From 3ea3f3dad5d0138b3bd7bad594e96ea8b0193670 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 12 Nov 2018 15:52:28 -0800 Subject: [PATCH 01/37] added title --- windows/security/threat-protection/TOC.md | 10 ++++++---- .../control-usb-devices-using-intune.md | 20 +++++++++++++++++++ 2 files changed, 26 insertions(+), 4 deletions(-) create mode 100644 windows/security/threat-protection/device-control/control-usb-devices-using-intune.md diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index a328d38a24..a3a3f1882f 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -188,10 +188,12 @@ ##### [Hardware-based isolation](windows-defender-application-guard/install-wd-app-guard.md) ###### [Configuration settings](windows-defender-application-guard/configure-wd-app-guard.md) ##### [Application control](windows-defender-application-control/windows-defender-application-control.md) -##### [Device control](device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) -###### [Memory integrity](windows-defender-exploit-guard/memory-integrity.md) -####### [Hardware qualifications](windows-defender-exploit-guard/requirements-and-deployment-planning-guidelines-for-virtualization-based-protection-of-code-integrity.md) -####### [Enable HVCI](windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md) +##### [Device control](device-control/device-control.md) +###### [Control USB devices](device-control/control-usb-devices-using-intune.md) +###### [Device Guard](device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) +####### [Memory integrity](windows-defender-exploit-guard/memory-integrity.md) +######## [Hardware qualifications](windows-defender-exploit-guard/requirements-and-deployment-planning-guidelines-for-virtualization-based-protection-of-code-integrity.md) +######## [Enable HVCI](windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md) ##### [Exploit protection](windows-defender-exploit-guard/enable-exploit-protection.md) ###### [Customize exploit protection](windows-defender-exploit-guard/customize-exploit-protection.md) ###### [Import/export configurations](windows-defender-exploit-guard/import-export-exploit-protection-emet-xml.md) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md new file mode 100644 index 0000000000..903e817363 --- /dev/null +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -0,0 +1,20 @@ +--- +title: How to control USB devices and other removable media using Intune (Windows 10) +description: You can configure Intune settings to reduce threats from removable storage such as USB devices. +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +ms.author: justinha +author: justinha +ms.date: 11/12/2018 +--- + +# How to control USB devices and other removable media using Intune + +**Applies to:** [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://wincom.blob.core.windows.net/documents/Windows10_Commercial_Comparison.pdf) + + + + From c944630db82df8c33233747756c740b6d913275a Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 12 Nov 2018 15:57:10 -0800 Subject: [PATCH 02/37] edits --- .../device-control/control-usb-devices-using-intune.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index 903e817363..c54e93b52e 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -16,5 +16,12 @@ ms.date: 11/12/2018 **Applies to:** [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://wincom.blob.core.windows.net/documents/Windows10_Commercial_Comparison.pdf) +You can configure Intune settings to reduce threats from removable storage such as USB devices, including these options: +- Completely block the use of removable storage or USB +- Allow removable storage or USB connections but block unsigned or untrusted processes from running +You can also [run a PowerShell script to perform a custom scan](https://aka.ms/scanusb) of a USB drive after it is mounted. + +>[!NOTE] +>For more comprehensive data loss prevention for Windows 10 devices, you can configure [BitLocker](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) and [Windows Information Protection](https://docs.microsoft.com/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure), which will encrypt company data even if it is stored on a personal device. \ No newline at end of file From 5f460889f82bd5755a754457fc377036294de25a Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 12 Nov 2018 16:00:57 -0800 Subject: [PATCH 03/37] new topic --- .../device-control/control-usb-devices-using-intune.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index c54e93b52e..6ede07cba5 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -18,10 +18,14 @@ ms.date: 11/12/2018 You can configure Intune settings to reduce threats from removable storage such as USB devices, including these options: -- Completely block the use of removable storage or USB -- Allow removable storage or USB connections but block unsigned or untrusted processes from running +- [Completely block the use of removable storage or USB](#completely-block-removable-storage-or-usb-connections) +- [Allow removable storage or USB connections but block unsigned or untrusted processes from running](#allow-removable-storage-or-usb-connections-but-block-unsigned-or-untrusted-processes-from-running) You can also [run a PowerShell script to perform a custom scan](https://aka.ms/scanusb) of a USB drive after it is mounted. >[!NOTE] ->For more comprehensive data loss prevention for Windows 10 devices, you can configure [BitLocker](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) and [Windows Information Protection](https://docs.microsoft.com/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure), which will encrypt company data even if it is stored on a personal device. \ No newline at end of file +>For more comprehensive data loss prevention for Windows 10 devices, you can configure [BitLocker](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) and [Windows Information Protection](https://docs.microsoft.com/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure), which will encrypt company data even if it is stored on a personal device. + +## Completely block removable storage or USB connections + +## Allow removable storage or USB connections but block unsigned or untrusted processes from running \ No newline at end of file From d2ed7b4aaa65b237e935c3ee745b069b26433e2a Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 12 Nov 2018 16:24:59 -0800 Subject: [PATCH 04/37] added new section --- .../control-usb-devices-using-intune.md | 30 ++++++++++++++++-- .../create-device-configuration-profile.png | Bin 0 -> 45144 bytes .../device-control/images/create-profile.png | Bin 0 -> 18935 bytes .../images/general-settings.png | Bin 0 -> 128402 bytes 4 files changed, 28 insertions(+), 2 deletions(-) create mode 100644 windows/security/threat-protection/device-control/images/create-device-configuration-profile.png create mode 100644 windows/security/threat-protection/device-control/images/create-profile.png create mode 100644 windows/security/threat-protection/device-control/images/general-settings.png diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index 6ede07cba5..17eeca30c6 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -23,9 +23,35 @@ You can configure Intune settings to reduce threats from removable storage such You can also [run a PowerShell script to perform a custom scan](https://aka.ms/scanusb) of a USB drive after it is mounted. ->[!NOTE] ->For more comprehensive data loss prevention for Windows 10 devices, you can configure [BitLocker](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) and [Windows Information Protection](https://docs.microsoft.com/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure), which will encrypt company data even if it is stored on a personal device. +> [!NOTE] +> For more comprehensive data loss prevention for Windows 10 devices, you can configure [BitLocker](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) and [Windows Information Protection](https://docs.microsoft.com/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure), which will encrypt company data even if it is stored on a personal device. ## Completely block removable storage or USB connections +1. Sign in to the Microsoft Azure portal. +2. Click **Intune** > **Device configuration** > **Profiles** > **Create profile**. + + ![Create device configuration profile](images/create-device-configuration-profile.png) + +3. Use the following settings. + + │ Setting │ Value │ + │---------│-------│ + │ Name │ Type a name for the profile │ + │ Description │ Type a description │ + │ Platform │ Windows 10 or later │ + │ Profile type │ Device restrictions │ + + ![Create profile](images/create-profile.png) + +4. Click **Configure** > **General**. + +5. For **Removable storage** and **USB connection (mobile only)**, choose **Block**. + + ![General settings](images/general-settings.png) + +6. Click **OK** to close **General** settings and **Device restrictions**. + +7. Click **Create** to save the profile. + ## Allow removable storage or USB connections but block unsigned or untrusted processes from running \ No newline at end of file diff --git a/windows/security/threat-protection/device-control/images/create-device-configuration-profile.png b/windows/security/threat-protection/device-control/images/create-device-configuration-profile.png new file mode 100644 index 0000000000000000000000000000000000000000..1e0f0587a3c8f95194339752d66dda39586800eb GIT binary patch literal 45144 zcmb5VXIN7~+chd8pb$Vx=tUHy_YNU|R8b&E@4a{F5PFjuQF;v`y$jNNfFNBuA~h80 zgeIL6-{*P1bDeWt=g0YxWbfINnLRUW*1hJwXJQ~~N`&|{_zxaDAbhPX|L(zqhwujv zu%M4|G2gbl;+dESSRU_`UOlK9rQ62bJhGKlm3{D_7DjMmj)S>>;-;+c@!$bb&%X~A zkWD4z!Gr4k*YdJjz9#$a0Z?-7mcNqM%O`hUqnAGSUf|Yp=|d#En|n0}Yf8iBVSy7r z{iCUFYI7S1YiPo8Vzp-hpeJO|j!vF@AB!J=ewf}BvaR#aZT1_WuShjm z{CjW>0U~zLQx!GEgQdBvgxeagS;uDzhi|+&@-n+btV?i>m@UNan(uabeS`XNUq|%? zcBdxPSR48=)VAr_^u^BCSe#Q)iPg}Q&EM<+2}bIjQaoi|OOZ*#LuEqNlio|fqs${0 zX0*E2uqnIDR&(fE^|H;23MayF2%JtBgD&!&P0~oH9vBwU8Z{9m=YpRP%!rEPVpHse zU06PkM@Jj#rkm#~8E#TE+@{}8Y;L=)yrNs8C5gb^r*-!8FALI;V-ym|8(wI<8=Zx)Cw)lvUP!-zYr-_}n872Wo^(UY->8B%rxSdDZN9?^X%py=u7BbJ7j*CF> zt+Bkc{5$o$*>PGNYcdbuE4(SoKOz1AO#SXsaMWzW0A#t=ZfhI7oT$X$Cm;1FE39Dzzc^;CaqBua{8_b|Ts zu#3fV98FY$9LG|X8+a_^!!`WM+c2@Hn1v=Rw!~TzScONoAY$G*jk&e#k7xa_Zu zODJ+yOt|Y<66GK7N^B=&B{QErGX7hG*zH#AQH|!8$8ee*{tghFJ1yhqAxcH83u{(-OS{ZIx;Ie zkOVnyir6iz0hF>@N18f%&O%5pZkD_$7 zx+V(N!Z!S6(%Md{03^+8{xV3YCzTF;J%eu-k7Sm0tkN@!h|5T<>L+tKN{@|*OBkuT z)Fzf3A9O2c=RqjA@SX6;>5WBM+nx^o(Yg-#6ypW;UzY^0#vA*SQJO>ADx3*|y(7F~Yg=Ua%uFIW6!%E96;2finTQ}iS!J~t~gc?m8h*jHYs-fcM=K34X`i z2|mZ5YKnM8Vfzou#%QAqOI_X?Q{02b{II6%tLU%TJDU-duja?oC@H&{N~{|lU!;@4 zDCL=dl3KGiJj$Hk|2sue2vUn?gnWvgFjZyH%v(83J@Hw=i~YN*v7u=*;6@L~^_qts z(l6&TMrl$6&tmf&maCgzu3zsUT(l48>I86?2A2&R)0k2b$3wfFB$sab6h0S6=1HT+ zsl3+@4-CBHI~iezXD8qEK)i2K^OvTP&>iEzq|u1oKCf^4t3yAmlaHkQpteiYd6k&< zPI=rax39<_D>h)q9wL_G4||tuvq#h^4zqZ{51cDGSJWtinZWbIFDi< zKPS@nmt)Q+YUsb~?g4Z4`TLK#q~8$`weySNRCt|M=h^kOPNV4scEeo-m_7JPekCSaAH$p`)r*4V{%#>som9bvh6!~YEG zX^iwyWgz}DoFTZ8EqMtL88`e$=(S?QSeF#`KU8r>B>}gmk`8JESi^R)&JfqfL32^` zlHNz`9SqeVhLgpMP1QZvS=CMROZWV@5^&Sport^=JY(uVB2>5?GO?YkG31;40*8V6cV$R53me6}5um<_@HZpzx#^|N<$hQ$j`LE|Np zCX^GAr{HsRB)LCBHYIlc0spU7WJqQka*n8ELGyj&JC37}^HhPJn?o{Mn{c%6qc4)b zGNibHMBq0D^_2JCvh0rhbFres49JN$H@b3hIbSgd8I%^VZpnVL92tczNr?|N4f>O1 zdgR7t$Job3Lg{1gFr}!**f~?_R++Efb{J&%c`GDpi~3H$3`y6 zhV!INM@gDLdCDMoX9k{5^fTnST6i;k;XL4D{La0pw=U7s_a&W_;4r z+ssaO;qX_w>i*3rkhsJ7_zFvv*?4ak94gqCH>6%?d|7kw>n379 zq(yus^4&`T`m&zJR5735eg1l!+&LqS?4)nHhMxtw_uS5oGpuYMU*owr={MAwMlLUWg5brL@!hP5F&Ctx}|?nWxZ%| z7s`8?PGFHC(XgbGL5WQ6+JA3KSys!BJ54}q9-lpnAfT+O+2Bt0#nC>DPf`xj{DtrD zH{=PXUp8Z;V4_`p(Q$P|-14q3pi=sFTm3i8y&uI#>a!du3cXm3er>;P^&8YD4CYl$ zY(}uVxYeEM?T3W3DOkQ`?z+t&G zXbU5aFm(fe$@9YLvt@A6%9c|;i?&RfuF+$c87d+Z>Uj!#DUD%^JPKunQ@2Kd{<^m8 zSf2D)u-ZbaPj!4Pz* zhzZShhvRKzkBZxMF}=2;`s=01ov3ILy6s>^Ivm^FN9rJ6L!b3(tpcuFZIY5dEXG-K zCs*cQhgGbS?JGZudi%al`|`K}E-D~ZD-zUKeJu}6X5%OcBkhRdU`rzVLvvb$x$&#@ zD!+*OT>t|Q7LR1TyRJW{-TpmL7MAF0w<*`KdcD)&Gc%tR^mT}Rhw>!E5$&7P|ByKC&C#G`1s+ z5Row*Fxrd})X^Gq!a>-%S~@YASC_5A1Xa&6!2Twe{Hi?k<6grvS9$vrnG0+%euB%{7`XA3=r7xFCCQOBKH70T4;MitdU1lGla6x!c!kRG1&yEGY>=OS?OcL&W&0_AVQA~xtu zz7u)-c%%K=NRcnB%>Yjjc-#;2WCC=zW1$ zY0Dy~p%2t6Z#&I5qk>VLFZDn0F{Y$ke%U#}-zlHmY1Fx?(ieLP)pAlrKL#hxK0iLO z(;>RU2lDxHo(dME9)L?4qzVo;*;AlBXNd>-@*N!N##t=Q7Q6-#s2#Prg+XoanPV;X zCJJs&*upoRH*&5v3VpSmqggj^Lt#xIjB+()s$ssd8r0CY3abncmWbqHTebaG2ET}@ zE>llL{BHKJj(^yRzY-e0u0So{$y|=#5_}(YF|=^lWhklMQx?8uT_K|lu~q037gQU1 z!93CW-E-^sgCU)}Ws)`y%cJkGWOVD9amAt*Em{F#Z8&J+Nd^`)*2U4}P{*a&kFPy1$G@72i}S^k zB9d$}-!<8fh&%KXF-@gEn?yl71|OfW_pf>eeLmA7F3RVt(&xD!^$ag}P!%2Slzz-O z6wR@e!C)~-q2n^l)mr=o-@phn(AS^+4P<>7rLl{vZphTU?k3TJI_M#)j{Og5GSf;_ zv5NWM1O~S(li+WWrt{CA#vq#xW6c>@rJWLcs;kka@HN2^YZv(mo$%GlilRIHk#WO;g2v zDL9Ec^G63)mf^u>Sp&$K$YmSG?|TGPppVXob0AHvl1Y<1NAI`WC^z;E%pO zDA1!bWoR@Gay3pK>uGWosOGr=gVg*aOx2*odBt_N2zFkwzoE{QF2z^gZ63>}!M9$5 z@$aq^uk+98|6+I6RS&j0QZFd_-SFq|ayDYah?jXm#Wz`Ko%v$5oNprqxI}c=wZOW3 ze>jj~V5m%O(C~3#6?`uOMTF|ETbqu)+4tj~M(5}FKw~DZC5!K~6f!*OqhN+SX3UhGr0I0!75-%>bWiDEm+j)`sx%hqg8@ z?}zRtDYHj}(mzJ=%X*&YY0J8saA$Ef5c=NeQJt8H&-p?&uiRpRDlWXPMqJ>9K%}M3 zfh4DrkeWV&W3pv>Xt$*UcR&WR+!+O=hs8KisrAv&Ue+h6QtG6=`c6S%A7~`|npygT zF60)KBU%YfzGJ9?lkx?BM;+6)IO6ox@HoN%gO{p_^P9ZAtP7g~ZytkvS1DkV z-yLT&-M2YPe%iP=|-(GENjMiY%F@8f5!l{VCXOci@^INM^Tk1_H(;qH}_L2 z(=kL^B2Oc|ljW7oEdDPqr%3KmvrM|y2ekytb8D~~ubq=id_PozsL>?k12|6=#~8Zu z&?&F)JV!fZLy4z$n;vSK#wd=Q+*N1X(q#Fqb4j_ajF(nqlLqrHe)BCX3YX> zv<(F!i?D5+yei>poUwR~4Z__Ve`F2YD6gvTuXtyDS)dyf#r`ZKWnrnbZSP7i8k{RE zY6BOc+f;eW(9sUw27HMwlP4N_6xCMPbNp?=-&6XFMp0kZayI_>L40%N^|Z#bjE^5Z ztoY=3;vjijG6g)v)y%tsOILfqST%68zhp57$8waAYeW7&esm!ZpHZCrZTi|Cc_P-- z?x|K5v*I?wz69)$~3%qpQo=w$P z_I3_66W2R!@r=?8Gu4#U8n%YAl)NT@)tU?Ch{Q6Z3aR((4)bs2-i=tEY-P@ASqZ`P z8PPWDx!tNV}Bd+NaqAvIy)Oz*T-rfllP^_4Dt~GML)&ZWL zH#WBFj6chb7=()t3zPC6$>KwkW0~?ipF|>_;>V~jUZ(te>2O{(?=EakpCKwNoemkX z{&QfbGxIrZ^mSs?k?%_MXfO85RXc(R{qS>61$|l9M>pOUSNLUca3n`b2uF!}K0XH= ze@C+<48J7oio6US<^&7>Q~TstSL6st+_sMpYjf{Elr3#C8#ntqp2EfK9|m~Qn}*18 zyaj&L`VY*l0_a-wS>kI{sA5(*8NT3Qo9=cIXPDy%Km0P=!^iPVOQX98>+w;&SZ`** zQ$p*%Hg+?>)3n{huJ2VY;=t^Zz zHROosUq0fFvn?ged&V||acq|)UOg5>+5Jj+Ly~Bis&heo4Ae|z40cApz@X)S+WDUr zCBJ2T86mBGVAy*ok6QWY2HUn;{KCq^TUi$?P1&tv!e}r0xdb)_PA+CGS(a_J zw?o#O#^-`(U&H#VSj|i_WP$afm_8mT3Oj#^$$+Ws?@T{a%Nn-k)e~M34IFL(3?E3x z9em_}cpD*Vy3;VyDY$6n&SesJ^7%>$$C-q;ZPj(xu&V#^Ms}XlSj3iKD)(upb8Kgy zY6Fn`@7b_)M>J#0J}X_Gu$?|xXn!OV7zUh5XRrm5Un`;uYPpPumS-^n+*57-@d-=y z?#)IMMTr2%gVCApsCi<9pkvAS2BZkmean)^tlWFI*Ak!N6r=JSll16A1OMQu$NXZUN zpf9uM_-GkEkKL`+bqga1)1_SaJe{-f#+!-46dwhNevKPj3y*tk^76GsF>3%&w& z?gGerU&wxg<9F&Oc0A8Q!6kMOwU1^~IMaM_6gsXC$Pc?1|H*!RS=}5kwq*gHxw0?! zn3pCFxQQXkp79`B;RWGEn+^L|^jOnj%hHo^ugEb*>k~}BV^9$!Nu;kmj>mdOwApbg z0N|u#Y~O)dc~~5gPW==8cgh+%+(I{T>N?LeDKOXdg7x zhxNn%vy<9z;Nd~U&%=W?nyXDp0UbCar6`dj3ugBm+-R5RPV;MN2rIj!PrG9k8J<|Dx?;m_F=;s_>isWhLk_ENxBVLlDE zKQ&-x?bDnu80F)+njgWS|hucd%dqY9=F|iT`k~r1ALK zP1Y-}!Bo6rfnl-$l7A&uz(pTssJ*p@c!rwQb#DQukxgrY;cWqr7BpYaw?n~3!P&(? z3|R%L6p@98M~+ZS5R%g7k&#>sqiXzaR6?po`nOc9>ak853{Z1AATdRD+#lC*^0jtp6Fi&7k&93teZ-i5dKXJ81ViUr=cY) zsF@7Z@|xOZr4?&?d4Am>0l*M#`6tIf-FCp!;(A(OLL9d+O;yFctl$hh={mg5H-YqUl6;B-7)({vGT2rgNY;gi3j_@X1DR4gZg!)3;KU z@WsW&qfQD}!D&YJLHu8)>)JR{UK@F@fkHgNmpy;uYFe#cdT1U6q)@>$_vVnHgh$23 z)7!Aiu;WGdn<8s#z6UX>Z1-*Oof{?djCLIDaj=#;=O2t7erEu=@uO%}v$%-IB2Y@t z3WISR@g6XtA0PH2eeVF_k6KON>TUFEi9fxBE&3#tdI!Y0Vh+KIFwq05PK7-Rh}R&#$+oMx`qhY%>b{|`*aqdS@d ze^4HsM-$%I$gK8}odtzr6bKvVpC&&Is^j&CzFe?;*Vw|IcQ`RZ37(|lVfB_;*$p#TMk21SO z^PHIAuyf}P7H6yg$+Zm(RGud(f2B)K!{RnQFMKS0gahEAPfyN`Gr=qzXD>8{I`|Qm zG;=`NH$(cG2Kk;Vn1J{^e?WF_^pD@wp!%R&e@rG}FX-aN*^^n%{9JmudzPD)Nh1{ASWEI5_}8dcB1hhrhGs1W z+P~0}4$$F-=II8#b;g-wrx*0@a;pkmI8Bg$H51Cmx8+|{{)?qbY$FCso0XI^p{(gS z5$y<|X*YB#1)PG_w=uK}LksxHS-b0HD2-$?oz(b>R8LHSbm)w9Hc$&3oS(C>v=$`6!BaSzF3VjK8q2;dg`M}ehp*jBA`=KMJy*K;`2ql0 z)g9A9MFiyvxeg58{kk3q!*(|uVoPW+!~{2a-9uG;kTB=ytI>q389TPhb3dlZkhMmr zGV|2YD#94`n)#ElmCWnc&oPgzi*Epb)^6R3SK}EU;8CD-*$<;99T~m8`W4RCtfW3; zWc$s13w8SD2n_~;B{wJzi`-HDXhR|?m&qd42ERfm;h(d^Dj6juJfn7h5|cck0by9y zLGZm8$l(KTCWT2E(MXgOZ$RhhtG%JWx{?>}QXVzk!i%cNg_&cdZ%2Da^q8qwlNdX3 z>DJ(62tx?oY_2)$K&&KX9ssWyi%?mPCggf^Mov-^O>evA6eOSp3j*@g`3Z%5PTk*J zJ#k*Jrp8`b-x#X+Vw8+~EFzY0@^;AA@(# zaM9A9vthk3u-SRjKiKJe?>G5C-GzL${{-)u_XQVk>y?fEWiU8y%oNPR0cZ3a;%@9J zukOI-?Y#L0#V0h|o+yO8d$*Rk%q|31*3={m-W=y9<}k%BOYEGO8MVB*AiCICxY5g% zra_^LX&8h~px)l1k6wyqdX?VE(2mjGFMs37F+Yo*4t*kOxWOTQasW;^+Y)dx6?wgG zPI>jj^>Ed%ftStJU5DO3gF0=_s`htzULf~zn}k7c?Z$9RWkW)r)U=!4O!ESKpKGR? zh|Si%92SUuzthscsc$@U&T?`-;AQpELAT_yBgdR4Kfu2%G{qyEak)7`$v30;Yv}au zb?C`jIw$tkiT>I1!`#Npn~-bythT26YG`h9*0Bg&?={69MSsoyzU9}nI7q;-Ir9OCy+P=zjykvBh&q_~ZanyuwD>Qu<~_Zs$0%d~gNS%JK- zfRSYiJ||6?2Xe^9-;|)e|FH8um-bcTsb>!|eB6ygZs$}vrA+`XDd}CiZE+Fp&7}^F z@L`=a$7+QnxZ06zy~@=sPV-!qpkeVNl8|)vddXgGnLEp_}Ql6Y%EAoJiD80qz$Hf*s0KKpK>2=nYMcTlX&D9qGnkdU3r6B zZ)}yjv7rf}SGShIc02jg3=R0Tpx*rlYewSgUE`v6mLs&|y<k7x4S#Sm{ZfE|ksi1B360y+ zc5RW)jp=Iz2GQ`sX(ku0c_Hu9=Y~}|i`&T=?pX_Zbp9RF7aavg3`4Rhajl=_(9K1m znVtKfa?J{EyX#NW=OqG@0|#&66bq?=0j)>9>h%80@gBl(Ckg*5zAyX59bs5bci{z; z7a~=GWy40P$?eC2@UKCYw7W`QYuzYX1JY}aBpoB(NW>%?{9~7vS^!&2a_2zEr%&>@ z$?}70|A%r|1>j$qldxElzJ0crLFYS>K8dvCY3cjy@>W)=y1JA`9Z>yIEG~n3<*48GOIkzfMHea-=R!h4KR#k&S#}c0m#S^UzkaC-m~7FR zrD|aw3_M*e#L5x(C;~ijt6BH_3J$h6+gjY85)uC3?66|pGW)$qXp4TAty=f?gVq*1 z{Ur_L7D*wR(fi`#cn5;H!^!rj=~+h)P4`(G@5-u=HcBx3=33$6^7&2F=lozgF)*10 z3G__3*ET$fjVhlFhTK4BDg9Kbg}$oN4J-%F7WTxN2*RU@8B>{L9UaR7&EYAUP7ZbH zB9;aAQL17Hnnz#MyesX6vh?Z7j~Z|%hY@wO1KLM)5$g-C zosj{D?YjMXzV1>e$9?f*S0e5y;bMu-gglMy)TDIVr+$C8VoneJpwS+;~xc z?vRgbjD)wPg3IM;AI_XmtllygfrACNqiESJR^!Rn0>!Hy^?f#fM2LSBB5R+08^E>} zgT-=1Y2pu$=p5Jr`I*barG!yIf)rSRk;hD?*eV=E8~D_aW0@Gb0b~g2EoB*TDHFB| zvn*lMc>dK#8UeUG>6F=H`u~5)yt{}OFwk?k2V!(aAf6@i2@;s$#)U=P{=R&SVK&m& zMP^ybje%j=?a|V_?jKcF{K#3{dQ_e<-$@SyE@y@*G4Az9!)~k*%0ZtbUw+q(;j$) z5^d-fOyCw!66lUCX~I_s6YmU)93qMA9>Oiyd9)LA!EeF}DIH}XVs>vb1nAJNhbun~ zOwc`B)$P1W!Gwx^^Oo91%hMup$IoY~j@1ff*LN)x$xhf1mGPCrK@W#4IeX=>uiWGW zU74i~JK{tW^9G^>?%JiEhm#>C%f-ZG9+{rH$`;_8J#tG1Vn19>|6uz83&-HusDK$A zkw}Q&QNUu1d^S=E)zmg1w;nx<>p7e$2dTB7gnF;NSHv#E4VLMJldiQz>9s9fD%Kpx z%jqe}XV)F{zF;ab8;S$TSNR4iVfKa$hdj@tYqb)2I)zkPuvXz%AHR4{RNJGIdEi_I zk45>_*MM1$5xcmW?dNcPR)%uvXO@};d76n7YAPt^u@mU~#6Q%RGkB|5=dOMZGBI~p zesmE;)6r8Ou~guyZ)ZAml!Z29Pgz z#w7fY&PuwUN|?+BTXt=EC-uMTVxX}G$WG%*bs0=J^ z*DUzB+s;Xq7{ga2FDi09?eZeon0tJGMq1E7gCxwQ4fJ|kTi2!ivPMcU)%Sb1uXgU$ z7se#||IQioaL8sfbS0yCaZPgc{gTbTeD-7gU~y1&Hj*#T?sBAJR3OF^63*mV0{&VA zBV=1u^8aPV5ssUkL|K8w72jRO?XmLXJ3WYKvfA<)STpEvD`9+69AB4Rbij~G7aP0f z(D$Pb4utZelpHyO0Q`TZ?$1eFGJzh*wKDZEwS?*oRY+&W+VytmgFS0pvdR2Pq8$gs z?~qigHKkDd;jTo%GGFSsOPD1MX1AH=-*MzeELF@4kvTJc zI8p<&1t;oR{lnrj>|eptwz&0quP{aSaAHeXDyC!1NS*Cilx<#MYIM%!>qts!i0gI+ zmUB!PzdZ}FcU8b3R6N+NMqX@-E6{3$hk-J=T6^Y>V;~PlKJ$yFUnkO4mm$)Qr6bI~ zJ@fS`y$SU=W{X)@m7wm$%F{QQYR3}!qdZ08Ck2}@BK=8W!TG5W7%$5+s$RSu1%n6I z6Gg~pVp5~W^6-qlc0uDQMu093KiBc6z313F+)^TNv^?$bd_BpGSN#AiASOxe;R}i% zr;pxps}=AO40QNtt$W`7q}r+R-C3L1iU2sd(_`9+Eva+p>zDddcWM#RcZ2<)R5;-j>R6+yY7UeWUo@$BG5{(^iEecvS?Q^E{%7=SGw^*V4o_*tqsuwe5Y zY{PMEdze!>v2Luc2LFdx(r9=CpHkK;Q*IS6YtR2ms{c%2`quZb(rZVbZrJi%|Jk1c z*dU#J?TU7IX~1EiZhPI0v0lp_eMa1oq?L>&suU}b?MlhF0jQo-4o^-T;KEEcK-eVZaYxc!4=XAO=*bq8Rw|cYp!7;`%IsZ|lbh?Ke^hCPo6KhN&(dH+ z^@X^_1K5%P)R0%m@+-4UsgVaeou9>m1>HwmEysA})~d68)PQ2HJgc8(xjO;r=KpIe zF;WduO%Y^5jb;lHzicN9{~32rRP7{*WqXg7qHDY0u8{CG*>tm@hVU|cC01O2EfQ=UcT(#A z)IiDzMl4f~S2K;6`5j`R2d=4{DU^<&=Z^?gaI;Fg0|-;Sir$fP013kTA_TG{B>!uP znwbdMl5%rJ(x0AODRKQGsBtBkdJB-TSOCqjRO?M&_~M_ON|#Y%QR>qzQI`;>e-SSAP3APAg8cc_!ziS)$iyoJB9H$hFc*+8 zGEhbO=O&prdshg45x6m z^Jp++BK#B}0PlMt0FR*b)n6-`fL~o$%juQwt{lK*yPpL3Fp8T|lOkK>AtJ7fbMvv=_ z5>Kkn(PF8LCnY~8{L=eYCHlM#7pBuNZZ=;mj6U>rkYVLnd(FSUJIV z2JH=VT2YU81!{or30&9|{82qmvs_or_ESx?29(fl0!{|pu z&uTKP>e=Y%ZEjfgW=rbaa})jsGWAyHTM~?XYR)IL3)VHIg{%)0mj5=BNEr+%vjtC+ zx2lVwKU~&|L8a291qZhxWC=>$3Ec*dz3b$)af5Tx`d0fU_#Xadi?Zy&_6}Njtii}I zMaX92gpCE|)}w*wFfd8<_2 zeT7=+y};n`ko!<|&rP*R3i|O_aU_45v%a$f@rhX{BI`F1T1P=e^m!<9jzi^8;<;_Kcvk?q@RWd9~PVm3_^>;|(<${Zg*jeMJ?5disERyZB zq(4tw|GOwiu*E&yo39heM?>w5-{|1h7r&Tb%`BMXmi3KDBgAF=dLM}BX8sv|+K2sL zGKc@vdLBzqO%s3j?3TEKhOICl{>hKiXYKyypKOzSc=69bY^(GbTdc{4twPRgB9fkq z0lW|6hbDp~ABLS(uba`7IIL;LcqHD2HuX-Z|CtOp>0kbTMxf^naeXoIL_y)Yj{r#V z_k4*FXrP#5n!&bzsOCs*yNXS>t(4fk>2R9Y?7qyN&$axv^`WikUCg5UKnB+bD%@<0 z;)%kI9;6a&knP(w#o7xXGnsdhBHQ_&bxuTyo;sq$TS5=vvPTR_HE#@BW==^ae8F0JK zDjjNie>GcW&xoYxk!f(n#(P<8T^>nLZj6dk^`jlGN_APXy|2lBL9Ntfr(pQ!c#xPQ*ny=`K06TMKBYgi6a7tS019yK+Ul5^$0Y zG3cNwnqE~=Vmm1d#7D*Q#w`pt02_6worPpJ&Yb9*_NkB!a<0!D827LH0QjlhGojXx zE&I-6A|vxjko#3M@wV1AZ8vmiFFrymB=#&fA=_B%+pjPOGo;M2Pcyw5nt;}Y%rL6@ zb6-Lx(A@fQK^cIp3XibFgtC_(>HM0x zjwt^@mG#WGwYiAP2AD%vpeFLo6q&Z|sf2BcW2Nc#*{rF0qPoXYtYc)R zp==-3|1qzc+KE~tTALo?H>jU$F1+}StClxCarfuK2MOf!ikV91)~Wr*7ypKPy2^Wuq^d_%~7vreSa5)Vk2dQ4G*G3;e(op!Dj&0xUCdLEr8ei+MnsH zF^uv7`lV73qg-KMeG+YJosDC$d9mpfo#DFJZa`~_x>NapT zE18zuB=>QgCG+TazwVC<5v0hsTrlJ##E$Q3n?ygA?Tok*waTADLV5`ycJQJf5+&iA zDz@2hl6W1Bt7QoL9%uk+)mss8kQ@Oy1z-5{5%&*CAP7qUs7t;vQPaenG}x!H?%=zv z;A4sXcwX+xD2Hu7Ob0$JqZD~B7qi4hqY__j(ljp2K*%XtW;qa&3Dg%7Gq0CdP!@sz zA=KM;*uvEbAYvg<7xk@R$u8Eo192d?nqs1{H5=u z$cyJg6^#HD#UJ1L-FUH35r28wuveKZK(13x#_1wW$$kffO$@cpY~Nv{w<^{$KZmFg zAX<|SE?rT$onC)Uf7FoWd^&6^Wnn1cQyi9;igPCe4{{&TiVYar*TU7RCYW=pM19KX z^&axz9xI*GbvJQ0FnKXZ?!M!zk4rc?ea?<580@Rj|2ua#x07v)@eAjs{~D8AU=3RO zF0nJ$(Y<%GmQ1T(1(PCgny@m!Hkxx z{lHN`!}sWS$HH4?3v&3{FmWkX(7;^Jo$GtU}%#gC`SHU z9Dt4eHO9IAbr0ibPi7W?Gr#l3WJ|*wVoR2S*V8E}hc3RvZGzWcnpEx57jYRAf%3M2dQ;CbeyRE*O z^(@}m-8CP{6b3=Ja(s@hhlYkeA8)wIoLM@_>=`L_@5+G%c0ZS{&UL@P_us?D)D0SFdFn1P5ys1#9n0me&X%fLP%#{3 zKsk0@a*$A_f&k_J3)XEfP{Kof=ToIc<_$KxECA|JeH(S~+xK`zpq5{6%cb3-xIL(s za^32vXJ`G z1GHs1edHxMBb$UQlUp!H2kEQh{l?pxZ!qqF;xB=pt&JjIX6L#xI?|_4b+)v3inbK2orEF}ROJN%{!Q zXt#IpM*Wym6vFmj0Z7_#9Y$pJ-K15hS}fr&G{3MeV4xn~&f?8rZLl1Bcp_iEo#Y`F zQuh7rUbfenlcTYDKkcL_B4=;?yK99A>LF^^Tz*`@6SEU~YqA0a5z!u6!W<%v*Sth! zVo9+P{%N3Y9B8`a%hPT`pA|E)ok-7h4Su}5h40Q*{%m`rqGELN_0utkmWIY?Qe%l4 z;$A_y_YKe$wz#EtK{O{|oE^TQBu`Jebw-q$x9C0C7TV?O>l%?Q$`G+JK}Eo_Wt@L3 z;N0PvtlpZae^%j~(8O0RQGXFK$5YYDF*c*-Z5!#QcdO&h5j^{PwY^~YmhMQTyw#~y z2%F{Dwo@v@iUwlCCh0T0<&M{)7Ascdv0#(#cW9Lu-`=r6Xm`7f+I&ywtmNx2Tr?#1 z&SfVFi|~<4loY`n&=ra;8lr~H5&s#}F-MAmPU@Bn&m?2|;jhQtH=q3;UK>_<0c>^q zs9q-wx5<2iapU%##fgz58aItr4;tm<{Mg-*W6upd*PlJr>H(`il2YG@Y1ud#4T+8W z8OpPovyFUz(kulUOWN=`W|yuWU3e?v%7d&AUvAd3A8os8E0Y$HV?(H6m(AhT{Nf|1Jdy8rpt~-fH08Zcuu1Z5>%5M$SWd)+-okI_H+CyVW8tyxvGX4O)r_KqrcH5M56Hulb>5Xr4CATxFS z+_;dT2Tc=xnH0mO)1y?UTFBy0U*>k`6KjUCopgx`B=3r;g)>FyKSV<$x8U%SN32SB zSiwJy{=VaPxvienlK3J`VZbxZgF7~y$i8@<26&ba^g+QZ=cIJKsPqk!wQ+adF3E`0 z=KPUg{kz#phQXg*PcNChmo+&)2mjXY*9xNjSu-E|BfX z_5j9Q`_%Q||+9C6aX2~;{Mdnb?4IH!! zS$$33c+{Wu6>6%^#cO^fh3eNb)JJ&A6;{IL0GGw}=3KGLyM9}|`1NRTM1}GSRMeDb zbS=aYG}lUSxO_yA_Md$3I3OfB(uSiy93qBk$oeIo|6-1^@a7@OBWzJ{WaJ`&RIvDb z;Q!HD0a;;k;E2GezwGQ24btS+)wzHm-Do&Gg*dF0N;0FrEzGS0q94F%YVc zR0Ed{z@cZZQe*r>a!OS&rafT*#E%rf@Fx9)aPS8hqc=D*9k4huPC#a+y1F`xM6P7Z zOkf#E*rcAP=R&by!=FPmpZUk?WxfYUG{kdG<*gs6Qm&=~)3eBZAf^e{fmWb;;7>e1 zlFV%YKOTGA4g#tRQf33Ow44Qdkh?{JC|RNkRd0Ejr&**Yo0N|khL^E>Tqd9xu1+n3 zhGuhlmlcxBZu=_^s`+Y*rr%P#t*IG%e?1N7?34Ny#~WP&i+5 zT;yq4Sn8uSmM*Iyj`sJx24m?5IYA=9nEgMwoeAZVTkTm`0<4x7IVnay7Bc4_EO3fD zEu3A93VT4YOtRP6>zn#)GLhwlh_(lG)#+l?J`c6zS-y%1(?(?YBwOXdLzfec5z=+1 z{55l!hK}zSjszqFHvC4cq!5i5oVF+B!q5d3WRR$8bm^oSls(WWgo!MU)hq^{+#7+M zXoR(1!FWdCr=QyQg%4uhHdfyPjD?32@3r;&zX|k);z1uB9hCvXGn~z02+c;vVt9kz z91YssuA_}vkZ*Z|uC!?l-VQp}H(^cdNu0Uoo{4OUb)X}O^-1&10JfkNo(zj+019%d zU5U=cKwO4yh?q}$CldJVN`XP2im^jaeSGj6&ab8+YaZeW>^iN8o)9W(=)rfrhaakD zf!Wy|Y#@HRooF@ilY4+v#;+ts@m8|Jyy(%GMg-58ftoW%-*+Z-{R5688{c@|i0T33 zyuaXOcT?83Kc^^2;5W zg2MDD&7GKRtO$9A*y8~iz4>@!KV^wgS>Z`(a_Wj$(m23cRO);qIsH)RoyQMzW>Dx> z>*E20JkH1+y5(qlC@HDOya5BQVbamiY2PD_zoEF}U?`cqb}=(#do!N)CIKQE;hn5s z9e>0Kh!3b*URtc%N%{UQq)h@c=qYvXCeVEYs6nxr&<-)J8It;qxkgGoz_M-QZ%+F(|~(`OgE%dOUyCKvjL@y@Ip6{5GbX z-N3R6=S*a+z&%|CAyf9U*Ji4X$_v`o+{#>l`id#F<#r?3EeOcjj5`~ib2yC6tzQ?| z4ULkgF!KPtU+A+EA{6$vi))f>tK6JtylifWV6En+JPNWg65J#h5 z-o7M+0EQE-01Y@5$Po8@;z;LOM|>GJrTKq9+@C8|*DSiQ3V`oRE@+)h8**XwZ+a`r zdLtWx*X5jy=&q%qL9GX!{$I!l7}VKPZGRv&IKT-KCnFKUyv2akV4Ec#S?0ryzZZ&J zc}YvYT&{~6vcY_w38%u^W1Dm}TxfUovwU5*OW@9blOzOw!X9%%O7ibz$N%AUjZyOn z&9@ym*=&|BvAyero>LG>VQwtNGd?=E63i$?Yn4;!{CHn_Z<%mg6n@Kw>%k3o!J3Dp zULpQ;(Ed&uVK*Z=SNCxNvjiv=a=U-26^f?BY+_3*kZStAOOm?Mx)1tF9P}38majdP z6cyWn0A}6F^8wF%xj`{!?(BT9$TVmr&+^fnh&0M&iYt1Dsv`KR&ZRO1S7us9M!GBf zPtq%TpWE#={jqa-Lq4ND;6@86f=CN@Y}M1Ps|f9)Ce=^&&BfeA~`C6I<_$BOIZ7Z8b8cClbXl^ds)O z%AWzuuW67x?6~l~15gZ)=-*(NyF~c+LDM7bc20nv&F|>6kUU5Zx^8c-1K_11;f=jg zm79$9nl9W(ozEl%;7XCOca)qmY&5jCh;4Iop{iO}aGcEqRQ20?&c+_J+p#FPoo|0c zHyW5Ssho}f(kb?4hap1`6M*X}_d{n!Y5)*{K~w}vSHOUDqs*XVsIv{q2O+!<3Alf3 zF4sCx&y|QJXCUB|vWJeN0dwAn=vYDxrsZKy(REZ0-`!EiktyPj0Q9qG9O}#MTo~I2 zh`v;}QGLlNxMR;jxlri&THk-NBTwmH#e34UQU5yH&+`2>!O?%glbS^88WszMez!G8 zUMZEv$G1QyFBjn^RjsC*v*#f6RuO+R)A#CQ1os_qB|0D>A^YfTArQFXzwZO&PyzWz zIkHrqRNddC9NfCk|9;p7XDpf9DKbdBKGI6xMxDLia{&4UjGzJaQK+x=Cx;G#mz36& z3Jiq;#nPYk4h(OoCL0F^&6*?NC%&iayrrW1pm=Ug*0VF@#*qi#QjX2i#Q{yF9T4u` z-gbtvr6Wv*)YAQ7pq)b~B%FBGzx1h~;ya*s`ioyc#xf44#y9|{LKvSa4h6l`e)C`{ zlqXocQtL#i)C~{fY@e>Bpt!YQPu~d51tjX19lqL2}li` z;G?fL%DTGD;;4+-_pszxa)@O~GsNQY+SoVS1d)c2n%dhK2u#yk1bhj8lV(~Izk1D* zcFz=`iz`0}+1-ojY*axNE(l3ug!J!c`TeL|I}F-abHA(@G7xh>WR{@d4(YxL88fDW z9AJtMr#XFOlBB>z9gRwd0JpA{bMo18;*2%@W1OS}Jpkp&;f}EHTrmf(G%NkYt#FSj z3KhY+iCWwfhK(9w7pHWVAMW27>uxCk`};pnLS9Q6T3Ln<#arzo4$|?ZQwWGL0gZ2C z_$mys!sUs67CtE=Uk@bujl>K-H%90Au*NF5! zmHR+`jqQb`S>SnwYJcF674IagS2ZO0~*CtwsAnZ@yDqL&Syz6 z_U24v>u3nWv=kUe&Y-}-E*H$eV= z`(Bf|(%!l}{kgXT*M-_iUW$``9ZFy6P+u;wHK{`P`@!=kfCPYA@o3>SYa=Q{#kYiz zpZZGgO=Y%(B!cz>0YBwM3ii-y+YJYa8y?lS;|@7SY>{OtVAIzh$xVcHA@Ukn*MTY6 zV=;rUk)zYfP*qvNxDsF*O#kXzEISc2>P+(2W4N}uiiS7} zfAMDkl~Jn*)D-uh?`HDSCr|vNk(S&^0DPX)%l}U&KqGOCojJ-{E^jgEG++Ri(Qt41 z^Iz@J$%|M3(A-MiObS$zmdd~lt)4-$oCI`m$I9W&6-@J&<%_fD^jer?T>=sz0ze`Z zEeJW%r^E#EWt^)vKm_{adH3pad6vJ(z1E8VyWGpDtEki*)g4ewUY^}Umet&mjQU?x zG-R=*Ng88!vvBaf>)EBODvIwv=zSzuJ{`Gy?`c@(BIy&G4o{i0T3HtFyJ@(xbq>(0 z&6&MWEZ=-|fxa!T9xw%myIxu01I=6BYcREcZ8a#mZTNsYw#?cI(b^Cw>JUkM4%1Z^ zA-pP233-2X<=GzZ>4sz!|5E`9J(QG>DBxm%<6Ss&dq^(v_AJ9@9?sZZCKxpQ<5hU6 znq&`ibRWpop8~4tI)W*V**@X%@wM422&H&cksd1`%~~}rsA&<0H-<{uMt#q+o&HCZ zcALK;?1eL?QhTJzm|;cf10h1pQ7UEQili`H!LHcJ?o47*}vB(U@dl>MGBKij|N zOa#Og;y)9!7I;PIzn0}m9e5D$KcV>8b8!nx+DyP@et-~1PRgYCcI%guDB`Y^S(vrm zYq9lbb@*E@2b8}86yBzkNK6=>JL063)^~m_Rhm8IzhWUA9_;D*TL+?3uw~?ID3y5_ z)51{p&d3u34ajBACJev&*myJY_~UgO8z39T#(p9hMsh#;efeLB%o$-u!8najhf^Quainm9(hEfAryo#D$GwURKGX08A zh~QX*J-#`(M#ee%G2WJ~)jr9&5ryl(rAb$T46LXEWse7RN1Sro=0VN_xd)4WvdakO zR|}*+PlI6nFmtv&*@`kP=Zzrx@VbQ~VQQ~w`yYpIw-ncCALE&e8BE(G zA0>M!;>WrBiY*q+l<{`fcECUh|zRSd3ox=g%96#E-*B*~OY`6W?czqyD94)q( zhMN_q@$Y5!^W03(vhaWb$$bySa#_2~@En+{bANHM9`6E|_Q-dG5|crU-$U2#U)ibM zEhqm95rZ~DF!t?pGNQ=HX;-P!z~l0U<_u* zJAzc$a+qxl0|n7c9bvsDe2o-5vtf{)8w>i@pk95QN0%D3*_4fvpPJMApH;`tKCz(& zQ|HNSPaDY}JdC_h#pYqTXWaUP7^g>ZX5NxfhPzjhx6>PLy9AcmbxnM-B@~3jg{|N@ zd?dX+ttr6z3>7tvM+2v96^-Xl+1MtQn0R-+#^zH7ubO&#C%D8`^xc%;MJ{p-sMCm^ zr-hyKwqbAiJ%6{ZO;pRf-9JnR15sVfAv`7XHXZ5s2eFLQJE<^s_ zY=e|aF={d0XMbp+Y$JzqB`Z%7oi2c$9fv)f z4>KWocoZCuvY69Mg&9UV=^cG7Q!9-4G~_d6$w-<7V<7o zFlIE1aG-8qbhK5+`5{x6Uc{ubBV&+L*EUBo>wl!KZ?`;CP@{r0)%G_95ZCT)=yqKL zuN#-%JmRFY;kCfq8oM4C|8lzW1{vc0sCFVpOiIY0l#gDe7r@$NZg8EqtUV3%Ic4$A zVc%m(%iv*UJs=|`3H9*w0qBPm9GUJ(&&JTz4*r_k4{@i0XfN$vqkbQMjNb<-emyK? zIzkspt@Ut2m5+$QS5mPF1K(=VL?P%ug52Ukd?Ybe<7E=j%##!r=}O zmvs^(21{m@J+-8I599RYt#)*nu}MuC6t0GrUlRM^#Kt}8%V${vQ91ig2%{rSsmN_! zs#u`|k<4Eu%72MM{&&HNNOD^*y8p=HKqoPNOqk6q2sPk@A7RqZFTMDfU8eF5=1}`a zLr#qh+5*jnEseBNT- z&Wi_jZUMaB3n#M{4H4=)c)P<^hq9;%DS@cQ&){U~hDc>tioqOKr7%R@+1uZcM$!Y+cDSXfU=dm`jo&$+xXOaPhzH)BcD9O5{yMZh8dAvZVe3Z*pU zfyYMo44K4f2lXK)Fk=6zYU&Wvil{AR3J(v^Wu`vs@x! zZEA=0bSal$OjR3!^tfbQ)cz++RbO$B3XYyQWKb%!>i2V0c-nYz0HOU}7@=UUbbh2` z_+Zt$C5~_m6_fn(fr?m@;lYpe65>N@x?K_KS%YPtqya_k-`MZJIKVute>w$-Ske1p zVYMJSEmQark_I9D!;JxfqRpf9)Rqc0k#8WS)IWZ;JTm0{SVK$^d>-z6j?>BI^Xr@(JfC{ixURxJnkkyPV`Hvq?iYK+hE0#F_-1GLDmc&M?Y{yu)-*-W zMVRz%Gu>+n|Mh4K3Y{r#N$V{+L!_w#ls%ydiI7t#t?YFNY#G)_PTVicprD9R^+*It zYB6_e*b8d?1)}u7^dS(c+TWdnkwZn-!O}sQQpOb9`eaItkO)4;nm+ZnK;P>*-cHXrArU>A#@*l)wMOMF zqxHy&?}AIS$ju1<3Z--fuxN4H5w`kZS(g^+@w7-MxDM_pxkbBCu`^l%2AK3xnKN37 zI5iO8{qW{lOXG=KX<0X!3-(2A{*P!(S70-cEw0jpwCKQi9ja=}auBous=d`G2pf>E z&FYv2705b_fhrDZo)~=m5!Y>mPXK!g@UXjJ&)-OLC?A!Z7}H?mbNQKi1{3k)J@wYZuKLG9QuxDywO=#;EYiOHzMUn=!8X< zS>*323ZQ7f2_T?>U>u5V00^DrPy&D@@Ky^)hJ}ayG2rr>K(H8~E~E#do|RM5iC+-3 zgg{EGsSQ{ot&~?~g=%pawv3pUiLv>wHv9*>t;ab~-70)3{B1Rni9ukkJ5h1TdMb zgn76TE3`=YP9jiIr>_CZ8NCZsfU>uIzMH_$^=3G>VSUq=*x6rl`5Y!&Vo*{q8P?eG z^I%cklGI5}?iipN0hFq+PQdaRcg|SRzR5S^BWE$BavOD*Wy2tyP%b|9`|gbrvGe@J zSVN^BVde3m+xQH7R4j`qbWjDXyTA*Vm@a}S`~z&AS&J){)eBa;B}Iz!-}!Zr*vil` zSgJ+}Pb#$+5*p)nPVld4X9ey-vU$? zU}iP~E{%CoUAA%LEnQ^UAh~!E6^F3X1v`wo)UqNz>Cg1>Oc_o-2z45SikI?yR##o( z2y&aT)hjrE@&Yr)j?egBbb#Io6^EFE@SIg+hWJ}QZ|#8lIPCV(UVfXupKffm^cI~8 zbGmaWK_q9rYwv#ah72t75z;SZvG=gX_1SoP*~veQiqy93km(ixXoZXk{-yA* zFa0@G?Y0fTKWZ5CecaO;+Sf0J;tI+FV&&sk2XZH>4O}=lhojWAM)dh~(?k-glUTvv zg_{19?IHS{XBln0F{_q4sAFdf(#O*7#Yn&k|GoByLG7NdkJJ9D)%(!1m(OV}Y-#J( z*o40~Q*{j=VKffze;m{n-sG~U-45Wl1kDC342-8GDJU(pJ_Zd%X@@jNyocPE`hh^1 zUkb)Tvgc|v;0GFkXtcWhF06uL!9_h`yr>1oF?I*zdkBx+7ggQLybm)BH$lPI@B#;m zm0M}J$uM9CUdSGvnH9wOw>sxWXM0xQ4#K_>=Aq#GwPR)(c1}dlZB!%jo5w=~dGi+L z-kbm?)zsid44B|TK&?_?DFWrW{!xvlGS$>gfpw5K_bCK1b`EhAl!ALUP-f~q2#@VC zkC7Xv>F%HyMShMa3W`O^)9IPH?p7>oxgBWZFn~F$oQ1*F&>-BryT>*?luO!QoF^iN z+(!iD<0ZiNAaXl}2yxeSxrT~zNm*Xj`w4xfY6=BMow+askKy`b>HUCU{9PaSgtZ!! z0yg_HXdiMfhdE6gXyb~I!H}jWW4y$+4D$ObL=_%ell+A6PfF-TNZn77+V%vuGPnX_ zBK_v2`+@Zwfrvn?R+>rDC6J3MHHBcu8HXp2DIi}B8v4R`4;%HMruXb)EXHxEvn+)* z2lpSSiB#Yjz$k4-u+-L=l2>RYvr`Fty%`OWjk1Sh85*^v4Su&=g7Vj~u)Iat3w#Ek zwj(eW>e7!WB4u~=54$Q$amlA=q%t(XXFy0@HX)}UZ9qSn5G$`0^E0lxBY?D4JXY5? z#qTeF^N0I<$wvjc;RP@50^ZYKxQT~wzg0$C2O6yGB-~ACr=8cz>i|tw7|f@z6BEDQ z68+0U1AhJeus#E@If1;;%H#hOU;X0`paY|dtr}puRf!G5Y}RVRv}acKYxJ0mGN~oKqLym^kxq*YR-s` z26^+Q!Ghk5p~Nerml!QUAT zJZmRBhb~k!eFog)23-F*vXS9p%1APPeQR%@U}TPVB^PM51nE< zg1^IiTok6cp3vjDkm6erq~V*p&VmHmshwh?)GmdrdVkoH(~9!3fXgRHU^bx-fv6yJ z@whTLfWbVJz2CQcvbR4JA*VKp2*j-f&Z6t#NhgBW_l27)LUBi9x@&J>fcmw4sdjiu z*(UT3$fpwr|Fzw0GmXuI>nzr^`+&=RXyFH>Kw=o6SY~vKbfi#rlXCzxAPb&;-@D=8 zLwO=rD_TQQ;R`(P3t7-)NyAGJLAay9@BB4PvzJ%KIBG7f7uNa`m2&b87C)G zb8~5O9}v_3HMowB+S6g11Z)b!vlX^BaF+1L@#%rm%LW7)f%8(^ZZj*$ z!s0|%1VfHHyUuk{9Ko$1WhnH~hsbfgAkvQ57-@rC=++>r`|`WIGtrNS&3>ujh#g%O zsC9KATcvG5e)XSyObFJ`zV%fOn)smjNp0FRDAHg*x0u88`ba4v%pyX{OKp4&QZfXb{o!cghpacOc|F3IVcqvKO)YRgA}* z?CfkesN6q)zNp^Qr-BiU38H|FAE06pt2PMdpfZzen)Ajp#X3`;FDYiL6mWSCP(y5% z4Qo7!$kW{3^^AfVV;ly{QgX*o4+!KvagJSIbrv%W9nDE`zRNTm77wfK2fJaY{Ju;5 z4LfceCA~bM>Fbck*M2=O*V5|_Y=*;4r#oA~;0t}Qxz|9ar=j%LfHY!;*CIDt!y z@Fe@XoMLB~OX{T3UB;lS;o$5#Gg;vKdQ6N`QSsix+{Jx#jwY5uM@wkFm2ab=Cfh-8 zSwg0Z)nMq-O8H98l4TL|o_Xo8$IWr|c7AS(*I$*q39BJnk+Hdts5~6dYgVGgs{j|1 zuE;Tv;wsv89^z?Y9purDFGD@zD9D7D#!$DktILDSrxCVOsU0_-767(u)M>5SbK)O*kkooNQZgoUL=5?BB`;_lp##>D^!JB4P11{=0Rmx zpvkwT^9)_fSJ;yvn;qRZjo9JsF7BM!AB%G!HvN8bat`Fdd52&D6i6&q?}SG>%HrrK z61(3nS^v>^cyLW}J+>>0?ZIrR|Dt8%FzfP%BDfkm;!WJJetk;#syRfPqOz3T-ft?y zB?LAL_22`8tIyei79B?h7u)r4m9Bc4A(vcQTAf)j z^V z;!e)!;4H8zSV4zbpdEZIB^L5)+e!6I$tLB3GAvbrsO+uFh7FBx?y&!gr4)SBQRiDp zo9obh$f&y0+cXUqomogPfta^C^?*o;`^_Ak(%g9hf}kg<{QP4=IU5238=;}bH%K%r z+GuG_V+JHMfu*}ox{!)cpNsjcZS4fWBJy?{MR2(ef{K1Pn~~q~z~y7t{V8JEgHIFi zLizj{AuQr4@?vGn2iU}YiTv2A$@GTkIw zP?W;Wu!S&&7xJ*x=o8lvY(|DK_HbVJxCvkr# zOvxcYd*EV_Y+Pe;Bb}_;{NXa!a&B9F{V`^?hO^s6`C?vt3dLQ$t0nMhVu8bHtEi&* zX(s$v=CNTJoHLDPau7=cFxBfJU4K8_H0CUBDfw5i9L!~}h_(<7Krk(aKWUsjF~oM4 zaplh3cX3wE;7p9e=_6;olrk@*(;^TOovHDnY7OI1RdJkGBbw4lc zqTFn1`;RnoIcw{=(ym>JuO*Yv;MEs%YTqt$S*s7(Ub%OHs~b8-k`+rFR=UfhA0qdg z23?5R!d>L2AdHqJFs$ZZC(YI_s)|)Nm>qj^HMX6fyZ)qFmXnl}4C8N?pirhyB;Y?* z`O0a??RdNx@Q}YBdZD4d^QEf$GR%Hpb7#rPyt0IC&PHnJKAqr#XMy|O;&-L6+(^5` zN{f@G5`6uujskj#;~C?hEv zZ|8~w)3I5H^L%c?K3i=?f^%?YXVT|ajRX?+MIH<7NWHn77LJu)wOb7b&IzvLXXe;g zUAttprubFP(GF9bO8io=ivOakTuyf4Y^>~=nueU}7t1}@B+?alZs0;Ls?M_G^a)gi zJBmqm^YC}hN$`ze_Q_qk3Q>%XLw9c!|xiwq|44~4fgqF zO++Gy#x}u+GQY=1vD{#Dxlc7L{bLb2Q~2spMu=44{nEQ5#Q79YxPTtz0?txfQgjQ@O4{ z%Ra&NYSR08qtr9o#Ds*~M8Abxk43V$>qNn0lkOriZkAWa4^Jn$m#=8UwJ#5*$7*_YnSWdR~k=-)I)Wgb`Jw;BL^LzhqaqlA_PcK{+M8J(t6$!~N4T5xy60orQ5pkt7ajK9C7+ z%^l875$EQfO!H2*0-r^)R-6RN&z8!u5tA0TZH+hxaTmg@ckFGKR??CY+|D10txabO zt$))x*M79WII8Wm;BjZ_LOj&PTIAqS#6;iY@pz@cp5isRxV-?VL9l94xDfC@47zO| ztRKwWs1VlEG$s;Lb|Cp}SKWY>L`mAkpj}rNpt|Y!OC}Da=vt#Ps_^ca!{rBNe$Pi zHjUQ6Yg?!`)9ngCDRG(Xw?d?>>8wREySm>A*8T14eR};=aEvR%cObzrTZ2pZP4~I* z%c2^}%m7ZA4tvrflV(w`%UQ}JUscM&+fq{lT=rGO+SL!S#g;zuMr>+qe$}zC4#i_7 zwOH&1^2d7?46`wOxZ9Qnj$*$ZNYxY9%7p5QmOnh=W1bk*tQ|e9V^;HJ;u~7hM{P62R%Mc9#;fIk7Aq z_Qg8jaGW@@CkzB|gNI^G>uJsnPC$e{-P?CE6PqXg(-szGIVAN(ZI8*;x{D!04-Sy; z_!(XA&JFfnzl)*QK2DgG;QY=bD_)SgJ=yPxNIBDOcgpCQV#9ZMIJS`d!MwDX`gjYR zR%ue0DV3{WRq8bL$!sxUinr({^T}2^we{k)dE)wns0=S97OVcj+c{S4nB-zf>vEw6 z$+*_aPO3@b#3S))KBGGt?T4QIEw{YIo=@LQ;A=b`&_^^{USTbi3eI+O@N7FGPBFP^ z5Qj-eYWdN(wj0r~T6l6wdgw}&YEQ;;LTb}K&_>P2=#J<;h~_z(e{a}KRnU&C;SGgM zP$X!E#5`_<(e9lKZ6Cho0YaN;Cq&8-=~Z~3D#)KZ6rxP$hI|IbiVaVf3;J>vZ={{k zMV4`}2KKu^wdlue?T|}nV*iT(Jzf1VvOMkyh#j_oR9Rc9&fz#i77w`*xBQqvlGQDh z!h^Sr{Lq&SO%~Vi+}ZSEpYn}(kqEfnkcx$|>?jwhw1>wpGVx9)JFUP18*mb9hgbGq z81X;gxLuBm@mO5#Pg~DwI?cyOlDBfEIhEO0?w}HkP2%Z(VX$jXYPrKdR0TQuO&`?o zmI<_eo?bjCWpAt3r;fAuViR_{;c;tGCvs3;(QkpHzy_|#k)rp3Y_MKs|A=oWM$b&0 zJAL$FQk75rH^i_b+%i((LRjZ_QZMAGO&ib2%Qf$E544&VilU7Vy7xAoD3&-rAIo$F*sBpMpKlG<|%G9n)yL`v& zOQorxfdm_VEzh-nC>o-d;Rsi(>6t2aJG9`t!Qo*QCkTf)9b8zpK75SECy-(LZD)8& zNBE;*6~5w{*&6Sw>yw1aLq*LAdtKQLP=~-}8DGrcbUCc{{IIrnA6j-k>)PA| zX{xTi-qwCmX3&t?!nJTPI?raG@}OYG{BgiYxP#A^h8si_<-MwM4>Gi9B9=_z~?X4=<#U zo#v5LlRK!#3QR{LZY1T)^ZEN<1Y_KDT-<4QN4Ct*HMx90W(XS7?lKGu$4$7N38M~r zN6Vj5h=`D;(4f)751=Wy*2I^s4rhV(HtAO#h;g35jx>KJ|G+l$?07kY$%KX40?qAt z(q>PHFx5}jSqQL`YX6xt`*z4?bNJr2Vv?j%f?52R&x4#7hF^?qvl_QQSGMNI%G%N$ zXvL^EeZNz}$Lh(?kK*;bcUD)`xVD%3Emz8&Hgca}z$-Cu5-ApaM0kQ}q?}`aZ& zq>*#EWy`pNvx9jOIhxJ0b3dfbgFh0$O9Wg4HF5U*;ER@0*ZjGOi*Qo(Y-DtA6s;!M zrYAf2-?Nl6^Uk47Fb(;-%i7>Cd1riOWa8PLs)r{uvY}qyOV^4N$%e0`6J%|BV}#0~wU} zQ4rZjiUxC&1jfrclY(sn*fJM7pNLW!xDE^n=@tm}O#~uv?fOrMl!C}O#L!Xi1MHo_ zAk=OV=@A0Xv^Rp^eDGzw-cJZ3?uLH;Uk+)Oa=z3XF$p94C|@cy?n^>PnZFfu7Gs)N%)a_1j@hYK)rkpUd;vRo zw4`6_USm!DH7)imRt0aFsp*s#Ur8?Xtk(oz+Ko-=NLNn6Cz`UCw{q%Pnxzb)HA_j; z(@`rGfl6DS6Z{t!7uSnxS2lDhJRE@MJjJQN5dIR>F1oef#qpiXE?Rxm_yYy}WGKj5 z#>Qsc%o)339zF&u_zf{hvP2SAkWDUI7~Cn(5Jad$rGfJg8C4wLPIJGVP?7i8f%<>9Zg{FI+mt?DDD}^V>mWTXMN5?;>D8Otq4#!? z;D%eK=n|z(0IAMcGY8$p6X`hJAILMt5(j3P34z~Gyjf+*ZKG&o!vsX zL@GqR^uxfOaRXSez5~DGr!A(YHCJ8}yF91w7aBr>$@g}L4fXmTllk`A=3NEqA+dkm zMLDx^CuCBNxiS%$)P;@^Dw!pR5y~h-D{QYL7T0L%!7AJGI=x%H29W^bO~>Xko$wxD zd)4*ZvrVQC(x(||$4f4AOj84CjW}wo;eJbBB*q8Z=wBre_qx==B{T_q>=OAjQl}%` z8ywhT*;~Uw_vwr4o#nwKy{(UDyInl>DF1Js)-s@dbhNh0as5t86&7Y!DI(>k8sIE} z8m~6HIO=8#(sKvBq{~|znV8miPJO|<$6Q?%#KcJmgLs#4LpiPEzJWR!><$bJ$6RS% z@BR#DtDNhmd^02(Cv;WLg0I_T?B{d}(K+0?BS%=xnO^4jGEhzl-nK3ZZ}d#U^jmgD zVu3AH4>7e^fGvaW9$VZW)}C%w{S5|V+9^`qUMrVqte@QhGgx=+Y6S*Mzf_yUnegKE z4?hj+;86-Z-5rsS;BGHXg-f>#p6@Gml8N8$!W_8i#NApols9Gy*O!n!Ph2B=kf#O* zzousb3a56k;(QIa_`+N$PWd=kG+OwrJ=ZI?!*oPP%_hii22(7xF~o5*SDBN6Clcsg&s zEQ*~GEX3VG`c^k@t*` z2EH84lmQO~fGFNK(tv-C9P9Q4Q1WN!dt2W>2YkZ9dO=7wuRaW0;JSS%vyy$vx83BmvK3tZ-e?iQacqWS*w82_MZ)W06%1-`R7OA&XKwcXzW4Spzr0wRo- z-_PFxt7Cn>^%=&$vrMP`b$swH+b7+8K&RX|E(a>7FY-1e`4Fb; ztU!6@cFqS53SetQmtPj{AN$!-!~gU5d)x&*A6a>Nzw~*x9U(X*7~Tc3)o~^dmjzlt zTfz;TzdbtJu9(m@U-3ChRH0L?8K8h`yObQ>Ny~31v=Ym*(i^e%*3kOac?)Gc!G<|# zHb(l>&YW|JZs|jd+d0#=W4wt9+oGk0QgH3H;Nh?L)8*xxX3&>MyhiKFW{EHQJ2FX~ zv(ghTQajW)vf_`&pvdC)0WIC(h?M7tm7@(@>2nWveWc-S=|cYBzCzVien_U7wD}cD zh{>hjP?ND3B#8Xn2E?a)J9mZJPw%czR!6^c zwBByOsZ<%GG@W+9odUZ_b!1D#ejAx$v9jfGaUIPL*3aXP=Lz2<(+f{i!c3KRM5Nu3 z)#36(G(U4|tOCm0Eo3W4S_80Q zK?bL{N3Rp&Zp7efyK}Dy_(wQmrw=Rit?yO0Yy#KzDu( z_HT#joliy!ucl)=i%0%;wtVR2R`Ub1SI0 zbm%2TF38gX2OWiq!Nc^bdT3DzULtzf1Gbc7MzY3hSLksK#CJ6%&tA0o(N$yl``4$S z6MUJi8zQ20tY76+SocIfUgv!{_P>0hm@cO#ia<7ULL@O4ln=WIt>VUK&0$uWcq+ z@h%dbH`B4bU09>9*F|@a4KL2k^lv#et}vLNMVJ+1gu7WCoh}R_TV(xGHw+Ho-xSd& zkw@!q>%Qw98a)hhBUyPw#oI2<1HEG&ac_LU{fp3lp>Y(^Siqx&tu0x=zUB0ynuDI- zVvvAYL!ieDk&s%L!)mELO1C-*WgSt^5jc`A(^FKrBU$1x=~!2*1tn0>uIdxDm^qfy z2Qc49qe%^I8k#}m5eE)jNk;*K#pT&Q21WF*{qb-V=#=u8cG``y`;g4EK9){O5&M%j zJOh6ER~~m>9628J6roY4y?_W8efW)OkU>||wD&@hMW$9wJ-%h?u&l%CaZ64f{+OBO zvi0`jfo<6PfEBM7<1?|YjJJOOi@g(PbY~a_-Yl{lU!5@`+@SEJqch+WK7;o<)ATmSisHto-{Z=&MLR~e@w;q54PnaQp<=& z-dY})i=a6{oJ$rlV0eAT5)br%M-F`0BtsLH{u?N~n80pe+4KLNMkqbvghpaALd(XN zo&s>BPlIIDPF=bK*hIL^i6#kcR{&QxAkd$W=2mEcxbUDET1VNLgB}{)6Bj1e!BRfr zHy11k@4xNjSu*5(V~l?fvs;#bb)?WwRr3BkX^=3(2g%$v_9Y1CP4(q+&wM=&>OG<^O< zBGf2H6J`1J3m3cAJRh?qf*$j^PZY^q@X`1RfQt|edi>B)+^@uG? zyX4kCu~7ZvZ#&-eg%9__$7o|kjM}KvqoQ_&ilr{XWbD3wiEBe{dw{L%)9jXi$#9jS z`wh(x;Y-fL1tL;j>%{mFUpM0}m{Si?2%}F^L+21!`Qf}|QGd)iT)EXe!TB_hl)oX{U?$FM;W3U9 zm~WO(mqJ(+bw>PqpTD@lj#qA>g#%wY|F+T8PpH4jVJ5Ea9X|9NjL=t4m!G{Rsat$i zZ$u9+d~*N3kn6#Q?Mo+bVG;~+-!5rH{A!%Y!f%q&KXeWvE_j3Zye%40RO3wc%?kwY?YWIHcFvw62 zjUYoPD4+-k2n;PCNC*f>H`3iH-6;*yA}Jk1cS%SijdX*9bb8i!dq3WLf1Z8Les_4i zn3=WK6~F8I`v*4GpSJ{jbX16fYw|-n;F{l$bwBH``r=}0MOuw_v|Lt6PEVI3bq7-5 zr3QVZRNriCdGq-Q^93cX6#M}=^0&wbWQaJ621K02QP?b^ZS}ooubnbZf3r4q4G;Q( z)5>N8=krA^fzJ-;^Qx2}eS2borjDhFe!qo7XXp%Ip0S|r%vLD)_Zb5?OcTIJ-0#vo;q;0b2MNNF8Er*R2=}%0;m!; z-QOR!sSc^Uk9}7kANLLi$h29hovQNLF3?0E4^xOc?H#z=v8|3?N_R=0Xfdb2bvqPe z?FUJz=v!u-z*m3O0; zbHj+79e+^>u^X#Y8~#O;`mv&=zl%ZpbE_N#--r?ymZVi37TPSRQ)`qkFNliMjcu?n z1s&u2GmF6UEkZK3T@h~kn=F#wTGN!peF-9xp?TvMlK6hpr@$Kfm56hM^XrS4_N{5@R`i@?35|HXQ? z0Sw%?78k0C&1Y{0+E!9Usl7?U`?;dCV@6DM2EBaJ5Bun4H*FLZSlj6}P+z zfR$7I_`LWInF+3si~7MdR)8{#VxR8AcJ4RXLBZmQv;|+*(f(e73G+{1zqnlSa7Vxw{!sGu=@|8~y5lX#}(^Q5 zYCVlDYiN5FJ1~(U*fI?e(!fs!o6cm`qbe%p%l9N$5_F*8G=YeEV^uQ}DPHmD1R+hMz0LKAn zv$GUXJqtM-Ii_L9L@FTY`oDP{xDCxTaG6q=OFiso%pWhY7JW*XUnLe zY<9&-2}yhe`@-IP&3K|IRlIRAEWQ)Q&|%on;p()FozM&yEB)v@>hY;lSS%Tl?yAXC z&N_UEV2$rKA6cMv59X-%Sl{fa1{T?C>M1ur^@KL=9o?&0t(>&y3)~oAoOdwFu7uV- zX!(@&S~}u#zm!cJu@$GzVtvwbgY7XgdZ#y4#_<;YJu$bI>_1wRz60R^?Uw2fi!$g(#J*C4Ds08KQ1^4>f_pc3a4580$pT{ataPwq`H{GV z0u0oZV{SsD@n+)Op`fXDU}2zg#V~E=e&j}ebC>r6Yj#8IIwNEK?FY>B7?fiJ*B)=6FOGAiZxF7yfW^|-vUZh>?ih*Sl!IY?JR950$W4|3;jvgyJ{)H9+#GS z5%lWX7tkOX#z1){-#PSIUYjT8`V?R5Yzc93d-d%HiB%W{Q)T|)4E(Rm>l-{n#ar8X z(ZBLNuTydU*}-~y8o%4h2>LT(v_BH&bO7{rgDbLiGR{qYYhB8z1!&A*xJ6%L?j=tB zHdb&4fN#3U<<8Z{6G1N^k#$h*(KUiFp4kl&-&mm$F9etisAWO&6+DABe%EVez1S~( zK;_M*=TCAf=LOJYtz9nDT?#drZ$6v}@#BJpz_M+XfcJwF=K`jj} z)n-bqsZ!cUjWv5X&K_UZbIQ9-9tr=*_L=YGFV&5Qq0dsX z#sH24+WV}#n2X%%Y&qIKR%`xo-~xXfT&NO7PN@9wQg>)y-s($fUUpMw`}$pFBE{pQ zA(Kb5=Hj}oTq+7v+3wSERnp(ThsxAl-3!4(DTDnYa7e`Z@61~2)}Ln=KX3BNaF%ZV zTsVkiX}+1`F@mPRMHPtUDTubrZzDv`opR&5rq1RhyR}MqFp2LARx}$@1i3qV^IW1H zp2+jV(x;@PYn}6AYda23q1^V4k2J$rm?OfJ-{a39>>rkrS(I$hV4(Sz7_xkLe>qC-M424Tw5Lt)?+AJ7W|te*g!}N&U!H z5j=kMNCD4BPMpL04feal?DB%h&4?H?)yw8*M_ai%O95H4XNSF@=j}`>Jh@MZqia`g z(m{1y?mm--DB4Lnh}Nye+V+SNDu1fV*TKX=Sr?FvoW;fNpJn*3w%V_o` zhhu0-3}uNVjD8N`%7!>o#GD80psD=2O7l2Xpm zs5mWO*q!#vnokH+!B0Dct?=Oiw@!`l;!%oWPGgt!occEj#JiY(|0^e>P z7RgOqIF4>)R#h=8M>!6G_^+GA3H*{TQ$;-x8m><@;eVS{DWVonba=rCqB!A)cih(T z`eNbPTF?^vvgH8%!;6O-OQK01O^h(Vx*YX^z%z+Ow~S`K4)-iKrn6B`KTL`r0U79C z_uZtvRArbld0Az}q~*3p;>P6y?LH3q0lfG{))}iJrqO;|-jMy8Z^v(Ox!Afj3~58a zzo$#VY16jb>4#Mjm5S}i(ko+rMP*sxAyF{Ab)HNQ zNqnCer8aWAT0riwBj#K+jQFK>FXXRYLFi<<7ON&WTY{OB;vX|#XmZyr^ag7pPd0GL z`XW-#J~&LkCl5!s$u!y`luh8$MZB03svLi75EMS5hr~v{y{w5@Ale^4N+Lp6q*H~ zTSjN2bY>4>?!D1Gs?$1%bkF%&jEUk@zrmkOf^5DQbLGTccshNLr$Dz$G<{>#O?6=E z-IZ08?l^7Pws`rK@30c4>0(dJi|350?|7n1V+@ zY7G&D(W02cUt*HSebZ~neB!POA)AiqYm(VqSlNIB@(osBg(y$F$)?x2=_2cWTQw*z zcvynS)}Pl@U-x*Y3_q^`a@`?BZ}&dD{w^%-bMw6%9_AQIxguqS4N+#MCHz|+0=WMePioT*QGC_jPJT#Mw%M=-XfOs9U* z^6mc4=pCKjgswgZ_4@)M;ZIvT%b)_ZxvlqKa6larJBn5IB59oHb1jDW*MWdQ4_h3& z`O@49+`XhzX7|qMlP2CC_v=xHD=a<^H+~pT-V7b4z*Iz2^ADRQO zWtu$&QMQT1dqGcuiT&kn0~sG0SMa}FbE{be4D@>{HR;XmUQ9r3o)etyv$b~rekpM{ z_K&OCpIl)M&a$T5hHDDj`M65l2yu&MGF!B6hIWI} z*^Jf^=Xt~Hn`l*y?nq^rXtjDQk^X^cvc*ivcUtXq{52<*P>V=-zwd@7w7c%hmAEM0 zCkJW0C>qf*9?WkdzueH_WKKO)+dvN*ZQcw8L4GLFwTB;X#-NqJ0|h{|I0*wDOzE~c z@FW;`Uh6eHvfpA7e<`uHWU?;`YjZDvF>SV($mB=7m`IUlPBQ+`>qyr@Yd%GqTww?g zi!iX}V_n-&t8mO6wr7e`gjV);Q)(+A_@J(MWfe?z^JN}4Wqxt@`orBP-4dI!H`4qODkXoaLXu2#%#j?KTC)>m4cm-8InfZtOto~wo zG!#H?7Yn5v{q16{z$prK-HZGIx+1*@<2@k!CV13@F39}Pg_5thGyKGd2Ioc7{*19d zRQGzakA{rH7;Vg>$TDj><2VXmQ4w8q&;wY8_&}V?H(c*2`tWz)ME~204ibb7v34Y9$-Ux)AT%J8)y8zv zg)J4&FhBhK<%Kmad1+mr`~=#k+*Him4+r-)pz5^=Z??#ju^F*z zB(U@bQw`1amoY8!XV5o;H|lK3lwML`-+z77!pj#2?&bf?JjoN8J!emZ-d0u!8!DcA z%36-@CM4VDWPbK2P`R}-^S<0`&sWM6Td86-XEFgtH&V+%!&>uA zzjMZCm@;ZuM*XXaSLft2mi)yPR5_(@^RM&3g!IeEX)}ri(c+UT)YhJ;$ybJRO_d7L zpDJV5uH55+Bx~IPI>b!wKYSdR?*K{KeE=|&t=kVdJZfqd2A3X0lzypPYG5Sqwi#eQ zMSdJ^guS?t~ZM7&)@u!tn$?Li+~Eph}Ydkv6_r< z54*P$mhty2AB1-c5OWoCj<6&U?F2a1*l>;Q5CTg!7giV+k&dtqe*etFCFo=FqB#zn zTVF~MR(Y_;8Y~pS;ApHcY-M5g+Rkj%zVepv#=5E2z={kV5 z{ip%QC!|@d@?SN;^&KE=D}E$%+h=*(NaQ)Aov4%tw(MuB`u@IE;oFaj(Zd7_1Gj@M zSW61Sc+=|50(_s8K?mqK+wAV&?++%5yh3WfL9?B6=d~mptanQDe`zP~V>4=pWR%)^ zW8ypIaqVJ9fkGt$KiQe-PwEXA!>C*0)yu)mTJ;$8)nhH(hzJuiUYarss#x;Za*>T) z8!)_PioN&&7E1*QZs-I+3u+cvPe<22En%c&*Xr2`b)Mntf}D`;Pf)a3FK)gV`xZ)V zeQXC@;en;T;JaWk#n-KGdkMBRAhPkLd{Q6vlj5OyC8SV=d%3GS&G9vDlvQP{ZpSK^ zisN8Uy^I+6m##T{sH~sY)WznSmuchsX?MPUMAa7UD^goytgv{KBB^d~8>d^JWt7F} zzg0)C3m9}ua(6gQbYxiG>-*MrTpt2&IiePhvy~=T8{5-3y2Ixoixqo$cz<%skp{>C z+t{z9vid*;khYEN>QBPIB^ki`HvLpS_HSXWX!z2a8MTWD*80P(CP!5khM)ym{Ne)1UYY3;P6oZX(;khl2*$80l#$1?-(43kN18(`9EKBhdb-}svEb7kjg^gT zXZh)Y-c@1|kei;oT?Y%crB{Zw4Fw5r$XTwSt6{>5-eF10*26O7E;cO!Qg&%%Zn-X5Ro{704L_7&N?ex)NJ~* z6Lcm(HxyWy*-{7Tm%639?Y5%vbOyBNy_B`xDARxn6nQ@nrBo;{V2-fH1vMGdZ0r8_ zAFP4u7{(2L{2$|(t{}#SP{o66GR2#;vq`Q-b)eT~E4GFnJD{qR38x&0>M1L14GFA1w>eG|X=g_F+I#s)dQTwh^?S1Tg;ghR`e^rF`H zad#iWN?*q{O9O9>$RLQrf|~Mx45|Z!AI~H%Gb1F5)sIS-I6r`=nZM4JcS$Zcb{2-+ zQVCF#If~E|KnTA6)Y-Ijem?Qi+v(4{+xXjKd{;s_l%Eb@kjvUZQs<45a8{>b_1S%m zn$yRpmqHXwF6&nA9^>7~i$ng*6Xmn3dtPb-5j%|{>k@Ef>3iv0Qxzx3q=D46*e!!l z`##3ikr99S!#ixbJ8Axp5ts4on;K&2)!&V_3_5sXeG_{?RU<>M@XB3WQXDrf_EZ9k z+}Fz{5DIrX_NhAc>qhfDWxjqx17Z4f zji@or(8aKUX_WX_Os#L8wr{1;@02N5&2b!$%~Jr%ur^v9wW>;H*ewKiRSA&95g9)e z!iFfu<|8(5kG3OmzMOS6IES4H6k?f0eB78)>|5lSH%Tyv2EVU5bbM`m>1=a$JY$85 zT=i*gxWL?!(EdD9=KWGj$ZxqkBRs?G*&Zd;RYnE%T5BT}Q_ASpOrm!hx z>P24uX#Vwa?ly4S&4-thox{@Em#`rKzhm5eb5SSB+@Wj8`thy5Kh61Vlp80n2xaJz zGKoY>Y|QhAYB1eo`9j0s8Iw-6P5WeOD4kM0`A1GWnGaFuBVCTke4rO#ywo zoF#&_cU^Uv$zQVA!!X77N*@m(G~6GctJaj&C+Bi)e{+uiCRhBf?|`Gq^19Kes>v`Y zz(szOlm*J+Nt?0B01?c(aq$&CmRh@U_8CagkICvf zyd9C`)@QD!F!ks{s7G!W1~Qs!7YJ^7b@XsI98Y6#58odx?=)z}5x=bg{~xur?C33? z?)#D@+_&}qj&odm`&gZ?b?WmNAaMWpXxi{PmccV#d}f53IyGOzhcB9mi~$6Vnxb?X zt_T`Q=?YC953YxAHWhpd5-N6w)o*S^V}rEk^O0t~YKU=6mp*k{=SQ)m{}){GAbR93 zzSciwiCfWu_||x1rVCx$=tkQth=i-)qVjI$1KZl6&X7l-WxVZ0 zS3QdUM~{{x*7x2o>PQ#*vImDFH6*a?mWu7VZ&61*NhewVuP{qkU(c1LD)us@bTxj* zD|Di`wde6u)`%kg>1pT-^JItt5CfoJ@`R_m{d+)t_Ce^3B4I@P(bsHNW^UZ;$}>~f z8G}C}t8Cr|6~}7{uz4W9w#i<|2CFW(Cwa-Ae^i%V73)E*uL9+=VG4fmDqiJAjL2^aX!ix*Vj=1%F_Xa$UHOW% zU0iEXL}=+RrLy?{o3Je8!G5S9iv1+Ood*l|4Nh8O;}~H!08-fC!F-fkVBva0>wE`o zQ0%{Oe;gbfkcXqP^qXhv>4B;hhWp4^Mg{4Y$(*+Y&Q^$OIiBJBd;O710EzxxWG5~5 zd`i2z{hvk<$B{@A`m;l_KYWHb4y@K>51BpMQAZx+uBpHOA&%)UjB321D$F?vQCb^; zcn*LCPAe~GDW4s3{fUv0=YVc}Hh9_4Z3l4MUlt9ZgLHtl3uLM!1DUrKJ!U4?YznOI zZd(lypnLz(O(;s^Hcv2+I|@oY-?T|Yp3nlD3@(hv>%>nF&*Z)+p3?!_nNzqg!L=$J zCNzG$$unhF;3+za+RTZM-qH6aVFd{%T+Jz9u2<7X+a_?7sutBUZ#I@ zk*KbAAW_EmYjreMo9sVC1}}tzXx#3)KXvfiQ-C%Zc|h|(peynrYg$&%Q8YLHTf6XA zbNMU2gd^GxehLT}aB+WS)3fD98pr*%scggMB4Vz<> zLsJxyy~Mn-W7Md~k!EYZ<+)4VzBTrRTA%bjocgfXsHHMWnK}+1B*E{k63AZyw#obB zvdE1vp6rnywn7#WS*{ow&VC4SE7-v)+Xv^$KzL!W;r^s7_X9VfA~vEg)1g5P#JA>9 z;S@S#cg8C=Yf{|d(Ya;2@+PM>k>{3`2WNIZ4Cw#z4gYB)hUPB2>9x8P=9aMFzK1Vk^ z@vfFJ@c^S8emeJ-}WKk3*4dUa}dkp0xo(YeEpe^Bf`TB ze&9CHDs_)spQ5Puyd533x2L%%%n+j}!AlD85db!@SSP(p(J+^D{FtS+ruBYdA!Y}U zqsW|D)zH`g;b{q7r(KN1uc;11KTY%UXLJUy(h!M$U!Vs5NSjkA`v7u$^M(^}S3XZ>xm%!!xFqo05czOCLkihGirwWcyQ}+)Z-DSIW z8g4pVvq*=wssWKw(`mWd)X9PU1d=r`PDc^0Vksw{BkSI`B*`pBU&u1HM}t+7yss6vBrJ^koEI zuCCO+VT%5vmFdwtl(-Ty;o_KNdm5BfLosI5DN-E+R@&hOwbV&cP?W?g+hUiIt}k)I zH%RwxB<38#{!pZ3?U~(*#DOJ#K2JXcUr+UNe6s}oYK&GpPfxy;0ap|Z%8<@|?477P z)FirH!3o_?aL9A%0YpQA# z*38*!Au7nqyqE|5qN1}LGDnPxb9Lu+SabJQ6GJ+*#^m+V% z_4C{1isf~^6S~5e$~Xi~09a^d)6C|Y5P(e9tw(1+li+!L-ogTgbhBm?dcj;{U=JNn zWCgtouGWdBpT>9UwG9jso=xNZE-Qu$LL`Lg?_#o(9p&D4XKP5^MY5HYd@7(2R+;3) zPZwVNqN)`{5=V$Ad~52%dg`j*4t!O>vs+1IbByc1+sUxlXB1BBnrE&g*xyG6e-vX)svO535P@{|wqT8sw^F*oa#drHI zfni=v-q(uIPZ`*FP?oy!I5K9}v&(nRR{$%agk`gRMxv82TAV;n6E6|5)8?UM|%vcooq|d6U0JG-2PrPKUV-UJqd#mry z)M0btTvjtARY#P#yK_-8TfR8%UUVjN{hr)Sg%XgeS`%z=&g^18jj9R#A$-WWCOtkt zWZy^vpt`pF@mhvKQWe4Z`EA0u~jmZ zyX?Q|23xY$YhjrkECf&^dSemK-8#dUue{%tY485I)Tr&gGMxN0QeaR0l@ewNP{=mr zhyd$C6$>{~Anzzg4ZlmW;lRW3OH(@>(iufTws$0Xe04K|)&mYRKfmp{syuxu9S(kA zPpXI5u&Y5(|M+ydK2%W&S!vP6s6>{jzOi@DIlZJQFR{Ea1`A_Py_a>E% zm5xelfxK>6-`jf8VQ*3LpKT@wiwY+TdYG-#sez7QZVY#6t9cw5rW$MBiv(9+yZn;P z$&IZ$`K_;gOpp(&-1Zq>YyRhS}UaCH{uCLZXCTqllt zg|$kz6A_P>QCD={ksQd0lvx2vUorvi$ydzxf*eh~GPJOE_jY$%aqSYP7TJEF7rCsy za$=X#Q=wx_aqzG^nL!ymLBuG%OqNv`69uABIGKI4Zt^sx9EiO_fZdM?Z)@jqGUK0w zh&{kspjkoxO}P2ds$AxbOFjbe@N+>zW{gW`$zE9Zt?1|{XP%>Hjavw1AYb?tYKskL zC5S>SSd4@m3rYM%0T3e1#=YyHP;3G|D;fq1)69T?BzniCP0Uy>{=&q0iW-`wWgSQS z;dtv&dSi$|7M-pc1gn@nj=xY2Dq6Y)!cJKeNMD5m)9NcVOF+r((A_8%)gWp^pU|SN zV}|Lj2~>AB(DqR#lxzf-8$$yX`d-+_>!FuERV~+cvBEDIeD&RU8R2rG%Dlv)F7v)p z$fxKHKnqQmP)sGB29B(lnDksEia1=%IaT%8DyfRjU>ImyJaLE;8lDW9#FGWF_hcco zs8@1v*BK0VA0X^496vD#v+O+68D0bw#m}x^KYt@%n^=<8?q^B;$27y7*%}{4)y1vm zxcn*mTG3-%w4##UBk-J$7F z|3=l|eG@;Q8Y9NVF@CZK4>@=nv;9quAVsr)F~EaKHFTc~T_Z5=?#`8@0BnU~Q#_yx zXL}c@SpnrLEm%W)Uej)eRZsoKUA1Fw&6%HCy3Vuer&moLq@%oex|b22ZW}JWZze#qqUg4)3nl>_KJ@Q9#q}P-U+9N5To)+BA9tSG2Wd-ELj9I6JSX3Pyt?iOi70(;i$ z>A9f$L8adw*71O8`Lf1)2-Cs3*Lm=UImak;uW$(M+tZf*R1pujXaYjahCZ?Im^BiTcY||NrRnPU32R8t{R%3Hwv+mQEn*_p$haqy^Rvrm9ga|8H-DuX6(}fq0$&j5Ub;OP|_(D zO8^pv6iG-dZ1(CW28ltQWkZW=yT=jnZliN@Ux5j_=MI7^)+e@lIqM<>IdB#jS3^8R~O$x4dj9BTX=nRAM4tiqRbYNV9n=4|Hn0ssbm_404VnzQv}Tzp*Zk$JH~ldflFf9LNB zMlYuumn3?oxTXodD%045TpU_+sC6;KX{z(%*kzU?+Sao@3} z6Xn+@^mr=_t}>n28W=_>Jo-4)1PfVwODnLS#;KYS0SEw*eD zI=2_4*0V_G^W&%H^z4Ku>;zMHqTd-Ap&1$8g4L;1>_}FpJttNiyM%SoI;`QU+6f~@ z_$;$VUr1vH8Nn`3MdPy{s{U0n9#nPaWrrf8?!v{v{fBOeN1|CoQsX2Ob2$r9U~}%| zkxj|?lO3mZBdN~~fU7m5QMK|s2eoNsL>}*HH+4KBo*6H6)wbIVLV;u14L2{L_xl`% zLVs`$(PcknIafL8-7tcmve*}J<0P*Qd(v>f?!}x#3wPF|RwxCmL{yuP&<9pZ#e;nR zyqQurLdEBmHN267K=guFAuI+jy9T(d7*=IRx1Nm=3D3$q0!lzbRcYtKA}SeXr(KQa z=1Vd~GyMe+$aQku?z-<0!)Lp1dzV}6>sg3i{W^RTy#%NYNfG(L`uH(0lZ#hIEWB6F z^#>m`7+C_DG-S?e;Y~R%a7J(AnoafWgYscd6Sg&}9w(WKBF8Q8Is8-&7p^Es^ zivdr$wCB$KLA)@8d~#V9_QjC`Dy8TWc7o<$^A|On%Ar+9#ZUkn>A}dR3=X#(4-SjX zC%?n6v-%A}SyF3CMIyacs>cr9nwz(V@{t3h96Jtc@HGzb zz@Uj;r1B|0YEk#c6qrlA7|vj=9$LbS$RzaDXyah=i_t$C_oy#pTTSmi%F1#cAMLm?Q-*Q#LO=TBWw;L=Y`hDgBW?wG zfrE4Jn<5;q>);ZBC!ykX2@Tm(?{ouM8Df%lC_)bQ5 z4Z{HSukdQ~FW?Q>QAbn!|JiCKuibL)>Oe(UiYTcf1?Fp^W6uYo10GW)G0Oe(wc_d| zDt#!|uVCNuZjT&=S_Esc_ctUqU=|hP6_?e2iGpdZ(u(cDnBE)Px2X3$y*H|X(9lrk zZ!JAdXa(N@>SIpFr+5}zjonW}0vFY7PgSyt2*CLlr02vDGxEL^kk3`404f`HuZ~a) zMGZLu0*x;3F4=pz)q3j-lQmWJNPN^|>SF9HJ#Zw4B@;a$FGTjMR&Vn|9!5k(Fv3XpRps?N8_Mt}j|rG#Fm5 zx0f)^|4fzE@Qao9ZFhG-V0pmqtq;CCIA2ZZZfC8M3O!sLOteQkuCu+)0N6imr)&}( zB`P6k#yNj~4_^`i#LEQy%S^eYxG)lpWa6rK#yGXev>;d!0FzW}KB#Q2WaAi9FK6>t zSO9ovicpH69B+{C%ZHrFaa4&(YH75mOPJSh_=ZHII4(H#yI%H3a&C->`6RXkDaMcP za=eSP6{W@lkerDYBnmx+2<+n*bdU_S1^|p5<*HKHAWZ$GGNnnpvN4=_kX|zvF%I_p z9;#^hp{1R?luXAjz_u#gV3(|)q^d*=9L%us^iCl4m+b?BNz|4@soaPm_L{D9lL0=J z26I?k=C4t>>Rk0FR?&P?@73?Bc{{qQvnuoErPU-&Jf$mwDW>xz_E^%J+(h~ybii63 z%s?2wBU=)FVxc|T3Es$JdIGAKZJbO~ve;+tUG%Xts&8|0gNH}Z^S^f6S(I4kNpbmd zr!|C=%$}C_vx!@}`a%%%RLI%PDWgqS-&h_cF=@)UjDeaCw(2aqWi(XdsB*Fq3_K_w zwo;P`g|yl!WPJ0)4Dx3=-dN~j7_%u8$EB{SA($0>%HKzGN(y74jQmQYjg_SVl|R#= zj~!QSiu8MM!47O)R2mj83}8a|54VnUln~f(9Y!J|pg*AQ$s>6?G!u}BmZG9nSG{|H zHMbxUTwI`+ah%G_mZiy<#cW--v*P_cgXCv-t*HqFvvx3#9*)32wn#83D)KWio;jd5`JfH*9f zfLu(&LyyAXfLemQpxqAElqfaJh;qVeJX6s(z+xmQ$z>6*3}!DP!Yv6IYMr`)EEy}A zzcI{>m+C1O`s1)xsDAy-5b|{k03#K+vP1)uC}{;fQ_#qmqal33N5n`#>~B43(A*e%$&620=_1?;4gZ7F`4WzX zAWln73Kcb!VRnQ)fYbl>_?%`+S3`4o<(`sz7!`9GNO9N7j)HDc?@~i~GJ^$CH1&P8 z;KhK#1Hxq=!lSqW<> zuL8m6M%I_uw$A87 z6PH^2a$MvI?qvbqudDQeAeQo9knPO!q~||COHSN_*NI(|wL&lMCgF?37!&<_)5-YpKw#cUC%-(T}VRAsp(6nwB?mu*s39T5LFx`1ItGqm)t*uyup9>uv8 zyXO}2;OGhYTr!R-U$nO?C700XFh;lIzy^9G8vhwNk!47noiWAeg#`s;oX_>xfr2tL zH_k&0%666(Ty!Lw>;m3m4xb!Hh-RdiUPY)}Pjko$UyC$lqeNy9TC1x`4RL6u;5-RO z-WudPjo{xJf0j)=4JwZFkQh3WXbM4zjKEKIlxRFk+bb?0BIly8d@*Mdn4W|kUVD@a zVrN;}EKK2#S%4c|$Jq9LVuSWdtLH6;s$&pdS6;GlduO1cZwRZ}bS^3QwCy&`9;A{l zy78EXbL3SdZZDT)MQoGLn3xK`KY6389ls}KuH^`i`kR(pNMl6Ifv7ixEWBQZ*mgc$stfS;hK4tsSGntB_JtlHZKP-%a1jmNg zPy4o7w{zX5-ushfm0ZI;@rm*8tBJdlb@X#ta5ibBHy%Wf(GMeD!j(;^62Kq3;Z`VN zMU&sZ{;K){0F0iKeld!{=MsTgCh2E-!_P$HX$jJ2Ysd);BVjB+_b) z@H~XBL)MwXHUx86E38CRyv`R?1DK!MoX6CdtQe0$M&g zWP*pD{F4&I=a(~+`$TD!Dn~_IRi7d<4lg|nuEbU9*_=>G2W@Z&aa~k6JaY6!?;oZ) zo3kAyl1`t5mY%mOkVKm_n#IoZepMMq5JC-bcKRjY`6-=`_m8A! zeSVuxuera=3bhmL(+9l=AWmz2$_=2zq7s_O^!{wk>%8;6Dy7CTpMnqWzlI7p-4@}% z24RSPX@*r&O@sv-I4>}t#NsHUn+dKUVbc9DcuM>&GXc-Z6&5ud+E!PJE^=$Rit~9qaviWE5 z3K{u;h)&oTx*6_OreWf5X6frAC8RJJ%wMheqsWnT%P!O9@`jm~SrD^t)ifF8V0uOA zeHsA2+>0g(D{(5g>3+=an9|^`?N_CW-{oLg*Ar-v2p+E>rL*|~-vJ*HxB2yB+NPG2 zM9!Q1$8Av^QcCv=4h$UM*!I(Fx`d^5-Zl=Lk8ep0T~93&YDPibNAxK;AMM3;o-3pP7{}_w4|DnX-Q5kof86br1Z1N_1WdDJ{Q^owEw}aLoroN;K+&vn4*5 z0ftm!m)a77I5$O(ug%#Ktvf{>Fs}VH>rf6-)RUsj8g0-Ik%pETM>1(<3CmUH` zE)i&JzjXOHgrA8v$YFDiP5HfDSI^vL z!(N@5RgcpOB_svv1{0Mi6Xh>Z0 za~rGvC+kAaQ(Po0QA1YMovwSMI1&JGqhm}y=}JOp&xwW_^-I{^$YKhS^UB-iD3rCm zHp=p!dAD2N_y;^a%R}{dDP>i4=5L;X;#d#(vO@DH@KPmy{rP%p`uw0n`i9q%H8^Xo!fw(ra~rF%k2U)OER zeT}xb(OzS{Y?=~P6+R!Ck=9asKI&WQceW+L zYBtjh*$96{y$cBs&rx!k=c{h0A5Mi!46O8QEWHf2YF`#1cq;h(hgVQ=a=V9Dyb@GJ z(Dp)o8y6f@lU|=6_&OSWpPIVi^Ejv1KWBcmf7Kp&d!L=}xFG!e^um40ne)8xOv>2( ze73Fk&YjO{WJu?DYBTHlHh~vrWtqRQx(0*7vZUR$=|3``ueP|FMJ9jKez0Jx2%-J0BWnte>v+^ zjPXuYG-Er^%7|@<^8X=lgU5=x7t!_+9hkDy{~29A-$!U8a-c^+S{Tv5VMhk0z9 zfYZp=Mlm)LUpS5@Mn6?74xAg8l2uW^4&(K8WMdj^^Qq%SVly+HqB1tQ`xaR-jx2u} zUm0&>RG;7Hp|TTSAK^K2a7*I#v`G&DDy<#g4pQFCof_@rQ-u7r1USLmtZ$L7`rrm( zK&2LPfRFpVLfw&<0izgD5}X7$*qpu%YHFMB-^dvIy5Y?9YkH-bJcue$D(aFc&PYFL zicE54%8!j6*7O^L^IFMu+3oj*7Pb7brc|u}xDq34UToY&2QAcj#&+K1{Df>?LK&&i z)m$?_A9OCOA&rcc>kkNTY|T*LMqT4xjjHTq#!Dk|&KUd|c;xq~1C@yClfvtblHQo< z+SJ6qfLoY+US&*lWk~Gr5b-h*82|$(H(p)}-%x&b9x#RYT`%fWorD0c_f;0iCzeb~aIr#ZNcvqEhP%nUf~M2~}dwKia8hX1}=4!#;q7T`y~Wbd1`1jGn5X->Pi*u!8kZHlU0Nz^a~A+ zl~Hb>ypuNnyeC%%0N8y)ySw~8e&brQ4K1L;!r>CY@_&T9oYR14!Wan4TGsUnb1U(FkX7FJi=uRi<{49%MK?QW!|qMgpO|XM{YfWkimha(Al2*VrNf+ z({QGV;mG5ow#Unm;UA?9kL*uUu_eW`46cIoJpr1nXI)k`e0?%?5*i=XpcoZ6ijj`o zCMt{AUnJ=c3$n*1t+;bcQbr?qu^bg6l!Sn#d?=0d=$zYbqS{NA$4aU{57DigKE^3# zeTXhLnTEkNwmFD6%N@N7${jMOKVAH$fi9JaI0@;HLNg4-1$_^;?QBf3k<9rx}tBhW>x0GR0FRh zimKPm*hVm})&~tx{-w8g<4dAbmY-(Ra|q#9LevV zK-G)xOAVd^dUM}%r1C&znY%$As5(1|)kM#@VN z8`i)s;Uh%5hZZY}ePUgoZ9$gBTz52Rp!V)8T3SXOIhB>S+@pYwcH3^?(;yeKz^fl) zM%Fu;Z-Kzb4cIRqI8g}g?CNe#D+Tq>^vV6S9~w*&?HOMs=+sr`E*zOIHr`MB&BTEbB%n%w%InPWIws`;fdlS zj&fg>&=5`?=Y(XMVXXs4$jbO-6`zPqdmL`tzi{`>aPGSLyI(5MoSyl^poH^E=GOM%ZC zcu}3`8v$R%t*_h?oeF-{LNn__Yn^(^F4UY@wOo1m z3LO7#0<^xm*RCho!iPh0f^Tu=i(!s;ZCG>?uo5Qf-^s!^X^s$23r-5CPg2*Gg7mtB zbZgAm0Np{nRSI*<=$)mp_wxHy7+ZK%q{60k$jVWO5u;UW!fL0ED9Gc;-Q#p4c4wH( zUQ{xS_J>k1)VRJAlGIzNR3);XewG!M4x|2?ID<=75y+>+aAGi@r7ghG`49R2FH{>0 zTgJrs>qkD+1#x`mVZC6TgLY5q``*Re^_*kHjw#s7#k&`Q=skCHaizZM9f;aUC*x?P z(#*SF@P0Bn(l5Z`(AD_G&mYtHStGO*W^F4qI!DHr83V9_8t?mF$Gg5{e=)4Iu zq|Yvi;n9i`rX(aBE6$478D(Tl?^ct z6o@Karn%dsQwdLlkga;uAb5lYcWNTRLhkc#qxJdqjJPCsnnfd=-|z}&5Z@ka(EN~R zKXYUFl_5Ks=U8tQ?6b*u(+@f$BO_mEP+yO;PxY9P=aiO~vUZCp8*Vj-dy2F^0iPO? zZ0ya0V=jLXU3|mdgDa6u+V%gHh@8-+Qq{(*Np2+j%OKJTYWHag9o%*&VyPSZHYE(T zuPaydS_rM!aVjdKfZCul7cTSb%d5c`jPE#Ue7|ZaWSnVtHNb5Y_Vw)+$2}Pq{O<^~ zo{v{1rpBsDb5S2rZs)P$S9@LAM)|Rl9|>pvULKO6t}X#A&_|$V5pi^AOzq+UiOK z7i!J@s4a&jo^*cJRrxh6pzwX4W*yv5*pQ+*HZQtYHHV$eKXHTw9+kx*Qy;GDoaOcT z`&Xd}z1Roj3sXr%$1mFm{x0{!(EAfn<$=Sg$qITqL8$!>_$ieZi{YSBW0sS)^%(1Rr2I*kwK!`%9U($Lt%O7F zH0#?JLZ;%qg-UJy;(~mzxQG5%+OA8^zsgh%gWOC=D*gt*!1_LJc7r6Y!O<0|3j_jGk?_D#)=iCu4NSY}30y9Tep`uFs zgsPlhI391SxI5_Q_RVmI_&H`sgPSm6a>bo-lsGA>95fk4xrZgMBV)=h+J#@y6h-M1 z9UWJ-by@G$WfWa8Vk$oG7N-vC>gfq(Q&5;1GQb7h6M?7b-e;Xd za-W(D?+7Ik!1CCGJ&NcM>N?aC-@{Lqd+j?yBQtO!1wb}4@GNcS>EuEgH8f`o%?pWn z@zid$vtJgJHKZYUXylYEL*D;X)jIA^BI1X@NW;2BvH*NQfRdXXKj8gbJZw@Bd!3uAX30LQ^;hWrL@JF)MA=bp904RglcNl#Z&LQCihS#}&suqZl3Xb67)*dM(dX zv_c(RXrWZ%Hd+D>2gw>F6FCucsM< zNTmg-QV&gB2)9~@q%407yOgmh*C2$sTt^ZRCZDYGV(l%c=@19leVo3KQ{}O(7nEZU zLb*8i)KV+(9qz3T2Z2c78FkSxL~5j^>mtQp3dy_UFw=kBq~3)6_Iu*hp(_s{E_6lu zmkSQ7MU2`hlf(JTDrfw+q!X+F?PY%q=|}ZY(aE>wuYUuiu;70JQ?a1@4CepCrXBz& znR-1*Ob$N&gjDw9vP^6(a(N?oCBby4rZE8g)aZze2%)=Q7Px4QB$n1Up9?>8auIpo zl$af!-^8bE{rnSt(4O&;uwB?FV?V5#p$S_6GF-1KIKhq|{ABRAt0(7)cg~6I;xFvz=M*iUXP7IBDVG>wU~U?GMqJuH0B;{yd(8jGWZoyBHOyA zcdvWNJ>OjOh{e)Hsu{pSc7>8YWFoX%XqL?{l4ut^6cNA#Mu^_W&Zm8-NT+{{OZEpR z7;N*2V)3F^18e&=W&Ooq&0brt-={4iie)U;WZ1Nbe{F~o$@@GVOQS*bS>O4t!@di8 zZ`E2u4#!p)oMX7?k2E%C&Az}_Iw9KmP{%ZU>9r!oJE@ITkC{h8C$+#@f8p@y(t)tZ z5?zVb-WCicK6ySltzqc+eO~PFtesPwS`6=Z^K|-X_4+Ai8+MBLuLvi^aiQm_Sb5su z;gqH*`|}Iya46W*QOtcD4aENC@O<1&S4JeGBF+;aP2`7U6q z0FV!#2+(3G&hX5;2WV4L0PhsAo`X3$lI5k*_2e*~Meq0{_uyn}rICyNjxrO&#U}tc z-lG0>^L7Q+75NzDTf(e$PAPs9{r|yh|DTQxRvf#TPGPM76PDWpFko2W-98~0sNitzrCRj!;P;^&%O`fy_5M|G zDz&`aiSH8kVs4LH_lfX%^0~M9GoudQX~W8&fgJvu;f=HQ_7Jt3fdSrXjz)Q(=y-qnNbU5)kJ#UZJJH2EZO;%+gZI>7Yx*s=z-9{5W z*8>B)$+Fe3$M-zBtwr)vscqGtbr=dUE)-g^?G3lx>^dL6z6|62xY6E@vpct2e?LXiO=)>}qMCZ2 zz|)xIS~=+Av=f1c|E520`uJVqe9p9 zG0nLM>3XI2Wu%_>S?htZrW)|JFBnPh{b_MgaBUYn(fy{7q+zeGzoQW-!{37@Q{NBO z&vhO}y6n!Mmow|90!gQV8#|V#?GH!CBaipK_w8;%vfX$-X$Lur`fGG}0yX-(c1SVQ z?^D6B*)37G&~ML*X6xR0F{arY`M6GV@Hx+?+RSY*uNkU-=Z!_`zZch)!#HP}^Q*hx zJZBQOp#J()jV6e+{bur{UXN*;_#+K9wXfk~7VX>lqU}KU&Th0e>THUD`&)GDHCj)_ z$;^IlPNxTZg3Bboq|T>Q;4ag!hq1NAHYG>;&jq`~`4}L{?ZMP|$K&-A8}V&kPUjcm zRk4*-e#9&Bipkge4IzGhWR$WloY%1+8XCd0vmM*+ z1JbXF-QGU?Iun52Am7_}%aYh4r@TZ@1v&4Uj)%c+{!5R2x<)i_?zg*_rFZ9=5#X`9 z)5QznInCFu*GFqLueYt>-B~N4VcoEeWk5No+uL#5R5|CT9ef|Jr|K zA`ZkS`F{Zc|3{4Yj|;qeRAEG-;QxL=*H`g*LwGP-wXfxBKTVt$qXV<8{S;S7AuEzTjgEdrS%F=A@ zoK{U%vq;e7_ti7>dA5Z^R0YM`_NCob|B|kphYD)0=oVS6wV~+KZ%j^voNHyXE3ea(n8N5gi%ShI273l9b1E}xp(~w+5(rM zQF6<5Y@?;f3#BH;3~K6U92eRo*b$8aUq_O6`qI#vA(!Yz&;wZ-JKiH&U=eOwO^?wn zTn`a@o|AtV=0PpxEg?7UH#-i&=ukU>BO@b|L_{DCdxZ(J_>nJk9dH}%nx~Ch>mNYG zN0EgZaN6fQ-STR`KqmRn3iCs_DzQIzou*(kdqfr9Kf&Xurqb5l%-u4(E zJ3;ltJ@U)SyOcC(?TDLT`h)Jv`^(TDzm~^K9L~h@XiZ`q4j7YfF3(=++YLC5^QU9k zP{;QXeLBG>r)TK(6Iox#mj1l45<2qrz-r3y)H~hECt&dnb8p(&ktY6`>47%6!2GZ~ z&Unl_o*;IRMTvDrP}p%d^D-#c9pT(uDdduM;-e%cqFuna37svR+u4POiaRhF8840T zG%!FA95X|~05`3pV{a9j-pVcsZ?*}8ALZK>)|4;7MK+-R1@vR?NQyfLVntdRTLY;J zrd1sB{d?(WNk<+FGaEi4i<8qLqU2qbGf+CRrgTpGe!yKlcpeW*(Ayu;E5DKD z5Y_&U7@1CSH^@YxGM&{w)sBu18EN^Q9Z6;rCaM(BKB!u={A2;PlUgHA*9achxAk@G zrSh^x48=83hDgV>>D-|!VbVg{V_x$wt9|yK2?C8X1oa=BWG_Al@-fRA2H;Yqa-;&X z=`!O5ZAH}zW4-jASJ8&v$7mQLl?ZI-4GbkEq9o2f&NjW@G@eMn)P0t*<#1MoVTJrB zh>?#P2lxN~FuVUi?f;$|TH{{fJm-~hJPS%Y7B-eySP7aa3KG|Sb))5# zl20gZ5tD&oCI1&`YKy0#Jpy;ukeu>X@s(Q1bFWZf#RPj*r!JIaRaCB(puDp^C|C!L z){K{Ev*m)lGdkc2QMqQL5)L?WCiY6A$%{x`5#dur$D#f~YT3L3Ofl{jgN~uaC4_8o zbN;1^hh>2Qo!|w=PaTL~JwgSsa|@Q2qw*aMpxZvPf6#X`IaHzW1HwqP+CZ zIeE!KnZ9p=C)k>89%=0yf%pXfKp}3{&@|kH+wQXTHm?5to)=5dkJ7<1H0f!%r!Yk; zx*nRwYf~n@*B+%En%r6{y$>^ZnbGt+0?2#cxP@deI0OPm13Ei7_zzHz)L7 z{K?dWS*H3QlOq_x#fT^oq2Y9T?5N4ZJ_t)npkwKOm89xVyx5YdE2u!v01t5KiU1A(FtS%A{l!)Qog`t<)ERC3 zHAKm|CMleZ)IFH!S*LSx2|ps<{}&cTe_c&pu~hG}!`$3S&~n(u$Q_R|<5=p)AB>*PaQfk3eM{~`h#TQ3QClXy;ko&o#3e!mzwTh)r2kw7V%n-6s zveNqeXK;{>6qkfjrlfSC&@>b!=>4sx@NjAX_1UGLM7c*-uerLdO0n6ws5|Tmls4RfJBZCL-4MBQ zG{PHbTb9V*u!E#n>;k;j!Pu>6S^rL zV}?yHkl>QDDdbu47hvvc7;Q4%U+$XP32z9S%Gk`pKr^^z^ zn~$JB1uC9aEt}*t?dmO0hq_w@v&%0-RX4VU(+b%N!Va1_Os`>ex!;#N4t{i?BGi2z zKPbJCzTSt@x>s#kqBqie7;~77^?%k!dBI{8~py7@m%>D#zvS!=RFxt zc0Bk!CW5RT?LQ$n>bO*><(Ux<8DHbU_q6^i_>2fWeO7 zt=~U@I~137gZ#lsHTJGw{*5&TPNfVCIWXC(zW3QrBPBURk5x~XG~QoP*W6!@#t{Y* z>l`hjd&6&`@pd%chClx!{c$7@taoU@zuYLMl$a+<_7)6IAhNI^kWSF(SXso;lpdoW zhh|`m3!%z2xpfIvpWTH<8;M^iwr%6#X>5KxG1mG%r-aI}Y%Cga%kd~holiN`mZ>#8 zkMZjtu^u5tg!6;xTt$3Y4QsX9B&{U{ndGNWvw0+9{8`#~lz)@=U!DsiV@p$PMe0%AX17Rm))=WxKr4?5Df{pj~vNT(r^2je^XVrm|{}EyT zLw;}#U0hsf!iYH2MqGAXuyAlRP?ZOhE$El?2mUQ~WI_|;h}`5BP=tM8$tjqP->fGs z$oYpWub&8G7_&swHZU^m#a!jT*SszW!}Vb_1T=@6C=iZ>c>Cp`Mv1A|rp+@{lH%r~ z)4o9vD8Z9b5|Ci?#^g>Yz=>!8APkpy{uyTL*G|l%&Rzz zwIS3y9QPvjtHvdm^}0HmNHb;unq#}5l?^@#I8kGpigH`MJ8X^f(hR)|ciRq$Iu%lM z>$xwcVz%%tWU>V3&TUWB!>ux`r&T8C#S1`Mt+ZPaG^S#vmEd;P1!RFl0Kv!hv~XlHKn$MJ!)7D zT8>vSpN5-yS8u1@PNs5kn1-O`k4oocofq>S6OAJj%;P(Fsnhrqpis}4UeDH5lIcGIB2iKP_>JTn1*4nmKRVAS3!YYP|n|h zIJuiUm~42teoFAU0t5WNIGLXRm5}~#q2#}l;vo|OLE_|6RDa21KlSnw8DOs`m5(IS zg}ZUq&OBA90Xr~_=wIRy1r-w*Qhg{CI7MejFX~Z-J}~_+UHgX!C?u7{)uK|nm4i*i zt)}{w5I}z%SOae9M?py7nG?@=bb++vh;WB{R62I6N@?Q_b~|*rypxEI4VZ3E9-9^n z1bGxH4$!%NgS%1Sfr$MikI}M>qvdK}x=?JR3@$GGEG8=QTrs8{{0ZuE$6axZ2;?vGzhLBP zIf|XBjc4ZP_X?m@I7yI#+%VnLwvB&$O(Bj+kHUxi`>q<9t=E;)-}VJL3x!0@nT-hJEG}n$aHQCE z;6?oEu7TvpP$VB)AK9;z!35tMw}T|)e%R%m5J)c8P210W3(8onWZ{wDG} zw89#uggUD>=JlUG)-e@@C1m8POmRqk6&RsEAUq}7x zVW){DDe3PuwyuBOtrNw=kiMqokGbpF@{nASWjSVC6*C^3*Iv`Hc+$nCVf`^n&-=@t z*PbsWz`R+StyAfGf#s)fUVqoT;mNujG*Q!TqW2k|qhilqOj8nBa>X}IxKMcZO5K&G z)2fPz9`!A4bAf9)8-WS>5H`P~G7No`2WM)12sO+qNf0Ee2hl=gp+Y?s;H{98N zd-LT_?$4v|obN3^e(#^o-U4gEoR6meG>q!4C9^W${pCG9M^4rt;l{UwSJ@$zg>QDO z*EXxS{s!EMx&7dD1&=K=buTV@CHpl(WX|N2qmL)}U;jKmP5NF=lk24PH!Gce@2Q`g z#CkJ^M`D}dj0=ImClgL9X84^nef8L0R=v*k)|vOt!rtqm_V(VHo06fv@GNj9?Lvsx z&L3YNUg}$Q{`rZQ#`ak?QavXFw6)iLv`$}le@APtR@++sZq1(+{~KN}D1WxMpDS%+ z!Yi?@iymGI_ANMe+Hb94!i~NSZMzpOe%3z4#ebfsM(u1a<~FXjMen*m5%TcR2k*u4 ze}9>;+qZMWltE7Tr>Vv?-V$`+BlZROktgDmG#DB?cus7OU>;gXYN;Z zlE~zrvw!Qv?~;1#{1#Dq4tCs{l^>^Z>}TZ!22tCGOWON?o$a0N8astm*y`1n19b~? zUra73+&)Kc&1pWZtktij|M%E_V>$j!rg~-l{N}S+(rWyrX}kF?-kO%A1V#S^&P)}{ zZv9=g{D-xF@?1Z&7a6hlKV|g-6bEF%BQR! z_h!TOVtKp!dNvhRlPs5u)vr7J5x5Pqes*P!SKZF*srj<1e3qiO(({-5`F*P2dVlTa z=Y6s{ruWiTPn>jqtEJrThJ9U$!3SIVW_gue<#sLq8~!`SN&2fy9^?NU`JXM8S${9z zat@rkTDcif>iMq^244rx zB|oDd9{;gZ^I@a>Wi|s<{g}(=@^eiK1b?se5RaU`_*A!M;gYk88}59cZ}w6X!toMP3H8FU)`njxgN@xNASm8?D literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/device-control/images/general-settings.png b/windows/security/threat-protection/device-control/images/general-settings.png new file mode 100644 index 0000000000000000000000000000000000000000..152822dc292dcef35fa080bb72b27e73cdbf47cd GIT binary patch literal 128402 zcmdSAbx<5#_%#?LNN@=5?(XjH5Zn^nZEzbTI6((@hv4q+?(XjHzU2LVUv1U5wf}C_ zPSw;*ci+C&w@;tvoTo#T6eJP8;e7k@4bl1Iy zOtJ+Oqx4OcLWbH%j0c8Qf2ZDEa`_er!0NRv8%v65MYTj|Wc2{eCZfc{F@*R29Wkcx9saL8JXk!$zb;^JFO;W2E0+G(FyID0 zzUF7w>(dRvulLu?jta?T$mMLEfX{Lp3|XwRcjJPCs;l_{dO~~6@dHzvt*wkiV zTyalum~9=q#1|bMZZWne6FsdD>-tqYwW=bOE5%wh`<+VA;C`?5U~6wt!Wz$oS$D&( zWdW;K84h7<5UTp64%wWxQw6_9X?yb#-<5b#-mIHFb1DPoqJ5HTymt&l!S% z4fmZM(tZboK5D3oc1~QHf0e3(RgFyN%UW4lN|B+yLuV^dDJUq|wcX7_NWU^=?VF4w zBqt@gd3rMHw_=qZbC`303EAA=-_vT8&)TNcJMKel&=~-RJ6fyCnPzV<&ux6mQaLZU zOpcFFemNS>l`bLaFx8BDAB-U(VT-NPhIAnQn>U}H(R5zS5Wk)+xi^@coE&}N+Z|zX znpTae_sdxWJv}{YXz#=X5|(%g#^psCH^AD)<|{ZDV(>~6;K1{u4f?vUIPD3rPxoxx zCNAu)SASN{sKJoJ>N#)SNk^0-J|ggFzZdr4Jf_bCJjWvgVyOHaZ-tK1*dI%0H6wVG ztU;@`IByL;fZe7%)0YC*Ilo{hZ1oxZ=$aCG=NlttyAxE0{ciygna7Lft2nDa33qpQ zue7-lI$6 zHCu-+Q6QhM`>t7`&rEpq=B$IPH=0@K?brdM+}r)2;qyM$aDqJVb$7(lOK}sE3%tCd zB&64QzWQr7U-~t*U9aspH~*$i)B!HKP*hg%-I2Ze*V^)2iGXgk`Md7q{#UpJ;O*3K zAFaUq?g;zO#0mlJYOFMlqK^}HtC(sl4d4^A%Ktr-+$jo5N=XTcpmrpJC`ycQ;9tit zS-H@6nF8K8i{cE4FE1}0AMYTCjsDJY_^W5%(_;W-~?We4P8{dUt=aP zAVj@@a0g>4{J=Sjm86w1d>b2^vNL@AhBk)t$Diw`4;ZZ--P{e;iyQoB>J~PtI+Cug z0F#29j3|r=9VWZ+Q|^)a48U;d=V?|p78ggw3NAb!XWLCR>)r?HC(2vQ6jjMFfe3o( zYM~1qPu54n@|-zvB{(TM%gekiDKe~h4?eH&rw!|xu>akJ+Iy8t)>*&DQaLMho33Xr zzToW~9l?Uo2ngQeKoDP0Mo*V&CenE&$xyqLEv>AMoOptJn3Ga6J|A3^il zsN$vq%FlG!J?CHd+8>~b8pF)n5DdH?-=`HD((cR684$Q%-&^b^w47&Ya*H{Z_dA1S z6B&FyPHr;9>D98KJTcnuk5hxLEY98*;RB3t1+?0|mbUw36A4|zLn;OC$AT{=Qfn^5 z^)%3A?1J(1FXvAP@qYiqpAL5dDoKhs@B1aQi}n|WL3e-P+lhgTi;H3*-j~a7FeVJT zjlO+`!sMHp^Yincjecc6kugsya7-xE##ft30_++6al{zSY%qV4EO8~^@z@>Q5)Hn; z(EZpO*0S?4LDm0(YTC4u4s5+%KB?$p+2#Z=e-&W2AGXy zyq&KAI+iV53afg7YdW+p*b)gFVN*J{7aAWBE*^ImKs|c_u0oRT^W9fqyCZ2i-U6PB z!m$F!p{-o?E3Xs>85_L|Ypb){QbmfwxL@ai z>O%h>DT6oa=)%MB?=H9Ao>?Z05`$>q2j-h6h+luD6v%M*#_ z@i*g`I#H&x36N*{^>4;*lz~eI>dMZ*LeIH7dRJ0LJgvLol4oj*BMn9ykBhY>I3as> z;1y-dsx7;(&bZ*>&BDy&eiDha1yEA|6n)~QaowAOd_Mf`!H=q>pQ-_&yxuN za8sx>&NoI#_vPhVpa^2Hk*O(^ONadyc#PB!s_&n0*~x=Ma3Cki9Rk4cxeOFm(J_nJ zdhWC9xLMcD`?I-Ov*C5ulgrVxcE{XL*a2ANEF)RI>TT69@U}Z|b(c!HyT`R_eOfPF z3QzFaRh_n9d4}Edr7}D32Qc*IA8`=2zc04{_DOihQs357?b@HlJpra|FOkxgmdAnN zxEo)GlLcMhx8o^Qa86X~E1vD|OSx+{+^xC_SG-SN{u=%Q{d=gxXzwv4%jK)Ug1&g! zKk?!T`tZ@ypB2(T&$c@5$#8OVZnDzE|1B(p20`UeWhJ0dDr8NW`w1aqVBGg%8kmcg zSWrV_>!iNCORngCOYxN9W4zF+J1qMkYQ3NMco~2mXg!bNnZav+KY5W{yE(Za!>Q1} ze5S2mBbajO#u-^kUqYgv#T^wUPJ!Xa{fTja|j3sx(o}GllJ$gOUqA_n;Whh-VdY6tlz)ocXR+>?$0K6 zOR@$vm=5T5tIr*kgyjM9ziJ!eYI5V^0@~Vi%pDz^Eo!f>6xZFH@0X1tm*QOksBd^@ zczCDyx;-jzXleDO`plkP(8P884{7tjY_;(gyNYFp>Y^I%z1z};^%u9dqsg4<*j0N> zPf2J`-eBLw*NDoI;Q3E{JV|hOe_ANF@j1XJiha7-@A&A;zns2*{{6)jnio@};d1(T zdpu))*2u2?zDs!~uf7_7$JIA2%klHpvinZtOD>zx+ux7z{rmTK#&UxWMC&WkcnC}V zR=2AvqX8i=h~E1{{h!$8P+~t0CNd40or+y%YU3d^nOx^f-3hH5H}Mic@#*QG{4_p2 zJ_F0#-Em~##&qJVP0HPQH{%1YTc63kv6+dfae;V~?)ux&^w%0pI&GKv{=VZ&Gg?ei zB>(-f4a99W zV<-Dh4hgsK-MrDu$-z%cNl8B~`f+>j{EXM^m1Azp64N(w>2p9R>t0G^>#uqv@BhV4~6YF_T)*3eE>u@X{crV619v5IRM$>QB zTb9f00&FhEQXsz9!0b-=JghxLn;?W^5dQ_^CAn$rntuYAbv%r}@%(!bY5`)}Fz8d@ zX1QI@UxR^HPF=0s&HjVG%*K*m)>|&dQyT22{N1zEel`?7uN3{G;#T0dFM?2dM+ZGM zDv18&Z4Xm>0z!#p!ij;Gg5!z}5dI7Y9a*%uUIq;RXgVMNgvx(B-S73w|0eAJE+h;j zi>RCqcN8DL`>pi1>ffb;v3GBLalwp8Q91m(Y&70p3rDk%|LFKYa=Bx4reX&R z?+Rp$))iVD;hiBAx%P z3LILxkt|=~PQ_bk#7d_B!vuVPE5||kdN_i4(XwssZ88x&f;k4UvQKI*YaX`oanbV? z0m(}EuU4($Sa!+0Ed`~3ZoAW!*$aFc1Sx62YJ@_m78J*En8m$Mj^pov6;{`+ZIj>% zULF0#dat2w_kYy)as&;kUfrzWWI2D0@YJ^!KdVeH?k+v$g7d%N2+7@J&o|PwYdT&s zeW&`>&a271uP}8~g=Pd0aHr8xXV?S#a3~ffyCV4PcvfI1XwZaw1$!6}bFoE~UR59q zh5wlIkf`f8A!X11@B|IV-UWGmhdm~thrKJfZ2L~UIhZw;0!6ga&i(6{AmxV}@1Xr0 zW=UjH;BU{QGy$_iLV`Vemoig>JTjq{sPb=Pf*TeStq+Mnw;oR3{;kE~e7J-0jJm^{ zJBs%q2aW;uv4tOBhR2fc&J%eVG_{W}HY!DKNEbJXkKT!i|1Bgg#R@!QGMlaH2}PcM zaxQ#>yS*T|3~r06Uonvb3qCaqd_=QXqg{WXM@#9EN|zeXO7j7}iNR*}P7#?$UF@_6 zZ5{W&LtQnkbsO!(422`srW6IA?N`WKe2aePJxbZt#I10ab{L-7dhDi}Y@F8L-Li7u zjt$^OCa2))wtMMsP!qB7&Cc9nU3)?kjcZn(*34N=aQ!ay#4ghU^wO~PUp)@Hk7(e# zhD89l?!b_TTDfa5ecF#2lQpE=jDP%29P*nBZ(pu3J2*W#IzmImKeMTP89~2EwBs?` zBgDW*JI9PqBDC}=s1myIub!Vre*dDIu4<6lSVM&{~Shk-c=2_PP&b-%f zWM^l1NV?bvm||w2?|JR7pi%fK3s68eoUa0>Xt`F0POlvbqnSoVpk1&iK$uXt8T_u( zqhmwsLre5TgGb9#e@ZmGYrSA$sD)BEKk3w=Wq!O8ql3wdD5g*KnrQ=v|&zY2dv zg)merTL(^qB8)_e0ogTyJ)R>Yy}uL zj^xWz2n_i^ZP0l=jENiI0bmg88e7jpk|o_52b^bo-3$P#9YjdbylJ)qJEIOQAxsZwC7ADKFL#@o266OIk;+~5o`S%SHg4M6)|qY_#1p9b zTII;0u6zS)KD({$Ep)s@)uerZ&)fJLMt1hONpbWwx*?k5IqZwmGNv za$BoBjxus7^&y*z@#ZmFxn z zGEQ0vwZnWfYf#qo?>I^bHwCN8u9xH}dw=%zcJhgML(v1>Jn@ibE+U7Q;4<<^N^t8g z+G|eGQZqjen`Wh5CLzDQ5i)KV;o;z)=eatKJUgGXzg_3rQyLJ5H%8B>j_r z4A^H>$3>7W>9m@+C40sueB7=1lt(;#g^0V4W0C&K-B=^egDoJ{|SGD64^hrgd z1X)2|@AHcOao$QK9prYBXR1^Vae&>dR0{q-Z~Uh+ljOF8O%6+ zZu&JV|=hs+nyeA)^o zEZ1!J>buVWIpQxan^5t3`KcJ{hL&1Vgjmpc08xrekG?4#z6HXq8#KQLAPL7H3Ek&N zW`O9R?ih8zF)-+KTjf*@0}B++)F-KwdWPc(eZFY6pT6~71b8G^tkgJRPunUP!WLmy z;(?u(tRSUfIf6^+2mv(8UpE8LM-oW(Faxd$%XF`PqIE;dVv-&}Yln^g`CJ9agRX8E z!@`CLXKaTTT2SXxZx6yjw!a7-1^o*uIm`%RAB@G3Fl*hL>w?Woyen^|$h8ShgR-n5 z3tC+y<;Q+*Ro$CU*#L9EZQRFZkAmerG%sUFML&^i7v+=V{X;PDCzSt!N*Lpy|A$VQ z?Wq5+51-=Zb>_#bWFel_KguPPL0Mm4&$B1@KcZ-w-~SNaUZ(N4xm{)SCQV6q*wxaRQPLhyewReNTO+m%)M?q_948CE$UfQasj64n^4xn!5}f1Q&TS@p-kDcKVImhlyn z-p};G;XAOtCs&S{3P2|}L5FSRJJ>~A+9Kma@{cg@zDOVAt)zEPmbLma1s-?sqAFo% zg3u8Q%o0W`?V6C@y@q2ZS8z`LmZUDfEUM_uS76Lh1uEo3&^VO{rZ`{&L&OOZj@0W0 zgJHNx95k8p@yM%!Agdkp-fN>Tp|nUz_I5CP@>IIBZ&ms%*LWbWcfJfS#lM2n22&^r z@A19d-cXyV@JraiR<8iI2mSa57)~VTzB%FgXvqx+VZncsGx%kHqn!3Wm!iEM+IypJMy*|jN_)kTC<{>Xro;%J_U#&Nkbx3pfT#GKNwjQMx z*T-VgR$Ri3%+Se7F+9wLk!zH()kL%59Zd+d<3Jryq~i^4Jo1^*c?`09HV? zTVCgl?53uKIS35O9ogj83o#6DyV&ym36#6Z{`IWmSVs}~x`?X2kRAcr&C{7%W&_yS`38!>TBb}gJtAV5muClG>3QM z+(*UKPp*Hd9V;0`HWZNBzH9s`la`iYC_4ESAX8vmDgYizqNIqBm-!&q9)KRe$6U4T zV*8CNooCopf*O6d;Pke37PK0MIMxpfW)m&me^;k=K#{+8mK};b;nYWXGg^9aSagze z#nxlB^KE>y&E>CecoV+IcvEcD>@AE)HWM40(^|8$)j~M}49w;I{d%+W$)}Kui-JNN z^V*OFbFK4Bdl)2w4~N3IsDM+P5otA8km2b7{FQ>-b#UIpq9Q!%2U~_d zw-D=mqbuoQORPEEXceO$4qYYC1?Q10ws};%<}UP_DA~%x{^nv=P#pYj1x--a*nq~k z4Cxo1oSE02++$BoUF6sEk2L8Lqv8?WkCCHSp=a#Oy`tVV?s<(09A5H+b^O`e7&KHD zfZyGpnLc6md*{Z#O!DncV;3a|akCpXWF7!c zmF!iOOfVtDu;``DZXzE9g+^&1WbC)eYx*j#n z3KCn&nu-J8vBP`8vVSWM*MB_MhBl1+IVp_FkuY z0Z(<8GHHXAOh=O)j4i$oNjF1?xJ5V2gbyf2(eDI$oZmJz&riI6+xv zWy!{(i>g|7oSL1u8xG8cR$PY}qZldR3JkI(jw#Ebww(Vu0cvqe4p9M8j`b~dO-~PZ zPSaxY-fqrtP~#ra!Lc-d4yTUxK*6B>FnyVaMIdmjvX0C3Jt#f(>8MO6>Sf~;Q&H}Y zJmYfwFKsw$`)-CHRZ3b4@?C*0_x2PM$(}Rj*Uak@?`~r?H8ozBQ_ULFvHh`BRu-1n zxVVS&H8}MKo0a+HWghOQTEGQy$G3ufycj-Ko6WN?#~F~r`#=9mhKn%gpO@r%n!vlh zB_V4U+m>YcC~=jh^s_(S4uiEUZX?~(lGCUu(|kn_qT$m}oV3U@zt=4>GFcp3*a=yi^EIF<>3y73b zl)Y|hztUNW$f%xF^{mi_?kgmRBHOM&7@7g!wJl_4pED@jc_b@;l(WwI6pZmK}`Eolb4Y^<|yM> zgs2d>+2;EEAiSngf_udu>(S|rV4>X@Ty&ZGPJZIAp}j=ZKvpEz%K zNrxM6C1?|uBv4{=wsWv^VI<(SuB2`>&oLdY$^krKL|NEg4>zA?d&P0w3mnfNQ<%E1zdJuX}GTD zdb_A{VqH7QsdBe08`q+IP35g0hf^L;C9Z{RT_gt&|NV6z3nZYOI4a~d6BUNrJcODV zMj)mKG^Rr&+j;2|g3l{k+VqKp#pqR`Vue?Mvi`~qmBJ<6@nIiOTNUt}pvI^vp?9&6 z?q5$+*^+HqJEp=qSy%@7{R?*%`SMpKD6*f_N=^6nS*A86a-Dw9${I``_Xldsy#z6g zX^w0WNNSP>9ml#s=c9j|*~;8@9iVG^nVCpx!G=&~TMXKKj{UR$~Oj7%)#tlm#wn4x~i_e_7Xk(_5S7IDb`H}?Sc{$|23^-%T($4(l0mn{r!+S33qXhUftl| zU{fACpWD3Fo0^U2njZ%}DzsalD8 znO@8NWVYz1MBmrf2aQDVdcR`l=iJ)b`dcKs9B-F%$SGb`iuppsc5hi5>)D;u=?+po z7f&9MTy9=0)}Ubm6!tq*ToL($Z${IFa#p85XW z*<+aa)GodjRbmx8EQRJ72+w2(sk(DzsDZqP_48xmk4KYNZ=vmMO~g$MCBdHD`WhYX z_u}E_r{}8P1sis4a2ckaR_pcs7>1r{4?>ppDL9(Zj^9r z{B|~DjpxtJQ5SzZl9rACEJwf-YKr3|W1Yabq7!~2a05}^ISqvvtQGCZ?~B;$7hwIs znkh2uZLnVa$jJK5;PSGbbrw7`QIG~3n6|iD9*QM&pq=@vPO$X54qgthr{sKVmfbWo z4k+~#0h4Z+7o0&Kt{t{J@`XxU^xgpG!kcVVeeyitJwxVDB;iSqd24+?5Q(6f7McYg zVN{geNCyYfm9B$%w3jsemhVl^PfZs}pvR_gNFF0LpJMmK3{kmpY#4%$(hMgRv zR;2=Oas;0 zj^GEY1Y?a4)?Qu$B2#Lc;xVO*`7qyj9rOII=cM8TxA7yG#xOJDsbq;?rSC03MdQ~Ax`FLZ`RWY$v!ku919DJOrK|JrSYwv z;3`dPZ*PA4iBC7l*ZI@F{0X|jHS>V53R|__hIXK9lY4G=3lcb}1+RN$ZC?tpoLK_Opqb+IqT_vAe|8(2It^CKTk6&~<>v@W=wb4PTvLB*`?XwBK zzOFxg3sTRLpefg)4GN~2WXtssvXT^bUY#EUvATD-uN_z}-!uX((8TH@=E7(3nl~#k z&rW@FszU=InSY%sCGa&z`-g2(Aj%g7^(K$Co=KOo-hn3uDGvs9I4_zbS-8(Og}0&#-Qa!W)$>YG`%U~K!K2jiIw$UmM*&} zNVaUvi;sqFN3PqCk1`i+p&VCBdu4IijN^|~aHZ>6IbN&rFI$UWC;OReq^PRHXn6PH z^~8OWDKqFXK1b?9MksK) z^Z3lpH8s_2O!FQ4=(FQs72#RbeQ&Gd-WkR0atbXSeNAYR6*`(VoH-5QM^#rC<5^)muo7iqlU6?h&kn*p|^;2L<-$ zeIb*wy6kd|1R`m1k0#jL8b7Mz0|SebufCc+KqY7kH=;T1)Ob_0&+k)clp8QdjdX_> zXg+z2gJq9(Q>$E~1TUsyVG|~rdz>|9$0X;+x7ECy2~;r*f;r1_#UJ%kMrGF3S2N8m z2wq^Q4gHY6>tFHU$-gI2$0~Db-^X0(OgRo;I*Zor5h9plnWigGuXDPX=R?K8ga?Tk zR5kWZ%|0NX)uer-1eJaCXv$U-*C;Iho6`dEZh@M9E0Qa zDf?w9D#s#x`2?h?LWe226J*&StkG6^mfK5X)Q2lw>BtFOKbFoKn;U}anZmYX6p+s1 zeJ0Wuqkc9IAAvZWm<^nne{iAd-KlbI?*&ep9bu3EHM%h=I_$uZd*?t_QQQVMYJ8^40=Z58phuu=M{joTIq?h+4-_M@EDbD2u6& zm3Z*XRhDSf`YJ-Aar$nEP%5twak~+Lh=h2F6gp9!Z*`D8$i3DO5b*le8W$#HS7KW4 zeCNb`E?7r!Ml}wD1OxL85wUHBR48aLXk})*8v^1rAU941RwX_}`jD#6{M_uj=vy29 zotRB)mgtamYx3ycR-2D<7^ zE;2o{AkdOKWj||GBmQqr(zE;{uy!!vhI5c9r>Z8&+^iDNf!E>iU4uC=NvCRy*zesZ zW~d22MD3h)KK^76JxwlJPTJxQpWhsDdLe3ac%}0D7(AZB#2H7d(9P7(1`3IQn%i)h zAyHCMRZFlxtFam$FY1*YQHt6Yyh!dfV!h3g>pta{GEzn611gVMk+ABb>V}#^LO;#L zo(I6vgWLF*tCobOnhxG{R65#S2)@J1`myija2wBJV~pY`!1S=htqZAdH0i0oAK zaO<}WMH;Z&V<-cAk1KB|TszP@U<11=E18hzt(U6FSy)(zh<>ir+X!(J_4?&nMjr`| zFx$*{ktC7YUezj9r_Bz-4<4uvbsS`PX&#)^0)G|7Lu6m*X zK0fXdlQi0lBULtV4Dwv!;@#VMdY_$Up*J4~e+tcI09<+Q$s~l%0t&#DH~B za8sT?Fa~{=1$hs$W;JB`XI7fMEsk1FqMU@DBv7CD6gyUe6HzAtVQGC!f5hbcJVC8? z(g0jI3Cy;hup#L_hx#Bf$Pz2_ppNmcXv1@aGQvhEGrNPlm>@-$0Zq@DK;f+lvllXr ze2BSg_XKv!oFKQjcF*Ody^Ks)M#g$q0JN|@;B2|>_VzX=CiB%>W3VF1EE{iZ*Zeu! zijFj>fUKSc+)*-A#X>}2=sLme`%&F&ugq~(+SIu4`4g3l(?t(eVPQ%=Ukpa9aC;0T z5x-gztM?w;L$v{*GlvewU=IcgG|Uk;*z3AEQpV2w& zqUt4ryXT8TSH-v#9pUiJ>0^=xm(DN{xACcq^emSp5hOf2w=U>0lWRV_%L}Sd3I0p% zf1+$o6l$~AtJF>Y+gr^u_o}A$LdywpC!MjLjrx@30sNO^*(y+B7 zV?SA7H8*7w!SRpipjG#g4(gzeA$9}Q?6ov{c4YfRX0t$0yI{DEqH_HYCBY_kx}87b z`Dm{FHL4+l3rjwzGe5?!1l$=DZko|p^v+DohSm0aK}y>=L2oVmYsKQi*l`<2n65Xw z$?~gBh*%(g+SsgKhrC}}yIL;IX54lXOpe^gJ~_2`lws6H?@Jku_vIjx_>HcR)TC<5 z+d~!TTj(Xyvr^_AEH)XWwv&va%-)slHDHnSdhjowZ9m~Y*c9$q+V%h-T)}}u{|gkE zYvpz%3V8wzmuZ+z0{bdAN2GAL?bLTw$3VsqM-q2;yks>B?Buz9iRQ4FIE!l!x<%RD zOwP-TFDbZc()iH{o4xV5G{Z%+oZo27aO9|Z=|oti0T;JALBYk1I=Z5${AX^EpO)u; zO4xL7@>=)feHF-uS{S}uVoXCgSq2Pss7U&|vd4?2?u#ahIQfE)v09jE1XGm_UB09o zcIqaQbV*Z)>27YUPFv1+%nR6L)c#StQK+ca&IWA04=%?eCGJ=NHtwr|=%FWCk*sbd z724{CZt+X?(!n*i8SBx_TFj9#)r?;t@hw_YDSvjr2ly|9YcA-c^aJtFx+)oWtB`tQ zl=mAGt%r12wGOVi4r-D!pAfzi3V>S6V9C5-XJ_Ay(7*pMz8k__KBg&s+gop~|=ROwBe8P&a?DS{L}IHG!+ zu;Vy*_&1n@!}D_YPki@Hy7%KuubHJ)6@imTd({&G9;g;2ImNPR>}Ouvw?M9c>EO`^ zUA3SaxXq*ZT=@d5Uh-v=NyY%RGs4!Yc`rt2I;*&Q*%TsGozBy%9t&3CY4xu-xq9A8 zsHe6$uMX9C9JHEBZeVYNU)c(VWAdGG_ zc%A_uFVZXSE8I+t4B~HcFk?U4ge^s=e`b=G;I}(6*`fki{aG>0 zqNW^&a;yTg6tNxA*sH?#Uugf|`b+JZ`jM~pPyoAcMg}xSAK?i?sYrRu6Q37+uj`g> zX2?3>$|ghX2?UhE`JcX1>lxLwg;Iej0y39~Gg*^kb$uZTlbwzX!kqU#GS<`7%itnn0rCwiXtu-2>#g73*1|ZH3wBiYKAA}*w%wIty8t-_h_A;W`xMk#_Q$mwxkK{vi#>k_%^Al zq|;@hM1o&_Aj)mT`6%o~gg2|4O=MolS(qOk9v3lGFch2POxvVNgH}~4#`MX1rXBS9 zXR;H1%D#fr3|X!{1I6bvPY?IwXZUX8_OiMQJf3*OUHJ;|>Y^iakwVdj6E4pfw9F&r z5(N=J-JSwEs~3|48E*ZBh8(?ajhgEPhx3Gz`6_E|o(tpS=f`s;pZ+5^H@8T(QUk*E z%1%Q$Ugb{ii?*d>X9tpFhQTz!2p-<~6$f9>?QG%Ar@ti9T?Wf_nl{z<JM zyNa75o;AJ(ExJl&i{q=X;NJvUVQ!R6WsJ&|4zJy8M+!;`iv9u0S(#!fvIJ^p)MO>< zXs8gvVo{v{%^W59i14L{97g>}I~-IRb{lLBq5~rL$`|im{Fq-=?(FbN=DO@)mhnSm zhSZMgXfjHvKMJ^o=`FdZg{r>KMwR}(Oa>#)_*_Jeu;xjIuUp&@v-HX@d^eT4f1>(h z@cU4UUt4g}y&jJ(5%WBq;~lXbNm5u{l9zm0mdoq2$%h}_0c4*>LHj**-j6tIA zi(>dBF;rY!Zl4nMC);cBdScOBZ1?7!L<;ViiuZl(|IGdV91i(#DD%^Av9g!^*U(Vu zU6nby4@IG0dv8_`N1p|J?7~0d@ZViAn&%Qr9e|a69oBD^okmAma7Rckkdu!cizx3C zewSuetFjx^Ok=mP?C(*6_B?{oJ{)^;QpxdPlB+ULicW)Z$0)1#25)yd_10P)3zHX! z>df5vhYDAUp|DQ%jSluR{eRSp&FisJ0X-D?$^c15(*$TeCq_y?f9-zzh5*L%!Igx1jF?B}drcqE|bLCML2mkqL>VyuFKe9=(D>IC6>(^==c)w_?n4#ZzbB>ljl znD%Ns*OyAF4LIBdAHXnOQ9{t8-w#wn2d|fmHC~Qn2@aLKxSiH(qJSAsj*C?wS8c?+ z-exs$CU`_(%|(V0f}i-{ey{0lqXDq;ZdD(OpBv@$I(;rR5S_#esYH5JAn&HoIKloF zr_<25d&{x!ktWaxSOAN|t97$q;CV~Ej^9o-As+AZov?c6T^VW-%#6(0w3_v=XfLDp6 z1joGLmIkVD@Il#EsD(a27*!{mr3fYEIRhc(6#5hKkK=dK`F9$>`|{%>x6iynJ?l#y zoW3)sm^$b!a%7t%Lw%$yw|dwJQK7}F^lPG}&5v#0kAN}P>r9elqYva!gdW;TzABvz zqC&-==d70+lR=bW{NCV&0h#E%(!y|ZJ)J`WRd>MrPxE%T>KuMY7F&kwEF|p z^^4WoTC;z}80vDfxKZAA_f^U)Um~{^4nE{*s9TwtsVXPs)~G232x;8Ret#>^*D$w6 z!=y8unK)Z=<7h06T1+->1YE>Nx0vJYt6$DR#K@}%)bMp5=7~zs#*OvQQ@ZmQL|JGk zR@(AruDJBFl*DzBtlx3l5o(6SgdO9-cYkYc9L{JASQqE2_qCsyXCljOZmKCK8(BHF z*IfxEsDUA|$}|EM?l|?EcT$7$?T3$D9r(D|QE2E#;mLImq#^Q34ueOKGn~i)PQ_XOY5# z2(g(Thva0r>mS?J!cdY^{0ThPz=B!&Tk&ONu|aNPmLMZo4;y)wnbMS>N>i&;5t~0} ziG~ladWf5+$;wzeBY$GrMAlb84}hoE_H|MqQ)1`3YRINApW<)*1}-7AZgE_O(Vvq? ze`LW+{nSd$Era|~qBqZAK4K2RSb3RcdbahML*c#JLM-ZR9qKv@mzM@h{Z{_qGa=Ju zq&yB;S54Ho#Fgi@c#aC@H_4(*IbJ z@CPd_575iKs4ueZrQW;E@H1PJqE9nDAXq~P9e*i8o@XaUlR1Q;=6dKn$K19fzLa;p zLBaP3m5(*TvK61h&g=l*d7!h>MA_+8zowJ}mVmmB20$JJiur#c_p1)KG1vybezmU`5(DTeXLE18y$V->qp z_aKTploruaFH#w*LE1q&Hs+8D68O**(T69stH<03$IO{*{BB|=X;709HPZKAv;9HZ zPYY3&eh5Y{Ew|^*3j}7n-;>){h6^zANVf8BE2*`EnYEpsmlZ_SRh?}a z0~Pzy_}>m|POpGoOxh-XZ*4Q1)&|ogg41|WV4tzg>q*Aou?XQdEu!0`_s5jqrCp)l z!Wz`UW8A(wVypF^mm2=AJe~D`om2R(4r|%R7PKwJED^ZVk@0{UcHZ^_j>{CdEk=&V zj%N7Q{D@^HzS0+NR5dOvFU&_@^n?_D zP&nQYdkLIagrGr?O>JIOYntny9I91#iM_8J z{`UUL*2d1M!PTKXP(yB5r(1zb;yWs`n%rbbfL+?MWtzhGFfp5A&WLa+A@1Gk%MuO4 z=7H}r`6ARBf7PP+EOHVxJp!npE#y8ekBM29Z!A2EsO=Lc_e6&S=%v%X-oFs|jyvfE zbAQyHw@T$J6R4v+Dr>iAR>;Z~a##yfuGxo=;}Z!K;K8SBVAhVXot*57FHlC){=5hD=B4}G%+vlsPFisq{t1yoDp9uo-H!H^4 z!zjZy*F!|ZM+A5`gSmQEasG-vK+>Evf}=cLlF`A!vKtCUIFfSNgL(jEe<6j5QIBm5 zD9UT7#87Kb%;bfCnUg#h&8WH+Z~8!bb%jl@PcXxR=0K?>4`)nkhU}R1&zVDS8;0DU zp78YUDj*Z-`RESkjT%4QR};x$ZdKLM~uVJ^TAoqK$JVNMrE~JcO(48Yl zGqSbF@6EHsFUl~OCJ3}<{nbG;L3!Xkk=jEGhZD2VyblIukZze+z;WJt2%j9}V?+^fH2{DW$R zkhZ7VWXvhXhi$LzbSnu=3r=rc8dDDe?=`n)Gx!d5x)OCP+O=|TOzw}c0p6akmGNQu zN3oHFALmL74=?ZE5nIf)qg++XR+}iS-y6rr$JX@lQ-JHi!x)8I34>O{%{2X$l_f0# zGw)SOxDg2Ns%FyF#hJC`)BUW|7$u8F%DIQ(UklwC0=M)JaSP+z>LX8T80S7+b=JlJ z;55p?BC3CMG;k*fAY~z{Vdv>^IY)26yN(yn57RBltE#Jb(J*3jc5L2(YjV7cGdFI$ z%2LDR6jE}2W)e$5oP5Dh#BJH9*LBUUnWUQ5Km)tyU^ zP~tYL&&$W3SAIn*NKo^m#m(xb;uelSCEmKYu$i@F0z#>X2Ycu07Xog0nuf~<@ynYu z?-x7i4{|*S-09QX+TOUpcVYrYE?xObBabE5#P!!&eM=O4lChHiPR(!;m7^w)Gxbq1 zwd3eT?)+hYv~#8{2=|TRe#2g{Z46qX%!$FFkmPa9NsF*kiHV24bmNnil_kPLo_~CL z8rpN@T#Hb8!z4ol7V(4Jo>u;%BJK z&Wzi4L>(_QKpfMFP%4J@Byhm)VA$7llwwbYCq>gFMnEv`BI-GMO&TmT!rKNL5esJ6PpssGhr-W*-W5)gi81HWdXGRfG<&=pq;U?M|LCrT^OY9CKl zhXk(;o-u8Px5jnh+-mE=oMh~dmH03GYU4tS7uG5mzkk|V>}e%nWt_j@c>%%yCbq>S zXM7M;x|)GvOk3Q`yrm8&FTfr+!QAF$J+N*xAfJQQW1H6yPT<36R&--J8@NMJ&v}2o z=(yP165@;ZE04eLZF!!a_ko9ZQ9q*8a_9C(3s(A4mDR?S5ts=b*)nGC%_w48i)suRU=Hl7q14NIiNCicD9lHUf%O)K^ax@QGWtd- z(jK^z8^3))2Ti~aAEiEQzy(WQ95l00g{cKHx65OuoVcGKB}3+8+(DPR-VI?on0!yB#f@LSIq0>8ESx_o!?bQ_Vt z@xHZLsUy{ftv!!%gsmwwyw`!{zHPIn<^SUCoWdh(+cw=DcG9tJqhs5)-LY-kwr$(# zq|-sgwr$&)>i7L-zW#aMz+M;7B* z>4WXv4ol|)tUb`SKeAA89!H%-C5YdZp&Q-LKKO$rqpR~j2GZ+T!shR1jSG!mM$Aw2 z-`BA|O{T7_GbmUCF@dqk3o@JOw@6O6@38a~O3Wj{+d+wkXfwJod&V;Zhsfd-hU42b zb#%)xoV$C*D*b9_^uQX=h}%!|w7ewxmtqby;{efRr5NVXi-kJbA{Z4#aJGW!GRt?Z z5n*ev3y8@Np5~bnn?Y!{zuAc_s?K*Zoy!!J)|pS6NP%PIjaU?Bm>YOEB{>75;AR+M zj$Ru01ZMWwDConInPL-jqq+N!_*}3VpVd?9D2J$+I}*Tb7V&>+DNHw1!+|OLUOt*LJIi_jDO8Co zKHS8W;i*kZ=3(pM7T>%5NDzmXqjvC1k}Z z=Hq2!7F_XS?U^Z(N9N|{3;{8?>~>o~6#$TD<#M~q>*?XcQF$F_)Y(T-9E&sMP*TF_ zc10S`r66u*1ig9M)35g>WNDIld}lHycNBs+)I~OwLMn`K{48Xz5nY_xfFa0%%@=i{ z_I+{02{O&g(p{)@QBUHzwn|K*j6;F>7VQnWXbOD_A=(4->vNtriH$m=LVURNjnIW6 zmyj2a2Uv(Pv-tf!k#ZuZI;T9n!75e=^P&J8;D_E|WBd`iU{BJ;ABneEt8G&mSOQNH zLOc@5S6H0Z8V#m(yMU;+y-C>RU!uAp^2)zs3Z6a@jW}z86p( z`ZB4W8XsXRJ`APOkcUEEBnxw4YD-(=#Pb>NesU$Ah0O8uWF{Ow{8H8xQaAH30ZhTW zzVNXno=p39{1F!Gj6`(CDJqxru=ELV^w{*xEnfMj2?r$KFp-g!^z`7li&noppEJnp z8yUg)Br;?z6Mv&C)+~Z$`98=1%N*OJ-=w*$D#n99_)vvzatFgf7XN;-r`^uZ7U)D} z&Rimt78*Y#rb4?v7kk?t$a98`sJ!T5kN@duBkh|8d{7eZ>B0xN_W^5?f8JL!G3he0 zwxn?$v=JVj9$ zM6!_0$8hzF)Oggd-HgfY_r#Ib+cGwXlCq+IR}Wzw8-15Cn4;jhyYMui32vS5{IqMt zi8lTx%!zJxAXR%0w>^kza@_A-uG($SGRlb%*v4Xpv+90kxQru}AxV|;BKFG;)RGU5 z@xk9%;^4Y5MLll3MzO4qGZ9nO|J!uutysB zN!?yiAJRW2oFv;BatZw$h>g@+?Ux^oru*Hbx!U z&5+STovkIM1pfe=?i$vs+vIbx&+JlQ(|sxjOg=z^^aDR%9>N}VR`|~CDI8%&e17`W z=jB-+rSU-+^Q)tAWN}cG6G&Fp1qd;aBr!l33-fwO$uk1W5yX=a{_!pW4X77CpVg=R znmpvQ)CUC9clB=f`nO2;17|$J^4-x;`-yH1)h}4q&c9+L5gsJMXHT7ZV@iZJ3jpb}0j`cxd<;tBf z!}-Z$%G*W}X5nii-|nAt!cl`9PoAD++Icx*qQm>V3jDIGPOYBI+rVj{pC%L^tnO#=FL#34&2&M+4HW zbvsxMO=!SK>LR{qoH^YC{3({XzN;lFr=X^}@ywv- z=`)IQA2{=TS5#EPHe@qTv+@IG?LCCB7SXPGuvY68IUr;+Tx z;Savj`}^XZ&|FX49n%NGeNe!nn&at@46gg3x{ac+!*%NK|>w-0lgyAXU7ibUb z{_a37>l+9s%t;V)&!Xm7F;>kItz3Q472-ghJ6rpbt7BQ-7>RWxAnYSw@0rozDPj02 z0+bvT0(DZ)&(9(vBH7v57A$u-MkPQ>?AUW=vJ7WH-S#cKFtr9#6#ko&hN6K`$i~5_ zk3uk*&O{^s3hE`wo}ORw>4It6bPW))zU5jg_s5weh;7O-Eyx<4pbxD(V$89*XRu?> z%FJBN;qhFsWCwQcwY718v4wRAzex}<GYCkEI!yB zMW(5)rlHYBwsnd256gSy8qs$)n!95R+S>3H6t$4HCWsgiBr9oZE9@j1TNt6FIL6Z{ zr=&1tHFehj%FRSjSR8*VfTiuQ3hEeZCgi3k3;7(zfh2A3N=9&1I(EGUT>R|)K5QxB zWM9Y1_82yFCNObozi(uqoLJS8@ey;9X^t3!)|(6pZDMLrmswmW#-UmTt2t=zs*P(s zcHUKZnLu7L82T;kqHCq&ghUCsF|6x_5P{u!zYRyX)o?MMI(`6S!;s3jahZ&a3|J`! zjxEr?*%J{HtJUiM0*Z8|rsRV`%xS?GnSeJqNoU{5x@p>pW$hH5>Nr2II5PI8`Vb$= zLxA?cE;3C50TMZ`??`*wHz1KOMKglc!<}fUG@@Y`{)$`Hi}UL0y3>vGAWAoG6huA} zXcQw5Wb{EpL?z$Dbbp2Gqr5uwEL`KwaaqT;EjL+Yq65qTK3mDpy%0SUTMz8y(4Knl z9H~r;i2M2}I<8V$qeU>0F@R?kSw%k`Y2k)g1w1Hir>cvJwX2{cBlt$@4UT!M08 zeB|r^d^K6EewWZ9lMWc|%))(LY;LJGZWo=SdS|gQ5FrqpaXOujv$_6UENm<4$nTQk z(vsp=H}vphKME^DFLe1__wxL$m7Vggd)Lu4n)CX|O>|ZrrhZRzF}9cBD`A>inHgZC z;Ot#kR9~KGO5`Fvl8Jg~t*ObPg>8Be(Pi_xZS<3Kj@+zh@E~h#{*EKy3k-b4mAW!C znEvT3E+{FeD5_N~AnUB+@6=Nt)|lMjl?EHn4RheY>Wd*y$mo z8NuiwFlaLtKfwo;eF(4qq<+sD!L*TMXrZy{RROF|bq*vYS~hrlM`(6B?sP>vTxTE^ zMKIG@YW)Juy=aawLxf)CrqgYmJc4lLNPK4~l}_X;%c`*=?u+^X)mAqc=4xl+98h5Rq!AgkNLU=XI zshdr%1;}Rq)gS8 z=CU)L^6ipXnG^6{tw1l{jP2N{$%CPQNfDrc_?TA(f%cQ0LaO`1D1Zt4y2JVQ z?+Vro0nw8eg~hs0s4W%7zc@*TL&Cj`&9jfN}Z8pudcUt1FfT_VxToSm9v zK&TAAlZR-->GNz2!#uZaWT(hjb&kG~>4>%C`yMAzA?@lENhf-Ic$gxV?Vfrsf6+Nv+na~JtSP)?gTiB@2fqh?^0w8(47l&8jO zypofa7MB*6peZ-cl(lJ5`lvNF(^kTNgL0tRmyvM_;s6udAmjOn2N`MidFQ+u2NvsN zaJdEz>LVf}n@5)G^o5j_lm7j8u5o~-B*Tp;mvGjAeK%n6HS)p%cK6Yd_9;A9+EaIr zGLbPonu%%zu}8(BZ5kg2rs0jQPs%GEJe%k)q5@*Uy0g8BeA^<5DQ}d36#%#<2`qad zkHDK4)d>*dG3?$s_O2xsq{tb-FWleIXNha1;um)@7vJ#s-KT2`lDVJRGbo`(h$b6m zeUQHmL3Psjl3)^34n!JKrSU`gIuvlUL`Fg-bei?vD>I%zc*vskT^)pZ4#>~=J*fh& z#CU`DDZ6f_uNmSCN&-76axAq+bWR1IvNHvmAj-Uyv3y7d%Ss5_QP zsR|?4n;^XZ_O{-;MkG4)P#g{SN*KagI7^C^+ zjokZw)I|WS?b%=_EyeHxW0Akh+$Cm|>JN0qGzF$6CDGUmSki!BpN|A(=rqMa*SL!sIr)Dvwy5Cxs1q~6RuTVY>_c3i^1UJzKKUh=4}UIindWTl zj>9ySk8v)w$TKDJ9PuazDrpwg1{X;~79tdjvY9Q4=IkJl32TgPPR`uW0n)+x@pxY` z4y#F=;UCs|J8nN8tB1h1^d`SNyya(STv-Bnw;3A)gTAS0tIzujZ~%6&H=M|r4xF}m z@^k#=Uv0IW92o)5!v49}#E8ddvOL**F}9{K7lNTqhvl6-=@!k)QpnPrUl(PI(C<`< zCUw51L8i=)j?gb|_!VN2#fY>J&B-oV8*c17~>k z;+V81Wi|^_Jy4{c$Vns+o0O?9ni+LDr0qLmZ>|e=&tU~sVUGJ`bfJ8_lIS=O1=+ar z%FOj~8W8$t2qi$U12`ZfyCFwq_Lus4-ltq+Ihi)BbCC~|vgya%nZQBrk3OjU&}27( zW`ABzH8J(QG%J50sL~_-{ia;P+_!x*x-s87ZxQcQ2F7)k?q}5Z)x?FP?`6cnUEQdS`ZCpS`#M*(~}+zGkd7k}GxCa1V%ObzzRKi70vR z(h>b;1XniY&%G6Iu~^&{*It%lXSWFV(+Vwhi%_zelc?pxj156VMc_egP^HnohfJlf zO)}Lo^C6qt%Wm?z5k1hsY==@`&8n>P+Ij+oaCUx@6c?T-Nj}oAP7#TH?n)=~RNpm&0i*A>0yGDykFn(uWl@5+}iRa&;5%0q1GqaHm@~ zJq>GFjl7BxEA#P#hGwnRb~9Da$9<uhxDz6 ztnLqU#|e3#PjwSq>KoP`4SIiD6R^GOVd9-UK}r5ZWv)fhmBF=y-s(OF>z%T8W^24B z_VQOtGh4_6m|aYcu~HnJ%x(v)&h*a)Qm;hH3VfV)B*EwbD4BPNMdL86@Hf~P^||Km z&F6-l@|!0dMyjYx0o3d;OkuKibIZD3{L6UPJ9@Mg19@Nzkk`kaqQ{?-b3af_=TeA6 ziFW!XK=S3mNcX+2p9?dVGjv&l^qAOgvF*;LHig+~295Kfu;3Y0dAgWjW&%zF-@mmV zB$|=HONHQ=95}~Qkjpb>J53975LD+iGMC4ji6V(1;?BK+{MF578;iKNyRIzpRdbCt zW9xR1*EWvjXGpglc=FbU)V^yYuywugdnHJ+9~TEFf#5n!l5j^cc<7$-$3dN0pb$U& zt`}8HeOFUKeP=8BC>EAdc@Q&^rFalGMS2n}G95>{lka<;2mzvsQcp(Di+jY6b z077wLLsvm}b2T>L=e3aqX6i^0yc9l{#In4vmX3(ZJP)(~oDh123N)c>96O1Kpi^=h z0ITRG{<4AMdG2B)Vr1lICS&636xICEm*@dx%kBdreZw;DcrR^UL9D$fN@ulKlH56Y zB^3o-)y0iTk&*HNE3|C(0+7%m26JwLZw!h3M%VjW@)o@AaV!DKY?Rno!V}*(y0cdG z)L<(pYRylKB*=}3wK;RBMX1!Ej$j~+!O|Ov54X82CAFZ05?=9{V1ZpZ8X6cgh#;1a zj}J67G=iPw9^cRPPFIzR<0va&J2KkznnuhqbLha6Y#JntQIVR7AXm=h+qx~21H|Q~ z08(4!45lkp*(oE3cL!zeP$P~u?ER$dQ}f2yOD^7~S$elahKI&y!(f578D5|Rvk5aC zIrBBK%>)8k)AhmnZ-Pk?Z45YdcOS%eIfX8(jwdf}MB^%sEbt50mN~PAw}bKC9xX%W z+hvH9U?|C}!rXKN1v0ZF+p`=Yw9B`(b zoASMLnP^mS@P&P)1mk2eKFNE%Ap`CpH%`*75yaj24qb*L?y!GpNnJuByuJPTc(!yh zhv)Rit3pWeO#QhU#lw{!aT77>6YTC1dI(!6nEU>o$tb!Y*>#xlj!bV?J2$O?*QkxcBxIx zvG4ehG$SZIG(K%I`FKWQWAESa$)R7wid>HSQ(>p5nL_flp4 zN*dzK7eGxrjNKBp{9b?KSKHBLZkvL`&BIe0L{ida=9!ArIjE0pdF_y!3pq3U`=DTn z8+ZoSdHZ!vSNi(?YN}4XMwFNRCkLdAYpPJ4;bLzX{`zQYx}(yRAaQ{2L~v=9`uGU% zTfNCgm%K=*_`FXvGW=6~Y-X6??%5Kq$3+?qOW^H0qsrHG?YgUyvP9yp?Ev3ppQ~BX zWeUAB%x6K^DuEn)WMt&NzCLEG=-!`SK#v^=<1qi02dHlvA@v?fs$qz{Q3USIQX~NY zhViK1Yw^4TMM+#ISW>#jLb{03+L?dMjiO`aWMCc}Vj<&FUlV&`jFXX*ap&)BrNjUO zGdl)1gLb0q7v#Q_)*Z8uE2PfrXP@jAB@rC)E`}-zgz-8Q2eAixjjqLk2FB<@vUu^& zsq~-v!J-=UYn}Tj-9(jPjFY-dT4NxuuC|I>c@BPs!i`2E_h+fq;irnhX5kHql=v7a zhir~|EJC$II2A<;7_0QeXUY@ttdYOGQ;hUlEpUY<-xp-fk1B|Ub5J=6wb0adF{UsHQ-F@!`B;-+- z?(#Ix85{BxvRk@HFG#um^khNm)&nM?OGK2CmmkgO0vTgjg|rAMKJ!?ugJW&LIp9|c zW#A=0p1}Spk8&V;ocG@Zk?O)wKk%=K!I?$y)daSNM_1iz{iaSRt*)j2J8gEDxjg&! zX^-zV>wP8j=C&mL4gAC1GXukS1F43gLW7n{x1*l>~lidFeyZ#Cn~SEb|=E_ zj4D0J8Z7TZ!XOO&FMROU@c-9>wf9y~ z+t+_a%C0fqNRr1Uqgux|DSu5+=mx@c8oTm?W=WI~K)(~r)TaYc)E_XETrb!g9F|Eb94 zJ+(JTk(&yIdQQA@kTf8ka3f9m2Vzvj{$y2tBCtGe&!YiI zXsWpIjp_ZuJC-=mSCu^W*H<+KMpc$&n)`Qf4d^Ja#o@+OrkpqaLMD=?wQx|XEmhVL zW$NEWw@ycPGvTM*`q30M8f*~0=j+nO*WV@xRv}N6g6d3`5nReTyRSs$;Xm4L`0DzK zGQZb`UCatI`uRx6Y#sjr&s6!mw>r%hQ0Y4d@DU`$N*wBWJlo6aE{Gdl4uY}~QwVVU zxf}N5Q^8LlI8Pws71F7u-O>bAs%rUaHf<{zQs-L6s({Bq;f-B={$rZ~kyd-X0?nyA z*wcm7I>-$$&03nxwod&e55;AFWd*&!Sk6tG+m7kaC`pUUSx*lsQn-yx}%A68J@p;-_XyV+bunE6Cou|$;~Ei zn6^z&Q~k(ygwcR_9FUZOkCo-QNZ*j$DW4Z-&R3TE2-7mQX?GNM5X}{CebM9pgWN9o z?uPTMhcNfNQk;a;b9uHmHUZNL3Y7+Bq9httfBTD2=c7=3l{gF8u~RI5Um{r$PWGJg z;t61XEXq3_{Hu`9TTe4QP|eS_ZSP*fRRWY}q$8ZlwgDAZNt6cFk^P;@p4wckAX9_LdAdTY5?>EAhpU)-H3&Nwfv! z*x0%KdBKv{DYsb%bJ!XhB+Co0@YodtlX$|8&rgnpn3`MLh)ncsUDfDfs@f}6B}I_% zG6x8dAfN)r%~PdmX?80FP#KSx%H*q1U=yLW*|49{=MtWv)6Lw}i?T=a(c%OmIbW}f z5ci85qGZ6x!6w2+&}3v~A~?q5OQWsM60yp-DcvylgoL$i)m-5-Xx*D?b8sMQp|py! z6h}!5wh2EdzOOC^=hq2mq61$#X*7!cPk>95mAj` zAt%Jb?MoM{4i5&16mo0XzQHv8rGQjWEC9Nq8*DMH%OgYbRyT5hm>H)9UkJ3g2uGUF z3=UX?q2}WiJr&YT@FB94zD=2y)Cnl?mh!}Ss+q6>Q7aN;+&8r9R?kmDY>2igVs>QV zicEjcXbtUumQAI@FVT;0?aB<&7XQ-Rg6T9)DuznMj||Y9g^^+85)ExL%2D>LFY5$qLhQ51~2B_URq{8+G|V>d;MvhzBsA? zFQxev{mqpfbGyUy(1PtF*E*@hUc&~BVPe&fqC!-p%RwxTB>NKOt_kVKKyq2UO~<1M zAp_*LvlpZsWw_Ec-O2fly{7>w|72yX2ic?M_t3|S6`!rA@ZZ`UR$hv%0o1Tf>|NHI z7ulz=dX8PQT$~}3&K%8WyOX@H4@I^LpI3oW8WXjV&Fn62Y)g;YUWxLQKUwx6a`-$? zuIeKpxLhGc#x(}R~1Sosp3%+E<7!FyOTZY zj+}X4`gRa4iD~a9@pybr;tYl9lwP(ROECWIz2eB6slnc_$ISKoJl%D-U(JXXgCVwj zPDK7QDE(Lo*?PIrJkHtFl8Yn{+q$kZM8B*n>5%T(Wo{g>*A=cD|=IVB%(9U+TjdAWq$k3vY- z^A+#CIE^zNe*=p){HDFG>e|EN^GzFW0|eCp&!SmeK+&-$V1HMjhy`qefDK=*uhBI2 zg8MK*A!Wz=f!^$t@Nl)TLLxb6IsV+ky6@vxC(tGA%F~ebrE9bXDDv$xGT-s?K5Vgd zJq=z&;@_M@c3o@D3+ydD$UG`-aoDF~D6A&9+Hv1IZ@wyjyTNn#;L z@$!9Ox2p6k5Y!IPpS-nS@Y!J}Zi#`2FrUyNNnc=Yo$zW-M9`>^R=hPj$) z;J!gunH(Pl)v45j6DzoNv~heQj3?~8 zd%WskX>~Upnp&CIUd#Q1+i*`9Op(%Ee+scf<0qDn8=Ae9b&b89 zMYitgWE45Yevh|7fWv3+x)ao>@kC5CEwu~r)$4H#{CIR}bf7}~w#t1j6OE*KnVM~o z%#I~UgySB@B&_G?)eK3ORmMpq`{=zW}}*&L5NTIW4Ow8SX7 zyQCM&S=s1up)64M8JF3m`f+$xp?JtHB}paI$bO~A-U=n#y4mvezD;)krSuPA{0~)X zSu_fQu=7SrK9q{I-Jtd!YzKzsIGUuzyNfl?mJT@*e0&7=L&m0YSQsqf0YLhaD6kg! z?u0;1Y87Oqt#0}8=3!m7U44pp`a&JMEtrKtnFmUY=XT{N%mIdxD_z^5ewVCpiz^wH zB{=?pjJ)Phu}KUf73L$QvAla!W*nJMwK)-}eWH{A!eJZ@uSt`*9r7Zbr*)H*u72aE zBh0MSXNQQViDOYS;ah+D_QbTX_6S%Ip@jmoh`8`Ck%@_j7Hak21+${D*)lRSv9Yjh z);mzEKtP|Lp8PPx)h^Tk|L{=bh1!;JveDF*lIDv_Aw$T!OQIoq58{il3Nf1Nx+1T4 z2Sbx3I9hKPaCtbWnVcQ{;D13VR6!|{FdbrM0eA#IL@Z$60aIW8Aj5shzKf>f$nB0m z68~0Rr36Dp0%k;b7G_k;g}JYwibW;eY;dY6o&QV7JLG9`^!i=#4>O}$$UeP1m?iWi zhJ`tZ3J{K;)Ma4I7?{DGJzt>BDm|LAS0u-Nm-x)FoSpi2c}mwG0>{=yptC!=qP`kQ zK6V0fj{1H|XJ1e=@pi4X`7;!wwoa7JWF~NU?7aYLS~P_xVr{f|Cfn|~8Ib)&L`s2s z9!QPANRGKw4dMq4VKH;>Pa(!2vZlhtn;9A&0y zhW%E>wq2)Y^I7L089vI)I$@1rHtEO_zjVLVSAfLWY5TIA!)JffpTm+#w_Lg_kg9F9 zjg7fTm6d@t)a7t;RRRi_$mZ}y!ddt_bo;TD7!W#q&xx{Gy5oc{sPQEXL@%{lxB#W@)qr~-@%JC?|Pp+7JNdny1Ml|q-p<7jfdM0@v&h?`E__15D! zz`OTC&0R}5ws41la_n9PZYnv23LzND=%2ShOixoM@tP&Ewr7Hrvp!-j%W<5z8AAb>qpwV! zu#)Aj_u1T5+H&T!-`g^licNqV(O)nsB^P}>g{d<8-UJ<4X~dABEkg|L87B#VgpPt$ z%%mJsMNmK7K_PN6%n5XaOP8XEbY$oe0u>>HViO9~{$`Q;SYT_|s9 zQN`Y`(&R9hTey*@nVrX`oq>;NjHYV_w2JuaQb?cO_@V-dqdxC z5uz^&NNi(7N-^zx7pGc81sSub?*GQDsVVTW_vGINc^*&xC>KQh>%&*Tyif zXotb@;F6GG86#ESnC0{^R$($|?G^xdDi+c&)}`wt0n(eF*=Yy+R;hv*y`{Y6I40rA z0#1~8;>L>F=uX3=xn<|e7XB=O3kRgX=52b(k@&>$1mvd@vGey59w@-k4GO=ZtE(4Bai7UEma zd*i9aL>|;9LQvFmHyMeld95FAQ z?U=cfb0dCvfh!zO|G21Ob7mrKUyecBC?9{z7e${PD!{`VQbfFohE>We4|9lWe3@6O z&^PdIXq3}csYvyWERiH-rKTBTt$DnDBqAXJTLNc?pa_*L2Cj;`*zEZPE(`)ka&UB1 zs?2q}yFCTUV1V43g9Nri=&ptPqT=y_`jv+ABMZ^Uv66I@T}WVp`D%dq>8^O@PP%cC z{lH#7eYPQ@q!zmDYI1LNA;s$DbT=(-ykk&4RN$#Y2$k;(dJquZ6v9oY;C&cj^g&m0 z7(oBL{Aod>dxjA4o=Ge6nNuc4KnIYZ7i#FII_N}n;%RaaW{};I6mlGDJZDCPDC6P49X4i@c*#uQ2l65aq|1rKT5uV`0P4l1mchhC^E?;EO zQshK~9St$4KEkRpe)D0=eU=2_&yY`?qtDZm%3kmJx+y+BP_}8C&*$xJ#5Kgyx_}C- zelNnotmQa(8@Th?PqJv@yxAM1eId;|#XF7p?$V|DTM_A&XDk-Gjl2|XAl+)y^h9rX zmw8F=cGAqm-x~n6tTrLWLN5xwK1?2a;z?RsD#D4Kvtpwmu+wDBj?Zm~oT(Xi=5W#v zUMT$M8`;L-Ds3hHaijB;EtdATj_|b^Im+_peBcH>=SVpTi5MuxRwi-44QWz@+vu(u z4bhBZqR_7~nfJF#|H2#Wcbu_Wb>YRI?C>TL*IbIWz_TDST6R`W_M!l~L*;BOUi(E{ z0>r~ur;-ekOo9}V7mSW&GvTb6lwak5abg%2bFAit$2wmP)Z8j!{XAiHCULG}Ug8fO zY4gLVywNVX?8QeZN!by~n!!7kQche>OMJ+Qq35T1Dbac!WTgNPI5bPZB(nsp{?zpUBRi#C=5tpSU1=r#+D2q(bq5)PkSW!y!+f|IwsgNI2? z?rXB&8E1#!24;b&!8x)*w5=?!@5B@b6(up{(!<>fb$TF(rdY=8!_fznsCPqdw-j}v zJ^9?h5Nc`B+#k2fcSxJ1brQL9`*4#3GB_V&Z*2+hez?*q)e^I4I)Il*Zk^78}vj|N| zL@9fl3x_GQtZ;9P`fyi^-SDl&=@;>$bt1Fvni!E;}mg?ae@&2jee>=bQaKSv!VuuqdopB{eJ1!s!f0d8P~Dpf)$l zL0tU&vNE&7iEM(YuOr)b>^wX?{2Y~PwHw{uo*o`Ad$H-cPX>&%`(Y^U8i9=<6stSt zhmPtZd8JBGg#t;5T#`u=O5ejvz=W!qRHHK*iI|INW#b(9f&;zsSi<*4<> zw->_|5VdhIU#GJZF@```d?5^Gu`v!rk-=NutHN|=>Ys$gGY5uJCP)fwFCW{J;(5SQ zVLYGIPV=ZrYXn8DE(ZH5Mc+?$JhsCxy0Ld1lj33O8%o8pm8Z4h9#8c zMIpE-nvfapYcHCpW&D9gw;U>8-4xhcPTj$3ZR3+qKI&0vxZmvzQsQ#$582(B}=6{&D7k#A1WnNNva?~ z4#Zxp(QdN)Zi|_Lv~@y#D+%em$rKNh($AI68u0_W$dLNBB6DcV>d1L}V5?eLu6&vH z*nFH>IQq{74%6;wDqWhpFf&7PSBZ9OW$JHC_osnmW!71LW#K2SZ8+00gVEs|U?U_T z^?sjvvE~%pV_o1DKdV%8$f5^X7l46Z=&~`|5iX*;31y>Z>~6n%g;34BasFptO6>>u z+Q|Wd>&lG3pf5S`uQCg?W?I0k2pC49>nHC zsz!vsuF%A_i;9Rpk|V?n{#NvT!<=0pwCPC(x4qc?Uu##`8(D~}!)bD}6tAJ2%{6o~ z)T0+wwmf!$PI>ewZzL@Bp?xl(esKu?>gHy;(_vduoI&6gE#8vo!YNLym>4(RJX(0~ zEx9R!z>#?GoWT{Y+K0X-B+r1k=vlkF0Mg=~_H2*f0L=iJ@xpl;p)kski;*cKjMz)j z(!_*X2&y6%!zR*o!;M%BTSJDCnh3P|*D3RDKfXU;x4omo2RN1CX98AYCMG8SE;Rr) zW6VuW#R`vWTJ%U~an=7C#R+o3IgE!$V-Tg3khCzrK6^py9BGbGfGz$?5!g69zT2@_ z$#HV2bwNSTQ{1&E^Q{BaJ{adaYw)EXQZ?_{pvHL%6$ApXYXz&M8EyXRrw}ou~9zp?lG-Jj(8fiO7rUoSTVVJ;% z;xn7Lt~gPbq!B zs2szO!S5`>{R1fK8-f1|D6$oRDaf+3MU%D13;vZms{T0Jr5=I$(}bt*l1k8((b+7e zx-$0k3m47UFY_GmO9;8MM;+7>xOWG`+Nqx9YEtC8Zjh%hX2;ZRg}_&&1{q4XXv!a= zHD7sF5a$5E)z>~gK0u`jkJHgqxA!X?KJVGZMGRoqIn%dT`cosO-Nh=C=LA#kJK1P> z^%zj`YA%hFBInXWKEI|Z6T>>=Y7EEnQ1<|sxxx3Mv=CfZ6UxLFXo)ChSCz#3CG>X9 zjlADw5-YL{b4G*8U~~grFtz0RQzoP?k)dT4H?m{t7QpWUCxw_T&3QP$Kg|tJQ*r6Zg35phe?dT&I*RugcW6H;znLN@3psh@k~le3J&c3 z{e4d`A3rdEE-Hni3HzCW;#gx8M|<<^Htgn$J5KA|rdEx2WS|XKkUe&QiOwVoP)z7Z zGTglhS>1cjKeH6!&Xn|lmzviWeXg@JOXEJn5aP_`Q~cv)6t@ci;)GekqxEhR*s?=j z{ylBe+WdFa2_3-(dXGOzx02pz^7WqWzG`U3;639wonB-qM>L@EnIMUI^`S-1{S4Ph znyAKAQEP?{un?tbH1l;W;cB4>DljV4-$*foJr_VqKBa({USk~1s?N=Z!uE>BB5-%HF z335wWCa#MpXOamNOa7Gqa8k=~sFTA`<2lh{av(O}+T5;ki)mff=L@6$4s=PXkg}3zH=XBfdqy3-D+=BqkGh37tjTH z_Q&jCfM!ISd@RB3VSsri6HYyeZC9H2)KKj0lD5v$A+!toX=C2&6HWqIq7DFdtERRy zJrkd2;;*z{*GGHMvGp~H+}M}*b@caFqd!eh2b+k}g;+jj$b3cmb0oo6zAa1cl-i3B zc6W%aTv@yB8M9wy{;2@}-|9wwlA%RC=Fu&^x{CLP?>EL+=Zj{{o30FtbMTDuAV+|Y zh$tI6nc>$-H>b*$7JgV`7x;+JmTVc|@*C<*ijb^2=OWpsqUlHz&eWQo z?6v_qao)|%=2T#nD>pyC&OuNu`cR8!O5@wYQveGRa|n!+#PyM3z6Y1d4ONOm0Ki15LjnoDD2Cb&n7?FRoGHwaYDM^rV!$4_ z43L}ih^X?1o@J6j(ZCk^Na|69|7R(C946>rV%!b?Tl08}w9tKOjw6*~n)hU!< zM&w@&fhb?0Q{m_58C0R-ljq-!TImVE_lz&OT+96{;?Q6`egW&J${WHx9eKL`X3)R# zOAa8n*qNZWg@gp2We?(W##4JF)DBk`3dmgMu{&@OFty5c@NhHt;h0Fa)c(wZW2TSqc5Y_-pm@|GOiK5$MyuPzrd9DFC6E}5EdC^(3HMpau=IS#{W4;6Ku zC|j`m19#15@JD$U@ACdycp;k?Q{*U>Ak0IWiR;ZE*n0axKBgum^E zLe!%TFM84}uwvMc9`|}eZE0x>zM2tAvcNRoQE0Yh$8HLgf&ljrg}`D@02u%*ERVgR zc%XyD_jx~6RaLb^5cp?W4s`ep?xm;q-?tOHzKH51P_WrVN6VJKo*v~K_hl35#N!K= z+t8NM&|#>))BL-J=#FyW#9o^Cl@3@u`)3gmr^F6!aX1V=8|(;yL?g^jzFmsa>`+Uc zK+^DT=xnlAk*O~c=ye z59>4hfEFwMl#PDC)Lpwxw)A3lyi+aP(8EYrK}WZa{VYd|eCg=?3@Flk`ww_-Ca8wV z%fn-8W|kx1jeB$$!Pw2j&c1-*|Kq#-Ki#VO4`vHx8CltQ-ZbQ}bv+nxH7 z1QHrr!bw;eWqb8?*ywdwnPgD=9^rX|HtDM8I9%-Q+y*N@@T*IU6r7CxQs@9hFj(TP z*cW<2MwhTZ`QvfXujGLBOY5timPMysiqx&5=tMiRCFPMG&cW`xTteBHPu@Z@Wa_Z_ z$hTKJ@hUjB&yPu%N8a;#oCB|l%BGOIb?B%sGQ73Ll8hEEUK*c|#lrx|bFUScnhH(r zF!qN>(TxPQk(p~@uqGb4%C9=zXB*Q=J??!2 zr%WRaV{RNB7JqoNx#d0^<8bh{k#VLrzi})1CEmTHmFby?i_`PL_!XmXYK|^}ZJzu} z63baQXC~M>>wbfYP&u{N(w2CO_~PQSvQcW>Acs#$DJjD`4NzYxh$*O5v9Pkv{cl?D zk{p{PDew}C){AsoDHG+R3-H*-;=UIgV_-xQ`0Qi!?r(64!v;!xvX^20q)-+_`RX3 zr)IcKGK2`0t}IzM`kz{C6$Di@nQp!+kaU$W;BGJX8{S*6XP;JaehxjY)vp4&E8FL~ z1nO|PW{8Qzr_JIXpY6{V`u;rQWwkv)!R;b_&}K`1S;x-ju;-}hp6yC zVQ`!|JylIj*R`paTI<134}U!?&%Jh44wFW~A&&2@Zoj-N!}Tp~zh=(~K)6sG;GK}O z&AC^0Y`)3|s>DdB&=hGQjma=)u=q!1UJwVBa#~j*$<#|oHEm}P3yCBIHV;z_#EtHw zQObGUPH<|s*gz9U|M(78JR`<^aB%SdoK1d)uaEbt^M^@$!z>Ne!E5G*C_NI7;gFYN zET|@)UiWirhzh#WQ6!wHFqlXfn{bY*aSkpRixSC`qnGiP9|OX}Q*i^(G-0-}#F3ZmO(Yk_O|k>bXrE=-c8=Y4wO0xr zTUlDx#@#2M1OcSjwCjT5Q1^6UMkMFAzh;GFdO5wg+SuGJU_H|q?Ol5nK(0&a5*q1! zr#Lx%><%t%4Z?O~FKP!VdQbrj?pt7&8uNejzkzNeugQIP*9MKUNb5%=#>&mxi9Edm zX}I=9`J)n2IO-K%%vGp(V;K+_zZdkiUcZf^j!%bO`L)c3%!QJ?LmY4_vhik~>A@bp zTlo;H`ScSp1BhSPq&CbLQS zk|MU*VMUn3{8_O|#+-i5M(2j`1k<8;R7*$X3(g8CT_!o6%}cRidMzEF6s zY?;>5c4%;ZI|lOY7o!PPi7hGUU*q!;j#gp{0&g?_!GVl>6uh@rW`C*hKitWL0sk2o znTC$Nga|hO$pv}W5XyWCxqAp;VDwHDhD{BiDh8+b6B8r%exloprPJmHTRg1M$50h*#5)87a(q%qQhzBX!^G-*ueqNSeg zNo+X|fj>!0$|f3q;SxaK1(J#r(1-RRXdbqHWelL|bW;7c+oYh7(2;%*8j5yu5Pwg_?`+T0Hfeq~iC( zu(=+Ch!@X;pMzabLs4)7kla<`vl(hk2vU^}ZcjZ93hzhIFLBSY73AkE%Y&W7Jb0E* zOEO$%g03c+W&cB)tCKBtO6v;)ucK(tV(D*b{wc9BY-49<@}0Ug8>p{@&!7^6YB<3I zg0x3_>Zk58hO4BfeRg`T1No8mmqB)yBNSrph8bXQ@uhK##O^xK-eG_L zsJM}j)GiAYBQbrUK>%T<3Ut&L` zg$Ou8Nqo2EKUk7g<&^H(8<3ZxWy_Luk?uAWBbjQ~Mx>j)k@gcvre>tn{mGFB|UBok$m(C&EqSs?7=(j&wiUz5Mx$47G=BL8ubTnS>?L_lj@89G{7eMpt-L5?uRW6>cRY6 za;u@jPXDO4e*ht*uM2kVSzG{VbAkzyu_m6V-2nEj8Wn$Z{(vKT61t|Kw0#-&htVARdnie7GU;rDysROVCj|cZHWXs4fg?UykZw^0^4;nc)9x0O=y-tbM-NR6cJ8#9> zL8&-%9=Y$63}hCRe&?zEMr2Kt7H1Xk*+B4NvM~?#mP2sm>qz!C0shIm;bis(S|s{9 z4}1=)vGQtW(ADL}_mGfZ`!@9h96%gn=^WI?HSv^z#1(EjdG}80zd=N}s?`8$6fydt zAL9i+VqmA9RSC)aMyxRS+2D%#%LdN^(j_MC5`OqS#$#OFCZRcxV|*NMnU3}U{z*?W zm>9p3)}xf2y{jHAUbEu8yybtDD43DB8M{5f8*RpVhyZV`f!)cI^@1*kVLu9Z-+h7V zq<6dLeT6$;R$d&g+9K?UoUTF+yT1RfC$V;*W+{yun z7IUlm&IxLh)>S_ZAgN%%z`XFi7L#rR1F;%ETWt^E#=e}uwR;2?(;XT0HoLJISn>Vu z_}~hYXy~;@Hixt^nYnz)U}NB5U_`K@x3m2~ZBXwBP;0KmUyy#x&yc@CGv*c3+7t{3 z2KGB9ARhWyo-}L}EuS72yvyr}HMJ%7i#U4dFeYcL{=;yX$`5WZub!7+9_3ztQ|3@8IfJBMhrZIb}q%rNV$m^g7t?HH@~6 zhBCHH%#-NsemUWR<@#`A~0#@+*fw{DTgl5bP4 zg8q4XMQ(a8E&?J|oFeZLZWYjtYZW@@>Yzp@PBu^g*KS=9!b^w&)DcE=7C8#szjxxs zG>9Y04s1SJG^%t%!lP5`i-?nq4`|t~=W>Bggy@a`S1}>Mhzr0Z3FXvJSql2p$U(VnZ}Tukhf zFM6mDRlN-t!Iq1RnA!)-=M#G|8CF|LN}9GK4u66_=A|q(p^6=&sEMBcud#puNHE-J zYDEE!6p%(Sqk)cz5~iJbO3gq`B)+AmK81T}K|@Y+ z2}{wCT7$cPL|A9kaC0=~$F>*nE=gfz%lxiRm|BvH$;Ye@NAX4)@erbLI{SJevSZ*J zFbq3JM4bBoDe+0Ot7C0wD{n$r_NyD;|8sY*DVp-(lz4yX#@zSIYi$2B<8>JI@b_U( z=*-C+rFHh$Vv0wMfwh$Q=f8t9a=bOIWP$qp&F{axg(3B<6`Xk zrQMUb1(qnWXtt7&ASjRLCmocSEK~ElQ+TE^&8)EDE$_XlH3Fp*UTp+cQUdK2(5Ktn zP-!<*;jbpPb$A4F$fAQ2{0R17*v=zFq>!ZLqf4V>bBiO2oOy;;Rdm;pPGGRh#0bG8 zob$tF+VK>k>!#}jH^cnJQ3h;gLwhN1glJ;Spxy{`*p&F-uf*^u=Zu zp2Ik(Y9=KuT~S`1yRxL`X??lb6%Y{6>;d*CVJtY2bV(%%En7ODfG+<+rbtxIq6xGA zgo?CXsg|lm_1X3avBA4hkQ2`8@*1sTWNMmEe2Kep~ydwxp$DNPo0l&@9I0uPWY>8@UP60 z$iIH~w|?-S>;lZdBa>3Cnh2BIla9*`yJEmiz|Azilg0MvqnD+{v`yaJx^O?>ipAl% zOgiOEWR`|z%+R*`zFeO@nKVs8(5b~?nYOBo6K}@Lsp(&lJ$W8~<`)9nI!glJoQ4$k@F zWE~A9x3k!YrBkQJwayPIkkMNB9xr1DP|kj-#b)u^v!FQ#<)j{I*di3Ns9O$t8s9UQ zYlYQIuRvesk;{dvF$?M0n0ZxzEia1BXrV(l3?L-9%@0+?B`GOs+jWnb2<&{^^aKY7 z@9yrl)qWlp{7_U=Gp&FH<14e0;8v3LCS5RrX{Tc)7RRX$;;ZZp%rd5!hffiZ3bth% zN16RxAn_{AXnm{`0-j~5&gB7AvYoWqDl^TLj)S;F%_(5y5OOnzz)cWb5&Lk$sJ2^b zG0Yr8zr1z~?dICG=^~B!Eo!@T>h6a7IZy}k;#Nb_2TA3MDrE2f=HsYNPc7j;?Shac zwIQ(%sog|Z86HhnbT`AIw|kmm*9764!54N{FEoC41+t3qdB~-kALT>bd_7q(zEA=mR<(lX}8GfyWAk% zJlPlCL5Vu!*sd84N^=MHsSrfN z31;})U03%Ah?V$e>znPG!`W4l5nsY0q-e{?t?v6Grtf0b0NJW^Faj?@{ z{)SaAX6GJ2U(7Ax+3>Gur$+HW7&Wesjr}UYt)S(2FrK!uvI2^5q5A75^>JV0D>T%w z011|@!cm?{Q9exKBxISMWy&*;fCGazRE`fwHZqPKfFl6dWWA{*u5vWm%*e?iK=3R= zzzophzpsCP-#RBbiW(&iBM~b^@W1Cl=^aW85M(RJ>_s3=UEKj6LLr!uFPVn73umJG zYd_${pJ}>88%cm6dT;lM86*;@@E}_j=HQK@bQUZA5|^VY9s6y4W@_J&4@T6URQQpH z=L}5$X4J*tE|jX>*V>f_b?3JaPuzMtR7{cnY_r~G8$M;Kg7wb99Qz8F8f@&daULlEhO0~7QsjJwi){`je|Nn@aE zu6OId8Z$tgZ+_SwcwLa6i@8{nx91>2I;%P9-PcMe)R$Wrk@v;-*X+aAUP4ETky662 zFba`xqq@obms3N6yo6EIHKDR% zGsd6q?mLjIWb(!wBb$@-HjkVr7*iGV%;CilXTos5U3}DdFMT!b=`V<$l8L=) zeNR<%p(Z0lAIwB(Xqz+hx31cq(Xxq$o&6r9k@f;6se_6D@+?KoH>$8Bfg)WE^*3?RCays!$r~~Bmq*n%_n@GNqwV?KO7}7EdZ=54hqN@5?i~>;SVQE*M)|)5grHTEW`6imB%RC6Fo(rAT1djl%kNP4mSEuU5SX~8DnVGH}=YtzkjA`8o6ID1$a~)Lzyvg@vQei zCZ~kWWx9QA6vTCLJ$+1)wCu*7%YANhaE|kP7p(8np^prOvaj!F z9I3dT&$EdHHytLx#00qEx)l^pc*NM60_k?M((3S$K74bsALLw1D~7>U1jjlkQ;C&e zGIj>zpinc*!}Du5Y8FKe!K~CjmCq9V;h|&MTmz^0lP3dLvsXe}(ZZ?-Wmqh!As1KQ z*jq5xu2q^n40tYIcwk^+a~-%uV=Qg8QpZKtX9L75TNi7ls0t61I8>cQFLBr&7);)M z`n8ok_uYQo_epcO-e$)qi6(uAcBA1s6pvP3bb3!>wcKVEZxEpDAS=XvEqz!Q5~6C3 z|Cp4Uv>`H92mMk55f^G@FDUE79rm^wi7SuRb>Ju5y6uWw3P*OmW4>yU*zTMNO-q?X zAgxHgq@24!wSRibd$iTwbTdIgEmvf#pZpUsj7O9r?Z?fO!2+VD6BSI5-Oxv+qS!7q zNi!(a)H<+&eg(&ZdNk~~2 z{xg7smugtjW(_B=`I9~_Rg;-|v*cvVG%52kM1F-7$Ra*! zYHIph{O5DW^+Mtp%>6=23e%){IxX0HI-b>E9wVEf#BTIY?#+Y1BAj$*b>o2@cXS&h zj>uotWprqk3iQsS97eXd%uGab{%I=@k9M68MVmYbupBbH zo|HWffHzh{;12X1TX-;Ezm(NiWt{q27d6(myC{s=)gBsbYwtz^Rh_%6Vf}lUGp2I{ z@Z}Vv<-ak@ZTv7mnd;geV8FXD6m3RvcILjBkxBLSzHUuSWLQTFy>AV3^lCfbkbFblO(LxlNlwOSHxgUyQ|IyYhRnf z*d=*HjWG%8!wA7fJvHCuIre_9;=(-3EhDP=&+66?iWd2zKoWL>{{5+Ekq3~g5*;B$ zILh$!Wd1@Fsf-3U^_g8f4YZOROigBSr>3yba>2(2rM8~3iTo9R`?J7#C&0P#UHYWk zVn|ux+d=5NJ6}y!H+#}8b?}PnwkN-n7o^Kq_#jnPRZg4r-?Lf$At?GiK3#={fm6Ou z%n)F|=G^he>ICp7wnKo-j>kN+h^%#TKb6Yh@kaEj;EC4(I1=yk2~GLXB$o~x>}JpJ zbY||MAHyUbmgGRSuD~}5i^-uR)~3E^A<#lM%(qQVc>371%wdVEPa3F%u5V9`6w+FM z6M(PBDUYTv^x{R>lUBsll@0ts?`DvFL*DVLiHht~R6mmaZ|{eGxSd=fGCes-b&VHw zaGdN?l9Pfy!ybwv`NIm8#J3Jl6IQNG?U`DK;*>PsCYq8MiWceOPRY^X+9Ve8lSS-h#_ep!xkstrsSV zyL*Y^3xEW(BE(aQM)Z+*5w~yL2x@G(rSjotsa_1lFA!J#l6+sxPBKLvb>jhJWJYYF zF3^zlYdZD*NpYwbYE|1kvVWnIIo+l`<{?JS&r&vBS;(g*R$0o!cm9R6UI+;Cv8(*m zDhMA;r2Z=W<(_BGIF7o1mU#>D7nD4JN=bIO+|XWDmwoirrHBI)p zl8yp+jbg0H+ zdSCT+w$ELYR@T;YS*0eUcSP!-5J(GOK2L^PD!#aV${MAy(oCX{zA5)xfF-6HpOLN) z_ECrC{N8Cd#e2zie7ifjZ(0Axt1cDjM(kY-+uE1?(2M`ji+u0d?#Z4d5N}7FIx?Z@ ztgCFmR>T6yix>7JYo=%X7kGW7Pg` zA$Ttl;7`6-4U>zG$SDmEhswTKLE?e2A8{hDJrYNyJ5|2y!SL1>!UTt2^q%s#7k>p( zFH2@)<{cR3Yhy5HKNDnMbwiy6FL~cS3I8K(d%r}++#%eYfR!P5xGtkFZ1apF4b_Xb zq1Saj48uT|N?!>ynn0Q#4Hu6#HeFxC?~8M@G;_L?LD^~x>6U*cgiq>E#x}Hw(tn?b z-~~~9Kj#)no2DU&-H(|=l4f3X9=M6(>4145seWhA7TT*vlMu&y} z2NJLBuQb&s(Z0o6b=q%@qp5sdm~)zd7iW#ZdKbWjeckI$&p`X%SV0asqhXAJiXT}b zTgl>E$s(^th`q^L-X#BlN&)2Wz_YC}!I_~rJOTDGzZeL@qlO`GBi9W4|GhldT(6x! zhCv0V#hk8=UH`7X*Oe|;0C!*y-t6vC1dimt!MGg{Q0E|!zR@Sui|&D7BT+DF?g#3? zUgY;TqHomkk3F+DJOA-f6frX<$9o_1thOLAOMV$BAth&Rx!Ua86N`mkK^*C77^Zs)$nG% zX8(P@?64W+dY7dP!SWB5E*`Ep9HKE3;!DP+&d9dVVmXRzZrCRV{|BK_Or60zk8xrE zf{$$<2wPRySUD~ztJ&tf*nbkh{|8fR9kTCR9}sd*d+s*E!Jk>|wEcwuwFD^JaG=i^ zbNQ8QFP1z3zmwhPrsIP^m7Dgn>2KRx#`D2S3#*2&V$j}|eI-7ckD-FG@L*sU;8d_z z%PX-CY<+2+(v$_|;#dbTr)Ura1h{rFFQ;`NST8FC@9TpfoAfoL zeJ-pYS#tnHrO$sfYP|G!M4&+weq<<-G?mug$-1a-?q*>qmDa}_un2A1rG=a~e^P}L zGWv@xBhsTvD^CIMJ2ehFO_5HSKczLcid2wJwSvXnbmU6u62O*`4KGTpYt($+Ld7mY z0aENVe$c;QhMg6ics^dZC@2E)n~wBZ@4RBveRHy8jlWi6MdQn3i{YTv?}z?oN0=@T zHuo0&87QGvAJ*~0hKo?8BHbQNQx2h5>uG@MbT&>dsm2y;(#K?V#yu{E@zqo3gwqu9Ec(PVPRn_U7n91w8fy;`Q?41!A#!Rm@H?iWdRH<8KWtvhTX&yC0xRZ?WEv)Yj1^dk-&LrcTuYdL|@yYOaFy1cm}+P&z+_y2Y;!d z3iWQ&1C6EQHC0@g7WHIVQI*<66K>}tI%JCrL$`-T;}qnFJek!Yj5ne*LIeX{#lABV z_uk>s?fN2h#w0J9LnrSdlY!o!u`Q2bRPUbhm?8BW-)R-u5bG ziDg~Q|8!FgO8za%dd&o={bU(+XdAxnzdZLiyh_6pHJTnRE}m*M)xAMM?mGFpz}YaL zwNvN0_2JDM^9n?oBLVPzg?@_4O4g(?fTk(Q+&h7oAlf^`ILSz-B2IuZe*V3TZn++0fyHAQ^R-k)$NP@C zWo&_+u$%NlVzE-~#~F>CPcwO4k?SW%6DYU-DU&wc_WFVl5Mlb&P{7>&U1a%AeNLkyqcsV;E9afH6;03* z7G`lC@3-&F5gpx_E-{uO1h4B}!w!LF{M%1;*30KFj9oQv%UVyQOSitEVdcfF9UW&m zk9D4tdpC}H>b?&?uSCooh4=~J>X~SE-?_P5)ZkFMHPF$u#JvW;{B6GrsKp#>@WA{M zV-}dHqOKLo8bVphuGOSe+Rb`&i>WkL- z*tY_)<@#|m21Ss2BJ@pRGW31gHpm5^N?i-w zZ+^ILz1_NmjKc}kZ!(i~paS@ZWd=OVLi(6#e2Y$2D=yELeYdaTygfJ9UH7$C;5(l< zNJ&XOAI|(7($)3c$w^2IJv>%tX0Dr-^a7+@&X)c9cdYKgepCLAqNZ%H&SWOaaeMmv z!MrKmI2u+d2vrPI^?pM>FQ}EtG4%3yi{aTZI+H+O+n)bLr1l#^jDPZSm zxLpx9`56{PQ=*`~R`WS~_@bW=xf$y6SukbI>OH?4>k#RoqiZ3o0~oyDorETzho&mK zt1djL1KE%{IVArUKe*+BcazzyOpt#Z>`-lNQ6yt|-^kHm2B4Fq|CUCD7d`ckP#neR zqh%?QIz<96P^*|JQ~eecN~VEUn(NI@gP|OjhBG>cojg>!WRcWmoqBX*FX7o<4!YVeymIsdB8F&L1vr_M9j&>eZx7MWo);fSum-G-pFYGpCvH^Pvo zRkCp0sMWRe5vOoq9zR^SVG|Ug6JWyp_``}-$fo&-BL0kZi0iZ@=-UGRA+|s?NcGLR3}m*MnHMH#bf^1c^tTZ#RDxW*tGwUXYvKzd8musE$!%)+lFZ zXOh%?c)A8FsjSFd(v6#r;a7Nn4}AN3f5TYec|xVb6XN#`u2^gi1xnw0X!t$p14vF0 zGEfl1$gxU3n2Z+IM6bR%K5>dEF+>5Fbl3YB?LQwKN-PjrN;FBCRJOz`*yv#5NeG@i zk}AhJ)RMvFE(4V>6oi+fjcb&PtP8BF0_XSA9QI;}^=eEPTx(65DRLQOU~c+WXC-Ei3qy5ByF+dxD&k@d0_V`2somWLqHxyob>-D$s;RipAgMjy@IP^| zzHvmFFLu?U&{kh;1^Y@J(4%X3acjrd0HT3sp76OCva8UvWHGRMWxgc?aN zJlQ{ew&27SQ(q)I3cJyMR)noDux*xMO@fKa)KtT0q-Ed#X;Z0fvD0+I-0UpK85czz zBADfSuLYzzL%=EHUb&Dtp@J36JoDWZGd&zT8N2!B$Dok0Fh_l1A6Dg7dW+%wvMy7V z?bm>BnAN3w0VP6(Kg#d8%;;(8W8jldPd>ZQhKod>lrV&FuHW-DeF@t6xPFvO{_&Jq zR+_f-q4s^4&#`!sE_E03l1FqAxr%`<`cNzr-f{rmz4c&(e>A}Zu8Du+I8ps!nx+v! zf+VV@+mUg&5R*xwv?!=8T1LI4Q?7C3Cmk;^TVtzd45Q%GUvB+NO{$(oDxOUk0#A+r zL;PO5gGdZkjWB>FS-PKZ3R;D+a{J|*T$V%Vu|b%6M9nh{uqB$2j)9{jbHka(CXhZ! z20fGaB!`u`r@lUN2o-vf?F`wCZ*y|;;(kg0bISKaSxpTlDKIEVXv|NlTDN1!)b{0* z2<*v@BOm`&T{*+l*wXKJ^iG2qCJzHBm6;$Nj=H3U6=;j28U(TECVeAk+o4~$#9nVf zfU#qX@rY8r2}L9l%V_yqVyg;9|xiD5b1T(`FG_-{dPzAcD*&!5X#sc@^3r>Sza z{a{K>P16@fWzpCeb!KJhUp1DG)-`yH{FBRBFZR+9KocBiiDp4U+UR2*@A^tif^DHM z(g>J>&@G-hiV_RRWYKkDZz#?%n8ypMkj4<=wpNy!8FL$}4!x7fmzW~B9h-{LHNcZO z^6y-KGihHoE=Dxlu*@luN*;sn-*~Yz%!(hjybedY&q}6RnR~`KHi2@J1{}Qvj-B}A ziMHxE@K7@tBo#0ptHZ?eRqy~}10@YzHB7Bu$UIv~Z-0tT#gFAC#v({TKB`CA&;yUi zQXg6a1?u51W|069gJH-9-h2`0nnb=9m%aV4n`^+Y8=(tYp|Y9_O=yUv$zD91bp~Lh zK_?Bt@rK&T&(oXMmNP2xbgid>_%U;r9!#N{4u0(mqTzZR{C_ghf0`6Md z%N0CA*;LPObV*VmMA+ndx!Lo6ZVQU-L5Cllo4Y0Yd>RHNVx63xvZr?lm_mVh&01aQ z$*plYlJh=}&H16afLv}I-bX|C|EOAui{FHeZE~orOf)uZId{B7o{F|m&-OW3(!j8H zWjtnTeLTtV7CS_6HD#FCUXa1}cA{8{2IGCF{dQN`_!mF@{aVt=~q={ofjQRUKSO;VLAsFtXEDw2KMaNhTB zoxZfzR)NmY#tP6q6wwN-W$^l=WUoD4x9s9S?IE?k@(@riMHc_|_C_imjnD6KcLV$j zi;Vx90v;ZI-=VDv2JFhX_S%!%5pGl*l@tGglYVb>qeUqJBDpM!VDvKiu~E^Jw4wU# z&&T`{-@0(zcu-iP3Zgq|k|)#An`_pj_uu33%Y0#YbBFA}$f5~1^49ltU|+-Le{;X5 zfDGT=k)OmkuM)JZx;Q*PMV&a`9W7i#{PMCK2BA!(pfy)#Y9MDO+A{fdi)fJvj|)<7 zC8)_MsOk^d05XQIt;lM*-H=jvMELRk%1(ITf##{Tmz1)s!2^`00dXQ0W^!Jeg6t|) zB|cs89A%FKR5vNO?y=$Dzu(@>1}rD7Ox?AT+5heo(2|4$U_r*{hIlZhzks1Ic)Q*_ zYFw@`?oI=%@rBDl&a`7@uMLdW-axNrg<4Ds7_BuP9^Qxo9fth}r6Qv9^&o3rtQu(^u_ypEg_P=%(1Do!gSW1BRJZEA=Kzaq5M* zRx^n7ScL-AzpJL06h(doVpv(m~2WRJK?L|$d@ zYwst9CqEUK&`;2^t~7P0%v$Esg|MbzC@rwtyvGt5wY|yMSl%qVot}76hL6wE)HR5T zBZLEzO*;-dAX&UzlMrpHC>I4z?I`9%bmg+ReXn;1bK9ZA==;IJ1jza79jf04ZVvfe>X8wTzUm3eh)FCKYrHcEkD{KHF#GS2P>fNyt&yLaS*gIO2C$kdzPvIH>qKSMi|NC|2WUTF}QT$4KTU{uJ?tg#NJP{*!4S!F&hCp9!!OUTZ2B_Y%hXk7i;MEAy%FaVv3ji5fL}d9)gr z(>k`&LJk;3M9=s3?n=HFAge?Cf03pBA9L6LH(~76uK`OV6rq*CWKP@O-!2^(1=z)< zVn6s6vB@fmk1PX5t$3vgzx{8%PU3EAptoJnnKma&Y}=MKN8HFGg0F_Y^MN+E6Z-s~ z_+2T(%4}2wq~HVtBb1rxbkc|W%h3S6GlsPFrLVuM5DRm_2!V5)b>}DZe-yS8ol)X3 znaP?}`)jbur>q2bHg+KAzinK{8&Gp99mqxw*3ZTx@8;(-%bU5gC)M71m?TFM_S~Xh zP=yIXIGv4aa% z9n~u01J;zk{N^BOoj7||?W%TUWKTq*Tm`^viH&9wmPO0*4wFcl1j>IH2DwY7r>BE@ z7@gZ=Eakwq=in8PLtzIfOYyVdw@!C2(|O!HTh+<)7$)tlSU({fkhKp_6!@Bp>oNG~ z-WaAbf&x0l`K~;_$4M|VGsB_~u7mhlhHbYy$Q?N{5)l)C5Mu}lhIa@`3B*G0Lq*!^ z(#Q!~wHG7hyDY!D4x+@}2^8ka{c1BkFx;T%hGrfJQb~TAc^Qr|p9V$@rksyih-vq3 zgx2b=5E9xD?f|{9+nRogpD@T={hlTMY!nFpHYPrPI<^DYDGID!{^ctl^SkxUro4)u z+az~nxPOD5tHfS4AC->HG{nQh)BRO7a#|IWAdhv-=aBYwvJGZ_!l5i;Ba4;}sWTaQ z4WIDn^cXc&hs{bg7_6n0XO(wa8Et15Q6BL7%>t2j`rcH0)3vdDgyLe* zO+>=Hi^P-J7l&>Pj_mBVBJ%Yu4?59|HrC%UJ^-NEoB6B2PIxGF zz!pp5vQa3xiYP3w$nbO6z4jpBnp`jTMg-0B<)m9Cautp_T=MNA8$p|2HGx05l z+8hYlW+v*Kq`s?HJBjK#HpolJNk$@e0nswsXzEIjbQe&U`1#_|_GSUES1eiBtn*6o z+B)ecCr9e+GT&y096KMooKMu;q)_7dmEF#@R^lay(`^y!9i3&Qq$R%~H9p3S57W>^ zUbJd^Zgt^i=MWvbos^nc@`_sXg5f14C3U!*dz?2dZF)a$oSmHw4E!A7ujziFNxVZu zLRz5#2g~6H(Y3VV`pm0WJ~;)-S7C~U2K}-|Y&Ef?IN)2*eZ=%<^d!@qw0E9RZQRU_ zxH@uUIMD@_R0%r{Q$3YotbkkRQ5>K50S9Pwf5Hq2F`R zb2N}_Rk`CFW@7E0t-MRS#<$!8uOHo?S_%rak3lUTKI;`$4z(l{OjQsaKF*}(b{$`r zf{cx{_;qP0(&%)8)}jJ6o1N1Pn*~-ET9DdS(NE7+13OMjBhPxrR8VY7SZ%wHVp&F5 zvjswgvtFoesN({ zjh;jrcCN0zdr_RZ<1k8c9v&Wcc2}VAzuXm&sW~M%`TsMoWyRfbCmaY}hZBW3#kSzK zs4m$jKNLX>>FU*V!8kjeBr!)eIO$e~rt53Tmx)Fi zkjG%Ag594qB+Q*iVRZP_wy_BJpMj7s*~L1xOHNG}F!L-bI1ECh>$y5(<+P>I5lyQv zf3iq#<_j$yvL7-Z;rqbDYQ&Tw?L+UIsfHaPRw)Bz~K2k|vh#!$GnCQMM11{zI%JVZCr!?A9V;>PHn%RS|r=hN@ zsi>#8*)sP1jtsN$p=wiLj)@$Wq@qOP)>^L`!$@V-FbXhPZ}ARxS9v{jCw)zRE;`yG zCAmm~O8*TH6j?O4|Vbp1=%Fk;` zB41{wW9qnN5pGD?QRLh()RVAuAo$p%gj`I5v_G0Ah7V$4Vyg9gyl@8oz=^5)26nY# zv^Qp-wWKxvl5H@Q&bOBL_Kd(0pLRev<7A%p#){Q7{tC;Z>yr#NQst`SB?`-}6Wxo}lCyeUqa1a*b{AJjegc8jxHqTJlFVs`-1t02se=2+=Npudv4f&|1RmP z$8=^sLCM)q$+N$uq1vVT#;jRdfvDbZhW`1^dRHwPZ$#2d9zkMZI;?zCud?7%MH!D` zR3DDn%K`ke9+mYrn#r?0n9F@06oGFJ8GnkxVg6DCyX2?%QiKGC8tIrH4$Df0tCM4) zeF;T(neNO-sHx1-^W+ADUD=H=d4nj-2WW2AQ(YQR^(`TJZ0&qLKJ6zOE#A(UWV@uy zR+Yg7x)qg>H3omrp?!32%l6Y{Z1ktUZ^Msg>J2DKsz?L%Qw)89@QMggen!s_sd(VM zm~KU6WOd+0=(MGXQ8GR4tk#v)PW%%zovc89nANGgO-u3j=Q8SLDo6fmpT%RV>hiFk z5++jldT*VJbCe&=E#JkwXrTH`e7Z8fjcN7Rv99JQxJAR2W_8+McsaRh%JquO(9qD9 zO^;I$mFD$&s{KilmY(jPc>8i%1FC8@l$MUD!GS%U)e!?nnw%E~h$xlx<;iWQOi~(YDLasWM1D^&_T(#d#KdvAym zWSD>@vvrIrl~qUdmE?KiVYN|Zwgje~=~7`srz42=zX;A>f%S^bvjTCAT_T;|r;XVi zY#OgiOeiSio`l)nNrct}M}u=%Bn}Jf*|=rVf5OyASS`+y6C>UABvy&iN$c{ohR`n8 zL8+dDou&l6AvW7sqx+K5NTxGfBO;6@Lzjl*niCxSvhWIC2&M?6e}%1@$hR z-9NMUN}`Dbw$olXtURBl(1V{1`E%phG@~%j0NdrGc2dz_2T5IX-zifz4WVQbz2Du<*IJ zrktzm<4l3LK4`T7$}NEp>N`F@zSri(V$ey=%4$-D02A>1hhe-4+{Nj8z^SWnP0X6Y zO2{bI(OK*CWKe11GfKk}u44I|_{-8w&MWt$4Bfh)8{2tNNO6!x3|<^1jY}X*2~JUM zkF0dK(WEOcpZ+h_&hn|PHSqJa6u06I#T|+jhvM$;#ogUoT#6GkxVyU*cXubayX&U+ z-r4!R*%!OBe*hUWNzOUX=W8JS^0;W!pamrh4~-OUUI*=bZ+~)MI@o}w>ZeCe*AKGF z3etjk*R&Q_tj!`1B#pON-VTL{?AOwx`p?;@QPhEuXN?wH4v8<;^vDLC;jq~r*=&(M zzxgPvj6Rykz#%)Jw!3|A4&QGlYN;`k;OdZgclit-OLmq&bgE24qOrC^|7yWO-W}m? zuT)z{>rN8x3Y~9@Ytl6=X)>UsGIV=ki{Vs{8#&9guH#dn8oq#&bTBMdXDDflRw?<; zS3x9x{f-_i#A)cKMX9$%P1-Q~Cl!g^%fsFNM^~$ze-3tDfb9dCkl0w#m{403|Xo9}geDtI!D|(}ZZCo#5Ch zkHA5NnJ+eva-s?izZWBsJ||LBx{lHR&$V9J57(QS26YFu@^eF+fDf!P&r)B{#x&*^ zd-gew!JlS4-O2gGkI&gR5;@R8Si66njCq8Bn*QeceZt8LpI8OcFJd#3qYsXET1dhU z#Xke>t8K^8pSc9IzKPCE3%wMeEI;w$gYFOG7=Z^Hwm5-w@F00Umi#lkJs{2QeO#Y9 zE6D2`kEijB`}zv=U_fq3vB{o3*<`4W1BWUII9~jvbj0#f|3XA?_))pl&=E>)T(hpl zBoJ!jMAAUKl8!1sT~2wOHvh|s;`;%B!C_}zcJ%b|#?8^9(pV9Nu{dO3Q~y$wjG#(D zTJPAvT6WhPUV$0|5)zW1pC4Qw8W5MZxw#n@1{b+^rwwL0GT`giEW1KQbny)(I?Mpl zsF8X#QlN#YcVuXm>Oy^tt*TV4Qtf&ku2sH{U7`W!$4qO-hfujZR(u)L`0=W*67OCV zrP-05#pX6bKYRo27}v8LqZmp|V}QiahM#Sl1TbJt>!C@N&rqY^y<$Jns6eU2bR2{} zN$3CgU3kYp$_wbRGo-CdQs~$W_JFti;5(XXZz~yDD1j{gxnn2t)t~3gO!9^K*SF5} zCsFm;iJC)y1YAKerP+>S<;_pj5g@U9|m7HHPnY6WIj<>BVBGgXYza`!8dj6iTK(memS5AxgtBAg3RzQRs@-3+IUqJ! z$H40GM<;j-Z5lU!8#XN& zf7S6r^5IN0n##S}XNi_agZ{KN(p;grDLEgi_!I-L&0CVigKbEs;aG}slz`2`@eFv% z^PU4tE5}Z@n>rdv6#< zS*s1+m}j_#mFw;v_gz4=XqJ8p-4R0qRwm~u5yl}g^-0S%OtHnsGE6cG-+FL|&6g?S zAJDpoDdtjLI0K)ddj&p%ZHrdkWWa|R*q41DYvRNgZ_Yyw=H7FdAKA_zgty)ea>che zsYhwF!xeitXwa{BInF~AnuHCJ%}&Jfn)Ohay_ML!jY5UDR3Q(NU~`+03vbdkQsXT% zp$k}!QFVVV(@;9rFMY}-3w0@r<>dLj4+45+uAc{jh&tlmguQ^ z(L9>noRldA=kp!MYefCYOp6^!N z{{||b`|)9QW^=8)oWuQIsc2{X?Yo29SoD8($j#acAQgGm>wTY3p(O90Nz!I5dU0KW z;fK2?alf%ZvqSk36w+|(77^p z$?uJ)I%*gq<^bg0o~Qec>Q-6sM#f*)BLvNUB~1cqxMhUcSUBQYR=UE4diPIv9S4Nl z$nR|uQ2!twIwO_aPUT`Ilj#QA7pj0e($E3?;#s$d6i0@C!`K3>FMJBabz|0o?(jVv0_*}JuRFa| z55lvi@q(o)mXW3_FI163Mam=W!6A!;xni_2G%oU^s1OkHpA{1S3s_GvZ#Io&xIe)Yx>+9%X zrD6;%MQV%&QivbNkpCp6C27UKYCB)6u`6BviHz94x~egv3Tjx2%n{!k*hxaFwW&q< zL;dHQ=!t9w%i^8@JY~96soxE`c;O5$(DApN2x?*?Tce)!4lt-0>8@+OHZLzfH@vm=bW=iSuh&(%7Z=L_4yX&%p;xZNc=LIt7%o$6r_C2>LHhm$QB*3U5qtFNMZe6Oi_q zer@xY-M%zGFKTh7qxnzl-=w{#haGH5OGIWtFWT52(Tq;ky{ra6rI)Wtm_F2x%Ny^H z(VcDHwpfyXW=b?*1;rrPI`ni+Z{e{PQV` z35x}{p_UQ2e{d&~PsEW$&yD}E6-wLM)lSTwtP4cg*pH4w? z6RciaSgkpGm}5Ct-7~!EUk=fQF$FRC2426Jx9M1i; zh3IQ-x};K`V&dYpy83Ps=Ty@Bj>tq!0It3T&C!~$8&)23B*?~@aLF_*74I(sPlAs9+)!p=a?ey z24~)$ZVKj`Vxn`gv+3Y^%yW@@iWq_#xzal}fsJ1R$4%r)lZ5p+)Ur~;*P72Y3_E2= zvRx>NI#tDES;dt3?s;Zovamim;c|>;-kTd}G&+Wij><@U`wR{@CxRCp^Zd z+}1s)*x6Mp7gmnIzl(Sz8u60i(!zBdbuJa0eoL~zo8{cxnpNu4X@ee{ z=Fz57NT8QFTm#JtgCm;!nPmO*NEBHT6HvhKX%Qq1%4bExWuc>HFN}A-Psd|5qn~?C zw9*k=*(4V(+239^L@to)GSb2`bhEhWV*%<(rCY(?x43WJ6yNKufj%$w*IZ~3yQ&Qs8LEK5)9Kq$#)xn6RDN(dTB{B10`Fq3oDhVy^ z(QcAHcz1v&5BTfXukmp?>Jg8>q!UeFU;k?Z^x~1V0@tmq%Du;d?hmnv+P0F1Pwj9# zeKJLujNRv~wIW$ZdWotPgU^d@72}8)H8}>F^FP&CM4lc6pE_4IOC|HaF9j$4WFU|s$d1SHoSJO zNoCKzo~OHaH+tI`IVilpMSfa7bG!?an$NIip@(4V?u6GEpj{dm#_59VDO~^?9wX`cFe| zCTxG(3%e1X8lxs5|D0|PuZ9fIe=2g&Z+%}R`LUY4=UixO)pN}SBmR>AFi1G2>rA{l z<{UgD7)eWxxkTj0X#+nVpz=@=_kb@Ok#Gm`P6vv=_&2gAzr`v%P;kI zZLVrvHVI)<)NJ-QjddKG4#quii6r<66V2l=ef6AMOsqI_1UDjU4QT@qXf~n>2({*}no9Wn z9e-A8?^6HGEhEr~w|@h89attXQbK?ud|&DF?VMzj$hHSzXcmigek~lL@mJ zL*i0qpTHZv;xWb6P?%OY@OemXmuFb(E^Z}AP-7zt#{cn+Q&-YX+;KPl(hiCvo&+f+ zXz^*25YCAfwSjg2ce<0MqJxWU+(=ji2e0;-vYfK=OzU~a^RiW?;IP409CJ22C1kee zb+7ZexjEd(s(px`V%X~>75o>H;r zj-05Y6*p@%d+~w*&8q@>fQeMp2WIvUspN_dR-}@diWJL*!%dFLp+i zDq?_mx-^atu+EZbx-GJ~8^Qyd>Yv6wnUd(HEr>m;UoHd1Hl}4>-%Pq6;n?xUd}!=l z&O;pyV=skZ|3bOk5j*mD!Wb=jgVXbjq6w(jkFe16N*Arv%bNc?sVuITKdb!taMe58 z!8+!WwQ-JVK{}Cq`6j!bl^tlE_-h39wOyWTB!R0?D7EXoKz(SBjt|V?r%o|)_h=R?%-sCz%MZw$4M8==B z-7!*DUtbTV`0DyTx8VCr@C~Ge=|lz}Q~QmQz5Unt$09qGzrm$kNUKPdB#Q?{VuncK zxQW5sV+q#LUT9_j34)c`H$^+Y#Gg%f=kQ|BpKbi0%y!4kUT*%Tl_NeZE^IAQYflN+ zI{cGXK8$?zL~IPtwm#l8HZZP$`zNhzu`X|ygGyvB@^uD3-@?+so5rdbiqyd~& z@8#VUm!q`Q;(^t_7wWbD0deV^fS73^FZvwMuw|P%r1nfIwy0N?XT!+ za_~IByg)#F7hNHp9YE>xU6J4Iuv*`;UR#;Bs9G)c5YE=AmWrD^vj7T(LDXXAz%}jdEfHsDwpfWe255)|mcM~- zX1jLYozNWkgJKLMi(r5T6Qwi&7b)RF5a3eR4bCi`lyAw?*P`rB9ZNRyu*4gJN>o+3>Ex|LcYRc_%x3utP4$v2i`&`#5p zeiY*G45JXp5dFSdvtD%H&A%%RM`E#Gu+$keY8)-H+WST+%Qm9ETnPH?Iufd&^+{2E zLE5kMx4?J6qFL@2$&)jH?6$j|C>e?t;99-Z(X$9XgiQ@kbY@0cn6r$u4Hg^ArL@$4 zBWNm$tbTh2XqT?^gj0BJo?>Q>HPGW9m%F5yIcX)hhYCV~1UH99NJ3$!#DNQS`aP=frBBseuh=x)*(#uVQI)3N+?55{P% zwxW1E_HCO4VGAJsm{rH?mPvzeNyyUzWyeoa*kKBN%g?UWL{EDM&;Tds{I1O=d6=FF z1aEdA5p9jePRRw^Xf)|kkOpBKL&P~Io03X9HK;S&md{^XY%X#$ui`PU@b#-bf?o25 z%7vIn@Go4+tE$P;)VHzEVv}`=^l<}7uu@auG~p+wI5(M=K_k2=UPSN?==FXQzjDh@ z!v%>l=YLd}`HAJALQQLS9I1W0%m*8VHPX0Aq>^LG!f&YSE-KF+{OYAHNOjdSzYvz! z;M__gsff&LU8gQrriR;#kfGriAQC#LCJK;;<72JUQhGB5=>C~2mkCGj?-lh95UG$F zURQ#&%CvO$pUe0?Syi?9y>qsPXzMikBiLeq3$_@fqqdXY9BH)9jk*xW{DuPybG=4` zlnS)SJIJ-Ro`RcmqqTOL5n3ve^Gy2*!$)201Ev{Xjpngt#>#mf7tiDL2BAh?pH4?* zRsQvP2;=TMLhXXnM$p}_Sqa#S{p(mkf}Eg?Fe8}XVakQQG{S93XmIoUagvpZ7hCvF`Tp&i9X7Y@jPR;ri3X!LTNZ1o_2)e%Z{VzPamb5939M z#k_!+(Q8{oNWD+d=Zc>#``X6VR+?7JXP2uPLEURwAIr}iTQ%=jv;#X&`?)`y^44M4 z!UQ!n_%~JgUt~YV*T0e_tQ@b~+W5%N9}A-^SSbYE%0rchth7Hv&gpM3s+?y3hx-2Z zI>LUqJ-i24^MbiymrpG)v;Iq|W}F*{jgGvlA#eq3D}DKoWP&5?BHt}9yL{Q>O%{fo zPBok?3_9b(8%-oKCH|{&EUzF4zEREw-r9?A5DC}%4vqOpbFlvVeg(k>u#LnwRfT2{ z{xA23e&_^hFfarKdvFu{V}`Q@`^oGcw)I8|Y^EO6xiRG&R++0@zVlYt3;GEpK>R}# zSrr;tMATfi0orVyu;5&-ClGq88d{ZaWEO{biu11n5d8c8$Bp-Y-RSs#4HbEDQZiC0uEc}b!-*(3`j4^2xK(#g43KzBv`~JCppl~asC=+Nu zzzgXciU&?YyM|-uc}X{1peVAEduniHeCLX0UuB-~RT^ftz#)4i(PO;hsNjL>pWC{@ zib!nzx~|GKPz?^vf|(WgQ{q+_A3)8_a;(cqDPuk77TZn0GNbZ%d>oL6OGrK{+q|Zr z){dlt!fmK6Y=xqz9$QBV6QN~d0(VHtNl97S*(HtaHb6oAF~i9M%5%2yD_oKPwZcXI zsOX)l5BexCy=T?UC_bU=5DBHoVF^3GE063CO70De@$Im=BMJ@<1}`<&TP;+)KHr07 ze)K1>yH1K6%?8XFCusjRFy^9G9Na(qn0F&xZ?Ik9AbmKk#jkTg^d>v%w7ZGz8CkB` z|HuEr4ghNG`T=wQB~*O&mEFsh|oqd|1&eQ;2{O$9{g z*R(7O)as%&bXbV~>^EUMcCoZmi)kwuUIX_Tl zt2eFwY}LIwPR!?UXShdAyw2_OW$JBusAs>@Yp(py?QY$CFDq3PVe@7@%OCXWkXqZf z<9zJ**Z!r0Y0W6q3VVDuJfGX6Ic$Azhx@ZN@QnyuBnGA@^I&>~hK81-LTdv6_d$?@ zPhnyL-+DcHGT$62Z`}jzKYA``{Z{#%lAX6XDP5R*u}uD8uZsu}`pygF$+9{lAW=q8!*2sS+Ky^Rg5yqpRqmS*xt;AyOiDZZ8Enb;dQ z6_Yd4^1J^uSV7JM&RIVj4KTqZ-qU{`il;af^)M+9=n>|#Fh~lAmKZJGa^erWEnmw; zzjm%pj6S7v94W%b!#%5zh>($@)!(DX+OV(cB$%s`LMuAw3NkV>YP4Co+e@<(8kUrh zuy=4+sx}(1s%&=!r_!jOtN;20;{R#aQ^mCKO0P0f#n6&zpQFXp{5_~Brjq{yl>1xz z7!e#!6!->zlNsumrTStYqV59Uj>^~dSi*z_^7mzo)Du+eH`Zo_EJ_PL`eTqDe3gyp zdXZ-ju2PeeJ+mEFyROK1?La#?_bkH}qNq4%^u$mm&-Q}6m1nM7Z~`|}cKf`YaUajP z&9~2-tOXs*E)|?RlJG`|ac=vjFedNNY&+R5yc}G@(TX$a4)Wdi^LX8zuKC=IKK4Ra z4Chd?6?mmf5&c9DtnV0Xy4cZ#@1SNUsZ43>2x*BuaEe7@MU*ML->sTfeK-qur@yYT z;|Y!|zkAs4bR*z*yPO_!(_eEvaK2hiXA`ako^BJXwL$0;O{G;3u3ir_7OgkWcx^l! zr_?E4N$ed8@As@MVCLt!iW9u_9E0WhHutwb4SsEI-1a)9X(NL&(YRPzbgPl^@#qON z)*BtKV1U5R&JMP+f{Az_;-}Xj79wp5u$Vdo4N%^Ya7mxjqBkA>NLLlwn8OO9Oo6NK zrU)tzA2R-yOn>j9D;B?GUXxrO{1+T)1wmV7!_j)U-&@OYJ@~NF@+wzTt32&(k?iuO zOELYS5n^SAMQPgh9fo=K&|ls6DNApndvY@AW~`X*NVxLg7*%##uD*N746rf;rP_~N zY}~8saQwPG-}kQ0)XsDj*H2ZPU}SyA3HOI;;IA?*HPUrxzeI`f(hj)0M(E(w9+`I^ zhPn1|Tdkaa^pO!2nNL)TQe#theiag08@ySi4L0ZFGEQ#sPfn|!_u_iFOx~G&kYr<_ z>TGk^a&?QQ=S0Q^`Y7OAMH$QhF9I2y-E z_GG3bXK05)vHPg(FwaWbZb1+sSn-9~z2v*WP-D=wZ4=8ULRdthk^R|$D1S-DWoffEQW_2u)r1A8g(!FJH$k&)Vezxz5| z3siHo#VvX9z8(q%%=n7vYP;W);!IWbiLck(hclI^pS46j;ja3nAjOrTEq9{RFzwfR zNwzc#K1rvOMu>6DOMB%8F39QI-IM%9IiobT?7{K=~Yz;@uf6@O_)p(NYj4P~N+^16%t}WjF7hZ>nekZA- zWvD2uKBfM8<_t%X*M`t|UXseR_#20M^Acw_ZqNq1KTWe_{!}irzkph(lBp;R8LU3i zAD*$|{iS8e@D?LYCGOEz4^EefWVYt?4}QF?v4^}=m(&zwaT*=UHLhSzL+K_%<}cSy&0rF zJaxh5Mo!Al=&3?}1~xPuYO;^S4I9tCEzWc-p&R3t&%K)J2`EGDN^K1pdM%jl;B}CJ zt`3uZQ{@V0j*$9WnJi}!4nM$2-r^9lG2kFK+tZae#-hy49G1<=h^5O>kRmToJOY_A z^GEX@2_4F`f>x&RvgjzOL3mN}zmbXtXxX2<^oz2xvi=tBI*x*?ipkL=?d+KHfPY(E zH#&U4y9NzX;G1t87_wKCmy-Glgx?HkY&CehqT_pRB=BlVbW zqm{C+49`}%uTyB##t_ChJxbN1J@RcOoy+fZ@GAW(z3!gR_-cE7PipE69W=Bm% zm%CBt8a=KN9c07-xE%kTJMO`mzA>ueFm?NdB&x3Rm%tyzX3T9r{gwvnx*r40USx~K z8f%M)$NA=M+c~CyDp!`Yi#gJvuhI^zVczB{Q6O3%YjGuJl~y1np4bBz!+4Yxc=`WJ z?j#Xi#K@px$LT(&L7Bf5BX-vU{2k*~tHW-!koh1=iBk99D#TWM=js}!-hgAAQSA4RuPN(*ZNVArsuS zdR(fOerJPs>8 z=_x_RVGFSWo#3sluD1QlU)kB&MgvjpH`CGs(ZpsfDKVzt#%jXB?|OQA#w<&JZILoH zQ}l%yjwRYsSQe((Tn+#$U2ihq)Re_91s6Nj3^)FO6?xP$$MvF}8>Xt$2%L7S#*GYU zNYCWEHR|pmnY)-P)bstn&MD~=yT?u6B)Y>wDWNNzX0Q+LjqmqH{@eb}|Q z{X@FHFF2WDV`NkRi@g?nIvkpH6Hqpsx0;0yTjqwanjQj31wr$Nj9M1|lr{T` zBa@+HR&F~xm}jXSl~ddBF)6hk?OVjqkI57r{)EsTQME5))GAVAPfd)0YNPvq%9&HF z93#7mV(mBUHCEZvUPnD2@gm?br#QW$ZEkfNgK!(RU{&r#*2TUT6q@QETrXV>Vd6S+m`M-h@ds3Ck-)1n@8*(M&hB*t!~W z__G#Nt66eKJCKj8V=Yz_aGfsE-SJ6`>=o6k5j+HodFS@}HS|aLad>KX9AF#lb&GK{ z)}`|oXx0RvcZE|}mf#=i4{Meh(T?w~DI(uF`PMmy7nH`o_%N|`V+PsxcE&IgeUV-d z#tT$K%+k}DbVjU>0$e>)Zyjq=2l82}M_c0!c+uf`*#CpTto}t{w7_XD6ATwsK2&hb zG2z-V(-Q2FCqG5hn&Ijf($NNM5;DqEngC@nb#8!S*8JNnnYOVs(_UN$@$Yv**t1qp z@9XtZG3Gdm_hhK{V&?beO15a9bxiPfMu zw@EVl*dXFeVa&=9#}*|nv#L;;;L3_@M;w(orNxw0&9r5WU1J<2AP*}Bn2I@L%^;VR zL~~pFdgC|mKq-!!RHK3EPWWCSJsCX+rZk3{?V)>b)UW~eU2kkb3)$bo7BD)(ny_nv zSiNO^iLZkcx~FU}F|-}n5uzpZt$vgUrKWTu_WIxwX#^10uCr1OH~=!1z*|tUZ%hdn z)&z~|`NydSou4J$TTRQOb1xbC-kX)ajwNvKW_{*RJVzQ#lCwK z@|RNP1mH@We0kn-uaivT9b4F&@zeb_?IpE-N}QYrNsudSzVdKFwWhY^kJFhzxkBaA zIjwRmmY8x_hzD!1EMDZSYg4yDq4Wk6c{3woMaXB@{`~-DD_Hocv_5&a28g%ZxkckA zLwRodIfugjJwG3gpq9o@E~_nJ;Edu}y>M|rEDtNd)&W?}l$L^Aeis9VXszPL?AvAM zP=+9R6KJ$|zG9(x@Sd7^AghH}kh4^l_MUk)L69{2DGdikH{gsjN93xWo#9-7|03vn z+en+`uUt_lHU@NpKq^q9MK^zkYglfdy{d(7*#sA>+d%q9K2W(YE1w^B)KqEJ#>K={9$ z;cu}NK}4VV*HRbLp!vMnl!Z)a|IF}jspUR^C37}#$T4W#dqJa7vyg+XEC`xaN7JmP z!ZdhgYRw7#j_mSaxVnG;)n5Oqr{lf1mg$V{t%+%o2(%OF(R*=a$1 ztYrRidi{w5HE?E}bPnCAtguX;*N++E{`L!RU0CJ!xh!a(Dt(>IpN&wJZ@Vkty%3zb zVdY7=_4Q09?*#D*0i1vPNJV`%uFk(ioDMnsf7lB7STpXq zs@^g5pL0zLD^DPdoH8n+!TjO&0;Ese6ePl#^PRV$>DNn*fLz|kzpoPwP_4KVLfSXR z^or;&w!E8zuFxd|TfA;{qUAb{6g#)@|MI5)?~@?^CxG-5#%K~Z&&rX;uQV9(X(S#2 zhxCK)r+27JPJemqFb%X?IPZA2zsM&`9JbLH``{``VWBhFrqBLSI{8_Etmi&Yv@MC~ z%@!|o0IlnsoGO!HcCh|`blc?i7LkU1Mp``0`Jz*&EUnwaiLI)~VXto`n49}>GGWVE=rhz-j_Ffs9Un%;Ff)Zvsgds6 z7x7Tj#mJ?Q8Z;p`dmfyr2eP2{pU`{75{%-iTMgHxapH;=c-Ys4d|I3)fA*GXX`913 z^ESLM#`cJ(Z{sN##*6Y~I=+rZ*?7qVxtm_4zMq#U+=uCU;E+3`#gk2c=V1U2-O?WP zUX>?$bB=}=%ZM)|OjCe*j+8^_qhx+FYR@n3m4}*Md&9R@@j}%v_3`@w85#k05b4g% zC-dduqL)761NyX*_D&3`YTk=c(&T8oM4eStKZU>oQ$;z(#S(ZV=byg6os){icDNol zx&d}?CCU`W@JqL{oNg0uUSv_yV}_Dqjmo+>1FYF?rh-iSk%L^`V7c3=NqMSgv!v(< zo7(8$u(d=SEd^F^J*~4y2yK+q@8aHN({s@fJNpJE95XuWYy9tYnzXf@s`X`cW1Z3V zd7KQKH39cu_CLc09vmEiyA#^3$9ce6soRSS9AaV)JYwN_s6|I`Bs$~1{mtooM8KKr zS=WrSV|z zvMsoMQBO}zNoSQgtZ`VdOGs(qYf;$cd`?`+;jIG+yO&E)UpF$xg8JMy`HiyzSs@j5 z6HNyPqjxr^*N^&rdZ%=BjIIn%d z>@G&-NQdOSl$JpNK{SX321!uc|3nXiI%9`s50ZPS<;5e^t|m%WVn@ipd*%yEcc5 z&91jM-*`C0P`^EQ<6WKS=KDx&A%8hljAjm1nEC|05yXeqk;nay?Hj{#{BbAO{*7yX zjmSG``Y_FBW77Ny?vOPLO#BL<+`j$%Nnftqra^D@`67f_zqWXca2fMWYb9ILNJ0>* z$T{V9a?&0vsPQ z*`mt`TFut%+B4=G%2cLkoO%$sQ@&xNx?Lj}ELCgV9VoofRbcx$zSG|K%JVV3(omKp zcAcFzybDPDh~}(m1h-Bg9h}JAW3$3jJsv~Bvy?M5d?YIN_;SVmLhB=2x4vP6F{I@7 zHuth~-9A&xdOC$ZLU6lHWcF23VH?xcL>O`9rJ$O5w~E_nU7856Ru0_kxb5;Isi8T% zdMtGXnLw%(RjN%Ca_jIp-qh5Fh}&yC^D?V-$v}et|4svC3*Gw6j-i8n%9c4RQlqsI3d6Nyy$YYXTywV4B(mspNPP8HX9Ltj}Wk z%%%%u70_6ceS4dKk&;H{wdjN=*X-de&((agJ16iDT*5JTTcz;BR9n<)FLYAb{glar zwi7oKwkJI7;KrDl#{x5ha@w(%sj88Pe(bY*5H@uE4FclURZ>Jyg-)>D4VrYWG_qQ+ z;&S`qgGSvTfnDb$bVB%~^Y$v-xfr}N(7zz9Fn&4A%Fr56D?I}r@ioqGs#(@_N=clq z8>pOAKZ)C(9FMv`B~tgzJYdLJ$YKmEH~gJ%nkkeY=hQ1P|@ ziF`q0COqsxR_g<-j)`&JNz1;Ra$kQ?>5~7b+!H(d_O_a&%k(;XJRPkw?!5vRb?&9} zn!*Gedzs$uz6XNh>^Ol>HZsOgfcbTgPpTTSszcMbf=F0wn(Mq&!A)V7B#RyxHW1Yo>4R_wNuq(O5*@TQV*1E zA{S)BdSHda)iu=*X=!tQ4HJLn*>SqC3GH;LW2u<2C@Hw zOjBTs^H1(w5cIA0QP^+9l_?txzh7uTjRoIA+4jJ+)L3 zWPs*E-MZ^=>>s>oIIuB0ZTI$peDU`2M|a|3cDwQ#x7W3iBpNogCZk>B;46fY@~#+A zzpcp3o8f{nTAn;%x2}&@W)Pz_9aCu$bx|}&ub%>^;k)=Q4PC{6+GHOpeA2+R0uk6u zLjFq)HrnRq)L|mwp`nXlZKbrb!*i<_E(by*7n^^C~iyfA){k+KVZ5i zX13$4O`RahkDdNS#mZ~kU4LC7-YfXp&WDlz*yHdpfxh!CqwO*yF!6T}+|;hIl+nnp zK2(#Q?YWG##KyMItrXvkwT7%)#2G*`}C|QT1=UkK` zK#)8q29oYo@buQj{MR!5K!w_pD0BurU3piyrpnG|6Ir;A~phtoXvJj%e2evA;crekfGpF z1pFAqWz{K3&AS~lFCVjl6PL;L!a5)RQn;9rL+R^r;g@R0p#>f&hP;JO z4-b^l+O77It(`s^L!XoQ@VwO%Sp^I33J5wf+@jHJb9KrhuCGVy_%6k0FK>~H^;CWw zSBPRZqHnG!6oma2u0F;2MywQNG#5Uchn@|C&by_Rmea#i-W(gm5u1XFHtjP3g`cpi z1C~4fy3G>Mv9YO=M$pmFz-u=i6QG_D%Za<3?M%qz^I+UftK#A1@)Wx&LAY!`bToB4KbNFt z%{vcly=+-vCDkTtZq>6gcU5>8>KV7US_b_py&IRmu3$nqKEpFUpcqYgshPz$sqZRp zuGqD3I2Fm(|8ircfcnS2Z7 zxV~>2?QpgJCK-yc7jYzR554zXm%dgx8-u8A|9j7Z>px%80W&k`Nj{D)L z1qz4yd1#&3Z*!Xt{=Mnup2jTbie>%#(PHvJhEc5j&4)m^Qtm`Y6c{XLv|TINs3ewF zScQ#p?1>%S7OiGlKwLk(tuC)~4~!Q0fwnL@2hH#(jwzGNt8Zk3#P~J_y*Fh5wbvHNp1q6OUJ`8|plSY!`TsdwB?AKWQc%wB#vGoZ@ z#L{MtZG=>N1;bt|mrkHcK;S2fUVwgkGEaX{LJ!_}vwM4Zj`~&qkiwc*HUN-Ic8{0YlMf9P>OGw*_D#Irj-{iZ}sIe15%h&vbE~-IggF> z^o()PHWM}bzHfy4FQ=XQ+`ULrG08U~+%0rldTP)jG#t2pmm|Y!$gv;?rN@Yo$A{21 zJ2tx`UsWoGTG{h^(U7{huWfHF9o$)_2L>I zAIBTxLvexRM*z20DtFiC=SSsTUcLmS%;sElLgfdM7OxQw*}`TUR#sh}S!`cr(1 z=dG;Su+JMibR<`t8E=IHX~Wf+8asb%hHjQUTG`~GVT#ItMcy!mwy_Y|XI!AN(>K8A zWWCK{%Iw>;Y1oI;!!1;q=OVff;JDJDGg{hbJ$~ABK=byrkQ+tpvCf{yN}5Hdm<+#( zB^Zd}iZf>+V`s*-YEM=hEifH;m4nMX@*Myg3h} zFQatiZlvTW4)pjsxPiHB6{ z94yL6A-lT&Hs_;a|Gkv@dp05Op=`NBwW*h$G)wI%?br%F4jnBVx_W-UO!a0+kz6+K z+c1q08BWFR8IDy8ITgAm>I^*HljQj^vY1qIk-VIoq@+v{K9#n-FlvJxvUIgC^1`U* zsYX^fz>?X(Iq=KRXgSIAkq%F8BMV*ptEHpSm`$xG!o!VVsr==YmClE)2=z+6^0KnP z0`O6H4iX0WcT|)=xLYp(EP>d7Yk?M(8+D>xvxasm@FgWb(9PaO?Xar)*o=5!$I1Jy zY%fRa%5nWhO`Nn)Re9-k9^L4!;5~IY9Uw}2!@*R6h!#oFCQSu0U7G!X zc)j3xjZsRH>bZRSa_1I~dILE|io5&yf$aHb?uejyVm)Ow$y$3er`*(mq>avRY{v_p zZMCTdn2j8jAfu2{Z__fP+s{JAlES`d(Ci#KDa#G!?a2l8^H_Vo<9D!xJPZtQQxR_Y z>!x%H?`RM!dN?YLEMCdBXy5G3O#l4W7*Ay^87`?`XaD>oP1(v|*B%>TD=l~*w6=Nk zjgk{vT@2+W55;9yF7gh&S~Z`GFyXeb2G}yW(}D@O*6gD{l(x5*EEQT~554a-G( zMkoy?I;APQ-F9CHJz6F!n|zcE3}j5i8b?>-cO^^>owiBMk{g+-C?2L>u7mhEtq7T$ zDR^5;ga=b_X`}5@tNFRaEXrs`GrrKBsUauq)=i)l^;ADv%pFfW4~pj~k-Zl51=r`# z*5v)6knp9v5=t~vTZwOkDP1BB8xoGq9?^QD_8Y@c=w5E@;R5J7ckPSq)^ReUYJCTbQ*IROqk)$+>sSsa< z7xbf;_+MnfaB!7f*_+MzvsbC(-o}TFRz>;i_eZ@N4D3_O`WJeg zI#bd{q1c<0rfo4aefU;(qAQ>5l(fkcW=f+>PYcC$;V=>oP0E&HOOrY-RXl>nyUO=X ztyFy1Z4dN0Gl1|OOY$5RQ~~|uDVh6`!F7&()LP;dX*UxwLIl;OU}sX4P4kT-M^Ckj z+@JPPxz)5~;>rfx26UaPg(nHtuuVvCKW%-0D#^q}xFEhoQw6z!hv?i|V7|>i^3EW; zj}YUSCbTl6u=id9h*>Nv5N-okOH5D--REb_gDuvv$u^=CnZK@dlAthyZm>fm>p&my zl&jRZ^RK(UdsiSR35TvJ>CmI9#`CYwY|E@ozkoWGu?y0tY$rammVHahZ=^cVL6MC5 zwQ-t^~dryhY~PiA;(l^-pBYu;8Kmcl+s*V zleeegz2$GU;k|g;j7xK;?!RlbI8BRz;ZV>yTajOvj&q=0UQulUQ`PxaQusv0GKdQ| z2v5RL6ViGUI!p65LcR0Q{4AW>x?2u=PDW$sZ%|S-Ai=KW+hLw^c-~83na2&bQkSuyA z0J5t|kT+mN!*@((&|s$Y>PRdR7AuNki65>4Y#yyz8Rk6jr_FbsxyH_URwhmD97H~Z zn1dhl6DtR!=|M>X)XXk`{@rCDfqjy+1zSTZ{Qw9>D% zx3`Y$=Uay~r2XGqOuwG1Lv&uXY=@33A*;8M_ZvAcTkcDvN0b<;X*b>Xpsgr9Hyxj$ zjpjQGxu@}Oxhg&ZuGRaE*`@Cy8= zpoKe8Ky@@4Di`M%c~bV#$i$)GIoBUkY+^>YdApKB1ODF-9KhfUYg*tI#Vpk;6MF?i z-Tmel^I;A5U%2HnGr5^(AJL~I-}c^@{}^^tlXxfEE<3b+ruN2Scv=jBP@alusTt&I zX#zzbN;C^-!)fT7!LHIjr!&DNU-MTO<5r&H)EjS;hun1lN=(g4Kjg|lw}{~Y&Lve* z#H`*xZ1`bO8&iB{)psDKJ(Pf;4>Z7DkRVflySp{$&Et!1A>;qaG{O*Pg&bFJPNM-B zgKwsYxXsc3gI+Qr3D;r$XR1|mg$?YW<^XtRp445fBe$O;u2rj1_PcRXfkp-ef|D$s z!P?;`*;Dhc?A?)GZ?l@$#mG2P%{fQ1=VlK)_$s=IgFa6-N3s=3 zt{KS#;6t`AES1=@Ieol&- z9q`b4E-+fGIJD}dELpnXVwk@h9mDPkCuy_61$gYg9QnENc`Xji+e-7DN@|{T$$M8N zaRW`8sJn`ddROPl7r&uK+ei6{(#gQ82IF#J=`ON$2NKj-78kWd0fL8Kcl8 zT4*m~nPoufE@uuJUeS=m$7z~X$@bIC7*fc6ORB&K?m#5iy?NH=_K}H!0e~cX?+wAB zqo=H|Yr}^aX#tqAYYl*bxVv%cp&^yq<0{G9t-h5E+1Td!xWh0+gf~T2iH+u3$3Wd# z*s}cSMKIfrVwx~x%!mQU*(6Q6^fyXAPNHQIZx=CXrk-*M>taO-r+H|l48Ev&YUB@& z`;^bQbCx2hnt9_@x~ep1lOP03aqtq$aq8qIn-V425;bX;HNL4C{{o0gIn(B`<|Ju? zgdHl01#k3I&11%C0<<2J%$fqKWA)5mj&`g~fr+ij9Z_b0%1B@Dm7XlKzCBxMiGv-s-SX=l9GK~{y6cS0#BkXm7aJI?^yEreDv+P zG36heUG>UvlKl~1;dgRkLWLF$pA>N_B%vrR7k3-=v|dPc+1YlKZ+4M6Z_R)?pXkTj z({OpQ`5vug$d}|-1IK+od-?f%qqXD+lTe+#dA-)tU4N9T#-nI4=bs#KM$s5CPW9k@ zdY@43Ak*)JW>B)}_N?>z^t}?oQjRR0;=03QJ4;7CK)3CdnjDV)^nmF2DEfTO;c8&! z*K#0Lbrid}mga?`$#UNN_YF8mk z)nO~4DO`8gOM+>vk$lqxU4JX7?nblAYS&F}7phj6?`ihLEKGZ*=JK6;Tz1_*m&xqX zzp_YIyN&`+5jhQvMyzA4SA)Vh&IE_=$yLXzoLV7 zGx-|P8}G|Qz~#0#9Mf|%Mg;)hQ?s*!6*F}@es%$%2U%HJ!Ms1JP*)m;LSqWYoSJ1l zvW1<9a$XI;V03mq+mJY&T(a6L#ttU1w|@puyo>eog+Uc_L0SQkHK=p*5Wn#3Aslqd1YAqHO#@Dd_S$4}JRS zakp*cMLvap%QRni@EEEcEnS_bSLtu$tvh7@nAx$tsZ)((;=p0;`(W4 zsVR9VBo1B;qdPzuPN5xOl2yCQFNujmw=ugvTM`+EM=!0;I&&Q)gE*3c746y z7vN4|Qrq3dPT(A4L6VdWPJxTxPadr7ufs7X^`v~1HaFOMT0hfwvRr1l{CV?|Ot3$4 z_@&0l&t*=VHibFXn~1*LL!&H1j^lol_i-Hw+p1{dU0)q8yyj0-A&%t5P|d?3XS zRvlNB09x+QQb}IVDJF*UE7w5QneV&l>bVL6mrlp9@Qx+3g%Ek^B{J| zmh_lkzPa1BA`vf5F%ACIg3**0Vc#yf#yd1x+!7Q58N5Z)&U)`m~ zr7M0B&HEH%bBW94arU>vuE(*D*Km949R0vrQeIM(3u($T)}#cKsonm{WKDQ%^LM#Q zDH>b{m!zdIh+8*z<$i;1>B$ZA{ZAq7y zaqPmrFx;xq$vXXCeJL@;IFeY#Q0fr}xIQ$nNZ#eFHHeDes;)wbAf<}%BE%7>c=4t_MYy#d-YS5dMq#ec&0L+??TK%}3f>uCi9Tr=1=g|4-=oT(UzLf&o22tw^FzYV3zUYI&WMiB|#o z*k{P4SjMEKK+VBb2x?k5&IeQMB@Zvrb0;T)q$igDqldgNg`kO_6`J^sI{L0de5{#J zfKCZ1t|=+eNY#mpdvmkdY-#fySnk~}&r@74JCZ|~N9ax37-*w}TcLrtb^;CuW%C&s zG0!43X>~kNt%*CKq zEHwTmSR;zpU5~%6WG7fd(lU3W+^q@8d1FpS*r!*2h|Sn}2`Ee@NlzqYsVa4Jdt8n4 z7TdYZnjVupxk}(?cY4Vp;uaDdCmY~eg3l$o9IEss%0p&O;2`$0)YQ9Tk5l5CfCT5U zFv=fAedjX9*pW6wf@J~m8#u1?-lkE(mQk)0T0Olc3<({x03{@JKW)Bs`S-*9@T+i_ z0xpz@l7CVM;1MsJSmMZuInNhohWHzMFWR*;RhsQLuaNXT&hDNAtZbHty9-rDSNeX6 zI>WU8Qd=`4#>jv#i0+3B7sl53g4KTG$64&#N7`!Y_D`!vgF@H+A`fr;@v!jl7a%DK zl;Y@Qp+cIpp}rn@%r2MO4A_SO1a{HAS0dmR{q|qhhaATyl@`7@(aAB}k@BCkkj!66 z4VA1`iL>DzFU=TZcuL}HW9|*w2}mb$h5ohDCtJJZbO&|+Z4jx@AxuzKQImRcWvF@Y z&vtvZXD!Vva2gXJer%F>rW9%C`}P`us>v&hl`^64Pr_El;sLArG^}YsBkKXLsDSazsVKB#nPQ#}UTld< zwE9DYtGTce%a{OL0U#!m>mun02^2b@)LBxiF%8CY?aTYBQcaMQmSCKK2fv9j9*_GC z^h8yVgW$xMrR|v)tE&dsVglUqK#v?Er~vIc?W)P*_x*1ZW#=1xJaW{V6vDoC6ND;x(#k|V7yCa*Ybi(O0y zJxL}bmPC;|?bu0|rfKQuX!6XhpaVqa&&_hQIlxcHTQj{UXqrsE3?^-L&y?oLs0N5BLO>)qN)tnN z4Pw>LqZaG6hS|d8tB(B>a+4X;QRqT5F&)KP3?AI7tWPsGYW!*ixjt5Mcx0;8fW47$ zYx?xvYo{(Y{%igOV@f+&CHSOf1|_HO0Gp@vcTQ8{;NLw`Ws=%vwU1COl@HI)ZKLgh zR0L2m=1r!AV+0Jokx)5c`=aO_nYy#-&g2Ga##~A;IvkE-1+*_B!$GjO+utYpo@dYS zbG~D7JE2ohP}FqZK<{I4adGkH=m8D>6i5GZ4Qa_pNlAYLvR~}~T4O%&!|#@eZ#I!- zxdwBYHItOc2tW8d&AtLI?!$M7U1E5>%<-e&I<)o@w3*|B4im}N8WR%};}e>uz|X8@ zTAD#>TAIUSMKUPuVV`t2~iq8E{muczu*Q)YOR`ZNi3V5`7jqCE>%5$4y z&SuImMH3Yg7Hj@#)hbJwitk+(KEIx0uw=!^=9+XHzd7Q5z_jX)rp>`l)(J49bmw1U z8-4JGB}XWEkRX02lIsB7rdAYsF2ipHs?2>V9q0+!bcoHh^Y90aH2}#Hj9Xo-&S$ki zQ-5rFAmM}N%O{#$pD!u&D|man?2B4gUC-zqtAlf0(>@;>%%Mzj9qr;}rUkB3dyvQl zpWvV2VU{_nvn8Xt=>v(^w6Tb={m%=vogm6b`@Tma@+mN)7)l;g5x$^>rkGlVXme#s zvg~RZo80_a_h)1ngYa8P`ooNcS)b~mo}^n@T&Bdr;aFi`OC@-Rh0(!4^uCcAS#uFW zl>vx&>Be3~K$iWcasC`znM{gS3`fiZo!pm zqtgC_O#W#EF0O2#n83NW$9XMTfkI-^NI~F)sv*%emSbH#TB!{dgh~}PBfIwVoUhjG zXk~d7{5jpH8o#U?l18Ll{cs$6Dx336EoO0f&0xF0GyDzfT3<<~ZB89~Dd4Uuf2ICr z%pX&@*sb5n+4{nv@MmGwNU~k zve>H~W=o?LxKXJH-tFth;eQ%B9xm3p-i`HlFi_5vrc+3l8tGtS4cB+>o)$5qmAmBk zG^^yCPzV@XdP&KhL8 zH|1pC(_W!+ank<$gmsinhW0#W48dkTc^O-zJz)0xw4EQ@B$#{xIgQ!DP_AywsP4=b zbWs2EAji;i5F@~W{6VI~DjAO(nU~XNo)N4bx?gBdNS>bPK}i{)H#F~-sHDKA_OV{Z zUm-oNeU2}~H97x46UH`a-ch`=1tE}%a?zs*wlM+6S_|RUdf7+Ws^s2ihfsfod3D{g zs(;k)(e(T(Ph+(h@F5Ukvx0E84G$g+QM5Tk&NpbDFgYA@3hFCf%yTbSi}P9#C0N@s zp8aA>eRfR!hyrddoG?kLskT^!xD_4a{Zv*`as&jO0WI)+Kul{Kk=Sohe*P~>mKkpT zUOVbF`^+=kv2ED)8Dvouro^#Li4;E#yAmlCNmys*iqHDjUN{~+lR7`378eaw@g6T? z`m6;J7=04Od2>XkGuhO;xS3-F9Fy6%5Ps)_jG7HESf{nemD)!U*;Fe>B9hbuY<{jX zQYI%zEv3xQ0lhTV`em~FvGUOv6_D#GZ^ux|@A`OqWZCA4bI>QGAHK7N1=I&S;@BrI zj3?hW;HvD7jm{zBg%UPKLJEGP` zkt=5Ja~1|0=5^0-6x(%AVha5`Q8hz-X?f1iPwH7S#E9&+KZ>|$`-hv64bX|v94cC< znk_eSYchm!8^EGH+Ya(T$dD|GBM+-YLwnB?qfQhqqN#wt#`TAR6|=};si z;kbx-f`dn@4?)xqhDvfhLE335jc!k~vuwB>p+7ZdGcvm$js6RmH%e-~B2&AYfP? znTJo=?~#0onCIBdGlh8e^Z~)*{!&33MiLfz1r2}E?!}t$aOo>!hufgw6`!3+#fLiR z2TzJXJk)PmLG2F^7o(clbp3@27RdE%f3)HEnWoDHc;hd(53_h5cKB*R{k*UiNjNz7 zmJ!Xw2u{1WhpMpzctF8cOgUxOxr+<2e)D8B7iDy@rCi(c-WulkS2aPL8M;fu-M(uN zWkY`;_6uu%_n7qK!ev641XdOrQl7i`Cb1N3d<>tbCC$N^7R)WUfjn-8QvO}KRg-(A zKBH@lM3f!Zw0z0@_K3pcUU7s2MfqxsM3{T~h%;7+EETzTif@tDFp1vwkR2v6U@m+T zKn{g~`)&{3;P_A({~&K?UqLv$VVvHfeIMlW8VUos*@PYyIK##SUr^qs0$H?0$vZb# zgye1zEYubZiPr+8Z@%7)sB#N!#R+{nRQXvf)r)5xa}S3Kn}$+dVQCgB?leikZW?Vs zK97bmJ}kNG#Pk@r28Iis#GHsc2^(V1kHA;Yjz+)S<3UQR5|WnSKr-YD+U$=z2ogvT zKW->s{&K$J>Nr|Mc-ZJS+x(&P)IUS$P*0&ILg5JYBj2&bEc^nY5o#^vBR_75+nni% zCLm!2Uux@VK6JR)Y~$GsVT})2Z~KLhEm zauY_I-|rP6nL~y&-z0 zD|V!Pp7ySbCKM}4)`5j>d}PFZ!|5JslUH*)Vf<4nARg3@KO0QmkryRc9R4HYxO0TU z{n$U>OZ7xaNDL$qGMtCy|9nR1FifOvb#pvSpp9pa$^XB9E7EWiaPWDeLzrWb=rQif z%N7rMRv=_NJ@DVb2@Lx0a``c@|dIHCk12@eJWj2Kzo5g+jz z*iGWEe}lk}Edfi!{s#Ppo8;er1ujVO_1`zck1q%H@A_aM?vnrSE)g3emd~(7P>S_u zY$(cN5<`Vggz3w9ohF?Ilju@9^%b3j5Ps~i)VV_%)!~*<81hp%D=<_yiu9yQik07X;0F{kTkRtJ9;2R@bAio1PQxGc*xhKT z!02tmkM=vH)E@>Q0x8&hUT^ORPo_h8UeOiCXC~WLEJh{37pmOSco0DRtesig_vwx0 z9kYM&D2+1Qrer9++qS(vy|{V4fDNhMA)!9#3-oJQB{)*XEMo0l}74PqxJhw%7kR~H-k0Rv#{ zQ+dm1q+JIk4LW=reLQ^ZP}v@Lu`}4zGjq-_%`p+v8fC&jTedwFWv}fOR9)L%^giD+ z5e{V8H&f6J^pDStSG1xNF%fAzGI4Qv?hb_czU|=w{nnSKr?-!fzJNQr*>*!yNy&)r zs~Z-rF)&3@1WlF#O_&@xq|%j9(#B;qZpI{j&J7Nv%u{SZ}|T0GiDm6fDo0-jd3 zbHS@&eo$`R#%cW6K^9Q&6z`2AyLmUJ5no*;;n3eAbvrgT+ok<>b6F{V!Kc=+0?TYV zS1e=K^Zo$rR4A#aHrChqb8k;7YIM83(qv24#s%LJM{nN~`n#G|d2&wz!o7uG-T!iD` zr)#mfVyVPP6XkjUIPXk$+J0){)6nk(@C3^Mp8oJ4E=}~~_cSWhoUjEUrbn2A8Y;TpV|kTBj_A*M;{d;@mC4UmEYFPG2GvG@jVYVOdB3P-XS3OfIl!5gmIgSUya7%)|J29(D;Fo{ z*#WQ`3Dwh%#+{!0u(+7R&(|Q4t9yff8W)A}$xM=`(v@F{@Ioe?v*z17_x5A?6EFy&IGIWpWdNC zvn$%)=bT*`dW^~0DR?YEI^w;lI`mU5s5nx*+3S6>t<)QG?Zh@ELusohMkQb!*Awc@ zx2Ie7-2?Bn4nlpnm}rIU-bwNPh)o>r)ggFuP6ip*^epdzosN8-hUh%moPbKlrX`K+K)?pjeJ$LYxzAHC2VJx55nuGpQ7 z^bN5F8pVv!WxNglla6BjS^I@=9W`*DjTK z*b|PrFMp2`p-)oIJGO{Yi`H8dv)EWU$tfNiWb##zk0VGZ&$Q~t4r)kBjd=E z1M*cG<5w zYVuMdMYmMPV@hqr#&H>w0eBw+`L;j(?x}oX$DpDd2R=zD z(K(5Q=?fP|Q}h;08U1`LOM!Z85ls0BTPk*h+0z~*dLZukcWit#QHN=j#DBX**F2GF zr%7~yQNx2i-3PhK2Gf)%K4C1Z$TI#k&J^|b4l}B;W?lWmAR{xEiSExrl=(vEEaA@h zCvQ2<;5R)ep@K~NPYqI??Q%j^AdU-%#?{>|x2C1U*D#v8fklW4U-set{{CkS^_&1b zXg41;Yf^v0@!1xD&vW-^^i3vY7;AId6Y>@kBEmq1>0hYCQZ~d*BW;pQke%51!;arR z<0Jv&y}{!hA@vtLUA@w0+YgsF=koj<&iD|3#sU%cz?KW_2J{0++=BEsrUL_ZF7d+* zDMndt2a*Nh$6>}aCgEAj_(k=oNH&$4vl|>5AfI?>m1{hAGAipP3p%3=X|(}&=>FH2 z1GOP|yxnzmKBJg=yKfnE-_gcGiI3^kC3t0bzRUUaD9*4GJp~a#90ZF7)%(}B2b&%) z)q}H0F9d-wjxBhw)BTeYIFxmyV2;W+_Nn1-Ujw+MOx!K%xbU3!_pf) zx!Af~0=UjZ6a_~PI6t$Jrsm1XiO0*`F_l_%VNub}wOc70;)sWO$vzORRTFIvYYGE7 z3^TT;>>xcLq3RVCSh}>>6pKT7Ky{-Mpux5-*|k~u+i|daCGm0Ut#Bjs4`g>SfA3CWUK6b5d%fq0R9nv`eMcib&(nOPK`)CS{-R^{0*Af zonE;xkyn%+(si4)0g9A&SK>=2NOpfkbZ@V_Eq)5C5dvVq+})FI-8IUNY2S;?NVPup_00WehasH}7s;Dx7$$ zIi}Gq`yu=ah)(;@jmpeDicCQ$Jvibn?&2hI6$OnS*81m6fx0#5-@v3v6UGnvLih<{ z?;B`G6^?&cj?jrHd?ZRgZ%KRX2Z|c88j&uK-tU^cmnYLfjhB3IB)<$B-*6RmGDNR* znj+CT$&o64#`1g9#LUUCPQWv69Ve>Kr>~tiJ~FCfw#wbIPlu>q-uPkO{{eY~Y^jtQ z^rz^k6HVej&Ix`lC%ZqhVUaLV*FP>bw0XmMaP6ESr&E3Ej3!-JVxIFsGS{Iw40=~( zCW$k~zk)T7Zgx+6HNm^#G6_d(GRUqX3U|KWdqd~><6DXPpjfz6k2t!rN`cpV!zNO5 zhNFxy-S7cROeQufp_Cm#>cbNsFUk_%`l8Wp>sO+cJ09I(=%eua95oHodIND7AEhFo zBF?XgFnz2oGaO9oBT&bv+$8(!^vrZa6N$|LdcnxjA5KoSo`G4}TbBZA6MKk%r_!4h zeVzD*_HsoG2CsKQu^wt>&EYY%d(8x4i{|JWt$oLSXtkc-3n=^FJ;96^oP-x|yaJ?q z%IDHCu#7V&E18g=A*vtp`ZEDZrNWyk^DYM|knVLANY-*>e^z5CyoB79&u%>e74MPF z|KLb^IU>Gs6@X_47%W?TqdjtYADsSIEb@bg11PT>;y0J^Wxf)5A9ApxCm~M}!iBqf z@f3Wp1i9;VbnAp4V$7o_V2_jXv%aFp-8&(#su=9d9~D0A%J|28`QlsPKY-(oKg2+s zZ?-TWXJJ~O)aKQI&nUuYfg4a@EbEaee8Xxy|Bj2s|75^??5PimJr47FpjD{1yqYHX zt^)Qk&by2b3`*v!Sjh)%@>>D<>?7y}>;2r1|I8Dyddj{R1n{WhBQ&jlPVg;1w7!-= z{*tS;Y4B9=ulfxt5I}>HI+^sivELPs4|&#pwAdVFy}kh>>9Lm$gWruI`R0T8VOAEY z-JaK;bInZ-%DsMT>g3kLmeK$E=%49%{`IHtsGQwD?O-HfJA#%Y2MLsNH{es&uQl%L zE+3CT?rApCn-=28r}$`z(SJYoMRLk)xEq!K$%p;A=-aN;&cG$aE?#6&cCo-eO+wB; zpX2$X9_~$5zHaC(YdT^dzYd-qNv?uNsO#(h)S+~#+1inD^+k#Yd~@TKb>O*;{P|{L(b5}r9b^0 z7C(pJKSPT#OD%pDLO!swXiS-7D}UF+Y8{`k0%uxxDBviAEidh~To+wwSm^qe7W{J?HRV;-&6#H?@ zLYZWFKb(C*X0&M4q}g>W1j%xGMpK9JOD^GnAyTkLGg1@0bswRf@pQqm=%#xb4&>SG zKk^D|Eg+nTl5@mtWhd>cH_pao!i0gobr^Y6yahF{|1M;xqj@H199QW+e(n-3;(51L zkS+||Uy`|AOq|1%O`|dI?(N<)pf{-Seq)q85=N+ihtQU>l=a}zG?UXpiYWoi2l?)l zKaXg(#w@Z|vp@e03v?rI}G7NTq2woe|Sfj7ZVJ!?89Fgb?8S(*wLrsGGw}~mx>Xs$4fyR z=Wdv0?aXMB;7YJ|1 z3R$KKXBi~<`+)u%1|yzx#&?p8PDVDi7V(t7XJi$7adlF+Fj7>~Y4^!G!^1QI{j>&U zUZ-7c3I$-et<)gt0}H=EDcJXe+S=SHKYrGl{T%$(Z#@$#0u7LxXGYZ-t1<&LG(aX} zR|2wCx>7p`JozeQrftu5u)VE_M8#0VGtZY8Z?O$1ClYsqpIP9jKrOmB9Tv^ z*|X5NWgfQwW@!wP(fxwqjxmw2HVD<7N;)+LVT6L4(#r+mb=mC>>~h$!uKp#WwhXNS zs|XcBF~{&4kr03!JcwXP6Eplzxq94i_1hE{7RKiD@d7X-z>aXhu&$yaCu$9RL>m#+6O{bcd( z#y5c%#}!{V;V1r8ui;Nnv9CO>OJX;8lW*VnqD#6m1>Q}F4`N0WKcNSFpRdcK*)A&l z26BdCKeza}vgB&b$T)Iy_8&-bU@nmSFH`LENJcrFzgS}#Kjmp(O69Jtc6eW+<=i0s z`TRjT_crGQiD5-LD5$dhjN<8f!RO4}lulq&cSNe#@lx}7Pd$B&>G}g{q4?*bVWVwvTV=O6_?$I)k)bBv4L#X+ZB(a z(RC?%&kSVT6m^K@LfPV_iD`+aS`WTFbq|Siw+6@8^R?Q$TOfLvwpbZ>nvLHDY@avW z@=RGTf0=3TR?U$;UaoZwx5$+0u^f{paNvqH13_$Kx2p>gEq!lm%6CZuRBc--XB^FXlAO!utjnICLmj5ccIpWaU~LB*z2SFv-`R%q9jY~{O70TDbvS%q{ybMq zwVlT!7$&J?nIFjd4|D8;*sZxT)tbnD89-EX;-O#Uy9z&T>&n>bOb_^O4qM;5A0XlS z$J^w?jPTVsw>XV0;m7gz+@RJTtZ^{}Nz9kQw=W5!iOI{?M{@F%5~6Kmnm;}MdE&!B&lnJ%z$|kj$YR; z1!F0X15iYB!|{B!{G%)8O^OoY1yAt_VQ=*6}VA@+P-z2dJEW3%Uc(kq1G#2ouWZC{UY_O1q~(varx1$+m> zSHD*A)y*aBVTCwZ4;-ap*H-=#>}OaKx4b}t6+T8d!(j53wFz-gIv%pbL}FzQENVA6 zHb1?E{jN;D*r|Sr%%##I^t`l~qBO%lyqSTi6XG9iYeI63U z#=ZBX5=}$?PK0w5jvu;!<19O|HpP_9%8;FJc;J_7Rmab089lbMF`-6YJJ;;l(g@4j zCUIqcKR?jxpRG@Sn?CDCWgE}{pB(GDK-1%+Lq~w%G}{t|xsUwrdQ|U#VeDQT6QHhsPZ{j0|oW+V!$_T_P+<)%W1fLq*Un{{8@3Hh?h| zIfMyGcp!_pQBSSjM``i!6L%`MG|DUxMdfEaa$+>>N*`rSVJ%fY0RT0C4Hqt#6UZ}x zhlAsB*achmxt(N-!R0Aet?~7Ms_zAEq!A#Os`1oF6HyDng%MjaNI3$NYbd-1Y1$VH zIFOpYVE9@g0q>3L;mfoI2UJm7otqAN>@l?40%cJo0kmWbIFDanT5}bq%oAZC4lHy+ zvgj)FsO0{Yv{Mn<9Ea7V4CQSXP2INCW&xBJhx zv%R_0L;}*NJ-Fj<-EA;t49uX8j;~|O+8bN487PH3RHdiOc*IaIE9Iqdq#Rb?!JX*e z1+Q@K9Hr`AcM~y6zZG?~F}G*i(&3*W$V$tl4dgX|&P5EB8o8^*pAKm(er5foF@y4c zm@Pymo5kz;uwOUF*4ZEi{-9%JYN;j~?)yT_Ske0<)P>`D?7|4hnB($%8E|Ov_gOz5 zZ~_WTaoz(GWSXV+Q>lw<#RE~5ap_M92TbcT`OY~5NE{>ijR)Tk6Su96jMB^4b1K7; zSYxq$kJf1`pf*N*6Ry(z6a8fi@rakYG$m-gtFFM+#*-;Fsn#pu4$EW>Wj3`ziD<)Ge zutE1*b>k?{#f`y)bC^ESagE?DE|w z{BzbRJ(AB=NQkj$S{+mctK4v(^Qy)IPolv^2J`bXY&yA2ZSv(4U0}jF8`CKmrXH9+ zHiO>=lm%U2WQ9DRo+tl_@t=vN+0-=q$LX3DTh4u*iDTryEBfmB$)de^LvLg$j@(#| z#G&^1{2j=BXFpx2%t+ch2|gCxc3t1jj2y@jCR&jHa#6CAl`nHSk%xY9OZdVUbV*X0r>q-cu4Hv!>C3IH=JLSecZ1Ar?8d*4ifrb%Wm*;n5NW3di-Vc9u`!nOq z7FJgg?^Kxh?n8S1IZOUY_v@(ubyaUyB6JNnJr&LQph)n8C-`OvdeX$SRb<{DA#ziu z-iR{13bUB$@t#92KIGykKq&UqCPxWpkVGqRR(oJxY z-#vKi`K*ZFspK>w1@p9#_NTCOnHkx<*Bg|P^iH;Ag^NeK_K{!d=QR<7L6pF)5eF)q z`p~qxWxD3<8(&7)6pX7asiF-m1`@dk+^rm@HVC*{GoMIlo9X5zYr^e16pUO=10h7G>W^9S@(4JX z7IV@J*e^8I7042Jk~>>I6&y!!RvnS$^&pclw^`~bKN zTa6Y<($bOIv~uF&ZlCXu0#iVncJ98{SB;c?a%Vs;opi}x7wBzbEXI>XKs9lPjmtFY z5*a`tNuvK*$hbw5YfGW;8ZYyr5)s>bFKJ{wWqeV#k1z+z^d8y5HOQGw*z~KhO?7#^ zj_c#DQppj1y8Jb{&G#aH%3*$K_nNNw&+S!tF7sK-+p#R@m`GVQOo<>&)8KpN=Y+AY z9z*DzDYsmLrqp}Qm(%SZ_Q-Mw_$TNVs{-+qJt6N+U&cN}S1Of#A#1V^EIpHjd*Jy$ zyCvC2TK;?sm(9#3nhTj%+^R-(mYRT0^0C&v%HR}X6LKL*z7r%QinldZWae?Z_n+r4 z9D^5`liPE~DZox7!b%#FF*cw3QCbS?Lpx56Vg-3M+Ws zqB*WI(Ob7nC2LJODG3XhR)mTh(zl6)zLsp@}ZLDaIAP8=A@ zOu;q8f6;Y#@wx^=5{K}_I(>Ms=+F_h7-#VuB5JB?YNsN5+^RZXhyRRHKXl()R@mxX z-OWFvZ@C?HY0xgHoI6*Pyk*oAtLXU2;F?H6`e2sXDrmIA# zZPPto`oYlM-`|cC8@-%V&_N(zZ1`jDK#yNSd^|v>laz!Gb^O;1+v01si%gTzdhiE-G6BGTDOo2_%iohR;}Yjyxdk0PN! zq&#BbL8mpsu9VASedjZIFBD>G!c3w z6$ViS^~DLtS#^>7$S>N+5!PiStE1P4_v6)dLGRY`3w>Ewe`zEoL%|6>IC8C1!!z?h zHsm>4Clu0&VHVH|j7gr@WvFEQaI4wkZo{bcp8m|qQd+C|Z8iP)U8biC*-JT>dENI= zC&KHvT2c5BIc3r;EP5t!IzSnl(-gdt|uiGNDsUre&YuV&x>0ZP_GDePMhz1~d0 zYNPXwE?4!nfJ1hySyJSj_><30Up^Z{nSLCy%F5Efheb+$Qdx&OfBDGzpFvhBUZQ<* zZNTou2rZ^R^QL_{%2;*rU4}=6NbS=RJ6*wX1}e@Auw!^rc&E?;&2(L;6XOf%`TD@#rn8@c^CRpXm4-N z;q`RY69A2b$8Pt0vww18`NV&O8Gk>y?>3=%Y1JH80wzkWB9>)Hu^>g|;4BKx(ynKe zIiZ~x!QiR}GlanbeS>ws*M^@uP|rR5WI_(Qi@=yGPvV{-_8%hV_#_Asc}8}1q1MpU zLDJa95%VfnWSES*jOx#$r}tq=)f$~PTLh`pF z<*auVT;IIp-2ML#rXGgMv=QP3U-W(A!moYzt57P1JKsvF|pCn2~Kv; zchIsqC%msLydhf=g>6WmN#3!ta7+j00cQ{Tl5GoY+sN3gFQ&>Z0HIzL@(ni=N^ zTiLhc4uB*%h3q7l_=;RzNyV~lvGj@AL)DF=${rR-V9%s7+d%At?F4FmE2bHw5V=lL zbnQipaJw1#s!R}~r9&0%mkJqX;|w+lVF{pehAAgb0qFZm$VOJ!l-j_QVi~^`NRknKp!@PNIL~Rq&m2L`CU}SU@=otFK1XVWirGA<7<_; zO%_z8s{ke1X39#=G9|C!Z|b+ul@{dCn}dRtOH`|^fPpB964Wm{(2vQ){>PfP!%h$I{nE(R8|h9o_cZaIp#Kc^b1( z(m*FZSTRPYS(mjkyay#*b}817xf?&1DuU82@g_#6Q8|&RfR$&0r%Yuj_P6HxtBzJu zI4`DP@<|Fm!i};Bs>oA}byFU<*++o86YzR4&+EF2W?z@G*k^XLi2vy_`3ii6{ZiOK zAmh4^J?irhsk?UC+T^DgF|tPTnWRrg3Lz8mHEj`5TmS^8dII!8qNKo62=h7{vS`j`PcrL*V!S)PrR!JBa4t2OIKLp4Xzr5#m5gS#T(7C%t4P`-~^Hgx;w3f5X zeIek!AV7Y$Vp~9v-T| zL*@3=vj_iERsAO+V=}7a+a&jFuWJXLoz?F7Xc1A(oY)9A*?&8*xH=9gH=r6Lk&ycX z1M?|ii@W~iEc3q&Rtb4#n$5b{P1q5ov`%bcesb3KN+I1Tg76k2J=oyCEmZ=xdzukj z=&j9>TwD29PfmnmV!u6p&xnJt=SO+se-p5jSPMEKG#N~V4uQ(x0_=RNA?y|VD?t5_ z8IyJ9Gcr2#e^Vfg|F7$>|I?uL;$|*oXxH0YrMkOZaXVNfgFnL{j}ng)&E=5|$4%Ok z1v(X}yf*E9_xt-6d9y|!pIrlBWGmlr$8je!R-Y)W*g?F=$npcDjCnNBrpk*chG@F` zaUay#9g>``c;m-j&06|3TyMH3GMAMd{x=R91Ai5IBDMqtr%O~>@t5?=-GDsPk%*8z zHvyn~#ev`ZbR7sqiegA0+&Mov+H>1YbCh>r>M`EDt=^VR6kUkEQ8D%O2rxpXTUd-x z>X#gl^mOVWlIdz}EE{kg;DYKORB3RTCu7Y=f5^)YQ>k=nq^h-x$n`BiRst%jXpbiF zzfP$obLl#nq0oF8?;0(WW!*&6U>;DBSPsu@5vmu%>wW*`fo!lN+tV-R!E`OCBjU-V zYAGj}MF+Y*ut1gEKpr9Bv{X^8?70(YXREY=7AW)3?l8;dD6PNw42V$@)hZ5kSkLdA zxMK=RRrcLgT=*iBw@=%IggiiA=g$!5KFIK=sM5&6z~p2CPseC9jPhJOGIT#oWu4+&4q%6q+FRrCPj=*`bKBbhYG8~_WxD?O&!wogA z5a)4Yb3U2gL~)sG+DOI@f!?6V@(=-yO-ML7IvO4lGCVehhl^WxD3}Eg`tfVreMt}N z^e5#VobpmpD4HDTyr3Czj@VuF2%xdMS z{q5u%{rPok^u2dwYDSLG!RJfslasLqV8C2%BRZB#kI?yt+w0BZ9$4< zn@$N;Q-@ZDQbZAQIBftb1H61Ui+dVX@9I@dMPK#U-RAP0!h-t|Xb?IPlcVssoPi9v z(H*U(aSY_EebihlMu>#X*hy@Dg|5bHOLdQ4ZW~`#S0v#&*jTP+KyNL2h;?Ux@NNVn zz_f*@!1PLX<=Ih9$7Wp@Lq_EVkHcw&DG$o*^n-MC{(2FKkjLxjm!1IO07l)F=q$Jm z9;e5fvZ2jLVtQh{bd6Ub-N^%O_IkFx!{h1a?FdZv(qPZPM{9uqr=o7_OorY2upjtq z`z+TH#<-wGJzRdmsbNJMUXGXM#7`8H!W!*O!K_OviLmh zpQd&%q$naI$y#l%wbTwbV2_u}xQdKpGsF|1ve6Y8rVWb`L=sD#R}D{r#~+gWGoY2t zv}@8c>b^}dQr2~t4f#^u*J~%0wfR1=XgprKa<`Dkh#~{YiGle8Q@7_$ZihD~yIELD zvxG^uKvp9e$q5IeyWBDCJ*=6;pe3UrM8ei@3F|_h`gc)$S@?T)M_1FR#qBf)u{74E zQTt{a$CZekUI$|)j}Z(EPm~q`=rC$^n#CtlBoL6{;o?uZ-%6k zH5$&$D>;ZS%Kr=ygtPvF8v4^wJQu*+V%tFKtLea$_H;kg@)axt@gw;9EJR^CwIEn+ zWb)VET6zq!tm@%QzY{&cMRj06#T5|=L8Yj5C{Yd2u-_JFrb5zGHF8ZEJY2@G;!wAG z-|kZ+%%SBxPDb7KF8esuj~5R}xukcRG{+*qJ}Hw%ii`%IIPY9sm{YPiL_BN9Q(R!0 z!E=7*SHAZj{zGmi9UY12)WAmmltrzxU?uX@Zsoh|&f8I0olEp|v#mq`lo9e4*~aAY za>Qh@s*h^#O;{V;$j#keD+w=^LCwi;sRunun_ zQJgLsHLS9ApidJqGHtyPj7mUVxJ$UGI110@pab__k2f!}94G!xAN6>L6txGL74|dh z0CxEnQuk6jlJZnr|Bpo_vevFxg2RKGNH=y<|42`6&%q9R*N((e+QTP>e)Oxf)(^hV??MXu_?6BQh(l5Afr*cIDim#PTpK6J zRiQ(-#A{VzXbngR2ub8?cO#Tp$(7UP0Q^;N`htQw-#--dr+@TL^W=L^qt;NkD&p-` z)AFJZ4Cc;`Cj=)eg0{DFCu$3}`uoY>pmo05vhTMx899jDZcWLHw7)K&alw~DX?fVs zPK-*ZxN2IVbWCKG4^)?y_L*EK(}?|XmiVW0`Ii4|PYHXw$H&C{Jk5oemZ&l(+NUcn zRk{fDl%^BZT2E*F3FarOskzePc(~#HsFTCLSgm(x$Nu0DGc?jlDpplqM%<+Z=&U1# zp(*01A11RZN;EK4E;PTG?JtCyRYp2Tip&cp#QXRKsvOA=5c=9J=P;(#?5ediC*SWsNt+!tuAY7LwVj$>?=&j`kIw9A@P0{56NG zl#j;toWPyHxaSvV<#5_Z?~(r>WEgMU3WV>iJ*Sc2RK@*P-Tq_@F`09nGw|e-_LZu^gvmm=y0xmpL_$`|W~u!wu)M>d{x_tO*vj>XyIf_1fK zl{~}p=$Zf2H?NG@Ew=B!wkm?}%NlkU=2JYh-?ptIN4nV=-nKxaUQEGve{W*4(OXG~ z@w13@9LcJM)FkgcPx$u9NbSwaG`L!03==9vNhXU-weR?dL7`4bXA|`d4lm!=eHyZI zkuC?8KJ(kK`aIV)M%r3N_Uaz0%CeK3iS>bXRyBN+;22+zn@(g=_b!w+z1CxP(wNf& zbhIj6mv~hiybIau&!W^#*eVlxc)O_NIh@Sot2;dByKMWmK3Vtjr9^a>7`5Ev95&|y zmIq_CW-O)JwdLD7KP2YJaC5u^Z;n(&4t%0Wb|snCuq*7&yCaO%%5ue1e+d*$b9Wk0 z_;T*eX5@X>Uo`)Eu2jjk^O-y*HJ#0NVQvm&3`ejI$jBFqMnpma;VJ|)AOzq=G;Ni+ zHYSL32$6aRfKB`KZ#=Yp@v~r{*0Q#OXUaL1uG|#vi6_nU6&ujB0uAC;gBP>@g)j6PSqt&IB`(04U^k|IAx_Q0%POv5(!{ zjKD@w%~jyQh|t3nW>$*u*6e!=-=E-AE{_&A<1(r2y0@5%+BbQ|8lJ|}>&jee3RG9n z0szR^UXVvV=afTAZ;Ut4sl%l=tpS;iT2qee5^9EU9>o|Kp!3mW%Upax#ePt8-!oiJ z2+piFnrlZ81nY03YbqE95=jeRyD7TM8D2bsx_bY?I5)<3oqzru8S_YZ#zB*Ah0_VL z4H1lFLAKy1N-5lplLr|#R?>1=tb8ajNEdI8&{j}K!2`?j_g8PsD=%b4cA3A&WO&1L zgsEg=t>Sr88X?vPtSO;6wm^^D<;ItMav?fwlA6<z0^7EDQQJVS21Me3@CPC=25vwMXL<(=7u^hNnKielMKZ zGgW6Ju9O|RkX^`NgE54JcB$h!7JNyqQmdT9>}O}aMN?ua~CiN`bLx97u z0t_nOEB(aGl)pSt<`pM)T?cT?wm+ZrOR?2@FkoF_SJK9&2+ns*iZ2kxYOdFPxqzq` zGrfqm%pjR$_H0%ir$*-3zQg2rak8t7b1XyaGChb`z&uoQxo1w?J3#mv8?DNLeHfp% zDdf%XFpQDni*IwX<3^JR$ zv<4f=>Gm-L^Yeq#&Zd>{u4K5VnXr+tZ%IsnwA6#xx2`j}C62tbog*{Kl?!zD;{rQJ zh@V3t+@+bJ+*zr^4ym#3Ns96k)?F|IKl56Xi=3n>d@FxtM=eg&I`2Xp`+Ws1i$5i= z?2}l(qsVZ{sy@~!8*DkTChSRL>b7Yz_r#9wqntPeJ^DEs+)L+&&ZqAOq2?v?Vc6l^hHmu%N7R6AGsnB^?jI9o_|UcI1b z!?@Mg&P0YI=_oN_`R94~68=ZjvWyfy_K@sQ({usOfMCriVlXvWOvcKvw}w(qh-Kk- zz>XmYqV-L1KB{5wYoV!iY+b&X1ECDk8m{!CTp&2`IBXRew0!BO|FebH(DsCMSOpd5 zwhyp4LtF8oUR_Q=rUYhJ)<2;?IrU`2XhiwkTUii=-l?6NGR)Vs?{@c1i5O3O4Sh9I z91#k_x|F|ZuAs{QYL>+qwS!{%Jk1eEO86vifiSlEk?i%J_5&y1f%;(h`07T4$aOaL zHGsxU-LfNN9=U_YLXe)=l~j)dc|}%!c)$JkOW+nwsgfvA-B3}RzfC2C(wU8fF`PFh zL*-q4X1j#79YUPsQTFVi*`^RX^`#nqGn)tDfhO6~fw*eHkrrfKj84}zxfPtk^OE}I z>E^{YD_zN5H_25LPZU2|D5O!0?+9JWEi1P+5vY(E(XsXol%ZGVJq&sh+E-I7@sg|# zSq%wR+;SYFt~J6>DEPJEdocfT3Z?2<;Mk;0sAX92SUKN{~Sl9b%Yw5T5tNSsMZQ~0gNCBNMPx zuBq`8aGl2C6?RsI-5H`iyVexA-f+m^UGXr`k;IXFPq};VsK@U-R=@{lCer1=Qg(pN!d_5&}zR zeRk25qrK#%@Y|s%L;9uYHLEBZ7eG6v#ub}!FY>byq};Cw809|x^} z1xcF)AD|&Hegkgbi@qeepm3ycexkm*TyX!ntc~6@=~{Jy#GH+DXvAvCRNGw{jn_G? zRG2W!HOJ%ND_2w3=iqbqjy=ZHKPm36aW+|N*BenfZSO`xfR_2Ont{BU zGbQYR5tWWWJFaJI-Xmp}Ilr(1+=jpg6%yN8+M~DhOWWnzV^cx6)K40Fw7gcE#&RJQr=<;z>1S{HE@7V{Q)lJ{SBlOE4>_~SR&ZN{# zkt>dJv}4y#`l^(leiTM1Aq{09yf21LVE*<)OYtt2T94OZhP z(W`!0^<+%ka@|}^tgkj%x1uF*d2hD5g=fK30gp2;e}dmn3NLIAn1&;7?j7nd(ST>C z2QjH%ps&!#&kS0|RjcO4Qr|o~6k7%Nat=4X!gi_F^1a_FyON|IVK8 z+_zg#_^PGW$${#VPJW(0(g?X76DDvs>e$-o^U#B`{Y7j$K3YUa!1hvM9Qi4oILQ^s za_}Iv3r-~8p~Ghb>ae~ zrD)>RNgNPW;#{S&0%u+_azX!HHVq-Cb)&u2QW4hOnl+syfeKwR#(?!inGr$JYQ6+q zpkt!Q&$2<&1Xmcm@|(KW;0|!^VUVc8Ur@23K?I{5serDWyg#@S86!Xug4*8&rpGS^ zZwkIax!a(2$vRY$M2)!VjTKPdoeA8CQK{1{Pg=jvt$oqIDx{tT&C`G1u1%rs6edr! zKv-ztAg>hf-v64&8NYGxwX`tVu@W;7(71l0aku4l7Wv~8%`)=gLqav&f%H~b_?c16 zh}H6(*Sh$w$E1c$3{EyQG$T&j#PeXTAkivOkvAH;>f0i3i3K0oYN5(z2ZkW40|GX8 z>^X|>FA)+{e=9KhuwhlV@d71EYdUQf+USdZHs}yghb+(Ke8u_hNWsF)lu`uAaZV3zV0H5_Lxf|EhbOss69(p6(onLLI05 zab-&)%|#yR=O8wmeeoxuTrXI0Sy0bGbdjM~R7VFYE?#<(T!XAQBG-jJAI#SGOmWO{ z@6Z9b2}kb5hxKW@UC>b%V)M>5MF+j+YaANHmbJ&vn~oLY+=J=Zs*&~@cvKf6L1!G5 z038S+?6PE9{*+H;0CVkK@VYqY`(r~JL8itF&YftaCz8pite-u;vn}3%N^VYg!3ZL3#xhK=IE_BJ5F;itT?G}7N7q=n zByzSRqHErMC^!|fb_v}rK>l%R^T1hh;+pK7JLvJ##z3K}`BQqk$%;ra4ll*iX`n+BRSeWd6R_kEkl#3-J9U}8(&uO?h|WV`HYR^GMs~@y)TNxQ_HcA zDCkHO{E9INEo_e!d>4Wu$uQWPDiC|4(h_BXsC^Tp-0o0?Q8JVK5*JTZvTxo_Q%ZFA ztXTR-q{z0?;GHM#Z4_%pPVkzqG!7ANo(g+zvv3M24+KVVvRVltR0#0ar8rY(UfXlm zKa);7k~4t_`v*F$W-eND221B4Pbp4bD7ddA2vC)(a34C}fh^K7!3H3c1A|lJv~RNT zt0Uw7zLyItRN%Df4tMoc6nwFsmI{@l<#9Es{AY^b`ZDF(1k- z%?GJO+Rs~e@cgL?(`~p{(XSr-b=G04?=o*rhcs3nhQ_*bL9MFhJgBlt`6hII6lc@` zc;4=E_zW}Vds}?Fq_=tK>G~G(Y5MIW-S2UMa97~D8hX3y!dDO7_AL1=R$BfB_a8Sa z#1AW18s1AYd|z;}>mgr|S@C59nUB35u+;5~ZSAJduNVD>E4~7{1sn+b04wOlef0YB zfxDIC=el|j4!+R|&rLEUShk8}W`#9e!#a}&fzaIM^qTwMP!#l6%i=gqz$=e=iw6-s zHps8y2OWFwsgIbRImAzo8&#gGk7oY8yv>IsCDr?kO?y*F3)fuitxp(b@9K}9ujcE} zuwF5@+lELc|7Vo$7V3P+mrG4qaxQ|gKAzdxhwXJ5(&+uafiS2n88k+a>BVmBPX6C7 zfw(y6QMM~Bfkcou$e#}o2R??eymaQLBRBh>Kvn>l@y16i5lRw=VELgVxQ8trjJ{_e zVIDnNRqZuS2$=rY=@XrZp7kL}_h`&w7O+x^b1^Tv(Ll~yKV*TxeaR&_p8pYQ`~S`X z^gki!|8tGd&GnH?xpYe`ErUGiAc9%WvT|u`IkSLg`=CM^1ax-(QO{zhM6G6CobX;XgT1q6EZ0DCp8^Z6Yp3zQQNqc z4p|;DUZ(*2!DM90)ko(RxQ-goB$j3=oSrw=`Z4s4WKVN|BZ6j>jL^8exigqfp6BWx zA*QQ4-ls{C(Q4m5IhIBok=@VLQ+b|A8L;4u8Qpz+d<+cyfW}o-ymT7Bt))Si$t#xU zV4RWaOpzj>b!Z?H7Ef{c_98$YFBa=FXOH%fAgUzOXDqHxp+_Y%e9U%e_#8+PBu+|A zPtWUqv)6Xn*#{pbRTat~_R%_}eEdl7TNFE@ z4MksX2@4B}=WhZwnp*MkFU3G>7DfV-8gX+W^`Hnj9nAyFMb$`RFWaA>9;^4zH=Vko zeI;@8xc&&d;5O#3UZ6oagzW**y6z0X{AIoORY_(A^Tp!x#{I^;6f?gPXv&>W_Hg*7hWFLE|svy2)84ZA{ z(xOwS9-7Z%(CMd!y@ZzQBz#Z+32bE)T7PI1=%6)oKvjmu!2{`X=&GY) z7o2MQAe5&t**i_ac(hD82UMf8dU~HGgC33mT<|fbdP-q+-SqQ9bGsSnef|DHm;Mnf zf4TuZ0)AU>8E^;!-+F$1^51NRx2UCaTo%E9EYZjXJxzETw5 z!aPWm4UzUZK|HI~+`kpBVkf_Oq7%shGAg3GoIs-mR&2ciRd{@tgqzZuOgB(*?{ZmO z&L2SmuJuEuZ13e5EsuhPmHM=|V^uVMv7Pj6pl{oAR3ubt8Qq&fXD<0J%pR(mo`Sj5 zQ@_02hhyU7+2FMv#4!CK&Ub0n{aTT-A8@;%bc!!q{7C0~$kANCMOvTga7cr>Zln7U zN}rNksi>*6>m7GE$GKu|vUh)qNzb_^>{akU_hlZr(Vd{{;$V0C!hW~ED&T?+KGL5@ z(Qcq7%K|Mw9VP0r69@0o_kOr1Kn>iIGKht)oN4lN?f4zDdOf1q+5RwA>$z{t6LX^i zH_Y>~!cjk_E_t_bRIK`$xkja&v&Ty)!`3cm5nZe)W{o!|Q`1yWWjK;%s7j}8CvjC| zP9LYbUo9f06mEI?uu6B5z!;dyG@uYGzRV(ROr{ z!dS`_rfSL=hhpUA?X8pHg|c!e98q{Cj#O-=mXVnW3%zV99B`I0egGbLdWsm+q-7Zs20#i}7 zu!Ek;^{#&Xw2R!&8VO_Vp`*)useheTfvhEwg9{EgD6q|jJ{g0Q6y^DKzuvsGpD9lc z3=gXFySI639}ULAUq`7m0AgIi32T(-gGk{MBFK7IUJ-o(>It|XT};A8Ue4Nx#C(KQ zSD_%j%}fQLRpQ`mgHE(sQDa!#{e3^pk2L|qj-+ffO~UG`#fz#Uu`plll|vYFf{5*$ zTyVSLksJ1~`N7jixIk1%_PisOAwU?V{X_5*w?@fu+pcxD<+Md=i(rjC_4E=wq01V- zSt&}4>!tWk0kZCRVmk8Hun(t+VYtO0N+_Gs@xHUJH-qYS*@@11fOo`a0lwQU& zD`ec+n&(EjnT?kzY|d;=jbs%M^4F2Obcvz@04DF&Zi9rR^*nnTPNR^2DyIj({_|Z{ zU!N$%g7xQ0z3b)1)RerO+@$M;VXrKf%Y4hOlZ8#VNaSS`(M=~#3*cn*}ATh1O zKC8z=vQ0>qpaZbB9(?(Scghr*rD;2Nm}U@#nkpe1 zX*xQa{56{w=4QQ_Ol9OPGyBZJS3w$gin{vh0IA$>6G`kXP2UnwtZjXi&F!p}UFPwN zY$6@Fn8+%=ba88ItLezq=#igGXGoa>NrN|V_f*$}1Xl|C7MeNd$A3_gn8;?0TL;*c zvP|+cs|BK&tpS1XquE)V@iD0>HRia6OthqsdkIKW7r#--$Hh-N=L9-YEQ)0rbr1Ix z>bf&8WntU)vD`*?Z+hSeHUef--V*LgSc@uQ!D^0+W~=nPT;(R%iDyDwCg(~2Q9-zI zaBTOmmy_gbE$;u+)V2Mvz?zXaYI9c-_Mxan^8b=Vj?K3AtE&Gh?^C@&46Z0 zN;-x~5(-GMsMW8GGm3N=gO6kG)YqiS@9KlxrT}LZR_q*Ywc$NRlq(r=>O^Z z$}54wN}1m9fkqex$|ASB>pjAV5Y0}4Uo`maKx|s?Up9?DVK?wym3>z;n$$-aWp?~^ zlaiY{u+>#jN)e}Rn(@%~Uc9v5xsIqI1> zMLr$_pLE_O{Z2;d_ES_?pRMBu6Z~f#tqaF$KYCf1$I@r&$ck3a%P!rUVJNS+)K5{+5;_6*C@G`Xn7nzKx>;DR?y_?hwK*iiAZ+$v{V zis5xgi}tVi)m-d>kq+uQ98|fG5C;whA-?L63oEpvhGFThf^Y(KM~F@n=iUAR6_%>h znK~zjDXwH<^>b;vC`&yeVY4fBvqEr1S0o&r0`^VrA#fzDmn-hkYp;2D@h+71i_dRV z<#CqDk{Px|jgbq3>r07IA`kS3BI{14WVKeP8QOW5A+dt0UmMiGz`eA!!F7~8sdBDo zpdJ_7(<_Jg)wKB%7JlQ7-8+WV>)@RmCQU*P;nk~7VQ-({&%eeZ!|r?OEX8IbXQCZL zy9P@ZGSbq*2eMapJgm%@s|idoF*4q~oK~;qWt5dsgG6n6eHFI)GJ0x4A42r6l8}zJ zyfmTz?0C%1U=eee=ZE_5LhaSkt6pWUrc&Hsqlb$YE(>cKw-`HC&s}$T6olguag52h z3ZvAr6UBQqeqxJHY->1g5+5$!`y+SKvnM|pQu81c!;1I36ZvPh7o?ifpuP+=S){Ex z`ga{nJw{rUQ15<`y-?);_zrq#7!3{t9_;-<@UFY5P^fXm-_`o=^k^`j$B)iOS~XZY zI9%(R_oJ&EZK7@=rKrJLR;{mD>8gzvDJWyB!rMU(qj%YDtk&)!5a zjh7x*G3{A;Io5oTBd^mnBLIToc#S!VzBn{!WDhfxR@AS|Fruq6(9=g5gPR!U2qSTp zITay-u*jaf6beHkiSauPNC4-h!v1xIHEgfqglrd^0-zFiZZSn@h$|$QIg&;Cp!S^2 z>%K8QPC|cov(Xpzy&;eVyqtXD{w@*jB8&HXjqK~kjyCsbCtGqps?34zn)d)-_vC8d z^0U9KHl#?0==pGneI!=RM7C6ovpr%lAj|po=7HVuR#WjcaCoKW7S{{OmMiNA4Y*+5 zZltMR>+~N|!$=iyxeps3g3i=^VcrHZvOy+$)k<W*^om=PVyUrh5h2?7L zZdN-3J0*^06S~f>j&O9R6jn*)vVrJ#dDlvi22sg8D4I~gDD?O|mj?t}mnZhSSF85B zI6y<&v*q|=o;994p-g%mdnc)EhALRIoBYXaF4y(Z#nnE#S5{3?z0%>3t2;Q@wu{4s z9|J1hKSZpUaZXQ9L2iXtked_?IBnSwA0N-}z@OuIwbgTdZU3K(+mRkxeB$$<#+&PT z>!8C+{kNLdAJmF|4=Rz|37Z@U*Ye6H1&og$M!pT^VdP;G`RH30Q8+0wQUMWqCey^! zDaTT2Vp==3e^(qLChEEf#o4EFv4>zD$fj@XU?1If($T{pqjv0Q5uHtr(@Wc-qUbBb zA|wyhW)dkJ#EI-`g4sKp>6lv4xi70f7HVjr->MbKlmr_*G5&G(hC%NMAv-STJhsJz zBS&j}vz$?z*g-_J{Nc87+LY9YP$G7K^@(5aKa%t?lZY8lX)9|1;{;3xsoH4_tg4g5 zlL#V;vW2a*f|o&TkAq=p+MWlsxoB>;x@-CeesG~J8}J%u_MA*(E@uzK#e4&Pu$H6} zgR=H~1^VV}R%&rC(0W6dgKDJaiuEn*V*nXhx#h==(`!ZdAL<^Yq+&Ai!Z}x$hsbya z<7?`przNAG`#@l+MWT@sDjghr?8!y4l?+J=eTO?wLmoE|4@-H4#mWolw!u#)O?z)y zC|6}$P|w*xQd3jXa>_V;jQSb77uh_Xg=5#_OAQgHVr za}^08fE?X*x5m-268`T}pvCg~cq%4%xMgw6qv#*$m72Nr>17qF)MpEh-zsnm>5Tai zKVp(&(=>GzmU*M_bBP4f{TNm?QsNR4QZ^a-W~3|vZrPz2kNa>d0p)~+CG1B*wQF-3 zXYCW)%Z+6Hkx@))*_m-!Dtf8t@p0!G?9qWgJjl%@B`rNPB@O#1MSvumr8MG_663?i zg(U=dUoc^RhlYmoJ3L%&>Zz)Nn#_-&!$ClEaY>1I{&UJF?sRwDsZ18jYztmY*W=$^XAw%AFBqnET!_*lN!7p!ok)vIIsWodg zNP;P&maR415#Z(t_CqVq8!wLh+|dvTGJ1%Hp1#xRc;-6|=!TEz4&)0QBq@nO7L-AojCdAMkO>>cU1VK5WhNcBK8Th&SE*7P?#eeJc196 zVTQUC(V6jvjUgqnTJCzd!X$-GZeqQpu{FVf`T2RzyN z+~P!OUzgwcdKeY==lW6NdtVw*WZ^GxCZwh-QFM_pGm-D^d&Qs64FgT?#0=t4 zzn*vJ`M4x~*1?5uj%>R~!CyP80u4&mM@lK7@51SBuuE5pCZL!B#I(7Iera8A!%G`p3kBP57T*v#UXJ^S&pZ3%W#;J_+0jV`KEyn0tHY$ zoF_fak3w3MadNkFJwp1bifwiDI;~#UXQlC&lVS;Xx0jIaNTJi_{kzwoN(JZx*okx9 z(0#5=Y#1{D`i zf;CT~$&?h4>5*cJZJ!ZI`8wDl2uSdc9EW z`%$ZX{`_r4CCNl47g1`+hwB$Mb8bGh6FyBDq+g>$#%CQ7JatTbDBG5M+8xe`9Qc_d z2f&2Us+pWwWHmtPz_~{6YfffIWv-=D6GItHV7YB*xsVCqrVM2%8*KmP~f%>VEOW5+gpB z@kff)Lw<)b4=P8vhd1Ti6vV z`jVFY(-7+O9&PZ#>%~^^4<*}Lli+b%IeYPGb1_W{AJPzs)!Z5s6Ij2K}O~N*=T+qxBcX^LX)zc?4rY@a?J;hm~e~!2VK~W2kX6AuKHAB zR|3B$Q^4EhKTCvUenO~S-~}`ZFP5zDU0_#}?uNdpKu+xe4t1a-o{HSJ!pkOPESn(3Z_+ zWy{cTSOBwWA5_DihkyCB2acG(PDX5yG3yq4Ynp7x^a4v*%6c_N4@!dVR4?SZfj4>A zWATEg00#C~!B8-g*(ijmBP5QI)CLWVLpOb!)@h?k`5CT0fSq#bOYI>TajuE-H;!+% zN9o4CaA#oqJ-S=4Z*XI`HqV}ZaP0li!EK%xjRln>eL?Kq|A{sJ-D@BLaY)dg=iCaA z5?nn~^bQS7ZotdD>kuDq`I}>`|M(Dp#oaE~9QIKH%$PPNOxojxKE2_u1Ex-n|LaTq z5?AL+(v=rk&g^YN3e5p$oHJ>O6tT`@@?TsHG|ey$Qcv!2*9NMmdm4fhPp9zl0rEc1QlKA#uSDiRuV16YO|hxd z`&VEHpNcFwvCD>Z77g+Urm#E}X_-Y6a{jTMteR!>(!6?jLkJ$=Kb3T%!rtNeMl1P; zu8_fCUD@+S&tN*Xbyp`$Y~V!fjhO)BL)gPz=QgZAD-iVB@(wxP5r6Tq(Bd2VjF2jP zofKSi>Gu6S`Do9%rg&Z>RcAw-B)WM%JM>7)e}W}3EY5+xp(5aGe~g2Q3)rphT#`fj zBapK|kx9?)wSEZtS)G&`SO>S4`{9dvBb?+$JPq*=}~tgo@up)yJwqs zEojI*+KY2i(LtDrOxC87*;uP(4b2hQC8ob#V>w6tg*tOOf|QPYwrs$7$|6BB5+)>0 zqga7T8D|#yC#$8h!1snmxd1L0I7>BRrbOmRm}t4C>xK-DS(>wdxU? ziISx=M-^OZbVMNB%Us2>lBKUg4g3?fa3Q3*7R#ADe*fa12&njH8!-KUL=s`QPI`8| zw)z^uGf*5fJ?Pl!5+~li*FYkC5&MA~tD~6-%!13KLa@u7IYxl0+t-DwP#@c(6@YAz zELC1Dw4JYjUW8;8t$gQ)?{WUaDwNMu#mL!VIO{MNNVJ%vVs*F0nbO?=$-@6yS!`Kp z(9ufWFsKifys#l3-t&T7>il468ZhDE5fYD-IkEyG+ih(xk7tXUY}P$M!xErD4A4Bl zGpLk)et!Od5;I8!%2eyzRSKJioiGxoKZ?AJl?{(%HfWmkeRdu4N_U%~A1>16BGjw5vfo%hp_HsZ)}Sn$kyQ2{U6) zKYWM4ZSkYa^vYPU>P%(|5o-JS8+~bT+QqVX8 z?ea=~aJdT_#*FPj>uuIJ4n@@|s7SrF`9pLjdz@t2b-mq4C+9;qUGR8)_k=i$M}a;C zTNmonmTeu3hI6jyp}i#0YW%r=vyeCi710|(;~F}C+(Q%la#l6`Ck?q*(9_B7v{wDQ z4)p_jtM8C!Fnx2QqN)gu>j?2IxiLQ}HhAiXSfjO=S75@#tzTG4v7?dHO*~j;HKCjB zY|EZ*)u3U4Q(zGDt})}bqE(5Uti;MazLrZyGX~$V9;9Lq7T}7j)?zj(K9_fcZDzFm z;Ft0mxY}u)YCNjv_DIc7E?16yIchp9jD3g1$Lsu8R~sIm<#G>XWX?J~R|=s0?Q1$4 z;nfIULJagfDkJQnF_dNU=YGJ2NFDKlVAN}(P@4-OyVH*kR;{L1OV!#Fl85u9&ilK8 zI=@gzgHjR{q83<1t=7fAOWOF?(x=4Wp?VdO&F)w4m0C>@2@_XNjpWO@v&a0Vy59Hm zJf08rjg1>1Q0Kg96ACz*4Cqroyd4KYI!4XwlCLVn_f6LYuCQ)0%sHIoZ?u5VMzr!q z%xBVwqD1?N58YII{Jh(vIPkKk?WV|5Qw{1a@m@!MsWpaAKqv+eiK7&x!H^gz-Rkot z3As|~ir(Y%cQ@>c>zyPzsu5Ii>!@(iIKY;AgEH>}A0SxoKHl<88>8tPUYqR!^8R_$ zTV_hY%lD!`9MihAS*~?o?KC2o$0Gao4ZW(8{Y24lc5Q7 z-d~^bai#}fO$kbsvZAr%9dTe+JM<65{oM5u4qoI?Pb3DJdyBG+l317_j}g?KmDNm5 z#a{nX=QZ#yLH%=QV!5TIO8Sr{6n%HCEw-(*Y{N;Fy0Z!oBxY9wwj3j1{6sAbz?x;bb!bzc>gn2)9? zx1xJ_CIPQQ8+$r#l>t0KTfCC!w4;4Z>Km`u<<1^Tuk6~#$DZ%0$0|mdI9oYQ;}g`U zQ*Av*Di?Ds4CEZbEeuC#(I>s%;(7(c!Au=}FWqLtJ301n5c{)e5M3)l5Y41^QuE#) z8DXy_Zf?YIICb%8YaD@cByFfPr?7ZKRbw$;VX%8}IJ7#7YReHAMMb+7x~9&Se4{{+ zJb*&!gdy4_=j9=*B-LVO{l7?i$LL7g_D{DvcG9tJ+w9o3ZB^`!I(E{r?T&5Rww-kB zWU8O{{bSFX*?aby5A~&RmG5=k=MRU`0HJ6hvu zi}z5eYulB$9ea92M1+v{ z?Ih2Y%~t2e#KgqV&{4@48`uP-S%Vpn=3ANf8qkywtNqq9l(Eu(ZNNAS@&WtE+%&P zBRHDw5i0;`YUc{9B4%_8Edv|hmW!nC#;a(TOdHa6+IOkf#qbf9pYIj90#bs;LS%6ALXLiYv|GFk>%&9~SK_-=s0%UzI= z^)MK5Lh1gG{`Rl*MI&_eIZ32@99vR0-&vB(q%zB$7Ese!bUiPYSG3s@Y;yYzH235d zioAv<4U*T!l=mQG)j(O5HT}a%H*j~H^UQVRI6%YrHKOb$MSZ|7r4q`W29Tj%$iwY9 z6KRRe$x^E(?j)L7HuN)&@j1$Vw;H&-43QQfI8{R9M0gB+hk=yvG|}eJKRnjqs*VeD zh;oFC!QZ^TJX=G|w%6H5NGftCgIo0`{0;d%Q2zaSsTf(x+*TS&M(f1A<#qst$JK7F z_GDt(jJSyDP(i9|oEw!gwNln40v9dZ+^K!*bBz2*n1Y zo=L1z2()Mwn6%B%z;?f7axRF>IC55lV2IY2O@+&{?{8yomB8?MaQUCEHo1Ou7m%s_G7N(Yi8J?s7d^kEcoF5bq9~M;=ZG2 z6$=kl-;|aj0Nd+#v1yTn@i5j?kUgOMLE(QBL7C?QJQ-4AjenEHeI6j>J?`wn7I9|^ zdQt*A!3azIj3)OTz6^*+H<;Bv&DJ&jR&6soRBVqbU(ScQDTUHQG? zuBZY#YGju>m2aBB-ZbFGESer(^wVIPUPSLNG{QSdla%`xi zVlJzoFb579`Z98e_E8(V$hwP)*ghl;jzT&5b+J}DxKb4E5;4^YGQYS81bpayv<9+E zr~ZVc59F^!pyY9LvJ;f;sC=f>>vg(w_i)sC2Su<3FP!e_tVc*hr|SZwGS_j2heL?7 zDyMGcZBDJ}LS2XJVuWW_+rQ_}{k+P4fQ;W$XCH6$jZ7QC6|bJ{ISCI1{ThYZR|dBB zYsag~FkoE^$&<|qIrXZx=L8m^_V%nAuAeVMDmRCK57sFoJ?({25kt-Tu0dt}v7@_x;#(Y-65{|_Te^d!zwxch zr@1=dK!i8{Qh%p|t4Jr0`T>0JgD*HMMjhPTpzBmTIxV)$SZdemfSPxyxdP4&Ro)E6q4d>!Gl5}kKmU7oR7IAgN5 z{9|$SdDVBDL=^0#UTCtCJnNDYRy|_5h&{_8EU6IORlkLBr%(fJo-vh8339&+^ylh) z>~M*$@p(BX7ZjWF06Wr=Z*qtFomwrC$H4*X8Gr+oQKV$XL|lhA&%ujevKOJ#ee8K&&1+D4ofT0wlYlX|wKwr)LITjX@%8@ubdNx7h#l-!Y zymb3a*oiZdPK({r^>n-B{Bj74A9LU^@*Z0@t@zr$PDc$-r!&DTVOc;of^~xipIax< zLF*%)HEIvu1VXbfQJJ@it7{S6)*K1FN6=TRv5;Mq3^{xm+#YJd5ZDZzE*;iUwNcLF zq=A*(hrDHlqcw|36V+Pf;S>etBm&R(?km! zoRdl$6XgT2#7tiG+cy)`yv#2Y85L5F2zW)YZF7P0A*fL@Q?&30%|MD+#(l1T!@=9$ zD<4T21ctd8Fo!-F#4fKGQoiomdN4^(i?|TPb;YkD#ykyy>>Z;gZ=IT%sz=C3CT0~P zts-S7Ztjy4;-)b`8MR2@J4{tkVQyww#qT|Z(=(wms1dkTle0duk~$Fg!Why)(F?&Q zCgxWE30)k?vrUqgO~N?f8I>kI0NgvsV2EdiSK^y`GcMZIXq1(ext=dy1BJ$HPRD>A z0~uLaf65~~8c|VEVA_0&QQF4 z_ACoEqLQ)H<948T#U8mw0z#x%l6)}8Kv#x6zON;F@mL7eI28N?7)`a(g@YZK*_Y`cd$ z{C-Yvfmqs?JNjVK10;`daJ~zb3CvAW^gb+zhd za5Y(pFcZc3j@?34-s&0&Ek#A)go5+(8=#QI7mK=9O9?Vl>smPZ*K`z-IoC}xB^-p)Hbd9caEEO5T zB87>3n60SFQ#9++Mcd=m#(k&scOE&jv7{-~W^gmt__+Nt|ILKN>ALZ~DAX(g7mLR# zlqJ5iKh}ip$Cc8f>EJ>EKWF1EEpK;l^M z?%5-P=%Siid>$`-+IkvH`F@jUh!A^td3C*zx|S?!FpC#o@-pvbD%K1uBiiwNaYF?XM(*xB8U^8(79!)TZ*A z5x@UCgF6HR2L~ucT#HUN`CK!Qg=t}pzEQif%k5+d{^c{V(mW-hKpaF10r^Zdt*zvP zx0(S~MW^41zz?kWGB6&v1e7S{mKMZ6^u9nG07F80>W(loQ&;Oy!%{a zqjmVZEm9EI&IgU?^u#(a)I>1QiH>aZW6d~d!HX+9vhuBq(#Gv2SIG>oYIUW?X7&a3 zNT3?=GOj`uIN6%qFkVi0ye;*4quCEU@z1@soqvTa#<-0ZU5HeS0~UbB0MKx6daNz1 zcg52jn=qd~jkQY$8j70r%gI*~*f~PIOxCoH_N+8DH8dPtT)^XBDc*1& zzgN@c8*#Nb`$+O#(0KGh{5lmufIbMV@$3esd+_BK5bs%hcf-WEDs$|B8MeQ?GyJgr z+$x5AyP1udmtXvgc7$B4D^dSek0k#?JqiP=N5q$s2n#Nn0<3bcS+6jo-##C?50HUf zh4H?)m1j76-awRKY=-y$63s2Vp(BL7ExOE|n>lp-xdvo&KLXj@yl#8alXF8AqRD!l z3XFq(^$Z7d!W85a_w|hpO%14I9`58taJBq*aTA4CFw}TOn-QD%C}wolEw^&w+Sbyl zLJqM_epkis(lCg`$YDSp7cw&P?%o~_4o=JZ>k_{pe>O0IKusfAtsXv#VPffatap$n znTo|S8cK_iD?4~%_!7)&*Z(`uTL@D{Miz4s+WGWFYP8hI@gXt~z0yn~GGXKH({?{0 zxfvm~KGtv{{w|PeP=4fp$?i7&Z|rVUAiG-)$nK5=vb#h7x9n~rAiKNhzq7m1fb8y; zf3dr<{$Y2w{F~i9_2d7A-E9umTF?DIv%8zq3ceTZ{r_cm&;4b0*Ky2uubO|2h~v|W z5QdF+c~VXy*OWQQ?Ae$ z86K&YwXD7Aehn?uHXblNs@{ZPk}>^DPR4&-V_4CQ1%cTJ!sq0DEB$Z}|TGKNF~26A*tLbM8OMO4l3?u!W- zYv~jo2Jw#L*|rxtL{xnla1O#geNh=;%Ugx#@3v9xRGpC`-iSj`*t^$$L9H8oXc2{8 z8htRqy-U$?vR;@IX{aDGxGOyAQSOxUKkfO1qX)ElNUBCG$|#tI=*(ntmlb<3;KEx{jAwSh*Eh;RK{~%RsgZ<7U;mxBzgAd)UKk|ObVHm zk{934?fR~`iJ|!))^>j@=@CnJzI612U^V=BBm9dgV&uCa##y|n3ICwk;~NP${#Rfj`=>Q#Oa=jGMzsVP2@5B46;L@dm;;!vzhzu3VIDgX;}%y zZUf)k^@Vf&{X%H`bVcpvKj2tTdD4>x_FwlI=B=SrU-RN(qHHqv6#LipITmWZzr8`b&{RsBypNnnxVrhdMIL1S9Vb$u zrR+or6;K{q$!YA046Yz^5+R}anafAtR&(?Hi{4H58La@@KMM`@{TJoC=6|Ame{8?? zefhs*cK@e5^nae$;l~df^bX0f5~RW5$niJhFiw0&o%m8eWYu9ZfvIa<+ucP9|5p;a zrwO+Q+igMzhN0|v*VKl+Nz$X+2Ub7>+m%pO_n6hkyMTJye}r^^MUdL9{(qYwQ#)NE ze%!@BZWcq^z8^-v8*+NnPy%}?*HNcN+>(EvhrvTB+r2#;o&1x{`S~}S6F$9>6ufeB zVo4>5MK+-f@)|Ag54NPt)lR&Sc5xCS8g!OL5upM>)maPx%b(`keFk#K{RYL7aeu-| zO``lZr{sb-Q8~Pp6{l}|d3yC|ZP9B+j$MgXUvc|@eR5(8t4sh{$d{UwS*+TgrD|2G z*GL9dFL;=ocvfIW4VIRc9v&XPyu8H4eM^-w+xqHnBlxe3&CmFJl!-*n)&?b8D!NAY z(^h2%JY{of0nOmLGzI!;_Qzfc@bj*>raM&2}J43Rr6b2VuMg?{CA} zc^tnNF2-dTy8^2X4A%7gXRzj9m~dc3o5D$9?Zn-e^izMe?icQnR^%$aQHrJy8BrFO zG-0WEw3?V_YfFoH{p2X?Zdmx`2YBaKs)EA1dbvEV$fU~$&06GAs%*Llgge(Rv?OLh zNJ$dEiuJXzjdwM%cT$2#CerK(!q-uFeY8-4V+HGFern1HJQPGB?NGZEKPb(+|4&$^c*@=jD zfB+s(Akm41h2`w@w9#he2Iy_`ba!{)#PuSAG7+w!A7M)Qg&`tG*Ur*_`zZvj2VG0c z+v;ti*|)GJuNM+GJzAH) zEY6IA{svt7HN5@|eN+7E4_!!b5qmfu%76}ScMlaUhNS0Cn{@#p2l;7)x@W}l_>OrN z{sR)$JCDz6L}&{K4@FMZ)Jx2HcZ5avnJRdoaA1HbPVdClO|2{+ueUbca=W}pTdMO? ze_lMr-k~FHZ7lvo^8M>2KEI>mwdMeulQWiO5gmI|eMJQ+1rs$XTUYjn(0D=j!b@v5 z;5tk~c1p%Y;O(dS46?Rpsav}aXa6?^u{>Q};sg}sTN+PjD>}advdi#dFDs+(o(q|x z{_ZtQbDw461~Q&nWlcv(+pGB4UcA?7=3)fkGq`|-fe5Vk#ApBU_}YN@+TM!#KP4#; zwKA;whfRKCrPJp(H_L)u+uQq8`yqW+Fs`sNU46|0X*hUz8(n^%z@2=J%h}@a@Nh;( z#>HCG-}Diorka`=khp3?xk$zZqif1_{rJ2d%ad`N%37`0U^P+C+7H~eOcHhF`33i| zF37&x1`a>TkV2|l4-tsrIHTV_*&aIOD7y~4k!C82F7%rk3y>dv@r>RN4j*)HW8qp#YhLSx()S6fdn*1Z+Oqq}qs&S*Pr9##cG&}xZIMki zl4?^ON{jQ|ZBXZBs3@VzU#JQ9;q$)3dM9u`802a`L+<62nw*5U!zrt{xWTI>5kX-Y zR@A)OoFVKS!MVQZIKOMlm!6Pu_-eFs=>hM)&Bs2f$d`zMmaqfaJSquH)}QAc=14SC(_`T(1DLlM>dOZEwePu z71LJWZ>XZ#!< z-p@Nhl%FdoDERUFFw<>wrO{SfLPA1D25xz|-Q)JGy6bXp&-g#S1c0s&$%GH~x>=P{ zk%lk$n`u6{z`vpzY0r8ImW|ohfQY9{`zJ+>?0uvM8EYzUI@Jo^gh+`=L}jdCcU6lb zRX}VCge}|IGU_rVYQydP(XAw<_;`p;%Zk)LNTDxNkJPP!8l%+eIdF{T*5nSC?EoVk z7Jli^nknQ_M{pOX0biI$offSQe+9Vx<%}O7gedi3HiQEeKkMf_In&LxS@#fJfm?Y4 zzgWs+(^BF(_MH8B!}*86v1v3a1g1Xer&X1hjm;BTmj%_NB-IIHOn=RejPrOEcFt9N zbiL)^B<;oH2|fCOjg(aEt6Mbbw6-*|fd#TGZnO+#ZCzDWMa4~~+VM^f?*SlUimF<> zc8h3-I%a5bVj4{lkRde)CWV5rp{bvN>)a>M>S_aIkbHPQK-N)Ke8i8&Gq>$loR}x9 z&jCV~J;e&m1tqWM6~g_DI8+JsE1Erf8LCR^Yq4?LO3eevcjcB$J%VB+;d?c0m&)prN4!0h_+B7eL+FKh)gR6x;^Ll0Ioz(z|_lXv7E*WJf(q#%XYwXQVW&R?*9Vp|j0nw!+YknNEJ)Z93LnFzfW zI!%^zN0xPz`@GH&g6zM%-3+yuouDPj))mXmY8@tq!s*-VGDbqK=;mxvK)m|A8`NpE z=}46dF?E_Fye-o4IA%0=VcN^wm$d{z!HnO27O2Ta3%X#cc8E9(gPN=Pu|l78$aNWb*DLbr#Gk ztnKnKK)TXY1fL&=qB(j<$`ylRi-%JGc_-%Z;6!^&fC7bHniO+cQz!gESxhr|uw1zl zqm7o6I`;4Fni3o6t0<2qiP~tR57| ziUM#h{-3P)qW_r{|MPQeQ}f4=V_X8NykA^2UTHWy(G|WKe+rWmB>uG zb~>K6aTp{*6J2wBd|YM>cv*d)I&8K& zGMPms`^frw)RN&D&0m@E7AWFLE_Z?x^D2qkl~!b{iG(+7zLBE#fKrfNTjFP{C?k32 z5!f5$*njoJ-Rb>uZfnRVp1d|JpgXt{FXqFakr}iY9Y64DU+42$C``MMYqCDp1nwk8 zV=Z=`MN?&tedd*FPp(Ar2ZCAoR3DfnupRg!?!*4;%{#SOxx&8mFstfYqSOR(k&Qj+ z9;eV2)40$kv&12Jt;-3UiVBQ?y44Izfqzn@06I+X5vqEcJCD7S9a8;)u7Q4#C2rpx z)RhGMR(*Dr_sa0o3;*?~ArI?UfYzQXQFS&6F`IY>pR2)E?p!fQ z-AgcFKu5cOC5HWC<$lKSDuujEjZ+uT+4HkC^Y!6U&+k-9ib2fowxE;eaC%UggB*O= z35$h5ecR3ZtjEVI(>1&OeCd1BpP@12jCY>omz=Ds8$OTjI_JB&75?e*l{)h+;E@U_ zLXJ;P&Yn1L#O{Lz#%1vfPgE`gw9I6Ep>lomIMc>1QMQ>nfQ}= z7~lsjf3nC_FV(uS#1$G1JS<(J8K#;Z| zJO11EAVi2OUorW*OEMmzHYp_Ep(NtA#GsW!OMPQxJ%a%gsg(Hkx+Ec`QuovYofsk=OLBz%`oCeFZiOK-8{Sm_{M(CO(Up+u-tUBf=Gyfukbp zO*R|Fo5kM}{*VNF%fLPi&3#KNtQ)8}L5)G?{cIh$`Ze-Tg97U)*5e+?37k4wVT<|7h@yg)BffbVd0dki;Ig}xI%+PMWm)*v+ANd#U*MgZ2u`SB@!;dJS(O{tXqq9mn> z|95+Z-)4}WZQNcz2PK);G_4aADLe&9`1W9B_CF-1NMv1H1EO8WnF`$G4B`C@(1Jm7^d-n7EtDWTQf;@p&^ByKgH*j1!}|?3*+z;PYip+`B+R{DbzNOu z`Mtl~1Gjp%%fE@(*i`d90yg)53SMT5U(*gf#KWs&#|?#&SW_9FH&at3RYF-CBqjXX z>>~Q}sn~CITF|B6o7r}&vux7)Fx!P6>30Ru_E~iu4{2~Pij}qJjZr{L6v>!}9+pTdo z;d>?eVAos>Pi{Yq7FBB(bHbi!yaOO&K&?^DvXl<9q(|9?D}sCmmIP|gggHTqC8?0(_R`9!+#)k$U7gE+}SEBXFyX>#F+83 zRUdaq+FTfStHV5Fwx}+ib)B^EqFDJnh!D~pd?(eL9@McOeMUB{NtxK4iOdnK)=tPy z*akfVYCOR~K^eRrH^(#iot>SPm6b39eZD$`u?%Tw)Wvz>p00w%j0^yW^&hly&_g1) zrUQwRp%AvBc+W~THhOkUDK78#^S2E!wDRZaa?lqnq44PWE43DkvMwwiTH{rA1=-_h za4>X;*Nt~DNp)^oJdNG&eqS{bc|Mv}@|ZeO$CW$>kv`&Sw2`bq!m0Efg+5C~Si6^= z_K~xtFcyE$AHkMPc^YJc&=FQ^qQuBqL#w1Jb6#7kJL+F|f9@AK2o_9P=J^cZz0a}A zkqsf~OMZ;m8VU%za^b;~*0cyS3GMqKwfwdg{6n%z{E@IEk@K&q9Sjjr5LO4ogR>~J%LU{k|*-|fGB`Znh*9RWh z&bA%=s#*yMFLpp6@?OZkJN>OjttwhjS?b@w@GT&9-CEl%6W%sU_2Z0GpFE*v#fChA zDo$ejuuz*F$^^ca_@LxY)pQ?&n9?t@_>C(GpFeLVWg_L9t9PNhp8d=XS?N7X`oD+Ov*ExcF#^C!CI1 zS$6$t>YzIeem5f}i#8$r17{K4=oLAF-HJF^aUxH@+%;=fv!|7F3pQ^D#kcAY(c1SxLb=}_5hF`PO7~Gr5&Pj%L|&7pKWG+ixWB}9y^um;#}n$U5Iyd z2BA5cgIbb7fs(J)-JQTSTlkF=YF{85jcUk9kt!0i)Av_-HU_q>@d|p!BB^4Ui$rHF zWik$W^9xp07NNeg31fs=w1mLe%+xJBbBAa#8H0q2B=`@!;V`jVso z0txTl-c#*9%hCvgXk6!2jIhUUR)^Tjz3eGX81T!8?*f(TCg+9T>X7@;1-V}`46625 zJ&$rX>OztGu;sm%ho1k8AYNG|`XG*ekpj7wzfL58Kv4iDZed72>`6x!p)OmHW@GxG zxBd+Hu%Oytf2!)^j%MF=eJi;70WE*-v^3HcPX75u?xUY=2FKtrhw@s_@G*cnN`PF- zFr+BBm4(<3I`PIBf5*r8wecX>hdlNU)=L1Tgdun*yCwX+`fNWru2R|0EAY(-?BsRn zSF7je*QCD&Xh<5RNtAAwq(JXd(`UDjp8BELZ2T{_0hV6tBgp4ymy+1$!G!0sL|t2T zs1Ip5V6?4s6+YOh8d@+`o_kq06#N9=-+aG(n1@Buw&vESU(=R=YBkTLb@UumuHfi& zq9(4NAch{WT?ym>{?g;O$Eq?YNPmb{?RF)RROOwSdwAmNFL6(P+I^w?RGCj>-OQy#4B2zzAhN*#gwl1>^$5di*yqH z24^-O;!i94`TZXYs`qRs`K5Cm%tZ zj^$kgcIn-cA@7Yup6!@1)x8225)^Q5SL;9OF9>|i)c<@?gt4k1f7ccyEC*8o;%58> z)&6;{ApRA||9XHX+26Ma1y(EdcYP!%lcXR2CkxzE|JGQv;e7aV1NP4o@u&Ny9X@hU z`AO$>q_wL7nS_k^j&J-~txO@M(>(+Xz`*cOUOM&TDzu6Avv;GD67xBIPFN9^N(v9@iN1%6 z#g*ny5Y1n-xE&v_%%=kGt2>;zq;!-I?@0zYht5F_I*tH9E8sxN+PYk=+=Ujn;W-?u!bOA|g^#$=O9My2A2TDcb~lbICbz>(q)2h+ z#Svw{R-p4U9IY`{+&(jQEso@Dw4a4KNhv)kEv4dBwrKlBN8Q4DcelS!>QA<$Et1(& zWr=o6h&Af~g$bf=Sg(&2g=}QIjIaeL+N18WV8=;BX3`H|uVg3-27%W1e;O}99#yfb zlpmck?b6H_vB6S-kVCdG7Ol}eNG!~H718QfdHaFGwT1mHk3dF0C! zNl>yZyH4hzDY+9zWvw_&aCKysG`}W(>9n-6dO6OI0T!Sh0cFvvt1iR7pZ8}=NBjH7 z&X0#uNKgi%qnh=U`!AM_cCl5NC~2(2l6EsdJ67;>=cY@oM!gk@C^UZ%;uK8M?FH1$ z=RkZHB>l^F>v@#d1NM%19MDR*1;kGp&}_q8-k08l!0PXQ_D_Fg0iEQW2Qk<4+0T2~ z9`%dYgFXw{PjxuiT|A$}odyS(g(<5zZSfHB4`)Rg>xrk{+siv0=`n3XiwW@D&kmN; zEqvOpHe0(1Y=cZxp2F28918BeAGp=;AsZ3JHcKkqdGShKdw&d@f<`4-RihK9+mzx# zjK$~GV5`ZN2Nv=zdQ8}I>-uiahR9cmeQI$qUdGO6f=p6}h z1v%{ISzI-Ka}SwqO}GdX;t^41XszcrGe4GxBVIGuuhxAii-hdzVSY+0SBoLyRNlSp z2W{U;M(K@amWBR#f9n2t*VYxrG3UzWb*eokODqbK_IkKn?=*eH@$CV33L7ZzlxJVnPAZxig^-+-z2-w3M6P? z!IHB)Jt5TDsf8Y0QcQ596?tOXvr6DT79bAv(Lh%0MtoX`4XK{aCX7gw?fmp$^3MuW z1uyjdrTzmkK%y(M@XZYgKef~RB=9H2!?TSenR3h?4ajI=levj{Ug*{rpXTD#KFDRf zH->m{TR2q#0V;{!F$Yp<+>tM8FF)x(I=b<2_K;60y;ua=ZYo&pIZk&?D zT%@LY&-!T#Ea?x*JRn@69(x5(@+jI|wgfk3vf=J>xbKq}i<_|4$_yY3qB~o|?Rdr} z5F_n~=Hug|su89k2H(>Zr3 zI_ikoEJ;oBh^=XQn7z?o3vi&}a7u`BzD`{C_#$+b=h0|U^=CfB>-{YBP?W8MZfQ?t zy&#-JCu8>;m&I=?3R*-4Le$sStotb|5WJBGEkAl{KOv*7#swq6BOZbq8m#2hAHk{c z*CBin&`OgcyQNErudWW2S~8-}(<{f4`Dp5>Nl5A=dGHWmq=ygJm1@2Ns#EnZTrC4u z_>wE%G=-6UZg@xj;bL`te!N}*ZTo{!I2-Hh-rnBbV8iZzGbA@R0CB#5{VH_S6(xBD z3L5CKUsf@bVS*AxSzJTWl*zL?2@X)bS@I^5{o1HNnH@5n0N6ru0BgX;^47nMe&>oyyI^t5Kc1L5YL zm(u`sQMoJHpdb#K4%pLh6O8%@nu3e1EN?EwlW4D@*|ws;QCUH_BO`n1WPfl!6#aUf z+k`rfIRiQ6efZo!b*@wWX05}8UYW=ni*nic`e&wtptJEx>JCYlIb+Xlgpakd%q5(X zNyC(H#~iWqz0NPF-htnoaflXk42}=Lg;lv^7_Nj|g~8^^)`SYFBU@%ifNLewqBZHo=KMJ=*MqnfUZ8BNT;9!$gZUF~fnyBt?*+#npEX zk|!pE*Z2Gw$TB59`<<8jCaj3I*M4wCeH`qh`i*B!EY@=K=>oMW6rU=ERE=UF#6%`A zZLoB|J1CN!-I|iQ!7jG;?ip)p9bJ`08ov_Y#4uE1oBtzVC0wI8;M=8xWSRPWtS;9M zIO(iN?b1${{f66V|FtpD!saAtU9^0|{Xyy-vSCbXmq&Oyp|h)7zbS0dgfjXLv;VyRDXyWv%fQ?e5K3saI>{1IVRN z2J-0-RN?Pw@T47yGOx0nU(rN-x%?l*(4Ed~7ioIjRgexQcprL{CdF6kKh4h&spA`S zV|^HteHyi9M^$w7`$mPhb5f|noi`H11j$2)iFw~~E{@7QYbm$;DmM#_k!Kv{f#@9! zS9hH*wqY&TPovpWcazq>@AWUv_Ql@usu46(@&bFfTl|b+ndS8DcrG7%cRz{p7OBr3 zny7|M@FdsK*T}xWQ$g-Nv=-%}J)n16hEpCj>v9G36g)M@8j_bEr#;?RjPL|%{0NKW z`-YaEaUee}i!7tN?%%9e07prIMG2Yli0Fr*lo`SV`){op)R#cje#-!ehYasJ5Y&lJUU-Jh}_q~{#($CG@cnx$3n z#ou8YJT@{2ikYVvFhx9BvWg{Xi$CttZ2!QsA`5qk%}>qNcaW;OLcUrrQSy|VCMfy9 z>hX;%xQ>VU`oO=pAqz41#fd4@@8032@;7I^$kpWN8mX1s3C{&=sZg$Bm9cP0=tmff zOh?It7lBr1#bJj6r%t5rP;yJW!$P`Z`SHz;aJB$6w4~lC6D(6BTSPri+K^|p2v$Qq zRrcz0!}35o#V!=dEw*ZmKWv#IF3Ho3Q>wb349g9`u8rvwW{R_5*|RS%&jx zPG*K`?oE%i(z&mA?o6IJ4{ALZ@i@6hc8hQ|R2xh5r0PcG+;)0@S~Fr7gcX*%G>u}z zAXxg0Z((oj4oEi~V4+&MKc?#=MAI-J6!uM2c)ve7VV zmp+Tjc?=ad|ukz;Kl1bIsz7n3>YYLFmT$}G+|b(Fy#HeC+v zy>Bjc=%ko)k{I;aFyWKK6EvX@PF(7&s zA1?p3S&F!W-I?*_ZKo&@8gdRwVoGatTzF6-0lMS$&e&*hufvk`$!6zDlgKXGsCo@r z;GSZw$=+`-iUR?kH*~-V8VvY9lkofzA~?HO0_jg{EIO)qN+TsH&>^|@Ym8TSvNUzh z>D~-(7(h*G5>=FwcCMIjLb4L|ZB0x-i70(fYR*n^uUIA;BUGj+6@QS%V?4u3Orc4~ zfWcc(tt^9Tq8s%!7-=?`NcWTWXo6Dx-eiP627Ak3tl@rWN|J<_i<&nqHllWeE zGlp4aykcU~4_E(135H-j8?wQo>=-l_f+%16DVrixd|H;{ zX`a;37WVl-y-1B=f z!O|epa63yER?!M*jSq>&YEDJk@of?hOC93?fcCH36(@{5;@&;#pFAf(fk5y0#L0Xr zQ?era8-tchb8Gx26@4>yZL1yF>mfW$vK|@B$aUpR6+OmOrX#eZ4bhsiEnQ)G6@6DW z{HaEY?uyGqAM5`2vhMlByYbpsjxNefjw)T3jujym`ZP@+sx11WDV>|Bs(t`?O75X{ zej^VFcxiclgVk3oe3Ym}Qui!AzmwhP+Yxw?urQv)6;`1*pLoPC<1kk8FVEdDu_C1> z`5T3@oWF@+?aS)&JCna!r5)=wWb)N{PnU{nY0uu%m`~|DySB`TeSb0DmqXp8o{DJQ z_1>w~cW1(;QjQgC8`G8`FL!S&uj>o}nWg1xAfb30Z-Gsw&$u1CBB#QG>_KSYI!{|` zaWdcVCefla*d!%_=P-p^ttDpjDQPQ&tE{~d)8^Lt$<_F^{bU)X%JA9gVTOx@8`v(k z(%%7^%$!Qg#f3#_etS3(92{(FYO396;{oi5UEuhZecML}-}=ojnbx{DR9`4-*FeFy{vvR7k^iy=#E?hy#qkv6bhr1X z+5n~hr_g+__&*v4jUlE=QGHZZd#vDn=29cVbXLbtAzkthV!c)I_{-=#f*y(9930TdVh?TMl5lEnuq3nbsmb&Axd)|+( zHej1*gY^>d1T7#i(6Kq>*hLT|S7dn}A z@fj&il?cify_!tj{#tKMiE^EO)RC&g-HGYEd0jA@%|RzC@oD^p5RiILrEi6#DZn-Q z4$n9@06q`CE-e}FnERrH{ME$_9ql_J1s3%x))`E&F6+vGGiz*r$VIp!ub=LIuUtCd z!$et*N7sYh-_u5ngMHv7o932K+p|knm{8hHzxYab8Zipcu zKb9OE&#ahq=x|_eZjLZq%D1Uv?{JdK>7cQF0SoM5WM@~?)YR0|<7Z?fOlIh4`r_{$ z4pfy&VxPuP8?8Zs{`4~ShQu6phC7xjjPOGl@>#eu8Qwhws;xqQ7tV+*4qKHJ7h(AN zOv#KowzqP;c+F_T0$`~+c5Vta%xE5NH8Mxt6?Q~3fm%sMp9LQJ6wq(yp}&2$gwx2siFWGnPW-CUu6gfvC23Y+5>thi1kB_Y?5K7}{4#%y6aMuxsvP?iqd)*_JO#64Qd;_nwVeU{ji}L~ zoJwJ^nF~rB#sYBaI~JY@MA{z?@K1moad(C8RIQIJKpS;+_(>8S+Metk{5HkwJO87fB_@CpQquYN z_UYTBQP2HX%h}le>hQ3eZXdeXlUb4$E>hWJluN1N9Qu4e)G1E2kr!=J^n;)8st~U# z&=*HSDW79IS+oW1NIyhHnPOA`AGo1@gRrk^EsOv`KE1ci4J~r;A+3-AeH{;JgXk& zT&!Ji=G|+lBgWQgi$nhXl2mAR^%jP=U%jzRE_l?V#P}6GGhH|{MaTn5ZUS@A%$?zf zD*yB9gp&OEeGixgJZrQ!ta)j`>&E-n`-`;(xBHKOD;S;UqaNQuOr+JXrwVWKDbNb* z!pQ@yqD!9`Q$wHjveL>?{;Cf9j$e{)_xqRfQbVkt>7ziFJU63RVdABI$|k9Sb84W9 zfm`8nz4IwF24SDY*6HA6X(Ma9#5Gp`ijdYxYj(%hwhSuQhz*Zgn?GrV)6>l+2hD-@LND@ht@`*t7{T~ShuDRk)k@Z649yv9;vitull1op3F^M5Uq{C_Tx4KHiezDajuiT2V^+408~<)sOB4}z2f z(vWvF^fK8bdc>JLVvp8C@E;+{Tp0-Pltb!i$@0r}y$F^D{Zzn$1m>(-a%=^Pp!dE3 zQ>aI8(8%y_9e?#Gi4maQL~X)jwn)faiSwXdc=S48)T3a>-{%@uB^qCOZ_oE+d^x=Km2V%Bw>X>koqS}zU`qn!rlgj}1~aVMdntbBm`68# zc_6juaGs0H+x=j&&!rvHBizJ`!R)pB+2^;Q-4z}CC+h6|eh!9)Ffout=nTWSbx;vv zhcbO%BukLvX@oiYAIb>Iq}@o!=1DVMt8=-{u5$Jo3!3$%J7iV3VJ?A02y`?wQ8BT> z{{H#-d5J=$A&}t&col@vS7owtbb~ql?Zr<~Z^Kc|d4N`4lgB)lou`X;=eU(2;t_?H z2)t#*O=?~R?B}xky;@Jkx?azyefSs*?{4Bc3yJ6U>(i7GwY9p)^SbWiLkxzurj7S< z<;v95%-u~^^99H1GGZaFRg0g+0-X9M68B(o7VK0NvG*_U31+K_s7%SgH1Qlz;i9l5NHIT z&lj)(iITIgZ?XLi8{}>UFVF^0=Itzs-`PD-mRDs=KLtQ*#zpkGUWEdUCnF9`*_MyH z;%?!?$X-*SUbbIzIyODTyMcq1cZ4A55#E<2O(vpm>Ow{E8Q z-lZ`@^`@2R+scVfLor`n;TB2#Y#?XUfT!6%lXXl8U9=muAP*e8PSH}MlyI4Wd+7@5 zfX~|ZyEwiwo+vae`)Ao({1Dl5o~`K;$%~78LSXulxmJ+w%5amhU;(o^!dgYF4r2X->%OEjLEz5Ii)1*F6_M=~QB6VOukLB3MU zNJI&qDdxHM{VK_?Y_d3u7g7INCrV{v{WEN2X6RcF-}ANZx}(U*Z2$W2w?*D*(s`Oc zG9@06G&K^QXlQ8>laPQcG`g8hO;795#|pAYWoYZ>Ql?k5eZKP}UOjt0yQp-O_2_xB zEvbf1TY#5@dl-<%R(Dyr*yoqKGa>aGAu|BYZEES*m_h$r$nAK>a$~foc*^!HvoJX( z?_tq3Z9Cvrqv5fGSh%m7@q)bGWr7kIn43r+W(t9EO8J+qm`1++j2{kNKuc}1-fD~B zJT!oIvoW|K-iS0`{Su0{D=FQ4hKOX$&o|+$*Ky_H$U&bcp(xNI0?*o229{arfqahr zd(C5@&ojVLeeWG?4=7SB3)wKxeOsIA+Th#_yu9?5`sVTY-DyJQTdy7V`cUwusl3+* zuIg_?TJP75-iR!n)&~=^i4Agn(+>=OugFLxc9*W>DUcm-{8Q7d7XQ~pe2O}It!Y=Aehi$gW@)Q$<3)^+Oo2bFj z-*)zP*paogoTMhy#o|y87Nf&+9j1M)_SDVQ%`NYmI`kknbaM97B^B3#XqZhIa4l&t zDq!S(F@FW-PdiN?@LJqkWaYTxTYr?8uSxJeNJI@yS3_I_TFGs}!y!IHfUNQ;&Iyu|o%8YaMGECYK+A{B5TztPAjIIWscyTo_&aqeH1==fJxI|H) zD#qJ!i17C@_-b14L6>k23LWd8MXp_eeMX<11Bt{iMXi=@2}MMXw$9n4O8~ zX_0@6v7szCsJTpYzLFMexWJ@1PPt?~*w0F)!e-kA!|b5bjC?2SuGR3ge|RadiXJIE zxDQik%kfwx-MC3mZey>@D@M|X3$rZbQ)UsXV`6!q2TJ9Ake2&S1B{EAu=Lb&w_B_j zJqGLncHeTMF}_d2pVek~QDMZmcM)4HFuv7>_g$i@8R~mI(s*u_ND_e57-F{ah8K#~ zgQXf)AQ^1rE8i@*6YLftJ{53$|0Y5%+xom0hud!tgtI3HsF?LNK|bcj+B9Aq0zm#e zRT&EG@S&2ftec$XaTcb1Q4iAz#T%mY>jd_;gV9&sCksz$W~#QLF7SPPQf+i_yV23F zCp6lNtVyFHLRq&^1m+*TGg>=eUbzx6fNBWCye{#boWxz%F1ZR+;ZCz#^Zu(BR>6&E z{3kJp=8>QFQjb+#Ulq}WV@JVvrQbI{I$mGCtJo9l(Jvb8tw{Ir{z}DI(L_66Kx(}M zf6vD7>Q!N=IiSX4NnwyWHh^A5Hncaa<)*gv=ChdM9c~d=@U68mXS(7}XcKH=gMh@I zmbLRnSJ~87^Jm^J*&LI?48;x=k%{8%+9c-3E}iKiIov)X;z_YlqZS@3nJiDAh9%$w zd2Y;TER}0XT7HJpNCTm^Y+W7OUf6j=-#*|ig^6#VR*1umMbA9=sBeeKxl!}u!Y&d0 zK-fZ@7?75~d-rx>ZVpN<;pe*11X=K!s5=^&gGcsUCaoE*Lgl5_Q1I)9bkmaN*ZhvX zW<)gyC=|pHT55=u)G8Ac;b5!fbNy(TLBz-3AAPEwm>;i&hJ;172Yp9)2Q6=JU!Tu8 zwcYGDAy?u!Sy>}OLmv%z{*ZHUD9IsOQ+yXZP*jrN5EbY!`#RkmbNzS&H{$ZIoY9j} z8tCFSYHnOT&$otjG7`t?Pox5y$ly~Edl#>=)>i_XtltgLInay~=od3r%yPy(f}Omk zXTXGGD|Tm##^PLPiC@Ame`lUmn0#O0`tdy6$a7mcc*1(2LT$meciq3h_vi=xTPHHi z;{y0E>kdsL^fgnOc^)ldMGfe z7m^>W^%x+z0N{5jGj~2sU}1A)N7~d3ct!Z_b9tFOC{gt+M!*Oe%#TN^6Fpf$^8}EG zv;km%#wf{lf-aYzypSAvZQq&YVvzZktLCyDxGY22o^E*~b^JE4nR}zOvLh)KEA}pw ze^ZAewn4`Qnwr}`)Rcj+L2pSei0+*LjeO++>+ffAYAP*S`6Ypwq6 zS|i&QuHwrblMiWE38T5`8g3`BQ5N@$W3sc#4h|frY~Ep!>}fx)S~F$y)h?$ve{h+c z_4*HuSLp8vN9#nGj(&}NkCqtO1>(Gu4h7q|8p=0&14fSwh*aaPu0s}BhE>m^_v-}S zrHx=mMZ;-*xEs42kKIOWBnLYRlxHX&G#u&(*tC|nv(v}q+RfSXSUHbf0VZ6N+G*rG zn}R4k$?)|suxBxyxrmxq71-ZDF?Wsouv`1hntddnvJF_~rop>tn3TLQKcfqy zUK)}=*Aj^(hsCI?HW~@hmOgHMJT=qeEfCRdXKVX->*-5_y7wmL=GlL%5HTPmkgGFT z<2f9uC5GM79Z6luEbmyuW+yyrkZMubrk3UKEuH|;2k0>WlD9r?8j;r;J8a8DffP01 z0?H-AU6K@c=|1;0=dyoVZu2M1Q$$&8FjfLv8i!hb%tZ?I7~}|2!7DOt@F>%T;JxR zbW=e+vE2w>T62CDq7(nD5|lx$tmgm%-nSU@W*bjzMv|6nUUYx?j@4iGVTH#ph&`|v z3+nf!c+WUyiTYV9jochJZM2gm{gPXhg-J5Z8=$U!MA@bx%cHoUswd18*OtJbK)0DM z)JPcMsz-WM^zD*_93hR&mNyYm8g;GG{%Ynv6$u_9N60u!NvOR{92CNlRUDDWuFxI% z@Fu|i@{#(8&F-+mk{ooB#U}jrGD?C}ec&TxW37_wUek$PuHUTjfjG(iaKACpRp_ zpQq6du#Q+);xu7NyIfPkeN}NY-kA=E4GmawFUo9pOW({#Z0Wv@v$piQ@APQu?f0h; z(~kPI1gKus_hB`7K@&OWm6OV_jBAy)w4o=&6yG0|R9hXR#dYUuC+|?$WQs@3+f5!R z{M`8x8uWPC0DsLyAPDc z7Co{DUN6+1TgYuoLp|~~-kr~x(){Mdm{(BRSzYpFC8wgg>%gS><6QxPKv{c8lo-hY zKSp(&sm!ad|D}O-oQpIvzdQpl<{rq$K->dQ-|!cNpo*X5d&&qA1t=~pC^mU0Yln?n zpdIfL*_kzk6iro6Y4~nyxA5Kt{47*Y0eUAnO&XGmOx_+GC{`%wIGF!SVXrCU9` zNRCzIgVl`srAYqx&fKzk_>c&sUbc5~tMa1&3D43|Ss_~`2BOchwQeuHGb4fD`H(1< zS08=@N_X(jIdAK}G!jK5zRe|hf5<}CxQ?|yIJ#D<(+Mi;VTeAQL+L1)38z|fY#32& zC&TFZ1(zq{P}^C@y7k@q4&NB?GAJIeSfk+^DEK}L)84k<8nS^J$RzHC<!OGHC1I9Ph4_|3FSO!lP|l>H3$v1jEDVr0)IzOpQ#+Z;Ygf1cC9(9mdNEg z&pxA%WpO~>5Grj5@T?p5?`#G`&Wz5f@yfp2sp>9zC?-HUlcrcQl?D~UZRGb=EK#up zc$6@OmhE2bg`GC(2-MsT3S%(W2-?g|vD1{y`F4K$s2f!FboOBplL9|Y+~*Q(sZTh< zLZb>&jG`*XgR+y84EU%Wcv|0mHUjkqdG3cgw&UzuVkgKlmx^Dn_3Rl5IC?xRcejHw z;urLi2vfM$%?hmUGH|V(>TmGze8@9PhRQZtWl@#d1lugd0fUb zXKt=)Y2xN}5Qxujd|2;sWankhH_Wn+3mRh2Ncq#H0=jQ>G^QdxPz36894?E^-IOe z`thFUb!U@-P@@i|&hu$`87YU!(J?{Fd+d##Un!kxNIfiMKQS#Dw|S0VL#QuW`BZrH zOC~UueziwmP>Y}a&X3w@(JT;5k*%tgxKmfkQ~<72zo6<*dBv6zRK?hFBmS!qaJrRb z4SuL}ichUMsrhPs(N=TcHB8g$E!3Kt%WK3|4U~Y-F(?q(K39QVqw&XG=0aa*?l{)g z$xd8iFX4!^Bx)k#ztv@o4LQLk1|x@uhod?2rjWZcBtNHKG||)3gR}+y!H-8qMg%EG z{@=15kQaF)rAWiwBvLu78Z#jm$hB%|zy; zC!%W$iiG5{7H8*ZUNPcMRyc4Ebk_>K=%%aBcDw7UCb@g{Qb0ZV5d5V&f@N+kT3Q!3 zD>Gw^&$TN3I9SXf*qxu)4dd=@lU;Z_gwwySJQay3W5%OX7s(#wb{KrSvqhrp1{ zK%{!p{H1`DN%0S!lv7jl2T#IEQwRsPehF9lO;TRd!N@xi9GsYf5G+l8@e_}`S}-|Q zChpz^nO8AW3Q!Z;W$uiQQlXNAL5zz2sB5gqMqR;! z4VXHtSFBAG)nVDXIARZ^Jf z+Rs-FueYdJQ}D23)yuR;mRiX(lDL;Wk}SK-DSrt1i9te(QF;k%(OfM@bG7<;Ls8kS zT6Eb_z0ve}3%_SAW!Zj3ImIv=V@7Ux?f(Nan6^efJf_Ra{@rMaG|)j-t|rF9D3%HK ziJ^%yM~Oueijm4tQD@7y1H&%u_~=0rWr%(WX?XIq;I-|NShs_paXW%2paob4eDzY? zHpcy+gC}(uNqF5{9ANfGH8tH7X%$G0x!hhJ-QW8~AhhJkkAo_XKk;2S&*kW5?8=FY zC6wevRuCc%VH$2j&B2TaWEwiadDe^UU}-&4F;P78BSMCtu9y28>4ovD{Y3e!G@+4; z+wwx%;<>bh9^HB1%XxEu@bl7>Y>E0noC_3|NZ-I*&QdEMJ}vbQO{(F>9Lo7|ztiW% zWqD!8zD~H?*yIQm4#DD8LjOs8k^zaWJb1&jmoxz#a(=jB!EnR6XtT|}=PRV_yQ?bH z3m1CM5+%prX8i^mcaR1!?=qUlFOvo;%27<*y$&)T3pEJTA^f`7iq|JXrTfj2g`FE% zNqv&cK+`U4!z)Zj*MZz+Z+x7Gfgw-@D7{pIg%qmBxWl!oD2J!dBP)I09~lN&&A;L) zmWkxqnloZ9sFIm{A(jH~F7#7b!pl`wP2#@Y2_qgEjD#faaLN+5l4Q&#KxA-+ftP!^`2{a!K*xqwFkV8 z2eq(j(?XEK*E^0+zk~P-0oxR|_BKfQ%gm-oESZ`@z-i(9w=mO1knYOy!80NKiEmQa zmoX2ldN?^BSeCp`!dUC%624T+=76lrnW{5C_gf<2P_Gth6~S;?HBqF|w&&-pBt!^$ z-J1$)dsj8i3I>z)gGEk|6C zZf;D9*x!jWQVmI_n>u&Z<*u9!tay!Z*p5$pTA7J2`9?t+J?0J7Se9a?@)0SFb*qK` zs$4;$Yt#annND=A^(QlZ6%6;1%3}R?vv&5$8ubasvlPWL>fy;rIygQ7B>lyE5?VOE zSwqTq;wh~W9L|js9BbLnUnH*s{F-z%#d|!(a9dhs-|)A42t5x}B18-irgers03=US zMu$I~t!nQ*(h&j0?KK5>a)l+!@+{Y1gHk?1*<6^j{9QMC(r&-Ahu_)fLL6bW6{n;b zej%m9PA~j8gUTJ%`MO7c@YJBbc=tPCi19JYh6GuJqSK>IRkeDZdn)2M=h6d|HSxZ5 zUB{tSK`UzPobF=NYQIIAOCC0QO)6Z54!J{h14jPvg)N?s9U9y5v~su+HQHzJ_ZS^XdZ{;9(lJVm(8`)8l{9Af zQ^y>V`=0~ouESoJSgdzEwhmRX!@=TqWPJ^!j2ldxReH4S;#`2HT@F!+Nl_lhM@t!j zFoLi1mirT57f{pt0l2RsVv0-`lJPQbJrCD7r4xu}tPWuQm+zi%H~9c^31Gj9@90UB zO5O2WGZNfKm%$pH?Joq)=nYD zDyn`RO&I)l9}2opPphScplN@RrkGxgf5p20KTOmAQLOu4sH(8fdL!B0128gXA_kpn zM!fO^@~-UF4}XZNwWXuOf!G~l2$|}AG0lF%quaz+t%UxN9txw+8bVJo|4>=?RQPbp zjC-B*+5m68wd`j%iDn5%m_x*VT!4M#df4&5pqtwXf?Cgn>}{4#yT#KB+9^t10@s|bzTltl)BvSH zfIZfBfq#xIsDc=_8Z3oA2G7F72o^3)IX@v7`=P1-RXb3#6byRd%WA}5{0jd(ZV4X$ zn=c=#JEhi~&@)f%{+Cnh3oIvwxuD-IU3JQpzN?Ho(~3rii4Y^g?+rg$s<#Nvt9Tbl zj@JU-qKk8P){l^MyPg&vdSE9HEG4>|r%e zC9$$?V~;<5Swh|-%crm-Q8_Yh1 zDyPMmek;~MmOkfo-j9;(98o<4GgRz9Ckh8SQTL!v)G``2|;snF-{|@XkRDb%!eg2{|NxaH1V?>37jLeWH zlTjpH)vJf%#(_h@oh>dfcf;op!l4BoB0d#-fcqUX+WvtESN@#Va9PjgRzjtFW#QF8 z%AQ7*Yg3CSYTgzaZ|VyInc=xVA4r2C*b_$#56n^bUPNb}nclh((SN8z{7yp+D0_SD z{4408KDpRQCq3jz?>Il+3rka1>-hhkNoIto?Y|>Xv`4W2K^3Xd{zq9O+oEXXcEOB( z06j`n=?dJ_9UShN_dgm-V{;f@FbV-E-s|up2FcoR8EOdmpk0rV$YTto7iotuui1_y z-b)l2LIQMuy7At_<1grlb}adSMLhn$Tpj-F`tmGt5f@}npV Kk|}#_7Vsag Date: Mon, 12 Nov 2018 17:04:22 -0800 Subject: [PATCH 05/37] added images --- .../control-usb-devices-using-intune.md | 40 ++++++++++++++---- .../images/block-untrusted-processes.png | Bin 0 -> 100646 bytes .../create-endpoint-protection-profile.png | Bin 0 -> 15113 bytes 3 files changed, 31 insertions(+), 9 deletions(-) create mode 100644 windows/security/threat-protection/device-control/images/block-untrusted-processes.png create mode 100644 windows/security/threat-protection/device-control/images/create-endpoint-protection-profile.png diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index 17eeca30c6..1c9aa41307 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -28,19 +28,17 @@ You can also [run a PowerShell script to perform a custom scan](https://aka.ms/s ## Completely block removable storage or USB connections -1. Sign in to the Microsoft Azure portal. +1. Sign in to the [Microsoft Azure portal](https://portal.azure.com/). 2. Click **Intune** > **Device configuration** > **Profiles** > **Create profile**. ![Create device configuration profile](images/create-device-configuration-profile.png) -3. Use the following settings. +3. Use the following settings: - │ Setting │ Value │ - │---------│-------│ - │ Name │ Type a name for the profile │ - │ Description │ Type a description │ - │ Platform │ Windows 10 or later │ - │ Profile type │ Device restrictions │ + - Name: Type a name for the profile + - Description: Type a description + - Platform: Windows 10 or later + - Profile type: Device restrictions ![Create profile](images/create-profile.png) @@ -54,4 +52,28 @@ You can also [run a PowerShell script to perform a custom scan](https://aka.ms/s 7. Click **Create** to save the profile. -## Allow removable storage or USB connections but block unsigned or untrusted processes from running \ No newline at end of file +## Allow removable storage or USB connections but block unsigned or untrusted processes from running + +1. Sign in to the [Microsoft Azure portal](https://portal.azure.com/). +2. Click **Intune** > **Device configuration** > **Profiles** > **Create profile**. + + ![Create device configuration profile](images/create-device-configuration-profile.png) + +3. Use the following settings: + + - Name: Type a name for the profile + - Description: Type a description + - Platform: Windows 10 or later + - Profile type: Endpoint protection + + ![Create enpoint protection profile](images/create-endpoint-protection-profile.png) + +4. Click **Configure** > **Windows Defender Exploit Guard** > **Attack Surface Reduction**. + +5. For **Unsigned and untrusted processes that run from USB**, choose **Block**. + + ![Block untrusted processes](images/block-untrusted-processes.png) + +6. Click **OK** to close **Attack Surface Reduction**, **Windows Defender Exploit Guard**, and **Endpoint protection**. + +7. Click **Create** to save the profile. \ No newline at end of file diff --git a/windows/security/threat-protection/device-control/images/block-untrusted-processes.png b/windows/security/threat-protection/device-control/images/block-untrusted-processes.png new file mode 100644 index 0000000000000000000000000000000000000000..3080e0d1f0f6ad7863571431483f8aa00c609033 GIT binary patch literal 100646 zcmZ^~byVBm(mskyaVTyrPH`!&h2mD+wODcY0L3j>arZ)@xD*TS?ry=|HNZ{3=bZOF zzu&$0kF2b$tn9r%vuEac=9x)^ijp+O81;D_(7RgGA zt9u$AKcjknUDVi%nzAQZIzN3r_3I{IJGxuljDORMilL}>de@<5)?%vw%WBT>(RDe% znncamEE@TP1WvlbGLh{{45@yRPW~|~FL(C4A_Yd8AOmxF*6BjdkCI6S4Z{*iF{CL6 zKUDL=wH;pP*N)Kh;@(E8F#MQ$JXjXkJFeZU9gp<8)v-J|hY!wYMP!QFm$?gayE40`Ec4er`$jy+reQ^XG5Ye>$G*Jlc}G zEBrSr_epvCOP^DIr@F9QTN-&$C5&Zl050kM6B^^CzRC9-d=fIbQ=lomSKu;)U_M zk9hW#a2eC~mTU*T`O7XpLPmQM?Ahczh69$F=#LtZx$3_-`y>q#GUde5mM|wmnJg|vM ztX3mQ{9~0YfHbL;A`+cM#eGc<^A5Y^1Ve6QTDe|fJuHcpqoUt)6l*yd!)dh{D@1=5 zDKIHPzDWdXtG;WyhH2C{g;#Qg@x{$sbr!+o2&VRZ^;OnupXp(i+cc>YW3YL&u)fFo z%sv86{M{$A)e)CuG;(9q5#yzF)AUNRCOS5qsO{f5y-U!H)^q93!4v8@Xivo)DyMn#3_ z&I`iwe7qBpQ;CEw&)0ua97(~wcS?)679qs z<2pAfRrXzmdJrX}#OhZ-cV%?KyrAAKrrk7QF%G7uhevt@H}0B^xcXHKIOtfbOR(WL2gw+LS99UlU1 zpAF1@G0$7@$Zyv-*4BNy!Og_F-Fc?yqShB809P$`((DaWTXdVn3imC4L&0*5?OI-c zac?Bt0iMbtS9AIXgpT0w*T%SJLT&liq>>~D--f^}Xr~y0pziN2^-z1A_qQrL`F#(e z{=o!;z}w+PaB4w0L^$8LyC_P2=JcXNa1RGG$CUqiGHiIu*{DT+->IGDc=++z?yd4y zt0VV7dxbkk9WTJMlpFPPg6z@nmQ!bGSjz@_ozX_{<_OP}Q~p2xg-bp_#pH5|=)A+% zbk_c~vX&*@oBj2pAvyNSpe(?-5#IJ!{gCpd?=oR&%W$?OKlWT}NX`i6F_FK=X|~Vl z=803>e#Xbw6IYi$ly7O^P)dZmWSkZ0Jna>x;SW3sxSvT&-#`<}yD1sGL5lQ))BG18 z=AkUG7I0&=7hbuI*=aa5dP$(Xx9M^jygoUp#8i+4p}~4o(9QMJHdNcWe}%^q>R6VV zm|WYt1%?&h6oS1mH1tVJdWtyK*p8X+zqfceN1wLweMWVeT=JoR@U7skhzADAC7So| zbgfLrxT^lkUC${nFqN-XBX9_Mh{U!i`lq?c5ZoDg`$=rkN>g#B?6}?iqL35x?8PD+ z+qg1j(qyI&=Ljg*2d$LL;Gpg@A@$E&ICnx;`)JKZXj%0g_neTU3BSO-YLh@ z$1b0F8JCeYy8d~qV~fC?ruX}>2+xm_Qz9{fEL;l1fXl?3?PsuLiNldtiGwl`bk%Tf zRY1#ST}A9uzK>{^kxfeNI{!e-v{GUGxzaJ+_#|9QZyi&y$q6}deEOu0S!#FTQ-E1i zi8m2Xm0H7`OrQo5+L&y50{lXt6JqV>rY;~xY;KJ|kz!7}fjb*zXN=RY=jxW0;pHpI zy74|I-!2H8x50>L8`UgKg7k$Q9bZN1lRkqq4w#ZxLo9I1)l;ns`z-N`Fk%_!vsHW?c^nUkrD z2ZsL>q0j>)2Yzk`=@c!5lPW|QvocHohIQ*ZR?w9d2ZV6Cs>?XJ!O@h4>RVwjpD4CW z*B~$(dhu0c?e+-#0X&%sF7NDm4)*u2jJ{E=0^5g*-^S~=__In=59^4WW~Al4yyzSr z@1tairjCv(dhh3jt$gW7JCR-Mz;DzNjhFgPs}f)s_$$IF#{bFT^&}pDVw?mT&E)j| zgB0JHzju@BSKfTT8m;z)yU)p7D%|Ph`?dD&SivLe0bkxZb0Gv4P}spnWV_slcTz4v z{3zZ+{a@hl7c$-d2+Kb(_c{q%M@2IsbFv!u+GQvg#`n}AEt&SC)AUA5-P@J<$^@CU z`t@p(Nw%yKJogjXV*+w4*I%~GG9C56tubcfgCakrxVD?tH#E~hk=&{*8#?l3xG%16 z@sBB54uHWO5I+G9$%wjVNF53AYPh%n*P2HEdB46E4G+a@y4KNY({lakO#5VI!YhI@ zI~vV9___`k!;4XlZ-+f#V}EcH(j|OUU+KrRMH zH}O)c9}50=$#|*9-%sfoY1X1 zVhT@Tw5%h{-2$Vyv6DgL05DzU<;%XHz|RwD!%q(FOyU)y*EX#q&wkYehJVOU!FQrL z#caaku~E-VM)y=D7uQpMGw$>9{Fq&UThZ0MuokryX^~5uwbKJ}mJ0-4>=vF_+~V&} zqMc{ zzJ#=}MfN7t;mZbJwy-rXWZeY9r8^ zkzd+@-cfdvg^U4l8a;f~m(4o#LG_Z_7?Vg_H}7kkK)%RN4|oPnD}vm-0!JC*J%pj! zaugU}F&YpMdwAE1Zcrn!EEX5!ZRFEiw}TpRwc*yux=pqy_o~-u?5zvm$xK73*$}WBuWCRYI=BJ3veK0qYzVByu+P}j! zKmywXb3Z*|Q(@HkuKuAJ{)p71_)T_C17={`1aMNEmAT#j!6;PMf<1mBm^c`8^G zSh^tgG_yAYD}gL;9Sg$l`rNUC-%j>{x!5y{_a&Z@wRs}!YQG@%@-_}h;4!J?Zp~+P zZSc!r`mEC*2_F?Aoit?`n*LS8j;w~Q*)J;Z{ZN*~!mzD#RX59)1xcW^cqJRLt6G07 zMR|0MQLWy`TZN(le^ron1Ej@iyl$i`a{Yo9i|gsHc@PMvOuX5uzMKh+v?2EE%QU6%0HWSE5D(qP2x5_xtDr9(M_?6=9qOxS6wwKLfrA@ z<1Uf>bZWnDlM>_y!4h=zve%$Q%^Gkx8HXcUSAzx{fBB@BXq>h`okmI(Z5<%4Q8fN} zq{etVPQ4^1Ee17HUEl}D4wg`SL0(1<(-5{WJ>ufEd-H}p*e4(^;WzeQ;9I^^4B{NJ zSRe-_%V0^CH+r=5vL}-eOSKikAB@DECft{wbI<1zfw9RZt#?BeEV=`A)$iA)h8WQ7 ziLO|Zk`4B|<3stMI2nY#Rl?#={j(_*MlkX?)o@;S=ZpnW1Eme0g5YhMWww(~Ns6BX z$J4gqr5&tJish5oEd=ObIna*A{Ft79>0G6mcC+mAr8?nkMc@4 zIV#1zo&DG)$5^1NkVM3-2-tFG*s)>+3vP7Yz#Pb z$*dow%Xi5_@W#JvgE0m2L6Jt-kcuL-ZE@R}L)pgS$G8i)XutAAT&6n{l~~<6|ENiy zC`mjl7sC}L9;vJ5%(Ls%;b^nO44tUD46frjns&4E_K=UIaH|zm)nt9TNJ|jibQhTN zM=pge0$t=Z4lXpQwe7QDaV3PDH$GQLGAZSi?5={IXN7gM3-+^?4Rl5T61FPWje9 zbzJGSO7A85Pz>5ATCP?XOm==X5`kdUzLtY}d`!2ZuCFQ$HlK4^UpWkMDNL#*A+NXR z^L)1V@Fg`!ONE8JJuXAo#Rj|8V(1?(w1UPy;LnkEKLd*x5-KRh^~?r6DlHTCa-7c0 zh&`ek!hWxAeYu}YCN{_rWhV8%At-*&$2j)O-#rm*lJp^Z4)5gF9Be{jSv}L5Gv=iF zre4KQctCLq%@dtp_PaCzfTE_QzXMiShOyt_9TXwO@cA6cXxNb77d{ki?sBgmF&8q* z+oi=BbMN)U(I7B)g_UsT0>g@yd|LYXF@xP0c~3Ih8O)KrtUdY)5zpaa!eEUUEmMrb zCMxT&i?Y~wm$g?|=S4Dis!$?mS1cdPc#(;A70};e(eUoMe*?!M4LP&LSr#k%9jdho zSN=p7_AmT?WSE``E0kPAaJ zkr<0Y%URpq&tC~L`r+DlXpuee?npanZ5Az0$k%useqgEcsT1FYxe%`vgRprL3hw(X zp0TW0S?qFM;__n~?MDRKGn84hD`I?XZFD)~)0d7|XYxeX3d_@cR8O!yV0NVvdY6-i z3l|5EnAf2=>0Z-#k&6iB^M^#Kkn6vY_ivE;`zA>uBNF~Aq_$b#r!X+`0r4f5_Tc6L zOhk;cVM+cgZGg;m43Pn!P%+h<;=FV44dc850%;GV`z=HEi~P~c2Ud6B({(}P!hfv_ zg}x6gfVLb#HnJ%(qx>^atJ14+EQm*?=ehe0U=Q)%31vNmwwtL!<(HB{{b`5Nbv>JC z@3N>bgzYvHuhG?LWZi$#M^x_#ZqxqeCONrnuS(A6&pO!uf|B9()n}E$-|eP_eP^#` zk=a2|P;j*V+vfAL;ADp8eLmm{&!M=t#NqzM&?ee`)ic19HE_p60l{g3_;mrkHP#$L zOU>8g1p_#3S}i>D5SWhOvmba3Vr%Hfr5Jt&Efn3=F~V>89zmgeZ(|^Pq_0ctUBx{OS8_u!a-L7j zwK+$i<6|pA%Jh6+8SBI%k|zdWbBhLqxXYR9>|H@<uZ*vaJV8`HFw(>o6*!;F2RKCxbXfapeYf# zIVaAd!>VM!nBZDu5OO7@z47ilb=-eF@a24GRyf;;rVa_T2sByoPWr0 zkRXwV=I{;^w;-R=#TxM?F0ou)OjS?ds*vwBtMz-^mEkzcE?D2~wYBWLwKT<-0dkXz z3xQL^mBMh#Rz5b^onV9&!&GClil%O`VI`xPXm4}h&vDXRT1n0YUxVeH-I2N9ZsxQz2*hXNZFng`yj|bMHi}(Ozx?6CkMda&G%+6ZzNN?$nt0P0 znGO-ha|vLfIHW1cCg-RnsT%!tYwDfcP9EPNbTzb47wrI`HdOC*lwJshO=+ot;>s@hL|G{ma+I4=cuuWI;zLTUUgpsuI-0rbn86Z5hnUlehmX0Gb268eETD$yt zBmH1#1>B6~uKG;>*gio(yLWBin_q&X!5{1=7@w~m_4ir+#*d3Jy{mVi{v%=%=f+I8(B@vGWm8nGIM3#JqMO{`EHXge>H>_fzl=1HZ(nV5g? ztx=mJ+YCL;!hF!_h^JNpa)qs#?;^=Xko&u%Y`y|Ons%g74^`&&$E8L2>g)U)m!%NC z5W=QsJL0*Az%?}Hk6jO5>^gILaIM89#6nTzq^Q+B&9b+&=OZKUD)X_}_rto44Y?Vi zms>$NrxR7(UE$64sOqF91w&4$Q-Sj9w428#{v&~%-zLmZbjpYs?~#u+dO?ILp%rVF zl3+lEyO3>%;nP4({UY!RWto?&yJ5K((1KwDrlj}3AoTBC4x{i6Z`>HjlHm_YrPp%E z^1K_T9)Sxkxu)yt9SCtV6IF`4AZG| zD05A`=V^(fkb&R)T93f&cl88%eY*Am-TC;Iukin*Q9YCrj92Adg4%Ae5zl1gyPHr| zuXZ>nB+>_Bpy8?*OZJLYi5XIf?-;CweLwcb#&5vm>-`ptvH_0)9+nM&2nlQep@nm; zy1+>D#S7tc7iyH%Qll_f#h6My>t=VaUAJB=;Z<4|_DX}lV!JO!U+>-&Qg^xd@VS&S zNm6drivHgxcygzD8JZqNA{=cB6Mg1~tJy%caPN+G2dYDa_N$abb4_t6JZ6U>Ck5j? zXDL3W4EIW}P({e^_9|oaB1B*FwjJ=n=@d zvwp~Uy^h>)`5d>g56ebImQP1MGG#!x%Ue|%)<)SRiAvnahrz8NOU9b$-&XHkJ@a)h zOtg4hvT|w2xv6+RxwIViKt^|N%<$%MLPe2i49a=}IoQuK7NhUqugORwgMNe<|8UE8 zYm$OR9 zp1q3ocT7e#JAMUU<7E z3-rnS;Xy)KFER^nfNmM&J*0#S05e<2jFBL9NL=5lRl2x*2SP;_66;I- z*(5din*%Tm6lV*Fks@B`G6~hT$W*&(JUMG6hNwElH}~1Aejw0Ri7MLV_um#y?IFsI zdUha`6N)2{8V5}U!HsU4$r2fg?Dcb;+U-n z^k1E}X~>Dt`gJw+^kRKW`L{hkcxSlIPXc|O5^JB`(PPyu<*Kw4kFf-(`aYl2WeOTc zB%%KXko&CU#$y&;YqOsO?%XCn`0WoM4l~v#i#JaLpI)l@8_e$ ztjr{XM(pQOf|Gv-vBkO)&0%#>f(BPe^SAy1PB)S;GxRzR%)p_e5Y1TREh4N4q%D1a zP$hxjlC_47<)fhI2;48jT4C!3IJ(2CR3b^T=ot2ZWLIOBa`+GRr$kjbnU-iKn&t$p zkR7&?_2<>~ipSb4i~Pgtu(GJJ($ot5*_4`p-Nky6-ffHXt%3j@!112($?!wrY1-&{@Yceiebp_p zProNwz(;-Sl>GZZDl$lRhE<>ZM}E6f5$q)s7&8tmH%tGY^k|VqJ4|adNv4pQpHW6 zYHUnK|1H|?*#0>Z1Hb$9{l?^)8SUf6SFEFFF}Q#!)zG4(c?(c9B0N02>&a4mC_ua{ z6Z0=S`|G06$CH~S^HK;d!4`U|iVTThQvPH%-?)&VBmKl~KzjI9^ru^aVqj@5o!7Y}-LAP|`=qt4i zl{sDfARu3#D@^Bk-EQPwcGEE&cX?&BH&GbhdB$li!RG`z^k_k{J)+o~-qjaty>}Ka z(;{B&M+RqGEE6TQwH;Y?Vk3<&gIGV+8Y`JB*OdwxlK52Vzn2BnU}5qA8etf4t#k;JSE+WxSb7{T9d-cR=e)AEDj;61PaVROS1? ziJ|{z6fYONiaIBrZ~^CN33OrHs;|&{_JVtHEklsvY0I?v&vth?Ctc7xL?LpiF^`{!-n8sQnFVU+fcv zF6eojAqE=Q!AWmeXotXPSj_7>BUfcX?i!z>3`W`cSl9czt3b{9{JXQH)rFQ;I?DHZ zjUIf;hDDQPXQ_N9!_Enz_wUJdG;oX`#vRv&2CE(DReyZ@7fH*fQ+Y8z$l3x5DI<{E zM0?~K;@mAUo)kY`kOXK5kMMsniL3mC_+aYFz9v^em@qT9`Ncy%)3ll!E8z1D{K0|- z5l5QNwvN?LZ(|tYWjyrlMRX&lc%$CB9^uHM6wh*6jqe~|`gwQjXx%mh+LCgh<2OJU zVGb%NGA_izH^(+~E23irZ5$yZP_#W)G1xWb3(pUHqZ10`k_WT}UeLp+J=?}e+bv(^ z$`_*!x_(XTRwh}rT_+S}@q0{)gi`$>F{*(S0!VK^=bTlTy6hL`da;AgOr4H|X8cUd z@`$LxW-BL`-|<4l33rjLMrF`5C43h)J8`wVz+ueiZNmPgn>8*RF?uEkG%u}%$+fo* zpdwz?(mMMRd=)A9A@m4!X2eQY$?xKip(#6EQ@VrM#K|h`kBH|o67w+4gRNu1+&jxS2--#LI^;him+xp>eip6*~J&QZ)2a?8{Wmv zvquI_|1_8&VCxI^4p&Zp`m`5SvL;FMp?O)I$9@b~&p zR7;I7tJsVy(_8zs8a->Uqx!^!-#&n;droGZSm~q1ZP^ML5I;^O6S;ZBOcSuNS`K|{ zU;rs-Fx__s$+daQ!h*h?~54i6EEsPEv(~;UHNUVdCyG8Li7rn^v{#FeU;48= zvH63MgfBV?mmMn&&b#HwUKd>Rg#m}aXnsAI$^s}n0-1q9{JKYtV_}_Nz2~#_<)_MOp*Bu@s_OJc?2iIxZ zY3o*db+EZiFkZmziT@u(Whr82_M{H4^w;t~*K-A}5@#a+k6VWpuX9TAkzP*+&iu&4 zv?;U#-94C9pRKBs`)=VEHRN~|9u^gj@~gIIa!{k`J!v8yj8z z{4p;G9cc2YcQU3=7;(JN1*1mxo3_S@0w*IDe6zWJM^v#Jg-P{!WiB)0mu4wWE-KA% zI%4GA6A|+9PLFOj>mfyt7r&0a8n;GuOHT0;zgtbdrh1CPQ9VXufUkUiG_tv=2gs}F z4jyhUs#qb|#G%}QVYh#C6$ta-R&N0j3UsCVA)IYxNnH$MS8Y#5%CQ4k%xIMHFK!8m zO+g0xlAWbQ!swvv|?@Ec8Iol>YM%-o-b6WEdxJBGaXvT(^VRvCg9dO8vvW=|$0_Tg+ToCWbe8 zMh%hI9??y0hx}D|74~)yW^hpT8kbtIu_9ha<4yhDW%O z39%Tz@p82*l}!89Xhoy9&GB|juSI&-Lo{ncoC3Jq+z(MgT9(kx0q~hXeEOQm4wxDh zf)*}RJ0a+sg#D4*%ntm!LkxCoh1AwbBlpzUt8~YQP5g!*pZImj&$ckz1Vnn>W0zWC z4Vgeb$Ia{as>m~yb^IrQDIPoGQDqSz?Q`CUke5X9sQz+{!Fqmjl>5l{%W;7xIV&uC zX~srbkGhHsf>EyyyRTzlZo%u4W>kz@*NB4bu@Pcvr=wrhP{$R7G$LlL&{xgc#?aW@Pc2gy}~0i zxL!K61yJXPIs`~yM9qEIAiyvvaT)U*F}pRdk?#}Zb2hZF>8EurU-2Sah&WD^%BJ5` z(Aq%dQTTe28s9cjdyyEf7pXQDCHj3JF_P@6J);%xKGQv4Fd6=@Viok?x#%y&UWKm0 zUIfU598%ktM5kZ^CQopl3;tNHWP5G6=$UMJ!0E+em8V!;UY&MaBm~m0t{G_O9YyK^@{kN=D1+*d+p>sc09ep5r=g3P?_4H zyzCdGFLyA4(gLvzJmiXQlVNwLGA8sPJTT5*tnR%1)cda=K)!0=tV=e}h4>$<}Dwvzdj z#_e7Qw7i(j{dZyXzkFAl99NWwOIT~z2+EfP`1BueTR)PglwikP zN8m*qz5sLne;o8*+SwPps!)b8Ok{T|^^aa1mXjvN{8S1fqqKqNt&^^t-=wP{+I#~% zR9in%n8?TDQkqASh08vRy#7Y4=2S)7tHG-t%@bd^sZI1_SL;gjTSQkrH`&6@LV1F! z4EvJ%D5+IHl(<*tJIP_(9eZpkfL_H*nOJ*)P4cO(+}6|;j zx#30S^@^#IVLayKBlc65yXbqv4{1s?2SICtM?#aR=Sge|{qK&cTz`Kt0>@d>C2w-h z3vf}KO0uUU>eO&ur-o3v(^)P(S$Gmq8ZYnmTGhD(ceAu`nz~cqHK0VL`B$5H>5q)+ znCay_j97ZMP$IkMJ8On^bIrtT(p>VfZlzQo7nq(Mc5+8_v7U|DNYt) zR$tB}FE5hCAuPJZ=Eo_gs{!gKUjv*i8K}TYarnT0wN9Q*Rdy?(E5Kr{wnL56{o~8?Zmjj{-?&g?MCh56(7oP?u9Xv@x#;hli@;;`W^@P}XsG_%c?iwPG3R7>9q zUn!hlpKq?8bCnsh{Q$8#vcPKkWUW!Jm3FTrAC(#f&IguM5Mq zwRPwCM&!V{9egR;59*&wq1^zSAN!MYR*oZhd3Yv$b?S9j;xJiO8@ipZTS1E0DaoFS z>^kcg!_mF&`r5-m@<_q|u!c5Slt`^}`I<{YO45t)43k4Jtes~ z!M9jd9Z2?mhE5i{PfcZ;s*LS)7V?9nN)cW1T)1Yk!xQIuj`i@xiL2(A12_%nlJnJt zx?PO5k2JRwuInC*V$Qb@RYRwfun;E93)`ctef0w_FG7~`}_no`kTb+INvvFj_lS(PTsOd@G z?t`c{o8V3addPx^n~`W(XcD>=kNfTTV=`Ay@r|v2hOB>DY)TEazQs1|F!4KEKeM#) zjO(!4Ok|5f9IP9}yA>BKzY`my0-O2Y7Z*-Ar;-b#2AIG*%Md96+vhv8uMeJk5oJ42 zVup5rF%o7`Zuj22!5zxyTa&p-*^Ia_+Z}~ZzYie>52j|%(e!t3FZ8KT)kQpiBQQ}l zG)6_(1REs&a4oBJFZNDMSi`2(t+4-S1O?$Zwp&8A?3=yU3?ZE`2s>KLn7(T=7mR@8 z)KS5vz)eINi8;~MMG@shyk$tL4qv)zQ`BJcEAe^lu04gqb0bjA42yFm zLS4AQGu7Mn-p5P5ibw!U_A4kQ>}r~sxcUI@9rNYwIR8hDm-e+x2|gc8FYS+7sHAJs zW)R5ut5Dkxi^C?^0xwCjjN;dfSREcY`GG_U;$KmDP04j>;=fvq|IuR=H}o;ezi23I zBr)v$0zNV?pKVu9y@5e;TSKJP!ii(v5LIrVd$LhRo z$BUx4|IORG(1?-l zKX>Vo^*wm=c$c9L_M+LTgH`~aasnS28*0>Nlf8PFO*m~kN%;3kTA*?hv?;%Qc3@UP z!BU9#BcgsuwszJj@@_=M0m6A?4Sss~)!1NFt6o^a@)W^IH_LZ?3+Hw4i_SiQrKcFr zZf4dwt=qT;BQXvo$S#*74ea9h=Z}bPQ$x>YQX+UlDOksB1Wp+W%QaT!KZ=`m`Oq!$ zz=mw2H#!Ax_9Yjjr5P%et8x}i?1Uz}rJ7UOyEOw2OcYKEYL}F_W&8{i5?C}XGu)!R zSO6j$82Nh^&5Qc%W0ldsbR|L}2Nk7ID3Y_B=X>=BI4tY(-;nvxtBz6r2fF{$j)wZm zPgHKboP#DPymfk)Yn$NXt1F2D4b zB%CwreZzFfI!ivHyP9BwD2U2v*_y{(Z{gs z^x2cJo{s(xx=Ip$k`@f8E+zNR8sCwpL_uuShUa|Cnp?jsl}4;E48tHV+Ru(`3w2@5 zQc{grjl<%EC8&=3;oq&7|MYaf;PGkAnT7mWvtO$*UBKaEb<-7Enu}ZzdMg-*%(2A3 zb$dI-Uo*0N?fXn%H9i|%&wLS#7JwP36nwMY#?vyQF27Qs?H#ei8dEL6#M}!gbg38hZs&<58?-UtwVz$I8 zcqXe^ss#!iZY8^=jvw(O=;yx1e|M!)^Rx`^`oWTHidOg18p)5$qTs4oifp=R%V@(g z*~h7QLNFKs`f>3ySa33}kwWjQeB~|X$|BFxE)iF0yN0IaDt?U4h{MyI{*_~&|8fsU z-opE1;}v(ged{1{g*T>M(Tp`3+Oni`#;{W%A-bZP}C?e9fV4fC^#x1%r?a5%SIZQWA(5`}FwK-x7tVUp!rv<%4|LN+nQ zl2EF%*+^i9M(kp&A8@)6ix^F_+w@{jjJHRTgW zcFoTem)VH>o8SyxWP`+`-PdBDYmhkYRrq+aNT!La!lc9|S+QlVHgJr}Me0S686INt z3=bIGe(OQRFPL?FS%OaUhB>aImE#g0)G#7c0$bbyAN8Jb{D*mWkq+~OA|T8}aFXhF z)rO$;Q{1KO%l#q3*`3O7jK(1v!}$Seg#M3b_`vlnqRn{<2x62q?_4!cuv>XGv`r5A zPPCb9j%jW_(;mcavhyniyq$ICOYgwTgURz7nxItkA*1UMjOUlL*LK0OtV^X-!#bmp zV*!5~3*^o3T4a}}=vkqommSk9*tB;E`t9EQ_H%P{D{C)*!SF_g^JNJ9<8NjZf}D4I zl>d_KRl2V5zl1-WIXN1FPFOI?)&Hk#^E|!u*f$V`gk6jJZ)dc=9*JI*yv=#UJ$vm^ zW}C(WS!Ug}_}_53j(6<~rNkJPXuWQgc)sSeojG|+oPAt-6%{$xAZdLnuz1yZ zq$GF&u3fcaO}_HI8u7nutWp-dUgbgm&~T*a+0*?3YCcoTq}Y1(d~|U=h{@UX+kR@E zXTAa)U8gkZFTCc6JSwuXUHL_+r7pI2M$dnN)a2s5poaJFopBpn?|WkwyxA7nHlc6qMJX~M{$h*1sbe?g~e z_>qqYBd+mnKAOFkxT0He>>5jar|kGwK^U9Qph2S10 zfvfnCpB5Pe<9GtzBf2CcV6A<9)oR_szwYC0uP!D&R{cqsS1~jnA<>dacl)F+1Fa!8 zPrI-2%SH%cjqHh*e5P&9PymajfqSeI=Ti}m6nJKiroC{Cb(Tm?fg9M!dfV@77keRP z7nGR2i`@OF0Q~PR5%OlXuH;;k;jvBkL-2T$zR_rQ9Vw)0beLQ3(G&V<$OTaF=NYn^ zQ!LBid);S-b(h45dJ@qX?E+l(B^ls}NJ+sD*`4Bodj4-e`GpIz3gG;BFb+j7NoZX% zztS->DuIpx4UnIV2WIWlh*6&^|EwR!-pN8y1@za$13k_^$GkEQ9h4ko?F-?)@C%~- z^)6`3u25+e@H;aS8qdJ*|5CO-26`tgDUm|!<)E@57gpf&62cXG`vt6or)q^SV_Eiy zsnuFB0LWJHY*`!9HvElT=$GG%z!%iV2~Ap_w(vB0L9-Yo?tf;bs640?h`PR_F$XH# z>0EVBMQpGaFlU9&ni_NuOH#+7VX@su$}#_1xg>5KvnpWa#X$k#4mC#L6E`w0a&^}( z+FmUdB8vXNvtOl&WPzk6ebJTa{TblgQf2bpIj`NlfgE%5UV*3kX|q{dv|L8VkG>gi z#!U42K>5mD6xstpbe1ppv?bGub~+)`5<$aKIw zk(@n0t{tCxTDueRD9q#q7U41O{SU4ApW5YbI*srXxUNUG&=_8PTKnl;mWI=zz>=!e zaQ~Dv&~qzV!VT3GaVo{XH8d^UZ^34va22ckNbwNbmxP~xgW$sYF7!^fh_?M_6?*Ks z4Oo_>#X9N8YY;w>LV2}C3BkYhF1{7wy8@j?cg<0JnUllum@_YFf^=Y2IU`#e+ZQc}Qd zTz9nvAdsPr{5ISW0QkD7L^852vfzxEJSQ-)Bvs^lm*M;-qb;!c@C(0I4j=-L4{Uraob7(H^wept3qBV zafZ&eN%Txk6yz8H8RXmFCfuu9ryei85I9ORQH4Uh&SWaB-dloIrS-6WTCEY6bas#~4Q*f2oLl*f^SYdi5n1v2cQB?*5IL-5dh=;7y z)n&|o8;{jxCK{9G8ib+t)rNG18KMztK+VHz7E@4w_x|L3=ZEL-4@ilPzmUl;329#o zu#+T9d@vRWTQ?9-t^A>WENAxfZm&EPu&e@gJB_4y=zwYR5HR#vHnIM$`#9wekWZe# z>B~D*gJI(M{H+~{sUTCDw$R9T1D-NB=j9-$0r^SAfnLB)eKMj3Qj>T$LWBa&nt|B8 zs9=ME$HocIFs$$9raIDZTGxc1mR>jAu43Z)23Fdl>jB{{Izwq-+pl)szM0_;zmli! zJ+W-omt(QRn){%!IjWEYf6^dZ!Y8x^L*e%f8KTgS?xIiq-H zcNd%1d1W9H&6{MQ1?YS;TGAcAI5p&I=LEmy+KsCMyjbWXK(&lMi_M!8C(IX4Kxg$f z{ZnRfbkzBJAsW5S8hr5Q^aRn&`vT@nX@=H|jjAcj(?5IJE_V+z|6law-*c${8Jzh) z_2Iu^Y+mR?+mpFHUsP{}{$X?zTDTmgvMuqhUlM<;BbRTrB3C%Ub&D}58Iw$ye-B@+ z8A~vQI@F{4pePK2te}Ea>Z7LJ>h*WenIwoKeI#bgrXm{k3r8RXHcy+1f^2h^4Je{( zvt64yi5<3$TK!&>yP?v{&DKt}J!t2nsdl@EEQeY8=AS>he*Tf;TuT?jN2|9bIb2W- znL8{~6%BLG$8iyVk56Yn-*ppU`2Udh)=_bNTen~Yf(5tW7Tn#b;O+#6LV~+{5!@}f z2M@vBA!sEK+&#E!;o2v^`;C5I_r33RkN5uBgR0_;Q5^Q#XRW#BoNG9#?b{6===gF% zKNkuGDi>(enRYwNTPU+GXV))0A4~vl*i0XJJ)NLgm#xn_4$#AoB@jogiHOu6m_R%40Z@tAHn-u0hP94Z#kTdHMvJ!Bx8+_ z)cJ$i6a(sM3~=KQ2f7S*v+EF8BKWI?$mMb5 z4&h#<@2$&}S~oabz%8t80e(EHc=z&*&rYFh?pn|HF4UiM#giN_Sh$aQS&RR0eNvhD zc6)`jf~sYfS*^Su2|D-s0-*T9n>8PYwUjsrsf>fOTPOF?^3`stZP>3T0Pg^)+^36@ z(z?3DSwWu_SPnjtdL6m<`daE4&&;Fhz66ArJbM$|@ zgi;2svv%PU(}K>aC$+oz3z2N-t{=xYF66XkI@Z9FWNkQ8PJ0A;*Nz>zhOMKBhdTRK zsDsca%5Z(ZoQDah*pA*_)r!@G=QFCc+hwG%BbA1O+rHAu5v}7DjMankv&ePJXw3%( z5IB+i?$ET?+}HFJ6>}}# zB?o>=u}g$@TER~&r&Hg(flI(-TD|)s{~TuP*L4wsE_r@y(e;=LSvc{!VB8d?BNW|4 z$vy29a8q$sb)D)xUGefH`*Nz8rtwAoA}TBro<5a^x;MyYy9<(?8eKw;R= zIR4KsSt!GCBvms4kST#R_McU0IMC9pJ`ogTNj4&o`v#z8HSj8j60@@E;M1zCjE_A1 z3~ZM+F`LqFTU*#53jkPUO&+@1dGo_^+@Ocng3;O5Qzr{(`07gbW1W2!ds4|N*`N>T zJJO_#HI{^S33tynmqCVpQMOow0JfFkF7J5Qz|XVwF6|}!gBlYb8=FjrshR^l_p{Y8 z)TsW@+XuCQ%1i4Xx|K5iCN+WDJh{g)46vok8a9rZ2z#&RthsGp3;im6Bcu!3C$=8 zOI2#ipw;zA8jJND(nFZiyTrJ)Va2dSQUYdj!o-nacUC_6s888bqEE*?UAw+GB)0xKyMA;?&=lmv3wrX%`L~;%$WN&ZXZ?Z4Fi| z@+4pv(}-#`XXJ}`1ZYZ0mu|wrpX!IbZb`RiNDKWre0A#860e;^7z0LI)t~D&ndEa2 zz{ks%3X^___|)93^&9dF?r5D0UZ+W$1pekhEJ#Qnq$yl4s3CeYgHurH?&&hT{JXm&Q>9ZkOusY6E?~I`I zubKwo%eRR3#g^HTs@>c1kbnzY0=oyx#~>Sp1Ut?(?=!gE|;%YDw zm84eb2efe5G0_EV@@@((gR)dcAF$;3~iE8{qf;c_bFiTDfniQgQ6f zx76%hQOwoahiZL6FlO*>>2J_j6i z)#fM|29LSTguP^5Y&R(n>H0vzmP(Lh6*5E|H-A8I+;)2eFM`h^KNiPBXIdGu+U0jx zcx{Wm{mYrlak!CpTP#%}Lv6qj)bE=}hPJugyi|eD25wm8jxlVjCf7x4kQJD*TelrE zYLr>tu-Qa4FQw(TR~8tAPw2Sfw~nE0CO&&N*y>Lvz`%_}*}jI!cF@_O{-=q}(orF{ z2DEaQgggKx*=QHM+8FYxlN7j(A!wyRV%r{&zFYM2(f%z>ND_#+V@Jwk+i5xUS;#T^ zwD|{MN|bgs$PM(+g& zMrY8Wh~|Las;gAFJ2^l+olBo+UdWEb3=|#XU=Prd&uidjtlYK>E!NU#tFXx0)Z&Z;9zoaW9z%-pn_fJ)-G}I83-e z1N+21^@#@bK?BLMl{za1LyoJ-HrV}_RH><}UE+VFR&Zti+(qe2Tgi6`1)_u<7LmY; zyVBm>8>%bK8VJ%$7j+_RwqH!MAx5ps-Z>u?m2Vv#U%#H`rvz@Eq-xT}<{TX61xZiu z`1lB#h)C^uiWgIjHyQT;0u8DViwr^Vxv8Y85&}0;zGvLW&o&VT>l7ZTUL$=QqnqD9 z8U~Xm?5N*Av|*`|;@q{rB;96Cj>I(kaSF4$At2kUrqmhS*ObTw%TKMEC-1x&=H%G^ z%!dlorb70GWSB)d<lV5u9s}g@4h_wZLsRIU~hW=#7~9fI)zcsl8>jAQYukjYX|{bQ}BB zkysg-&lQ^iH?H&AVda$O&tQcSho)*$qBwj)KAocU|70zp5v}KFQlemnc<=prBg|XZ zUG)>>zlF5oKUBa6W9qn6?h+e)yawkrp^B{a_+ire8VcM<-id6)o%*f>n~6BAr@L;x zJL?)Hrdn;1h2(LJm2~}tu-;Bu40qREl*I`Rt=aJhI?ux-R-eZ>+p}*C5@RFov+ig2 zT1J#_a?(qztY&5|vB~DXp0q|^S*!DOJ+mecA=hQ%HvLjY?cCJ2TKRAm#;V25N zU7^ZM=JL{RbcN2&pv&wFpF4K%`A4wz zN$EHAfUC_62oD_=^v>f2@(!QrIz;1${H<79W==PpLDp4?eIJu_zv*EJKh;3@W|Sft zAt*hsEAl+T{x^dS?jr+>^nC%2$>Vg8%4gCPP(DE!3fM6)@m^<6&4RwBxuf<@WG z!FN-M7pwXZz4N@NwW4&|`4d!PmY>(y{+};$iohqNllIBBilLI)6_tf+8{T}931Vt1#;-nWZ`A@ten?QHt4lV@o zybHP`;@>Ld1cTq6hLh`Zngv#C^8{+_2aJ9Om`gkc-WRfX5^DI~J;=p7ZLPYtEg!s| z9M-Rpvpu%{{*|&A^pW|*vdYc?Kfk1h4S~_r((_l>{pLSDJ+%KN)G(0RF09(kZ+0@1bI%l za<2W7&!Kn+kDc-KI-&u%e8%-mkXvLjeB>F#1qJ^=`_zhHs3w-+Au>`xb*0)oH zgDKoyb8S^Am1Z_OzQ*aHD2=!H#@DA!`rRQQ$M`l(Y*A@=29G)MQWGQjr@U+0X~$J4 zPfuZHT*a+cd0gDZCo5ZwLe>1jS@RxTy75rHBYiX-2C4Jl4?Sm_4?#@f)q}6#%-Rs5 z;v~-(4%MW_9~SrU;$~in;u7rf<-Mt%5$plY;WiTMTucVUkG@~<^v_HMc&K%`b;2&S?tFbyQYvHS!aTx4~ zo0q;vwj=K{=0;R=i)E0Jl z_%UL|%G7Uw?OM}&{=_LBCOTw;XnamjX1p(!YdQ~U(;XAcu1APAF3zL9W z#g>*w63tZklvhn#xd%;FU;R9OyZg9hT^1g4H@=^MExBXF&noCNYSHp3Q2O=XWgbL* zbT=EiTpr1699A*5NFJzk7++}a&{S(m{5qjHZnl76hLB#=v15bzL#4cbV((T(Z}wH? zb+$yF5pH;I)@SmbVH;7}2D#{?q}EwiUn-`r7qf!=cvup^{*tEN`$l0V#&rMtz9Z3B z9oM~_(%5G;n$_qN3bhR0XDJK=H{<{nx@bg7m<_tWr9hSP`%*tX`Ld1W!!T9iU_u-U z)(o!vKsr+gZ(GKhUgQsSj4U;|Q;gkmX%j5Y8w=HV^kM!ZwiI*PqF6^gohhCNFUTAe zs4L#IiNay-TQ-gJ3`O;P!{j4Ba$BrzuCLCpTgOU4YLX#bJC`Tq%#d zE@Pd&!yWFZF{L`?79JM5+b!VY<&{PkzQ7PZ53d{2m+FNd4@i^hW8HA_^PlD#krP&; z@S3cg_88yDn^0T>>$y}M+5a+hxh63+wphH?3v{_c`miql&h~7h=iVF#5yRfXFJngW zi6d}TlyEyt=}&z$?0WdtvD1TL7+2yqGBeqo3%)OxH`jMrJ=J{Ttzwnfuuv4r2Q?$Z zfUx>JC_(z`9|iK1F3DZa(6I*21asL{AQIxtg`_3qx6cNIXwH^o1B9NwfOh=LhLPtI%;zr6v~=l+t&0%PcDXt2kjcM8D2Wk+yYD zEh%8!#)en5spHEYtBUxnhMSLZkc)!j=zO}EuQZ~;UKv+c(b=QyuU?EcUpM^`S4n^U zIX+;w+J&A2#Oc1QqzNNV5TtdX)zB@;smaU|spA-Qs(eR*HB2SH_ja2`sK?`LcNYA( zL=&_JA@K)dm-Q;K;Wf?EN3P?y2JQnbpiC7~O48=tidfAMui{LbYb#%llq?Oj(7sD2yO;9ag2v=hsPJP_Vj+tt+{XEhHWr!ndT4-A##^NPLVQB_G*$R@1%C0fK;Jmr z9d!PP?YsO{a#0Klp$CfU%}|yKWr?mp){4ooG3r=7NTn}#><34IQ-kzqBL#l4&1v4i zk33(>yWV@@|2k+e-f=c_y9glXQ0q?mWzzw|@kj@mhkS14Yv~qHYRqCR7GjB|z-@9H z8NM9X{l@;_+~)m)r2tbxlebL5(DHqw(7PP~M<&fpy>ThHG93w5^_R2)Quq8s2?sn$ z{`)L%;ITG1|3AxSf%lzRRC+CGm3vVO`qgKbNXOL#l;#tZtS=X=imQNbiTgrU1EY2L z8=k9sV_v$#hPP%SSwW~)yT_lT9ar`@e^~O{GQs$Djqj%e3{_%L^NlZ23z6={WTJ4N zvrws4JoYT2hH$#Z2G<0nQ^dXIYmGjl&19fee5s+$l4Zn;a`7ru$_o2)E=jO+XGc`6 zSbT_hzqqbFY`3cw;~p!)RdH`or!P$hrd$dy#qY^OEzBCf5!I^^rrAZiy=<_O(bjQ- zH+wNg-_yw~9%f^js+3;bo*O4iw3mMzez0Tpf#8-a(&jLYytfD`~My7|n7b3?|yG^4lhyX|k4OW~|HNA!G?R zs$W?NFYZPCU6*U%_Jc65=}ljhQrm1bJFY4lT>kK(s194^S}a;ww8|g(#;a4wPs~H7GuA$-+Djov!?a*J2IucV_dQ+Fl>y|OFx#E=qu3FA`=qui0fy{BTY z##@sJ5_mV8v|9YbUlqT2?S}DTcWkb69kf`&D1>CLxXl_AcU+}3tp)DRC1kEp;FmM}?pNxw0jGremtv>>B=}~B zyf!VO6d1~csN#+qr=vyoIS+v}GOJ0|`Vl;zk4XWDg8+3T6$75rsQ(@ACX| zKY-amh_!>!0DD0B*92&*%rmJ9F32p2?XK-QA6H_@@C!?vZUOMmbRR2DhKqOH0qR>T zHt81n*cg{itY`p=rGHJu;6{588~ESA*?&Q_z`CXXxyd1Un|+FVgxj~45ZPt6$wE3yT0xF~;(}co;2S z9db-lo`jmdX@BFV)ai}S>z|z1j}DwS&3zEB$tIu-Rq6%?zOUW*JE#h0y}LI%g!*V~ zU-nS$0ifn-=tgMBL16yWN`-yi<0x2`| zuC`14Bqtoko^h5yN7Sjsw&+!Zo3>5jGP6@=r&UmT4!N(!nljFN@k`D?%O{?N#-EWn z7!oZ6Z5j5Iq_9h`>W9YM?KuXAydgCP=J}g`Nj%GZ-*=TK04aLWCci9mG@>&41-y83 zQ4#gZip!|*@$bFD2}Mk0!NiU?bX+Me@BMhfE@Hgt9Zn|u07vC3;iKD`rq1ajcrJa6 zmosr}O4Z-7s5`sm>?J=jQyfqIpnB8%3Cz}y>VKRJIHmDQbtTD)mfYKGfe zJQ|5@Da{&@TDdhQ+mqEMhdha_Be95_<8+|^A_{9{5v(^w>ED~fOsJ@{r5-U75^`p& zB|9I=Wd74m&yIi!yuO6q5*77Ko?Hyl$5#NtV1x+ zgMR#nI1eaU1}%%p1**Q0tKn?Liv1_B!kK04*M4HjTH^FDH?9rtLl2Ff@fD86k$Xsr zIE`*XWAG4@PGb4kboD~tc(sX%TOn0@tY19nLP>>1n-b^9y6nWbS3%hj*fX^PZn0?s z-GljzaZ|KQEHZiutCVlgkupOn-p!m{`#)cokHY>0p{sGEe>w>DhQVuCqj2LcY6EAc zQc&rf=WOBpsH(GbP;qPd`n!@X|0km+lL6dd+|hC#C!IM%8!-RzOe+FCYq!%tn7N|@F1SJ&4u*uO2WQFM(q%ui-Aw|s8L>WS8z1ORr)PG zftJR`0fvwJTCh&!{LgZB0XF%?CUIyBYKr|l7=r7TC3e0bHC8h>0s8Y>AwlXv;0*az zI=Ap4^LwebB>$^_4uPMvLObZVfGA(8B?8$k#zR{4Ki^dq^%~j}LJ^%KRNcp~IhtiC za46AjMJ8WeC^l;!X1*@&jgb->z>NmuE^^ z-;><1!9^WXj26SVj7ZrVq%-JnBl1BbqQ$P0m(s(opq|P5OrXib1QgzITCv;N4LwP` zKU)bke`-ti#gtYGBPaR>WpJ!Wd_a`L^EAUqPvi`OFvVi%11#%9Iv1KsQgPjs4Va`}4) z75c6hHio$7#>^w--{psRm5GqCQ5_cHB+e5W5i{MmpRi^|XB*1M*B-81LK<#&?1Z=U zb(R7GUhePj=g+opbGx2VihvSk`201#w|%tK0KVDhD`1UumdKzFp4K>A17d0fei%n$ z2N&24`Ae#QW2|WJ-&Y_NKFm1j8}!gV=^);f(y+lfBp?1GMX?1!`$Az8`=jc9n~SJd zfI-?yP?DcSH{{G^-SBxN{zwsx#6B1mr2=c`bccFtw2P%kTLIp5?Yg<8Iyz8 z@4=W^MMYe*HH4y5uZFFk`J^k(;8K}M>$Y}-&3;N`jmrDd+4Z#MTIw(k>Huvd9Lv|@ zFnq#(O-4R2Q*Cj5)$L(@MBdA{!=DcI6#u-iMAX|dB5HgPg2OCXHP^{u|ew-}@wM5{aO7bgd0NC1u>wjE#UUB34oL8=aS522a(iHm-w$KbU z7j)QNH@Cg5Y#2R-4Vkm4hU^_!jj28+|87WG^bHUh={$TORfoq^AmzJHReaniFV3qLEfhk%0M4EuU8&`CUJ{3gbHTcLdx`& z)IO9_Y+Xn+POMrk^;*HJ)OBeyk;U4!M(4P_JLq~kaD9HfhCKzLi|mfjO{@JYkepf- z`o$68gOTseUwb+q-7=U0)^Ma@Jvamb^j*qDN6 zzDpCnFf(%bPCUw>zg~Po(DiFa6kyq0A%utdMQ=-3-k2L3tc0^hhOUSCO)2-}GxxDZ zpFjtb0@i8nGwW?n2Wh~or=h$m4i2oBmzQUn{>yPnMLg<2`~>~q@zehQJAOvs1$6w* zxqNHA>#j;xc_2H{xEEKQO;{}M6DpVQ5L}} zU+AZ)Sv^3od2CeF=eLD4l1TEyzCJjz5Ziltf4S6tF^CyOYw6;WVlE}nJbc%})M(&1 zEb!Z@vH90+L@l*Z2j1k&Ji!#a8947IM014ESJ;-&kISZ#bt0v9&Q~E_(SWty89@WS2Mm z(Nqib5=1rSg7fhN1aaUzT0Te;Dqr2;(;lPV-ZK^)x%w?-agv^`e9)%u_*&41K=Do! zk??2!TXV%udjXe9_e|G48eP^qCrq@p3K8iPnpwpbbDtX;LxpRV>l?zbAfq%nZ+$eh z%*m*%=A{W(O!fIshKK$O(L~|H&Qv>dc$_&xQvc41@*E+(%%nVP3 z(nZ=8YqeBIRjPI6Ub3EExvjwL>VRB0N;*%c`s`+vrF%WePXaBJqQ*Lps+8s{H@&Xc z%N}($a?BOhSUEq+L*!s@F@$cc z$=+1qNVe4RV*;N>I%E7lai}DhZeSox`Ejs8FL-sR?DmxL(!AUH^~cW~_k&i_U)w7m zkfb(Yai&ii6udkBke77pRuum}LEFflXuK%w z?mNAYM}E-cS!ns!mkF&IuHFlW9{S`tj)6aKHe8}}&JHxQyIF^jW57^r+HO6N4Utd4 zq)ekX1QH&WtXhd03R(;r;M|Ke6ZJ~!WdQzb8S+5I!BVZz1AkzpIu+T zfhLTKNnqHGT*1yIWa_l%j2j@8VPHtvSEMgFznXaMx}s40d^8xA{s?@cA$^NPd2c`v zj6S&JJr40E-y%7Yb81b7OQ`oMr87JA{FrzykRP*I2Up5C(QAPop4)nD;wZeNIng;A z+`Iesz9|Td)9Snx$?E%c2flmCmSGu4dg=kjJ5{)OtDVn6GC1(y^{HLHMvZR~UK^nT z`$UT6&XNKzRMb1UlY58=6fAmwCdX6k*IU+_Wj-@IyZ2Z4(E+%Y@>~$pJ8Gi+c<~}jHD_O1>GIx6Ykp=2Exjr+ z%j$9%34?X0|7|##{ex&D{43kkU=HuRREB&2C}sQB&S6fU{s|tO|B)jV^f6!z%2L{` zu!+8JrQ2#{6w~(KA@7me9pcZ}!?4)+ww9$K;zK`sSt`+RWT>PK-lj{s4(e{6?xn|3 z;LjQvzmvdE)w=;4)%Cpl84X3n#lrkggB~bFtCrpa{f;KXbNSG;nfdjVvzyM7hiL-NOI~MTL{_wMNIW+m_ zS19|k1$Tjy(6XI9R+cNTBHy7#Z4`H?YUSXqOoy#b5Knw2wsESZYW<&Df*D;YZ)zCA z>%AKdxK;)~5|ZtFI{{S7vbNd|RCwqI%vybnGk33~MSF@Z91ih7nVwV!Y6ZUXil!;r z14fOWE+McLmC6cwa1!q>qiD(uEoE*&IECPxfQW2?`;!?;w;vNPbnsjLdj_6SyM)6? zmK(0{1G}C+zU$r~oWYXbHXr+zwGBPEs*SKqMXnd=z%~l8;nR-ZAqM#>@`nY-c>S$k@)T@u= zsAw(D{O|U#k|^ZDBf+GXBlu@<&b8Ka?8;@Y|Ihnpm~^Ks73(A7$@4$cbpGmj+Q|Sx z&*NZ`P5X0D*EQTDpzMJ?{gw6@!djKj|CzPZ3TS-V{r`%5Xjwo~tErD@)TT4ylz*e6QyUkXy)89J+7vHNwdg-6Jd6Q|P>Z z%F0>bv%+(4&+6HePtG;P$c}&3bJbzoJ?EdG; z4!Eu7o(}p~Ak-drZt&31^+(A6{0X`Xoy^^Mly`V|JBxA;dPK?Hyfb-rtJ2wa{~@wa zru z3RFZ3vrrh)IX=#6&z@GD^!r*f7i%$Mrb#qt*gQ@56>d>=qVY2wC67bE9y?qdwZ1}j zkOf3Ae)-$zkN&-P(wF)FmGT4gg-|H9Wr$CXi?+sj8lUiakQQ@g1h<68n`#!P&sY`~ z2JfZvy~T@l=iiniAxlDmuBs;8@A{ZSc4^(;4wGBAdNfB&)Ert?J{0}gJhq{@auB^H zv-w40HxS}v_3ZBY`-#|$6uV2KnVAelc+opNdhlG5ZQpy_pM`eD9$~EmmG@>LFPWw| zF*!ht+q#nxB9*;GzdkY~rR-&JHnizz*YVV9g<8(yV4M}%eGTVZ;O~P7`_+{@B63!3 zDDA*+TRV;D6ReV3cz`z@-QGwuHz$j($Zxapud{yz08a$TXGU z`b+Idx+M2H*_G_Cid5VF1+$VykED$c>2-2BY&hnX2kln5x}~n_f5DJ%pYR$duqJ6~ z!oQmB11R?|1;(UTiPdErGjKF4u5&^RTz19+ZWLQ*w}8df>MjWhNoT1RA|?BCWWxy~ zF#j%EWsd3KV$C-)ioVTW#MB;iu4Fjf!JE-aWZG%YWErt{CJJSKcLnUY`;u!Kx!IE9$IYq$uo z1)vBn*tX)|7vXlXu<1p%qA#tQJVZ4vbtE!{_w0pAhu){JHzfVE5l`RJHQIAZG&lb| zT#%m=AwN^k&}8MrJEb{(Kp6~=dEUX*Xzi=0lPv{d2C~aTx4%FDd9g`eQfsc7X)k<& z8kvby{Vm_*w~}I^n1Tt#ykZj~d389|oxI*TBUxfeeydn#bvmdx0Ni?(e$`~{?Rxue zd(g$#RhA@Ou-Zl9CON_D{aQBy*=8J>|9%N1vWfPRq7c~NK^bts735xxJ3HRj#NZ{= z;oKV+a!m|l0`lKT!MOolfYW^K>FrdBNI&>fZz+%q!o>eSI0~h*7;B4cGe5SPOnkZz zd@K=i?KHJnt-D%t;&@b&Hu7jh-{%UIM>k?lO>Mo)W&DFHJhkM6ebuDnS8&{i=x^!@ zzpBQp4-3I}jXX8Lt6vbrmPLyimFT&4D4*VNC_b&go%jvt7v`4st^^CGoiwS!ujfYj zy*E<%t4>??K1DsIFyodCtBpg#8gcLNEX}5pnTHwff4*K7UsFfzBRZ+&sjxtR>cF^H zqS|?M;6?YX=`*UCi%Gq%M)f=TSG(6>__v0rawvd!PpJf*%zN8hXD1RyhewBdkYADg zYWUJ?iFB61_jM7SMNBK4Dtp(Dg20$kmd*f*G#c?hy1fu7g>7@`EP9uMyXy+ki}-a? zk)HRRFLjQ7z7!2UJq`OY*mr1+bz>d_dW$P}z{TYnv5}G+M7}P>TXLJ3`@vE7)F8u` z=*@d{B-%?Wg64r8J-vx-UusdDP28JBN6{Qfxo9}DA0w`dr**;=#D?djBnI2C8$4yz z5rMz0w)c287GVwW|dTql9*Q5mdA?(rh*XsV#2#Y;v)$UQo(gaq9mX~4zpetfc z?CwEInO@yUePjP|>cHhsh4cesHQ7fF1)i@OQ&RcMhdJft=P|p4ObS{jljy7c?Gm{1 zv?EU4B@=OVuQqmmMy0p5IxjZTN$!VVSznfevv$7=FNIa(#tk6dzUe7@_CqJiz|n~1!lOKv6IP5 z;=x;Q46sgQed1%U9b17Zl(1DoYdz9>tBZQdQ6^M@0FF-0Pof(7a?(j8qI`;~3&cuu zH#3M?%W}f&D;N%TFD<5*cNc<)ff%Mb zheXhS9io7P6r`G*>KlI@B19Bfm6J`S>kFk7q3!?gJ+t*s(+Nm0s@@`;@K9UIDoRg4 zgA`W7@OX~KM=-Gwo-*^enAf~;e#287De|KC#bMLfWl0ksre>-7Q&^GWmix1@2Hpla zw%#;|Ke-#qZij?g;W7RR-BDZ;LeXST2FnTMK7(D0}|rUT&LFZLr; zc(+fLJd3n_vR{4anTBUbms-tJF)a#J>1KijM*>)sw z5oC#G3Z{#D)4uE|Hf=~op}%9q!ln@`vodbOw72LjF`4RoyTuttE8Cb;Z5vX!0dyua zyYf-s5-N|K-GPV7$Dq|;#Ky)>-`RQlbq@Axh3dz?wWNDj)iBw`xGa0$NBnhg3ydt=gZuS8ro(HY7-t`v zPxlcJNCk!n)bzab{X=MQ-${L3vxiW1`Ksz*WpW1dU52yvT0%j9&2hm%4E?=Zb1!(W zp}udR=##8@O*!I3jr~<(Jz()U!b=*JUh9eg&LO%&q_jwBxa^T+Fhj6f4oUXy^X>1K zO?2n!oq4gDMcmt(lh#9rFR>QqUy+^!hbocswb3qRwQ->F4=s2tXy&&X`JCe7-1$78 z_C8Uu{j7Uc4L_zf%?q}&gmAqB1T`>|U5q#R^F{Xg%UWl9AY^f2-Ls2}i-Oz!5vU)w zq9hxMwHbbls{GdLRax}%Jcrz-{t+CA>(HM&hhazV{Vj0QII(aPxl%-v|NYJufB z()rA(;C4zt`DL{xaEyQKrJcL9ET!H;2$pJ4u`6AS2-p`iX_l07hU4BmH4gWf!L4yU zUUAulKfFha7sy|Vwt@N@?qetQ7q=Wus3cAPr_>?>G2fP_?60Va_L%Z7JFOs$+=@&SBt zRz+NiXQMxi^=)pM$KI=2dwXILojZVjbMs8&(F>36o5RdwO9aG3@9pWzW>+D z)?$>rYro^6sR^~)rSawEiwn+CmGYvZo))QAfAQzFKA1+yv2Alkh{`?CB+KzSY!Zin zHdezyu&_8SX6+UKjXl3!h}$E2X+=fMLeBG-$ep3(lZxZq8P%mpUZ_E5m(oEUYt=iN zeM4#VzVA38&`K>+`-@di6gahb&CHW80m92@cQX#xFq!(wQFUq zU?7I~vI(}7_5RfK@jk8?;P;P@iwut^5hrp-=XVT%i2mVg);MBS`HWRoMJP2|lVr;_ z*fusk!ZA%v>OHXC%XtSCA0MLo=gTEOq3@pe05AR3x@6axZ0qyw(cv|#z^m@FzQkEN z(q9{|{4P*d3;q4HROYH3o7aMSW1u36qrA5R8%Tt0^tYX<$1YyJXX74@H_8x5;%Gy| zBO;mqaaq}v{m66QB1qiNOic9L>bdlK>^$>XXY2H+OJWEZlnJ}}v5&teN)=4mbN$F$ zUVY2^obc3J)W)|Y|Kt_DV3^Cj#kPgI1q-1iTdQ9@-Y;f-_;oOMa?+W>d0AUf13HXK zQO<5nbj1)$4jzU)B`+}=o+0B&prD}mj7+}|_6D7sS-bHrrglE4?ts1CPdx>K3%edN zp?jqcE9;r(2XP&XAx&svyT4djjxayWG@L5l{J!KDseB)tvyyi8*h7^E_Jxv7Zh&tY zmIqha)*#s{*@(O|T}2)~-7$|h;;d-doL1)>bFe*NYJ1k|%BlawW@;d&+K`|AwVW8; zby3{y*<6T}n0~I-Bc=gzOg={(Bzw}6=6T#I`LQJ_$ZY_WB)+zXXx+A;unz3Slm_{~ceAk0I zb3s_T?W5P&!0+ciF*JCY7n(mj?c)WH-CL5o7J!>iS-hhNVq{1b+AYN+tD{z*>Al%! z?Hq1Gs?s^`omPIh#R)rdehb4E1EVCT8?<1w-WaEb3H#q->V=i026~5F1KZb1s|v&W zW-aUybBqyuD~Bh+>LtrI>f=f=^_0nVC7wsrx`nXEx*8CuUx?nZbO(N@CZIkY_9SEO z=RtG@G=1CQiDK1Neh*<5lA*2F+z)-^kI&8PnB5wBQy& z@ztAwC$Zhmq7ubsJQ&~Qi^o(4!fqoe4eViy z``y4`=CHfN&5X|zRZIu68|T*IjSwi-;HIQYGI8XjPT4Q$;C{oDcXxJ)YHQSh<1A*( z%S#(EUFhiwMRY;g_on2CA2>9WB7&;tGpuXru6EuL zV{`+`^6MGSUUrr3Qe(2-e4&5pph%1_#FX}5r#hZ7hNQMOG}hn6B|`kfkKRMh-o*}6 z(OkuJZB9w$ZDXiStS+-*XKa34blzk` z&(*BH?zmCNUP|zu(J<4x(g!Ltb3~GmJpQ#~_{p4#s7UB>X=!b?HG>Vc@C`*$!7)Nr zn_vE;qR~kab;s@%(Db7=SXRs)9+S$(_Y{~{gT*9fEmSXB4-rvjMzr|WaWyz;A6oYu zira@);#x=RQKxHvIUt+byC64XEXg@AM3r?2hh4teu8=OE>q6iuu{vXWsjisz#@Usk zUP$J^Op9?ItE8gB&c!~da_KL@o=bjXzT0VGWu@5jM8dBNB$Zk`CEy#F1ilK~Bv9O~*&VUwBrPqZ?e6%<%MptNrfXOv=1oULj`E zPr-4JsWOKsX+btpY_8IU69Lv9BQfc~6~8jAO5vnC&4e#xa8s-FAtc*wpJS`{G3Kh- zY=H{*nvXdmb2rm1uN%2(UW{R+;8%#oZ{m}&k*imL$Mm`@C#;xx_$QL820+E zn5AiCioQ7V`4DJwxhKx@=m<%Ub)EC^>0VPEAIcFZFo<^!{q4Y(fH&6`=xXb)@9J@@2u4LoFp7QQxqw?! z{er7v&YH;k$NVyzFHKk=egBrmAB`@tRb3r#MCS{c5^R!CA$(N4UX~h`Rrj@+pBv*E z4B6HqZMaPLR}+ah*yt>p9n!(eGB<&@dHvkWCr*qr-1Z(~x4;Z-Coe|iyjn6}M5j$R z;~(`}y8==@dr@^Uo8kq*9%$tn`wo% z`vu1%cH(v-&C(uPz8XCd!qQ#k?#dtcdaI9ui0ImS&clQ+=FGVTbhNdla2Q=&XsSN- z6VV@EF7U7wsNigU6SHIw@f79jKEbby=7H2dZHdVQpT~#YC4ZZa$?;b7yDdfo7ffJX zHb0FK5+EgmJzOg8dZ;WCwMH>ws&uSIx87b>=$F1j0`Xc)w^|;UQLzmk?1Nu(oc*4B zxy#855|g~o?7i@cuKrQW3e4vsMnKFHjmA-I-VEY>bi_7r?~4iO{>Zu1O$QkEMeZph z*0qU8G!8ztj!%&Xe@F=PaWt|J9MvO#`lhgQG~`9R;q+T5v&B(VsE}SAx2Oj#7fMBp z2n_>G{Md-w#8xo@ksBB61PPtaeTD&*g)iNnF_Fkf8%&KR7F_c{S0c>1B}qK*> z>N;tz4>>IR~?ot8-io3g0+)J@if)sa`;!xZI6nBbCarffxc6Oid{k}P8=FFM%9{Fcak_ln5 zv+sScb**dtmSI{X-^k{1xrrik&u?N%c9_|{!}z6W=0&6)VNH?ld~7Zh*oF$wd}=r& z>9O=%54_?85b+>Dii!8nF&-BWlI}`>vRZ5GIooB#-&Kv_SsCp0 zhCEw+{#~=&k5s4b<~Q#>O(0iPc;=BoB*pCCy&0O(3qx>~jRlp!sx0l+J=Kyo#5Ca3 z{weGxNB(u#QsCsEWA17ckDohcYMegf;e0t}$B{`Ek3%@HIn{hPk%<+YFnA2%# ztarTPuh2~%3gkIyMjsiRpN_kG7qjWL*$B+Qz@y(+EU{)}_gp@RBj7s-&X9;eDqCRR z#=q7rrVaUK>t$mQ4~-wb<|>H3=hjypLp%038|atzLd(*~rooIu%MuSVz$oskGro7b z)(Gwt$P-bDBFWT7<#f>_Q~V>Qlcj4!4XN2tD|i-ip64(A`Yl8JKwhX9Ho0{4s*;~> zaqe`_w&Rcke~BS#N52!(iA?@IT)%|ZYL1{4e#fvQQSMK7DQ7>|;>SxtrzlUyolTmR zy3UZ1a#@R7F%9vi{P9O?=}273krgKrl;wmtsgAX(UR2tg{*X7kp5-L94EH9O#@m+l z=B1+32*WtUlKHmg?-sW>@i`fAf1ke{XT7;xSMyEY^@}`bn07nM_p!u1_j@R_I-ipW zQ1nez0|jK$MXU>5F8ysD{^=544n`6C&KoNHS}B5((Zm=rmJ|5&yW1h?A z#sdcueGLvM=_~i?^L=M)-}HW@qbkbkjC>>;QYelqw6##teC8IL`? z@gAb;+6 zj*VJi)%<5#S-LTH9>QO98Ep5q?fKt~n;}lHoAHfFqACntYk*t|Dl0z zhs3d&q3jhOsD)wN)){h@J9D~Kx1lyG=ax;O#{vbW<93U2F8zApFzH&Uojo5n`Y8W(=lF5_Zfv)l=|SD{-yiaD0rGwOp(1 z0S)&nx*bO!*=zpSUWm;Nx}!X~<=@j5)VH81K}(?vXW@WwFZxVS; zFts?Is(-3*g4P;S;s=joX4Ih34O zh4Hnbf_lFT!m2EBNY7ROs2_yx2Z=5XOn14n&~it~E^b2=Yx zN0o|1LGdLWU+V|J>?=@`R79#aG=#+x7gwH`#JG4IdLuKI6tP?aE1_f-uYO4 zLlK#Cepu&+TRMU9o^aRH2^a6a?r?Z==gqfl3y;>$gtKUq_U>3gs-cy+pt4!{jCqbZ z_Z-x8h$t}8j5rjwt35HvJS4Eo!i@bF)~?1){yj%rvMu@o+^6Y>L8IF`j~eEuVFeUk zM2M79+*ueZ7~tLXSE6J+&aQ+%r|rz^;ub?8o|--U2S7pS)Gr9oGC|^5&k}HzL$7YE)XgcjMUtG`4>$#SA*%a=td zeFLV_&J-Mfr$PlA&!z*2_K+ZytZvo8cfT;sq(EOIA_2+)&c|1fY(~UQDrX&z>}#t2 zuO;(T{l?jJ)Y4{cHy@e`)jF!KF_oxZZ}QAW(kpK+-n_R$e~cfm@d%}uK}sDFPw()c z4;j}4KE(pXqf4esMULaVlx{oOnFR*)t~1mBJ<|WXM=q2s0-38p@288K z@=@skkbRm*%uw8y5d)8o0}&bf2To7Yw!Z*_`bBIOQm-_-O&MUWi2|vvuu2AlfM)%l zKY|updo^aK*BR%y$UVNRo3vPRPqzNt;n{aB3QBK8A0T}TtRq7N=(OJYJ3Th_A~Po<7!{0gIFLS(B-c)-=W?4)|; z=e(Q4_9u}QzG{WDDT1y{_<_I$g6Ex?*W&{=#P7ZL&iA2pT=I%-jf`tl@2iLW;ipFi zQO^cz1d%UJ^LtdADsed~b=bFuMDsi4Lv!*YhbIM=v->O13i2uuxz^V9Is~C@_lz~B zvn~}Ev*~Ms%>3!6hVTap=Lz3O1+s$qL+f#1FbwCDoEP_m=(*4l{DepN_LI1!gD_1x zigPvCfP;|rmll})V#)Q&@dpujP)JO{OLvXm$f!RWBM;H%_Xb)y4{v)VZ3OtJ|9a6` zA(fbmt{USE{h>cIp8Dgf`jg6D?{=z#>-+)kNb;M$x|<|2j~J(82O0?{8qCv2GLHV| zjpnAOEV?&tB1BFve)dIiLewMGUM@YOna9|z*|s4x)|E$p;JkP@Q&5?B?!NmZ?Y+1Kvr zCe|(3E^s5SW8yyeILBFGiW=sC+e~MBc5Qz@K+-iroMm{1HstZT)%HQQg#zaDy7y(| z8K}?{ipf2Ubg)t|zo7JK;btsS$krYbOCBK+?6sEVdPZk{)qd4<#o)8J@*tFNgDpFg zP4d*Xc&%&>WCT?|B?*p=-5&~W>~>xr&5+#I0O@nydgj>?U!ok+J!=OkmF`Om*)xW$OeFz_}7 zl~S>_iLw`!{XUzQv{{`Q|6W>>uYMqX4Y;$-tHqto$$hjeaxH2m$ix6DX$^$5Q%e{b zNJ=SqT0k5PvjR}_!kp$v{#T`OtUGbie9jAY<0Nh;vY&a~tlV6Z9$JW&2mlyyQ@T97 ztp*c~GtP>4z>VmEy+G$J%!zaD{!ReOiv`k2%hXECnnKGTrtvm-)>uQO5ZBoHa_7Sh zqZFFid>UT+!RbjrRHm4h<%ijg7SHAN9boy z4aPKxc<#UjkbV_W@A@3`AKkq^tKlD8U-pWL2$R-k9yzP@t$qUrP0{}3J*p?#`~u06 z64NK>eODGfk|w2&}*zuZ&~LbX=WJoM7!3aL$P@W7C21sz_-&<-qO8P~uU*l-T*{>DCpJ zpqm>Dt1+o}Ptj%jYy+q@4*`mdT;y@TqIl-NWpE2Psl;*gMF))bJABp1sz}0-Itptj zFF&P3Xo}TO^&nx0No+F_FZW${KXdFLU=2t|#HIbDTDd)M)du2a&8W#q7+}P{L>mrI1Z-H-@AzMEiMq4jb=(d zZ$Y<9UB0L^iynI2-Ykh?@^HxK5e~WPI7S~4P4L(Y2X~yh`%D?CfSDeW?Zwjx>x<8W4Qg-t@c|E>L>=7juH)GW(0c44!U!8bWBr*>&@oI8D54Y`ajYk@ zGvCNW$ZTH5ORMwFq*BU!8&n&9*?J$p`~2m{ivFZ;-B#AtyVuO8OuMHE-J!5LvX3f@ECTjIm*l8`-zJ;Lx zcBBx?)KbM1jG(%COo9$XvUC@ltChet z?1KlOmvK4iVkG$m_6d>>$IEO)RIw@~adkAzbJV&@?KQG6a2W^)GifRv?q#^HG5h;){UbE z-=_brdt0wk!4uxj?US%&FACzz+JvFmFG}^frI@8~@^HhD?mHlso_B#9N#+9~$Mq=D zH2ehPLGRxYK&Gm)7uA0Rxu~DWgm6hPYq-?l9?Xn6SIJdY)bNzEM(<}`KSOV48XG*P zj0-LVSamPoGPP$+*VI`AeVa|TK#Dz5S z^m+|^r=!^ow?YDCK5_$8Ja<4sesDGpC3(Pfgc>4y@eXtla!>KdE$edctP!q44Rds1 zDf4a-gUZN^UV-D?eESM{=@{oK{d(?;n^!zv)}7>aLG3BVp7tpZ-M1^7qaa8L;u=kq zJiR)GkqZCOWiNBiN%%7dd`w3p3P@pnpEG-^O8&%aG@E2r4nvIx5E_^;rfv!(vr(Ho ztX!dv9&KJ!54AN%3k?IJf9VT40*G?C%+~aXJ;5}M5_qE@xK-Lq6F^TvXhCbnA!R9J zSeCZ6mxT-{S(d4I-UIQ_d}jfmpQflrxZUd4P{mK;FhSmMsT=BWfTZ-5^zka^&p=GVw$kGqh223{c{MK4 zlJ#o%(BuAeGU{3FCzQrD)G=rUq5lr?=}Yi@1@`GNul0)L=P;Y0NI5%rFDjS^H5|Yq zMC$hMZ9eGxbisWJ@IV=Vk=J;L*p@%A=T^bDY^B|k;(w_!Y08C8+r|@pZZ>5 zQr^(~Bon=7K)-*zy-!joM7uZqYf4y~U?}rKtp2dv@;jN6$}3^REOyHTry zuJtTevB>o4oB7+z#UvC!9pdK}6@i2_ zK-5b4f+iYXery(_0FQBdv-gW7bV>SKlc+5HmgT;=pDWk*qpudH17~&D7k_r~^|$AL zNln#hkrpgP4M#kCeqNQ>9EOC1^vM%w^f}AT1L!oXe;|FJ_`R(_{gvrprRPe*uR6Hz zf26poEHHc~hC(3{Z?u_}KDRShqqAxSYaDEPNX@0$v5o3z5g+9bC6iGq?jsmV20b)= zm4wWqqcL3H`A{ruFnxOoLGCC}q`STYGRizh5-rfLkHs&qbkfQ6t++Vehi(Pp3q=8H zTSGi_9ybwmB%TfF+Zjo6q50VyoM1&ubJ6sim?lmVaQ?1xI&_D{Kt3}7XdJSFM8C6d zGH!D2U5ku|%GpEmuOJyDR4^JE8n1SMePi8vY5fm!XQdBPs6-XBZdVQkta%uaO~UIw zNnuF2&qeW$_mO92#Mjq(?P;iBgom(OePiQ{-3?9$AjKAz4*)jc&HH~hrd5u`?x@qc z#$>P|=93NLi1nZayLKc#zPLZuBWf`jup2(qS#~l6rDG%t7_K+W)lZIMb?(?1C>^>0 z*|@Q)FkW$!F+|4FHQXP&v58i0hECWr)L<*p+K=%jHgyMHtgvDJNBeqUjvg2Xpv;hp zU)jZCAY8SWD=pO!3tqpI%xYQ+ae7lI1L|g(pM1W-i(8#9s0rHKno-Bzzch3i+nzen zKFyQ=Hsojc!0d(b^tQvUT)CBlV%U_!jfoW(YcFaw6wun;h~ysCM^u|l$wwG zQ@3aA=g<(#G?gEdi)%tGH}5lBflqu&ww9M9+ZU?U_)qY6@kJ;IfpKEvr(RW1K;IT;DmD)I_u`8)iiA^sRBXBm z*WUt-AB380BID+nvup?O@O(&m5l$ox1B=SkTlK!g>Fk2d!uZbU{7>*T$RhJAs{D0! zw>u=PE%nxb8O(*G*81=I-+iY6Q>F858sVvAPi0sMN7U(Vq`riJtn~x7MWKn6t*dAV zZ-I=9h?pCI-j2Q!fPyeicXNB5L}yS@VT$9SWhjvnFIj$WdSq{7;zG9aWlh@oiE}uN z>};wR6+lMb?=TzLCA+KmQ7IH@V#p!~sSbgG(`V$T`#1GEYi4%L+r8~6y3KZ+f2d34 zs8(6Q2%hrFSfgAG!}AHj*!@bwuy;&(lrnR4($$3@KsOA5_-BGmiFwMWnvj{d1IcYz zn38yjqpO>NdTG+z;n>>q?ItPLK?&2Y13AGcSd8h$&RpWd@%v8nfuscZW+xMlQjal6 zo1M6HI_E#dr396B6IAAQvgp6$*$3ahK!cLHd)o>3CpH zf}Fab+KaH0#2GaIsrwxuQ-H(IIH%|3bOaEe7;d51k8`?F<^2rRkO9_irNN^c`eusw zj?FC!8g@+MvewLX3uADjR6+16jO*pNrV}R`E^Q0q*Un!oxurXC*a|`yuP;(Bn~qxU z{#+i+4`2N$#OC*S!vF)=z|%*J)Nn{ru)+7s)u6u6?m~O>*jtNIA(9!(9yU8;!f8|; z^8KSfh9Xpxz&tCXS?)-b)bz@pdI!52+|?I%?=NY1(gg+9gLaNGH=QdGnROfPRKb!;NGI{6!>u_Utf+KvjRnSp;B-3QH* z#e`biM{fh8;`XsCA9j3n)UVG+h82TQXpw&94t1O~3s207i7HKjaZhjQ3VHoY=v>+-3cX!*s0AFiV|J1Iv(mAP?m ztdQzlTK=To1kq4A9lzOvb*L_OYA?-SNG0nYr!BMFcrIEftd9~WQi)AK%ESGv<2&K$ z7cJ~KozoDD1WVS8HTJS_cSH|W5OSwE>pOOUXOW1i;k|0e1g@e@)R=pVTWzFrf^L?M z2(?yn{Du#qlpv(3o~*TU3vd5KJbOztN;4pq@eY?<**#Q_0bgdqnEx;l@cHo6YI<%o zanl?`ei_NqF3;P)0Fb)Px^6~&A+?Vsu_Fg|R2z&NkqxD?NTlrT_MpzxgcvXu})y9q8VJU3GG*gNV8y-!(NE z`DOe9Nbf>FKFEj?T8NI;^;x!^xCxIqBUOeqV+#ti66|c*YO0`X>7r|4)_BCF#fvot zV80-lsy7s=@Cjx=ZqfAangXe&>2T&CKV@s6ZtqgeJ9vB<8c0Z-@9Fy0*kncwdpGx) z-{Iv#ps07H&!0JvZ3yqHg!Q2QFz-rBB0iS8zJXd#-c}dmzTc33!#XD+u|(RKNXgqWpEeyb> zrvUD7Vw?&#n%@d~`Sj%)GX4tGS8^2TQ@7#sWix2zF<28!P;l!>{Uw zO!7cs(hv}Q0Oyc>9-%kKLf|4_1qV#EW4weJdp1Mf==D<)(xGmdt2spS^G|9NsL^+)h;qz6&GEqSlEu2=hSZ8F1xifP5Uz1d}s z^6_|h)Uc1TnSvMukRgtvpRd?JQ;c0srZb!$a6&8tR?sJL`K-i_gN9P+pmfh&dFgYuw(}{o@cDR_uO+@~dlg-;I z`JnpSXaYvyT)BEH3Tk&L8Ja-JikekxSD5$|Fz*S>!(Q+7g4u^mrh#^exiSZ)r)yt+ zVIrEj_G2O1jUl|&{mKb*FSU(DQ7 zTw`Vkxk>R%WqbpXhRK4?u`;uEvgf01@$)nzL~w80dBce*#5khX7;cPd1=-%R%I;s( zcAW|Jw(FYO`?nikIZryj+J)BLA0XX z#2va8Tu0i(+tW>Zr&0DdBl>>|QO1ChKCVRqjnUy`bq?CwbP8kR-_NXl>%j-@fY0HX z#Xh|aGd|DB&y&=H%ARr{MVTU+U%Q2cSF;apR@f+(Zj|hiC%M_ zg+{?*3D04v=Y!s&IV7X{ z5*p=tA68(BhTCVxkJ(&;X7Jwo;`wsZ&+2eDk&nWO^ApLLh~37~!2Bb!&l9OjT`w%X z7EmuI`dfhV+Ya#SbN_DIE9xHRqGk?nSg%Hd3bQu;Y_ukKR^UKJ0e|1pvlbg_q?eBW zXW4yRx-k4lfiy?SI$po@5c~hS=-$jQ^3yAwf%1ZXh5i6}yJ9HzI>n+HTNG+Ft&<)Z z;u23xObkmtr-#XB^q^+Zq_`tez`7Rb2Q3(#f4UKK>!Eg;zT0mJGxQ}4Y$?&(JgtB? zaWD&oWzW-QC?!C+C~ z+$f7maBVFYzVOwuuZX?<;?K=tx;s>`bNXbHwQZrtG<0Q4x5<^kw5zniRGf&2Tg;1C%~x+HL2N(Y}R zp#Dw|D+W@6|8kA}hj;9MaqLe<4snh@*916^MOE3^Fvakl*aDys7WTP)MZ>9ITQRJl ztP<#U!PlspJ;cy?nU=hEWI1;Lg*C(GY>CLRQy;%K zIMPnba856e+*QvKaZ9c&lRz~~+oOPZQ{TmtH6)Oip(c%#%`wml-rAXLL;Xf;xXMa} zZ2>RIIlyX?XqWKu3Lvk39Qt*;rO0HfAJ%zE>^D7Tbf2D#X`NT$@U%ikt;_~^LffVEDZH|;^Id2vrf}t5ekS>sD3i|nz(?*4q758;$UDkURPs$cgdb2?A6WuRZG?@S z;S#5i92R1DmpN4Q{#0$Lg9TK#nuvD57G2{?DzAA4Z$8vbBEPF7KSPW}&FcS;m0HAh zL~l!#uhG5#qt@YLouw{sl>41gbuPC&oAC=Z*?jY|#mjXHp@_ZHR~$b;q29s-DJ7ye zZ4qcJ`AW7?{WmDa=96ZtsXnz<4Y%>AK7?IZLCEo^m1Z?GmeiP0#xgBgrrE35%LjKi zji37)9CWo@#Ri-8TYVPO`F!^oV1wypz<#klnCxB(BL&l4D01d7gD8`{g+~7Eg)E(k zS7_bz?=9s2TJrILq@=@VQLz3c!^ACf9%{4;jbJGyb+y{Y5pAv}u`>pk||gI{v@(w>={Um&I>5 z+#Cb&WVwtpvu(ozwnH;sjB@wD@Syf6)ftc$4{?IFnID}aZ9b2jxAx8ye#_V4DhUbD z(BPyF&HjsU(@@OX+Md0Dg2VM%oku?`#t%F z{iQW5O0!a?m$j;*<5^8oD)Ej-DS_+)#RcIi*ZlfvWZHc0c{W!RO-}4-^e7~Mh^Wck zT$5BevjRKDspqX_F(FF33tgDSFSgx}^VFhNgmxS+2>;sd;rq;wfcO0bE9?ru5at28 z8BgVmw%tMU*7~Obi6;!Tx_MgSs#;wC$X3grg@x#Gwsh4UhzW|lvPI2Bs$Q>wFLip z_R5zCqnfRj)?0$l8jzv7dN}rJO*Hl?x6>aiE3eQ+cuCYakGtS8|GgAO;NMGU!Si{3 z_Di6il|hrlaJ-kmuz)ekTpF54M8HIJeK6%kv=swy`6C<;44IM_FLN&Z-L<;Efv={CAC6|M~tn4y-AO@*3I7 zpFMnfq54V?AU6AlkDmq4V0-NMG^$7+QZ+RO6Te3yL_zb-)5im*f~re!7l@HpAsKWB zePBT_DDrno6*c_!!YYx3|b!ynv3D zkiJcm)P8o?IS~s6dV6MvUJYGP3RzIun)Pi|4n6{7G%R7GuUzYEx*Z603^-59iBK8< z=Kv)gE-?pMKSJQo-XY&u1-HO~8k-L3S%C&Jc$)H~@h@09QP!%>7>kDHccfKm&N(7_ zce{wIg7K+Bom}|{cOW$Ury>GiU;m0x=Nuwu9EV}bOh7Glg0^c3uS}tSXz%&7yE(_+ zRk!y0Wx@ZHq@GZh4Os~jzU5u#>k=zCt)I|QrB<#ka061$VSkiG1m6#%07MDK=8YiS z0sj-tuqyu#a2!=#Vl0#_Id0Y|GlcX{7r6wVQuoZSmd*mB7nKy|yF zkAH6cnILfclGDocTu%r&ysdb%CN=CGd9=v+sF>%isfi>c@2hX;@I~E;i3|3z2~u&K!&H;ZD)7_B$9yV!vQz3&p{P zA^epU@}4t9d09sSZei}$=KfZ%9Yjh^^!m{l?g3gA7Ep;9ZSK97u0;(gmrU#)b^p*M zVJn44%SsHp?KNe6ZuM#33(1c7gc)uwghha>L?dF|UC9#>J&JS@cwj9c4qBxcXmR2M z>cHLEI|Gzj1|aJ3sWP7Z^iHp)UpHIFNL)(Ls1!V9KEpiXlsSA;1OLJ@1T8#S@ zJ0?kBefIPpi?eExogec-Ty^2yEMrshe*8gYj!D9?Q-wFrzj~jM9bz%BtMvU(#UMi_ zYz$g_{IhvKF38)*eG4*5QxRjwvHi{p&lLmCy9z4JDjyrG(Zg*t#1<{4%fLid=jPR$ zLSsdwSeA~JG)=fkcK&xx{yj;*7$Z?8E(*0rBQgFDF0pXGSv1*$u2PA8pzcyfN zTfMjOW+9*Gc>%6%Q>!gma~?TRt3k6$T{44{+d+qI4}Pc0OTeOXLvOn7At_hA%$bML zQ5AS^-X%B(0x2R%dd>oN_}fnaD;tQ{F<Qt_|gb**Ij}vD7LsH6RLIbhnM3KPXz8PZtg8DTI~sFY%;iPeDE)zZzf_1 zC?V}B+38gfx;XCs0K*vM{s|G{I5C*w%)*}NP1fNn`Ae2Sm|`ly`sF^)jjId#*~NRp zq~Q131G6~Jg0j_xnf75rE3l|=ivi)e2$uk1G3^RDb>ia_+^ zBe#9&uSt^S1%g2g^nq|G7FXNpJUzP%E>;nNq?(?S>7LSLjW3^95?fU3r9)|!e>ahS z)0Oj3tv4?fW)4dhbmE}V{Z;$n+s}eh3E}IYq2|L(gW(z;*;X1l+ucEP3k*Fln2Ivr zG%-BU<-lI;6>_|#2sUvtpK|`=tEPPon~&$G_RA8>>D(jXT!BrEXr0Pi9v947YjX*1QD%hHre<~(> z3)J7ySta#hY9sf?AUAnd6hGy%LvpA(aA-uH$~FiH=U-}muTNS#T~h)9W~nfTYrrR1 z%{0EE*aOomXp!M2-T6M_MY?^^xSg#MuupukdgxS`aI%?VD@ld{yA*vGCzCMZ&vT32LY?>FiHf-ypDJ z<0Oi1a7%sgvroaFIzzAg&9&5lzyM0M2v5r7a_#hKPxip$Ers|=n#90O!!K8vBHw=H zW3-`etr$x7KaJ%Um#$)QeP--4b>*CIVml=ffh^KkdBZmBRoWHHwAMeRkChmRVq3fl zXC~L-VH>k37dlxjNsfYz2fz*zaEhErudr} zF*dQ=rP<~^$L5niaHnw~^!FSVBBno1{{lo-Uy$)Rq)szgRVhv&7WmNccLu)5=kod%&8U9{ zgGZBgs|Fw(vti|p)#h*`a1GmL0?ciDBizqMq7E1jwR;I#-HfXA{wsFf0rYbZ58rc)t97rf8v40f z{W4y_8yl-!s)25YH-Oib5@)=(@SC@b-0|Qy*Tc|mX$w4w1{KRDz>Xoo_w0X9p#ciJ zV&u2jLifj=yYe%Cw}#EZ9D^}HmVXRc@&S|Ut7U1aw$l4CosHqu<+#SHF@Jx~d}kbc zTi^DB;DtKw^Qu=U>Ob1tKapllvR5c0w6w-f3dy6Z;6EN7VZQ$x+!}&6&=VUcaZ@^! zL=cN^CZa9%D(R8GSX#!Bt{iI{yKSPayWg-c10#2)uDw4$WAK<6Z0zlw)h#5v7h&tS zVGU}q=?{$zJ25)>i$ze`!eyEzQw609(o(`U2Hdr{+Df6L6G%B`44gjRp(3)~DMp&2 zhS>#?2|>6`k*W2m7+%QGvF+OfKFtRyxbdW);Kh}kW6FJe3&#tQIHvJSNQj;7qT5%) zr%9~bz4>E-EvPNmylt!ov2F4Jq=#AOwSuW7FgNWpt%e6;^m{{zy`RneMo^KdOPteo zDG+z8q0A>|c;tcFm0YQlRz*mUrDvppLFhvTPdcG-=eAJR{i{Ww748`I4XedhvtWEQ z33%*cY)vStX@Xm6R^0;QL7Bn<4up_2E8|+RzI7-8JP{bJobW2S*k<~ZlWS2xd1zy8L~*GILK{UI`szj?>STAAbMnXt8m!f*WqKD=Ru^`w1yZtO-`ZK{KTQO~z{ zz(X;G*eUmg7@Ywkd*$lT+v6xHc`QY+9dOFX{^pA}7}hy`{a_1KO!DTYI)rjx8k08N zK40$`2v3O~3%uj13p`$o;f_{PsVS3XQ}Bnji3{{2)$*=JuceNoe)-!Ah%3$;=AP^% zu5Qq$Wn=-0gca6HRZk@Hl81#bH%1fohsHA^HTK@~!vaPPNdhOCss^K)#}X)9+F*x)ftiyK^egKm&7vt=KecEBCgm6*y!O9+hHgL zYy*e5qo8%jq*3eG0s_74Kr^Kn2C>vzA-XWy`9uw3A>)I(**d~qlE}?*KHAOmv0IZD zi|wqDTo#NM%#S{x8C*kDTE2hbW!^T0LNIY4RUg}CTseNe0|q9Vm$KlW72D}|m*s}A zvN|E5g{-Qvotjg9b*><%O84n475?HuaR0Hc4sh@-ux@SbTOK*T=)HeKUUB;z*e_58 zwltPuR{+j>#~-FxU)F4+#NJLxmK!NJcEcLd{vw$0p$`?UFeonb;2lwjH9VroljTtB z1yucWJr5&H)=FoQBA5`*h!d&4shdl?4HAwAi>l$9lj~=7Kr~m%b`_KYQ43AvH}42R z3RS<1S``d-`IBHyE6pigSCZec;X|g&^i06#JicchAXH*ECynpqE5%zl1(9nEy@yLg#87SN3{`HX!*LeU!6>HT&Gb|52L|N&vkKANv zk&GP^z{IwT!4jqQm_vXM(J%M@)fP&gqD1GDWat+c5OsGF;kh-IcJ=mt|25?3oxwf! z_hv)$hL~qBfQ+459H>))$e$M*KV!?auxAi3d)wEMz^l>n-ux3o=zHT5sokra6J<`8pD3aE>|-lPNm^nc<<@4PDa z3R*gA!WwfKQR^|!bm3DX`RaoP`UAn|Nu8&d7M45G+oC$}1bx2i>89noK!u6c>pGrK zPqiXX7Uv_&jqP_=55?5GpH|SCo{E1J|7JfkTT*zq?%m0}FDMv#tUkXae=xai^}W|= zdYXS)egdle=Zp^q_^m^CeP>T6m91Px!h?5DM_58bj+Nx8kL(5C9wM%M{d`U)0qks( z@8$A6(NT`9Q0uAHlCRlT`3|k`Lv`9yv;B=s8QSI3CW}yqYu97zV}pXjV&&6-cj#~K zORA%s@JA8fW4tAWrossgD-7t&cmto8DH|-+}XpepJ6F_Sb?B(1WR9 z>ND!7mPsGR;>V)+!aIo$;#ks(sVs(a$>J%uo%c5^;m@ZSjUv|n7}y>iAm^lC>b%RP zUX~->zuAkHU81wn8@|=7w}dj67GZF{c%`xh0XON#Mg-bx^)hr7%7# zcrgjTBkPw{S5@#3(ag7QO%3VV*K+#+Tu$JnJZDr9Wx;47bnTv5pPwS!aEyLOxQ-A@Fzwwpuc+t{fre|Ay< zR<0Xy0WH}p2spNo#y*J_4>$K<=~;0d65%5|rA)^7h10ZiAlAlIpVd#2W`1rK{aOZ2P<*^(|BkY*AamSKIu25VS z6T|vz?;@O|QbCa51(l1dn#Kq2t`#an*1%^pWbr>-Lf2Pg5VmLDYv;*)$aqd;h-;JW z`2imEe4QY$zE~&mO^>0WA<~P>6?+-IydR&3&q@ZCtPkcIRh5ffinoQzx%51bYNx%0 z_Nu3rwC5WyZ1FmOHv29Yu^dg+`RKGtYa{2J%4*x3LPrxS9v;RLY~`(DIp)syUCTYw zul49ZJS}#)^9Q~p-Q*#NZS?F9KX}1gnRTf5Q;>AtmAif#Ditw&Y9K_R(EH}`7N>iX1R(Lpv~jSG@}Qs|prD%I_XXzsqDXZ#y} zziX?P*M1%fg_Z+Du?1J~lJ`$4_V2Aja^UvE$M7<2T8w@=PUOFarCiTcAH zo%faw%xit`3=Vovi%(0>))#N5LNpSi+vYK;!c*oFwF7c^_NJp&iHM2)vAq9?t+`kJ z@!`wWxt8x$B_0^XZwM|~XR?r#hS;zFn8%T0OW(g@U0Qri4uG^T2J!|b*c{*#di>vo zA`c?QG)Ev$ia1-Uoi%XI#kjj2=GEZEh3M3tJzKpZO68aNP*wq}dSWmg;9qTQ3?aunBXTr46C)FT@D*Xiz%Wq0E6@MZ4ebDgsE zDCwEk(~^mY0zS?2D<3TzCzVa6>Gy2n*80&Xa|iTt!Xq1)>}a8Vz%N*V1IR9cbdirU za&Lub;-eUmac@zBtYDA8Xd)4{)AWdU)HU49BE%9Ct{WY;%`j&(W*RQq-|nV+>sdn^jnwg^y)^?y&b z_;;f1cKLTg|LpHn;W%9l^PzmsB*tyFA{=v@*9cg`>Rm7$3?<6n>Z@Qt%YLbOcR&&= zKklncMy0oyJ;5Y5m$yjIVIn3F>*nhH+6Fe9QAV6)85TE+&AICibLwLu4-T(Czsw!# zr(hg|=c&zYsc|dc)~(v8(ASO85h!P$NEmxK3f5EaVHJTF4ujO;F3KV;>5l zFgE#N83>hgC!T>GJcAySEm{%;nHUd@S88g)(t9|gmW}Y18G9sBeRtqTi}Y%_<+@+O zDj)Vnb+urko`Xp`b-T9KTrQ7>)D|v`wGvEQa&e?vM!u~dZJl+b@+IbSfR+OSevyci zzKAA7YgPCrQRU>11)o~RGJCm;P_J?LYyWlYHDP)cTxXe?qQ}C*YM0z{YF&cHCOV9o z($ZX%0E8_9%HKDmJzpP78O_B%TUwy&<(q5GUQmerhSJ3?f9aM5Zm-{5Q!&CdQ=3SU zmofcL#Mzy2d6)fO&R6JRrbl;F{oo;Hnx7*J3gw+4N#sz2G$>|Ta&BGb=2Zr(1n1*q z`{uox`>Hi3>>A)!;aq2x$0TazKNI!ehxVkT0FbN3~3J<}8ySuvtNC+0(Dcmi% z26qb(+%>p6RG@IT;83_j;SM#Gue+c5_1x*1>3Qy*`Kz8fe)ityUF%)y#cHgnnmX24 z-kq%T$u*F-$-f~<>9Z|&DR{OGq4jJ5ZE^|OMAJ$`=Fg|vZnmKg^N|XjV?;f1gy`pq z?=6DZ2P@>JT6;n%OUqN030_{P)zQx(n^R&52Jw|09?j9x-^Y|o>uU@ARKm5+(#ecj zyQkX_7)F?Zlr1ifW30N#Kh*SzvT7%>TYozHOnTbfzyRu&{a+m8c||NVCaz zz(bBp6w+EFOwZkkZ+jIUY-2wjftK1xUqKpicsEIF5<0dWoE<3Hal=)bt*M)lKjheG zs7Fx@= zp=}^#7f3W@%eORKnP8q>5_V`1|)&03Y;3mnOvq{w&0J0uQ zEo^#DYx!7rAC>Mtt?rmnLPh$*poP1<+_)pFxOnigO&h$=^Q1m)LR`tGsxvmLrkP9t z$2?<)40Ok|y{d^RuEse&FUorE?Q+m-@r#E@7WUM#K@Wml{hj5+iBH*v-tcOgIFS6b zv^4B&TCr?OGz|womzgfCDq*$>Vl%5~U#B9`fK3j%SO;B_O-UTuooSq&c(4e&PU36Ma}hR*N`)BiZdyUXjIRL2c40 znLmy~SltN7dKcwXVe#T_z8oYp_L%IdK#JwK+1u@|? zGWS8*hVaix+9R1bsK>Zh&>8t21oF@U!2uD3wA_DyAiKQ$D#jJ+4S85a^1C+oD;k5} z9aR?@E+4)?yQRZ`@Gz2SOfcK-TO#rh;27@zK`a2iRaRpe;qT}I{}CwvcEYxlblA1` ztRK-%|Mx|j3kFVZx*M6dL)NT`FTojzv>Xzi->z)vOl=2q_f-rW`QAc{_RWJ8V3vlv zE{Zl}iq6`IJcUU2MMPj-X_5itkJ4LnFE1TMq`VM+p=)XdSuVPj=wfE85k$m991HV& zD4R}%f`0{;eiE{&4tV4f$fqhfUe>2?Ri10!mFFb7lB3 zQ4432u-9R4$wa}CeFPUiEVACyR@979sO#oIJpB|#L((k#p~U51vb$?Ui7S$n*thMD z`y&Fjclg-a8D8VJo~3X`5f9OoDd_J z4Fjf>jf6+VohV(RF&-GMU$*nbTn^g%DkBv@?NhC#RnjlL=JpGMcq9r;3LtN(ikr4S zzKWjE41e6b)44>WokOP1m!x1B{lbC9`}SP_VNqFn;4uSry)RcZNA@mvbon4f^WJ1Q z5TAVU+u&0MIztvWhcoWBL4QZ^4HwXj1$b+kQZ@*GfX8x_sgiKZ=x5c>$1jT2!=5ux zGAU(bF12v)Z70h&`CVcmE?g2zYIkZ%;b$ItS03-4JS^^=BcgC?D!I3JRpUy}&mk<{$0sK;Qx1v{vVy_?zUeP{mL_Qg+PGeLIM6w=z7FVlc!AQ z4oh1o+Nl>kzkO^5unx!%FM}9F5p{5kB&(+l9o^^WJ0*W$5O@)Ye>%GP=EP8qS^ZQI za*fRa6LF)UX(Hq&;OL;h@VcPA2SXHKRtENt@DehCJL>dlGzA>>;kq|KO6P0m73BRV zSB6Ni5h(qa_(HBFbf3I|GjINdO$jn;X`M=O6%#;`4jU&uSKjWc0M5m)bICg@n327GcJ!D@%XkB~L|{UCclLY}%JBE89Nxm|I8unUy8?+E zI1QdG>6u@zOhg7-^@&|>T?iOxsHRh?f@G!^3}`f+9b;-XdV&}~&si1*E~+?IId8p~ zL5Hq66Yx_~OFg{cCMPES{!n6N;U;BeSTDG)&whL~$eEqkMttCRwWH6KR#fZcHGgmQ zo`@zyN2G_$&2aVCZ+SY>A!XjwzA^0~qG%tSy!pY0hkUlsXXr=)(0N~^v4ld3o!Dtt z0&r1DxZ={U3Ol$Qh#?0Lgw}2>yZQ_ChwROGCif}XNxqgOo<#Zf4PbJduQRT-|HzoOKU-LN7or(WKnV7QDWyAEFsV@~{uwJ2OFHKbhkT(~vQ%Gs`g#|B9RCW=+LduVtBrmog6-^HGicGzq4XRYB*V1$xG*j>8 z-uJNEHqy9NIFnOK-Rdo|6p-=Dx9Pl+njpihAPh>*UL*lK<^qz_b1VI#@X(KO-QcZY4_m>($Wc!cq?@V?nQ8Bp4me2DCADI> zDu5-;NTpa2mjGi6?zM3w3r;OUrCR?i_bNm0Wy6}SxYuQlio$qNKx!?LCTPaihk1*)N^58;u%d@iKb>e zcf3Ct^;nLY!_l`*jf*)|?Jv`-pKLVeW=A4^vt0qvhLs*14~t(3hLAfQO83dQ9EC7n zWUC|AEWIWqXX?4PLgz6XL_X#x1)g$ld6q`;3hX9)%6L`gFNHzp6qh6|3o#BZj*jEF zH3GRZFxnVmxt!!Nk_P~k8IsPq#iWv>F{haa_M9d1XTwD~Mp;@XmzsSoI`%3poll2q z?q3rA+FZA5Te4jwAg3Tek5n*_9mF76ejm7t-gDN(gJ`N6;A~qJ{#N8Y9tguBtsE^R z8!L~sG!BGS)8v7Wcjh~=Rr?cbYJEz;$d;PcS20%ChPvPv18^M)uBx!}DTMAJdM+-? z{nbwbFE}JRN!|9a#s-j6Q3o*4N2|DXaMoHD+|0`J}tGgwW^_&xWID9*DvTZY4Pr6PK`GeLfn0 zW@?A)V!?lvD;4wDaSz5^{enYj+4dU_cGjpkZ{CpAL3YSpF8W%hoCH+(ivV;e1sXTt zMzME;21X9QF{k;=Ce;2Ns3@k=(I#{0kv8GHMt5}CUU65@k zLB;oJS)HpwDpl@=xQy{lbfa!O_w<-N`@b)T1 zQyxV^6ZfBn9}K0J)rsxpyBZu+g|-t|ix<}q8^wVK_r>03`R6EEJ7@i*q40dE*Ux*g z&$5pXM|I<+jQ!vT+BZjIeJ(?1(Q&@KMK#P(@Si^4-D1lQISEBfi&I-0ylR!iayQxf zb6I@p0j({$FOi#D&RUOU5QtW%0bXpU_53ZblbuY%YT-gU4s>oJ-!{UFg*+O~a4W*QUI&MDgkmsEpS_i_bEH~dHw@)RU;mR1rTG2&!=qNE$n^Ok2edV{w z4pIIGZ1<6+I}d_;pMor1RS)$Dujo{XUQYg&Gp-IqLbbf(>ah;m^A%9EKi`=>sLqlD zUp8`?C^X}PyhHnZd1c)M-g5roWf+^(P?M*u{~jVAvXKz_Sy>1hLYSO6WgRra+LR_u zhZPTLbsKMkSy8@Y@5D~WVg1^=U+A~{rruc}Ca>vx+*wB_ zgO;e@J#~n%BS>|hnO=I<8Fld-FH+oD!eE~ag--C_#de&^JomJ59q18s(5T?W;%v8l z;l2t>?@rjoEjj5qymqgOk=*G+#;cl%aBY^$aqO&Lw15T{f$oHl@d9yX(Op<%f9(X-OzbDYhN^}Sz7aa2UmVSZo{6NCm{Zz; z1ZY^hvuVAF(ViIb>`guEtgk(n%|#!yfZiOb09}wTF(I0u&&Z!ODd`fNOFEep%KMMI zr9Peu)&+xM?lz;pPJg@D;Cm;4!IHp~4!`%mb%|Te;HEO5fd7A&Ed96H)&I>283V|J z@Dl-tBIdGMDYc(ikE#`I4+IxQKnaekN1PzWKfa~ z^7T#G3mp}Q$VZYy;QXBw*ViFQCJ@6(B&v&AfCYN2H5z`5OfR0OhSQ}bP_Vqv3xD>r zg15H2BVWw!BxIyr7FCZ^Yn2wH6)%14W-G)Z;)tfRNfBcs<=e+cB_bDX38!K8eQfec zz2wa@>s7X5XyegLD+vbDYC-w@mpXw%-6_a&egga-Eq$|Nqvid^g-v?@ zH(SViIxWCAAYVMz=PwXf0hWIuYE4Lg&ZBN^OK~goBYuhOdQ&igl32tjr638kPUQCr z9w<8ld}QGZ#AmEryoMx#`2;_scoAEo5ig@FKlug4ViS_!i-DAZ&J-w5!rsJ+ZxGqa zEpF3HgPaNXQbaC3$ZV1g=c%FW*NR8dbVmf4Xu76ylaZ2sC+GNZkbe2v2O|qmuKp7x zNknh#vIBOe`m%PCovvuRrQ(-(Jj^=ZJvIUIHi(klQ3P8+_-c@?xa%*s6I-zO!nNn% zssBOd-YzUgEVHPE)3|~_-gXMASC(J}hFj$sK)A9B_QR2{33F?(@A@yAPNq=ikb%W{ zUQI7r)%A{4^$`o&x;ESr>BiNREHS8*iD(}SAmJ%|B#~6`xyqlCy(h>W{YAe{ zJ1Ha0F^^n$FC7eW)(kNvAXklcwxg8sun^;-oXZNyt5l}_LE$@xJWBPItz!k#13k8U zBlT@m<)nEz<2eZ>NIAC|e`mvyf>P>Sf1>2&Q@I94&`cHanlp0l{*PO{@%a4w(*H~g z(~9;l(6F+_mLqTWFv=c+s5^L={OmNPRP++=CV;c9g@oiulrev9mbcvwR=6f=t~WEl zkRpO9(~poKJRndD>%N_dQ!sk53a3cGKn*fDxBbNtl{Ljq4?yvuo#mwKLV#HyQ{!0Y zVPqTr{rp1~&AT?(+N|*AE@Qd*H+$f#j z$G{;}SNC7vi2pA$58;>p*KPmhX!j%68287l@C!f^{*HEk4BW%fv9TOzJy-ef|BmLb zf;hP_BgtL=?EpO}za&BpzR^F2!gpr<4?8mp@$b2ByD?zcotItWdxsZozKtiwZu$Yy zO~Em#KYedCROB3PbXdW|tO*Yy-mnK#_j^y$%e#BgPOm3ghSOcx;chNS6#Y!IXKp;T z#joi# z1mJ#}`I^J!l{PmFbaeEXV~N~2d-s0FeP=>=OX77X>`VcSY$sU7o0$FCeju+A*&Ec#>72icfbkK{YUee z1KfmY4RU>Fd}!>KX>;v}A~!AL;vM>-kh@HXfA(E!wqxbfjN;Qf@AHK0cXR6M>T7>} zqb^mhA&3G*?3d#^uIsEnSLvjrZjY&NPfmm$6WL{-9*bSq3X}a_+*qmI#%l-PKEiIf zjy6D|%^HCRu`@$GyRf(;ED$PnCT5ZY3D1Yw}B9h-#xTSi4rfs;30vuJCd>Dj4ww0Yv;KRe$maneYZwu z3&6hjg2LwVCaKWv_aW@C?z92wjW>PmaXSvXyEvVaV+F^SayQ=~q^_6MDe@Y<1 zRldg`X-Ofg&#Kk}23M$T7f0ycPaoeZ{v6aWs}#IDgtfrX$JINjt9;<~X-AJu@%@gF zUvALS4Llvxo%)@u27v4{pmdKKPhRf#Wd?!JFmG?X&WBOk+Yzr-BqG)}qdf?-4-Wh( zZ zhZ&59c-E&ox3xBfw5-ta@h2kpfhdEXCv603lt&vRgGLs7!tIrZ$ZWS3%O zdwP135jci%^~AZt_DG*7Z>L3{RIsk`I#1uM@7-v0p5xy3!){3*R`WA+{l~-rrq8tA z7p%S*b|F_U-UaYJR@sAjMFqDAWMgVL-i1pr1?+zC^TB++(K+p|qqNHL;!W)IL3$h8 zOJ=khI(I3o4M2OG!hXEtf+Q{yX6usqn40oFVU}MaQAiC)< zes9`u&jsPZ?iJU0Ng~7s&Uc$Q-uYVqo(Rq^gJHrp9j8oDC6DcGm$uC+?ttN*D7>n0 zulw~UgL`!E{W;PAivhqUX?G~-p2DW1X_VpJ_HO6M4(}&M5C&=U9cEAWqJjCk zx$n&z_vZxIR6-x76zSdT_K9}XCe?-4m9Kq|(A(?Jc+?tUfSpEzpefe=3ceMg{EITw zLtRAQo8aB`1Q>^16PA@+4eimo))+{)vT!S6Z0e%y?| zU^FLp(!5bbWE8fn2)k4S7mGewTJUTq$65C7!8z8=m9>B*f{PBIgNVnV6RGNP&Fkd* z=Myi{AdPDflpstHPcrs-CwZOK_4!2vj(zalv&n}IM`tKq*UhEa%_K*=s%M)prss11 z$s_mUX(($~9c9%yAcR=JQ#Yu4Z?5xF_;#^4v05+$e{sc=cXc|g^F90Jo_%*R%n0c@ zhwr7m&#~fAdmrRwA#}g?o-WaVp=(Kad#5$FJM%#JHdpI;$Ojtg_r?HrlwMKWkdc%v zg8Y%xznD?eK_;89yGc(sOVrx%Ey|`RwC13qCPGx*DP8 zSpmDS@jA8*z(!^S`3G-h&G|q-(Z_>27*d*>{hftO>1JQ4x_z%ip)m7 zz2bh=F{>fb(BdqZNJMMSCG6Yn@sOM0RfWi_O}brLx^DX**wwLpH|)cd#}U;d=2qt^ z_VV+9V#EEQ_xsL24jLhqK5N6LQ{NWe`=6DKKV$08c2i!G!WV~{VaAC|pc!WG09{ zjypM^J&lB}MMCaGyt7w#ZzVm==>V`(yq$GMzq22jKDQ^427#>1ooK%2#6+jH?6<-B z7+tI*PxRiK)D2(7p*8K*C{UOs|8K3leAZW0t^Bchdxy4ClbGHX$Kz{y@AyOkg8w_2D;x_1?LQc@IW;P@Ylmzhq;m%-1CWw z`&U9qz41HmBhK)DC7eFwoicDnrzG1aYOEvhLQttWS?8)*R-XWgAo2A$kbQS%gF)aN z?n$dr*c4`X*P*X1v1@0=qjDDPk%#G-B1F;y{R!Z`7YXr)`jIXTxWSY!HV@lixy6(CuOt$K{PSp~anrTY<`%}R6!4EK55JU2OhD+>@I3!3 z)RtOgFhYV76MENgF?dU9wLltiHntaVfw>owV}UP8?mkh~K8t}vz2I-j7AYg?!2F?M zY?#kkv+wSG;ySZ}(e0k!tB-$nOd{E85J!K81Z6t7zd%&gr2zQYBkf~)Lk-3>cM23LvGVN3dz zj=9|ZRMn@8%FSbbw^WbIs!l=-5^=1;V;^NlHb51pGV9y_720Sy>2U@4GNjn%WML`l ztk~vSQi(@_2^--LAXZ+vBJj?`}6UE3gu(t zY*z>zhm^Rc4w&W2vI4thF1LOa49V|~j#RBEF3x~T1HVqvF>*rtEd|}>gNzl97OyGW zPC_ES#T{C+hAdvWb%Vxy?mHYSYu7$qgfAxQDd-Ds%hjQm#gHuqg==CLL1!!4mwX^B zqGhZokLQ-gp~chC!K&1%&3Ye+$Xqg*Oti2_;{?mM*l4wNS<&O;J+j3OEPcP4T>LW@K1n;E>XRjytN$?b*yRO)XhTcM}3D zcfA~e(G;kdRG@nIiIj*(wONswq!pH5%IqH|sr~`Jfm97E1-E8Iu7Dz@RlcS^^0btY z^IR{$NENJk_ZB6UctS` zD*|ArN@J&3jc1XwlIt30gW~9^%nV_7MIpNrL*ULn^P}&Hfm--2*x~wJUS{(LW@!T}l8@Jz} z|BP%jwS9;mFQ`-2>2gL2&zk|{G3%SA3yK1gwR(kOdL#C z_f9IGckQR;gR}3b8ileimMKig=hNEs4L6+?2UZ=Lih~OQPl(PpMl4ses79aV#;V2X zV=KMP--6Z5v=pV#yC`9^v>@g$Qi&BSKVD5T1tKoeo|l8gCvjtAx~DoAn%VVz0BAEG z*=Lsh35q#p_*q2|z2FM}(Yf$EZ{r9JEntvlEQ_Pg!OPDei`5vO5_l7lyVCNSFm4hWC-m;3iTWsjE7``Dj4bJ!-;njsl-Ji|)Wr}TFGV1w zo%LKu6O^z0Hcz~mM2t7ncN`!(t62L^14Us$AV4SFEYyjMK>Kad_WT_l517;`)MH8W z$wRc1_+HnZUQpWuc~1}x!XvHJ$#%Sj#{js zfw`%IcJgOkwfFcm5&{WMV~_lP-OywdNbf0O&edh+L?0^ksh0n};Y5WR1O;EsR ztgk+wQn-gk*9V?`RWql_SZTj{^>R_6E~Q9gg{fsdyGHW0%7^#cx>pJ%gxor$|G{DP zefrG{;;4XI!IXDoZhR0x=jszy%4V|_#kJ%XAD09amTrb4OEhpp2=v9$=nPt1KKKzn zo04I!=fr6f23xedsRwcW1G5wkJkAc)uUhcYpU2MiL<`Jkmf-e>$q) zQ7b|~6C09uJ1VNUW$rnUez&ow$b!Y2vqLZG2=mE^{-tB{D8LcoA4rPUC!lx2!BE%+ zcth!vx?tLDS`G+L&Hs#}H(tfk6;=aKL}*qsuSx$}LR|Jpf5;aZ+cy~t!)5^z#PQhn zMiMn%CX@QSy0>fYE26ez|EA)?+Fjn(PZ1>)B{GS`tEz*{gkW7=bUq-Fc+lk;M6r-r z2hHw`MtH5q2aky+3t7C$oaK2xS^*^OwN9x@(gg&kMx(ffn6{{*q+=bneMwG%sNZ_K(0CfA2lX{JMy{@m8K!g>EvpBkg-RwbB zh)-Di+OXBg#nvLnE`t32+tkYxruV=wc!L@c;(|^bks`qxOAHCCx-x8A&tk}sXkVY& zed}q}25XWb_R~<)QHP%Z-P0cLDQytMHQjdMdGu6D#GCgE*BM0VXh0q$)wv9!nj{L@ ze^{2^6gq3fcTl`nTWCOjsp#EhTCTWoqeJu~^~TdOft6DTs}rkONPWHO(Iri<@4QOY zSto8C72dYb$lI65b@8luSC9SOa-()nT+6SletVg1(tc_xuMz^5;MXLF;cCi$&mlqE?|B!>&D2b-~m9 zC0E^5*FB@;BrU~?t10Z5B#m}A79=0rUL^;QuL2=>pHD)PN-LBf=Jx9j7F5P|3=#)h z)%#ap*2?QNon5LiLQ54!&cL7W*QbmBv;Z^B8Hru*d%0tqleVXeo;-%Y^g4<{cB!OI z*v$Q$(mWU*Wb3g z+AzZ59ZFYZ9%7sQ3R#CKDR?}k#?3rm@ru_SirJm+*h$H}w!1E@)Nzq@B=pkfVz052 zWjW?GNxUK%ov0jQm*r1CYJgN%)Ta1{CAk7*j=U|1u>EOCD>#|kc^v{3|0rB#cj9C< z8qQiSjgs>UFjg5i*m?~8p04U4G4zRRE}Y(4AVZHuxQLPFwV38t4l&C-xaZ)_ho^Vu zh+utD^5e5I=5MRg@d4A1Be;QOCrMVK?`&XU$eeG!ElwCyWVkaE+VVWu*h97Nk%PAv zNQd)|cS>vJTZz<%1fX)uPLE!^HMXE0Canc!BAv-k+2}jH@QKO4R=~>aF$YV7#&qb5 zme1LyaN1GQ^g`;pbgYdFE)83Nk-}dASoc-NL!5Cj7(|>1$&|b%1>(HiuPAx**iJ@b z7VYPEvRya!8s~o?rLDZSJKdjFa9m?8TIO4B<%c7GUf_A{^pY0D$x@!RaD16+YRIpx zy=lR@vJeo+vsK_4{%kQ$&|Rfi-(M`6(`65;$tbod?>tb+LbmnZyJQ7*%0IxA?mm=@ ziJa&a#!WB@xz~+fUyoG@M?Pm}G)(7Ow6!oy8L`r_aC(5QL(LU4DnB`XPHHt$5<&ud9lyN^z`1cWRq0bw8p@ER!>WMob1asOMWZLW#h$M z&fgPa=1d_a348Lp7N17iTIR9(a(zC!SCRg~WM`hAFOR;BX<7K`X3Pje-@$Ir)qIc# z1@PJwge0b9`LlPtCW;iB%~;XiCr8)@p`@vWn5+pCaY^q>wvC;uJO~sdp}T!+ri)73 zXGd9k;+92T2*CVU+B!KfER$F<-_dq*g5!ue-IetV12b}R?#crd>r~Arji>};bV8GE zl7IHk?kyjD%|l&;(xbzoIlyrlu5JKG<^?@3hTX%J5Dn*)ePLmA#f3Fgm?DIQ2v_q% zgurllvj6+dJ~oY)94CGGg(uVdzlU}C7%pWP>2xcg@$6sB@d-PMSHn;RU!y zg91A*df_fuSsjPLR=?QIMf*zLoq~Uk`giUf@t?T&o>5rtHMDag(zWla#Zq#jqV(`H z_GN8GU03F=PXG(N?<#I`@rRyH>>Xdxti!*I9sJtJBIhJLchd&me6ijeyaE7Zwk;%@ zf2(-Uj@>?(g6Ad4_>?RsLL{dpvFUCUc7EK}r5)+6ywA>qm*{(G@OrId7SURoeG};Q2?_=u8etmEMW44yV^yzNRu}6v0J+OiDnd)p0ZB}UC0%e>wbEn8` zL(%j~pP(WgZ^~-^t^O`Z!5DsR&zEphs4`$3b7fyzu_AVGhNTzJ=Of$!>w%iUK{KV;A4a3q1?O;OFfPWsP

2PnDS>+rFtS#Iv+oS52JB7QY1eS+o?))*J_ZHjtNJhW;kNY={Gwe{ z^VF=(pIyVJq-@cCtRPfBjb{7bvj{ZT!G%>_u#do}CVTLOd7LAy2>59zFtMei35gX+ zv?LbRQLOLUDLlXi_@)Kd@8I^?*$wo^X^2-a+IG0d8?)y_^v8$YRyvW+Yi4)%t;1*I z*KIFeguneHC9bN}jl9@@#_{<1`moyd7W>iZ+9L&)b_}xy!Gs>?yXB@nB6eg(=y8zjK*=QQV>hT%yQ=#5*cJ4w~b-O~ z9P9b0?Y5TbS27i0=K(}|uEgn#FbLHsPH=MBfC%1rxJZd zcX3Wx89i=HSc87a@CgB$?|EOd;r5YWhHW{mG}P@e{!7yYEvq-`>cavkz>A{d{2n%^ z#eeyeKp)nTe3}-opU;AR;2ett*c15)QG8v#QQs)z?!XiQbHUqNc5mkm>kmInLvRUGgfGb~Aj%vk(9 z|10~L`Pi4fucEiWpsL3oH8O!LmD{ds{fh)npoN2PeBamCl+St?EmEmLucl$!9?fcw zP~K^I%O~3GtF7ES>~_@646J|x?q@uaP=wbzyHNbQ2SK`OU%;D$s!6<9c3qI)VfZdk zJ7_oA;QOv0)FY`gd96cB@K_3`cPN&=#%U`;9;pm5F&lLC`mHRbsPp3{=osBdrY|2e zR!tROmBvqUWm9MD6~S0+{%@~azh_+4C#g6Ld29|6;Cwi~m1UKP?f$$+&L3**wF8oM z=`#^YrL?eG)$SiX2cjR@%X?Xq`kBJh%dy_KlJ=iMqD`5hJ}69j)_-agJ5uJBDuWst zUFud9r!*F?)!?AO0te^|EXmQ`$y;s2)sM(1;FMwi<~AdX9nj)U`hHRUGZnhfju!_P z{xe^ZvWV|lI7mG9$C1~oGjtJyM}bFM!1y~!(UbD1$t(NckWpV^b#&8t+;`G`OIn{O z^h03ZU!4<=52dzYO79sM;FSUR96Ap#7;I(2bMZRgh{~5y(@B&cj%uvEA3K1Qsq@CX zmvqAPD~`d7-95dvFZI$MzQd(s>98pWaOalxjEZ7-VxSH0h-#KGUs_;ndaGwqVp&#N zgnK#%nbR8W1$kH)Y5_@JO&@pZ{2aZ9f2C0mmZm56f{edNqzI#u!&@Rj6UqiM|7;Y zO7s2`NK(_hdt!`#lWF}T)I!aAN0597#MSurtq${MlUVH6s8i&()9u+)#{~&WH++^2 zMJpm_IICWdk92gtoHm?7@dj#$;_Cxym~#u;#&ZZs#Z7?B!`mu6$I)FO@{Qi=EwxlT zM&JCHUV6n$mCo{NVbh|+-=C|lH+!ttRCZQt*@m@6#=Z^L6|SP#>j(fzM$R2it_tKS zhyDN(l-3Wt+Fk4lClf*>zi<+_O)gkkcAQuyNY5*@ALznfZOQz z{nRoJ%nWN^N7vb49?z!*bgc(-{-XV>Ec}IOt*~5X{8%&K@iT)-e(Fzu7kd#DpB5Ku zC8ll3xQrzq!}S?QzI0>EPwxzgdSfN?(XWug4TAVl1~ zpa$CAi1$ud22X$d?14@w@lLQ|v=Hf>Y9cqOYtf>8fXMGL@ zzrKuS>gsqxD9OeDrGa5cO%%{`X*&<8`Yirc>wAp^K`aJ5#v%&A`!&bMjt$8&JoW+R zmB1$i7au!>DsD9PdiqBydtk~R#1)h2@_&p{x8I=*3S}j=NN(g36uiL3_E^i3?sXt8 zx_T|<=P%&nC!dn9GzxH}6%XGwx%;rz0Jryqyi#v#H!7*+dp)_u++3zcTrtr*&E}In z6~3N?8W$m7id+4b3B8}3c}TC9`+cA+1T6*kZaMJIgmh~b4cPE+&XY1+F74EaV$-bs z=fEU_6o_!p0}^8#8nsFLpH>|+feH#eWqg-&)(ZkR^_Y@&FsA&tgjNvqFzfsJTB<2r z|Ma@r_Fs=WADd`Jf8w9d_P^aSlKecd+2B4z2gcQeb`KH!bpYwXhfdOp#z11< zt&xA%Jtu)l@C~VER(wd&d+k&zR&9ndN0aLHobA2-H~J7Rj`XfdwW82DXD7(U7Z?>-u}K2G#fV7}cp1n**H$%bP8q;mc- zNlr(Iz}-8I7v2iYjSQ&*t}5v!J*wA^c$1KaNNLLe(Sk#H^;XX*MmR1;{k|bM<-Qw< zylh&9YILHL#M3Ccu!J!5zPk)owjtP-y22f@U3)?+0X_`mI~2*3O2*`v{?+6Dg3W(8 ze9A(zx@uYwIQhy*RU|eo*j4?FN-?D84#v(T1df)cms90 zDVWsvw7uA8()`r=D9aq^6oi`bt?ahQ-VuCTMZhUDqkAp$q#i`?^wdrJtOfk zGudETl|0{B#ILvkP*E%ak*2Cb!r{q}Zvh};4pNaGeAKfoLTe_ZyWw2qaHXmE_ zbnYvy3lvv4$8ipWD^Q(Qy%*=syaT%%hgD|UHv2nhG?q^@7!rQgdmjEC3gsmZYx0(t z(yX|$DXP%64|8f5>IGC4%J1DCb6C;a|3!$e|3)YNLLx9F@;`H-|3dNoU$a?PUF7*J z7QDVrK6B{edQ@4S@2Ws*APTow{R7iGwNn-10YDb)WL>~82Z?fzP^*_nMbI z$q%?=u_K4LIT1tLH{btFmBNSQ3VQsE<)Dzazi;HuNv?Mi;81tWHU|I3F~HsW)3C^6 z8HuYOK`nZ%2EJG@F41;xz)5YEX+V=~jk+U{qOpXZQ~xMN1-mI&ozK@I%kqCkeXu{?_Xy z2|tHk-6h>|T$mJ*D*+k`JTTseY+|AXlVO9u;ZXC7skBRzT#9vabMN)-X7C>Neh@18 zP!lDW;2sN*+fCjp5E)PuA`DQXD%x0j2V{8{daAF+>+e!I^_8JiNDh{+KoTYJEyqh} zyGD?9aZXyfSfjt}gzZo)Ir}5RY@IUxw2R&sao38sWqmE9HOO1Dha0>}XIn)=tbWPW zHmc7fr%R2TFpl`+FUc5p?1-M_-#ns+G$GczYQ~YdIp?$^)(lK#XoR*DN`Si?0!VeR z-%!Mo!beXA)I69#K;l$R>>v9kd;4yxhNYjKXAr|zOBwW0bRg3Wwz zYjZ!8dm%}3rR{HVEnkg|(8mNh`hEjY&?y-WiQUM69nhw$L!ZAcn7Wxk$~SZHy8UAa zVQ?Q*HzqZh;pE$N6K`_QWzxD*c?lQLoaW^(4^tC459I9?wbwd(%?R-LtUU1wp4Z|3 zc*0z(Ueyu~thrG5riW2AM} z9wZr4raWf?1K6RGZUN^^2!DtofO00v?LJsxrA}_(g+L<#lxa7$^l5i6PpsNg>wWkoLVey{4@^J_gO#$v6TbPiY4@zK*d_J_c$l*L0 zi6iNdy7xvjAgp$DNWVmXy&A&^a4s@cr-F_**P*||NJSo-55`{%ZjpM;F*~BQaa=y@ z7>8fFMz+YyfXLQb3)f^impygZsp4a6)iaV%V!QAH*WC|GQBcIpCo2E?e+RW9!0nJn zTXcpXFI@v@wFsslYZhBNQC!_Y*{jG@T0l1ksnX%XFAtM$`wp5CCfTrwcJsQ=N_);jFI$guH#bIS7&c4Ri_75OI3FF z(nRBO1uTA|I=-A6k|69J)FRN3Ywt1&vnb!K{_@_CiTdNQ+9sco?0lg#@yWZd3aKif zDWfncd!{CMB+0fl+IA{e&mifl3Nv2M*4Fj2@1e0vnscvHwX?m!vYQgMBcq1x^hP{9 zvXh$BO?{_CUfRe*6ZfW^?$8Y1pw2#ES)OeCyVH%l#UL$4TYJ4p*5W{MZN82JHOPy?rKu2r(8vT z7af%B6ZpFs#@kz#^m$t?41L9$Y=^y%^81zRFz#!|;;TvR_huNIHXc-)zd7SHRH*c97&j(DrF>(f^LbU)@XYk2b#tw>8#(D}_2 zJVD4v_O_S9U{u`3;w5|+J_UJr9zs=HE`dZr^es0jQQKOFK1>>)NE`=A2t7?{a%&-` zSpL4oLUy|CAJWGE z!wwBQ*}ozjp9=NzRx{JElIb5}mm=o*8SqBL%Cu5Im@Z_mQ1D`$E}HtQqxaX58enIxW7wJPt@LYmVtW^N^4lsO~ zQ3)(RNiPd)>}hqj$V7`=FG-q9M*MHYy>(R854Y~C(j5XWI;5n#(}jd|cek{3E3xPj zDd|S(knZm8?hYvz?fHVgcfWh=aqqt4j%hMCqM4HmwHJ~)TbFteeFUS}9nLBgFDZub%m6~Fn7kJbmF9yPoS z)A6^*8QE*{FLL!*ym!m7_y}#vbUIL7h!5%@i8{HynMRO?VOcOc6RaD(+l zl+aB9PePx`YU#s%=~tk618#21zbXT$GF@(9$mQdwdCwXpxTnSp4H5QSPPIX! zCqp|M+17?em+J|k&V!Md$MvmwZkI>X=?Og_6lTdU^Y48u#=ysncJ3%%z?CaVObpfz zQQgW_#7Zm2)yl{t(e?@-(30g*Lx!G7%-ECVwJG_Gw=T9woNQYi>8=A*92|lT*Q*HG z`r88)i<5XPja=bOn`?Fj_LS)+Nejp7$*UKGD^AeoXW+ZJl4br}8zEYu4T5c7iui!` zY8;9HV!Y)EYP5^|v27Bzcn~u1Lze$B>QIgs^3^pu+gERy#}YgN&egJpQ+w?KdHiDI zJ3>%ihqT8gmx&OVLefB4Q<$z%X#|sgzjaulOrnS0Zx02<8hf_&D5uj{dzQljV3pdj z>G4E8^I^Ba-4gE8Gv4R6kgZsFdS5diC(um_ZeD|WSkp;FKEoaf)ClGF_SVQ;0b4Lc z>_wW}IueM00K13VcJb3fja?-suxnw+#0Y%fJWxGq0o2t(eFEkZKbU=oB8MF0p(afz zHqH;eI9Ve<3Lm6+)FkQ_0f%DdUvyyb|4B_dSP17^Vl&$9?OC$sMfsS;;#KWF*5MFM zX6aDElzjX2BpE7mqJDZyz0()s=Wq(1`$lSh{5=D=NT=Rs$VNzsj4V zmg!Pv@%AMBy_al$A;@!nYoG6Tr>DIx4%;oLf1EIiVBaz7dIUd6K)Ni*tks_^1UmF; zthv2VS}+4a+!dZQg|8_KoZ;-=yi4~+UWKR2fHY#Lp`dSIhXsy%2kI8BZ)wrzaV#r& z1RXyKtgHyHy{_HlZZ%r7!VK*k9f`ipbtT$Gh_Jt<*-Y5zZ$ShRfkiY3CiSA2ZESytw; zM+Ta0nT~%GeYtM$NEC_ioh4?SjdC(&1?Qtd`~G8Frl1g$qOv!CQ1&QgR&)b((iief zt`E*c%%{-SLp%#4w~G2JGy=%$w-+~%25NM%o^KU*DJWuL3Ce;q?)SemiPe7+C} z8*oloL8Pi(e^8)^?Pf?%Ofg(A>zdA2Hge-_pl$ zc623rp4~3$CDnxKHa-p1qhYEd3EO$qOA!i^iP1XT-X6=YPT%O74eNICVPXbi3ry+3 z_DJ7nnD2+%O5BT;0=~XR74T>Os4}0-GfE@nb%aZv%FtR(P&L1@^V&?{Mea{88w(aR z9PhWNwU)eqIc6)u^wrOubj;pFP;1tmvRqcykiZmZdDtTV0i_n<$+TjTc2SboTu{c^wbx=^fkR zglUbRQE%-^X)__`UdGDQ;R;kgeyW1lIK?>Op7x^Sq8It^E?Qzf*VN?*u zq_vNkjL5F*_{~6sFwx$RU4wUcw-Y!$NN#567o8RI(A=r z+kgO)ZpU@fbhNJ_+Uz#!xp*r22h4qMzahtwqvCd7q&!C zECB6y%W$I+u6ILbpIaq@C||@~B3TwNp`X@6C8ZGwe*M zeozmIC+hef$L2>~w~H}}wZ}|@nx-S0U)iMhlGg(K0P)_`nu`aHGeX9$1-=xB&`s9eaAEPG^vi! z7sXjN?JB+m$QslX5eS?(31|hxMIu}rF9x6{njwvw+$PI{*IIqzwty|y zron*9ZDxwE?S!odGk|*@D=E`qGpLQGda^y4p(_6sV}&pCuKQzIz+S>78_XV0oL$EU zgj<{fOfXjPmbz&zy=L$az8n`;j{N=L@%X4hTweDPSw-JsXE7UkBH0dW&3LQ2Xurhw z`Hk^Gs_zNA)MxwTo|RIMRt5k;vOrZD~p!u^BQxvKL1(- zG|!s_7^A$3Efr0-+g6S*23+Uf=wqe6gA4r*Jdk!p1#1ue4qE9EEw(yogd@PU{#(@Z z?b|q==L7ck!AMy?mXN~p5F2AJ*_}#M_C0dmH}i=5K|(fdyX-axT@$_ofs|rB-+jt4 zt|p&n9$_yXZ$W{ZD}jg}n=ujr(nfzsh>3BHB-67G%o%0)NGQuNXt24-zP#x_Q&i9% zu`?hh!iAmM!!O2Z_#Jn{IL9YU=*cx3>%7ea=!2Jqf~i*xi}c_I$LQdzp(=Y3Ng86~ zC0o;8Trd?VY}0_)GXNJ4ZCumUfCa4-34d*{2=5ss1q;Lb1m0DY@GEaMft0FgD~ghz zr=lPb$j@lttX>^8iCy~-4{a%uguxpL7>A64i=ue9uCOF#@9@)H?8-7@*zNdozRW#J z0lw<~kTZy7`--joLm{7!_^b`eGTS+1jl^zMP*Xxuk|yAzNaMF@uZD-FnfLDOi~(|_ z4^~JRaB(5n!E(BEF%t!2C!8QsqEDa6d099QR0UiSwu649c<2x%GE*I%3}S@zjJ#xw zGU8`$`0bn_hiP->kK`AjgLrczZkpcC4ruUw;f$(mp<;5LE(Z3R?bLYLp=kzS{XWaf>;H1rw;_g?{#j_lvF8yams zS?8W>`7;p$N7!fsBvm%9r@4Zn%kWD1LD26raPYfCbx5vCVy7~;@dnr@STj?c*}w5PdfQl#^;!5^q3n__+br_Z z7nT~8;BH$vaFSUEo=v!Wberwu=6-;(+WfBDdBJjVyGn_9c6&=N`%p;~4l~b0Gnih7 zuSj5UvHropr~oh}`e-{qhTc%Yn%>zZ>$r`41>OedFGFx=q0k2lNnowrynu9=>)r4iu}P`V{Nt%VN7WKpNAN zxbV7}Nbf$g(K0Gfpbd63?{nzFyqq(;k39d;zMO&wuF6UbG&N?MD=MvzLT}o#Q~(U8 zimmcP>ToKXh1ppq5jMsJKb%|Wl%UA~#W0TnRJf)oG$a!%N-{ld7JizWB<%N3zjkfC zZ2KDu#VPpm6A1+`;I{9tG#t5-EfZwXg@$ivqPD4Bqf(jGb(NLIAry>$X`aWt795Me z$0DVfAxr|xqRTn5JHm_sSZ}P2@Af-2{VOwMOkmYu;6D|HtN+qrBq)g6QFC}Gs!@%aGkv@9+ zQ3X^MxWQtk7|*Av<}vJlH$F@!I5%zoaT*sazMM?R8@#KI+le3OW;f`at~%c%ga^)l z_LCX=-39G64~1lhQNconX!MEOl?XkXP}HIvT1O}zr8&<3|6M@)@BE-a)2$@) zw9}=8K;nkNZMXEt#;g0)^5<`Ra3!7SlW|>!AW-zm7jko-E{#<$JF~Yw@7%1A;rHAM z5D(rpLMy!77e1W{G_Lm1z-TM`3#u_ax+zG>%caIB^SZ`~!%tRAf;MVqFOXi@KHipj zY5H5d7&TA@9`E-inL>XMS<9FL%qGboO)N`|X9z-Yv4f=S%F$eDTQV@ylJnMh!ga~# zA63C#E0Az`!O1sRnYZm-a5nt80ZT8Ix(`{cmiLhO`<~l9pfzqW+I^NF^~TY=-&gNI z5WW&686SBd9&{@ev&|L(7)#ZeW}C2m zVP1rWEFa7rPzU$?o>086{e8@8h=|NgT`gA*^$Q3f=Zt=;;6yrvIjxcj3l%0MCwXzeU0YJHociENx)A(6zt8tZ{*M%5IuNcUR;zy%sQ<~e=|FdwwNC$GOTXLg z?$|6cYeV$Kts{j43`J5_1uu35)is(my#$=-k<8pz+l_gKig%MWcZbt+qam~Aci(3Y z_SHT4PF?E&k9vm;3t!paPYMoiTq;aRGIy{YPyyVZ`tqjKP%;@fOGEu2Ps~oU1xWuHK z8ja_vCshIRxk{f;e4q{SA~$pC_nM8uWY6*#d$7Qh=@=(+{IPuXVf#xsU=#Y(83M>x zdu(q3WOD3jH=h?Y{EUkGGlYY;odKrL{id;H*Bd>lLNilt?w|pJb6Mv$hvjg z4H^W>hj4*oA#&it^ka0B5BMeVW5h0?0J)a#0 z!@xEB63kEHl5kF|uCO8Cz_2;lxpfc{t)1VUk90^gH*E%!dw5khHin;8Ee{Y40nNrw z=)ao{T-rSQkA^bT$(O3V;!^?B{Jbm$fM7Lu_TgD5G{?p+AXR$6jhc8fK>g@1UIi~Q<^0wEqBThLraO`(UxP|`+jOTP>q@u znSrAxUeayPDl9C{&6SJA;E9e1LWwvCmQQ=rpV|$`XNyeP9lOtB(gQMSyl57E0&Eq? zLAtw$gL5MACxNf@KI#9t)DQB#wfn=^2;3%voSr&d#R^}?Mkb8o`^r&3U};+|U&Q^> zQP3)UR1C&1#n+#&<*=Pd?#p1`-n1C%mp~iT^e@JxwBLF}jSA#Wc}npL zF7`rf0CFa#s`5qSX-QShGT-*xrRqhxFM*3bD} z)Q1G`FDCwB>kQ=x|0ji&zY0q8Z3WsNr{xAjW&gDNiI1sk(y&aAXs4yH_;&RN0e>kP;)IIw? z_~I~zl%VzX|5qmg^L=mO>`oMy_6=7x=)~#V zc>TC*-M+Uf`AKI)18w7iapnx%_32{blz5rRBPaXFO&FCA3 zH?6t5F(r`xe9hAJ6Mhz9j%P48thOEb$8XS@kD^g|AM^-cMfqrxV9^T!A4aYA9p&_! zuPm64kN6ZvV1Q@Ui+l|!NGDoOb)j~4N~mdxE_Twh0x7ji&6d#ySWpD+(A<&K9XuBB z$=5f}`6O)HQw#cgwg4~1v(wo*g1YI{LQ=-ZgeUo_eWz>Mwt5BbqF631aqs%(&Ooxp z42TBh|5-FZZRmHB1Dc8dhZ3%TxBhA>$$+T_^w#2C4j_Zqo)0Ua+J0Ftt;ZNX6kQ~$ zHIbL5K$X%GNnAf2cVr=IsRT_yD-z|KUx5x!P*dt2%j{keCWtdu|JS|h4c z!3gIJ--ugQ{ zDsMdoHUb%-EPKnT_cN+yE(GFU>Ja-+uL@1-2hl|BiC6;=F8R%P+!O1Z1vOCNref7; z-3NLKxXa&K{CxGszR^ZHJsJ-Jhmb0b3v?O`RHtHY@9pw3 zQhJ`Yn3<|HaXl~wv{Z0#35W46%YH_96sm9a< zs{iGNpcKoM+VX1lTd-(FS%hh}Tnf$6{$8jE@qLi+9l6(`F{yt|%l*+?MAJ&mt3h)i zn5hq{*G8b^SfIpxyECy}Zf#5J#6b`F&go|X{1xd{<`EF5@FF#{AUF zjtiE@5#3wz(jCfy9Qnf#hT(Qc@BAS2ET#e~beX8Zzaj4N!2n`RqO5Uz>x={O(w8T~ zKhaln-6oGq3?yd!7|x+$#W~}1ySen9nQw>fdTQtNp`Ipn@VfPhWI)Q%_U{br^h!q{ z7OWStaDVr?F7#hh{2QPM{fld`i2il!^jK;8{;yQp+~v<6Rv$2_xra*c)qraHj9R*z z_p})QX8x3f!L9VV0#4Z~n!lub8^q-jCy3 zizhE#O&vh+@W18*?)o{WxB*XNCev-N|LQQ~BcYys%jOUZ#)~lWyjQi0=^L}D{$d|U zeyhOKp;$^rhPOr}zuQ@ycEhQ#3QEO59fC)1ynzDPi4sdG{GRyIRXbZ(YKs37iaF(z zU(umna9zor96bfBS@V!oW zGASObb9YZq`C#nh&DFL8{XZU88^RC9Td{joPo~8d9+*eQc9SBSX`I3BWp_5OMk%)e z@yHf8!DtZ>XQTPaCe!w}0SVgeA`@E4lcT`!)!`XWt0)gXv8$R#3T_ChUQ5*5_noG| zuk92^W`(me#vdO8ZTC_0Ut4~7{uSj-Fq(-$btA?tf+;O!HcN>b_xo#1F@UdX3fkl4 z`SeJ%PadYJi2+gUSn#^^BRS+kZ`7qNR#7CTynllKRS|fqR|5B)1?~ZDOd@3A7Mi)tF_5U1$Py*Z7p2RxGPO!C5|Nev9qnGfS zm4lCut~1*GxHA2o0dnBV?Wnrv7EQZV9<}^QvO6^#+a&vpaCSQq+0S~YEDhB;q2CBz zDN8t}sWl|Af^g^g95Sn3s`6bz5?>@*>S#!dG!rDco6jWMxQxa3<(EqS3eoSl+3Omx z;wh@+rJ(VarWsWGXN~?aSvcBmGEsfqGxj1@xVTJutR_Xa8Rdvu+$qmT4`CUJ+clBq z{Oc$opI=>2T^t20)FT`8NEz*{uA&cOjJ`_tCToe*hEN}RD$S5=t=gooraoyr3mde~eh7)HE%vhwV}5$%;5HA4|R zJiMZF((7Icmc>uc66yOKIx#O3IvOT;zT3a6QAgeDSz156ipG{R8pjR9lr3p2rLh>C z!MX5W?m60zslSjbRs8yoA@Gg1E1Mkgoe^D%Y$8EQfNY$eIa@ds6*tVSrG6XNYMV9J z=Hv5F6LaTzuZhBA_TiDO8?qf^nxyRSDs;bobzpSF$_wo+h^Kq(zjSn~viM#O zZoLA}dbyf?!IYCL#3gf&R10tC9(2r;Wc6K`At2lsJ!yP}6F8O&6D{w^WynCm|D#cS z_=K2{{cyESm1G|91_q32zB(jF#Sr{t!%p1$MQV+PeXSBRP|EkCNatXSuWaCYsdTEIW({_Bq zg3zydV)j3e&4BKd`GI%5;%^pV;S)qsY_QXx_4O>rW5E-546pO#6_w^By|r4S;CU+` z?P$SMyol@ssPSS(q+Pt#p2S*}&2-e2Z+YBpqCUI98Qqjf^k&P7H|TSb)Nog$M9U0t zHH&gNC#iku!mSG14|z_q;4*Opee_wy1t`3Y);D5>&J)klbpJI^t6WMQo?zkV^D+=N z(!}Yy(3n~1t5=fu7T?ZE<-IJhIX*np$dU}p*h%w5CqS$5uG&Bj&MXuyvo}br%vLLG z8z09usni6T#pP#qo(l`BkLP69wi5J@Lo*GSglMq9e&Vu-w}V53JhQQ&EGas<$?%?z z|0wL@sGQT5Z0p{g4JeL%1&J4X+K>4O4A#b1#avSYPvyPG-A*xAUe?PZm-Cere=Hrg z#oA^OJtVx58_=#;^_uK4<=Jv1adzm#qC+mqL40rp-Z8XUu0&C<{WusPOo$Ql&xh$I zp9A|DaG8L**A?YsJ}lZ~wUd@N^&UEQ`MLbPiQai-;8{!yR7lHI?NN63u=(LGV^|k8 z^ad3=g>aVNQFuHErpqKt}-?W=Du&JKjb9-QY%MANpN9UgpQ}m9i z|1V=RbngYQH5Hos=W}KH_p0o z*wKQ>V;!fKwrx5Y0#`6291vG0Bji%~01E$hzag-s9+tVeSi%ZQAR~R>zF0yusfBRB zm`Feb2^4g1dWY)XtRo?IKI*fPDx>y=02h6+q6kG7MI#721-4_GFXS;zfpf zzVrDBLZ)-1Dhur*$I8b|k40!eJ^XDnBO!e!tC?1xGG7e{1OIHygk{=)g*WC6-c&zn z^C`|OAz_S{dD_`}3_YX$_z#1%jT-+Zal&6W`?)Ox*JHdH5T3^LZwO2Fv+<)~z=~E= z=ctNyUEMO+!V?kWx-!*!y)9$gEr>h#}vhIMEs{Pq3MNLMMrB|BT zB}I0&H;|0et|%Cjqn6stut)gWH2!%oY*oltgP3(+7-xXQDx~dK8M3bsAug5)BnIZxNHM(yKkLUH z{zXc`Aw#@S5nOO>op9pO(YHdiq?5$RYt(w&_+ElT_V7UyQO8DDy-dWlg)$$U>BUds z1#CY|tCJH(gxnVQm_VLcGD9#2!FADJPJ;z9l%u8xf9-iuCj=gJ-!EUennl#wd$CzC;er^s0XqSSigNFB# zZhhu@+9}ou@Eif!jB~3EJg3xVpJV9MCCXbMvnuFS=gg?hUoh%o>M|Rf1Oy4_w|8q} zs2QFEwrl%_(8n63*>&N2DsuhOUJZ-sQ0 zDPRp7oY{1}Ip_U6wOKrUxJZ?O&ISkACzw83HzF%9$9%U^teEdO|`N+(u}+6 zZh(4)?)xOhH&>*u@HB%ww&K)RhwOaV1s<+8egS+k0We;y-CQ0#%@+}b+^ZwNy&FIS z+#`9yvXsIy-?PF2TP-W1X0A-YPLbB$tOzU4XAK|R<0I16wzkL3Q6S84UzPS1Hju}N zb_;c2S^gD_3vRTQ?If!K$SDjUX9h?Asn2c&7Ged0cC3`XaI)$+gqP?@ibB+M_BnYp z`rcZY;7>S^N+wv#p|xLqLkBn>%cPS2c9u@1niTt)ZX?WQ)`Qm&ASDzKI(2b8l3!vD zD9*C!#o^=tD=s)V)ebD(Dt52FM7yXBD^R|xEOVK~F`|9slHB!kg2suH84Q=V?k8%t z+z+g7v~hL_h<-SYWsrt!8D6HzK;JXLgN=S#zN9wd)ll1U=EaKZLd`*5crT;q)Bd$rF`LWo%eUfqM5zfd=aW z!0Ztvj4Yg-aPG{hl+AvxDrR1H-=s^UEiBuo%~(f)VfnHzeR3I`=Ov zDGnod|EN}V0TkG1%l;pVF=T2*Iur`xQo~Aku@+<2A zsY8o3b}lYzzKcgo{NQeJF(nlp!fW~{7-9f|Aw*>m_gartEGh!<{7^mFh@##GQAzsB{knD%)V zv|mB>LO}t*r!kccw2MJL2Nvs{l`vb~ePa^f+@^ zr&bxBsRlOj0y*IyKgT{dcCORZf0tZ9UDf;&8%Z!yUT)=5h6tFrc+pI=SGb-A4xyi- zzb!ON+Lc>$M#NM4zL`QJLekyl4LV25#$=I~pm z4>I+K=2Q$=(5E2UHzK~dC6j0E@t@xw9*(36twQuTuG_JfvHf}AqvOFkIiZ3_mU@AV zjE2^@@33q+QBapUx5_inM9CJOZz}Vw%Hu-#q2~`~RPXXH2zP74@+DKP^8w!7DuVFt z`yNveGcbm{sCvl})4SOC*m2L53s=A^!i()<`I9U-BVu2%YVK4UtGNZ z?c<1}ru%l1xfj&bu;=&(@3Q$Lp?wEyVy+Qw(ZO=3gs+?`TzRGU} zO(Mt|9Q2?kA+Gp)8%i?9`-RQzJ@3@IbG~dBHh=+QmP}{cNf3s)sU9!8ow6aM3j#tj zNIy0=E~(DvZM}HiEWdUC*5jlduq)v_HXMoK;3Rj{Rxu;AF+I@}v}h-Sp()#)ulJu%WrhDDZ+%CEUh$ z%i064v6R2AoepZ9comRmIQf`t@#x0U)mB@hJQg;7G4MiB#|JKCV=7LA7|HiQV%j zj~G!!>+K1Dxv*}Kexom}B58dugdR&F%j0+=4;JllR)D$Dt8k5Wj%2;_k7EcBk7qr; zr5Gt$5lobakbg@HJbMr#`ic@A9yu__G~{LcrZ#s&lh9w|3V!go8eJSm53uj1JVEfe zxaY6W#7PK2Es`|#aYUWn<&FCb3X*wCaY4ln!Di|ikkfk04mRRQ@cegXO?VI79L-X` zH6=llPWO5m`0v^`X@6C_qLJ0e%P~^oK&rTH{&UOVi!FoHGdbtLBT;>R+7S^xxx#0F z5%DhN<1&G~=z6zo;;ZY{=WL-+P=p(=v$hSbFeS0>ll zs`;m!?2Y8*6k3`fh{itNVjf?&m6b6o;!2_o78#CtUGyi|xNC3g4oa1F#a^I#%nldG zc23yx3u}D#(kZQ15)Kmq?rP1~?h?Y_udtP|bVY|U3(_xm*F^`={!B1~`2bRX8#&z%9qVuRrDeeh07XC@PKB4mhGQr zVM=75{ThuSA=@v5O)xu7%(XGYMa*WDhhqEpD6|%5e55=Il#{J9MWt_-~`{xo?-eTX{|tqp$u8S1vd5tV9B%dA18 z*7I?HkMcVEMhXN|>hx0_F7%Cj6YrKqXK~s1@nz87d3^4HZ^x0j6M5NC2>2B{x}Dc_ z`B>B*V#oObsh%%L(tyy;)_|ar(ru9?B_y2Yp4#QU8bi3YaWaIy9gr*I4%U_|CA$`T z!c~~e(q9`2vy5T@Y4KHpxa({HShVEk(=M+wA!cUK+8kwl$0B&6x+WXl8qeL|GyN}T zveV^n=s|m?(4LTZ{sEu&fAS^uIy645N3)7w{nKS!iVm0lVUbY!uClroL<*rv_ZqK> z5W1XH{xu55XnWOi_0E|(k-my;lWP?y@U)~{_S1*xM$|*8_>%9GSZsnR_sc@Y1WZ(3 z=d##NutiSI8QDA5qk^i?kXd=P<4IRO1f(#Cg!i@SVt{XjJ1BvM~UAsYZEwd^z7Rut)5LYbda6*v9Nu0t}B$*H9UHdV` zpIUvl`*Kvm=()MwB|oj4QN8sUi{nB4pH=@$!+5(#i}RvCx~9a4ThT;CbcB$0X>77c zgR!%-byxHNbg zpWKz1yDnoSJ)}Ul*Ch#y-qh1k3pK`Vq`jiNp2>z#R_?UECIS@A_}HZsEnBy1D9wAw z0?wxtD^_eZOGAipRg&A1!bu>`jFjgROd&4J^-6+^GY;8 zuz7er#jCl$?&(_1JkvRkBmWxGiD}|BYE|KLq?&8;tY`~BbaC#7Bqw|Rh zmN=OS0ZED$kXFjhp+uT>Fj+%3lYrlLv&^jFH9np1;;~tUU zyh10d=-TMSlk*HmeH4QdK7h|d@z6Z3`h)$}Nk*^49Ehsg{m1Q;3x}ExAB!-19=v+t zf3>(Hgz&`Sj!BRPayOqw{Gx9;qhE(^La9){t-yRrsyNpO@@18$#FXdIvt@M-N#CGd@Q% z3~T4tBfffwq{?LXVZNu#e*vsPd}E6YrqIlcCNZup^iHFwaI7 z$=Qi%7@GNbZ0xUm&0-$@^p5Hy)N4~XfvvRhEV%JAoo_hkVUd?GtG&p>km`=`NJVF z8-OOK4bK4AC7g;jeO^GCWnUfpZ!VI!sJJ6@^^kqh^#=hY^ z-**>3tb$og#IKadidY%K^P8t4*B%xpfDE6OjR)1WP(WhQqHoz%g z{B&$aF4BQ<~{T`T|d`wdU-4&y(SB6 z`Y8DZPuFf61j<{^`3J5UY5;XW3*I10?9_<_;d(_Iq;`!+m%r*!T$-s7e7&-B>+Jhp zIKGsYUKKBvVn`)|k2tLn;cH8nW>lKXXNS1Zhimo&J0l-F+bguiA>u@-ywqE+o-Ycu zp0ALH>;AgTF*EPdX4DKR+01fYo+n9(8rt9~$q^lOjgB4ZOsC2)ZTVtzNmroN9z7=f zBtNdnKSm(wPLL{1-;bi7;|yH%@_mg)^te0i=|YIuTLA(i;JCQBQZR^HwmC~bA063j zHE;vAFy`-{KkbwV6X!b}iD4aFc7KcSQQZb`4aFW;zMYqhS~40=p(lg1^YFYko;`EE zIz*lvMZ^ZYvx)&#dpwkH&Kg7FhT-9-+dN`uE!YH3H)PnVhR_}|Y-CY%goV^OSTO;Z zkB+Z{d^R8sP_kwrVKmn!AU7^q7PMnI9o7DtdOb%VaE*Y#jkOj8FGSG1U4rK(M0*hG zCkyJ}8CXAue(833{>744!zMWH>+KJjUHZEiHC9oLHRU84gBx4jt$UCI2RGTP{`SzD zUkq`Yv^C3gt@Bg#pPkinr_vwS@E7AmPWq$ux;{**J>EOLlI2bXHpUPojDOfhoL$(U z6xY6`Lte9@Wh-DTsGoG;0FJlBe0#N}@K%vs*X3Nq^edu9SH@H(VjMRlp})j%j&lh& z8@n2Vft^ocx8Bx3r+$!|#wc2w|LY#F5~`{Jd4#3ozVhcI7G7QW8ZE*yUCFmv!C%pO zjRl!j5}?5zPW`9{0zvmCy4Bf_Ok|3^iy@O?Rq7INA*x)ZjO&ipZ2>7zs1h*+H-S^Z zkLG89yx026NDu`ytmP^!F~KEM#|EfSqjF*&>B~3>0v$Tgl?Z$73vd4Sf~q?2B?BCG<2s=T&vC$2U=+b={|w%M`7Q$)1Dchqbz z3WIn?M@6tN3FO%Jv4SISi{cT#DU_15hT^I8qX=fv@%uvrXe^4rcnJDUbZe`e&p1TH z*owtd#FUKiTmpm%THB*jR8x5sP}f#t!|N-pO;8Z}O$-U|t6kb#<>n|LgKWZbL{vm# z=Vh4(t+BQVs~$_=zI`MKQ{;^{n1ZoWxT(pzF|^(yS!BvFv=GfxMvcdJg#&~AZLGA* z$N_d}Ddse|M?)$x7szrO=M{f07+W=u9j7?!9Oc_>&TT9K~E(^$X%GhnR%`}2XL<^a^=)e|%^jp!Kd~d;TmK6xZ@&w@*arH`h z58jiTM|QpquRVN@cYM(AISg%VhOoh;x3fK+*Lqt(Hc*xS-)x{{wl2(KKaHq5^KncX zUpM)m;YN6YCxEnUPO%~KvP}a${`e^D7X1fhfn_c?`W|2`mbPp6^%!bgI(!I<(I8Rl z5~R2AWjDIaS1iqnkjs$lxedtRotC3@0|%|=wiU!nb4u~yv3!X z*HC|cm0&VUppmbWl$3vA;e0x-jwijequZ z?u4Do9>Qk5M%t;1y5pbu@S*xm#CNCw63I?VXa};klM3lYD8!!5hi~W7F85u_tx;Ys z@=vWPH=4ZXoUdixrzbmm%kpN+So;?DpsQ)##JT4?L<{Ry2g?&n%}*ApLVkOSsx?J- zl)Y=>*`lBLo?UfMczRt82g8mwMKI|EM3Gt&FW7ungMN2~;a|dz(Mxx<#Zn>?_t0L) zpjCDll1*05OLLjE1pXvhUbW7fQvONJ%1p|Iwh>kCmK+2u{QM}TK9_}E#ueNx*F#2u z!D6GA2QzC?54%wT>3Z8wK|uAI{|*9T4gV(ysFR)x)#Ak$?VkFdOlwbRKvi@$a*=-T z>XYHIw_F5l#&>YR-2tE4Up)l^5s&wmn7;sVgc$Sn;Jo{;g8Z;2e4kGoMm7Yb-v9+0 z107%V=KNF(EfBS>`VuU$y;fFvHdYXq86C=d0_g(a3LBiV7v(qjfjnt; z?n}?$T$9w2CvOeUnyTPK*Km8g*5%v)&XGqUN~MV+`z7mSryBql2N$}rRZg&EsY4VV zCbHKpbaV$EM-*Sy$uD|NZ1OxY8lo{E^^;0dGeeI6b)awjkgu8|nVNF~M1uco*A1VA z^qO6r@X0WjArqv64EFq#5HK<=!TZOP_i#52-Xs18T6YuHZjD@0bzTDE{{Lx09^+u0 z_>6WD{+#^5_ceAjoZUv(46@28Hjt?=)M!>v;Kuowcv1m^HVI z{k-cw@M%e9L%WgPvU=#g=wGqboH$vnP-`joilnnTcQrSSXi??$7|{BI&R})Uz0F)u zba~QR!R4dO&n?{W@!xNViC(z;EaA?EX}f>JX6Na>0HN+CUN#!3&u4*HRP1e+A;$-6 zpxJm7;6DIF@C{eve-(F@QBj8dx(5-E1`!=P1r!8^F6mSx z6zN7{=+oT|zy!}T^UQr;|Lgi) zRA1XwFw@(2(@uUv+ew9JLjBdDKIKw*6*IrL#o&&w6F(t}HQJ;4;!Vu*3f*xcjk1Rl7 zdFGGh8PdD1)1D#46-9bysRdAb7HL39OnPoKC0siN@)cHPn$A z;gOW2MTqqd6`b|Y%TkSMI|t|hnqiY_GZa=?_*MUXEkP6z9!svp?Pm(+hO{9^AbRn2$dTB<<0S z?>c4K$g*9)LykR|l=$^VIDGWEX>jot_oQ6`38soh3LBWZ=E zDBq7S35^wmFLmz!-Q598aMFfou>Ni!0 z3Fb;UB1f5PJQ&B_k_0%SWqPp;%LU&1$n@NYu86z@wtA%=DO<^je%X|XEcOP zK$0)%+IF*|+cdUr9KLYbASr%XBh_K*b2Mg&8mdB`Z#IDzR2jhnG$ z<&m^8aQJv1ejb_9v);j5%AX50Q<-pY2h;^X2R=pRzh-N z`ZAU3ZKuJ{+vFjmk&yO>>HRI|^Ve6Ems^N5zV2C$E`KSj&VI)mVA;t00pT%;6~~vP zt$SkklPloZwh+R8*;O*!x8;dEv_RM67O@dZVUvUGj269uwoIc0u}=KfH3@4^bX?lv zCG-`dgqDXi(?IK%2)#?9KNcIhvF|V!0C`*{J>4Z5VgwE$CR1_y6mXQ;Rr8TkIk)?ijC=HV~yF+sY3J#6%gTKrnGhw1dV*s zy-LS=Sh=|)hEUtL^vqY5jiu4>l2?&M^=G5SP7?j-Lcfp+R)T~Msh`s!-0)o|KXaEl z-q68YHy(z1rd$}kpOt+(EoF*2<)zFQ6Dbfy2iAVn+SP!v<*l!`t+2wNeL9QK3D9r$OXP}Y`?_^ zC&{PfQKVet$H>Z?j#0WO9F$zx^Kw;R%nT@!^#x#+7t=>dnw0)`FrPy6%Q42?)73wx z{*=Z|D0ALrqJ8e=C@18&8PPBIel>|O^7Zanz54qum-95*i-R@IT%G(+Dem>B(5T+( zFY-_e2ART!>FAQG`Az7sMw`vdW~>fJ;+$bn{Mpf%ueQAL-1ec%&QT>T7RT)JR%MoI z;D>{N^%Us`kj8+y2X2cY3;}Ddmz%nH2sB^YSBHySo(2pc1X(ktzfX^(jB%aw{1751 zK`vkr9DtKnX1snTR3DE}rd%U3+-+!FmfT7bOx#Fc-BZ%_7%kKp{c>mMmu?I+FYIVe z1lvk}zFqW%_U7ZcICS{B&>IUpJUpe8w|buzT36&q&J*oEb-Zyix})vjfPp(=sOW5T z2h|3osS?s7sHp31)u_$5M#{NKzQ$x4?v7^63hA;1${V-@B6>+` zF|N6Yhq1JLJKlixlw8%?Zzyq#mI2}xAx?BebwXC|wt!mzVHRmM!5VNCMqM}&_*I6# zvRiPfe&I8}EZvUJq}>Q?l1%E4zJNB;JK~ zhw&9xYMYvMwVAnCjau?4y;`NAVN^+=N{Gti*IposRp z#yP8?!8CLQXVlQsTU+@J{ZWJ`upt<^4(C+GBdJ%uZ9un}5YQ1e?U0>@>3L@s*RS%3 zcz8A_`TLtSywIr9GqbtN9W`03fO3=KM{QLEs~SrbQU95yH?kze`Vv~%GH8~18I(8c z2UF|-L~$+~Ro@A~Fcqu&qIM_LwpWz0VegsV5qk?cOZT};!bp&ZshXaBzTEWMPZry~ z2}2WZN-B$~dn(GK^irw{h&24#Qq?3~3e0vm%}V6Q@O$DpvT{-N{TR<<14)DWyv-rT z*a5Edw|n~M?#MY`2e3G+LP7a29N9bgHH#*6hYx$dPx4Haj=0LapoQk4M zXA4>UK`rAdfL-G%(^Od+2it_uES&Dz()Zf<|domP6^ zC?=pB@<}GP78Zyo0|i&=5QkO-ioZmMM2+Q)!a{QCQ9@&3GY6U`gRslDN5xHS({Y#d z;nEQfj}Ul$$t-p<2V+v)R^sy6M!KQc1bAKTx9nfqy^9q`$LmK?ZPUkF#}%TMhBS%2x##&*U5 zRQ-Mne-Y+@Bl-ArPRw_d0aby#&6#tluT*Kkh-O10`S5JG(X+ywC&7>s`sNsGay6xP znk2|n7k4b;g2xP9(W$kFp)td0wDRj6N|r_g8Fw?0?F?*CwcNJw;(F4S3`(~@kl&Ij zhG}5tm^PJmU)7Yt{IsdZSv~>l2$`!U<5EoYrxBbT_|< zCs#|J@`<|bOPvt!sT=(qsj1dWd2cE4_0);KadZ{D5TJhBcDWeUnw z<8J%(RNZD+giuN#jeGqdlv=#!>IM^HMlQPv`5&8%_x2lni8N{1^vUx{^&3RE4L z{Ww8i0<_1~0P@Unr9iYfBlU-A+d(8=Zz&$GCBb4~Ys(&ueqVG<2z7|dr++~@4+|Oa z0G9HhK<$@&{?`zk}O|3R_E;?XlybNWU7I*z7|ZJ zgh6aouzwo<`j0veW0$HTUHhnjKEjK(5SKaZH?@9sbp^(g@V{)LDzuPppHsE?nyG)w zKaT7uaogvt<3J_)mr_lxSJDT-_<{NQgXdDW?iKsRBI^}R{c%Mx5lgCkOHU8>%vW#S zQ$4W0aXH-Y!XFmU@`5gxjR(yb<}jY*WKTGjV_@r_L8Ih2 z4nWjOLM6O$leK-5R((Hv#LQ3de0Qtq^;+k$@g~_7g3bw#9!(occ9tU%VT3> zKS2H}o)%ti_$TY3igm+E<^noAvE^*^z}0i)4-pW|ne^PBtbtlk1^i$b0Ty16@*8S!mI7Y7^C<>h7b3kZraBIkm(e0p_-LHX?=`lQ-# z5}*nl8hR*s15_0PE&S{o3hODkj!(l7U3=aRG5gm~#rulN`uoFV&v6?19^Fc*F z*?J+W&zpi3orMpWc5{W}qFxS$c<0N&rdkj9h3Zna`F}kx6vVyHbI*hJ9mG+R{r@TH>6Ks{mX_-uJp>ch`dK#{Adg2)WNOc?o;Igh-``-qKfig zvnh>x7^m5-@Aynr?hoNpsKZHcHT;apRmzkg*}gE)o8k%bDJZVl`W}OG?WC(9S$lWb zh}Xf&RLqkL>uouo3kmSYAu5#+J@IS6=@|@w2MPPpKI?UkiT6KPPLYBZoDbv#H2)!> zQdoRc=n!yFLOryg+Q`km>zsNHMPj6L)KC`c3Myqz7GR56^KX5!{S`21Fz&4K#O8mq zE35$lmmUc0Ev&bQ@*(`rbTO~^m2~`%#$+W%y5{KlXfMWe6(L3C23@U&X24OjUZ;SV%8XZ!fkDS) z03a*AJlJ{c@6-Ake7#?w_#nUxz2Y<(oyZN8BZ47_dr;S{2UE zH6;CIs$y`z?sL6$?Ptjr;cBL5I5IOAVibHLa_9NT0Ol*>`&PTV-8Nl}Jt^fWevs0O zX)lfa$r&FlMy&1=WeqY_!e%RbGko^4m8Izb0x$E%kDoRWNfpW<VJxPjPK6j(&BoeTVFW!I=lPRhAFieJkcxOi|9rs}Wl2 zdoXmB>iw(pAY}hk4dNu?;V26O{7#l{zGdah90`@r>kg3wIAnt*r1Xj7WK2%TpTITt zAA8p5&2O8hoMwaqABj^$ z_j=Y@34A2MA9?)0QMeYNvbRhzm+dBZ-g_dt-?g9HD^!y5;#rD|PL$RbxNXR|XTTTr>v# z;nSo>**bI8AVl4dT>P!Z{P`C>`&?eC_w`*|kdOOlo`TJ!OQ@~V*W{UcMo*FB?#}1q z4AU(LvntpaPyLbD`@Me6BrAy7S)F)m$+k~*H;>OJ|-)B!R@R^p9o)^bFEky21Gz0 zNFYP+!A<3gv2ieHNAl-=#U7(z{dTv1jC=YMh1UYU`$;d`QuO_WR}l1)cTwGOd2Tp}&NdQtxcm8Qf-0<89#AjtNpym_yc7fRLfLS} zjP4o;_aMw&bX61LZFS!}`N8{X-Q&Fp)l)i??Q%DQ?kD{pK?=H^6)`PzRKf~-7% z*c2@R$#UHft1`^u` zhV8JnJDV;5erIdJ;f^I9%`(&O(OHk%8&||V2$ERcCBpn0<(q$jfIYi1o$n8Wx zYUHENErhzqHtJ$TTN*;l3OW`MIQBaS$f1 z!#zB#(QySc)s6br-fK@eYN+!5t({mfAu!K19lINjJ+j8+*$hTs5BQCxM>t)Pipx>l zZf)IgHaN60Q$Mf_z>A0ke)cp5rLDDIz_4JSCqfSB80e=D&;G715bLGcHPwj~qRE^s zaKOe1Rsw|E6wfO+d5jZXTP^T?FAwbO$ehdE|avcGWg#7_1Ewa3>< zAK%}*^6BXO8BWT?Y=N8{hZCx2n2CN3u*Jbo{12X?H$Ie-6N;eG2LUr)>2X z)UG(dVA*b@3!lVh-g!R1*T_D490jY0H)K?jZ*A?H|I|kvQ4DP93hl4wrc_B&t(>mA z;`#kKG>;PI+W8e%14Md$Ldn$OR>GM?8c$_jUd}&QG`4?MjGuJ-h;)AxaO#xHkqeUB zGxKmIyrG+45ge#{;hZ{72zRPga{I;w0<=pGV|zLT69?vX>A?0BwxJ@ATuna&%)Cdu|_nPK4z;j@%y3e z*WZ0kaSOGY^4kJvxS+0cg6RDQ6?a@%0@`dcx7_OE$C=t@Gj4^6yA5T^Ya=7jchAC2 z5MUmP>04>@-!n@%r-W`&GtJcGRRrR8ehW8P9v0%)gj}w0iUxYD>8y)}Lik^r?&6o4 zdRc(+qgsQBw|Y{B-`3#$sABch^+D9LOC4W)rj(a-p$EKgJ0;ElEBe+*qs+aAtD|D! zctmE#0J36gqi23S_riUd_6y1ql*(Rx%_aJmIc@n_$k9$(?rYvl#-VA78FQ}}y)f}H z&y~86wQ$n)%cmS<2+t}d^c7@BzH zlFuqWD16nN_vLH&-CMmJmY&LzocvR6ov-0|cPxj0(9gs5s9?KLJOP+uQl2FXyMwkO z=+kZ@LUB=6I$fkGK|JfzummR2Fn z8mEx2>YcXjejk)73_B6oef(m+fhMXU@<@K9lVG_(bPyR6u`UytFHheLTnXFZ|C%rUFw2!he7>zfqk4CZ)$cI9s5qjH z%HkriynX6@?o@QvBeK`$H6t0Ku3I+!WT)>Hh!cp`ABj^F6SyS26-U19@Q z{7zTE1(7D18W(YDk$z#M+>m_hI}^N>g0C;EDUVb&8gkdNt1j=|LpUS(GqRU;d($mz z)$VkNOeWWSZIaR>jop`bp!!?l<$g5JRwB-1n$pyTP7exKGdx>7x@p1wk6gk)QNsY)2*662%v z9ms;~m&N0=7S1VGI@T#g_v4q&|ysWWB3!`Sz z?u%?lct1nZ7d}oU?M9PUg^O_vUet3^X!(u2SA;#PG&C2}66K;!F zuo#!2Js(^3pG){9c`p@{^EiL+=r0#NIIn)Vli{>EEMF8yvL6#+3NGe?+5mkWP)a9Inc!lv{*j{bwi0{c-;xrv3SEX_AX<85SgV&W5w_ z{cHshT>+@_Be5ijWK3zhT3gi7EhQ*7v%x&ipnS0rg8fI3-ba&yoBtI834U61KTsP}A z1jjVWbIb5oE1^Qu+8Sd|Pft@AYa^pdC}QjfoH2G_LyL#Wy8Ri7ZO`|^tB0*e9eBvQ zssEasZ}vRuSRUqVPv~a=Wbi?)0kFVeqmms>&mx{`vJoMvYVU zR+VJCT=!Y0pTjHk&jB~dCXh1me%TX#BlEb3YT{u5i&mpbPld^ZpBb%IUwG*jOPcY% zqX0c|IP|93rdf&PM~+f|@tpsqhPd`q4dz79#~ls-^__jhMiHNLvm_~^8GOhQ}N}8mo+bc$AiAm=Fl0qy51gMJ&2_dt!ng6C-&4zsAM@d$V_jPJXpya*z%%riKUU-(->eOXT%FHMNkjH}86 z6glJM=%qCyHe7-r@+U1{UO`m9Glr4Y#E<_z8dOP(M<=PGu*bass?bkg=Aiw|(C6{y zj9jc;uSYD+`W`KzjU~PTRXLu~nmnzc=#QBSEuxJZRw#JDZkqsp0ml|UbKb00*L6H# z9$G&Oq^~3==(`^--Frxz)hkI=bUXOFzfy68V~=jSl9%yhXlW?#o<-zCeK)t;&8Ikd zo(x#i>{j7MG5E&_~{?&=R!jfs@9yqXu;DfspMs4ELA?kqI_8i+}$gO>c2+0oV z=mBU(!2p+aTAu9!x7$s~A0GD=i3m|#B(z1AVUY3}vW*Y;!~i_uHBvaTt`dN;5KuW$ z+<8{Vk-!%%T#r7iU~)MWr!BQ-x*SJ_@peV3kAUb2*+aOg5p`P7Pxtf3a^hPSdUK!- zjBS_5^?CEB?|4OOt<=^Z%u(B-V|MOC-@Ny)+G;iA!ZZOK+SNfF6NB$oJmm%Nd?%;R zA8Uhc`V3p7naKoiX6{b1Y=?eAD=ubY3hf)M{1^1b&Jt?I=gJSLVHG$6X@GTouPNut zwYU4p!IA`VhbNF%-Ivqhb_4~9^ zFQOs-7|i-%zW$pVFs?gw<*Ahid#?P$$J05JY)S8|(odL9buy+?6Xn@=Jt@3QGam>E zMSBc*XKU!Yu>Ky+Z|mPW-al{IJ(yXoyKcCJ1nK7-cpjcfaWbG@m=DS6{yp3G^n}nt z$=*LM`*qx`f7SIbi0j1f3H8FqcA3MvFcJ&Okz!Nojcd0LuUL|LntShjrFr$ZuV&mx z6N6=lgmyRC%d_k$@0!wN*TB!Xt1+1mRZN9u*ebAg2_NC(qvtD-)z?}&qdRG%ISm~Z zUNF(OlUc-8vZp~ONd<#5dQ3TLml~;C{HH`^bK?=y^qWN_*u|$Fmg>(t6pTAI=f=rR z+{o5Kj&KA$?$>u==Z>+r+v9+RZ?@1{nbj_nh#>@Svz$H8@4A_ z9~Bi(-2?=L+^??ASqe1xz9?YxozF2L`Pj;#yx@i#52cMpOdc10_EJ>N^q56O!c#$N z+G4|z!2Y?S`tIsvJ|RgZguiI8C?3uI36c--89NQ!Y0@JxM>=Zc<2zb<%fdg^T3$I)DC)R<|-Z(5A-l_KM^nR zax(pe5HIC45xi2|GkowWmrY0*n;-?3x%PM(Q#0Ee>M3h`^3Uh5f7Q)xQSPoP9G1kb zjYUKpk_laDR*{BOZg_7@+)E?;`+&`%nc3q`M+#L%=DI=yn{k{@xUAzxJE>~3^5W?! z^8-w(>1N%i?X2^ouQj4ZgOh7*GC#K%&RLVd!GWU^9v0DW8%TWe=+sbC`j|q~RkO++ zdHL3(u*~WhM%UVGJcT-u(&E%oYH(D)_j4+$K@Z2GUQ~>Xsp^hM-&$=rs;u4P81?v_ z5SQs}#a$8O;IKI@{mNCy3vt-@IdJZ&V4u2fZ^aAEh9B|Dk618FS+<|8ujJ0<8y6F| zD%M6gEoWO^&cu>RVMhPy%=~w6h?YMK7dVDF?z-+4(qq%kQ8iH{@FOcJFY#GS&+q>L D8fs27 literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/device-control/images/create-endpoint-protection-profile.png b/windows/security/threat-protection/device-control/images/create-endpoint-protection-profile.png new file mode 100644 index 0000000000000000000000000000000000000000..eaba30b27f0a9c1a303b5125f22ef47ab02d9297 GIT binary patch literal 15113 zcmajGbyOVPn>C6Dhd^)-L4vzWfZ!gyae_6{xCcmZ4G`QRxLY^w1PBh@xCM6)uD9Rc z%-oszX1;s>s9vj1SFNgZ&VKgZ&vQ;iYN*NMV3K1ZARyoOCwZ|Q|`l0P;8`Br4SJ6;;zjR@~KzAd-1pddb>BSTU*_O0^{(q4KRC`a?J8 zDLvM^E4Jmxv31_zy0|KMcr~O-({uKS@|wjUYNaLc@ir=gIvVCFsd;`l#x&{AXB(dm zn=H+n!~t#|z1tp=r!zDsN*O#3?~;mlk4ydpwEcO$hB>|XKKKlB35#Jn_Yn5w`S*AQ zIyD6BL;HQ7l6{|`ce~veV{JA5w*s3^APHOYL7|BNeN)rjk0U{cSFPsVXBJNzHJlwr zUEb$&W{=S~>0Ip;;ckS4uik&Av8_4pCOrr`HvftR!VSJgU20ScQ5_7*9JAzEsAOj^ zN*sQJdyIvf+$HKRT_i%1#or)1!ou&+rVHMw*sjDFa79Mt8cj!=cjQt736Li(46`{o z1w(j764~g3i`>miP{W5Oi7R<`uuMh@uzJ308!DB+qHBYtf|#zdQ&0o%){xC#rhkYC zLekmGw4L4%Vvt^Yw=Y@M6n_?Cuzf>E*sa`+!ajNz7oWhBpZ)B?^&=qW@Q^WkChSG0 ziyWosA;`r(^wI5Ky+}vx8xYD+Dk4#uWYMdL9$Jpdm~@gW9>{my`1SpS&lHmX6yEUl z&JN=dJ$7v8sIVUw_1d~>&+p4TV)NIp>uT^`=CkYDSQ2BGIB4&U~ zme6cyc6SY|JFHOIi*Z@@AQ$-etdfZ}JDXB$&YAeB7DXhKaU-Z{pLYn=A8=Q?k@J$=9unacuLd?N&_$JN>=2OhtFC zsI#jPATP7To%pUdll?pX#Me*Ru}zR_K%KqJ5sQR9x}y2;b&!+WtBqGP>J{2;)%VaW zKJVf`fUlvCN#V(rnV~Uu^RX#Ky+rLwp(-}U9Ufb6W~~N^{va=Y@`=oUrUV>{Fw1=| zyS7^eRTq(zd%w>%(U=Y39WZSEu|7CIhRL@$^9jvM-1pMTde~DKi!kr?t0vtR-<|0) zEf(3Bb7E@z)lY{sFNI18DG1+O)AHt`9XhqzG7XIV5;Goq4YBBD z@h))Ob2}z`x^hZ223IXMa_cYyX1~mY(M+Svq8w_m_A-!9J7?;$8-m`jC+ZOt_cA|n zH5m7edM>0H4A{hi>+(hcQ$bl~wJL;_#pdbFu@3ZFJlO4J7;Zh%>+-T_dC!@qUk=HR z3SQ?mI!=VXy%Sv%A9r1lT}q>a6xl#T#nQKTGc@0&HLkBn(qQ-4QP3eZeV9aeH_CR} zG~?rdofrC*j!%C6?RsJjW{k8SQlHXn2o0E0=L-o{`X6w92-+BKpeG@ZUN_Ph*$WSY zZBy-WdS25kH~p%2W%>e-z?uOeo5mK3O4z^zIBzBBb>eJ3MXqTl;|sl*=)AHYg)!0` zaU(|*R~H5a1Y8BW+}J6hnWqZ1H{ivRRCwiIPDcIH@r(Uo^mOAw`)v;1<*t(DuX$O+ z%5#83lf_@<0z2f&?Mw)R&;mdyeC9>;ooAV&`&653>yfshLjVt%ZTPfMPzm9&#t2IN z!^y*>(z>JwG8y)?8d{BGAz97h{ac8mfT^Tsmr{SUF}Q!?rgHmkIDkF(*Iex}Ir%;y z6~wj~Z8)@bd6`ga(t1SSHZ5R%q`hQ;RL!uG3IHrpcQsmrCm&SXj`R&jYHP8Cr^gyG zQJaf14ORtI+kfvUyMdy3c^!aIaq}a0+__6Q$LmGhDwf!}l-CY56_iaQ!sq3{fo>yG z%@ZmR;0_bOEgiOvXr!J`;h<90R1ZU)NvBIkR%U4$t^$GQqZ`Y#p*N&lB4B@`9;?*F zjN%@_5aYb`^S=?Vr2|zPV~y>wh*%T*Hjj0Dkx*XFYBJ?)a|yE!1SWS^F9gCJD& z(|*I7J!vz#9j8KQMuAUPpOzvcFE@ttOnhWxQMTfN0sVYukq@;7hK9lG`7+_&U_(bI z&6nMrvaYkUA(Ey}?}GEl2leNJp}=PN?dwZ1?7L5QHsi?$9?Q&`yBw;Nx99<(yAxf; zHFKwhi=eEkz@xSJ!}iY3=M%54OxTLu!=IVJ1B`F}=q3Soqb)YrpTBno#-*eNo>M6} zWO4SL34GzV`1yq?APHR(+j0&68TN%U*hT+qxrR=Ysnndf&;Ag};gzY2W3GhXUF7Gc z)SRW(ZTtaJ?>&J{*N%V(h`vl|)q@Vh=Gvgp@$7X=)xDsk7q2=MX7f7#wO^8jV?l3# zJq3GVfwHe0ZQmjg3#U!-Qvn`?gUy=Vm01sZij_ENbLdLg+H) zDqvv3Q#NtMUioFtwFOuz@JHqQ2J&mU$HtM&4sNs5#omBSc7B4(Pr|&Sku-2;WIFV9 zgq8GQBDRzwPcmyE_2;ZjZP(E!!)R%<{5Ao5PlyoE5}RIY-eFX)j-L8D{%o~E?=`05@d%>7<7Kk8efOR|@girRvhR9n-Mn zZmym8bGGfZ%ae`mM*Oi5OW9+j#(3qz{_wo#Kg%mpM&U2W|7MJ1mg3ro(85dXq4di^ z1Lug&;-`C3{|bHHxK$rZcK~8^RudQDD5}A=#?pjW84GQIGQ{!pl(Z+eJSHsAaWiUK zpi{wdQ@LqzLkE{XGGIDI`>oxP(UMO4PMv*)8mWQ~d|pvt7ekc#t)QeSnQKd-HX$)J z8nh>0YtIhVniaKS-^YWzU3O?$e9bodJ{I)1Qx%BBH5Ol0th93jot~y`*d&+XI z_+Wp<`>M*cLi^Q5(|ykJ(pYc~Pb@;)${6VMz8iA#}IR?(1 z5wrnI+pM(QAMBO@hS%yOevuE zd^)i4te=bD^mRzchZQx#@LZ7WGWl^}8K$eCB=TzkqyFhA(t?@M3|@xz${wTJPRA*p zH9$#LHXm=%-58og@_@~3rZd?`PNvPnF>T9;%9@(KT6VMg@sq`i&mJ(oJfz#_+Rq`H zx0;k`nEGo`>Y-}f+=341TmZD4V3dv@d=WW}PVMV2xJdK?%Ey?`rRlMtpM)=q14Lzx zU-mbe>OSbm$$(=yKN;dY3NiUp`(+6Ey1Ouht8*s~@fq#mu3ZNPE)+FRt89|d7(x0t zW9b-M*5x*B2T~vJ=envtQ60Icqt)ryz1zQLX3hzC*ei%D*Jf>-OQ|+7aU+vD1VTIJboB`8ykgN5WOLLLZBBkLUIbPvDi&Wmw={YaslZo8-`u>ER>GS@12t z?kySGEb%i_>G=K9ZNVt@lP8o9D|0n*uM~fxKwA(_X#HJ{2S46#{7XU3QSDiOkzFxZ z(V0Ym>rjhyXzJfspadjq7sfL56dFHo8xTs`Q%AIj?g#HZtbd34oZ7FtQCJ_AbPT4P z;>S0iv>vV@?e)<-b1kKRfO{?wT8zgJ?_MlgTV?grxb~DR5Yoj0g76?ehn&zN1m1w8;CHp3+j-yQ^PuxWd(~U|`UBu$Opt=aq}6o`%Pz|| znMRRQ`mMT*dExvVB3U7%jNTu&(0D|TB6j8r6f}G0@v!)5rqNy*NXn*LmfOLlUsx5( zj#wBwNbR4aeGnHg^W%_Yldgyf;X4$#k z%L-DPtb3_OWr&G$bPy!ezx0Hv+^F)7f)x;T)BbAo>cDJcmty#YGa)mhXReo>@wM#CMb}8pmItykiSTa{-YWQ2MvscMjiB)ZY z(S%I0QQeRzrIV<%EPAs>pO;F6d7GuVU14cn&>6MM7rDvEihKZ!sv2Jj_~t;{dP*!Tfs-fYB?;@~cAm z00Tl;drRh<vY zA20a-_zpx*5VV4y&~E(u(p&@w6ehRt9-Skzz|u7#992MXM^Z}Rp3U1d#aJV2iTn(* zkjy>;pAS~VVUc$Px6G8=U~3|pa#)(;w)2B_-e&ov^d8hT`nPI?)w>UfcBQ2W1)FKG z43TgM;PoOkmvqKNnAskG#U%@NmqP#P^4BxS&mw-kpttV8zEE7`fzf($BEGjARg>Az z%B&x;{ta9I#BWcb|I_@Fs)rPPj7U#mRp4VHWmKktQpx&TqR*~1+aCRY-xOsQ*GrKi zJ&4f$eIQ_^rB!T886@G*br8+fhAxhgzhaQb8aeeS+rgIBKdPykF(w*Zc2PPb1&9)9 zCo;2#1ZBzfryxLcgy_5qT-J$%BOcU7FgO|!PvgAqhXK;=3k`kjKJ)LLX9M!J>V}W^U zLt>+GI*WsAqitPhrwN+{?eOMcT&{>mRIJJ#6zTCJv4BViLmzYliCjD_xw8c=nv8K4 zYB_skDlsG~@-dc_B(@}LgLM3uleUbJpj<9=sl8K>FEb{_#yy~BA%J18ykh;~Ww1Y0 zd`F4vV>gIBu6#PhtXYn#H1Ru_meYD8yaF2Zag!$;{S~{q`j2 zpd2zV;U4--@L|zQxB4pzEzL(EK{RY9XcJK1iJjrq!T6!yy?#FE5Wx@B z9J(*f+=_75M?B2?dz|kYrb&k!Q$A2*V5TDZJXlw{Q<#)bOrnYMu2%)Q$tm%JFdEeF|kd0DI zQeOVRfCqasO^iB_e~;wL)6|-h8h#vXW(u{i!Jbu67w+@CV^;UAE4L!{-M&5Ftmz4+)LdSCbgy`-KeH8U6~&xiD?uX^&7qU4|qn zPPuM&oHMj`V1?0M_9$`4`1+D>t4GZzY&~ECFpu{jP78aVKrpW=Ld^dY4{Bp|-g zmxEKBzUGS^SncHBZP8?p_Li$z!*wIYSQVAZs;aUi8GIn#7rU#In=AdrwF?0MXxe6@tV*`4c8WOVoF z#xQ)gN)qVtTF!|tCQ!&{|6s{!`jGSMQw5W0#VaxMG4<6t}sco z^YYhgQh%YyM6QM*pO{qYS8W#nj;O-y=Yepb9Q~d8TuV_b{aQ`lNvz-jZUH*&vE*E? z(^6DsXz*p=38pvxdGzVB=bDzJ_g3c%nkqeOPhU%HllJ%fk+p3;5-zWjAI=tkm+{Om zX+=*5d<3Ie3RM?HmC9>Re)oyaVsl zoE}ofoocTRQkae(x~?mCDmmPkK-vQ~FZ&{-p;SoFS33gp{oi=w-kHy@LvqChR>v{B zeG>gBtv!4WTTl{+aZ3bCIOA)?ZhpOd)0AI~w0G*Fi6IGmT85Z4pHnNm*xxw`C@hLn zKl(gD-Qt^H_8a&%xpP9(+8$1vg3ePV@5qS?3sF1ox5&URhrwd2bjQEOOr-}qZbxz{ zwcTPw9b1ul3XcU>5e@c4;V>hs21`f4eaL_JdjA=M%)mQkWa%sos6gmE-T&)a{{3nU z+N!6W%$n8Aw$^7bIf+~*0@OtOYWnUE&ot9rJU|JR(xhT|?nW*S-k#nu7jW$HpmP&E z0_jhdCD19Pl0{NjLJV+|h)Y;k1hgXtr4+f>FWSD-8bb4L_`;qW6hh)_MEd3-nK-N^ znJ8W$*#yPWtwKo_TMVJEpC!h^{gcb#w}wDqrv2SJh0MX<1TAVnI>RW&DYo9V`8aT| z0zGs9E=&RNqW%R%Xzq$($O!`UTK^}$0KDHA#)}SQeSvQX-_Ro!gljjv!7ofkIDfKX z(wQfP@d-7eYp^n6(`s#KQki^HV`)fS;eg~>(%y#ZkJZ@8(7OZK?Wx1lv5oHB@pfPh zU^O~fEaahP)Y&LqL55bvrLayAW!*reAuK4Jy+WI{Gd;XlGUqW);FUgxAz;zcN&{Db zd&nrWW>I!z-hqz`q;B<(>ahcg!m_!z)6_kAG&AM1+3bfKx!oGURey%faO$mzRjPl+ zBSZAb{K^iFeO4dG0)xXo|03)iXxY-o}ElC>@U?)b%{`229j=;$H|8@Oog_C}qS*VX$!H z7v2$l{B>IdUy4xGZQCP=2L35))?ndJ^S~ffDc7itE~_%S&`pHxsm1_?kwc7TdA$^3 zF+6J*8_qnz&vY78`jqd?R@nPOVCc;9BVt0pZ{az26M2UfPCkfNXmrPunkE!pCdS0K)xK>0zOxd;St9`l2|^#0Bx1piu#h({pu03wd#5%!2G${wtEpinp@ z2xucIP`ufO^v0uW0-PPMOi9rY3myGtIpICtS}FaHj3tDf-7~I?xQ-X^=J23!@I?1R zTwBbN;yZNFuFX?P$PGWuJLJRhP>RqtU@bUtz9`6VZPfJ-=KP1`1;vxU+N_Lci>YA? zt{C;b5{O!KOa|m!I8aoU$+2!ZmVBfXBoA(jQsh_H-07p^ndN_8-C+J&hv)8msz;~E zTugbT2VzM^KToJM7_n`bTpV|O${m?%h1hTir?*2eLwZNdn9WXqEChu?|h1J61) zth*hpNeQ(=*;GAJKMlDC;xBiA#}jkF%SGW~TdD6#B=~TQ@Ke8L2iXeG9JIGdXq&-C zExJsO0;K(aKb9Nh`)CFr`@P;!+Nl0OC;u%n{fFV0I9Jk%kzHaPxYom2vPd&gfHj`o zDHCHR4wGjM7bGlk;2<$C+>Hx7FkS!~G3|^EK7XS~Jt|(jG5?#dpk2)9h$CtQ%eYlm zUg4Z+A7cbFme1)`{kCvMBlQpkxyef(eUa<9gFhRY;XUWid!|K!+m2O?go-jbB%Y8H zqj7P|nbQHP?RU=we7NWtCyOrgc0GJv6Ry0aY+_L_!jY3GlsbtRWAhT0&h?)y8w3s( zR>;h{%tcl5^HUQOTVSpn*aFrBHdYa6Owl(UE7*OX)qxfSJki?@hO zdD{dg;oV;zRp}(Ah!)ZR*sl|WaU->iDCCZaJ5@+uk3nk>R00<||ST@pvwDzhGah4THuP{V%C_8jTGG^d@ZSwgP)y!L zd}`^}_Fdnb>eps5favwG#T`jAM1YT{Kjduj4NzLwpc0k1OkV*EUzjm=r(}rTEI-q| zyJo1W!1>*nG{C8+;SN*>JZ6Q)nsR;1R}eM3rmuRX9O5*n5oMZazNbp6RI16z9-ofbi{{*J-;;^8!lUr}qm>{sRTW)ejeg&JU!F$OZj~uS0_gY@9>7;_rX%F`puGb9Am1@YZx-yO!tJliWY0m- zum|EDDfayl?&acx4qyHDpQ!02My#VEyvWZ7ideFJG3}CwN02a}J}qD=Z4lI&T{9{&7Np;=ZBjoyno+-r%&ZCMG@wV=7pGDWy zkX@{HPmIiI;_bJsD;jX2n$49V;G2 z9Y!S=kQ0_ zZQ$qS$fEnPD;ct0Fmg3mi60|pj5;)UEc{>caH~@&brDEkd75G58+-?d1}TqUs=#SzeWiK04HKI6_b`F$Nw8Ln zPTI$n9qx%0EehB}? zqBR5Zo$#@OJsHLnIPORW(ApDX3shq9R#Dxivofy}UXgfZ7#dK^2@KXuFG8*+>DES1 zMpRZ6qPF9F z!5{OJbhjc=)s?sC540*J9qXM}RU@29rGG!`^)q{u z%?0iOn`xVwuOu#pUR?hos!ce;7am}k)N$h1`V9+4rlyi#Zfkj7hvQO-cpSV@@qIiW z^qMc|b6wmIA8)_pOqU6s*OKpN0%YmRXX)-CEE8qTdKk|ctLI8Q!57L6tq!CW)I^&! zUs6ZMANH3AcH-vLh(N+93qqSXZW9hqquiu|t8N#|(SOt~3Pq{E)L+hxCj|>~ia#K! z_h?>5wlS(^H7dV%9Cb7j`nxfqcN#!57QG$dv1ujP@NzHy5WBSUH_TqL?(%3>{bkOB zi%9;3AbZvrZ%hla^-Z1q<)X6fS1^sC@AJk!C(YJI==o+a&Er~A=N0=&;?2`(;7i=| zUfgsD6~-8lv+`MQRlRL0XL}Wvsvg+lkz&~CzjH^pNBG-MGUGi*?&FYKS1TCeaeh@n zvOG{xM7LD+hN_GBY=Y(qGQ8Y(k9ZomcE^jSo&bRqUAY1D37Hy3I!Y!^J-rDxB3E0H zKou2?UQCs+%?XKs^E*Pp6ENqvqXXrpTx845<-$xCk4`}eVj{?AZxrj#Z7tAM4&nN_ z3Z%9KNy2^1y4GUd4ZN2enr#UPSS6YU3Sx!(8Vb`57g2`IjJOq8tlWoP$>C7QacbGM~J5tDrH^dw(aSLQB$A=BJJ z%Ul$+XSd`@jTA0F?tOg%Z4y}SToeXGqHu;|-gFA{ehFLVK- z*2}(!Rd8^nokCc_U@oAqFCg~e^-mbj{10&6k&r9{K%<4!N+t}uGqtf!hR%z*O$3~_EKq2O|;jRJ&*QdxQplFHL(W%+a7&Uc#ORM z_ZSJn=l%smrL%~DVM_nPFChwvpi^T-e=U=xi~lz4pJ0k1E^)*R;<`v0vD&WtT8|OL z)%(9)D;J^ma9{Uen#(G%uk02?dl{{fb$yXr+!%1P)_?P5t+y>8@X%}3V?R!krJ5D} z>1}1oKSs0yUh3C7>D+~eSMJO-CC?NzCaKW~^JE*kboj96np8$PVfBJSJbjORbGs;h z!h+(ecM`u>w5k~ziexA;U~I$8gj<{I)8yQI5qCGRb4F_3W2s)7{-pgCV!jgbNo`~` zW3*~brWN$EqjxnKc zcGqSRt7R@_#UN+k$A9GNM-z8zDh%d9mo_5Hfnf&KGW~1FLN>sGUV9-Oj+-r2k6TQV znPNW?%bxKwVAoDWsB{Pa8l{L%m~OpwGZhpK=_6USrF3eNI z>84N7t|WBJVWF{OG^>eftOj5-YUmNJhQ;2Lv`w1fa zFs7r)61oZE=hvhqa>#K1MIGVmFz}JGo4v08B9I6wA7|nc-3j04+PQa<9}>!qORC#y zlYEGt;57Z)ttB|+PxTH>?NA8G+n$&b-IJP}y=^t$hx46)fvHtxk4jFiFm>o^%>|-~ zuFZGX_kDis)C|slny?|8_k@$c?35HXAsJw%{Pbx2kWG=#tN?4Zxx8xkqHr{Cl_L?A z8IKPRPs8Y8fmO(m@8+S}dHn~aFLBw>C5~6!ybmHp$QAh*#<7!GQ>H-i4APO`GCtSqQJ_5hKg1 zw1#vQIV!TskS6pXOgHslk9OnK)Lxv})C+{nwx}41n#60}GRLBhFa@I6$ngxJ?LFnc z(0c;o%Sv2dIfb^}(G%zuo2`RrZT^t4u(V-R<|VtqNa@5I7xL>Fr^l`rlw&*i%ZZ&$ z=YH4-hfFl%R4R*Q5j&GJ4mg&OdVOrNlS5@lo@zMw3%1gD&tAg=h6#lJz2DVML?8U{ z@|sf>_ImF3L-oWq7X`Z2`S28PqslA~s|YrL8+#&*8TluLkZNs@4Ykup*09(J9H!CHlD%-Yz?c3{ zQuq&r{r_SQIR&*5(-*z$akF>H2YTpVsg(2cB-NV8_QmOcC2C~rx=~E5_0N3@ST?uC zDuHCEZxfSrpPE;;mbMerZ|Ul}X2lhN%!NruUSVs*XKHay#7-22U;fB5mIjmN!FJvc z>nc}P(ywtq`oSlHRBjff)Yy}Z8=Gjxz4^uqrpv<=w|$UW1^=j8yNY97r?AU;(kxG7A*%T$#VKt@R9m?0tV!f-`GFB*)6&$;ZQT9;9n%k8>OwN6-7McI|!*8 z8w}qQt$GLr36h;vtaNH}$;C?fM}CnU!QgUw*LW9!--TdQTTtpbi{-L^B1Y;ETcBij zPFCmW8IzRlMT@;4XU!+P*OsqmH_JDgPLQ&Og7g!};y^sMca&6%76u@#{OZQDW{3nX zEDv!_$)GdRtmqcVD&TjgFR(?8hU_=nkK-bdpbBH8w+hMFqxy^_QMp9 zlJX~NrBbrXD4ZB>jBeB=BYyDwH0YCr({4U}ee0G-@qrxl*Xx{PiEk^+HT=B1{IW#{ zeyK{E=Q+wDMQd*a@lwVU!Fx>-412;WUn^Fl#@}FSRnH0Sx!r!ubwE7In!$2DZX;F; zH4pSeej>=G_*np5Y_H`PE#GW=FXl|d!#fVR*C}D*7j2^FJGaYH>PIuAaAeoLbMfm( zi$+-^Co_9FbQbL?=$8!5#xKDk6N7zXj$Vs%$TxZYkK(@eFVWGX{Ss$B-JR_AGYv~R zFrpncTolg*`nU|-XJimp-ttSGT-$gGuv>qmvA8Js;88%z`=P!deIUj=kbtCuhA4}V zJ&M=6!LMjj>0FiR_iv1@$Y(qkRC5xGX=p31wCoituY!A$(` zORh7W;QMs$^iIbXYC1hVo`C#P_#ys;YRdLYdg|gH&rM^0yR6zF7br0-ZSs!$wk*k( zP)df*mK60XQa57P-qGgP3mao*^7X7eBgk>^b1VO45)AK#Hpd>bwalg_*|v zB44?~gudX(5gy2hb&My2aKMw8Y&iww81xg@*NsXZ_*W^jOS133sC$^iwt9L=7JV%1 zPPh|>N{-b?Up1lZI9I7@vpGv{QwS*vQ@pboA-(S#I--$M{#!vza(G$&z5l{hnZ-N8 zusw5vGb5r=_AKq&LUXH7DmQ%3%%;(&!Kh8>4%VBDN~?|#4I%&g%k{qS=zfc(6aU9s zm)e?|nu>E=I0JsC|Jr2T^DQe+*u(~sqAGb!a8}2Ik;^+W%)p}|wXJioqIM%=3$7HOM z6R41)uVqyq*0<$|cqpkJN?&HDTz|A57U#SsD|*siGGF04Dq6)oLCO53-J4Ez?U;-_ zx}d^X@Eu#X*APW2^e$`?`h+>+nbC5Mo|%Cv9`)nCU2V~j!Lf)N8M(2s)tp13TnHwV z>D8G(naYU$#(Cw>L&u+`8RK+PA@)fTssVuf5@FT8L8p(|2gDeZrfI<%GXO7AH`xi8;*>#|ILyAuW^Ll4`e_{r45l6Vn1F* za=r@6;B2b@p-feD8hbB z2#2@s=v1$Kt2GG&9E zJ$q`YN2wcun=f?SRc6#u{AD|1OJ**~Bq8M8J46hRsTn+Jmqjl%$?5n8RVnAa8u^e- zaB={(9tz#T5{9hEQFaOWgzpTlR#3o6>ZA)i_F(G$A5C zoqQ6?zF^uExDw-a^}5I|%fvWkadvPiBrLtAd|SaQt!p32N2KD5tvYeQp`NP> zq=!!`yIY68ICrnfZc>8DedWa2V^F>!Im^DBa6{@a|HDO2D2NK9dFy(UyN3kJLytev~sD$7Ph#=RL6ko+NDIiA5C+3LZ zho2FL)X|fd42pLyF<>ah$ZSv*ypR|C|BC^fwG$H)52}2m@FURttJ^pgl>b{A`hS8R zdk8ppp{B6^UBRF&$fYQFf&tydoK$VezMWM(_t$R%l>T@C0P_uwV-?KeKGb;@Nvf%E zg*n~K%|c2vKd%lWT)K=lCRQG6jjY+(D2?`GhPf%MoOoI=q+zwy4!8nbDrp*UxZ(Mb zP~k1d;bI-S$NQ#4XN+xQAo?0>9h=c>RC$iLO_aT)Ig1_(OPFUvw)QhYE>Z6WeBVxO zT*vjIy`30e*a|cZ-J4Uii5B}iVl(J5D`leQwH1EIH^TD6f#xEjkolP1VKckE}0Ke!u|RytwsySdeWKD~hf05w#fol@1`apirf5kV#r5$WVHQ zz4*#|J=UXvP$T2x4uM>Fein6;aH#ws%A6@+MS}vyBm`uWizCFkHqL73JL&JR{>_12 z&|O;%?7%8zxla9{hNW2LE+&3$1kKD_GR!8nHEv5$4B|2h z+Xf?}aDX~K2ho1aX%=D6on}c=#kc5zC%QrSod4HCg&eaQtL9&ne4NM(c=jIsUu%GH mZvwBq;fL6sefN3{6fG75(m$S)!arX{P?S~sSS@W9^#1_uIdpyi literal 0 HcmV?d00001 From 2cfb7f68dab193d6258b788e5af8777ad1acf3c4 Mon Sep 17 00:00:00 2001 From: sccmentor Date: Tue, 13 Nov 2018 15:28:16 +0000 Subject: [PATCH 06/37] Update uev-synchronizing-microsoft-office-with-uev.md --- .../ue-v/uev-synchronizing-microsoft-office-with-uev.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/ue-v/uev-synchronizing-microsoft-office-with-uev.md b/windows/configuration/ue-v/uev-synchronizing-microsoft-office-with-uev.md index 585fe8822f..eea5619b50 100644 --- a/windows/configuration/ue-v/uev-synchronizing-microsoft-office-with-uev.md +++ b/windows/configuration/ue-v/uev-synchronizing-microsoft-office-with-uev.md @@ -84,7 +84,7 @@ Review the following tables for details about Office support in UE-V:

Microsoft PowerPoint 2016

Microsoft Project 2016

Microsoft Publisher 2016

-

Microsoft SharePoint Designer 2013 (not udpated for 2016)

+

Microsoft SharePoint Designer 2013 (not updated for 2016)

Microsoft Visio 2016

Microsoft Word 2016

Microsoft Office Upload Manager

From 0683ac13485ba9b6725cf4a1964e5f5cf01f3fa1 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 13 Nov 2018 10:48:38 -0800 Subject: [PATCH 07/37] edited profile name and image --- .../control-usb-devices-using-intune.md | 6 +++--- ...configure-device-configuration-profile.png | Bin 0 -> 2578 bytes .../device-control/images/create-profile.png | Bin 18935 -> 19760 bytes 3 files changed, 3 insertions(+), 3 deletions(-) create mode 100644 windows/security/threat-protection/device-control/images/configure-device-configuration-profile.png diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index 1c9aa41307..673619d598 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -35,9 +35,9 @@ You can also [run a PowerShell script to perform a custom scan](https://aka.ms/s 3. Use the following settings: - - Name: Type a name for the profile - - Description: Type a description - - Platform: Windows 10 or later + - Name: Windows 10 Device Configuration + - Description: Block removeable storage and USB connections + - Platform: Windows 10 and later - Profile type: Device restrictions ![Create profile](images/create-profile.png) diff --git a/windows/security/threat-protection/device-control/images/configure-device-configuration-profile.png b/windows/security/threat-protection/device-control/images/configure-device-configuration-profile.png new file mode 100644 index 0000000000000000000000000000000000000000..9d295dfa6b5b6fbe4086bbfc92f9de584ed12117 GIT binary patch literal 2578 zcmai$cR1S%7sr1winO>&uC2YL_PDBM?MrPU_O8b0txbq%QM@Q_(4tzKN<-};6tUV$ zsTK1^?U+q%v0_~Bzwi4z@B7CY-*e7${yXRSBtgv$SiyW?003Bx4E10D08+WkO_}K~ zeHcmI^)i4$UBV_GZ`pEr)_du5 zu*(kIe;a;-=dLzatcd7iJ)(^)=jYe*l?EPM5VHwtq3`1g#Ow9Q8rndyqT?+M`l>k# z%Q~8w8*Gny=ITZSv?mF@(a%f7EdXu1PeB4hqM)Lye?URjfDR)R!~oG|{KXo8KzAzx zpwRSQkB16C5s~NGm3(u8R{_M}t5q@sb>hOb`78Z=**LKs=F>i zSR{MO0Lf=XbY(y+xQLEf@)`KD^*;)m_{pX)r-%h!1s6$mFWU5Pj>UpaI(*;u>@L(1 z-}1J@su+jMGg~Gn(K;BTRs|1EBfcR;I{_MUzuCR5zC$mxH}C3f?y|O;X-bJcmnzl= zK-fsONn9KZRds>f9jiL8wjoVR_cE`GyufwdGtGeO8!za8X+Pdvv-~ou9}+f)Hnl(> zKz=6qR6A#dEMAdGWV#Iz`KxR$8y0vTAFrc&@0xWv0RTb=W(;TL(u-_lAp?L!R>@)gdd;aUnwiV zY2yJ-&PQhR`+`Bj4Xa_IlVNUoYNW%~Sdyn73+aS8Mp@`vU)7I-%VIP>XM{fi?I(bAMeesq)=~<`~6x+-5hw8abqpJO~I!w>hPFJd6N$lS7P!K z@#10%OH%SEHVP6(IO;I7Gt<^L1<@-%@V05si5#&-%c#Py#03w1bPoj??W;juNWE_< zJV00WI#+JUu$(Ns$k`p$Y%di`ULZOlS2m{c5vv3raIo0$Y?{o8$lWf4s*ipkO{+?% zX1}Si7w!DI{bm56Xa$+U?Y*gNyqW{D?nCQT&Dg?(3GuC{Ew=JFBbRNOE1K%&DxBCg z3TRCQX*P0b7NbL%YK+ASa-=HSAeoJ7|On#9*3cgcnzIWJ34An z*+Fn3wo12OZ!mI4ac@J&VDHtM_sgC`hYkZPQ zQM!Z8+ek0RCaVX0Jf!(yuQla@7Np zwA~hp$4fuZcaoqOy5x(g)0(2ypk@^@eR+)z!APN6(;EElO{3-RNJ%Te#Aw^4FL1SH zy%|8?Es`n}X6+KH{^YD@uKo0mPa|x-R|J;Qr-h3{j(l}o;=ualNQ=v9pEp$b7vlV| zxXtHl-1GV?8&3C)yF3k(OUT$X9t9w?Czr-~pI>KQ4aAo3(^i%1TVupzUum$K(MLo9cR*Dm}WCo)og zO+j4vw~j9}M2Zge>}rp@Dnu@8EXChf2P4o&|1`N1^1H%+BPj2K?Mo zY>3puQ2LRB8~)-2ixtay3a!!UrHEn)JZ|UF+v4E(+UU40kC#_EOUYs3rsiC|IE?C) zYZ$Cw1+j9vqNlY%T^uWSW1Slf{FlJ}^%9?yV9NJjY}T$%^H`&gn$_Bu`xjC;CuMoY zt8#5`CJ->kwqtqj3wsuWhWnfEM#1fMz4AFyP1PB;G40H;wU`y@I z@S!70cPEzT^giJW?L~|%@1k*{yj0F0ORNQKx^y>z@8G9^_G&O3`UG|2>U-QvdeBUr zVxKLD^tJhYb$Pw&BO(`{5o1djVcPFfG#3eq&RhAOEi)U5-$>CKU+dI_iY2<2+aG2B zULMTG=4^W~A8b;8>n-vb+vQ3cJO8p<)P%#0@jaW13S~zlqrMfRfbty*sRmEgVy)YG zca|^JRHNJ|<+b$t=|~@&@>7exfZdRvt?y)vqEs9hU1Ip-`cMQBfxi{@pP zxhC-+;=P@@_#meI*|Qh(!z1!7VOl2xC{ZrC!qemTlbBH)?;(7ZX?yp6^K(YZ!?aTw zk(a(&e|&G0+~&qPK)ke?Rm2H{Q8n295okXh_cc*>`Jh)5xa z@9X!hm+0SK%}|}FQ|%`rB^(TD(oCJ2x})n)6lsmNG$xO14~r4mQf`@`iF`{o$~_^b z&U(wOI5Mu~<%h{vOHlhK*vr_NFC(K z_7<_7Cni(ZuB$!S|EHzPI>Of4QKA)Pzi%Nck)yVKyG@-%jbrxBQvV9a&dXwdGq%*;L+VHaXQ%1x;NgKZMc8(h1)C8 znE5XZO5-3f69jNx`1nK!GOrr{AJ75-f>`3|jrujE@qs91+$F~WM*8M@)w&O2{{eSy B`E~#R literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/device-control/images/create-profile.png b/windows/security/threat-protection/device-control/images/create-profile.png index ce34f4d015e70573ad7aecd9b97db700ec9b7f3a..ada168228ea08f5eaa533420bcc539f695216f84 100644 GIT binary patch literal 19760 zcmcG#1#lcol&)zpGcz+YTC$i~7Pg>;7OMpoSYRYqMA@Pij&cv$cj&GQN`@E3%$ zx{Uaz$_e6Q@Cvl0n3CA1Pc<<}uRs{^I)bCDuJfl)sQv#e5J^m^M4vt>4#-K0X}TMp zWg-}3nLmGY$?3Tm#LT~4loCU#dp7-q3)j&@3=MsT@&q-ALo6cUnBgSOIC*@^b*IqQ zr{|LbsG%~bkCyzrwYTci?VmSTG*z=oH+!EH;*z7a^6Z{L@4bnu`Q>rJcj0v-eDS9} z4~l$xkR5r~^=Q5exsTm2WZeIBt)=d<54;U$@9?k=W{5rVp%)Sy7ymn=iT-7+=}`0z zS|59)wyLh~2rh9S`vwvcI2!)H#WnMRdH1dPn7B3v(R+uiC{hvFCuwP-$;zJlhv)9a zZX>2X_%&Zz07)o>6~R(`6WYteY?%D2wvl&`L3URVz98^v&h{tp=4$jTd-o%ka_Vh6 zrJ4zdaZh3xRpjNJ=rc=XJe9B~P)ynf5OF!4fkDD$?si=?C?YKx<5>g*pozYsyREz8 zxwHnuwf(ruKl{eKo)O)(evPAU>bdoPzCNAVXus}B36#f0O=lT3#TlR2)r|2t^8STj zJ@@(S>Ow-{vaAHxVp^N5Ba8vd(zs+9If5_*$ZARI`wEhjmL8>ad%IgKlR1M2rHlHC zYc@q%O7DIB>QzenrW z2J8D8z;+u|+*L%Otvw^Vd{MA;?}6ac&|I{LU)b{N^ABEL`!#xfCyhcyv6uTZJ1xDj zWEKvq8ETia6`X9}_ZDL9BN>TirLFT+PE@xHxuHPcSE6}ZyyUdi{_*tRB6&Wh_zv5T zSG%c#u8gQ8f`K7qKKNXg6N&3zfh`^PD>k7K5fVUP4zmvq4o+0G?=meqS=s~e#kjq3 z-{2K^65tLLZPAX(OaR|C!afb1d25QSvjxn>*IFVr5l)OYMGL_E9gG+Iof`DIJB|x3 zQt3xR%)n&SK)C5%;mFg*&(M^O!7;SQ?N-s}-jL{5tzTh7GOYb-mfOv)~Bx1jH*|)?8z}LJN)*9 zKKw;Pk)Y=)>o(7Z!V|HXS)Oo`?W=&hf9cnp&QKl$_VF?*3jZ>uP?+p})#+@2!WDfa zZd_D<$)1$1{1CtO;Du|L(-K>ysAIR(gw``EOL#f8ou^CXwC26fQx*2TdU~Y3kUEe!SKZmVwr|M~|_~-%&&}LPn>z7J_*Kfu65pH9mx!T-z)71X73_~;{bZ1Y2vtuz1?)7wxxYxc%Ae9=eZG z>57alg0AF=o||;*DZ6@FyO*x5L$nRa5jGyD_40kxM{kPYqOP35_}xr<^qs+fjWn4CMG6kO`6RmXd;i~g-YoQTP)NQ z;B!#kwcO-ADz#SCc-($e#)Pa$a)Nqyv_qHPKN~c>dlxuuq<*G-G+b1UcD;jg0Nw;^ zJ8n)2q<#j{KTF?BPRcsT*&L^QiQY~ldUs^;m)-|H7!I{Ru!RjObuNmHbcmdQI?%pu zAKJV}eqZqS<&VzHw@0mbmSFJ_+-Bss8lU8Mn{Q|?fB;seq*o2hH%XfIRDND6vYUMO zc3=C5X+B}I77o5*FK_Z+bDsR%D9|*WC$qcN6VSXHEwtAnpxqSP+^YoHM4F9l6w(&I zDn@57X$N_bwmGk&<ng#)T$Zf%Jv{xG*FZ#aW>6H zwdm{N5mJZRI_O~G6y$nW^%y;O(?0h8uB}OC6aq&%@9}w@_L=Dl%4wVE#))8XoPQJ1 zB-0to*(rfeWsol0i*j-#Z1QX+E{ogAuuX1@+Ut5n=CNauxE=d-2r1)b+5dX;_0ky4 zN#E{9HBIUM#eUG$_mSiSLtAs-gEy#=gQB?s1GujKPV`FpS4=BUlh45ewHm_SHsajw zRIezeKXBXjN=7-kn5qo*jfmtKwRhemcRZ{y?>yLH*)vi7`3ARn#+%<`-2mT}E6EOI zk7mbg9|;#9AFqBl!Gf4VZ@le$8E#1JZ{UZ8T__Fqo#8<6 zs6A&hiS(`EZ4O5JMz~bElPB#Ws3>xwEvPf4DX?_Ohptp5e>} zPbCad^-t=4Y6yMVT4QpAENw5&P+Bclm6FQa8x0K^l*0wIs!=;#L+uk%J8d&BB+Lu= z3K$6}JT;=*xE&q+o~H&0U~^+T zcTMnkUQp;ZBEEuKgAkzf<#-9R@vSf7R!zc0@D=Eo81T8ZV z5MjTZ_0pRWGHz0CaIA<2#6#0qI#{};)(NrsP&6wg1dFbV)vh@fn@BsobTClqxcU$rQ>g<1X`TuLQ z$7$ZgWgBupN`b(Q@C*dv7d|;gbkE}^e-U&;P0sf5-yg~*&wN8^Fv1I`d!5Gziyl0( zrgGYA(?7D9^^iv&URe1j*0Q4S$l1yi&BtWACQ4X5xZwT`^x2h#tu=q=um{xPA8>8< zUavnqYCH>}gr;LGC&+BoxVd$kEri>X9;g_GP+3Ie4ucOJwUs5n9{^#w`T9xwF07YF zPQvlN;)(oD9V#=9T-Sb}qG*;wbP~B@P?s6I(8mHl*b2D`KEqML+y52xMr75@>k8>5 z6eM0+q9$Q5`{WmLIo=p!Twgsf$o?m2yA#KIAW5U6v}k40wYa}EWfmxx7TvWM*?Zrm z*jwNH3IDe3@_p<>vg)`7o}IYwd4#L_Dv`i!4#FTI?n)Ee3t48QWBg}x3-Q<|2Oi*7g0p=p~cFO+I+Rb#1n-X9o&OZB-0 zg||x(GYEpr1msB@e<2WRcgke0tsRyr(`CVMYGbEwSs zX@-XZ;nNRKUru#Tz72IMWS_ccQc_{|%4snSqB*WIZU=wqVH9r5p>XAwV8EllP@si|oX@*0syKC^*lD0W7)FNd2Fhh*bqDD5sx zLPq|uGWNM+h~w@#uQ+c+FtTF9_sj@2C&v#UBOTWmeixi0tM-?t8tsjL0SkzOvTY!VkXE z`;WNB3HR`Qk%xWpnlc5skN^5r8-e|iHzsqxF#_570uWX6V<)YG0=W<11K)Sp@^-aB z;W)mG9t>m^P1DDFWCV|CLzMrb<0E7c0O$3N`F2%7%inwEL(6l3vSZW4To%A@I)qNv zF~+}~brOaL>Myx%t8ij`T9DK%=+&D97QWW=aZ|&KiHXUA5bI3-5QbMz84E<$4p4L` z>gM104`&8n_WYvfGRR1ZCpk^=xBIZ^8r^iD_m?s>|Ao)&yLkRuscF0W7c+4jz%4Al zMR`FM`nNsP<+@a2v>7iOCsoy}SC%f%Q&5XUV!QkNDCeQ?vfNAYcps_Hqd{DF$a<_| zSxu4|ZXPXxzGMhm96yU=e6Xi4h<@Xel5uFfAJut1K~6Y;h~J*&8Yw~*08j+I?A|<1 z;F14jj7tEyOJPEKzb_uzCy`}C;K=b`y85X%?PT%SJ=4FZe3fw4{^P%y4p-8lF)hT7 zz;s>oJEf`z1?p?PC46#nnJ6hqFvXaiIoEiQjJI1W?->TbFes0^yC0wHd>wl1w^(fB zc}SdeCVz5z6KVh@B@i8L(Fj(7SV~zW(!ba0XukJTW<{m+-?u-3pn$yT-V|uTEsn^r zk-^GLv#%}aESZM76LK4nNBKq%kc`RYk_G#arp=E4uBOXDLQ; zdh?_N>BxA91tLi?hyJeDW=?gCJ6WObMXBrq;jhQ?2 z5U#V~yWt8Xlucs|3K?zAB(TzwJt=|X(aKczE5h}gGH;tnM>jP#)-}%rwVoO!tTM^K zqu2s^?R6`-6p_y)2mwje@;0m7n@z4pPZ@p;np&aXvWM#?9#~Ge;p-3)F9(0K2P&56 zH~w7-38sI`Kf~hSr8iU_G!7hndlXfsaHr5`GW;?>`EuD;g;RgH5q-t%H|r|7+Kp+u zqAdqy26w#x^IHkdw;qMD=ZaDAj_JXqu7K>E28gaez3dAbI28Y*XFRwk5uzr`n(cFL z?exT4J=INoJ9w7r%}y4yCq2%-XACtG`zk~Ud)OTnYUlwEBh@?Li57enHY{k;TVV&O z_FW!>cz0vc7?FN(0AiR7VzH_4fvcVNO^oQh(-F=VT?4q{yMLzRoZC%Vzeblz&Q0;bn&``&t_!GF% zjFog~rkFqmy!Fm!!Y8d1_Y*`-RihP~qPHA1Gy(GdGlIDZ!O%XZP1`RYle-+dNY84& z*~&XF82!uFJ+3-KeM8DOG)p70PD+!RR-P2EbjqJwRV!^KOPf^9N|St51BuwK8*$GS(o%!JZ~Lt<>k{aRu>E9feR7YNp4VM!vjl^8x>t>PyoeD7AM2^1B51>0YTj7d|1^NkU2Fp{;ngQHWbpA@LIV1!|`&&cp73>g|QM9+!_4p@p?xQdwpY7ir5dnZvEf zB#*%>yn>1z;jWMa^&!s7g9#?c1xtgmskHc9vRnn|!lYJmVslz#&@LAtTi3IVR>@33 zRizt4GZNGMmd|pZA-x_p#cf5dh3_np`hzNZ<~x10B-TPg5QtIgv*KJ#&IiNSvwPMm zc~CrSwdPt{_FcqLBaa}UP-a@;A7pU|;-s1Vjm-_CJq_vh~(T%&BfHF0paZG#Beorz2JrsKWfP7&`4dj z>_DO9$zaiz1X$}bl6gd%UG5l$QtWHUg?*-Ebr1+aUZH3k0`62ZWMNO;@?zpE%osu( zoNIogQP62AZ<6Di!F&uxQN{`5!C~5z2ItC!QFF_UenoeV7ijvx8~I+%_b=fW*|t8k z)HPnEpn*<34v%);1!A_n><^aiFtVF!&W{hXI4u3|SM0BbFJ!`)^`Dvmi$Tv-C7VkF zc{LXcZ$~S?KfmQVtk{Ze{&@RFu2xj+?3_LZIo)X3G|cmvYWP`Sk~LY7!r_lzsB3Q! zhF`@hIK?qS)6m-5q9Y(9zFDbRxk2_2hv8=Om6VwpRnVJF64rJwF^J~KIfg8Z+1udy zHBA&V<Ren znLB1*Z=5-n&r@#s`YU}&`%*}2#=XP7E9z@O+??5=H@^!gZn6TT1U~5^Edo^^NN>Fj zhhsHPOF?f=+7n_N-Z8mmU8|64tsbH+Y2x9LOHD1QopAaQ+_A+eX()Thth0Xbac7iu46u^q`2DK@1IbKuzY!$=oL=-NwwP`u# zcwsk5`IzkP!EAsie0i#-{EkV|;zu&i6mzl$Kv>r7|&74=J79*f03VnVW!QE$GsC84AYN{us?g#9hqTx8vm zD0g8T2){VR4aX*f0E&ySg9g4S^&!a&<|ydE`;$K5PnT(&bkO9ODI@n56MOi-gjxR) zY=#`6VAtf2mJcYmHvNGJX;yK3-L7NK4ncX28&*__iM)E<4QA2Ld*eO0A`?xa9` zZu5}qHPlxi9truBew!b1w*SB;+e=xakLnr|He$^o7_^%E_LtZ~iHR;3mx(oSA}uDB zdf{~isZ8;XcaA+Sinr2xlf$UPTA)R`KWR>Y7N#Kjes6_c2-SR;|30EyAo?>~1G3$^ zBvCP0#S81|)*Rhk(|8REs%sfv%wQLjzNo-$lZNm9_?O4%^G87*LKfL}l3qy>>d(2t zE#4=V1a=)6gZ>q4k_HUjhK;m}0}Df_t}ZpcL27o-FuF#fKaD0bds2VgZ?~4|&8RJY z1`UYVRyF%XL*<`yfH-wkFwZRgc01#>*84NkdC53ZD}ZU-oKC6EfR|3w&XqvdnoM-w zM8Q^O?Enda>w_gW$V2}7_Bqb_U#o%AJ?2Ci&-w3-0*yKLMpnJH9^CH+%X!u>`uYo? za-C*esEekFA;ATSA93RL*&XaWDm<05I@NbUp%<#)o~{EH;~Y1-dYeZNJ*i!u;Uxrp zBW;M#`P_PNd7VAB9LZKbPOdq}!>U*8JKkpinvTICaLyj&q#R7D=XY4ED{48lHlyy0 zSy$`T-5e=!dW-6|dQAzy6Tkn0Af%R_t_Lm-I+gnGqQD{qP!eiBHb_S3_0;7e%?%d! zg9P4OhV)M9|A?4oqL_~96d?YAN%wzSy7K>?0^KQe;cQ0#o2f7RH5~DHTuUL z8vl0u9@Wgwo2Zrr$($90Gm*{Z=)XbUjiUvmD5~HO+4YT!I}CumQDC zLrOzqZ(Re8F_G2WvqBoKg5I-|;r#}4J$ezeMc}sbFf40UnfVoFko#fiaWlS@>O^RB z`VAE#jUD4J*sLv8ju5yrj=}}!nHh{Pg=$zJeXR!zf6WLs2N7x3Ww?aU^47LZHsYY% z^yi&)rF4qB^gxVfW@ZV@!hvVgNq;kJ7#gwB;eKu0(XkUsvJZHM*$=J6=BM2gI_LW zuV?(8Kr3=;2y6e&t)iI)twfg##P?t0OHWVIYZGPnoSesx zWeBy!vbbFLhYI+O-#9F&p<`p?%`I^3F&gvX#S&>VXQ-Q&Bg_9H>a3vk)~Aq(tv1GN z?b96B7N1Z6G-)!?n+6*CsvSYFN!ei|ZrIxmPeMRmjgFC|&kZ0Z=004t4!T{8H(J{< zEUW!|@H1$_`u25B%QuK@V(UeNuI6f94Gb3`sic{EHqsIv7vR^fKlHY{XSieO6j&=w z2ncS_`qrxWa=pB_sQ`wxwf&%)^>sR22$4>9_$!y4a|{)7btSC%BGG(*@p!Gcs(3w> zA(GD;U~th2MU@rl?|@WGYrgmlvF807x@|z1WZ>JnC<4f@^YZRW=5V3{bnuc_`;80P z`M4z?GNtKEL-ykWcOahX!Fey9CR{4H1$(U4aLCxn@@?0GoXQj$c}xblXZjCIh@9R0 znzKLdV=XAt&w&?WZsw=i_jkcmB2;x$1xM8{ql-6lBCV(afXf$rh0Xe_d!%x+q!XX? z6s@C^=6&Uv+(|@4nleY5O_IJh=kE*E_Z7^@zn2L}d{O)zl!78-i2DfE%zyELbsgJ)8CJ+*)^XvaD+ouw9CBsnoKe@NQ6MgSvb zvnoVoPQ(3an`@Yu2U9MsIVx;@T^*yPJBDF@k=Df8_LEnj%E=-^rfc^0SHvFAixR7_3;diA(GSeRz8CzU%i$)#6@Cg0~r2HOrVG%f`ks8gR+p)?CgXg1ygYyfc$2bpu9lOi0 zdSW{FWN8*$%WQ94V+ZcR*rRe%@X8j-nT??n2a7PuYQ^qIFut=ybv?kKLU*7>lw`;p z;Q6aIygtK{UVN`cULPPh%IfIFIUWLskm0^0g1)lE!ohZ;$Y`AH{+||qi*3B zV14NR3AkL?hQyw^dhp*AU%95D4mVu%_~804vg45|p7sm635Zw>oo=iY5+>-z`eN`(8GdRDr|x`{dC3 zaeEPQ#o6J*{V(y_#8(GO$2rx`&WzpTBy49W@69!f zRgAW?|Gp{G(CKM2CNCyfK+s+faJ@-WU-W#go_N?w-ALuZ2Ill!Up3$6S$iBRz`6WT zjcK`>jWbmrjBs7{l8MymEGFK?%r*Y)IHMj$hOoy1|L)X^eJd9C8Pv<}4XW+P@OCs&k3% zt<>xkzRODVs4lwwaTareA@_X91~YRi^v*oK=2PKva0oT$kfuzVR)~ZbJ;j6e(t(&tDN|S1hLsuykp2a_}FYfy9-U=c_#F7pN#ss2Pys2^WL2!Ma67vYc8JMqqPg)!;6NJ5K=B9?x z@DRym%j0lqmy}|3#r0;VjRWvmr?&@Zjd^D0J|p)Y<&z6!^-N(&42Gx^y6rBd7$s|$C>Y? z>=fjhlL6i{twEOSc=*sn55a3&j)N*eX$I|f|MA}~+TjRAMvT&E9IEOHGM-XQbUFYNum_G;887tHXH{hfIAMCBhpmGP&|HC1?WUkjFJ!X`(_{3Lm5 z2C+h6I0k+(XuX{k(-TMHj9mhcp_&&bKdq}dA;1w{E%{ZceKGeDuHm{1N=uz;T+K?M ziZ>HI4v$b!)oa8Z@e7C7ot7%d{auaz`C&aw8K}(Ki6TfY*^?Zt$B1VY_3Z*`Imz{_ z!!AQ2OoIf`Dq7TVpJ80#+}H1ihfTfV5>NEG?iXlSNe`P=QBV?UKqEi}hw?gXVjt?EV;@NGmgoedsf?QSA+K~U~en9tf zW-j$vp^8`w-obc$Sms>&v04Y;Nt4w{I{xK5Rb$Q$hrElh`BPF8Vz5@R||F-g(Z{J%2s^*YQsJ|ba|mzA(z^44En`NeGW zcdqD(_u5ujecwREq%1IBY5&`h%PFy7I#QZf`)Sm*utK?EzB-E`B<{0VOa*V5qQvR< z?hH*clAO-O0H+$K=)g{cW4OTne!u6F^&BG7xygYOlEe^zU7SpfmsDMeD-Lek$OkWU zEY7j%QqcOT+?R|l09`JnNwv>3qGl+b*K8+;4aGtj89$9q0BXf59Mz92Cw%}#@nj`Y z=*u_Z<6CJnCH-K;I?O__m#GA^Mzb^YsDHvhhs=dY4etEz49}-zj{TYcaDE z&c`z}MN|KF=XbVV$FP2-Eg+<}zW@gi9s_GM<`t?#tB8Ch1-65b5q&}CK9CB3GiWDF z?odWVntR|>>I(UDW-oWbdha~EEWpnd&0fmuuxHrOs$ofOw50lQpF3=w-$zzY0L{;N zcZxys*I%Dp3*Ka!IDNVa6Ty-^DyV7^A#@D2IqB))VhVS$58RzT33Os^44kHfmokh5 zd*tdx~%|-;k);GKK0=5`4B4@>(9rR7Jz1_xEyavtqG+5 zwPxkf2aH>2YYR3B%$6Nj=(Dv;U88F%c@WS}5pE4E(6}t3tT_-i{`KvdU;jzJ?vM z2pRrh1U&yy><6BbvM0U11}ig3g7}FZd1r%YCzYg$lkWlrSXO_T;Dj3FbQo8}GgtPB zjlKmsI!h4>7=@d^WN~}&=oGHNrK#^fPIy!I+6`5BjNQ%dnVoVKi8wN9=sOGvy9}pe zM3by{Nn5)hAv&~IMtdZyEsUO!2Z1PFIHv2q3lS@`ZEd}NGngaa#>8UoWodev>gAU*$IWgzI;iqe1EOtu52r% zvA2_4TML3iAl{9le;`48h~^!4fkYE_7~!uYADK`;=4c--0 z-OU5>B(0a;P`LKdzca|56=R8z(f4e6&$CK=UN9p(K}9M+Sj!DZ5Fl|{K2WG*uo_EP zDk5*HFQd5CPMWs9K9@|BTr?qv)VIXbp!0@IqJsY9Fr;~Qy%<&g>%g<4_Ib<_|6qqw znWaR)YNb_0D8B>rZf@hb>=!V=NWw}|5YgE{j;s-ZV5m5DfQq5b3OY_-kdY%Bals& zDRD#(1^KEi(qI=)Yj|RR0#lL1GrnFwS-X|7iYOUAj98tqn}?-8FRsTgUQtFhh6j8% z>THnU>e{cqs2@zRRbzmNHrI_=-HE7Wa5%i%;`Y!z{F~SgsM3}uAmK0}85u zli@G#F#miU^hqbiDu&44W3DZonA7N(VPT!)^25I8 z%FMT2c4TJ`a30kZKe#3IKS$Dk9aaDQ4n=amMnM|)P7l3@83Y@2b{b2rLSXq$?I`Ur z_@}|{1$@hX?}G85Rj`D{A6$3ei0b^uA%ua;9}H~A{qKlPh-(fJDZ5QUW1k|VKKHUC z&w4dWZCN8JkY@_Pjj4$CT<@yHPP_-NR3Qy;_F5wc15+bn^plxCz@!U758~Fh6G7dT zC!fqWSfvPk?KXzFdq^f~0DLX395;ms{#eYBGIsmIQbW>W*#kO1vE*J<$*e^VX9+_Q zsr<@m4=uxa?&8F{f`C1816yEn$(cPVF+~nEFPng8VguDMhNyHbwOzs_NtE{ChkZ$dVfxhZ$EpGJ0aSn^;`NcDEb>o0X&qOo7g z^di~;@O}6pPT`4(Lyo;EOMEj0m&)4$GJ>cNAO=3!K>ZV}y_nNY*}jGntgTfBY;~n5 z!V|*GjW4aT>AsdO)^{kKqKxH=Jk=P?77>j0keG@qaW}I}v|!|+4SNn!gV`A^F`U;p zI~3G3Ssy#DrXK$SHc`2zy&}81(W#Az4hyV!UR~GP9>rY`?A)~NwJ0H@ zjhdpeA(#>pCi|7H+(+5g+_V)jO|ayU>(oX|B{5e(uz5BNHfVwAq96ab+@^34qSaY` z*vtuMg5-HI^_iEEd|Iwav1qmCi=!vHf~EV|ACzB%d+;i1C3uHNT76*Go# zvtFtB)99VHQX%%85&Fl*%Qyq$k7hW>2S3ce$(l{~=OUpfmws%z=1!oB7b*r;^v+I^ zZ*PlQ-|ke&BxfwiBy85!AD5R}JliHuCYW52ebn2-C zb|MG8#XrqgKV$e)OHPX5(HY6p)-=f_ExBo`>(bkWI^I$Bv1dhvAQB&k-cbgOm1QNF zh5d3oHF^bJQe3TS1ViCQ$<9ZR=^DVra)_c?)M2iscHkIo;6%RYHscSTUh4SS;EVR( zcfi4M$p8Z#O>bh0hKRnaCCE{Ruf9(y2i;a*Jq^HmSye;rwY_+6`x0P*Ql8f zHWQ0iUM1gg?`Tc@qfaYX%Xob~jMQ(`dTBheCQfR3RlzrhRp9(bydU@tG~Rq62MZqZ z3ZMR~l}i6$YoS~h3W?2Wggp`q0RdrZ@nz}YBY2gSv)r(Q5Cj5^FZ}Do3f#sbBik&8 zJmejSn@{B1aNkv0UxP^3{C{>?l2SST4{~R*x=#Hs-zGw2aJy-l9T()e$b}?+tFe$ znulNDD1{v8nBzTZ2_JUqAhE(#@CQuKMr%q<>4}#}KHvJ_XC=ijba)Mn?j8C;N3<}E zF&YqKV~mO2_0htK;p|*TTJfTivPxbBsnTr!(##7XdA?{7XuF0230Crg+6KTT6p1amk) z_VY;<_V)Vd=`(^2S&*xZaQOb$+<D(WqtSt6;XlGDIPEM|8 zra*zH9pw9Tz3+ZpkRmL;Cv1s2aUmic$g<>+j}<;qT)K<-j6xFpE_lj8rJM|tV_;Jw z9Oq~hVri^qISJ`bpZ!!!W&I zpdYN>WhYy39~@epXjk0u{CkCWpkVi#MtRkLV92pB2~UDM8=8HtZ@7qv8{J?zuBi4h zn4{e2gtI8h^%){3=Su!r8p)hh1{N9r=fkFNmth>%4zI(8aR1<-XMfaN7L{Xb^fw|M zf29}3Z>jnBl`Pv}O?9k9`TRyXfC&Q5L_;2xEm2K1Ix9^8g>N&zFm2mh;u z6F}-Jn$$uo0zBG>(84|*WknNPbQOO1NTD|NV%kopC4S5=A#CkM6T^^6W(Iy2cN%Hv zXZLp3aR9#C8VFA0aSQ5CwrE%Munl@QwA)-vUQGf#lMltW=}yP9fb1( zbi;ADZ08uFw4NTv?i4y;>yR3^5H47D533^$%$Aj^nWa-j^`uJf?+Y{AZ$zM1fXm$K zqKB;p&a!@-U!@LlewN)TzVVc%w0N^GUwR|>bEY?zX_c9--|5T(D}DRZPr12uYUJC$ zcApD{f9yWAalgFOaP!fw!IQ(c*&Hz8{w_An7y&+`5`_BVd$CszTXDykZA0HSM zzs!KeHhXvpub^mFJ=|e%a|O=dGY)%pDhX-9Y;(QJwnqh z>0WB%v_A-vW{Kx3zZQPz>dIqx$f&^kyjG&BK&vIV+^OJ(h9_)9`D&bORXBsmNgvCoQ@N1k4=LT|95>SNhG2?CG z$_=ZUurK{W1Ke-_@+ayvFxHr(<^5j-qyD>!xtv69d$i6qG!)yUP-1fUli=0aow_{) zf^?|kyrT1^QzHNJz6p_-j_>ScZye|d6W9MYm@nO0JMm>6UJAzkkn4Q{yH3Q#mB;hU zD0tO>R??}LC^_h@a@P<}Lzzi5K;*LT!F=8bM@yMiEN>=(h__aFc9jq%xik6~3+?<1 zZWgi|!P0Fm_R6!IvdMf5HwK%}4}a+T()N5mKCP8G{JIz4^}T4r)I>eKoZ!iPVr6my zxKQszc@@Rqo*|tISozVDm?BXoS`Q8O?@k-ksSB_5-qehR^|OX5HY6lFn4=(!7;DQHAN)elgbW@l zG-$#-V~?>idpAt|A$5n6fv)1dt{Y?|S7tvKr?;K|z0pxJ8>5a09J?j1Oq(bI_P78)YjL5JYEyf@p(o_CiC@o zx#yenF`!Sz&@u(r)BwEJYR#TvIH=^N5PyH%D8-hRQM^5Jc?kw>75bV%h=^D-|0C5x zUN%OIdGqd7A>O&jG1z}O?q0)u!|?X~ykjAGzelj-K8hRxD9}3k7**_t!~ZS1`JjPc z_pegn+zg5v5i~n^g-IwJpfH|3PY@&329D0#C)vUpZE7m>;pojngSK}jXB zyf|@RCPE~YibDJpyOA0fnYAL~!MSCahvs5P(Ei-BzxMx0p8ZX>zV9*$Rg>b&x!_B$ z);$T4;~J*KIzNc_W*<2*b+dHy<;RS8(CkAV-OVyH3rsRmlndQSK7aZo2h$_#%P9X{ zEy%UeEL#q@TITM}5PJmptFHar)O&YQ-3h-F>jAt>D`(u;SZ|n5KbO zj*pFd!r{?y`ZIaJsb4(XMk%n%Ao+yP3UDC^F2Q@~1LQQSi}XcHOiNyW-XW6nbU!O zgy&1}KR*vx`b72^zwdh6#<<3@BPaRPNUosRTnBRBI)|cPR_e{uV3i-Ptb7$4S&ozU z(l+l+A;^mpc7m3UOpW#>7L9i3QVSdlAC^c@sWi28krqLW#8w%VxJq%O@E_Hy#p9vtf(hbJ9QdbHN&=>m=UGLa zjgy%q!jMIlc@90tsrMEe9*FL2b5co2D=D+?fQ_N1p>?3nJT}_9l%<)aAf`F(Dhb%s zqNgYKSkVofMY|J2gF?u_q({n(2h7RrzPr(AyUW2QQLQu}>sFy@v3Y`739)-|cO174 z8z(pUCm+71Ucbnv;W|SgkA>-JiW>#EG+T$Ti0VHpaCT1Tud!_^fb<`vIp1_ufBx-d z3=DD0=U$LB%5hK0Z*BHix-SV-2Kr1jv=UUH9c=BICN8Y-rlWKI(@=Rg4~#*7!vA!a zgzZffl6)Ed*DWGj0wR#I|Wx9u29b4n}fMLB`u zzAQrJu!!~*9R;LD{~wK-u@TgIseUj&hx#` z^98Y|a(R)qu;o;9Edc^I&7sse)NCEaAM3B7ua9S^^Bsd7kv{SB%~aq|qd92Z=K*ix z4>$H_;dPy`HGDJ-8I%=0@T?%+s+Tivf8hP`>9=-AWc6Y|Luxga=43M<_!;QV8`l|q zv0cY1iQUpxvj`O}&JqT{ycE9BJtOPG{wb-jmq}gY1GXqTOsaU9xNhWay;e* zRphp}EHFDB4^G3_Zn$d>#|yD-n})y`w_`Cy z?rhSx<4qxeadIY7j&bhBL`N4MdHT?j6%?AdA$m?2_&84W)Bu5Mrxf=Tl{CY+#igY} z_l4O?T6p-3#}D6S>yix496*J z50{ks7OllYoujwp^ztRRSrschaWu00u;{HSHM6tj5TX}@Wto57-#%0a3UBHMz1rAK zJ$Pz;43%C1!*J*&fTQx1_8`o-r=ajoDjUrqy%LIS8AU)d$xEn7qu>3(UzWS zx|*HTK%;xPwkQsdd`kX&nxyx4FT>|uC6>sC*Z-LkdTshnxPt^N6o;o-Pror7I&{=< z-&Xtgc(%GWCt|)e7MGE+O;Y;CW#kv+xKlms%0KXYAGp~*{e*#I(KSI$FVch#KZVC3 zS#F5?R)~w55PPt>_V`$VW{$3ny@X?4ll!FYb7#@)%5ZA-6*6w10uG&(rIh#RtMor1 zE{-~!lvPFdjv4AkVoIZHEAvMSa!=p6lGg>dAjVgjap-kVgml&FuVlWeNEC=l7VAfR z1w@om+CZ>ndGhDLYrZCwQn+58Ut2UyzMaumdIn`o2Y4kY!cx#UPH8=sha@MR8;#j?6%i}LbL z&H<0njLx&~7e=*Ra902+m);=u$~*Zh?W|WvwbDfDQKlMZPxJ{RRrG3>h;}AVdQRgY z|L#XkahyJtUASO@HU3Kl$v|!(P4|_h2~)sHE=cH7Kb$mSjt2q7hB`ldfuDw92+9Y0 zClY(5AkpG}JMgY*REkc43V!H)kPMtv<>_9wmMqiUyn!PyMM?Ce(Hp*4ja}Z#xy6?; z>769bWhO|nmVyDBpULQ6SUVzr-S3Q(_e0lLj4esg%P~eMBtkZk5-GsnC8q_pHXQR) z>{pk2gNs$tWg|)stSG1)O9I5I^_`EQAN>-UqGw9n^5%Rh(Kv1C&DKAh;(qTGCRrr3 zy&=>iBDY%qklbXh9{+_tZ|1uIIQ);snkr`L1o@<9DTNZ67cyA~f}TQX3KRTcHUK_? zHX1fM1XH^>oO-}W)9ZV(!H|z5JwOQKbhA&KpXJ=83ks7b=8~hQe+Gf=*KEDQ(RL<* z^LuN&l|WlN^sx!89RF?mGE~YMbIU1O%oXW2>6)hL=>$FL8l%j86!G4Md%-(OC&7pm z{wd`|dcODI_!QBV`0Z*Y#nMf08x`QZ(NZth^&2dB=;x4ZCDS|l^H{#YF8~MGh(BZe zV+Tl`uGq8!1ALTPyddySg?aA;nu& zH{j#C3Gd^Z50Lk?gK|0Fst=R7c-fknezc{y*~mzNfyR%bqdqEGw(sOhEk~IGW)bY++dP+NLnR_nPjqh ztnbj)k3Q#?T?QDh9+?t#D<>JY95rFmOCNHU;fedayzM)nhT)DBq@fTu%z|Tlw@;Kh z-sBpo9`Ia`Cj99&$I|WP%xpDMclEZ(`zmHHf-5oARcmrZnt0l|gkF|$-YK;2C~77R zWihcHl8TQ1VOdH0OA(Nm!0OH7iI2B|xWHXgWc<>Ymdv96aJNy-Hch#gi!sRjs>85f zz4tP5E*GWv6TyWS{HpR?ZQVGf3Z7L!bS1T#O|8!<HeP sx;KAd7~{X;)^D}s)4;{DLdSPuLc@j$f#~-Lc;#%L9n8t97V4k)PxRn+l>h($ literal 18935 zcmbTdbwC_nvn`54aF^f&m*5gygUbMe26uON2<~pdeQHM}t+7yss6vBrJ^koEI zuCCO+VT%5vmFdwtl(-Ty;o_KNdm5BfLosI5DN-E+R@&hOwbV&cP?W?g+hUiIt}k)I zH%RwxB<38#{!pZ3?U~(*#DOJ#K2JXcUr+UNe6s}oYK&GpPfxy;0ap|Z%8<@|?477P z)FirH!3o_?aL9A%0YpQA# z*38*!Au7nqyqE|5qN1}LGDnPxb9Lu+SabJQ6GJ+*#^m+V% z_4C{1isf~^6S~5e$~Xi~09a^d)6C|Y5P(e9tw(1+li+!L-ogTgbhBm?dcj;{U=JNn zWCgtouGWdBpT>9UwG9jso=xNZE-Qu$LL`Lg?_#o(9p&D4XKP5^MY5HYd@7(2R+;3) zPZwVNqN)`{5=V$Ad~52%dg`j*4t!O>vs+1IbByc1+sUxlXB1BBnrE&g*xyG6e-vX)svO535P@{|wqT8sw^F*oa#drHI zfni=v-q(uIPZ`*FP?oy!I5K9}v&(nRR{$%agk`gRMxv82TAV;n6E6|5)8?UM|%vcooq|d6U0JG-2PrPKUV-UJqd#mry z)M0btTvjtARY#P#yK_-8TfR8%UUVjN{hr)Sg%XgeS`%z=&g^18jj9R#A$-WWCOtkt zWZy^vpt`pF@mhvKQWe4Z`EA0u~jmZ zyX?Q|23xY$YhjrkECf&^dSemK-8#dUue{%tY485I)Tr&gGMxN0QeaR0l@ewNP{=mr zhyd$C6$>{~Anzzg4ZlmW;lRW3OH(@>(iufTws$0Xe04K|)&mYRKfmp{syuxu9S(kA zPpXI5u&Y5(|M+ydK2%W&S!vP6s6>{jzOi@DIlZJQFR{Ea1`A_Py_a>E% zm5xelfxK>6-`jf8VQ*3LpKT@wiwY+TdYG-#sez7QZVY#6t9cw5rW$MBiv(9+yZn;P z$&IZ$`K_;gOpp(&-1Zq>YyRhS}UaCH{uCLZXCTqllt zg|$kz6A_P>QCD={ksQd0lvx2vUorvi$ydzxf*eh~GPJOE_jY$%aqSYP7TJEF7rCsy za$=X#Q=wx_aqzG^nL!ymLBuG%OqNv`69uABIGKI4Zt^sx9EiO_fZdM?Z)@jqGUK0w zh&{kspjkoxO}P2ds$AxbOFjbe@N+>zW{gW`$zE9Zt?1|{XP%>Hjavw1AYb?tYKskL zC5S>SSd4@m3rYM%0T3e1#=YyHP;3G|D;fq1)69T?BzniCP0Uy>{=&q0iW-`wWgSQS z;dtv&dSi$|7M-pc1gn@nj=xY2Dq6Y)!cJKeNMD5m)9NcVOF+r((A_8%)gWp^pU|SN zV}|Lj2~>AB(DqR#lxzf-8$$yX`d-+_>!FuERV~+cvBEDIeD&RU8R2rG%Dlv)F7v)p z$fxKHKnqQmP)sGB29B(lnDksEia1=%IaT%8DyfRjU>ImyJaLE;8lDW9#FGWF_hcco zs8@1v*BK0VA0X^496vD#v+O+68D0bw#m}x^KYt@%n^=<8?q^B;$27y7*%}{4)y1vm zxcn*mTG3-%w4##UBk-J$7F z|3=l|eG@;Q8Y9NVF@CZK4>@=nv;9quAVsr)F~EaKHFTc~T_Z5=?#`8@0BnU~Q#_yx zXL}c@SpnrLEm%W)Uej)eRZsoKUA1Fw&6%HCy3Vuer&moLq@%oex|b22ZW}JWZze#qqUg4)3nl>_KJ@Q9#q}P-U+9N5To)+BA9tSG2Wd-ELj9I6JSX3Pyt?iOi70(;i$ z>A9f$L8adw*71O8`Lf1)2-Cs3*Lm=UImak;uW$(M+tZf*R1pujXaYjahCZ?Im^BiTcY||NrRnPU32R8t{R%3Hwv+mQEn*_p$haqy^Rvrm9ga|8H-DuX6(}fq0$&j5Ub;OP|_(D zO8^pv6iG-dZ1(CW28ltQWkZW=yT=jnZliN@Ux5j_=MI7^)+e@lIqM<>IdB#jS3^8R~O$x4dj9BTX=nRAM4tiqRbYNV9n=4|Hn0ssbm_404VnzQv}Tzp*Zk$JH~ldflFf9LNB zMlYuumn3?oxTXodD%045TpU_+sC6;KX{z(%*kzU?+Sao@3} z6Xn+@^mr=_t}>n28W=_>Jo-4)1PfVwODnLS#;KYS0SEw*eD zI=2_4*0V_G^W&%H^z4Ku>;zMHqTd-Ap&1$8g4L;1>_}FpJttNiyM%SoI;`QU+6f~@ z_$;$VUr1vH8Nn`3MdPy{s{U0n9#nPaWrrf8?!v{v{fBOeN1|CoQsX2Ob2$r9U~}%| zkxj|?lO3mZBdN~~fU7m5QMK|s2eoNsL>}*HH+4KBo*6H6)wbIVLV;u14L2{L_xl`% zLVs`$(PcknIafL8-7tcmve*}J<0P*Qd(v>f?!}x#3wPF|RwxCmL{yuP&<9pZ#e;nR zyqQurLdEBmHN267K=guFAuI+jy9T(d7*=IRx1Nm=3D3$q0!lzbRcYtKA}SeXr(KQa z=1Vd~GyMe+$aQku?z-<0!)Lp1dzV}6>sg3i{W^RTy#%NYNfG(L`uH(0lZ#hIEWB6F z^#>m`7+C_DG-S?e;Y~R%a7J(AnoafWgYscd6Sg&}9w(WKBF8Q8Is8-&7p^Es^ zivdr$wCB$KLA)@8d~#V9_QjC`Dy8TWc7o<$^A|On%Ar+9#ZUkn>A}dR3=X#(4-SjX zC%?n6v-%A}SyF3CMIyacs>cr9nwz(V@{t3h96Jtc@HGzb zz@Uj;r1B|0YEk#c6qrlA7|vj=9$LbS$RzaDXyah=i_t$C_oy#pTTSmi%F1#cAMLm?Q-*Q#LO=TBWw;L=Y`hDgBW?wG zfrE4Jn<5;q>);ZBC!ykX2@Tm(?{ouM8Df%lC_)bQ5 z4Z{HSukdQ~FW?Q>QAbn!|JiCKuibL)>Oe(UiYTcf1?Fp^W6uYo10GW)G0Oe(wc_d| zDt#!|uVCNuZjT&=S_Esc_ctUqU=|hP6_?e2iGpdZ(u(cDnBE)Px2X3$y*H|X(9lrk zZ!JAdXa(N@>SIpFr+5}zjonW}0vFY7PgSyt2*CLlr02vDGxEL^kk3`404f`HuZ~a) zMGZLu0*x;3F4=pz)q3j-lQmWJNPN^|>SF9HJ#Zw4B@;a$FGTjMR&Vn|9!5k(Fv3XpRps?N8_Mt}j|rG#Fm5 zx0f)^|4fzE@Qao9ZFhG-V0pmqtq;CCIA2ZZZfC8M3O!sLOteQkuCu+)0N6imr)&}( zB`P6k#yNj~4_^`i#LEQy%S^eYxG)lpWa6rK#yGXev>;d!0FzW}KB#Q2WaAi9FK6>t zSO9ovicpH69B+{C%ZHrFaa4&(YH75mOPJSh_=ZHII4(H#yI%H3a&C->`6RXkDaMcP za=eSP6{W@lkerDYBnmx+2<+n*bdU_S1^|p5<*HKHAWZ$GGNnnpvN4=_kX|zvF%I_p z9;#^hp{1R?luXAjz_u#gV3(|)q^d*=9L%us^iCl4m+b?BNz|4@soaPm_L{D9lL0=J z26I?k=C4t>>Rk0FR?&P?@73?Bc{{qQvnuoErPU-&Jf$mwDW>xz_E^%J+(h~ybii63 z%s?2wBU=)FVxc|T3Es$JdIGAKZJbO~ve;+tUG%Xts&8|0gNH}Z^S^f6S(I4kNpbmd zr!|C=%$}C_vx!@}`a%%%RLI%PDWgqS-&h_cF=@)UjDeaCw(2aqWi(XdsB*Fq3_K_w zwo;P`g|yl!WPJ0)4Dx3=-dN~j7_%u8$EB{SA($0>%HKzGN(y74jQmQYjg_SVl|R#= zj~!QSiu8MM!47O)R2mj83}8a|54VnUln~f(9Y!J|pg*AQ$s>6?G!u}BmZG9nSG{|H zHMbxUTwI`+ah%G_mZiy<#cW--v*P_cgXCv-t*HqFvvx3#9*)32wn#83D)KWio;jd5`JfH*9f zfLu(&LyyAXfLemQpxqAElqfaJh;qVeJX6s(z+xmQ$z>6*3}!DP!Yv6IYMr`)EEy}A zzcI{>m+C1O`s1)xsDAy-5b|{k03#K+vP1)uC}{;fQ_#qmqal33N5n`#>~B43(A*e%$&620=_1?;4gZ7F`4WzX zAWln73Kcb!VRnQ)fYbl>_?%`+S3`4o<(`sz7!`9GNO9N7j)HDc?@~i~GJ^$CH1&P8 z;KhK#1Hxq=!lSqW<> zuL8m6M%I_uw$A87 z6PH^2a$MvI?qvbqudDQeAeQo9knPO!q~||COHSN_*NI(|wL&lMCgF?37!&<_)5-YpKw#cUC%-(T}VRAsp(6nwB?mu*s39T5LFx`1ItGqm)t*uyup9>uv8 zyXO}2;OGhYTr!R-U$nO?C700XFh;lIzy^9G8vhwNk!47noiWAeg#`s;oX_>xfr2tL zH_k&0%666(Ty!Lw>;m3m4xb!Hh-RdiUPY)}Pjko$UyC$lqeNy9TC1x`4RL6u;5-RO z-WudPjo{xJf0j)=4JwZFkQh3WXbM4zjKEKIlxRFk+bb?0BIly8d@*Mdn4W|kUVD@a zVrN;}EKK2#S%4c|$Jq9LVuSWdtLH6;s$&pdS6;GlduO1cZwRZ}bS^3QwCy&`9;A{l zy78EXbL3SdZZDT)MQoGLn3xK`KY6389ls}KuH^`i`kR(pNMl6Ifv7ixEWBQZ*mgc$stfS;hK4tsSGntB_JtlHZKP-%a1jmNg zPy4o7w{zX5-ushfm0ZI;@rm*8tBJdlb@X#ta5ibBHy%Wf(GMeD!j(;^62Kq3;Z`VN zMU&sZ{;K){0F0iKeld!{=MsTgCh2E-!_P$HX$jJ2Ysd);BVjB+_b) z@H~XBL)MwXHUx86E38CRyv`R?1DK!MoX6CdtQe0$M&g zWP*pD{F4&I=a(~+`$TD!Dn~_IRi7d<4lg|nuEbU9*_=>G2W@Z&aa~k6JaY6!?;oZ) zo3kAyl1`t5mY%mOkVKm_n#IoZepMMq5JC-bcKRjY`6-=`_m8A! zeSVuxuera=3bhmL(+9l=AWmz2$_=2zq7s_O^!{wk>%8;6Dy7CTpMnqWzlI7p-4@}% z24RSPX@*r&O@sv-I4>}t#NsHUn+dKUVbc9DcuM>&GXc-Z6&5ud+E!PJE^=$Rit~9qaviWE5 z3K{u;h)&oTx*6_OreWf5X6frAC8RJJ%wMheqsWnT%P!O9@`jm~SrD^t)ifF8V0uOA zeHsA2+>0g(D{(5g>3+=an9|^`?N_CW-{oLg*Ar-v2p+E>rL*|~-vJ*HxB2yB+NPG2 zM9!Q1$8Av^QcCv=4h$UM*!I(Fx`d^5-Zl=Lk8ep0T~93&YDPibNAxK;AMM3;o-3pP7{}_w4|DnX-Q5kof86br1Z1N_1WdDJ{Q^owEw}aLoroN;K+&vn4*5 z0ftm!m)a77I5$O(ug%#Ktvf{>Fs}VH>rf6-)RUsj8g0-Ik%pETM>1(<3CmUH` zE)i&JzjXOHgrA8v$YFDiP5HfDSI^vL z!(N@5RgcpOB_svv1{0Mi6Xh>Z0 za~rGvC+kAaQ(Po0QA1YMovwSMI1&JGqhm}y=}JOp&xwW_^-I{^$YKhS^UB-iD3rCm zHp=p!dAD2N_y;^a%R}{dDP>i4=5L;X;#d#(vO@DH@KPmy{rP%p`uw0n`i9q%H8^Xo!fw(ra~rF%k2U)OER zeT}xb(OzS{Y?=~P6+R!Ck=9asKI&WQceW+L zYBtjh*$96{y$cBs&rx!k=c{h0A5Mi!46O8QEWHf2YF`#1cq;h(hgVQ=a=V9Dyb@GJ z(Dp)o8y6f@lU|=6_&OSWpPIVi^Ejv1KWBcmf7Kp&d!L=}xFG!e^um40ne)8xOv>2( ze73Fk&YjO{WJu?DYBTHlHh~vrWtqRQx(0*7vZUR$=|3``ueP|FMJ9jKez0Jx2%-J0BWnte>v+^ zjPXuYG-Er^%7|@<^8X=lgU5=x7t!_+9hkDy{~29A-$!U8a-c^+S{Tv5VMhk0z9 zfYZp=Mlm)LUpS5@Mn6?74xAg8l2uW^4&(K8WMdj^^Qq%SVly+HqB1tQ`xaR-jx2u} zUm0&>RG;7Hp|TTSAK^K2a7*I#v`G&DDy<#g4pQFCof_@rQ-u7r1USLmtZ$L7`rrm( zK&2LPfRFpVLfw&<0izgD5}X7$*qpu%YHFMB-^dvIy5Y?9YkH-bJcue$D(aFc&PYFL zicE54%8!j6*7O^L^IFMu+3oj*7Pb7brc|u}xDq34UToY&2QAcj#&+K1{Df>?LK&&i z)m$?_A9OCOA&rcc>kkNTY|T*LMqT4xjjHTq#!Dk|&KUd|c;xq~1C@yClfvtblHQo< z+SJ6qfLoY+US&*lWk~Gr5b-h*82|$(H(p)}-%x&b9x#RYT`%fWorD0c_f;0iCzeb~aIr#ZNcvqEhP%nUf~M2~}dwKia8hX1}=4!#;q7T`y~Wbd1`1jGn5X->Pi*u!8kZHlU0Nz^a~A+ zl~Hb>ypuNnyeC%%0N8y)ySw~8e&brQ4K1L;!r>CY@_&T9oYR14!Wan4TGsUnb1U(FkX7FJi=uRi<{49%MK?QW!|qMgpO|XM{YfWkimha(Al2*VrNf+ z({QGV;mG5ow#Unm;UA?9kL*uUu_eW`46cIoJpr1nXI)k`e0?%?5*i=XpcoZ6ijj`o zCMt{AUnJ=c3$n*1t+;bcQbr?qu^bg6l!Sn#d?=0d=$zYbqS{NA$4aU{57DigKE^3# zeTXhLnTEkNwmFD6%N@N7${jMOKVAH$fi9JaI0@;HLNg4-1$_^;?QBf3k<9rx}tBhW>x0GR0FRh zimKPm*hVm})&~tx{-w8g<4dAbmY-(Ra|q#9LevV zK-G)xOAVd^dUM}%r1C&znY%$As5(1|)kM#@VN z8`i)s;Uh%5hZZY}ePUgoZ9$gBTz52Rp!V)8T3SXOIhB>S+@pYwcH3^?(;yeKz^fl) zM%Fu;Z-Kzb4cIRqI8g}g?CNe#D+Tq>^vV6S9~w*&?HOMs=+sr`E*zOIHr`MB&BTEbB%n%w%InPWIws`;fdlS zj&fg>&=5`?=Y(XMVXXs4$jbO-6`zPqdmL`tzi{`>aPGSLyI(5MoSyl^poH^E=GOM%ZC zcu}3`8v$R%t*_h?oeF-{LNn__Yn^(^F4UY@wOo1m z3LO7#0<^xm*RCho!iPh0f^Tu=i(!s;ZCG>?uo5Qf-^s!^X^s$23r-5CPg2*Gg7mtB zbZgAm0Np{nRSI*<=$)mp_wxHy7+ZK%q{60k$jVWO5u;UW!fL0ED9Gc;-Q#p4c4wH( zUQ{xS_J>k1)VRJAlGIzNR3);XewG!M4x|2?ID<=75y+>+aAGi@r7ghG`49R2FH{>0 zTgJrs>qkD+1#x`mVZC6TgLY5q``*Re^_*kHjw#s7#k&`Q=skCHaizZM9f;aUC*x?P z(#*SF@P0Bn(l5Z`(AD_G&mYtHStGO*W^F4qI!DHr83V9_8t?mF$Gg5{e=)4Iu zq|Yvi;n9i`rX(aBE6$478D(Tl?^ct z6o@Karn%dsQwdLlkga;uAb5lYcWNTRLhkc#qxJdqjJPCsnnfd=-|z}&5Z@ka(EN~R zKXYUFl_5Ks=U8tQ?6b*u(+@f$BO_mEP+yO;PxY9P=aiO~vUZCp8*Vj-dy2F^0iPO? zZ0ya0V=jLXU3|mdgDa6u+V%gHh@8-+Qq{(*Np2+j%OKJTYWHag9o%*&VyPSZHYE(T zuPaydS_rM!aVjdKfZCul7cTSb%d5c`jPE#Ue7|ZaWSnVtHNb5Y_Vw)+$2}Pq{O<^~ zo{v{1rpBsDb5S2rZs)P$S9@LAM)|Rl9|>pvULKO6t}X#A&_|$V5pi^AOzq+UiOK z7i!J@s4a&jo^*cJRrxh6pzwX4W*yv5*pQ+*HZQtYHHV$eKXHTw9+kx*Qy;GDoaOcT z`&Xd}z1Roj3sXr%$1mFm{x0{!(EAfn<$=Sg$qITqL8$!>_$ieZi{YSBW0sS)^%(1Rr2I*kwK!`%9U($Lt%O7F zH0#?JLZ;%qg-UJy;(~mzxQG5%+OA8^zsgh%gWOC=D*gt*!1_LJc7r6Y!O<0|3j_jGk?_D#)=iCu4NSY}30y9Tep`uFs zgsPlhI391SxI5_Q_RVmI_&H`sgPSm6a>bo-lsGA>95fk4xrZgMBV)=h+J#@y6h-M1 z9UWJ-by@G$WfWa8Vk$oG7N-vC>gfq(Q&5;1GQb7h6M?7b-e;Xd za-W(D?+7Ik!1CCGJ&NcM>N?aC-@{Lqd+j?yBQtO!1wb}4@GNcS>EuEgH8f`o%?pWn z@zid$vtJgJHKZYUXylYEL*D;X)jIA^BI1X@NW;2BvH*NQfRdXXKj8gbJZw@Bd!3uAX30LQ^;hWrL@JF)MA=bp904RglcNl#Z&LQCihS#}&suqZl3Xb67)*dM(dX zv_c(RXrWZ%Hd+D>2gw>F6FCucsM< zNTmg-QV&gB2)9~@q%407yOgmh*C2$sTt^ZRCZDYGV(l%c=@19leVo3KQ{}O(7nEZU zLb*8i)KV+(9qz3T2Z2c78FkSxL~5j^>mtQp3dy_UFw=kBq~3)6_Iu*hp(_s{E_6lu zmkSQ7MU2`hlf(JTDrfw+q!X+F?PY%q=|}ZY(aE>wuYUuiu;70JQ?a1@4CepCrXBz& znR-1*Ob$N&gjDw9vP^6(a(N?oCBby4rZE8g)aZze2%)=Q7Px4QB$n1Up9?>8auIpo zl$af!-^8bE{rnSt(4O&;uwB?FV?V5#p$S_6GF-1KIKhq|{ABRAt0(7)cg~6I;xFvz=M*iUXP7IBDVG>wU~U?GMqJuH0B;{yd(8jGWZoyBHOyA zcdvWNJ>OjOh{e)Hsu{pSc7>8YWFoX%XqL?{l4ut^6cNA#Mu^_W&Zm8-NT+{{OZEpR z7;N*2V)3F^18e&=W&Ooq&0brt-={4iie)U;WZ1Nbe{F~o$@@GVOQS*bS>O4t!@di8 zZ`E2u4#!p)oMX7?k2E%C&Az}_Iw9KmP{%ZU>9r!oJE@ITkC{h8C$+#@f8p@y(t)tZ z5?zVb-WCicK6ySltzqc+eO~PFtesPwS`6=Z^K|-X_4+Ai8+MBLuLvi^aiQm_Sb5su z;gqH*`|}Iya46W*QOtcD4aENC@O<1&S4JeGBF+;aP2`7U6q z0FV!#2+(3G&hX5;2WV4L0PhsAo`X3$lI5k*_2e*~Meq0{_uyn}rICyNjxrO&#U}tc z-lG0>^L7Q+75NzDTf(e$PAPs9{r|yh|DTQxRvf#TPGPM76PDWpFko2W-98~0sNitzrCRj!;P;^&%O`fy_5M|G zDz&`aiSH8kVs4LH_lfX%^0~M9GoudQX~W8&fgJvu;f=HQ_7Jt3fdSrXjz)Q(=y-qnNbU5)kJ#UZJJH2EZO;%+gZI>7Yx*s=z-9{5W z*8>B)$+Fe3$M-zBtwr)vscqGtbr=dUE)-g^?G3lx>^dL6z6|62xY6E@vpct2e?LXiO=)>}qMCZ2 zz|)xIS~=+Av=f1c|E520`uJVqe9p9 zG0nLM>3XI2Wu%_>S?htZrW)|JFBnPh{b_MgaBUYn(fy{7q+zeGzoQW-!{37@Q{NBO z&vhO}y6n!Mmow|90!gQV8#|V#?GH!CBaipK_w8;%vfX$-X$Lur`fGG}0yX-(c1SVQ z?^D6B*)37G&~ML*X6xR0F{arY`M6GV@Hx+?+RSY*uNkU-=Z!_`zZch)!#HP}^Q*hx zJZBQOp#J()jV6e+{bur{UXN*;_#+K9wXfk~7VX>lqU}KU&Th0e>THUD`&)GDHCj)_ z$;^IlPNxTZg3Bboq|T>Q;4ag!hq1NAHYG>;&jq`~`4}L{?ZMP|$K&-A8}V&kPUjcm zRk4*-e#9&Bipkge4IzGhWR$WloY%1+8XCd0vmM*+ z1JbXF-QGU?Iun52Am7_}%aYh4r@TZ@1v&4Uj)%c+{!5R2x<)i_?zg*_rFZ9=5#X`9 z)5QznInCFu*GFqLueYt>-B~N4VcoEeWk5No+uL#5R5|CT9ef|Jr|K zA`ZkS`F{Zc|3{4Yj|;qeRAEG-;QxL=*H`g*LwGP-wXfxBKTVt$qXV<8{S;S7AuEzTjgEdrS%F=A@ zoK{U%vq;e7_ti7>dA5Z^R0YM`_NCob|B|kphYD)0=oVS6wV~+KZ%j^voNHyXE3ea(n8N5gi%ShI273l9b1E}xp(~w+5(rM zQF6<5Y@?;f3#BH;3~K6U92eRo*b$8aUq_O6`qI#vA(!Yz&;wZ-JKiH&U=eOwO^?wn zTn`a@o|AtV=0PpxEg?7UH#-i&=ukU>BO@b|L_{DCdxZ(J_>nJk9dH}%nx~Ch>mNYG zN0EgZaN6fQ-STR`KqmRn3iCs_DzQIzou*(kdqfr9Kf&Xurqb5l%-u4(E zJ3;ltJ@U)SyOcC(?TDLT`h)Jv`^(TDzm~^K9L~h@XiZ`q4j7YfF3(=++YLC5^QU9k zP{;QXeLBG>r)TK(6Iox#mj1l45<2qrz-r3y)H~hECt&dnb8p(&ktY6`>47%6!2GZ~ z&Unl_o*;IRMTvDrP}p%d^D-#c9pT(uDdduM;-e%cqFuna37svR+u4POiaRhF8840T zG%!FA95X|~05`3pV{a9j-pVcsZ?*}8ALZK>)|4;7MK+-R1@vR?NQyfLVntdRTLY;J zrd1sB{d?(WNk<+FGaEi4i<8qLqU2qbGf+CRrgTpGe!yKlcpeW*(Ayu;E5DKD z5Y_&U7@1CSH^@YxGM&{w)sBu18EN^Q9Z6;rCaM(BKB!u={A2;PlUgHA*9achxAk@G zrSh^x48=83hDgV>>D-|!VbVg{V_x$wt9|yK2?C8X1oa=BWG_Al@-fRA2H;Yqa-;&X z=`!O5ZAH}zW4-jASJ8&v$7mQLl?ZI-4GbkEq9o2f&NjW@G@eMn)P0t*<#1MoVTJrB zh>?#P2lxN~FuVUi?f;$|TH{{fJm-~hJPS%Y7B-eySP7aa3KG|Sb))5# zl20gZ5tD&oCI1&`YKy0#Jpy;ukeu>X@s(Q1bFWZf#RPj*r!JIaRaCB(puDp^C|C!L z){K{Ev*m)lGdkc2QMqQL5)L?WCiY6A$%{x`5#dur$D#f~YT3L3Ofl{jgN~uaC4_8o zbN;1^hh>2Qo!|w=PaTL~JwgSsa|@Q2qw*aMpxZvPf6#X`IaHzW1HwqP+CZ zIeE!KnZ9p=C)k>89%=0yf%pXfKp}3{&@|kH+wQXTHm?5to)=5dkJ7<1H0f!%r!Yk; zx*nRwYf~n@*B+%En%r6{y$>^ZnbGt+0?2#cxP@deI0OPm13Ei7_zzHz)L7 z{K?dWS*H3QlOq_x#fT^oq2Y9T?5N4ZJ_t)npkwKOm89xVyx5YdE2u!v01t5KiU1A(FtS%A{l!)Qog`t<)ERC3 zHAKm|CMleZ)IFH!S*LSx2|ps<{}&cTe_c&pu~hG}!`$3S&~n(u$Q_R|<5=p)AB>*PaQfk3eM{~`h#TQ3QClXy;ko&o#3e!mzwTh)r2kw7V%n-6s zveNqeXK;{>6qkfjrlfSC&@>b!=>4sx@NjAX_1UGLM7c*-uerLdO0n6ws5|Tmls4RfJBZCL-4MBQ zG{PHbTb9V*u!E#n>;k;j!Pu>6S^rL zV}?yHkl>QDDdbu47hvvc7;Q4%U+$XP32z9S%Gk`pKr^^z^ zn~$JB1uC9aEt}*t?dmO0hq_w@v&%0-RX4VU(+b%N!Va1_Os`>ex!;#N4t{i?BGi2z zKPbJCzTSt@x>s#kqBqie7;~77^?%k!dBI{8~py7@m%>D#zvS!=RFxt zc0Bk!CW5RT?LQ$n>bO*><(Ux<8DHbU_q6^i_>2fWeO7 zt=~U@I~137gZ#lsHTJGw{*5&TPNfVCIWXC(zW3QrBPBURk5x~XG~QoP*W6!@#t{Y* z>l`hjd&6&`@pd%chClx!{c$7@taoU@zuYLMl$a+<_7)6IAhNI^kWSF(SXso;lpdoW zhh|`m3!%z2xpfIvpWTH<8;M^iwr%6#X>5KxG1mG%r-aI}Y%Cga%kd~holiN`mZ>#8 zkMZjtu^u5tg!6;xTt$3Y4QsX9B&{U{ndGNWvw0+9{8`#~lz)@=U!DsiV@p$PMe0%AX17Rm))=WxKr4?5Df{pj~vNT(r^2je^XVrm|{}EyT zLw;}#U0hsf!iYH2MqGAXuyAlRP?ZOhE$El?2mUQ~WI_|;h}`5BP=tM8$tjqP->fGs z$oYpWub&8G7_&swHZU^m#a!jT*SszW!}Vb_1T=@6C=iZ>c>Cp`Mv1A|rp+@{lH%r~ z)4o9vD8Z9b5|Ci?#^g>Yz=>!8APkpy{uyTL*G|l%&Rzz zwIS3y9QPvjtHvdm^}0HmNHb;unq#}5l?^@#I8kGpigH`MJ8X^f(hR)|ciRq$Iu%lM z>$xwcVz%%tWU>V3&TUWB!>ux`r&T8C#S1`Mt+ZPaG^S#vmEd;P1!RFl0Kv!hv~XlHKn$MJ!)7D zT8>vSpN5-yS8u1@PNs5kn1-O`k4oocofq>S6OAJj%;P(Fsnhrqpis}4UeDH5lIcGIB2iKP_>JTn1*4nmKRVAS3!YYP|n|h zIJuiUm~42teoFAU0t5WNIGLXRm5}~#q2#}l;vo|OLE_|6RDa21KlSnw8DOs`m5(IS zg}ZUq&OBA90Xr~_=wIRy1r-w*Qhg{CI7MejFX~Z-J}~_+UHgX!C?u7{)uK|nm4i*i zt)}{w5I}z%SOae9M?py7nG?@=bb++vh;WB{R62I6N@?Q_b~|*rypxEI4VZ3E9-9^n z1bGxH4$!%NgS%1Sfr$MikI}M>qvdK}x=?JR3@$GGEG8=QTrs8{{0ZuE$6axZ2;?vGzhLBP zIf|XBjc4ZP_X?m@I7yI#+%VnLwvB&$O(Bj+kHUxi`>q<9t=E;)-}VJL3x!0@nT-hJEG}n$aHQCE z;6?oEu7TvpP$VB)AK9;z!35tMw}T|)e%R%m5J)c8P210W3(8onWZ{wDG} zw89#uggUD>=JlUG)-e@@C1m8POmRqk6&RsEAUq}7x zVW){DDe3PuwyuBOtrNw=kiMqokGbpF@{nASWjSVC6*C^3*Iv`Hc+$nCVf`^n&-=@t z*PbsWz`R+StyAfGf#s)fUVqoT;mNujG*Q!TqW2k|qhilqOj8nBa>X}IxKMcZO5K&G z)2fPz9`!A4bAf9)8-WS>5H`P~G7No`2WM)12sO+qNf0Ee2hl=gp+Y?s;H{98N zd-LT_?$4v|obN3^e(#^o-U4gEoR6meG>q!4C9^W${pCG9M^4rt;l{UwSJ@$zg>QDO z*EXxS{s!EMx&7dD1&=K=buTV@CHpl(WX|N2qmL)}U;jKmP5NF=lk24PH!Gce@2Q`g z#CkJ^M`D}dj0=ImClgL9X84^nef8L0R=v*k)|vOt!rtqm_V(VHo06fv@GNj9?Lvsx z&L3YNUg}$Q{`rZQ#`ak?QavXFw6)iLv`$}le@APtR@++sZq1(+{~KN}D1WxMpDS%+ z!Yi?@iymGI_ANMe+Hb94!i~NSZMzpOe%3z4#ebfsM(u1a<~FXjMen*m5%TcR2k*u4 ze}9>;+qZMWltE7Tr>Vv?-V$`+BlZROktgDmG#DB?cus7OU>;gXYN;Z zlE~zrvw!Qv?~;1#{1#Dq4tCs{l^>^Z>}TZ!22tCGOWON?o$a0N8astm*y`1n19b~? zUra73+&)Kc&1pWZtktij|M%E_V>$j!rg~-l{N}S+(rWyrX}kF?-kO%A1V#S^&P)}{ zZv9=g{D-xF@?1Z&7a6hlKV|g-6bEF%BQR! z_h!TOVtKp!dNvhRlPs5u)vr7J5x5Pqes*P!SKZF*srj<1e3qiO(({-5`F*P2dVlTa z=Y6s{ruWiTPn>jqtEJrThJ9U$!3SIVW_gue<#sLq8~!`SN&2fy9^?NU`JXM8S${9z zat@rkTDcif>iMq^244rx zB|oDd9{;gZ^I@a>Wi|s<{g}(=@^eiK1b?se5RaU`_*A!M;gYk88}59cZ}w6X!toMP3H8FU)`njxgN@xNASm8?D From caa0be68a44ac52b193f127d97cd1e3fe1640a2f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 13 Nov 2018 16:28:36 -0800 Subject: [PATCH 08/37] added info about dlp --- .../control-usb-devices-using-intune.md | 17 ++++++++++------- 1 file changed, 10 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index 673619d598..a9f85103db 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -16,17 +16,20 @@ ms.date: 11/12/2018 **Applies to:** [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://wincom.blob.core.windows.net/documents/Windows10_Commercial_Comparison.pdf) -You can configure Intune settings to reduce threats from removable storage such as USB devices, including these options: +You can configure Intune settings to reduce threats from removable storage such as USB devices, including: -- [Completely block the use of removable storage or USB](#completely-block-removable-storage-or-usb-connections) -- [Allow removable storage or USB connections but block unsigned or untrusted processes from running](#allow-removable-storage-or-usb-connections-but-block-unsigned-or-untrusted-processes-from-running) +- [Block unwanted removeable storage](#block-unwanted-removable-storage) +- [Protect allowed removable storage](#protect-allowed-removable-storage) -You can also [run a PowerShell script to perform a custom scan](https://aka.ms/scanusb) of a USB drive after it is mounted. +Protecting allowed removeable storage requires enabling real-time protection. +We recommend enabling real-time protection for improved scanning performance, especialy for large storage devices. +If real-time protection is enabled, files are scanned before they are accessed and executed. The scanning scope includes all files, including those on mounted removable devices such as USB drives. +You can optionally [run a PowerShell script to perform a custom scan](https://aka.ms/scanusb) of a USB drive after it is mounted. > [!NOTE] -> For more comprehensive data loss prevention for Windows 10 devices, you can configure [BitLocker](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) and [Windows Information Protection](https://docs.microsoft.com/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure), which will encrypt company data even if it is stored on a personal device. +> These threat reduction measures help prevent malware from coming into your environment. You can also configure data loss prevention measures to to protect enterprise data from leaving your environment. For data loss prevention on Windows 10 devices, you can configure [BitLocker](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) and [Windows Information Protection](https://docs.microsoft.com/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure), which will encrypt company data even if it is stored on a personal device. -## Completely block removable storage or USB connections +## Block unwanted removeable storage 1. Sign in to the [Microsoft Azure portal](https://portal.azure.com/). 2. Click **Intune** > **Device configuration** > **Profiles** > **Create profile**. @@ -52,7 +55,7 @@ You can also [run a PowerShell script to perform a custom scan](https://aka.ms/s 7. Click **Create** to save the profile. -## Allow removable storage or USB connections but block unsigned or untrusted processes from running +## Protect allowed removable storage 1. Sign in to the [Microsoft Azure portal](https://portal.azure.com/). 2. Click **Intune** > **Device configuration** > **Profiles** > **Create profile**. From 10e7f04b7a8db0159621b50d60469828f299be73 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 13 Nov 2018 16:31:31 -0800 Subject: [PATCH 09/37] added link to rtp --- .../device-control/control-usb-devices-using-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index a9f85103db..dc44233f02 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -21,7 +21,7 @@ You can configure Intune settings to reduce threats from removable storage such - [Block unwanted removeable storage](#block-unwanted-removable-storage) - [Protect allowed removable storage](#protect-allowed-removable-storage) -Protecting allowed removeable storage requires enabling real-time protection. +Protecting allowed removeable storage requires [enabling real-time protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus). We recommend enabling real-time protection for improved scanning performance, especialy for large storage devices. If real-time protection is enabled, files are scanned before they are accessed and executed. The scanning scope includes all files, including those on mounted removable devices such as USB drives. You can optionally [run a PowerShell script to perform a custom scan](https://aka.ms/scanusb) of a USB drive after it is mounted. From a9a831b9dedd4f6e7bb6c87d1cc7c7c6f4454e2a Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 13 Nov 2018 16:42:57 -0800 Subject: [PATCH 10/37] added link to csp docs --- .../device-control/control-usb-devices-using-intune.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index dc44233f02..c46d27571f 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -27,7 +27,7 @@ If real-time protection is enabled, files are scanned before they are accessed a You can optionally [run a PowerShell script to perform a custom scan](https://aka.ms/scanusb) of a USB drive after it is mounted. > [!NOTE] -> These threat reduction measures help prevent malware from coming into your environment. You can also configure data loss prevention measures to to protect enterprise data from leaving your environment. For data loss prevention on Windows 10 devices, you can configure [BitLocker](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) and [Windows Information Protection](https://docs.microsoft.com/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure), which will encrypt company data even if it is stored on a personal device. +> These threat reduction measures help prevent malware from coming into your environment. To protect enterprise data from leaving your environment, you can also configure data loss prevention measures. For data loss prevention on Windows 10 devices, you can configure [BitLocker](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) and [Windows Information Protection](https://docs.microsoft.com/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure), which will encrypt company data even if it is stored on a personal device. ## Block unwanted removeable storage @@ -55,8 +55,12 @@ You can optionally [run a PowerShell script to perform a custom scan](https://ak 7. Click **Create** to save the profile. +Alternatively, you can create a custom profile in Intune and configure [DeviceInstallation](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deviceinstallation) policies. + ## Protect allowed removable storage +These settings require [enabling real-time protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus). + 1. Sign in to the [Microsoft Azure portal](https://portal.azure.com/). 2. Click **Intune** > **Device configuration** > **Profiles** > **Create profile**. From 62952b92031345f17ea757a00392ce70601ca97f Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 13 Nov 2018 17:26:14 -0800 Subject: [PATCH 11/37] add azure ip address range --- .../threat-protection/windows-defender-atp/TOC.md | 2 +- ...-windows-defender-advanced-threat-protection.md | 14 ++++++++++++++ 2 files changed, 15 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index f05f3f551f..b57148d27e 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -181,7 +181,7 @@ ##### [Network firewall](../windows-firewall/evaluating-windows-firewall-with-advanced-security-design-examples.md) #### [Evaluate next generation protection](../windows-defender-antivirus/evaluate-windows-defender-antivirus.md) -### [Access the Windows Security app](community-windows-defender-advanced-threat-protection.md) +### [Access the Windows Defender Security Center Community Center](community-windows-defender-advanced-threat-protection.md) ## [Configure and manage capabilities](onboard.md) ### [Configure attack surface reduction](configure-attack-surface-reduction.md) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-proxy-internet-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/configure-proxy-internet-windows-defender-advanced-threat-protection.md index c7d9e056c4..28076a7e43 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-proxy-internet-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-proxy-internet-windows-defender-advanced-threat-protection.md @@ -98,8 +98,22 @@ United Kingdom | ```uk.vortex-win.data.microsoft.com```
```uk-v20.events.dat United States | ```us.vortex-win.data.microsoft.com```
```us-v20.events.data.microsoft.com```
```winatp-gw-cus.microsoft.com```
```winatp-gw-eus.microsoft.com``` + If a proxy or firewall is blocking anonymous traffic, as Windows Defender ATP sensor is connecting from system context, make sure anonymous traffic is permitted in the above listed URLs. +### IP range +You'll need to whitelist the following Azure IP addresses/ranges published on [Microsoft Azure Datacenter IP Ranges](https://www.microsoft.com/en-us/download/details.aspx?id=41653). + +The Windows Defender ATP service is deployed in the following regions: +- \+\ +- \+\ +- \+\ +- \+\ +- \+\ +- \+\ +- \+\ + + ## Verify client connectivity to Windows Defender ATP service URLs From c987c6d158ae89c1e94674b48c17e8447d7c3939 Mon Sep 17 00:00:00 2001 From: Kaushik Ainapure Date: Wed, 14 Nov 2018 15:57:20 +0530 Subject: [PATCH 12/37] Updating scenarios Updates to the scenarios and content associated. --- .../windows-10-support-solutions.md | 64 +++++++++++-------- 1 file changed, 37 insertions(+), 27 deletions(-) diff --git a/windows/client-management/windows-10-support-solutions.md b/windows/client-management/windows-10-support-solutions.md index c212eae7d8..d540b098dd 100644 --- a/windows/client-management/windows-10-support-solutions.md +++ b/windows/client-management/windows-10-support-solutions.md @@ -7,45 +7,54 @@ ms.sitesec: library ms.author: elizapo author: kaushika-msft ms.localizationpriority: medium -ms.date: 11/08/2017 +ms.date: 11/08/2018 --- # Top support solutions for Windows 10 Microsoft regularly releases both updates and solutions for Windows 10. To ensure your computers can receive future updates, including security updates, it's important to keep them updated. Check out the following links for a complete list of released updates: -- [Windows 10 Version 1703 update history](https://support.microsoft.com/help/4018124/) -- [Windows 10 Version 1607 update history](https://support.microsoft.com/help/4000825/) -- [Windows 10 Version 1511 update history](https://support.microsoft.com/help/4000824/) +- [Windows 10 version 1803 update history](https://support.microsoft.com/help/4099479) +- [Windows 10 version 1709 update history](https://support.microsoft.com/help/4043454) +- [Windows 10 Version 1703 update history](https://support.microsoft.com/help/4018124) +- [Windows 10 Version 1607 update history](https://support.microsoft.com/help/4000825) +- [Windows 10 Version 1511 update history](https://support.microsoft.com/help/4000824) These are the top Microsoft Support solutions for the most common issues experienced when using Windows 10 in an enterprise or IT pro environment. The links below include links to KB articles, updates, and library articles. -## Solutions related to installing Windows updates or hotfixes -- [Understanding the Windowsupdate.log file for advanced users](https://support.microsoft.com/help/4035760/understanding-the-windowsupdate-log-file-for-advanced-users) -- [You can't install updates on a Windows-based computer](https://support.microsoft.com/help/2509997/you-can-t-install-updates-on-a-windows-based-computer) -- [Get-WindowsUpdateLog](https://technet.microsoft.com/itpro/powershell/windows/windowsupdate/get-windowsupdatelog) -- [How to read the Windowsupdate.log file](https://support.microsoft.com/help/902093/how-to-read-the-windowsupdate-log-file) -- [Can't download updates from Windows Update from behind a firewall or proxy server](https://support.microsoft.com/help/3084568/can-t-download-updates-from-windows-update-from-behind-a-firewall-or-p) -- [Computer staged from a SysPrepped image doesn't receive WSUS updates](https://support.microsoft.com/help/4010909/computer-staged-from-a-sysprepped-image-doesn-t-receive-wsus-updates) -- [Servicing stack update for Windows 10 Version 1703: June 13, 2017](https://support.microsoft.com/help/4022405/servicingstackupdateforwindows10version1703june13-2017) -- [Servicing stack update for Windows 10 Version 1607 and Windows Server 2016: March 14, 2017](https://support.microsoft.com/help/4013418/servicing-stack-update-for-windows-10-version-1607-and-windows-server) +## Solutions related to installing Windows Updates +- [How does Windows Update work](https://docs.microsoft.com/en-us/windows/deployment/update/how-windows-update-works) +- [Windows Update log files](https://docs.microsoft.com/en-us/windows/deployment/update/windows-update-logs) +- [Windows Update troubleshooting](https://docs.microsoft.com/en-us/windows/deployment/update/windows-update-troubleshooting) +- [Windows Update common errors and mitigation](https://docs.microsoft.com/en-us/windows/deployment/update/windows-update-errors) +- [Windows Update - additional resources](https://docs.microsoft.com/en-us/windows/deployment/update/windows-update-resources) + +## Solutions related to installing or upgrading Windows + +- [Quick Fixes](https://docs.microsoft.com/en-us/windows/deployment/upgrade/quick-fixes) +- [Troubleshooting upgrade errors](https://docs.microsoft.com/en-us/windows/deployment/upgrade/troubleshoot-upgrade-errors) +- [Resolution procedures](https://docs.microsoft.com/en-us/windows/deployment/upgrade/resolution-procedures) +- ["0xc1800118" error when you push Windows 10 Version 1607 by using WSUS](https://support.microsoft.com/en-in/help/3194588/0xc1800118-error-when-you-push-windows-10-version-1607-by-using-wsus) +- [0xC1900101 error when Windows 10 upgrade fails after the second system restart](https://support.microsoft.com/en-in/help/3208485/0xc1900101-error-when-windows-10-upgrade-fails-after-the-second-system) + +## Solutions related to BitLocker + +- [BitLocker recovery guide](https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan) +- [BitLocker: How to enable Network Unlock](https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock) +- [BitLocker: Use BitLocker Drive Encryption Tools to manage BitLocker](https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker) +- [BitLocker Group Policy settings](https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings) ## Solutions related to Bugchecks or Stop Errors - [Troubleshooting Stop error problems for IT Pros](https://support.microsoft.com/help/3106831/troubleshooting-stop-error-problems-for-it-pros) - [How to use Windows Recovery Environment (WinRE) to troubleshoot common startup issues](https://support.microsoft.com/help/4026030/how-to-use-windows-recovery-environment-winre-to-troubleshoot-common-s) - [How to troubleshoot Windows-based computer freeze issues](https://support.microsoft.com/help/3118553/how-to-troubleshoot-windows-based-computer-freeze-issues) -- [Understanding Bugchecks](https://blogs.technet.microsoft.com/askperf/2007/12/18/understanding-bugchecks/) -- [Understanding Crash Dump Files](https://blogs.technet.microsoft.com/askperf/2008/01/08/understanding-crash-dump-files/) +- [Introduction of page file in Long-Term Servicing Channel and Semi-Annual Channel of Windows](https://support.microsoft.com/help/4133658) + + +## Solutions related to Windows Boot issues +- [Troubleshooting Windows boot problems for IT Pros](https://support.microsoft.com/help/4343769) +- [How to use Windows Recovery Environment (WinRE) to troubleshoot common startup issues](https://support.microsoft.com/help/4026030/how-to-use-windows-recovery-environment-winre-to-troubleshoot-common-s) -## Solutions related to installing or upgrading Windows -- [Resolve Windows 10 upgrade errors : Technical information for IT Pros](/windows/deployment/upgrade/resolve-windows-10-upgrade-errors) -- [Windows OOBE fails when you start a new Windows-based computer for the first time](https://support.microsoft.com/help/4020048/windows-oobe-fails-when-you-start-a-new-windows-based-computer-for-the) -- ["0xc1800118" error when you push Windows 10 Version 1607 by using WSUS](https://support.microsoft.com/help/3194588/-0xc1800118-error-when-you-push-windows-10-version-1607-by-using-wsus) -- [0xC1900101 error when Windows 10 upgrade fails after the second system restart](https://support.microsoft.com/help/3208485/0xc1900101-error-when-windows-10-upgrade-fails-after-the-second-system) -- [Updates fix in-place upgrade to Windows 10 version 1607 problem](https://support.microsoft.com/help/4020149/updates-fix-in-place-upgrade-to-windows-10-version-1607-problem) -- [OOBE update for Windows 10 Version 1703: May 9, 2017](https://support.microsoft.com/help/4020008) -- [OOBE update for Windows 10 Version 1607: May 30, 2017](https://support.microsoft.com/help/4022632) -- [OOBE update for Windows 10 Version 1511: May 30, 2017](https://support.microsoft.com/help/4022633) ## Solutions related to configuring or managing the Start menu - [Manage Windows 10 Start and taskbar layout](/windows/configuration/windows-10-start-layout-options-and-policies) @@ -57,7 +66,8 @@ These are the top Microsoft Support solutions for the most common issues experie - [Modern apps are blocked by security software when you start the applications on Windows 10 Version 1607](https://support.microsoft.com/help/4016973/modern-apps-are-blocked-by-security-software-when-you-start-the-applic) ## Solutions related to wireless networking and 802.1X authentication - +- [Advanced Troubleshooting Wireless Network](Connectivity]https://docs.microsoft.com/en-us/windows/client-management/advanced-troubleshooting-wireless-network-connectivity) +- [Advanced Troubleshooting 802.1x Authentication](https://docs.microsoft.com/en-us/windows/client-management/advanced-troubleshooting-802-authentication) +- [Troubleshooting Windows 802.11 Wireless Connections](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-vista/cc766215(v=ws.10)) +- [Troubleshooting Windows Secure 802.3 Wired Connections](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-vista/cc749352(v%3dws.10)) - [Windows 10 devices can't connect to an 802.1X environment](https://support.microsoft.com/kb/3121002) -- [Windows 10 wireless connection displays "Limited" status](https://support.microsoft.com/kb/3114149) -- [Computer that has VPN software installed can't detect wireless network after upgrading to Windows 10](https://support.microsoft.com/kb/3084164) From 1d68112812fdfecb3b58153683020a120c7bb148 Mon Sep 17 00:00:00 2001 From: Kaushik Ainapure Date: Wed, 14 Nov 2018 16:14:41 +0530 Subject: [PATCH 13/37] Create new troubleshooting article on boot issues Create a new article on troubleshooting boot problems on Windows --- .../advanced-troubleshooting-boot-problems | 393 ++++++++++++++++++ 1 file changed, 393 insertions(+) create mode 100644 windows/client-management/advanced-troubleshooting-boot-problems diff --git a/windows/client-management/advanced-troubleshooting-boot-problems b/windows/client-management/advanced-troubleshooting-boot-problems new file mode 100644 index 0000000000..d22f66c515 --- /dev/null +++ b/windows/client-management/advanced-troubleshooting-boot-problems @@ -0,0 +1,393 @@ +--- +title: Advanced Troubleshooting Windows boot problems +description: Learn how troubleshooting unable to boot Windows +ms.prod: w10 +ms.mktglfcycl: +ms.sitesec: library +author: kaushika-msft +ms.localizationpriority: medium +ms.author: elizapo +ms.date: +--- + +## Advanced Troubleshooting Windows boot problems + +!>**Notice to home users** +>This article is intended for use by support agents and IT professionals. If +you're looking for more general information about recovery options, see [Recovery options in Windows 10](https://internal.support.services.microsoft.com/en-us/help/12415). + +### Summary + +There are several reasons why a Windows-based computer may hang during startup. To troubleshoot boot problems, first determine in which of the following phases the computer gets stuck: + +| **No** | **Boot Process** | **BIOS** | **UEFI** | +|--------|----------------------|-----------------------------------------------------------------------------| +| 1 | PreBoot | MBR/PBR (Bootstrap Code) | UEFI Firmware | +| 2 | Windows Boot Manager | %SystemDrive%\bootmgr | \EFI\Microsoft\Boot\bootmgfw.efi | +| 3 | Windows OS Loader | %SystemRoot%\system32\winload.exe | %SystemRoot%\system32\winload.efi | +| 4 | Windows NT OS Kernel | %SystemRoot%\system32\ntoskrnl.exe | + + +**1. PreBoot** + +The PC’s firmware initiates a Power-On Self Test (POST) and loads firmware settings. This pre-boot process ends when a valid system disk is detected. Firmware reads the master boot record (MBR), and then starts Windows Boot +Manager. + +**2. Windows Boot Manager** + +Windows Boot Manager finds and starts the Windows loader (Winload.exe) on the Windows boot partition. + +**3. Windows operating system loader** + +Essential drivers required to start the Windows kernel are loaded and the kernel starts to run. + +**4. Windows NT OS Kernel** + +The kernel load into memory the system registry hive and additional drivers that are marked as BOOT_START. + +The kernel passes control to the session manager process (Smss.exe) which initializes the system session, and loads and starts the devices and drivers that are not marked BOOT_START. + +Here is a summary of Boot Sequence vs Display and Typical NoBoot. Before starting troubleshooting, you have to understand the outline of boot process and display status to ensure that the issue is properly identified at the beginning of the engagement. + +![](media/6ed145ee3760b545fcbe277ea7d5c88d.png) + + +Each phase has a different approach to troubleshooting. This article provides troubleshooting techniques for problems that occur during the first three phases. + +**Note**If the computer repeatedly boots to the recovery options, run the following command at a command prompt to break the cycle: + +```dos +Bcdedit /set {default} recoveryenabled no +``` + +If the F8 options don't work, run the following command: + +```dos +Bcdedit /set {default} bootmenupolicy legacy +``` + +#### BIOS phase + +To determine whether the system has passed the BIOS phase, follow these steps: + +1. If there are any external peripherals connected to the computer, disconnect them. +2. Check whether the hard disk drive light on the physical computer is working. If it is not working, this indicates that the startup process is stuck at the BIOS phase. +3. Press the NumLock key to see whether the indicator light toggles on and off. If it does not, this indicates that the startup process is stuck at BIOS. + +If the system is stuck at the BIOS phase, there may be a hardware problem. + +#### Boot loader phase + +If the screen is completely black except for a blinking cursor, or if you receive one of the following error codes, this indicates that the boot process is stuck in the Boot Loader phase: + +- Boot Configuration Data (BCD) missing or corrupted +- Boot file or MBR corrupted +- Operating system Missing +- Boot sector missing or corrupted +- Bootmgr missing or corrupted +- Unable to boot due to system hive missing or corrupted + +To troubleshoot this problem, use Windows installation media to start the computer, press Shift+F10 for a command prompt, and then use any of the following methods. + + +##### Method 1: Startup Repair tool + +The Startup Repair tool automatically fixes many common problems. The tool also lets you quickly diagnose and repair more complex startup problems. When the computer detects a startup problem, the computer starts the Startup Repair tool. When the tool starts, it performs diagnostics. These diagnostics include analyzing startup log files to determine the cause of the problem. When the Startup Repair tool determines the cause, the tool tries to fix the problem automatically. + +To do this, follow these steps. + +**Note** For additional methods to start WinRE, see [Entry points into +WinRE](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-recovery-environment--windows-re--technical-reference#span-identrypointsintowinrespanspan-identrypointsintowinrespanspan-identrypointsintowinrespanentry-points-into-winre). + +1. Start the system to the installation media for the installed version of Windows. + **Note** For more information, see [Create installation media for Windows](https://support.microsoft.com/help/15088). + +2. On the **Install Windows** screen, select **Next** > **Repair your computer**. + +3. On the **System Recovery Options** screen, select **Next** > **Command Prompt**. + +4. After Startup Repair, select Shutdown, then turn on your PC to see if OS can boot properly. + +The Startup Repair tool generates a log file to help you understand the startup problems and the repairs that were made. You can find the log file in the following location: + +> %windir%\System32\LogFiles\Srt\Srttrail.txt + + +For more information see, [A Stop error occurs, or the computer stops responding when you try to start +Windows Vista or Windows 7 +](https://support.microsoft.com/en-us/help/925810/a-stop-error-occurs-or-the-computer-stops-responding-when-you-try-to-s) + + +##### Method 2: Repair Boot Codes + +To repair boot codes, run the following command: + +```dos +BOOTREC /FIXMBR +``` + +To repair the boot sector, run the following command: + +```dos +BOOTREC /FIXBOOT +``` + +**Note** Running **BOOTREC** together with **Fixmbr** overwrites only the master boot code. If the corruption in the MBR affects the partition table, running **Fixmbr** may not fix the problem. + +##### Method 3: Fix BCD errors + +If you receive BCD-related errors, follow these steps: + +1. Scan for all the systems that are installed. To do this, run the following command: + ```dos + Bootrec /ScanOS + ``` + +2. Restart the computer to check whether the problem is fixed. + +3. If the problem is not fixed, run the following command: + ```dos + Bootrec /rebuildbcd + ``` + +4. You might receive one of the following outputs: + +> Scanning all disks for Windows installations. Please wait, since this may take a while...Successfully scanned Windows installations. Total identified Windows installations: 0 +The operation completed successfully. + +> Scanning all disks for Windows installations. Please wait, since this may take a while... Successfully scanned Windows installations. Total identified Windows installations: 1 +D:\Windows +Add installation to boot list? Yes/No/All: + +If the output shows **windows installation: 0**, run the following commands: + +```dos +bcdedit /export c:\bcdbackup + +attrib c:\\boot\\bcd -h -r –s + +ren c:\\boot\\bcd bcd.old + +bootrec /rebuildbcd +``` + +After you run the command, you receive the following output: + +> Scanning all disks for Windows installations. Please wait, since this may take a while...Successfully scanned Windows installations. Total identified Windows installations: 1{D}:\Windows +Add installation to boot list? Yes/No/All: Y + +5. Try again to start the system. + +##### Method 4: Replace Bootmgr + +If methods 1 and 2 do not fix the problem, replace the Bootmgr file from drive C to the System Reserved partition. To do this, follow these steps: + +1. At a command prompt, change the directory to the System Reserved partition. + +2. Run the **attrib** command to unhide the file: + ```dos + attrib-s -h -r + ``` + +3. Run the same **attrib** command on the Windows (system drive): + ```dos + attrib-s -h –r + ``` + +4. Rename the Bootmgr file as Bootmgr.old: + ```dos + ren c:\\bootmgr bootmgr.old + ``` + +5. Start a text editor, such as Notepad. + +6. Navigate to the system drive. + +7. Copy the Bootmgr file, and then paste it to the System Reserved partition. + +8. Restart the computer. + +##### Method 5: Restore System Hive +If Windows cannot load the system registry hive into memory, you must restore the system hive. To do this, use the Windows Recovery Environment or use Emergency Repair Disk (ERD) to copy the files from the +C:\Windows\System32\config\RegBack to C:\Windows\System32\config. +If the problem persists, you may want to restore the system state backup to an alternative location, and then retrieve the registry hives to be replaced. + + +#### Kernel Phase + +If the system gets stuck during the kernel phase, you experience multiple symptoms or receive multiple error messages. These include, but are not limited to, the following: + +- A Stop error appears after the splash screen (Windows Logo screen). + +- Specific error code is displayed. + For example, "0x00000C2" , "0x0000007B" , "inaccessible boot device" and so on. + (To troubleshoot the 0x0000007B error, see [Error code INACCESSIBLE_BOOT_DEVICE (STOP 0x7B)](https://internal.support.services.microsoft.com/en-us/help/4343769/troubleshooting-guide-for-windows-boot-problems#0x7bstoperror)) + +- The screen is stuck at the "spinning wheel" (rolling dots) "system busy" icon. + +- A black screen appears after the splash screen. + +To troubleshoot these problems, try the following recovery boot options one at a time. +Scenario 1: [Try to start the computer in Safe mode or Last Known Good Configuration]() + +On the **Advanced Boot Options** screen, try to start the computer in **Safe Mode** or **Safe Mode with Networking**. If either of these options works, use Event Viewer to help identify and diagnose the cause of the boot problem. To view events that are recorded in the event logs, follow these steps: + +1. Use one of the following methods to open Event Viewer: + + - Click **Start**, point to **Administrative Tools**, and then click + **Event Viewer**. + + - Start the Event Viewer snap-in in Microsoft Management Console (MMC). + +2. In the console tree, expand Event Viewer, and then click the log that you + want to view. For example, click **System log** or **Application log**. + +3. In the details pane, double-click the event that you want to view. + +4. On the **Edit** menu, click **Copy**, open a new document in the program in + which you want to paste the event (for example, Microsoft Word), and then + click **Paste**. + +5. Use the Up Arrow or Down Arrow key to view the description of the previous + or next event. + + +#### Clean boot + +To troubleshoot problems that affect services, do a clean boot by using System Configuration (msconfig). +Select **Selective startup** to test the services one at a time to determine which one is causing the problem. If you cannot find the cause, try including system services. However, in most cases, the problematic service is third-party. + +Disable any service that you find to be faulty, and try to start the computer again by selecting **Normal startup**. + +For detailed instructions, see [How to perform a clean boot in Windows](https://support.microsoft.com/en-us/help/929135/how-to-perform-a-clean-boot-in-windows). + +If the computer starts in Disable Driver Signature mode, start the computer in Disable Driver Signature Enforcement mode, and then follow the steps that are documented in the following article to determine which drivers or files require driver signature enforcement: +[Troubleshooting boot problem caused by missing driver signature +(x64)](https://blogs.technet.microsoft.com/askcore/2012/04/15/troubleshooting-boot-issues-due-to-missing-driver-signature-x64/) + +**Note** + +- If the computer is a domain controller, try Directory Services Restore mode (DSRM). + +- This method is an important step if you encounter Stop error "0xC00002E1" or "0xC00002E2" + + +**Examples** + +> Warning +> Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these +problems can be solved. Modify the registry at your own risk. + +*Error code INACCESSIBLE_BOOT_DEVICE (STOP 0x7B)* + +To troubleshoot this Stop error, follow these steps to filter the drivers: + +1. Go to Window Recovery Environment (WinRE) by putting an ISO disk of the system in the disk drive. The ISO should be of same version of Windows or a later version. + +2. Open the registry. + +3. Load the system hive, and name it as "test." + +4. Under the following registry subkey, check for lower filter and upper filter items for Non-Microsoft Drivers: + + **HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Class** + +5. For each third-party driver that you locate, click the upper or lower filter, and then delete the value data. + +6. Search through the whole registry for similar items. Process as an appropriate, and then unload the registry hive. + +7. Restart the server in Normal mode. + +For additional troubleshooting steps, see the following articles: + +- [Troubleshooting a Stop 0x7B in +Windows](https://blogs.technet.microsoft.com/askcore/2013/08/05/troubleshooting-a-stop-0x7b-in-windows/) + +- [Advanced troubleshooting for "Stop error code 0x0000007B (INACCESSIBLE_BOOT_DEVICE)" errors in Windows +XP](https://internal.support.services.microsoft.com/en-us/help/324103). + +To fix problems that occur after you install Windows updates, check for pending updates by using these steps: + +1. Open a Command Prompt winodw in WinRE. + +2. Run the command: + ```dos + dism /image:C:\ /get-packages + ``` + +3. If there are any pending updates, uninstall them by running the following commands: + ```dos + DISM /image:C:\ /remove-package /packagename: name of the package + ``` + ```dos + Dism /Image:C:\ /Cleanup-Image /RevertPendingActions + ``` + +Try to start the computer. + +If the computer does not start, follow these steps: + +1. Open A Command Prompt window in WinRE, and start a text editor, such as Notepad. + +2. Navigate to the system drive, and search for windows\winsxs\pending.xml. + +3. If the Pending.xml file is found, rename the file as Pending.xml.old. + +4. Open the registry, and then load the component hive in HKEY_LOCAL_MACHINE as a test. + +5. Highlight the loaded test hive, and then search for the **pendingxmlidentifier** value. + +6. If the **pendingxmlidentifier** value exists, delete the value. + +7. Unload the test hive. + +8. Load the system hive, name it as "test". + +9. Navigate to the following subkey: + + **HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\TrustedInstaller** + +10. Change the **Start** value from **1** to **4** + +11. Unload the hive. + +12. Try to start the computer. + +If the Stop error occurs late in the startup process, or if the Stop error is still being generated, you can capture a memory dump. A good memory dump can help determine the root cause of the Stop error. For details, see the following Knowledge Base article: + +- [969028](https://support.microsoft.com/help/969028) How to generate a kernel or a complete memory dump file in Windows Server 2008 and Windows Server 2008 R2 + +For more information about page file problems in Windows 10 or Windows Server 2016, see the following Knowledge Base article: + +- [4133658](https://support.microsoft.com/help/4133658) Introduction of page file in Long-Term Servicing Channel and Semi-Annual Channel of Windows + +For more information about Stop errors, see the following Knowledge Base article: + +- [3106831](https://support.microsoft.com/help/3106831) Troubleshooting Stop error problems for IT Pros + + +If the dump file shows an error that is related to a driver (for example, windows\system32\drivers\stcvsm.sys is missing or corrupted), follow these guidelines: + +- Check the functionality that is provided by the driver. If the driver is a third-party boot driver, make sure that you understand what it does. + +- If the driver is not important and has no dependencies, load the system hive, and then disable the driver. + +- If the stop error indicates system file corruption, run the system file checker in offline mode. + - To do this, open WinRE, open a command prompt, and then run the following command: + ```dos + SFC /Scannow /OffBootDir=C:\ /OffWinDir=E:\Windows + ``` + For more information, see [Using System File Checker (SFC) To Fix Issues](https://blogs.technet.microsoft.com/askcore/2007/12/18/using-system-file-checker-sfc-to-fix-issues/) + + - If there is disk corruption, run the check disk command: + ```dos + chkdsk /f /r + ``` + + - If the Stop error indicates general registry corruption, or if you believe that new drivers or services were installed, follow these steps: + + 1. Start WinRE, and open a Command Prompt window. + 2. Start a text editor, such as Notepad. + 3. Navigate to C\Windows\System32\Config\. + 4. Rename the all five hives by appending ".old" to the name. + 5. Copy all the hives from the Regback folder, paste them in the Config folder, and then try to start the computer in Normal mode. From e33c3a086b676ba4f97fed0ca0ef1aecdeef5052 Mon Sep 17 00:00:00 2001 From: Pete Cavanaugh <42617297+petcaMSFT@users.noreply.github.com> Date: Wed, 14 Nov 2018 09:49:27 -0500 Subject: [PATCH 14/37] Update deploy-enterprise-licenses.md In local AD joined scenarios with AAD connect, hybrid join is required. Added the word 'hybrid' in the two places where "domain joined with Azure AD Connect" was listed. --- windows/deployment/deploy-enterprise-licenses.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index a70b584daf..c1d98d727b 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -73,7 +73,7 @@ For more information about integrating on-premises AD DS domains with Azure AD, ## Preparing for deployment: reviewing requirements -Devices must be running Windows 10 Pro, version 1703, and be Azure Active Directory joined, or domain joined with Azure AD Connect. Customers who are federated with Azure Active Directory are also eligible. For more information, see [Review requirements on devices](#review-requirements-on-devices), later in this topic. +Devices must be running Windows 10 Pro, version 1703, and be Azure Active Directory joined, or hybrid domain joined with Azure AD Connect. Customers who are federated with Azure Active Directory are also eligible. For more information, see [Review requirements on devices](#review-requirements-on-devices), later in this topic. ## Assigning licenses to users @@ -225,7 +225,7 @@ Use the following figures to help you troubleshoot when users experience these c ### Review requirements on devices -Devices must be running Windows 10 Pro, version 1703, and be Azure Active Directory joined, or domain joined with Azure AD Connect. Customers who are federated with Azure Active Directory are also eligible. You can use the following procedures to review whether a particular device meets requirements. +Devices must be running Windows 10 Pro, version 1703, and be Azure Active Directory joined, or hybrid domain joined with Azure AD Connect. Customers who are federated with Azure Active Directory are also eligible. You can use the following procedures to review whether a particular device meets requirements. **To determine if a device is Azure Active Directory joined:** From db357f1983e4e3c8774496d241bd446747d39437 Mon Sep 17 00:00:00 2001 From: Kaushik Ainapure Date: Wed, 14 Nov 2018 23:54:25 +0530 Subject: [PATCH 15/37] Update to add a note Note added to the beginning of article informing customers that they need to install the relevant ADMX files. --- windows/deployment/update/waas-wufb-group-policy.md | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/waas-wufb-group-policy.md b/windows/deployment/update/waas-wufb-group-policy.md index 643e549073..49a13d74fc 100644 --- a/windows/deployment/update/waas-wufb-group-policy.md +++ b/windows/deployment/update/waas-wufb-group-policy.md @@ -28,9 +28,16 @@ Using Group Policy to manage Windows Update for Business is simple and familiar: In Windows 10 version 1511, only Current Branch for Business (CBB) upgrades could be delayed, restricting the Current Branch (CB) builds to a single deployment ring. Windows 10 version 1607, however, has a new Group Policy setting that allows you to delay feature updates for both CB and CBB, broadening the use of the CB servicing branch. ->[!NOTE] +>[!NOTES] >The terms *feature updates* and *quality updates* in Windows 10, version 1607, correspond to the terms *upgrades* and *updates* in version 1511. +>To follow the instructions in this article, you will need to download and install the relevant ADMX templates for your Windows 10 version. +>See the following articles for instructions on the ADMX templates in your environment. + +> - [How to create and manage the Central Store for Group Policy Administrative Templates in Windows](https://support.microsoft.com/help/3087759) +> - [Step-By-Step: Managing Windows 10 with Administrative templates](https://blogs.technet.microsoft.com/canitpro/2015/10/20/step-by-step-managing-windows-10-with-administrative-templates/) + + To use Group Policy to manage quality and feature updates in your environment, you must first create Active Directory security groups that align with your constructed deployment rings. Most customers have many deployment rings already in place in their environment, and these rings likely align with existing phased rollouts of current patches and operating system upgrades. ## Configure Windows Update for Business in Windows 10 version 1511 From ac693138cdb288672285de341c8cc2502e112d0f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 14 Nov 2018 11:51:36 -0800 Subject: [PATCH 16/37] added toc entries --- windows/security/threat-protection/TOC.md | 2 +- .../security/threat-protection/windows-defender-atp/TOC.md | 6 ++++++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index a3a3f1882f..6e515b97e8 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -188,7 +188,7 @@ ##### [Hardware-based isolation](windows-defender-application-guard/install-wd-app-guard.md) ###### [Configuration settings](windows-defender-application-guard/configure-wd-app-guard.md) ##### [Application control](windows-defender-application-control/windows-defender-application-control.md) -##### [Device control](device-control/device-control.md) +##### Device control ###### [Control USB devices](device-control/control-usb-devices-using-intune.md) ###### [Device Guard](device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) ####### [Memory integrity](windows-defender-exploit-guard/memory-integrity.md) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index f05f3f551f..576c8f6fda 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -6,6 +6,12 @@ ##### [Application isolation](../windows-defender-application-guard/wd-app-guard-overview.md) ##### [System isolation](how-hardware-based-containers-help-protect-windows.md) #### [Application control](../windows-defender-application-control/windows-defender-application-control.md) +#### Device control +##### [Control USB devices](../device-control/control-usb-devices-using-intune.md) +##### [Device Guard](../device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) +###### [Memory integrity](../windows-defender-exploit-guard/memory-integrity.md) +####### [Hardware qualifications](../windows-defender-exploit-guard/requirements-and-deployment-planning-guidelines-for-virtualization-based-protection-of-code-integrity.md) +####### [Enable HVCI](../windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md) #### [Exploit protection](../windows-defender-exploit-guard/exploit-protection-exploit-guard.md) #### [Network protection](../windows-defender-exploit-guard/network-protection-exploit-guard.md) #### [Controlled folder access](../windows-defender-exploit-guard/controlled-folders-exploit-guard.md) From 0ad60b0defdcc88b154f2c6654394d1b3b027089 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 14 Nov 2018 12:31:01 -0800 Subject: [PATCH 17/37] typo --- .../device-control/control-usb-devices-using-intune.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index c46d27571f..6629438e93 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -8,7 +8,7 @@ ms.pagetype: security ms.localizationpriority: medium ms.author: justinha author: justinha -ms.date: 11/12/2018 +ms.date: 11/15/2018 --- # How to control USB devices and other removable media using Intune @@ -22,7 +22,7 @@ You can configure Intune settings to reduce threats from removable storage such - [Protect allowed removable storage](#protect-allowed-removable-storage) Protecting allowed removeable storage requires [enabling real-time protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus). -We recommend enabling real-time protection for improved scanning performance, especialy for large storage devices. +We recommend enabling real-time protection for improved scanning performance, especially for large storage devices. If real-time protection is enabled, files are scanned before they are accessed and executed. The scanning scope includes all files, including those on mounted removable devices such as USB drives. You can optionally [run a PowerShell script to perform a custom scan](https://aka.ms/scanusb) of a USB drive after it is mounted. From 2505a8b1c11f6fb5213e91da909b2789504767b9 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 14 Nov 2018 12:34:40 -0800 Subject: [PATCH 18/37] edits --- windows/client-management/mdm/policy-csp-defender.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-defender.md b/windows/client-management/mdm/policy-csp-defender.md index 996f6c944d..deba84e597 100644 --- a/windows/client-management/mdm/policy-csp-defender.md +++ b/windows/client-management/mdm/policy-csp-defender.md @@ -1366,7 +1366,7 @@ ADMX Info: > [!NOTE] > This policy is only enforced in Windows 10 for desktop. The previous name was GuardedFoldersAllowedApplications and changed to ControlledFolderAccessAllowedApplications. -Added in Windows 10, version 1709. This policy setting allows user-specified applications to the guard my folders feature. Adding an allowed application means the guard my folders feature will allow the application to modify or delete content in certain folders such as My Documents. In most cases it will not be necessary to add entries. Windows Defender Antivirus will automatically detect and dynamically add applications that are friendly. Value type is string. Use the | as the substring separator. +Added in Windows 10, version 1709. This policy setting allows user-specified applications to the controlled folder access feature. Adding an allowed application means the controlled folder access feature will allow the application to modify or delete content in certain folders such as My Documents. In most cases it will not be necessary to add entries. Windows Defender Antivirus will automatically detect and dynamically add applications that are friendly. Value type is string. Use the | as the substring separator. @@ -1421,7 +1421,7 @@ ADMX Info: > [!NOTE] > This policy is only enforced in Windows 10 for desktop. The previous name was GuardedFoldersList and changed to ControlledFolderAccessProtectedFolders. -Added in Windows 10, version 1709. This policy settings allows adding user-specified folder locations to the guard my folders feature. These folders will complement the system defined folders such as My Documents and My Pictures. The list of system folders will be displayed in the user interface and can not be changed. Value type is string. Use the | as the substring separator. +Added in Windows 10, version 1709. This policy settings allows adding user-specified folder locations to the controlled folder access feature. These folders will complement the system defined folders such as My Documents and My Pictures. The list of system folders will be displayed in the user interface and can not be changed. Value type is string. Use the | as the substring separator. @@ -1679,7 +1679,7 @@ ADMX Info: > [!NOTE] > This policy is only enforced in Windows 10 for desktop. The previous name was EnableGuardMyFolders and changed to EnableControlledFolderAccess. -Added in Windows 10, version 1709. This policy enables setting the state (On/Off/Audit) for the guard my folders feature. The guard my folders feature removes modify and delete permissions from untrusted applications to certain folders such as My Documents. Value type is integer and the range is 0 - 2. +Added in Windows 10, version 1709. This policy enables setting the state (On/Off/Audit) for the controlled folder access feature. The controlled folder access feature removes modify and delete permissions from untrusted applications to certain folders such as My Documents. Value type is integer and the range is 0 - 2. From 746a59df5d8f4c39d8113648e7f070c6801f958f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 14 Nov 2018 12:35:07 -0800 Subject: [PATCH 19/37] date --- windows/client-management/mdm/policy-csp-defender.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-defender.md b/windows/client-management/mdm/policy-csp-defender.md index deba84e597..47f25fad53 100644 --- a/windows/client-management/mdm/policy-csp-defender.md +++ b/windows/client-management/mdm/policy-csp-defender.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: MariciaAlforque -ms.date: 08/08/2018 +ms.date: 11/14/2018 --- # Policy CSP - Defender From 7b09c561a974c2cda78f3fd5c3ebdd7b3830f87d Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 14 Nov 2018 13:10:50 -0800 Subject: [PATCH 20/37] update azure ip range --- ...-windows-defender-advanced-threat-protection.md | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-proxy-internet-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/configure-proxy-internet-windows-defender-advanced-threat-protection.md index 28076a7e43..2609656756 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-proxy-internet-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-proxy-internet-windows-defender-advanced-threat-protection.md @@ -11,7 +11,7 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: medium -ms.date: 09/12/2018 +ms.date: 11/14/2018 --- @@ -101,10 +101,11 @@ United States | ```us.vortex-win.data.microsoft.com```
```us-v20.events.data If a proxy or firewall is blocking anonymous traffic, as Windows Defender ATP sensor is connecting from system context, make sure anonymous traffic is permitted in the above listed URLs. -### IP range -You'll need to whitelist the following Azure IP addresses/ranges published on [Microsoft Azure Datacenter IP Ranges](https://www.microsoft.com/en-us/download/details.aspx?id=41653). +## Windows Defender ATP service backend IP range +If you network devices don't support the URLs white-listed in the prior section, you can use the following information. + +Windows Defender ATP is built on Azure cloud, deployed in the following regions: -The Windows Defender ATP service is deployed in the following regions: - \+\ - \+\ - \+\ @@ -114,6 +115,11 @@ The Windows Defender ATP service is deployed in the following regions: - \+\ +You can find the Azure IP range on [Microsoft Azure Datacenter IP Ranges](https://www.microsoft.com/en-us/download/details.aspx?id=41653). + +>[!NOTE] +> As a cloud-based solution, the IP range can change. It's recommended you move to DNS resolving setting. + ## Verify client connectivity to Windows Defender ATP service URLs From f84ba84a8db2dfb8883a725be6e54cd1d8e8071b Mon Sep 17 00:00:00 2001 From: Liza Poggemeyer Date: Wed, 14 Nov 2018 21:20:39 +0000 Subject: [PATCH 21/37] Merged PR 12772: Formatting fix for a wireless troubleshooting article from CSS --- .../data-collection-for-802-authentication.md | 797 +++++++----------- 1 file changed, 315 insertions(+), 482 deletions(-) diff --git a/windows/client-management/data-collection-for-802-authentication.md b/windows/client-management/data-collection-for-802-authentication.md index aea4ddbb30..f8a9d1a2c6 100644 --- a/windows/client-management/data-collection-for-802-authentication.md +++ b/windows/client-management/data-collection-for-802-authentication.md @@ -14,538 +14,371 @@ ms.date: 10/29/2018 # Data Collection for Troubleshooting 802.1x Authentication -## Steps to capture Wireless/Wired functionality logs - +## Capture wireless/wired functionality logs + +Use the following steps to collect wireless and wired logs on Windows and Windows Server: + 1. Create C:\MSLOG on the client machine to store captured logs. -2. Launch a command prompt as an administrator on the client machine, and run the following commands to start RAS trace log and Wireless/Wired scenario log: +2. Launch a command prompt as an administrator on the client machine, and run the following commands to start RAS trace log and Wireless/Wired scenario log. -**On Windows 8.1, Windows 10 Wireless Client** + **Wireless Windows 8.1 and Windows 10:** -```dos -netsh ras set tracing * enabled -``` -```dos -netsh trace start scenario=wlan,wlan\_wpp,wlan\_dbg,wireless\_dbg globallevel=0xff capture=yes maxsize=1024 tracefile=C:\MSLOG\%COMPUTERNAME%\_wireless\_cli.etl -``` + ``` + netsh ras set tracing * enabled + netsh trace start scenario=wlan,wlan\_wpp,wlan\_dbg,wireless\_dbg globallevel=0xff capture=yes maxsize=1024 tracefile=C:\MSLOG\%COMPUTERNAME%\_wireless\_cli.etl + ``` -**On Windows 7, Winodws 8 Wireless Client** -```dos -netsh ras set tracing * enabled -``` -```dos -netsh trace start scenario=wlan,wlan\_wpp,wlan\_dbg globallevel=0xff capture=yes maxsize=1024 tracefile=C:\MSLOG\%COMPUTERNAME%\_wireless\_cli.etl -``` + **Wireless Windows 7 and Windows 8:** + ``` + netsh ras set tracing * enabled + netsh trace start scenario=wlan,wlan\_wpp,wlan\_dbg globallevel=0xff capture=yes maxsize=1024 tracefile=C:\MSLOG\%COMPUTERNAME%\_wireless\_cli.etl + ``` -**On Wired network client** - -```dos -netsh ras set tracing * enabled -``` -```dos -netsh trace start scenario=lan globallevel=0xff capture=yes maxsize=1024 tracefile=C:\MSLOG\%COMPUTERNAME%\_wired\_cli.etl -``` + **Wired client, regardless of version** + ``` + netsh ras set tracing * enabled + netsh trace start scenario=lan globallevel=0xff capture=yes maxsize=1024 tracefile=C:\MSLOG\%COMPUTERNAME%\_wired\_cli.etl + ``` -3. Run the followind command to enable CAPI2 logging: - -```dos -wevtutil.exe sl Microsoft-Windows-CAPI2/Operational /e:true -``` +3. Run the following command to enable CAPI2 logging: + + ``` + wevtutil.exe sl Microsoft-Windows-CAPI2/Operational /e:true + ``` 4. Create C:\MSLOG on the NPS to store captured logs. 5. Launch a command prompt as an administrator on the NPS and run the following commands to start RAS trace log and Wireless/Wired scenario log: -**On Windows Server 2012 R2, Windows Server 2016 Wireless network** + **Windows Server 2012 R2, Windows Server 2016 wireless network:** - ```dos - netsh ras set tracing * enabled ``` - ```dos - netsh trace start scenario=wlan,wlan\_wpp,wlan\_dbg,wireless\_dbg globallevel=0xff capture=yes maxsize=1024 tracefile=C:\MSLOG\%COMPUTERNAME%\_wireless\_nps.etl + netsh ras set tracing * enabled + netsh trace start scenario=wlan,wlan\_wpp,wlan\_dbg,wireless\_dbg globallevel=0xff capture=yes maxsize=1024 tracefile=C:\MSLOG\%COMPUTERNAME%\_wireless\_nps.etl ``` -**On Windows Server 2008 R2, Winodws Server 2012 Wireless network** + **Windows Server 2008 R2, Windows Server 2012 wireless network** - ```dos - netsh ras set tracing * enabled ``` - ```dos - netsh trace start scenario=wlan,wlan\_wpp,wlan\_dbg globallevel=0xff capture=yes maxsize=1024 tracefile=C:\MSLOG\%COMPUTERNAME%\_wireless\_nps.etl + netsh ras set tracing * enabled + netsh trace start scenario=wlan,wlan\_wpp,wlan\_dbg globallevel=0xff capture=yes maxsize=1024 tracefile=C:\MSLOG\%COMPUTERNAME%\_wireless\_nps.etl ``` -**On wired network** + **Wired network** - ```dos - netsh ras set tracing * enabled ``` - ```dos - netsh trace start scenario=lan globallevel=0xff capture=yes maxsize=1024 tracefile=C:\MSLOG\%COMPUTERNAME%\_wired\_nps.etl + netsh ras set tracing * enabled + netsh trace start scenario=lan globallevel=0xff capture=yes maxsize=1024 tracefile=C:\MSLOG\%COMPUTERNAME%\_wired\_nps.etl ``` -6. Run the followind command to enable CAPI2 logging: +6. Run the following command to enable CAPI2 logging: - ```dos + ``` wevtutil.exe sl Microsoft-Windows-CAPI2/Operational /e:true ``` - 7. Run the following command from the command prompt on the client machine and start PSR to capture screen images: - -> [!NOTE] -> When the mouse button is clicked, the cursor will blink in red while capturing a screen image. + > [!NOTE] + > When the mouse button is clicked, the cursor will blink in red while capturing a screen image. - ```dos + ``` psr /start /output c:\MSLOG\%computername%\_psr.zip /maxsc 100 ``` - 8. Repro the issue. - -9. Run the following command on the client machine to stop the PSR capturing: +9. Run the following command on the client PC to stop the PSR capturing: - ```dos - psr /stop - ``` + ``` + psr /stop + ``` 10. Run the following commands from the command prompt on the NPS. -**Stopping RAS trace log and Wireless scenario log** + - To stop RAS trace log and wireless scenario log: - ```dos - netsh trace stop - ``` - ```dos - netsh ras set tracing * disabled - ``` - -**Disabling and copying CAPI2 log** + ``` + netsh trace stop + netsh ras set tracing * disabled + ``` + - To disable and copy CAPI2 log: - ```dos - wevtutil.exe sl Microsoft-Windows-CAPI2/Operational /e:false - ``` - ```dos - wevtutil.exe epl Microsoft-Windows-CAPI2/Operational C:\MSLOG\CAPI2\_%COMPUTERNAME%.evtx - ``` + ``` + wevtutil.exe sl Microsoft-Windows-CAPI2/Operational /e:false + wevtutil.exe epl Microsoft-Windows-CAPI2/Operational C:\MSLOG\CAPI2\_%COMPUTERNAME%.evtx + ``` -11. Run the following commands from the prompt on the client machine. +11. Run the following commands on the client PC. + - To stop RAS trace log and wireless scenario log: + ``` + netsh trace stop + netsh ras set tracing * disabled + ``` -**Stopping RAS trace log and Wireless scenario log** + - To disable and copy the CAPI2 log: + ``` + wevtutil.exe sl Microsoft-Windows-CAPI2/Operational /e:false + wevtutil.exe epl Microsoft-Windows-CAPI2/Operational C:\MSLOG\CAPI2\_%COMPUTERNAME%.evtx + ``` + +12. Save the following logs on the client and the NPS: + + **Client** + - C:\MSLOG\%computername%_psr.zip + - C:\MSLOG\CAPI2_%COMPUTERNAME%.evtx + - C:\MSLOG\%COMPUTERNAME%_wireless_cli.etl + - C:\MSLOG\%COMPUTERNAME%_wireless_cli.cab + - All log files and folders in %Systemroot%\Tracing + + **NPS** + - C:\MSLOG\%COMPUTERNAME%_CAPI2.evtx + - C:\MSLOG\%COMPUTERNAME%_wireless_nps.etl (%COMPUTERNAME%_wired_nps.etl for wired scenario) + - C:\MSLOG\%COMPUTERNAME%_wireless_nps.cab (%COMPUTERNAME%_wired_nps.cab for wired scenario) + - All log files and folders in %Systemroot%\Tracing - ```dos - netsh trace stop - ``` - ```dos - netsh ras set tracing * disabled - ``` - -**Disabling and copying CAPI2 log** +## Save environmental and configuration information + +### On Windows client - ```dos - wevtutil.exe sl Microsoft-Windows-CAPI2/Operational /e:false - ``` - ```dos - wevtutil.exe epl Microsoft-Windows-CAPI2/Operational C:\MSLOG\CAPI2\_%COMPUTERNAME%.evtx - ``` - -12. Save the following logs on the client and the NPS. - -**Client** - - C:\MSLOG\%computername%_psr.zip - - C:\MSLOG\CAPI2_%COMPUTERNAME%.evtx - - C:\MSLOG\%COMPUTERNAME%_wireless_cli.etl - - C:\MSLOG\%COMPUTERNAME%_wireless_cli.cab - - All log files and folders in %Systemroot%\Tracing - -**NPS** - - C:\MSLOG\%COMPUTERNAME%_CAPI2.evtx - - C:\MSLOG\%COMPUTERNAME%_wireless_nps.etl (%COMPUTERNAME%_wired_nps.etl for wired scenario) - - C:\MSLOG\%COMPUTERNAME%_wireless_nps.cab (%COMPUTERNAME%_wired_nps.cab for wired scenario) - - All log files and folders in %Systemroot%\Tracing - - -### Steps to save environmental / configuration information - -**Client** 1. Create C:\MSLOG to store captured logs. 2. Launch a command prompt as an administrator. 3. Run the following commands. - - Environmental information and Group Policies application status - ```dos - gpresult /H C:\MSLOG\%COMPUTERNAME%\_gpresult.htm - - msinfo32 /report c:\MSLOG\%COMPUTERNAME%\_msinfo32.txt - - ipconfig /all > c:\MSLOG\%COMPUTERNAME%\_ipconfig.txt - - route print > c:\MSLOG\%COMPUTERNAME%\_route\_print.txt - ``` - -**Event logs** - -**Run the following command on Windows 8 and above ** -```dos -wevtutil epl Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-Lifecycle-System\_Operational.evtx - -wevtutil epl Microsoft-Windows-CertificateServicesClient-Lifecycle-User/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-Lifecycle-User\_Operational.evtx - -wevtutil epl Microsoft-Windows-CertificateServices-Deployment/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServices-Deployment\_Operational.evtx -``` - -```dos -wevtutil epl Application c:\MSLOG\%COMPUTERNAME%\_Application.evtx - -wevtutil epl System c:\MSLOG\%COMPUTERNAME%\_System.evtx - -wevtutil epl Security c:\MSLOG\%COMPUTERNAME%\_Security.evtx - -wevtutil epl Microsoft-Windows-GroupPolicy/Operational C:\MSLOG\%COMPUTERNAME%\_GroupPolicy\_Operational.evtx - -wevtutil epl "Microsoft-Windows-WLAN-AutoConfig/Operational" c:\MSLOG\%COMPUTERNAME%\_Microsoft-Windows-WLAN-AutoConfig-Operational.evtx - -wevtutil epl "Microsoft-Windows-Wired-AutoConfig/Operational" c:\MSLOG\%COMPUTERNAME%\_Microsoft-Windows-Wired-AutoConfig-Operational.evtx - -wevtutil epl Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-CredentialRoaming\_Operational.evtx - -wevtutil epl Microsoft-Windows-CertPoleEng/Operational c:\MSLOG\%COMPUTERNAME%\_CertPoleEng\_Operational.evtx -``` - -**Certificates Store information** - -```dos -certutil.exe -v -silent -store MY > c:\MSLOG\%COMPUTERNAME%\_cert-Personal-Registry.txt - -certutil.exe -v -silent -store ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-TrustedRootCA-Registry.txt - -certutil.exe -v -silent -store -grouppolicy ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-TrustedRootCA-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise ROOT > c:\MSLOG\%COMPUTERNAME%\_TrustedRootCA-Enterprise.txt - -certutil.exe -v -silent -store TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-Reg.txt - -certutil.exe -v -silent -store -grouppolicy TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-Enterprise.txt - -certutil.exe -v -silent -store CA > c:\MSLOG\%COMPUTERNAME%\_cert-IntermediateCA-Registry.txt - -certutil.exe -v -silent -store -grouppolicy CA > c:\MSLOG\%COMPUTERNAME%\_cert-IntermediateCA-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise CA > c:\MSLOG\%COMPUTERNAME%\_cert-Intermediate-Enterprise.txt - -certutil.exe -v -silent -store AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-Registry.txt - -certutil.exe -v -silent -store -grouppolicy AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-Enterprise.txt - -certutil.exe -v -silent -store SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-Registry.txt - -certutil.exe -v -silent -store -grouppolicy SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-Enterprise.txt - -certutil.exe -v -silent -store -enterprise NTAUTH > c:\MSLOG\%COMPUTERNAME%\_cert-NtAuth-Enterprise.txt - -certutil.exe -v -silent -user -store MY > c:\MSLOG\%COMPUTERNAME%\_cert-User-Personal-Registry.txt - -certutil.exe -v -silent -user -store ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-User-TrustedRootCA-Registry.txt - -certutil.exe -v -silent -user -store -enterprise ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-User-TrustedRootCA-Enterprise.txt - -certutil.exe -v -silent -user -store TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-User-EnterpriseTrust-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-User-EnterpriseTrust-GroupPolicy.txt - -certutil.exe -v -silent -user -store CA > c:\MSLOG\%COMPUTERNAME%\_cert-User-IntermediateCA-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy CA > c:\MSLOG\%COMPUTERNAME%\_cert-User-IntermediateCA-GroupPolicy.txt - -certutil.exe -v -silent -user -store Disallowed > c:\MSLOG\%COMPUTERNAME%\_cert-User-UntrustedCertificates-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy Disallowed > c:\MSLOG\%COMPUTERNAME%\_cert-User-UntrustedCertificates-GroupPolicy.txt - -certutil.exe -v -silent -user -store AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-3rdPartyRootCA-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-3rdPartyRootCA-GroupPolicy.txt - -certutil.exe -v -silent -user -store SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-SmartCardRoot-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-SmartCardRoot-GroupPolicy.txt - -certutil.exe -v -silent -user -store UserDS > c:\MSLOG\%COMPUTERNAME%\_cert-User-UserDS.txt -``` - -**Wireless LAN Client information** -```dos -netsh wlan show all > c:\MSLOG\%COMPUTERNAME%\_wlan\_show\_all.txt - -netsh wlan export profile folder=c:\MSLOG\ -``` - -**Wired LAN Client information** -```dos -netsh lan show all > c:\MSLOG\%COMPUTERNAME%\_lan\_show\_all.txt - -netsh lan export profile folder=c:\MSLOG\ -``` - -4. Save the logs stored in C:\MSLOG. - - -**NPS** - 1. Create C:\MSLOG to store captured logs. - 2. Launch a command prompt as an administrator. - 3. Run the following commands: - - **Environmental information and Group Policies application status** - - ```dos - gpresult /H C:\MSLOG\%COMPUTERNAME%\_gpresult.txt - + - Environmental information and Group Policies application status + + ``` + gpresult /H C:\MSLOG\%COMPUTERNAME%\_gpresult.htm + msinfo32 /report c:\MSLOG\%COMPUTERNAME%\_msinfo32.txt + ipconfig /all > c:\MSLOG\%COMPUTERNAME%\_ipconfig.txt + route print > c:\MSLOG\%COMPUTERNAME%\_route\_print.txt + ``` + - Event logs + + ``` + wevtutil epl Application c:\MSLOG\%COMPUTERNAME%\_Application.evtx + wevtutil epl System c:\MSLOG\%COMPUTERNAME%\_System.evtx + wevtutil epl Security c:\MSLOG\%COMPUTERNAME%\_Security.evtx + wevtutil epl Microsoft-Windows-GroupPolicy/Operational C:\MSLOG\%COMPUTERNAME%\_GroupPolicy\_Operational.evtx + wevtutil epl "Microsoft-Windows-WLAN-AutoConfig/Operational" c:\MSLOG\%COMPUTERNAME%\_Microsoft-Windows-WLAN-AutoConfig-Operational.evtx + wevtutil epl "Microsoft-Windows-Wired-AutoConfig/Operational" c:\MSLOG\%COMPUTERNAME%\_Microsoft-Windows-Wired-AutoConfig-Operational.evtx + wevtutil epl Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-CredentialRoaming\_Operational.evtx + wevtutil epl Microsoft-Windows-CertPoleEng/Operational c:\MSLOG\%COMPUTERNAME%\_CertPoleEng\_Operational.evtx + ``` + - For Windows 8 and later, also run these commands for event logs: + + ``` + wevtutil epl Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-Lifecycle-System\_Operational.evtx + wevtutil epl Microsoft-Windows-CertificateServicesClient-Lifecycle-User/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-Lifecycle-User\_Operational.evtx + wevtutil epl Microsoft-Windows-CertificateServices-Deployment/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServices-Deployment\_Operational.evtx + ``` + - Certificates Store information: + + ``` + certutil.exe -v -silent -store MY > c:\MSLOG\%COMPUTERNAME%\_cert-Personal-Registry.txt + certutil.exe -v -silent -store ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-TrustedRootCA-Registry.txt + certutil.exe -v -silent -store -grouppolicy ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-TrustedRootCA-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise ROOT > c:\MSLOG\%COMPUTERNAME%\_TrustedRootCA-Enterprise.txt + certutil.exe -v -silent -store TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-Reg.txt + certutil.exe -v -silent -store -grouppolicy TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-Enterprise.txt + certutil.exe -v -silent -store CA > c:\MSLOG\%COMPUTERNAME%\_cert-IntermediateCA-Registry.txt + certutil.exe -v -silent -store -grouppolicy CA > c:\MSLOG\%COMPUTERNAME%\_cert-IntermediateCA-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise CA > c:\MSLOG\%COMPUTERNAME%\_cert-Intermediate-Enterprise.txt + certutil.exe -v -silent -store AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-Registry.txt + certutil.exe -v -silent -store -grouppolicy AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-Enterprise.txt + certutil.exe -v -silent -store SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-Registry.txt + certutil.exe -v -silent -store -grouppolicy SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-Enterprise.txt + certutil.exe -v -silent -store -enterprise NTAUTH > c:\MSLOG\%COMPUTERNAME%\_cert-NtAuth-Enterprise.txt + certutil.exe -v -silent -user -store MY > c:\MSLOG\%COMPUTERNAME%\_cert-User-Personal-Registry.txt + certutil.exe -v -silent -user -store ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-User-TrustedRootCA-Registry.txt + certutil.exe -v -silent -user -store -enterprise ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-User-TrustedRootCA-Enterprise.txt + certutil.exe -v -silent -user -store TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-User-EnterpriseTrust-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-User-EnterpriseTrust-GroupPolicy.txt + certutil.exe -v -silent -user -store CA > c:\MSLOG\%COMPUTERNAME%\_cert-User-IntermediateCA-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy CA > c:\MSLOG\%COMPUTERNAME%\_cert-User-IntermediateCA-GroupPolicy.txt + certutil.exe -v -silent -user -store Disallowed > c:\MSLOG\%COMPUTERNAME%\_cert-User-UntrustedCertificates-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy Disallowed > c:\MSLOG\%COMPUTERNAME%\_cert-User-UntrustedCertificates-GroupPolicy.txt + certutil.exe -v -silent -user -store AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-3rdPartyRootCA-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-3rdPartyRootCA-GroupPolicy.txt + certutil.exe -v -silent -user -store SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-SmartCardRoot-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-SmartCardRoot-GroupPolicy.txt + certutil.exe -v -silent -user -store UserDS > c:\MSLOG\%COMPUTERNAME%\_cert-User-UserDS.txt + ``` + - Wireless LAN client information: + + ``` + netsh wlan show all > c:\MSLOG\%COMPUTERNAME%\_wlan\_show\_all.txt + netsh wlan export profile folder=c:\MSLOG\ + ``` + - Wired LAN Client information + + ``` + netsh lan show all > c:\MSLOG\%COMPUTERNAME%\_lan\_show\_all.txt + netsh lan export profile folder=c:\MSLOG\ + ``` +4. Save the logs stored in C:\MSLOG. + +### On NPS + +1. Create C:\MSLOG to store captured logs. +2. Launch a command prompt as an administrator. +3. Run the following commands. + - Environmental information and Group Policies application status: + + ``` + gpresult /H C:\MSLOG\%COMPUTERNAME%\_gpresult.txt msinfo32 /report c:\MSLOG\%COMPUTERNAME%\_msinfo32.txt - ipconfig /all > c:\MSLOG\%COMPUTERNAME%\_ipconfig.txt - route print > c:\MSLOG\%COMPUTERNAME%\_route\_print.txt ``` + - Event logs: + + ``` + wevtutil epl Application c:\MSLOG\%COMPUTERNAME%\_Application.evtx + wevtutil epl System c:\MSLOG\%COMPUTERNAME%\_System.evtx + wevtutil epl Security c:\MSLOG\%COMPUTERNAME%\_Security.evtx + wevtutil epl Microsoft-Windows-GroupPolicy/Operational c:\MSLOG\%COMPUTERNAME%\_GroupPolicy\_Operational.evtx + wevtutil epl Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-CredentialRoaming\_Operational.evtx + wevtutil epl Microsoft-Windows-CertPoleEng/Operational c:\MSLOG\%COMPUTERNAME%\_CertPoleEng\_Operational.evtx + ``` + - Run the following 3 commands on Windows Server 2012 and later: + + ``` + wevtutil epl Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-Lifecycle-System\_Operational.evtx + wevtutil epl Microsoft-Windows-CertificateServicesClient-Lifecycle-User/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-Lifecycle-User\_Operational.evtx + wevtutil epl Microsoft-Windows-CertificateServices-Deployment/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServices-Deployment\_Operational.evtx + ``` + - Certificates store information + + ``` + certutil.exe -v -silent -store MY > c:\MSLOG\%COMPUTERNAME%\_cert-Personal-Registry.txt + certutil.exe -v -silent -store ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-TrustedRootCA-Registry.txt + certutil.exe -v -silent -store -grouppolicy ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-TrustedRootCA-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise ROOT > c:\MSLOG\%COMPUTERNAME%\_TrustedRootCA-Enterprise.txt + certutil.exe -v -silent -store TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-Reg.txt + certutil.exe -v -silent -store -grouppolicy TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-Enterprise.txt + certutil.exe -v -silent -store CA > c:\MSLOG\%COMPUTERNAME%\_cert-IntermediateCA-Registry.txt + certutil.exe -v -silent -store -grouppolicy CA > c:\MSLOG\%COMPUTERNAME%\_cert-IntermediateCA-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise CA > c:\MSLOG\%COMPUTERNAME%\_cert-Intermediate-Enterprise.txt + certutil.exe -v -silent -store AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-Registry.txt + certutil.exe -v -silent -store -grouppolicy AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-Enterprise.txt + certutil.exe -v -silent -store SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-Registry.txt + certutil.exe -v -silent -store -grouppolicy SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-Enterprise.txt + certutil.exe -v -silent -store -enterprise NTAUTH > c:\MSLOG\%COMPUTERNAME%\_cert-NtAuth-Enterprise.txt + certutil.exe -v -silent -user -store MY > c:\MSLOG\%COMPUTERNAME%\_cert-User-Personal-Registry.txt + certutil.exe -v -silent -user -store ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-User-TrustedRootCA-Registry.txt + certutil.exe -v -silent -user -store -enterprise ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-User-TrustedRootCA-Enterprise.txt + certutil.exe -v -silent -user -store TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-User-EnterpriseTrust-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-User-EnterpriseTrust-GroupPolicy.txt + certutil.exe -v -silent -user -store CA > c:\MSLOG\%COMPUTERNAME%\_cert-User-IntermediateCA-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy CA > c:\MSLOG\%COMPUTERNAME%\_cert-User-IntermediateCA-GroupPolicy.txt + certutil.exe -v -silent -user -store Disallowed > c:\MSLOG\%COMPUTERNAME%\_cert-User-UntrustedCertificates-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy Disallowed > c:\MSLOG\%COMPUTERNAME%\_cert-User-UntrustedCertificates-GroupPolicy.txt + certutil.exe -v -silent -user -store AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-3rdPartyRootCA-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-3rdPartyRootCA-GroupPolicy.txt + certutil.exe -v -silent -user -store SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-SmartCardRoot-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-SmartCardRoot-GroupPolicy.txt + certutil.exe -v -silent -user -store UserDS > c:\MSLOG\%COMPUTERNAME%\_cert-User-UserDS.txt + ``` + - NPS configuration information: + + ``` + netsh nps show config > C:\MSLOG\%COMPUTERNAME%\_nps\_show\_config.txt + netsh nps export filename=C:\MSLOG\%COMPUTERNAME%\_nps\_export.xml exportPSK=YES + ``` +3. Take the following steps to save an NPS accounting log. + 1. Open **Administrative tools > Network Policy Server**. + 2. On the Network Policy Server administration tool, select **Accounting** in the left pane. + 3. Click **Change Log File Properties**. + 4. On the **Log File** tab, note the log file naming convention shown as **Name** and the log file location shown in **Directory** box. + 5. Copy the log file to C:\MSLOG. -**Event logs** -**Run the following 3 commands on Windows Server 2012 and above:** -```dos -wevtutil epl Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-Lifecycle-System\_Operational.evtx - -wevtutil epl Microsoft-Windows-CertificateServicesClient-Lifecycle-User/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-Lifecycle-User\_Operational.evtx - -wevtutil epl Microsoft-Windows-CertificateServices-Deployment/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServices-Deployment\_Operational.evtx -``` +4. Save the logs stored in C:\MSLOG. -```dos -wevtutil epl Application c:\MSLOG\%COMPUTERNAME%\_Application.evtx - -wevtutil epl System c:\MSLOG\%COMPUTERNAME%\_System.evtx - -wevtutil epl Security c:\MSLOG\%COMPUTERNAME%\_Security.evtx - -wevtutil epl Microsoft-Windows-GroupPolicy/Operational c:\MSLOG\%COMPUTERNAME%\_GroupPolicy\_Operational.evtx - -wevtutil epl Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-CredentialRoaming\_Operational.evtx - -wevtutil epl Microsoft-Windows-CertPoleEng/Operational c:\MSLOG\%COMPUTERNAME%\_CertPoleEng\_Operational.evtx -``` +### Certificate Authority (CA) (OPTIONAL) -**Certificates store information** -```dos -certutil.exe -v -silent -store MY > c:\MSLOG\%COMPUTERNAME%\_cert-Personal-Registry.txt - -certutil.exe -v -silent -store ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-TrustedRootCA-Registry.txt - -certutil.exe -v -silent -store -grouppolicy ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-TrustedRootCA-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise ROOT > c:\MSLOG\%COMPUTERNAME%\_TrustedRootCA-Enterprise.txt - -certutil.exe -v -silent -store TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-Reg.txt - -certutil.exe -v -silent -store -grouppolicy TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-Enterprise.txt - -certutil.exe -v -silent -store CA > c:\MSLOG\%COMPUTERNAME%\_cert-IntermediateCA-Registry.txt - -certutil.exe -v -silent -store -grouppolicy CA > c:\MSLOG\%COMPUTERNAME%\_cert-IntermediateCA-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise CA > c:\MSLOG\%COMPUTERNAME%\_cert-Intermediate-Enterprise.txt - -certutil.exe -v -silent -store AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-Registry.txt - -certutil.exe -v -silent -store -grouppolicy AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-Enterprise.txt - -certutil.exe -v -silent -store SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-Registry.txt - -certutil.exe -v -silent -store -grouppolicy SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-Enterprise.txt - -certutil.exe -v -silent -store -enterprise NTAUTH > c:\MSLOG\%COMPUTERNAME%\_cert-NtAuth-Enterprise.txt - -certutil.exe -v -silent -user -store MY > c:\MSLOG\%COMPUTERNAME%\_cert-User-Personal-Registry.txt - -certutil.exe -v -silent -user -store ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-User-TrustedRootCA-Registry.txt - -certutil.exe -v -silent -user -store -enterprise ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-User-TrustedRootCA-Enterprise.txt - -certutil.exe -v -silent -user -store TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-User-EnterpriseTrust-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-User-EnterpriseTrust-GroupPolicy.txt - -certutil.exe -v -silent -user -store CA > c:\MSLOG\%COMPUTERNAME%\_cert-User-IntermediateCA-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy CA > c:\MSLOG\%COMPUTERNAME%\_cert-User-IntermediateCA-GroupPolicy.txt - -certutil.exe -v -silent -user -store Disallowed > c:\MSLOG\%COMPUTERNAME%\_cert-User-UntrustedCertificates-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy Disallowed > c:\MSLOG\%COMPUTERNAME%\_cert-User-UntrustedCertificates-GroupPolicy.txt - -certutil.exe -v -silent -user -store AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-3rdPartyRootCA-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-3rdPartyRootCA-GroupPolicy.txt - -certutil.exe -v -silent -user -store SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-SmartCardRoot-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-SmartCardRoot-GroupPolicy.txt - -certutil.exe -v -silent -user -store UserDS > c:\MSLOG\%COMPUTERNAME%\_cert-User-UserDS.txt -``` - -**NPS configuration information** -```dos -netsh nps show config > C:\MSLOG\%COMPUTERNAME%\_nps\_show\_config.txt - -netsh nps export filename=C:\MSLOG\%COMPUTERNAME%\_nps\_export.xml exportPSK=YES -``` - -3. Take the following steps to save an NPS accounting log: -4. Launch **Administrative tools** - **Network Policy Server**. - - On the Network Policy Server administration tool, select **Accounting** in the left pane. - - Click **Change Log File Properties** in the right pane. - - Click the **Log File** tab, note the log file naming convention shown as *Name* and the log file location shown in the **Directory** box. - - Copy the log file to C:\MSLOG. - - Save the logs stored in C:\MSLOG. - - -**Certificate Authority (CA)** *Optional* - -1. On a CA, launch a command prompt as an administrator. -2. Create C:\MSLOG to store captured logs. -3. Run the following commands: - -Environmental information and Group Policies application status - -```dos -gpresult /H C:\MSLOG\%COMPUTERNAME%\_gpresult.txt - -msinfo32 /report c:\MSLOG\%COMPUTERNAME%\_msinfo32.txt - -ipconfig /all > c:\MSLOG\%COMPUTERNAME%\_ipconfig.txt - -route print > c:\MSLOG\%COMPUTERNAME%\_route\_print.txt -``` - -**Event logs** - -**Run the following 3 lines on Windows 2012 and up:** - -```dos -wevtutil epl Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-Lifecycle-System\_Operational.evtx - -wevtutil epl Microsoft-Windows-CertificateServicesClient-Lifecycle-User/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-Lifecycle-User\_Operational.evtx - -wevtutil epl Microsoft-Windows-CertificateServices-Deployment/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServices-Deployment\_Operational.evtx -``` - -```dos -wevtutil epl Application c:\MSLOG\%COMPUTERNAME%\_Application.evtx - -wevtutil epl System c:\MSLOG\%COMPUTERNAME%\_System.evtx - -wevtutil epl Security c:\MSLOG\%COMPUTERNAME%\_Security.evtx - -wevtutil epl Microsoft-Windows-GroupPolicy/Operational c:\MSLOG\%COMPUTERNAME%\_GroupPolicy\_Operational.evtx - -wevtutil epl Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-CredentialRoaming\_Operational.evtx - -wevtutil epl Microsoft-Windows-CertPoleEng/Operational c:\MSLOG\%COMPUTERNAME%\_CertPoleEng\_Operational.evtx -``` - -**Certificates store information** - -```dos -certutil.exe -v -silent -store MY > c:\MSLOG\%COMPUTERNAME%\_cert-Personal-Registry.txt - -certutil.exe -v -silent -store ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-TrustedRootCA-Registry.txt - -certutil.exe -v -silent -store -grouppolicy ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-TrustedRootCA-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise ROOT > c:\MSLOG\%COMPUTERNAME%\_TrustedRootCA-Enterprise.txt - -certutil.exe -v -silent -store TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-Reg.txt - -certutil.exe -v -silent -store -grouppolicy TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-Enterprise.txt - -certutil.exe -v -silent -store CA > c:\MSLOG\%COMPUTERNAME%\_cert-IntermediateCA-Registry.txt - -certutil.exe -v -silent -store -grouppolicy CA > c:\MSLOG\%COMPUTERNAME%\_cert-IntermediateCA-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise CA > c:\MSLOG\%COMPUTERNAME%\_cert-Intermediate-Enterprise.txt - -certutil.exe -v -silent -store AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-Registry.txt - -certutil.exe -v -silent -store -grouppolicy AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-Enterprise.txt - -certutil.exe -v -silent -store SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-Registry.txt - -certutil.exe -v -silent -store -grouppolicy SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-GroupPolicy.txt - -certutil.exe -v -silent -store -enterprise SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-Enterprise.txt - -certutil.exe -v -silent -store -enterprise NTAUTH > c:\MSLOG\%COMPUTERNAME%\_cert-NtAuth-Enterprise.txt - -certutil.exe -v -silent -user -store MY > c:\MSLOG\%COMPUTERNAME%\_cert-User-Personal-Registry.txt - -certutil.exe -v -silent -user -store ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-User-TrustedRootCA-Registry.txt - -certutil.exe -v -silent -user -store -enterprise ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-User-TrustedRootCA-Enterprise.txt - -certutil.exe -v -silent -user -store TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-User-EnterpriseTrust-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-User-EnterpriseTrust-GroupPolicy.txt - -certutil.exe -v -silent -user -store CA > c:\MSLOG\%COMPUTERNAME%\_cert-User-IntermediateCA-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy CA > c:\MSLOG\%COMPUTERNAME%\_cert-User-IntermediateCA-GroupPolicy.txt - -certutil.exe -v -silent -user -store Disallowed > c:\MSLOG\%COMPUTERNAME%\_cert-User-UntrustedCertificates-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy Disallowed > c:\MSLOG\%COMPUTERNAME%\_cert-User-UntrustedCertificates-GroupPolicy.txt - -certutil.exe -v -silent -user -store AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-3rdPartyRootCA-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-3rdPartyRootCA-GroupPolicy.txt - -certutil.exe -v -silent -user -store SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-SmartCardRoot-Registry.txt - -certutil.exe -v -silent -user -store -grouppolicy SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-SmartCardRoot-GroupPolicy.txt - -certutil.exe -v -silent -user -store UserDS > c:\MSLOG\%COMPUTERNAME%\_cert-User-UserDS.txt -``` - -**CA configuration information** -```dos -reg save HKLM\System\CurrentControlSet\Services\CertSvc c:\MSLOG\%COMPUTERNAME%\_CertSvc.hiv - -reg export HKLM\System\CurrentControlSet\Services\CertSvc c:\MSLOG\%COMPUTERNAME%\_CertSvc.txt - -reg save HKLM\SOFTWARE\Microsoft\Cryptography c:\MSLOG\%COMPUTERNAME%\_Cryptography.hiv - -reg export HKLM\SOFTWARE\Microsoft\Cryptography c:\MSLOG\%COMPUTERNAME%\_Cryptography.tx -``` - -4. Copy the following files, if exist, to C:\MSLOG. %windir%\CAPolicy.inf -5. Log on to a domain controller and create C:\MSLOG to store captured logs. -6. Launch Windows PowerShell as an administrator. -7. Run the following PowerShell commandlets - - \* Replace the domain name in ";.. ,DC=test,DC=local"; with appropriate domain name. The example shows commands for ";test.local"; domain. -```powershell -Import-Module ActiveDirectory - -Get-ADObject -SearchBase ";CN=Public Key Services,CN=Services,CN=Configuration,DC=test,DC=local"; -Filter \* -Properties \* | fl \* > C:\MSLOG\Get-ADObject\_$Env:COMPUTERNAME.txt -``` -8. Save the following logs: -- All files in C:\MSLOG on the CA -- All files in C:\MSLOG on the domain controller +1. On a CA, launch a command prompt as an administrator. Create C:\MSLOG to store captured logs. +2. Run the following commands. + - Environmental information and Group Policies application status + + ``` + gpresult /H C:\MSLOG\%COMPUTERNAME%\_gpresult.txt + msinfo32 /report c:\MSLOG\%COMPUTERNAME%\_msinfo32.txt + ipconfig /all > c:\MSLOG\%COMPUTERNAME%\_ipconfig.txt + route print > c:\MSLOG\%COMPUTERNAME%\_route\_print.txt + ``` + - Event logs + + ``` + wevtutil epl Application c:\MSLOG\%COMPUTERNAME%\_Application.evtx + wevtutil epl System c:\MSLOG\%COMPUTERNAME%\_System.evtx + wevtutil epl Security c:\MSLOG\%COMPUTERNAME%\_Security.evtx + wevtutil epl Microsoft-Windows-GroupPolicy/Operational c:\MSLOG\%COMPUTERNAME%\_GroupPolicy\_Operational.evtx + wevtutil epl Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-CredentialRoaming\_Operational.evtx + wevtutil epl Microsoft-Windows-CertPoleEng/Operational c:\MSLOG\%COMPUTERNAME%\_CertPoleEng\_Operational.evtx + ``` + - Run the following 3 lines on Windows 2012 and up + + ``` + wevtutil epl Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-Lifecycle-System\_Operational.evtx + wevtutil epl Microsoft-Windows-CertificateServicesClient-Lifecycle-User/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServicesClient-Lifecycle-User\_Operational.evtx + wevtutil epl Microsoft-Windows-CertificateServices-Deployment/Operational c:\MSLOG\%COMPUTERNAME%\_CertificateServices-Deployment\_Operational.evtx + ``` + - Certificates store information + + ``` + certutil.exe -v -silent -store MY > c:\MSLOG\%COMPUTERNAME%\_cert-Personal-Registry.txt + certutil.exe -v -silent -store ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-TrustedRootCA-Registry.txt + certutil.exe -v -silent -store -grouppolicy ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-TrustedRootCA-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise ROOT > c:\MSLOG\%COMPUTERNAME%\_TrustedRootCA-Enterprise.txt + certutil.exe -v -silent -store TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-Reg.txt + certutil.exe -v -silent -store -grouppolicy TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-EnterpriseTrust-Enterprise.txt + certutil.exe -v -silent -store CA > c:\MSLOG\%COMPUTERNAME%\_cert-IntermediateCA-Registry.txt + certutil.exe -v -silent -store -grouppolicy CA > c:\MSLOG\%COMPUTERNAME%\_cert-IntermediateCA-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise CA > c:\MSLOG\%COMPUTERNAME%\_cert-Intermediate-Enterprise.txt + certutil.exe -v -silent -store AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-Registry.txt + certutil.exe -v -silent -store -grouppolicy AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-3rdPartyRootCA-Enterprise.txt + certutil.exe -v -silent -store SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-Registry.txt + certutil.exe -v -silent -store -grouppolicy SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-GroupPolicy.txt + certutil.exe -v -silent -store -enterprise SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-SmartCardRoot-Enterprise.txt + certutil.exe -v -silent -store -enterprise NTAUTH > c:\MSLOG\%COMPUTERNAME%\_cert-NtAuth-Enterprise.txt + certutil.exe -v -silent -user -store MY > c:\MSLOG\%COMPUTERNAME%\_cert-User-Personal-Registry.txt + certutil.exe -v -silent -user -store ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-User-TrustedRootCA-Registry.txt + certutil.exe -v -silent -user -store -enterprise ROOT > c:\MSLOG\%COMPUTERNAME%\_cert-User-TrustedRootCA-Enterprise.txt + certutil.exe -v -silent -user -store TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-User-EnterpriseTrust-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy TRUST > c:\MSLOG\%COMPUTERNAME%\_cert-User-EnterpriseTrust-GroupPolicy.txt + certutil.exe -v -silent -user -store CA > c:\MSLOG\%COMPUTERNAME%\_cert-User-IntermediateCA-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy CA > c:\MSLOG\%COMPUTERNAME%\_cert-User-IntermediateCA-GroupPolicy.txt + certutil.exe -v -silent -user -store Disallowed > c:\MSLOG\%COMPUTERNAME%\_cert-User-UntrustedCertificates-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy Disallowed > c:\MSLOG\%COMPUTERNAME%\_cert-User-UntrustedCertificates-GroupPolicy.txt + certutil.exe -v -silent -user -store AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-3rdPartyRootCA-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy AuthRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-3rdPartyRootCA-GroupPolicy.txt + certutil.exe -v -silent -user -store SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-SmartCardRoot-Registry.txt + certutil.exe -v -silent -user -store -grouppolicy SmartCardRoot > c:\MSLOG\%COMPUTERNAME%\_cert-User-SmartCardRoot-GroupPolicy.txt + certutil.exe -v -silent -user -store UserDS > c:\MSLOG\%COMPUTERNAME%\_cert-User-UserDS.txt + ``` + - CA configuration information + + ``` + reg save HKLM\System\CurrentControlSet\Services\CertSvc c:\MSLOG\%COMPUTERNAME%\_CertSvc.hiv + reg export HKLM\System\CurrentControlSet\Services\CertSvc c:\MSLOG\%COMPUTERNAME%\_CertSvc.txt + reg save HKLM\SOFTWARE\Microsoft\Cryptography c:\MSLOG\%COMPUTERNAME%\_Cryptography.hiv + reg export HKLM\SOFTWARE\Microsoft\Cryptography c:\MSLOG\%COMPUTERNAME%\_Cryptography.tx + ``` +3. Copy the following files, if exist, to C:\MSLOG: %windir%\CAPolicy.inf +4. Log on to a domain controller and create C:\MSLOG to store captured logs. +5. Launch Windows PowerShell as an administrator. +6. Run the following PowerShell cmdlets. Replace the domain name in ";.. ,DC=test,DC=local"; with appropriate domain name. The example shows commands for ";test.local"; domain. + + ```powershell + Import-Module ActiveDirectory + Get-ADObject -SearchBase ";CN=Public Key Services,CN=Services,CN=Configuration,DC=test,DC=local"; -Filter \* -Properties \* | fl \* > C:\MSLOG\Get-ADObject\_$Env:COMPUTERNAME.txt + ``` +7. Save the following logs. + - All files in C:\MSLOG on the CA + - All files in C:\MSLOG on the domain controller From 26d1e6ffa502ca619abf74b42a42e391d0fc66dd Mon Sep 17 00:00:00 2001 From: Aabha Thipsay Date: Wed, 14 Nov 2018 23:21:16 +0000 Subject: [PATCH 22/37] Merged PR 12835: Adding FIDO page --- .../microsoft-compatible-security-key.md | 31 +++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 windows/security/identity-protection/hello-for-business/microsoft-compatible-security-key.md diff --git a/windows/security/identity-protection/hello-for-business/microsoft-compatible-security-key.md b/windows/security/identity-protection/hello-for-business/microsoft-compatible-security-key.md new file mode 100644 index 0000000000..fb9afb773b --- /dev/null +++ b/windows/security/identity-protection/hello-for-business/microsoft-compatible-security-key.md @@ -0,0 +1,31 @@ +--- +title: Microsoft-compatible security key +description: Windows10 enables users to sign in to their device using a security key. How is a Microsoft-compatible security key different (and better) than any other FIDO2 security key +keywords: FIDO2, security key, CTAP, Hello, WHFB +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security, mobile +author: aabhathipsay +ms.author: aathipsa +ms.localizationpriority: medium +ms.date: 11/14/2018 +--- +# What is a Microsoft-compatible security key? +> [!Warning] +> Some information relates to pre-released product that may change before it is commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +Microsoft has been aligned with the [FIDO Alliance](https://fidoalliance.org/) with a mission to replace passwords with an easy to use, strong 2FA credential. We have been working with our partners to extensively test and deliver a seamless and secure authentication experience to end users. + +The [FIDO2 CTAP specification](https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-client-to-authenticator-protocol-v2.0-id-20180227.html) contains a few optional features and extensions which are crucial to provide that seamless and secure experience. + +A security key **MUST** implement the following features and extensions from the FIDO2 CTAP protocol to be Microsoft-compatible: + +| #
| Feature / Extension trust
| Why is this required?
| +| --- | --- | --- | +| 1 | Resident key | This feature enables the security key to be portable, where your credential is stored on the security key | +| 2 | Client pin | This feature enables you to protect your credentials with a second factor and applies to security keys that do not have an user interface| +| 3 | hmac-secret | This extension ensures you can sign-in to your device when it's off-line or in airplane mode | +| 4 | Multiple accounts per RP | This feature ensures you can use the same security key across multiple services like Microsoft Account (MSA) and Azure Active Directory (AAD) | + From 351fde4b99fe49e4016cc7475abe32fcd6b91f60 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 14 Nov 2018 16:02:24 -0800 Subject: [PATCH 23/37] edits --- windows/security/threat-protection/TOC.md | 2 +- .../windows-defender-atp/TOC.md | 16 ++++++---------- 2 files changed, 7 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 4266ad036b..7f08e28963 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -123,7 +123,7 @@ ##### [Hardware-based isolation](windows-defender-application-guard/install-wd-app-guard.md) ###### [Configuration settings](windows-defender-application-guard/configure-wd-app-guard.md) ##### [Application control](windows-defender-application-control/windows-defender-application-control.md) -##### Device control +#### Device control ###### [Control USB devices](device-control/control-usb-devices-using-intune.md) ###### [Device Guard](device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) ####### [Memory integrity](windows-defender-exploit-guard/memory-integrity.md) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index 5e74ba5229..efbf70fece 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -6,12 +6,6 @@ ##### [Application isolation](../windows-defender-application-guard/wd-app-guard-overview.md) ##### [System isolation](how-hardware-based-containers-help-protect-windows.md) #### [Application control](../windows-defender-application-control/windows-defender-application-control.md) -#### Device control -##### [Control USB devices](../device-control/control-usb-devices-using-intune.md) -##### [Device Guard](../device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) -###### [Memory integrity](../windows-defender-exploit-guard/memory-integrity.md) -####### [Hardware qualifications](../windows-defender-exploit-guard/requirements-and-deployment-planning-guidelines-for-virtualization-based-protection-of-code-integrity.md) -####### [Enable HVCI](../windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md) #### [Exploit protection](../windows-defender-exploit-guard/exploit-protection-exploit-guard.md) #### [Network protection](../windows-defender-exploit-guard/network-protection-exploit-guard.md) #### [Controlled folder access](../windows-defender-exploit-guard/controlled-folders-exploit-guard.md) @@ -126,10 +120,12 @@ #### [Hardware-based isolation](../windows-defender-application-guard/install-wd-app-guard.md) ##### [Configuration settings](../windows-defender-application-guard/configure-wd-app-guard.md) #### [Application control](../windows-defender-application-control/windows-defender-application-control.md) -#### [Device control](../device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) -##### [Memory integrity](../windows-defender-exploit-guard/memory-integrity.md) -###### [Hardware qualifications](../windows-defender-exploit-guard/requirements-and-deployment-planning-guidelines-for-virtualization-based-protection-of-code-integrity.md) -###### [Enable HVCI](../windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md) +#### Device control +##### [Control USB devices](../device-control/control-usb-devices-using-intune.md) +##### [Device Guard](../device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) +###### [Memory integrity](../windows-defender-exploit-guard/memory-integrity.md) +####### [Hardware qualifications](../windows-defender-exploit-guard/requirements-and-deployment-planning-guidelines-for-virtualization-based-protection-of-code-integrity.md) +####### [Enable HVCI](../windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md) #### [Exploit protection](../windows-defender-exploit-guard/enable-exploit-protection.md) ##### [Customize exploit protection](../windows-defender-exploit-guard/customize-exploit-protection.md) ##### [Import/export configurations](../windows-defender-exploit-guard/import-export-exploit-protection-emet-xml.md) From 7d9d55c08fa8cb45b7842e31c7ef56553c62308a Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 14 Nov 2018 16:12:33 -0800 Subject: [PATCH 24/37] added device control --- windows/security/threat-protection/TOC.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 7f08e28963..0492d0595a 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -123,12 +123,16 @@ ##### [Hardware-based isolation](windows-defender-application-guard/install-wd-app-guard.md) ###### [Configuration settings](windows-defender-application-guard/configure-wd-app-guard.md) ##### [Application control](windows-defender-application-control/windows-defender-application-control.md) -#### Device control +##### Device control ###### [Control USB devices](device-control/control-usb-devices-using-intune.md) ###### [Device Guard](device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) ####### [Memory integrity](windows-defender-exploit-guard/memory-integrity.md) ######## [Hardware qualifications](windows-defender-exploit-guard/requirements-and-deployment-planning-guidelines-for-virtualization-based-protection-of-code-integrity.md) ######## [Enable HVCI](windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md) +###### [Device Guard](device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) +####### [Memory integrity](windows-defender-exploit-guard/memory-integrity.md) +######## [Hardware qualifications](windows-defender-exploit-guard/requirements-and-deployment-planning-guidelines-for-virtualization-based-protection-of-code-integrity.md) +######## [Enable HVCI](windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md) ##### [Exploit protection](windows-defender-exploit-guard/enable-exploit-protection.md) ###### [Customize exploit protection](windows-defender-exploit-guard/customize-exploit-protection.md) ###### [Import/export configurations](windows-defender-exploit-guard/import-export-exploit-protection-emet-xml.md) From 0d3aafe0952a1709313e33615d9912b66816160e Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 14 Nov 2018 16:13:22 -0800 Subject: [PATCH 25/37] edits --- windows/security/threat-protection/TOC.md | 4 ---- 1 file changed, 4 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 0492d0595a..4266ad036b 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -129,10 +129,6 @@ ####### [Memory integrity](windows-defender-exploit-guard/memory-integrity.md) ######## [Hardware qualifications](windows-defender-exploit-guard/requirements-and-deployment-planning-guidelines-for-virtualization-based-protection-of-code-integrity.md) ######## [Enable HVCI](windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md) -###### [Device Guard](device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) -####### [Memory integrity](windows-defender-exploit-guard/memory-integrity.md) -######## [Hardware qualifications](windows-defender-exploit-guard/requirements-and-deployment-planning-guidelines-for-virtualization-based-protection-of-code-integrity.md) -######## [Enable HVCI](windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md) ##### [Exploit protection](windows-defender-exploit-guard/enable-exploit-protection.md) ###### [Customize exploit protection](windows-defender-exploit-guard/customize-exploit-protection.md) ###### [Import/export configurations](windows-defender-exploit-guard/import-export-exploit-protection-emet-xml.md) From 960c8dcb4af8b8e9aa74248b50e35e280e2396c3 Mon Sep 17 00:00:00 2001 From: Ben Alfasi Date: Thu, 15 Nov 2018 14:17:01 +0200 Subject: [PATCH 26/37] s --- .../exposed-apis-odata-samples.md | 54 +++++++++++++++++-- 1 file changed, 49 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md b/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md index a7384d989f..6908d2a23b 100644 --- a/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md +++ b/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md @@ -21,11 +21,55 @@ ms.date: 09/24/2018 > If you are not familiar with OData queries, please see: [OData V4 queries](https://www.odata.org/documentation/) -> ** Currently, [Machine](machine-windows-defender-advanced-threat-protection-new.md) and [Machine Action](machineaction-windows-defender-advanced-threat-protection-new.md) entities supports all OData queries.** -> ** [Alert](alerts-windows-defender-advanced-threat-protection-new.md) entity support all OData queries except $filter.** +- ** Currently, [Machine](machine-windows-defender-advanced-threat-protection-new.md) and [Machine Action](machineaction-windows-defender-advanced-threat-protection-new.md) entities supports all OData queries. ** +- ** [Alert](alerts-windows-defender-advanced-threat-protection-new.md) entity support all OData queries except $filter. ** ### Example 1 +**Get all the machines with the tag 'ExampleTag' ** + +``` +HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=machineTags/any(tag: tag eq 'ExampleTag') +``` + +**Response:** + +``` +HTTP/1.1 200 OK +Content-type: application/json +{ + "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Machines", + "value": [ + { + "id": "b9d4c51123327fb2a25db29ff1b8f3b64888e7ba", + "computerDnsName": "examples.dev.corp.microsoft.com", + "firstSeen": "2018-03-07T11:19:11.7234147Z", + "lastSeen": "2018-11-15T11:23:38.3196947Z", + "osPlatform": "Windows10", + "osVersion": "10.0.0.0", + "lastIpAddress": "123.17.255.241", + "lastExternalIpAddress": "123.220.196.180", + "agentVersion": "10.6400.18282.1001", + "osBuild": 18282, + "healthStatus": "Active", + "isAadJoined": true, + "machineTags": [ + "ExampleTag" + ], + "rbacGroupId": 5, + "rbacGroupName": "MiddleEast", + "riskScore": "North", + "aadDeviceId": null + }, + . + . + . + ] +} +``` + +### Example 2 + **Get all the machines with 'High' 'RiskScore'** ``` @@ -66,7 +110,7 @@ Content-type: application/json } ``` -### Example 2 +### Example 3 **Get top 100 machines with 'HealthStatus' not equals to 'Active'** @@ -108,7 +152,7 @@ Content-type: application/json } ``` -### Example 3 +### Example 4 **Get all the machines that last seen after 2018-10-20** @@ -150,7 +194,7 @@ Content-type: application/json } ``` -### Example 4 +### Example 5 **Get all the Anti-Virus scans that the user Analyst@examples.onmicrosoft.com created using WDATP** From 338298af58ddea79631eef0184b5698f74854c1f Mon Sep 17 00:00:00 2001 From: Ben Alfasi Date: Thu, 15 Nov 2018 14:28:35 +0200 Subject: [PATCH 27/37] d --- .../windows-defender-atp/exposed-apis-list.md | 2 +- ...-alerts-windows-defender-advanced-threat-protection-new.md | 4 ++-- ...achines-windows-defender-advanced-threat-protection-new.md | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/exposed-apis-list.md b/windows/security/threat-protection/windows-defender-atp/exposed-apis-list.md index aaf42956c2..101b345a77 100644 --- a/windows/security/threat-protection/windows-defender-atp/exposed-apis-list.md +++ b/windows/security/threat-protection/windows-defender-atp/exposed-apis-list.md @@ -38,7 +38,7 @@ ms.date: 30/07/2018 > To use a specific version, use this format: https://api.securitycenter.windows.com/api/{Version}. For example: https://api.securitycenter.windows.com/api/v1.0/alerts -> If you don't specify any version ( without /v1.0/ ) you will get to the latest version. +> If you don't specify any version (e.g., https://api.securitycenter.windows.com/api/alerts ) you will get to the latest version. Learn more about the individual supported entities where you can run API calls to and details such as HTTP request values, request headers and expected responses. diff --git a/windows/security/threat-protection/windows-defender-atp/get-user-related-alerts-windows-defender-advanced-threat-protection-new.md b/windows/security/threat-protection/windows-defender-atp/get-user-related-alerts-windows-defender-advanced-threat-protection-new.md index e109d17851..df5abdbe22 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-user-related-alerts-windows-defender-advanced-threat-protection-new.md +++ b/windows/security/threat-protection/windows-defender-atp/get-user-related-alerts-windows-defender-advanced-threat-protection-new.md @@ -41,7 +41,7 @@ Delegated (work or school account) | Alert.ReadWrite | 'Read and write alerts' GET /api/users/{id}/alerts ``` -**Note that the id is not the Full UPN, its only the user name. For example, for user1@contoso.com you will need to send /api/users/user1/alerts** +**Note that the id is not the full UPN, but only the user name. (e.g., to retrieve alerts for user1@contoso.com use /api/users/user1/alerts) ** ## Request headers @@ -54,7 +54,7 @@ Authorization | String | Bearer {token}. **Required**. Empty ## Response -If successful and user and alert exists - 200 OK. If user or alerts does not exist - 404 Not Found. +If successful and user and alert exist - 200 OK. If user or alerts do not exist - 404 Not Found. ## Example diff --git a/windows/security/threat-protection/windows-defender-atp/get-user-related-machines-windows-defender-advanced-threat-protection-new.md b/windows/security/threat-protection/windows-defender-atp/get-user-related-machines-windows-defender-advanced-threat-protection-new.md index 35a87d200a..ecf23df07d 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-user-related-machines-windows-defender-advanced-threat-protection-new.md +++ b/windows/security/threat-protection/windows-defender-atp/get-user-related-machines-windows-defender-advanced-threat-protection-new.md @@ -41,7 +41,7 @@ Delegated (work or school account) | Machine.ReadWrite | 'Read and write machine GET /api/users/{id}/machines ``` -**Note that the id is not the Full UPN, its only the user name. For example, for user1@contoso.com you will need to send /api/users/user1/machines** +**Note that the id is not the full UPN, but only the user name. (e.g., to retrieve machines for user1@contoso.com use /api/users/user1/machines) ** ## Request headers From c63c5ddcf5b4eadf6edd61b75284dd03d77133ca Mon Sep 17 00:00:00 2001 From: Ben Alfasi Date: Thu, 15 Nov 2018 15:06:27 +0200 Subject: [PATCH 28/37] s --- .../exposed-apis-odata-samples.md | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md b/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md index 6908d2a23b..fe3f9c3dd7 100644 --- a/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md +++ b/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md @@ -21,8 +21,8 @@ ms.date: 09/24/2018 > If you are not familiar with OData queries, please see: [OData V4 queries](https://www.odata.org/documentation/) -- ** Currently, [Machine](machine-windows-defender-advanced-threat-protection-new.md) and [Machine Action](machineaction-windows-defender-advanced-threat-protection-new.md) entities supports all OData queries. ** -- ** [Alert](alerts-windows-defender-advanced-threat-protection-new.md) entity support all OData queries except $filter. ** +- Currently, [Machine](machine-windows-defender-advanced-threat-protection-new.md) and [Machine Action](machineaction-windows-defender-advanced-threat-protection-new.md) entities supports all OData queries. +- [Alert](alerts-windows-defender-advanced-threat-protection-new.md) entity support all OData queries except $filter. ### Example 1 @@ -42,7 +42,7 @@ Content-type: application/json "value": [ { "id": "b9d4c51123327fb2a25db29ff1b8f3b64888e7ba", - "computerDnsName": "examples.dev.corp.microsoft.com", + "computerDnsName": "examples.dev.corp.Contoso.com", "firstSeen": "2018-03-07T11:19:11.7234147Z", "lastSeen": "2018-11-15T11:23:38.3196947Z", "osPlatform": "Windows10", @@ -57,7 +57,7 @@ Content-type: application/json "ExampleTag" ], "rbacGroupId": 5, - "rbacGroupName": "MiddleEast", + "rbacGroupName": "Developers", "riskScore": "North", "aadDeviceId": null }, @@ -86,7 +86,7 @@ Content-type: application/json "value": [ { "id": "e3a77eeddb83d581238792387b1239b01286b2f", - "computerDnsName": "examples.dev.corp.microsoft.com", + "computerDnsName": "examples.dev.corp.Contoso.com", "firstSeen": "2016-11-02T23:26:03.7882168Z", "lastSeen": "2018-11-12T10:27:08.708723Z", "osPlatform": "Windows10", @@ -99,7 +99,7 @@ Content-type: application/json "isAadJoined": true, "machineTags": [], "rbacGroupId": 5, - "rbacGroupName": "North", + "rbacGroupName": "Developers", "riskScore": "High", "aadDeviceId": "d90b0b99-1234-1234-1234-b91d50c6796a" }, @@ -128,7 +128,7 @@ Content-type: application/json "value": [ { "id": "1113333ddb83d581238792387b1239b01286b2f", - "computerDnsName": "examples.dev.corp.microsoft.com", + "computerDnsName": "examples.dev.corp.Contoso.com", "firstSeen": "2016-11-02T23:26:03.7882168Z", "lastSeen": "2018-11-12T10:27:08.708723Z", "osPlatform": "Windows10", @@ -141,7 +141,7 @@ Content-type: application/json "isAadJoined": true, "machineTags": [], "rbacGroupId": 5, - "rbacGroupName": "North", + "rbacGroupName": "Developers", "riskScore": "Medium", "aadDeviceId": "d90b0b99-1234-1234-1234-b91d50c6796a" }, @@ -182,8 +182,8 @@ Content-type: application/json "healthStatus": "Active", "isAadJoined": false, "machineTags": [], - "rbacGroupId": 4, - "rbacGroupName": "East", + "rbacGroupId": 5, + "rbacGroupName": "Developers", "riskScore": "None", "aadDeviceId": null }, From 7251d23c14423f1195bb9520a0a11621650f15b5 Mon Sep 17 00:00:00 2001 From: Ben Alfasi Date: Thu, 15 Nov 2018 15:32:14 +0200 Subject: [PATCH 29/37] s --- .../windows-defender-atp/exposed-apis-odata-samples.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md b/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md index fe3f9c3dd7..7562900100 100644 --- a/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md +++ b/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md @@ -19,7 +19,7 @@ ms.date: 09/24/2018 [!include[Prerelease information](prerelease.md)] -> If you are not familiar with OData queries, please see: [OData V4 queries](https://www.odata.org/documentation/) +- If you are not familiar with OData queries, please see: [OData V4 queries](https://www.odata.org/documentation/) - Currently, [Machine](machine-windows-defender-advanced-threat-protection-new.md) and [Machine Action](machineaction-windows-defender-advanced-threat-protection-new.md) entities supports all OData queries. - [Alert](alerts-windows-defender-advanced-threat-protection-new.md) entity support all OData queries except $filter. From 5c3f565742f31fa679e429a6aa9531d9cf066c58 Mon Sep 17 00:00:00 2001 From: Ben Alfasi Date: Thu, 15 Nov 2018 16:07:57 +0200 Subject: [PATCH 30/37] s --- .../windows-defender-atp/exposed-apis-odata-samples.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md b/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md index 7562900100..ed1ef8273e 100644 --- a/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md +++ b/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md @@ -70,7 +70,7 @@ Content-type: application/json ### Example 2 -**Get all the machines with 'High' 'RiskScore'** +- Get all the machines with 'High' 'RiskScore' ``` HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=riskScore eq 'High' @@ -112,7 +112,7 @@ Content-type: application/json ### Example 3 -**Get top 100 machines with 'HealthStatus' not equals to 'Active'** +- Get top 100 machines with 'HealthStatus' not equals to 'Active' ``` HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=healthStatus ne 'Active'&$top=100 @@ -154,7 +154,7 @@ Content-type: application/json ### Example 4 -**Get all the machines that last seen after 2018-10-20** +- Get all the machines that last seen after 2018-10-20 ``` HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=lastSeen gt 2018-10-20Z @@ -196,7 +196,7 @@ Content-type: application/json ### Example 5 -**Get all the Anti-Virus scans that the user Analyst@examples.onmicrosoft.com created using WDATP** +- Get all the Anti-Virus scans that the user Analyst@examples.onmicrosoft.com created using WDATP ``` HTTP GET https://api.securitycenter.windows.com/api/machineactions?$filter=requestor eq 'Analyst@WcdTestPrd.onmicrosoft.com' and type eq 'RunAntiVirusScan' From cfbc2094b4fcdb999f3183a579776080ebcae449 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 15 Nov 2018 10:30:07 -0800 Subject: [PATCH 31/37] edits --- ...compliant-algorithms-for-encryption-hashing-and-signing.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/security-policy-settings/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing.md b/windows/security/threat-protection/security-policy-settings/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing.md index bba7a2624e..ae91d8d14b 100644 --- a/windows/security/threat-protection/security-policy-settings/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing.md +++ b/windows/security/threat-protection/security-policy-settings/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium author: brianlic-msft -ms.date: 08/29/2017 +ms.date: 11/16/2018 --- # System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing @@ -50,7 +50,7 @@ Additionally, if a data drive is password-protected, it can be accessed by a FIP ### Best practices -- For use with TLS, set this policy to **Enabled**. Client devices with this policy setting enabled will be unable to communicate through digitally encrypted or signed protocols with servers that do not support these algorithms. Client devices that are connected to the network and do not support these algorithms cannot use servers that require the algorithms for network communications. If you enable this policy setting, you must also configure Internet Explorer to use TLS. +There are no best practices for this setting. Our previous guidance had recommended a setting of **Enabled**, primarily to align with US Federal government recommendations. [Windows security baselines](https://docs.microsoft.com/windows/security/threat-protection/windows-security-baselines) recommend this setting be **Not Defined**, meaning that we leave the decision to customers. For a deeper explanation, see [Why We’re Not Recommending “FIPS Mode” Anymore](https://blogs.technet.microsoft.com/secguide/2014/04/07/why-were-not-recommending-fips-mode-anymore/). ### Location From 6ec065f6a463c572190d721a7024fae2a56ca12d Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 15 Nov 2018 11:33:26 -0800 Subject: [PATCH 32/37] edits --- ...nable-virtualization-based-protection-of-code-integrity.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md b/windows/security/threat-protection/windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md index 98835fdcfd..325b6119b3 100644 --- a/windows/security/threat-protection/windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md +++ b/windows/security/threat-protection/windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md @@ -6,7 +6,7 @@ ms.mktglfcycl: deploy ms.localizationpriority: medium ms.author: justinha author: brianlic-msft -ms.date: 08/08/2018 +ms.date: 11/15/2018 --- # Enable virtualization-based protection of code integrity @@ -42,7 +42,7 @@ Enabling in Intune requires using the Code Integrity node in the [AppLocker CSP] 1. Use Group Policy Editor (gpedit.msc) to either edit an existing GPO or create a new one. 2. Navigate to **Computer Configuration** > **Administrative Templates** > **System** > **Device Guard**. 3. Double-click **Turn on Virtualization Based Security**. -4. Click **Enabled** and under **Virtualization Based Protection of Code Integrity**, select **Enabled with UEFI lock** to ensure HVCI cannot be enabled remotely or select **Enabled without UEFI lock**. +4. Click **Enabled** and under **Virtualization Based Protection of Code Integrity**, select **Enabled with UEFI lock** to ensure HVCI cannot be disabled remotely or select **Enabled without UEFI lock**. ![Enable HVCI using Group Policy](images\enable-hvci-gp.png) From 14cf506a3f559d551e35389ac00723748a3b81f3 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 15 Nov 2018 11:41:46 -0800 Subject: [PATCH 33/37] edited slider description --- .../user-account-control/how-user-account-control-works.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/user-account-control/how-user-account-control-works.md b/windows/security/identity-protection/user-account-control/how-user-account-control-works.md index 15f9ab184e..851edc7279 100644 --- a/windows/security/identity-protection/user-account-control/how-user-account-control-works.md +++ b/windows/security/identity-protection/user-account-control/how-user-account-control-works.md @@ -7,7 +7,7 @@ ms.mktglfcycl: operate ms.sitesec: library ms.pagetype: security author: brianlic-msft -ms.date: 09/19/2018 +ms.date: 11/16/2018 --- # How User Account Control works @@ -182,7 +182,7 @@ To better understand each component, review the table below:

Not recommended. Choose this only if it takes a long time to dim the desktop on your computer.


-

  • Never notify (Disable UAC) will:

    +

  • Never notify (Disable UAC prompts) will:

    • Not notify you when programs try to install software or make changes to your computer.
    • Not notify you when you make changes to Windows settings.
      • From 139d7df6666c20451b77780de2996f126dda415b Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 15 Nov 2018 12:29:46 -0800 Subject: [PATCH 34/37] removed video link --- .../secure-the-windows-10-boot-process.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/windows/security/information-protection/secure-the-windows-10-boot-process.md b/windows/security/information-protection/secure-the-windows-10-boot-process.md index 585264179f..cb56f52198 100644 --- a/windows/security/information-protection/secure-the-windows-10-boot-process.md +++ b/windows/security/information-protection/secure-the-windows-10-boot-process.md @@ -8,7 +8,7 @@ ms.pagetype: security ms.sitesec: library ms.localizationpriority: medium author: brianlic-msft -ms.date: 10/13/2017 +ms.date: 11/16/2018 --- # Secure the Windows 10 boot process @@ -122,9 +122,5 @@ Measured Boot uses the power of UEFI, TPM, and Windows 10 to give you a way to ## Summary Secure Boot, Trusted Boot, and Measured Boot create an architecture that is fundamentally resistant to bootkits and rootkits. In Windows 10, these features have the potential to eliminate kernel-level malware from your network. This is the most ground-breaking anti-malware solution that Windows has ever had; it’s leaps and bounds ahead of everything else. With Windows 10, you can truly trust the integrity of your operating system. -For more information: - -- Watch a [video demonstration of Secure Boot](https://technet.microsoft.com/windows/jj737995.aspx) - ## Additional resources - [Windows 10 Enterprise Evaluation](https://technet.microsoft.com/evalcenter/hh699156.aspx?ocid=wc-tn-wctc) From 296c6e149ab2c9ce6c6be162ef1c394931244e0e Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Thu, 15 Nov 2018 20:33:35 +0000 Subject: [PATCH 35/37] Merged PR 12860: add download link for Surface Pro 6 --- devices/surface/change-history-for-surface.md | 8 +++++++- ...he-latest-firmware-and-drivers-for-surface-devices.md | 9 ++++++++- 2 files changed, 15 insertions(+), 2 deletions(-) diff --git a/devices/surface/change-history-for-surface.md b/devices/surface/change-history-for-surface.md index 0e0ff5dcc7..3e1f85a04d 100644 --- a/devices/surface/change-history-for-surface.md +++ b/devices/surface/change-history-for-surface.md @@ -7,13 +7,19 @@ ms.sitesec: library author: jdeckerms ms.author: jdecker ms.topic: article -ms.date: 10/15/2018 +ms.date: 11/15/2018 --- # Change history for Surface documentation This topic lists new and updated topics in the Surface documentation library. +## November 2018 + +New or changed topic | Description +--- | --- +|[Download the latest firmware and drivers for Surface devices](deploy-the-latest-firmware-and-drivers-for-surface-devices.md) | Added Surface Pro 6 | + ## October 2018 New or changed topic | Description diff --git a/devices/surface/deploy-the-latest-firmware-and-drivers-for-surface-devices.md b/devices/surface/deploy-the-latest-firmware-and-drivers-for-surface-devices.md index 116df9446d..84f48dfd07 100644 --- a/devices/surface/deploy-the-latest-firmware-and-drivers-for-surface-devices.md +++ b/devices/surface/deploy-the-latest-firmware-and-drivers-for-surface-devices.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.pagetype: surface, devices ms.sitesec: library author: brecords -ms.date: 10/15/2018 +ms.date: 11/15/2018 ms.author: jdecker ms.topic: article --- @@ -67,8 +67,15 @@ Download the following updates for [Surface Pro (Model 1796) from the Microsoft Download the following updates for [Surface Pro with LTE Advanced from the Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=56278). + * SurfacePro_LTE_Win10_xxxxx_xxxxxx.msi – Cumulative firmware and driver update package for Windows 10 +## Surface Pro 6 + +Download the following updates for [Surface Pro 6 from the Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=57514). + +* SurfacePro6_Win10_17134_xxxxx_xxxxxx.msi + ## Surface Studio From 88962add9cd6fc1d766a021a0278e20734863298 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 15 Nov 2018 12:58:09 -0800 Subject: [PATCH 36/37] minor edits --- .../windows-defender-atp/exposed-apis-odata-samples.md | 8 ++++---- ...-alerts-windows-defender-advanced-threat-protection.md | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md b/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md index ed1ef8273e..dfc82df1d8 100644 --- a/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md +++ b/windows/security/threat-protection/windows-defender-atp/exposed-apis-odata-samples.md @@ -10,7 +10,7 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: medium -ms.date: 09/24/2018 +ms.date: 11/15/2018 --- # OData queries with Windows Defender ATP @@ -19,14 +19,14 @@ ms.date: 09/24/2018 [!include[Prerelease information](prerelease.md)] -- If you are not familiar with OData queries, please see: [OData V4 queries](https://www.odata.org/documentation/) +- If you are not familiar with OData queries, see: [OData V4 queries](https://www.odata.org/documentation/) - Currently, [Machine](machine-windows-defender-advanced-threat-protection-new.md) and [Machine Action](machineaction-windows-defender-advanced-threat-protection-new.md) entities supports all OData queries. - [Alert](alerts-windows-defender-advanced-threat-protection-new.md) entity support all OData queries except $filter. ### Example 1 -**Get all the machines with the tag 'ExampleTag' ** +**Get all the machines with the tag 'ExampleTag'** ``` HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=machineTags/any(tag: tag eq 'ExampleTag') @@ -196,7 +196,7 @@ Content-type: application/json ### Example 5 -- Get all the Anti-Virus scans that the user Analyst@examples.onmicrosoft.com created using WDATP +- Get all the Anti-Virus scans that the user Analyst@examples.onmicrosoft.com created using Windows Defender ATP ``` HTTP GET https://api.securitycenter.windows.com/api/machineactions?$filter=requestor eq 'Analyst@WcdTestPrd.onmicrosoft.com' and type eq 'RunAntiVirusScan' diff --git a/windows/security/threat-protection/windows-defender-atp/get-user-related-alerts-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/get-user-related-alerts-windows-defender-advanced-threat-protection.md index 6ea6b78d52..ec40578526 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-user-related-alerts-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/get-user-related-alerts-windows-defender-advanced-threat-protection.md @@ -11,7 +11,7 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: medium -ms.date: 12/08/2017 +ms.date: 11/15/2018 --- # Get user related alerts API (deprecated) From c8cd26866347d2a54a91714be513133aace6c7f0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dani=20Halfin=20=F0=9F=93=AC=F0=9F=94=A8?= Date: Thu, 15 Nov 2018 22:59:08 +0000 Subject: [PATCH 37/37] Merged PR 12876: endpoints 1809 push --- .openpublishing.redirection.json | 5 + windows/privacy/TOC.md | 5 +- ...ts.md => manage-windows-1709-endpoints.md} | 358 ++++++------ .../privacy/manage-windows-1803-endpoints.md | 498 +++++++++++++++++ .../privacy/manage-windows-1809-endpoints.md | 528 ++++++++++++++++++ 5 files changed, 1213 insertions(+), 181 deletions(-) rename windows/privacy/{manage-windows-endpoints.md => manage-windows-1709-endpoints.md} (68%) create mode 100644 windows/privacy/manage-windows-1803-endpoints.md create mode 100644 windows/privacy/manage-windows-1809-endpoints.md diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 6c0356d667..78189003c5 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -13889,6 +13889,11 @@ "source_path": "education/windows/windows-automatic-redeployment.md", "redirect_url": "/education/windows/autopilot-reset", "redirect_document_id": true +}, +{ +"source_path": "windows/privacy/manage-windows-endpoints.md", +"redirect_url": "/windows/privacy/manage-windows-1809-endpoints", +"redirect_document_id": true } ] } diff --git a/windows/privacy/TOC.md b/windows/privacy/TOC.md index 6148d1201c..5a0db3b73e 100644 --- a/windows/privacy/TOC.md +++ b/windows/privacy/TOC.md @@ -14,7 +14,10 @@ ## Full level categories ### [Windows 10, version 1709 and newer diagnostic data for the Full level](windows-diagnostic-data.md) ### [Windows 10, version 1703 diagnostic data for the Full level](windows-diagnostic-data-1703.md) -## [Manage Windows 10 connection endpoints](manage-windows-endpoints.md) +## Manage Windows 10 connection endpoints +### [Connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md) +### [Connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md) +### [Connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md) ### [Windows 10, version 1709, connection endpoints for non-Enterprise editions](windows-endpoints-1709-non-enterprise-editions.md) ### [Windows 10, version 1803, connection endpoints for non-Enterprise editions](windows-endpoints-1803-non-enterprise-editions.md) ## [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) diff --git a/windows/privacy/manage-windows-endpoints.md b/windows/privacy/manage-windows-1709-endpoints.md similarity index 68% rename from windows/privacy/manage-windows-endpoints.md rename to windows/privacy/manage-windows-1709-endpoints.md index c324f877dd..db62a206fb 100644 --- a/windows/privacy/manage-windows-endpoints.md +++ b/windows/privacy/manage-windows-1709-endpoints.md @@ -1,5 +1,5 @@ --- -title: Windows 10 connection endpoints +title: Connection endpoints for Windows 10, version 1709 description: Explains what Windows 10 endpoints are used for, how to turn off traffic to them, and the impact. keywords: privacy, manage connections to Microsoft, Windows 10, Windows Server 2016 ms.prod: w10 @@ -10,11 +10,11 @@ author: danihalfin ms.author: daniha ms.date: 6/26/2018 --- -# Manage Windows 10 connection endpoints +# Manage connection endpoints for Windows 10, version 1709 **Applies to** -- Windows 10, version 1709 and later +- Windows 10, version 1709 Some Windows components, app, and related services transfer data to Microsoft network endpoints. Some examples include: @@ -46,102 +46,101 @@ We used the following methodology to derive these network endpoints: The following endpoint is used to download updates to the Weather app Live Tile. If you [turn off traffic to this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#live-tiles), no Live Tiles will be updated. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| explorer | HTTP | tile-service.weather.microsoft.com | 1709 | -| | HTTP | blob.weather.microsoft.com | 1803 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| explorer | HTTP | tile-service.weather.microsoft.com | The following endpoint is used for OneNote Live Tile. To turn off traffic for this endpoint, either uninstall OneNote or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | HTTPS | cdn.onenote.net/livetile/?Language=en-US | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | cdn.onenote.net/livetile/?Language=en-US | The following endpoints are used for Twitter updates. To turn off traffic for these endpoints, either uninstall Twitter or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | HTTPS | wildcard.twimg.com | 1709 | -| svchost.exe | | oem.twimg.com/windows/tile.xml | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | wildcard.twimg.com | +| svchost.exe | | oem.twimg.com/windows/tile.xml | The following endpoint is used for Facebook updates. To turn off traffic for this endpoint, either uninstall Facebook or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | | star-mini.c10r.facebook.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | star-mini.c10r.facebook.com | The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office Online. To turn off traffic for this endpoint, either uninstall the Photos app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| WindowsApps\Microsoft.Windows.Photos | HTTPS | evoke-windowsservices-tas.msedge.net | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| WindowsApps\Microsoft.Windows.Photos | HTTPS | evoke-windowsservices-tas.msedge.net | The following endpoint is used for Candy Crush Saga updates. To turn off traffic for this endpoint, either uninstall Candy Crush Saga or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | TLS v1.2 | candycrushsoda.king.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | TLS v1.2 | candycrushsoda.king.com | The following endpoint is used for by the Microsoft Wallet app. To turn off traffic for this endpoint, either uninstall the Wallet app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| system32\AppHostRegistrationVerifier.exe | HTTPS | wallet.microsoft.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| system32\AppHostRegistrationVerifier.exe | HTTPS | wallet.microsoft.com | The following endpoint is used by the Groove Music app for update HTTP handler status. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-apps-for-websites), apps for websites won't work and customers who visit websites (such as mediaredirect.microsoft.com) that are registered with their associated app (such as Groove Music) will stay at the website and won't be able to directly launch the app. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| system32\AppHostRegistrationVerifier.exe | HTTPS | mediaredirect.microsoft.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| system32\AppHostRegistrationVerifier.exe | HTTPS | mediaredirect.microsoft.com | ## Cortana and Search The following endpoint is used to get images that are used for Microsoft Store suggestions. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana), you will block images that are used for Microsoft Store suggestions. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| searchui | HTTPS |store-images.s-microsoft.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| searchui | HTTPS |store-images.s-microsoft.com | The following endpoint is used to update Cortana greetings, tips, and Live Tiles. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana), you will block updates to Cortana greetings, tips, and Live Tiles. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| backgroundtaskhost | HTTPS | www.bing.com/client | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| backgroundtaskhost | HTTPS | www.bing.com/client | The following endpoint is used to configure parameters, such as how often the Live Tile is updated. It's also used to activate experiments. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana), parameters would not be updated and the device would no longer participate in experiments. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| backgroundtaskhost | HTTPS | www.bing.com/proactive | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| backgroundtaskhost | HTTPS | www.bing.com/proactive | The following endpoint is used by Cortana to report diagnostic and diagnostic data information. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana), Microsoft won't be aware of issues with Cortana and won't be able to fix them. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| searchui
      backgroundtaskhost | HTTPS | www.bing.com/threshold/xls.aspx | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| searchui
      backgroundtaskhost | HTTPS | www.bing.com/threshold/xls.aspx | ## Certificates @@ -152,142 +151,139 @@ These settings are critical for both Windows security and the overall security o We do not recommend blocking this endpoint. If traffic to this endpoint is turned off, Windows no longer automatically downloads certificates known to be fraudulent, which increases the attack vector on the device. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| svchost | HTTP | ctldl.windowsupdate.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTP | ctldl.windowsupdate.com | ## Device authentication The following endpoint is used to authenticate a device. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), the device will not be authenticated. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | HTTPS | login.live.com/ppsecure | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | login.live.com/ppsecure | ## Device metadata The following endpoint is used to retrieve device metadata. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-devinst), metadata will not be updated for the device. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | | dmd.metaservices.microsoft.com.akadns.net | 1709 | -| | HTTP | dmd.metaservices.microsoft.com | 1803 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | dmd.metaservices.microsoft.com.akadns.net | ## Diagnostic Data The following endpoint is used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| svchost | | cy2.vortex.data.microsoft.com.akadns.net | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | | cy2.vortex.data.microsoft.com.akadns.net | The following endpoint is used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| svchost | | v10.vortex-win.data.microsoft.com/collect/v1 | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | | v10.vortex-win.data.microsoft.com/collect/v1 | The following endpoints are used by Windows Error Reporting. To turn off traffic for these endpoints, enable the following Group Policy: Administrative Templates > Windows Components > Windows Error Reporting > Disable Windows Error Reporting. This means error reporting information will not be sent back to Microsoft. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| wermgr | | watson.telemetry.microsoft.com | 1709 | -| | TLS v1.2 | modern.watson.data.microsoft.com.akadns.net | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| wermgr | | watson.telemetry.microsoft.com | +| | TLS v1.2 | modern.watson.data.microsoft.com.akadns.net | ## Font streaming The following endpoints are used to download fonts on demand. If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#font-streaming), you will not be able to download fonts on demand. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| svchost | | fs.microsoft.com | 1709 | -| | | fs.microsoft.com/fs/windows/config.json | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | | fs.microsoft.com | +| | | fs.microsoft.com/fs/windows/config.json | ## Licensing The following endpoint is used for online activation and some app licensing. To turn off traffic for this endpoint, disable the Windows License Manager Service. This will also block online activation and app licensing may not work. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| licensemanager | HTTPS | licensing.mp.microsoft.com/v7.0/licenses/content | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| licensemanager | HTTPS | licensing.mp.microsoft.com/v7.0/licenses/content | ## Location The following endpoint is used for location data. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-location), apps cannot use location data. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | HTTP | location-inference-westus.cloudapp.net | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | location-inference-westus.cloudapp.net | ## Maps The following endpoint is used to check for updates to maps that have been downloaded for offline use. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-offlinemaps), offline maps will not be updated. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| svchost | HTTPS | *g.akamaiedge.net | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | *g.akamaiedge.net | ## Microsoft account The following endpoints are used for Microsoft accounts to sign in. If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-microsoft-account), users cannot sign in with Microsoft accounts. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | | login.msa.akadns6.net | 1709 | -| system32\Auth.Host.exe | HTTPS | auth.gfx.ms | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | login.msa.akadns6.net | +| system32\Auth.Host.exe | HTTPS | auth.gfx.ms | ## Microsoft Store The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#live-tiles), push notifications will no longer work, including MDM device management, mail synchronization, settings synchronization. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | | *.wns.windows.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | *.wns.windows.com | The following endpoint is used to revoke licenses for malicious apps in the Microsoft Store. To turn off traffic for this endpoint, either uninstall the app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | HTTP | storecatalogrevocation.storequality.microsoft.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | storecatalogrevocation.storequality.microsoft.com | The following endpoints are used to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps). If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore), the image files won't be downloaded, and apps cannot be installed or updated from the Microsoft Store. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | HTTPS | img-prod-cms-rt-microsoft-com.akamaized.net | 1709 | -| backgroundtransferhost | HTTPS | store-images.microsoft.com | 1803 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | img-prod-cms-rt-microsoft-com.akamaized.net | The following endpoints are used to communicate with Microsoft Store. If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore), apps cannot be installed or updated from the Microsoft Store. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | HTTP | storeedgefd.dsx.mp.microsoft.com | 1709 | -| | HTTP | pti.store.microsoft.com | 1709 | -||TLS v1.2|cy2.\*.md.mp.microsoft.com.\*.| 1709 | -| svchost | HTTPS | displaycatalog.mp.microsoft.com | 1803 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | storeedgefd.dsx.mp.microsoft.com | +| | HTTP | pti.store.microsoft.com | +||TLS v1.2|cy2.\*.md.mp.microsoft.com.\*.| ## Network Connection Status Indicator (NCSI) Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-ncsi), NCSI won't be able to determine if the device is connected to the Internet and the network status tray icon will show a warning. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | HTTP | www.msftconnecttest.com/connecttest.txt | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | www.msftconnecttest.com/connecttest.txt | ## Office @@ -295,74 +291,73 @@ The following endpoints are used to connect to the Office 365 portal's shared in You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | | *.a-msedge.net | 1709 | -| hxstr | | *.c-msedge.net | 1709 | -| | | *.e-msedge.net | 1709 | -| | | *.s-msedge.net | 1709 | -| | HTTPS | ocos-office365-s2s.msedge.net | 1803 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | *.a-msedge.net | +| hxstr | | *.c-msedge.net | +| | | *.e-msedge.net | +| | | *.s-msedge.net | The following endpoint is used to connect to the Office 365 portal's shared infrastructure, including Office Online. For more info, see [Office 365 URLs and IP address ranges](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US#BKMK_Portal-identity). You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| system32\Auth.Host.exe | HTTPS | outlook.office365.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| system32\Auth.Host.exe | HTTPS | outlook.office365.com | The following endpoint is OfficeHub traffic used to get the metadata of Office apps. To turn off traffic for this endpoint, either uninstall the app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -|Windows Apps\Microsoft.Windows.Photos|HTTPS|client-office365-tas.msedge.net| 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +|Windows Apps\Microsoft.Windows.Photos|HTTPS|client-office365-tas.msedge.net| ## OneDrive The following endpoint is a redirection service that’s used to automatically update URLs. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-onedrive), anything that relies on g.live.com to get updated URL information will no longer work. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| onedrive | HTTP \ HTTPS | g.live.com/1rewlive5skydrive/ODSUProduction | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| onedrive | HTTP \ HTTPS | g.live.com/1rewlive5skydrive/ODSUProduction | The following endpoint is used by OneDrive for Business to download and verify app updates. For more info, see [Office 365 URLs and IP address ranges](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US). To turn off traffic for this endpoint, uninstall OneDrive for Business. In this case, your device will not able to get OneDrive for Business app updates. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| onedrive | HTTPS | oneclient.sfx.ms | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| onedrive | HTTPS | oneclient.sfx.ms | ## Settings The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), an app that uses this endpoint may stop working. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| dmclient | | cy2.settings.data.microsoft.com.akadns.net | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| dmclient | | cy2.settings.data.microsoft.com.akadns.net | The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), an app that uses this endpoint may stop working. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| dmclient | HTTPS | settings.data.microsoft.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| dmclient | HTTPS | settings.data.microsoft.com | The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as Windows Connected User Experiences and Telemetry component and Windows Insider Program use it. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), an app that uses this endpoint may stop working. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| svchost | HTTPS | settings-win.data.microsoft.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | settings-win.data.microsoft.com | ## Skype The following endpoint is used to retrieve Skype configuration values. To turn off traffic for this endpoint, either uninstall the app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -|microsoft.windowscommunicationsapps.exe | HTTPS | config.edge.skype.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +|microsoft.windowscommunicationsapps.exe | HTTPS | config.edge.skype.com | @@ -371,102 +366,101 @@ The following endpoint is used to retrieve Skype configuration values. To turn o The following endpoint is used for Windows Defender when Cloud-based Protection is enabled. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender), the device will not use Cloud-based Protection. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | | wdcp.microsoft.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | wdcp.microsoft.com | The following endpoints are used for Windows Defender definition updates. If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender), definitions will not be updated. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | | definitionupdates.microsoft.com | 1709 | -|MpCmdRun.exe|HTTPS|go.microsoft.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | definitionupdates.microsoft.com | +|MpCmdRun.exe|HTTPS|go.microsoft.com | ## Windows Spotlight The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips. If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-spotlight), Windows Spotlight will still try to deliver new lock screen images and updated content but it will fail; suggested apps, Microsoft account notifications, and Windows tips will not be downloaded. For more information, see [Windows Spotlight](/windows/configuration/windows-spotlight). -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| backgroundtaskhost | HTTPS | arc.msn.com | 1709 | -| backgroundtaskhost | | g.msn.com.nsatc.net | 1709 | -| |TLS v1.2| *.search.msn.com | 1709 | -| | HTTPS | ris.api.iris.microsoft.com | 1709 | -| | HTTPS | query.prod.cms.rt.microsoft.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| backgroundtaskhost | HTTPS | arc.msn.com | +| backgroundtaskhost | | g.msn.com.nsatc.net | +| |TLS v1.2| *.search.msn.com | +| | HTTPS | ris.api.iris.microsoft.com | +| | HTTPS | query.prod.cms.rt.microsoft.com | ## Windows Update The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-updates), Windows Update downloads will not be managed, as critical metadata that is used to make downloads more resilient is blocked. Downloads may be impacted by corruption (resulting in re-downloads of full files). Additionally, downloads of the same update by multiple devices on the same local network will not use peer devices for bandwidth reduction. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| svchost | HTTPS | *.prod.do.dsp.mp.microsoft.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | *.prod.do.dsp.mp.microsoft.com | The following endpoints are used to download operating system patches and updates. If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the device will not be able to download updates for the operating system. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| svchost | HTTP | *.windowsupdate.com | 1709 | -| | HTTP | fg.download.windowsupdate.com.c.footprint.net | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTP | *.windowsupdate.com | +| | HTTP | fg.download.windowsupdate.com.c.footprint.net | The following endpoint is used by the Highwinds Content Delivery Network to perform Windows updates. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the device will not perform updates. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | | cds.d2s7q6s2.hwcdn.net | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | cds.d2s7q6s2.hwcdn.net | The following endpoints are used by the Verizon Content Delivery Network to perform Windows updates. If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the device will not perform updates. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | HTTP | *wac.phicdn.net | 1709 | -| | | *wac.edgecastcdn.net | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | *wac.phicdn.net | +| | | *wac.edgecastcdn.net | The following endpoint is used to download apps and Windows Insider Preview builds from the Microsoft Store. Time Limited URL (TLU) is a mechanism for protecting the content. For example, it prevents someone from copying the URL and then getting access to the app that the person has not acquired). If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the updating functionality on this device is essentially in a disabled state, resulting in user unable to get apps from the Store, get latest version of Windows, and so on. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| svchost | | *.tlu.dl.delivery.mp.microsoft.com.c.footprint.net | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | | *.tlu.dl.delivery.mp.microsoft.com.c.footprint.net | The following endpoint is used to download apps from the Microsoft Store. It's used as part of calculating the right ranges for apps. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), users of the device will not able to get apps from the Microsoft Store. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| svchost | | emdl.ws.microsoft.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | | emdl.ws.microsoft.com | The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store. If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the device will not be able to connect to Windows Update and Microsoft Update to help keep the device secure. Also, the device will not be able to acquire and update apps from the Store. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| svchost | HTTPS | fe2.update.microsoft.com | 1709 | -| svchost | | fe3.delivery.mp.microsoft.com | 1709 | -| | | fe3.delivery.dsp.mp.microsoft.com.nsatc.net | 1709 | -| svchost | HTTPS | sls.update.microsoft.com | 1709 | -| | HTTP | *.dl.delivery.mp.microsoft.com | 1803 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | fe2.update.microsoft.com | +| svchost | | fe3.delivery.mp.microsoft.com | +| | | fe3.delivery.dsp.mp.microsoft.com.nsatc.net | +| svchost | HTTPS | sls.update.microsoft.com | The following endpoint is used for content regulation. If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the Windows Update Agent will be unable to contact the endpoint and fallback behavior will be used. This may result in content being either incorrectly downloaded or not downloaded at all. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| svchost | HTTPS | tsfe.trafficshaping.dsp.mp.microsoft.com | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | tsfe.trafficshaping.dsp.mp.microsoft.com | The following endpoints are used to download content. If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), you will block any content from being downloaded. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -| | | a122.dscd.akamai.net | 1709 | -| | | a1621.g.akamai.net | 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | a122.dscd.akamai.net | +| | | a1621.g.akamai.net | ## Microsoft forward link redirection service (FWLink) @@ -474,11 +468,15 @@ The following endpoint is used by the Microsoft forward link redirection service If you disable this endpoint, Windows Defender won't be able to update its malware definitions; links from Windows and other Microsoft products to the Web won't work; and PowerShell updateable Help won't update. To disable the traffic, instead disable the traffic that's getting forwarded. -| Source process | Protocol | Destination | Applies from Windows 10 version | -|----------------|----------|------------|----------------------------------| -|Various|HTTPS|go.microsoft.com| 1709 | +| Source process | Protocol | Destination | +|----------------|----------|------------| +|Various|HTTPS|go.microsoft.com| -## Other Windows 10 editions +## Other Windows 10 versions and editions + +To view endpoints for other versions of Windows 10 enterprise, see: +- [Manage connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md) To view endpoints for non-Enterprise Windows 10 editions, see: - [Windows 10, version 1709, connection endpoints for non-Enterprise editions](windows-endpoints-1709-non-enterprise-editions.md) diff --git a/windows/privacy/manage-windows-1803-endpoints.md b/windows/privacy/manage-windows-1803-endpoints.md new file mode 100644 index 0000000000..56cece92c2 --- /dev/null +++ b/windows/privacy/manage-windows-1803-endpoints.md @@ -0,0 +1,498 @@ +--- +title: Connection endpoints for Windows 10, version 1803 +description: Explains what Windows 10 endpoints are used for, how to turn off traffic to them, and the impact. +keywords: privacy, manage connections to Microsoft, Windows 10, Windows Server 2016 +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.localizationpriority: high +author: danihalfin +ms.author: daniha +ms.date: 6/26/2018 +--- +# Manage connection endpoints for Windows 10, version 1803 + +**Applies to** + +- Windows 10, version 1803 + +Some Windows components, app, and related services transfer data to Microsoft network endpoints. Some examples include: + +- Connecting to Microsoft Office and Windows sites to download the latest app and security updates. +- Connecting to email servers to send and receive email. +- Connecting to the web for every day web browsing. +- Connecting to the cloud to store and access backups. +- Using your location to show a weather forecast. + +This article lists different endpoints that are available on a clean installation of Windows 10, version 1709 and later. +Details about the different ways to control traffic to these endpoints are covered in [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). +Where applicable, each endpoint covered in this topic includes a link to specific details about how to control traffic to it. + +We used the following methodology to derive these network endpoints: + +1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. +2. Leave the devices running idle for a week (that is, a user is not interacting with the system/device). +3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. +4. Compile reports on traffic going to public IP addresses. +5. The test virtual machine was logged in using a local account and was not joined to a domain or Azure Active Directory. + +> [!NOTE] +> Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time. + +## Windows 10 Enterprise connection endpoints + +## Apps + +The following endpoint is used to download updates to the Weather app Live Tile. +If you [turn off traffic to this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#live-tiles), no Live Tiles will be updated. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| explorer | HTTP | tile-service.weather.microsoft.com | +| | HTTP | blob.weather.microsoft.com | + +The following endpoint is used for OneNote Live Tile. +To turn off traffic for this endpoint, either uninstall OneNote or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). +If you disable the Microsoft store, other Store apps cannot be installed or updated. +Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | cdn.onenote.net/livetile/?Language=en-US | + +The following endpoints are used for Twitter updates. +To turn off traffic for these endpoints, either uninstall Twitter or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). +If you disable the Microsoft store, other Store apps cannot be installed or updated. +Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | wildcard.twimg.com | +| svchost.exe | | oem.twimg.com/windows/tile.xml | + +The following endpoint is used for Facebook updates. +To turn off traffic for this endpoint, either uninstall Facebook or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). +If you disable the Microsoft store, other Store apps cannot be installed or updated. +Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | star-mini.c10r.facebook.com | + +The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office Online. +To turn off traffic for this endpoint, either uninstall the Photos app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). +If you disable the Microsoft store, other Store apps cannot be installed or updated. +Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| WindowsApps\Microsoft.Windows.Photos | HTTPS | evoke-windowsservices-tas.msedge.net | + +The following endpoint is used for Candy Crush Saga updates. +To turn off traffic for this endpoint, either uninstall Candy Crush Saga or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). +If you disable the Microsoft store, other Store apps cannot be installed or updated. +Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | TLS v1.2 | candycrushsoda.king.com | + +The following endpoint is used for by the Microsoft Wallet app. +To turn off traffic for this endpoint, either uninstall the Wallet app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). +If you disable the Microsoft store, other Store apps cannot be installed or updated. +Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| system32\AppHostRegistrationVerifier.exe | HTTPS | wallet.microsoft.com | + +The following endpoint is used by the Groove Music app for update HTTP handler status. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-apps-for-websites), apps for websites won't work and customers who visit websites (such as mediaredirect.microsoft.com) that are registered with their associated app (such as Groove Music) will stay at the website and won't be able to directly launch the app. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| system32\AppHostRegistrationVerifier.exe | HTTPS | mediaredirect.microsoft.com | + +## Cortana and Search + +The following endpoint is used to get images that are used for Microsoft Store suggestions. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana), you will block images that are used for Microsoft Store suggestions. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| searchui | HTTPS |store-images.s-microsoft.com | + +The following endpoint is used to update Cortana greetings, tips, and Live Tiles. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana), you will block updates to Cortana greetings, tips, and Live Tiles. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| backgroundtaskhost | HTTPS | www.bing.com/client | + +The following endpoint is used to configure parameters, such as how often the Live Tile is updated. It's also used to activate experiments. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana), parameters would not be updated and the device would no longer participate in experiments. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| backgroundtaskhost | HTTPS | www.bing.com/proactive | + +The following endpoint is used by Cortana to report diagnostic and diagnostic data information. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana), Microsoft won't be aware of issues with Cortana and won't be able to fix them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| searchui
      backgroundtaskhost | HTTPS | www.bing.com/threshold/xls.aspx | + +## Certificates + +The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available. It is possible to [turn off traffic to this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#automatic-root-certificates-update), but that is not recommended because when root certificates are updated over time, applications and websites may stop working because they did not receive an updated root certificate the application uses. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTP | ctldl.windowsupdate.com | + +The following endpoints are used to download certificates that are publicly known to be fraudulent. +These settings are critical for both Windows security and the overall security of the Internet. +We do not recommend blocking this endpoint. +If traffic to this endpoint is turned off, Windows no longer automatically downloads certificates known to be fraudulent, which increases the attack vector on the device. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTP | ctldl.windowsupdate.com | + +## Device authentication + +The following endpoint is used to authenticate a device. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), the device will not be authenticated. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | login.live.com/ppsecure | + +## Device metadata + +The following endpoint is used to retrieve device metadata. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-devinst), metadata will not be updated for the device. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | dmd.metaservices.microsoft.com.akadns.net | +| | HTTP | dmd.metaservices.microsoft.com | + +## Diagnostic Data + +The following endpoint is used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | | cy2.vortex.data.microsoft.com.akadns.net | + +The following endpoint is used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | | v10.vortex-win.data.microsoft.com/collect/v1 | + +The following endpoints are used by Windows Error Reporting. +To turn off traffic for these endpoints, enable the following Group Policy: Administrative Templates > Windows Components > Windows Error Reporting > Disable Windows Error Reporting. This means error reporting information will not be sent back to Microsoft. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| wermgr | | watson.telemetry.microsoft.com | +| | TLS v1.2 | modern.watson.data.microsoft.com.akadns.net | + +## Font streaming + +The following endpoints are used to download fonts on demand. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#font-streaming), you will not be able to download fonts on demand. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | | fs.microsoft.com | +| | | fs.microsoft.com/fs/windows/config.json | + +## Licensing + +The following endpoint is used for online activation and some app licensing. +To turn off traffic for this endpoint, disable the Windows License Manager Service. This will also block online activation and app licensing may not work. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| licensemanager | HTTPS | licensing.mp.microsoft.com/v7.0/licenses/content | + +## Location + +The following endpoint is used for location data. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-location), apps cannot use location data. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | location-inference-westus.cloudapp.net | + +## Maps + +The following endpoint is used to check for updates to maps that have been downloaded for offline use. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-offlinemaps), offline maps will not be updated. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | *g.akamaiedge.net | + +## Microsoft account + +The following endpoints are used for Microsoft accounts to sign in. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-microsoft-account), users cannot sign in with Microsoft accounts. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | login.msa.akadns6.net | +| system32\Auth.Host.exe | HTTPS | auth.gfx.ms | + +## Microsoft Store + +The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#live-tiles), push notifications will no longer work, including MDM device management, mail synchronization, settings synchronization. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | *.wns.windows.com | + +The following endpoint is used to revoke licenses for malicious apps in the Microsoft Store. +To turn off traffic for this endpoint, either uninstall the app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | storecatalogrevocation.storequality.microsoft.com | + +The following endpoints are used to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps). +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore), the image files won't be downloaded, and apps cannot be installed or updated from the Microsoft Store. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | img-prod-cms-rt-microsoft-com.akamaized.net | +| backgroundtransferhost | HTTPS | store-images.microsoft.com | + +The following endpoints are used to communicate with Microsoft Store. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore), apps cannot be installed or updated from the Microsoft Store. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | storeedgefd.dsx.mp.microsoft.com | +| | HTTP | pti.store.microsoft.com | +||TLS v1.2|cy2.\*.md.mp.microsoft.com.\*.| +| svchost | HTTPS | displaycatalog.mp.microsoft.com | + +## Network Connection Status Indicator (NCSI) + +Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-ncsi), NCSI won't be able to determine if the device is connected to the Internet and the network status tray icon will show a warning. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | www.msftconnecttest.com/connecttest.txt | + +## Office + +The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office Online. For more info, see [Office 365 URLs and IP address ranges](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US#BKMK_Portal-identity). +You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. +If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | *.a-msedge.net | +| hxstr | | *.c-msedge.net | +| | | *.e-msedge.net | +| | | *.s-msedge.net | +| | HTTPS | ocos-office365-s2s.msedge.net | + +The following endpoint is used to connect to the Office 365 portal's shared infrastructure, including Office Online. For more info, see [Office 365 URLs and IP address ranges](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US#BKMK_Portal-identity). +You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. +If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| system32\Auth.Host.exe | HTTPS | outlook.office365.com | + +The following endpoint is OfficeHub traffic used to get the metadata of Office apps. To turn off traffic for this endpoint, either uninstall the app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +|Windows Apps\Microsoft.Windows.Photos|HTTPS|client-office365-tas.msedge.net| + +## OneDrive + +The following endpoint is a redirection service that’s used to automatically update URLs. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-onedrive), anything that relies on g.live.com to get updated URL information will no longer work. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| onedrive | HTTP \ HTTPS | g.live.com/1rewlive5skydrive/ODSUProduction | + +The following endpoint is used by OneDrive for Business to download and verify app updates. For more info, see [Office 365 URLs and IP address ranges](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US). +To turn off traffic for this endpoint, uninstall OneDrive for Business. In this case, your device will not able to get OneDrive for Business app updates. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| onedrive | HTTPS | oneclient.sfx.ms | + +## Settings + +The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), an app that uses this endpoint may stop working. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| dmclient | | cy2.settings.data.microsoft.com.akadns.net | + +The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), an app that uses this endpoint may stop working. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| dmclient | HTTPS | settings.data.microsoft.com | + +The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as Windows Connected User Experiences and Telemetry component and Windows Insider Program use it. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), an app that uses this endpoint may stop working. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | settings-win.data.microsoft.com | + +## Skype + +The following endpoint is used to retrieve Skype configuration values. To turn off traffic for this endpoint, either uninstall the app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +|microsoft.windowscommunicationsapps.exe | HTTPS | config.edge.skype.com | + + + +## Windows Defender + +The following endpoint is used for Windows Defender when Cloud-based Protection is enabled. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender), the device will not use Cloud-based Protection. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | wdcp.microsoft.com | + +The following endpoints are used for Windows Defender definition updates. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender), definitions will not be updated. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | definitionupdates.microsoft.com | +|MpCmdRun.exe|HTTPS|go.microsoft.com | + +## Windows Spotlight + +The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-spotlight), Windows Spotlight will still try to deliver new lock screen images and updated content but it will fail; suggested apps, Microsoft account notifications, and Windows tips will not be downloaded. For more information, see [Windows Spotlight](/windows/configuration/windows-spotlight). + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| backgroundtaskhost | HTTPS | arc.msn.com | +| backgroundtaskhost | | g.msn.com.nsatc.net | +| |TLS v1.2| *.search.msn.com | +| | HTTPS | ris.api.iris.microsoft.com | +| | HTTPS | query.prod.cms.rt.microsoft.com | + +## Windows Update + +The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-updates), Windows Update downloads will not be managed, as critical metadata that is used to make downloads more resilient is blocked. Downloads may be impacted by corruption (resulting in re-downloads of full files). Additionally, downloads of the same update by multiple devices on the same local network will not use peer devices for bandwidth reduction. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | *.prod.do.dsp.mp.microsoft.com | + +The following endpoints are used to download operating system patches and updates. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the device will not be able to download updates for the operating system. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTP | *.windowsupdate.com | +| | HTTP | fg.download.windowsupdate.com.c.footprint.net | + +The following endpoint is used by the Highwinds Content Delivery Network to perform Windows updates. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the device will not perform updates. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | cds.d2s7q6s2.hwcdn.net | + +The following endpoints are used by the Verizon Content Delivery Network to perform Windows updates. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the device will not perform updates. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | *wac.phicdn.net | +| | | *wac.edgecastcdn.net | + +The following endpoint is used to download apps and Windows Insider Preview builds from the Microsoft Store. Time Limited URL (TLU) is a mechanism for protecting the content. For example, it prevents someone from copying the URL and then getting access to the app that the person has not acquired). +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the updating functionality on this device is essentially in a disabled state, resulting in user unable to get apps from the Store, get latest version of Windows, and so on. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | | *.tlu.dl.delivery.mp.microsoft.com.c.footprint.net | + +The following endpoint is used to download apps from the Microsoft Store. It's used as part of calculating the right ranges for apps. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), users of the device will not able to get apps from the Microsoft Store. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | | emdl.ws.microsoft.com | + +The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the device will not be able to connect to Windows Update and Microsoft Update to help keep the device secure. Also, the device will not be able to acquire and update apps from the Store. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | fe2.update.microsoft.com | +| svchost | | fe3.delivery.mp.microsoft.com | +| | | fe3.delivery.dsp.mp.microsoft.com.nsatc.net | +| svchost | HTTPS | sls.update.microsoft.com | +| | HTTP | *.dl.delivery.mp.microsoft.com | + +The following endpoint is used for content regulation. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the Windows Update Agent will be unable to contact the endpoint and fallback behavior will be used. This may result in content being either incorrectly downloaded or not downloaded at all. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | tsfe.trafficshaping.dsp.mp.microsoft.com | + +The following endpoints are used to download content. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), you will block any content from being downloaded. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | a122.dscd.akamai.net | +| | | a1621.g.akamai.net | + +## Microsoft forward link redirection service (FWLink) + +The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer. + +If you disable this endpoint, Windows Defender won't be able to update its malware definitions; links from Windows and other Microsoft products to the Web won't work; and PowerShell updateable Help won't update. To disable the traffic, instead disable the traffic that's getting forwarded. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +|Various|HTTPS|go.microsoft.com| + +## Other Windows 10 editions + +To view endpoints for other versions of Windows 10 enterprise, see: +- [Manage connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md) + +To view endpoints for non-Enterprise Windows 10 editions, see: +- [Windows 10, version 1709, connection endpoints for non-Enterprise editions](windows-endpoints-1709-non-enterprise-editions.md) +- [Windows 10, version 1803, connection endpoints for non-Enterprise editions](windows-endpoints-1803-non-enterprise-editions.md) + +## Related links + +- [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US) +- [Network infrastructure requirements for Microsoft Intune](https://docs.microsoft.com/intune/get-started/network-infrastructure-requirements-for-microsoft-intune) \ No newline at end of file diff --git a/windows/privacy/manage-windows-1809-endpoints.md b/windows/privacy/manage-windows-1809-endpoints.md new file mode 100644 index 0000000000..f1805362f1 --- /dev/null +++ b/windows/privacy/manage-windows-1809-endpoints.md @@ -0,0 +1,528 @@ +--- +title: Connection endpoints for Windows 10, version 1803 +description: Explains what Windows 10 endpoints are used for, how to turn off traffic to them, and the impact. +keywords: privacy, manage connections to Microsoft, Windows 10, Windows Server 2016 +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.localizationpriority: high +author: danihalfin +ms.author: daniha +ms.date: 6/26/2018 +--- +# Manage connection endpoints for Windows 10, version 1809 + +**Applies to** + +- Windows 10, version 1809 + +Some Windows components, app, and related services transfer data to Microsoft network endpoints. Some examples include: + +- Connecting to Microsoft Office and Windows sites to download the latest app and security updates. +- Connecting to email servers to send and receive email. +- Connecting to the web for every day web browsing. +- Connecting to the cloud to store and access backups. +- Using your location to show a weather forecast. + +This article lists different endpoints that are available on a clean installation of Windows 10, version 1709 and later. +Details about the different ways to control traffic to these endpoints are covered in [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). +Where applicable, each endpoint covered in this topic includes a link to specific details about how to control traffic to it. + +We used the following methodology to derive these network endpoints: + +1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. +2. Leave the devices running idle for a week (that is, a user is not interacting with the system/device). +3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. +4. Compile reports on traffic going to public IP addresses. +5. The test virtual machine was logged in using a local account and was not joined to a domain or Azure Active Directory. + +> [!NOTE] +> Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time. + +## Windows 10 Enterprise connection endpoints + +## Apps + +The following endpoint is used to download updates to the Weather app Live Tile. +If you [turn off traffic to this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#live-tiles), no Live Tiles will be updated. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| explorer | HTTP | tile-service.weather.microsoft.com | +| | HTTP | blob.weather.microsoft.com | + +The following endpoint is used for OneNote Live Tile. +To turn off traffic for this endpoint, either uninstall OneNote or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). +If you disable the Microsoft store, other Store apps cannot be installed or updated. +Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | cdn.onenote.net/livetile/?Language=en-US | + +The following endpoints are used for Twitter updates. +To turn off traffic for these endpoints, either uninstall Twitter or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). +If you disable the Microsoft store, other Store apps cannot be installed or updated. +Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | wildcard.twimg.com | +| svchost.exe | | oem.twimg.com/windows/tile.xml | + +The following endpoint is used for Facebook updates. +To turn off traffic for this endpoint, either uninstall Facebook or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). +If you disable the Microsoft store, other Store apps cannot be installed or updated. +Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | star-mini.c10r.facebook.com | + +The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office Online. +To turn off traffic for this endpoint, either uninstall the Photos app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). +If you disable the Microsoft store, other Store apps cannot be installed or updated. +Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| WindowsApps\Microsoft.Windows.Photos | HTTPS | evoke-windowsservices-tas.msedge.net | + +The following endpoint is used for Candy Crush Saga updates. +To turn off traffic for this endpoint, either uninstall Candy Crush Saga or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). +If you disable the Microsoft store, other Store apps cannot be installed or updated. +Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | TLS v1.2 | candycrushsoda.king.com | + +The following endpoint is used for by the Microsoft Wallet app. +To turn off traffic for this endpoint, either uninstall the Wallet app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). +If you disable the Microsoft store, other Store apps cannot be installed or updated. +Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| system32\AppHostRegistrationVerifier.exe | HTTPS | wallet.microsoft.com | + +The following endpoint is used by the Groove Music app for update HTTP handler status. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-apps-for-websites), apps for websites won't work and customers who visit websites (such as mediaredirect.microsoft.com) that are registered with their associated app (such as Groove Music) will stay at the website and won't be able to directly launch the app. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| system32\AppHostRegistrationVerifier.exe | HTTPS | mediaredirect.microsoft.com | + +The following endpoints are used when using the Whiteboard app. +To turn off traffic for this endpoint [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | wbd.ms | +| | HTTPS | int.whiteboard.microsoft.com | +| | HTTPS | whiteboard.microsoft.com | +| | HTTP / HTTPS | whiteboard.ms | + +## Cortana and Search + +The following endpoint is used to get images that are used for Microsoft Store suggestions. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana), you will block images that are used for Microsoft Store suggestions. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| searchui | HTTPS |store-images.s-microsoft.com | + +The following endpoint is used to update Cortana greetings, tips, and Live Tiles. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana), you will block updates to Cortana greetings, tips, and Live Tiles. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| backgroundtaskhost | HTTPS | www.bing.com/client | + +The following endpoint is used to configure parameters, such as how often the Live Tile is updated. It's also used to activate experiments. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana), parameters would not be updated and the device would no longer participate in experiments. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| backgroundtaskhost | HTTPS | www.bing.com/proactive | + +The following endpoint is used by Cortana to report diagnostic and diagnostic data information. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana), Microsoft won't be aware of issues with Cortana and won't be able to fix them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| searchui
      backgroundtaskhost | HTTPS | www.bing.com/threshold/xls.aspx | + +## Certificates + +The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available. It is possible to [turn off traffic to this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#automatic-root-certificates-update), but that is not recommended because when root certificates are updated over time, applications and websites may stop working because they did not receive an updated root certificate the application uses. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTP | ctldl.windowsupdate.com | + +The following endpoints are used to download certificates that are publicly known to be fraudulent. +These settings are critical for both Windows security and the overall security of the Internet. +We do not recommend blocking this endpoint. +If traffic to this endpoint is turned off, Windows no longer automatically downloads certificates known to be fraudulent, which increases the attack vector on the device. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTP | ctldl.windowsupdate.com | + +## Device authentication + +The following endpoint is used to authenticate a device. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), the device will not be authenticated. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | login.live.com/ppsecure | + +## Device metadata + +The following endpoint is used to retrieve device metadata. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-devinst), metadata will not be updated for the device. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | dmd.metaservices.microsoft.com.akadns.net | +| | HTTP | dmd.metaservices.microsoft.com | + +## Diagnostic Data + +The following endpoint is used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | | cy2.vortex.data.microsoft.com.akadns.net | + +The following endpoint is used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | v10.vortex-win.data.microsoft.com/collect/v1 | + +The following endpoints are used by Windows Error Reporting. +To turn off traffic for these endpoints, enable the following Group Policy: Administrative Templates > Windows Components > Windows Error Reporting > Disable Windows Error Reporting. This means error reporting information will not be sent back to Microsoft. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| wermgr | | watson.telemetry.microsoft.com | +| | TLS v1.2 | modern.watson.data.microsoft.com.akadns.net | + +## Font streaming + +The following endpoints are used to download fonts on demand. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#font-streaming), you will not be able to download fonts on demand. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | | fs.microsoft.com | +| | | fs.microsoft.com/fs/windows/config.json | + +## Licensing + +The following endpoint is used for online activation and some app licensing. +To turn off traffic for this endpoint, disable the Windows License Manager Service. This will also block online activation and app licensing may not work. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| licensemanager | HTTPS | licensing.mp.microsoft.com/v7.0/licenses/content | + +## Location + +The following endpoint is used for location data. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-location), apps cannot use location data. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | location-inference-westus.cloudapp.net | +| | HTTPS | inference.location.live.net | + +## Maps + +The following endpoint is used to check for updates to maps that have been downloaded for offline use. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-offlinemaps), offline maps will not be updated. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | *g.akamaiedge.net | + +## Microsoft account + +The following endpoints are used for Microsoft accounts to sign in. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-microsoft-account), users cannot sign in with Microsoft accounts. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | login.msa.akadns6.net | +| system32\Auth.Host.exe | HTTPS | auth.gfx.ms | +| | | us.configsvc1.live.com.akadns.net | + +## Microsoft Store + +The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#live-tiles), push notifications will no longer work, including MDM device management, mail synchronization, settings synchronization. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | *.wns.windows.com | + +The following endpoint is used to revoke licenses for malicious apps in the Microsoft Store. +To turn off traffic for this endpoint, either uninstall the app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | storecatalogrevocation.storequality.microsoft.com | + +The following endpoints are used to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps). +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore), the image files won't be downloaded, and apps cannot be installed or updated from the Microsoft Store. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | img-prod-cms-rt-microsoft-com.akamaized.net | +| backgroundtransferhost | HTTPS | store-images.microsoft.com | + +The following endpoints are used to communicate with Microsoft Store. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore), apps cannot be installed or updated from the Microsoft Store. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | storeedgefd.dsx.mp.microsoft.com | +| | HTTP \ HTTPS | pti.store.microsoft.com | +||TLS v1.2|cy2.\*.md.mp.microsoft.com.\*.| +| svchost | HTTPS | displaycatalog.mp.microsoft.com | + +## Network Connection Status Indicator (NCSI) + +Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-ncsi), NCSI won't be able to determine if the device is connected to the Internet and the network status tray icon will show a warning. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | www.msftconnecttest.com/connecttest.txt | + +## Office + +The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office Online. For more info, see [Office 365 URLs and IP address ranges](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US#BKMK_Portal-identity). +You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. +If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | *.a-msedge.net | +| hxstr | | *.c-msedge.net | +| | | *.e-msedge.net | +| | | *.s-msedge.net | +| | HTTPS | ocos-office365-s2s.msedge.net | +| | HTTPS | nexusrules.officeapps.live.com | +| | HTTPS | officeclient.microsoft.com | + +The following endpoint is used to connect to the Office 365 portal's shared infrastructure, including Office Online. For more info, see [Office 365 URLs and IP address ranges](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US#BKMK_Portal-identity). +You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. +If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| system32\Auth.Host.exe | HTTPS | outlook.office365.com | + +The following endpoint is OfficeHub traffic used to get the metadata of Office apps. To turn off traffic for this endpoint, either uninstall the app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +|Windows Apps\Microsoft.Windows.Photos|HTTPS|client-office365-tas.msedge.net| + +The following endpoint is used to connect the Office To-Do app to it's cloud service. +To turn off traffic for this endpoint, either uninstall the app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| |HTTPS|to-do.microsoft.com| + +## OneDrive + +The following endpoint is a redirection service that’s used to automatically update URLs. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-onedrive), anything that relies on g.live.com to get updated URL information will no longer work. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| onedrive | HTTP \ HTTPS | g.live.com/1rewlive5skydrive/ODSUProduction | + +The following endpoint is used by OneDrive for Business to download and verify app updates. For more info, see [Office 365 URLs and IP address ranges](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US). +To turn off traffic for this endpoint, uninstall OneDrive for Business. In this case, your device will not able to get OneDrive for Business app updates. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| onedrive | HTTPS | oneclient.sfx.ms | + +## Settings + +The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), an app that uses this endpoint may stop working. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| dmclient | | cy2.settings.data.microsoft.com.akadns.net | + +The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), an app that uses this endpoint may stop working. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| dmclient | HTTPS | settings.data.microsoft.com | + +The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as Windows Connected User Experiences and Telemetry component and Windows Insider Program use it. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback), an app that uses this endpoint may stop working. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | settings-win.data.microsoft.com | + +## Skype + +The following endpoint is used to retrieve Skype configuration values. To turn off traffic for this endpoint, either uninstall the app or [disable the Microsoft Store](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore). If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +|microsoft.windowscommunicationsapps.exe | HTTPS | config.edge.skype.com | +| | HTTPS | browser.pipe.aria.microsoft.com | +| | | skypeecs-prod-usw-0-b.cloudapp.net | + +## Windows Defender + +The following endpoint is used for Windows Defender when Cloud-based Protection is enabled. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender), the device will not use Cloud-based Protection. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | wdcp.microsoft.com | + +The following endpoints are used for Windows Defender definition updates. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender), definitions will not be updated. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | definitionupdates.microsoft.com | +|MpCmdRun.exe|HTTPS|go.microsoft.com | + +The following endpoints are used for Windows Defender Smartscreen reporting and notifications. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender-smartscreen), Smartscreen notifications will no appear. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTPS | ars.smartscreen.microsoft.com | +| | HTTPS | unitedstates.smartscreen-prod.microsoft.com | +| | | smartscreen-sn3p.smartscreen.microsoft.com | + +## Windows Spotlight + +The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-spotlight), Windows Spotlight will still try to deliver new lock screen images and updated content but it will fail; suggested apps, Microsoft account notifications, and Windows tips will not be downloaded. For more information, see [Windows Spotlight](/windows/configuration/windows-spotlight). + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| backgroundtaskhost | HTTPS | arc.msn.com | +| backgroundtaskhost | | g.msn.com.nsatc.net | +| |TLS v1.2| *.search.msn.com | +| | HTTPS | ris.api.iris.microsoft.com | +| | HTTPS | query.prod.cms.rt.microsoft.com | + +## Windows Update + +The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-updates), Windows Update downloads will not be managed, as critical metadata that is used to make downloads more resilient is blocked. Downloads may be impacted by corruption (resulting in re-downloads of full files). Additionally, downloads of the same update by multiple devices on the same local network will not use peer devices for bandwidth reduction. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | *.prod.do.dsp.mp.microsoft.com | + +The following endpoints are used to download operating system patches and updates. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the device will not be able to download updates for the operating system. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTP | *.windowsupdate.com | +| | HTTP | fg.download.windowsupdate.com.c.footprint.net | + +The following endpoint is used by the Highwinds Content Delivery Network to perform Windows updates. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the device will not perform updates. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | cds.d2s7q6s2.hwcdn.net | + +The following endpoints are used by the Verizon Content Delivery Network to perform Windows updates. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the device will not perform updates. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | HTTP | *wac.phicdn.net | +| | | *wac.edgecastcdn.net | + +The following endpoint is used to download apps and Windows Insider Preview builds from the Microsoft Store. Time Limited URL (TLU) is a mechanism for protecting the content. For example, it prevents someone from copying the URL and then getting access to the app that the person has not acquired). +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the updating functionality on this device is essentially in a disabled state, resulting in user unable to get apps from the Store, get latest version of Windows, and so on. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | | *.tlu.dl.delivery.mp.microsoft.com.c.footprint.net | + +The following endpoint is used to download apps from the Microsoft Store. It's used as part of calculating the right ranges for apps. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), users of the device will not able to get apps from the Microsoft Store. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | | emdl.ws.microsoft.com | + +The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the device will not be able to connect to Windows Update and Microsoft Update to help keep the device secure. Also, the device will not be able to acquire and update apps from the Store. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | fe2.update.microsoft.com | +| svchost | | fe3.delivery.mp.microsoft.com | +| | | fe3.delivery.dsp.mp.microsoft.com.nsatc.net | +| svchost | HTTPS | sls.update.microsoft.com | +| | HTTP | *.dl.delivery.mp.microsoft.com | + +The following endpoint is used for content regulation. +If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), the Windows Update Agent will be unable to contact the endpoint and fallback behavior will be used. This may result in content being either incorrectly downloaded or not downloaded at all. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| svchost | HTTPS | tsfe.trafficshaping.dsp.mp.microsoft.com | + +The following endpoints are used to download content. +If you [turn off traffic for these endpoints](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-wu), you will block any content from being downloaded. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +| | | a122.dscd.akamai.net | +| | | a1621.g.akamai.net | + +## Microsoft forward link redirection service (FWLink) + +The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer. + +If you disable this endpoint, Windows Defender won't be able to update its malware definitions; links from Windows and other Microsoft products to the Web won't work; and PowerShell updateable Help won't update. To disable the traffic, instead disable the traffic that's getting forwarded. + +| Source process | Protocol | Destination | +|----------------|----------|------------| +|Various|HTTPS|go.microsoft.com| + +## Other Windows 10 editions + +To view endpoints for other versions of Windows 10 enterprise, see: +- [Manage connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md) + +To view endpoints for non-Enterprise Windows 10 editions, see: +- [Windows 10, version 1709, connection endpoints for non-Enterprise editions](windows-endpoints-1709-non-enterprise-editions.md) +- [Windows 10, version 1803, connection endpoints for non-Enterprise editions](windows-endpoints-1803-non-enterprise-editions.md) + +## Related links + +- [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US) +- [Network infrastructure requirements for Microsoft Intune](https://docs.microsoft.com/intune/get-started/network-infrastructure-requirements-for-microsoft-intune) \ No newline at end of file