Open a Windows command prompt. To open a command prompt, click **Start > Run**. Copy and paste (or type) the following command and then press ENTER: - ``` + ```console cmd ``` 2. Stop the BITS service and the Windows Update service. To do this, type the following commands at a command prompt. Press ENTER after you type each command. - ``` + ```console net stop bits net stop wuauserv ``` 3. Delete the qmgr\*.dat files. To do this, type the following command at a command prompt, and then press ENTER: - ``` + ```console Del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat" ``` 4. If this is your first attempt at resolving your Windows Update issues by using the steps in this article, go to step 5 without carrying out the steps in step 4. The steps in step 4 should only be performed at this point in the troubleshooting if you cannot resolve your Windows Update issues after following all steps but step 4. The steps in step 4 are also performed by the "Aggressive" mode of the Fix it Solution above. @@ -73,12 +73,12 @@ The following resources provide additional information about using Windows Updat sc.exe sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU) ``` 5. Type the following command at a command prompt, and then press ENTER: - ``` + ```console cd /d %windir%\system32 ``` 6. Reregister the BITS files and the Windows Update files. To do this, type the following commands at a command prompt. Press ENTER after you type each command. - ``` + ```console regsvr32.exe atl.dll regsvr32.exe urlmon.dll regsvr32.exe mshtml.dll @@ -118,20 +118,20 @@ The following resources provide additional information about using Windows Updat ``` 7. Reset Winsock. To do this, type the following command at a command prompt, and then press ENTER: - ``` + ```console netsh winsock reset ``` 8. If you are running Windows XP or Windows Server 2003, you have to set the proxy settings. To do this, type the following command at a command prompt, and then press ENTER: - ``` + ```console proxycfg.exe -d ``` 9. Restart the BITS service and the Windows Update service. To do this, type the following commands at a command prompt. Press ENTER after you type each command. - ``` + ```console net start bits net start wuauserv ``` 10. If you are running Windows Vista or Windows Server 2008, clear the BITS queue. To do this, type the following command at a command prompt, and then press ENTER: - ``` + ```console bitsadmin.exe /reset /allusers ``` From f1a628d11b63501087ade8ba914e10b699b0ba39 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 15 Jun 2020 10:21:23 -0700 Subject: [PATCH 068/145] fixing links --- .../threat-protection/microsoft-defender-atp/review-alerts.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md index b466653ed7..77259f849c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -93,7 +93,6 @@ When making the move to the new alert page you will notice that we have centrali ## Related topics -- [Incidents overview](incidents-overview.md) +- [View and organize the incidents queue](view-incidents-queue.md) - [Investigate incidents](investigate-incidents.md) -- [Prioritize incidents](incident-queue.md) - [Manage incidents](manage-incidents.md) \ No newline at end of file From 3894a42ea3f6646edb2ed8e05fc0415087e6cdc2 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 15 Jun 2020 10:24:28 -0700 Subject: [PATCH 069/145] adding video --- .../threat-protection/microsoft-defender-atp/review-alerts.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md index 77259f849c..068d302539 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -91,6 +91,10 @@ If you are experiencing a false alert with a line-of-business application, creat When making the move to the new alert page you will notice that we have centralized information from the alert process tree, the incident graph, and the artifact timeline into the [alert story](#investigate-using-the-alert-story), with some information available through the [affected assets](#review-affected-assets) section. Any additional information has been consolidated into the details pane for the relevant entities. +## Video overview of the new alert page + +[!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4yiO5] + ## Related topics - [View and organize the incidents queue](view-incidents-queue.md) From e300ab6f5604e2d20d104aa8fa0753068bb4bb97 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Mon, 15 Jun 2020 10:44:05 -0700 Subject: [PATCH 070/145] pencil edit --- windows/deployment/update/windows-update-troubleshooting.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-update-troubleshooting.md b/windows/deployment/update/windows-update-troubleshooting.md index ed26f9246b..967245b7d0 100644 --- a/windows/deployment/update/windows-update-troubleshooting.md +++ b/windows/deployment/update/windows-update-troubleshooting.md @@ -162,7 +162,7 @@ Check that your device can access these Windows Update endpoints: - `http://wustat.windows.com` - `http://ntservicepack.microsoft.com` - White these endpoints for future use. + Allow these endpoints for future use. ## Updates aren't downloading from the intranet endpoint (WSUS or Configuration Manager) Windows 10 devices can receive updates from a variety of sources, including Windows Update online, a Windows Server Update Services server, and others. To determine the source of Windows Updates currently being used on a device, follow these steps: From ef4d801f4ae366e6f137ba848d49abde91884b89 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 15 Jun 2020 10:53:44 -0700 Subject: [PATCH 071/145] pushing out a toc fix --- windows/security/threat-protection/TOC.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 76ee1d85a4..b8f3f6b5be 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -60,7 +60,6 @@ ##### [System integrity](windows-defender-system-guard/system-guard-how-hardware-based-root-of-trust-helps-protect-windows.md) - #### [Device control]() ##### [Code integrity](device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) ##### [Control USB devices](device-control/control-usb-devices-using-intune.md) @@ -264,7 +263,7 @@ #### [Alerts queue]() ##### [View and organize the Alerts queue](microsoft-defender-atp/alerts-queue.md) -##### [Review alerts](windows/security/threat-protection/microsoft-defender-atp/review-alerts.md) +##### [Review alerts](microsoft-defender-atp/review-alerts.md) ##### [Manage alerts](microsoft-defender-atp/manage-alerts.md) ##### [Investigate alerts](microsoft-defender-atp/investigate-alerts.md) ##### [Investigate files](microsoft-defender-atp/investigate-files.md) From 624d465c86a81147813c79d68e7a1bbd4fe5bc98 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 15 Jun 2020 10:56:23 -0700 Subject: [PATCH 072/145] fixing video --- .../threat-protection/microsoft-defender-atp/review-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md index 068d302539..4499b07fc0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -93,7 +93,7 @@ When making the move to the new alert page you will notice that we have centrali ## Video overview of the new alert page -[!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4yiO5] +> [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4yiO5] ## Related topics From 129e7a8b4fa444e6d88655506bb99cdd9d1a4861 Mon Sep 17 00:00:00 2001 From: J Whitmarsh Date: Mon, 15 Jun 2020 12:20:54 -0700 Subject: [PATCH 073/145] Update index.yml --- windows/deployment/index.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml index 5d453feee8..b0afe7fbf2 100644 --- a/windows/deployment/index.yml +++ b/windows/deployment/index.yml @@ -57,15 +57,15 @@ landingContent: url: update/waas-servicing-strategy-windows-10-updates.md # Card - - title: Deploy with Autopilot + - title: Keep current linkLists: - linkListType: overview links: - - text: Learn about Autopilot + - text: ADD HERE url: windows-autopilot/windows-autopilot-scenarios.md - - text: Deploy with Autopilot + - text: ADD HERE url: windows-autopilot/windows-autopilot-scenarios.md - - text: Deploy with Autopilot poster + - text: ADD HERE url: https://docs.microsoft.com/windows/deployment/windows-10-deployment-posters#deploy-windows-10-with-autopilot # Card From 5e9dfae7a20ca80a137812a5112fa212b79c5a3d Mon Sep 17 00:00:00 2001 From: J Whitmarsh Date: Mon, 15 Jun 2020 12:21:54 -0700 Subject: [PATCH 074/145] Update index.yml --- windows/deployment/index.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml index b0afe7fbf2..3a30588fee 100644 --- a/windows/deployment/index.yml +++ b/windows/deployment/index.yml @@ -49,12 +49,12 @@ landingContent: linkLists: - linkListType: overview links: + - text: Deploy with Autopilot + url: windows-autopilot/windows-autopilot-scenarios.md - text: Deploy with Endpoint Manager url: update/create-deployment-plan.md - text: Deploy Windows updates url: update/eval-infra-tools.md - - text: Manage the update experience - url: update/waas-servicing-strategy-windows-10-updates.md # Card - title: Keep current From c3f375577097d4b2851d2f11dbd67ba741119e86 Mon Sep 17 00:00:00 2001 From: v-jodben <65978782+v-jodben@users.noreply.github.com> Date: Mon, 15 Jun 2020 15:34:44 -0500 Subject: [PATCH 075/145] Update hololens-recovery.md updated content based on new recovery/reset doc --- devices/hololens/hololens-recovery.md | 154 ++++++++------------------ 1 file changed, 47 insertions(+), 107 deletions(-) diff --git a/devices/hololens/hololens-recovery.md b/devices/hololens/hololens-recovery.md index 8ef5f12b0a..9823d26b97 100644 --- a/devices/hololens/hololens-recovery.md +++ b/devices/hololens/hololens-recovery.md @@ -19,150 +19,90 @@ appliesto: - HoloLens 2 --- -# Restart, reset, or recover HoloLens +# Charging the device (before troubleshooting) -If you're experiencing problems with your HoloLens you may want to try a restart, reset, or even re-flash with device recovery. +Before starting any troubleshooting procedure, if possible, ensure that your device is charged at least between 20% and 40%. -Here are some things to try if your HoloLens isn't running well. This article will guide you through the recommended recovery steps in succession. - -This article focuses on the HoloLens device and software, if your holograms don't look right, [this article](hololens-environment-considerations.md) talks about environmental factors that improve hologram quality. - -## Restart your HoloLens - -First, try restarting the device. - -### Perform a safe restart by using Cortana - -The safest way to restart the HoloLens is by using Cortana. This is generally a great first-step when experiencing an issue with HoloLens: - -1. Put on your device -1. Make sure it's powered on, a user is logged in, and the device is not waiting for a password to unlock it. -1. Say "Hey Cortana, reboot" or "Hey Cortana, restart." -1. When she acknowledges she will ask you for confirmation. Wait a second for a sound to play after she has finished her question, indicating she is listening to you and then say "Yes." -1. The device will now restart. - -### Perform a safe restart by using the power button - -If you still can't restart your device, you can try to restart it by using the power button: - -1. Press and hold the power button for five seconds. - 1. After one second, you will see all five LEDs illuminate, then slowly turn off from right to left. - 1. After five seconds, all LEDs will be off, indicating the shutdown command was issued successfully. - 1. Note that it's important to stop pressing the button immediately after all the LEDs have turned off. -1. Wait one minute for the shutdown to cleanly succeed. Note that the shutdown may still be in progress even if the displays are turned off. -1. Power on the device again by pressing and holding the power button for one second. - -### Perform a safe restart by using Windows Device Portal +Please ensure you are using the charger and the USB Type-C cables that come with the HoloLens2 device. In case they are not available ensure the charger available can support at least 15W of power. > [!NOTE] -> To do this, HoloLens has to be configured as a developer device. -> Read more about [Windows Device Portal](https://docs.microsoft.com/windows/mixed-reality/using-the-windows-device-portal). +If possible, do not use a PC to charge the device over USB as this will provide a very slow charge. -If the previous procedure doesn't work, you can try to restart the device by using [Windows Device Portal](https://docs.microsoft.com/windows/mixed-reality/using-the-windows-device-portal). In the upper right corner, there is an option to restart or shut down the device. +If the device is correctly booted and running there are three different ways of checking the charge of your battery. -### Perform an unsafe forced restart +1. From the main menu of the HoloLens Device UI. +2. Using the LED close to the power button (for 40% you should see at least two solid LEDS). +3. On your Host PC open File Explorer window and look for your HoloLens 2 device on left side under “This PC”. + + a. Right click on the name of the device and select properties. A dialog will appear showing the battery level for your device. -If none of the previous methods are able to successfully restart your device, you can force a restart. This method is equivalent to pulling the battery from the HoloLens. It is a dangerous operation which may leave your device in a corrupt state. If that happens, you'll have to flash your HoloLens. +![HoloLens 2 ResetRecovery](images/ResetRecovery2.png) -> [!WARNING] -> This is a potentially harmful method and should only be used in the event none of the above methods work. +If the device cannot be booted to the Startup Menu, please take note of the LEDs and enumeration on the host PC and follow the troubleshooting guide (https://docs.microsoft.com/en-us/hololens/hololens-troubleshooting). In case the state of the device does not fall in any of the states listed in the troubleshooting guide, execute the **hard reset procedure** without reconnecting the device to your host PC, but connect it instead to the power supply. Wait for at least one hour for the device to charge. -1. Press and hold the power button for at least 10 seconds. +## Reset the device - - It's okay to hold the button for longer than 10 seconds. - - It's safe to ignore any LED activity. -1. Release the button and wait for two or three seconds. -1. Power on the device again by pressing and holding the power button for one second. -If you're still having problems, press the power button for 4 seconds, until all of the battery indicators fade out and the screen stops displaying holograms. Wait 1 minute, then press the power button again to turn on the device. +Under certain circumstances the customer may be required to manually reset the device without using the SW UI. -## Reset to factory settings +**Standard procedure** +1. Disconnect the device from the power supply or the host PC by unplugging the Type-C cable. -> [!NOTE] -> The battery needs at least 40 percent charge to reset. +2. Press and hold the power button for 15 seconds. All LEDs should be off. -If your HoloLens is still experiencing issues after restarting, try resetting it to factory state. Resetting your HoloLens keeps the version of the Windows Holographic software that's installed on it and returns everything else to factory settings. +3. Wait 2-3 seconds and Short press the power button, the LEDs close to the power button will light up and the device will start to boot. -If you reset your device, all your personal data, apps, and settings will be erased, including TPM reset. Resetting will only install the latest installed version of Windows Holographic and you will have to redo all the initialization steps (calibrate, connect to Wi-Fi, create a user account, download apps, and so forth). +4. Connect the device to the host PC, open Device Manager (for Windows 10 press the “Windows” key and then the “x” key and click on “Device Manager”) and make sure the device enumerates correctly as Microsoft HoloLens as shown in the pictures below: -1. Launch the Settings app, and then select **Update** > **Reset**. -1. Select the **Reset device** option and read the confirmation message. -1. If you agree to reset your device, the device will restart and display a set of spinning gears with a progress bar. -1. Wait about 30 minutes for this process to complete. -1. The reset will complete and the device will restart into the out-of-the-box experience. +![HoloLens 2 MicrosoftHoloLensRecovery](images/MicrosoftHoloLensRecovery.png) -## Re-install the operating system +**Hard-reset procedure** -If the device is still having a problem after rebooting and resetting, you can use a recovery tool on your computer to reinstall the HoloLens' operating system and firmware. +If the standard reset procedure does not work, you can use the hard-reset procedure. -HoloLens (1st gen) and HoloLens 2 use different tools but both tools will auto-detect your HoloLens and install new software. +1. Disconnect the device from the power supply or the host PC by unplugging the Type-C cable. -All of the data HoloLens needs to reset is packaged in a Full Flash Update (ffu). This is similar to an iso, wim, or vhd. [Learn about FFU image file formats.](https://docs.microsoft.com/windows-hardware/manufacture/desktop/wim-vs-ffu-image-file-formats) +2. Hold volume down + power for 15 seconds. -### HoloLens 2 +3. The device will automatically reboot. -The Advanced Recovery Companion is a new app in Microsoft Store restore the operating system image to your HoloLens 2 device. Advanced Recovery Companion erases all your personal data, apps, and settings, and resets TPM. +4. Connect the device to the host PC, open Device Manager (for Windows 10 press the “Windows” key and then the “x” key and click on “Device Manager”) and make sure the device enumerates correctly as Microsoft HoloLens as shown in the pictures below. -1. On your computer, get [Advanced Recovery Companion](https://www.microsoft.com/p/advanced-recovery-companion/9p74z35sfrs8?activetab=pivot:overviewtab) from Microsoft Store. -2. Connect HoloLens 2 to your computer. -3. Start Advanced Recovery Companion. -4. On the **Welcome** page, select your device. -5. On the **Device info** page, select **Install software** to install the default package. (If you have a Full Flash Update (FFU) image that you want to install instead, select **Manual package selection**.) -6. Software installation will begin. Do not use the device or disconnect the cable during installation. When you see the **Installation finished** page, you can disconnect and use your device. +![HoloLens 2 MicrosoftHoloLensRecovery](images/MicrosoftHoloLensRecovery.png) -#### Manual flashing mode +## Clean reflash the device -> [!TIP] -> In the event that a HoloLens 2 gets into a state where Advanced Recovery Companion cannot recognize the device, and it does not boot, try forcing the device into Flashing Mode and recovering it with Advanced Recovery Companion: +In extraordinary situations you may be required to clean flash the device. There are two ways to reflash a HoloLens2 device. For all reflashing procedures you will be required to install the Advanced Recovery Companion app from the Windows Store. If you reset your device, all your personal data, apps, and settings will be erased, including TPM reset. -1. Connect the HoloLens 2 to a PC with Advanced Recovery Companion installed. -1. Press and hold the **Volume Up and Power buttons** until the device reboots. Release the Power button, but continue to hold the Volume Up button until the third LED is lit. -1. The device should be visible in **Device Manager** as a **Microsoft HoloLens Recovery** device. -1. Launch Advanced Recovery Companion, and follow the on-screen prompts to reflash the OS to the HoloLens 2. +Before starting the flashing procedure make sure the app is installed and running (https://www.microsoft.com/store/productId/9P74Z35SFRS8 ) on your Windows 10 PC and ready to detect the device. -#### Downloading ARC without using the app store +![HoloLens 2 Clean Reflash](images/ARC1.png) -If an IT environment prevents the use of the Windows Store app or limits access to the retail store, IT administrators can make this app available through other ‘offline’ deployment paths. +**Normal procedure** -- This process may also be used for other apps, as seen in step 2. This guide will focus on Advanced Recovery Companion, but my be modified for other offline apps. +1. While the HoloLens device is running, connect it to your Windows 10 PC where you previously launched the Advanced Recovery Companion App. -This deployment path can be enabled with the following steps: -1. Go to the [Store For Business website](https://businessstore.microsoft.com) and sign-in with an Azure AD identity. -1. Go to **Manage – Settings**, and turn on **Show offline apps** under **Shopping experience** as described at https://businessstore.microsoft.com/manage/settings/shop -1. Go to **shop for my group** and search for the [Advanced Recovery Companion](https://businessstore.microsoft.com/store/details/advanced-recovery-companion/9P74Z35SFRS8) app. -1. Change the **License Type** box to offline and click **Manage**. -1. Under Download the package for offline use click the second blue **“Download”** button . Ensure the file extension is .appxbundle. -1. At this stage, if the Desktop PC has Internet access, simply double click and install. -1. The IT administrator can also distribute this app through System Center Configuration Manager (SCCM) or Intune. -1. If the target PC has no Internet connectivity, some additional steps are needed: - 1. Select the unencoded license and click **“Generate license”** and under **“Required Frameworks”** click **“Download.”** - 1. PCs without internet access will need to use DISM to apply the package with the dependency and license. In an administrator command prompt, type: +2. The device will automatically be detected and the Advanced Recovery Companion App UI will update as follows: - ```console - C:\WINDOWS\system32>dism /online /Add-ProvisionedAppxPackage /PackagePath:"C:\ARCoffline\Microsoft.AdvancedRecoveryCompanion_1.19050.1301.0_neutral_~_8wekyb3d8bbwe.appxbundle" /DependencyPackagePath:"C:\ARCoffline\Microsoft.VCLibs.140.00.UWPDesktop_14.0.27629.0_x86__8wekyb3d8bbwe.appx" /LicensePath:"C:\ARCoffline\Microsoft.AdvancedRecoveryCompanion_8wekyb3d8bbwe_f72ce112-dd2e-d771-8827-9cbcbf89f8b5.xml" /Region:all - ``` -> [!NOTE] -> The version number in this code example may not match the currently avalible version. You may have also choosen a different download location than in the example given. Please make sure to make any changes as needed. +![HoloLens 2 Clean Reflash](images/ARC2.png) -> [!TIP] -> When planning to use Advanced Recovery Companion to install an ffu offline it may be useful to download your flashing image to be availible, here is the [current image for HoloLens 2](https://aka.ms/hololens2download). +3. Select the HoloLens2 device in the Advanced Recovery Companion App UI and follow the instructions to complete the flashing. -Other resources: -- https://docs.microsoft.com/microsoft-store/distribute-offline-apps -- https://docs.microsoft.com/windows-hardware/manufacture/desktop/dism-app-package--appx-or-appxbundle--servicing-command-line-options +**Manual procedure** +If the device does not boot correctly you may need to put the HoloLens 2 device in Recovery mode. -### HoloLens (1st gen) +1. Disconnect the device from the power supply or the host PC by unplugging the Type-C cable. -If necessary, you can install a completely new operating system on your HoloLens (1st gen) with the Windows Device Recovery Tool. +2. Press and hold the power button for 15 seconds. All LEDs should turn off. -Before you use this tool, determine if restarting or resetting your HoloLens fixes the problem. The recovery process may take some time. When you're done, the latest version of the Windows Holographic software approved for your HoloLens will be installed. +3. While pressing the volume up button, press and release the power button to boot the device. Wait 10 seconds before releasing the volume up button. Out of the 5 LEDs on the device, only the middle LED will light up. -To use the tool, you'll need a computer running Windows 10 or later, with at least 4 GB of free storage space. Please note that you can't run this tool on a virtual machine. +4. Connect the device to the host PC, open Device Manager (for Windows 10 press the “Windows” key and then the “x” key and click on “Device Manager”) and make sure the device enumerates correctly as Microsoft HoloLens as shown in the image below. -To recover your HoloLens +![HoloLens 2 MicrosoftHoloLensRecovery](images/MicrosoftHoloLensRecovery.png) -1. Download and install the [Windows Device Recovery Tool](https://support.microsoft.com/help/12379/windows-10-mobile-device-recovery-tool-faq) on your computer. -1. Connect the HoloLens (1st gen) to your computer using the Micro USB cable that came with your HoloLens. -1. Run the Windows Device Recovery Tool and follow the instructions. +5. The device will be automatically detected, and the Advanced Recovery Companion app UI will update as follows: -If the HoloLens (1st gen) isn't automatically detected, select **My device was not detected** and follow the instructions to put your device into recovery mode. +![HoloLens 2 Clean Reflash](images/ARC2.png) + +6. Select the HoloLens 2 device in the Advanced Recovery Companion app UI and follow the instructions to complete the flashing. From e3598614acc20ce37591d9492d8844b65d0cab3b Mon Sep 17 00:00:00 2001 From: ErikMoreau Date: Mon, 15 Jun 2020 22:54:58 +0200 Subject: [PATCH 076/145] Update mac-install-manually.md fixed Commands to enable the copy button & paste to work in terminal window without the need to remove leading $ or results in the command boxes --- .../microsoft-defender-atp/mac-install-manually.md | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-install-manually.md b/windows/security/threat-protection/microsoft-defender-atp/mac-install-manually.md index ebaa93dac7..1a2de2881f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-install-manually.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-install-manually.md @@ -81,21 +81,19 @@ The installation proceeds. The client machine is not associated with orgId. Note that the *orgId* attribute is blank. ```bash - $ mdatp --health orgId + mdatp --health orgId ``` 2. Run the Python script to install the configuration file: ```bash - $ /usr/bin/python MicrosoftDefenderATPOnboardingMacOs.py - Generating /Library/Application Support/Microsoft/Defender/com.microsoft.wdav.atp.plist ... (You may be required to enter sudos password) + /usr/bin/python MicrosoftDefenderATPOnboardingMacOs.py ``` 3. Verify that the machine is now associated with your organization and reports a valid *orgId*: ```bash - $ mdatp --health orgId - E6875323-A6C0-4C60-87AD-114BBE7439B8 + mdatp --health orgId ``` After installation, you'll see the Microsoft Defender icon in the macOS status bar in the top-right corner. From 3f39c23d9d7ec7e4d3ab601229377a1ca5a9fa8a Mon Sep 17 00:00:00 2001 From: v-jodben <65978782+v-jodben@users.noreply.github.com> Date: Mon, 15 Jun 2020 16:08:19 -0500 Subject: [PATCH 077/145] Update hololens-recovery.md removed /en/ directory from Line 41 --- devices/hololens/hololens-recovery.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens-recovery.md b/devices/hololens/hololens-recovery.md index 9823d26b97..f6b5fff191 100644 --- a/devices/hololens/hololens-recovery.md +++ b/devices/hololens/hololens-recovery.md @@ -38,7 +38,7 @@ If the device is correctly booted and running there are three different ways of ![HoloLens 2 ResetRecovery](images/ResetRecovery2.png) -If the device cannot be booted to the Startup Menu, please take note of the LEDs and enumeration on the host PC and follow the troubleshooting guide (https://docs.microsoft.com/en-us/hololens/hololens-troubleshooting). In case the state of the device does not fall in any of the states listed in the troubleshooting guide, execute the **hard reset procedure** without reconnecting the device to your host PC, but connect it instead to the power supply. Wait for at least one hour for the device to charge. +If the device cannot be booted to the Startup Menu, please take note of the LEDs and enumeration on the host PC and follow the troubleshooting guide (https://docs.microsoft.com/hololens/hololens-troubleshooting). In case the state of the device does not fall in any of the states listed in the troubleshooting guide, execute the **hard reset procedure** without reconnecting the device to your host PC, but connect it instead to the power supply. Wait for at least one hour for the device to charge. ## Reset the device From 51b90d054ab017b13751c4d0113f4efaf2f32552 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 15 Jun 2020 14:11:19 -0700 Subject: [PATCH 078/145] update link to recovery page --- devices/hololens/hololens-FAQ.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens-FAQ.md b/devices/hololens/hololens-FAQ.md index 38964c7a7d..0c2a033d11 100644 --- a/devices/hololens/hololens-FAQ.md +++ b/devices/hololens/hololens-FAQ.md @@ -239,7 +239,7 @@ If your device was previously set up for someone else, either for a client or fo - For a device that is enrolled in Intune mobile device management (MDM), you can use Intune to remotely [wipe](https://docs.microsoft.com/intune/remote-actions/devices-wipe) the device. The device then re-flashes itself. > [!IMPORTANT] > When you wipe the device, make sure to leave **Retain enrollment state and user account** unchecked. -- For a non-MDM device, you can [put the device into **Flashing Mode** and use Advanced Recovery Companion](hololens-recovery.md#re-install-the-operating-system) to recover the device. +- For a non-MDM device, you can [put the device into **Flashing Mode** and use Advanced Recovery Companion](hololens-recovery.md#clean-reflash-the-device) to recover the device. [Back to list](#list) From 7a106b701be0a21c2720420cb216a89b605632ab Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 15 Jun 2020 14:14:18 -0700 Subject: [PATCH 079/145] update link to recovery page --- devices/hololens/hololens2-setup.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens2-setup.md b/devices/hololens/hololens2-setup.md index 79189a7cf6..15327915f5 100644 --- a/devices/hololens/hololens2-setup.md +++ b/devices/hololens/hololens2-setup.md @@ -104,7 +104,7 @@ Not sure what the indicator lights on your HoloLens mean? Want to know how HoloL | - | - | - | | You press the Power button. | One light flashes five times, then turns off. | The HoloLens battery is critically low. Charge your HoloLens. | | You press the Power button. | All five lights flash five times, then turn off. | HoloLens cannot start correctly and is in an error state. [Reinstall the operating system](hololens-recovery.md) to recover your device. | -| You press the Power button. | The 1st, 3rd, and 5th lights flash together continually. | HoloLens may have a hardware failure. To be sure, [reinstall the OS](hololens-recovery.md#hololens-2), and try again. After reinstalling the OS, if the light-flash pattern persists, contact [support](https://support.microsoft.com/en-us/supportforbusiness/productselection?sapid=3ec35c62-022f-466b-3a1e-dbbb7b9a55fb). | +| You press the Power button. | The 1st, 3rd, and 5th lights flash together continually. | HoloLens may have a hardware failure. To be sure, [reinstall the OS](hololens-recovery.md), and try again. After reinstalling the OS, if the light-flash pattern persists, contact [support](https://support.microsoft.com/en-us/supportforbusiness/productselection?sapid=3ec35c62-022f-466b-3a1e-dbbb7b9a55fb). | ## Safety and comfort From bb62a8fa380873de7d2cfe94e5dca7069c2aebea Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 15 Jun 2020 14:23:27 -0700 Subject: [PATCH 080/145] Create hololens1-recovery.md --- devices/hololens/hololens1-recovery.md | 127 +++++++++++++++++++++++++ 1 file changed, 127 insertions(+) create mode 100644 devices/hololens/hololens1-recovery.md diff --git a/devices/hololens/hololens1-recovery.md b/devices/hololens/hololens1-recovery.md new file mode 100644 index 0000000000..dafeebe18e --- /dev/null +++ b/devices/hololens/hololens1-recovery.md @@ -0,0 +1,127 @@ +--- +title: Restart, reset, or recover HoloLens 1 +ms.reviewer: Both basic and advanced instructions for rebooting or resetting your HoloLens. +description: How to use Windows Device Recovery Tool to flash an image to HoloLens 1st Gen. +keywords: how-to, reboot, reset, recover, hard reset, soft reset, power cycle, HoloLens, shut down, wdrt, windows device recovery tool +ms.prod: hololens +ms.sitesec: library +author: evmill +ms.author: v-evmill +ms.date: 06/01/2020 +ms.custom: +- CI 111456 +- CSSTroubleshooting +ms.topic: article +ms.localizationpriority: high +manager: yannisle +appliesto: +- HoloLens (1st gen) +--- + +# Restart, reset, or recover HoloLens 1st Gen + +If you're experiencing problems with your HoloLens you may want to try a restart, reset, or even re-flash with device recovery. + +Here are some things to try if your HoloLens isn't running well. This article will guide you through the recommended recovery steps in succession. + +If you are looking to recover a HoloLens 2, please view the page for [Recovering a HoloLens 2](https://docs.microsoft.com/hololens/hololens-recovery), as there are differences in the processes. + +This article focuses on the HoloLens device and software, if your holograms don't look right, [this article](hololens-environment-considerations.md) talks about environmental factors that improve hologram quality. + +## Restart + +### Perform a safe restart by using Cortana + +The safest way to restart the HoloLens is by using Cortana. This is generally an easy first-step when experiencing an issue with HoloLens. + +> [!NOTE] +> Cortana is not avalible on all devices. +> Cortana is avalible to all HoloLens (1st Gen) devices. +> Cortana is avalible on HoloLens 2 devices on a build prior to the Windows Holograpic, Version 2004 update. + +1. Put on your device +1. Make sure it's powered on, a user is logged in, and the device is not waiting for a password to unlock it. +1. Say "Hey Cortana, reboot" or "Hey Cortana, restart." +1. When she acknowledges she will ask you for confirmation. Wait a second for a sound to play after she has finished her question, indicating she is listening to you and then say "Yes." +1. The device will now restart. + +### Perform a safe restart by using the power button + +If you still can't restart your device, you can try to restart it by using the power button: + +1. Press and hold the power button for five seconds. + 1. After one second, you will see all five LEDs illuminate, then slowly turn off from right to left. + 1. After five seconds, all LEDs will be off, indicating the shutdown command was issued successfully. + 1. Note that it's important to stop pressing the button immediately after all the LEDs have turned off. +1. Wait one minute for the shutdown to cleanly succeed. Note that the shutdown may still be in progress even if the displays are turned off. +1. Power on the device again by pressing and holding the power button for one second. + +### Perform a safe restart by using Windows Device Portal + +> [!NOTE] +> To do this, HoloLens has to be configured as a developer device. +> Read more about [Windows Device Portal](https://docs.microsoft.com/windows/mixed-reality/using-the-windows-device-portal). + +If the previous procedure doesn't work, you can try to restart the device by using [Windows Device Portal](https://docs.microsoft.com/windows/mixed-reality/using-the-windows-device-portal). In the upper right corner, there is an option to restart or shut down the device. + +### Perform an unsafe forced restart + +If none of the previous methods are able to successfully restart your device, you can force a restart. This method is equivalent to pulling the battery from the HoloLens. It is a dangerous operation which may leave your device in a corrupt state. If that happens, you'll have to flash your HoloLens. + +> [!WARNING] +> This is a potentially harmful method and should only be used in the event none of the above methods work. + +1. Press and hold the power button for at least 10 seconds. + - It's okay to hold the button for longer than 10 seconds. + - It's safe to ignore any LED activity. +1. Release the button and wait for two or three seconds. +1. Power on the device again by pressing and holding the power button for one second. +If you're still having problems, press the power button for 4 seconds, until all of the battery indicators fade out and the screen stops displaying holograms. Wait 1 minute, then press the power button again to turn on the device. + +## Reset to factory settings + +> [!NOTE] +> The battery needs at least 40 percent charge to reset. + +If your HoloLens is still experiencing issues after restarting, try resetting it to factory state. Resetting your HoloLens keeps the version of the Windows Holographic software that's installed on it and returns everything else to factory settings. + +If you reset your device, all your personal data, apps, and settings will be erased, including TPM reset. Resetting will only install the latest installed version of Windows Holographic and you will have to redo all the initialization steps (calibrate, connect to Wi-Fi, create a user account, download apps, and so forth). + +1. Launch the Settings app, and then select **Update** > **Reset**. +1. Select the **Reset device** option and read the confirmation message. +1. If you agree to reset your device, the device will restart and display a set of spinning gears with a progress bar. +1. Wait about 30 minutes for this process to complete. +1. The reset will complete and the device will restart into the out-of-the-box experience. + +## Re-install the operating system + +If the device is still having a problem after rebooting and resetting, you can use a recovery tool on your computer to reinstall the HoloLens' operating system and firmware. + +All of the data HoloLens needs to reset is packaged in a Full Flash Update (ffu). This is similar to an iso, wim, or vhd. [Learn about FFU image file formats.](https://docs.microsoft.com/windows-hardware/manufacture/desktop/wim-vs-ffu-image-file-formats) + +If necessary, you can install a completely new operating system on your HoloLens (1st gen) with the Windows Device Recovery Tool. + +Before you use this tool, determine if restarting or resetting your HoloLens fixes the problem. The recovery process may take some time. When you're done, the latest version of the Windows Holographic software approved for your HoloLens will be installed. + +To use the tool, you'll need a computer running Windows 10 or later, with at least 4 GB of free storage space. Please note that you can't run this tool on a virtual machine. + +### Recover your HoloLens: + +1. Download and install the [Windows Device Recovery Tool](https://support.microsoft.com/help/12379/windows-10-mobile-device-recovery-tool-faq) on your computer. +1. Connect the HoloLens (1st gen) to your computer using the Micro USB cable that came with your HoloLens. +1. Run the Windows Device Recovery Tool and follow the instructions. + +If the HoloLens (1st gen) isn't automatically detected, select **My device was not detected** and follow the instructions to put your device into recovery mode. + +### Manual Flashing Mode: + +In the event that your device is not being detected please use the following method to manually place it into flashing mode. + +1. Unplug the device from all power sources. +1. If the device is on please hold down the power button until it is completely off. +1. Hold the **Volume Up** button, and breifly tap the **Power button**. +1. The device should boot and then display only the middle LED light. +1. Plug the device into your PC. +1. Launch Windows Device Recovery Tool. +1. You will need to select *My device was not detected**, and then select **HoloLens**. +1. Follow the instructions to recover your device. From 29838636f12f2684a7d6c086dded45d9c38a9e3c Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 15 Jun 2020 14:25:02 -0700 Subject: [PATCH 081/145] add hl1 recovery to TOC --- devices/hololens/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/devices/hololens/TOC.md b/devices/hololens/TOC.md index cb44c5b311..14021740e8 100644 --- a/devices/hololens/TOC.md +++ b/devices/hololens/TOC.md @@ -58,6 +58,7 @@ # Update, troubleshoot, or recover HoloLens ## [Update HoloLens](hololens-update-hololens.md) ## [Restart, reset, or recover HoloLens](hololens-recovery.md) +## [Restart, reset, or recover HoloLens 1st Gen](hololens1-recovery.md) ## [Troubleshoot HoloLens issues](hololens-troubleshooting.md) ## [Collect diagnostic information from HoloLens devices](hololens-diagnostic-logs.md) ## [Known issues for HoloLens](hololens-known-issues.md) From 63dea0fc624e30749d5efa9245d7f4b6d310bfd7 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Mon, 15 Jun 2020 14:39:22 -0700 Subject: [PATCH 082/145] Add aka.ms download to top of release notes. --- devices/hololens/hololens-release-notes.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/devices/hololens/hololens-release-notes.md b/devices/hololens/hololens-release-notes.md index 38e382a7b6..e6bd017294 100644 --- a/devices/hololens/hololens-release-notes.md +++ b/devices/hololens/hololens-release-notes.md @@ -20,6 +20,10 @@ appliesto: # HoloLens 2 release notes +If you would like to download the latest HoloLens 2 FFU to flash a your HoloLens 2 via Advanced Recovery Companion then you may download it from [here](https://aka.ms/hololens2download). This is kept up to date and will match the latest generally avalible build. + +HoloLens Emulator Release Notes can be found [here](https://docs.microsoft.com/windows/mixed-reality/hololens-emulator-archive). + ## Windows Holographic, version 2004 - June 2020 Update - Build 19041.1106 @@ -80,9 +84,6 @@ We are excited to announce our May 2020 major software update for HoloLens 2, ** | Hand Tracking improvements | Hand Tracking improvements make buttons and 2D slate interactions more accurate | | Quality improvements and fixes | Various system performance and reliability improvements across the platform | -> [!Note] -> HoloLens Emulator Release Notes can be found [here](https://docs.microsoft.com/windows/mixed-reality/hololens-emulator-archive). - ### Support for Windows Autopilot Windows Autopilot for HoloLens 2 lets the device sales channel pre-enroll HoloLens into your Intune tenant. When devices arrive, they’re ready to self-deploy as shared devices under your tenant. To take advantage of self-deployment, devices will need to connect to a network during the first screen in setup using either a USB-C to ethernet dongle or USB-C to LTE dongle. From cd23319dfeb3cbaf989b117cbdd9789fdaa43a91 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Mon, 15 Jun 2020 15:00:08 -0700 Subject: [PATCH 083/145] Update hub-teams-app.md --- devices/surface-hub/hub-teams-app.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/devices/surface-hub/hub-teams-app.md b/devices/surface-hub/hub-teams-app.md index ecc0410e36..d3350b4c38 100644 --- a/devices/surface-hub/hub-teams-app.md +++ b/devices/surface-hub/hub-teams-app.md @@ -7,6 +7,7 @@ ms.sitesec: library author: greglin ms.author: greglin ms.topic: article +ms.date: 06/15/2020 ms.localizationpriority: medium --- @@ -18,6 +19,6 @@ The Microsoft Teams app for Surface Hub is periodically updated and available vi ## Version history | **Store app version** | **Updates** | **Published to Microsoft Store** | | --------------------- | --------------------------------------------------------------------------------------------------- | -------------------------------- | -| 0.2020.13201.0 | - 3x3 Gallery view on Surface Hub
- Ability to search for External users | June 10, 2020
**** | -| 0.2020.13201 | - Quality improvements and Bug fixes | June 1, 2020
**** | +| 0.2020.13201.0 | - 3x3 Gallery view on Surface Hub
- Ability to search for External users | June 10, 2020
| +| 0.2020.13201 | - Quality improvements and Bug fixes | June 1, 2020
| | 0.2020.4301.0 | - Accept incoming PSTN calls on Surface Hub
- Added controls for Attendee/Presenter role changes | May 21, 2020 | \ No newline at end of file From 05b1d7a1ede9d1785e54e532aaf9d1e004d76d17 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 15 Jun 2020 16:50:08 -0700 Subject: [PATCH 084/145] Trying to fix build warning, added other fixes --- ...erated-authentication-device-enrollment.md | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/windows/client-management/mdm/federated-authentication-device-enrollment.md b/windows/client-management/mdm/federated-authentication-device-enrollment.md index 69cdc60a1c..01d4daf010 100644 --- a/windows/client-management/mdm/federated-authentication-device-enrollment.md +++ b/windows/client-management/mdm/federated-authentication-device-enrollment.md @@ -18,7 +18,7 @@ This section provides an example of the mobile device enrollment protocol using The <AuthenticationServiceURL> element the discovery response message specifies web authentication broker page start URL. -For details about the Microsoft mobile device enrollment protocol for Windows 10, see [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2]( https://go.microsoft.com/fwlink/p/?LinkId=619347). +For details about the Microsoft mobile device enrollment protocol for Windows 10, see [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2](https://go.microsoft.com/fwlink/p/?LinkId=619347). ## In this topic @@ -32,7 +32,7 @@ For the list of enrollment scenarios not supported in Windows 10, see [Enrollme The discovery web service provides the configuration information necessary for a user to enroll a phone with a management service. The service is a restful web service over HTTPS (server authentication only). -> [!Note] +> [!NOTE] > The administrator of the discovery service must create a host with the address enterpriseenrollment.*domain\_name*.com. The automatic discovery flow of the device uses the domain name of the email address that was submitted to the Workplace settings screen during sign in. The automatic discovery system constructs a URI that uses this hostname by appending the subdomain “enterpriseenrollment” to the domain of the email address, and by appending the path “/EnrollmentServer/Discovery.svc”. For example, if the email address is “sample@contoso.com”, the resulting URI for first Get request would be: http://enterpriseenrollment.contoso.com/EnrollmentServer/Discovery.svc @@ -41,28 +41,28 @@ The first request is a standard HTTP GET request. The following example shows a request via HTTP GET to the discovery server given user@contoso.com as the email address. -``` +```http Request Full Url: http://EnterpriseEnrollment.contoso.com/EnrollmentServer/Discovery.svc Content Type: unknown Header Byte Count: 153 Body Byte Count: 0 ``` -``` +```http GET /EnrollmentServer/Discovery.svc HTTP/1.1 User-Agent: Windows Phone 8 Enrollment Client Host: EnterpriseEnrollment.contoso.com Pragma: no-cache ``` -``` +```http Request Full Url: http://EnterpriseEnrollment.contoso.com/EnrollmentServer/Discovery.svc Content Type: text/html Header Byte Count: 248 Body Byte Count: 0 ``` -``` +```http HTTP/1.1 200 OK Connection: Keep-Alive Pragma: no-cache @@ -82,7 +82,7 @@ The following logic is applied: The following example shows a request via an HTTP POST command to the discovery web service given user@contoso.com as the email address -``` +```http https://EnterpriseEnrollment.Contoso.com/EnrollmentServer/Discovery.svc ``` @@ -127,7 +127,7 @@ The discovery response is in the XML format and includes the following fields: - Authentication policy (AuthPolicy) – Indicates what type of authentication is required. For the MDM server, OnPremise is the supported value, which means that the user will be authenticated when calling the management service URL. This field is mandatory. - In Windows, Federated is added as another supported value. This allows the server to leverage the Web Authentication Broker to perform customized user authentication, and term of usage acceptance. -> [!Note]   +> [!Note] > The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. When authentication policy is set to be Federated, Web Authentication Broker (WAB) will be leveraged by the enrollment client to get a security token. The WAB start page URL is provided by the discovery service in the response message. The enrollment client will call the WAB API within the response message to start the WAB process. WAB pages are server hosted web pages. The server should build those pages to fit the device screen nicely and be as consistent as possible to other builds in the MDM enrollment UI. The opaque security token that is returned from WAB as an endpage will be used by the enrollment client as the device security secret during the client certificate enrollment request call. @@ -163,7 +163,7 @@ After authentication is complete, the auth server should return an HTML form doc > [!NOTE] > To make an application compatible with strict Content Security Policy, it is usually necessary to make some changes to HTML templates and client-side code, add the policy header, and test that everything works properly once the policy is deployed. -``` +```html HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding @@ -294,7 +294,7 @@ After the user is authenticated, the web service retrieves the certificate templ MS-XCEP supports very flexible enrollment policies using various Complex Types and Attributes. For Windows device, we will first support the minimalKeyLength, the hashAlgorithmOIDReference policies, and the CryptoProviders. The hashAlgorithmOIDReference has related OID and OIDReferenceID and policySchema in the GetPolicesResponse. The policySchema refers to the certificate template version. Version 3 of MS-XCEP supports hashing algorithms. -> [!Note]   +> [!NOTE] > The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. The following snippet shows the policy web service response. @@ -541,7 +541,7 @@ The following example shows the enrollment web service response. The following code shows sample provisioning XML (presented in the preceding package as a security token): -``` +```xml From af4e70d5caa0f81bab2802d8d6ab315e0ad65c8c Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 15 Jun 2020 16:53:29 -0700 Subject: [PATCH 085/145] Trying to fix a build warning Suspected issue: Spaces immediately following [!NOTE] on the same line --- windows/client-management/mdm/mobile-device-enrollment.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/mobile-device-enrollment.md b/windows/client-management/mdm/mobile-device-enrollment.md index bb09b8f063..061a5abdb2 100644 --- a/windows/client-management/mdm/mobile-device-enrollment.md +++ b/windows/client-management/mdm/mobile-device-enrollment.md @@ -54,7 +54,7 @@ The following topics describe the end-to-end enrollment process using various au - [Certificate authentication device enrollment](certificate-authentication-device-enrollment.md) - [On-premise authentication device enrollment](on-premise-authentication-device-enrollment.md) -> [!Note]   +> [!Note] > As a best practice, do not use hardcoded server-side checks on values such as: > - User agent string > - Any fixed URIs that are passed during enrollment From c1ec6af8a1495b40cf73596b947d788f332cf5f9 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Mon, 15 Jun 2020 17:39:45 -0700 Subject: [PATCH 086/145] Update index.yml Uses landing page yml template for consistency with Surface devices --- devices/surface-hub/index.yml | 206 +++++++++++++++------------------- 1 file changed, 92 insertions(+), 114 deletions(-) diff --git a/devices/surface-hub/index.yml b/devices/surface-hub/index.yml index 249deba5a0..f91c453b06 100644 --- a/devices/surface-hub/index.yml +++ b/devices/surface-hub/index.yml @@ -1,127 +1,105 @@ -### YamlMime:Hub +### YamlMime:Landing title: Surface Hub documentation # < 60 chars summary: Surface Hub 2S is an all-in-one digital interactive whiteboard, meetings platform, and collaborative computing device. # < 160 chars -# brand: aspnet | azure | dotnet | dynamics | m365 | ms-graph | office | power-bi | power-platform | sql | sql-server | vs | visual-studio | windows | xamarin -brand: windows metadata: title: Surface Hub documentation # Required; page title displayed in search results. Include the brand. < 60 chars. - description: Get started with Microsoft Surface Hub. # Required; article description that is displayed in search results. < 160 chars. - services: product-insights + description: Get started with Microsoft Surface Hub # Required; article description that is displayed in search results. < 160 chars. ms.service: product-insights #Required; service per approved list. service slug assigned to your service by ACOM. - ms.topic: hub-page # Required - ms.prod: surface-hub - ms.technology: windows - audience: ITPro - ms.localizationpriority: medium + ms.topic: landing-page # Required + manager: laurawi author: greg-lindsay #Required; your GitHub user alias, with correct capitalization. ms.author: greglin #Required; microsoft alias of author; optional team alias. - manager: laurawi + audience: itpro + ms.localizationpriority: High -# highlightedContent section (optional) -# Maximum of 8 items -highlightedContent: -# itemType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | sample | tutorial | video | whats-new - items: - # Card - - title: What's new in Surface Hub 2S? - itemType: whats-new - url: surface-hub-2s-whats-new.md - # Card - - title: Surface Hub security overview - itemType: learn - url: surface-hub-security.md - # Card - - title: Manage Surface Hub 2S with Intune - itemType: how-to-guide - url: surface-hub-2s-manage-intune.md - # Card - - title: Operating system essentials - itemType: learn - url: differences-between-surface-hub-and-windows-10-enterprise.md - # Card - - title: Surface Hub 2S Site Readiness Guide - itemType: learn - url: surface-hub-2s-site-readiness-guide.md - # Card - - title: Customize Surface Hub 2S installation - itemType: how-to-guide - url: surface-hub-2s-custom-install.md +# linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | sample | tutorial | video | whats-new -# productDirectory section (optional) -productDirectory: - title: Deploy, manage, and support your Surface Hub devices # < 60 chars (optional) - summary: Find related links to deploy, manage and support your Surface Hub devices. # < 160 chars (optional) - items: +landingContent: +# Cards and links should be based on top customer tasks or top subjects +# Start card title with a verb + # Card (optional) + - title: Surface devices + linkLists: + - linkListType: overview + links: + - text: What's new in Surface Hub 2S? + url: surface-hub-2s-whats-new.md + - text: Surface Hub 2S tech specs + url: surface-hub/surface-hub-2s-techspecs.md + - text: Operating system essentials + url: differences-between-surface-hub-and-windows-10-enterprise.md + + # Card (optional) + - title: Get started + linkLists: + - linkListType: get-started + links: + - text: Surface Hub 2S Site Readiness Guide + url: surface-hub-2s-site-readiness-guide.md + - text: Customize Surface Hub 2S installation + url: surface-hub-2s-custom-install.md + - text: Prepare your environment for Surface Hub 2S + url: surface-hub-2s-prepare-environment.md + + # Card + - title: Deploy Surface Hub + linkLists: + - linkListType: deploy + links: + - text: Surface Hub 2S adoption and training + url: surface-hub-2s-adoption-kit.md + - text: Surface Hub 2S deployment checklist + url: surface-hub-2s-deploy-checklist.md + - text: Create device account + url: surface-hub-2s-account.md + # Card - - title: Deploy - # imageSrc should be square in ratio with no whitespace - imageSrc: https://docs.microsoft.com/office/media/icons/deploy-blue.svg - links: - - url: surface-hub-2s-adoption-kit.md - text: Surface Hub 2S adoption and training - - url: surface-hub-2s-deploy-checklist.md - text: Surface Hub 2S deployment checklist - - url: surface-hub-2s-account.md - text: Create device account - # Card - - title: Manage - imageSrc: https://docs.microsoft.com/office/media/icons/process-flow-blue.svg - links: - - url: surface-hub-2s-manage-intune.md - text: Manage with Intune - - url: local-management-surface-hub-settings.md - text: Manage local settings - # Card - - title: Secure - imageSrc: https://docs.microsoft.com/office/media/icons/security-blue.svg - links: - - url: surface-hub-2s-secure-with-uefi-semm.md - text: Secure with UEFI and SEMM - - url: surface-hub-wifi-direct.md - text: Wi-Fi security considerations - # Card - - title: Troubleshoot - imageSrc: https://docs.microsoft.com/office/media/icons/connector-blue.svg - links: - - url: https://support.microsoft.com/help/4493926 - text: Service and warranty - - url: surface-hub-2s-recover-reset.md - text: Recover & reset Surface Hub 2S - - url: support-solutions-surface-hub.md - text: Surface Hub support solutions - - url: https://support.office.com/article/Enable-Microsoft-Whiteboard-on-Surface-Hub-b5df4539-f735-42ff-b22a-0f5e21be7627 - text: Enable Microsoft Whiteboard on Surface Hub + - title: Manage Surface devices + linkLists: + - linkListType: how-to-guide + links: + - text: Manage Surface Hub 2S with Intune + url: surface-hub-2s-manage-intune.md + - text: Manage local settings + url: local-management-surface-hub-settings.md + - text: Manage Windows updates on Surface Hub + url: manage-windows-updates-for-surface-hub.md -# additionalContent section (optional) -# Card with links style -additionalContent: - # Supports up to 3 sections - sections: - - title: Other content # < 60 chars (optional) - summary: Find related links for videos, community and support. # < 160 chars (optional) - items: - # Card - - title: Get ready for Surface Hub 2S - links: - - text: Ordering Surface Hub 2S - url: https://www.microsoft.com/p/surface-hub-2S/8P62MW6BN9G4?activetab=pivot:overviewtab - - text: Prepare your environment for Surface Hub 2S - url: surface-hub-2s-prepare-environment.md - # Card - - title: Surface Hub 2S Videos - links: - - text: Adoption and training videos - url: surface-hub-2s-adoption-videos.md - - text: Surface Hub 2S with Teams - url: https://www.youtube.com/watch?v=CH2seLS5Wb0 - - text: Surface Hub 2S with Microsoft 365 - url: https://www.youtube.com/watch?v=I4N2lQX4WyI&list=PLXtHYVsvn_b__1Baibdu4elN4SoF3JTBZ&index=7 - # Card - - title: Community - links: - - text: Join the Surface Hub Technical Community - url: https://techcommunity.microsoft.com/t5/Surface-Hub/bd-p/SurfaceHub - - text: Join the Surface Devices Technical Community - url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices + # Card + - title: Explore security guidance + linkLists: + - linkListType: learn + links: + - text: Secure and manage Surface Hub 2S with SEMM and UEFI + url: surface-hub-2s-secure-with-uefi-semm.md + - text: Wi-Fi security considerations + url: surface-hub-wifi-direct.md + - text: Surface Hub security overview + url: surface-hub-security.md + + # Card + - title: Troubleshoot Surface Hub + linkLists: + - linkListType: learn + links: + - text: Service and warranty + url: https://support.microsoft.com/help/4493926 + - text: Recover & reset Surface Hub 2S + url: surface-hub-2s-recover-reset.md + - text: Surface Hub support solutions + url: support-solutions-surface-hub.md + + +# Card + - title: Surface Hub 2S Videos + linkLists: + - linkListType: video + links: + - text: Adoption and training videos + url: surface-hub-2s-adoption-videos.md + - text: Surface Hub 2S with Teams + url: https://www.youtube.com/watch?v=CH2seLS5Wb0 + - text: Surface Hub 2S with Microsoft 365 + url: https://www.youtube.com/watch?v=I4N2lQX4WyI&list=PLXtHYVsvn_b__1Baibdu4elN4SoF3JTBZ&index=7 From a08f5f518feb04e74e80245214f22e2c841a6d5a Mon Sep 17 00:00:00 2001 From: Zachariusz Karwacki Date: Mon, 15 Jun 2020 23:19:13 -0700 Subject: [PATCH 087/145] Fix grammar in mac-install-with-intune.md after change https://github.com/MicrosoftDocs/windows-docs-pr/commit/b192690b4bf683fe18aac55f4b4e7a1f11e27360 --- .../microsoft-defender-atp/mac-install-with-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md b/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md index d892904b96..2a03c67c16 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md @@ -207,7 +207,7 @@ You may now enroll more devices. You can also enroll them later, after you have ``` -9. To allow Defender and Auto Update for displaying notifications in UI on macOS 10.15 (Catalina), import the following .mobileconfig as a custom payload: +9. To allow Defender and Auto Update to display notifications in UI on macOS 10.15 (Catalina), import the following .mobileconfig as a custom payload: ```xml From 63018ce3074fdcbad731b0d64f7fae5782264d1a Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Tue, 16 Jun 2020 08:49:11 -0700 Subject: [PATCH 088/145] spelling --- devices/hololens/hololens-release-notes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens-release-notes.md b/devices/hololens/hololens-release-notes.md index e6bd017294..f3f4221ee9 100644 --- a/devices/hololens/hololens-release-notes.md +++ b/devices/hololens/hololens-release-notes.md @@ -20,7 +20,7 @@ appliesto: # HoloLens 2 release notes -If you would like to download the latest HoloLens 2 FFU to flash a your HoloLens 2 via Advanced Recovery Companion then you may download it from [here](https://aka.ms/hololens2download). This is kept up to date and will match the latest generally avalible build. +If you would like to download the latest HoloLens 2 FFU to flash your HoloLens 2 via Advanced Recovery Companion then you may download it from [here](https://aka.ms/hololens2download). This is kept up-to-date and will match the latest generally available build. HoloLens Emulator Release Notes can be found [here](https://docs.microsoft.com/windows/mixed-reality/hololens-emulator-archive). From 9195108f8835b94223960c2fc49d20eb2cee7863 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Tue, 16 Jun 2020 09:10:59 -0700 Subject: [PATCH 089/145] link to ARC --- devices/hololens/hololens-release-notes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens-release-notes.md b/devices/hololens/hololens-release-notes.md index f3f4221ee9..d89a856d4a 100644 --- a/devices/hololens/hololens-release-notes.md +++ b/devices/hololens/hololens-release-notes.md @@ -20,7 +20,7 @@ appliesto: # HoloLens 2 release notes -If you would like to download the latest HoloLens 2 FFU to flash your HoloLens 2 via Advanced Recovery Companion then you may download it from [here](https://aka.ms/hololens2download). This is kept up-to-date and will match the latest generally available build. +If you would like to download the latest HoloLens 2 FFU to flash your HoloLens 2 via [Advanced Recovery Companion](hololens-recovery.md#re-install-the-operating-system) then you may download it from [here](https://aka.ms/hololens2download). This is kept up-to-date and will match the latest generally available build. HoloLens Emulator Release Notes can be found [here](https://docs.microsoft.com/windows/mixed-reality/hololens-emulator-archive). From 0dd4d0f1c94fb601a83667ba5573eab7f84dc875 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 16 Jun 2020 09:34:15 -0700 Subject: [PATCH 090/145] Update index.yml --- devices/surface-hub/index.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface-hub/index.yml b/devices/surface-hub/index.yml index f91c453b06..a4a4b05f20 100644 --- a/devices/surface-hub/index.yml +++ b/devices/surface-hub/index.yml @@ -27,7 +27,7 @@ landingContent: - text: What's new in Surface Hub 2S? url: surface-hub-2s-whats-new.md - text: Surface Hub 2S tech specs - url: surface-hub/surface-hub-2s-techspecs.md + url: surface-hub-2s-techspecs.md - text: Operating system essentials url: differences-between-surface-hub-and-windows-10-enterprise.md From 96e42b92999941dc3d9ed5715aca838bf4e6b564 Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Tue, 16 Jun 2020 10:57:57 -0700 Subject: [PATCH 091/145] Styling --- .../microsoft-defender-atp/linux-resources.md | 2 +- .../microsoft-defender-atp/linux-whatsnew.md | 4 +-- .../microsoft-defender-atp-linux.md | 32 +++++++++---------- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md b/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md index 7014bcacaa..9682edb6d0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md @@ -37,7 +37,7 @@ If you can reproduce a problem, please increase the logging level, run the syste 2. Reproduce the problem. -3. Run `sudo mdatp diagnostic create` to backup Microsoft Defender ATP's logs. The files will be stored inside of a .zip archive. This command will also print out the file path to the backup after the operation succeeds: +3. Run `sudo mdatp diagnostic create` to back up Microsoft Defender ATP's logs. The files will be stored inside of a .zip archive. This command will also print out the file path to the backup after the operation succeeds: ```bash $ sudo mdatp diagnostic create diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md index e7408568e2..0c3138f156 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md @@ -21,8 +21,8 @@ ms.topic: conceptual ## 101.00.75 -- Added support for the following file system types: ecryptfs, fuse, fuseblk, jfs, nfs, overlay, ramfs, reiserfs, udf, and vfat -- New syntax for the command-line tool. See [this page](linux-resources.md#configure-from-the-command-line) for more information. +- Added support for the following file system types: `ecryptfs`, `fuse`, `fuseblk`, `jfs`, `nfs`, `overlay`, `ramfs`, `reiserfs`, `udf`, and `vfat` +- New syntax for the command-line tool. For more information, see [this page](linux-resources.md#configure-from-the-command-line). - Performance improvements & bug fixes ## 100.90.70 diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md index 4ece6145ec..edc161f217 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md @@ -91,22 +91,22 @@ If you experience any installation failures, refer to [Troubleshooting installat - Disk space: 650 MB - The solution currently provides real-time protection for the following file system types: - - btrfs - - ecryptfs - - ext2 - - ext3 - - ext4 - - fuse - - fuseblk - - jfs - - nfs - - overlay - - ramfs - - reiserfs - - tmpfs - - udf - - vfat - - xfs + - `btrfs` + - `ecryptfs` + - `ext2` + - `ext3` + - `ext4` + - `fuse` + - `fuseblk` + - `jfs` + - `nfs` + - `overlay` + - `ramfs` + - `reiserfs` + - `tmpfs` + - `udf` + - `vfat` + - `xfs` More file system types will be added in the future. From 43d5d43ad2b6edc086ac8dfbf018e0e570fcfd96 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 17 Jun 2020 00:04:39 +0530 Subject: [PATCH 092/145] updated may 2020 admx files link as per the user report #6976 , so i replaced November 2019 windows 10 v1909 ADMX templates link to May 2020 windows 10 v 2004 link. old link **https://www.microsoft.com/download/100591** new link **https://www.microsoft.com/download/101445** --- .../use-powershell-cmdlets-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md index 2ec659113a..de3c6cfb93 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus.md @@ -30,7 +30,7 @@ For a list of the cmdlets and their functions and available parameters, see the PowerShell cmdlets are most useful in Windows Server environments that don't rely on a graphical user interface (GUI) to configure software. > [!NOTE] -> PowerShell cmdlets should not be used as a replacement for a full network policy management infrastructure, such as [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/configmgr), [Group Policy Management Console](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), or [Microsoft Defender Antivirus Group Policy ADMX templates](https://www.microsoft.com/download/100591). +> PowerShell cmdlets should not be used as a replacement for a full network policy management infrastructure, such as [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/configmgr), [Group Policy Management Console](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), or [Microsoft Defender Antivirus Group Policy ADMX templates](https://www.microsoft.com/download/101445). Changes made with PowerShell will affect local settings on the endpoint where the changes are deployed or made. This means that deployments of policy with Group Policy, Microsoft Endpoint Configuration Manager, or Microsoft Intune can overwrite changes made with PowerShell. From 04200abca755ddfa35f0c4f90ac6efe1632e41b5 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Tue, 16 Jun 2020 12:16:16 -0700 Subject: [PATCH 093/145] added some material to the cards --- windows/deployment/index.yml | 120 ++++++++++++++--------------------- 1 file changed, 48 insertions(+), 72 deletions(-) diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml index 70fa4b92c9..b065acab3d 100644 --- a/windows/deployment/index.yml +++ b/windows/deployment/index.yml @@ -22,96 +22,72 @@ landingContent: # Cards and links should be based on top customer tasks or top subjects # Start card title with a verb # Card (optional) - - title: Deploy Windows 10 + - title: Get started linkLists: - linkListType: overview links: + - text: What's new + url: windows-10-deployment-scenarios.md - text: Windows 10 deployment scenarios url: windows-10-deployment-scenarios.md - - - linkListType: get-started - links: - - text: Demonstrate Autopilot deployment - url: windows-autopilot/demonstrate-deployment-on-vm.md - - text: Deploy Windows 10 in a test lab - url: windows-10-poc.md + - text: Basics of Windows updates, channels, and tools + url: update/get-started-updates-channels-tools.md # Card (optional) - - title: Update Windows 10 + - title: Plan and prepare linkLists: - linkListType: overview - links: - - text: What is Windows as a service? - url: update/waas-overview.md - - text: Types of Windows updates - url: update/waas-quick-start.md#definitions - - linkListType: get-started - links: - - text: Servicing the Windows 10 operating system - url: update/waas-servicing-strategy-windows-10-updates.md - - - # Card (optional) - - title: Deployment planning - linkLists: - - linkListType: architecture links: - text: Create a deployment plan - url: update/create-deployment-plan.md - - text: Define readiness criteria - url: update/plan-define-readiness.md - - text: Evaluate infrastructure and tools - url: update/eval-infra-tools.md - - text: Determine application readiness - url: update/plan-determine-app-readiness.md - - text: Define your servicing strategy - url: update/waas-servicing-strategy-windows-10-updates.md - - # Card - - title: Prepare to deploy Windows 10 + url: update/create-deployment-plan + - text: Prepare to deploy Windows 10 updates + url: update/prepare-deploy-windows + - text: Prepare updates using Windows Update for Business + url: update/waas-manage-updates-wufb + # Card (optional) + - title: Deploy linkLists: - - linkListType: how-to-guide + - linkListType: overview links: - - text: Prepare for Zero Touch Installation with Configuration Manager - url: deploy-windows-cm/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md - - text: Prepare to deploy Windows 10 with MDT - url: deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md - - text: Evaluate and update infrastructure - url: update/update-policies.md - - text: Build a successful servicing strategy - url: update/waas-deployment-rings-windows-10-updates.md + - text: Deploy with Autopilot + url: windows-autopilot/windows-autopilot-scenarios.md + - text: Assign devices to servicing channels + url: update/waas-servicing-channels-windows-10-updates + - text: Deploy Windows updates with Configuration Manager + url: update/deploy-updates-configmgr + + # Card + - title: Keep Windows current + linkLists: + - linkListType: overview + links: + - text: Define servicing strategy + url: update/define-update-strategy.md + - text: JAMES'S CALENDAR BLOG POST + url: windows-autopilot/windows-autopilot-scenarios.md + - text: Optimizing Windows 10 Update Adoption + url: https://www.microsoft.com/download/details.aspx?id=101056 # Card - - title: Deploy and update Windows 10 + - title: Support remote work linkLists: - - linkListType: deploy + - linkListType: overview links: - - text: Windows Autopilot scenarios and capabilities - url: windows-autopilot/windows-autopilot-scenarios.md - - text: Deploy Windows 10 to a new device with Configuration Manager - url: deploy-windows-cm/deploy-windows-10-using-pxe-and-configuration-manager.md - - text: Deploy a Windows 10 image using MDT - url: deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md - - text: Assign devices to servicing channels - url: update/waas-servicing-channels-windows-10-updates.md - - text: Deploy Windows 10 updates - url: update/waas-servicing-channels-windows-10-updates.md - - text: Resolve Windows 10 upgrade errors - url: upgrade/resolve-windows-10-upgrade-errors.md + - text: Deploy Windows 10 for a remote world + url: https://techcommunity.microsoft.com/t5/windows-it-pro-blog/deploying-a-new-version-of-windows-10-in-a-remote-world/ba-p/1419846 + - text: Update infrastructure + url: update/update-policies.md + - text: Build a servicing strategy + url: update/waas-deployment-rings-windows-10-updates.md # Card (optional) - - title: Windows 10 resources + - title: Microsoft Learn linkLists: - - linkListType: reference + - linkListType: overview links: - - text: Windows 10 release information - url: https://docs.microsoft.com/windows/release-information/ - - text: What's new in Windows 10 - url: https://docs.microsoft.com/windows/whats-new/ - - text: Windows 10 Enterprise Security - url: https://docs.microsoft.com/windows/security/ - - text: Desktop Deployment Center - url: https://docs.microsoft.com/microsoft-365/enterprise/desktop-deployment-center-home - - text: Microsoft 365 solution and architecture center - url: https://docs.microsoft.com/microsoft-365/solutions/?view=o365-worldwide - + - text: Plan to deploy updates for Windows 10 and Microsoft 365 Apps + url: https://docs.microsoft.com/learn/modules/windows-plan + - text: Prepare to deploy updates for Windows 10 and Microsoft 365 Apps + url: https://docs.microsoft.com/learn/modules/windows-prepare/ + - text: Deploy updates for Windows 10 and Microsoft 365 Apps + url: https://docs.microsoft.com/learn/modules/windows-deploy \ No newline at end of file From eb6e528d00dd5591641a6172b259c00d5fb8bb78 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 16 Jun 2020 12:16:47 -0700 Subject: [PATCH 094/145] Update hub-teams-app.md --- devices/surface-hub/hub-teams-app.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface-hub/hub-teams-app.md b/devices/surface-hub/hub-teams-app.md index 90d82560d8..358d5f8d3c 100644 --- a/devices/surface-hub/hub-teams-app.md +++ b/devices/surface-hub/hub-teams-app.md @@ -21,4 +21,4 @@ The Microsoft Teams app for Surface Hub is periodically updated and available vi | --------------------- | --------------------------------------------------------------------------------------------------- | -------------------------------- | | 0.2020.13201.0 | - 3x3 Gallery view on Surface Hub
- Ability to search for External users | June 10, 2020
| | 0.2020.13201 | - Quality improvements and Bug fixes | June 1, 2020
| -| 0.2020.4301.0 | - Accept incoming PSTN calls on Surface Hub
- Added controls for Attendee/Presenter role changes | May 21, 2020 | +| 0.2020.4301.0 | - Accept incoming PSTN calls on Surface Hub
- Consume Attendee/Presenter role changes | May 21, 2020 | From b28c65899da19eb5fddb0be3f89de05577ddbec9 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Tue, 16 Jun 2020 13:32:07 -0700 Subject: [PATCH 095/145] fixing filenames --- windows/deployment/index.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml index b065acab3d..d5a4c3316a 100644 --- a/windows/deployment/index.yml +++ b/windows/deployment/index.yml @@ -39,11 +39,11 @@ landingContent: - linkListType: overview links: - text: Create a deployment plan - url: update/create-deployment-plan + url: update/create-deployment-plan.md - text: Prepare to deploy Windows 10 updates - url: update/prepare-deploy-windows + url: update/prepare-deploy-windows.md - text: Prepare updates using Windows Update for Business - url: update/waas-manage-updates-wufb + url: update/waas-manage-updates-wufb.md # Card (optional) - title: Deploy linkLists: @@ -52,9 +52,9 @@ landingContent: - text: Deploy with Autopilot url: windows-autopilot/windows-autopilot-scenarios.md - text: Assign devices to servicing channels - url: update/waas-servicing-channels-windows-10-updates + url: update/waas-servicing-channels-windows-10-updates.md - text: Deploy Windows updates with Configuration Manager - url: update/deploy-updates-configmgr + url: update/deploy-updates-configmgr.md # Card - title: Keep Windows current From f919763538a5a1b874fa0f72c5f8d67e853512da Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Tue, 16 Jun 2020 13:44:50 -0700 Subject: [PATCH 096/145] blurb MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Minor comments. I’d add a very short blurb on what the release notes page is so that we don’t jump so abruptly into: “hey here is where you can download the latest FFU from”. Something along the lines of: To ensure you have a productive experience with your HoloLens devices, we continue to release feature, bug and security updates. In this page you can learn about what’s new on HoloLens each month. Then, one small suggestion: If you would like to download the latest HoloLens 2 FFU to flash your device via Advanced Recovery Companion then you may download it from here. This is kept up-to-date and will match the latest generally available build. --- devices/hololens/hololens-release-notes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens-release-notes.md b/devices/hololens/hololens-release-notes.md index d89a856d4a..13141cb40f 100644 --- a/devices/hololens/hololens-release-notes.md +++ b/devices/hololens/hololens-release-notes.md @@ -20,7 +20,7 @@ appliesto: # HoloLens 2 release notes -If you would like to download the latest HoloLens 2 FFU to flash your HoloLens 2 via [Advanced Recovery Companion](hololens-recovery.md#re-install-the-operating-system) then you may download it from [here](https://aka.ms/hololens2download). This is kept up-to-date and will match the latest generally available build. +To ensure you have a productive experience with your HoloLens devices, we continue to release feature, bug and security updates. In this page you can learn about what’s new on HoloLens each month. If you would like to download the latest HoloLens 2 FFU to flash your device via [Advanced Recovery Companion](hololens-recovery.md#re-install-the-operating-system) then you may download it from [here](https://aka.ms/hololens2download). This is kept up-to-date and will match the latest generally available build. HoloLens Emulator Release Notes can be found [here](https://docs.microsoft.com/windows/mixed-reality/hololens-emulator-archive). From ccf7fc329dc8350f1d7535da00fb4454c9bc0aef Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Tue, 16 Jun 2020 14:38:10 -0700 Subject: [PATCH 097/145] Changes for title/headers/links Updated titles. Updated links. Bold to headers. Notes on ARC build being factory image. Placed in ARC offline. --- devices/hololens/hololens-recovery.md | 53 +++++++++++++++++++++++---- 1 file changed, 45 insertions(+), 8 deletions(-) diff --git a/devices/hololens/hololens-recovery.md b/devices/hololens/hololens-recovery.md index f6b5fff191..707867332a 100644 --- a/devices/hololens/hololens-recovery.md +++ b/devices/hololens/hololens-recovery.md @@ -19,14 +19,16 @@ appliesto: - HoloLens 2 --- -# Charging the device (before troubleshooting) +# Reset and Recovery for HoloLens 2 + +## Charging the device Before starting any troubleshooting procedure, if possible, ensure that your device is charged at least between 20% and 40%. Please ensure you are using the charger and the USB Type-C cables that come with the HoloLens2 device. In case they are not available ensure the charger available can support at least 15W of power. > [!NOTE] -If possible, do not use a PC to charge the device over USB as this will provide a very slow charge. +> If possible, do not use a PC to charge the device over USB as this will provide a very slow charge. If the device is correctly booted and running there are three different ways of checking the charge of your battery. @@ -44,7 +46,7 @@ If the device cannot be booted to the Startup Menu, please take note of the LEDs Under certain circumstances the customer may be required to manually reset the device without using the SW UI. -**Standard procedure** +### Standard procedure 1. Disconnect the device from the power supply or the host PC by unplugging the Type-C cable. 2. Press and hold the power button for 15 seconds. All LEDs should be off. @@ -55,7 +57,7 @@ Under certain circumstances the customer may be required to manually reset the d ![HoloLens 2 MicrosoftHoloLensRecovery](images/MicrosoftHoloLensRecovery.png) -**Hard-reset procedure** +### Hard-reset procedure If the standard reset procedure does not work, you can use the hard-reset procedure. @@ -71,13 +73,15 @@ If the standard reset procedure does not work, you can use the hard-reset proced ## Clean reflash the device -In extraordinary situations you may be required to clean flash the device. There are two ways to reflash a HoloLens2 device. For all reflashing procedures you will be required to install the Advanced Recovery Companion app from the Windows Store. If you reset your device, all your personal data, apps, and settings will be erased, including TPM reset. +In extraordinary situations you may be required to clean flash the device. There are two ways to reflash a HoloLens2 device. For all reflashing procedures you will be required to [install the Advanced Recovery Companion app from the Windows Store](https://www.microsoft.com/store/productId/9P74Z35SFRS8). If you reset your device, all your personal data, apps, and settings will be erased, including TPM reset. -Before starting the flashing procedure make sure the app is installed and running (https://www.microsoft.com/store/productId/9P74Z35SFRS8 ) on your Windows 10 PC and ready to detect the device. +Advanced Recovery Companion is currently set to download the feature release build for [Windows Holographic 2004](hololens-release-notes.md#windows-holographic-version-2004), if you would like to download the latest HoloLens 2 FFU to flash your device via [Advanced Recovery Companion](hololens-recovery.md#re-install-the-operating-system) then you may download it from [here](https://aka.ms/hololens2download). This is kept up-to-date and will match the latest generally available build. + +Before starting the flashing procedure make sure the app is installed and running on your Windows 10 PC and ready to detect the device. ![HoloLens 2 Clean Reflash](images/ARC1.png) -**Normal procedure** +### Normal procedure 1. While the HoloLens device is running, connect it to your Windows 10 PC where you previously launched the Advanced Recovery Companion App. @@ -87,7 +91,7 @@ Before starting the flashing procedure make sure the app is installed and runnin 3. Select the HoloLens2 device in the Advanced Recovery Companion App UI and follow the instructions to complete the flashing. -**Manual procedure** +### Manual procedure If the device does not boot correctly you may need to put the HoloLens 2 device in Recovery mode. @@ -106,3 +110,36 @@ If the device does not boot correctly you may need to put the HoloLens 2 device ![HoloLens 2 Clean Reflash](images/ARC2.png) 6. Select the HoloLens 2 device in the Advanced Recovery Companion app UI and follow the instructions to complete the flashing. + +## Downloading ARC without using the app store + +If an IT environment prevents the use of the Windows Store app or limits access to the retail store, IT administrators can make this app available through other ‘offline’ deployment paths. + +- This process may also be used for other apps, as seen in step 2. This guide will focus on Advanced Recovery Companion, but my be modified for other offline apps. + +This deployment path can be enabled with the following steps: +1. Go to the [Store For Business website](https://businessstore.microsoft.com) and sign-in with an Azure AD identity. +1. Go to **Manage – Settings**, and turn on **Show offline apps** under **Shopping experience** as described at https://businessstore.microsoft.com/manage/settings/shop +1. Go to **shop for my group** and search for the [Advanced Recovery Companion](https://businessstore.microsoft.com/store/details/advanced-recovery-companion/9P74Z35SFRS8) app. +1. Change the **License Type** box to offline and click **Manage**. +1. Under Download the package for offline use click the second blue **“Download”** button . Ensure the file extension is .appxbundle. +1. At this stage, if the Desktop PC has Internet access, simply double click and install. +1. The IT administrator can also distribute this app through System Center Configuration Manager (SCCM) or Intune. +1. If the target PC has no Internet connectivity, some additional steps are needed: + 1. Select the unencoded license and click **“Generate license”** and under **“Required Frameworks”** click **“Download.”** + 1. PCs without internet access will need to use DISM to apply the package with the dependency and license. In an administrator command prompt, type: + + ```console + C:\WINDOWS\system32>dism /online /Add-ProvisionedAppxPackage /PackagePath:"C:\ARCoffline\Microsoft.AdvancedRecoveryCompanion_1.19050.1301.0_neutral_~_8wekyb3d8bbwe.appxbundle" /DependencyPackagePath:"C:\ARCoffline\Microsoft.VCLibs.140.00.UWPDesktop_14.0.27629.0_x86__8wekyb3d8bbwe.appx" /LicensePath:"C:\ARCoffline\Microsoft.AdvancedRecoveryCompanion_8wekyb3d8bbwe_f72ce112-dd2e-d771-8827-9cbcbf89f8b5.xml" /Region:all + ``` +> [!NOTE] +> The version number in this code example may not match the currently avalible version. You may have also choosen a different download location than in the example given. Please make sure to make any changes as needed. + +> [!TIP] +> When planning to use Advanced Recovery Companion to install an ffu offline it may be useful to download your flashing image to be availible, here is the [current image for HoloLens 2](https://aka.ms/hololens2download). + +Other resources: +- https://docs.microsoft.com/microsoft-store/distribute-offline-apps +- https://docs.microsoft.com/windows-hardware/manufacture/desktop/dism-app-package--appx-or-appxbundle--servicing-command-line-options + + From bb5cdb296bd8dbb7f3366d45fe2c660a6294ccbf Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 16 Jun 2020 14:52:30 -0700 Subject: [PATCH 098/145] Indented content in a list item --- .../microsoft-defender-atp/mac-install-manually.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-install-manually.md b/windows/security/threat-protection/microsoft-defender-atp/mac-install-manually.md index 1a2de2881f..c2941c40da 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-install-manually.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-install-manually.md @@ -66,10 +66,10 @@ To complete this process, you must have admin privileges on the machine. ![Security and privacy window screenshot](../microsoft-defender-antivirus/images/MDATP-31-SecurityPrivacySettings.png) -The installation proceeds. + The installation proceeds. -> [!CAUTION] -> If you don't select **Allow**, the installation will proceed after 5 minutes. Defender ATP will be loaded, but some features, such as real-time protection, will be disabled. See [Troubleshoot kernel extension issues](mac-support-kext.md) for information on how to resolve this. + > [!CAUTION] + > If you don't select **Allow**, the installation will proceed after 5 minutes. Defender ATP will be loaded, but some features, such as real-time protection, will be disabled. See [Troubleshoot kernel extension issues](mac-support-kext.md) for information on how to resolve this. > [!NOTE] > macOS may request to reboot the machine upon the first installation of Microsoft Defender. Real-time protection will not be available until the machine is rebooted. From b5945cc8b0d39338f3a963f9d219d8bd8b997ae0 Mon Sep 17 00:00:00 2001 From: Evan Miller Date: Tue, 16 Jun 2020 15:02:14 -0700 Subject: [PATCH 099/145] fix broken link to ARC --- devices/hololens/hololens-recovery.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens-recovery.md b/devices/hololens/hololens-recovery.md index 707867332a..8c3374807f 100644 --- a/devices/hololens/hololens-recovery.md +++ b/devices/hololens/hololens-recovery.md @@ -75,7 +75,7 @@ If the standard reset procedure does not work, you can use the hard-reset proced In extraordinary situations you may be required to clean flash the device. There are two ways to reflash a HoloLens2 device. For all reflashing procedures you will be required to [install the Advanced Recovery Companion app from the Windows Store](https://www.microsoft.com/store/productId/9P74Z35SFRS8). If you reset your device, all your personal data, apps, and settings will be erased, including TPM reset. -Advanced Recovery Companion is currently set to download the feature release build for [Windows Holographic 2004](hololens-release-notes.md#windows-holographic-version-2004), if you would like to download the latest HoloLens 2 FFU to flash your device via [Advanced Recovery Companion](hololens-recovery.md#re-install-the-operating-system) then you may download it from [here](https://aka.ms/hololens2download). This is kept up-to-date and will match the latest generally available build. +Advanced Recovery Companion is currently set to download the feature release build for [Windows Holographic 2004](hololens-release-notes.md#windows-holographic-version-2004), if you would like to download the latest HoloLens 2 FFU to flash your device via Advanced Recovery Companion then you may download it from [here](https://aka.ms/hololens2download). This is kept up-to-date and will match the latest generally available build. Before starting the flashing procedure make sure the app is installed and running on your Windows 10 PC and ready to detect the device. From df6ac5c1ddd7dc29ca453ce8209f8e107e757e06 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 16 Jun 2020 15:55:32 -0700 Subject: [PATCH 100/145] Corrected indentation of a code block MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The previous indentation resulted in the code block being rendered entirely—including the backticks—as a block of plain text. --- .../linux-install-with-ansible.md | 46 +++++++++---------- 1 file changed, 23 insertions(+), 23 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md index 2227ba8f15..f6753d00a3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md @@ -149,31 +149,31 @@ Create subtask or role files that contribute to an actual task. First create the > [!NOTE] > In case of Oracle Linux, replace *[distro]* with “rhel”. - ```bash - - name: Add Microsoft apt repository for MDATP - apt_repository: - repo: deb [arch=arm64,armhf,amd64] https://packages.microsoft.com/[distro]/[version]/prod [channel] main - update_cache: yes - state: present - filename: microsoft-[channel].list - when: ansible_os_family == "Debian" + ```bash + - name: Add Microsoft apt repository for MDATP + apt_repository: + repo: deb [arch=arm64,armhf,amd64] https://packages.microsoft.com/[distro]/[version]/prod [channel] main + update_cache: yes + state: present + filename: microsoft-[channel].list + when: ansible_os_family == "Debian" - - name: Add Microsoft APT key - apt_key: - keyserver: https://packages.microsoft.com/ - id: BC528686B50D79E339D3721CEB3E94ADBE1229CF - when: ansible_os_family == "Debian" + - name: Add Microsoft APT key + apt_key: + keyserver: https://packages.microsoft.com/ + id: BC528686B50D79E339D3721CEB3E94ADBE1229CF + when: ansible_os_family == "Debian" - - name: Add Microsoft yum repository for MDATP - yum_repository: - name: packages-microsoft-com-prod-[channel] - description: Microsoft Defender ATP - file: microsoft-[channel] - baseurl: https://packages.microsoft.com/[distro]/[version]/[channel]/ - gpgcheck: yes - enabled: Yes - when: ansible_os_family == "RedHat" - ``` + - name: Add Microsoft yum repository for MDATP + yum_repository: + name: packages-microsoft-com-prod-[channel] + description: Microsoft Defender ATP + file: microsoft-[channel] + baseurl: https://packages.microsoft.com/[distro]/[version]/[channel]/ + gpgcheck: yes + enabled: Yes + when: ansible_os_family == "RedHat" + ``` - Create the actual install/uninstall YAML files under `/etc/ansible/playbooks`. From e9a0e94c20f951d0d74934945c31d5bdcc55aebc Mon Sep 17 00:00:00 2001 From: Michael Niehaus Date: Tue, 16 Jun 2020 16:29:47 -0700 Subject: [PATCH 101/145] Update policy-conflicts.md Adding an additional row for UAC settings. --- windows/deployment/windows-autopilot/policy-conflicts.md | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/windows/deployment/windows-autopilot/policy-conflicts.md b/windows/deployment/windows-autopilot/policy-conflicts.md index 3fd528f206..cb76416553 100644 --- a/windows/deployment/windows-autopilot/policy-conflicts.md +++ b/windows/deployment/windows-autopilot/policy-conflicts.md @@ -28,8 +28,13 @@ There are a sigificant number of policy settings available for Windows 10, both
ServiceInformation
Windows Autopilot Deployment ServiceAfter a network connection is in place, each Windows 10 device will contact the Windows Autopilot Deployment Service. With Windows 10 version 1903 and above, the following URLs are used: https://ztd.dds.microsoft.com, https://cs.dds.microsoft.com.
diff --git a/windows/security/threat-protection/auditing/appendix-a-security-monitoring-recommendations-for-many-audit-events.md b/windows/security/threat-protection/auditing/appendix-a-security-monitoring-recommendations-for-many-audit-events.md index d212b266b1..b062a6e72b 100644 --- a/windows/security/threat-protection/auditing/appendix-a-security-monitoring-recommendations-for-many-audit-events.md +++ b/windows/security/threat-protection/auditing/appendix-a-security-monitoring-recommendations-for-many-audit-events.md @@ -27,7 +27,7 @@ This document, the [Advanced security audit policy settings](advanced-security-a | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor relevant events for the **“Subject\\Security ID”** that corresponds to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Subject\\Security ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor relevant events for the **“Subject\\Security ID”** that corresponds to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | Monitor the relevant events for **“Subject\\Security ID”** accounts that are outside the whitelist of accounts. | +| **Account allow list**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | Monitor the relevant events for **“Subject\\Security ID”** accounts that are outside the allow list of accounts. | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | Identify events that correspond to the actions you want to monitor, and for those events, review the **“Subject\\Security ID”** to see whether the account type is as expected. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor the specific events for the **“Subject\\Account Domain”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should not typically perform any actions. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Subject\\Security ID”** that you are concerned about. | diff --git a/windows/security/threat-protection/auditing/audit-security-system-extension.md b/windows/security/threat-protection/auditing/audit-security-system-extension.md index 50dcccadde..8c764f65c4 100644 --- a/windows/security/threat-protection/auditing/audit-security-system-extension.md +++ b/windows/security/threat-protection/auditing/audit-security-system-extension.md @@ -35,9 +35,9 @@ Attempts to install or load security system extensions or services are critical | Computer Type | General Success | General Failure | Stronger Success | Stronger Failure | Comments | |-------------------|-----------------|-----------------|------------------|------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| Domain Controller | Yes | No | Yes | No | The main reason why we recommend Success auditing for this subcategory is “[4697](event-4697.md)(S): A service was installed in the system.”
For other events we strongly recommend monitoring a whitelist of allowed security extensions (authenticated packages, logon processes, notification packages, and security packages). Otherwise it's hard to pull useful information from these events, except event 4611 which typically should have “SYSTEM” as value for **“Subject”** field.
This subcategory doesn’t have Failure events, so there is no recommendation to enable Failure auditing for this subcategory. | -| Member Server | Yes | No | Yes | No | The main reason why we recommend Success auditing for this subcategory is “[4697](event-4697.md)(S): A service was installed in the system.”
For other events we strongly recommend monitoring a whitelist of allowed security extensions (authenticated packages, logon processes, notification packages, and security packages). Otherwise it's hard to pull useful information from these events, except event 4611 which typically should display “SYSTEM” for the **“Subject”** field.
This subcategory doesn’t have Failure events, so there is no recommendation to enable Failure auditing for this subcategory. | -| Workstation | Yes | No | Yes | No | The main reason why we recommend Success auditing for this subcategory is “[4697](event-4697.md)(S): A service was installed in the system.”
For other events we strongly recommend monitoring a whitelist of allowed security extensions (authenticated packages, logon processes, notification packages, and security packages). Otherwise it's hard to pull useful information from these events, except event 4611 which typically should display “SYSTEM” for the **“Subject”** field.
This subcategory doesn’t have Failure events, so there is no recommendation to enable Failure auditing for this subcategory. | +| Domain Controller | Yes | No | Yes | No | The main reason why we recommend Success auditing for this subcategory is “[4697](event-4697.md)(S): A service was installed in the system.”
For other events we strongly recommend monitoring an allow list of allowed security extensions (authenticated packages, logon processes, notification packages, and security packages). Otherwise it's hard to pull useful information from these events, except event 4611 which typically should have “SYSTEM” as value for **“Subject”** field.
This subcategory doesn’t have Failure events, so there is no recommendation to enable Failure auditing for this subcategory. | +| Member Server | Yes | No | Yes | No | The main reason why we recommend Success auditing for this subcategory is “[4697](event-4697.md)(S): A service was installed in the system.”
For other events we strongly recommend monitoring an allow list of allowed security extensions (authenticated packages, logon processes, notification packages, and security packages). Otherwise it's hard to pull useful information from these events, except event 4611 which typically should display “SYSTEM” for the **“Subject”** field.
This subcategory doesn’t have Failure events, so there is no recommendation to enable Failure auditing for this subcategory. | +| Workstation | Yes | No | Yes | No | The main reason why we recommend Success auditing for this subcategory is “[4697](event-4697.md)(S): A service was installed in the system.”
For other events we strongly recommend monitoring an allow list of allowed security extensions (authenticated packages, logon processes, notification packages, and security packages). Otherwise it's hard to pull useful information from these events, except event 4611 which typically should display “SYSTEM” for the **“Subject”** field.
This subcategory doesn’t have Failure events, so there is no recommendation to enable Failure auditing for this subcategory. | **Events List:** diff --git a/windows/security/threat-protection/auditing/event-4611.md b/windows/security/threat-protection/auditing/event-4611.md index d245a30f27..6862a8d6a8 100644 --- a/windows/security/threat-protection/auditing/event-4611.md +++ b/windows/security/threat-protection/auditing/event-4611.md @@ -108,7 +108,7 @@ For 4611(S): A trusted logon process has been registered with the Local Security - Because this event is typically triggered by the SYSTEM account, we recommend that you report it whenever **“Subject\\Security ID”** is not SYSTEM. -- Typically this event has an informational purpose. If you defined the list of allowed Logon Processes in the system, then you can check is “**Logon Process Name”** field value in the whitelist or not. +- Typically this event has an informational purpose. If you defined the list of allowed Logon Processes in the system, then you can check is “**Logon Process Name”** field value in the allow list or not. - diff --git a/windows/security/threat-protection/auditing/event-4614.md b/windows/security/threat-protection/auditing/event-4614.md index 8dd6e72adc..f86b22408c 100644 --- a/windows/security/threat-protection/auditing/event-4614.md +++ b/windows/security/threat-protection/auditing/event-4614.md @@ -78,5 +78,5 @@ Each time a system starts, it loads the notification package DLLs from **HKEY\_L For 4614(S): A notification package has been loaded by the Security Account Manager. -- Typically this event has an informational purpose. If you defined the list of allowed Notification Packages in the system, then you can check is “**Notification Package Name”** field value in the whitelist or not. +- Typically this event has an informational purpose. If you defined the list of allowed Notification Packages in the system, then you can check is “**Notification Package Name”** field value in the allow list or not. diff --git a/windows/security/threat-protection/auditing/event-4622.md b/windows/security/threat-protection/auditing/event-4622.md index e425430b75..385f508b09 100644 --- a/windows/security/threat-protection/auditing/event-4622.md +++ b/windows/security/threat-protection/auditing/event-4622.md @@ -100,5 +100,5 @@ These are some Security Package DLLs loaded by default in Windows 10: For 4622(S): A security package has been loaded by the Local Security Authority. -- Typically this event has an informational purpose. If you defined the list of allowed Security Packages in the system, then you can check is “**Security Package Name”** field value in the whitelist or not. +- Typically this event has an informational purpose. If you defined the list of allowed Security Packages in the system, then you can check is “**Security Package Name”** field value in the allow list or not. diff --git a/windows/security/threat-protection/auditing/event-4624.md b/windows/security/threat-protection/auditing/event-4624.md index a7f80d6745..cf8e0d63b8 100644 --- a/windows/security/threat-protection/auditing/event-4624.md +++ b/windows/security/threat-protection/auditing/event-4624.md @@ -277,7 +277,7 @@ For 4624(S): An account was successfully logged on. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“New Logon\\Security ID”** that corresponds to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“New Logon\\Security ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“New Logon\\Security ID”** that corresponds to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“New Logon\\Security ID”** for accounts that are outside the whitelist. | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “allow list-only” action, review the **“New Logon\\Security ID”** for accounts that are outside the allow list. | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | If this event corresponds to an action you want to monitor for certain account types, review the **“New Logon\\Security ID”** to see whether the account type is as expected. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor this event for the **“Subject\\Account Domain”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should not typically perform any actions. | Monitor the target **Computer:** (or other target device) for actions performed by the **“New Logon\\Security ID”** that you are concerned about. | diff --git a/windows/security/threat-protection/auditing/event-4648.md b/windows/security/threat-protection/auditing/event-4648.md index 97bb3eda59..5a44bd38f1 100644 --- a/windows/security/threat-protection/auditing/event-4648.md +++ b/windows/security/threat-protection/auditing/event-4648.md @@ -178,7 +178,7 @@ The following table is similar to the table in [Appendix A: Security monitoring | **High-value accounts**: You might have high value domain or local accounts for which you need to monitor each action.
Examples of high value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Subject\\Security ID”** or “**Account Whose Credentials Were Used\\Security ID**” that correspond to the high value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Subject\\Security ID”** and “**Account Whose Credentials Were Used\\Security ID**” (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Subject\\Security ID”** or “**Account Whose Credentials Were Used\\Security ID**” that correspond to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** and “**Account Whose Credentials Were Used\\Security ID**” for accounts that are outside the whitelist. | +| **Account allow list**: You might have a specific allow list of accounts that are allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** and “**Account Whose Credentials Were Used\\Security ID**” for accounts that are outside the allow list. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform the action corresponding to this event. | Monitor for the **“Subject\\Account Domain”** or “**Account Whose Credentials Were Used\\Security ID**” corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should not typically perform any actions. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Subject\\Security ID”** or “**Account Whose Credentials Were Used\\Security ID**” that you are concerned about.
For example, you might monitor to ensure that “**Account Whose Credentials Were Used\\Security ID**” is not used to log on to a certain computer. | | **Account naming conventions**: Your organization might have specific naming conventions for account names. | Monitor “**Subject\\Account Name”** and “**Account Whose Credentials Were Used\\Security ID**” for names that don’t comply with naming conventions. | diff --git a/windows/security/threat-protection/auditing/event-4688.md b/windows/security/threat-protection/auditing/event-4688.md index 94d84a85cf..55ace9419d 100644 --- a/windows/security/threat-protection/auditing/event-4688.md +++ b/windows/security/threat-protection/auditing/event-4688.md @@ -192,7 +192,7 @@ For 4688(S): A new process has been created. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor all events with the **“Creator Subject\\Security ID”** or **“Target Subject\\Security ID”** that corresponds to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Creator Subject\\Security ID”** or **“Target Subject\\Security ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor all events with the **“Creator Subject\\Security ID”** or **“Target Subject\\Security ID”** that corresponds to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Creator Subject\\Security ID”** and **“Target Subject\\Security ID”** for accounts that are outside the whitelist. | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Creator Subject\\Security ID”** and **“Target Subject\\Security ID”** for accounts that are outside the allow list. | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | If this event corresponds to an action you want to monitor for certain account types, review the **“Creator Subject\\Security ID”** or **“Target Subject\\Security ID”** to see whether the account type is as expected. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor the specific events for the **“Creator Subject\\Security ID”** or **“Target Subject\\Security ID”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should not typically perform any actions. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Creator Subject\\Security ID”** or **“Target Subject\\Security ID”** that you are concerned about. | diff --git a/windows/security/threat-protection/auditing/event-4696.md b/windows/security/threat-protection/auditing/event-4696.md index cc31b9e54f..0268cd25a8 100644 --- a/windows/security/threat-protection/auditing/event-4696.md +++ b/windows/security/threat-protection/auditing/event-4696.md @@ -152,7 +152,7 @@ For 4696(S): A primary token was assigned to process. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Subject\\Security ID”** or **“New Token Information\\Security ID”** that corresponds to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Subject\\Security ID”** or **“New Token Information\\Security ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Subject\\Security ID”** or **“New Token Information\\Security ID”** that corresponds to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** and **“New Token Information\\Security ID”** for accounts that are outside the whitelist. | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** and **“New Token Information\\Security ID”** for accounts that are outside the allow list. | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | If this event corresponds to an action you want to monitor for certain account types, review the **“Subject\\Security ID”** or **“New Token Information\\Security ID”** to see whether the account type is as expected. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor this event for the **“Subject\\Security ID”** or **“New Token Information\\Security ID”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should not typically perform any actions. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Subject\\Security ID”** or **“New Token Information\\Security ID”** that you are concerned about. | diff --git a/windows/security/threat-protection/auditing/event-4703.md b/windows/security/threat-protection/auditing/event-4703.md index 5c8f7fcc36..9e2056f25d 100644 --- a/windows/security/threat-protection/auditing/event-4703.md +++ b/windows/security/threat-protection/auditing/event-4703.md @@ -194,7 +194,7 @@ Otherwise, see the recommendations in the following table. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Subject\\Security ID”** that corresponds to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Subject\\Security ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Subject\\Security ID”** or “**Target Account\\Security ID**” that correspond to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the whitelist. Also check the “**Target Account\\Security ID**” and **“Enabled Privileges”** to see what was enabled. | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the allow list. Also check the “**Target Account\\Security ID**” and **“Enabled Privileges”** to see what was enabled. | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | If this event corresponds to an action you want to monitor for certain account types, review the **“Subject\\Security ID”** to see whether the account type is as expected. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor this event for the **“Subject\\Account Domain”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should perform only limited actions, or no actions at all. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Subject\\Security ID”** that you are concerned about.
Also check **“Target Account\\Security ID”** to see whether the change in privileges should be made on that computer for that account. | diff --git a/windows/security/threat-protection/auditing/event-4704.md b/windows/security/threat-protection/auditing/event-4704.md index f78b83ef3c..7db8499254 100644 --- a/windows/security/threat-protection/auditing/event-4704.md +++ b/windows/security/threat-protection/auditing/event-4704.md @@ -152,7 +152,7 @@ For 4704(S): A user right was assigned. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Subject\\Security ID”** that corresponds to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Subject\\Security ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Subject\\Security ID”** or “**Target Account\\ Account Name**” that correspond to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the whitelist. Also check the “**Target Account\\Account Name**” and **“New Right”** to see what was enabled. | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the allow list. Also check the “**Target Account\\Account Name**” and **“New Right”** to see what was enabled. | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | If this event corresponds to an action you want to monitor for certain account types, review the **“Subject\\Security ID”** to see whether the account type is as expected. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor this event for the **“Subject\\Account Domain”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should perform only limited actions, or no actions at all. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Subject\\Security ID”** that you are concerned about.
Also check **“Target Account\\ Account Name”** to see whether the change in rights should be made on that computer for that account. | diff --git a/windows/security/threat-protection/auditing/event-4705.md b/windows/security/threat-protection/auditing/event-4705.md index 09c240e026..a89086caee 100644 --- a/windows/security/threat-protection/auditing/event-4705.md +++ b/windows/security/threat-protection/auditing/event-4705.md @@ -151,7 +151,7 @@ For 4705(S): A user right was removed. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Subject\\Security ID”** that corresponds to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Subject\\Security ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Subject\\Security ID”** or “**Target Account\\Account Name**” that correspond to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the whitelist.
If you have specific user rights policies, for example, a whitelist of accounts that can perform certain actions, monitor this event to confirm that it was appropriate that the “**Removed Right**” was removed from “**Target** **Account\\Account Name**.” | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the allow list.
If you have specific user rights policies, for example, an allow list of accounts that can perform certain actions, monitor this event to confirm that it was appropriate that the “**Removed Right**” was removed from “**Target** **Account\\Account Name**.” | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | If this event corresponds to an action you want to monitor for certain account types, review the **“Subject\\Security ID”** and “**Target Account\\Account Name”** to see whether the account type is as expected.
For example, if some accounts have critical user rights which should never be removed, monitor this event for the **“Target** **Account\\Account Name”** and the appropriate rights.
As another example, if non-administrative accounts should never be granted certain user rights (for example, **SeAuditPrivilege**), you might monitor this event, because a right can be removed only after it was previously granted. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor this event for the **“Subject\\Account Domain”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should perform only limited actions, or no actions at all. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Subject\\Security ID”** that you are concerned about. Also be sure to check “**Target Account\\Account Name**” to see whether user rights should be removed from that account (or whether that account should have any rights on that computer).
For high-value servers or other computers, we recommend that you track this event and investigate whether the specific “**Removed Right**” should be removed from “**Target** **Account\\Account Name**” in each case. | diff --git a/windows/security/threat-protection/auditing/event-4717.md b/windows/security/threat-protection/auditing/event-4717.md index 13f2c744aa..ffe87e87e0 100644 --- a/windows/security/threat-protection/auditing/event-4717.md +++ b/windows/security/threat-protection/auditing/event-4717.md @@ -126,7 +126,7 @@ For 4717(S): System security access was granted to an account. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Subject\\Security ID”** and “**Account Modified\\Account Name”** that correspond to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Subject\\Security ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Subject\\Security ID”** that corresponds to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the whitelist.
If you have specific user logon rights policies, for example, a whitelist of accounts that can log on to certain computers, monitor this event to confirm that any “**Access Right**” was granted only to the appropriate “**Account Modified\\Account Name**.” | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the allow list.
If you have specific user logon rights policies, for example, an allow list of accounts that can log on to certain computers, monitor this event to confirm that any “**Access Right**” was granted only to the appropriate “**Account Modified\\Account Name**.” | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | If this event corresponds to an action you want to monitor for certain account types, review the **“Subject\\Security ID”** and “**Account Modified\\Account Name”** to see whether the account type is as expected.
For example, if non-service accounts should never be granted certain logon rights (for example, **SeServiceLogonRight**), monitor this event for those accounts and rights. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor this event for the **“Subject\\Account Domain”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should perform only limited actions, or no actions at all. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Subject\\Security ID”** that you are concerned about. Also be sure to check “**Account Modified\\Account Name**” to see whether logon rights should be granted to that account.
For high-value servers or other computers, we recommend that you track this event and investigate whether the specific “**Access Right**” should be granted to “**Account Modified\\Account Name**” in each case. | diff --git a/windows/security/threat-protection/auditing/event-4718.md b/windows/security/threat-protection/auditing/event-4718.md index 9bb398d835..ecef74c71a 100644 --- a/windows/security/threat-protection/auditing/event-4718.md +++ b/windows/security/threat-protection/auditing/event-4718.md @@ -126,7 +126,7 @@ For 4718(S): System security access was removed from an account. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Subject\\Security ID”** and “**Account Modified\\Account Name”** that correspond to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Subject\\Security ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Subject\\Security ID”** that corresponds to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the whitelist.
If you have specific user logon rights policies, for example, a whitelist of accounts that can log on to certain computers, monitor this event to confirm that it was appropriate that the “**Access Right**” was removed from “**Account Modified\\Account Name**.” | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the allow list.
If you have specific user logon rights policies, for example, an allow list of accounts that can log on to certain computers, monitor this event to confirm that it was appropriate that the “**Access Right**” was removed from “**Account Modified\\Account Name**.” | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | If this event corresponds to an action you want to monitor for certain account types, review the **“Subject\\Security ID”** and “**Account Modified\\Account Name”** to see whether the account type is as expected.
For example, if critical remote network service accounts have user logon rights which should never be removed (for example, **SeNetworkLogonRight**), monitor this event for the **“Account Modified\\Account Name”** and the appropriate rights.
As another example, if non-service accounts should never be granted certain logon rights (for example, **SeServiceLogonRight**), you might monitor this event, because a right can be removed only after it was previously granted. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor this event for the **“Subject\\Account Domain”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should perform only limited actions, or no actions at all. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Subject\\Security ID”** that you are concerned about. Also be sure to check “**Account Modified\\Account Name**” to see whether logon rights should be removed from that account.
For high-value servers or other computers, we recommend that you track this event and investigate whether the specific “**Access Right**” should be removed from “**Account Modified\\Account Name**” in each case. | diff --git a/windows/security/threat-protection/auditing/event-4732.md b/windows/security/threat-protection/auditing/event-4732.md index 511b73b62c..65ba0ae840 100644 --- a/windows/security/threat-protection/auditing/event-4732.md +++ b/windows/security/threat-protection/auditing/event-4732.md @@ -153,7 +153,7 @@ For 4732(S): A member was added to a security-enabled local group. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Subject\\Security ID”** and **“Member\\Security ID”** that correspond to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Subject\\Security ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Subject\\Security ID”** and **“Member\\Security ID”** that correspond to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the whitelist. | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the allow list. | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | If this event corresponds to an action you want to monitor for certain account types, review the **“Subject\\Security ID”** to see whether the account type is as expected. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor this event for the **“Subject\\Account Domain”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should not typically perform any actions. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Subject\\Security ID”** that you are concerned about. | diff --git a/windows/security/threat-protection/auditing/event-4733.md b/windows/security/threat-protection/auditing/event-4733.md index e7b90640ec..b970a918bc 100644 --- a/windows/security/threat-protection/auditing/event-4733.md +++ b/windows/security/threat-protection/auditing/event-4733.md @@ -160,7 +160,7 @@ For 4733(S): A member was removed from a security-enabled local group. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Subject\\Security ID”** and **“Member\\Security ID”** that correspond to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Subject\\Security ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Subject\\Security ID”** and **“Member\\Security ID”** that correspond to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the whitelist. | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the allow list. | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | If this event corresponds to an action you want to monitor for certain account types, review the **“Subject\\Security ID”** to see whether the account type is as expected. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor this event for the **“Subject\\Account Domain”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should not typically perform any actions. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Subject\\Security ID”** that you are concerned about. | diff --git a/windows/security/threat-protection/auditing/event-4751.md b/windows/security/threat-protection/auditing/event-4751.md index 3d070ae403..e72bc3b3a0 100644 --- a/windows/security/threat-protection/auditing/event-4751.md +++ b/windows/security/threat-protection/auditing/event-4751.md @@ -157,7 +157,7 @@ For 4751(S): A member was added to a security-disabled global group. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Subject\\Security ID”** and **“Member\\Security ID”** that correspond to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Subject\\Security ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Subject\\Security ID”** and **“Member\\Security ID”** that correspond to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the whitelist. | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the allow list. | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | If this event corresponds to an action you want to monitor for certain account types, review the **“Subject\\Security ID”** to see whether the account type is as expected. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor this event for the **“Subject\\Account Domain”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should not typically perform any actions. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Subject\\Security ID”** that you are concerned about. | diff --git a/windows/security/threat-protection/auditing/event-4752.md b/windows/security/threat-protection/auditing/event-4752.md index 63d0425219..b1fc1df98f 100644 --- a/windows/security/threat-protection/auditing/event-4752.md +++ b/windows/security/threat-protection/auditing/event-4752.md @@ -148,7 +148,7 @@ For 4752(S): A member was removed from a security-disabled global group. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Subject\\Security ID”** and **“Member\\Security ID”** that correspond to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Subject\\Security ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Subject\\Security ID”** and **“Member\\Security ID”** that correspond to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the whitelist. | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Security ID”** for accounts that are outside the allow list. | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | If this event corresponds to an action you want to monitor for certain account types, review the **“Subject\\Security ID”** to see whether the account type is as expected. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor this event for the **“Subject\\Account Domain”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should not typically perform any actions. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Subject\\Security ID”** that you are concerned about. | diff --git a/windows/security/threat-protection/auditing/event-4768.md b/windows/security/threat-protection/auditing/event-4768.md index 74e6e22b45..1da086eb93 100644 --- a/windows/security/threat-protection/auditing/event-4768.md +++ b/windows/security/threat-protection/auditing/event-4768.md @@ -304,13 +304,13 @@ For 4768(S, F): A Kerberos authentication ticket (TGT) was requested. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“User ID”** that corresponds to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“User ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“User ID”** that corresponds to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“User ID”** for accounts that are outside the whitelist. | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“User ID”** for accounts that are outside the allow list. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor this event for the **“Supplied Realm Name”** corresponding to another domain or “external” location. | | **Account naming conventions**: Your organization might have specific naming conventions for account names. | Monitor “**User ID”** for names that don’t comply with naming conventions. | - You can track all [4768](event-4768.md) events where the **Client Address** is not from your internal IP range or not from private IP ranges. -- If you know that **Account Name** should be used only from known list of IP addresses, track all **Client Address** values for this **Account Name** in [4768](event-4768.md) events. If **Client Address** is not from the whitelist, generate the alert. +- If you know that **Account Name** should be used only from known list of IP addresses, track all **Client Address** values for this **Account Name** in [4768](event-4768.md) events. If **Client Address** is not from the allow list, generate the alert. - All **Client Address** = ::1 means local authentication. If you know the list of accounts which should log on to the domain controllers, then you need to monitor for all possible violations, where **Client Address** = ::1 and **Account Name** is not allowed to log on to any domain controller. diff --git a/windows/security/threat-protection/auditing/event-4769.md b/windows/security/threat-protection/auditing/event-4769.md index 199a11849a..64f7bf4503 100644 --- a/windows/security/threat-protection/auditing/event-4769.md +++ b/windows/security/threat-protection/auditing/event-4769.md @@ -280,9 +280,9 @@ For 4769(S, F): A Kerberos service ticket was requested. - You can track all [4769](event-4769.md) events where the **Client Address** is not from your internal IP range or not from private IP ranges. -- If you know that **Account Name** should be able to request tickets (should be used) only from a known whitelist of IP addresses, track all **Client Address** values for this **Account Name** in [4769](event-4769.md) events. If **Client Address** is not from your whitelist of IP addresses, generate the alert. +- If you know that **Account Name** should be able to request tickets (should be used) only from a known allow list of IP addresses, track all **Client Address** values for this **Account Name** in [4769](event-4769.md) events. If **Client Address** is not from your allow list of IP addresses, generate the alert. -- All **Client Address** = ::1 means local TGS requests, which means that the **Account Name** logged on to a domain controller before making the TGS request. If you have a whitelist of accounts allowed to log on to domain controllers, monitor events with **Client Address** = ::1 and any **Account Name** outside the whitelist. +- All **Client Address** = ::1 means local TGS requests, which means that the **Account Name** logged on to a domain controller before making the TGS request. If you have an allow list of accounts allowed to log on to domain controllers, monitor events with **Client Address** = ::1 and any **Account Name** outside the allow list. - All [4769](event-4769.md) events with **Client Port** field value > 0 and < 1024 should be examined, because a well-known port was used for outbound connection. diff --git a/windows/security/threat-protection/auditing/event-4771.md b/windows/security/threat-protection/auditing/event-4771.md index f97c972551..b099911afd 100644 --- a/windows/security/threat-protection/auditing/event-4771.md +++ b/windows/security/threat-protection/auditing/event-4771.md @@ -208,12 +208,12 @@ For 4771(F): Kerberos pre-authentication failed. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Security ID”** that corresponds to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Security ID”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Security ID”** that corresponds to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Security ID”** for accounts that are outside the whitelist. | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Security ID”** for accounts that are outside the allow list. | | **Account naming conventions**: Your organization might have specific naming conventions for account names. | Monitor “**Subject\\Account Name”** for names that don’t comply with naming conventions. | - You can track all [4771](event-4771.md) events where the **Client Address** is not from your internal IP range or not from private IP ranges. -- If you know that **Account Name** should be used only from known list of IP addresses, track all **Client Address** values for this **Account Name** in [4771](event-4771.md) events. If **Client Address** is not from the whitelist, generate the alert. +- If you know that **Account Name** should be used only from known list of IP addresses, track all **Client Address** values for this **Account Name** in [4771](event-4771.md) events. If **Client Address** is not from the allow list, generate the alert. - All **Client Address** = ::1 means local authentication. If you know the list of accounts which should log on to the domain controllers, then you need to monitor for all possible violations, where **Client Address** = ::1 and **Account Name** is not allowed to log on to any domain controller. diff --git a/windows/security/threat-protection/auditing/event-4776.md b/windows/security/threat-protection/auditing/event-4776.md index 895d43226c..2e759dcb4e 100644 --- a/windows/security/threat-protection/auditing/event-4776.md +++ b/windows/security/threat-protection/auditing/event-4776.md @@ -129,7 +129,7 @@ For 4776(S, F): The computer attempted to validate the credentials for an accoun | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Logon Account”** that corresponds to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Logon Account”** value (with other information) to monitor how or when a particular account is being used.
To monitor activity of specific user accounts outside of working hours, monitor the appropriate **Logon Account + Source Workstation** pairs. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Logon Account”** that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Logon Account”** for accounts that are outside the whitelist. | +| **Account allow list**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Logon Account”** for accounts that are outside the allow list. | | **Restricted-use computers**: You might have certain computers from which certain people (accounts) should not log on. | Monitor the target **Source Workstation** for credential validation requests from the **“Logon Account”** that you are concerned about. | | **Account naming conventions**: Your organization might have specific naming conventions for account names. | Monitor “**Logon Account”** for names that don’t comply with naming conventions. | diff --git a/windows/security/threat-protection/auditing/event-4778.md b/windows/security/threat-protection/auditing/event-4778.md index 92d5783c67..265b39dbcf 100644 --- a/windows/security/threat-protection/auditing/event-4778.md +++ b/windows/security/threat-protection/auditing/event-4778.md @@ -126,7 +126,7 @@ For 4778(S): A session was reconnected to a Window Station. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Subject\\Account Name”** that corresponds to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Subject\\Account Name”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Subject\\Account Name”** that corresponds to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Account Name”** for accounts that are outside the whitelist. | +| **Account allow list**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Account Name”** for accounts that are outside the allow list. | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | If this event corresponds to an action you want to monitor for certain account types, review the **“Subject\\Account Name”** to see whether the account type is as expected. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor this event for the **“Subject\\Account Domain”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should not typically perform any actions. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Subject\\Account Name”** that you are concerned about. | diff --git a/windows/security/threat-protection/auditing/event-4779.md b/windows/security/threat-protection/auditing/event-4779.md index a5a3de2a56..bd733289bb 100644 --- a/windows/security/threat-protection/auditing/event-4779.md +++ b/windows/security/threat-protection/auditing/event-4779.md @@ -130,7 +130,7 @@ For 4779(S): A session was disconnected from a Window Station. | **High-value accounts**: You might have high-value domain or local accounts for which you need to monitor each action.
Examples of high-value accounts are database administrators, built-in local administrator account, domain administrators, service accounts, domain controller accounts and so on. | Monitor this event with the **“Subject\\Account Name”** that corresponds to the high-value account or accounts. | | **Anomalies or malicious actions**: You might have specific requirements for detecting anomalies or monitoring potential malicious actions. For example, you might need to monitor for use of an account outside of working hours. | When you monitor for anomalies or malicious actions, use the **“Subject\\Account Name”** (with other information) to monitor how or when a particular account is being used. | | **Non-active accounts**: You might have non-active, disabled, or guest accounts, or other accounts that should never be used. | Monitor this event with the **“Subject\\Account Name”** that corresponds to the accounts that should never be used. | -| **Account whitelist**: You might have a specific whitelist of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Account Name”** for accounts that are outside the whitelist. | +| **Account whitelist**: You might have a specific allow list of accounts that are the only ones allowed to perform actions corresponding to particular events. | If this event corresponds to a “whitelist-only” action, review the **“Subject\\Account Name”** for accounts that are outside the whitelist. | | **Accounts of different types**: You might want to ensure that certain actions are performed only by certain account types, for example, local or domain account, machine or user account, vendor or employee account, and so on. | If this event corresponds to an action you want to monitor for certain account types, review the **“Subject\\Account Name”** to see whether the account type is as expected. | | **External accounts**: You might be monitoring accounts from another domain, or “external” accounts that are not allowed to perform certain actions (represented by certain specific events). | Monitor this event for the **“Subject\\Account Domain”** corresponding to accounts from another domain or “external” accounts. | | **Restricted-use computers or devices**: You might have certain computers, machines, or devices on which certain people (accounts) should not typically perform any actions.
For example, you might have computers to which connections should not be made from certain accounts or addresses. | Monitor the target **Computer:** (or other target device) for actions performed by the **“Subject\\Account Name”** that you are concerned about.
If you have a target **Computer:** (or other target device) to which connections should not be made from certain accounts or addresses, monitor this event for the corresponding **Client Name** or **Client Address**. | diff --git a/windows/security/threat-protection/auditing/event-5152.md b/windows/security/threat-protection/auditing/event-5152.md index e2b46de2c3..a13a14a7de 100644 --- a/windows/security/threat-protection/auditing/event-5152.md +++ b/windows/security/threat-protection/auditing/event-5152.md @@ -180,7 +180,7 @@ For 5152(F): The Windows Filtering Platform blocked a packet. - If you know that the computer should never contact or be contacted by certain network IP addresses, monitor for these addresses in “**Destination Address**.” -- If you have a “whitelist” of IP addresses that the computer or device is expected to contact or be contacted by, monitor for IP addresses in **“Destination Address”** that are not in the whitelist. +- If you have an allow list of IP addresses that the computer or device is expected to contact or be contacted by, monitor for IP addresses in **“Destination Address”** that are not in the allow list. - If you need to monitor all inbound connections to a specific local port, monitor for [5152](event-5152.md) events with that “**Source Port**.**”** diff --git a/windows/security/threat-protection/auditing/event-5156.md b/windows/security/threat-protection/auditing/event-5156.md index cdfc758875..6a97371b47 100644 --- a/windows/security/threat-protection/auditing/event-5156.md +++ b/windows/security/threat-protection/auditing/event-5156.md @@ -180,7 +180,7 @@ For 5156(S): The Windows Filtering Platform has permitted a connection. - If you know that the computer should never contact or be contacted by certain network IP addresses, monitor for these addresses in “**Destination Address**.**”** -- If you have a “whitelist” of IP addresses that the computer or device is expected to contact or be contacted by, monitor for IP addresses in “**Destination Address”** that are not in the whitelist. +- If you have an allow list of IP addresses that the computer or device is expected to contact or be contacted by, monitor for IP addresses in “**Destination Address”** that are not in the allow list. - If you need to monitor all inbound connections to a specific local port, monitor for [5156](event-5156.md) events with that “**Source Port**.**”** diff --git a/windows/security/threat-protection/auditing/event-5157.md b/windows/security/threat-protection/auditing/event-5157.md index 76a8a34a2d..f35e1cf804 100644 --- a/windows/security/threat-protection/auditing/event-5157.md +++ b/windows/security/threat-protection/auditing/event-5157.md @@ -180,7 +180,7 @@ For 5157(F): The Windows Filtering Platform has blocked a connection. - If you know that the computer should never contact or be contacted by certain network IP addresses, monitor for these addresses in “**Destination Address**.**”** -- If you have a “whitelist” of IP addresses that the computer or device is expected to contact or be contacted by, monitor for IP addresses in “**Destination Address”** that are not in the whitelist. +- If you have an allow list of IP addresses that the computer or device is expected to contact or be contacted by, monitor for IP addresses in “**Destination Address”** that are not in the allow list. - If you need to monitor all inbound connections to a specific local port, monitor for [5157](event-5157.md) events with that “**Source Port**.**”** diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md index db0d9fed09..2a7c5b7895 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md @@ -62,7 +62,7 @@ Because your protection is a cloud service, computers must have access to the in ## Validate connections between your network and the cloud -After whitelisting the URLs listed above, you can test if you are connected to the Microsoft Defender Antivirus cloud service and are correctly reporting and receiving information to ensure you are fully protected. +After allowing the URLs listed above, you can test if you are connected to the Microsoft Defender Antivirus cloud service and are correctly reporting and receiving information to ensure you are fully protected. **Use the cmdline tool to validate cloud-delivered protection:** diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-support.md b/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-support.md index ab87a6d7f1..7f7ce8196d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-support.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-mssp-support.md @@ -159,7 +159,7 @@ Step 1: Create a third-party application Step 2: Get access and refresh tokens from your customer's tenant -Step 3: Whitelist your application on Microsoft Defender Security Center +Step 3: allow your application on Microsoft Defender Security Center @@ -279,11 +279,11 @@ After providing your credentials, you'll need to grant consent to the applicatio 8. In the PowerShell window, you'll receive an access token and a refresh token. Save the refresh token to configure your SIEM connector. -### Step 3: Whitelist your application on Microsoft Defender Security Center -You'll need to whitelist the application you created in Microsoft Defender Security Center. +### Step 3: Allow your application on Microsoft Defender Security Center +You'll need to allow the application you created in Microsoft Defender Security Center. -You'll need to have **Manage portal system settings** permission to whitelist the application. Otherwise, you'll need to request your customer to whitelist the application for you. +You'll need to have **Manage portal system settings** permission to allow the application. Otherwise, you'll need to request your customer to allow the application for you. 1. Go to `https://securitycenter.windows.com?tid=` (replace \ with the customer's tenant ID. diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index d33c9a2195..0f087e2e04 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -37,7 +37,7 @@ Controlled folder access is especially useful in helping to protect your documen With Controlled folder access in place, a notification will appear on the computer where the app attempted to make changes to a protected folder. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. You can also enable the rules individually to customize what techniques the feature monitors. -The protected folders include common system folders, and you can [add additional folders](customize-controlled-folders.md#protect-additional-folders). You can also [allow or whitelist apps](customize-controlled-folders.md#allow-specific-apps-to-make-changes-to-controlled-folders) to give them access to the protected folders. +The protected folders include common system folders, and you can [add additional folders](customize-controlled-folders.md#protect-additional-folders). You can also [allow apps](customize-controlled-folders.md#allow-specific-apps-to-make-changes-to-controlled-folders) to give them access to the protected folders. You can use [audit mode](audit-windows-defender.md) to evaluate how controlled folder access would impact your organization if it were enabled. You can also visit the Windows Defender Testground website at [demo.wd.microsoft.com](https://demo.wd.microsoft.com?ocid=cx-wddocs-testground) to confirm the feature is working and see how it works. diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 858060526b..7853dd9b56 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -1,7 +1,7 @@ --- title: Add additional folders and apps to be protected -description: Add additional folders that should be protected by Controlled folder access, or whitelist apps that are incorrectly blocking changes to important files. -keywords: Controlled folder access, windows 10, windows defender, ransomware, protect, files, folders, customize, add folder, add app, whitelist, add executable +description: Add additional folders that should be protected by Controlled folder access, or allow apps that are incorrectly blocking changes to important files. +keywords: Controlled folder access, windows 10, windows defender, ransomware, protect, files, folders, customize, add folder, add app, allow, add executable search.product: eADQiWindows 10XVcnh ms.pagetype: security ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md b/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md index cf50d3ac04..d892904b96 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md @@ -207,7 +207,7 @@ You may now enroll more devices. You can also enroll them later, after you have ``` -9. To whitelist Defender and Auto Update for displaying notifications in UI on macOS 10.15 (Catalina), import the following .mobileconfig as a custom payload: +9. To allow Defender and Auto Update for displaying notifications in UI on macOS 10.15 (Catalina), import the following .mobileconfig as a custom payload: ```xml diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-other-mdm.md b/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-other-mdm.md index d67b31e398..05fc7da212 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-other-mdm.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-other-mdm.md @@ -72,7 +72,7 @@ MDM uses it to deploy the settings file to **/Library/Managed Preferences/com.mi ### Kernel extension policy -Set up a KEXT or kernel extension policy. Use team identifier **UBF8T346G9** to whitelist kernel extensions provided by Microsoft. +Set up a KEXT or kernel extension policy. Use team identifier **UBF8T346G9** to allow kernel extensions provided by Microsoft. ## Check installation status diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md index b1deb73638..3613ce2eb0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md @@ -24,7 +24,7 @@ ms.topic: conceptual > > In the meantime, starting with macOS Catalina update 10.15.4, Apple introduced a user facing *Legacy System Extension* warning to signal applications that rely on kernel extensions. > -> If you have previously whitelisted the kernel extension as part of your remote deployment, that warning should not be presented to the end user. If you have not previously deployed a policy to whitelist the kernel extension, your users will be presented with the warning. To proactively silence the warning, you can still deploy a configuration to whitelist the kernel extension. Refer to the instructions in the [JAMF-based deployment](mac-install-with-jamf.md#approved-kernel-extension) and [Microsoft Intune-based deployment](mac-install-with-intune.md#create-system-configuration-profiles) topics. +> If you have previously allowed the kernel extension as part of your remote deployment, that warning should not be presented to the end user. If you have not previously deployed a policy to allow the kernel extension, your users will be presented with the warning. To proactively silence the warning, you can still deploy a configuration to allow the kernel extension. Refer to the instructions in the [JAMF-based deployment](mac-install-with-jamf.md#approved-kernel-extension) and [Microsoft Intune-based deployment](mac-install-with-intune.md#create-system-configuration-profiles) topics. ## 101.00.31 diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-automation-folder-exclusions.md b/windows/security/threat-protection/microsoft-defender-atp/manage-automation-folder-exclusions.md index 04299aa29c..a0dcdc9364 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-automation-folder-exclusions.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-automation-folder-exclusions.md @@ -1,7 +1,7 @@ --- title: Manage automation folder exclusions description: Add automation folder exclusions to control the files that are excluded from an automated investigation. -keywords: manage, automation, exclusion, whitelist, blacklist, block, clean, malicious +keywords: manage, automation, exclusion, block, clean, malicious search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md b/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md index c2f2dd8964..328f88b28d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md @@ -2,7 +2,7 @@ title: Manage indicators ms.reviewer: description: Create indicators for a file hash, IP address, URLs, or domains that define the detection, prevention, and exclusion of entities. -keywords: manage, allowed, blocked, whitelist, blacklist, block, clean, malicious, file hash, ip address, urls, domain +keywords: manage, allowed, blocked, block, clean, malicious, file hash, ip address, urls, domain search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md index fc6cb7176a..ebad60bf6b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md +++ b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md @@ -140,12 +140,12 @@ the following discovery methods: If a Transparent proxy or WPAD has been implemented in the network topology, there is no need for special configuration settings. For more information on Microsoft Defender ATP URL exclusions in the proxy, see the -Appendix section in this document for the URLs Whitelisting or on +Appendix section in this document for the URLs allow list or on [Microsoft Docs](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/configure-proxy-internet-windows-defender-advanced-threat-protection#enable-access-to-windows-defender-atp-service-urls-in-the-proxy-server). > [!NOTE] -> For a detailed list of URLs that need to be whitelisted, please see [this article](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus). +> For a detailed list of URLs that need to be allowed, please see [this article](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus). **Manual static proxy configuration:** diff --git a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-mdatp.md b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-mdatp.md index ea417b545a..965b186fad 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-mdatp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-mdatp.md @@ -1,7 +1,7 @@ --- title: Troubleshoot Microsoft Defender Advanced Threat Protection service issues description: Find solutions and work arounds to known issues such as server errors when trying to access the service. -keywords: troubleshoot Microsoft Defender Advanced Threat Protection, troubleshoot Windows ATP, server error, access denied, invalid credentials, no data, dashboard portal, whitelist, event viewer +keywords: troubleshoot Microsoft Defender Advanced Threat Protection, troubleshoot Windows ATP, server error, access denied, invalid credentials, no data, dashboard portal, allow, event viewer search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 @@ -28,7 +28,7 @@ Configure your browser to allow cookies. ## Elements or data missing on the portal If some UI elements or data is missing on Microsoft Defender Security Center it’s possible that proxy settings are blocking it. -Make sure that `*.securitycenter.windows.com` is included the proxy whitelist. +Make sure that `*.securitycenter.windows.com` is included the proxy allow list. > [!NOTE] diff --git a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-np.md b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-np.md index 12ce265639..b435c4b723 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-np.md +++ b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-np.md @@ -74,7 +74,7 @@ If you've tested the feature with the demo site and with audit mode, and network ## Exclude website from network protection scope -To whitelist the website that is being blocked (false positive), add its URL to the [list of trusted sites](https://blogs.msdn.microsoft.com/asiatech/2014/08/19/how-to-add-web-sites-to-trusted-sites-via-gpo-from-dc-installed-ie10-or-higher-ie-version/). Web resources from this list bypass the network protection check. +To allow the website that is being blocked (false positive), add its URL to the [list of trusted sites](https://blogs.msdn.microsoft.com/asiatech/2014/08/19/how-to-add-web-sites-to-trusted-sites-via-gpo-from-dc-installed-ie10-or-higher-ie-version/). Web resources from this list bypass the network protection check. ## Collect diagnostic data for file submissions diff --git a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md index 0628b4a46e..17903652ed 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md +++ b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md @@ -69,11 +69,11 @@ If the portal dashboard, and other sections show an error message such as "Data ![Image of data currently isn't available](images/atp-data-not-available.png) -You'll need to whitelist the `securitycenter.windows.com` and all sub-domains under it. For example `*.securitycenter.windows.com`. +You'll need to allow the `securitycenter.windows.com` and all sub-domains under it. For example `*.securitycenter.windows.com`. ## Portal communication issues -If you encounter issues with accessing the portal, missing data, or restricted access to portions of the portal, you'll need to verify that the following URLs are whitelisted and open for communication. +If you encounter issues with accessing the portal, missing data, or restricted access to portions of the portal, you'll need to verify that the following URLs are allowed and open for communication. - `*.blob.core.windows.net crl.microsoft.com` diff --git a/windows/security/threat-protection/overview-of-threat-mitigations-in-windows-10.md b/windows/security/threat-protection/overview-of-threat-mitigations-in-windows-10.md index 6356278506..15bf8bc91c 100644 --- a/windows/security/threat-protection/overview-of-threat-mitigations-in-windows-10.md +++ b/windows/security/threat-protection/overview-of-threat-mitigations-in-windows-10.md @@ -60,7 +60,7 @@ Windows 10 mitigations that you can configure are listed in the following two ta | **Windows Defender SmartScreen**
helps prevent
malicious applications
from being downloaded | Windows Defender SmartScreen can check the reputation of a downloaded application by using a service that Microsoft maintains. The first time a user runs an app that originates from the Internet (even if the user copied it from another PC), SmartScreen checks to see if the app lacks a reputation or is known to be malicious, and responds accordingly.

**More information**: [Windows Defender SmartScreen](#windows-defender-smartscreen), later in this topic | | **Credential Guard**
helps keep attackers
from gaining access through
Pass-the-Hash or
Pass-the-Ticket attacks | Credential Guard uses virtualization-based security to isolate secrets, such as NTLM password hashes and Kerberos Ticket Granting Tickets, so that only privileged system software can access them.
Credential Guard is included in Windows 10 Enterprise and Windows Server 2016.

**More information**: [Protect derived domain credentials with Credential Guard](/windows/access-protection/credential-guard/credential-guard) | | **Enterprise certificate pinning**
helps prevent
man-in-the-middle attacks
that leverage PKI | Enterprise certificate pinning enables you to protect your internal domain names from chaining to unwanted certificates or to fraudulently issued certificates. With enterprise certificate pinning, you can "pin" (associate) an X.509 certificate and its public key to its Certification Authority, either root or leaf.

**More information**: [Enterprise Certificate Pinning](/windows/access-protection/enterprise-certificate-pinning) | -| **Device Guard**
helps keep a device
from running malware or
other untrusted apps | Device Guard includes a Code Integrity policy that you create; a whitelist of trusted apps—the only apps allowed to run in your organization. Device Guard also includes a powerful system mitigation called hypervisor-protected code integrity (HVCI), which leverages virtualization-based security (VBS) to protect Windows' kernel-mode code integrity validation process. HVCI has specific hardware requirements, and works with Code Integrity policies to help stop attacks even if they gain access to the kernel.
Device Guard is included in Windows 10 Enterprise and Windows Server 2016.

**More information**: [Introduction to Device Guard](/windows/device-security/device-guard/introduction-to-device-guard-virtualization-based-security-and-code-integrity-policies) | +| **Device Guard**
helps keep a device
from running malware or
other untrusted apps | Device Guard includes a Code Integrity policy that you create; an allowlist of trusted apps—the only apps allowed to run in your organization. Device Guard also includes a powerful system mitigation called hypervisor-protected code integrity (HVCI), which leverages virtualization-based security (VBS) to protect Windows' kernel-mode code integrity validation process. HVCI has specific hardware requirements, and works with Code Integrity policies to help stop attacks even if they gain access to the kernel.
Device Guard is included in Windows 10 Enterprise and Windows Server 2016.

**More information**: [Introduction to Device Guard](/windows/device-security/device-guard/introduction-to-device-guard-virtualization-based-security-and-code-integrity-policies) | | **Microsoft Defender Antivirus**,
which helps keep devices
free of viruses and other
malware | Windows 10 includes Microsoft Defender Antivirus, a robust inbox antimalware solution. Microsoft Defender Antivirus has been significantly improved since it was introduced in Windows 8.

**More information**: [Microsoft Defender Antivirus](#microsoft-defender-antivirus), later in this topic | | **Blocking of untrusted fonts**
helps prevent fonts
from being used in
elevation-of-privilege attacks | Block Untrusted Fonts is a setting that allows you to prevent users from loading fonts that are "untrusted" onto your network, which can mitigate elevation-of-privilege attacks associated with the parsing of font files. However, as of Windows 10, version 1703, this mitigation is less important, because font parsing is isolated in an [AppContainer sandbox](https://docs.microsoft.com/windows/win32/secauthz/appcontainer-isolation) (for a list describing this and other kernel pool protections, see [Kernel pool protections](#kernel-pool-protections), later in this topic).

**More information**: [Block untrusted fonts in an enterprise](/windows/threat-protection/block-untrusted-fonts-in-enterprise) | | **Memory protections**
help prevent malware
from using memory manipulation
techniques such as buffer
overruns | These mitigations, listed in [Table 2](#table-2), help to protect against memory-based attacks, where malware or other code manipulates memory to gain control of a system (for example, malware that attempts to use buffer overruns to inject malicious executable code into memory. Note:
A subset of apps will not be able to run if some of these mitigations are set to their most restrictive settings. Testing can help you maximize protection while still allowing these apps to run.

**More information**: [Table 2](#table-2), later in this topic | diff --git a/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md b/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md index 69291f7a17..da3aea58e5 100644 --- a/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md +++ b/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md @@ -174,7 +174,7 @@ To gain the most value out of the baseline subscription we recommend to have the - Apply a security audit policy that is a super-set of the recommended minimum audit policy. For more info, see [Appendix A – Minimum Recommended minimum Audit Policy](#bkmk-appendixa). This ensures that the security event log is generating the required events. - Apply at least an Audit-Only AppLocker policy to devices. - - If you are already whitelisting or blacklisting events by using AppLocker, then this requirement is met. + - If you are already allowing or restricting events by using AppLocker, then this requirement is met. - AppLocker events contain extremely useful information, such as file hash and digital signature information for executables and scripts. - Enable disabled event channels and set the minimum size for modern event files. diff --git a/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md b/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md index 4ead268500..a7254e397b 100644 --- a/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md +++ b/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md @@ -1,7 +1,7 @@ --- title: Allow LOB Win32 Apps on Intune-Managed S Mode Devices (Windows 10) description: Using WDAC supplemental policies, you can expand the S mode base policy on your Intune-managed devices. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/allow-com-object-registration-in-windows-defender-application-control-policy.md b/windows/security/threat-protection/windows-defender-application-control/allow-com-object-registration-in-windows-defender-application-control-policy.md index 7591c17136..fd016ed909 100644 --- a/windows/security/threat-protection/windows-defender-application-control/allow-com-object-registration-in-windows-defender-application-control-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/allow-com-object-registration-in-windows-defender-application-control-policy.md @@ -1,7 +1,7 @@ --- title: Allow COM object registration in a WDAC policy (Windows 10) description: You can allow COM object registration in a Windows Defender Application Control policy. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/audit-windows-defender-application-control-policies.md b/windows/security/threat-protection/windows-defender-application-control/audit-windows-defender-application-control-policies.md index 8f28ada884..c5f703e0aa 100644 --- a/windows/security/threat-protection/windows-defender-application-control/audit-windows-defender-application-control-policies.md +++ b/windows/security/threat-protection/windows-defender-application-control/audit-windows-defender-application-control-policies.md @@ -1,7 +1,7 @@ --- title: Audit Windows Defender Application Control policies (Windows 10) description: Audits allow admins to discover apps that were missed during an initial policy scan and to identify new apps that were installed since the policy was created. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/create-code-signing-cert-for-windows-defender-application-control.md b/windows/security/threat-protection/windows-defender-application-control/create-code-signing-cert-for-windows-defender-application-control.md index e07be3cc57..a7e35f839e 100644 --- a/windows/security/threat-protection/windows-defender-application-control/create-code-signing-cert-for-windows-defender-application-control.md +++ b/windows/security/threat-protection/windows-defender-application-control/create-code-signing-cert-for-windows-defender-application-control.md @@ -1,7 +1,7 @@ --- title: Create a code signing cert for Windows Defender Application Control (Windows 10) description: Learn how to set up a publicly-issued code signing certificate, so you can sign catalog files or WDAC policies internally. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.reviewer: manager: dansimp diff --git a/windows/security/threat-protection/windows-defender-application-control/create-initial-default-policy.md b/windows/security/threat-protection/windows-defender-application-control/create-initial-default-policy.md index 1a27567a27..077d800cdc 100644 --- a/windows/security/threat-protection/windows-defender-application-control/create-initial-default-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/create-initial-default-policy.md @@ -1,7 +1,7 @@ --- title: Create a WDAC policy for fixed-workload devices using a reference computer (Windows 10) description: To create a Windows Defender Application Control (WDAC) policy for fixed-workload devices within your organization, follow this guide. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy @@ -66,7 +66,7 @@ To create a WDAC policy, copy each of the following commands into an elevated Wi > [!Note] > - > - When you specify the **-UserPEs** parameter (to include user mode executables in the scan), rule option **0 Enabled:UMCI** is automatically added to the WDAC policy. In contrast, if you do not specify **-UserPEs**, the policy will be empty of user mode executables and will only have rules for kernel mode binaries like drivers, in other words, the whitelist will not include applications. If you create such a policy and later add rule option **0 Enabled:UMCI**, all attempts to start applications will cause a response from Windows Defender Application Control. In audit mode, the response is logging an event, and in enforced mode, the response is blocking the application. + > - When you specify the **-UserPEs** parameter (to include user mode executables in the scan), rule option **0 Enabled:UMCI** is automatically added to the WDAC policy. In contrast, if you do not specify **-UserPEs**, the policy will be empty of user mode executables and will only have rules for kernel mode binaries like drivers, in other words, the allow list will not include applications. If you create such a policy and later add rule option **0 Enabled:UMCI**, all attempts to start applications will cause a response from Windows Defender Application Control. In audit mode, the response is logging an event, and in enforced mode, the response is blocking the application. > - You can add the **-MultiplePolicyFormat** parameter when creating policies which will be deployed to computers which are running Windows build 1903+. For more information about multiple policies, see [Deploy multiple Windows Defender Application Control policies](deploy-multiple-windows-defender-application-control-policies.md). > - You can add the **-Fallback** parameter to catch any applications not discovered using the primary file rule level specified by the **-Level** parameter. For more information about file rule level options, see [Windows Defender Application Control file rule levels](select-types-of-rules-to-create.md). > diff --git a/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md b/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md index 9957c0ae10..8b4a0fa4ff 100644 --- a/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md +++ b/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md @@ -1,7 +1,7 @@ --- title: Create a WDAC policy for fully-managed devices (Windows 10) description: Windows Defender Application Control restricts which applications users are allowed to run and the code that runs in the system core. -keywords: whitelisting, security, malware +keywords: security, malware ms.topic: conceptual ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 diff --git a/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-lightly-managed-devices.md b/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-lightly-managed-devices.md index fbee02749f..89cecfc78b 100644 --- a/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-lightly-managed-devices.md +++ b/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-lightly-managed-devices.md @@ -1,7 +1,7 @@ --- title: Create a WDAC policy for lightly-managed devices (Windows 10) description: Windows Defender Application Control restricts which applications users are allowed to run and the code that runs in the system core. -keywords: whitelisting, security, malware +keywords: security, malware ms.topic: conceptual ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 diff --git a/windows/security/threat-protection/windows-defender-application-control/deploy-catalog-files-to-support-windows-defender-application-control.md b/windows/security/threat-protection/windows-defender-application-control/deploy-catalog-files-to-support-windows-defender-application-control.md index 1ea8df15e9..3abf426167 100644 --- a/windows/security/threat-protection/windows-defender-application-control/deploy-catalog-files-to-support-windows-defender-application-control.md +++ b/windows/security/threat-protection/windows-defender-application-control/deploy-catalog-files-to-support-windows-defender-application-control.md @@ -1,7 +1,7 @@ --- title: Deploy catalog files to support Windows Defender Application Control (Windows 10) description: Catalog files simplify running unsigned applications in the presence of a Windows Defender Application Control (WDAC) policy. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/deploy-multiple-windows-defender-application-control-policies.md b/windows/security/threat-protection/windows-defender-application-control/deploy-multiple-windows-defender-application-control-policies.md index 0fc1b53db9..f4ee690c02 100644 --- a/windows/security/threat-protection/windows-defender-application-control/deploy-multiple-windows-defender-application-control-policies.md +++ b/windows/security/threat-protection/windows-defender-application-control/deploy-multiple-windows-defender-application-control-policies.md @@ -1,7 +1,7 @@ --- title: Use multiple Windows Defender Application Control Policies (Windows 10) description: Windows Defender Application Control supports multiple code integrity policies for one device. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-group-policy.md b/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-group-policy.md index 1700437f22..9151364753 100644 --- a/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-group-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-group-policy.md @@ -1,7 +1,7 @@ --- title: Deploy WDAC policies via Group Policy (Windows 10) description: Windows Defender Application Control (WDAC) policies can easily be deployed and managed with Group Policy. Learn how by following this step-by-step guide. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune.md b/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune.md index 2ec54bcba7..651222522b 100644 --- a/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune.md +++ b/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune.md @@ -1,7 +1,7 @@ --- title: Deploy Windows Defender Application Control (WDAC) policies by using Microsoft Intune (Windows 10) description: You can use Microsoft Intune to configure Windows Defender Application Control (WDAC). Learn how with this step-by-step guide. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/disable-windows-defender-application-control-policies.md b/windows/security/threat-protection/windows-defender-application-control/disable-windows-defender-application-control-policies.md index 31261f15de..b1e6b39844 100644 --- a/windows/security/threat-protection/windows-defender-application-control/disable-windows-defender-application-control-policies.md +++ b/windows/security/threat-protection/windows-defender-application-control/disable-windows-defender-application-control-policies.md @@ -1,7 +1,7 @@ --- title: Disable Windows Defender Application Control policies (Windows 10) description: This topic covers how to disable unsigned or signed WDAC policies. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/enforce-windows-defender-application-control-policies.md b/windows/security/threat-protection/windows-defender-application-control/enforce-windows-defender-application-control-policies.md index ea8808ca7f..9d9abf86c3 100644 --- a/windows/security/threat-protection/windows-defender-application-control/enforce-windows-defender-application-control-policies.md +++ b/windows/security/threat-protection/windows-defender-application-control/enforce-windows-defender-application-control-policies.md @@ -1,7 +1,7 @@ --- title: Enforce Windows Defender Application Control (WDAC) policies (Windows 10) description: Learn how to test a Windows Defender Application Control (WDAC) policy in enforced mode by following these steps in an elevated Windows PowerShell session. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md b/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md index 182c28dedc..965a842f19 100644 --- a/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md +++ b/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md @@ -1,7 +1,7 @@ --- title: Understanding Application Control events (Windows 10) description: Learn what different Windows Defender Application Control events signify. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/example-wdac-base-policies.md b/windows/security/threat-protection/windows-defender-application-control/example-wdac-base-policies.md index 6a84a32f71..293ed79adc 100644 --- a/windows/security/threat-protection/windows-defender-application-control/example-wdac-base-policies.md +++ b/windows/security/threat-protection/windows-defender-application-control/example-wdac-base-policies.md @@ -1,7 +1,7 @@ --- title: Example WDAC base policies (Windows 10) description: When creating a WDAC policy for an organization, start from one of the many available example base policies. -keywords: whitelisting, security, malware +keywords: security, malware ms.topic: article ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 diff --git a/windows/security/threat-protection/windows-defender-application-control/feature-availability.md b/windows/security/threat-protection/windows-defender-application-control/feature-availability.md index d7bdf7e3c3..638d0f40cd 100644 --- a/windows/security/threat-protection/windows-defender-application-control/feature-availability.md +++ b/windows/security/threat-protection/windows-defender-application-control/feature-availability.md @@ -1,7 +1,7 @@ --- title: Feature Availability description: Compare WDAC and AppLocker feature availability. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/manage-packaged-apps-with-windows-defender-application-control.md b/windows/security/threat-protection/windows-defender-application-control/manage-packaged-apps-with-windows-defender-application-control.md index ebb66d445a..0c2cbcf366 100644 --- a/windows/security/threat-protection/windows-defender-application-control/manage-packaged-apps-with-windows-defender-application-control.md +++ b/windows/security/threat-protection/windows-defender-application-control/manage-packaged-apps-with-windows-defender-application-control.md @@ -1,7 +1,7 @@ --- title: Manage packaged apps with WDAC (Windows 10) description: Packaged apps, also known as Universal Windows apps, allow you to control the entire app by using a single Windows Defender Application Control (WDAC) rule. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/merge-windows-defender-application-control-policies.md b/windows/security/threat-protection/windows-defender-application-control/merge-windows-defender-application-control-policies.md index 6054e9f6bd..8437b48c3c 100644 --- a/windows/security/threat-protection/windows-defender-application-control/merge-windows-defender-application-control-policies.md +++ b/windows/security/threat-protection/windows-defender-application-control/merge-windows-defender-application-control-policies.md @@ -1,7 +1,7 @@ --- title: Merge Windows Defender Application Control policies (Windows 10) description: Because each computer running Windows 10 can have only one WDAC policy, you will occasionally need to merge two or more policies. Learn how with this guide. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md index 8e442a2a0f..443397ada3 100644 --- a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md +++ b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md @@ -1,7 +1,7 @@ --- title: Microsoft recommended block rules (Windows 10) description: View a list of recommended block rules, based on knowledge shared between Microsoft and the wider security community. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy @@ -26,7 +26,7 @@ ms.date: 04/09/2019 Members of the security community\* continuously collaborate with Microsoft to help protect customers. With the help of their valuable reports, Microsoft has identified a list of valid applications that an attacker could also potentially use to bypass Windows Defender Application Control. -Unless your use scenarios explicitly require them, Microsoft recommends that you block the following applications. These applications or files can be used by an attacker to circumvent application whitelisting policies, including Windows Defender Application Control: +Unless your use scenarios explicitly require them, Microsoft recommends that you block the following applications. These applications or files can be used by an attacker to circumvent application allow policies, including Windows Defender Application Control: - addinprocess.exe - addinprocess32.exe @@ -53,7 +53,7 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you [1]A vulnerability in bginfo.exe has been fixed in the latest version 4.22. If you use BGInfo, for security, make sure to download and run the latest version here [BGInfo 4.22](https://docs.microsoft.com/sysinternals/downloads/bginfo). Note that BGInfo versions earlier than 4.22 are still vulnerable and should be blocked. -[2]If you are using your reference system in a development context and use msbuild.exe to build managed applications, we recommend that you whitelist msbuild.exe in your code integrity policies. However, if your reference system is an end user device that is not being used in a development context, we recommend that you block msbuild.exe. +[2]If you are using your reference system in a development context and use msbuild.exe to build managed applications, we recommend that you allow msbuild.exe in your code integrity policies. However, if your reference system is an end user device that is not being used in a development context, we recommend that you block msbuild.exe. *Microsoft recognizes the efforts of those in the security community who help us protect customers through responsible vulnerability disclosure, and extends thanks to the following people: diff --git a/windows/security/threat-protection/windows-defender-application-control/plan-windows-defender-application-control-management.md b/windows/security/threat-protection/windows-defender-application-control/plan-windows-defender-application-control-management.md index cccca7a73e..9c6d253b10 100644 --- a/windows/security/threat-protection/windows-defender-application-control/plan-windows-defender-application-control-management.md +++ b/windows/security/threat-protection/windows-defender-application-control/plan-windows-defender-application-control-management.md @@ -1,7 +1,7 @@ --- title: Plan for WDAC policy management (Windows 10) description: How to plan for Windows Defender Application Control (WDAC) policy management. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/querying-application-control-events-centrally-using-advanced-hunting.md b/windows/security/threat-protection/windows-defender-application-control/querying-application-control-events-centrally-using-advanced-hunting.md index 74f69040e8..3b0e313266 100644 --- a/windows/security/threat-protection/windows-defender-application-control/querying-application-control-events-centrally-using-advanced-hunting.md +++ b/windows/security/threat-protection/windows-defender-application-control/querying-application-control-events-centrally-using-advanced-hunting.md @@ -1,7 +1,7 @@ --- title: Query Application Control events with Advanced Hunting (Windows 10) description: Learn how to query Windows Defender Application Control events across your entire organization by using Advanced Hunting. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/select-types-of-rules-to-create.md b/windows/security/threat-protection/windows-defender-application-control/select-types-of-rules-to-create.md index 5b823d7eeb..e14032719c 100644 --- a/windows/security/threat-protection/windows-defender-application-control/select-types-of-rules-to-create.md +++ b/windows/security/threat-protection/windows-defender-application-control/select-types-of-rules-to-create.md @@ -1,7 +1,7 @@ --- title: Understand WDAC policy rules and file rules (Windows 10) description: Windows Defender Application Control (WDAC) provides control over a computer running Windows 10 by using policies that specify whether a driver or application is trusted and can be run. A policy includes *policy rules* that control options. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/types-of-devices.md b/windows/security/threat-protection/windows-defender-application-control/types-of-devices.md index db8225d362..601d01340e 100644 --- a/windows/security/threat-protection/windows-defender-application-control/types-of-devices.md +++ b/windows/security/threat-protection/windows-defender-application-control/types-of-devices.md @@ -1,7 +1,7 @@ --- title: Policy creation for common WDAC usage scenarios (Windows 10) description: Develop a plan for deploying Windows Defender Application Control (WDAC) in your organization based on these common scenarios. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/understand-windows-defender-application-control-policy-design-decisions.md b/windows/security/threat-protection/windows-defender-application-control/understand-windows-defender-application-control-policy-design-decisions.md index 54d8ea8492..266e60b744 100644 --- a/windows/security/threat-protection/windows-defender-application-control/understand-windows-defender-application-control-policy-design-decisions.md +++ b/windows/security/threat-protection/windows-defender-application-control/understand-windows-defender-application-control-policy-design-decisions.md @@ -1,7 +1,7 @@ --- title: Understand Windows Defender Application Control policy design decisions (Windows 10) description: Understand Windows Defender Application Control policy design decisions. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.reviewer: manager: dansimp diff --git a/windows/security/threat-protection/windows-defender-application-control/use-code-signing-to-simplify-application-control-for-classic-windows-applications.md b/windows/security/threat-protection/windows-defender-application-control/use-code-signing-to-simplify-application-control-for-classic-windows-applications.md index da33a878fe..555168716a 100644 --- a/windows/security/threat-protection/windows-defender-application-control/use-code-signing-to-simplify-application-control-for-classic-windows-applications.md +++ b/windows/security/threat-protection/windows-defender-application-control/use-code-signing-to-simplify-application-control-for-classic-windows-applications.md @@ -1,7 +1,7 @@ --- title: Use code signing to simplify application control for classic Windows applications (Windows 10) description: With embedded signing, your WDAC policies typically do not have to be updated when an app is updated. To set this up, you can choose from a variety of methods. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.reviewer: manager: dansimp diff --git a/windows/security/threat-protection/windows-defender-application-control/use-device-guard-signing-portal-in-microsoft-store-for-business.md b/windows/security/threat-protection/windows-defender-application-control/use-device-guard-signing-portal-in-microsoft-store-for-business.md index 5e852821b5..d050e42b00 100644 --- a/windows/security/threat-protection/windows-defender-application-control/use-device-guard-signing-portal-in-microsoft-store-for-business.md +++ b/windows/security/threat-protection/windows-defender-application-control/use-device-guard-signing-portal-in-microsoft-store-for-business.md @@ -1,7 +1,7 @@ --- title: Use the Device Guard Signing Portal in the Microsoft Store for Business (Windows 10) description: You can sign code integrity policies with the Device Guard signing portal to prevent them from being tampered with after they're deployed. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.reviewer: manager: dansimp diff --git a/windows/security/threat-protection/windows-defender-application-control/use-signed-policies-to-protect-windows-defender-application-control-against-tampering.md b/windows/security/threat-protection/windows-defender-application-control/use-signed-policies-to-protect-windows-defender-application-control-against-tampering.md index 7386316a87..5bbcb531fa 100644 --- a/windows/security/threat-protection/windows-defender-application-control/use-signed-policies-to-protect-windows-defender-application-control-against-tampering.md +++ b/windows/security/threat-protection/windows-defender-application-control/use-signed-policies-to-protect-windows-defender-application-control-against-tampering.md @@ -1,7 +1,7 @@ --- title: Use signed policies to protect Windows Defender Application Control against tampering (Windows 10) description: Signed WDAC policies give organizations the highest level of malware protection available in Windows 10. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.reviewer: manager: dansimp diff --git a/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-policy-to-control-specific-plug-ins-add-ins-and-modules.md b/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-policy-to-control-specific-plug-ins-add-ins-and-modules.md index 8dfefbb2b5..43cc718d71 100644 --- a/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-policy-to-control-specific-plug-ins-add-ins-and-modules.md +++ b/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-policy-to-control-specific-plug-ins-add-ins-and-modules.md @@ -1,7 +1,7 @@ --- title: Use a Windows Defender Application Control policy to control specific plug-ins, add-ins, and modules (Windows 10) description: WDAC policies can be used not only to control applications, but also to control whether specific plug-ins, add-ins, and modules can run from specific apps. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.reviewer: manager: dansimp diff --git a/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-dynamic-code-security.md b/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-dynamic-code-security.md index 90585fe7cb..5490ef7a77 100644 --- a/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-dynamic-code-security.md +++ b/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-dynamic-code-security.md @@ -1,7 +1,7 @@ --- title: Windows Defender Application Control and .NET Hardening (Windows 10) description: Dynamic Code Security is an application control feature that can verify code loaded by .NET at runtime. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-intelligent-security-graph.md b/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-intelligent-security-graph.md index 09a7320fa3..7705229827 100644 --- a/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-intelligent-security-graph.md +++ b/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-intelligent-security-graph.md @@ -1,7 +1,7 @@ --- title: Authorize reputable apps with the Intelligent Security Graph (ISG) (Windows 10) description: Automatically authorize applications that Microsoft’s ISG recognizes as having known good reputation. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md b/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md index 675381d926..8ad3ce6f98 100644 --- a/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md +++ b/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-managed-installer.md @@ -1,7 +1,7 @@ --- title: Authorize apps deployed with a WDAC managed installer (Windows 10) description: Explains how you can use a managed installer to automatically authorize applications deployed and installed by a designated software distribution solution, such as Microsoft Endpoint Configuration Manager. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy @@ -56,7 +56,7 @@ The identity of the managed installer executable(s) is specified in an AppLocker Currently, neither the AppLocker policy creation UI in GPO Editor nor the PowerShell cmdlets allow for directly specifying rules for the Managed Installer rule collection. However, a text editor can be used to make the simple changes needed to an EXE or DLL rule collection policy to specify Type="ManagedInstaller", so that the new rule can be imported into a GPO. An example of a valid Managed Installer rule collection is shown below. -For more information about creating an AppLocker policy that includes a managed installer and configuring client devices, see [Simplify application whitelisting with Configuration Manager and Windows 10](https://cloudblogs.microsoft.com/enterprisemobility/2016/06/20/configmgr-as-a-managed-installer-with-win10/). +For more information about creating an AppLocker policy that includes a managed installer and configuring client devices, see [Simplify application listing with Configuration Manager and Windows 10](https://cloudblogs.microsoft.com/enterprisemobility/2016/06/20/configmgr-as-a-managed-installer-with-win10/). As mentioned above, the AppLocker CSP for OMA-URI policies does not currently support the Managed Installer rule collection or the Service Enforcement rule extensions mentioned below. diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-and-applocker-overview.md b/windows/security/threat-protection/windows-defender-application-control/wdac-and-applocker-overview.md index 7a955f8700..73deb5fff0 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-and-applocker-overview.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-and-applocker-overview.md @@ -1,7 +1,7 @@ --- title: WDAC and AppLocker Overview description: Compare Windows application control technologies. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-deployment-guide.md b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-deployment-guide.md index 9e0b0651d1..0484518b2a 100644 --- a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-deployment-guide.md +++ b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-deployment-guide.md @@ -1,7 +1,7 @@ --- title: Planning and getting started on the Windows Defender Application Control deployment process (Windows 10) description: Learn how to gather information, create a plan, and begin to test initial code integrity policies for a Windows Defender Application Control deployment. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy @@ -46,7 +46,7 @@ This topic provides a roadmap for planning and getting started on the Windows De Legitimate applications from trusted vendors provide valid functionality. However, an attacker could also potentially use that same functionality to run malicious executable code that could bypass WDAC. - For operational scenarios that require elevated security, certain applications with known Code Integrity bypasses may represent a security risk if you whitelist them in your WDAC policies. Other applications, where older versions of the application had vulnerabilities, also represent a risk. Therefore, you may want to deny or block such applications from your WDAC policies. For applications with vulnerabilities, once the vulnerabilities are fixed you can create a rule that only allows the fixed or newer versions of that application. The decision to allow or block applications depends on the context and on how the reference system is being used. + For operational scenarios that require elevated security, certain applications with known Code Integrity bypasses may represent a security risk if you allow them in your WDAC policies. Other applications, where older versions of the application had vulnerabilities, also represent a risk. Therefore, you may want to deny or block such applications from your WDAC policies. For applications with vulnerabilities, once the vulnerabilities are fixed you can create a rule that only allows the fixed or newer versions of that application. The decision to allow or block applications depends on the context and on how the reference system is being used. Security professionals collaborate with Microsoft continuously to help protect customers. With the help of their valuable reports, Microsoft has identified a list of known applications that an attacker could potentially use to bypass Windows Defender Application Control. Depending on the context, you may want to block these applications. To view this list of applications and for use case examples, such as disabling msbuild.exe, see [Microsoft recommended block rules](microsoft-recommended-block-rules.md). diff --git a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide.md b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide.md index 66a776eaf6..1d18afd93e 100644 --- a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide.md +++ b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide.md @@ -1,7 +1,7 @@ --- title: Windows Defender Application Control design guide (Windows 10) description: Microsoft Windows Defender Application Control allows organizations to control what apps and drivers will run on their managed Windows 10 devices. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-operational-guide.md b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-operational-guide.md index d3e82010c2..9ee20747b7 100644 --- a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-operational-guide.md +++ b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-operational-guide.md @@ -1,7 +1,7 @@ --- title: Managing and troubleshooting Windows Defender Application Control policies (Windows 10) description: Gather information about how your deployed Windows Defender Application Control policies are behaving. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control.md b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control.md index 7f723913e2..e6c525c383 100644 --- a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control.md +++ b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control.md @@ -1,7 +1,7 @@ --- title: Application Control for Windows description: Application Control restricts which applications users are allowed to run and the code that runs in the system core. -keywords: whitelisting, security, malware +keywords: security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/security/threat-protection/windows-defender-system-guard/how-hardware-based-root-of-trust-helps-protect-windows.md b/windows/security/threat-protection/windows-defender-system-guard/how-hardware-based-root-of-trust-helps-protect-windows.md index 9c4ca00884..e389280262 100644 --- a/windows/security/threat-protection/windows-defender-system-guard/how-hardware-based-root-of-trust-helps-protect-windows.md +++ b/windows/security/threat-protection/windows-defender-system-guard/how-hardware-based-root-of-trust-helps-protect-windows.md @@ -37,7 +37,7 @@ This hardware-based root of trust comes from the device’s Secure Boot feature, This technique of measuring the static early boot UEFI components is called the Static Root of Trust for Measurement (SRTM). As there are thousands of PC vendors that produce numerous models with different UEFI BIOS versions, there becomes an incredibly large number of SRTM measurements upon bootup. -Two techniques exist to establish trust here—either maintain a list of known 'bad' SRTM measurements (also known as a blacklist), or a list of known 'good' SRTM measurements (also known as a whitelist). +Two techniques exist to establish trust here—either maintain a list of known 'bad' SRTM measurements (also known as a block list), or a list of known 'good' SRTM measurements (also known as an allow list). Each option has a drawback: - A list of known 'bad' SRTM measurements allows a hacker to change just 1 bit in a component to create an entirely new SRTM hash that needs to be listed. This means that the SRTM flow is inherently brittle - a minor change can invalidate the entire chain of trust. diff --git a/windows/security/threat-protection/windows-defender-system-guard/system-guard-how-hardware-based-root-of-trust-helps-protect-windows.md b/windows/security/threat-protection/windows-defender-system-guard/system-guard-how-hardware-based-root-of-trust-helps-protect-windows.md index a17ad45ab9..33b2c4f62e 100644 --- a/windows/security/threat-protection/windows-defender-system-guard/system-guard-how-hardware-based-root-of-trust-helps-protect-windows.md +++ b/windows/security/threat-protection/windows-defender-system-guard/system-guard-how-hardware-based-root-of-trust-helps-protect-windows.md @@ -38,7 +38,7 @@ This hardware-based root of trust comes from the device’s Secure Boot feature, This technique of measuring the static early boot UEFI components is called the Static Root of Trust for Measurement (SRTM). As there are thousands of PC vendors that produce numerous models with different UEFI BIOS versions, there becomes an incredibly large number of SRTM measurements upon bootup. -Two techniques exist to establish trust here—either maintain a list of known 'bad' SRTM measurements (also known as a blacklist), or a list of known 'good' SRTM measurements (also known as a whitelist). +Two techniques exist to establish trust here—either maintain a list of known 'bad' SRTM measurements (also known as a block list), or a list of known 'good' SRTM measurements (also known as an allow list). Each option has a drawback: - A list of known 'bad' SRTM measurements allows a hacker to change just 1 bit in a component to create an entirely new SRTM hash that needs to be listed. This means that the SRTM flow is inherently brittle - a minor change can invalidate the entire chain of trust. From 23e4d58f6fcb78988a4fda1068b74e3017daf1ea Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Mon, 15 Jun 2020 08:58:13 -0700 Subject: [PATCH 061/145] pencil edits --- devices/surface/manage-surface-driver-and-firmware-updates.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/devices/surface/manage-surface-driver-and-firmware-updates.md b/devices/surface/manage-surface-driver-and-firmware-updates.md index 2bbe968461..39fccb3ec4 100644 --- a/devices/surface/manage-surface-driver-and-firmware-updates.md +++ b/devices/surface/manage-surface-driver-and-firmware-updates.md @@ -142,8 +142,8 @@ This file name provides the following information: ## Learn more - [Download drivers and firmware for Surface](https://support.microsoft.com/help/4023482/surface-download-drivers-and-firmware) -- [How to manage Surface driver updates in Configuration Manager.](https://support.microsoft.com/help/4098906/manage-surface-driver-updates-in-configuration-manager) -- [Deploy applications with Configuration Manager](https://docs.microsoft.com/configmgr/apps/deploy-use/deploy-applications). +- [How to manage Surface driver updates in Configuration Manager](https://support.microsoft.com/help/4098906/manage-surface-driver-updates-in-configuration-manager) +- [Deploy applications with Configuration Manager](https://docs.microsoft.com/configmgr/apps/deploy-use/deploy-applications) - [Endpoint Configuration Manager documentation](https://docs.microsoft.com/configmgr/) - [Microsoft Deployment Toolkit documentation](https://docs.microsoft.com/configmgr/mdt/) - [Deploy Windows 10 with the Microsoft Deployment Toolkit](https://docs.microsoft.com/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit) From 29be7a044fae08bc374d1d7627df4de70320476d Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Mon, 15 Jun 2020 09:35:57 -0700 Subject: [PATCH 062/145] fixing brkn link --- windows/client-management/mdm/applocker-csp.md | 1 - .../mdm/new-in-windows-mdm-enrollment-management.md | 5 ++--- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/windows/client-management/mdm/applocker-csp.md b/windows/client-management/mdm/applocker-csp.md index ea7d1567cb..973ba78922 100644 --- a/windows/client-management/mdm/applocker-csp.md +++ b/windows/client-management/mdm/applocker-csp.md @@ -40,7 +40,6 @@ Defines restrictions for applications. Additional information: - [Find publisher and product name of apps](#productname) - step-by-step guide for getting the publisher and product names for various Windows apps. -- [Whitelist example](#whitelist-examples) - example for Windows 10 Mobile that denies all apps except the ones listed. **AppLocker/ApplicationLaunchRestrictions/_Grouping_** Grouping nodes are dynamic nodes, and there may be any number of them for a given enrollment (or a given context). The actual identifiers are selected by the management endpoint, whose job it is to determine what their purpose is, and to not conflict with other identifiers that they define. diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index c2b889cfe1..aa8a5bcf89 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -44,8 +44,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s - [Server-initiated unenrollment failure](#server-initiated-unenrollment-failure) - [Certificates causing issues with Wi-Fi and VPN](#certificates-causing-issues-with-wi-fi-and-vpn) - [Version information for mobile devices](#version-information-for-mobile-devices) - - [Upgrading Windows Phone 8.1 devices with app allow list using ApplicationRestriction policy has issues](#upgrading-windows-phone-81-devices-with-app-whitelisting-using-applicationrestriction-policy-has-issues) - - [Apps dependent on Microsoft Frameworks may get blocked in phones prior to build 10586.218](#apps-dependent-on-microsoft-frameworks-may-get-blocked-in-phones-prior-to-build-10586218) + - [Apps dependent on Microsoft Frameworks may get blocked in phones prior to build 10586.218](#apps-dependent-on-microsoft-frameworks-may-get-blocked-in-phones-prior-to-build-10586218) - [Multiple certificates might cause Wi-Fi connection instabilities in Windows 10 Mobile](#multiple-certificates-might-cause-wi-fi-connection-instabilities-in-windows-10-mobile) - [Remote PIN reset not supported in Azure Active Directory joined mobile devices](#remote-pin-reset-not-supported-in-azure-active-directory-joined-mobile-devices) - [MDM client will immediately check-in with the MDM server after client renews WNS channel URI](#mdm-client-will-immediately-check-in-with-the-mdm-server-after-client-renews-wns-channel-uri) @@ -2946,7 +2945,7 @@ How do I turn if off? | The service can be stopped from the "Services" console o
AppLocker CSP

Added two new SyncML examples (to disable the calendar app and to block usage of the map app) in Allow list examples.

+

Added two new SyncML examples (to disable the calendar app and to block usage of the map app) in Allow list examples.

DeviceManageability CSP
AppLocker CSP

Added two new SyncML examples (to disable the calendar app and to block usage of the map app) in Allow list examples.

+

Added two new SyncML examples (to disable the calendar app and to block usage of the map app) in Allow list examples.

DeviceManageability CSP
+ + + + +
PolicyMore information -
Device restriction / Password policy -When certain DeviceLock policies, such as minimum password length and password complexity, or any similar group policy settings, including any that disable auto-logon, are applied to a device, and that device reboots during the device Enrollment Status Page (ESP), the out-of-box experience or user desktop auto-logon could fail unexpectantly. +
Device restriction / Password PolicyWhen certain DeviceLock policies, such as minimum password length and password complexity, or any similar group policy settings, including any that disable auto-logon, are applied to a device, and that device reboots during the device Enrollment Status Page (ESP), the out-of-box experience or user desktop auto-logon could fail unexpectantly. This is especially true for kiosk scenarios where passwords are automatically generated.
Windows 10 Security Baseline / Administrator elevation prompt behavior +
Windows 10 Security Baseline / Require admin approval mode for administrators		When modifying user account control (UAC) settings during the out-of-box experience (OOBE) using device Enrollment Status Page (ESP), additional UAC prompts may result, especially if the device reboots after these policies are applied enabling them to take effect. To work around this issue, the policies can be targeted to users instead of devices so that they apply later in the process.
## Related topics From 4e5efcb83feb59a146db8658404accf1ee882be4 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 16 Jun 2020 22:00:38 -0700 Subject: [PATCH 102/145] update --- windows/deployment/index.yml | 43 +++++++++++++----------- windows/deployment/update/index2.md | 52 +++++++++++++++++++++++++++++ 2 files changed, 75 insertions(+), 20 deletions(-) create mode 100644 windows/deployment/update/index2.md diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml index 6436caaa1d..e89cd271c8 100644 --- a/windows/deployment/index.yml +++ b/windows/deployment/index.yml @@ -22,28 +22,29 @@ landingContent: # Cards and links should be based on top customer tasks or top subjects # Start card title with a verb # Card (optional) - - title: Get started - linkLists: - - linkListType: get-started - links: - - text: What's new in Windows deployment - url: windows-10-deployment-scenarios.md - - text: Windows 10 deployment scenarios - url: windows-10-deployment-scenarios.md - - text: Basics of Windows updates, channels, and tools - url: update/get-started-updates-channels-tools.md - - # Card (optional) - - title: Plan and prepare + - title: Plan linkLists: - linkListType: overview links: - text: Create a deployment plan url: update/create-deployment-plan.md + - text: Define readiness criteria + url: update/plan-define-readiness.md + - text: Evaluate infrastructure and tools + url: update/eval-infra-tools.md + + # Card (optional) + - title: Prepare + linkLists: + - linkListType: overview + links: + - text: Prepare for Zero Touch Installation of Windows 10 with Configuration Manager + url: deploy-windows-cm/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md - text: Prepare to deploy Windows 10 updates url: update/prepare-deploy-windows.md - text: Prepare updates using Windows Update for Business url: update/waas-manage-updates-wufb.md + # Card (optional) - title: Deploy linkLists: @@ -57,16 +58,18 @@ landingContent: url: update/deploy-updates-configmgr.md # Card - - title: Keep Windows current + - title: Overview linkLists: - - linkListType: how-to-guide + - linkListType: overview links: + - text: What's new in Windows deployment + url: windows-10-deployment-scenarios.md + - text: Windows 10 deployment scenarios + url: windows-10-deployment-scenarios.md + - text: Basics of Windows updates, channels, and tools + url: update/get-started-updates-channels-tools.md - text: Define your servicing strategy - url: update/define-update-strategy.md - - text: JAMES'S CALENDAR BLOG POST - url: windows-autopilot/windows-autopilot-scenarios.md - - text: Optimizing Windows 10 Update Adoption - url: https://www.microsoft.com/download/details.aspx?id=101056 + url: update/define-update-strategy.md # Card - title: Support remote work diff --git a/windows/deployment/update/index2.md b/windows/deployment/update/index2.md new file mode 100644 index 0000000000..6c8417f572 --- /dev/null +++ b/windows/deployment/update/index2.md @@ -0,0 +1,52 @@ +--- +title: Update Windows 10 in enterprise deployments (Windows 10) +description: Windows as a service provides an all-new way to think about building, deploying, and servicing Windows 10. +ms.prod: w10 +ms.mktglfcycl: manage +author: jaimeo +manager: laurawi +ms.localizationpriority: high +ms.author: jaimeo +ms.topic: article +--- + +# Update Windows 10 in enterprise deployments + + +**Applies to** + +- Windows 10 +- Windows 10 Mobile + +> **Looking for consumer information?** See [Windows Update: FAQ](https://support.microsoft.com/help/12373/windows-update-faq) + +Windows as a service provides a new way to think about building, deploying, and servicing the Windows operating system. The Windows as a service model is focused on continually providing new capabilities and updates while maintaining a high level of hardware and software compatibility. Deploying new versions of Windows is simpler than ever before: Microsoft releases new features two to three times per year rather than the traditional upgrade cycle where new features are only made available every few years. Ultimately, this model replaces the need for traditional Windows deployment projects, which can be disruptive and costly, and spreads the required effort out into a continuous updating process, reducing the overall effort required to maintain Windows 10 devices in your environment. In addition, with the Windows 10 operating system, organizations have the chance to try out “flighted” builds of Windows as Microsoft develops them, gaining insight into new features and the ability to provide continual feedback about them. + +>[!TIP] +>See [Windows 10 update history](https://support.microsoft.com/help/12387/windows-10-update-history) for details about each Windows 10 update released to date. + + + +## In this section + +| Topic | Description| +| --- | --- | +| [Quick guide to Windows as a service](waas-quick-start.md) | Provides a brief summary of the key points for the new servicing model for Windows 10. | +| [Overview of Windows as a service](waas-overview.md) | Explains the differences in building, deploying, and servicing Windows 10; introduces feature updates, quality updates, and the different servicing branches; compares servicing tools. | +| [Prepare servicing strategy for Windows 10 updates](waas-servicing-strategy-windows-10-updates.md) | Explains the decisions you need to make in your servicing strategy. | +| [Build deployment rings for Windows 10 updates](waas-deployment-rings-windows-10-updates.md) | Explains how to make use of servicing branches and update deferrals to manage Windows 10 updates. | +| [Assign devices to servicing branches for Windows 10 updates](https://docs.microsoft.com/windows/deployment/update/waas-servicing-channels-windows-10-updates) | Explains how to assign devices to the Semi-Annual Channel for feature and quality updates, and how to enroll devices in Windows Insider. | +| [Monitor Windows Updates with Update Compliance](update-compliance-monitor.md) | Explains how to use Update Compliance to monitor and manage Windows Updates on devices in your organization. | +| [Optimize update delivery for Windows 10 updates](waas-optimize-windows-10-updates.md) | Explains the benefits of using Delivery Optimization or BranchCache for update distribution. | +| [Deploy updates for Windows 10 Mobile Enterprise and Windows 10 IoT Mobile](waas-mobile-updates.md) | Explains updates for Windows 10 Mobile Enterprise and Windows 10 IoT Mobile. | +| [Deploy updates using Windows Update for Business](waas-manage-updates-wufb.md) | Explains how to use Windows Update for Business to manage when devices receive updates directly from Windows Update. Includes walkthroughs for configuring Windows Update for Business using Group Policy and Microsoft Intune. | +| [Deploy Windows 10 updates using Windows Server Update Services (WSUS)](waas-manage-updates-wsus.md) | Explains how to use WSUS to manage Windows 10 updates. | +| [Deploy Windows 10 updates using Microsoft Endpoint Configuration Manager](waas-manage-updates-configuration-manager.md) | Explains how to use Configuration Manager to manage Windows 10 updates. | +| [Manage device restarts after updates](waas-restart.md) | Explains how to manage update related device restarts. | +| [Manage additional Windows Update settings](waas-wu-settings.md) | Provides details about settings available to control and configure Windows Update | +| [Windows Insider Program for Business](waas-windows-insider-for-business.md) | Explains how the Windows Insider Program for Business works and how to become an insider. | + +>[!TIP] +>Windows servicing is changing, but for disaster recovery scenarios and bare-metal deployments of Windows 10, you still can use traditional imaging software such as Microsoft Endpoint Configuration Manager or the Microsoft Deployment Toolkit. Using these tools to deploy Windows 10 images is similar to deploying previous versions of Windows. +>With each release of a new feature update for CB, Microsoft makes available new .iso files for use in updating your custom images. Each Windows 10 build has a finite servicing lifetime, so it’s important that images stay up to date with the latest build. For detailed information about how to deploy Windows 10 to bare-metal machines or to upgrade to Windows 10 from previous builds of Windows, see [Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](../deploy-windows-cm/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md). Additionally, Windows 10 clients can move from any supported version of Windows 10 (i.e. Version 1511) to the latest version directly (i.e 1709). + From 28ab437dbee81dc0a0a9f063cf72e8fcc322fe6c Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 16 Jun 2020 22:08:58 -0700 Subject: [PATCH 103/145] update --- .../deployment/vda-subscription-activation.md | 32 +++++++++---------- 1 file changed, 15 insertions(+), 17 deletions(-) diff --git a/windows/deployment/vda-subscription-activation.md b/windows/deployment/vda-subscription-activation.md index 61edc16bf7..62a9dc2999 100644 --- a/windows/deployment/vda-subscription-activation.md +++ b/windows/deployment/vda-subscription-activation.md @@ -66,28 +66,26 @@ For examples of activation issues, see [Troubleshoot the user experience](https: 4. On the Remote tab, choose **Allow remote connections to this computer** and then click **Select Users**. 5. Click **Add**, type **Authenticated users**, and then click **OK** three times. 6. Follow the instructions to use sysprep at [Steps to generalize a VHD](https://docs.microsoft.com/azure/virtual-machines/windows/prepare-for-upload-vhd-image#steps-to-generalize-a-vhd) and then start the VM again. -7. [Install Windows Configuration Designer](/windows/configuration/provisioning-packages/provisioning-install-icd). -8. Open Windows Configuration Designer and click **Provison desktop services**. -9. If you must activate Windows 10 Pro as described for [scenario 3](#scenario-3), complete the following steps. Otherwise, skip to step 10. - - 1. Under **Name**, type **Desktop AD Enrollment Pro GVLK**, click **Finish**, and then on the **Set up device** page enter a device name. +7. If you must activate Windows 10 Pro as described for [scenario 3](#scenario-3), complete the following steps to use Windows Configuration Designer and inject an activation key. Otherwise, skip to step 20. +8. [Install Windows Configuration Designer](/windows/configuration/provisioning-packages/provisioning-install-icd). +9. Open Windows Configuration Designer and click **Provison desktop services**. +10. Under **Name**, type **Desktop AD Enrollment Pro GVLK**, click **Finish**, and then on the **Set up device** page enter a device name. - Note: You can use a different project name, but this name is also used with dism.exe in a subsequent step. - 2. Under **Enter product key** type the Pro GVLK key: **W269N-WFGWX-YVC9B-4J6C9-T83GX**. -10. On the Set up network page, choose **Off**. -11. On the Account Management page, choose **Enroll into Active Directory** and then enter the account details. +11. Under **Enter product key** type the Pro GVLK key: **W269N-WFGWX-YVC9B-4J6C9-T83GX**. +12. On the Set up network page, choose **Off**. +13. On the Account Management page, choose **Enroll into Active Directory** and then enter the account details. - Note: This step is different for [Azure AD-joined VMs](#azure-active-directory-joined-vms). -12. On the Add applications page, add applications if desired. This step is optional. -13. On the Add certificates page, add certificates if desired. This step is optional. -14. On the Finish page, click **Create**. -15. If you must activate Windows 10 Pro as described for [scenario 3](#scenario-3), complete the following steps. Otherwise, skip to step 16. - 1. In file explorer, double-click the VHD to mount the disk image. Determine the drive letter of the mounted image. - 2. Type the following at an elevated commnand prompt. Replace the letter **G** with the drive letter of the mounted image, and enter the project name you used if it is different than the one suggested: +14. On the Add applications page, add applications if desired. This step is optional. +15. On the Add certificates page, add certificates if desired. This step is optional. +16. On the Finish page, click **Create**. +17. In file explorer, double-click the VHD to mount the disk image. Determine the drive letter of the mounted image. +18. Type the following at an elevated command prompt. Replace the letter **G** with the drive letter of the mounted image, and enter the project name you used if it is different than the one suggested: - ``` + ```cmd Dism.exe /Image=G:\ /Add-ProvisioningPackage /PackagePath: "Desktop AD Enrollment Pro GVLK.ppkg" ``` - 3. Right-click the mounted image in file explorer and click **Eject**. -16. See instructions at [Upload and create VM from generalized VHD](https://docs.microsoft.com/azure/virtual-machines/windows/upload-generalized-managed#log-in-to-azure) to log in to Azure, get your storage account details, upload the VHD, and create a managed image. +19. Right-click the mounted image in file explorer and click **Eject**. +20. See instructions at [Upload and create VM from generalized VHD](https://docs.microsoft.com/azure/virtual-machines/windows/upload-generalized-managed#log-in-to-azure) to log in to Azure, get your storage account details, upload the VHD, and create a managed image. ## Azure Active Directory-joined VMs From c794e06e219cd86e6fdf9c859a421462ec8783fa Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 16 Jun 2020 22:34:00 -0700 Subject: [PATCH 104/145] update --- windows/deployment/index.yml | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml index e89cd271c8..b81e444495 100644 --- a/windows/deployment/index.yml +++ b/windows/deployment/index.yml @@ -32,18 +32,20 @@ landingContent: url: update/plan-define-readiness.md - text: Evaluate infrastructure and tools url: update/eval-infra-tools.md + - text: Define your servicing strategy + url: update/define-update-strategy.md # Card (optional) - title: Prepare linkLists: - - linkListType: overview + - linkListType: how-to-guide links: - - text: Prepare for Zero Touch Installation of Windows 10 with Configuration Manager - url: deploy-windows-cm/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md - text: Prepare to deploy Windows 10 updates url: update/prepare-deploy-windows.md - text: Prepare updates using Windows Update for Business url: update/waas-manage-updates-wufb.md + - text: Prepare for Zero Touch Installation of Windows 10 with Configuration Manager + url: deploy-windows-cm/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md # Card (optional) - title: Deploy @@ -68,8 +70,9 @@ landingContent: url: windows-10-deployment-scenarios.md - text: Basics of Windows updates, channels, and tools url: update/get-started-updates-channels-tools.md - - text: Define your servicing strategy - url: update/define-update-strategy.md + - text: Overview of Windows Autopilot + url: windows-autopilot/windows-autopilot.md + # Card - title: Support remote work From a29825ff0d26b81e778d2e18a09ef98594bffbe7 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 16 Jun 2020 22:38:09 -0700 Subject: [PATCH 105/145] update --- windows/configuration/set-up-shared-or-guest-pc.md | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/windows/configuration/set-up-shared-or-guest-pc.md b/windows/configuration/set-up-shared-or-guest-pc.md index d77ca25608..00fb65ab30 100644 --- a/windows/configuration/set-up-shared-or-guest-pc.md +++ b/windows/configuration/set-up-shared-or-guest-pc.md @@ -9,7 +9,6 @@ author: dansimp ms.author: dansimp ms.topic: article ms.localizationpriority: medium -ms.date: 05/27/2020 ms.reviewer: manager: dansimp --- @@ -93,20 +92,20 @@ You can configure Windows to be in shared PC mode in a couple different ways: 5. From the **Platform** menu, select **Windows 10 and later**. 6. From the **Profile** menu, select **Shared multi-user device**. - ![custom OMA-URI policy in Intune](images/Shared_PC_1.png) + ![custom OMA-URI policy in Intune](images/shared_pc_1.jpg) 7. Select **Create**. 8. Enter a name for the policy (e.g. My Win10 Shared devices policy). You can optionally add a description should you wish to do so. 9. Select **Next**. 10. On the **Configuration settings** page, set the ‘Shared PC Mode’ value to **Enabled**. - ![Shared PC settings in ICD](images/Shared_PC_3.png) + ![Shared PC settings in ICD](images/shared_pc_3.png) 11. From this point on, you can configure any additional settings you’d like to be part of this policy, and then follow the rest of the set-up flow to its completion by selecting **Create** after **Step 6**. - A provisioning package created with the Windows Configuration Designer: You can apply a provisioning package when you initially set up the PC (also known as the out-of-box-experience or OOBE), or you can apply the provisioning package to a Windows 10 PC that is already in use. The provisioning package is created in Windows Configuration Designer. Shared PC mode is enabled by the [SharedPC configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/sharedpc-csp), exposed in Windows Configuration Designer as **SharedPC**. - ![Shared PC settings in ICD](images/icd-adv-shared-pc.PNG) + ![Shared PC settings in ICD](images/icd-adv-shared-pc.png) - WMI bridge: Environments that use Group Policy can use the [MDM Bridge WMI Provider](https://msdn.microsoft.com/library/windows/desktop/dn905224.aspx) to configure the [MDM_SharedPC class](https://msdn.microsoft.com/library/windows/desktop/mt779129.aspx). For all device settings, the WMI Bridge client must be executed under local system user; for more information, see [Using PowerShell scripting with the WMI Bridge Provider](https://docs.microsoft.com/windows/client-management/mdm/using-powershell-scripting-with-the-wmi-bridge-provider). For example, open PowerShell as an administrator and enter the following: From 4e696b00f68822f9899d6c450c3c128e30a8ccbf Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Wed, 17 Jun 2020 12:32:29 +0500 Subject: [PATCH 106/145] Changes as per user suggestion As per user's recommendation, document has been updated. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/5404 --- .../access-control/active-directory-security-groups.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/access-control/active-directory-security-groups.md b/windows/security/identity-protection/access-control/active-directory-security-groups.md index 2c3214bc3c..4a94f45a39 100644 --- a/windows/security/identity-protection/access-control/active-directory-security-groups.md +++ b/windows/security/identity-protection/access-control/active-directory-security-groups.md @@ -111,8 +111,8 @@ The following table lists the three group scopes and more information about each

Accounts from any domain in the same forest

Global groups from any domain in the same forest

Other Universal groups from any domain in the same forest

-

Can be converted to Domain Local scope

-

Can be converted to Global scope if the group is not a member of any other Universal groups

+

Can be converted to Domain Local scope if the group is not a member of any other Universal groups

+

Can be converted to Global scope if the group does not contain any other Universal groups

On any domain in the same forest or trusting forests

Other Universal groups in the same forest

Domain Local groups in the same forest or trusting forests

From d90d73daef1b29e847cae04da6bef98746b2f3b2 Mon Sep 17 00:00:00 2001 From: EfiKliger <45028856+EfiKliger@users.noreply.github.com> Date: Wed, 17 Jun 2020 13:28:59 +0300 Subject: [PATCH 107/145] Certificate Indicator GA --- .../microsoft-defender-atp/manage-indicators.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md b/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md index b87d08f00c..235ff31864 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md @@ -148,7 +148,7 @@ It's important to understand the following prerequisites prior to creating indic 5. Review the details in the Summary tab, then click **Save**. -## Create indicators for certificates (preview) +## Create indicators for certificates You can create indicators for certificates. Some common use cases include: From 6973aee120a88c14e4cbd648099c273d73f04f6e Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 17 Jun 2020 20:43:59 +0530 Subject: [PATCH 108/145] added word *REG_DWORD* as per the user report #6977 , so i added **Type : REG_DWORD** --- .../microsoft-defender-antivirus-compatibility.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 2cb802f3b8..07b211d997 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -50,6 +50,7 @@ The following table summarizes what happens with Microsoft Defender Antivirus wh If you are Using Windows Server, version 1803 and Windows 2019, you can enable passive mode by setting this registry key: - Path: `HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection` - Name: ForceDefenderPassiveMode +- Type: REG_DWORD - Value: 1 See [Microsoft Defender Antivirus on Windows Server 2016 and 2019](microsoft-defender-antivirus-on-windows-server-2016.md) for key differences and management options for Windows Server installations. From 7279c29b29ea5a4f3c49d97523116078a2a8a68b Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 17 Jun 2020 09:29:05 -0700 Subject: [PATCH 109/145] fixing a typo --- windows/deployment/update/get-started-updates-channels-tools.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/get-started-updates-channels-tools.md b/windows/deployment/update/get-started-updates-channels-tools.md index 82a5957f04..0331ff4981 100644 --- a/windows/deployment/update/get-started-updates-channels-tools.md +++ b/windows/deployment/update/get-started-updates-channels-tools.md @@ -47,7 +47,7 @@ The first step of controlling when and how devices install updates is assigning ### Semi-annual Channel -In the Semi-annual Channel, feature updates are available as soon as Microsoft releases them, twice per year. As long as a device isn't set to defer feature updates, any device using the Semi-annual Channel will install a feature update as soon as it's released. If you use Windows Update for Business, the Semi-annual Channel provides three months of additional total deployment time before being required to update to the next release.{IS THIS STILL TRUE?} +In the Semi-annual Channel, feature updates are available as soon as Microsoft releases them, twice per year. As long as a device isn't set to defer feature updates, any device using the Semi-annual Channel will install a feature update as soon as it's released. If you use Windows Update for Business, the Semi-annual Channel provides three months of additional total deployment time before being required to update to the next release. > [!NOTE] > All releases of Windows 10 have **18 months of servicing for all editions**--these updates provide security and feature updates for the release. However, fall releases of the **Enterprise and Education editions** will have an **additional 12 months of servicing for specific Windows 10 releases, for a total of 30 months from initial release**. This extended servicing window applies to Enterprise and Education editions starting with Windows 10, version 1607. From 0497bc6d4f645116b073e7295b35d18fb1fac8f7 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 17 Jun 2020 23:27:37 +0530 Subject: [PATCH 110/145] Added word *type:REG_DWORD As per the user report #6978 , so I added **type:reg_dword** --- .../microsoft-defender-atp/configure-server-endpoints.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md index c3acfa8df0..990cd51ee1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md @@ -156,6 +156,7 @@ Support for Windows Server, provide deeper insight into activities happening on 1. Set the following registry entry: - Path: `HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection` - Name: ForceDefenderPassiveMode + - Type: REG_DWORD - Value: 1 1. Run the following PowerShell command to verify that the passive mode was configured: From 4c3c42b966bb47743ea72fb9713995ed018bdd95 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 17 Jun 2020 14:18:54 -0700 Subject: [PATCH 111/145] tweaks from James, fresh images --- windows/deployment/TOC.yml | 2 +- .../update/images/annual-calendar.png | Bin 79126 -> 182710 bytes .../update/images/rapid-calendar.png | Bin 117135 -> 161129 bytes .../deployment/update/plan-define-strategy.md | 49 ++++++++++++++++++ 4 files changed, 50 insertions(+), 1 deletion(-) create mode 100644 windows/deployment/update/plan-define-strategy.md diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml index 7195a47f76..21a273831e 100644 --- a/windows/deployment/TOC.yml +++ b/windows/deployment/TOC.yml @@ -42,7 +42,7 @@ - name: Determine application readiness href: update/plan-determine-app-readiness.md - name: Define your servicing strategy - href: update/waas-servicing-strategy-windows-10-updates.md + href: update/plan-define-strategy.md - name: Best practices for feature updates on mission-critical devices href: update/feature-update-mission-critical.md - name: Windows 10 deployment considerations diff --git a/windows/deployment/update/images/annual-calendar.png b/windows/deployment/update/images/annual-calendar.png index 1ff15bed762ddb12933a68a46fb1cac59ee7a729..ae785484efd6c20fdea08dd1bafd7300539bc5c9 100644 GIT binary patch literal 182710 zcmbTdby!sGw?00I!mEH7fHcwqQc}_&(%s!XbPEHHsED+5N%sJQ)DS}n($Wkygfv4+ zH~hBmIp6Di4xYb$`?|PbX0xCD?Dec?t$W?;-XUr#vIO_Y?}0!d0(rUD8X(Z!H4q59 z{GVIEH+Va*{sDerd1%PK0>S$!F~Eo0wvx({AW(S}-i7%c;PYKqIeiZh=ziOuAFNK7 zLMssHI#2$!q}Cgg&6zuThPo8Ezi-`Ts6{GX7GS^1@q2 z!lpA+p~yHAAD_<>a?P<{c?rJX3QFxgyA~ChOH6&`?z8;WV*t_*@$AnK7yon9|2V2- zb$74-<1_GQCgVTTf2RLGhaK6in*aIq=P!d#E$sj6n|BGcu6Y0Jn@sEfAH!VuP(I&; zW4=7&XCl1qjP;)b{%T%q)MRhA@~XObPK1uVePc?$Gxql8^RZX!gBn+f(Xm*6ogPNf z2iW;YfveTZMaiDtnCvy*p>fQ)&sc#@7!kT8_{PIs;98?X=S0T*5#_Swea<(Ys|7kT z=bP4SmB#O-$@H{HPf;HoIW^o6j&$AD0$(whe3(B!1C7jlIgPC!h`OGR&*#2QvCd-i+#( ziA#*)y^KdsvLvt~l7nuT7^C0^Ew}u}6A3mTs_!JHOYlJ!3F4sKu)MYCI)2?^b(F=2`sgCPnvaIIyNn7BzpJ^C+hh`bw43{4x>nVl-0 zpccP5ExYxwC4`Fxn!KJNbj$7i4M%Hv<{0TP6FrCe3vzJt2`=-JJ^$94azduKXfT4#n<-7yO1rok31J&bxI z8~zRLrQA2o(a{%sPT`Y=d32Pn>*#=UbIxvm_Vv7)rc8ufc_~@i{;KQ~3=m}zzV6UA zB(tH~*Qhd5fi_|KJ}F9qk`upv8_F}A%FMEQDR-FC@2l>F3Y~}!1*a5iw}8(@#e(DA z;W_lsf_h^O)GSgIxwtq|I&3cf{sNWb@tpqan=u)`*|D>Ofjf=EDcC1Tk7!F(fgRdT@BBsR)BI@{8bBn5Ugm_&IUMW-CUu|KBhH0UbmhPugF;X309 zgt^X7lDknVAHLj+dJ5G>Px{mweOvZ)cq>JiG6-rr`QH)Fq8$m!ar22g-7AvGrE`6; zm_+{U-hK~awgNFbS1AnbULVYrw{dCp<(jgn zvr?}RdnX^0UpaHKy6~~}^Ph1sDA0f3ncxdn$+okQDI5R66(rXBb zBEoBu1Jlz;&)pt`n?XJ}=?cFV+9yKOO9DH@Y*^}-w|{#rSySV*O#+4K&;mtxrtX=f zQ7>L_$|sDfE8i-0ZJ%#S>36k^SWRY=eM>KU#etTAr_l3xRwU!>Cz-Rh<&FvCL20op zmkE`K%Nk+MUH<&&@IV-vQFYU0A{`YN8SVD5g}vo-_6+`<5m*#G^Sia}@Tr_Ua@muO z#XdNsp+3pYXKsPg&P76)9H*!BN!fYbnUUr|roaMHcVd=zX0%`K;Wib~=|=}BToBDL zwxq*!zCU{pU5(XIMVJEQezVs=0L1^Z{8NuoQCA%#B8}$jC2i6(0#`aCgM8D<2m4<4 z9k7*rL%H+T*M-ha1cwi#WFS5RPf=r~^ERnA`nS;(gRVQ7RvE5UnBar&;(Ce{`=fwDr zeFHormoJA%mhRdOMm?0z6}R?m@XsxR1$-H_2Nn-=nxL!1!_QAzF&^gMI*?4oN#hKo z+^i69AudG*l!<+DHkEV}Uv*J@85+XD~0u zEo%$eB^9QaSM{lC+kytDE{@^%dAt1wMJLR=3fUjp*}A^T+2Gxfe7pLSK0T^KZ;FEO zNi|~^bMDLzVgjwleJ|i24x8yYXV;#9i2&m--CUwifvlcGjQJUb?A%J=;!(VERX3y? zLqFTcBDAi5%BPb5HSTCBTawpFU*6EieU=1#dLj96Sde^Rd|dL7A| za!2e{6c+%2tQjZL1zsUl+h3{XoZIT-J3gyV@u(?5@R6}>D!fc~yPEu!OM?H87cbZ7 zc$Ko?8nfC`fIt{+D-|n#T|G@%#o;%#C>m^#(wC=@S-Gf*Cw<3U)4aVFW;EQs|6H5p zZMCS(2Yyu&Y@S=|T7@NcFI~4S8PV9^m5K*(ab?a?(zhMy8rz?jue52_JW6}sj(xKqf6#k!H!)k z760tiK*v8kP{YH*cNwLDO&v53x4>^ymQ;b2%qEhUK2WynYfoadsV^fplMKvrQ>px^ek*PTTDqkAE zUsnDMjxzt^!h9}qWHpG-#}*JV(}%*Y;_NU8ep!f{Rg7jt-m7OtkBSFZWr-VE3tw2h z0KE&*oS|j2m%l4$$8!A3u{SUcF9Tlg!K=P=*;o36h8^R)xvgm^_H?lSS5xvz+p*d| zkUZ%=Q7Zu)<&aJ5yz2|P;y|8{vvsX2fp%e-NRiu)SfF>@Ktfqqp&o|qP?XGZj-k6c z6-4dM-Q&?I zrk|1?{&>&aAj0m~Ep8v_lsf$Ad#{SJ6m`l_KJqxm;PnnQ9@!CE@xTkGw^9Rvt=n;| z4~vp;;FXpgBLTO{4b6hLsWJ2rib!IgSW6-bhAP;^RN+n=r?3$?`7HoYEHMV z$(Z-I6p7#Ac^L>~CJ~mov!BbKacs3r!LsaV!XAEFl3iG*Tl&uZ#qv+@#p3=4q27E( zYu35^(@P-%1i9hHRmwWUB>cyP0bQTCDzh|%^R@1}Ts4ku=Dn(5wh}ly5!t;rb)1-fCVvyCm~1Dm?NVEIiTzFQ_3GQYLc{VLpm$uP#H<=r4wSo1zYTy z{*kiv60>!#MLnh_g(t$I`lPHZqKRq$0~YDv3_W9wyiDIey|Iga060}U_OJ<_aR^HF z9!-SZ)?e(o+LtOZ9x%B$&og zN>+vu;RNXUEgx$$D{$iIcV~3^tE&$_+n&3fw%|})#zHC~J_7A=QP&*M7S~}z zzFP5D&l-#2Us`Xf>bl3%0c0Fvz>_hZXK$>z-z?UPCSH| zA%YBKP8)5JHB42*%ojaJv*@crVuiDa!~0b{t~B3nX?g`)VFcnU#fne3a~gH?teQ45 zrkeMJQ1wx1N_8ptt`A{v{{*0y-GvYPE*mV`eY7F>IB@jkr4eVru#fi+dpgmf#RjW0 z`sx()N#J8%NX=kNgo_ZTBKa`2!54Skt;2FMzPpWQ#%3h zU`C;z;9`5VM3=s&vIT|)T6EQ%)Xogcb>Ll; z0`;z*9|2s+jBS1WneF?=7cF*X_pdKk>unv`k#8XcMeT8i20Eo{pSJjlP;}L{Fu5n# z)k~*7mzuJ$N2un!t1gU)*2K(Y^G<(UK^S*!3w7?@gTd{y1E9KtaM@h~ncQfUHevR+ zVc(}Y2OMR6^`Ws;&0=a^0`Ff%-pjJcLo@?_hQ@2BqFQ&XqAZly5`rur20gU5*w`HC zu@-$2DsU#KS14vWhN?2{Nj&_{1ZE%pAU(5MaB!Xq5P7Jn?>sXnLMgWyK_Cw0U^%}H z8n4`3Dqb30X^4w=n&124r;zmZaC9=#ww zQFD$>Q19iNw;k+D*ylUxIV`p(wgn{Sb7@9s@Xo{brfuH?o!c_Who(S?T#5=eVwT3k?ucG`51@M_O6e$MjFP`e5AFCSg)s#Zt{e8=qr{pcSU}hF z_)N^$$1z;*F+y^|d@b7of*!PjDf_MS??pQH*ZjWVYPl_`e0{Q~&UhgF+WnoW3?6i_ zuX_TghVW9e43d0`^iVNXF5P>f=MH#xJd}Tr;Bq#^eYsc#ZG51;+(Mibr=nZvWk*<4 zpTk+FaWXNB6FeT4J~dZ3WeYgGD+VCbpjJK~)^nfn<&`$JmBp=?f7dqT{MEaJxUb%< zz=c%F<+tb_8J4JaxdO~F^64|Brqe6TF9(##@2>PSmyxOZ^W*knFv$@?g$W0MdNPEs zV0|v63`PppW1%<%Ypkb}YsGieVv9d+WxwScozHfz7U~_-8$f+6ro=zki_Ra2HNefc z)&UbMa56?jhmj?Yix(SfBVUgc2!rwgCgoHx$FdNI`d?Nc=a=($^=|p+9#w^glZ_A7 z?YQ!wzcmq4u?x%6vSH^@m$9nJTh~Qx$@95lMKzg4rj>?HTMvfGIb3w-B1$VZ`z~ia zUTh>9lYt}*r=PzB3$8{bdb07*02pSVv54#&oLcfKw+yPjVbL?>|E6b3;&Jtlp7uUb zYzQIzy1L_XE4xs&cTOCYEv8HgFnkYbk3>*K<*(HhqrizZg3YGcp*rTK*2vfFx6h3Y zkW*R)kjJ7Z&nNU1JVTm_uUXE2Ud_+X3#P&fbi|A~9vqsU1CGMfZ{b3(*!ET$YHe7i zmq*FJSoGwuJ3jjeOFF-a=R;hfLb z%MtB4!KG0dkdyDS-AI$iOzZbOcDg^@dnSvn2Rt#}@1xgva#$cb$V3Lr=kVbFpj^>(AhcSKzxhpJTl^-mu=Uq=SP?&ppJZ4Lf=Uc73?@4mbo zaphk94b*`7IG3#b-b24MErZtUSo2>dyYm_meen-Vb8E)Z@Jb8FNtt=w6ea>LLZO1g zZqJAo24I0mD?DM*Q%djZIYQRyDmYdsO|HqAD|JL%W8k$r4F(Yw9V4i3bG@^AI#j>U zI5j0*^9=dk1XEK)W%&=Y zmQUevUdf)ou)h#FsO9y^mW(X0dUrvgsn(2Jc8Yb)?!u^Br7GkDwZ;^7?s*v@2D*o{ z?>Sxrjh1&#VtVFJ=BHg8W7Ozo(ovI))Lv=Y<3j~HBkV`qFGkJGn2XG5LdvyL72*v! zb$S~`8k`)crrB#@d|vtvF8U6HtfnB4&GRGv`r*0PrCj3Ltd7KyLQDGSNzQ4-6Fmx2 zFhXt%sOmonkrs-DY9pf8Gj+GHi%uZZ{mmFf=>55QcW6~mO?=b3hY`4XEgibikDo?G zE`eM}G7xT-sKT|PX8y}_qHB@HQdGX+OOgzRBgL1S{7<9zxZ_{{_>GCxq?xOFm)|IKJQ5bzUf#><$!co3_Pe1_5}C!-@9= z?pMCeN@;fXG+47PM3A%+V%8^9u|Q_;0Xv+T8=3(rnunoz;u7TI+G9+B;J_$?V;Vs`cCoQdV8o3mR^Wau?w|}I)%x< z4V0Fy1)%Qt7T6q*=CbY?irHqbh_@h4z1i zQ_JeLJphTV$~%$6?SKTA_+G~8(($~{gIGSdjM9n2X-nHtHQBRS4|H!Wc(f(_0_rgAVs;Jg4x#M#mbu{16Wu=@4A_$P~U!Ym)*h6Mxdx- zt}ivk?KDb4elKg^N0)h2ZPHXTzWurOQeDWb+X&cd>~1fXHyb8TyM1-Q>V{db&(4Nc zxR9`;{UDN`3;qH+*GgoxU*cibHFZ2gmC zCVR{In@x5|&Bi&wikm_s0fmK-UuV^iX-5NnJaabs%x%Ex=uhyb#QS_tYK-uy9lF8` zHXL%G`<|5_Av5w`_D-WN*<2vJM!%}lfv+mo@Q44h%AXE2N)DUQX){01OA&Hf)ruu;p{_=}lf>M{j+*Afk1NK^P z24EOpO{ThDH4I_O>k`0szl4ap3(?GttHEE)crQ$o*&nlMd=;9_N9TDEe{x(=Fo5}-|KH!7v0#5Or zs&-~MC}^zXGBKPkhV|q24pAaLNww3%17*xLyr#Oz?|~WDdy}Fm8VwqF#rX<3M8M;a z=qG9`<`-e_+dfJLu;FC>tfEEE?qKUDj!&Ofu|aA`XScWZ(bZ(CjY$ecL@EJgwVCC% zW-Q}$TBi16y$YtWlwVqDNe&Dt>|%b4*T~tXPmy};o!4CHBkggs5kTEQ!r5s64TuQH zObax*wv7XJ(R)s|W;tgH(&|#onzkajxpkqi+1KG;DfQ<#96Q@qJ%YZ88>N76I6QbH zo?8Pfszz+#R@4TSiK)egSt}XoF~OWciW=?f(LZKoKjNSA2-}aZxMO`z{DUs!0D~QI zd|@cS1%|-OYmiW@(YS&F{u7&Lxqj;uoA!>qV5CnX+E4$;@L5_{=@ZT~n8m;(e13#e zw61KvhX&TA3RHhhsfs6@U;pGFeTOnIRqNuK7;^9r;43F+QII*SKknl_uGTgx{I}tR zPq*z{(=H~1&0P03Wr7?iO4RQ1P}HN)SwIEKf=ynYY9$|a-e@=?CZ`$40T$+R_pi!D z1GW7E?aDa`-*Mrx3Sxnfy7sVKgOK$){lh5|)bcfl!Z=ZtXKdp-Tt#7uGX}lluTM+L zWt0NmOi14`{aKepP%$wZwxCgp?3n}2*yFIs`neUZgPiE5pJ*&GIPfm9Bo!#xbsa-e^gy`Jiyv;Cxr$k{t`u( zn!qJtQ(CAwy%WHbzMUCp=;OiBeEln(hhPDYB^B27VFFmxB`G4bJFrT}Un2o(V|gr$ z*d?N4r8Xe~I!?@Y{0y<&g}ta?YRRC4!;j=1^^{6VPAjLw(Ep1n*B9)-7VQbIw2@Zr zHQK2F6dwtm<9?b`5dEBANRCZMdH)?_rroGcDb{l!`c)v`?&`+3g-ev}(9xiFOyxa% zmqeeQXG${Tfm+@O)(?4Yn}tomPqWUNsJz z+xTaN2TJsh^-};G&MTRNzme zzpB$4oOvxLe&{=b|cQMmPK4!m<(a6gIx0BaF{G6L#J^^6Y!a)k)R4w_jA z>?YxOAm3lCO>o3SiGA2vB>B~8UAvebFr3%-eBic?F0yTDP*l9htArJL=^18)+u-7T z8RTxaM}`IVJL|ENR1seE@XY(-37J1#KZ(9M0m0a#uLi}j`LbdrtZEwvy0Hd~TIW8x zBUkj@%OrkeFzuH1zQ$GU>{5XI@3LKH|K+yQS&zcQZz;AI$=;!=H*#~W5@(bJ1?a2A;1Fl`y3iRu_>WgjtmjPy6d0|40Lryaim2b zS=!G+7t~8?vdpg;4epWqX+c&2X8*p=N|B8m(_Eu{K|Urr+Zi*1R?%8zxs*MlCc`cN%`r{r!Mn{VT% zuM};9nK02siBAj-4>RJu>R)K|3Wzybf;7qkC@aOXlF`o`U3St!1Y)ZtMJ11dyeYz z=XfHg<2cUdXgaE^@1Eb0onfzad0t)K@IdDBoQe7R%AN<09J0`Rr)TOkPtSpw2fqHf zu)e>^M-@?ZbUk7I`sKb9)u?3~pfv$+$^h8l9qo8f(p2&Rg#^&Djbzg_z3)wG%2czA z3e%=3c|$oPkTCJaaATxTc2y64z@yU__&i2#PIS`9oAw#SdQ0lIS!P1Od_)d=JH55N zj%!Xe#5WhxW&OPPkbpZ-Etlmd5%&G0-^?T8__qQ(l-np3q7Dk$>67Jh1Q<8 z0cFu@_a(tnGFkg+-nnzyV&8}|Y9%YuPFHdqU~^ewqv}#TJgD6PCVQNS31GNVZU;!- z$C0^AE$DmSRH)jc$gw10^2F+F!z&WJ@gnlGf9)J@9!z=l0_bZx5sY4G0?lRZtwxiv zvoUOvr*)W`DbvcShu=t_@O*u9EvlIf)*TzB z*q8RLR=AqC^r`RnUM*gZDB0MgSH%T{92(3p)X(Fcl574_W5HDK9Vd>k27FX2oZfF) zZsgpJor-QU*wMt?$2K>4otIOYlH<|zfgwTt6xQfP!>pU~yAWDk=HG3@4Q>kTc!?hX z_}}lXnZe5ShXRUa3koIhh35#{Bo#3VIX{tCH1t#Q^~+UJFMfWMvBBh}pzc99Lxm8>Ky)ySL%iqhVF)Lz3r4;95zPPT|l`75>~DrqH(JAR8!q_psXDP z6~)=U+}~6NqQUO+dvOn8ZI7p^`<|TT3srn$+J+En5GZNMtd*NjO%WtO61C&>ne8!5 zG%R`76Cf1Q6O5{binEG$Cb1)W3fY0Ct^gO?X5KfxG5V;$u*L|wufE$P>%tOMVYvg8 zb|Pp`HyTitb3}8u2i~XfsYm~Y{AaaEZu#M|8@qXJ%E4hkD--(?pu59@Q?%&wzaOoS zSamYNjlK!OwPX1dVpxL|o8he`Y9KQl7JF2}G{ zA-jSLfVi>?$|(I_>*-pcb+;zn*=hVKnT_vv4|pzwxC4qQ2ukUo?SjSJi8pP-i zlg5L@`@VO8%7=@r^sH$ez*62rUzQ8M>7E^htl)Y_IAi@O->-A~+}J7J0!k%M?mO)g z0GHO=R0`Xoss7Veiq~f|*fmC_zlWQrR|3Sgz=erNZlR$F){Kd@)1yGEr7XE3R5k@d z7fL!e{PA!!kZ&_w(1oKqdC~mkMVH9GH8Rr=DdalP&bp*+Tr{$ba<`Y-qbpFkkhgI7 zg_}1(vnep{O?MGJVt(v5FS}c+U%kK-PrL}kptt>-N!Qlx>oi>BBp{~p&LjTY0eVNu z3J^(4)#IQ@JM%K$8j}ls4Z|*3YhdAjOn?F7fPEy#tBw^-gs0++7{P1xCzNVqQ|GcO ztD!qEod8q$S=~QkN3M_cD&6ZeFz3@88&yeNp!fU2!(B?()W7a`pz$G(IJ>akOImfq zh3)_Xyc+E$D2%cEl^l!<)zD{!yGP;ow#zQ+szhXEe~-TXmI&c32q|VmOmN`E82SsR zX_hak&?;Z|5*KU%u_1SEybm$+sjWGW3OkeP!+PXtqySOXF(%MCF8JW6D7%dAzt z>>>MAeTB4jAsO%t_y_xboqSkKpN!I42o+I#gMgPg06^*#=;Hk=^t4NI``?;wt}6g> z1GPI`el+1P$>UdmDD(paR*3-VCHm;!B>`^o|BjB>#Jnp@kLPV^Z;TorCLpwLDtFDM zNjEmcxCh+x*-ZBf+5hc8|G$fY-z_I!q@7j`-~eaFM{4}+rfB%xuA5~c2B23E9hB{e zj=$uCxVopQB1D!LoA28HhmJ3ibz=6{m7Rx6Z~1GdyEmuK5t7Ee+Ly=gF-;)oClp#E zb5n=?uAFBKC=1IEDWl3||GvIsJDN0%@2Z0dCy@wpQ=MoQ4&M`~6C3>rC~_yL*>2vu zV*v(=6-byonOb8*aNbn4gK}1^i=ZxXbv1y^1ML5LYARvN{?uMai~pWD2f4u zqTJ)d=$QXYsv7>YSL1qDFab#2l#OnNQ#$gi7pME7iNLlIOndf_K{rHCJ7vIo)x*mZ z;DGN$h?Y!ovo$$qibiP_F!$VcEC#LCQLL{i$rloRW(@VwqiYSZ%`HPSt@pwnSFUH0 zZESoL-s_eW)@S-sVc!XeiJbBI==%@{Oi-dl#>8Uyc`s!p&emy(o&I}Z-?e|mC{ zTF*@~tkm~&T@epT0~Nqs_GU1 zShQZV6?Uty?L7c47eN~*M#vUBR@c_QxpvwBFCTC_NF2%8Aux13y;O z*A~4qg)!U{q?0$*af(V(t^uj4+Sbz#yvvEzVj-&7bd(X??{0II{7@TM^XBJ$7ElQJCgc5%V8DYSs6#4?c$L0I1W4I5X9R3ec zct7CMv(G$SibEp)8xj1+!1%5GNtM>sTemo+BH@t>rFTEvkY~RWvJ99hSkafR+avq@ z_w|JkKwn6Z#q?hq`4K_rRl@?%8&^^hePmzu(Kx8?p{h=VeBNr1sK(iSMN(HULBEPX z^;d2gamt-as=C1ioD|B^DvW|z2g(Utyn`b{$*-pHZnXO;6Z-vmiAlq0itX#UMoVT;ZbWm%+FlBL+0%uGVUH$nD67-BXb;EjIgZKwt zm}ia%KK?Ef%tr4~NsaDQ8yrtrT{JpBr%<;C#&OU6G8Xx+;lbg-VR_NSQ$`&7v6v5I zY|sa0D9qBv24-D__KCQlUC9&=yrEoDg&9pw(NoD1EkLFJhQHgFsA9`;y?Y@4{sxTM zolZVY#k(Ymm%nS$YD6+8f}lb+*UthK8O`ju_gvz>LDYp~h3$A3$8HyUOMhiI3T0_M z@TsJnmUB?fo=G^hWKzKWTbGp3B+u}~(`B6E`{aTaOB`k%hYSvm-!P7k4)l|PY&FLw zp4w{K-m@Qx$(GvXShRZ5aPc6TEtIHq6Ksf|S(x4*iyOHAxV)?wS|VmZr{)-r(#B!} z>b>3SAzeq+e?bgWBMe8~xKgkD`~8uCzAmYc5~Du(Rbkqwa3uEJl#x#FO1$?y>F4Wj zdH5DiYDuFJ#!j)d`RYGlA4nFQdY0EeLvrgF(@Ma6FVTCOCHQiXs?3IB#g^=r_=lzg z<9$hA`#z1O_xRBk-#5rCxa(`e7&SN% z8+b{iuCbsb!Ps_Wd}bo4OxBxa(FnJgx_$FGLD!aizm0u$W?p5YC~ky^G_EgMZ09%v zJ{!YITUW-=2I3J z(KlFZZ(E3qeYR@9jk8<9XJz_{=SsEPk^Z8_Y3nj>0bxnn%QBy%SQ2xjQX*Gb>-D|x zYNvWrB6CSzYK}2d=zdQz=HXs=BS;ow_)g@`mofTc=RgTn%k)5Md!ZN-@?x1pp~>Hl z?ADT`!xL+3HtMzL&jY*O{0ub`mJX`gIdWl_4cMpkWYIGlu?qXZyE7BKE8Vj_E#G@2 zR8v&3|3@^WgjO`e&LuuD)-Ea@#LdPfUu?Q-Bv=&i+~V~OmR ztFu=ksgJZ&b1`zxSl9u^dv9J*-}am2Wf*Vk{-U*!>(|4EAqv&6vP{S~dLm3M=$Xq) zZ%q!l$E$I2UQe-0a8Q3cAdl~s4#9$F^`apllBZ5*-`Rfjt#Fi!XQh4$@KOnK3NLnx zBO<%pfd_rjPAXjiBPP<54}u{EvOcq+Z(@|B3XYbOPY*N= zEh8;b_5UrR{^!Om%g%vpJCR(Pwme&Z1G8ThB#t@I56#h)<>?lN6gNhG*PB?$y$XM@ zDB%E4hm-sth?7IpKeC@)Qbv;hjIvbbFWmOaogr)rhkU?mp3J?P@~@e{>m4FazaUQc zSEOdM$iF#pYg=IAe&X~HOVM@&;^u25iBD`T`%xqKX-X51{*Qq_GnyXnJ{xfr4v2&w zCH@VSIi3I$FU9Hz95d39{y*mJcBqx3=hIY#wXu-<*Tl>N*^IiK?Xcw_L|t-s@IDt7p^(jgIg^Jen8NZb_^I#v<5TaE&7&$C$znj4<-OFV2~ zsE%*&Wvk?zL{#J7VDn_4zBLva^knXR=TXbE8;+fk))+e9R7JLDJeNIzW{)|~PRLH&f3iF)#j$Bydw zOXWl%wuVuSxjm?vKo=*ts>#xy*jjNtTrMvbP`hSiqAe|NE}2ll3(<*KO{V* z@l925|LEt%MT^&0g$Q}0k!R#+$sCBbvA%}B3B%fUwu=zb&p;oI`|-6(26t!ca7vRP zEA4E)5j?V1HpOtbNWOSJogj?i(cOSX$3p^#@wuYn;vtE02>%ZShQ_7#RdMPS*V=~TRb5bF@{&Wjw9iGvoka(UhCQ_ctBM3xAM~a2xtADiwi{fbFvK1 zUT@L_1Yoy|hli9Q%ehUXHZ?lx?qdcEV*N46)4T?V*jw|Hy5g&mR}eJXz{L0L{$8`^ zembt{{jje*T7izX_7cvj?gk3Qci7V!7v1q3>z$J27#KLWeShVB>#DOv-l?UWdCF;N zY@GIQ2FmgjIoiyr$>{1;iB~vJC^3SfswwJ>^oetg@q|LMQ z^Tz9|Q8Zf0MEv9j8teN*OAhXT9C!kBA=H9)#E01(I=e|x`nz@0)0=Uvm6P$-LAjr@ zm%ru3N5qEdO33{<_$`<)hRCT;?B=)wNp(H&6uJ|Wtspr^s!)Xo(e~s=mS-XA%F{`l zt;*yYF*KA9iC&DL+93D@goMmZc_Ct_W!>!CM2F!D}E*bkN$}rd6AtU&Sp@_U5f#K1%=&(h>;WF#ORLN1*_@y0jl?7C-td z9lCY(#$QUqKBjGX4ZvrVnDy-(fw3_5ADwZ%L$u1B9>g<=Z}8M0J{MK185ut;vI-5S2) zce6{R-;&#KD>Qs6E_@iq>XhHP}bt4B@i53gsRZJNLeN1-~7wCSd|OJDIyaNo8VM zImp1dcfh+swicaFZ=ZFjz=3hxMj!U3Ly6`fJ5psIKT3Pl(hEEcUa)GbtR7{q0oglx zdMbVrNaJAF19uj(Py zL}MDINnmDg8`@?wVNnXU)Jhn2! za+?oX(K125GvA!~X&Mt8*4499H4-1b>eh1!oLUcU_!^h}-f_=rd{j@-uvtWGZfLSi z+*L+xO-W#&C`E+3C_93{y<|@j*+m6=;{#}NSof@}eN{B2ytJ*0a&>iTyN`Oh+qzM) zA`+)KA0x6pmX{AQ*D$jT_BcrQQHj#)s0JThm7izO*mZX-?$Y?Ji>kVaD;o$0A6=HO zX3*3N39oP%C~xCE9--~!4&|llW;e?$Q>0ey`XEtewe-Q8pL20zVAjswS96 zP$(&*q9#0yDvDA_BPIHUQ`McRXl&@#RqCcpu?57A8&Bs;Y@sjNt9wvWANr<1lf=xj zDw(I$^%9U}Oa!rY(1F*Fk~`zGZ!&`731&v8>v;6%-tKx^2Jp@JUqv`MQ)^;20*$s# zbXJTif^B<|$lHlpZq&jDoOQxehN;~fsRCjoWR0Jz#@56m0+YGNQIWFFSi=*A4i5>n zGl@x-{I8eMUe)oQ`#oMY?0Ww3euo&&rwt;&TMaGrlL8_Qs*HELucBPgtY<>~|l zL22hL9X{st7eR4;Y$~I57xhJw#z>7$veU*7)l$-Fym3aK^&~fV+M8x1sS@WyF{LwD!< zeY;%y&k^~G=qY{j34KiLoQ@+89?u^kUn6U8m^>uWdne{d)BR#T>y>jjkk3wvaN+0f zy~VPG7XjPh&$CNTa4Twv8AIHHo6eRF*>}X0Eg8ZE-@aMZBxF5WcYK@w0<5T|9cPu7 zakY#lG<|ci(u{x(O$`^G;L3b`*^rZ6BDZ0yEVYD%{Py(xBn#R-?|0GU&@{bgAZgNJ zHF?_m*taTHL3XBOpj%EPF+(~Bp+qN;1JsaEAQxyniVQbj<&18SkRz4C@>=M+zxOnE z0_3fzERrAoD6b$rrmHQ`K+B)w_(KgfbTuB=`|{9O(%H{Px1hqv$=>;Ax6<_0Wx|t; zhWKfs17({f8%F5w6-&>u{-t~YzERfT+%Ju+BB_;&Q7$HsZ4Qm{1fmrl-(r%CUPZBh zkKRF*8FJ5_t|szETwPvnjAtOv(-L>0gb}Hqir%HkDS8!hU2q9a87@ZdJTzUqw$PB- zE21v9@MpCjJUR&XTjeyqC<>s9e(o;9YU@5Mmr7aFmMa0KE0=S#x3>LC5_RPnRTg=K z*b;XPxI9JHK(F1v!@FnotjkH#(Q0zwyqW8Z-z#C)ii$!*Xdbbg8a{PH&D{+jn%L|s z-3r~1&K`w+mSWaP6XN9zq5AVhpL9Cn4NNR<(sPd2bo1p>*GkzoVEyjN&F~)|AaAeN zwwN<~PdyqVX(n8U+;sVu3WNed- zhKzzyFiw^a-;&Hzr(cnH*g=6oq5akZd}H#<+8S==CdSHnOqP$6ANu%n7QF*jwWs_8 z^hsKuwv1BNg>fUYZuCm`>XN(nNOQBl zsLH>b@}a%+UgxV&)9R%FbziT7j<*n@0t3-kTi7ha)y49@>MWF>Q`q{Xkxt`rl+)Y& zAt}hU*^9HiPRvQ#f$Ch<;+~J=Ij!?DyqRc{qD3a zr=J3?`yLwIjhQ8ta+i7d3olrBmPbjmXY|SLTAr|(naDy6O}s1gO4jBX+jZwBzs^#Z zN>3|>;m!IkU(ugmXFu)>rhOEty8S?zp`GUHB#k+W`oi`{BP$!n$x5Zb+mo})$RqV& zr;hMV6TdzAQhbiO*Gu|uui>VqetU?e5m_~hZ;$KXfTQ1&5p4R_gn+F%-rpa$GMDsr zQVx2NkPw@k8*h#UMAT)*pq$3sf%I;$y>n7-fNWyO`-X6p_=+?UB^Dlcdv#si&YFzo zy36w@2Uf*kOvPaQ=N!-edRHWq;(wF-6JaXl)fEVOaVs8S`alu%Ak<>EDXp35tB{;< zY1h@XEBXUx!|9=JGv)RA_~V1sz|Of8K3hzl)fhRuJ1?T)oJg5bng8^Y%>I)y-;2{I zMA0Tn(FF<_p^DN&v%a9>6F@;LPU|X9e=0LD5)yV75SEu>`%JD=G+mq)?mc6HQop&_ z3Q`<5K)-y(ct2|o0y$=>m>w&{)wK7jfI0EeeC70gG|N@F%5Ntm#`gCUr*f} zh35|@lmy$yAmB`Rdb->*IptAC3tA}pf{tW{!B+0 zVoOD}LahkB@Y|mcfU;tj^Vo3I0{BSmdiR@q8Gv{*Ak_XWPhY;bQDg4>9hD(2?EcH8 z!=h%1f^hrPm<YFNd5>-P+Tsrh+^q`pg(cZ#7uB>Z1 z6qcdO5petPdkm@Ue(=Dcp}5KS-wB@mrqV6~B?#cQ{$7)*}!-i%h8q(?j3~?^N7ZtsElcHT&F-29$3)Op{zT^*jou%#C*IzAIUT5}Z&`VHo92l4RY-Vpy&NvX* zzQw_sO}Fv0tBgtEe%A2r1f94mW@l-}D|wKF72MyrFo8XP?s1{$E|R57P*#|Q1}!P2 zqY(*Li0&WW5om&o&&Lj@LO=TZf1%qBJ}sX4r!2qGH$9cVYwuQ#FQYTRcCXI6-h{b}@4Xq@ zlDz-YIz#AHT^F+Di-^6xf8X7S>f`#C1inPyq-@u}WSf*t*w^mU%eD-le-^u=!Z>lgvH6??Mpv>yvb`w6#C+Wj8K&Jx?pD^Ni*P(uIYm*Dh?#cGq~k z=P(UB{tI=JH8B+hxbr*L7Z>PL`fLjNJ4F3+ZGlDhLvs_U>Cn8hESfaxZF48Yu6v!Q zLhd9p#AH4tk>jyT3@09L2oFyJyDdC1t=ELk5!_t$HqHwun-Py8A6x@N34E3-nbFDd zS!uz0_cWJnnvLp9g7eeAW>Z?u@s3SCP483HD~Rx93_R0X&$nD?0oM_M*#1Ddnn1J^ zXGzEdW8=}*p&u#PBJg@I!@bIa-V%cAq|-&Q-4BwwA1F2Q*wSk8L&-fm zA|>jae!}L=;ql3NK83Y*aQ+Id1$Z7mri;q!T{g}(n+PREZ=Jr74&n3j^PYL3dXFFYj!71l2Q3^` zcMsIe_v>_>mWQ5mvX;(#vb7c;qc%6Q^W0Xv$!-!M3Y~Ebam0@QFb#wjb}j}LzUX46 zXAGFL$r?dK?;{l6MfYGj-`KdqT8xW>o4ez|$awtrNOPJvw_wHINQ~S~L83UU!GRA? zHRRiudH?fwKXU(K<9<|C_- z`KW1t4$3t?Jw>SS#{uKw{%KCz>)z7XEFYB&S>6=4`QbSVf1@%PhQIrG)TvMRojx&} z8ksobZ2s)=1a~_Xz6QfnvmE${+$9_L&g1?b3gU|2;vV-k=07)!4>kT72Wm;jWqa+9 zl7c@KOU%hu@iTY=_C7xPTk##gKT=WYfr+#Ub&x5w4%{I)MtzpS`ktFzkMOdGS_Fk~;{eBDkQASX#`7S@bMt zMKD;FaT*NMg)hwo>`gzxZ<`OARQ9UkU7Q9*W8d~NcuEq^@!2b6W3zB(CO@`}Nx;uc zyK%*sC02>n$~s=L#?|fU&EJGH&_j**BjWS^m6^$QPg6^u zjbMap_I8QFW9g|FbQ`>RB5UjLn=$rHZd>8s^?#*cG+E*6!9JdT!?n_RN)DF))?Vbp zv`5BFr7LR#+>TYBtcyzw0<^g*X9pU`!ys7Qa*!}hcA6bs=BL&4c_o*f z(W=eeEGVRqwa*RASUK`lUQ62qSl`}_$cB2NShOtjnL8U7`fk^K&OZxwLK`0aR>kI{ zB6%Hp<%}hWX3*B0`Y}*y{90XGB!WY_KeFnVEAE5H97~(g*hmO}o&>{_bF6Qhea6PJ z`BC5BQTW=!+0Zj`Q)GSt5bfj*>4q#WE*4=(KoBv)v}=_zCjX`O9jG+>FaD9QP-&&9 zAt&bp!w%hTFozAfJb#N(tPy{iej(=cwrHmy5$ycJ1x0MTul` zbkOY4;7PWkWsz&la9Bb~b3oARDeV;H^cl|A?Isfrjz?pOQEy&pM60PgsdvN?)WJe# z^~#|ZR%UG`cVCG!$NSm;2`9rg*J%07H5HryE|Kxh_jHabS@qr*&oP(}J{)Cvg~c^B-F?ih9n%5~HVGjGf}S@DN>&Z(@_HlcIcda^ z95f20I^DSc)b`I2Jfn;EX3H14+D5Z2Ypfi|JfC~VC%aI!Rj76!4@p~qD>tG>{Ehjl zg%PT7v&435eN$E1T{f4B|&-u@wuuht(14>0gDv0ua4YEfrDqoMQ_mlJcHMaV@;7Yw9OLY-8Uy$<>?WUb) z9nWB`E6m~*yyg%9#+O9da|sUnNkG|vCs!T4# zw11(JwJ!_ItvacE?Q~ZOCuv~0mrhD+-7#62wAtmuaF_)HC;hUC>Q|fl#J>Jy-2~f@ zADLiBT(U!*OFrS2t1PV%i}iDUoNxVcD7&}knV^SNGRUC)BpmMEg<2o+6^u~Z?>m>x@`mpDGLzDlwpOi!(nM-muGI1N@8 zR}|@eQ0w`DcWhUvvDEU+60QRl(1PC^mE;985ji?4P3mfKG7L?szHhg-^$wG?jWYfl z1|ww{!hF5XPoW7(t7EV0SI-1l6gZqIX#^*`24X}Gs%xrDayzY^hD>l4d-JFNnG|El zFU=2&Rie{}hdENjw->g}O>9=SHcWTdfT0}LnblZq!e8uikq%Zl-MaPjgViE8MH=3t zh>SW>`mB{vF#wz!+rVdDs}XlrDi%m$)_X!xMWBnV{7E&7`yZ`sA_Nf~*coq+xdySAR4WE67PLWtlBp_@8;)Z=&wGTT%+&!a}h!HDE16eNC?{(0)icWwL$0aPeP> zO31VZi+GM$(Q+NHURm&RAB5yAoPp~%TtPv0KR0~6*Z%{K69igCBRC)<_&g>*EZZLJEQf{G9f)3GsH0~Kbk||ucWC7hlTasn>K^#mZTvDC{f!mO4MnBPDmqs zEF~5Jt-?5EC>SP_xm*19ETY~nDUj{z6~IzcHU#qXwhk72!&=qwmMIG*M56F%vy? z5R?n?LI@ER2{i@H+iuOR^Ua2hP!;xS&n~lpFT}iqM4ls@Vu=EE6LP2aIAKZFHf)q6 z(a;!819`b{LW;_DMCfVh7Qr%60W2oHD9LVfi4vJOUov|6mc7_U);o5~Ez?J==#mun zn1*kDOd;Wx2tA+OZ^09^!|*9bUEtex^HI;#)|Yx|)Sy6*cuvoaep!1>-qPxz>Y04< zr4bh|UtRe}a<9sEX|*t+3AGgH7mKry!AJq#&~SYPV>2*06&G*!;ACb9gWIFymky`B zzYrwY=fa@HuV8k~*esbXgx6Qpe_xFkKc{YJ55+qn38X;9!x#o-{Jyfrm>o1|_~JG( zN^}9E<|AQT!u0zhW;5jvJ(+S6)qB_J>F46}BX@Jjm-Ib7rod;&GN&0Ht}z3QzUhxzHbiCCX=u5EZyjRRlabh+-o6Y(B5g*%u& zsvI~5y(?~`vNZ+y79^%!wYA=qX%~K7HgqS?6roZNcdO}l|P$dr1 zM7Ssv%0ImM4F=QEb?#{5tylNqP)=C)Dp%A#!bu&7QRXImhy~QAo&+S#bHfVD_l5sy zQVys1Yo|mPzcJ`m!x-lh+imITzl~4H5&2%f%RT*`8xFg~rWe2@UpqY28-}o6@j{_? z2r;sruM;p9lQOB(x!>Kp zdzfrePnDTAFj?vMW6G7H!Su}gm*NSHvGuM@3Q=+j30Km-+cK*F=cU&MPD^*bc;K5-&!XCFr%RkQfdu}+sV)_^g?9>v=BRzr!NwzMYw{i%hi z^DVbm4i&FFYBERnrCCYax{_a&xw{=z{`?u+BJgO1L|x3U?XV>`hbt~UrN$yYqJ-@dH8SI{*fU_*9*zD@3`dCh>swix zQj(W^hx5?0pWSO(iT8{x$QXK24@>rVQ;4EyTB371<8vuBbZUSJ1_ns+|56SfhujyA)5l?+$R{OK8$^_(L16n?!mz+ zEZGqs->s*o2rJ*%hm(i|aXfGN`yleNi-iMe`svu=wahyiO& zo+tz_m+ZfPfAy8lqV`vHeb%0hl08B8lGzHvCS6ZI39Sn>(c%<0W5G}uzKYU%7MjkMJj6#)_N_~i#@>Y~MXez&3 z+uII%!JoV*7PTi&6Zbm*eZ4^Xf$4}e?SPa-Fbc6=jTWq_&U-_*uC^kZx9hElm(jK~ zQ_P^KLJ~zP?4AGfK__8!u7sU+-Y&sQPS)I_x7GHU3*0?Wq!N}Vc^XEriWj^WqZ0$e zo&8}GNoba`CPiUX>|68SJrtIh;CY}3pD#@g%238$kNV&Ghdi_j^**d}CMnJUZ~k{! zs0{)|{?N9hgYTND{XB*CeW|Om+uu%RyEE&H#1eLGnG{_;ExGIxaJA-zv&1c;w&_jh(?sIB>vHR81hZHCo7pYpS>pK?u( z1O0NSnR$5^!o;}n!w5d#xa{@PKoP#W4o90XRa;a`?bbTD9pS>n!n(poRg`d{ayvut zdCQvNt+PI9;r=^h32>)ar5|acH;={{S|M2^WPKHkVc))ty~{JMDJrc;&Gseg+vKdA z@0E1d*!ouGtl=K0y|z`vx>8{#b;prU;SPV};1Ipc!Nl1UW3pnW=RWFdMxuT=vweA> zb3czYf*zu>uQNSNKQS@kLldCG4-*tlC|!i5Lr2Cm#mBBZ&e7NP$#R&oYYE7VNFI;i zT_#r1fG!WSF1B1}S{BrZ`wGcnUXP4mo5{;z7`ObIRTau|zr$x2LErEW)5(`@l<=vZ zy)S07rKuz^Zq@I$p&fh_RIBzeq{uUi`%Tj2kSEMS-DMQ>tv@|~6$#=Nh+3NG1g zId*7A+(izy6c@0mtymrJ9Zx#A>ZpOP+{I7)ImsjP9}hsAL+oJqd~Wu}XE10iE!)U? z_f2;}Wep$q%%`sll1SZ8ru6c{!~cmmOjJfAw!XG%+L(}?Qhb$b=>hE?lU@VV$4_T2 zI+)J|=S>06KdAGUA17%t02}O+Q||N-dBwU55>N@{PenI#D; z_s<7%n7rdaDBx2R7-94ByfE#(Q%Zt}c+5Ut9x65j=&)pA&hI%&;ZdSDzfyt;A{Jtf zL9|%BW$&~f8EhZ;rn48%=bFrUcMmUO&C%AfP<&8^jOUe&`q&mD5HVX?{AZ_lU{8`> zHF$0Oz+>5_I_S@KA#D6eRN8j+359^ahc|Fs( zBF+1MLY+}FfjD@v8-+ag?KC0IVQSX)nbew~^gu=znKjxCaaeW6pAh`%7?p0eU=5bv z!BH6_h?S@=;SjU$M|er4xR>v*0|LJ&B0qmFirupXvsdn;;M>x5vl8{j)L?MA$ zN%Q%Hb!khA89Ad|7*6x`Rs?Xaq8Ii`G}+$s7b+_DcXNGKKGq<;&sJR}aKb$@r1#70 zZW=jiVye;qq%4iv_V7x!4cQ)xc+SK1lCXk=ET!j8);fYYIJrIKIP_C znU0VrdSK%FZcg>?dJh3(y5)0T9VdOamr$19db7SV#$P{vH;Un6y>c;M{VQN>w!tFQ zb!XI8Yx6%PadPZ+l_#2J?%D-wE$BRX(YbC)+h{`I*=2%o`ZH4TlENP1D*wr{GEwhI z|7Sj7(k%aSzHz^oD&6@k&cPO{lJ*(NBFj{IzWo;+0XprS;|FH~&2$9cdijjv7pAkZ zugz@y3wyiSb?lv0MU6+LC-vQ#@qWg9Jw7?+42G>@Z%HS&yU$lTEFB%(zk04{()A=O z8K!gJAW59U-G^4MQ@tO602XnKFI-msFil5jCEHMIp*XOD2FA#_M%@SQMC9Q_375<|{_6h?^0 zfA<<_?uQKLSOY&31|70?@8Tdvo{^f2^7epRbS#Jo8LnkxXsSqa^6rhH)CS86lz1>q z@9Hmf_Z&NrHCS|bZ#%&~oujAkli6csU%e`mOD12p${MbNwbj3C^%iI2QkZWDX8c_? zp~UIwFv$t#B1~+Bvbal=wrjzq=MhX8rtqEO@l)A~vNYD7m+UbmM)LC-8(S8G3K6Qs zJd{rjEf_XWK6RlW)2MtbY`lIq}pOynhw3VVaXl z<#ON0P$JSs_S3KLBAlmKLEN50ubs`ERMyuI_Aq=2?rSWlDZyBwI4Nfw3`AJCGGVoK zwA+7l$)2NbQJd)O7S5L-`+47^HsA{<>3;S2n91@GgsVm-rc%=gl^Yz*-}P(sLlv-s z-VMX&dof05TS8L883je9O-q3_&2T<*SUG|Ai?!?JhA4f{4L1y1NxWY2QzUz_UG0&C z&;t&ZYX`F_ODa|}(qDa(!;!P-(O@0yK0%+w9wmyDxEm&C?w;f71kiSa1ynSG8uqVg z?Or?F+x}Bh_~JPh1@zZ+Cu?agHv9Fd{`zOFBuR5qpz~g9YNG~pDw7dk?;AhsgR<=g zJ`770a3~D|Mu{~gN@WP`idm=EhEPZFE{Dx^#4e$#A)I%Zrq3hKLiNy>1#PZAB^sMY~ zr91c!!!j#q)I7Z|rvC`(lO6oFs7BZQD)Pj96d-3|PNA^ER!8M4Q)du1dxoh;2(sXF z(F?0`&rWbY3;!5%7yHK<*0)g$J2$T{>i7FSJkG>0$Q7Mk&ymi49TYBWkG%hGRj}Wc zAr5qOg(856fA{R9dqIN%YbZMHE5x#Yg!}earTTt3@!1&$9p7g!T=Mb< zHOs@IwEUE;+%=dz7igbKoV<@OY9K&)3O!;Frq3)2tBbempkJ-4^^7TFBIwLx9w#5EEP$18s(-CDycGdl{{rOC;?!{A*CGS)$Z#PCuPGb0JHHzL3z{#g{9R# z$uQupJgr{&-F!y-}=gG3NGjLaO+{Z_IJfu!}~? zqBWoH4)2>6tQ<*fYWX&~%D96@zW|xZ%LbGY8TLypRW&#i1{lkZCCdAONE4@e_OlJ3 zzfDz;(D3;WRqb4UF&nx>0PXGVvM2mOq>^3E^R^h;h*Q;zF*8E|9SqG)y`#A;(s-pi z>-%w%0-K~)E+Tv34;ar}j*R$5FTYq`qamK_ig>P5FFni$^e-264CdW-N5TIsQLtO% z)rhYtkO}2oU)R>3b7{r0X}jU|TgkudSM5HrVD(+rfgDlD~=7%i)zT4{?Dp#BI-ya<=^AqJ>8{`w1>DZ&{?a{JIp zJO371(aE7B5QJ6FA*nqAXw`vl(*3kAO^uLWh(kq{pLq}HVy6NVVCK&_=@(CCwS&p3 znkt5FTBhCTBHy_zR&ud;F75L5Y79IZ4C?Z%(-K7kYju4VuQdplO&RnSGU67dJ2iCs zVg`er%Z%S_ui7hGY)y1bD{J^wg?-aArrc-TBpg-gtTXDrkGk#)et&s2otPyX%TK@$@+X3rrVb;PlrJZk&T=hWUR^E@2($n+N z$(OyMOr`5<8*bcVQ^UjjK?z^C$||2~GYzgdla^%Z9S0v@Ds9lSSNrg480d_%4oVoc zLVnZje@j`d6cE2uE2;l@EppSvuOrOdS;k{jXz-w}QYPd%$-@I@V(VTNU^Ae3pfU`A zkNlb^jqt`Li~WCvIvev{-nE~Z>yVY9Ok6Ytt4KvDt7NQfKm`MVkBr!eZ2lo7g zDO&a*eH)0!LR@u5H9tU+{LKEbg7)TMx?0#isjNOU1hbl7CXg=985Z~eYZkE|Tt(Ty zsH-bV>%G%KY45LzYB=28HHZmX|Gk~WbEWNSy8dT{N<)L?I+{0zd`Afwbh_0W_q~db zcP~xf5R7>g6maAU%fj2p;MuqoDjZW&|4AoGrs5xzq>LoB2nBr;)T`SJLvtNq5*4(g z0SCg@rz<-tBn8B#hpWN1yTc4MIj@ahxlz(^M@f}Ki6Vc@g)m2MWh^8B8#e*T@etQI zI@zOGd9FV(CEjPgM1Guu>-=DmsOBYeFu)PB0`%E=AT^E0c{ifhGr=nf6Nh)`Z-{}K zz{Fu*UQF=uI;+0i#>QRC)|Qd_=^}b@VDIr`qwVts3yaKC-8nE~uGNRzsOu)>>rxGO z^d&-`eHE}s`=2(qjTG|p$mb!qk@mK>8sVl8#lur&3+zh@N2`h&Y0a%%&Wr``XqTwR z4X2aRv}g&Y)BjJ(yZX{@yPfLddZewB44gpK$gEdTsJgyasWRQKpOyHyYHWcx|5Uvf z31up5PaeU&{t8v$D4aQ$K1<;bE{7;tGwPHlgGn~s_bBYORxdW{XFgz+J1(v>Zl{E_ zF73zv>PYS#nVb7CDO}!C|6WJ1-h)eUDItl}JGUY%7)}#BlYilMHNs6!@~XI~B%>QO zK1-Yqxa#c9?AMvE&aodm?B!f^$HGoB7!S)|nyVnLQqGmMd zH*aEMmetI-988UjRwy4UMaimME>u^Wo%?B+d#ihiq-AfBlG%wo>j0PMaNX8QmzU6< z=>>rfO|5a@RIa4|_1rb1ZBop!zn&taH%Z(6;lBUr`iZ)Ma|*1E81*zvQu_EtO+!`U z##QCN?D8KvzV$yA#vX`=+1JpAJmSZ_5htSZ9dF)9oD>*)Gud^Eg>+kU9@ z<(r(C()D0U*@1tB3Li+oOp8k0T~9J^9s*r2{t9Y$P_DYBc^k~x4~%|IED~>WvU$1d zdVc7no|pg1E3aN`?y+J42KizA>4FgE9AD%tK5&&k4FBT27oYH^S(~t5$kBu}&5O9< zl0p=J^!7`#_!(qQUeMGBH361~(ia@>#wz=)t^Rf>H|2-V#$vB?AL3Z|jP_~NopZ9# zbq!@YFbM}r(NR;0CJoZ=@bP`p-?A!gq;x+K7w6?28`2J`dW3@570fo-)4yxq9#yFk@vaQc_DznBr7G=-y7PPE(lb2byo|34tg6c;?l6Y;3;NL4Fx zqPX%DiG%nBrbc}!Z)*tk{`$rWNEr$DC)KqgI-wm4Kr%^3$Pzs=IUDSiA50U5N^)>P zoQq%;q@$I;kS|1_dOE7yg=V&P>LaaHX3QTyB8{AJwEl$0JR;aqe^;;V^GPNS zkk=Wk^q(h)(WWkuPWNr~-5%8mKc(FI>2rj~Ixzzn5P5xpiAj^Z&R@0!!T)7|e|D1P z4FX24vWlODzmlCth@XKi+3hu8V&Sz%?oGaT;!s|)6~>iKH89KlUh#)`>58;HcfZhAIn}-^+^cl%yhkx%uH< z=f(e+MHBh02}Gwc0uaM&sX*(UAVEEfIZW?L1T(mb*w7;(aRJ}To3rtF)A;4i!^mTt zN278)HJyEBRWNnslt_(B4s(c}c#^@#QhHPWwDLy|U?g<}b)7x{oG15r z!nfMHym^vSmAKOQpqupaG8whylRg%qU(V5n)Vzd8`35}_9fh7 z^5!sj^6Jq7NkZSCtfjp*`4zo+mId#xxrbGlLY=sn%-F2P;W@r!=aa+S$pchlIQK^( zOiL_vrRDXgrI&LMRD)7oQ_YU~lo0q4!pR{Ox?D7?Hx zxwW_>sXWv+JFSxj6TBfk8U&&gq<(X9gp11cFqrS9-7s zN3+)Z3H)b|`y8v@C>*U`4PJjZK49vkP0oN3eSMTH=KQatC`4enEv}U|H;bVppvp~Y zkef#oqo#Mq#U@(UKOmV4se>956|3!O;LW(ozZrrVnISPs@y*Kv-OZ=_-=}hOkC%Wg znefRH5o+p)YHb@|ulQJQfvPURB(0m>U7;v}LMBLgD`_G_J%Y!l}37+#Io-nu*Xm>gGC`scq7 zgeYG@`1}^{XxxP*YyAee9&>s@s>}Iz83wsX4TYLC8t(376k|XzbL{M$^68=R+29VF zgsFv)cW(+V=Ufg_yDlUDfq|J1A;t+lr^`xJn{wOc6)4d;DrE^ zQk=h%sA*siCH!ViA~}Y zp7ILtndEg1H_#hRykW|p209%nI``qSV-?@z-2QO2o)u%#lrpe`&wF5r(5cQ(e-plk z>f3M(s>v@^0gDA>RdT4U&3B(ZZg+87H;kSN5DR%F=sgsw-{9r-uF@PVN=!inLJKO+ zK$l$Y76~#}fm6#l#|LW_Db#7R2u^{2Xkb6FOBBaU-z`dEX)mP|O6yM2gvUnW)s-x_ zZ@u0GgT^oo2dlO4%F-K_kna4R7CjQhxO^4zpt?Y{kH{w!L9&V>?eNx;k#{vkD{PvQ zHwP&x8z(!LA!0_BMu2)xq1as86vR=ta1@%wj0c_9#eWT~#u)cIYPxoc5zlQao2am19N)4h|$#`9T8p z+}@8fJGd&jl4{vU4b|uIz4u=vrRe-(PUzylZiAr1syAZgAOa9U#sxCGFR^CTVigdy zQw3C5*n}lnHh_dg(Ec~d>;re0Wse|;U{>0|iiN&*WUcQ2s=(H+P+n0;>23h%MMP{B zSgGU`T?PAPEbRlLm0i%-H6nx?<>tD4+F^y z^5cp+D}n=VD+``l&IEqzuXcCIH9bXS3x^FXTaq#CtXT;ASzzOt)_I>P9pMa5D7cj0 zge4T`_L;*)8X=slFvP=i3ZV5}ECHO1gxeXXXiZRl?PVbnXnI*;>e1e+I<5j2u%zTO zte^wD2*l>)Rvhpf)^e3-&bO#^lXMOKZo$GQR-{y}Vy3t}&e^hK5<>6*!(e13p&xDZ zGqW@qu_X+25qzK{U;)eCiAjK+Z{by1HkFWZWC6@3QS%EGN&WSg5EvHaeUX@z2qS+5 z_9XvXf>5a3>VOi?1A6Rl&4N#zRDn4$oW}MFiW+XKm#vXIKNnHw3k?d!23z*u%gBmI z8F(n;n7!f|`=3fE9CPS`JM)ZSo>-c3xOy!T_wa=vmY?-QMGDTpRS-AW&u6p&x zGWxR!8LjYP8PCN&7eM~bfL3ie4~&t{=L?~~2ec*N@?{NYexjmUsz9)M&bnR6bn{RF z^oy(WEwRh1IHx0w%I|vZw5#z~$xiiIlnZ?94vQQj%%msaaAsG;0Td8OM>KdG_+?-uTBU7~5#D5Hw^c7w zLwb%UxC+clTPZtrR9ExDMXJN_tT_r_av(22W^)})fa6qKS{K1gP{REWhWq&}MXF>* z^eSmfCe4L}P3vv`GlnkOUYUr^?d^qqJit}hwQl9Y{*^I(@q&H* z6|{{^nz`n?7EaGTAS(Q?F`n|OqMo?>IJoWyNxkspRH8-v*jai`HntMkO&QjQbJ%J+ zdJ(x9W zw_^^XD8@e&DVBLjwAj?ntF<+pvTru=rx-I@M1SG=JDs z4N+YJtDN^_U(!I-U(l>`OLOB-Bmw!7;(gR7%%{e7~W_B-|wtQu-tMe%h|k~XbFFK zkJ(auSb!V~Bgt3DBcu?MhCY@zaVcI1T(Ja#a){3Rg!7||D2OU?=5i*Lc;mmh_9~4W zLaK0B`E%2**#M@tGPx^uel|@IOaMUO?#ULPi`!S!AO=}f)*`=oxBp9r8H)zi^>%mE z1)4krl>rhE(3A9w^-Thc`Fn!80&~~js~0tGOW3j9?em#AoQ~=AiUoz(;$>?>4l_DI z3$P$B3K4~iwGw3-4kzC`pfh9t$Ptp0TGE$9K8&MAKmi0YGo;Zm?mKp&6d<&Hce@Fc zMjEQ!S$*s6mk&N!xq^gC_uWU01d?8(OU(Xl3BzP65&fOGR>cgG`B}DRLPZ7<27ct7Wg9mjfUO)EoYj(w&PrU-r6JkgJM3-ip>~~ zD0>eOlo}!T(>5`)BW&5+qSA-P5>4G=ArfI8d+$ScU zp7{#Vnm}u-7!e&C_v#@^PW; z--$6K9gubKJO7cKIEOq;CiPAuw#i13PAiM15N} z@3gONgCxbsY(MZZ3j8ubrXO8byJv&%tHKnuows5WGUeu44X9Rm(mf18WX4_fN>=Wj z_gec}DzBoMPyjUIW$I1(av6^ADQRrIy0*BIi>TV(q?L-(LDD((1GWB8XWl>g_zJkb_z%s! z0;b1spuT(vXz^1%Z|>Q_91qDJ&qeSA`jnrc@@X`0Mg?d=N61P*t)>~R7`Zw)uZtVT zq3N^yj`l5vJ%z?s5B6mBG?N-2K(lav|Key{UR46!nu}f9wH+<3X~2zK zktFaRl2&d8P1EGvJnUD*Bck@D{h%g^09I*r^9iy~c{V1-D|C(!{R)Kob<`)Sfe3%! z=EhLo)AG4!h)E*&OCR6*;-S$0@$nsn>p^T!d7I`hwVlqvx#jj58i@t?`7WO#hJjU5 ziZd%SFzy>Y(G>fup-aios(^y;T48J@WO`3D`%es-0qrksACMZJ173Kuv{=cIxAuDn zk4h4vS2x$A`RFqkNzQnDZjQ>2qLR4T6rT=H91Y0KMJn7$h0gyJZ3%prM`6kG{;D)5 z{WOkq$lS*vf&Q0=>u=r5u0e?b6t{FJ-#Fnz6Kp^~Z%_0OR@d-Djb*M`N!Xi`1N7S) zXgyHYh2jyjAVKVVgc9~Y-DtW@{W$J&1qNy6sGX_Hu51H4&#LYAof2*DFyKd0GTC*3 z?w<4gFXj^V@~57Mz9km+){2Tk$FronjfdzGAW#B-`FXJQlJ6i^;5%;qi@l!f7M@t; z;a3vg-kZt>{;!Wi?Kr+SIsLZzktnDN2_yf2^Dz;UDthuLh(P-vQ_5cF!Ha+@1P&xA zVsrN_H4AnS5Rn_?@V-wo*jz)C@QTXmAU=io-<;-w2RO}0Uq`Rmc9WIZbX7*@3)LV{ z#z#$Bv?XYiN1#e0v6jb{RZrw`iutYgMHxJ=%Gt;SwXjb{@N7wAx8>x#qkI-RACCUu+qTHp8#AGe z-dS!q4Rt-#jIr{~!Y++iv(fKLZ}Hi0U#juBTBpQwRpZ_5>8+}XPBUSX#UQd9REeTS zp?^@r#}~@!j9t`OA6ik)iIkMq<}tHi5GbF&oB~!XnP-_+q(jD! z{>5T5F2}4QzJ|;n8)Img^{rs({>ep`X%Ma+>{H4N`A)e}=zo5G^`+58#f^N=gAhWR zgwQ~ns{AAMlR+9iBL(eud2&*gLSc>A1cJLzACEcLNe*fp<;X9dT_n%XtOFH6#8ng} zHmrW6SY+?%%dku!f3FgEvyMI3ayhm=?f)m1%Ksa_jS5}9>-2;Mh%W^y<>Nn07abRW z`d_AhJ9d#k)Ng*AvMgQNPt5OxMQ9=3-ojSFWFTZV3iW&R*VvbPsh4cz`_@4W6e% zORwE_)90JLme+-M8V#E_nyn0b(XB3c&iJ=o%`F<8KcqdG=Ka3$qI@^r#XP z=hw7K?}|M4-w+-Y;B5p++bZG9mc06{2-2OV%`PmHZhfD{iP&}@3P{7*0CVy3dfs{& zH{eFd^yuGrh#qxKKpwZ(@)`8byK^Zd-3ES4%Q^-8{9Y6cEH*kuMu;p#wadY_yveM>Vj!&M zK7V7hg|Yqvxj+{lxpNB^eFZ(N_ot;t%OA4Dqvje`4hRfFg`4v$-a5W)^0@;C%6s%r zt#Gix>6hl|cz)TevvaXc;*OT{dJ4jB%yb^QqAOGI6KDAW1Zd$Mvt2 zL3G~evz>Fi6u^g6y;_NyNtyROJHD~glXKgO@t&YU-7u%^3Hc+Ef4)$pKU`vDrjPM! z06&FA6>)rQ6`%f>y-}rf-V<}Tl!U$0y)V=Fu zGs`>ioQ*gsZC>FwHF*JHj~t6lu`}>G*NUzJ0<0z7=K<2UVE_K$=ARCp~f zE^nslHNj|oC3mF%MWP!orrv^;FDj~PQYqwU$J5dagIc2_JOvJ0`A5j~W|V^RVu!nd zr^BFIJ+dt|khQ~nKm%X>bLPFE0T&mie66*9WJ%9e&tC6uumHiuRuAuhLG>R#H{n*P z(laQVeMUe=Bt$O-7KDmAI=GA*QQUL|B@c@G?2CCG9U?mfa+uOGBxck!X60T!DB1cG zLf-)YQyH1?#K0FrvEAnEc%WbJ)KnF5_lnx=DZJm#t}y?u4<8b$pm>n3q|EJU^`of3 z#7Pg{b)F1-l}o2h)|}Vb-O<;LCsQ53J6dP3rxfl6Tm*{Cn~O7Mg2DmNpZqy^HS5Cy zY{g0XYK(mANjxiZ$&JY;z89zW`{=EB5D!VkP3SCMF^E_lFKW!4%?W%GG8R2WKbyHZ zoz^HuWhj6xw@&|nlQw4k)1HxD^?edyq)w$*vj2k)?kGY@scx~GE)9X%>z^d~CoKDT z5v485w=qAmJ)iD5FjVEt4y z4Or$G+4PGCcxAH=^M~IBaf9ofA<$$BE6b99-y^p* z8b-R}Mw=^-R(cG-Z2%2m(pSAp>$frcXL*w>tQ5$Ab4RUVlsg_{bHlEu@@d@yx{Zrd z-3EW2cs%dqmG7C{)GO;;_x*~&JgmLACZ+XXpvTT9#Akz;4I223*GEigo47kU{s$#T z>wkclck`rb35YXSWi}_{Ym9Iym&Y1p(CIjVG|1F)ZxSFjri5!_`GaiKH)nEf8b*5b z^{V`ge$r$izxH(jf?+&Eyk$#>-Fw8b`HB%fw7!f z3p+zaI1ay^R{{cIC0|;5JQu7F6Qei#%^E5)VDGh6vRq{MsY6#st$f@~i%2F9ut24{ z?iYQ#ezfFGGCJh3YB95#6+3R#)Ql6MKs}oK3Lt2Oq%=Dn52l9dyf0Fnyhtc0#_ZqR zsFuwbUAY^OC238nn!k0EF#-Sun=a+OOJk4P*fj6g%hGL?+0>nBENfa9!)6xfhwP-`D%nTs_cTs_bP-`Oy6-l zDEcP~C>y6zq_pq!bVc8`XO(IDuj1JI`L6m7YHM<*ebMB%Jem^L_dK~s+3_#|%XA7o zjULj@|2+$vv}xQ$)rei&E{s&!gmu5)6qqS9^h$py899zbh1u6`XS$1@9h6?At16kA zB>^*I6X&*wxrVaSIgR%Yz0*$RD?_7^knj5M@JU%{lcE|}nfoGNg7?h4O^(8B;6EEB zb*SxyRZl$sxIhwBB?{08+W7CW0;LeNNv6RA-r7US*1H~<+!8>(Rr=w0oS(ApDl(Hs z0f&^<_qgMa=_Hr<3t>@7Zmk4?WD&&2!V2}!~*r~cR z^x33(?tOPTo36I21g@j-?|rzWv@X`HXag9;=G!oEU(0H_FV|0}`)-FZ>(4wPY>Hk; zU5IP?8Wxs9DjJgWHzKKS4@5HO94@kxARrF&)1tKbHp{XJjtWoXmW5Y48F=$PRFDoo zpkf)~QF+SZNe&TxQ|+@=TqloL>6;7uzlvY3If@UknQMUFDsqYzmeij#%+yh(LtS^vDZF&CT`L)9ECc;<0yUJ$Aa!MFfH0bL@x( z3Ea4nG@=55_1EO(@`i-Y0&^!b{gkxEVsE$5k`y&73H-oXTZb5t?ez8lODI9HhFT47 zVg;7og@_pZ`Ug|Xti}4{8(-e(h=}NyS&*WjoGQue>EJBLw2(Em-sQC(h`kZLoGPrU zvDzfz;;Yy@JkA!aye~5MaXy-F(vCr`&fpVSM@cy#T(c_b?wmdK=?CQo$mThiEHxhq zKOqPzRzURpoL;%bd)(DMD5$UAN(~2mUaD+|@wThG*b#=gX722s;Bcsal88&v){{Hn zQ_A0uKP$9uuD!;iR5;-q9fi?7K1yTRHd5nT+G(xfPZUl6Z)ah+k_9EafUvu}Q%2fc z?*FD8P#$vmmn6!K&1MC049?)ir8`~P5U3FW~A~1e- zTaV}!jzgu#dHpqWCdS7t zH#gV|{vY<Sa5fDcZc8}+#Q0uySux)ySv-%oionZ`+e`1 z`vY!&VT^u?s@2u2R;{j@H7AM~P{iY3T3ABo!fj2AO4b?Yx`SvxC0RN%3-p?Uq-af; zd)BSPBL^5#p?F^&)-^DEsbAu#9(Jtup`1e8)MgecNj7VEPj1Z|bK%?17z`!D;YbAX zv?4*wcoT{aHOCk>|DmtLceesXC5cFk1(>@Bwh6QmZe;%B3z2kZnix z3yU=Pa~se6ALOuwk&+GG6{*NeZNNd&j@p)jL?Q5$ws;@Ec%O_6Dbcz=W%At_9O(e! zWo}L;vt(s@N?n#NuJQ=u&wq&B62UE~Z->rAVQR0{WbH)|-HR!v9Y`CzecEYVxrh+K z+E6g?m=P%iIwlP))JZJayTfjGhjQGd=w_`E%>y#HyEV@&x5JejcjV zf^zczphTmlWEl->DtF@g`yiU3N!;Mr{|A{FXo(f*KkRJbXeNEt$D-yF-MenrP7I_$ zg*ECwC`pv?vV9EZVi_6=M8w988lr^K-JKF3oRprQanHgC7p@x}ffIWFx&B{l@FV{h z1uMuTOqzOmE_npSgSUsW+;C~)Jnq6JqB~l zm#4~KNT>{;6lbzybABwpk&FHU|`)nv|n^#g>S5`5k!Tl1EA?Oe}I!Zbbr-sSR! zh;uFIR7y|;Q;uu)U5npt&p%J16(Pq)lX415W+=EfmS~~@T>#+h!mP~hpQ^GdelvSH z*r<~*X4cQ!JWA=3@&eolB8eKhcxxWJwtN7+^X1*03q*Cz64~L2;Y@%qttYAg_w+h> zIJ}%A5K{;_`}YoGV8gg_YmO~qaAH?8b}eH1S=p^lfw-e-sz*vSImjZM5>d*L+W(8Y zymUWpdYw#nE+d*8DO2Pe1kXo>@?2NeN0^rW`c`n99H6|62Kvp9+}t9nrl_Ym1KtC{ z6={;JKz@+~y{gPDh8H$AG;&* z03iqVNJWBH<9F8$=4gO(levL0YiY}W6=na|&w#()3I9VRk zSN;%cJ!7Iz&S`AH9~rv5@um1|Blu;JWdRpR7Uu^^2giAO$8GCtg1{pya`KA)sqyr| zUN5c6$0w++tfj7uA+n(C$sUkA|7V=*OrK!fSJB{=)HU&#LW@6-H#pr=uIoXfl5l6V zQ~OXXF(~bAY}z?m=5LVbDk8MQ3WBe|!F~7eI8dielPq`;cSmlV<2$imZ^L8^ZBBcK z@L3Tp;CilKar*c=7oGmS=$32c8g@v|W9S9fZ7D7yX>x9ks6`mq5lk?gz~<0+Qh~7} ze^H62%^Wk97ZH)ph)$gaI~D7vR5#>Hh)4qV7~70vaT$P6jE9GpqK#)PZ@+60!x-MG zbFmbcVSRpByL+5!55Ed8>FQQ}`@Y=A6r~6TIM-qvX)IwPRvCD2o17iyB-@g=hCZ`s zzMx%(qN*44^3HHt1U_3e6)anJGE@6*K z`;F~qOI1y(=8$9fqgyS}>=ez>(bV#qXt^U32|^Hwc>Lb=Zt& zZ_^H~D=R~5zK`9cFcOzRiH3khNTgl{^~tL!&asPVK11?4Nz6~6lr#0ZIQEs!HO)}H zHZ?~C|H6>YZ7`zhD5>hnVmjbi#g#SQN8QPBDVEreB$7V{L(S0Kej{Knj=k9pfr|vT z+^4KPtEt_I93AW0;4OX^MPJ<}SOHXHX?n5x3uy`V+OEsgW|W|v)@U`=*d!lvqv6VS z3m}t#2*g=~E~35`YCc-eW(}$(Du&bqbF#sRqoERtdYbl;xfvoy4tA5>;OG`_?iS&3 za`?`u7^PkyvcbTs71W$r#I$9T$o@>NPsHQCp_fVfV7I#N5e8(^(%K9vvA@9WhTXu(0e#QM6d;YO^&>FFF*dCfg2uLNm>% zbFMPi)zKF~u!O2}y#HN?-B=ejP(PGDSYHOKE2%lTzyHbyV^oI(I0Akx+O#{|il&bJYy6X9Pn@>gS^rMhg| z&$fWZsIWg!&IIpY#_vS%Il}YIIb&(!;D1zz-qGOKeT&EpQtc(Tyj^C8X1z5mEe*)s&Y!|-c>eDV6%l1?G!VE5`G6yP?9 zw=N-2;SR#TIm#DYpk5$&@gZS?^n?FvAwAcdI@ta>`M_dNGhH~`OvPx+3KQ(_Ugs}Az<7sE3;BKjI75FNc2Mr?jpZ|F*JU<^c zwd7g~b{GbV_Y_^2j1*G8agw;+bgl7{;_^C>e`2x)_5M#X)}N`yu@`plHu}#qe<^Iw zp(!brU`KtB;QN#n&@vgQmZ00VDoEuk6`}$Je|0}o0tl`zO8>2 z<2NRF&H-N6vj7t2CgWc^5WphfG7*uFtSl^H$;x}Cizh5^l=ek11#T;v@vr(pZG*jv z{OcJY%LQ=T=Y=#Jfqz{C>6ml5dd|0zz{?k;fpBfTdRbGB>i{w8J2EykBv?3w*pU&MS ziMmyS;*e86ahk_?lb27Ll#`!aqCPzl3StJlff9JfmfHFa04Z=vH#$hLTru;)QhmYTmfn5QnYJAe&8*>MkEO8(Bl zh6k`<({7gPtOVU@D!I{1DU*BYZ*O)I9xty~0nnEhQ^t0g~Li1ue>EhJ~1W!yh_%YXc=`w+_hE z25Pd->RGP^MIsKK!)VqdHv#kGyg@XyDmFQh(OBb1N4nN7=F8|TxU_1}TE&j-ipU1u@iB%-fZO{`-<#WM#9BMS!gfoO z!SM@OKV6!=d&^^HtJKlcw~tiQD?aA^HAb4l$NM4?FLGX1$oBcQyP@XUPam@h4x(;t z;iHTPng{v@5vahqXb?VN{7g777eUw#ae4qQ00L471PX7^znvffhS>HxGIQ~|L=is@ zb2FdL?6&Z(@Mhgk?bO1vXn=C| zyj~3)T)DszHrxgE$Q`*-!Rq(j@7mU?@L3s9wXdV~TB`o}vFK|59DTozZ%tAodCsqL zfuZv!5rdlDb>(CGVlnsC)%a*waR%%=YRBXwN`>i)QrXMSvU{I3?Hx1yB` z*m~!*$;-0zsw?1eRtiMau(26sh@&c)7$z5XL&MEQfzfq$lt&hLNq`N6(L6L=UTJ7WF8YGXsUy8I->*A2(!OsmZPK3A1lKMmP94l64`bDb9v*62IT;$&6Ac2VbK%LOKS@WZ#8u7X}w>Up~~%1*#EUN&Byxb!M0lN3<|`_C@by zt|sL3UtM$L`(oGSo+uQ!_uhu$oj!G#R0ms^Nt%?!X7GBI#WrL}bf=-TPKt^ zU%VE-6k}{$n@)0BeP|CRd!;+fec<20-7z!2+4olmk~Pd|k0(37g-gvaLw{$@x1Di-TWauX~Ke7NVZl>5%?)Pgkr69;!ub=z80Nd;3hiS}_z zGmkjWo9%WHhL1Oy4-}{VjyrL-SIcuhS;h=Rc%t?m&ZEn%uT<4x9coYpPpk96QY#c> zBAt?!ey;VOM|g~z+S+DzX0Gm`c%Lj_#&3TY=hwhb99dW(c+6ok4T_BV$X3kCGVksV zgG(xbokb)8&L9eS239osrKfAF)fo9?5*l>SVlla_e!ZS^GBRpMKxjvh z!e_15XoI#el-{^Pj@7iQsfMw!yRNU9A!tq) z^`aRa8=G5BVY>PzN4}ghlEB?)5E6g2ixZE4{R5Z)QL1kFuU4Dvt=pgW@tjwYQBehq z*P<~EZc?q=i9T{4$;OyjS>NAZE)cmcy^lqrC9m_h*#e!md!e5xdJ|~W(JssaPs_IH z1O(8n;lt0j>K3$09{na|uAi5TGuK+2E4JBalaJp`eq0%My5X={2q?}n;t7>Rzt0--(E~7J#xvr=;Xf{xq=?LCeOt7_G zcE-E8aR}|*t#xPUdfuR@;>19X@blcXt71&h)mAecKP)!U4l*AQJ$!LqDy`_w&nR{h z{gd7WNp)6Vicc!@yd}00skGFTWDCf14$`S(AD3OT@Z1CknRUkhf_loUQaYX^RR?h;4IY`Ya)wuf6HvU@ebXV`1oGg1`3GNLPpar z3Z0_6qe$2l={1u%CwieUI5)KjN}kh((Bv0=OC%>}kR?hG>|2+~RXLp2JyKunzxHx6 z{t}cI4E|;3=Is=6-Sr^dIpe`~qo~7m!&$bmSJpt@WV~xF;ceUGDCFF(QTb=tH`5xk zht1GJFc($xdnGBWPuZBidLjpCjybZcNtA6&PJM-}K*u07eTs{u z3ZQEoA32PUM?BeX7pz<-X)YyJ{VIv-Fdb8M{T1##RaWyaT_RL_RJ4DI>Q1^}_SqsN zw83p4hS%)a*sEcSsiC_Z{di7|9M4p9zkOg4@zTCJDKGF^mz`exKHo#JKG0F1>wbac zRkYI`bvd1%fAH{rdGs_>mz$ zkaoQj&5%b!gIPkk61EoS;rX+1eGx#XF9?u5iBw>=xxZeXw`xH8=m>X4wIgk#H!;GK8$k3n;Y(odiAyT3V&W@od3Bq?hM(ZXF^|BRy;VNg`yG zrzf3sCc+Rt9+OeuY>`(oL(kg!yOyaAlrJ%@?0)$rbd~~T zhznHbc7HgI?p(9uN$_B5OhQ7v%~p4v`2s$-TU-V@^^e_B)fz%+V!KKZ*ehy93J0gI?RTWOfc;KrFV_kSw=cp;%qki4(E*1|UT zh&3Bo2(lp2f=an{yUblk*GteI{DyqVUeOVyGxG$xxF*D5XmPmX^*-xTsd{h@JFj1(e&yF0 zG&2(KrK2xv5e6HI-R;7z&?qDpG_{*e0)1oHB&0@U+VIcT(dAYOdudeWbsxr_ zQS3oinQ<6w$09D!tfP)iA}?#6Dlu#G>*rk^45f#NJ;u+_mJ=*+=k~q{gMbT8P7%ljArI|8Of2 z9OgfeX*m$VU#(56g?8-{8Hq=S9x{jq*S|D>-?i04($?yBBoVf%{3ke+(8FJ~+frD# zA61$wIweJn_MtNZj}rwIbB!g*yigo>}+Z#flM3;m= zQ#@7iI>2UW$$j5~{V}<0==DLs-Ni|ehZTMXx=xD`+3^GPA(SBUV$mIAzFW`K@GbS? z!i))#yj*iG*|q2iF@Y;nBHNB=)$L;zSp}=fYcZ`I2p9t{uwU8HSqUDl?s|kM%?_eY z<>E0Ao|gm!F)kiH;eL-lR=_t$~u?00;Q9Dl4(wxod>5E>vJL;LvC4u_DYDE~D4zP7}o*k+E;C`%EpG|B@1wT!W;s-Y}{ zCEg*s#_oNJ;?87y*ja zR;_VRq!tRd?|@O{_2oP17XRSK#>|1l9U^hs&c){Aa3l1l)1ujLuS;{=Sfv4J2FbA% zR}uZzUpyHCR-C-Oc9=T-`mzj}WA0EWzmhINn7ImQ^MSz~j6{51$ZA4*VSdg+M|3 zbx?=d)BX9ju9)(t)9G>@Q$TZqtV zb;!m(8jgtQ;I*#4GQSklrmPUf*j+XQ)!#Xz*}I7-%|huYEJ9S`ELxWxrliT4NZDl!Tx4AAt&>2;{gO*M3g+O1tc2s>*Q` z-pNaW(dG>Lz+to9ITZrC4_|O%diC4sDlSA0*_x^p@p3P~@*%466$|r0 z%k*;sw2Pe&wbfi?{Pl%YoK3qLLekS3c0~RVp0qc<+)+H@CyVj!D4Sq3`^H_Pec}(} zSZ$;6+NtyP?zMBW zY%L{C**uLD7cqYc*Xd|TuPs2O^Ck2P4G4CxYTDO23JE2A3rgqftgiZIX(D67j4@HK zmj3SfUfkYPr&u;Kl^NZJiTipSIj8!VFx;+qLMR_W1 zZY*Hc6=eAJW#94 z_+`3oX2PqKt<^Lj7d+R_?LShTajm+vrRVZaN&-rpp>gspsA;t@}g54a89wDqtrgU%5Lf33KjuvPgT&0!(MNqPNRF=Ie#2$XRqz8TeVWd zoF~L5^Ml(_%D?1fIVb4PtRR*%InOzH6^*HdhU3?|*1Wv6MSRe_3?4`&?xbtQP^C{k zMf>gboBnHf$*8%cJm<7kG*%X`9e(a+qdUL4>p#+YAQ1|J65EtUowD{2_q zN7{8ERw)JUkZCG0Ei6ixM!8tGkT#Qe@_bPa;oB59IzQo)?7u_yK>k+Y_Fa_JE`a#v`OdztPtY1TR=Czn zB(QpVwxwJkGfNe(^R_OY7##ik30LZu%_R~Wn_iDz)9YkBRarAmWDp`8LHYcV6edQ* zI`Kqgns8WeKaFDp^^)j9+>Qj}awu{5)7kbAV z>kdWMn@XY?@L0{HNzU58w(0(GPUO?ZL(@-o7+6392}nO%nM*( znBBNZL8O(KS&ic2CWDHlf`6mjJQXFp_SJ%L5>q!!L-6f@qMS~P5E?qqQO@^ZvTY;df1hxgVWIa`&b zTee@)An^Tiyv;&&_%viDWt^Qws=ibQEQ7*IW==X*(z7a=uX8qH#`s*x6sG$8=~C7u4^qnXs% zV?5*WPVHbUOf+V0u2&ta@}tHa!|T`F5PZ2H%K?P=`K~d1EYmLEq%S5n#xSrsUA+4O zAZkbNrxx^x8XS~_ASp0u7$vExi2J*Iq;GQFBxV~ksKbVKKLtL?zT679cuItUUei%x zZy&>y`^CXiDmuBUIt2_(IQ_ax>Lf&TFDhyCh!q1Lz})SiqbR6v!a@k^7*B&{v*4Ua zzp=N=t`A7CZ*NRmhw2Km_3_C%KiA>PtuVC;WP*Eb%R}8m&7rs$8H=Jy0q6Q|Qo4om z$ERlpgYnSWMFXdC!}~;@itB-Kh|z@)bfuFqy{j-t-=1C~R`k@c{yyVA;(fgQ*D^(X zgcGidx9>`gQJ#+$b z7)dJ6VR*Z+v9S@i>H{kQM-H&06ciO|b;as)7=Lh*Q&Koogo&Yi2|rB?!Ga4EkVB>x z6bEeR(|O4$%!}5YB@pmxDgAoorOHU*@LH}U)W%xXFwmxInR_wEq~K(9P;Yf^CEE3v z5v;rnU6yG*O-#wi;EvE%b~aZ7rrVAdZPS`})_xrKuif>JbKZE7&2&)c($GjD-&x_0 z>#z6E>*jqqJR0;<6q#|T!?Ha6u5axQxHj=StLuvKqC^;?swe;8z8?Q#eHY6-((CJxU%dAb#_ z9<+9&FC|%*IlGk^Yh;mDH>gaR$D@sNvWIiBU-hD9#UVNQb}{5o)CWvJm@#<^mT>xOQw${Fcn6Mg&_kFZ2U zw5Ok<{KI?V{u(fa4$aD5E3jUf;do;Q4k=BRJ5BnIX4S?LPLhT~;-TI>3|OnOscn~C zMLE|IS}gmPsYfdup+E?m4+w|1#LFD_1{FJ#ga{T!@;6m5S9to}FApDobUh7I=gX0e zB~+Q3nprb)I;e}Bv92g78BkYuet!?Eryun6j54Emy<}1J^E2;^y9X7Od)6c%!IJ_} z&Su&?QXq-LYY;44G12OoKCvYM1?_6o{aM|oGp!+nsJxt?acML-SQZr22Ij`j#+wQX zon3b@YB?bRmW)iT&C|c*Lp+vZ1z62|)zo-P)5sSQjDTsaa;jX+tAQes#MoqQj6D<(P=hhtUjBvUaQl&ot4$jXnL2`S1huGWS z@9-D}!o}V@HkRAx)Gpz|$pO*WDANauNGh2`PeD1{-%nmrO5M`BszrL8L#Bd;!|8e` z)2P+C{CaGrZG2F$z1>M+6ARJ;V!a3})Z0oLg)Xbwi|?nQ`KimAIab5MvJ2flJ7;Sj z)af&C;S4wf!=;}%N^+ro&r?re-{a#fGn)X3ZCyhq0qQ64-8-&=Zwf$QAmQT9GW)!W zBL;^@znS+<{?8KM8J}$crjU_B%ygofU zCVSh?xlJS!6n}xvFxQ?yex*$VM%kc`10fN_hr4(xG?|x5-5&}LahPanp9~XWBo83B z-(yYedKZj(_d7=~ZJz5ZLsfWri=TB+O*$tbHhD0(yxPjg2Zo@DU+mZdUUd(bQQ123 z<;)Lf5|NE)F5t5=A*kp zRWCOB(wkvPXmxFg!*-00Z|Wn#>s4(en@RgZWwJ4uXjVxl+f;kGT8cc+9%NKc#Rr_= zQFF=H^XhJWZ|_%uSp+J}0~W8+5L2f3pRE!%qCzpgCrv$?viSQb7&*{Q!; zZ{@t;yBmGzPgsbme7F9oVr4nD5pl{i_9{}&mNjikr>HDPw@RY1rph{BFkG&FE23;# zrwEfLK^k*8nApcHyD0Opx=x_QndH`1#2`ohVlUwX~ zx_+N+wjv^vqYiQA5QBwTfs%UQxI&h)7!8J!u_Pbn)B!zq=1_Q00)YW*qp6}^te`~c zYkEk^nM=6J>LQRFi6rVuDaCnH7!pH!te;zfu3VpRN?te@Z*w%2v3m`+jxD}hoF39+ zDvO1PAnoG&TK4#==Od{Xd>iMn*LWjudUSyzqh4nJ7#3FZ?6jMU>(DnZw5%+s?XBSGhyd6Y770SAtF8Z$+mMq} zpa2uiIg$CXw=J~D`nJsC9&NHcnT0`|S<^c|HvT?ClFnLyx^?uerjGm99?Ta+qt1<8 z0?$GdMvs`m1DpNimzwvVUy`FiIXUDNX6FXm`I;C;dzgC1dSv0OnCHHo8d@pD`45PX z4L|P=MiVdr59NxIMqX3XGN%awJvFtN?6I_znNlOh?taf}YO2G;!e(hI&|@qTVZrVY ztOC0So(cDG^QnWs?U(EJq0cIHotAU!AMe7_m}ZV=^dMjQ6;bN>-&h?`}~t=8SOHTwS@wyE~yXaYtme6xe{X$VY!-GC!w4LFZW|K(o_`e=3mFN zjhjSqN+KYklcR)?g_wounT(9_4Zhq7O%AR!UZ7UrH>8u>^a zL;OpB;o<@5I8 z=)D4G6}W5qN!miEm22iTmcflhMrOmu|LKo%LZY8v5vz12xfuKrPTcU2K#wK3?{$A* znaGT@u@NOpN^C&DBz4vh`uw~cxQ``33b9l(TYo3E2ZTzoR7k|0D;F-hi<4N2uA8X+ zZ~`xX%Kpf?bAj*F2_+-!Qja-NxobE~Fu^+z4#DvuY>+NU>q#M+Vx*Sa*@ zKX$`xWChrKVHK~xk~+uMUwO_R2n-W zg#m4#H^bE!5blVPO(?Udu<#%XFP#w2^}NG&ktwlIhoyzZ>63)1WN^NDy&BB0!Tb1# z7$Pmliy6I`eE`ZZOxvWB5dMIv1!$@{Cw4B)VPA*DG#w0@Q>s(%!EhGPgJF{$AMU z%b2(b(Zx}$w7C+}obytmy(Tj{<&GFqyIlaoCd z@Win|<~9d6lDGxfg^B}5xGmVzHV5eOIpmBChq>^Htz09+xnz+OvYb&qJ-6M9rY5s8 zr_W_n_@D-LbSH8iiDTagK^IlaWG02^!jJqn5QN>nf7dv*$TgMOrWL*q@Gtz@9WLG9 z$IWPVI-9ixb`zCBuH305CSD^ZZar9XcPA*Vr&ksExuqGRxlyC6xcW;#V|`O{GdE90 zqVm$LAUekH`RQdCh)MUvd+=`dWJAM5j!5=aDw0o(VV9SGPNH>2t6I5c5-s=Dyr=os zy71ktNuy3@NJJvET8yZWNCky>QF+-X`{Gl~H%2T#PSdf$u^(Be#HW^l?1tYO0_mNF zGxf_Q7KZfxfdCV%gJYh9?VuPjl16#qAI@;8sHVjGy7CAXXS=&7j>aX?8mi&z;$nw5 zvZbZXARA}r_9q=5O+G(Jb4l)E&Q(Kf)R*VG_OK`}*TYF54;%{)wy9~Liy5&W83E4Z zDyOojjbN0sAZm>4B&mJJn!}UH-T?=nEDq_5#oIy!2jBck%-E0(cIy9|Fk`9}5BJZQ zL2{^o^WX#~EpzdlEzRJRyq3dUj9UUCCw~mZ34~;C7Ol( z2vPlBjih|YEG3!(4v0?4dt-y(7bv26ga>GeuyBCmwm*l2LJBV8(#ZzH&Xvtl6Y3gr z6Y(+RJWo7vFe-lTbg5=Y2C=ud7s>Q*UX~vl?KQE8}IX9Qo z?&a{XvGKdgYP*NKG|7+HqwJg_Xe&^t*eWAJNV|Y!-JU>4oQ-&3#fO-z(sYKLF#$p_ zrX(k)NW?cT4s95^#%L^io5s7lT&oQm1?d}TcCM?ds{xE~wd;-1u#dvjAE!>cN`m81 z74SXZX`fFapFIo?#?z^kO8@)^mm**`i5`jyE>Ifl`H(cj< zqGT3n!%9dD&1$u}7|Sp@z5xJ)%Fi;BEWYqVq&EwbX|leIOk+LBM5ck=4EBr+ETh)s z+(ks`*I0zj>WQr)?l*SsXgY<966TtmO&@$84&NA1rDUX({JlS_GetONX8Yhe#I{`l zI%Q#=DqXIfPnsOI&jB@NbKh=iP4A0*PadA2LBB&26_(K4jXE1K?3*!LREjb4FjWE3 z+qpheh_DWeH&RtUBs)7Z(RLC__YLm(XNZ29Ukj#oT1g?DsiH$Bi|_5Hj}eZJquZ+R zf=G|dSl7Dp`U|=c!8H7qx!+B=B|IG_k4I+X#~Tl(9FhL78?i@29eHKPukJ60*0Yao zYj&0N82X<#`J{ z*$qP*xjlP7v8>RwoJLGAO3}R;9(+{O!r9tAci5sfjA>J6g{y@SLJ1J|F7s76w8kp? zhNbu(My#Uq$9g6bv6xWtrVb0`k2pfJ$SyQzAl$NGVT`N^`7s~^s zrR|*%pbRjNO6TL_6)OXq`=c=>w=_FDqU@0e53h5!I{4Gf z#Te#CIygxeeRH&pM-|(HE$Pf%_^fy$6q~2(>!Y)=6#hs@K10&}5nRkrBejx~@izp* zei(Ah=fH1NtehSBfhgYY-F@R$g)J|QfBvvfP4y~kH^2}@?8n8c7LLduhZ{vsbzqs9 zS}LkDqtvXpvc;a8sjE3@w>AQcr1pJ6^nLg^C>zfre9K|3Zp5rsSXD@pFccV zA_$weX{E@LCO9I3T;RdiN&LctQ)O`P8l6gsl#J|bvC6NU^T!uGLj3uA9!zU7v0(sV z6%!jv#JzSPmWP7DX0_UAv-QKQ(!3wc(7(G}vn9a}Y;GbIA?_;!12Rl1fKid=i$ha# zq(WiBC`=Rz#qinF;bjSDj)N6z05;idep*`6ATPm24FREOp;XoW_E2`1A_|Avmlu;x zYgOb46=1~2vF3BD49Y+UDe25j)b_+u)7O?b=9IaRnFhj`=f~TF<_d2wop$@{`8hJb zm0zE|u$*)4NJdgKsqL$dWUdzu=|zQ~$b_txZzleY&djK%Y1r+s_A5IEaasJF`b;{0 zM0E~|C;fn-XW?gz4Q@Sb(U`EhYP$wQ`8F2-vNe!#jQC6mimHT7@v0Cy-b|U zFQnBivJyorRkpAnrv%{A69#d~e9>!Dwy>^v1byzXq(KAY4F{KYYS?ma7*?4RV%DsO z-IjPd>d#v1h~es+`xPwpWZLWkw;<$SEfo#wW<}Xs=enwJ%~Q4PgpmSeaul%3mNokl zGw~Bhs@fb=h)$)p_U_C~8RLEdg z(8Xuuf|rF!v9_X%;9&EVmxSOZb)>$dc^5BEitu$17I820r42Ned9PpRySsEe?{%BS ziRo*ovQ@9@r?`QHKY2l&RY94nSo^j1`!TOnMp4Xv;2@f{&(wo@ZRVMO9SUDulK z`1#Q^Pm|wv{ryC0$bL0b6f#6T5{~Wm7*OU0&To|S*Nu&}X>DlIQ) z3jXBp10nYp?Ss!&kFr!MD+8(EqHCqYF5)Mmc`5i1H*%}z8U2EBs8Hybrcl?{7Wd~L zQSPDca*c{#(FDD*nUWFmz#&o!@-Nc8y+Ig1OYg9-7zB$JDo`@^f^1>@Y5~xcIUZJS>kPVjcRfO5y$n#~or>}h@7%oYm$V|X941+4B_9e@6O#Osus!BUSSBJ`r1xf134m|iV^Vf}iL z`QC7nTZMSj&FH_gFh`JKW?|ltf=X=lE+X@;{dV(yto_jNXY9sc{XT)N73SDMRdM-) ztU10N<0q-RYucxg<>Q>0aL(#M*=VAMX>vbr{hK?z2J`(@+K;{oq}%o6QI1kLra_k=z$}2UMkg7GF-+PD2n6B;QeA<7zU^Ghe28gTio6Hs^B} z%Eu;DqV28`r}d7AYpEI08}wuA7Fy{bsWY@+)2 zI3#llb~o=O0G+8miu0RLV#h#LG_}fu|L5m|of-(=pUTdN>Y`4TigfzN!_8qXaG$>? z<;urPnH$b!Xu_v9(80my{_+|NU3dI+HL2K7TC~01d`Rn z=5c%2w5?-;5tpj^j;-YQN`mpskH^ccNCdp>56|I2nG*?3S;#PbSJw-`A8%IK1>9d& zb$gVgQjLr;KA@V;2hPJ@8A$xFh3*lEG;CKmu<+Vdsm_EbV4WN_zu-`9U3qeNy>Ap1 zS)VW8ZD@O)nPRN06Q$Wxq^y?N>g46z7|jZ2+U-yTx6zKkB9sX|D4B;&Vx%`cMmoEX@ZoWI!U*f~|LG*&X$y)KeZ zCquErvy1#BjkS&-73QdiI$Z%^cZ(bKSjpgh{~v=*nVk`4VnGlSbXu)0J%R9o2q4^$o9WK$L;`qGM~qCmRE)#JzcW68kVjKJ$7*}M-5pNl z$oK<8{VV5b;-tyec%X#txiSnHakrq@Pk}GcJ^;SD_$)6!-xENR3MN(M78D5BZsx-u zLxoX@NydTyCO>Ml^ew&+`nuL+PZ14W1tl4*<$)CV<&vnjN-~vo?G_^1OuVY9s#3n$ zJ&{&ZY)(j67@~L5-f!m+z`Y6Txedc&(jrBF{^xr@`77GlUZQrs!^u*OvGrPW{7=!^ z4|u!FZmbbT;9inXYKXn+LqetE`Cac>v(=xt(UC~bZgI<|A(%(4y*E8!iMQ? zltw}YmF@-s36bsw>F#c%q(PAG?vU=1?(QyW>4taVFU~pN_r6@uANykO{p@G0HEU+> znR{kUInWtv047?4jg*AJcjKb<_mmb9*h-m}eDZl>R~hQdLZ+dQm3Gtmu;J#Yy)Z<3 z`z8lk7gN;B8qny2dPr1-A5*`lypbui>v}Iz5ZcCdFXmaAb2Tv=b#%Apo86rfq+jR? zu!x2iFD&zl#;f4I?rT$}qu!e74rmT!fNqt$>{FgDHIErs*a~<0|pI_z;Kocct5^)U8FFoWOu{RGf9^7BgjJoK~d$%_( z`E?Z$yb;x}t>`b*rIgX&NGI)B;8tN})&7_=`z<%44aHziMmB|X$-~q z1ybm%B0sDq46eEEp%jl`dsnw8cm8<;Cw8})qSkcZN}{*6@LC**o$$dYiK?#q3byll ziNsjD`zLE(t=(8Tl(k^??e;(Dx^i79x>7-ZC=|!`s0m1fcf&d7gw<98L2rpO)HIlL zh7?{RLPcxcdks&^U{cYenICnBP}W5g_65PicJW$8O#@nb!!6;Rs+?6cG*+@EiiN?O zC+%~p!OIc>2oB{{RU>&Z+#4{CRZpvRt@!xyV}rwiYL&@zjUWn}w95H{f_GhLaVVh?R_!O7 z{ptG{&<28W%E$n<*zZkYepaq>zjaXl^c)o`FfechQf$`;2IVO88o-FwWb%n4K$vfJ z%9wzV`F*}OEjMSblpYO1z{Fxo?Swvu{@xM-C?;~M-CM6E?TJE=I zr3IFbv%Mmf^(ZrcJOE_^YFcI$ySwn+gckKIN1>)ug(bUl^-`Cs`CXq0gF8KkeVBir zy5(y3P5pQ&v}+Mw0N-3<<-tYrE$|@)w=Vt42RjF?!A>mkY@P4z^A_Vi)Ul8yo2D{; zc(w9xr9<~8{&+-aU6fkxk4}O$ntaw8sPU~~XuT2#!!9$pa?4T3vV7G`r)2lr zwVrA~=g{frs@YX$+h&xT+y!b3-PX+8nK9m6p_4q*V6@x5At^x84bLgNF!PR1fp1B2 zWvzO@C@xi#{VJg0GBZt3%aqG;pUPZefU~08uR69j*MoN>BeukuN-QWqFq(<`K}mU_>qPIfitoI_>tx7Ka|b9F)_DvXkb>-P+k z8WzsY>?cQ!!P!XHK&REK(zE;55~1P3Ki_X@(YWauu0?54D>rJ38fo3E6jaW=%Wjw2 zjd)pFVq{#mLs;Yaf+s>vjcJzd_q0gr;&CfB7m3SS$1HO06+G6x{$spHS}i6uzQa}i z_S;W5Xo#8h1RaMD-#yACi(MS9@Y?4{Ubt|}ZaruW32Bs$A78-s+)euASH0T|l37RR zy;$(>PMu{m9F=cL<8hAVYjKivja{l%`#m)Zo!kFu8wUOUzIWS$+=TUWx;XX2%Gu~b z!mj3xtmCHq?0F;SwJ3V220Gt4ID*)Ri0F2yrd4Y9YU}5YNQ%pBo-EeUEo6Ur6m{SgDmBP|I0|Mw#C09kn*~3yv;jj!>31X=+&-nG%u^QP&n*OGq#l zClhNN2mLcOh0Qs#i!bT%vKqoEOa>=D?>ZF?MWdm~$ss;X@n!=0!q5fz8U z5CQ$Hy3oN%jz2Q)?Nnvy&=4dtS%*N~T@0_%u2>Bm`$zFF?iH%$%mnEUX=Q-YlQC~1 z06RIkk_}jAbRylR3JM7+4f9aWTQBORXDk9%i;WnoqDCLQo4)$l_F2_{T%aEvooCPaHEUWZWOj~fQo6EX*^}5rOPBuV&5bHMpEO0(>>SSY zWSc5u!LXe|m8B2J#~_8msgee{UE)YC)T}%{5Cdh4cPMFPzRN zl>!?)^ER7YFR_jXV5r4KMV)RBY8u?tA(h@oy5fqp-0V^nG`wT>0%{ZcGjf_SKlEO| zAZGe^$t3nj^}_)Wu*pN}>+jz)-aq91VY@9^aF0zwWM{hC_npes@)0D*dx}qLRxlY; zNNciJl?6B7d(4I|Y=c~i<6^lWs)_xP`C+DQZjBbZE(3S1SmAvObb}JH_@c|IxUl|C z`B;Wy7>VTF>fW-&RPVW6=ed&Sa>c{MXcH)E{1hxpYY37tZk?qKWd5?8h2Q(SJ#Q|2 zqIQO`>jlc8QuBZvS19kD{g?6CKu> z?7Ul{CEFv#nKiRuUpe1cOZrWQ?Z;5r>z^f-%Y5+<8it>c2*rKyusJ|I8O_~8@TDY? zH7vcyM36h5Aj2a#UNimM7v3^*se8>UZl(ds4Z%IO-o;G|%+6 z>arUgzZmY4>6dN?Ne!hgIjk0S5^g^cN_lTH{Kl8~?9UqZ#rr7VB_CG#xN1GpoL3;{ z4#%6~ApN)sC`FIE5nP`69d&95BDV35J3nMa)yF2@hZ6ms108b=l6ci+e|Kya-6)RN zLbc{@4||#890>-R2Y*(xtpg-jyN;bq*OJYcD&|AFf!ltMsE>dFmdJ(AAJHuMwJOqK zNG{18rxv!0>wfg-oc2?>iqwr1ImX#$WYQPuIglTnrN&uaFk~*RuP;g`YwdhZ#`q1R zgLG-ScV|^56L8@Z4N6A$NQikj+sC7HhcH-^o?$_$X}qI5(r=x&z$YQ%?pscc5G5;& z^zd+_tx-((GL7i%xpDEtjh&5*^j(5ObQ=)nbi~`yF>P?0tGpr;{6%hBBW;0l`Wwai z)GIZvyQccbP+`9JqBj*qfIn7A88*U}ut@N=n~osV8yg8*rZ|Roq+TQ2jl{(169Nes z%Bosg%4&NCmMu;bZ|LCRV?t3sTZM$9!;tb<)n&eVjU|Z2L{3h<(G@eLm|4C!5&t9e zN6+)*^a~a~ims^YQrHgvDnPuUd1um8aa__SGc1+BOv6od0;BZ1j%cR8=&KQ8xaU%l z+?JA3?DX_42iI^=$SXG?yfUW^(Y)wH)^w1Gu_A=#-JY3IFDyCKFz`2k@cTYHPZ>sp zDESh3@0TchwWy}r=)}sw1~V18fPl){udAQ6)+HAkq~zCIs{Yl?fJ)T9D&3DLBU7Dh zT1N#6TWvEk(wtk%p@YjNL3UXh9o;DD_shfDG;>e~*e1ilLmfg7QD7 z0Fp~hYn!Rf*W!c5IJ|Z;ZrjLhbV4}O^oz+F#t3%iI@Zk5PwzH=%tj2;By)7bz=fe9 zkj^ogaV<>aE+Cg2HubZ#!%+X66A_V&!y{TfSb4Q^@>`A)X6NP9Z#(CM<*%>Gd#9BoqWIfBG8%ys}lN1xna7=*tRkw&3A0MyxOL3;s7@Oty5rAGw z#i~NSmgsMYv$+?eOW-IeD7NB7@+3t?pIkM}SsIWm%KUjgPvxYpP9)P05Zoe~`@*H_ z3sy6{(RSCqpf4$g(=iYug&l)~G&D5Dxm-dcKloyFfNhl>R*BW3=F6OFCF(8m@ zEEZkH8-`1$HR{jqu1_&)Cy7`smr!1l?>9Of>rA8WAg+A9-N{W=S6Bb4uy_J|Iq4Io zO2`5}hWD2rwf3`+V5wDpz!a>ra-Uvrr^>mzO_ypd7ytZ3x9*3G`%CcoXnKM1#s2Kb zgDb-pfV$p4mYF*m!UW8vs~Go&6t-HS`F2nb&Ih46eMTk9u`6J?#|33HqJ~BU9f$e7 z`^zIco3($9!NwpOm3VZmm(S15ZA$2wyLd`xkjNi3F$>pwgnjzx!)xb$yrMeBg<1$* zrTRk>R2x`~9-qB6w^678nl9@;{{%Lpjjat;&I&cV9H*!b! zK2M(CxX>n|Uc>k5eR#$F@{}V95Ccmklkybad==T+;INHWJ;3b_uc@rYx`z0m=PW1~ zQc7nAHGeW=Mh{n1Z*|W}rVnYw@2Rf{6?eILydL_F1rxC-fk{ND{}cp6b=}?D@cR5u zJ3Cu6nitX--8Z3w!$a}0f9>|=;J>vrzCPLbNdFv1?~RgQR%&P9|3_46%~jh1CBaUiNC0*B_#%RGJV_R5Sr@S z&jUxXbRxG`2z3h}NM*u2{2X@6n`Z^zCD5bA=JoyVq+)VOED+>A!9#cfbh>loFN#??jh5|!!?d@GKFz>zQV%5_{Ib3n}bB8#7`mbc< zgrR!R%7F3;=yaT*%@d1Z$(3>;fHxRl!A_h6-Zj2dD#5BC?Kpfv%tHYBK*-cXK5{w# zsISAvAsZ~LFzk32+=R`|X8f(C!glL?&y`j~)*%JEW=}DKX$D0C)+AtVI=xUST(fD+ zVv%B{47V!`$qq2uy)AmDDWw$cmDhAkZ%4jj`VJr(lct_@bu9!1S@ZLEpPoo=ZPz$l z4nh)<28)FLV3VpBH-oj0mD5a#`3`%H%>iB3;8$M0!kn>0hF`Rp94}*hlh>a&Re5e# za^Ip-VP|eGEt_!>X>PdgyS0mn!f3ZO4H&lpoa#y zIJGiBsqhn06&3ptJ#gCQv>CyWOpW_5Bw}JhzPP=Z$iGV<5M}b5p=XCnzluhcPPe-I z^18+@!%gRG!@UmQMySFI-qC2v3UTCDoW1v&wfTw%bP02@s&4os2VN^Q(hOWo8&C0r zLB$Kf=UhQ%JlSCnk`|IWh^e|uKbEa3*IS{VEu^qep@z6f;v&xqH18D$UK!A8K)VAFg!CF|e_jOeWrti@zT}kaPl} zxL)bh*=BbxePt`F-=J$k;BWH^*Gr2&SGLY}Z7W{=fpIB5;%Co3_%^^E>c7nm#ban+ zTuer|On%}A<+N9WPNS6MJ7-NXeAgS;psJ3^VBi;zElzNi=c5NXO6V(U>JYKim>A(}z1bi7YzI`OlP2LLe3HHasDyBn z)`Tg>#>VNpc3T7Si`CdJ_^GakbrzRU2dO5aQatC+o)zQj9yZ=Dzp%phS9@dQjsF$) zcMl|*_pPMCTLrfg)P;HewAk)Me(%m74@bHA;;v0Xzq@`on^mJOWcrMMjYF4YLoLaE z*#yJnBP3DWg$_UeZONHtDZP08!O7j3;<|qC#kSD06>iE(TI0UBoP;M8)=@y$>mIj) zs$KY@#{xpDNgU-J{3b5G{ytFFmB*9A!sBJBAj6YZhC3Q{A1r(}{R4q>!?X@9OF(GqUn973l z1}#u^=gWxL-AE$cql;~QlQUC$G`p~oW}5~%TxuY~<27d!Q&Zqh8b^y1wTcVs9_y&`?yI8cAcp zLoqi8#6G}uEHyWdtf>Sny!(XYWRG(bxxLUWr0ea;31uUCpc?JX&H428HWcM2-hQ{I zq1pZ<=27QVo>u{bFg*xYm62DHlOx3ch==STGJGngpRJw_VQQL~h)6i}45xte2ALp4 zxLvf&m+_>h%2dL{rsRwP64E63(9PPKj>kQHW!lK1QC`(0yMVjqM^TpK(n5i^o3^82 za8TOH3JLv77OvaN1@*GBtmfv*lCT77oFs>Wv^1IG5+gI1D31m=j$E*L$|K)E$q>Yc5+i%Wpfiy5D08XNxg+MTANP_ z3)4#i-4$3^?mey<@80Mlm^?=+>n8tZ^lEZ&P#X(>5t?>o%8sCV=K%%sm;pezMr&NT5=`rb=Xj@wXYkTMC zzxRyAw1I51#*Di{Ia=T0ogB+=vEhiZ647mxoz_ zUBXyby{eFHp`ujM$jUELg6jNdTNLo+WzWr!IYw&CM~#98a&g($NC!dL6gz91_IO=h ziG`;mTBViM5GwMGaCEMgccWPGxQ%#UElYH3YZ;~O8WltBOdN{tH~ooC#DZ^%GRYB0 zo%}-y$Ppzl@8lPJk&y}ef~Q-jN6n<4%N>fu50Y(_U_L{iei zID4Td#KxcQGH;{9QB?Uw{i{QiOdEkviO2 z3jis1yonC_U=heFeF#E>ihd-zO6e=!&)I9CM&8wYq zBy@=v8~umyt@n7g{#!FCyI43E; zDPlG@NTzCkb?7i#R-L^m<{0#rIMf+NJHvT@urW?UagN0n;w0Ck`|KnCHuK_PvR4`8 zgF|t1O7*+KQogZO<(XKaaYhvZHPg?C{Qh+}q^MU!tZb7u3JNu>($Or;N$=jwxb9#% z;ayl1R2>FEZ%j{Mz`ehrs7jzsyMQ5U9&0Hd**%w@mX^KItPh20t$wLgddM)%%WT8G zOXGkP-$DE98u|oB$ix2m1TW9A-#09FlvQPm{SklHnJIbGoY85nYQKAdmym=P`i8jn z#=Sk-WY2?MF1Y9Tf8fDpyWc67GxY6*>0Rh-^dL!t;yFEw%U;~?3w%2Ss&g-}MEi&?W>=PYGn_&f)jidA3l^v~Vk&sF3<1=c&+hNk)7>vNj z4)yhs3-XZ0_K$na>R8>_Fz-5n?+}9IR59U#&%AVyEEoI14L_SH`v^zxUOl`ErIGf&-d5 zIm^moWt+jm!&@#lH_?qxUBH)=lz>Tj87bOBb1M!QMj$SgAJz$yeE?++YABgQj{Qs_ z8@IP|m7BZ}P*t4+U7-vI6IjgWnBRcd8smhGiHV7@u<&xX?TZioXvAXv^*-0_r{*If zZB@CE-hpjN-b*Y;YOrWH?3Ar4lx!DUc&6|6w$3w88#NaXQ z*iX)_ccwc*i+d*s$WkvG!O(E+mnrl5wPcm}1eRsKd$;!#&{(q3De6tmVAplE=g z*Fp)|F0w{t7dGXWJDTN7QQ%F$29k%d>8j zqG(i}^P<;iyIk9$Y)doM=7jouNw3$|*VD;fgDN1wFW3lIr{~jJEe%ltg10SB$K*09 z?w>n@p8K%4ay-%9pROMFuQZ8-Gk`%8d)+zLzi>tVBB<&T4b**bx}6sYmr}-pNsI9C zr=6k=O+3zx#HN4?aQ&40f%`?6ZwRRmEVkb~$YMWbhY-5EyFEd`Rs;U%0MXFUu%N}j z!-E&|7i@j)CtP><5R}ubYTp>d7{N9WS?R1qOO~hmSij{$Xg2%9Z|ndpJ=zQIS`Zw5 za|H5Q4a6DOL)P~8uLYqICg~c}(zGG`XR`Ycn!opNeyFAMa{jPFdm)~^JDp)jQx)9o zCTT4P8d1o}$ssO(sR7}S$Gy@Pz|O-Ykk!#4XMRTI`rq)F0Ty5V49F}*d@c1v)1$T{w>cys&AeHi4LU;`(7_;e;iMH z8eATG9lURir}rfAJFxlEM5~8Pd?sh#tjA@FgfJ+cO3OeyxLs2aj#}tmjikY2vmnCE zD=4VXpZoAp0&pW9|BTGc zomjVm@po5QbaRh^*pxlejzpl39YP2RUo-A?OLcV&$|63_0SVXQA64_TVkq2pg}fUTknF6T^38O)vZII$_j(>RF_7wV!A z77&}B;kXH;I$fcq`(rleYt~vW^D^3XhY)kc)Sn#8RRtrQk(|u|9C)A`YXn9F5ilS@ zHwlkMMEb{g?R4Nmf8d7HxLs)R^gNoQ)cc;2vV`j%y@Xp$<@ia@Zya+n_$GkFqn66~ z-;t8C`C*s_%yCLs3xiQSEiTNz#%1(>jmuYHTo$P4MQbIbq;i>aL8cbdd!Ce?J#M!? zAt7N-E>@&Y9l+sK?9ZZ>=}f2)d=FPIF-1j1wav8DkW8TFK(92ge=%1zl|f$@{M|6k zpPe*n)e-5CI!J*Ek>l}avs`kMJGcN!?Y%qhKN7ydsy$zpR0}0gl)S!+ zyS;(`d2gc!Se&Q#U3@W2MXuoJUhqEnAtDBrTbD0+A6}pl;RK6&llC-0`}nGvywQ*| zY~qTNNp)I71d93mu;Hk0)5gZT>*jnfKP8#2`HCD9kG}PlSVKmag8`!y@AWHu#!q(h zHI|gP^$?q4;^N{G60c*q(xhB&00-w=`cRQ(Q@!KIaIbGd-k)M=fk34>w!l?13=)y& zL)IVRJb`k2M%)7216FYSH-P)Fu&|C9r>|eXmeCM6JvjmNK!=SUOr23Efmfja+{>y4 zTurC+a1u51xk|*M*SMTd!Q3OjLGHmefhTxB%?-?kxX{Car6-r?12<;%3YeeT{1q`4 z2+>)&UQ#fS+GgWhI7w-CJoQM@L7U4z&zNR|}-tu>Q>y z4qJa^-&UX|D^+PGo~^poIXlfu7_^FhEuTTo@(mi#L1F9X59`CmKZ@+Y* zbfTl8zP><4_3vKiM~TFOvO@5&q?vo%8ca;TpProLAFv(fah!kdLip=UxXD{Zwp_Ut z4jwO5v3QP^F$n*69V=1wPUh>XoWY(~spZO3kN3=zJ#P{@opfipS?6<_7B`s5w|vGW zLMo%J8*z?Cri5Kg+?@>wJ;tm{%g2~p96e&bSLLszUBpf8tFUfl`>W(KQBjrkcXjFE z&vX_kTAJGs+_6nlR3vrH%)wOPsU~iHqQummo5be!uW~MYZ;mzD+cU?^6`Eg#s4$yh ztUqCxxxz$lC6@^(0q|(cB6=kHdqkhN@kkvaj(r7K1N6;l=NI9IDnEQ;s;puv;BC`2 zqaV0C`&oGk$IXd(o_|!EtB;T~$DC>wub8NfwaQ!;B>vpY zr;D*xp~ek#|5`YGl~z{UI)Zlu!ABXN{J!UNyqG9OJ)zfU?l9CDxWR#mvA7KuvQ*ey zv|66=-8lR3uFbe5P5~YxJK0ADaJMBF<$v2Gil!5<9Pa16BN_( ziH@gbyId=nIalOw-{#K`*|O;a>pt+up-0L%cUBEzkJYMlq_639`uXtbJ> z5H4X|tQnb@0wG{|w$;d4Ssj4yz0qDg(!k@c2X?qd!i$v%G_@+fTR5l zd65h!IGwe|Y*rv{?$c*B^SOzGf|5kQPXfs(*~}{kWV7?1*ivVj(`P(@gL#}ILcQ+@ z;+@ka8ZTpAVdqwXac~bX^p1{>285>b`>&c+CX*l?2O9s)G&(aqi|_f}>J7aTm52j> zvR~am11Y};8icuxe~uu-2JC9lkNYlwN>FC%lCm;Snd$~=JHM$PhJn2+mCAcR?D@bH z*$Xs2rDT$5(GTsNvFt^M$AkK1wk0R%IZrKalmimk_F~k!g~vA&a0*lvXEO27=t=Nw z4(Ee8!z^(=$#JM`Fc^8J;AD6P%wCuki}z2>#afG8UX7^Vhji<95a%`q7D*hTi^W|W z`o}XDp-nirHLSSa*cL|yo(G=^jQ+~~Huf-WVeaA$GmIX>X$&#ZAfKG_v9y+RshPj^ zjP|?C@YgBD-wUvhp~7XMDw4Wp=2(`?q^-4c%vzkQbPEYPr~@_xi9$pC^*4}n9np4Jw8kcJ2Ud8@vrUTOva0(fuIR5 zrt_Z$Y)iV1XA&}+WT+$!Vj(QZ0M~%h$Xh5p11i0asN{kw30RuYkD9jsm1U?$`s!y!wrsa#B>StX zp5GRq+5Rm!v7&fY^xrH)`Tsx5V7OxEmpImdVoPYYP+N|xAx4c;s$8CdJ6Wx@<8GkX z1$8JUDG4_n+0O%E@wi)9+5=1QDTex^m>4;3{mRx>H7NU=X_mNbaJ#m-`B~DmvcHcq zd%<|+;O2J6b<`+GyTGH}0_ZWnH1J{b9Gtde=Ru_*Al+SddPl&y*~rcRdT$NzDYx5| zl}#P8w7Xi3g&();TZH|~+*FU<*Vw<|$nL*^-|lJzq-8;W6tdU`2#&MGY>;-|drie@ z*>cZX>1iUro8r~vdA%76o&Ogme=_OxI68P6e^;%c1n@tFE+TkWNuP;0T~U7}NM^RU z0fmv`C}@}8I1%d_A*IbRVer-QUeQQHPc8{57OQ^$_U#8qJl9*`5)wA(bOvdFZksAU zd_xGV4rNwxKo<&_X#g;RuhuZSl>mz_h{Arc(&n?`06?FOkRiaoOLC!Z013Kd62C=w z9^Z`UOX9QwY2yv|vqKUw@$Dpjh?J-(h}v|3#Ek2Yiy<;q(r7fZG~}f+1XuW|FcLlw z-1${sMC|H#NOZM*%sylWz=Hhn#eysU63xjNOhBPhX|>f$Y61SSu`w4Jy|-V*TMwk& zTy8--qfdPIXL3hlbg)^=<+>tDx}@`9&V6{?TYMm+p27ikJF*250{#)8xJ$Re;ABJ) z-8=H9$IgY^!6Q&BWsbPGxHhnV<3j+B18D+2;hO4#&H`?j;eNo^2Ge^6YD^`O16>^M zLUOw$lQ9Xff2~oh9RpMa!U}Mx-$O_dGSkq%FT{?fNAkl2h#hjV%b%Eg3BF!t1uvS= z(7wC5u1NRRK!O*9PcM+7OtAyRniW8TdLaFq`K&s6AgK60#SoiAoeJTEvC7++hxqfp zuQ#~KyT9*tne3{Qr-vE7{?7 z>gktyB+4*MNr*W<>sZysPJHayT&=VN3j%}mKSTWb+EliTQ#TIYXE-G%@VYm!bam z%a?RGItQPR~Fg7ILul@lne-Cow0jg8=X~=b`wbU^+nWr0M znBie@zn@AU1avbR@64|SKKubHZZrI z)&c@L;_4xeX$?)#iJjzf;0p^p(zQbWnOc}@-S+Cwv(`@DIy+7Y%6omF`0Vfdgj=al zvvKWMEvI#Mbkl)=&q&$RGHJ?EK0U^c<I9s#6AW8*8}}6R-Xc^#`QfI zE*ROKKF*JkrSylIBOZtM?C`ZcmW}h3!!!N}Na+7r>Il~t{}qNI`Fld%Mk_bayNHj~ z?mRsjmXtnE0@@V##H*=}L>_p*)#{U|*_7VY ztRf=J0L{gaI3lu_VCT;YrvX_w4rJqG} zmCwul+~mxs*!IrhUIIsh-OLo8i;M2@f_%sk#EbG~oKdO~x)-yAbzk6})D(25?iq)&xPp+7&a zBz><+UqyNK*iL9DlEGw7Q(OmAd{=EEs*$cXVJ(^k@hVd1o7_6lIxFAyNum-cVG4Y> z1ClT(D^>Sk&0(*8Y}i>WBO7sx5JU-A6yO^}eAtnYZ%wanS zUWM-yy+5K$thW zFb67%Zv5?0>uWFYZ?t}b7XfX?D-7&Nak>N(6eMVnrc_QiQ-7Rv$Z&fMZB_Fx3c&Sf zCr)@FNr+N*5I7p;*^k%b@n zp;U2RUL3c6LO?+HjvuqGSE3|6{2}g2d_;&2+;1oJnsf}KNdo+HgwMKy7peZx*l1GZ z-^l2zSviOZOX^rzICbZ>`Q#_25R2wN*H z9ama?JFuZv7=(Gq1=ev}$y$5nHcrjNhcCBkEJIv)fjg?IlDGkrC+E~YZGwN^^{tML zQ2TkTsfnRWlT3G+n#dX;AllX<(eGl^T34i-GBJwn?m01)u;HB#+}O3*<@hzmwTF5h{@t&i?@t1%(^5ZYL;7Z@e{w{6W=1Rx;0rYI^s!Ah?)+nUdL>04Dm)>MVq z5Gid04|?wTDn;{7_lSsqjRWs*H59S}V!fso79JasBK!OMJ#S$6;e5bh z8z(0xWo2cchO@l_4gbG2_7~E7l)p>|e@ap`WNyN)pH zS!sHpXb$C!o@e^kc~?e(qVOUM`=`3F>YO?1Vq*nUJZAPVFT-^jY-P2?98cl9 z2MeeY=fj9EHY}MY}IrhJZM zcvBe@N-XrII@%;kkj$*~Z(GDW^UA}CUJjE213sdkRc!?lnLxf?tcKBTzI$C428rRbC-ANz0Sc0!j?FIkg%jfP{N{#K6S z)nAQ?D6TsLfKd+qdpunN`8a?;bJ2`+k?aXGOOnW&QLUGx^HA&C5(l7CzMBbA;I_H@ z{g~`28vlUXDo;DlTu_nE8gGYy;KVvCndDUeMv9`G5F3wr6}jg*^k2@*CHH1k!mbNV zT`P*e-%NRt1opYcTSdlQ#`Qf4s~_6}q&3Q;eXsJRCY4=SZuO+4rA2?v6mZgHCgD6c z>R(khweLzIhs``B;MTZe6nU}mL#wGoo^fZeRYucde|PTI19ooPZ65QTwl?Z7svs1;aD(;k@!CaRYB;5F0LRsS)c?wzIn#9j?4 zU3ziP*@1w8CUWKr#pM0kr4lzQRpU_Mr5@5MLh&G!=rWZlq^k5Zah~IJ1sWt4u=Z(I zuJij+(Hy^f(?txPJ&ugzkhS;l@E07B<5trzXbo(auS{9Dh0)=?Ua;X{rQm4m6Du~? zjh^WKQH~Qwc`!v7BAzHB*JFq|KGYUPoJqa@W3bBDe2f&|ei0_|t8ogdxp0oe9O@uS zNuqXS{db^r9gTcVvPY}%@y;USzE@ST5J7FtnHkR2AX_DD#%xO_H^wpG72RrJ%<0WM#C*FI7 zFXq%SRX?gwJqC=8r9Xm(u4`1~6n^}}S%qH3Bl3yBjH1%Gup`0sGdd~SlxB#f@cTi9=0L>TeU^e`B4?;QQm9()b$++;(J<%~$<(w94hFr>pj3_g&)PKoO+9av)nky44B=PD8=iqM>}Tmq+?d zWJ1f@fBf1*Wa*#4JH-uCZ%9&694i=)?Ef#Fn?P7pGzTfKT+`gNP8e; zzj-R=PS-lYe9EF#WLN(;7mG0FS3+*V5mbv{!RrT+Su_)ARTL_56Ah1r%4o z*bC%6t-AET3O>;#!hO65-?F;WqyEQ*2S5rHjDDl}%ZSBk0Trsbx!%O$->?i{PgNoG z-~bqz9#Uxy7nRcK87>$0zPqx1u7AI7L-}+_&n2|4gPJ-eTlHmsdgwpH7e1BlRi}+r z{(zyUEzR6-`mUs0nTYL(-jq-t1RwsM!H5PpF!U36;rz)geJ$#e!UOdG3|+oYn5xi0 zL_}o&cK|80e_LANyFp`1OGg{@XJT23icV)_e`6zHX`!BO)14`kz2LedAfyXj=XUuw z?t;Vi;m;k7)9GRG_ECvL@ZYmVQQT*6MHMr%&fbf_ zs2z=KxO-0EDuSLLMft+z-$C}IjTcR;Tbh%*to>PQ3`dOyp})W-9JXL0+QScabsbFp zh=-i~=8W=^q|P-b`0%pow#3i>4$)WT&wAlxIk?7dHFP>EJl&izE-%4!e!lo8*4w%e zQc+JGAS`0G^PvYNOX=*QjQ=inyA{}N5w2enVzzXzmG+{MY_8G%o#gL7M*9jhNS{UZ z1DT?%dVXypl=*Y0S7s}~=hc65QI{BCQW2u+R27crH}|=wEoAEn4T-J8Kz zQ2W;4oD50lW1%L^y){hg$a>|^j{gZWY@kB|Nogkn?ch^r`jm`RdpFhK|K4lNl?2c4 zHjjm77IFA*66b=r{}PjPw5sYZSM7i2a049y+=B5J&|O>#5svdfGAjQ_2ESmj$(I)O z<_IA3S*i4Rc9Yq$KxrH?*rhW0zwfwP z0sR4;uCHo)l+63(Z)qmr3?+D2BdS3d^PEuJD107j6L@rJ9?o-_vJ(eC8Gw72kBx zdLfKy{bDYt@4LHj$g~_0r45k!%V+Lj=e3CR7((_$CZN@^e)7wowkdzMW?`?X1^2vs zU1`a0Wn26UAiMLzhV=WxO%sm)DjA~6t;1^WeG4En!p_z?nx)pq2r;4>MON=^VE8%n z8fx>Ku53kI8R|k7x|6;#z0EnW)yjB$m&<4GaOZP`MoeXp84~noOg5R6hYxT9KZ}Jh zarrF*)yDpr*f#!Lg*Gi(sSniT2sVz!1*JwsREFj3e{Ze@bhoAl74xO3i?!kW)SEs^ zj@#u2qroV0$Z+wWuO4bslK5`j8%GodIxD8UWV02X=OvsdNaz#j ztGPB1N-?)yAje3#VK^4S%J z7*s)$9E5{vWm>lCnkX3_FR7<+1_C2H5XMzT8jO#}a47tToNzuRMQ@Q&FP(8d2{Y+i8$n= zy2y)w)Z^;y_3@k5@@#g>ckUwK)V)S@kKUyQ{j+kCN3}SWrGiRbTfWeQE3x;LU;XBQ z5%mcS7B%Z$UvIcA@iJU^U2T@roGAjRq?Zw2_jD+aZK56Sk7uB*6SsBdJC-<_4tNH} z&Cl;tm@?ac-Zh*O7ZkszpI9^(5FME)i#Qg90=)v*sd4H`mc5dBiTMt%-yU0BIOxf@ zU~a8en=B2?%B*7X3TnaZp!oB|G9sB4x=vdh7x@1rgOZs)ewfs>kzHYAk>t@f6`3lC z?kDNL5G*$2HP62$E_eQ@!Ml1sAKNmeIZYVa%U>?oiALR+ zKq^|=^I^?M=~CHIY7KX7pAq8d%i9k`7Fh!a=_6mW%U_ZN6S2ReaZffh{GpYWI+3o{@j?Ai{xL0}BXcXjmp?9~$i95f}Ft=SRK8M~7SWtw(=< zepF`O9M(MCHku3;0qvF%FyT`?-gy*#5l zMg0)X4ei4pL&|T8Wl{V=r{LTQEJ?$!~6d@|kP=UNJq6N+Dsm*(_gYqa4uU zH7TMg_0+-$XsGRUaRQA2w`S;n-C!NA-E3tUKPGY0ObuohI`C3yBghZV88c}GCjPDo zlpBlXew-*<^@O+vrYfgR8S_&5a58#)d#8od@0+(sbt^9~*M1%bG{@P7 z#?7e<57*xuNg`b#NzXX5>g$|cZvv|tJnt`;?o)|*QxsGoO>b{IVt@E|X>2pH9rDSm zF25IEykstr2VJ?;rldtccc~|{g(u?Tas$#T8G}z5t$PFA=9fK9UnMiYkR%Rnp4{Gy z0=4a)RlqD#I?dVR_F5K~>X`*__qNB6!i*~6;9W2umizyIDDHH$J;g| zzd;%l&2;h(?DQ}@51r|e*>|hc16TN!ouCFp%PX&Zvu?2%svX@JtFgou_$|U}qZ%&0 zs7h$2=}=Ru^jL-)FNb#+5r(Bk8;{SUF{55kOIwzhPg$Yzc6H56kqxWrx-?QT;v zcnqi4psQr*xWzs*tHO-|=YRJfZvu~NHCo>_EfDoC<<=6(jHwK4!7VilKp& zTid67^Z9fH8hR9q(^?N454MQSkCQ$&8pmO5j3c~^a*6jgI(KbH7JeYPRW|a;Qhm)) zG|^1DFFUvSAjM^@r<{z$C2NCNt`;-?p1=O|`2p_@8*>Msg<-Z~kJhs0cxZ}t7yXgJ zYz%HlmHt^{^`@Q5=%ZP6{OXV2$`^dzp$Ghv&+xq0zpZ>jd-mO#UYU5hbY$lc3os^{ zR)qt-xU+rN~RC3tC;BFtfyMA_bVb3Mb_JS=sd-eaq&BC8uV{+((j;t*(pfl zSkc%ZnQgxY|BQ|NC~zqGR@%zrCC}};ybV$_20M+$y2^CXpfXE)ZM*Khkq19gSnA1S zW_Oxd(O3=62HujhCg+2c2qJJ%^j~PAFE8xr=)g%43^zgo~f*%2yhK!~0DyrXFAk-eb6XIC~DG_Ye0dtg36(BxPVeadkNmH;Kl7K?=0muiPIzKEgYlQG6! z>pAme{N-h6_wSdrS9ISe#+$h=-0S9P1qPzy z(=&Rs_kPpx-G*wTJ*Aw1YN4jt75!9U-lEmm~f8_}b(atStQba*DB9 zmR4-8cS2Phv+eJ`A){(pBC@jK*xmF*#FNtEpB(HdeAkNqpWVZ|5B4kP(;E@=p9E$s z;aatx5BZ*(zy8_5h@GNRoX`A)A9-Hkr*{(Pcwo@8cQxeW6Io-DM$?}@#vT$9k>=9bH zXuj}Mg;d&UMcL8(Ng2OijXy!tkgdVWYjSSe#Ua$aoISY;(UI3Z(%fvEzBQWQNA$um zUv?a8(57Z7(s86)K}g>I(K_g%@w=FLHy{{~278D*F`Y|WAzS{Wh|Uxo{jj)e)A$xj z#zL>47}j^L{%AJ!9$q>}G~UtZ&#vb1@7hG?yNY~C?=QXuy8Whc(^tIK_ z4vyQNTiZ$+3e~OH;e^zDG7B=bW~PO^CW~TZzYV`4JWy(NIy9YKq8)}{qzp^dwL}ks zrexC>@vbd9b_udjH|N23PHs(wYXZ?bBlG9b>~u1otJB@JEB=>JWQ!Aex6r<-><$Z< z2i38)uFwW2o8KVCY41XQeZ|!n|M0FYg7=G)N>1v}MHZoq!L9B>)O=sRK&}zYCTHlW z5m|S`{2ZV%u5EorKec4s4T;Z&HuRlYkq@stY<9{%?BsPd&5HLr7zRNL&-C!IxH?w4 zZ`-37%rNOyo}Jg*@DtwRSCy0hopI}i_H8@!nqO|-Fhqpo?U8(pE*@fE5H}R`Z{fC> zKB&TcFkAC6L&Y2pM2J1@W8?U7R2BVKK8~Buz`I0ZZ`b6H-i2P)q3`u<0RoRn9Z2bh z(_vv?u;~fM1LA#gQjWiD-~rqC8&+-#qU!}WAwbh!380dblM1$pFLQEpfp5bM2!?@? zHP>t$8I~(LI$DPoEhSWl^QYshnna*@N=uU#ChWC%*)tC`v_>OoVf!qMf2xacGKVTu z*%Ohy7p15q>^``LwPXiO_MsZp2_gIbSTaL`hgn>FfEVa-+b?BiF66zZTjFpOTJ@dr zCT~IfrMGilk9(CKKa70NrCGA1aYz=1f47dKeH-!I22e`@(h{wa>K$8^&%c>9M>)1E zsvPsG63pxxlxC)HYoL_kn zvg#wsI%_+*Z=O>v`U7U;R+m(VbERNM!eazh=!YTG=d-MQ4}G2CdFL2Y2U;u22Nk71 z#g$~s>|)E6Wo*$LhDQg&H%xkN@7p=YR?1Y%8r6!K6QOI|Gh#1^8j37t|NdTm#z5h~ z?Um;UQBfzbuGvuU@4Ln=gZ+S7#bI{A)JoZww>K&nzk}P9WnOJyhgp9&!L=mL(X4DM zT+R-7IQG+`%Z<3SD&Lhnj*vDojlfoKOPU1Oxrx~>8$N5AI zAIs)!u94=W#JnW4e&O)2q2iaFyV<1AeM~C7x+ley6QAU2gkVu)wem+z_lVYm8Emxa z#GzGA&SZ`X`+5??ymgD6(@=b+t~LI_o%aNHM}4U2uTf`-i z6M$P(7@c$qszNQ{enf2#iLtSsz*t{8%_YVcQBlg(QiJeQ(5EO?;XfKv-v5mLPCO|Y zino(!smf})i1{8hTVp9BoT5_;n?tx`<5x}bI{EYI=|+CKW?bv$EqRt+cdF5#-y1Oo z;yQZg-5(-DPkQ6bGU{B76KO$MEe6xCUw+RgtsribasMZ7@{4&+j9RrI_tTH;e9N>` zlFl-tN|LsTd3v_!x59hVTmAF1=Z=jyYG-z<$F7|20<9e;KTcIaJShY5mHnsmE9dd7 z%(aeV*cf4Cec2!0fz(y8Z~9Zx)4o_HL?{c7UGiX7Vk;E&=@9C9zY^Tmfip#?J&(g! z_nj-TgeX%S#EN^27%iz2O^@6c-c%4Cm(CQKdh(_x%4u-w7?0Mkew8!&hGt!X4%QSJ zLk6eXSZ5CQQ&)C~CIy{^LSZNOl98}Km!p!*-dFFQ4Pm59>mj;g(WV%?ybR~S;zO`7 zX))W(HxutYB#07__pHx1X3cY|6Y~9?87LK4CVLmj(Zn^|DP6Oj_&yMFQ(ad7dHbwh zt}3e|^vHtzyzI%5BR{89>(3g>7W{>^7mcNTLB6`QDyfQXV+KX<)a_i~hDVB}3d+XD zrT)Vw(P(YWCa#U~+x3GD|2KdA-UM^ytho7snw$qmqT-O$W@VzZ6ReN)f0^kv@;VM+ ztpZ#)+lCa4<9~tazP#d;?UFyhas{H(6%`dXZJqwi13OcBx`y!Jk^X!&2(X|qA$IEB zN%v~~&q<}Eq?BbHg7Aei3`CuY>+g7vqj)dUf)dldS+FWic(PN%<&f(PXi)N%TMG}a zooK12e5r&C-Rw7_DHexojQJ(Xv|e}MXctbh!NzH{9sN|xzPPrn-GxxE+O;it+}*br z)o@1RD=AH#Ugh!ZD`^@>zD-_6y{c6~rsAlcyk8Rqu-C^LZ8KnWIVpO`IdsvEJsFVS zU+Be|F%q8baXpnthECMQvm`obtlFy{C}Sou!)|=C8VD~}46emm7{KQG9>;cIJQeNsOaJY~RAcRxELOx4N2e_2ans)Afedp27mC}w&9;AV z=+Ti~8_h`RG;$n2qJ&qG<@6^)o@7;eLQ5=}R(4rq`k5L}wWQ+x#b}l$5NTnVvTcr? zkq}y0Nu^ZxprC0yw&S22TZmbbJ{rCxfLXV=4_SG$Rj6xC+_{;v2431sFf?J{gSE998U`;t zNp(R5VRjb3nX!*P4$3xt7@m%W!NuHd6+t=|;8=RO{y23);=!i0J1}?<$dz^~YDSZu z1XiVxNC&=Xx~N;?k8(m`VPGo@lZfQtNNBj63zhg7e{ix}PrJREhLxfvyK6lCS@+ca!>AJbZ0~!4LJ=^fMm=ySr zG^%`V%fuhYx`*)M*g3qIopgK$!z#OkNLZV6^;6Xz`x+)9$-4TsS`y)qWk~8#9W{rP zj9CVR!-##2%HM|mLLECUj&H(KOMKOjzPfsoUyuN*AezdyygXics@X1_hFz~SKLQ%d zhSkZbfF*{Yx4Kd&J{z_1JJP@oy5)41>%_HHPf=>9tJZ^XdZg)M*?_w$&V(8nJJt7A7Sv&Fg&nBQNoP*_0|Un_F8JfP|~DizQkM!Z-LUk2DGJoPmSR>2UU& zZ?`T(3}U}18ix1>10+O5vgubiY?e9KJuL#P(3gyq#5yr|;foUm3VC9}A3<-M5(iQ; zFQiL34EhF6F#n&b_h~PGOcbdRaXmsQ&%#C>%>NX6^oZu=uH}v@C(>gTE z%csz#ckR4ASTgx(e*V^6LR+Es6EDYvU}5c_^ej@uS4zTuc?A{Gw|RI|2lX@uFghr` z0ii7-CvC`qwU**?r$?cU9K5PHM~?arIM$H9}f=`iFzeJh`sUE^!-_mk4lfj(^^$p&M()n)f*Da2y$H0r9wF?G)Q{HEeJic`?h&U;kl9vMVO`^reGXk8Il zE>24hxAUpT!gOtJq{K4OM)DP0LsHfQuFe3m)3)85Mt5I9+NI~Y_}MOVt>y4$Bo$s!I@qKU#qG~2hA zU6pSfcc`@I5Fscmujz&uKCErBjfUqO692H!>|_&r&_mnPXtLOlQeRZ zHVG*9BeCMb@YyEkw!9Lt1|~e0P3fd73k{J>5&UyzKYp+Blw31AId#0t49k~scYPYn z=4xwDQRL{Fn_C#xS};^`f}SP^AWar4c1wj>5!^n;dbnM0Yx;?k)KyoWSH+h$R2u48tesQ{%H^@D~=Q?tN6 z1yDth@;&ulz24PSV{v_~D2DkUeja9H;vwK*$CNTL+Y){-Dsp2!Jb5bZMu4+P&#E2d zt(l6~oizbN+I`L`zDHAR#jUI`K0Yr_vrHJd&~|* zVyIi%7AnpglazGnxRSeAl(+pgk%`5dp}nv=zj)O!dCpaa)QEe!C3?1V6v^0GGx-bBj!(-MGV%MvbXi+|PEu-$}Z`#c*(l zb?v}Q1e}G2v_$8s15*_7x=2xL3Y@`7<()r zhc}&~3PcO(E6a5}oE-~^gDd`F_kuN(M72*)&~xR41C?usK>NY^A#c7YKDo0^nRfZI?>waNx!G|SPhgEz#Dr}rIaqwl0z=@F zQ~3|qK?_N{h0%E>S*s-RxEl{IF$VXG%cGrSkObc{#Jps_!{atvX;A`s=3M@EEA#y> z*K?RC?x!Bd%^#zkqyo=sGy^IBT1RS`1?d*h>Vo6d+`YQkNQ-|yRK9av?Rl@+-E1ih zQG}nUweQe(FE?o}D?dB=hCvo~g;8!^(*DJjfO4Cue_8P_s&SY_K2C8VVTk$yg3$i9 zyQ2Ke%B7Nlmszeuqf)kFlPV#rOQlBkpj-mU@{UJGx1pa&YjOI|?x%)Em9VM>qSxW+ zJ_4c1BFzyi>*c+W3jz&nF8~(@Q)ozO z=T3xRz|<#Rn+rI{58%f4QV5a=w3n;w=D<6k}6o(MO!i^a9&VKHgPkrr|MY za_ctI77nTs7uHTljTG+_N=%JEyG}f5DHKc}kl(|=H|S&cnkF>489FGYsx2KMR1zUN z1#4$$K<1;8=M+COtD<~LkvFT&5wKxa9bd#f*e3kqB^f|1VjO7G=Nsp_No@M1j zkX-NDFd{-!5NW)bS=nUY#r}Rh&GhEa&mrw$ZtK=^-yq^*F+6p(jnxfU?lsr*v8K7+ zf!ykHWXgrjM>!f7foHATNq&rZn}#)`u26hBIto+spN{Kh^tqf%ulP2#iWHdTTX{4z z-W?GR!jw|8wbkZr>MM@c@_g6Gm^A6s(74^E!mwElcBa>KMSfH9)51b;WR1)A&9O#M z%urh{-~bz6-dXICFW+&*-sNico0zoNctb4Ys;eE7m|IjKV|7@!xD%ReSPo6b2zMh9 zX*nl6EYXWi`Pn`{2WX3}jE~$K%q>}tQZ?%Js$m7x42Qk0@I{9Pw{2!aM0$pCFeuTZ zRz^X^Wi@3_mpbV35(@|I>*JyCD^W>$Pm8KPiI|)ubuDmC`w+?c{-CrN=gHh0@t6g*I@UzR>@;5ZqfMpUTpz4t=zF>k$i+wsf#3!Un z#`$`2ELy8&h-}&G&D*#Czyv&S0f5p7&>EjHOG^HkJAtVg(6k#%s4+r-`|KV7NumZq z2{|}iriv6}crDsNxn^;3G0@u7be}d1F${G7zF^ceG||S>dlUQ<^5A7m6l})c9vunG zwCUguhtUgzsu&W7TOkG6+R&<48ETt|lDm6udB5mM-aMXmnOE)S$E9aC$8GOD27w1n zRhol=TXY_{YM!-2V>g^Cvvk^tE=wvn&k^Qing{&b)^%G*t-4#t{^b&tcPy>HH{#OF zx)aWc3-=MbNcsiGRr56{ac&0$Ym%C$wyUThsXA00aIy$Gp{~r%!zQbI5_l*=U$W{@ z(K`KCCW(*z;HtI~ZVGV)O;#TykBQ4`^XWAVf$OpY3hrCoxEd+5 z?8krw%!-_W+B~5uEi<)22;?R44g#Di11DWq;RN*Wzd6KTa)~M4GwUM#`!2NV0s)wvo*GX^vKUqrF<-Cq7bh{V=FeBZzLOpt7+qr74{!g#l?e?$ zxXBN+FmV43$j2sT!;l}Rf1DX*NVTAU*N}IS*8#m-s=nFdpEIWS)JlD-@u=x&)3&=& z_FVM}d9s84jj8ikGjAYsy!gP9^t9mEDmIbJ#Gr>|aKhO=7h=}w%0(}r1J0fk-^x3(&MjLHguJSc!td)yL zv|9fA7!I+UX0QPa80x2j?AEebtjsxX`ubs=F4%r)sXW6VLvK|+b&BhT@n;Vt-DI5b zUC_Eq8@F+CB7X&H@`4%a-abB{%m-uux>IqLLB@)<3=0 zv4OqXggF*}6i-Fq=iXFV^{9N~5`(J$6XtxbYu~I8;J}@(YfE|Bxl6wYE)F_w0Ie+O zNq?ePcH@xo6z|{?GbaPq6!m+4Qcd#85B94a+nB}7u6FHuJTSO%mm6GEE7?Ici2RM! zV>nwwdFIWB>|J%I*UZ_6nsvf5_8V{!YzlagGLpYyyb}uY*@_qDDxjObP-(?mUr;8y zP8_LH(0rlkaZ5ApXXqj`Pjx75W}bYwiA7OeHOt!PW}MO6+MRLV&{z=5igM0T6@K3= zb7PKa_2p#apg|mnnh;<)Sf)&Fm9I3K+-sYwGi&Y%{hIvtap%w*``zRfT$hrv+q4U# zWlk^cJ_ZMIw~Y+Dvu`c9thno(QJWW>bayZr+dPS#| zb)>z2<(}@b7nQoC@?BP2L{%5~Ks`G6f3)(X2$4PBi)+$O6(@Wx{SKIic3$h!uSHg9 z-`&P(><&Vx+MW2t^g74Wok~R?4Me1s3aSo6gn~l+{RIr7ih(gz0r&tl4jJd#oxCT> zzi+PhqhDC`suCW*W#0B|5o}Xu><^9iF?nZT`^&$3w%Z+1StgY00dwYW7KL9{YpXNg#iL!`@JQ9K+4lxk`e@#vJyg_pW z=KIK>qHxHhM+UzQ$;$tK=7?S>@s++I@aBP*yeL5Xvez3$te-XfvrwU-)^bVwh=GjE zKaga$-bPR6?^iA_fSqWpeFkg}fVtW<1R}6Z4>-YbF3&sR$a_3c7}0cXXj$6b$Ln8< zj7|jF+eO$9VN`bq8}VrgM5|1X9+rkR)1!tgq_VxaBQgt2AswU-!yQLV#D}kOIn;d4 zs;W}++Gwq&C&cb$cblne7=t=mz)AkMTyzm%J`slMVYZoW#q3?#JAhYEj;H`{M9 zWrpX_Xi!rvG_JT|F=J_Y7Z5pOC3LGx*Q2S+HN4O>Yq{vbqHN+ByGSdGJR4uvVq$H` z7z|sX^d_!A0mJZ5M0t*qiTK81Za_u4%c+>{n&V6ISrv6BML#$NvY`wSFB%mr6Id(O&8IWnFkl_z(VFAd-_^^V(oB#5;+THy&r> zU~6j^P*mp%4lNF|ys;bjvlG9dT?vIFNamLc!Np19V$)O|RL5EN#ReCVITQ*g z(F{)30FMX!`TkJ*Oyxp_j&)!q$E4Fp0QB6yjOY}^Xkfch6N3uqMu9KzDC7VH42_kA zB{uCR1!c*;5{V&=EPV(D?W=)y&jNZPlzy08^#)r~_8fqn3Ot1A)d#e6K*Zp1g;H#x z_I|)Yr9{#*D;qm@$H|j-iGGYkQw637~s zla5K&=X10aO}LP>n;r9*Vh=lSOQT;2dMN0~#Mh+JSxnW{cvXMB5)8%5MFl;KR;@!s zK6PHy75?U3Oiz=J_2xdWqST6iDlEQ;1Rmw>ftm^qS#{2%$z#{04}j_GaS2^(w5_cf z(tedyD&tZ4<6N&?XQ0GL8K#@l76!u#2fVjT!Yqt>_+nO~XufSPOj~L=Y(WhS1nQzO zP`OiVK8uX4cA!5o+FnhGMRe5WPNY4UbkR7q?uLvPKi4}>^Fw(i6zrttKA9Zo_iX3Q zBsz+hentLk*Vqhom7lP78p#}HZ0y(}cL=nx8!0ZPwy@mioTmE~BDzjjQRAFRvu^zw z7Z+f)r^JN}9b#*TzI5}AF5cJ5>@aY;m1)WuJ7jY=8@)vuDuoovUrz_H=jY`$H*lzJ z^LF*+7CXK-tMRYxdwNNig-=VkU731llxR2{DGPV~_x;_%hOOp@dR^hKfeCTwH>RQS zbw4``8O;9bA8M|f3#p39>wyAAK}e`XvFg8SnsP+Poom5d>q*RRnwv5w!OpbOOz~9k z%fl1kf_X_e4V#b;N!?y$o1gAXx1!&Ar}CQJe%hKZy-zoLkrKY9Pt71 z)XwqT$p*!m;}>ImPSA$`t?SwB5|khp^|g%O z%rVGrb8~S5n|ui*GF@9yKvFnaT`N&r{$OkM3pp9ecqd&BzfN_;OyyoQ_-}#ku50`@ zCfVZX8#@-pWUk&N) zUW!iCnigK1vkxiiV+vjn?jXJy)R9pYXOjx`;`Ya8^oB^&+`_WJj$@%HGY?IF&sc-m zd;N9d2`Rb%;yZ7VLd6ZRrK5k0`YnWph60)lh{%co5>l0aC-=*oB}>2s2T%QyX$qQn zE+YrWt&*EH;uouyOAKcpjop7h8PM5mY@Ue)y#t6=%bikFA|gDO)A1Ym!t65Y)kwfj zyQEV`NmNi$`aPie!l?yR?WU%tHf=|KTK(f_H63KIl&aP2TQ*?A*MpQB$Z?V7*zYpm@Yn(eizBhlqq4_tzUQ(hpxWcX zGHcoit~^1V;B6}2F4EYc(y`LqRJ-wd840JNcwY3Jo@HTWJb=&{Mh=fQ_crJ-wc!<{ z0wTK9oXzO9S&<57bj`Zow5Q3oW4`YNPrpsEPiijxvlo#SB=+SgY|{_V&WIi)zc2W3 z=VCOD*eiio?>_67xs))ba6fwcm>#d0iDbVRYa3>(au*&UUfKT1>em~`wXQWI)&cD{ zTT_?evF+o=ef&bE59J7RrLB&Qsw)cvjBj+X7Z`_YYj9?yQXAO0`&B98tX-lQ>%1hB zjz1%Nrl%H;Ud{F?c5PV#;qH7P69GaP?%p0A5JWF8T(>0JxgX^gx+uqRLO{uYmAVSj z;&H?*zfGsG9i30=F9gTIwihE`{9TC(jmbygAs10ZBKR|#t&r0nHHyI2p_{t13H(pk zVn+wD^>DJtD)*XKLKNFcg-rN}5sn|D%vMsEX&JcT;rTaD2c`!8UO9>~_0c2Oo;z7T z4AeWnLvE@^E$ua9ET+=Q$1xg7-Y3|!Fe2F6e>%acYPaf_lpYbhdBMT-KS5qKrk3a}9@RCB5DazZ~)97|>nf!GqyfuE;rwo|Ha+uL49F z&IEk3$mZZ<{hiZS?m`WXdZpUHfP_?A6UGy8VufKwF6JRT*NDUdWEhdUv@j8!i5Lvb zHc;z3`oA+x3u}RHL~V_=^|jK5M)&7~lw~8SdxWvB9O4${C1o>Hbyr17=W{8AYfFck zy&I;`JAx6-W;Ip3y`!`Fl)V$at5I!38AVfvJ>~Ocg*Z)Rui@V2?~3SqTW3Wa2I~d0 zA*2R1v^=fVZ`CFtvVX^3dX7ki%cQX#OmQ$_bO~c2{MBZpOQrR0@)|z`+GwU=iB6tH z<>7>fbP)pQ>nI_5>D14gwrk_UB)c%WDtfa6mv^xIaL1{sMvR_A{S{jmnBAc_15ggD zLCu>#fhunqTv~i;u!Lp=cr=tHPs;V@-w;NKd}u?MDbd7AjHjj|=3aWH*O|Zfay^ap z-9vVPihKH;`)B;s&mkI1=~dw~innaTDQ_i5Bj$8*aS6hc?<6B7{f~g<2Zh?3#w@j( zyA|*4eRUO|1&BS8S9R?G!wWcbprpTPw{!J#C!R)?|FR0CQ>j!N%bA&6pVg_|O8} zMn?15FIj#*sa>9K>v;}Rs)!|;O{^RoSi$8$hXHtzvvYG;gUfARd>+&kh&hBEg8f)b zhM>~fNkrmL_2OA}SffH0<|gjl3Kf78k~S9bV*x4X{PnOf0Eqgde0*y7-)Na>088EB zd&cUJ^?gg=ZatnO*7bQ)upJ=mD8AKUGC3YE!j)zZbBw;olS!9WBv5Go_4@4}tH>AJ z!W?h8Uxyzh=}1b3jy<%0Jp6e6t1)l!{jF@=>tZE{ceHRF+1P;dTE}yh6TzySrqS{r zmKO2sM7en6eVE8dL6L-Th96~mTpyG5XQU(9lDp81s*>M)V{JO%|GjiLen^|%&OnJ{ zy+8sR+WuqCUiRD1uOH+lMVN?9gqf1E5>N1!2Aq+9%g)3?pLtxNDeBw9iEfr&Cmi|Z z5tf6-71cV`kB`ck+_MQQY2BcsHCJ;kYcscY1Y*%dpB%U`iZ~@ms$FX{=%N zm}l8oe_<>u@vt`48W-0RDY`{VTL=eihfmJOZzyUe=-2b=LyxY8f=%NP9HaTrFdg~t z#Cqex1y1UP34FA}=_3~tb@Ns;cE!x{x-sI3KPwd!mZy7)YqIGTh%=X>#j6^pb-!@b zSB(qud#W}6J}yun3|D7Sl5Pn|W*5TGKpqpPrnAcCiNPCq`HjlPJ|RYFe(5h_>e$~@ z2VqrlnNv)7XR?s0^E89KncCV!nzp6e)G|n_+qt>Pu!L38Ji)s(hY5{p5u5^q{>2*3u=fOR!ohU6?E__wT%Ap`p9c;c9Hd< z(96`s4MbDgt>GszooKH-M|kvbnj>nirG2hpyon9o=9Q6YQzeLs-u9~OuY9_$S*|yU zpmX=yFA<&N!=HKVNu<9|y-ea0y4v6PW}-9x*)LyDHM^$jyOq~c=f)q+2G%JB=Fe+UWEVawo}bBe6}`Cy_x3pIs{5X-v_BbNELLy= zhnL+kPTi#@U+{M3pqJ87pZkHpjDj51*hu=j;WVlcM5uez)LNr~eM+mvV*s&K9K=r zPKk@ew(w`Ah-wyBlgRerfeF@1B9GO`Et3e9r6Uyo)u4K%yM=DQKN6B6?`+%QL&2_> z>RQlbWv8d-lyK*-b?*&DbR>EynnNn7wDdo;H+559Q5Y!u>U*_Imd`7{vsU8J5>NPo zhKG{wXRuVo(|69RPoEp@pP)+%lGU~c>sw~gzqKDuTi`q6J%$+LdPvPZ%vB`<95&XT z&6=Ncyek~eDr>|jy)L{?VpmQwt*mqzK81A7a1SWJa9PZ#SA zo#}OWkL@dJ#jpVG3Tj#E!xv1 z7sFS@Q!;dcX?O7_Psf%L@0t7`cH~FMOnh1|*V^46kimq8DETLs+l}^MdK}VL3+9Jy zal%*{RJL5|Y64odJ3;>Q>*og@6Zz~qO7Bvn(z}AgZL3nWY6qATyGBptjL8YyT^!8e zR<{=4;2V($S`S9bOE<5(RbjhmHY@0yms;z-=-kk2&Gb}!l&g@Q8DGja^M?ypy^S_^ z$E?Qg(VnurCWm>L-GXm3hIm)JNur-#+b0;Pbr|P+L`$%};(wWLnPI$=Q}uIWEFf&m zt|uq{+=U-M;#?4>zi>PUZ=x#o)@ArrN~2hQv91hT5jP)|7^f8?g&9A-HYJ*wV5Mvn zKP7U|ZFNg!M4Nv&Mvh|8F3nf7lI~6S47Uj0LVdk9K2x9%eS&JsdL_lg3Ba~GL04eTyOMc*>ZXTcR2EemsHVpuSD zt!kK_UFX7?*k`;DIxM(1J}Qj0Egt$taHu55USG_mu9+O4EezA5`c zDf_He`h=?!EsT@qbRcCCOPvefb&ZUdnOz*Ox1@q=2sVk3{j1ml4!RUU>fu$uce0z~ za|6txf#M|WIl0dKlLA^SuU`vzT#mTh&XHmSoc4imQ_zX}_lt4&UE(tk_5WcU2u zDa(6fO@vA3yIsv0C4MHb$SMN?*_}94Lsd2#!eo;o#ZVt4-gj_tI%FSuci&hhic(ql zLe=rpqFF=ZwLRx>CJz~8_i=7=a>ux;CCgoq&zY*$m?=Z#J#Rht#BG59J*^@UIYu zec=|V1lPZKc_mM%T3tcu2f{txF)b`j$Key?4@U&26~UvO-YO?!pVZV=Uyi?puvwec zIE=e6DM7@hVc&}9GVd#eR5Yv3jE_AEo|vGryP8HyN?&j{pSIcw4Pe5(nGzPLD@5`N z#-KZZzcla_6ryI2%|YroQi8Zj)_q zv}|RHK+!Xwo*eV5+Re{vg$CbP?wL8Kdb>o8#r!gqaLfIsJu!XPdlj4rGhJPK<0yuc zB?~K>>qKyvU)vLkz&h&Y|7>-;h3Oz@qE?tD&J{bCa9i3BOb!5K8sNW(B6DL7;Nt2f|nNN*iCkV@n zdcR0TGG1eXC8qPSl}FH?iAWJuSo+(yUu>pLV0-ye$f743WUjg%;PKucR!Qng;&R&e z;#?1bAXQqWJ0NCpW_noYpKfJ3zv!Fv~oH6rC9XaNU-zw28T^Heu6kxH?yXu^ndZ$Cs%EN61z-Psa|Wo z=XU@0hsscza)g06I@7xsK0i*3%i7fU9haPyUEXJTTfR1( zAZYP&9`CBCl;Q`0oO;LLv^w<6eQ3#NM#9sp=EhX-v9o<aCj- zg60{wJQyP0ejOS7E z?ysI^TkrkZ^7$z7U9ftKh<=mloGYXCy3*DW#s+bAt*`2jI#DC}riSk;i|J9Dx<@>Q zelbvJG%e!&5r)rWrrwN2cIHA^21B)>w36~3&Cwvg>mbhFm1@$_#C>t<`Dt$f?F(r1 z_s_v`g@$i^=@mtcinH>-+6_oQA{3?r-{h-J@lVE%NM3)rL#-j*ptLTY*lTtmiWT1i zmD5D%?rfcv_TR70o!maPMkDxER+S)$_k>uIUDh1Kt!H>=qvd*859J?wly*}X^wa>0 zd@#rD5WeojnOqgbaiG&hmzI?1qiCSwB9zuBe@7f>Su0cNUVJJ@+Skp`CYHr1L=4`) zw+DCo%bJi_ERNnpEdN;hy!iX9+JArho$%ub!JyYxY7pge(q2e3L4|TFgiNMceMAW9nqo>FF>m{p% zc+b6QhN}2yekmmQYB7 zZ=IWhrCOb(rd4cC3xKX}Y0`Fgcem;cjPTxvg3sc4ZK7UH6}Or5IgYNcug^}7BDmhu z)6nS4zd$mzvdDTA$de_Wee;E#_D)UDF6`^)B$W8}gO*sg7cYLoopgEU55##@+0U^V z!oJZonP}0H`(c|^`xcBJfr&7JfFw>v9u`ay{P&^K%D!EqisyaUB`}}fRLCZzMy8

VEdD{n5IHIM1FstJNq(b3i9YWV{8r8~wv=b8-wtg^XW91z^=K}W{w~jA)bhYsw zkFZtBu}rlp@A;zvmApcuAAU`8n5U;@g~Her!`l}Kp%W%$ZEj0Pwr_<<0u9Wm@%}x; zN+sN1dpA7B?VY9?_zn)09BIH`|BMFSJXkj{&S^J&{$d(SX6gA=KZRMA_BWifvlsS{ z9|;9VhY9R{Iod5AVLl$_BWXNf(a`Bo6VJ5;@*fTkj=`L5LBnGw3HjL@%a=d?B$-mv zkY%?~Q7|(m1}q4@c(Gb!h3-Yg^`Ko$|1h^(UXd;Qr{B&C%?p}-PW=4X<;RDEi+893 zF4fO(AJ1=o5vitVJSG_SPspz;`^h90!Xu&#z!lhjahOqXM*VEI}A^H8$Xr=(Tf@exJ0Caz0R@TCL2-Z-;3a3N&>)YviJPh#o z&w-f&WK>{&3-NK#(?^Kkp00I*AcV`y%R@=rxTK{1JlBrLKNp{&Osm)*Kep%LgZRWA zlDlvhB(x(Md&!J!L1AH7)WRh&-7F*&-gK(KFC}@vej;)c;d%_p4KBs5d-3H9hFwT$ z>Ee;2pU4Pu5Xrw0I>$sRQ#-3$?ay<~>3{*h_(`|?c87}oMVJbaqVHkK8Xl#T5g3=g$ldjV8zTAuC>B)fI*5`lYmpS85rOK{N@M-H3Lk?pT)vNNxT&<1Du3}zr+xhmRsCF5KWug_3^T9_40n( zixk}hb{`-b6Uci?2{D3HtM1NL!|E0uGCTt)D zn=7M$cFlP83VfG_h6YJACT?zbFj;|XSC>qR8%#UEVP4=q2SoD~=Z&x^GdV{J;5rO` zo26cej)r!lL`eo^+PnU)$|S`+AtDV@22xT6rSW%m^BE2@)8ptg`#o)C`}_N66`n%{ zkxG`ip-NS8bA2MK2U;t$4bKabM)?^PsVfn`N{a+r}jB3izu)B zP7nBhJCk1~e4;s`g=*8pGWon1^^&UDBGZdjAwr5s^B4a8e*+YxL>3uPsCwNIPXxwz zj`5eAR#fynzJGSjb7P&UjK}S&`QN2>1$0>upyFJAwhWh@Q7o@c7FVc1wHIIog#Kpe zoGmpZ9(tudr`yR^t{aZvx`0rcl{zbe$K`+9kXgZtQ9nPwibA-O_F$8n8IrGdM9{9}K#6yE%I zClgZs-*=3IeIpTxWJ%1w5qFH|OQz!C@CAaqs_{Q}_5Rq&G&woB2}~2XMH+~7{(U#S zXS<-le~PIZ$0IdEl>D1oP43-Ui*J}@EiM<^V31+_eOJ?4`+?_o@)`NrViYeZ~vX6BlF znL|*4b9rZ``uDvmDHJTS%kve>2-m-+M~LIyj~6*uw|3&AqSo#emefsRr^UQdwnE)A!{DVSB&a37-gfER?pvuw`@4r`~KfwM1 zBL(RJK4LUl&Ftjl0b()=VBI?tzVv+9Ah2uDJ^M{6(Hx7o0ye8;3}_w?Dr)5a7Qa7{ zF3BG~^_x#OBKQpD1!@8K(`xV>gfZ%)5ckyCBNFf~j!=y)ix=yUWeG);G(!8x)5{CB zcI`P=wnN~U($;Y9xg8HxRw`uF6g)jWz1Fi^9drm-HNGiv;<}j0wOuc}byi9y3?Aa8 z!EfzuU}QX}NV^R|i0TIL(4szH_edc9H_R9K{P=vbBq7nom<3sJh55tp14U!aYKXAB zYhLIX?1BY7^N)q6XDi!w^}mxS!><<5;+E6}j=>a&*}>M)&)U{jPw*<0Y(xTYK0SG! zJ>vQs@L*OJKAD)C>&x>5MMN0MYo775UPcmwcxk5PIRb^GWjakH0^Y-gpVkrfoJ-+& zT(iHvWl9A~-QGSz^Z7jVr6#~j&`ldVW6|+_%SWbOR{aB z`|Bir0LC~2s_9q3-ii0Kne+6p9~!gYF?mKsnku&$uJah{J!kM-4#1yLQU7lHaDNAH z`?Te{zP9$7-z$NnWw;LLLRxSSlI1f8?#4UllwhHpy5TW5+UW&CK;T2Qp4yz@r|ctq z+AU`#b`=GsWRv3Xb3nz1c~4|aOx6`vya4mIK$E$?z78}l-NLJe6WVPP-W=`2AkBIg z%?I8GQIj@=p6Bq)`AQ@VkDI+Z3{u`dbkR~l?0!M<4L)}s2Y=Gm$ z3PJqa}eg5Og+suK}xu04aSj8-u2tPM%5&TyJIFd-2E!t2xo$#b-3q z3%1Vk%(=L%+t$%iIh0CJ8uTFkyDb?alqp1eJuiu^U!5^bs&9P%s4j5f)RzFsfU-`_ z`n7!Ccm)};fRwcKtcrSx(0Tmnr$~cB#UB8t1E4K|+lC)YtH5szLMJ&c^^$tc<@jwQ z^N4RsSEtrG(Jr)wHSeNs#LPkwpkrhnEiW%ezJ!jyY*E#`fX{Xq`?u6-+2|*Y*Rk&a zGs(@7?arx@SS1MAlLtGrwz=NFH+!5?o`fg22m$uWE#|*p|Kh_u2t@IlCHdUu?d|P= z8$AvbwO9uB0x{F4_>e$gYn$WKiljgckm&ymgSjfIM5}HnjW3yG3;XVM-+THmBV#ia zz%^-pfq?gpyFWZG8X~1=2SjrkXYK9HxBjE{mo3zfV{O)GYx+?`2UPm7=!1NsTzRse z0t$EsEKy=jlvyC(^0#|vscxjk7{D-?O1KdJ2yNw%W_|Dd)Vr+Ck)`TRS!n#SvXa@9 zvaKT}6@1MYN1Y%9as%k`U2^{uH%#9Y{O4Bnzbd}y9A%z_`yJ*yN<+)s&r;FQQY6FU z@%^sK)szD?_IA;C01I;6=1-m7)z#HwqH4|>#ws`rtv84vH1MR2oTBm zYIcyoukr223vBVvIxTqY8$PH!zw7?>>lgp;keAmBkINWY0w2ecsOx#3MfJm>nV*6l zn`wY5&SQQ#U1s*oqtf+2_qulg@p1dM=KIK7uId4P!%~%EKv2gN$wIjS-vRjrc87IOT)rwd^Pk7Xd}41(<+8O7&rK5-F4#FHEMwlP`cRN8nr)VZB!meDmG zU16`;>iQX3r-Ar%5bZ_e-jt@JpKt=FsF0SncU6hpbURSiVR5h|ASnR$YdKERHdfUAGnv_g-n~Et5WwG_9OOtSptj zCows{j@j|!Lst!i&AUb z?4?X=K_QWgA8aqEicZ(2$$%@yZ4E^zb77-Gq@p*?YFr$5nk3zSN?N2|aq;MofNf)` zY)qXOvR{8Lo~My*6pnU|H4SPW-(FJ~a^of4L)6LH&TVoiWZh<>#d0J4P(9w#n?sC{ z=_k*jppxW_XK!!u31T!ReZ>ouh24K4uB%v#MQqOw-SV0tW)R2#0PWAp(nAQmh%Bu~7089=@ zYypxBeE3DSyLl=vvt7&9CL9K-i`;2Y@p>f3&{sv02`}EXKO;M>c%?}!vlUOW|I}n7 zR$W&TfNg@vgr&D0XkfrH6|&IdGhh$S*!h7?Y$M0%-a*sJkhz$R!Rrdw>YJ;ED`8BY zm!M`R?!60J+y+=_`IZHFR168~KR>}#0VL=86^4z>oLX$_6>VDp@Dir-ZZlM&3eWE* zkk3+@6Gt<@tjtU~x{VWU{%1-`3b445iILF`u;B~mA(Fu6-0)c-&pcY~0gMOH>(>Kv zZX>y}$q9H4-V_Buy8R1-l+!*VT~P}eTlD-6B`4i;p9|dfEIg0VgOe&A7lFv06N*>)F3~~Y3|5MxOYC%o-?*LRX-9OVU=WKnHC(SKa7q$=SUdPY9 zJtZVico3F^*yWd|Lr7*>TP4Gdnme7P(MVNuJ^*h)FI?WFpQ!zrYx@gtM6Y^JbizHS8^G?7Xkhj7nv5*4<8* z0P2%piKyw`Zb8Dzz5af=Kc5*ivBp|kPQn^}=Jvo{vi;~NFG)HUY(`a%-((c52?;9q zA_e6Bd{4s~%UhaRu+}d0-{%ly-(lduYO@N~z5qu>Qm!4v3I~f(qTzmsL5xaZL{a%} zE}a!CR+qy5EJz9)_+!K*DbjBaFqKNpOl>|szPFTNU|jG7laNsw@YAxs6xh(d>~3O!F2n`o7cfH_c6>)#Le%Y5}8e9&^tpJ_opK(@5HTMj zr>4Ea;>S|d`fBzF9b~mzer)7Jd*)7LiR`z)`8oo~i-0hQhT#+S&vK*xTyVYY|1Gn1 z05F9~7So~cVR0w{@ciY#HhKV`GA{=nO2Zva;Vagg7b8JhCQtw6S0p$A`;-3;^6UTK zCyqjoAjR|E4+fYN_%-iP=7H!dED&5ZIy_vWP=!8=m$^ZAg zh5(#L$neV9#J<+D&*)2Erm2mUI03HjUb-RK3)5Gi#tMx=09|oy&_4Q5C9*PFkAnQ~(5+mpa`yjI9ky!m z^s$op*lcyRzqYD$qen6Uz!`AT>v6eCZOlK9KUAF|eS52XDBAV-`R4do~ymo{pc+X$fcqAjeZ{V8oNCsA!jtn>px-zIicT7Ig2ua()F10&lUX zUePq$_pX)VVmf{@^}PR1TZut*sFqnLE=I$peT>ljB2Pak<9EL=Fm?pHsVt2W0Lt;* ziHqbkoe}4wKWJ&)dF~)i&k>@Nn3$+k@PFCR`2>BNBxd6VD$`(YZXL|8`oOoLV&ipm zP%0G5G!7C+9o_?1NrFHG>6S^{M5pXvKjQzD*rJ@5m|*`|AtM26x=3~k9iPP!N4xpb zEO|18{o+G#@g|G+-*~2d^=gs>y5mfeqG`c`jVMB%Hn`si?(Zxp`Y)WRQ{y;D7>ttx zq6cc@uQ3HuG=o%Gce+`z%Ct6ODXl8MUBQjgG;`YXe>4V5R=SgtEp7fd4c`U`zR9nj zUa$lMML|KD4f)WM&6C^Hl5^nt1|4o}T?405ijFWF)*PP&etu~UfeiY7 zF>BP1biA^)6L)&ko)V&>Q0cD3{~u%)-exTOZ>9F~KQsw%r9@fc<>Xg?1LTeH81GiE z|IauEl9<|!@c#^B5V@anrZ6P?E1SI+XiyQH&7vDkCCPK7!UM-r4G&xHu1&Z{A5%t; zai2JW8@b^?>@qj7)g;MPsnMXCnR4XDJNL9vYFyTR6$nlY)F=-{ z2%#2>Yh&Sl3T=7B)HJf(sGRlHnJ^aOwA8p-W`>WNn4NWh<{8jcO+(RREs#X33u0jw z99k*!ALL?{a7bukzh9wwX!*B`LEiHi6ptduF{>8*cn;JS>vrhWpj&+Np4or&Ey^`z zoupyulnG#&|?x*8uUp*ku_dur$~z5q+gOwErvj^!O$ zkB{8Xp{xsTZnde9;xF?&YBV4Qw*1SA2aLmEj@0SAEFA37Jh=Qi2NgdE=CkrgC{v=| zanFOaZ1bd9g$_m0le|wQMkQlFA|hi~t}!4ZdGgxSRy1bvp4_+L2bL_dR*?Uv_)IKJ z0TKF4oi^ib)+9Jw!xm*)N>rE>2Ax*2aLnKgzwZ7Wn%(aRVeB47SdY|ki6;B>R%BM-J#?V~4$*p=^#at2=h3#OW9j(1RlGik{2)Yae9i zx|6g3k-YtaRnY15HQ#1uX~Ib;KqdeAVNCAm8j}{+DN`&uev}Xv|Kf?RV(Jjxl2S6B zW~{~nu781DEf+VJv&S!O3l&5DVW(~LO8f26%ezptppMBI!_5gK^Trv4zHcf?;mAC= z?|I^ovdM)MGQNWmlp$3$u=XeyH9b!rN;(=Ek+)dKsdBDaqf@{X1CM z&YQSS>ZCsu%^SG>D1LzekyivuTp6QXfwR9e|Im{#0I#wUKUZ4ZJ2_Pu;y1T=k`hun zlJxQ%ok7R?PbZ>_-*@nrTJU=vZbvixrBPV47&+$A_E<&3;73c0i|bE0ude#Hm)fmt z9W-o=YMqqOzaohmVzzedGbh1QxTSc*Qw*-~35lDB9E1nVwt*{=Z(F zqNt(a>h5B3+Oh_ykCavIy%wLBf-(qKsTap0=o}4s=X!t<*{Mb z?rCQPiAxMpqXG^JFEKBPCRa@eY4<$pxCwFztDKIVvf@}*U>;`=K$Zc4R!MaVoC;6C zScON<D%A)s5A_Piy{Fo7jN6Gyddz7rFdW zZLj(21a7l1RR&^?PR1m>e6Aj+e*NStuxNbNz*TVpAi+-DlQ+K4eiBO+uPbuIEAh*p zzJ!%K=`#>{wHVHb2^fY-2xVGv_)eFY?+APMseo*J zgmd7^1Vfv)^~h`rKx*@-6oCq0?@iTly#{cH;DFmU(6I6XxG1`mw5Oak75yf_DSg}J zY&mLleB88uO=^x~8!k!Q`b8>Qx=V7CifYb=l?$%z;VMMAR&>W#HZ>X{$$^+M_mq_e z)5bcLp)NC4i^R)=fxYoM-S#7ojdlna^$Bld3HG78^P?%J<;+GuJaygLJh!r~8TP%- ztJ`O(@(MK-^MhyF8hVSFjLKP#$ zauFG1%kE^}lZ_p{$%m6hM)JUgD@WnHlN~nNzId{M7+*=Xbdne+PHkl5rX^0>GtNdk z9C^INh3ims+KBzaJ!ZOe%-QL^#?^R$Rb`%BjrLB! zsP12$@kSbwc)#}I-Cac%h^nrzFPUDf+1HPo-+&0n4irHIyv@1?1-8T)!u2Tnr?3W9 zT~!}gWRG+@7l&X@w=K$}^~Ro@Ej<1Tt(&u92fKY+HXsB-Xp~Bgfm1yO^Mk1BIo{dDivY#&M=bOjr;`jaDG$3UE9g>-T)8 zs&Z__v#tcp!^8XYRXva$5(wGQBVUuf$~QnpplYyEXPC7iaR?s&`n5xW?HMTWk2!0j zHbXc&!Q=&kSaiXlhDY;=K2%+T-KJ!T*ZRz>ga zY2!2fwLq;}xH*H3$e9u;DL=b6S7~rSfgv_DpL5zn-+;2Zx6AQ$xotkyiS|$pNu*O? z1fO#}`Ndjl+V2jBGKO7SWMN)8#+#lo6)92;`;2Jxhg zfvUJ)JM-2VRkS37x^t?rL)=pWG`XPWwZ5)ewX87#rVkc@3e<-GeP2Xy-pNc2?X)E@ z8Xk`KFQ=QB`*m^RRD@Uql#{3$jw_46$!v7w+}u+h~_eM5iz%F%<=owk^NZ}bB?WN>Uj?s)^E?7NQaTszxhn$~>_N-j1M z40i;54OUjxdhJp{mp9z?PYFm|ZDSWpN|%nVEC^2&#vl0~AS!w)u-1aYCLC@ojz&Ab z@|X_egm#7P)PmB)eoBYJY+bFr95XaSH=96AbOWX=BpMUWD$A?+h)gS%2e20K+0PCG z`DCv5taKs6_~qD-XM(86fJ0%$P7N?1WB31?u}fH3*qlHaz^mg)bVf<^o4jpbkHD>`*{%3;k?(Zy-JyvOzk z4ir-LvpM1H*NoA$i9&vof5vP}OB=Vr5N1=8(09xLlcjA$gMJTqRz;IEvG>4(38S8a zyi>s0u>6H5c@)YrO+pIM&i>T&0%k~OVin$-dPGpipP6DOh>n4Q zftRyAD$~zW-G+%71&S!C|71@>_jsnCEfG}nLB-jfz^KmcE0C)*DbeAv+^Ijcyt_U8 zfl5UZ1XBZNb*_Wozt78zG6oUomXsjZK}kqShs1|xK@=N9CC80PP~Mg|R^VFgFQ&bZ zh6Uu&-EA9GFlao#{-^*bk5)y*FjzZNUmQV(N;Q^4E6k&W-B?Nnk@O6)jmdGw1~2q8 z9Ug70l)!6UkXU!B*7~#*L&M$enAy1KsLZv<##iz>*~OUbj1QDq3yeVA+&E@ zN~JD9GQVb0LC572HP$=%{#Vl3k1uLje}tn!$F@c@JYEyZhIwDCc%RdlvMz61dfV zLkm|3OtS<}6@(y$sMD#->Dgy!8yX=SCZEKB6Y@Xj<|Uuiyq79N{|F8x)_DY8M(1`c z2tQHAG5Ld{drCr-QcH!X)G70_k6x)E_$`}`?9SV&o10SuVMoW%qiNx{vEUFDk(HH` z6#plEeL>r)>9n#!^9qfbkj(g}2%!S4)QfxfehY@*=gOBmjIz1{ux8^|2H_7_ z(zA*n?9{xdHR5*+bv*3+TnZ&;pO)}IVuDshqkG`qwHKsB)gS_XQc;WcAL~0x% z*E_X0ul_SH`sG7vvGMZ|s~YI+^1Tr7Ns#{K$4Q%Y$9F6!OoS?`3)UZZ)*VH?glQs! zLS;Y%n7OrTbP2(26V_2PR;E%`2kiz%9i zu>|fQo);iLXheJ*&O!mH0vvC60{D}_^hv|q2ZS#~rmysWS5+q$71;umm9WpVhQVO~ zKF>6NdMy^;pQB`P_!XtC+@2f$t_#0pZ{vG@0n6CNcM(It+6cx!c%8YApFLckx<0(Z zB>EFUgi7Y?8L~HNd=Y_jkbYzq{FK{@GY|`=-^95d)`MQ;{!bS>oO(aZA5qd(*y05>ZK(nQX)xY zzo^kEOZypaL=~cj-(-6gNH0mSYuH#hXkrR2#?79KKH5VW=V5_ln6rBw!9+KSjz>>e|2ov z>HtM_Wi5u4bfF5_4>QZo*0Et8fd*Ii6#@ZXEN+eqTU{5{b}?7znv^g6GblQ|rbE$N zUflt5q}$xS?c61T?CmlL@34D-HHC57cH3U)*e2d|r)KNHltm!y(KlfVq`U|S zmfzw*f%`)xm4(N=GCEJP*LLgGF+A6gC?vBjwcmWNee5wu823W@&EA>g$u?$`sY8RanMj z4kO!V4G_Fg7%nv~%Ha=BnZ10v%kt&8hVi4bKOz7+{AZy2J7@qw*aq9o;9iGcC&bu9ea{vQjLHIojFq+3r z_$D7AFxwLLm`Jr*guu25Q@Und{hEXv z^i*)%GYmCTynCn7&RkrXri5B_7xeVhZwrdr17w3~Ys(=V)A-nuLM zdBXm<7_ZeMeXM{tyf#gWac?TtmUtkS!%8opdt;*QbugZZ>q}KfU;6_Gv+YUPb9$=}kfW7RCDw0TPM>b!h+McNyNACECDJyUbyB-upd_&EiBd z0-6@zQMWfv0q%RQz|QkYw}24B)iXDH=d+MaVl`jS#@0ZRr`V!D+1GBI@LNs>rX#&h zx`sKt9^~~F%bfo)qs3M5}UTHoDCGJX!ekH`KGbLP}OStnEXH%{nU6C(83D3^TmfwwNXGXcX6^u%5-x^csMLTgU){%Dqz(lp=chO$VsFIFquk;w=0zjjyczv4+l zNh71jMr|3e|JHgK+L|gw_+9C_rDn>hC@U28b75pF32qUo+1V!WYGe24!RnicvI$Cm zOnt0=7cZIu?VYbpoLtnjpmVR!t3i7_pJ`i(Stt}J4K|K`CAto~(NVm~A2Ka9w*yvJ z(|*l5#^;az<<*INvbZh%z~enTmLYKszQ((zqras!aCqQw-7}PZf(_xDbFS+$kXOq$ zx!o5%8O-n053X*TG2R#NiDru6P2}CfFPh>{{<*OQZ&Go+P_ilMA5O(3CCoj=4?DEV zSVz7aG=*Kw@syB|z^OrGfD|dzLoLHSz?VRm5fCT7WC?+L%jRPGmPBJ-Mvxh*Q}^o8JF zYj%~jFwLa;2xt|cc{2?a{ya(_Rw4OdC4Z&ra@)Efbv;>9cAHzJflw;8`sQx**e#%c@MeQ-2j@Y9^rXL#ra4ut ztV^IB!O zuONAhq#s!7L?mM$5^J*~J?hGG25vM(zWx|~a5q^F8@?A@6iyH4J4#l*)(qEZWHfSb znpf^R_qC#>fokChFE@@9zzn;CLj(!+F1z=v&T7G6oG@QP1I)#QC<`aBt$_RKP0-@Q zY=OLw8$43)YOzl5cGa^k3>ln@Y2-4a+beK?y_r6hs0jpj7|gYGz6x$frJ0E&KCehC z5I~!2o112)rl!ub&7O6TVdO;w&isakD0b*$BrNdl`M{Vh1H^rD&rw!BnLh5%3;;4v zbZ1OAz!)AtY&#c7FXzI?e$9DK8U{Nr{5EmS5jdv;ZEakcRVlChCXt)wIY_s#s46!i zbIdv2cUpuIU(5(lGTb?gRi^Wv)B(O;lQ~yZ;HHz#w+ji)$og{5NcOsRBG%m@^x>_? zGKTNvwUBpc;)Ykmh6;MY^YB5`$#{-#y3lxHy3$sjc@;ayO6*37r%h!KnfvoPMIBxI z%5#+pB-yWSZ}7WaUuZ$C8BEtA1#D@GcNIde00-?&3qzKAD&99Bz&$r%Zi??&J#Z`k zKFMWos2C-<&cfvSlBKnvLBq(!xpGn1$d(Xph~TSpjD$+5j1)k;P~!Q}*t??NdRNAb zv>_kGo{%zpSGr#tRkHh80eS>knNlmV0>`K@5G{&thgVo+V$GInsr%?SWlb)-x2LYb zczqjcB;VqcpavhIWhh;*=JE)%IMmkqho_N_!|vjbrP0`>14BYeH#x$8zYAe|tE?(~ zG;FJTD{5j;1?vkd1I8RxEnQBsd&j6;sc6uhh<23>?#XRdEjzR{ANnv-(W{Z#!;JH- z?P?%1zrH+wBZW(i9gMCX6StEDPfdku2(&tSN0-9pgDa8InQH6ET9h=PK5cl5}Vke(J0(+gfUTUZ)V9k27!6DDc^uz;16t{q){ zuEOud{XU1-hGd%8b$h+&=v%YL=+D}Bci>}Sy;rld`~_o(_x`rk+rGGMZn=O(Dk6oZ z!RxGca9_Ljjp|$93;4W?WF$6)R-SJNZlS-}iLl>b4ut=_0*69nvl@WL536;=Wq+G*IMYxXG<3V~@pO^# zH`15leSZd3sMuut4AU{%V}rL$~C)3NQIoJ(7Ab3&D?OQ=zY~M@+)R(CG(6nw1FfE({fY=*PJaC|LgZuV z7r{DsHruOX{?<2&cMsx(H-_*1&LmKb%Iv-Kc3d=5dJ0nlq3)lAD))P%VOi;ea|eRR zzc7Z^)$$Cz_<>u0e?PEgAPS)G1LJ^lr%2wJ+XEzE*5K3vvcUQjfd9UsYz%Ot;WPJ{ zb_N28QSA{sFo5mIZnuyU9o^ychQfagAO`a|uA%Vs{J7f46PSra*lfOB36+Ub#Kg!q z-2r+?nrk!_b8vyQ`gIzFr$M_H$Z2{1*PPawu`}W+h~T4|G$aQm6GXz@Og{I738m)3 zRuAHlXnQ-xvSImE_-bnv1iHO7B=;|Dy;OHSgPyu>%L{leH;4)mtsmUG-Rptx6z#m; z_?%0yp@{`mDSyCs-F2uvoU^g&K~kKY6B|x}w}IFaxM|PMLrjMkC&i%m{UwBuqSktw zBekM4ZqK|9!w1K;5Vr=U->4_}D!1ORu`kZ zRf_ALWs4M}12`>b?4ccdns_+dj5tA3YaDUj9d{GbExyS{<4E5Oa|9_5-DmGgCykxX z$_-du=;=iXsdqoz#$_w?KKadE)X>vcIT^>UY5FZpYUX72x0+7DEU@&58fh6zzLQq_ zSHgZ-&hUN#L#DN>HwxAFq}nO;JSTVS6&zK4GQPP!kzZ(^o$ig!lzpSw?Cwqz8I1?- z_3u!JWs?iGcJ5^uu$oz2moGL=TUj}77D;^_PntxFR-$vC1vT+LRFugNk4TWY-5BdQ z_MLapD*FpR;cbzjzP(QgIQ?KpkkGQFmFRTueWom+TYXzpVByQgvP)JOzaf*pjn?8} zcDS*2cgE;t;}Ll5BW|tPa4SCBe_ndkrGSy z*mZ6MIBSorbY8dejEpvG(=se-A%CFxBUh3K4A&PsH>i(e8H;$$RcShyG!1m8p9~9J zguhe1270vsMj~r0^FTzvO}-Zf33m+8tCF5R9DzuHGdF#Hu-FPTsECvq)N9NERE8k! z%xnQLPFv?nIke9pF{9{qOpo?ana|;Vx8akmWz?{r*xp^cxaC-X3J0`68T0Qir53_n>&lyLAB? zM$Im?QNR`5P}f5emia!~R_4~HT;*eyJFXybfnD2>SA z?1?|H4#(g7*C_1X<0YxntjcGtoA1O*R%q=63Fv2N9FTu94PGHK(}j z>Uo`;COK7s$kF2;^+SA(qGdIJwM%N&kFSiKS)fDjG&1pOsPNitn1g09C|L*x^ z6sa%UlB}l{Kr|!EaHs2tW(`W8{_ULey}tswsH!@eIRO@` zoLq!lo>34PvvxnB1)yes`umFjdS{TQu(Fer6QD|+=%3WD9_Oi@P3wtE5C?AU)h+4* z#8;rTVRvWeReiv+VTGG6uCR+%LR%q?T`j>`A;`t+H!G{g3s6>8&Eyss0^mU^bx#SX zi*lNm#w#Ok~AMiDdc8*|EBm&b!73-+*tRhq`4S_4Sl8 zH*uMpyOa;WYT2hjkrrQZzAoa|@n7u{bqU1v+*XF*scKA*a{UmOxk1(3fJKVA-V{wl z=5>3v5+>p>VlZ*-1rghMdRE(1eom`D+ysCd&&va?uJkF`!B8!RQp=CwRYExXW*gZ& zfZIr4e#PsFPv^5QgO^U?lqpC;77Y57p3*)cCz>@j;^_$pUK1Eve`x)Ux`%!fIKcIA zwWgk)&ZR}~`Nk_5lZfj*^ReMzs{eG^yp_$ib3@-*qaMBvGgyNx@`jm#I7i7_#b?!U z4+hw_U0Jk7@JS+M(wQ3N;^LzA8!rnhxy-Vjg6pvPo`F^pAzp=><@_FAM_Q;^$j&an zPmB$0?02~s01podlci&0x)kh_uCLjKMmZ`8aeZj9F4t7=dWTGl!`gBBqui;+wV7p$ zKF*iVX-9ZaXOYy);I`3hWHUaNJ$VK{ul}rfZ;)g0RO}-#+%`5o-u3qKXoUf2J=ALT z;bRGo0XnYFrnG>znm{Wq3L2otcB$Q8MiUsXQA%wmL-nC9W)qm{XG-%JpWAuQznz=J zfETB%l?b3QiR|q~wg^5U$gjndAIC%Zl7_zmq9T=sG&JtyLidvRogy^IO@JLjOB936_4P7in9_5L=i(6V5f~GX0xdQW zO4WLgdDRcVOP2bdxZY&tbWCm^Cu7n?1ylX@v{($0d;arJ1Ut-TZ-?$Ya8{y~QG`72 ztbJgFBT2b)SNA!O_OI_hKZx?)_cZdr8p};sXNtk`MMWRiNL${i?H3?;4Uhj|CY~*< ztI=cG2G~B~AGbdjE)m`nrNTT)bK1j*>aZsu(`DAY$ID-6<72Uo7KhRv^mbd4Nb#0! zxZF+M-26m5N;e{aK=IS;ISs4M)$hLi5su`&a{yZ@ypb2( z5bu%*`2D+kP7R90$IY@KE?Q)A+_BC#5G_B-j7JYAU8z=t9bO(C90G9=j+*v39)u?gV zRU;};sdPy|C*_@SrE_}pSdXL2mV?M1bzy*@kAD3M=#m9mNQ}A@1~(r2t|T#FKYjGg zo`U=kEN#x7*sfPHLZuNBBtlS!W^AVFJ1yGV4e~FLL0N$|G=yxn2*_JIvC`paY%g*w zr&4;>fC7UMh)D#1l}T9MX_&D-3{L5_o&^od?pc2qX25i4_%!u(E~1e=@B8pW53W#V zpEw8a8{A_cAulk&=)|m}$9SRqqCaVmgrAXM}84Ish$*8GIBWY;t zhtAcT=4zDSm675})X8OJ&z{y8J;R+*yxJYhl09-#U#%55%63-z4~eUqS2DFp0c<)uQJc`XZcUck{ww z9EKO<-NJpElTiIC7+#z?x+XXQCWlPV9WTZY`yOOn$g8Sb;2x{T^F`%9H>481dL|X{ zi)=ve_-6Bdr#S^bq4mM%*vi3@o&{+&tsqBhw`bFGUxnZlh-(rVtZN*v!bW}+$)eTR zl$53sf$|uCJ{M)Pp`X%aXEzO`Kf!bDm;5TPW`W$?HCN(e6EyxYgXX@?0ZcPeN($j} zRg;jC;Gp_V+al4Ee=7RodXI)GwvoCJI*Sh(Dk z$1?S%p!pz3z2Lej7Tvtb9dK5AF7NCLO*!|KOT1bAR{Z88^p$PB$Pwgo(HLTNyjC(l z$HW!b;HI?(7l8FJmAU{}&#%XKla&6ppF4s{5oTpG>vO#2ne&bu;UV~&@#4NkKbov4 z8e5C+d)rvOCf8}}gQAjS+He=3VDeq~EglMQKcYul7Jw{X|PgN|68 zR%<(bH8G3hp8KfJi}~8H%fpQy*5l^b&AuzyTYplSU38BFpL;6j2)Fi`2Ep>AY!`L8 z3d-2$uxnNrTZnazJ`D@+-*Ya{U*z%g$yh%rz+9fp0+QILWE`-}qWXibf%*nGu`2C-2>(pwhMlf#BK`-} zV^S|u$7##Pxv5*mUMGv8K3w0)%S+@WdI`F_Pc~f#mi->q?-P%X&&GYN^K`M0 zf`!^cN=<*1r0o=zB6U42^S-yJYjrKvwyiy#>{=+;d68uBxj2t@{&eI!a@CcolaU>+ z<#uQ%;uj_IquR0g@b~W-rtL~ke?;ry>rK_vX_0_6zb<74_OLN0)}`wZOs{nBn}P^(?4CY?EU#JGHmYW$cO^a3a+lC^g9=*A4R_gC+8F$ z82_c1h$yRpCvB?&MMZkv$%@0DfW)G87ni^dcSwk%?eu~IiF0A=>(eQ6;=(J{-}5yP z(zX!Vn79tx6O&cX$lv;I3izzZjD^Qc z$fgGaonu{H%gv`rBb-{}L&jw{?8-Sn(B z>gn0q>@H~wepH|gjxNH&{W8kziy7(LV|hKV04x+CW8}SSx9C7p)aus5O?9iebu=iF zqk6?mX6-U_U$#7TBKm$`13Htqf3y1w+Ya`jrh(hY7y*IY!NhY{AYNzAdGBPdv^M@m zQ2HiltV)ky2kG0&WvN|*72Cu0!e9+Px_Wh8Im;ENf^xUY@|}*2yPb=>0b&(5TxNaR zu{nwH@++mS?)^Ox!T4v@^0k(Vb~ zxt1QilHmoDJI(`1*n*FN(KNGN89&5Y?ZtG^>(94szsg^s|z2nipXT*a@h6q87x0dZ|| zTR#&MXIC$S);Bj2%XbDt@yHMj1T)GZwQ7y;v4SbkPK&IMuq1ic#ey*~-6d+3j6 zta56jG_6QbgyB(9dONL_9Pa{LCgt&ld3RipjKtJAxRFV@0P$!FMbH-@2;mQ5(6iTS{-UT>G)OAsksbDNmH+J0Y^Pq3puW?(xMI`nt~~98b2S-#J-}CIp~#AH*L7RDQ`B12tPNe>Du{qf`&uU) zpGYm&CRe7%jT=6!8&@s2+X-lz>fS%>OZo16PP$H~C0%qa%bjeBIS^oM4W3s7XSXqsf&W53!Crt`90cqjjE|mFw3Q zlcNuH@c9Q=E$^!fV5ZJwml^*LvMaj{t)FuD=TIQS0w>J&@>#gdM6!AiIhh6-7+%et zCJyK37Uk&G;!$A-t95%4Nw$nBESjFg-1L@eR&kAwj|+clK2x)(%~Q^0Nu565lW@04 zE}`(03R9t`DK4|9;VUn>=GOMf8nwROsXldA9If^;rFMk`FnUE3|KY z)+{~epHfFXDz(jQWq_K5vNASHB}VlRU`}BR(3qO;d*9%iIx=SdV`>u^HgiLGpUu|l zeFIKPKVF4U3rAB+Klaeugx~clJt#JeGkOE<)(?k40=!Lkq%mU-TRkwh6IjuQaOhx5r<*{$S z_nX-fK|helQl2L^bAd+%=1VP1#m`nep%|C)5Bni@_f|R-T24_|fV!7at-kY_M|R(F ztxUVkI}ug&J&D$1shV6!w>dj`ppx`(xG7uUsO1~^vUO4S5V#Tc`4nUF;@ZOpg~{6-p^fRJxmrfuD_}+`?BQ3LKq{|)0i!h6)nbt-a?yGXu9d4#Vsx1=j}f|Z zS8Z;|`ox}8BjH^0#tar^$3;@m z=!;okf6StRwCUT&X8glX<}Qyz^wH4J;PwaRFrU*=aqlwjIU=Bems`6i-e;+5m|t4U zlnnKDC6tl00ZZS|X@;*1-n%9RFqI7JUGt>!tbX+39z8EG&%*(UB~H%mm%Bd6XLSq^ z00?Z}PJfw7XxD$4X4iC$)Lps&d28tr!6hO1^$KON-n(Ss{JU6!!7cY^oh!Mc9LD{H zxEJ48zIMbIIy4AfNZsePa(Y)ToSL}o$rsV;@t@~K_SqG_J6`|zJa{ML>va-Ip8SHv z$1#=A4k7M2H>!H|w z$IOJQUo5V6>CNgk`yM|es5^XJ;lsWRt(cc4ayvdg*Esaw5|=sDU)--+-xur@y48T? zI%BlN?gV^+$uS|sW|p?o$xv=siq&TlQppkp-b8*{cFwisxV`Shth!?c8Ey&+f614> z?di?3Q-Ps+vMw&6{kh$UC8hLQwQjqgOSS5NNeA9tIuT?*jdQo`{kwM`qs@oZb=?Cb zU01_D(Z=?j?M@%e)r5XVJkmkD0vyp$?!M6`Ekmw+MHW!Ih!>=mhJTB4KHVA}7I;YU z5w^8uxC3A7Qi<()N_(yS!MqlgNlJ{~FkqGpZffEs>XiX3%OTXRbugQYRzM)#Cjz>c z%lvDAr8Vh_{&f8IZnl;pf9nP%rsZZIG9a8FH22LbG;)kJaO$m%5ir5T-MD%ZLO+Em!F^iJ#p4`==X17Q_9DIQ!P)W1oqbB_0GFXfO%Lq zQ(AT(otUA%j*iSM!L#>diM|Q>Ny)?ohpIGaJTIBv-kYrnu!S6Y9xn|HxxT{|`HYhxjCd-8>z2B$6g?CQlDc@{9X zF422ozuOF`H9{jqs{S@5;--^)Eh|6hS@<=z*C@(mu)VP;(l|M|L`$Aa?RV6gCvy9? zQ|5Q#g}_vK1CLtk{f=yd-R9!NC{5b!;NRuPUVEjS>*GID&$b1NWL20RfZT}xu`dAP zO0VD6{5KuZw_jaff4$JN25uiSw}#(Vm;slvPL4`748?!b_qO}`?qTQa>FH^3`3xZU zncM-#UKhn$3Ip&L{dQ(R;?P&Tuams4WNdHGtD8STo|dGPoZoI#qA|7YLB;hh`KyAd z_U)1M@=45VQ;q4lUj8&!(F$5;J;iS_diQ83m0BD8i$1K9Fp=(z@={fxt( z@r|Zg6|s-@R6hS$9Vtze>HMQ)^BsheOdGbtI2)E~jXC5E^`J5ft;X5n>mR7Ahd(3(W zKl>)5y`b|_hoh#iKk3o|@S-rMFxC|@W%o;EsCFPHB6pj!n^G75*L-D?lk11;auXOJkIy$SbB5XLH& z6JMwr<6vS4p*yt?4mwjKujTVdTxm4oDQfgtbrGk3JBEo$cp&}SW`O5q(-nz&gOaE` z9fMTGO4#+zT&TthBYU4-pRsoQGV=dInzTOg?~q4b4BNvGPY8l#G=W#ZFTy7wIsQ}G z*hMV-grCbnZ>B5xmUqFBNVrDutz7T#ozxtfy|2YG>vN+#Sq~{4d{@B7Cf!?^ha#AK z()Z4ej%5?&|1)9I!K&0JY-{FwF*jnj+o4p}L+7qD50A)s{jDK0 zY6BZ{Cx=vEFp{k*Hzfef&A~84!CU^e|_lY?n zh=4fTIdc}KyeCr9Pp-JDakfcK^NWi5!vej@VHtgW{fluT`&>|YQU;d#iTKt{yN^!-5C+=}(b$2d_wrW<1c z?j|OT$v?zaT4>wXdYI3VlQ-oGpej4o0ef$Yy52K;E?XHBG1RYkjHMO`Ll;$FNB@~T zdYNbT^r{Mapkv8+6eOyHH_=>!5*@L(%+~#&2IWjOg=B8Ioi`SD;f6r};ohl0>3va# z4-rAAwX{3l6}BTyPs(Fu7mD<1!ILJ)VDYppywj|F5UIck9Sqpd};L|}-i`whP z0HZ?YgZKGqo|+d9qdPn0-RrlTbc&OD-x{ip&)GHBI7~9=*Zx)-@9jk~?G51mobDaX zJzwR2>^J(#Qv6EUbz-^kL67~O&!3IuiY|cE?;pQqMsOUS+B#>q4VWY&bQ1824602l z-CC|H5)u=OyXhcQH*o8_*W9hjJ}ymD!e+bYgf{EyVORSfx?GI8ap3g%WLjW42}G#z z^EUk41oiCgiyXo}g6P!W!l7?U%^y4PnY7zQ+iBgv#oy)Kt8V^kr zy^c-%XA0oQsP@@c?&wjzFL6($FhRx31zj5-^>xp-6a=2LA z9)oIiw&ow;O+JG{QC0$ovw0?*6s%>J49zKV*< z)?HVfG5F36>d)~(8@pajQjeW)BP%LJ#8>e4?Zi~!?mi`xui~QY5Ty?1Gh*Z7O7f2~ z4~>U!y!86jtJ9@zZb4TA`t}=Rl|9M+qqPui%jO176iRvONOmmuIayha z2?|6Ze-38}kBP{c7-%n)W`cp6wtQfX|1)Y5X@YQtz%)+H_<*IjCm7}Qy~4sa&^_&6 zQ+NKn{porMW?(?-$(Kh`O1MOJ60D)mxcDu0TZ; z;!|f$PI)~@on=c!t%EQd|Lc?#y3y#m`&?{Gm0V7QqeoJica08yYE+(oc4qVF9P(`` znbtvF_rmE=3}~Pm%9mHrOxVZk7NO*rkcM}!{)8?5>|$1xmHpfq&h|pOMe+38!vrFa zo4ak@F#?D05;z8TZ>@HU+Rok{W=(6)Txg{Ov%Qw8_&3bp;PJB%P)7z0yb~QfCdDng zTF>5+vBw9v%f2L=e zc}pYABAozl5N5vSl+_oyD6{oBG+S8Y#S^fRwv>kIz6EETH+*lL2&diVyp&DE0bF?> zY_(%yVjjGAIXPHId0Ef-&sJ9VWGf=4?mDf!7>E1%k%^L1AKj?-`V6{3C<|z%*@z#9 zJME(14TBAfK_$!c20c2NlQ+J$w^LH4_+w>dB=GVte#V1Oo-^$i{X26*Y-gH+C#B>d zf4Ce&b-N+QWoL87PvhAi4ehJ2f75He^u3bE?rC`1xPX+TPigV6*#S zp{QVPOkkBBgEc~TCJF}4=3s)Qw(^Fj&r!;*YYcgS9sqkN5!i%)JQ^Lr`1i#{Zxclj zaWo|lLW2gYjmBe<7_CZsdW)4&uSY@|g~i2Fr4}SH>&?Jf4}BZ!rC=Y(+YVFX zGkb#&iE|mm3MO>8E7SKZaUX#`S|=~r=n?2>?tdCy1BGg`snjQQ#AnXeN;5TK@loX! z8PwbU6M*rXgA5TWm%Z=I@n7gO2qgT+kZ_^O&qZ;%&ih-?Du{a~^ykj-%@d=jGP}mk z#-EyUs}2dExVU{-K!rVU!?rYWug!k!IOW%e%^FMQ6%bRZsM7 z)bQF1Mk%y(Bq&m6w(NrRc)hw9^jJbBumdC|chCgay;+cN^KM-Cp4!(JP4C_qDGhc0 zLM)8#9TM@}yi_XBNDEA$3vvU69k8%yoO;HTshgZM2+q z0O9CpIEa8MUls}f8P7zW-MX9^My}cva&W{Q%Fqex z#y{j2jXEFZ4J;2wxlx0&eAC~r!at;L6Ww)Bbek%d21iCl24Ix=nS%rOjmgv#JaBnK zHoFC0jU@xkl*!r<eXlO3N)`d@wLS553Ic{h%Uj8NT+9BNB z+rBp0_CV*FZ<k}R-Q1=pxyq~?(Vi*Y^Vhs547NP+L}T|9zvh_nLP>7(4R7Lm&*9u zZ8fJ8HKqZp);WC!o++n2)aL(3WmI|AlOb{ra=Cc|93cY3gN(B~+8tNpzr>}yWIk=i zH~HK5?-#KEnI>ziM#n#~ITQajik(9zS@0)-Rt!rG4(bZ#khsIm=Zg{Y z;nn}GnHo>@%~{&d?+8?86ZqKOVKujWji^tlvaW6?Q=Lz|@FhqbMnQpGh>O&BF)tl# z{*R;jC_`{)=tbC3N?+vwZNcaq0Or z0@Fa#G2V}-6ovMuUppB6i9y#f;l}wDIKhKY=FwJ{0b1~}{2Bs9$<4EJ6xx-Xb(>;< za)riYfbbDH+L;sG`ACuwygFX(0;`NWU)$^ZY_&2J9E%*(gS1@UTBE2}&rl&SBUi!+{!Uq2TH3h(g%RcqMTNE&kvQ|^ z&w03&oMHEU6at=-o7?1#%$iC%OFY%?T>K>n%}kW`apnPH*W$foRi}P93g~r8bCBXc zqKQkWz><@)&=IPX<-PWR?cAm=hmw_7l*KK%;@CJ!o3f81a%oguCh?p(x^H41$qo#E ze}7v*E$KwRL|C+-u(WHHt|Gh5u@|jjQj_r4hG%ro$(`m7L1F+wtb3qFX|wg*1FQZ_ zHi2H%BzpG?3lXX}6xKLjKE308F)lYue5Er=G0F9PPMo9^uTA@As=!4Ue)e^qzZ2Sg zv@=@#`TU)2B8gLJ6VcjcGd`yRKCHMa&sc1leM-1p%OaE~Er`tRQSQ zLbc|E_x(}w#wg_TO>X9v%wx%G_M2I~?&~7{Kw3ibt52e?jApX&Wl^rXpBA@93l(d; zK*@&Z0&UqA?Hj&owG>x-6_C%7Idir)Rs1#u{;swE#Ny#q)I4VVV8~Vyvdi^Mf22#H4+CdFf-t)k7l3%juIf z`%mpFBnP^bJeb;p`~KhPn^4eqT{Ce#*qHCX$)2goVirz(r1+WcMBfBQuQ2ODTia$u zq()?~s;6JMSk) z{P*vmi4CmJRJo0&s7-_YXjw-ktKCIdUt?9`J2_v|~Cno+% zc*8CP!@TfEz|a%mxOiqT@Ur|j`Or-7O+~CqCKi@O5R~uy@)!S|Kdq%OMHcg-eN=DWA=uZ@W# zv|{w$pXg{(cT9O2;@XI#uog7YM0foLd&QVwu6zUuF@AHYAu|26LL&&;KKp%(^S-m9 z=G7lM)feR^wO@E`(S83^2?6jST9$TDjR$dj?x5OnXhl!cMw%qM-biN6y8GXfOmW?X ztHXhyj(Q@ZnyI4-b|zb_U(FQrC7#V+n2Bjdx-osIZM_@8NDF38g8fB0c^D1jq3S7b2%2B5h>&>hDnnvk3pjqt+k4lPrU{r ztOEc1fW$xl@Haw(82%~i=vLf2jcXUv)6%HOnYXJoE(-E}M~}FwowQGRXh!JN%_4Il zITO0>r7dgjC*x}w+$zX4X>MB~^EK=Z;-=STy|?1x^;`r~^9Oht^IG;K?M^f|3_Gu1 z?T;HUC-NSAb?HRNLX9{yPa{Y7$ZUTe8P`OQMtvm%$q|Oz=QGKWY2t#MiGF*^=Pk}S zG$Fwx4wG(_Ag6U(fk>dTMXM@5p&UAeEWBW<;rcu-=`H4@bIN`$osqNie^G_=v96h<|A@sBlMx0NSahb4QL|Gg+PMAm zdyTmV{6W&gsl~iBZt9v-^+d_m^+0R(q#ayD(aP>75FEcyA>Yc%X-3BsR1)h}TArJnlfMGS z89%}1bYcPG%~y7Pgo{p0V49%hfxs>P%P!XM#I6`gMNo~SRZieZ!zMwGmOw%(lZ#ll z(Y?H=NRf?_CGU0SS+J~(im#Mt5tUEqDR>RT@-k3Jy5G)3fXz6hcOpB35H+plJN=p^ zKgi*6_hgz01f?I;^zBuCId7q>^8|cxM7mPRHcn0@Ulu-p`a~)xIVVPe7-oQWMdg=; zi=TkF2=1$XVP(wM)ya3NbmQr7<8Aco+36-aD;kl#avZ zjHayWw?W4r1KC$zSi-uFd-v|yt&NX%z9tV;TfMGOnlk`0lc1=2L~wa+%suo=Q)0jA zwFR-v0FLj6qn*TxdcATjK8Y;}U1*G@8xh^fm?Fgk3;a4&AgEe$FFvxY-;&qGd6{X`%t}xg zgx<8RTtmgsQh`Oi0&aI>p58(KmnGxo8PJYj>Q}x_(d%D>okfeGh?bbYa`_ly%Qa3; zrJe)|+W1T7oU{BI{~8BzRNTqwNQ{%zp<2TPLHU-9I;S5G3Ze;?$`tWcYhAj7#m&|v z&4t4m$>XOC5_SmL>Z;y9g|!23F)=0AjZGYvo?edG1aY_hnG8CIOS`vrs4oJ zeuY(cfp$$VkHvlUO*UOGx51_9zIyW1aDji+0=Zvl&;Y7?mZ0Qc#=|*P^crfk?RzLQ=9qkts9tdHN*6U?jwykv zT2)?2$qQl)V4^*fh$zxN8diC3Wi`(v-0^nz@ezjYe_RCNk|q`w7N(|5H3PU*6z;Y4 zRaHAsJ1*meHK}X{4Z_#1;c>EIqM98=p}CyP)4Vhh{k?Rpu`E(W{U@!<+ge&$+S-i8 zaS)DymEZQ2I)xgHj)WAndUw+V-QE@!vcp2SJ9p@R+aiXpu*yt`E)v>OA?Qe^gMgCH zuCubTvW3NB%59eqrKNqHM94Po-)3;0L8d=ur-JEmP~4RcQ$xhl@AFBo!&(|)k}%;%r)O%Ni%si5RIFbjt~$MTHQ$Hx6{6R7ZIX_ z*4c2$>@N!{tZ@PbO)c*58vt~@ReQVeC4PT@-z4ZvK%cUz>YSqh?DW`#nVD+^Z{7&N zE+Rd>RLSf|v(H#yQ#{8D>0v7bxpOLW6us?r=P>Vv1DJ;m&;wt`$LT03U!|o*LYFqm zNnWVK^;6Rp0rPuc3&v~QArc!`Esi~=#FJE3#qct299?!Rf_WwVy3WaH$ z9336W2R^b-#$wy|ul$BK5SMCQNW{f%$RjAT+Pe3VyUJvtI_{Awg9+BiDBO_oO z!-E)xgH#c10G9<uFM9(){ks zJqGjIcdq{M;lri|ClXF*UP?_r-XvjGIVK9dsWtZDVPV;- zyjjc$*XN~cgTuqHV`|9y=G%R&@Uk14MJWPKS=H6IFJCqSUqePlHoO5r*HIIFJE&aG zue;X+nU7q_U9eG(5;n@wDH|9VsHlkP zm_z%lJsE~!9T!amNBj*wzH=n8MvpUNenLirjrs9|*%wUkBOuk^r>Up6<|uH5kug~8 zGRR_uBv-2H$O1b?+hu@(dN5rCs_TYa3GOe;wb^;`P&oX_Ye0R#m4Oo08)9N)4zDI6 z6n`1kqr#OgQwOgB8o{=c2p99I57E`7(-*>}x-6KwKAtgf?@-E85xd+;%vF zm}KSW=a-kO=cr_+ng)=mC@VYtoR_JghLEX6h{meM7@b>mM-;nWiVv_X7nron?RUxgb#&0^Rq5f`YJL^2(Jfjstke zoT7;d1PZYU391bu+~(G>3ti?e*4EZ=GthzQyS0rCJ+YLu^iy4qb{R^;r?Ben83hYq zj(b9bKNr40i*=ti5fV;!Y6#)^3{OPtjXMA15jMoEE(Mh9@}8TtXSHj7aP znZ|_61Q+J~`QSNnR7PKsny#)77<_hLLUiKdsySqaKx+Nr(T%_%kbtXVLfEO)JiQ*cv>r>Isy z=dk<*AOmOz4p}?V1v$MfD~nZZ_Yv_Q`CwKhfQ_tM!aH1D4G#~O2r5E?pgI-FaL4O# z&u#P>pc2S^(DyT(=JZ%3i@y!{7ixSV!VDLIPy!tR?zMRe$swQT%2rm(yT2B%zer7u@Jqr7Pz6(fGE}M&TD=fES9J{5+!kuUZt%}fo?!FcCPuRH z|DK09iv?P%;pisBo40P+@Fk(|3Nzf5Fe~&>rjalY6%q6g5r+nKw{C51omS$xzMg^} z*&G5A5-9*ZcNx|PU;SZBS->!iosqeC@@f>WhP4_4_Y<2ap9^cn;FjYMQf8DeBUFum zN9cRc5#Z1y1Ut3c@?R8k59gnTs12Xpavup$1zG_xhkzgk(Nl-K3TkRv6Bhh*y)}aWZ0HJrb7bX-`^ja?ksDd z&mORq7F%~`rvz*$;VJ?j0~pwgh-*CsDhN<{XN|LNeSZE8Co!UH!bh_LcUBRDejIb# zz|L+Bl7VG?or0kv7_J0<&eH5G(ngy07hpS4K!>Sw?F3|op3-Nsd(2CHk9HR!rtxw>c!HpALJS9Q#l$4R5kE(TvndTu zmqjt9cjY(y1)Vks;slfgn~=h3AXI3#sKyFRXP=synrXQ8ZR^7e9YYi-` z6$}Z;V{8}Z-@H(Z0-%32{_aRgGyi#wRA$$X63+#@xP_H;@Vds-Z#T(xvHV zENOSqpL1Ox7>!*6z+2W%RAq!JYe2`Ere>ZRD;U!zY_efSfV!Tc!EBLTe^vmCUD08S_q zI@qBh)J6KAA1!$j=+CdJ2$Gk#_<5_$3THn1dgRPB(P=1>~Pf6LY zXC^N%Z)?kDe;vaR6W*P9Dd_EH2kA^VK-75qmNoG1d)pBnG_hg^k&d06oi&d2(j{c$ zK8A3(dvpwoQhy?J2xqJ6Ak#c4ttY=8F!=9!i7Ov@g{W=Ov9ecFRY1QhMeV-=sxsplL?9AG!~x{^Rbeo+xmtTKcGK5j-$$Q-)5%G1$Lkm8 z9n(aFP-9bB@h2C)f8V?2u9VEr4oP577>1#7#;@!2BTY?B4=&kuk>Hg>GUG=@Tf46qb1qv|NQwgkf&r&?-f@h zj7BHj+8ptv15jxoI*D;dO+n^V3V;_@mX@UD zgdHsn4J7u9UCE)Oc#wIVpc{%cCM?fo*BWS6g2d$7x#y5q=H=$jDzG6`oG0!T-dI~< zW1}cw4(B5MdTmWjsavlgf3lQ4hcJ_a$~2t^R4Bom66Gr(_}2VrUcrGc0m(e1|BCM{ zS*Qd03RTDQRr8F$!BP(F%FpOm)IUBB6Gwft1mT$frbOR+(m7)~(6Vh5k3Sk_%+W$m z@~t@V&T(;Dy9cYQwqWXo=a9DGA3v;XCm6`duf%_Gntm+PU8y?uv?OecXM!HXYT`*RA+Oek;y zw$O;bv=r@1K`$6i;Huy=gBsUmD7Cnj-v%HHO%tHnJ+6v{stVc%hZ^8#1TCc}J_-*K zE6(fJ$--J6K73f!j2-ao41F8cEo!0=2wJeNY^2nJg^B6X4hG~N1ByJ5FxM=Ebc8Pt z{(*$Sx%!}_ok31cE=HOO%@8=@oE)$putnP!19hmB;aY%X5L}CN5&AV}EL4j)i)u{A z>psg~w`-2iAwh-Q!Y&1#etCI$36}))OaUH;wUSd&QIV1c!rb9#8^PDAQj1 z9Cw3)oP3i33kf$6NChvr4O;Da$Cj+rl4{U?0AWrgUtUhG+2jI};2AE-2x>t^nKpG0 zOd)`jYp1?=5r~#_Z-7`WklOv}lXRUcW(-AYd)V{mu%~sbzyBowGUHZ)G9bX`=o#?f z{%sQ`xj%UUZW?F~pw0n1=A2#%On7m5G1moYu@r9uPXdi43(mVgh6?N9rzk&$ zav!O((mRS>2jVNqjMfAD}*a51DK_cRVQ_#F!7EP{(M zX(K{|N(!v?SKtO2y39+fC+vm0gI>6RI0~3!i565ZjazsTL$R!w{1MySUshULRK%_* z9QY`>nb`%kV86Dn5H5xxcvp0hP!fZzB}U=Vqg`mt(gk*H$okv6hrGUfuG_Xa2nDXa z9NZEH(6sOM2OWPROd`&I;T|t9uNe>+xp%a9olEW5f^ zCc-7rhRCYSUEey_LE{*B!g?fhn971zQc{vqxQS3j0o-$ODZP6M51geF5i>sg?h~Nm z0<b>E=I@;{bG=(O44FWyJ%_fBG9SowSZ>@6%~JWw&oy% z1?EFZcncey*x?i1>V&r+1(qnLW*>& zRn*n5lHvhiFS!ZW^M2(UV7wIbR0}mA-X?4=ZTlYVIMwT?CnW5&P$)eK4W0W#jWBc3 zO`}ga6Z*fivzt!>w*a8cT!%E+SjV@8jZo-_i(}ER4_e<$`|y#96+-m&>zNT;LPE50 zjTnZyHrCc3wAfz2H4F?CNcxD~#uumj;6VUHJHwx-M?fx4lL2-H4;-QgY1WW+#It9x zMYQcJ7+CU%t^0|heW(!C4HyXoP_LNh(w%Y}Q2m<>U`Di0FbymrVCF}gehh`;8v31N z0F~0HQD6oq+6qm-Kq9mlJHe4PQ6XG2H~IN%bc-OH6*dUrHsYcJ;@Ij0kOABA1ZW>f z5$Pb}xoWMz8H9z2hl+41L+qhoQOp34k?_Q^2Z*dqJiPIy_oXAY!NI}ymC5!ZKxv^h zfAOOfb0POM3AQrpv*mAZZ8d|#fG3;N1DI!HQvlfqa00Z-T$e$)$bWA+&lQ83jI6|Z zi1p<82_ikv&yV7Z3)d7fqSC8%SI8T<9{0JdjBnf@6ZItT+X^s2VwravvCzH$cH-jV zhKAFy;?z>8MG~^>)IQ7A)m0*V{Ex}kxVCzqp&4`6^$IOE$VUn^3Y(Js5w4NxdzS%T zGiJObC4x}q3J_!T%`3Ktj~ToWL!J|gjL<@biUJ@>{@b^Z@xq*WdjS^0#m)6EbfEx$ zi)LqlL6rUb<>WH4pQL_!#t_h$DXtzI9wu@l;;w)jBO@cr%F3QT#S<364d_6@{)-9p z?t>tP@DKgqdtZ`^q^GB*7WP@b$H7El8~#Je7@aH};CjK8IyzbHB9*U}g?{&)r%^NP zBnMdvJ{R%@PPd?-VEG9A4MhYK7K+IT5)e~JKpe+|`hdHK zEE`KpsM`bcNxlxRcWrGALK(1JZ(?x)pTQ9Hz{kS7mtdbnxW%NRosPEl(z|;209`&z z6jLagjJa!I%TIeKCDg&i27ALsM@O4Z@){>b0wm^%e(}cAQm=LSlKwf#h!X-M_Qb8} zy*CV$W-^9dE8#A#J~pJsXbbk2<3|p#e9)UWkhRlp(_n3aqGs)DxQ@R{G=@73F5@o)R&4 zaKb$RNCMNIvGxd(M##BfwHffzT+e2@A-l@pg!Sow!NH*PATyMbl7fzXn2F$LK@xMmM2 zKZ6rpQpt|ep~?bg?(5J{UkLQ~2MbytT=_6Av5Y+3p$>lx#sp1}{rT?ygiG|VUOi#d zNoOB#g;mT$=>h6q6=h{i%*;in3>>o4V zIzim$t;Xo3EgFWe!KR?Blh!_GW?>N;9BdSW6@Z_cpWk6zf{lxd3!Dt;nYmaf+(4*R zRwkRc)RTNGN^zu223@b8CS3G9`8atr9Vo7;r8WE?0AL5{)%ol`X$zGcm1hiJ3}62T zjRB+7*4|EtjR`9YP!h^|dJ0n20AtX-2rw@}f5!{%ml_i}yLOpnTR3%<1UBMHb#nam zP~zCWxW?4{V7$S%_T4*qHcE?AcNB9rRc6Be)(?>;X$TQ4N@=iR{uGemSs|z=rhGJs z#P;{EkfD1dm%irPiHTuWm?8lTGvCq2tto$|(i7_(E+7oZ;A$q;VGr^d92|7Wi&6MD zL4hKQWF#1{%lB}=$?WWmjG!+980TLWCTom%U`(+u&s73&Bf zJh*bv2L}iLr?QUDKFp)S zoRLlWC=86rC-W=7*dJt486H&y0PL2iRVOG9Up7tao)m&2*X7^=w&);IvjlydcCLPa zPcDgPXLuSb0bZbEC9Kb(&;r*)zb7@VgM)z_0ZROd2_huVJA~=zNzbZlICup6a?L#a}2>- zhoTcH;G1U=#9jbTd_)Yg`!d`xrmG;wg8UC12Ldur{ep#8ecBO}QnA!e3O!dS!%E?2 z3y=VrFvV#?XFsb$jL4g#D<(ARKs!-2ah(FInP0oWrqM*;>RdqNJ)sT? zY#Ij#vBP<+TYVZ{0BwOHepvVwh+60-m?a=Z46k{*a-O!5I1A_zvs4m)ch1k7qL2Sl z+&tM4K7&{Cl=GaYJ;S?-?gpg*^U~$!za-BkW`7$T-(YZPnR1!^^+=^;QRmII{JV)S z=q|_LEro<>Tqxv&wXL3VrOoTk)dD4iz2+|S*`m-0qgkkZ{=$WC%Rftn9wZ%JA^&+_ z%s!4e2>k=H0zwnIHx%-;Ad(U9Fz?T(&4@nYi^|`nq%6{eJM-lyG-wQfMSlEp;kQ;=SMR z!?b6!2fx%W#|Tcb-s9aL%)iUAc<>gpJ7J>;U!Y@^myFMx{C!sZlh;1;kyCAbec}2i3k8M6<|ejfl6N(W>#fc;pC{zC2ZZC8 zsgEoi@^mq7aEM-aw&C{x1Gg`Z9aG$Gy8? zt*9@gi?NTU=-Apnr;Fj>mXY_^5Z3Wl`;(S=spF&gTQem07pw$sUlt>;NW;+aXf#i1 z>9qPOLC30;(q;GEy6Z`m;~_<0!5VRlL~Yc;Z&Yx4gIuc1{=h?}4qj)Ejk{9u)!HtS zDz6WoM@t!5DX8AT(l%)>K5sYKMw3x;wti)(X{eIZV~srQbxZnenRUD1=2tPZhk3{>rEBDBZxf zV16Tx*`t&UCyxG4L)2UU4aed1PY0pHRh~-g!!NGn$cGWQ95XuDS5u#Wz| z$ZyYcyZyDTirdenYf}$$-}3nmM?1LeQsQm*+@xPC^uKe^SX*oR>wDfrrLDSW)yhY! zx{lrAdkY2h#G#1|X;+$?Uy|zvMi!;{J@VpHxB1Z=l5)V_pJcxG?bfdS^Dy`F+;P5D zcZxW+E5f$gK2^Gy&PJa}FjNm$teuUYq}XBwb-!{C%|D|0^7}p6+@6

F?wpO4w|# z9_&7}z$c88YVTeTSnx7|7)Yc!_3q)mc?T}_o~FF;%-ulPjT+G`B@X( zeXn+?!gMib20)r!+4l*qu~$ z<#49j#hgW3Z)(~3R*ZMjqaX4O+zTPh21-AdhV6MZZD>en*#WmUOW?#vwLckltj4bK z!mW9IvrEltfP!&;OqGE?=cdB%I(8D;l0N5OcvdT}p9)Q~WSPHZ9H7GSJW@BE_j%OM z?+#2gIjdK={Yjp`_%~MA_EUDYTJGXu7kXur{UdDqP=}qsv5O53!hZA9YaX2j)z<8R zI*;TpJ9_I~;5^ve&AX`6#CSA7(OBnFWb?!hv$A=SzA9Dqmr{Mucfk=Zp9qr1RO1Ln zMlpL>)XqgN66 z`t|Y+2CdZS1h&FN(v_M__(|A=oPBqiU!WQne|%B^fFVq-OuO%dT&%j|y*C(d;N$nL zsWzVD7-&577o$ySp7hw6PS?>X8n0yY?YJYC$8x_zMjU7d{P!aaqN3;`t1*0 zkXlcu+-z7VV0-0wV#x4m`8u~8R~&~Mg||kOL{m!JScJ>=L|fY)>RF%^oC>h*HGTdR zUsx+l>v1I9Ti-f%valrx9GgiN3>@o@tY|(XO5h~;P2|-=&He;}S;=^Rn*XU^X#LDs z%wqRfq18W+2w#o+ZajbUhN>ef(m8k!&YQ04ur>2|E-ca|jRbz@+=t_pj*UdLzClnYBx2n`NTVas+PjStCzj%^Qs`$X&qQ+gCO3IZJYJzwt4q zWc$|<_pJ5z2iWd{;;#yQmKt(MEa880Y3!VbB!+Z!tmw0iasPHS>5&uZx4y}*&P7`~ zc>~ouY3E-k_oe9~2~C2dItxV!!Y0iAUmnwL>zN$>T~rJWeh9zpnursP#kqj%IfXfo z3^V*k%cza!xO{N92nq`|BM-{IA1F<=wrE}Sbeu@_$cbow4HQQ!dSj*`-h`fB+BwHN z2I<1a8!M@eOKGu*rMqX$5Xa&Dnp)c#vKJ*z8tc!i$QJ#DHILUijslNzZuoKA{271G zb%cY3ItMie-`_tLdb#9&ZpYFlPEb1gDiuV82e4BDbLf9z5cfiT<|!Gg{{ z4-Xv++mzq9d1Os$j(@iEzkgBSE^!KrXETv_fRKtt#iU3NQr^nSuK&GK{KLzu=6jb? zvddTA0+eFXT#`8+^AaB;!IiSjTnLE+HyZOy;SC1k3 z+rtB9$+tw;8q5lsnyEv`P_YA}US^IN{@vq3RcDNitFtN$=!I627_QBy<&d!HY-QX` zYwW>-DGPKCYCvzt{xc~$_MJoE-5-s2tl)*-S&SUp(EUWBi98scDG5n05g@rq8i04-9GaY*CBm1HmuDsoy#xy~UEy_ZKK<0{!AVFsXNrMDMgD;y z?+(O^s@$PL#C^Aa_svqm8O`HVn@IviCPY=qM$W~+q4K5(cQ?&N*=b6O`SuOnn9&Md zJ4JctyQK`{>)_t1<)T zPo6lwMFQlcyyY}CEnJ~omlB6!mz=3>+q>AEiceVjx>#FokP;Q^HgiC7co<2|tNJX) zNNihZ_3TvI!OyUs2pPM%-DF{;>LEHunl7kcdt1lMtnjTeps|g2s;pf9Swxu5`%Qbl z2F!rW?E0>W3I0T^sy<%XLAQ+ z>}VVA+=g*D=5oD`*A-Au-MWDXle+L7CiM7aTH0Ezh^NK7qg^7VU=a2Ea+HMReQ#$B z#5r`eB3K}G3t#47g+cOdd3jFeQ2|_nV5`5~^}hOA39Y{{5P9xG_Ab3tdJP-QIi|Vq zrEV3zdma8h9u*=?OxtPu>*Dd;^Jb?E!NuWnE7!GSprT6P zztd_wqon1idbl%@*y#5&{?(0ms104z|Fu)M8`jLY^y@5gixypXDe9Y?WG*hcJrt0s zTem4bu)ERBc;y1;LrE=6#7DQ@`H`a|S0J2KR*$`?>(T>gB!&A`)+*QhY!owLG>OA! zW61+jOvdp2%l5Bqn9J)2Zsyy;ediMN!9qz)!`3|1&Am0>pEML-1Ujf5H&6Z@>R=2C z3PNA%Xj5dfuW!=0@-H(JGjN?0Rjr%!ptB6c0;uVFO@DMNDfvpO$bhJ7SxD)`7Y-QX zr{DIr_Y?@!87Dd<-v1`5WSv}LI?}(;Xs80*z+E(lSk)GHBYxaOnE4ki&Jj(I&w$xV ziipWqc#E4*PC$R9k=sl1(x#7f!cn)tJC6;++EE6t9iwm2EGfbWEWo5^xqUnM-kg)m z((8(;T9)$qzYY5Xuh_!E!+-kVA_;gWpCaiIZxg9=G(mcVzFgpszg_D1`|c97+#f+# zb87d;4H4ib9r3pZ9Ysca0X9SFf<_xF^@rU!*LhX( z$1wvM;b>D8S&k<|jjXG^sxyzifDJ;KkW=eD3bq*lGm`&y%BT^1qqL>g&+T*T^p zRvLwWE(do1`8u|)yV=X=9}kfOj4*)OkrNl0b^!PO)4(=mXlRad)A_&sFq(uqqWdGV zOMEu!X-aqFo)Hy9o+v;4u?ahHj&{raW}S0*NLKkttkHIsRdZz%73A^*Ps|y4Tz-_y znE-K3{%JbU5eEt$mEI|)HDj~d6M7YU4oYylyyHbksn4%<;2@sMOP2Bbrt3-UDjmcoxPUZBpd$eq;y^)4C#(+I z9G7+O4*CBIt}piZlOm+DIN6bY84DE+kDQ{oxJ}I~-dv@0g(?EPS~XpIwC9HJGB>wV z3O8~Ip7&Kj7xafihgz5+m`c>wuQ$?<%R|s-(uwv#o43~1*t?^npR}0vcwb_gpA81V zfg^cOiTT;u_+YXKBmmJa(svg;6O-3Nbaugl`SI<6&ELTn8%wp=0D#d_Se%{V%tBCw zGm18vNR2C5=IqmFiAETyH^Y`CXl-9dR%Kiu<5&aB4$xv}T2?N=o1%7JQwXN;p zvO504`@ci}F8#Nc>TEu~d~L-mCMLj*7+M0fhm8KR6U|g6-t4LAL1W>oLQk&C+|NpJ z5F++M%`>>T=AH6p$fNLTztF?Mcqyf{op+U$7Jaih1q^qd@YK)B$R|}8&P*J-c!RBTb{9cN z$@_hl>&7p`Ybevg8#iWibFZM^eOIxyeceJD4{dY1XtaU0xf%$@k+qa zEZ2FAy#4gXQi%gWMR`9S`}pLEL{;De_wR1(ml!QPG?j!^LW2ZRNkuz&4Juyj9F|$)6(umqzc* zF|oK*wnWnr@0T#1@viw#h9q!oN`!o?@>y=W3m9Yhx`Z8f2n0mG^`t?5tI=%(;j%O^ zj_FsZR2rzjtaBvSNp801Iqq-mw|)O|;UA|;hlxC1S+#@-w~hgekdU9W6be{dGoPN_Ef6K!?tR(PL z!$PL}2G(d;ZePCsaLSm~Wq7|q@KMV$oo<~ebr6&@+}u39#($DLrfLFLSG#!vL?OuQ z*{0ll5`&Et4UP1+tRj*;cCyI)S!bTJj1VjX+K}y;{IusD3MY_AoB&54R zTDm(GB&1oemc$~YySwIIy7zwH_nb4=%v>{bopa4K>o2z(S!?}%&+mEe_o@k-*;tVml^9EM5cWM12+@dm|0j7TxeZgQ7=y$D><~aBlH+4Kl#wWXMSQ>J0!ry z#>UJ`!@w6|AwTjN83E7L_9SH&7pNR^oh{Mtp6-f>h+ra_k;}gi`w7bjkK<%v|2tAl z82XP$<}f1vGDI?1Zx-haEo|`kbY4&Ho&6ZNDV%V)&`u3O#GhbPeP#gr4OMBG=FMAk zi5$Cl=~yjS`y|ZN^110~Y4V*7k2?m-KlXZ&VVQFs8AE+M<=@aED(2QsorPSyC11P) z^UDxUGg0x2k1k?W1Y~2{ zQQi8F>GY_d73XnRXOvm6u0Tg57OWnoC~+pzGODvz#LeU)%|?$(&KvEjGEF4lL)>6& zX0)=nEE~g3%_2k<1_yT9nD*&Gw$9bDxLdY-s~QIlMK|zOCkdU{uz$a4MZgVnpdS); z8!DXU(;~NYVNE75jni5`IQShCFNYz~dYG7aVs74K!@F62{`89vfCw}w&38S zT3mrTf%W|~-`U)CAN-@&@r(Jt_9WpO^6?K{xPSx51M$~$rz=LbXzJ>PMKkJgT(A>u!b$bId1AB!X%mMuSy2HNaN zPuf9gMnMe}{TOUnH_*`Z=nM#h7ma6%0_rgE^}jPvmg;o#t8$jE8O>H2x2%}?Pf)*m1E zKFZ)QYb#1?_xK8DE}PLBwK3Dpq#OVoUlN{xJ1nl;k8HVI;S`RQPd6Ajsi0#BtE5cC<7G$y~NX}A3OD>>^5C3b+|R8vZV0r!C_}3cxeu7j^i61a`Lm^UX~E zx9m`92`BN$`8N}bh8E$o4O8p=!x2ULAR92Wz|vo<(@TradJB)vjo5 zrr}bauAaIBS{I zg@k{i^T!RMhs(SgqYchdH!`OFAZjaE0oEv zU@?l`5BSu=;$w^J3V^-E#`2F+sWrk{-gDrSK8xq|L{mq{XGr#`fn1_--N-)RinH`u-e_f@0pnd(4&+cd>1tB5vH;D8ap_BUYt-II{re=xe z?QQ-gEf2e#iP+Hhva=gE7?txi1mU<7nAusc#&&?rRSl81c<^w_%$&}MI3V$NEenVz1n zdR#`GeYjhnlbww?uj?d-EY+>As+v76wbd9bnyrnMYx@}1RPWx5gg)~$5LaB!avZ=t z^kB+%zK^Cex+#_Wo!>=fI!!01%H8?k#6&F>72c{xso*%lnB8ud6dPjC%E(ylx?eP_ zBW!)`ATiF``J9#>*cdr8Tpo+(*`T~$`YfV8e|ZPJ0rS8wnKj?OO(uU7yeM6Pn| zlSZaCzfix$`6biCt5KOvyqgMhkigDtRCiQ8fqxT+)74t@lhHdp$HFs?sFMwz?w(3*x54Q$_8&-)}C zgcd6+f!Rq$j(PDQr^1j%*Tcc@y(wZ`EwN0jbV;Xe^ch|`@>*J}Z5u^kN(s)n9$?Y| zS3KU^8BE3xkg*gR5)wYUJNOg=_cD&f1M&3XLAir6e*OCXY0ra!zvEMvE^>#F%Ak6s z3vYrKV4G|~e`qoqd7P26O1el!R)>d+t5){w(c?WVHrGg2o^AXsIVoA6PXW^=*B_OX zsq=22Vj#bs{B@1OeQFhgV$q(bWLUHu?h5{eAinJHSCrV3vr$t}NI64yb%m5_6nJvu zZ=V-0%=g^%HuZod0#Z`gRA|g$$52gxtr<*NUJ!38!TzbJc=r;}2st#o@E=8`@7|r& zFcpVo4Ix3unx?Y2Ds~Bosf5UNxytB1t_R+631nEJ+~GDhf~6btB`*&d(tgGqUG>6& znYU`!%57@k%P6QB-!JK%SV0Id`8$3Qbt-f`?lbh-RNiB zKDhCNG2hTuNofpjLRqP)Qq054Yq4WT&BD*JP`zOCG{w+U+s=S5u=Ymx2Sa}SNmci# zmdi5NvWm&lWAV3otO+zVj+7eu`ZJ)fwbe$~xq@nBM}o3AQCIy54Szhr#-tZzheF!` zV`Nu?&HTP|F2P&jq-_r6HUb5NK; zh%got?0had$Iii_py|JoA@oR6MQXB|Ph-U!lpwbD_7P!Wroj2ss)2B-dbKW_KZMz3 zSNg_=l1^gLn_X4;Z(tIRxwcaGQx_H%fa8z=W&^XWHdj6F3rPuZ|qiCCCF8 zt3WR8Jw)Qk-TbPE)BXY+e2OsTOu`h7MKGpk&WF>&`VH)1RVMV6OKz=JSuG=Qn*=kH znp#?14e10SbzZ^bh)8RXm|FC11A|2NfVzwzIfZ~wA}xn}e8 zE0?Y8%4O0+r~CVRN1eBdhgQsoYxa#CMoNPku(7Ua!I@=U>IBTP-p+`nR0SRJ+OL@Y zo%WP5SG%12dKfS%1oSF@VzR)|<&h*#>U& z0$UO!M{^A3{6^`HONA|*6NEA0q&@eBfNP%~$fz$`&)ogl%lCK{G@(bk?oz`wPQ@-o z{jWT4-E^#x@O24AJdx$Ts<{F`4l!85^ayC3vSrG^vFKDG`}60A*uxOIRGS+rl%-G& zK=3x0*-f|rf?d1AQ4h+`AewfSOiOUvQ9*m}K1627#`iS=V>ub;i-Xp&^kx^W{+-gwjpCQNlPbm;%@8&h@%{QljQ`fk_H77j>9*_!}c3Zku1}T5SCJTv<7iHq1U6_-E8#MfG6A z)D>E#BqQUG7Ze*BN_fvaCL$s|Hk`)4tEH&mLY3>|;-NFjN-Dq*-K|k35IqJgP?Yda z7r9n%p|KSqOwo*V3f>$vF4fo51ISYDu)z6ntq~u@C~-k2NlH{1Z|$XbDW8vwiBY`HkUU;3&G0nx|)bxnDEu2T2-|KVpgc*-by~M6NDU@4{&i zJ4*>FIIP+ykKHvA?* z2!qBTR7Y%%`X(F=c{qz(=NXp_Yznb06En)Jq7OzvM3V3GP%TuUwy4M&!W1}MX>Eq3$kWnV&cQ@s6`o8dEP22?6$}GO%u1srITxGWi+7)u*IDIF27E|_@65BdzqJb zSQmdmV;IWvmwXTv!LnSx!x4nT^WNV1`j^CnCRZoU!RP^FGb{g40k;EbTlt|^CMAk5I>B)f3^?+u~7mQ6-+Ew6v6Zij^yuoxw%)1 zs$t14{?#JCM3>yx>IF|2h@7-MzYdkqtdcv&Mzv0Ww*5e0y z*H{cPIQyJwn6oV@|G8WXHH18N3ZG#anlUaU54S5h5mA}x^pkbzG8`;w)L<`ws79r< z(uwT8m%eHDNSHwpwgWjRWO4G#3n{>Yuj<-;w&8k{uu=dnHMfy1*}$Ivsdp2wtzq!# zFT~FvUkW+OA=xL$rO7iVuF#Qr_rjIyME3UsZ`#(+R^VCd?;Xkhqr|~LFE}J*qnXSC z#x~90E{6;OGZNQgf$`5G~M0Zlts^Vql=2}^RgV5R8?V|mO(fr zG@+Kb-uyoF8xF6;D+;>0$CzPFS?%4gFpm{Ds1+nWrO3l3Vera#n}2T#rI zAzIZQJ47z7V!xgwnX`~I6xfteTMVD)(C^f;#aF(E<)sauij^)WBTVe1aI?O! z#n(P>01gV+=-jbyn*_;r%CfSI)eq6e50Ga%IvSVGtaq6JetN;sMrL}n%-jLlq9Y|vJJ`; zG192u<(h+qYzVWURMxX*2I*iz_TvC?9>Y>qL4LfYDlwc;%LfpGw&UM*^OeY{U0$ec zwtxbBH zCz}jMuyODVzj>`_;2EP!H#cPOTQAH^O?~k6l*9$E^kjki>~ddZE2*G$9zm3Vb2&qz&Q#@E5%sBesVJvh+=HYft<^8NJ)`CF7LUcE zDfHu81N`t}CdEjV`Cr3OAg|G0NgA9yH*bJ-X^$Ht*jozXE{z%l+e?MVJuEz(K=1~B zhsSVMYxpZzVK~ccdYYC#wxYqR=l?j3y>d8wfN zN=G^L1EGUiVEX+%a!`k`|W0bm6{O#ntR{#A~G)x5`q)$F00pDuIMte zSdXL9f`VsHx=yC%V8p^*(2Hog@9Uk~(THu>RSanzFDS>%%eeIX*eSKilABIF6_8ki zu?$l$7@F#3VIafNWM`2UvyHlX+>9R%FGfEq(OQQoM09eRj@4-xD7(RMJ^_``NX3u6 zblWiYo+mk~xv)LcZfowjj7w-4)l-%oFu2>Rvi-- zWt_gbkrOfC>+5^WKMCgHTIJ(zqE3|PAT_d+-mh2qhE%7x>;)`H*|5E8^G}9Dt+iR| zT%2^TYhS>spxRibcj%v|hc@fp?Dw`+C^`R4dz`+`HTiJuMCK-zX!e-4h1G6_znpjx zo9_4P$RX?LwIpE=k31n-T64XF1!yh>czbVQ8t)s9A|zsbqxlzDKeET?;!}%fYDl5b zO<(PJ%!X3W^un1AMxYRQqAFkmg}M+dILM{vLr!!xjulbRltS8lOr;S^$$~LuNGX|@qS!be$S{DilX9Y1X~6s9-i`of`Y0l)m_GE4=9~%BMcJVln5uMz#tuC zYkC*9_q4o{EAkeQ)(xRy2#gkS)E2C;F9sm4i0^-|FB!n;W@z{&?i4ct$ALqFxlJwe zp2XreR4Mo>=;Wyk#+W|hp&1T~!+2X`X3+Y0%wlk6m zw`T1du8;w^cmRtPAm&hUHuc?ViRkP*DwTQiS#^uRIDd z=&qa$;3wWt?!dBqud2!d#O8l=~AnDkkvR2Am`WCIaVE=8sW!Yg2vTMWCC{&7Jsy)Sv!%fLXiyb zAm|Ge(6-tWX#9#lK}yva$N|9c4!(WdX8Iv^!t9;X(R-*kIcu-l-Tsa+7Bz1s-8+cNT(!E!#h|9L#QBqbu z+_H$!kdpArD}SsMhIrAnK;^*Tb$d8C_vV>bg6q2B4x>)9Z*eGkq%9r=$jZtN^2?2u zf7&U_hSnRW#@Oo(tE(YLof5O-;~KaTcV%KH0QvA!l5PwW12MMmQM7?>gvkq+W;1u(iy+hR!gb5@z2>n6JIg(zgpg0p;}zp z$euBi=#0~8SERj1O6ku3os{k>L*&Ei&RzuZ+EC5@lu|^Z}=Ros?g<8d3mZQ-yW=72{qz^C$uFlO=u@2X$T%~Y*qX!_NXv0G?4dmBRnEDn*c{aW3TnKQ~x@07_WhMMm1ED5ofp|CZTU^ZSM2;EMcU@i9 zFM9cS+8~~WsU*YVbFs_AgepPG3N9@^t=;{v-mPB-OcK3){5PjYnGo0ROu@`|jw#7% z4fhczYnj`$L)R#Ef-TOV8buSMRXIA)F%dmNho8fiFR;Gt>MA1?!!Ix6^iuh@s^NSJ z;Z9Ak*O%12wJ#S@sL(+Q?&Oqj*IqZKaZQ`k?s9I9a8Hpbm>X`Wy`&)bu$nvFOP-9I z#U6QgQn7UEys_g#{jG7Tw-AlA$dY>Kez8Tgy^}gM7eQ4X;KLBD{(b|Sp4*Np-Ky4?8#ZJsl8R=8MERU>G#_?4A1!c8u}b!e{t%eY|w zfp{CP8ltR1LPO@M@B6qp{o0fw?pB*5w0I2UN;!H9{yb5s4-ws=6PobZ80h zOF>NoZh1CJzXBr%&ugj#$vOuF9}G+3@elP zusV|*3)4M5CMHv8ZG>hJCg8j&?ERDe7JfiX+Apjn^eefCvS^&({(gjU>c3)PDJZ+R z_<}bDJ9~7ZY-k`LkmS?{-Mo7ft635X$dS1mLfWe8>H?=55B4GD=I-|x6z-{K zTOR$B_LN{@=}c~<;e!3Bjd?Z4yOlD9Ck6(?8D1xohc??(NlCjbwI03b_B+%m0*Pm^ z{<;o0WJCWnDZ}8rpLdW}*AZe~c3pwx&<5i3J@zpoz4PMa3g3B7t*W*Ci9oeH%>Z91N5{@F4$Mw3 zf*Hp3Iu=gX-)3%;>?|)sM`epf3j^Z?D zdSQC+Lz7EndP`GJ3Mp1|A1GlQw)oR&GDM!XY@Fxw!L<5r9hOY=6JyfI3IYser4VLc z?(a`y%s+Uv=QbHW^AF7;28}N&2o+OO2Ig-`-?rqhj5FFhfLv6CDFQ>tPxX2?!#5xJ zgI3Sv^siYqb3~Q6C-j$n70filRG6?t{ULRE^=V;#B?Q%!3OQa|Qgyo$+^GzN(^wJC zos?w3O1L&X2!!71q7=mOzP@yp{6>Hyjs0A+1I=tvIDRwT{fpdKeuW?om^R)7`-GCI z>ry0>cjaU;*qE#8Bv7oR|LM)Fe;!V83B0R+8?U%fzyA%uCul5X+N@3`CY*U?s$o_K zQenbtp^qCYzRF(v4&4@Ey4RwPPk(h$ zMyc%thrWLRuZOUpIF;i}Fb5S8WWBOH;vA0KZfcA|=KJP6~s z`vC|!aB2K=`&O(wt$Za?fM!_ERlXLQ&ic}khX9nMHh5mO)$K$S1UJbHrnz0RZGLJz zABL2DlJMH9Mht~HRRk8+WO8vzE_8d1WrD`&uZRgp1F9Rz8XxHEZvY^0!_PY)C64-p z*>FLlu-_f}QBB1ma#?+{TsC8KR1g1ef?H=c%jDDBKUiTX1_rKPL;RL%Xyy3&lzR50 zW3dTA)v0Ifch#w}SB@5Ho-=c^rSass5{UGCXGcNI5@{yVVu0-se41KKOqre!OZ*Z+ z)493TZW5zI?{kEE!>-|#@JCNTA3eO3yCU6KK9(aN3@8|%C)Gb+E@pWlSzp@9iHM}ma$sRK|K5ic`&SFR9>jy&2^H0m zdtE8iA~6jlpm;$t6y$OB%p0pdc%IM$H_5^M#$a0C#dl$4g6y&Czz7cVP! z4a?G`X#0xoE}r9P)Dua0T|-0fl(E5~`4~y0z_njYy}@~7%BPDS$ET)cU3A6V%_@`I zDLyxDQp8+eJzyUj;O`mG$wS5klMoOQ@v)893~A>f{Q^r%G;5E(;&@!a4|LQ;6C%%kxFJNN6ZxR_7zZaF0?c&hbAG;sO;4-yI(KASmatFz`3+I7 zBi3C)8?ut>rs~p;hT`G|ktr?a$%HcIdI-WhQ;V71>_2-4EV2?GNmxw;2j|si*7liG z-s%@n@D8}_8;QJfb-!$4DQT#_BP#m9*NYOD=TU>)Cr;|#+G+x(ToSLJ1x?z7&b0L*3fahX41|e36nZEo(=C3|5b9Y46IvKWBru3V zIkaftMvl~uTxq1HYf?#`GBEfuPr*G!a8FZ}gQ*{h7(*B&Bf|)#RTbQE+Z&s+-k-J* zlg|oJjuR=CzCN6^S@pk&zr0GhG)KWUK=T)|j*m}Btk>b9gt=kDQmjngqkV}xFYeO0 zX0&CsCb|kfeOf`mo!Tc2>Oq;C#N@Q$^G+T%7|L1tIp6^6>*?M@uWhFyHxo~fX2F&# zU%k>Adiq;f*l*TtmVOpiRaL>DI|117^#Pc+m5t})g7R@x6iFQ?U34YojK-YVdd*j6 zaqRL0o+u`FFoCH*nq~#JPmf&(4`MR1#kTLv-_6TCVEi+9-fYx5K{a~}s>{K_R{~wz z)ttspU6SJ)mYJ8kZiM)xV zyS*lqOUoRn@hTrBRBN)lhP+V%lZ|2B79zM?*ljM!OI{x>^eUaP;q@i|K)d7ANL&RL zxlT@>4;5<#Y)(hGM&;2af&0+N3$E2J(|xg%==n* zmnzpNi|*h{YeCdK)YaT-g9h_-cvP;2OFc9n!APd`YcwHYBT z(%YQV3;hs*T?H?!mochc_uH-TopY zJofdXC~KyZ+H@9TJG1{dFo-P1#5lxV;i@b7O$s7%X61*5a$}#-+R0=w0(C#G%9xje zv{-l%RJgF*N3`VP(b(Af2N_o@b(%yfn|+o`@plG0cebYvn3?G6U2&t#mK?~NYqA|0 zCZY=9VbfgMmw#&ger}$e6Lhq`zE>mpLbK&T+}%C=JXm`paq(9iMrt!2v5S}<^;JF; zu;|d94iWJ^`m{p6Hxt*XsKv1%bjqQ81; zPKx|k0~Dv(`-Wdv_9fajXDX7P%*GzFlx{^Y)D^lue=OqoMSzd{s7EhLYCK>N7STS@ z-VA^2^=^T3|GkQ}^ENt-%t;%JpXVhLGfxCp>h_Va)DzvFCG<#hJs%tin~QD>w!YNb zDC!kG(;VP?Ny||!NBwMP?oMKii_ErMgw%>(=&!3+@Dlh?dWjVtZ+3WGoD~Y1rswe6PM!u9djFG|%z;YY5>T^TZp>a_B!IY;!~FO|AQ^EVMsfFH$^kNUH9Z z<|*OV|1K@}Dd-x~V{G~$mQHS`NvcG2gq@L(;l4BlH%r-8^sGg~lo$f;pcQ*W!sy## z;wl+C%oqDnBJT9q#MVtv=BI@=Zz9ns1>=kU!2wn+(e$i49(iNmkQb}no~agRw}_lp z@G$ZkBez;x*L?P~$qA2hVGH~7B4mLV^v$m8_+w$EUxV!V-xu3gOtkgStKl4Yh5Yj$ z;NR#6aqPb@X}16WAO0_WaenbBRRFT=G>SbrlNPDj7uq>*>s<8j{Y$@awp=H@rbb;S z4xDciaQSpG zrzn7-Q2tMjhS86yD=-pT%Z5#nMMLR@C z{re$b^~0r0gE+|K8$aJ-N?DnbCKue|p>*s0Z^@^+0R_j-*>Prz!xxf%N_ER2W&d ziqSOZC|Gkfzi+YpOaGs>{D$7UVfp2cj*fnj&v_*PhXXXyANP<-6a8+$c;FRT^9wMb zgqpmb-ZXgAc_GkcfJwy2UxSGy{RL^|VPV&oZ5i9=Uh^o}+n3Qz8^90_)ggrpS)(rh z(1rW5y`aF6`RBc`UZujr9I^c+%aNr1tQOUUJ_+M9HHlb zQ?^wJ^t~?$0|hp`X6@y>DXb?ftbQ2>h>#mR>=vx4x7US{W0v|CwyGj;Yg}xQ& z$bf12j_Z<`?Bml=1=+yyY}4T~8M&uaham%?eDP!|xP?};sGY7omWkzlp{U4)X8q?Y zlhFVE#xwS}30z%vadn?+ommqh+Y9JeYBW?$)C*WcoZ81N4v@l)McnOe}YrWy{OBuBLl zf=}F(9n=aAkXnE>(5BLN5;pR??Bo#9a&f(|Y5w3@n5Kuy*UIO;VB`zHUJ~pMhg(n@ zU}j)&1_{|a5xL{GLB?#D=Bl7n4*DhfWfp_aOTXrNQ(`7%A|gY3PN%{UPn5t@a97u9 z5C+zQrbifNstexuC@WHHF(%};C=-~Mn%d-Yh+$|E?x|up|6Ck+@cq&NYEkU)h#7_j zc=dsiCF=NSklxSZ`k;%V_Gv-+b1Cq> z>=OZ>&B7ir5HMk8 zs#j4D7CCe)Qdw~A(BnGh)6jr7-7GR!t@Q4bESL`kUY;VVszZmX^%gmdcbR!f$;0&E z{6U*kkW4K6)<}86jB&Y*ER%h?t1fHfkDS8!*!ha<{#FMu;6#B5Bg4Cjtc z@JQqFC3?^Buhyjaz`1dd zLj$KU@SOq{M{@#2O4-}~Jfm#yGB30Z!ancHFke3EEXDC%Cr~i`Qesa|{~OU>WS$0N zzR+>Fzg%rg0FuBNoJS|?ch!dAQ9*~MUEr8%ZFr=pq+~p1XryPP)Om~E$jYLKoOh7Z z5i`vKa&eak8_XKy9t2$KNG=yt1y@a1hs#&1l4J%0JQZOr=w%3<>Gvn&S=gyP6?zyR z7Pc2Ac{9mm^=%I5!P0!dA>8AZu@?;IC^Pe?^Rlx$gQ#VOFs+uvEz;sy7eV?E41>(k`WG=)-sdt`AGAm~L`v-V0DjU{3+Wbna6u z*iO&u>q(?+7Bc0$Wr6Q)-v9!+d`;#{t1mu07X~u1_k*{uZ>aL}(@(cyfdP90i$O8} zuIt&vMrBP+&6%fN1|ZrB4=;s1W4Uo*879t#3I4b=PicI^n$)nx_LSiJvD;R!Sd8Pu zM`BN=n*WPf@jrL|uUjA)Giai%Z4_^AZ5TZ^R6ZK<=&wG^^eocFeS0?f5tC|3YiLzO zFa0x@Oa`4W)zz0pfe-cAJl&8FOl~(vkdcvbQE?W7%#(Uhvihtr47QW+SKLjl8MR9` zYD2vZ3n#eI)!x22+Mmn9$S4(X??G-yVaEA4Yka9ndGC5eF`rRmv60$)D&ql%gS zV}Y-^1PJorhi}#1I|QnwR8N4vKPS7ZXuim5<9bH?>yHj7QEJ;|LGxnKZ(G#MzVm1; zl|=(|Y3PYL0FNee3^HPNJCsbjN?V|ku&7Fa4aGSEFDEH!B3xN>9|)Jb@u8s#Fl_4m zbG84>@G=a3^zcLMg`PJG4rf%Z5_8zuo{66Zzm`?>xyNKKjxhJ|!dG$Yg<>&Keq;?}l=*DC)F63W4~ zc=9Pf%2-)7g>w0F{h1&xaeCWmaENyrs2F$T_@mj_z9ppx;mXH*W7OExo7Fc}1 z;~~E*z0$p>_MwHsr9;?wQJCK1Hf!BpGJ9T8Tz2!BfQjCJSLZ#rW&cyq(W4a4$%R0V zqm&&^;4p_f2TT7?gQQxa|A3_bCd?$){_l{UT;6-xTE~(cwMO`=gLU?@+nI4&iFB7n z%PkUXBtPzr{ZO+@Ufr3qeC#1Ken9v&l zG>~P0+rLI%VorAALKRe4s`7$LrVJH9-Jko!{w7BQ|_)rXVZr507}Xz|7CDRy{m3I~%xoRP?0p z_AiKHV2Efj|2?yKaFCl674+3zmB){v=k42q(P7pn^`Jr>?Yvuh*CH+XZZ57CYG--a zzfxb%r06_4%v8Y|xXfq};34=W4={s7j^F5M!Q&eAQIA<=7xvWB@8P*qz$OmHxu#kjuN=~3cq;MQR z)44@7H8(XCR!a!2y}w_L#6MmofCb3my!Gn$Y_|lSnF4ExWE#%YYKQSy8*T-+&JHR6 z=-})0KKb2tETguL^d#>Y{MHUk=fb{3aR@)sIg-LHGo`+L^NcwcCG$@~VS1<0I1;Is zbNe%OQp|4YRTfNIVSf=&Fa!o%6}F9DxK;rzkKX5X=j-;nXuorGn^6m~xPBe^X({#P z=(1r|AJ40FWQ|1~7vGOQ1IjQuPO*BQ%iKIP&idA=>Ss3!dZC@2fb{#X%?q3k+e=K9 z9I~Hy*d918s7IpN=i0d54kA+IGsK{CY|sq`Pdl-*{DORaA@*XXx*{*7ye7S*1nUKk zJx-?9u1I;Rb)6Qkm1YnzfBJMKG?8xONkgwivebB9Wg+4h_0;10VsSi}@-n=%e%!QN zoIIVWwxVw>$I%TfuM?@6@83mKOwri0EVjGR^PcuCIZ^Wx1oGbwR;x|XvX2w zS&{WQCY(1eLPB z6lZJI`ANTcdZJ$cF_*yp@N-Nw?76z@V&xAlC>thcj~POHWXcMSb~T6^=k9E%fqLtTSGy zZdzx`k!6~4+Fh;&C2(1hC`wB*^V)zhKQB~v%9L{m}{ zky@9cPc%Zo2D(iko2&WGQ@+t2cr0h)!f(+;X8he5#M@L<1=gYOJQ6r!?%2sCIl=e( z#$E79X`7ykr^Or21u^ym9LsTydNqoiIee!vZFB}HwAmkh-DvRJo~4wbfx~GuWi@8e zk8ttO@(RhTZe}-kX;%ACaHoG4>xd=Pxr8e?HsX+()~&efKka+%&bKGiy@eBAED9QD z9Xjj<`F@l)@Qe+nI?hy{`!)HExWgY>+wSLE5h(x`AI_+yq%c7vSI#iNo$!XKx#U*I zlz8R2DeaV$>@k7do5X~5Yh^Dh&&8-M3v=z_Ma^G(X>Aa9-QtzyT7M-A7%20U{2xDh z$NE+0wzQutEcElnswX9=6N*O@(MM*C^we1_)DCI$bfZE6C87E2#!XsbxhbzVDPtnx z_NbAU`>K)o8TsAzJ6q9TUbS5!DDVChkri4UJ%Z@4c@i3X8scQd{+vi{x1kaj?WSLq zgl1>dcb5MUR&a92qE_y+Lh6I`=GTAPPIDWdj9Bde^N(7V{@aHU^XsNO|M#CoExG@3 zA94N=d{M#WnYJdlT_Nng+Mu*rLC~}PM4WJLX%EJz+0*n#CIN9yYMT*XI8|+a8g>TX zzfAk3MEkzk*F9&_^Qt!24Lb=^xWra0&Tk%#iBy~u{e-;r_g_yg8clU5ux%zNyLXJm z5Wf5GT8)UTph-Pd1Uqz@cNZG55flNa{;}bbo}aMNC$oACeQ; z@{)ALm@sLz&2qBQ`U8cGSq{RV2diZAE8=X!G_Qul#OOn_xt?_H&3!?ovuT_BC^b?) zn|{Y(==AXPxMg#jIboMJ=+qo(<{%fjskI;jA3URbSYBh}rAd(_Zn(ug_Cg-c)!|6a z#7qEfoYXk_?aZq3-uht1IhZ@eqmR>Lupf3v+IPN~pL5VOD|adCpz0;1Ak+(P0^omr zte(d(T}$h9xm8&0TcfEUc9}V$%o@GEtZ$f@oYR~s#uuEn>0^s%wd$sEb)zC7-rqET zipIZ&?;$2-H=HaZk(>h@pSie4NGFXuk$7I2w6{VQVpwu-lJ)`NqRpZF7cDQ<{rit8 zW}dLb8qGW>Al3=K5H9r@J;OF&%4f|eC1G8vpYQhUhkll1EDEgmKv-PxKv%#j&=ed2$tL*4>c_Im<_m_L9`gDM=GS4bo2LNKiHQn2* zh$y}Mx4}ExK>bkrKCALu#i0Q_uSRJtx&KP+f63h!?W!Nn+o=%d`KVR9n>cCE_XXw8OAP#vF)Jug3l zTg@X8EyBa;OT)?gl}kBIfY06@|7h3aKxgrM?B91^e5d;e2pYQ`eS)zM7b_xi{Z$x0s$J@}-D@HS!9Q(~-WJ7r#M-7T^ zhl$;Ho0dv+C$&@38qFP|zQC6U`i13fUcy@zBN+~jv;Vla51So>24PB@ntN!w9MS;1 zN;_%Awkgsu$|!<~qzyF*b1e)daGz%`R*__X(6Cpx0Li2Qsk~+EZ(g+^J_s;=lz6|c>pBk3${Z&y56ttJm z?>~~0gAqA6reBADeGz_+8Z6R(TZ{L6z%fS)mj9bm0aEaLzSBRk+7Zd1vLs_zJ zWtkDs`=Zw^uxPM#BY{*i{~!hREv;Y)0JWA`wJ>&^0lJamz>np)tMqa4X8p@ zDy`Fq`Y@e((L5-N;47)_h?d!yz<|j>a%2B_Z1|; zDhj4afrlB?c;Y~e3I(3yFQDv8PZ!{9`NwHg7#X0m|AlKCWy#5pjjJmv z_C#Orq;t)y{hRl_vTbIx1k)oIbO8dogo5-HwVPf1q>Ugz)M)FTGJ|Ryc-*~s5$^K8 zvG>+dU2faosEMKiDiRVREe%rA3QC7`gVK$3gD9cWt)$Z3-6GQ6jndsMap&Vcdd?Z| z`;Olo@3?Ip?R+UJip`oIVZ)N-$=Nf~Gl`VE8+0C7LYHJCd`zXGsxyD|>%H*`G-CU47b6z0hEl}lGc5nMt9O(94av3MIBQycGt zE>>(T=mqg%BqJh2RV9P@wh=Eh=?X!L$}$P>dvti!ZGOWIlyT0Mvgh(|sp~zp7V^Pi z80epU#S+hrD$Kgn)oVG2gN3yUs?(8Y%ZT7@E2vN!03-S`5CiUu>LGAu6(c-m9%WK8 zx@BulO5N7K6PdAhc^G5K02$J<9SAp#Y(mD8OpHz- zloZBuPeHqBS1aDb`8tbb5EQ5GPXpBYn z*AK}HmUG5Ly`a7WE132j3e!UH1n~0(rK5N5+$pm5Fo7*F8S}OeY$5_;aAUP zB0A-79*84I^><)z0=w&z%)TaL;TQWcU?) zm;Rh7AA1_eUm5QN-(XS6XOi4P$R>@A*GiBL?8E>&7IxrP5IrftR$w)`ib*zbc}9K< z5ExydhTvH8F@R&h7hzXc{c~=CPk<1^ zo%UrRiI|mf=5xJe%VD&l`-ePuLDU5UfepWS-K33jA-c-Su!j}b7dU2)jvPDV`Ir^%5)cq9QX|G6Iu2=BS^ZLAeCgt^ zQe0!Vu93!)AnG|GaJ>KbZM!*EddbYM+S=W#gtb9r;Glg24iwX&Tm&TNO6-HQNXQI7 zJhh<61CJ~i?8J~NgtN>Ag?WMp8<2I3jE(*7>gc+I@U@u%gvtbOX%SD#U+XGt^sUR8 zNfVJ#QLyl^jyi7zCly4R*2rW@TOu8pMSd3LSOHl97$JJsIBq%+N?%oI$!WwQB4X&D zCF~3@bo0E?OLTT1B!OF%7w0f{R|0qZ%|#CIA&o|vz@l%Yk)S}E88@2ns`)^WLlDu4 zN^0C(-t!sgM3GjIO_VcGznoKZkF2u9us0c~NW!c~-aUv37*%YigYF&D=fd*nLPj#k zG8iNV>%cX5xAekeW2<2>1`sU3{4s^{TeGrpKGo$+Ok}79v&Sv!ev(Er zYmysxJb7%ELMakilgfSlu8N3x>gekSkUTOKPxu9L1sP1vl>#!I0)bdbFJ$=)Uqs_? zrPH*i^f(J(>m6iN9?nHM`Zm<@t2~v$O}iA=G3MT6vG}ex|2hX#VtSI}TcQYdstxcv zpnOlSw;6Cu`vGx0wRSunVEZkIWz9v zu4Lf-bDF#k*t|A|S4DTCQQQQ3tbI(lr96Tv3 z;1+c`yKsqf(&mO%!kstKGLh6KI3{KwpW4zQ8aEN`9-j;8g*%Dae!4CGzC$UuqVG{8 z#13YuQufDx(wc7Yi@Z9qsL(=-W(1Fg+Arg!`EX_fm&*+|ES|eCZuInINiED_8)I}* zYO#QXwpIhrA-x|dvaTA?tDG;C^b4;y#5LW*{_fpPXj9|aR@wQoWpq%(NrH>3MT>oC+x(Ga^rN35 zWzBg&IxufKLEtO^WpAIVb0lq@B;-2wO;}jx!C_)I>7vLNT!bjpHEfjSy_5?L0?xTD8*WlX!_w5dH!elnHEe80eB6OdK)^of$@! z7ztSkEcy^06%p}^Xz}bg?o76Ids*{rWMMch5f^Ady;`jf%R~%2HLofsPY2JAH1#{8 z7agXHZC6$Nc=0ID{On=ITqKMfQf3M~fW#sOi|9Sb#=!axw3G~v2zvD%0`mkV*btJ~ zbSh+ir&B%*M=ShI8Z6xiFjRNd!(UQSiST^FJf!VOYoT<|vHr#?R}RKQONa%npA9g)4lh~D z!@Iq=cn2(o^C%hu{7Y5{J+so&M{-}jm8!Vf97Gysw6oT-IDS#S;%WwP%bKO*9$C~; z5B8M^~=o=d$?e zIfj@TRcEeEmV)451302zk}!6KFtiOm(&4ANr86<*mVl|7l+goZ1#MS`h$(AW9F>M1 zP4NFIJ8MH9`b%Glkx;M?2siN!IR;M~!w$x~EIJkZ%isj9|U@tCQi?`ySa&$S~ zY@9`$hTQJBB|?;MiOFz0@y6}_%w{|_9LqJ4b`Zrat7^;qJUBRjK;FnNxbB@m*EFch zwO*7ttNtP?^z0s=)Bak2`0o1=>I4k4K#SZYjtf}4fzp|lq;R<>owl~NUcY{Qw*KlJ zcL**2=j*Bt!NrnA0l#qWa*N<9v>I9M`#205eIB=z3H)KxwR6P-n^6%CSvVr~+9T`g z>hN;1qXlV^4BJRXEYfQ<-amR7WVcQ#ICvffPrIbd0Rfrgs5=*Chz@;B;DPtzTmSh8Sf**z;M?5%XSPxiey${uI(?L0Reo?)1Uv}B&*77z z@P@VP!6`uv#x)^b;}So{aTG|!8-89|bhw+izwr@Qx~t>kwS9`-?7WE>EqPN@Qvj7- zzWg$Of);`@0tc2YE}?7UShV0sK0EP*^Yo0u9{ADD&d>jLm$j0$)M`3;(h(RnJdE?_ zhZ0Ah#xLEyOLsUOz*jtMqEO>NFI2DZ*e%Vd75Ic-i!(o?W_NjT9cYi}DFAXp3k)tD zf_(*W?p>4<)NlXo2^;4&*csJKdCho-Y;9$wub#1a6P=O*ociWPF6-S0q48|KUc0b? zXD~4aY+ZYq!G}kWe_{CZ^vJ`tStx4)TwQ1e!STrVes*X&(A0a~n^d65hTZn))sNSd zH0RQ;nBtttN~cfN@0yGhHk0KEkha{b)GaE6LX_Rree#ke`ohk)o+CK&Emy&qivTQr zC2y4Rac?z|mgD~UthF0{=0Dg@M!JJposF&c34*ZrI-lVg)b&9d37MeKC#<8t5_p)* zfcCIvWplcb)uNMUAH1pvRG^VHG+ad3fo;u>2OBRPSc}bln^)G6GtMJ#LkU{R5YfQ& zrq0fNokI?nqe9AEX1`ma{gQrxVW5vMDuHZojv_1M2Z)6;$@#+fg!`Z6yJ%Q z)tim?3HZ0P(v(81#lno0v+qb{9;gToDXA!k{n7*h=PpYkQCv8ye2VH>g~zW>EH$^B z`*d3!T`;!6)Yyao#l@H!zZB|!D5vN)@%DmtpVf#l01^wn-N_=zZ z+j4Sh*2qc`@>)Ft%A*niAsX)_Okz>35@BSuwyNf7dAg~|Vl#4L(~zpEBc9QBl-Wp# z3>^_aUtF4eyR=Jb*U|!s6LMw9Os@hF>r!`|^OlH2<^F_Icetijo#=>t;CZSM%?_v$(xvKV6qfKs6d@L$BeuNIvX&hxMSr zJn~ji=0F>AFt(Q+(yN!x5HYjyAE1!ZM+F6a*}p>Mz9#)=iOxOob^0;z?yAvXn{+@( zC0NU#9YcuvVJ8I)bTT)IwOPjR>u}-KhR7e!lY@TSX|-sO#nc0JdTNSAt{4n^fSi0| z+jysg#oq#MZQgEKhhM;nSvn|z{V#yxY8Kdi5wVUxb&4P{9I42@=d{9vRv#V~b|{wv zWO}IC-8G#zpS9mM zzHWZC@WY;Mm^@45BjW*Dj`KQP<~1k9onJp}ZCRon(5aO&+Fw%ar~+p#2~c4=K=pa5 ziYY_J!E6(SFfQ`i5p$?sut#eJ>p4NiQ@w<8TNgI;_(6~Y$oNA=I@eh2Si4ei?eT7+lnqv?GM!xikD zthtWZ0wXjWMfT}0hm1QA#oTEyxVj!_Br4jHkyD*+m^M*Y$DgG^mzy07KH+lj0@L?+ z1=p))=H~Eh?8hHfWoBbNKpv6AC6ZYdM^yYxOY@0&FKi9=HCcP}Z_3Yl_;1UoD8GOu zUDM7ADoV_TiP|hFhX9Z-?(R>06<(&*s8qVm76q9JD=?3WkQHW2O(e7A7Y$+=iVg|U zCddigTEHUv9$4hNE!rsn7SEoRj#mPRCJA`y@GFH!^2^&m%3-GWLw3*Dn#gT7OmRjp zUY?q+2-=CWyOCf;XI6#Z^(sOU^YQYc{Ct^dqic5z*ym5_r@M@0p6{+?53{@Ys$55Ys%3$sNgKQWVpYpc?(5uGRPoDSAm0`uOQ zn>8}$O#QNtOxpda08OPeaHy9=3`QuG1471=!ND!6o&p-=Hho||I0 zVXafM;>ig+BsPHYm?%Da8o_X6=0X9hh?xJ%GdA2*pAFax)a0QLo#HkGnaCzXSi2K- zi`EyH`ZK(HFAk;Xn(L*g4)4N?=qowHe;eA{^~&uIXs>^09)MnjV>{0E$S`4br!7b? zD?8g2RveNgT$MAvO8hNA&RwP7(GwJUy_pNA1~d;M&>h=j&=S-?P&nU~Sx`}vpCVgwn!=UX4$c$t;rEHIDb!(a=9Gh;7sm9_owPf6UUa9T;B+JFHK= zBtZSRg7PQwcw@*w(OARO?$OZ|*4`TcB!^&<3JCC*J6+){hu~-c+(C2t_HFim!(T$( zm{=z+6y+&Zr;B`oPrdh%#N#80-LdHCn|JRLV{8-uXXNpv5mWzIUQG2U1P1#Mnv

_t71|7~&gfq8GwHgdt|#k~8x7G}bV|JMOYt0KK%RuXDzaRf|S zVDAm_iq@84Gn86yVxm_;*Sos3 z7?C1m+RkoyI&NFkcv41nyi|2Yz(+c;-Ee89f{GrDzASrlM1beX$Aw4am*@;W+fp!iA@3_~_RPMfn%tpa4`Ip8MRvdS&I_!TQ-w zkmz`(eZ8hHrvm-s5YG(#9fCEo!GCk#Rr~a#JqyEG_j$SnXs^|tn5GC3y3P=e@=S|tK-16{@huH9d zW-?L`?*YInDju~nfindD0RfX$P9^(>e~Z>1<`1u!AySM3oUwe}R&E;KaFfK;)P|b0%tN3R0@+dZZ(C{dV0w$A;1O|uBN{)))TbZfXokVIAfqw0axKzS_a4? zLN4#I!4_7~Ws;a~0wr@=Zz;pe<^F=EiHK9D*h@{y+VPs`u8yDV5rnW8_=xiQE0>Ki~qdCwSia1G_;{6q8TFt zFpbt65CT?8NYDc062!X^az{bQ%S%f;S(!;3UZVSnSx0Gs)(#GbfzvHZ7xFI;OS`&O zSBK4lo}-E{tZ)W*v@aix!yuRbrt{k^1st}fIw0RRd{JV6@%$^gb*-yqG{v1)p!cuejb(vs1ck{NPna4f-2am2PPIe(_Jq^qxgB_QuGa8*Y~ z=Ro{B^&-3u!_{`l>{0Cs&!0b6Rn0KhWm@$%dO%AHCe#^u<>7P;3{ul?PO~eXm|MPv zdmA3p#LL0^y3px{t1s{QwYQY#d)|^C3?da`LF`Z=A7Sx6@`B<=C@N2c%qD^ECPi4r z((o!(uv?R?K(Wk=^@I?tx0&&Y#1~e{yFQnasyyQbo$d|mQ~N7Vgys_hcr7_&z#sTq z+Qwr9X#Lt$TKcG+3D7-|)0BZ|q{p(-vJYynqi$&O0M7Z%QGV2JeV$_o)YR+g_E0{s zZUQ7`ROc=C&MPh{n}zabRwroD92H{*QtmWxS$*$x3q*4A;+`)9_8N~$Rpu6g#QTJ6 zR@knB%L|XP86wZEY+-6~$E^5!mY!Z6L(hUtAiV;RVIq|pFlaUW7G3}Y`&L6pfJZXG zzdKpos)*$}L}QR^%fcRq7buu?G(t-E?tcDYDtM0;=`d*@BBFrpPZc?)0DSiwwKq3g ztmi&ue*l=b*Nsq=$2NnkoI^}PxOA5gIOIdEh?28Fz4wRzVB%uT9Y;19Ae`` z7LR@EatR_>dw(s!NpR@Z0(S!E1DqX6^Hhfu*rM6i7MieU-mz4{;5N>z0=jn~-M7Mw zJXq{-_5~|{B>;dNfgK%^BCS7#RdBj8#INl^k`6AD^r||YYPj>4PZOud^L)l&W*d98 z$9yP-7p8?;eJPoMN#W^ZL4)c^aRV>1zmRsF&@)VZVK0fAr7;kCX|c}9~~!`8%h0Bi{5EQR4ZD5=M|)EKTe?XjND z6Dsau>%5&n2Pj83T-O&CKVLbE=5Pm*NH{4+zz{-8+farBX`0N;va?B+Vdw~0T8j`o zXMu)M=V)FR70gpYcA+OKKLMLzM}LxFeH4U_nU$FBo0=8s)|)I*UP+L@PYuV;X%$%# zwGIRH5fE|F7v)OrboZ1RuV-6%cJg#}lBJN!bRXniN6~zE#>aqGP1i)c_&#{nhj>7oyH*Bw1k;K{5AFUcD9r%DY+NV&8O?7V`>Q`P>1%e`Hh z8fLsN)k!^$p?yD6T!fFskTYSS`S%fBYO&tEb!#4v%E9zbyeMrqNN z07L15{0l6YU^wFZ<|~}Q|9~)X$w*v!X=3~J&E?3_TcG~VmvTs)!TS)x$xfmVNi)ID zRA(@3TOeu+5AYyMRA6oNUiq&7RLyW0WT9gGd+{8+h-30$j@BJ+2J*`ROwo-F*}) zuyM8nBED|Uoa}72sS~J_j)cyEZo7}*8|bENjK9u5+bg?wvMie|)ZBN}XQW(Vn>Ewa z5J1S4?1Spp*Me#VkV|Wd;D)N<;A72`oYG-!?W&q;j)wO zJ=Y1rKFpnspWh;{-eF?3UFE}uAz8ohM4*hU?8(~}{)-uPAK&)EJvZU2&4Tin4b%k? zy9rJiCh+b>S|PfvPk^PM4SU)_D~M;ljqWmj$+9xvxD%fNu}JWczNakizW{~<0t(QX zMi5`Q%a&}hiu#WINu4?FK8Betp2fl~4y!p|3NP9o#^zffRapaC zQq%L<_-8)cR1C;cTxh+Ef7~_W%#2P41I33?k&yt^vj~Ao+O0>|^{`bFy^M8tF(uB3 ze@PaTH`aa%RRVW#8sw~*s0nl)uIWK0A}sb2Ry2lwELX}i+G2TBF)i;T7(e{8LX7Vv z=4w~LIe|@G>hr5{Kf5EAcrBQh=sghJ7d>0E8_{LHN%*QCk@E|RKzt@^BeFWkH&$_r zwPa;rFb5h5oTq?Q;stHJY!jv77Mc|j2)4`>K>xAQe$_Yz(bp$nFWB#Pc{D^_gc)u| zb~ao+C4H}@c1A`wjQbgn<$cQuzaKIeUpP7M(NX3EaiAOmUcMtAU@RAukEkE(Y`f$wO6lyr%T5~lN6WPql4ANQVrs}@im4u|B_a0pHUuOE#fx-(c2 z1aHKKDg5edsnR{%nvK*Jw=zEd>T#x4({hk;b$$9T`{MbHFzz+59KUv<>#~>cdz6=# z9-SCQQ`yTsEQJacaz@e4UH7wup^P4=-gR{D;NV~=kHBy5BtB#c=R?r>3#gWA(^+uI zBTN{=RE?jphf4a7&~F!2876k{$S(>_dy?|F2^ztVkyE+#VV;4ovWd!qRNZE_Zv+yg z=7qC$+g>jd{t*A=a81>(FC9s6&}yRJ62OymG2&k^Xbw&oH=1?sLN%M^4ys!qBFE*i z2BS1gW$Bi?sdg2c^Y7nEOCu${j$+RzgduUmh-wAl5!&wid z7xKPu>G-KZjSU|{VG#y9FsYhV0>nS5mNUvc5Y^b+AIZwSjKXw}sdbY=zt09kBC_^Z z*Kbq(cj%%f(Uc&$vvJ|(1}B_t6CPk6b^0+uYJt?b@dRhG9K4(`kA0RBL{X`Xx5JQl>-shN4R>mt7F%ilZh2T#l&5Hs)2GD}6tgL43tDJ`M zwzDR5rtMC}OCK{cVR#ox8WLza z4~Y~ce(NBZYXv(w64w(L7F59-mHWZr;d8x3n@A=Hf(JxJMX|0*JWOJQV;V_)&isrF z_*Z2>WR;xv^D+3Ou!_-nLuK@=!XP%*v{?{?-p3j zit@O5sr@LQ+38ikl(WPH2rTC?sD{B9g(!apyc~iALaZ8aZx4eA5Jkcnuu~|&>ZW5+LJ3QU2S-ic5e8 zgBbLQd$gJ0Hv+*$;sUU$_~wVR;-(Hmp2Rxp?vBA ziNZMI>jwK5?MS%`5BFoF9R%7J6;l3>Gv;ThS4GlN(8Ut#GaaImqD2BQM2nuOrB zJ=z&fl_2lr)dYlQlbt?z_g}c6!|X?7Z%?e^SfX z8^LcW0hNRP?4t#!`d|!95J`6IO~_VPh;)PKH%{v@rAqnA{9*pLzT8b|yDS?Qt5yOp ziCpXF^XkBrjaGWwWtnFnu6PYIkxnv>mrgZTB};ph^4_1fLL41hY^SOE_v7EDm0uRJ z1j+&~0Nx1j$u_Kr+Cg(|aMleS&MNPNxDSBcK{CdI77VWw-W5RCa(P@GsHcF6GOe#5 zll=GH4v1@yG~{1Jv9{3ua)i{2q7Y;72!fk~z8JU|JjVdJDnIr~Y=!gFz+RsE3APo3 ztBVYNzKaM1PNlIAzmtnFll7PD$;Tlzs<2sBNP8?1;4djlJ@cZ<4pf$8g0k1nn%3+` z!LG=5fne*n`-_*5-DxTW!5B`>G>7oIw^@)=`m(5{R`g~?yqnDvf zCi%i>oRU!CY(w%Z`IkJ6_P<0(M)A2?Q+PPT8}Wr!0c-JRrad;SH?1#!!y4P9@~~0QkGCl|Y)&io#0wd--~v ze_C-wSX8ftMMQq*VmMM?HwdbX01jb@DC32yZ^WY!Cq`|mY$W|jqoHp^RM=^XsL|M$ zJ|?|{Qbol+O=_LcFbwQ6aCu()Jqa_%qZ)$ub*}9b>Eh#gDGQ6u)P&bP5ArXI_*#z) z;zKZ=V44nEf~dUMNUALw@%-GJXzvXN13*CwDQC0Yf5xfs?o!F?_oaA!xY$2W8o;fk z<0xe0xvv_7Hn`o;38AaIUA|AE{!AdwRWiwK;SLoV%0lymV&KUXk|Zo8{LY8V%hMz%aCSQ!b~ zW#;gJe?!#?$G@*=;M=g0V5+FCi4MkQcLIn4E?FF3mGL1y1T>fEyPkKV=l(?GiZr^W zXti!DwszeQgt&ys9um3~V>f|nc?$V>vdltItH7mVBhVhnoeg)z1J<)KtIoqgXJpG+ ze!ic2%N+ZwH^pAct};kGHRGVey(Sko@nzu3J^Nax0GStlmwbNQQs!~f(S(DMlp5@Z z|M~hz!f!rzGp+Oqr?@d3TYmeuQRE=#6iOO6QGmYkF!DWc&Cx&xKr(?*7j19kG-=dIMb?_`OAP$XI6p?uQf-wcUs6!SG|mt_nUxd_m`-_v(A zZR93;Y~*%zWyiWYIQ9)Vlg>|?DmsnDMb+g@{Oa6f*5WZ2e_S0k6|bH}#g0}n{*)3? z(G?!N0%h9&AzmWe+YfheP&O*7rqc{8O26NZjK292^?I04W5=5N*{PJ9N!1U$hwWs= zr@y@JmQbo0mb3SyjE z&oWFFd*P_%;q26spj`nE1sVC*|8J5cxaC}Fn*T&eoQ=92rv9`V6waUsIvGjW&x)Z5 z@R#`%n;GSEucS6~j{#ipRuj2w)Ot63f#W=xVWhTHpkg~)gEMy6~yQ^hI}dk}#Jgo;7PnteVaHjI=Y_6N!{n1J&r|M}6+ z34CdU7`QEzSp~Cvr?TaoR(}3OIT^NgruVterE)A~Ph64$`4=Z&iIlYsM2|$)nS|*T z&V6p~U`}9_ut)t^%$h`3WT0m(@fFP!1ne?wBA`OStQ z#cFc{e-YfQ=7i}DL*r`&>KBqtC0TW~2#SV99U&iv` zhQ9f<(pk!1N0tuxC2kkaZJcDWO6=|G%njVIli+Sin7;b) z@a4C{h}Yeb6wX6|q9MWEk>B*^goLDwBiFmT+p?$zlTjJYQw4+APhC@LtKTpmUnR9K z>NBgilpD{dT-Kz98GKRk70gIE|7gW6>JkP+URn7dzU^YY)a4Ot^^2J9FwY&^axEWo z+BDKUa%ujOe54jKR_~GirWgNvOSRzAZ^uH zDswx`eC`xC&&<5AxESz`)1myE+!<}~e>npm0or$y@UCs=@j-4^V8-g+dZZ(W<7hwW z7d0p)3OC|&&NO}mbsRvk&9hWl4r|VKVkzIa!?17NE4Fr*cNHrcCeU|V3exnXQ5-j0 zT-tFqK`}L@r1#v5TGT|*Clj1t;!>er^%kpY&vKbFl%VR#_uSkfttqHDYYQ0PBAwiJ z|Dyt?chAA&a$2Qu9Que&#AGh%OHRAvY&Dq_&MQ049?l>N*T(7^p~1lyF?#n|<6e?% zjXh^Q6bXsR9hId2NeP^Mq#asD)y*72I*Xj_{`8n9FQ2K2AJmO%&E7TuKY~7xS08i* zb4@4OUwr#ErNd^J@U0k;<~^HJr%rvnt|5CiBU@Gd8s`)zO9~b1MDkVtA&6EAM{fiN zfunYi@0ati5!3Vk-{^sfsD7IZTVbtCX!73aJ;-u3Lg71E?~F26HHpQK96OF^^YM9~ zKU99DLw#Y*3KW9tAF-HusQ5*d&Rin0MxWaGJvFW;1X(}w(R}D!=E}Y_Yw!K1yYTL9 zM%1#XW*!MM1Hbu-QBFdiGpcVY`)Tt9QR~wIT#8vi45Y~G3TZ;Db!J4N11n2R-F$29 zqW+PrJP#j^5q_vyq|nRxd)}Nock%xt#Pa_d>imEI2ZwMknSuSKf_++M=8p4CC19iI z8?sAfN6kTgtiy!VUFaNOWP~u?@S2*M49v{-oY^dU9!#jVc630ixo^Y%z?70TC*!Kf z6+?;PYW=cvIsviIgqnu(<=#*lTLyVOU|@(?V#O0~8U^p9G8XRZpV}a%w)%5Kf+ArmSNjW9f(5vuIG61!L1O!I5;PWvD zM3khSHufVk!>81`hV}51lfDS1P{_xpMfYm)fK$QO&95a7AuEbEb5{e;gkcU%F zM>~d6M&cqOi8GPmqPVB-lhn5B6Le_ODk{|d#w>w>C4m3Pi~@Sbe!GA@OJwrj-oflz zD;GuBA1;YE~nrJ;9(7;+T!q~Fx&2OVC{;CiS_D&CrV-+rRJcxsc3>OgbncZ zp4|Dfjyn=a z5feY@QLz64?mpP`DzXEQs^hjDnUZid#SO%74I6RRjO^^_2$!Fc5AQRGXZa+hIF2~S zB669rJFiWiM%=wM-VNZhjSUBZ-vg-&GJc#ph0%x5WI^2@0Y5sJzxX(lncg8H$`ONk zYGYNfGQw14Xaflq=XuP-cZ7X3MgJd+$)qeg)8Zd%* z7)n$Ea>N@2EUFXeJjfvDe4daoq!9fDO*^71X_o`g)Ia%bCxy?D|M$F;COann0HwdL z&*19eE%x?4-qMiQ(T5|AEPQ-?FvexB62V^`0(xx%ybvL20_olPAe0IZ@7E3uPwM?^ z3H};y`d-OM1pR?QGaiLASe)(9HFUvfxTm)lAoe0+=cbg%uA7k$wW<(bBZ|sqTODJC z40)$Fc-C)Jo7qtg2r(OKn_!zY!&Ii`;#C%gb-EM;?t&PGRElE}Pvfu=lj3HU>zPc9 z`F5?4%{h5O{O94GYvBCf(;4wjeJ*U@J{pJRz-$TgufcNF#%jz(C-lUFA#~k0sNF`&pRI`?faNmo`WDw zghSo0D6xB1xWsgnBBO~-*M^7PgW$8-#sV1pT21qUldl9fWPd~kMh@og0N?G6(3_%- z-|UQ3ehdy^t#ldm^yHJO>po2sW`I;v(AXyR_)=r#S1^rTKlkHoa-!;)ko4TIGpYG{ zV#3Z_)6rM1n(aRj-l%cq`}&k2P-IH&we~}tnxrTeb|;n?H7X8!a*ak|d$H%A zIu&lD_Zann=N_$QVasj1ahnL&bXDt>4zfBq=^;1{nr`Ds*hCcEl2##NkeB95I|WY+0Z=75(W0#c__E@S3=e|YC{CzhP@AW1ea%O(UJ}=ae@tgh z&RT7+!ElwI(yLr$oa>jxcbT`EF1zyN!Lf=)UYE5!E+(Te$2m_NjZ%;m`emAm^1Rp_*%2DRBjOSt;Fm6;Bveijg=A=XWk74QMCHj{ zjIxT|minlYfcBx?c}1V0p!56Rc2#(3rXCQ`y!^*)Vl$m896<)q{gOQO&vW>1NQ0+9gJz7*d+bw zK*XUKut|p(S_vyjKPR~Q?G+3oQqffW{-nJ5w|ns(grRG$iUofus2gb3s~1a>BIbHH zFdq;iQ*76U@8;P}sK*AaFx(Gc1RwDJHLbTn{&A-}DcybKBcTtzP+Jh0Vwvgy%pdLw z{4Ls-Pw#prxYCE@JC4N~flD2qc9rng*SA+f z*7iZyX<}?FOJYHt!pX;U%~*&KUnl}hZQ((UQujlIx?-Yt882I?*}vl+HL|vtO7h760Y9@NGSIiQB260 z5sWXJBEck;Vl>kM3M#tp!9n)cCY5Pznifnc?w1@XQgOx6O53Tyyt~a%>9Q`sg%%QX#(N)f3AA(WOn|tLE_o3lsgXy27LEqF+NBHb_4n1Z zQg^|GFc&elrMuOrl_&bh&+dW=KusMiYC??hFayHAa^(u$0Du@+I9;qzU9qLe`rqR* zdcWK_Q9^+4xw^VKUg=;pR{GA;I&rCCC@ngV`MK$bT*U7|8p*(>CwRbF8=>hs%xSv! z+?ariT`mux6iZ(=gOm_X+wgm0oS!AlGt9=8Gs)$#j9;e@{mTB1o|2M638Lh+{9cB| zSCmQWsTU_9i9ALcN^uJ;Z*OlKP9E?;&WrolFS$xYkech&@KD<@Dm-WD{o4wVuNhFg zqi3-U^EsA!^$-lpZOg`BTx?V+w>D%6YvWE&GzaL9^N@96czAGj?yugmIxkynz=~Q z@_eoPMYenkY1QeruQ9VcLwNpjep0&ktr6v$KOze7Rm2>))!ukK;C|W8oA| zs$0hsAp|rhB7SL58l2^NU@D6@!lkQC8VQ_K_s6yK+lWH}fZlw1)G3%gRWQ1z`$;W% zN5T6hJA>@u`(FL;@9VrmBvd56zgMO75({yJnt-;ux3_@e39Me0d{jt7t1fscbob3h zUv-(vFz(HP&=N&iS#3jU<~~WEsb43jFY-HEI>I=IDb{V(j=J(Wok8PmA^n)p)#aL` z&Iuqt*Kcz5HE+PcaOm9k_v00U1K9my?`QkHi*3V$Y*O6a-NVDN)gN+x00+nPGcGPJ z)=PUiJbw$_xu1?ztGya;IPZM%kPww6S-YOh?hzj!|M)(f_|ic8bC<$I_jYn}0{TOa z$b#AV`VP;ct07j83fd~8b@w({nNmK-Y*US0)|1uNru-fW->zj8*Cfs}H!! zx1YJ}Ke-~TZtpvEJG{~gEbypbY0rKSA_H)Rv3Uf~V0}L#EQ~|Cv$&Y;`g4vDR=7a~ z#K=UWkIDk4;&VI1r(kw3mMGE~B`FRDIQJt(+Z`mb@utPTe%gp!swj(d*;8h*;m}97 zo@&jTSApiYp5i;o+pl1E1Arany9@;zJ3CcQtp4=WRHXvFc7RN8wTnJEc`+SqPn}NV zuPy?vCt_OOlA$hpK}7?}c*-T+953RC1{UBsE|07)EFj8g8?A*?gvm?umm0vRI0()* zj)$Ycbk57-`_Un+5!KHkm)@qq$pUQ=ZybZ|1vQzDc`^ON>J>y3_#P|@25(zf8$h27 z)&!s@wybVGs+c^Hff2G&9hGy|4RrK$%swpF8otP|AHZ+(Po~eq{ZdXZ zKh&0{buqol;Avq(B2f#gWLSTOqN*15#fuli?E$b{mN76fvDOGZiJClaxSb~xgI}<- z$DNK_lnA#)QPFNw5UHeM4WtniNa3P+e`9Ms1SBahTDksvcg)p1&H?gX85_D~(f17> z80J0vSn~%)=3|}cIRjCr1PA0p%rMt)2f1Z4Zm(mpkid-wBNA}5l~a7=9X;$8{^#MJ zGc$m7pSJU1?Lm>FX$o=`5t0& zzfvOy^XVj%isTwlrHR$|*iJaD^N?Gs4ODe7jWl)KDUW6zqt=uDsl2nhtNch7zhpIK z3*2n_ZUavu_i5%(4i#6QeUwT}A$eN*BR}AOX5BXWB6%)`L-gqfwPbiB+ZVG&-h{0z zF6Kc9-XqE{Rpx5Z9nz!0du2$fNyT$n{mFwjpL&~AI**YPFxu1ZXlJqhV;*Lm-6M-( zAlOv!)r;5!{N?GC#xLWR+K{|qW3`%C7l9hCq*lt@+3Er9-UsM%aMzIc2g94A9&i2G>m=Ah)O{3lwDr z0Z*@7E7$pD<=%*~?H!}C*+h`v2DClQAM6M3Bz;u%CW~(fJ9qq*O#3-W-^CV~sOhKu zT|mYPSiqQ1`Z%biBRfwhlOJIqb&97g=&Fxh-83~d-Q3(5ad!@#fi>4M=HkH5`HkRT(cw)K|LGm^vQUd&z-~O|ki; znW2rjl~sXF4(m`l;KQ7RBuh&}+P>pr!1e0&R`l)7D7X2{eYB7eF8plOS`U?Lb4w|2 z-ivjD?cU&l(xRNSO6YTA`Og^{G?tks=}FZ~AeN?%AqEBT`#W)dg8Cqq74`V`^YQ&$ zK)qx5M?Oo7S@WlhV4Gy8rCInZ_T8&^(|4oavV(>TL%wy&le0=cfQZ4jG$^J@B##tQ zNxpjCa5k#x*x5wbn(Ua%GJbMEJ(|V5+rN8T z&w}t`$rjwCk0M)IJ~(A;M8gNPwYFAj(s}XXGqmT`)zw*9?eE{N4ds!xqh?ZPN+^$6 z*xMs6`B9*dyhr(BU}OZ3ic28M#x`r5V^(|r6f~={MyQs zOJYA8LiJxFc(;6|W-@1wYu>BZ9_^{xG~uFRcYJS>`{VnTnY*y2GRbW569w;9R;+!O z;)fPHI6VuWB!nwnEPP^GnU}{zKamzPc51`F;xHTSou0(&HWMU7qRZUop#3V6v;xQ= zTtoFiRTCP{o8LkINnWV=YY=~_2Zn+rrKR@Jx>yK&*6!|7aops0b z3z)VY`uX{VPrn;4lGQ+!FR5zuOfDP(RP&!}e*5q#DjhZR&8vx+Ef1;Fs7Iu&Ic{_L zCd)hzt52}ni?z3ga5wI3rQ4{;ht;_M@%@njel|S2MbkM6^;=fwvR?1Hek@x&tJr` z=V2H5<=8+W*-*!HZBYP&C$!_nkJ2FZCXtenU1(%tL}ubWI_F_ZItfF_+xVK&(qEX* zK-6m2(9uDFrlzSm3A~Ja@FVHR`;hy0zn@#&pw;ocR9XyI*ai33x8a@4W5AC6&Yga4 zZNG#W=XCQ>X)(ZTTU<)0Uak-49 zM)t?14w@UAEw%Mm`IutI?-IZT%iCP!izcw>m;F|`YGcqk>BlTtAF`FTPh4V<2!>alq3Qm3wK zK0&Da)+!oidoHb2!^5#Tb(oZAwysB0->=*|mh4E4nh4qKS8SAYqDWC=iL@JwJ{zyV z&geb0JmOzyW!m>mjUmgx>GYM>OkJtZJvKAC zwqK{?VwU+lZWw+sr&?|D`+og2<}Ize(G`rWI}y_A7cz+Gn|~dPTgTwvz&Klcqu6fM zN&Z|Zu;N%%%m#HK=Nu1D`O@u!Zj34)oY{qLX(3NB(Y=7q~-7)k!8}bzyd!jnOolK zLtE|rc|9(U(5^Fwl81BYwo+(Z7N69PcWr&559jKYNtJZX$P=#+4=TpAnl@DbduXbm586^m7|Kkn_` z08?;Qv%NVNyJ0Q$3ywnvjX2tCWnUJVe#NdkTo0d#u3@y<>f@-mq{eT@Jl<<9z_qz= zrRgW0dBle`@zpMV8GE8TffU26i-AU$QO5)-NRXtX zLl6NISr7+7B#Y$G1W|z|hb9XmDk2J_QkvW}?EU$!xbN;( zef3p+yIVW|SwnaK!t>nc-gD16cK{R)r@>^N!I5|ZWn19q4c>+30za>^X7b>`SbR71 zM1b4?XTH-ZZEMg`!6|8BY01jW%*??NIQ8%W4K3~J^0J1uwq+L#cS|h$`SCrsS$*{R z1dZGiQ;1o4d3jLrl$40zUS-iAeg*_n0KZ_WWMVy35Y@xOC-9w}$+8z1j~+mZjeEa* z3>{@h7?0!#NaEYc7+@mWiL#+e6Q+BDWD!dde74e&XVM7e61Q(RGtwPW4Wcv5E2*p;9RIH4l?e1?a3#F(4LsJ~%Ky6PnR9jltTjegD4jP(x`0YBEO1k8|RrKGD^3x%?t)Ku#l z$IZTknKtGqgrEubPLUY^ySY{l0hJ7>gK}7bG_H9VWoYr1{fRPBIl0#Pvr70&5?4-Q z^K~eTc`r#y#!eYdsnsWt(^69EEh0h*|J27m+8w}jG+5$0|<;`?C)u#~+%HEnJGOr|Gh>bt~>IW}C$ zn+9o2$;XD*tY(ommXK%;d6JdcH2{#hHwvzS$Y>(~o9(0S``rP8YDWjX%R!PLL-9># zoQ8&oCPR`bJ3b$-XL(O{QgcDekg-IH+SC9L@8fIW0T`nuu{<(K%` zkhVlE_^V2o@u!7oJYWun=7RvQ>fyuJ>_5T?a%%MjT@Ncwt7+6V zfFkdh{6M;o^=2gg?$pPq$bcE)?e6I@_xJ&bzw8e%RngSb)8mWEY5_G(V4-EI$&ZX_ zb!FwmF9{wQY_5+q8}eT(PtMzc3KsSRl+oae#TRrZv8br48~$8Z`avNnw|wD!Jxn0g zH_`751Lz|Zy2A_8({{p|`ugSGKm5mX?)oGz(yzK#W;JA?_rquCZHwR}(-UmsrgY1X{ptHwwq*nil2{u(B9TIvQLYM`=G;EZvZAe{NkNc@F3<9U!Im__4&rBzD>_6FbQjPk^sIZ z%f0i3tAJ(ICc(>ZLrbe?_F=Zy9MKRbX#g&rxW}V zGnf%7AtxeZ)RzXj>xrWWFa{Q@s@cgNxmpYc8a?#C3CV#ZH*pF%D9k` zn_DbnW=4cyQq(gvv{1n=9@w0;;$A5}G_8heiImIYYQBEC)BoMIMWreh`QN)_!&C2Y z$6lX3_)Hq@26!m2y#eGjvvA%VwUdj|gm#2fuUChJcZAcfZ$Z1<2;;B}01PYVdkFU@ zKl;;$-B!;G=eVd}+(d`{gUbxSuQhBul@Dh(lT-!_V`#&Fr%>gqKeN*Mffhbd4pRof zB;Y*Pfwb}D4KCtra&>hz92Gd6o?jUhrj}&~%w1hY_0HaO+D<0*LqyXbZduvdEhUHT z_SyKb))++}Lt*gZH0N+Co>eO2|dL=|^m2M=l&-OgT9}mTXg7Yis3A`Mzfw;C5YKwL+oFg#WzT8=G)l ztRD|KB5aee(&v0_5z|QfLT1ybuo5|^;iT&B?uPEhI@PPuX>XQu1SoWZ?i=NR_I`j4 zFtUs%9f6>z>iNT|OWG`R!GPu#Pr~oLCALPUrlx?aySbI+gaQ{uR{h8<68k=`i0&@K z8WA=heNW#I8J^3RE*U3$kO7npL{giPnKyWMzMtMXpBe+v`;{ko!gRU`24HY`Lc$;O4n<%BVKO|W|F_8 zx@JNv5&j#sTkp(Jhrs)KD%H%`_>2H8%i(88!3}6|3L>{zyfFoK4hY^?gdVPX&9ew(RnjV=mx^NRDis$tGgS{%lu-=I$%rr5ORT2nk zG_dlJp_syh#f62-zz{0DLViaQ*4MU%Cz+PxD02;lVIpREym^G#kCuvO<7+j=*=T{= zoBm4Z%h%aU{1usXC3bUwH~*OIgdCae@bIABB(Ag)A#_tNvmV@>`?HIC+uN@M4LJ?~ z1})CU$*00ro&-Fnz(87VbhO}m50nKPW_x;CkkPqTr@!;I5J1#jeXBstFj7AD^Ohgm zp4nTXWA3x;xjyQLKTKW%d`9mZJihenwUI{sFk=wdQ8J=z3jmfDLE_{4CVV(Eti8ZU zLpgYOQF{;|MQ}#2&WEm$tEU?h7u z0(M11LjxSNDVhyY6Cq6Ttq_&My|Tb03uaakodRgpEAKbAz0vd3D>TB)0GMqNKvvh# zNKVxo7vd?nhGZd-`p|YKerDt~G={^jZ6hhSV}t(afgEdeawV&-X#%|xJ0$Tx?-9wo zw;X{qMw*`H3Gkfn(qZmGoW((?uQ?Y20{^?!!``5e-Kd;$fmaTF>AuwcuU6DO2!=qj z4)#jNs1!Z}IW%&kSa2?gV(pj$4xB7j0D?O0zP<2bg!Kv2uAy)V#FIrr-6@%t{e^Xc zddsp^5m}6e!H*w+aD!zB&a`WPSW+|Q*H%^}p_YJs&=vUnY<7)wAE<|L(#-+aygRc% zU|V>;3~%uB>K`w=URlYwJraKtp3|A*cM_A5OgYF-K9*y)W&&H|VCs)eYh4KI}A`xPA)HsZ9C+@>18SI1qic3!#C zx~>B_LX4DDWXW`0P^(J0g!A- zaAyV3or12PVvmogvK=SMdhZAV>ICehvgzEsTU;yGB%^|1!8GR$aVh&zbsU|y{!8=70AHDnaMArLvsI6@!+GWJ&snI)2T4O{?64Wo)DR`r)UYscdQpSQyG*<(c(%NrSI>DuZVq^g)5TWOSodI3h$ z&;N_K^(-Set)-W9gbo)y6PL=`=U*L9LEpdEwUhCUwu&BA@-2{q-ObL|>r`200A2Hz z`_k0wAXQ62xz_S&?*;yHYyA6uGTHI!)wR%5zslM@{~4TuY~a-V$CeK(P$B>OMoFru z7`WoIUs(9Ec0Z0+g-OX!kv9EsdXx(oR{Qr9lJOvS$|vlfKasmRp&YU<-eeSy6TYOiAW#6yqw z%gZ99_xPsP#%^zgnA0GMzbDv{_&mc+;c07`r676fJ(KJ$a&6D@L`Z;*IY*G$%v&~0 z??h+)5z_^h=K27~hXO6xk(M2r-tjZSSuV|2Cva*K*_%>#C}RygvQLvP{qsezTl_S)Iq1j8N9vyb`$5jBkD;rnJW4?QITu< z-Up{$aOF1UEX@@XE0Giq;bp(a9&(OTCO4JaX__^6cJ5TiEl;PblwZ0oBsPw(n#$*@8CLgCb9;^rHsNfmkZfHMCb{M|i#%00a4)l|3{cf-K)UR4ZX zo<+H}$&#V<`QS2FRdzP~R%>gto5yJ6#ZLx8Q4nMW-{JOE(W(wCZ|B6#;HM9Z^wS8eWtu@iNJg9l1E}=aFzAZ zCFZFXxgI@jVyVR$v&+-WZnGAG!!!#Om?>q?P3zp@y}9n;(JkH{vol09Zi5wzw_5{q z`ZiH+^uyB|@_+-Q1?Np}a_=y)z}ial66w9rjp<-M?V{GW z2yy0qbX3)PJ@QaIMw{wxO)$(t=tiyF8jE2I+RkqLvO0~opNJ_RGVz#IcH7LlI(x6% z%qXawWId|LNIWSJ>2`jtsqT5SVMLyN%&BI!)}9|XtT+-@J0Rf7r&dMFjtm-0yRQL9zae|4<>r`_7_xj%N-w!bfDFp?xD5Lf!5z}s=R_`wK z+qQJrs!EEZ1yM*~Hl4cg`{s(^l>~jcRJ~NoJKn}qlPxjdaF39P)H_^@_ibn4m} z__6Z4BJq>YkSxN+b)QX#+=w&B!GV@8niHkXULF?R%g@Ynk31#3c0E#|aJ*C*1|@C4 zpd>jF1sJ20RE|xndXeks>nE-2<^umWp7MK%?&3hK&~-LwJ>+>WOFb)j6kanQGjQCe zpYv0gN5l2kxpqDof2dCJQ9r=s^1{L6KKiYTitk&zkx$?$+ocm>-gwR%Bf^hFWJa97 zoaXo}w&Mq@gy)e|WBGIN!MAx)W4++VDsgU6#t~(_Wkhkby?D;<8uvb%;4#fFKa+_) z|EYlb@7wD?K&5~E#Q!m*`PWbU*FoC>7XaDH%*{2VPmmGZs; zy$Sas7s!U7;>gcAK_^*95PKcWQ53U{s)y(b0A~d*Bwrw;cMw+qUAAyb6!0-< z1LH>aLa#F@)oxtTv3(vUyyV_PYE6M%C}G6?tX;VsfC&G>;Gwz!+3X*)V;!^&&^xiDt{dtg)`9B6b!Qw5{#hhNmS`MS%Cz z!s233*lpu_xVjM9XVMDkFCW0r1oO)_+bO~iED>sh+@Z!3W^&yJsD<^S_ScXR3B!ve zIF<37n9@Usvl z>r_1MR=T-z_^tpwEj^+*+ezG4h#NtVp|GL@BN&BD;Q(iRe}C3fXKOKRTftu(Nqugh z(>M2L=C%4`y@A!%T#X8aQ{uP-FI3@8?fI}K($`{WPt3cl@+QWT_BkIIw21470D*vp zej5j7sG*x?-(LA+NH?dr2wEnXcZ@)iE=tFJ^=I4#!*9Q?ncwS1nJ?joQ5sx|O}@{* z!}O@Ju{S_}U0GQH4i-FPjoFN}xWoJQs-!zW#Tfu*)lFSbf2UtrTLT|!F=x3^J6B`l z8?TQZ@C|c}1u;7)nCce@bln*ATk#KHI!Ci+K~zQA+~gy&;5I+FLrES?tJPj(5;ceY z+85IB*@3RN(+*#jsfKmB3%GB`kDJeE0FskLROqXgeeta>U;{7I;Gm&4n0P|zXc9V9 zZ>X;?bI4I#rqD=J?dscGh8V397)K^3IBgvJcgd6_z^f`McQdn^(Lp4i9vq7ndmoH< zu@v*yP-7hif2s`iv_etJFX)#Imdgv-;+FvdVBO4TmJ8_F@6aWOE)cK?#_3W*leS

1~@AP^LF7+-Ro>$yDN>3*v)J)Yzl-)c60B2*(aDpRZed9L?1IbQ!a zeGM=wp7A6LHGfbL!gm~)1zRimKe7r6>{rE7v26!(s8F~n6}l=O7+Gs7@>puPQ`KfDk4GXT-E(y8dh zzQL7f-*nUL%*=L`9FaoxBWJ$?a8>AnQ2{n$k(@?5lUo-y>LjICyX*a4Mu!U!b!1H+ zJUnqt2YGgE*@$UK&Q~^3yEAvs#nE&FGi>ZYqjYqEuaGv&^&{HHjvoDM@CD9X^vZr` zpx|o15(VGYj0~V1qT`Cx>(~$O1LAaA5w;KuXA00)fzGGCqc6)o0}>0XAPC6?_X-M+ zU{arF<8XbMJPG_d@qcNl4fi>jyq2DWhYNEqf~2
E0Hm6C7fhh=H6bLzV z;?H8dXN?OX84$2A6UQ2lKl#{Ql5y*Ag5p5YNSm|!+2LmJ4(JqPV{(49^o2VoQDr6B zFO^n4d)H0UPIjM-?H+{vNP}4RC|n-x@-O5(P^n~ZZ~tI|l4`G&XK3xO%XKETHL=<- zk8tQkgW5T3@wt_EuhU5J8X80QtajEvN%0YRE%N8aQ(3Ygf@`(_ZHOejM(f>Ev^e z0~>ZM&?=$#b4xuO%N&OoABB~&tU7>5fzU#Cqv%U2p$_FT$e^4eEGlYlq-G7-!-gju zjkm>Z9fo2)Y!2^Gy!FqXr%BnrUo}p`Lad zXV(|v-nF=vr42`(ne7nxQGxWtL8Yo?G+7^kw6!7kS$%-TtntH$*QXt={$T^g|o*r_<0(Sw8hT{f~Ai!W}TIZBHideEWMsGQW`f5Ut zkvM@&G2mWKAH}MYQ%@IZf*o5JxX*SH2ypUbXhZ+wZOfm5SZHOHaTr6(0WfOB{_7FO z*%@urr#3MAhP{Oc{ByhMX0X;IA~>kOyQw&_M#<@TyL|+bviH5mXnx+pne%%~jwApX z+Hg8bMd<>5tG4pU#Z^>MF7Pd2xQfsW^XD4 zeYz?rI1v-va^Z=Hbzg|ev>HQ~A0&-hdTAx@MLn6})jmL4n&{ zRd{Y*mf{XCo_;Mwk;`7dDyltb(kQqj;Aeo{!wgsUF>(V22ALh=i-4YHzo0^V>stTt zw(#+Tg~i3)fS>=E=;M8rDAx`8oG~yYWE=+)t{PYw@^xK!V){%v0bH-36_7{h@99|w ztISO8&^vjVim~B`jObxyKw^oGW`ThkxzJQGhld9#=4xmQrGWThwd-;g%me&1+!Vaq zhA=pWq+JLP0-3kcM>nGndxZ0DC3CkZc_-Jphwl+I`SLh(Hz; zLwac870X2VhLSAv2+^B=vnR>`pO@$4;RC+HXkeqrb2D#15(Hd83k+rj^V(<|teuOH zkyq^SnxzC>P(BaEQndkfpL3PS>?=X zPRY=FnY%yY92lXQ`0qz1X4yXFU}nybk%8YoL& zOk2fpMs$edNkqQH`L^A-*Xyc~&U+v<2H0#*iB#h=QdXx=g1cBr5!SI`8pdfVzv_z< zbL5J`G0s(f;yi)RW|nV#3429%4AR()hPCSL+3LiM#z71LC4M%RnXvlHyYe9v!lTI1 z4QiaL%t!Ua*^!p&ei^urn+g9sXi)RAwauf06aQ4qL35Mp(a}*2+oxWj_EvBHgn44E zvQIpWHov-B3U}$E{2B$Ur)1R$FAiiu7I2703x;0@)^BoSeN!p}=&Con^7y*9ZFg2} z9b>OifS`Lz{c>j(L6}Y8+_`gjjic8t(5+4Gn^9M`)0XuRa&i)Tt}ddv8_gci`qa$V zf)w59I$s~`gn@w=k~Iz%5pei%$0NU>8R|yAfu9+@!izy(xedmMt&LW1o5)k&VL+Fz z^dIIIc>)=Z9{AnohSQ&agBh^0!ovLg>i~QM$B2P$lRlkkA+|(LE7u?+9(sCU1DJ9k z3!0>dir|&UD`%&hs#QJvbB8*-^C;J+-BNKpsJeM~39+}_aExO2zY|0A=tqGBVY zfvl)fMk^!q{W0Cq<@+&U(G?&+OV{y?kx;A4s{nn2SU+e;h~K0$Ey=6`SNG)KOn29j z+c~@PcPy-|^L2^s{r&nV)I3zE_tvS~Kvmh?+$>EugS8`uY_GDl+Z&)XmAgJP~tPhTIpR59kgBO}IV8h|LI?Co?| zR0Hqt4~0pmQDUJ(g`q8|dYV_7__#&c`&Ei^N=izSlP3_y_dhy!RX(f7;79^1{>AxV zjI1xDEw!`J%KtTesN4BoKNf`a7lJ!GRHdvLgao>oIothv26=orRkqswgHn^y(}CQp z@3xZ69;=M)K8QT78C%jzkiirwTi-zuK;TFLqPGM%ajFQ%GRUu`d>Djr$gx&vO?Vpy z^$4}%iwtZQ`B`+Q;1gKZIEhIXj&ncnaF0*_(e&(Wpsn17hBVTxT85ko*kedjPLua| z^J{!h5A(r&W9W>R!;6U2Q*p0PJG3N$JFKPkP))Vq7HDQJw9IG>rbf8c^*t$0%0V^b zEi6f=G1>IA+J6861jKN<^O2lesrL&0NQ`IvyRZmbu6CetZ;C(v$QuXFU3_vKMnFyOIg$rt1F(V@sewCyDwy@r z<{Z#o@nm)Ueit3!)M7{gxwlqx1U)RPYaSZl3~&fppUe9GJWA{28XO->F&iXcO0NJ4d7A_EXs=2i~E+QhPSV`n_PkV&O=;+3)z03k*nf40Zn_amZ%Qu!l4JzTRqfs=$iR-u zYfFj@JF9zn#c@nwTRg?4GPyT_T0E3e_8*|Rwrbl=)frvpD&^CMKeu00{$BvyudDZ8 zt15YmT~S-c5B91X$pD}BW+c=y`P~axbWTxUsi#{2e5U<9kIQ=7zfR@%8 zI9QdL&2>y4W{PnCcE6?lw30G3&1Vl$;W^bb)it~YwktrrpBhk3hbAUmm(5Tr#n2Bs zM@%&Uou0dT+%~BR7csffgc}9~qk7-qo4&t#t(s+> zi`!>&z6li~;&{`szpepbe-ZxJvV>=?$^sj8zl#xfj-y5oq%4}b5vK9qXYm6Lm&D&PaFB#CJNbF-W}B|%;7OfvnSvCs}M*mJr&O zQhXFcap*#weM9BX&RWWPBd<+um6Wss`g80ll%Y;jX}vV|Vnu_>{e6r>UxK;$?Ljg| zZr=^R|Jd)dDR>7|0Z_xyAqPI&nR7!hQq*I(2FQn&V!ONelnfBu(4Y?tbDb;r#P=It z1z>p|MlQO#y$sdmyTDfd9^jL(kT*O*!GnLsoNxz7n!PZ_`9#<;gJTf+feE3qNwc`U zy$#Ai{URu0hJtrLJn*=NKeqrFk|dyj=5D_L%?5B_K<1KJQlh>8Uw~E4CA-*Hfq|r> zNUtBPQvoT8eF=w)S9Nt&mDm0IG7kV5fq9KN5 zm;$wLi9!XQ004z}82kY|8AQ(>7lDb5b-S3h(st9 zPVw);c_Xy{W%TEt&+7jg-}?XM4@MBdIqz)4T^ zX*5D?4^%ZUShjg%wiGbUE8@x%66)eN3+>DIOO9p&zY$(fr5LG_E~27yNrFWD<=NPB zY=hr9x7hGoASh6~Vq#Wzu@ z$KL;|s}ry@%pJ!$>@sRjA_O1Ms1v&^COMgk*N9#=i}fN2XZ?oJOv^A4?|ryshD6G9 z=d~mFsOo`h9NIxs%T2M}nn^QbJJ`!)=+8#SM76lt77+(dCtetMw@l?*WC3l&-=9%Q zZZkVprSo}d5%?H4C#O*w<)ldJhs|v4k7m&3_HV5@$65#4xKh)uh(xgzNnqZ@k za=)*B)^%G*lO}Kq_c%__DNWPtA#BoL3+(eHN}ATMe?EToKd?FX?D>y$3co)1|4&Eg d)z`0^-i^m*tuHOnv?4bkFRLPxD{cJbzX2PQ1{weW literal 79126 zcmZ_02UJsC*EO1e5PA`j-bAHI6X`90fQ1qSL_oT9Fd!}TE&>9gC`t`Igf6{zqJZ?G z^ePZ~hlFwu&-4D@eaH9TyT>4m98UH=XRWp8nrp5TB4JwUlw{0gAP|W1@uP>&Kp;XC z2n5z5AqI{_w~M3!zrb$K)RjTSeXMK1n`^d8no1y0SseM91rhL`)a8+(8whms&eae2 z@w3}IAkbybVqLw! zaQgG5_qK7bli|lsyT?`QB_&?!%tbZ^<+9&fiha)H_xd!BB{a30b*CF8uG9VZD6p>Y zy&J@T_rJ#T_5XFi#*X2Mux`N5JD5BHI04G?zsK8~E?WeZFVdA0g=DE-TF^o1|9f_^ ziVq`}-#w^ugX@Rc)QbyAkx`NVHJFS#yopDOxeh+P&ZxM>IqrJU{SAcv`rji13@ce@ zdQuhJdVmMdyWh_E;rh4x>;FFKGuWY;hA96yE+)68_d4beRuZfy`rkvP0ECi1f#W%S z>}}-eO*2yciC~=_|1~Izt|OJ%Lh?`R1j@@x{`dS$1pF7X(qU?+Hd4iCh5zd&!wNrk z2a$P@W~A@Tjs}m`|2x6s=qJJ%?YrUb56T|tVZx`EweHgEY=u9)k?`!^;oa*dO7j;_ zehB4MoJC`2WG!7{9^L*fG-a08H<9if%*U`Q5-3rpbsMdfx+GB@1wN1g*?Y02IACvR zTuO2(n;4i}Imu=ysrX55@`+kQZD0+mxB$*LEpso5YPaPyoQc$3S2$lXel-eZCN(`G zmVn!QlI6|weeLgz1@`NF<*oQ1NhcS$ew5vzldq?m+;kZJ*Q!iBirJ$l$OT7#y#BdG zuLQ9Atmxp4bbWbQJQ?7-ZxwH!e*7^e^ynN`hKen46PfNv&4+7n$xCs4abnA!d6+4X zDO7l*G-CafOjGe=4ly70>)=02?XV<--Wn<2yx0{z`e&ilCqGCu4j0PCCik!NHUGx- zHC;v4-OX}q+f8c1tmJ2U)gyvo0g@siXO`q^Wj|fXUQm|MMLrx0TQf}!$;VgeC3z=+ z>0KNi5NX`LZpbie7I-20On#C*?S^CX?E7N6NC%ZwyzDjI$r!%a`10d_&2!+^z}G8Huv(*yi}pF zR@XLbuY&m71MrB?ZLnTE%I0#wUG(9`Cb%C0_;G;{t}DsNjs;2`Mv!+d)QNdiu$(UZ#P4 zs|~s6zUbl<*cJiGLuJB$4t-W~;63;`5rlU9W}m**S5ID|XzOmeWV9K&n(7^?=ePUa z>Vb3LKWiJM66?8tm3ySenagmqz;S#|>8~IAyw7)+R2_uB`qUp)#HOFgN07s2PpRgv zXwk1Zc#cG8dgYGV=BT>j%Y{?UvfQ3HB13j9wy`qruzb>rZDd7flD#+xGC*5k=Pf)6MhDn>6%T~zKH;k^{{ra7#4S;7*J;99(SRIMYH zCS)cDbK|!Exj-Vlrc?NmR@EB%)dXvjI%JXTCl7ym-D}Mp7T<_JvW8nu+pKJw(OS!> zecvqd)riWKRUVT5)PoZI+k$nkhf4+flc(Fqjvv>EDKrLZE2uM9axsHA8sD?Y_WiZR z&c{boO+ubSDYoDdqZ`%HiWE`Efcm~q)Yak@-zcX%6<(km#is7gntgaQStB@qHi4A$ zu~2L9Z|U?wSl;_3_eB$O!ukOJ;^wsc-8w&Lm&aLwsl@?yT0I zJg);K_h#d6-qE+aY(Lyg_t3p`VXojwrE;mAKeL;qI5b{kWH}3&taZ4I-5qZFN+8bu z>=+Wd_KVds#f&(y_T2ET?U*{_rMVpM=4^@x)$;e0AO0T2)IrD%yr$FLPkWsw@-9wYAY#E~`wbl$KnGE2JB7(J|T2ejOGuLiy2h)6? z_z;PR;Gl9gP2TKTia8}!y!k(9WObO-Y5jS?%$p|Q7xixkBSs`CaxAR|j-NeYar5JUo}7XQUr8$} zVzGsp1^NUi`p!*iVX>!_a&B(guLk>lT~6IebN^t}yUUxILi0wYO)B}oBNOzB2a3i%UmzrZx&?6a znGc`zR>41lw0kN2I5J+Fcb9ilS0E zSo&bB;h~TBbH6|P7Gq^j-zzEaYbCCBKLS-|p8N^uuVFN5-8`Ngow_(ZEo~7sl{RyU zzkolwCa-X(c;j@?)s5d{<|Ep)rJd%8Pa*CohG8$x4L{3d&!KqA!!YP^#wK}0mIJxl zF`!~)wK{!Dn()Co@cA#fu5%L;KP9uo&gDZ)E3G@$DV|@&>tEQ%p51-?wL9dXk|Nsz zzX6TP=S8%8g|%LnNQs+llGcRpLkWq6SN-K`z%bMfMOGCDf!zcxezHp%Q@+L_hltb= zexBaE6db#W7aOrIn3lcy*;HBb;Ee{i#1mcT$Dqn1qDM-}4(-lSmzF*^3Qz0Y4iYos z^?o>0TZN6!g~NT`c1Z<{;9po~G-~d)7*jSSK~P|XQlx(v7#>$-LUZn`cjLTtuP_Ns zMXp5;Euse^o^sw)MG0^{nhSFYCpu*)K=Vp4C}HulYB3UA%93 zs!_QS*>mr~FNNH-da++KU9{|_KNr)LVvhnpa$#i(bvmV|xTnV89PFwVv8B$ExnxKm zZlR}g!=hH*ssCia3K?ot&_i};OM5nWxka8Ld#cuQhpN4fOydtgvKoA{ejF>xKZxge zV+5I&_+Xm$8EP1Q)Y=1y{U;bTqcG6nZz7rS+zY@_^U=~|>u{#we-!OwKFW&|i=WxQ?B86+{L zBrs}CA^%8Y!&6H5t}ae5+X%pjEtNtSe{vY3m>NFn!xb{bI@ayV^(My>&r zM8I|ORJuBb7QdOM^Ma$$ezEGUyK-&fDO%f;Q!*koY%R(D{i<36CmGAPv3?2YVfkG zpYWI=Wz|&+n52G36Fw(KO?@fTx$d+SK&;n*oX0N==R9`rn;&ggGjGNOKzPlX6pf0s zbui+_94YF@F_H0m$Inq>(>;XT|C6>()tb{}SNf7SC1r9qsg533H%~8u&-xjkiB=Mg zu?!nF$!iMt#~P&1x8k;I80+HO9qS9MZ<=Nvu{_%t_{sL8(a+S^>f-OzL-Fv!94p-% z)Pd!<1p)LucF@$2tVR)eNbB&$9qIu3mjtl9-(Y&-M>miGUb#+2^Sd3l4hJA94r#0# zLwJ$g%<7dLpA%YWk$;8)U_t}76NRto4{NCqVVE2Bb^_aXsf!s>z7t|CiS?(%c90I` zuSVR8JUA<7?Kpz0_7gMkL!>MM`S{QHXT6p|lJsBn5%Dt4Z{#>$g?>!}=q&+CYheYC ziSC|M{Brl)TckSh^*Un4ebNDz9SPhDvvciOV5INVeF4^G}gzJWxh>Imn^tfFkRi<8iA*p;}WE~yDtYV>9Q?p>Dkh!Jwy&HAgzL^lCsRMXGw z+{?Yf2u`+MC8&A6(d+RNf{-TN9-zV8^?odU$9?;^ox|T3)kPBVOpID_T3te@#Qf5w zkGR_Vo2S9)-)dvmkD`~4n8bcc=NxoRT`RW2?1O0vw4+zMpZ=4jF1B^-EBA*tM#6HdPVA~E{q&p%OwYzm4XY4WD@CxMr1uC~|878euAK{p zPLzu+u-fKt2y#;p(z}(>r-K5or=sAC8{heb6%)9_ZV|W25XOYi*jD*JhYwTF=!{4M*MIBx{P?nXCEs%bWDFF?TaH-}tJX zX}wTg!8wz z5~>WjW4|jYGnrn(lk!(0$ol)^!fxUEfAAjSKZrmJ>k`@eBb?{GyIBN|Us6W(7y*Pe zfY{vrlg-z;*wy91D0&!Ty@T&pHn(`%{!4CI1RjeJ8yHVsC#FI|WVzJ(u2&?opPZ8p7IdwW94 zRG}IsyZ{bY@as9`TMi{)PnoM;bz$?oJm04Qk1!`PyO1Eqk`O^L9xrPkoKsIH8bels zlk{7TNduJciY$l7#4VPe&eW3*Gss>W9vbfIr>4M`L0bFX`FYHop1SZBLmS_J^erY{ zUNs|v8OH8XdrpfxT-udTYs}quphGnvAvKKzuw9K-=AmXQW|tmllAqLY>ABU}t7BxB z&MTitnYa5vFE+mI2vj!wd@J}5v;Kc_Ou4R~Ve`CF8%KoR*fvBp0dCnL zf;Nd*#I|-}O6@^o0@4xTA}2MblQya0E>agP&ig@i6Vl`W2S*IJ5LSP?T#RUT^9>1z zsR~^m2soKglq#-gV)>3ttJw+|p zOj=E0;HYrJkUzmZdq*P*XWvxq5@(OmXUiy-qB>aVv)}^uXVb{4TpBgjRw`xqcHNr= z8K5NRmD7Dc!81|Ie2FY_!(+--Wb?j6Np%q+9+yz(J&yUb!^V1X6Vpg|ZiBQs3w4bb zV$0<3aKR0Py;z5Ic-RPgtM6NRmgo`po=c})iW#d2ox!4Kwbax*chkK0=1ZD&p zrNq)^zNJIqzn;P_CF{Bpq&C*wu8+XgjG{0Z#N>2q^r4GsBx{Jo{iCjzj@~LSI(E1G z9KC%l)L0vvMIs6MOpssJpRLx~yS^R&MmrSzUF}=eMoh6NcSmTQI!ozC$<@(6r0AK# zZ1u=??zC|!h4%fs;b#s0^wrKIf08}2omGB(LI>t8rjf0oVyn(KMx>Iw??p>Q{2kmM zUc9$lQa2$ngq)DrvvHXzq@fOQtd;=|yb-V7JVs|YH}@*f?2NBA7;>?Vj>4M_HP4R( z%8O>JYnl~IodT=G&Aj^d%8UA{oP`9k+-$<#QB@|C-UY?B&pawN4Q%ebXp(%urD!uL zflK1?K650=>a+ZCK8z%hnQx74{3j{@moRH%r?b|1G%MfLzsDHNH*zN|U{v<~*tKOD zW$*u6mQ6NXV271i!B@#w9qq~*QD0o`MoLE`5Ro~qn-*IMn`;3HhYr8 zAgt?Ynx9jHyso7kka5^RPj8ka^dX$S zJgvbTNRKVyODms>BgWjJoGbi^uy>PHN<c&uTV-40DPqk8*kAP(1Qpl%fGjCS;MT zYy9h=sFsS0dm0we|8Qx?c5%IzEHw2;2LXM_ptqRv%*SD2*pn`zr@Kf$?(2K{5I_EV znDsZxQh`Fr4I$Atn3HY!G)a=vOf(|-RKM)sOn!-CCp+2jn5k(B&2-bBA-Lrxt=ToM zpR*X-YWU2dw;lr8DbuV^3eKK1SJ3HBsanbIkC-<)3=-gJ9c|{;{ z-&Qc~UX-*kOz@C{@pHjeJmg{85;pv0 zOmG~x_UFv0+~`u&n;&j_>y6;(Wqzp>k#zi-T-lduCmBq?#Eypi6V!ed+al|0c$Y1vKRvy=(6DDWXg>yYhm=`aLf0yVPry zq>raFnDR~D|G1H^&!2YU=qIc%xmA2C%=4Wufwfi6%%SpW+KR74B>wgL`S-UtmR!c360 z5fr6#LQC$dVLj>v&B55VLo`-`JBV!j0l09Unf$q!PXp6};^(bcCR172YrKqYcq^7+0p z;30&PMbSkMc+`PORR%;)XeZz;`|DU9%OT8PIHHIH$;Is~^g7HufF4Si(R4Ehg*2Q- ztQhfU(Y@>f-H_8R91WC48VPdC*@98%3rb*TEK&CRgB)lQKUen~`zbE8l?%qM_jUg! z_Kx-d@pJaAGK(pjid2EaxZ(isTNj$bUa(ek!I_cle_dk-#cje6BRvMi)r(vylA(@M zq?%-;jm8I>2qC`^$#ghnX6rOWEg^83vYph@O}pbg%Cl*6Txh$gB~{FN~|**w@kD4ZNeIW`Kmvwjen)>HrPiJh%^ZD zgq16H2tRw|l$P^9j(9-LuVDPs7}*z!1)Sh^HY)e8B|jg%dtk?|2a5W9U#9c0#2Y5~ zKMpATtJG;L;N4D6MhR;u4pf)QhOp}ucn^a{C;gOGWp|Xp{@1t61gyi3LJ@P7rOz*y zgB&W~@7#K{k2Lz3d=x?;#`llye}y`T1D5eg7ACP~Ti8Jov=t@9|5a+=?=U)FmqXp` z0X~4nN!D}$K_z!APL2N8fwO-XqE&&xY?P^CkL9}#St+#5JgxWjD}>@ZG)^BwYozJdCqfmjGr=Z{<(>vl8DLx{ zn_l|&Xn+1sM@4TOC_#*V01U~Oi;@7f74GssFNmu(x($FyJ^-z~V`Vu5N~9&jtPt11 zTEn$1+s*YxZn`UG;qa>$gbsWN4*l$ZtYrI*XylWH_Y#L;%VqVp<=Q=W4I9v*9zp@5 z`zX)w5rd3s*7_8fzbz%|M>VF^UWPu+V2$|)8}gQ1lUX2zOzU!X?D|mno(B=?5&2M1 zg`Kyu&-=Y_7aOpC=X$Om%@`ZfVSdwEFHK@){evVoRR8dmOXJ-NNJoAS^?WY~8wnFK z6B14+AM`c|irQ{HPIcEA|G@8CY_KV|XLA!4Z?^Pvm37GcCX6;hfzpR7g$X)}?bG++ zT*~8zj#h(ztSTt|MuYV0k1HjzM{7+)w3$EZ3nlv~1Qh4hKzdIG(XPfsGAf%72q zF_YKZl8E#=*3leFvpV$1TZLbQ&cwTg+nB&;NoN-O`-G@R3~kJ*p)_M8Fdd#ppL9%A zYT^#PA4-)6p(~#nZ2q8wR#tP2AHs=YJv~2E&3deziDCM3uea#J3dmrzYO`G?)sM%6 zu;^_Gey=bON|ayY#h2*;L&*MqW2Yho=sHVVg!2n3MmX( z+Ytk42P^RmVnI>sw0-)%52d)FqiwZlN0Loe|I{NUZ!vPzkCK8WqTR1xJ^j0C)`i$< zRwUZ*4Qp|?I$d`@V2v(&i!#-U`G>J=Fj?Z^PjptRG-Se~Q=S>l2nmb*$%b6WxWTBa5h2AUdv?n%0xosR8oBK9jouvgNfZg- zz6>Xh;51bxZ{fFxNL0zsIjhdkLw~7Y$8O(FQZ<)#{C)dHNO!W%H||0KsQ%i*j<0mX z^RdZeZs$Sz;?NJ0wouiRbDobsjynw7x4X)?Q{d^`u2^5#YZ6<)1ACqG+Kdz=m5^7e z(8?9aYy{5r^W71ip`ujvnO*|^J)Z%^PLbEyt*pquC@Gr6LGLiJbtP4njz-G_c9K(9 zA{66$ixxK-^rO#*p2e4`Q&fK1&$SrZ>aOWsY_%}rT`Slsw$Cx2^cvooDXyvj{!qom zQ%`Z%Fbq)JS#XYww+`o9`v)DJs|BG)cZ&&imc19gtEC4$uphTqeo-D2g&53ZOjVhk zr-H>76JD&;2rDyXaF7@rr?~kl*K`LtVHlG_mKn=HL8MXF3AM*FFZ33;r;av){1(~)=UNb;6Dl>ZE6+{MY zQ`u{zW*)4lUFYQ;Yx>+^3d||dUYv@oE0rvGeMm6;oI!s3R{` z<z9K4$~=_JdPM{ zkCRj0ls#VTXW$)ZYdo_{LbtYsE391^my;jJ`-CIIy3mX^Kb?TLXPi%IIrolnN0KjH)cT)?G1 z$z?xR+mk;MZEQdOvp+R9>47a6$}b5F6DQDn3EA$5iiucVhZ_&FOvTRl;pKfc535nW zv$PH^*B*^7C;?lsQ~v&Ed|CvD&)2u_Q|3XYzJWnX{S0Q}Sr%3{1rlM~BTcg;u+T-J zXZvF&tND3p8Pp261bh(nsQ-AKzwkr@59--8my>=FdYZau@;F;do;csvbhe7~fDH)$ z@daO5cQ$Ch9G;-Df6eFk{4IKFMQ~CnxNP~DzD=5te?kcPH(s41tBTFHz}M{ZT#6du zzdS0bZ}?}ioH_~EfD6!$gpfO5eosd-*f^ zr9E(?pZ49BM{8sJV_a-N^rwbR7ax4?X29LH@U(GE(9Wl%4KTZ@CE3w&;<{CCVCHU; z+1Xqb;Zf}^Ihu^26+gD_2_TVCO~K0v5}Z9#hPA|f5_d0^4r_2AVAh3{qV{wfz7xaPw!iSU!E6Fv5)dPFE* zh+OjQ(#pmogmf7|gTaVRY1XHk^#^&?wU?Krt@wkTWX;ua ze--;QxJsXae6hLryMy{wgL4&To(wim`TERS%x5kbf^yDNIEqbPRF}#7Wujfu9Nzlm z)t`0%Ur10>YeL2=>e`BURzc&ypelU$@I(=24WlErmYgngZ-EpgbNM?2JXDd(70~D?@~lh!{Bs; z-HFj<-Wf+u0lUP{o>$l>o)Z!70SrJVkT+UFjs)_uVlKG+c^+>4B^Y}%os<26T(K!J zFYjNg8mcvA+}oH`&C9xT35Pw8{qGE-KLA2>ez2cA;@GnK9h?fVVngVry!k!xvkid~ z5WOq17($u;gd^bWn@=Qxb}-iqmzQcmQB}k)8&g&!{w=OZ|JTcVMwM$MMT@?D0Wq(U zJy)T+Txz#$IvNW$b39d0Ve2()&{Ue2oUPWG&6%zzv86!Wc@Qvh-{)+X$GhcRVzwl2 zWDckiD1bzbq~tQ0IA$T>Z( zLQV8+s!H*6!?EtXDsUj-&k=(riS12TV&Sg-VR)0KnHkN3C?)D;)9TZK*}CpzS!kyh ze3B#Al$T%%6oG33GADoznOnOQKBu3@Pn%LRCpb;1giKZnOv$9in`w~?c$YXYtiq#U zGAxOgn)%@Zx-$8 zSjRTh5bA}g*KhsyNBYzTF|wcVO(W`Jxr$ZNHY#FK*UsC?Hc-NFsU%?3>T_93QyN-_@6RN9`SE zJ4OffpU*KEF~3G=$4b6f@#{rtJV$2#@ZKS$hd71AmKk>ZmbZj~m}rK8AIlb~ataQ8 zAVp2gx%7((w(GycD~>x8Ab!_Bnjog1J9Ww(w`1OX=t+3k1`cIQV7c1QyXT0kOT$la z@14Kul-@8DF)H@^Ab^g$@-Yb5*%qEdx0#D>#MmSovZm}GFta3ksMcs-E)lELU>h`1 z^YeJbcHo7+XWuv{r46`p8@YSHH_JT(!shS1{LB#aqrqBMpQSU|v7JGgHIWwS5UPie zRnz#Y{#ZI2OZP^|k;EbutS|7%i{(MKXDU8_TU{~8r^`R0b?#|NgBo3~u<%oswpxM_ z9XbYH;SH}}lLgHn_6k=JKQXhN_B&(B53E-~F&oZ6Gwnm2^Wzo%oFnOxLpLY!TgC@j z7Zpm3R}~<|-yYNF(ru2)S5;uZzP}^3H;6X1du^dX>9c8*%T?(Gy`DC%K!`zC#ZW51 zs9z)nAMN0hw?z;Y&j{s#8chl$3Cy2WrhC)P*r908&>qbjQM93Shsc;x5&v-pv2Jqs z3~U{ZF$9X&CI4IPi#>jdbL@mu+}d`>ef<(wJo;t5%cv<)Cbf?tlvQVs{u)!>cp;z(fAVeKI0X{7|CL}EuXuXKV$@)xD2_W2IJ{15 z1wQwgV?y`DY6u}~H(S%)MaZ#7{T00_xyK%W|6obTrAX|v6vng`n zd?mVAiK~6D(8;TG(qnLomo)+#Ka^G%*7Aud6&%2mvpmuyFpOz+~!JujzqOG=)Oy?T+No7 zWxTOk;zooDGDd9SD8Hc^*zmD;Q3psi&98l-Jtcv2N`K5#6Z0>?4(3i}d$7!2TF<$G zpWV8o+fn=G45y+;$caYLX&*{`Q?lM?&_CSHxSgacKB_a*Bgy)V{p3(is`KEUKVyP- zkEi@9{w7;Z!-iusZ67_dZGC99yhP79;B<6+^oA7lLv>J;&)Bi`$>r^>+0s`aLarqa z3~f~|h&~jWAZbj4xSyW{(?S9WF zX&}e}mH7qYPmB3#6Kkkm!(JW+3PbQAx1ZAVF~YR@PC9z{rY^r`gh{-s5gBXqm-~v* zq+~>`b0Zf{Ljx%MC3BO!w#8D6s@8J%R?pfffB^S}Z6^P$bQ(7~Oti!BW{FXt`drBV zkC;<@8)-Qg-uj7vfc->OY!ze#VnV=HIoejg0(75P4}sELYNeRbuq>5v9K1;%vCnDx zi5=!jxwl&z^3L@$F*oCfTmC^SqPjQtz41X4Y{-Ca8WF^ZyT00s{)x(CSk$AtNuskd z$V~1|b7r{0ZfTo2D-hJVpiwG9IO@KqT3<5di(X{V_*!~qga^%7VRMv0nltDn_QtfvV!3YQAQt8DGW>9R@ ziE2s`v6j<3dllJbdSGXk;Zo62zmwn6Hwr zd}^yTYmbf%ND-Qv#GP>!(jqNoW(+iqhcZ7a$cZ>3aqS<%qAT7kS`gKL9UPbo)gEc7 z1cH1h_>bV%nP^|4GZVr-WmPE_sDBRWUY6=ea4b8K9~rdc1H5+P(~%1mza1-!{t)FYvoZ z$bap3C;K&on%$b}i~|Mi{MLvRf!JLavjcW1wP4on!CGe)Fn{ixC7b+&&{&(L98D4; zGPl>XefcaribFR82=#7OSAyTWw;0ZkGDqqo3jXsSn#D($fakY%J&du)Ua&4HnX=b z%K*SSxKd8xo(tx$FmM$24O>ymJ!(cSO^6lU`pOdc=e^GnhrYc?i2Ixc2+G#amTw5{ zlqvXeBQsp!7)7ZiVs2FG$3Te1e*x2nA}DrtIMpF>izF*d$fj3dnD!7rK#CiL5g7x8 z`aFjpR4xu>*>1tRf+pVMc0vO$cgr2x<8mDRPZ6Yqs&vef){$uS?0yR5Ed?jeV5QCt zRbxAD>epqvnDYKcptHLQ3EKkEw@|@bevt03W~s&K*P3q%OYDGGEkUn|V4?$}J_B5o zX&@|*nct!)a)F4d`vyxEg%z}w^NsWh<*|^QW008t%YOtFtq8m5fhbBy{!ar%Uh3Y4 zW!cf=)e_Yg+|X1htDK2d+y0E-PeMs5d>eS%fYz6yTM#aPqK4EJ{KVL6HHR1$qi|Vg z1faNVLh416>I-cUz3?Xrh-(T44XRX~eC@!^4Hc5eUz>7!XT(#mC5fs0M`f=nQ)8X6 zZm3c6HV@_37?zt$N8|X*fvQnSMkJN}c;&50UcOazFjh6ihbx z#3CA)2z5qBma;+ub8~uFyu?&Qkjj+Ua}d3M-4`m&T=3!YxZY)`p+16^LaHJ$M;f|0 z;?Kz@^*PfNw6Ls9QVrQC4?f&MC|Ist2{Mgwd;^Sx8sEyl?B76{pWX==v%u9K-3y@s z5+=b#X(Y{23zX%d&-^!x>w9M!hK9E@1ZbVf5Sln3*5udukZo2`WfZ11S+N60JDIFj zbPWhG=1-X^0BVQ%At^*&x4SzW;1Pe8&NkFeuf9w)nhCUn7z;B$sX$gpk(qAoW)vs$ zyDbF%PIV!W<;6I~3<-rn?f!?DC4jiAF|n}_|5)AGDfPpy*=`0|eh`vJW-fN9l=&wH z9Hri?9Uk}kND|k_8tUS7A1Qy(3*z4kig22Y^&cT5qb5Pb7J~R?o;Yn@j7@GA1UE^j zUY`dzAaTLht|dX_mm;NUKaIwiQ5lbO51PHdWU%^UHZ2{B9kzN(SpABn!Lx?buyGB- zRUo%}M7(KxtMkGtr;?lEUOHldukwO?xumih_*1C&#!O^{)EJ3H9d!fy&ekzj5h$QK zd#DQ)%dtvCa-h47yU5JvS#E688>^(M7?XJCt5zff=m@{*cF4q1_RBEj&b{Sx zu5KXA9h^yyDZgZzd;TP+;I;CGn$9n?M2ICVL@UYVdM$KPj)`IAOIGpKc!D1;!t6pl zJl)lR^d-NTwl)e+VE$occCA8C0H{(1Bj%W-Ezjh9jo(aF+kibNfyRF{h;u8RZDKe_d9rl)^FGO^& zol8h0DmUbD_sB0?H5GQhA2M>ZH%2wl_KRz%zxCo6u51MBC6MFpBA8vb^|AjdaAGZY z`(NrGoed<4Ph`kKRZnB)FF2B0T4jsm@#)@2-nj4fPY+Z37Oy7&HFM`-%{XU;GppmD zs$?w7s1y5iV<^xbrKc-U1qvVcE=Ep^ZvL4x!l@1TSAN9~KprRlvg2ccCZB1;ou=zH zM@IzTm(XgRe2P#I-{z6I3phke74Q5=u4QoE!aStf?l)95nV=w%9k$Cv-FCx^xD4U0LvK^bRwhJ!4)P>h}!X66vKjsuH>|0P^EFY1$G{w zf1Ir#Dw=nm){rhVn0}KcjVPOFeRL;CMYgT|+WNBr;vE)GBlZFUJq^K*<70C~*NEF$ z1vN3hPKp+^)DSvKd~fGIr$6Gv5@WRj77Kd-$WTgUFZ1MJm&K}(WfQ4iq2@(w4$A+C z1UHJ~bb=<(F94l`A9#g_baYenS%~m*Kp~9x1Qw;KLyy(F$Li zXXkCMx{tgy4N}w)CZfqK969gWB(RQ?97phlHai4iuX=Af{lSb6jybZ3t$$AeXl}?3 z<{uML-Iotx(B*YYpbRqKD-@^idDmV?sJApYbNnhly&#B(s&vjT9l0$+h+?awfQ6bG z95Y|p4#X)D-+qsFwCXgiy)mLH<}d~jmCpq{{ro@mctS!cbD6BBr6gv*m+)<(iAN_6 zN!9_$ab4)uS!Hrja-9fb-%Nx3Hb~7oVad?7e>&ZfE^-7j~rhwc8`N<~kQW15Iua9=B(@cguVZic{~ngJ;}G+X_gM?AiY-M1M;(4-oLX<3<(&n<&6&JS z>lBd-{tJfr^xtW#1HQS}FS(_lLOUf?_J?=KRrzg{gZ5A>ymLRLt>*zyWz zgb3y-TwkaG@VM&^B7P1VpfUq+)NY2S1T%gs{^BNV(04c$-xfEZ&8zxy)e)TV^=j7p(F1_iYR*83VbAq^(f^;xnH%!eHxJuu~js^Cume@u=&{X zK!Avs2cX)b0nl?KwaT=4Amw}R(#Ws=g?bA6;QynBT|*&M-dAVq{w>s5ClW;sgeIE; zift??R0w*L_!lDyP)oFvvPlJSP=uOju<-k4_1L=*p;jN2e!49qr9s`9{E}j!Y#mK3 zHBp%a6wCH)9$%Fs(-T^S!oS{?`LftvN9m0Bb8evkLPidSr(ngTauWkz8xdTn$8Xh- z=;`S;hjv?t93Bp0*cX*fZdDfFR3r^fjV;438|4Wu()O_-Elc0>ePcYB2NTT=5pUtv zIm0|4z#f(Fr*_rIYj1%DnhIZuWb>&GCqEM%CeLWt?{Ues%w6EOb=TjD1WnhhSL|h5 z@rw?omLK~7RlN{CkeC9zdJRU9F zgwFkoReDSZJfOh87g6couYeEniKemx8p#_XpliHynliEW$0B=HK!5RuIcE@G-tQbA zT*Dz+-lFBb{R~e{kpZK*3y>f?&9X_YV?26y(zs&nSsCU?XIQ5qa8;2mT|q|ZF{`FS zEyChJ*$>FTHu)3L>axJIb78p}F$n7Gm&gl}w5U@7&w`kE8BaFUmO&wYB$4_bp0*qo z+*cvJK0+=zRdO9oa(vQ|CGy>+g~wRCs}8#=zQrj`xaqY`gohR(7PNb7wkB@ZX}Bcr;g#ri zVCBZ-spxPLo|Gn^d^wwsHz(?=Nu;gz6ui2f2^u-)7uu1AcfQ8P*wWhY`Quf5iH24= zDj482|1{K9-%hl=Yi4ofj{AM*1c)AkU8{U8!x^bUS*ZWgp!(=v&ll_>Z_fM6C%iwOG@>OSj-QT!svv|umfl^|l z7T+g3(!*Kd(NGwqeuHIfo?Y1#IAxQe+;r!S{bZBK=*@vxy(X#tA9+=_Z^x>E%TCK! zZ7*%$ec#Ms6&Jzo^R={G(vwZCKCGHKmKa!U-{Z(PUzeqH$l zIZ-Ux*%@U3_svD6qJYYEoqxW!UTFsaf|jp>*FD5yOoYf-l|5W0)f$N1>_zAMx!PK3 zwMOzcM0nez-2)KOqY14bcyUGWoqsa;cGor@j8MF&h@5!29P!*_gb++^vnkUE0EO~O zsMbwIazZ$025Z&Ms$td&C&fYtKLFbDnmUFgE=?ZpmjV%#ir~uw`81HK+D5ruJ)WXE zvwI5^YC}N=y8c^;J((5Ml`OHU-d_q7!UeeGfZS`;21`~K-%YSyi!jI|o?OnrL+7XZTPF%jz<)}3QxAQCu$uE$ zl^tMzcoOaMjt;1dTSTv(BiWoCkAe_z@%y6$5T8Xh8D}%(Jm?rueDM>pl|PaNpsI{c zptpP<7*{RX;s*&?m6-wNdmc=}8J0++7`}vVpap~o(MKWU>yUt*%)WR@L5gl>nivW1 zhh9{tq6B&gT*bkXjKlL_H@oz&%J1xB`Zh_g+GEPn?Z&~l)*DJwjwjz3DJWdvs}RB~ zX%-dzja;%|4GmJJy#2uz0h#gN<`y>wS(jjEua=@EuE(^Mzmsb5Vedr(Tey9(|4a7;=UoBCpeuZ1nAcWI^`hsB) z6Th*a@(7Yb}Ui>^xmYspAyl~ zgwJ3*hGdZaKcu~7Sd?A+?>_?)k}4n#B9cmXmy~o%gOWo@cPJ^1fGC|aG)PM~NH+q~ z!qA$bobk>Q_1s7r<>|BSr8}u7jA_w9@LSXUC>RX2j_^gR$nr9u0g;`S` zJQQ7chsNW34-gNNj(PC)>X}ahOs@TFoE*`sc8#-yz=i$2IX4 zMkv{(Fw?sqZtrLjp+*MwvEXw3RVh9{FJ1b>Z0QCL?c3e*@OTcAl-4_HRFX>5vSTA! zu=b{#SqvCT#=*tY5(5KI{8Ps~fsm-mPJo8H_IGyR%fNGPD5)!}aD~^!@Cu<9Gs1oK zhz78)r|Q*0+%c!tsp?NJb7IwJE?nvYY1gV`tUlxDO;c!3*XOVmdqv;yqXqv?5v30X`U*3onVC`mVPUDZNZm5M zf$u~d9q)faIFfFQ%YQcj?kog z(>88hwpTOSZ>W>@OenA|AwH}aG_5T9H!@~r6kg#+aP5p$82_1(WJdNEYRf|BFUrae zJAHtC)2QOdbvk3W7D=|WP7gXA08qM<&RkOs%r7!3#($0l>Q##Va+73+(c8XBZGoPoPz;E$D zjA%Og@7;`kFv6GZ!-yh%`RGH+aMXvffyjNazU}fM4$yL^F3@O5Yu?}g0wKUm99tLQ zC$>30cv^-I0MH4_bkNV*;0d zuH7H?T=M)S>M@FuoamAOUta^Bqt5;PF={~DpQMHQ^nY+e@c#*mjaHcXf5DW~2km_Q zzW~4gUk@f~M1WyY9NR%jEtpt@iRKlNm&XH03gL+q&pZs9bx56f~qMO7)lntvK(F%WH7;{RsJA`3_1G z;y0>4ObG(WUz8dp9G%DeD7gah3>5Z{FeJwrknU)m+bPM$#aK1!t1H$s}@Va)6-6EMe5 zb9cJ(N8K3eATa^K#Yq^v)kmtwGL)OAv7B}F<{@dOgEOGq0b~o5CaqS5-(r%h>f#(+ zsNYgPKab;qSUAfs*tK7v+jSrQuFpG&BEjeVA8A+Hwhlfk_b0sJYu@d6 zqmH`s3S=%W075mq=Bw6PicyBvQM2oG{ye)O z?Bk^Az}8w`sexCe@Uqf7e3W30#d#{wy!_Icj%t8Rm+d?b%ffw1LPEw&cbC=@{rP59 z)h9*;@>y!cJ3t|mKM=9-U}Ge9J}rwZD$5H`-*ODIlm?&sS^`8Us|Q@eFb7$j>g zQ`?@Ms&<^6ikqA4TF)bIbVVHvuxI%~OfpH-3JOweoZkqlMB!)KI=??R<$|$rbA*4Y zs-^Cz(dEvtDrZ`)>;mU3)d=+U@lTKeL-&6~xn0@{%I9Oy z8!y&U^WgA@8HwY-1yPJxKjzsp(VSFmR+;>M_C|HovT--r#G>iWq3X6V=d!9rbsvje zcVo)Kn0s#i-lsA{h5cgx2V!CjnJy=h+na1WKk8h_=5*uAkp}!WMOe!XgR9 zTMA9C)<-DG68&GA6;LGsHg0@OfY=#zWKmL?9SLv|fm-qSPX&(XihF><=@`&p1Gy+b z29*GUpzPjIXZZAR3Rb(A2zk@U(W{42Aprs;l+pzF0^nkVl1-yNlyC{8^+liXh2fkS z`TmasdkmA+E8*O~pOc^etS@06P%H@m$|fO{?ix5(3l&Q{&9^LBbkqHbk;lm>wG$0k zyY3V|I+-ryTBw#K&g=490fTEqS6ln#Ulj7K0hI|S5E4&b z2*oAU{&jP)?@IM;VX4K}b}U;myiV6;uuiQPyMY#_1H6L}$jckP+7#JANMnn$BA|BFH$wQXQbtU~z zx@doRoXT6=EHZiA9=nRT-F-yfmEE6nbTS}U$N*NwO)D_MATUW zY)nkyCjRF-6vA$W>)7MJzPnC;BcK*mZ}QmRx`t=zz1t(u1Q*0f+zGnx&crl&?7yNG z@zCxA%}$%c)UtGsGsJvnob#>lIWTE__qh6Cku!A;hC1>o?D{w3CZL^g+5m+-`8W@% zqIrI&CFQO#d{@8XfF=X*d5$OM*fOoX3Vv&rWLABeDq-`qp43jT(`BB7#7w4rAaa82 z)j2oX)IrW!MS{jzN9Qwy-?hGv3xsM;n5Xi@Sth&GQ6FQfcAX5f?`ZkkMcXbDnW=Rl zi-lp|GF*c!5p^%iqYvlr}N|LwRamL%EU5&nk4SWE^RwL;}cNO)&ei>m@95q7fAk(Zk*x2vujYjRSoXsH8qXrB1?6u5LLHB5{$z z(SNZUMgp#7Lx-e1NcDIYRTmD|V#1sP?A4|$WUFqC!p(s19F^9=-)2zL%&7j+6M=dg zuYT;YE-XQJaVE&rPw(Q|_Y=5lBavL>{K%J(ia5++`3B~tL-4A^;pQ%Q&=DlI|9E%P z@r~`Qv%`Iwun1-PcwQ1H;^VkvLE&m4p(4B~U-2SUt`58}h9!%+&}S8w=dp0TB>!5i z^U_JpQ<>(KjGyQDd9Vm>K47cB;HBAz56$>;P;#38#*YCIMMl6=v9#&8I+BdM6r!S{ zNT&QQ7d;_9WlJ@7+&nzf)*#kcAxg6gAm3dMDjfNonW@UreDvYNOFhg(#^(Bi7eYc` zJq~^;F4Q^Xg@oMe8+VC{h{)bwsGt1IW;li96LH;)PUZfyS3Nq>8HzjYX4vlS=hrL@ zlM=+U1(@U&{HWMi=*o)O!04#nWV~~W72v;G^R|!RJVPN(1kmLe2*-P1+lspUjyQ4I zd2i~Jlas^Rra-wux#T34-6;}FiXQQHG*gTOM1B2dGtFshSYTOuGFmNDbX!m+DI=rI zRKhn@fg0Z3viVPY zKjz!!40dd+7rOmZZgn=)Co$2q90Oydww{p4TpPKy#>WG@&wP6UY5gn_=<{jb=~a#_ z%w;RqJOO3ZgRpV_gf^^a%``S!@@YHs8y61mAtkNMsA^oE)74McKcwwAYA?#K{pR!$ zi|yEr-#p30#Mojf*c5Ybt`W=lk=Y!2j3uLOdz4n;+RuX;1D-mle9ZgEWxW+BvN?7M z^WSp2@b+14Pj#ta6)kw7-=yX_bb#1tAt?Qg_hhq3ufFGPn?aS?B0o$cbyrti5taTy`uu8>(-LD3H)JL<7(k80*_zO!+qJqLn1H6MqaTy!X1&D&KZ#Kpy}zbJAq2eE-D zCeWR>4;GuIzkhq%H=(5_CJV6g4_f}53{EwByJDm#GO0l;S`m@#Ce4NA!QeF-zoU+- znm3IvKr}(VqhgopK(Cp04x*d@3CgE}PO%86)Zx)Xc-atsuOlYpt5NsU(V9F}oo>Cy%xsNHhztkeq0wlqTjp99lYuTX{QFGk9H`)D*`ZQL)V}Cj-xGY{s9uk7zZef@@FXEqPtH#Sydg4z|N}L}xOi z-n_oo0gx#O4xibBo@;Y0fytk93)=~onCb)9_866kq50ZSyb3n zIxLV&yBxc};DS=i_TY!T@B=*s(;>xdwUo?)TB+|-e#1fr)L)bWsUIl@e8Z>_e-?r&iz^ufMFUIV@o%*(BnT60pQ6HaT~cRS{r^P3Kr&A@O1tQ|HW+z$fJ_T{crWExg@Mq)5QOY6uhW+p_&@ zIdnfy&0Pn(ZQ&qhba&r-((;oet{mTie8_IK5sH3t%M}{S z!JPDZ?A3e)xZQ=Kb)n%y+&;`i+|Wj+-}V?-1=Z4pGwC>_cgO#C{lgU8M`%X}_T!Y? zMBZJt;Z$OEF)AW&4+97JwbA~7xWVs%HZu<+<*=Oj)A3*I$a;oA&GGipgfFATDgGy%09^i|QB zBZyW}#xRj&C>F70WNq`&@29uSiC8pVlHPIVK~7WjCNJ8FVh=GYmjZ6~E$u?Vt4HOz z1ZJ;Cqqx6_`PLz#-+8fsK$t^oJffvncu)GQf2Q);5g+-kE4KK+t~_8D=qd4m??hF; z)7`_y^JEb(JJs0GIh=m6D_gzlK)72sy+<$wDrkmJtNBYHuPR4lp$+rbo;!}%J zs|YMFe-g$s$Q@85EX=#*CXQBJZKLKdn27PS7ngya6xZSAzQxO4C$N}+;}WqjpQHKL za(|uStZc1+l3=f*rX>+JQWRdjMR-eJ_|TLm{k z{nVi&A9(Ed8hXCWR`J?2AMOw|Bdn8iqBp7~uC8k`h1UJ%6cx=S0dA*=`!#%gBjO~l zQQef9%WX-tRAgAxJ%nHW-XtzA^r&U}!<}Fw?eMWgaS*Y|^fnV=$?jvU^!&Ly`7NDR zM^mGu4->m&R@PaCY~-C)8E zcvfIJznzP95VzOK3Vz5e!O{e6;2(_)bT9D11FQ*LYH`2U-Y<{!ctETxxF(}v_>{$* zLGolzaI;1;L}21wfY80hc9NJ1mY-iZ%IU=qZUc$4i5)dR6}!8;i!EU_0JN#@9jW-V z;zr(L8SiOk+v#z-Ftvfzf*x`f?^@D$3wDLpd(4gYj*x>-^ar46Fu->zvNEi9)Jd~3 zXRZD$VE;LkyWPM_ZGR_ottmZBZ6TLmr0VuSt9FDqXg71e^Oc>da9(yG} zzH1trtK$1-8?lf!v7EW5z=Za88%g6>@`MzMHAUW6Re0M=Tvdx*S;4mdARl_mZ{YGd zVE%bhEF-|{QdsfX8OHG|ChvNgd??1g=hP=80omG8_c6DEAA_qZu8^`YJ@7$ z1(q<^X{Zu@$}~xuSi3Y++>*w8pTxymV?IBVjd$|lE?aS3 ze;S+UBv+MsCqmEug~mFlmTjX0igZjRqm~pSd+GbF4#qIH>^aP|aFTPj(z;O-^Zu-i zK250n9mEep$|gbCvAlg{@}KE4;M_@mmghl0o3qfq^_HL0wz7}ysy2>-3X~l$$^XLf ztrvdI4KyyFoQaStM0NcR#!~yMDstYzRLN7BT#hIfF>#JpT)~zp73}XhA*oxf^8Ck4 zp3rhh*_Ik!A#8+Uygyic%67p3qbsXSzyFvT3WuMzEN+N2Ca&v~`=tgv)$)_goqu@H zbTGVCQu~}Z`!TUGu+60hI^qE4A%&=45X~?;j9fJSi#QJFIOPgacJ3{dQPTD9&-D({ z2b~y<$rYpP1QPS3&Bo4bF2>8AD$-)&3nekbv|YiDZ$2FnA@KvBJjus@^6@+wJNU4J z*KiLF?=|L-d1DD?;T1V)NLQoA@Pmre&6h{rJ75xLK8Jbj_nB6psiwo$CTX7)jnK1Q z!SgVdv4)X;pUVT|j^M~fY4LRYzJRM$tns!f{#KUE_V94uONB>5i(3cqnNZ)+6T1s_tb$HeQ)MR0D zFN>P;3ERae)JczN(tZC!AzRmT=taPfch~$fto*O$DUGwCJ05eNUKs+$;n#}aes}ey zR*1+){c%l_e;m}v^(@ZOtpBzz9-B|4VWEz9L$<}$t;WBLAxg_{m2Dp+X<6wv23>8{bA|JG_(xiO()`O71_ENGJtFPj2(K`)c1=HVFq6r))i+PIaq zUw@rTek!9V6J3bo=HYwNizn!g^dac?L||RXsOe{Cww>T&yM?+HnnJET8;&)8^L%q+ zehlREX2i?KYm=mHwBJT$`!Sho#7e(|CA9l0JnR8zsySWz>d-Y0E z4wRT07=z1mw z7c3890~l7>>qDuYUO=CIs!R^RHe53h$Z>n69I=UsSIYVJ$Cwy*p&q>jmbw1K=<^nY zN-?PLXiu0j7Hnl6WMu>snA%uyYBR>ne$9a^IoiLwQ!jb6_I(pf(vHzEsixu1uYBD@tm<$|RjS{ODdeLD$ohK9Td!2q z+OwE89Z5|~(=d2DOG*SlboM}?21lKqo_^Xo|NeI9r5d`D19d^&HW41>^Tj~qEl#T$ zNHia8=TKWT44Tp{GtfDzf=KA+nV#av_?$f{5h(TVG0<&iYnA88$F);BZ&Qk58Bj=B zqQs5k6-}G(RXf^yif=G)9^4jnQQOF=4EI0y z4rkqOC`Hn!?Ljc6m?Zur*b4-{DFfA;%)*z#Y4#mIW_T7#29g)u3 zNC>%3hELfgO&(^WDXjju_kug3cyyi%^gMPI{^rP)=gOPx&R2|f;bDS2V8c&uSOU7K zZ6IjN+G&teAvx#;+BjYnZI!wCO1^*7jG-MKP-R;@Kejb00v}f~wEpS2&?6M~!_@w( zYTy!A%3Z_TSVZ%QJ#kAf=*GGox}KWl;?@1Wwm@Q8G-my)l7M4fV6S6qUaso+mQCPj zGb|oe)1qZ(InyyqFr;yR>17weUXBy6p)kdN`*UwH?2aoSetxQOxpn{SnGC~Bi8znb zqg($!l6MmPnh+SjrjP&q%ZFD(a3r@!5Vh4!T|u8!Oy1p1J`+O#Q?MO>hQcT{e2RN@1qc#zIEWhlI(%I90yi1k&E|fAYcz+$RI|sa> zW<|5nxW73QK*K%uernveBc=1AG5<-1B^kcx$pHyW9g9 zXf_sT4BAD_VK=d^gQq^d4B~9k2zZ}0gII!yn!iR6Y8g4>Nn&S*)ssGnb$y+6pW_LX z-L5^t%^ZhaH2UZ<{o<7(c}N#QUB3W7AP`Xf*`pV%R*Kc*xeX>s!|D*ZFZq(pk4ZG~ z$Y!U)mEXSjUVpdMtDkN-nOZ@7K^liWJ;cV%Pukr~@^QT}f4z~RXA79ZZ(d_2G78=v zzlthqP~gEcLv|CXjnyv)lnmSp{HCf~@|-N-Db`q|OFLAV(`)ot8bo6_MK_NoT8E$x z8J?fUDOB_0452%nbm2UgtM@ZHwzdL1;G~a&?tDO9q$|@a&9?gYv^Nxc)H-d7->G`0 zn-fd0oVNK7?mZ|eW6)WxMW&egc0pNqpPWUcB7C3EKu^BmIO{Q>j6)HjS%KS&0|9EQ zOlC*qec#eJVr6a@=Hgc2<~64~6ymX2AIHVl(=Uj)uc9g=v`!<}kb;{(JL)I6{EeO_ zYz-8nrEhAgURb{Jh)(4ECt&Y7jK0$mjFmh~p#DK6Jey7?jCot&44nTah9#RYZFMV< zgD8xpc)q;Rr)yr>C~o<2Xopr*OlZyFL`ZGy0smZwocPuDV?E5VZiIe59iYe2@Y@}Zvex>wl9OBHOB+DD$L;$?7t+zv{j z6mZmD4nHw&bh9ns=BWZUkwqz({pg|v2$f7;^er?w@N~oDjqoaGRrHg%nx|^ag!c0x zMZ^7VR)wVbgqG-Ay~IoYHy1)9^QT}!UMRuaKGWfNry$YJHIWtYMK6#-D5L;SAJE}* ziNimZq7`E`I<6CcJ{F>1ta5-ZHtn#aO9MejRK7xAk34-OS3!Aqm?c~b``_MOrTFP} z3l9haAIYH3+NlTf78>qo5ceWXaP5#5MAzrA81^>?k1FtUmN}U;@D9iPpFpHMNT+n^ zD+ux(u+e_acfXL2<=?bOa|$LbYDH)`hpI1C%ldzQn%u*ff4-+)9I&DNU$QN#L6b`! zqqa32H6|_pK0hGgqI-z9tLg9ONA=Hn{m*>LsAc8ml#O5hf5s@vk+;?ctYusA zs=~K%Qn|{I&s(o8+If}uy9}a8K3!VAiD*kb)irKR9V{&0#BbBud+mxN=w81$rB7yx zGSFKCLUaHdGB~u6CO90xz?sY%dTpG+?BW+-t$_nHUYkd(Lm z7bS#0F4E*IZpu=sTBN8k*)%q$EZ2n)vM@7*Y!+w5`C#j6SfAJ*MK z?5{7RC`C3z9sUtWIf`Kv>MzCJoJmtrWE=b~as&w1F)#=HS_Bk6j@Is^;xyFsFSfJ0=dA_ljb z$$K_P#y)-#JRu|~=v;dgIoO~3aWz#!3Bz4YX><+~-VoVb@?4FM;1r1brIr;)TC?g5q;z+)CZ z{J3{+T0AfSc<4^)v(IKsH*dHsjeRbL-6@r{+7FBOmgZE!of2)VV}Kw#w)5} zH!c-PqiesJy;KK(V===7-Br6sHf0+1-AGP^VtVjhQ#2)igzFx%^e0lb&w{6x)f5prC-| zH>ruVHTTG5{hi460*|;!Nl^!vlZ9C3;*{`M9Q%m__xf+T5jYycW8Fmw0(mz?IbG|O zT_WT(T~P8pddFp{b*VCmqQbEBEHoU_{Mf+4YlNui5bo8ih#vAT%Mjb?Su)K?*0|85 zG?m@siP$a98?*1J%70zEWf>li<+LjUw!<6A1eg|@MlN&(@T9SXCqP1Q>z&zS47m*! zGEtIDnQ*plckUNiYipwuP={7G?%beQ3~S#48L+~x(!xW;NS04MT? z-el~^%ili6OY&5K-|8qFZYo3TVwxEW9v87F0DiC=loV+dCco3MhrekfnHugM60TKi zBdPRQ;m;FJt!t@!7)doe?qm_SGW$O~)_pB*RAffoQQ74-IbLr&vbn~W@nsJ2{#sS@ zy44_xR)%0JtP`Xj0mH)1__=9`T)e~nGvO3tX(x^hsk#f(Pi5A)s5fPDkiQ zORJODq0RrNSRLTh%y%S4^JzbsQ!+-PFQ_vJrw|2u#kx>@$lVX}5q=tu)z&-vb-d`v zMN*8!#0eNQ(UkT6GYjOPA;p0r5TKS4;j1xX^}F9(6K8 ziS;9~yrWduwe9$h<`SDTu!jqR@8CAm2;<+LJ1;PL9v3!ayxjCLM)pw!f(vaHbWc6_ z%M`rN%4z`G3+33{@rZ*AaEdiq`j_`&FTL)ipjJA5_p`y(L-O_#SM0|HY&1rIs^nFD zfULmcc#_qAWIiQAHnFU!gJ7mMhoFPkQJ#?vdlOkfYuAkK?mroJ-|ZCoHK{WQ@nh%u zqT|arK@PB*a4RcOvqOkIsZA9Ha-672dpj6Y766$b{c|1@Ws_PHP(tf)dJH2nQhRTN zL@O*u*{|}w_`5`Ctm}zKz#u38-q#We_4=D}MX-8pQ z_9jkt&Zztc&ghOuh=ff!Jf_q6+nIs)BsJIu1B%CrmWm`&jU zy;T&D0sOFg{m%;MLlRSMT*3Cgr2&gErtaMko7#V|aEl?opRLOVn9H13dtY+RH>_uW z(4vwNL@oaXfhr82f!zs!aquR4YsygP*^C0Cs8n^nKqMecyk7&kB@p&wOdh1yqn7{Qn>%yy(rmfDpX!5An64}AymqhFX*p9I zu|PtlEaIy1FFrTOM!{!m$r5EiK3M z6%)4-)x>jvWL7+i(O_X=iLLIfv!CNeT&)AvZ)y@ctMM~d!>QxnUEx%Eud4y_qgXUK zDM>JPslWx!Hz90rMdRkd7Mz zUnM;<6mR5fa%9&^1G!G$Wz?H zTNs#_CX-mSwg5t-05Ghoe^djaa$cHqadFuyt6$1}NG~TC`yhs#Cyas*@)E#a^w9Fr zqFr5Gsr9t^L7c6m+Xht@_W@)fLbt+XpFf(Z&S_a3GG9}~8aL0G^aHprsH+zC*ejgS zr4EX0?DhOwE9AP_a1Xvy39tt1M5E(YnA(3vpa4GztS)Os!P?63#cfIjJAwUz^&Fuc z0jXNof6R{c^uT=KyZaY#pZI+!upA2?-FvfDb9<{)b-RIEwRmtZe*^$;uNGLo*i%#Q zP-v1rt;m0YwiA;Eo8YJ)$=(%Ep<8G??w$P(lz1!@FADUn0({bu$RL8xPfi;PhgyQN;JY-LZf>7uUbNsz% zVf39@(?As->k&6URsqnnY#Sg|8cY8&oPauaZ_mDuDR*p49c7zm12h#&pIjD*yql`F zR_lZ92q^peuZEHq<9mtmc_pnb@>bD^`KbScW(;Xb%6{*1^)J{1hEj+t1b^parDzxM zq6h4r0sA~6^Y3oYIAe6n7v%z&9s$ONfi(XN$Q{;ftIf|7VilKp;imhFPX0V$Cf9HB z(MAmq?0&4wCxg#+2h@uJJwsK%j7T(1Dwz^c%OQIf{%lO;w)4kK0VdrvrKEe%MtaBt z17G&k&2G$zup}~{0Vh70osbi|DR%pldrZE*mtFhl-K#hae-w;Nt%?Ba_$ch^y zR1|c&>~4RHP*mONyCq+Y=x-T^y0U__u*=F|))C4MfS{m-kIwR>dn~kky%V!#4!7Q7 zYf|+ri>d^LIW`H5KgWfA?y6F7W9V@>AfzcpbzO)>wbiiZ(m-zR({u7kH*g$$Gz$g* zRjhF^p6r10X+0D^(+6`|uTo!{05aghvD*CIH-An?C!s27RPwBpqJ_W?(bg{#H%&I3zVz6v$d8U%u^&9iOkYdmd!2 ztc<6U#vh}pr8Nyl$08V;DKli@=l?7hM^jcli)Y(@Nhj9Y+8UeJ3pg^?o&kw?y=klo z5Fvb}BRE-aj=cQ%gZXeOA8T6#Ee9HaPgUatMgAGe6f-mqKEuMm5E}Wp05*9A0;uv5 z-7=SSIvhN_{Nwe$lEdC9N9BZz-tqv#Vo-6y1C+^8rlxZ3Qq4N2!?}=t9oMISoxp*? zac*w_=Ck4dDxEtrF~*W+yMK|$YqN$4nRg%5T;Letiuc6)gV; z+4<9B9WpIijh&Yv|2irNCvLlA$aU)XZ&k$hj>g%@_%LyLniS!_sZrvlSaunN zxV>D~0`};GK?+VmD8bVglNKMA!$OlL&qF9MxHA}4)3+L`s=#$9=nO-t94{#3Dh6-6 zTX@(y%U`#k$!@m%?3e2(3TLC%i$_RI#1st)#%ZRcI5a;x34ku5#khB`a1?M}(WJ2i{kE%Ufo9`N;$pv~I5Gy=0oup)0YEEY6^x0m znK=e@tdc8dnjqw&=W?<)l*6bYdtfbD&qQM^h8NVC<#+O&8%OhIzsL@& zsHjl}mQmZ;gwoj%z8<}gWR=ZZrBfbJC;H+ir+{%&$wZZ+}t!caE`ifKUrKW@-= zYaUmPRhOeM#h07_t6sn{8RaVid_5MmSDCh(m ziEP36=r$U`yrFXoR5xz?`u_Yj^dqWjYh$Z5^R17h;BDe)TW{8KMpoenx@1=7V|iM( zSGhNReawO_85Q34E-zYs9RDeeThzLt%R&nD>2DU)f(o0+IVowD2PB2V=v;~MKMG1Y zpkGdQ-F%)b{>^OQ!T)I<12JAfCI@E@ZXcnlSs z!{69=_;C)ep9U`TWj$sL8!u~mJf=3IhGL!126E0fVGnS#Ba5~0KGx$MN;SQGx;3uv z7w3kMd;c_cx!>&idR~_IrzeyD(3qDP?G3!UW6Ep)4Y1+B*=g~7zR2ZGMtHO^hDz_q zl>nN{Mj+!@4mz)=_tom7-nHFJ@ISkl(6`uKj5K-88H(xRcQkY7VZlN2SaQMhkRQ_I zj$cL~^tMeGD0!U7y{%X_8-&A*9uGjNz0Uc$fLNy;X9m`Kd$DlVOX`<8{!6 z3?LclmzI{^+DI|gT@vvOLLX%Y0;M?M5#ALM04qbQ3C1EU9<6j(sACz;s{5#EWR(6v zbr|$HNC3YRY#c$mWHej}eQXBgi*Ii(pFbcVAkfW9;P~x(yw#2Vh+3RP*2zyisn-b)VEd5Nlq&K>xZCAiTxW=1_vT5ysvQm~)Jgw2x=Yb1l-PhWNhy%>k!`qkRM7m^6@OLP#ydMXo>Ip= za=fest@R?E_5cKJ7kugLna}o$&&jB`T2|&yDS=XI`R8OtO_;R#Js(%k@|PhP)heo7 zzj?L@qC^$D^iS7hwqv>|x9P%+Y42#f0Lcg>88xBSlVMU;=)Vk4Tq`^s!FNL!h2kY< zTp{1a?ZMz=Mtb*dCZ9(^$E!~n$BTZyJV(+6G}%yP)w?6#w;Hr10n?}a?75v%6uR19 zsOXBmbt;_hVoqp%yDc$nLJ1c(u@*#h_Owr6C!X;9WbRdc45g%97ut4S^68dJ?5URv zT1%5XKddOm*+4e;IYZdga@>|IW!Jvn8;kQt>Zhlt(~gZn&*0nNd;lHQvfpXU$q?A( z?A5DRnoEjak24&A85+mpxJ73_6IT*r1v~?S{dD(QYWCitYKDQHDIfQo>0xJIv>|WR zzzlfT=rwdyW`yq|4`)CmlX?lB`FcEnzTA!z|M9LHUoh6=2QW24=-N{;`8XPPBb{+| z4?wSJ=VVx8vwHOsB5zuX;lXbY4f)gYPE2xXuCng6L=WkbW)d(m9FoIHD$6RKd+Bn? z8uB=lvEMNc2Lfi&sgwFHA=-OvL`tbG28M==xXD?-(mqIMU<`Oku9Xw9bb&c z>8XlHheMqq58}LksV2Un=kS%P85tlBtRFRDv)%mBHRZO>ow^^G6u=!~PD(Rp!e-Nc zM-4ebZp_OLltk_>nR3k%d~bm6dhQ_cEh8%m`9oN?e;qJVpSng@J~wPZ*Y+ai5+l|U z15%RI@-cud(VN6)^pYJ0s`gcR%g^qI;U|M4fL!=HDrcu4w)Ua~@S|0Yd)QsUxL}Ia z>n?30Wy{->L5@KWf-v~QOetm4X%LCTDVn6Rva)uTImk39lSUn!0odi&Kiq&~*@I}I zU;&%4>=$AWpt!rUUOU5pO9-SofXTSjmX8%z`EptksBmjU+y8t(5?x!lqgUHFq{~33 znN!lZL#E^_PxhM@7U+FD%hFrfxh}i?BIDYi)O(WW1?v#uA}(Sb2B5Ud27&swhZ9mr z3xnDKz#F^yzbnTS@Okj2mJM>86R}G~O&mWTFd32R_C-qT@j=dID}~Cb?)CWWFjKNKXRcLVo2&ha0N-q(@4oH;2$R z`wS@or_6Hb>DoMiY)lvfuWBoC-X3Ll5Y#7y~&u`j#$LR8b9e%Ow3kFv!?w^#sh%7>VtzNAQgqbAS$Yh7UMVT*7@Rq8 z<5Rvgf93e{WypHO;)C9~-TQ<)0R47wrR}Ja%B!)Af3q4+%ewCq-3Usub006(dG4OE z6z`}UID=>BaSlK=LZO~yyP@CiC+g1hOQ2@K;h;tg8f{d}X)hULifW@}sq*&8{spdX zrZ!4V{WpwZWQ;MDKZS;9nC3kpjD;BjHGg-qC=>UQ;(1WKTvy$ziCJT-$)&EGsg>Pt z#A#lcspsixi(zHi;(4>2*#XM9GgSHac?8BQlVPl&o!j+1a!HP{<#5>(Ys_ADIyYL{ z1&YsVvzOQfBJwZCA3Iu0l#0n8^4Q;bOWqUXVu)RQL%kHYWumnf_{f%U4D-2w=So= zwe&}44NrC`J(3*F1Z&I4RC(5eZP@!=kz35=mE47#$z)aibh z;G79ek@C>1NQmm~!nhiyM?RPQ9*^9jeha|5bXOj5vazXvF-0>|qs<0bv){~fblOpp zf#1~}P6o{M_WuI!d?aF;YSj0V=X=mS3U8;!?wTKzr}2JyJHygSxN8Eg0kPq~5O7*5 zZ9ly_UT0+!Bv9Km_FOE0etSwKI^55+HZkLYrVjSGQXQ_W=9oY~to)pLb>&5p^;{Bz zj9%<#A@)%?uZ5*$(W3h|??lXQ&i0)^y!;~3z zcIL)6Jgc+xYffihYLT5rTTlAu^ZSLM39;}_+u>fZSi8kpFc3OzB<-BmkyL@-AOSpm zvLq%T-}LSh>&7YjZv8m|UTwT}e2JB??_{c(r>j*cn-zMdxLf2#DYKWsahZ*5ok+9~ zbdZi~6$r}of)T1LJu)CDT$G*)lfUx*YI^1lqThWielb)dSWEXPo5VyH#5|L7m-7Dn zJGpZWBWFsh@z>HPI-zeXZ|&#w-Bt1!6wlza^xJ{!Z?|Z>a`)_1$UVNje>5Vn!Fdsr zESN43RBXF1*kny4L6mm~MCI6Sh61ls1NRIho5<9ie(?^sn&>!qbjL^85%0MOc5gJ$ z^c^f#f2qsw9bb^=pN|s?tQP^4am8AqoIv(jxi*y4ZRL*oY-NaRAox0w&X_o#;ABzJ zwA@s>jch*VZb0&*d*N)C;Q%MXRs4b-or(XYrU>HXn3PntU^(VMMu2cPXQt-q2ov1p z=5SKZ;S+C!L>G_mZb%2tOIovcJ!+GFjaGCmL*_`X_cv4yo@NPKuK)_e5kN^&zX6fm ztLqeCwRea^u?$o%VNjk6S@Cw`x8FpMM@!nm&lFJp=*}PX5PE{1?7oe>Ik?!g zZ&V%X_4UG7$`H2YBbXI0nuCKJ*a#^ifWk!eUs5AofvzwX(x(Z?8lh8_<}&BLfVplv zT@c=`F*yIrK%{%!Pjb@j+2*z{Be;cA=&X3VZ@=jhWxi?WoZ#_CoK+q2aQ`93p9s%t zk`gTaE*p>z8|m!&c-Wn)1=!*AP#FEW7jJb0d1Ju)gap3ojG>*I{!N4f&s*{jv%r+Z z04cJM_|33trfAX0@lh9HN+|jfJ=Oes{xS+Xpv3Tg6*{EYAec1>@*<=~69AZ@^5~Pc z(~Zd&Yqcb z&zw1P|L*J3+RF1$_$6?$9)DnS%7Nc`xf5Xc={IreAmQa_&L*`*AQYf}GDcog>kGT^j!^}=7tUd-yZn1W_ zA#U99jDVn*h1t&jGSsSNl^RF>X(q0Me`i&^K&VrEamc>6&}gp9vD=K;T+1biWU*to z;)6Q%xq|~z{-PS|zB~)CMa#WG2JxTXagOy7&#^daRJGlkU*EX$btb6-O62IRsTqAj z5Wza)DB{Z`=J4C~bwKAJ`b4>B#{Kcrt-zDhQyrwtXGQ^`)?0?_kMUL0cI~4~{T?KB z7JnX3R6pzZ{W+L)&1u%oKS=YmM=knJL#)iq+qJ5_Pvc}`V~`6urq*W_tQ&{g`#8w< zJwv6wFZ|4knN@8NnT4z7AtzGQ+d95Qv6hH9=;GIqT|TpDaUW^z%?@Q1740d#EYkg) zY5FnJ`Z_2&PLelC#P!3zCKgJo;AUDm{9@uDDN9*2!ojB?P~)2W-#wTDWMZ;!mqhs>DS|Qx)-QRN8oDh))L6`y_6VY++L*RgoX(sF{ zAIWqkN4Vcx+6vs(J0ptxO6tBWj4m{S=IfpVie0Q$$M0Xh=M~N{DM40K=REq0To86I z&Bd?0$iHTOAkRYjM(3937IpHjCO;I#&+#Yev}2UGv=?mo$D^}8BQUQnS;Xa)SN=4h zHm&bruf`_(oKZQjB3Ie{i(bMwPJ4!wJzpHYh8N==(%fJ9>udNwNvJIO-K4}HH@;yE zh>KCPOs}@;vvvHys@5YG>JoGZI|Km_^DjjcqL}XQSjE}jD4J~0iK)dY1SXSzrsMyg z&bq>#G{u#cDQlyW3_O+B-%*eBuln-jN=%^fQC5Ix0av+>8as|#?oYU-U;C2jI9YDS ztL~yl<32sG>HXts_%E$?bHC=7F#2zb7p!mI8G1!Bs*1ULU~*f8aHpMzLpijvFV<2t zoLO7XhK-c}S|cVwtO+qSJU8DK+W}xk+}LT=_HRZH(1j0hhKoeO#@lt10(>~>kOB+m z1$&Wx^Mu;eF9Dgse`EQ-2{z}Ace8sZ)>}!|jG$cFV(`k}9Xk^|mj_FB(>})I-dt~X zEq_~@C;jVBv^ng2jWih)Yz93)owrO`BTnsi@jXqlSP#AdYaDz9v1Y}#_9LtKI+D#Y zb~0DP&;{QcBxMKnAGHW+znCb|AZS1FCnWN?KEEh&|DfCzn{ z#gG)fBQ5?nwvTfme6-ig+j4RrO>rSrRUXdmA&h}fYyT&)E|XFSCBi`E8ZPr!^I+`n z>EA<(dGGrxceCakEj&`(zK!3LJK2=`&GJ%Bgf7wYPc9h2{kq|px82>~GU&E1ualzI zMD+*3VFOcZ`t0Yo46GyMq#X!GC8c@q4k?^tfBu*2rr3%3d|YvhI4DfQ0A+No;iBhO z-DxeI^I^fc*l4%+@>@6D{-54u&(|nrss*H;+Zf>Pc|!;%qosJUk1pAK9!#vNfmC;3 z6i9U|^s=OLP6!Sd-Vf}bB$e^ZuGc+OrIIG@qqIa!kxuej5s33R-Jb0BB`E>fu7JHW z`&C`V?YryPw>zcD0lV{_XVU!6XpR`oyW6u0EJCsvuS7WYnC zMEsujkWLH*0x7@WuGVex&!%`Icil!2^MIEbJyLVNY>(udMU|LUJ{A8PTjje7%SmmD z%K-jKX~~#V3|tZ?xm%O9$CGU7z$0R>ZKcN$ofxZf>P75$vQEc^v6|kAHFl1~)0J83 z!P|cBC`=J&v?Ici2#I07k0{h&A2ApR2#M}=S+YCNOlmV5e9_q}9-WY^x>TV^Si;MO zaE`2T4%sI*WUhTYcAP{PVjiuds}MlG2JDA9J5jy}4#E;{mSIT@6|#dvmT@8MtKEI= zp;3SAz4<{QLyFoW;~m|E+BhMijI1Pe>Z*syG8=tqYE9(N`5PEhokd6t9=EKVU4A9y zV_ns399@2KLF4hJ)sz%f8PCicvc^6kN^h%1A}PnIHfFg5q&#L{)e`obXNXne;&0Dv zE`~hrNaD1ge|@9cf8xPhIkl>fgk|XEq61xH82)UzlMwf9Ri6t6g+Au&P^Hc2-ba(h z?DYGfQg4EW-c}0A6kMRDLcyGs`hTu+^+Na-I2FJZ;S02A=XQ|VDsAb~K`eai>QxMED^fr3zfPDBH&-=Cy@=@eNmLlC#u7(7j$CXIUNx?=!+(U( zy1WfM#OaN{rUFHpbKluV*N=Z6E`Cx#p9fXX)*`Ot68IJ=@Mb!tT>D~|7knAfk}o*- zT1QV)W=Wik;16$A?7zl6GuL7_ymA+h2=CWv7;ev}I1W_w+9^+`m2)p?y6XId@nj7+ zVZgjsm!(D#b1}!K`GF1es$VCrzMKaUnIFAIa(Fp09h&W#x~6p4G%_SAj*e{F6!}Pl zJ~3^l-MDkNsV>KRLX&1AieZ5hh_JZ)7ulTu~WU#e_a; zpxQ8@5BFZN1WX+H62k)~jTo1w76QkQ1EN%wqDRLmD3m?TGGC}xZoBi2w>`RjI=6la z2$jP1?Z-4Jylh!*%b#k-gZRq4*rNxGM#6*P`jifj(1tF5g_+tkzgAdLFdsL#wcgT2 zr`QmCe!8Ly$4hEMGi{V_LlVq)&MNVS0RP%OS`l(sy%&+X zk<|4=yEyhG4&L0yllFfmjI3A95j>A1pD`%kFj`16)bF9Oz@2##ibnJs7o04KVXhTl zrLO4}2}*`Y$6j81ZDL6fJn1;yd)h|duKdx5_wF0pjW=IMSU$O;d5|L~6a#e?v!F6J z$#(6FA+0`lsDyB}bXX0}@jAW1lKt0_+%S{`N=LCS-Pbb_@m&>d>=F-zO5)|)#<|6g zxDeYimVFdsxkuZOjz8)uh+rF}DTA_=UUsyrgtYSZ)ihK1GiS_@;e%Cup!4sz+baR% zZu(MKDRmptVVwv;L2jwe%lELSw>!C4x}4JCy%p+Slt$}c#(%M9u)l%x9dfI{+@GZs zB3!WjOu=;wf}WwSz}SOR36HGZIc~jWU$8xMft&VnvgzZd;Ax^^rp@Ga^NgH_PE$Zw zYJjeS<8Nmpt^c>PA*?5)szc5aOFYTf->DzkVNEwb>Bt&6Gw3nUE~bS8fh@8)XnaO! zKe4Vn=@rTR9w96*cjRjn-w7EZ_)Ny{c*9n;x}6w0vQ%?E;z8zK=@0xgSAS zjeSEO7{uL}S8lad-|&0UmT+%8{`-oa=s3df;ZWkjdyEzi;dUX_6J?ck?fIhg(?dri z-@6l^!!u6qR)yFb)TLZX?zc;61!;qYn9}zwuv5MYa!qd77IF}@?uu~S*UkRxBETtW zRLd#>cXC-D$oT*xX+Q@7Ef#G}{gEf{LgmwYCR{b1+a{hAt{Owo**CNyRXAEucqe6> zk@s-oz+N^sJO~Q+6eu~XZUV}t9V8?V57zR|#*_)^A27m4Mjt68#ebV|_bV8l8wKgWP%&F=D3ZS^|-6wG|_Q30QVGYeGoYP{t1 z>G^a)vr}WKg1Rj%yZU3oR;_S2Okx`F>~ie-pIR5mD1hn3$cIA*FcUZ)0gpH23TY37C}}| z-aa=FY{g*&*R~*U$Dr=GjQ(h0VWA)J0Wx6!*5x+6ezQ-bNFY}*#kO*)#H8cM4;*4TrNb%D60AZX zzM~mnH&RHIEb7+l7{DL$?p=mng@u~6b^g3u&p1jgb9uY-j+fBTaXpVtA(qg?LlnQ-6YP(r!Ull1u!u(v!}RjY@5IT+;^b4*M1EX z8X!L6z#vV44)2b|F+aE$S#3L^T=teKU(&e=#{}a`Z?bkTE#u;H_mN=v`MNkpiObOU z{Eh8j`51-jiK7ydXpHL_LAK-?sf=6byBt}j&OzU!k`p`i`|lgn%OR-d34xElC+ef= z_6<9H&lVyGIhfEEVM!W3M8KFbVTDB~x%d%EZnssf-usmeIREg@m#-TU<`9P%UM34R?S(vw&K0b^25eEj6e zlhxhG`?AYGgCpI%J2tPc^q=_73fL9ja_|9?Mtm=S3U!jG-@Rr}FZQM%B&=7!79RaIwFsS;Lyt83 z`tIMHRT$GEMEUS^jDop@Agy&5Yxzf0ThOEXQMU?L`|kf6*!iB<(-MII zAoDE$8x?%w%HW#QO=iYSf0+%%+;i@$d%w>fmsjDxLTFKG*Kd^PSB@_qsVH1vNl55ekAzS?<@v@Z94&cH_xU=& z3tT2Yy?Tb8A?uv6Gvo~ne3FzEF6FaGr@L``Zq)O+mM*b)kqZ?Z*EKDbcthn*NusLw zp=~<3f%eeDp#4(mf`R>)&a`Xw%52NNL$YI1=#>V8?L+T65BkPRhx|7ZZ8odmh({ymN65i@%e?p14buwzogV zBO($=iY07I)IhXFG7aBvSm;H19IWe+$vQhbk11Z)wY6ohvYXIG^UujCD7;Ei3wzq} zcAlBZ9s~ZexAuL1kh8FxRy?;SP;nF1fn2^xD>A3rgd48&M&sJwAqK{oA_ScTl;#CE z+f*g(CTio(uW%2(zJG+p;hj@2a=3}E+*ni#j9x@l$zf%(~upzA6=gSjXy)G^- zIN1%^`zYhu$9jRKeYtaW%;!+PwsU{<&d{2&j5cJLn4Iy0s`KkNgPxroTv_CUllL>1 zjoUJozvVgZbvK#pb<&gUorNOm>=4md-z5p(W;GLsWLf5P44luK-M&lnC_*_r+cLLv zfaAQ4?8k-6iwELd^fDbGyFf8O%LK59g||%`afan91%wlu4yKi>v;9_d06ErMd1aN< z)!(*222eRYnM=gQ+07eCxsYAriKTu!kmhs39U0uHr`X}YPuA~BC?Qvk&Rm)HA{d=6 z17KqK<+|Qu$$24Y>z~TWHweCG{F!xls4Zur7pjx4_8Htkhkvpwr@wplCL$ZZjWmmo zom5umlKDD{8yC!wOlc$Z9SIv!2x`aq`+8E9YE&qn<7z$)+QJh$uJf_mNF^bMgqEHk ziy&Us^JhwU)^Oh~DGwUTt&l+3+tdZnyGSF@@AXR{=&ykEeFV~Jd6m7Iyr0Jm>>IUA z^ov0{qaSD~SD1KgWJX9RU|59PdA3^%(BY?4BcCvs7G5E@;c-QugvOc(|L*p-nnv8T z_o1Q3VvNo$=VW0gnPeIXFCp=>t+qYz{=i88Wbb^4i^~;j?fEEJ0T#-wi-LQGnhKcK>Jl^X;V$MD5UmQp`=T}zMBR$9R2B{~kdTe@ zeznV*w#Vs44f@c`dNWPRPqV2r;!a8L{Nk0I(l7 zR-hq20C4ta-SlsX1EAh<>LKw{qJi0YXmpMdW9qu=G<4%xLlx8ftvo|GQ8Ni=se`xlpQBQ zs}F_Ku*+$t4AFQ73{rIW4VqrsQh!03IGC3xZOKsPBWlE_Hg zmGwFL9(DWZaR>R}saMZ^f>hoJi-CT?Pp;{bpNByYU{C2c%#Y5kSM;pw=>uYqmij5D z38>fNq?)fJwTjw6;W{Z{S-&g~SSc%u=$_cqj>*|j>fiZUA1#m+l5RvF^g`Hpx6g3b z%H`E9JB7EIYHGR5a0@)~QhO>wJV_Z2;WJ*Jf)}#-Vubjj3KC0E%jaeWLQk(W`XI2! zw8PV$yfqo-LDD;I=+5s^<`H4DHl!HblU_DQaEki$q^)cj@pv`WdkO4MH%p&ib+~Z( z3GuL)dSG4t@;WH@CObD1gH>{zTk8^g*ljzXjP<|V>;KN}+#PJh8jc~=w(Qvx@*oE- zRGC%~-wTsn1yH>98}F(8N3M8}^)aQ5>f-FOpu>TR(Ly**u<7090%-ZXd<6U(K0r%*vzXimWDTA<2d6>7)_kJZ5YAS_-50o zN;a{^>oQJqItfa#GzdG4rornd^b%X0zmH+05d-eJtE7k1istVZav|KHE#Cl61|@8)pWATCT-6L=4x7T zkIFY+z)L@01Q|y$tJVt$ZuQY5APoa7;N=rVT=GwRqRAlp#+N5?b>x97qbQ2c0?6Ab z=1NW@t908LNszR!qyk-!+%xDB1?=+Y{5vT>hZ?+oA!<0>su+$~DK?LkBa z&^X9|k_s?$c>~z85-~}CvgBl#r+4VSccdu(q9Z30lVKb#?|Y=6(vzb~X?u8wF!#%b zWq+IfVIBkpu%NW(zj>FqG&v;!=}UWC3fnC;*PW^S+sGc@{&TKLT0K|7O)n0dAwT(;^A%J;X=!;E$=JNRU^XiG~zOYAF zglu+Pf3jKWRE$Y|9mJ)F(qnc;Wbw&lEVXKsX>b31z*oKweZETRj2z+qlT*=H-y0>0M*cdvlRZiWOHJZ^9sZzW$c-j$ zs2|(&#gEsM&(}_98|z+(D9_vY@_gb|mUIusP?qDHx~dxCcd}#($oqG1cX~$!4crc2 zYRu-%1GVwPo}1byRMVT1a2+TVNdwjJ)=_0^h| z(YA+@(J3KiQYE~j-Fn6#b`T!Oc(vWcZP|^3HeyLQ;Jja;^R+5XJKph_j2c6daGrRy z;V5kVfPM#`6efT?*Mi_g&=%u9zMstHg&V#GrRWcEDTna)a7~gS-{!SLRI@_X6q11& zQ1UzM8#z>vDpq1v2=PZTt5O0#9kLV!@lZNRpQlpUQ$S!rRU9QJnx<~Qb%yoM4D(ui)$6fL%1<_`zqV&wlx0)Keqkwc?Am zUX8u^1!V#h{)>xM?B}O?*w!7TB8WK|j~zc~`=r5D;(U8s=(+2&Pu@k$*z={{D||?) z;e$!5lSnCNrx$cCQ}K^BbR$|dy14M|*&yUFya<*#Jp}8=I(x;;(n`~+SQj(76s&dT|p>qAKJp~s3dT%x*hZ=(E;@VXE+g?A#3KW(NmOBtW2M7#*@ zdM=Sv(_Z{0o_<&VapkmiIR{l%&OQdg^rnJ)2Hw^-8Vx!unLz|{Efi-@TD{%tGsL%2 zd2}tzQjV4a5CKuv(d0V$-N<)VO$2#;-|1A@-lz_>XZkotVRdGnjiol}@f)85J=K`6^{6SOutFPTN0~Qp8dnyd!g{QEIccja@ZX z9Xl%!o>*+C1cVs|5`hFw1U)6vI#uE4n?T+@pKhSdyPAhf);hds#DR+F)5ZktCWP#L zVCu`)qxN4ysmPE@ya?J^hW0?=#5fiEEuy(x%5k!zUo!whR* zWn(>Vq_}}xZ4f4D$nt=73>zs;qf59uqGtgzocqWFUi~|VyA6K@ou9=d#OMC@sRn-&_F06lDG%5^TUqPJa3VZ z%LnME7NipF41<)}nm+JdcOdOu9E{zlXSv51&|R@JuA%&&ZJ1RfEYvUH1BD!#*}9^2 zP$sXJzsZZY#QraEy8-NUy>YQA_W9}Y>GM+!v%2%z;!3X}HS1who}w|IH*`MrcY2J< zQghgUN*4j~)VvU{;lyEp84oO6tzYR-4N{kSiw(-%)!RDc7gC=-7Bn?PnQ3HR$K|z3 zGG-i0#O-JDqDwpez98iBN`Zayr(hBQ;qFNWj^jApd|~Ind0u*On?ocfQ>39ffE(|#M- z?y@9lU_Xtb@VkghdlOE~Jk5H&qFuSBJg|jf7j7Y{)o_0QTIK!Wf~r?X7#Mi~c2*XhO&e`TiB6xi!;LP;b(PlMRY_ zSnOHul54!-o+O(xB$O+|=7wpU64*b4s5O(^=(=j-xc~V#0ctB2D+v&Dx@{pWox0fh zs>BT?)S99+4WGA^S_{@~k)0{xo+1)sP_kz$wszwV^Xt~e*dZqlJ}eN}Rp54v_g+S% zO!$KZVgN#1WC3(0wBQ9)T{luJl(0v30`rD+{j7gI@vAT_0_#{STu|jjfMOKGlc^&I zk`s}&a=1jvS$?u-=*#`tB+UNWpG~&k3`lFBc-aw>`Spk9c%5B@N94jwjR%(W%6|@U zAp^r@bP3KpdE#t&iX-Q1m*Kk8acjEfV|cdRDHduvIL7%NS1b^Vd&J@K5T0fYq z-RQ%T8t1o>r zTv%2qvJg7HjGFHy|s8@2iV~D3nwmd1J(#@FIPsF$trnw z7_^vIl`iKnwkKzsApZy1Q4>qs%9OnHilIccIBO`~(&lIV;d%hdHHUAgdd_E1>QeL% zIei((bCMsn9qKv}?x1iOuOY1ZSvSs+)Cv$z(^Zy+upj3mUm-?YH?a^u6M+8F7sV|c ztT{1mH%Z$ewz_gRm=&kI}{P$Tlktm3>7a>aG5}*q!%!%F~LoN z(HzdtYtt>cj*UTsr@HZeTv=ajYx!AJ*1@Q{r6gj{7rl*|Ll>=V-K%4DBkiF2&&%LO6P6ij{a>L z_KEF3VMqeUe;7S@Zoik_EdC?W=M8XB+)OFoy8I)yeR=fZV&6;0V>OfBd8u1`xrVqh z#~27=UTn@*Kd;|s+rO0jc`V*IjzAn!Yp!SEbE9I<*YUH?Z!4*GS|)X>_ElD0o_!B| z{}iyrdVoWGmT$9F!6y{4=AaZpA<5#0*rHgvdw%Fnh+;?Z>zMgHIHewb6}-@VR2W`C zDdYyk1b1;q-rIF>1qt5bT07FC@@J{{Auw#V!fWi^s^j1fmk=&XE;)SW^g!8V%uggu z+`Gbr3g}wKf1w*w-DLlm{cO!rx=y`*V{Mpwef>0Ozdbu>~9wL{`872Y`)L$_$afYwt?z#Suq)%E`qk~c+gBJ ze9|X*NH1=2D`}3&;~k+zvxouUEk7@LA5P|usGHJ0@He}0mjHqbYvEHp=ikydrO<;g z7n-yMu70X$xgVTYxi!)vV>=EO0oK+^ z6Y;creY%%G8%cOpbaw2@Pip1VKzcEs2y!kw1kU5R)6ym~lYIyLKIR!}cNrgg2=`8| zVNhzr>s->0n(3T?pEjd?I7nbn{`@VLp)D-H*|c#3>~6~D4?SD-zVlUbbPQOq*A_=^B z-ucp4#DnMStnfa&QI-L%wC-A_ZrY&9B16Z#3li>PV7l zbjZjO)JjhB#WZbC+XZQ;`d(^k7^cpJqw|b!Hp2hQ1(HO-UA6^rMquo@4o>UxAi43u7lEa0mO(3tOD6c=q zKf+EsJw8?|F>1U8Y31r5v(c(T@U>|gA?XLPpenQJ&X!0WrMLiD@@d?($B9WT#Ebqc z&G9@0@lR5q{k=nek-ncf#Ilj_1_$J!)^0i0JLo)0ae;(}A)Rj4afCpU)c+HA55-63 zmYJ)vR9G*zCz)mKib`@__pz*rj#-JVixF@_|I%J$zJP%+*&~TlA{LY&Hue8mmHD53 zuqP35UJ%;Y741q@Y-F=niNd71Yyn4JZ}htba^fzW$n}IyvTD9TXXhn}UhOxwaxMMb4d3J)|NVk5ooR-oWnL4nO z`*TZ}>|1^gq$)@2Aw+8-GI|N9pS(jr8C$>5TxMaw>=|i9f2eLUh zs2`Nqv8QS45i{NH2Md<&|NBFAI@E1ekCj;M#v76cdCQq=-m~Za8BPC5fUdpzydp>w ztKlPGman1ukE|m!3z{ux`Lo7`3^%kYM#rneCS2Fk`@dGuxvSCx`O`m{PRtU!IDkTK z`?NZNe1^EI@PhXcYqG!g9wWZO zGkbn9yX-Chxqc%uu^Z_Tyk+nj3l$SkdQ|(aVySoNS5ZCf;=*yF!2jNVOu#Fpp3)M+ zLvh5@$<$?Q0|2h4f`!^Q0GeAx%gNal%U)7V`Lb+(u_~bLAkL0lRqwC{ zdbu<7JH(+GyL1=*&5T)6f78pD>@yqwno7iN{4_%epR?NdZZgU9cDs-BBrunf0+5;a z$`c*CI7&DdRBasCq#h^;3u1$vci+Hi?Il1>Qr)!C*w{mgB+kAZM5ps-qQJLC5Ek6? z>{$?<+Bv*Ldv7(vD%walZM8rDFDRr$*Pg6gA^EsbO^NOh>$G~F*_HmwJOWiVuv1{Djv-GQ68` zwT=-VIkTV-h4U*exWWGjUc>&Sgrmu}eHR3t_PqSV0^i<`z}YFl3*6CfD169BM0a;?>hhVdM(@!_RS@cU8TeD#M#eT%;=rXnCY(S*%vj=v-nf>Mm zr(-&fAPx-rP+&C(L0gL@5W)BXF%vB7c^v5T8HguASjV%`4OSRdVsAA6V*5=OfGrfd z%duCRQ#NI)4I~&RQfWMMjeTH!f+uRw)lD23=FRLk!{eF-5dAgd$7{W>Jha2^0`Ul) zAfP|iM~f6eln{^A@i7=oS7(Tn2w3ZHvJvEda~ICP$Zz|Txz`6SOZ@Q_8R~)W6ypjz z{cw-66|-HKVfZVqU$dL$+nhk-6UBDKQoCV*0y`o1xT`+T*b z^7d0^&h$yo1D?I;SLg0JMlR(S!r>u+(zzYc^|3|RayvUZI_b;eiuBS@#V0Se>W|jo zap<`0*&UoVzudD+gj=EqtA)d@^L&f!Xp(jxBVx(oq6h0Znif1CgnC6hLFBfX+@efD z?YKT@dheBq|5fmdDA)?`e=QW=Hj~7(6T+GndZy^y6g)4I`nYN3o6#CfhUb{-_Mv9* zJnV~bo0EkzGaH~wWCy>H%A!7fioaP7oWBI#dCi+OjJ)=z+~F1aop&S1_)+1ku&O_T zNHt6@gToAgKQ^T99s__CO)T83# z`Po=l(m?^$PFtMptZ8f^^0XL~EUW43C(Z}Q>(&~6a(Eq1C%k<0Ks#h?1*xyA+i2fhjH4(ouf_#VUlqE?Xwkz5YrG;D89$m6W2U4O zin-zw?6i!qV6+{u4Y?20CEi6uxZNfp#Za;JzX*{a>8l3SWWtU{_gDuA_XSxx(I4yi7VfY?+gVad?s>xku^Rtqr z>4?puCMoGQ|KhbZr;hggp)2qrJzLwt#Id`6`epe_kgAvZ+S;+J*nV%`EHFgHEB?9j zFN7%?2#}}gCj3l9oFA`?G2c1_4kyCnjh=#wzkZ2?2fwWqfDYGL%FD~I(tWAZ;O2J2 z%yq6|G!Re)yBPcaJq*Nptg>x;aq#st56iK!F>7tV^&e~&BUj*Su~%_%3z~@Oz)gZ% z_|w4cv{)J+-=5LYIFO&kbW{H56}Y(I&$#%JkMZ%#p!c<_0N+j6cJ4XX4uGK<2-&y3 zv9}3)e_P5&oL^Y;po$H(PQdEQpbYd2c;~s_jmuq~qTuFM1kFF8pqz7*Sc5__^K;xVXJq`92W~MXASkGSq6uh~U?O4n``@4%g780l*yp$~ zUJ)NpdEBE>M$HX49#@bIzDiNP2m5Y73M+DNBOv+iA>_RLe%*%N;@jU7!FOL&mJJzv z`$orI92@iY_ToygB(O_JNXQT6;o-Rrx=KtCI-JNKN>4;5CinXF>vDgo@8y_z-f-Tv z$P*rMM^Xi(w!>9TO?5!$Ptu&+S0ZfRWO(;hj~kp_laKy;uWiz|>4t3x z;m~YIKy>u2P7>}iHo(&tZ|toMS)V6@K#GT~#_;c%GpVL%t|@QZKuk^1fX6pA9sOij zfP6Qt6&)7YZasbl9!6O2Gk2(x{j@#5`wF}y$z&7fyF{xZL#<^;vH!oeabU6Tyn7w8 zeuGte2n>L+tz8wM#xfT`QlL!=YvhTIjm_yIdl&aP#fEIxO zeh0jKihaIIii%D+K2|F90L?lf{CL-dl=qAvI{rt@zvzOXemq#wKTaS+*bv>32<`2| z9Q+F${F6)hhB>|H!8^n2;Q2|k?cQ8#J3l)su3dzgR+;^6m=)*}D4hFQ%Y^avNH99~ zdfGVQac6j=qa%2|o+7lzh zeLh@OE*PLY$@_N*6kmmf1qZ{2;(^)PM6o%>A54obp`k(S&*QcP=AQ;?YLSVP$ffLt z$2SX<|IR2I*0`E>xp1mmA?U01+EB6-%CjVbyIM+xjG#HZZ9J6UU%ubZF?9h8Nz5D! zR^luNRm;(5KG5uj-d@Qzwtq9q5yc}pii90Z{N-mxY0n}2{GLVQ_P z=SmdQpG{Usj}>aDCUOOoGu}>ZZ@2CRd(F0C!I>Y*1%qXH5t6wYu#iYV##0 zI>O=tg|C2-SJc$>`ljx2LqM=O8h1O6h14Br;Q7DWc{uP^1M0jQExAY$Im@5ZVO96p zMcbi8|NOqKL{0i?{$)rUr-qURMr@3NVXZtG!gTYy#W6}PRxHjEr*9NA z=;QhVtn)8#0@NNzEPmsd=_4QV_oDa3EWV6&b(KV2kKy_jB)Mh7N8_x~9s3atvnAPl zWtb%x$5M~l6&|Ms3@)^Bu&v?V!xN=L^wHp1i7&bam;tIU?)OdGaNBnzm1H%r zH_3h={EZzocgn`j`()BSaH;3r{B;T6@EwJBEODpyitc8hd(<}ut*Pk4@o&eW5wCV= z?Iujm=f`4=;g9PNk5C9+r-u5`8`|O%y4t%r& zEUY)d^$$27Zl;_oBn7TgPb@ez8ZvWazu&txf3W%5bZ3w`X;Zi_)lOtvJk`)yY9C6u zM42-YT6wZmy@9S!E^s5-v}@G4*_j?@SNMw~V%K$yTf3O^Z#@g85@WVu+QRM>3wKd) zONORY(jTA6L7tG>%=*VHR2{K{(cfqBk5(4kwyp&{$%R{6*UKQrZ5zA7g4&BURcniyvVt#w%{6V%zS zs?#hlIoaQDbH08#;fc>&`+>Kw<_>#9K!v5HTkrSvUPNl6Xhp?dLrU4CnWvcRg!s#v zkKjds`6JcCoI@THug98~pQX;t>+{ejl1e>aWOeFmsHS}WMN{S_i}@6dBlgSBn?59h z%|bF4D@&b-2!_>)`wJ0GB2Tn!3!=tPBt(y@Dbg>XNlND*Jtv%0P@jB*gI)^?C@nOA_-fa*W{xZGTxC3W zX}e`F_oAeqtM~A%yrc~+@#Pg>Yzi&*CB-G3{DD|aKx;zmF55_S_mZ*l`)oGFj$2jG zk=M%&wYADhsmfwSJ$~fumuMZPcJSkrXDOaB2kzik;g(iR6M4;rbX>VcQ zA{~zB)B3nYYbegs4OtbzMpY?$Pwfsqp4w{Vij0saHUWAwaS3TheeySHg%X9#bJz{b zT3q8H3bu(N%1lJajxX~#j?>$465{;`T7e~>u_Zs_Zi!Sno}H5g*s*VukhZoqTHf0) z;j>HPb!(E<)YmUhub}@vxZHGxri*VBs=;RS>F3y}d4jZ;MJuK5d&wUkbY%&MzFo3c zO1yD+|Ipla>cySpoFwbSlkCa{qb52*y^)tcEg0L+r?@0YA_^`OvAP&_h9!{-zBjdG z7z^XSt+Y683fS36`WjHG(XyXV5k!jMKvD z_ZqN=l@jqnB1&CtdEfPbdI$*GO-!?0dW!OLmudpxU@+Owwo6eIT{fTlb(}Cp-SSz? zfpO@Go72a5iI0eJ{dTO?%l(c>i_l}grHecA10z06Q3X1|dvBAMjs|J(?NpoD?xsdP zXr1s7L{f|9I{x3sQ?7=OO4fr-Rvuzo8+Iev^_q+r$IJuR$!I2#9?!q|mG=cT$9PMK zdM%jaZ2F!rUdKbdzPJ7YcbINys;j1|>*(#!^RawoSFCkWUm=pd6g*T=PyJ|R)%m%d z$zzxJ_1*1FbJHGmAb!b`_8V@e(Y#_mZoVqWz+=@#z*1s6HYGqcaqt*+ZfQ&x_4=_r z4JFIK2vIZ(nvD!j`dADPWo=zQAj6hcjvK?!Hxd_IuT!DIJDZ0O-Wd8}X*&edT)mbAd-dLmS%ekd;yh$xRnn8UvdXKhu2y*R zBtTPJ+akiBN^;(Dw@0x1SI@_a>CjMq0RaV_xCHS9O38Q$m(^htU!mmGM|Vra#S`9^ zR+N|XSXpt4f4xyqQqp%}Z+Smue{HmTeXPP9WUtEsS+O2DYX@ZaUIBJZ(bLoO;G=k( zjA&Z%WC%3oH3D6ScWRoYAiBM&1)D_wr-k~XKOcs~700d&StcM5YGb`oGw{g&Hjw}{ zaeU#dqkuiBcubdNpTlqJLI%n&kB6eaM|XAD@P&Qzd3BQa!I&s?>W^O^%$$uZS?{QUf{diY1blB$YDo?BRAp8!cxhuV$miG`Ki z)L6FSPmh4TDtcY5dHbU~Qwk!3!rv`7Odq!KoA=NkIvnQ7lvXF@HWy7*?zL}$U*M$; zo9y`0_(>>ALzXa&XWP7aWjJprJ3X&)M&io5aYF{X!H+o|tc z43_l=5NMdtt?!4Fn?;C^c${*H2cY268 z5pIcH9L+Z`ZY=%;>WCAUs)>BxQYru<)+J3W{=AvSdU0{_)u24nHvrnKTh56B)4`3y zwlVO1&2eo$Zz{@`4?BN9ZRd+J@2BHl#i8FRD5<%DR^#45CzRBL3_b)xIb-u)8V`A_mcX}mmgyfGoO@)or^?>y zFy#+e*1^HDP!|ds_}<0o=EUW^d&6pe!9puYg@NzQ@l9kY?j5iGi#tNtS*1XKRTrqi zvOjFx`|#6atw_{ePVeO1(pJ;y?}`*@h#SzKJ)nfh#CvWwj(%A~u7g}jMYj#NSgOBM zw_)?q9KK$)ZNj-y1Hw_*m-!hM8t}=bR$}v^yw#qMj=cczrs!5f%QoL+$|fx zLm5tpqdf1VeV7{D5jh<{<2m&V5ydeB1BCtRaKqyt16NQ=UTpdL8#f8JS@L#~sU^fkAz4zaV7DC}q?&yR zE$jT%n`|?Lm332c5nt{D6NKzqG7v0MzT+z#Wd0+IFoK;JhnZr~Wy*bNjOS=?NOf^g z@nO~0_x&wx4T|>dG0W7kPr#`2DGj4BO%GDUruV5{MI4mX%JReaf?cZjlY>S~|G$5+ zP-53iOIF&y@jh=c<)sohmoboS###-QgYrL~CW9?{<2T%OnEk-d<9ha7FY4TTsK4pS z|8_BqdP=4t1xd<KG05-g4o3NpTuwV34}{qzfb;TLt@&~3vgWuE#zBj{r@GHl31t~&LJTfWrheZ@%mOym|EY684; z(?Xf}Mw$J9q^>TV_nw+NnE8voK0K9ouT?K*fU+uvyw=}woOBr-6C)xZ_+d6`ZQ?j)OvwllShw@$KaojDNH{Wt6Ff_QHEU}b>WsXR zhKDq*MZS{_XK12Sw0q5EB=$J|sY9D69s-KG*^R-)fpY3XHynlJXhmlQwDJebSoT=q-B=$RtCFbyz9pu>f~U%yP0@V) z)3@^Mx}K+!6-ysW@lf{}z~U-Q8^&-atjJGY%g|;=z>u87&}PCUU2+4g$o{RpRUFB`UH>c8KL zSW)#o(Wtk-`L(^xZAe*AFXEo>YxSDvap$p;$KO<|{T_6ixo2{n>Ti2sx%p$GqI`Ix zZD<|aNe)VQVKmI%^I?MPs_owsc$qw(2SL4&b)GDd6+at9Jdb9B7Gn)we)Ab0LwqCc zelv;xo~!H1=bz=~Apvr+tQDgNU=FG}eGQ%;S!{c9XBTh;- zJwKlYdaeemVJ8_4+h5Dw$c`+n_{_iTJnMB^OpE|svLS#Jp&`a30J9vutzwcN=-ArO z9&iMJ#e*&$%KdGrCvVz#Txs;nsE5rdcWJt;-B#JI6(B{_)nSAKFRo~w;EzuZ#?Y*@ zmh-Q%+19gX-EsV%*X|VpSR%LC7nRRJH4%cxzdWd*OotjQND?|(f~^H!WY8?wklXFs z_+a#mnCq2&ZpZR-B+KCrgJlx-)7okC4(zV(=%g~87>CdIK8qwp62~?XUDb{KhV`k| zzPX2gY9~bY)r+6C?k+fIM2ADd(Nx>J8-71ggs~c#9)$0FU*tnw`^WjZ)?Vv+U;FPs7-%|4kNzatIGriLX|4ng=3t9f6RN|lakkt4D$U5LrrHwG|PUJ%tk zk%01T7+o)Lj1JJVZQqUC$*8PRC#O1hkyQV`VZDLgScsH8bl^qo>P^#XpB1)q*+?yE zgj0Ayi)MI;ax~*nI;t`#gP5*Vl|%WKlq0gb!biA**06|4m6ZSN7c##z*Gn~p$#VxB^dMIXjRY}jX*nsMQ-~;HJt*kzMdM2`YVS0 zEB)G!rAF*00{^~Ll5_`+qvp^Qj;NQG8!6Wp?}6w}9V#hI`w~IY-^t=BP0R?b)m^KW z9DWOPD*tEP5ajw(ku@J5W5whaoQ6$Ga32M>zUx-qVOSFfXM{TnmIX zxe)ipPk-(eT5zw=IcuscYi#`rmvrI;df;E{g*IGks~9={d!j>i+|S&%bFcQ2eEG+h ziLYIt{{XX1_J8&p_B4q2CydN&*{QnXs`~e7lw$@!V!3=5eDhSmojzxxS-?VG{xV_= zJGZMvJ&;cV;^~HkhgF>c<&4w^30aCD2e#x*UEr!;UqZEuVFd@AUY6B|&#%z=HuD<( zcdSVCkDzRg`9^wAeJ4Ga0z+&Bx_4hG_i%xf>f~iXOntJZv&s5vF4HWtk!35~cjCUJ zm)Rv1F@Nq`g!O+zAHdC8hmrPo)~vI|$$D#T2DK*Mef`%nds3#3;xbiT81f5gEQg{V z*hcSCyAb~OSJH&KBG=Bs=0o0MzCG)WWZE~XiE#hVpn=hZj~;89_X?NXqwm;da?!+4 z8{sV81xoxiyQR_)zS%YOs8-xj*X1~Q*JyqHvUqfiJo*2AAE#0h`+_B;Z44y)k|$Ma z{FgR*aUxLQBqyJ;zApHss0SG?}5g)7PGjoX5H|{@c$|ZM*ir*b%;Iykv@=fXHw}5WHtn< z(Y=0&sD<{+>^yE7J)0wX<)@sm=3E!lUc=*b$D88G-520J+g2;o%Y`L(lTxm66R5~t zGsVL+`}Vcu#n>paYi2)kur0HX(Lr3_0v_;)6~zo!-5a@?=vmTBM4xQ^v#=0*$N0;s z&CL;%+3?SDj%?nG+yP=aZ6tiYR=sbKjQS7Fc+JBSt|gR9jd){gcEVMd!T*l_v9D$V zwT|Flo`l-#GsP8pilsIW){^!Qd$^#OS!i%&dA{Q4!|pSeaNsZhgp{attahR+$|=@j z(Uz`p-jFKfh(}+_LBg<Y7o`@;Xa1VYuj=3@oH8Az`d>ccihel7f_P=dyXFvI^E@ z@_{wLqO`(KBUUD`N?UuO{taDDmOGgzD?NldHtVP?Gvd06yrjd*&+-WFlW~--tXYLz zipU(z3@$Hz-0fvt>yuC#e@6QglfaIFw^honSeW>D|M#CtJSuP2)-UAb=R|GMW!*C{ z&1$nMP+H^tEbeY~K5I6Zm$P1M6CHQvo};|ROrQZ_c*ACb_ZYJiL6uJbnWlJ~RlPUX zyiGCXGDq%bhm0J%I>p3Cg+YRxY^U~~Ay|IR1Qcyx&eJ9%<40#!QUavu`iGIRr(ZC= zPm$kZA>HFHut{5Xpir|HvA2^9K~L_gEg&>J9qgGTobtYD%pB%5+4nslueQ^sbN}QG zkt?!}gcE99{s65i*v>Yk=M28Fc0NiNDUU_(>-oY@8+>$f;=!rzyKgLRyYAgu+IasJ z!{mDKn60L9ki`lf6TmOUcH{sj*f{Pa(S7z1e_HDLq7C!{DR#O>K)*Zf&?5C|xG1mM zMdwJf&$JL370jY!e6Pbkqe!q;>JF1A_kNr|Gh95yd+}|1sMGDwzL*A4Z>g;p@iMK= zXnS$=Z)|Clx#v1T{^A5y1MW#+5c_B!w}yyoI3&V<3rA8%0B2O=z~s4+W*50I^US2; znZ_)41|1iqPVlw1qaz9@3aUpJuhB){AlKmEXX{a3Wnq=r+LWLM%PAtDWzGrzo2)n= zqw%ow`gs3DTy3RnMp=1ByQe&jq#L>e1Wy?+^eT7@>N^6RKL&ef8Xtx(euC=RdH2^Y z8Wjc_5$4V$=$Dw7@v-s?J0(Y!n|0#7D>{EmI;XrYv-<;Mrl|R_vZ^c9t{D*_%5DDq zz=|6|nmJ=RdsTkx;wQWl)^cUi|AuU3)#LHVw%+eQxVshzHB#?0Z9buE^8aX%D?8Y~ zr>y)*-(YB%!k|WiqHSU!u|+t*v@Uc?yAjlw@=Fo-o5x+ zQr8TutKyQjXg5ce=LhHwqxkFsjcSH0ZI`s})nR&LLN#}&WdcASAEr9xEQQarJhZm9 zgWr5;Q(vs~nn#mg>Zs?;4`;fU4bjvq1IF+{wo43_hode*wIIY@y>VD_Cac4j(N`58 z|LooGxWgb!i?ZbUwZnma2kVLWu3{U#D(UL0X&QskWg{7J8Bs}@oo5TA>u26twOKgg zN`9ZwmQOLHl40Z9R>h6slA}nA^KPYohEzO5`gQ)|kD8xU2ii*S zW3iYnl%8$Mml2a+)tWcz>3X=~1pLk|6YH;PLQ>jNf@PYq8*kAJ zLxX9fW5aZF(tR6+$sd>B;j=vx3I%e~6D?PK`vx^|ExS%{;MEmfLUO|52YTSS7ISmU zP*UNX^}XFs5CbFVS#S`)$t`F{?hYaXu76rJm+#zFFWT#Y+a^4mZ9(_uvA&d4b;K2n zI3Bg``^Z?0doP$NwM~+fT$&jCK0G_0FSF4;+O(p<4DZ5?9Oe<3i#$O@IgX&J_dxVO z>bYdu{;2yI@2?w)=XD8B9pSW+gEr0R_4S)MWAsC+Ppps%a?H2UKpyp=QUu);P3uj& zhqmtv-Dlu4+~_=ZtiF@p#H&ZZoG;*!Ma&zR($56h5x3VX^p6*bE)OKyF$S7scKgMu zV>gR-pRC^_$Xw+!#y*jwkG2*t8xr86eSUT6LdDY&&*Glg+8A#|#k>25b2L@jR{Ig` zJ}z;)v28;$l6hn?bkp>CPDLG|j8xafC*7}d2y~p|*Pt-Dpi3B+tGoX??);_%6%>F5#^Z*tmS~<((MXh>d2nSzN7bK2BJ4EqQ*X4)$$r^35lj zM?D8NeZox(A!qo;_|A4QqIQj*j(ux&(H1%U*rxKdz0eGW5FI z%UN7Eo{&%IGMo!}o?=~52en=RE5an@E8|$Z#za%6Q?@UgfYfk>rU~5YX~RqCHlrS) zw1~S8Z|73vUUIC|#VFF!IqkLh#vl1J=xh06L3b_QZn5-Cd-I^DN^;_L9<;lYsJHZv z-lWXcG_Ro;x08@jXtqu0oX5B2g+KI*)7q$JGU=r0{y5D2z4+!yvKk<=P?aydgO;xR zUVM8NR&6&D+v!8O5k#V@!_Im|DeigHiNr)B@_$4^OTc9M3phY0xHdkwhWD7f@Ab4(vak8gSUfB zmcDECz%H{MBUF`J%na$J|*HgUT1-sz^nnkZ%n!v6$(#M`=Mk`BVFd`X3Y` zY+F+jQV99fscDCghqog4mNl7R^V4t*CPCvdFg*oXW>3st%sP>B=Fs@^ALRYIpROmi zx1r|d-^wzph-z;zZ0~e4i~p+lTofIZP#F|ArbDo{dD?I`@Q^H%;se8i6pYb5ILEg= zmcq2OVi>cwnCSJ2D!9>+80oiwwy-@Ryg-)mn9!pBDRTa-{W7=0-{n#tP+4 z%?x~YHoJ`@k;FdmqRwjoC24}Myf?no>a3ym=lB}N=AXlGHXQAQ+>cJ0z zf4_S+dx_)A$&cw}fHdmKB5}jooBh+vqC38nl<0w0IM+i$LPik%UJu}Keo*cQq%+B@ z(w^^lPx2_e+c!Y3I$ABLy@R)pL{nNMQ3}Lv?QD8^_yfe2{_Vt?0 zd=9ONz+Xv9;~(>&FjWY&(uumm?yYa;wbiuxK_oXP=L0C1H32=pqi{Aua8J)FdBX3V z`^Ls`IMwuu3S%~(UltWalpO%)5%1o;Tm8VQYPRupmOAJ2=XRfnB0n~dyYvD^j|jET zrf*e%J}C3?4*4IBH)_o*tE$!xDpbd%vB*yfelCcLd3v~ynv^fzOJ*U~Dm^2E>$oe~ z0suN!$oln(FJ$~i52pEn#Qyz7oxa;36T1k;6(nlNAKjO9YClOKu<|m1a>zTNCPh=< zn1aasOntp->j;En&aGGdjD7;gpMozj!tA79wE*{_595D#j*6-^E5(P82p<1lo5bfi zPE<;Is?4Fso<{Jbc=i6V49eoKlw&;{_FJiQ^YhUb>gwtxlaGUUXUUqY4nfDEws0X~_xFDl!P03D_pPX9AARrglVJ1L}H;I1ykya0h`! z#0y{*kW5yBlrJ9Sh5Edy)WV|`B+G97z!i5MG_a1$(aRd`AyNf^*m(e2r{6FJ^~Sh$ z&~oSlz}*M&wRw3?RW0X*Ia6W;;Wjs8zB-=^TLL|3R-e~70OoCklVfG5pu8no*gP4> zP3mfD`i?nx%MCO*qrV|qSCkWAeoSu+DnZ{afP%b{o(ffu{Hk?X$~2y&7vYgnQ6n1x zEUnkrzNDqy(o)#dA3-}M;8v*+8)tYDANBN<0rh2C&@=+6O1AI_Ex&)vVNotbe1h=;Gct z3ieWht@{SBY_h5jA;P-2^>+S(NYG7h2%q9&?ztv;OaKNR@NOl7mpf=yHV--wqSdWf zG0&+x;K17HIb}J~#k#zKxx?>py{Lt)WZIm_RoHnQ08VDug67yE%8C=~IH*5Do3!$)))3jEDz7-}hJF@n>QWar^;k8Usi2A-HupK&3eaS#oYYwn zAT%Uk+g}3X7C}4p^V ziQ>If8ssEu-nJ>LjPusqPB% z@)ns{LoT&0T!k*m$Q_KklQtu_fWF`6J*w@@tJy$G@Ezj0rU58BfJ*iG}`9Lnw@Cuu>OUef!8MmmD0b#l? zFYiO76XkKcee@<<*DMj$d(mXt@-YH-tljTO_?8+wz?vXy_p8s?Nu9BK0SVr$S@6(F z@mS_f;Mq?*>J;4KVymM&?bZ>eMlp3(r1;|DcV(I=U=Y^p5&O!xJ$^P)Zt=<#fyl0? zNAfDQAG~ESD?B!7Bei%nmRnHsum)6kd$LB`l$gXR6h|@~W@tgDy#8;e&ILO#0`z}> z7`D?;%YQ8iq}B#zN2_ABxZ_Ltc`IXnwu%xek%gKv5S_?Au?paWNH~p3c*?tt@FSX= z68tGHYICdWx}1AL@?E5U0#K!3PrPrrU=)36C;Y1I>bJ*s{36oh>VDwmQ~g_pZVKv9 zf3Jv9mT~danZO#@&P6F?Gh**4@>FlOLYIN>+Ug>3Q0wuq=5^Q(^1Fx-OSbC$gCd@* zCQ=%`|qj0 zhFn+Iau*lD8b&Y9EFG`Z;vFcx1wN9cLbM)z*hJ-dy3^|H^`+on97}Gs7x%|-fmXc9 zI{Qh*ZWpzAwvMT;C~UWKx{bP=@tQ4~t6U{qGgS_GG4%c}v2@ zJGE!6+Evv|CXB0xQCN^;lE_+m+O;vTS=CU8w9yGmb7({OJe}Mhp`_znHZ>xA_hXA! zW1Z8#AoWB$B45FKJ7r+JLm%1hN}HL@K<;lXEI9nrkLPT&`b#5^c*++TUit#_^@OKe zp|aW>>e>@*TB&ElQaqQ=cW7)~B+&z>U=7)=g9u>^YwX5WC`m{KqH~_{SdtZ4d@Xjq zhH>Z-4cGJyKZgX5(w2A3n=O)uE5SFmU?d~RCoYqy6)MQQ^nF$lInDwIn@Au%BLRoG0UhrsL)x3iU9GXfduPxnYZhQ)aH#0k1xbgD8^N#*Y8!-&}`#gLM zaP@$bf7v#G{RL_NAM54+a$p*0YIgn80UhY?$Na-{`2W8w_!#}$K|nuO_j78LSiU7; zTd~yGrGh&14HJcTxuwEWVQEFK6W7=k;!g?9HWYH#127rl+?DtMmyaaR;*iIoZV@_80z+)BsG#C^bAQTX!q=h{8Eu6Sotmw(uRS z3oPT$R+i06aDw0(F3wX<41tV`O>Iv1lYn&8xjEvhc(xiDBBWRHuU zW1NdpZ$1UXHIK8ve1=d&21Eao24{nXK8jhq);1uwQ?r*DY&n`s_gpIWs6fp7U`CSG zU3|V?S?FXcA1l}tescM_Dx~pdZH?tU{?*NmEge@z*FCCMR6rIZ?p4UAp={w>Z`>B- zlEXT$+`)Re_uMg^h!b0uvc3%-@C@zV;H1)%6(Kaf!Y`X($yoIM&Scp(?a~tOEv$zo z(;m}ds9&H*T1}uH0VlVt#DPfSb~K+%js0?|$LqjbQOv24+1I;8*?QFJ$MR&Pt|RUf z>mIu=qUvZv+Bih=b4pvrhV0d}V3Xqm)}A~0gvEjlq$1ygNt+fl$AA*u#B$&RW4YRU zgTkMA?>cAuMD(B{7|PFh3c5G=>XB6URt}MU-@B=TA!9nynpEp+B-#^=hT`c zh+_tGkc^;9PA|EZdA>*~=!}-zM(P1ko2*^E)R={-zK5;ORZ;YM=7T+&dgZ>2SKzu| zo?#%{HOC=^h&y9#BLAkTp$;`NC6gSsxp1DQ17q1YNB(9QDSQ1>sN&)8oF=h_nhLCk z8r`&_r`Lzl^8LFmcTD1S!YbI^dqD@u&PExj4UAC`$SCO^K@pV;Pi9pXl zEzo`c@I9~X*EZQN>M&njwSZjVGN56ckTbkzIH2ybh&p(9l>;HL@d*Q_>9%}6J|R$t zuL0_*2LWk@H^y%XG263_Zs7o(rE+=HBg%FvCQS!Qr za_Eni{k{=r%#E>phPYqnDmH6tR>35gZpH|=?fDY&`}<#v%34)C(yt9g~mo@BXaI!kK)xvH?8c?D{)>4YHyePt@;}0-nUVO-BFU~kBNs?fBbC9JT}|TB6`!#UXXYLf%L{^QjGQTWPie9qRw-|d74z_1nxw3 zmY9JyW8baBL|pYEW-mNbkMN7PVuglXEiBIHf#g22;1Wmso9g7bkXli9<=s01a$$m; zqZHV%VWbJJ&&PZ5P5Xea-_jVHjMJCI?K|2YD_ok3%t_#PZNWWKcS~MTPL_d#5^`@e z0jTEvvof#h5j0}0+F7PUtV{y)r1w3=KZJ$&;h8-rHR5{?u{+KqH0JzwO9yfa@-A8i zX-2S)p$c1($U>dqBU`0wY%7536Gb--`f9qQM8=f0mnnIw3*p%dkSm;;47l=``FG~k zJaB%w)j*2qf#zMp=`b!QAv6|=Y8h^pZvkHhf7_Pf1tlJ}H|2Xzk5Vnc>@73D=MqP^ z+xZ>^C(#@o)t*oKg-Cv1BrI6IhK?ojg!E4!d?E4O8RrcK*ZyK!_mv-o#RUu<66U!o ze*4xYm#?O74hgF-rP(iCe*Y5#$jAV{LTa6nzMpbD`cE&kMAQ#UfWHi(fH_GnRoK-Y z%+C<;f#qhsjeQF%zW7jy!52m_P-fwbVooX-0IX_*-V7+x@YqSD<0F2%?OYw>A^n>C zEAzbsYi>QlqyyNNePq6S;qqSN4D>p2Pk!Zti8>{66;x}qv4G3KRRM20`+QIPcrS^L z&yc{HiSRtCS98Yu`uuR-?mm`%n)3Whb+y8=-Q&FSa>HbwBfEsf zkE-!##}UggkOn-i4Ut~b%#@kp^XP-hPV@JSeG=u`R!28^e?fb;eI{um+#z>G%89?LmND68rEx6Tdcq+7eB zCk2EtoAvuvM44?OkZlvy?j1n7%+DhIv~=>=5rBf*E9QiUKn$Az;9O=AZ=fk|%PYt7 zxs5;fBkJRGAgq?C-=Zy-IRTWWyPtp<1K1fq=-!5T;p%E#%Ot}Y=Ev^ywKGLY=~%NF zGSnedr6E-LlcNH_f%9KVy2G^<4;x9`zC7PBac<+f9l+lY0H>J0P|lOI4Cr?>PTu|m zfrub35+Io9>ItOIX7}2B_4_b|P(fB^LV6dPZI0iLDRvr@Iv#P?g2w4-D-6_AzH8Y9 z^4u8UKR?z}@scRT@6XXINeMq!NL1<11H?|`&6 z{9+{fh2p}-G5~RGq0f$XmqrkGx=}L#oHC{tHcJHPC9Q-_-gwMFj^ zynqyZM4QtJ!296QPjECMbOIinnfqj!{=L368G!C*!M5s@4iQ|>4Gatf0A~cZW;kei zsMQU`!;}ol=d@WYiek)tj8F8r1QT()GP4pUahu1rOxVx4xoZ``bH9uYWAZftsFU9& z5CK9W62F$LbfqLcT?N4KTq)lBahepye7(wWHl=9DycHgq>W#`!VTrK4u_jV zRsiDc=)LI%d}Rk$LUq|9X{>b(q7Hvdf~w8+Qhkqae~=XeeJGrP-!Q+^hhHk}O+!bg zGBnj2IK=tmRAT{k121-KD< z41k__Ks`gPX*1=UVu^hK<3!bbxY!ff73 zaBC;M(%i~EFXF!am~wNRlyO>y0F>jAz~!+8>scqWNK(T1oZYowcb|Y#T6$*9V*gJU z`nx-Ul-bBL&|6df^JT28tosCD{+qM+b^4|Y>a2XB;SRBuqHfwO_0%uOb1y7VKVSCV z{V^63KvIQ~53o*y(dvlx`@hbpLtcamP0^sP3cSQ0F2W%%$w(zzBV61u?2L^B?O970ewt5T{T+4+irF(9e0!F*Lj;c+a>Xv zeoC!x&d{y8DZ-lc)J*1LoKI~gmG`^%Pq3M8cPkp$t}2o1Z~fuC@d)|aG=A%8$q>Vn z%%@wWmPjp7H*^2))jdX)og!(&TT~QulS-)10XZNx$*Z`V2N0{ z^xH88!iT+IcfR0ivRrh^Ob+P{XxvA2FQ{_;jVFx`3w0E;=Zc7hM*Dr#4J>E;sUk)ki7}F$tXa4J@Xuo6o!Ou zJwiF?t~1h{zCm3_>RSOjy(#mA6#43AaAEpu3KAqNNAD56Ft@vNT^qrVR3DQb>9$_{ zWV^oC!4_GyWfsA`ee)|3)UD@orznO#p_oMREJD8{y|zks;wYeVar3pnRob$R^00v) z2l{c0QgBc|*%AGx2Z1R`HZ`-chx_-N6vlNHZTxJ??5UP@Oo)Xh2yJRV)8woLt37hU zNK3vSLW`o2|Y#+OrAi7^a^q5Yg#$I~3Yz`lnyi zPWhUzsKBiDR}>wfS zREJ5=)>Sa<-5_lay)ko|MQ8{mx9>Oeyg|7GuOjb&yn9#+uRpsAalLGX;7-|MVHyO2gnq)HDCXxQvY32oEX*T|5P#r|K@m zDhu?T3Py!|G&4ZG&q!aLe344>qR=g3V=K9s;GA8QP7i6^iE%Jtc@GVTiq5z`uPFaU z(huQaGwLOOBMTwl{+0Kjn<8y|%p!?4dSk0MoE`JA!miGhOmm4U9pDP?JnA!r)u|lD+LeI>b({IS68qC@* zyJzQg>h>R3*)gAUh$Q%5RPW!RKgb!tq4_7KPmI8T_&Gksn+F<|kuPAyYM&{vdjCPW zudb#b;Qanss96&MlEnx9|MXtGK+R1?EYBhG2*l9uuMCEmpMX&I?~}dnHYme9j5`t5 z{eSAxr97m|GK4nBGL0td#nh6TEKr1LNwQp~B#yFg<}vq9U$P`slg0xr#tmAtKf(ME zn+t}<2}{?{{umq;vg;=KOsvFLHU%g*yX>^O%uY{ANorhy(C-4_xX^j`k*}%kB=(LV zw{31z9wsN9d@=JPwZ`R^foZMP1%?D}kcVy=!9YGf2wA95LVhFSCp{Xa1xE?e86PW^ znW+Gldq&j4UgAGVc|*+qNXjil!Zhhn4=XWR-Gq*qxm%?1H6SN9p7hjOSDMkI%r>Yi zUwjB8i?P}7rSZ*k=YFtnZ3?1;iJIxz<&^yufDGj0q5UmAY{Itq7TfB*3uz@9>~bp| z_wB?`%T*8jTN6kx63qd^JbyJ`Q_RHBqT0V+gd>P~{m0s7Y=uK;;(m+v7=_&1pOL;58h~6(M*6PG`G_O>fp?-=m{gmyRVxgn4i2Et>YrFJ^r&j7_;{}@62#so5^w>pd zQvK?-tc`~^#oSjUUaNb;3*;NXzbi?D7-G9dRWMtInJ?w(e8DLebZR#9X zt|0KUH#rbC&SzH}n;ZJP;Dkur`^wfkZ#E>wlcM)EFxZv1t#7RBORc>l#`pZf=GI>; zZV#%*KOOT8#&|6~USee|r8C$lBN=$Sezo1dR@Ys8S@hryX&5s z>}tn*X8bz4?2)?VIaTF|1g`RRLnEbtr=k`N+LIh>3#yx@{C6{hN2wb7ut3{tJ@buU zzw}7jwfS|^u*ZrBP6>7%G-FSY-#ehWw-m1$r<7wtubF%O?ha3s+Qgt#M84&&6VUbs zhWPp2Xv+3Y%`HfYqOn}P?(LP=Q4*{X;CxUM{mP&MS)M-xGb*5cVdRQ zV$F?x_%O9#gYt)Ft%tUaZ{@dcwZG(`Hb>X(B(DrTNPVb@u7 zpBr{w*S25Iy0MNag8T8xWIDeTf(ip(bp5s`;?5vEAxFF}{Fql3kr|v_HH;p#o&g~6 z(3wk1AF*rI)f5B1VL1dvItE-~xgv>*x7&ThLcxaYVf&s_Y5A>{&}S2wwHbJ;4u5B% zdpNgC1^68CD_rO>fx+Q-cVcQn{4y6F6gz!APfNcND8N}y@9M~Z3+EPllofoP-^J5o z<(fXQwRmd~ELQL3O3T+f)9m}e3esJ(^0vKB|I{~B+YlLp3TZl!Tu6nMXRT_H}a~QnyX*uthC$pN>J@^a1 zLsS!shTN8kuu6J>*N57Sh2-4ol5i7$bo%_>#7-_Q-CMm(KzJj-p3tG`K3g>UWVAheFRyrf*A<+i zbbAjbM;(sKn;d=*QPNtMj+Bazj`i+6->Ype^<4IKGB&||@=*RmGH6h3k+_+kIyxYK zF&UfCNu%@l5#{c1yJh}Ne2mkR5A=G347l7`Ax;&e=-yAmNJiVOw5CBqd+(qI!CdKz zB!kIXUWCpbVWKC)vJ+{1QHE#aexG%9a*=i8IJpQ{SdhZvo7U(&UaMt5CH|U|Bffh^ znQNCqaqC}XfKB(Tre*#-b60MN{HOFu&ns5LB2>ID_#HNP%7TTL2h0Ep)i-L zDQcE9KW*C_i652am1QD= z1U{Y1Oezv^`?mb`$lQKZVXsH|E7))}*-Mvll56ggE9|{5usrFf`wh>Nq zb-8w#*%-^AdyqyquRk`<5C2@Xdbt}=2-hd~=2=gwP8tMK75CE08(Iw|H@vUzbUlJm zJoI14b1c@5f$Aq;=)L)?oAOe`4cX^2d#p6NZGqg!%?emhMQJd-)hTIbWc~sCFOP0v z5yTrSl!Msb;LGmYSdUh9!fs0If=sS8Hj`~*4}kNlSDvC!J)-V#-FT=zB;)&0N(zoL zl|)Mv>{&jCsxL8D7ksXrbLfH%JtnUVO~Jjc724Jz91u#rfNj+}Dn-1Aj}cQHrI=;A ze_;aEY5Grici1!}@RDsa8{sh-hn>=YYI3N9s zZGdYQX}wkZX#@kR9(lo#(6tXG3(WIvHim%yh>MBmKS(!wj}b_-3CQenq3s_FS(9j* zE^n~w-T8CdAVq_!mI%5_a_2Hox^u7{aj?Z3 zCb^ZBv)$_Vo$V^FhuC*k|5T9~AS%AaTyC7m;r~)x(*yk{5&9=4Xv}}f8Be6m#>5mr zs2!A}8_#KiUrsWDlPEp*1Y_wVg37(A#GK(Tt!*0-W_h7oLyXoza&q#=-x^SZE(cQ5 zbylSPzxp|WOFHFFW8A=|E~Z8?^QRnKPcK5iv{GMI&RrDKI$Gv1PXyS2-t#V;Mfh-X zBw7&8ZSJ-8wlh&i&%;AZsTpI}$IS%t|6mqrEuy@%tE+3@Go=iTZU=he^r{4g_^{v) zHJ~-zXy9(bb~_vIxQC~wQ^g6NaEJz6MO(b2Lvf1gARiy!95AYgdPk0S*$_#M5=-^T zDJimQx##ZgzW;N*1o*rdmp=JWS{nPHDoEpmc32`NF?KqCDr-*^qK}EpL*;dI07`w3 zCL&WrA|m>1Hh?2P|86q>{q}A9$Nf4|n$|Gi-&T}*rlzLb{d(GML|B=~GZ1n9`=+Kz z3VL$@NdG_-BAOwm$qoTZFW67wiTV!Y%De^D`|%h+5!^RNJRBF1vgu?zJnZomDzWY9 z_9<~Vce-jOkbjP-YX)HKLpHC?o5ILN2NVwQ5LO-EY$H2>{Rt0G;E)8;`EeNibV63<*VJok06>o*0*TWO-kr!r zfSS}lMWKJL55Pn9-9G$}VvI;jmFUCBRD5Mjxs>oZrOBJ21rtC$x>j;hl?rfbG(hS#GZW}rfw6~-;jnx-F)K9QM>#1?}y{K zXAiHX6sgMGf1p?(@s8(c)S;lPK3Bf?0pOvCL`&YRNkf%p+!vDyv183jXa#KT#E)r} zc^0ZBx@>dfU+szvl4ZaYT_=Lwdq0aXgT&5<*3~JX1OV+gTzK`^soCgk`vFnEox%=O z#4A^UOZVr`t8R?ycf)|-90>Li_Z1vFVuZ`tjPhNl-!eQ6qxjyS+;U<3L?OQmE@Tr1 z6*O@JY|8d#15F1&91%SYD3z%lU}sQdk*SqrU+bo7w5>6&NaQrm1sRcqc zsP(|H+F7tY!jt4K?&qg4N9J{~kk^({*-Yet6nsmI27c?`?yS0A+`%LwW=-r{OX4Ek z6hwvf)Ra3ZGZ3~uCo)<_TR5OTehfVYX;g1>t2?XyM+#`@cwF5>B#kJ!hFRUlixhnJ z*=Ih=0l~SWEb6Ct_l<_kbI)XVzbgxVCwT%IG?#YREOsaH=NcBE7q?E5B7Y1!YmOwQ^Ni8DDRO8k`pQ-(ikRiqWVJmCU==r7jg6m3umtNS*g1FTV?XgLAuG83^4c;_)h!IPe~w0*jYAMg zK#5-Iul{+a(Cv^rDUww94hJ=g`4O`{ig6L@I2R@M9II0o`}>A}inwhknJ`sh1Knyc zu8v4->^r-nG!xT*xL3c@pJGSM-lSlCd^JIy2g-L?uO9F#beq)wOb~R0dNd%#v(f$8 zR%V1&`?>SYCBY1lyO1^N<})n~Zw+!EjPx+N-jktYn1?u8Hr`HdWpO=qe$gY#Jr=qv z_bU@GT=Q#Y^@qs6I(^8Xe4a|8byULKI?&-F;fp%YQ1K4k;(^d>$eqNZ)d;SS${`uq z0@|$h0#Nb?5bLSavCeGb7&q9%^`Hpk$OSv{Q(NEX*Pk~vtYAVR?5XGKrkm8oFc~Ns zb=@{49Suc@L0!Pg>|6PjFC_w{7Ilp3W<|}-s+7qn%L}O&7z%HX&t2*fgJ>|$@Z|kw z=ftJI_CSIniZA6qm{J0QtothtNqbRu@ZmO7v?@0A2s#bZsC8rW3NGBN& zv&LVkU}DBO*Dc8EsOLxm=E5YjljTP|RMleO%bGW4I=$6J>NIO0=H0Fxm{(feu6vyw zrPs~(H!n;A>$Imkv-wN%oB5ZO|J4y;v+xr*HqwB62e_JQ;Mg9rZX$ zoK~|c$UKf?36>}Es93TU=5%)^e?;;Cv+FlsTDPdvphp>7ks^1sM`-d5McQVuGwY*g z*HbS@cNitvo^OD+hnu8QK~6bObf7j z!q7j$YwBi(KvH>B?VEXz3hXmbrpFh#qZ4LVBdiZT*#A5NWO{IqTz~%%`nnq;QqFMk zXMMyO9jG8?m%Qh?QrjN~?XT#M&y2JLNYjRmC>)GieI!r4^0a>H5?Qvt_|RrOly5b+ zQxfBYqBoP+e@!gtpuhJ@V&-wc^^Ol)*y&euj978`%sNI-Ej3CrcsF}xX{?0#%Mok( z-^eZ6rA1-Yn&F|qgUC`+4;b&}sq6}_n#*?>lQp8hZF?p`_zI&|44OB0p{R=Qp<5^j z;yRl?+vyu$NwBT#sIw9!JOfO73z#4M3`3l_{vS|^%a5Q@-l-@y5%pibzx;d)=Si-! z`}~@2z;{v&UDcYI%`!#Z+Fz~&r4eLo>WgLI^ps;WmyefEP0fF0uzc!#^Xq$;sbzT^ z0FU>5-E`sMxOSwtdy8Is#T;~2*t+8Yb0z48`=f7?6XEu~!P&y0G^3uYvi=-MT4GjD@`vyz0ZnR^icX&67K2^-EhiCDt2&QXbalkT%=e_7IqYnA% z^UE8 zb5l&&B;n&dEs$dB-b3osF0~G4ku-0g&ph{(bP16!ZX9l+d1kRL4pUbsqUam>?qP-C zpYJSw5 zRxeRH+B0yryQGVhL>(( zSn^Y(+7?M=3V)jzC3CB*89a<2kR1lilT@FNBT_=ssCO47C~ecmeRb4 zv;&ry1QAJw5i^=>B#Ao{U5B|JGn+zm#SEAJSXHner9f`Cw_5MNznHx}Cn&Z2=by?G z*%stq4Z#1a{7h4@4!kolodf9`(RSs}{O@FNfZ8TA2o!N>(z}BPp+6Dd5R-jq=81sp z1(A3MzAz`XmL~A+U|0}UIw`4miza4(Yg$2G9Ao?-9m)dH4qtq>3vCJgd)tNMVjBI2!?) zQ*o>|3$ESHA#mAjtFl;JFnoryZTOHJ5(V(f;o^5bIk}GE>xAPJBK}k6bUlJB!6U8R zKY-4AEWXR>xw|-y2{#)3u&?}fG;LucDU^E#pel|4eySbcB?WK_yAB{q>_=}g?e;6z zd{$Vw5T{2cijFHbt0)>E3fo1kPhH>I4B5Jtj~7S%VY!m>9No5Cj>ZF&&>thZK8CN= zN?+gD-x<8E$mcz05XUORGkw+Y^{b@tKXHt{cu)cH|Ae0m;?X_BQe%Iii9dswI};y| z@iKUc=*r>46&W6O*B5*0*41&XQ3>C?)GZzw4D#&d zy?(h}hQ@SxCY{d{b#Krc_%R{8QhqU6y531*dQ8J_1i#vWJ!-x4x`kbMzyWaKWyl@& zw1G^oTq^f6*T-z98|R!#;;3H4AGL5Y(9!t1KMXlYC}#K2%03OB9Jk^=g)7diPa&Lt zPV=BYUW`Ns@pS;s;J%a=lrbJTFe;dY1r`?0miN{0PdouLr(y*2J2Hn`jH-Q{e_ZeM znYnPU$NRh~fm^}g+{6#}TqoA|(aqFLvN%Uy(^K|S=@IF>@o0KoRTlJqf{)7T z>xgVj96s15535mQ)p5GjZlzNr-fB7IC1R!4BXx6M^@a<()Ios67wom_WB?rpJ9QOc z1RWAMh%n>4K@yrEJTb~-pc?tSifIhpA14;bICg#VU9{o~D?p!)?!x?{v;pY&6l3B1kKe&TOGFlg-#^Y6Reo@m>$S`6myvYqQ!i+hVX@k9SmY3BZ!5 z=T3T7fs&%8H+M4rl}|)ZJYrssea~%ZRKnG!18d0hapv27gt-^?Yr%1lt}1sZv=6%b za=>$k?Q>1OJ=5i%;s-aq;_qtfE>AXE;N4fQ>i0{pxjrg1JmMH*W?tPG{j{7?s)Mbu zI`sEo2Zk~Q{P}r%F9+ICZ7~5tm0_!rY1K`kPUzsy*g3iA0*x{?bGIa=4fpKY+JYNa z3A`(o`-JLh96ALs57~fM!4Hkm%An(%*+it>+#aVi#;RfiMazq<;IyMkR%0;p-dIiHu)?EC)UcmKZs-TwG~{+ox# z9{YSg*FL+h*Y&!dS8ye5&Ec)`pE9~wn&`)s&tVPrpm zLuqQf9H%$#Ym4pEk+e9iAeeSRL*^rS%q$?occi*yIk70*Prp<|oyep&;~8DVQ*ak{ z$;SlgK*4WXr}C3pKrrj@`H`T|;&Bu_rp%u|N>_h#)AK7Un}U?4=Cy~cRZP!LeCOILM{heDrDscjgo#+*VOF5BI ziemhz=!`rE`21`kK{|@V^?dBO7``dDb--bSYHDmmnYfoJgJQVawQ)alqv(!)Ji{32g1M;;?-Al{dNx#< zp0fzK2fWb=5T{U9;v4oF=o@1*khxnbhi+R4;CnTAO2DJf;o<9LEO;rZK2O#Eg!ovc zepWbYzO!1Kjn)2L?J_;A5T%J~B3Ap?$-%#V>ZR{iAM-3;?6N@Mar-n@jG@?^VSf?C z&u|JSgBu?y33gUwwkLWS*!nv;hfJrOi2K!aZsq1puv0$N$FIOcXUzQ?9=rR-D#!@r zP5}G?C2?zM7O=~&mx7QP2&99g^T2AN^jXAQc^^G%TQ*aryO_X*bJ03UMQ=B}fj zp7RxA8c1FL{Zs&JYjMsOXdM(tp{)^6vUy`Jub}YCr4J1`kTe0V zaW+YTP*FjT^s%wFqlG7`rpH@tf!DD5kTDxRcAQB0yE5L5(m+GtN zcbyx#`av(MtL-4NNZ<&ey!1y1Lt94&1-#$t*FQvOrH=HRdI2CaDGFC90K|`C5ItGJ z?^zJR1BjX@&z(C5NHBHT?d@kK?*DmOH+1o4y0(AeT%i|}lujv;${axv3JV{CT?9+v zJp**V!Il*Nk?$Q7^ZKqC`r%b8uo9)Btn6Eu zBrsNQT?>}AI9jy#@8;TPo#n||B?I8Z zuJi?#bjF(!pkPvv5;7|%1&$eIhfEs-GXA|6ww2%Or@&MRV;<%qg%BJ>hs{U?0wl50 zC|3klefwD?b_%?MS#~Jv&trfPF}lMkVM5^eyggs8qW^KQS>Rn0=1$IQ8xSPZfX70c zz}853y{SRY02!aSJwYtx^$y8?cyV$#?4f!kz#R8M;EH~zL&U(qmVk`R7#ISC_p<-t9_X-AcV1aw+nxM0?w=t^ zQ!rT47}V|3tH)gBvLt1R=TfUKQ{d<$uGcxr!M2CQNEHRip|4vo2HxEfyw{S{hCV8p zO`mw{li)XLFXphJ(5kNm44ueBoz(jx(!3$Enk>P(v4k5mF;X2`IO} z_|q{j)g2<-On*5e*)gF;dSbB88%{#{f4dBbLSQ6?G^go6Zkl_-<%&^?IF&0bsN_?O zmb7ma4~{(G0f|jCh{8Pw(sUEjlv5B%U0)_SL}N}#h_C4{5(_7@#K@K zW!OtS`^E|)NTQ2y)as&_^&g1!M>(+AgJ(4K-2zYf0ncsty|rzan$2QXanl_D^{t!( zVjh66dILcB&bphY+gI=5vSgCN0FPzv1Kjhs?H`un0)zw)-fx(DQlfc8%pB^9ErpY! zV06%$bkj%EifbbCcr0P}XRpKL7i18VO?=5zI{Uc~Ep%4`WwEq#S1<(o zE{lsAfrM{3athn?*8ldIon~_FA2LVZKj?o0lg+-I`um|7Vt&6DMZ%!YWE3H&pyJf? z1PEkblzTVds<&$`N@7$ zcUR0B#(f)hCZT+`0!0$%1fa+3B!*J6r*|A6MT}NE87l{0TDbfBK09CWR2`TdDl4_z zS?qu=oWXOWM{CHK!0kv2QY^W~tao{_y_$Ic?!kw%(+{OtUZv6E=CxMY2%FxyzWx)V zBbz2w4QLSuL64+-?2(p>!5bd5)TE34QpYX1!ObRM3Bxrfp@O;(m0eEG3?S?SvaJ*PDdU6>eZs1|=6BL^{`!eC1!FeQ z^wpf##hv3g%hB`$2-QTa_b~Q#33(TdEN4bZ(Edxns%VswTrSSD7|r8x$fT!7+v}NM z)kbn6e?isX)B9Wu6b&+#E-AR_Na(92yBp}3Bfl23oPh%>0#Z6+SW=q18wN^^? zA04Q7tCeU92@Kr9bPiL$t)Bl!01hNSfX@YKU;kuU>lz)%i=YTaUoz+dLpSp1Zhw;- ze72E`w(7dLQ6O@(oMaW=vwh1GvOZ9lGCYgIg2iwn9X1RCf58Sl|3$j z-lc&%-nD$Kz`dNa`D>uQ+%i%frE_EDmKGu93cwEsy31VwT1g%!X%Az&W9AE8#Ws!r zH5~t|X<#{+51%pz)wZfcF1)V&y&;Ye_FU#&f|kYsH7uxxY-WH$)Nza6{@Q?e*m>`* zzWlK{FIbs4;8OD#;3k|`=_a76T~mA#jJKKfZWA?oEdD-t3I48OMku*|W#t5;WFD}I znGq+3T%V}uWoF;cF6Bmj5YVKi7VYaJbeV2iGG%5kmK#piMc=_-w0}Xoj3y1Pjq`WQq)Z8%Dn)R{JgBGaybT9tix>QX7ie%qG49Q!eKOh1`PoOAZ* zl`i94%agyxc3I*$Bzl%E(oBP=R*OJDf*9ij(td)I6lcU+aPaNqT9OixseLFvp4UiL zurc5`h1j+-aH`db4&1`7l&_T{IA&H5Vp5$b+RIcXLM7g_j)QiyHEQy#wpV&B@Me7L z<(*HnhdrF~+e3bzKE8YIx6t=XL)H4zU!;=e&OGD4IY0B{$q8-|=B) zMxuv^MBr?{o}|V1{Ei@ZHqaKjL}m8{OIZuE&oL%+7xPH4?jw1*nvQ}t$#juI<0>if- zK2~V{)B`K!efX%uEdt-*!JWIWt2g&9yT$EVWp}%4*5+QU)vWO`T3TBAq&DCUMBmKU z*t+WKDis|1q#X-^=tocip>JG$pNqdgzZ6wbd4mN&`1g_eG*|F<4}!OlZfALgJQ*_hRNSKt?U$5B~cv_Topc|NH&VneSWI|JH!ZW#I?^-2VS} zm%^c4<>n_LIE!D!pS=F(i`#BLfD$+yx%voG!90&|VU=orJkl?c)0!8|8x%vy@qqdt z`0MI4H=A@n)RWV&G1p2sOA~*1Yu6;kyn^%9v*zJ=vxCF*`_%XU?^f@^41!e;o8uI5 z_CW7Pe;D;YhcItM*|2;z?F28ke+(tgt;gA0i%;hK)S4i>fA`>!2K3MUKwm8cU0yL9 zIV#zeIiKtM{c}t2*UqvyDdbZzDw?BHvQ)+XN&i%gVa%h( zR~G~6kKW#5j8v2VzzF^Wqv9PU1UQRSNtB|!bd|1&GvC-esI>R@xh@e z#y{crp8E|3yW4)yRW*J07b^X*Zr}PM_&NEEnzjxD%(MCyeFoiXR$l5-@GEF4vA{h2 zZ>@dQ1pvjP?HE6F0f0ffwIgz?D0aV0jqNC&v>lFz_T|xkDFB==evK>rAI;rwzhKA! zE-F$*@ee9tp1-L7DS?B$e`ES@IRCX~VhfiRf)r<0*Gko2QHkEdG+QRYDurBN-ojBE z9FO@nER(t%3u}e2RWLX(hEnD>EDZ(OxO7HyR%TX&Y*6o8vb|1}LUFUE=_zL?9prp2 z;`2|E3pWASwh*%USzf7Gf0Zh73znwk=ooiQuFvw7$KCPp{uk2=OZJ$V3kjVeeV*KAdSMqp8XUi-6y_JARgGspo4XVEC@^*_-mjBxyt5(vO3GWY^!{NfgA(SMCcid#Kh23M8)$Hd*1hdaN_ z&CZqwVYKoE!T%(|uV3_lQaSrQ9~|=h7O%7G0q|8O32DN#Xkf-qZa+wIv@egY=*8F{ zfhDHk4_2)f0v z-ZuY$QsB`oA$fcc&x8pK$$cNupk7TK>+mMF)9% zo~(99u(2us=ElQI!J{RH3M$TP>gpH`rj9OlIQU6FFWuB~n;e}uBeO_0%`KFIi843T zcN;0GD#2S_dh-t^<^@J%Rr#s>>%aNZ|e7LL!{#` z2G=+6`fu8d%stDl;?jIrR8)4a8@JT{P*I>9KvC|70bR5vuP!rYZUX$ACFgC(G=46t z;Zf|2#rS<^CPcYzvUTc(goWo2#A3Ph6UW;l`GF0Cy99@AJ{kuy|L`Q~BY zP`>`ABgA8(XdmtF0p&BvXo%}$CfLV8Ud8audaeBdYjG=GbLCx!W>D&VY;5XB{eajBzs*^HKQ&5d6hiBQtRjg zIP(v9t4rpn4>b}9gleDpfb%mKG497?LfT??Oj@b)l3b^9r>k*6pkMcPNZ3#bZ1oO$ z&5>B*&e*&>-~}^jug_#3Y$H!Ro9T3ui1bKmacPLBaQ^A(gpqk55n${zH1+3V z#8E6cIfQITuD@6|l>%xm*8_K4BJbLJen2zGLgq2von27b&uPbFls*Tj+MBqh#k!m$ zUy?X_md?BMA)jcGrt(d_MDs4=bl$C-#%C?}%m9{hTV)wgzua|8r`s$Bw*lIoUD8(d zV&nUAExHl5)87(jXrqza#754XbnMG_)2KK-B{ZZc;&4fkc<(F6rL1T~cu!5zS zDlwq^ORu@S+I#g`Ex=&F2l_2$8X&`2?!#NeBQT2a#OAJn$|az#M_uqnK7LWV*YQ>G z;Pu!RC8g%s@p~dRjC-PB7mnf)5?(Cxyv(NX!vr+w%g%9b4nb=Ikbof|xsasz-Yrys z`d{Miyxg{SfH(h>rm9-|W{2~faAh(dBIdgW_$lrG_ zCN`o2ZyQ_V0VRN+M>o-xOFMp!gi!kY0?8tJbC>n3XBswVMXkI=fbE+`uTbIHKb@~W z9QryE*0NkH?|Rm_%&&Q=UnA!=&K{#@?j|T3DiiUX1g&CBo^p;XE`i~LDRq$3rWrH< z;sjZur3D=Mm1z=32p>~JPRal@R*nSpJMHVn_fMOzk`9?V1FPPsNx9Bi9&0?#v$Vi5 z-3XX z32VSAjr_bZN1Gcd!f_C}>_ion$HnI6HXbZG$7SUYD=2w}^wqtil4iOTjP6+R(*_Z*%cjd`QLKV`iPuIC*l}-h z9jhq4?E%}@Xkz3tXVW2G(HgihL{JG9EAl460XymO{P{!PMAqpiN;Tjt+ugnMPtfHL zULVcv?BALu?Z<rMBtV0N*a9dYorA}$llghf*0P40ETrkX zT+TXP3UDuC+471dQ6Q(02A;Fg3b7L$Q)a2%*RKrY8#~hZ>o`Hbek}qXtm_A_cPg3A zHI#oF(iZyHCL|%LTs#-~4@Ijf)}WJiH614Aj_Sr9CKEaNP|YW22BDmOQ~<-!hosS- zf3!euIM>yeXBLb+5YZOtkGSWh4Bl^t|583ctMTOL^)oSfplMX}h1f{HUDfMLRwD?c z7e8|tQ4~f=|CjiJUvS<9Ie(xIf2=S|%lV_Qpo$2lzy^CF#b!=g!XQ1EMk6p8UDu=L z^^*f0o5#}@E1S}SUrwmX+quSTA^)@XTi@2?{vTZ(r=LrkB;i+ov&t+YP3F>!gCE>A zUT{3xozg9B^c|}!sNOvzV`=iiAtb@1Twd57>CgsO{A^LPC(mBWrH2E4KQb45e3&&- zwKYM(;4-d;62d3hNrs-;SPRC5lRk908iKBzvI?-z%R1#`7y3}czom=ieg65o;^`>2 zxbabAXnt?*I&H7$+@9}4-&1spIHa_hZAB3*>Db)R%M~=Q>prgD46XR(6Vn{A*bkVxQg6$>nC{o%=QV}oZ1czxy6iHg<7mr*nNLP5 zCKt_hzl0QI@lh8o_;4AKM9ET+C4@ZNY7OZ4#6w>C_9EX+o=+=UB)24?uOC zrBZ0Q9ug!>AAMQRnk|9Q5~_ET6&9|CWx{Mm>hknvhv0;S)V<-(`=N3%VEs+ zm#w!ud&sm=xLIhKtna#LnkOk*k-z7t5*cI5HKD#_{q5R!Nl{+#tFGjD6P$%jz+4pO zLd>u>OGNU%%~RyKhp-lzkYyU&u>I(Ma;n4m9KWp(iOw|G>tnZ@D3YZjmjCs1tG1{j z!53<^kWq97yG^(wr998ZkM}4ITKA?%KQkxyCXMCm&72_0&3<>@*{!XerX-_hhVXFK zfXw9D6r8n$4P#zdNz51e+LJ!}5qx=#a7B$RtR;*uA5rn9-#X=s%HKOR;sZiE0jmsi zA2&`8>SxEVeBmklfGpv$TTb@wYFt)6EH0oM4eS@g2w#9>BH~&F>^0bQpieV+6Fk=_8DT()s&Gap~uhk zMXuG8vdaa{?p>cjU$&1stf!QY5ACU&UN026z-Rl=r6G%%Xd2Vgk|#q>#y?t%eXvp@ zNSH?caK(>gcbmSSdIp8jy{R}P0MWeqv?_;3gT-jbD~3MCa_B@-JI-y zHqvHgft=rXxNUxX-?5Xm>S$1~o5I<@2hj1CA>|j+CY~vUEKzVnzNwasN)d*+@2d|D z#2*G7=nC$r?VzEo#urMJhN;fg!vD? zxmHSpEtS^#h#~bs&+Gyo(;9pA>x?`2F^J201c!*4bYGzA<6j64aEZXm46Lh>dQ8z~ zb!ye$A`$6A@eN^u9Mj!zMP-MW`WTof8V2Zkib+cQv9&|j1j z9d}17^5rwD$s%83QarAD-pbU8&-ptk$cLk*DZg?DuIqkFdchqx3TlNN=hg5{3ipY} z9G;5EE7_IgWjn@fF*_aY?p2|KWKMTBT3-U;{8ypjrWB?>co!~0C(CSD{J5pEP+-wI zh(|{Z*RJTpFPEE5n%78nJ)AfbxN)+HVxwemJbT`{dlXEBN2J?0LOH zeXzH03zK$dg=YRN38qW1k0pNJ>&cOtAmPIe1V-9KJE2LfXk&dk7MaV}jEG8wrn-Rksj*JqYlkl_s z=0I4zktq$shGtj(k&xFL!4piy}LZST3}*T}c^&xkoK{p~u>?zklN_8jgf2E*Tetr=6H z=;XfQbPGuT6n->T+PG(zE_z@@DdiJg$VcEK&RAMsC0H9K?N#w1!|@ z1z!F|`Yl?gm2S3|V1k3Rm9tDC1s73mLJtW`I1sXgN8054EY4_DHP$jjHt@Q>pEzK* zy>D8=t*oqE`nE_ECQBPF`puzBB%{k49prrW5fKmn{2IIB@>QA!ugRZmr}LTmW)2?M zcqAc%Qujw{t;^V_AH7n1T*z_m@@KMncGHOz`yTyMqU~Dm8Os>a_*6bymPEm{%B;R~ zOF`TFw9~elQMK9zjU2NmKk_gZ4O&#)we*wo722D~w%1M+?UA^a@%mE-cTXu78Fw1H zzFEBFls>nUR5KPma|GWDxIUD2)!u zybSNy&Y9;@-u86UycNcGcVaV(tTC&M*RP*>EmtADV1-tuWXJMmAp=#2iNI;JKw}8} z;h4nILruzgr_S>PnZrg4A^CZ7ogofZ@R(%KYDN~19Ov$tV+-e&pJx=`_Lj_H=v~h) zn+r{1f-|I<*&|UzvbT9b?muYOWyQ*URT~Y16)z= z{urO<2Dyi2mYYGx?mXs|PneegFWeg)cPAh#JUZuRM7cTiH|mI6>sZ%MXS-Kq{H*aX zrQ>@gna!fPxXBXvnc+ar(?tJCP4Y1@16R{sU8=LS4uYUQ)LQjUsp`)>+ z+9{VyFOr+qwI$EXIk(FR<9YXLFtws_%TDtYgiJKcQPAc=lSc7s+nou@rWZv^`#T*W z?@S~O9-(#$4^Bn9-qFH<@VYzVS4mnSY^L#9;FrJh&;C(InxPqE2#@fCi51cs!G8H` zJCjrE^Ed+AA6RcRFU?y4KZ0u7s`Md+Y@SvLD%8G;6Y<8r(gM{ORcNu9%zA&ad`q9M zOLd%rA$+bUHpR}UFo#mz05B(RKh<}O!)6#oL>%h2kSq>UFEOe1)UqPp?p3K%otQ13 z)Oj?uAkwCtnxTz*p~pdwh>plIDA#%ThON87Zc1h^Xt-c}su4O2{DdNEOLMB0$LgLG zj`JnuwG4HKBk<{p!WpyXD=5~pd9}$GftVJtdKuY>U2{uyboufPw}Eq^!rZKqStC~~ zA8;)z6a+e+Di`GE`I5xE#jaGsjT>~5i<(@LRwa?pakR|LTQfFe^~iKFR%uUI3zc+= zSe;NdQI3{QS!Qvli#yCN{lvSpmt>v9FBW-5S?gjs-A+F@J2xF#6YNV&EE%JpU*OXV z`W!01(X#c4nx__>bBPEVAcR~_Ysw=%TQmv>7^vIp=E|klWvZ+`Uvz!ZFJryD^vMR+ z0IDvo$J%NFM-VY2nRRrbZ=0U~V!3J$V3nZ@6oltWX0@P$Q2&w9Y>tl|a;H&So1TL4 zn?waym>b5hOvWt>f!FM?jLyowmkB{)jxMAcq0A%fI7k4%CZ((MW$k z$+X?IPFiJ)&`%%GB-1N)h(=ingoAh43m2o(cNQ^5!^uj0I!Qj)ez3#&g+zl=U--hzNZFR^T8$)j8?gH78d*Z(LJD->j~Cb!H(PK@%#4R^j{b0 z?ZZSj_%VCjUFWi16Ol9yMpl z+{_^wfjOHuKXB?h9a}VeU)beN*6`cdnEI$Eg9Knkr(nzNT5>in-(RZp-Y*49OML)J zs_eTgqJ`&WzKx&;gZ8^H9c?uT$$!j4?b@9jRDm*_w>U;j=7p8N&GAvC&Hx9Q1zfOV zxc0aqjn5k5$q(Od2l*gcE3PeHiH0CFf3zV3rP=U}V>c$#Ke8s#jmQ_glE*@9OKz+j zRvmh+^-Rlh4iXVoZ=TjlyM{E0jM`N?pm>=#`4S4sdXx9Zlfc?QbnByRK{WBr1vh%< zK2hVm6yF|_=FpRWuReuOTRLm0y-y~6!As6E1tLA)m|)qjct(NQiQ~WL*xtQ7M`q78 z@x2iiR;`#ZsQ1`h5MjgE#6mt(U!t?nE!(`T2?7nO9h&DxqmbFnF?$|_9*s+1ho6l2 zVN)7xN$?|dATmY*Ue#`6WMtDk?kpZ|EgptpuHExE{IHQpD%dx=G7^Se=OtR z)ZsAx9F=AR4G}g&89WBuj%Rm@$eC2#==x5Nf`8&N_*~`lHL()UXgt+F!UmE6TC$`+ zjPl3Ank0YN#)98{(q?EWv_vS%nWv2F+R!DJPC?+zUD4@do-p&@-Epr-fDHxq5}~^n zOECi!D5R>3Y3Dm{a>A{L$ncrdBRXUnf5ndCboYtqkL_5Hm$a5E^|>uC!s4}82CZZS z)rlNhN@wrTx4>9%Z~JR4`K%bmqDrao!ktTH1+7^Ps=%`kGvCvL)cS2~!4pG^wt4r{y?R1+2X&i9m7K!s67x2ov3m79g9=(ON+(y1 z5zC^&nH{fr1=uI9|nwcZxfw+%!U>Cj-DLdFUWYW6i5npo?STrw3hRu z?dqp%$JZuwT*Hw5a^^(tYA?l}M_19Stegz*4$$}zDpA9d`(L_)-VjBEvGc?OejduRVCF<_ChUmV3FNd@dj0Jl zNVvP&qEBUsj$cbN2RYqI|LKoC{Y7JmnB#wWQtHzTO?f|TBiFKab(|Tw3xGM_sRHo~ zPrGoO8Z6@S^GJ%*oSCGH8R;Wu&4xA%uzVbeN)k<_`(fuy;dY8sV^+6@rz$Xp_t+3l zu{X)Oub?n{C8WC zNhPmlIHa@+7}%asxIv?xH?87~rcT_S43A^L<;3gXqmpn;dY&eZ*3v9oMpYe{wmg0! z=-l)b+*hbo>KpJ`RA=US*)r?gD({^Up3C*d_FO3Lm2va{d4T2AXbgi;>e z1N{z1PH(?-jVC{NO_zISdw9o@HjT=9IaIc_@v?kNi=+s4^=0lt5Ui1f?_O9oeQ7{z zRyM6;!dvmT;WZd%rX!ci&wa@e z*KQ^3O*u7rb1tlTeoDqCgCog}fa@@<>u?IIyV{IvRg(@vH(VAGEfdcA>K2P*ToqQQ zz~vY6jb!*8Vjo0Ta~Je7VR==s&n}}fE6cfN{;%r9{!h2_4>p>n>Ah@Ge5_OHJJk`C z?}egE@dq4oEl| zCVBAy2o4I*eN1&67K}9_WstvK^HPA_2hc#o4?p}UySW&*)L@quIS>+@({;;TTOr6wDpFP?kb^lP(Xcb6iQU=Tu%yle!eb}wOmWKQ+cJa+A%Mp|J(ks{>(qabheGU;~a<2#}%-Sxh^I)hb z2-Jy6(R$fc6x}cwX0g&Pd{5Gk6VdajlcleGB}`6%95LQ(?qHkE5WA3{bXcmhjaBKF zQtZmt^*dA8r+}*uS4iK%CCTHIEEGsP$(Fb8g{QM>nQ&4dfue1G-q6N?&iUSimfEpr zd(m@uAl2Ph!Ece%@I?TDpzzdTS0{cDjx4v%N)UsZ)TQkT!y%w$a)EJ9ch24AjF zz8@`o!Q+|_)bDN@2S1Au@rbMNRCy&AflZFExuWZzpd)PA@+&ncEqpA6=+)fSov5sfE)lbzFv|i5Mu}tk2EHR9t z_G5xYzt7A=b|xBm_3DhPHEeS1*pbAUZ#;mrjqSKm(^!q-@e;=w2ZLntCS_XT?Lgp2e`h|8VEGvC`+gVR9 zmVItu@1Uf-?b9=*M2~}jdQu`TKGc3Id$~IP^qzjRF5(%M`cA_KT75i=L82mZ2!l>-O-0 zsr!gIGDl&_@hiR02fhzGhS^&2%ah^1ljMtdmvd!5j$#%s*l(MAuBdm9uVYSC)Y1OZ zllJ4lP_CtCYKThSw{bPnrvs znVZDz_f5cYx`)w%B>TvwM`g2jO6EI-=Vor0FIruC$e?3ns^6Cd2rl zT4nr=94(NcZk0s_`NbikQLAL zg1g{Nj`d&4cVKkEpZ!|33_^sk!Q%>QE*2;@KWiPbZ-zu5yp%3jf77eiql&`x~BT}2EiCS!=Y zxag97M?pJ=XOY<>T{Kj1%sel?iL@>vNke6!%C78rT<8_EWf+@_7(`p7GB3M1t(|to zezLOUXJPb>q~?FBgh*WL2hbV@)*m-k%X)hT^1Y6>;Vw$|U9K^OP{uCZdMr9Lh0&RX zh4F!#mkV@Fj|C^B#MutJD=J;lIj@&^rKA<5Fxlq1X~1GqTV`f}S~N<}mQOaXIZtny zGCOd^oCKR6JRy?r+wBmwUyWgU2!xQ)%0h1gJr3edRw*EryQ5=3Xk0Qjx_yG<0I|Qo zH{rBqx!%L;PM+ek8;UqRcoIkO0)|73yjc&ZRXiZ}ETiJ&J<=YxWDOD=ALkhCiJnb6 zga*HQyIG@}+jR5$M|RdLh?9kznsi`r%~Z}yC)leSYd+oTlf;<0vLUWiCWT5ZXn#TB zQ#NeUa)Z^DOx8Jy5fvk#%V*3U{3;p(Sq2-0`j?kR95kUmW*7Rh3au<$jY~sdcr>tbFMN2CY*ZF8paHY|fy>?SRzo^=oXK8BG@{(Mv}jxjp&g zYKvH>Fy~oDP;g&c`E%?f%q1zaaNz>E-K35D22)=Iz-pf=Z5J^D$=>%q+oRuRikU7$ zEz}%FC%fxtd6j2m$n~#$igw*xq9_;W1ut7=PCUCzr@9oP{o>!Z0uMe0gi&zM8qn_u zpyDD&JG^w^Cm@_i0z5IF!=Z%pG`Cp{VF=o51yY+Mt--6L_PZ zHvJNEoM0KqakLbD8;r|f6e8x@;4pD=^JooSx_6Nq%7<8TiVNJUegfL+{ zeTWCQHAEJN+l~G02*yHoVGMy&;zay5!*E1HFN;ityFs0Wo(#%L}Do zwUCre3;oRUvpZ?qctFjwjXd@M3+^myGUz(IU@K#^+aL;QCB!v;~ajs*HWAR~Y; zQz%p`Z+tPY;pU{x#IQNJP7<0#~B_d)xGXuJi=J~t?Dwc75+wKTYMBfj^A%|#}t?`ZT zV*J%$NmY6CLDIBgn=S7kR2x!s_+96Gh)OvH?M+VC%Ke>xAxkS%AzIR`K z@Iq1@5hNby7H($jW!A@qA|!G;=vgo_v7Ufy-*`c@cKf|HKH6wX@_Jl9G0l{XAn3Fn z=*#^E4W$MOC3Aad5#+K-=YI9`_uAh&9Ev_(zV;-A75=`YxU}0Xk{qijjl_pPFJf@V znr(uy0eHQ{Vh}UnZU1T7)B;sAH@;H*SWsOu{h45tTbK2F(gxsWT)Y`h5)iq}@!?le z*E%{qUsAfcs3~1C+6Iq}pyoW!R>!Q?q6lc?74?O;GZQ$jJhfB>h&~ z=Qb6M_8d=+xI~S;UCI|neXj#&E%qdJxPChGa|NR5lo<1ltHiQ3TUjIZ&e`Xu zzV&E|?1%AXp76bm`p1H$5l;;w6W@R9p>BVbqJioeTBJLj4QCLw#~pC68*gdCl%FlE z8x!ghak^s)f}hTnTnj8|iw&Un0a>umSv!b@{T({pwnS)@4OcWdyrq0-9ZXewVw8RZwSsjY2%HxXBq{BQRfxj_ zbCb~Hh2t{Ax}5g66b4U-u#Q|g!b`Ca7mrZq4%JSO|9V%F|*!eg3EeyH^8 znxXqMySb|byzHy~OGM@3SN)|zoc?q+%|O!nH`E$6P1((!0w zL!D6ALmD?A|NY6AwKSLURHun^WgtZY&2fC#ki5phW2Ojt^^MrB;26e5_3}@_-8I!m z`%h2evm3W{rxdF?;wbf4T}8IUZl9Zg@y(kpwJvI|g)qvao|LzTs=A*eM zsx44$fphThmU0mw%?%ZDtrt?0t{3=tyZIZFjArEPO|y(Y<)ho}>z_+Pcirp=5ec}@ zeldK{yfqoZz7OPpVzPTH!5jt>SKfb5PJCaeo0K|nvd*nfqOHNXhA0gV)826X{l34_ zL*V1uf}W)@*N-Y|YtN|BZ%te1dH0cQP%bVu8<_*619$$35ARRh-Fn;NslshSviDyh6r`z271i11joMC*b09%vQ+-$6h2f_LxS zv$>YM&^a#W7M2yBnP6?T-!V9@)?73~zXgl1q(!idZi3Lj_?Mc0!zoPiMu}d&goo3G zY7yg$lol|Q#R{YkwV!jkJUqtM}PR*dgh%`8xxy%zNDNv2Y(K>y_0U% zYf$X_DT`Eo(6uD>)4P<(ao0^;UyD*+no^fw##kP$_Ri0ur>kErU`(xzOTi^ext!H{ z4_yRcWoM6lQ_<>l=9JY(dVfN&idR4U%=>;6Ulhg7VP*{>DeH3>1;!8F+n%w=Fvc>d z^&ymfw)?usVOWuJsGIRbDy`7?%~T&=r4gnc$*};`FHrON>1J;3I~R?Mxx*M8T-H2Qi;M2d ztOCvgbA>|SBfX!wxzH=Upjc$MK?J(7a3c0Ry+%SFZNe?7?xb9FbdNr&xU8sn zkr*7F!nf~3zB%yehMk65I5-@L;*s9s?~A#_@EdB@XWEs%&gXYBhR4Tg8-b1*yqK(2 zRS_;9xx-vWMsghe_1c=uf_H;bl!gyjWWk5l=H_Hg0UBsaWScI19GJIRs)-RE@ zOVUTE>%JkI?OP05y8&WL%PTQsg5XwF6#|Ob6P#X%!G~hyv9T{`OT3lkoEzVpRn_!! zf}pWo;vkQ254$`wz+#(uUnNbj55wP>2P+e$%NgBgAeO}*Y%AvSt%V4(cAG{g^1Q+0 z@QIJdyrwtNyrj!~ZbaiGv1BsJAZn|}S$r+ch-1Qq7CwT;$0ONI?8ZZr9b{}f{0Q3d zVAE{b+;<=MsNZ-MKfoL6uR>w8xb8nPAEnY+?=hU$gaq_n#7@;jJT1ta>;S7 z@%y8Ei6DK#(pvRbdVj`iey2t04l5|n(ZlpWp}tcOFf0$hrsn4|T;l3p(ck;V#xN)6 zx;zho9rY!;ig~csLe@W+{p8`T(vd9EAEi5e#Khu3u|V7luQHc7Soe|9Gs-nJ&Jc;$ z(3I1m2oq`e*@14M#f1y}b`YZm=E&}`uik96D3@sN+W3)L{)w+I_{!6f?1!kQqska2 zC#G|-87jHezN_eirvW@9A0l>L?Nm83zWOt~w$?t+_nnS}BcV2p4xy>>1m~7SLja|b zce5BNA#Hqy9syVuM+WmjI9Jmr+=Qq3S&cQx^SwXsji~FYvzJnKmvjT)CBh1*G5sUT zNYba8l6ivi7`7i%&wCLQ%ndI7+%S8H*PBavrzt>0-$}MIzL7O35oNxKcH)jsAfqGu zwcJZZg<$w5&m1inf&!|(4i%$c-O5yj13MF?M)Yz>zcu9KzHT(0I3%{`QBqR_4;$p< zZprrJeyDC}@i`apOYuKbrBR3;giiwP5tRWBR(i(bNi5kwOy%Q-{ zwrpNWs79QdoBx=beS=%tGj_`qYiSz$Dqf!+!tR2@l3~$nipr2Ey1BL#F^Y4pq5GVq z4VdUFZ@DyP*{9j}{wK#E??ycX!;9tEhj=3YHH-gQOtt>Y<|J8~TUOe6C zHLh1r>9Cj_zzZ+T@b27R{xzIhg0C%D^T)RP{Fx#A-{E};M)bMGuhCn|$^uiUw@v5e z6F_+||3`VK-&O){JYre$p>cYqAFe*iq%q^%+7z}}3f4`AOpi|vLUapOR|C_*$%m}Te<_f(+jE*>vW|becPT9;rTQ!OTa#v~CSv?Gh4JiTe~HPr z+iMtrqEicw+aK)w7v7#4<)>fvl-E>tWC40<(eD}Tmg=Sd@|V+*8~HT~=-xg{^SiAg zG5_aHN!MQ$-?GZ7ZjrO~ogp9BO2KXLFwm_xtmQxePT-(vSj*F%;ag^YJrM9m?*8qM z9Maq#Oq3(pT5sfa3UA1%$qftyhO5zUsq4ePy^abVPLKOb824|l337S9i;}w{I@o5>&=U+q~A(s8uyDAT9588+Akj#VPA4 zhtb@28v4u{SYo4cvf{$gO^r?Y92^7=`ZtrlFIVq1x>RLm#?7RZeOxI=!1uD_NXUvU z`(9yn~v!7J}C`o7mE+QU33JO&55MteGj#zrRKCgq>fN{VHfWc>1k zdc}eSd=gnPrN~?-dRaS?>pYIkL||F=Ir$dk*de{zg6@Lin9^g2xHK+i2bC&n2r$~4 zYlcRGR&RwB?HaIMgp5x>vp+bGfgX~AHN$miT^1GSs?_FZGYWqd-5t<}Y?|d>bwrbC zI22%x#>xOw5{t`OnVAOqmV1jlW|JSoU{%~E{FauXq&a!gRc4w53>r?jsJhEZFRyRu z-rx7foEr5@5R1^`Z%Jqq5;1S%e^vBC6s;G<2`bOaCW^9YrQ{NHoOd(v8az7bJ&nmM zGW7L-NMfqK8yOv(+}J{$U-o;rc|Ly7=JxS&*Ml&6T+nj34P&n{BJrs_RD88xw{|gS zZ8Axjf$xZHy||muY%^i&ybo!2BVSL9>=w7?<$eHlj1g+I9f}}eR%Judh~UZ?c<48G zdA{g0HbIk?3Z9nW=^^qOZz{hj7?d0t8*{sgbQ?&iJH0tESBl(+_dXy(h6y3sb_7m} z!=GvSun0JIA@b#?P{~lIz1bsaC4;30L{(utR;y+woLeP->_LtgV~9J-^ojj^a9z~* zr>G6o+``yI+{gO~n!DL?;l9_vp9+YQP(*AVW(yGn z@$vD;@(qBqF*0Eke&i+FkeWPy`FXb56U@i3dojkeQDr?g7QXkcg@}`rr=ra17>G3< zy_#wptruU@asUGsMny$M;-Av*)hOLMTiQ4ul>fC$Q!wyj-`iM&f*#6hIsLD30l*WZkK1_ zn~G|CHV%(BH*>{YnZYVi=nIJaniEf4@494dp6rYa{~4F_F{e&nnc=~~)G*}txHRAR z_`uYfih9k#pfZFKe2tK3{xO@qDUuQu7l%X0M*mA9rO!AgBA2ni!oqZ;Tu)w5sHpnq zw>e5mh|$T>mV?8|`j16cU8$?X5hN26)B0lJJZ>yrWh#MU8@V#n zE-I3{2{JU$%R6^Y&;EfqVHSQZ0lbl>wu3EC9$-Q3J>v!U2Xwtq6?KKG)$bO!`k;7r zjvMVoX>8DIDq2W=$-A>OKFf|7x@6bFvUoaZ?@9Ss_a_&WF4qfH!HQxkXv~a8-L7ou zJQ&P(eDI7~mkS$k1&h+YelL(0>QjR@&_mh$W;DunLk{q>Y+p4n5Hlzmx*opaMT&pK zydMC&5xN5?N14eulfq)7%4vBgCg$pD2i2bfp;F4dnvv1Z@kAUplQG>~U(zW`7*$@;V0fl2q+q)C|5(cANG1Hb!!CfnK7wR_RJlLG@niT4{EmoCQe=G|8M)KXAKRTME1 zY=BOd7V_?aOGU7D++4M05vj5j{TH%YKvpdIr zd^FdTEB}ePAG~~%LNR(Y*AQf*-xEgpC}5|GjLb#zJn7IKcAeSwGuet4%6l{(!t{We zU022EZBHg~x3$|ss5Ds@1(D6}z8Ymyq9eFwi}RatPWf|HH5K>kZYHnotE}?s;%UVs zf%>&Fym9}Yq6`Uagb@aE&-D@iB2$kv?(Y2gY3)l)m=j(P5s6JLX8VM4i67Fbo?&P+><%ACfMpc&*m|#wPpNG8@1jg1%zU|?d`bir-_e$R`0Jf6=JT%>v4LzWo}!_xu4c8yeup&6}V?=&=2oxjCR#H$2sg-X>0i` z(4B2)A=BplWjv#mI8Ykc*jf1Qr+x3gLW*~tkK2dg@W9soXPZOvIrWLb)$3e6C`nl)XyoP(5FwUFmr0CMM z7?xuswyB$vF^h*s>*|iz*S$%65o>GD{hi|)`Pf+8-M7Y3bN?TAU)2!Twso0=1h?QW z!QF#fa4P}?2<}qB-609??(Po3U4j?x?(Xi|n{&IrbNdJMOY;OpQS80;k~zj4bIiiB zqS@=Ig{X)(G*h#qbLA}((wLMqQ~v2E+O6l9=xhk;MM39LC!ALGnO)Q!zIOh0RpYT< zVf*tpZ7EUTA~z{ZicPey@Nns+J_#2cB+F~_JMHUi-CVQI<=_T;K0cMm9!af;L;GCv z2qu5xB47lM80B_Tg%ckupnyS+;S;?=>}I=JGxWzL{X8XziP9XhDP#A zARp)71z@?l1eLL;cND`N zG)y*YjwFyyj9ofO{m#ErK|!IEnu*`(-Z}gSi69d%>pDR=;FEJn_8O}aIZW4vc|(td z-CpqHDMsKBi^DJ?;va)_gt_}1!RZ;r{^^kwxDC?Dg}?bvj5zkX2n# zF^`KO;S&jFcZ0|80zV&i#sY0NcYB`C^sowZv;??Lf zVjz>A?GXTd4atXRQMsBu`z<;N`)@c%II=11slyjGq>m-6 z6RC46LuH;Uq_rhEFmr=ZXd6Mn@DP{p5Dw@TRBS?FC}{LA`ITajm2AcoD>Ot|)==P? zg3!ZfXL-!;9e0XMW?UX_rAInh+V$a8#!b0w+fES~k8xwhAi~XHy^0ehvd&RiL z#S(t6V|{fDVaA;`Mmu7S^P%aZmpYs1;$&#zt0b;y_On#djX z@7&Z?f_$X+^he&-SEqJ2$T@A5Xd9ieiHeX>Nt{NKPn}`3%cN+I*Cgd2XKn~8m8uc6 zRz^NKI2bWh)&q*_`vOwt(-<7fPRvWwrDM`*d(M#gw1GTaKL5$4^TZ6NX63pV#br$@ z*P|+E+CrUtrG2!f+%iY&`m&r*F0taa=B9R(h(NFInRwxzBNbuJqiS1F>|o7N{fGPD z983Y{-~OI8U)AS2_bs|8I=Y+Ziqhti?`Ic?mvnMrSnJK$$G=((r>X`Usp9c55 zE_Lnf*!(+dDr(}xs;`Pu4nvA*I;zEbD2=mweR+6zfI&UKYc9~H(BDrj8MK$T(iu;K zICge|WNer05Bf;Y3Vij3$y`}#=&3`=Eg~Z;z^AitB7R)a6HIeUW7r)rf&rU7SH+v{ zIl`46f{BUE_2%ZjLU}-S=Bt(-={p{`qM>6FIbP?Gd!Amq;Y-|oaAdJ+i?2J`wrC>o zgAG@ytat0Zxw~t4x~G|L-;qn;iUqm5UQbqNaFz?AW;*o`xJ_cOJTiN1^Wh4xGZO0MGOtuyJ4|?R(*VTXJ--?A0HoSB_QI*Q*mrSyOGui9QMj;W7E_7d;GK{ z)`zAx~Eougz@ zgsWOgQ}}0+?K&zkc5iRx&~b(OP~Vb1ek`!k9d~h}Lu~GHK120kK{qZcDhjz4vl?VO6|zba>qH)ufI)I4#ot zz(1XTGC1%GgOgUb+20BE$m{N*&WgC6@s?%71eDs6;+U)w6YrDGKU+TaA;@fXCj1;J zgW>Kl(E#4Di>j-4GN=+R^c;bnzE5c$OwJ>nQe`?GgG-M^XKD|7q!NIJEcbO>=)FMt z&K7^r=k1C7FzN&Yaw?5kItD~foMc*t^>;1k=pLC;)f!Zwq_V%$u&_h}Xj&Wu{HQcW zl5Wu{M=c)iYV=!LZS<GuI9VCGIUJDI(SJzf$;g*w{*f}=_hM@*^rNx zoV4qjE&9FBxtqbUS*!m3GX+8Cibi1^J`(V)5kLsdtc=h?Eg*0&Yb1v2@y9Gb>@ZVs zyeA}mxqGVD<5=IFYpJX_pK0#+tBF(6fTXkU?a~;Ww63Y?{xPP|inHNth02Foe9!Bz zF5r(1B59`fPN-1K6Ws|-WLk?)ecFy!r%DRBAG5i}-e%<(_sA-&_3my(5R^?<=1CycI1Ff!Cwn|FbnURoykH_YV8%jdxPX%KoW~-?c{A5mA!Y{B6Cs>Gu-rHn}vziukgGYeOR7$WOB znLq{75zYV6H!?Ih0NI^^iaV^KVT&I%OD7v9Y)!#e_)9872vwcr z)qkG;ndonpwi&NhvyYms$`40KYMiq)5_1u~#r-AJzGmI)D=Yd1noQo3gOp(zRe&4zyEa8dCvQNOsoL(dv< zOpc>kUsP!9PdHn!y zzLyD9&~oz2BS*L(9McA)5TBiX(9O&7vF5Qj2NIuB(;1P^8@nEQjAUES1;AZWHl*#I zwlx8$3R5;^ia3XNz1MG8<@AR%oIJ6OE$R9X=`UV0o13`7shWIXtQfKmnnL1)&EXhw zY;>EaA6e(orotw_e~V0t5uQcD%hFnJ$8fETbwSu-=J1K|2|?cPg|mC5@}^PaH0=dn z@o+{n*(YjKdXJNt@?1mX<^4v4z0E)o_CaRj#rH}|cFJQU%({8?2?*860suMjU^$)f zlf;HG8z*;%)z%s(t2A4t&FJXm;fA;4x&JM%-S)PjkuMw8e&f7#K#_erLXISZS zIj);Sx*t|NuckxI;$zg_fSurNck=+afQT6C=6ZXuhmY*wnC~yNePqV|ZKB+G*h5iH zOVi;MX#dHA&1sb6pO7x2XCf>}MJAL>;~8-OgE`0X9}Ks@Zu<;GUz3wE_FpzwHoj13 z-94551HO}t1vAt_b~m!!p}<&_3V(f~kw$wTl1o!J>d&HgF)9IIcXIE#-xqN4P9fG0 zlrpSu0Q=4^QhqQPuEIXZ{PjizY`?u3@?=Z|CjxF3o9NL5Y1Ipn=1fO03{xF9V z{E4C$zqDBsd&)w6$4y}R6M$b-c{MeuNlEHrE_)4Zy-hd)5%L#I9Pk%RAE13l-x9xh zdfx&_^hiECcF@nO#^N}&2AiMchacr)3x_u}wc5gpU~~Ft)dA;Z{pj3yGSQx38Y4wd zs**7iJ`HpWUvqQGt+cJVN%HW>P)IP^@bzNFW;;7TDqZ+IXe_{0;f(b{PJWCXVs|is z0?$5569q7vJWteKi-7ec?e1MS?vEA(h9Ql)j{-(xi+dfRJjixOS~9hND)Z&dO?Ouy zq=lKomP#fJ*@+q;!nx>Z2aUT}M?v}$0@LDRYE|uR*RNfhg=~99S1gfwLqn;KUBm+Q z;f{}TX`i%pxEU$CCIcz0uW`3dR=H$ZQ@YznO*g4+FofAiCXNa(o+mtB<^_;Nhz?2n%iZunR=!tzeQ^8ZEfsubp@t@;m!m1*v8Y3E!UVo zY&nWBsaJMD=6tazIjJsQJ~v-?=bx<9rxjKIOcd4j1XWR6S{RsF8S2kZ*tq$`)*yM1 zxfg=79;OE8E?Rshz9QT#l{a~nl$Ym*3!+MPvSEd3piO^waRJxC*$IKaP|AMB$Zaj5 zW|ET*vNDemL?vb7nDH~&DcRAZ&Wk;Mv@8yuh=(L-PK#`rxg~ZS@ zsy8V3z(t!bZt1(*V=wSKtXq4eo^la#rj?X8<9SOcg$wq)d9$jA$?VE1aVfVo9U7y- z>9c{jyD?rwJFt=6-Lhu*w0uQ+4bpFRE`o9@7mB?Gf(rgeu++IND>&g7FwqS}c1Dp~ z`mN*NTuUF=e{NcUfbp(IH$|y3{`V>iP?483K|k|d-1tITS@J4c}ZWXp{^LY ze7>@;h5MRhLmF*w?|Y|MrX?dK*Ff&nde9$qetKb&l$`9#{nRV3IFI`N6Ax{OA53%e z6S)W~wH2{WlJDM^`Y&wwH<*xbsO|zx^oQ&%_AS|L`QhXA;+fHTV{~)BD%P{eOr6^Y z%wlAH1_#_QT6P8YJ6yJQqFpXh!}Da585+X4_P@*)AE9lX$)TSw!kt}yCwinwD=Nux(mqb&_ zv15^IIpbUeAZu&bI~T@hD4~~sL`_|nNFjX9@Aj->5q82MM~l(2wTH);rn;uG#NWbv zcB||sEQzwAYhEafEe=-K7#Lmj-JP*TsP9vlwOUP^XySdU2<>GRb(GaW{v;6(WKUlV zrIABErRMaBB-FGm4de0Z#l^)TH+1eyQFWy#*}4MfNoRhVo7vR-O|^r4H_8$c`QyWl zymT_juWuhq(;rk7w6m(E2(kEE!c5hoa%sk0XvG8@D!Rh6CA;@4$XG_s(7ekm35IPawt318i#a#sqewys|O@ z8pQOGU`1Ufu;|5hH1Cb+3IoZfY56!HiN>*Cd5N*qo1LDDtL*f|(@lj|+v~+zp8gyp7ZvL69CRJkwB4EA^fM{LM z`qH3^cnQP5CX48qM4)&1+x`2@0K#@EuUi&~-Fd##EM`s@p=%_g?H@_pjcihDfVLU| zu}5Czm*L4SfIAsS?t)BU)0A@hNJ@nxZu4C4dKsb+l$d%&=hnBANhLr>Z#Ymw7^XlWCMl;D2>Hp^z3k{ryFv< zeqa)u5Rm@)pl4ygX>3l7gy=JXAAm|osG_C-5|D!W-Ghw(S+lV4#V7H%Pbb3TqxYU@ z|9DD@M1scm@#VXO0_!w1J6s^VkkPpG75u#YMM2NAH^OjsF52EQkj81|{q8@8uI>B) zBiiZbHkzgc`3V(xTIFw=bgS37RC+|P=iP6^0^%dA(21yT)Aq}kXZFy1MYCt{{Vd~F z1WWcnqNqrEu71Gx!XI2-ZOEZp63nt5$2KnL14^S8Nf?lqpZy`rM+}X7E)g3&D_P7XT^tTZp1S-6)|HfpH3S;^ z_wU|*Iqt1JiZtCjMMZb8)Y#AW4Od8r@$_!{P3fNTz*c(KY@yM5yMKYwl#m(otGUG^ z7FRX7&6K<4oad-#N~srRjDTrSRYymVMAiA{C-J)v-~i}PUE(^_wDb|UXn2mt7(+>7 zDhIRSD_-Zj_FY*CpSY84#5Sx9on7xorDDYzLSnGL{Hd(9bGR}zgSD#!me!Z;7);M+ zdo>pt@F@sHM&O62v>gk7+V_tTWd0)(6YBEb>?`&3@xCtyy#5!yUqM+d&6Y-evF?Bq zbewmE6!Lf+1}zzYIg*q?aJ>8$c-9ee7cN)vXxTZOsi=0f&D8;mxci64Yv_Qzb963w zZ){*08CIA*Tnb5@(*mdN?+S=+Bk{)n!LSkU(I{mTnfQe}hED{KW`=FXqxLX9J}x_2 zT(~s9-9ww1_=mkr!loeIUX0C2fYBcn*Yo_$pKHyf&T7}rmqa=A{c_{P#OW|F!cC+8 z@B_sS??_5j1jW3*p?`=_zC2;(({0r@<2Pf_OINT>x0r8-60Sc!pYiWSO`%O2J3ARy zdVl})JahrN-pRr$hbtd&Oqq@hWDsMU9_>XK=Np%}H+*#d5Gx0II`~&&RP=iAF-Alc zHP{$HOan*r$cV_ee6vBGU$g?a@;5cb$H{;B^kUIR8*+y?qSkIDhd$wn;q0@g5dFMz zq7vJsX{|I?IPM!*aGDR{X1^F*=5NE=-r+|jPI76OyZlDaAKH~|zEphj?8Lr)o5
`P}>VezPCuoZ|&BA|P5b2r`IL(^7$gR@x=jN#{# zNJ`Wg9e8ILf|OW55mc}RVB02Fu|$Ie$|XW=RBU{TM|cJ?t^^T#=;#ut(Ur|dKEO{} zBC*NoXJjCEgOauif#-F^X1)v%;A%TUHy8lO$J1&3?N)sXMt3pxj@RS9LVLa=CKiK4xXRmfG=HvV3JGnP#eIRKA&hll_j; z*%@Z+xum7d%8dm2)8>xxXv-e6;rrAfd>o_Af;Vh-YlchzK|E22qLR%xbp3lPKg{(% z_j7(t+zT|w?gX;{Nu%G~nXHNB6m=}86$C;qQNLl@4_@aG*{UPkWwse+B^Y z{T{jlDgEPP;qw7f%%%R$_N6VQA;cX1bM5tIfkNJYh{nPq_15joKRS#w-meURRVq6~PIxlkA z=7N*HwVMmz!dOfrevb!$o7$|;AdL5Bu!!~gI_Q2V#W3bR2_*Od_^R)WL3*XA>EXf9 za>8u?z9V9g{icG#K0>(KTKnx;rqlK$%RIioO+|PAVNX#BwR}MM@fczm_Z)6vVf?-I z_>ARH3V%97Q3U`=qu8ZCu9^J!QPlS|W3upL2-SGd!*l7iN#@zphA)9WlyxadPi`1 zHd&{E0U3-nb>JsOr6@2QH^FhhN6UVK=MV7kiOh4-lL-JT6CJg_XE@9`QI?yh`RQSJ zw2$0=ojpldhMQ3bL{C3>Fh-@TDf=FYn|i2v&#p#nMN7=?a{#BD0Q=qt$BDd=vFX34 z@4uowVgN1JDV}-&`-co&&te9zLIFQ+{_qK!~Pi{2C1|{EKFDJxCju1 zfv!06K$%xWu9YqZs}1tg5Ses0*&$Xwf0U;%Iuc^2m>G=}fE@Lq%rtt_Ul5}q?hJMs zPwUW09Rf^LRoK7$AB2B|&;>Q+Xa)@pNR=1ShX)IYAfTf0s3uPIIEFIG_R%$Oa1A=3 zM!&<4dQ8jF?GLXf@9~|`Z3hznf-g4Od0LP~N?A;K!3b2lxNQObcL;R6QY~A?OZ)jf zf|GNh1cCM<`QgWt>x)Y&6SS=pQ~mRhZh(T=%e#3w(?WnM3yP(C zGA^Q~iv80_3DPMj>asKiE5hU<*bN(m=I4x%KcK|y>v_W3_kd@PO# z+&#QEhgX_dB~?_b(kycy_Y1x2OG_KW(bn>M)l_&gHO zXH8X^QHaBAJHMgeKE4(MbBo{mjy`Y2$gn758bvLivXHXHEFMrLPPyc~+*)!T;REJ+ z=He$*J^nYAjWf$*oXqF-ykesI?%xNO0&yRIQ|{Ao?vB^|exz4tfcD!w;PnXk2!Fu_ z4yEB17n95<$J^tqUGN+q+sK=60BC2Q1iL5utM#YR%^z1f?$lg{&_gVW3fi{or|Cgd zay%}VC*x>q^yQnLr}bc{gaX6Al^pDamq*EkRAG;~gBXnPMP)^|Tlpj4^0Lgxy?VGR z=>3~a(_?r&gc(j|<4Ig^h2Ik4*&;}Qm?9=FPShtgk3R~XYUu0shbv&;R#jr0xF*11 zFI!04det?GwU7e5gftgn^?4So0NIn6on%2=Y#gw21j6!))Pa74bQ_PN`ZPBmVvR|X zkQtl@LNbVlqkiM!Cl}Dx>5kI`K0@`{C({{!+5Lvc_-Tk9h`fI#T9dP3UHSu}wI9o= zIM+8io<*wlFZ@764Wt6_#TvrDP|44Xep^1QWHmQG+~KSB>BPM5Bj&CbZAD~cAYNsK!vz1uofRQ#f>{NYYp8uae%FM}o|-cUlpKuWbnTkeYbg0JIrrSDrke^qZh zoaY92JHbO5VvtvHcr8D*{0@bytYS+R9WxRkGcXEkJ5&LID4%xq)c+ERzUr-i5&+oh zSr{E+MJrJLe3PnkA*Rz0B!)`>Yz5yR2_%M9RAf(@TyJU4@kfSa7Q>0XI1e+~(es(I zv=HIOb^s-Awkm8Ga^kd?pqv{mAo;pp`imPTq6LGb|Mjosl4K-?EQBKthl%L7uBjo< z zJQ*Aj3i0v0SEc~I#sl|7{OBTm1Gm~jt$UdyV+N3G6kMs#tW~+46Ww=#jOWKB61HY1 zR_(aCJ&Yfeqa40OGc`UYa=%Wg^@$s^qT)UeGJ|M}fwXD74A4}tjRJc^+r;Td`msBt z%_LTb&qudmp$({>&+IK(UW2n=!)zDsx^Jl)!SW}Oc<`F6CtF8!4V40vv?=*rn&K+c zjs`uTRqKYF_O`?4%v})a-PPLhUS|Qg6P>ANG_$xf#gFX=ENH#^dm6RU^dG%J+F5Vd zHXwZ^)T;1IS{=;273J)?3gqvp8z%1bHMx!g>S`UxIq!96#P7nhQ}f-mJsy`nBKGT9 zY%rVG^Uk>fc@b?8^xWlFlN-Ixrjsa@B#{TFv1K7e=H#Z-Raxs>Vnyb)a2G{pvjtLV z#@TKh8(y0W_^-<569BNH5YzZtgFxp_YI-}*W=zN2R&9g8&`Ma9kHcNN1 zxgUF&_--|ns%m_~G+FbqOWg$fMAmMgxw6LAzOvooExT4z3 zc71bCdU%f**CtJS;Dl{lUaR8Z@VB`C=of&QlrsLT5~k4lmZ!0C6Gs*ll09U8UOg9* z^lX2k(>A)?{*loV8Mzbsv4p~Ax6Q-%gUhDKuge{QMEsd@qS+U!A#F6iycP8K4C>7tb91q2#F9rXFT?kX zDJ6`wq?A056E7_qii)CP5|zQ}IuAv0*X<**JXU{M@p>eiY&bqW${IkC*#fby%Hh(* zftyte`JfMFQQ3~RbNBqTrH}yogrz0|3a`jQY`M;#o~1FW(a4(6)Z${Q}4ecE-rJb<=UBZQ+;`udur1&oTuk!xgx(s|KSlx0P)?J4H`{+v?&`p zk}yu+YF0I%myz&E%?%tD4};Iyh)YVYV9r!L?p!KaZvJ$`hsSI$$ZQ9*fa&EWJ zPb)+fNN@v0yAq?=1QC*0C5}RtfT^PST0gcy_XRceP{P>}8h;=b%whI*S0sNtdN-yd zt=$Ytx;7{%D>yojfuOy5n~E3XaD1sdPzjs%&R<8`R#OekvefuVErj}I6%u9JBbI7u zfho|E&dz>*{aER+RD`=w_r%1w|IN~ohk+qBJ=w+jW!OTe4QTHrhXvu>2%L~4ytYz} zj}7faI1rp3o5~LUXoAw#VhI_0@f@%ap=Pz@=m!)Gf=+(bb| zJDQKlN<#u8*=wiXS6v;095g;c!}J z@yIkAJKydRQT%9=hxQXUfK2B$w&jD8O9!9HaA8mmLqk8x(`l(GJRfb3WSxW!Ca{?O zeFGXwiotmqc^0JbSoeQkxH%{zHhme(DP)ryf}y*Z;Nzxg-37hnm!Xd84!~pk9J9^( ziBUA=U`A8iUBGJQ+Cm0f_Th5FX*h)^$&*)(M_J1fw54(p z@}fAU@_Nx6{iSE3Q|9y6^C~DRA@SdtmP>CwJv?7=e35ixkebtW@$fG9iWvVCDfse7 z3Js~zes3K+-MpZzi2NqiAK*Mbtm*HR0f(zXBb$?EpC|=NjZ^@-e2%Po*z0@{e9>(* z_SC+vY5EAeb!rNXasPan`x#FA9kiq6%V#>a)HL04P0;;$6$&Kr*CO#YyMBz$>Km*O z_xFZIi+LYp8loN5RiHS;V zOa>bELlrQgoxM*%{kgM6{j6gK((6FE{1E^gyMWwhL!?7f z{K-X*LQG=n@b)-5d|6wnIBZ$K{h|=ixJQ$VC$#A18kVhka!k%0`Cj245v1(a(!MIO z7w*P*MCZa)Gnb70bvNqiW07O~H{#f+h}AGepX>f5bAmz5oYKJ^Y9 z*#VME4^?^4^2xhx=3|%Wy~yyQOHFp$49Ku}Y$PsI6wl8FGmE$zKyBqw{z+TrnfDsm zVw_-wG-Qe02GC-?qj(+rP4o$q7{R3(7HNo)=(Vw7*PWb>$KyDH{BR1IXmQwLnw#++ zahqj%34OlFeD^?_t*xU%2RLrBUE}20YOww*51u#1$zWkN{<5dbboH2`kwzuJ-$@19 zRIf$ic^;LbNL^&pY$WQgty7g)9K}AWML2HkM}1JDs1dc2!3Hhdjx7MP>9QgW%1WwY zZWO0G2K1%o zyJIG%hG;khUoJdo(FbgMIeeS9KvV-XNfjHX53_(CaVEPx8F1#J)e zuCSeBgfX9Lwhrh88<8&KIb_3?Vv??7#g$R@rl(uH%;nfd{ZE~?Ms#}o#QeOp0G+B} zU0OB!ne?c}YfLGW@6#Y4O1Mr?hSgBMxpMs~ZV(Jv2bPa2ikFlEkS`h2!Ioxo>Cty3 zEn+9*Nu|FA?!%r0r;`_=_j3&G`HpFNJz)#ul9#8ZJnI<3m}+!;=D7FOIo#*VOU zMpyBu$Uss_Ee7qg^?Z$IqP5RaaJ_p8aBMq_?#8+g^28X?`NQnQ=2GfhK#<4h5XV}D zqpT7`)g>`uc8oEiFA6A$$LU}GLlxx!;yJ5YN92tj`7Hhc0OzsL27lxL_YVS$}( zqyVY9#>>2$W;bK<5m2Uw38cnNVd`GTfT>);9>{r{52|)ovE0DeUecV?umS31e_}6w zfR>V8Xt;;=D{s463ubDg*!MlzUj!|8lr#hjyzKJ|zN``{SE7|T@2go@DiF`gvnrbm5PsSLdhm6Y&;Vc7S{II2rn?P zrJP;Evwi{1N??=jb-=I6hEPD+fal){2baqF)y~ttXSC0GiSC345jSseKnH`Ac9u6x z1XuMB%tw#~;Ao4vLbB#?xj{LsVB4#s4eBXvLVux6>kg=_b%@y1ln&u7-$eZlq+|Sx zht__42ubAoqpG3teO`Sf^;C$9{FCYWysDtu_2m8A7d-<#FqJa1lEUB5j9y6?vU56z zW#keUqDsE#uaCV4l#rWC0g_L_As!Rc-gsa)+FrjAoI9J1+Ic4~?})bsHrHq5CJ-f~ zTFf8T2HIi_Sv9vQ+yC-H35$6EY=^i^{!S2k+#PI;G)o6jNymGYzY$4Y>MPtxNFbyR$&pwm{g?YIx?da#)upIKgz-T#qM2`!b*A{prpB{I`|&ce+M)9gt^ zlHCjXs;ZjK>Jb(-F#)JY3QJ2fi5*|B6-c=i78lFkxS3aTMTd{Se;-PLWbPB(l-xAa z{#;vEQBhMzEKS8nLM&?_@@2*4WuoR_nV{VqF(xoDFgW?v)eGRc_{U%7u&2H5w?5OE zX;4s+H#@V`<~1e(v=gu!0SWel1N?DgN`n4TE2xjgLu!Ba76^;eG&pU}?NQ{3+3XM? zPDDJm`pdtKh`nmBF3P=5uMiZUAq@8G)#;9hE;~>1+k+a1dmK@I%GBd;q>9OSZ<^Ad zzdtSVAjp_OJBqluJb+SJOxjW4&F~*0Ti*_(eXrSDNY!z_m;f|9Phr18ZZu9wcps)eDnEUlbsAqB6w*>>-d9fWMy{?w0u z1$Ei)LUCF3RySad(*&TQH%l1#D&a44$ATTWdbU=Z>fnf&D#H;OcNWT*<8 zOukis#`(WWKu>TX7!t#e&^+dff0FLET|L>d|1IF81imNZuZ7l_H4_>(28#Y&=jqGx z@Cw<_pYo;JGmP`P6(*+8h!T`J-gzn^*j?vQYRKutiw(bUT>W+x@P^MT%lk6lR#XHJ zewnIyC!YFJ^Iuhv2B2K;O~b*F6YeSXbX$R`+MTBfP#M=jnr%!^Osy@xp$PQ#*i6vhB6-RWaVjC zyaf9sivL|E2x%|J^~-{ao*Dhp-;;7JA0#?2c!zZ-NYz%sfO8JR(RD9n>~gw&QA(?v3wZMRv`K zi;JRA4uoTC-n|-ubSj$^7Dw>r=!V?W{+;?ZVTe#3LDCd;`1PIy-Sm%g4f|AIs;j3= z_D^9LV516pt@qvJtUbrawbv~wLL8saixi(GH!a;@I|#`v@BGwl2DT_JG&7#$1Xt2Q zkSUxJ9Cd%#OtOFPfU0T)jdo;g3kGCo_K%?wB><{kLcpfv9YE1xO(kSBlqO0k=M`mr z0W3U_x&Oi^B~~-}0^?bPx!`+6qi)APokJ5o|kGYc9gzIx>BK$=#Yd-oDlMmBs~1Gx%y4-7+mX{Vk{NQ zl4qJDne&8jvqgsZ-@XiQBL3qkKsr4N2&@tva@nTr-C$(2oFnNUT9QK=U5ne^`yeUm zO~-n8N5UA?tdtE21naU$p zYb-Q65y0U8qSpB;q9kL%U*)PGhd3*XOj=M_1h{C>xAyCQOZ)YF{>L8`FDZdTU0Y1d z*Lc2QSA1ub4eq_Ko0;d^F{r{|@SWyCqy zq#mpcCWm8a6aG9U+d7D=%{nKj*C(s*f=z>*F5W1pVs9a!ZOef5CU4Yi!*YQOfQjBE z`$;1iY1&F++hdBxe6YG{8UQ~%-t*@q#G9SNCp|GoQg#rVsvo<{%2569OB-e(b!SR;P`>T>o`d*P)+~aeF8eo6(nFe<*c1V_o8G_A*q#(}^ehk?!q(YKa zve#uj3K72k1b)eq|0xl_+XOT>|IgQ@CfMWX?9wc~Cr!!} zB0&0O#Q$rfu?rPt-J$4%{wjz3*O*I)ScD6h#YD*e`g;JCj<0X}>-#_b#D7NFBT{Mh z4Hf)YB~1bT_27S6y}VvT`>6BQn#0?2%3oYAEsA=HcIe>MXfP%^=|VKr83yV-2`PEeihY zLqhZgmI}Cyr+-~bR!RL|-*ow3oyNoexepc4}Lv9d&sPQ{yaF#>vhOhg#}T-W9DRaJTng;#M|8Kt%#j85m}&ie12 zs&8k6a71X^^YbF1vfq@ybq%~xBtQ!F!^36Ebm0n+&Z1O~3Jbp^Jzw{Bu(#2CgGm3M zkGyq31fEV|jl55-;o*;gd4>i!DCi%E_m`UZx}(iw4M!7hb(KgWYCll)(k0ir^5>1q zA{#y<758x z=~HuaGoM(k<Y1vOsU_^ z{GP!=j+ob%%aq?;3+XIY>@ZuffZ#4{8F>-Hh0a`Tcs^ksg7c;uk%fJk&*i!nY&ZQO zMD1|Bp|5)b%(POfWP)#9zs_+VilrfvT)GCfJPQCav|!V|X8H4LUk=@AIqajKcARy$ zKh_5wJPk_hFL~2;b`YJOTzY;xJR9VrIB2i!Jp z0TV06ugbPBzdE43q8LrV5BAbt6kfVvy=d}9giqQMsSXy4Xq$w;EfWuR&68LM)a6g= zVsi3Pj*`!N!|onDJq`vdvg^v~s%wH&_c>LA;I#!@ZjY*Z-2h)t2d5TqN1Xs z2N{7@ZBHtX1^Oywnlzqy`T4h*X(Y+W$jHY_c3V-5;h(zXp?ci56HRs*$(rgVR1d5c zYUONm1sN}3A`Touftjswi^q4Xks`?xPSTY`-A{GGN0!rM=TyS?!=1d-77uM(QJa!0 zPbW4X*!V6b0n>F-33uhgtE+1xe7`ajv>je`Vsjw_VxXTxjr*rz5BmpYnCYbe$v+IL zf5!Iu;EOG)=F3L~xW`kS{6+;MlV$hG&+|3PdE7ZQ9_=B{0bcPM(%Q_&A2c9XClfbw zsz(j3O!Eyg{<39Z8sn~$y|A)K|1M4!AqG)&Jnz!~$&tH!Cd zS+7SMMXOdSFKBtYJ1nk`L+Ci>1!18WXZt~_A{XtUlUfis&H-tlpThCvwD`8M2cAo7 z&gk)1?|r zEtlhs4hQ@D`&}r)FuA$857$Q;4Yo$2qCU5zKeb6E7R$7n^5l}I?_o6=;XQV%II){+ zZJ35!FV|tbfEH;FC;8YE3h(u|-;YEdU*mPAkLFo%v<>9){4(lzXv7D&IuG6Vkp1X;Na!u4N(Cgd6m8D>liBMxJ00Ys#nObA1L zJLdP~L4TgrzsYEr1ytnrFCh=~?2Uj6ihdBG=kcj0yXwUr1(cR$=X$??aHsT-#T-wO zd|8G#Pfv>(e*j~@+p%=Of7-tKewDo{Wk4H@_#MyeXp#JF2#NRK&T7PK z?7TV>_yOiH@g7=Q+W4U3YT8<}K?i&2gI)V2aR|@NN#TIRc2Eg@$#tun8JbrfWhqaim))YTG?CXR33sSy za4w6a7)5ra=D5#3K7R1QzAFaC#}>6Yd-hG?D#jHIE#XK`(6l`U2xBpsHi}R6m;~`m zrv}q?3+Qtn=yV>9fS}If9?m*7O=*=gf_@&c&W!^bJTpg!Ao9*n9I!}x8gqs{zqcoL zc$hYoYD^eZJBGKpYxn@TMEf@YCZNH@@0_b&&-n}>eByg!xzu=d+;qaIS%2E$i?Hr5 zl$Mi|6Npabc@Cl4411k0b1iN+Sz^J!fua8WJGCe5Y8kNJ{pS*MjTR#p3^1BkqlcR0 z>uTX&>W}KG>MDbvTKpw%RAN-8BOQ`7e6(mU(iT({RjN$43tEq);A*#!IgD56&Cr;F zc`iBqVrv4V#Y&KvVgIbPx;Artl9_FgH%Fv%Vm2&Cnv6dlcbZF~K;@^P^{;z24QwF| z=8G&lJs*qWZrkEq@%Wn!c0d+4uhfD(Fs~Q!Kj>5#`VO(lrpj?pnvY~NNj{>ga*qeG z%^xo-9ZR?mx8hCeO{Kx_v`K%c{yscOn-Hw?n#H0(gQB&hE>!~Lyuk2 zW0*i|hKTP5J6O7=&q~)drD`UZYtkxv8 ze>~Mt-`}?r)X2$s&(HrhKWyY*r$n)t=QdjtL`b_eSqmzNHJgE1PKHVx4tk6_F{L7# zAkH75`d@6lV|ZR$*ex71X^ci~>@>F3*hypCw%xd~t;V*k=80{$F&jHME8Tm)@AakIvVCQIY{b75Fz7tltI;_0*^^VT|b8phvE;ts^|cv|2L z4_fi?h}3<=LQOW>f_qRsh;w>V1|}#R+vxhLbXTMKmB;$$!TdA7D>o>IulRh zVsong8Vu=a38yHRN+h8ut{Up$q?{UEZ2^N*k|V17UqY58=JZ4MBsdl zhGuS{gC`>4R+(*=#+SnTvc0wv{p_t+oiE@BBGR3V&SxI?_)+a|1seT`@F>0J zJMZOUaMbrM!9o7PptYIMJFqerm7QeOxotcRwpcZ` zrQZ7oQAg2xnxwWRkAlMH_`rSFyib89S5NtpbBymS*A*@ny7u_(U(WaTI9gof?*V`z zgc#Y!WDB1kOc;Zu&dcOiU-JyF62mTN;n$98NPFTUQ?0sB{mSZkFs>f{l6HF+^$A`A zK7mg`x}kwRBC~$4W+z`ZicY=7`jF@1)M!`8hf@!sqz{mzb=r%=UToTg#Y1FMkH?kF z|C!|J7BBSM_?0mvUnQ@8(MrM77w&fI_f>^Aqdj?v*MUq-{7?TNIgS1OX;uk|n{nTa z*`l_4y@NTBR7ISIfBURq-`YNrL_fwhS9*%tz6-V|n48g?i%)JWdpklDa{4^oNzr%I z+imq44n~C$9Li~;6Y3sIHFKM0iD?qj4P@5i+dwf3d{_z{`L%47*RH_@8 z_k+iKWLAvC{qNjOhh-25r`HWKEH#qlR5tOhu*?YM8joHr2Q0me)8Eu2t)j-VQsTBC``Z(ArBH@DQuH~)0+A*jOgESujR&=u6= z4WJh?wNvX&MSjyoj`fL0uWjx;b=tLd=*lV7maQkw9Ljil8FqR4wI%O|OaAIA}S zFHV{^px?jmx*X?@i+#Vmyd3Zzx$yRJNDV4f6$;EP!D_i$n8~vzEL3R^_H0uBT_)=4 zx_~MYHmA~qphyeC_42?+kG=GR+g(}?XW-_uLK=yu91@aB>=stpSElUlPWTHwuxtc%ekd!R$jwLQG?vip3Zqy>BY8h%!v%kvfMAq`1r7W~!>% zX@3LbE>nAPDut!XWe^O(nE^(>uN#9ERuYD=n zm%ZEOr*<&v6~;y+CeOhcuRjwK_S&Qsk4Bq9*)u*Fl zGE}+FYTq6>Un$FJXgbVoN;lB!S+99*_-jj2?ZZC*lSxkhPfr!$%vM#>q{b5jm6p0~-F2n^Cce?>5Y*Z0 z`=babUse{HV7A^S&W0+*MrOSvHN$hqqtR`f;EPLnZ}oRwe=EFxF*JLoalUMvntOe; zxY(258+znQ^|@?d4pEd^7D?lNpuV0ym4Y?WjmLhZWK5d<=w7*+)IPl88(6bcDFvuS z;So;|+nzK5r{^>Hv^Hk1PWQjkwLSAqvoE8#ICwgExyk-io!T-YsF|Bv9eY1x782l3 zRC3tQecz=mLCPJ9o_Gv@(J9WjKNEfwH04Um_Q*$tusKBxOED?}FrS+*gn`{(lj(Jn zItzV(b5yU-x7k5KL2iJaX@c4F>&@f=BFK84S+n({@7ILt7Fx^O316{d?n+W>F^ct5 z`KV(Z&mFazG&2=QhxGfS4s@YR33^L|jm)7h4vO1hO51g871#zS~@a+NxUNOI-1d@#LMRn*)$v966siFPEtQE|bRD zzC4-P6CF1O(K{2#s?X`?3zdEBRrYG->;Xbi^vQ^%lPqGdI$avHb7#I>&ni-uM+ro- zaq#QmM;6HW1(Fo*(c>e#Fz<;uq;zN}f2t@e?kbmulk6*@*nv$rko7dec%xs$F~VrF+5cbS9J zh2p2<`9>8$iwxiSoty)1Y2^<|i=6MiRrUSIVT>}gw7rX89=D)AVeG`Vq{gue4u73l z+|*}NgLNDdH#0W_?7U`rPKuW9;a2o8C_`Gtd7cS58;}tA-hS)&iJh#iu(O7-L(nbu zB{#h!4m*dL+D@J3K|{kT5=^Qs<8T;~T>(nr`I=J1RlJSqmmMJ5d`C@I5;qaAw7V3c zIaWanNDq8ZIH^k5mR#@H%Nl7WGqbK?N9R)wC&T43q)O~8(KOLmCc`TXCG`9w`mfGB^tRdC4jLi17VVUVH;}a~{S{y8eS2B9y*O(a*7IZMM{H>AqGxv9QR!g8W{sR*l_gXwP!vHE#jWMe^&oYhd|L)r#~tUszr zW>iq)$mfXy{JT^i9f}DxSx%QQF>b#Hge(&#CW}1Z0aX={mD;a?TZ9NiJYVS-5}c1g z6=oI;F~diKP+HD?*2VwQD4;k?=hrH#R?yxj@)O)^H3#ROFN_&|XN|x0(3| z=H)U{E{6N`03dOVe6(Wr_q{gnD9sQ~#CUv#f5i9N+eakhJyE9usY^`<7LM8AC2 zOFch;>{JlAQ0bV>qx!)?hO*PK?8hviZr5iY?_FVqK7?B^HeGCMbJ*+%lutaPwD>q% zjX&AlX0|z*Getq8gOiF;y;RdI3)5NLtIq!6+~)C@A@H`)X<8Sm%+@DF!J56)!4{(-I+)!ra>Jgyp8->TwZN;uy-;Fp4v` zgRIDiobjTl5TFuF1~z|`RVGO`+0*vtSn``^hXBLE~7tM|iI zCb2ldJFq`sVR6{*4E^&7{#}>xaM%*}0A-|n^rY!mXWyn%be)F?F#erk992S<42(2SYvxb((t0t){uL+Ja)0B>Foy!Z|(s436fKY1?Gk!Q0 zG$I@e!^Ebtm@>KxZeev3gLd}7`tb*vOq!taZ-l%85Zc!9Qq`%@svL@f*+{N_FJF~3 zAKjG}XWri`U%1P;MO-yjC)s?Uzk}}B=GSoWTt3o?$Ypkpj09*Sw-luLxk=LSEFfE1 z$#9wZRT2t?kI|Kum06mh)4TpCB13gn2tT_;qeYC2{wcT4Yq~{6&=re0|Fl~;G7vP~ z@#Fgu7qs0goTUXI7Ead0ecf(ieKOA^}h&NL3k z!O(P@?CQ}Lml0Ij4H?_mROiGx>d;q0V)yT(zwtx>)|>TT(i{CE=WZe^D=xbS zU`XSYdS^=%xgXu7*N@xII;B){EI(XjuD3c%wL_Cw1FW}#e_WI34H6|MCI6D{mE5*> ztg9GROl3~a^W$yT)wEO`7g3ccriAxReYpQD5oPq16sl2C3~^9MNVuv+G`jLdr_1po z(bA8mCU)-_V&E$FAfl6}x(U9c#TPU*v;oWRKDt|3D04hbJ~c`D>4@dmsFE7GXSBR_ zulhR^^WT>*(DYE);tGDN?xvwvPB20dOR*D6#o;gQY~6Y{cA3A~kBIAnE{SyM&~Luc zI$)V8E{|OPShNP~ zODo~d{wlcY=1W(H_Iv@Jm~+p@ZJ(IyZR6h1e7`c_1keF^h zktdrQb73c8X0xOy*zDt9=X2L1up2)2t36d4TuF_W7f{BU+1%g!+%V7G*XC~|j2yzW z3Yn`*n|~%H`DXFf9L!c-ZDdg=qkAJ$(1LATZ zxh!+gP6ekI!+9HhvhV9ytL}6Z*7}LqxIVF_)NzNs`|e(L|M832a2B2-KgEk4_RBar z77Iv&FgTFsnTU!^iT!%t#}49G4p*zU^(okqEuZT}38b!1ocs7X=ngqHe$V5P*%DQl z$0uHk5w|325}@4;FwZ{yxlLJ2XeKji@Xs!Ytmy<-!66L%%CCn3fsJcW<2IHC5KK)Uwrg2xGI>r=^z*$qfMktBA!ug@H?1qSId@F z0yeYc;>!U}Ar9PsN5YlO&$EWZBN59iiz%&rQg;TYELt} z;@Ek1xV?8?v%fJ1$-G8+GQeE=YvQd#^CpP2|B^)VYq!oCqv%=~fBlg_W5lmLd-aez z4D%jxpsl|MZ8j78dO0_Ct#EY(qgGef&O(vke0F3!Tc_N1rjmek*^OC~(=cOOv_SB6 za)|4X5 ztDaQPpqK&@ZLJ7I1VO8lXpC(q?ii*68yQ4gknF4>{U4MMxj!*liEquR1G`-pg^R1I zX6z|GIAgJAmSO_Hp@CB+AunBxYR&Qb!&-pv0*OUldx?B^Nb#xG1yWBnGgGA*_Qfu` zxAKy>5`M8R*cpmm?Zub=qXI@1{#BIZrqbnabm31;RKvDf2?MN2a3{YEZ?-n$+6>s3 zVDch{*>}{IH$d@FuAeAqEX@|h!y zuYgI{TeM%ba;{Ru>-0krWcjh&O|5smm_onDdwG65K;4%|a-1Q9P~8A72!n{OLX;yA zlbYJ1*Yho&LQdgw&0h}4HcN`My}<4noAvUnwK=y8aV#kX#qD*)jeev3Z_!Xhi^BIM zB_)7IjDFj#R8UZuuhN|uj~kS|Iom)Mu(q9bv1E z=SjoGg@Z+>DN0ia65cefa}3Txg(kb&6g)+<-IgFI72Cz_aJEE;1iWVEX2N&Njb@|$ z$V@J1?S(mxwoipRan>^dUU$86PZqJg{o;h47^?%mZo8<6er?B{+!;HvWoGxe`dN$C z)qCDo_Es(Q>@^!=B+?b5B9lMsN}@*R5oYvHQ{2a;l!wrMEdikZ=PgE-jEv;b7n>?2 z2<^#ubxgxnTC!2ByzRPd!)MfU^w)XZ+C-i|tNl)XGw9-qP2}EtV4I2oDg9vnYFtTq zcJZSO+z?8AP;QIFU?SqhRHw^1&C~3CM`!Q@w8@!hsP&J`wbmrnI3W~O6z>6)sBPnh zQl+Y>@NJi4o_@vfU(R9DH;y{Ip6fMkZBaaaW8~ar6(#Y9b!zo8z&7DwuG;w!x zJtW9>)q&#OvuGS-DNz)RrOz zD#~OQ?9xHCLQH4*ud3Fd-!9q$Yl&zW(2FO+VyZS9+`6I;GKP&K#Ud+`#YKKVd!+tWc z5Y>*&i8_2wLeQL^y7K9h>UEh0M6SGa_iwR9?y88CdiS5bCv{nBpD^)`PEBn-A76*# z5Cz8Ec)Vu%#h7q%a#}7_7HsfRgxEEg0sy5(CY{aQ(=(o+Ck=<)hO~$~R6w?`bK4?eB$47c^EPD1GgL=On zG&&kcHrgSR#gjTNHOfk_+bK;)TA^MSoSI{_2CW?c;lI)1NYO%``s(fF1&RheZCKu+ z3X;s?;w(rxCq7f>3iXi;FJ1RvR(0ZYa;~rN{~W-3QHhL}g~L-NOFZrJ&ZODpj!Vx} zB#Uxz(#GPY?Oh*Q2XXX|gR88t@XDr-Zy*D@0Lz6M`&dq$^@IKi5_UPGkGBEVR{WXC z4D&syd|%xjixCcElo~>|d*Dz$w8mG;Ms4q{+FGUT?_Wp?qrY1p={;&g>C{aeBZIa?QTa6%Tjo;W=Y>xZM;-?wIHkS`_MYJ7Wv;#OI@t<7Qsapqj`;CDV(#ti=@~HnoPYV<98~SK zIU$lhk!>YUwVsZ7YxK1^x}c#5xFaX;CI zVEU`LP35P4HNS>2D>(vP=Ll!b!JE?(-86K#W`+gX6rS;(PnCtAf$ooGP;VcdwR?g0 zidGasxiW`0QA}j)$pp^K^g{et9+`trSeM6kt zF8V@)*>$__xgAY*_nC|gimyNpksJU^gwXqfd)jR-HBTMah&XKB2VWjeSDKLDT!>K4 z>vDI@iB@od*i%7P7KyhNtRH`ypnDXI0Z|I1J;kb=)-$E=9lGA%FKlvEsnK9DQz+vE z1(uJ+$%yiLH^>iqfP~?}MgNA4iYnkEyz3j9%IUZp^PboFFk$y69850iq0u%(R+bKc zLmX)4^=sM>shT1Ax3Cg;%$Gfxe{I@UHf>xFe_x1t`nobJT#=u58Is5UlHlkW9I}wK zICx7z^ZeNcy!=LJ9?=>u)X}o^l${Oc{s9|Wq44<}gv`IQ>cGsr^0dhF@MU!2{u7aV zHAG;3Q4-yU)ML3ppH@{}{tXH+h}Wg3ehNsT8=bBU^?8|B4PVX|=JJ+Fc9i*5UVi)b zfXfZ0C^P(H|Eu#eQ^~_4lNQgjjHZuBTeilJRdt^-*?6=SQWR;C8f$_SAN53OvS*%; z)@^a`?av~q=?YC=Q+Zuqe-#i6(5Ia4-X9cPwpBh=9vg1m{khwoUb61Wc3@)jCL=!N zuOrxC;T<37cRGt4S@Gp3u~k-}Ml6LZF`C0FIgx`#!3KAI{k`@pmv zw%9!Z(5IJeZ7ki!h$L}{Z-{4b?)Q`auk9)9;yQokud=hnO<^&`&8% zO(!bRrEhLNiO!{Yr;Z3>P9C!KCv(Cl2c;r!=sSjS`*hQrq5L1Zwz3h%ayLEyOr zrD7s4npcJ+5Q7gI%X)ti7o;}L=wV1i1cJx*dVW5s$tU|NJ@3}M^fJ||I5Z7xP$TcB zO+H0MMRx0DVc9-mEiGKmwJo10P2(A822pL%@-tmu)Su-J=xvx%QWkaPP|@G{O93BYHfC-O0ZwQ ze{Z<&WoF$>@L<{6o_RmsIBUd5p@9vh#l%d`R3Z`ZWn^SX6JY&-ipx71uI`J(VZW(I z`!a~Y;c->m(7+0Gk!Nrunf~bdkJ7Le|2c3XNATtBra9&{nO0NOWroFkniTYk{f)gD zJ3V3A1T(SMjlS#rb@3_a}59+%J+(VVzV{*M} zh$re;XMFj_qMfO6o1YKREe&(Vk%*&^u^)+I6C_&I{lf;y)@h=F>uJT~i{)Z)qjQUd z#5mjR^(GVyCgPGX{aZ({ouk>`)xO8^NTM8Gnp4|g=xTiMam9(#%QOl4KupzCC@Ck0 z)hQL^L6~fp~0X$Pp!Jb$dzMrg?N;(TIHX5t6F$BMG!XUrT_v z7*;c_6b4G)+!}OqnT_kB_1#cV%ug2_r)6rI*JrK&j29Emc@RKb?Y%|ri?qBgG%|Aml%H6otIuYHw9+KOQZ zb3=C$MliXeJSRknCjBGKz?i`;7Rs=i<}(#l*9u)Cx!hWbI8E(2NhHhM(}PgiyGkiA z8idBi_y(#=3(MI6X4g8Rp|#ajS+iB?{8*l#U9>P2<#AT=C@W`?ao@K>Q?wQFT0kQKCA zdfIb13wZRIg$2HuHG9wez&fZul;12bPpBB-It+h2p@J$^OK2eg*?%$y9z39^7BdNI zbkYwp8SGt22^7T7A2A1)oLa==p?)=o%iEV6e^L;M0`ddJ2rVe#?KnLiynf}PGV#BQ z;3Wz`Fv;m;*!rYdnbQSHz$Y#OdOb{E%7ZUMc?eK1=RvV56Wmu`2p}gV-7bE-0;oaX z+cnprpf!)Pj@z4)6*1Xc`ae@sQ`=JeyorzeS5)t~x!bO;uClVs`wh;^)$2gOfd>kq z+1Qb`#FUhj%uGZy?+UOSL^+Ia;-p-5n_rp={;-&kfp3GG48StW*27ZNU3C>v1?rrv zcck0gR=Z#BQYse4jHK3=3+BXA%JQPr2Y0u>zC7BUcAVNx>SKJnsfP0x39g0P+UlhW z?EI8Q6)4cNhYB8$?$M+SgN&*k1hy%b>;bOXO|N`WhHN1HYz)HWRVLzbiitWADGr!i znIQZD3GF{^M~!xPbmseONf+Ls>D5PrO?+pq<45?{C1+|wXas}uE&)w$A`>9R5k$YJ z(GiK>6eb}dkfhhJz1C6dsRd0UJ6Tu|m|cfZSh>&gHAy<@{EG@xOj+9{5m0i>t4 zh2@AzNJ=QL(+_5qbg!<)`8@mk`_0^%f%8Hf&$KJnHLQwGPAr@PNnh(!fOxy+E-z;? zo*^MN0+1)E(byES899YcPMCD0t^IRWH^)nmzFtnQu0@5=g&X&;7ds=f=z=grfs8Axam7vC#L2ybC$W_Kvu;#I(WRF3s+X492uTP#by~NH#ye<_l*vd3e&upD7nmn z$KA6uH!Qbh_(R|aL&Ty+mz>CAK85wGI8Yg;_%$UG*5k0ZSX1N1jQ>}}C+6U^!}05* zg`u!NfBxu%ubIXE9|1Q0Gi_ee*bk3YBnl4AF=7F9P~*U})Ij zTOY(Su;Byr6a{;2JQ4k*+3n{@?}s)@0uIYqvxP+XLHJ8(K96^T<$@|W<@h+4bM2;l zSsiZ1YEFTf@nQZ%Z>O%pcztnJqe8Mt^O_ ztTVLv{D7bFB*qM9W@4J2nP~#58K36|;KU_Bm%TJ-f0Px>jY&I{b$93F1gH3bjV(DK zg`BcREui#O@tEX8STSYf@$oST)})3z=QnBlo<0LKi~$a@-9n{yOfn$}IOuzT!ncXh zSABhbrQvHmfStP%@Em)68=7EVH?n%u%|CWaN$;bkGW&V0AIZm2<8!EO51U`T7 zy1Q|I{unc+P4;#FaP_{LD?hW)KVy?yCB5&czniiO^;3p{G`6(lZlRBeh$yCA3V}12 zD861soOeU02b>L9fx(|Y$1^w`PnH{ohK499Db3BzQ&Us7zmC%E?d^%lIEOqd6F%n{ zPjz*4@UqUKa`rMzYCTS?0)=Rs%Za3QohdC)j{P+F9KSU@X*x4GVe?)2I zb=gvd&vrL;IIhj9=}ekev-U&5o+?cvrTFep;K0fH3hMS`$9}iIzOMRc0D$({Bnx1q zZ{@UDA=K8^7Vs@Mzyuk+m#iK-m?>J~&!|n>oCUc}DpVQLTh1?lr-u9}^5H_@ZD9LY zPDH?FwHOl@Cm6CZK2AqY4$Y(hRLVvGk*X9r(X{SiX@@f;_|oOD1DC3{tX5}&*f=fn z&#Xi;88rw9e%TM1!8(rey~tMF<0ar3-LPwyZI z$#ue_hxFds&`?OGWC}LdID>`NymXh>ZWByB!PeBY34mnajqCdu%&!|Ap2=zdbO$DP zYJ91mW}SNTjM1LbUaEQ-jOeO($@9157|A>ecp1vqSE%>z6&1O-isZ5j3m^86m+EE{ zqQ+NS97{@05k!VOs~&L^ntn?d{)`}^7#<$3r*tRC$;lynI6x#;A6eL*nVC7jgmm&_ z^}9Q8p4c1D%madsprByNM8Z}06AH!htY9Xm<6H15Q7i(5NyL+z7l)RXm*)d9RPkjn z80Mcv&XtcSXH(;4+bwgS@Zs@12iy~en*t3|sGRK!46j8R`bB)Sn$Wv)!7tD3?iWT6 zBF6x;7>@>-o4d%)%v`skpY#~wBhlA4BH4FZWjOdW3a1PE#W8kNqhuV*U5&8#^;rkxdw_)W^Sy**+i5&^cPSpN!sssE{U9$W3RZ(Wnp2$Qc+I zm>PHnqRsRw$L~znb#s81HDRHmr!OjO^)uslzaVAJ!$ZtOAL#F&toYn$yRmL*V7*uk zZi)SGkgyU}!6AkI|HmLzWT_Yw!O-da7=qDOd3wv-T`}$_h%b<}R!dA4lGbbT#sx_O> zkXx9<@Z7FC&L*_7-1mo}%}Qe(92@{UB>7@&r`bTc^uT%#R2a%-D%VcJHEK^Uk7u?3 z0YSIvvy-S=?^R{A(rAsMVNsa3*5-P)(iFW)k&k5LSNSL{EuD|m2~1luoi=e1xBvcO z!+y4n7KG(ZLZJrcFXp-(Ak}*=8y!p+08PWayQ(M0#U8(!%oSS3#rt=~gB6S9V_z|! z7i+u!3zLGpoN>vSx|$VMmU+8ktWQi|Ab*{lbeN1`TZoF80znrDi~vz?P?Mqsfd&ku z8j0rYCh`UF0j9?lf7XLu-9=0n3>+Nzk(1+N4{u6*6}`^gF6$LGrjK^3vb3anGP^hr zK%@=A*xwWY)5Cl+FRASNR6w`l_B_C0A>cw^sbd_x$zDf=vdWTeq)U*(^e zI0wX&0|<{rPFz$MB-7+6B&7HHYSnr@z{ZeJB{UGeumIv?%nTh34Uz)F6ReuuqNEkh zXy7}>C|4Lzwz+6h)L6_>aT$*c4-*E)gmdkHxBlr^k%Z9z5Yj#6rzT)CEbo#?-5pHe zn_3V29#Ln9UmBgOafGFZA{CqQu=0T@Tz3^02@ync(xM>7L?z^!Uz6!k1I)}BnC zAGNxCycc$%)@tkOxV`QeSZ8biYyfPh7nrmH_@NOv*kd?|#8eEVCm=U(i)C7^G*+xc zx7q-Z1dB%P%WcgJ?V<&++G#Us?)}uNl~)h>P=ngQjzvAJEWBQctaba#%KXb!#e5j7Zjl7jLmBc-mKdenH2xVu1>6F|4A3wp;?=LqGO^44s{B16xeZ^Sbmh6%1rLmWe#b7D=bZQ z_z?&bvu=MWuy3=o5a5RLpsRaaI#g5PZZ&7?3wK<%(cl;X1*$|ExQ{$32bWr1b?7f`EXa%XlQILbK@xec3;t*iWc$N#J9OGCc#lSO{SzpZA-| z&rXA<^SC>F$L_Z)BI&*FjRV59Lr|8^&;po&IRFWc7OKwBBN^Z+;4H-|!+72A~M$|2K-r6>uu$=&G)CnT-zh z!}~-O_z=7l8_VX+o*M$g%`}bgV$@H(7(4an+X{z^(X8rXth}zin5Z|@!Qy%>yo*sj zZ7T`ZF-Tl0!s_Sp(?spB@3E7yu|&yxmipZ5>jNXR!)v3za$U>)@jhKc{(oLjvZyE~ znr~)$yYN%4mH}PiG7q&;@XJ5p5XdmtvF~_Z)I9f0zmf2L*RJ>7a{PyPKeN_nJ>=d6 z;${-ZGYpGxw=McVMFKF^TvPyrJZdhHzYFvM3Wd`<3U=8jZ9bEXu0+JQVr^2W=5{x6 zISI(BEWNf^|MNQ{l_MqVNqr?FJZJW|fQ%nEVtiX$O0`pAb&TWw6*%7@GI#r$r%Zg*G2^Ke?P=4 zZPd_{R>P<}=IJu{wh8?M*o2lwK&SzbXrSo#OjSB1cBzuoDX21(|7@HnFgV?BFuK}R z=M$s(Wkk@5DQ^uE%>(0Gz4rHb#-zBCmab=Kez8Pu&aN0LfC~S2Hj#kl;{2+SO=%X{ zeU~;U27Y?pd1|WJUsZcS0}Zx!uvg7CvdA;%!T5;$o8N(U5i!7{3H08oqK7R61EuXQ z5&lLNyYi|a*1yyFS#ge(Q$B$@cBJHf3ZknLNM3aobEQD~&{FP$Zv40PS>+;&0AK0M zCK|hpDyY9XE^qZ#z3I?+YDyGpCR0>W4Rkn=3Y1{I~Y}pK%C2 zZyOk}4N~hFO5<|; zUdfNJErO6p(n<@|=)-IdL^#_!T5aynl4fSbO}b{`86x1nFRut$ot>RFUBKB90Y+^9 z;6Nkw0=S--u=NlJqufKUfo*1CW=6iTwDf4F+#`XFefQG66@|E&K^=nujc8)huh~#( zZir|d6l6unvK@-h5;L|LUXmyS9$+gC>HSNEJie*sQ03m6FrMY z?U~_au|aJmP@d32yY|{)Vvrw1ZE;@*tHZa1wNuAf5 z&w0?#uZF@XVi3V)jgb(8==JE}@V{(jZVQA1-{0AGOl$?aVjOR_ohuLD>7;&*2H|7W z6VD}GoIR_qLCm@zdB25oJOr}mJrc@>PZQgde~B_3yU4ll#T znxj_I;moa0aJB0{kc4E{vl}VpV9&XP*?ZIuRE#%uH=+35??1^5ZD87hN7e&A%=%!wY~@it3I2}U)-N)a)k z5F9=VW4{Y^c16I$ke4f{6f|6^h={1+Qzr5&f)GN36pXw^EWVFL_$Q=fmX=ZhiXRrx zxjk?D|4&a(-QC^52f&9lyOARQ1v8C9ON?H?GyZX_nDO-vPaJIQERRDgqrHQ+Yi2^o)%1geYI7k z7o)#kkCPAVAJk(0jWvkhd87FctPJKCsNPj~vzslY)R2>O{Sz=JitIWTCWv0oQ zm~pIQ4-E4N`%#`IV$7n9G0;?*QD0ph3S48XMVXgW8_?E4lwGv2Tsll^Z7|2)nAhMh zzLqRy6PBPXB(9cvP8;FQAg?vGI(zYF#4!=heYd4=Y&y7`5jFOA-}RN#NSU#-6*jzZ z&V+p}mD2)GPSc z>Bblmq%z1|Id!D3k|Gj~pnfK%T}D-IA|6zs-Kxs?I*Q?lcUrcl#CmpZpD~)MDS!av zA&@2dC!o4gKDMY*Fg)wEPPHSzV zHh=C`T>hY-o+ibb7oBp@7liI&o!$>xNXm`Ws*4RSsY*;WUqTqp z-Gnu28D3{fN|YLFsLW7wjr=)|6coML0hc-rsji{o9BTU%2wN$m0u>>a5Q>Io)s{Zh zq&~kk#?gAHC92d~ZArtzTbke5pgd5jCA!K;Xm?nHvKiHr6(gW^qCGo7^$z9a_+|M{ z0y9|9!p8`E34;(wMU!Adn)#8=i4PACot>St91$>xaX-22o!yB-`sy5!`d5Sg&F|4^ zGXwX)-m#VCpIKFa5CcfFSn|rxUq5fVxVQjx+bnS)bbtaSJ#}ZvSJ0@nR;09bXw%w% z;DFblbD~q7-cVi+;rSnD#W!cgfa2mR1z0IB30%a=wC}w?Tj4tWyT{4E9I^fdG`wk| z0)P1Oub3)(i|DD!?!T3&-oQ z@1Hu|mC-ogT$710V*iH2gh|AHq9)!kx zNcj=aVSlZmK%wL~6S7(B|N0fXsKI~h1M2Zln989Z>MB(Njnd%KSgkSW{@0U373KJC zVf{*Bx}se%h`(_0%Ixp+W&f>8qcE1}o!x(nQY=PNNd)mS{I(o_AKX-++Sw6lQYvMW z@}&0%WoUf=&mNtNB#8Lc6WG6D6aR(JxneMHUDh@>myORCC1k3z@2{-+@8N43BUa&m zM~7n1`SxIZy9gCsN0~wi?wXJr53UGMnEZYE>)A36F{s$xrSG4~h)I*g75{`-*qgC| z0hihk&=gyO*k~#6?*!(PISU1vSOl*DEI8nbc@XavL<7odS&C{Zzm4oHalY3p_`6m0 z_UaQ>%I){HHnSrd#qOB@z8&uE-Nb;Ysd&LVBvd$pVf~L)6U~Z=UDl3}AzD*muuiD_ z>#%;1lzBbMI$lyGF`rU3wmuL4w~`OJ5=5_@^lh=%B>zna#M?OK4Ktg6kcRYaakhpW z9{!s7uRFOf9BKc88)jfZewUIQ7EA~>3B!%XhHd}mjV4bL`AJ! z7*XS`Wcq9N*w1g46>32Rhx6C6{?|Yz!7}OSK9`pnJN|1XEDu|6Zw6`R8;kUR9*#OC z;-QQB0gzFDyKj~Q#Fn1jzcf9NH4^#&lOm)7OzP_}U{a$rc+S<5aR08)q+d<@zm*R5 z&RhFx7G+YFWs=RfS#`G@xPXRxDBP{Z(96}=VM{N*WQ{=4X4_s9%H4LRmEqI?XSaVE zL|^i}bg-5}W9?(QJHi51?sEt*u>!eD!y{pI5zAJ9z4ILRhSFBPw%5@5CYS25Ki{5n zOS$tPT{FUK=^o8D4yj(R2Xsa6tz2;Cow!_mx73q*8Yyj|PW5e>$wsxSzA))WIltx| zqiv_9*^;wu?quX0rF}tX9grl%eUbW=*BtbRV*9-0KBT{I^=YhlXdWV#jx7QAqbswc zC&}-u+RD(ukmCydAXKBQ=+|WU?C;gC+lTt@vIJj{?)&;bdd8lMzl!`hQ+IUjr)ObD z|9Xj>n4Y?HghtN!F*Tx`8vgVN-(;7l@#XVv!~Dhx+~7o@(%$g(;|~&5)KbGBxzdCoGXS6;DszifA|OZJqH` zimB41dU^QP@};NYZL5qRZj8@sCqwxXWL2s&&Tr33jYF@>r-Z*aJ<(Z$aV4~0dM9S8 z;|ewDKi^mqo_&Dc_ovB3t3I^q|Iqc8QBnPGxVO?FEuBM4cXvpGfP%D2NjFH2ba%IO zx4@7iA>G~G-3@cLzyCVxym=m8@3m&Jc6{%+uFv%@4uonQ@Sf$}R8Y&Ue)dlU*jj8H z=aTX;pZJY{iQQfMA`bNI&WYVFjpFe8QWF}2s=50fq>4ZkvFupw^MgTWt^3ML&=QW5 z(h=H7pB63G4FBG$_vUmBp4*7Q8#f9|3XFo&I=fmYnSaX|poL8P_dmfxpM#TNRzrQSsCBsakyW@S@4pg<$jh#yVPMHSN1dUHJLIS)a&Kz%5wnQlx_4b(U27i zZYt+#Q6&3fdKq9e7Of_B${nGi@gUi~8C_HJDB!bhL_hkQfW+n5F9@Hndnm%$@&0C} zeir<4-c?8Z-s@#C-h9aMk^-k5WpcSyD=OS?DrYA+_Gd4lQo-z$j^9g}jfE{BI1}*JG()y6oEBLm<=GZs`Ppe!4u}h0Pwk114@(rEf*AtXC-dP04AR6sCLSDJTHZ zj8Rm|_i{Ul;j)6|VGX&XO!{q(zXz|H($czyZ$8{)LMghx_LnA0^@XwD)=QG z+z9B&y@Uj=8X(^`LygwjbF8hNHLs==*lg4ESgX6=YDa7LzE2||(zx{hIy$YaV|55f z?}TLElAx8_{8y*s;LrenJUl!yHo(q;37?d*0=w+LZ*Kzr>PJSC9lpxI8w?~^WF6l9 zgjS+uM5b84*)(clt(%uvmYwG=)`?BJ*J=B@ZC_re(<$p{!%chiN{Y#d4c6{CVTK<6 zJ=zbCzoO-@UdZh#e#{0xp}eFRFvL=JJec-(?+_ZgXjf$PG)AtIQQde?%>MbXcPgYK@pj4!xr;tZF4FbF|X84c-|Ze^=n=ae@&Y6-PdRgxLa=B z_!Xtdbm_aN_|L27d3Min?GI zw_8U(PQe5xhV6sD=mmdQSDMZ@)K+H(b>ljF(cgC}O)_`(syN#R1^n6xo(+uKfMy9G z0gvG0#l!ZFSQ3;SiyW9qmMqSm1$&+j1-Q z2$fEsS@Wc6!4A*0A4hsN?slbV=mlI)kdVJ!cR4XQS(fU~3%#;tfF`djrZ^mJ4mm;J zE)6q|z&v|ux|-%2sB!8v^GYfyH1$O=O;>$jS9Wq2b?fctJLB1ttDe-+|5Yxz|EpZ=sH&Y% z|Ink*=zfGG7c|N5!Eomf$0Lv8@{C$@Mo&Ko%{cGI@2)QOU+ZHs6Oo)%!JeXgUt$Qe z=@5uB`|P-W2rnKQ-4COEN(leuo;Ui86ezL$JRV$Rwc#%0} zO&Lk<`E`wh$eylIVbx2b4BY^uZaR8>pM)lI!B-dUXY+dg^lh0gzS-}c-JPpsH3W>` z)e&?^e~CN7w>@`4ne`@=6s3ynpg7F$?Jn8c@vWzIY{~^ zz}(S9Q6>2gcqFqlflt-#l8gUs^-W9FugZtbaP#aX*tA=t-GE-pJAltvvwh&;(+^c5 z+|>Ff8=OvpdyUy26*TqMEt)U!p!aA|rE7ZcwS{zP4F7=X5YuArg08GpdcB0qEe7xW zw6vU@3*&B-3>!o8+o@@a!9kpJcUS5LXAtj`>f0UsshN?hGc)PDT=gnQ`;C_Z&f*CL zAmX9~j1gO&V_$&1?Ucqbpcq%z3kvuU?va$1)@(MM77&17=^ulgVhF7JJUoQzdwz0u zpZ=-{u156oa+>6WMPatkD?d$xb09-d)$Sgl+wixyDi%!hMG6lEOz$1vVc=sBRRfOVkZujE-?vc5!LMH1M# zQfr*zr;8>_<%*sA#vtxRNT{dMDL>O{s%bxE#B0)v{A(MbQqCR%KwJtu9!@s;nqjBb ztPoY#qqBqScqz==)z|9IYH~YX@UuqZ$qgF)JdaOmL1ZUTB4!Tnw<0AapNQjXq7B7) zXg)2JKDlgcZpn`j9x~};M5dzdfjI8lD!=_$ks`;D@e-4X4yjtT`UV_@p4^rL4Cmpi znFNilUJ(WB{+uy+WCq%i;f|b~*R|D8no|k4X5EN7i|s;ej>iEC21Ws1d;-?P0Sa3? zS3yH&(tvPuG%|GVVr~ANvoJVl*+?bZ&?$C1d5nu9UcW#Gzf`ofCk<&qOObM;k*T8CIyBGR5#BIc+_ z^)6^W7~Mm8ChgJsX9F)MBI9$i8Qf&O{mKTJg1vk~obahTp1m9notI zj_^H0MKXX>w)w6Yu$5R7`|c9AZ*ENF=WANG{P@Gr+$R!NA*KGZ3SVZ~KAMI1vO*#P zOX;!ktLYTzzWL!3#ji%avDeluTFyrLjiAjA1*JL*lcPzBCHX1^esyN=t77D?7V_`u zImSB>Czgj3i0tum2`Au2tO}8*pK(l1!6O-$sY1vjj;Docw0-!4Jptea3J`m++TIjQ ztOiySds4WAoy{(%9PkWtGJB$=?-}zZ7`{9YUi!}ZcAkj1?Jei)i#Ov1KE3cw>8X>8 zm6_O+CEOk;Tg=9xYM?jOQVH=^MZ?J7{QS9be7LEf*d>W}q=fcu~vLz>fQFu5D(Cq`UaS$yF#C z6JJj$ia0^t*K^|RkOR>X`h)ZyJLuND``AYWr}GtYiPiownVmQ!-1Wc+rNPgc*w|{e z!lEhIS_dN&P7{pAHF`D)@IFd&tP|EznU!giS#1Zcl`sAfLxK zPp5$Mn-P28A8C5dOrIHUZ~8MBLPCyzP{nz4g;s-}fV26v2A!sa+KB;}Wi$+mfW&t)_=B1e>3{z^Yj z>KI1`2{i@)HSv2|MKp5c+sMjc9H0)@3W$aY*p7QnZmgFrkfhzRdx1q#BuQ(3|L}&Ap(ZAT;eOva(AOAo7lmj9mV0F$oyZoE#mC3xtF?GLw>$ zGBVy|o0*wuD5(qAe9lNqOG`*dh>ewGl`1w`(_I9h0f0Ye5yc`dw7K)&hy-E;H0=qg zIsz#=LI>Y(TW~~W9>qO)J<4aZSJXZ+@?4WjG`sFnJPA10a+?$AJ*{Wjy+u11URvrz z`;^|Smf!JMknoVuMXTMBjio(-kF=J&MBm&_Ga$QW^B2Z@+JPHmKY=O_-*wObX@)vmWW!&N6qGh+E<|gaS_>g<&L6qG_TeRz@C8%<$>93kScMJPFz?@?aasR~6PwaSq=?&NJ zv+)j#JJ$?F%!QvH+$ql3xw7A-<75u;{0o7k6A=Y`USz+)ay=1HE(mV=I}wBOneo#A zX#Pu=?2Du-y_xfg!5S&#zQ$b*G5A6-15Lp{QQ}Hj9-$6lYksYoHChx?uEZjV@Uwzf6Mu#@?_g3eUkXd zTvQTTQvc%lNaA3s!m>o&3S0OyN=ke|WW=tjZ{FdM6^^cJ$RQI7JpK^ zQ=t}bl-1M|!*j!S&dL*$Q=aNBSs%%fLM$frEL1d4w*_Nt_^^fsM}@qylKVR2PPY-I zYCK|Yb_K_-ca;>t&qRyx3NYq(g3U%J&%(Y}*Jp;duUCX!s79(bBkrmO4`65vu-j*} zU5c9zXYNa8K!`IS4|zrYQYEj-76u9;E9qr^if1;?QNS%Z<-Uogth23W#AoiLA6q66 zJ;7W1X6cd3p*>?zh6uz$2rZaD}s{-34!I>h9@eK6Sg33$eDQ*Y!_XmX( z-1sfiy$0Fyitg;|sUhNG${^L=%E6)FFSW2OLyMXS^9)5P`A)>6htV6|%55zCI9O28 zp6ze+oqT^je8%{;j|v+xmeE6(u}{XVuHEL!HH~Uqg_;lRkl?BX+ow^GTYiQj5@`c5X>kr!X{Zi!MX^%7xecuxhhHsJ->0oMqLtw@dSHw++M$(D+QPb=X;z+ry{2A7YfDPZ0$U58W*q!et z4<;Y>z`HDdUXN503%9VB2!XrKK>5p>YQHy6qdHFI0o0$rmbc*@B|W*OZyczu@TbT* zaB_N@FBoqgWgcv^uIwaTw!%03W&45|N4C3-?x}==5_I|<;(4d5J9=?d2xa3&yUceK zBx|;MMkaCoq!PEP6s|MPX05g>v6RNjt;!y` z%?b0_!q|gpAU^8hkjnTMJ?FaC0*kZ)c%8kvxs^Of)48(>af8&a=i7;U;lxB>$|cU` zZkuEDp|Pz}POzB`Jrd#!-P(sYVt^&x1m~?*iC(m2Rjv#gGjJ^;i{O!Ec^odpJsZgu zSwnRVZi*F+k(Vz)iG=X@(QAe<`{i;dbmt@}EoJ}YS$}WNBlT!n z8d^cxT!Gmnx)>%zJgLyaG6`LGkK0gyxQZl90szP+pWwEnb z7Y+=C*{~XFoH+Q{%FEi=E%L3dv)-VI+RJ%ww78k9u=^fDeg4*T&`PmH<_hl?9l3??YAZEh`&gBT7)| zrw?Bly|I1noV)DAyBxv~teEK{m7uGnkJG9Gh@tv?9UbobDIw|j+oR-9L2oF!@t3f* z0wM|b-9oavf5v3j+KE3e8}``|Du(rYRMAO-deKkYz4jLQqtzE@8hD_*7P_;Ivv}}5 zWYm1Hv?f87zDc7aO6pIHU$mWBj$2TP{UIEo56bj$9)r+_2N5wNnPHUG!{bK zccwoYu`wUJNPJ|@8JldCrky-SqHp=Za)VU~I8>jiv)@QRX}^m>reeR&W6zYZS~Tws z;D48J2!13U*;ebFNP?xHxy_c+=R#c|{>RNvkD9B;-gL*pcZ?3O=$+8nx1yjk(a5Hx_=lIZ%^}ib%Vs;a}3R{ z!A6T?P~qo3`T)b(J%-IEDp`SFD74aB+-~nZWml4tVgiNgMGm)&xOYuNZqY6a9WDen z3Sa*lsOzrb&6RNKFwDS#yk?ah9rXyvURDLe*DCKC@#OYE?&S#7eY+~hk+|PC=ut(i zKci7zxlP4?W`~Ye8F{F9uYNw)v@G~|@et6@9;o(ov0&;5dJ0X?AC&4zBl?i)8diop z)WE0*v)^KX#Nx)@EGI9rXYld!=<{2o$@U5*3a~@jD{)(>sgDnr&BM{#hNokDwqIB` ziS$F=th(`W`|FUQzK=bHno!`7($s6PL!Uj;gXXh7xQ;f(Ng>l1->ra7znrn_^KzLU zG6!Qmo%gBPd#2X8&8{43=c65rz^|g%mjG0HjBoMu`L7pAsITtZ{eyJhzwZGQqJ0*z z@(F+&FD}mU)A3x5F`&{06q#E^Ux0Dz5FZ-+Z&~!I(sJ5Z`Qmp0Nbi|Um;dk2 z*((;bX6$tq4^ONpQE?R|QQ!2lmhxPA$C9nQdP&oxNT_zcSPx>rZ+bUL{Tu;j7{r^G zJx3dlwRbJSx~(5DP}K{Ri@nEG_nz&Z{??4Y6Q9ytw&6-W^?EAj*RYuxaOQBa zZEjX$m39L8$S?^IarH&{FKb^}#ly`Ah6|Qpx9#W>^T&pIF;cP~^S4MU&W;tfmhHMe z&_(K_BLA)-48&}cET}@nmD2WtNY7bOwO?+<^{TmASUT+%H52WPD&~9gG~qFdTa17| zFxJiQbTz0ou`+D1#n3#JV^iwqf6i`m-DTw~Lda$_^2-gInHF{H@~}aX-iYF-<^%XGi_(v{i0a*ZqYSU&9F2QwS{E!m zvVnoJV=L9@Xl?o{ZprVB1_Eu{PbI40MYfEGy^a0O2V_nTY@i2VvWQQV;OOb;SeyuB zd7;rz3D1OS+22k)dzxJB%+5%(2k!rFY2*&O=+9jz#owmGz|fM)0nk zQaM?bSuvx8=hx_mmIo%RR~9S9EWzl$88Z_+{8iDLgx-8$)aP9QYiOQ$Mq?11sdX3fGHuqYZhHo@5IITwSCC&gSHdZVId@R zuQ;sF?jZcoOjc0e>MFgd`Z#upWzI6F#jVJ1)6c`v3ANt6_buUtJGK&_3Am2Cg&px$e?GUKG?-`=LTRkPrW*I3u zyqq{OQ`o+E#Y{Rp9bCO|vpULQM*^@CF!(X<7Cl}*+S(-U*xduA^yz2_?2Fcuk}-qS z7tHOYk*cx+f3##Q6USON8b?%AI3%S2k#<8naaJ{g9Rn6tP*r&6gYI3N-~LsL4itYU zmbbUD8=vm_+AJuD{sGBZw+jXnc-GVUL}xIY=}kI|o;bGO zq!a0=^Rpmw$AfUf#^Jui6S&)Q7q#ny3yM^r>|sH=W(=y>x@N{{oz1#<@LgH$ z-^SKTE#op6hXQ$WcPROkU2Xt4j>wO*HK0)aXF{RV($WHS=77HiFidRWhRW2Mk5V{# ztkGNf>f(a}<}iQ}KD_pSn_HZaA!{-Rfk^d@?V=+6cAf9yFV{N+2aR~>2F(7e#X_1Q z2x;l$&bVf3PiUf=OG~8__jeAYp{*)+V8LF;f{6Agj|4r|;MLG@xX3;qU8H3M?)1Uy zZ?!0&S?oAB4=1IWt@<^;XcX<4eP6Z0km;`t9?RDZR?>P1s*lL|*@(MLQ2#tA?x^=A zqMhP4a?#v@YP<5qbAKs}QWMKyqAGNVwEY8z> zXhhmund!H6$d{@%=xcJP^Q_Vude72caGLP3HH+a|pc6@K#pJ1kj0;}iC$Ez1714Im}h@aoQ zE({Z}05mpRHWkjn`^yh>Fx!LUL!hcVyh`>sd}ws5ba5CmLmEg{tvA$dfX?#l9zt;1*Zwazxrq4pHCgU}B+Rq}@iirW`xp(f@2c+1fr zU=k^A`XYlY#jMF1fiL-s+vKHm3tj9}96zyTVjBZZ9lSHef{mHqj%z!F$9+#n*5<79 zy8j_*tCVbu+QRnKww0wkUwQ&A>~e_Sb*mFpVbcDnNcYt>D%xFw#iiJjYVzDrT6D`0 zSOvnP7GcdM?^G!{Qf-qanmQv!BM~Zwi=VvhKOhkUDzB~~>J~-)i4UVJ*i{LNq-*Gv z#wQ2(GOE>)2CDUt*&rOLZ*P$ofo@n|84%2Q#87)PvAA+``xg&Z5+w8RIX6cdv9MaG zGxZ1wa9?g^hM}1OC3;m58RBl`y$WnIu<22FMM%TW$RDuEbjVcIn=+tXzBnI^Wk(m< z4Bc%jy7!~6Z@P`>Sy!B($iqY2JG~Q&b@z_L^QtR@h=1mKq}VVYKw>@@J*#&QCxrZN znf`Q3a+rEcV1MqTPzOgn9GWV7`q7nflHvAEY@v#x0TZ38{BUvaQ6MQV`TAMCAzN&~ zg3uprqUG9BypY%E(iKsGNP*3uPJdTgEW$z|B{~L%D!s;$fq}5J(>=f^Q(sp{Qv{$3 zyT5S?Mgs1?06>@V+A?k`OzE_fo#)$IQ^Ql%nQ?hgrENa=o;56T?W!ch=X1t8%hI?8 zReP=}{Vdo4f+m}Bq=PC_vSM1l`Y%ZvO=bfbqJ8RWTu0s|ba64GqVJ!E&yMs80+W2w z?;!rZ-yfPN)22-k4hUYA*4uWpW})|qAdr_Lylktz$!`Tlez}86f#z0&j`{WBMzpL7CtHk*A!|cAASWgps6%$Rj!fERcW7NJo0iy`W9S)frW{A?|~!2 zGAEy_5v#`oAj2?X_abk?`EDAaWweHxN5^r^RXVmj*c1l2z*aFdGbZvC(}GcjsRlGyRpmBO zX1)nf8SFyea-NTA4n~VScJ`i!uVjfBH>VR;MH42*5KT2dj%mr0f^_?czT_GW)5oe% z7pI;`cqk+;^D7NhRs8cB`rN7lZ|iBcSQZ4PRLjhCU|g?S<%susX1ZWi-z>L>lfG7N z)GZr?G=A-D|J`4?(w0`T-r^4QIFpkh3>4^`BerR)&PWHB1%(!gD$5z{sn2~qu>ohTp!f%VD?mSry0v}Pgh#_4^Sd)1v66c;u7ws~yBy+%ZqSWDmJ-zzT;lwk4gzWWCFIL28t_m9+{BC5&Vt>$u;o zXnOd}>1%4c=p-^ocm)Hfg6uxxvTst33_t9qM!*c3zkFrosAawc4P}PiNXoC&@_#b#?8uZ4%n%d7*vR@{Vox!;e^PO>bz9Lr@E$Q8dlQ z;po*_(`S#W{6Xd$Zz%v2D|C6<0O^ug>N>*0GX^MY{gt>-hpjPSj1m6qxGO%IHFk#N z3`3ccy_r&mVo!^Rc25BPEoFw-Ik5EO&lbKnzNsK_v6G!Lf2JEd)!*&l8SkJQndDy? zteP|`PX^>%?PfuKud~Y2o0@9cJ1Pchg><+t_1Tt~lNuY4=H?uEZyLGZB4zpMHmmEr z$Q%#?N|G!iJ-pN7+wIPx5S&(>N$-0=&;icu-*ZOoTCERz9B6OE#VanO6T%O&+)RQz zrTQCn6r^cu!t0!e2db$$I2AD`u_X||4z2lpTXoe-zXD^oO2Z)i6+6VHVSn#?tddWg zxmlQK%*ACow@MEelsA996E9XuHbo;{Ik1BcZ2gK;Ur5y6kSwjw0JCjmplbC;WtNN{ zu5JdZO5LV>Q0L0H#PW^m60LeeJs?POv%HXHdq<4~Pjpg*67pLtb6jExS6k$Ic}1nj zXSk#?ZF~KB{)z4kW2J;kA>HFGPsrTlzp?0N^NX$iwi(J-q@<+(p6Q3{!~ge8e+2Zh z#s-MVgLS|HzsH)#LqO%p|4+H5oGR*u(kJMfn`R-w%x5wys!0eTqrPt;@ zg&+SU^LB)7s9C|%qeH6kA^nD?9A4!f`}`FI5x`!y>##k#H^pl_TTC==n_?&qL$3iP zTGLHY7`7+8$DFyj=1DK%nw#UQ51`i)*AUyqcZ}KM9!H18JqwE;8#llF7X*KyH?8Yd6|KGEemO zZj7Ayi_5VRGPVuLLWs936By_G-Xss%GV8V2w{~RK4J(q!jIFP>6vszN>M6H3=h*=4 z(^NbB(3BO9qN)mi40}QAliutY+_m182cqs9|0QNDZYML+Lf^hBP^UEJxH7Bdu30Ij zJw~F*vImoZ^K!n$p>d(xgHjgH^Qih{&!VsuH|K#)M;lns;kV?>1#k>$!b`hQg)UA3Pk5#j3iv?66-)(+ z79Uf7;oyJ@TKo_`wT8|2e)&yN`N$}iW9F~TNc0gD+g5`|59+2= zAd#gdi}~HtVQ5}a7K+Y*IW=RsywWHZUluAD-Sw`t;#iJVogo~) zrxjl`(S7n~z`p{Hu2(tQ)zK95Paa07{y1Y^=`W@N4M+vz=S62GeuiM3%8&f$zW^k* zW5lx>yOmIW(@X2MKA!55W)o@ zL7pC@aH_7)57*UjP4rZw&e*|y6ljZ$c11KXV!ZO?D1rf$6X8!NBj_WT)G_*!N{_dv zMgXOSoS~XOCGhU(9i}Io1Iqf>6Eulji5S%k0m+If9E3!%s!UEWJoP%(12p_e3-g8q*lao|8uh@Ly+V$iXFV^S@pxTYu8a025v&M zdw2HYCN?kj>)$8iir)l!;VoF_@d~I*zeWAAt~s}@%bi3UzCt^2h!*w|GP8PJ)7^^sdlm+ZP6_;3=={WzYw;*s1c&wqCeZcXSeib_16C}Np%d(L{fM$UrDq@ zcgE$8KEw1@t|EXv<|IY&A}Fy@7HI!eOFc&Ii;fBjPyMT03H7O*ZRf|J;m)q|=8$5a z7z!FsZI@wVwo5>mp92Q}w|QFEUuIZkfqHZGj{qe!ZHEF`0|~fus`kzfM_<2~d_x3g zD!8nJ4YZDe*7(-OvljZmrgz0axTatG)@9Sytb?UDb!~6qu;qXcE|)J?VekIj!Y@j}FNR;TDf*N@9SqI>?I~w6aH9&2clGAEz9a`eQWlem2(`LEv<2)+K}PapD-u6b zs4q2Dm$Rikfwd{Jg7jNN%o_~fh!|iCs%mg?_Ct;^BL$QAZfQ4Sit%Cn>6m>#a197EhB%e)p`N>4P6*)Ep#zSWaF`8$EzM`Z89 z!yHPn{>)NA9vLC*5|ytLlUR{gb6(Pk+%~N9- zxC+3g7#|OmQ)Y?&GSt5FfMcKSb2XKyXr}IfmVK0cEwFRUrO7ETkI4Aq$E_$Y|1%z7 z6dPAcWWDp6vT;GQl5A$thhR%#t_K5&8J+GO^A!dy1l0MpwQ>5z9qV1en;RP|-nYvD zDty8L&eLBfWE9}5vZ8N*cKEI5UL8vRNNIrsxQF}ovxfdl#VRqsk@qppn*r2?UHg5Z z)l2X;03D!MqM^q4H{F)l{@a+Kn3@{sA6T&{eP0lXP2#*7FwC`O-$_XDbp%3%#Zu*t9Hp z+Fdx#r*3pQV5*AkXhE+zVz`dM$s>aa1K^tB* zR0QT3k=`SN2WJ1RTZqaFksx4>phbuJ*&GqLG>YA;J}a%`_4#q*WJCY(+n4(r&(2y1 zHyP>_T3e-`oTw!6$8J(bI5{8u&XK9C*1{TID6vo7pB%azR{ZA07{L4cfq+RK^L z`$m)AN*zGOMYFtKQ+5KYcPfy*a#`u|W4Rt{1V{l{NpT0UME~XFO2E!37YB>Q*S{TG z>?=T7?a%ew5PKi;k-iZZ4S2WSwJi+~nS0)i`OiqbvJT1li642~bw;n2mUJ`ah~AU_ zclrM<%)~u&<=gB8<#IoKMhj@LM>|gLQk!pF;AM)DD!)He;C-~ zLoQ>iI)khjWaI>!$odC?h2*hjCbm8z_fqS=hU3Puj|)o&EBeIVhY=fyL3uh4`A8Z| zM=<^Z{QNUV9o0&&8a0C>xzlgGVJdIYVPTnCc$wN}0`6zqq^PJ9Ko00!VDYQ|SPJ^( zYwu_3l|wrlJqoU*p)KqYz^PzAc1Q}x(w{Unq#&a6YrC+) z?TUeSwpm+@57i>?to8FXcWcH990LP$ex@cYYfu&=Vr~J%zDiVKebu9}>!G&X&gN!G za5z*A5ct2Tt1CK00z`;2y+Z-vbga94`Q%L;qPv*N0Eu~ewi8X&7X`fcnH?Ry&+JOb z-)eL^{F;>&oXNGgIuP`<@zY<7Qiurh<0wTTbeN)gqkNzRl20p;3~M_DvFB%FJxX z4-s88OGIJV4Oz?p$h-!W!vN@M;kSimW5F>`s7zc&#?ox#LhyV~Bq@lmIF%y5un^E6 zaH6NRC@LuE0BTw_yOz3vm*+=Nab#rVloug3s7$M3LjNbGuy1!87$(NMiYPN{Rn?|t zXs9}T`)1HhmO9%`Qx}OrdEj+Fu=hz(C0NdpVwV!q)#4 zEhtNU=LzAdOSd|7{e7|0pY}M1mcxvb4LeFX15m-L>_+ZK^Mp~rB&4q6>+Qkei{q30 zr}%`3Du12sm{L{xLL(Nhi}b+JlZ^PY;aqdEFr)8u*cLuCiO!Yz^4Wv+yj%|jRB~Oy z`)kSy>*m_*X(S|GWYE3E0MqPIqYInPI`+s+c{fJMpzc_de$CbTs%jb^(D<`D7U+JX zXM6Q@^|G;65VF<8PQWtH4el2=>!ECQ%7auoeLbmp%1|<;8!0rC%l2L$L{#%huYUW@ z3|4X2mV|^G7<7v^j2I-B<%^N+hmn`5?`H7QHksZBCD`iI({lrU`~Hc+2sK+i`HU-* z_1yxHFdypMk%g!<#UPJhyq{9tv(jVThGU$zD`W@|BnODyWqYH92TB5>-6OjZmYyWYfO8?V*B-uy%FCJ^ZV9)qCZs!hp=*u2NTa zgN84b>zXm^w+w7RVDh}{dW6h-j6Px$8_!yZ#LQy)!sJrxn&Ol73+{uR+>#XDbxhrY zu)2MtY{?y?>-dR#C^HRppvVib{#j>gz#$%2M*uwu_~hg{1lL@7)}HQ6)A@qLMearP z^Q*u5!BUpe4%jPA6{qsBZ~Mz|VuQ0izK%XItWT|}Zdh7Aj0e_Tvv!xYJ5y;=sNJ!t zXGWop#`zvqGE@1rq`HS>cFk|J^Gc>1?4Y`Fn9+jYLi?6JyrT5>++7HaqqajY^A6AU zjStL!+8w$xcAvkONw&p8O8_$uwf%r)wbk?kP9LZnXbGIli^=TUYHXI6Z zRrs^{vRm^Xuv^OeJ#(*Y=-q=x;FFg^O-=jDty0!v%bCSzvFYi{vcqIymkh^T4nkF% zLt}J}9c%@Q?$h=XHnP1-tJENo6WET}>wP7P@9uqbo3ifN2JLh2K6crKmG$000)w+v zA2hsOB$9%hgI{GgY0D6X6HZP0q`6CGcio$u;F;V3n7b m&e?2cCSBNL~t(2YXI} zu*|xUh~Lksqx6AMgN#g6WhTYfznyA1usWMWZC`IKP8;VbKTP<~0|FTey@!nzSv9=I zr~vae78bFlAMMR0p-;}`ZSkOJH$DAIZ#rTU7Qn=beh^g8+*;`@CqqoPXkubA=Dh<5 z?<)-3(lTa{%GC%tjoLgCGxmZ3$|XRci=Bj@AN|t>R29Ie-SJ`h^6u^~5S=gxUBL$4w0drlQuE=M+57R1|XoRp4I<@bqOw` zavK1ME~(R;vazubT)WZ&{hK%Wv%d?aF@eO91VG7J6qAwyG3m!;W@bjYiKUTC(TmL_ zjFn@U%@Fl$0FtGKItOA9u*IECDs}3RHj*+<%J7-BVyce21W%TlG#_iH0OV2^aV)6S zaa(Z~BbC{DrS%@*Zv|Tj1Ttj(_y$Cb*w0jFh@1m`PqU?@G{?W-5_P!~?C!sRB{RnQ zkrnK(_S8f8KfnGK5k(e495Poa40JD6nya7ILjY8x-|xaa!W-#evT~rl0)cWCsW?Z^ z0T8T*=_-PwC4^>D;=RLn ziKSLe7{{r}_#)(ih3{qNd#774utfmyihwTZ+~+;%1@nJY0&mad&m{?~Z9Y;9pKT7w z*49XPAlhXG#H)XMuw7A8q0OozS&ZDc_HCJg*c=dpgfP9i_~9S=ZB%MBcR7Z$#eK{+ zem`YL!J71^dh3H60xoCS0Q@0!B)@H2^jeDt5(Ql&+ob1sP{I_w>!>CHO9gWWuwU@^ zwEvLP;4awhz!MTA zLR)T<{NuIyO8lF&e`ngl>B-VsgI$WY zo@`S1K%!0b4}NczaBeT*aeg3Fi!O2tFBw>Sj@gm(hETX1O)_$QhAv1-Fc_w zoSaJaJcwD+7%>~_M_Y|Lt?yqGkB$x;e01=ID3pHCkVCDlx#nveU>vA2dn1979*@)c zNv@CmUeK*OaR_qk3Ztd~2eoK>D-EW`Nj2jYxr@ELXz>A?XuupMoRL1A`*C7XN_T7) zaceG>!q9#`i;c-zi-|!iem-R)PXJILvwL(sc8Hw!Bo|97xIjtY5}rB7S_v zGKPEWDwoZVBs$64)9aus~n+x*tNKW_Q_$eX$TvaIi+?R}U+K|7JBP^vA zqM917a_CO+4@4zYxm&fh-8c>l73Fw+7o_pMx!sp$SB=_6{^C;e^Syg(Yi4GT+@fo! z_y#t%E@7q~Whu^(kM%ig`A^b|&d=k!_fW}#)zf>5*0RNTuz-$;p-+|XWFSD3A*wh_rh8X2Ij zZ{}!&wm1}zH-T&e?^^>$ckwqOB3BeL)Hnh8i+-MFfpU$3k0z2LM`0}PMM+$=w6uS8 z;wOPdIxIY#rYM!d10U{)Ralr569aE6P8EQ#cLt*OZ+w{#ZZoa$pna{v4JDl z1<06W)eQ~w;s^2TB~ny_S0KE0AjRBZHX!00h;SSKd$>$6&mF$@)vg+o)^^rFQp$R+ z+IIzi>_gz%{{Hk&j~k2tnv`F>pfx z1wW~s*Z>&9ARay5$B_Y zE^z|>saWWTpttH&#S~D_wGstwPzDnl(V779D_g?upB+L%F^?c?_y`nGG;F_>VSp|Y zJbGukmKho2#*KofpI$y-4)6~KQ|R2d({4VYbVYQHf7<2hgV|JkOciI2`GkU9JEN7D z)Wk9}=r#>0t{_yUWFI1J)WuGKuYilb@@z}`om{(X>*zw_CbPYpFfYet-#Q^}Y+EO9@3c$bR1GHlxF73Ta z%^R7&Kpo&&D*j5Z!8&Jf;NJz<@Zg8Z>^^EU`EBW7%-F$s1?lJ4Ka1x8#No4gqXO)H zH+vEvKIU~ZaBWOImA}iQIzx5vzibUX@GD>_yN@u?-@jjC&dPec3e6sY0iwaf65B5T zdOYn?oPPoYF7V&jH88s@~k-LPjgi<)lGzM^!lP5l#T(&25GS&mZ+_*4GRqg6}6Ca zNjmilr--=M%F|L8IXQ)%pX>CEjGO@fZjo6tcKBas%?JRR>8uBq@GGWzTzPFilJWJj zj+}O2q27u&;i#)gVuh;6X{yfxms|DAa8@%uHK!7ccdtaup8y|Uw#xqT#>O!hOa+TC zflsBpa@Oa9#b;*;xu8+b1Y`d5f#%Y}N~PY_xt;+Soem~O0H~5T2jd!DEoTAy4Bb^` z7XMN|O;6WuG!$U$;=7QpH_4qVh0_rY!I|^THbXIg!Z9wJM;$B|`&;6^zr5W<8 zxXr3$Js1Eq4FUICW1(gE{N~2+U-ruL2M(oxyxiQr&@2EJuAzC*cwJJ`KK5Z}1lO6< zp)rb5Ts4{e_9{w*RY)i;<5$bLc@YEx$s&mw`+rdbhh!DfdOgig@t2Z02GNj6mSLr54OFah%hiL9}));BJZ0TeH4stt*=?6RYRJA=x5P50Bv$!{SQ*p83G~*pRF=diT0OIoyEgKaNVxNaVl;&>I4( z#w*W!Tj1f{r}z))LsSfO8?4@vZXYHY0O|A)1=4C|_E`#%*F=?)1grMsoOOIo_S zq@}y0MY^QByHmQmL%NY}X5n>T&;88*#T>`XF}x%;zrFTe=Q{KAZOK;b{|j3xhk^S` zlfhjoqJFw}G2+)mU`+=Q^Zv`_CXI#ktK z1*aUCGX%`sXo4_O@Pt6W0_a)*VhBsqm_d_y*flucTvEouWXxq{Wo`99WbN=@q7oA@eQ+2NV9jB3`#w7djVKfDcgp~C8 z1rVHB8Q}Zs>Z*Mh0^r>W>IH^IMvO_SFFs0tTmk6W3P_UKjq}}!0|FUU$uDLGTqgN5 z<#8?jVPjLUvtu*Lo0(B|ZL3>1v(&wd z;rri$1eZS;cR=oXl9vU;Kg)tMGXc~ zZI#s$M@{pFOe^~^^}}%>P$U>7=>>pmK;)Ga7xzBXY<6*|eMgRv3>eZZETKEP^tM30 zBOMa&7LUm47ihXFMu5g=X9%+1pV(cJbY+V3K_&Jdukof)ogIs}G zo&&)BR*(Y;2rJ;dKw319Q5ih~nmsLxKRy&_ZMl#Ye^m09H!@n&G1|@Ztp^~Wzi6gW zu}}X6z6Rne6P1mDMJno5!dzqESBl1Abz;1guJEwsOo#eRr z$nMi}I2q8)3P=WWyc0Pa?p{7VK07k(gx{;(q8X5foaU$A5Ybxy3GH)7S&VP)k-89 zh$CZ=qH-et!C^6fhd&E~zD`PT0C|wz(@ox|n-L5AbSKaWaUL=Yil}5{Py(HO0?GEA zgSJnj);m{fwhw0`yb21CnAq6jaj67AM=wt@IUzqfHa5qQ3FTJU1Nq&%A?l;!X}}`S z&&Ln?rDwD);H4p>7u!L=ZYyM$+*Sf!jjCWaqdTt>sKPp4Qqlk`)zib;6~ulXIbJ|_ z$s+)^n0?G&?%5Qt@J+n?A7q?^3eX@9PY#NRFt)sd#NqzL zuc|r+9D!a_1Yikdr5!{C8Lq5gRxZ@i+Rr46S&TB$aV+v>&!fOZ*u{r4=HazI0dW$Lxi9TeZyjP%tQ&$;e|IefG6G<+$*2*`v$}tLf3*M-Z&(t}R za?b}j3@dQquz@fG^>Vd27R$uzWEG%j0aQR(R>J4lA5*zq^YX*N{g>8%N$A3RyaHYe zu)d%OpHJaX*0{t@y;x<6#=<0)>UsoTCe1{*-(4_376F_~AbmFe9`{OCULN%!(M?8X zxIn4Ug@f3j>1xH(69~B3zr3O#K()# zx!oPs(rGpb$v8obO_`7JF4eu7KA@1U1{%>u17LSvR`rc%OM(xB0li}?{gF9&H(fBW zik)Lz%Tg&A9+-Rg$q)G$am)T8WB&)~FN_OR9{PSat(iXKfevheqh%)XK^>47;0=fOvteU@ z`3T(!>LM*STe!9?WmZcKK|#=FBAM~=Z$F~ULV7jJNlqyd0&a-Tw7A7$UHJk>Fo?>= zDAbje0TNnck^*Ve|9DARVD$Iz-@USZbxUBuQ;>86pM|yw`HKYN`}}d}d%V4NeCQ*| zY)?1DU2r0A(hyOLU;@3?#}RmX?~$y7h8GxMsZvr+#>p21Yli_NS>>mMxNhxg;#0W5vtG!a~ z%wG$%k$}>k)KC=|>z@Hi4nUb8NGO9wy#{b?ec=lNqL)AlwwAzQNr)Pg?sJ*fk$$dv z*%WvgSaMm;f&i_0>{FYx&pHsrlo%M_03MdpvUBc?yBUD4%;zFTfh)#=7i`Gh7+B{o z{TqltCI!}Je1Er%hvmnkU`5O2ym_;7LYs_*rKPU)=_t_iGggj#5wrkK3R8SyPFh+k zAT?Op`p8iqJ(R>I3nJG0yl9Z1wO{yK$E>@|wKDcs*U2xff$a%Mpl`lauJaDJUX_grYt6x=EE_{3Dcx#C6) zD}P(Yb}L0RRbGVZ`eeH&&d!;R-uUt ze5xr>TloB=boINRIT|UUA~JwvOPq9XJK~Cj4Fvcjf#kT43YTHG9 z>B|Y_Dgb3u?KCz4G(iVEt{duFV%7R_#M9Te?_Pbo7F_7SR|l4H3;$kq|Nno}gnWZ&G7HlMr3%A8boBzF z5-5=aT>`TfxLMyzx!YyeW7AoT3C`mt$eXkyrUJ4r=Rk1=-uR(C@0q380?3_)0QE@e zy3L3Gzo?eX6$r9|uc!z0;!xE5Ux3ysM0~FJ;}w8W^pDn8&Mi)Xr+xcqzMgt?D;BP##n4#WV7*_&#X{+e{N6Q93yeUZ0-K+0s4&gUot6lm@@AM{8Z4hfY>wR9|TWP zm%xj|X82aoKh5qn@aup5s+!=;a~SfxN^hT6Df;w3wBncl%Q4+^ci*>_wgZ03*MFF? zLEexQ?+>S@6qWy5$6x)IFU#DoNlQghQi^*X0DT>T1Mc+iuhaAyRQztj1<2t4Gk(jQ z{{$o}0J`?mN|9Ri9*~h$nJUvqW=;knR8})kUY}HsJ41Li>yIKJhKp$Xu6^|iJLDf< z|4XBWGN`vuSX*Xqy@C9P@QVHXXC&hK>&5C|FPAK@KcjM;nImhNDPnA&$?it8IcJKH z+uDYBsR96f^Y@{ebV<~^q!)-w48cQbUVBSR1GFrTrUa#Wf1x3eJb1fjcfTauz`^k! z7I?nn2F*BUTtu5wtoE#hyC6!nedNyGp5IM;TkCgHL&vBeN-H7WMKwzNi0bfot{<{>$EjBm3HIlR^)Y(Ep`^^%;#Pb`AWH$?fSA=yJzQvge({K zYYdI$!NN{Vv??PVem!FomPAKJ63X0~v+?_O9~)o|)g79Bl$@C06nN5d-^h`a#8lT* zkn7|Sm!!Xpdiv#H`#Q<0@+6)H{mYt_^1@FO-3d!fkNBjZx-YsFCk&k$?z*hiRRXiK z(N9ETkxy&tI&(VSS zT01c>Ye=`ILthzch)r@B>K>-BU;M#OhaRxRKKHi6Pik3NZXiPfOUK&ug)HUCiO`Qj z`GL>v{faA}(#Z2EiY;`<*2}`fvo0TZqgzkEHknpp?bv>ve8q3j>z_6nIcK(q@f{OW zGaia7JO*1yUX@O+jEsie#pN>g7P;&;AjkL3RV_1HL`b5ku3=Ar8IdRz!I8}HAcZPM!HTqdLlAtO|+9|A8t^^+zJtx8pO@2sL%R_1%=Ra+oP(VwCk^Mr8De#`Y6 zS7CmC71qvIRfO$Sy>FIH&gIYVg>nv|b}1mQkN9{5lVhTQi+VPAdOXL82iw zr9Gru3H}DNgIP_-44SJC)JQpm!(55f7^%Jj3MHV-@8~II!_lMKuJv1hqP99<`x8D1 z`UpgRkUl7|N7=Ef6H49{OHzB|4n5~hziM~Qb;>$W0vFvfB(OyW(VYXQp!4ENZCW$_ zWCO_w{@Ur4645=o?L4}Q?AMPOTW|gmbqIUmdUa%JViM2kRO0IkSq+^|Yrr_?4f$qo ze;=e$-{Rp7rjkON5Zc<>f@Wl0eSIe5VLZe@@&FMN}du_qnQYZz`Xl@ZbPP8+ic(9i5q#RZUH89^}-3bsh$l9UL4S;D>`0LfNCv zWS#3(i9|LmJpAND=NlE~UMt|usHst+!wL!tmOlcCn`bKw!L-!$EJ=~T@AG_knM|6+ zR`<_NVto*moe|?>&Wxs-PrMz+x=e^}U8bTvM}mjJL1Pu#?8qU`pt3V8lo%h(z&G+L z_u9!qZ7JHHn-8BJL(6xKkLp`U+@#*46P8s0dzFTYiqn1vIj}P zd9Wr{PSAlapSy0w9*XwQkxjIRue*Gq{7q4C1PwW)yL6%+X5S@%IwD>QxB9|o#bf9( zVaJED#qoJ!;|Ue^z-!7tuXdGs>8`zo0Mb23);`V~0w%Qdo~@2~Bh00Vfd1KNjwU%y z_^<67hUSRb(>3RoFN%q>B<%+vp9&Q@iuR!KcXm-8EZSbZ3RN=X`qJoi2PM@eh+Wul z;Tf4|*@eYXA4<~8Gxs@uh>)T$P0wP$s0iV$M$85reNiL*MbOF?{mTRb+LxC)iwueu zweY;QbEM zxE|GPbgRi*Es2hv7))ToO`KOVpl;9)4O;tg*i)=)jL}i7{b*=L4L>WVG1F1-J20K0 zpb*(MBh~%z#N$$tsLhEaB9EUGc4^j*>b=dmeIEpXV*U*>h&l3ATJt*#zPr>#v?Cxu zKt;?UvnrF2X)hInkVL6@8xlXz429Bo<`Z<+h*Sk1o?fVu98~N2epKG+Lo3U~5%AkuHMpi%^4a%*WqY4P;((Om06r*PIZPT?G=>h4w7S9#12va z@GwYOmzS4gKnE7QMs;DP*r-S@!nL%t)LI7Rbmi*@pT7n|gyUsIYa3bbWLsn+f#P2$ zEU39(A|x>j6-@z7l1d%ONN5_Y)RV?l&(3o$u-ECxt>zKM4IC{uFHBEwZDV=SNRF=d zj|`L)7BkkCU0(Pv`tt_;z4T}h*5SdHwP7bg;$`)97x4IknvXEH3l%AGIYrIz(`oyU zvCx{MPOe)#+Gl5mOyp@wOe`$Qz*l+o1PKSBu*nzZ$rdxX_bJ3&7I> zJ`l4H%-8$5qn2*LX>tNjQ&1b!%O}mxlF%4l-*2pQSu5PkQ-`gm-XC^|DHs~+oaq|; zuJ%pDziE*Zcyx1f*mR!Ebyk`qKdPDQoo`iD7k2d^|Ird-J{>wev0-D{MpV61`^y3E zl7IFzm9&mhZs#e%lE~uG=-Zp-mF5>vZ=c=p^YhP+z~czLt_Qs&hEM@OSFTs><2Mje z00W8hXHpv3EuaJjqAkq;eB(1LNKqwD%_wbe8%AZ4pV^>qj%|AEa*L?~AzVmEDOF~Z z#H6gbIkx$EHAo-gbA&*HpX~o+SOVs#kqFeIqLx3!CjaFL6R`rMmRzZoR_lkj>N?jO zb+v_E9qtM8jK~4l(@G%cKu34b1&@%ETx5P4YozWzN-P9P9-PduK}BJp8_G zpcM2T9iN9n!$OF?Z#rmDE3fyj4$LL^H)atDG%;o~PdCX+B7E`BllyzEpZ6X%TEmvK z5y$&jq1O2kJO*S&;loF_ZWh`;P@;nF()?POWBySqZ`~pP)u;%A>YN7agJcbE^Z+yg zzehl~Rh>@R2PM9wz|!CZl4|rY%srVw$~vx=%8*>zOXUctzT*9aida%nV<#$e^`eA- z(&U+)>pU+nMY{hkw>8uMT<+BNcydM=#*Y}uB8w3R18cL-kOniB6(Sul*wei!dYj*u zP&3h^Uthn{#ro$;CiZ3MLEUqla9`cbJc9mueMFegu@Y1yH|%MJBBhea*B?CL8C-kh z8x`MwbHx-Oa54z`X4i`+N{41F;vl1^TL=B8G?^}^_wj$$i1>NES0%Qv6N-K<4XljM z%e)DR7fsnK_(p1)Ssq-UjqzM}?kUENGoTr&xs-84r2T0BPt=F=&W*;>sLna$`gZbu zw3Eyf+#mIG&vfb{Rexat_4=P{o|g7_ZjtQ!Mb0lboa~MIa&$Q8n^(s%F_<>aOyKyz7DmXo2clhD7%1AA~J^ERjq(L3ad}NI*SQ zMoIVfO%g$T&h^*I{`_PRn(&W)MHpgBEGtnBB9sO#3orHG01#RIximlq4CH17rlce; z5}hYCEMClHoF{mkNZ?BRQE72XDpahsWsbIgx=8<#pEH?!`$!7?A}tq)#gsn_eYnUg zDMdM5vBvcv;V~&=g+PeD_t#L?h|dM;Ee9#~_9v&JkV=|La*=Vrz&?5C-a)!Mruw^8 z`~t+{Q{LYr*n$1h+WGJG8eZ2E-%Tq4Bfhm}u4g1pBb+IzWflAPy|>Ua3uXy2S+zaV zh^uDi&&YpUccdbgv@3O|}Cd9>EG zl=Ochtg5PLr+mfCHzYl7p@+UX4W8P+G9+Q705%%viT(=pACaEx=PF`x(hObH!@?{$ zDb`L+gtZ>QX8SDZ2X!1C6b2p-2E%Im@Y>=KQ}Zo9x&qkvDo5I`*Zj$_$-fM z6|+J|OGN{6&4~CRzyM%qJQ`kw5XFE4k|Ad7Ma)WTZj0#&1hA1`b{zh$F|!)<*L%RO zAm}HD{@_*vUZL|yAmETk)r+d?R8pvD30_5kC={@BIerN{7qG_oXNU0x<%dGOvch2p z5;>O3Jl+CP49a59QiDL4ZhejQ-}NDSULO_bdZ#_}LTVbzWKC{*{ZM7t`l76lve{;x z0|W>f9$Lzp#j}eY^L@Y2k_gLGkAjhoQm@;(phXM*Dmae!3tIcUIQjE@gPqTuiITnj zg0r&#4x1!T|2VK{!0)VB@#0sbQ`!$v~!x$5F~9rr5R6x7&!Fj-6o^RmsZC z%Ep*#8fDRP{`<41HRs|{2Uq;ZLFrcxGfwdd(D@^?y2Gic%eNLw4yq@{dcFA%A#wgX zRa3-@!&)VYjTIAV7zF#Xv*f+qmvjn7Io#FvgQqco7Sp~GSh+oq;GSjyaEt(&eZ9LL zG6es6GGpzxkrB_pL{G=3>o3;xkIFT40kYTj%X)C_UwZhoU#l%xg{YU!^3FyMWMWpM zon8ajpU3A@yaZ2HUe=MG4l^OeZ|7Yj-9|Nm5iy^b(Jx3qbA1aBLw6TnVeOCmVoPJ^ zYevE6C~r6_IUHeETP^qf0`lIHjedS`-sBS#Pp7FY+1~+>Vf02zGC+L zB=@gk%)1h5%9IO@<#Xe~a({v(E{wOgX>$>xoQ+H7dAxt29K-Ky4E>s;6Vlf{ZTI@j zCl+pAc@7U*$x-GBXT}Bfq^)gjS{n|zh1KRE>ivY*`>EQ#{1&>Z#+_a7cjE-ULhH@) zO_X@=Iv@wmSGKQ#4rtJ)^c3k%)jMzHdJpk&0!1zaS;vy8uW!g}AbTtDb5q<3psK== z2uoAT*v$XBBLUsZjVwyvYLv}Ty5ccV^am5OBo7PwunQ4b@&!_3-8lz`ZOT3AS-swx zRdTrjX&9vD*Z(m@CeMaQJX-O4ii2jh{A(!D6M{=uOcSyEB*LnC=W87SFxF%C-3Tp{ zycX(}unv~Uf&Gz$mZ6fbe}0rz+;_T@-_Z(LwY=%B+!9X*4pET}WRV09#}C^`9u;b- zmC+h&#VWrM&N*AXIr+A~B~fKdzzK3Qda+yAt+;nSw8B~RJ%;~w7v{QnqfI(Lu$=C~ z*HAY;)#Y_d@$mbjLf=XgucnFXiE59P3SscdB{8oL*uYCe@C1rZ!E9gKK}|W6wH95T zK=bRA@C|Ks->`5E@gtvSQ;+6Hbi1ve>?5l?*Y!qR)PHpS32_&U1v{udgcXh>mPm1) zT!m^cv)`DHN92#VKMg$u+_IV#rxVNdMtgGKA6H_d)+ehmyO6x{Z(=b`OzDkRg(p+$ zeX{+15@^hXv&m?NGH~y{cYtKnO?M7ASXdle?Wn-VH8rGP)VvPn_}Rko=j~|D0JC!D z@!nS|Ujr4Lc%0znQpkg4|3NkpN{23mZw)4N8ayn!(htwd3XL&MgNmWxjwZlc@}%nZ zf0d27yK@gfpxNmt#1C&6rVq^ku;Rl*@v2o(Txo9oFTvv|3v_*Pa7vnjU|}cyxsir! z&Z(r|kf!Ex7R3Z%E%yn#iMeAv7EPL<^8lmg(U(aMO32G}lYTKWTjLyZG6Ub@s z^00GRW~>C_rlP;)A-{AXVi3_zGska$RsQI*x7E!{n~c9ZvWaMEhsGp0Y>(uy*gMs;1S+>ElQfrR z{_{AzYy00l!k7?8W1BKLp+nr%Us;L6!(7fNDdfsXmRAiaHa_RaHGTcb#W4HzOk>}B zhB&#D<|#jeesq?2elfL&{7+xvt^IzoO5bq!_vQ`+_DNiT0@?1}Zqh5Zo}GYQn&03o zr#K?9HM~|o#-ROFDvOx>g~F)Zxd%4%RCUBj^E!y|wq|aJ~?$=z8>5Zxp0x5GRvvw>B)ANbQAG=>^!{9JdoBF(fx`hVeV<+kV(%88c;~sxL zaHCJ}e*N-y*1%txp?eFQq}rxM>WUIELdFbCqDd#<{I#pV#P#5!aYS{t(}sTD%g)W2 zor~9Mv@5NyPGT$Q8NOQ>A+sir5lX*FTal%qC`{oPi|ffF>ZQZvt-ozWHHDKJ(Yiej z=-!GM$U(3Y^uy{&n8&s$jT!iH_>!4zqscK(o-%W5#dDCdcUb2UOUP4n<9iC$K7{23 zSv_no6ztEEdWXxB?=BaxPj}5$clBypup>u}t*3#o`N`MkZZ>E2zqgQG-D$V^ZM+hQ z$c`$%H(Wjtcr52jXEPmTX3QHA8}T%Mc4{bdE-8)TaYB|rc0^yauu|f&+RrIHx;FR8 zw>;FR`XEui8HK)-#^dsIw27dFQrZ}ytBh(O4G7!hOJv!p99A{t=&hK{8s{ISIz zkYI71n^8i9nlIVk|Ni4^d7y=jTkkPmh1J>Ji1Pl0!p%#b#G|cEeR2CSv^*{2fTS4% z$mnTGbXGFJ`Hph##NMP~+4Cu93jaMNsOr#;gvTQii{qBuy;&LSR z+sFfd2w#cJh|M^M|k8XC39+%s0*PEzc`^eu-g^op7QxGK%DP7ERHOF)W8`M9zY{qqv z1zr2z|9&Efcsw_o_a3~<{&r-Q4rWW(gGrEHnWGD|1{RVTybpGhRaudLgjQW!!h>Sm@2x_p3X-x0md}Xx^VI_S*CDoH3*DP>@X+p?2PXs(~=s2S&<@tVzKw1 z?MSdkJeFR?EMnAm46LE;7`*|*dtY@+TC=5d8(-m2$3mbi_RWD19)8&08+fZ1&oNs3 zKQZcFs->IsAa#DW$q!13Vc#l8TgRRn(!7<`9Gm@akdI`wPU8c*d)1@?F856Ae;j3Y z3058&^6Rf^dCYMWrNZD7oC35*mgMrN-ionY$V*PNyJ1;pRIc&r7auG3uZWd?2)X9h z3cHt*tIPa8wJYfE zR_><;7v4$F^x*a)zV7`EpQsj@gZ81yEoE)K#lPJ?ne)+bcFU#M6U9_j@)Fa zLHjB8$SotY$J?&>XY7SU25=_>2%|u6o!1O%XLmp`4ngxxc~2ZvpsdXqp`hWJFyui-$=FuN}ahij0Hw}0}tbL*WMAxSsRrlo>_8%s@LkJoi0@U#l}!-hmC zZ{oPHOe~p_eUTSS^1P_gj}PB$3(zKP?d|HBITny>pS?f=r^(u+k;_-Xre+|l(~vX+ z1R9>$u7YhY!{OW@pI9BHne;ny8k{>iWGCSg{O`a9y`mPo2YPQn?hbivy9XW1SSAX4GhZHE%59dlC{kn zZLfzsvA7crV@d+VxVVRWG9gc~iyNIahXGMsBF=x7>lRwG+ zAP{JWt>kXvjmK_fBp#0+<3R?thTbYvMkJqvF-xkaSH z2NdPX4CVLIHWyyk&QvZq2_mv@0v}v27h7dg#YG8&937w5yZWM&7gx=E;BJPYI=Dg7RM z0U>9_7wRt}$Bc}EB6yzhgP+~-q*OdUsn&PX!F@{a@^FUSP6Gx^S#zh+e;r>-}quDyZ*|a`1B?vnT~W17f+f4 z{d)U;tl1K+{Dz6B`##kiqPM`mr^)}q^CBnWdfEU^a9L-Wp5_J$s7#?rS-J}ukrfWa z`+nIH+fP9Vi~lv(r@D=U&7HRxW3T1SIyJ5}UU02Fc1Y^r4!O&x>LF>qPr4E;qJdvu z_!{WO9sY`1BULsw>)(tpcz9VSC+G2jZD6uZXXd^OYy-^|$2Y|IyzE9IKyfLx5G(EW zvQRkRHTK>DUGFC9CDFVDm6UV=#;Cxvt$R9 zv)v_GEsth%4_0?R+Dt^ZHY;90>m?Td8V8a2ZXkt@;Py!3#yy+Edy*&tfAiq>*OU~; z2NDE;ZIiuV^h8D_C6e{roD~NO;o2IFLRO5XGon~WSUoN`_AZ$kt{^}k3oqICkXA_B z{YCm(j(hGy96;BeOxC*g3Euy3Us&#qce8%TOlHm3oYk6aJQ#iw5x?yjJf zdSf}>kL$5Pe8R~2+AYoDEa7;valTm}5a(-as@rX??FM8VAOYZptiG=FiRA(2B2jy# z2_kMP+B@BM8IvC}XwcePn_zqOJ~xj7?0l8*5H(IB(3y4FmV#?AXcCKze0o^Cf7W_q z0R#oC8oxA1XRC2rjVti$=Cg59OToL*R|xo}Oi-bqssAYU{CKK=5Jv%b=?=C1C^$U? z6JFx^Epf0&_{E5SIJZ)A>%l4;a)M;*Q$t>fQIseBT+!N4CNFo?t+T(PZD9rRZlI#r zkEJ-zIQotzYWst!itpR4E20*zC;J@@iO{a1#%Kz&nDS;**W{`AS5M&t;y`G?&zjfs zv<(Yexc)R%^kW$+s--*Zo_TyNCsCZIs7C$e_OX5|vCOM*d5Rb=ES#5dAF4%KLo1!s zI7lHfc4T`zTyERqm|E_SW8rcK5fEl%;th<%x{!)aY=yF#st+TOVeWW655RMNI6wUS zhRmEuu2%FYtB{vKQa$H4r8V9Ig^aryP+sJV z^>RBk+AuJpf%uGrYICHuX7?ul>u_nY)((MCEt6NChl55IPvF%InkZW91H`oV`eUL~ zTuHEZTbsQX@Ga&gn7_nAj47(fRzSocoS3?H_4f6tg5hw`2TXzrQw{9^=4%ub6abtH zGk2RCF=t&!}phGvPlTy8*RPLEU>m@+FF)6tg1W8{n;GvFJ@r| zThl5&4CcT<%8^)`D&+fw28UlqCqLlmYi9-0ew`i*JXp^oBcTyuBLrq4A(J9f%K6q` z8bLxS(4>Cu6Qm>_yr01zb0c@dvM7=p5vI8iIos(Q5yNA{l+3BEv)m`U$1Fu!Z4}nW zp4?P0V5UF%$8ed@ypf(WFzwjru+c$!@q_>I=>2@+lNJY(s%}O!Tx;{}@YLje^uTtB z%3^7B^~RK9XKO3^24C_Mud5Tpba%`a9Kk4rScex1XSW5EMUz)~O4lEp9xBIa#9{l9 z4-=&B#=Bn=T#bX{QWuu~d>=j^>~j46cq{Xz0n7tb+05^LfT9atX9;J6Uk;mvH;Vb} z#}5(XciucspjH##hmrQ>+>VrG^g(=eD9U63KR_3nAMk!go8~%SZgFc$lg9 zC=OWy(N62It}rA=A1|a$?JDgK0{MfH@b8jBjA_{>D`oo|*c_7|x1O}>vzQ#qYG>V# z&NZVcXt;b3B1UmI=08SH8KpU8kB#!DmCQJ${l4}J9FV+3*Zw&*YtOc#7~6bz_{XZy zL21um`|+*O)y;$e)V-M=!Add(n%icDt_WD| zS^oYrwJXKut^40O$8^M(I_iR`#*$wUA zb|!Ey^|I!FHNcp@Ca|WX6kJw^73pN^{0n5VNL`c(8k8bX>F)?Yi zn!bX*>Z&%fms~$0cptxB>`ei)P*7O79<7r{6v_CJit>KiU{4~RUi=;Au0Q44^ifSU zsDMcto(kQqMZn2@eQPwFRqs4EIfadugp7mfeH=Bme?sO-@bi=)>2Zs*weOhmV(#c{ zb~kM4Py4CXaoN$pQ#{57-9?FMCEImtCAGa-*2+lBc=LH0i_`Hhm7ShB&Xn^CQxuQ! zHFnX*502kkBhC#Z-#L}0d!7|ne)Cyz@x1XqOPik5mYf#MJ7l!yT>eve`>n*)4x2_% zRNLGdQ;mpw8jFO@qw1-Zr`bk$@33;MufBf7FxSryR>?|N;Cq_lt%G4gpD9GF9m^$l zBx&Fu>5Yw=mQ7pzlua!=B6g?T#QmBg3GuT=r`9JX81W_LeJ2(r(%h+6=S8K8x7k}F zrSIVVioaAP2)?TBj2wdva41aCNTa)sjmJFXYaOQMS~<- zlw4_|BNMRcvVJsYwfX@X?W9-dbD6)O|myzeJS2MBZLWl4MA&*bu19IwR}o9MtD zzPMgH5Q=$5Eqe7LZDZ4+C8xW-2FPE;H#Q2sLB97*&MW$YFP6?SpENLMUJd2@%P12f z>l9CCpjv=5_uyipSm0O8TP|hNa$_ly7+(8EOSey7M1&MoCC`dUQ_g|{;T)!_q+LRG zyci}r-XBtZ!sbv~2mjIEsz#I_TPz}o(%O_Z9e&X>J~@vvmpBERWtiQ*{ntFsHhXEo zdGR^r-A@EjmB?Y8pV1;}dChsQQjDad*qlBO=-d$B+TMRdfcGHv@c9}*hEF9O z?gbOJwq#=GiZ0Lmev(h*KL67#$e|nGF$EQkJVC@RH0_zGD-0Khvbl|C?F`-gHbLj0 z=02@pKV>PlF#ONUvu=^THxs!@_$Fzq9rz0En@1|mbLbx`Yne_X-jQ;4b11%Dm~~$v zP+G}5-22Ky?BOA1|BdoGB%mLZ#03b|1bbTDofx-6ngk6=#`GapMqHvEEB7<}2=9vM zIOBLdPexWgo?`LpdfsWfyBDRk${$go*G!ur6%O!z`KYe$o?C3Gs{vs?j-XIr6cNIy zIu0Fhqcqqh{ee5Yvxh(cLj40H8ip!>ge8Yd-B3p%%(x4UHDcHT0U>55}9s-AV{I_otiLH6Q`u zu0nR$QY-7`Ue~lSl4I~;-Z;*sE#0z|^(vzYn(|N+dc~7=UbQ1oo&)iVD@uLSo}+nT zcB8t3XKmQ<>`_zB7*|=kI^w*{{FqE>Hiz9Y(P0#K+^_E)+jB+t1SRbESiCo_bPp#zyG#T&_>_*+gQ57fS24W2*PU!FZY+V1h>tsD z)EiI_{)InFCgk-FQ)Y*$%!W`I z7f_KRh2Y{XJSPbJF0n?~mJFFdR+ruBfYIvstU7-dcQ@-_qxG;>OQT7`r$lZ2Xk=ssU%z?;?!<& zdp`F<+l=#L;g%#)St>>|4+RI^7)T=LDi}hJ* zuAA+ur{shEh78Xwn%tRvA14q3+&Y1yGv=z@%+=SpV<>iQB-PrR3%H-o$KQKu9WsvB7Vj*?lFEj{bAqnknkBrpNA3EB8r{`wX2dV#w^tM$-!QQ+sHh%`ijSo8P&W zM%JE=&Oxmie0KXw))7w|A?^gJPc=)ElJ?%-3KEAY%y2eh+=-)7)P9vt2kBT1#ahz5 z>-ryCS$H=*4@z4XoCdeO>#9#gpFR@loA3VeEUjB~F0H=O9td%B|FFIFsB_TVuA64S zb+`88hO&oxcCcoW46CrG+$!LBs|kudqH&xkkFSrO~Z+7mGrc%hmef5cD`} zUdn_Vll5N@9qxBq4J6J6&m6HPX1SOb<98NCVa|*+r zPwvHarQ(5aU1Fk`p5}ho`%9%_PHPhy>e1UhGCF&?8weh+jJ-2*J-b~l{8hq!Q)(_e zY?lrVPl{%#uo({-C~I4`lJEY6E?DI0<4G@8I5FP&qrj8L@mhNX56tD4HY<#0?N`SY zdj1I1vKuhb?3RaD&iy4nl~ZbBiSh{bw)`iZM1FJmY+Hh>MW;?V(kZkO1xdKp2vOF4 z)yOYio{yjR#!+yv-cm=OGY05iEAFX3Jsjj4^WGea#tj!@^m`^hNS!=*`=rbj)+%l_ z8L#{LV3B>$o?vacaCm%!HR2{``_NEQUOj+M7NEVJzJs^!9cpy6F1hWL!h6x~KXG1r z$K{y?s8)`WabtUixC91tw2v%^5~544=Tru+P$mR(wJVh|X{ej1!NWW+^uFBf)U-Hk z&rO8z-te~4aN%ZrvPiBBf=%`u=9v{U+^d0ChzK%vAtI5s5JVOm(Z}y11qzqj!zsY8 zg+)NvjDGP#r1JZB)L}oqew~>tb85O~qL@AfGHGFjpJY1xpXgt`#8(qsdhQv_mx@jO z^W#-*Yw$R4bM$uHX|&I}3Ux;j_m!mDi7XoCy@EQY=gi^wj0cTmzpi)O%8m5n4?|wK zA&uNt^H!(pr~50L&8*g20&DjJys!kV{jWEjiyDJX4r1F+mEZ5x-^KD+#YsOp{PNRQ z+2M5E@|+G-8XsB_WnH#usvltJqG?blbj>HFK-|fmerx%WiMJJBVbp zui5a1Jf+$1VHds`%ak|P|JPpJlTc8!hG`S$<*Mj{B%J>vZ*gug?kEXXAJ^ z^Zh4vp0w;UYm@X3_cuN(hSa|+9s^RP8-PEOt!N{gOu6s_IoElLZ?pr6*b06)H zEl9wn1mYx5vHh^Ga$K+=SZ>)`tbP%?_bBd7seX7S&5gpe>~yl-jL0-II>y6freS7c z;$kqFeLLS0Kp0s#4`t_cg~m|s-Yl2hGNqTDd|vNUxX*FNYAhUX*J7+n5-p1ma&SSr zb?y3&Y%qF^yA$c0lGcRUxco=$X?jdBH*4o=NMS|sug8~~%jbQ0vo_w|Y)Mta3JW3L z&4q17Nq9KR>zx(onmwbkF$&q%mP`&Zun0~|bm4@373TA|9($ilT?Px!ka_BD(~GK2 zi_)InYPYtqI;gMU92_6x?Ije1NfFnln}5OQW1^s5RN>f3Tpz^GZ8wvyw9dUMkYrEy z?P%$EFpM{%n|j$?-Q0DHc*@_CzdXs#aDE3p3xW9|AzT8J?~drcvVMy64UZH z8eko`dSLLWybV|tB!DRl<35)|oB74N%}4bqW1@29il8hvb}Tj}Beg~OzFPb7iOiy` z^f3Tdf1$Sc0?DSZj`L=1BUFVf_l`5{=2PE>wUnnkMRZzWeWyVByeMk?khQ^ZA}T%+ zbLoT`Z=ah0yO;RF)0g7efrYyfQrWADIUc(D<&ix9W|a_lBU^zQTw0hJ-3yp-QkBQC>x12?H1KeI#~ss zv)!gcN))D$$=^hYuB71+QM9g&qg|oUjO>oP-Ym@sk97hw2sK<~bUT>a9fpOoNwLkF z$eMC`E1jJ)6NMRpf}tiJP0K;Q^J}uNV;h7_e|~3CRDnp%{v)GX-T~&r(`H9DkxcD< zX)^tv;CLHRO6Hi`X?_+G+@WN({I?cTyY&8yrWQe;Bvr{?DGehkq?H5aJx!Izbu)Rp zAA(x~w&C%O4uvWjDGyrQ2QIgdKf?55469CLW$El`Gpfo?cB95xlzRL_ zF8BF!oqkU^7y~(XHA#>sPtjiIhlPbTc>n{Xj~BbUz_m;dbiF(n+qJ)!xEko~)iEyt z!|bxBrx}K^y`z}dWO#mY=VDF{fDBMWI@j#VmbT}IdXozn5&MB8Tbr9O{$+rTi65P^>r(;hSlR~mEVAEq7y7GaufR-- zdZV2>TvXIpdfo5P?~fqb+L}=~DQE~c6z#aT|2P#>Zd|5%WtKior71scT32WRglOSa zv4`d3^|h}d$r}mlGERTa!9~}Vl#JuilmV@;PBzmcTfB|tH*n5#o`3qY@;xBy1fMjd zF^qRT7)fjL(rdCOW=D{yTr!75krEplYw6S;k18+O=6Anl-q-{e6~`*iI$u^znYmie zojp~2&DQtdHubmY7bjpFRIXutx~i76Pq|u%DZNkh?1RHbVIV7@Y&Ggwx`DA4%kC>VA&FrLX;W{qL#0bjD48z*}Dd(`zA* zeuVP#N@+FkrnUTsb^~TpKfR0+)SI?HS~qvUGRMY#{@!6pH5ZFECKcbOc5$=Yts5e> z;>p_nwWHj|ZS8949XVMn0$IJSxFnlNfP5}`@Ys=f@VuY$^|;0>d5B+pzK%Kn4W^;z zOVA4vvvx>$u(T^ftvYM@^2=eJqVj@FIgoI@YCjq;ltbGtzpz`5q}5lCrvT~d z?M!Fho1Ttnwe}NWyk)kXHxCs$E!MlW@j8l%ovrR~RZB8?!%}K^xan@?IV~yg zy7D1~9(f|St$|UbUN&8>(P4eySF4+Tr%!uxbF%yyut2G7w`TBDAaWHyd{`*GN6N@} zc=&LC2z{elOaB|jDpwS72Cv&e?YKbr=g&z@hEE^*_&e|Z+F#{&065P7aC>?STL`t^ zvo3G%``fFW9I^(P=W{=P^rf@~3xir=7KFImI5;>MC`e?@NJ&el2kKSHx7aTW)Xwu2 zd2ECYw^dX`VQ;evTr4@k+Gp$?hwA8Ww+O#`*9~e2Kv!Grs_?EqBWGMJGfL_Zs0zyS zpQ#A8W^jWUj6ev=QdwnFIC)}ro7DCS%#;N~7**(c4nXlTi_CE}Lp=BD!uR0<)FqYQ z^Vo+?$Qf$pEF>i-&%co#yJ;b5?_ivHkWJ-Kyz2y0LMqQP?=SQpLSC3Rq#TkMJ-A<8 zy6bm(6xY|g2s`d-xCE&$=Q2uUNEtqSIcQkmkzKns%!0%zG*5ob%a+zzFSy&eRySG> z{50lM=yVV`Iicva6VY#!!S1=5)U`rdhTP#u(){ChgJkO$pS2oM=9u^1RQ7cSYh?)` z)U~T*vF_8q^N55Bk$5bRibY1hCs$x)7V>8>uUjtrkM6%W*D85%ZpmNE5nfmBf49S! zAE9`+%NBajl}99nK2S+3ReHFaemGfx19x?!zN1~ahp)NbG&^yuE33*o*bg5WiBz{-^&l%YA6jxU zJ0^F|GCYJg96FkSfibX^*Ko~=Gq&XLr>}b0yQs~s!D4UW@LI}*+5eq?hYt>Tn}pA8 zc*3;vbxVPDmK&CyyX<1t;cmQ?7e;^x)!z@ALx*9ER2wHAA~(TWH%Z9DAFAH;aymzj zt*cutEFPq^P&M8njYtbLbSk(?R5DuqF&4!AzNBg^5|imWrQrfUNK{Uj|0Np*?)rM! zb>a2KR$2QqnQX*Y<>Vs(!FW~gM?s{OY- zjVuCUC?Z1M+I7vJYhSDk>un31b2BE}&PA`C`@gBJAkALPV3#g2zjGi zM@K2j3+6M%IvY9)f@w0Qtzqx(XtYw;>3MSJWzI-die(Vhrjb&4B3s8Y^YG<%ZWkCV zI7cJ!Ieoo)vK=EQ#@~INSEtE$%$1*%4WX34(QPOyj21>r`VPyHN?Ww@{F;__+YL_w!T(`6p1}{Y&NUKl(Ar9Be&+GPfR1FOcZ;f$4Wyf~Q;G>=Bu@`=VfUqry)_3Nu88QL84Dkbe=+xqzMVEg{lPt1oXKCkcuc)2L$f zMv!hSZ;tewxET11&nwQ5_)$4(y9-No;OSQuU%?w6`>ECjJN~3(R$V?f;YE$acotJ5 ztpRk@cM8|iDp9D}39UMbNi8vVUfuz)`)3ao{vE^gYxAir#nB5622&sDtguPyglsB& z@Ak5ohwIQvb#sxLvXd#>O?usTl#cp_%|!wLV4YDlHqyp4z+<{WnH3By`H)MXt`}E|*V!qiWV)RE}!hA{{>IgZ# z%|cx$#(eG7)fI{FEweUuIVPoCRe|qKa#2riA+$sCCd0s7o17#n z6+T0?X*xIdm;T_c(s?~osqx@1mA}yJROo~dGBGg$yLJfz2k8Y}Utb3VJZ+%k@V#9p(IhR?ZB0OF$g<%@)0xz$5)>{%+9)P|!~Y2jNPEOC6$ zdRTK0JIvQkZR!F*?mo5JL$Qfkh0f4#$d6)Wl?VQ2ob2lcZwd$y&dWuajGND;(r-4X z)l^n0G?Mc|n^aJ@Wvh#RK}di{6y8e$H)6pSztmz??<$|d(u<=Q{{#kR#nAi1eMIwO zjqB`mcTM%DZdBSSxy%a zD0!y8KQv~5(S`C7)`{?jt*o4oI}vd_@S9uP*l{qjvg5lEqmZ@+V>ciNK6 zZoUHQh1e~KX^Jmy*9Gt2SR3waZ*zTEfsw|c95xihWKdLW0|(Zl+XZeWcmFmqG+%ykmg(YsmeLDmUH~A> zFY0akb#fwGtrQ3WUXmY4zHO|)!fM-@FJs&;mE*9HhEQDlAQ)%Ld@asqb{<%XEAU+azf5gYbt*w~zbz^BbTy9&%s z=SKSXOhJ7Y`%jrQH7pIUIbvgD1@DieuizP+d2~SyRvSnX>sH>uBfkp%aCi&+2JL3* ztYu*t;NUVTNU!O7aIqp`wawB-f@Z&ujUAXPkCi{%xf{TQ7H0ZrX{>^wK{l(a3U}t7 zAvA(Jd)}IN=HozEdDvKjbg8%^Yn+&XU_=lu`bVC1S%m#CLEHaL+8L^#%;7Tepdh=V9-66S1m$t@GUOymjV1?0~{ zKC_0^zzF_XS>A*?()K*D^(Y|&b*Zrgk*QKBQCjs0} zn^nPpRBm`J2Q>Y*tyex90DUXrYAhTaUd}8ML7z1JlM|1f{KU)r4tm`d$mAj+CI-f3 zzQpOo*#mG#w_hlk@p)35Q5>7?f!Zs66n{c8>(?c!O&MKK*((uwL!?;TbvN_#cQ&i9 zs7Zv(Qsayt!sPqhrfnNHH#aCLNI?j81q0K#jvEkz@%mzeB>Yti`pW7n9Gp|>r~(ro zOBgt=+`A%H+XXhCVoo5*V~7M4a?xyDaXz<|nT==Mb!{4K?Udsa5L~?t0U~-x{D^l; z{fr1mNb8BBT_1(ZfvhfCn`YX1v6Em}NKpmNI+wDAMi4qNEZ;{tj*bb8`V5=gS-AO1 zLyTty+1dW|6YxXdzO9Vpqct}-+n7$t!|V>qCFz#<3X}U0JJ1EO;C(|DLkp2gMf?Cz znMz_2*~^kJk*R<~orgmC%(25}0WdyA&V3qw*0<5Qu;lxQnRFV{5R&cZjA4sypb?Bn zgb-IaCIoiqP*{?--U6&`Ci^9DB=0Qktjeg`Nn?kn3dW9(yRpQfn_RIIA3=W>zz`(y z>g7vjU#31Uc!tdWj^n*w>wJiYl2}++Kx6JBF#K>FM!im-y8_u%AhCOTdWwXEw70i+ z^;OhntuORe$-Zy-`3XAQ9AsJja;c?-r(wePaKylpEd}Vw0X6u%!opgCK;2eXMco`- zrXbJk!91A>G;B$3CMt3^x~KG?iA(>ORnME)OGVYei;9UIVWFJ4wb?W{RKJ+pVWRri zx?}Y>N?P&-qFU}f^qc$L;L(eqBeb9kVId+R)z;Q>f+;wenakGp{=@#huhn2PGZ1hM z^?^ntaO@ZNH;0u#AQI?qd!Jz=h>#idRS6BhjAgzxKH@`hnV}0ii7#e-sqoWj0^l+B zOWOF|i4SZ~db3pGm!~ZE?jA#CQV#-j;iYJ;Y^~UM9vaZcp%dGSE-5F+KpX)?B~L1y zsp#l*09%5doM2*RR-xC^Pg%7FqlvcGg)`^!aa@KWH3D zmtfDY78+)0wzpY&R!8bV!D`;(vK}^S7AY^IT7-_=8(4MFn>6=KM)!H35gR_uh;*6S zUfuWk4j)8;SI}*AMSc&BL{o-~2qQ&!ri*ZN6vR82uKhsL6GGxcRrh-9&mXU|8Fg?; zf#8@RjPmaFr5HTg_(!wskOQ$Qc{yMEo@Ah!4W===J}ZFTwYIu9d>hn_{uBn8 zcFXPy5)Q+WH0P6J!)mmhZ3<+h2FtgJ^IJ;NSY3jPdS6K) z^ZUQEC@QU}EdMh6hniaXzrJM(P=Twt<_J&U;XLJQD^@N%k=D}#2ELgHw*%B@Zoee{ z1p2m@`M;4RMs8pmxyjuIS*HtRjgijI&R{J+`id$S$h_3DDUN}6PxX5D&Y#Ih=-UUu zA}`{m4XEre@ZwVP@@{q#*mi#kS@0woe}H&4!g#g`P>hWs825DNENWS=<+C#hDSE*D zJV8qeP9MUIeD{R8$@PlN{9hv-{?10Q9l1PkmFzQ+=Z0bzq{xUfX=~Evt*xzb$`m7@ zGN%GPdl=3fwIb}kx5eV)P+#)Q-TicH9LKH?s=ll3j&;X&gN==Sj&F9gir}^_ShaBt z#^T*hy-5XQsU{*$K%pMRExh*h_t5w_$qLiURdF8{pc)O|a6`!L7^J@&C|Br|p;I)d zB0N@p6oN)_&?#e~3>B)9Y(69T=vkC<1IqoB5p-9OY55S7)B||`czzwRoybR5FC&{C z=4ui>we-V+tqvY83RJOhv1EtX$9~}DpvosPy?6v=FkSTRF<-EY5edbBOJNvYjYaTB z1aeqFKzKCarW)u&f>?CN=Hz?18ge_;1!S$j#dt3x^Cyvz{^#wNa3E+El94r}YGziz zbmr^h({TzBXrFpSukP`mcFM}=pzzFG5Huhkc063JM+dLIj9>H@Ma?<`$;I`MiJe^q zQ`zc9qP`hY007Mhqu>>d{T<&A13*^xF$KN@waS%59ffLWPoyss)18bGoBeOTSvK)A za4na8SH>1##dtI?~{zwJz;z&Bm=Ay+xYN^AU_rc)v?S}sS+s;20 zvI3xj^3Wv)Xj*B;c5+b;A1;tx_1K=^M{bUCF7NLVx$yh~8Cfk9v-;oI-*4K(%^lQw zUf2!OKdktGEbI7pyXQQI<)Om!55G3S6p`S*%)5Pa5S2_u_!S)Zt9JBpb%d?Y>*e9+ zJ|F7PhlhvXcnpDAj023^Ekcs|)>GQkl>8r7x`clJvV|T}tLw&7^WCt|VUdy2qP#T{ zme$sW{_&W9YjIbVFyZ!(|CQCqHdauBV@HgN)9FF1s8_0%7H! z<=TUSM<;-5QJ0gG)6>h4D>SCAQ&3P4+EehTbc2AgC=(w$h_sX~Zu5Um6#zIOw*!DD zS{rqS+J}x&U(icMM*!*I7nht!8FSkPBLXti&}$^{vO?llqoSff$t;13yr#A`*nyz# z7zI!uzuV@U@6u0%NRrhSK~ey7*mNjiVX+OqKrqQ_or8zO0+)9S=EcOKBC(#=alhd0 zDw+*@4M;=rSj~>muGzt*xqe;uTv&TunMn7wecSOTr_4U6mbkT3SE_vn_5S?zwZ|~& zOb)S&kcHP_J*IFKz|!Y*w2J`KAfCmz5Gy1UsZfv8Rg;W4ye?{@Lfa2ahGpSttme6Zc`B?>ZUGG*Mnz%x_lrV774- zy`RFWD*8w-FZ?;Il$4R`{|_!nP?}lYc{%B$ME&3nIl^A(F<1d=bk#n09t~+=svh9q zLC~q|nBddW(fN)Ix2>qRm`FOm2~d}A2o8jXh2;c9o7+HOM)S4SKN;@d*{jgZfZSj3 z_DCdQ1~6MoOFHK&Xdn?kIHUfVxb55mErTQ(7pg-_e(HIaKY0JWjRF-5G#i@y3-8lW zPWZW$G>}+;cp_orGdeOt@FPeP8XDU@*dMYuL1j_E+oYlUjYO0}GT+hq1jmi#UE!}5 z!`@HuuE`VPWMpI(vgflv0^H%?HK|Gi5PJ4_Agxgcw1CObm(H8kPGf?PU`{zUokmy2 z?kb=Iwp}EH_HOJzdb|4|B$c!)2qu8hzxgX3o?V;j%TxoDLdJaEY-CpEo{v{xgh|sJ ztHIC1@42M3Eb`FNDUy>3@B2qQGGNL1pG7TVbjXeyv}_mDqU13`R+w4zliOLWwPj{+ zN;{KTy**E8y-OKBuGNKF;zhe-5R}2>tL&I(KFx0)wQ11M%)zC)B{z;grxh!?bw;QH zwTMR=OfKgi4HhEi`LNgP%i@B!#W;+JihAY|)PA_WE_;^AG10HNxG;()Fcg(lWuVWK zsNG^aYP;muX&})v$L!erJ=IYZzMzN&yD0wZW_}!3)+1^-@-1S7c<+$?Nh=SE{HQJl zHZl7bN|gLg(GA9YPMhWtmt;}rfuqy27pPS~A6ntAX&OJ9+YjdnKvd=Ma!)mWl(}5D zir>FrZoWUO3>=`E7ATu_3$@5ZO@vZnYc0-r!YPFhM!ntM<+|y&>w}SFvMkAHcZUrN zI`XE`iG72q6?K-~M%7_7)+%~R#qASCeML)`DlfB6anmQLjGdEZKVr@t#48W9wNuGE zQ`44243Xd3Yeun96r?F`6pHv^7xjs%nm~BR6i15g|3h?%eauaBaa$Bs9oaWW9!_iI zH+CLCmme!CyWiU&i9|#6xjTKRu(RG!CK=Y27i9JInzGmz?&23G3{l>~Qi59q=7p@1G<}YU037KSj07xTO=ds3zY`P|5wWbji?B)JwEqnyxCC)| zARR#O@o#5jhJs;*c4HLc`J}HHXs(CSB(T&%S|PJu2EWrL2S0*1a)VbR)Owg3Es$e- ze)?|P`{HnUd0f1RO@s2;LlatjG5`_0Z{G&{?gun59g+R2HkJ@fb!>3iQ!9DsNmKOB zc6+!x^gZNuQzMJ1p`>MOoiDIQL`Hm{;>S!yyd|f~JvdKUg@~*qDE08fJ)QszpKXaa zevc{AOZH(3>R(|R+4vooAm5TE=X`}Gf?-77@bcb(N+Q(JfjJ#y=|&jjl$6TDfMte~ zd_Yg~)2B}-@=Nxhzrdyge~aS|_)Cvf%1keou6x)|XXad;K?%CBR~S--oTeYKuLY@2 zH8nLsb#e)~YyD<#XB8~SEM$iYZA_OD67xH~#`zku1Ewn-6-V0u4z3whrHB7_tN>#^ z$Y82oUAMgLBvFwf@rFzSFXM^zhCdHYNkM@rhC6mnyl8G`o%binFu~U;Fdz8lFbI9( z8XUXJD6;K&`^E3vTjVywfEox$LpqNK2!th`+QxA3dY;?-jBGm@rj38^p-*GAb&GWN z@GbTYF<%oUxOQl&E`kXD=`*4qPmzk|j-p#Gbqz9RV%FF*+32{}52nObp(jx)&5*I56HF71ci#3T` zd8nM0BbENG3yoF`e~d9)t$48vF|WYTB7u6+k-?~Jf{vpMhH)#->9jSyZSg6^i+4BLBCD%ZV5{iYq7{1 ztl>%gHweT5-iWybVqlK~%C_@vrqMrUXM3JfONjSp zapMvf)$A9@EegG&c~67<731R=s@o;7|OJqrNZ5ZdZtB zKOP~Kn`pMWUDcPGg$MhBlQgK)Oi9AX#$R8@7K{Vu0s|ug0}N~$lnVB&O7mDgif`KN zyN#P{%AC2dgY#suN^8W~h2ittoPAYM%1TDVVJM8BLj@~@7Mgak%=tc{!83a2yd-9E zjUrF-tw(d9|=B}i&l5u(|M$&ZXoI2u&)x_D_);5`$S(K(*5l!Sx?CHHePiE)z zm1t@^%|-*7NZCV0!|(vy&1F^;IQpVLa-hS5a})a+crNJ$c9`ZHB*?X}nOiQ-b&NW7 ze0*eK@{aEWpAJ&}ZT#Y3R$5(}`Zi2d!7t(-#A70HhseZ2j9kZD#=Qnq2UD5i7(E6W z^6czY`EkzybvDc|msjs^P0kC3T#en_E)ZrO{6YA~@;SF$Eg z7>QauR&g*Edrd=v5Q^r_JOtRlj{EC90GNI6d^u^Xc+1Fc#57$`mIGnG-on0AxRmnp z{)@8e7Kt4$7BLesR;}_tqCN&RFh|%p?bR)|t+grQ3T2>^!7x}jx&{|pr%iU&M1L4{ z?+Sj!^^PWJX%SOB_9jZii}to}`SQM9_5R#yw%^4qMbx<=MzReSONobN6x&*&u<6_^ zX4vP>-ofNMO+mzSDsq-$G}E1mZlhPqWAQ#1EmH+n;&{0v&R!)5mp4+|Qh_Yuty4DG zim^la0*JmZW_(+|Z|6jWQkXjvmF7fTxrhIac*h&-lcXHmet+ew-dKN9e5XXKvY4rv zfm3J31^|9xN3GNaFuRkJlXHg|JD@V zl!i@e01nA7D45cGiUSCw*K)9j!k4Rmb}9?<;hQE6ydz%2!T3q2YH3;3&V%`jSA#20 z058|t(gL!iN#B*Bx$4aL_#hsbyS?r0CWrM;Ggj%G_8G$2E6RpgEk1YG$*ktca3Vl0 z8UXf5Ul_EIb*>WWj~_oKGU(Q5(1nJEGPWJ{fYD^d;;Tr{L2oo~y>R_&2E`o);9Vnx zfk)D|B}zD7%}gkqo^#lpON7|6xUJFzv-rvXjg;BN6i|~x`ZRVh>&hyP1$$kLPh{4~ z>&L2HUrs2E75W)nzqoJFs(yw&`I7u)5nboU_2G|SrOu|L8SC+>JiS_QpB3lP1bcVT z>C&2GOnbeP@_k=r+)*~$Y8IG8adPtYswnW!@85cV;iMN03O2HhALe4m$(4rEo@+{} zzRu)vCKvdv@<45zUT~1mx|WhaDfM@6eciTUZX7pfSVN;qhv77vZid|@lm>L&b=Vb^ z%1TR1OAgg7i2e}3&5DUqTri)@YNsyY#v>OHP`csMJI6ckW2Ico?+FKt=FY)E20$(G z)YGEu?Qq#6$UIDz{_A~gk->?HD!ay+^gRyAq$T>xN}_(u)0k=L=)Qk+WL=1^GwbuPo0q zD)Ty8%aD^|vX#HKm1fTOg;O=--fs$OKk1ld#)U;mEuYT*p)~vB++w=5y?$wB3wBwQTpHWp{mcTVul`WpvsdMld0Tcr-M|+TYR<^O zkbK~cNcch%Sk!?-N%`#Z>RN-YVZ_u;>?Cs31~HR{DF z654UTm1}89ZZB0%f`?0$msgXZDr?E@sD~V%7U@IP_4WB~Gz>$gHJ|}@5k*aLbe{xojo{U;#98KfL6H{Cjyes}6zK9Yds(OAm{zd^v+B!f+AGi{IC;Hfo||KdUs~?-Ko8 zy;<(3`(G&sZ}0LMD-=XTxl}%SSFg4`KKD8j?~U^ahfO=h=hUG0t)NtM7?r`6W~N zYZ8kVFm@tH>l2gtjdON|vz+MCEve1lxTX-jZizZ`d1je4ERTl?5}km_Ms8CX8*}7^ zaFvIhkRhQKbR*cnhmXJ4F0;@ZLj$^y?+*E4V2-Hh7o->&wKY^6AMW5+ICe`alj#e# zlfYL!KBqN0lEg;(S=KJwNxU<6(GdOT$u^Pd*H65hHfq)$9xa`nf*sW2Z=zUrxgLm? zeUJX^{|Lo=dGicz#AcHLN1yNGt%a^`q$pW>f`IYl+J?h%XpuB1fS4taQ-shCHfcUQ z0bDE$3}4%90lsqLyKF>M1jO~YuJU@084gYrskb#lann#o#AtuGTc>uMfs9X>#oo;x_a5a?yvMOeb!)tMdSU&}%*U`@ClUsYuQToEpli zWmz5XQM20OT#9EQMaLt{ah7{*9LRzJ@ROWBt*qHFLfKrV*dQbk;$Rq}L^Sb_ojO3a zg=5o4hlO?f1o^Y3HZL~Pq7vP%EzFFhr;FF~*zDAN#Y?WmLhO@)gMqn#2uo>YRSG_I zwXa|RyCcTX^^Iw242dq6J() z2Nw^Ky@suti;B{R4+s=(_%3w|1I7|)jXP)A*@j3s^eD)PJ;$i9h12ZBH=Ey*rw5A> zi)Rd_6DoAt*l4NT>8xHtq3%xXdV$2i<@@|w;|o9}!@#&pwtSKbPewvOjJu(}BLAR2 z5CwEl2h3{w$xXhQba>IY=WPy1F%BAF6@QPGfBGRC41%m{q{8wyoE-Yy&Wac*VnaJ+{&C|JS(0SSDE#AC zxj|T712-}TAmiL0Dp<**1y$Q7eeFjdz#W{`vCbT);X~z&6V`8H5K-1G26Y!X$;A2A z6a`grOxdB)QuQz%-pC8_Fnf$>HZpJ52WXgq!p7M(*ITvY7Mj99FJm!fdC`f7k7Fy$Tn+i|v;o78LNA zKiNWO1*J{CkpE|`j9!84k25Ylh;OJ1m`^}?a0Yc)E~UWWpttxj4-+E^)5R&)NZN$~;6d#nD=Edy^t(7ar@^p_V()Ivs+ zYggvq(xRV(v*ZgCrtqb9afIIHIoZ`xkQ>6G0IV<3s<)`2O!oB~nGt2~5Uv)!z30dI zfrvKIC`aY<>+XLo!1+gV(q2)N!=5qLZBxUOy(-Ob+Xc#);}W&5g_hlTGO zqSZyBV1znrT}OOG!j6oV@B0QI(Ggp6EOYTLQ*)~??AjDCp~ppo`g>+nu;yX6#AU%A zuT+jy22j1Noq!`kik1`i#ehgH>y(yHN|H}~o_jB_Er|P8OItgNnBToomIMo{&0_Lo zVuFcq1yoB}uME1kepc#&w;7WY1lF5zeEh25!TBa*v0Q~0D?gs{SLi9Df>TDdEgzVh zq`6T3G?+Dn+XfkB*W*}BilHi&8KZo{nR@l{EHi;RlTWihQL^orFZu`=_Wkf`nW`ox&9yE}r#f?TrMkC?Vp82h&K3>{x zklLbkyWlz3=Y!md;p#;)GG>Y=Pk8Y3%=}&;58ZD9ctMD`wzidpy&~1q-u-ozBU)pu ziT@g>q+BwW+dWzE(>P4wOz>olmkGH~{~mL+>y@Kw*Enwk1c$>0226eg50_XPWYw}V zpdt7q`WHUK!4nt*bYP=S|7`SV+XR{OiDP5)81a+0Oh5EUCJdf2Y%gXH{T?y_7AjG= zUX(@Mtm%HNV_wM2ZMqg;jCX&Jc>luhX2&_QP@d#rSJJ! zU#`n%2(EFX061XqezWK2*@6WSDT-CFnFUZdai3aFsV%hGkggtY3;OA)e$``2ZSBdS zjCg@K_+I2TESv#bk8cr7?Hf;uj8;=kkoF>DzH zbiH#$$#Ua9aoWjXb4IbI^WOZ8+*2pV*uj(+;HS1Nc{bX;65vAYbzCT4soQQ-twAA| z(zbh*_!4S0LRDu^7?DG^b3#wn5*$xAt*J)u5(QXpDuq*{3@AWlU$o2B_q|X!?sca#8tBc^=p!b ztX$@L%oFm=zpGHiZ}Wjw4ft%qslI&!PE|#E-IkH@nUbs1Uk_U+k$e@h@b}+@jGv%~ z2V2`uFW59p9C4|<_@Ju%ao*+t5iyjQ;AJ#EnVERt>QOdqBP}RL-r?}o_6ZQ7T%)b{ z@aV3`ionYe-jv8LTOIOg)Hxqd(FFnXfZ6VzhGyxA;2!(U!BRJZ+GlF5M$`4KwOQ?Z zB6bk@HL$W0WMUOhu(Xj?Rj`kj?o14-cAI9wtyS85yKc^T_qu-0~VK4y~oH|PUq@Tb$;X%qAQkyUec1hOS!cw>l}hE^IRX{e`Kr&tf|7`5xbRC{?DYLe zQUs%X>gJETeTuo0F=;Fg2e)E~&ktZ>GKTtIy?O;YtS^Q)jKcd_1Q?(p=HF(~Kz3%} zm7@eIik`?id$2HFf#8@ai;AgOQf0e$w+&p7H%p$1YZq4k^S}>JAO>vPsk>6P9M;al zJULY12?c-5R{Lwy(+B>CQmnfXkI_6uZvG5?xNIDy_2i@uy+l-(Dx>OH@?i}f30@X9>A*Tcc1fblDO|Mnw z{83E<*N6fZ1e`8Wm&@AYA!4p){wp+qoFwj|j&bC(lXH`fdNEo#Z`1I3j!j=M==<}G zj^=?8GXer)%C8^SR9PS*|03+E>csnAg3+io5bScKaqM(DX<{Wa-5tmB>Zk!T+2gRZ zu@+7lO;TQ3n%%<8?=dbZ4hVb>p#AIXB8a#|2{G~uljUa`BtNemi zWOeRWS1>1sZ?p8tfYGY+xuuoOJLBA!l6Yy{JVcd?WwS*NmPtL5L0n_b_qT2vrof$X zIL#`Dz8`98CDhpJPR#W6I2$$v57$L&6I?5U-5<`uPap3VoRx=3gfPWAi94>2>{FO7 zST7PuywT4G-{vMuN@wP58otd9ea=A+NEleeX2rq6AVQB28vc-(B6Wi$uEIGW-j{u> zX!9?~me4?LH<3Xb4=3~UJuKRw!_wd3lirYyCf74Z;HTNx08~}|oQw>vbYK9I6fj}5 zr_`smUbBQoYg__ z#`#*kKywpDXuLkSsW1jHA9lc!-omde<0E!s4(zg+ z;GBPBqn(R6^-@ezMM}y}uf@Hgb~-7Ih1qE!?lE8olvK|DlL!fpc066V=lFlzP#;jF6#d)U( z#Kn9J%K=Do+*CoPp}Y-2!c95cN4te=@>uSlq$## zqu+P`>RTzxl^vYFK@EKRw3n&<6_ZY4HVBoYR+0FLpQs~51J-4>#=X_`3IKAgHG?A8 z{lE&M@o7Lj>Nv0Ny@9V^fJ>J7Pn=j=!}Ru=NQO3Kh`hi_0Sh8Q7p!w~smD(p#g2<1 z6{*r`%1qe(lxX{X&H_T>mvu1aQrk>RMeboEO2|XhpH*MKag@ziYL^Iwthx=3ZS6z2 zf_r@7=&V-@GXS!WgX>V5@$jUF7%bAo)Ll;j0|OEMsQ?m=gWZPBw0RrEXt@C_)rr7r z5&J{l_-{oXS^2oQ-cGjCy|$tJcEjW(-^0nC0)r})_jYP5r>CNFpUl}Xej50p&I2oI zo$W0rn%A)eHY+!e+0vA0DTVyIEoh|%`OPgbDnC6o5XODMrUWDFQ(W7#M>Hke7g&+LQCqW?ab^6nD zbr>NI8=l-|uv+W?uDb|ivM@|#pm+!a!w)idE(#He*QRd9_9$g7cK-oSpzGy=*@;5e zmRdDBhDk;ZmhZoIRTuJe06l21JnzqDG3GLEnGI2_byUoBd(~kx+q0df^}cOI75|rM4fdEb8C&m=F=0r>~vI!ony=Ko~fB^IANx zqqyRSS*kP%nIxnA*i>faxfA|N1(7&D{)!=K;PU%pJ; z{2Q2w9E~#Qur;3E>~L42LN=Nt;H0#GMFJslhgmqRXP*f{^LF^VyD=u0`)0p;Dq@HA z_U}(KE-~Pux+HrK!L4b6y7;%{Z^CMpmSHX($}0LB)A4%d8^8;I$);Zr5Itrn1UgE&?e_3o>? zPD*O(1Ef$;RVDtPu~~WPkX@rK=~-JpG7BzELZ!A4^~*x@@9wTcj?Rx3XB=V;SdPmK z<=3Wlc+Jr%VPv(*NTHua#?c`qqRLYKf|2 z?#_OCv(K&WUOp0MN5B)` zY0&A&_P+)G>SZcLoDt%i?ck35>h^Yia&l23e19{kiP;4F1#K1MAAp}p;@zkQDp03C zLhU0Sng1_urNO(BZ(3OaRpRK74cyia_vxf1)Fm1Pk^sx@5&=MP4-Qe#u3_CT({54 zBf&i6+sor3as_Qg8xFT%F?n1}tf*_I9uQgnFB5axETha<0@$$$C%0SZ=6dhVdD0L| zvdurzpueB;^3ot0+;>08Y$R~s_o2u4LtURWRhD!W04MLMSxe9X{XUKYyk%qvi4B>a zP55nV`#+J4z);j7ZRfW65DFH*N}2N?{{UbSe8 z!fKwLg%7*Xa*AOm5eF-tOdKO1e+7Z|cB_PN2()PFEq?sEotup{6QBiq@lc2h>p zKq412^v8>)>#nXIKYTt9m7q{9BnPRxcji~K9f#ZVU{Ux|V+A~MC2Q-ERS|u)Ukqr- z$XYEnGnY-G5R#_MflmX0@My%mt}>POs-?XNblUYM^TPnG5n6-YFlntIf~yWT_3Ouc zA=6sG%=xU)zVbE_(IrT6_z*?V`O-U@8=6-eM9IQGrw1uiya8`%Z$OIefk@=@=g-HJ zZ$QE?L>OTw4rnaz-MQ`nMgn|%0P{1vtj21kHNKndTYzLnBt zhRHxj?{$HFMLw+lL7_@WviNBJLm1&2Wk9~Ud=&1Cuq zLUkRl<3Go_jkL7;qzq=GTFs88j>Dp&&0sOVNdzd4$^cy;ze01_Cj^3Hd8`72Uwtop z+GGHKKgR^x5S;(zX;u+D00)bpi^~j^rxwb28MEOlDN&B4KST)oYd-r0|Ifu&>NYO{ z0z&S+_s)hoP}jvmd@k1rJw2&ax2K?V2W*Qow|oYdSL;>D%25&)8;XejoIhjiH$r%U z3OIgsiBvgtb&!_i8cpYY&f!z~U(5Q!7xN)`7&!9AhXUox=8z8v8< z?5QgkJSE=Z$9!{jatOit$z7EO7q+A(5pi?_y?gdfT1t5C7>~bhL-5QHe zw0ykcX7W<0YwLmcux=9|%|F=Rsf@+~3>ix@9sj?aKG)dG>w^Zk<9?}KrYJCeTL4bG zO=*+@f3e{+{P`Hz?_Kkvjs(1qkV4UVmxSuE!hf)#S!8G?MK6|kZ}b_7iu%0quW=6} z*ZoWPI>y!~!0n}0qJ6cJBFA{|aUG#L{$OzO!!l~9_=78`c*0!x)2hP&?P;N5yIx|k z=G_)xS7GUNaYI)se!tn+AL%EXAAzd zZEf^TU$_laM~1LrC>r2`E3E^ z{U0`uf=|tPcv0xgPNto(pTRvh90wr7uT>ae4Zjd@gpHF6D*t6@nS)>Q2{{?(CniE6 zN0{GY#;|}z@%1Nwu0N;$*{fVrHgy00m{pkC=A>Mq_3h^NY9;EHb$w)%K=$*0X=4Tq z)R>6F(DDc)g@$uebJ>ql_}T1!JPW2tl7GI9GLz7-sZ~Os4L00eSD*js99uPuhnx>p zF+N0fsGQ(`jB51Js8DYdzZ0KlZLbZjOYB)$=P6lw3`Ce`=wgHXmAe?6Ul-;|7(DpX zn?#Zu-9KJ}6R@!p|Jc~PEJfUFiTZvc4&e2S_hSclEv9#NrQTv#s@SApf%T^AOZyWM z$6Z|Um6a%E$Gv)(#RMXx%1&2C#s%A5XNb=Y0Fd(hZt^c!$v>7!YK2A7Ry`)6qS132(NxxxDlM1x1>CSsr)zWVG%h}VgY$d|fM}2WD@+F5<57Y(`(FdLquc=B z5~mZQ2ThV6!2lpXIG3BX5`$YuDiHB|r0Ad`ke>h;X z&g*AOjwfC1e|hzvD}jtt53U4sAAbKh`bU~38A}7X;tc^hcf6cPRBfbv3LBWfpv^A8@Z=6Y7xgjq4gocT+N7ZoQ0)b2v5Xkhbcs=a zg0(W9gSABdZ?c%3x9b}k2zfo4WGexG zk->VA%W~)HlMJWqm~? z{sssj7r@TT0uP9|?qBqjO=Y=Cv;1XsoY$SI7Y#B|dBbXIZb+oKh=xXAkC-$d+&^SR zG619mu7Vx|g9&pSpjRO~+(-k@j0AzSB3WY{=Kw&{RhVvh@upZ{*m5tpbUvE$oDyEMLI*}}<~FFck9x8_)g&+zbNAFDbY ze2&{fsU522sHv=Ot84k1|MKt&SRXM^5kv=I9dR=bqYQ$k+&Rz z?^-CR&N@%UNaiV4TLQk1*a`qv9PEs}UABTexs;5nAmb?lXl+NtVKVrCow_lUs9jro z*$v%Q7EY7!Q<(q5-djgi*?sZ8hy{WHNQfdBfS`mRARQt|BO%?=-CasZtCX~KcgF@q z1nH7)knV2wnHzoI^ZSi^?j84zaqs!-?lF*!Jna4K=UHp6HRt@!&s-yE#7w? zGZn90=4@wz2as&w*yR=Z&pE~R-*YPM>mO?lDb#V}p1<=p&+Mt@S%eAuLXPb@G!Dp- z1lhn&XyQY{9q<$k*^d2E*gl3pakj;s?Ey^y?^eP|GZ5A6Y&ed$1C3;dFTJY z-91mfOlQRy1|va?e;9*AqAj-K=T~p@n-~$!^n%DvJy@b_w%1hpZ*>fp4fS5J5OG3%B!jj#F-U+wZo)t2$#?%~zJ{dRy?Ufu^?0vg#zouqUI|Jd>! z3)@m{FoS=*C_B9|=BNNQ@OJhRjGqF1LO(uzqkU&8IOFNJo;c-GBGZWN(4&X^JrcGk ztx0uLJ?;-T--qPlFK0BD7jrV!eoOyw7xr&nX`!ph%FYhB8yETIGu7uPRjs}We$>}099B%+JjS)+RCy*56JzD%rds6N?6JvY>jc`b9x z&rfRq=r9@zhnhnlpL1VKXCyfIpoPIFlQvG29I^{Qh_1H;UGBGVA6>s1Cfy*aTw1*5 zG+JSO(mXTOF0N%@F!W1*Ay8+2@+H0~ZQ=OxkBIEi(fb*1xwyu*v-z>YOrjJ-D?dy6 zye{wJQ#e@hBWy1&URe2_S62tAb{t~jU7{LJZ3ffydR0BE?mWepMJ(jF%~6P-^>S@` zrowtb5j1c7zT`Z8BvNhR*uXE3To93_D3-Hm9~m8O>*oLF-L4}=>KLz(rSlrZPEk#u zYb+VsOG&G4J8@d+^$!$gyTBj%v|O2wlCc@rSs&Ce0OI)d8d>>BOOx%{LT!@&phO`c zGhCi_^^@Zh&xjhODpa(7HMKmtl{hRwd38eu{*E2#$bgFFl+{4Jh>VPkXdIXGY-_|9 zYmHy!4m*n=g@a-hsFV7=w$_n~zMWZKZjU@YkxI7$?ERG=c`UZ??0)t4yFz{D=;$a4 zryz=*K!)uu5>AUxKp^!gB{j9DKaKyLPkenQ=r}=82a3wwPF@@wtC<&q=Tc};X3mbk zEE*ln%yk>jVewZw@GJP0y3=~b##|PsK zbt|#3(6T#82&9G2=eR4nySwY^_|j$AOvkFAkw-j|rwx1 zNYpf%=+d|eJH25BKjW&r((syG#KwehJ^S-F*>XY zFMEmSAMbtIAK2;{Bu^>7zP$Bv|GAF#`XcV26OL4>zR>&)b)WAZ)1q;%yZXAR=0BR} zUhwf9<+8$XaS4Q9Tk%p}4SRH{?p9*uFhxeXDF(Zi+k>S)fdo{(8bb;`2?MaieLp=X31N;bgDAm6%snkMh5-Z z+Zi`l()G&!BxtW0ocw`Ci$6^#fnDEjI7m$KYi5CoIez4ckpOFAGxrFg&ifxJ)i@dr z^R-sL7`kGfc^sO?zwep-nee=`gWP6?tmORGQBT%BE#thO&o#7sZU4@6(Pwf5L6`sN z<|?~1=Wo8=B5+>Fc)uL{%l1D?gKz{{0gki!N>qy5ES`5$I#nF>NKF)1e+Sp!v-5B5 z?;^`Fe(JNhNy|ee%NA)HHQbtDa0B$Y4UdwGctYc@oeO&|3Sxa_gws6^2Aw`>EYg8_ zs_=u(v7{vpHkD4H_Y(N$4yj)4#O3^|d~T>zsUSm`rSYv=CTIJoyj+aG>w&*lU{B*# zfWUMDRDWXl=Ccfc5cn!JyQZ7#E9M|BbM?Nkt55Uzn9K`7@)P+J>lxi>*_-3&GDwBQ z+cOzTqLd1U3LTM>*>4<0u8Q2mjQBN|{X6`a+~P&*OPLz;86c-6j(f^7!i{H0XTf6a z{9)~9Kx>q7Y}BmZKGNp1unju58m-R`6}4ae1YU#I4{3yMj@M6o7jl@svux7O=kERTAs5>j-5N%CvFpwzRWLpeF&3?4AeeBw-;kPpznfkWf8E zv-3)ir8^}MV5dYt!#*mVntXJ01i6;8#|wBv)Dx3By?MQErdQgV0~E4Omi@w22;bT-VsDe8 z4uG18?;WUw9Ga~518%mFCE2_Z3k^RJ(v9e|GTqv!oUpTB2%HwdX}CaZ%xygzvn|T#7q?^|G2cX}-0( zV*}+G@W96Va{~SjP^x3ZtmLGbF+ymY=;+~9v3SO6j%B|1r|1|>ooI3om9MCs*O?Wy z%>Wq1gT#hO9V-bQ$Ey8q+c$)T2M)X)U9FlRE+-Xo`%58#AU$Jyb3Zg?UQ zR?;23s7H;_`**)490Lt)Of6niH1flv=CkAI(bvD9WgUwch}ocIF`2=BdH>$iw9^IqEgMS9ncg(-9D{Czq(WZ0twfCQ)(Z7@FnUd4)k>s=w@F3zv?a1MKD0Q<5$WHe8v3bp0{~gHYbq`Ikc~J+zt9q!B zp`Ij4L{%sM148cfoEVFYB5n~e1rbb>wC>ll#Sd-+k&6fFV1F+B86yn7jFJ9033OXH z`TiW`B86;oOe*(p23CZBJ{-nb0tT)2k=Cr}Rcl)qNXz^DMO2lgP!49CEp~cETeF*= z|21m(pt*hW9>0frk|=6FD0WsTlPP&=U1%Z@%xv?f(wj^s=R+ekZcs*@9o~2r3_%?( zX6@OgbDJ>A?HC;rFB?xOd>|X?XtTU| zZBr