From 622be6d6f36018fbc8b307b1bb28af0ec78635d4 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Tue, 12 May 2020 08:18:03 +0500 Subject: [PATCH 01/22] Update hello-cert-trust-validate-pki.md --- .../hello-for-business/hello-cert-trust-validate-pki.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-pki.md b/windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-pki.md index 067d2d3504..3fc4c88711 100644 --- a/windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-pki.md +++ b/windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-pki.md @@ -150,7 +150,7 @@ Domain controllers automatically request a certificate from the domain controlle 7. Expand **Windows Settings**, **Security Settings**, and click **Public Key Policies**. 8. In the details pane, right-click **Certificate Services Client – Auto-Enrollment** and select **Properties**. 9. Select **Enabled** from the **Configuration Model** list. -10. Select the **Renew expired certificates**, **update pending certificates**, and **remove revoked certificates** check box. +10. Select the **Renew expired certificates, update pending certificates, and remove revoked certificates** check box. 11. Select the **Update certificates that use certificate templates** check box. 12. Click **OK**. Close the **Group Policy Management Editor**. From 66ab96d20913b8535ceecf7fb00975d215c9d151 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Thu, 28 May 2020 09:58:28 +0500 Subject: [PATCH 02/22] Update surface-system-sku-reference.md --- devices/surface/documentation/surface-system-sku-reference.md | 1 + 1 file changed, 1 insertion(+) diff --git a/devices/surface/documentation/surface-system-sku-reference.md b/devices/surface/documentation/surface-system-sku-reference.md index 0d49be965e..73294d7794 100644 --- a/devices/surface/documentation/surface-system-sku-reference.md +++ b/devices/surface/documentation/surface-system-sku-reference.md @@ -26,6 +26,7 @@ System SKU is a variable (along with System Model and others) stored in System M | Surface Book 2 15inch | Surface Book 2 | Surface_Book_1793 | | Surface Go Consumer | Surface Go | Surface_Go_1824_Consumer | | Surface Go Commercial | Surface Go | Surface_Go_1824_Commercial | +| Surface Go 2 | Surface Go 2 | Surface_Go_2_1927 | | Surface Pro 6 Consumer | Surface Pro 6 | Surface_Pro_6_1796_Consumer | | Surface Pro 6 Commercial | Surface Pro 6 | Surface_Pro_6_1796_Commercial | | Surface Laptop 2 Consumer | Surface Laptop 2 | Surface_Laptop_2_1769_Consumer | From a5a1ab0a3fd2c272f1144687fb66769c2ab0ab82 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Mon, 1 Jun 2020 17:29:15 +0500 Subject: [PATCH 03/22] Update control-usb-devices-using-intune.md --- .../device-control/control-usb-devices-using-intune.md | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index 74a43afb5e..74fccc75e7 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -111,7 +111,7 @@ For example: If you want to prevent the installation of a device class or certain devices, you can use the prevent device installation policies: 1. Enable **Prevent installation of devices that match any of these device IDs**. -2. Enable **Prevent installation of devices that match these device setup classes**. +2. Enable **Prevent installation of devices using drivers that match these device setup classes**. > [!Note] > The prevent device installation policies take precedence over the allow device installation policies. @@ -145,6 +145,13 @@ Get-WMIObject -Class Win32_DiskDrive | Select-Object -Property * ``` +The **Prevent installation of devices using drivers that match these device setup classes** policy allows you to specify device setup classes that Windows is prevented from installing. + +To prevent installation of particular classes of devices: + +1. Find the GUID of the device setup class from [System-Defined Device Setup Classes Available to Vendors](https://docs.microsoft.com/windows-hardware/drivers/install/system-defined-device-setup-classes-available-to-vendors) +2. Enable **Prevent installation of devices using drivers that match these device setup classes** and add the class GUID to the list. + ### Block installation and usage of removable storage 1. Sign in to the [Microsoft Azure portal](https://portal.azure.com/). From 53e4aaa7a2d80600028d160dbc897658d1a52064 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Mon, 1 Jun 2020 17:34:41 +0500 Subject: [PATCH 04/22] Update control-usb-devices-using-intune.md --- .../device-control/control-usb-devices-using-intune.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index 74fccc75e7..db7936986b 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -151,6 +151,7 @@ To prevent installation of particular classes of devices: 1. Find the GUID of the device setup class from [System-Defined Device Setup Classes Available to Vendors](https://docs.microsoft.com/windows-hardware/drivers/install/system-defined-device-setup-classes-available-to-vendors) 2. Enable **Prevent installation of devices using drivers that match these device setup classes** and add the class GUID to the list. +![Add device setup class to prevent list](images/Add-device-setup-class-to-prevent-list.png) ### Block installation and usage of removable storage From 3791baff736c292bc1b369d5e9e8e5b0ae63a55f Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Mon, 1 Jun 2020 17:34:43 +0500 Subject: [PATCH 05/22] Add files via upload --- .../Add-device-setup-class-to-prevent-list.png | Bin 0 -> 65391 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/device-control/images/Add-device-setup-class-to-prevent-list.png diff --git a/windows/security/threat-protection/device-control/images/Add-device-setup-class-to-prevent-list.png b/windows/security/threat-protection/device-control/images/Add-device-setup-class-to-prevent-list.png new file mode 100644 index 0000000000000000000000000000000000000000..043da380169b19191babe0f7b460847a6b656b19 GIT binary patch literal 65391 zcmd43byQrzw>8)a2^QR4gS!VO5Q1Cq;K4mWa19#V-GaNjySoH;cX#W#o&4TgZ|0ks z_04~C*J5?|wW>O|?m7GHvx`7^SusR-Ja`ZYgeW2Y=?e(-<|hdB+6(qIu*Y`}3RG5#p?5d^9TfA^&K7WfVKU0mG`1VZY9{JrY4&Nl#oz;7fzeN=MN zK6*xUQ~r~B8h%P5$3rOEx8Jhae-`oPP4voFbB@T`FJ|k$KSESPQ)iD6YYzfzUP}b* zRd<3Pz;71|^pZe?=14rT)orfkI@fB!;I`-O3nm@spM20j z$Gz3-zptxPqJIz-72RO^_*w-Ru~05G9uZNT1aKG>LRD)qe=#8E5tUgc5l!jb$xQX0 z<^?#Z9~OPf^A&Ig^UDYOgJ~FIx9<;ErVp+=!?=STBkI5joWDAN!(Qj_dURDll)rHh z^l(5R1I%t+U~l`K-)m+%Xpt+xcnz;ufCC_Aj||XoQ0p7ARY~Ai|A+rvJp@BQ@BIoS z#Mt4A3N+_sGsx9;KVmn=?>Lz)5ltnR+lJ1)@#ohYxL<8=R)S$cAl&!P2sZ)fZI5HC zgz+$L)}3c(FvTI_7lP4wX|4kl@$is`3Bq^-egyv*P0@0@nJ!Qq6L1}jp&`TJJuD71 zPUXnR?|+fUksyPH0(l`s@j>&JgL`(h?_$NLn9jQ;(DP(dS@m8&3s-^j+B}`to!jn@ z4};^C-r@ecu|};04GqmYDNb+)HHf@8hdHPzrJofz_Bq5F;q!ff4tJyLZJJK=-A2G@ z+LIhu$u#9rC!|W?>5r?Vbv~zTvuTQe{?mT-`2&6)_K4F>%_dc0+)D{Pq~9T!-zpNM z_kVrPVvTk0j{?7}f*<{`wW-5pWK%wzZxVw)@Jmrc(=jsU0=Dd+v_bI!Os8`0PSyA5 z`7rgO^Rn@$iz(F^y!A$N%PQF$ zW5wtz3B^gN@%k3oTgqZSPkx>F3>QC2e}jt64^@Kdw^#y@Xrg5YHmk)O$$=>-WON?d z5i)hEZF}R%_&D7Yyes{(c}TV5QeKNpHk{mb;4?)k`6_@dMC5 zl60VdvMrA@*_n#ONj&>qo>s$;L+f^6i$QM1RhE_e=hLt@hqbljHt^VOSli8ubr>>u z=gu_Uo;mrFsj2zyTBJ;Ohn7<^(pqN?zaQk$&M>8n=g5F zsdrt(D}3BnC%o3JPXQN#sRH0|Yfol3qd`$me*3|#D%ob6o#k799qyODa4hidsmJYS z=X)^&iGlG*Y!ADeoJ;V5h4DlG$=nIK2$UTEb@DsLboUp0CV>~9^kdhbIE`x;mpaZ* zFi^&dj7%eMWD^PikMe1CzL}wvMlz4`1OzbJ*vbfDs zqPlumF>EKr#$xSHMiSXrk4ATlT6^IvY*|U;VemTDbz$1*TYAmczN>`Iygh8`d!1(o z*Ev0XECT_Bub*Cz60xg^fv?lkR>%+{;vyqF^E67=KWmZtCA&TlS5%PVw09okju6e&>O!#24@&4u8LzVOvx~`Q0HXwx?$|Q>=41fXOHVGG=lztNHn=mjD160b%-rz>{8D~*^AkI5 z^|FijNeHWo`$_3BPN#YFOBwiEaALMJ+dj(g_fiVIiUIc(u}TJNvP~HJ5_E<^^Jarum%#d$WU#po=YQUYMo;=$=4H|8Z&C(nr=Mhy1*O6G4a7XWyfjfuZJyvra+WApkEE`Q3?VitT8CBo+g&+g%OV?YjTb`guKh1e-vn+2#S6YV_&lw(a4M zwd1MtwvMOAR>86l)N>n0NG4m?Ld&l*!8*Sd@oz(RyE^8A__iO_Yf6HY7fT` z%aC!ajIfD$+-)vMtu2@U*8?IFpLwr)H>y0xJQ`&G5mUXl3-u1>%s@!pYj}PHCskoYH<&4L> z)vBGl3VHneT5mlpgvHEvrE1+;n@3s9siWWHI1UjD#EvoiM{)RrvJVi$VU%9IEw{-9 zo@|CUnT`QrI%gAY&&v(z^=0e%{P-nWkesGEOggQ!0lzbqp5Vke!EYmyZ8YnE0oCGyJPg6NY5MC z0i*G^h4!qtzD6?a>ldTb{@R{e&0z0k4s3OJJp)*)HZ_vp5-aZlhToQgI~+7j(jyKyB;Yvqem5-YPacqZ$n8>AXmVT!D{x2|s)s%!PDRSgPt)Nt zEsIMEjImv7L3?~4+$}`imo;Ra>-ESj_)M8;b{l<7BVG19Bs#k`hpiL@8_EVk=Y|E~ z-ftmDbPdDSao-)u+-T!@Jd!H)u-_XFkZpUp;k9n#J@>8)Yx!{1dl;Q3tzDUYP)Jwy z(CEFC*;zUYTV|?=~}3xaILya z$100YPoDVPc8BXJ@441enOwNrFnp8!Rw7s}Mexx(BhR5i<>{tuh%xF^3U*UjYH{9^ z1N{0v6M?1(gXzI$bv3dznB}J^BUAKO= zUo8yHYB9A$UJ=w7RqCfP9h%gQJo$)W3wv>=Mx2#OI!B!!;p-8X2$Bw@|>XUzAU(UVv0tW!z zFPfTs_6JHq+qu$-tj-q(@V&p_2yk5!{{!PrwY$xwD8aiEK5Z_hXL5OC(n%M_o~*g8 z*3vJ_k09t7jH=dU$kqe6ZIn^5mZgntbI;2P>LxQ6WBLi!86AzveSAs7AKgieJ1 z$H}L;Fu>kknhLd}wwGBjkKtfUfnwg|Dggauw$x5@sc_G~xd>wb*D~7%`TP4Dph0f3 z8JPZZmB(f@{2L@qB7pRnWlr5Vl>&+hrV?=ZUZ_4Tzy3D$|I+UNeJ9VfKLHo&rd+f` zA^%dHluP4NZ;pMT4|8H^al+2LWCCs;;)MgW0m8{E)@-;qu3N3mWI9)8_U_YxZ3m)_ z1_=P+A>&znI6h_+Gr}Z%WDagCM$r+h8@xbZX`(8iw3Q z2~I|ZECE5~Sjc5sjwKc8boWRtpVSA_6hGmQzwgn>63SnMo!(`!wWX{B8KEvcdNsC< z?iyDIINJ6j{lYj`_g<5gxwFGAS0miC_fAH}&f5zT8uE1Szkpc$rbh*5I0IK91@oP~ zK~v`Np`8AE1G5(aH2%a&(kz3D+sn!p$gn^I6MecB!LsA4adBmz$yD#3!$-eH4J5Xn zHHtz7i0RQ-6tj5V{78fh64)?EJ|61UxidYqA=mPP>#mw54?T^wHORNW_$)V{=xQ9? zIZ(PbZ6vurwKrB+T07Yepgi4hJ=+*7TeEYjxZd!6uCqjuU)FiR3&-#yzZ!G#qJrQX15V4nM$mX!3>ruX{g zjQ(WM<%lR?6+=}WqO1Awu&_b9$4^B9cdEvU$lP<}O(v!IsnasLM`D^jA17}%i(}k8 z(`d1I`HS zClrwa;+b;3^7t4@aym_MMUJLaS6HD%Q5tm z6Ve#MorfZ>|52N)?;qe;BdMab$-Gexap zaaj65E!o}tsIlJc&#sjY1q8#?%y>|>zTTmZl1U`;IP3QoyLO;`&c9KrFOBctc>k4O zMs2FDLk(5G_RXQfgWo!@MO1QXwZ`?yhKXwjo#2Mv&ih2mp8|EvsqM{c1s@N!f7;%= zhDaRL{g(P`l6GUlBewMWVf$II<@3d2Yr}ck=qN+Us_FAXs*ZN!_m3hXU4yZ7j;AXv zw^y~E;A`)sq?{{)>0rr4ZjwiG8nf_2N?bpM{**am z$XSbd-yzC}+FOD3=wMZSxB=if_rG}VpDl>88b-hShyiGhT1(Dv-zAVG1WwuVFYE zhrA2zA4G|LWcb z&I-r0?B2IyUc-ib5IUvx7gxnt!z#O){$KezNb0zT*#Z-he$+zT&A+bS2@(6aKLpV+3fNf<1os#R3F!9a zt*}udw0VB^z&E%XP9IGXaNe0FPIG;E8yQV`WL4oRg4w3SUv4)t`V&!s#cyiB0EJV1 zf%0@&qx?S6?Y5^i72i2d7zfvX$RjDqh1297r4hq*HqekCE=cB^9)Wo$N4=lBTj}|q ztNBaEA&N$Q*IFJfG&91Y%(~T&UtUp}BBVt)@W3rz55Uf3?Z=}=Rckyi#|{BgF~kyK z)y5?DT>I0jlj}q5F?k6y4Lp%|keRsY8+g%XHQIEyVJBO@cc=u8VSuR}ZZkM}Qa8-= zoD$@7dzd&Cl=z7A_8a&zH#ofY<|G~a7+ZAmCne1y+SFiP$(mR&=T$}1B0D#pTE%sv z0Jqj;|5;3@ch68!QJ!VYSK;z-!RaxzR?A;9ID~k3@p4%hyfsV489w|T+5I2bhvU?( z9t(2id;OR=T1qXu5VxmtE3PgO@v+XE9)VG>qvaMRVdwW4_wlu|X3#jAbH{5|yEQCP z?b%zb5h$6rMQ6X3{es6g2r3`H%JMPLBDT8o8{a&}W<(JxpU1OyYO?>i!B|DpfNLZ> z=Ikn_pFE|SWYe$aL8uY(?IW(KjeUq2@)#xi^9BoLfo1FLJCJkVw%v=Ajmo1J74M8wMXAad`WT3+k`SWXb^ zD}Qv*fb+!w6)J>}I+-{XeR@6=K^I`ZE^fP%KQF$=@X}(;fkBiszLjivG!67X0^C))1E&e97M`If{! zpE$PR3tTrf9z@$qt^RHkC2pqi1rXR{H~!wQ3(QMGrm;7FJ(aFS=4!ChgeW!#JA2#Z z=)JM$o}A*#lU&*J_6d56wKR|O1dzD`$mSM&wc>i!wvYW(3XZL+_zSeC<;x+TpWi<7 z%#9CZobvwwkB?WOBi<)JKEAB#Xx+RhQ?#|_K82by@t)5tT7%=?jd|=Ode~t7Z5u#o zI9G?dtlPRX#p>3r_dC9D=>7o#s~(TXg5XQRHh_p&ao&Bp-fi=Nz&+4!lnwyWBVcKuY`EZn)>uru*%(nCCVN=4H?4Yh_wfK_$v^}?j8UJTyL!sUz4g;n?y=C{KQx6918`; zRQaYA8Cq!F_UZ0Cn6Xiu$V=#AT(y;Du21mA#u@b5`Q?5W>Kk)C%llVWzyph*0Qx0g zPXhf;j_3jYFBuH6BK92u3(ttR^mC`5^=6+Nx9XZ+m>FUTN6S*!{S3Npy9VJXQ7d*-B(NDLZMNidh zLv}v!kN!8j7MIL+|Ddoa@iF#S=3Y6knNlrCq=5NQ1e+}cJB*O(u;tw{aYpav#Op&fMqMDkq-5GTmLK)f;4%^K9s;1g< z?ydKv6Z@P7qc24%`0a7`j*<&Nlh0#kQ0At7NcFz@fjwB9Rnnx63vpG|ETvyDLYI%0 zzwXB63|fWZRwO6d3)*Ju)QqgbJ?O`xCU7^~tVmXl_UP2xo$#;9o7>lg5lRFPXwK7$ z;mh=v|EF(^%sP!96O!Q!v3R$_gHYw_>I6ri*k{!r`Jh};w>_uU5=U-vl;3T6OBOHQ z?M!45>M(mK-6F<)<1<=v0~hJkv*9f=7#)_K9M-;LriQL>Y?3^(FqnLqax642U6R;c z!EpT3;wJY#89XG(2hAsf7A_h}9eZ-uiA`X7D=B}pvmERcX(C-L5Sf;YJg5~PjI?}N zCQP5FX@9D}LM?5&+@o`stH$KI^O79er&g45Y+r3d&kLz!0SU@$vQV5Ool`xwdtA1y z6djZn#rHb=S7kfSwNbWbv8wa%2*{n(Z<6V9-dp&j#M=F-w8mc+7^A_(#`gTG)f=h# zC1iC(I!f^cLM+y4%6vxQ%Ed!>@~z^>~Ue(%cE7R=r!AK<1DdUcUnK`g5gN z?SGjLM2++LOctqamc9HBI(jQJxi@odj3Iwy3@xAAUG6zz5cUzncSdSW7VM>F=C%Ex%XLT9_DP{(5Aq<}(Euw?4x3k7gfP*EsgGxK0dH`dg2n8D2^TF)`o}+; zF0k)TLazK<6o^sVR(|jfNFXfNG=+^a6TO>BtbRW~~!zcL(^WpDw zA(_=hrRQ_rqXQ0W+LyWMlSGd0G}=HBKnk2dyn_F~PkjH^EIA^iqjoTJu=b;~0b1Ft zfeQ(4a`q(SRV<~SS#kK#6>J3_PHv7VKK*xYvus3I(}7<2*hpFy$X|6Aa~jPNlqk?Z)QCv zb>TV^}pGjr(+ORcBHDjo5Zw}wSjDRTR&mXvQ6kKx=kmOFx-@LJN)e*J6 z$1{Kb*6~wsQy_*vVIO%G2~2{(U&5e0fohipN9Tl^Uv~_y>h&MBH5N5^o~e9(Md$#k zTaMS>O)X8eRr7lht;i?8LL3!GA6iIYaBlvF;?0=ZeQ@~mDcEK|r^;vqh^$TN-<+FH zc#PLo+gwJr1{_bA9o!5zym?R5nDsgdZ8(Qm93RUqMMDN_eV!8ZjVR|otA5eaKs`i5 zDXQVN=Qz}%6X#T9-EMs+k`E@KPQb>7t&yqftXHRV-Z<20vqTT#zMxSQWxaDT= zmtzmDSy7MgsG4bWWg+~SkNh%6cVpi9KlTm8kn8Stssn|CCB1IwWBYX^JF^zTc z%$DbD&6?18TOEA{5~fCm^WL$JwvYkO=z?h+b6=Ge#+(a*;3q#IAOmwjH^ug6 zWPO{_Y}DNgK>HJbGtT9Z3D@Vrt>7rJ6;E&n1^u%$xLIs0#ks#C7o&{HlKzy4k|$&| zA$49oSvRq3`EwO_B7C=Ew}~1$hYuT;&!^cB)@D-{Ls3|Cnxy7OmVEMEhM6s)4AQR6 zqF=|ZJ}vC~DojYa)PLdG`5~s?O1sRejYwG=?~h*Mt~~SfrK0a``YUuTj;@(bzr4hs zH_`sB&V*Kqe5FIx9V5_x#6%Ie$8M)KKOV~muTe^oqNItt)}i?oEN^i!SI287WPGFh zQ6@LvLnuh%p|+`xi&?NgAoed-Z^q7onN6M!h{@dukAel=PPRq(ZU^xTgPgtV4{~!( zp80)X9%;WO-@PyK?W9cWV=cMMpq+6gA+2=JPf#tSLn~nMDR)v$FBWF4FR7YEkMS#> zsE&=ncZV_EQQ;{g+rh^jZEr3_XTHqj$b=h~iTfGE&v=LMVZy8g!z>BcqD_w> zJu$y@Dyp`FP_st4TQxixRP@D)RUAINGX?cWzZKb4yf&Ulk8eHfP@YGFZCr3nyQ5oe`5vGNts(|X~9-kaRSTN%g9sn)S$c~pM)G!y(m5is8G`z@;j{-?5l*P45 zn7L3Z9OKpN%I!tfP_Tkyi=ugwemce{cWQFhfA-vx?IeSTcFx8w2(-Nv7s-||E9R9y zsq4*&v@t2y+qt%3!mQX;`_f`PR-~tpFbTYv*Cv|r+&*-J$mQEKMxn4JT?Yy!mEsEq z5m@x_RsJ=#$<eGgMoLID3!ex08?M?fDBL{>KzgA_Cd)YAX zF<0Jod?e~vxs5z#Qr==xgMl!Dz_u0RB$c%^&&&AVc(wnP&x~Vh;kStso92+9zqD-o zhqwQzNeH+6Z~NaNivI^;+l-C6^$wZu%nMT8?k8|ub+41AS%ci1nU(~4h%L;1Nxt

ym7D}rCP$0Z&J zJEVYuvMv6JL+?3iW)T&V$65dIOftR0FanoPiHM53n#*d^Jr9f+HVU{nb z4z_pw8ZAzqMa|O_yij8f$^9s#;>L9(6~p*oSRqtNJk!h(zd?~cnw?%ynZg8dqOs%> z$;^oN7!M}AyR0*BkxN!ZMN&MOa}hl-4_LZ^^v>~q`xcx+p)-GVAI#W%)(I)UmZm-t z==Z5os#vqSv~e1Hw;)8B6m4msm*DT5yLd=5+;kJb4Y>a!aehVL}{9zzYU z`2mBjSFOG#5Qs;di9_3o!Wx)@r<31Qsk<$r3A_tad5W5A=`1HWWWS{qTJTca!N&9P zmIn{`e^`u`wErquXl{rSXC}eC@GrL5AzS({M`zO6ldGdKd(f*3tZ2^0myGkV!(^+c zV520CuAAkkXSSvpI8z*qS6zQ#4DBS9K)C6EA-0$+Uw>Q$zhsIA^YHMz9Iw8FzI;it zr3PQ^PkliONze~~!HOM?fWg85$5^+N%2~)R87XOWjQ1X-2GbN-cL`lrLuZ9jg<`Vc zX5Xh%_>uXLxU&{UUx+NmSz8!#(3|AGcO|jhgDdU<>L&?)-^#H$agd+aW_wrWz)81V zKmjHNz*kMd+v;6v7cEnZR$R2LmlwE~kx?tXMp-_Va=|y8wZ9VOv$amtf_sw|q4)E7 zX=^LynfAKNuOqNrcm7H`peVgDo zA@t7)-Coud%d9C2qV%hk2;)~ab5$-9k2Q6z>nIMaODGg26>ab3%<9@>Cmz4(#|Jnz zEo^x$*5){$*CdlGC7<+e>c0fkHJR6J_9?1}yOc5=UkjTAR1>$jU+#U&H2d>0IV#QV zy#&I{%nT=>)sji(WKgf%>HE13 zVB1igwr|F9vQPj)Nv2ojSMFF^8?TKLks5)_k@kv-|HpTke|c8-p}KRKV5Px`*Yu_v zo^co_+6tpBgK>?}NOtyLR@BO!8qB({8mUkM0b8s2miUz1oiia5au~&FzH~8tCgLHJ zyZbV+(6Or+nUp`_C_mh?v9aT*Txl9nWg%+Gksjwa%?1gdgzC&cdeuy-m8&_=2XZLn z;BcF|n;y0#2G%+R$iI@?s+9www_|ERq4-AQSJ*w%t!eQs(5CybqDnT}qe`t=fG!G+4f>l{(uYgkWkNr2s`p$|__ zJ&$WR$sc8$kocb=~jz)_pSJemk8|@a4Bno-5NgSm;ICA_NaMo{6ud zmy@K5E^qW|M3e5iSbZ!<+-*zaDdvLV-XEhTvE7s>-`cY$v(_m$yp7t7l&c}7QR$=H z*tU}>>$R1KEq{gfvQ2O=Q8+8!ijLu9x!ic&i*FqR!?S0hsv6H%u3oLT=>MuUhe3<= z%pvH$>K#LUg7$2^TUN__#Kt%WVV|0=QA3np+$;ludXpx6SLDDS0l=Bz?(|^m#1x>i z9fsWnuRe6Ybdx$0_;>%*KA+}K&J8ZEhMnn37n9VR)ify*ub7yhoHTVJkB@5D_HSql zCreIn-V{Wvr~TsuZ%i#@aQIf>H3E;}iHU*A8DB~Be1z?(S;j%5*TK~<8J(Nz*;)b& z1PVk#48O#oPB#Q!ycK~>s%I$?-t76;MGa|Kr<29LMLsG(7=#V#*fV|}q$>l)C-8C} z4n9zAi-M6gn&ueQnfN`r7<=qj>L~af^>dPSp8StW{XW)Y8cs`@fDqc03BOb$QE}k~ z1J%NVd2&|P9-u(hdRRLc>OF-QVzPX-Z!c$&Y<*0~UK{GPJeV`SZIAp8OYsv9H4xx* zt5IL6E$HERQuS@euiV<{pK>ua{%VQdtSr-cKz76&nhK%dsB2msSSOvFHalYwwuc$q z4pPjf9CSp?`7z5MNR)JQ$(3yvMK@z|nUSq0<4m9Xi7`7fmH)8wP#-z-&61Pcf_AQC zLKg{3gIwh=VSMchGF^1j-S9C~`_Cl}>ylJs-pppdc!*U1Cylh0d>ej&9PFuH;kVm+g2=};}H%^a*;n8+l_X~I1BEJyw6OQ?bp*^Y>?N_Hr zz{^LXSg_&Y;}=;=1c~5Nzd+Jjub@bA40Nz*kBc$OSl)oPUVALt0PxA`*7dLt^COFz zjLgVpxS$6hdUZbXzu2cA=+{S_I$YpHsIDE%r+7M~s03cL{dZ+mn>@5F$y9Se$(pjf zwZ=vLb{Wkb!ex+Rdq4N+_&YtdgP3y1C+AkJH=usTjYjm4Lxy(X{_5)U!-;Hdm#L=_ z(FSpF+wuab6u5~wewpQm2)KE7&Dz3`CjrB4sos4)O33=g1q}fa$EFxO_-L0LkMMuE z)b_4{7C_vhh>a-z0P~)KawUtj0mM&afxESdEHUfm^WGt*wv-K|D9?32Y$DI6b6hr~ zCFk8#i2NYa&-XqP$r<+Ib#pWTDZS5|qseKUsDMsyQ2}+{H-2h#D#dq`@vYUawflxZ)|&o}7zAw5X#zt=#y zjC9{oZOM%-OAx#`wfL{I@qB|idfx!9v^tS7k~btP%|&dl0flhWd%ueCYgQKnu#>d$$B$PdCliOU(W zmkx%nAxt_5bf(`&Xv`pPV;fy?FHbaDv~hh@RhbqZw7vZl?(R!-Etj67LK}}*W+HQj zEQ#nC&lT6W36CNqDypMwVr|$gLO3hs0%a@xF9iaTyvMwhG=vXJyhW;nIW)OgnUZjAS|xyj+eE`(4gQLSZQ?|C5w z?q*OVvn1-6vC=xBuO#%Fw0~IPx6ju41y<-vnsGU77UpPF)kHgoil?Nb?s8ss_!QCb6_O-|rLvTmx&s_kk*?rUZ*$Rs8EkRg&kv zLt4I733cl~=p$)s@P3{3-pPN_qVp+Nk_wZO#Gi@bnwfv$sz^1q|9vw^@w#z1O1WuK z#e~SE50#08mC*Q@U21wZn!fDQv86`%<|H-2e-dbnpbqUhUA`+H9eh`Pu=xtIT*?QV zi>-lE#yDd{{efFq>!#)WyU`(I|3z}Xyt<0{Jzd^TNbdiQ62mk;xjVCBr}iVyL0C|# ze&sJeElw3>rM~El>v4;s>M9j0F*Z!|kc#i-=*}&nFlL{K;+ag<&}*=iHnb}C@NSX1 zCVMZeO35b{R7InO7vJ}#(blvSDrXN?w=C+;bZbce$&4V=)lZ(#`_X$Oo!5*yhw{h% z)gSKj`rtwCksD4v->$&w(1~?>@^N(2QbHUcAy|V;CPp)c3srHTM~pOi88qLk(-=##4aW5G-5SK zxQXtS@T1J^2}0*7$q!mFLiH3r-fNl}c=5MG;ghWEj7FwsbC_J>{CgX9ha1UXHtGZ_ z1Z~8L0!VFstMb{88TFFUF?e5}iFtjQ%g0)v{bKQ>w)zL&N`H=lRfFEiX;wd_(aN11 zRH-CK8X0Vm>YU5ZaFCDe{Ni2GHd?goiiLQCV~xDMmXJMZ`G^DB-yJ}6x zcWtwo5IssIhmr3x<<5X zVr{M=S6?+;XGCOJARVbi4;s#76sfC_C#3qy@Aqk9d^|$>HFF`~Sv%D2s%IM?;0Awx zzu1yUgzp1lfFne~3nZ5pYU=}3>GX_@X*~7^K-HKHP=yTuBHs<^wX=b+P+%89?;^;HlVsZ(bksxmR_ZhWb*`G_dCRk8}R<}JB&a8%4bhj?C+gXP{ zB7Q6Q`4phe^Ru!xSAmT2UoetO7hu?iTnpKJN&dI;AnqBPF7{x6F|dNYDVg|X&Ze9{ ziO&-@@E>Xg)UVht|bKp1^M|Vv!z-!H8q%+m{;+WF;!-NXnBejW9m&rRwI5p z{~Z3WBCXJy9$k$(tCsU#e3}X%Y?gUG9|j;33)mlEJm;|c>BYzyH#Iia1Bw0L&1(xd zpQ-h3BUV*gBJk$MAyU7>bc*uf@f@h@sQC0beY0BfVY*IF$Y}nXbm;=7p8{w`xBA>pWD&t3%(f6_E4QyF5VI+V*f9Y=`Ossk*S}wOe^@VvG}u z)VApyG}LnwDo7gjCffDH)*RU@7K4rox$u63*~W26K1-)iL2e(RKX>avy9m8K0sCvV z$b~gmGq|)@fxMYTor4#1d;T~TAxf1nl`a2|C{PD>?(T0Ou7@igwfR9BKtT=txF;s~ z0OYq{$nZjg2!a=_nnGV%fjCQi-!Jw_)=VBW^OcsY#&XC|8!gUyb0dZ7AfyY5l^D`) z7VP7S+)Qg_tn;?1^eih!7k*$`bBdu+(cwE=$<%lyr7Puz%yJUelN%@gM+7!7td5E& z1$^{xoZ{Tvo%23oLA#w{W5LIHYmduhpcIhw!G`QP=W18rmU}R->OFam;yR9~{H5`w zXt6sl*9EiwuApdp~yTc|V~VjJTV@uZRA1}2omXURpiCg@|BPCn@}bIsO@ zq~Ig=Bm460SzJWEDnM;@tiJ^)%f2nT#V_pJTjE3e2AT3o{gXL}$3C7kon8!`g1Mzy zEB7z4wE*-CxP}!i-h1wWFy7Ixx}$5wi(3{tkzT9c>Moo!Lr(=Z9>dj0J27^5WAKk} z<^iB_SWuQ{@r5adjr7r>HJ!B7d&Q0bE&nh36t?7R=v5u!`(FC9s&7Z=uc6A(2jRmB z^?aPJiTU4>F4r^hP?JMu^vYcQ_|3IPPJB*a&Z zp4Srf{bnEl)U+FPI`@N3r>(A!$91Q36`Qwh;Af!L_Rojx7spgpXxDbE{hanTdgRqp zNka49F-q)_{gdc7@;ad|Jvooc3VaIB$AiW}AuAfK?@1 z1JSEm^kWZb)}}x`WT#rpAWg!0^CzA|Chx-HTxXu-`NJ2Q6#$CVM?kez0qhMA!GRRs z%qM-VogZa%SXxu^or4ZDlxp+qR$a}r)>zZ{xTaJ?Awep%6n3uo$%wRT%n5Kdjae*{ zg;*8kL%oGT2TrWjL`i~QXEcI1dcSujlsI)AzA9;Yv!H#}kKf2xE}y)qqlMNb`Am4y zeI=Cn=gc4H>#F2ZY9_Ei!Sul)@If& zJRiZ*#Gnc_7lmVIRI(q_Z98@reQSY1(;TJ8G02V%nn4l}sYamO*l_Srt_)1A0@O9) z{6333uFDDtBE}&^qF=84`=I`#;!f)UeygvAonwrY% zaP+$^X2$X(L}VmH+A-4stSJM#r?VS*+#C0W3z{qy9EnbM5S0<1FdvxkY%SNs02P?0 zj<}B69RXeeedH%8z9KYJeC|0Fb;Iv9fiv)l@koi2(XXwnP59PM8TpBvEwSIMDQZC@ z*mdUa>M8K{=u3ZDoFr1sdUx1(#O;b@Hq2u0-xgjv%TpB+41H zg(>iH>6~%b1!+Xo6c4{yt&2KQ!|Eh1tD(tJl=`kXIqKkRR#i?;mF7xpUZww>+>VqQ zdFp$ltDsxha!gQUELMk0J`1Kqh#VrZ^&AoG_xM`u9~UbSLq-=n3gh-t=b%!ne$^x| zud~Bv>clqNsth4%uMLj1m9*>T1^^+$#c|I7 z|0yYZvJqq=}?5#~H=~TkhvSvOTh-EOZmvWBZrZ(5Tqo3ZnQ;lC@uFIMc zUpzwX&!-k_$I42Gvl^@X)n@(Y?^+nnRh!t`a_Zr)5r)SH=-P&3>Tob-eF?3`v6br+ zNStljwc`j;7#=(qQJEPTq=|2Im7Ldp!kn~$J)9wPWgYMjte9aC?taDfv;}ay+ZCPB zasujqS0hXVHGgAZl_~(d(z+Ad*P{vX)s5bl_dOyPfwZNewX0U_){%bEAL=Tkr{~%cezvNu-)_Wk^ zW);p}zMP;exGL&6i86JmGfLe&ex7QQF}B^a@gl%|;E_JiS4K{3Pp z5J1cD*L3F_!AyfOfl1NuuBWYgmq0OkV58}#wa!tLCFgIo{o0SSYN8!znyngRMy`t6o-H4KC)}g^ z{QPV_TiSBJlN?X4E(~#L7k~ZPXDH)wj!F;$h?(<0MIMFkJ6wB*YObA_a7i7giS z&%%U>MKxOc@rv%O$)6g%SwCm@O8UO^jy<>x&>qe*Gor*(jcm|YwWeLv7Z*|UmUG+{ zs+MFD#A~o)C32S{*>B*n3B)DH`*&lZeOIuKPQ9U~&|FA$fLUCNQDPHcuoZ8S3%~ST zXvih<7*#ez`$rrUytU}^Es$O0YlSt5p(skS1R}9a6^ErwO3f7gIvXW-Em3+$^y>S- zj)jGVT-nq{)2UpbD&_{Ph)rWRMFXJmc8dGW{NZd_ye(%Rk5$5s?ubBQn|0_W2}+dG z+nPjLrAI`%3Ey6vGJU_r748NO?%g&|=e4Ok{+eh^|FTk$zHFs= zo$5oJ;!I6;iF5uiIl9ozoVECUMK63Bh_-GH7^eqC%sh1!ia_K*bf#+l%Sz-xNC{!t zyu!M3A;htYZhG<7ist0hBW50bhg`+LiSk}{A6&HHQX4C;O!Z_6{-x2R?L`8vAmwu` zQ}`)#(>(OgqICP~lKTl$grWC^KZcw*66R!xWUFtK)i0+(Oo{dMG0v1mI`6+Cx_YcE za)n=rbB0LOcwDM&o5pWWgD3l26Ea(T{`~tUYT{v}?iL8uie|y93E8w_ThVSL|Ffb&-5sM&`G3h*Ahk1g zR15|aB0Mu~lD}eE<}WE9XJKELW8m`5iA9%u@c=jcRXJP+PC8?{!_05x7nM24Fd%oT z!K!F580lh`5V|pbu1MDUvX>$S3Pgvn}l(fPN&%QCtQqd;@qscvuam z@P0_Yd*K?8+5xErz6bu16N(BIWp2#Lp&2&{hWFco$&VL1EA&Y(gEdI0XjWoUQpOFg zMRsYdXpt;z$bMISk(>ynX%AC+&X^5cwTUMF2bl1CJQ7Y*B**ar_&LJpB8L4cP znNg<8+6;A2fp^-kS9S``(160GAd@!R`VR}bE>z!*GoJQj)RKY(jp^QR>S0Y%gn5U~ z-6#o9>4U{DJY}7KWf*w*F04=jxQ0Li&9&mR39Pt|fZ?G&aK0Sj+WrVxnKZmg=|Fo? z5;%33h9c&U5B+sStbtSIRCAcEj$u{pIH;2vWX`;B*N|Ze%`3+J2g>$#bE7+G`3nlf z4jBzb1K1^wwrcbZCl1%C1d$FmpF-y_x3u*1?54E2S#o~p&^wXRipPeDyE?L~^cWn5 ze6_ocl!dDz$D&iE3Sj3yVdU~_uqfnA=(n^M%?Tx=51jsVuT3+FVj6{ah!pe4&~IWu zfM=25?A|;edgPp-bOLr|`0+)-!>i;^x!rOhU?jwSF5|3evIQjj%&ID&#>1_iSxpnT zsH{xtUKEDwi65ho!8yN=q7`l~agdJ!Acl+J+T*XTSMkzG`cWB{?-pgLS%Vu9w4kPN z`0iy&pE-NJNqZk2e!)6nxReMSnKCT0_5AxD~q!?bE0HtF{ zO90930NTeDV5W!k{ixF2D(mZ=fF<0!DR!eVG>VkKBD_GhpIubEoRtXFPSo-yY4Ox+ z;T#H3jb>jK!sG5K^Q=Vtbx-?0lp9$b_2NreN~Hd_F9(V*Sz`i^#eC!Eo$r`{;tO#k zjKEQF33I82N#7^8<)RT2U0#^mb5L=O68$$z4Mx!@p`S@T==QzquM&|V&lS|m2~Zk{I8mS4_vT1FwylnHi*X!Dc+#ug~>2;UzlMEmDEPUx+cJ!TM#X(Q32X zs*mw;Bz;8gbkVfT+LGOo!iD^U{^xzN!}kIF)}MpAUj^#_OR(E<3?kf73IT4pdHwqj z987$toRmVf>L#yv=0Ko5R8$O~*x1;S6z)r2AmKhcD<5XfAo!clS6MieQSVy!CvcW5 z%yDkbPn*Rs_!VSeK{QxO~8Lks0k%j<@h?16SMvE17p147qH& z!1J09G7-Pa6;SDIe!3W<87934{)@#rKtH6j==TColiOzF6AgTOzY~Bp4FIL5&`$fM zELHlQ>44Q8|iLAN$D=BJ4fI5_kDNWJ>}T&MHWoSn ze}I1t0?QK&A^jAIf4PHofPa3{-uyQ)&>uJk{`0>UQzAcnSJ~!P&_{xN*awP_JCaF~ zo7YN7NiZg4s^&9CI$u2~GOL&)H7%pRYZP}R+Yi6|GsL-P{6SI8UAIb=$J{Of2RME& z-n3@`%v@~`pnK}Nq%p6^N*UgPj0W*4N@5c&MRQ?Ycrn3HTZiTgT6`t>E= zZbE1H`UTs9YqNhxqCH`JFLfRdwEioa;dKdwWQ8MbmI@D21-g}~z5C|tUk-pB^KBko z8-*f*%gfX4D0tYH_5;A;VhHSNFdH9K9aQk*kEOGIOB8%|N4k}A1)0}P6XT;E6+}KT znrA7+cEogqy1x$Mnjd5j55tZc%r<5g$oM$bWR@el2TKWnlV6fsm`ab8!G@tQO2pXQp`YGWl4 zP=Bc(71^Qpig6>N$Y2X(tl8LF%QXwGZQ&(r>MOYGET|^pFX4F2m#Ha6 zkJ8~pjAa6}4@qA{8LBreQ!YXn9odhs>l8f4iqg&XJjY0lJya!TvGqH#9ytViunmrK ze2RKvw2gGtQRt&_;OjLuje;_@Rn5`fO z?B>?|X9z+m_y>+bnJN}e)0!)QNgcOn@4Zj-8 zyRw=s?#s`^T0D@Ee{)PH6cH* z)Nqm$k@{fnfm47{qrC{8xWI7`@W?nNFG02Hf@*VY`KHR3Ycp0*ECLqyvMExy@n%kD zw*XWth0g|95nO2$Q&;qT)T4?c}tXgdQ+3XJm^ZOnD*R~8dbL&_G|*zyzMVL zT3`Ib<{s|GS+C>pXP9l~WcGxVcuh5egd>Axjy1d2tM|<{>G3*sbVspC*q)-n@Ps?b z*vzxbU`h7(IUYB8cZaw@Do z;DJn*uYsD=p=soSRs#StrVUG;@dgvN3k?Y@Y%|Ataao4t?Tvcw$Ymjn^a=aJ@`~L` zWqh%Q;cC+L`5|lhzBHh=Gs!TDG$-N$qpkOpLiDOC_rDj$e>6_$xt3!Z1PtwYFp!Jc z8#_ou@qvXi9q($pU>ZifMuVH9L+2h(eeuzK1W4YF5@N6-U+XqCtf9=@)zo+ZLT zUiL-@;47tOOYN3vdRn3uuOL|oD@h}|Z;xNoaiQrTLc#ZytoF(=cYl-W>n z^(8q=ONP@>_h51R>~8hTx%+PLnp;3i%ZTqU3@GD@Ta1WxIH?$a5!|!;rl2j*cS=`3oRi29McS67*ZnY(9?+pEQm3&qnpwf$)NKT$`XlaiPW|=2RH2&0R9JS^CiPa@N87upY zGED{@04p-rs(0=pHJ^owkF7|4bws@LeqE^&G86g@AD>po;Dz?IgAQMkhTunN#?1# z9nWYJeE;;;Fa#Pp(%iRJS$b-kau)-)uIplZDnUPu?!p0X`Q}LIe3;jG@kYW{)1#t` z58D+J!T_Pyzj`n7Fr}Ih1+Mou;YpXJWesNm>C8m-oA;gp{tLmv#7!OON$la(WJ;(z z57CmKd?__$*Dq_fLgJ)bQwDuDCuQ&1oEIpRT2f9LrliE~Up1=rO*ofvJ4YKCO3*nPAXq-F%)g8!yd@a3;T{MR~Z$u7#|CQp%OBr|X@wjn#uLG)7oIK5P;+iO* zu)$n2j*a%uQix`l=*_A)0rykse3N3SK`yq|@k*jHh& z`(~Y#VHuBbtL1tA$>Ul~FQn_Xg(otEfcfN0msy~Ykl5&&zS|}u$V}47RBV7ZCLTBP z5E?0&ciE-lP*g+QCw)mlz`f7k!m?}$ zo-;~}gErRC^RfSJPjJ82kXbjFZ_ud*_=Yze(z}2duyMTU29ui%bmu7uu&Fw|kL37& zv@=sugA+Tr5mj0hv0!)?qyq-6khlnjmVkiT0F*uVxPsY!P(1Vy29x92$in@$+;A4zQ?vEC=%1ZcXrS;uAE#?RD;H@HJT{Hz*p`X~_^{ z8n;NxK$)ykj;V6Dzzr&yoqt)FuIVp8f%q8v5yI^04Us9(;mtSMZ>LVz5wFjDXwvbY zHpqM+WYTyhB6z!%iV~G{E$UczSyH-e)~PeOX~B%i8iCh4mQO1|OiaYe6DSr8`skRo zn_EdXGR|tL7+&ay(36QW-2f8N{=~$8UZIb0U;cDtb+@EYSyb1LA!1{g&%Ak;Ea5&_ ziKw5`C1%o~dst-W^3AJe>vT%Utgk`F78}dNv?6urTb;f@b7IM=!)TrUMt1-%vxwS7 z?0JGjODv1yFU$>`=CB~yo5CU8RcQX72oK@kU6@f&F#_$aopzxbCl28t1ba3SI^G3; zM#DBCR0nIDY&r4p#RuN%Q58{R9Mk_GAA@}JoB|*{_b7D#Fd|uTj-E5~rlneB``NsU z7OIxtjtP-L;d?%tiUbgENb*R-9qwAy&vh_}zJ>I(du?jdxDkn(A`sv)aiwuQ(8x7a zzrd}Ig@)}o91de)uOaGekdesMeSdaIXDXS<{ITG!^9tgFZ26bbmC#T|8`jWz&rTl| z#>DDHq(Wn_w;7p@h@?U))ZO&`Yp-8q-UWR2GFuF;60im>M=CtOe5l@O>0g3 zkfV74Ummd%U2aE6>5@ty!h)Fu;?ffw0wU<+k5&G|?&P*^$_#_Qtx;g)b}H@T(mN8E z3|;08JKH)Qr!&nOHPM>!I+6&XTsTWKp5Iqz4NV!H6E1Hq`r_|ne4Y+3469A5vmzb7 zpPb!lZGS~=l4Jk8v(ocj;lv{MoejGTvdu;}hkyfB?~wc~XHMux{ShEe$xpZ++k+SZ z0NRj{OjyJE8Zf(Xj2{l(31NA1w7u|fRe~M{nh+eXBfsgi2@`DC+jVL@GU>~n*Hlf~ z8dbqxDGyt*+K?`Zi&!%lGFO6t^CXX>M(c#JGQ|_61@xNN5y#U)j(>Zgx5V6(alpS? z!ktsx?bzuj(*(sA=TaI7h@dbWr$6s6{0c~fx%c1rV>x)|b6SWD0gj0AdxSbP000X3 z=U<=?{Q7T}Or&zQyDr6rpPRR$X~tH-jb$%CKiO4&?nk7A)s*;U=G?Fo~CO<2 z#J#DaCHS~NK5oCVS5DfDu4lc5J%KUbrfp8O3H$Q7XEMyDfIe39@3fSwP2GS;&ux9V zB0C!f3pu%bWvfy6ataS7-S7veb&+OoC)`||(cyWE!zJ!tlEiIy3He#VgPn2-tYb>=yd@=C+5{HH*LM*ao1+#K#A-O>3lZogamZEpl>b1X;F~OzkkmsLIkhMewr0Ng)#yy=m+{ zw2N^sh{kAmxS~a2WwcTEJcLZ6{4=pMd|N8mvGy38Su_L+I^hd#HT)6bjPCZ9STzmM zuS5OmG8v<}ZZ7e=+AZ%>%tu5vKN@wNkCnQ6;g@?TpMDm~yNVA_-8ky}+7LFm1W0c3 zPKm-02##33vKe6v75)ZjLf#7Dcr#0i;Y&ArAC~Om@S5I&OPvPfPlrd&(EO3%D^}N< zU=ESqJS~@capi}wqA*?3Pnq^Ih2*3_t3Sunq^biPkFcAzvz8!DJJMo$3flMXkGjVt z@Fs5nU6r85JBOur2gB!dWmnA@$BbtK?QnBKseq9D?*TyYuKljNz2{!qpC#n24+QMw zM`n)raA&-L}&)uJQjQrosN3#en_CDc2P-@BTN{N*zvKbj9p={UMH+Ug zLj@u|8o5gGU$+)(JF&)HBhR^IEs}Rc{9>_Vx-AVSQb-5~!#iK~5PU5nZ)qIv4{&7; zdVuOk$#grAp-fBwL3&R$_0aO1e%!PeN%-Zb%7=e0M3&i?y_binwcVg-R|neXy(hZC zQuoI!Jk-fn;}Ddtyiny8jY=Cxm9YA{B2m%L6DxturuZdc7ZswF+UIdMCl--13)l_2 zpGef!V%wsdy>$40*)GVl+?+Tl6P+#ifI(e%ue6H{OZ&(*JEvk2BkDrpkP(h~pluuK zJhi|TosyNxG}m|)x?YHN=B|a}%!1}Go#P646GV(4)nO;N*Q)qj#37l4D>Ts{O0+aF z-QW}EIfPyl^-rD3tgNhL2@sLgfc2^S36M_#x+!;{Y;^Yk(y5dK1~T*(V2pO!`S8iT z{A@cx0Rt0LA&dJO7^9^zn~s<~(~BBGhA6n$m|%D3F6EX{3~7HYp4fE{ll3vNWYy|1 zWbgow&}^t)Te5V9yjti1-)kY1467@aF9{-qO|G<1Y%PxlLh=Urw!E%mi@nnTm7Z-zMQ!MnRTWkqT|3MBR1#nL*d?=PXz(o7X%#4Un(w_M3@1} z0Ejo$_~!vJqx5aEWaSWJBjBg){nyiy^dN4=4w>U%H?PH#Kmiv9_1NUb#ag{hyX9I* z;SM)pg{-u>)CXJ4hAcSIZw-HZC-abvpGPSci9{=987Ib!&upSW{paP-Q9KGdAYJC) zFvrnb%6c=iX^-@2s<&r*J1tx;SF~s1*DA0^ooxZU1nhZO(aFW2(yb`rHZnT8w`wjA z<(Bchy_ku?a1`5L&FUM3MxtF*u!7fW?VY7Uy;^_kyTBdF25YT{bcu6{Zq9a+-hVZc zsh%jlPYfJmKqdKOy$aUl1=kX}Y+lQm{4mt6+5r5zC{f5EzH6Wy{_*WPZ&T!dapuYT zNAqIaJ!GoMZ9I>u6*D0`fCb;g9;djxK;hWJt87uWxu>gj1Q(PFiWm9VplqJB=u$w} zIw&=!oCJb4Mfw>Jmc%T-Gxt;~k(ZHju0ZHjqJynf_&c$={b9P~P0lUDp+^3Sv_F1_ zbj111GTgX`<8a!5`>VKpyjZn#@`FREWc9B|^x84TXP8KTDyQH1SPkK0%>mMd zwy1FCiA8w}=p&txVM>%L`uw?x1s^LW&2f2>=a%dMjxp`pil`n~0~0s21D3i}%xAf& z)3y$F^i|I}Nr5dFzE~x;|bM?&xPzA%}^CJq@yy z?VdYVAINn;zm1xap*Ffv8O;IfN>;5BRlbL0U`-`V-2o9S$G4~h2aeRc8;lEXWZ#+%OEkFM(Wcw zdoEcogb)>V0AtrXuhFz2hggQQ4`c46{?`u8ugVFD0b>$+z8H@MU`&FWGfeycsVDx} zHf80^cNGVs);K_zabF4&^%A@6G zNB82_>xW>6*==9~eYqrj;ty0~Pl2oKegG^|aLPZ2r}9xxV0=oD;cqqF>S`xJ4%?iO ziIOzG?XG9Yd)BUAJEs_d4R8^?6~i8hal_yZ1=So_h<*BwlLe`?51vd!zX8rgKM<+Vj?0U%&^_X;M~ArAh*PC%pOc< zB=){s=25;3p${k*@i*Pf@H`_=-p_1NzO-1)1d_gZjTgvGp5blX9GhD;%4<+lZ~;CK zx?h~WC)wt>*J9(B?>DEBM=&gJ7^O%DxX`DIr#Y$uvYgRsST!$v_VYcqQF>S&(cn}- zofooIKP_2@=6V_p?$!DYaQt<)RR#vET6N@dUp$~P2PKb9M6KP8i}Z*S_B40YG>b|K z;hM@Tx#N#Y4ToG%Bre&~yNfrEOy8brh}@)nA9X<Knb zM2QkN_LjE)UOjg}^{?1I@egB@YE=Cn!sgPI_&qA;(KI}C?HFf3p*zVDkiw3Ip@y%) zqQ}5+B=(2ionrdeGa~{Pj8y)xhyClVfItp7S``5zY&O|~fzPqKidG(oS=hJxfS6#u9h`4Xhw}vNJ8`SS*m)gNsYg7D47&g8}Spl0%fxCmj+Bk zGLK>PvsA+=bxue!2ig&fjKfq)<^=;e215XO7j|HQmP4e{N_Am-&BRT0*fBv_MExQK z$`lpQYvh7^4IU*ophAF~jlbSpE8i6lynrsdf8_7x(N8~oMH?BuI|AWNfab4WSB8tH z%VQsvgTUX~e8HQ==pV~$=^i0CD!l1`2Rl|p+`maQYRAYgS^U;iCU-v>@ zG9>aF+{yCvp~aq3j%xxeR%wQk&}C&hUurF$I~y7$RJPwpaOcgpcTRG`X2)~b0=mcbKgho|0>_;`{uMNUL zs6^ovOs`c0AdIjC#%2%OvWzm-ix`qCq};Y`|5#N^)P`WO$o^VCm_)$VkCgxy+1_Bm zyA;Q5N=w91UUAfb>8nbwLuYT1c#ydBS>y!MmNsA&pKBM)2e2bV?5*s}c6`jIzjLF4S1 zI6b-JD59e;p%^=pqbAWGSL*8OA496`mUXfW5c&3BWhY2bKvI~S_w``tljRKpUzQLL z`#-XVknLzhHa~A}@~0k!fq9`(HM()|{M)!@P81*3gD)uXeE|NUg$9%FDysAB4%2`t zSj6Cc+5+Yizxbs+3%qQE?6NaBwI>*#3!K_Asf}-)Zl}5};PXV@;fvv=Z?saL$EAPR zAlh~f-~+oz5kQNFkvh&PMy44V$CCFHS)|;JE18U*xN!LKx^={@=Q$H2b&X+ig~Z zgA0@p7YH|5bf+zprk1-&dbZkeUaP}2wc4UG;n!d35P5Ld=` zL@sk@8zl>nc|O;d>tErTnbHvj4c;~AmnDn=Atn$IbZzR1qm-<$m(Ri2QDHKn^lYb% zhNo|UR7s*Yz}d~mPy>|EP;j_LJ~#dOpuw#9+?+Ke_&0lMlh`k1y)P$>l{J^#7W5vbr;LW5br%P=g@E z(wm#hp7)s|wpj{Ukh|K{0<~WqxNxwgm#nXO_1PgIBGK$kVF#}%^vU050N(Gl7UqE* zwlrHht8a9HUZ}bD--UDT3E;QO7u}$w9W;mH&?Qu@Awap{|T37 zT={Ui{o|}#hTpDty@8mN@g~%FKln5HW1?HHzL~o1RcC^TiG!@vq3WyXdb+`a{yw_q z6l6d6)1aT+E;`naRy(H?hL|{QBkh>9^h^+b0smx3r&^Kd4fm`Exh-fqG{wFKlC2=R zLxB`xe$Ido5Q5nO@E8!WP~cXRk@~}bQUD=L5dUYz533+K_#Jelsswxa7T2Ie&S_N`Yl$jNM3iN#w8XS3NoKd9?7Gg` zG(%uWlS4_c?U`_QLZ%kVIB?Ik!`|-APVCs69sG8L;#!yswHEP`rC)W*Gg<_agU^ch zHY$e80a^2{^1;ZFwEAUBd~3deF{^y*OUaJKU#225Of|g28Qj`Lk|h z({uGbq5R!}KRI8NvzlRnd#_XH@hjYo){=Ztbywz9C&)bc^DI~W-%%d(u#E-1Dlx`c zQ1vVEJN&M?-@(Y@2(GSqE8Z0>{4~_7=3WGFMPKcIaE0EJK+}4&<9TBMG%^9d*Bv3I z(!`6d^UlIy_R~`sD&_N8>huL)x{U4PV1afpCulKT>G^2o2gBnUho0VuyiLnai>=KM z)Dm4p!i3G^K?Q;xVWh_i{w81fHj$?zp3}~q>Em4!yNA4{HSawewHwOC7yl&u6{A#| zS7t&Taf^*{ri17k`AW>UEw;P{A76#^$cEPKBuhw@Y4!KgKm3xLJ#YtGDs=x}mWuE{ zmWpnMPD{7f?<#D`PvjMWkYv`UW*k#sBL7v?&?P56;$}mXDP}`*;U=r7JoZWl_NnK=!3yLM55vb;M!+2OVHfxcr? z(X%uuaFgq~SKZ6;P0qS*+ZBefufHe~OB}=uxzyk-z#wdD zsdUHWlk-?8k>h#)E`}jm+9n7u9n8q~=07M}Br6kIzLWPq^W) z$mu-E()BYp!BhI^Mobm=($U#B7*>vurSP^I?+T$)2Tp`NHqza=|F{x*qs#F6@)*sR zCTP1%OMa2gi^*Sk7txjJeAg;=>n1-PXtz^QFDj%Y{3oIa*;(K>pFZ?MAEBP@6YaRY zOHIc3HS5dyCuJomDNbXZHh+N|hr1r=o7Hn{Pkg`rI_kK_xDdkj8;XFkrvZ+tSoi%{ zDn6cNjAKNE^H1_^TMkm9X5UQ_V{bQR@Cu8Dg^J+KrB>KB( z!n3Vg7$jf24r_|lXA8xDn}FXAqdyoI!R`;S@!KifJQIkN&azK(HrrU1S4?f`9HL9n zme4F})!ptdIu%Zu7am~4Y&c~I6LoITQy~7EM~^kB^XM8=KVezo(w?xza`@b_tZ@ko zq+E41e>tZzR^MWs80!3)rdKB?7_;6#3F6pxA!^BxL0@nH;ri-?7jsmqv!ng>O-K-S z%%#86TO9;g^|q8mRakw}DqRowjf?Fj6T4%$lKSTznVsLNe{qTBW3tS>J4xVXKKqCD zGY{Yh7Y{syC{K?e;TyP~=gB$7jz2g^LB{O6eFa}` z(gH4QzJvbAh&h? zruG>bF4(+j1g@oV@ z6{Nw58Z=^3KuD$rN*Y$%*`f7=oc01v#*P?<*MRAx$Jp{4z1S|Yr9UNkn+MHRbC{On zLMOc1f9UxZb9BTEC~b?rPmB7V;TK5Ww=BLl^I4mZXJ^q>vX9%p`_Js!_4-XwDdvXm zVFS>CMsxhK@)IcvOF~ibxU$+S+_pI(LU$Jf%)D03Hx~kUVr?8EC=do~Jyk>TNoAv* zjkLeu&=+BJ^<|93PZxKK7iGJ5%)VWW*2z7~p25!p@dfFNReyu1%2uW8M7{aGT}aPa zuPkick^ehXaSwlNN{5yq*oH*~nZf8i?_O_ExmVlT*_|zQ0{7L^QUYGy!-=-8D+Yli zp{3{wvF8XLrI=q!rxLOWZoE|!8hTkf4jknY8&u(asiMG!VEPmt82cpeU z?7sm%26h@aN1fbV@{1XPYr2Be5c+da6R!Fbs;)$(wYX=C`v^1FO@Q4G?&Ox^oAs)S zh`J4glC!;|i+PpfyEoMn%;l{6M{R*Vz|4II=XP58!_*|(p9uyLAe==?V=z$^L-Ve;Aah)8XUI_jKM4Z(;W|Z)KML zF-u34!a10zZ$7P}8g&b|$aA1rdV>ZVpI9nVs^Gza*N7$R4pWQ3P87+ofbYIPjm6xA znl(C0%4ntUImW*_*cb0^VNfK5-KXp&c-UqHOXua=B(8vW4rlcV^(sW1!DXJ0yMZar zAV??s@=I!!)RBYGMZ}Ab?#t65H1y)ehOaStT@U%u$DVVHoQ}s0ATINvuSqtYb)Uw8 z3(?O$#JiySaR1VY?iT~erC>)b3>%B3Ce3jI)$^z%#s1jUbH2qj8r+p*6c&P?Kk*EG z<=RQHB31Hpjvkjpwxd$*g(Y{wGNp1|Zo(zM$fHl)fx*9Tq#oL zM%$DiTixAAVh1Lpx;MHj%%(;=)ua6VHd}v^p7Jw&eQKt!eSPIGKeL!e1B_)K1N}Y1 zXm(5U;N7|F^M2U<%h|l<(cCBlpX1J&ku+H&$URtr@WUEQ_Hr#D>Hzo4_Dmi5>VNzA#opo&Pv_2Iw9Vg!{z($VQ1Qh(LRnf93q7T zfvq@+5&lUw)Z`0I{qM7?W^j(01$WU^;bdty&M4xLj3?Ff*c0Vd{1@Fx6EyWX`oYQ! z-jBgP_D^~b_u4O6y5g1aYQ8O0rdiIKmY~8LOoIjWE_#-t=Q&1}tbzF)n2PN7;1_ur z8Yv%RWp|=Ucc? zITgTiJF)9%uk{+gRY#wTNru$z5o)u_9jKfzCY_A^z@DaIn(4f(>IUzTvClfFSx4u7 z{W}F5BG#E%K}ax=QgF;v)v(O|$V1M0go#kV;`LZeg2p#$-O;}T^y;oSioDA4+yQJr6 zCX(Y8qi(;#Hm_x->_)OikOgb(l!(+XJ zdUG5Hl%>2HdQDI}VCX(xdf8#~D`kvu!L?pYY1Dq8UR}kvjH%#5e9hJ#Ixo07H!f}- z3C~r-0UBKRT`xSlBpJ0F>!$8oFx`@sgtxYCImU2(p5J&({M|xmkQDM9!eljNsiwrI)4uIyS!SPtc;+*dnsKj6xIXTUe7SH`A)S}EQ9tHuZCu^LhG<#_j}Trr6-D1KpGC7W}*LLUGfQ=I*;90AYDAHk;^7k8CaWAXP};4N8^ zx=Yru!5p}w7LfbP_B(!ZEE3}RB^ADOp5DtVJ{VP;Q&`>WEkv+dQdqD4Y#MN*19bao znBnmSV7u7T3`_y^do!5bQ>m9m^MEf%&Ns#$@;A0J()5UI2jbC1Q6(;cF%itXMzdYb z#q8Hr7&L#U)d~%=_}h~A>E)t~*ySstt+NU=z{;p?+SDRSWpqpJ6i><+2@5qT zRP$R%>}k@Ql`vJvMiNElqA|u>$7xx1GkRsWFM)T2}C!orPq@0pror3Fz&mnfSj;U$c2y&f*@1 z!liK&!%7r2*}Fg8)H#0Nyz$A;;!7iib6TKyJh`8RYG{-FG|9XOC#_aVA2Bc|-TtJo=Gcp*8c}96S!o)zdGRS|FAB?%Mc6O8SSa%EN_jv(~Abh86L3!?)N~ zh+2H(i|Cm7>_$(ms>g{=Uwqvv0#RwKzSc_)`%VH$Hc8xH6N~PEy_yWlNc}+11SHxF z-EUFNJVGZu9bf>fTf+43Rm;>sEByk#wvJbE!}xwn ze_bY#XBMGo{h)C$R3q{`OPDDs>78Yq-KNg7R*S=qYv*MaU{4R1MgGdUh}l2s`+V7T zpV0-@y8zL9eC~ikCKH(9$p83AB*jddy&VcpG?@{63=hvyzJaH4Q2uPzA{SGQsPAQ+ zw)R_$^>_z*K^hHzc-)*G+uw3Y#&=BUZyVir?cYr|=x3G*WNE&T47LfCLcX zWU|7%7p(ASjiU)G6BaF~uGqlyF?qrF^pvYg$*Ia=!>`f|?4Go)>5#Yp6);iLw1Nm87HyBWg~hDN6Ky(nY1h1XBzwscNB%G zzM@T8R?9k-UPvyF+hwvOI63TYaloPKI$Ng`O=H?qbJ$BWC#_YL4yjbNrf*fQe~Qvt zi&9onrL|YfXVtXsntea6S%g;r=mfhO@%j72G3s|Znpy9iGFL~Yi@FzkmblS^gh1H3 zQBuLhD*1We^BQefs6nnuzn(ZLr0SH*LuH_})Oy2~f<8c2+j<{r1NN{rbafpel*A9I z1YJ+ZwgOkV$XNqvjKDfH`7=!pDx{1=Er4== z1NpS_E%Eg^&9A^sR&cVFpdoYZDX^8*?mU)6$TyDhJ-BFYb?W~j?v_jx{DeU48j2rvr zK}DAEQ5W84v=rXob6Z~>J};C}dpyYbPkKliFOe}ZM@0iV^1sIuH#|xS{qfbA`+<)ZPS}lg2;3HmXDV8=1i4aCcyrX zk5|lw!)u}0?3W2Ed-G9Ix-ji_5CikpLI}YLrZ^g?OZ4OsVM`T0g;5_>DS{@NIk$W0 zUA$|%3I+8o=0a}62FYD{NMf)Y7HQwDupw#{Lo0WGN{$k_254BCt|k(PtNHn$+#2_D zk9<&m@RvN z=Wp+FF@MVbSqJG?Ta7$rU}i2HwlEA+L;Y|erqaw_LiwQ-UFg0 zJMLJrys$S5+O|(XMi&quy?t2K_1w1cbTY55&*${(T{aNU?&oi20>~v&@w~TJ50iD6 zWq^##(8vxpUpvpDN2hwGW* z;n;kL1;U~q>RIHl1!R^=etV4Mi3reS5ii|LWLu06>ksPJ)~mfWlrAW^q{4J*~3GDqB3iP+aPaF{dU4IpMQM*7Ctg43CqP zChle%rawGw3_zG4Q-P^B>CbcwE*heEe!jQjNaJt7@L8T>@8ONtD?h+7<=S581_p9GT0H96yIZF$vO!h6Vmb;-aTvzc5;J3$uPN57e*)NhpV zdicOJrOZC0WLzn^j1tl)M65_dm!`bH68l3cx`?hZk5@#vQ5cV@w|Nc*5BhQRmc*ZaBZ^PM>TMY3m7 zrgt&`pO;ZhPICu-j6NlSB3;6L%xh zF#S~UX#flQg%KFncc%h%abERpm-^)TQuhy*tMNhRbckASh3vk_9)uJBhlByyl9 z>*Y_?4NvRt_Ko)KiX?Wh!orQQ;0k&5 zk@L*lZ7fRZlf?>cV{uJO!?4lRQJk6YLgshJVFTRB?Ln&ac#qSCI_$0%+lZ{jY|(@L zwTUE+7|MI#O3*R@q9ipGIF>)c7}5&>P!)oV8*2 zCUjn|O4J*-*V~OB8+#bfN|?D1HS83R|S4=Y1V(8!SV*gMhXw zyX?_6_R~Vu?II&x6U!BgsulfZO6>S#ClERqBT~Ly5Zr>DJly;V0>X~S_YQ4)U*{YM zLsr-6=td2mCN`a+a>q+QV_I6LIKM9`x4VjywAy$xnoX5PT1N1C3pE|uCFL8P@`?6^ zk(qqU=-ZKgd{@W!;t8Ph?uf%FikWr%DAgL}(MT;*V_eVAdIAF4{RF8sX2(gUuWdB_ zN>G*E=OO6GY1C5&j7Cf{a$?QUoUwo2ELzen9vD`PWONPTI$pCYN8-){Abr`WR9C6e+Uab5Rj>iELkzlMGSj)c(FMQYX-> z-TtY*-D45AkFn{gNrXoFz^@@LRjC#gbd%$bHMdliNbGwCF`S#oYim4+ zAFst|mfJYFUg$`*8~31>^9fE96)OK%(f;qgu_LoU6P8m%# zD9m$UZJ=MKVMTC37vvypc+U+xI-QPrxweLi$uTOc0JQ084bN{$QIl`Hr#0z@##S^| z9@0Pr5HJ}>&wKqT)Ho)mbghYdCy=LaUZakJiek21Z`G{HgG6-xck6uoI>IdzzUJ;L zMx~==SykGDyBpiVpXf<03nLYdL~KhK{eIrQ*!~?dd=CwNv?AYAzocf-TSG)2c1M}1EC^} zo6)Bb8U0pJNZNk9fWskQ*#aoV{+n_PE{D&;J<5*`ITpe$#S?>V!Xmh0z?LFy+>lCO zKyO#Fh-J*Owa`55yYtiMgcB$iS-U6@LcnlNXWWKF4Ca!hti*~$Gipxeko^x)C$gFM3KVP%*uMzt`7jfBKp#L7W~H0 z!%zE&Iv;0Cv@(0V9R%%~Ih2~;=nnOv5U^%~IWY_v(5Eui4I^x%`)5oHf4ZoT9z?mp z24o3e7fkZ+I$jYNnEjN&1ui8h8VJ)2)OQH-m&m|ZoPL*A%?H+*AvZpWOL

*}!deCcy-Y5Hl8_{s3)0Ll=-ciM1WF+7Ai(|61wAb z$LiuaZ8RuykFi8OX4AdeUV6<(C;LZCh4w76eKel~x6 z@1fddSrg$Fi+a>&H7GF0R$-;)T{MCB5}y0kD6 z`}|qs*_7Y23q&G=__|YA~XnktPv6~rY5t7gZ9e*o@ zC#7<@`)sP+UNCTfrdpF`Yi0kV!auqqaLg7(lR(N=$Q+4dh*WT}W##Q4;_lW(|BsuA z+D3K}{;o<-3xa%w#*Ha(>WiQKcxVoQm$wm~^Mjvie-${6Z1-V?ea^1sqJ^q!6h03; ze9eQ`2rskUPU{H6lJM@queiE}c(|r1ykDb|?s%QmMCvVEKi%s)U4?0TSY{CnK3PN|0JH(vQ<5-$lE+6 zHC_3Pdu&+DGne`WPmE;w-jd`3kYN#;2vc{G&`dJ!;dlB5v~y9o6Ndv6)tQ?9My2k_ zP}!=q@MYkD1_{Bu6p{39VwgGy<(=^b5aQq!Re!SYItlFp^Ki(Q5jBB@>0qXnb4A?2 z+^pP%l6W=BD+IZV8NRedxIk&*`Fl?ph_c{EHL2cv9#5&Np{S)4PEeu^ihHL{i z=|;`+R^-Z?hDP1pso;p+$yqU@mYyuk$x0KU38A(%AWD(#O3 zp$wd2r%}em?_1UPy)cLnJJ+gKd5gRZLcV?DWp6Tl*-4}FCjGFV;_eSM#(>t+g-_0qLex2UG%w$scqG#3&Lb)k>D+ zd3Wpui)+TvOc-5z4EhBPK{VuvFfqICw-!2LN3@!F6=)@0!9fCI03<*+B`73>+Wefd z#c&&OPrI7QSuyHVd|d7id~IfaFs(Ia6W;V0;zuJ0`78HTR?a6<%_|zqKNA2 zRrF!xy~F_=ob5h?ZwCK^v3HKHBWl}+(?)HRG>x4$Hcxn>rm=0?YV0<)ZQFJl+je8y z{!RKk@4G&%^{sFIJ=$|-&z^l>_XQ5DZ3n8GbNsa3OOdbmKKGtP0eO)fT07@Rdq_*z zJwN@`(JIH?NduN9fQ*#3->PKMP_@8y6Pe(kjNVI)!;JXqq$`P{LXl-z7S1Rf z1tk)i0|7OcMsWcKKxW7QWsen9q7?!8^&_KH#CL-Qi00?9cGa9Rxjk-_?xTR7!4jCf z7YYIiq|&cZS&s6CXW$VX&m0lecJmDC5&Md(#pIA_FgWLyoMoRD#3ANj1^8|nFu}x# zqUIOk9pl1;+0l2Le41g_7q!TDDi79GnEcOV$#~;x$dXmN`wF;k zt{E?+v^Z)f&1{$Ki3bzzCxq*6&!2-M%jqFEq3GVSq=|XKBsfO~z|Ocw3+}v!9&Yg5 zjVr_hOI1xxzy>&9XxKMOg?0R7fm`m`gUvr9r z1e)PYNTSp<7geZMs}hJl&1nE{`2+)O(zIi+Sl>8=E`C#s!A@)Lw}BgPFMa;MusqH* zV5uG+#291O;5`qK6W?dhzXdUGrs%xA=MNhsP{u=$ork!wn3hD~SS8d}z()SudkRsA zSD{l`WIS?{-F2dCRcmC6_u^wT2Ohk?&IO||kM@*C2bNw%P=I{o=#bT`CjITHt_3G( zpK5`ytAHZ0F0pLfdVbTa9i=Ra7q`Z>hX^Jf-EyAcxYw>P0C~d;A$#}Dd6FIG?bjiC z-~FfZ)*1cJDysKQ2Y+BJ@{MiW_!fx_4W%U#Fr;LZZ1(A&uj8F0)nm`%Y%djwSS*8W zndWO%zqV74)A8Yngm<54ZF27RkiXh5hY`^);kFU?@ny$iGl!jMK zG2kLmVXS6j@=GU!)lpe9yA6OQCS*<3GTQ)3p(%2#AC>J!F&#^Cxnnnql}yc335pjM zCOni4vR>BZo~MbDl^;aS&ru-@tW@tI@QTW<^;3S(<(+$aTi=_Mbu;qKKf`rUD{vxh zeK|IWsG_3 zVv1h6%QlM(fyV7KmSDTD2GYWsmcY~$(6Kwl(|t1yx*kMMFB)N4!rS3#*hI9D#1 zvC3TJqioI=G{BjmEoQ{CWMwaLc2H@qp2qggfelxJR70|2U^ac$Ixv=Lo&>|y8d=EU zW&ilnE0(q@6D(|(y2rc8I+bya76hE+)rG%I$5urTZy>VLBfwA;K?PAM*+205jtk!<%i_r{F=B z^Hx*RCPunjr8?$wEP|=QTqa$3xv;!MnDlnP z39Amt#A=NpkGYW8;@d*iYBg$FMam*vBrn~}qO~7p;TTiv4$*wc`3{N&*dpTRrr)VV zca?f^J5p9#atgSLanRbxH3^wovxy25W=(c_fBY0WHmz*y>BOCd!}n*4(9FpQE_aO` zHQH9@qX1tZj}jzSkL&`_TA7kp}8&?rY^aM zQOKq4ZLyaM`33`oD`Q19eQl)-JM|Pyc@LovcWGehR>;5ls~)&mh7FE(6LuAo(bHEL=uju9x=MJ6EvyUY z68T_)&$nL^!Ca(?U<~cQbA#GlF%yqE4CixIkWI)*;7S&fuxhgWb%>u|bpNFcy{#ic z45^MUrQ!#I0)n~HH=YzZbTi`!L~jzl!wC3ALm73K!t*mJ$BV0V*spgl@kKmCQ*W!p zm;GMtx7=gH&B|;qj!<{%50DW0>4R1898g*VxO}t9Z1@)!vW0Ysk{YHYFI!I-LH=tl zN(TRl#N<#loK9*Um1m&Qxl*f;dv3`hycv!%;YqIQ)iqG$L@qlJjz(2wkw$Ovc|+Q; z_8l!wHjR(}StoL@k@{c3XF9}%!?qM?UR(Jt5A{*5@5*1M(15}24D z(M8OHv-Qqur8=MaIul3@np&;yms}7r*N1}8_kDYGomP_b3znmu$H6q}eE}{OMB=yO z-Hx)R+r24;6(zMuG%|etqWt@?p6qZePSfUwJ0Ng;5BRCN-5bMYFKC%^m6YrI}`wkY=cqsvJu0V6;-J7|XepqA+#`y-FT|ocf zr>?B}gf^5@w zzycHX#pG+RIva`Tyz8D|p9$7ciHwPFf&4Fx0O0$-lVXX$lQtZz_GK}&C7_{W`Lwzi zpJWx6sWQb!jU90Zd;vt`ZwLKnVOHQ4^Du+kc*_8%hz$ZTZ9y4zfDsia%b~L`T z(wkL0AGNT2V#R6f_cn>8uL_+#SUqNP9hJPQQ&UWrnI4GJUN(l`zVSoF=?>f;p zn*8VVm_jg$N-JjV39FHLIe~bEm6M;}75?50u1SJ`06yHwgBs&t9Sbd6{m%kgn;LYn z3v5XKbNIYDB0~GPLasl!oF7=*)(&|jI=QF3IrmBNQE+^LCVrw%_@+}GRXo=Y)GbCM zPk(61B;sDz8**x~{(XhsTMP~=`5O=9sCIp2BFzsSy$Mie4mRB|2z(fSvYWLm5|2Ikiq<+elc(bE>WfY(V_9A);ZBoAmYD+0W)}Oki zoX)mAsuz)iYMk(gP~j|F_{Y9`B@(}dBDcrH!&{ynokJOj+5oncDs2}1`b$q}mGVYy z>uj?&-bRb{8P0owP5T$$uuRWmDuVLmO};!jSn7M2X?_czBG$X{`G#X}(DQ=o&e2&J zX;U?qe?Kc5@h0M@SNyv+y<$$Ct=!w3YxNJP)@l>2Q5fXZl0}Z=-+qtVF!Pxs+cUrdh3DXXZjAPjG~rM>#CjCF z!Ou-10aLSWN-P8HRjyzXvH!TLG0sI{@RCukbS7<#`uDvBD9)#qHt&w5jn+}FSbI0( z94W(!G0t;2Ip|vqR^2c)8gvIToAIZS&s6B%o}g`yHs2}glvnfv_8%o1H(0Ns(VAF} zHq|i})yCny@HqAKfr?g4EQ(8M+R8JN?7TncpyxMfB$b&Ps7Uuh5)DYvbc$)?&g!P) z6l2u#^_!J#Y@LKtoAL^8IN%mlxn^YAj@8Pg)Ulz`GGhY*kqw(W@1!FuD|4!6^U*~R zY!UV3gh^F$mqD`gzNUWNWmA;7NtrtZrQ>lI@-VVMd=AT|>*?08KdN{U%>MlspFBfetcptP z5TDqouBe0y5usz;Mn$2;;F&!CuFlnC^UE4Sot1>M7fB$H%E)4eX&*YodV(5FRcBOE zY1u^BWn|C{3q+cHURz~rEwkv#62N(Qx-o9_G4Y!NS7e6c-CAH8lh}uCz$K}0_c?Cn zC*EwYf~3NGh56qqLsL{ri_jy;@G9(MRjlY>GX{kQ0}^U6=8u376L-v8Whze~7j)-o zqG{4&3}ok=O5!r3Q^!@0x^uv?@QY{?@liKfW_lDAbkT6S-#o2Q4T>x!W!p=UgCq~* znroRdqvZX}>ke{YpqEN89Bhxyeo^r4RKNPzr1}!TEjg>`Y`re#8vJQt_{(*ej( zix99tmTI&hE}(bLCWK;+ku@Udu?NlkS#b2uSXd zFbCB?usb;YdQ}pV#WK8{<ial_QkUvwxv6Ml#x!=k{-bEroNFP8^7$!;{t z%7Z#F^9Fw*{nsgEjoSERiT)c4er3LB_lOhA;j-}Yy7lo*DEV!*Gs`yvZ47?Q5ch*gmLT)T%(w9|B7fT13E$i}{ zBG_2wcNlf>c2d^WP+Ml#4TZ}K3XorRHl%*QRQ=y!et3`<1s8v!A2uzVT!D88TEC7p z^$T>#Eim+95GU%=t(V5&7?*w1cFF=;g2ft>Xkkc*pS{QRYi*V*VCTOuN+b}QzX2t| z`P@bb&fps_4X_|~2mGM{1DsdDH#%F(56G>MLWTV%0OWp;YuDWOa(t7@jL5H@zO~28 z82@j|_#aIFWAf;?*k%M2X9z(I;5qVk=%oPBt7nds^c69(5!BMFP9HvD{r4qcE^+)< zgbzHVPyQp4d;84)Z(D(XZzlQ%1N2F9`XvAY-GzEvRefQBNx68x{DUy;U18?bI$qRA zS4>4nAz%6vgqnz0ln-+Th3pjeq2I*f-aZcj@t5QqOtOucTSBE#Y^5opRF73E!I(kd zu!K*!2^PL(qaZ%pN3EXK(^W&xr=aj8c|fH{FH+2oibccJEsTxd*5_n;1?d8%`R~iV z-D=b6elh4#`3&wu6VhC)G%dtx(6BYDgLL`#I>bd3svdpc3;)P_FL%Wh{UP}93eGl$ zVb|H>;2exH&@2tpZK3lvjaTRwWhz`+npH|_)Y!V5{7+zl?X)O%pJHU7|C0r&8EX(O zG*8yoc^l*2$+?N7AnF2gQ&_qSf?^Tsg-m?J_)+#Z`$x^xTpT^y;aOZw@xH-)9HfRV9 za)&HDM5}NFfHCnaF z#_cd-jGOA`!0yR-%OxGdCULI+GFo{=9t1{^skWTDRyT7|? zFd$~gfcBgGK_aFjqq@7^>^~i`?uxdEQ;i( zNC2<@Xf>|TJ4Y3m?SyS+=7J0KCNENK38?B&iAojK?Dbf6frJy)T2Y#u_xUP@i-~>3e-Y4LSE@y0 zHbkc0Q5q7IdccNJr{?7GD`tpEY5II>0~Q8tcpJa}cSUpy#M!i51ALgad(vlAfMbON z1gqa2TY0)3%~$gIe?DGoZ_mu+eG-M@Yd-_dPZ0W^?}!iSxjjOy)^sLMBAI`&XEiSi zXcT7oEfbSESjwE#(?yzu9hUr|EMy;I+*17*Sm|ySQv+vQBT@q`K@A;N1a0W|vr`Tu zHU9V_k_p3Uk7+5szh0#%FKWwCi}J92i#E}MQf?`CN7-0Xgsa+|F9DC1%;^Z--x2Sk zw1>!QU90(6(-W(UgL^)aG+SW0YmnhlWUxrBIGQmRdyq67TP)G9RU*>r7KfF)+hDI7 z&rdi>StYK+2Sj6|zfY_Yryuzb=WMdS_!Ih5q4zMj$rK1TB~(EJQ7$1%l~W^;31KlB zAG?(^FAhW4T>unf+T)TDaSn-RK^Q=qf+F#4YNQQA=(A9utpuHanZWLDWW)gXAPJa9 zT646V`cqf8793KnigXy+kN;V45w(HUI-L8Vfb(sRP+2x^qf_-yMv20cPQq>L+r(1c ztjU2)gkm=ueW?}Y0&4bo;eGX|0lK%Lul0z;si%1Y^Nch|NINk$6IUG^S8^=k*k&5uW zJAs1r%tT|bHB&AYd9eB7nD>zpK>w*M_)3KrGuRm$9weTTZP2?TZ#r1_RWSanRE~tg z2(^s*Qzh_EV7Vqrj|%Hn07NTI{N0H3r!BHO&7qjm~<>SX{g@=>U=!)&6-P z@m&zpJJt21k&#Nte6_`Sp~~O__?LT80JFu{!}gcMznJiAu#h3GOOJdldSA9aGD(#D zqfH4Ym4A(KHYd~sf{S3q`BU^3kS|N@N26IPg9DJ&4c%M&f5yek*J2C)h*O9uGKJ0& ztm_%Qp{xv;b)gjohBFeHb9n!(N^6;5UwP(>~bylEE?)m5Bz zdPb^44~-WtzXHPI0BrRp7RKQnSuMA2;`1d%xIWh?lUuLtWXC?1j49CefI5iXW*R#r zC(uTi`)}Xut*{>l;+%g~dYPRp&+=c6b;Lg+*t(2*!7+Fv`k<|wec)FZrj{O)o`g*6(<>Of_kfmJt|{l?fdKG%qKR3s+lZn&M+f>WT%ji z{#Ws!6wVY%h}?Ff08WP%E@2W7((Ihcx<+P}gK>PWE$&&wf$JbYf;)OIDeB%0N>u$} zpSOrq1kcCHMl(&Q%5%5DB*l@E(lvuRtNQkcU<39>e-eQ7`Ts>ne=;WE%QQyt?qP5k zi#ENO-t4?5oKU2=#I3+8{_&xTzjid-Z`p-%XYD94U~hyG1*3!$9#v*jBk;ZAL}Tvu~xL4#yg z-5Eo`c>(jylTr_s+u72jl5`v3d%@fCV2tQ*$1x}MCp(^RYOJPOwFEQ{4W$DT17$az zLt(<;JtQE3ZzD>b>5Gp%&ikY-x%vDOMskJ2rLym|#aGxn_SrZ~zr>k?t`c155^_1E z5UWcvi+&$}+VZy@)I~seGu$;cn{W-}&`u0+BVSpY>HO!fn-6E+c@v3}3K|I`kA{l{ zClVJ3)OZL7t;&2u0Nl{29zHK}F*byj)f~|C0X~|&$Zu*^zL*kq4fNndImNDknrb7Z zAk3pe%*s!H>STNP4dXM9dUOTg8=Z$dX^19?eSxxf;ZXaHRP`<=fQx-o#pZ)F4xkxW z(S122MQ(hIEOb1^*Dp{oTPpi;{=+fRB!Q{pP!Og3ooRN8#m5!e$*y!#!Z@tjDxteW z{1{{JtSC{lA)NBgin@LhKBeIBc;&MxqApr=pPpggf(+WfIkQ5Nc0@i4ym&gy^xCNG zHrHN@LSPraVEBDF%4&nrFbJ| zmk@3i34O*gVqP9=iM%7Oeu1Z-44;OV&Y^i_8!*q7uPWu48_y-9`vLu|fFlNzvoI^Ec$sk6H+(yx{G;X9>gCNn(23YBtzUHk!hH7g{{l%%K=a0XZcU{?e_C+awdJG82?A-mynviUH2QWI6=f z`W-(kMg=NTs3I|s0rB-7=Zj|L6Xh{a1UCfMct?9gk-mQH3$1-l2L;1pxbl2Rk7s52 zK(Q`cq-P~3Go_jMSp-{vZLS91we2+7--nq|1BeR-m^hZr*;@cbgw^tiTC*U52fj?} z&^Z)J*n7fOuO;`l)x~uC;g??wzgv+F%e@2^UAsBI$t=y`o)OP$t7+`Ee5PGsD6jrJ z7V-|_Q|uqiqkb_CMH=S(tGVT*`}p|NH`vz-(lJpqg`TXHquRYlhZgSlAsWNqhAWY5DoWd`qBJ0LLtE7a5o7m`El^#>M5^Xi zr-8n^uYfjuFX=KI(ZS^OD(TDPuCkcUp$c-ONqJ3$oWo@8Qx!lG;^?)_Fphp$zMh=u zwC`>56%gp;Z;r9&ZV0IV6{=EHun!OhYbt$u*>H|U)Ru_C`I%1aJ|q~Ra#8c8k(i_+ z`xy{RC74=>vBex;B==tkKRone`2>C$KC}NoQCW1Ba}8~me}pTbTE4d6K&cZqm!g1* z&O&nJYd4DM7fM8~J0RaB)DxN|+o6om$~Z5SaTdv&faX;>)-a;h6GU}SBA<+0t{XVhd=e28wTHR$nhQ=)on!CjuKax&a!6@v(U%-}T5au`MO z?0+Yclux(6TkR0nqK_^|z~)lm8F;CjG1YrME7m&z>%CDwnj!0miFnRf62Zh;5uog| z*>H0jS>*eCft8<2w^GMvm^|FTJSv6Ieqr5i+#Wc4LA>~3O4yKuRXyLRw-hn(;D&{U z>Bi?it!h$&l$NXlUc=usg`(1%zVXw}=@%N_!CRIEgkAS6dy}8~!TlM&0$Ei`_$-!> zWhH}iAYkGB`5v+JAfC@ql2%EC?*G4Ev+jS z)p8cH3<-NAVU^uN2vdQ}xc>Yb?PdjFF_Y2Lt!G)%R8SAiB zG?7S}tapa}8`LJqt8eF4^&YO%rSuCm;6`P4f#+wR>dqSb;J}r_niI6Y!{0G>sZlu=mCvgVpU6F z@P!_?C%ilURl1hrtH*~KZSH-WsDNda z4~^ZRFICXI{?v1Z zhc}f5;5m7^)o>VPRSoUw#TC0*4;!|Tz-2Id!+2;yk|cXuzDa)Qi`v zQD4;;Y`0ibq5Zu@ty5v}HWkfBquY(a+tKx_=T#6t<`Uic5k9I;Hk*-CoO?|itm$S+ zQ)GD$dvJlv4a-PNC>@7}Ek@zyadrmvit(_6*RXZ;bfUaR-)DR;Xt2*IKB~)!Q=vEu z*Z0OlRIB9KTo&-N3H^Ji|CX+d7aTe!?g;2P0d5$AhV#{wwoSdP*~bI&Z4>71dvRoo zSsRor?e0Tur&IwB(Z4==1}C^vYfNnk1}KYnKGjDj=H~s#uC;J4s4M0OdiSd?G%IX)SY+X)5%! zLX?lQvB|oNGVR#;EsqYc`#v<=OvwMaF{UjtY0@dlQCu;}nF;RbmGdp_o-Hfp_+uPw za}#R##{LPp!x{OO{ZG2VMCT?=cJK zUo2%O^ju=cvu(<*tR-;Jrx*-%axau`U)T$=A%MM6NwU6CQb}%edDyl3eA{-N=2r_7 zC~K3ggGE$M!6s;*F`9*!Ye-|UYYddN(sk@- zjys_K{1YYG@zau|HhsNQP%>HV%za&tMz$c0iUInT5nk7y?h*!GRZ~+Aig_oOeFqbt zGEGO@9HeOq$?ZZG`r;RH-GnXyMYOUSQ1tevYGU!sCCq$eQE(rzRbC&aL^xZhP?<}{P7`K#WJi0$<)W{j0%ZdFS!1onK6HRmu zjmAyN-?4zV%f#j4>jaw#5A9@qftc_#v0u?SU>t(IFM#L?EuL+VBg974AitH_bQ%oD zm=J&qgZ_ipG3KKzc+tXadgidq_h%`jTBBO8Z)wW-A?gQS|AzL8vIZ1~)j4_%91Rnr zJX!AVneIWdaWHAed+*0GVUdjgCB=szbdS&hNXnZ98hswQ%01J_&4ZT1aW*4R9mcwi zE&RQabhZD622c?bU8iB@%I%L*H^)`FmgRaSh0Jgdp)CPU#|=EO6XWXk_!N;tpADR| zjYTMtiSQ(8fsu3bvf5DyK-_t=^EFB|Tf_a=?`qnJ($-scGJ}^k%ff+CAE~N+t`!qg z{wEgJHu>sAv&dchHtSN|44(!7%Oj$zZ#B}Pm1kJdX|&^73Ba7|rFz?UQ*|HS!x0CI z;&j`w$f6vZkke2Wh2uo#v3QdN1KaG%rE`-nCZ}P&MF}rJbLrU+QUs9jGIo!mSLPe0 zsMT?v!KV1=$FGmesjyUpU|5kKqW9P{n__Pm8zM(B^V-JMiplqXQK-luK&O)H5>GO8 z{7)xJ9oakt$13!l>5Ptc*Ys6?MeyV^1Af?j)}fq1NbdZfl6z32&ZrHt#~0Ot-h=|Z zNxcxye>Y0~Umy-oFi}1Yb_kJatT*IKQto2-#+KJG>pN61`&XaOe$`K$^Vf4)o+pjF zgC**f&X+p|LvaId1Q)4sMD5Al4xmQ_Asp%?=DqBuP!aO`UvoRd`pp*W!yB=sC#)z7 zNFj8!Q-l-j$25Kq;VagXM*Dq^TavyA9+`1Jm=YyV-X%mCv~=UjEQm>t`G%EuN&|YI zN|B)cJM=c7VE_ChtAqs@P$QPlW`dJa$?!S*J8r$YHezxtbVN!WrkXkW?a2Apg;SLbPG$oLq#0wZf6~^ zfEWJ>U@}OS^e|Xr&O5a`T2=5Wrdp~n5H)$f5&ME_DPPB2shzEF(9C^+>DJgT+ja{A zs_3yQfZvqlpor`#;dJTi5blW?&=tzfO(YIWm@U#q-ivwxEpEq+r{=&2rpj{d9l z_2rRu&F!*GqnVt*76dE6cf&fjapY|+ak-7;tZYf4mgja8?rt9{F-EaWzs0oDO>J<( zzj^6+h++i^_^{8#5W0Zl0}nV;i^yvjMy&t#U&vwl@w&2VxvS5gSotxG6LJZ}JG8Xb zWcs^X|JK?m!uL$6OomsTCnIb)h1t}2F3Fb1lAypj3B8}rmW1m`{Iw(O#bm~5l{G(n zag>1k%MJF83IQzvyU>^92fbpj{#sjT9-Vt<6gKSn_40#5JZNF|n_v;h9Xa z@DfWMUa&>nr_B{NvP6{5uq^q0zfn#;DD7kxiy*=5O68;BM9>AlU&dN#tstvbIN`>% zS?J7-Xk2ZsxzptVV`869hn0yp!EEIo+3?;^@zVv-#ix-cGKjCPR@3=LehW{9 z)`>LZV*U2REm4JVYNVv7*km(`m=>4BVyhp7t(DVynNqC2f``tq;AA3+mEOgcXC&A^ zZ#LSWKHSi0ByNU!MBc=_R_goiX<2gCbGB8SFhc(AQGEwQ5}R3Bo$7^iu{dAoJJa$> zV~R!c!o5zckG-%N&HxYX1?uGIf=YKI!ssq9t@8{dx_P}}E8XUayDN|98_719ZtWr7 zpU+g2qr`scmgNLCVa2HX1i4b>`n9qANq2@nJ{@A2BS>aPoF(u|n^%-nD|(2JO6epR zi`Qs8WyGHyJNo5m$gWpOe!9uY-r^QUQ9zV(`M?;$JTU*nRO##yL=ZBBgAcbr8Mj)j zBh7XC!_2lNcTkzD*DCQ><@>i2guOXUY)vI|pXUiD{GfM>1)b)(wbefB!^w-KR30v7 zbC}MdktbNJsK(XIaa}&0;{mi8C@B}%!6hy@iGr#KS?C@X2Pn+>%*prkKKoa zd0=gRXYd|IlKn4gTG-j~>CZof_hU7WTB{2)w6;;IeH>>hI}i`^lC3v3xRBD48AGE2 zO+a=D092H_mqxAppIxu|T~J`w6YYm20#;?4$b8B5bNwCXElsUH3-v<1;m z_IB4xC%m>KfI1>29yVwYo?>-;j5@!)*5aRp_1>u!VR9juA+!zUjGQA=GJ`a&j^mD4 z_;pI_JnHy*tkNa{k}8qt6;nX-?)%AUJhVqj1DPoZHCer1bhL;CgMk29wP!i9Bh5rb zqWZ%Pu^)B3@nQL=DLCCS!r`iEHA&$Erf`e(C1VUbaZkn>@=~m%Hrsk%qkaGAKjrqO zu!XHw8$5OP0PNbFk5X$%4Y6wf{oVY@N;5_Dd-}@vaiI{y@3fZw2Bg|a)w9lEPdg89 zQgd(qIJzBi0|#Bq=Wxo(?L<%(o9MDe@$*F1>@j@uz6S|;A5k4WImG6pLgU04lIoAH ze`J}trJPP!UkUyjaZU~o8H|Ums-Mdlz{+Gee+3_4PdtTv zc&C&|7+(=2gj2DM33H*z+hA34Tjg9IA*FB3oy4-!UdWIRw52#k3x2lDH2^j?uk~>w zoTbfiqNL9_qPFS|$;q*CKfxBiqtWhZK@OM8)`f8W7f!f+=W-r6=R zqwRR*4B@;~hLt*leuo3=12vg;v-T zxGDlL^_HQzewxKnor)*LgKCYj%q%2*kkVsuN-D1gv68ft5t39rkA=YiSu^=qQvH&O zo3PIp9j9u$9;hVHDz&YEQfKJ35_#s2G~T2BN>LD`vki~?u-MjDo1pYcu7W8d88ajL z{qCKSkE9m63ERiG3cZn=*Mc0W4r;=8O??Ilvhi9BxiP4^&gTz=L2aN4jjz8_BFGN4 zU6avoc%Fjv{5&PZu&17}>U*`E=Npcj6DGVXKS|t$z>HiDn9KRqrVlOpZFa4n&;4ibL%A6<}zAdzTgfDO6_rgjaa zUfk?gM~_`8h14Rj!b(h%0L%R|L|(B}>g$T>Z1}ESt;?6#XxOIPCXkG53OiZPV2Us) zu^&pEe)WRhiskaI{&iMp-m}GS{PN(m)(;GC>(f4MqUDFI6MOOrm4t((CM3&~B5}NN zR*>S+=gJ@`g8@86@N6^+(a?<3dRBdtxkF+DfjY~?aj>TM+1$-E%;)g^%B?a>eX#U5 zE=cy+;!?(1RZfwjKtE^f4GrEXli`!0Mr{4Mz(KkEcC_z9c15WowvTmb3_JUOG8PYe z!J3kSytOpx&(f=AYUl07Aic2*uE2d0D2NOM#2?w&*@hx>_Iiv7Es@|R&+~|d7c!CG zwyIwR$t04vk~a)xm-~L2gYy8_n1bjB8+k$v1(uG&&ix8p(&|PMTX0#>60Ri`OTAnp z_pHCKfO&_sP3lj~w9uhk)3bhYf8qwT#LcWWf!!=(_WtQaN_-KntL>2L2BS?q_Vm>G zfE;3u&1sBJhoY$ihRehkQe!Vf!)GtW%f#!gUyxe@m!jck7VzsO%!hbuC+{(itED#Q z76A((d>)Udy@_mp#II$grOyXS?GG12be{J^T7zmGbROry>90?_Ks;&Bn8!`E>+OmA z!+t&r3d)W~RzizAu*+`-{6sx1)F>ls%)%kG{UcewJ3rQ1b+a$72G6rHu~%ncAaXY# z<2tXDsYt9=sKGo+s!tzErLVL(SlET%6Y0E)|D_h8aA4LO+p9G@>1%a3EfoxR{8}nD zw_UWrIm}k`O5%DY-}!mSI*ZiSWgDez_TE1+5rL$=U+fWa!E6`P9jjh6JsQAqLGe*W4nup4e*OOpubaTy(^Nc*oH@ii1t=6}vv)I^fTU z4F@h?iPmE}Z1m8YpL(oO`M}h2t#4Db9BshZF)J0iDSKCLncp>B)W zpe{Q@sprB^<(mS(fAT3*ABkv%>-wykQ5_7Cr*!e{PwwAomWwbtjOjB3D6h&d*cUD@ zM|#vT9JrCGKJrEvhKRz_tRjk!Q>rT_CB^?U3eMa?$W|p@aY;$d2I~%7p)Ih34tWdC z>Ot=BdT*l8CD%hzUdbX3lRY>S+YU7zY<28;+wA}mv8c&|UjL#3O3Y>9Wqqks`@w;( z%?^$W@Y z2fMMTrKak*PeEo2)a#qmU6X){-`vo!ms|Mar5LJWgeh6#5~S-uCP++DD<`vxHJZj{ z7KAZhYc|&m6o~*g<#C9vy+*{~zMAI|%CjB6@FYESlGBk;Vg-n|vF187oz|g~<>Q9p z>B2)o=3yZ!qWf{QhwLk^-FW7kc+8-+&7{-SRMz5!EF6zLlV_XS9nIjD8Y+F5Rs3B*4Lf7LoUn2XKd}H$uzdE z6ey{((;YqBX-ljaXe#XE*Jn3t0=cIWvxe|_Rs`{@h_kFCv(1>*mAnbc5V`wY<9gvy z0Fl~m(glFC=Jg*m=NFy0lBK_v!_Ru<2I4z2o#2Yi?uB1H{B2p)-?ps&bU3lg=s6m$ z_Hk*Xn2b2TwBoxk8t&KlhpWJ=Uv{bsv_vT8zv_t~Sk%otMKKY;1+V$l4!JeAV zTzOaBhL1$Z+2jcl$vmlFBqln%VN<#HR24KD?>Acr*kg}Ml?Uvot-75d&*9mTuVovq zi#FM+lf?$EzD52G%ZjEmr_fs{G9Llk+La9HgA>Gmx{~j5HNJzeM)H2QlFiK}qcNR6 zZ#7zY>QfqiJB(Pq*B9I|eV^92v!OiBK}BI}J8E-qs25Kfhj>V+Cx$ZhfGl%RiKg{= z#|#`z#J!}RXaO&XQMKTr3uy~(PbrqjrFF~I-uz>*QY!x{(Uu!n_+7F%%R3gyeec+G z9?N79udrUSi(^>)<%$^RrvewI@J|=r>Su=gE}4>H7!;xbO;nyh2jnZ%l_q<`5{DT{ zi)T}dqmWgi_~f+d^uCwX^s(f=7_USzGm*ZI=~H` zWRJ5n%qM4V+TwiF`T+sa9nkUXWWqM1eneq~LIXBa~i3gQEDAL!L^{e*iZL02jYmVvNe?1TjI|tNfzR%?XI^^ z@9vh zUHs|RRN>vIa2lUglC;JXuf0SZdKW#BZxIk+FQ=w16`BtwDPNmv3+O=+%LHU1?XFWZ zetI8UiX9BvE0)}1gUmhMvc*K&eCo(i9G}}&uf9M?1EqY1tIzG1y+nGYElAq~Ij~`P z%zgCZpLK>-6H0e=b8Sh_JJArRu0$HOqF6s}wSk4mcoyqH2Q&Rf)tb(TV^6WwQDVVV zEntv|Px~Tu#A|0QjRJg4>}y+Bit#gy0YwH3?0Ti?-Na}O)21`zlN7^rvH3(jadh4r zpY>s*Shr9EdC`k?YU^g*$;RXjs1qgJk}oxp< zn<-2?kmB}N|e%LbLiEfv9Ujx%rWiucg~;jNyTJ;Fa#6$%mp zl?Vp1LTaUNL>FVDI$GJ-RsGb_`r8h(;zi9_r)6e)`>WK;mefloDeT2~8U%znJ%Hap zI1~WGeNhNSqlX|z0RTG)j(C18C~XL7MqPSswW6ium}04Jr?xp$cd)ETke&3_EcQ*i z{)uolejUft26wp;e`?YhdUT6MEziuMvuv8|e7E2e(R&EH(l~~BV52Ztm^_hL5nh*& zoIg9mz=baNT~t*P+Mz@>;V3VVyq>OnJ!OInnK_~4-dCYLio!%@;kQ^Zi%1U6_0Hv0 z_t+Gi!mI^@OuX);D;dkk6f4n6P~>2hoe^z8MK**>pt8 zb+3k4ryNN{4xT4P@Kly#RI}tjc@Tn`<;vK8dfFY2$EpA86gP1Cpix04GLCA`e}h5pBc%w1;@W?TzNV?E^Z-2AAP=yNP;+i=@InAC7QR3 z#T0x;$u@8MSTjoPcaqp*gOI0c#Rqm#`9ONiM_0&G)aGI57?WUPcRhJNQDnIxXn*B2 zziBSzrbw4MpYocc9lZ45 z_-PI1mT}kN2pFi`)~rV2Grb3diyovtKQjp`vZsPqi?il-Vg*t zUF`1B>oa#V9xi((U5-^+(bX7Khq!^EtkzaBN#F$V5EdC%LBG*54=I{qG>Ro0Eo5xd zk7Ja7H{fa6KA2c4roe1Rw5KE?IvMCn+C?B&>B?fs9cNy-m&7IV-s>P@|MsA@w|0Un zR)&4JoKHYqiFhN3kG!_UVGB>8XT&#gAk!pTHK){%GiQ1008x_lmNsOy?qksBumfH#`UNXW`xSL#b&Ng;|K@Riix!u7zK2;5KMvCncpEUUE*V>Gs_%YND9DB|I@oZclC?#lEzy zmby{hlFt2u-Mk<%bs07uI}hXpydsZy&oM3GO6C}obGv9`?{EtV_Hc{(|?J;B|J zVh{b4$}yqOD^*f)txvZhG+;-P?>>+)MI#|;1YWlgFbavb_${7&UtM7^z{B+zPET}M z{?mqfPXVJ$*Pu>GDwVmeK(;ela`cE-QstT_KAHzCX&5d4{3jkX*(6L{o_5BzbR59F zJ)KaXgY>W*%)yx7AM;I$^|TzWga|U6kPo%9 zm?bF@pNmGAPkhxfb=J4GHDMBPN-U=qA$zQo&gGv6v%DebtCoYqzq#}>Y4q3bMa$LR zOSkQg^MhXqrt_o!+)=*P`V4^Ai~0~Bty(@qg=I$x#UzHO_ngDYH9U-W@G+% z8;y#|h2@pxyw?oml-QZ8WkDvrxIl6XV_Xa-T)d=nOO=T~lGIB)hY5Q}!8*Ui*M2+Ss4>LEIA(5xgeT(9N>x9?R?@sB^x zJ8!6QnY21>(LFF1?Z+iIVMr_ebU2ChDoE&HG|Yg=Mj z@(g+8`3tdg`Q6iq|8nap%zNYK5-0J_e+yik=D3tbJv}CbSPm=+lKb27ZfZ+7k&iC^~cTBM|!`{SmiS>n=b{!Svh!Yg* z1WoH`mXWyqrJ_+KuI*#_5(=7d4TfPPkE%HOIAKsFQ@^h{T9Swb{n!=rLt?A;IvPU8 zLBot$=%6}K2;(iWrU1QS$P>a#vhHh$%da>be&Y{4P-Ll6)av4^DuS%0aXB4YvbIh| zHy^ue>pK_vYR57r4#a^E$0Yrg1T^Pqgv^svKZ5c)JomEn-*W1_Y3h4T%$?bSQ*J3` zFjqVmb>JJlfru07H#Y*$IuZbXA+gLvp2ob=Pu%Wreb#%|AL@85~a+qRWMR(n}A8x!ea z$U46*Rjn`xQy5f!$tWrsuB|-~KgY%fnEBYZFqF*BDq=JgZ8SW5P5Awb@|DJ&r1Jz) z%77r-<`|Oq{E2ayA^e#__By-8oCwyoB+6GVCN5mB{v=`5WmGEFBb7fudaa%3E*k7n z;=QJ}Pc)p-@;N`_KvN%EKYs zk8d+d3)_7sDZA(iXCPg5CUf8$`y_Ue56#>B7;eqaTV$IjGBh)vjz@?`Bk4H(T8O zGq5f51vi0i3~37B5UJEG&d1#(uV@bl95#94It>MhQautV_B3%XihscMP@AzE-#DIe@Ay+ir!9+G&6acuMbo#WT{r3eGO0DkuUU+OT-oNyzYmaW3E@8# zm|KBA1VE~KFg)R|2X;=*?LaJgM^)7O04SzjG>b=sa<=Y?<`-=GbmUCc?zr0j1-Lsa zAJ7|~v;B?`Hx5p?cxF55j5>0(!B-G~oHdfTVn!jY!o~zC96>zEd(CQ%kjtEl&2Y`z z_FnHOGbAk;-^FsOZz|>Qc}ft zX4U&1cDZDEKl#$^(b}AfdOm-CJ%N!l8yXn7UrGSoKhsq+^RbO*hpf@}kG@x~KF88E zeEN&@J;&tki7y&@KBq4{WRPv1Js+{03HwRkm`G&5Ik;b+d!v+@{5g@PWy?jHMe&F;8ylF!&&$wJuGpS!C5mn&fgY>uoOMuw%v=t5u zkpe%Uhq8DMTR-UY_TJXimw1zZF`ffGxg^)F3|!o z=7eIAfyH;-{$elpv;4>RqsUorcNzK|X|d8sgUdILvSdW+Yg=>UFM=EeH+Mzv|0QZv zp69&VOlEm#JV3F-z&K_VzB0TvNwuaiVLn|IQMjtVyTxr`NQrRHK9|K0a*fH+8;mb% z>?L1b!E(|o)h897UNHFKxkpx>BBFMJJwpK>jo)?eJHf%#jILs)qmQA@>XiD`ZR63B4F&n&@{{k_rUSb=uH&2a}PFd~CfCMMcI* zH0v@#;?BlgfuwZ?O^vH;u2Wzk9K2b*AeD4-l+{{5)&FdT$-A+^Lp37v#RG&Kr3iZf zT5#jfw_@aviIW!pVeLoDLawYFM8FA)d^?o!Yhc(_6Gm!uClAI6PiaS}-;8;#JlocQ zc0cwmey*~d6GQ{%Mn$#yx{R)O>Ia7LqFHUnUhQkWl-UVbtkt43{lgd3(?y!NhuM~u zB(VENRk^$Ba?d>?Y2eDVabldqLZ*pi1O^9}r!epq>1n-@zHgwDmGar@MnN*tvJJ!W z55Y4QYp3QOma<0evvy5gWg}xZ1ve_|J)9&`q1o9LB_VIoo}QN*3U)vQh<5Q8%)QJs zT!?GU@QAl0poX0~Mx=#$^L7TvTSwqp^T_Ng8NGAkf(`Lm@wzD3HU21kTIv(kj-unQ zr&iXUTIxr}_XzJ}55x!Gc~gRE(4Wl%qofenRAUeJm> zBqN+{dy70L>v57Lx0%jUZC^TJWcXDpqSJ=3uNy0HG0_;ZY`%;jcICNUiYU>cpW=}R z-by4738RdVa#B(fwSc)$?-yWUdn5fZUdi+&5Rzt{7*6i@mEd%l4G;5HkEs?Q0-gRk zB=6j7IGP;q)bvzv&(a$D2uuDl3pu?B$s;D$>O*FTd(5ux;h`uDCdrv+Hv$50_?ds~fKlBp2 zWun*m4bW2Me+>bFxYP^C@J%eQw?g%LKWPge8)*zF=PD}0eL>!Q^P!RFnSm+5DP8E}-`Sq@*8 zGlsj+Gq&3W`0%&FjhBRlPb>c+9t5hdAM-(8&BIjU&eI6FuzQ8|-1q%x*|dHNyniu_ zS|vXjl^T8iNbyb#ezWnFhS0cG)fq=@(6SgaXV+K1Qq$%aq42&na@FRTjRzrOLspW$ zeKpDga%bV1q%nSo$Re@8oYJ@V4}FER65(G|C}TR)^A+nGb5!>!bjFYxM=xr{pdBFz z{50IOP07sN8;f%PwQ~}=T~9%!`iH}>`v+o9 za#W-)&N-N>T@v+T+~$Ivh;t%lEq`;VgDD}C%X`Pf3Jn6)7UVsghBqi1+@?B?6!OJB z)6+BiwUX#JoXmQp`TawVyr(K7ZcF?my!ecoZvDHS$OVCd)ZUL3jj#aOElmpGz!De4 z+-dW2PqB5c+{4rhKWQxMbab9Shy_eOmVDX2_lqHfCY9(jDwM+|CHAy&&1unU+6Ltz zT5Y`c)u*Dvb5vj02ZBlOquS3-Rvg!4zA1HR;=&Wx+HS@~m!?%1yQm@W|7FEm$ghHM6WxYs!|ZCew#xgwWQoq)}1HPBVhDF018 zIV4gSK0aMCOE-#nM%2p?>pd5<22{EcVaF~NM6`krklU_Fu&#kW?c~&vyi9BrIorA2*`uyg?qLpz93IoRAMZ1{ z%!!<|#h6aSg6Ec8kV%y>^N`YTcrh`*w!DJNv)pu6o9F^a8d-LY`_aU`!zbMkL$Znw zJEQZurCP$=JNo)b7X5z0W-^C!tNTP{)}iL@uvtIeS*DN~o|2BrDE%k98uce+GxX?p zr1P&FT?RHJM`j!Ca?62Wj6fo-1KEQq2uVmGI3Ts<_)bgbc(_|%U2qOI)!C)Pgy;4+ z0SQorT?N~+cd3`h19e+hGI0*KnbW=kABCWV57JVFmC(|o``8Uy3Zq1bVVUTgiFZjv z9JvMkZ#$y&_k3mj%f+C*Daf&|J9Sr5s)&!=sUk^qS7br=5BK`5`Hj;zJg4L)I7$Mb z2DPC%iTsY#d4L-Q8I|NUOxiPWbV(vlsp;i4j&V^j$SV7mFpk*sRMm38Vn)nla?ipR zu#a{On%};tA#fEitsUrYp>#!q#XJSWbsIp1nX>FHbyWZG#Stt6F)I%KN+VW2{}#V8OXH6;^r;U!ekLP-SP#8%ermqrC1h0-^X1gX z*uvZWF}sRUZBNyVzVXRexBg3$F++#Qn1mOxx+mv<-f@#E-l}aa7kEUhVqf^EYql$e z)gs+k?(2|19KWW`{PdQJ1M}!JI{-}UP&HurpB1T6(Z%OTFt{^c2n9t$>g1rq>SN(Oe?OH|R`w%hE zg*tI+pd9Aw$za?xqHA-Xp3*y}02uyvaob9tc#$tzbHCK*v5Otfi<))tBws$>HcsL_ zr9(J{8NXyb+{+nH^3!xk5;yrtwaFt^i`M%X`!YfJT^hrG9o z<>C!pFu=J?tdG>bxj?nO1xQ=Jt_-W9;#B7szX!maH9dO6S*(m-HC3D*%8PYE`PUfY zCUdRX^de!_3o`2+uj@0reHXX5n_Bgt0e1xX5pSxRPWkfXsPYEV$)xxvfy!Y@D_KRx zn}{dtB@Mu$w66`-7s-d`r9AS9>28`U#}@j(4TMYw<=fDv6+E``YY-qybX_k{q}Lgl z_2IQ#U|zZF`1nz}2*i0w@8k9}EbV*y>_#ydm$W?cvn?AU+?TL_6(Tm9p*#ENPBW(2 zXc&j`LGf5NQQmgla#q31@x1q8$L~!b1P#(uvbR95vU2Sn8ZY{s4ivH}DT^%8o^((; zyw@AE&+;B0*MdX3=(rnCL}F}WCz-FBQ=B_-&H00tizQ^4FBbIeBIRascZ^3`>EHjnRWq;uh-O0`RWXR2 z;Uo6-O#iZ@ZBuo((tTJ4QtUV~eAZp2eyKh>9`0pDCM8v}=$u-q>ZWCGxp5xdxmBo4 z89_u;Bxd;i-q$u505;&hz@gP_^t7JJ-M94f5S$(;E`+?+^+BksSRHF>D^q_uvnub(YjVG%X=D6-ProzaEVZME|nJcSkfe3bv%99?k^L;#1A$7QcmlUQ1(GA$Xa zHg87lXnPUZ{#-O*@*tTNWHeEZz2=PE<(0ezcJIA|Qh%X49A1#>8Mc197USxjiaZ&0 zj`?h>I~T4+)GuEkSK>$>N$z5l6MF1bC-%@ro^bMA1LYMT>JH6A<|2CWa;;5xywvBP zfq>PabdMNtHbziCF7t3*nxt^U{klb4=6Ch7S%td&H8x8|uMAN#+Flthd5A-Kf!2XG zKP)A5>ClI>SrQ4i)Z?vDZ6gz`B|;{5WWHiFHpK9>;CMky$e&)1Eb%wX1WG&hN;P7O zeTfiEdQVlq-Uw(xuWs9%^{_6m+>Gwc&3LT15)oK+-_Hyh_-@U7ftf;HFxLqiJdahC zjl6^8EQi}TtaF~}5*A2*WcVbVQs29prMvD&Lrf_wWoC|e*5xELeYgmy?z@KmQn*Y+}bnN%@LSO7QCroHDg82XHU4DcqlO9>wXRO@VMceqD z_yWV#V^>8ouHN?%IHJF)adzBy9k+b9^a*eNz~c)NoDNN>NMc*hBT5r62bqS=P@d7Oj=V_6 z(F8R`82aI)o*Cyl7UhGb?VHJQ5!dlkWMKM@%@74W#y_^J)Sj{PHtQpLy{|w(-GVXV zf5Yun9mbK0s?eXH`hKiGI%b@EgCCshg}#{t%DHt|oQ9Pzs(}kIi3dn*W|)C9HN)n~ z{Bc00(>V~YL5v__as0Ez)J#d3e336OEE!F7;p|*zRpntigqxI@(|+N1G}Sc~jtL*I#S8UyKVcqt!-^c2Zn4a2xCB_2(Kd zT{IoRD|t;J&nnX9X#XW;8_G8vxqoEHZoglP`%-N&CN>&_Q+d&I^oy~gwD-{SY(!2h zEK=S>PbBO^{N>YK_?n>rEuL%Vm|}dHJ9JT#87+zjHB5a@V0c1FYwl5PMD*5*@d zof%yaeERbD=Uk_Ktnm{F8nRE8C=YhO&4oj(hh$9YOEuq62dI+|L~G8Bb^G`nrY7_m zLbHnmN+=AP^jjsUFhgpt&FoeRO*5MYA+5b)0g|Z|C=IuNXq~icK1R`Kr-Bn1J@GPM zMIs^giI>d6jP6NflH(5-qwR?j!JBfw-JcH1X{N1_>A9(ypo(4PVahU8Y2`n1?&9DP zN6S`Nxnb}Q2ufDw-<&)S(ev>$ZLJ~Qo2cM_MEq0l6WRkCqZeZ{q(2Vm()_gZEsgl0 z8_T3I`tnDVa#KiJ72n6NDLE`pvcrRee#y&*o--ZCvVgX5?R%`#?{>Ru4Dqo=R2sw- zmOu_8CIQ+f>r+9>DA_E9e@E!bbNx|x!?tC&!H!P6n`Zf^&xuB_a^0zL@Ulw#7LaL);jwG&Zo2)i~Vw%$mLslS!lmA$r}9@yJ*eDTvX!SLyUSy^f2M(1C2M< zT?%J17nq@E-DVwQr7r3NGM-YSYlC80SxaC>_Jd}xGJi$2La5TP?*d`t_q+2(?H&)V zoP?yEL9e!pztZqEhdm3kuII)QX{JNGaFw+;S*z}?ltrpy{POO*KbsKWpANxf#S-a# zt*(T&y`BEDlPxbnv(fSWIxW`1U>)mNpbT?WvJ5x+(R?2buJ9`6MVgnL2{{-Fewv8* zV8wIwKhQ$KILgne0~YihTjoQD#J1_i!av{bjKW(92xKShtUc5k(EABlo=IDRZ7k@; zbD`IRpqqZ5goZ({%1R>v#87(?RJrj@($I?0;WbR-T{EY$k9&~RP*yQd`4j5uS-Lt@ zp7N%YX5yfvwOL~6`ocw*3KLdS3=QZSDkIzSaoGC z2q9$AC6lKP4=@xraX?_ff*mE?Kj0PJ;3}6RA(TM^P`U~am8mul!BTRzG?a~r*pvt1 z16Y(nZ)~jjzKi(5KedfI2{J-Qzcy=(BxDJaq6r4EDD-7bMU-(5!0 zT7IcL!wDUi^hnMj#1P@xegK91Xb&q{duV@b6_2cH^lahfAYmiJ9~bWjpjU3C`@cGG zdW%X*1}=TSo8sa-vGT%d(F6fTrWT6sK`FC@%B&vfuw-B$&aaNQ(db` ztLS`p$s4riQxlCCKskB;D=PyCaN>=KOLm!bnH)y(SGk%1pW;^niiCJzS9BL2-JVX0 z&<}M64}EVSH_TqQ+W~*q<^XBg| zL^2*U;r|WyGWY%C*j@D##lX@-a)Tgw-<`o&j5th^xCy>a10Rp@f!9#S0CUd zGn;qD1%e2MjNM`0BGpQ*+XSeK3EeKWavRL{`V9qMgh!mIdYT)_0suAb{GfEokca5j z2Wj233G%|??2;?Tzqj21ZYxl5BhOLfrAz%o-^-o(1HBJRU%Ep?F;iof#Lw8)?jGUC zA?tWXk*hq~f4@BK-!H#LjY&+foYEbz`UmYky#sSuN;mFr|FX1@u4s<^!r|O`j==IBiMI;=%k!tx^;KM z8P5Ryq%}UkF#2&^l$l?{J%L#En2x*PO0oLszC*y1?o~O^%j}a7-sAwgK@He7#~~&; z#)~=y6oGSw0w9Y8HrxL-CHY@uH2?qQ|IcLbzn4y*Q6|7Tj)RjEj`J!JJ~%j?$98FO zLt428Id~~LxHmOJz8x#rZftD)5n~GoD1`xkZTk}aQWzZ`xN_>-Rt{lv9r)p69Gf{_V;IR)7 zZmnHy1^?3fpQ3#M{iN5$sV}5L0bt}V0tWk zc=+lUzWhi54ro5Q?d|oN{2xjGrS`X==dUwx-Rb72NxyL<9??Q-%iQ1tJ7UF;Mg}2bt#5q@%v?UWPYn__sJI&{o56WPlTJ&VK4kRnh8Sc#LGJh#}=4M zk)kcTy5nD9xYmmV?H*(cBn#8aI;o~NCiWbKZ^tT^MBOK1NjSccIPxH3Vro0K(!7W5 zNVya}7QZ^ang9gPZf}6nj##+qLG$`a(S$fQm1fOseL?R46KO~*Uv>@LEND+U409>2#k5so^(p%a$_gw$=Q`Q2z*OUG0$sc+mi7A3Rx#jg zb{gqP7ICXid@DH|_dU|tX?FKAX?L+{&yF&pO$Hl(yAxEaY+EWGam;@(`73w#NV#z- zrv=+Yw?EKLyHwUDzcr~c1~^gzJ7d}Z^5xexKA*mdVPLZ+nBN|2Ky4KERBq)goR0RA znIjRhltn9ndl`|7cm3H-d2-bY!6q)0gLkO27*d|xV+aX8@ew-KJiz57!w2UcE_W*U zyAKLpIBPF1)^USIB2HNsni3?c$AB(w|L5f0K8O$5w$Q7MXnEQ7;Af`WUb{b3gr5RM zwv68h@k1t_?U|S>MvP$S`q_HKIDQK!p*k@d()rWh65*K^8X)`A3SX~78_^6Ma=L6x zQ{fIw`gtlrM@m%JCEVK9KW+U-R`$lxOm7B_?vv?^u+y_Eab}uVV#W9P>SQw=rT9 zQYI{KQ3Ar>NV?#scXqIf2au=RJi(j%-U_fk;?c#YH#`7+`z)!xUDzYFofKFsv~9>c|C&zMAzLCIF{jbKKUoC*?)JT z!%vL;#$!7Dduvff*S}!4V4A2->U`yth2{AW6NfwHSGi$(#y1ItSJ>w77q81tE2rb- zjJTIXyD5`n|CUoXT>4sQP-ikHm(zCcR1m(FnPz~= z^zF3seEkdfeRF=suod{kv%mO^@dik^+^XZUpSNNffA%LQGn#Q|PPym8mNB_Si-dFCnll>sj zd@PU=p0Au9ZepEgxu+l6#@A<+Nv?1eCf@W0W0~$AeVdOv1`HQ1S_4Ku-58;qj{Rw= z2(-L_KpCn}`3}YlXrlprncCIV|QqMuD>3xh*|2N_KIxz6r>H&Qb zvsO;X>&aH2dKNkl=g}^!aSh<4^?5lP@M;AMdovMxTf2W}?p=$bkIGM-^^%zouxRcE z^lLegy#`U>s(UpHtBj6mHNg4FAP~SATg(6`Cv;dEpii~){v}Lc>+oo6`09LE^V0F? zJAq*8#fPW4(g)*22Xl6y$IAM07Z^RDC2e7nC@{8xGiwpxmaQWdJKO+E+MiYDQuQRF z3=v40!E;fPRhXn}byI$#K5ju5uln~gtEp^2bG~@|Veun$?F(`5mKbdx)deo7cDVIU z?8XQERB>ZpQE_p{1vtVCa!f36l4}dxTS2MAd;VsZtXM}OeAks#jUrJmF7Lb~<>PsC zgL3-mVMSVLI2R@n$}yT*2XvPW|7guiZ!p~KmA~8rfRvF{$f3%(2MWtzemx+Kj`uXn zl{gp5y-zT6E}Cl>BFtZ+{Iddb^!V!1$me#UqD|_OgCCI7v^!g4OB&{XT3xPMrMJB$ zd!=M{Uw3yNc%I*l9WM_BZF*$I26s1Fp$SDf<->`K$2;NexRvUb96MfVnWTMofFshT h Date: Tue, 2 Jun 2020 00:29:07 +1000 Subject: [PATCH 06/22] Corrected "Allow Secure Boot for integrity validation" @Dansimp & @rafal Sosnowski The warning for this setting "Allow Secure Boot for integrity validation" is set to the opposite of what our Group Policy setting explain text says. See GPO text here: https://gpsearch.azurewebsites.net/#8154. I believe we should align with the existing GPO documentation. --- .../bitlocker/bitlocker-group-policy-settings.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md index 09d6973301..436ef15fe7 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md +++ b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md @@ -1882,7 +1882,7 @@ This policy controls how BitLocker-enabled system volumes are handled in conjunc Secure Boot ensures that the computer's preboot environment loads only firmware that is digitally signed by authorized software publishers. Secure Boot also provides more flexibility for managing preboot configurations than BitLocker integrity checks prior to Windows Server 2012 and Windows 8. When this policy is enabled and the hardware is capable of using Secure Boot for BitLocker scenarios, the **Use enhanced Boot Configuration Data validation profile** Group Policy setting is ignored, and Secure Boot verifies BCD settings according to the Secure Boot policy setting, which is configured separately from BitLocker. ->**Warning:** Enabling this policy might result in BitLocker recovery when manufacturer-specific firmware is updated. If you disable this policy, suspend BitLocker prior to applying firmware updates. +>**Warning:** Disabling this policy might result in BitLocker recovery when manufacturer-specific firmware is updated. If you disable this policy, suspend BitLocker prior to applying firmware updates. ### Provide the unique identifiers for your organization From aa516acf272dc5ce4d5d35857978a328e6b77ae0 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Mon, 1 Jun 2020 19:57:34 +0500 Subject: [PATCH 07/22] Update windows/security/threat-protection/device-control/control-usb-devices-using-intune.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../device-control/control-usb-devices-using-intune.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index db7936986b..b8f2f1dbc6 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -149,7 +149,7 @@ The **Prevent installation of devices using drivers that match these device setu To prevent installation of particular classes of devices: -1. Find the GUID of the device setup class from [System-Defined Device Setup Classes Available to Vendors](https://docs.microsoft.com/windows-hardware/drivers/install/system-defined-device-setup-classes-available-to-vendors) +1. Find the GUID of the device setup class from [System-Defined Device Setup Classes Available to Vendors](https://docs.microsoft.com/windows-hardware/drivers/install/system-defined-device-setup-classes-available-to-vendors). 2. Enable **Prevent installation of devices using drivers that match these device setup classes** and add the class GUID to the list. ![Add device setup class to prevent list](images/Add-device-setup-class-to-prevent-list.png) From 35215d8255fd0d4708a6b6ee462b5a17df30d555 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Mon, 1 Jun 2020 10:31:51 -0700 Subject: [PATCH 08/22] update why no data available --- .../microsoft-defender-atp/machines-view-overview.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/machines-view-overview.md b/windows/security/threat-protection/microsoft-defender-atp/machines-view-overview.md index e570e0634a..f243b53767 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machines-view-overview.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machines-view-overview.md @@ -53,7 +53,13 @@ The risk level reflects the overall risk assessment of the machine based on a co ### Exposure level -The exposure level reflects the current exposure of the machine based on the cumulative impact of its pending security recommendations. +The exposure level reflects the current exposure of the machine based on the cumulative impact of its pending security recommendations. The possible levels are low, medium, and high. Low exposure means your machines are less vulnerable from exploitation. + +If the exposure level says "No data available," there are a few reasons why this may be the case: + +- Device stopped reporting for more than 30 days – in that case it is considered inactive, and the exposure isn't computed +- Device OS not supported - see [minimum requirements for Microsoft Defender ATP](minimum-requirements.md) +- Device with stale agent (very unlikely) ### OS Platform From 69d7fd4d3898ba31f2c5f600ab99f2518943874a Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 1 Jun 2020 10:32:42 -0700 Subject: [PATCH 09/22] added detail about results location --- windows/deployment/upgrade/setupdiag.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/deployment/upgrade/setupdiag.md b/windows/deployment/upgrade/setupdiag.md index 6bbeb71b89..74ac33ca80 100644 --- a/windows/deployment/upgrade/setupdiag.md +++ b/windows/deployment/upgrade/setupdiag.md @@ -41,6 +41,8 @@ With the release of Windows 10, version 2004, SetupDiag is included with Windows During the upgrade process, Windows Setup will extract all its sources files to the **%SystemDrive%$Windows.~bt\Sources** directory. With Windows 10, version 2004 and later, SetupDiag.exe is also installed to this directory. If there is an issue with the upgrade, SetupDiag will automatically run to determine the cause of the failure. +When run by Windows Setup, results of the SetupDiag analysis can be found at **%WinDir%\Logs\SetupDiag\SetupDiagResults.xml** and in the registry under **HKLM\Setup\SetupDiag\Results**. + If the upgrade process proceeds normally, this directory is moved under **%SystemDrive%\Windows.Old** for cleanup. If this directory is deleted, SetupDiag.exe will also be removed. ## Using SetupDiag From a3da6e9ef13995045194e01c574cefd1f51c3c15 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 1 Jun 2020 10:52:03 -0700 Subject: [PATCH 10/22] tweaks --- windows/deployment/upgrade/setupdiag.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/upgrade/setupdiag.md b/windows/deployment/upgrade/setupdiag.md index 74ac33ca80..55b5978287 100644 --- a/windows/deployment/upgrade/setupdiag.md +++ b/windows/deployment/upgrade/setupdiag.md @@ -39,11 +39,11 @@ SetupDiag works by examining Windows Setup log files. It attempts to parse these With the release of Windows 10, version 2004, SetupDiag is included with Windows Setup. -During the upgrade process, Windows Setup will extract all its sources files to the **%SystemDrive%$Windows.~bt\Sources** directory. With Windows 10, version 2004 and later, SetupDiag.exe is also installed to this directory. If there is an issue with the upgrade, SetupDiag will automatically run to determine the cause of the failure. +During the upgrade process, Windows Setup will extract all its sources files to the **%SystemDrive%$Windows.~bt\Sources** directory. With Windows 10, version 2004 and later, **setupdiag.exe** is also installed to this directory. If there is an issue with the upgrade, SetupDiag will automatically run to determine the cause of the failure. When run by Windows Setup, results of the SetupDiag analysis can be found at **%WinDir%\Logs\SetupDiag\SetupDiagResults.xml** and in the registry under **HKLM\Setup\SetupDiag\Results**. -If the upgrade process proceeds normally, this directory is moved under **%SystemDrive%\Windows.Old** for cleanup. If this directory is deleted, SetupDiag.exe will also be removed. +If the upgrade process proceeds normally, the **Sources** directory including **setupdiag.exe** is moved under **%SystemDrive%\Windows.Old** for cleanup. If the **Windows.old** directory is deleted later, **setupdiag.exe** will also be removed. ## Using SetupDiag From 0c531dd4906868ff63aa5bd0e5ae02a54c157056 Mon Sep 17 00:00:00 2001 From: Rona Song <38082753+qrscharmed@users.noreply.github.com> Date: Tue, 2 Jun 2020 00:41:05 -0700 Subject: [PATCH 11/22] Update wd-app-guard-overview.md --- .../wd-app-guard-overview.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview.md b/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview.md index 390bee5992..799cbc5386 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview.md +++ b/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview.md @@ -1,6 +1,6 @@ --- -title: Windows Defender Application Guard (Windows 10) -description: Learn about Windows Defender Application Guard and how it helps to combat malicious content and malware out on the Internet. +title: Microsoft Defender Application Guard (Windows 10) +description: Learn about Microsoft Defender Application Guard and how it helps to combat malicious content and malware out on the Internet. ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library @@ -14,11 +14,11 @@ manager: dansimp ms.custom: asr --- -# Windows Defender Application Guard overview +# Microsoft Defender Application Guard overview **Applies to:** [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -Windows Defender Application Guard (Application Guard) is designed to help prevent old and newly emerging attacks to help keep employees productive. Using our unique hardware isolation approach, our goal is to destroy the playbook that attackers use by making current attack methods obsolete. +Microsoft Defender Application Guard (Application Guard) is designed to help prevent old and newly emerging attacks to help keep employees productive. Using our unique hardware isolation approach, our goal is to destroy the playbook that attackers use by making current attack methods obsolete. ## What is Application Guard and how does it work? @@ -48,4 +48,4 @@ Application Guard has been created to target several types of systems: |[Prepare and install Windows Defender Application Guard](install-wd-app-guard.md) |Provides instructions about determining which mode to use, either Standalone or Enterprise-managed, and how to install Application Guard in your organization.| |[Configure the Group Policy settings for Windows Defender Application Guard](configure-wd-app-guard.md) |Provides info about the available Group Policy and MDM settings.| |[Testing scenarios using Windows Defender Application Guard in your business or organization](test-scenarios-wd-app-guard.md)|Provides a list of suggested testing scenarios that you can use to test Application Guard in your organization.| -|[Frequently asked questions - Windows Defender Application Guard](faq-wd-app-guard.md)|Provides answers to frequently asked questions about Application Guard features, integration with the Windows operating system, and general configuration.| \ No newline at end of file +|[Frequently asked questions - Windows Defender Application Guard](faq-wd-app-guard.md)|Provides answers to frequently asked questions about Application Guard features, integration with the Windows operating system, and general configuration.| From 9a2f04de673938a0828a6d98f639ce660d23bba9 Mon Sep 17 00:00:00 2001 From: Rona Song <38082753+qrscharmed@users.noreply.github.com> Date: Tue, 2 Jun 2020 00:42:16 -0700 Subject: [PATCH 12/22] Update reqs-wd-app-guard.md --- .../reqs-wd-app-guard.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-guard/reqs-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/reqs-wd-app-guard.md index ca449ea92c..0f700a7b26 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/reqs-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/reqs-wd-app-guard.md @@ -1,6 +1,6 @@ --- -title: System requirements for Windows Defender Application Guard (Windows 10) -description: Learn about the system requirements for installing and running Windows Defender Application Guard. +title: System requirements for Microsoft Defender Application Guard (Windows 10) +description: Learn about the system requirements for installing and running Microsoft Defender Application Guard. ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library @@ -14,17 +14,17 @@ manager: dansimp ms.custom: asr --- -# System requirements for Windows Defender Application Guard +# System requirements for Microsoft Defender Application Guard **Applies to:** [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -The threat landscape is continually evolving. While hackers are busy developing new techniques to breach enterprise networks by compromising workstations, phishing schemes remain one of the top ways to lure employees into social engineering attacks. Windows Defender Application Guard is designed to help prevent old, and newly emerging attacks, to help keep employees productive. +The threat landscape is continually evolving. While hackers are busy developing new techniques to breach enterprise networks by compromising workstations, phishing schemes remain one of the top ways to lure employees into social engineering attacks. Microsoft Defender Application Guard is designed to help prevent old, and newly emerging attacks, to help keep employees productive. >[!NOTE] ->Windows Defender Application Guard is not supported on VMs and VDI environment. For testing and automation on non-production machines, you may enable WDAG on a VM by enabling Hyper-V nested virtualization on the host. +>Microsoft Defender Application Guard is not supported on VMs and VDI environment. For testing and automation on non-production machines, you may enable WDAG on a VM by enabling Hyper-V nested virtualization on the host. ## Hardware requirements -Your environment needs the following hardware to run Windows Defender Application Guard. +Your environment needs the following hardware to run Microsoft Defender Application Guard. |Hardware|Description| |--------|-----------| From e907e77e00ab41799bd645654d8e9d95dad0d084 Mon Sep 17 00:00:00 2001 From: Rona Song <38082753+qrscharmed@users.noreply.github.com> Date: Tue, 2 Jun 2020 00:43:10 -0700 Subject: [PATCH 13/22] Update install-wd-app-guard.md --- .../install-wd-app-guard.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md index e5630f24a3..2ef6c54364 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard.md @@ -1,6 +1,6 @@ --- title: Enable hardware-based isolation for Microsoft Edge (Windows 10) -description: Learn about the Windows Defender Application Guard modes (Standalone or Enterprise-managed) and how to install Application Guard in your enterprise. +description: Learn about the Microsoft Defender Application Guard modes (Standalone or Enterprise-managed) and how to install Application Guard in your enterprise. ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library @@ -14,19 +14,19 @@ manager: dansimp ms.custom: asr --- -# Prepare to install Windows Defender Application Guard +# Prepare to install Microsoft Defender Application Guard **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) ## Review system requirements -See [System requirements for Windows Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/reqs-wd-app-guard) to review the hardware and software installation requirements for Windows Defender Application Guard. +See [System requirements for Microsoft Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/reqs-wd-app-guard) to review the hardware and software installation requirements for Windows Defender Application Guard. >[!NOTE] ->Windows Defender Application Guard is not supported on VMs and VDI environment. For testing and automation on non-production machines, you may enable WDAG on a VM by enabling Hyper-V nested virtualization on the host. +>Microsoft Defender Application Guard is not supported on VMs and VDI environment. For testing and automation on non-production machines, you may enable WDAG on a VM by enabling Hyper-V nested virtualization on the host. -## Prepare for Windows Defender Application Guard -Before you can install and use Windows Defender Application Guard, you must determine which way you intend to use it in your enterprise. You can use Application Guard in either **Standalone** or **Enterprise-managed** mode. +## Prepare for Microsoft Defender Application Guard +Before you can install and use Microsoft Defender Application Guard, you must determine which way you intend to use it in your enterprise. You can use Application Guard in either **Standalone** or **Enterprise-managed** mode. ### Standalone mode From 96525e83294719c72416ca3b5eaef2563a4199e9 Mon Sep 17 00:00:00 2001 From: Rona Song <38082753+qrscharmed@users.noreply.github.com> Date: Tue, 2 Jun 2020 00:43:57 -0700 Subject: [PATCH 14/22] Update configure-wd-app-guard.md --- .../configure-wd-app-guard.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md index 5020c63596..e3871020d7 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md @@ -1,6 +1,6 @@ --- -title: Configure the Group Policy settings for Windows Defender Application Guard (Windows 10) -description: Learn about the available Group Policy settings for Windows Defender Application Guard. +title: Configure the Group Policy settings for Microsoft Defender Application Guard (Windows 10) +description: Learn about the available Group Policy settings for Microsoft Defender Application Guard. ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library @@ -14,12 +14,12 @@ manager: dansimp ms.custom: asr --- -# Configure Windows Defender Application Guard policy settings +# Configure Microsoft Defender Application Guard policy settings **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -Windows Defender Application Guard (Application Guard) works with Group Policy to help you manage your organization's computer settings. By using Group Policy, you can configure a setting once, and then copy it onto many computers. For example, you can set up multiple security settings in a GPO, which is linked to a domain, and then apply all those settings to every computer in the domain. +Microsoft Defender Application Guard (Application Guard) works with Group Policy to help you manage your organization's computer settings. By using Group Policy, you can configure a setting once, and then copy it onto many computers. For example, you can set up multiple security settings in a GPO, which is linked to a domain, and then apply all those settings to every computer in the domain. Application Guard uses both network isolation and application-specific settings. From 04e7635fb0cd233efb999ad9033fe3527f35817c Mon Sep 17 00:00:00 2001 From: Rona Song <38082753+qrscharmed@users.noreply.github.com> Date: Tue, 2 Jun 2020 00:44:50 -0700 Subject: [PATCH 15/22] Update test-scenarios-wd-app-guard.md --- .../test-scenarios-wd-app-guard.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-guard/test-scenarios-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/test-scenarios-wd-app-guard.md index a5eebdf2a2..f380bebaa0 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/test-scenarios-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/test-scenarios-wd-app-guard.md @@ -1,6 +1,6 @@ --- -title: Testing scenarios with Windows Defender Application Guard (Windows 10) -description: Suggested testing scenarios for Windows Defender Application Guard, showing how it works in both Standalone and Enterprise-managed mode. +title: Testing scenarios with Microsoft Defender Application Guard (Windows 10) +description: Suggested testing scenarios for Microsoft Defender Application Guard, showing how it works in both Standalone and Enterprise-managed mode. ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library From da785f2a13a33fdf2ff276866417d1b37ce01d67 Mon Sep 17 00:00:00 2001 From: Rona Song <38082753+qrscharmed@users.noreply.github.com> Date: Tue, 2 Jun 2020 00:45:31 -0700 Subject: [PATCH 16/22] Update faq-wd-app-guard.md --- .../faq-wd-app-guard.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md index 1e8839b354..f410bb38de 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md @@ -1,6 +1,6 @@ --- -title: FAQ - Windows Defender Application Guard (Windows 10) -description: Learn about the commonly asked questions and answers for Windows Defender Application Guard. +title: FAQ - Microsoft Defender Application Guard (Windows 10) +description: Learn about the commonly asked questions and answers for Microsoft Defender Application Guard. ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library @@ -14,11 +14,11 @@ manager: dansimp ms.custom: asr --- -# Frequently asked questions - Windows Defender Application Guard +# Frequently asked questions - Microsoft Defender Application Guard **Applies to:** [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -Answering frequently asked questions about Windows Defender Application Guard (Application Guard) features, integration with the Windows operating system, and general configuration. +Answering frequently asked questions about Microsoft Defender Application Guard (Application Guard) features, integration with the Windows operating system, and general configuration. ## Frequently Asked Questions From 3d76e12ffd2498f10fd9c41ee08d1741119f3953 Mon Sep 17 00:00:00 2001 From: Rona Song <38082753+qrscharmed@users.noreply.github.com> Date: Tue, 2 Jun 2020 00:50:24 -0700 Subject: [PATCH 17/22] Update configure-wd-app-guard.md --- .../configure-wd-app-guard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md index 5020c63596..e78a0079f6 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md @@ -36,7 +36,7 @@ These settings, located at **Computer Configuration\Administrative Templates\Net |-----------|------------------|-----------| |Private network ranges for apps|At least Windows Server 2012, Windows 8, or Windows RT|A comma-separated list of IP address ranges that are in your corporate network. Included endpoints or endpoints that are included within a specified IP address range, are rendered using Microsoft Edge and won't be accessible from the Application Guard environment.| |Enterprise resource domains hosted in the cloud|At least Windows Server 2012, Windows 8, or Windows RT|A pipe-separated (\|) list of your domain cloud resources. Included endpoints are rendered using Microsoft Edge and won't be accessible from the Application Guard environment. Note: This list supports the wildcards detailed in the [Network isolation settings wildcards](#network-isolation-settings-wildcards) table.| -|Domains categorized as both work and personal|At least Windows Server 2012, Windows 8, or Windows RT|A comma-separated list of domain names used as both work or personal resources. Included endpoints are rendered using Microsoft Edge and will be accessible from the Application Guard and regular Edge environment. Note: This list supports the wildcards detailed in the [Network isolation settings wildcards](#network-isolation-settings-wildcards) table.| +|Domains categorized as both work and personal|At least Windows Server 2012, Windows 8, or Windows RT|A comma-separated list of domain names used as both work or personal resources. Included endpoints are rendered using Microsoft Edge and will be accessible from the Application Guard and regular Edge environment. Proxies should be added to this list. Note: This list supports the wildcards detailed in the [Network isolation settings wildcards](#network-isolation-settings-wildcards) table.| ## Network isolation settings wildcards From 68d4ad7ae04d7ba38d7a4e60cb9c401cf836ba14 Mon Sep 17 00:00:00 2001 From: Rona Song <38082753+qrscharmed@users.noreply.github.com> Date: Tue, 2 Jun 2020 00:54:57 -0700 Subject: [PATCH 18/22] Update faq-wd-app-guard.md --- .../windows-defender-application-guard/faq-wd-app-guard.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md index 1e8839b354..6fc40a60b0 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md @@ -92,3 +92,7 @@ Yes, both the Enterprise Resource domains hosted in the cloud and the Domains ca ### Why does my encryption driver break Windows Defender Application Guard? Windows Defender Application Guard accesses files from a VHD mounted on the host that needs to be written during setup. If an encryption driver prevents a VHD from being mounted or from being written to, WDAG will not work and result in an error message ("0x80070013 ERROR_WRITE_PROTECT"). + +### Why did Application Guard stop working after I turned on hyperthreading? + +If hyperthreading is disabled (either with KB or through BIOS), there may be a possibility Application Guard will no longer meet the minimum requirements. From f38fef35a576a6ca4536f679827c4a12cb2ff121 Mon Sep 17 00:00:00 2001 From: EfiKliger <45028856+EfiKliger@users.noreply.github.com> Date: Tue, 2 Jun 2020 11:51:23 +0300 Subject: [PATCH 19/22] updating filter type --- .../threat-protection/microsoft-defender-atp/get-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md index 33337c0f38..f150156c0e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md @@ -26,7 +26,7 @@ ms.topic: article ## API description Retrieves a collection of Alerts.
Supports [OData V4 queries](https://www.odata.org/documentation/). -
The OData's ```$filter``` query is supported on: ```alertCreationTime```, ```incidentId```, ```InvestigationId```, ```status```, ```severity``` and ```category``` properties. +
The OData's ```$filter``` query is supported on: ```alertCreationTime```, ```lastUpdateTime```, ```incidentId```,```InvestigationId```, ```status```, ```severity``` and ```category``` properties.
See examples at [OData queries with Microsoft Defender ATP](exposed-apis-odata-samples.md) From 3a52c98053cf6dd74c29b322e4de0c2ca93c42bd Mon Sep 17 00:00:00 2001 From: illfated Date: Tue, 2 Jun 2020 19:56:00 +0200 Subject: [PATCH 20/22] Security/Threat protection: password length values Description: As requested by Program Manager Robert Durff (MSRobertD) in issue ticket #6856 (Bug: Password length value range is inaccurate.), the upper value for the supported values for password length should be 20 instead of only 14, verified in preliminary field testing of the GPO Password Policy, described on this page. The actual upper limit may very well be higher, but 20 is a reasonable value to be used for now, until someone documents the need for higher accuracy in the documentation of this value for the GPO Password Policy. Changes proposed: - Replace 14 with 20 in both occurrences of 14 as the upper value - Convert Note text in line 83 to a MarkDown Note blob (MS codestyle) - Whitespace adjustments: - Normalize bullet point list spacing to 1 (codestyle) (3 lines) - Remove redundant end-of-line spacing (8 lines) Ticket closure or reference: Closes #6856 --- .../minimum-password-length.md | 27 ++++++++++--------- 1 file changed, 14 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/security-policy-settings/minimum-password-length.md b/windows/security/threat-protection/security-policy-settings/minimum-password-length.md index 7917efbce4..b57e36e03e 100644 --- a/windows/security/threat-protection/security-policy-settings/minimum-password-length.md +++ b/windows/security/threat-protection/security-policy-settings/minimum-password-length.md @@ -20,18 +20,18 @@ ms.date: 04/19/2017 # Minimum password length **Applies to** -- Windows 10 +- Windows 10 Describes the best practices, location, values, policy management, and security considerations for the **Minimum password length** security policy setting. ## Reference -The **Minimum password length** policy setting determines the least number of characters that can make up a password for a user account. You can set a value of between 1 and 14 characters, or you can establish that no password is required by setting the number of characters to 0. +The **Minimum password length** policy setting determines the least number of characters that can make up a password for a user account. You can set a value of between 1 and 20 characters, or you can establish that no password is required by setting the number of characters to 0. ### Possible values -- User-specified number of characters between 0 and 14 -- Not defined +- User-specified number of characters between 0 and 20 +- Not defined ### Best practices @@ -51,13 +51,13 @@ The following table lists the actual and effective default policy values. Defaul | Server type or Group Policy Object (GPO) | Default value | | - | - | -| Default domain policy| 7 characters| -| Default domain controller policy | Not defined| -| Stand-alone server default settings | 0 characters| -| Domain controller effective default settings | 7 characters| -| Member server effective default settings | 7 characters| -| Effective GPO default settings on client computers | 0 characters| - +| Default domain policy| 7 characters| +| Default domain controller policy | Not defined| +| Stand-alone server default settings | 0 characters| +| Domain controller effective default settings | 7 characters| +| Member server effective default settings | 7 characters| +| Effective GPO default settings on client computers | 0 characters| + ## Policy management This section describes features, tools, and guidance to help you manage this policy. @@ -80,8 +80,9 @@ Configure the **** policy setting to a value of 8 or more. If the number of char In most environments, we recommend an eight-character password because it is long enough to provide adequate security, but not too difficult for users to easily remember. This configuration provides adequate defense against a brute force attack. Using the [Password must meet complexity requirements](password-must-meet-complexity-requirements.md) policy setting in addition to the **Minimum password length** setting helps reduce the possibility of a dictionary attack. ->**Note:**  Some jurisdictions have established legal requirements for password length as part of establishing security regulations. - +> [!NOTE] +> Some jurisdictions have established legal requirements for password length as part of establishing security regulations. + ### Potential impact Requirements for extremely long passwords can actually decrease the security of an organization because users might leave the information in an unsecured location or lose it. If very long passwords are required, mistyped passwords could cause account lockouts and increase the volume of Help Desk calls. If your organization has issues with forgotten passwords due to password length requirements, consider teaching your users about passphrases, which are often easier to remember and, due to the larger number of character combinations, much harder to discover. From 21b393ec12358d73b60e85822e8f350004941db1 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 2 Jun 2020 11:46:00 -0700 Subject: [PATCH 21/22] Update faq-wd-app-guard.md --- .../windows-defender-application-guard/faq-wd-app-guard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md index 6fc40a60b0..3f305282d0 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md @@ -93,6 +93,6 @@ Yes, both the Enterprise Resource domains hosted in the cloud and the Domains ca Windows Defender Application Guard accesses files from a VHD mounted on the host that needs to be written during setup. If an encryption driver prevents a VHD from being mounted or from being written to, WDAG will not work and result in an error message ("0x80070013 ERROR_WRITE_PROTECT"). -### Why did Application Guard stop working after I turned on hyperthreading? +### Why did Application Guard stop working after I turned off hyperthreading? If hyperthreading is disabled (either with KB or through BIOS), there may be a possibility Application Guard will no longer meet the minimum requirements. From 1da415b64d23fc04ed2df11a923ea31b6235da86 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 2 Jun 2020 12:12:46 -0700 Subject: [PATCH 22/22] Update faq-wd-app-guard.md --- .../faq-wd-app-guard.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md index 3f305282d0..de036bc4dd 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md @@ -8,7 +8,7 @@ ms.pagetype: security ms.localizationpriority: medium author: denisebmsft ms.author: deniseb -ms.date: 12/04/2019 +ms.date: 06/02/2020 ms.reviewer: manager: dansimp ms.custom: asr @@ -83,7 +83,7 @@ To trust a subdomain, you must precede your domain with two dots, for example: ` ### Are there differences between using Application Guard on Windows Pro vs Windows Enterprise? -When using Windows Pro or Windows Enterprise, you will have access to using Application Guard's Standalone Mode. However, when using Enterprise you will have access to Application Guard's Enterprise-Managed Mode. This mode has some extra features that the Standalone Mode does not. For more information, see [Prepare to install Windows Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard). +When using Windows Pro or Windows Enterprise, you have access to using Application Guard's Standalone Mode. However, when using Windows Enterprise, you have access to Application Guard's Enterprise-Managed Mode. This mode has some extra features that the Standalone Mode does not. For more information, see [Prepare to install Windows Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard). ### Is there a size limit to the domain lists that I need to configure? @@ -91,8 +91,8 @@ Yes, both the Enterprise Resource domains hosted in the cloud and the Domains ca ### Why does my encryption driver break Windows Defender Application Guard? -Windows Defender Application Guard accesses files from a VHD mounted on the host that needs to be written during setup. If an encryption driver prevents a VHD from being mounted or from being written to, WDAG will not work and result in an error message ("0x80070013 ERROR_WRITE_PROTECT"). +Windows Defender Application Guard accesses files from a VHD mounted on the host that needs to be written during setup. If an encryption driver prevents a VHD from being mounted or from being written to, WDAG will not work and result in an error message (`0x80070013 ERROR_WRITE_PROTECT`). ### Why did Application Guard stop working after I turned off hyperthreading? -If hyperthreading is disabled (either with KB or through BIOS), there may be a possibility Application Guard will no longer meet the minimum requirements. +If hyperthreading is disabled (because of an update applied through a KB article or through BIOS settings), there is a possibility Application Guard no longer meets the minimum requirements.