From 893dfd221cfc0ae5d259c5d7e7065245f75e8f8c Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Wed, 17 Feb 2021 14:32:25 -0800 Subject: [PATCH 01/63] new tables --- .../microsoft-defender-atp/tvm-hunt-exposed-devices.md | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md index 3ee21c13f2..c5037d0005 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md @@ -38,11 +38,16 @@ Advanced hunting is a query-based threat-hunting tool that lets you explore up t ### Schema tables -- [DeviceTvmSoftwareInventoryVulnerabilities](advanced-hunting-devicetvmsoftwareinventoryvulnerabilities-table.md) - Inventory of software on devices as well as any known vulnerabilities in these software products +- DeviceTvmSoftwareInventory– A complete list of all software on your devices, whether or not they have any vulnerabilities. + - You’ll have a single row for each software installed on every device. + - EndOfSupportStatus and EndOfSupportDate will have the end-of-support state (if applicable) for specific software versions installed on devices. + +- DeviceTvmSoftwareVulnerabilities – Discover vulnerabilities (CVEs) in existing software across all your devices. + - RecommendedSecurityUpdate and RecommendedSecurityUpdateId will have missing security updates / KBs for installed software. - [DeviceTvmSoftwareVulnerabilitiesKB](advanced-hunting-devicetvmsoftwarevulnerabilitieskb-table.md) - Knowledge base of publicly disclosed vulnerabilities, including whether exploit code is publicly available -- [DeviceTvmSecureConfigurationAssessment](advanced-hunting-devicetvmsecureconfigurationassessment-table.md) - Threat & Vulnerability Management assessment events, indicating the status of various security configurations on devices +- [DeviceTvmSecureConfigurationAssessment](advanced-hunting-devicetvmsecureconfigurationassessment-table.md) - Threat and vulnerability management assessment events, indicating the status of various security configurations on devices - [DeviceTvmSecureConfigurationAssessmentKB](advanced-hunting-devicetvmsecureconfigurationassessmentkb-table.md) - Knowledge base of various security configurations used by Threat & Vulnerability Management to assess devices; includes mappings to various standards and benchmarks From 82113bddd1289f00956a0f20182bc57b2a7e0658 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Wed, 17 Feb 2021 14:32:41 -0800 Subject: [PATCH 02/63] space --- .../microsoft-defender-atp/tvm-hunt-exposed-devices.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md index c5037d0005..28bb47b42e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md @@ -38,7 +38,7 @@ Advanced hunting is a query-based threat-hunting tool that lets you explore up t ### Schema tables -- DeviceTvmSoftwareInventory– A complete list of all software on your devices, whether or not they have any vulnerabilities. +- DeviceTvmSoftwareInventory – A complete list of all software on your devices, whether or not they have any vulnerabilities. - You’ll have a single row for each software installed on every device. - EndOfSupportStatus and EndOfSupportDate will have the end-of-support state (if applicable) for specific software versions installed on devices. From ed2617a3fe2c5e42f7a523a501965b0aa60ef2ec Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 18 Feb 2021 10:51:13 -0700 Subject: [PATCH 03/63] adjust applies to to mention relevant Server editions --- windows/deployment/update/windows-update-resources.md | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-update-resources.md b/windows/deployment/update/windows-update-resources.md index 49b83d23f1..848cc5616f 100644 --- a/windows/deployment/update/windows-update-resources.md +++ b/windows/deployment/update/windows-update-resources.md @@ -16,7 +16,15 @@ author: jaimeo # Windows Update - additional resources -> Applies to: Windows 10 +**Applies to**: + +- Windows 10 +- Windows Server 2016 +- Windows Server 2019 + +> [!NOTE] +> Windows Server 2016 supports policies available in Windows 10, version 1607. Windows Server 2019 supports policies available in Windows 10, version 1809. + The following resources provide additional information about using Windows Update. From 9c7c2bc6322ec696e53163a185613f9505d0e555 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Fri, 19 Feb 2021 15:50:24 -0800 Subject: [PATCH 04/63] config changes --- .../microsoft-defender-atp/tvm-security-recommendation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md index 2c151888d9..0e8b95ad50 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md @@ -105,7 +105,7 @@ From the flyout, you can choose any of the following options: - [**Exception options**](tvm-exception.md) - Submit an exception, provide justification, and set exception duration if you can't remediate the issue yet. >[!NOTE] ->When a software change is made on a device, it typically takes 2 hours for the data to be reflected in the security portal. Configuration changes can take 12 hours. However, it may sometimes take longer. +>When a software change is made on a device, it typically takes 2 hours for the data to be reflected in the security portal. However, it may sometimes take longer. Configuration changes can take anywhere from 4 to 24 hours. ### Investigate changes in device exposure or impact From 97fbfeebc5d32dc72007b4975838ee29d30944a2 Mon Sep 17 00:00:00 2001 From: Bill Mcilhargey <19168174+computeronix@users.noreply.github.com> Date: Thu, 25 Feb 2021 12:14:54 -0500 Subject: [PATCH 05/63] ESU callout for Win 7 Windows 7 requires SCEP or relies upon SCEP, in order for SCEP to be in a supported state, it would require a customer to purchase and use ESU on a support Windows 7 device Called that out, technically Windows 7 is not listed as a supported OS in SCCM/SCEP any longer - https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/configs/supported-operating-systems-for-clients-and-devices --- .../microsoft-defender-atp/minimum-requirements.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md index 13cbda189c..bc5cc86308 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md +++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md @@ -85,8 +85,8 @@ Access to Defender for Endpoint is done through a browser, supporting the follow ## Hardware and software requirements ### Supported Windows versions -- Windows 7 SP1 Enterprise -- Windows 7 SP1 Pro +- Windows 7 SP1 Enterprise [requires ESU for support](https://docs.microsoft.com/troubleshoot/windows-client/windows-7-eos-faq/windows-7-extended-security-updates-faq) +- Windows 7 SP1 Pro [requires ESU for support](https://docs.microsoft.com/troubleshoot/windows-client/windows-7-eos-faq/windows-7-extended-security-updates-faq) - Windows 8.1 Enterprise - Windows 8.1 Pro - Windows 10 Enterprise From e9dffdb31bf24f9b44257aafe51af6ffcb6284f5 Mon Sep 17 00:00:00 2001 From: Wahid S Date: Thu, 25 Feb 2021 11:43:55 -0600 Subject: [PATCH 06/63] Update onboard-configure with server versions Added the Windows Server versions that are now supported. The list was taken from the linked article. --- .../microsoft-defender-atp/onboard-configure.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/onboard-configure.md b/windows/security/threat-protection/microsoft-defender-atp/onboard-configure.md index 707d4681f7..309fb1f9df 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/onboard-configure.md +++ b/windows/security/threat-protection/microsoft-defender-atp/onboard-configure.md @@ -60,14 +60,10 @@ Topic | Description :---|:--- [Onboard previous versions of Windows](onboard-downlevel.md)| Onboard Windows 7 and Windows 8.1 devices to Defender for Endpoint. [Onboard Windows 10 devices](configure-endpoints.md) | You'll need to onboard devices for it to report to the Defender for Endpoint service. Learn about the tools and methods you can use to configure devices in your enterprise. -[Onboard servers](configure-server-endpoints.md) | Onboard Windows Server 2012 R2 and Windows Server 2016 to Defender for Endpoint +[Onboard servers](configure-server-endpoints.md) | Onboard Windows Server 2008 R2 SP1, Windows Server 2012 R2, Windows Server 2016, Windows Server (SAC) version 1803 and later, Windows Server 2019 and later, and Windows Server 2019 core edition to Defender for Endpoint [Onboard non-Windows devices](configure-endpoints-non-windows.md) | Defender for Endpoint provides a centralized security operations experience for Windows as well as non-Windows platforms. You'll be able to see alerts from various supported operating systems (OS) in Microsoft Defender Security Center and better protect your organization's network. This experience leverages on a third-party security products' sensor data. [Run a detection test on a newly onboarded device](run-detection-test.md) | Run a script on a newly onboarded device to verify that it is properly reporting to the Defender for Endpoint service. [Configure proxy and Internet settings](configure-proxy-internet.md)| Enable communication with the Defender for Endpoint cloud service by configuring the proxy and Internet connectivity settings. [Troubleshoot onboarding issues](troubleshoot-onboarding.md) | Learn about resolving issues that might arise during onboarding. >Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-onboardconfigure-belowfoldlink) - - - - From ac01623bd82b1c2d3bbceeb64b3e07d0937d6ce8 Mon Sep 17 00:00:00 2001 From: Wahid S Date: Mon, 1 Mar 2021 16:28:48 +0000 Subject: [PATCH 07/63] Update windows/security/threat-protection/microsoft-defender-atp/onboard-configure.md Added a period to end of sentence. Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/onboard-configure.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/onboard-configure.md b/windows/security/threat-protection/microsoft-defender-atp/onboard-configure.md index 309fb1f9df..535d4dc455 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/onboard-configure.md +++ b/windows/security/threat-protection/microsoft-defender-atp/onboard-configure.md @@ -60,7 +60,7 @@ Topic | Description :---|:--- [Onboard previous versions of Windows](onboard-downlevel.md)| Onboard Windows 7 and Windows 8.1 devices to Defender for Endpoint. [Onboard Windows 10 devices](configure-endpoints.md) | You'll need to onboard devices for it to report to the Defender for Endpoint service. Learn about the tools and methods you can use to configure devices in your enterprise. -[Onboard servers](configure-server-endpoints.md) | Onboard Windows Server 2008 R2 SP1, Windows Server 2012 R2, Windows Server 2016, Windows Server (SAC) version 1803 and later, Windows Server 2019 and later, and Windows Server 2019 core edition to Defender for Endpoint +[Onboard servers](configure-server-endpoints.md) | Onboard Windows Server 2008 R2 SP1, Windows Server 2012 R2, Windows Server 2016, Windows Server (SAC) version 1803 and later, Windows Server 2019 and later, and Windows Server 2019 core edition to Defender for Endpoint. [Onboard non-Windows devices](configure-endpoints-non-windows.md) | Defender for Endpoint provides a centralized security operations experience for Windows as well as non-Windows platforms. You'll be able to see alerts from various supported operating systems (OS) in Microsoft Defender Security Center and better protect your organization's network. This experience leverages on a third-party security products' sensor data. [Run a detection test on a newly onboarded device](run-detection-test.md) | Run a script on a newly onboarded device to verify that it is properly reporting to the Defender for Endpoint service. [Configure proxy and Internet settings](configure-proxy-internet.md)| Enable communication with the Defender for Endpoint cloud service by configuring the proxy and Internet connectivity settings. From 5a1035f9cf3e6b7d009624ba0e580d5f26a0414c Mon Sep 17 00:00:00 2001 From: jaimeo Date: Mon, 1 Mar 2021 09:36:59 -0700 Subject: [PATCH 08/63] removed old ms.date --- windows/deployment/update/windows-update-resources.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/deployment/update/windows-update-resources.md b/windows/deployment/update/windows-update-resources.md index 848cc5616f..af52395048 100644 --- a/windows/deployment/update/windows-update-resources.md +++ b/windows/deployment/update/windows-update-resources.md @@ -6,7 +6,6 @@ ms.mktglfcycl: audience: itpro ms.localizationpriority: medium ms.audience: itpro -ms.date: 09/18/2018 ms.reviewer: manager: laurawi ms.topic: article From 8ec56be9e87963ef1731f7cf8d49dd398d9bd7a7 Mon Sep 17 00:00:00 2001 From: Sunny Zankharia <67922512+sazankha@users.noreply.github.com> Date: Mon, 1 Mar 2021 21:18:11 -0800 Subject: [PATCH 09/63] Update configure-md-app-guard.md Cleaned up obsolete information --- .../configure-md-app-guard.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard.md index bbab8b350a..c07e9023c2 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard.md @@ -62,6 +62,3 @@ These settings, located at **Computer Configuration\Administrative Templates\Win |Allow hardware-accelerated rendering for Microsoft Defender Application Guard|Windows 10 Enterprise, 1803 or higher

Windows 10 Pro, 1803 or higher|Determines whether Microsoft Defender Application Guard renders graphics using hardware or software acceleration.|**Enabled.** Microsoft Defender Application Guard uses Hyper-V to access supported, high-security rendering graphics hardware (GPUs). These GPUs improve rendering performance and battery life while using Microsoft Defender Application Guard, particularly for video playback and other graphics-intensive use cases. If this setting is enabled without connecting any high-security rendering graphics hardware, Microsoft Defender Application Guard will automatically revert to software-based (CPU) rendering. **Important:** Be aware that enabling this setting with potentially compromised graphics devices or drivers might pose a risk to the host device.

**Disabled or not configured.** Microsoft Defender Application Guard uses software-based (CPU) rendering and won’t load any third-party graphics drivers or interact with any connected graphics hardware.| |Allow camera and microphone access in Microsoft Defender Application Guard|Windows 10 Enterprise, 1809 or higher

Windows 10 Pro, 1809 or higher|Determines whether to allow camera and microphone access inside Microsoft Defender Application Guard.|**Enabled.** Applications inside Microsoft Defender Application Guard are able to access the camera and microphone on the user's device. **Important:** Be aware that enabling this policy with a potentially compromised container could bypass camera and microphone permissions and access the camera and microphone without the user's knowledge.

**Disabled or not configured.** Applications inside Microsoft Defender Application Guard are unable to access the camera and microphone on the user's device.| |Allow Microsoft Defender Application Guard to use Root Certificate Authorities from a user's device|Windows 10 Enterprise, 1809 or higher

Windows 10 Pro, 1809 or higher|Determines whether Root Certificates are shared with Microsoft Defender Application Guard.|**Enabled.** Certificates matching the specified thumbprint are transferred into the container. Use a comma to separate multiple certificates.

**Disabled or not configured.** Certificates are not shared with Microsoft Defender Application Guard.| -|Allow users to trust files that open in Microsoft Defender Application Guard|Windows 10 Enterprise, 1809 or higher|Determines whether users are able to manually trust untrusted files to open them on the host.|**Enabled.** Users are able to manually trust files or trust files after an antivirus check.

**Disabled or not configured.** Users are unable to manually trust files and files continue to open in Microsoft Defender Application Guard.| - - From 6af6b1b964cd0c99f9754f1b2491d4771b0e37db Mon Sep 17 00:00:00 2001 From: Wahid S Date: Tue, 2 Mar 2021 21:15:10 -0600 Subject: [PATCH 10/63] Adding a link to instructions to configure SCEP Adding a link to instructions to configure SCEP client, which took me forever to find some hopefully will save others some time. --- .../microsoft-defender-atp/configure-server-endpoints.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md index d9643ad099..938ef7a28a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md @@ -221,7 +221,7 @@ Defender for Endpoint integrates with System Center Endpoint Protection. The int The following steps are required to enable this integration: - Install the [January 2017 anti-malware platform update for Endpoint Protection clients](https://support.microsoft.com/help/3209361/january-2017-anti-malware-platform-update-for-endpoint-protection-clie). -- Configure the SCEP client Cloud Protection Service membership to the **Advanced** setting. +- [Configure the SCEP client Cloud Protection Service membership](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus) to the **Advanced** setting.
From fea6ffd23a3f6ffcdab4addc163223cb0adc892a Mon Sep 17 00:00:00 2001 From: Bill Mcilhargey <19168174+computeronix@users.noreply.github.com> Date: Wed, 3 Mar 2021 09:27:03 -0500 Subject: [PATCH 11/63] Update windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/minimum-requirements.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md index bc5cc86308..a5ff2e08a5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md +++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md @@ -85,8 +85,8 @@ Access to Defender for Endpoint is done through a browser, supporting the follow ## Hardware and software requirements ### Supported Windows versions -- Windows 7 SP1 Enterprise [requires ESU for support](https://docs.microsoft.com/troubleshoot/windows-client/windows-7-eos-faq/windows-7-extended-security-updates-faq) -- Windows 7 SP1 Pro [requires ESU for support](https://docs.microsoft.com/troubleshoot/windows-client/windows-7-eos-faq/windows-7-extended-security-updates-faq) +- Windows 7 SP1 Enterprise ([Requires ESU for support](https://docs.microsoft.com/troubleshoot/windows-client/windows-7-eos-faq/windows-7-extended-security-updates-faq).) +- Windows 7 SP1 Pro ([Requires ESU for support](https://docs.microsoft.com/troubleshoot/windows-client/windows-7-eos-faq/windows-7-extended-security-updates-faq).) - Windows 8.1 Enterprise - Windows 8.1 Pro - Windows 10 Enterprise From 5465b7c7b05d0fb4de07d413626f5d3faa7904a6 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 16:34:05 -0800 Subject: [PATCH 12/63] Update switch-to-microsoft-defender-onboard.md --- .../switch-to-microsoft-defender-onboard.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md index fc39b63653..3215fbbf72 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md @@ -54,11 +54,11 @@ Deployment methods vary, depending on which operating system is selected. Refer |Operating system |Method | |---------|---------| -|Windows 10 |- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [Mobile Device Management (Intune)](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-mdm)
- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | -|- Windows 8.1 Enterprise
- Windows 8.1 Pro
- Windows 7 SP1 Enterprise
- Windows 7 SP1 Pro | [Microsoft Monitoring Agent](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp)

**NOTE**: Microsoft Monitoring Agent is now Azure Log Analytics agent. To learn more, see [Log Analytics agent overview](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). | -|- Windows Server 2019 and later
- Windows Server 2019 core edition
- Windows Server version 1803 and later |- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)
- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [System Center Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm#onboard-windows-10-devices-using-earlier-versions-of-system-center-configuration-manager)
- [VDI onboarding scripts for non-persistent devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | -|- Windows Server 2016
- Windows Server 2012 R2
- Windows Server 2008 R2 SP1 |- [Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints#option-1-onboard-servers-through-microsoft-defender-security-center)
- [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp) | -|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra)

iOS

Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |[Onboard non-Windows devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows) | +| Windows 10 |- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [Mobile Device Management (Intune)](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-mdm)
- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | +| Windows 8.1 Enterprise

Windows 8.1 Pro

Windows 7 SP1 Enterprise

Windows 7 SP1 Pro | [Microsoft Monitoring Agent](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp)

**NOTE**: Microsoft Monitoring Agent is now Azure Log Analytics agent. To learn more, see [Log Analytics agent overview](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). | +| Windows Server 2019 and later

Windows Server 2019 core edition

Windows Server version 1803 and later |- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)
- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [System Center Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm#onboard-windows-10-devices-using-earlier-versions-of-system-center-configuration-manager)
- [VDI onboarding scripts for non-persistent devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | +|Windows Server 2016

Windows Server 2012 R2

Windows Server 2008 R2 SP1 |- [Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints#option-1-onboard-servers-through-microsoft-defender-security-center)
- [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp) | +| macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra)

iOS

Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |[Onboard non-Windows devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows) | ## Run a detection test @@ -66,9 +66,9 @@ To verify that your onboarded devices are properly connected to Microsoft Defend |Operating system |Guidance | |---------|---------| -|- Windows 10
- Windows Server 2019
- Windows Server, version 1803
- Windows Server 2016
- Windows Server 2012 R2 |See [Run a detection test](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/run-detection-test).

Visit the Microsoft Defender for Endpoint demo scenarios site ([https://demo.wd.microsoft.com](https://demo.wd.microsoft.com)) and try one or more of the scenarios. For example, try the **Cloud-delivered protection** demo scenario. | -|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender for Endpoint for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | -|Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |1. Run the following command, and look for a result of **1**:
`mdatp health --field real_time_protection_enabled`.

2. Open a Terminal window, and run the following command:
`curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt`.

3. Run the following command to list any detected threats:
`mdatp threat list`.

For more information, see [Microsoft Defender ATP for Linux](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux). | +| Windows 10

Windows Server 2019

Windows Server, version 1803

Windows Server 2016

Windows Server 2012 R2 |See [Run a detection test](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/run-detection-test).

Visit the Microsoft Defender for Endpoint demo scenarios site ([https://demo.wd.microsoft.com](https://demo.wd.microsoft.com)) and try one or more of the scenarios. For example, try the **Cloud-delivered protection** demo scenario. | +|macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender for Endpoint for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | +|Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |1. Run the following command, and look for a result of **1**:
`mdatp health --field real_time_protection_enabled`.

2. Open a Terminal window, and run the following command:
`curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt`.

3. Run the following command to list any detected threats:
`mdatp threat list`.

For more information, see [Microsoft Defender ATP for Linux](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux). | ## Uninstall your non-Microsoft solution From 1d1252e39d17aa5e0848fc7346da460ed0592227 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 16:39:25 -0800 Subject: [PATCH 13/63] Update switch-to-microsoft-defender-prepare.md --- .../switch-to-microsoft-defender-prepare.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md index c34bb7e48e..a8aeed902f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md @@ -37,9 +37,9 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho This migration phase includes the following steps: 1. [Get and deploy updates across your organization's devices](#get-and-deploy-updates-across-your-organizations-devices) -2. [Get Microsoft Defender for Endpoint](#get-microsoft-defender-for-endpoint). -3. [Grant access to the Microsoft Defender Security Center](#grant-access-to-the-microsoft-defender-security-center). -4. [Configure device proxy and internet connectivity settings](#configure-device-proxy-and-internet-connectivity-settings). +2. [Get Microsoft Defender for Endpoint](#get-microsoft-defender-for-endpoint) +3. [Grant access to the Microsoft Defender Security Center](#grant-access-to-the-microsoft-defender-security-center) +4. [Configure device proxy and internet connectivity settings](#configure-device-proxy-and-internet-connectivity-settings) ## Get and deploy updates across your organization's devices @@ -97,12 +97,12 @@ To enable communication between your devices and Microsoft Defender for Endpoint |Capabilities | Operating System | Resources | |--|--|--| -|[Endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) |- [Windows 10](https://docs.microsoft.com/windows/release-health/release-information)
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |[Configure machine proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet) | -|EDR |- [Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)
- [Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)
- [Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows 7 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |[Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#configure-proxy-and-internet-connectivity-settings) | -|EDR |macOS:
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | -|[Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) |- [Windows 10](https://docs.microsoft.com/windows/release-health/release-information)
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803)
- [Windows Server 2016](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-2016) |[Configure and validate Microsoft Defender Antivirus network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus)
| -|Antivirus |macOS:
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | -|Antivirus |Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |[Microsoft Defender for Endpoint for Linux: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux#network-connections) | +|[Endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) |[Windows 10](https://docs.microsoft.com/windows/release-health/release-information)

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |[Configure machine proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet) | +|EDR |[Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)

[Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)

[Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows 7 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |[Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#configure-proxy-and-internet-connectivity-settings) | +|EDR |macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | +|[Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) |[Windows 10](https://docs.microsoft.com/windows/release-health/release-information)

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803)

[Windows Server 2016](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-2016) |[Configure and validate Microsoft Defender Antivirus network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus)
| +|Antivirus |macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | +|Antivirus |Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |[Microsoft Defender for Endpoint for Linux: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux#network-connections) | ## Next step From 6cfa7f7383e3569e3a1230c780d926841d3fd39d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 16:48:05 -0800 Subject: [PATCH 14/63] Update switch-to-microsoft-defender-setup.md --- .../switch-to-microsoft-defender-setup.md | 26 +++++++++---------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md index fb128c2f4b..a71e17f965 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md @@ -34,13 +34,13 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho ||*You are here!* | | **Welcome to the Setup phase of [switching to Microsoft Defender for Endpoint](switch-to-microsoft-defender-migration.md#the-migration-process)**. This phase includes the following steps: -1. [Enable Microsoft Defender Antivirus and confirm it's in passive mode](#enable-microsoft-defender-antivirus-and-confirm-its-in-passive-mode). -2. [Get updates for Microsoft Defender Antivirus](#get-updates-for-microsoft-defender-antivirus). -3. [Add Microsoft Defender for Endpoint to the exclusion list for your existing endpoint solution](#add-microsoft-defender-for-endpoint-to-the-exclusion-list-for-your-existing-solution). -4. [Add your existing solution to the exclusion list for Microsoft Defender Antivirus](#add-your-existing-solution-to-the-exclusion-list-for-microsoft-defender-antivirus). -5. [Add your existing solution to the exclusion list for Microsoft Defender for Endpoint](#add-your-existing-solution-to-the-exclusion-list-for-microsoft-defender-for-endpoint). -6. [Set up your device groups, device collections, and organizational units](#set-up-your-device-groups-device-collections-and-organizational-units). -7. [Configure antimalware policies and real-time protection](#configure-antimalware-policies-and-real-time-protection). +1. [Enable Microsoft Defender Antivirus and confirm it's in passive mode](#enable-microsoft-defender-antivirus-and-confirm-its-in-passive-mode) +2. [Get updates for Microsoft Defender Antivirus](#get-updates-for-microsoft-defender-antivirus) +3. [Add Microsoft Defender for Endpoint to the exclusion list for your existing endpoint solution](#add-microsoft-defender-for-endpoint-to-the-exclusion-list-for-your-existing-solution) +4. [Add your existing solution to the exclusion list for Microsoft Defender Antivirus](#add-your-existing-solution-to-the-exclusion-list-for-microsoft-defender-antivirus) +5. [Add your existing solution to the exclusion list for Microsoft Defender for Endpoint](#add-your-existing-solution-to-the-exclusion-list-for-microsoft-defender-for-endpoint) +6. [Set up your device groups, device collections, and organizational units](#set-up-your-device-groups-device-collections-and-organizational-units) +7. [Configure antimalware policies and real-time protection](#configure-antimalware-policies-and-real-time-protection) ## Enable Microsoft Defender Antivirus and confirm it's in passive mode @@ -48,10 +48,10 @@ On certain versions of Windows, such as Windows Server, Microsoft Defender Antiv This step of the migration process includes the following tasks: - [Setting DisableAntiSpyware to false on Windows Server](#set-disableantispyware-to-false-on-windows-server) -- [Reinstalling Microsoft Defender Antivirus on Windows Server](#reinstall-microsoft-defender-antivirus-on-windows-server); +- [Reinstalling Microsoft Defender Antivirus on Windows Server](#reinstall-microsoft-defender-antivirus-on-windows-server) - [Setting Microsoft Defender Antivirus to passive mode on Windows Server](#set-microsoft-defender-antivirus-to-passive-mode-on-windows-server) -- [Enabling Microsoft Defender Antivirus on your Windows client devices](#enable-microsoft-defender-antivirus-on-your-windows-client-devices); and -- [Confirming that Microsoft Defender Antivirus is set to passive mode](#confirm-that-microsoft-defender-antivirus-is-in-passive-mode). +- [Enabling Microsoft Defender Antivirus on your Windows client devices](#enable-microsoft-defender-antivirus-on-your-windows-client-devices) +- [Confirming that Microsoft Defender Antivirus is set to passive mode](#confirm-that-microsoft-defender-antivirus-is-in-passive-mode) ### Set DisableAntiSpyware to false on Windows Server @@ -90,7 +90,7 @@ The [DisableAntiSpyware](https://docs.microsoft.com/windows-hardware/customize/d #### Are you using Windows Server 2016? -If you're using Windows Server 2016 and are having trouble enabling Microsoft Defender Antivirus, use the following PowerShell cmdlet: +If you're using Windows Server 2016 and are having trouble enabling Microsoft Defender Antivirus, use the following PowerShell cmdlet on the device: `mpcmdrun -wdenable` @@ -158,8 +158,8 @@ The specific exclusions to configure depend on which version of Windows your end |OS |Exclusions | |--|--| -|- Windows 10, [version 1803](https://docs.microsoft.com/windows/release-health/status-windows-10-1803) or later (See [Windows 10 release information](https://docs.microsoft.com/windows/release-health/release-information))
- Windows 10, version 1703 or [1709](https://docs.microsoft.com/windows/release-health/status-windows-10-1709) with [KB4493441](https://support.microsoft.com/help/4493441) installed
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server, version 1803](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |`C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe`
`C:\Program Files\Windows Defender Advanced Threat Protection\SenseCncProxy.exe`
`C:\Program Files\Windows Defender Advanced Threat Protection\SenseSampleUploader.exe`
`C:\Program Files\Windows Defender Advanced Threat Protection\SenseIR.exe`
| -|- [Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows 7](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)
- [Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)
- [Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |`C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 6\45\MsSenseS.exe`
**NOTE**: Where Monitoring Host Temporary Files 6\45 can be different numbered subfolders.
`C:\Program Files\Microsoft Monitoring Agent\Agent\AgentControlPanel.exe`
`C:\Program Files\Microsoft Monitoring Agent\Agent\HealthService.exe`
`C:\Program Files\Microsoft Monitoring Agent\Agent\HSLockdown.exe`
`C:\Program Files\Microsoft Monitoring Agent\Agent\MOMPerfSnapshotHelper.exe`
`C:\Program Files\Microsoft Monitoring Agent\Agent\MonitoringHost.exe`
`C:\Program Files\Microsoft Monitoring Agent\Agent\TestCloudConnection.exe` | +|Windows 10, [version 1803](https://docs.microsoft.com/windows/release-health/status-windows-10-1803) or later (See [Windows 10 release information](https://docs.microsoft.com/windows/release-health/release-information))

Windows 10, version 1703 or [1709](https://docs.microsoft.com/windows/release-health/status-windows-10-1709) with [KB4493441](https://support.microsoft.com/help/4493441) installed

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server, version 1803](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |`C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseCncProxy.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseSampleUploader.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseIR.exe` | +|[Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows 7](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)

[Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)

[Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |`C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 6\45\MsSenseS.exe`

**NOTE**: Where Monitoring Host Temporary Files 6\45 can be different numbered subfolders.
`C:\Program Files\Microsoft Monitoring Agent\Agent\AgentControlPanel.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\HealthService.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\HSLockdown.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\MOMPerfSnapshotHelper.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\MonitoringHost.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\TestCloudConnection.exe` | ## Add your existing solution to the exclusion list for Microsoft Defender Antivirus From 58ee78e17c1cafccb7a5d6aa040f759b2e81eed9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 16:55:55 -0800 Subject: [PATCH 15/63] Update symantec-to-microsoft-defender-atp-onboard.md --- ...antec-to-microsoft-defender-atp-onboard.md | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index af35ec691e..3984f7078b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -36,10 +36,10 @@ ms.reviewer: depicker, yongrhee, chriggs **Welcome to Phase 3 of [migrating from Symantec to Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-migration.md#the-migration-process)**. This migration phase includes the following steps: -1. [Onboard devices to Microsoft Defender for Endpoint](#onboard-devices-to-microsoft-defender-for-endpoint). -2. [Run a detection test](#run-a-detection-test). -3. [Uninstall Symantec](#uninstall-symantec). -4. [Make sure Microsoft Defender for Endpoint is in active mode](#make-sure-microsoft-defender-for-endpoint-is-in-active-mode). +1. [Onboard devices to Microsoft Defender for Endpoint](#onboard-devices-to-microsoft-defender-for-endpoint) +2. [Run a detection test](#run-a-detection-test) +3. [Uninstall Symantec](#uninstall-symantec) +4. [Make sure Microsoft Defender for Endpoint is in active mode](#make-sure-microsoft-defender-for-endpoint-is-in-active-mode) ## Onboard devices to Microsoft Defender for Endpoint @@ -55,10 +55,10 @@ Deployment methods vary, depending on which operating system is selected. Refer |Operating system |Method | |---------|---------| |Windows 10 |- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [Mobile Device Management (Intune)](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-mdm)
- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | -|- Windows 8.1 Enterprise
- Windows 8.1 Pro
- Windows 7 SP1 Enterprise
- Windows 7 SP1 Pro | [Microsoft Monitoring Agent](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp)

**NOTE**: Microsoft Monitoring Agent is now Azure Log Analytics agent. To learn more, see [Log Analytics agent overview](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). | -|- Windows Server 2019 and later
- Windows Server 2019 core edition
- Windows Server version 1803 and later |- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)
- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [System Center Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm#onboard-windows-10-devices-using-earlier-versions-of-system-center-configuration-manager)
- [VDI onboarding scripts for non-persistent devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | -|- Windows Server 2016
- Windows Server 2012 R2
- Windows Server 2008 R2 SP1 |- [Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints#option-1-onboard-servers-through-microsoft-defender-security-center)
- [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp) | -|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra)

iOS

Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |[Onboard non-Windows devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows) | +| Windows 8.1 Enterprise

Windows 8.1 Pro

Windows 7 SP1 Enterprise

Windows 7 SP1 Pro | [Microsoft Monitoring Agent](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp)

**NOTE**: Microsoft Monitoring Agent is now Azure Log Analytics agent. To learn more, see [Log Analytics agent overview](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). | +|Windows Server 2019 and later

Windows Server 2019 core edition

Windows Server version 1803 and later |- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)
- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [System Center Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm#onboard-windows-10-devices-using-earlier-versions-of-system-center-configuration-manager)
- [VDI onboarding scripts for non-persistent devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | +|Windows Server 2016

Windows Server 2012 R2

Windows Server 2008 R2 SP1 |- [Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints#option-1-onboard-servers-through-microsoft-defender-security-center)
- [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp) | +|macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra)

iOS

Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |[Onboard non-Windows devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows) | ## Run a detection test @@ -66,9 +66,9 @@ To verify that your onboarded devices are properly connected to Microsoft Defend |Operating system |Guidance | |---------|---------| -|- Windows 10
- Windows Server 2019
- Windows Server, version 1803
- Windows Server 2016
- Windows Server 2012 R2 |See [Run a detection test](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/run-detection-test).

Visit the Microsoft Defender for Endpoint demo scenarios site ([https://demo.wd.microsoft.com](https://demo.wd.microsoft.com)) and try one or more of the scenarios. For example, try the **Cloud-delivered protection** demo scenario. | -|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender for Endpoint for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | -|Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |1. Run the following command, and look for a result of **1**:
`mdatp health --field real_time_protection_enabled`.

2. Open a Terminal window, and run the following command:
`curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt`.

3. Run the following command to list any detected threats:
`mdatp threat list`.

For more information, see [Microsoft Defender for Endpoint for Linux](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux). | +|Windows 10

Windows Server 2019

Windows Server, version 1803

Windows Server 2016

Windows Server 2012 R2 |See [Run a detection test](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/run-detection-test).

Visit the Microsoft Defender for Endpoint demo scenarios site ([https://demo.wd.microsoft.com](https://demo.wd.microsoft.com)) and try one or more of the scenarios. For example, try the **Cloud-delivered protection** demo scenario. | +|macOS
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender for Endpoint for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | +|Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |1. Run the following command, and look for a result of **1**:
`mdatp health --field real_time_protection_enabled`.
2. Open a Terminal window, and run the following command:
`curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt`.
3. Run the following command to list any detected threats:
`mdatp threat list`.

For more information, see [Microsoft Defender for Endpoint for Linux](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux). | ## Uninstall Symantec From 0def9eb8163ef14401d99c73d8494d7a398fb16a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 16:58:00 -0800 Subject: [PATCH 16/63] Update symantec-to-microsoft-defender-atp-prepare.md --- .../symantec-to-microsoft-defender-atp-prepare.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md index 170fae78d0..5a51739655 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md @@ -37,9 +37,9 @@ ms.reviewer: depicker, yongrhee, chriggs **Welcome to the Prepare phase of [migrating from Symantec to Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-migration.md#the-migration-process)**. This migration phase includes the following steps: -1. [Get Microsoft Defender for Endpoint](#get-microsoft-defender-for-endpoint). -2. [Grant access to the Microsoft Defender Security Center](#grant-access-to-the-microsoft-defender-security-center). -3. [Configure device proxy and internet connectivity settings](#configure-device-proxy-and-internet-connectivity-settings). +1. [Get Microsoft Defender for Endpoint](#get-microsoft-defender-for-endpoint) +2. [Grant access to the Microsoft Defender Security Center](#grant-access-to-the-microsoft-defender-security-center) +3. [Configure device proxy and internet connectivity settings](#configure-device-proxy-and-internet-connectivity-settings) ## Get Microsoft Defender for Endpoint @@ -75,10 +75,10 @@ To enable communication between your devices and Microsoft Defender for Endpoint |Capabilities | Operating System | Resources | |:----|:----|:---| -|[Endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) |- [Windows 10](https://docs.microsoft.com/windows/release-health/release-information/)
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |[Configure machine proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet) | -|EDR |- [Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)
- [Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)
- [Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows 7 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |[Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#configure-proxy-and-internet-connectivity-settings) | -|EDR |macOS:
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | -|[Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) |- [Windows 10](https://docs.microsoft.com/windows/release-health/release-information/)
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803)
- [Windows Server 2016](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-2016) |[Configure and validate Microsoft Defender Antivirus network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus)
| +|[Endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) |[Windows 10](https://docs.microsoft.com/windows/release-health/release-information/)

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |[Configure machine proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet) | +|EDR |[Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)

[Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)

[Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows 7 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |[Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#configure-proxy-and-internet-connectivity-settings) | +|EDR |macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | +|[Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) |[Windows 10](https://docs.microsoft.com/windows/release-health/release-information/)

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803)

[Windows Server 2016](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-2016) |[Configure and validate Microsoft Defender Antivirus network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus)
| |Antivirus |macOS:
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |[Microsoft -Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | |Antivirus |Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |[Microsoft Defender for Endpoint for Linux: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux#network-connections) | From e548a323c046cb58d38d260a2579ffb6e65c3a2a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 17:05:11 -0800 Subject: [PATCH 17/63] Update symantec-to-microsoft-defender-atp-prepare.md --- .../symantec-to-microsoft-defender-atp-prepare.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md index 5a51739655..a00af7000d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md @@ -79,8 +79,8 @@ To enable communication between your devices and Microsoft Defender for Endpoint |EDR |[Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)

[Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)

[Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows 7 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |[Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#configure-proxy-and-internet-connectivity-settings) | |EDR |macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | |[Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) |[Windows 10](https://docs.microsoft.com/windows/release-health/release-information/)

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803)

[Windows Server 2016](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-2016) |[Configure and validate Microsoft Defender Antivirus network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus)
| -|Antivirus |macOS:
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |[Microsoft -Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | -|Antivirus |Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |[Microsoft Defender for Endpoint for Linux: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux#network-connections) | +|Antivirus |macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |[Microsoft -Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | +|Antivirus |Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |[Microsoft Defender for Endpoint for Linux: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux#network-connections) | ## Next step From c099d0b1f6238c58de5e5febb8790b07be386f30 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 18:53:24 -0800 Subject: [PATCH 18/63] Update symantec-to-microsoft-defender-atp-setup.md --- .../symantec-to-microsoft-defender-atp-setup.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index da841e02fc..97c3eac1ea 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -35,9 +35,9 @@ ms.reviewer: depicker, yongrhee, chriggs **Welcome to the Setup phase of [migrating from Symantec to Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-migration.md#the-migration-process)**. This phase includes the following steps: -1. [Enable or reinstall Microsoft Defender Antivirus (for certain versions of Windows)](#enable-or-reinstall-microsoft-defender-antivirus-for-certain-versions-of-windows). -2. [Enable Microsoft Defender Antivirus](#enable-microsoft-defender-antivirus). -3. [Get updates for Microsoft Defender Antivirus](#get-updates-for-microsoft-defender-antivirus). +1. [Enable or reinstall Microsoft Defender Antivirus (for certain versions of Windows)](#enable-or-reinstall-microsoft-defender-antivirus-for-certain-versions-of-windows) +2. [Enable Microsoft Defender Antivirus](#enable-microsoft-defender-antivirus) +3. [Get updates for Microsoft Defender Antivirus](#get-updates-for-microsoft-defender-antivirus) 4. [Add Microsoft Defender for Endpoint to the exclusion list for Symantec](#add-microsoft-defender-for-endpoint-to-the-exclusion-list-for-symantec). 5. [Add Symantec to the exclusion list for Microsoft Defender Antivirus](#add-symantec-to-the-exclusion-list-for-microsoft-defender-antivirus). 6. [Add Symantec to the exclusion list for Microsoft Defender for Endpoint](#add-symantec-to-the-exclusion-list-for-microsoft-defender-for-endpoint). From 468c40edd7453c2bc6e09e494396b308f3406464 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 18:58:24 -0800 Subject: [PATCH 19/63] migration guide fixes --- .../mcafee-to-microsoft-defender-migration.md | 1 - .../mcafee-to-microsoft-defender-onboard.md | 23 ++++++++----------- 2 files changed, 10 insertions(+), 14 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index f32f4af0d0..e2d49d85b9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -32,7 +32,6 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection) (Microsoft Defender for Endpoint), you're in the right place. Use this article as a guide. - :::image type="content" source="images/mcafee-mde-migration.png" alt-text="Overview of migrating from McAfee to Defender for Endpoint"::: When you make the switch from McAfee to Defender for Endpoint, you begin with your McAfee solution in active mode, configure Defender for Endpoint in passive mode, onboard to Defender for Endpoint, and then set Defender for Endpoint to active mode and remove McAfee. diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md index 14270c916e..fb5e596932 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md @@ -37,19 +37,16 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho **Welcome to Phase 3 of [migrating from McAfee Endpoint Security (McAfee) to Microsoft Defender Advanced Threat Protection (Microsoft Defender for Endpoint)](mcafee-to-microsoft-defender-migration.md#the-migration-process)**. This migration phase includes the following steps: -1. [Onboard devices to Microsoft Defender for Endpoint](#onboard-devices-to-microsoft-defender-for-endpoint). -2. [Run a detection test](#run-a-detection-test). -3. [Uninstall McAfee](#uninstall-mcafee). -4. [Make sure Microsoft Defender for Endpoint is in active mode](#make-sure-microsoft-defender-for-endpoint-is-in-active-mode). +1. [Onboard devices to Microsoft Defender for Endpoint](#onboard-devices-to-microsoft-defender-for-endpoint) +2. [Run a detection test](#run-a-detection-test) +3. [Uninstall McAfee](#uninstall-mcafee) +4. [Make sure Microsoft Defender for Endpoint is in active mode](#make-sure-microsoft-defender-for-endpoint-is-in-active-mode) ## Onboard devices to Microsoft Defender for Endpoint 1. Go to the Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka.ms/MDATPportal)) and sign in. - 2. Choose **Settings** > **Device management** > **Onboarding**. - 3. In the **Select operating system to start onboarding process** list, select an operating system. - 4. Under **Deployment method**, select an option. Follow the links and prompts to onboard your organization's devices. Need help? See [Onboarding methods](#onboarding-methods) (in this article). ### Onboarding methods @@ -59,10 +56,10 @@ Deployment methods vary, depending on which operating system is selected. Refer |Operating system |Method | |---------|---------| |Windows 10 |- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [Mobile Device Management (Intune)](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-mdm)
- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | -|- Windows 8.1 Enterprise
- Windows 8.1 Pro
- Windows 7 SP1 Enterprise
- Windows 7 SP1 Pro | [Microsoft Monitoring Agent](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp)

**NOTE**: Microsoft Monitoring Agent is now Azure Log Analytics agent. To learn more, see [Log Analytics agent overview](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). | -|- Windows Server 2019 and later
- Windows Server 2019 core edition
- Windows Server version 1803 and later |- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)
- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [System Center Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm#onboard-windows-10-devices-using-earlier-versions-of-system-center-configuration-manager)
- [VDI onboarding scripts for non-persistent devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | +| Windows 8.1 Enterprise

Windows 8.1 Pro

Windows 7 SP1 Enterprise

Windows 7 SP1 Pro | [Microsoft Monitoring Agent](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp)

**NOTE**: Microsoft Monitoring Agent is now Azure Log Analytics agent. To learn more, see [Log Analytics agent overview](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). | +|Windows Server 2019 and later

Windows Server 2019 core edition

Windows Server version 1803 and later |- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)
- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [System Center Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm#onboard-windows-10-devices-using-earlier-versions-of-system-center-configuration-manager)
- [VDI onboarding scripts for non-persistent devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | |- Windows Server 2016
- Windows Server 2012 R2
- Windows Server 2008 R2 SP1 |- [Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints#option-1-onboard-servers-through-microsoft-defender-security-center)
- [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp) | -|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra)

iOS

Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |[Onboard non-Windows devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows) | +|macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra)

iOS

Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |[Onboard non-Windows devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows) | ## Run a detection test @@ -71,9 +68,9 @@ To verify that your onboarded devices are properly connected to Microsoft Defend |Operating system |Guidance | |---------|---------| -|- Windows 10
- Windows Server 2019
- Windows Server, version 1803
- Windows Server 2016
- Windows Server 2012 R2 |See [Run a detection test](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/run-detection-test).

Visit the Microsoft Defender for Endpoint demo scenarios site ([https://demo.wd.microsoft.com](https://demo.wd.microsoft.com)) and try one or more of the scenarios. For example, try the **Cloud-delivered protection** demo scenario. | -|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender ATP for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | -|Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |1. Run the following command, and look for a result of **1**:
`mdatp health --field real_time_protection_enabled`.

2. Open a Terminal window, and run the following command:
`curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt`.

3. Run the following command to list any detected threats:
`mdatp threat list`.

For more information, see [Microsoft Defender ATP for Linux](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux). | +|Windows 10

Windows Server 2019

Windows Server, version 1803

Windows Server 2016

Windows Server 2012 R2 |See [Run a detection test](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/run-detection-test).

Visit the Microsoft Defender for Endpoint demo scenarios site ([https://demo.wd.microsoft.com](https://demo.wd.microsoft.com)) and try one or more of the scenarios. For example, try the **Cloud-delivered protection** demo scenario. | +|macOS
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender ATP for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | +|Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |1. Run the following command, and look for a result of **1**:
`mdatp health --field real_time_protection_enabled`.
2. Open a Terminal window, and run the following command:
`curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt`.
3. Run the following command to list any detected threats:
`mdatp threat list`.

For more information, see [Microsoft Defender ATP for Linux](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux). | ## Uninstall McAfee From 7bf7cb753deee02d68a1a83d5836df223872cace Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 19:02:20 -0800 Subject: [PATCH 20/63] Update mcafee-to-microsoft-defender-prepare.md --- .../mcafee-to-microsoft-defender-prepare.md | 27 +++++++------------ 1 file changed, 9 insertions(+), 18 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md index 4b9d123c45..1e99cff4a3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md @@ -39,9 +39,9 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho This migration phase includes the following steps: 1. [Get and deploy updates across your organization's devices](#get-and-deploy-updates-across-your-organizations-devices) -2. [Get Microsoft Defender for Endpoint](#get-microsoft-defender-for-endpoint). -3. [Grant access to the Microsoft Defender Security Center](#grant-access-to-the-microsoft-defender-security-center). -4. [Configure device proxy and internet connectivity settings](#configure-device-proxy-and-internet-connectivity-settings). +2. [Get Microsoft Defender for Endpoint](#get-microsoft-defender-for-endpoint) +3. [Grant access to the Microsoft Defender Security Center](#grant-access-to-the-microsoft-defender-security-center) +4. [Configure device proxy and internet connectivity settings](#configure-device-proxy-and-internet-connectivity-settings) ## Get and deploy updates across your organization's devices @@ -50,13 +50,9 @@ As a best practice, keep your organization's devices and endpoints up to date. M ### Make sure your McAfee solution is up to date Keep McAfee up to date, and make sure that your organization's devices have the latest security updates. Need help? Here are some McAfee resources: - - [McAfee Enterprise Product Documentation: How Endpoint Security Works](https://docs.mcafee.com/bundle/endpoint-security-10.7.x-common-product-guide-windows/page/GUID-1207FF39-D1D2-481F-BBD9-E4079112A8DD.html) - - [McAfee Knowledge Center Technical Article: Windows Security Center intermittently incorrectly reports that Endpoint Security is disabled when running on Windows 10](https://kc.mcafee.com/corporate/index?page=content&id=KB91830) - - [McAfee Knowledge Center Technical Article: Windows Security Center reports Endpoint Security is disabled when Endpoint Security is running](https://kc.mcafee.com/corporate/index?page=content&id=KB91428) - - Your McAfee support ServicePortal ([http://mysupport.mcafee.com](http://mysupport.mcafee.com)) ### Make sure your organization's devices are up to date @@ -76,11 +72,8 @@ Need help updating your organization's devices? See the following resources: Now that you've updated your organization's devices, the next step is to get Microsoft Defender for Endpoint, assign licenses, and make sure the service is provisioned. 1. Buy or try Microsoft Defender for Endpoint today. [Start a free trial or request a quote](https://aka.ms/mdatp). - 2. Verify that your licenses are properly provisioned. [Check your license state](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/production-deployment#check-license-state). - 3. As a global administrator or security administrator, set up your dedicated cloud instance of Microsoft Defender for Endpoint. See [Microsoft Defender for Endpoint setup: Tenant configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/production-deployment#tenant-configuration). - 4. If endpoints (such as devices) in your organization use a proxy to access the internet, see [Microsoft Defender for Endpoint setup: Network configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/production-deployment#network-configuration). At this point, you are ready to grant access to your security administrators and security operators who will use the Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka.ms/MDATPportal)). @@ -95,14 +88,12 @@ The Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka Permissions to the Microsoft Defender Security Center can be granted by using either basic permissions or role-based access control (RBAC). We recommend using RBAC so that you have more granular control over permissions. 1. Plan the roles and permissions for your security administrators and security operators. See [Role-based access control](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment#role-based-access-control). - 2. Set up and configure RBAC. We recommend using [Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to configure RBAC, especially if your organization is using a combination of Windows 10, macOS, iOS, and Android devices. See [setting up RBAC using Intune](https://docs.microsoft.com/mem/intune/fundamentals/role-based-access-control). If your organization requires a method other than Intune, choose one of the following options: - [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/configure/configure-role-based-administration) - [Advanced Group Policy Management](https://docs.microsoft.com/microsoft-desktop-optimization-pack/agpm) - [Windows Admin Center](https://docs.microsoft.com/windows-server/manage/windows-admin-center/overview) - 3. Grant access to the Microsoft Defender Security Center. (Need help? See [Manage portal access using RBAC](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/rbac)). ## Configure device proxy and internet connectivity settings @@ -111,12 +102,12 @@ To enable communication between your devices and Microsoft Defender for Endpoint |Capabilities | Operating System | Resources | |--|--|--| -|[Endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) |- [Windows 10](https://docs.microsoft.com/windows/release-health/release-information)
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |[Configure machine proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet) | -|EDR |- [Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)
- [Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)
- [Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows 7 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |[Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#configure-proxy-and-internet-connectivity-settings) | -|EDR |macOS:
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | -|[Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) |- [Windows 10](https://docs.microsoft.com/windows/release-health/release-information)
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803)
- [Windows Server 2016](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-2016) |[Configure and validate Microsoft Defender Antivirus network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus)
| -|Antivirus |macOS:
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | -|Antivirus |Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |[Microsoft Defender for Endpoint for Linux: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux#network-connections) +|[Endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) | [Windows 10](https://docs.microsoft.com/windows/release-health/release-information)

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |[Configure machine proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet) | +|EDR | [Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)

[Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)

[Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows 7 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |[Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#configure-proxy-and-internet-connectivity-settings) | +|EDR |macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | +|[Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) | [Windows 10](https://docs.microsoft.com/windows/release-health/release-information)

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803)

[Windows Server 2016](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-2016) |[Configure and validate Microsoft Defender Antivirus network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus) | +|Antivirus |macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | +|Antivirus |Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |[Microsoft Defender for Endpoint for Linux: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux#network-connections) ## Next step From b77da8f6ab673de9cf92229b418fa07baae791b8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 19:16:02 -0800 Subject: [PATCH 21/63] Update mcafee-to-microsoft-defender-setup.md --- .../mcafee-to-microsoft-defender-setup.md | 100 ++++++------------ 1 file changed, 35 insertions(+), 65 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md index dc706c0bbc..df37f40e0c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md @@ -35,13 +35,13 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho ||*You are here!* | | **Welcome to the Setup phase of [migrating from McAfee Endpoint Security (McAfee) to Microsoft Defender for Endpoint](mcafee-to-microsoft-defender-migration.md#the-migration-process)**. This phase includes the following steps: -1. [Enable Microsoft Defender Antivirus and confirm it's in passive mode](#enable-microsoft-defender-antivirus-and-confirm-its-in-passive-mode). -2. [Get updates for Microsoft Defender Antivirus](#get-updates-for-microsoft-defender-antivirus). -3. [Add Microsoft Defender for Endpoint to the exclusion list for McAfee](#add-microsoft-defender-for-endpoint-to-the-exclusion-list-for-mcafee). -4. [Add McAfee to the exclusion list for Microsoft Defender Antivirus](#add-mcafee-to-the-exclusion-list-for-microsoft-defender-antivirus). -5. [Add McAfee to the exclusion list for Microsoft Defender for Endpoint](#add-mcafee-to-the-exclusion-list-for-microsoft-defender-for-endpoint). +1. [Enable Microsoft Defender Antivirus and confirm it's in passive mode](#enable-microsoft-defender-antivirus-and-confirm-its-in-passive-mode) +2. [Get updates for Microsoft Defender Antivirus](#get-updates-for-microsoft-defender-antivirus) +3. [Add Microsoft Defender for Endpoint to the exclusion list for McAfee](#add-microsoft-defender-for-endpoint-to-the-exclusion-list-for-mcafee) +4. [Add McAfee to the exclusion list for Microsoft Defender Antivirus](#add-mcafee-to-the-exclusion-list-for-microsoft-defender-antivirus) +5. [Add McAfee to the exclusion list for Microsoft Defender for Endpoint](#add-mcafee-to-the-exclusion-list-for-microsoft-defender-for-endpoint) 6. [Set up your device groups, device collections, and organizational units](#set-up-your-device-groups-device-collections-and-organizational-units). -7. [Configure antimalware policies and real-time protection](#configure-antimalware-policies-and-real-time-protection). +7. [Configure antimalware policies and real-time protection](#configure-antimalware-policies-and-real-time-protection) ## Enable Microsoft Defender Antivirus and confirm it's in passive mode @@ -49,27 +49,21 @@ On certain versions of Windows, such as Windows Server, Microsoft Defender Antiv This step of the migration process includes the following tasks: - [Setting DisableAntiSpyware to false on Windows Server](#set-disableantispyware-to-false-on-windows-server) -- [Reinstalling Microsoft Defender Antivirus on Windows Server](#reinstall-microsoft-defender-antivirus-on-windows-server); +- [Reinstalling Microsoft Defender Antivirus on Windows Server](#reinstall-microsoft-defender-antivirus-on-windows-server) - [Setting Microsoft Defender Antivirus to passive mode on Windows Server](#set-microsoft-defender-antivirus-to-passive-mode-on-windows-server) -- [Enabling Microsoft Defender Antivirus on your Windows client devices](#enable-microsoft-defender-antivirus-on-your-windows-client-devices); and -- [Confirming that Microsoft Defender Antivirus is set to passive mode](#confirm-that-microsoft-defender-antivirus-is-in-passive-mode). +- [Enabling Microsoft Defender Antivirus on your Windows client devices](#enable-microsoft-defender-antivirus-on-your-windows-client-devices) +- [Confirming that Microsoft Defender Antivirus is set to passive mode](#confirm-that-microsoft-defender-antivirus-is-in-passive-mode) ### Set DisableAntiSpyware to false on Windows Server The [DisableAntiSpyware](https://docs.microsoft.com/windows-hardware/customize/desktop/unattend/security-malware-windows-defender-disableantispyware) registry key was used in the past to disable Microsoft Defender Antivirus, and deploy another antivirus product, such as McAfee. In general, you should not have this registry key on your Windows devices and endpoints; however, if you do have `DisableAntiSpyware` configured, here's how to set its value to false: 1. On your Windows Server device, open Registry Editor. - 2. Navigate to `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`. - 3. In that folder, look for a DWORD entry called **DisableAntiSpyware**. - - If you do not see that entry, you're all set. - - If you do see **DisableAntiSpyware**, proceed to step 4. - 4. Right-click the DisableAntiSpyware DWORD, and then choose **Modify**. - 5. Set the value to `0`. (This sets the registry key's value to *false*.) > [!TIP] @@ -84,21 +78,13 @@ The [DisableAntiSpyware](https://docs.microsoft.com/windows-hardware/customize/d > - Windows Server 2016 1. As a local administrator on the endpoint or device, open Windows PowerShell. - -2. Run the following PowerShell cmdlets:
- +2. Run the following PowerShell cmdlets:
`Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
- - `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
- -> [!NOTE] -> When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. -> Example:
-> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
-> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
- -3. To verify Microsoft Defender Antivirus is running, use the following PowerShell cmdlet:
- + `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`

+ When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. Here are some examples: + `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
+ `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`

+3. To verify Microsoft Defender Antivirus is running, use the following PowerShell cmdlet:
`Get-Service -Name windefend` #### Are you using Windows Server 2016? @@ -116,11 +102,8 @@ Because your organization is still using McAfee, you must set Microsoft Defender 1. Open Registry Editor, and then navigate to
`Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection`. - -2. Edit (or create) a DWORD entry called **ForceDefenderPassiveMode**, and specify the following settings: - +2. Edit (or create) a DWORD entry called **ForceDefenderPassiveMode**, and specify the following settings: - Set the DWORD's value to **1**. - - Under **Base**, select **Hexadecimal**. > [!NOTE] @@ -137,9 +120,9 @@ To enable Microsoft Defender Antivirus, we recommend using Intune. However, you |Method |What to do | |---------|---------| -|[Intune](https://docs.microsoft.com/mem/intune/fundamentals/tutorial-walkthrough-endpoint-manager)

**NOTE**: Intune is now Microsoft Endpoint Manager. |1. Go to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and sign in.

2. Select **Devices** > **Configuration profiles**, and then select the profile type you want to configure.
If you haven't yet created a **Device restrictions** profile type, or if you want to create a new one, see [Configure device restriction settings in Microsoft Intune](https://docs.microsoft.com/intune/device-restrictions-configure).

3. Select **Properties**, and then select **Configuration settings: Edit**.

4. Expand **Microsoft Defender Antivirus**.

5. Enable **Cloud-delivered protection**.

6. In the **Prompt users before sample submission** dropdown, select **Send all samples automatically**.

7. In the **Detect potentially unwanted applications** dropdown, select **Enable** or **Audit**.

8. Select **Review + save**, and then choose **Save**.

For more information about Intune device profiles, including how to create and configure their settings, see [What are Microsoft Intune device profiles?](https://docs.microsoft.com/intune/device-profiles).| -|Control Panel in Windows |Follow the guidance here: [Turn on Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/user-help/turn-on-defender-windows).

**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows. | -|[Advanced Group Policy Management](https://docs.microsoft.com/microsoft-desktop-optimization-pack/agpm/)
or
[Group Policy Management Console](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus) |1. Go to `Computer configuration > Administrative templates > Windows components > Microsoft Defender Antivirus`.

2. Look for a policy called **Turn off Microsoft Defender Antivirus**.

3. Choose **Edit policy setting**, and make sure that policy is disabled. This enables Microsoft Defender Antivirus.

**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows. | +|[Intune](https://docs.microsoft.com/mem/intune/fundamentals/tutorial-walkthrough-endpoint-manager)

**NOTE**: Intune is now Microsoft Endpoint Manager. |1. Go to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and sign in.
2. Select **Devices** > **Configuration profiles**, and then select the profile type you want to configure.
If you haven't yet created a **Device restrictions** profile type, or if you want to create a new one, see [Configure device restriction settings in Microsoft Intune](https://docs.microsoft.com/intune/device-restrictions-configure).
3. Select **Properties**, and then select **Configuration settings: Edit**.
4. Expand **Microsoft Defender Antivirus**.
5. Enable **Cloud-delivered protection**.
6. In the **Prompt users before sample submission** dropdown, select **Send all samples automatically**.
7. In the **Detect potentially unwanted applications** dropdown, select **Enable** or **Audit**.
8. Select **Review + save**, and then choose **Save**.

For more information about Intune device profiles, including how to create and configure their settings, see [What are Microsoft Intune device profiles?](https://docs.microsoft.com/intune/device-profiles).| +|Control Panel in Windows |Follow the guidance here: [Turn on Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/user-help/turn-on-defender-windows).

**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows. | +|[Advanced Group Policy Management](https://docs.microsoft.com/microsoft-desktop-optimization-pack/agpm/)
or
[Group Policy Management Console](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus) |1. Go to `Computer configuration > Administrative templates > Windows components > Microsoft Defender Antivirus`.
2. Look for a policy called **Turn off Microsoft Defender Antivirus**.
3. Choose **Edit policy setting**, and make sure that policy is disabled. This enables Microsoft Defender Antivirus.

**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows. | ### Confirm that Microsoft Defender Antivirus is in passive mode @@ -147,8 +130,8 @@ Microsoft Defender Antivirus can run alongside McAfee if you set Microsoft Defen |Method |What to do | |---------|---------| -|Command Prompt |1. On a Windows device, open Command Prompt as an administrator.

2. Type `sc query windefend`, and then press Enter.

3. Review the results to confirm that Microsoft Defender Antivirus is running in passive mode. | -|PowerShell |1. On a Windows device, open Windows PowerShell as an administrator.

2. Run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/Get-MpComputerStatus) cmdlet.

3. In the list of results, look for either **AMRunningMode: Passive Mode** or **AMRunningMode: SxS Passive Mode**.| +|Command Prompt |1. On a Windows device, open Command Prompt as an administrator.
2. Type `sc query windefend`, and then press Enter.
3. Review the results to confirm that Microsoft Defender Antivirus is running in passive mode. | +|PowerShell |1. On a Windows device, open Windows PowerShell as an administrator.
2. Run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/Get-MpComputerStatus) cmdlet.
3. In the list of results, look for either **AMRunningMode: Passive Mode** or **AMRunningMode: SxS Passive Mode**.| > [!NOTE] > You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows. @@ -174,8 +157,8 @@ The specific exclusions to configure depend on which version of Windows your end |OS |Exclusions | |--|--| -|- Windows 10, [version 1803](https://docs.microsoft.com/windows/release-health/status-windows-10-1803) or later (See [Windows 10 release information](https://docs.microsoft.com/windows/release-health/release-information))
- Windows 10, version 1703 or [1709](https://docs.microsoft.com/windows/release-health/status-windows-10-1709) with [KB4493441](https://support.microsoft.com/help/4493441) installed
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server, version 1803](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |`C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseCncProxy.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseSampleUploader.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseIR.exe`
| -|- [Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows 7](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)
- [Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)
- [Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |`C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 6\45\MsSenseS.exe`

**NOTE**: Where Monitoring Host Temporary Files 6\45 can be different numbered subfolders.

`C:\Program Files\Microsoft Monitoring Agent\Agent\AgentControlPanel.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\HealthService.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\HSLockdown.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\MOMPerfSnapshotHelper.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\MonitoringHost.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\TestCloudConnection.exe` | +|Windows 10, [version 1803](https://docs.microsoft.com/windows/release-health/status-windows-10-1803) or later (See [Windows 10 release information](https://docs.microsoft.com/windows/release-health/release-information))

Windows 10, version 1703 or [1709](https://docs.microsoft.com/windows/release-health/status-windows-10-1709) with [KB4493441](https://support.microsoft.com/help/4493441) installed

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server, version 1803](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |`C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseCncProxy.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseSampleUploader.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseIR.exe` | +| [Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows 7](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)

[Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)

[Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |`C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 6\45\MsSenseS.exe`

**NOTE**: Where Monitoring Host Temporary Files 6\45 can be different numbered subfolders.

`C:\Program Files\Microsoft Monitoring Agent\Agent\AgentControlPanel.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\HealthService.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\HSLockdown.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\MOMPerfSnapshotHelper.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\MonitoringHost.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\TestCloudConnection.exe` | ## Add McAfee to the exclusion list for Microsoft Defender Antivirus @@ -191,33 +174,27 @@ You can choose from several methods to add your exclusions to Microsoft Defender |Method | What to do| |--|--| -|[Intune](https://docs.microsoft.com/mem/intune/fundamentals/tutorial-walkthrough-endpoint-manager)

**NOTE**: Intune is now Microsoft Endpoint Manager. |1. Go to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and sign in.

2. Select **Devices** > **Configuration profiles**, and then select the profile that you want to configure.

3. Under **Manage**, select **Properties**.

4. Select **Configuration settings: Edit**.

5. Expand **Microsoft Defender Antivirus**, and then expand **Microsoft Defender Antivirus Exclusions**.

6. Specify the files and folders, extensions, and processes to exclude from Microsoft Defender Antivirus scans. For reference, see [Microsoft Defender Antivirus exclusions](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions).

7. Choose **Review + save**, and then choose **Save**. | -|[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/) |1. Using the [Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/manage/admin-console), go to **Assets and Compliance** > **Endpoint Protection** > **Antimalware Policies**, and then select the policy that you want to modify.

2. Specify exclusion settings for files and folders, extensions, and processes to exclude from Microsoft Defender Antivirus scans. | -|[Group Policy Object](https://docs.microsoft.com/previous-versions/windows/desktop/Policy/group-policy-objects) | 1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.

2. In the **Group Policy Management Editor**, go to **Computer configuration** and click **Administrative templates**.

3. Expand the tree to **Windows components > Microsoft Defender Antivirus > Exclusions**.
**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows.

4. Double-click the **Path Exclusions** setting and add the exclusions.
- Set the option to **Enabled**.
- Under the **Options** section, click **Show...**.
- Specify each folder on its own line under the **Value name** column.
- If you specify a file, make sure to enter a fully qualified path to the file, including the drive letter, folder path, filename, and extension. Enter **0** in the **Value** column.

5. Click **OK**.

6. Double-click the **Extension Exclusions** setting and add the exclusions.
- Set the option to **Enabled**.
- Under the **Options** section, click **Show...**.
- Enter each file extension on its own line under the **Value name** column. Enter **0** in the **Value** column.

7. Click **OK**. | -|Local group policy object |1. On the endpoint or device, open the Local Group Policy Editor.

2. Go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus** > **Exclusions**.
**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows.

3. Specify your path and process exclusions. | -|Registry key |1. Export the following registry key: `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\exclusions`.

2. Import the registry key. Here are two examples:
- Local path: `regedit.exe /s c:\temp\ MDAV_Exclusion.reg`
- Network share: `regedit.exe /s \\FileServer\ShareName\MDAV_Exclusion.reg` | +|[Intune](https://docs.microsoft.com/mem/intune/fundamentals/tutorial-walkthrough-endpoint-manager)

**NOTE**: Intune is now Microsoft Endpoint Manager. |1. Go to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and sign in.
2. Select **Devices** > **Configuration profiles**, and then select the profile that you want to configure.
3. Under **Manage**, select **Properties**.
4. Select **Configuration settings: Edit**.
5. Expand **Microsoft Defender Antivirus**, and then expand **Microsoft Defender Antivirus Exclusions**.
6. Specify the files and folders, extensions, and processes to exclude from Microsoft Defender Antivirus scans. For reference, see [Microsoft Defender Antivirus exclusions](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions).
7. Choose **Review + save**, and then choose **Save**. | +|[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/) |1. Using the [Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/manage/admin-console), go to **Assets and Compliance** > **Endpoint Protection** > **Antimalware Policies**, and then select the policy that you want to modify.
2. Specify exclusion settings for files and folders, extensions, and processes to exclude from Microsoft Defender Antivirus scans. | +|[Group Policy Object](https://docs.microsoft.com/previous-versions/windows/desktop/Policy/group-policy-objects) | 1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
2. In the **Group Policy Management Editor**, go to **Computer configuration** and click **Administrative templates**.
3. Expand the tree to **Windows components > Microsoft Defender Antivirus > Exclusions**.
**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows.
4. Double-click the **Path Exclusions** setting and add the exclusions.
- Set the option to **Enabled**.
- Under the **Options** section, click **Show...**.
- Specify each folder on its own line under the **Value name** column.
- If you specify a file, make sure to enter a fully qualified path to the file, including the drive letter, folder path, filename, and extension. Enter **0** in the **Value** column.
5. Click **OK**.
6. Double-click the **Extension Exclusions** setting and add the exclusions.
- Set the option to **Enabled**.
- Under the **Options** section, click **Show...**.
- Enter each file extension on its own line under the **Value name** column. Enter **0** in the **Value** column.
7. Click **OK**. | +|Local group policy object |1. On the endpoint or device, open the Local Group Policy Editor.
2. Go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus** > **Exclusions**.
**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows.
3. Specify your path and process exclusions. | +|Registry key |1. Export the following registry key: `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\exclusions`.
2. Import the registry key. Here are two examples:
- Local path: `regedit.exe /s c:\temp\ MDAV_Exclusion.reg`
- Network share: `regedit.exe /s \\FileServer\ShareName\MDAV_Exclusion.reg` | ## Add McAfee to the exclusion list for Microsoft Defender for Endpoint To add exclusions to Microsoft Defender for Endpoint, you create [indicators](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/manage-indicators#create-indicators-for-files). 1. Go to the Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka.ms/MDATPportal)) and sign in. - 2. In the navigation pane, choose **Settings** > **Rules** > **Indicators**. - 3. On the **File hashes** tab, choose **Add indicator**. - -3. On the **Indicator** tab, specify the following settings: +4. On the **Indicator** tab, specify the following settings: - File hash (Need help? See [Find a file hash using CMPivot](#find-a-file-hash-using-cmpivot) in this article.) - Under **Expires on (UTC)**, choose **Never**. - -4. On the **Action** tab, specify the following settings: +5. On the **Action** tab, specify the following settings: - **Response Action**: **Allow** - Title and description - -5. On the **Scope** tab, under **Device groups**, select either **All devices in my scope** or **Select from list**. - -6. On the **Summary** tab, review the settings, and then click **Save**. +6. On the **Scope** tab, under **Device groups**, select either **All devices in my scope** or **Select from list**. +7. On the **Summary** tab, review the settings, and then click **Save**. ### Find a file hash using CMPivot @@ -226,15 +203,10 @@ CMPivot is an in-console utility for Configuration Manager. CMPivot provides acc To use CMPivot to get your file hash, follow these steps: 1. Review the [prerequisites](https://docs.microsoft.com/mem/configmgr/core/servers/manage/cmpivot#prerequisites). - 2. [Start CMPivot](https://docs.microsoft.com/mem/configmgr/core/servers/manage/cmpivot#start-cmpivot). - 3. Connect to Configuration Manager (`SCCM_ServerName.DomainName.com`). - 4. Select the **Query** tab. - 5. In the **Device Collection** list, and choose **All Systems (default)**. - 6. In the query box, type the following query:
```kusto @@ -248,16 +220,14 @@ File(c:\\windows\\notepad.exe) | Collection type | What to do | |--|--| -|[Device groups](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/machine-groups) (formerly called machine groups) enable your security operations team to configure security capabilities, such as automated investigation and remediation.

Device groups are also useful for assigning access to those devices so that your security operations team can take remediation actions if needed.

Device groups are created in the Microsoft Defender Security Center. |1. Go to the Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka.ms/MDATPportal)).

2. In the navigation pane on the left, choose **Settings** > **Permissions** > **Device groups**.

3. Choose **+ Add device group**.

4. Specify a name and description for the device group.

5. In the **Automation level** list, select an option. (We recommend **Full - remediate threats automatically**.) To learn more about the various automation levels, see [How threats are remediated](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/automated-investigations#how-threats-are-remediated).

6. Specify conditions for a matching rule to determine which devices belong to the device group. For example, you can choose a domain, OS versions, or even use [device tags](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/machine-tags).

7. On the **User access** tab, specify roles that should have access to the devices that are included in the device group.

8. Choose **Done**. | -|[Device collections](https://docs.microsoft.com/mem/configmgr/core/clients/manage/collections/introduction-to-collections) enable your security operations team to manage applications, deploy compliance settings, or install software updates on the devices in your organization.

Device collections are created by using [Configuration Manager](https://docs.microsoft.com/mem/configmgr/). |Follow the steps in [Create a collection](https://docs.microsoft.com/mem/configmgr/core/clients/manage/collections/create-collections#bkmk_create). | -|[Organizational units](https://docs.microsoft.com/azure/active-directory-domain-services/create-ou) enable you to logically group objects such as user accounts, service accounts, or computer accounts. You can then assign administrators to specific organizational units, and apply group policy to enforce targeted configuration settings.

Organizational units are defined in [Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services). | Follow the steps in [Create an Organizational Unit in an Azure Active Directory Domain Services managed domain](https://docs.microsoft.com/azure/active-directory-domain-services/create-ou). | +|[Device groups](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/machine-groups) (formerly called machine groups) enable your security operations team to configure security capabilities, such as automated investigation and remediation.

Device groups are also useful for assigning access to those devices so that your security operations team can take remediation actions if needed.

Device groups are created in the Microsoft Defender Security Center. |1. Go to the Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka.ms/MDATPportal)).
2. In the navigation pane on the left, choose **Settings** > **Permissions** > **Device groups**.
3. Choose **+ Add device group**.
4. Specify a name and description for the device group.
5. In the **Automation level** list, select an option. (We recommend **Full - remediate threats automatically**.) To learn more about the various automation levels, see [How threats are remediated](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/automated-investigations#how-threats-are-remediated).
6. Specify conditions for a matching rule to determine which devices belong to the device group. For example, you can choose a domain, OS versions, or even use [device tags](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/machine-tags).
7. On the **User access** tab, specify roles that should have access to the devices that are included in the device group.
8. Choose **Done**. | +|[Device collections](https://docs.microsoft.com/mem/configmgr/core/clients/manage/collections/introduction-to-collections) enable your security operations team to manage applications, deploy compliance settings, or install software updates on the devices in your organization.

Device collections are created by using [Configuration Manager](https://docs.microsoft.com/mem/configmgr/). |Follow the steps in [Create a collection](https://docs.microsoft.com/mem/configmgr/core/clients/manage/collections/create-collections#bkmk_create). | +|[Organizational units](https://docs.microsoft.com/azure/active-directory-domain-services/create-ou) enable you to logically group objects such as user accounts, service accounts, or computer accounts. You can then assign administrators to specific organizational units, and apply group policy to enforce targeted configuration settings.

Organizational units are defined in [Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services). | Follow the steps in [Create an Organizational Unit in an Azure Active Directory Domain Services managed domain](https://docs.microsoft.com/azure/active-directory-domain-services/create-ou). | ## Configure antimalware policies and real-time protection Using Configuration Manager and your device collection(s), configure your antimalware policies. - - See [Create and deploy antimalware policies for Endpoint Protection in Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-antimalware-policies). - - While you create and configure your antimalware policies, make sure to review the [real-time protection settings](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-antimalware-policies#real-time-protection-settings) and [enable block at first sight](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-block-at-first-sight-microsoft-defender-antivirus). > [!TIP] From ec751d29efa11beac6ad2e0ed92ad0825a8b5e66 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 4 Mar 2021 16:00:29 +0500 Subject: [PATCH 22/63] Addition of Note As there is a clearance required on the page regarding office, I have researched and found that Office volume license version has few limitation and added this information as note. Please refer to the page https://docs.microsoft.com/en-us/deployoffice/delivery-optimization#:~:text=Volume%20licensed%20versions%20of%20Office,installing%20or%20for%20foreground%20updates. for the same. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8966 --- windows/deployment/update/waas-delivery-optimization.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index d497aeae62..061eccaaf8 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -32,8 +32,8 @@ Delivery Optimization is a cloud-managed solution. Access to the Delivery Optimi For information about setting up Delivery Optimization, including tips for the best settings in different scenarios, see [Set up Delivery Optimization for Windows 10 updates](waas-delivery-optimization-setup.md). For a comprehensive list of all Delivery Optimization settings, see [Delivery Optimization reference](waas-delivery-optimization-reference.md). ->[!NOTE] ->WSUS can also use [BranchCache](waas-branchcache.md) for content sharing and caching. If Delivery Optimization is enabled on devices that use BranchCache, Delivery Optimization will be used instead. +> [!NOTE] +> WSUS can also use [BranchCache](waas-branchcache.md) for content sharing and caching. If Delivery Optimization is enabled on devices that use BranchCache, Delivery Optimization will be used instead. ## New in Windows 10, version 2004 @@ -68,6 +68,9 @@ For information about setting up Delivery Optimization, including tips for the b - Edge browser installs and updates - [Dynamic updates](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/the-benefits-of-windows-10-dynamic-update/ba-p/467847) +> [!NOTE] +> Volume licensed versions of Office 2019, such as Office Professional Plus 2019, can take advantage of Delivery Optimization, but only for background updates. Delivery Optimization isn't available for installing or for foreground updates. The same applies to volume licensed versions of Project 2019 and Visio 2019. + ## Requirements The following table lists the minimum Windows 10 version that supports Delivery Optimization: From 948b6e5c3cc2dbcc4ca24108649bb0b9a3c1e218 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Thu, 4 Mar 2021 17:07:40 +0200 Subject: [PATCH 23/63] open Cmd as Administrator https://github.com/MicrosoftDocs/windows-itpro-docs/issues/9075 --- windows/deployment/update/windows-update-resources.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-update-resources.md b/windows/deployment/update/windows-update-resources.md index ae68206cec..439b4f04e7 100644 --- a/windows/deployment/update/windows-update-resources.md +++ b/windows/deployment/update/windows-update-resources.md @@ -38,7 +38,7 @@ The following resources provide additional information about using Windows Updat ## Reset Windows Update components manually -1. Open a Windows command prompt. To open a command prompt, click **Start > Run**. Copy and paste (or type) the following command and then press ENTER: +1. Open a Windows command prompt as Administrator. To open a command prompt as Administrator, click **Start > Run**. Copy and paste (or type) the following command and then press Ctrl+Shift+Enter to run the command as an Administrator: ``` console cmd ``` From 28d8782a9c281f8871dbc30183606ee84bc3043b Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Thu, 4 Mar 2021 17:19:57 +0200 Subject: [PATCH 24/63] update link https://github.com/MicrosoftDocs/windows-itpro-docs/issues/9109 --- .../threat-protection/microsoft-defender-atp/machine-groups.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/machine-groups.md b/windows/security/threat-protection/microsoft-defender-atp/machine-groups.md index c6140eeab7..08467f6ec7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machine-groups.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machine-groups.md @@ -90,4 +90,4 @@ Devices that are not matched to any groups are added to Ungrouped devices (defau - [Manage portal access using role-based based access control](rbac.md) - [Create and manage device tags](machine-tags.md) -- [Get list of tenant device groups using Graph API](get-machinegroups-collection.md) +- [Get list of tenant device groups using Graph API](https://docs.microsoft.com/en-us/graph/api/device-list-memberof?view=graph-rest-1.0&tabs=http) From cee5adcb9dce6c4f3e045eccc8592a03e484e416 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 4 Mar 2021 21:04:54 +0500 Subject: [PATCH 25/63] Update windows/deployment/update/waas-delivery-optimization.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/deployment/update/waas-delivery-optimization.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index 061eccaaf8..aaf074509d 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -69,7 +69,7 @@ For information about setting up Delivery Optimization, including tips for the b - [Dynamic updates](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/the-benefits-of-windows-10-dynamic-update/ba-p/467847) > [!NOTE] -> Volume licensed versions of Office 2019, such as Office Professional Plus 2019, can take advantage of Delivery Optimization, but only for background updates. Delivery Optimization isn't available for installing or for foreground updates. The same applies to volume licensed versions of Project 2019 and Visio 2019. +> Volume licensed versions of Office 2019, such as Office Professional Plus 2019, can take advantage of Delivery Optimization, but only for background updates. Delivery Optimization isn't available for installation or for foreground updates. The same applies to volume licensed versions of Project 2019 and Visio 2019. ## Requirements From cfad49d508f1f9d10b78fd42614dfc283c8fc6c3 Mon Sep 17 00:00:00 2001 From: Sunayana Singh <57405155+sunasing@users.noreply.github.com> Date: Fri, 5 Mar 2021 07:45:12 +0530 Subject: [PATCH 26/63] Added note on battery consumption --- .../microsoft-defender-atp/ios-configure-features.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md b/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md index 6fb9cb19ea..0e3c8f0b07 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md +++ b/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md @@ -99,3 +99,10 @@ Defender for Endpoint for iOS enables admins to configure custom indicators on i ## Report unsafe site Phishing websites impersonate trustworthy websites for the purpose of obtaining your personal or financial information. Visit the [Provide feedback about network protection](https://www.microsoft.com/wdsi/filesubmission/exploitguard/networkprotection) page if you want to report a website that could be a phishing site. + +## Battery Consumption issues on iOS when MDE is installed + +The battery usage by an app is computed by Apple based on a multitude of factors including CPU and Network usage. Microsoft Defender for Endpoint uses a local/loop-back VPN in the background to check web traffic for any malicious websites or connections. Network packets from any app goes through this check and iOS wrongly accounts this in computing the battery usage of Microsoft Defender for Endpoint. This gives a false impression to the user. The actual battery consumption of Microsoft Defender for Endpoint is lesser than what is shown on the Battery Settings page on the device. This is based on tests that we have done to understand battery consumption by our app. + +Also the VPN used is a local VPN and unlike traditional VPNs, network traffic is not sent outside the device. + From 8567b6700b4ae50bc3ad5aef70cd28575700a754 Mon Sep 17 00:00:00 2001 From: Sunayana Singh <57405155+sunasing@users.noreply.github.com> Date: Fri, 5 Mar 2021 07:50:04 +0530 Subject: [PATCH 27/63] Minor grammer --- .../microsoft-defender-atp/ios-configure-features.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md b/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md index 0e3c8f0b07..01adf69122 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md +++ b/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md @@ -102,7 +102,7 @@ Phishing websites impersonate trustworthy websites for the purpose of obtaining ## Battery Consumption issues on iOS when MDE is installed -The battery usage by an app is computed by Apple based on a multitude of factors including CPU and Network usage. Microsoft Defender for Endpoint uses a local/loop-back VPN in the background to check web traffic for any malicious websites or connections. Network packets from any app goes through this check and iOS wrongly accounts this in computing the battery usage of Microsoft Defender for Endpoint. This gives a false impression to the user. The actual battery consumption of Microsoft Defender for Endpoint is lesser than what is shown on the Battery Settings page on the device. This is based on tests that we have done to understand battery consumption by our app. +The battery usage by an app is computed by Apple based on a multitude of factors including CPU and Network usage. Microsoft Defender for Endpoint uses a local/loop-back VPN in the background to check web traffic for any malicious websites or connections. Network packets from any app go through this check and Apple wrongly accounts this in computing the battery usage of Microsoft Defender for Endpoint. This gives a false impression to the user. The actual battery consumption of Microsoft Defender for Endpoint is lesser than what is shown on the Battery Settings page on the device. This is based on tests that we have done to understand battery consumption by our app. Also the VPN used is a local VPN and unlike traditional VPNs, network traffic is not sent outside the device. From e848456ccf0978da70e561ea683ee2449da877e2 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 4 Mar 2021 21:14:54 -0800 Subject: [PATCH 28/63] Corrections & improvements to layout & presentation --- .../set-up-shared-or-guest-pc.md | 70 +++--- .../deploy-a-windows-10-image-using-mdt.md | 223 +++++++++++------- ...ctive-directory-based-activation-client.md | 34 ++- .../windows-10-subscription-activation.md | 75 ++++-- .../hello-feature-pin-reset.md | 34 ++- ...Onboard-Windows-10-multi-session-device.md | 22 +- .../ltsc/whats-new-windows-10-2019.md | 69 ++++-- 7 files changed, 333 insertions(+), 194 deletions(-) diff --git a/windows/configuration/set-up-shared-or-guest-pc.md b/windows/configuration/set-up-shared-or-guest-pc.md index 9c1330bdc3..b384589f9d 100644 --- a/windows/configuration/set-up-shared-or-guest-pc.md +++ b/windows/configuration/set-up-shared-or-guest-pc.md @@ -86,24 +86,29 @@ You can configure Windows to be in shared PC mode in a couple different ways: - Mobile device management (MDM): Shared PC mode is enabled by the [SharedPC configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/sharedpc-csp). To setup a shared device policy for Windows 10 in Intune, complete the following steps: 1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431). + 2. Select **Devices** > **Windows** > **Configuration profiles** > **Create profile**. + 3. Enter the following properties: - - **Platform**: Select **Windows 10 and later**. - - **Profile**: Select **Templates** > **Shared multi-user device**. + - **Platform**: Select **Windows 10 and later**. + - **Profile**: Select **Templates** > **Shared multi-user device**. 4. Select **Create**. + 5. In **Basics**, enter the following properties: - - **Name**: Enter a descriptive name for the new profile. - - **Description**: Enter a description for the profile. This setting is optional, but recommended. + - **Name**: Enter a descriptive name for the new profile. + - **Description**: Enter a description for the profile. This setting is optional, but recommended. 6. Select **Next**. + 7. In **Configuration settings**, depending on the platform you chose, the settings you can configure are different. Choose your platform for detailed settings: 8. On the **Configuration settings** page, set the ‘Shared PC Mode’ value to **Enabled**. - ![Shared PC settings in ICD](images/shared_pc_3.png) + > [!div class="mx-imgBorder"] + > ![Shared PC settings in ICD](images/shared_pc_3.png) 9. From this point on, you can configure any additional settings you’d like to be part of this policy, and then follow the rest of the set-up flow to its completion by selecting **Create** after **Step 4**. @@ -112,27 +117,27 @@ You can configure Windows to be in shared PC mode in a couple different ways: ![Shared PC settings in ICD](images/icd-adv-shared-pc.png) - WMI bridge: Environments that use Group Policy can use the [MDM Bridge WMI Provider](https://msdn.microsoft.com/library/windows/desktop/dn905224.aspx) to configure the [MDM_SharedPC class](https://msdn.microsoft.com/library/windows/desktop/mt779129.aspx). For all device settings, the WMI Bridge client must be executed under local system user; for more information, see [Using PowerShell scripting with the WMI Bridge Provider](https://docs.microsoft.com/windows/client-management/mdm/using-powershell-scripting-with-the-wmi-bridge-provider). For example, open PowerShell as an administrator and enter the following: - -``` -$sharedPC = Get-CimInstance -Namespace "root\cimv2\mdm\dmmap" -ClassName "MDM_SharedPC" -$sharedPC.EnableSharedPCMode = $True -$sharedPC.SetEduPolicies = $True -$sharedPC.SetPowerPolicies = $True -$sharedPC.MaintenanceStartTime = 0 -$sharedPC.SignInOnResume = $True -$sharedPC.SleepTimeout = 0 -$sharedPC.EnableAccountManager = $True -$sharedPC.AccountModel = 2 -$sharedPC.DeletionPolicy = 1 -$sharedPC.DiskLevelDeletion = 25 -$sharedPC.DiskLevelCaching = 50 -$sharedPC.RestrictLocalStorage = $False -$sharedPC.KioskModeAUMID = "" -$sharedPC.KioskModeUserTileDisplayText = "" -$sharedPC.InactiveThreshold = 0 -Set-CimInstance -CimInstance $sharedPC -Get-CimInstance -Namespace "root\cimv2\mdm\dmmap" -ClassName MDM_SharedPC -``` + + ```powershell + $sharedPC = Get-CimInstance -Namespace "root\cimv2\mdm\dmmap" -ClassName "MDM_SharedPC" + $sharedPC.EnableSharedPCMode = $True + $sharedPC.SetEduPolicies = $True + $sharedPC.SetPowerPolicies = $True + $sharedPC.MaintenanceStartTime = 0 + $sharedPC.SignInOnResume = $True + $sharedPC.SleepTimeout = 0 + $sharedPC.EnableAccountManager = $True + $sharedPC.AccountModel = 2 + $sharedPC.DeletionPolicy = 1 + $sharedPC.DiskLevelDeletion = 25 + $sharedPC.DiskLevelCaching = 50 + $sharedPC.RestrictLocalStorage = $False + $sharedPC.KioskModeAUMID = "" + $sharedPC.KioskModeUserTileDisplayText = "" + $sharedPC.InactiveThreshold = 0 + Set-CimInstance -CimInstance $sharedPC + Get-CimInstance -Namespace "root\cimv2\mdm\dmmap" -ClassName MDM_SharedPC + ``` ### Create a provisioning package for shared use @@ -209,19 +214,24 @@ On a desktop computer, navigate to **Settings** > **Accounts** > **Work ac ## Guidance for accounts on shared PCs * We recommend no local admin accounts on the PC to improve the reliability and security of the PC. + * When a PC is set up in shared PC mode with the default deletion policy, accounts will be cached automatically until disk space is low. Then, accounts will be deleted to reclaim disk space. This account management happens automatically. Both Azure AD and Active Directory domain accounts are managed in this way. Any accounts created through **Guest** and **Kiosk** will be deleted automatically at sign out. * On a Windows PC joined to Azure Active Directory: * By default, the account that joined the PC to Azure AD will have an admin account on that PC. Global administrators for the Azure AD domain will also have admin accounts on the PC. * With Azure AD Premium, you can specify which accounts have admin accounts on a PC using the **Additional administrators on Azure AD Joined devices** setting on the Azure portal. + * Local accounts that already exist on a PC won’t be deleted when turning on shared PC mode. New local accounts that are created using **Settings > Accounts > Other people > Add someone else to this PC** after shared PC mode is turned on won't be deleted. However, any new local accounts created by the **Guest** and **Kiosk** options on the sign-in screen (if enabled) will automatically be deleted at sign-out. + * If admin accounts are necessary on the PC * Ensure the PC is joined to a domain that enables accounts to be signed on as admin, or * Create admin accounts before setting up shared PC mode, or * Create exempt accounts before signing out when turning shared pc mode on. + * The account management service supports accounts that are exempt from deletion. - * An account can be marked exempt from deletion by adding the account SID to the `HKEY_LOCAL_MACHINE\SOFTARE\Microsoft\Windows\CurrentVersion\SharedPC\Exemptions\` registry key. - * To add the account SID to the registry key using PowerShell:
- ``` + * An account can be marked exempt from deletion by adding the account SID to the registry key:`HKEY_LOCAL_MACHINE\SOFTARE\Microsoft\Windows\CurrentVersion\SharedPC\Exemptions\`. + * To add the account SID to the registry key using PowerShell: + + ```powershell $adminName = "LocalAdmin" $adminPass = 'Pa$$word123' iex "net user /add $adminName $adminPass" @@ -232,8 +242,6 @@ On a desktop computer, navigate to **Settings** > **Accounts** > **Work ac ``` - - ## Policies set by shared PC mode Shared PC mode sets local group policies to configure the device. Some of these are configurable using the shared pc mode options. diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 355ea08482..889f6b7bbd 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -211,16 +211,17 @@ When you import drivers to the **MDT driver repository**, **MDT** creates a sing The preceding folder names should match the actual make and model values that MDT reads from devices during deployment. You can find out the model values for your machines by using the following command in an elevated **Windows PowerShell prompt**: -``` powershell +```powershell Get-WmiObject -Class:Win32_ComputerSystem ``` + Or, you can use this command in a normal command prompt: -``` +```console wmic csproduct get name ``` -If you want a more standardized naming convention, try the **ModelAliasExit.vbs script** from the Deployment Guys blog post entitled [Using and Extending Model Aliases for Hardware Specific Application Installation](https://go.microsoft.com/fwlink/p/?LinkId=619536). +If you want a more standardized naming convention, try the **ModelAliasExit.vbs script** from the Deployment Guys blog post, entitled [Using and Extending Model Aliases for Hardware Specific Application Installation](https://go.microsoft.com/fwlink/p/?LinkId=619536). ![drivers](../images/fig4-oob-drivers.png) @@ -266,7 +267,8 @@ On **MDT01**: For the **ThinkStation P500** model, you use the Lenovo ThinkVantage Update Retriever software to download the drivers. With Update Retriever, you need to specify the correct Lenovo Machine Type for the actual hardware (the first four characters of the model name). As an example, the Lenovo ThinkStation P500 model has the 30A6003TUS model name, meaning the Machine Type is 30A6. -![ThinkStation image](../images/thinkstation.png) +> [!div class="mx-imgBorder"] +> ![ThinkStation image](../images/thinkstation.png) To get the updates, download the drivers from the Lenovo ThinkVantage Update Retriever using its export function. You can also download the drivers by searching PC Support on the [Lenovo website](https://go.microsoft.com/fwlink/p/?LinkId=619543). @@ -368,60 +370,63 @@ On **MDT01**: 1. Right-click the **MDT Production** deployment share and select **Properties**. 2. Select the **Rules** tab and replace the existing rules with the following information (modify the domain name, WSUS server, and administrative credentials to match your environment): - ``` - [Settings] - Priority=Default - - [Default] - _SMSTSORGNAME=Contoso - OSInstall=YES - UserDataLocation=AUTO - TimeZoneName=Pacific Standard Time - AdminPassword=pass@word1 - JoinDomain=contoso.com - DomainAdmin=CONTOSO\MDT_JD - DomainAdminPassword=pass@word1 - MachineObjectOU=OU=Workstations,OU=Computers,OU=Contoso,DC=contoso,DC=com - SLShare=\\MDT01\Logs$ - ScanStateArgs=/ue:*\* /ui:CONTOSO\* - USMTMigFiles001=MigApp.xml - USMTMigFiles002=MigUser.xml - HideShell=YES - ApplyGPOPack=NO - WSUSServer=mdt01.contoso.com:8530 - SkipAppsOnUpgrade=NO - SkipAdminPassword=YES - SkipProductKey=YES - SkipComputerName=NO - SkipDomainMembership=YES - SkipUserData=YES - SkipLocaleSelection=YES - SkipTaskSequence=NO - SkipTimeZone=YES - SkipApplications=NO - SkipBitLocker=YES - SkipSummary=YES - SkipCapture=YES - SkipFinalSummary=NO - ``` + ``` + [Settings] + Priority=Default + + [Default] + _SMSTSORGNAME=Contoso + OSInstall=YES + UserDataLocation=AUTO + TimeZoneName=Pacific Standard Time + AdminPassword=pass@word1 + JoinDomain=contoso.com + DomainAdmin=CONTOSO\MDT_JD + DomainAdminPassword=pass@word1 + MachineObjectOU=OU=Workstations,OU=Computers,OU=Contoso,DC=contoso,DC=com + SLShare=\\MDT01\Logs$ + ScanStateArgs=/ue:*\* /ui:CONTOSO\* + USMTMigFiles001=MigApp.xml + USMTMigFiles002=MigUser.xml + HideShell=YES + ApplyGPOPack=NO + WSUSServer=mdt01.contoso.com:8530 + SkipAppsOnUpgrade=NO + SkipAdminPassword=YES + SkipProductKey=YES + SkipComputerName=NO + SkipDomainMembership=YES + SkipUserData=YES + SkipLocaleSelection=YES + SkipTaskSequence=NO + SkipTimeZone=YES + SkipApplications=NO + SkipBitLocker=YES + SkipSummary=YES + SkipCapture=YES + SkipFinalSummary=NO + ``` 3. Click **Edit Bootstrap.ini** and modify using the following information: -``` -[Settings] -Priority=Default + ``` + [Settings] + Priority=Default -[Default] -DeployRoot=\\MDT01\MDTProduction$ -UserDomain=CONTOSO -UserID=MDT_BA -UserPassword=pass@word1 -SkipBDDWelcome=YES -``` + [Default] + DeployRoot=\\MDT01\MDTProduction$ + UserDomain=CONTOSO + UserID=MDT_BA + UserPassword=pass@word1 + SkipBDDWelcome=YES + ``` 4. On the **Windows PE** tab, in the **Platform** drop-down list, make sure **x86** is selected. + 5. On the **General** sub tab (still under the main Windows PE tab), configure the following settings: - - In the **Lite Touch Boot Image Settings** area: + + In the **Lite Touch Boot Image Settings** area: + 1. Image description: MDT Production x86 2. ISO file name: MDT Production x86.iso @@ -430,13 +435,19 @@ SkipBDDWelcome=YES >Because you are going to use Pre-Boot Execution Environment (PXE) later to deploy the machines, you do not need the ISO file; however, we recommend creating ISO files because they are useful when troubleshooting deployments and for quick tests. 6. On the **Drivers and Patches** sub tab, select the **WinPE x86** selection profile and select the **Include all drivers from the selection profile** option. + 7. On the **Windows PE** tab, in the **Platform** drop-down list, select **x64**. + 8. On the **General** sub tab, configure the following settings: - - In the **Lite Touch Boot Image Settings** area: + + In the **Lite Touch Boot Image Settings** area: 1. Image description: MDT Production x64 2. ISO file name: MDT Production x64.iso + 9. In the **Drivers and Patches** sub tab, select the **WinPE x64** selection profile and select the **Include all drivers from the selection profile** option. + 10. In the **Monitoring** tab, select the **Enable monitoring for this deployment share** check box. + 11. Click **OK**. >[!NOTE] @@ -451,8 +462,7 @@ The Windows PE tab for the x64 boot image. The rules for the MDT Production deployment share are somewhat different from those for the MDT Build Lab deployment share. The biggest differences are that you deploy the machines into a domain instead of a workgroup. -> ->You can optionally remove the **UserID** and **UserPassword** entries from Bootstrap.ini so that users performing PXE boot are prompted to provide credentials with permission to connect to the deployment share. Setting **SkipBDDWelcome=NO** enables the welcome screen that displays options to run the deployment wizard, run DaRT tools (if installed), exit to a Windows PE command prompt, set the keyboard layout, or configure a static IP address. In this example we are skipping the welcome screen and providing credentials. +You can optionally remove the **UserID** and **UserPassword** entries from Bootstrap.ini so that users performing PXE boot are prompted to provide credentials with permission to connect to the deployment share. Setting **SkipBDDWelcome=NO** enables the welcome screen that displays options to run the deployment wizard, run DaRT tools (if installed), exit to a Windows PE command prompt, set the keyboard layout, or configure a static IP address. In this example we are skipping the welcome screen and providing credentials. ### The Bootstrap.ini file @@ -528,32 +538,44 @@ If your organization has a Microsoft Software Assurance agreement, you also can If you have licensing for MDOP and DaRT, you can add DaRT to the boot images using the steps in this section. If you do not have DaRT licensing, or don't want to use it, simply skip to the next section, [Update the Deployment Share](#update-the-deployment-share). To enable the remote connection feature in MDT, you need to do the following: ->DaRT 10 is part of [MDOP 2015](https://docs.microsoft.com/microsoft-desktop-optimization-pack/#how-to-get-mdop). Note: MDOP might be available as a download from your [Visual Studio subscription](https://my.visualstudio.com/Downloads). When searching, be sure to look for **Desktop Optimization Pack**. + +> [!NOTE] +> DaRT 10 is part of [MDOP 2015](https://docs.microsoft.com/microsoft-desktop-optimization-pack/#how-to-get-mdop). +> +> MDOP might be available as a download from your [Visual Studio subscription](https://my.visualstudio.com/Downloads). When searching, be sure to look for **Desktop Optimization Pack**. On **MDT01**: 1. Download MDOP 2015 and copy the DaRT 10 installer file to the D:\\Setup\\DaRT 10 folder on MDT01 (DaRT\\DaRT 10\\Installers\\\\\x64\\MSDaRT100.msi). + 2. Install DaRT 10 (MSDaRT10.msi) using the default settings. - ![DaRT image](../images/dart.png) + ![DaRT image](../images/dart.png) 2. Copy the two tools CAB files from **C:\\Program Files\\Microsoft DaRT\\v10** (**Toolsx86.cab** and **Toolsx64.cab**) to the production deployment share at **D:\\MDTProduction\\Tools\\x86** and **D:\\MDTProduction\\Tools\\x64**, respectively. + 3. In the Deployment Workbench, right-click the **MDT Production** deployment share and select **Properties**. + 4. On the **Windows PE** tab, in the **Platform** drop-down list, make sure **x86** is selected. + 5. On the **Features** sub tab, select the **Microsoft Diagnostics and Recovery Toolkit (DaRT)** checkbox. - ![DaRT selection](../images/mdt-07-fig09.png) + ![DaRT selection](../images/mdt-07-fig09.png) - Selecting the DaRT 10 feature in the deployment share. + Selecting the DaRT 10 feature in the deployment share. 8. In the **Windows PE** tab, in the **Platform** drop-down list, select **x64**. + 9. In the **Features** sub tab, in addition to the default selected feature pack, select the **Microsoft Diagnostics and Recovery Toolkit (DaRT)** check box. + 10. Click **OK**. ### Update the deployment share Like the MDT Build Lab deployment share, the MDT Production deployment share needs to be updated after it has been configured. This is the process during which the Windows PE boot images are created. + 1. Right-click the **MDT Production** deployment share and select **Update Deployment Share**. + 2. Use the default options for the Update Deployment Share Wizard. >[!NOTE] @@ -570,12 +592,14 @@ You need to add the MDT Production Lite Touch x64 Boot image to WDS in preparati On **MDT01**: 1. Open the Windows Deployment Services console, expand the **Servers** node and then expand **MDT01.contoso.com**. + 2. Right-click **Boot Images** and select **Add Boot Image**. + 3. Browse to the **D:\\MDTProduction\\Boot\\LiteTouchPE\_x64.wim** file and add the image with the default settings. -![figure 9](../images/mdt-07-fig10.png) + ![figure 9](../images/mdt-07-fig10.png) -The boot image added to the WDS console. + The boot image added to the WDS console. ### Deploy the Windows 10 client @@ -584,13 +608,15 @@ At this point, you should have a solution ready for deploying the Windows 10 cl On **HV01**: 1. Create a virtual machine with the following settings: - 1. Name: PC0005 - 2. Store the virtual machine in a different location: C:\VM - 3. Generation: 2 - 4. Memory: 2048 MB - 5. Network: Must be able to connect to \\MDT01\MDTProduction$ - 6. Hard disk: 60 GB (dynamic disk) - 7. Installation Options: Install an operating system from a network-based installation server + + - Name: PC0005 + - Store the virtual machine in a different location: C:\VM + - Generation: 2 + - Memory: 2048 MB + - Network: Must be able to connect to \\MDT01\MDTProduction$ + - Hard disk: 60 GB (dynamic disk) + - Installation Options: Install an operating system from a network-based installation server + 2. Start the PC0005 virtual machine, and press **Enter** to start the PXE boot. The VM will now load the Windows PE boot image from the WDS server. ![figure 10](../images/mdt-07-fig11.png) @@ -598,15 +624,18 @@ On **HV01**: The initial PXE boot process of PC0005. 3. After Windows PE has booted, complete the Windows Deployment Wizard using the following setting: - 1. Select a task sequence to execute on this computer: Windows 10 Enterprise x64 RTM Custom Image - 2. Computer Name: **PC0005** - 3. Applications: Select the **Install - Adobe Reader** checkbox. + + - Select a task sequence to execute on this computer: Windows 10 Enterprise x64 RTM Custom Image + - Computer Name: **PC0005** + - Applications: Select the **Install - Adobe Reader** checkbox. + 4. Setup now begins and does the following: + 1. Installs the Windows 10 Enterprise operating system. 2. Installs the added application. 3. Updates the operating system via your local Windows Server Update Services (WSUS) server. -![pc0005 image1](../images/pc0005-vm.png) + ![pc0005 image1](../images/pc0005-vm.png) ### Application installation @@ -621,12 +650,14 @@ Since you have enabled the monitoring on the MDT Production deployment share, yo On **MDT01**: 1. In the Deployment Workbench, expand the **MDT Production** deployment share folder. + 2. Select the **Monitoring** node, and wait until you see PC0005. + 3. Double-click PC0005, and review the information. -![figure 11](../images/mdt-07-fig13.png) + ![figure 11](../images/mdt-07-fig13.png) -The Monitoring node, showing the deployment progress of PC0005. + The Monitoring node, showing the deployment progress of PC0005. ### Use information in the Event Viewer @@ -673,15 +704,18 @@ To filter what is being added to the media, you create a selection profile. When On **MDT01**: 1. In the Deployment Workbench, under the **MDT Production / Advanced Configuration** node, right-click **Selection Profiles**, and select **New Selection Profile**. + 2. Use the following settings for the New Selection Profile Wizard: - 1. General Settings - - Selection profile name: Windows 10 Offline Media - 2. Folders - 1. Applications / Adobe - 2. Operating Systems / Windows 10 - 3. Out-Of-Box Drivers / WinPE x64 - 4. Out-Of-Box Drivers / Windows 10 x64 - 5. Task Sequences / Windows 10 + + - General Settings + - Selection profile name: Windows 10 Offline Media + + - Folders + - Applications / Adobe + - Operating Systems / Windows 10 + - Out-Of-Box Drivers / WinPE x64 + - Out-Of-Box Drivers / Windows 10 x64 + - Task Sequences / Windows 10 ![offline media](../images/mdt-offline-media.png) @@ -695,10 +729,11 @@ In these steps, you generate offline media from the MDT Production deployment sh >When creating offline media, you need to create the target folder first. It is crucial that you do not create a subfolder inside the deployment share folder because it will break the offline media. 2. In the Deployment Workbench, under the **MDT Production / Advanced Configuration** node, right-click the **Media** node, and select **New Media**. + 3. Use the following settings for the New Media Wizard: - General Settings - 1. Media path: **D:\\MDTOfflineMedia** - 2. Selection profile: **Windows 10 Offline Media** + - Media path: **D:\\MDTOfflineMedia** + - Selection profile: **Windows 10 Offline Media** ### Configure the offline media @@ -707,16 +742,22 @@ Offline media has its own rules, its own Bootstrap.ini and CustomSettings.ini fi On **MDT01**: 1. Copy the CustomSettings.ini file from the **D:\MDTProduction\Control** folder to **D:\\MDTOfflineMedia\\Content\\Deploy\\Control**. Overwrite the existing files. + 2. In the Deployment Workbench, under the **MDT Production / Advanced Configuration / Media** node, right-click the **MEDIA001** media, and select **Properties**. + 3. In the **General** tab, configure the following: - 1. Clear the Generate x86 boot image check box. - 2. ISO file name: Windows 10 Offline Media.iso + - Clear the Generate x86 boot image check box. + - ISO file name: Windows 10 Offline Media.iso + 4. On the **Windows PE** tab, in the **Platform** drop-down list, select **x64**. + 5. On the **General** sub tab, configure the following settings: - 1. In the **Lite Touch Boot Image Settings** area: - - Image description: MDT Production x64 - 2. In the **Windows PE Customizations** area, set the Scratch space size to 128. + - In the **Lite Touch Boot Image Settings** area: + - Image description: MDT Production x64 + - In the **Windows PE Customizations** area, set the Scratch space size to 128. + 6. On the **Drivers and Patches** sub tab, select the **WinPE x64** selection profile and select the **Include all drivers from the selection profile** option. + 7. Click **OK**. ### Generate the offline media @@ -726,6 +767,7 @@ You have now configured the offline media deployment share, however the share ha On **MDT01**: 1. In the Deployment Workbench, navigate to the **MDT Production / Advanced Configuration / Media** node. + 2. Right-click the **MEDIA001** media, and select **Update Media Content**. The Update Media Content process now generates the offline media in the **D:\\MDTOfflineMedia\\Content** folder. The process might require several minutes. ### Create a bootable USB stick @@ -738,10 +780,15 @@ The ISO that you got when updating the offline media item can be burned to a DVD Follow these steps to create a bootable USB stick from the offline media content: 1. On a physical machine running Windows 7 or later, insert the USB stick you want to use. + 2. Copy the content of the **MDTOfflineMedia\\Content** folder to the root of the USB stick. + 3. Start an elevated command prompt (run as Administrator), and start the Diskpart utility by typing **Diskpart** and pressing **Enter**. + 4. In the Diskpart utility, you can type **list volume** (or the shorter **list vol**) to list the volumes, but you really only need to remember the drive letter of the USB stick to which you copied the content. In our example, the USB stick had the drive letter F. + 5. In the Diskpart utility, type **select volume F** (replace F with your USB stick drive letter). + 6. In the Diskpart utility, type **active**, and then type **exit**. ## Unified Extensible Firmware Interface (UEFI)-based deployments diff --git a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md index 1d42b159e5..3bf28483bf 100644 --- a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md +++ b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md @@ -49,10 +49,13 @@ The process proceeds as follows: 1. Perform one of the following tasks: - Install the Volume Activation Services server role on a domain controller and add a KMS host key by using the Volume Activation Tools Wizard. - Extend the domain to the Windows Server 2012 R2 or higher schema level, and add a KMS host key by using the VAMT. + 1. Microsoft verifies the KMS host key, and an activation object is created. + 1. Client computers are activated by receiving the activation object from a domain controller during startup. - ![Active Directory-based activation flow](../images/volumeactivationforwindows81-10.jpg) + > [!div class="mx-imgBorder"] + > ![Active Directory-based activation flow](../images/volumeactivationforwindows81-10.jpg) **Figure 10**. The Active Directory-based activation flow @@ -72,7 +75,9 @@ When a reactivation event occurs, the client queries AD DS for the activation o **To configure Active Directory-based activation on Windows Server 2012 R2 or higher, complete the following steps:** 1. Use an account with Domain Administrator and Enterprise Administrator credentials to sign in to a domain controller. + 1. Launch Server Manager. + 1. Add the Volume Activation Services role, as shown in Figure 11. ![Adding the Volume Activation Services role](../images/volumeactivationforwindows81-11.jpg) @@ -101,18 +106,17 @@ When a reactivation event occurs, the client queries AD DS for the activation o ![Entering your KMS host key](../images/volumeactivationforwindows81-14.jpg) + **Figure 15**. Choosing how to activate your product + > [!NOTE] > To activate a KMS Host Key (CSVLK) for Microsoft Office, you need to install the version-specific Office Volume License Pack on the server where the Volume Activation Server Role is installed. - - - - [Office 2013 VL pack](https://www.microsoft.com/download/details.aspx?id=35584) - - - [Office 2016 VL pack](https://www.microsoft.com/download/details.aspx?id=49164) - - - [Office 2019 VL pack](https://www.microsoft.com/download/details.aspx?id=57342) - - - **Figure 15**. Choosing how to activate your product + > + > + > - [Office 2013 VL pack](https://www.microsoft.com/download/details.aspx?id=35584) + > + > - [Office 2016 VL pack](https://www.microsoft.com/download/details.aspx?id=49164) + > + > - [Office 2019 VL pack](https://www.microsoft.com/download/details.aspx?id=57342) 1. After activating the key, click **Commit**, and then click **Close**. @@ -121,15 +125,21 @@ When a reactivation event occurs, the client queries AD DS for the activation o To verify your Active Directory-based activation configuration, complete the following steps: 1. After you configure Active Directory-based activation, start a computer that is running an edition of Windows that is configured by volume licensing. + 1. If the computer has been previously configured with a MAK key, replace the MAK key with the GVLK by running the **slmgr.vbs /ipk** command and specifying the GLVK as the new product key. + 1. If the computer is not joined to your domain, join it to the domain. + 1. Sign in to the computer. + 1. Open Windows Explorer, right-click **Computer**, and then click **Properties**. + 1. Scroll down to the **Windows activation** section, and verify that this client has been activated. > [!NOTE] > If you are using both KMS and Active Directory-based activation, it may be difficult to see whether a client has been activated by KMS or by Active Directory-based activation. Consider disabling KMS during the test, or make sure that you are using a client computer that has not already been activated by KMS. The **slmgr.vbs /dlv** command also indicates whether KMS has been used. -> To manage individual activations or apply multiple (mass) activations, please consider using the [VAMT](https://docs.microsoft.com/windows/deployment/volume-activation/volume-activation-management-tool). + > + > To manage individual activations or apply multiple (mass) activations, please consider using the [VAMT](https://docs.microsoft.com/windows/deployment/volume-activation/volume-activation-management-tool). ## See also diff --git a/windows/deployment/windows-10-subscription-activation.md b/windows/deployment/windows-10-subscription-activation.md index 9fb64c43d7..2c46f21b47 100644 --- a/windows/deployment/windows-10-subscription-activation.md +++ b/windows/deployment/windows-10-subscription-activation.md @@ -106,21 +106,29 @@ To resolve this issue: If the device is running Windows 10, version 1703, 1709, or 1803, the user must either sign in with an Azure AD account, or you must disable MFA for this user during the 30-day polling period and renewal. If the device is running Windows 10, version 1809 or later: -1. Windows 10, version 1809 must be updated with [KB4497934](https://support.microsoft.com/help/4497934/windows-10-update-kb4497934). Later versions of Windows 10 automatically include this patch. -2. When the user signs in on a Hybrid Azure AD joined device with MFA enabled, a notification will indicate that there is a problem. Click the notification and then click **Fix now** to step through the subscription activation process. See the example below: -![Subscription Activation with MFA example 1](images/sa-mfa1.png)
-![Subscription Activation with MFA example 2](images/sa-mfa2.png)
-![Subscription Activation with MFA example 3](images/sa-mfa3.png) +- Windows 10, version 1809 must be updated with [KB4497934](https://support.microsoft.com/help/4497934/windows-10-update-kb4497934). Later versions of Windows 10 automatically include this patch. + +- When the user signs in on a Hybrid Azure AD joined device with MFA enabled, a notification will indicate that there is a problem. Click the notification and then click **Fix now** to step through the subscription activation process. See the example below: + + ![Subscription Activation with MFA example 1](images/sa-mfa1.png)
+ + ![Subscription Activation with MFA example 2](images/sa-mfa2.png)
+ + ![Subscription Activation with MFA example 3](images/sa-mfa3.png) ### Windows 10 Education requirements -1. Windows 10 Pro Education, version 1903 or later installed on the devices to be upgraded. -2. A device with a Windows 10 Pro Education digital license. You can confirm this information in Settings > Update & Security > Activation. -3. The Education tenant must have an active subscription to Microsoft 365 with a Windows 10 Enterprise license or a Windows 10 Enterprise or Education subscription. -4. Devices must be Azure AD-joined or Hybrid Azure AD joined. Workgroup-joined or Azure AD registered devices are not supported. +- Windows 10 Pro Education, version 1903 or later installed on the devices to be upgraded. -> If Windows 10 Pro is converted to Windows 10 Pro Education [using benefits available in Store for Education](https://docs.microsoft.com/education/windows/change-to-pro-education#change-using-microsoft-store-for-education), then the feature will not work. You will need to re-image the device using a Windows 10 Pro Education edition. +- A device with a Windows 10 Pro Education digital license. You can confirm this information in Settings > Update & Security > Activation. + +- The Education tenant must have an active subscription to Microsoft 365 with a Windows 10 Enterprise license or a Windows 10 Enterprise or Education subscription. + +- Devices must be Azure AD-joined or Hybrid Azure AD joined. Workgroup-joined or Azure AD registered devices are not supported. + +> [!IMPORTANT] +> If Windows 10 Pro is converted to Windows 10 Pro Education by [using benefits available in Store for Education](https://docs.microsoft.com/education/windows/change-to-pro-education#change-using-microsoft-store-for-education), then the feature will not work. You will need to re-image the device using a Windows 10 Pro Education edition. ## Benefits @@ -132,11 +140,15 @@ With Windows 10 Enterprise or Windows 10 Education, businesses and institutions You can benefit by moving to Windows as an online service in the following ways: -1. Licenses for Windows 10 Enterprise and Education are checked based on Azure Active Directory (Azure AD) credentials, so now businesses have a systematic way to assign licenses to end users and groups in their organization. -2. User logon triggers a silent edition upgrade, with no reboot required -3. Support for mobile worker/BYOD activation; transition away from on-prem KMS and MAK keys. -4. Compliance support via seat assignment. -5. Licenses can be updated to different users dynamically, enabling you to optimize your licensing investment against changing needs. +- Licenses for Windows 10 Enterprise and Education are checked based on Azure Active Directory (Azure AD) credentials, so now businesses have a systematic way to assign licenses to end users and groups in their organization. + +- User logon triggers a silent edition upgrade, with no reboot required. + +- Support for mobile worker/BYOD activation; transition away from on-prem KMS and MAK keys. + +- Compliance support via seat assignment. + +- Licenses can be updated to different users dynamically, enabling you to optimize your licensing investment against changing needs. ## How it works @@ -158,26 +170,35 @@ Before Windows 10, version 1903:
After Windows 10, version 1903:
![1903](images/after.png) -Note: -1. A Windows 10 Pro Education device will only step up to Windows 10 Education edition when “Windows 10 Enterprise” license is assigned from M365 Admin center (as of May 2019). -2. A Windows 10 Pro device will only step up to Windows 10 Enterprise edition when “Windows 10 Enterprise” license is assigned from M365 Admin center (as of May 2019). +> [!NOTE] +> +> - A Windows 10 Pro Education device will only step up to Windows 10 Education edition when “Windows 10 Enterprise” license is assigned from M365 Admin center (as of May 2019). +> +> - A Windows 10 Pro device will only step up to Windows 10 Enterprise edition when “Windows 10 Enterprise” license is assigned from M365 Admin center (as of May 2019). ### Scenarios -**Scenario #1**:  You are using Windows 10, version 1803 or above, and just purchased Windows 10 Enterprise E3 or E5 subscriptions (or have had an E3 or E5 subscription for a while but haven’t yet deployed Windows 10 Enterprise). +#### Scenario #1 + +You are using Windows 10, version 1803 or above, and just purchased Windows 10 Enterprise E3 or E5 subscriptions (or have had an E3 or E5 subscription for a while but haven’t yet deployed Windows 10 Enterprise). All of your Windows 10 Pro devices will step-up to Windows 10 Enterprise, and devices that are already running Windows 10 Enterprise will migrate from KMS or MAK activated Enterprise edition to Subscription activated Enterprise edition when a Subscription Activation-enabled user signs in to the device. -**Scenario #2**:  You are using Windows 10, version 1607, 1703, or 1709 with KMS for activation, and just purchased Windows 10 Enterprise E3 or E5 subscriptions (or have had an E3 or E5 subscription for a while but haven’t yet deployed Windows 10 Enterprise). +#### Scenario #2 + +You are using Windows 10, version 1607, 1703, or 1709 with KMS for activation, and just purchased Windows 10 Enterprise E3 or E5 subscriptions (or have had an E3 or E5 subscription for a while but haven’t yet deployed Windows 10 Enterprise). To change all of your Windows 10 Pro devices to Windows 10 Enterprise, run the following command on each computer: -

+```console
 cscript.exe c:\windows\system32\slmgr.vbs /ipk NPPR9-FWDCX-D2C8J-H872K-2YT43
+``` The command causes the OS to change to Windows 10 Enterprise and then seek out the KMS server to reactivate.  This key comes from [Appendix A: KMS Client Setup Keys](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj612867(v=ws.11)) in the Volume Activation guide.  It is also possible to inject the Windows 10 Pro key from this article if you wish to step back down from Enterprise to Pro. -**Scenario #3**:  Using Azure AD-joined devices or Active Directory-joined devices running Windows 10 1709 or later, and with Azure AD synchronization configured, just follow the steps in [Deploy Windows 10 Enterprise licenses](deploy-enterprise-licenses.md) to acquire a $0 SKU and get a new Windows 10 Enterprise E3 or E5 license in Azure AD. Then, assign that license to all of your Azure AD users. These can be AD-synced accounts.  The device will automatically change from Windows 10 Pro to Windows 10 Enterprise when that user signs in. +#### Scenario #3 + +Using Azure AD-joined devices or Active Directory-joined devices running Windows 10 1709 or later, and with Azure AD synchronization configured, just follow the steps in [Deploy Windows 10 Enterprise licenses](deploy-enterprise-licenses.md) to acquire a $0 SKU and get a new Windows 10 Enterprise E3 or E5 license in Azure AD. Then, assign that license to all of your Azure AD users. These can be AD-synced accounts.  The device will automatically change from Windows 10 Pro to Windows 10 Enterprise when that user signs in. In summary, if you have a Windows 10 Enterprise E3 or E5 subscription, but are still running Windows 10 Pro, it’s really simple (and quick) to move to Windows 10 Enterprise using one of the scenarios above. @@ -205,7 +226,7 @@ If you are using Windows 10, version 1607, 1703, or 1709 and have already deploy If the computer has never been activated with a Pro key, run the following script. Copy the text below into a .cmd file and run the file from an elevated command prompt: -
+```console
 @echo off
 FOR /F "skip=1" %%A IN ('wmic path SoftwareLicensingService get OA3xOriginalProductKey') DO  (
 SET "ProductKey=%%A"
@@ -219,18 +240,24 @@ echo No key present
 echo Installing %ProductKey%
 changepk.exe /ProductKey %ProductKey%
 )
-
+``` ### Obtaining an Azure AD license Enterprise Agreement/Software Assurance (EA/SA): + - Organizations with a traditional EA must order a $0 SKU, process e-mails sent to the license administrator for the company, and assign licenses using Azure AD (ideally to groups using the new Azure AD Premium feature for group assignment). For more information, see [Enabling Subscription Activation with an existing EA](https://docs.microsoft.com/windows/deployment/deploy-enterprise-licenses#enabling-subscription-activation-with-an-existing-ea). + - The license administrator can assign seats to Azure AD users with the same process that is used for O365. + - New EA/SA Windows Enterprise customers can acquire both an SA subscription and an associated $0 cloud subscription. Microsoft Products & Services Agreements (MPSA): + - Organizations with MPSA are automatically emailed the details of the new service. They must take steps to process the instructions. + - Existing MPSA customers will receive service activation emails that allow their customer administrator to assign users to the service. + - New MPSA customers who purchase the Software Subscription Windows Enterprise E3 and E5 will be enabled for both the traditional key-based and new subscriptions activation method. ### Deploying licenses diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 35853c7fd0..6ebb39c015 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -44,44 +44,60 @@ Before you can remotely reset PINs, you must on-board the Microsoft PIN reset se ### Connect Azure Active Directory with the PIN reset service 1. Go to the [Microsoft PIN Reset Service Production website](https://login.windows.net/common/oauth2/authorize?response_type=code&client_id=b8456c59-1230-44c7-a4a2-99b085333e84&resource=https%3A%2F%2Fgraph.windows.net&redirect_uri=https%3A%2F%2Fcred.microsoft.com&state=e9191523-6c2f-4f1d-a4f9-c36f26f89df0&prompt=admin_consent), and sign in using the Global administrator account you use to manage your Azure Active Directory tenant. + 2. After you have logged in, choose **Accept** to give consent for the PIN reset service to access your account. - ![PIN reset service application in Azure](images/pinreset/pin-reset-service-prompt.png) + + ![PIN reset service application in Azure](images/pinreset/pin-reset-service-prompt.png) + 3. Go to the [Microsoft PIN Reset Client Production website](https://login.windows.net/common/oauth2/authorize?response_type=code&client_id=9115dd05-fad5-4f9c-acc7-305d08b1b04e&resource=https%3A%2F%2Fcred.microsoft.com%2F&redirect_uri=ms-appx-web%3A%2F%2FMicrosoft.AAD.BrokerPlugin%2F9115dd05-fad5-4f9c-acc7-305d08b1b04e&state=6765f8c5-f4a7-4029-b667-46a6776ad611&prompt=admin_consent), and sign in using the Global administrator account you use to manage your Azure Active Directory tenant. + 4. After you have logged in, choose **Accept** to give consent for the PIN reset client to access your account. - ![PIN reset client application in Azure](images/pinreset/pin-reset-client-prompt.png) + + ![PIN reset client application in Azure](images/pinreset/pin-reset-client-prompt.png) -> [!NOTE] -> After you have accepted the PIN reset service and client requests, you will land on a page that states "You do not have permission to view this directory or page." This behavior is expected. Be sure to confirm that the two PIN reset applications are listed for your tenant. + > [!NOTE] + > After you have accepted the PIN reset service and client requests, you will land on a page that states "You do not have permission to view this directory or page." This behavior is expected. Be sure to confirm that the two PIN reset applications are listed for your tenant. 5. In the [Azure portal](https://portal.azure.com), verify that the Microsoft PIN Reset Service and Microsoft PIN Reset Client are integrated from the **Enterprise applications** blade. Filter to application status "Enabled" and both Microsoft Pin Reset Service Production and Microsoft Pin Reset Client Production will show up in your tenant. - ![PIN reset service permissions page](images/pinreset/pin-reset-applications.png) + + ![PIN reset service permissions page](images/pinreset/pin-reset-applications.png) ### Configure Windows devices to use PIN reset using Group Policy You configure Windows 10 to use the Microsoft PIN Reset service using the computer configuration portion of a Group Policy object. 1. Using the Group Policy Management Console (GPMC), scope a domain-based Group Policy to computer accounts in Active Directory. + 2. Edit the Group Policy object from Step 1. + 3. Enable the **Use PIN Recovery** policy setting located under **Computer Configuration > Administrative Templates > Windows Components > Windows Hello for Business**. + 4. Close the Group Policy Management Editor to save the Group Policy object. Close the GPMC. #### Create a PIN Reset Device configuration profile using Microsoft Intune 1. Sign-in to [Endpoint Manager admin center](https://endpoint.microsoft.com/) using a Global administrator account. + 2. Click **Endpoint Security** > **Account Protection** > **Properties**. + 3. Set **Enable PIN recovery** to **Yes**. > [!NOTE] > You can also setup PIN recovery using configuration profiles. > 1. Sign in to Endpoint Manager. +> > 2. Click **Devices** > **Configuration Profiles** > Create a new profile or edit an existing profile using the Identity Protection profile type. +> > 3. Set **Enable PIN recovery** to **Yes**. #### Assign the PIN Reset Device configuration profile using Microsoft Intune 1. Sign in to the [Azure Portal](https://portal.azure.com) using a Global administrator account. + 2. Navigate to the Microsoft Intune blade. Choose **Device configuration** > **Profiles**. From the list of device configuration profiles, choose the profile that contains the PIN reset configuration. + 3. In the device configuration profile, select **Assignments**. + 4. Use the **Include** and/or **Exclude** tabs to target the device configuration profile to select groups. ## On-premises Deployments @@ -106,10 +122,10 @@ On-premises deployments provide users with the ability to reset forgotten PINs e #### Reset PIN above the Lock Screen - 1. On Windows 10, version 1709, click **I forgot my PIN** from the Windows Sign-in - 2. Enter your password and press enter. - 3. Follow the instructions provided by the provisioning process - 4. When finished, unlock your desktop using your newly created PIN. +1. On Windows 10, version 1709, click **I forgot my PIN** from the Windows Sign-in +2. Enter your password and press enter. +3. Follow the instructions provided by the provisioning process +4. When finished, unlock your desktop using your newly created PIN. You may find that PIN reset from settings only works post login, and that the "lock screen" PIN reset function will not work if you have any matching limitation of SSPR password reset from the lock screen. For more information, see [Enable Azure Active Directory self-service password reset at the Windows sign-in screen - **General limitations**](https://docs.microsoft.com/azure/active-directory/authentication/howto-sspr-windows#general-limitations). diff --git a/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md b/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md index 034d227013..2950bc11b8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md +++ b/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md @@ -64,24 +64,36 @@ Follow the instructions for a single entry for each device. This scenario uses a centrally located script and runs it using a domain-based group policy. You can also place the script in the golden image and run it in the same way. #### Download the WindowsDefenderATPOnboardingPackage.zip file from the Windows Defender Security Center -1. Open the VDI configuration package .zip file (WindowsDefenderATPOnboardingPackage.zip) - - In the Microsoft Defender Security Center navigation pane, select **Settings** > **Onboarding**. - - Select Windows 10 as the operating system. - - In the **Deployment method** field, select VDI onboarding scripts for non-persistent endpoints. - - Click **Download package** and save the .zip file. + +1. Open the VDI configuration package .zip file (WindowsDefenderATPOnboardingPackage.zip). + + 1. In the Microsoft Defender Security Center navigation pane, select **Settings** > **Onboarding**. + 1. Select Windows 10 as the operating system. + 1. In the **Deployment method** field, select VDI onboarding scripts for non-persistent endpoints. + 1. Click **Download package** and save the .zip file. + 2. Extract the contents of the .zip file to a shared, read-only location that can be accessed by the device. You should have a folder called **OptionalParamsPolicy** and the files **WindowsDefenderATPOnboardingScript.cmd** and **Onboard-NonPersistentMachine.ps1**. #### Use Group Policy management console to run the script when the virtual machine starts + 1. Open the Group Policy Management Console (GPMC), right-click the Group Policy Object (GPO) you want to configure and click **Edit**. + 2. In the Group Policy Management Editor, go to **Computer configuration** > **Preferences** > **Control panel settings**. + 3. Right-click **Scheduled tasks**, click **New**, and then select **Immediate Task** (At least Windows 7). + 4. In the Task window that opens, go to the **General** tab. Under **Security options** click **Change User or Group** and type SYSTEM. Click **Check Names** and then click OK. `NT AUTHORITY\SYSTEM` appears as the user account under which the task will run. + 5. Select **Run whether user is logged on or not** and select the **Run with highest privileges** option. + 6. Go to the **Actions** tab and select **New**. Confirm that **Start a program** is selected in the **Action** field. + 7. Specify the following:
+ - Action = **Start a program** - Program/Script = `C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe` - Add Arguments (optional) = `-ExecutionPolicy Bypass -command "& \\Path\To\Onboard-NonPersistentMachine.ps1"` + 8. Select **OK** and close any open GPMC windows. ### Scenario 3: Onboarding using management tools diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2019.md b/windows/whats-new/ltsc/whats-new-windows-10-2019.md index 072625e781..d5b506f46e 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2019.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2019.md @@ -36,7 +36,7 @@ The Windows 10 Enterprise LTSC 2019 release is an important release for LTSC use ## Microsoft Intune ->Microsoft Intune supports Windows 10 Enterprise LTSC 2019 and later. This includes support for features such as [Windows Autopilot](#windows-autopilot). However, note that Windows Update for Business (WUfB) does not currently support any LTSC releases, therefore you should use WSUS or Configuration Manager for patching. +Microsoft Intune supports Windows 10 Enterprise LTSC 2019 and later. This includes support for features such as [Windows Autopilot](#windows-autopilot). However, note that Windows Update for Business (WUfB) does not currently support any LTSC releases, therefore you should use WSUS or Configuration Manager for patching. ## Security @@ -172,10 +172,16 @@ For example, you can choose the XTS-AES 256 encryption algorithm, and have it ap To achieve this: 1. Configure the [encryption method settings](https://docs.microsoft.com/intune/endpoint-protection-windows-10#windows-encryption) in the Windows 10 Endpoint Protection profile to the desired encryption algorithm. + 2. [Assign the policy](https://docs.microsoft.com/intune/device-profile-assign) to your Autopilot device group. - - **IMPORTANT**: The encryption policy must be assigned to **devices** in the group, not users. + + > [!IMPORTANT] + > The encryption policy must be assigned to **devices** in the group, not users. + 3. Enable the Autopilot [Enrollment Status Page](https://docs.microsoft.com/windows/deployment/windows-autopilot/enrollment-status) (ESP) for these devices. - - **IMPORTANT**: If the ESP is not enabled, the policy will not apply before encryption starts. + + > [!IMPORTANT] + > If the ESP is not enabled, the policy will not apply before encryption starts. ### Identity protection @@ -190,7 +196,7 @@ New features in [Windows Hello for Business](/windows/security/identity-protecti - For Windows Phone devices, an administrator is able to initiate a remote PIN reset through the Intune portal. - For Windows desktops, users are able to reset a forgotten PIN through **Settings > Accounts > Sign-in options**. For more details, check out [What if I forget my PIN?](/windows/security/identity-protection/hello-for-business/hello-features#pin-reset). -[Windows Hello](https://docs.microsoft.com/windows/security/identity-protection/hello-for-business/hello-features) now supports FIDO 2.0 authentication for Azure AD Joined Windows 10 devices and has enhanced support for shared devices, as described in the [Kiosk configuration](#kiosk-configuration) section. +[Windows Hello](https://docs.microsoft.com/windows/security/identity-protection/hello-for-business/hello-features) now supports FIDO 2.0 authentication for Azure AD Joined Windows 10 devices and has enhanced support for shared devices, as described in [Kiosk configuration](#kiosk-configuration). - Windows Hello is now [password-less on S-mode](https://www.windowslatest.com/2018/02/12/microsoft-make-windows-10-password-less-platform/). - Support for S/MIME with Windows Hello for Business and APIs for non-Microsoft identity lifecycle management solutions. - Windows Hello is part of the account protection pillar in Windows Defender Security Center. Account Protection will encourage password users to set up Windows Hello Face, Fingerprint or PIN for faster sign in, and will notify Dynamic lock users if Dynamic lock has stopped working because their phone or device Bluetooth is off. @@ -204,7 +210,10 @@ For more information, see: [Windows Hello and FIDO2 Security Keys enable secure Windows Defender Credential Guard is a security service in Windows 10 built to protect Active Directory (AD) domain credentials so that they can't be stolen or misused by malware on a user's machine. It is designed to protect against well-known threats such as Pass-the-Hash and credential harvesting. -Windows Defender Credential Guard has always been an optional feature, but Windows 10 in S mode turns this functionality on by default when the machine has been Azure Active Directory joined. This provides an added level of security when connecting to domain resources not normally present on devices running Windows 10 in S mode. Please note that Windows Defender Credential Guard is available only to S mode devices or Enterprise and Education Editions. +Windows Defender Credential Guard has always been an optional feature, but Windows 10 in S mode turns this functionality on by default when the machine has been Azure Active Directory joined. This provides an added level of security when connecting to domain resources not normally present on devices running Windows 10 in S mode. + +> [!NOTE] +> Windows Defender Credential Guard is available only to S mode devices or Enterprise and Education Editions. For more information, see [Credential Guard Security Considerations](/windows/access-protection/credential-guard/credential-guard-requirements#security-considerations). @@ -277,14 +286,12 @@ For details, see [MBR2GPT.EXE](/windows/deployment/mbr-to-gpt). The following new DISM commands have been added to manage feature updates: - DISM /Online /Initiate-OSUninstall - – Initiates a OS uninstall to take the computer back to the previous installation of windows. - DISM /Online /Remove-OSUninstall - – Removes the OS uninstall capability from the computer. - DISM /Online /Get-OSUninstallWindow - – Displays the number of days after upgrade during which uninstall can be performed. - DISM /Online /Set-OSUninstallWindow - – Sets the number of days after upgrade during which uninstall can be performed. +| Command | Description | +|---------|-------------| +| **DISM /Online /Initiate-OSUninstall** | Initiates a OS uninstall to take the computer back to the previous installation of windows. | +| **DISM /Online /Remove-OSUninstall** | Removes the OS uninstall capability from the computer. | +| **DISM /Online /Get-OSUninstallWindow** | Displays the number of days after upgrade during which uninstall can be performed. | +| **DISM /Online /Set-OSUninstallWindow** | Sets the number of days after upgrade during which uninstall can be performed. | For more information, see [DISM operating system uninstall command-line options](https://docs.microsoft.com/windows-hardware/manufacture/desktop/dism-uninstallos-command-line-options). @@ -300,18 +307,17 @@ For more information, see [Run custom actions during feature update](https://doc It is also now possible to run a script if the user rolls back their version of Windows using the PostRollback option. - /PostRollback [\setuprollback.cmd] [/postrollback {system / admin}] + `/PostRollback [\setuprollback.cmd] [/postrollback {system / admin}]` For more information, see [Windows Setup Command-Line Options](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-setup-command-line-options#21) New command-line switches are also available to control BitLocker: - Setup.exe /BitLocker AlwaysSuspend - – Always suspend bitlocker during upgrade. - Setup.exe /BitLocker TryKeepActive - – Enable upgrade without suspending bitlocker but if upgrade, does not work then suspend bitlocker and complete the upgrade. - Setup.exe /BitLocker ForceKeepActive - – Enable upgrade without suspending bitlocker, but if upgrade does not work, fail the upgrade. +| Command | Description | +|---------|-------------| +| **Setup.exe /BitLocker AlwaysSuspend** | Always suspend bitlocker during upgrade. | +| **Setup.exe /BitLocker TryKeepActive** | Enable upgrade without suspending bitlocker but if upgrade, does not work then suspend bitlocker and complete the upgrade. | +| **Setup.exe /BitLocker ForceKeepActive** | Enable upgrade without suspending bitlocker, but if upgrade does not work, fail the upgrade. | For more information, see [Windows Setup Command-Line Options](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-setup-command-line-options#33) @@ -332,20 +338,27 @@ SetupDiag works by searching Windows Setup log files. When searching log files, If you have shared devices deployed in your work place, **Fast sign-in** enables users to sign in to a [shared Windows 10 PC](https://docs.microsoft.com/windows/configuration/set-up-shared-or-guest-pc) in a flash! **To enable fast sign-in:** + 1. Set up a shared or guest device with Windows 10, version 1809 or Windows 10 Enterprise LTSC 2019. + 2. Set the Policy CSP, and the **Authentication** and **EnableFastFirstSignIn** policies to enable fast sign-in. + 3. Sign-in to a shared PC with your account. You'll notice the difference! - ![fast sign-in](../images/fastsignin.png "fast sign-in") + ![fast sign-in](../images/fastsignin.png "fast sign-in") ### Web sign-in to Windows 10 Until now, Windows logon only supported the use of identities federated to ADFS or other providers that support the WS-Fed protocol. We are introducing "web sign-in," a new way of signing into your Windows PC. Web Sign-in enables Windows logon support for non-ADFS federated providers (e.g.SAML). **To try out web sign-in:** + 1. Azure AD Join your Windows 10 PC. (Web sign-in is only supported on Azure AD Joined PCs). + 2. Set the Policy CSP, and the Authentication and EnableWebSignIn polices to enable web sign-in. + 3. On the lock screen, select web sign-in under sign-in options. + 4. Click the "Sign in" button to continue. ![Web sign-in](../images/websignin.png "web sign-in") @@ -386,7 +399,7 @@ Maintaining devices is made easier with Device Health, a new, premium analytic t ### Accessibility -"Out of box" accessibility is enhanced with auto-generated picture descriptions. For more information about accessibility, see [Accessibility information for IT Professionals](https://docs.microsoft.com/windows/configuration/windows-10-accessibility-for-itpros). Also see the accessibility section in the [What’s new in the Windows 10 April 2018 Update](https://blogs.windows.com/windowsexperience/2018/04/30/whats-new-in-the-windows-10-april-2018-update/) blog post. +"Out of box" accessibility is enhanced with auto-generated picture descriptions. For more information about accessibility, see [Accessibility information for IT Professionals](https://docs.microsoft.com/windows/configuration/windows-10-accessibility-for-itpros). Also see the accessibility section in [What’s new in the Windows 10 April 2018 Update](https://blogs.windows.com/windowsexperience/2018/04/30/whats-new-in-the-windows-10-april-2018-update/), a blog post. ### Privacy @@ -433,7 +446,9 @@ Previously, the customized taskbar could only be deployed using Group Policy or [Additional MDM policy settings are available for Start and taskbar layout](/windows/configuration/windows-10-start-layout-options-and-policies). New MDM policy settings include: - Settings for the User tile: [**Start/HideUserTile**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-hideusertile), [**Start/HideSwitchAccount**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-hideswitchaccount), [**Start/HideSignOut**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-hidesignout), [**Start/HideLock**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-hidelock), and [**Start/HideChangeAccountSettings**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-hidechangeaccountsettings) + - Settings for Power: [**Start/HidePowerButton**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-hidepowerbutton), [**Start/HideHibernate**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-hidehibernate), [**Start/HideRestart**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-hiderestart), [**Start/HideShutDown**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-hideshutdown), and [**Start/HideSleep**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-hidesleep) + - Additional new settings: [**Start/HideFrequentlyUsedApps**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-hidefrequentlyusedapps), [**Start/HideRecentlyAddedApps**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-hiderecentlyaddedapps), **AllowPinnedFolder**, **ImportEdgeAssets**, [**Start/HideRecentJumplists**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-hiderecentjumplists), [**Start/NoPinningToTaskbar**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-nopinningtotaskbar), [**Settings/PageVisibilityList**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#settings-pagevisibilitylist), and [**Start/HideAppsList**](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#start-hideapplist). ## Windows Update @@ -564,11 +579,11 @@ Several network stack enhancements are available in this release. Some of these In this version of Windows 10, Microsoft has extended the ability to send a Miracast stream over a local network rather than over a direct wireless link. This functionality is based on the [Miracast over Infrastructure Connection Establishment Protocol (MS-MICE)](https://msdn.microsoft.com/library/mt796768.aspx). -How it works: +#### How it works Users attempt to connect to a Miracast receiver as they did previously. When the list of Miracast receivers is populated, Windows 10 will identify that the receiver is capable of supporting a connection over the infrastructure. When the user selects a Miracast receiver, Windows 10 will attempt to resolve the device's hostname via standard DNS, as well as via multicast DNS (mDNS). If the name is not resolvable via either DNS method, Windows 10 will fall back to establishing the Miracast session using the standard Wi-Fi direct connection. -Miracast over Infrastructure offers a number of benefits: +#### Miracast over Infrastructure offers a number of benefits - Windows automatically detects when sending the video stream over this path is applicable. - Windows will only choose this route if the connection is over Ethernet or a secure Wi-Fi network. @@ -577,15 +592,18 @@ Miracast over Infrastructure offers a number of benefits: - It works well with older wireless hardware that is not optimized for Miracast over Wi-Fi Direct. - It leverages an existing connection which both reduces the time to connect and provides a very stable stream. -Enabling Miracast over Infrastructure: +#### Enabling Miracast over Infrastructure If you have a device that has been updated to Windows 10 Enterprise LTSC 2019, then you automatically have this new feature. To take advantage of it in your environment, you need to ensure the following is true within your deployment: - The device (PC, phone, or Surface Hub) needs to be running Windows 10, version 1703, Windows 10 Enterprise LTSC 2019, or a later OS. + - A Windows PC or Surface Hub can act as a Miracast over Infrastructure *receiver*. A Windows PC or phone can act as a Miracast over Infrastructure *source*. - As a Miracast receiver, the PC or Surface Hub must be connected to your enterprise network via either Ethernet or a secure Wi-Fi connection (e.g. using either WPA2-PSK or WPA2-Enterprise security). If the Hub is connected to an open Wi-Fi connection, Miracast over Infrastructure will disable itself. - As a Miracast source, the PC or phone must be connected to the same enterprise network via Ethernet or a secure Wi-Fi connection. + - The DNS Hostname (device name) of the device needs to be resolvable via your DNS servers. You can achieve this by either allowing your device to register automatically via Dynamic DNS, or by manually creating an A or AAAA record for the device's hostname. + - Windows 10 PCs must be connected to the same enterprise network via Ethernet or a secure Wi-Fi connection. It is important to note that Miracast over Infrastructure is not a replacement for standard Miracast. Instead, the functionality is complementary, and provides an advantage to users who are part of the enterprise network. Users who are guests to a particular location and don’t have access to the enterprise network will continue to connect using the Wi-Fi Direct connection method. @@ -603,6 +621,7 @@ Azure Active Directory and Active Directory users using Windows Hello for Busine To get started, sign into your device using Windows Hello for Business. Bring up **Remote Desktop Connection** (mstsc.exe), type the name of the computer you want to connect to, and click **Connect**. - Windows remembers that you signed using Windows Hello for Business, and automatically selects Windows Hello for Business to authenticate you to your RDP session. You can also click **More choices** to choose alternate credentials. + - Windows uses facial recognition to authenticate the RDP session to the Windows Server 2016 Hyper-V server. You can continue to use Windows Hello for Business in the remote session, but you must use your PIN. See the following example: From 427964fbb7433bf86ba565d971d020b62ba352af Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 4 Mar 2021 21:55:21 -0800 Subject: [PATCH 29/63] Second pass: more fixes and refinements --- .../deploy-a-windows-10-image-using-mdt.md | 133 ++++++++++++------ .../hello-feature-pin-reset.md | 3 +- .../ltsc/whats-new-windows-10-2019.md | 37 +++-- 3 files changed, 116 insertions(+), 57 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 889f6b7bbd..db0ffaf0a2 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -61,18 +61,19 @@ On **DC01**: ``` The following is a list of the permissions being granted: - a. Scope: This object and all descendant objects - b. Create Computer objects - c. Delete Computer objects - d. Scope: Descendant Computer objects - e. Read All Properties - f. Write All Properties - g. Read Permissions - h. Modify Permissions - i. Change Password - j. Reset Password - k. Validated write to DNS host name - l. Validated write to service principal name + +- Scope: This object and all descendant objects +- Create Computer objects +- Delete Computer objects +- Scope: Descendant Computer objects +- Read All Properties +- Write All Properties +- Read Permissions +- Modify Permissions +- Change Password +- Reset Password +- Validated write to DNS host name +- Validated write to service principal name ## Step 2: Set up the MDT production deployment share @@ -85,11 +86,17 @@ On **MDT01**: The steps for creating the deployment share for production are the same as when you created the deployment share for creating the custom reference image: 1. Ensure you are signed on as: contoso\administrator. + 2. In the **Deployment Workbench** console, right-click **Deployment Shares** and select **New Deployment Share**. + 3. On the **Path** page, in the **Deployment share path** text box, type **D:\\MDTProduction** and click **Next**. + 4. On the **Share** page, in the **Share name** text box, type **MDTProduction$** and click **Next**. + 5. On the **Descriptive Name** page, in the **Deployment share description** text box, type **MDT Production** and click **Next**. + 6. On the **Options** page, accept the default settings and click **Next** twice, and then click **Finish**. + 7. Using **File Explorer**, verify that you can access the **\\\\MDT01\\MDTProduction$** share. ### Configure permissions for the production deployment share @@ -99,6 +106,7 @@ To read files in the deployment share, you need to assign **NTFS** and **SMB** p On **MDT01**: 1. Ensure you are signed in as **contoso\\administrator**. + 2. Modify the **NTFS** permissions for the **D:\\MDTProduction** folder by running the following command in an elevated **Windows PowerShell prompt**: ``` powershell @@ -115,11 +123,17 @@ The next step is to add a reference image into the deployment share with the set In these steps, we assume that you have completed the steps in the [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) topic, so you have a Windows 10 reference image at **D:\\MDTBuildLab\\Captures\REFW10X64-001.wim** on **MDT01**. 1. Using the **Deployment Workbench**, expand the **Deployment Shares** node, and then expand **MDT Production**; select the **Operating Systems** node, and create a **folder** named **Windows 10**. + 2. Right-click the **Windows 10** folder and select **Import Operating System**. + 3. On the **OS Type** page, select **Custom image file** and click **Next**. + 4. On the **Image** page, in the **Source file** text box, browse to **D:\\MDTBuildLab\\Captures\\REFW10X64-001.wim** and click **Next**. + 5. On the **Setup** page, select the **Copy Windows 7, Windows Server 2008 R2, or later setup files from the specified path** option; in the **Setup source directory** text box, browse to **D:\\MDTBuildLab\\Operating Systems\\W10EX64RTM** and click **Next**. + 6. On the **Destination** page, in the **Destination directory name** text box, type **W10EX64RTM**, click **Next** twice, and then click **Finish**. + 7. After adding the **Operating System**, double-click the added **Operating System** name in the **Operating Systems / Windows 10** node and change the name to **Windows 10 Enterprise x64 RTM Custom Image**. > [!NOTE] @@ -137,19 +151,28 @@ When you configure your **MDT Build Lab deployment** share, you can also add **a On **MDT01**: 1. Download the Enterprise distribution version of [**Adobe Acrobat Reader DC**](https://get.adobe.com/reader/enterprise/) (AcroRdrDC2100120140_en_US.exe) to **D:\\setup\\adobe** on MDT01. + 2. Extract the **.exe** file that you downloaded to a **.msi** (ex: .\AcroRdrDC2100120140_en_US.exe -sfx_o"d:\setup\adobe\install\" -sfx_ne). + 3. In the **Deployment Workbench**, expand the **MDT Production** node and navigate to the **Applications** node. + 4. Right-click the **Applications** node, and create a new folder named **Adobe**. + 5. In the **Applications** node, right-click the **Adobe** folder and select **New Application**. + 6. On the **Application Type** page, select the **Application with source files** option and click **Next**. + 7. On the **Details** page, in the **Application Name** text box, type **Install - Adobe Reader** and click *Next**. + 8. On the **Source** page, in the **Source Directory** text box, browse to **D:\\setup\\adobe\\install** and click **Next**. + 9. On the **Destination** page, in the **Specify the name of the directory that should be created** text box, type **Install - Adobe Reader** and click **Next**. + 10. On the **Command Details** page, in the **Command Line** text box, type **msiexec /i AcroRead.msi /q**, click **Next** twice, and then click **Finish**. -![acroread image](../images/acroread.png) + ![acroread image](../images/acroread.png) -The Adobe Reader application added to the Deployment Workbench. + The Adobe Reader application added to the Deployment Workbench. ## Step 5: Prepare the drivers repository @@ -174,10 +197,12 @@ On **MDT01**: > In the steps below, it is critical that the folder names used for various computer makes and models exactly match the results of **wmic computersystem get model,manufacturer** on the target system. 1. Using **File Explorer**, create the **D:\\drivers** folder. + 2. In the **D:\\drivers** folder, create the following folder structure: - 1. **WinPE x86** - 2. **WinPE x64** - 3. **Windows 10 x64** + - **WinPE x86** + - **WinPE x64** + - **Windows 10 x64** + 3. In the new **Windows 10 x64** folder, create the following folder structure: - Dell Inc - Latitude E7450 @@ -195,10 +220,12 @@ On **MDT01**: When you import drivers to the **MDT driver repository**, **MDT** creates a single instance folder structure based on driver class names. However, you can, and should, mimic the driver structure of your driver source repository in the Deployment Workbench. This is done by creating logical folders in the Deployment Workbench. 1. On **MDT01**, using Deployment Workbench, select the **Out-of-Box Drivers** node. + 2. In the **Out-Of-Box Drivers** node, create the following folder structure: - 1. **WinPE x86** - 2. **WinPE x64** - 3. **Windows 10 x64** + - **WinPE x86** + - **WinPE x64** + - **Windows 10 x64** + 3. In the **Windows 10 x64** folder, create the following folder structure: - Dell Inc - Latitude E7450 @@ -235,19 +262,22 @@ The drivers that are used for the boot images (Windows PE) are Windows 10 driver On **MDT01**: 1. In the **Deployment Workbench**, under the **MDT Production** node, expand the **Advanced Configuration** node, right-click the **Selection Profiles** node, and select **New Selection Profile**. + 2. In the **New Selection Profile Wizard**, create a **selection profile** with the following settings: - 1. Selection Profile name: **WinPE x86** - 2. Folders: Select the **WinPE x86 folder** in **Out-of-Box Drivers**. - 3. Click **Next**, **Next**, and **Finish**. + - Selection Profile name: **WinPE x86** + - Folders: Select the **WinPE x86 folder** in **Out-of-Box Drivers**. + - Click **Next**, **Next**, and **Finish**. + 3. Right-click the **Selection Profiles** node again, and select **New Selection Profile**. + 4. In the **New Selection Profile Wizard**, create a **selection profile** with the following settings: - 1. Selection Profile name: **WinPE x64** - 2. Folders: Select the **WinPE x64 folder** in **Out-of-Box Drivers**. - 3. Click **Next**, **Next**, and **Finish**. + - Selection Profile name: **WinPE x64** + - Folders: Select the **WinPE x64 folder** in **Out-of-Box Drivers**. + - Click **Next**, **Next**, and **Finish**. -![figure 5](../images/fig5-selectprofile.png) + ![figure 5](../images/fig5-selectprofile.png) -Creating the WinPE x64 selection profile. + Creating the WinPE x64 selection profile. ### Extract and import drivers for the x64 boot image @@ -256,9 +286,13 @@ Creating the WinPE x64 selection profile. On **MDT01**: 1. Download **PROWinx64.exe** from Intel.com (ex: [PROWinx64.exe](https://downloadcenter.intel.com/downloads/eula/25016/Intel-Network-Adapter-Driver-for-Windows-10?httpDown=https%3A%2F%2Fdownloadmirror.intel.com%2F25016%2Feng%2FPROWinx64.exe)). + 2. Extract **PROWinx64.exe** to a temporary folder - in this example to the **C:\\Tmp\\ProWinx64** folder. Note that extracting the **.exe** file manually requires an extraction utility. You can also run the .exe and it will self-extract files to the **%userprofile%\AppData\Local\Temp\RarSFX0** directory. This directory is temporary and will be deleted when the **.exe** terminates. + 3. Using **File Explorer**, create the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. + 4. Copy the content of the **C:\\Tmp\\PROWinx64\\PRO1000\\Winx64\\NDIS64** folder to the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. + 5. In the **Deployment Workbench**, expand the **MDT Production** > **Out-of-Box Drivers** node, right-click the **WinPE x64** node, select **Import Drivers**, and use the following driver source directory to import drivers: **D:\\Drivers\\WinPE x64\\Intel PRO1000**. ### Download, extract, and import drivers @@ -277,9 +311,12 @@ In this example, we assume you have downloaded and extracted the drivers using T On **MDT01**: 1. In the Deployment Workbench, in the **MDT Production** > **Out-Of-Box Drivers** > **Windows 10 x64** node, expand the **Lenovo** node. -2. Right-click the **30A6003TUS** folder and select **Import Drivers** and use the following Driver source directory to import drivers: **D:\\Drivers\\Windows 10 x64\\Lenovo\\ThinkStation P500 (30A6003TUS)** -The folder you select and all sub-folders will be checked for drivers, expanding any .cab files that are present and searching for drivers. +2. Right-click the **30A6003TUS** folder and select **Import Drivers** and use the following Driver source directory to import drivers: + + **D:\\Drivers\\Windows 10 x64\\Lenovo\\ThinkStation P500 (30A6003TUS)** + + The folder you select and all sub-folders will be checked for drivers, expanding any .cab files that are present and searching for drivers. ### For the Latitude E7450 @@ -290,7 +327,10 @@ In these steps, we assume you have downloaded and extracted the CAB file for the On **MDT01**: 1. In the **Deployment Workbench**, in the **MDT Production** > **Out-Of-Box Drivers** > **Windows 10 x64** node, expand the **Dell Inc** node. -2. Right-click the **Latitude E7450** folder and select **Import Drivers** and use the following Driver source directory to import drivers: **D:\\Drivers\\Windows 10 x64\\Dell Inc\\Latitude E7450** + +2. Right-click the **Latitude E7450** folder and select **Import Drivers** and use the following Driver source directory to import drivers: + + **D:\\Drivers\\Windows 10 x64\\Dell Inc\\Latitude E7450** ### For the HP EliteBook 8560w @@ -301,7 +341,10 @@ In these steps, we assume you have downloaded and extracted the drivers for the On **MDT01**: 1. In the **Deployment Workbench**, in the **MDT Production** > **Out-Of-Box Drivers** > **Windows 10 x64** node, expand the **Hewlett-Packard** node. -2. Right-click the **HP EliteBook 8560w** folder and select **Import Drivers** and use the following Driver source directory to import drivers: **D:\\Drivers\\Windows 10 x64\\Hewlett-Packard\\HP EliteBook 8560w** + +2. Right-click the **HP EliteBook 8560w** folder and select **Import Drivers** and use the following Driver source directory to import drivers: + + **D:\\Drivers\\Windows 10 x64\\Hewlett-Packard\\HP EliteBook 8560w** ### For the Microsoft Surface Laptop @@ -310,7 +353,10 @@ For the Microsoft Surface Laptop model, you find the drivers on the Microsoft we On **MDT01**: 1. In the Deployment Workbench, in the **MDT Production** > **Out-Of-Box Drivers** > **Windows 10 x64** node, expand the **Microsoft** node. -2. Right-click the **Surface Laptop** folder and select **Import Drivers**; and use the following Driver source directory to import drivers: **D:\\Drivers\\Windows 10 x64\\Microsoft\\Surface Laptop** + +2. Right-click the **Surface Laptop** folder and select **Import Drivers**; and use the following Driver source directory to import drivers: + + **D:\\Drivers\\Windows 10 x64\\Microsoft\\Surface Laptop** ## Step 6: Create the deployment task sequence @@ -321,17 +367,18 @@ This section will show you how to create the task sequence used to deploy your p On **MDT01**: 1. In the Deployment Workbench, under the **MDT Production** node, right-click **Task Sequences**, and create a folder named **Windows 10**. + 2. Right-click the new **Windows 10** folder and select **New Task Sequence**. Use the following settings for the New Task Sequence Wizard: - 1. Task sequence ID: W10-X64-001 - 2. Task sequence name: Windows 10 Enterprise x64 RTM Custom Image - 3. Task sequence comments: Production Image - 4. Template: Standard Client Task Sequence - 5. Select OS: Windows 10 Enterprise x64 RTM Custom Image - 6. Specify Product Key: Do not specify a product key at this time - 7. Full Name: Contoso - 8. Organization: Contoso - 9. Internet Explorer home page: https://www.contoso.com - 10. Admin Password: Do not specify an Administrator Password at this time + - Task sequence ID: W10-X64-001 + - Task sequence name: Windows 10 Enterprise x64 RTM Custom Image + - Task sequence comments: Production Image + - Template: Standard Client Task Sequence + - Select OS: Windows 10 Enterprise x64 RTM Custom Image + - Specify Product Key: Do not specify a product key at this time + - Full Name: Contoso + - Organization: Contoso + - Internet Explorer home page: https://www.contoso.com + - Admin Password: Do not specify an Administrator Password at this time ### Edit the Windows 10 task sequence diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 6ebb39c015..2e3246f6ed 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -60,7 +60,8 @@ Before you can remotely reset PINs, you must on-board the Microsoft PIN reset se 5. In the [Azure portal](https://portal.azure.com), verify that the Microsoft PIN Reset Service and Microsoft PIN Reset Client are integrated from the **Enterprise applications** blade. Filter to application status "Enabled" and both Microsoft Pin Reset Service Production and Microsoft Pin Reset Client Production will show up in your tenant. - ![PIN reset service permissions page](images/pinreset/pin-reset-applications.png) + > [!div class="mx-imgBorder"] + > ![PIN reset service permissions page](images/pinreset/pin-reset-applications.png) ### Configure Windows devices to use PIN reset using Group Policy diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2019.md b/windows/whats-new/ltsc/whats-new-windows-10-2019.md index d5b506f46e..bbe58c62c1 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2019.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2019.md @@ -254,7 +254,8 @@ A new security policy setting We’ve continued to work on the **Current threats** area in [Virus & threat protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-security-center/wdsc-virus-threat-protection), which now displays all threats that need action. You can quickly take action on threats from this screen: -![Virus & threat protection settings](../images/virus-and-threat-protection.png "Virus & threat protection settings") +> [!div class="mx-imgBorder"] +> ![Virus & threat protection settings](../images/virus-and-threat-protection.png "Virus & threat protection settings") ## Deployment @@ -286,12 +287,17 @@ For details, see [MBR2GPT.EXE](/windows/deployment/mbr-to-gpt). The following new DISM commands have been added to manage feature updates: -| Command | Description | -|---------|-------------| -| **DISM /Online /Initiate-OSUninstall** | Initiates a OS uninstall to take the computer back to the previous installation of windows. | -| **DISM /Online /Remove-OSUninstall** | Removes the OS uninstall capability from the computer. | -| **DISM /Online /Get-OSUninstallWindow** | Displays the number of days after upgrade during which uninstall can be performed. | -| **DISM /Online /Set-OSUninstallWindow** | Sets the number of days after upgrade during which uninstall can be performed. | +- **DISM /Online /Initiate-OSUninstall** + - Initiates a OS uninstall to take the computer back to the previous installation of windows. + +- **DISM /Online /Remove-OSUninstall** + - Removes the OS uninstall capability from the computer. + +- **DISM /Online /Get-OSUninstallWindow** + - Displays the number of days after upgrade during which uninstall can be performed. + +- **DISM /Online /Set-OSUninstallWindow** + - Sets the number of days after upgrade during which uninstall can be performed. For more information, see [DISM operating system uninstall command-line options](https://docs.microsoft.com/windows-hardware/manufacture/desktop/dism-uninstallos-command-line-options). @@ -307,17 +313,20 @@ For more information, see [Run custom actions during feature update](https://doc It is also now possible to run a script if the user rolls back their version of Windows using the PostRollback option. - `/PostRollback [\setuprollback.cmd] [/postrollback {system / admin}]` +`/PostRollback [\setuprollback.cmd] [/postrollback {system / admin}]` For more information, see [Windows Setup Command-Line Options](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-setup-command-line-options#21) New command-line switches are also available to control BitLocker: -| Command | Description | -|---------|-------------| -| **Setup.exe /BitLocker AlwaysSuspend** | Always suspend bitlocker during upgrade. | -| **Setup.exe /BitLocker TryKeepActive** | Enable upgrade without suspending bitlocker but if upgrade, does not work then suspend bitlocker and complete the upgrade. | -| **Setup.exe /BitLocker ForceKeepActive** | Enable upgrade without suspending bitlocker, but if upgrade does not work, fail the upgrade. | +- **Setup.exe /BitLocker AlwaysSuspend** + - Always suspend bitlocker during upgrade. + +- **Setup.exe /BitLocker TryKeepActive** + - Enable upgrade without suspending bitlocker but if upgrade, does not work then suspend bitlocker and complete the upgrade. + +- **Setup.exe /BitLocker ForceKeepActive** + - Enable upgrade without suspending bitlocker, but if upgrade does not work, fail the upgrade. For more information, see [Windows Setup Command-Line Options](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-setup-command-line-options#33) @@ -627,7 +636,9 @@ To get started, sign into your device using Windows Hello for Business. Bring up See the following example: ![Enter your credentials](../images/RDPwBioTime.png "Windows Hello") + ![Enter your credentials](../images/RDPwBio2.png "Windows Hello personal") + ![Microsoft Hyper-V Server 2016](../images/hyper-v.png "Microsoft Hyper-V Server 2016") ## See Also From 3d02739f0d383733a6e49b7a40ec7dfe81a36589 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 4 Mar 2021 22:03:27 -0800 Subject: [PATCH 30/63] Acrolinx: "bitlocker" and "Azure Portal" --- .../hello-for-business/hello-feature-pin-reset.md | 2 +- windows/whats-new/ltsc/whats-new-windows-10-2019.md | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 2e3246f6ed..e0b41cbef2 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -93,7 +93,7 @@ You configure Windows 10 to use the Microsoft PIN Reset service using the comput #### Assign the PIN Reset Device configuration profile using Microsoft Intune -1. Sign in to the [Azure Portal](https://portal.azure.com) using a Global administrator account. +1. Sign in to the [Azure portal](https://portal.azure.com) using a Global administrator account. 2. Navigate to the Microsoft Intune blade. Choose **Device configuration** > **Profiles**. From the list of device configuration profiles, choose the profile that contains the PIN reset configuration. diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2019.md b/windows/whats-new/ltsc/whats-new-windows-10-2019.md index bbe58c62c1..592e559c29 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2019.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2019.md @@ -320,13 +320,13 @@ For more information, see [Windows Setup Command-Line Options](https://docs.micr New command-line switches are also available to control BitLocker: - **Setup.exe /BitLocker AlwaysSuspend** - - Always suspend bitlocker during upgrade. + - Always suspend BitLocker during upgrade. - **Setup.exe /BitLocker TryKeepActive** - - Enable upgrade without suspending bitlocker but if upgrade, does not work then suspend bitlocker and complete the upgrade. + - Enable upgrade without suspending BitLocker, but if upgrade does not work, then suspend BitLocker and complete the upgrade. - **Setup.exe /BitLocker ForceKeepActive** - - Enable upgrade without suspending bitlocker, but if upgrade does not work, fail the upgrade. + - Enable upgrade without suspending BitLocker, but if upgrade does not work, fail the upgrade. For more information, see [Windows Setup Command-Line Options](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-setup-command-line-options#33) From 9cf77a724d30823cea0ef356eeb3b92a6fc402ad Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Fri, 5 Mar 2021 08:50:43 +0200 Subject: [PATCH 31/63] upate shortened link --- .../threat-protection/microsoft-defender-atp/machine-groups.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/machine-groups.md b/windows/security/threat-protection/microsoft-defender-atp/machine-groups.md index 08467f6ec7..1370c628f9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machine-groups.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machine-groups.md @@ -90,4 +90,4 @@ Devices that are not matched to any groups are added to Ungrouped devices (defau - [Manage portal access using role-based based access control](rbac.md) - [Create and manage device tags](machine-tags.md) -- [Get list of tenant device groups using Graph API](https://docs.microsoft.com/en-us/graph/api/device-list-memberof?view=graph-rest-1.0&tabs=http) +- [Get list of tenant device groups using Graph API](https://docs.microsoft.com/graph/api/device-list-memberof) From 9e0db73058e1205ec96a016128d75bffb4bc915f Mon Sep 17 00:00:00 2001 From: schmurky Date: Fri, 5 Mar 2021 16:22:14 +0800 Subject: [PATCH 32/63] New images --- .../images/techniques-cmd.png | Bin 0 -> 70612 bytes .../images/techniques-hunting.png | Bin 0 -> 40025 bytes .../images/techniques-sha1.png | Bin 0 -> 70616 bytes 3 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/techniques-cmd.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/techniques-hunting.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/techniques-sha1.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/techniques-cmd.png b/windows/security/threat-protection/microsoft-defender-atp/images/techniques-cmd.png new file mode 100644 index 0000000000000000000000000000000000000000..881b6aac22c8e62235b407bad48169abc8bf0b7f GIT binary patch literal 70612 zcmeFYWl&sQ(>4l06WpBv65K;@3m)8pI}<{1cZc9kf?I$f!3Kf`cL^ReI1H{c*Z>2} zA-V7Od#ld*aZc6y)cO8=yJ~7`_TFpno?g9rbzj|Aw1%1j&NIqqNJvOHif?4KkdU5a zAR(ayV4^>s5uA9c^7w`9rllZ_R6S0;|M&ydT1r(438^*_>&^o0@%K~bHwJDeF?=ARFtvq9siZ2$!~*dUbrCA4%l$YQ9n8}YCm;O~0$ zJ*)h;Wa4obMi4LPBK5D_luVq)CtcgYiW&F|lwOER{wGCD1xxCpxWq~JCdD&0Ok3B@Ya>=Z^H8l{|u&$biM)DmO$zd=0la?X71Ecdlod#oA(DYC8S(y zk_n!@OqQ<)2W(FofPb`77*SmAY}21)z~1R?PtK%A^zwM)Ob6R%w9T3I-#@0Q-CS=u zRGC^Xy>p43PWV^H{MZdR>AKjN4V%<2L0-+D|4v95vQTViV2T0U*~SVhGjmADU3aW4 zp_;L8wGYW2FY_FF>w)`UQaOAuiXtaM$&p`0+tTB8PE^(QxsxDziv|2TF{K=0g<$FJdJ-x>C9yMcLcy)IdD`9s{YN3wj=vqS!BtPIzd<|UPRbA8Jy z{ilDPycE|Q(XAt zC?8^=bA0*EnKhRiK}JiZ)2cvVL+>^NzSg@zt0K;oq#P7u8MymzQJLpR#I`rQU_-Cor13VoEg<*VXXiOAp07DapJDiHAAoZXyZ>4e73GMH zt`gScmDe*J5NR=2h?nGX)|RF0UPR1r^P8DK#&P^$!e~#>d8Lf5HhnI$q}EQcy*Hz9t?wj0fnu?IY38Hi7T+= zsO95Fv-8?n*U#j*v`3#PeS$CGE`}~SO?h<|BF%A3m~d(P?4foc_kw!-)Hq>FvXuUC z3vC@){rZwTv@AWcYia-OJHN@wru`OMxFg}`-#-4;FY-r z9^8f2&kHGnn_E{qZ?kPoH_;^3xD`w5$?V=hp z&KU{+B)rh*OCxb(7vhUIa|6Td#)tY1EJ1=sZuHq)I!-*==GiK4^3D>MVw+@?jqeh) z2I>8hBl~)N?cUysvzVN_5KbMx+4*TygnBNEUV=**Tf7(P|n1(`3Bv*o!J&Any2^R2;^Sf zy*bOMnm0_Dhl8o9g-c6viJfv8#ud=1_+@IT5lGs8uzoYaSjp+6qa5k6s%+!(j_Q z>^XdKm0lM>eP^U}PP_Tno}a__s5aVih^H|Rr6<#O{|~e zavM?CZUw*zI|5m^HOh!Ql*0bg7cLKtu-CZ=HWvklqMvIYBad_!Q;(8$me~ophUF(wH4%&A%=f1>QER7*29PfjTTVw}%zD$z zT;>>sTb#X;VI3SMt{h9Twvw_qc=m4JEu=9yLv-9Iwch0QTqxzL;7y*YQ9_U5$AXj# z*6Rr?j6-M6D%YAo9kuO4m<-boadx4VZ~rQA~~tg}@glHr>x z{H=8-fVp-arQr0iN5=iCCch?`P8$Z(@^hUB+8>`o`XIGBSM^+`4FtlC=_D{{{@^-^ zi{otPeE*wlT9X?rXVvPFc2Amrv@`ao9Zm#6M3dK^I6yKW2>s3~QK3Ry!TD|KoIY-) zblZkZ&zK-#kk(Q_W)mJ&3EDyhuH2W{wK7=sMIMXaTiSsvX9q2caDGE|W!?|7(quK~ zD41e0NnG11(kSYi-9%@Vc+qp}tdAEcw}Fyt$sfBNW}nzhFb~y- zulh~4sAH2>uZ5^vq4;}n+U7Bg|)=jmfcC+-rJ zp{;i*YCR$4lJP*rPapbOH^%4eIfrTkZ7#F?U}8wqlBviUFt(WjeSJs z^^?0@^?Ho?)<`Cs!=r?{HEv%wq5)2GD;hvMjppNN{$wk&J4Y#n(qj()AgsTZD+YY9<+jx;rhylB!z zj`9`O&!61-axKb#KoGiru0X#Rf+f^)it?iKQ?P+%FC^bhw_AVRedD_b80%)Jjz5hM zPAh^k?dR8{+8AQH6)`t4+STK7g@-Wwb}B4L2oM6rHw8`RsdQIncr@A_3vYPH-VZ!L z1CL&3iIcC1qE0ja25Hu*SzsPkB`O;XRu=Y9EYo5CeY!#-vgSh)th z-jk~lYQ~A()9(wtFb;7R3_r3#P3wO#ANIhDU#Ogb(fsv-)#pI3&kFT;?~0%5-`3KP z<_U9mn9i7N!@6?(-a$S;h4{S&IEkBM%Tsigt%^QNmI2Hz84CCjhehH}?b-$Qs2?cX z`&cAwctr$?_g0>U+y)5<-q8ja{v4Cdt5`$hnmspd-Ed3=zbMS!Ps7YmJ*_K2F=3ym zwjC{_woags7&r6?o9MM&9-uiEDbw87qLFwQCk8v&zGX9>nSWrO+2XMeFSx+J-tC-? zO3ud<+vc_id(TNDxe}}XO}z*!Tpw^5cV#>-+15y2p;y&Aj-uc)dc*CaFHB>mVGUBE z5vRQ<1KP|s!q6(b>t1 zuj1_qTA z&E4vt8#BH12~mG^oXMY|1s-`60c6rFplPiqRka}xfy1}VVQ^weqSiWjJW zxVWSGGRGuf5}^@nsk2#Gx84@5^FcBiPg2{Yg>F;TWEOm15&!5666V1Y%fKE7i(&Py z=J{W5MK#nvj;ZuyRrx``33ZO~#p`sv=Y`SQ)Esz#R#2OMKE@iV9?Iw{^UG7^MH|!S zaTUKl6H<$Rl`mGS(mXt?id>{v9N$m8o?KM>L0#^BH&O6B^@%ieetA>#ceu?gwqoq{O&h^lL>S{W}pR)R>IE~jy?u+dpMFt18x zTHLu#SK((PXe5rNE=MW#lqQ^iP9UHfeRuGykj=3TwvfS4g(~RFfp8~ZN)Dh} z$ls4A`Uh;N;ls+nb!R1hf9Y&lJQ{O?$V2`^vAv8T)#Zw4+Jm5_eJvm3 zWE@ge>0%1_nS5Ogy8j_qyp=l-8R#I?ub(H}eb}(exU?WqeKG?!d&fV2+DrC)#PD8c z&8_2Y6v_GAZ;_&A9AE82b1SRg!dSyUt}?cNv&zOlO`o$^y?aH?&evC?yv?%Ogj=^- z@uR=e&zitD=C6Yky{`w=MxDD~VnI*Iv@vsft_Si`CTTGzQ>-D_%18O||`jS@^ z0ZUeAGKZSjdE}OR;igfungLKhJ0qS>W+?pO>_=?>>|MY{zAOuQ#2S46FjCFce>n~@ zGEr1ykFlenbxGtI11W7E&<=nq-DWB|u=B^aL6?;WnmMGwUpu@F{Wx7tVqZeFNoIE# z0fQUyxxPzXSV3^4x;enx`EL@t_EH<=LX}PYN3emdWMs$@-|A$hENZ9RNOI|TyTN2^ z)XR$!ZneZg2>xZqF#Q)%bTz_)Zvx>!Jjul2jflf92?njWu4a!3>QB+xc7^dQdY0u$ z3q|Ak`eutgiZ55p5v4MH66sd!fH{1le3&{o0*;NWC2_EeH*o-}ePuRYHVB7i@8a9| zYjqFfL6poq9KyDMK^#}Vwhfbuqa)yZPVD#v2~gN`ve==mTiRCLlGW$)JvR?2^L3q< zUU7Gl_aVozsco>*L@bvwMi)E#9KudK(lXEbDH|5hM7yW7f%OZMH@)G*V??TwoaMT8tQ9)rEY`%TdTaU}jA3JmM z=yw6RN&hL5s>x|X_O`CD8bgbXBPf`4*zBm{%G|B+nhwvO_@ohU?mgs)I4;@c+d})U zs`!P_Ic9e@;!;E&-B%YHtL@($=LcwQ`l(RwE~kL!7xiK8O7r?My07OF)an?-%8xg2 zF$3eZPHGb2y0M-OB}i>Xq1p_^Y1hxD|L`z)J>6{XU5+>N-l5-@U2%UK@+eek( z&zc~-e9Ple8#qa>(kKofV)1d})vClRbR-FtJoz2V?^1+6Gwgi7ov%xLy0o6jo-9$F z=5W~Off=(DvvN8R1N${A&V#-}`?k*Zn@7GN)JC3d=Oac@(dFW^vk78PZ0gYcVNsq{ zPsdAt1S(9z$)fjglak!DS5y3?Ti3$dZ%N4^01S=u4`3HiIf^K`tz0D9ug|toeRx|AH>THgr z)E>cZFQosESUA)vnTQ}cOfu*kk6-?)-_3mITc9jI_@DPOO#cH{{z2NEFm9fD7b;sX z)x0tr>x?Jis>?qmGAT^fEg}7auZ%Ol8NK)Fa|NU9{5=1%pY=-~_AS=h6}~9_&(SID zwh{zWoaNnUDue49BO&yKwtpZt=PFah-Bbo!eJ(n?8@mOAt4{)^*Bc!6?7!0S30BJW zLw&@Je*|x$*u2RjN-zNMP1-!Vbko~sqrQrPN##C|f70E^vg?(R54tJT4;`gwv-TD& zZEUVX_Wy*(WMA;hOnww3n1j+fEQ{W$V()+Dre|o;;cpJ!7l-n6h`pn}vP|eSEPG72 za7X%+h|#?oE=u4{l{*X=*uQ0G?MUK;PXYLy6IT{veMrrMTIbP^v%}H-Pc>qN6uC}J ze6e6U@kq`jFFjPR-ZZmZ&qFoWB*)iMl)KaUCC1@yT)%U}1apg6cwX;-<(z0HOJfvC zB^)nWp}HfQNwB)raBX4QpxIJtIK(4^gdeF>4|L-`#G_)87SU6l<&Z{0Jcyr=hkSe6 z34pNa?wZI@sh8TF^?jFiG2R|h4!|Ke5X;AXI#@Xq#^S{l{`pu1HVg*57tLdS(gO6J zv3s+sjqRgYd8$0oOdUX_in|k8c8QZ)_rJi(uhS1DFU)sqv1~a%&1@{rAFP%q6w9{e z1(8GI79-o7O#6RbNJrYSWfO=wc;}XyjeP7i04R6A?mY|HY)_fj*UtC*Mwxo*;R71> zGdY@&gB$40V{Q-l>ExU%gDe7QPIS`MpW?$12doFw{p|#`EI5ruU@cxxE!t(un{Jkn_mH6?wa+O0=cR2=VEiRsF~ScBVNpz>D+i6T)joDoydKf zVJrUd1$mSFrG~$v!{!kNG)UQ)3hpw(B(`~vKR@V+_gDcsYUJpy_wRTD9ISp_J;#2& zm>PvQ`3P>*UVy`d-Y@N{vq*a4i|Q2@tmkCu7;W}CPur~!P%`#RhgcdV)qJLr)3p_2 zxQzsQB!fW@DdJFa@|U{QVVFz@VOu@JDlZa`!vtTdJTpf~gye$66D6bYDx^K~(!NVW zH(rqf5%$=x7~f?7LP233220wC(i*c3)}m18=bEmQC)hHCo>csc^y+NYciI!=L|o#B ztjXz@CHfls6}2oIrGWwFwx=D7m!qOK0gOIt?<@n1g>DlRyLmmTPui``TMAgCtahK- zi4Qt3rQ~d6^^Sf?}}qEewp+|7(~Ox?LrO@3(a=JoCD;z z%n{!U$jM|!HAH$k__c$ac2I$VVCvGv2z^wwLhA@HFt7A6UvSe^<*p=13SQ$2RObh9r$0*; za}a)3#qBFk-Fs2bHonhnf6Jp9Z&s8@`n)3s%x2m^YH-lodI#>$=mhNqTjl)&H_aZ- zn~7Jqe==M%l6=STAW61VoynedN0QN^ga(tZA`q}bZ);%G;?YpPK{K>tu*yD!F~1BR0$ij-s*4q9hU_7)w^HGMSKV(Lfm zIvDRg#qWw)HX?-wBLF+AfUXZ-_mc2!t$!vA&C^L$`YlF)C~WeD!^254l7k^xurP&f zfYEN{f5TE$aKhf*?7km1BgHC56BT~1Tr?8x%oI6KtAK!**YVr|rx;zN7JcX_}~{2QvOqhC4awIcTfY1J=37BpI9)CJ~? zOmHXV3CZS!r((tgJ$(IXYcUcOg}@TMKrrWboVo{{2!|GVaPboDUN7m}KN?{5T7J*5 z0z+yJ0fKu?>r`&c%&ton>``if(AH)%^hZwx@8@JC~$;{@|jan-A znuauYEkQ0xD$vff^kOFpj}vQIOl(7v3BBFQxw06D@#|>T28P>xp@{sU>P-5-ft&5Y zUd^pz-p`~D?_ZL(ZQ*z=3CPqqd)7#}R7nH-JnV1;e}^^vE+QARtdTHdeNaQZZY#}% z#`p*8DU4hh_p@|vqQe@I$;ElUI=0`6OY;Ogu%L=NBP+lHg15W~>lTs2^JW(LP6oCLIuzu8q+BF1aX^lDWHCwUgk*sv6E7!C5m-ZPX}WhE77@Rge1 zug$z$g6dy?FQ+6M6#`V8^-vR+yHLcTt7k{osEu6=%R7F!AH^QU5%k{}8k5ygW$R^% zc3x7FOnOiASZg_7EYpfhIi3AbB_1>Usb`(li?up`ZHO1wY;zqDJ@ooA&l?p88B(}( z+0IAkJ`aT{D`qSYD*L-|bTJ?5(fLeOkU#uF<+xvX2;3O;p|If}bdBf7$cyr|W|WsK zURCZMTOn#MjeGf7jLJPLZde8&$9Ejyr7&5exmU(LHCt-iGVQHG`);iiF+{de%00D} ztLyYLJZ!;<{W48`HzTBb4mMrIABz6*cMwQ8(wTvQ=y6)7Pk9Fk6YPFLePk(=&$x!s z&!@;2z>0Sg{=B~qW{|g^C?!xy3~>bnONv>2=vv#RP+9qw_LMZUll`ixha- zB!1}{eh_ATk|{7psfoofrHMvWH$GUt^_ll4M)bLRGtsLmahg+fpfjJXZ$7xOO02cK z_SP5QF@CmeYjsg0i_QJRE+l-X!w>Kln3{SNHwdxL@9s)3i+d$u4@CZ+h2~|3V*e$=Y`=b4O`y3ZJC2CK;6^QcwBq*q2z&$N? z_C=xm2?Q&M#_noJAcCDYpsOfiT_h*Y<6T7xA3_QpgWVCSMf1Mpu?9 zVbALi#q(?uhF=C8>0s65!jdHUv{7T*lzLDB_utXSs8?uGVX0B`r@1x`aA#Lc8HJ+xP+T=ulJlatp`&%RR*7as`{C#r z&n}6YfcfB>8uvrNXBe&{dk(8#OmCT3UHHIaaJ+$X8llN!piBnAlc_@^CN0zm zz-al4Hwj)*H~C!*(?@WB3ip1_L~A3rT~mgbPU8z-s5j3oxVJ^wfU@{wb6UHm_tD+F ze!3N85bv$dox>%&_#O4g9cr)5P-y3Yk!mgyxChq4-NEzLa!P#BBejUo)x7lI1}ywI z;>SKkVCP+FAE)2lS_U>6a(O?@VKfSu!vx&Q1R9TG70McOA0S)rrMM|YT#)+rq2#oM z2{O3IE0?>{c2+wd>><0l_2$gPpG%Fh1eMd$QQvJQX$5#w!Ub=QdT81h>R=SXK^AYlnW@J%^lU*dOHvoT0S+GCNjoosi&h_k<2yxX`POJ*N~g zptQLTI%^_{^49HC>jeDJ_dj;I4;mVC`V5{XRx7c17&>WOLsN(03{n{(3P=TBBw9jb zdr#w)!}V!q$vT@Fr%6utPvMbviJG^ihT%~|Dqb30?hliKNr{jsmm^*iBgYPKt#gtE zXspFzh&&xsXm`OP&mBY~rFJY_FX^w_*J`KXI+F4CKAp!kx6-L*)3=}Y5Z9mQ}rLK>cJwnx6 z`Hgzx|7#wBrP(2Pt(^0;evJwkH|FyQM&yWA;FMfXnwQ4+7N*2Ht?|vRMdJ;cG-Ticl{QViP^FLL??M~4^l=6mAXG;Yu8RvAOR>A`bac@VT;>iy-UX`(ebOyWVGxFL{z(LP< z^^;)ZVwHk#H_%ndfuPVpI`U*9>_PYUG^=lP@IDBh`^#oLiy?wtwBEw)0wmupc%3eg zv@~OGmVjEmSOi`|P+`ZFBe$jY;g1^N- z7l?-)0uD>2ds5gEny}9iLTH8NkiIyv}M&XB>2YZ z^8*ZFetC-+z>1B6$4E) zk9GJE4(mc*zc0rw95JNh>+c{z#;zb6X2&(Y;)rp7(bigqh9l7MUc=`WI z;n)%Z;AuY@3{`lDhc!OXNI}iO)tR@D$vYx%i^D`A*bq0gB;63^`8hwBxy7AS=GCvC zGi}+5qIsyq<-=45?>ht@Eqd0l7cWE74wbvJ(c8_R`OfMA*xd34&=Gt3aTH3!vv`Uu z=8j{nnMWJXTsW;!T|zVTT6^|8RRISMsO@c>FhwMEyWqt~pR$`jlH=$QQ62R)AT(Mt$Y9>2BJW-ZANkq%9|acA;#W?E1WbOShe-a)*NGcpPJf5 zkNqD}SvI?Ctib1elN#?nAfD+raf_HLkehNSbeQ z)%zb2s8GOJURt~NJk^nVAmi<@viHLdI+A#$YiH_Y=yCh9)K$SC-r)nlpt-WHF`=<~ z&QlBb>X(wkjq+jNf{3gTCtrDeUR8Mqwat{PD12Stu!K8^v3;^JZ{*jjLzmr=d{=R} zix92fSh34uZHu89`!}3HU*47n#@&E@#(>6S<5zOd%TAn2rnb9Q3*)ze!tLq;YQ@8| zd95BMrSoNDH@ZIYfAD67+S*z@s!AuN>OlX-OKAhQ6+D?Pn@(~C=;iTREe5wWVH zgCFdApghrl+k}U)eZ9L{r-L;t?gS3oKH-f89T5Jx< z&6d26FJ0gsDb%~OC(AU6%1Zf=4sM&Wqq5uIRC zi9dU@V$@35Z2P$s)Z<%w`j{QgQg=Vcu602kTB%#BMdk5VsS-hpr>0>_m@LP)0|yJ& z;hgt9Jns#;%-3z7;wZ#E`)IYlUJQvZ7Qy=5nd1&6YX zlI`naus7Vqg{DHYnU^*ymM^CXy4YG|gjag_wh>_P0~ym-t3%0QVg=f~EHfB&ZW1|a ztMo!S#w{54_y~R(?;_;&SUp%$?ZwTI%*Qg7eeHy$g z^Vt3%8e&O+yBjHlejN3-p^Xh!XTX=l#iPC}mGT5ass6F=xgO`dh~N!Ikx{OQU@ExJ z1!_WH-3kuGF(a(!`G8X^eM6Qx)PN2(%=cRnHL=++5M4t*D`S0>`LNOgV-!)lt`W%u zsdWFW3Ka$A(;xQvd=B)bB;tTsTp!b>UAXVHq^}cd&zS+(XZCp6PBpFL=Y8AZ zwSkwXKH0qlC zM*Zi0#2BA`06I{83zsyo;;7DcX=QGy4BgeRTP9k1aZDmLIeBA?jBli!t#2UBGFRIv zX^ANuVh&_}QG4nrE}Nthey|MGYjOj{#GW^ZrzqjBB+ml5S3QN8{w$Oclke<4#>P2W z_FsM~*V3OqY0SAM%W7&PLuo+}PTY6;X=Hg3KKC^4hD1g3wj8(HTKyrMv>3drwqIb( z&^_Vg^@o6JtmK)$-dP(FaAikjN-8LK;tu&2Q^W}7^u>I-E&sCg`fQYM|#VDD$pSq&zE%iN%!C7!~X$M zN3$wCGP0t!{GW$uR_XUzss2mRh_c6}yiWd)Tf@#{pk8V2gw z+aJv~Hw*Fq{iq;OgvFub^UthFUAm{R1>(&m(fsa zTxCM`NIp1;V{VasUZpao#qrp=;a|%kqFQO?PFw+xxe3sAR#7wk5eyV1;_=Y;662gF z>z$_Wee99JT3lpN?q#>_aKNMt{x;&O;VNeq{XU-sbz(YeT(k!X@%r$y~^@QyTLj)9>dst1G&Z3)S{uKb0QJXlnp*Cw6z1bVl0Ho zmsI13dtHv!8UWyH%&~7wT9>A#-s3YjK}@>I4oFgQ~&$3i(lH*au$u( z8*3yIXU@xyR12tP^SuLaM4~^=A>QXMt?Vy8f7;JTB~KmV=h!}^eN`xOnlUuS%#4;~ z1j*X7B#{bYg916&r?~0tx_L%#Apl7J=NDUaNzfq%2csLh`0qu(=B9 z2;%cy+enS+aUd<`K->a;bFM)MiL0UUP0vj6f)6XwbZK~jM^V;zw+e%CU}oa3Kq~!N zqS?!Lj~gSu1`daL8h8sDw7Ivc5}ClW4N&j?h4t8)F^KHn0Tk}xVqBkfm+}7LOq_ot z9-5y(HecXSMAa5V#Slm=Duc25$pw+?+8TS018>3!{ON}!nu*J&_#<*PxhXMaYcrNc zO>+>^bFl`xB_%4D-%p~K0MRlixopxYFIw%ya@aCsMUv44L0U;#SI`yq$A%SUfY`4yd%XJtc@kHqOpB=om_lR`q%9Bpa{uQE{_wR!_k>=#{W%&AeHoJo|!BbBviY!8k0!!*F#ofk(@zSyAl&JXycljgnt@#-;6{)zN*&XSFB+&X$5Qj_%L6-YPQlZa z0cyRd1l-6IQs1ua71(y7Uh6?D#2BQ}_vjl*m*$ilVAFfFE;zEdofkyQeb?OYhEhjG z64-fw)1;^ zui3mwsv=k$E~uS|$6rc~27oA{)pIXFvJYeDdq|w4{tI9Jb6TV?*dQ&BUJm5?L+fLYeN30oe zB~n-@0C|r_f=GO6t%$R`U%HZ-pVH}Wn|M5xwtu7Zy@kn{Pf_6Ltt}aYOv4zjjdmz2Mc+mU1Uv+5ngBo+MmI5%3O-WLUdAL8Tq6v@ z=|Q3i0NU0#n&)t!znY!c8eFd#mWR*-2P%1v_Vms0d2d{L@oQib0_6Zwc)X_d~y_HXu@uygY;J);Z?hf-zPI*%=`|0c+^!{>!Z+ zu`p9GMqw}a#r=%od4ADF`$ESQxve)v=_7MD-kcCir{==N%>Ik$uFU@6p}-ThblMTd-xnM*e*!~KhRofygh8N zL9pLJnyBAdy`$Ux4nU85AndnUa@j+)n7>90y5x(M99+3c;MAF!Mt*vzt93sDZnAfY zL+sbEG3K1Q(xwxml5Wc|J@{!9OlAd)4SD};04D5wC_5&9Pzvzo=1gV8Yl#o{bR3)k z>%WiaHkthshc0D|#Y{_4ZGd{~9fF(dUK^;-lutwQ^O>s~w9+VpgYHqN9{efuifoCv z;xEi^57q$EKZ7G@#2%x%^7!-Jv726wr%#{a)P72&61#sg3Eg<_%+5Z*8^kScY$_5} zeC8B_!69Egr&z+jctb1al1Y^%e#df0!Q}+-LJ;;2dVK>ne}0!e%7vZ&xNZauP_Q#R zx2@II?>Z7|SUbsmDs+)*&DPJ09pCscWAxtu%$GXOg)9ONg#O?~{Fpc*<}DZ<2`fQ? z1XWnN^fzljp4AB)$3PxceJkbn9wah~yCLj8a4 zhLb(Q(a^87nEO`bx8jNEztxV{y@;#s!3nBj*r6mXl{D;VbKDZ)D-b$EWD%M7*y}ky2o7c?IeYZ z)23+#2Tf3W0Lj}LT0Xc2K@H}?kyOsj%e*-xpMe4=3Q3923UZe$(#V_qQ0q(yH|i+W zJ737`S#g&A$?y;KL-)Tb4h~M5-f@Wg=|03Be|mT6^Q7?|SI>xrrN35-sfTazleH7I zuDF5#>WcZ!bS#`ev4rE;L5t>P-OBl(Jt6zMfoA(x=vSXcZq2XjQ*oEf?wC-brz5^} z>V|WtmxAjJJ-M84b`krv*6M zR-V?xInj>}<{h>TBpa!}VcqnW3x3FLtUO2=Ex#%Nq=OIl&#~cJV^8gusIoBe38sz{ z88gPY^r8|S30_gP?oVf7SKe>wWz<>Wy(E;GA|zpXLmU6p$*Qoj_q9rlS(IX!$c9;@ zfcZ(^3u66VZ3Fc89}{I<9nnNS$^s4VRAeQ#BVtA@4Z<-4HNi<*Gw8jRq?W63nC@)9 zE1kI0^GAB9v%wfbIsLqP{Agdc38U8>MAtNz zV;hMgB(cf5byGr)3pxdw^ok~~x(bN>hVJfG{Np~%j_dY6nB))KK9NH2UF+^RvV8}P z)BggPnC2edhxZ%8z}$;xTvz7y8Y>cpS672(B1Sx$KoUy13~B@~WYxZbn}Ulhrx&Yk zwo$Re`*if_W8hOLimA*KKTcu+{N=~+w*IvfLd~{hhOoB~V{=2^_UuBfa>0evF@&$y zUkcS%e3qo$)Hv$n2eWm!`&U~=Z_=$2E;5T+wA=p9Fdv`{!S!4GTUEn|H-OsMxEJ<_ zRWi*HOQ^KD-ZdI-Uwy6A;#KPzN7pxyCS71X1WQiR!H0#3QBG#AEf3!K2CF;Q7w4Dh z637~rbRwm@i84KaAd|&RnY#D0zN~Mw4>KOPnPZgD@aq0~+5~y^>4YzbP&+}s~xy|T@dYf;+A^JH&x-@pLN@9;W z%mSj+)qjc$sBnr34hDaB8`7fJWG}X#l{E&6`#atrdih>+z;TV<4VUPf%~SWv)!bI& z$4TMR7-JQLEQm(*g|)bo68r@aT2-q8`tNFG^Gu8ztlf2-hMtJeC)f9 zX3SuqW9%%`!-~YtjhX@VS=-cOhP({^?H;aY#Lt$)z5q(SLqo^-5-p)TyR@7#CK9pgS3_q|{Ifo@i>o@-XsS5*^E z#>UH`Km20j)?MoD3~On7+z-sNvIJ%4>VShTc)owh@Ni@?v;e>s6(?3=7 zBv+b`%rEN`d^rF+LnR(u`x%}gJ@D} z4c9SKaGqqCmaf_Hu1ac|%9EJNdxs~w?d$b2O~}Qkac?*g$9eoh29-MRF-~q{1dOf5 zWVEZ^5(bvUQ3-k#A^I2HHhaCuD|vX)Z;2wA&v-La?^!)1Ql$a46xL6gyvV6AzoYkb zjgy`ju$WG;;~=}^nMC_&H-m9zTMS(ONu0mkQ}=^->J z7c1O|YYz*KP98$E1BSr{2xz9$b2=&U@vyvcD~RYxpdLj`KGUDq^}?YO+o~yzJg{B} z9OX_YlD{IzmnT_a4DE4exE<1T-7#jNnx==VD9uIHRs| z-p?oHrf-$TL}PsYQa1Imt-1%-pd0VTlTyM*M%G7jbA`+QRFyM$@mNOOm4b(BUQS{eG!sx9wMkYa-_8m)I#KZgQ2H z)A+MPdaXQk#6Hc*xF%UHoG$^eWmf@!7+rG5DS-i^mFULS+0R|T;-2>=CT(Yb{~oV> zRF`9m8xQ=&bfmvODCi1{jn|!jOkOv;xmfuE5qEEhiwXPA(7vn;cU@KVF%b>K=xIx6Nx9i>>9`W5PgQ%Es)z8)+>`<=u zEOYe+{oe<__G5&hBPKmGHZpI7Q~DMcZ#$Uqt@sqe9w+pX=qF?E|flGtlE{ICtTJ}z|xYI%1cuel_%$O=>G2W`Z=2b7V* zY&syPGxsk$G4G_6XCqR2)-5O-{L(}N3}Xy_goMET1F3)igWVM%|H#m|^8b`s{YR{% z;vWyk|CV1E(2LI{N9y#sXb&mLpGYGr!GY$Vi@n!|Ib{Lsn5)EAZx4CWH0vuq&wOWb?vS|@DQ19u~AC+fQV({n4K(cG%>zj}B&F4U63v_6;p zE>>YKNbj%+vjfkGh_;)g=iXSisDb_7&bbw>v0JCbX5F%tBDk;JI+v5y?On;Cvc#2~ zJ`$G(j#u!bjD9rTE8-`MZZVqfaUe-6Yu)pkkZhL5?Xg_2yqNxtA-`cW+hyG5*%pNS4TChsrG3`j)R zm9@?$(*)bEptSl294k5CCGbwe&Eu{Nwl6TT2Cq&1HOk)i;a(|EZP9h)7E_q^7B#(t z3wJZH4Y)1=8we=Z->QDZ9j}=USBc+dtW}pV4NTROXE7W+YW<|gHToVa^+QKp7rdY$I3c>@7*R7ll5&kxUH}$`1*2wP%ubPYNgwAJuKg} zvMlwbgMz;Yj`NzDDwsn&j!gj#m|=h6HT;bH?l9w_NV16dBY3)9lm*R%bPlDB7v84B zg)Jb*JCyK>Vx5kh(hX;dSb(V(bY?vWVUL*pj9XUW?*^i=q@|;#;)q+<1Bp(mo=K#`3N4}gYAkWyv)E0CvZ$4ns#B)$BVbqT`GRhsph$dH>GC-B^zAUoH!Q4-dC8gAKc1zFZ=WLVZHQI8oV zlPRlE5-Qct*dH_olMiGx?Oz0CxPE3W5r+M=MpuOB!4jczyOH$Q>N;2Q&a9*Fgbrq9?b2+D8G=HG94q;8b*A9u{gs?a47P}Z}g+%*ZSkut? zLh6OWFseuK8j`-giJQNqVx#AH!CaQsQ5t#@5t$xkFou!lLDx)}Tv)&3@Ee^ZTZ7Np0_YV9ZuAdN*IoC>-szF6V|?n>|7tm-@KdJ3ULD!V{LdF!Im*U4^WJbaU31b2?>vG&3+ zlGm}EA;g$7M!Nakuj1I6m|=b&+!lSbQF%IDP}P1?15v264ss?L$}M6;+`Ee`C1f%( zAZA_uV1|TASog`?(eVuwC5WdbB6!I%`Zlgkl2%oPY6NB z=uPq;n-7~l3X)w|3R(0`-eK8B0ed5;cK%s-ULmHsl62Y}_$J-m>c@nF*sNB$UX=B? z`{7I>jGi_T!f9a;Dm@k^;pi&5)^0K6k<;Ig^(~45!<0{-eDzh?U>;&vC&WV}2sWb} z=d!H+;2YXa7A%kE1z*>R!fQ*mT;(@57Lvw3NI6zt@;Ka-w=`vo!w*p6?BnC_ z^bAIL4UwJ#%&MP7-f60$ragvEyv-gO-uy=69X+4RE31T@fX&UbxEgpHcPm4h?kHiucVGt5eZhLrT;pfJR37C9{gtm%&) zxOO}wa%V+3pfm8*#ccDOQ$1R6p>7*mY32Et{d!~f-mke*O>0p-Kal6arOD5t+L#p; z2m9r7i=KD>1VJX5xA=L7c`ZGXl1%Nz6MdHCzSUTQQX;Vkc-l;J5rfJ_c4o_;g`KAV@XXCt8K}WV8ts%|*$u4}ZPK$=Jh&jnP>V0yv z2vT2P7=?OQ6JzeoY=AXN;7;T8nL9I zyMUT0zDY7l))j)u%ul?wKJF9@cI3iF$ms%6x%nTt<}Eh_))M9qJKa(MQ3~C+LyGub zhyC=WA4QjITJUCHPPU_TpL@pspw@2rLY(WKNXvM-$>|>k7cbxg6xl9}I7`BLgQl%2 zrI|;>1w+!c6Vn3sxp!(a)}~9JiCFgUrqarE9UbSQdP)zK>u|fMe{_AZ=jJLiV|BwvFVU!0quf*bV-mO_?qu+j#F>rz z1L}%CMkSmW9GI;QDY?m#t_J0B>PhDZNR6*1F@%l{4T{2y!$4mwHH`gXup7D{w)lor_*4xxy^NK4V9FwOFs_sy=b zmW8_)l1oT$dQa>lr0M63XV-LYyg=TkL`P6bqUYgLW1b8;cD?<187CjQWxeMtEIE1p zxsyrnu77CzH{DFdL(UZcuia0(m39S$#V-{dp0sVt)claN%{*h~_H$@&ISIgwF+wXN zR6;O?+?o(5G&gF61~ZBSCH)gla&9V1ee{!3_jEGoPpO2AGow7Io+$v4SYJA%`xIliC<$?CMT(Z?$MWD(i7=0C^=Eyr^b0R zlS8ECW4GOP_Uu+hO9JiKNP;f93_df zV~e!MT*P(=RTFbiXi*X#j*QrzYXAQSo7`Jb!4mhrcsEe1#vNQB@+Sdrfk2swQDgi< zt9~Hu0RwP$casBLV+AP3cEEuDGtyQ7}|nRqSvwrh-qGL0Vv$+R>JbJu}a;L@7{dlRF64O6zHFmGzZxNZIgi&Jn zPYtaQPluFAgxrp;2y@{@$k&956D=LSi6q7e$j>YJb4ew?$XDpYXs5201{>mmuhm>T z&GW+L^VMZzPWfXl5iZBY&wUPk>`}WwJGN2yK&l)}T$(U~Bje6u@_HRK(*wHviPK#J zzMEI4E&RyQsd-RIe;Ds5^mXp=FBqFyoAis=jKeMg9B&?3M9wdMmZN<~Bb$3hy9keu zFB5~s9}SCp-oo7#?da(zPD>5+Dd4`ebWe#GbwA8vPb{?y-oy-J>-50bB%9x(wl@2lbd5t4M zhG`&}WGwJ;?1a4vkN6JS`VoWL~_fDMpd27O7z4c`JzU zN=J_1)6Y>#-}VZw>f)AiK@02EMK^k>hMdIAWTE7SLz(qP{ zxb?dB(9Be$4Yvg6_>0gzHuakenx4I^5;H#k1HX}?q)w^#_|x|^oxU;SZcbJW#tR-< zonG5e0eee(q)fqv3&ghD$;2P3)tANhuOySyZm-@@l@_XF6rV$W?b_(oIH&QIN|&U8 z$I=(ElaB&HAgJ{j(CEq%Pc&_yr)eSkA+fA%@vGcbj+4=3^OB@%a|PV^?8fWfxf9x$ zh3Y=_JCUy0XC~xNv8lKdlVn*LFGPd%J6W%d)s%uZw0dId%uAICfA5@QLOgvACyw`2 zcQrI}bel$PZ)aaBrLo4HCdU=~<77NwD<9K-RLAxRi6IT07rsju={kQAxJI{sX7T12 zU7FX3pyjjJyQfcASGFa227T@K@y&=l8aA8V5P~A}jc{wesI|*Eu(Yri1to}CvzkGp zBt-LIYs7GXpVa;iW2)#fW~Cc6S&U~bG&&@4s067V|XQt zU&czXh))np727ih{sd{^YGF4Oz@>t0zX!Pq>mVE4x&>wl_$Y>Zp1Zy#`RxS$G<$ox z;6!=-kz#UDK|FJ79)7yi@jGJOV})l$Dwb6wbvAs+L3JfE zZx)lrDXH(kcjtC{HiV$N+f`yt)0NDIKki31(;`Bk1F-uMFQ$PgQ#+S{R!EHOQ5FvK z2(q78|Di$AP+n0fFpA9S0E3sZ8 zwXase5&7ekfx@l((PqPVUxh>u;#Lvbu7OFICZAJ%=3ERv6=(9f)~KX8%N-TBf)#qV z9OP~wdCgY3rUELtjxM(swr_5LP739(aeRZz_l#=$wyw>6@Xp3N0T6s*_Ih_6@o8dp zcgjp!C`JSq)r}@lM#E=gt_4^E&yRAc_x`FElw<;!g+`Go1kET39H??j zTV{8ua09^iHzLdL_*D01JL|PJ%U(2i?LxzH<}^=+$TeQH?1kt@&H@vc!(MeFkgK&5 z;_L2O=c%7RJz$(!W}TT|WS|$S;-52UNQ^jcG-8(;$&lnP`m1OjKs#gRk9sZ5P{iJ& zbJq^Nul%M4K6C{&Xc<_NIVeoYr4*a=HZ&Ir)N(VkwPd_Tp1bWv;|7g)#ByxKp-h(&xo)XG*i1m2NCRl^gRh^(S1_g4<-d|+%AY@*^o))fYN*gT4PFaoa+QYVX+wi83jT)?Y zaKKGcn@~o#`lDo5Cy_MZrZk@+6wGg>3pOJO|3gw+8d_65Q!!Yw*rHyhRJwYhp$FO; z61n^$C+w<k9Jz7ilClx7W*xGMQAb)lxfjzNVQQ2tV}!J~sHZGj|ihq`jUz_mPCd z+Wwyy&(_ESYoOH!xZ$ye$~OWUPRXRbU6{xtj2!R}FpVAge)1ak!FF#Q0*VmIqGR#7 z$BGUZ0^%F%PC|V3NBv7ur{^MNDlhSr9N*41;ngyD5DBNv2u%#RfwCBos*>X8~pv zjF1nvA~ScFQ1gm(qPnENZSVZ4up9VHbOQM$ApC_qjhMSlWz%;#ZoeQ_GlKl^SyK4k$sTaAxyC>VDJ8NS_R_l1Q)Z1j`P4cPplMvJSnu z`H6$d+%m?!h?7m`8(2?Fk2LKqwRajctf}&^-nh>w*?%RBy8(s~UK?h0SCTxnNT5In z#BJ0&yx-9oRo6#gfo#Z*sb<$^t%5L2&ZNi9l8iZJtHD~&ri9e}1oDe#dg_%89W8S~ z-xt{u^O5>YY{XgvAfOdYScki1VbiGtF^ejKhNI-1%Ey*q$9oQ2&~aCY+8IsnJkVy( zH8S$>Tw14HD|<7>)1>eUm}5Fs%Pi23coGDp3dOx8&4JFTIi{ znbad5ly(E-4Q1b|xRkc~QeR<}@zWbL-5z8C#|;Q!riVFm8!-M=Xb1Cpk{X!)9<0Z* zv@^Z`vSLkHn_NhMn)2hvn?oCzlVJN#r{~*65;-X0Zm8b?6P*VJFpKYm1fix73B%Ec zPki1hrSWFIeFL3}4OKSd-ZRHbQXmTbEoh(Y+@_a&)zx{;L6351oeD%ZlzMnlE*$@l zflVIY9d{+NoT`)5^IQ#+8{-)+d<%&;6vn7J;A>f^MPv={V>lP_^m4+Jt0B*?)A{_K zWlVEPM4ja*(A-A$!>rgZ1)`wG${3T@Er>fXUl3>hs$^;0H?vi<@qiE~z1rey>tqG{ z(GL6jC+6?F7d5p}v34{yMGxP1=I~^`$b9Sp-Uy@ibK)M8cxgrY<_0m-4&C%{8$UN# z8kF7x*q+|T`N_sg)Uzz`s5aS?G4+950-kMXGG;%04cG$!-&yaSp^>ZL*qkwoi>+ee z;GQW7mWnp$M}H+(lc`=AXVND4IeS~jmSo)EXss@^c)hFjhKHT7c`jN%r5VwsE(1$m z_dmf?CyGr7t0b#3yAv%5dqP$DgEK~USCiMMm}9@9xI*#nfHMoSOAc1NUmm@$beFNa z`HP{vfsQ$c4RK2X?Yq7*Hp_lebLueh0PaSf;mC*9ZE#E-O5|uP#r%%pS*K%cmM zhVY{f+JQ_d1U1kvcvOE7tm(G3f*WLF2NAg<>&DdU`$&IUDYe`pit~`+49jquK+KIs zFJ;HZByB571(PnvV|FNs8LN2kbHcIDk-$j^uMselCp-6Ag?~$)D$JGM!>D)>0opr= zMQ*!Io;e8zlC^$J?XD|Etpw4zRq&K-|H3%~M`HYyup|+Km9<%My|NfBt!uy(b?`$k zzR{m1mWwn35@|LnKXA535VIqp2lynyug`zYJbvZwt>Tg@`+XGQ_=Yk`#@O&w;o8Q> zdFnrWR%5bfm!?mK912lR!$WiI*VWFQoeKyZG6VgO{bHaFE3w5#Chg*tGHLE~86x2> zU3bdqxr3&C^2)duib0L-^2A3w|H*Ilb4J9GJTC?nrbW4jMdG-bX1zNnKg)HLryeC* zPKQuU4VKNaHcK%N0LA_u-%{C}^@oLBQKX|rzW1pCR`>=8KvF_44M|2MV>)wC1$r}a zaqE8$I_4t2x|8y}b>cM5_&V8f3qUj-cb%vzOGd~02;w97ClU@p-ZcN*#h_=+cc(%;&{^D;yt5Wfg2P?1rUonGo3oyQsle~<5xMHzZ8(x-UhW<>H@>^wLR;f`c=KfJdZscyc`DhcTOtF5@@!0y@^s8s z^Z}80=^T?s5H&#rmm~AFN9Q2@wvGbxgiG*~OBN;Z-sE~x(?f43ijCM{7HICB)PsFp;SbCM?5Mw{m4|L~*6Yxn7j0s;XQ37gI&%EB-`!8T@YX;6= zkgZ1OVcfcnLx0H`K2R>xBpsykqPa|eu!33w4NJeHInRfb>I9b@2Tq3D?_Y%>R3zt8 zhyX{(03Xr9BOrvM+dpEa;LX5a^N>XLJ3CfXq-$$e)#LKGD3X(eA=DvKQhj(g)@sHgf{v@u?34m7RKEpaKvQg zC_j3pvL0v*L{IrsSYO(pLE7{NpTmRifn;P^cd4SdIE*}-LtgY9M|nRC*U7H2VLguA z)q&(o-Je&SD9NZ&E0%kojt`%mpLg@P^5mOGA6u}8hUxfvEMSW9tLnX2r;^Q66>6ga}O4@p~Fp|p|)GMpvqj2nDT z`ujswHK{Ek)hfj4w1z-;!uF;qQl8`b*DFUtv4|+N7fk%X5Jpu#;`2OalIxql92GBv zi7_!%K|rl74cV+9!;4lr%#jiz7!%C#?|k`qPxj!4&Wm=_%;U1 z$i4>I8Z}}<-nkN@T>R56RfA#ym=f$F>}LC;$4^T9)YJO)f`6MGKwHvWRhBOQ=&YBd zhbG&V@e}qTpb(8IJ`0JDzrW8oyoI=ysu`u0;eE?pNn}}I7sc<5*|XQyjK~eU$lU%y zzNx))z-@P@QpA!qF?~dkOl3$-D!lQi4IBn2$vaA76!eilKF|O!ffcqfTXwDV7#)Wb z-D2e@yNThDj9i!1z=CcFt%0<$+P%2sg&l0a6u~9aTW$W=W@fx=y$=TLwtvJ2qR}9o zPYs`touQmN5s_)32g$)0G_^nQN#N?{sk^%Jax_>(E3wur9okOrBqmQ)s`<2v?0n1z z`3C%s_;k%xX?q zLk9`~CXd7N*q#a>2%+#^Bb=DHoQ&QXHeAC-RLCM^=nO7KH}#F@!}ZR%>f=b0ZfL! zn&AV(TPM!@gyxyWFBqEP7d-#60$I?h zFfHcXP;~De4n@2N^@CSbN*>1qxRZg^G36lx{C|s$1h1UeRbaxv$M_tcn5XMaoMfic zTF$>F0fR&`SJ@)1DG~F+S!0X@e6!dpyzC zR$qv)Ge0-yJPIX~v%+LeFomZ8Tc!M^d^eid08fc&x;-tkMyz-_u=}prXn^WERW{Zl z&M%YECU=iw)%t<#i@l$RBhn`Qx<92ntzH`)HIO193d^61xWS#tU?v)^kqqy#xbUK_ zbYZLuu)Wz+vZD0=U`Z%&G2{9vnF;OT67ZwiM$ujgqS;q+slmx|SqEMQVx}aY0&ZZ3 z*Zo>HET@jY~mPM|Pc<>_6<2oPRM#Agp#|L1apVHwDZE+X$W#nSI9qKxdhV)l6K}`OTHD3*tcV3_i%!j z8^w7H79S;+dLKy`-esrLD+nkHJS^f0Q5o+6Un=NMD5442OIRd|f3VKgF+eV7FYPMp z>?MZcOh?yRgFd&qVr%<^c)W)|v!<-JV~l4PPif3p9d#bkRW7PH{;r}3vGbxx63|Eh zdP?G6tasLGspB;y_sS0*1F3T2 zoVBoN2qy?iXbkT*iETB>%ygUfiPY-hoo_)UQ-2PAjsD{T?aE(ZewSoySQcLLOz;-^ z{@wdKNEV~ho^hqx0Rs6uaEp z=k)lf9pGBOnCwM$vqkQAC+S!m+EBU_PppF-$Ncmfa{k_kOZ9B`kF%AiGqb%TcD_+L4RZdZZ%(vP zNmochPQ`k2u&Eav+$FkH>m$YSjm0au*0OhJ%k(MhF2wYGI(+%H6weC+Fr;fVyXbfZ zKy|JqV?QZ3%Nq?-`pDohl}M9YTgfk*!=nk%DVzv649tIakSa$}zD0!cJYtS#XJg{x z27Afwv6Yq0pfO|cap8Du(U|mW-F|ou#vRYM)1+MP&Nq>rB?xSIohO4TO#lZz)Jea( zw8k!5Q}IVVH?lmXMa_YvEo;@VvIw01Kw550>-`FSO=2mzY^f-ro@5F~sZlOjoY~## z=$ir%%~kvHN5+J!W?fo?!guX+g>Ojnl6s=vB^_ilTcY0aC)dHd^c0;PTnQN}30Mgl zS>mHxP!6v~ziY*_RucZUVVul&MElsXy+Ia~#1{&<$JLPCWNIU>+Q)F3H(9zyjCesV z2A)E2uzDb4ANQ72G2l8-QRUeZ;y|2QtMi-B+`cqo`l^?i1G$qGHqlc4QcjKVgWJK;D30{P1avyB<%6-mke%W(`E~U|=O-d4l zwc$Hp@KU)W|92_~J^u=L4suBW(V%zG7w6VA5;y+Dzq2(lv`V&BUO5Ih zoS%Ye^{waH`iD`I9*iRV0K}~-0boqN=u*`qW3?yp>x<8AO%~Y8R6!ua+WisJY3FU6 zCKZs1?L6+|f@Fu#m&hg#?lNOh_ekFz>}zW4uY*dK)FyXVEfKnS(fEKw%=#~%EfuQB z>F1w$%tCB7G^^lX2NdMs5r;8BZ3b`}s`cFPZ-?mW%V;1;Bwm)^`7TR#ke zD2BAz*A(iCMBl@5^lboiws>kP93ZsSxw%_iBFg?T!KO_QoG-0r-~TA_n(5byk>x(h z|NTS`CxW=nLJ$;aW=X+)r;#|hR=d3QlRnit^z%~?L=#3Q2FO~d!?n}4FZ|q)Z|`rd ztJlOcKN5ZWm^i=e-g*R1llpxXjEx*8uuQB>h?|v5`Rx7H+N23B`DK zA4xxbv=MDPC4e23CEn_W*!o8@}rt zL}x=gjrT>l(&;1MRz$~eXUAi89pTbB;wd?KS5JLBWKzj?-gjT`eh8qQ_DPqJjmo`< zBj&U9lvI9odU>F=rpA0p6>Oe^XGQiV(2JhT%;_nw+_wf^uX-6j`+DgbU?G(dBKSII}dhs$ngln5P;!5=9>a~HMQoqW{q958K7=u#vOO?i$ zl_i5HMJnF9iOhoGcF&v;Lpz8*Xzb1u-n-&=fg=k zq6g75SxD{yB4+kPknZs={!7-n*ZY6-Yx1K{LK%rEjeHWsS<9H8{QXxW&}fYBtGQ>~ z$YBesdMGZ4dYq?HFV!2&7@l#0-oSAG;^%|kxRgsb+0D`9^ssxKB#=0&o(nS-U3i(F zOTlgY6=f?4Rq-ilAvEe4J;#uLxF%`w@WE0Z!cfa-N{O&@uZTh_m$*J-#h$YBxuvOh zjFh+rUABqQs0!80|Aa8nKo$H(fO><%$C$q)4A zb_sDSobIShA{Mu&mp6#cQGY4K$tYJ<*#Hq zDjw8$QT(-zp3}0 zY5P+zJxI9jIdM)1lLY*|Znb@66~dx~={^&atdb0-K-Tm(k8ur) zqHMoW$-xGKR0P(p+JpX)VTVfh9X7vErF3pPs8{n$Q3lYS< z3BsN&`ZL_UjOvW@cybkfUxZqzaSHf>sp;pFrVR`pILvXZ@&}bd-N@oU<2fh5$t&Cz z8WFh$0&7Tn%hj>90BGXAK|i!a z%%|VL!tzsMZb=uO2Z=hcpPzmV%xvjzl7nM@-m%nVMVIOT1$eV{^CZ-|r_8&qIl0#Whn3)1{-ri`a_=!ZiGU5-xQFJ4MjU zo*A!Xek9E^Fu;czXQRT%NK-M$p>Qs?hv|qpRuOm2DJvCj)UjuZ-Fiivs5S9jG4HW4 z*S}&4|H9_6M&kH5iMhi1900M(QX1rZt85f{@plEHOB4Ief@*J!d`%*ocX(KPg9b|g zJIf0`fALTWOj50~-~fH%4xws-Pcm;zAp(0^da%C)J7|GG$tB0%YD9ouV&!wbFpMTe zDb>{%w1>R@%~XoGIBZt{~xf$(x@3D z(7q*ma@IphY)P+!E2omC$4}hxk6bcQt*S$~y5`L0Tx}L6f_fd-0 z`5}08PdDdNGcXUUOYKb+S%|(2h!3>P z0E?fIlE$hHIEpT?sPLpHXS|0&FrAwrx4Sd&!dsr0ev2WhdmWmcSu2F|^-DGd59Aqq zVayj!lONPPcuO0fFcJ6;u6!7nazzDfnBq$0z=BY~tBV*SS@4D<=Vd|rSj$E~74R{g z(1Su$%m#gzSnatci7?4H8?lddcXFCSf{yZnv5ihQV0(tdtuG60%1G-feu_hN)VUr)d4hKb ziN4yAxHeF!!z)T4kN}6H?8m|a=P_Z-S+E8HCL(m@Y8QsA2?63lG_lKgIpAin0XJhR zS_tOr>Qlr9k!bg7%ZG2Tbd7IR@2&R38ZQXoDLt*5tAqcAT$p7`1+ZbXej(h^*_bo8 ze3f7GDOaUH4~ze24Mo=`^P}AGQB-j6Ag*X5T-%kuA0EFAs&WASBovTyKELo3`ISc! zQBL2PqmDpAz)>RHRl}2688zRU?)eJr{7cG1y6Z%HU*wzl5ymr%`t;X7>dWUXyb*ml zIJs}l<*+2n_Yo=n;bkwB8?6YzY&*~D|@hP@w%V1kR-G*9D()MvZ)1**Dki#e1 zD_%EZbKDw~=$QGDO8K|6%@>%D@}O3S8*yp{J00X|bO89{U`E{WhHiklXG{)+G>k+^ zd%9<&dTXoSwPv*!KyvFPe&-kV+SRe&6Qb_4_*?b;s?7|Xk5-2U z3~|G!0gc3?6S8oU!sdhOPQn*qU}I?_E{--Y6h;dsh&%MD+9KlAL}Fmq zDh^o=l~<@r%|Y~|4Vg|-SS}j6BEE@}7|;YXsLWa2`fYNVQlaB`JE!uY_YZKaD7L|s z1yG4%T>y+wSOIQp185}2kcA~%ycJtKtUA(g8AlYXFF^3a9sZOs8YIj9FOq5`-l1V0 zHJobm35jyEBut9*YhoRfyOZf!48T39+syqc(5+-l#18{nmun+&$Bb(02{hcq@h17X=8!P#U&tg2;04MC z?DYTp30gOK;k@@r#(#Clsk)WIA%H8wa#TO$5!%!r&h+50>jM-MFgn-<|J{PKYIORn zH9(^(qV7LvD)N3?D`2+4_44;`xvXlbtgQTJ7O`nc^ml>ezsX(T1=gwg`E_Cdy`_Yl zfk7^2X9m8?f50}lZ_5~qKjEdz@$#c}6mWHwia%=EjZ@cS57s*Y55=KTn`k*iLJ#=Em=?y7uP$G&J zB@=3#lK5hr^{XO7D&Dq|SE)RjJcV;cal5PmKePZZ8%W%n!bv#GXRW;_YWt`45x~41}s*@l0>#LbtcFGy(LNE!aD} zJbNZ<&S5?UCD9Mk31MbL?{E%4{Lq6gb9XmstM#9@{m{iDuO{L~c&{b!##_jxY^Aj@ zl9y#=IklQmS%5i=GeiKtRhD-^FJzz7y2{%DL3?POoZB7f#Tf@*+@YsOeQN?vd(2Az zm6BZNoZXVacbHNmRbMcbz=CJnroU%{k{-&uG;^h@H)O}*^j7vq?5sQSlD%F?a!nor zU>p3)N4)nQc*tBrrd+n45e8xDN7$1|>+@ZL@btvkJ!1Ev-DpE_Y|+O?m&VmD9)_55Fi!*EQqT8MTl1_lQe zK6kvH*9xRMQiMe5PZB)KINxc5or%t)QX^$M=M#kQnD@t$4Xf0Dte$jhwRV&Pp5aNu zH1SKyfdy|lBkhE^b)cSr-a6QX{gjw;q|m&|Uy*eW%!L?txAy8DH$Tls$S*T|Ug+ek zQ(rH>nnCzN%Q#-Nsp~ocY*`>x$W4$}-&Ga9n8NQzgNArkDoALOD%=RJ>#g&+rtd5Xccnv`@E zQ}v8GuX0FU;y|S!lxlggU&Ec|vtU&h>TG7O;fMF>17X?iY~xdWUcXx6qc-I7 zW5Mh132S>UnNdcnjb z#eDN7O18qRrp>Kkxn48KTYw4)+Il55!Qr(S=7KTps%0p#8}s#)Cd z`R9_uC@z^vs|1En)B_m|tI$IMA^wV!vohB-zIEyqVay_W5t0@uS&ZaKYQFrNTL7ch zHy(AvUU9n-9!i^?APMvnX}87eFnZV{eK6zY0+bVw2HA%p-2G`eRM=qH>Wh-pJJ)gf z0^+FJhK{RgYmNB`#cJ!T7uOyY?*1PEqr%4UYYjeE@}eGh-2bk-Wu$}2&pp(v?fk+z zr#oaS?%m<$s)g5()LS4DF&DmkWw#-oYeyHcZ5sucK=!8x{_=pVUb8GSom%8GtOJCv82gR_$~LFK_hI?p$I;vEopcZzxTem&7Iy%O>-4pUO@QmJzp7!&Rf}N zd7DpyXE?SMpNpA{USSnO58s(W>)5|he2uWDKYVkXiEei8K-PBr65V8Kn03VwgdR;h z2t0oYKKTdhMxYN5raUF7Z(#>-9teKSb>zQ86Zmhuy=73G{nxD-Bm{!HdxAT`EjYp5 zy>WMUg1fr}2-3JU?(QMDJB@2_o6ht6-}juFnln=)HJ@ARZu|A#*IsLFw^&-ok(LfVO*u{)J%AB>;&^y#G8U|mPCEIhg|E9of z9SdXmzE7$E$KI!ud(&q$7tZtvjt}wRX^=lAwgM%xI!Aa8REWca2%OS}q z#TzR9dqvnf>Ce9E{sX_aZZSGxWwBPG=cR{#Qj&Hc%Vt=Vs@un|_lbq8{sd}gO@VBQ z^si0Tg0yEqjY>O$Vv59qQrUfy+pC@0G2ci9R74b9&^@2v~8d9YV%zSnU+401n zHQM0Q|7=O@uWGDkAt(P}N79E*qAN-`c`U4U?%!q#1B%)id1WDy0nKt4g1&Y;>uph$ zmr=`#AKBIB*&?LJ`zSKBytY4zcaK#Q#uklY1OVh>q zye3p)#&P&qF@A1{6{<6tX~DWsYOhFv#2OWMgtbhrkC^XZK?WU+?2uTa@-axZ4~SfX zD7fG~r)}3{$C~vz$gFWCYyr>J&iEA(;TAHFF|ck1q4aIw7%)OcvTknRR72?)?ShR& z)EXaYcpot;8ov0z)0N+~$BML>9&Qq0PrK6pb1^9a;XI%01W@8O@jiWuil3EQnTgrs zfVLNN6HmIvmx_%UdfIU7YdCnotK8!{K;TU%Bi9QwL@o2sW-kEhj))A!@TI&8C$qxVR$m z6`l}ialF{BL4;8Wk%lwl0n<+*+Hh^PrgV7^&6MxFa1&Ndl|M7@wgNf*tY#w`AJ-hi z%R3AIg5lr)L#{)}sTE}DHT=mbF*`fDC-|wHmVPePVU(WxW!@5rE0q4BVjK^>7tZ%P zqX%Z2>Wzb%Nm%x``5T*4LgYZ1tUFE;oFDS)jC>Ualn;wPl!krHa^~Uc_HBt5+<$Ub zGp_`q2ykGv}!8=i5cV-qo5 z{<|YL^_1A4a+dvh3W)V*m<~+m-j)e!OzkG&H$6b1g|SocR`>&9G|;!dngT|qqMW^a z0@OwLzU4IOUp;YR5J}tU>Ec3C>i2#NUG_bE^lkRg^L|-ZIy-;>JXiAI`5yifd42-x zo0`i@G3lSTVP5t&fD&8{$bS(e;jukoDI=+3$mf+HfDAb&~C6ND_z+p!}IW`|! zA321j)`W^L0T2|?(4o%XKM>H`$OAEJ`F3q#cmF^JOEe@HC5InSJ&Dic?S%CWUG|cq z9{0HoNxmq(tSPJQig5)U(>Xy}pzx}nk?k1j3D!dA&2&!xX6^h}WpCno4|^6lS!Fgn z1pkViNAT~wRqE<6sQg=CBY_o=q-*B?`3$ycHZL;yb2?InO9$k0h1B#-C^N6BMI&ds zLf9i+;*h3OtO*-XV@-44G)%|>`e%2v)%|~`0R2lrUBK!I?EkxV1QPiGDe}?(U#Y6h z)R@4Oo?@tf;+CUlmZO#bn&-$n5*73R5gsSdySpHm2`3^&r-VTU#>-Ak5_a7$at=+L z;_i{Xra6~lE(D`<4RTrp`iH;qW$0fb<{{00lx-?D@KA&S`&ht;$Y!j6`EWXRtbttE zMjWCu^EUi%>e+<)YMTWeX4NTqS@ksVy zU`4&B%)3!1|3c((_t$kv4B5R~X}LohwFcS?tEKWGrht@$;|hlP5QFS-8JONi?=z`^2 z0!pF3jI(J}*dZOKoe?BdKv^)+H07bleYLTbR7uJS581lRjR7{>SDC-5nX$i8)$|gz<^=!jIQa-;{MKS*- zcD>ZXUK0%Gb8&JKV+UfgF#C}g_??HY?nb277q&{#WqYC`rV>f~?H}gqVH|i7WwtAG zA_D$9xsnmW9|2qc_rfbddL40hu{(cLH6Y0~C#Ni?v_Jh>S|8j*{SO2>+%ReT<=y9UOvk zW}EFaX+|0mQw&|c{l|Vd84qzRe1OcJ{-&ttE0>~T)^>3AY&xOL7h`RmLHYMz)skO$ zLquNU6a6*nI7CZ{rif8Ydbi>x#ti!KNFrUdwc&p-uH{JvFG+6(7@r`r61-S_fmTT!)UP7Kq=^13qHxUjF$v;v{$ZOgr`tW%t#D<=L6N)?f`$ zo7ObUjl%0_i`{+7PrxVjzk-0$RDvK1RFlnMc$3)A{wPj6(=+P5)atp6LFttQ9cb33 zhFQc^x5Xac$=O!5fk${&pYML*31mk)q$Se*lNHIO`(Ig+|40GL%KKXmx9}VtK@Pgj z(~jD0RE6TDl?o#eE!5>JO2Nk=Vwl>)p-rA5>E)o3Gujma3tfQpy=R=G9zV@JgUnH{$6> z4OyT$6{cZX*OdldmS{cN=Qj3Ppy*A{iyT7gQP3}NfWDYJO5we->{y&Z28A}MduomR z=;$}Niq zdi(+lP+l4HQ!C^YZ@j|TDbTB{x^$_F@n>OJD^L3-GISr>AaB8r&)k(fyG_Tz1i6Fj z-)j>XH*}l7=<3D0gcJ>MKCBjKaO=j9=AhkyNGL!c4+a61>FZ=sEnX5@7&DV(evFBG zN)xIIR5BO~r8IXdRi1xatrb|sRBOtqx5hbM4T#sHFvIz2{KP=~NgH}mFMpH$Y|;CuHKD2AK{}=wZEPRPNzf+&>y-?t)^4c(UI=4Zv;PqqI+|T?_QU5z z6?gbBRCU16vM0^?sQ(Q+*+-axyd*w@zTDt2#k*tUiWU68clB+fD`{mz*c^rGg1N)L z*Oio~Mk`kLefbm08iD=Q6F+T|@Jb2RMpt;GT)$64Rp2{Vb-Fe|#P9D=gVJ2)Ix9!@ zES4>_Gy(z^<`E%+dq^T8k&Q-9;`q@c#kn8h5Y^E7@yjz)g*zuE8AX9$6#lq;l*sRF zjT%mO2II+ve4A4Y27{Nbn!Db+_+Kg1_0;^4;HyF7%{{ARY@8hp>LDW|KVa@6_L}Ot zpd6gn&4ourj>i}5A_UNQ@$AWloAT`-Q=`iw!te<^0M;zxdOWQ9X`a2zGpKrJ9Ko8J ze5dDZ@Sk|X1hqeMq#;-LL zZyCKM2WgAkiz0Kw!@U{_KO!Pl<6vVSHbJTpu~|~RP9LooTMPKY7Vk~;=q+m z{(~aLvDp97cVj92=LRv>e+eo20Mb7t$^TDx(EA-Ea7|4CaH1uE>Fk;(P~_CI@%Kxi zLAdd&Tuc%A=x$^4`<$=Z5@0efDkg>%>zC7G!;sRG|E5@zwS}LNS>x9LKWQTxfoJ_0 zJTg>u{a6|D@#M-qLUDTQnTh}Nd}F6@*IlHpqUTEsDXxmOTIbFpTwWL0QJ)lQbVJcN zgXzP@4P|v)3GlfJr9(C!u;u5AH}t#dEPqJd!2k9zuu77mVA2QQpoe^hh*MMPj8y?reM0mAeWL)fhXk@locHP=NCTl&sW=r2&ah``e=O#}` z{bNVjO&@_r|HkP#Um8!88LQFYTEw>NmpbVIPVmS=N5Ye1f{6piVTa2}J<*D<_@$SX z2A=Q+2SVy(p2#zf^~1ocnI?=VI$Ea?1ZZIMti+f5yL^&ohK;1_5dNWY1v~y#AX8}O zTn>zyuddIX^7N9*v!aW-D~l#6unNeEG@ZBhmf-|VwW!H9X8E=nPam61K`#+Eg8_bsi|S-2riHS5l*q3^ z<^W~6(WA6$#3d)IzJ2{+Bm|-)JREuSWd?ic_NQk`qi-@yU>G$hxR?cQ)SgZo*TtLi zXiR6s@j#1SQX1v@lA0=JY?t*w;eQ{D?z_hV-;jT%5Ey#<5dLUHQI&<&Wi3sja2@uI zI?mQ95Z*6ve+KC>y!1G|$Hlqx3PV=lmcq_>Cx-{WOw~DwtWFI= zn9#yCJg!hxZ)gar5fBK%odH+$RX_1EB~*@dQso>@Y0T95@Nv%%KjTNZf+O5VHkpjb%X;yP_uiZhhcCA449Nzm zlC}zFLnm`}uUcf1jg>O4Z3fstQ^7aRtU#dIp4+%hPVSjr9?7|vZjsllA0Bu5L!Im!f$)b*9E`}XsgXF`wT zS%ioIc8z9QqAuCGhH(R!=%^=W3_QW{*Ff`(P^FK@OWCMNSnngb5>(Tkg(-Hqo(oOB$`T zs1f&=q2vc$j~Ph+_Tb^>#qi4yen{v&94hV(#`dgF z@Q$QWbUO86o6=E-6D`V&KW)(DH{&(Lj|pjHgT7wxkW-OpLyTeNh06$k;{OetSY=eK ziPq2>Meh?kFon%q|4KgI?KYSSZD7X1Be`1YD{N&wXNJ9rrERx3o$(WRG$XUxJZ6e* z)o3cfhNf#()~crV)VV3~UYuv?){(7LX-WO9dr_VE*h#m&$M7dSLG}_&qrt6}VIfjn z*$wbE6jIX~>#bj-1@JOa+}BJ3%7OFBVl{TDE2U>BUnZ59WT=|?^lbCxX)t zrgNRl%?Zajj_!e<(b$3r?9D%A{8XLG39R$(;eGnFZJA=k7EJE!spooPt8KWJi-I%z zJdeV0rpjUhr?VfgRKcqqf za=U|DL#hkM+Qgpt3eKCxg$72-ChA@;`?>l_690zJ`sQ0AA2Q8cD||1`Yv!=cK#S}9 z^A;PHs?=>Z3QcORZnu}FbTI*ANHu#8_*9)3vu?Ynq51gkZ-8TyWF2!D#&I*aTj38* zHU3y#QBb$($d6$5z25d#c<~Oxk)`RCtbsu5p=Nc*L z7;%MKi0|jgc38i8`|FVxllHF5U0?hbmLZg}l=@;kkhfE9-z%>K%5n7}G5hp+5|c|7 z3!of8w^1C!t5WFQ%v&znp(XgDKW$53ZK}f~NlikjxQLT5go%GT9;sx5up2!|_!v_J z&9(G8*=kRLrmc2jyHk2lp}6xJg5o$JKNO%)mEr*mGM;}}{>5ZOK6b5!Vbz$#i|y|o zyP;t&>mDJD$xo*EtSzv+sa?e#65vM zJ1K;AR>%i6n%y`AkWy_Ct-KqTm!(ro%J`Oo-%tg{`rR?aGt2|uQnAQvPbi-@g!Nu0 z3`t@yj>w*x%yIH>w1r?}l^ySf7*^-M%}NBSr9ByYddI7hIK)UBRUXgcPAFYGO7!VQ zyw3cxXn)A-@~wA9fY(pgCoT&Co9G6C%>hGLRsX{Z9R|91@7`G2+(syz^_=j~-26OS z@V8mwXcW3m^FIkc`i8^>GE0u-K6oLoF_3%cs8JN;{teY@4X!8v#Hslc^Dx|DNOR?{M2ImS@x}P_24u}lKrv~(v0airRbC;j0%Jqr1&fs&959K+6kXDyz!vtVdWy| zma}jkk*t0)N*YoE)V_Io{b9L7v&yQC^w8FiPSzUw`X{gS<-ExV%wG7%;lr!z9-b}( zK_qFOeV+g`%P^9LkXO{`Frq_+-8#iQ&{^>Ut|se#e7^VVk2cC7KY=) zgHGNwjo^BQ1fJZg5v0{%NpKw0$eW#=|Yy zkOL-Mxc6hCm?3uXc+H;;q+%TJ1)}!m>%7bD0!zGD%*9#<&e2%zpz)ObpNS#l{of6nxpbrWU>#76n4>9`-@wICKgw4;EspL z9~9<cV_9B9<7j- z8pDRN=@1L|@uTLs@=~9=!nSn&@UOnOca|YB!5rret3wO1K?=xebEk27pUF2OZ<<3*j zsiX=f2yRv0;5N^q(+5-Hbtz4Ps=oUDJo zxoXYTXtVIA)*MF$vS572Lb+)GjFXOJpC7u5871>fTM3XT_YUPgjgrP!->L4#TMibM zUVwtE9@Z)1x?gTZCA!i~F<#eDC~bRjFT%;r-(bV8PfJpY;zA`busLTqBBefN9N}YnZYFd z_#W8!ff+iRq(|Ba(#dZrwo1k|P{I#kp+x`1o+9 zQsB6;u@SrE|3b{~v|+1x1vc0&ePjPPQUE!YrWTCNb9RpKSYSor!n+I_cN7NGQMi$( z`05CJ;1k)1mL?&xwR_H!GQ_7UQ32(6I_{Uf9FikAa4Fn%bpZw!p*6NTHIVgm&Lgn= zv30V&43|tV?h>7=>UW_>4}lFVmJPAdM@RmN?#;ut8~E~MBRrr10Y(Co-S~U}O%cmH z`iW2JiLEs6UNy_u+Z>8Ad6%aBptQ-*-LsufG_C+_tHdV{{a(VpM(%qWU z3sJ(9KHawc4D$Z=o+fOCSIBpZ;^_E zUcOV~%Z>Qf5vDX?Q5jT@w^hDwEwEP6*&eoRM|KM|cXh5+4<=rUGX+tr%>hg$&}(M1 z?Noywf@CR=8+=pG2dmi#=ilu;GtKt%mD8@RNR2S`-zJNUyR`9?BNaBcXx9}h&qx#k zE9sY(^N$sms%?jF&e|N4n&7y}<4T$lfJcH&6-fsB71$;6;nNd#4_|VGL2v{==Fzu( zhK~$e6wGafOZ_hnXfp$hu{;+Ff!mDNWye#LRgz7v-(C6dDA$$c?5oexv;^^Ca~ePV z5cYdlwy6*6*I7}PG`>DMo|C~U(?4U?wrv`#6l47?g>Gu=H?G5Ee&d`b8@I4;hAWtkp{IMe@ww5u4v9^3t8`Bj5S9h*G4!by~C*WQ&?n_Zv|o=CN*nXovT zL+`N32q?SmC7+p|VA~^;tH&xWI+mAdK0qe*8=Tl<3~7dz8|=XEfQ8i@38{S;3q;ABb6 zAk`u95yGht{wX?-Z*p⪙R&9|Ive{~OCD-pbv%KC<=FIZ=x}IZ)8zX}R(O8kL zBM&EB(v(Ri9hwWICyt9Iu^(~SK3;aDAvH3&n*;)Ckk~!q_L((J~ z83Na1SEY3aljtC}u$EXfuqa&ItB~%=DR;1W?lYtV?J%(t$1 z6Z^Opz2^r9z#LTDFhSX@N6#jOTu&?ZmF|Ka+F%E7*qPSf1h#znoO>>N=LMnDSyKRM z&)9qLE*PDAj1*!HZ^?fxgdEfnyfgzVFblkR!qHaDdqeQh6cQi~O!6N$5_ItCN;D$6nB&G6yb@)uByfAtA_ds!eQgF8C<;9Sv+?@kGzX{^72=s(?4Y2 zR{{r5QqJ1&qlDkf408HH#c{-^W_&4)HulNhyC03tUh?KL1kv8}2Ia+BAR+$A^DJ|7 zOu&BhfKc1Yu;%gHEZxx}pyS%X*NG0w1SHPAOZe4@eiPV^ZHgOCg@m5^TpE`rbA^}T zYjD$A{6Zw+N}Lp_+Ks)fhBfl~-W`g`=7~WgNxEa@1J@f1FL&9o8tl+sT~a)wPIib0 z`=Yw7UQBe`o%2sWljHsO!kIFEJPcl;y1G`)AQJWmq3S>OFU`nQO82`HpEToi%)M!Y z_r`SA@`E>|U@Tv12D2U%xw7+J+N$l!JL}Bye1fYdbh%fM&50%E92JFQOX^!Sk?Azq zycS#4M|k<7h699~RuK6B03FGL>#dXFAEnVc;p53NLujO9jnwlbR~|?D`)68v-S{e9 zWHj63xf5qv^=J1dOC%{psdx6r7FpD@jTFIBO(g=bTK+ZiY7$dUk|jB0tJNI79id(r zfsEaA!CuneD;{yH`7l)P$Tsl)fbU&8Rh+)>gJw zBOFf{ociU^^sDN8AgB+H${hvUrY@oHK1 zAjnau@t(nZZJC64hkBM*BoFn?85rk22>_jrRwNia@s05~=4w3Ee%$eRG@b5mv@NGV ztwHhi%_Q#DE|<1BcGvH+%86x2>&OngH(!5VZgIP*rxt_(QBh1zeRua9V^zNn@3v}X zRT#DwS1aQa+*se)0{O{&pmk($*BUKdX5p)kA#c{RX5rI%&mH>;t~tlQ+2o$BXh52| z5v?d2v!h{PXxIKEh$m(OSv+lix#~Q1=#Ik{P}A6!+_hS{M0**+NNQp;NoMCTX%06^ z7<@xM%*I~GW@WX;f!Fn!xUt@6MoZu_W76m3h=Nd*yE9 z!`n^yxN$sTMg^QYYCg)BxE2HQ+-p1s;%zEx`wuki@$;MkkZ($-(<>$ql0`C z8yL9}g}ncPg*&$8)Pr!PG)FVy@_esZU+3sPLe2Yq^Q{Q6!c#5Q4Cq}82tdU>Z`5}C zJb#`}a*z&3Q}WhmC?rTLK3H3tV*~H+57sz)2Ue)J-t*!0(M;24Kq`BSMHHt@5h!$&&ZX3$%;qwbsvzjLo z%i8d}Bnaey2%d_HrXl?{&it>1pfM@Hzh0I|8pt^Wxs9eE{U3qa|G)^5`2Uz)B54Fa zB+V=epR_ z4Vt!gJ24nCJ(-K;bHkBXWqnx)2?Z_Ki}R{Q0*MR=N*P69Mt2(?)GVeU8{Yw7B7pA< zC-KYz+P;C+H*fjTtiIBKwABn5{$V=kC_j^R|3yh&d)9Ys0Rr5BY(q zZ=3S|bnorAv$Etrr6$3c+0F>K+>zhv)9+$4<48QJxY&UZdXQB0&LmOqxLO z@i~TOX?^#m$^>2C@{mp+Cf?N_8LcUx0w(eYt7Z3ij87=MUq0UA`CV0FAFN|=JQHtb-Bz^xqc!0B#;!8)CwJ0;8I?91G{`GWaHv2y z978$i32uiuy&p_VyWkSvegXD*fZ5?Pw~io1B~)4Zl?6kAU}bkwi;SXY&HGby_%ACE zQHgz9IP(ldrV&sp^$n9UZgxAKvDbzBj>*lde`C5#iW6o+s6kk5w(BN(8pL)?&amtP zk2}HU=L$U(7u6+15S=P_&0-sAQ|O6GqNN!qVU3gg2nxkmWo?C(d#wC{-F77zacR70 zk%#f?fAAhYdP6N}>*dn1v@V(C)KceJSFA}6c>$4XZUg^Eh1u7;m741eC9h_fw^k=4 zCLH8}xT&VCTwFYp&~nnI9#{-ByT0OW%jTCW@)Mfz!P%$0ucm;2+cdLybHdyn5`iT! z^wBy{oNtigwA$3~%f}JGU}P8aV#`}YX5UnXRfShE)(|U(^EEq*X51jxc08K^DPj~Z z;Oq}l^n)8Afqy-$(8g@O)uf}AIrm+P;mb(EFfH1(Y5$h=jvYI9;IGL@Gd}mGI@}$ zN2?tAu!Af$w~1s-Jk-vdxa|tuLL0LKEP5lWez8V+X_BRJ| z-lB1F<@y}5yJJJ@mE8K#P1XhH7e)s8q6bdB>J|o2mE6Ui8%-!69FBJ|yvuyO><;mf z$xkt8wdL~#88#x9ZGZCl5yEfAk!B&Tza!V7`k{{FWJuGu< z{Au^Iy3i443Ii0}`>xA!H z%Q*pUerrlsp@P9X9HuWLd7kC&+c zyX0~}pwvvP%J9sXyXl53WaK#j=6&a>GWnM`ZGfUlp{9rF8lz|WItx@C*$`RTmo#|c{ss}fkM`ZkZ_p;S>aqi&D)=vfQdhH#1+a!K|(Py~7F{%W_rft>3QIWG6Fa&*Jw zGz2k!40r#!Dja8!$w-Xu4q$TiOll7x3 z+|2PHIbJRm^u%e1R8(t#z~1@tiV&5+=CR2RF-gE4p8-$(8}gS?TuJGR@Qgzr2V|5n zN3dTEL~n*0n!0ve$%%`u><# zq=81CKa0pS_VvX#@rCr}o(eWQly&AKd8=g_yEC38sp)e{iB;}M@c?eoeiCBy)lGAo z%eCLQ^HXg6G@5^1df#M=%vngw2ofn%KRMMhJGzW5Uk}iUdT?`hcsLGz%D?6 z6mfmRWeFf&QJl%Bh;Dw^&mA5_>cXUf=5keG5?7BV!A=(3PxaL}uKEHU9T@;-jXq|X zpp67ypD(&ooH$jj=#h~JuU&fYpJ6+6XB}qvSKb` zRoX8d$4#=>hFcZ-_-_t#S)s)xHBmN*tCe^dCW{>` zs|O}|hvrxf;X{$o{JX4%@}gOZ9SCyWO*rn+KACdY<+zXJZrCoWn6FkY6Urzlx*@^% z-^$qN=SFM+n-YTS1uRy`XNl4L3nj?T)Gyt;r9Q>r_@nxS@2q>SI9xS9yWvNy_~uN| z8V9NJ9TCcUm2N8gw0NhvSBd^Mcnz5eJ4AOg+aJLr!spC@!WR%u7F{igqAK-3+-qw<^b$jl)ReBpjzBOScgMQ15s8)BWPwPh7+9i8wy z;Z3qdaC+@ZI4^XN=+ow=oy~eexd3KNX8d$zt;@)-Q0-O5C zT8&i3bEr>iG+?}-hQkazpF?DZQD*fqJI#OQ!hnleUD;G&8u9q&x&{qC_2>(=!^T`Y zb*}UuAUC;N!W^q>lS=i!Cy7b#(x)z2HHYoQEi|aaM&Nznkr7SaXFHqXznYkZjO}s? z_Ih%&HrcxqD*<&gEGU_YI{Z1~eL3M%g8;&;H#t*6C&_ck)~4u?0C=~UuWaZFQI2%h zsQ}f_1ZwVAi`wP512vy@s$^N}s8`G%f-F-G5im+eY|_|SREALIZ-zcpOWYxr2Iu() zBPE*7)qSo9kY~XS6Fw~&3SqQEn=tpGO}gSKJH?L5g1um%3mMLYBancm67%TqJ+1SrMvg&T^I7|`gT9axA6g#n2B(kEcG1PC5t!SZE{Xs`)U5e= z<)4eL%<^NVqN+1OxS21rVo1|)Zi{JOCq9bEm7FDIXRrPg{#)++FB#hJt)bV3zH52x zDzcB3LNZONTGn+#k5h0FOIEeuZrbd5;oXd2r?%Uz=Bnjaby=c<*GjmQsi=3&1tcXO zp3)fUXi2jc_9)6;;ITEsoT%slD`b8ST<-;&5O)3@iYa#NYKMb+mr3f!-42nZjLVi=FC}20%4;s zv4om51<`YIAONx+`A>yN} ztIvn3QwJf@Dwq6bw!W*Kv1t(NrJYtWQJ3}y>y+kahIFtR%F$!(`;5Uj?sI++sfP&O zp2J6_%mk;GDE=R{P{oB%_#k#@qSI_kt@a zqo=-)RQIJf9)>d4H0AJF?+Yc@Ku%1p6_znW#YWpNE1ILlh`{=2EqPBAu?yUT`m)cH zNgO!Bla;UNR@Otbu#90EHO{!Y7gG&6jfc|t^5#E^Ri@_rA>wA@-IEMUBndZhHS8x= z;IN4D={^ycFn0T}Y_P}LAssoTA}g@c*Wh<2XZ)5%PV4&!x{IT)aTh2_LlWPk=L2X} z!=Tw!>Rx=uTr&2q_}p*Fl-GyH^{)bh2=1=!O-fGH(j?wlXRF|U!55Aros*yH`5B|b z-ReSY^@=ZqKOFvbh#8G@uki31tf|MhGD}UF+RY>DO>Ozv-9URHj8;f81lF z%}s1KW?VnU--V|pj_XvYuiMoWmpzq$UN?A`3E*NZ%upmUC7tPna z6*vl6T`taH)RFP+@)(ai7{}Tiv%Wr(!+H^d+4@ef%T|!8bWJl1R^cNl)lEOKi>A`a zci5dHQ&J&%vRPX!`B|$aj4~~+AVdNTE2UEe0y?;!x>d2O#$UDSm5q6{25jZ)iQR{I zvp9KyW;rX-_+gim0P6eHB&di&-*VC6Yf`v3Uv#hmsCLYA9OEGD2nkbU_?QI?U2!5+ z4JZye0cnSEXFtcKR;p{z`lvJ(XRZQ@r%2@6l6f1D67i z^Wg>W_Z~|~CJAjJ2~k*PN~%%o^_y+6JUs&gmZQ!&S!B5Zx@%qtBJPm}3ZuRL1Zj$o zYlFMT)ln9sSLW5j99Le0tpAl9>)_e-nu2z!LT6^z3Qt%u2z&4`PLNq&2(krW%4l+@ zRsV-$u%=tEJ;FICcKMF^7w>G{{OR#!q!!N20++#vl7QazO6PBn#{Rl!-@NRZlVcYW zmA7jOp4c3`_9w8rK4Y*esc5c0ebe>kB5vBwCcjxAtYED2!SS!%R+J$gB$t?_Vm^>j zn>{(!dYL?n4vnkYPEoiaZt3P+MFMmBrxjb=Jw=Xfe9X!iO(T>Zi6_z_~N$e`PsQ2kveVIH&0MtqZ|UO`jn3 z(;=5{|K8Y@ztdrBVj{-BdK~3Mi5)9TZB0=FL?+6Ze*xV831s^(Am%j(h%|vq5~k8a zysE{8ST?RNYn>7>M~1L2dH&7bhXl(&rrJ%)D)sf zDx~9sp{UD$kd&HvKH`1(`YigQ$VnGVG$08TCOv+C#WF9{NmfBtZ&?U0#l?B(?$+~H zF?1vG!X3O6I#{>larIzD6h{!zP?nKS5jp~y9d1RU8%lhh5FW^Fs^z3q@1U;pMq^ej zE)*OmgTxn>b{#-UB$=?9>q^A#1L$X!2dnYCthg2@%|9{~hF`xKwLaW3z-2&q70L@& zFg|vO@YQ)pl*N;F%%yvgs#+HAiQP2iclJ3=uAx%pyvI!&oBMnyKJeJljq(>DzIKgd zm(cSAc``E#I45j0ZUX3j+MeEdL0;(PH`?LhV~Z`HS)abLt{o%Y5nD&;MR0?*5>LNk zEYBDUzPs@_JLf7q#$M~ZO#vRQ+MH)}$;djIPquXmxASx%D#T1e{42L^MX$D;F}9vf zNWfa}*&=N@)yMMQ<>e3hlRZ`!$WO-E>s6xr=N4LaL0XBaE7HgZaa;yLB zIz!~VIza*kF+;1{bD9Z4Bucr;SXk;2XmjBE^0)8wGfhT!>vt@Wk>9t4K`#4wX6SGI zGk&&gZ>1%!IVBd*R%f6Jh}Ob5OwH2)Y9Ss|;PF&+Oo@x^-(@>8web8W2kOATD^Uzx#1A=`%mn%~E( zai+8s@a9j-6a{`I|0_UNNI7QVxS#Wp$d2^;$e6)kWClJSJ1s8#C=R8#LKETl@t@3; z_P;e{b01{*pXzDyU(jOx=}H>=>U}X|QPV>k3HJ@J^Z)~`SC=P$G#mV%t)HVZC1u7W z*YQ%Ue_Bh!#-G3GK6~fvs%i%fK=dh2u-=(SOw`y=V?e~`QC>ilsjgEj{Oys_(~sKF zdEmriu5!5VHG|B6$&X)kIgoi!!ZySKG^qNeqYIgqX9?tJo^_nS=9mpH$x%DmD|@X6 z5tx`qjLo z6D&by)a+-Q6#f1DI88)$75)-pm{fzi#v?#&fJs~b+M^J&e(dDoQ?Bce$fO&8jfa6D z5#YO69bB#B=n)0Kt}M9~JB#39bxqz7I_e;)DBaFQeQ?%6L9Cnl*Ya~ME&go#X!_1C z@P`>99UzpPWJR$MIHBWsBt|!=Fx7L9<*bWoMK{pQ$7qeuI&Pl>IRf7P93vGk#E7!+ z%fV)@ASU3rLV1sFG^(i(F8?atp3Fjn%#OF_)-yVZoiessJT7mzE<*vsGHhl)j=>vr zqrYv}Y#{-!YNVZU8wR+t=q8AhAE&pk_aXUGwc`wfFL)FX6t;WV!bItZf;(rg(s6;w8ZE$bo7$)%pq_c z(v&l)4X`1?k2kmNq+HTsMqTu#+Sufoo@Qf`Xypc|oyBsdM7W#7P|N@L79BR}0c0p4 za&P4^#7TynO8=+5x?@}J7@eia|5n{uMpgB;>z)!2>245|u0?l9DV@??D&5`Eu|Qf0 z>5c``-3`(y9n#&g&P4z3yZ1i(jPvn~ef+eBg8^%fg^F5 z$+B^Mo}OwDRdcjU)WMBRkJ0B$CVr!9q8EZe{&YG=-6V^|Eg+Ft-8%Z6goT}ULulTo zza5RvDo^65rqh?QbeTvNult?<*om`GZSw@zRmuJ&RCEM+4;|6!uOi zg}j$q--D@N`Ova7-@O->}HnYMw1e{vI=C^*QV(Fyrqac-_v+EU`!{mx~s0f!5-+Y z7dRw~MrZIKxFoa`z<3H0hYvP%8&{0s(5T7fG|z0wB075ii1e5d(rZjNvUXhl)y{H6 zX`eVP`;q5c+XghR^9h8pn?|K2Ir0}O@vnRy$NyozPT-m){-5kuni<-jpu>Q?8z6=J z`J*LNwYT0Jf(cN+#qGVZGAW=X;)R~5Hl2NQ^$7vkTwn#Yq2^8BE{UuhrO$>}y#pH^ zX4v+~hAfQvTua77Z$@L2obVSiu63B)%hgAJi5?%L~32!`(WNoKK zw#D1ptF`tGw@CN>ZPAmoYkLse6$BEh=!2{Zy?l=v5i#xPx;V_U9Qm!)k)tJZIb=P; zcOhuoT)qt~4elUYKkDT8hLL$;DHID#WeY-fw~2;aI4R0{Thngf4nQZ@{@c7?H-Fnk zcTd=obxYgg84mGmhMM1xoQZe!{#cLTXbs%9t15egp{hn@4&9}E+^k3aOp;XtJxYqX zvje$!bK%cP2D!Q1*D66zNr&7ag(eF$Pq@XNTUW%hD=s?E6SB#s7DUD2`EZ@>2iy~n zFM5LPTff4st4<-87sO3xYqA9g)7&Yg1>U)&!^>XC(CYzKHXe=_7%aac34jQIt$|^; z?WS}fBPp~1X?KQbsOspTqf`;s=rF)w#rH7}TM>MdNVpKaRaD(KT=zm`q_5pkU8?3( z#{@;`Zpd}!z;_vC!n4}-?qv_aN6|sJiEEWcm8}1TVc@vR;r^S}a9Qtz+apVA!g@d= zeaGV-_NQeb|7B>>(-u|2TS{caux4!n$G7e1a)z)yVfywGt^`W;g0;yRv(Eyt3t*Y-!Gy)K_q9{{_B437I_W)=I2%6e0H>#fiwE42b6hcVJ5}xDs00p@m9D z|48~k=5v*+E&5S-uHezUIpyx6tlN&YmIKIl)1&Fmj3HewIVh7S zm_ZfcVJ7MNK!l6ZcA4nji6ao0v1hg90ktAKwz3Wz%6r3`sK6v0M?4ex)u5Z&^A_Wz zl%#usq&0{_Fed7H=8D9cqg%IJPA_ol`RfABRALuT84-)6uG<0gNQ2wfihX~z$a+RR zj7M=;a$Ftv%~Ely^9bqN&ce{!(~J`lb13|D>pk|s^pMyge|9`hcom zXv6R^Y1~r??p!8=H77P>E7BKbbudr=f{=q++ZSamWksL?F+*GT6;{Im! z_`F&<-2A-nwT?PoX>jA|NkgjJp<^G)@o&%cUQ0=g)sWWm?#tnYioJWn`%{8B2Xrq> z(fC_Syb*pgrH8nnh!`sPnckUf`drLW1+t>N&$V6zS^6vCS`-r7Dgs-)G$@`$Ov@26Ot&!pnbmZKe&N;Qt#hiUTfpIcT%5hvcP#H9xp%NLTA+0>%x&psh7fzSPVrNYuVID5LLXeiyuEeX3SV^E`)1z(`-*}xsgpVNf5d^rjmH6!sdw7oW# z^Cg-1Fr{ovO6Ml%Xr(aYR}cks|K0xW)+pqbT-MEbT`4jn=Cdu7vSmU{;~e7)yvuZky2=T)RSH7>o zqH!&fTXlHBB9F=rl%?Bv66oR4W7%8OTWjd)L8fo?FUH!nuA?HzBLN=oLty{)$xmD3 zV+@s8E@}*Sjzh^^3`Fss3Tx8 zzM-~Dw?e4GkE62}@40rN59X+(*V4Lz&V-GFu9+9*Dj?$+%?)4MP7a;jlRL(P>(=y{ ziq*Mlw<{Tj#AYSGv7#zZ9Q_m!o=7=GxTo(afl=w%zK$$g`6=lkw0qFa?fwJm-IcZ5 z<`gvI=+~KQ0p#d+tu~H#^U9C=xaF>L|wXTErgu`{i|THWxgwjyq?FJf47W z)o1Q6Yg-RSiR4xVc9QQl6k~<6F`?(hf?h2rWWQ2+cbGm6h)6G$GeEqg_$IasT`%|wKZs}syms7Pf$IFglMj`?HxwH5qw^X&ra|3Q6cD_ecDEr&XDpKT9H83B?Tg%~WqUlykG(b%3ZGHS=1OIER;z2z4NG}? zo`qL~J32awB_$&iR8$ta}=Iswyhuqa4Zj zrP~Utr%1MI7s2MFOZV7H*DrkblW(N?hkPX=L;(MfehBd&rUdFgvLQmlhPqY6M;`X4vYFNn^OP?TN)-;9 z7g4NHzN_){zmr&~Y>d97+>#`uZ*cnAL|IE0jNF?6Th7- z&w0b1zaR#@&a9-9`7bA-pF}>F9;HrCguUVQMTNR?qLd47y?ATl%Z^>%quU|UGHAd6 ze0CgcZNMpM-Vpu1-N2~sdck2e;GV#9YjF1rd%r|0u(zsf??zp!v8jB)&cWb0zIIeHBgv%0dIB=g?x0hNw%*cW`yaZ3zQ~(fK7EyCcxE3bCOqiW ze>HC|UkHdFGaSQ)g2z}B+6kdE%Gbm7gSX8hwHMV*dnY=rpph?Fcwz?+OJ?0Gbc}#P z2nSw{U?zv)M#DOWFW(X$}{pg0fbbB zuO6K?xR^3D!lgLe_zj{Y`4qnoO$1{R-Dqky5xTodW*#ttO63uJ95Y03AiRRQ6~v7A zo5mY+JdvB5=MmLzHe%0r=MN>8sQA3mdukp8)cRb#aC}DiFR3W@%e|NA1T^t*LPz%wyPW=f;DM@wV4QHqtt(9s( zqEC80SAQ05RCKF@<_>@So52$E8t*HaHOsfr>WGI{Y&(&_Qr1ga`s*3x1GjT)GR|XGmdywLKGOj~_nNUN>S~k$V(b!{rIy6PsuZSpI{w8-|rMgq~CJPxq#8BpB z@E=M6z%L+)O?vfSSub2DgVyA*=gndUH@?Yup3!RR$)}s<5J^LaTj+P?dm?rk9M#El zxgpl!5KUYHMRHZK%F zvn|hik>on((Hxz$&Q3}+%O2JZ)(wOcEcc(O;axLd&uA@AP=C&GYa*VAPLu9V39U!F zikJc0)SUC%3I??D6&VNwX=fa-dm7s=GfGg51(&Nh++OEhh*`n+iLNH;|d0e|k zha_hPyw90SpqUmZe$M~}s1Pi`g8X|)f1^Ix;9j<=Zr!@%L95O?B=DnjW79T9Xoq|c z@(U~{Z)Rw8Z^z7X7fG~{S@7&*6g6A(xx89Qzx4c1oB~EqDFmN}TW>oCe47W0rn(Qr zQa-=@$Sf_2FH@L5rKKGwl$2#eIeRKlo4*m>Vp$5E!S6>kcSA(0t4x9myi^8%uKs`b6 zdnywLk}Sm`aiB$4Uso=->$eH@CD67d$kqTPo0sL0=7Cb-Uf^#xY6`X}zy!1=&7S6l z9F+kBZ%brKVcJ9!*iDj+DZr0&mf?#7%_&}X^`WDZ~K#=)~oz&3$D7`PJhGm)EDf_@qK z5~~9(#)9=f;5?sNQl+xTrtgHZjLF3m8cO)dKmU-<53^h0WH_sWcv*6xQy%Z46CwUne`lN7)*q?(F`$oj9I~OuOgY z_ge_Y<1ds{XyBwdIFi_qzRA8|Cy7|CL=>h`9cr9qmoHh@p!!Yx zCO)?9q)?~BS>JT1HlQ`RElP?#OKPia5rGRtx9Q;Lv$lQ~jW*nNzfC|X-$j=8 z<(Mvg5O5hM6?b2TpA^TfSFnkwEAD?S$nmn$Pl^D6m$_Yj79lj&5M?nWt-Ro5ObQ}7b%kFfnlWDh%1dVoAz;snOSs)&Dkw>^RH z!5$cR0Nz@#k;nqTvPytJ)+jkTrYgC*MQ8XE<^%|)f6YyHap0fz${PTU2_F&)4S+UG zX559uU7yA~TDA3%cZ$f06HHaI&cyhA9Rt zP(pJ__P2eTC=fE1L^1e zI3Vi@kWde)E4UoxVUIg?u^AC8;s!3#&ftF_il=BXl$$8?QVDXt!6 z>g&=2-(o;Rbyd{E-|hbTm?Mo_()E1btUZBv~avOo0 z>V2pD46OM-Uw+nQx=$(jY9nqkXCR2>B8a-XBH(@Q=Y4h;B}LG ztV`@q??_y@^AUhvm$)UuC_bVIcCN)S?FE z7Gs;Y?_60?jj#T+AEO7ixX?6f5eyA$&!Ti3=y)8ougNq(SWq=m+e;-~VtMMi`OWl1 zJMksF{U>9?3zG0vqDQ)|?OdwMy@}bz2Eu1SqlQN-A2k~&aXP!}8k}V-&LZ_!Qjv|% z5)DT+)i3|KvvYV37GuuSSTc+~gBNT#=0fy2vSNvo+oVyTdBgV@mQ)Qmy9Sy!OiV=G&xup)p$%(RS|>hF`}_ z_Zpf76BXRml2oHG0wzCAE%{bX#>fZkZO_D^hON&O_l3LWSQYM7V{bxgh+6)PPrpRl zJNTOP7rHNS#6|0dY zT8nz$V=Y!Me+|PkD~{z+ABsy1yBQr7`=aapRykCjI3nlz<*uG?hbANnLMW`+T+OG- zJaFlbJD%=N#At3Fdcz)5^@(~b8j+<%-CuiQ*c6jJsU;Ffjsv-Gv7YRYX8B!;^F9`) zTX9k1zjKZ1IM&(t#``Mt093bP+Q#bfJR>=?rwFtCzMU)sjU5)6E%x|?e?j=Or1(|{D{Bk<2pjgxheJN`^{gV zSj`YU&K`L=ymr^v*L@&3-ts3|E}X;B$<)!X=&uhvyZENWbAlENgI(^%^(q_{I18%Q zdV$r2Q)%Xt^~;ghyV*64MDZxE(qKRGF6^UjW59TO=`Co}PzmLeS5s)`518QhJIYB2 z;Q`0=UvWUT-YHQ?o$c>;pcKty0qg@V%Zd-ZA72e=Mc%1%D|{3GGG(WU$Y~PyPvk}x>Dvy}l`_oO7G)LC<`$~QbCG@0} z-E}VD#pN{OOnOxu7+qa%Jrp6OUJzy!%W`joo76U* z?DH3ppi<*7xe)^Pq}VMcng%KGAt+bUzrlDV&|Rk?hPXQ3PeYh3WRyJjnuze$Y?R43 zI814(RVaU`&m*uBQ266ZVQfYJI8)Qw!0OyT3vu+ahHWArk|yr&r5WBcZP7qTDw|uf zna>+ypHaINX?cgv-uYr?L|6*HO3U2O>{x)x$<~u}yK+LR- z?Cr!rh5g6sR<9_xd__FX{BtypH1_+vam~JFAX=lPa&05RGsdOvj1A6+mw{0V!k&Y& zklHdhPcMw@bD2633VQhY3fFEN&6a9nfW4gUu!A$Z682_4yFQt;WX$xfIGY6Cs-6`~ zv6P--ip83SA21 z)KZbC%5bFt2piDeUPXh{wFsof!lB`KKCft{QWAZ6qhX^0T_mKdWoN3(@G zBYJDP2F@xD3KzJf(@A6!{VYN)%8km^%qVTnWvD_fIjli4FWP769(uR zQB;#*!O!c4r7f;7G7&06@TjN<#!{zK$-?|7y*_#Yn?bLyhr={;m}f%?ECyVX^{|5C zQzBwr8tDR%19;r#B{T{7l;7RVHn9+x7;7tO)JVlQ|2^FyP*)trn&#s?*xA`u=jElC8DqG8M&oC5kr7t%hOlXa2+2>QcRM1df4e z0oj5qlW^1&H8D!iY!53vVjxESq{XGs_$S6kSHyPMs;_D6xF@vxy_6qxCSjTvo5g3v ztfh&x4C>5l%`C|67j-k388QxtFfanDHC|`6Z2f!2!JJ}>c=lBz4(9@s-I9jF)9Ik7 zOhDY_Lu^`H!;P;HaFnEdvNRhw%fEZ~9Ka9~>Z0mXHv_ero5Q z`kubr{fNDN5nN(Om429)z76!dxq!kCnCzd%27Ld+UjBy=B`maI8G5@Ra?VJV(F;9o z-O-S664C`|+^xG`0nMm6+pqt03FlwAlci;1LGDy2F15e0fGeAkWpvpDub2L)=x0EY$=q`MZ~Qe&(q7)j>^lPUijTi& z-Q2@UI-1{4R_|ZUg$kMoJa($8mwH4WQr8|dq@6V$tNA&U+WwrlBd%^e++Gk=6uVj$ zG)JW?Cwgl8(gyM&KaXPvnH3SL7~4OtSZb!%A~+LVY+#mghToh~yt%;=3b>5~?4c*m z>WNOKq)*1MmX%^BB2{ZhYydbsETijrB5VKBd;Ny=j)wOV-<9-J!sFwu3+nM<)fI9N zIBv#bWx5FDF*9bOpVjShq_@6U4bBUjc;TNlK)LX?n|<%9`$=6jg%dFJ!89TKbVzpc zh?)`*Zu2cDk-w@?eD|*V^6D4({ay&y@$Z>n8#>xKU>5S9PJrP?V}owi{caM~6dlv9 z3VS>4-X}XDy!ZXje(YUMN^`~=swfLG{O@$@gu6x|PaOK@(k7>e&yJ-9qA#~WxC*$i z-HfY9RZ5}-Tqg*p!Guu z2@Bz1qI6whQv9^J1(nYoA(*C?%w=ma~1GCe@?C??G;+jEYX)nBOy`mBrm8? z7#Atx8XW2W})AD&r%U&e(P!(H6-(yQ%Lg3g#P~H>%OhjzIUOS$dE@->> zC1G46@fnBll-E0sZYR*F>0rp_`Chl%p&ipXVRaE#jarj=p((S@s!{(%!r7 zYk};jDck@YNv1ma5-b4?8e8blIQ1 zc+*{XMf=;m3p6fv3NSUT*25p*q!`^xn776E^8r>9b|}#@->_th354}8cw3UY_PIV9 zd7YL&@~dv}HBnU+n;O`jI#4>B`(4t+Wiw!1$lkIsnSXK0Tf8!-e+aJWits*oE{|6x z^0apRYh)CTkJ_%NB2}dP&Jk#urpo2~;=(tf*<7F7q55tm@_9W&>LvF_rY~zD1vhKh zUBLZ0Zr?3+czuW^Sj#{VH^B~SwL{15s^dT+QG<~c(i05kD{6n}GF^RkviTaGPx9d_ z#!(N>PmBB&h&2zE;$F?$QuS{Tq5Sb$W-%Z8eBRomv*g^{rM~o>uDh0wY>pRR6OG#X zyCMO)jDSfKXXY1zZH>YEZ}XL*`jy_s{^jpQy?jt4?bc9rEvz8iVptilSl0;p1~8z` zF4{g?`*br;DzErC=~P}kUM21@2cc5*jvXhi@xmwSCF>%ASi z()iPXDT_l^J)u>-j|SKOD_$SP30;@m;FXprm1exPr}a#fo0$(QLssPU1?K@>u(X#( zk>NznHwJ_kpYLA$UAo;-%{ZJ{Pj}9gZXn1EXFODjQi0>!XtS!y0h>2-eQ7=z# zXfpV+JhH$2)gl+lk{bsNI`zhKxxYve)?^i*!0G4gh%}2yf~KLoSejNpE#w z<33D-9FK;6Vz~j5q5;8r7av0l3Y4UU>haISL@;u-i^uAs_yuWMP;kv}UM%$afPA&C z4P-=e3F()f3!!)$oUOS&$YkKE!!iP#Dlsq>xpcA*jy{$(1LdY91VL zTB~I_XT* zaHvt@1))fhnIjr4UO~vM{TRkmL1=F7a|E?sC%M`8E@<9yWY3dq7c0eFp$=fcn;Z`I z-cOaUbnD{Ls2Jo`Qcg!oUN=m;_Y~B`sf$X1H9fzl7?+-&pg)pDTXnIzuA9%4z-d@~ z?;jDyEfbvyA8_ESbTJoo(c{0x`N3e6qZ;;}3i#fcLHK>lt;28`IPTe~RF}1&Mo1%TA z@r$+kA~TYuT@zVys)ir^N0V4iL40dyJ9oTyMy&GhNi_Dh@|(<)wLE;b&^Uu1{yx@& zfOQ;y%4;bl82wowSP)1hSF1XXzmVNQt)so~3F zwa+nS>t&$oMQ)-%%EiG=V;S$HxoSk9CAySFM6zblhsbokb%-c3QPw@ZVJd^std&Iz zRu~>>H@@2lzkj?cgkgVcLE+rAre4A98_yZCEBf)v+#WjDdRR{dmVa@_RJHk_%cUZ) zVbk4%_HXM1A{Mp+AZh=Gz>o^p3Be|(pTF--h}mcRTn?F8yO$bJ_CKoG7ADE2<_jPo z6lmMb7m(cVp@vnh)}75X?c!3BYzpu*a9R&3TcT8Cm#*Hd}@1x4yYMN!dY<^pD| zyROYFj8KMKAnyU9p;0_q=wpqeKw^#+Kj@OTVA1c*J};>)fcmcH2)1<#M(U@R5TSL` z!7`sz{_BSxsjD)K=^kbB@_}JGA6DV}{oGsS^*Wk2UPmcn&7~=^4b!CZe7E#}E0;rr zzi%y!EXSJNL~ps#uU)QL0Ymh3Z#D%*E{WU?W23Kxu9YYx+|%m=Fhc$weAx~28rAy% z1Nz`Cj^A>Wv`F^R=Vr9rq6SA(h7IwQ;hmzdL#Zq+9}Ipr+j#HIMqVo!B-2JN<@Vf5 zu{v2wzm!Z$qI)%1UCOUoXO17`*J)yzpBxoFm+v)`J;Z&h2c|-vWk=oI5+v$g`?_p< zRPmB;fqFDx*KB_o()nScWJ~MW248U>^Fex4?``PlgUa1@$<`r^`i4x!h_LW9MRFyL zQHIsvr;jRzcjQX2h0eD=IR@nnr!dQWl@nipW(vKNBS|({xrM}WWVPy=;IBCSBr$LB zvkxXac)uG}^e8eb#~(V;{!W{^QYf?Z-*Jy?fKhjpE*3AS2OG~q1}_BuwT})~&|6^d zEU-D9UTQ-k0?EW2o}NRf&1nH8CYo$HPV9g*s@vd-+iyOukNHHJC1M$jiz3 zOeDuM!w&$WwR+0kYoYB~+p(LkQKW4fYZ?;{_a}Vk*&3@!cnWB6#h{Gx4NFh$_G!S! z#V`MU;yjOmNLfFt;=IPPQHMzWJ^A9%KD$t$zKW+T~!ljkBfkmqQPvXx1{pAJCsc*Fs_^RR& zI_Pvz2+f~|LgQNx)#~@5tXx>iuD}@~fJknadBZn9=?TUXO?q($?Lm{*qqGkBHM zHc1k?5KK;p=@PJ5n@@Gq+Enm;(lwQ;!G>!047grEcI6RKHGI()YE;uUPR>bV3^ZjO zq+fN?5&eknxJ7)pY}gZZcVIY)MeS)8U%p-z#m*;yvw=FN-x?_LABzA?($U7JNf4+g zaWDO6AP_rp;q>>2<{ft8%YSr)lfv(i2`%6K%7WzoAA^wEv@8t&p`kGdjhkVYM{QyH5?ei3ipzT8TXm^61yw&&WGF%s>`s0Kkn$(mrQHGi zp1Hsq>H4Mx^$Eucy{1LsLC|nL>on9rQ+}|w4AGH1`;)f1PQ;Dc^i*SsZ*{e|NAl(l zO!ncL1olbqpzCD;4EpMq`l|Lyrl_P1+RBl$)UTXTv+Ov7Yy%j^u!@Gqgy!@~+HKzD= zZ!B8)NJQcIo5l!jttCi=M1vJYk7jm3(e?U_a^Jj(`Ab4)GNZ@ zCL5ZykW|N1%mUrA-U)kBxld%U)67B6hu#wh+b<_uu*a$$cE)oJadOd4Z6|D5sedHW0KULTR)6luiFhm!p2EYA1xjX5p1K{-0 znIWY~JGdDAL9}pD;1VgXDPl=tZe{;t)F~DGdx(ljwh+Jq_>TlLxi)KtG#{9(H4VV@ zs*oP-v|JQ9W~hec$6X+c)j;Iz(_2$}Ne>usV$;{(ldBf2e>8m~w5EGoS=Do5hjY4E zd@)0E;71}8qmvSa;!WDQq(QZ-{`6ds$TiRmk=O=v{RH)m2+-s7-UPrfo2us)M>}1H z^|I-#V9PKnr1>Gs(98z%w0`d*meb+or=KgJ)TN*vY*3%@8?kdag&-dHKP%{)3)a=z zJVf@uZFP_`nMH;y55tZGGq`e(r|l_;QU3IrCq|eD*Y4JBqJHKGUmcr}f6B>W%=n(> zox>Jw;bcyK*>Bk`FzS<|5%HaM#TjdQ|YUbIR6nJ zCV@=b%4kuJFAa@Vqmj&sZNmZ*SxGM34ENKFh?aJQFU8kYFN*gVb3e2~AA=`w1WQJQ zGr{?&?A{YyeE0jfg7lp$6ywBiGVXwqIL1oG-&`&+X#$K{f#ph12fzy9@k}wde3B&k zjZlPQ`%ppiJ4%=?0fbgnr5Hk((xjlS74np1_p)f4dh4DAm!LahWw5U%=#XjhGY}7@ z`-_b7r!#XcB(e%8Dq*1>1FS4`Fu&fY+N*lSgb|~RakW_c9?xhqRK_{VHe++oZn7Gf za;F2*Q9xs`^A!_z*dqy;-+0CgwU-jfjP!`Dm)rrqudLOsKd zWT%Tf@rGZluILw1XtoWt2DmqNy?0K5I|J_e=gx5IER+qyF*Hquhq-B6jC)y6d}3?4 zE%03sr9GozNwOC{%@t4cUQ8x4j;t(hdm}ugW0vovrS7iy^4EfU{u%Z**_1W4_g?y> zV0*c0SgD{*Nv|r#9?6D@Z)DpjYE~q=pz*iq^(56WL5Q9s-;~ztw>U7+nn+_JwT64J zEIvrfO-y8QQTH%<>>HNt4l=Ip@zXuuE{sm#o2^f3|IM`L$kko1tsRQXp?UQ5&J~>k z_hs~7313T0`u15+Dtz)O(V1tvR0rZ37=G?D_sSuA z`&D!A(PX^kq{+(^C2);^f&kRLi;tDsUz(lnc(d1MUtoR65|x-#{_owq_mw873nkcC zLI0!0BoU9_+O68tpIuQ>7bAqUj%QQ7DRF(2FqLDG%qE|B_>*Vn=#wz(vHbIgJ?>%O za?tw+VJ5WKbtX>Fzdng;vJQIyEnp5ua#SvR-PaJI?Tb)yCI%VQWpd<`kTQRu!*=yu z88L(mjSf)wmvI1lNDmprvnN_xIuvsN{2S{R3x3>8Q`9e=ZOV^+}G{@s$y zX#3lDDtXh21THU?j6m6lz&;9#2?(jQ8qVc9|gLB9U*M$HK0_7a?LUn+J$q@ z9XYP);d%}Ee>u>6!Lg^I@14;m~T1 z9;Q<=>mxd&j!eU(?V0RwoF#ayrr?87^!$f+t*g|2N&ONY!`GnXtWBBp%3MLmu1*1A zvDVahKu=jz2Yz5n*#FeT-mOlQsg;g^db9-yaFehj9YdE9Nxq~|VA>tz7(>~U_EFHEG4zeq zxaKPWg?HBdI5o|K=kW`u7p7q+cl ziX}JQn_-cfhwjvCD%TLwf09>#xbgZD+q5dTIui=&mWYTU#;rNu)2RpN97(NSKA(tr z)id?5_cG1Ms&^H>`U6j3Ys{Mi=~S$)n${QKxr6(AfCz?!mfLy280cq zwoH;=28OorR>R_I8uh+eWH?iBV&9Q=8uDjvHG6GtnCxIJW9u^TFh3c zVB3WHL44i1pTRi2n|t51@okjC=%qLK*)*{=L4T+;Cg6hrwAGSlAdU%SjvudTkuZHW`0>2*H$y#`=8%( zG%I7KUm8{vc)Osa0}*)d| zu=try`uhy|SdKofiqBX20F&&mO%KPglkS17Y|nmSfUJ+x-jbl{7V`P68|>|#j7_jT zx-?f5@l$|%a zOMimxtoLw(t7+d4por>Jw1E{wTJB!*u1;KGCC$7PAK^gwNVM)Rd(?5pDs|zeGN0Dq zZNVgU|JM8iM&=35HM2-Xt6Ub{s{h_?^Ezoro3MV+WRpNKOH0JqCXYarDw)-EGoMj>zK2 zy9DgK4Jt9Y1we$#w5(m4SiaEwd~oJHNm|-%!v-m^rR*J0Peg)bEC;P+c{~IIE{)r# zWij8BEnCF_!p4lws}+PsvS)ARN0<~39^P{R(d0dIHnXf~s`zI_r^lSihQwO>HTW}Z zK14%qxndif-1G^Qw`eSPSaD=wyqZl7I(85mkY%ttl`>dRm{O>0COe1*KGK(0;>0oG z{c%}89m<|5$Fav43*YO7_e;E+GnP~MAiZAv+87AUJ!Zs8MTe5}zyGqtK&+K}2SH6l ze^Z(7R^jpum>`kG$Hn0|*fnHUR2+X&R*vM{ZjA&_;i+{GLCHg3V~>3%!0 zo+^!KnA~)56{sB$7eh=AaNJCtndh^msAw74{a5-Mcq%ORu$fpyg8k$0SB!386dQW9 zA&kq973V-1+!(MhQLu0WhJUe}s5HL3|r3zaGQcwC-V* z&@G43V|m~kFZ6y>y8HxhBcl~bunoQt8jLH;{D4XVL90(hs#0WtOH@yyiWqHrMU`b^ zh?vk0{8DQ+z4PY3-s;1E>h^u)ns(HH_Sb;r>dygvtoSc=SWmhrT(|YfPD`~*wF1S6 XP*Zt?r%q^w0sg%MY*A%z3}O=po;-Pi{Z3Z$!;>dZ zlOBI27-)|zrh-4~9t$Mr4>E6`l#f#EJyuXG#TCS#JgJI#erJsOSjTjf)pmaJ1mES) z4{61M+T*bi-Q}Hv6#6zYD#jCPPr)nTlP4*^-${zAc^DinV|ozIEQ3xeDjZA+$KTe7 zdq_R4dA3-orJR!awNgq0Pn>_MQWh1EV*8XH?}aj^5lsSquCWT9B!Fspeq9)p(k*f(=b#7bSk?^7A zEY9?gJ(K_!qez14Kz0_fd;Miupl(eT!~W!oJMowoa@NrBi!Z4!zzhOLtn+qqhg5d3`~zR=0(&+3t?D`3y$>^&wdR zm0vU9kJk0#2RQ6_WiIF{;TC)G~64c$qc5fno z4^c496b3srb=a$R7Ma6RY(2Oh%)4m`=daDcfiE0mwK0R_y1(Oalm7KC)L#y<+F^fM zu>RHZJ!p=mnj0k%efAY!KtXSs_|Dr>+zp3Bc=z9t7pAg`?}Q=NRvF5D9huTV_YO+} zjFp;rR^mIE@YCZd;^}YUrUCE%%rBBoEGe?jB^L<~5be8=3*3BI_U?0MUI-HX z-=!4(zkRvmy5(Z=l@)G?Yk&EJbg+mPKEFl9}Hag!_cDY zIU2}-C*Sv7Yo@o0Ik?&I4q`5MJN|IOR9Uvrqzv=X4+I7F+%Pv`ch35bX58z=yHl>xAQ3GU$8~^n^$-1V;J-UjO ziRoRG2F{rkB>G*WH5SRutU+X}jerK5RwSWFgd;38<;5a^Y)n*u3R&0tq1U&`2w9_4 zFQ}!}Fz3cwNXiG2&e(IY9|lazd0`-@E3aBpNw>i>4Q6m6z4=sAw7v_ksN$ogWU1TP z=wQ-@YCm7cmCAxl(M~|(V2-o61jc?Pf~6l!!SX#aMKPOqvr@9~DYPw$#wT|GiZYRl zUa%z`&_&1e6ZBDW1YB*7k!w zq#tu%hmQx^NJLsWj_^`ysl0zMoR8l{5VW)yVTZT5|H_%%9Pqc~O0XN2YO4db%J*J* zqm8+Qz1fX|nS^x2WXK7fz7av!Da2!1<1QR10M~O6ZomC5QbmoYFTI{OVW%QkBxbQy zv|Yo!_|mUhr?f&4M6Rv-GZsGMC-X3CJ&zVA7Gkv2!Eb-NuAtmc1Lod16`s7YvDM-w zx6<8mmE6*9w&b+hP_9XUw)>FXmh8MbT&5rh6UD}icyqCKnzY37v{p2CyDLu5R<919 z`oSSf7>)U!(quwY&k`UHNr1LBIE`G>3?+*o%$d2Z&{uZ-mb&@gABOsbi}I67PdGN? zyeC{y0u)D^>1p#>bK+VWcd2%B88$NwV1mM)a6dl}#g$kzWE+!w3L@BSeHW9txn@?n zXoZsa^=9<5ZHs^iQmg4^rESL0^-~vN4%B;d&`6|hzk<|~wenr#dr+4H)#?TZS$Bu!RW2rSL2D_98 zX<~4kv?Ei@?})<*U&&{6#U0|zVswEuk!EqAP70nlT+;5-B*9UhEg-ok+poKouMzi_ zGYt_Nmzz>vW=1*mjCtsDMsFeIH{D&VuC(7TxNDi2aP&j-HUkk?soVN~ z8t*fin6CEv5tJ!NA43v0-Ux+DO=QcAdrNXB*m0pAcYUF4u5w*>bn#(EmD;((2&^|% zUgri>(2Bu~`*b#i0cW-lle_g_#Bt6#K&xdbkv8szZ|{3?zm-*QzCaWJpz(8n7b7Wi zxRl;>V4JV9?VBWp7aW9e{NK-chAZwc-;SFfk`*z--$~9%f5+flm3t>04IPnIjWjR$ zNhv_)1nr$Ah8rKbK?q{}7~d{dZwC1Xp1%pJ&prf4%ERH%{!$2|Gr!S5DKhP2@wVXCXhI=w z^*qKwtw;)A=5a?x126WsGd22eM&&{M3RKl$5y}K_I9)`YMg7_x-CuZG4fGc0H6Gnw z`|^MF2ldO5PJbt2?F-IZIa_&oy-6IKIb_6iw(5gqg*r+zuu)-iV$cS&EudxLvb&tK zeobN!{TbW52kN>N%E}5RKe~Je-N-uz%vEWtL?d{y#v*ENfwR5yoJ^hf=#?PN+){lc zb#qYIZgLSmlEof}_eRtREIx+1org5;EKH{R>i$M&X7-z38^N#q6iL~LteYIzO5$zC z+F_W=XubsAI9+=QNS~BT2dL6WJhWM(V*Vn*MoA}J+=i$rpv-}ds2+Pefl*%PG7N|~ zAMrRWf?0=vX%QDlIE7>7T^Wi}I}n%`=yz&35PJs83LZM(hSDmK<(KG`RBO!xOrSiO zY4f>CZw%oiZ$66>S+(+MFriCzrC;B@9rW@^;Al%kpmGym5UK{MxABI8z6ZZ+SD^*O zPFi!t_ypXN_N{y|l|AE>BtbV_C1ai67q#CJg?Y>fT6!s!_9VC8V3PMnaU80v27DT7 z-TiTa1N;DmbG!2-#Mnn?lq}f$;RU@rCb9BC<*JpEuh&2cj1FL@@FlXJ?Q;@XaW>61pKX zZ*4XwrxoU`xo(HVl# z1E@8!KC^VQ!k~B*umxcH(nPD{3;$?T*8cJbVWgHPjh+kTfEF0 zW-|VAQ6`V1zkLei+v*;)H}|ulgFZ&m=2C1)>-n`P+f(YPs2rC=c9gsP&gaclHq9_r z$;k9b;D{P^Q!EU8H1jfA7aI1Kz`MA|mLI1gEW*LJR_@hhHs{6yiLYdQ#76wSsTM2! z2ubj+p3R9ABHnktfmuZ+#k=Rd-sZBY+N5+z=>ZpLh^aI2(cmSv@5R&;o z8_xw5f{cJ@wiV8!HbTxfWFb*kvcmb%x_blA6O{_19*5NWYvc?EN3_2Bi{4zWQPJX= zQU))#S&*C%dh7HP7UHvN1%bAdaiLSCq?LPvV6v3vJRo2rB)huEKUI4yS9837mz?y& z^V+v<(nr#k0rcmtr3agZ+a-*u%idj$-uZ7{&uXOC$xl!*6vX}fjkIy9Jo-c8Ac;Ah&!D@Xjk9jfSWQ| zmmC*km)_XjH0QW8x@g9`Q`h^xY&OdgK&9)M0vo?BrG1%$y==WHK8dlh^gb?S$by`c zz~1Hu1O78H{pX_0mfFqx#e;tM6SZn|PluE1$tFIR8+edk{yN}Qq~Kg0-LI88Z=SXc zRpzzM2EGTOIKf3!BHN2&K1>{xkAkx3L;WHYYC}8PA98?6wf51Do_PF4>T_Q19Khlu zY2xro>mJ%gZz06V1_i5b6TU78L58k}zz^*-M`Y{ryLyjrURBcAlrVqY@lNlQ>yA9U z58j}){^do>#d2hDU%m4*nwqz4JCyIHTO!}C#tY?TU9soeq709N9xSsB_aP?->F6`{n@=6 zmGd!V+*_t;T!%8?o~XfdQ6>lN=Ec9(<5TCOI&(TbM_l=wwrBf^Iy8D3GF?iTzi}ZW zH;C-M8@sHdTbKs198#L?_yoovzFOOzaW@>SmenU&s|=Q8TV1*2AlhE^7WZjuhM)8E zXWhTH_p5`g2Vyt`sz?9z7hD^^rSKG6Mxs1aCXb_D>|*MVf?kU6de1IJPO4;Ao0xX! zjhg3mrJ2h;b3TwsO})1zj?%|Ki3 zugB-`*Qlziykb_m6%5&1Q5W#d{7~9wQn9(oBXTjc4&u*Nrus{JqzvKC4uhuxhCNG4 z(K%|r6J+6w#9XdriR?)GmmEKTK&u*r2Dp;j2UB*a!z*vLzek6vyiNDg_wE=}ZgORw zJWDm!@Tk_he0O6^XOLcngs%9btCCtV=O+GpQq!V;%))pAU|uD|{CvqfKEw)Mx*c@k z%XO9j6O^{^npm1{ui&M{-X?-{KH4Vh`LFqPiqsHWg-w zrnOt7*h*72ym_!`NxTEB@Z|NjKfjs16E4dJ5ES{gR61bqa4?U>Z$2z&OEUv_yY$-B z{HRpnS)+T6$H}ABI3sDe)s4So6w_}REQJOa`BeVeKF^xaD5Qoe_+5;k4VN6~N6-T$ z)ifNn)(_>LO^NurHy3HAEucf8b{Mylz;xzB=Hi(Bn?RZOgr!UA9@7PYm3)FQhSaxH z2L$f-8n|XBg5SWqKw+7g)KoTQ9IL*Om##cq{q7(c^tyJ&+pEw5lMy$C6G;&*vDGmquv0E^WP-p=#|1XEMbO zRyC)0%nPal3w>wL#LHQlh|~S2=D0qoKc8^QM^BJ!vzOfujaIStHSrMCD0Ma_YU2x> zKcfICVA%7a#-6Ez{5{lG`|h3!Wl{8R3dEQe-YTHV%&y&*GdtvL+xWjvs~tj$s}0Nl zbTQWp)`Z{8cL)K@&h+}22WPoI;FWL7?O5V&lF^Rs@kLW>{5(+dVxOISkN>IKQ(h0( zqS&tnliaaM)ci2H@UL?HQ2UJ2$<+74XM2ofqH9dyh?pzs2-ZZqPKAfksK`??^9oZg zWEo2P<|Id(05Brp9e;9EVfumiaxu1&$+U8 zz$D+p=bBOi1Hzju8Hq;0m@OhwLNOUwG~Pf zLZS1^yY4JmitWZo^`tWMT)uoipP{xYPCE-G&w8v8xo%vG&G7{ z;{bIy3@0Yhu7ibwz&hB+Qc!jYE}I#abhzRBT2oG@P0Gj3=4+T<*9E+nd%hKhL)>cbGIj4@g_gGny-RxiL8DhZTiDC?JTpbIzME5gE(`2Bk( z_sPuhnJ{p4u;ZeEWXW`^j0PdUE_Mhr`LJja>5^NP+OLFh$c^jJ4mj(m!7lmqtu6qd(@K z@%4NwfZZ;krO6bS=+BCfOe}VDVTE;o^UkzL=AO8BKAuhme@`d!?`IBin$+nJM4nIl zAwM25a$$I}uzy7A<3DgQ)?d&nX~y#JOHDPDzGQ?gSq2TmBdCQw`Ab#-KMDU`iBNlu zhv#`&(C%LXoVYw%FkH<7;@$Rv2>*ad$+~|4rDWYdnDI}kO-Ycu_F03Cvit5SUn?1l z&aV71av6T*`nTlIfMJ2{UgXEcr8DxX=_j-Dm7J09Q|;NmQ?sU+r2y}4!$~8 z1;UlAl|kTf0PMWE%o0fY^GrXKKTs;LTl5rfE8tpwPro74og3{8{>%;~&j>6-XD`gN z#g|+`SF7`35-Z<^PTYF2>zC;4 zw*uDNHG^4m?Razj(lH5ywvuP?)Xq=lNzogr(r4MFUOsXGjEJGW65jBicpz_N3aQOd z6I=b8r(QD9)i_Asoln3#`eunUI;eX_ zie>YvFVx~1gs}ThKtGU^H|IIqkiBB!;D}mN|C4SjiW|}AL)_2HI^#fqao;Q(kbGJz znh;!Xwq6xQ@m?4luqsihOtn4WU2Qa|vDe9$G~QT}kZ~&$$@c40e3be-r(I!IN^~_H z2@$2f*Q%PalVuU7D@c5Rt4~nf2$j;lamN=1WJI4|+%^X8RlNYQpY4P_SuHCa`bj_3 zq-AK!F+6_+(V`gb3N9EnSI=#v`4?atBA(Q{GvR`Pgea^;)XAh47-cT=$!W7ZYK?Fa^PDk}-drC4zcprcB{xzV9yVyM7c4g89GSZMOdBP*WG}mVcBd$rASvmyT zbASk5*=+y_NXf-sT^UcJaah4HkIR-bftus!&ansP?cs^#Z=#z#Ggi3Kd4Q+XMhg&z zExM6@joSM&7MYc1j0RiZjHs>EF{iB`40)&#T*gJumK;iB(l;4s-=@$K((0q2eo~Tq zo&d0G1`=ZQ$8M>B8>IZoJ-kxit6UTqd-z?>`3-t;@yowIA!Te!{CYsQ+^bbrEc#g; zNYuWM)yEbM7CpEIXi%zb5@j#7+#*ppdC^3d_VC7`D*_CO=#09&{BJitV;otSd9btP z=}yIMJ7wI@HY=4X7A!b(34*tT$b!juV#J(9=HW^_#|2yxEry1AE$GoS=AuAGuei zO3Yp%VVLk)qfQM=N1_K8W^T~j-1TX()97)!Rv4fEghQ{C4J7GmonA6>utO&LSYA4p z$aa1$)N8lVhzB@C41E|9NxA_06wky)-6O_9lpOp5p4YwPjj%SK9|%;SPDVJM!o~3y zH>H_;|8E3&QP6BoF*&wl4?!sX^f5P1wT4|^e_vD2$$~e)ZqbM7kwpdJDzFa5UE4op z)kU8T514l{#Um<6VzeSc}Jx|P`;1ZJL#g>n;yHnvZ9s31Wu4{bt zqif<-ZolIJ^01-xvkGPe%vb>ByQxrvlrM7rOru{$V4i2EBJA7F za6cbPm#81In+`9l6!R6fR;f2ry#bVY&5g=Tyvz~sI)#Oj)-q?EE-8B3ny$eXV@9WXd@pf^XM-J4}?8( zro)Eg4jUz*dL*ByrHVnk`7rL8#hOupbbd&$)0V&8H-bc+W8G}dUxMiw4s{1|D;a@U zU18v-%52EP-s#?`rqn89-&eJs*D~V=Ec>tw*MGS-_~wi6+^bMR@XB}{Ou>(nX1+#} z`3KeT7c5T_$M;EQwS^N~^FhPX(=Nw8jEZ}D-;mw@R;c~bP8#tei1x+)jiTXjGEq*9 zn%cD!V0E8X64*z%^iaY7*zbi zN$D7gB?Px~UTd5~F@lmfz2k2CNx{9DV;$a?V}pO#3S=e?3+i&6$eIO? zOvIW>QhTpwi{nNMmK7iR*)SXWI?3q{K9;8}rQEC6ycB8uxZE?MDZJznRZ6Q7I*U%Y zQZDV{4Kf)yEJ{-@)o~>7Z_a6P$Qj}`zR~oEBw3iYQ*IbZKTj?&+xybR zU`{W{5da`p8+uZG={rjn{j3p!8Ob@fbx$KQ%#i6GihioKL}81ukM!-ipx?L)E!-IU z;Uu;Q*}p`F)3_v=;oG3cewPykFe^sxlG@H5(<4vEbwr(?P#LZvbCO-OI`HY7duhr% zH&3JZBH&{>0yd+Z#5%RO)sqe zm}H6Dk8z4}@5ZNb>l4tN*DN&7HK6X$FZC)JgHX5NrBdMgtV@O3qPOwV3DmsxE1#NS zTSxyh-UMHqaGx5ai-C$oGs*?;${eORmcR-dZ|UQ{J}cILUN1Zt@IqsZtcFaHp!-H2 zKsa(_%}j2xTR(rhDS6_?8U`LL@#2sB%}kI6vFoIk=?82OTYvquUSY$TW2pB6m;Kv@ zPi5yEE^&|DXweSajs=uOeraH-8|xJ-k%O&XV3j@~b6=9+*79g8h&Tdy_uNu23Y(+P z_yOX@ETMzdTUz5D`{NuF_#nrOX03Xt9Nogfk!VU(Gn7we6MC%tvB;t+e6J`o15w}q z!DZ$ya#0KsZH8 zO_Op!KsLF=gzym|>nb~(guOG@;5zwfg$b*-rDgz<6eAg*3U%Hi+iaY`9iHM8e%jEQ zo>#Ziu~M;Ir+(*}1#=<%QrFo*N_um1PN|j1uYFI5zb)H@0Q!gg1z15=_k)u`bnPpZIHMMAmxSod%owQ){McQQ%ee+}N+DOzCPBxdI05ST#T{-Z~ z54Ai{P`XFkS^NbcpjM@(eD8E)$xC>%NFlk{3&gO=Z?` zLAAM6jw)mROV^obk~7=V!oXxy#{%)vR3ztMvU2)cwnAj(-vWCtH`iUR7 z%QALR??>#N)6?pVB(_{94nG2$BKz$}c7=}hEY6{&q3S~L>~Si^e20m|A+4aZTHy1| znrm(#MM{8r^c>QcoW>%Asg*Rog;}ye`|EG%%+dxS12WDc`HWIha`CB3lB<)%k1X*b za|%~G36_5zh31ye!21?OcfZ<4>-8VVM5zk>ux)$PoS!^{GlHig#7vLug0!04#Fklz zA+;|s{>9gZ(?9O^ms5c^^??nHOFOu6^J|sys@1n*=cWruyp@#3$!Y)EuNck5BMM@c zX9kp^HDfUn=|9PwC*<={Ue{UJ>(ni4|VU;CFV0AkHT* zd~S6gbvOWa?SX<@uW_HK+N47+T{X6Kxj$fwrfb}b3``kTr1up*AKMZI%LPAZw*KfaQ-^^ZY=F}L) zZHH}xCxTuqQ_u5U5IE*)OEB4avnGC;CU&mFnO=q|MCa3#-y|sn; zCk|L7zrMiZLivfOf0{I*q)9Q=@6}^fp#n?P2?h@+&Zz|Kc})q#Rh*Dm`kDwUzhaX% znN`iNowbf=>lU?_a^Gwv`MFCd*?a-H$kPaY&FbXI7a@Uqbw3zeq2h(=E3XhyOXW)@ zA^$m6N(;-&?aIZu9WzdqzI*oDciLlL%-hD8lk4;>EkRoP6Pkn2Wi8Q>1>R_{AkMl_ zDy^0CX)PBwQ8ibJlCQ+C3}-_Ylha=~EqyrEai=!dY?88d{sp)=brWT&0*{V{7O;}x zNNq4G#Z+US-RD-^k<#kuZBsk(kC&5o4=;Oy!R6`D65RZTJq~{cJYTA3ngS0x;9YJU z|D~kx^r#xlBQjw0Ubo2vEL|D$1(u+^bgsl3u{sv$5OQ*yY5v-gjFq7)F#^PaKA6X?y^0x>~@YZ zOuny-ud{3CGX!QG`p-Jq1!`k4BDIP^1O)q6I@EYKWAlL^AaRf*A>)iSNf4e~-C7j8 zCXMmq!o_V5>xMePf)rn!smo1eREn+}whuvX1X+-$HccFrBrFS=&iB*Ze7TtHc%&bs z6`77o5TT@az0G@4a_Uu8cdTXS{O#3Y3_BUf*_9O$%r(BOu_ z9a9T^W2j{qsiqBv_BkJaJkFe`uc>?69yf^LOvwSzin`Q@qRp;;CfX507eO{0$N%)%=O}CtMV4+xs_c z5NzwJkTS4vAhSg|M)(-;7d|hk_-9`KCn)Y8ME9R)?!T`WKSkQ{S3ZmJH(4n5U;8Bl zf3Zo@)>o)5bFw}WVJ-A$$i-O9?g6)mQIq=(WRl9w)x!HXl&n;q0xRxVmz-w;0!E00 zoR4)kB;kk*7|x$)LVeZmA{|TqXiBriK?jhoi4rTu{n_HrhJqow6E(NXBnUlI)?z0r zhhxpvSC9Q?+Z3M(#0}9nFN3PCx9IMmAnW9d4F7d_{Hn=)lL?ksX8xaEC-^jPk%#l^ zjdzw2o%@%oG{UzmOPo^FN2yLEO68!?YWLO8b1B8aBC=#Z3PYS@HOM{5#9uT8<`D_|1}aT_7gLt<^lDn^bND3CH>mx zU~Iv%J~p#An|3QRj*r28)OwM7+TN$z>1r2Ps*gGXu4jGI_*A| zy4tc3EKME&5oWAXuaMjyHxmk!&{go33HfHpwdUCN@n6QU>db%8mDbgOiZG#D+U4>4 zpS(Y{qTA5l`O(M*`B)5!!p1!F9_`f8%^&jzRu5FA_Am09wm;uOd=i5AXzkscYf&`w+BX^<`rUf_!=3VPos)vc8dN|0X~7Tr_*s5gmq_9 zjaPQ5{XJ*^9^~W|OFBz55!X0y+m)&WATg}Nk9+4No~utW^g}xRuvg}t3ZRww&E;2v zMguvWn$5?(Sj|`c=*hXJaf35NfaGjUw~|$*qEQUgQZGrDK%?!_^aMcs@EwaHbpZ$y9+BiGWi6v7E}DPZ4;r{$4? zL;O@=1?lwU3b7>u(x5tVu_YI>P~5@f-&eDjk6}6=J2UZmo)xqYNT=h0(NnM1sGBAO zE!kSXZ>g(3Zkw7~+c=yE?Qk&#YnmlH4x0^k1;lfq(6OAYO;ZweFBX_4#NF6HU3#i@ z$f%r;ZvsZ7lbm-+Z{iP#mmk@W&f2Ij;ZDvk3!1=w^_0s=n&;N)U@<-7b4>CSq23}g zy^Z0v*UB?ZBvxdF$5pZNxGI>gj<#@jK&zVZEGd)uLZ)sc;fM59DHe~D=lmN^u2Qt|kI>vQ{S>^enLZ)OQW*C&- zP85d4!CcA3L5ki&AANbvGxX-#G9QOJBlkE|^0|&eTH@1nAwK&X zP0W=QZ`$nR5~REO2{*s(J%x#1TI(2Z!#UeU?|F}HgJlUe9b;>?yk0tR3nyoofohR{ zy=!FmWg3#3J^96uS*B#0F)DxhVN-*8J?_n^ie;r*&3J9tk}oMObvzp`eOL?c+R0rfGaII%gPAabhlWO(bQ2?foN6v<4IT8RI-F* zA*&zhztPUgb4jgrHKXn0zm6Z?E*wbwL2+{`b||TCAL9xk$L7r!yoWnYQjzJIIfK(< zMi*|xCA-*7EA8KI6c~dM`CVar=OLolbFn;B8X$e#dnUL^_#QT1)zF$qHmH1&n!xy! z&$7M$Kt?}h;1b;~vMo;MgdrtTs_jSn^_!AB4F5%p>mK(H?%+4$7bo9+KK(Y#(9)JD z6zjDwRmG|b#WVH8cvsqNhmI#}@kVTElR$5=^)%LCQ(bj&oJxq&Z4G+}__%kga|pbq zr%#}xqbr(VIsPOc2}4;*N-G22IyIpV~LlIGnt`6cASMF=4h(=7hTNzHHbMuRs z_U960E7?T!#Z-f?<&SwU`lj6FrAvHCA>&QEs}M~O|4%%*h_);Yb{lXQBC4q@g$91B z!{`UcAflciru%!mmRO@CwFS?14~Mn)4TM<#)qCYd#neXcHBZHH2&Wz=d=SJZ*d}9$k(w|t7H_IDje!XW4y_w*T3IoOn-Ue_Qf->ZG~(!pgm7FTzr1r8ovfVbSHuzvuSWmRcLxaPuN=_su$tbDv9W*K_S1q~;7gack#y&W+mL^$?l(jQ68Z zQ&(bckViPZNU$_F8jsn#xo4a;OOTm42)aEi(BfUk#QVMbWaQ&6va4h z71N)Cg0L6)Gd%R+E$5zM85CAR{x8T^lfXDJzg%~JQ=db`5`5_&k0}lL&h4+}w0L+# zpYetsdT6Rsiwy#9$D&B?JV31X>rO3qqas>j)eMyno-S!^>bL=ZuxAlyy(S$8N>0B` zUsk?h<*7G($+b+8zD?t_grDjF!gh{_ZImOEpT1AU=wro8ZNq9BKBC|zd5o)3i4&z&Lj+mBRm)sswP=>8a~)bqhgw4QGM#h5o)vP+!j zoTl!68>IIk{P3btH&PG3(^?O!uT(Sy?#EHU(Rrf*GPap~xr^wdq84X=TsMTub~)|8VTq%LVS@H|Fu^HHW-Kv}ecN0+lYulpgd_d7JB_B>di(J3zY0 zq@O6{^0lRpo~)i;zc$%HQ>|C572x?IqwJn&Uf`v^d3+_AuzZ{tCa4!Qmfo-VMWh#! zPBQ&#PJ*TCMxWykFW=w`GU1Jkt+3ZNJ5Yj1F%5 zMW>XXk-Inea>FeURCZfvsc zSMT8P9=(3}eWrOgQsuq6LA{fI+jpH4dUHIrRN**E=UZ=ZnrOfBng06M-B4$L0`UMM zxczW}`QbPMZU%bPbJ@j536D8Do@Pd!dE%%)XsPXjPTsUTrxlwZ?Ua3-gP`JB*!OOI z?mm6Lqv!)$D41_>qetVILOdJsRg!-bBhuCzF3v@A(kFdzXUj0l`Xjo>t`kV}GF2l6 zn;3pcxD%xeueC!>C%`AaUcn6-(u5b(xlM=eBsJu79W{eI35|?)k1T zH=zyiK`qybMPt~HDk6NETQhdJy$!p)YZCA5*J;^eU83TxSUUWivVnsMM{K_k_3_Lo zu6ZHZgZ)gjffr2UY@`=_!+-ms_o@6^J{YAX?A6d&zmcnQ;Pg*I&Q3P!$bk{SYJ zPk9U*Bv0aLp?q*Sbcy_N#{RJ2hPFbHYhi8wwgivV15s-^zGZ|)k7%Pt6Gf1%h@7*0 z{GO|sJkTx#m3nY(!pvZ&Vn1^iB=YqoPS-wTUqQ5DMgKYUd`evWe-(JG8{#}3irK|k zItaSIx~6#XKh(#6mIf;Bna3Lr%EJ$dk6z?L`5*ad|3zW&-vm4T_eACYKmCwqevQh( z`(1=Qc~yuhITzF=*6_+07pR&u*Hh%{!Tk!?A>+fQdXJ^UA%Q1D$Pc)3_9JM~=dhQR zmuHpxlS2J{M5P7fgE1NNgwKnur)hm;`l3V$E$P$>K5lpA7Wpxceo~#zVZQx$iS$yi z(PfS71+Hq&S1fsphvyu*bzR-oU!~C$_8`+>e4>!}spKs7w$9Sv?xcKrUF~|6pM1FP z_DnM}qIRq3hs_9GUAt=hsk3J{(|oveZ2n5dtz@oKKk)|9R?DQB-~1lc7Tx3WAKN(m zfl9K*chfR*-ezd5zH@_*_v2CT8Nk~!GvC15TRwgI#O#T^Q?)!#A2<{n`$BKA1)2$g9i!(tEHZBj2n9=@k8 z@8gm*m3&K}oE*_2CT$nDj&*g+`sSAupS9pQp&L=c+J-rw;v62HPhQ3pa#~h>k(CA= z!?It|jhi*K!76#+jDBRm9{FP|8*|+{mchQ8eaMV4`llIC&aZ&L7lz-1h_Kxqi(5V1CH>TEzAfWEVT@@M%f9 zmHzx-mAlHw#PA|^$ZbDxrQ6bUYPD=)FR$HlV+IAnegAT$?-k$Jh6&On8rU4|wJ8LX zFNztd744I?GvB_#i(0u1JE1R^`HOM{>3zIQAs>hMt!Z1RDj$MZS~4%&OWv%C$RNb{ z1g%+W7qwe4{dJm#MAfVJZqm)+Kbbrk(wAUSSM9gn2KDCXIs6MGqB~(je!mx1CwJSm z84-z4e(N9l^;Tt%!NXf+4mHWv4nw<8{+%#!xs*18GM4_8?!^lRN|5lN`=fR)&VEn+ z7~hrt#V!xfW;=(*XKx=g;AXOsPI16rKC@osAtXe#DAs1c+V^^_Yv|N&{J`lH!NXP~ zwci*0a%lLi9#nYoW8mB;RRA231|*wSz5kxC_Xet zVF0y3BX;8xCO@5GZ~plR=SHn$&CAcI>XbU?c}=&?tGoIQGX}+EnO=^ytQ-hx^gm%k3fOKc*{u zPiButV6LD5Ql~)XMMi&(S6D5Ux=+EP!Unt zw}HrCRGY?eU`ntG+Bxgv;H7TE=fFLVcKfstjhS@eqVIIP5OpupGfeGV1t@!xSMT0G zWL3>sBU6K6-)uVEvhMW)>WKHnDktu$K6#h^>5M%VdkKZJp&}b+06c0%`R8?M?G^W% zMgBo}fQ%N8{7fKzo@XHjqnyeC?I*Scn3DWUq$nXq&jvXXuQcHZ3g^n*Cuifmj)Oe*wF3OauED5e?=Y+$+D9A>Y5I8YDGJzke#S4Gqwd%KEY| zt+`px^^xrXbY;vQy%!&Nt&hadrqn5i8T10-LM+<+c14OKTW!{e>h@W)TyGTQldpWnYDc)*=oT|EY)H{kSQ=7Sn={lz&E@RN2_xb zEIBr#SZ&G%KKFef{ET9pd-|SFz|}w6;0CWZ!7qHpW;5^{`_t9n!}m^9s-Fl53?W8p z7G-!_M;Kd4_R-w>nfqk@!oK3dMJb46yNF3|2+neuOnuqCuByADQe+VS8d)vpb}8uW zk6DXL&QO#5hq{Ds)!a%}O(&C3B1w$N==*c@F_d8{30|B9IQs*@ShyywuN@A5n0Rx* z9OjHY1$xXJPW1PdVgf$_bhw==$O0d@2?YDca24LXLTPhyo+%h&4i?Tm8AM) zn&S`?zdc;<@LTz3a_wWZJsNE&QEt zMU9j`-~9mbdS7?c{Uq2JTzoifgC=$jy*Shej<_FBiFM6r-CndkY?EJ3sGWdLGey?4 z(C?8CpJ|s64b%-n?XmXoH?BHj>mE2QfmZh~uBrINtk?*SI*;|JN`HR;jf)bel%71` zD^!bH9q2))ejAO8r!u4d>*?@^E#IUtISldUaxP9+_}ntZ7khoFOfBZXU;36k!Dzeu zZJ^{8H$2b1^H?WFl-jLN*v+OJ0TzW$K;k{7A*bEG2M^l-r zU!J|QzNpN>}cXxLh8fl<$2#sr?ah=X{&i9>~ciwqx zs-|Z6bN>K}X4k#dbuXZN>LY-l&M(fd-CgtAJwvD z^xsvfvfGiqK=w5CbKP)r7y&5WRXl8EGtGZvZfu#aH7vr_kEA^lvb#Hk6&!Ez3nPj* zO`0dw7z8L4|Hh>!;>Q?^K(@i9r2qFa{=Yx^Kgs<6`F_~}Z8!4*FL6x1UuB4QU9kCIb7m|mTcMC3+{cR*IqvO7ls#)7JoysFt$POR~VTQK2apezepo( zQl2%-6bP1g{*~>Uy-;llJ%nZ3l`m>gViZ!GGJwA|Uu?#DfRM=4+FB}YqoQI-^CvV+{9(BS>( z3CL1p(a(@Hg)sQ&!R9kd3gG8Od z8YpD`Y@T!Z9!6D7a!NXV#r3(%(IjQ$)XLSH%z!u}w3nh`KslC6^m%;Au)sf8JTB;! zR9ZAu2%!$s}tWuc9O1(eZa2nI|RT{_n^2~Y$aeVrfMg8+R>mrK0QT58p zxcA*~;KYYS;*)=y`<6TSxl;1qpm)~Qy0yma&>uB zvwqyV<<(qQ%@kBw!V2Y;#C#;RP&i|r4BLY-7oV5a`Q3d1R7QH{N5BP&ODd>&k@ElH z5MLHkAr%IbHc);f##_64cA)o*sK%wi!c@CY3%32bWnCQ}_fkR3Zsv)t>)Et4Vhz<$ z)ncC2v8FDwmC?B6{W+luZm%eGiDoy4-A(G;yIJXCN4CsJ8_2kjaQiQND|EJ`JiK}- z(!|{sG@HbgdRP7Q9pghntm(FI>i_-(=|~nCN=IaI|2dE4+XnKihb3&iZur{ksW5M{ zP6ojdvVW%2nIA&-mvX00O8C2Dwg~Y>@QEmnBp;>hVY8>QO7uI13|B+hOGn)W7kD3S zL}^_SxHLQ@@AQ!f5MjDv*fg0s>Bc&B1zZY!ksNF1^Lp5x_~z|j@?0G$fuq}Yo(vD2 zQ!E1BBCV($DaJGRytkE_2KbVni$&u1{@eC=UVO||hG)cUShyNCso46zBw(gf_4UtA zz-ggL)7%@oWL;m9Q~e~C=U<5tfP3Sv4sfVC_$|p4Bxp^hVS@$?S2*3vxKqssvCBDqsrbM7-dO(s!kZ=t|Esy6 z{(o&Qw13&Z)Cw*K9{T;QqM;Q3FAux_!SnQYU;TH7yO&5dtIUr%Un|T2M%+{Re z+jPewpP<_Dlbzi;_(|^0kxffgx`<%dJv8NzCBr9!iYTnJ<(cM__meNp5WBAatkq!? z(a?W*RoS$}tu9&n_LtEjEgM(u&jG^kOCLGpA`q$wbzJo-ob4!@VO@6oiOaoQu8g6} z!>|!qSJ#D@PDa+UIyqz%82ETpwUK9q#$g7?gUUO>4wa}^G3EJiD zai2Jn5e!^nMnB3CoD*hgW2IV`QRK-i5Rx_|6kYxv`GNe37qxs%#VCW$`!W$O!1H1A zH?SsMH0^4RC(=CpM7vA1Q>RH|EzLPEfu; z9)q{lFm%!82GMS8Z88upeqBzQQylmJLn0%3Hi*+BdvKK_S%yRyCx}Vi%Kdq-;B|du z)=&0QqV^k(y8bK6oVcR4Ca6pBGsquPhQ|tF74uW9#Eff-_<}}AkhSr54B7@tnsTC5 zMWFwziAohKOa0A>TV;ihELv!n81>H8uhnoQjtWuQOL9pt%B}a27nSsANl}&56BtNE z?{uT^`FJpzwfj3u;WNcI2Yx;$K=&MYg-t-*@|r-?a=2my5cDmBxBRwnPV(GdtoqSU zQOEaLg6#uc;m@DO($4HuDD5ehr<%r6S#ZG~v=HCV;8bR}s^QhL+g*ZdE)HB|R{gQ~g%Yz^;DVgVSc%~;` zR))jJao4lv$kLM~}Ig7W<4Y{6%V1up>ytAEIOWpo(*73=;sdLuO zwIgm^@w6*ZTT?9#pvRE6B7}4ex98zq@-`+_l!4U?xw~o7=2YnW%Le#Uus3`bC*d!J zP)cC5K^1xAO=9g#ODXL8+Ve_gPyu)*q4ye&{cbdMj9zeI$}tTymh2!KFyzj!i|rZL ztVr|J>#1F~eI1!}GF$fhRr;%1+R0P04(lep`p<`?25y{ygPz4WDy47KS3C$ju7784 z(^LP_q2VG0c~g~c0Ebqagc0iYZh$U*o* z-0e>dg8eMzMlk={p}jO>e-6_lcy-u_sedW<+^ehB6U(hg5Lv$Dd7r;*Pg-kA_Kjut z;Rze1)I;5VP@Ti)1*S9iK`L6_ixs?zr-FhMZTm%*s-U)DGOpAHOhr>2&=dRYN3@gQ z=yuMWaiGP?3l=e!h8#(}dY6yT(8M8Np@kR3sFI8pVJH29kNNTHy*-R5d+%Ae2kpBG z3Y%YTk1kU)(DJ|can`4aL9n2z-$?d+4R-6T8izyDyPk`svODLb?aj~Lf$1Heq{GUU zUR%8fkRb?<+TJ>MFG!Tu%7CoWHqfs@XY}v-&Sc)9?XlA+MHh77GDq#amWhIrB_E_?7XI2xAj9g-)%Yx3dj}MT?LJc{rjOgq|f!3<*&KDxD`Gk>_Z7K_0ISmYiF%?DB2xt~c+_@adKb?J@%FcOoP?RLYLP=xNmdrAS@rp!b;)D~WIEGD>H8>MycXNg zkhoXjV8!hOKrw|U#Jnt^f>@eL-#FjI8u@+v7q_Ex(m3pTcZqLg<>#o=J z1ubhR~ZNK=B8fHmFQQ z(Ci#{3lNIfOob$G@bEyfv9U8&Ti^Pyc(TjOtNy7XCV&%cdVavlHMyC2S5Et4S>%7T4z=6UHWN9Lj@{l^Ia}1xL)tTeGh? zCVm&-^YOYWuzbV%`M=9Id|WCGd?x@_@DsiCB36m|%gPOwkWv8;`2ShHSmOEHk+yY% z(Gkl+p7Us)Y{hf<{Y!bJfZo}<)5C62=_O}n7H6#GWn?i;+n&LNn&L8A)NOiKaLV^< z>l7-QU#+{Gy5)cY2hJ{S`P}Yc5^+z-w^Y=cRBfN-%L=I^!_tgw6n~VS?ian8WzG@| z7yOYog^$6D&{bB`>ZrbmY+7=}mY7g;%#4Usf~kMkKmk$Ax0WvOtFNeUJgY-m#FFa{ z#&t>#;A0Z*UMe}YVoXcGQ;l)MG95eP3w#j3R8rZxY;)p&kl;Ss`1QUar7ew1rHR)RvAV+s%mc4@HrI zddtKjF2W@}ABli34rTBmv_^6F?IQT6ktbnB9^u!^4ER4616pGzCaz4sut7pRFceDy(1%z0`Z<&54||5@c*- z!0qa>Kaqdo5<9+o`^S6RkxOiH+hZ4fONA+WmOo{VeN9c*=9~zUwlCk6N#@fwW3;ci z-6{-Xvopb1p&Iff^stw2yGZ73gvFvKn(IwlY-TmC_Am|HCj=)!> zr@XqH#V@=(R**PQ7*A9AQqkb?@WHd_b3Y z!t#3qvX2fO{#|xB*?Wt#ba9SHvrwM>JS+r|$Uy1R#*)N#1kln2Cbket7Q{14+ z$Wv6z8HYdlIxJL+vc*4mED@OVk!&YK9KP>bDze=Zt{G18i$8j_by@fTZ1K4DeVfjF zCsY33xnA!$q81sbZ*ESE=pa*_w)0+VyP$Y)Ep8d_s+j+k1s@AI-}idRSc#|4~~+-l$H*?Poc4y*cahiFPcX6lHS?-cdVa z?NHOTu`E=mj~Xly__A`(S+**XVvu`)oB8g;bbWWLFh>)o)xjC(xNhomS$@H-vLK(v zKfcW6OZfebDr2CQ#Ek2mK&b%n}?S=JP4 zk2+^k1&|tfAW@RfS)!ySQk7vj#QbUHc`a+y&{9eic(3$T^0YCuX0ppt7|eRN8JlG? z&bpJZm^g~lWXd#m;zAMLeqQZ+zz+9$I88(A(aj`=J)Ut?`#5X|<|kPn@R@B3RV~Bk zYr8TdLrm9JAgrkR2I1$;^6(hC$cHL&aE3q;mfsBskqS3FU%M|P;cFVa=bx;yS)mi~ zz;iX2j@mc1m&0wf!j2S|Ss6CnRWUFm^}R0W@^`sbt#(n-%)R?q%A)>(h=;8+<0?Uy zMe4thFaRzf#DR%tI^MyQ$L?fBGSjRa;pv=hO`yg@e6a~P^Yf|ga3;Z5VmT1^1 zaY9SY#)@L9Tm0fn|1McFd5Prf&_=S{=q8_}x_28htecw>?{7sHmTEAVV!!V}LEd!c`UI z&vguzD_u7HnykSm@jF_ERe$AEFbNi;a>u$?6PGy-nhXwhWP?JiX(1QC7w~IOTc2Bk zgXdY#80y=|hP@itJaMu@!!xAR;nxzR%z})MQN3|wK7y5yb74;GO{DZf;8c6#Ei)I8 zVeXaQqMy>z+V^`Owli@jVzm5vZv@H%@rQtI#%n?XM+ z@QcgVd#$N}S8!DMuAWiaZ-#nl&Z+=N4p4&JMf&t}$Gx1A^sJZAirrmy?_C=$#!lQlh>M!;Fs`m8wz7s7xp4WWU40 zh8|w?U|Txtk!qBTD0GrfDuPH7tLpxjlBt&VRX$pOiYk4J>7Ut2A z_t9~Hm^pQsWSo^?eT7eK($9qUE309AO|nDWWhv!SNCH6U<4LjVkd^BziSTMjYFo=-?By814Nh zT#AR-;&|#KXU!F_nNkulyugL=556RRY@^{L(P&I@!Ab_J6hjtZH1B^?3a8+ zO{NjBG@TC3!)Os9*FQ;8P0h9joUY}tDLItT+ALd;eKBLn_TJqZ$9An33XFf4qt2WZ&rC*?Im)7Gi~-p#VSD!);0HE z+KNJJO@WcFcn-cvfzVHdMI7z^?Js`iD&tLz=jv$UiZr-9LbPfwbQfA!aVj@!{^a>K z%eoQU*LNE{t~*)(!uqbEYdOQ3cz0_$<4a)Old`%ZWzU}k!KP3fhsAc?m;d3K#EJ4K zfOZ1Rr48bKmu&T2Ebb2^u(ILv&OyVzk{Xc@fYnQ+W#js6<$PN)H+DAHRbZ>haphMz z@h79<-lYOIrWDgsf0Bifqe&U<2H)Avy|HLDX&PY(DAlFlvVRFY*XfgxfqsI!7)GMEZs}u+F zo21Qm5$^#8T>IA>6A-+${b&6jhlT;aP0wA9mXiaN@zx|q#+3;dq-GbO;K2}~i*qS2EO3L>Ue{I1Kmjs5~qwqda*R^!}#I>H?A0BE2b0O9?- z9fvLue63_+$lfN#JR zkf)N~#MPYlaac{N;fMmbYy(oW*m}xBR8ObVx8^lP-kEMkNVP5Xk1bBQd)zP!J}BwO zn-ztcZ@;ImdW%IoH`PfJKX~fS*NNuZnG%j#hUxGd+HvZ1`&OL)vH__z;v}lDNnhNc zbsn7adPc>0EL9jzt1>v0yVtZJokkt7a;{GgTs16b!aW-E5k$H8ht1S*SwwkmaCcUM zeJn$CJHqCt-$~>90w+5 z4~&|Too)!?sqYlHZ8v)buNHY6PL+wlJ_R1R@YqP>xS2NtSEH0zS2@9M=*#kx~E52Zj;;=YsVZl0=LSBqLtH)J1GDL%m(m}-BW z=6#4!EM%oP9j@-wGUOgH*M?M3Xi{*s^yJqF9$e9OyP&$Z>o2%72W&CuS0qv`D>sfq zLoSE+s{0f<$}yVPY<_%$3Dk_3tjwKUcRU9BIGs0fyZKM1ju-=9YC^_vq|joswmQ&m zx7n)9jM`N61bQ!myyV*Tb!o0XxfG1bRuA3Yx&(U13o^*){Vq=5^!i9=qzZY?Y-lu7 z{wC(IY|j&qlIl$AvSH5GNfiUvtScqnQ=Q3P zG+e^py)L~+h!bNTUVi%6=k7;_tNgv5=V$UQrRwZotEX-LY7}2HA*Al`2oaw>JJ0a& z&`1{7Ta&(GQ;K@o^H2ZwUyt0;|LP|AZ-zRkGn}yr68c$0RsKXU5|oktw$eYWXV&G7Gi4T}ejKfosEHz`T1UI)Gzdwj_DC~%mD9`JboHfJKa-l=rMy!Azs3br zIZRr$>~+#o=hrg$nm=x8Mlk#Uhu0WI zDKFaWt^IRD9P62pE&{{KcmB<f=gjGWL2s`%Hi}s)=CEVTD$*k zctxy6>05vyh2;~SY+c40G10}&t3aDo=LZEuHoHpQ^9tHw!L@0Mk@*R#4*M(}$&(;6 z{i*`{*f~oXJE@BooQd!{JHQhU;u+IlUsoprJl?wf@lmM zE?_Ep@TFRLYJJwF#_g~>cDK3hmi#GRY}CQq^tB70W%boy>$$D+CGJG_oxD!qfuq~W z&Q7eGL1f&Hvsl&|I|IS6tfW-aNm5+i7{X@fO)k)22u6f{t5=>ed5Ankm>O@XkhlMF z38z`xyBxa^Nc7<-(#5Xa`xfsE@MPKh^R3-h*s_7MpOzY@B^j5gD{m(P(BgKSbZ~lF z@3#$C#%And@!0TvwT#+ap(=c)1gj+%02l0kek_qj7;hXz!)i4!U(U|EnNuK!Q?Tg9 z7aXd`jlKk_^t<;Cp3F42op6Jh?y|)rFc$fxd?@F(B}UNAU$7oz>Xbpyu zF2r|yqo)}s+>z6lOFpUALN;yN=HcfpJN_O-ruuW%c6TjqnS?x5vK32xoR*6hM?|ni z*D(*exjo)@i;oCm{iqD;LUIQ*7|cL4orL)s0r{Z%a4!3cBYsf0S*C@29*nm+9`|Wz zMQc##X>5-p(QyfZl#jQ%)6sxJk-)Met;EyVHP*c|sinv!7|e65;lXt~rpt7v)eh=B z+dE8`bhc@o$~7(w_Dg!0ZB8)duoO;f%AtUCLykfY`0MM7zwK@Db;Fkg<$+M0M)?Cr z*)o8~h03o@SGl3_h#W=ard!_v>M`paVk ztP$pZLRWE_(tZY6vl7^ucKK{Yq+7~o87&qz!8SR%8aSJGnzjV&c%F@< zx;6pbhgF9kGF-y|WdHB=7k8bNAG3rU>%LjvFnnF#!6+O?lC*mf|z>xrC;(f|^8gx}-gw z)@7*i2oBEH?4z^BpJ?(U0oH@FMsm0jb{zRE3yVFk6KnI{04-w4yXlHG5|$95(y-F23GXw^upwYKj}jo8PpKoZpTC$c5(Ipm*jAzXsz>mm0yTgsrs5)y>5Ho* z!eCo})aaouPJ84q5hzr$OY}$nQsCE=jVDee z36p?#?PsZtMkzL>W+{IXvNH7oVRjlKf}>)q>Q17hZIj0(xq{|K*(^hgAEM!g_g2Kj zMfRGR0D8rU3`X?DsKm2)ZN$QsuHUc#4sfBXV%_dP!3*C#);b#}wrpSg8S4b9k2s$) zA~g9>f~M^)s_4Ik>70^&FgCG(#xFIucuTZKONL~6Akes!@X!W z#uYgU@~!0ItEu-@V|*mMiclS&th|p8)?NonM~jL2J0>oONm!L^8@(CH&u7z_g2;kT zq2jEaa7hg+qy4lQM=xrr2+jW84lQyz)=isLl!`^_qCV`j)UN)4;|fV>o;k8K=1Wt= z(3Io5LOQ^A;oAHTO>9z1boTd5HH>|#e%w!$hmKc$Vyi-vHVnOi9WR=K`_82kewF>P!S5P6&h|8q z;Iq?EI0c3`jctK5j#rA_3*dKgrc!lKdH^2m#v^-qUmpGVy9urFsg$Zg|Z? zFxbS9Jhx1CZqva3*_BP~$&VRi+RLo`?hJ(N-={P=KK|`L$*S7LovB+T3$#@K3NQ(R z%vX=C0m_1h|0O92c=R3n8yV1NFJeh`7UA=cS2FltkK(icC!P&_x~F|5rh_%fLckFx z_XoX_E+*dxdY$<m(d6tRIEV+0;U$sYx_wdUG$AdNVqWzG6ES?KrI%PQ@ zji`hd>!5vWl0^qEP~>s}w_!SujN7l*w z7>;UNc5K6AnZHwo6rfoD5y+@DSUrTOJ(2Sb3kw?nK8|&5Uzn4wsrm%ecYX=f4838( zt&-=N)oQT=E#rW8p=w43l0KScH%=+rA&m$^CM2p1?EoYIAlJL%iPm``)B!%xY670q zK%Pi5cg#5x9|!^yhe9WO63g$_kCNT>nqa)|_@<8&Em+o;OeM*qlV(!6=`eksI)Cwb1DG2{S)>rr$?ZwlRrCD*7jq5x$B{kz{SGt)W{3;k7kk-<-q=go-( zs+o6VOij+xhf?3~_Oe+FYtCMOOK}`QSh2y-n-4_R9EtD-VZ(#zZT&uHRUZ*yG4HWp zXS+V>tj=hu%AxL7yNR7*x5}MR>zikwq=^UiM6Sr6T`)hPID~Mr*oK~2)_NhA*}RIF z<*xED5S1d>Z=mQO#(P>s;4njTu5?TAl;w0Bm1R_iB|7Wd8Zce+QZ$5^on=SqOjP>| zNEvLt*(jMZmorWPiv*V5WEQ409)P*zV}-}hgc>@2L?ph|(VG5XWzD@6!fmG=boXd| zV&7l`9nV9eP+Y)QD&om9Q zifTSwuiTdZVvI(&h0)$$D8R$+5(0tPeI;6dr9tZ3l%x|YswJIq}>Ty z+Z!v;!cPf~l9VcD_@brwfmY(Z{T*vnSE4@T?P>A6>#A|`evLTo2dbL3DS=U!Cq!HY z0|Clf?PXFZVTQlIR)}pAF{T^J8Zq6Ot~GAZ-ruZ^FKebO`i?}1nOP*W;({5$(n+vi z&Bi@fQ2qv_JtC@;I=Q8!y|iuP2kf3COb^mQ{xe0ZDT7UU1ckhxSG&B~Qs{V&9fM;d zj=@VIcTcAKw1g$Ggw49O^S^lS7;=^;L|9(SSPQ901ii>aa-)A-P|RQ0aj5%zkoe$F zoaQfou`!&0UGr%ja9A`;)Dfi62Tm7#rj+>!1|vqOLE$5Yx21nt_TuCSg5_?ksbfF2lnUMvvc(`>%oN{m}MIlt10D-qdF1KtcPoW+nWwyxBFp$Nw%@J{+Z^|Qcw z2=bUJu+}zhml^ol6q}OslfC~&Ug76HYIp=RWA4U~D}(QsmZO*w9BVsGrrRtV4-t}4 z=|O?u@HZs)iDz~LSO`Mr#w_wh?PF*5wk+23I_(Ahw*#3@hPbPbS|2e49wZu@iORl< zV!n+yem0oRBc$7$NWr2s)wQ#_$>=`L6d3f08b#UJNVQt*e*MhB*5^gOV0_Wobvs%M z#=iHN^GfmPP9d94tD0|WV+B_oAb?M*BMW^Ir#3LCA$xkqW8KZ~6@C}k5Qor6CE?9K zG23-05S-GmoINTwHmXR&!m~oN$A$`_k!Au48vM4ahI5m3T_@ejz?R0mPg8efF3aS3 zUE~N7H6+Z21}~+)k49w60W0exR;`|u&r8!f+zj)>wsO&z1`any&>F5M41oy!CFcqr zQ*D6V0)U-#_kQ@hjsYRl*=ox_++~q>OheBGk5^#m%0@>4=$#w)*>ZVFYM1xy zs66LGL%A&H*d*POKmmIsqln;`znzsAQ>sGCtP`hB5u`Em6Ohx}<#vP05bJ|Dsz>2NIZx*3ni?W<&e$LserK2Yv6X%8x zwq5?da3#N9p?Hb*x8MsMf1pA~0qLifZ~c5DGh)IAmk{HnN9KlkRrKR;R&;=|kG6f) zCE;PVi5`IH=1IaeT(Lvr{%c!SW*i~jkGEd?JOFKy556U7cj6_5lFoGAm@&WlKP2B` zAAOeNOI0>!>5)pjs23Ofr1wY_ROEyGeSV0i_RYX4J6WHGEUrN$_-rsjyt1!3Ww;Qu z<+$zp<0uAV9CT7xkv;lT`ik@5(Nbi8`tTrU*-XU7XP9o+8)I`GtyVwck=j-rP3_4n zP+GTCi+uauD&*WD2|kPh=Wej@t|)&Vttq^B$M=_h3t|}6B_CC_xYrLHLl($FR#gX& z8?{iNC`X1a37~iz?i4dA?oCF<0OVVn;FRAVa=x!nQqU-VeN&KF%+K3^Gy&+DpWPJ@ ze;bUTld{oSJMTDRQ@o2uh^pUA%{n~Zdt8*5sHmuD1le$4Js=~{el_vFb^6$Lb2^Ge!ONe^(D4mDZZyc7MDOqn`5RTK%{=-)MumSr z7}@> zgZy#Mz`JE=Xzdme?eP*ZKcQ4dOV`6Zoj=?}{QbQGmjd>gy-C}ghGh6Vf8HlaZrm8n z|HN^Wj85KmU>Pt7SBSUIX-*c#Qar6OEA zO+rJAN)Y`^CNY|xwAX5|>?GiqDo1cvNNATSQ^fle(fTww#=Eq{;*7r0iDdlCB!$t4 z5Ylwkb=T5{^`e?|n(O{FXRz_`dDy;aVXI<+wfaIIK3=Z0r!RH#Ha)aoquMItDUOH2d)X_4?rCq@`{Fp9#}@-kS?hVjeZ&z!dh$`yUCt|4Kpcv zu)Jmcc#`GS;-FiV4P2@Z*YzbnVE0ip929HSy9^56)!}nHPG<=WXVFHya^eV7;(Qr` z`M0vGd9zT8R<^rhM#=C(sPEjd=D8;}(Q~uIKYD?P!L8FA{rq)<@4v_gTywhCBeGCK z^AQ>xrrCPo1va+6+VSp?Bf+EPmkQ*P#8{J1fH5z|bl z&U|x~u@HM>TM5)S?9zm+g8HdISB3gyHZlE~+pia`@Gj}9(= ziMV%WfACQ{yC8C|kUeCMqD2kNUM+g+6kUEEqwH@MvL^E<#GQOgfyK+I ztasTVL0Txazw*qiu6p5gLk~B)UmKFcW$$Ht)v1#jhX{F-cRh03Ao5c0%Wx{`n z;`;RW*#8=ssE`-3#@BCIEI}rClGU?LN==L-#YJ8BLm8r!6v#>Ut{p#YD6ZOFC54)$=xB@_8r+ z`zq!40Qh|%O|WTk3TAtAi6aWb2ZR-Y8gbS%45#shI?kK=iJef9C-|&vlq=$AA#O=l z`AKY@C!vK+8{g3;40r=wAoZVcj9U#XZXqnzw=Ch1TRh>s)VvFeRkLyjTUGBhM6)-C zasV+WbC5rdG zJtoJ^C4V6Qh+rwQMujs{Ok|qMCeePI3=|f+Hvl=B%=J8&nQWdmexc$lJf!Gs-%agpJgR3oC|AEWlU z^mA5JPnF*=`#jboV!1(0vwe(U;PGcUja-cA2aXfVe+VtDDy1>XRl@3s+3qj@hoqz8SjZaY=-+4ub@cxt7ybVtxigpP=!}SzQ7}~2CVrSY5wBG8 zFMM_0JJFVwm6!0;VVs`ciVhSbn3dBMAs;A2Cq-^|!ku0mN+pjzIf=CC0&1Xq@EHR^nA722ygl@wn2iMXC zTrcC^3NER7cP-($Ti4b6QXyRu)XieOge~y#MLu*71iJgB>Od!H=+6@+trbh1pGfVvFQleFOja{(pO}4&QrUt_0dBn7ib0B z6`mv=2oANfB^ed*`gvWw-PxU7nD_XSb?9)DJFMgQcpkG9x3m1Z{mzZAFW%sHthDo! z9aTi-T9xg6LLBvmI|z_K+>kWJ;WF-E4s!J=e+r$NK(U9$oG}bM&gM zkGIAPtv*E!Q3TEg3k{1|`uY^WJ!Yh)bUTHgmqHGD-k0v((6y^>Wp!Y6lVb+juSe03TSf zkH0vWuS3Waee}T2+ijKv5}vm%hpODBeVXQUU0q79r@O1QBKBtw8D;he#bZ)?GnH9p zm?_+Bh+wo)2OF%TJV(KHa7>TssB|RulPGV=2FulcnWk@Of)DNI%!R zONraM7T$(!0Lm2{(z{e_ZiWrif=3qiNeQ(sH>a!4iBd6h+s_#emPJaKo!3Tc!*ZEP z@u5L-ETV3JY?yPs)d1H&UD`nplwA@)W@u?xF=q?YHz6c?oC5X~g zcFsrz-|4L`rr%FvcCMH%@rQuJ8B{j&pzM`DhVT9If^^E4^8T2$wPLg=d)s+aq$VV; zhnKSoXnxPQVc&%|usWE^*N27l)J$MHykq&u>GLkrPG9P-HD{*a3|w|+dTOTn(8hIq zgMZBL_{Oq-N7k!0X3h0k>nt91lSJN%sZ@+6{mzW2S(Vic7A}RoZGc4=tHg-5wt5SW z2gPhpoMPi=EcUr(ALir527cek!<30Nvh9)OxPEcmWIwbLxW0P780MY%YlX#HVa^}=Ze&Zi2jE5%oB7=6Hl z^4ScVV;vNGlq556TQ}J5xKhi{=8qB|xLtt)r~ozyZ8PsL>xtqm=7!_0k4?8-76Uim~c@1?q?XtHqh8j&yw_6Esb*NgoD#D0!nU`l7 z$yZX#Zl=v+ibCp?Ukjj$>CUR*jYpb5`a3=4n{9v3mz*h)SK%^9r%{2ij+*uRAMy87 zVT*4}99T?ERAd_Y!7G{F&G>g}@*TX7fD0#R-h^8IxEFZgr4cI~!UR`bK#>(v=ak9o zR)dglOUkbg_zZs>Z7cZ&tw{IO#wNgwt^_|_*Xu7fj79_Cz7^AB1-{=Y9jC^4OyuR0W2a;xk0Aul$SKX&jjiMl@utjJL^PL7fX1OQMv{P z>!rQ>%d^fn)d=UiZ0V%y%DjXyK}5$xeW(QazRi(j9p<6s>5RO(T1}?C)VRJCNtNB! zf|VLd(&`#>nrjBPIkY7XoNEe;@zd`g@N`kuM9Z8e+o;26^;OB!py73q#(CGis<*5s z{`(G~JY7>U&$b@WECa1z3ec9g^Io8_K|oPAVY^?hIu5#_)6Q5*O^w2s4F|cR*`k$n zL7k#UNTBM|KAx$v5BMiG@{&@gzGsr03d^}$u-su}IX}0o#^$tC<=}9>VEHW4SxH%u zwP5)Q&+Ir3nJp)7HgvxC8}mQQUQBPl*vMsNyC+YDbTWNjjiC+p9)|pq@GMjq=nQ&i z0&7G_Rli^!W^y5&P^i`ojOWzPrkNNZpA(u9M6L*<9&iJPve164uOw-jcG060c$5$} z-O|1Sz21`DgvJphnd+t1y+EXR3b3C&97*rJzkHuhbX(w?ZGY0jKdhC(WcMB6l3oJr z{<0vf`NCqkVgGRV^`uX)=FtU~YP|H)1$JISOSL2kn+$51jJ-8wvdF(Qrzqx_iHkqY+ z+7J~sIHQGFVh)@FmfyvkNu?2>YfeZmZn@{bvPZfh0qc{A%WLP6b(L%8RX>eKfGHd| z(qE9g2S=c;C`*yn5v^f={?)!+P8=CcQxduD$D~Rm(1^_jyu~jJGfipuEiZnY66&@& z`qcRj0%6NFTy(Ydw&d+q*xiXQ>%Fpo8F_UuTaF(@E>^sW=4um|77s-4t2BL@;({2zLgN$V8Fc^oE59o2LAgWhp`)|y*Y|Qh;?ltys=F!e#lx5} z&Fqy~!=5k#k85?!nsp}q;b#<@bh+dFI6Etfx;A@{_p<&FxvQjl(eJ;r-)4xNP8S3K0xd?hMfi)iw7L$Csj; zuoXuOU?N7Z`0JPirhrs#@IB^qA%kc1wBNwQM+TpFi$wnQGZ$PeRdsSa9OxC>>YG1{ zOxYmL;?H-Zb{q7#bgn*Mc}gi?yXB#=5+9L&+G%sXuaq*GJYNAOCow$(zr@P+P12_V`mHg%cVosK`Xk+whfcv+mo5u;y$F519Rfatu&O zth`II?rzfki3cMev^YV&?{8c5Iy%@K#h`ubsnvRr@I`x`j1rq%l zHIznU8J?W@iJME>!qm`k0_9$p->R;}q$MQ-I{6}9sX!O;2o z=P{Trnl&IK%S_uLoig+1OnFGOz2ZiE6R}fGWM0t9}<`!JcJhP z-S5owInYaIJsBgKz?RvekyqE%chBCv1wvezmsV)F{X35rK2D7?JT$-d`N10=jHaztN7jv0&K)kS@ptmK|rJiMCk&dD7`DagWw-}Z=nkb zQlunw0!V0~N{57U#`CXr*SYK7b=G;g_vPMsoV8{iX6BpqeS3dDf(W>gC8%?KAZJ^MHEu-LajA3Y6uEiA){gPFNCBorGWV zJO;cdwpRs}edVryD(L@4UY6qB8B@RqYcW+KSTFmozYH?d`?UjW@Z=xD33VE0*U)I7(J`;is$b3ky& zehd#)Y#mEqGjEYGbAY(8uDo5;YuV)vb%-f?Cz&k0AyA#k({i|(#VdC9MBy+F@79&wC{bKOPg9b)R;kXTU$-1 zm3yA;aj;wCd2V2eYj_?#@~Dp58~!BGKDuG=`_(T=dn!GBn?KACl{S{(E@K$W_dBfR z^$$0vM=owu%URG=IGNqK5#z_qYm|m?i!fh<$5>7=G@BE1I1L}>rB1=$p^mO2s%Tj# z?RS!HaPMs28BYWx1)1TG^cdR>betRlzw$AtZq$5N6L7_G91l@62TOcA!y(nkCwGN2 zP@x)VEm*|2`YF&HaNL{ z(Cbq;L2-Jqwk_v`0!KvlnC*TQ-SY$WJ<)n}2GM0uHoWV0rNchgt4U4u@jY}3X^Z{U zSV9)wh^D5Cq%Jq$j^jba*MyNh96N6@Vz6nAQE5MIz%~|NHLkm6Os(-O=!oyU$_yoB z)nUnu#W(2lKuPKT-CGAgvq5TE(oq^lQXJVX0=hHuGJm3*w`)yIr*B_2b((R4lk!hY z-w3s{L~k_i`T)Nm#NZegYh?tsAG*KxD-1tQ+-T!>o0N?pmdcAMvpdgN-Mm9@>)%27 z1AP7zZ!Q7bI7LGmLr)IJ<_*@^szqmE-2g`YEFWikJ;s8*wXy}!)yj#n-H2J@nx`$1 zR5uwl^Bw-vPK*={ZTl2P&~0oIu>@~Lc=*WyseijKP~3t3R1*^@O25{*yHfoutUe-8 zE1L7fh+$@DD;xoR@Jzk~W z)tfR8OH*rOFkP;?!QM|46hpmIUWcwz7i+KhyQG!W@U|Dr-?h-?DHnWXKo&QWy0^Z> z63W3GlvmlB1DZ}Iy=-jGT{I9D-*66gUplL(0bl#$OxN*+B0{ILL5}Y&_;t6>)#bMC z4EkR?>py7?A&RmmfAgEWEz%ik4(^-=c}sd0&T=2#7YxLL%IH<`{d$nG{DQ(wnC#&E zE^?CcIdOJo13J3^NgEYqC6HFg!_tsmME~X~rRX6t!axvw5p+C4u+v3%EyQ+HHBImH zya*-A2A82HP%;v6Tjsgu?<}*@Ln2_zOhV*n33vpbNE!1OtBdJzDT7p$wsMem=e~lO z^TOJ|D~D(f=iacBv}FG~z~?=hO(esVk^3E$rqKS*U9UN-)5ZD&gAX-|bxWx2VS;IA z1L7+E35(}8%&Jp~uIuV)2pY)RD(1S%i6ZDHk7M%RDPVu9r5LbIbsh_BF}{m&MW=rs z3K%PoU%GgF*XtiP=D9t>2s74&x~cgF#+%eCa&S_gL}--^t%7SpLO8fgFZ0`3se>S+ zD9BV`c_2$a>)xH)w?9IYm7n+O-Xs}cOP!j0@kCiahM1u0dxyLA*nzEgF23;AU&+Xz zzfiq@y^JGXA8PfH#$~iOA~`H{h13D`jkLR2)?)ON5%v3Cq${{y#TI7W;v!5@!;e;2 zF{BoGM)yT0xv;i@Z^YL;GO4g=pNIv}wqMs4*hTni`aOT zfhrT?(LxU@^aOWHO=9O{+Ub>MTDYb>LN^FVwqgVb`|vkshGx+zIj=1rce+s{^TAz84RGRvyi?ONL<~Ya3t6$#R z+~WQ0fn1dbRW{~L)d$&^P4*{8Q;^6|R=b3nhRRyE>2S?2j0uRhrB~){79XB7Y>A9rUZ;zYTAJ}92FRGXn~eCE_c#oc2u7&gvur@ zk>ZKAL#bbef~4y{cD#H*mSj>qqcu z;4n>v+Lw`|2l3>?&$-xmp>A&xQ2!MhtAK;Ln}mQ)?OHc01kW zO@baDA_7wM#)!xFILQ}lvJAtbz%5~BHi<8rK?wl;@zQ2?FzzeVRTWiiIJf0%SH+Ii3K`87zrN^zxHoTo zVFE68d8#=qf4d(?_Z_Fai3~fhq-BH2K>M~}7Vb#ijQS$!%t*nm%~P8Fi9oB&;c8$Y zi6_+6D57c=eg@>VAt@F(?SkE7#0C?QLya_zW76RrtsFHiL$-&p{Ef1y5&C@LCmf=G zthJ&-hruJRBI*b09Tf$T&?b$@X#?gG)V>0q_r1#??K%g?ZfbVdY5qgcK8=$5fD@4+ zP+*e|GH-4rikK7G<~Q{pnBd3hGBOK;w4|$ItE|9{vRsP|=hocMz2PRtXxu11GYtJjh|<0#+Mn^i#1oE z>V@J|fkKiK1q!L8T~??Zfl;}6`PZd&6c;f74Hi-&rTnq7AjCwkgm))EkOVowWa6To z3!^=zGjD2O)B;_sxi0SpO8Q}{jAU^XSHJ>W9TN>4Nef36Zl22osg;{{rJOZV)iz~k ztJzzXFQY{yZzRHN@g*Cix22{tE{VH6k_X=CO4bcOOBPx78$-=GO!I4%gFCBx@Hoh zCt6}5jNTstKP6@)Q||`NJ9XqLzcdUlKY()^y9fwV^=GlixMLEzwbst>rjTCVC=KNy2jHfp)e>7T+(N|0_pwDZ`|eA3gp_pUOF=%Y(U6$D>b)4qn)@+-_RO z)p_D)%EWQbXX3L8jf|ulvbPUu5vO*mll{5@J0D}n#jf+)>Kprh7c8c4gw94Kacu=2 zE%FVu#qqlhHR@ei81SNy9X27wiE~DO4s)vzQd}nxd?ANwHhn2K>9vc1Adyw#KSkP& zeDn#I$!k~tviIga2*_E8OWR!zS{Yb`{bx$35V>?|%J4nlCpJd)zd!*2j^ma86V%fG z-}nFCbN#0fz)9)jD di7xdY=U_N5FZ9`Q~_vl@uxR&A&w3HSv#jO+yZLw0^U5dNAyR=11(c+Tg?gT9ahvII*AxILE zm-czS_s-mZes|_~-}k;}CX>lI+2`zi*4lfo^;v60e^8bu#G}D`@ZbUAySK6*A3Q)$ zfA9dq9|!CHj1U-C@%{_V^`rdj2UTNq`}aREt)!KtA3Uf|#7CGsy#I~s^j639!GlL` ze?Dj{mJD9^C$Zh$DZRno#(0P=A}X}ChkWn=_4%Eww7Qq!;WECyy8DXMsR~5S)~2wI z_yHIoyddL4gBpBq1JDspD=Jn5O~x27%2>pVMErzcnC5C zZdN*lmG|dFyyVdkJYdkv|M$~`$TVgWVvrVK=lpcl~T&GcsL{{tmWe-5DnhmB)rB1t*U9rF-)xGB^q_ z3wXK$lr*ncfv0cf=QpY|Bz=$(W)YK=~x3d4Vi;GpdB1=dAHJV{C& zIb}RDXn^?MJYb;}kP*1_Y?1Dteh|!ke(xZg|7nGs2`t!;{2>~lcqDfQAHVtCabxc) zaD-JW6btUQt#4{U=>DSsGn0XcV++K3vuK#2ZIhpaxE!hqFrz~zeBE5Jf8fH;`&Uh7 zq$_1CF$mH$=fuok{BuS%o~afsQlT6|{o=1kq7L$glYW!*Y*&xIEd$MLTqQLV=s`{! zM{IlkN?Bcni0R^2=NXV+NJ{_x?g%P;KyKz(Q&xA74l0b)2#{84_V`B!=U(Awba%}e z<$#)jC@jp?C8uY111AypT}0TQ8M*DnGO-=={~hmy04%X9I(>YTwC-4AfEKh`^sj*7 z7QAdqxNlu$u6Pw8}{EY znw=B)yLeL4Wh#Pntnd@@@M1VoZ^au1M#z@8K+2xnGuiW66=t_BTd&Pt#m6IMkCruu zr4stdq%lq-n;swj>I@1j+n-YrL8jW?-*sC+nOJ+!uv$HMn&SQD0YD!t&l*z?F{`sJ(^%=+<#ee0)0%C1tT3EtYq^E4YbH04vV#nwL$=j|4)dWo+-kG|aP% z;knA#ChUMG2Wv+58)WB1)I%g+9j_O#Bc+u|A#OOYPJ?&}j_Dr&Ef-8Pdn~?_CYQyga*InJbIJ>wIM)O&wsz9 z8#~cY*pez{f^0opL*u!DQiYVHMRpDBe=rXmuUL9%?!fV?d#J!i9^tz@u|BkWx-nul z-Ws~jNWe`u@@hCo%S6wEk9%=s;_fXGnQ>|H%1v7y@Q~i#uCH16q=C$^9)R)WUxHyy5i9Z zKD2`jzCLAzzN35?5wgF`C#A(z+%DhyVY8HCkz;H`wts+n@D>(zgb=iyB1hiIvsjwX zz27Z(?(Rc)a0+m~_5HD|`h&|TY%6j5gw%Nq-Kg*KQ}XGT#mGc+}&WfZ)E5+vX@v_pD$7aoz7oIO+5~SU| zRO7d2c)n491;Xw_DjvkHJ7=($)=(d!U-8h!1fSa|LxU^aZ%|Hr%rJSDqd3WTECJ1( zHb=y|KYF6wO6dk_=1gXP0=%9qJ1LOHzrk#Bx}>|x6!y65)soU;Fh;KNy}gC`Fw~0q zsC+{UwC}hi^XRxhOV9xi5HsH_^b|&=tvgdW5~iKI`&Np*E_n1)?IHHiN4D3xHf_RE z?%tz)-f!t+S7YbAJC>{<&8b_rNMUUGu~O%!Aid(K&E#%5r4O6~QeD$4{%4UE)CZyJ zldEcw&7KKQMZ5&+Z;cQrY)1L}YG_)5DU`~cyxM&g6!18JDlvFdb6s0vg(7?;r@O1f zs{%PsvJ#H}l-P8)rg~3=9WA{7LKR!19cvB&NbZz}5%(g9D?8=;L`DpQrP@wuYKFH{ zX8r5tv?3ISm^*S0^&clhNl}U#dUJ(XAM5pwyS}Qs`OccKdUY>fqbFBS%pdH~I^L>b zy9WT5SsRA~9!-ooD`5Uo!aW;wLH?Y0YzBoXE@H>u?19GSBG%(2uAXrlJeNHmQ9B5D zxLf@=F5Xbo6dtJ7tOsda~ zm{aPooJuYDNnujL>W_zX{oO5^rBF^+VU(hFi?~aQzCr2hgM2?&4H*TOmY0cMSE&cw z*%XeQNaLTcc#{v^UXg6AIWiclW&79_eSz@8+Y4-daF=-zDtaZV-}-KS#Cp^_py^%c zepVJgSS?ZM#eniAFeDw&yt6fktJ|MQ>3lG^)zUUs6{=?;6}?x~`~uis){5 zKxH)tEzlcOFq6$9TvjHKicwDDc$4IG5#N_H?PIia)En^$?W#zIbZSBt??KQRL7rr(c}h@68N*3*3sf7x0; znk3#^yz`TPgw?3Z|3e~&af-s{M7ms(PrE4qTQY_Ibf&|vV@R9nS07Rw^3+H~Qm2*Z zDl?k0$8a?Ue9`CQZNw(h4w#eANVr-;$;l>0XcF7i)XznUBMN{}>QFq2y0hn#j>3G~UGb*HuUk$gDze{AA>V%E5@k|rYd)6(=Q;`M0N zR-gkbyI^S|)l3@hj z?LMnR_D46NUJ}ES-7VJyDRqJ-+D-57a!4R;5_QKXcuKVo;^Oq8N2%eLu6g#3JSzZ` z)yU8GA{t1klGNC_uDI){Z7Hlx6&;x9el1}qe%NRJC#N~*l9DL{=fC0Uc7e%ZoOBYU zfNYABO^pbi=ncQI>JF?FWKJ|sS0GZh)w$i*`g6mtV_`V_%?VNN2{^4xrzPM-K&#A4 zWr)qm9%gdCz?sQMJsm`FBmS<(fk}uHdQ<>a zM2j&X=M(E+OWa6v)!9NaPOl$Pqu<^K539}!z#MI3i)=3F*8V5nVk_FzIn)itpB)b=D;fHWJv3X z%9Y3n(cy#G?Jn5%K%!vrcbj+f!7qJzJ3MiURBCbxEa`hmX7vI&E$D&y=oR{dBQO0< zmqS;o1N*ba<<}kjTYUAppNc)9|IFt%NN+h}RM+~(_bX~Vr(32l@1m7fCBGCtQI6HG-nLDLR-5EeLChG zn*L5*%RgeAf>-Rnnwu;y_c2#b;2$7hu;OaXo9aENju%^K&>}8WaKE_`Q;X{?jr_Qt z-*F|C#};YAK`>K*M_op#n?}L?C)xlkm>-8Y*b{l#R zfN+f2SYUMT@F!G=sIOMb_@;ECsAhT9cDh(wRI^zH_?j$6rR<4b!a&cdJaixvpIyXZ zez=hMG_sfgJh4r!xLmq}n@V#&pE1=BB#_1lc<+BR_x?cu3lPEA@*#vQqN6%B-i$EN zMuh;}fd@bS9s2gWQRhO*0A$@y5&>`(?U3sX^OcB6efe07_W2|>3Gg{IlIwbC5*LoyPYj<1PC4teepc%TVsnobj}MQiNK7^(4A$QJ zui6SNRMy;21GQxu%3I-E5ZC~9-dV++<9T!1VW`_Y@=86SZmy^LGH9iN^&5&3AFtG9$#*R=X*>gI_aIw( z4u2;rG{Z&BYv3wBLKL9_=C3My_C(m{?Y-IC@VXMBM_ey(`F+aqED!qKMMT{ho+Bgw z{9)JzFrGYF)9X~4G+X5u#HQD3sikPd3uw>rd0Yvwj zC{LeVPEoa<&UHJ&2lkMjl5naOlppQ@j>J(~ifE*q(1#1mO8Qq}?JoWh{`n1B&8Fp0L;Za^rnvJ z=wPul9?N}jQ|Bzt@9fvKaeCCvy3-+F^`?BbA7v5FE?Eg!(01A=*+lId4NLy0SIxOz z7kz$jR5>ap?ds^3QjRACXqQnZJTIBiF{9? zd%BPm;lMBf-{D7*nCr^kiffx=KFEqr7(G;55Nw|*DYs~KB>q4 zs@1#rUW8k(eI%wr#=PZ$t+u1TIt`U)O{6PS<=Lozu7Cl~*!%IRRz` z>nNQ><*V4=&xd3*tIjyABvx#NK!4{3|FS09)Tra*A}KSVsqPh5|0zJ_;4TD_-R%@v z9vf*4!!a{@wU%w!A8Q;_9dO7GYZ=*!oGqXd=j(GK_hHhMhk{Nj{ksv_eJAh{I5&mX z#dUb#qda4(fRkb#2GOB24}K(%R3cFgL%K}i!PCRX>ngqp#juT(Oa2s?rVY*QT60>Q zvrbt5JO8t~EB%dmN{fx+=b57lk_o-EV$hCYO5_!qWu;Wfn3{jW?~oo1XKhEw{7L8# z3&z@vRolAhBT@tfmwdM9m8CQf^RSbEzq5~cL}baF5)s-mpVMa?rTS+H5(sg&NZPT` zg?j-E+CL=h;y6*irV+7?$aU&{sIbvi1R|6HKd6`B6Q^fxXy(K~{fwB0wFS@!Em`3t zooh-3dT9nG6yCbLmM~0Q6_0$o`5jL=AV>>V=1R-z2sf+NO0#{VNk({5&{_E^Y++zE zQJ<6f3*>sf{smORg)3{-=-ltB5t)#TDwg``U;X*yZh!MNo$k9O8rp%rlhB7{4EAm` z!;lNZ)@KeWcdYr}_8aiht*7x!fGEm*KiiumUq&j|EJsgPHxi~n?@ZNNfU~y9&V&v6 zYeG@1uGJe8$2D>oThX;@BjFj2oVKIZfD(LGsdPArnvtOcX+fCO2 z<@HiAKtprREcJRL%f4yOs{HgB&KF8O0T(=Zt63AI*z>^{?}D_>1V;DplX~Y+a2P9s zZ<++XN+a?u=Qjp@`0-472egX@SyIU8px% zj^z(iWiMV)ZEz(cO3@^;izz+34P(=OKodNt;&gIBA=t(}7Q8M(H?t`*|AN5LQLmKC zaVaMm=m?64ULIG^QTJumx0`<)+uZ^4m4nxQ2{i@z+KD5|ZbLjqfB7Zq(;Xl zP&uvn*L|#ZV_poZ0o;Z%LJYE%pMl{}&sP@izQASie>|%RMij;EQSZzuGZ3`u&2|s7 zTiz^-2F7On;oJ_?|0T%wHn=seIRh7+;ko>2i}4?P^IwthzfYh;+cgpu0t9vZ2HvRJzUQP~A6FfF8UDp>U{T|^W z5V;3yiMU?LAozvn{l4OwfSJM~e=8l;=4L>vd zu%Wr<{L86SyrY`g!CLoA>0f`iiG*@~I{ZAb;7oS>0fLG9q1Xk_T8@n<>AO*qm+MMl z?oIN(hh#{$2)F5764K=|8vU-z3@<7pzzZT@z5%1r>9`)6$XnC5c%iMCzEgL4g09IJ z5q9|p^#uJ{*Thk)R`7ez=D`we>AtLNBfI9mL59XRU7RY39!-1lhHnhA(?YcB%3sWA z%m^49Zn!;ZxIp|tCjn#H1X_!J`6Ft3B6ggX?O&ozW3{_l?vlK=4$7@vHe1TK~lqO{ra^B9i3NiKNhJjl|<=KTg zv_O2Fmo&3;>+J{U+-Mtjojx(5a%U@1+F!92^)^59d2suZV}xG1Z=vD~;qRvvG4xQ@ z&VCJZvh+FS*UiD@7x_86SvK4+>T-qstJhIqv;#D@cS{!yNc#jm*^JBFQK48-{)4a1 zp47+GGW4OioE;9~T&<^3b23>Bi@x_EAoE6xhg0XbcyaWt=*1rBt?L_O@eaOE&rV0Dg^o=y&9ekoMCiFWap9N*+U8TulYHGRu7? zz3>%4CH(FfrMie*`zVq?KiG9}i9X<@PDbixbR!CZV~5xe%XA`%C|-SgUi zdUJ_(X1m=&1c_F3bzJ@(-1cSG>hsAr#fn6H`BlDW!bJ%)?bif~LT(SM5A}nU2BxFt zN4}p_y{e{>`KFpK){pIQekK4mh#zUCr5jViiMDf^j4^ymw`9RDDv_4N%pLlP#ttp}teptN>|I#4}|7V@+` zNK4WqE+BlQ@~!}M_S=xm-EYHx#q|R^Uge1t$5{YacMaCIw|mQ|pOcI~-)YB=)$eb7 zgJMk$wBm$~Im6IZZB4(OgqhvgLXs?&Q4BF4$u_nk3w6Af?PgpmZj@uRtJ$g}bqxr@ zSIQGHaF+U3*3Ew@70q?3>@hs@tp3sZZhR9RS?9jdxMao3yxQo%Na1T%6}^PlkT2P! za9)YZ7&92|H%UdcMBs#cEU6JFfE=hB%L!dKK%SZYTGevxdIA22J{{abfPmeVca^Jp zQs&G^DaysM431O;d3wwHhu3nIB!U)Lesv-r`98|BC;8e88HI02z|_0$smRl=UBla( zg~WlekRGYTZjKZB%Jp``KUio63v>_3H0V6}G=V^spToT|Pp){6*M0~`_8RuWzSt}U zd#$!zklKl~3o2Lj+Bp*)_Ic|7;!E{xMR~ZRoP?xipsk=9{)g1u*UeawT5ItdRo9>z z$A^<~jY6WSA=MKQ{T!h};X94CGiQn6C0SX4CJDIl3Y=Yz?RbXg!SG__pi%ig^lTY7 zlI^5B+Gw7e8zyeXu>#l)HyWe{n0V#NCS`unxbB>xUkWO0U&@{Uxr)S?yuRO%Lq#DT73)ZM+vjI@h@x zIaHkboftW~jZY%LLeXYZJNG7fj@GsHMlN8tS<2L$t7~h6;mFf&qp?Jv#4#CI>0uzn$vUS z%bb!$isD)Q2z=N7jcV!RXwul@-1(-0QFPuH4o?KF4yTNWo5zCNy?kXk>VxK28t8o4 zB^oF$;+W2YtD@d(0t>aTFC_G;on$ov3vK~7D!vRkHbA%`!a3E<`OD11FX=3jb(~HYry;0xs>{^w>eK}Kx3xmW%VL;QPao!{4C9ZAMle-0 zBDIG_xupOJ%#Mk9x;Nj3v`;@1FWEx~x_f?i!v^c|;z@Ta$(OdsD@FmJHPTS%{`)ge z81{z5Xq?p+Mw_Va)$Vh-TXLbMM%=EwXeRg8vQ-w$solia;~11qZmZaD1D;Al7H@N0 zHJMbnm<^ircWFL{w&cKvZLU`yt($ynpP07aBY@va(G7<%^scnVY5K#^In7HlRr~3v z3e&Ny5NM!UfqlQ(`bgO)ecny4ieY@$4<&#Rc1&ros|lLU=I?vgZKLLF~7N5*79GeBK|a+P2t0w->Y`{p$*J2o_T65<{{? zV*gQlA`ln{+Z1HNGYZrqnT ze{-|%`qI02Ce~%0@oKSb<@}hApLZVS(^CI>Jct*5BCt!MENdRJ_`(<_v7^1-#73Vj z|F!zF=R1$|#QrXT%EtA2Y_euC{s->dt)}(R!%6I$UbP4!gh6)q^mm(V<7DrH*SN}A z69a{sU=J6ZwvYTOW+|y;Sum z@v0>csKu8(sgS1&rWJIJ$fcn?dA#dG2boWxj1Sg+2mYI_-W-1{45OHSgvB%MI}^49 za{7AcvfGwhf}UjLgUB%L(4FfwN$7{E8-O$GT!}aTl9ewp4uFeZrhF#DRJ$|nZFnq< zW`)+2s-XwDEn9L>&&pf|T&#^=Qa|3in;p2B>La-k&t-e|$HUzr#s~I><5Oe-ZEsrK zr2T&V7HFTFxAXrVOcYTKk{QK}`t`l-)btG(455?4a#ZicDUr)i z_|1`(;(rpXxap$Iy!&OUBg?Q>wAHjkd(kfuJ@UmAp?J3KWo%BXALX)BDgrakSIG}; zvW44=$~ZRAo+|_a9te&%OB2RABE5{m|n1cvc%8+)Tp;dqCXaRx(Q` z=2tiAO3uLbA<=>Hx{69fiaZA}A3Hk4KW)UMs$4X^vIVpPf_1u3$GZ7N(EdU(E-M>b;OpT9Wt*Wok8+9ALTQla&HNp>Qj?>ysh z;+6nDl$ZAB{?$wkuz`%ncdbw^&E&!&$w)Ky#&FY>8DKZo^pnbEHy=|&3myG)r97@0 z-P2PtgUyP0q7vDE5B%i70{f9oVa)jLhh**Q8qNkpE(UqI6R0MJDL{A~185RbsAoIW ztL|xl#0*Q7s+bqG)U&HTvspRP7u$l{cf{BCyvoJ*q?tDFw0-Vpz^>|7eG>T54iT_8 z!gx%NpXA4mg2r{)uX}=%*KjTqy^bD=zNO>1Wc?qSRaA1(42*881lKqnb;PMe%9^zw zdA$0AnNZgMV5XxqOa&c27d4Rg%LcO;Pu2A@VL183HBt9Bltt6{{zoj!cC*fc;EaLI zW0sy&A5I>MciHV!&BZef)9}Oi_=sVfMCH>@RN+IqEkS`)EnK-jNx~1r#>4Z8f4ViF z4Li5W=g^tnywHgfGTlhlR40msN!g32MJeIWQp13PB!I;HFL}F)$DgTK8Q6mnJmsXo z{qU*qw|c2T-?@+N-^;pH9_Qi}ZAMCRZyO_noIsY zQZs==K%O0|^4pL(N3rf%?86mHqS5|T|1+GK*(t~DCCIAV{R4vTl4M?a-XT9X zgv5x2$jA^dxJX44$C})O-#S~kl*<+VlmPLA?yp( z8;OjqW>!(bEdqdh!DcmQ2Zvu6)>4o*dJFJFj9w78WV$4GU#YLG%+vDZ2-MR+z2GP- z=*1;GITkbrm_tP_A>>3>l-A8@b`lRA;0C8|t4?jzPzD=InR9k5m6wQ>CiSQpRsSve0w8qO@?G(&&==%drJvBP(Vk71uHpy>sSz#6GJAxSkNn2;4xF4r;j4BC z-6&+?)~(W-#Vvc^d*)eU<-|od<3<+&oLExZg_1Ylx{Fl^kab+RCieBXDfQk&uKi(M zz|ht^N@)A>-l;kc+fxV7u}1RVno~K=ne^TH^SgY;#OIPyBd? z8yESgLanM~VZvrPBGseOwAHun)ot!leKi8daQBV-9F+pN+Z*iOvu1B`JgI6aN5|z* z0Ui2WSQQR{|pm;K%eW|C9AxnKc(ip-{Af z(I`|$1WG2!!JF`75&wv`k_?iz;-bVU<2ad|=@un8~S)@1qP;fMcAmQLE6A zc`*t&x-f_WCTlk#-LE=X^C25m^YioN|0YNty9FYPm;~WdqnGEva#$$3Y|4Fd#em@( zvPo54dfYQG>-$TCluhS#%Nu;dobkLuhL3J)~fnNqi-2qbih<8elk=~?* z#T~r|D41j1jjmFw#&pA@>t)=n9(;SpePf-dLIY8=PaQPvN6ViE6l7)9b$W@@69oor zI$NEDHwg^i!YJ%D$Zk&_p%Tuh)5hn)7|#+*E&eFr-#0+!*?mzh&uej5Fqkz#`c$3l z)~Iij%WTo)#_T$;TKC*%Dsw7LWQN{?zacNse7$CD;l)CY?&>>{`SO$nMA~e$JcMNZ zCAehLrJ)Gs^5e}2^f1({UNHyt-Y3sqByHv;Bw%+W$3+AlAbjjQIwNdvWWWW~u<5Nf z6xT<6zG%37pJOjUX+TQXs5jD)w%|-XTiao%4Ez$WCeXZK*2oRHq^lQMc@DnEsuM@- zf`V5zp-`ovnMAOrKG!hfq#QhoJUEz&?dUjwE@){*7N;0Ucy1rexE8Az`Md6GX-Qc5 zxx063*?bp;1uTY@8?gDgL45^|*G~0_F6u1E@Tb#1!X{?+#>lDy)XNenSYd`olfSQR zE(I5LwWKl`i>T+mEFK|dHHx`3G(RZ4^c z|LMowECkigXoJhOtJUaKl0}-7598_R*{;URNNhKQL~04A`mR`dgP}PZ)z_v-^Tles zj%B__BJ4=z_|{x{d9UYe@G{&G@VNHPuBB;b1#fC0(-VQ*$$+-ID&fQ#_9ZIfJ`i=n zqSx{AL}lcZ_w&WXilqmb63=o98wQS>jE?in`p&9kECtAiK5x+F`s=|x{LSbRzTc18 zW9lcyPNLP%jhl8aM{@-)q`nf|TTNVI4P}C8uJt-O4`eKXg14ZOb8-<4GUxB@i}NC0 zsXZ}E=S?Pfj+AK8SZIKM>1NLQ{wkU#4biS!DnEl8G$(VAr|y9cVx}7-b|zRLEwu^I zpv#PdvTYn#2XhE4t&3#iM9WuY0u7e77~&k5j&Llml?{s(yXJ5%luhVAp<_ z2@AFYXA~C4)-f8Su@t#F8R{OiiXYHuGy@9g_@^v-&nZ0A#!|X}a=XA`(6g)KR)v14 zRWr}qb5vfl9*Y-NU2pUmaVt*V+|U_Wg3`o7Wtc;prXhD`&%??`yQ>uSr8=4;1zc@5 z*2nJZQNPrw4-O~@%0-E=Bi9m>-^KcbIv?DK&hqupba`Hya z({tbhT^m)Y*6quN}*hl*RQM&e}Cp=FQV`J3{2-Urx37Q*rrIMjuyMlfB za^XB@OQ=@tLhq-1rUT>ziC$C%i%aDce9PZkl5gMhKXw$3CVvWj^LJ<1X%RrTbYIdl?XEL2^P?5`YrF}~R5I`u(t70) z-!I0b8Yfpce{H#G)dvNVHeH8nE>_JcsBs`rv&ZXx?F z6=*2YB8ZENTk%iPQ1ky1DlLm(;0=)3cZL3l2E+;*Po?YnfH{|qp|qp z^+u_YP#S~RU5Ds>)n4qMr!ObaxOKTXE>jRoUWjACeYzcgc`+j2iPICy#_!|ttTOGP zeuY{uE*NkbP#*7Xp-OHtLfc-GDortL0c3-nXNS$~KQ;uW;j{al2p~*e;o;3Z z{-gSkN;E7*{Fna>JB#>o2uj_n*q*D2<<^GRKC;WH7hQk{f0k{4&v6~51CVudU=zHDACrjH0usT=R z+&bZJy`V24$S#!>Qi_qSI(oS7#j;G2%0q6pTcgFt`_|DCbr+Cj zLdFojxJqGmGdTAX`3je_9yc>BVQt>z>|#aJx-i7@ozF{{TqP(xDdR@%{C!^p`X}e! z(}RH;(mV7T3WEFmE)*K--8<8OM{Kt!3@dfGPd!BNTE_ewLiH>G1E=4d52Z2$ZY6-s zIP3-+|B50EUd$lZW*Pux@F*I@d{0B?_1C4+6)4-M`o-F_op$TxphnG%x_KgVUn!`H zG1G-^DWVKOJxw?sb!#FiLToThiDA( zs#{RZk3ChoGBeN`9%$2!X5+~@p1E4BlahYLOKK!Lg;#n3_$p=67)ho1leDb6!+~#b z-f&=gdQ_mArO2bDj($guMsKb^4LO)Rb>bZLw4p-kVQB*2llF=pA|!F}h1wI@jWW2y z&Ai{XVt#GoSG3igjYRV*c>9avIcf47HWQiun&#J_b%`zVy-)04{e`x@OPrT=%Vs>5 zCVUqNZj4|LfE{g*!;#hLD@Iqwe&~@Auv2wE?>%10RT_NM2z9yu6IwWP(x)oK4*@7#={{U%dE`pN7UhNO zMfe_MCH9d|9j?d!io24}u1$3v z7J>aq_e^E_l|U2Q`O?E)lJ+@T{43cqr;YG66VTg$MiNT%)34V#2q&^J0!S5%3}$?p zeV-@ci5|f-Sh{%>IDHf|_SpESh*LX`X|j?G;S>8RrI847g}}VrkCCs;E8`^lb|oS) zB|*H=jok;1^;vV-nPnqzP@A173&&KdrHOq09U=+YhR5tu9;df;r zaSt1t$#ugVDJH3@(9uBnLWLe}{X*oUA6zl=#~1~tR}h&X|FbBRHhrfKeEp-w`ee-C z*Un^f313A?DihdTTDDTg4_~bXiY3awwYAM8QwvZGcE#}gHl*m&4AXEnC|K8G*;OwqP}+1F_m1gt*prOWDg za7mOCoqcpXv9o5%q?teyFNAc#+kKz7acWfiliP!@Ar(o7+$=Wr!mcK!Ol00{2RkiX zd&l_?%ji`m?~-|4qFz)(3+RQ)_%d6hnI862G(!!(Sz5_FP^RKJ9Yd z+fa?#A{}w6_{5L6^v6Y}He*4EQu5q$q>R<)25hypBsamThDjlD`DX0MPR*O`)r8H+ z0dBK_K_peq6dw2*Nq*eEi<)Wr{+Yg(mk&x{=ygX=fPWCu5NH%Rb8;sH*uS7#Xe{x* zgOxth*If=bs=MsMA4O3XsJ&mC*=F(*=ujACx!*e%VEe^6(*?E{x4St)bwRjGa|gTg zf`MEK45M9>b8~Czk%nF^Gws$ZOb<+0SV%?Ay)oUatHQhRy>X+W9!u}IQM-6#O9Rg^ zCXkdc51YzcuqtfDlCERxF?0BRupEYi)bWAQ*e7?`%9K0CR~h&{X5-p3QZP6>fGx9ZnSG{cn z21LksWM5wPt-pF$OXgKUl?^R-CDn`jU9c)81MT8}@X(JkjE;2yBotufQyUMGGqMi( zEf^EG15hobuA0MXmDc&R)d@Yk@VW~O#-CeYS0L=_Lv7ZMe0cq#C&Ww^ zT{3^u%4Yg+FLn?nsbOJZ5njoOv~39V@%42}Ck~E&zCcF_eM8Zx!gI%9Y)-ifCBzEQoa4Z^)5 z{_PJM%xf(~-t9O>40C)s&>b4CQnY<97q zXs#?)Oz^BsCC{wloF=2Np}>6Yc)b*WWMt*W?jg^SiK-_6w4pE*@)V%Tbcsnq9aa8r zHjj&<nrugYex!Q1A2RFGL&pnY-)^LoU?StE&ND5}qW(kXMQNVTb%S zq}?uT*rnC8{>g9=@@L-XbbId`m8OfH?xry79oAm8nG_^9sc@?0F+{pAd{!*(->wOL zTMdX@ngf{{J)dsF+L!e57S?)hkupihb7`A^rYwDW!4rrn+Pe8k!0=hntlaN6bRUT; zv%XEzf7{WhZL<&H7NojVGDF*OXw2~gck`Z!I~Yf53d z5{Ki)`MUzhvzs&0L#y^E$>5BY*=q3CY@&YSWSn_5IfY8f7b9VnA%^{I=^|fdVnhEK z_n^0i$OV9cQzXuVrHHZ2%6H9;BDK%4;o)qp_hQnVFqN6*K6rbMok7o11w;Wsf3IvR z?y?x)^<(gXm!U|w0sbZ_nHYI%CUM{4vpnmkMHW067DgwEqNdDNCh%>>dZ4t^h|(iS zN$v`xfc&^42okuH@6T}mmSq%AE=deee;SXN*fPYpvQtR=zZ!wp@qt(9&$1&4923wg ze3&__p7+j(uov{*BwCat7;1%SJf)&1;U&ZSJoG+VFSS#Nu8=mxT zhq!u~H0TNqQJ#Dk>Ap96+^|g^PVMQF3bM67efCg#-z)(8q#ePg77r ztrLD$^fo^8IHa^{54!Q1RThrETFjzRzNVA(twlc!M6pMSBHD>3e6yw|y(jdEnprGb z$(+>$e%%qJOA$+n-rB?C#8?zhI61qTVuhycACG=k5N^Z{`*b10_v{%>%{FwY@r^Fd z@w{!))lz^2%TKRVf{vM{!`MODTYXc8qCVzHJw-8ZssRf=h0{a0JZBD{{%W?nkrUp- zRpC^clYN1Qwb&1toIY^w5T<~&!yF}w7)|V=<`b=dC4Ai-ZOInKhG=cP-3->w64pGj zeOVL>(9o{>|*wZxQp-q!Nv1dV-|8+Qd0}DA;#^LW&f&g@xCk<~j#@e-xvotsF{BbEHeKsNhZjx)-G-rdM8;kf(Wmxcr8= zn0cw)TRTkN?2F%19#Wt9ye6#r`Ti+?ao)94RFv6NFCWaUE_@R#O zIA_i3e{bSi)l{-Qmcj`pMsHS#FkYM2c{?hp@#dmQx^-ZDtbsP$nhTDWi%yQ3W{Zj} zPWpd%`^u;&`+i+TN*d{gQ9(MCF6r*>mhNupZVBlSkQlnV1`wpXyN536bMw5F^Zi}4oB+yx_9m7d5PH2Y>s?b*p3)I z?NPqdee31j3c`ls?X30q%)Q$iYX$2@dSmo3`&(BNi;&HM0os3`7R^A*6<}) zRhc6zacOKNOmSO|dKnZdHB{?tZj`{)W0s((fh~u&3{!=$+}M1mt^^7Z>cC_>5qq*S zi}_DIs#@pu&i#FeY83S}wR6FUEwnX8SQBf0IIZB9TIlV!Z3NRZsas*8yRw}~1&1_e zh|=LtZ-*HCpYV1^!kBxy8d^tilRi}ZTY~uJ}MmOh!M7orR z$?8bJ_B$5Xhs@_EXEQp&IFxH5Ivnu&sA(HflXDb{;P@Uuq)}p6P6~K0akAp{K*lB$ ztn_B015E1LBA2qNJPU>b8U(7`7nMMqmK$}t*szdc{*S9SgW8eQo>Neh^QYhZDwi_BdgnoTo#Fg>E6+J)7o@gk#E;c z3(>%k_QSP9Dj%=3wOs01tV6Qot)74nf8fm=e3kkHwpj^qi5ferr9M!$USd8iH)lA5dSM9=SmR<8gth?K{l9Nc&tD`ZkFnc4o+$sjgQjHxMx=u6?x zSTn>5)-l@rGbE?l7B2>&37^(U3nJgXu5W{GwsnllLIk}FG&MtOQ{z)$AZoEI+lBPS z+YPj;;Wc340~jX#5X+HgXiK9@yJuL!X!Z zP^^Fe1T_fJ?Kjczx(IYZG7E2JlZoONPsiuV@8 zZ|Y6V`x-4bKs`S;OH2rv4qZf&D@B$w`$tz4#*Y%+|A;LdhLuXXk`_5%m@yhQ7S(9Tr@l-Z(*w77(lg z?$m+wYxPpeZ~;bJWTa)Oj>Xw6amG_&?zzl;Oq!$&^AxJO(>6q%LsCpFJk6TE?k91v zsuYHq!KU?y9OPwzKjnU3tmpIg{1VkcJM_8%xvCT?7t`3V0}%lS-JY<^q0n&3osT`| zkc|i1W&=&9uc_|Vi(Dc`Q}Kv@+`oai-Qzft+)8gZ=`=ml#!%Nh5(Gy4!Dx7=A2h|W zh-uQsw+6hawx(vQQSqP+#;q8l=wHq(Y#+7{t`2#edY63GeiLkn2;N35U3%IMP`b7j zn`LE1v1@tET`M)~_s{oDF!$^iuLQfmd4695Wy|VZlnmhgwEney*MBGSxvt!E#@`q8 zlR@SJz>8ANw9g8vwstz9^{g>m^;+OFdd^+wyE)&P%Ck&}jqUgwS4VjN9U}Q(#nCwb zr$GF_c!6bqIyedZ%*}D==C%1e(Yv0N)+57HyWlO;lew5VFacz7l80r5o`XU#Gg8mN zAHJO`LDoDMq-26=u*JhYY>3Hoq(~B6mt(e56n*#8em-QsyMc5zYH+Z#X{Ah$mbGEA zeqh0o13~s~n+YiOsV&)VVZ3$GIc|5h<9jNrSHQX?R)Jpg?Z9x*Td4oP`B_qnm8shD$-#Nbyc{w)Mmb zF&Yw}gzu$K)_6bgDAz~2$nKwH+Fz2E9I#n!GE1k(Z!sT?yx&%58)uYP~0pUVm(Ci<3UfUjk=s3_I-T!-TZ?yQXyIfAhLl*W$cn7obG_55m8R-u8J zv~jHnuyIm$ASA4i1T8iwPZo>rVg~=pIkFHw>x}qIr`A*XF%VbhL2|#bjJhnQtJDB(_#>8(yfO zy_Zg(Ahi$u)Rt7X*=qzI4FCDq6p2EX4^Z7@sCW9RYuej%7spetUa8?0QBRwDLuGcK z7os{5H+MTSuzBm#Xp#6Y?vfEDhUaBwOsK{>DAYMb%(kQ6&||MIY@X{^$i>ztlfBTm z!S}!9zA9Q}O}@hXb$f1`Rm8qxIY=g1y!h>D!yYP`9=>L9>+paO)4N!UV1E>zT3&}Y zPW#$@g-m$h+fJ?bKEE4CvAtM+kYnu16gxhqKhEiQ>>cGaBa>ChXRT2?9{2oyT^>#T z<%%)!MXF&jh`klNv{wAyBwUU(bmWtB^et~pGG5`v0*y=2n*31MbWU)Agtz!l<`1`? zwTdy=D@XWYhUrXs=51E|RSvH(E`At!nQ!5|Am&#PX>b$>9A`v_gr=za>ViqGJ0E`O z|JljJP*9X#f+bE1ezkfT>!FTS=_6_JVjHFQIAWcNaPF#q4weoqb1(?1fUZUDvImA zt6e-+tn)9CB5L)>hC}maFWW%8zw8LmT0GTZ>Alq__(*v(V5DudU3=aRw@Lru5}w3hag3-9 zHBoaB>=`7+_ATr^_(6Pky*Vp1=t>of%vj@Gyx&-lYfEF?XEhYWyqqNb$4T{N$B!#0wmY3>S|kV>7Gf-~BDJ9jB# zX7Y&q?`J6T!`qU;f_?hN`^A#pVOyL++J9KR&B;M5hHzLS;ywzh8>QXCyz=2+@$h+Z zmu*DEC5AfVz!I~MMqXjRGTq2C!PyvAxPZ~r<=_pb1VMEVg#N1@Z z3e`aF!GN5U_S~J=BjBuTK|YiA0NQ0qpkN#urB

w9o79NXExIGEIUL05Nne7z z`UnK05uuD=r5LyvrWSgb#>4w!drSGJvn2)fCq)$srSffplH~Xi;mXX)y*WDyxsi2d z!)6r~B?MjjL`OR3@MTXUo%eqM4-7cA1Ba ze`9P}_!;6ac5t=6f`l1*d1|?J-LRN>bX4HMafR18=26=SELHd6NCZp~@)dgNKgihM zZgYC}`?`Zmb&}Rgjcfym(VF){~X%6R0 zLz`;ZHygU&clLHEuOln#)-T4b2q-DlosaUGam!R*nUZ`kEwM!^Ut&X1o~UCc-d{pZ zZ-e6ZGYT@VPRY`nEv-uy(j zi#jrh3pQ{1CDW29FEmzT&bssYiqZ_vZ)4@q}BUX}eq)*_)Lizqri#p=ZJTA03x`*j9y2v`pLs09BV1q}C8x9ehq*Yms}|+;b6p685DxtrH_*mauWjF7V6O~~)C{~l@E(T?ns{eLR;@s}+fn0N)lsNd%&ua`_((ro= zcLqbDS5xx%ai7ux-S+UEx8Hq)Eb!rNs%QmYy<-e7YISJ-stXR1r?jTY{>1bWKx33DIbQr=Z2{%D6CB$Xf zP`-nNQ7vAkYX`i>td4Ec`n}TnQmUYIvb@FS7<>t#TWUZITd0a{rGLqM?y|1u zkSP$ceJjG(tQcQG>xo*Y#kjzB;zL3B7)4uQxyL4@9dJB>4$&?-F zv1pt9u;DbeHUzs9)so+_tGYs5+Bjspnav(}FeB70v!`f&2Jno!T?dWL1^F(`Ju3a7C!d6mt!XN~%v_xu8{9aDp~#=mgc)EinE3 z^0c@G;hDO)o??I(q+D0StM-r(o`IuHsT!~6CRwN_2+pnkuvCZmOHX5!gy1FE(&(H# zl3<=Nsa)0Y7a9RG@0jf`?iAc{On&d$mtmFFOs;dD{e9)5w|v&!hD%fGeD7hGlf10F zq<+gS2P?JT65n*Wp$Np)>jznVFmVyWoOhCWTg4R7QofPx5V11)Di0#M*GmuU2!Sw!Vx*^NQ5fd9 z|L3J|_WJLo@1V0uARaHnxZlTW>2N4sN40ZsFJPXZ0Y|q4e13_cGQo=m6gx6<=j~+b z_dUkULnu@bl#{)Mru0$GJf8XtJrnk&ItaTRC%+J}jvfC}*I_*i?8aHc6bDyQFE2By zpfHBXe=}%66t~xya_ZE%cV*#gw^DRbsRXxq>yK2Q?t)zziG)PeS=)RCgG~=X02KpmB z7?B{o8zTwWu_yoIx;O^T{ee$;#n_@NDgV0|A9IW(2G|{KF!``-gNn1!DfJ3zM*v=G zy7T|GV)I`tivK8C{vS&|+n079UQ@JskOP}x>StxLE%At>NU9{9;?rAN?JvVFfC6Q) z5nZN_`|fhoKihiunnyQUC!mF;_5~(VWlaR4DVmUfip9I+FwxYA>nL1k?u4+ilVVb^ zT2CFYD%umB3vLamUAkA&0JRHT^;3*1Cmikk+E8B~e}gt+=rP&Nqucw|@n#|L#=f@l z!{g{kzW2gZrq<=7WBT#_gSfCVKxyStw|EBU>iIJN@yvyG!2ga)4}v;cxS%rNhHmAB zkZ;ANey&G-c;$i9!h*IjD0F2Y>VJxm}6sC4W;@66SUmcV!ePPL7*W##lRA>eDwUi0f z>SdYz6XY})KOhG&Fss&?qnCB<03)Z(=?_X2+`6K5&S-BvwP|(oWnFk^Uu(^U~BMC3MW?D2F+5*g9YvGnlE{a*LF! zml{8u@ii7nj6$&F)1ovqnPT!8)Ml)Z#iRRo)B3&~YfA~ej`GdF{>GCv%}9C4Q{To6 zx`%-j;@<+@vz7jPKO{o>MrH5mcs*5#_^(yC-V~w=_<{*q(cz!Z${ zO^1RZ8>2JM+9QidS=>#Rh#j|6iOmW%XT|q$!m88{o{^Y4lhlZ+w}y(BjbKeqSz@)n z1hNcWtmJY(6_o>viDn}ohFGE*oisI*_tgVCYUL97*Ln6@Q?1LwPOZR&f;zw%AGjs- z+RX13d6TVMHDjh=w_}_aTm?UYE<7 zV}YYtn<3=MyyMnzD5P#V&mK$!Tu#lOr-EAOjl7un^M&(S6Vt?6Q|_mo#?~t$9Y3+( z>F~50yXhEnM01c@+QQ&2jQ{BkJynjxMi(nCIQXTxJ3fMpGBjs7-2Ec(yU&|jr?F*8u2Nqn zhQFM&0eW{=a=o`Oz4NK~>ITC6rKgMEIq|TyJmc;}xfVSC{PjFk_?tVGArd7l3sGxk z*ZYcDD;8D)IaR9HaE)s5!Y{9svh*{N~958#)gu|sPraB$sDV9B{QaHy`wpBlIz zP56bl4VY#Ib9VOO+xK{>sDq|9+mnh8JbF#fUxMLDsD4Sl9=MD*TKh)h{m|TBJ_+5YTi|>w=ixbF#^Bk2dLU>TjBDuvBp_ia-=f z9tjJGU|KgkC7m00$A;Ftl-+HtHIRE{htEGg zuk@CI*%plv>=^}QX>iM>JRDu}<=oV%Pw_`9_lZ2#`N1r;uUR#(Co4Gh`jv=Ov?tdw zup_;3UntP%QpCs)@FG;3Cz{lqO&_Rzs-tbhNa-0 zoMjM=SCIraPN+DSH$`{@MW!W88r`wZ-cwFi2b%g`d^or@TTytE$}-48(-kHpg6p-& zV2kysruph3I5*2gI@Q2Wjn-;IyPA$?Qjqx|)?tI$O9)@I-e=+_Iefhmn)VcBXB#jS z@1}pC)abqT)40BMR~;&2n74ef52}T3{g>K>;1OYGE5oMKh?&}!Wnp79RVHh-I5B<2 zd$LNejXw27HQOsu4M0#X1ieQ;A;O4~Kvpwy55&dVbJ-rl)kVXzn9Mwg&_of)fd+<_ z1-CiOJMQ6BO5)_C4dB}tf0(}3VADD1qY#Q(5e=&H+#S<#+MapTUTJJ!uxop!>AHe!fB?NW<(M)fM=zHY*{;7IRaj8SF)8YTfb4(Q`w2| zh9*k#+G)J1^YWe#*AtmP?`K4rQeC9Y(lWjEDY3}*t4;IU$oAJpEf=Ugm{uHG7`@|Y zc6h663o0h0O{pvC56PQRYC{85I|LT{9+->pNP+f_vfasHESx8OvVn!HCjS{o5FYDz z>LHD9Y;*mUe~ZqT5BU3x2WE_Mt0qThPL(^omCO;F2S=s*Pw+v3pvvoNRdMSnmAOxr zOQzsPE$M`u-Zc&<4_3xn#g7guJCHciRELNunT$y;2kxpSAO)d8KRa-;nHx6uS(i!a zrezV4MZ5U1Xo@u>g0l)qdym)jq3S$HDI2f!K{=UA8($Tt(DA^(7F49Bhx)RPGEp~x zt5hq0-dgB@oo3{)`3zU;ijkH5_>vMttIAX|R%)(vxKoBcLw?sG0M+Egq(uW1arIiW zGBs}3{C5UwSA!<>VdsZdznwQN_g~{o7(%Cy6+3y;C1J zdYT3;&^DrX@-d_`?%*tdrA4St+w{TIe6}3{O{ODgkfxo%#Y1J#EwPp~iDV>V(EDee z|bxp(MSioixi z6Zw7to3e;DhpOBUzSHVK#c-H!mWN{>ZlK;Xn-C&2z*5SGHHF%4-8c0d2H{$o)Ul-u z5jv@rb>xcPV2RYKf1e3m8hAjV%}AE?-n^g%MZR1|qr(Ebdre zZ!uE~8MJdi)pX}<3Cg;$ElY%U<9 zN?ALQZO=`GVZ}W%)dJ62MjJgi9a0^>fUQ!GN+7zGOuQiSd7U*GuPE%$e4$CUoE>v& zS*NnHQf;HhcU;S_RDXFlRzjKVY+yYTVq~+{-sR{$`Oq?J%dVuv(L~?B`c6>UnB8;r14^8|W91GW>sK9s8dwA}#N~ z8Qy*4LwqgudD(>Z7q($@!m~8>25Iu!0VCP3)*eS$NxTss&kx$u1aiWKIoeS(l0Gn* zyYXKIS%FQ(r&nT*VCaI3I*|)WdGQW60_d)~o zVP0*z*{_XbLa`3wG7U#OW0qrmvvn?XT&$`IvR@2-)hMJiZ@3h_T5j^9B<)R>FtAhG z05S-!Tvwf?A;?tipO@K94HP!mA#>$%I`ZM+w9kTC=uba=z%e8LM$qH(^Y6NiKQ0TP z7Glb@(Yw`WEIZ|&zHG`2Y82PUNx`EV@d92<@8_Eq z!`l;c+PLdhz5|yZmz~<%vuTQH(-5wA*%ifn$v|KQ0vr`|LuwPx?ni@C{U$pLC7$I! z`)c@X0N|Vt(@uE?oSAPNH9Hs$DJX;7EC!uD>?yV(jKYkJ%npuJgS9=Xx|>W?XB4Ot^DJM0yzs3R*_bBZLy6*0ILb79dJ zU(70TLUGe1qQl$w!!7R?yz=H-P77kia7`oiNOfOPSgs_i-o-EwahivpV)y%Qlb%y` zD4!F)-T*}&y`rvW;Wi;ys0W5zmA;;v;l+X8dJsSG<2o>cn+WoK_(GR7Oc>hHAuks?{U~JEoP(@@}*! zpNRB`4yU{D5k5h8m9+`2hl)xh@a$^+xE@r2KbR&N$wp!B{u zZ!$D)!vP4OGARZQORF*ibOdf6QUUT|%R*k52TIJe8KbYN@~S^uXX3M$XKnA<%OlH% ze9%2;X>wSFZ91a5`Umr-f#|;Z)713nCu{U$m;K6svJ;y;(rJ-%{R?DV0T$18AMU(C zgt#mb3nugLz_u05B+sP?V80`96c@Da-a%iJ7!1zXl;d|4IOyUu0d_p zv=eEdIm2{Tc@r*>)EYaC!jV?038~Neb9x9^SZ1+hj$DZs3Egv@x#xs4f?CRJaGXpX zVh^g&w^`ju|xX>DjU-BOb9~F9>yA^g&sXWQb)%a?w znxW^e5-Dr8|H^Q{8Ufa9*QR=l=ZNWZ==`b=IH_s?u(0m(Z(zaf*+>F1#`%YlB#hjB zmE6TzJ1_;iRY<4s$iWA$?)T)5sjXB;paj8Bv!bE0X56EB2)`H`xF-qf#H@ZCGKbj; zUmI-lB>7{Lpj*#+(u+7gO^+S6Nrl|?A%tTcH_&J4g0CpvwH?td!o7Jrs(Z1PVE%Rv z=v6veM|m(TT*!FVhj;WJVY;Jc|B9#Pi2`rd#;kWU)8Q}h0EvNwCo@7Ya^Pm-`qbqD;E`?`TErnD@?>RTkc}FTN{rd`QL1d! z`83_oK%&r^G1w8A^O}QCpMWg}Ec7JR3vA|Tbf!hAybJ-dbuOPrUGzla4*xf^6(O3o-L;c5ikO; zG~9u-9d#BFGD;{in+dvOr6dPL3gFQMcE6=Gf_*5LkSo_q62*NO$z1P7dd?(t4zJIC z5cQK-FO&-fuJuBBf%H0o1mXto^J}4X^8J-c?fJ()lXieb`q_*A{r{R%{C_g;-!)MT z#NjRx$T?wl174EDd2EJ{wpzdi{sQO=j!0U)SD(epN%0%1#AWihfy1GO6h0%w1HP%t zWQn=mo2HEiII?9g6qKHalU%93WFflYj6}!K5GtOlmC%t1YsQfk@U$WNS2@A61yan0&Gu=iryan!Dth{p8 zljZtZ?zu&GHa*-mShqtQwfQO-XRqLd0EjgKrvke&b4J=^@^%RUFqiYCTz`+i0fn7*n><7G3iY@t9IhR50%R;yW|a9loXU~B>4`H|1?(@Z-?YU8WpXV z-dgq=9C`MQ&;zAgUz5=e6dh|mG zv2O89b0zIP~$d{KMMI%?RA5aB_6#>5$_C6BbPM!!Ti3SMd zBC=|m7H-e}=hhjA|Gd)VnA-aF-bM5~E9zG*d8$S?k!!n`%4!z?LMaGx3;({SUa2As z>C3BRv8N2af&x?yW(xaT*i6I0f7h#3wMNQKKNXb80{IM;j ze_ASEd89$i@1Qy?Q2t19GLd;6ld`17L$zcKUVRUfSN3;Rgr98SK);>-gQ6%@Hfa(@E#YD@2)57v?S^A7*V|`YcAK>|B&gZk?QIYBbY9G~&q8?$8BS z13+4I1pa9yl#8m&R~@Pk6HDedgl;a(^`UK`6R`Je-HWLuM}%z2yCn zz$&+-4UNCDq8WBSu1(KEq$PA2CmCP{*}VgYWQB~Wn9JQ?6o4OI44R?{_tD9UkClP6TtQ|DO(?Pc?f9J@ z7x0$2C7;t)z+39X`K{FdAgoHMm8~TH;r5apMXnZig0_NJ%O&?*_^!|7+?}$@k@nj6 z;@(;86DEK4M^wDaSzv-!}74Vm_gFg%6rCFEk_nBadACLcwufDVryh3!2E ze!5?z>(}Lg#dju`X7sh&Wu zUeoJRwZM8g$U@Gv*=~UT+{)Se4VBfZ8}6KaPZPdL+{X{SuNUqG>730#uFtND{wS$h z+mHM?yasp;@Ws zo0t4CipEroU5m5-CI&umrq!Cq6d!A6+rcNR|Z zE=L3l8OCB@{ZNtKgRfXV>*ESE28rw598O*wepJwbvr(@zwRa7Pa3gjLq+mk}_DS=^ zgiZ<{krIY*J_cL+OzX5uws5trT{*j@0T$1uu)iOdN5yw&^Rmj{z161fxzoXkiW}%b z@Nlwz^XARbNl8C2ctZP~TrX5Mfjc>1auV4=mh!f zFAFLkj~&pGE)vc?^m~u0Epn0hGX<~aHBy*rV(LnXZ_!CYHecazBy%D^+yRU7M+@NO z1X;uahB2yNIOAL(lKt9%mG*hTC+9r-Njfik5pw@tbFPl_G)E z8)quFryO;Rq)~pFN)BWwS#@vRS4!N+6Oph>GXP_ug-@f^dg!*oT4qq`-OYbn>V z&&bBskAS)jXO~lX$}_q)#0$%uf=M9_G?%aqoAu)eU0^QsP`5lu#HAK-SBbQsB^B(l zx>5u`HWj7rcWqGM&sM=KRG&}5K7R>j01wWmI;0)uI3jFx^=<8>xg2}$7uKn0ff0YF zj%8hr4z#a-wie}qXHq!-*RdeRE`0j%5MHH9V|>iw5^nb3XIS3S0+m7#*{^?%Lq#@X zCCJ-p=mFp8Sjwp`9|Iq;|4#xXrc!sx0xIaFspeEo20#}0T)`8!^J6QV8u~bW&`hU= zzI!&NDAr zk9AFPf^gZ#rULpTX!V>xBm`Y`_5cNm9ta7y2%Y7ou-o)$Uu8k+TPB0Znoyn)*-m5? zI7qL~+KSA(-*3P7(<)6MT^S|!CuhK930qgq?M1$`dRoR)7&JT;)K~ihht^Y5DbR7f zH=9Vs=ERAxz>l3X<4LDV*_*AWk8vyGfgoj)P%R*{z1J=7bIUbJz>G3bh8Xj>>>z0AbcRQ9*5_nZuj8i|US$i3NkX66*LJV5 zDAz$zzRgR0ZlOR$qD{f*JhQ))w^%0dIqVtnFSpmu$~`@|0h2ba!$0i^j=_rb(~r_- z!8LLl*ke&tXj!KwjewrMN;}+$0}l4u%bce!I%}Ifpd2wlZzJ1n@#y;tH@0y~OVX<= zm6#u?^%IM}7%*h84#_B;9hKFwsouo{+xA)~j-%KzwV;i5{Yn+`5_@BQmvHh~VArql zqISEx#@!k4hdv-c+T)29kMQ_?N-?y+-*>t}`nk^;oj%~G`e|SQR~=u?L3KyVw;RoM z$#roQybOAWW9;kaSnS>+vGRCQJ{80a`eJTCk2t~hJh{8?G2~XOM3DV$g6)bL4I_%jpRej0h zuv)Q(%Zt;$P_M_EWKl^%@Q$eVb8`pcZ>bv~+4GNZ3Pngt^vJjr3-d$S zNcn{-)^nUz&#iU=9Y_U;lE)(%;gd@Uae!qBixS*vUejCA`4V(BIn+IJ(bo-HwAS{; zNMd^{9IE)yqO(~Kwq=Rt->pjyzJD#(m4Mmr#qCWPFW0xPrxVjaY6a!TFlor7E%8Aq zt97AMpR%;Lv{+qAW^yaRf+MYP+qnogo`53!bO?7SnOO9}UA7y%SoTUl2WKUCEv`B? zB|Y%HQfA)?M5Cg?S=cRwv~=Wfr2t{LZ7c=6+M0-k|r&xhYj1}gzoZ!npTk3+8v$$%UB=b8Z=Rx7i)3;Q?g@V@v> zlyn~^LTh$H#x1n z5VtKRZaZ(}+g@ag)LRhE4M`>A;n?OK5b=?Lowi*%IZ^6nwvD=^xl`(&2id-V*LCa2 zK+}khum(3r=X1sjRlKgbfVQI$#T$;6B+O2HymhHJB^K70mFw2x`m0DPtyDi1k7di7NsQt~`~&WBxF{9trK+P%pD>CXjbOWoC&v3% zX>-FS`n{vD`U42+ixZWa9!g%dZ(bEbg^%m`1dT~(dVpg@x%GT!q(p3nl7hky=eO4U zv)x%|xndFTu;oIcz>?JeM1WpC_AK+zC!Kvn!`N23ubnjJvtFrQ#gycjwIiIbm+`;b`?AjDa!aZ{|S%|0{C<4P#sf}#pA8}(uhB2A?zP$aqRMN*XpOt8#* zO#PnOq~f4Em-J{%&EXjG&6VT0O|L)!SMD1LAQ=F+mAC9rTL$l<3cn5W z#r`A=zjuP)=J&i&-!EK}^)DnfZ&BVq<_*bB zK6H9}ZihQint)V~rZ*j>R$7z}V}?ZPe9G(F+r#R*U~A&u)D!2>P+2U;=jq9C)hTQV z8yzXC{0;w0O8{!M|LPac(AunY#dBMu4EVi1`e2FE_1XH;?wVEH3S!Bw#VFT~Q#G-` z_RvWM^}HZ1)}d@3Z=C77J`mfaj?8K2rmGkQJHwQ!!NqIT0OzvwCqwNQcK3luAt0VI zU4*9wjzD)atQRp%J>e$P<#q7lu7NV2Y=o>#fWU#{$I7R=;wmhF5Dos9)caIR`d9kz z5ho5QZamaF(l}+xs|!o7Qb&yleCU^ft*^(Gmb@hsw+J}M?bwAXXWd7?jev;2or3J{r z6MOMt@aMZ&GwFz|u>QhDd3%lDCH-O!lN>*=YkMnFf&dx;hD3_(;9&4(r|P8l8?3P! zPgp;J!=t(r_z$-+6!K4&cvql=@WmeGF& zUi>RXHCEP`svY&8Bf_OR_!C7!mZ!F!Zg*j1D_>S85**6n zr~qefNh*TE3F_$PV?lI)Rc?|&C6GL64m2FsB3o-$KEF$16z-bb{u_v4`Zf3}skdnc zkW5E}>>mIn82HVIb4j?n?4R&!IdEJ*0Iizno4DLM;dw#bmV0DHWpwpAJny}nspjIA3Rh*)dgxO|s| z9To;s=3B%D7!^Z7L$0c=7UrK2|pe5grzz!$+tkHKL{vK@5-Sz58eU9-Y{Q%@QqW{2`7Uc|0O7iE(dw*-JJ zg9|{u>J1aS3+K2L&zNjohi728i7DZBm~{)|xMZ_f&vX#(;pqwgcpP29;AK_WAH!XL zSByu?Y>l)lGY|duN&W5-Gub~?5Gh+(;ryJf$N9W57V7gYg|3*{ouEWf5Fp78)vsp2 zYl?CYTsw?Z$8I-10DUOi(( zenw0v|Bje|0~a7pxc*6;{Ovb({6EJF?VEq~UDvg5CS+xmKa`dOPa6H3f&uc4|I&a1 zz!X{FJ9}=*X~Gc}5h)ULqW=vIaF>FU*61|;$f;w?qK`(ps22s`d7(P<2{w4?gvCm{ z8z${%n>4G}fA@k&l$^iB9Lh-%zkiEXWQAw|F-1ho!FObe8{Cw+zU6%4Jo;l)&%z-I zfFah_f6@KujqW~S!Ynmzcw=Dh=Je*wM;TfElCbfm4gF|MB_Y7_G{Jd2+OQpkml>wG zBW7hi@z=hangZzU(vCQ6Ou9aXuHILLU-b}j^q%A|kWWP-$fOi*0R$+Yi)m^-$`RCuH_2In zo91dF?eY#dcE7b$Ta@Kw{YXiwcgSr^pFK{g6>0dH6vu#T)uDahh>{URzcO2|pf&8x zV*f#cC}z%uc*RC5FuAr2!TaQFo$i~i!k{=mY2OuO+GzI~LJ$s{zdD_=xY#EM$w<69 zAa)tvkI*fNF1BxWY+mo-DzWb|(5AB_LRq-;Vc+KXJrTn1o4*Z!nJ6XY&{fX6so04A z2i*Jh@t8k4>G*oFA#!a-qorW(dVlu<#2bDX8IP-AJtfwmd?f65F};EHEDF;;QJvM^!$O2PNW9m! z*St2k?C2n4Xd$?zw-f)PCB^m-K61P0%`A&2O&x~~K4+LxT=;SdDKBxxQAtPKb%CKs zSrh(FzhvZh$^Zw;i}2JiiSETX-aC5e_>OM1Qrh}yuUdOoMcCNxlq|8}73lYphh&z< zKhl}h7EuPwXZWDeO51F+_cG@*}tFT4|3MKRbN0$sG09CnG_&yM6 zJRMV5eV^Arm0M*zf3RaH!^vbQ`J7cxz+!m-FyTo)ApoZ`-ENf=qqcP+TRLlxYvcE^ z(n|o=gLew2RaZMS&`b}LWjrp`T$=)Nya+}I`=B{JZ`HULs_3rg%Jezr54^x8+ zKfFvIWnSDhdk48sGo}`)*Mw2a=*5_7q-0UTr|E@KfIB|arlI+`_tiD4GvSe_(dlch zK?L=VSPfcN8@TF9qSR2b9hzeFk2^?LmMYyHt1qnGOSUtb_HbxI##Pn+JZkb{+xAdu zR(rmcftV!mFJnD34Yz{^g$Hw&Jcwn_p3ztXdTxc() z?UhrFOt*uTi@vE0l#QSSwPz_|+|%G`o$xgAmi3;hZTe`;WV@mH@)wb6aVyC7d_7YiNR+2P(xqi>nN5_Wls-D|oXSEZN z__|1x8z&Y0+8oc&>a;pf33Ud2@QU|)+w0?3V5vE>aIIXuY%Du0i$EtRhpdGkbrZjDSzN3{j@pFC$udiVZ$LYZ? z53IKrr&4Y>n9V*_XWZb0BVJL~{3^_PxmP||8q}2EVASEu7dh7M{h}LzCs2dGJ+ND4 zi7xe%s~z0O7Z32Y7-X4g%un=%5ppQ0_5Y2yzYL2b>b6GF;1C*jw zcX!v|79>dH?iSn{2=4Cg4!4qb@BQ89%CR5k@TVWTp?cM-s5$=W~M-e%H6ZJ)DEGT`aV@^k!Y$E%@k5EDg2b`s5!f+I@A! zTeJ8kUhL-2um1-<`}WO+*L@uA#XDFkU-g$KehgpHZ?hG>vmo4Z$a;iVb@jfP4W^H0 zEuxCeMi81Pd5Q9V%>!K$YJ=JxCbMEGn`TL@w77sfQ3~tCc!=Bpe#Zqdl$VIF&(BEIo+Qub7^&8Z2QY_Pou5uWJDvM)!8HoYE^nTkwgxT?sOLv9Q$5rcj-(y3cYQf0xMnR&GcD*3@5rzn$^}ooG0vPzI?LTQ|AmcPc9vRUO%ZJ1C*;qZ z@(zGOT-=yowN8%_O17pv((!LHjd{m%Xo2wLx`RyiZwnR7v-3pWsCpNy>IaWy7vPz(v59tke)?jJ!!@tZ5%gY$h$-P`j@ES&R?<~L}(ET)agkiNfmLe$KxNj1Zw0CVKgqAqla6*rtc;{ z3x#A6hU>`hn(tC7W|CPox5`d_?x))i3mvHjqP@QnVO4XS5ADThQv2K=t><7`uE3Ud z$NuSL(usZ@9>BryLUD-+y@sb)vLOtB?kof^FE8t|uM-m!okG-@!^~wnbSCz_E^fZe zM7Uxf>!wm_FIdYPzyDn9kS&ct%Bidg84TdZVB2n(!_4FSDKXfKoLc15I z0+Bs&W-qfS>m=nfX(av%zm#=DH({|9j5sH<3jINlDSH1LN;Akgp2xcF;*kTBn6{n~ zf()=$?Dv6IEuKLF+O6ek&nt>2dqAA)L=iC4#a9^N`e|mzVDmWahtxCLbxBneUR&dz z)>#FHT61Ap-H-X!?bfT1?~XMp#J%?QyS8AlnZ|N1MlCW3t+kT!GKVpK)IFk(6&@73 z`03!oP3>Qg9F&STs9s#0xpkmCfO#>`l=ea_NGuSI_u{HfR?oX~5OZ*vWKK!ljG@gL zhXusZjtsI}iIrj6k8b_!aW(%;DW}f<6ZpqXuVXdR@wB8-kWt;Kd7Ah96FkOE6(g5_ zfSWOITu$pB?fbtff^7cvqMTo<&uaYV`opX8JHTe0N9Iu}&V`E&`0W*!8;IyJ&TW7p z0>OUwe<7I0|Ch}$|FHgEbrh!IWvsT?qBZrWw z=WEpxR$mu~JbfnVF_%0MW{)Ot#0CUa<_YW-evyfa4zDwtN$hWcVO|}X(PA#TEBO6B zWbLn;!Y!=SRHMp0Ug`jj;H=LMF`Tply=kQ9jCjzv?b>qp-9@aEM6X0$ev}Wr^WqNK zKS;7sk%CRo&o2q^Zl(KQsHB%`P6A?zVBlJ3tF^@9saFvfd>eDlf?^Ij#Iz7OS zFv9ltQb9zK?=?Q3gCHbOho5PnWQVZ^;%ilHE!8lf#+Pq6#Fc zrl8|I_A-D?1?=-A{i5s@tdATW&mTynDW~1zB4WM77%2bWGK!=B$tYYQK+$)9@Sm3p z;qx{}w-}XOwtB$^S3OYy!=U5RWApK8Cit&@kS?)W3J}Uo0G^3&{e!a0U;sTPelZuq z_`*kCiu!|rCYt4{@4D>6i#y^}qmA;_sjIzwRu9sKKBB(S<2x!kgQey~58m7Y*#e`L z4AYsN_3b$kZ-D#l1)zz+v+hMj$%>1v!Hz`eg%$y(8=P*GJ4Z!~@o&vmy8YjWOj!3| zf4R0q%K#`Ju7|x}I_F!h1}umpS!({8SXP}`{D@(wDKw05f_hI4SO6W1>3=nT!&i~< zyFBPTG%Pb*XB5Hk=7&Np)?{_^NOhUo>2up=W1d#bo3%S64?!7?Usq^ioU7J|7k^DF zX1KSx?1;~9&3{ETh4dLjcl@`tBqMr-$sK;6TM-Rq<@FMlrH$BFsOY)$O{_*^Deq2$ zJYXz&8h!c443QOItW)50*rg4y!CNKE4zu_Cp>B>n^X<~;sB7+LvsGir2S8qnx?`i9 zqZl}N$E7b9ypRM+rbtB`QaB`C_{+f~09=1h$N||d;vmyO;%Bdv(BnEJc)-Mj;}@a} z+8tF=42s{XlFkI3`G?@T+O>fsdM$Ow{c0vkEF+-u3zT-lMDrU`oG+N8UyH_Wj_B&S zjkw&ytRDVT5jH#k{6>^=n0_uzTD&zyd;56}kns}HdW7SyYsJt=#6C{45!O)ghJQD2 zvzTAyjRo4^oQ;k4cwg&|gMS<^hVK=Jj4km$UY}{ylW8l#cg9qm1QN zeIefJ%PTDVO^uty;GY7hSkWy^^wUW`)E5A(64oV66(>+#yvMglQaQjfKoVztV(#53 z5##3y7VO!dxQqXId{ZhLb62*Jja*t>j7xi5<(UZ+lv6W>)j%hzhIgvWbUIs;C}lo5 zrYgJX-2-)R@EQ(AryrOJi>r$P!N3v90%NTQ=-6_ZkAI>$^GU-m+{YZNr(0=YB_;6v zq}cjvgA3D|qRRL7v)5=NOTuQW&|PGXen*6qebh;6B(9(QNSlGS`?a#6;o(vPu(_Up z#F&XOf~7GTQT`ac$vd|VHHQAiR$q%gg&1%AW9rjy>UZ3vd*^TL)_l(*{on)S3j5c! zERO3+ZdO!Uz+a1n7++T}Ex*=PSm=Rov`#fG5;!+?`6|H>{AE)#X7Sf=joxrepY&rN z(rKal@vo&y@12dBHOtwyk0UlpQ-@5aRQKih{4qQUGkulQrBmmx;FaK0w-e@h*~UG= z3m8joy!S^+ev9FWNxFyNX6;BND6q`{mI*UHRC=LnEB>$=zLf(T2mBbEYL~B# zzcoSt#`08q*!joLib(`-iMlEjIfgI5nt=b|!&_74XP$c*(F+FmugrQdl)BxOt;y$o zhc-OH^Aa382VD10que!>&bKr@QFz-LwNModKL|$7K=}H>$*4LiE4st+#mZ3G6Jg?E zMB%W@NP9BU0T4_00_f3ER{T=?!Ii;CGn@hssmk7&zCWeEok6CmEWZ@mR<)KkR+Iir zh%6K9p27PWAR3WWowu9274FyTUhSYa@&IFVCo^THVn1SH)_mf&`-!0k!uNe?P)A56 zXCm&uF}mFq+6cIe zK)F7|H%<;D=>0y&p@a~Y^o9eQN{QCv=i&W!J-x~!29gEIs5)m2oV3M_0gaTx#^`vT z;og~0j6F~~Xb&V9kywroek=rGLamF9WT}NOUnAJ<38B|sipU3Bn_=|FB=4_FN5Ew({aC4*CDP9e+Cv;+e&C6+ z*31B9aeR`_G^oNIEf+dxYs52hS4p+wMetJ44oZ>}9HOgLTc=35$c_G3FUK^^U}-ti z%}IlurTuZ+%GhZSj~N>jCFMa~N>`*hDBi5YpWV#}-K8CO+XB~U9{d`{kJld31K~^M zKUd^S7KDFhn*G^Y1lz&Gf{Xn2&s7g(FZbfcoORs7x8LZvC$E@Xw$g;-7w&6)LN%vz z>aT7&AyaXDDrV_43jxpNhO97#O)nC&Xf0kO0yJmNtTvjGrKr+en+FNycUuob#XO)? zE52jlQi?ksWi;oQUswuKITIy(N)^(ot2Ph}sA`*eURHU^JSr8yOmHf1SwUIZv97UE zy#ruW0#m(ru|0fXV`PMHRqJ0=Qep)E&#F5&!ixDXt?VN><)4>#Zjs@CeGpFY&$~OE z*7X0*KREi~Fvo8L%}Sk^L$mg1QHHUd&~vk^5)rR3HXEJ^M`hO^Z2BxH&;@- z69Rwz!$XZcnj=3ZhG;N>3`l6Bhh8RYgXn9Appg7wpFmmn0vxyc4Q{}Cx#7}JPKulz zL;;>7B3cJ6+ds~m^1mYu^?RLP)4l&JbNlYTgY4ZF%%EAUWB4?*ooerZG8w5 z)9T@28^PLcji7lu_l%@Zvp(8KnFJCjwv(LDL1jgC%e7inuWj)81qJsAZ=)V7QMd;r zCQd!LW;ZGOrc}e;m`ThrY?-x%68VwRb(~F?c6dIP@a{hyk(uHf9pbRBnJxvhh9h{~d%N|uO#0Y+J^xhnM zi1w28u)!63K|S2Jw!Dp7p~9`fntq?pWBjvgksJNC+ODt)!)`da4)JAb(s}r1 z<6IhJ%As}raY$9ESJR&9ogs_!XTtinjnzm)3IA6#^weK6nP(|n1<^v|ry*gFRZg?v z3H{g72{p9Kc5={JFbRv*=1;DrXK%7L&dt*-K1@12K4jeK#LPIs@veTEnoj9zm1AsI z@;7;e-+T#*V5Vjx^?ABOp-*qY=yw#mm_q323o?i?)E%Uy&wj-M3222}+?$+v!u7l= zN2VJrNy3}q8aAa+yIhf9>vBKRs+K>a+o3`FGs3$4CY{u^F5u-32eJLZ!7|;Ayk+;< z3Wjm~bO>3uH@wz{VsHF5sl7H$m}ArYs%Tj6s^OvgPz2ZwLcPf(U{sAyM1p^5PAX|z z7RM)YPHWdu&QKY`#jk1Pe}65tfAx?i;)g z^EGfyv`Jq%P;c0b4=hxf7xi7olYpOVH|Azy<%00)Zk0ge9)A7$w)c@%29K%m5PVoT zE#Aw;SgCBLhRW3SMSOgnW(Ag>rQnnS*Dw3+SFh1`k#-P{MuAbHFShBLu+Qh9fq~EA zmlZW(w1?kKKQSoZ%-+EC49G;cuu1AD%@{4XgGIHuM0&>vXzr?#S$mP#*A%=x=-+G8>@J;U4L=?#J^|b`g@JDBp*==Q5-C_03+NI0-eNRdj zp9fvi807PVjuErFAyif-2mUv~P@`;Un2<2LuygZvKO`y^&5?wsW&CU1ChVB+9oWLV zU#d>-MF-@uHwBhs#H53Nd}e_z{5ci%2c!?HL2`ooQN6E(e)}wk@`}}8-sUH|sXnil zLk?3-T0EWgR6BWHoqNJt+i-f$qq$O6mFxZY)=N0mZ|nN1NeK`ctCW|)U@tw}JpbG! z;zurmsUph~AAQS`XeVyQ75z#nSQLomj|Ci9)_p- zZk39PMKPs1=dhKs3j*Qp$K>}|+HvI21*{&^wNd8o6TbU3rI!N-XKx6^6QAoM8(^<) zETlM_QkZ9)`LtuolAo#!e`uk;|A;$$S01)={NC4Ob()>hn?A+Qr_ur4eBL%tJLK+Z zJ7Tk7;VyhLO)W7%YFU?i=~DKKP6&Zahn#>B#w!YcG4lHrc1)OS3mUsA^>cuZn$@Tu zdDn{3LML5SN{-+*dD6A1WsKuWw9vu&0U?nKcW@;UP3(#JIsTZPw{t#@nwT+D)6&ns zt}KJ#BYviDMrv8-pIF;;ZvtP%AakTo(Dz5iYsY)`gvSUb)9p-+afg}SE;;YfS^WuZ z%-*H`Ql8HAtM=&Pd3?A2J<)(QfWpB|$LYvQQ-3)N6?f`s29^Cpnb{a#YbRDCmq#-w z9-Zv!8~Dx2NIXs$xokPF0(&!9E^9uQXND_ay))D6NKnXfl)7|x=sF~9v5Nhk=YC+M zlpo9b=^JxNWm~t5BK+txaiA_o?b%G+C$-abe4FR>=~Q4&Cb~ccdeqs)678b$&B5i` z9M)R_9sEK|%wWZoR}d{KRNg6FXRAuZT5s#RIgbvEok*PiVG%}qXQn2--|zbbO2@j| zM5RSmRzq)soWmi)rGcMwA8SgRIc`MY*^{0X2-paUYRTo7$B(;Y);0~_2T*8O9avO+ z*Alaq542eUn`QF9d~@)J{0>6>GQ(G{0v@&2&3c9{HM<{ za%2Hp1_2W{HieNI`-J2Ct}u?Rh>|Lc_p1X&n^@#zYPEVQmuZ=307!b zn5ekUo2|aBfj?&=v9aZ^9Dz&I*oRBOExo`aGI!IhZ+r=U0>>>!M`U7ra?`vL$-H8< z=Vxt+5K7g+nHyT85yGhnI%3}R(JqH0&_1{+?gB%4u~Xr0T6RXrc*%I6-McIcn;|nS zBT<`k@cO3jqK-=5`=a!o5$=Nj>pD z(q?(I6JB3Ws|)(D+yp9#lAw;6^U=+E{DfDL&gxuvaPG<9U8in4_C$Mim)c~!_nSU)0mz1a5o7ct%%%pdB|+8wTGdVqO;o&qx$&kTbK$O_pQqP zLolDZf2EK%Oc1;)AJoFoU}WwS5i2qdJjT0L1**l%`-SpB2vNP9z~?{O&z&}>-cjPq zfnL!e%|z2%m2mAlT>aj}$z6?2j8#>mFUO$g=mTtx zYOoUCP8pkiHGwZX6cXG|&LFU8%(6Ay%w#6N3@KtRCU6eb{9HXMi z@K!fXKf{T)`GYdPpeL?&)rWuiGGTjvVRGG2HKFM=Zs+9WG@_5`1eX^OeoEkFymw}& z7_+nQIq63#!YPfoq6(PlJsJ_oxD#1Te!aFeXTJ3G>Uk)W=EMz8VF=S z2hNcp$wX}x1eO>W*L;@$VR`)5%Q7C@Uoq>Hg=c15j-C@4=giE3+A`60x!Q+0VCZj|k(B|o=1o&$n_TFY}osqgWDHk~wgDX4g|Q3iVBr;d-P8i^(5Y<8Xta0B-eH;dGW~PxiOlchy2x7=((9 zg`*{X-28pJ*v=yyGn`JFiu@2^%SXp&F(BK8+77wq0*>Eo>fO>r%8A_wia_0LNPbls zlO&lAVN0?4Mw=Z(on6sYm4YFW9UnAknDWV-nNfQJ$~0e&tS3v}FC_(E+sy)xPjCM` ze9pR;&2{U=8VD|m&9DYrI`CCF({?`m~K=Ur)j z6G_`6s9gHHl^ZUFDkP|*=VGMGyzpZry~F|@v7I%V&!8ROcf4%o)NEX-9&h_|@v zMMSu>GUF$xwfk?g^{w4_v$zAITnrr-@$|SV#|~1yfz{P$8&5YR9~JtQ3cf%W0i&M; z<-j^uld!T$eEArE1Jt% zwpwIg?*_%)`8~(dC3L`u?e#iGiqJ-6*_=8nPJ^C6=&>kwiv25Ak@?&4my0qpb%ok8lR( zz&uYV|AmD(Hi22Utt$n;nnfOB6BNzpwMe5KK2@=^oyA#&Nfg^qZjV9_WK64{%BrR~_{VoefYPTc#to@}f6P!dMoE9j z&Rj>OpvTL0Qh?q(+@sl;yH1EhS>PHMhxg)XCwneLv2#D#zM0quXke7BW3-}s*L_!z zewJy2W((rX$!;uUl7m)d9RNwMj_R8SoTf$Lxja$nYIEUq+XDV0BcJaL#ADqa@u#5% z1R}eR-K%GN(G;0H0%N2^h8X&aUVKvhCN@s@T?lO#@I~7ao1wO#(|e;7SBQB%1374E%?fU$t{m02B*8^>H&s$xR17Wgf%7r-#pxR<2>4z zwuk381x&<t^?opHRn11;k6yCeBoZ$#!wfm!?WRB zMt~LDvESFj;+!PblkTrS^m8{|Grxa-6O48|xBKC3cH91pN$=Vs(;(u=#TxG{8406^ zb4C{Ng(i})E)1JiCD4Xzs;b75ar?z2NnN1DZ!DYOjXXVW|9H%$`*i>6#e5RfX3qxf zDK~37*^>7sb|dM|<15owzocPKgPv^9@5ZbiTKXg=UOWN&PMhQ)X*|E3ddmEM?aq^M zm*W^xDeum`H^xMyzQ>Q^Ty3W)p9b+lq|ZZB_dRXdQ3vhJe4_ZthViC&!vxupKe#4w{_sO&YsGq@WpgH;Q#4j*p+KfCWa z#XDxd2vz>3f@YN_PyVE~1T?&zGlYku3A%BhiPmZVxLbdFeaw;J6!;EW5Jz3zKT*Qd z8I$yx_2)NYc?{TMGR|^8EzIh+L%gr{RmvGpNlNVuJ>eF^F10|qE1iKiCP|Ry{Mk&< z!)zS$YHhHyWDap;3HnuGR!SlFslrm!+^*`B5dE-Z#Hus=xbI?gQF?8#tlE+aNj`#n zN=bVg`DN?AnAO`@`N8W0T*sjb@$37ION}~7gzB=nSKWY*;^nu*1gmITibQMf)+^-R zm7!xQ<6|xrm=TXJH_jsu!>4O;kJjBAg3p-ZPuYqRxL%wAZtbYN2PA6Z9m4oi@=woT z5}!|fj-52FD{<3n0kIkT1I{ZrOnnUoE?#pkBnL_U%3b?Rr;!SrT;l90J~)Yu^Xes) zltq2DYMXH72Zwx@1-giGttmycS0OXoNHKr*s+=SP71Y?SwHL4iM)3E#JeH`p+P zaD#cnls`@TdL3j+#Ajj8{N9IUCOJ8$71#~Qyy1Bnd&yZmGJLLGK9bF@Mb&Ja7IpO2 zToTVig4`rxpcZatxU#||`9lLVnd# ztFY^fnzB^(WLPT)-22N=9oAYEoc2|)63x8Xev+H|z*R!CyeKh9-%~$DIbz$wT>{E$ zY|^YQ_<9MS2QFiqU-)^bFkewNaCy>Vm(T#uMG;fjhy*?mXedq4+bPANj)|CHu)hD4 zDO?Xv2&}*xo&yK^P4Z@z!bLu3do-jmnAje(dEgC(%i_Z^s&erLr$8sZTZ*o)vNjbb z$r=I#u$ff|Il|s=iq~{uz1vHR6Gm2sMlw@bq<>GEw``b{D@Iv7Nnn^*xs7Nsnq4~- z3VQ6yhcnB1-;9`$2o6m-Vsx&U+Q96WX4PMIs48DVOJCPKcn%}cK4$plM3WIzog>vB z4xctpZKE=AeJYpkAXj;MCwXR?8WmYx*f{5L6uCney{4l*DL-h`ly4-9UUa(OLNKB= zd3Kg(Wb2_tb#nynJJCVm!b|r5{=VX;qm+1dz&z?0?{uR-e*P;x49vAU)4b8M8BC9* z(_GuDKdB^t*h6leielJe&M$Y(IwGvDpX`X04SIhxVn=7d3g< z-M}2E8#3Y_PQKO{HyCflZSp9rr~0Yq{F9A8J0k&!lXfXoGJOIl^omH3wdM%1uUkWW z{4ys%5rcku#R{GT(kX{Eo5fC53S1VI_;7KZ8B6>>{5 z*49N9?>F-`VeRzmUvRK_VmjDGIwaw0bJ&(Q9Q51dHu?-RejT(;X7k%c>zcsv*`bS#sR!XTbVQ}`pN6elwW`*?ZF14@A8w@oG4vg7CflX} zdn9gh#>}7+kzNUJ;JP&muGlZzDwXR|wl0$$3t^w7bB%^*s*yYI3h|(RBt6CLQaRu* zx6Z38f=DXvIM}LI4;;&>&xVY-_x0kff~?D;LVo!BD0Ak`9m}>j?@x#CKJa+h4Xq7n z$-T;P%;@J!luAR)Iur?0-x-l&JPll@K*glu9LendvYpAf=}H^r_kT({Z?}i#&stxC z-4-|iRSBqGG!7l5>LrOMin>HsCUTEB1#*$G0v&(X4Q=`f_%64YzLz6@P`a+84&up5 zyYBBNVQV<35}4#%gn2g|J-L9YpfY)2wbUkG)}OVX;8(5zub7o+uN7@+A(TYMf1%Aq zRU+qeL*FBCl*kTOp&k>3h+0O#3#3X`q+Q3Fal+;)vJ}u?{jxFc2>XSyr0=Py)Th1s zi+6}mV{S9M({hT?7unj$B0Du+nD=Ey;jT%5m0EI2xOj!Mai$B=P}zex9PQNRwLc zV_*ZS#xL=3*$JJ4F5Uo0E{XVj5sbB3#zOV^4)&@hrn(5ZaN()qtY}YKt zlV^|Nx1X;g(sdCL<>UR6h-;SoJtj9xTVFq@L>-DDn4ge@8CTN8h_A`L`#`magIC<( z77og~{*p5+=y4#PCD?Hs+^VWQ=l$iO2<&6gqG@r)*x^DBWA+NZ?u@h;?YIw_=#tc_ zpyVo#%?z}h->}3^?W#9FG&f#q%ci@g(&A)7{G*+__;|5;{y1#aXZt?w^-^keCS*|` zGe~|##{as}sXm!iy}flBh378nQ!G$SX-h?O>PC`kcs!^+ptHCc4j*a^8jxvn1f5rDdl()A z%j=2BNtOy~2Fo?Fe=g)`{wRz6FnlcQSW(j4?X^C--tDsv9c!qg$AU=gHNv5?$rZhe z;{wv}XU)l3iy~@_IcRPEqQWl&V4w45Dq$ziizq0c@KrMI=tm#79(-p6S6mKJAjQmO z?paCA0W(NjPJ4~2o4uId9)6)HSl}5?A#p6#XjeU2(l0YiNPQ#iwC0{^UOzOq&nUCY1}YE@oyocA%$@^Cu!pbZsExG1m2&-f^Upf$*W zF973GRVzBMbRnZj1va3aR)79*=4KCH5ZEjpJnyoVyjmT|YOK^uqn;L4H6US^tqUX>VFTt28AIvO_}ZG(CQFL!1kbv4=i=LD7P7{l16joEjdyLaBbW^-v&tzRam+ zeT@~n@~7wkhvr0Xn<6Jf3P?zo-H28H;+)uWAZ?@v)9m%a*M9lZ1-i~UyaU&Tm|rRN z1OqiBY+Y5Ti*>sV-u+iX{hx%mpDW-V&m|c+qD7Zs51X7z0W)C!4toTy7=JIfL%wxw zx<1}rw`x+dj!hf>6Ub?n(C+N-XSRL5B*<9AYkQ-2K|ZtKs?O+r=Cf1qX_whQxWT}j zCz41YymvZvb&?9YDRfqqBiF>92bcO#5y}xvJUh5OoIJhS*N2+_1Orrk4>h0)M)a%G zGMdvYd;#gkvfLERNVxQatS#Lofqruw)Cb@J0}@=x!93eKdj3)hbz8~*LOT@uK>vF< z#jZXk966bXFmT-L%PRZj?QO*=7zTo{H;nCo&KMJN&b6$0Q!;pCd=za<2gJuw7KTry^{+G-!Tfm zBbNCKmRul5gcg~txj0{){r7{KeQ9^8?M}A_V&0Jyv~?X^x_Jb4=%XSaJ{%EB#t2P zyQ0xZp%0eKgWvp(qm@5v2Y8N+6$;77fXZ9zkh3bTT$PmGXVEXl-25m`Ve5EvOO4if z|GQx%^>Wfl!<|B4$LOBbN)C4|uS2rxga_!q4_diRD^q0I=3x9~S^WI!2L!GMnDTeTR$_gBp54#L zeSCP^&$r({sZ_akT%fPqNBWsIK3K!o=n;Mpj%~5-c#IJ~jd1BA-KoJS&qM5%tD%a>g{1 zrvt8N5-cB|Pw2ZGklv}m>Zl!lS7YJ#X{8zp2g`)gcKtAFP5!c>BnonM}Mt!PDgRhjv8GRh|Aw>mJ)DEcGk^^)o{|yk%uki0R|ph~p`H zgDiz>0I8LUd~qg9^RB@cT%9X2huCSDaor{vE{9S<5n)*n%+ zmQ+DcRORl;yyB~j0wJHV8=;~}ep}7kgi6=eUI>QC@Y=1PYN~wth{#-uJU*t7i98F4 zCY<)#QTs0-Zc{Nx!&h$(8?xD0zEq-?Ks-Nub|8NJX=3*X3Ti-oG#jw9hS4R$^`0#z zKFUVu*klYAnl-4j59D)+2YPQci+Pl$TmN=x=kH`$3iRH{YFGFCRSw{fNkBk61;5Hp z#B_2e-r8tO8@vvf_oM_}bVrk4-mtXGajY1CtY;J27`;Oux;HA`W6i%Zu>mA2{%5%W zy>XZGfUjGlG(ia8)hq2_KKQ7~$68BvJ-ca0bXX97*u^n)+a4ZxZdW%|LqXNxMTw&A zk+v{-lxA6NMNyB%fbncb&XT`&Y<8YX_F=5lfR$r)JrH_hG8@Uzi}K(kUbnGjNB*~r zZZoUdhO~Hf7#+`&cejxc&Wy$h!ol zC>hg=)m6y;B!Nr?5rTnwGvcQP918v&XlJ!n3!B%JC*O*MC>Pf^NvEFMSM8kR@AQZn zd#OwdF1x0=-t}ibv)_2q>)}I=(;_-_R00Ge89O70dY#Lej z`;<3(T$}KMUNxttxalg9zlyaKG01r_`A3V&pbN$>;3Om`!($JMd%Z7*`5B4klZ;5y zukj1=pcu0EF$^TqEIK5K4(GxbB&u0AcG6w=5GJ4Hej+YS$u|8Z<|r#Xq-fpfl(h^Y zGSk9j^)r`uD;$1XqJ}Oa-tq{De>Z~eSH9c!yt2l`LAPk%`o)%y4&f}L2LOPx5(=$^ zWnm91_o~MNr__URNbUGq=e-q^-fs|=ENqc6H+cmEgvVya9<=w#WSIxzlGcgat?$>r zV>G&jm-Hn5^m1lBL&Ia*L@-sL7{Yj13bQy$ETar%xY6mS3EI#!2T-oKmv@IqhIXr~ zE72N0_auDwt5)hyg?bwjXVI8mx&UmORnZ;o-akEIgARX<<Sy=xFIf}hX325@YE@uk5Mqyi|Tp9 zD&o5sOrKkyP@@&MMca*(Cuah`MX$_J8gqYT-UA{Tv7)uFo=qOfF6APB^j<_KgAXvA zO?L+Ii3vDTp$OP@e~2s~8m|!l(5fbJfhC z@O$REXC>>q{9|6nXm(QwKOn^_MYWp2x zGp0L4CvpxO^aFG$+|P zwI^MO@<0X(A>I}|3ZcR7>(2{X@=pv#KM0$U-E=~%is07V*~$U zqr+yu&)txIU^r*t?V8a}U0ImF!92wew=)mz4o$!QX8*5fb5=Uo_2a2mT~9ao;$r%v z=N-XOBX&T~k=@JmYL2IN04F58Bku)w4B}wSi?>6;F9w_BVKK$V662*%=AMXl=P3xD zs`nCUD_;<}ondorEy7;BCGE*N&b4Hdt`tvVc!hem`f(RO@anq;zUw{;J^e?;;c~qT z*qNCIqqQG=GV#J6MdO~TYt?vFQEyfD>$1!hIa4U=on>!`GR-fI%T##);*ZJi`F9;M zDz+Q(>*!GNb>O=^Abn1uv9>H|v}`4xO+6@~WUHYtZIQV>G6(2HxG>Tq)dbUqJF>#Z zdcH*Iud*g|7h=aE!3~k3zKG6ILaYGVYDa64WTE_?P{rk9PO}8Bw~|}DT!y)tdeQX3 z|9j#-5@yk$WilJHQa|d z#0meaRQZt1t{V(=9{q`M7zk`4M#m{Jz7YO=Dq0zho{c1`TL`57S$G{EFzrd|O_4U( z?3Y^Wm(zZLg#GV`>oP7fb#BKLxDL4jaAQD25LlGvC-2fsL7LyvdOu4b72?`1D^6S$ zWKATYV-Yq)?PPXeUAHS8GI$e3Wjhu6*-43*yuZ4!jrZ;L&W?P}NDh?ki;+h5n8bcH zh07^Wnw6B4+@B)9UIy)yeRsW^U}&xnxjs*P7uSXl3WsqMa$V=pI% z-xnONRMxPl?td7A51l`#^mvub_#?cv4`bhQvz}7E@S>{CXZZ39S7j{XO=C4wA^bx! z!-u9f=`%YNP0v3y>t7P^-|aqQrkfUq#w&a(wu~=(kO~w?0&7l}D=h6vDU^1AGLP>@ zXiY7yztLCk0xk*XL8S|NP0HEf>BgceY0qMGFj6+;J96;#w9MCsXGUgB>5BXzV6SK* z^^duc>`6x{AC2Pj%%=uNrsju|zwYtRRB4!OsMm*fPB#+3gI8*t)r(?}`%5RMt7=sB z-qMDe3oVC0N&WIC^r*x-c#<}KvtfB^%IuGxs!`sy*lIAOzc`UK^$tec?1mMTQ_*c3 zdRQ%kU~rH^=;!a%QA)5YD}mmnwf4+WWVBhO+9LfIZDljC*X9+QL|JW06qL|MesFT~ zL?}PD6%;9V{Mkr3d9gV>QO~k(tx=%ep^0FT*!V=Bva5o6@K6Pp+84uh%2!Y3`Wb)Q z_O0iMKbzpBXp)KXe5Nexk*pHH{quiDC|PtoAOPai%RXUzej^;+r56tKn^x-JhI7q% z+N~86B*x8Z1=>O!*oP$fE@EygFI@NtTSg~8?XgAmSVFE^>5S)s1xQ+$2+O@&Q(I?% z=UVgBYdN&m{L0+k$MhM&dkp#t=AFgs2Rd~D2DoRH;Dp@4R=afJNWz}cu^G~#Q{?Gy z{e=r3!A#B#U}?6?x-tIlk2UZlMY`AK^z1x4jdcwdQX;>t9)9iD=SVoIjs;=U)~t_> z9KkVWV+5+h6vUWj_Iwdng}84rU|tSgZni0wL`Jk?XhAZqrPlJHRhB1y6CMTfyc!^o zLj_D>T2`?mpg%69nvdwu8gLo=@(-nr3j9U(q7Nhq0@EgYTj{o0kg$7(WRgW3_zvKc{5#szWc8q>I$ zl5`rK1-*ZU)-%=AOtccBCTfNLE@R_b_IF;3$wZ+{$Y*@2;&);XPd;2JPHTX z-WVyz1?4Y{a$Eb;y2ho#pYv?cQcx+dfXlq}{!-dhF9SFsop(gZ;1xC*J z(kO>Ovnf>{dks6LZeQ@a+>n1=85q&M@bf3Uy|ghdJXT2-dt;HIMDU3~IEHLmZmjE9 zlol6{6N&i?fgr&^s8Bx>I>(@pBK+rQIYnB9>FIom0JeUf+^5tO>+cI|M8@M=GtodG zE*A<+LXN^Ax(DeVAM$~N$*+a}v~8?e+$}VvS28OM*&vZirTI!HRLUj%<{!FwXQc@d*|TH+8$ffJ+)QT?JOE&ALhu#tmd}+l$?PbuN-WhPlc%Uzi->bjzbWUcP}+SA z;!V(Ok4im{wP4K5{j+_<>+%VWO$R|zQBL5su^C+zg;Xn#;34NF-j7>O`0;jfyt42J zP^?`B$hT}5vECQH&5TiNV>d?KUC*rpgdt}FB3-i-t9K3iKR&~mh>h9bj>&QD&a_7{ z4`CcE&GRtbbJZlhWaB;7nP~5xXuK*+=4}(fykK_-+7sWtUWBq7p`OuOh9d%;3xm)$ zHW3w*q&aYIS`}m@|IR5gRyd-rCTw1#H;vu07lLAN6Fy}HuU1++!ekBmUa^EVK9xcm zr%<=yHW(v0$}^R{*0Q6nS=|Kh_!zdArBe0R5NYR1x|crqt(xg;sRm6|M(GAe;e2$9 zQRXNSu}TfZsxPXSYqtu^b9m6VXQF+YV(T6);I%#Ul4)^nTfh|QO2jD`i2|61aKs|h zLE33UEoZH=ZX){o(+00*R8-oz&2O=n&7+R1pGJttVM z@&~q^+*+tNbGLntiX+w zY2q2;<#W3pb#PC+xS!_Cu9fk*kY(vRxzv%@OpXE zY&PrWd~Z{CZnHr;t&g6&Wg6$1s-8JMJP+5vy`JUN+sEM7xm;}j<5)LU9qE;wF?n?8 zNUHRDNy#0ZiQoFT>!QmL;6x^pIW+j{dMnfe5)C?pBv;DHDAD6 zZ_pw~98hJGGrLaRY4)4G!^>l)+FbZnygEBsKbwr^%nsRzq)UJZa!A*Ce#To4af8+# zhN}2QzK!U00=gN~@ijX67{Nyh*)&~DnoIuBBsVP3BGg}um=C8sw zunLkyBwVNKZd{n$3pP3Ge*aGMAK;DVzks)#2Ds#jK8}BI+5Znl(0@Z+|4kX6!^Fy9+GC0sm9K?3d80Tr2*5eKM7!n?zsXP zU6vwB_w;=Co+#11kwOnY=w)!b^A!W^*26LM``(R-ZJ#t$eQ>CBmp8s8*DV?n5=jvT zuuet234kD!jB41gg$EFI??S>=QaB6WIBZp(C96Yx<9|C|9?ydSg<&W$ursrLfQQ*y zMaG-BsUzGxwM_+cFfBRB#h}a0>K|L?NqG$g)Bxb2*ii~~$?WiWzA0D8^22k^7+S7j zJNK!!vX`Z5o5gPL6&xDD^ku?n@1_OV?srD-(oGVf^1jm#vYE-E^to`pd0Yo6B)$%t zP6wYBq|A!Fo4N{Rm0eShG5<`%a9)QMr>G48Aa*rZ2DC2?4OG`QHQz0VTTobvwiAVp z`J%4p`--g+!Ot8e4_YP2^oO4cfYV(41DxjbALjdsuF(5hO!*xKv1vbtZ!XB6WbqCw zE#+tq#!!VW@`BXkvxAXwBC56nv#ck5osjALBqNx2C$O(N9I+Si61y%FvpnkwgYF}$ z9!u;}l&aqjBll7CDFy$|HOI((AojQ>vo%>zJzBUV-HH4|wZCw;Gx{J(F6p{ZA-h9% zRSUVqjuAgzPIB@9RAPUM#o-;@RKz?c3YD%T?4HX8mO?-^p6L!fJQ1Sf#ndJGc6_R! zia(3!BC;5orfE>d^nG#?0YGZo-dS%)Rv#ufV^>Bt^E-hDTja_^c{>-j*FE#G@{Ky~Od&>NSeP@{1x-F9}dEx*` zHt#SqA6%GPvYsmW?OJEodaIr)psR=Jv!zV4MWnjgKlc4G*(>2|{?5c7L!&WeHJ9PaFVX94*|nry`6v3K6g~hty&T!$J6<@!B2U8E6u5M$EyE@ zYjCPP{MBy$W3?sq4Fr_$F1HcMf-`z*BWi9PZMBq|1fMU5Pxo6Q!sir-Zh{c(+0R<%RVmpN!$E9D-=6*;^u1?Eq^6u)Q-Kx$HWQ=@S3X# zsL-?G-Wq099*e5&O+o|6`&5iIiCEkUF&S<18`MCg=LU5YL1SpI;>u=NjE*}*`K#@^wV8}F=hDjD} z|NcDiP}c%*AD>ES88lLx6L zSAIcy2sSKXc%kR?;Ms`7a=J6H$+A!Sq0YhG{9G_b0{p`M+$IO#HJVZS z9$`~nuYiy78Y zY&-_gB;G2KxN;L36`#6FFpp}apYg~m%mdU@7yl< zwB;s5FyG+uwZIsBMXofnA{B$A3Adi!vCP)q_|L!%ddFAg4H$PZc1waz|`b?+MT)F|q$SOG!wckqH zFWF_6zbHF>jsf}2?_;`C@ABzD6crD<9|YVant`J{+xDW6*8W?2bGguFo|sapJLwTA zPYB&9i|_-yzS^m5ERT3y-aC`5#ca4El?S57xlTi7SX0|=)u9G<7ewdie&weWX}wdQ zF@0QspnM@UT1sL1wJO3PKCWlPM^|X;r>x zKD5H67lVZt&rm-7uV~?Qbac!qYuWy79m2dN%ej&# zeDGP|oPzf8e5+TMKfp@%o*fT7RlIeWd1(^A#EB)4-hyp<{^t2}E&@7R1`h8x)(?9g zCwdYu!~`xKGS_A98(@>qrU_o>0+K}^FS_6!$nH;`!_5?%o}s0mprv0&ohRMk{VoSK z$QmRE*n91+R=!CijNaC!KU?aJOJAIznDA(zu`lb&`1oBmz}~kxpfK2Z6x) z>XBG(Q|v{My|->&VXe-dbnh&+I~0nlW`(?^ep%z~1od>TMcsiaKld~x+3V2&%L671 zNL{7ibq7afSJCI}0gd``Zn;mpUp5qn9 zQ7?8-HosjtuTIj0vzR_I9Se9X1{H|=NJd(TOI{GJ8!rZtnQpHBG^fD!)Hh5+&cATGJZ&nrsOBGbNDa$yIbV@h{a(NgW09|tEH3vR}Q-%;yb~6(2elD zoUvRULFD6}-Kq@?8oQ5vq&-rd45k#547TyLI^1J-smauuH?IxNaIc-v0FLpK+e@b- zQpnMhA{eMqvvqRNO_?=Mc20aCN0$?X?Fo~&m!73}6hutTPEcU4Jy9bc_3$ShtC!WS z*CdNGE+{@+i>t_ZJf$QW;yi36 zT^|U%qwqO0yLZG60LuLA#eCo`8h&XkMDh{XAxM-e6s#ef@}JeEA~&5yKPe;Xo+APW zk@3a`1WsLntk}A>Dx}n-5>N69wc_!dJtPDQmbw~?@gg-(1**>d-bJ?3p`t%(zaqua zblWHkpg5Nl?CCTMy*VX2Su%YfnQXbo>Q@~RThz#jhYr#zK-8oe6d%=HLK&HrJ|<2$ z%MjZA8r1t}?K&VHgv5xh&)*u;IkFJ8Wy9S`4rtK}lXmPtQfv`3Ghm&>{f*k+v-6oR zW*fnG7RtC~!A(fVjj67e4!uan(;n#%i*EFl5O76jowR1v+5PAHQ~dY#Xr3jyk+&AO z!`#Ml4{>nFUua>bAX8cIYY|6eK-u|$^`0~UZ_VZL(&KtqdZ{bs$@$%%MbgQK7&8yi zo0vZJ)7p>phsaklVbU!Ph<_!dVGCh+vos&cWVHNt?)BrXQ>vG1^WlA5p!(6ni?F-& zE=oEgiVBJ;p@V=ufi{7O_rbdNN~U6lv9Yxn3G4^}^aV5B#7|cL_!vu&5x7p)Uzd%h zU#8e_VzQhfc$efO80q?e`mHFTLz`b=c=>np>0{uZzQblL=f&W5c=wghvDNFCkv0sr zUM!q+|@{Y12We;#tZS+>;K zX807EW;2nwqH81e^yt&p9T!qrVnCzuM1k6g5GwjOrNUeD6B-Qu9sRWChPs!b9pF-t ztG|OBM3Beb#JQHRqj-E4{Ho!K#s_bbd!)IRz@cP#^-;GuG6WLU@yll+Tvg{m;Chiy zp!@hJNIw5#AQGcA=X~H?+!I;kwJuorFzc!9AqReiD0&j*dCPHnJPr}qR!uvbTY9Wx zGGz`rGSVB46A1t@`Z0VdGv`({7FQ zQDyp2dbTgat2*y{IUdw2n*i#w(Vt(FrQ8{Sk1s73vfwh_Ewl}g#AX9h)kIo4P(?*W zRU;xIF6Q|6b!nMvtx*@P_NN^YGE?DSzL6d=1Sa0k4qFrD%Sl9={X(-bu{W+80Jcx9%ttEUJy zs~0_Z#IxsEa_6tSn;7A7nK(1^PROeE0tUF;I8JGFFF!pw!9MaA1hnV9X8ZPDz{D0H z6pahBw2d2#`S`UwIlu?Mv-)u3!yB9t6D>5jP4gv2y6`ihKfoyOEIyaH%A*F(zugNp zAO{%uDgC37%07&M{)c4*^Us_D{+}5L3bXdSEzA=U==s$A$lUf%mEgOxx;s(wtc(Ia z2rP^g{@)9QqX2*Y6;g=?L+2y^HL;-Rgc^hUJ2UyB@4Msw$KoQpm$}Wc{m(>2-iSc2 zQSXmt>J2OKg3N!YOE@6-WX8Yt82`h|I+oo#JMdYnx#4V`djM}TJsLVc;EPbN~P;;yVSclc~HIUzH@_pZl;6@WkRt{CvD+uu<(pbRkQuOj_}wl5@>5-7Tsd0WV8R97 z11a#|4R}_}cTdYq%u@G!E-U``_)S}VyJrgfh1yY&n(jTf39+W;iaA>Yo40r}O%R=y z$DgU6?RL1FE8Jeh^cr`2D(3U~9b~8#40Vk6+0Ozzmv*taQ&s+=_FFh~{qW+Bq_Gk^ z4cR8wLaYIkB@3yzIYypPI`{9|l>HmL+4D5~MLn~gIn9cvsyUCP>7t(n=6s7OYUry| zM>1DqdEtW{nl_71HbRE8bmG;mI6d$teaJV>*e*MX>+2>*?N9E7l#=gW4K#|y=Sj=% z?ky48FfO!Z&PIHLu)A6X^U+a+GBPpei}2(i=6$>u0rG0-m&+34jI- zL2NlDM7Oj0r}1ajfPyo2wd6b4em*OLbah`is)$%0Rg~FQtg%^Smtf2}z4{^(6In;n;JBbtTe;xT+FKH5P?mN&@NvZ|_Vl#{~%^3}AmGgZh! zP4~q}r8or?)q|;>-=`;6k^P-@kSW zBz=q8(+Q_&cNcYgu;X&_TN586t`(7~e6TaOsYma3r1BevkI?)TVhR1rwVjF=*@$=u z`u2UmM1}`>$0e$B-Hj+VgI+~mF?b=PKyNshVm^Z(K4+}Jpnc!Y{Dvkb0$5%8j&nuaN)J=Q!PVFMS4Blf*?WiKb; zi4JAMbRjy#uOM46+HqQRB=B((0Xrkr@~=Ryx>i~#pHyK}@lR%{F`X9KUc_vp?AR>T zfsbi>&-V)`+`}G;V!sl_82nIpy_MfmZS6vG9P79&U8%N;Yk;Yo_5>jdI? zo4W}jU1!jstUlkluzzUg4Z1xrR%-$*5`ZBtOe4LO)g_d}c}(!0YMV3+d=a>a!uH)+ zOMne$KG6V)=$N-13S*03N5<{t*$IQa?66SnhwYcc4?NxhlGk(=364UPq!%XiqQ3R7 z;VM>nt=S5Ea3V$yF~v8U9v)zxV)w9D#g?fiHw+7JB9sK|AH1%{NZ)?JtEHA;7b4(4f?*AgmI zBOS8~1sI&IP!4!jZ5GJJ@NB#=@M~Fsvfb6ELQ(hlHM8VAP}WH2Yjnk$BM2GoNMNRP~@nL41G z$dK7p32&3{iTY7U6?}9pCz5PF3+VPnI!}=>F=Ro$moaoFi8F46Inf7@!x6tOge^*! zRf0&FNCgapo@=!y=JYau^Itp+ZUIoL`+D3MniE!^6Heoq=vvF$dyTkR=jEp*_Gh}lm>;-NvU zRZB}+x~|+V=XWg{;l`p&*|&pwC~@q^cIpO;qKRe(Bw#F|smi0UTI7J>wM(B8v7ZD? zNhNpOaAPX1k@Erwtrrg~1h#sVll^8Ew04dksWa`+EJH?JG>DkiGwbAU8UBbEc|sKv^R$|HDuYkZV zeohYSU)_7ee$x&Y*4>de8hy4eJ5h2f@sLA4U78W#b5O zjcA5iP%U#XaC>WAu-LyXaEtUO+cGIdHq{L)gctxf!h$s!CYFl@Ij-P3c>DlnA3Qm>cLBn1UdaG+eHL~{L_pDnaf75%6J*tCfi($l7IZG1P3m)||R1fKJz zI8<8YQ~i2rO5zU+l%co&Wysy89{imm)3sSQbMM`PhgRgu4vwLxrOG#}X2LFR#V^5m zV_ze`X#u)qU$4)6>^KRF7YENWXoJ|c61Tfg>zZ}oXAZ17?Ih{PWh)6xvZ)^0QjEKl zXO?As8wbExumO7erv2wa+OzYaZ-J)mesv7pZaWV7^VCsA3r8xqBL)ql z4jAhk_pfjl@VpYlO2>oFENJMblCujP=owS5x{Zo|Hby*l4G34+_cW$ch=}m=vzK^9 z>p)a#(6soW*9nnAaImCb9$L+~oD{zf${1sg9&2v;GF%hN1)c%W8cX$5dD5?=`vbH1 z&wWFf?S4SQTz9w7*HcmGfo;2N-a04m4QT z95E(O$Fh7$&`Y#s-1r6`^FjwW0JR1zL^bH~S?-__1tDt| zS1yzNb_p2zXfx-V0rh*&tbfROBWrhc3{G<}w!!^RZHEcgjl{v%!>T!Q!>ZIrP+OHA zi?HhnL~~0my@jo+XJm|L75!jGVvk9I0P*Umn|xj_koEF!y&o+;XSZJ$ zsj0d5+22+t-qep@?BB4`ypIbZ%$KS=}9W3#twqM5(_Q@LiMAIoO9?9+_Nb>UBs5R!|_ zqlk^>%a*X^E4rY@x@-4E`I!y*H>0B46P7Hytlb=*iZQ{nt{4YlZfeJD>g)@DBp=nQ zZ&t~YV>YNFm<_w$?yH@`_NPQzF8w6LJjRW0cQE6k9#Ie6Kn8k*L41QgTa=D%z+R@H zq&?2G6l+c`=+n#HGHp%D{w-d=3kq8zZ{4iq3XH1jXh^6eQERJHm_tmGev z4y4jTPmNkp^g0m48}FuusDhcyrFJ{7MtrCnwEIVXe7D)R5Z;U-lwZ*Og_6fdAu#EWMd4Ab%DztpbP;yXhaiWHv_OQH z1iQVv-8~Tz{p>tjYU1%fQtbn4iY*!ae(=N7u?`6?fENmt)n+6?UH#^_R5SYfNnA^8 z#*^%v_sg=%oDsf5DN%UbKZcHLRct!y#!(^@?uaV@rfAF=ZVKd?$QyJx76s$P9ms&@CGikQOh+qDyVBYTcG9-_~7ED{tEL z4MlMBYtk11I~3}nYpV1Ib(CM;7!dx6xUySRu~ThImVLY%YSJ)+yPPA!XeiO+Mz`Od zPQ1U#-gKOrv2yW;W80m{b8E(17(gek$6%~I_b?!n`p%kvbtr~kwZO?+|JI|x(T>%w zV+!SP-fa)~77;a;(GrPm_Rc&?51#qwHNH2qPOzvgig$EDlS{C8nXXagkcXIf-V|-V z$V^Jd`@Xkc+08}j-K0K#L>2aLkz;Mkm-dlR!*q;9OrgH>9-bE-Y;v5lQH_A#B*)0i zC97GvTKOQ#e%Gav=9He5xl;ki>G0V$GxR_UKJUdRQ$fOE4$75#=**Z33(bMoM(Z4z zhr)YGZiCrw(P4#6|J=6We=OSGG9n|Nie)&T2XZQ^CbtFXA?_HnKXQ|_~;K^;@m$Vc`NzT z2?MK(8yfz88EQG7DGeD(W~!N)oL?sAaeM$GX{ukQt`jHVA;~UyIsCfhqtmfbDR44T z1pG!*LZ@TxW+%5xy=?q3^TYV;#aBN= zMvd^R8E^9I2tbtKb||W^+HW6hy_)%5WII};)%V@Jm6)Kam1cl&&QCuNQ?eUF#6;(o z9`yW^K^?3M=;tm-8h&i1&y@D7a*s@0%$g9-?A!!$g}`=Q)DH4e7f}UIaDqVla>cCj zgyYlR^_#3igEn7sh+rKxL1GAg8bl7|W+l(PB0>q1-W5jn2qS1e-aN!qoy_RMHrX%f zb&Y9Gq+U-_)tEIAtv}b3`SzqDgF#4e_^~Q-UG$r(t9v}?(o%~0#8(vhN?QYqldDO- zmaTeEc9|v1F#Loc;ZxdcM!s5Zy|3aDa{65b_Z8EMjkox{?;F+hpE`Su3*2{I#*_k6 z^Z0Iq7-BXa6uYR;bDPblxRDw2(gjx>&Ie1(%{&+gNBQK$R@<@wncw5;QG2JjpC)`J z*eMozq7vNpndPA?ojdi?`Ns+9e&MJH91?v)nz-n_sXKZiUVz?lEb{H=Jo<<}5GBMx zZ1I&OP=T3Vu4%|xp9^b3=oTYNl^9qAmg=`3IA8O0H>e81ul(+#CdlE_PoALy5!@P& z(60uE%T0j!3I==K1FGfrwz0&}H=}=?DXFio2p^n$8 zEN$?u6ivQal-!doy+-)95@caYMj0_f!PdrlO+wmO&xd(|_V?zU;q2BYWHryTj)yZJ z?Kw<8+=~%+a`C2dqQ#kv;6ty;E0s>9$zm0dUx~9cRM*4GG8T2E!ywodwi4osmQ;zu zXVph`cA}%a;4kZnbBmC#Rh3%0Bb*$b8i^xLFPt?i$@o;^Ba! zn^Cq=Pk#lUapkTi=KR5r{kl?X<(RS)c=GC5?%vLy0;Nv8o4tLm>%Z#0B^K*Ed?v05 zXFuoeAfE)C>n}tZ0C5+Yvu@dlq9%eRtc8gji3VPEmx;xL6qSv0q{&6qO~gySExp<| z8Im`jUs)88tnEN;+KnIZ=ghm&!Kc8l@cuTlfzOhb>7 zDvu;%E_diH=Q6Py$ic_KkpS~qE?Z*K6ug+r7*2x&P1Y{r$UY0*9{)ki>rP08zSpP$ z{oFAv;fZPJQ=LYY+9hr?mjHIyLDckPbFxk=a>3(3hS0(jyvgcJg5sCyBb>{4ftV!z z?U?zmyeNv2w_UlL`apRZBA5W^lGiGYfcVQ&wA4M!}qMF$e z5g?w|WO&Qt&t*Mc)UEu{wL8@sR^CHc>HU=3oNja%;6uC*Vgbp)zLbNhL!Af!Wr7aK zG(DAz+5991I6BnD-}JD70*onTXWaw0vS^Kzn=7=73C@LQ(}Zl>N=-z9$yXX42w<%u z2s4wKTo8E*58hDjAy4hs?GI8$r|i{;Zq)E$FAG&(7K@C}&HuY|b=;ty&Y8J=w)F>- zp>@NUa_tGH*G3_DGw+Kco~9@%viVp4#kXJ$*a>c@x-d4?_?2~;G6ezsV5Soj8D{_* zEjxy1N$?@HnYC;$67|Xs2 zyLBS)#020R+UQA4x|0>$1wVeogQPhB9pi`~9fLo!1+mgd3$BzqxWfWbfEU02<(b{u zwEK2r|0l3bhC0L76j}Ns!M1d+dz`q+Q=z3zv0-F^_Qb-Nc<1D3do=pokSfPE8qF4$ zAA>-a8dEQIbSO$}D{!3{?z}j%N2a5nj)6WlJ!h}is>yomUWOMpQ)`d#;(Sr;pyKX^ zV?^=S17{2frr!cUULwl-^w9pAWm5!?w{!U{v(pa%IBkTxJ)-LOu6sE2tkp_Vp%yVf z9eV9Q9~k(Z@_M_{rf|@z{nH#OC%};N!=3Z!Pco9FW73w@*QTS8D=d@{Hs4hl*NO0@ zt?$45cE4?lixm!u7_or7(7FIIO^4YEj{!Bgpq+B8Rjz)~#ht-3xoRIx$b`OnK*Vj6 zdgn?WBPr^BzN`=tYq}smUw`iIP`u=#Q^WP#LKr_j&hkHZfd3UrIbUwQJ{KmwU4Joq z;jv3aD9KXA1)UHw0Cczzvri5WknY8Ae&fYn+UYG}iRmgjjouwURg^Mg?+C)FLw#2h zj$!JyKXr_ST$DL0l#0ZuqsuHZnCg^x&i5J3N02E3~FZW7xK%_pdn zP+ZySLdlrM9LCN)8u6ZwyZ?;Vxci)}nV0GwW8@c_p999%mq1)^uJo|q!WlJr#eLy- zn=6W(?=AC*eU_bJ+9fBhbyfRo7Q42G7JOliRsVFS4&7FCh}tbV)!4T^*!xqSY9e|T zB?dJM^du7(b%PP3&O1fBCON2a$<{{Fjw#ef_Kl5f8XI|wOzXA30dW(%-tEGt&}RY} zVAyqp@@CwLp(f(eVp?UPlwbDr)={fQA0e`;H$4GHEkM5pX_B}(17t{q9YG|5qvRh} zXZAR8+=>DaIi25xT6g!Y-RAY(fUX8Ixl=Z{s;f7vew2$>bQU^Q#jqtWp}R+3sUf^4 z3(uin)haYJOpl8{S@lfPi_mQ2yJuP7dM*~X+=F_&rW3#WMZ!Ml*u^W>93(M@7$tV| z>b7pALSm);rJj4?IGuIfTA|74t0VlJ#q`_dsRrhK`9V7Mpp7#h|8~ zn$}Q1-7J_Rr?X4>L5nU*S#70HD7azKh?+$h7RRq-yq>~loZo2M;v|PqeSvooQ!3P$ zEuv+r@)kvDBbdx+kprjbm|fp&(HrY#^Ahc-Qz3LDQX@$ox2c{B^&>-v&ifX6%}Cs? ztx6943>`6);_q|#nGNux&_7i0OAO;Oj6IVI1^X^RQyGSm7&96zBa`$6tg6JEU~;8M z51;0Aabil6*RqywgB;~uOnN`QLT2sxyS&}QBN+UWPtwK|_IdC;usL2;NXV)fIixI4 zEc>P4h6*a&hi3585ec6YaI(6-Gmmq8Z?zQR-@tEv#F5`Z9#eyqez5WE?>jwp_)BT! z))1IN4X`ES#~66blyHRzU4Pm|WT$nzRH4sE3pxi7qVuj7ygbsd@dpTY`(p$sGNb|P zfkNi3*CH(1gKU4bKCmNY0G#v;{(O%TVL3ea6T@v&a7h9jsmyH!>}FhrJl*;P zW#qw|olPgO=QE#NE$5^=#u^zEEH0=m2g**ZBx7~wi-r#XRYp-OXEjaH%hrnH>Cz8N z=fjCfx6$NN5`e#0w-e`L%0bdZejR;wl4XY4b_p&Xz|k7TC#h-a$oKk{i^_1JC7VfrLB+{x075dx~quYT}4zSMCiP-0GL2nI>?j;=JL^ou^)Sv50uab2@WQlsey*BEsL~IPpDC zu`rhsXs6%pZ*c+LV0b$b7Pf7ITj(adu2t4TCZOuDdIfe+powI!Zfp*Q#F)=$b$)`|&GObd|I;!3XWVG8@UjOm0@)M@2p4YKzC&WRnV@rJkqrtP zPbs1gWjDlZ9d=4*DLyd5jUA<&B>kMPQR3Mg;1fbgbTY8eFjHIDHUauvU4tG(_p3I$ zS}VFV4HT=LG|WHgD}oT_R>^_+av@6uE*J2P$FD33$9qG!rDt?E{~fu3Wfo1wlc}?? zE-7Ge+1VkB`>v2|gqdymR6HzJVdDe}3cLA}h>%jn43xI!bFTorZE@zEavV+EtDi8n zT$5;0{Y+i!=PVydIS8ztdN|@+GQP-%Zo`9?r|x56?G%v-y84)A1;KU3F=}bhqq?*9 zBw58x{$DtG*2H!i-UbiyW0-kQg^&KESw<%V;RKD|cc{0JhVEvO(njQkE?ef0mdge+ z_SlO~&t-`(Zja>V5YA=zs4!woMCQ?|y1>Q@Xu-hc^>ARXiWV6|@YN@*>JVCn@4*f) z95ucwL4k5>Vz_l)(oQD|NN9X;%6!+i?-cU=qzg!mX;WU=)u=J%xuXWE@$!qO^|LZ) znDHe(aJk5X-@lnqJ3g|Y5`H$~x%#J3;Vh~j@1z=B#;SDGj$oe+bd)udJHUNq?>CHUYzV7$(qEh(AU zQUce#EI_S6>^J5avtrxe2OUt9kp#b4JQz^4bR_8keYUmCm^@+m3p2GDcnI z7lRd)7v8hto@NbhIx0(>$l&Y#VA|HHZ*{W#@S%`ta82w;!O%Mgzp*waHhVx4=j+C- zO4?g3wg|Ddm8x3BL7|P(xYj*+6QYN5aZFfC(r_e)^g%4Up`#j?>DbhRFQy+ZSTB#J z^?#VDoRz|!rYWx{I*;@idUb7ihdnr`c)0k|+Eb~Sl9BD9OR2|Is@56TzI$8ggPaP4@nDx!{L2w#>MvX>KvGKb0%)T`%Km1fNkl6}(@uTV->0G<0JVs7^ zr*$RxkCSxwsuYHN%xj{Z67gWiLifYlFB=OdoyNB$Uq;q^9(B*@ghi(62APXfnrk^L z14=RFtjIj%$TR!t$%1fhRCGec@2IdkYd{>@6!~~^NngmrIzn9VwaXJ z{))Llg(NB4RM!+g8lSIfvTx)(IXNl+$ix%vye6|-gzH6wFUOx051xGbbzO?J zE}xRVhZfTPef0~RQ}EaTk4|7qNX+$v&ss2m4q<8aZrn-e?V@&B33H+#Qj%XC6n%bV zVxoO>K~hjyo)YTL_lGK#o4yK!%`kfwGF1LRi29T)k5W2KI>amiUq)F~E)Q-wwNlstOc6##2dBkdk`GIze98|#K8zCMEDS1NXM?tK=RGL z_B_R(QzyQ6oxVP^|8jkTb7berU0{|Yk{!k1?%6TQxj+dX>OE}k1TnCtit&py=YrS>kceBrw94Otu; zrjHV#OobD85J1CDh2$8Y-y5U8IDlw6&D+Cwe4{$v-pL;ie07^3`)inAfdInBQG(*J zQM;OEO2%p~@(cgC5%Flgq)p>6j?xz01%QB`v3P(T*{Je$vtQ7ZERl4IQ(Zh0B(1$L zV|r^Mxx7h|Ju1nAkl?+C8^F#L`SsOHv)hS_1dZkqAD_;hm!vAD8NVPvx?ZcF}fLQ*2wdTxSNEAc|?cl^jw<&1j{KEpegT?cB-k+kca2?EAG$~C`EP8L6fGNSdnHEAluf%Qw;D|GO60nbd!CupYbS6a|_c}*(+k|r3~#_|o0L_6o~ zDtn%*6_(-xZ4XazM_#9qQz+1d?TD9!6APdgRG7N1`__sko;C;Ek@9~wh?khZN*!Ka zDm97EV9$RaRf3iiUUrVe1MF&jCE4A9xGwpIETWk=7VH&T6{WjB;EaVXnLNc3s@dOs z0kY;8tY9Ao#_WdFlHSf?ZH6=SZ^D{+&&A)FdM&%2!OwW`$+0&Wm3JQUERISw7;-FQ{ne#@w&s?HeB^G>}Q@iKf%-S3=Hon|J% zn3xaT?ZqUS=T(#ZXVoMkY7b_mGJk89B?lHbQ4dXVl;N$JM+34wM^>9vd(al8F8BBh zBx>eW&zmMB`t{CcWoL;b<%Fx(tj%dI6iM%{Lam8*G_Sf6PrTD4EH~^7`O@9hrrwa< z8Nzy-U>G|tW6u2`1<%v2M;v?~C>o{}`VMtnZ;UgL*}vhVRSn?V$hRw-oAxe|vw^UZ z;+f0-E|)L8cx9bS2iu2RP{d3%GD_YKPkg1w{od|gaFr0+m_uZwdJ0%N(qy*^^TXH~ z3>a$v4z8;II?}G>ry~2_gtZb|NXJ`gwhc>O_c_Voq1Zt}Qu157V{aiJX0fc15Wyk+ zb2>dUhyRB}-v5Ky-TyxAcpLD!1G4X)NR3RAR)49wD=CFu45#=4So!DQhK)Lu{WM`# z!zFl{Mi+ifk4mk3E+wTGu)GcS9PemYbG6y>h20%nR|Hk z_>29QhW0Y)yZ+_M9B3+FGU(I;Fv(o{^mNSJQ3sGnKXmK!We=eC+Vwy)eTTl|W!|MTl6X}h@bOz6ZBz+q~nd>)2N5)Cr(KVXFL|MYc!cx-Gq2Fouw zqFL$gT|KX#5J0LP-2e@C8uzBYgAQtnUh68KaOKrh$yy44OpULkBCSVqM7V8;PwY40 z_w8WIS(~tqkco8rhcJuQv7~xdsFf4a%$~p7aYUUQZdH}eI9;YMeagh-v9ux|;`ov` zEniY!F-to;CsADdAUa_lX1MXb7$v9)%@AVwe#G3h^xz%XyluA6{*h2?Jm-V`T#O+R zi*lluRRBW+f4xQd^dXJ%m%W{6kl&OG zH>u}HdX5e}@_epcVgROfIO}uwp$vaEzDMPHxF*oq>43~^mK=(_r)oH3BNO&EfSKC{ zcheY6<%|k2Pu`#^VSX#r{9ZGvzc-_knrlJiKW5oUg>p&-NloqoGHPa-De+? z*`Z~oT)8_;8`!FYqYgu79swVW3yAL{$neXXevig{lqLb$_Ec2S1_5pQ41Qc>lNcEO ziXKwQn3*UCk0QRx{4i_shoS4-)rKN9jNxbW;Js!irb`l7u!w&jgl8_088GcUPQv>A z<)6r@P)Mf$$*Vybc2Wxg zwv(%e49{RnyC2sMtHSSeKtQJKbVxE00-%;I%`WfEikWy3T!VTHYZ)-}Qh+cbWB!FJ zT5|-S#~yvVF4u>HkW^EQ-)s=*q{X1EjL6-S^>ZGlyWw_%N6K$me4+WW%k`d5t*02W zKu9D{df9W*9vIli8~K4vZ<`S`C64i@7 z7=$X*J98Wr0@U5Fkbxbm>8jpjoqq|VC)T5ha7wtJh&{Y0oyS!p+C51(5vAP8Ne}Kg zvsYu;uaU*KA7Tx}Vnp4ghR?s-OngfU@WY8MS;HIiJHiu7DYQzUIp-hdHuvyCbIZUVC`#iuo2S>0h(_; zeNT3H&bELZKWQTRajr!vE)ViPx};4RqhPux$L71>BtV#;J*@Yep&|bHAsPh@+RO*L z5_caW&6HQ+C?hZ~UpA4ppN69*6X%(}s`F~b+^FDK%^w$awOb@us^Q%s4DbH6qWQ(t zjrp$2K+jAXRDCn}%x!*QA_t;xh@XZZ6Fsu{BOzL6R3jRU)*~7uC(wHKSANzcMUXE1 oA--+{q>uGm_GbZ;JPq`dfViRUg#=6*DirYZ2@pq>f6(*)Z-c!J&j0`b literal 0 HcmV?d00001 From 56a28a2ca02c65ebe04df2dbad7c87fcd1cf893b Mon Sep 17 00:00:00 2001 From: schmurky Date: Fri, 5 Mar 2021 16:53:56 +0800 Subject: [PATCH 33/63] add images --- .../images/timeline-columns.png | Bin 0 -> 81298 bytes .../techniques-device-timeline.md | 6 +++--- 2 files changed, 3 insertions(+), 3 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/timeline-columns.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/timeline-columns.png b/windows/security/threat-protection/microsoft-defender-atp/images/timeline-columns.png new file mode 100644 index 0000000000000000000000000000000000000000..dfebe23373d50857090aaf493929edad224cf5a0 GIT binary patch literal 81298 zcmeFZ2UL^I*Ds3tDk@SG5T!^{P>?3g5Q+*&2c=61BE5zlLbW3xMUWnfNJl{FC4ho- zNa&#kq=gm&gb*N<6D+*{_uT*azH`5G*1GH7b6LyfJkPUd&z?Pd@0t1SnFK%3RH8o1 ze3pWOf?7pcL7RetQiFox#H-WC$!~&BU^&SDopDiq*3)dB_sraKm;M8f?zirArSxoAS8TC z=+-R(GKGLU)Y-$_Tfo_!`ws^ND|ZVwI~NZ-urtRYNAo9OPY)R`vZTMd;N)_|*4h2H zn#c+h@-}x75)l+W?9xv{ON%2q7f(0GpN(5u2w6E=IaxV-xRYr`j%ZzM!5(0DTk!vY z_0i{lG(c9ZhQ?7F|5g?!r=up^Jrupj-T1ALe@pGI3w5y)(zbF3d%9UzDSDB`ZmAMDlO&1Jy{4-Dw{)o(R>z3dxj_U??&X!<^`;C98V5MO0VI{+LIBEjIq5{I= zx*`%%qM}mbV*J9lrG$llk!pY~?X02yj+8vWqQd_mC7X<;xrh0GN^EH%Wes+7GADP~ z&dJ=yO3208hKu7!jZ*SpN3a{YVX}0h|N34m$jTA4v$K>E6A>2^yZuB&K-5CmQo!Cp0+`-l!5OX)H zyEbHP{ik*(L>6A?&|!b|L+HQn;?HmY;@p48$r0nQcoeG04@bey%9$MD+{mGfl2Fq_ zaqKpiio#u8?~GcX21^1%U4_{2Hlwc{5etX0x^5?nq}(x~1#QEh+EP$m6`%RZ|$ zKJ++M;%?Mw^V5%uSzdA^?m00GoxjS%LfyeU-umv+UFnMn$qGHx<}crznBqWvr8u!) zvjW!h&#&>x^3BR85#G|?($O&pT$(S01TN{E#AA?5Kf^Hv#nV>4t@)1;wkLl-zsYHD zS9JsZc@qA+DDl5sEZ0Xu^W$hzjexi+#_651=H5j~K|>$wohf6=xlylz3E}DH_JVur zpuHW~1uycna`?xQeXR{zQ29XnVVQ+KRaE0(7qqEr?|@KyISFjIHf^g^OIWgb3##ne z7l-=fw?fNe&FDX$cZj9VH_T6gK9@TQtPGgzqAHI;1O_x!%CcJiVteQHt5&FFteRc& z`P<=+wQ1$Ex9A9iH`%2!Rp0A7``9|(f1-}t4IAngSB+{NNW!;s7JWNoK6@4Q7(DS; z;8~MmdX;GW;Y3LOE8rS{8GOu)tl?(-kqKB7??b+wh1YGfo76AIEZMNgB?UW0!3UD@ zMy>_uFw{;ofRbBBqNVh>l||2){rBEo8Z+=;jPB&yY9jI>LgOaZn73|VosS$(ZT>RP zh`tv}g=O!QYi&!*W66avwo|E!%c}zx3GY?uqV=&b8HFB^LDoWV&Ouf`8JmI}UBbu- zjF8iLvmd4qC^c5=#B9$eFZ`#xI_3rwmHem|30V6jzrE0BfoJWZPKdIYq%2gprUcI~ z8J?Ef=_B%6pbe*~P2Ux!IMNi3h&Vjn4HB?e4o@W@irf(Sn23f&cB6Xpg-}%IWt3K8 zRX*;sG(2E$ovA1_=E>`Lqy8nKM`@UhdohhPt0=v0_faXxgmD#rp|W(a@4meBb`k$f zna}vy?V>^$YV>3!sNL&THtzF#?g%vNR`yjrANi{dzl5Ra&4L1oE;0;i_N})h&dRfg zsz|OIi>%y%-UCp@x`70!8PM6)c50t$J1*O5@%#C|O!|;;l67%B8C2`ZDE%c%*A!AO zlJ#z&{UeqZmJv}c__8Lo2+!+K`M$YuLe2{Y!_#ccmGpL0Swz(27ctDqO3r^tlY94P zWQQ|e?Lljss6D(ihLkLPZZ3s5C&N%@LQP9HH#Hg2s>O_G+uJAaBaEx3S}dY5@DTBb z7qm5exh6 zinbbEg~%Ek9~XUx&(%9;QMWnWKn9fN6U@-Xwk(bq1l$Xj$M+;Dt+VjEGN9}2z{-`S z0O3TpsH;e*``!Q{N33aw-yH;{A-y2+_`0K47X$!8zqHt$nD`Dq*iiev!k@#_kxcZIk7#yv}7YD4Ljqqd~9JE38pwN}*fF>k%jpteqT zfT{w@@mpo>Bj3^`^cRFCS+-auelX{}O6h1?-kO>LWGCXYK(PjTviH1ojFQ)XIJ!|9 zL-jS~^?2jI0}p`2gyhiZaL0o-ooLib%CfJ(poAVm`rAJm<-0cnFZAoKBbrTx+%yHG z$yT{&OaWjQsz_Lrwhe(8KyQjFY{TZ(*(q z2?yV-kB|*HAii5`pi;+q2eY9QeLrV@OyfXl-Pk|1}V9DuNg| z2AK?WpW7HNu}MUvXb{9NGB7ZdMJ#oHkZTNg z3Drn6Y@*c+ZXnCkzdi9zc(5PBcm4ZXbF+?9@%+@3W^#>J$JlP$KV)nG;Ht8+UemWE zCMJ%!u!V$#RC{1ShPv;A6Qc24@_($R^Yb~~2Z0rcQOccuf8hON)6@fnQi z@;wCAPi;n8a3$bVoTUd`ro8nFwBriLr7l8Lank>6(&uM4d08|qe}s6h^p=tPD29mq zC!1KjwYe7Pk&iDS>K{_PcRQ3K^>%<*he5GJ#g&D;0X0PEIZn*48rfA{WP;+5L7p&>@H{QuO9I>L9k^+#4#mU5}x!-o%vDYeG3?EfUW|3`V}?FWA; z&*6vqKL_~u&yk2=2QpX1Vh3xLNHhX`{YUcLNn{%(tu~S*QZ~mlL?i2nJ%#vtrSw)zo-h|r+*+eA(NSrMqF`$4L-qlFHOf?DG)du;T2CpGP)Dk+ zV}06s<$NnNBEWlVtSYOu%+cKZVFXAZ4}IrP|L;hV+nbEogo|%XwY|tFomSp^!EzQO z$nM36jiw31EhpEkd@l^G9y1;!RfkqHF`en@_nxe!4J?_Re}Q8}Bn!JVSS8zC4QwI`Yw<9a)ZDe0>9>4}T;)72Fg%|l}=eAh+ zqtt8G>Bs5O117Z|TkRv-4`l<%i^|@~9coeMPh)(=T$qAK63ab9?)=RJhtOB-{=}4P z)J<_P-&_l%4X*;NhUxY8 z27cJm=Wr@7^0nx&iKeXlaKEp<@pB-5!PrLkknF-JujnYvqoOjS$!_$T!*_1;-q9J0 z!J!EjlSr!NV}yZzfsw{o~ij>)23P_e@X{% zCQ;1Yj20-9BI-LC!~Eeb=s|<{cbVvryn*zFvpTSMNqx!qts3G@8K4u$(H4jWI0mPq z@i@84)pXb0@R}9ZK^<%Eff((WokaVGx2`sM&jxxi?SAP{ ziar%z&lBQed+07k{Kd}k`_ko;iGSrh$P?MqFC zNY|vV_U!J6Di9MjXU(wW5|lAmgsPv{XzyftQcwbxy>S)+O=4c6DHwCv_y$1?Tx3M= zRmiN==7K-nHt%ME;q&T@TmrATbcLn}U3ytA(2l`^KD!vho%oy5zk0=kfIg}*bSqeg zcNK|cwiYtk*s7i(FGK}Xb4s8AwyUm4Tj8s8m;`Fjrer|g%-6ImCb(|1J3`4O=2SI} zJUFdnlCaR?r;3)l>c0*l!}9|Dy6*sb7doxkYY$YO#GEDZ;GDz~cimr#L3O zZg&jV9|?wUr$yJs!Dg=jg_*9QJY7 z{w^WrsY6R&#k+Wn6P*=s&o4_)NV+U#`<7w7dr&p{r3Sx|#joAJ7x;h_DOq|LN5Kbvd@(pY(2&Ig$ zjdN5-R@^$fF1zpu`4wictrzQ%5^_Rx^_4HJp~YSFac&=OUw!#bVmQaA@!lcBUiHO% zhwqV5vLQN|rM~%_qiIF+QR4UPY4-MmCO~^x*GVgjA^ZjAU|Ey3Mz$v#GJ1@S1$TjY zJaTYF6RFuB?MT9#Zex$wxu2`Xb#s4&AKl_`zE(}cdwk&EBUtcdjxcJ#UT@wmPK^EQ zJG?N`ARd5Yk_`l_6yNL&p?w*1y0VxL#a#e%d60~6Z@M@pgZkw0l}0~<>)iTQp)x8O zUwtJj10pqwJM(;2xM_J>e+1@uk8S*vLhX%NxEIRWYA!%Vl$6Y|&!=XDsh`B(1H#%rlMU3rh^18(!&SWjEA%-grWd%f<$>MT5OLkG$m z5MNE*{t_|%HbiEEC7H6kYWz(9PQLGrwM-$p7@rC&97>dMV-AkK=yH+aeQH+5kKw@a znkDyCI59d{C)phsNZ4!-74+Y#{wu;(+w&PQ)f~PDl}AC9(RXiiU}BmLu#Ca_jpB7v z4iuR8^TV~#dXcBM_yh%-1m}^Xr`Xvvlck4UxNKz4{9X&{W^?@=3Q-Q?MHBnpjnoiO z<{O_{<PtQPvw*6Bm%Z(Qy|tQZ4$XON955Hs*l}319u3g8ycYyA7SD!7V-3%kj5Q zA4I?3$azxV|M1~y#mJGdAQUBmPFJBex8LbAKI?4FXjV;Qaj{w%mp#O@FM1mMBHQ+< zq~CjA8Y%a|%U`_xUMfDRt7A6enO_viYiE5i7p)r2VhXVe8ua9NVpdBmFIr;?BIpH&U0XyhC4X?0 zuQ0hP_E{E80T5f;bwu=eN`Arfz4TY}6cy#!1~^_x$*FjRG%t}Frrxj?)Gz9^d{|Q< zS0wqD`sadI9uDO(m>uR8!dj<%QN}?TooS^R@zhMME&@9Liyf(mMz-V&1s9yv+sg85>~(Pi43&eWsqUr8&;Ur z$G92}(wFk+eaa2Hapj=QNcT1Ynn|ginW6zh*R2R?nRvA|qCE9>ABOlebp&21uUSfh zoMO_56-}FcQqGn*s^ZhI13&iA*To+oBz{Q7wyq@TdVcZF5fB!wOM@` zu)n{Kv9DMbJkVL2^A!xcmiuE#&T1IK_}3tVCadcy*7#fue5b0y>vK++-p>AFk=PR_ zrRfYK^W_0GGq`m)uH*CM_-OrvlvY4=#SH-1zF6ev)_u7(XdyoO9lrc(rqed7`nc~V zAD?|{@72He5U=P7oBlR)FFYx$OGk$ucp$0$Th86QV8d+Y`=k3KyGP|gk~}XhAEH_h z>1f#9$@?^y?dQrHm3xARf6>X7eUz66O8g0b)x;0lj ze%l4~_Y*SZ>htWCf&7b{%4}c9%>=I3Usw(JmevWSFMm;S5+vkC;?)NoVudP8Irb>H;&ynKNVbtXTMGRBw!|o;Bn3$UV8t za=bSI->d}z@6HaINsRAxeXFPn|L$HUgiY8dd4$IJdOoHs6J<%a;y>T*U+(5ZyYM7!cCD0I^RES2mYxaI~2QYY@U&;;LZ)t(>tzOe@ z44z(y*SRRN z;0+Q%DRd<~hQP-#HTI6JtU}sgb<*FwxAqg$rKdYU>p7zADgxN2F9F(~4P7~KgkXvI zmhywe+F;6%Ks=$N@Oltx`%9PaJGz;N;C z&f6`uJ(+{ifZ4Yl_dWPKUm4s-u%LrHX$xg{9g&5hh3B>QT7pNkHbBtPrzu!lCd*LA zPH5i-oy0pm09f=&)BQi8m?9nHCyx!6kAVBE4-;iaJV9@~(wEc2=?hn60=&UbvIcd` zh?9x5W(S5vN^UpCxiK1R%3}l)am80peRolj{*>njnMl1uHSGNO;f_h{70JHY4yB?B z_1RcV{udV_XL?wp!vMHe)^(`!N;H#6eDBtgw;nbnk4Rbo+$I~)wIc}WoF~gI8A^IjmPnbu z-yzLAHdxiAgQ$mJ{KmmKS`O`Tqp=Z#5YM#GJQU&LMZ)|5@L%kaj5YyySlrRmE#WX3 zcOGg{`=JeN2T!4T^CHhtpxf~GZ| zH&?#XQ2wIg!2TV|x>C`a*7eoPa{JH*-s)2CSIqnH&C!ak9jnlE^oooxBV(D(Ke#vh z8wTc7Ie6|gH3b4!co(Rk)L#9h2raz{xnheD9j3z(XpAoU-3?0x^4e3tn_-kaF2H_c zirBY0BPKMR>&z5DB!>tKm5}IlI*H%33DKEK)UWRx^2L%Enem|^mnlQ?S28dN zyvS6N{~HW%jU;b~ro&nHCwI5;@0=&Rup@+J|6`=fzbZfNY+Hm8``cb`1(H9KQOxfL z7IJ?^2kvB zq4FHRQAP?Q({c>lRY^|TZ^cAs#;E-B=NzRX^g`k&@~qfqY;oZJjuN}fNMUkdQO$wel} z;#iq6vrT-OP2n1EAlQr>L%n#CwKR>al5E}W*NLtL(Rh1KT(eurgfpS{hYsq!z7e2k z5C4rI3I@@snfyr(-w9RZ#)JXAW?Xc1#PTE=7#Tfr!@yd6XYoF~Fub-fcg&Mz*Zt2> zc>R0qwHG+LoP%^|sS)pZEyL{V+*BD*m-{CGJk@7PfJv@&F7)w++xUJ!7moXQ%nylR zOS;HSkSpk&&gOU_;n#8LPwqL*N#O=rq;c=OAK%wLnb!XD!}q~}3TuC~Fw(rQeQPD9 zs1T|48GhaWt*3f>k3_-meN zq5o}07t<5*&B+e-_P1R><>uy6qdw&1-XuVJsjc;x;Q$EZwuxKTdCjqP|7*%N6GNnnT zBS)Ff6Msmr0AlbXnq+eVjC+$&iqg&ke{z0-4Cdbyw1)g{G4hq0C`KG62U+P%=(9nl z*h%?H44@1jJb2JwR~x(PH9u7NIg;)7v4T5;?Xxh0!G4cT6P@VI2`Dy@-JjtA$36Xu zDSo7kzklDrP?zDLC?`h-_&cILRc?*@<1iF%jDOOL6bdZ=#}$)e@hb&;RMfu}PjS9% zapFq0+))PdlIQPi~I8oB$sm7s$ z%)VJcj+i&%$pM-}*1OVfpx%K&(D-vF^XAS@XQ9JWC@*ES!QqEfj7ojnufsOyN6zR- zeR`i4M`H$Pg$^vp3fgDi@RBGPezkUmd4iKY%r1Muty87V8+i9uH zfkB=zL-cw9o!PvF2#G!s4_ZbeMezZLvBB~Z0L(1J&2*Y~lp5a9#Rc@1daS zjZ7H6e0K`I9geDlFTL10U>~kt_I3FFozgna-gy0aN6|{1Q!`V*^*On+DV))J2W0^6 z8^$`^jH8Z}6y%JJ_V+D&KdD<}CimFHx(`-9HZ|Ng7i`3#Z5Hbd@#amHstoWSuXL5a z@D_Kro{N-6AKV@4hIw*-d6Z|{cQn~>gbU-zPR^Jlc|5*|om{ffbv|!wfsV8GgAB!z zB1+{P!s@NwR)IT6(9PMoLmRp-&m9O}!g6cyyB!=`j zLFVd=5#bCU$K&PHwb{jr6?^wfwq4zVjTfw0-N!poPmpGE6b3Qi1p7~K;k3Y(hKzRa z62ojN8=kq&+0hU}+%lDXR~&n3L$9i8*R5RfvkZS3+{^KDf{@+_S7Mj-Oh z48{vDpR9v^z(9W3IhhJu;D>|VkKyQk>iM>(Ff+yyJ;b+)8;WAM|<6y)x73JRY0@fJ&3ky;c6%Eev0XVdLHUyzca58wDh`fwfl#TqIoA zPXJt6s73(UcEEC1?cyX&pO#XVVWZ4rg%($3Z8+;|^O!RRChmmk6azkH%d?=vBD7J^`sW z^O{|qtI)(S6xcS}5(jb*@&;)9O@vzXmhaJY&!*-(*uQ>nseu?>i>Aj2?Jv%P4|dU{ zRB3wB%&g?W#Bd;LE3|6D1V6}ju+vacwBk~1J)99@23k)JB&`UTP6SvE$`u~W$T^uv zXGz?~_!o?pMF;MV0|mXOd%*rUCYzP*?bo?+sktC2^F<+{oz42LgBoY>o?~+-b=<*L z0%f~Td3zSDx>+y0&-7}~aMp?t;~@CbZ9#Jczmu(&=G9CX!aQ>)w!#1NOA!B$JXV2g zR?TZqI=fq$U=M_1T;XyZXVQkF+z9sDhQb%limK*3s?+UUM|2adg8e?Xd^*>VkPUCx z@w3OY*}V&(7}Sk>f6gvb-Y$vvx~slQCHU>>W#ked>=UDxyB(2keza-AdEXQfxPJx# zWu!Ko-Y)KvBJx?Y2var@L1k`Yjw_wtC_`@rIF-RrdLn~tciVw6em5^QNxk$5MfpBa zoz78lxvqDe#vFOOy-~FlBQkNp)XwfPB5C6ejh_zH7@*>jN~TA<>U;c-mnkv(wAqW& zZ!9@{Qj(~a9p|D{-?9Sw0DsT0OWM7>J#@%ixB2(uh>P!*gs)S*wI$(K-i^Mj=r78b zEvkJ{HehoYWYW6a&>l*)fH-`6TzGrF`1$^0gDe-lt+~eb-V}J~wF9k}gPSf6hD%5_ z3ev?CM4tARYG^(7Y&`^Vsjw(%6!L@e2cbBBYs(bN-C+h6f=m$$qhBaBI1Wk~g!Te9o>goD*r zuh^zUtM<#b#-wCdNrBame6>f{x`+|gxUB|_0(~Tk@aowETs7Cj3mL7@arXza@Wse$ z^OaP!`e-x}ostx?s_cL1RQNPa)7yQA6wB^p%QhhmfA>3I&;FI71?yQHsER4>S9eGj z$S(XM$^d>kzaXCbY4mZR730AVm51fNB?IuJ_7kIBo3{gbvfxXKjHm0rHjm@HU#6uaadM zz-%8YZStf_&1G~zt-IpmSnB?@qG#WG1YofB`uc>zvc|%A_o9UY@|9AoGkwabwEz>5 zI)@)BAIPKA+5(d-cnB^Wa1s{k{d5VnFmFGR?$GU<+z-XyTyX2D{2n7{Izt+xE+k1d z6<_vU>6b!$XEOcLk^mQf-s4nwH(JK@{47hShS7?s@IwTDSCyW#C~YcU6NJ6mgNXN{ z{kWH+G?0{J*FAk^QKD55@KU_k=1NQfYwvLF!225KOv9N7QKNW#brjWfKGpen{A&=u zndPT&Zc}eu_CSJ^DJIVMHNs~OLzstYFF z4*?WT>mlp8pP1PyF0?~T@KLNflS^4>qudLV+)8q5+GmxsyKUOBM}pSkKjdr3{tAmQ ze3sB+*u49YA7@;JasHagE&jqNK~9Bqx^{K?xsa3l3MzlSe`OH_X z9Jqo~VhmVZQ~M;j#&fAV&$r5x`X*V?8apKXNPRe3TD^?uL&Co{=AY2C3Tm}$hrW`E zp+Ql1FEq>WgUf(#!!U#s064E*GGXF|S8gx)0st&yn#ldhU;ZbV>ri^HFz#|%@jN@^N#H-3PJWMRpp;kwy8pytR zdy2KJ&AC}PNc)Y@v*%QoNwGueWF8a!4a=~Fd1R7Hi*1?Y16&-J)e9!aHLPd|<<2$< zIU>JEKGeDXnr1#^$=*DBEX)S8fg36y4IeJXZDUL4;9N2f!GF1fM5jXw++_Nja*x@A zv_e$$(oI(KE5AtpD40i_48%Tu$dbQd8t~V+Ux7xk;+tFi{_$1CgZR#+!OBv66YDVo z^hLI(frBZ}+|V9fv`n&emvQ+u066spvWxYgmUur9L+W!5_5|vag3REIN%#R|e?}DE z-h7Q|4qHE46Qk4ey_&sfe7D2&#Y(NrbW)$4`wxNbyfM$@x`&$AOmfHa@^h?mU?{$f z>&-c;;ajQeOg;t2$!QxhD04dI_!K89SDsJmMt!w{qN#j8MsG%6ydySrcrhg-K`K19 z)@{!*`y;H(A_J6)vacQK{RWY-lx^tntkx+@3XD^Op z2~a)%UI#TrDF1-5!G^nT>^c2q-NNx(=Ki4k^Af=!;!oc1o~xh>iVB3KHL9NXIVIR* zYzS~gu*_))cw;<9bo}qzJNtv0+Ta7|J9`jXbnTis)C%$;>@uNB0+(AUw z_c^lQPNF88ZpDX!Uj|P;{*uML7-orZFwGf-gp-`}A*KOCOk`+0AZIbsry5pSv|>V~ zCmY=!ch^SZ^0~^H!JU4SgAgFMninarPhqW@d=6VCAV2n|Efm53Jz;z)PG)s=XK_a~ z-FO*4Z5`;VX;} zAZH!Qfcn8V$hqNmy|H*7z7z2aUJsqXB8jNykxYwHjDPiG#BEjrT0tzZE1A?+sfiw0(Pm|m4`U+4KR8$H z&{ZI_VR$~xf;KfLZ#OAis1d(3i{fR08)%JNhsk}LF-TE9U#v1Prqoy!GQnS78L0Cb z_`ZMoFE;(WxH(Yz-V-(c{B{Zbmsljr;^82$iq@C+8W|I!)fkflyO>t;P`c^PbavxL zOVna_d3Vxw;4AcHZpu+GR2d^r0Xb&8SdwU+FrL3$>Vm}-LN+C~mJiVa@^-aV{4Oov zuXTeZnP=2*K0mGQB)`5x)1f^6x;T$GQbdMaoP)QR8P|CnIN|#)t)Kk^_faS- z?xZxv${tbD9UV0P50Icq!a|@A@SX!H`+%e(@e4-2lfsQT3I79b&vxAvmOv0!dSRE3F09<~ z7U+PQU8*I60_zdt9YM}l6px1MveHqp=l;Jf4i>|R+xdY91SH>qA-;qKRQv7-sk>EJ zMLtoyXM7P|k!3rh=YRZuPN1hlU$R_^f$V4DS?Irr(A5D&_TMb>zF9u=;mZm7x21uN zZ@~j-0=Ps~D&scfUwQ-ufV;HnS6kPN)vB*u#(H;wtNrl_HEP;0;E~Xy(_@8Pnk_CY4liSG( zoLtNkcQi{QUzGX6*t7Zt0WblYjF(4pa3$ht ze78h}{X< ziG|238aAaA?X6I%?@A+bQh_(ghAwvENP7xW7_3Y=v8E>JWek3QV#LgJKS-xJb>C^A zT@JqL3!OnE*GTUQ9Yp-Icgc8=NXbOFhS6t-8FlZL-(N zV1pXkp#}y8<}Z#f{P8imWA6~q>FPaG+zV1-EA-jX@%1-Pb1?8YjRn#ie|Fn{|2{Qf zH_ITfG#SS9_g#e3Z+s9e24ck+p?cxFhbsJg>;aK@8kozskf2F2~}r*Nr3w=`$@F{YyV=0QsEokJ&Zp_yep zdqi=Xm8_}Bw4X+ed4Tvp(Zc+-=dY(HsNa13LXI*tXAjNxzfk3;jQ`Hn{--RR+~)sg z$NIkj!+^=|(V{)vJDzEb;EDU^suW~KfPo_cpZ6vmWQPsJ&EuY--kVs5mDh9bA1KzI zGV`=z=Ukldu_6X(tR#%m^BA&58VAJ-N1UEUmH4a4`9D$>{StnY^Q^D`6j%rq(Fn;i z%XNr+{Zi`cGv!f(l7hl-+hrY3b!ju7N($k6GW_sUw)ax%Ua{e0S7oijEwom#$6G$O6Gza^c){|C`;KiD5e}Z?+h> zNNiJbr|~Cz;u9K%yWZ!y9iuX?w4(?v*$lt@eBzWpmuuW7*P6^!InQq4nKzas0C3 z@$5@wj}k&#Nx1e%EvB~G5IN~SQ{dnX47Kw7L*T$ow)2I;9g>nxZszRpkjdNqoM#jw zG2Jd+jwG3mmC7GJOgi;F@k**|`+q4#6Z8kF!attbCSA1lcPx>*vdH-<0PeBe+uhA^ zp{aPzTs&=!v7qs(m+%hwJbiCP6bWcLfRFdAJO=d=u%;=KWltPGM96ra7PZE+H^>oUq_hu4x@n!fRXxPM)TMR8p9Z>v_dzy|q>h<|R$)HP8(dmpapaH` zjGAU=wr}ECpmPySDVV;tfByUJ=cTk_Q?~|wc(snQ=S8HK=;g>?c*BJ=;6SuM>Rm-l!U-2QWbS`&5mqUrT_J$q?2%*;U?U z75K0l)0~kyCEX^(jwgp!TPoSEGhhQMv++~g$L}n{a%7*W+92i0M^#XvmLHRPzv|SD zzFLl$OSc~Vva-`vfSXTse4pz3R^_PtVIlY)hRxRR=w3 zcA+Lz+C_{rb)vyUQI2rsl_^>?ASjmfm3;eiUoeQwo+TuoGaFr~xzy`>w-#SVzdCD` z$A10}_3vt_m%_n7F_&R2w`Z4PgptA99EvATs57D)6_g~F> zG5%N3RXWqfYU&f3)!{TvqtU0~S7@XYrNJOpjn)c?;B@(g?R-^yLV5$r0kjv4*ekzg z3h1CrTYo^l6M_bX=F*-8cx%tVySCrt1Q?tw{*fcRsVDOTi^6W*<;HsY;K<@`%Zl*q zF=X#5C?Uwn_L;93?^*XDnl=dB9(*vOSIUbCOBIapfDoGrOg2L{8(Q#A|HT=AV{6IB z&i!3;>Gg&}-r2&@$Dloli^0w*>C{2HGJdtR!Ix;>j@PHEB{+LjD9r*p8~q%7ze1o%V>YBh0C^G+In4kl^6<3YD^q)3P2IKk zCdZpB{B(|s*CZr7G%H+tHdQbf9Xtl~>eX^x(|Q{cE%tX%tZS!2VXw@rRyVV-`M z>tB;?WenOF6@HSF0cozoX7&sWTKRZm@|VP!1-RA0Y;pXJne-f+qHv{f-hkr59jA_j z7iciYq?1}Co+~xHq#J1tM1KjjwY6P`Qc-`3a z+hm&nsVuc3ft1(5Tq~16MWJ-G4)6Le)e-@e0moUi*Musilam)u;sPO-dbAs|i4_n|_;* zjJR9=tXF2vyMfBwomAEuxZLP zm3n(wYSMW6l<82)iNoLNp?K=3gy2egYptG&*Px%vRVBJId-|nME@PvfhS;t2}93-HMqHfryI5NC#e5& zG&c4ov-SlK>u#E@?B>y+jgF;3f5&^(v|t4Dp>Q1YAA`Qn_q34}Q+GSiLy2IJA|*+z z`yqLie8q{~->Su6|D($qg{&uXdfhpt|x?;>Lt7q_GFDO*TN$a3xW zj&I=x`vAsauy$)mv5|ep#DI_?BqV6aoKKp4xqsR3!!Og|APi9VrAj_(0bxVjp7*F} zd9vH@8i6ey?fR6w`Uq$wI6vK!zv)A2crIXZ!9+(*vPTuap;c&73NB5n0yKh+4T$}y zoghPx-Cj?%M@g?u&@f3q9yqE{zU+445EP90*t5UVR$3gXf!|fW>jt^BXc= z*(kx%rzYH9BMnl$1J%hY1pXLpkrQvI)Zw7d1+yTO?jks_>fKUebjhezWrZ(d4|j zQN~BvA_Ak?uFT`M$t`DrWriVdmPjHYdmnT#eD*nEMwi){l~c~8{$0kbU*guwlnoE? z_u@LRY{5Y6a~uRE5b$L=plK<22_D)3#^VZ&i7PM9pcaM3VD)HtD)h#29M_>lbm%o`>62gCM{kC+Y^$|)}`VQ+Rw(iVbu2-)!mgX|^S%OOj z8+|0u#wR)W5i%=EZA%{_>$&^P+^Zd4&y%6XW#dt)qX?twn0K^^k5r5&5libU^ zDxzx#_HQo=OClX(&XgUrms&{{u;*ZgTcDf0;5w0&vgl5>B zC8_mJ6~RBDyjW|r5u@cXp_o^h<1yixcojnsFv|FFJ6CR5?ZzDaD96EBMJFCLFllvizF+n+N9pui8u;nUSNLBD<*BQo*a z28Q6Fe5tPcg{&SCBuzrF{ll9TgZ$1`>F%4V*)p<_i}j34to*lyLE5ClcvYvqTN57r_T ztXQZDNgqwj?uWW|fZnn*PN!~7D_G2=*^BqO9B7Elv4A>uDp+0_z0^;b?F2?N8Q_a- zKtO&$Y_EA|_pu3P$@zv&6DgS&WNzAgs__Gc_}gt7Itc!^pK%`! zZr}3Tsn7}DRtO=Vc~24-MbG2sz1N21P-ZeU85tJOFXuaWyy@P9V$sQ?CvcBrlOE;| zGaF-ZUTl?*PC%~I7}#Zzvs&#HVvA1OgIX^4T1^lRkaWpBkLqi)dAkMODcX#@uB5`|H zcJ(_X^IUCSRrl0OynTL9=Q8xuHwJ6&xO7~t))a;thnH9;*6Zh1kI%iz!M|VPqs|LCtWwi2 zGmoy2hFy%nc0z)c7B9%I6*fS*1VmcL)M|@=yPcP}-hU3%J^9xhm zat_YI8#6HNIN_$gap()G!LY;P&){Q)+pI3%J*pkbYJ-<9iBfFp_I91|LLPSoXWpyr z*zJ6kh3kxBnK~17j+4X6=n*YO8%s~Mtpsp|nE9;Bi=*Gl!v?Bbn_IPdpLEV_c8^Or z7`B4R>{L=Rx^+SoFzIP!v2mOxakASfr`ypvaOnMC=4HO&;m%9K9PKA`uL*4X&0d=| zi<>a*>TAR2)9y@<_3I=^u-x59Z0MkDRkqIrfg<`<`QJDGI1IamIa#HEDmE?B4*!0_ zvi%}o4F-}IPiWpExonTIFtKcmUuzT{A*&Qhfr7M&V(xa`B<#|Yw#Si7`mE*N$kM@e z$-5RE?4(3z@oLurt@46*%6J)E)E#`8%sKw#lJBKoI@Gj*F|({{IVMIOFkAxnnHzZkUXB6QlZ2@viFs(w-6?dJz> z?b__%Q&Lh6DXmxkC*Na!;WQ(3e@r7?)xi>Wk#%fxJ?|0+Go`-6EX}pHpJsAx5FRh; za64t}xWnx4eE_gF}Gi@;q4Gr(#zqd9NB~^W|flp629N*6n6*u4KB=-KG z8Iu}&m8BHLUteE;S=9cfIdH`ht`=(kt1P2e1NQ0ISk**Hx7DfU^IWQHi-YkexD@lO*UKPvZ!ht(5-Pl6xS6) z-dLG*+g@YGx5F(dsb@Tvcayhh0I$T@ezrKVA(CRD`ujaScz5uyr2BMw?(6SwHf1aC zMFK01&!0It@Dkue)m3gy2qLq-RAwzJ#$)-B8+maw5Lud$;fpMl%lT`e@4Ef;Ya?N9 z*Fe(w#$$nx*QSuiB2Y?w6Jk>8 zEa{MLO&F0y!rA^_b=BYB$rF2>p%Bb6g_$)|`Tg2`>BaDL;4&TA@ZPNYQrvc9cS<>b zLnyNTNaD#9DBG!z#2Nvr(%le_l;;Xv1J|8Nimf}KcJkr(8QB}d_76+S2_e>WjBS-C z8H#n~=u788Q=T^ltH$#fREqM!ui;g={yHJE2bR~@`He8B{8S@b5To72Qeni;=l?oq z&~3bg+vnLxeQS=nqeDj^0^m$x?Em=oODvPq+RqQe4Qgz2NA*}C0;_LIq!{QvLP~9$Ob=d-?C*gT!hy$7QwJJWn3l_I{w!F%3qUywMSU!4 zI*ZFIVPUSC)v$E&!JwCtoIHq@+T7kDanGhOItI4Wo(B(4R99`a@NzM#j=ZYP0P`|( zo<|{wc@WH3ywu+2b@_%V%wIsyJ;niujf~9mYWD&zkAn46rIEob#5CQ)s?Br8o8CISgSJ%q-=%i47+1r5BT~wN7EqsbS-CT_ce|=ozQ_dyzd0k;htiVd6@~ z1>J@uJa#76-L}UnN&R_s9!YMV{ZR=>k-PDC>^h=kDGnaJ?v?Gc%cwoGNeHEJB5MAg z_7cNRQN9Ab>an?{+n6F%w^61BzZgPN2R`je zdaj`Myr3JhPIx!HIIu>HDpON#Ja>ieBX;LLLvM zVI`G6PTZNAUSS<`-_Buh-+TL!N4zP5_5JBfb|fKOZ(kn;e~f5+>iL7Bb+{e$FL@0c z^|8|%8;heJckYjYwPDv=U~I*sS^~dC$P3zArrEpc&0l$sprnM2OFECDo#Bst;T>(! z!FVN87*i2OYbqLM@nb%7#n{jJ>1d?t`FSMyKHt=3PNz$e99=IUOLa2F;n_#gRBiKG z+q%&Y7vJ!?ShVtAPWH(+-f@1Qmm+Ks{j8|)h80$g`W76&pugVGGLI|`E9u;I+p+rM zHVUgdVj(#rE*MQ@l%iq2yBwB?899!~D_h^{cDd zKRbAVcJ|N2M6Px{haonFIHm&kwpvhPyVZU+^FySeTtl02+s59#%|xp^w4E(_9C(M_ z7gVtc=BKIXJxY`3eLOh&D+^Mqdw%G|$`S$znWvsfzG=T0ijm3_`Yd6fJMc{+aiM?9 z(kUmpFL=XEj+3wkqjw9{vhl5+~m)?&3A0C58Et^SC2P2E^M6^ z{&c7|ghL_0ZC!*bC~;$ApkU?U)H&++-&k3h6J=bN-XfAJE+P}tGmosr)LVaYPue%s+GsEU}FA4%i?p==%)b_v|I5~JnlJO2(XQ%>h zPg&vy->^%U|lV|MFb`OKdbbCB=7EU zVg+H@JSbP+Db@1rj=^n!+bHLD5I&yVa3&Dv3_W2^ECw?lJ_J_~ewcIUJFpzGgOabR zxiNhBw6Rx)MXT%4JQK63a>j~*26SC?|Yo+CI}frH|m&SELJyG z1nd2GUkgWWB6WVIy>_ZBCoEZ4L8>AG&r#R#j56(gW4S#C{}f<}`#HS5yS>B|#zbPC zkivlVv9GUBzSzff0so)X5U8}nvB=Wmj25v2A3hTQ<49@u2#_kt=LbB`HX;7Qje=bF zqafaBhWz8OvtW-o2+0fl!^oftA+odn^LPILaKOjg_&}N^+ihF`ZP4xnzUW*E|M_h} zh|SQS2)pPk1rb8CvrQ~`-l%uG_OoE%KFQ&)IJ6TmP@Aa!`NU+g{;v117Jt|gP167G z4+zZI+Sg`{81LRT>%$Jp+%C)iTeCcLc?etjtYO1r`+Ewu!6tp2;DFZvo^n414jy>% z?UH+IbduT)Adt1<@o-c9VE27rx;rK~O4OPDs#$OHivh`T=LE>E-_Yj{Qs+?;-78 zzKNPktNq0kJ7Gn=#8UXIVKOQ^UsApI#&*po6YEM$90}K2{mN;ue$#FKz=5GUa3P5! z=TYaT=Z*_K!^V}v(NcJor48;ZT}gZ5^{UAub|*mH>RxD9_AX{gN~rM5%AV`q&>3)E z@F>A~MuH36w8f@JYLg%r7xR)(zJfQ`4yyX^P zzcK)R))b>1)Xwwjr~M(A8cVbu$bU9JP;f$?ZGXuh>+M(?T3{;fX;WKRAs~;YsH1Ut zK>M9(Q6!y4OvLeDT%$RNs=MHp6H%Y>_i0dtrd34kIcAG`^3`S>g5i_yvLPxuNn<_qIHd3lFo+eLL-R8+uf`Sf^n2@ zZM(?N)o5zx5$yXjL#+|%B+N=d@WDauoA}}mhyD|FkhF_b#k*al;@ag;`4Wvk#U8${ zhD#uyDX<@C=%^N*?GUtaeLAdw$0kbcd4t_vUlHri9Hx#%KdU`9>2u_<0K`TVnA?d} z4?7^%c;AR_XElhD#AN2z%&XUJ$6qr9!+f%tQ>mUb11`Ct)LQGiW>oua$DyP0JF(K+ z2OhiVxGHD*90yYLH7vs>Qlz%=%z-2lBvC)LNk+-A-kfVV&`gS#O4Kad-nx`ZG3;)i zgI1#V1wzfREG-2isvTZ{v*lbIWxnTD;b>(ofsc1M3g&uG4IbmzWO3Zjxp{xb5E

ow8 zK5&nKXI6(C+BR8Y2-D8}!5V!RPq*kK0^dEHdH{DB8_VhwAa*~LgePIYUHZAj*~jv% zdQCBY_)+*uQ7?RO5thAiL#NVyrt0Lj@QvA1s(VbVo|fW!N2kiSW*@YbR;AjCZVcnS z2(W^VE57b$&c2SnkM+l#y^SY%VUE27neu)Z+Adlh$2zj`#lBl%Z+Yop=*$%61$483 zIBnoIc868$fTyr8WNN1d^Kj76zhB(tRNvP-0Gl18Dy08-yG^J_8|?hh1}qG4%?zq< z+V7cbzFb+?JG(duvd3-+;20*I2qW^yK;KEt{Yq-ajN`|18kLt=?9(+KsFvB(Hk)Em zhAJww;f^iu;yWD5(H^bU*&a$;glSkAdVXR@(h-=Ww{0&!L2cZN*Ld|+tMr>xKEiw0XV5tZ~q1yQIc=i+hG93oE!!-_t36JHZDIufG?fP!xKN%-I&gehI z5}>GNP3M-uc!5Lpmxk8C>RII2aK)iZ$medKWjj}$D5%z-Uc-sL0^2+6fOLks-ZQBm zIYwUwBr;x75Zv$%k%Dx{O9eS`*D^~>n1yMCIu)3{v zl>^h3*jPs3N`ky=yLKIn(09N0UG=|qp^%U7kz`==siY=;+4z|oy1%`=NGdQ$TjAF> z^bxFl`{e~+FX48Cp*JUTNFhfSrNyqjFx4&eukH9z93E5L)16Q>q()7m)Vmw-FiCd& zFZb)>`&hAs&!@QNU8-GmqLDa3*{$MV>*m@UM+B8bhoM&0%eh09>$OvTc^%wcp(96) zxqZ7gJMu2#8WTzdsjl#3IkqvHc3|9p36Fux!e`AG;-!nM>g8H-3e%r`8rE0ZlOvRr zlhWSWjm^!?X_^SV@GWurJ6%0+@6=0Ce7s|ioYEExOLeYo>*fm*g7ifDX9yuk*Ex6? z>`ppoy1(f0J*7hhx|glrtNgmCC)n0!B2=cBc=LtFn6nO6zuX}diYhhU?Bv$c#t?LK zjV_<1{^zD1-i5@`t@^!kU`oAS0uF05(i=11d#a+vJ(GJ8*Ab7eSRL<$Lm>twL<2MJ zgM_av7ykYI24ty6X$>zEHYOxjYKra|fe1PYR3J26p8|DuTuU*gZ*)N?om|^eT-Sw|v!mJI!6;S>&#N9X_bsQo06Q8doaCx`p=jBhrW_!S8Fk;7< zek2xR(<#cv_^;rs(t#=9wNqE}7@Tq?55UIevvZt}3*-mNvrv(5#q|i&n1cjQ(_g{) zFMRsIR8kQRuSK2`y6S!=PVgW#WsTM>|h!TFAHNsfjSVdEF zAzJ8WF;b`UjPJ4k2&0y~FUime~_s1hRgYp#SO%tL^{-0Os zi)7gJMB@Gs%Rj#B27#Dv@ct(R!#h5|%^#W$8e?4+M}WyTz{H+62Ep7nxtb9n&wu~W zYU5x-t%5n>%tDsba_{c@gHf*Li(2oT9eu00n8!)07UTsBUlMww#N92IxwFtD*t*{P z4#NT2+Ey1PQ!i%6g)~FcBL_@D&hRH(oeD0c&l`qkd5jabNY#sz3>GKyOvUpFk5=dy z$N_t=KPRupOAL=oti>G;EOp;bX>8%{h^_vI0BQ*)W}I$wu?2*q60D{U^z0 z-%KkvZW3SR!la(B)mY6OX_#1(3r3RnL$|vuvB5}@Qm~BN+b0eEp5C9_9-Aw@a>z0a z>K}_(J2x8h>G%n9ZGz%C&nZU%~*!Vi{o$cn$NPBc@%KEx(Hxo4HnswhdL8 zHt^yVXr<0NpjugGoKs#T=U8gH6$T&E+d)nCRJlg1z3`MFxRd1PTN9anFs{a4S3weo z;=}}JPeW|ZbOk%nmL&o~zJ7Yfhm?krVI~Qc^t@Cgszm!#hIYFDj4REwyVd`lii z173T(1B;0=)AG0BZZf(Sb3%37>LFVwv?5YpEaG9k*v6#Y=wniCbCm za2TY)yCu71oG#6=gZ31(kL&SP#TjuD+7V&YHv6ev=ea-W%UFh@1(vCr)Af!qY>4|) z+xOO*A+wqIbnI3J{(FGs%e)Aq5TUC-c>8KPAIH7VV}1c+;nGFA_)6G)iLftz_hmG^ zou!B`ws59fTc3>w@85FMt$sp8u#! zzv0~ay;CGDFijPuqk_Xz zm+irxA+uN`sVNO6Ceh#RYA}5nIIm>rTg(oFmJy3#vV4={?@VQ}V*@j%x0W zELy0FPx1t%yU$!{xKeE{XHjza1bAPUW6i1NpLX9Tapnw6npgN3MF{2`i)y|6Ant3S ze-@dzm6S7Ie8!x2L=Sl(1W%SH2Y_Q5m#9i)m2T4zSwG%4sv+WC`YGJisQ zvWITyQ(hPSdjpN(gq;4t_yF4MOR*-$D5Kga_nSW-x?R)xz^zJls=#h!i^d8r#^hqUJNjpZ+DSBY__uAAvcsR}6UJDg#aX3LMNhQ3ZZ)6y5P|<#>GOf$9H_CO)Y)zC$-gS z)bd-2=KLkoQ9p@l&L#w5LHENd)dWG{&@s*q1Zgm6Zf`kQxDnRWS1qFRl^>ccf@{ZB z=F6hipHeHAC4kus)C?cN2w}Iy@!H?Mg2}@-(_dA~^5+hV5YkJFLq$B3%RoP6K}uDAS(ecEsfS zHRXKXp~|^{vId-g36z!wSj3`EE2m)#ud%b~^}W05B%&-vp(Q3J^3soBxU>t57Zx`= z)P~`cy?Q1yZwTCt-ZO)>!{33*MGVs$R!*k(revcnhYZGgvSbMr$ z(h=XPJ|_0kS33`!#xF0;@$v+uF?}ek+(cFtjCGb9$Jkl#E~HpLQF}5w=aG}MdBDa4 z+Q%8`C}?wrf8=snrIi2lVsl@PdBA7B#VwsFPKTp;@+L1}7EH}9U#6Ym&_4Qbkua`0 z5U=lFYU;77Ww+C2{X#s9{1)HcAA_BV#~pwB3|^NoXv=+Y>_WR z8yi}b_R~0?gW2^-E~E#Val;2W?nXvgSwa2V29yjhBSL?l_%C2V`~NU(l0*Qg#tf?bwY9CBNI|zL|p4u zx#SP$zt`AP4i|n_Tnroh5X^i*)J^X2)w~WAEQ2O8kBPF926aqIw3`Ak?)tHCeShiQ^T}rMS2}YnhrPsfQol--P5DNmSlKYE8?W33oGdaBYIWW6>xw z|GognQOtnHwlNKo(p0N74! zw+%eTzOTr57cRb0?T@+JY~_e$D!S`nWKkUP00d^f>A>w{P+YM*Ytg;xp*H7WEK2y% zhRNcU5wWjt90)KJ<;5T+F$gBYGPvvGv^9QH7F{+<9;#cQCXcL^(~chE$|1|gs6#(R zVNPS!rWXTM6-Fr!yY&UX*r&hF4Od)Y7Pe8HI^leO8Z)+ZQ9S;d;U{kYb4@67Z0ll) z*`7K5DdDSCVq+v`K5mh0ZR{0bvWQHNgb-|^6wdnL6|W`4Z9^=-U4F3ewspvIErt0C z=s@7?JU37QE$cCAcvmj2CK#3?YJ)l{mu5y5J_(Yv}_Xem@hBtOzBpT2aR?~ zrw5oFx3^2}29TwC@$bY&4c&rqL@DjA9?ydv&xjID{LM1UBL|C6Ij%J7D5a{rEtK+I zF8)tCWtdaVE7prs7`@xuBaOlr-^`9ySG2`z4$;ws_TwGM_{!y&L{$&GaXKN_u=Jas zu3q4O_jKT7&5_gm%LL0xz%qidBuxkq2eJM_c93L3i%Q4^M~sQ}zuH?oR#Xpbg2J|+1tDh>9UjTaj10U ziO{=M_;2{JjaQw;{=2}${PU|9IHmIz*fD*{togS!JJyV_k3-sT{rK31a$<$VF4`$^ z+Cd8ivew^ex!zkjQV3iVcmwX24i`%=;`1T5P?{Ce9z${Y{#P^HNsiYY9qvRLPmBAg z+`5^D#34>3GCKJTIO*Q=7$fXXLDe8*fY9OD|DVc0VAfZYw-C4D)J6B=X`-V*e#;V% z^ZPC5A2EjmPgdtXcB4uDB6f|N<;4Z@FK*v#@R+&!=2nOFuLu3lt2aNbe`j<-qgndZ zTlM4wBZl0}RJ-OD#-xWh@uwy0{le;_Vq{QXTXFlo964_7vTU$-je|dTcysGr`WFA@ zj+T!7CqvL;gb^ZOrx}VAQ97E2S_U;K&q&iAq{w$DKidM1JcXeLY^O5DJjSAwKK^=r zgstZ~^wm^H-Y9w8C$DTZ%SCE9YUZOP0KjLigM2CD`V2-dZ@`IHGwt<{eGMyL*9^pF zKs}IqdDQw;?m{zy?^i+GH~;4p#*y#%6}=t%FFX7Cf4;7hkfowHeq{a1?QzCy52zJXxG*?H$wy$H;!-Z3)-g{&VE*v<}9{C&2`3)4gRJ>j=#Bw+W z_zX664A~~U`XpuFcp6U9r7lT~RrP?D{XxLaKJ!t%vmj>oK0}0DBygiF)x@XD(BJgr z0n?H@GZ+e*4m$V>8(_bWujrIY6F#C%Dp+QRf}@(xTBu22xH5gcgrx#E<*` ztPuSds57tyj7@>!o{sfNq2<75JHBNHr|mu!y_W%?lhdPrVkOuAjp|UCOa7|G^l~o1 zDm~xrqe048|NMV_XMu$1lR!{kfkXK+Mz8Yp9~T>rAP_6$fyMpxKTm((pgH^lKA&X6 zbq1*u7_$MfG!{Cx;Ir=!J1@+VZyZ?hY`@OY4r?>XJ35W&Z%WIBuqFPp`1c6d=-eAa zGMHZb=a2qp4*b=QOWF)*@UnjcmA^ot|C4&zpWpnGvi|N->dE{+PWr!pKvWo)njPp^ z4gNft+4eao)PQ^BZ|HmrOrX>MtZjBB{!iTMe=c)fbN_l5ya3b$s8B!lm+S4p^DG8Z z#2JYmSfa)RMFt>)!3}FCEFx***#RiD8g%XsrhE?9anVrB3O|1(Q$Wsz?o`Q#kPlEZ zPSe&=gZ`FN?YIB=u)~4T17+({MDaU0tL)X}0=M4t?*V~`TA9HC8`pdyt~ip(c;tzT z&Q|wA6URSsxsnb9O>ScOgEkPVXM`D8Ae-=*ONPATdZEOMf4yVgsr{Mxs-}wE>XZo| z13j+jeOr7QPQu*v_S<#oQPLkq0IRhpvFw%AB$w9KBMl8M3jlUooSt^C!=GyNP zc^gjXOw6`v_%@@`F7>OT&S?ZnK^*9c5Zcy44GBdpPeef7dkXY%18pgboZDu&8@%Y8 zZ&4K*y(`pqOVzo;_c(Dgdc)r^UxjI5i(#6s$5^N{R*`2nNvrb7b1d4fN9Osqsod2p zucDz`UtRad4I4AcJE(Y>f4zyGU+a)wH+gx(Ay6L+`ef#qzKiBPTCC2-n`-LtLzpA7 z&wcE6gEANCUXQYPTC-chXF*I#zoKyQ52n_%roI5TV#H!e%D}V$REl@^ozv7+$WpJ6 zv3ph{`W8{E$s$d_Ha{ZGJnZ;(AK!(BZV7>r2N~@Qyitd9_kG{G4_lZ>?l!pgKCI<^ zuKkry$nLv2{`j9|Y~PTj#S}|8iSXvZ_n|{#3qBhlrCIp*n)Sbai+{?AMMx0s<>3mY zEsV6-ua5wOIj#2w>(-OD2a##TtNb+y=_WI|FvDPHVpZgk9NHa4nH-$uN0VOB zX7m`xn4x_J*#I;vafRfiY6U8 zB83x&0HNf3KOo#w`yfRqf9xytuK%?-g08b9S)n)$?|yCtKv~RM<0GNO$0<>wPSyoUXx6f}e$U&7~HVLGkKRc@eN>KJyrxL zvVZK1!4QzeG68tp%Ilx-IB?LX`PWFM210expHF=AWw>J3FGJw#BMNuqg3Mq~UOntM z_Cu{+PT%4tab0BwNm{tjt4xA!ImKTdzdtJkl#$Ap~D5H9Y5la zdQW_Ed`a0eUTossc1kilz~&4c8@|Uem2V-iaG&GAy+TlB7sy@uz3>0uqVb)A<54iQ z4NN9`yuOq~fKPiSNVwSZ@~4&`*e_nd_iwxikRJcyklfpSZLv}zk-kN)%!Ta{B;5-l zm;D+JqtDR6Y;8L>f=w9B#|H~3qcYWy&esIIP0UTUt^jkec&cBMo!!Cf1Q5d3`?8^; zu5+>7Eh;pD3$?4gW$m$r$i`?l|omjY8#%p0>qna9q2(7TtmUz*}A zJ$VZOE-~9NQ&%|KDCbooeL%lIjUWyFFNTKd(;KR=wI)PI&P81CWb)?!xO|ZzhP09+ zI_X2xrVEA-1-jxdaiSASb8RLKqCR6^&GLwtzHmv7Q}9OTN`h|G?6+Wk_rv|e@K#Ve zG!xgLCRVO&^~*@o$?xI*8hJ8JxLm7{Q7h!`6ta|lZ*HSV0M<8t$*?&mg7$tYM@msjhV<>kg_<@6oO(kdKh(B#?) zS#&5F7xI#fAmQE-aJWFGs2F4^!Ybkgtle4~vZQoML2{)+{ApcXqq}Q-l>kmV(13k+ zoP#bgGWPp^F7V7(=>E>(S*25rb7AOoy`}gF{PTIGQy$l=GIuoODYLWHd+)bzQ-ZeL z-PCT(7ge+J1iD%hORKh*9T5R)qlG`>rYncdw?T6K&(Z~tJ01DSjb3l3XrvCB^MY~b zM@#H4|FedXB7(;==tD&*CHSd}gQ_C38M_*ORbg}W<@`0J0bMZflBD*R4c-=^nIjgG z+4nbaDsjUJvkCqtl;S!J2UYg|Q=A@hF-j2@j#7o1g?~oss8w-lDMR%mVs`wIB2K;N z6p1_4vjG=`G(absHF#M@^o^|k2bU_V-luUWm0Howd_z%Z@?9>s8rG(~8p{j*PFd#% zUMR#No}q2?&|M6grE0sc0}^7rgIki&m0S#JuVKkhsF(<{D=6I)iGM&Y51##D?79Op zT(3pIezNe?TA`3Qd+<>D{gysQH#@_}UexOUdm4yjbpzx0yc4W}pNO?% zh`qY3BxYnt&Pbv9jW6%7x~A!^i<Fk4oac4E7DPKfQdv zYJH=d!M9~I<+d`+(kl``#dEwO&V|UKi$AgxW=%N|JxE6G30wEEJO%NzH2u=%%BFav zQ+1cjE6|X0S|Fpr-XVspHl|R)WC%0$cE5g2Pfd{UI4|^81idA7_*S{nw~r1{6%vms zh+iMXr=D5eN|AdM}3rDx+w)I@+yhBtA#dQLVUNj;vn%H9)PWX<8h!^&4qW!Z8W&` zXu+_fkwxhI!FuYNMI>$;b)5FB3ug%X=-0F(f%I(dTC-CakmMOVjlN0n?MFIxPPSwo zdlGL&n3B619Gr$L&NR4ml-lMdIJvI<1ytN0oA!X^@({qc7wh(M<6z? z$Z7)wT3q&e&~5H$_)%8uE47^v&}psb5_dt?$el{ZB8kLUujdUkjvS;O_o^8=UeOB; zC%&;bua8>knjQ1qb8%@IcHb92&5aiaJk=?yc3QDKLum~?qCYr% zs7CU$flV=X@kPMX_D*rZpGzfrq<7M4bG+q>%C;4FrI^eK)77F-o7zmK@#-H_C96w2 zaV!<7JUdl$5?AAGPJKaTKiUG}sfqiR#;u2hT2y8ZV>xjyr_}IAuYCU8#SINZ6JN=` zz4PNeT$fDxd^=svTSx_LW9!@mem*z1HQ#etmt4v3G?(@@aTld1*qA|Gs@V%P? zL3@5vNE)ke)1eqHbr$A9d-Em&i|TOH-1G4$g6!VU-K{J?^VEaU0HE{k#*& zvJ^zbo6KHBiR=+sl=H`_#rJ0EQbxN(c>UWrave{9_Nc_(rkRU1QjgFk{z_uHtW(_O zwU|Q%)L$^DYw~phfr%p>mTYUkW7IY?JS~7kLXlO_u-uyBgacir&N5T^&u=6(_j}*ZfO!im4uo2XfejWl^mf&F)hl`osZ(Gv>r$qHqgnYubj8TV?s|ybtBxT> zRQOXEiRGxOcn+)4kbth{RC2K$6mo#_zVm)J2-ZVM^4d(S)mhasKlHA77GJc_WBFhX z7khf7an-I}2-8&QdzIoH5AZ4LC&h=>ze*8-4HWcw;RpDR9%;+oo85 z-{cHLlz?wIHqwDe!{_T(Hm6?gDq9)H_$ghu+kzWwc!}7Vvxj%@Vz%m^DObRR9%BhC zkmry*OxZGI>1?v~C2;GDr55z&MY%r~>M++JdCb>+Tmx8YhPGEX;_KA|Tz(Gj?GQZ$ zpd!5|-X09hsndJ5HXW>TyL)Vk z5Chhp@maOYkMzp%A3@jIU1+W23!8xKGx0ruFaIn?OjRY4Sg{zQ!!UR=)>^|d?Thq# zwhlz%3W+)b)QQB{apeIrRT=g{%XKL=yRjqFwBi&*duCgrH|CLxGPiN@_E*NWgnW`J z)Do+>D|8b-N?KMMk9(Sz4B1I>@Ov}8B5GDlR}G?Py<$5*8s48`I51bV4jae=$vwFJaE z)gX2N=yS0>2w6JyiDc0$s{yQz%9Gn-!mpa~6L4?l9Il^O8FDl1J3?ct_^BbjdbI2d znM4D7d9^Z-%JDK!)r1i-N{X`EKPr)^*cn4k!sj}|xJGVnX0Ez#y8G!~YL3n8fu(rI zKKvLt*&7*YP4_(e`wh$L=bI(Y4sVVpACKpXqx|G8-QqcMSBSnJL|r1XbWx|0pPVnR z@vKnvoG^AQKbdtwTl64`B@Pfio+8mb1(!EBZ4C3s?d>|HSDtkyrpn5I;HV&B>>@U6 z^$Jx>RgtLVRJn98w_b5wn6^J4ExEcFFWbdmX}PTIw-jN~rd0Fs2Xlf~G13E%=Eg`zq0XH6|C1^)!Fit=47LV(1Lll1`e~lvHfW9vaDYEj9 z%89=$#OBf2OSw`u%Nxlxy5xIYTgrOgCBVqBbE5Y{PMk=xiY$xp<)?LY*5h_1Zs(ORE9Z^Y-O;>4m8l zcV0d|gwSe742}vfz}k(zy{~g>L??W@HvPV@1#%Un55(TvCX|KMcYH1Ac*Jiym=ch4P=QFPxEY;A@D3z)E z3~D^kc}t{Hv4JePo$&vF%j;~b09;;e<%7cdj*zMC%)QLh1$es6^icVaa~E6~Tgbbq z35vUrrKi#Qi@OMNWXxSrqVdFCtX-v7XxXi4ADPrwi#_sDmYf&DVUkBoc`3p zf4yz#^UBdot7{nphf+qfbPL~IDSg3?7urrSmwHl9bwTZ>(k*;t&2@XUA=4Bnft)W? zOk-M0uRMW%@ODne#>YrU;klVM7Cvy{utp0aK59AB*2&i`>gXE2a#3xO6h3LV4=}6z z$%Dr-PP%eN_vk3iE$Zk?+K>;Sc5+ipGV&M_Ae|Y@1jat{Sst`T=!CTVH;!$!mH!FL zm){@w{tK30{MpYPm0eb=lW|hu2&R(z+_PssSf@pRK}>Fc{lQl~y8gXbaIu4)f(V>52-Kn0>oSj;$idvb z=OS=-6^~ooUaHkGK=f56E-1kVSb?1_oPHnbzX0$ooq04}mOAD)+}~us&)oEnT$2!Y zH=K+lf(E|oB0}h>h~A?rJP(TPIx*i)(Q9v>%0Ad%ECI>${-xodr3d?8?$Il<{)wuQ zQeclux^_F3SaBa3qK@Ttn$OA1&wJgOFF|+9g08fPZ!{*#^fRd+0zc-@hRAWl)ez&)p1zZFfx^PCNeOz6aFn z-~3BZ;9YFCSf0T&!268W1z+bp&{?WP8?^Pap0SLY06@BE6N2{8pL+(zLR9~RbnKwd zc9yNIk5J>C#3TSHhXX{3=7jjKNT%yaMW9 zF!h}^yp=mvzuLXwr}ywYOyM_*o~(`DhipV5rK*h#5?|GZ;QxSO;53kocKFzk*?xDw z;w(^Qk)$79>l~20;&T`K!fSOfUjR4OeJYIA<{?fe|WhqMJ=6-0pwk# z_1|@;Q)_-__UW1Fby`291(qI_+HbT-cjN&Y8R^w0>vwmwa~xMkJbw%o={H=gUAU*K8fjsk zrKI>i|J2mce_r};oLG(rfWTB=u64it80etGaf|>%A<44zH|ZOQ$j|?4%dlN z1h9repCdDv`@H4or*Rh{0=u}1v$cT=73IeKd|fvtJu&~fw3ydt^!FSmz9RZS%J5&M zr*I(U03&ng_&+D-e=E}dznxGbS-o*yHWOrnak?C~DLbf(7!0MqggyE$1J? zl%&3Vii2qW{JZJxOmt^&y;KJQHu#W8ny& zk)9$6c*k1XLL`_yrW$|mu0Z0oRxt4SX4gFsu=-!{j)8E-!P~!pUe>on_;k)0JF`=6 zwDUcE@vIS={8m`-VnmoOX#&Ym2_`t-^EI7hK2vxM?JcgDmdY7bXS%)3u4sYONcM=- z=jH?rF%>2*OAU+i^@Qk*z;a<#_I_x;af z1di`_MA#fC(yk@Jw^ZG(FsYb(<(HdC&g{D}HJSZ=*?{;;Q03D2IX3Ml5KnsC@$J%J z3l#J$w|G#alXdjdCt+&PybOy7yMdLcV}T4RRt!m-mwF{XB&j3ndvg{7&X;5c{xqq| zINig*lnDf9OCL-d62vB`zVrfBTjrwtuM$ZU=wSJWc?^sVR1Y3R&wB#;B_M9z;7H;Z zVJ8FABsB%7S$?xr?S>@+=SU~B$$!fVjbDT&KcDE;zUnO)XFZJ%*b9V3EQ{)cxq zPFMn^Z~L~4a4{X*N$X5iF}1sdp%d|S?HO;_=Al#0uSyh^yQt>kJJYsk==>I^RujV` zM3HaO$XHsMDuJALRpgV152|#uC=N`@S!v)(<1VLuln!0-z-)Tw$ux`LC42g3PNn2( zR|~3y0=#OuvKJ=&T7fsYS;;=OKKfl%s8fVhwl7UDG)ecVbmgN@M^oi{O8rxW=HcI` z5D~@t=cX}!e8A9J%P32dig4^u`Z51Iu?37Xj$NphaB66NzWJ&ekHub>(JcPQ$#)m0L^L(T>U}lL*uB_68d>{ARE(vV{ky2g(+ZfJep)EY9IH!?ict z5>bsK0(#k>UIoeuBGC%ZdTpfaLeR%NmInN@~BWsmCe%pr;PX5Os0g=^O>Xx^w zUIA5yFZ16+tUR$+co387#BlZ|d$hB|&)E~a)A-=_U@dFap+ww=b6#hgf#A6**ZZ>| zK7xTk5`US!m+#YD1Ik@E_WY4xq|PP%vaUW%m8SqgqxFh=Q{&GocRcP|ynM2@P14Ae4A1XG1kx^zVZQ0*E(0`Fk8;Mm=hJDLS&Bm8);QG7XUeKBM-FZHBbvbwvxI_9G8yd42i)xyBWWeyruQX74ED@z1 zE34Xlc>RTiO{vMWi({fu*kfL15UJUHVaNALp2L0KK-_j=-3YiLyHC;x6h*FnQ&g6>@8nz~n^e316;+nANixwQTlckx2-3NiAanIUjxOd7HB1O0WK4Fztx zVtL7MT#N`c*!9K^OY1ey%wQ7wU$GW~mOMEILc2!Af^+xk<;h6i06M1PW`oKL;N1^E zLA8fWeyEBieN`j zX_d2sDtRhlU{TshR7!qKK)Ycak*0V7jDE}QWfoKaDaUgtZhnjk68eaj2@prw_yyzkdHC_5-%p3g)T%B=Q?-Xj?I9V1L3aPM90|&0a)e^jvdQ7k^o!qoA9S zyZ|o95vNpe*$jE!60)j1{(bwh9bjm9!_H*IZJLJAwLfG{q0Ek-mTIHMK_bg3(wzXI z@?pqVtu<^f|IQo7gIWYbwnGC>EJn2H*T#nzF19;%lT0?iF}7*DUz~v-l&1?TSUK9+ zIJh~by1~!5=>sUML}KLEF`v)3M&3DYP5|XrTR?7dE6&}FYaqB}za2Zo_N$!!B;MP* zmrsJCF%Q{-K~d?IsX0`CP6}HBMN$_0(g09+qDq z{;1FUh{wcnlanR_{wHsK%TPq}1wSSJ$A_Ez54!=}0MnHByJP%`Ie}^Sra1$G;g87l zT-K-u-KaAYLxk;m130$?YCSCai`S)#DI9yKPA424o20!=1*Du<<*Byf53X!{CShAv z^8qS%UnY6JLUYynDiRmpN`7c}aAAcc3{?0I-2N-MEKY37%f$?tNgbJiK-D06QvzeHgK7zBR@9-z#I- zicv`xJ(eL=Zr>iLFo|5LGb}nCeTqvLzyvtbC;c_@RAPX)3^%3-*noMnS+Hu@Z~Z>4 z>!vxvj`LkYB;$x{BH@r~IM5^MqicWi2(RMF(RyXSMBm<04bY&nKezwM$UxMv5}3V= z~+BPzGH=>*-zvO1b^5w1Tzr7``b`nsxqfck;*%qib;A=0(x&AW+Jw z8*r!oRo@2?as6M2!GHz249)+)_y#~G2Pm?RD%-`r=NgqsrFbGnQWOELLBKy_;@x?q zBC)HPx@?)$5Ni_Pl>ynUmjUvhF)#cwCo#h!0J^vbNWZ?9o*qTy*}4-!F}i;iewc;< z4;+waX}2>kOHA^|cq6U>B7^kwnbA_CQaO$ufG6fX+er^^;}hZGQ>`et(NyWY{-#0w z7vWzgIeOs?rZ*6U%c%Kl?EOOL54oELv9^c_F1n*=T%Wm1n@C+(_@(G#Gvuc#P!yv&H3BZ$1@XdS2ldTl+~k1dQ6Kd zE5GV$bnA;KkPjaooB0$aHjl5~Gx21;aQ`#su>!C5^{?Aj?hJIISdoElSqq@QY4qb= zqHUhFlAy}09>UVtVylPdAL~=96Sj*duI5(;xtIfOo&JkjbmRlM3id;5Z}Ng#@t?bOR!nE22_P&oTZo*a67#lQSVEd z*UVR={gv)SQt`dOs#Szo&L7r7Xr61N_JXCRwWR<$=D)>Yq(reXj8;xw;F^rjw^qc^ z$aADq?4#b)1HZl|(tKU9r)FPnb-{+%qCi;rD)q>}ZT$Brm>rFte zi>9I#w-(OW`x$^cH ztA&F4G?o1HlhtoQUA_#zJm9PVupYlpPfnPB9k61LU#CySW;uIGq|0D z{D8f_dd*1tO6*VPYLEa{oD-XOf?!+J6PUt81G(e>64C9PNZ9Prho3sm*6Xk3ovub+ zxNijpZ#KBS8NKTFhb$Y&(~h{WF*|*n5ZrnSpfD9ugoDud(pRcIlrjA3)-eHb>ejAi zR;k~}YJURFgHQeX0QhEfz0?Yb`O!;`S*5nf^$!q^Qb0gm=`4%jpHcn2pJLp?7XyHZ z&vd}9?jAIufAnUr=;6gU@NXt;z!DnHQdzoq^puAIAg9)8yl3nhmxsUkNqt;0zr^Jb zhkNil;SXvJWVJNRM+4aoLMH`nJL@IL6n@v)m|&vO_x`P-`wPOP_Mt+RHbU}xPe}&z z_OJ0f-5|4h5Yr8tOHc_@3%~Pd3~V;4)J1vy1tqp&t?*AI$y}q2uzK0+AV639b?K8u z=*k~S?WLZP`q^I8$xmggQ>vt#STyb}4}7=Z=GRXxvCw9<2^o)386i4ZK9dM;p@}E$ zh85L|_#qk21QE_V>X9YeWLTs}bM?C~9*k6W7?X`3Y*s+MoI85TaYugZ; zmxqU4@jBY7IoZ^79aH4PIQsE^9BITf95zVWk0YZUpjt^ z;ah4}&5aP&t}X|iX5aBjSGA3g>h%IxsY~Fk^TC;#8R59D$w!22wjJWAgkT2DZ^V1b z^0>G8%Ifs-^{PwEc;%T!-3o?`tg^Ibc|#HZcclJQHCNTMbA#%A?7)cL>DC#23Qx7| z>a5$j&`c?!ZI(8Avmm8ve$&k#^zt|C@=wJQn71xnS}Yr3K|M%xFM`axx<6nk zICN2HXRS-dRm9=q%TG3Y?Bklvoa#L*p%UY6GU2w~z^Kk+N^00~lAJ5Mo~k<1W4nuF z({m{nK11BqotfXNT0c^?*X=u4;8C`x7BFD1d$RbWp+NiMT*A!bw;wN19yO-auTmig zS$4^KE#qv3zUtKfT1Xx|)|!gjU`A`EcXuC^wQgvO!obGs6ly&Mnh>|ZV|U+5?5Ys~ zgnH#OP)fakdd9tO&ieX{o8Zl<*F`?ff*;n=q@QbNpiy8yTrE)8VWPCXQoX^^rV>6$ ztUP%WH>yz)(%3zTaQ@;5@6*VxxRkIc)-(dB)Itgs$G7^@7?7X3}j@uAHhP&qnqE3O@MwNRfs!UcWP}R+>Ze!hR}Z`1^v}oMq0r$@sKn)K{Fzw0updy$|4b zreikf^(%<_r2c?S@_`~AOoSh>)Y9N1_qF$o<6H1F5yuBDamE$xyYDjIy*w+Izwh8$ zQ`>NvdOqp+x772hBKw14#~YPDe*t-*hlkP$^M1Sdw`J*UidnefvMDk-aR0_+0eG7C`+ciz#SH0_+@Sxfgd z0g=kxuUrO%Zoz_Y#0vJ0yfO50LN9d?Brav)VS$+_IWLa^vN%x9VK%rpSz}eZZcPnR zvE7+^aUA1yJQgpgxU8ZlVtU>tH^p;Rzi7T$G*j3HP^IeE3W)Y5D7nM(B3m|&N2v6X z^O#0<52Y@x9JZccrc>^_*;*GgsYe?7$M)cD{R0j%dJdhc-6;>b5kldmft72;iD$uw z1ZesPjfsdJR{ZUSEJg5+eF0CahG*IK=D|->YiV?Ypyg`gyLU(fbRoXJyspe=lKEF3 zsa=kH+^D>^T75ge8Eh6N9iGkN(>4}00%ZoQdsw_6o3#Q(Buic;`kkpnOf? z)rVcmazlN=srRWm3zo=dj8xdJBoJ0DC7V79_jaTfKt_sV)>g9PUSQ=9$5Z4sR1jF_97zo#f(YFqU znXb2N>~Z{Tr^M;W)B?9-Z-1cW#2bbXLu44ALN@Zdi}v!6=j1T@<9kj}OP7r>=Q8c7 zvg2PT>3jB}&>PHcbj~h0U9cFmf}7xuXGTcRoV*^dS)$9kq>1qbVn7+Tkt!yV89ktq z2qb2sngkJEsgxTcpqT|-Am^4}zhqS(s_Xn)=nS78J5;W~c$>F&dt7YPYshnyfjz0@ zu$YDT!U^MJ*fTqWm=H5Szu~5eF>#v{+o&7)^0nLZyZ)Hi=Dr76VaaF*Y%cil=y~JI zMUcVRbLn@5Ql*A9@4LjA*QR%|F+z`$3T#ynhx$cZ<2XaV^79TsplHYO_)n}!(K8^I zK}U3y>!5%n=wa~2k$a&g&+z%iObv@r_oU6mmtt8Ut)m-QCEQW(5pPLq#5t#9zY(IR zHp3j-Z%MO$0G$GavIu-#nA`q5^0#uBudQUm#Oca!SeE=+Ef*aiZF!Cjb@?M-zBW+j z?Y#vWHCdt9+5w`o{h4l{D|D?}>hs?)HN7D&pj+l`fjPz=SimjE&QV4s?7KuOzpRZ| z*+dZoPRXNnwp2{Lw!S|AaoT~++qp%9CQIAv_VzYYrIv?Bd7N7rfSNX7Tn6$gKoAs{-Dt>>!73nB(O)l3f(COzwuyTIi}m`0N1C!WRfcGG<@w+qji zZhTLti*v;2a(+xL&Ee&~$K=-*JTKYQJzFt$@?;hZfFPr4wZ-k-87@R^()CiC!kpJ> zD|q&sG*T+hIut7?>DV}5V97fK58}A2J-XVqfg+6FkL@$|$BYk7FV^e5lF5fWw!ETq zAMkoxx#Km_#*Onmi)Gg&BYj~@xm!@>`-QUu;c;jH=L-`34C5t#A$KK7gVr;e_Shox zRh&L&XgpEqv8n-C@Qc9k*VW4sQCn+j*S%MmIdkK`xNn{c+4m%Hb02JAChNs8n_|-& z6A6N*JzXh+I5^6^N1ke`xHCEFWcAESZi)k{<8;w2(eGN}g890S><|_**&N&}>60r@ zte(kgJUJa`fg|@?SFRXswBXdgU@MnMK^$;Olui|#|M=~9ibICeQGOlxSnG^>KMu#t z@fD3?&4&f{OpwF*cls-4G|vtyqhf>Jm-_Jgzwcir9|mVv4H}ry9Q>3XO?f#G^O{r& zN*U5(LTtVyS#&IxJB{`>(e#-ApyE00in+;4D9!`**_n&sEp3Y>Sa=im8~s5i#(F#1 zMpX>zBSe!qgd3ka3m+Xdd(%wnaVnkVzzg-+Q{!OjH3Cm_WkEu>ANih~dnm2%?(#DhyO^e0Gtx<9T?_5ysqO9+L}%o*^jG7&z)5D zG&U|I2GI0<6`Y23cH)@%&sBy49(JvyhBEN5h@e)TJopc<-SjX73mhM&{%QavOPj#R&AtP^t<@%AwHq+U--)W z*y^%H?*~EN#eqbi2A+>m!PqujY$!G~Sho{sMdNvnoG%pRoWdI=cEfz1UHi#r#u8Z; zE!qYR;1uq1&umVd(~Q450uFdoXBalA+%vA%^}AlK@qFjo9`~F**T<3WQK8dxSc@z6 zq-BCB+uC~k8x3O_C0CZgiU}v*1BtH2QOmg!zsP*L_@>7J@}Vt6wO0+M=(J;puH|2I zZwqaq&>DL6d}T^;H_zk>uAMWODu8W#?sm?*$u#4jUS)y@^|iVj!x~ZPUaECkk$~u` zSZBROyK}^!S`>Pn*-N#;KX3NOhpBlJ?hNy&a@U8y&3>b(2Drv0s251XxISpVypsrd z%vT=RRdJ7Z|1qgLip7fDjNf7-&J1`2H;Wix;B|+5_`vRxIbtkkjuxfUs`GZ?wUI_` z2Yc?2=Z#1sj8n1;f+4rs-FO-%lCykAYl-pWtpN^A5F#n`VEVb??u89buDS-!oxUTSz?eu0YDz9<#iYeI%)em44_H zpW#VaEp8iWyauau^J@Q5WlVerP7!(|5QoI>D`9R{%Pk)~Hw60*ZMe6Hessg->t$}r zdOj(FVcP0q#6w7Y&mKP9opx%@>{G>*H90(=5LdL$3nikw=sw zDl46qdW|BP{9M4`t3PqGFqT1_#Sv_8%H8E{87gxs89!Y|o&Ir7U<|kR1Nzw6Xh*#y zQ291Q*Y;d;;hDA7dj}@to6l>z$CZ9A^V+;alPEqA8?>tbF7ze(i+Np>bG4q??Z}oN zsL>D7zuI><+-#04qp)Y@w5!$a7qI2nU@S%pU59U}DFl_i=0GxGK!J_rVu#8`DhL!6 zm{d=yGjAr&ufp`~T~RDe0w!-){81<(Y4f@bFVRI3`RtG%6vw*G*2dzFkNH|~H;*V< zlZ)(IJ0wvogI#wzewcy9trc#kf3sF1=pN!ro<&H~26UI1fH+=Bl{*`s#j?OP`Fb!O zA~mMVt$O^T+o1-!esy~px~#0W_ZEe93?d{2h?6#8_nn^2ndq_f(Mz(m8eU86p-MfL3t*c2H3J)H!oA%>E(D4ERH1USjphPZ z9Rzv1RY5Bx{k5-MTjzKC`Ca<8*UW3L8}tT?OXfTan0~%*bwvWDO^;u{b$e&3#Y|@! z>dZ5%i0IRNJr|i)Pb_|Lf%<3pcSH~j6w#9SfKeM@ zoL_*g`_QyCd~y@0?fJfzs66RA{#59>x@1Ik(^a^}XRP0-n}|nODgg^|T7{Qq9(G4!@+-7r?ZZ0QeQ^E4;<>J$+!-*Z9T?mr*&jj_ zD9eu(CG8rHtZ<-DUCTXG(ypi4F7K>6m{p-eOsjGl_T1$%U;V|??=6L&bUHRRh03Pt zt^(h$>z96&y<=em=EvnDQ_HZ|~m)aj0H%0pA7=q(5J2SDSFJdH-`Ke|*XRPcCBmj1?JnKUk-lLM|m& zWQe+4&Wt6)VDD1z`oEv6%kg|7_$B~9=xZw2e3+=Ny4o=Y8Q?*oF(5Z9r$vmLX6x7sn(I=_!^;8U<+){9Ce3yX9Wt+`FDlnYjlHyo zGYf(e5EX~$dot`He8IZqm>zLCS2coh5CS%MuZ6j09of)e{4--xTCIgBwKk2jPT)6? z(@joSFaGY|8{%?cuWl$aZzGHGcOAb)DLB9XIh1CxmP3K6Q*_1bFRIl^Pm#rUKQTwp z@Z<}&w$*uXFD*@9BRq@gqCs=@=+_hkI*L&Z^1ZCl?$I9+4Eo^dT-8Z#DkO18r+nsK zSabBt_jaWP`*_+{y6VL$t#i7fqDqMXn&5Y&CT-0fP$-Rn=VzPz==ZypN94IU~i>a%u`B6T%WkKi|r7bRZ{hoCL#=6Osc=a}a{|?_b8uHf&Y3nBHJ@cpa zf8U*X*HHz}Bzo^r&u_xy)e_^ddzFPVF#2KM-2Is)p`k$nQG@xysN+}J{w43;YZzJ# zyg4&2s#wYM=dspr?V_)ke;_V>qX0`?&!Qki6(G|9KPc&PAiYb}!1s^gjk$rj4=W_L zkrswmNGZk8r7mF8suZKyIan$+RjU1~?v=az&k-(|k~BIPP^{qoBh>0G!@j{97mPG# zV+kqxA4|Rg*LcBQ!6Iu;h(i{Ob@MGorfRUNe*WTDR5*HywAiycf?eA$(qvlvuJU<2 z=vTCMy}?jN&LWoWGghr2-5N28Bk*V;>_kyHt6o2X;jRM?0Z`)c&zI^G<9V3R#EoKa z5jre12D%+?70;a5$|_}Ty-!B{%@y;K^Ro?w`8{sK9lj8qc*w2^p_I)tQg434qyyN> z&F57bvV&=1*u}V2#rre&9dB_#-U23-+2>VyzUDhnQ7?yD^%>F)n* ztY=*?X#NIRpP;#v$Cm4qIr{A&E1b!u#tDgP@VXPdSkM^{2LwQa4eAy(0fHt1pZ&0^2i9bB#yqc>_FB zezxieZuVvSeLt*MNH*RQ-xjj%#y>s)7TTrxTCFTtF!E4?_*h^auNN{63nqk9rn&vN zbe-^&QbxS>H@&vAouDx9X6stE3_qwKzcr$jRiW1#}PM|^=x zkCEJPBdEsF$5q&i#zITfv?jhBf*GohqHM)cPy!bL#`@CTNOL_zW$BmMJPsseIx4RFv+g3+5>PQn(!;a(n zgW=-=Z4II%O!SHVWKt1J0KZkw871- zS_|06#XdJox9cvU$SFoQqDQD0AxxW?p)=8yKHa{EK)y;w)(l~~yJW)<=Quz#%3vD) zIM-ohVDc2(-|i`bi!F%O7{-hqk9vKyKAOD+=?FIbXbVEPAp_}Hq(IP>npuA-x+;&i zEsD?ABsYFRlkLhHTzL zp_{7S3aZ!TV((r=WPUo14#j$SZs)Rb6p%^3^PKn6o3qxhG9TpHJ|N-KO}82*p-tSg zg1nR{mN-70-QJizR_#DGyJVb=%PBC*jLJe`hd7Mhi=F!PXF-`v!)XCEH&~p92a7;Nm+x8lv z$R9R{O~WqdP=*UO`FL>-mf|KhGX=^is&QOkwnbF)VZ*c!t6?3c#t=?!LN^=r*`hpa zll3<9>NK{wi6R?Ak;o%QO>>8G?0RDFdtfmha;Ul~ZKacc8SKC1uI}~LaOHlfdHF1bh^3(2ynUUY zm!l1Bc<7^=6G4tA$0hQXPTtsc0OJ`i)qdmA!3KA}7#H?BZc|!bJV##i9pA2Azi*dO z;Lrxyn;kmWCyCim@zJeGNV+KPJU3}db*JM9K&!w`M1X18 z8kp@597{l3^ABv(ob|LiCO~k-3flKC=k_u1R2PW|4>tzz()1qd6RFN4E+Wv|NU>tK zb5uYw2)5IvmYHaAZm^6f&Fs|u+U8rDOVh1W)wpBmikV=Vn+X9iYJdCKp8|It9$qoh_pu8)KsARN%67<# zfi}a((&5d@K?6Cz5(b#_Dt*SRfkLCt`iqspq(5gD&+XV-4Bx8ok=Zi=6H{l#aX<8^ z)ldTCfWaNVZhtRlo$K@=xcSZ26L+1I*>);sgTsx=F)xX!A?2CR+7%5B?9#Wq2HPI6 zP;R7J)PU8xg<7GB`o1|aGGXKOCxRn*1ac%2x$oEeindHt9!UmPs#0?LW!7{0ByIyFt)M{$cR>ni@DNsu;=1;<=#kI(aBD% zGcs#tp*A4=5x#hG*@~M&>A(k5_1k{mg(mO3K|1*KE9E zBs8$d$?dAq)aZaNwb}jirH6zwUwvoUFyf^)$Hfh+jN<=9KJ1a6~chR~Q!e{~x!?Nk1 z3Xt2tpZVDq@gKO`ej1i&bNAcL9R)8%Q<|`bU5f+cVk#Yp zxD~6RNRo_(&M#SgVZXNfjHfn}-aj8s={s#nuPR^r9JNS##+sKxSD)bgarn80zy#e~ ze&)sU&_&o9k?nf2j$&r~=423ddEzN8Sm$6;-*Z2E|=#Jas* z?b?OWzC*!CB?NheIFH%P*6n4jb<1F$y#Di*)ua7*$pPlXp;%_*`B?n*>`3a5dqsV1 zIz`QT@v-*a``@~!c!!B-&!UhWyt~GOhnDE9QByY%;v~k-YW`74IveOi#r|#Q_UH1y z-Nvl07@*`In@HUqw_T+**}3H$oK)5z+hsNiQV!gL1d%UDvoMhjkT@Dgo_a3BXbKj` zr1>0OA{^4HB2$$eWR~{czxMr{l`K>4$#fnnF6D;Vrxo3eh@WlU68e}Vy?%CT&rfpO zp8h)QPKG*v@+|w_!K|lqnLjhM^boCC{$a90$h-F2hIk*5l7D8!Nf1pQc`v>R(AfHbaW3 zieXL(QR`3R<24ll4}sEtciY@v@q8~ls!csLkz%@yZ6g{C@jg@|~^^*XmkIMMc~dbVeOX zl@-t3QekBavs75mY>h&!$j)qQYI3FZYe?!dl;vUcgdg|r+sM0}?+w1C*D^eW*lRjOXUXrm6+u6na)xPqIs6>iKIwIH~5OKb7yVc(!}3`Q2@o|A z9F#=*Ikptpw)WYrujf&NI;?lz1|A@#1!~Z@g7$)OZRb&UI>A**&O`4L#e^IU_Dt`Y zDV5qZEd*2WCp5}Hh=RbVD2W0TUCp zWzu=76Bj%tw^7SCpp)EnZnl2Pi|v^bg|;3sb6vPp15+;NISC)PjTC`Xf;m%pc6@x$tya)t5;-U#RG4Y>KmD+(<}U5cs~!$|7Mqz zzL%wgZyL6Z1YFpdx{V)NFU0IN+b+zmddHiJuN)c?a)%15%)urHlo$lAWVwJn7TIw~ z3)>?%%y@kHH;|M+wxg9mrd^FtaeE`F4II;~Y&e%aRBl5qlC?$yp5(TLLZ#*!w&%qz z?0%$zxmoWwiB0S;ug2Y3Wvgw*J@O7pOflDJfjS4&Q10v_`_ga7$35cKp@d;}k8?%X z=<%uq;QV)ti5xA0utWL^)k0>C!P$#=DMrM8kFsnX ztW^doueAklKzInn&a9C)ngI@A8~J=57K+c+x0JM{(BH*PCAwOk+NxrAV+qS!=d!0y zRoV>@dm0p!fDhRTe*^BAg{AmELUMvQ+SLV)okBdk1f2&hA`nA3>E)D`{Ltk(axz^ zXTSIQ={C#V5Gyh}e2d0^ z3b+WkWD0}wi=FHteI_B_;7V#A-Uj)DK!_qZT|RY-h#DD=rk;IJmFmIDYbfJlLUj|o zwMDzQc)yDv9;U74XcjCv>>R|O-Tvbggz(_NZo;}DJlu@A=GUV$M-+3*UQcAIa`3@5 z#0-lX9i;qZ!V{35%d+hjufrnEz9Fq>YwCtZSA1!+OFn-1QV{OR(N|j!n|8rkeAjw5 z4~d9-v*+WP!bXp>M4`}HDB*p_me_F+v?9O3?yNk;;Og}`)W$9{Y+l4QxK2-b6L`xG za7ys>I$6R|wH}=j_%uk|_&Jx$%waB17@?qHtwQXim6OzM;W~phNjOO!rEd zHN=ziwW^g^I{VBi2PU4gcte^+sNah&Udv?BsDFis1@x76W2tnRz%z@ zK30tvB&qayH-T)nMo0MFSBaLW1jxwI(}<0`nlKlP)>!E=%ZHVtr=wbtq-bP{;aHb8 z_ndcQ&-c^Yu#gsp9Ttrx_+a6y_<`+me2*SuD^-;wnS+=vNQ-U?K@lT(@Q=}_s)9YkLq8wcF^v+}qjOuE4 z{&Sr#yuavviUt>Vq3^nYYoe37W{x<$qUHg%mH04y3SMTA`Mw`GUuJD){j#{VR~kg1 zlC)@zx$4l-hQbYZ5cJ3ujNKWhlhk{lo^?J}YZvofV2cC%hVgSH7=gHTsZ z$PplgaO}byo914!Li_%cU*kF1AECJJXg6HTWV+HE2h%gudQ z1^0LNu#ddWx0!zU@ZWE?YGhK-5-WO!vT~==NEUk!V`>@ASW@n|^A>JsDZxY@E4RR@ znwWSl!0Z)D_2J)q;n_-C;p2Npj_947^SSjVK&wfQm~&h?JjXItpF3Hf#n&nxtTb3? z-jrAsf4d>I79^;F1``xy5a2mn)0=^vX{ur+BHVv)eb(}ZJAa8=+P`7?Rg_pKS1V?a zXu}NpnnAYY%>3qkOYff@`OUVYtYm~c$QcHA>t@L8v@z#4a^&IzSn|3%^T-vJCzi>?~mZQyP->3`La}vQQ5JA*eyn?IzqJY}Gn& zTa~_Nu<7$@^h}THY6M4Lu(uKo*t}d?OTHt&n9r* zNx69<1|>RLQ?tJ)VRZfAf?>u3&_kl=Osr#uAqnrO^7dzdvP#1X6BRw$i0ZsBSH3tD ztilLYAFQzPw|4;^G`kDtGYES3JH@vI0{oW;^tsY}@5ljGk7k@aq&EWK)pNfyttPdG z#3PC3C`_p8$96fTD&}J?oOsu7cHDbS8TwPju#N7TIGPSu!Mk)#qtyj$5PXxHu4x-- z3&4~le-dUp-`qinE}#-jjtpY~4S-or-oB*g>alEUYd$EA=z~H4`TUa$#Ea%!NT|ND za|wf{0N)_D@K3O}1Mp7*DR-A$FkCnO4R61Ci0e;3@N`?@Syzfo9$F1y!S_gZ`V&yi zdJTd;PczZ}LM4um()sznW3l3U>NKW%LUUh5P4!*Q+sz0*SziNI^71yX{T1Q8grt>- z{_}YNRR2T(JOY1*f&Z^AdXHDeN*&YSvG0f)6idnB?HStgPjOT%O6Wx>J7*4j4R#KW3>8)n zujUUNFdP%kU|Z%>Ko`bg@2u|=Fm4{t{)2w~4+R*w7k{%-l%zia#S6(EoSxRrKj&YXWzq5V^+=)~5Jvg+JFU&a?%(^p&!U+C%vUVgc8Aa9IbYyIqNIiVW51Z~p!hOT zejoluZ7=8;b%LWEpT0_MOrgHbhrZcK3<0`(ykl>k&;BPvWxhiBodaev6FsFWvz40~ zA<{XymHnM%am8+!l3u1z!t&5W&%L-IC+}LvWugr0?8f&U_no`1%{fcP{gVaVL2~mQ zDfHex)s42zO1EIF%pLOR$5rto#(9t7uMTg@y3uQM?;?YpPx1%*n(!%(SrSC5jFTJf zG{|JSGpns$>is@ieXB{@wb|nYi%=OIW1mUV+QXGDF4B`R2wbfd_iY|2`ld7sKB%l3 zCZ={}U{n0 zd+;qYR03ZFkx2GR-XWq9%Ufg%hL4Pt`C~(GEv1bIWUi`mD;&Cv-JAHbIBCJ)yL7+O z*toMbmPWmQx5|Rvw|j}JKd_V><^~>nQdY%o@q+_ijr|)(wh0@$A^aFskWG2lcDtN9 z80%<)7Gw~GkAxv=3k9=yYqPq#q5njhYtxf#dc1+LWV~c9v zv*G%D?h=+Xbiu9{ov-{d=Moi>c3I}?DXG_c{FDL*p2)*`eD!7kY#UMTt6|e zvw-vZFC#MUYSI`t^Hs3>ZR}%y9q&^RFbM~mxXEg$J1)b%Kj?URuVJ97C_zagQ=sj%DL?*$;yAb?&yw%BuvTU60$#fP=W%ksqc00LuETyy!DchHxNgrL zCn{487+KUO>^eZ0;(dCXB_jfL!>yH$CAe)Ch3cCOl`Lm0XZ`9xSECv>5{`3l6+dep zVM@w3@_5OPW7R?}YQ(Kkb7ZANw~+Jk zJV&h+mTU_i%;nzbs9{PLwMz#TwRW=-P6{$Ce?z2vkNe`+G1j4-?73n!`q(_VA}e{d zcXo2);POmC1nPn)j5Flx0ejEQr{&};e6bN`T~{tc%*y(kY_~6qMKoRz+kcLsWxEi> z#hDK65jC97!?+QfQ#s>aX*1p*Cr@tZew(C)ZnV(#nLUme4y+Pw4Lb%-C$?jXMK#yo zbEj|6CXN7~{_0=yczb#8o3=!rWfnsjzOmMbBaSiY5TAwL7!IlunP3 zrFu@q$45T{Idm)68%appbz&9tg_m@~`A-{;_s+99P-Kg(UoZ76N_o-WvFkSYyo!DA z6NPeCLC~Q;j>FEFQ`D!Ut9d)ITGYLrWa#6}h;UaQrr<8WMQ!#uo$t

w!Q1BKBMAuE&9pNjq@3%b}8#lSQR^lGSC4sJonSZL18C z`@?}6zNIdj4xZ=@*$Tgm(q|lc*;u`iO>S|_&GmwN^KZIfV>qO({@E;LV~J->98k8! z`7Q`b`UB@g4QvPVw{19@N6(0fYb`xJXfGsd?0=KZuJ{D7{{#&AE7W^tI6t6j=XYuO zo-$B>VCggR#fJ*(y+{}-qyFYv8uIxXzFgiWf1S#FJyOFkDt@MZvYH4ph_OE8srctG27l)5>8nuXt@Lkd2x5G^bXZahjqn$To9xI&<_RB zNChJLty2p|9x1@%0l>x1m z_nhR9^aTXN^p^~Xf5u)MHL|aE@Y9p6{V&?SPe1>c0BONVTe>K*c0VU9Rsg3}1>Fkd9gOminv7fq6g_C87T~R-0VR~cyovXnDt6gWa6ZaMb z8CjbPa`stnY2@<14z0eu+U8(tSiI}c2Q_NJ^RmZPF7B8RMinfbQ8B$3>X31bHQ-K6 znobRM4(n4OKCf~&&{*p@$s3}nOyevUuoN(>X`DFnqf?g1vq)fk@jMr9@nO$jT-=%3)u!k>ZU*MH3zf@3>@Cu48XE!f@)xxncQT7x{742$JAr$`!o? z{amN56?M`wHZRn+wJ9b_0+u{q?DNms_H*PiWe}X4na$KQFSiP zE;3~EuT{ZEd-_A6uBZp7f<$kRKSWy=mIKdUWtJ=tj`mMVafvf(!3s3Z*)QOItGTP2 zM1RP&e1r~HM??@sfCu3M20_PwfP3hbi~o)Sf%pDU568;*$9q19_9~LbevD%P0V0PF z2G9zRpYf`f{739<%n)ayf#SrzQuqCRxZD8@Gip2f1;~Q|Uu;nUg7yluU3_9><9ZM_ zrm^EqKRBJ0oG9a6;=P+0kNA2+-71}KjPve2-bV5ZC<{dV0>{xERuarn&M1KBjI4Yh zBssszh&xlm`-yjQ`e-Iky<^7=XJKk6DqyVjEW(`CYY<4R{1PQk<`=8rH=0LE3x%uu zKiEg$KN7m#x@KWg4)C<-t=%k0+J5hg(G!!L0TC`gU_%Fzd{NJ*EL7*5iZ zw}o_-?@DqA24KUqA#myN!>XIrfL_-lg5L-t&cVO0w=&w_eR5_)w6bVPUczz}{h3qV z`%m0(7{@$UQX?uQMq=Uri%ul8U7(bM^qDMpy+-9LcF1&t3q>U&2&fV){pyWb<9u5Q zgun6^9Bse!wORT6b8Qwm2OH|tku{;F6N8E#!9w}Xb``=o8Xq6kX|k%;347DXN93n> z-{CdWtk~8Ss;KP~CzU`Iggjq@-w1J0Ob3b~U0tvU#p*o(>1h~-ddRsPG~Er_9x zo9SqO@a6%ZWdT^e8R$)Sv-OQZ<&||AlU5u-8$AFRLju%^;%t`QqgKb2IT)N>o=BX* zq7k}}>zJ=nv#yuW60fygB*I7f${MWHE>6$RV9Qbs?-$I() z|F#UH4xsxQSLOoFNl$i0`Mg*jCCF*GPCBN48*S~v^4>MUfd}R0eo?S`e%7+psR-xC z9iMx=MdPHGJ5G^R3gPMNb}9ZZC(t5ztS~BoYJN?p`n+}M;=Qlq00`RZ&1`NOqo2G} zQu_e@zleM9sHVPk`x`3?f`Ww(Dk8m!^d^FUbVPa+kRmP82~|Zvy7V4Idhdi1Kzb+C zPy(S7dJBXO??%7PbI-l^j623}y!;1ANcP%0Ywb0k`I*mfbm}hr(0H`}v^*WGXNMVz zv~R&2-bM$!_^2+w18W$GYKlZFu*j4dUDRz8S z5I5qd&4H;xT^8@LepcIq^?&tOT9tuQG)*&w))B#x^wRN#t@52m7zy}_@1+puJ{`ZB zi;nOdb2F>?bDMeQWw^y5g0LB*<>NgpZXYgOV4Jhv_VI#aRv1VKq*2AX-?buyo(8XN z836MOu%R*(0wplE0gOzDol4lZKtZomljOA+w7j6fDEosyq;Dg~7{%q!v9o+3oLhM9 z@|2@uSAqn_P9RX&qTexWnmPnVrEjDh+cEQmZ7A-G3;;8|Y%$E$jG?`-3>ilB_0{cq zl0QK{tA`B7L6eh)Ei5}JNrhP5)Yy5N(jbM-da`VB-@$qr5kRjOgRVGf<`>&MgOcTR zHuJuXM)#);V#xP%Q)l|@ramuyh}6+FLHS5GK3=fOd{;)rQ8XMk2P23QdHO5_j7kC} z?AM4{6Z>$4eu6*^Ap242@^?d*S!@@X#k5c$JPRQZjp)sS=rwgV>u#jdY|xOSS#Q1A zZP?rD_PfC6pyz6YSd^9${~X9i@SLmd+3a{E3t-(B@m6v@@Epg$#;JH6DVMaE6kLx{ zj6q9v#7KYmHYVL!&p|el0`Hf63{)37;WFy7%K6>FZAdiJTtU72|2A_;>x+LhX@j9qZWiK)`-Vcmw;2(+tCBVcq#fKE9@CB6U;M(O=-q zz~Yi5Zg)6tS11QjQ0!;=ddzYVPjOKywWe64GwMwYH)yI%)UBQ7hSmN)yPvq%pgn;B zp^oPTCk-yvH;BIK?sfIsEoaY0fa>dLRIOup6xT4c^z@C{>4$g4KG~V_*&muQc&w41 z1()LrUGzM8S`04X{J=!zqY0|MwPdz+eCV%)ybq5_)9CA-W)&|+b6@qgCg!sAg6CYi zRzNb)cnmxJBm+`&C2;C+>3p-QJXAfZ<}!z+XL<&hXBmv-72n;8zjE%95dx(Fpi~## z24=!e{^Zl8fY+XHWwNAa6dvTVD`}EgV@4sxu zpDYGHPLucgOJlWn-RM8`P&563d4AXHua{keKp(nHZg=bYUVQ{g`}ij`@sAzoZ))W; zGCQEQ2{;e@9Tz!FvCG_xGqUe+fqm_7I_iff3lq2NJdW0&N;Ooo|KlDS*yI1-1=0UV zHT^$6>D6VpYwp4N?>=ROTxN1#GV*r~L)u1YBgIR7lIv++=1(7@Hw0P(#*Q>s?`lf2 zxm9(%*sQ&)E+UAf%iui0l8sgf3^+qI>h@4tdq@Ybq?Sk$!rv7#mmUn$03d3D&oK<$ z;*V=cQ~l_g*|eSI$cw?q?jHMy{F*UmRPgT_EU+WG9%|7JcukQKd4JFtFqGDRdEQrI zz{BvwH;Y0K!u7hRH%4>3;^ot)HTG~NsReVn6B6Y-(v6O;z?o*I*^v zU?Be3Fx@%p<|7DK;;3UHR66EK1B-%Y-eyJ{L7hRU`e-5uHE`}z|YtS>nh)nzPK;1`d05TjL>YTK-J%bt(lE)APBT<(HIs!3E9mbz&gH@^Q} zp^|Q2uu_uyPPUmNAipHOD}h@%O5W^d8VW2I3(wxetdK1F_FC>a<%82^dfx8|>J!$# zm}fH)EI+=Rr$^&?nI}aj9v#FeYbBbO9C*+jHEe=l%8fTpo44y+&ty;fs`tA>77>S5 zKV+{N&{~<=vUJ4Q}{vUL(uXp%m|H*UwPuaUbe zDrvXI5~3<(#+kWLRSpA#*_*sv8^|8};`q~e$4e7MM z*oHn})qE^`O9ACY@Ldf5g0)+ZzC}#y4@Eu>WA{hh4OR8{Z2F}Y?fR-ypJ)$0MLxP- zs}d}CQ!Ss4ck?k*EJHez7bGjP^m7MrN9U@EX9K1fM8pI7YP^$Bfqss(TF~~t6nE&R zz=GnBJgrY-4#2L#{aG*PfB)uwEylvEaX^pbavreDwB)xK-}8C+FVFZd#Du__YT4Wk zkH?=0#qL;f|I5KX1S;cUKQ)=Z(UJe-H2B->e?FA|VXf+af4dL+Sa#GmBLB8wkBtWE zf=mC@O@HJ$3{C6->P@76VD_Ag?>`G>?=5s&_G*Bey3MJr$z$x`yWsCKGr4-EI{oO? zaa>31D;tye@H0~R`sObyy6P(b%`|S%`VYOeqKs|!2o+6OdY6ya2F7}Xv5d2;p*T%yWiK3-hKB;kM2j3S?=vQqi_I; z`1Q>?;RD3hYA7!jN;BcOKXD=2&H7Z;D^dNq;)%-{gk(c--#UG=nRhSeVD*EDy9iip zL+>dGjy9)2D%hKoHvQzKMqZmXUV3azy`8%5v0MGb(cXOs&ffH5A z{7h$g_8J1AGVg7UC z!*khZ*YGezQ~%mu2H0UNIc<%OI`Ekv;g z_ol-bB=5Cis#@bUl*UEm+pCrL-i9TuGN)NBy(w#if4|kal=w{`O#+{c|??lhCJ7=K9(_*0Fck6c=vTC|37&&(ucr^yG2;d(SJa z$O>8L@o_+L&&KL;i$1mawNrZpz<;7!YV#H3P@1}~I286-=-qsM6>=Uw&LK2-kF{<| z%0Y45f_$Qe8Dw6G^{Xt?3GCQ)$(Ve;?BBZ-R@QCnab+QBbE&4&?qq0yEyHILv$v-! zoJtQAF|(dIejg_z=L(>x+4oDHwsI98xY~Ei1-^+uZdha)Hm%MqnCS8DF9B{WaKPuQ zKUfs-o0Z(9ou$}MKD;`6-&5FqG8%Cug=*t1d__I}Y3rYI@iEQz9AG;PPuWy_^>;0S zp91e}F!xs}!M3GKigzDvJ=8T8FtA>u-O|pr+9R;>J*+rF57X9o7IQ1_7iK!ECdb-& zysB%DK{>WsK#e7MxaxAKT^%nDVDf9GW{yN=-FI`0Z=PZEr*isJ;)M%_ual}8L!h_3 zG@m11Ju9p6Fijm>n^*zk^H&MXg9ozx(X6P)vtU6v8KI5SGN;q0rEegCIZ5x43R^Fl zy_>698O5nw_d5uJ>o60s-C7GN?E-22a&Tm@UVPxjT6`>faet@Cn*>d&L9&j@2`#xE)|HV zY)l@-U%2P*dF`!P?$+k2l{kaIV7$9#f}pnJ$M4CkkHt!PKs0>y1gqDUDVel}kmc*Q z#Vx#xNwl>02&l9u=CcWvKIDD&gBVUhvH%LtFi*_Lodl5W;S_U;v@n7k z63Pm}`Nb#M0`X*kP!g+<}%eavofoS0wRBRw+nJe^^+K-OsG8`EM z8Gf>rhb94075-RnNL3$NHO;MV!eDdJK?=vQ>(9DlS-1L3tXM574E1N~Zw(Z3mN_8U z9}6)>n7@s$wRzi{cGLtACFI8ZB_}VftvbvTzw0ltb34@s=|6-F-y?%cbddu#b~^$* zc>A^tZ?TO*dQlz@JSV@GpZ_LmF_J-$I!Z%Giq4e0B%mhxT?4iBOOYv|!u9msSgV_Z zfZC&2J}$~BIO`W1Jqzvxq-OR?0p7sTKt2v!^CE-HQfc5F9-CRP;!}5|y<1)mkVQ)_#XY=*51Jtuwi4FGn zl^>%~VDELbmtVn8S({G9t&&}%x|4q=D-NT2C2D3r0zH!F|6_=*pw^ag;%`i+ zGksS@BBr-A(QtCGIxaK#_0zO#R7EOlvT?vgH_1Q?bZ~G#rHUqQzHdr>oEb5uC;xn6 zA@M|OO^}&MZeFr!Ohw^&;+=C~NQqBbGIwJn$d z7hXKNtn>r)y3cMo)dSSPryt3_%$%kurz z?OAP|+vubx-DIfC$%czVrxxb{Q7irF{20l2<;iQD17{Qmf%kS?ov~pRx;x{EC;Pe+ zFNd`L)EogoS;!w8hm^g(y7uIOPqB~Kq)-)BTmS6TPIm^pYZX|k_jc>)yOlhH5ycc- zuX{l&d5@|}##<_1!0&Rt<#8s zdE6B?6@7HJB}`?4begobx4H96anAAr)#bI4C%2vWJD9=N6$HHfQp zfOdP0%8&-KD>_N$7rQe&y`-+c#M>P54Kkrim+vb|V( zZMIsQbyJsS7ZfeK!g0Ii%Hu)o%WarXFJ(2?rXcsn%YhQK=0qtTNk8n&Pd_GK7fait zoiM)d#ZpOV$qZMO^!dK;5D?4C)M=>_cwa|*$3`NCsfeSP9xC?qk+m$tt07c;-U;ni z_IlSYyrbNIuxa#OQGad8>$@={=fONg18RPd;cL7+v*39F2P#Tedv~Yto`R0!8(0{@ z7H)}}sY+O!t0|z3j%ob>`_;cjmD5VdhNk=6kTO+SPPwf8;;ls;_N{Bqx{|v-0|9eN z%?x!50|8y2vmWE)@mC2X+z(sxoW9P2U3)O*3Th1R-VU`Pf?f1<(PZTcS&~YKm2%6x z=X>@qA?n>6%qnGC^b5d!BvVQ5C|7wUfBd0fr3J0u#W|krX2!?%qxB#y6-s+A^pMKv zy-rL=`j^mc$ZIO=RJ9oUN11l{YJzNs`bPT0*iWAD>__@Mm%1k8h}QJ{8j$`05OoAu zb?4`>o{=nMjy0hnx7hoy?BB5m9KP-1aDQ3yTGaa&^eJ_-LIwN{zDh9jUd4MzQxNQ} zeD6yJ4v-ho9Y%65iyVuN;M|I%H(sj=m$@hj12}ZxZDEwkv)xe#P&Sg1=y3?4SQ465{?hqHHv_J2#xObci5*AS-V4`_ za;)BY+9UrrShU-^zzE@8AagAe23d9aiHu?p>AF`NR>Taw%SuIT{fDn4{LB~Ga7M)h z=re**w%u^%rX1JD>uY&t!W*abgYnG;jE?oegIhV zdM?nkD8XCB6XJ{#V!rLhv)#xfZxxuZ;NRnTv~Ygi2$}Q=0eI8Hr23Tv-Lqp-vid}e zxj3br98bw@p8Z(QaHrBeG|Apoe66J0Z!a+(1M^jc5z3;9Lxb<|&8)xsEtuNVlj^#ifC3?x&KJUHFtTi?zS3iG9?+G9 zAMvw^f*_D#PkuRx{tL_|_t``Xc!cAU)R*QvF1V(GulX<*BUn)w$=OC6pk|r(7;Yh? zOd>ZKiCraP8TU!`Z39{yaTA9_)T5l6Ew}U%96b(cH`GvnbeJ zcHUk*<#oAPIdV2@Dq6erEXk^<9tJi`^yn+pVXe;GvF?_7EJyn7k>uBnc(lvAINlqP zDvyRg-g$pWv4!eLYu08@KLQ2cEFDZ%lem%-1r?*Z`5+Mgy_7>m(<{}QD?1MB=Lqlv z6K$4_DWs%GDOmBKd=R_vaaOh3l(#1jn|Swxa#(2z;`F98ujOVp64R2o-1h0=!6LCi z%ZDZy!96%doEj~Km&3*gz%gCv$|X#GJ`{2*E04G0-R(&6iJ0!k0o^y~srF#gjgcJU z0dayAvyfp~T|-JJw==4L2X=_RLK3VII$hBt?@*sIrDI3?>3*%yw>o3&6G!Q#JuSbz`CBi-ce9# z-}!)6YkUSA`D6Mu{D{6m7f#???(b6#L?2QFi==j`0hj|BqG26u5vUx4*Nyx-1vbL) z0LE8WkRrR;2UT$=!2%(X6)dYbwex0=#Zl*!_rJy<_F%4Neb3+>@^?S?oQIdceC)HbQIj#_tPSHB32TEJze^W(J_wl;IS6Z}{u}0Gtk+ zgf6`iTnEqkmr!VPCoA^9I=oW{#5$U&Jtj_y;d!k0pwf?4kl~DT&!q_yHGOw#5wSp0 zQm4_&2{xh4oPx4Bj<3Yi&}exwc{X64{Wzl6=)sP(d;NTaHx^?oZrUvrvbU+D=``*0>_u}MzX2VL+tl6?XgQT8V8QzDB4E;h(sowq9w9mvax^lUTo zbS8keTJI>iRc|){IPo5Zt*{JN)TRKR?ed+_?xrRT!i@c!{aea%4LFirVV&VYBN6lK z=K#NgFKb#l=ZV8_3uv_@6?bf*`*;7lUyQQQ~`L9vQ*X(*z6Et>J9Jjk#pf=41we2s%O=ejl7Sm z_*0w+RTL`F^X0gnYi0NmOc4ewID~eB`$1VeWnoqI7LC@MFqx|Bo}0YdRe{XkaeZF# z+7Xm{iM=$Ro?0BcAR1_y*nhFUKD~42{^xPvE+Us-Iy zGm;Db7)dlTh<@0-3+v^_=I2h@Hs9`S87=vmI9_5ulTVSf-vWq<^UgK+pv}lfg)KR0 zCN3);V|s$OdA6|@X(?T~Yxc5E0&iF)p`z*=*2Qi_rPZJCZYMo*Jt z(n?7R8Z=n7x10FjIX7?Jp~7@L+y;s#YpfiMi5XM?N4538a8wt*X@T;phcFjk-$OmK zO8h!YcNqf3AE`cWiK?PU6Rs@Ya7MkVML7fl7*&#h!*b(IQG4Ny^DM?qn~^FKVcPjY zLK(e}=sduW15iUv5Z!oFUIINXQ#0dxxQWRR0l@0t(NTIhnFwtQK=ZyP1d84nph0=A$KG{G-B|Bld~n(rn|C$IwL0Hgu_ zgUf*;jNK*!eyQRA-NQ$J5K6vE^EPViXlwsO?fRp=4l$YxstQt@nicck=%T-pqUx`z zk^Vs^p+yRR))menCI46dmQnh5DOCS&vkK3n6OFo^CVz`LDmQsf5JWifFNJCUSuhP1 z>=2Ut?nPOC!UPZN4(wNCQy%<@?exHxsV6BvqXN${BE`hT)$!FXAfUD74*LVEoTRgyi*lxX|pC z6>Sqf3p;fWJ_cD(O$4}fHwPJ(IQq!Mnd?Y?nb>-vt;IXGCGjO>*upf!sw~bdO)5Tf zeVGZNvJWH`_$*H=UH|P0(KUJa`vt(BAlga3`O~Qc}G5kc|-BE zxi9m#yM0>~Ny*i53$h`}*oh)~Mf^m1^+i0JkUJgEdkUSQAfrSrs?FCGMN@@K^4S-$ zUobE+d03=AHBZH+yOa7Ar`bQEO3w!#h?IPb;bHJV+}KyWeNj3fd+{}>T#|EA^HDqI zD%;4UKgE~{zk*6mNbT7Bti~35E1=X35AKf4aY25wPNpw=nqEa5`r0>6y0dNQaVf-# zdS$&gUQ4Yj*FXz()zvC;=`gr$$UM}H#YLL^_iII_`#d4;(;IDvs{>3|312f@r*VTt zTmvv)({90Kc{oKo*NS$JPr2EtCU@B9tBIAN4^(+T` z*t{W8UJs@FZq0&O*AR?w=C}6<4OaI6X74=6?EEN!AEvKi+c5Jf^T4dvlUpR_AF|Ck zRL_Hx;;sBNNJ-!;9(PInvW*jNop$UhO&-sH8$bEafy|-f zuzmf_0%ksw0a7*$``RY6agV7rV#1QtAMlHUfSl&gUbW#+#CXNnj+qCl@c36e#hBX!gvvtl`Nf2*xDi0kQcRCUTI2=Vk$92Znt$c$)&D=Zz7eqm=AolugWh`#mN*5M=WDRWpxQ4Iz*j z_>E_2kWqd#)mbmuYT+ldgx<#BSs=bVr1@zk_&aiy5kQZ6Znf*ii$=*+C>8z7HzHTK zfZ|8I--3A?z7U8zGz4vBX7)uJmX*~W^9jxR_-9`3`N4fq0H7GxqZVFv0s6emn|d39 zR@xag*-;7g@Xx&uHeo{&kS&H;x7vHj}iF;KxzlV)RSHE!qk7I@cr@NxA1fB zh=D=0;B}47zkkf0vfRhV=W;vquaLh#UfBEceA>UW3|6Vf+`Ih`pz;3{Qi#KJs}WO+ z=@C3RLuPEjlnm^>(ZYxNAdi{bNk1_6F8t&FD+_N_Z`2<32yX0D7fSBJa3Up$gg1(K z$3(aM6cYfl4;bseuf4@b5Onu67^Q!9I81`r0R*wMR}%0e$s;6*&ijvOuxlk?QUE}! zzlI}0#QiWOMC5Q2SiJYAynw*gjV8a_Nz0h)K$I@iiyat<$`gHzfuHRIp}jr)Xtz}( z8bM4K7mx^b&dB`y>FxeKbFm%+%TP!>>;`$vdhh7HM^$<=M*qF^#Bcme*gIc(1gT{{ z^tht*>yBzkx?HiNrhCgn_;94nUo_do4S+w60K!UM@g8HLbtk~T#GD>&B-yF4I}$u& zq5*sXm1xNME0Y`$ntJ_Lg+RE!Ai-yl{|WK>01R?GkZQ#*a=a<7xa+Z5k6Yy3gn;K3I?c#&K5S3*S`<74+#%~eCcgkO0J~~Vzavzj z^xVbHE%U>iH*snP@Z0N+);n|8ER7$4uK?#LJ5g8`?wr29^NFZ_lAVQ$r!LKDp=aZp z%LSYcFRy~qzH5ndVVze8uHi(s^hM3@!S(lMDlavK?iIvU&V8(OI2j-TDEDaKI4eCx z@qpx=P?%Dj{gZ-qdXX)^9u_v$0+JC|lMj2UnosYazg>JLx`tbD3FOLNbJ9+sT!Vu% zj{|{Xfa#Jc@H{O*=fOgLj5cp36oXEVnzxGz;0Fq76M|qdAViUo2+n+QXvI%=XmbXf zJh*5BXTF1EZglQ^u?<*baqjf|39;Gz39+e{Ya98Yb&pO{r_ra|?FXVAmPdWGyf>Lb z*32eFTtm%tglmO-q30RFrmeMrZ_REdP~LE^VIvrMFtkcl3BruDU>8P>NH)|meu2X$ zRTX21L#IICT4N`|2O=axY53-GQi1S2fRp>sVYsnf#oAcTo};3#FVbf_xnC2my+A0d zLkvtGGOZZA7rW$V7bETnuYkS3y99Z5UJ(LS0*vj*PWmRCab*vsZIM*sezdxx^CD~m zk0LJ2)KP6@KjBFEHpBEzD1H**xWsr@ac`oLp+!ECGBsjm(4l}5Rmk7Z_fFP3%3uD(r$@whboZo()t zp4|q<%ViuR2@-f;Z6jZ{-9fd>-c2^9J3nu2m9L-LoS{>)8Ov53AFi$5)V=EOAh1(` zR%K*wTmfQJuY*0_W%QzfQ<6K3$Imo9<#ciYfTxyhl-{1=!r0MQe;_k7t3?p zxHp+)%iK#Q2)%@C<(Be5J7@!=nQ3B%rpkYd(pkr=_Ld9!XZ(z9)V=3FVj~By#(oOe zI11bwDu@z3Mpl0+=(se1VL~4KED3MI5-VB(#dPm3fUQ>i$5dP<1C}K*Cb4o2drGwk zNJas&*IiIEPJXVRXPhE`noZ8O6Ranv6e6^r(YC$9V`AGXPxD%l%SaUh@dN9ey8klR zPPEgP>&evM*DyxWBY@uQF&57WaVMDW`gqCej_fB!Kkem;VNSt(9bOF=RK&~$~J^vOr!=h>`pxnQ*7keM%g;lNG@d{W3PXxaP zXt$QI&fa~FVr2A@!9Hwn=V5|Dwi_W)KD~28vP7#Q0d;I!#cmcpc?qk}C2qAGO3d^H z#*{u*qICo3YL&GM3cTOfw_gOrkC(;bGhM$8Be*#`UgPZOZdJB?D8*{l#nO{~BF$PX zvM0W|1K?@K6k5+Wc7wA9Vq(2DO{oM;j9WV(`K!A=1js3fxqyBOgYi)TH3a@z$3#FWtF z3-&6No)&xYYDJUZx{RV$4&aa|0201e(HU;c@K zZ`%xaW!^%q$B)^flQHA#5yjM=R zQd%PTT#}`GxsK+3!zOq*K@W9@1kN1rl_rAFLJlpy2YYhGe{6t2MCy=^DzkhU40`{$ zc)QT_O{xz<0C(t%i=M0n4UZGln0h+$$-c5@_y7gLH%rDQ%;_-=sP+tZJ%f2ei?>c; zRpSY!K6;{#UTDfpiGHBL5e=W#pPV8^jvu>Top4yJFPrJ{MFZdtYho=T-W3)dB!+>_ zMCBxT%H2bI?0$%WntqOkCcC4<1gTxxb@ydu?E>bOc`&_AR(i(;)%%Hs``a!Ka&Fs)8j6KMCZzu5L$nkmCgjK)n(uPeZlY{?g@_Aod%DJ~gC`O-lHTc* zRwlpmGLycpSeeI~MzpG((K)(nScQCCZ*brHRlZ+B?^8M<<8NdLqg|M{Z^ocR@OL_W zA^e{>l24fW=Q>4wdT`y^R7U=zryM;ZV#Jr6JVN1Z009dh#H~Z!f#-DTctF&*xc%;` z*{M)+t?D(JbQjWFyP7TH{aJiejY6NGkID%&9MLp)v5ij)S`C{ga4F{4dkmQ(k9%Bv zSw=Rdw{D5FZHbFTqNmeAWqCYbs&=c%Wj++T)bj{ZD%)7~JoND92{Fonv0hTKc4;ojHz} z2k_%HaFB@IQ-KG>^bt;^GS3&i<{j^|1wVrS_@se;;}=V6-hsEFpq~|(rj$G~w-^93 zrxB^}bjpbs{l=^NRvV^fZWf*ieoZP@JELRto7zW9qU%IL zQOMFSKu)i-OpwhTqVuAS9)R36-h)ZznaS+(8ihlO*v+a#TpZI|Fw5xrI{@ML&e0F8 z8qhh3LEyP|n!y)g_~M4%i2)L7)oR{jo!|@)8`Ksoy9sVbTC*&cwd)_ z$*pfb^Et#Y=vVSNs$Le*7&8#190@q%7A{CJb|1|?1p=1iqbLu;BAQ#eg0FZO_PR~Z zwWvR{DHE%dasR}6nBs~5+$)H~07&>$wRw0n*HLXfw(qFBFg~uoVXA%T0Y(-dfvEcd z$+8DBe8Wdo@0zRqrujSFUG<&qYGIRLG`e)D60E*=_V>6`gCPVc9+demtWUkNj7DxVzGyyHzH2%RlEix$ z=I|QUG4OFWX!X0RUbjB5X}9wuZkN>*DqtUe8)0whJw(!oL7r2ApKsw|jAH?EqIIvX zYJF1lM%|x*1c4s1&2V^*ehBVdDD**s82|UcWTLu4S@)#o6Ey;kn;4#vjv=dWaX_t% zigOz?Xn59bUo`eAnG4HXZ0mGB?j=M3=b?CIeZ&if~Ze?e?Rar zwwe_JZ7Gg_NTt&$wAKeBIA8CsK!%C3e69PQn>oOl39_y==kLJ8DD#OAD7IkkpGvR0 zj+eqj6?cH@$L1H3?#L15H+!&bAB0*k`bwtW@BO$KT|zdH0%xaD7St{hvI`&3tn6@# zP#--h=;^2#B>%Z^0cGQ3^20YvZ{qhF zb(G;2$a|_~=+FiY&uW2uv26fv9GCJ7>NTINl7LgJEAhYf3k!wcSSbRK6rT(;DWacc zD0%+11rj)gsHdK-T2hQDj%Dk4#-5`QMQNn8rcBZdR6HiO?at!MqXygc9zkB4x4847 z3wl7wxY!ifR-GQU6Y8kDEsKMCh2)CO`nX$p~5ew+|>s!F!ZjM`YL z9LF#;0j?gGig6aWOj057VKJGu5GbgoEQm0lUopRWLwjOV?70>&eF8p3AZ=ojV(ziQ zwcCt~V2TAl(7UnML|Hu#eQSwR=TFiLTQJxy%%;nz$NUTeM!=2Iu=2f1MftQ|wme?v z0uXHTgln}@QkMB6a9$l1V1@RQvJ+6WW>rDuKk7VBurMwCVZS-6pM2$Ga@sSFJ1SkH z;m=c>LQ}8YOC=b&8-0nD738IvN&a$nav@|Q%cOkgl?)RUHO<_%{DpC$Tw)+p!$HlgMy`G@Na4?%#HAD;7)j0jBf4DN1} z)avoP^e5|hoZ6@&2e6L1roYNWFP=tKzUWJfAd3i3DN6>-H}y{M#M4IeZ@o;ezvo4h z+Nn(Z@CevClGb!=!)PEv9y6&TSx!lq7uGYO8{Oki%qHAvZ9VsvCe}nZ2?+y%U=H_3 zF8^=X!c4cnOF6Cu^m{Cc6)P?DwVW*0Hs^a>4-eFR&Z(=$Ki==2lx&WAz8wi^;)wX% z>nm9#aeZ0NkCrGAkEO7V!gN9VYmt7XpS2Zj-;JJPD>5J*o~zGOkcToN*C3mZgKse9 zbi}w`+W4^Ay~CVh?5&Dy(JjB>r5}k&Lzo2;NZ80VM4s#p?9#4Rh9rTajb2DFqE$!L z(%C<>QXx?)hTPX?MBv<&UexN$G^=2qQDS+HECzmfa@X$uw>S3pI|t}#af7aT5tP-_ z2(OWfmRwWljv{(K%l5A73IHxLFnY~Phq}n%8ZoZrfgNxLGK~W;umHy#yI3(#lVgxQ za#xtt{n4WK#5>$A*n|x3HqV_cTwq$kX$yCT;~xNeQ|28kTU}AwdV6J~fWRf-7TaD` zi2YG`TrRN;=?qv9h{u^R10lAjUTfI&l4Unzut4@1&WGb)fj7_6{+qH+7bS3y2f&VG zz&$x2{QzR!xl;QVrRe-q%Yy=JV-%M&O5vC6_2J1?I1&s)@o5eEl&A`hSl{Px5R$o?)8ROh|CMhXCrL(q+k9>KGVaTjrb zninAIU%I2BKRo{-tH&;OuZT z{dH>oe>{RMArLT>0Gj*ju>aXH=0OmS(yial;jc>F9lYPp1zh_ra8kX2EA{We10+Q< z;4TSZV*YW0e|45oVgNe&cw$SE9F`6XDrWo%S-gKX(6Q$Jc%+SkGd0ucaO?c+p0|m? z!TFK*_`N3}t?IZ{5?+h|0x5o7FBLr$08r z`{SBTy9SLLpIn%9NX`1$;BLP2AF$Efqc{BEOyh%udBdJ^u=?J@j5c^!?1M}LIov|E zM)_Q82QI=)tion3E{&Vj_PFSp(Ft~6lzq~6E71wD5dW>vVW=?C2#eCzenS_`Jy|2c zqQjM(POtS1P~={Gw@EgGd zeK)X6wds#C2SJ1#x2*S$GUse>G@lEHzlxll!SB(NR8X&kv|{`jZhs(AON04(^Xwcd zP2UsTe;6A(!e6{%Vo7z{3p1#}oESu9p$USq7cGspgbOO2pPricd(ZU&^bWF`<)L}<^@_c}6sInMzATOHjI-@tRxULIU=`2(1 zl85!$ZLzklym`5^UR7(V_dR}Tvf@fdGw@wWo%N1pgeT*HNl&U|7F=1!Dml!#5D!g?gU;}84aizYBe?r8 zr>n?WJ<>esX+lE`jJc^MAH~}ALlO}l_(~@9y!&PTs-^&^pdE6}L;#gC8C$`2-kIrT zfbGw5jNVz7DKOO|P8=!qVVaZtHUfc4ftZG@K$9pp=i|@G4ckwWcA1AusAk?GaP_UV!|rYf?cUfW`Q1k zX=r&yg`|h33OT6=LX+x)8HaG`-1i!v%RP*djR7BH`Xho|Sq0o8MM5+z7a3ZUU`O?} zIp`q1(I=igTSwGYm2h7vZ62#pW*>Qo*6^88E6v$qu?Tb2;I4{bPxh$3Q%vw>7ls*M!8cg4KCURFbjOV?0JM_|xCo5aq zT{tHumKj5(3_V1(`3V-5E4RY9Pm@LTSzf6xDkPjMpc#y%HSoO0d(ZMzPNlPoIyqM;+0dmWqS5QJ926dB0XOc-c+V59e1#c z<~@L@n-D5rnw!6HZx-x+9jQp2)KR|#d0L!IU8dvbWsZMVxSF9@m&$lN&A>0`CWJBb zsj7|#Kk9cHkAB*m*)k<{;_;zB$AZ^9bJwAPH+zSm6zj{9mmze-DO`|dY-z=YzD}+= z>bL$dmS9T}^7-`Mr`*6imR-IG=Azec-pnz6>yHtm%R9nRr~j<>k&|+ zKhVP+YQ>IqzjKv4t~Xej_0;|(#!70~Md*6jhsgVz@7s>4?2&6XYGz4HnY>!h#3rz# z4Pq?uSx#Q_Hwf@aC`XnYy%JBY(t&nID?$O%v>N(+f+j)IX3)#?F%VuR)44k!;q4w- z$GjIXG=Y_)71JD`W+Ip2J;4HRntg$@wA zxQ9NRu2{LT@s(tHNJXn;i(G?AcD#7Zi{{#0_q#uVVd9ETLKF0SxTL~lIhTG-F-yxF z@@A4Mcz0=F~MtqCUgU2Gt(bcI$VlU+9j2lwisBi5+FVA;Gyrop)`v zU_skiAx8&=hxdg=Kwipg$=S_V61T_dD=w_b{@f7ty5%D}4}<8@_5f!+u1OW~#cC&B z25L7az5qlXC#+<^hOCB}w@xGTq`#5crxiOJV@8=U8H5ArYu&_~J}y589v z#%pq^fc$cWhB%o-AUa6m(TJBV%br@%iKDTLxVCfWB>Bs2L75gi>7d*DmqYK&5~IXM z4CQURowegdOXv#IAGbJI`opW!A zq4st5b46yrR=Nbcp|-DXKEXP04c*bE$&ujV0;CSJPQWHl#*kO1Z-ULEMWVp)_-#E6 zfSIUMS#J|zTCb7fYyHtx{sIN;AI2xKG3dzb*ZUCOKwF1U&Jy-OweD3CJ*~}}kKs*D z2`_?0U{gcv?6uR2P&C!4e`(G~2jN3tq9LbxJK=C+l{x8b$+$l$d$v&iMxMp}I6LM8 z)Q{#TqF#g5+g?US(PvL{*VIpYMsKA7wo>L?i}eCNYp0&HN`9cfz}*(V)o|vGs&}(U zhgds1&zdBwrK5SP&hG(d6JwUea9vIAl_(JhxcJ0C6f}z^1)*f%J>k&r{(!XHM$&x@%*XD zx6860#W>YcnfVM!5%SFA=A*5YXp*HcJf!WbFI41&3d|5R zX^v-_r+G@`safSA&CJtbwCaSC9Sj|u!geb&+#XtMo@VR*Zk+47&vo6uKlaD2-@f0^ z?|c2O{eIuq_x=99;a~jbf|@|ptn?N#{7TAo))^&wmMj+w3tlkZ6Lf>;EypfL zVfU%m#(FVvAm)V~kQ4Y$?QWaSD_#dfrwIy2=R8Y6pNX{n1FP?8WwP34J&P4WAPF3& z@e7xc+_Rl%eeF#G^%JHOPAgEX|GKwtjF*{zF8Pk*%!HIRWp5Y8TN8i@y}z3qn2X#v zPY#O}+5basV6Wz9TEOl7?w=0P20Vq$L#gOHF;`CET$CV;BK|S zDDo~0Qe}>_{S2e|Lggd=CeLRH9?%|LCeP5$7Nh>Uaf9H2&+318e*ueupu)gA z+gIw@u#T40&LGrVhvYoDb7K;_AF%A6{{LW^L>tSa-m`ffo@RPH-(av{1%c-%G#@f5 z#%AeC{0&53*Cp=_{(XIN1+=0-=ULdB(W%}2u+h^j?HN~i)Qxv~e2e^{RiuVE;VuQ< z9a~1p?y6>^!qKEClo z623Vc3w4fypx-xni!;2_!TT{8ZuQqxiX<0Z6@Zt#N<=l&S9u=6pLW~ zD0h*>9X}favQ%vdZGDuKdHICg)&NBaK|OnC29GAKa?ljtCg`tJLdzn|!hZwNG2O z<{_mBZS&TYq6&|_Ietqpfz`?$(uizN&{g(=5@7;a-c*k%xOVbIw$VUEAU>(OdM4ut z@Gp23)hSfH99=Y4Gj}h=veWDPwHO%lwWU^hW1Yx-YbCc0?wGxMw)~1saUrbM#MQC1 zzHzENj}m^l7P_oe=cj{em2y{|2#!oBO8|2`7_z}KrR=#19#vf#wzfIpd$09BA`VJ4 z=uejodC1^{%#q}Iix3<~;frzlDNjy%VFtnDNeT2`(hx0qqFlw!X_BZ~N(!}j?UP}n zSQgL^SYsx7nZ9A{VbvH?{#+0f$r#Rf78d&v)3+!`*u}329}v_f0xQ4*oIt0R zdkbZFnV(Xs0a5T$qt-h-q5hFw>;r zNY$>(DARMz53X7*KboBP3LfMlLa@@qHf9@eZjuHKea_r+kN2bVYuNSuj6iXAE;4vAkAc&90L@Y zUU+zdVVyP@NOLU=NqleMRA8mi`5#HW@W-p80 zu4qTkR+BEfuU0sNt(snhiArkb0Ri9S?$`p3;B)`Kv&}8}EpyTFoahen(>cOe9*y1| z>kf#K>=yKvoZ3-A2O8I2Qf%Q%xJ^9?6`!ajldF`$dBietgz*7vA@uH# z|I>g3CJqYSlQ}MhG#ab9N z4rY|PU=KoZ5fWpC?JDvj$i`6w+i?TkR+zYmHSQ>QdWz3*`%Y3aG2ILtCr(ri;KUm1 zEZe7?$ro|IEct8^V0TkVr-yYF6cpMMkf2hanKqW{C5#mS1+PR(ss=J`L3^3$94w*~ z3>kQzK^y>BRLln@9Sv=FSpWb4 literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/techniques-device-timeline.md b/windows/security/threat-protection/microsoft-defender-atp/techniques-device-timeline.md index 354403163d..2ac8d5be67 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/techniques-device-timeline.md +++ b/windows/security/threat-protection/microsoft-defender-atp/techniques-device-timeline.md @@ -52,18 +52,18 @@ Select the specific *Attack technique* to open the related ATT&CK technique page You can copy an entity's details when you see a blue icon on the right. For instance, to copy a related file's SHA1, select the blue page icon. -![Copy entity details](images/techniques-side-pane-clickable.png) +![Copy entity details](images/techniques-sha1.png) You can do the same for command lines. -![Copy command line](images/techniques-side-pane-command.png) +![Copy command line](images/techniques-cmd.png) ## Investigate related events To use [advanced hunting](advanced-hunting-overview.md) to find events related to the selected Technique, select **Hunt for related events**. This leads to the advanced hunting page with a query to find events related to the Technique. -![Hunt for related events](images/techniques-hunt-for-related-events.png) +![Hunt for related events](images/techniques-hunting.png) >[!NOTE] >Querying using the **Hunt for related events** button from a Technique side pane displays all the events related to the identified technique but does not include the Technique itself in the query results. From 9f8dc00fe29ab5eeebbad58e16fa2c87c547bf9d Mon Sep 17 00:00:00 2001 From: schmurky Date: Fri, 5 Mar 2021 16:54:32 +0800 Subject: [PATCH 34/63] Changed images --- .../microsoft-defender-atp/techniques-device-timeline.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/techniques-device-timeline.md b/windows/security/threat-protection/microsoft-defender-atp/techniques-device-timeline.md index 2ac8d5be67..baa3deac5f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/techniques-device-timeline.md +++ b/windows/security/threat-protection/microsoft-defender-atp/techniques-device-timeline.md @@ -78,7 +78,7 @@ You can customize which columns to expose. You can also filter for flagged event ### Choose columns to expose You can choose which columns to expose in the timeline by selecting the **Choose columns** button. -![Customize columns](images/filter-customize-columns.png) +![Customize columns](images/timeline-columns.png) From there you can select which information set to include. From a25be4555332ec290993338498360e95a13d3720 Mon Sep 17 00:00:00 2001 From: schmurky Date: Fri, 5 Mar 2021 17:01:21 +0800 Subject: [PATCH 35/63] Replace timeline --- .../images/timeline-columns.png | Bin 81298 -> 154819 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/timeline-columns.png b/windows/security/threat-protection/microsoft-defender-atp/images/timeline-columns.png index dfebe23373d50857090aaf493929edad224cf5a0..8c6a1403e41d16ab5dbf5bc147aeaa32dd9bfc99 100644 GIT binary patch literal 154819 zcmce;1yGz@upm5WAc3F>!QBFbyK8U{?lL$GJ~)Kn5Zv7f?h-TvcMGn;-5my&+?#vf z+x_24ZEgKjG4p-r^l3kRq#HsMb z<6&fkKp+edRtB(x86z_{H#Z{_3nL2)@EHQ==w|C==nAxTB>xA47|7As!NShT0&Gk2 z8>68S*x8An?3vTQMX<5^7p<-1A2mHIjM3H5j**#x>993uou-VEq?y6Jth@ zHOK~J>*V+h%lt2_ojKSE>}U@DpP>G?`@bXbtXes_e`)-eyx7?MOTy7f+~rw}KMMIT zp&dWE*?}09L5^T&2V;=9%QKtgzooI`5p@6=I)NQNg2C4R7)tRUmPuGx7+6SX)GcgH zzz|2;|1q@H2O;|G8aC zR8-LcY-(Zs+~KG!AwnW0F3Q2o&A|a=VPO7?T{$@(DO*P;LtA5zlo&tRvvL?LEKGPz zxJ_BujkryKAPz25APWl{3((Nem>I}o%+A4X!fnLD#Pzqh&*R0w#?HT8;Ggj(&*Ryc z+1c2*jF^F}#!Mza6C*YgAU78iH;~zcg_X<1h{K2j#PJV(1qX}gDQIZ@e~st&#Qg0$ zJdzfU&sKH&Gj&uz_J5wNElB=y7al|7-_wAf%=owcK_+B>nl1hd4g8-;@HbkBIp`Vb z|H3c+26F_PIzbE_K*DCv+WO!69pnFuc}GK+|26CXXU6-VvHm~!>HiJuf7EJhZfI); zdXA}#WWR-B{2hJ%HVWhaXs^He{!^s-2mCqw{eJv6?moZ#8@WNY&!`=q<1#M6yEgz> zwLmE`;g7EK2TKr7Y|!J2ljETS>tjmo>fQ7x|78zVrGr)oKmR4Y;HcG_8zdt`*BXh; z4=I@DrN8_RAuMU@wRQb9%i*=en98W1A6xrzBBQ=xO>#1Hq^5b)EW^w+xG>Wj4_yR_ z)c^SddKC;Xm@d`SK>Gdm+;k_G%x?8IL{;eT{_GVh6#u^;N&P>e|25|M15xA;xX3m? zM#A$#1`z(vk|qTY1Fr`27fkkw1IdP4#=1s=Ay>qvo8BsdFgn1O1j&zrHikmn%iNDE z{?xFU{NrI{u^5-0yD7YecavOtcANq2A2tpVM1+H>*Fs#=K$rx*pGbuCSMPZ)ke^pb z-!^?EG7Ml&w{o%uy#VDt8cP~$4~01aBR{Jr3jVfhDcs+(wbu#Jbmfd|unpLklAOQ` z$821qPGX!4yY|&shlAEmlY$FCEZ;Q9`1`+PNr^~DW4@#YX5cDk=v_OPiq{YWH3Lwk*3+7q|A7c2fD?1CT?u?{Q1ILJcH zEO*hXh#eo?3+GL|too0|MskE`kVKePpAAA$qz?vSi!+CaeLwEh4g2E>W-=t<{(jbE zr*vOXy{WN!)~n1Z!aZ>Q7~H$dqUozF-`g)AItxirz0;A&v$G_{CJT2)E`PId_eJJ{ zYgzLcNs1<43>(G4xVIouCNUFI5yR`$2+@9_j!(XUX;`W&&?Z)qYqypX6n_#V5em%5o-dmUFJMS8Ut4s!FZTYXz$2A?H1b4m(Xf^J zA*s)f>7?7XkZ16!^;6~gYy^W;Pi5N1`cs6<@%&1>plRh}>G7NMPdg8COTu;5lG!e4 zNjbAS9mU^Q_WiE)qGBre+wU%rUAhgyqDiamvCg;x{W*>K?IQlb$8F9`QT9h5q2Wa0 zs%kZE=cWJmX*Ca=(sONR2Qn#Vm1vPraUSjThz1B7=9)$zg~GlBvQ&&L8By2=J7V(Z zNwJeRVIXr~LtOj1>FY+@s~RfQ{&(hTmd-ICZM;bLw(TEV9@i~C*H6Q86cJA~TTrud z*S*X7*`k%=;wjz*fSI&t0#uem+s)bF2k$|`I- zd+Mw#y{+BKL(!(K_d+jdZ>YC?QRw> z*F}FBByr=H`}PHTk_LWOTtAw4gD*l|LqXc)X$D~=&*Y}utlFLK=&u%bnYvU_dE!~J zj;_)_*t10Oy1rDiaXl{TCHB1dMXj$}$>1p+O3L&rim^kqbbsf}d7&NZAfi28vAhua zZS`IWi%K?$$?!*oYopMrXa@k0_P7A|65#h;1|-Ozp3D3W()A8GfPCKULmJK*yYgrF z$ll*>u@BG7^Hi5-b3@sk_=e_=ND1#!N+hqSA3}pZEHi`OwQ?Y6mu@@y$xANbvC{$Q zuu7m`zBv5$HJ+f6WK6rm;{#effo)|X${17Y<)s8#!Xeb?P|xvHDE*yQgthy9E80F( zL{AS9Rk6moKWAb%o8&|(dO1(lDZc&ksKwakZJXHmW%m+h6>47RWwz}ep)?Htn00x-IF%fkp@Bj)-luN;FtkV$x?_AT~PGcP28Zp?u_iZwY z!6wre*6C?S`^}V?$f0ESRJmTqEbaJ6x)>t)Ego^UUv;mBp8`#ad*^mO=H4{(W7fMV zSxnvFA15c{XhJvN4+hgx;rS|53PtNXgRxL#l*FzhoCg!sHzOIMqTm51^wg~R1^FrB zYzTnwR2n46Kc0T&pjq~{7=<0Qw;BsXqtooQr-Od+K0P)Ct^nUEV#B~PdM-`Ay?fa~ z!L`?}s~sVQwBgfmb))b2h4=x=s^tB&VWO?|p;(Nb>|U)qYDJ6ve3BAD@+VK@imrK; zRQsi@2-%2CGzt zwl#&guProxmSZYB9BNc4FD*S#NAo|`V0-)Ju~_{rloVe0gn$}zJWld?p@buSj`bHc zlLp!|_?h)+Z6@DmEYJZ+ur9V>+QzIE*J!ZuD|RxK(=S96DsHvn##31QK+4ad+6@&4 zA1!66YAAX2$CuS#GSGQOrA> zKiS<199lfs8{Im%+W10G7s)DDTghzJ4{y_S5awDRvk)H6_8*J&3-?b*F++!4E%*x#|4l76BjO zxoNnb7GX6}YlyDF!`NDejf|d$$H?B&8;i~lb>O7)J-@P2K8S0e;o$^C-wk4st}xNg zBswvJu%7$HDxvk}jQ7QUaSO(M?cfWF`G#S)&AI^mfpZy$6qiE=h=pU!W)Q@)DVMp+ zdayTO4VkNNx=LCWE{NrN<|f4kgruE#J0;54=mGweT<=;dN%0Z*MPJ+8vaYv01s=9IR;hR<&Ff%*El& z0oE^TSjqbJHXjKf!Y{GadU^K)O}cZS<%ev44%&A75zo!|nm8euic~_`R*ixh{YumM zAc*d@`&~SCQG1HpuGNabbsgv1(j_oHlcK%#{tvGotFVXn6)gjWs45&_&&_U5wWHE% zlP}fgKeW}`Zti%)==L^0d^Vo?6ah0wyF4(_sya+$cFYTIo1|~J;_QAONl0iThAxN*_hl*@|Ny04Vhj3X3-5ltGs zBS6%)$6eZA13(Y71Mbye@sCA4N9^Fy3`idTo~^l+)iz5tYOjmWwzxmKc?UVtx~Wj#wq-bekH?%; zrdPH4nGxdMX4?NapMxR#^JfT(FXa_j7cxZGUvCM>GU^RHd(FVx4FJf!n6Uwen-nA~ znAyFjqr0CXSLA!k8(k&*XC?144rE` zmgW{nfmUg0!9%z_2Pt&Di)TB~EshEjKb?}I=JM&o*Mm)T9K@GfBc5y3VT`S}q4;6e z)#dY{{P`YDJiH5ZgOS#J)0_?Rw*C0bCTm0ev2uAoj8vO>EqS2JQL{=aYUzR-cleB{ zkKezrzWPEM%|XctoL&vb!KQke?IwVaAfpY-fCU7IKNW__-q+W9k9&G%lzgN^4qMAO zzWRprO%3ZntEQdT{a!^upN*om&iYq@)>*$QYuKdfI8zQz0vtTu{q@~Vdv}YNr%ApamLfN&1BHaaiOlc zv+;u|T=mDt@!dOdd>6OY*5NlV0JER*OH^!93XCPl44=wJm%}&oZ?CtXoI6&3mK~4s zZVbEablm4$?h6Ru-Bj@pp0>giuy$P`YJ$VH8|usq*#+&Qb^``u&dif)%B^fz@5{Es zYOVK21O;ysxAj+eUG|Re5YR@UcALI*K9Kv5om&XJ9N>q>jwt9393*~r7~ylT4$tA< zevc`FK4bG^3`%`@0qe%Dz{T!JApXVtgXvMja{@v?CZr3D+#+zF+B9!AryRV$9#k^|A)639{l>%I?1h1;9idN)bJ+~EJ z(R}9}y^K}#k2{mDr*>{mON%%w>j$~#s+Se?vutN=L119?@ocr}OplyL(*#lGEvY>04oc<9IUNobe6-r_(iQcaHJL}~J&vB|XIw$sht;_9 zv-y#7bbwP`L+uUsh^9v^sof>9w;(yU^4)29#glZZj^{aHdumk9eAS&D%`Yy`M#vrN z^$MRjhflZdepJXLV}{EVP$hOZLs!Bw56=;rApJVaT0&eh4WWD>0dTYMK85tQfUc0% zBh|_>9k6O&>vRVtT;Q~YVDsJ1wywYW(n~J8G%$6Tt}bx8P4{8@HiALFt>Jv6@ab~4 zjCB{@aG!H8JBV1yxdA-44RM;9YRZE^4A zYHWTa8XO&ti{E&|e;=x{S;ZV~FNUsN*pCVFaBcX!QJ`a6X9%ck?aS&0FtZbQFX`AX zAb0Mkc0v=!15(RDM?MqYyL2<#R_cd2Y@Z6yrorQv#H?Q%jKg?g=p{l)5CN^i$@8-= z*1ZX;Hj|9+7PaRH^2AOJ6q-BX#CsA7;L05KO`NN#xH2`;aGnv=8EB3}v$Zr&XA;H1CXFNrWC`lbZ^Oh^^F z%^j2&K!E|EDZ6XeMH(%&HKs1qjV29oGjdQfx;Y~8LwDe*D@xQCxH$}PTxr_s@bDj5 z%|gb}tmAnH32F3D7d1u$CP>eHom{ANI(%*Rt%ON5OO+*G%Q#NP^5K#hd~BBKEGF6^ zJ9moJr$wk|xRZz7`ubwMrsn$ILrYtSd9-O$RhFW7l*n^1YW1!uR2Lrv?LixrvzjXg zH7)SYuHFpZ?*g2@CyIAo0-fm+XRgIip#EKv2kP-sN6Rbsiz#|Bpz{gUIm_->iAe`! z0N-fQ;kP1O*k)~0Qg7dh*b>cF=$k(oDjUNTaQqxo`34ftr=yuk`Y_^}rg^itf1V)d zy8Q+(UpXI}E}yJWB$f5OXhqb0{`>UVF=aO)&aX@}6OgJ-67s%UL@el(IVSP(`<1iJ zUsOS&f(%5c*b!-N-SEw?4O*xeXMfU35j#!QBEK&)-K&j@NS{(l5`jC(UVaOquQYTc z#39`XAWOdLX~}pcaNq?#^pc*L$K!Z^d!Q0}PIrgvavX`H(8Qq0h{%uL$`bMc74SY? zsf>iuNQ+7dzgAgEGG`pOX+C1Nn$`4*751G(!N*2?chs#GsRXk49;V8#KDP>s<6ju$ z3vpE43ks;bws96BU8`edEuLbzx%`G`iHz3L4uwTt0!WmKJ^~CRS-Ql(pIw~b=Gs`Y zXY%Hp@65D9zX~qaJIQH+zma><D{ox`9eO zQ{gsw^m4+0P!QBNj}YVwtDHk1&>~h871G6$uY(HU`5YaIWU*e}+IU&Usjurgcnp3o zKMm*GvJuFecFd6c#Nab3I)7z37>tbjfzbE0zv5=f{KS$6Pm|~_HX{v6E+bLagyjoU zRNl4M8M80K4yv_@Z|{gzY?~kh>Vjx(H=jDp)?$xlQ2kM2SKS`Pw!#M3nk2gi?it#k zvmp%Hw+9kIj}D^6Gn+WxZ0HX3y$<2;{@Snmd%yJ?AWphO(tWx{dre{cj%WOX^{vs0 z;Gp=cr}-6Wq0Q_bgv$qL!(O{1N@_uO_>5>A%HVsvIPMl=A#z1B<)V+x?t|*ywv_L3 zlmMyLRrgOBro<})tC~>PF~zmYL?QLng6KNZJzNI z*0HW)PakJI%9(@_&(7 zezLakYj}hDKIUOohLW*XMxgkz#%-dlJbS44>74T9c!GmB`M^9x(uQidLEnrI+q7R1 z%tzMWvZvO)ee7MeUA~x>yWc)kjU_gz#uJl~nEja3gJWLi3O(<oyUSbv}S@Cw~Nvryf1kSS(D{2ZbqI4?^RGf_Pmv{yITbE&>7`!@DSLJyd) z-eRZHGh+dEv#`>Py(?I3dwII4tK=5_YhjKO9o?d$_2F#sS5J_sAo;i3yPQ*UY&hy| z-1x1FI6E(!aerPBtHieUnk|KI4iJc330)T@nS3EWpz&+_%yx_G+Un@CUfonihM2v} zXC0{;aW}Aao_{l=sqWKu+S89fUMdkv zt5tTz;Bd6)d^~rlLRqTuK87lSpbS4jrQKVOn-f*Yz>jcBE`mZ}%aQvaId-sZ@us7G zo|)tLIXZTEI-2;Hp{2tDh$89o?n2z$5TJ73oPl5>H36oR_L*bz;sdRnJku}t8RzPs zvkmTcWXfrxy-yn2fzwo%qd{I@o}*|EzPk13U8nPRe~)Ga0MeaKTc3J!r^kU{7>B;g zZ}IbU)A*4X^(WPn+s^4b*Bv@jOvKPHS)SsPQS8EcR9JF z1YL&{YqVQ#ADPrhi8V(O>QwdG&v;$ixpvAecBJ3aByp}+0MC@y9Vku?8NsTH6E6)EcvWlKVJ8(D+o9^KW5wp#hU5yf_xd? zhCJQGAPC>|<72LI`s7 z6@XA=nhtC>7^@`ki$P0s|J5j5BpqOL&~-{n%b}z$Dwf7$cmVjUW+;iz;^_Gp=`&ay zO96Znaj7@H^K+g0lT=)F|F;X)^F6d+r%3rJpKUy^Qz6CZltfc|uZQ_TZT|iS9k0VI z?{8;{OFuw#DbO=~aMOmC{odC7RQz#v;&(QQyq8BN_S}W z6n><$SWQ^iU7%)sffMfvvyXR?z6G%wpZRQMjJHZf@^$Of`wPeMY2_uho_?7pt1`fX>}& z0TI&Ub&0wAN`iLdRtTigH7YWtSU{;U6ERq*sGmwhIw?xt`ZR)kfU}7C;*fUMC((A3 zn?p|7F+{1uC+62U*1 zka(roA4?T6!wX@UcM`L#Mx()vO3ldGK=bmRO-@g(DCqy$0(1Lzu6T3MC7u&o;hU{f zAoJLM^sMs4q*Jt_kfH2wLy^zLSHG_`nl0WkX6Yn{&G1S#&ZC1KIWw{{wBw$mBf$uZ zWby34{-1(!4UQ5ECnY^sN1ET(vnJD4z++J`E-ElZ*h?M#?3EZLHZ%#besn6Pa?bPkwSYxcse8hd*tRG{ZZT zWEDs2I6+dG5$P(tY89U18Skc&!IW55_n*OWu7_bY+t<=D70vfrxguf!^z1tj@vt7` zqy3VzItm@bM3wHVx4=V`Xk#-S3TGS5>ITe>`Xb{G=9?HI(P_!n5eR-U6dtBq-yprs z)zvI(yM>t<>{iniRZha_egbHn)zmDYkG5<9E-eBU2M;fC@vb zzGq#lx4C*m%)GfdeKmE)#~3ZCigy^vXXd58`js=Mz#jW_=!A6OZDg zyluX;;?kYjTG5A6rR$+fT4k~(gazF%9n^03>fcUv*La^Z*z{De&k`@V?(3Y>?AdWv zwX_ZWv*mw0Dy2=KsQl>r&(g2)w9T^Lw z!;hZ(k)%D|>yi9UGCUa2j-;zBUgtXfw7aipV#u#E7(kKpPc(hA_1?#HTRcxDlkG4@ zF2C88qY9vKZPmdjR>!NY`n)&BtnRvuAa&WNkEPT!q7)=OUPOxC9?2D%?+F1m%QL zWjfv(-TBAu-pC6;9#X1w0mA4bfjG2jlnbB!B&FKpg`Q*hUrDYVdY8AlGtmGT-)YJ@ zfDriO!>mf#2jnQh{f92%Od#I+4M}G-SK$Q;G84hzItjzyqqdbuD3JU}`mngaD5Ar| zBBhT|z;2IB$;5cX3F{xcXwWFgac^)I@(k?&kYLKMZV362_&jjG#Z9k>ru{1~>93&` zkmxG@Hw!H<{VAlBCZsyc6~Rf<36!F_z+8_ z=5xnMQnK=9$%E(orccrkr3>R@Y>IsVrXT^YTSkuE1@iBUrDv|>jY;4E(qf|Y zSL;Q2lE)M3l%PjFH!ZMox{_!uPIxpf=aWjEg?^hk}q> zY0+up3jVYYRBM7vd^AX~a+72j5$JzZGPaBA4=+4c>kmpMCc0b~X%jlS2;zunCGU9h zV^@@pXM1~6^8;;JLxeth&Gui$36Wrg$YMVjM-vZ+dr}Z&TU6a7((45Wk}sm=2@9js zgvLlR|4Shm$^SWN{5A~h^qth>SiS%^U(cqNIq1507)WUlGqycv7o)>B`TWq zrr`RKpEcVakL$DPpOfNR*-_eMZGnMplf>MB{C=^1leYT$w&E&)Wr=Ef{N-=}8-b3d zO=BA)x>`b_YI5yo3D7m;=ouv)b^*{s07uEn!>f&*l8(Hpsp`^J2h6&Vh2&vC9IDExu4g(J${(gfGPHQwD z=fuhRxQBHV(NjRBysAse1lsp?taW-JH=Ui4Qr(bX^D}?Du&_`8pEc_{6&+)Gdr3{U z!F)Pr5=E=xui}ZKrU;=p+Q~H30x2^yi#%FY!}76Jv(^Ju5KAeyZPW@S zNT@_wK8$!yEk7Z$(R>yO{ep0OszWS}^CFYSW>Ip#GGe;@d1Lzb!SFfcvXLt+q=>PV zDHb7o!h!!aqy6eRA_LynZQ;l&yy0Sai4GSGBL=f3K#UW1$&dNQ{~Z7er8>HA<|!PO z!ms0)-e1Na4#sC?RKSO61jg>vE@@^jWd5$x-dF50TTX%;4;eQy@Ijd9JAOEmkb%md z3V?LmoXKx2MIRCU&|f01-uFz)OW{!Hk{(jqmCQ);YWurz|L}%dV@QHL@NFR z-J`h0$qc2PkmC1VZM+4Z*EX|r!b_Jst%w9~{*i#Y#&j4n{jp9O7PHHxYA?GbQvM{ z+J}gx8RJHP+%mS^^mYb=>^yIxD5PR2XrqG*y4iqKv@frT{~5OMsS-_Gi6yz^*eqfl zJ_83{*mwQfhuW7!3R9HiAE2O5C%nJVneP8Y{jrLWF3jH>f!{3uM=j1fB#b`;3`zc| z|GzHU`F{jBwo47`tH=}_@Ncou>#8IHA|&pJZiheIje%c`s`SETe<bOA-za_<^Nal$A8!Ir_-P5pVbHb$G`g+q<;bm66t>w zR{ht2zeazk9WK{d9SaaYy?V-syj{TKHTtnTt48|vg7vg5bG^!rW+bDYCBTC>f`}fx zw_|Bl%<>N8R*i=S|Zwt0YW8VI- zu!&h^$8;sye(6#R;T9=$^x(0&vR(21x^NCn{i*6)nmq|Ap5C;z+H(mUNmfX%EV=7@ zgnC?mtVOsZI(2q&a(OZ0N`5=N5Ep{*qe{O%!Ic92zDJw)zy^F|{|PW|=NEFvi?7{Q zrBh#1lg)c$)!LhsGdbYbh-DbAehkl;xQ(N;sN-DaC{O2Y29(z z!*u!_|NgPccs=I2ehO;mg3>^=&lB$j6>S!9hjs@Yx7}t)Waw3TimD8^HR!p6^k+g^ ztrc!#(H=l%fF_QX`?Y&~?_tdD;)VnU?dq-bQ9=EN%cv)u18k+zx;Dx_;l{F>8lXc$ z!%AP(5^-DG7B4dI!G5ueINg~6F z3i0V9T)O>rP)8l(>~6);esS9Ltmo={#`2P#+q+C*h;~h9KbK`<+nI$&*NoB%!HX02 zx@(?yfb752xM!NN$vOV@q%W2oz7ATMK+RTx}LtK4BZF%J=jm6eTspu&a5 z)bdnCY4Hw18|0DhX;E?Cfk^XW?O>+uW^HhLB}sRG?RQ}xPsKlVItos;X>$A1M@rk9 zG(Pg)8(eDW@F{OIdlJd5)9=?v`%lcCJfAj@u~hsP)DJ3Tq(*USYBi*V{G450ys@t24@1G-Ju>@?Ga3q4~bkV1&e%dZxZ_eSPb*@?P+3t7{o=nDPAtX50(@`UYalXbE1;Cg^5|bn=bmKfkL$4z zbuX48dP$v=QQuj|ua;T_PThNLZS%4}26Z5IKHqv$FjL>-P{ya({%%7!;6p-I_jkgj zy0&UU7Uc^7AY>V6#lb6V^pnQ;Q?Lfr)*30;KR(Pitl27p{Z?b@d&lirqep+(s8?kX zKea=}1zB4Y(u%1Fwn1YxSDYTwYG$bsh1d)_Q*>H3m9rRbH;Q0;ur$l9{*ON>^J1 zG)V^o;4-t=o%ZjG%8O<0;KDy8SZtUX#f`bZ1gtLFq&6HlHNg>8IE*D(D@Y6{lzGso zr0Df{-7f1tLNzyo4aMi&+|*kAvuF(5Il(mh!4npygm%Bs>73LKd4A%_D{x={FeC;O zfD7v{KT81xL#(yV_w;3sJr6V04u^z) zS}_XNl+46gq0>^5NsCEvfy1Mukm@H1)dstVRbRLqRg4#y(1^h&p43lIH+aC;D9w4> z-5>Sn$!ML;5Tp0hI?2R@{tD6fsnQBjd0|$)Ya*Zdf`Ww^Cfk5XQfkA*dOI;+x3;HT z1$Iy@$sGD=xDH0VSZb7IEwzZxu*#ZPWA8ZZ1+i$N|^4RlA4if*mjTtNFM8P4$~ zF3=USJI@04lb4@Be%z`{b!kHK3Kb^0baBZ0NRdNwWPgVnpfll`XAREhB%hRq^&QpL z)7~vC{UC0=fA^(4X)z%W5zsT$ly99liF6`JdZK|1nYPMSJ zdq?*d#D-`WyVyyGRUAdhSXX}qNvHEu_IG(`UD<&9+npQ?T@c|t!=COEDPJtY1z}@v zytUjk!a&w_ZXUd)IV%SZ^IUngIFLu%Z;r7c`&N1l=G5{2 zn!sIub#_jVh$`+|W4ga3sw*uMs)Yg!nm+o9N=0302Fk<5#zu;E?W^+{T+aGwq&x|T zvSW`sMcGf{ZWn(jp>OB7u+A+!jQ4Zifome39G3$DRbD7|+rN+p> zP@Oh(MKr4p!grhO`gk1SU~14-RQDLApw1<7r18y8&a5IgyNQ#W*W+oxr>!+dq=M5v zq#OteLJ9aB(>k2#SyeXEODo&YQM0yz=oXTzt=4Ou+Y_(Rp?*1?Hqla~lCrgYzTGWB zQMK2w3?0HzAOL!KTn+TlCPu8|yR@)uheg!Sr*Dq5@GU$7gQUwF#hN@iaE7PtcguN? zA4RQ1YPWMaIldiE2F*4Az1^lBx0+fP77(Ya^-mu7@AFn5*o2sm~3-%s!&z9cggRLDE=*jebwnjlVJrr1uuBR?M zD;feER$o8hYEJIcZ99mH_CSS|rgo%!)871bGw_cR*~z_iN=yo?hD zsP$*ig=_QitltdIR9(ZAD&Z@uJB4?km3BipXYKoPLbA<11N4Sq2k$NePjjd%zC(J=qH8gYgd!_Bx zhb;ITN7Yj=Y{;eA9$UdfdN~ZZHtLUSdqOJR36<4ZnR2L@j?!Z@^Mj(j9X3II6wZe~ z#Pd7MlUS};&k4`BfMvx+XQy#6NeILY*5;NaTrNT>YUmXj-|{}Nu&gwl4qivNQidAL zgc44XN~pk@F>>(eyWV`0EA6sWy*OBOZ>-DxRv$39o46-fzd9xEoPJo>`<`rIF=X8V z#&>u5be?))A`m5>w|)qERyn%RlplbfY|P)ZH%0i`IYV4+Su}ja;OYG2)g_y~_2z^_ z4^Q=&tNCqj&_eTk$$oc%PCgjQIy!70rgFdVv-h=iiLK?lnp!5WlVYjq`Ca;#v}VKo zgxrFm4$SQ)ocfFKQD#-bbJLA8e1TiZ=mgycZ;-eShqYM$QCS!rY44ayo82UHW^-Ln z$q-9r$+DK~Pu#a6Chqn<{hp{?&95i?77z1l0!>Qz-|VM~zzyN<;?4nk6H50!7E%tZ z=(Ul)!_ihz=Gl`;EaOLC!w%TJs2)}0k%h~9vFv_ShniLhnd`Zv%`MP^Zk})Z%#IzF z>NHz>w7L#`O=}w+wL34k9jt#JxOnybq61#&EA)Gec-S?8z*{zyHshY}(-V|34IjmS zwD7Pm*0OIRu`j(S=ct0QYTUE)U7;MXCFpR!8rjGpYc zcBD`4@d9F`5O{Igbq?iHn2pWPi&fe0OOSN;P@i|-cm7h{ag8gEC` zz*j@ea?@nHV`>oZf!tI_(%DA4v7N}Z|HSGj#qIQl*_c|7cRfRbk&wv73K?EbebIex zCnqm9<7}{+Z?p;p0KmU?Yh`{t>l*y?y8W=j2QAxj;5jqy4o#=ezOysF-*bDK!;wp6 zvERvf1EycmFk_*i#Z0Ok#Scc(;lnhRSa!PJe`+f#@q}g&?wgKkX9~EV8Gt4i7+dX? z&vlSD8?}$x>}%a`@qM)FC;OY|aC{mk)c9;&scJ5v&iF2jXlCJ0=jV)ko|^$w(TvzH z0MCDVLIPOB_+SKG$}CUgW%%|OYB96FR(78P<+o8S_M?T~1u`_c zhO;a^{#;?iL)Se!+g~fiFb<-~d9yh}Z(DO_*J#HmD2aG(| zuB58ip74C_2vw)P0$s=6O*B4c0XlY!lm5$zV%^k-z>raa^F>ylcKem1)=N|v=}fQn zVNSMtg52FMQZ{GIcGQgo92N1)uIB zHJ_r0ma3?uo!5sOmYg@^W2y9+Z~UyDg=%6}DPXn9n_MZL)=<8k_wwMTi?@;)kHi(Q zJQ$0S1c8DUde0~5h9ASEW^@ZS6=?u0U?MWZ?&gL$?>U*@@u9YRLkp;wE!FRtFow?0jH z5H+5!F*ifNUq_N}8+;z_i52u0+e}qu7|GQ%e6G9lab&-71za3eoFL#eW7Bp9YRk`6 zy~j|%7)KHfHfP4YsDJsgztQR_RpTq&lM!ty%i)|)`^|l7Igd`gkif%q`_ulnr$rX) zr9$31Zt{HK6#c%v(^%)rp^~>PB84bKoIfi)Zav}&F{*f=#Au6ra!tqS3Y;joth6#e zYt7~+Mqhsv>v?t|!N=2PI_kc)Pi-OLF||q-Rpt^3EpGa)q*m7D3195s0Z|mUsMQQO?OV$W%j2`tb|>ko3qa$-a3*&_t%l}miOSbaC#MUA_`_0gh_5rb+)Eo< z^9xu9;Eah`)<+8UZuZ|yA4){ta!t+1z{48-3SLfOSKN*+ce7wA>Bvm@?3z=DDJKdl{7NY-NAeR=EyHjL)NxV>{pFF`RHxLAm2@u1^ zx4m?|@snX_ZQ&AM@b1EhLTSA!PX6$jdm{`9w#(1(e3kZ^?|g>$B|WOgd&u#e!d3fm zrxJ%=)VOrn+N&*~z1*_GY{9JL4Sv84CKZ3b!sA z_Kjik*_O3eR#P12#5@W#qUKEa0N?utKj6*rmvHiYh#(?MaG((HLC*L|=Y@KierCvt zLL9~UwY}nCkbS&Vf}yqVo5kZNt$U$!sqQLsbvG+XE8DW7=&dj;8wq}ld@&KG5G3Fh z=%c7;tKkqr?n`=XIovlCfD`YANt`b*8@e9nHZx}BK3>yjQ_b=gw@9HmNWSp7gH>j* zzT+v(B%Lp_WQRGFvMU*}v2p|wGn?-+o>G%aE&|^@2c=LlKs3sFQ}Zo{P|AWxC*nDmroHm;g*oS(V;47S1o&-5j1O?uJSy;>rO4 z1sw(!N_V^zou-mBRY2zG&J)sVaW;0;>M?C=URt)ZLF)$+2LJqO4%qp!?}TCI z5vI+uIX^hj&J!paMFFEDVp&;G0PC9-Wram_Kej6sSLmb-I`XeVWX4gYo8Q|v{+7!~ z5KGpjsp9?`AZDQ%Du2T3&i{)G0RLPH$pHtT8BU-Oz&5o>XiESXf0%`)3Oo#TUZipy zQg~eP3Gd2s0013zW#4{q)c3tZLrmAjrJPyeHs08xe7bXe`t?pURknA5n$jp-${heu z31xn(Fwi$VY_y`&q>{|e%o!4bNsnc2xtGJ3$}NSOrU72sFv>`2DRDk`NKLdW|~C30uXKnO~XE z_fiWshxtCY9{T)$7O=%BjqF3h3o#F$OHjfXl9OUp9H2D~A^6iRcYA3CvAi`gtH%7K zgWZV{mbXsRDV9mfEJr}YMOczx#;vGJO|!% z@mZJ{R1GeJ#>%8QYFLz~b-YVo0=W)LeF7C<@~ z`>Bi=yzJ#Pnv$M=YSNrHv(K};@A1+*u@fs822eS!7sNUu`g37&{Q}0fu&`zZ3o+QK zj@=EUxz5l;6@OKe$Hq^`-fO#KZX0$Ih18g~Ok;O?G*V6i@L#%|I<&~`9ZFh^MDEFx z_R#wfv1Y=-v<#hFgFLI_=`@BVxsHaKF5g5tTZ}?YBUTQ2_TdWO&3yCu3iy14djDFf z09(lux^V1y))AEI?xmE)9a+Qq0|tO&cl!gyT$#e7eq=#oT@IgHZl!iZM%}(j^U9gT z>6^Q*0L)Jda#NI;5Q~5g>%PHvoK7NxSE?1Q*CV}joD}&uWqel%>HM78KZ6yT-QV4{U#RZ6lwpi2F_*jho>u#j zXLfvY|AlYX=+uY>;sTIgCPSME(jO!<-AG<4I9;FLB+T!WB?~JI7AfPb^%n2}%TV{) zM@+kp_kH5`5cD=%Za&ZSVdd}Fi=(yKKM03G8aIgBUf@Z~tSFhFD7;A@>65BO6Bs}5 zU%bW{No_X26{uk^Gr55eDY;ds!J$ukGD;VjVI0IZKST~(1LTP#mHAwMPI#xJ6Q|L9 zp2T32H=;VJ<>nMllu|NqbqycWyNOI68{7kzp_iHXLNb;6D~%jk!J92oO(?y7dJz6A z_aDp&Ul0jw83F!YMBwiVz7zp-Ep|5AhD{$*C%_+?G;@^Sp=fs2lwt4h+w;JX5M4Aa zc~|KSAJ9Qf*4voHp}XvkTdnsa&0wIJL+=Hvn0B)}ISRnnVzx_hV`rI=iTlvx#SFK? zdEs$;lX=GjM9+uLfDSLU*qQV4rBQYH?O4y5P_f?f*x*JuuCgZ2b}MANY_W1CgZ1!) zx@N`WIvpaQk<7=DNwqP@VmueqP{fQYq!EacOqH9*k`8QLv1=xqnEvGeC+Q%8)`w58 zBpF}tz2%pU6$2`J^;BiBJb{*&;Brf*AB5}J9)e0tU&#y*Rp)?3VpeAr{j zp1Hf1uOs+7wGRKtI{<|rzb;`)t#{&E6PiuSd@36awZPD`>x(92fWmclb(7j*9}K3J zq*#FKSe5(uBIPmg=Kg+I(?XnQV)x|-ga~9;Kl((ZJ6#MwtExt`yAr4*RR-SZEUvVJ zb;_vdW0?$XN)&dnc8e?df8*>egX&nixZgp8CAbE6cXtbJ!QEW~L4rHM-QC^Y-6eQ{ z;O-XO;qIK1^St-NTXm~$)&8*ep6Tf|Ju^MsYyH;0W8zWnoC4&|9H@~m+*{Lj2XSq6 z)S6nRXi<51v}+&VHs&n>&q29J?g8?wj zt!dcH&D!p}D;fk|_4l(8A7A1Rj*+hesv0t6JI^k(40&F!ZcB{<0@m9P1kNX)?i*|> zUm;?To#_NNFw-2)34evTxqx!@SWPg%uN%{0(1iwp~taQ~sap@_p^^#x6$wEQ0m}ogqV-5}|OM)gn zh@%aqVEK<|TBfREg{umkp5jWjRlVsp9L3?EULH;MNK4Qg^TWU9T{(ruxmti;A=uj5 z*)hmK_IyDyslAeyP~^0+M@Pfg9-5sLGyn59-L zD?+2AQ#CoR!>!oD_#e4j9(B4O3{~884Rpn7*~s#;o2M)lQx%z?Fn7r<&>MHcS>4@q zr?agS?({#Ev9k#XP>}HPa0v8$k&+rYOfr*iG~Pqs$^VtFsN*K~%}eN_cynNF$-jb0 z(%`GN|0QWw1c`*zmm-G<_bU#~xRV-B$?l1b>Q1i8ssN zvGGf^w?9ZbgsI0S*q!m0bQiaX>PNnRhX~w1Mm!TJtk3`Ok6HQW3TV}D6ow#Aunx9>73#w^E9a3+e1_JKX-(v$4WJkGc$ zm;Fjln1w~^bl4-@9ohwK_5N6sOMq3-<<=Uu9T}|UW=0A5NAr!A0 zY2&KsOl2A9sq4vUK#n!vmL-v(GLse~+YByEQewKjdNlvYMDy@lFD_GA+nYTI`s0_T z)#z_13-LsvQiW|Loq1Y}h|M>t7E&?R8`&P>HwFX-ZI_Q$w5$^0gZ0*BVstds8o3$c zgJP&@9QGlEp6)NeAwg*%7tW0E}-41yhpVW;oOB#3fOw|=_ zOv7|(+3uuc@RmA?=8#!Q_c1=;rj~^zEVKn_d#vs%y(?)Lx}z7G-dm{`g4&jqiW$tz zB04U%|E$E&;^y(D{Cz3fvSI0mt0~mYh1{Jy}cy)|hx&Hm*5C)>Op`)wc22^h%cG z3Mi@^{i>yOu427HE-EsfD#Gd3eLGnzVQWg-VOS1azA2Q}gGljE1Pb&n6U{n4I_WAE zvj}XSYDPT!U}b`4W2E zW7sEw3%so0A={p&+3mh z?7nNMc<)N{0?hY&LYXkvy)FQnc}Ng-XS-6aQ70;}eVFck7bs41Ira%bn zL_(?>n6m%XQk^B|ghp`n6MxaYzm#m77ods_UD-{b+q7=SfB#<{L%s^Xn>-!|&iu;# zs*7mItHA-GXkvw;j}ZmZP03Xm#W~f1|JBA1-7Ct86=BK3GBYQm3>;p>!yH{-HyJ$0eZ_iu|MaeG5-enpeiFZu71bD+RLWkxwU z!}Br#!#_+FX$KAeUY#jhVkBnW^QGKe2|_|ZyWT9yYZ!?ZY~LVhpX9x*zK0DhmV z?3V30lZ+fkE)OPjU~YBn#OdbVih2Q=2oTyuZ(>4?hv znFe6}xxnM*X3mr$L3()!U#;+e&Vc|7Mnc;TzF|*t?YyumdG5~qo1EM?xeu!EJQ>oN zL;ty;Qx7rkz6Ssv7ou@kC|?1;!PxAq0Fr=zuU>{BD_yQAam;~ZR3{R0=BTW!46fMx zU96uE5BQ511W4v3MgmO`AhaXM5`h5-VUT{$!e`i}5dl8kdbaGOKZr|g_u5!=@EOi|(8S3JM3Ra~F3pR};a9L0xKo7818d@&Ntoi7hxiuf+ku-~iTa^Z#z*m-9hF<@>5eS2XTtUcKv z>WimFhwfDpp-udN%ZnxsGs%U}hs&dxnU++gP+E<1AX?AL22y%z_YEE zfiq7v>Ye6X3wix{*{pMFQvvbrJr{q~M*Jze5OrKejGCht2-hXtvFB=BaFAQ)j1tc2 zUk#GGCXo@XqxF9e?a5H1E)z@2j_Bw|848lt`lUY=a?1_|^4h2>?cA*&>B#!Y$PM?K zZHWDD2jKk3e8?#^OZtyT(+#JCae*DUfrr_&-i*)*d>LZouurHV{SVjpB3-4Tyck0% zj0f-fw=Z0HBb@{(R`d;vJU(D?XLb3Ygs9VwlA^?4KZ!eG1@3Z28clY`f7S(jfxt}* zoFQoM0v!TWNMFKKijC?~J0HuafJlF&UB&?GuS^dj&A`7~g88&cN6y-sF%|Lo1#XLN2 ztiaQTY!J?KTtt71Ni5p)#w8t@6s6ty%Jr=UT);KOB{F2dHAb5l9LNk|5tKGZ0k)=# z1wpo49)Ab(+KKo zY1`xGTN;kPzpc6N6`ipp2M55G_>qGNO7vq((H6o0zF}fUhAn=6sM@9WC~a8nk-WCV#%JcV9RSB`c;BHJ=li%BsnNYUv$BHyo0FtnSdL6H&9W8G zphXVbsln0l*6oEJKVFJ!_pIFVOy7~5%_}v%%BG;CwUncW-0u}jyewg+DivW?QAv9E zMvnk+G|B-`?G7$(CA&B!^v zw(mHRxCfC^agK033tqp?BV?=+L%Pl*CI)!YEV=o-qQ>YHOCRjyl{_;z#4ONq*9u$d zox8VhB@v)u39QO^kHAXgsCd%!zG-M+Lkl}{+jUN)VyIbumaNrSURA)u{P?rIDJO>v zNxr{tt&%Ev2R zWwR*pEaUD)qsB83)?S=6-C#F=rU;>-Z>((J+>KC}j*p#UEF-Gw=+X(%?O{>( z69RXPV0om2i0DYJ&6l%1NvZ1s+N+XjgYCAj2bt6Y}M2<()Cu(m6KND z=3ZegP_(EoRCk&f)I|KK?`oB*a&};c^W#3oeoabLn-8B}vh4cW@!G9DoG>t;s;;AM zVb@f!GIka~ih}2MNR`F2_;MrGF0^C_O3pi74Oh%-C@7@rS^tUrlQO4o8pXsBqb{&l zKJH49_vg0V$O*P-g zsRl)23AH(Xu+fl?H(U`Ivd5irz&(aa*> zXc84kG1p(qs9OVY*xLuz?_u3gv5)N>Zvu^SboIK=4J@bt%AcAIe&6oy(F;kT29)a6 z3lm9&4Jzbl3V%&x29KELlweV*j`S-=-hHoW-RFEAf8lm!4E%_1dd>!^_p}G`pcZs7YLZT-{I=$=tL^?&rZ*5T?}|+M4a;J0x_al z`O%DY0em{dDWAxaq#Vi1G$43`3izJd z2%~u$V=wsxDL zRI=aV0*(%^gGq&X6QhrRK>LTAm`IXWbTwo~MUmzl#Pe zFV9kO>=kJ!6UPK^LE&F*JmA8)2$44I?U|YtSj6WG^cRme)`ufBXva(ZrdCpnosJGB z5b)@Sa^qR4sc%Q9P(|BR$M+$X)Re5P`68|!v(6w(lp{)v;-U&XdvHB<>2M}0AEMQs z4F)1rC{ZPVpMyA5$`&yy%+CRYF;>cOlIvW79>nu&o3+OK*w=gJ!N@KfRGRcL@HK)- zEU_x;#qnWO$WY+UavtjXgrY_MoFk^wR7*!kX~(6+iYBpiB1MI`Hwow}PPzayGC}}o zz;XPg*yaG4(>tk8c2sdr`K~6FTSpOReNKCQWt_~9uS2(GLgsrK4L7f5ovdF1pKVv< zBBzLiqbd{uY`=+H9{*1jjpeP+SO}7C7L@o~%8#9rFTRznONI3OCae}1^CH?j_zJy~%1W)NwLDY7QM5^AxDOVJ=23apI6v6>t%{m#*>Wz{plj&Z zj51*$|JF%aRT=m6gE$!B-g#-|7vlhPGiP~Wlb_6MM!PziX&DHP^FLYbg>%c62WaRN z8(T^{Wz*tA38?nX{Bum0^sH=T+kQrq5<`M0>aXA=znLOYIV1Pg&+aeWd*(EC7Pc^Y zzXZ_~Gm(LMIZG`p>CpLU#l;moquf5XmP>=HN16!*-cNf>F0ZiUp7ipnQ$;c*nl#b=)kvD5-psC){&(a_b9N zq_(YCCdheD&i&c*BsmDeSuIJR=l0a?O#9bO|E#5v%~P@7x9%B32eJ=Fcxgn75=+0Y+%7I zbVV#Q60w(BGV1XS4qQO?!iWM~g{BZVV~si~&L(Ff)Kd1s=MWzjVyqh+VvNfH6yCAR z08!hi-%MQ$2x9)wR_?F2m%{kA!g2XUV7>g#!bpT*(ZY&<(UW*FzvdDGkli`BD>J%&-B;6zy;l{(TDv1EU&9vbfnHXU1cP z7Os$`?AV$Mb5ayjq1=U%$4o4^0hdS<7X{03=G2Q;Pv#8CUNZ1aq@kK}!kHsSLuBNr zPrgW-1>uu!*0iHjic}w?riqz`$RuK9Bq04hs}je>p~2uv4g7L;2775%B*f`{{s|f;*^@4L|HFuRK!o!e2L%853AOGnG&}M4#=xBB5hz zdX0H}E~T~pzmxi$I#vWYaG&VdRIyn@gn**h)l9!}_`hx@IdtBj|HP30Z#d zis)}o<@$#wt_`?sb|>$*-(h>*Qb*2x<<_#VMM-1(GvV|i6XrbG?1#Sbc2_X44Njs_ zK`9>}A%X$G+QAr)s<9{%%0QvTp`>JxPNf`MIN96Jv#-PbXJOohIAqwQqjfEExWi`#4pCdHS^-B%0DOw}=`id-CRFzKIy`tf=WJ zS9%l!&-`f7HP>|Qtfs>Lu2wpbjOx|h#9bczdSk^YTldQ-PPEbM<5y>Jge_5}Ip0hl zkDXvJPY530+m|8k_&hNTzz50cgny-&bsx!Wb>|bu8ikX3vu@_= z53uyNI^$W6P~upqyf}YE&CUnUgcv#^n~w#<_I!8p5US&zd>t#q4h6WRA*wjnwLk=6 zcf}wiE2OJt9wEuh5Qccw%-xw7$>flBxw8OZenh6`Avc*s>nzp^9nMKfB#KXnjb(>| ztd)rwkq_p)X)t6i3EFPoWG7HvHb`G)*!*!T#VdzDd)_V76i9o-)Su^{^&jo?Yh%yL zVp(iKMUS$HN#SrR-@bNPzSiuG6z;a6iiqtMWi{E_SpJz3lgr$*VT^;+(_vWY_#+sC zDyl9lX2M5~2yiXs>j@4DW8dzF3B)6D^<$kYmsAZTJpwH0|B&f|%Z+@RVsFFq6|}@vgmn#H2lpkKkE*K9+|Ad@Q}QT2&{l`~{$5Dvyq>7-V_FTSW%=Df zv)}o6_~>car_dI{si{)4cjanhE!L^iVLjo^ucuY`-H&pD*oEzqF0TD-IqW}fOA3o&5PrUq;ALWh=^rGkHw7<8hXiC0658byUnSz`{kfN zF>_PaRG9-W^>{d7mGp8bQ1&6IN;^Z5b+quBKAFXRwh}K(l^r7?oLMTnZEI}E)-_@R zKP~QcTSQ!&m3}Jse2_aaq%I)%F$;#wIAt^$mf8!TaK5K^=u)P4)?RLDK1N-uTDx4gn7GA-6ze{o zP*`aY-Jh?&te2XK6)7KvkCd>NDSq?Q;8^NG;u^WM<&Tf0z2F94cS|(gD5sJ2Zr{sv zX2*+w=)u3Yo~Cez4#&l=(5x*fkq)E?J z(DDlIh^lFyEU5PCyV@W3PPoEkgVuQz7Bm}AIyR#`IiD)HRzeGSET1*DZL>fHi@foh zz0cecx;uB%oX^hn^H!Qzz=)WmJigwZEQaZxJ-ghT4MGC_Q3(%pO3UnBdor#1w?Fzd^uThtt5vzx?)C)njLyTTr<9Sh@@e)X zXnQis>C12UcZ^QbO;uL6j9z;b@EE#x)5llycu#vGr|wBzoZcqqh_4j@aSY@ybobW1 z)05}Pq#FiXb8m06{W2>YUG?S5*T@Nzgy~<-AXU2kxBI7WciCL$i z*lT*Kt*3&0YLgc>^mKHq-|mm+5^eR=G+SG?U2LcII$doJ_e4DLX8F>jIIJu0CrqJI z?~)P|@hxw_fb9}$P?5OfCR0WXqimd^c%&E)GIU8$lwZzX3)= znaw$i=P?2mr<;x$mxGr9bZfCa|Ls@jL;|`vM~_BFAqxu&f0l2K3w{EX%Xx}rE}0Y- zA#`M1WPBNhM;KlA29Luri#p$`UD`SV8f4_#-SU5geiLWa#Z&Tk%;&$3o$?mJgjLEeq# z;{j>st9j-XO0I~PIOUc+eapt3x0{FgWMLOUrMKBynP;46l50ST+N#6T+(<~jz_+<; z?ZlK&J)J*8EN+!&*iObVyO$lbRJ7Doopfbth(MwN$TY$M=CtnWY1@qQ0_EHH#^0k{ zC9H(lf%|XPS7P>|@H6!QV3%F1k-j1i224+oxTAjePPU!~xm(<$lv3$TAwnXN-s|U+sWjdaL9OCh)+EneK~yr2C?;9r(t_ZDwMBCRo65{2fkyFnP!Mc3L2 z$1utKFdcP@`|{Jr)~8e5r->X52Z9s?TmGAqc}|<-a+`AZlb$y6%B-iEvEx*DrIoCo zAnBChRrkcMr=Ab&lbMRlgKou+leMd|gZ*o!HLsaWBc4_VCF(C{?TFyYmWmR#2o4M{ z?v=y&R}*@aybsU%agqf&eCSUC$*cFj-ZfFB&hxj@Ur#_Jb$op}|EP4LY&&;^uJkmL zHh-!IL(tB%)N%9rj-OpOL8I%jfW+J5rcvAFF@not9{imJRrQDGP546vf3ZlKthY^? ztWf+`do-vGtF?#GptMIlN9oGjBD2yDczQ4j4{NE3LG;xpnpy;MvTvYd`8&QCv=HzF zbe`|YQt|vV<+9BF2rl$!AsVsvmDpdAwVkzcydTihBKZ^3f4s9y!li%nEc`Mkd$;a3 zKshv@Y~diQ)MU4?1M>D&cxHwpedB2CxUkTI?6;({nU8+|WVLVe^6JmvL7UG?79}Go zS%W1Cl#dn2W0ytH7;VXlKX<@e&rS7z|B@{|<89wISEq{aMY+IY1wCmWjPW=%QZj4^U*5l< z?yU}jT);j9w|lO>WF(q-0utCTU%m}`dy;ToJcV#jA?gY@0szVe?Lt-X?o0+fZ`Y^; zKLKqr=;*Tk8U@N;BvwEacR7(>r}cU^PlpLO;A=gp!Ay#3yKP0m1Iq~FwZ=qMY%|K%rv$0i*22=ty)`{u6`PKErZs(_&rB*B}$QK z6c{N#J4CWd@BNXa)2;pCU1kCdbRE9ONe0L+3rpYm?W@{$z)uhc5&%hcyJ84ZH5{;w zaD9TPdfH}Lh?*zEg+zr0`tBvYQ?J}T2hzP?Pv;I=9_IPw#bA`|w!bcx`0xza3R<=-e7Vo=>4G%z{JE~rVB}u^SU1r(R z<2-xULx(egG6W#X;jPMN*Lw;HGqF@F&vD*-saF-j6xTgZ_H&L14#=)q$rNDkuvl+v z%Nw~`Yq>mzKe)O1Apz+3R-mId5YE3(E?-lrtNeL&P#0DQ5}p8|nQ)fm=pkT&PU{2$ zkUl1FZjCfX%%qlMtx5z~<`DEA`WKkHzPS%?&A0%yaCq@3=;`@lK|NoV9*J&SLEZYi z7!+jc(V!{ExtaTUuy@GYdq2&#^TC?<;q@H>zO{fajVfHX9Y9#kTaEh;7$CE#IE}n< z_dJAtX~^s3Yfomi)4v%6CA7bjcCk(GVJgAX1#LhQI5~?-8TH4P2XJkKzXi+I#U9N`}NwoMCc*D z$`VxM(AoE|^Rk~|ljBj@ zOo9%g#_DY{?=Iz{GT2SSskz02mL}o^C8D=rG0~3hlvkLF7Wp}i*7zO*37UP1hnWvI z&DJWcoN5DD7ZdGYAQ+63X?H~KB&|B0j-v`>yY%x_*=yc@8I({1ebQC0uH$KOLn0D*!!-kAdlX&*s*6NyWn@KZ>SHcgX33v zLBq}GCbibExcAa~&<{dMIy`nu8)^ivclic7JS@-?toOFw#uvZG@U?GxR-&2iM#F{< zfnUKx$8m!|f9jvq5JUh7?sS>Fai5dN;-FtbLDq2`H#w~o9Wn6-38=103uvGo&{sJn zpFb*TjJn;vSLo#)ifz!o>$lU@>82+CLIxddHCvc4+;WzQ4+KBDe=NPH@fL7c z6`ACJsATByY!Y+dTtyVPe_ek&FC1D+PTeoYw6Mh~qtUv>&&aS^=?sjDz~|Wub>n9v z(Mi>2K64R9#av01qVL!i+W$m$^t%11$9tQg_Bzi~GVEZttb+NX7g}0WFk~fj&JfXg zv*iveId@b#jD;=Bz1-&U*{8XwEH4NG=E=Q-6e3qa%}O4Z5a0d@yS1&4jONRwi;VDIFa;XW&y$hvOoPv(L%>2OQ?jMvrK4x|JJY zSSSUT^YhFj?|ynF6W-tXwx@eA@}Q9RU_OOy2mly=$Z%Eh@K)xy>P2?lKj3-tXdR_A zXiTdjFzs|w9F3AoCasqo(EzO=%Z05OAylP^0tiaTlG~j6My%zJIO{O3R6ZO{g-K+@ z#l;z@-r=FeP@CvQ$y&|K*tpHf+bCLJ%!JA%+=Rf}Kmt>aff_L;v9D9}7Ud-$8}qM-$rF)x}N3 z@1*P(ji(7*m_LR&Mtu@Ll5Pdpbu4^D7`eeie_BcOO?oc{l^qU^if-?8dmY#tZqt1L zOA=(!u4Uyuga5F-`VFdrFvQMQyovz}9TLe{7_9OHV6Kec3!hPFhK;BoQi{rTo-c`6Y>Ac&0Qa zZ!iigQ>pVJ+jK?NSywwZb_6Q(*!=iIpzvV*^NBG8P|%cC_e62rK(RDduuHuvzgqnH z{#xmG(C|lwRb{-W(ERR!M!d6I#iMjmgXvr;)9!B9rUF`Zk6%?B5!IenpHuxdm7ohx z*3_`!hTz2Iv7)o$Ol9R*jy{c&I@q`J6}&a)l)Q7s4=KJPxbGX6LgsTkVKf_%Qxo(U z$dLaak=W{%`t5`})@gA!X(C-YxrA!HwkD?{V=fbLsg~)71V!RDIxdDby)|Il_obmEuBz>L^s8#ZQo2EtnWizbe~+g5PpzM+ z`5x|?wTtQTSq749Gt4&MOjR2{b-MSNzO(5#*So`!uU@B4{K$HlMY;WWBWyzEIz|_8 zQMMvc{dDWx(KMzdFG2s&Jl@k=JUyB+ALZiWGRj2)dWSFpnwpyAQ;q~aMlK11XKioLIGvv>Z#6jmO z=E&PNq;R(sGBY+>TR2-39P`~$cD|3iHP=bI&7Kc7mw??<+kKBbyJ|$r*SZ^TuR4cQ zEA45B?O5*w3oAStwK)mqLT!cnj3JSRpvEt!8IF@sW|MqFEyq#+}@ z!7(En8Mfai!irf~-IacrDJ(d`iwPs&mz7R3uzDtX-j2E&OZ@zi9m(|#uL>SISLK6P z7U|@4aJA?<6DY2DRYVC6L->15u>72W@cD#Hq99bs9e(l|EG5b8nDPA|5!nOY=$IsS zmMsejBv8~IOackgk5EWoT?lYHYEF;A7T|>;$M(1h?^%CJo5tjQKDMcQnF%{xziVc; zoeHnB^CFlO)c$q|xm?WSeWw?5YRqp@Koa@gc&;rp!YBNQdr*S0`~C-Apn4<8uJ*Hpg{Q zmdP{0EAoG$W*NjThGc){S4hHU;lH~C;5pf@lL%q9?%$xmfB=W0aLBLEgLM5V%}Jd9 zan}Szh1O-77;%#8+3^q~+cX0!-qKfyrZ{n5lYkhC!xNR>Axm~><|9ri!v zTu0Lx!ahc(K-lkny}Ku}!J?$ly?OyAi{YZ$GGVJ<)P{G_T2}TYa7abtC8!gq zId|+6jh|A}PsPLtg^~=nk4i3UHpA%e-WlhQ@BGJ}WO@$gtdvbhC64YN(1fG%1ejFct-p$Zn;@#nH!vD{@=zZQ%3Yw#YyV5fw)2 z4}wo(MDU*zETZm);axKZzhQ%Z4PT*#_*d9*3U-t8HRs*=_~_{Uq_nNw{ss~xx3m$U zPslsa0$0D};Mg|_^EVWE00}{~Ft_S(F@VYGp25(0JxGA>Do9&cLkp9kBTCHarYs>Z zU{n%G3L6TZ`K}F*bidm*{BN6jiJ2h+^lc|w=ro*g80itqLSqUeqJ0w(9&JLm%* z94{g_-q*rCJrqb7Kf7zndyk@r*UP`P%9YX3ce#uuo)UmM?y>QO5D?}H^VraEBkGB3 zAQ?+OjkFI5do$}QvH_(EJn~GU5stzTBTtcn0lW-$Z%^sAVRh}n#Pa&zqxGR;iA4pT zWg<}_{jvomVC;w)a^y)-V1xRk3KYrXUes~h?sT`-+$Zldw+P%Me$~TH#0UmsCJ6m` zT(~#A);RWZ5)w{f#Cx+U)Em6t49XE6onS*|#%(6cojV#ToX@;$)$*P$#`!4XiK3jw zmrtU+9VBChDbn1#%I)}d=9ljzZZ<0y)A$6I&hor<=Njqkz>kf#>!g-ddAv_zrQ4hx zy);JZn_BUgcQ||0&JpjOPkwpr49BeUICE!ApfYGtqHRqMD-ex=_jPmGA5#4dlv4z3 zbEb{sd=STXKdE{jF>c$%Qq{C@1DZQvV&3&_W$Ur&mTRqdg4VPk6o^QgW%e!{qH`zS2FI)n;?8DU!my8sDVKbhA+2z=vWptYA5xMqK7rJ~lF;CP4< z;KDcZV2a##MQTor90nWmJ}*_ALs?qGh_VA8vOkUdeY=-@UZ&UJ7}Ufu^!oH;Z|b&D zJsJ5KnVi1RXa5NAZ9L~y!O-2Nn5iE^karYvyPHv4{y@~W73;%yI*hA$Dy2tsjQRO_ zZ~#VF+})iL?a1A)Z_}{*ua`%9x*RLUXI}Ui4jSApdDF3SttHm%OM%9af{I=R32c z#4lKk#V%ue6|1Ws{@m9C56#zFA>7I$i0tQd(>7NzBbj?RzFeRa|T4V_PMtJPV`)B;ES1>iUZ;6Gh&R(Xh$d+`*e3YYhItCkunsCr$n9L zAB2F-YaD#9-Fye}@7ph@Zk268yVL17btRn^z~cC}!*l*)Y;tly3prOWLu^H0;-|9* z-}&d@-}+3UfKPOA7@8kNx82k zBpf^_{e{!xIY1q;?`|f5lnAY0I36fZ9#;Ci+F2|{$K_Q)%2bdTGJ^(y+f09!^Zr4I zKGYFYi*LE7VAPugQ`Xs99IN;PGDRmt`*Y~?aq^};^gQlOlFIiN+#E8Wr-%J(vMt!M zId1!(#iGRcA)*qoXf8Q*c_PFy$ug2;WMqJy{+n0Rvg~aA(CN3f)eURos%ZC+HoS67bgk0OZ0$YX9X@96~~ zfN6=`HKECaBB~l5I_|H5exvnc{hb@$Qp;_1JDOp`^JBUk{EMREw#f?*L1A+ppY1mk z&;esJ3+4|_0T@LNvmR~Eo&XCX*>^@^aZl|+A z6K*eMT;!0*3}DBsDq02zm9vF{lxTeA(;2K2NXIsa;eV4qER&VW3)rk^TYFjuXo5{G z9%g9K@vr6%I7O3Y-Sr0Vx_!cjuGi;7Iw6@g7PliHm#RW6)+EVnI9O#a2O6ZlDOrSe5bm+1pw(-rhA5dh>Qwsm(~%3I zs_wDLPVF(gG9VaAhRR%kE*lexB!g#@VVHv=h=WjT3?VxkFGnKFK{J#e?7Z*^m)OlZ zkXeLboJqowH77AFHVz%aCN{KH-_@*FBvwR`EsnW=xr}(V-dr?srV=fReoBs60iC{+ zREHd@IvHJ(wyA_CCNsB_UA{zh#?-$*7k%+&2KNP)3@S7?Ug{G;C@~vOg>X)>tvP5p zdgweR{3s4KHWL$*Woz~Z&DFWZ!-GTQ5K+wv)e_}LPk#StmsDE}>T=!p8z|q2>P{2`{GOq=LlMqv^6Od(9J8hE3B-tA;lsI z^Aeq%aoshn6M#wG+@Y7QKk)L}oPDu%wl)3cyq2+uogv471ovH-NC?UM7j7UG71gg; zGHH-!|IxjC)u3sbl@2XrdODKuPac{dp+G3M`uwKdfg^W?(E0H(O?p>!WhL=MI#|My z^OE6gMJ1fCqa&l`?CUDiB>xyW1u7zGO@L$`8 zUqE;2btH92-spn>sr1|G%5z^J`U@B9DCOTHKBr8BIy8?|=x$tg8fj^!P~nlwyK(u% zvCV4MK!Xoy5hmE_xvvQdQH8|H{?%f>Y2lsud z9s?{*!bD)gz||wP(3^*_pDCPJ5<~s}lzh{D?q=++1%P6k-vlT-bpRIQ^=a4Q8^w&# z`Ro3qPo~zVe;XlM04LDkR~8oJp9Xsqh%7AaJziir;< zQB>AmJH7XB`fVmc6defT@1Yc?EmY zcaF8m=|=snVQyA6EFo6|07hpt7ffFcBfP9+Kk1fj3Us|p#wIqls?xNU6MFwJiOMM- zTpk$z(!fdi)Bfh1$#LGKpa?_d=gZbTWBtIC;)2-agMA5>nT2wLpn~9il2N6^+gVyw zR64iP(j@~_K)ulNYDve_jQK%1lVW$OX6iBB0a91g$@_h|6HYHa7QUP7NAz{Q$%)Y) zqZZSeZ$5OhOQkQzYNvc(iQDR5^>DyO4Nk33MY#eAy~*Y)#sv79tM1pDa3*v+9Iq#M zk~g219At4steif|F7s${1B^N%4rWOYdRpF3AtL*w?naVJGpehPaX!^$oHrZO4iS8B zBOAW?m6b!k{0(jsQ!!BCU}6Ly3#@qS_Ov-bPB46)SdB&BnVt2L8b^Y+vtvB*sG@!J zx1HpLriL_YR)YnOxkfITz`ay4;liEl#NM~}v}1-?y zkYK^xf)#GT9TME#9SWCVA-KC+fZ*-~cXxMpce+k@Kc~ldzr6JeYOGzg$6jmAYtG@f zA76>!0z3W|_41rt7L>L>SR0aH$azARA|?m*mB4r5r-Eb3QvgscDWiM0RAmL?^%mN1 zrgt?)o7Z^y2Vtz%UMv;jbSEp;6+dn3YsfkDjiRI2SkudmmYl7A^F9j-)7U+*UGC_g z*db4+n)K#-DLT~KKfVp4^8r8cR0ct~+p^@-z#II%A{tXPe1NtRCp z8u+1sTT!?lgD(5$P7;sEjIO^|QyH6?8i)chZw9`W#hN^A(Dd|(>+5QMr zc5|FU=18#}0>GlQHZMJ zkQ?94RKyIV$V;YPXfB;K-8&y#N>%xJt&sa=e+p+Mxzy#3BI@%#-69OTrd#ZL+>*=| z?e|qxw5w-o7VSD9#+$#RApXP*>xF}Zv$3&JF1}&@fSoIB;*%0bAZRl!Q9Sr+8jhk+ z@s|W-r7Ps{G-?~8JeUpwul?Jz&&tSKtz(`QUS#|n_O$wCWo~V9ZNftOMi~I1YL*qq z%>T$z)|T%L5+`1-TpGaWpJpzdAr_-_F}-yPwcqYZu;RFFoaFI6s+5dJdw2BTRlzX| z7(6Mo`S1{Uj}ZlkshJgIz+%3PY3(&h61e)lit9cFI*_+4UF`yy@bd+3L3!9&Dopo&c+i%n&i&bf z)2B_89yfM(Pq+qNbyrWffoqgG+Rph~9~g&Zyyjc8hVzoGj!ge-tn&OsyE?cpGfeCQ z&UD&tTpasxhXAdr6aC*==Jw{!NhO!NhbF7jljR!hUFfk>gB{e}mZ-W&l2ae^YaeAY z%gT=qxC%IUTGF47Qqydb(1|N%9j=!=a0J*X_d8pP>k-WED!5zO(mr0D;?`(qRB0uQ z=3limVt2w>x-aEph`PyrLX|kAQCHs6nV(#Vf<~)~UGiR? zacFIO3XKTmeDhX=L6b;{C_)yqv%9<6>aLQbC`s`lLE7YN%3BZZpk#N9XkkWr3?neQ%3-4MDw;;`S!maUG9>&lpQY>3V5K5mExSJuqYad+-BeA~qo zc8+{XaVn|G^P~H>C;~iq0Dz9s-r;lHYqa;?EOP}XROe{CpI9*yFz*J-YViq#HYr=+ z8WYn8CMya@p{w16A&H~az0<9DY!3y+ryo_fuBa{DM5WB zQ3Qs4wCV|P>397*SoFjAYRxohK)*R#mGdE}ztB^|CIhV?gKso`UoS2C<8-|4@kc6) zvKmx;R>g9}bWT?xH4``^%X3%tBEj2{otRgGuUs?A<+VDuH(_DlnoH1^Ae-4SO=tJI zIsZ_f)L_>Fh02<6z*Eg2XmUJEMO&`ps_&ZES(M;#twPUv>d(KzEfJpqYy|;k@0OW!e{gGGQ%jDj%}EZGO_n=~3UHsvY>vnBubi%afoE4R}V!C;X&t zUl)0K@CT9~<8b*m=WUKnPOeb1uk3tgA2*VD5ln9Xtrl~a!?EM2f>Y;*fy6|#J(Q4y z6xQ}pxsA085(y}~LTh&ornpXBy)sQWL~4gqX(2xa+fb4HVS8pe>62PX-jf(S{DAdo z(Cn7lx|eFKUg3}6-k@hx5-v)SKZ6647|Bz5gH9xmo%WRCM*Rv^pV8hPw!eJHfqhxV z^ds(mhFlW{8)Vl9G~{IktZtA#UX2QYT#i*|FqWeC}pRG#J4_$@6(G-G9L#mKBbL81tiJ8CMs!DBq~g&H2W zv~}8P&NzeMZ7eL{XsRFwDkk75^78I>V8Av8g|+gi$8^q;gH!d>h3C`V4=JT~(t)h< z_P>pTTc>(DOM6GtsY;4Gcr}O8X_^V#lnH??9f}K@>N8(9RN0*g^8Bk7rCMeezU!z% zHvCJ3Ukj+0XI=S=IF;rKYdqbgV8yvf02-t4&)a!lly#!-mhwMN@p$?zNj&_O00TK41#Cq8+B0k{;snf0& zQzl=$#`oh-1jpaLR)1lJvf$jlnlR6L3BNX})id-%24Gy=b7D(re!JYG zS36t8{}Uh_fxX&*^8UWq56)_WsN_(u!MJ$=J9?2b%T~OoV^COh{wvH2q9fQ%@O|G9 zo-cjg>9HgN6U=l#_7}2kp;__KzqD=%#f+_gm4>D9op1SH7i%0POM=Uzk8>TB3_ddw zBx25~qMbMYH z?{0^>m>5{{?VRIN9qj|Upldk}le7*nnK4`xv-In>XU@)5oN8eT`Pn*?thww1ptWy! zG8D`i4u<7TcR-JK1Rsw@7tPHSn41t0`pO&ZTiZUl@)Bbn7;t|6W~qix!qN_QOO_G4 zn)KdRd7R86CZ3mAp3Aw2RGQke4H+1pUj2Kh^!SL4gT04?xBo4Z*R35(1syLQZ>xe2 zOx4Zgh~kPo%kr3zIC0a_+p5%9(%6kn#;L6VgIqy>Cp@v@J@POz9aq*=qNoL>RR`#^i&`aA2YlP@S;!B=9nmTP>->z||W`Fdguw^U1);>+oT%Uca`SDQm zysk<`^SwU5BlkW*V|j9ANzTX%Ea+Qs&~f@xT+3zkb6Q*xL5b5VLb6$wNnBiL81BFM zdE>9QuE?)tyoh+>D#m7NNwQRGbP0UK=NKr6NlZGwo5RU`>7j9b^<@1$3jcQpdd1aW z%`iNr8aF6k)1h-e4?gJNT}Hbi2{HYM0zVYe;{hWwr~dYOHC}3O2iNbi)Ybd$A!Kf8 zQFHm-a=*p}TbJhWekm==jT;F{Xg%e+*D5Ul zrZ~OihtPY?8Ff6gk3YT}nKMTw}oWV=!_S9gb+e{3#a{KF}YejZ% zP|M@LCIudFz8#Mao9EO)Skd_R`U6Kx2B-aq;Zyx0Nb~fyHwu3W{bm|LA||WHx%_&266TX?hv@ z8$D{196GI}C8+TWb#i)K`RrbuG*P0W*axP^oPcrZD)HjVW_%hl;5c7IgXpA#1MenG|d z$CeKqjWV6Q&gm6t9Suol>hBI%<>kS1!SWIKey4|rQyPtixROnd>>a|sW^&N1D$Vc4 znrVIV%i*XfOJ|&IXm~B{r9}w9h$cj?+fb^f{7tB}G^@ooD+cK@#yq&JgX7~k`TsfU z0X^Jc|M;j+IG@)HC|(^Ly;Il16feh z;>#ErQf*XsU!UM2NFEm0YeeAuB0lqHy2N?}N1jc)mh>Mq)=WlIvyNxyscxMeqCEB(LmRtMJJ>qbLT z{z-iMFgmiWZYmW93+DC&3;^&{FG{XzWEgkuG{Kxbs;+E=g5M*F-z0A?AifSB?bceL!3Bc}>L&ivo>~dAs z=MU0|S0Pz-4(W}n-Dx>A!QD;XCoHI=EDX{lu#csBr--OJ{BNhjOue}^kPgsCJ&_WU zrYMz~>*Fcapg$jAMxDxz`$#deGTKJyL&BGF@&d}PX6Bg47 zE|-M(kbXc9$#`3IiKUKrMA9e13EM6TfOCK|Bt}5!GpJh70MHc%_8t7{)5_30?W@#L zf%sMH^VJW*4o%RB)yf_05|kms-Tto8?7&6P2Xuc{*RX`v8nJN9P_c#8)xIXf7{ISS zg%J$K+rJ2cCa%n1v?g~GfjW0()t5@^m0#09Q=|9@OsK{cfV15An1-V%dZ9PSLh)d} zlu`9ZDMMi+iV11hP+UjxD%+Fx)w;UmyQDy`wr!`2>DZv*E~Ao`6MO6Av&+5je2a7n z5)nY~t50TlcXdJD4;AyuW-uj)7*p&>kSENHR#;$|^Bm5WB;|b$VnE?w1G(z>v>@$KZ!;J@+a4gfLQ-8by zO{6Kdb)a`za-#Ga0ssz8TFfWuCO|dra-Ao+2^tHdXcXt!j!4>&^!NdL?8B;SpZHhs z*%2^?jTi_WZo+~}s9Lisd<`oS?yw;BS$*T;5w;IxO|b#equABYpEb^575Nf-0s7l* zS-))2SVQ--zgs;u_uv`Rz8X(~V$T6F@syuj%Y4raEUeLq__Mp0mS7OT)b>{#KuGKb z2svvq^3TV`V&PC>f}#WRXg&-3jQdRp$GWB^P!QqWX>pbHAYYPu_tNxYe#HE#coRa5 zl!0dAQU;=zu zL>&`2j`%;m&WI4z;gMazJtEnMpBZNwP&%m&XeiRi;Fu*2H1{8j?Em&<0&O#Wn5IYy zg^C*;M)NPikubK_A_i>;s{#SQTgAtx)Y)wcgXFeaqwb>w?IVJ`*mk3`y80{(lP!~D zin?93(=IY~KwfP*T}!u%yy1lcbtJ1=Ys&*sZ~XXLI`P}NU5U@*)v6Mmg;t%OmTd#)hshaJ`}0o#7fyGbXzC;lpL+t?%dHypv+m(+ajEM{5d^{g$E zx&>DM?;?umZ9zCP6kYH7%ncoaWwcir7^al3S4fP$=k$=IJBQu|sdkZS*8Mu%B>Mf< z$2UP)O$U0J+t2rs3xB_~^^MYY;1bS>yLBEwOpq zy68qlvd6p-cB@KIDk?fD0u1m|B3bM65y3L0a_FpnteZq|aH&lOktRJ8j&z_SDV}V` z=d|yXI9ITYTx=eA_rJ^qE7N%CYf@9K%Z0Jd&b}t*Yv6R-htH(qrw?zV_&uKIYNJxy zm$ZFR+wKhFTe8G`3Jj8bz>|A-tHbM4&hIwemlD&4X5*OWUW|WUkn?ZpIVj^ zY;Sbk{k!1w=hAHcwS4cyg_o0%*U4>ob9+_rEqJt0M!@^Brz&pUtB$t8A9mvO*<MKTQj|S z+|C&lxt1?D)ZUK8buz;BbJ?x9cs)1kn9)IP%%xfZPBgfzYQ608BCVPO2l&~HEk1A2lkBlCLuEHn z+?H}6L}jRV+`WvFoEwd&f^`>N>UOf!$wnA)JQTgM4zb$*eZBIK%aAHe#l(MeOD_^D zI(^YNEv4Na8MEnkC2Y}uRA55S*dNcNIcxQf+e}J)7%#^Ye8TZ8B41G839RZ^5DtIc zw7Gjf6z+SwGVHjj^K{)VLRq=)V^*s^9;@(tI>fM~y<1}**7g<^T?t)Z!FgGt@~vMv z6+~>;v(MenSQcRzhNcQfM?q1Pd0#(yh}e1BBriGJ7E|y6mxY;}mS!b)cqp7zFucF- zgs1tgf4SE~Q=FD3=5uqq&J1%0HV*!@xovGk+JrCyicY5kT+ht$91ZjPZO?o6!Zk_l z*IU+LsPATajrNqom-NpsR&DthZP!->=Vz~FAFI?DbRKr*X6p6E5rSX6J!lyO88idpyGV7#`|=Zo=YR7j&XmXIYDNcp52F7M8{>Q-NepRmpR@8Q7)n1HhtOi zbYZQPDxga{)7w@}L!-D}hB+3Q0-6Z}AtkPo|JuvKA?O=Zykw81S(S+7MyGVXp<04E z=_h1Rpkj|2O|LQ(DJDcu)QgOi1gO$sxA26C@yUMq*wXxKmy8Lw`x~FMno6{b_2{Md z@(^+fp2*G~sdH@DBWU;^Qj_w@7DJ+p*mo<9wKw{|vNXHcwe>mdrvrzx>!zmp_~Er- znqNL48Go$`3sdjvZv;`{Abpaqk|y0U{42TA!ibJwAOe!(u!_C$ltf4m{xxJal%n; z7XGtE@LDfaecQcDP5tFp0T4?_C433tI;`Xd2th`^8sEo-o8GA(8R#j6WrzM|fl*T#csc8DUky_aUcqYe&*nz+ml>QDfSiVOUFQ1i($xihmO`W}l;2sG z%J4kNo?DAc?S`HA8&-w${M6`Srf4A}9!Y$a=k_i9oS^9zeHiso33ErAVbqe*#IW7? zL;(q(OWs&;|EM>g!23<&h^<3cBR;9@X1UWNak&E<4&N3jQ2D*$$y^7Qsz7s@4A+~7 zyz(rrpp*!TJTr~^v9H(LqKQLYa;kKk5C7YD8;vT8I<}k8eO(2``HW?7Yb7?x<3sB} zP=YM0-@!khc{s|)kEI&xztapj?o@XdY#wH1usy7|miBQxp`kaua zRvJ{(F@Jp{qVl>#L2+Wv92_uj^WYe!1<1z17qz z<(t5kztqmGD6WhgT{Q|klLuJ0GMPHDG_Y_kompT(ALFFP?M}Vm+eyyOT;bWHqZ%De z26e~N9mR4)R6DJk&n*FWsemm?DjzK*(`gmoMt#O8YBWL-SRml^x-qHij5sp?mHyE8 zBE{6tc}8b(U>}hJ8fkbKnxz*IrXI&Lrd7LQus43nW8Kn{h$=`rEMB1A7t2~{Wtu-> zb9tgEys>uVsO0DHCiZ^a#C!h7$eS9P?SL^({NXRGJ``?C4J#(2_jj?w#&Twc3p zzXCKGS#g-AL(%gGr{kU_G>NNpYQ8pS&4q^2#3W8I(iXKZ3s`#cj(Kb*rLkUfUx}IV zC{Muq#3Qnnx4>1?uVAO^amSK#qX16DmQXiNyW7C?D3;jMfhN;~dpEY_`d{d)E|Mw` ztz%YyMsIDi?H1*+H`y450ABfXD)pJ$rZ2f?{no9X;Pj{wi}@Bw*MZOXVuAM3u^A+D zc7!bsGd6+BWPf#YUqm4k7rAmh`?^!kUI7s`nEZlx%Dz;GA~c4k%&q& zD??1hC!q&|-$Unh8{LMvDM))1Y-+9%_+Dk*($zdd=0^@4mY(`h*7a~DZo`lSEn~)gc|?C42txKV zSm#5N&8CVtC9A;#fnx54PlPSs!eRUh8;P7$u8|xRN2Vb$M`W_LukOdOJ-#b{6>#L` zozM zZ!jv=@$`95sNUTK0mWW;-qbX$bJeQfrPkP4-r(?>oa(|;5;ZakGK3#?mG^5CExh63 zlhz!VfyWA;^PLL@xj#|~Mb# zW(I$BjUp0+a^&i$JNw0MIgtGY@|r9@dQDQr6xG#x>Joj)eXaPb;J(qVU<&u$`*yQA z^{($4t_*|kvDWVR?R2rPN0?kR;29Nvj*E&^`QL2Tdi$Q2tBHm1URCX9Z<)1QEgK9b z53zWsr;EXx?hsXLX3lUt{;>!YNG9-Y=Tw2`qmPv6mQIblwl%w-j+T!4lBNgb>Or$o ze}Bs(gD%f(&%XV9-xV^A+`b+ks}mjLQB_jycv>WLTUE2>;~LqJZ8Ls(JxG1;)pXhU z(2&^vK@^q1R@%$>4%S$BP-OMNE^mGS+S4-AlqYVT+fBL@?tim``+hS zmmC!F8Sf7>sN-nEV9M$s8e&P?BSlV)dg+9Q_qx#~WHnSe?xj^UNy1z0vVIvhfAt$C zc$_e4!|CY-Uu)rJAHGro!@9-U`kae5@;4bg2D<9qTEie;-Lr?7nw5rYzNL{#kZU%~6{p z3psHWbv)m%NIZPfknh`?I87dov)cG5-%hy3vuv-QcD6BU`?<>aQzo^e4P1`iXGC8y zI_jGGXYK5>4)XokuxINaEr^3d66NgHHl8x$KM-{I0GZ z$>Wu7sSRv9?%QNc`6TyIbQ?C(=&u+IPezRMLd(%H)A@qhq;|6BjiifE)HTRkkCxjO;0J%1m?ino+!|`rt|&}>O*g*!XxfCJzUYXDzCOKiL=KN-V%Xu} zB%M27gz3I+*5u={N5@y^f2i*BizWnfpBmIxCSW0Y7pvP#5NdJ7=*YEC?T_zq!^z6R3p)Js-84lkG$pHS{9}Ste z;+1xLW%{@d4bY^l85*bq`uOdz-R}D2c!0h`qDjU!0{_*EsC3Ah5DU<$pDam60RYxq zbWNA!2&;>z%d0w?c3WcKBye>XTzK>X93EgnvQ*cn2Aon%q7ZBt8Yv4*jdwKI;b`!F zSu>c@pe(P){M4U-DF3U5rL-gl3i!EA8H30Q_=O*#`*&?qE5sF^3g}}#39|oL|AQsf zAWzJ0j<3fxZ|}>j_ii6@dY8@bRVBm}WA8_vh~&J#krsj0D5t#kFB!LA4TW;Jd`Fw@eJ=^zj3{fq_j6Asv+b9n zhTfFQMHhgAUI$BB?-GHRp>|FP*f~5bu0qz9RZG1b^p$5xjOxsM?iZiY%n_gl2Z>KB zuF=6wOWw$jPa*jH+2&Uaf>a(knJLW&o8b ztlMrJHhLT}ii;~g&y@OfQYZca$TedaUc9@itHAYYysI5p);fjyn%OgHfya3p@%k*l zd%d|l+|K<44F%b@$=q!7rPXnTg=tm0F8Fbe$CH%vebfv1VmhWNEr!l~WwGQaGa>tY z-8_=pk>724t+nR`a9OrZlWF5*#UefA_L+*ir>FRYJy1n|)?2u6EB9V$}@scMM2kx&t)kj3+mfNqfXiiiG@)un zFB1Xl^Dd&v@gl(|;nzG+cww7Fkt2ruZ-U(DYfzxddNOHyraY?D>T3q!Q=P{>%=VlbK-`Vy_k-wG8 z#t>sWHO{?QO#bM}$(IdKX6v0`GK1lg`XRpkURBBC+n3)AnZ|Pe#X?lNZ)Q16c^%=b zM|@A=o~C2h#IW+tdR#L3PfJU#8l5}EF(2wP?2%7SsRnm{9q?{LT|Km4>pdcOwj1rj zYh*KvvazFRqoV`0#f-;C4t$$2l-|$)u#;-5i~yv1ps20jPJhyqA0~J_nsS?69euYq zp^`$T2HmfWoW6#`1Ld_E-4{T1LF}GbFb}tsP%c@ElZ60)H=26(=OFrQOB$ySD7Lb5 zz~7`wglen=t!BdkD-%mQWU59&T-vjZl6_CZfS-v5>Nb+~Q9F5|!a;~9$9J73C74Tj zaOSolus!_(4}%WK%G3?Kk7a*OFqze<4QVd;kT2YNcS5(^s4p;T2-{c9pudpu{^}hT z=qqGz3|>pjjTB=of1@k-9I!RDLa2GC{pUzxxN6C$*nMb|1dW)}+8*TTe8!dJwEamL zORkFDPkrEA?x&xF(F%Hn+i7Xku^h_}sy%yd(B79*hAiqWzg2i9nR)Limko#ql?jwG zE^CzYf<`6&&tL(*qL!y^GrgpkQKzgo#ZmAF6}}Rc=N^eTJ>w1KnpgUJE_I>Mo9trGdPOp$i#?sZuP9GlfxHF`% z&Bjw7XUeWhL+&hcMf1o;ZW~HOo*qiu2-Q?7oQvCZU>=#g-~pk(_8goxkd>lvsKo#Q zNrdtmNPL+`UDC@-YR4>1&wYEAbL4)P8w1W&oME;?x%Z22P=4aS0*Ir^z!us zJI5@;y5OXYavZq5XfhQuPt|i63i$55?!#|!x;#AuKMG0TUOdOpY2PWBFC&Uf8SlWN zl5+qI%z$o(aO2kJsOz`4fOBw0&Cn?$XLH5MX>@Mk}%{eL7XNa#Q5acgwA=cT!G zv+>kIfA<4IR$}7PVZD@eQyi`1lJdiS4T&oooU{RXRwdU?C9+6w{w>`=&SI&jxpO(E7#$%-(?FU=}31l@8G6#R&10WqLf4c^tG9?OlV_GpmYW8W?P}(>xufB@Kx_BWnyT zGqcjLwDZ!Ds%D}&ep=M-aCpvSYAPc&Kanxw8)T2|Z(F@ycArS^-IQ6&xV3&6p~e+x zxau1ss_5{krZqpFKg_U&`&$Tg~mA8eXMI0H!zu9Hl_r6`ad&JgK zL@+X!#xYVBLSe|tdFdy3kW4Bg&TmL^i#;m&DGrLR;w~nKLgcMfX6wJC#?pUCjaLK=G>?wxf|f+R zzggE)2y1x2s<-2^Kpew@24z^d!WCvBgO7XNc&F4^pO&0y2Y1ED^|k>ZbT^aU=3JIn ztaASGzU${?5&9WcKmS+OZ?FJ=5W*f~2fObaIl5d6yWs`MZuH27+Fe(-EQ5dARKRNZ zvpD}{x5efy zSCk#M#wHen?aVNa;AQ7v1?Lm9+iIyr|DkhR$ggVJEu3)@cU#E3o~kZ(nF2ktx^w-Z zH?nVD5YKa~r4H=_vy@YSy9@v7 zcA)^**YD61m%YDF%e!#}7u7tjNA4x6%Y2}M(X}?V+}T##fV;cdEHC1#lT;~U07!E6 zp7ZN9yfcj|9)C!G1*w2)I>1NuT3eqKMxQ)Mm}-6WG^>>MSZRfn^z@uGBp3)koBgpQs()Q~(=F}Z-sTjw;|oS`52 zHj{`e-$lCC7ER)Li~p^Z6+JRZ(*iT;dbd;5Tzfv3(jvwpe%R}U$5S=XY6Tww*)mEE zi1>n3N?sfAORP@2g_jah&IcGC54mVe6q9iq%5%F&QO*eVX1{Bw&)S9^W$jGydf9;c z@|*;3eGdvkK9FPQwfcQ^y#wu((+L1Z*7Bp}SD_@IvnhbiwIAMXwbY>UiiY$9nqkIc z(=M_uJRKVownZ~_y{als`U?3^v6x%sjcLCaDe-@piWwRPBAx`zPiaIgH0pDJ!inIA zG|Fntd2JfMGvXel(Jh&q{NhzrR%TXwc5fbZ2$}7<_~fN*mY+U@?4*Ek;nsY2lZD3Khz{RvSj?}4~t~Bx|{S~H7XkJNIm-Z$y>?)x{&`h&n{RX!Pop^-{ z*6+mje6M)bgwVWrq-@$Lk6c8(Md@H?1flw(&m~M{!A}uVWh*V)gj%{6?^d0U!I4MR zbl!@Fu@dL{{}R*9sM@yqwnq;|MW4PsKnpqPIJEd*TwW-04C@3ocT_ znW|4s=v^fK0d@arpKV@1sq*0YN^cczQDNE&*;7a(uSdx=@-i7bssrxN@=|PU+8yYU z(p9o+#cS3-OryK*eNO}2yIji6Nb?U1ihYG9kJ3nZylC-hVaO*>TT_}*zuc$=03ii$ z_YD8L%RB7tz2M){83UgB@yyYt*rSx{AMBZim4y(+R^IPil}(b`W`&SJ;JI!rN$Xj& z>(rm*!4I@}>7B!N1su~p*iR3d4%%AIdGaW%MhMlnT#*&ac@ENE7mpf4dw*e;@9}mG zF!-+-8n&cU#N$~!DlyHDm6^5Djp8Fm&>7g*v@{i+SJ@0brh_;%;{DXDLbEu9S8TfY z0*uJvED#!WhM3T0z3fje7EVM<2||A zb&eV>Gn?$UxML)f3_8vteRh2b- zC3O>F|9-YwuQQD85iI|CMnXwxC55F#&&akOj-tM>#$E2kV4I|RCJS~xCjHKM$R#j) zpAPHQt8vPdbaPEB3Ksn`lZ@DZFGDDL9c8#0Jw&u<+5*i(Pfu_2CCJ(3lfxeBpYMVi z)jTbnZth$IzS{fQ8Z3&s+be0AS7&8ys-`-_#nwg+Vp9iI!c1QAUB0HvQ#Iq&gM&T2 zVH?NC_MoAmAs$}d#}~b^kFgZp_WbcG03Z9v}~Wbpw1OvYN|YvovPL$AX@B=19NLiTb-suCAq?F#gWhT=QKYFt@RU z_YVtU!vK!19p#ie{^J?`tm#j9?Y-}!;x*` zPYNolVd8_5A&tgYW#Zx6zr5R*_fh?q;X&M%luBrh5XH!(lAK%h@tr z*<;11CWrN6IYJlIqsj~W7h?_heQ8+jkX4Z>JYaY`3?!6#O3?>Ris|T3nN}94*tHEk z41HX=Xufgj28&Qc#Q7PdO?bjdFbu6m(ML-VfyBL0sT3|mqyKj)lZoiqyfsn#6X#7# z&$p)Hevv7{nB;zCR5^%gh?AQadWb#^g4{MCF@pM#K^-eza23NC_9e@Zcr`RDi6lG- zWYSOtiW=`V|ICt3b;>R=;DX1<5DZo6=kQ>d*=@al0jJLuN0{?VVdA4b;*w=SqgUjr z;VxnzXyRkg^#fsWAxn7ogzJ|Fyi_m7yI>;V~qF^i?A@p5gne?zzf777dDCPzd~ok80CK^(8%B9m8v1^H(j4f<8=oGf6O*a4vI;V7-&5>lv4s zqS(WUti7gMu> zJgd^?gKR(jaE|#zHTb~(`|sL|9=XOFJt+Zs=@4^?)6?5S{9XeiGc?p1Zw?~|c;>rT z1-+Bwif<`b9r&2JW{AGHfqtHPbKST(s894y1Y!YzpVOn^*?FaIICa7hSWroU=b8mkWB30P~uC2Q9{!O7}N$&=KDAeZ`Ignhr(D2N}1t9y@i%DEPS3B;y z?GhUS6YjJ{A{-p`c!$+qU>oh+$MlNY7>(R|OWc*2j%~U4uBsiH+{};Uvj;hy}@) z0m00o^xaqC=|@7+a%{7pP4lto{I+4 ze&1G@E%`?|ovqj!j=+bSUHm;n@eXn{!w?hH5cX{7OE$s(YOU!sCef5&`?kh9%3XvE z9|GbHi68_W#!Qag%vH#+Um+P44g47Zk#I|!{U2O*Krk^n?3w3Mk>?BI6*$mHXz}1P z{oSDPtS4S#YUwk}Jd`7JxS*_B_Y$L5(DFv7-&$gO&*h~Avn_{{2nmWy$>6_uc}on8 ztbSdu!BOTf`?AeI5#UGJ16}D_@4PgtL=*E~gn}mx{eNlX$KfuP=*xvP?%*gCB3wIs z!4a@u`omz&U?U_%EcWdVm%c-@ovcPR?}n&cp~K)Zx|AD}&pb1$Gd3kgcg8sBH!R_t z@Dw{BGo9Z{VIS(m<7>J4m@6MY_Fkii@?YrKCB{{GeHVb^dUXWz=zr zzW-lp+dFs_rU3qm`iU2fP87mdS05z*k7)c%J+Xl1cRo#Op^_y8`hHQvfIuhz1-@Tk zphfo3A#i557=$B!Kc`2Ki}n9MEclBPq8lGd5(?1ycJ#F@!Dbrcv#jA(5lQmF0&Gzm zcE)+T!K^cT8t9)uiDy#vah)c1qdT1)LN2n)(MWtfrL>{aQY|R1oqNgiE$Ey2sv?}Uy+-Ne>QiNWD$IDh zU4g5&-nO~5nuNFNVc*+Mm6}6~FcuW~bE^3>JrDvBPFB9pDGUgq0MT{Y*y>- zAy)!p^Pl85CNcrQT!yWoV%`2onj5k_Y$r8Nsfj{>?nNm-Y+Y zKnBDQJU?Tt=J1*S2M^$f9?{-heev*Crsk(m{`i9pGV&?99g%pFcOtGaRRugkB+u2YjU=FToy z>AZ~XwDy|`?U3XE5M2uCIGV_djvwhWM{8(je>ugP+i zw0N!}G8|udz~AB3mqF4GCrJ(Epv-xrD)zG{QyW~gM~QYf?`@N`(MHc(Y7G~v@A_|y z2gQ8;37#JbUsThZ0AY=kto?ivnNv8#xd`FcttU+;uhX;6y2 zgy?yDWGkn+UK!_bpQ|bb7>^t)V8E#?HjhtPqYic>C0%4c7^w8D2w(}6{B+L2b=GC3 zb@jOl=zTSraNAuDn73>TfH8XJV+A+6{XDMTEoe;<-nHNxb5f=wGxDNIGQM>$2$3Qumg!SE;)ebf)y`@p;cQaMhK`_G5J;9#ubOV%Pz5k0nj>)c%S5 zAc)PStFwk2NL(K@wv^LS*DZd}DO8OrZ_gTBy9il?ppPenEYhab^gsz&nsZS%{EVG} z{AEST@yuxTp?uzM$mJZq$&+602G|AZ@(U!I*t5`t0W{0#VQeBcup+jWA~hXHk>)s8qqAbj2e8)yrJlN1Wm0fvzD+!&vO=H&M?TMo> zD1>7(x1S<>r4p+0US+lrJju z!%j{7@k9T+3DhjH+SV-ExV4C6Z)9>0T0!i)(ScIealO~4kE3v$89$pRD||g2=o0OY5xAzXh|V( z{fAbxJbo|kmSB58yYWw2GU4LRgt0Y5mPz0D*)!8Ze3p|Jys8UWC_6)GRu@uZWkXa6RafJ@8##`tgX^oBf3Q^}2& zYRVFi^Csg|MYgl4OO%iE{rQu7h{p%touTLFm~Wcd@6`4%A^$Ky8t$ffTox}z=C+;7 zl7g{gpR2WBbXc|Rr-_^1@$@qaEErK;zWHX@n*Z z?Suj#2h*DAk@5Ks-MNi{;*10IpTj7tb?TP-l7EgzP;)7J-N9asX=yV!ICjiF1zKaq-rEPQ zW;O*|+P5ZT=sawnv!ESm+(p*MfsVLGwVHNsN&QMn>6pr_8lS4`SSxC~{>D9u+4`!N zLt>p;!1=Y*Z|aWHrat9;PUj~DN(M1{y3-RapR}hFvvdrfF7&w%vR>q-zU9Bg_I70| zC$~`)%7|Wu_V#(>;6FNf$HcJe505UT>zO`3Y$cW`>bo0{9)`VHsGvd;`#Mz3g!?z% zNOP8bJt_5{UaxS41ccYtM>U5!+)pP3v{r>$O=vwf>u?*)T~{j@Ch~fWA!ia(dUd{= ztkd00MKd1{>f?DxOPROTVy(1E9u27E+HJeLe@-Ywf<&~}ylxljKO3VXPGoo;^vvsf z?&n53HUGYOJmXj=u6kQ;F{)Xz?P!A)=Pip8+GGzf5rUP0O{%m`9Y(57E0LwWtXXbm zV8umD;z*{)L2<~|rT>GUI|r?+Oa0+?W=Bn}&M{bo@r!jTa=6{f$pI&pZVt$lJ4%H! zd{qJZb=^Rb1+B|P4M%;Yc~(hZ$+vV$20HZK!zHxlgC&=i7SX=LyO#RwR zLKW*xhcg{m$qj!31jsNMQqFgTpUN53Jl~w(k_tNR8J8aR$7+MtO4=j|{BUk8`NBEv zblQB@qelD3j(nBHs}Gs7xa++7&vp%L+Gb^7lB3FW?pDFX1~v-|-^^`OhXPxo&Q_W( zjx+GJAwYg!*EfXocKr+4Sz0gIxx(`{5B^eQfc}(Y9lX@&bKaNWr3hLrHgJv4SpIv{ zr+2J=+M$XLU?-u`uUDG)>|vYJYM+IaTNbu!wb(x;s?n7avhVeMR|&n#;C6mJ=33M5 z;5r{WpU*qjtMPq_Qkl2Y1_sW;%1brQ*Xk{&?*=8{f!{kPdv{5#>wl-iO3#+>^cS7W zpCK*{`baZY8bKp7Im4J4$EsEt3N`u2$V}qn>{*LuU-c&2QQii-Q*dM`7>#9vbJ)4``_+D1|e`2(l=Tzu3euqHBk)OdBX%T_i;XNdvp+2)4ibW@0;QM ztVPEjpcAZjf89)B`nIV3?MPT7cxzs;&DZ!21Ziq1FhTB_sgOOdeOa-&-ToP^I?>qGpT~#^PZP%^sCv)a^*>rxtrq>VI zrh{BYowzxd-CE`4pQ>T_+$Ngy>(pIYaQtm!OBkd{?dJQcK2#^tUOJ%UO#3hZqPjg9 zv8$4j-<^-Lk&2V~{Aj7=kh8^3KjW>qM>S3nWpiUg@B_ir+5=qe=*>}{$*>@;P{CUjNm<5uphh8ecaAyyI6JybRgmo<_t^pAG}a$Bk{yoTFf|q0Xu3Yw-1lI;oP$w& zD%<0-QkV&cZYy}RepN_WFgf0r>D{RBMeR~Wt)vTm+ByU!{bgCWJR^K4zjztx#U1~4 zqlEHwl_(*)8(i9d$!lX30_UGr*f7oFJgUmNM&UtEpG#>!6-Nfj}DA1@l> z)*hOVX9P}A?z1tU8wXMA1 zxbB);JE`IV(MQ3*-Ope9LT2vNPkuFB`(2!B?WIX7=4pIw4Wc4BR&g-1_N2q)Gc!Y} zFrH6Iqb)qZM<%(z05q-VeIN9wdO@{ry@FR4fxdMHzV&k_JPsFS#Z4OMl;(+7A46NK z|FRh57|kE$4>G(uXL>PAmhV2VQNZc7veab#I2c)P5?UnUx{noW*g}>Jqu1XiNfDrw zf&%LMriazfCW@&1?z^xGRQTpHnk@H&1#kM;SiZNScL>NkaO-hyZuL5|Dw4FiRB>Ef z?od{de|nMN%k@3#HRoT+SV_oUN{vU=LFc&_D-_%a9LHhd8b23IF^!h?Ji0hM(`B|C zsz2qMTBRTs;3+;5(Vj4|7sFGq5im`@8##zaT}DFe`b!f>b~Tf4Tt2eYLwb9CT=T3O zf5r$lw$_*oL!VFaHqP?(hWNR4ewP-}T>Zsej>AuQ3an`7SxT?65xvMUW!kHF$q{ha z`ony+R!7ALEn+Sp$fOKqXutBf%cT}HwFbHN-O+x@;b^-By|tX1ur%fgiu0LbEWtAv z?`G3|g?w!}yKO4Jk|J)8Ywaq;_j>}E9#+GBM1jje2oeq@adC7~%F{9T2iE9)F_H~- z6$RdXg8W_Oe%LqVwXB@FcmkFtonM88#zn-^osLbf_a_}rhK_R#)Dzv+6a#d6$ zn<4PCm+RyV9#`_Mx6*{m5#Sy7d=d-Ff4Gi{L$~!-h!ibV+B+(1)v2c&v)A`yR^hoV z&PSK9f7~nm-i)R-bqyjVHE49+eb6ShE4{;ex?GW3%+|xL&O=qnBp{VhOBZs^j(X=~ zv=%gydmLA)DKpJ~P__RwJxHZM?2IcO{loKli>6jf+CSC(!k?JwfZU^F`e>cO{DK4>d5DEYC7^L{M$X z{Hy_83!E{mNOR|4Yzwum?+OW^dXdfqSIb8xp?rcFHfL_~v(0@zPK$%_-??YUQFTNGWfOT3VVayiUIA%cNzj zzoqPpvb9a|wVCm+%r7h?dj2h-<`<+K&%Yj-Bu}+L9@z4SO<)`rLN*tdu)Y6h@u{~|Crvyz zR>@|f9`yAq@&hpwLK56V)WA1?`iscxy;3N@}ZWF0|8_(NZ*`lpbJ-j z*0!(wBFWGBuH*40$^_z^C?0H&(dE3TGB>fMIR+6il~Xrs4(l+RN-dQ{kGY7oUi3Xr z#nE*L`54V68R&GA81VZcrMVu=?$4{&&Dbxu`P?)o9MAizeG1Q7TK74w2F;(8D-v;x z<$@e6bcTyXHDF)N`FU1t-!zWFrn|bbG{i3lE;>g;H@M3NKHIK#eF01$-InUtaFg95 zE(5KJ`QiJ~~{aG9!kB* zVzj(X`Ma_b%KtFBPRi|ec>T&We@1YBU5fl%m(|+xsSqrJBGr<(IH8%Kl96Ev4fg+VPZ=3? z)l_e~`zlg49v=&>7udw^2nvTGsRaSbErD%U&$as8$*gv9*()$!}guY&$kt98HKo|BNX=@yL&0nZz4 zPpjy=#zo8}d7Xv}k^Wm`bW&!U^o9=r;Li9G_fd{(yiCZQa=R}f@|>Y!Uo3)T@%-+r z_{S!mEkcI6B%h60WSgvF2pS0&HMzelo-NLtK*{*T7Z^tZyqZ2RQVbGgfVugnxSsY! zmG$&calP@E{-R1kT1IBC3@jd?;1C3{P7tn>>UIb|T@DUYIh`~&4=;mo)c4aDYTJL; zwOn4`nzW49vuj`%6sSU|c)l$8;AYz6``h$p&!w3ZXQ$=5R^{B@zD*47zNKqJb}jtW zDK1XE)h51*9qq>en7SKVTev}7^el!}N8VkB<^;MuXP(a6R}7hoX&%k@HOKZR1}*0E z9>^x=mNdisRi`fMs3!J;ZJVVLJHzJDr1bVS^gL}0bww*Sby!3$HR|Pr>{$tU zIWK>vEmSzCeL0NC=_DApF>sB$BuT*-anYgSLjyW@|BCT5`d8KLEHm9nAqZg{lamD* zqkTDYRX^EJ5q(F=5AOYa>NA%02@VAj@W-r0yK*;vZ6wcr-!?kMM~*t0P)(0e#t#oL zNA%JZ7UdNq7Y<0bW%d97OtNNYKP0o6D~#N3W`ZxxsF^(H8uWOWu^4P?g)0~i z11J&EL}CU>eGgpy-SA?u11)bilt7U*?JR4}Hn!Gy6HSM?VwkXDW~yTE z=kLzNPibGqp}iqD=}ruxH%(HG$r+`|nLJ`%x5kFT@TTUHCF<1c8H7SKCa;Tprn&NU z@Z#kK-MPWNQ-5zo$aU-MP!2K&WDW-(cMp3_h)u#vIbwD+r_%%lMG<=6WT8Wgm|!2{ zw;_y+Z;={?)Uxxs{n1-sSH#v%yN%uKvHuvY-0P(nRDbIEG28m0hslX_&EtA_|E~4% z`Dm2~!lF%leot?70xP6wuHfavKtYOgBxLrZWpUE9_A1c36{}km`UU11Uc0;h&)Dnc zd#A-`^s>xt^Qfz{GfN6FFfBg1Lsh7xu8V_>6!WUZt+(s+0}o~$6aQ=9jTsVPZ07Cj zJncL`$Ebh13K!c@k%mtFNk+mRU+{ExwMCHs<#4KkizF^6v>%=D6niZ?nlMsA$;(4_ zlvo^f)F_wq?}fu|I2>yN-R$&&osr}pggg0nv9&ibMBo*1FtpO&e6%6UKAoratmDVC z6I}EgLGK>{a@f3vQc9}EWfA>N^K5JFekAZ@r@$>=dN_1`GVt@=9b4OncPv(B zz;tkEUtr*-u&v2R5tl|ZHK`I3pZWM%ahuOl zwMc$?+QKNor?8?Uk?)Ig^X)f*B&Oeo%MC3NuBNjR^NxW%t*XEFmfklRly&%h`wk%_ zUK6Ew87h5q5os-%{%B6|ryBrTq2&}8dVY=-MZl4JXU6=++ucG}*C3)V0K%(j z63oVgh6a9Lbk8%{%SL&*_{NuGMW^|0T+6)Hjc2~PSlc#q+0+oC^5!mw&~)bQwXlbpd!Gm_#FE(C~O0ZW($T+Ybv8w`jE4lP-%w0Y^yPZG_9bM?TVDK*lo1shH3qXk>5{k}m$2_m62E*rY*gz^DhiDZ$5OHNjxNH0csDgELCN+)rW6=(0xx}# zxWOp3Wy*Fzpp%(C$^_`tY`Ij4A_(mB<>w{HezPElBu+K(Z~oyhUS2dkGp0 zFtswf#X2GjhM)LQBNqn+ILMlZr)fq)E&p0N{Ybi7(O82BC0QYr%IYj4^zOk<)YT1p z4+@75@K@70-s9T|6=;>T^{@^9N=rKq?_iQ@KgT2SboKgG{3A0nb7iTaWU-T7(9rte z-uExArkk!U2a6c{q#8pmUgHHw2)?XlE7U)_q6Hz=Q}xD}P#xQ{RXeI5%P?a1kpztE z4Ugq&-#n6BOEdxD*t~?=1^ke}Dx3_x*H^BzX0(o%3&z+6;XbI+9^;0?W@vatzuLN! z9^Cb>nx*Fa51HXgqio9Bw#!)OBR&_Uciwv_E>6eQyi%p8n*Hd@zXm7;M*FjTL+uA0 zJ$KU(PMc&=%&36mm)mUvyN8oD33CSfKTm9XYwy_^yzKQMShQ$49|r{m$HzmJ#3KI~ z!{*}VPt0QE@7)S_car(}8{s9ss{s5M!+JN7%bC6xF~1AP!_T7~MtQ$Y)m2S^`uL!- zZ2hiQ8;*&`#szK-9a<>-77LlYby=;?%5XEYs_x8=Jg9tBb!*GZGnp1 zVlJOr*YiPjua?SkH7V%O9=Jp^O&tGxixyO(52M>k8NG`f?~9`m!hbpt_)qI+B$b-% zwuAY{HxMK=Y`u=B3EdMq8FJdewPlfr8q^Qa**`e4?!CW`<8LUW2=PyzE-k4Kacuq6 znihQBL43M*jE+RcQ1Z;`Vly*I1sS-@ig2K7K418AKL>rAUnT{!#vl0P93JJ!A#9%Y zTVp!n1AyFT9E}RS%f6q9ndB-4(HD*F&N^)x)LFGANVwy#Rby#$WkfZ%bu@}WV7)d< z$6l-}5}qvABX(k}87AQ|@>4VG^J4$1=Fcm@+bvxSndDa|#VX z(-sez|2qIkzU13lj+7P};N$*$U_aGz+1^2UYd5UBhyCo)jBpq9r+?6?%=>3u)me)k z0=vR(fj_1qx~ucIWW3wkcg;ru(W6%{8#g>mcWFHP7v_oiVBY&PzCzm8_d*%$)B-Pj zEjkl z)bczpDU2x5^WUtEfX2|Sn{Bk7@%u{FC~#e4f0Lg1mUBQ4_eG~s6*D9Fi@r3LF)VAa z_U5}7Ql0j)_P5*`eb2M!B!kmdY~H&_5B|WEUVrj(^%gy{53w1p`J=v%shr>y`7b&; zGFIW#ag*IiJSJvsyJHbyc$KxQ-||n;qT)0U7-(1Pcyr}A-A^c2ch%!E5{p{hxoxMG zxOL}^uC}A;UyhV4ZQity>0m2C@gF!+D4srtDJ_w|4SjMPgqSLl7+(a`Pb-%#QgOom z`1QMx%epais0!WfqVq%fA8}v4KrMY*8r8zV!9MS1@O<30|1QCQU`tza;FR*R^j%mG z4ah4HXTCl1b$BrG&HMV%BwZ#f)UH(aDn|0OIC=H zRw!WX{5~&bKFP%1DXV(m>3LtPTk^fYG$`>$NAlaj`jbO;EuV@kb;3BMpNFXE=py6o z;1|Spp$ymVxrqt6BJVazU7(=69C3e;dFZp76V-^Vo?ClTsfs-VxU?y+NdJ6ybN}>k zB$>CIs7_n1uKqAXSM@Pdp((UMNk?O4(?Olq!#G$(xW3+{)Y}KnaJ1R87aT?K{uCM5 zyHyvUx&52yHdFi4n?GOI+BsZ(_XsLv&Q50MGzW6fMqY2dmR`ywWjrIC7FvQ=dZgJ82e!occaUVi7!4P!0!V7!cpOSPtO*w z5*~GV1z&N8Er6%rn~kEsW1SfnylZxe9llU#;9aRzip}F8<>6wkLrCtdVc4v|7NWI8 zM|b?8%g5wd*J~UlwO&1@3CU74I^#Tli?h~kSoKVX{0kx9uxk{c$V84NoI{!J}+oEBf_f}{y&y~#*XJp3lUP1e`N>{w|Ysny=oqJwG zemNyi!zZ%^O#>R226hwWy0{-!mh43@0+Rlg5NK5vod3k2w1`l@V=Ndi9 z5s9c3lIS!j9?#e>UDfC^txZ7w6DZhK_WFb(!TSiG%wD6`BGF`vZxEzLwBO&7B|NOLZ1pf}7#mzDWFFT)F^=e31W_h-Cfv5T)ORf3!Lni}rLnYWyP02t@NnJ{Z3&3;L!)wpk#*oE zni8XhDilr=T(`HkcRwH>9?@=%;42mTR)6~+S^7|umn?EwL`~}OJdf(d7+iD{jQ{83 z=e>+NVkz-S zFtcN%({vzlv`xyzI~VSL3$0C%{X-mTvts9;0%&xHlz`!E6xrvrtF7=zUTnRJO`?xh zX6W)L%uemrp#U<}*cdBfjf$G`ksLp`i0RKvEtyi!Y}A}FKk5Mu^|=OqWG5F{ zjqz~+$;iGT>_;N0LJRi>zZ5#vso*f6sohEVr(Tv2>`(ZXtX&Y5pYmvxlLtNxKy`NtG#DjSd}Cn{@J_N)zwj-&Fl(^3SMRoBE3&< zL_(-p`+i-K>G0hhVaq}Q2?xo4ZDLow@DpD#ES8b8&Cc# z-WR|UR7vju3mx$pKSB{W{EbIq@Gk!AdhVz4n|VgHAT$r|s;sHJI_A#ZE60|_Aw#@5 zKHQH<{aq|mW(a7Z!@Co1gs6CZ)!Z7LUDUt29=xMQEy%^7(@lYG!?M*gpgl&CPb$4X zo1PP=2hi-~)`beK=6T1M^{Jd*W1vea6b1{4+l_B<^F3NxV9z#0(ti43Y}2U;wr>k% z8%Rfw2<-I`PW94}`3Df}x9HF8R-?|exsr)0p%^SSSpV4}i+4u8w?$px3=L@RwtkA{ z6nLDpp#nrFv)i;Dn~?XCvX(r^nk*(x_6x6(Ee3dQRVIZ5fw!`?g9FZ%tCNrmRj zIf<_?douN&HUFMeQxLyR9l^U;*X8Y_Z{o}io;z#)kI>AOS7%k1C7sB;m@5Mu4U~;H zkALdd63iq zXXO7FG&(V*(qTJ#JRLLRh7L(ndm42;I{XOw)QZ#&79QBxun~S4vn0N(n(I)NlU)Yg9eHbSCRTkTaix!7`6w!YQY0SY9j$4CfSjZlY z1`yL7H=qmdzK@&gHStF32%l_p&ZuaBnLJr0(zUcQv>g+w8g}QLdfSQ4g9Zb7x&t$m zmOlE!C;X$Bf5mklXyk?;IVVM5i$wN%E8KZuI6r2gFU4?bEb@T(atIuVD5xKG^S773 zmh^JpTxgBHO5l9pKJddM*WAjTvmRf!N#R+Ei&IIi=zT(ht!`IYb7op;wc3weB$>3^ z{GPo{MMttxx)M(XvOBz;fP&l@5Vy`h^7f7|BRw!`MJ6A2p@O?Xyswj?%k$;l$3Rc48-(^mR7Yc?PUY!8wlp!PrnKQ$!=OL1Y z_BI?#bCKFZ0r%H>&jl?}%JHGlacXL!pg|)_)(L6!-N0t)6w6( zvrH|pd~|!colis58PYM~vPPZCnq5X!eIsY&GHZqbDhnc1LfNc69drdAHzjlVgF6~W zf2F&$vAY-+$(|oS{u<$(G8NMWhR{A>yvpAu1e(eJPsrXYIWx-k)q`#eD&YT8J~8>F zN_f2n7TM6Wb8PKYpucvP%7CYWM4%rx38H7WWpiQIS2+F^DI?|LdZqrubi#+NX^Po+ z1COc>7a=JpLiqoGMt;<{ByaXB1KWn2&@ezJK#gNz!%&TvIf;32pzbvGp*{-R;4N00YA-Rc+bG=?=e=+@^FKvej6{3iS!|^xk`oqtz z)Xtthk+#@EEbo{S2j;yC*D&z#yYWR8-n@7TRpEO=`O)a)rsG6~Nl1uKjEjE&ZuK}k z*wo3B{U)X=_pPkM*<`E68 zaft*ICUG8BDUsg&AEJC#n2}aZ;3+AC4@+mN$c4UJZkAvHQw>(9c}fd8;puNY38#JR z-AcZZ&p^VW1QxeHSk_)029WcxY;T>;H0{>uBMS zz_qIXFz6*KbpLm|?3NMNp6Mq9v#MMy*SXMX-gx6Vl+DItjBd|k1hYu?MZWium?m#X zB?1fS4Ql)Or^@;{xBI0Sx}>I~(Q%Ry1iCH+6C|7I)v-$2ZF-~U;m|Nr8& z`NmjN-_~4RQULDSxxdIurx%^PW*VQiJf$x#s(GHGs;w(6tJO8{cnWDN$q_kkd=Z)c zs;5179ao`rU2#q%zWUlTsi(a5Hx6#p7FBJO7-VqEo-psK=~w-IF6@{3^r=xXbxQ#_ zr>r`A)^j}UBy}#Vq(Yuh1=@EbXD-zvpH*%g}5wO>17q zOUn90GObl>wY#LC|1CLsW^T21clm}2oFAX|yIq%!iQ`|D=F&{|ji2p5xg!^6g4>xs;IC0@cz`_(pj^x6Q8T|;PJA8iu=G#?SR zsGm2+r)3vHe+*RXEtUikwJB@pRNLPv_%3kMBve~YgTu8R8bQL9+5xL^@ayew64+Ff zV~RK9e5!b&r}b(EM2f>zPP0DU&##aWkAhjeAmdG@HIe~=w#@+!(V2~Rn1H1Xi*mAm z|Jyw1vyjKJWFenqP?d%~&d)Yz(?5Q%Ew#N*LOLJ;Hz^@ZD7|J9EJ?~PTU70E-GTns z@@tlc;}bOUwJ< z>?4yB8lH3`L(Y#Y?jIzR%jwQNGx#S|ew<~JLpH~|j(RyrUT)edScw_}sjepYpDeTZ zhZd9Z^nhkw?=d1JYKzpfvop@LQKB&>4Mn^VM>jW|zYp-avE#V!flLE;jG=ZYB$Vp7uD^$%4&UzSEW!+Xyhu8G!D zNZz`S)Uuc?1_X8WG@K75CQq0;^!bDYZJ!X^dW>ooTz0kgm5E8qR<8RT2Ei&^5w;oJ zEEmga*6rSw3Z17{it~2}Onl=nF1uj~ePQ8L)}x5q`{nnSH4O$Clc0&t_A$Leb#sM# z!_@*)=jB^cCd(Ic)N2kn@8YtioV>|Pbo%%8b9Va!2wY_kZe24*IP$p2fG`0uJK!?E zW4_kB+9`Xuge*e~bSh=mn=Mw;$qRtyHx7zhViO8Y0bVvnoD~^QryK%6b2(C!v|_=r zD7&c~#1gkUV`~^dZas8W(u~sfsi>W@Aus3HF2Kq-L6pQ@>hzoS=~N78NLpjNJZ%ws z=QPrF_rose@Wc?3*;%h{X1cpNhLdUwW&lG-T`vr5(ftkaNubI+$Kg5qxvUa9o5shp zOIQ3lc)+4LK}~htv*o&Oex}X}DB9{4(K(mEKPYNRFqnq|>TorDtK58Yf5KPdu8!DQ zaNHG0E=IQgDha{ivwzN2jBt%znU+GU^T5}dg;;BQEftJvFd;-=tHBXQ3l3Ib zLMtIdZO*;L-?f2jM%B_E9tinpNdVBpaaE@+GXOwY8zn_YUVBep)Bb=_9T%$|=iv#^ z$!a*wxlUXBG)c3t5U--UvSwr~#R%wl(Y53ab}DfWnLz;|RcQ`4zolQ|VS&;X54OVg zVHDsL`@ti@^??89Kc(;&M+$KeVX?y1_$xk5dB&H+z~`iiTC5Hf3U^)T4i(U+QYO-l zWUX?jZf=jwN=^H+*9FVK;=(%aa;vRrw*DcAt80JbgC#t$BB7?v)uXxIVvY4~hXkU* zu|w`>Q<#Y@jYbNC@%QzCmYK5uRo(6ckm=Y4iF^;7;Inw0YGBG*v8w?Fd|P!sj(4Fm z>=ut}@JK;e3`*Boo2Z@m6a8)ZPb;ajIYoj_DpGkJTu{%zcucxU|CC7jQ}17>s~)BWZDfA{bxWi zL$E>>!Bw|$;Y3!OKo_^;?>i%~jG$xH&__bfy9>mwF`$#eA+Z)p_OAy&5du(u(${NC zHEn@YVU@|}n!NM3K%RprecIh@!$gs)NE>9sGu4+GW}Vz$_;B{N)AG5lt}XOwCyn&8 z)X@=9uOLi^HRb1VyDvw-BFtl@jxsKZGX@J;iLOd3BIa1fj;_9gR*q%!X56b+f z*22qQm3Euf=s{;M8_QPc-OA#a;Rf}KDB{6=N1P0$;~h@?`K!gAYh{}@V_oOqgO%RT zU)B#{<)?_YZbzi^KJQ-!OwY?k5Y^dEvQ;_VRd3Ii@Q9ne{i5oRW>|e$Rg<{+ZH`hP z-Ina#)cVz*DYejIe6f+re89i6zP98+QO;(dNy+Bwkjk>feJ6FS#&L}TrVQT;l&7ti zFCje@zt#tVa`y!IAY7L6%^WosW_lHUa_&FmkDSdzO}U+U{sILUT9hnSKRnqb#1~N& zMC_@5!mjTHhQ}RGjA$LE!{}FcM7Z zhxMBq!LQ@(9IY46eOTtXtrE;Z4)`+L6jh;o%bZA^y?mP;tC2S9$^ zV_SQ6uSJ&R{yh}P#vOW(&-r);sqb$w*AB~zhMN-IXoU|Y+;(=>uL+3-E+M}k&5+%{ z;tFH5RSTbFc2!(Ym&z?x)~74Bh7wyD_XWF`;#Z~)+;j#ucogL}ZSJ2#?ssF6aj72_ zBOpquqSot@q6=A^{-4uP=ZqGY-nZrAM?u^Gu;TIO&tZF5cHpY%@*Vbk@y6)^K{W#~it8lwRd~>L|WR-;lLX0)%W9S|aAnI|eB&0vdmtZ&)*-M?2PZk4n zTQDOvzUAgOn1v~=?o<2Yg&|jCt^IHl3Y|2azSqrafvBVmlIz-38R2}3n7hSS?ZKT% zCL#9Y3vlP43cpnek53jJR`vGb{;_DFSjg?lib!@4N%g_1QC(;|jjCUx&2F=NQVZ`6 zL7da3b9fu?bh|7QA@<$hmdO%w-yIbu(rBa`uKEOnG37^|ZjEw$>bZ>gtu{CS1P zMNHs3&BsGyLwnm*z22`bE&XU&ZwoWe$WL|!dl0kAwuI1!O_BVHg|8!h?q5vx-4tSy zBS>!!W-PyIbUe}K(~GT8T)Nr6IQ2hN3RgVdP7N=Y82dls?8BK%V2i8zCypV*KNw5V4?O$P)Y-JyRJA_pxsI>IuKdY@jG5seM1X{5fg?qlXG2`EP?Nm!}zPHIy}wJ9X<}ZL+wxKM+qJnK#@j6$EAKPgujY@ zE4ZPfplGbk`t~QkfET(TBs@^FrQm*P(`-L)oJ1DdpVl`ClMTwh3g7*^dqDo}^@Hqd zbUQQWGeqZ0iHZjgIv#J(m<~77M1dgy9KMzYQvm*%1kljkFEA_qN6cB&W)Bd0vSwWX zxqe@W1R9{EE+2lSB$PntU-ip4brkSl_R`jEV%6PYb@2WpOugF5c;m_Orvwmw&wX8| zCTeNB__*4?vbqZ>eVvt)c?`LL0$O_teQriS=xD4RB|_JQEw|{P?$)_x`0rBINEEAi z)x;7V_Pj`9Bg)wSYP|7qdd<}Z4(4`WA;W%R(%w2jl;;$!`4clxjUxy*M@qy2WEnu~ zn(cH9?V2wVyLCoDuStdhC9<;W8aLW}KGNz3OI>^YdgjA)YTLB`v^i}Ck{n;~*wb7r zF!9ON*Wzt`p(VlLw^81bGv|7Utfo+=L6_71iOH7i8V0UcC|%8xM(EU}H~w9?h;dNP zzRWG+Wp7RuSO{3r>62bJPq%e?70tIco)<%cmp*TBOPJc;j{NKKIdka8w?_+a+{is+%nCnw&XoN z!g|#he-;~ebaZTv_4w5f`5ZcvS<>q5E>mA;pfwm|4>0-M9&L)_^BIMlszgnhQS04~ zBlJa+kR!+DK(2%+`osd91yY8t4o-1Soi^AQjl}+lhUP{R;oTN{pxfJ)mMh{z#_Gme z%m7wg^atUGfJhyMNWH%yErh1EXv&hjebrPPN}pw3DF{27}#b4|B`LoiRHGJ2N?Xc#2R^ z%ey~z%wPG@V2H~)C}xUB&TYK!ZieMkW48;rowc~rEbWeCJwv>_5c0$%5Ep&;eAi}8 zwrRtn)ZLi-M)Ao_HvmHo(B6(N<7m^|cMpDcrrVW^!1Bh5jvy!?aF)toIfjdur69k$ zcDRoir*D+kIonmq5#0LO>^cujXI-CkG1dCJr~nR&SJoY+5_LzvnM^wKs29BIz^rkA zP5+SJgIV&|%8jdsk3p<2C=;vj@{yyCM_^~?=Y^#DEB}T7&3iflP>IObuk61;I@Jy~ z))y%eVF8a}Hn|$cw7I8G91q)j1unQm?Q2|0t}GfKIC&LH*5W+!>)UsfD?CoR2W?yC z^^Tm8;!B(v^@lq2jWHgX2=JqzTpw24Wd9s!a$y434T+|vxQUq^3do8Cxck8{{&jx+ ziK~tkV0~T|(?17}nvk}}XC2oI(_qO6j_tIO&*q7*JJGlV)43vVeMv}Z)J^UVR{?RT zR-VSj)oQb*CLy1LTEhOcb|Z&YJ0WM}bQ7QAF~)Ka7o9Q6Y8p#{77ruLBs_y~;Tz+S zPmcnKmlX_*LkmXnF87?BRry<>Lm*w`{rq-BAmXXJFk=>ap>Dw=AYr!K|3HarG z8%;HZz1$Xx--u|6temc+9i0sUVR>hPPtg%BIZ5e!Zufti)LYi?spm)ZN~1F>5aoQo z^)>Fy(RtnJ(Hxwz@<~P$V|EI(+n#RLEb8~{DJVMH+A2Twd8Db)<}3evLJ)d7=;@J+ zNXO`AI6t{@bY@&|Tmp&kX1eAmpK?1EfY$0)Q|j6T1-}>$g>9zP*4S2YlJ6wdFQ zpX(;MzRC?wK3m(a|M8!}HFJVz!XA4L<(=8hm_1JmjEZTiPf!+?SBQ`K=lm*7io~wcxlUZ%U4Du@J zO$^M`!@~_?Rwfk;KQe)`mFN$O?Oei1i4TtGXJ_pBT*`{qQ#r}?@lgXZ)>^;Bz zU2A=oqTsh21JnZ17Iis1J_U7^3v@Q3$si3KBMD4?u`pyHFjXusVj&@2tNDiH2#wdE z<|MowMn0YmPCLNcgy;63f)~N}fYs~H+2XJQ`5UL`C80q;uV0RUxEwa!GgneWX`h7a zK_}*qrsleWR}Y76iQobO1AO#TI5rhfw+eXw%ufqtMoREjkZ&d00^Hw7O;mi|{p-zK ze45?O?*B-u`lx5YkneOQ1RPYF;jil!0VN`Cb07c;>^1k5YaV@F2d;H-NuR%+BQ4(b zYE_(+wTyBO${(by)gD;VlQWG3nHKX`-3K9xPf#AoDRzJ`xhi}c9fhB18%ioG8~|o?Uc7B! zE!x^N_=pGuVngElcyyE&Z*>LZIMm`_qw0e%BdlkmO-0j~<*K#Hud}2U1|!GPR+0Nb za_-i0bz0IE_tDbdaaT(Q@TLpsC9Y7w?I9|V%(d!H5pM6J&|oDi)d7>jJcnk;8IM zwJdN@?(=i#LK#1eTvEN;E5jt4?V5L)${;S^OZ3%y&T*)Q*h8Oy?%6q>xGcVfG)5#U zBp^yQ-$baBA=wWM59&|mj##_=i~X^fmY0fSay&d?0f&|DSQ|SXIDN1CMi{$?`;ESY zYhfVl3WfDMkhze2@O`b)Hh0}`DjD~Ft&)=>6r^wD)Qs@DFy}RHij(U7VuO`EqxI?4 z6No3adD%px>-~ z(l17hWjP8*3m7+<@&`X*;md>rs5;wO*;(nXvu5t*TV#6yLgnOFo#r}C8NbmWAxebC z8#5m1vmRS_88{tv7SkA>m9D(VDlQMs?BaGS3}&NAE>d8}vaz5B^qTAd$kP4kHW>jG zxUU8WaLw(Gv%d3h24f`c+K`TmXQ@6xOLVQjlP$E3&$2 zKtvaoHWCgL!w~`k#D&^}X1d%2>ZNbz3r*^}#AS0M6=*TcgSv`y)w5zeYhgx18yyO! zRn)AZb`h5h?{4(ZKLe4EeJY9(%leWz%XrnDy}f>SL&~W|0dD6nB%NT6W_=m2VXfwI z-=XSq8JYF9`4kLa)oD{pR-yzJ`Ggk3PoqB^?M}|6#v^5$fdq{YUQbh~qJ=(uGbgWO zzZl~Ny0V>ZwA{UW%;cL@&ev2Sn5T1GEBN`I>eajuKX2Gpy6x``B31h6eZN~Sl?>P@ zUuC+#W2IyQ08(>|&lc1$yx#M+SD#~_4_z?|ULU6-DdlM?JRhWGk5MN;cl@F6zo4j-G*ze((b9_=qT7! zC||f*TYd|{RI85}Gkw(g+4qNhFB&-n)5E&dukbR{g$Ug55~s_X7N;DlbA4IiM>)NY zMz@50SI+R6O+Bk^#bO08UTA&BE$3lGS{000`N(ia;c ze%yT{RruiN4=7XV8|R%h(^A? zNLOg^N%Y_W0Ktci9&DUgCHR4>OJ5_*zXHrVF=DoW9xwIGCQ@6<$l?HiG}%4u)=l#- zy?KFy)uk97M(20#3`;sB0LQ^S+1mTesTjx=Ew10UwKOyQ6aIG5YM%cs1v8+J+Kcozw^*7N7D6%qDzS zQNM*YV{Es+y@*mtb=f#I6Q$A!j75r5Q%*_w3@7lXTN$z*86rF?&Mg4^7lRJyHoW#9 z4#7?LFtB^OgHKEoh9cHkYyE{XbI^DFiNPh#=uSXal7D{Q`OYnIJgoT(9I)x#2YgpH zNJ5?It*4Ygyq(qeO7M-%Kyh(=5kK!+bT0AxQXfmUm37?71&pNa4Y=6loxnRLbajTn z`D4MzA~VXI0GI>@b$s335btGVGuenM)ne6orCnqC$SPU>4TTIfPCpZu##`*D*R~UG z0Z{OCIS4jd+R4cmf3Pi6XTX(E^$Sg&ZB%oi%o!ImL1y&vm<=azF%E2c(JEoVYe>2} z_oOpZ`thj=D;`P;bVi8UJARx{vy5+HKWiMMOx;+T>2_g+zS#Obo)#m792(WE!hC0+ zMusWPmE|cS?9LwO82?w{YI6g*e_p+ zta7AWApK~4(ZxXU4Y~^siQwF!^*Wrv{wLRt(!2@0fW5V!9NCvIrcg;~czwq$(pIW? zalgkgw+?u{#wgnOUJmN{&p6X+RgKX&+(}38GXnf8wo8tM* z&V18L&U-zIP%|XzL;kWpp>|0_WL_bdKy6U6_U5s6P&l&JV`XT?*kLE~$tvgWgv^&U184do;jDcN-=%2#mnxZ-T5?;$-bQSiqX;eL?}`(}Kmqor-qvOoe|CX<@kQ^I~2%jbdLkLqsr(GGG!lUM6Cbz_AzdtQnIMh59fzIsjuvoU8=0v5~ zw+Oq?3Mp3`-KC*jaJGCU9k#jKB=C)k3(TYp1y2-nD1c-Cl3Al*2np*}&VH}?FcZG6 z5h0I^xZ<}mur6IR@>|g3QxF3V0dW#%!ZYVhtXR>ESgE>qJb-rX|CnNj0<<$3VwW9rz=Cfq< zW|lr>%fo)C!I!0mat$^0jpWNA?np6IjL37Es-KAPZi#BzvY!W;p5^sGU@fk=0TJgR zve5LV%sZ&Dj21V~y-H*~I+iRF9smH0?&Y?oKo@s}oRl4Yo}kC#R(Ew69Hs{GbOy`I z(Jj8s%l7GQq5UF#xKqi8Pm>Sj*PMIY7p)!Nr4U`1_5fPReSK7mv{`n2Pa&juDmRgq zRbz_WV=paVi)pgh+8^K@tc=ijjyxjvmT_)QWy7~IrxT-YT;wd02Bpn6BC7;``w>E&pEv1-pBWWIp|U0QaFt6puVZAcbh%-FR3r~oB48H z=1WeorIC0SFp<$lg%Rns95O^D!_=qv4D1;DELyw?K965&_caA;YaaWie0+{;@+V-Q zsVWj(*EN&dudj>cG$&*2=v>do`Sg|xEz3)$Jjc{I>TNF~h?F03F50=3rrk+yG=1fV zqv4&MGCg;i#Z4W!LVT9J8LyHP3BtGc%uF&CT^zbHF85pI#fFArt(YX1;?#7L4}LUb zWkek}oQBp%D-*a|rWkKr#j+vXAYeUhQ`3ifa@Cx$hBTCn@C6NKxEBF?)%x2M?b>3Z z)RIc45N+3;M~vQ;oub~PO)jLb~*^!$zNf&vpVk%WyrErspe{prjgy#hN`jpEZmum< zQs`-qIjT``WLH{^U7^S0bL_F?2dK@B5dRN%mhc1h)U;hr8scy+#3%f77emo(6dEQ1 zS1zJo&4Vkjs9vmge1I6*k?yo)C*0?~IG7`Q4h7AG^}ep|(8i^-+qgQ~^b8CkMhE;H z;X|BQOSYciO<$W?aDBh-R^2~C541LMo!A>y;l&FNl79#`*3FY#s#E|>3hT%oOyHg# zpSC#WSahLq)2y{u5WZ*%n~7@~!H~)Vo#k+u&F*8=Hd0~@e|Y>#U01tjAP%pC4l(95pMur7&5){J{p4LDw%q>(7?F zyf7q-=l#UbWN_I3g|Xp#YG6mkMf=~Q;Om5@4Hx#(S&fU|<%nG8n!brHp ztA5*PTOt5v^J6ruYX3r}ck2(_hA2P|jj0aMNNjhnqzITC$w;Lq`NB1A}04ej@hzU1882v!sSW zw<7`Ys}_TED7eyppam<+{C$=Dk=d_b2a)M}K?lVM;EI?cD4U6nFk%6EgQdcM%#l&P zq&!cfw#nm`q;S8)3O5jP0l72gXp&z^{uposLWstE_~v7y0U~yU_aglaSg_LrjYtd# zG;crD=wfmx!o+$hLr6XvGFv^d|MBlajA1n@hx@`aB+1>wxeClI zc(;u3Rps?>xx>k~x;Xr}E17*;lR7(#gf=M@5`MMBRxxWGxu2+UbO~sw&8_uS5MPsu zr~sX3^Vh$HoL8J@to!6nNkq+Vkny{H0O!=|N-y4}W)u|{u3DLka7IQP=RSbR&;Ii` ze-IxWh+$fett?07PhYQgCOV#vW0BeM$JyRYu}gFI#hiC0gR{=dTNUP@!EuJ=80hlo z$I3h#Uuj7P<%@Fp{o@c1QR$iZm>jvCvm4K>wzkK_$cO19<@wdTCnL5=B}cNx;=$Vs z5SzMQvTybN{S+NF&57zVewTez4upW>`_st4b4d)>%!eIb>3Yb>_G`pT##IaP#h)z! zbxMRnCv!{%0Y$VsX%-1Zl7X-GoCs+-?|--@tcd%ZdSSVyx!$< zs$3Tmm_6bsK8|=%ou`7c{4OiKf~oAh94MLD zKluq#;t9CNxg*4hy7RT_K0`y-`K`r{kK4T*89-CAPP^gtGR&Uo<;$b>BCQ{DvlAlU z@$S}t^~wi09O7=?j;&PldfAJwSb-=kew+@JSM|9b$KYpsSZhlzwX^oP34idkwX>J+ z#u?psc`m)UPp7DYj0%jv)APQ+BOhhQrKwi1KidRl`e?S>?6^wnd6O6JfF9L4&vVrt z_SyIs51@-nK$Pb{#(2|5Qh#KKEiD=Sc#(3Xj(_mM0f#QOr>Q@9x|kl=clYO32hUhs z)`zSnp+!hwx$0bMJ!R|x2aT1K9wScDmVwtX$LAwsC7^7bGU^h%*>~^-)A`m?xBC8F z+ian7SEYXSJBIU|F0Jjt+IsNz>#HRxf8U_mScf+NjXeZD?&G!`C@v@Iy|(%0gJ@6L zxEY40&R5+nhxBouBpm@xGa6)+fB(!WiVb)b)4j@yhXC-9y{|M<`EKBl519J3oI0k) zKnJ#!&XsA&Cr!V;=6C=mGr6@MeW7R23@AFIHzxKz{N?$u1A?#`eP2KzD^?_>;*wHE z`qGdAv#BE)q(ose2F|#SYBhtbMOX32aI$vb85CGgQED7JEd;j0ASZ^ zttu|dv_}hFobTv8>C~wA*_lTy_xbhMr-AgV7OkQ2VB#W0 z-mOQ{*mP!B$zP4Z!#7^*ksNymVGRPQgb&~E81u#p&QORB&eg*A?f~3>qh$iT=AOdH7yCy0>yuNrG5K8s+=Zo zoaS`n$mz5#a?IbMyS>)vq~`uQB#}mlIKJS5YvHkVQi+1_Iklohc_+Z00blQ9_(|7m zWXwWX$J|-P7}-r;=Y2b-&s>jd@utDfHa-kY6PPg(SGyZVA(O@DbvaEkXP0gd;pJl$ zw6}W1(OC(PsY$VA9^|J{f83lWvH;O;iaj1-m%yANHI;P88JJltOQ#_Ee5)yta>~lw z;kDaEL}Xo{15^8SzbAi{JE2*xyAaT6=Va)?shzcX1>3jkHQABn(bcx)>{e41_jhS| zn%_@OUzf4rdsl>)9eAB4{NZ_$<;_e64mQpYnOntSxOC}gdqix3CVP8w)5Fsq_pe7` zZ!j-z**|R4rgu_(o{zjj#mGakp^5~Uks!Yd^Uu|{& za?kWUe8tkd&nS*@0_)q@=boGko+dk2cm7fFB2MLLoYUcP-n7BH2i16j^$dsjA6K!VOPByb zAv=xx1U$2{8Uf1CmOAgfz*RYUvw@=vK3>&AxxbF>j+PtEX=I8DNpU~p629y5JLb(E zqM+_Bt;|va^%W6%qN$r=s$K4)YofXYCS7&fqdd(=JLP z32S0HceK0t!?4seFGx+sLMy_0<>#ubD0CARccs_OULzt|cJt9#p%sYXt=9ybdqKz2 zYDla8deAAqJe#psJ>A(XB9lL^z7^gH@g~Xu5OU1y?2!;Qoie}9A%ORw4;jl z>L0PB*LT1zeKf?{R0^)}x>(Hg-rUrZ&=D43g!Zuj_L;|BSC;17s(tuD<~bA;D{J`| z-h<*u{-}jrbQjEDfq$q{PsW=B##q09SB>QncWutQJtTjra19&?k5=+#r%JJpkRaOK zjw{b^5s^MXOwe9-WeOsQ2LHxA7+>6h(mE#jJtDE(p*E&pYEM#Amoah0@o{QVXU}p3 z*@9jw<4B2ye7m$2H3qN$-eYWdRm~;p?7bkncDB-H2NP1y6~L6G5>rb`F5L?Jc-a8S zlyIH2#`$e&qvJ88<&>d`^>%41YuM%9-0?2GxlpdjEI(?u%#EOa!NM9W?iTc#BHDEH zy`yU(`50R&{ZdWbYgxVC%`~~7q-Y@{gU|)xM|A1}nLBkZa-J1-1!@u`YD~)ZoSb1{#7rh1~ z(Ko@bP*70N0simY&M%TNal^*e=+dP#)nI)mNI3V+JyFrcg{|cE%`=)QU=U-yW%S!w zVkE&R)yd$}&H=apaV%iT{krd)x1D&r?{rz=K^~&4*fJ$o09@DC#p+U4n;G%e4PDGs z+G|G`K$U@YGfeKwfWC+V52C)Cmw?l{N~>@k0-y^P0Y5cQ9i$uSa~biFtfLC$w|QP} zIErfK)fJ^Ez~Ht6Hs^7L3X3&CDD;X2-$*g~6<7@}%zd*BnHt?&Loe?(5BlB{M#7IzP;w-e9w;XA{TGyC~pZcJ3Qy`EueXe zk6c^TSbEXq_{Q9WW)^~Ni8h|kEvGkGgaFog-JKr8(K|Jacy1a^ODS*xU3^u{J1rb8 z*MGluHl)qCr{6Z;?5ifI?(RF>v0`Zcjuj8m=}=W4HN?3pq9);leGOi+Fluja!`UR$I@{~!HcgI?$)HeC#HyP!BDS9!xDq@y(aJ41 z^0$9iE2;(@2{y4YV8Z}e*?#Fu16o>JJ#z*l?8>M*)-l0Ng(N}vIOyGfu{mvlG6GKX z_a_O5pPkw((a`qhA9O%g8JEX~;xH-0*11kucOIl0tnZON2+QNxf|q?;A`|h#W;27& za8EA1`mS5~qs{rW-=(a6X)mcLE|Bmp&Er&a(6Si4U|&Q>HpkS{nzFl_o%{d7PTRRU zgr5+c8ZIBC+C~q<$NCz=~uQKQ+l`=k^;7kmhDNo1l_iHtj))B~{Jg+O1px(4WIu8r5yb(u$KBrU8ap+d1oO*uY9GR0R!Kv5{)k7W zY^46ULD>-;M5ztIq zgW&)iFu6Ap2wgc=E6+<@R=07O$Vk0{RA^JPQg6ISNWzD^oBA{NE0kP-C^0^D2!J_m zEi|fpW-{*1@N^Uz3KSqEos1=wa%AW;po=lYV)t1rZ(M3`x$Za{LmusX$m!6MhTi7Z z{pc>SZP7GH>jGwV2Lpu7oAwi}^4&){6B>g0v23q+)fU`?^0K`=rK*Nf$j9d};U8fhwQ>!R0t# z6jdENpdLT2;Ym%Tl!?jDR#ehZl{;b4U02Q6-QkGzGi_DtS8Xh+mxawKr_(^-fIQ+u zw3aNH;$~9v%(go)|KpN!m=X>(w#df@YMja$)jt<1R2tiysj=?J2}LX%+1_Z4;>3}F zjh&R#5?Dk3RaiwG3kgN}Dw(I@rAJg6#S%xew~+6B`|1lo?ji<@T<&eSpV)BeL1l%|9lyocYxu+ETzE1@h?1|PsZmF?YJG%a8f8Phk zEZ+9oeY#(EYWn?Agj_BItCEs0d!L-=?ht68XGS0yipx%Jtu9rPRBC10=x~GDuTeUXm&8lPCdfTI z#ymXBiF5}paqG43p6aX2a)IRK;cnwbMbiuQ3%;`15fS%Kl9E`Uwge#gkiZ^|TId=f%rvRI5% zwB5p`^*rj%ANII|{*Z)w-MItd_!-#y6Zo?ZZ@s7}v8!u3yhJm<+E&#K2N`e3#Yw~N zEKhdb3fr#cQAbYU)l!R&a>as@v2B6y#KJ-psr}|vi#DpU-G+@?RaGoLSO z>=j#MFls&4Qp9&&CiH0Gu3r1OtU@B?jbEm>kE9t>*N-oh&e#n3rp%tGj6Vy_kKQ z%zT|9y=H~=d|u*=7LGy&JkV`l$lo-lC|g~!J{mW0e!hwQYU4~@%bO~K@B>UDyJ*wX z;N$@gW9sUXw~z*Eb~d~opGKa~yN7mfx4_Yp$tCrKSUqD%K&t6W%Xfkb{#Co2Kv`Uz zJ>pMQD+nPmX}|b-$G<0k5C2TsZwd8zf2G_A7R8SNF>YV)h%p+VpDU5x(ArVb4Q5Gz zN}HQy+Z$JsmrFw{(N$&<>zgc_60{asW~DxRXi7WYjLeaN+oqR)S^YsQSh1=~X2E8K z$U4Rt^L(F??|j^!S;#C}ZF$ptBjoBnr@!TRN*`U!OZK-e0PjXK5ZjKi5pnC1Oy5PVZDXIBjo_$K#2^GVPEQw$O?aK;8Me9E#g zK{@}?{Ubx4U^1hkTLYj^a*9o_*Ie8fiv)0Kt&rZ|xj6lzZ#hibN(;_lu)zj;^LslR zF?0#-W(!5-_Q_LWd~Xb^}JK zY$$D%u$mF%LfboU%-Isn-9g}GEU#oHYgmOp#9Cs$Dm+kj`xUoP<@FG1$wJK7^|T)t zI6aqK^Znf9sdc=~W9i=-a}>8DGjYCzy>kX>T^+;V6Dx^*9v0_&Nx;c<-zy3Gs{qQD z?{IP=KB=3=vJULe!kYEdM$xF*xp9n$GD#fsar8Gj-@3antL20;9#dxNDVa0(pS~-- zGH?JP7IuEzJ4Q)roU=G!0v5;6(~Otz@)xi%fADbxO|V#gUy!C#OC=V1zB-!d5IHG& zbIWzKgdD9|k=6$hp!_-bo<6eNeUjNoJr<6YUsQA0A{<=?0ikSUI zJ6)W#Pt9eXI@#a$jJ-jZxZ}~@@*IR3%}D%;_EbNI_a03gWVz_(K~6gN9X&x+Gy+q& zc4|b<3f)w!H}8UkPw zlM(mJhTB2x(BCQLZ5`0*N6uwgXasR8uV+}n^;j0QpQuqiJY|YT={(>oRs1@uR0;>E zwWg_O8-v5$%X+1P_QFdYH-pVe(0nMootp)L9l`?LZD2&6!0RG4R1VszZ`a*1r?vph z$K;CL+gBNNh{N)%RNPM9`IPD9HEA~-dyie)O@#K>Vo8hNIf_rJmm(b9*fc$u&;h|y zfJi8$$}cx|O}A1JqDqGApJ}2;?$6y`bM4kE?yFY$s5=vgLo@qrC+W(9TmsMeIAb<9Ddu!{kfd?vy7`bqX~a4UXPW|d)#}^Pv(`-15`)v z(wOEh)+&*?!aVqT{_O9fFc>~BN?I3V=r)(vQqNO;2_BfoRpH_P(VlgG+6+pT7jedG zGMxn+-kD;{6&f&^MSm4A%l4C9{;6Xl#^5N*7kfZ2ad&6Gdz;#XPbbtMYgDfx;{s@p zHm*ui-N{lKWHchg@EDZMZ|ljhz5FT9dYKJE;C3(zaOygoC&B3*{i= zw?8VM$MVY{V&-n4ca$aRn=pSbSF^T>o znTjF2AYvT8mNI)F%TFu%Lf>ZV`EKG?Tq82BqPcSCg#G>Xh?G-w)t;TH#XWdV8*kYK z4;p&esL~ehmN8PimZ>={>F|o?er(RL?$R zLjVH$xZy0o-lBpratt(FRwDgHM(kkG`}gwKchG>V-lzp@L@LwFxWBX!GjMzjUog14 z`&%)iBBaa3y>sicgShO|)i(4>(o(Lm3@+ewIin{hCt-V=s}}g)(>IzduE|KRCk{@b zsb;#_7_IkB6^9fY<5P2UMLE2m_WQ)1%NSUwAMdWW)pJw-Rwn+f0?u4+NRDL(*bqKU zf3}$ZNiWwsPptMC-#?-=k4VLhwKeD{9h)Y1X+=JRnn^Q-o&|?oMuMl=G<4cYsH&ae zMX9!-p-A|L`|XxP_@BZFw&Z0hI)tGeF{hRV>!t)g=IpoQXsPz<{T@;K5L|wXuu}Nc zilYjPa~XVo9dE-6=kT9Hhr^vplS+z{%oKRslo~l!E%w(jio6OMIhedAZE5AJjXNo7 zudoD#T6ae_BY0Y_qV09h%@(;zgK~Mxba9P>-b?X53luBG1fWI^#yhilT}!!eSRX(I zRzaW2hN}33G@R=`SOMI@To61LI;lK2K#;#|eV|59P&U?w&90W{8O#$G{WQ>A(!#w; zTo5Mv<^Dd{@W_KgJaO`Jh_KVo@6ZihJ!hJ{f2ax5U?Ekb`6;9{1hE* z-mErXEKY|ckEYN~)NTM~@3+Yi8APtpNuqw@GI>F+3g&r1#kGpkRq1KCYmfnkL@{n? z`xsbwW8@{v&`%Md^>ahOCU^5w%NC;SnpblWeCGW8JSv})rDI;F3{73CH8@!^a>Q$@ zyBRktf=o~;fF*Ba9FfV^tJjAng{#xX)7}n+%P4JT)jC*IY!ry>6fa@I!>2{)n!x4x z62uWxf}XFqeTs#TvOmFG#IRJiRJ-%~i6a)8W6)I{_AuVs-_zPqsV=oh*#wW%RxGU& zbz^E=c+AYnr)Bx~Y{VRkMa_3bW0xISF7LR0u|FG9@~bqOW`noCDU0=glmD|~dk-R>Qy zJ~hGRjDMHY zc$fOS`#mk800PYL9P$_YI$NG7SA_WEdXS2zx_pK7E*owN(mz0gW;=K<`n@d7XkkzA zn<0q4kzqFQGV!bCT$Rg>Z8Bg_z&cHb=FXK$YNDmFl6kRmz26v!e$x%{EVq3K(j)C|Vj1tx zIFWM4O*N96@mbcic|rqnuvJ@pSG6h{CHO7d`heScgweAM@E%&w+{Myr`#4OBJ|!S4F~00G7_>@lEQW(UXEry-?q@v z4#7*>jE)e)aAA+62fa7Eqm2^89}Qkl*WamCUwayYG1NsxG!Rn3pG#p%Nv z7}I2#7KdeXmNf96sk&NSt`(;)uickL{cwDbn%fh#jIfjP`vmyH#D-6^AgA?wO@VPe zyIu<_p4ri!6YtbghU$>c@EHm~j;k?v8?b@G&(+mo@n2BMh|W!Gu&-;U{usOy#|x76 zG<+`7I!LLmXknvZX*eH~%pV-m7aRwr41=+&{?s0`Ct(r`9Foi>pH`1v3IYS8Tkgr8%xPgm3AMn@mg7mpt4)5=JD=;I^1 zaElgxIA((@Yh6B|A!Zu2`IB@kRgQRi$->gVb^~_(=R_4+OFa9_V6tlh=f%dZ;vQi! zP1NLTy=DUTI#beuGsd#407W<%i{Dhx$PMezHWM5i2**=H% z=F4d2M+3oW^p|k~#9oFFA`2S2*xC9zYP>WZ+~%aYUnkC%VZ>36!wn6(`VM$t`y=+$ z%#^JWe0pAlYJjF$H|`%?6r<~;`wWonubo30)WuuVFM|{zJ@yDgdL`J(Xrw68lN`T? z2#S4oFb1~?+*y{-DjHu47s`5rWHXWuonLVB`#TywG%|2Unw4-j`+B0W5HO70yiphz!Ql7KRXb-^aIeH#CQN0ox+ChB7XoP%_KtNA$xy zY&||&?r8BRWHLSOCks@!E*&8HlC9?E*9#I*mS0ZZ6~Tk|)C=MXv6~3r4pjypx>mE) zWvk&liNu>yB*`A*rFfNY=8Vi!#Bdnbw6i<6t^6rranFm1(qD;QXuSam)cpIg7F%Qc zP6e0j18#4x!`P8nl`_G70uElTQ-0d?#|+m5zCa#8)Od1e2R}0to9-CH%GwS_q3E2> zqU*Ji#q4kKf$-}I?mFhm64%=?@txdNh_3a7_C4Tm??k)DUFvum*p~S>3*zwJ=Z=@% z<|<5Nqtk=p>h*y8uAzvUrS_WvCqIec=kYht01d>$1~5kFP7 z8(e?q@Os?c>h~SLjYPUH5fx^9TSGswaY2q;sybyY>&cdXTrkwZw} zdJK&man-GV5n7`m5}%Sp#G;8UjiW=l-d|=>Ok1-U37?TdFd#Ihg!wUxdJ$gWN_>Js zVCXSq+M#hpW)C5eC4=3Ku(!shpO|Xp50r-^o9LCK# z>g%Le_d$RK)ph%&Y3#*KO*>Wf*$j$r z7~Vou18EWKHKji>TS3cN^RLn|Y11=Lxbbyq#xAfQe)<}PO}c@DS$Xp}OsQiNz%qlR}hj9a*)3WO9I zF~wabPHi~q=_vP>bu=+E=p@`LchdvO8w%86z*!L&*$QSLnht-*bZ1AHJ`pE zj6?c>X8>RaPT~JeJYqrUeb2W?+JVRWcpc9LNW?Tz?~(-Ty$Qy+B49|N^o`SBWMIN> z-)D9Lzeucdj^e>T-A!+TOdwaUXbsxiIbCfB@HRG#s)e}&4g3ZQ#NXAen`d}OUYjF2 z&rRd<1k8x>t5Af>!x_H$N+fomeFmV3zHRhQp_qDK2&i?EUzOsM)s37(jF0=2I9M$H z9%ka|T6BnAssIAkhpLe!_YAv-hVx(rc$~cQbhBss!!YfPhlJIyE9yOK?A&DZTDro6 zo+8rbHGLIq>PcynEE72=cW>I<907kb<856NV8YynyRUwRFHuDQhT6GL)=wPnN1vYk zxxnmlH7!DKOV8@a_XEl=YB-c&=X|(nbrX->#-IcP!1J;ytaWeZ5?gJw3i)QX+;GmL zVzD?wO+G)+On;!&8KsO0+^t~WuNo+ zVBc@!Di9V*Dt9K-ON^J%X^|jhGbN&AWFNnF+@7q`v`3ge91(Y9<)QN9_ASb6Au=Wh z^+R_;-Cpy*Wi(2A;F67bCX6@aJ_jNLfd2vOHM5I%=80!~*mU~ITx4O!aUes_ zO0)huL-7BXX!);s8uk~DfCBwLNAI8QdLiGMhR3HMifqeZmtN0M;3youu{cJ3X^4%SHR?9!xp?t+q|U6ra?s+1n#B!2B&A0FO?@4olyY5eV0;(`n1@&mE_r<4^J#p4q;M~!@o z-0!YbKS(4|)>!{H0Rs?K1i$_#jPt=rsfQAuhWmZs{qDh~Sy9o~$+WaWZ^{aM;ZM!( z><~UdJsr%Ko|!q=ba65nh)f;fsBCYe@p$Bjfdm|0*q*A!7<}^ww)$Ko(3d>z@Vi^f z^u)oy?eZrA5F>`{>oN^ZEUhlg>O23vj6$-B zFDcXr_Iw^aI=hSCL^-6?hx98b>`)noMY!H#08ju*8!9?hND0-4z~sOCIaeeGPgd;s zE+6h|%+q7jBMu{S`ToEJ=@d=uRQ2<%3T*&j(lwFo_?K|Nq70bH8VvrYNTT#I0Ac>u zvwaScy=L3EbOx@te66h!N+Uvq#_Ott5()t66We``

(xH)O3=`R?T#XS zZdoQmMu-Goth}RQWHY%hu7<4j`vzh&O3s`)ZNE8;VXiFL32^LI2(GhnzOGhe?#bJa zwHJPA97|L`UsBojy=7schMzR|w$(i6qd^_>IS)ac8}kO<*no(5foNM39hZTE`}FIr zz7N$z@O1Id;5dVE{$Dbcnx%IA{U)_ODuGpwFV&^!@&JV)ZzOS471+RgE0_F9dWx*3)Snm7cw ztxHv!N@AqRrBHrOsa3Ac^7ffNTKhaIc35?Kl~=e*wBuSFHaYENqQ2f&SL`_I%l z=(V3mi^zV>fGi}lmY6s)#~G^S(!Z7Z4hcTgA@bcW{!yiMdHFz(L25^}eX#MV?zEnZ zM7wcYNd$ZNm0o0C?|KmqxJ=bJ_1DM#W#i@ z?Qt{L1s0=VtJlQWa1Wmk&Cs{prdeg<>1%fgh%YENTk05I$@cUA-QajIZaONzu^q@v z@;_PVW}Zs|dD+#ukk1p}-Rf;ZeE=dNGyUsXgevXuwPEX7SQwZd6OR(IlC8y+`R#@^ zwbKsuH5!xfp+AM3GBiBsc&moG_s3*tLiQ z&xg1NvF;xp!wSXa3GwkfjQ8LAlYX)q4*hu>;Mvsbp3Sa(mvW7={`u91>Ujzp&o#}Z zHIKHos$f>R5*FR>?>(lde$r33(Ffe_wPC~kNE)nn3Az~!wE&Zm5;H3hxjqxPdDJES zZl!L0;2w)P{|R?$A!zAu%Kvj)C=up=pP%<{W$L++9gL<7WOpktR5IdNma==Yn@2_ z)TDRclH1M?VK*dPTi95DCy$A)1nPTKENq=JI(Vi@DE@LN`^%#=bK!J*?=gZs{iage zKbG+}2vpoSqK*q4Y*yTeuK^uI=4D3aGzxH0uHJ6_CSe2s9z)@mc~NCr&SKXMByv1& zwLP-VJh-Fh^v8^mAtH{Bj@ifnxbY!ZfJ5!tc{e~$!?kk=o)rI50RaldxN0hEeV(NS z+E}c<2&u%C_3Za+Nd{CR14f~d>VhaG?qe{C2RCuiwMO>gQM~>*BY0-t!aK`-WsMjq zy0~!z-l#ThjI*eJ1t@XAb$t)q7lbTlAISZ2xKF%noE06cDI-TB2+aW@{`Zf1y@C!e z9&bz#Y7CVd0si@uTlG3^1L@DGr1gL_Ur7i)=W-q5UTJ6B88|FRnIwjO{otF|gWHxK znc=licJKcFny9Ff(3QGhZy@TJt$F?Q8+=p!ldU!@EuM#t|E`BRD$2xw45ttQpt6NJ zugW0cTOAz{08zZD6HyehV?`E{T;;S)dn@I7FVnE;AN6CW=eb0eoaknO_)Fz=-V`tF zkCV0@_QVunu>Wf0_t!0P8HwZ?0p(fndjxPKG5b5VGZ|gNdagsYIDzyghi|USshv07 z^y0&{0sg1wpd$=H|4t=L#F%t`ZlSe`OBA%J4}twaoqVx>b5l9OD1gdAB|UjS#q~9E zDvXlNyA)Xr4Idxp;lCnX&LQgc#NasHioTF zQlhs87_EB5Dh*ejIJmBmq>0hwH~}#E(Tn~nNxjzwj%>Lx>}~+XN_w`GzWVE^b#s%H zh0mzaiNEe1ih3Q>v9W-;od6=DXCAoFzMr@lo>-CpyZrE?RmIaRIjb(|xf z9sbF$GZ7n}uDMQA#G^nqI>leo2w7#1OPPp9`SpNA`Vm7c81U!uD7|nG<@tcYDt1SW zK3S#M_hyW%UZ;G{=HthYnS9>Y?`vy*(I$!~_J7!wi*X78cApby7t$+Kegh-eCOyQ-cXRkfZg$30JM0 zsTRsPa}!TZP4Q-)FI>WW`G2hON9LPYv1`z-wYcJYXNW-fKfdrz7}&(p;<>N14hU4p zL6>J>=>AN6%BCKgb*3Wvk5@S8mBkpAa%7V`oI*`ASR?9smuun(F7o-v66QZw*?qu6 zH(C5=7NkJy=5c*<5CFmoO8KFKp5f%z8)&-eafyyG+-FE43{Zy4dM`eJd1XOJ`%lq( z{cTfhYIn=AhOXNSvw*uIC*m_M8aB7^CU>kc>(^itbybu0Q+>n(%H~p!guR${KP#(K!cjqq|k{(vH9;pN>r0rBPH{AaPoD5F< z8@(+3{QUK`@Hgl3@MVO~Q8eb-M-(LM-w9K7BMv(T5JB>ASx0Pxky)qn?Jd`z3bDuw zqoP)x-felI{peufgZ0X!8Dvg|o|@dRkd<%3xL!IGIdmw{3tWFTx^Ng2R9BeJUmFj} zx3CodtdvDQSP79`GCse+scb8~Nv94%0`RsQFl$1=ivISj0F(iTn!q?3R+vs@#GgCd z@-yts-RDkCFYkYXyv(&?i_VnE(=_^*9k1eMJFCB_!3lWZ`$P*cs_>T;-Ave86N677kSyH$;owAq5X80K>_! z8t9T`g2*BE599y|Om67}4*5i?h@D54Rq1dTkzKCB&H?|r`LkZJasxId1xV-PFxHw( z=L%UmkV_e6Qd;B9_6Qiz&V3Pb-~fIpz$U--sCT&r2;Q+6)SJtx^JlRJ2-1CkIuaT9 z)u#8za7d5I{(dSeqgP^SzK1))cBLeh_mA9ftjxRTRCl;F+U?gOuqK%sw@K8i>S_ZTF_kZTZ3L{7FJj*RF5`9P&7DUy@}i!Ng7pG=c5M*PUz+ zk{N|aDaHZQ23EfjFbP6m95J%p6)s z98Hy`eSpz|VB7oy{7+cpl?i;zZXviwLGK@!fN-cK6Y2oohk|<#c$9JJA|dhynGGeC z0y>T^Rw< zwIcxi#=RQA?u6xYetL10(a(F#WYsmtdWZ+#IrSKLNfhKtQry%z8$S|#7kMI^ojm*Z$R8EF$5ON26ak}x=6V}) zO+=+?Hat0lmtRVmIYCd}`gh6;`|jdIhC^4Peb}Ach967nUe|e`VaS1)9q3z|JEHkn z5kEQ5F#HF$_mzx2EIt8vq-Ps9#_zqBKWWvd66n^jmivh~o$J6FN97}2rH0T}N+zw( zk+8IX#>+uzyD|4=^w=0CmG@r4|JW=4hG9NYYv1pFItpDCw3m`H`eW$pbv2M~D?5ML84z5M+JY)oDq^enYMi;j97 zLO}bgq`4gp^hZ`e^|j5%dHMm3%D+wp{4a}{qeJbI42%n_G6Z40EGNa5*=P;fi%x&X z9R!;1%uZmz0u-eTtIl=5TzBY}9$vRFzLmJ7rrg(z_oK=}AnU&~L{1tlYuz}=bUHW3 z%vXk^9RPp%>hcG1pHFeV**rLmRazh(U-K9`V5>L;7`d2rjmMy;+7DEa{Fuo~!@1Du zG`kRj7eD>FR#naYQf(QQh~K&F?rYQozmj6d?KbJYSK(MRAlG?P?Y)H8%+SgdE4sqf z@FefIJ@jiVOml(TTT*}Tz_G1$YZLjPzSvYApCy9_)OMQjB*AHhB{P)Q_&83s@8=mw z!Kai=Dqqj36XS6e;F4wJ(iz{l@qFkCo**qbdH%tcoykv9Zh2p+-DtOA4FFWwE+l{j zwL6ATCIfulvJL(1mx?U_-1V+&`jop0j~O@l0X2+>?W7GHCA0SQ}1y>^HVtwEZ|Oj1v)Nj ziU6qEFMGCID_Kh$)}_mtr7sUMiW&PD<^k;npMM23wN3;;3n%Xb;0lAw#`8$j$Z&de zJwB&@gVlSp1fX4kvPeoMC$6L(w`qC4+`u`%4HmF0qj0g9=~|tR7`XnNXvnxWyL@tL z#bY=ExaCw&y8GY+uiLrk)+8d-*qx3i0XVQLE^WMC6iN#*CXk+?XDKglXxlubOP&6c zFpc{|x$Y;0RI$jH0%YgSC+36{y84XbisD+-oifYu-DCrf6E~aG5wB~jhymjdAv!d9 zPSJ6LRJh_$s1$2Pij-AC!Zg)p{?A-7H2Iswj{~g;CtN5`%3G@Kkngg&aW4vb{Fk3rTS+j4;I=rb|W8I z8$Qg$9KlU9d+NQ=cn(p&GB>YM$4z$Ot}OPqdoF3z|DK~ReW;j|DLu3I@UZX?2sa7; zf{7N9`EY~b03mpsZCq@M6?_&vMziB}6IQttbJpOPp4R}z;_VX(*eh6EyD8Hb zsB~qW)Vtu0ZejfyZ?_lMfSEDaV2^9IDUfE-q|fcQVZKU4$y;oqr&guDM9Pc0&9;4~ z7Hy&$`lA}Q_`6L@`flrbH%9k5kN7UwLSY8+%;$C0R*Piom@S~?j=1l*v8vCPbL)A7N?TmXPPiGhQt zKxE>=>Tg{>9tWrTXHExgi|JU;Y`cLS7d0(6o!?0ZslQW;D+wvQ>f3lc)`(gv1sP+& z%2k~Os^8d-9kTMVj0^x->YMxEwVmzYM`JyOsax@U z#qaf0&A}mI<08Je*VWZHkFRZ~C$rw2q~2a%B&Npp1(DO#qhx85wD|EX)>Kr#{^QJt z`Z&R5HGXckpVw}xV=Sa!FV36Pu#|MzO^lf@bbBp9NXnS^@^Xu~$U{V=s1I7Du~|*C z%Pg4UJS|{HpiU24p?LLa7&!Bo_@=Lyju(SOKyQr!SJonwnT$sRjFhL&m;QY)X1+x4 zo2o+)mTuC;G4~WdrgZGsytQwbA;>deD1@9LWzVj-KGZcg-(B6D`N#ZsHP1saajo2h z=luyXKL3^+bBAu8Rlj?oJ}D826wK_BuRI#_tht(>EhXs{GZ+|}mFQ=6MO5!P15Vt^ zm^m5vX$VkY7e$fY+%L6jgJDT#2nj6!|3n;j_5{wClOr-F?iv4)b}PajPIgDMJCZQl zfAKSIM}>I#sVUwaX?v*sg%-eREqJW{gVxU;9iCn=%2F_0CbZM?uV$j4>z76PV6RPS~Af_i9)yoprVlaH^xwzLmRNu9z zLM#cmN#_b$PAb!~*t=R#oFAtx(B9`|Cgav~xj)S!WM|?@S*?9rn=TQ6?j0hpN!IVT z5mQU;RO6f4GSUdX#IzoSjXd~y88OtRPIlC~hCrzvQHSj&Zjc=#EGu@9)`;nO1hBERxdG$i$7aIr?vBQsPFa9G5*3tU3lH?-E&-&-LaHLpDGOM zmvLNCn#lEw1v3Wey@V?8zgFSgz($kC{68%>)t z&1p>Awrx$@wr#toZ5z|JZQHhOTRZQk`VV#vQkBX|o`qDNwXXZZbS-kS#=xbi$3dw% zB+ELBCJ)x`7|E=Ke>D}V)So|!dJBuax1&foXc2!#*m4ugU2FUcC*v4X+2>ip|ELg) z&UXcUaTb%P%6pqz94>LSG!ZzTA@8yXO!TU5;T=}Cdm48HIN@x62}rIBkDp{Rn~&Z( zB`D!qR9G#TR4;iUKLZ2+0BG6t&aP68!FA3F`8(>GDhd6!X83qcd=V3dk_i*IrMJwvN~FS5t7j68$RCm z`FR<$zRu490h# zbhDrrpwrep=J4EYOD%)u*pJiMJM8m;c*5mwuJ+M6IVhMGjpEe0fJsr&WiD9jVw@|K zbi*$*k@mewp;qrMtpW;1a7>o?ee>6oMtv-Js`cRjl>p3cKp_&XvZb-Ruuxc(tL(a!q!+Fb z_FAI&G*jP9)iN@W)ZeIb`h2B688^JqZsYzvrF#us@wG}+8nU%f-uk(^hg!%<${|YQ zzu2S6fIk4Z!of^W93-Pk^BdovTm`0Qx9$}$wnCWD@|hU=pM74gLscFO@Ry5K6s$oJ zOD=7xTj`wOU6gdpM3~#_BX?ibZlkZFGDb<5FOB&9O@w zRv~HOKzKlPY>do66*hSz;(pA8XFdm&(r6J{%o`m9aB?$eeZtzT&4X!SxwoZrTFTd zo=*Zg=JomApls#NHOnAuJ-^fk-F7611sf(DUS`#68I(EG*FCOQrim^NBrz!l^bNBO z$uKWY%j;9&ehwsLoc0dM7r8wMj#h9V*G`If{N(LrvhA#w>*)i{PwMvgq(^eev^JPzj_m?%Y&QN6thK&6yLI(et2z00h+63aCq~ANjsMaYpNu(I}t*fSX!x zPf8W;hX%;V$H<+pTc1yyX&yOpy3O@mNrqc+hKy@15BFi;Ow57}>m-@nc(v5u2!p)u z16h9yL)=d#-BBLNXjP`}P?%1dAe&#`5vpCCor3b`;te21lnx`RJD6~GbUU?vH(Df^ zl$?D>H*PvF$CoL#%d$*QNwYLUC}Gt_0gEX1i$_*OtPl0yFMOPi(q(rEY`PoTN%=*B zlEdoLG)Uh1o-d z3H4tsTzJ~H0PVlMFG@k)sH$S^F}T=UZ?dxP8e$k`C3&qsNnRs0=6xL@Z8R5VG_7&J_{2nY3b$X zQN!Dbw(a(kwj1V4&y!8=00KTiY+$y@eu$(=uK|>NNJpW{Ly1QDf}>8-F8jR4L57{X z?qUtWPLmX{tXs9h)!=Wa_d5?YC>RX@zmkFV?@tNk&rH)b*&33%X^~+^X(+yuN2|}` zW8{~}vKj75U=miJOsQXCEXefW-)k2=bH4Xo>yN?YCOv>2hQp_UXfOq;2sr?-!wCoh z0pMH3`_X&f7cuiQUs$AyrUCr$hayUt1v%@0_6B_zEX57nX$Ii`_7`Mo{y_j{;34@^ zn$LZGwsxgbFgk|m77tU|c#@3)0J+@Td@(+!p^DGx$yWeizpmY_^$$1z zu!Z2&-QpC5Hqs)YG#CLTl$_Aj7e#W~0-^U&=oo@%DSLF6SS)U015e?#W>veCVHA|g;!+aaHdW6#1lq^k z%A4QTjbC>^E@jJcZ*p+s4eEG#vhHO6#!|mAdIJSP6L`sl^QtFdotLr`NVKuGxFD;( zkF&{96$C}Rh2*{m%s?YvdVFg&fj}JF*3Qx;75i< z$x2?hblfd98LFq3HpyQJQTdIdLnj!qOF>G|bDhHnxs_o!TaPyBP)}zzxYU*Jb%0)X z+sV`(c@~}c_`PptLkk4*JaHhFOGZQ+LX((lNJoaUA7SHRTjQRBm$qdJ55o5;+la?p zmT}>UZ{Lt}&MfFlkxx0>%coVb(-1&z!P_dMN)Tdb<}QwlD4qJNa$?p_TZ?9VZUL(1 z&3?!$BtF!_E^TF*$3h48HYLAo2=31e)-~boCgW|^*Z1$=B>?OInCZoj&BYczSCO1C*Jqf`Me6uP8Pm!N~v<9 ze`9tu2~Fhe@I;?(5^kzPIlg8qu3Ob#50rK}EDO zgQuM)*RA2A|MfgvFk$5kfZvjS9{e+P=)tpOd|+Rtpu*MtL{%({RRgW=SEicK;FSwQgM^Mxw4nK&wqjvQOug>#K960h zvFS0ErQ4uU3Yxsq6UMeRF{<{~Ni((-1Yv1M>av<(!9k}%`y8AZ?MKXx@-sr=dhJd) z5ivD#HrmI_YfhgTYZ`|PIh@UQOo=M7ET*}aX-=W7dh&5%+6RfOwP`rCNSqQI8fKC~ z(m|R~w;si~7Qp|3k0`hOd7jgx!+!s@eqi_vy(sSy7t3^sM$`J->P1617&4{PXe~Zx z$6ebe*$FNYFFb;!fNqSc!OU>)28J8veJ9p!#_{!)t5FkJEg30u4DP98<-~WlVc3X1 zb|Hfefhs+ZDiU}BHyfN;d_5&X{Kr;=C|S9{L{u=^-V5XaeY2iGu{TMK>JXe^6GiG> zCo=KS84|?hyulNAG6KRMqirVW*J+h8!6g`JBd{93@(+332gg1CNb-zXT{%sr3gOo_vo*ZndDvO2ezw|Y zW8!fy@33y5NoVt}r=+1QYAc4P8IsavrRtf@qeLN@^zh8B&#{6#ISKDr#2FtPoqM?wBl6OpKcTWbp*0|(vo7}@W?2Izi*ljPTI-Nl0N(< zLnk5JH-H!uA-T8YPN$1cX!;u=t5nb_2-9Tn(Q%!=#mhWVq3W=%C9kB=eKdS3INe>i z)qET>N*vRvwWx3Govr9;A+Z5rx@S;qSUdWs=5Z%P|k*GKJXi;;fpR~+o(4> z=__5U4N9Fb4oX`qns+u*8d`HMmr~#j2KX_$8I&sIqrnWo7K&1$TI?gwCvLn&9KVr@ z8!F_z;I3)UG($TVEz27hw!z)*wic0A3|>{O~;A2(JHe)92P(6OWOC z7+N2PFz;$K+_I{pPiBmEN;Xcy=ueUs>7EElAt^;zczi^{mAI5cGKB`E!mWH@Mq(Dt z4}@&m%6vEEqR@;MhkgeVQ_2!G?aT#5hlaxC@)$`aX#Mh4nmtDeV|J;!&%4ru*&%Q4R}`SPz}k@?q`?7H3r(8yP-9cXZ_DhsX472T4PQ1kgh z-U<6!xx#{m_4m62)B@h?Ko>*8)Y989Mn!|zuBEP9eznRaq^dAK`rgRsW@#jeQ~OIO zg!hif3u;H`5Fydr?&z-Y&Pm+MXWVwCB{Rl!n%Sa2v*bskSAHu8LuC`Av5`r4DS$#69*@=6nD6acGpeayi*Y`uK zeY1_Xeb=?c<7vcUDme>L|4P?!KMcAt4jya45yfSHlJ+KiZ9q0oMaDeujalE}S=B+s z%I?#fzrdK8L?R3W01ygZp=h=%bUr^xIZ9R>qGop8Kw?a?66{GK(jm(A@n-oxUd1fF zv{g$uxnRGy_>+!~YnpvQg^ON%n5?LVJ8L)^$K0k0?CsrAxi^0Nk~l(GRZ(?{PVz%+C|KA+~&TVSk@jBC6-Y1--!xBOOGnh|#A8Yc%|b-1)VO%ZgA zTT#bKd>)r04QJZT8tDW7_92X+K&E5f@T5!>Q^~qa4u?~nqnitXvozA8n)jDOrFcd{ zJkn;(H-chbixN|Jd#kw@DsiPwf2O7TXQ#KewUAFT1DlXO)Ro+ z(1^j$h6hOGdE~eBbFzx31!3dQu!uI#ZnEcPXAWabQS%qH-;CiOXR6&EyFut(N#{@q zam1sCn~Bn52Tqe|Q?GgJY~$#_^H8uvZ2tiK)-FTCIT{3L{@^W%SL=4e_Xfo-^)eyI23$es^Pbt!k#KqdeH+{7gR&<$^Y311l4cKd#ubd6Qe z$PT~)OAjqa8za=bl1L2axC<&BTSKdfDOib=H$LT18;f=qCP!hh_jQO+wV9tri48cPYo-0 z^E?SUBs)^bc65y305y~OBs8*7NpTs}Sfq3+#QV{>Ewpk?#Dqjb&?@LjJ$n zpJ+w&)H^qO%wl+xco$Zec=ts#nq??<0YBT>koDnyDd6@qaVc$cQb#akJaQubbPR$| zK|i*8g}w@>7lGw<{8wl{5;HVBTpkDw(!x!A03$D0IYJYJ^HGO)vbM80-xR7sjN`4u;ysRv!MPcIm+Yfuq;5&Zh8au+laDUL zK?}i6R;q$5$EW=IF%r9cZ5no91px4B>Hxv}iRfi|yY&7+@oGL|)bI~DA(qMhu%L2- zz=~J@sjAu5#Km$YsfF2fmI#SRNQjtzkO41a<8tz`yp%DyDq)JB>&Kn2g$8x`dA2&S z=?S?>KK5+zB5t37{3ApGJ^`c0Og(n{g-DDZ+5&{Y1oTA?wD=;;ydti0537xdj)JbD zF$S*wk_6LAHJ~r7>-iyoigM84$llL4uW?kAbg-x#qJc^f`b7}3YesEbN)maJlN3?> z7x&dm3lpg*=Y~4p(Z9WUhdg6lT$uzP)li~6Q9&Q%{reSi4mOX%&7x@;ddh+NO`J~0 zuL@-mWWZ5y20A;8gvYMle4#`)VLiU&&`+l&mHn~Ai4*cb%pox1h=^T~c)FuK-ptX^ z$S5rwr*IWo$z4BjSJf1JQkpRyIX2YL@d!n`mq5OW1APHJl0>@zN3ca}!{CJnwZe2# zB6!gOSvz5FqrBs>9_+O2G~qXYCA$5W3Ps-F)ah5s1PN&HfNP)R*Xr{ibR9pC-DXf- zHM>`eMuFEK%lp}>g>GJ@g3vi4IU9PFO@M@9WoX+&dqqbSoC0}w+^Db#-2RAB;2+?Ws5kP6x9^~SVe-3nfhN%4pzygPv3SLp zwcCLqqVUe+I!q zc;)(CuT{bZiUW&p=n2mWyeaql)#xcObUt`DZoC>0z>IJ5_&jrVD%b~YWYS`tVrvbg z9B_n5n($hKen>yYUH=x^fY1$%{yY$PXaeYff0}r@_|PHtfS$=O_+k(}`ZO;PY!1** z8bb56U!>|QG|K8OArig^*HtjVgC_lVAFjZ&7Xk>7*6wr;73c+$L-#^i?e%flKB!TY zt9d49s5hA%PwKrQqu?D>xcLsqNW}>guqM=4D_t>?-lPKn|o&IqKJW$CPdH< zn=Yc@0_5SaA^r6Df&ZgPfNm?)!w`)>I5;2{kzckpEg%mcG#EX+%P@}7E3_6gbe&|Vak7=|7&jkr#Bdgg8%nMb5RDxIJp3#F7qbT|4{n{W|}P+kXr}$ z;xZ`kjp%oXG5@#q=i&^r^gJ^>^mjTE$N#oQbQ0=u{m;z*PZwl*1ycX_0|L5WBJ!vr z-ka6`?;z$48Pmwa^G=+DHGv_vj)lDbAO!#YZBAf;6drweU4vU<;WG`fVdkw;Za%p& z;ljjyMvMvZ@m<7?@W6yo`8~}48v~mk6*dR^kzQ`I(rSn*PyCFgW9eG z&GaJMJo)_pTL~Kgyug4|q`M`M_XyyIoalr0#+8U~p6KfN&$6CW!;_i&1`6*^aO(Qy znd5>T>eUEB0+;7=vsR;0r}~-Bje-F=?B><0QwIS|5cp&3cK*zsX{AU>4eAxL*S?}} zRiPSFzS+(FPrB~c){7T!@%-x{ky14k_D>*93Ihn;3Lri#hXBAqfcr@}gef*Y)?GVx zj2n=2$YwQJYH34wQeEYg?NhW5E8SZB^`>5gzjIpaDbLM7Ndt ze@(z9DhL8Ul3(BNPjr4;;flx*P&fKegJwN8YJotYFVB!4g42m6dbZ`Z=g!;+_eh)f z{!t#W+kC*+)U8`baBy&ZJaU#y2tKe=KSTC+L-1JBq;lm>NY{{FKK%Yw>()O^dQt@K zt)aQcc;o&ehsZpqLv&c#;H_Qjd5tf&>M?dzD};mKU)1a5YK@tE{mOpyS*{2{Gb;oI^5Br(J7oQW zAhB_+ojM%s&rAI#ua5pS=F!Y;jX4jD^z;f2Ym2IY@`eH-ptvNQ?a0rVYGl9M!CbZet1Z!j75$)}w|Lj3<`( zepO3^B#)uX6SCnG$i+~kPGXb`kKVy;W)lQCaKwpcj?$BY&m}Sf|2S(1U-`CT7-Pq#4OE}R*`Y1^d92U`O4=h zyU5z)N`c~#)M0sMot>NCsEuqLd2>J8(ETwYN#|qNOT|=hW|YH&>Nfw{N!QubzC0!+ z%T_Blqv`X~Y*AMYAjagcxTrceQGKY zRh|+zRQS(x_t#w2Jb{Q*o=lUQV$sbkPq(+d?&+`6R(`VH0K?1bkK4h7N~WVs=F?%0 zI+J(0kKJeA3cMetg(P+K-~dG2@)hqF2PYX)+uI_(_0G%6=IBgHWApkb%AYv3IX=fx zuFp6yk_r3y0};L@uLId|^BWavuZ;qeX$afd!qT;6ns3T@UT+hlq;U-4K?>B6z!XH- z*S?ngBQ2KYc=9eAL>6_ImIi9x`V&b|)MxQaek;VGCZolBb-_b-hU`X*~e_y65gAtw5lVp?X%|wX zU+$NF06{xz^i}1GV(Y)rFY@;0^MzhyKA~}RKovi!TE`w?KU9nsqS0|#w;R~+W*nRd za%!~EDDLa4DuVS2sXU-k06tE5Kn{#m6gmB8X5( z2b)y-wa+rTKw7XV`Z+3_R3AG=7#bXSYl9v;n7{IFZc3}K^Q@? zFNYc{zzvFs`tEp$Er3XhV`a;Jd5~^UphaxO_t`scd&$kiJuE&Ze&A34+N$?M*E)Upgm&5~gmo|h%`jBAz zZ3dv@XQZ4b{e+A6y>8iI=9bo0=85Kp>ue`zkt=yr#jtb3_VKK^e2O|68Z1NqOtSc1 zsa#>=Sd?eY4VB9StS+;7Hf_8suwSq{H*rc>!(BgF6ouIX{;m8VH;rrkd)?XeY^44= z=s>q_b@b!&HpRCDYcOGsMhhMyZe-_>2q>U=7Zy%VE+GSpPOgX26a^h}0~6d~<_A){ z#}8e%y_+{}fJ&tA*J#-AVGqQ^BB8a^6*KMaUnO zUNEu4LoDWf8^}l2T>P4w{nvcTZ~X0zz$fma!zs@u{UYIb#3ReyRd%`XZXGSI*KwVt z`}MXdL{i093HCxZj_`5Er@K9G^#c^(F}6*Y5zqHJQWm`rRThlqE1hDse$G_YRn4#L za)2lU9*xIEt=07SWcHr@JmuSftoh#6nUtoPErrn7;o4?%Tc4h9d&TZP_kFu<-@?B& z*50&{HtS?ioCLbr?)t=z;`5O})*jQT%_jolfpgsW33y3Q93 z<6}^Oo}0mj1Ym=UOYa`B#j>T{WIGx`gA@ixMUkE4qPr?P(cHmGP}%-`xkuo>>%{y1 z@^8E)A#=guoJEBM%sipIZ*S{vp%_Rgw_y~SwpCn=Vbd&)4FJa$NC=WbXX4*;kjtj? zwWGuV1Ne6&`PAXk(y_|RcXQ_ZJxsM;wt=VYxJfenlxdv}+1px_iwWqF^HxO!OzXW? zeToh9ETeAS9wBV;u(M14hr{^X>9I4{;(YKj{=Hqjy}@>zSo!8m6SK3xsoF7*a#pPU_ls~_Yr@xP-rbD-k=0-UHIUILONu=OGlq}v-9U5w!U&{jWvPGNG8i;8PyIHk12>rCU}KTAefct^v~+b>N0%*& z4}FnBiGW3qGK zKzX^_j=jHJr_|`WI)GFf;NmoUPiR^4X>?5dnp>VhG~HgzPR3ep9>m7Iv`81(SKW*& z6H*)MSYI}R{yGrzPaB;|&mFXAtoJo)83zFXsP%9zUA%64xjf(Q`j&CyC1f6B_H%5j zf6-`nnvWAbpAZ^_LNfPud!HM^;A)O$ClCJS*0k|?Nh`+qQOWX{z4IaGy?X1Ts*Ctp z(h5|M#|#V2Kip6AeFNi5bY*!SmGBXvg9O>M6QC~$J_4e0&a?G~xLZ7;G)i~q{kp4< zF26kw<)n*A31su(U6~tWp5eXhcK*ql{fYV_zv!yF&NLWASUSX1zqDq_Hxtl#C`JcQ zKsTN_ebA`Qx5ZAN9}bofxf*JGm56LzJL;WS97N04C}xpXPO(FV%ct)KVtZ&%B*BE6 z$5k1j)8kC1jhq3+lMzWuIBl^Fr?01L^X zsAVPOl}jZT6N`f|I^r*| zfQSqv$GJ-9-{&Xl0SWC*fzo8cN}?oH6C@JFG1B0R59-|wrNqOwR`26!ypEG&l6|H^ z6{#EpgPiU9XJL^DT2Gj*j%p`*@?{KojcjL&rKJ^P65^@V2ojzyv#AZwLv8o*y7R3! z=LAW^0TYB2R|j<~%l8r~4Bo9xikV^uGP+A#qjb`#ZZ8w@ao`HwiH@eB|HLi;_c&I= z6Us`*q`EG**5Myac2oHr?F@-ds$+sXP50(HKT@eyFEwN*tC)Y(He}UE`vn*6T~nXi z)%r1a+V$`0N$~XbIYzA&o1PaHo}oR2&R1=>#ro0#f=_9Cg(PN*a)h}iu5}a7icfvk ztFbUm?sovur+5D&EBartC*KxVS0O{&_Z}@1`)q*U>ek!y7SG($s@!ftE34(`S41$2 zWqeZRSMpNLM2Ca=k=^6&X2_J7;_&#pLE^@EWq$C1+t?-29*Q)p=D^iTw|5G+ zueMEI+2h75lAuhqs>cBu{X)z6PF(UD>3M|)Mg2A3Tm}8j@Y-;qB&3P(}Afk5StjCL0BeKMMpbv3Am=zcAeB0MW2i&636h|)gZc4uA`SkmKs z*y*VOnt>&s1|vySPW9LJ-(N=+kzwI;yMDd}hJqsqQFQdMDWiucI^NGGt`eu!BEv|u<)*`VK5Ik6GB=bT`s#9n3Qp}pk5?qC zW^EkqV?n?7+<^YQYJb=pUoUI7K5c#NItqW@=H>pGN=QK^T3)&NE;Eg-YFKBb)fjMi z1r$F0v(_8-6qEP&D0<$LtiHHN(=#p-(dM|zP?eEMpLe8}J$^!np5Dn^Xen8}QtbYo zEbm8(_N{pR{CgZn4%UCUJK}VIiSF|~#Ff;j7`%Y(RCW4N>v$}Kef}glH%B7{`dzS! z_=G69&5O&q%C&JmA|3$(coAJ2@?FM2xR*Qma0PsQTn za!!t+7|P`E*I^9T-@ZV%pw3r?`BI{ki|`Iq_ZEw3&+5+4uM*uv+-g_XrH+rMc0>L> zyw(rCZa#9Rg5oq(qyW1Iwo9+;(4^dW@F5LO&^ER0*E-THQ8mZAMkZ++A+1QiL4LqL z3WJurm(ej^<9Lz2FLrR@0I*3K=f;$uS=OT?Isq|SZ~dNRWLiD(h*4`$y6@fF*wzRn zLpSWmKk$I6BC4pxaD(AS`P5}br)r` z6?it5nNNA4mOCr8iexd_YOw{wfb|s}h!QGzYUO+pQ}+ zRS_(;I9b(S%jebt0v$52gbJ;7uEV!KYyX(wogmzWjb3HLu%&0jwahqNB&FzbEb`>U zXY@G7bi59gJ1Zs<(?1PW>t^m*+%ZwZ#}jw%n?7}G@*qYY`He4r1`A6c4m$jcN;Bi` z{9G~aS}Q>7d$v)!V$&8I&_EJA@Avn`jwoAnIrbH6b@L{WDU>v(_jsiwSjtE% z0MH~Wmdu^b!oJW<8b}y8^v#QmmagW>jB5J{VDTdu^x3h|puyGE)qT48ki)bzKWvk6 z1u+nP1h8NjJnv>g4squ9Q5sf-FMXcHH~z|2C$dv&WKsaFL>!BiAY!;X1l83YKp1Ek z!Z84Vt}(}}h3Imkgick@*P#lMw6^KW`7PzAx3tp7m@SAZEoXz;Qghg`ZTm&eoK(dg zuz&j3u1`NuD$M_|X!5LD zL({iQwSbu377I#1o=3%4SxsLVI&6~iJpV`#u>lTtQNIjJ5p`B z(+j+P+c|ap%=&R&j^|t02g%u3ojw7nf*p%awkfA@omi^u*SRC+tth62H!vl`M7rbo zwOGXkr$py|{y4?>KxRrx6f5tu{w3J7Njy`z_n;VeyM8J@+t7&9YyZsCwb?#6mPY(=YhOXA-! z3FUH7KF{~to{yTouWqcY+w;O0Ii1hZ7n#Cy!>V%mmlFecyk4p@@=C_q8NwNvwhD~w zPMH+FG>Mff4cw3*`0NeOdg_9^+L*JT(o02;XW7NypAWJ+AFe8!yYc3WMb46i4*Cjz z7}5Q*k5I&dS7o=FwMgTO(~TkPqlZz<_V(PR^lyi_jJj|&WAkGfvvB>@uMmcxWk^*+mAK{IOqR4C2J$oZ(l)PpK2Alc);p@$#b{Fyvpw#4 zzCB!RI33-vQ-swc3H59@=A}P|yLq#cOYkTyk&pSldV=$up1n*L0Zd|PKF7(P5yY3D zsC_| zb06nn68>nsYc=u_>09mDjb1kwxqiD(*sE^td~SQEQ0o0D?K~eV z@S`_X^n+%1i-L;3$XG&pOp@&PNp6F=M~bQXrB&83Zbv}$HHnBrPb9*l zK3`(=_#c6;H+y)|PMgm!&u|8_L?L1*bB#1Kh83ZWh4byVah`M18kX~|^3?ZTEVKKS zl`@>{N3lFNGjHO)_spt{Zf6I9#OGn25lX4HiI|@^Z^i~ciRgV^fxA|}bwi%bg`5_H zR)@9&gb>KO6qBgzk8Q(FAIr-@bLujBn*ZXDz9mYPb|0F4-z68AHLCYP0ssbG7YdGV z+6d^iWEo^15~ayc5$!)4XbKL9xvG>xqAag9vWgDb=~A${j>UB}Gg*~9eWdD+!XAs> z93THg)IG{cU+rgvRgHm&P6<7ut!q?EL3leFPDNG(_AUiO{DC#0EGLVKv1!seZT7$Y z(ignzIr@Q;k7K2+Qk2ZZvtR)sPvLPX?7Euk%_8X2u&KU;D)l-GHh35MzL(qiX;6Xx z-BdE-G+H_rR^!-GPS+D5L+@}->rCfqW(jFqGL907OMQKhKLdrfapRINZpG4GXB%HeXsFj9f8d!v4rph3L{v{mm4umk-Y5% zXE@4E4(Q0HbGC2F?V$?^&33VEBEkURk0tn*WI-UCPi_CW#Ii;1Oc4fJly8vNr|U?KExT2)>w17%5`g1y^O2eB$gaWkY$Ag~W4HRG`+&lz6xJ>-~MQVi=ik^3pYFP3aXPwsP3Ok=cy zgrY5X6{3~o$2m{UWzWlVlPF!cDO0NLrcW|$WD$~opAj=C{&|VTuK43c_?&i$G6PHB zLE*2W-xe}nH)rN|g*h23{W!|B6gyM7gv>+?F)C#a6CCmzv-2#wc-+bBS{k-0MVK@$ zSp*zpoIbat#7Jq5`I%nk6In147Py9bZNO-w=~~|>?hx#DC5d#aACFfnjgosfpUk*0 zPRm(s2g_{lq0$t|rA0@GTziFr4Q{16i=RVS>&u(XuqgL8^w87O?HdeX97PyhiaD96 zI4Ne8Slsq6pL$KXMXhvP_pCsQ@j0?LOSP{ZGZz8P&_ui3lZ_dpx7|j1Epv(!ORyk- z{rGR9KXC{1Z&1HX1oi`N7eRj*JJhx$bF|*RY#cFHY$uYU!vlvG)vxwVU?l# zH7eKa#!?e8_aQ45HhQKIFu+GNK5)MU2wuQ2_T5K)edtED|Gs(uPVR0%Ilpv$Z7~{9 zb+%}iX~s3Y4FlA)qZ6{j*f#rCu2~bG=wrdz>MlMH_mdS+;q7x+2U4EK4Xg5sOEL+g zpfjJfT##^n_tf5vLM2yY-z~Cmrc^}!rWMXAGpNg%=5pJ%y zU?ht!%+QCU&2IpHAVZ$vUKAluL_Y}+Yci*WwF{vn-@I#wlcz5 zF+vBP?u}W)w?h6_yg36HV90%9BhOjl%swOEaKI)~N5d-G6xvEvW;(F>k9GZv;MI{86QHLT zyJKxbh&S!sZsFErsIJ|S#w*t1q{p6lsIH@@q{1xUFv5YxV+XHg?&=3L01k-M0l09$ z=MIzygX~M)=9D&tBZ!`_LJXxkUNC}wA%FqQe%~O~9o`9O&f$EwDbJieZ}?6>|JVbb zyYRGCT80>uI(H^KNi~{gBxzP}5~O3uz!0yhy4ktUO(o{$CU5aM-CjFyrDJ$)!q2&% zziyqUsly~jMw>?ZvRCC+EOUfXe6HUyW0;gqOY2%&bsHb}K6P&&()!m@Kk%&Ff>FyF z@E+q89EDV)vu$*qM|=x1swtZN!_33!i-$n@f4H*B`VW}q04*z9Hh#j=TY*_S^?k-1 zQ1V9ioOEY#>o5bT;qB-VivTzv+eY%FMRB@YQ0Ji40qBroWve);TG6UD=o$BkB=OPySGlGQi)tzbUUONF^i(9P-(AL zS*F|Y-9DRoyT31U@_5-W&NymPt7vc{CsB58Z2Oa$ZAQbx3Jzq){o%V=fojXBemZ4T z2^ZrUws*SO@Gt)=z_ZpK{|P05dTDF!0urT;durANTM&!^an_{4^;;7Xt)yd-s=)y5 z-z~~80;~$pcY^0~m6qlKUR7-#!&dFj;tAoV>~>Bvli)Qvm-YA`Z<;%3(~9GeSX?Bh zgXSI}8RN(H>RP2sJ@%}PtM@9#x7F*S(+A^fYO?F0V(D#<(d(17aa1XEap4y%mO#a^ zsx}P;CRE2jLqlLg;dosn504^82HTxz+mSXdf>2_5d>)eBAZ+0fD%s7WR>c(qnzfc< zs)>A{#@RSgc!#pccogGL-3lcbb^y}Rkx@i|Av)!7RFKGcav`M~H6#{_1cbpL2sFt`*u(4SfYu%k05v#Q9wv;GL|sSWFkyi2 zaRBm~|1$UY@~5lyXs9Z=-S$MPw#mXMyt*U`xHAb^d$AWXQm|zH)uvl}z9*y2q(*Jy ztC|E{G=;+6A^^}z5Pf~l;ZsFO9UXooJe5PvWV>QFT*u78wX(?)TlaP~GH?hi+aBKS zCAyKErP^5Lh;O>t#;J=ahW@FR7s((-@?AV-+RJOdQg4ooU_fPT^b6C+_O=l?^O78V z9l|XltSZsNWN|7T4L_!(n3@hff=l(I2xEf%T~?kcu(~Gg8rs>Pa@KALd);B_PAQEK zo21fbQ1=3xB}f`~nuJUdTo*aID&e8Bnrm3;xciV~3A@jpWJ>oceALlF_&l+|jYumI zF-uA|Y{~yR2#c`ocJ1wYwu-7)C}#m7MXQNZe&k3G0Q@bTgJ!86RlsK|z{+c(hLkO9 zR9kTT8&$%}z#vMeD*mbkDVsM_LSi>^qMIKwv$@UH$5LEOni@jW&GVrzqAs+5QP=1SW7RLCk(xPm z`a4ZWTWiDBWP1mmL}`Hgp%cpR5FW9~wc%&2(d_MPd|5u!l&ZGPnF(FDqa&g3%jG6| zTDsJay^E|&J^aiMzVRKSA+e-v9_E1q2Q6N2kFIBn#b}h{GrH*^bZ*3c zT)gJ{x;geq)nJw(x1dPOFu9r##5Wsw?JZq4DxbI0$x(az9KPE?)t47G)GN!aUF!=Ww8GlT+KWlV8EZq34O8xFl!%Sbay+r!KaHlQPIAIPzvU#%w>U>XI)TxW{^dwLkHd!kAz-0JIC z%-vnHp+kCtjDk4-QDV4GwXRuNB7qv4ngC~5Fg$)1Z+w@I@SG^?A}!+=ndxRa+~OjV zzQX5w(wSAbs0`O)KmR6Zd%mh&XpHmOv~uCaVAHre25wlh8*X~~+kMgB`Z3D;kw`^S z#=b3_g=_8#X$aHnhw&qmRpbG5;~)EzmDVx{e}d#;)sbY{Q4MyD*$CtgJHPPhXh=Aw zPNDfx%-j2@5MFK_1$$>|Uu%7M13r(VK5@C!6kOBFRZXr7&D1WblVoBF?W`!GdZ{jM z11`XFS3TCBvzM!uxOZVbx3TU zzY+k{al}`ZkN{~!F#z%Q)u*p|ODOdJhcpXAc6xfYf7!J6MoWH635q=EZWLngb6#9eaI?H~FqdHu)U5$+zox zN?D)!!=A}MQ>@u~IDB6JJG!&EyluS3;ht}^KJWOWij6LEK=PDBxX%9kSv4cbFSXt7 zt-yZ2em3D)mnO~gW0mY-St+n=TxMOEA@ z{wa)xa&@e#^6{m+PKnv@ zw&cb#quhbH9at{vf^7k_LPBU~kmXg8$Va5pQR84h0An#o|ZcQs9C@9MtH z3SpDZYho9L!EZV$n#?{bA@*0IfJYd@P{09}HLWG8sZxQDEqA+&R7hw?eB+ zRSPaMZxsvzaSIUFZ<7WB&)+B@HBGXPbCST=pV0oxZyerK?T{6 zBvS6K*u=ZG3CJk{tCbRC5Kg1Yvi34&lcLlG zcHB?^ZH`cTmQStH$%*AT#`6%ZdS1L;3p6wo54hyO@CZ=6g&U@??onZAQq$$l>AhNp z!Ek6#M99F&x)K#8ZNZx`XbPGR|MJQ054}^hcAu2n62L-X;brr$t(1+@Ry!~JIOpo5 z*|0VlgFrVFq^!QeD8BFy%UKY0t+>#zQAe z3iI39EM0{OYv!SKYiX&oV?zS)$-@~i$N|Fa6Gq<1$8o##5@3G%@TfqkGSGiH-62vY zh{G#N=8ydHYQx}nZ$D~A5RlOe4GMq&zyd^O$WdNj*idEitl$B^0pNgeP;yu^Y$z+% zyH)K1inDo22pkv`RKUm{E*Sqld#_17u;>x~^?~#@!H3@bmEQydn6bp7v0k!f+1XChMG_haR??%|ar4NS= zhDKBE89)T^&m0fBX(fj55X4U&#<>CZ?=YbyM9D#iDS(HZLpyaPVr)|K|1XXOar!o2 zz(4>1WY8C&FczQ721F1?IBdp8t3o(D4g&*#^!tK*fdJ5v2uYCyPGdX{3j+Y)eji}6 znJ5_yQCuF22;(G40|Y?;5{VEP#z4P*z5xjO$~^5YHdAt(_}X|7Va#^61f@|X{ihR9 zg-B|^gQK_B&5WREDGM_SzUEvE7>mP10RTiOM4~JX3yt8R2n|>q&fo5Mi>03Z?yMHWA&X$r@~OwP4)Mvx&K;jmGHh%lK9005xEq41Yf zv``M`qiSa;6#95GK!gZINCt<)0059AjUa#^2sWEVlO%#+z&~Cw;9HU!&to!)P>A|; zC1fZ>e6l@}NEjeY3?c9^;Bc6DD9q-3e7FcaMA8fv2cyC`&Ezl<002dj2)6jlBSQqu zW+He9a5xwM6b0yThyWl`1EkmAcBV?3^s@HNtvTVp$Lb= zjD&Fpi~Y&|ep!{D$z)+@D1-w5K0XVJyBMJXK(LS7YN<#l96=ZyHUs$FZl}ldo)8HZjB!Zpi1uBcHj3 zcw#ZY1A!3nX%K`ULMD2PU1$gZ1V#HJe~*_K%HoSSh{xlD_m@u#IfexS0f)o!RRThz z(a2_h(`g;A4G3uf1Y8i92d`W~aEqkzK?00KOIAk)$RRsddZM8X8UJ_-cFUoXeZ&Hc&>P19^Po2Kb-IQ(hv9E!47 zEEbCei!1~|5Oix>d{F`p-+&+py5VcN5!&P zKoH>c0kIl9l?6IHNQkBp@bv=1n>gU7C`up@SgqEfp&>4p3kxm;K@bE%5ClQr9GA=8 zyLa!@)Ragh`r8?kkB5QDL@(0;cK}e=M5!nOJbs{3)9d5tNEm$G&AnLzLYk(9LZQp$ zx_I%T)9Ji6@eTw*5ClOG1VPYWjKyMAS6Bb^r#}saLK2DOZ)6|_f`AAC`~(1hG7~+5 z0Gt4R0{jKtnKx@d$Y!%ACnrlvN&U@Qg~*M81q zG9!`5SDAJ)6bcD~_zPAQ4u^$8;a7T;{OVV~g6A88AP9mW2!bH!@6i7b+V4~; T22k+(00000NkvXXu0mjfmgN=z literal 81298 zcmeFZ2UL^I*Ds3tDk@SG5T!^{P>?3g5Q+*&2c=61BE5zlLbW3xMUWnfNJl{FC4ho- zNa&#kq=gm&gb*N<6D+*{_uT*azH`5G*1GH7b6LyfJkPUd&z?Pd@0t1SnFK%3RH8o1 ze3pWOf?7pcL7RetQiFox#H-WC$!~&BU^&SDopDiq*3)dB_sraKm;M8f?zirArSxoAS8TC z=+-R(GKGLU)Y-$_Tfo_!`ws^ND|ZVwI~NZ-urtRYNAo9OPY)R`vZTMd;N)_|*4h2H zn#c+h@-}x75)l+W?9xv{ON%2q7f(0GpN(5u2w6E=IaxV-xRYr`j%ZzM!5(0DTk!vY z_0i{lG(c9ZhQ?7F|5g?!r=up^Jrupj-T1ALe@pGI3w5y)(zbF3d%9UzDSDB`ZmAMDlO&1Jy{4-Dw{)o(R>z3dxj_U??&X!<^`;C98V5MO0VI{+LIBEjIq5{I= zx*`%%qM}mbV*J9lrG$llk!pY~?X02yj+8vWqQd_mC7X<;xrh0GN^EH%Wes+7GADP~ z&dJ=yO3208hKu7!jZ*SpN3a{YVX}0h|N34m$jTA4v$K>E6A>2^yZuB&K-5CmQo!Cp0+`-l!5OX)H zyEbHP{ik*(L>6A?&|!b|L+HQn;?HmY;@p48$r0nQcoeG04@bey%9$MD+{mGfl2Fq_ zaqKpiio#u8?~GcX21^1%U4_{2Hlwc{5etX0x^5?nq}(x~1#QEh+EP$m6`%RZ|$ zKJ++M;%?Mw^V5%uSzdA^?m00GoxjS%LfyeU-umv+UFnMn$qGHx<}crznBqWvr8u!) zvjW!h&#&>x^3BR85#G|?($O&pT$(S01TN{E#AA?5Kf^Hv#nV>4t@)1;wkLl-zsYHD zS9JsZc@qA+DDl5sEZ0Xu^W$hzjexi+#_651=H5j~K|>$wohf6=xlylz3E}DH_JVur zpuHW~1uycna`?xQeXR{zQ29XnVVQ+KRaE0(7qqEr?|@KyISFjIHf^g^OIWgb3##ne z7l-=fw?fNe&FDX$cZj9VH_T6gK9@TQtPGgzqAHI;1O_x!%CcJiVteQHt5&FFteRc& z`P<=+wQ1$Ex9A9iH`%2!Rp0A7``9|(f1-}t4IAngSB+{NNW!;s7JWNoK6@4Q7(DS; z;8~MmdX;GW;Y3LOE8rS{8GOu)tl?(-kqKB7??b+wh1YGfo76AIEZMNgB?UW0!3UD@ zMy>_uFw{;ofRbBBqNVh>l||2){rBEo8Z+=;jPB&yY9jI>LgOaZn73|VosS$(ZT>RP zh`tv}g=O!QYi&!*W66avwo|E!%c}zx3GY?uqV=&b8HFB^LDoWV&Ouf`8JmI}UBbu- zjF8iLvmd4qC^c5=#B9$eFZ`#xI_3rwmHem|30V6jzrE0BfoJWZPKdIYq%2gprUcI~ z8J?Ef=_B%6pbe*~P2Ux!IMNi3h&Vjn4HB?e4o@W@irf(Sn23f&cB6Xpg-}%IWt3K8 zRX*;sG(2E$ovA1_=E>`Lqy8nKM`@UhdohhPt0=v0_faXxgmD#rp|W(a@4meBb`k$f zna}vy?V>^$YV>3!sNL&THtzF#?g%vNR`yjrANi{dzl5Ra&4L1oE;0;i_N})h&dRfg zsz|OIi>%y%-UCp@x`70!8PM6)c50t$J1*O5@%#C|O!|;;l67%B8C2`ZDE%c%*A!AO zlJ#z&{UeqZmJv}c__8Lo2+!+K`M$YuLe2{Y!_#ccmGpL0Swz(27ctDqO3r^tlY94P zWQQ|e?Lljss6D(ihLkLPZZ3s5C&N%@LQP9HH#Hg2s>O_G+uJAaBaEx3S}dY5@DTBb z7qm5exh6 zinbbEg~%Ek9~XUx&(%9;QMWnWKn9fN6U@-Xwk(bq1l$Xj$M+;Dt+VjEGN9}2z{-`S z0O3TpsH;e*``!Q{N33aw-yH;{A-y2+_`0K47X$!8zqHt$nD`Dq*iiev!k@#_kxcZIk7#yv}7YD4Ljqqd~9JE38pwN}*fF>k%jpteqT zfT{w@@mpo>Bj3^`^cRFCS+-auelX{}O6h1?-kO>LWGCXYK(PjTviH1ojFQ)XIJ!|9 zL-jS~^?2jI0}p`2gyhiZaL0o-ooLib%CfJ(poAVm`rAJm<-0cnFZAoKBbrTx+%yHG z$yT{&OaWjQsz_Lrwhe(8KyQjFY{TZ(*(q z2?yV-kB|*HAii5`pi;+q2eY9QeLrV@OyfXl-Pk|1}V9DuNg| z2AK?WpW7HNu}MUvXb{9NGB7ZdMJ#oHkZTNg z3Drn6Y@*c+ZXnCkzdi9zc(5PBcm4ZXbF+?9@%+@3W^#>J$JlP$KV)nG;Ht8+UemWE zCMJ%!u!V$#RC{1ShPv;A6Qc24@_($R^Yb~~2Z0rcQOccuf8hON)6@fnQi z@;wCAPi;n8a3$bVoTUd`ro8nFwBriLr7l8Lank>6(&uM4d08|qe}s6h^p=tPD29mq zC!1KjwYe7Pk&iDS>K{_PcRQ3K^>%<*he5GJ#g&D;0X0PEIZn*48rfA{WP;+5L7p&>@H{QuO9I>L9k^+#4#mU5}x!-o%vDYeG3?EfUW|3`V}?FWA; z&*6vqKL_~u&yk2=2QpX1Vh3xLNHhX`{YUcLNn{%(tu~S*QZ~mlL?i2nJ%#vtrSw)zo-h|r+*+eA(NSrMqF`$4L-qlFHOf?DG)du;T2CpGP)Dk+ zV}06s<$NnNBEWlVtSYOu%+cKZVFXAZ4}IrP|L;hV+nbEogo|%XwY|tFomSp^!EzQO z$nM36jiw31EhpEkd@l^G9y1;!RfkqHF`en@_nxe!4J?_Re}Q8}Bn!JVSS8zC4QwI`Yw<9a)ZDe0>9>4}T;)72Fg%|l}=eAh+ zqtt8G>Bs5O117Z|TkRv-4`l<%i^|@~9coeMPh)(=T$qAK63ab9?)=RJhtOB-{=}4P z)J<_P-&_l%4X*;NhUxY8 z27cJm=Wr@7^0nx&iKeXlaKEp<@pB-5!PrLkknF-JujnYvqoOjS$!_$T!*_1;-q9J0 z!J!EjlSr!NV}yZzfsw{o~ij>)23P_e@X{% zCQ;1Yj20-9BI-LC!~Eeb=s|<{cbVvryn*zFvpTSMNqx!qts3G@8K4u$(H4jWI0mPq z@i@84)pXb0@R}9ZK^<%Eff((WokaVGx2`sM&jxxi?SAP{ ziar%z&lBQed+07k{Kd}k`_ko;iGSrh$P?MqFC zNY|vV_U!J6Di9MjXU(wW5|lAmgsPv{XzyftQcwbxy>S)+O=4c6DHwCv_y$1?Tx3M= zRmiN==7K-nHt%ME;q&T@TmrATbcLn}U3ytA(2l`^KD!vho%oy5zk0=kfIg}*bSqeg zcNK|cwiYtk*s7i(FGK}Xb4s8AwyUm4Tj8s8m;`Fjrer|g%-6ImCb(|1J3`4O=2SI} zJUFdnlCaR?r;3)l>c0*l!}9|Dy6*sb7doxkYY$YO#GEDZ;GDz~cimr#L3O zZg&jV9|?wUr$yJs!Dg=jg_*9QJY7 z{w^WrsY6R&#k+Wn6P*=s&o4_)NV+U#`<7w7dr&p{r3Sx|#joAJ7x;h_DOq|LN5Kbvd@(pY(2&Ig$ zjdN5-R@^$fF1zpu`4wictrzQ%5^_Rx^_4HJp~YSFac&=OUw!#bVmQaA@!lcBUiHO% zhwqV5vLQN|rM~%_qiIF+QR4UPY4-MmCO~^x*GVgjA^ZjAU|Ey3Mz$v#GJ1@S1$TjY zJaTYF6RFuB?MT9#Zex$wxu2`Xb#s4&AKl_`zE(}cdwk&EBUtcdjxcJ#UT@wmPK^EQ zJG?N`ARd5Yk_`l_6yNL&p?w*1y0VxL#a#e%d60~6Z@M@pgZkw0l}0~<>)iTQp)x8O zUwtJj10pqwJM(;2xM_J>e+1@uk8S*vLhX%NxEIRWYA!%Vl$6Y|&!=XDsh`B(1H#%rlMU3rh^18(!&SWjEA%-grWd%f<$>MT5OLkG$m z5MNE*{t_|%HbiEEC7H6kYWz(9PQLGrwM-$p7@rC&97>dMV-AkK=yH+aeQH+5kKw@a znkDyCI59d{C)phsNZ4!-74+Y#{wu;(+w&PQ)f~PDl}AC9(RXiiU}BmLu#Ca_jpB7v z4iuR8^TV~#dXcBM_yh%-1m}^Xr`Xvvlck4UxNKz4{9X&{W^?@=3Q-Q?MHBnpjnoiO z<{O_{<PtQPvw*6Bm%Z(Qy|tQZ4$XON955Hs*l}319u3g8ycYyA7SD!7V-3%kj5Q zA4I?3$azxV|M1~y#mJGdAQUBmPFJBex8LbAKI?4FXjV;Qaj{w%mp#O@FM1mMBHQ+< zq~CjA8Y%a|%U`_xUMfDRt7A6enO_viYiE5i7p)r2VhXVe8ua9NVpdBmFIr;?BIpH&U0XyhC4X?0 zuQ0hP_E{E80T5f;bwu=eN`Arfz4TY}6cy#!1~^_x$*FjRG%t}Frrxj?)Gz9^d{|Q< zS0wqD`sadI9uDO(m>uR8!dj<%QN}?TooS^R@zhMME&@9Liyf(mMz-V&1s9yv+sg85>~(Pi43&eWsqUr8&;Ur z$G92}(wFk+eaa2Hapj=QNcT1Ynn|ginW6zh*R2R?nRvA|qCE9>ABOlebp&21uUSfh zoMO_56-}FcQqGn*s^ZhI13&iA*To+oBz{Q7wyq@TdVcZF5fB!wOM@` zu)n{Kv9DMbJkVL2^A!xcmiuE#&T1IK_}3tVCadcy*7#fue5b0y>vK++-p>AFk=PR_ zrRfYK^W_0GGq`m)uH*CM_-OrvlvY4=#SH-1zF6ev)_u7(XdyoO9lrc(rqed7`nc~V zAD?|{@72He5U=P7oBlR)FFYx$OGk$ucp$0$Th86QV8d+Y`=k3KyGP|gk~}XhAEH_h z>1f#9$@?^y?dQrHm3xARf6>X7eUz66O8g0b)x;0lj ze%l4~_Y*SZ>htWCf&7b{%4}c9%>=I3Usw(JmevWSFMm;S5+vkC;?)NoVudP8Irb>H;&ynKNVbtXTMGRBw!|o;Bn3$UV8t za=bSI->d}z@6HaINsRAxeXFPn|L$HUgiY8dd4$IJdOoHs6J<%a;y>T*U+(5ZyYM7!cCD0I^RES2mYxaI~2QYY@U&;;LZ)t(>tzOe@ z44z(y*SRRN z;0+Q%DRd<~hQP-#HTI6JtU}sgb<*FwxAqg$rKdYU>p7zADgxN2F9F(~4P7~KgkXvI zmhywe+F;6%Ks=$N@Oltx`%9PaJGz;N;C z&f6`uJ(+{ifZ4Yl_dWPKUm4s-u%LrHX$xg{9g&5hh3B>QT7pNkHbBtPrzu!lCd*LA zPH5i-oy0pm09f=&)BQi8m?9nHCyx!6kAVBE4-;iaJV9@~(wEc2=?hn60=&UbvIcd` zh?9x5W(S5vN^UpCxiK1R%3}l)am80peRolj{*>njnMl1uHSGNO;f_h{70JHY4yB?B z_1RcV{udV_XL?wp!vMHe)^(`!N;H#6eDBtgw;nbnk4Rbo+$I~)wIc}WoF~gI8A^IjmPnbu z-yzLAHdxiAgQ$mJ{KmmKS`O`Tqp=Z#5YM#GJQU&LMZ)|5@L%kaj5YyySlrRmE#WX3 zcOGg{`=JeN2T!4T^CHhtpxf~GZ| zH&?#XQ2wIg!2TV|x>C`a*7eoPa{JH*-s)2CSIqnH&C!ak9jnlE^oooxBV(D(Ke#vh z8wTc7Ie6|gH3b4!co(Rk)L#9h2raz{xnheD9j3z(XpAoU-3?0x^4e3tn_-kaF2H_c zirBY0BPKMR>&z5DB!>tKm5}IlI*H%33DKEK)UWRx^2L%Enem|^mnlQ?S28dN zyvS6N{~HW%jU;b~ro&nHCwI5;@0=&Rup@+J|6`=fzbZfNY+Hm8``cb`1(H9KQOxfL z7IJ?^2kvB zq4FHRQAP?Q({c>lRY^|TZ^cAs#;E-B=NzRX^g`k&@~qfqY;oZJjuN}fNMUkdQO$wel} z;#iq6vrT-OP2n1EAlQr>L%n#CwKR>al5E}W*NLtL(Rh1KT(eurgfpS{hYsq!z7e2k z5C4rI3I@@snfyr(-w9RZ#)JXAW?Xc1#PTE=7#Tfr!@yd6XYoF~Fub-fcg&Mz*Zt2> zc>R0qwHG+LoP%^|sS)pZEyL{V+*BD*m-{CGJk@7PfJv@&F7)w++xUJ!7moXQ%nylR zOS;HSkSpk&&gOU_;n#8LPwqL*N#O=rq;c=OAK%wLnb!XD!}q~}3TuC~Fw(rQeQPD9 zs1T|48GhaWt*3f>k3_-meN zq5o}07t<5*&B+e-_P1R><>uy6qdw&1-XuVJsjc;x;Q$EZwuxKTdCjqP|7*%N6GNnnT zBS)Ff6Msmr0AlbXnq+eVjC+$&iqg&ke{z0-4Cdbyw1)g{G4hq0C`KG62U+P%=(9nl z*h%?H44@1jJb2JwR~x(PH9u7NIg;)7v4T5;?Xxh0!G4cT6P@VI2`Dy@-JjtA$36Xu zDSo7kzklDrP?zDLC?`h-_&cILRc?*@<1iF%jDOOL6bdZ=#}$)e@hb&;RMfu}PjS9% zapFq0+))PdlIQPi~I8oB$sm7s$ z%)VJcj+i&%$pM-}*1OVfpx%K&(D-vF^XAS@XQ9JWC@*ES!QqEfj7ojnufsOyN6zR- zeR`i4M`H$Pg$^vp3fgDi@RBGPezkUmd4iKY%r1Muty87V8+i9uH zfkB=zL-cw9o!PvF2#G!s4_ZbeMezZLvBB~Z0L(1J&2*Y~lp5a9#Rc@1daS zjZ7H6e0K`I9geDlFTL10U>~kt_I3FFozgna-gy0aN6|{1Q!`V*^*On+DV))J2W0^6 z8^$`^jH8Z}6y%JJ_V+D&KdD<}CimFHx(`-9HZ|Ng7i`3#Z5Hbd@#amHstoWSuXL5a z@D_Kro{N-6AKV@4hIw*-d6Z|{cQn~>gbU-zPR^Jlc|5*|om{ffbv|!wfsV8GgAB!z zB1+{P!s@NwR)IT6(9PMoLmRp-&m9O}!g6cyyB!=`j zLFVd=5#bCU$K&PHwb{jr6?^wfwq4zVjTfw0-N!poPmpGE6b3Qi1p7~K;k3Y(hKzRa z62ojN8=kq&+0hU}+%lDXR~&n3L$9i8*R5RfvkZS3+{^KDf{@+_S7Mj-Oh z48{vDpR9v^z(9W3IhhJu;D>|VkKyQk>iM>(Ff+yyJ;b+)8;WAM|<6y)x73JRY0@fJ&3ky;c6%Eev0XVdLHUyzca58wDh`fwfl#TqIoA zPXJt6s73(UcEEC1?cyX&pO#XVVWZ4rg%($3Z8+;|^O!RRChmmk6azkH%d?=vBD7J^`sW z^O{|qtI)(S6xcS}5(jb*@&;)9O@vzXmhaJY&!*-(*uQ>nseu?>i>Aj2?Jv%P4|dU{ zRB3wB%&g?W#Bd;LE3|6D1V6}ju+vacwBk~1J)99@23k)JB&`UTP6SvE$`u~W$T^uv zXGz?~_!o?pMF;MV0|mXOd%*rUCYzP*?bo?+sktC2^F<+{oz42LgBoY>o?~+-b=<*L z0%f~Td3zSDx>+y0&-7}~aMp?t;~@CbZ9#Jczmu(&=G9CX!aQ>)w!#1NOA!B$JXV2g zR?TZqI=fq$U=M_1T;XyZXVQkF+z9sDhQb%limK*3s?+UUM|2adg8e?Xd^*>VkPUCx z@w3OY*}V&(7}Sk>f6gvb-Y$vvx~slQCHU>>W#ked>=UDxyB(2keza-AdEXQfxPJx# zWu!Ko-Y)KvBJx?Y2var@L1k`Yjw_wtC_`@rIF-RrdLn~tciVw6em5^QNxk$5MfpBa zoz78lxvqDe#vFOOy-~FlBQkNp)XwfPB5C6ejh_zH7@*>jN~TA<>U;c-mnkv(wAqW& zZ!9@{Qj(~a9p|D{-?9Sw0DsT0OWM7>J#@%ixB2(uh>P!*gs)S*wI$(K-i^Mj=r78b zEvkJ{HehoYWYW6a&>l*)fH-`6TzGrF`1$^0gDe-lt+~eb-V}J~wF9k}gPSf6hD%5_ z3ev?CM4tARYG^(7Y&`^Vsjw(%6!L@e2cbBBYs(bN-C+h6f=m$$qhBaBI1Wk~g!Te9o>goD*r zuh^zUtM<#b#-wCdNrBame6>f{x`+|gxUB|_0(~Tk@aowETs7Cj3mL7@arXza@Wse$ z^OaP!`e-x}ostx?s_cL1RQNPa)7yQA6wB^p%QhhmfA>3I&;FI71?yQHsER4>S9eGj z$S(XM$^d>kzaXCbY4mZR730AVm51fNB?IuJ_7kIBo3{gbvfxXKjHm0rHjm@HU#6uaadM zz-%8YZStf_&1G~zt-IpmSnB?@qG#WG1YofB`uc>zvc|%A_o9UY@|9AoGkwabwEz>5 zI)@)BAIPKA+5(d-cnB^Wa1s{k{d5VnFmFGR?$GU<+z-XyTyX2D{2n7{Izt+xE+k1d z6<_vU>6b!$XEOcLk^mQf-s4nwH(JK@{47hShS7?s@IwTDSCyW#C~YcU6NJ6mgNXN{ z{kWH+G?0{J*FAk^QKD55@KU_k=1NQfYwvLF!225KOv9N7QKNW#brjWfKGpen{A&=u zndPT&Zc}eu_CSJ^DJIVMHNs~OLzstYFF z4*?WT>mlp8pP1PyF0?~T@KLNflS^4>qudLV+)8q5+GmxsyKUOBM}pSkKjdr3{tAmQ ze3sB+*u49YA7@;JasHagE&jqNK~9Bqx^{K?xsa3l3MzlSe`OH_X z9Jqo~VhmVZQ~M;j#&fAV&$r5x`X*V?8apKXNPRe3TD^?uL&Co{=AY2C3Tm}$hrW`E zp+Ql1FEq>WgUf(#!!U#s064E*GGXF|S8gx)0st&yn#ldhU;ZbV>ri^HFz#|%@jN@^N#H-3PJWMRpp;kwy8pytR zdy2KJ&AC}PNc)Y@v*%QoNwGueWF8a!4a=~Fd1R7Hi*1?Y16&-J)e9!aHLPd|<<2$< zIU>JEKGeDXnr1#^$=*DBEX)S8fg36y4IeJXZDUL4;9N2f!GF1fM5jXw++_Nja*x@A zv_e$$(oI(KE5AtpD40i_48%Tu$dbQd8t~V+Ux7xk;+tFi{_$1CgZR#+!OBv66YDVo z^hLI(frBZ}+|V9fv`n&emvQ+u066spvWxYgmUur9L+W!5_5|vag3REIN%#R|e?}DE z-h7Q|4qHE46Qk4ey_&sfe7D2&#Y(NrbW)$4`wxNbyfM$@x`&$AOmfHa@^h?mU?{$f z>&-c;;ajQeOg;t2$!QxhD04dI_!K89SDsJmMt!w{qN#j8MsG%6ydySrcrhg-K`K19 z)@{!*`y;H(A_J6)vacQK{RWY-lx^tntkx+@3XD^Op z2~a)%UI#TrDF1-5!G^nT>^c2q-NNx(=Ki4k^Af=!;!oc1o~xh>iVB3KHL9NXIVIR* zYzS~gu*_))cw;<9bo}qzJNtv0+Ta7|J9`jXbnTis)C%$;>@uNB0+(AUw z_c^lQPNF88ZpDX!Uj|P;{*uML7-orZFwGf-gp-`}A*KOCOk`+0AZIbsry5pSv|>V~ zCmY=!ch^SZ^0~^H!JU4SgAgFMninarPhqW@d=6VCAV2n|Efm53Jz;z)PG)s=XK_a~ z-FO*4Z5`;VX;} zAZH!Qfcn8V$hqNmy|H*7z7z2aUJsqXB8jNykxYwHjDPiG#BEjrT0tzZE1A?+sfiw0(Pm|m4`U+4KR8$H z&{ZI_VR$~xf;KfLZ#OAis1d(3i{fR08)%JNhsk}LF-TE9U#v1Prqoy!GQnS78L0Cb z_`ZMoFE;(WxH(Yz-V-(c{B{Zbmsljr;^82$iq@C+8W|I!)fkflyO>t;P`c^PbavxL zOVna_d3Vxw;4AcHZpu+GR2d^r0Xb&8SdwU+FrL3$>Vm}-LN+C~mJiVa@^-aV{4Oov zuXTeZnP=2*K0mGQB)`5x)1f^6x;T$GQbdMaoP)QR8P|CnIN|#)t)Kk^_faS- z?xZxv${tbD9UV0P50Icq!a|@A@SX!H`+%e(@e4-2lfsQT3I79b&vxAvmOv0!dSRE3F09<~ z7U+PQU8*I60_zdt9YM}l6px1MveHqp=l;Jf4i>|R+xdY91SH>qA-;qKRQv7-sk>EJ zMLtoyXM7P|k!3rh=YRZuPN1hlU$R_^f$V4DS?Irr(A5D&_TMb>zF9u=;mZm7x21uN zZ@~j-0=Ps~D&scfUwQ-ufV;HnS6kPN)vB*u#(H;wtNrl_HEP;0;E~Xy(_@8Pnk_CY4liSG( zoLtNkcQi{QUzGX6*t7Zt0WblYjF(4pa3$ht ze78h}{X< ziG|238aAaA?X6I%?@A+bQh_(ghAwvENP7xW7_3Y=v8E>JWek3QV#LgJKS-xJb>C^A zT@JqL3!OnE*GTUQ9Yp-Icgc8=NXbOFhS6t-8FlZL-(N zV1pXkp#}y8<}Z#f{P8imWA6~q>FPaG+zV1-EA-jX@%1-Pb1?8YjRn#ie|Fn{|2{Qf zH_ITfG#SS9_g#e3Z+s9e24ck+p?cxFhbsJg>;aK@8kozskf2F2~}r*Nr3w=`$@F{YyV=0QsEokJ&Zp_yep zdqi=Xm8_}Bw4X+ed4Tvp(Zc+-=dY(HsNa13LXI*tXAjNxzfk3;jQ`Hn{--RR+~)sg z$NIkj!+^=|(V{)vJDzEb;EDU^suW~KfPo_cpZ6vmWQPsJ&EuY--kVs5mDh9bA1KzI zGV`=z=Ukldu_6X(tR#%m^BA&58VAJ-N1UEUmH4a4`9D$>{StnY^Q^D`6j%rq(Fn;i z%XNr+{Zi`cGv!f(l7hl-+hrY3b!ju7N($k6GW_sUw)ax%Ua{e0S7oijEwom#$6G$O6Gza^c){|C`;KiD5e}Z?+h> zNNiJbr|~Cz;u9K%yWZ!y9iuX?w4(?v*$lt@eBzWpmuuW7*P6^!InQq4nKzas0C3 z@$5@wj}k&#Nx1e%EvB~G5IN~SQ{dnX47Kw7L*T$ow)2I;9g>nxZszRpkjdNqoM#jw zG2Jd+jwG3mmC7GJOgi;F@k**|`+q4#6Z8kF!attbCSA1lcPx>*vdH-<0PeBe+uhA^ zp{aPzTs&=!v7qs(m+%hwJbiCP6bWcLfRFdAJO=d=u%;=KWltPGM96ra7PZE+H^>oUq_hu4x@n!fRXxPM)TMR8p9Z>v_dzy|q>h<|R$)HP8(dmpapaH` zjGAU=wr}ECpmPySDVV;tfByUJ=cTk_Q?~|wc(snQ=S8HK=;g>?c*BJ=;6SuM>Rm-l!U-2QWbS`&5mqUrT_J$q?2%*;U?U z75K0l)0~kyCEX^(jwgp!TPoSEGhhQMv++~g$L}n{a%7*W+92i0M^#XvmLHRPzv|SD zzFLl$OSc~Vva-`vfSXTse4pz3R^_PtVIlY)hRxRR=w3 zcA+Lz+C_{rb)vyUQI2rsl_^>?ASjmfm3;eiUoeQwo+TuoGaFr~xzy`>w-#SVzdCD` z$A10}_3vt_m%_n7F_&R2w`Z4PgptA99EvATs57D)6_g~F> zG5%N3RXWqfYU&f3)!{TvqtU0~S7@XYrNJOpjn)c?;B@(g?R-^yLV5$r0kjv4*ekzg z3h1CrTYo^l6M_bX=F*-8cx%tVySCrt1Q?tw{*fcRsVDOTi^6W*<;HsY;K<@`%Zl*q zF=X#5C?Uwn_L;93?^*XDnl=dB9(*vOSIUbCOBIapfDoGrOg2L{8(Q#A|HT=AV{6IB z&i!3;>Gg&}-r2&@$Dloli^0w*>C{2HGJdtR!Ix;>j@PHEB{+LjD9r*p8~q%7ze1o%V>YBh0C^G+In4kl^6<3YD^q)3P2IKk zCdZpB{B(|s*CZr7G%H+tHdQbf9Xtl~>eX^x(|Q{cE%tX%tZS!2VXw@rRyVV-`M z>tB;?WenOF6@HSF0cozoX7&sWTKRZm@|VP!1-RA0Y;pXJne-f+qHv{f-hkr59jA_j z7iciYq?1}Co+~xHq#J1tM1KjjwY6P`Qc-`3a z+hm&nsVuc3ft1(5Tq~16MWJ-G4)6Le)e-@e0moUi*Musilam)u;sPO-dbAs|i4_n|_;* zjJR9=tXF2vyMfBwomAEuxZLP zm3n(wYSMW6l<82)iNoLNp?K=3gy2egYptG&*Px%vRVBJId-|nME@PvfhS;t2}93-HMqHfryI5NC#e5& zG&c4ov-SlK>u#E@?B>y+jgF;3f5&^(v|t4Dp>Q1YAA`Qn_q34}Q+GSiLy2IJA|*+z z`yqLie8q{~->Su6|D($qg{&uXdfhpt|x?;>Lt7q_GFDO*TN$a3xW zj&I=x`vAsauy$)mv5|ep#DI_?BqV6aoKKp4xqsR3!!Og|APi9VrAj_(0bxVjp7*F} zd9vH@8i6ey?fR6w`Uq$wI6vK!zv)A2crIXZ!9+(*vPTuap;c&73NB5n0yKh+4T$}y zoghPx-Cj?%M@g?u&@f3q9yqE{zU+445EP90*t5UVR$3gXf!|fW>jt^BXc= z*(kx%rzYH9BMnl$1J%hY1pXLpkrQvI)Zw7d1+yTO?jks_>fKUebjhezWrZ(d4|j zQN~BvA_Ak?uFT`M$t`DrWriVdmPjHYdmnT#eD*nEMwi){l~c~8{$0kbU*guwlnoE? z_u@LRY{5Y6a~uRE5b$L=plK<22_D)3#^VZ&i7PM9pcaM3VD)HtD)h#29M_>lbm%o`>62gCM{kC+Y^$|)}`VQ+Rw(iVbu2-)!mgX|^S%OOj z8+|0u#wR)W5i%=EZA%{_>$&^P+^Zd4&y%6XW#dt)qX?twn0K^^k5r5&5libU^ zDxzx#_HQo=OClX(&XgUrms&{{u;*ZgTcDf0;5w0&vgl5>B zC8_mJ6~RBDyjW|r5u@cXp_o^h<1yixcojnsFv|FFJ6CR5?ZzDaD96EBMJFCLFllvizF+n+N9pui8u;nUSNLBD<*BQo*a z28Q6Fe5tPcg{&SCBuzrF{ll9TgZ$1`>F%4V*)p<_i}j34to*lyLE5ClcvYvqTN57r_T ztXQZDNgqwj?uWW|fZnn*PN!~7D_G2=*^BqO9B7Elv4A>uDp+0_z0^;b?F2?N8Q_a- zKtO&$Y_EA|_pu3P$@zv&6DgS&WNzAgs__Gc_}gt7Itc!^pK%`! zZr}3Tsn7}DRtO=Vc~24-MbG2sz1N21P-ZeU85tJOFXuaWyy@P9V$sQ?CvcBrlOE;| zGaF-ZUTl?*PC%~I7}#Zzvs&#HVvA1OgIX^4T1^lRkaWpBkLqi)dAkMODcX#@uB5`|H zcJ(_X^IUCSRrl0OynTL9=Q8xuHwJ6&xO7~t))a;thnH9;*6Zh1kI%iz!M|VPqs|LCtWwi2 zGmoy2hFy%nc0z)c7B9%I6*fS*1VmcL)M|@=yPcP}-hU3%J^9xhm zat_YI8#6HNIN_$gap()G!LY;P&){Q)+pI3%J*pkbYJ-<9iBfFp_I91|LLPSoXWpyr z*zJ6kh3kxBnK~17j+4X6=n*YO8%s~Mtpsp|nE9;Bi=*Gl!v?Bbn_IPdpLEV_c8^Or z7`B4R>{L=Rx^+SoFzIP!v2mOxakASfr`ypvaOnMC=4HO&;m%9K9PKA`uL*4X&0d=| zi<>a*>TAR2)9y@<_3I=^u-x59Z0MkDRkqIrfg<`<`QJDGI1IamIa#HEDmE?B4*!0_ zvi%}o4F-}IPiWpExonTIFtKcmUuzT{A*&Qhfr7M&V(xa`B<#|Yw#Si7`mE*N$kM@e z$-5RE?4(3z@oLurt@46*%6J)E)E#`8%sKw#lJBKoI@Gj*F|({{IVMIOFkAxnnHzZkUXB6QlZ2@viFs(w-6?dJz> z?b__%Q&Lh6DXmxkC*Na!;WQ(3e@r7?)xi>Wk#%fxJ?|0+Go`-6EX}pHpJsAx5FRh; za64t}xWnx4eE_gF}Gi@;q4Gr(#zqd9NB~^W|flp629N*6n6*u4KB=-KG z8Iu}&m8BHLUteE;S=9cfIdH`ht`=(kt1P2e1NQ0ISk**Hx7DfU^IWQHi-YkexD@lO*UKPvZ!ht(5-Pl6xS6) z-dLG*+g@YGx5F(dsb@Tvcayhh0I$T@ezrKVA(CRD`ujaScz5uyr2BMw?(6SwHf1aC zMFK01&!0It@Dkue)m3gy2qLq-RAwzJ#$)-B8+maw5Lud$;fpMl%lT`e@4Ef;Ya?N9 z*Fe(w#$$nx*QSuiB2Y?w6Jk>8 zEa{MLO&F0y!rA^_b=BYB$rF2>p%Bb6g_$)|`Tg2`>BaDL;4&TA@ZPNYQrvc9cS<>b zLnyNTNaD#9DBG!z#2Nvr(%le_l;;Xv1J|8Nimf}KcJkr(8QB}d_76+S2_e>WjBS-C z8H#n~=u788Q=T^ltH$#fREqM!ui;g={yHJE2bR~@`He8B{8S@b5To72Qeni;=l?oq z&~3bg+vnLxeQS=nqeDj^0^m$x?Em=oODvPq+RqQe4Qgz2NA*}C0;_LIq!{QvLP~9$Ob=d-?C*gT!hy$7QwJJWn3l_I{w!F%3qUywMSU!4 zI*ZFIVPUSC)v$E&!JwCtoIHq@+T7kDanGhOItI4Wo(B(4R99`a@NzM#j=ZYP0P`|( zo<|{wc@WH3ywu+2b@_%V%wIsyJ;niujf~9mYWD&zkAn46rIEob#5CQ)s?Br8o8CISgSJ%q-=%i47+1r5BT~wN7EqsbS-CT_ce|=ozQ_dyzd0k;htiVd6@~ z1>J@uJa#76-L}UnN&R_s9!YMV{ZR=>k-PDC>^h=kDGnaJ?v?Gc%cwoGNeHEJB5MAg z_7cNRQN9Ab>an?{+n6F%w^61BzZgPN2R`je zdaj`Myr3JhPIx!HIIu>HDpON#Ja>ieBX;LLLvM zVI`G6PTZNAUSS<`-_Buh-+TL!N4zP5_5JBfb|fKOZ(kn;e~f5+>iL7Bb+{e$FL@0c z^|8|%8;heJckYjYwPDv=U~I*sS^~dC$P3zArrEpc&0l$sprnM2OFECDo#Bst;T>(! z!FVN87*i2OYbqLM@nb%7#n{jJ>1d?t`FSMyKHt=3PNz$e99=IUOLa2F;n_#gRBiKG z+q%&Y7vJ!?ShVtAPWH(+-f@1Qmm+Ks{j8|)h80$g`W76&pugVGGLI|`E9u;I+p+rM zHVUgdVj(#rE*MQ@l%iq2yBwB?899!~D_h^{cDd zKRbAVcJ|N2M6Px{haonFIHm&kwpvhPyVZU+^FySeTtl02+s59#%|xp^w4E(_9C(M_ z7gVtc=BKIXJxY`3eLOh&D+^Mqdw%G|$`S$znWvsfzG=T0ijm3_`Yd6fJMc{+aiM?9 z(kUmpFL=XEj+3wkqjw9{vhl5+~m)?&3A0C58Et^SC2P2E^M6^ z{&c7|ghL_0ZC!*bC~;$ApkU?U)H&++-&k3h6J=bN-XfAJE+P}tGmosr)LVaYPue%s+GsEU}FA4%i?p==%)b_v|I5~JnlJO2(XQ%>h zPg&vy->^%U|lV|MFb`OKdbbCB=7EU zVg+H@JSbP+Db@1rj=^n!+bHLD5I&yVa3&Dv3_W2^ECw?lJ_J_~ewcIUJFpzGgOabR zxiNhBw6Rx)MXT%4JQK63a>j~*26SC?|Yo+CI}frH|m&SELJyG z1nd2GUkgWWB6WVIy>_ZBCoEZ4L8>AG&r#R#j56(gW4S#C{}f<}`#HS5yS>B|#zbPC zkivlVv9GUBzSzff0so)X5U8}nvB=Wmj25v2A3hTQ<49@u2#_kt=LbB`HX;7Qje=bF zqafaBhWz8OvtW-o2+0fl!^oftA+odn^LPILaKOjg_&}N^+ihF`ZP4xnzUW*E|M_h} zh|SQS2)pPk1rb8CvrQ~`-l%uG_OoE%KFQ&)IJ6TmP@Aa!`NU+g{;v117Jt|gP167G z4+zZI+Sg`{81LRT>%$Jp+%C)iTeCcLc?etjtYO1r`+Ewu!6tp2;DFZvo^n414jy>% z?UH+IbduT)Adt1<@o-c9VE27rx;rK~O4OPDs#$OHivh`T=LE>E-_Yj{Qs+?;-78 zzKNPktNq0kJ7Gn=#8UXIVKOQ^UsApI#&*po6YEM$90}K2{mN;ue$#FKz=5GUa3P5! z=TYaT=Z*_K!^V}v(NcJor48;ZT}gZ5^{UAub|*mH>RxD9_AX{gN~rM5%AV`q&>3)E z@F>A~MuH36w8f@JYLg%r7xR)(zJfQ`4yyX^P zzcK)R))b>1)Xwwjr~M(A8cVbu$bU9JP;f$?ZGXuh>+M(?T3{;fX;WKRAs~;YsH1Ut zK>M9(Q6!y4OvLeDT%$RNs=MHp6H%Y>_i0dtrd34kIcAG`^3`S>g5i_yvLPxuNn<_qIHd3lFo+eLL-R8+uf`Sf^n2@ zZM(?N)o5zx5$yXjL#+|%B+N=d@WDauoA}}mhyD|FkhF_b#k*al;@ag;`4Wvk#U8${ zhD#uyDX<@C=%^N*?GUtaeLAdw$0kbcd4t_vUlHri9Hx#%KdU`9>2u_<0K`TVnA?d} z4?7^%c;AR_XElhD#AN2z%&XUJ$6qr9!+f%tQ>mUb11`Ct)LQGiW>oua$DyP0JF(K+ z2OhiVxGHD*90yYLH7vs>Qlz%=%z-2lBvC)LNk+-A-kfVV&`gS#O4Kad-nx`ZG3;)i zgI1#V1wzfREG-2isvTZ{v*lbIWxnTD;b>(ofsc1M3g&uG4IbmzWO3Zjxp{xb5E

ye1rGi&T2Wi##Rcidk2@Wk z(aZ38S!Z$>A{4gPUI*sawB-J=v^DCdjqsZZV#aPssSV_RH*6^??P!@FvrfaZ<8+6U z2UoDIxKIstO*go<{OyhEh=>lKIx8nEh&^vT(>mxPKd?eyh$B;PP zi}sf^n8q`=f#KyATZ_#@jLcM}2Aj2EDpn|P)?QH0_dTtc>*6Jy+#Ib_wouMD#+BNc z5j~N7SF;wm0x0Dftmt%ED82S=)xY%1aO*|eR){MBpGQ%N+!=Oihq+5hoIhj_KYT#9 zzys31ZU5b1lW}T4lg1bTFzegFlLkFGw{pR2_*4_UyDZOdek=u@+e2ud!Qp*P%-2Sl z+aq_@x=M?X=KwV*pB$f6x>$8zX8G!=yw87p#^9c$4b02c!Zn(4b-5%$Z-2KR1BdnE z6Y8f&YCZ*5`o!$VysdevwZhnykFIYl5#ik2G8^fEHl8h1HLQN?iXx{~?YMxpZ$7`K^YX~50z;M0A@A+7z^ z7=wST-S#|G>ZR}Qzl;`PWIQZC9%aB^Z~n2k?!0sVyZoPsWoCFw@0%tGT$fWQEEr-x zsq<>=QW`&O$P5rDWm}>IWHBcha?LHxB}FHCo&w=445v zh3(dEfC8mxi#sh|++7OAt!Qv}_uv#SUZA+UyAxcCyIXM&ESz?c-RO zW4GbW66|EN=yPW$VYfN;VFi~c)MD<3hozbpm3`I(0Ki;lSbetv7hs`QLX6J}?HjHa z1I+O<<7m;rU%!uVF%L{lepVBM2mHX`gd+zwB;y;5^2X^cJM6^cTuA6o2iODt9YZWm z?FXpFuXGM3zW<00OO*uVm5F!bWcxb?@H&(xXb}n;!n5FBW=vs-=<^~)}wc#C9|QZ zs)xbfIq#2)zgx`nUA@fQ6f_ z-69N%6f!tOqu?nh)X;jI*UR;FCfd5ZMMYPw=L0z;q7jG74Xu*mGh>RA(|zvF5C;qH zMej?>%2hT-mJrCt*MPPl_{qJY>CS3QRO`tLc?`gv3A=Ve!0PA_;s^AW9I0BuiHela z0MeX6n^TBmnVf;h+CoS)>i(NQF#wNV{DfK4VhnaKY5DlhlMudmhnfuxPnk>=yQUR% z?ZOa1xnB<003D!hX3-U~$K&+}7;K1j-?9cS&eIkUNZB@2I;uu>P9Z7lXxrpii-e)@ znbd#4t)4Y0@=72OVeFvch3?vOzgU3oHVx>yo|6l6reI4MP6gP7BeHlGIaIFJU(?U_ zaf^9Fk=<;V%iY8DcVvCPDzgiYbf&K<1_^({{y#D-5$Bersim^TX)d%}Dmt1$L;!#> z^EO11p}ey0v-`qK?bfFctf_13I$!@FOGS=1COemth|w^n;`NyFhIlw$)v;h|Q_~+& z?(8f=@G7Qcw?lC(+EK?TwUZYFDWgkj$#?f$a&Ph{!Mxe75JvOKcJZ9 zVmy-a2dkKPS!+C~fe=#<`-4J3BPH9xi24ZPwHo4Wv6QCqyV?h6a8W5A0A4aH0Aed9i@V0^OK?dG13^2HorRipB!EzH^EpA zeEubIM1zJ-dM`p$UvkIh7Xyak_`u$>P*)@!Doiv~Opdus5&zZ(2`SVMw>z&zzoPlw zK4@!SP|Jx@eR*$eXxMGYI&}nt-KF9S;JNrL?;5S1WB7%dw_*G{VL48KKI1R_E0UQvTf%ea%R7alT8f<=f0eX_=-F% z-+^KJjcpRx? zB1{yz{~uE9;@7{6tgO7OPW_Db^2Xe0c~o-3M=4O7<@_z~fj%UkL{j8=ELgOsvN|Nc zSY*U(HcurTNe; zse-xTw*_z|i4KbXzb0$H>=A2`nIiLlOF=k-N4DQ{esfLC!;u>Nk7WOf$DEcv{+*}; z^bHXQQJz0E{sR;ghhu5iAB2xZbVkMB@?Qr2R*v%TMs&r&6#fjp{5sb;xCo+)kghtRVgO z)7w+woT3SQCPhnopP#tP>X-xg*~|Lu9+Q+O9g)Y1hMYqe0pAUi4(~aT4E_8fbG5%o z@Pmr)W_D@~H1Uw_KpVO_;h};f^P+FUh}K6J@$Tm)z-u%m&>Lz;lnL zZ;i{!R4t22c=I_jyL4^7<2Liw0f+liu)b~{_Wo_~(B~J6*xS{vWh8YCsmt{sA#F6G z_^s|%!cr{B#BiGZO`(f$Eur^cr0&ko!-sPkf5?A)TcG+QQ%KWq{Q7phY{*br&2Tcc zjM&Sn)D7XItoQc3mV8_|$K1oCWbSBm5-ihhWNFUrxWwMUGDyKA&I0J!#@A_A=E2n4o z3xfYMCtq@`WcgQ1OB3#R*y&||Fz^^Y*-1cMo3+*m@ycg*e5S+aB6j|M9<1(GZYXj`FHZ?b)eMb+x9`%x8@X zHJSU-|B!uvK_96v{*RF+npH;zBUY+!i|pIy&{<0YqkL8p$_mMZ5W_1??x66&?OJ<> zCI2jA-mmf!kQtYkn}E|S6ghqOt#5V{TcoR}lfnW4K{I=s77Hb(^32(N@D%9BaETvH z>XzP~oo5@8GCO~~!_YmA5kN=!vtjCjp_m%K8>@l~RmuShbR}S`;8s8Xt8Es6I`5@L z-v;&Tb)hF!^QBB%L&x{*Y&XGM>pZ{;O&8%epon(mBkEIA=hMOyxld=8I69z74!qb2 z?eQkJUn)kbu_juqe%?O=ZLYeu4@$!W(71KAu3w6|2EFZ4bA6wV6D>YG0=kRTA&;-u zJR&|I1@o+}h4aS^8iLmqbbWam3fR}xS_jw2A=Hv5;jqma5rLhF0>0YB9I(%Rw z@P}tHmuVfk^^|?HmL|5YTXVe1BJ6W8j-bT^Fg&tfxwc=&~`<@rCx}XiB$IGMZ5EO zW#d3(BO0zDTlaogsrdB`&sfc^8FXiOAA{60;|g8(Z@<05e`*8(La);|{cl5f>a^j0 z3O1ZYH*dZbRe?op)=^jGE^a=ee4!CH$bMPB-&8Ao?Xa5yX1!kYHIDf6E4&P!i|F~k zieMty9%nT*32#I2V-I+$G&7Z5&POXA$I2W)Wp5AH@xvx%=?Z2@bcO!+mz7E6F!_#JU%s6^KG(R)ZB}i8xQ+Qjl^HAy$IpC zNr&KAlMsr9-fXob5Hd&mtYGsQnLf4%_zX!4Rsv2UbOf|MC!$Oksuns;AWsv`%?TIO zV`@kMBSU&jXBPMEG(v)`XSKa$&Y`JEp^ID*XiV<+=xtpK8MlKC94$7Bw0yUpvZ zx(xRoIP%H6scz)nW>@&XWu6gh02@ml;F)7~U{7Yq?jYF(!yhcBjyQ7weMe|C385yU zaDmV1NGv>Pp_5+xy`#!s-ALGMoG6Nm)B@u7KwO(kE)^|A0Bsig4ZlM)0Ozh5xv*;K z(TFy5f7QTtMT!6oF_l=~=OCXP_~Mvfn%whD%N6r?B(%-Ger|DSadGJ2PK2D?0F$r0 zHfMtS52*3@@u|%}Q-u09aX!Ru#h?n>6k3)xu?e1DNt0t(d6f6hb)5rcE_WULEj=M( z0OX#Wc0tGLE!88k(!Gr|ZrwpQuU}6p=P`1g*19kfu{MaOfl9n#&pSuWf|jEB(*V)g z`7$E`FWF#2Rrj(+{=~Xv*#{5)^$89$hb4}~*Qqv#XT{g{OZZib5$R-uB*~?A?ER{= zYqgD}>X@u*4>~QUQuL?CRRq8Zt0MpsO*v3QUEW`H2#q)znsShwp9OBI88kd=r0< z@7h&kqQ&0_f4bTKb};JiJ=qo@CC$Oq)LrChoSzpuyWh7=E-XZdJQ@;(u&7fg=U^dk zRi(tN!%RcG@Y3Ev`Pdkk5H{QZ?36Pi(X4-sc&pF%Az@sJ&y<>wU`g=+npf3}Rr9z4 z6YmGT`0B|TfbWd6Sm(l#VF9_aGj1Uib`mNTtzX@b#bn9gi64*H@}r% zWR?$mZ~BI|-`$XcRxYK55Eo19<5klvFgmW3V|M$ZVqHLPF2-elJP%WMHCt;LY{?)kp*2EFsVkLis`)bA4V|c%P^q0$5KHlNeR-yM-VJ*;+f$a;E_Gz>}`MM6w7r_bw^Qy?Ld!>#D;qZRM{R!aI*=6W@JO&;NHrW)MH z`Zm@&YW9(m)^i$cGX_B&3MO4{U3NJ&iEpZ>b+)E_POx2|x^c0G(rWN~_Pj{-ihG}D3u@*5 z+T(g--C^A2Y#yJ~9l7;6M~uNuL(9w6D+hGuw=_@~oZHruqjniIDBQuCyL~*24J2w8 zmtx9@`-R}R7oaK`>G`-};*HUyHAci>a<{`0DzMRxX}}BYJd8|SX&Z_9dL7UD+e1N4 zWngk&fWq-GADmR=vL=VE}PaW&~9b^i;RK+_X>2owo)Qmu|6wh^n7yF zzb$ae`nxg*8Cf6H>h?HjXjW5wi7%pl zX!7eaSEvV@?_N~r{|(IqD-r67ks0vLtGPPg_MB8k4}3Xy?IHIU(z(HNS_-BW`d+RG zq%LA6gvib7GW|$rU3)K&loHLKpgcr#gA@H#F#d$&=*(1nI66>}7Dyw3H0gQoDMB_> zG`$iK3X>He@SxvW$bwv#kV5 zueVdh*sA+G_;+ngk0(g+fVe>Q{S(HYhpdeTnf3QGy3QVdj#g+T9C7Q}cnbB+>wU#z zXO&-FVlZIOA$BN?+gv92apUGkH+MAK=>rI zN1SP8)tQFUdKpl!=(76CY)U6Q6iuoCcDcV@_as!71h=Doq{Y*fILB6d_qBX8kDqY+ z#l&|SIp(cmCqneqL*lUA{KO%F*^5uA=HRO4x$T;ZRX5ePW)YW*-WFw)?agX@$xAa7 z6G^Jj=b|>my)Y}A&=`be)td9}LZ@nfBA)|d;D~*5sx(?X!|2J)Gb@WhukmNiF298J z1?@t-5Q%V0jr7ECuj(-;h9<+Q*g)iQS%yMu0=$#Ti6=!){UKFUWG3d5Z&R`BF zIvcht22Eh60W2XOfAD|wX|Z=?-8lwbd*m?xQ#L zX!-8Rb+R2(?Y@6^NE)b$K!Eo4XF3oA5zv5Z#_7CGMwD$^zo{F$Hmdj4c$R>Z0Yjc- zHth^PHL3?one+D6ocJgAldGb~Hf1gds8;@!FymqEWLnL^F5x&p;ByOFd8M2`M?j5^ z`jNb3LRQQ$g!!VBuge=KsqWffF}Qd#so&N47)h??w}VYWy!kZb9n?GZUSxAgd4~kK z-oV>g!rlmyUj1e=dx=WReR}#Y6!ZG@$#vNocb#E@cyi-q9k^-AsbS{VdZ+23qTP~F zr)gi+ak5>+W1z34>3UaMoIN@%RtIN>JJy~_+;xJc7^0MFUcc-6 zYNN~VcIWZW9*yOi%zFz8DzZ1%lhr+r<|gD6Xlz#JeQ77MMJ`_I9XcKE!sS0CVG41( z-1|AV#B+c7d~+B(NpAUb>Em=$+O-3tLENH*QaEbT6I5bI%B!^nIhZ=M&9TY<>ft`D z%GCZDvc9KN&vLezu8c)U#Q(d)PJ3^|4vBuo!+SMGqld3*?>Q@RzQjr8&Il{uV3t@nrofJDR;Onfa@&~u)Z2UugIkNA#ME7rV2 z=hc2{Z=D^v@a<(8mqEoa78-FP$v;!BrPmBr#6DJ{pz*y6P1mW^l8f5wqA23fRX0h} zBR1Q)o1N&=-hh0y<*~oi8l&{@#`DhBEb?8Io=!f2C4YzaVi{B8IFsET;=s^dMyqZG(IJCi z=hjqd0z$-V8^hBbsi5ZK+K}-q93X!>#g+_6VH_7E@zhMV`nEHzupJut%WOzg5TjfewI{KTXKkB>Io8yKKUK!Z<2pL{0h7nn676z8I*d`gubwRnwqt`-M~C4_&%9|J}3M+NHxPr9nzWT&vk79xtJsdH66n-3Z-{>->=7Z*{Bf*<>v`ek<=Gf*LOZlO|Dk)ScN97YkAo(ZXu}O z3Z)6JpKX6{Eb1z5e7;C(M6|O8uo9?q%|nyf>lFZPgBeUGJQ-bn3?lM(P8RCSFXnV`KD8~M4}gR{&erjbO*uOz zm~r?pUZ@iJua;Z^06lMN?-5=elW#^0uye@LvO}}K?ZG9;Y&cjOVXjWU8xF{|?)JSm zUor}bDs;fKvrk*J|&eK*eAR=*l(n#AGRmw!V_BnMM^ahro# z*V_?6$epro7KFObv?3fvy>j&-$0G<}P$o0ZxIX7VcwuWCXn71xi`Qyycg~|@`1?|Y zd40#1H?NM3+e?3+T8C9I_9rPJHXgs1L2}oRlTu&?B?If|H0agfi@-(-q1Uy%c^g%f zHoKsiSH;+m*#&0T%k(xwnFihDRlC&Ji{NDzbRHcW``!JL8w_$GVLtx;%73SYWQt>> z41U^g^VrwqPy3A$J9mE2v&)H^j#Xfry8W}$5E(8a;D-;S!29q9Y9i&uhnXd^n9%0B z-yaewsy8>CALoHYrH~=)?PYB8mZQ19^^cB}i*4EQ=qbT%VL)!*cyL1)VZBdW5r)s+ zr?A>Tw+~whk#?AnJ$ga&w!k89!W_j200QBoRqjs8(v_zDZbVWA$le($#cyZ3n4VeT zN5A@tyNCVg18?bXmUAu3R+MS*6DqF>9$ zh3>AWRRaq=69kvPMhi`;4&J>-jl^&>-zJO8f7u- zm7TBLx$p~)rIVizSTn8LAd$^le^4Ynw<_}i4J8&3y0kkc<~0+WNLH*VJ6~{ZR%X9V z@&2kkYPQF2Yn#QdP}TQh5~7b%_1>w|Z+9I@DJDlhJf=IDb_og+vxrq9$35CCq{=Y+ zlqzK!-@L1`k3L-!l3lfawH2>6Cgz1f%;&Ww&%C)}hlj|An%SoUuPXrn+$FhXL%x_% z9z=tzE&D9GnmskzA?cXFYg#|(%ZVJj|B{E#Vh;&*T&L|_Keg&n)F3h9;tKe$e>*=d z_n1QO4)_UCEql|6s>^dQkJ?z?#IUu6pD#En4Psg)q_L57w|jEpPMSht%fHy`Z4H67 zN>Mq=G(t73g6FM2OZS@Be|l%ty#6K{mq!PPfX~@7oYS1wrVO2RBGSCcQ7Na-2vx>$ zyLQ90nzmfp=!^tb8gL5~9beIRJe8!hu#TCMT33fnA3j3N(*+@|peztDTf|XVYESrb zb#f!}_cZd{NPxY&?0z@b$y=y&T48NI~#KytVFO$@E0KwLsw2d|dql zcZ52m_{;4d>*3u(Z#g1SW1YkAw5#o_IXb`P#O+r|z~7J8p#xsCjz~enhR&XhGzmRh zY>pA%_d@=@4VY-EI6$WdCcB`0_>&#iw;BgVC?#-PBHkxd@!Q7F((WH=WXK2^gcCqj z>pkNAAcB{R(R|-wQh`M-*W+DdGCgI#y6;D)>HWEJ_qohG(K~@Xxo+pao(JJCx)-85ixGA9OrXXSLCtC}#9sL((WX+5hG;*}&&{ z0|fSF!vox?@1xA@3*Vc{>evVY05me00xrXIbZh3Kw4Xn`f7^))T&BB=NvSp5C}1-Z z49bgCsQ$~JI?sEEvoFSR7m+uU;A;s`gjA6oZ=}QJF44b^H;edsO}m~`kax=aEpERT zzuv0^y45ucd-NtEd6iA}a>C@bvExP(D5pZHLw6r9T{g8-JnB*L6L1|#!1ulZHL3)m zae$vrUT3y=fI|UZ?)T9#xAz}DmOkF_q5|Y`2-buo@G8P!OzO-M^)-jyvvsl3rd0c2+uV*|0nbamcNDQ42#M z5OYAz6~IW#8l06)!8&{_r)TnV^EVLb7WI~+W$}5Aw|bsG_pSF?4ygG<3%}G7R(&{? zY%m|5Pm5MOuRgab6PXXJsn4^zj~w0fa4Wx`vDhtpK1)8fObN2C5uz|l8*|>-QP*iA z>Ffq2YmluAik$iOq|o+TKD9xAHDJkFVgO;~6@k z9~8bccnL zC~2`$cIVbNm1a&*IIU6O$XSxMQWv^?Wsuu8ZFj6(`3?XSF#EJud%Ub}RyNe2XHkG2&(uYPsP=``EvYE75&SbER7 zOJW&lsm)m9@>;D-wqGyv7?9ieJ1@KoEoy4&BjWLD69mnsi&S*YOo=Twkany&#VXd~ z`E*=?CnKKn@uK8V-S;vc?FZV%k#W7iva2DHx*-TWRa}^BK09Bi>+k(<&LR%nwi}!R zZt6wOPmS46wS#7)K{uG&`m25q&fbRB@^bsf6-47He5j4S>Iw+jBLfPy>TWl5fbJai z`+Lkl*=3QE*{{g_mAc_;@opU>(g1*Fv~`HA6c%@)7@M@Hf3}zf(btE@)8`xS5w~8K zNW6}RdDNH1stjhvX01e`Z<K6Oj;PJ8iZZM&1DvU@I8cZfaScPf?!1(*h#n~ zIeu|fWGmwB8GJ2A{f@5C(amo|#>89BC3ah@=`?h#T)nxUfl8}V+ zCe|e5HcBJdydIr^JI3AVrbC9?1nKA{D?%gW7k-Skzpv zW;kWV_o-`Yc(VQBA^#GEl7`V&#p$rP4}Znn_a?mL@+J!%xl)h}At>FZd6gc3He?0h z6`sqblkBtNBpG6*kb!;1eEY7KB5Ck|IfqUQ*@XTy1pR3df6=h-fYCMYMw^2d`hB>7 zaZS>KO_#RolDqu$VvBT0dvz4Y_oc%Ps@D|Cbiy!ZjHOU&fu8Gs}>=c{@S`L z>@BZa!v}||Cupo%B zc+35B$ObI1FbD;0P!$yZXM6b=N%LMnLK$svvkvH&cde~oY_~Gjn)OLII+}sF?Kxjk zN(!BrgHg8obfw8XHgw0jYP?-PS1yxFb^_M@lY3rmWvRXZOe}A8!7J45aLkLox^OZD zbQ|6d``b=r3!6n0mX}VBpj}f>W{h%eHE{r|k7=VPu_*3wtOGFABq=}1ih zYjRpM1*Q5K`+Brh*Xz#%|I6_v5Ha?RMHe$K!Y?=#$?};SUxkc=k%VS^qY;6qkBkZu z(P!;ac+u4?yos}sAYkShmSoJwJBKxQN;hYDxs6)$?&HbqTHeqYMREvTp)$gmI=WqL zesKyjNi{oLn&K%v$qh07XUpTm13o^s+laP^g_tZG^{>z|Cwg`V!an1ZveGl|53@8e zzpn@lRnOKs8E#U^4YGu2e0y=cPg=|D&E?GWyX1n;)>h=~*o(G$i!ze7i~{_3Y(ge5 z+>A3=%8rY8jV1yo?gpb9M+n26dfE*(ok%(Yw^fbz6eoJZr4N1}QzSdQng^=MyE{80UhV_Em)Uh;g%dZ*Ri}gQ=t5q=p{V64g+Q_q*O!RP7l7fN+DEKb8j& z#UKl5-Id@YXPf*O;_De5RBA@QAK%qne}cy-dAWo~RtKo5g_C4NuX-(v1&^p$cBfN! ze1(Mav5kFvgebpk=Oe7`>VM9cET|b9iGg#5)e{H_eti$1ODHQUQ|GkZh)CWKg${-A zuQay!?8gID1%FjFxhpR1@@(qU9gT=&%^qd{=C$9d$Hs==WfoQrFxu)f9>lmmI+<>J zKrVG$ueUr?N^*H%qU_!@?;!(kn?YkumY;!R(>!Qb&RZ|1^vp3=g0aD{})0`JiyN%WWRBUch2@d zW?>y1(Axd$!czN%9jUJiBX)pG(ydG#O zZ!89gG`BvP9qprSzp`zc`u2&8OK@y8Q5?B@N!jGUYpd*={3o(>UURX$s@h?@-N1wW zLAKVql%?+m_^B2@Y+?JDWPelJ8q^-=)XOQ8EHw+?=7n`0s;~B%vhq2RYg|s6#(%oN z7SghRqGZB5eD>fC`4otB~r(ys5TA5?cZM+IWp3NW4d0rpFM7_SFY|(2?DJG!+IIJ>~TRCBH>zp zB*iQ~`xE|WrQs~-wnGx;sYAhMMMJ_NrD+o!o1K<5D%!wc`sRX({^u%D>%_lpV}h*J zvZ|rkaR@e?FP)CbxMyv?Rj~>h;rQ|^T)Aw)Ty~fGr#5-5sKY(t^HzbA68P za=|qQrWw)rA88^yh>1OY>mQfls7SrN-rlI_O82l|hrg4`L1oL40=OU|@Q_3=ii3i$JTv#qijYReXwfFcLYG%04S^I2hS9JkGu zdS5zRg)&p9#?nn%<6K(h@^@wXf_#F5e7)`gN(v4v5*GAj?6Rx3xwZ5`w?kYh>A9DG zh+G;QGP#Fm*P-sKq__)o01^cJ&q1M&eNq5G&cob-hVo3j6-rFZr_zK3>3uv1ij?A- zBWjFeOa7=c_BV|(g$87s3jP08TV^Wv1C!iK!lI?!K3bMVlncg_qqqidkCBR0tWO6# zDQ0ujbyX`^Tt}n)YfLspl%T0s%Fg>E`ya#QYgx5fS$_U}#OTYqN0)ZUc!jmy+@plY zG=R=d2X<(`sVOKsCW-^9<$O0#)%kKAMS578?>&HgYqnS3?*#X%z(q|ZWv;GadRu4q zr>s>GrhdN&oskQwd*CJ1Pj(5~BOYu}`#tlQ0vHxbtndln&rDT_!SQ2&{iws2mv(ZF7tll!m}~!Q=rYmB?)g3EC$(|fqrCg%F8~UF?)Vz~zBuLg zoB2Wc|Bs^pusiS ze#uGH>e}}KS{M)&dgfhkvM)q<^b6KOS-pMWdoU)MK49&tn0h_eQnFA^XrrWynbp1< z{_%4ol-50~+Szm&nJw({noQvqH_)zzLS&N9Gp$D0#h}&-(pO*Dl_6rPHLZ@z!^-p> z3BZS}L0&bdpw(uZL3{Rh0d3LgI$`bU-nX_5<67@(EWgvZ=3cFOqsDH^W!ENF3A+*h zylYA1ycVTsK~AJ%@^`;JxfIIBb!@12QeV0nGu#Gn2O!8moX^} zc{)j<3@S*}vO66bihTr&;7W_X^<3@y5l<0j^w-o7Y`u7t3OhQTK9iHJ`}l-UzHI)> z&Q4RO(`~of%RpuUsemrVfgrm3tff=OO*|{;R-7^u{fVCsH=fxmnc(e9l6_^gLf19a z%Vw&_KzQwu^9D7BEtSO0A|KXY=?I#-V?cVuK`Sk1?VVABk^k<2`C4n&U27>x+~~ zsl-8JiYuU_2@CtUa@VF&m7YAO{1>3IJX_n?kSwtnhFmXC zZUxoVpG)JbapIJf?xuT#wo)BrXNH{m8{MAl_jYVTtUUI2l5x^8W~3%f8!8}9-lw^7eo`X(3gq`cSe^XV z7rvZt7n*~6+PkDrj)IA zy$0hR6EzBKsAeBrGY*CIiq5v@TlZxKZk&j!#?hYb^u3f%bqLnb4kb+kqO(7GX_n+iK zCY7zbfQ$*N6U7-fv82U}Q_ZUFJGc5zbgNq&46!bTvEMi<}kad({FAqEsXd&CQK2!6;n!TDy?koyL2 zRqTh2wawd~_YW0k!djO+KfpW#mblhI32TK0(^B}ne9ph%Brq3ymJ5I? zBo_4eM9$SE@5sKvePU3cGdaA%%>E%Ol=qysCKSS(5~-AZfT`rt{Lvi)v!2cttu+5< z;W31IiM^C^d~H^9wz`BjO9`sv>1y;I0I*cF*RlFjxFu`0cGD{SMZWlWRz;9U3Rc;m zZJ+Vi?jo8r8HWY|K!KAwG=Ytgi#<5VD(X$WBi|g3o6bEE#^J%d121HJ6HLJ3>oUB| zV8%>YRQRyD;ye5A_A~=8dPBsimzA8}h~RK$C(Bt1P-BU7i!>riZu;Iwmsi{jccExO zUkYD|4K=FFUTDD08RrFGDZL9Q`YSZ^L7bKJ;hs8lXEd0O?ahl|t4i_S#nbhh;S~A& zZ0Fdh!QD?Xq@*RGA3py0;lsXS)6f?{{R%zFzZebvxy(eWfSS!q9w!0Tx)ldE8ike0 zJDu6zpfMQ?Ur!Ff`s3(s=kQc8=Q|S_Y8BSwMs905Z`=BnZfkI3gia*2A4kR6*#weI z`hYpu#D=Nso_S}Vga;H*x32$CeSdgoz6x2|_jYAd`rVzE{{yQvdS~A~mdy0w%Ah%q zmVRngW*-3`D=l2alnN;#@BIf>Kt#jaEQ*!UD_kX$#BDVHbIeaHgsJq3&dX_WC;q`t zBYR>1M`xnr;Xr1$D;Q&SV(w4_M+vDYp_Wd)zaS-Fu1zR@xe7nvzVWXu=K!G1?PX4~ zEG~shX7y2;IPkpHmd}}Yl^)U0=*Z!WIvkk46TZZJ>ffwIR!rDuY`gu&Yd!d^JIrGq<1n^_w7;RWq>b~NSt`3@45k?Oa>gIeBd3}kMzeygmY zlZF3Jfl$B!W6tXP_`KJQtiQ`Gzr&1hWLD_o2j7S_t|+7(cV`Go;67hD7|*bZz(u|q zHh$(@Ihr6D^al}t7oLvHig|UY%siuTadO%*%CjoXU-Pq)rB8ePd*Uh_-d6G*?!Wkq zXLQ~gD~ySf1fO@%AQny}yR2k_!aju1bCMM9%jOsO84{8`I;a0P$^6U#!+qa6N(#U%53@EU@Gg9&~RRVx1Dx;o+uCjgjnl(|V}<=<4r z*-MM-sbX(Z_eT43Y#dsb@;GI@WS;ZQGCc`FmPHw+3{`$ymiepaQ$DBg(cEfIlVpJTtN|f%ZkZw zW^xCGb)jJYJf&aq-*tW*9Yr`l%?z%y=0f14jruXqP1qV>pM?}XBFgt_&6k;p&Tl08 z3v0Ga4J~)oza@$hE5&+KVP4}9vU8y@gu5VpE9HSzs;}XeXJRS|KJbN z2Ae|T#if+E4*{0je^XppifG=tc^o>fkD}X{yAJz*u+RgPld@Y~CgaFBeik~6-k-NW z4XkKX@(J<{Z>CyM&%Kax!9d-LLr!!ia2L(N-y`htv#&cjm+ok0tX9b0utDIe{#T^_IW{7>)|nJXz|Oq62Q$Y)3 zj=SsxfGMw?o4b51JqR(f)s1IR8c-lD8rl&pz`qfRyy76`j*i!l{`#U$(^v^vEP4( zH1QW7JEihWdt|A`iRWn^YJ>)0wY=rF*!LTRsxPz7Sm zXLZ*`F}nJr{kJMDU_#06&hu+CuA3IaJJHwJlS3AkeD!mvqyK>T5w=bw3kkn-+Hew% z-fD%%Zip7jLx5Yl9Fi@&a<-D~Pp$)7Fd-u~l-igqzw54lPm%}dAEb}~`e&&TIW08- zSxA?#bpe0b#w>QbW%+<;G!4p;O8zwzh+SIR}Iy>kYaeWsV za$w*~(5bBX5jrN=AwG_7`_NXy!jQ5fp>sR4_V*!!eNHX|s zQlU_8xAe$6-1H=v5zr(x;xvlS=&9>@&8{~rHWnu?(HoeU#lrc^ ztD@7uhm{ymfo_pZ1{U0Vs|9UdYT{^^PhL`=|#QHmEwz=E6>T{-Z2(~w&^GC`=kg#_VHaYk6 z`n&ft#-#OMgL3ScKLEn}G`#II)Grb>A^p|Hw!`DlBRMjK&x!_8*iJosZyF9uiZR_! zlHy%MdtHXoB!j8*eqJo@A=9}0A3w#WhUj~MN}78-72xN?wQZ8hlMS`t&!7dHZ#dth zx+Q*QDMspG00CdNN#31` z4-KpC(W{ANZEqZQu;@0x*a29)Oo##q*4^HLUF-(1mN;#JoWJIMGy89g2G*`W4&JLS z@wSjVSmB-HlDq~!a`!T$c?^DrB6t<FPc&q)CDOX6UE-zjY z(Dv=BV+>L06TFA!H^&qvZXUqWQyYQvTEScz_4(@nFU_=15xf$qm#05_M*RV!o_4_P z{5=DihwzLW^QI{T`ByqG^HHQ-^({`QW?M>BD`w1JXLaU>(_0X6P&@pf0{N?>hF!wE z{YQ05Wa6(%_DmJGCGEFfD?YYwO~?8gWx1Zm&IB~9?sA}J(U`HAH^)AP%CNx7b@>H7 zOivjGFu3ieS&?w~-18+nyI7JVQ5{`eEiR!LgU@Ge!zT3NA3ZD>3oMU9+G8k*_y+nU2`y$-bXwiZ9-qd)KykC!#{_cf|s9@Rg}K4y$}BR#g{Uk zBa{|u=p27$j@v0?H7pDO{If0>D#rLlE3|YIMkaqzxJ$GdTw|CiR)!KIgPF7dTAHDm zNXytm&LI?}s;Vy3vi?OHA4d>}wc%OYzIr^3I3xir(~)B^4YKbtdw$PlQ3}>17e4Bt zCrsXWM35!LN&1&R80sdBg;G;_D*6DvE*@N zQ7r!cC2`pF-M43BhvB`00~3e#%fUcIRQvt~!r1f!&s5!jD);~S*;;ALu_Qu`#?0%7 ztx?d?6NPTx8vx}_*HJ@Hij=S>$Tr%_yHiq*UDgGIUwlbvxbFsvi?MjvGkqIrW3x)@ zoNPU5Io`5{ke)Ex`{tXsJ9zTRpB;l29Vna2@1IY8GaVg4n_t<%*jZk(W22N9BtNHq zfY&FkpS#fCd&Zox5zSjiEB-%py=71wUAHzoSb&58L4v!xyA#|Ug1fux;BLW#ySuvu zhu|`}ySvLb_qm_*yywq1)ipIW)wOF+PxsnuuXRarzQr@f7dQ-B4L^J=(f?@O=+W`I zD6q?GJI9f_jzbmYEo>fOB#EqUt|>bvWhA?k0_FLb$dp|6jK(V;It5FEHbzNZbC-}N zw#={0u-Xrb0{>sGdPmF(OwE6LSNBqfC6{a6SqZd>|Fp5Wp@1*N22^q;_d#N1;`NTf^0n@TMB6=Jk0Ybk7x`a|q zU?To>AIQ^+DyjqbxMB#acLj#(c2#{};Wg9>N={}d9Q|}u8!F&H3=p(m1Udxb4*Upf z30%y(3ntXY{HbHpk>{|VZk-!Zpk6s#FpPi3OB38gQN;oCcwZ5>j#nw`0ZHbIo)( zgD={v?&V$Q_aEE+BYi&A?`Tjp_X`;4_q704KXbe8sVS^PUJa)^yf6;*EMAMS^bCE> z7K^ZhNwl9TOnpY)T~^{*b$!LdVYmH^^9)YO-hUkgd z4}2!mzrUG`23LP2q#TGS7L;rlbA|8M$-m!?E@#AVJ0*2p{p7zc@A8yQl6H*j{A1Jr zS~$j%Ke$h_^XVXOR?d_Eiqzp5uMpyZW)1eND=wER({`YOr-s*SusB+gR?9fLMv#gf zs80ci^{wc2>w%TT20@@^mdUk7i-A!@B35R>ktMoxjP8$-wlkdu zej;Lf!VahVtheiEH;#RLBA2js6~s*JGQkkH zdVjU*eNy->O3u?{?5ngNV?Pm7^D8**oQK0ua4+-L!TFZut!m8lF^Wn5q`=u`D7Ldd z?B`&+s;o4WkDZ$Bd$`qyCc3?atE?23pX?D(p#B-Ziz$W-9kT;1L>OjO6tTxW>GOIY z(AX}Qu2Fpmr*{l{5a;5ohFeizUNIkh*K|l|2LKe^NC@TrKs_UAxBY3>Tj#w%Ay{2h z1$~3))h#hLLNI|Uf3o#w$5yA|fq{boX~oXXfRyhSqq3~Y)zNv)Apuiud~y5Xuvm)S zU=mGU@u|!ajFx#2X!18_Y;EnKeWjcBRMObF@YT8N!ipZnM{VfA(dy-1`yL*BR9!=o zRvJw^SebbW^tZZS5Q!)T72vl;x_`>&a0~q%c}q4tBWw%We}^-~sAJ5)sf8*P7b=br z4!2K45f_dO0x$$0&;#GvtC^&{YB~)c(|B@kk-*|ZrCaFtqntg1RkB_Q(nGAr0avh} z(VCDG_mLoEi_{;CS!q%(a~lzfw*5Y?bW(VaILb>-9;OTYuApTq+Sg*{F1>g6>nX z0%a0&ZTrBtI5a5$+!=+M-TD@bW8Ea%nJ8pT0(U0HLY7-aF2kw-GO9?USbn^Y@&K=T zn%)GAn5FqQ)Fkdo;pZ=Rn2qO4O&3vK8m@D`znnPfr%UD?pVgPS$^Y-#6Ga&zu&Nej z@S742u~?Zn4&0{+AOzN8;9lR{D5CB>WSHn+;2m#L=)K)U$_rrUQviBwj?bK!0f4Nm zwsZdWzUf)BcF&}Iz3QW18`tLn7!Bx8q4IayUX3ikk=c)@39Y_ejAs0fsSVYZ?!h+@ z%ooGI=qvZC4jqQut10Wi1EkJinh9r?nB}@80{U?tVRr|?#25Xmb8!@@JY~6yFKOfKJ7kKodC<}epAfIck&#{;|KoB%aakPcMG}pa*Zg^qo~e%k82kKygD(1UJBt?6Oq{%n04_jPz< z<27&(>?8gKtP-r#WWO}+)cCit)X63D;^>&Vnv$iCqsE-Fa5oEHcUH;8Ng3S2eLi&# zE*x98Lbbc4G63FAS0yH9{m)UAhz7de+kd$rcdL|X&uak$;^5%; z@`p`yabqs`Gv3R>hMto4umEWP)23In*yNs5!Q`Tq88pCN<9XaQ_OF12k`$+z#SwEl zt&a~ak|1*>ovi6MK+eYEP8apeX^CZhyGHZ4;VD}UKV$0GZ`EhBjq{*g8DMEu&e?;*9*tjh|SKCe==>hMF2s64fYi#JC=_eNe`ONgC z&_p!05@g(3S2JJ@1(;TTyGpxza+&atKFLE7i;~8CTryv?=#an>BE*ZbG&1Nqk=r^yI|HAKMYNDXdwfYMi^D0Pw5D z_Od=KdOiu*>hX#?!$X81aX=86SY82#l;K-!<-PE=cEnp`?8?NN`v;9RNZDCZp*q{* zu|95_H=R!Q3^jv^n5uUmt`lehJw?^o3c<6yaqn*`HT=P#Dt1QwgY!dxh_Ii8zTXb# zreHjZrhOyMIPWi3NlEyc-!?5GpKKGxp;%?53mV2&K^OLMN@;oK8E$E`^h%`|?b6+= z9$*yU45@zvq7bl{gAUo_oX1j~cFgAnfr@Gt^YzW4gv;0S;JotV6{Mv#=?qb2f8Efx ztlVNUg5&F9_7QF=C$_?=iB`d*27DdW)19;~{HvM@9Q z(9>-9bQ_%_prLyJ04M{uCQS5b`P59>;xBhrx*reB2=FQ{?vQRF{i?2i*nR9Yy76mG z??VH;97e9janw7y&DCS)Ti#BZKbmMkp8=cni*4Y#%7@X5KQ^FsZOb0Dp!`MK;C!Oc z_XC8X^_kN-@3mL~Y3qTs>%p*6nvKjUOof<;vG!oD%OnzX&ZAp~I0E;1P#$lzyxexZ z$;zmGGZPz+@e*C9iz8Mljhl3RQqi%kMVXtJW;Y!(B;LcT+=RKbGxyIip2R$RLf6p` zmONqjoulitIi~!#JEc?+$J)yvx9b{0bo@9r5%IfWDDh9apm&;U6+zRM>cNN?W3l5H z8ycxJM=kG~?osWX29EP}9Ww_PjxVE%%Jn~9-?X9+BIO$%OMeu}|7CPP@ubfX$kGbJiq1Q3T|A_x|;s9p&$dxOO6)J&Bx9dl+`X)2E zY%x8x#QdHOkFsv8Z+{`HuKq%RSuc;l-J*CRcQFy47?91DQ&H!hk2Bz?0F@R_XXy30 z@MH|wc&mj>$Okkxa{EBdX&yz}h&$M=4$m)a12DnLjp^J;)#XMwI1Yes0N5M?@2PK? zl$w=LP%CuFw~gU96g# z9;EW}UwO2&8VpJy9KjW-r54k%^;Z%z8lA7IR_aw&aTG&GyseSl+O0t4&T(X7_S3Qw zsi>&3i4EPplA!g7MjThRr7$>#)TF+14Z#MOC8YgN6HUP-C;wuCaX1?o))+G4pwtZ za~CJjKNefxZnq+&>glQ1wGi{#OCNj82y9OiA1&>T97?&Uh21!d6;!B>k?b@&j(_p9 zuPZuv&o5`Z=4)wXUcvjvtoAi35H zu>~Krll*y&y_j&YFc#%Wv0GEmiNwb(NdhnqvHN!3v``Vr%^XzJY5p+BeTbaSTCevx zITx-cC+!!P%_VR7$h7i;bI?B>AJ@^Xh3|5VsCCO;O>jDtX_Ub?x8rUgf2bg578-Lq zU-UXOtfyl9Q|`U?Y%>tO-nG6aOW}6LIZ__*mN+O^%sLDjTAp8@j5p}3x8CzAJL&&j z!)jOQuwz#4D2KKjq(AE21g=k_7*hV_(N}tQR?l8+{`jqIGPUgGTD9i-_!=COHWAX6 zzw*U0Kb~dx{`s|!YeiOWFK|#L5)^36$1}9H5vEVk;Tsw?%S^E zvHzn3Ur=SGEW$YsdPxgEp>ulLaYfunF0`My4SnSW9+&&@^W=x-q0Dd0v5O5aP7)fY zjjBC9h(6ez`FZ+_QX}!C@76ra<#0Bn}-qQ!=&z(DM zF~E*|6>e8!^Y!!2wu;)*@aPu?_ZjARY7QTdL2Q0ocd!BksP(Bcv+VSgP;|_!JT|!h z34>mnqCgf4YcK!G5UFZW>T4G7;?&Q@!?1-b0$_`9Ixi6ky+(Bbpnp4BI%2uxwjpSL zJ5cz~UzLx@Y@aR$%Uwp_v4J0Z_e2&%1f4G&UQ>$&T~J@xGjTW!%-!CB`Lyg*(95*P ziRMSsMnfb@%CV=~b_m#2{OyOcm6ZwPhs#J{8we11~%b zhvABSTva?0=~XKJF-fmlQ=bs-^**WkDo@&x-}~xg{Ty*L??r1ZO_Bik{KQ$wC2%2f zG!R3iydNDgpRv}gS0>%=B@-|=JwIb+gexcX?cs0wh0Fq{oE@EF|MSWyLzTB%{3F0qbmkSyfv=%eO{NV?fdUfwGMl*U9XS&e0@6F*|8fu!&~k)`bceyLA=_c$eKcKw24Ea{e1>n_u2nDNSE%Ws>!|L zYR9WFyL>u>^wG_MZ=@OVb9{3tmd|_TbOcJznck|qcJlnx>hv;*|6!D-U`0mbEGoaU zzBPD?{X0h^?CRCb5J4x|8L#WMVTzjAlUMLPfxyPnhV}KKFxi_8pR1NzX1LtPte)Pl z7I2_j+91KYAAIqZzP+1kKx`2DY&Lhkxt9p6*mJief_aUysGQswn1f-W1cV!w9z z&I@r-)YB`W<}OOMA%&0(Wnk#Zyl-N0F)*)s*bcJ2ig( z(wmtvQX!vw8{_+lK|{m3^~0{yOis$QZr)IQFPLx`NsI^*iVz8()oI@*!Pd*rn;5ia zbvIpxMy;w~xIH!flWD8VF+M&Ht?IV!UU!&B*N$(4PDxiXFyt#f50^qI;hqva(P-xz z#VVWGt<8;Xq~yV<6e35B1xt1Yr{&+*m5a~C)x2*(<#)QwC;*jrAT=REV3G0fvDkYo z$O8P8_dfIksYx}pg)GjsRgh8SaF*vo#;L@H|Ha1y>inNyOR;j;Y_9LSOa6(iua8eP z2KD=Lt#?fn*?STpTl3h!0WO!yzHTpV`z4B|-u^0>xhUV!s`DMVqTff0}GZo^$Bmq71 zMYrx`UvaVk8TlU)Q1lQ04CE?5!mm~*b&O%yj8)ncMda zHZtVVV{jG@3nS;@t$_w$Og^skay=BA@S^4U4DePO>b&-JmyX6^^fVgz zV_F?gW>%h~VT9}W@I~aUd-QeK%8b;II$S`1FfuSU-|w?($hk!L8(7-Sf3*|&rbEBw zcuD~XLm=VCh04}W14SLcD1vJY9j|&<%Mb`_uCcuWu8WrzJN2kmh^h}Gx0oTNRJGrP z&tF%D1ND45Yf6qjvR<4n!%3w1*Et>HHAPYJg{H*BrZIB~C7Ndk0#+^Rw~lk*-6oKL zDm!~Nm=f6JSI4}K`-w>%M(=^JZul3?9wM8p(6;p+!pdUnEL;m?EA8F4Du&0%we1dP zGZ9+&9t9*1_9;t6DDLk{*g9!bLKcde83?hlGVuvwg$(BgqNQT7TP>Q$wbBVi(Iu-j zo|2=x#eaOb3q&say-e5g@8Z)n<=l&d%E+{hg(YfMr=*6-I_9_GWwAY8Yyunk*XhW3 zj9`n06W>rOdkyM6;FOBGR5UPSP>D|p-V&5wEyAUC`U64>%Ng*s8)aL(o@?5QZd&A` z4G8mLLJTtH%nUUH)*4OszVE%ZpA(nGG&$Nfv$L|1`Nxk!6$Ujfd{0Xj*8eS6euV8V z`7L4Nee*<7T#Z(5B_5lg(hvgBoQmCkr;P8#TW5b}cA}H-%{o#V2ahQ!3D+EoTBuZ7 zSv^wvx!_ZPM-(6qgE2J)yRX-;mQ+;Jx&;D2iqlb#%BKy1ty0v0VlD(KLDnB5t(5zs(x12C^_mK4+?x zhY*q}Y36W^=P)I(^mQgmSt&~DDdlx}53Qr3gWXW<-i{N;k9VPe0WQv+y<|r>`QMyv z291!0LegK_E2226=8g(Alc1eY)_({a53IO?qOy6lrdNyRMPgd5UY$GJ7`jE^!VsrX zXG$;yGQTS;xUL#qAuCcXq2j~MQg1FgNE@sCMp6_Xg>GK!jbo)t`P}i+ED%l{K*&+! z6KR48*z}m#GX~%yBHAMuX?%wUIK?hu0RXrRhdqgIhr1S*mkmtIg$ENYT)EZNLsejh z6C;f*42L)qZC3z6dwRl{N=9R0Q>(9cP}lYAwAwsg%8t;?pi98#o_SrbCXYvBcFWgF zq@ke7$5+{dGpBrIZ%EXT0+^_7RjW(a+=m#B2sD(gG`WK^sWB2i?R z7zZARo^4||thOKTq5o`ZwUwK6758{dcWZ8U^~2@O)dUqx_xnd!@IB8LYO(3unA{G| z|J)RcFJx99%gV56f1b-I`jr25IgJPI?XZ;S>8TYay2@W5m43IYtIN5+hNx=rh7IrS z2z48K6cH^kL)+uELEcb!B#W&5m~AJ)`2b8rwWbC54KLC9;G+Q2IL>+I+->q}`fM9H zGXcl~izmb9c*RmTu1!1%O0Uh{wPhtVK<}KlsSqeKFE=-kl9OqSk>qddXiwdEs> zvlU0vCk(GX=6ZzA(EALoqf(gIF}abfkg0`}H(dR?9;40f+K2@DjWKOgpz zPuCjvTClJkyVjFHGYYLYJ9x0b(J6AkL`^$o!+U53;E62W^>BEODWP6j!tb)6r71v^f%oQh!S$$RT9Ir_J#o&> z*ktg29&aOFFGntHdTid2s*>$cW?*IA{b*h%Miy7Zyu5_)!PGRyP26i@Y9veq9+CFI&nO-L#79XTDZ zaJ3bkh6>1?UbM`-AXGISeqIB|SN zU{{NHszjVXQ@|>zkNJgA!WgppbClZjcQJ&paQQ3M3$4fEgO6Lo6jmn@$C`w~T_N3G z1MGz|g!$o2!4dHCA8bSn)x#p^ao@LNjiL5_R_ME@>PnrM@@d_I)60IXmY$oFh?v*E za^vz?tD4Q7RcPjYJA=)G&RE4c2jgs52VAVJ{+K^@x@g%2U<{F)j;E-ddcQt_?lWz! zzFuB^iIR?S==#_t$oAM_`8kur#6poOU-hwLWv3eMX;8Rf!4_Ta`*XepSw&7^2elHuIvs_nuTe9+fJ&33KJxajidu(phtyK9H z9?87&ua4RuIm~$btHpaC*c%yqr7Chh`qeRcn?`gzKE=xUr%_TRD!N`tsXy+lL`+O0 zx&Gg_xF?QgLZYJ(xa+shhO&HGe}-Xm@b)2>Tyq*j^iFS4{V+;exWfTuQ&s2P>Ov22 zVafO#5i(+u6;gg|H5Y4+eFh!ua@;z4CaLJ_;KwDR=6ps}PR!;^RnA!`Q|KiczCaC) zvt+oi^R1fl7=zdDc$KYEDTfd&RT-lK^q@=8iK2WCPBVr0GsGE-x76{_@JB$Q5+sUa z%*S;StJ7i*hmc#~ZtAT)3$nvIVSa{&ksu2asY;TT0Q{nnNM}8sSlVf0?|272V5qr% z<5wRnq3{`!yL)+V1*rk!ixDE=l(-+f?|NbNY*Q$ZCc); zRN)`W@$J0Vj$3`)KmT!K;M{!=!u-w7B|7`Mnw{nGHvTn#C(21z3z9KzbfvZE-lS0POt8y@qeVo z!9V+}uAUX@(d(Jr295h3hm)G@fXWdI#(lhhaX?dpkyv;^Ti>>C#OOC6}%ShH(fkF-Kj*v zoKDx~*~A7)bqryzz4HVYE#~Rhmp9E~k_*1IRENngb%8wKhhkQfcROo{Am(OZZM=|x z;it)Gy!UOR`c7~^f;rbjY+ zD@Yk6Ng2^_-jBf)f7+$^bzAaC45y6b*Kufa0f5s=n4!o%@$t|2=BEw~`=`8_jxT=+ zxd4JIMvxGj+3-BL4Bd1(*WnZodzCB3m-Q>+uIpVr{ z%%RFq!^A+vpjJ05(x4H?=&S)(yp5vq((*&PCW0Q!J4vH}s z#VjXh`8~4oeMK0WCGA~`Vv830ScJ}m*0ya14;EL-AaJ4hBoYK8^!T< z6BXw>dLAL%^iGLQ^MJ@Bmuw{)9r;ELr|;Jh2S~~Ij^g^JiEY$x#VHZIlVHFECLoM< z>>DWzO53;#Z<_&trN z90`8|_oyN&H+e19lqDWU-YLQz_b5`46{bWPZ0L+CS3Mc_LHJD=G8o)hueNOUgV!1fX9aHmCXzhi; zM~pNx%~`}qnqMp@U~K2D5{5=h2|QAUT0hlWBsB;ucg=GakOSp*_Sg8Lc= z=L!LbJLIlQNSP`OnbE_8hc8rct9yN(+*X7rZtNJ4{0FN&vllu_iL#K@=&Yi`Qu+B2 z#@)+^S6l(J?;2VX;^LcqxR{*VoN6<7e@~BKXTYvV0Cdcrh$fMnTf-8}D8*E|5f@;S zQ>}2p^W`zmQ1sUZt0Ed!2vhnvc{v#?tIGWpiMI}2ts4U-0_aXT5qCMmX*G>|_+i-t zu6J%_!RCwa){+G&0FJlsidD9rHt-v3cqHu@GW7UOMc6beeA9&M7xIUj`3Oug|3#17 zRbmzq=ugwE071PU(U{1VIh6Q}GRDwRd2ksKZM^@i2cfoJG=5ZD4A5nApo~?sxGaVKLm|)gnDaeJdo1)Bp~-IR&^3OC-6Oy%DiV#^^DD5=+Vanl z2r$!t=%YFYF+V0>&M6z};yY{tfEgQv(XQx@;B0GPy==VZ` z)xD6TmX3`DPi{6Qu&qy+w;WT2=|nlkX*ec<^`Qk8jkqqhBp}D;%Ad7u6|D?hKKB_s zA)~;#o7BJ4ov>sE`Jv=_y<9*yh+H_qX_N?3kr)%stOBwi${O4;#{d!P0r$Z^BPFWn zaL6445l9R!Ie;*6+~#k}8hp8aCV&tcJnoJ=J_TIdjz6ir%%+ASaZ)_=peHZFkO8#l zH_jpEfG}{To-6Uss6+NqMxtr`9$8QUgU~UsQOOb#GREM>Ka- z2wn-nKN|l)GYFy@pGpd8urHC1j^Lr`fM3gPl>G%x+QfMT)JYS;`L+bL=P<$k#&PJn zU&|4suu1_3bfxMCZD4uXt1~4_b-V7ZCK^7;hR6JqOxN3b96l{4>!mmc(oBA_yg1jx zOR4)6ukW4rIeyBlQ(@fzkR_{q%)_FDG4$Pn8P55u)FGBeqDTD6%MsJ{~b~7ie`1hVpbQQ&rclX7x0_uyQKdSGmVsRZ0 z0+|rVzrbIMo?UT}{e%B;RPM2`>n5~IL>hijD4WNf^rwWp$02YLM1x2uojZgF1G0dn z_9|8IzpNDa|HtkC{6(KJbE^!w_>v=?jci#L7{-wuj``2vU?i2TlA-EIZuE;~py5}}4_U!5h~IxZ^SE!G zLI<}2vc(U0v{mY!UMnxMy72jCrb8d2v7;sz9p>?-&?ga2pa%C_1E6AHX#d>8Ldk3X zYvLi6*nd50;2;5n&XJ?jH`#azkCi{GV2sY6Z)p9X{St@4@=o%+SeTuX5E=Gvv4alLd>H}}b8P05@qW7TdRft?Ib*~8?@tQ=>&FEL zjvGL<0Go6|2L`tudv?o&M)EIY@ae2{ldg(i0(u&Zo_I{obn7o#DVSttT$&n6%2vOD zOIk8ZZ44OcoyxF7Pa#7{*F`Np>B(pyeK-CaV_dcSdDv>Ulj4rI>scxYDZt?oSpVqk zq{Du@gXJ_l)K>9J%wS%<2j1DYpDaUIn&0WxW*FczxGv72p&+a;&P}Xn)@HQMJ$aW_ zT(vda?IApYdZ=4C+ls% zlPA~7-FAFD6k>}K8XI~W+Gd)IbdE0Xm%JO{<-muiBnUX4dA;hjZAHY^i(Giie*kTB zM3Mj8P~d|DB7eYy#ijLcCSKZNEowfkmg~8_f6L9-fJbyZvdKf*{FvvhqCxy168~F6 z-#&MvlMP)KJJ4H0*S1SbB_vohI5eb$ETt{7ZPMDqbxV_o@$ZV#?cP2~Mg7~&Lzis| zwEK@GitI|~CsFZoo(0?W8Spc#Sz8zW5Dv%2_%;|ocVhkCH%MU+Og2E*NRe`I3YO+0 zS{479`SNr>Ym+aIl;S`PP{Byl>L=9el({&=J1jO@{tT+zAP$JlAV#OI^1gT`55wo^ zzcB7?!Uh!<8&95V)VYt3Y#wf+;&dgyXDG)(`Q zPteF_uBy)W3#|?Gfb5=rimcQW!@qAevJXR`eE_FMDA>bF&CON3cq>M&cu!c-1#~MP z8jFvC!b|hl{-{@_dCqrcZo1jj?9XLGVKrJ40#iSEjOXUP;^RngXh4E)ixoQ{EV6l* z_CsmPB0Ga48yZjoyox5?ld#CkJ2JQV7~Zw$W0@;X=YchgQ4%i>(feD<8vYP-`^i4p zjqMRBm0VeJHq={znldidT?iznX;95x_MtV3 zS=Z5-HirdTem?&EG7cMr3kEoW?bfK-|Giwh&G^W5v|}~2|AbM2A79mXJ>sr!4{Y97 z@jVU*mo-%mcOmS*t-9K`<7MLEu>;T>k~1!{`LuI?JwHN=BgKFa2n1&JdiR>$!h1JF zWJs-=?jHbv1~snTg7`e9tP?1Ok%mqiJ_NwmH`<~80TH~)mPJJ5&pm1I7nGTHBF>)1 z3sYB8o$C}^P2D0HE7w~X*%NIasjvj{6Dx05C*^0=u}HO;o%;h45IvUccXw%i-~bE& z#JI5Jso<0$-XY12Ve-2-urnSy#xs6{MglB)ScDBGwwG6=#}cHG>6TpRdq7CoUjy(h ztVPfOw^|x9eSxd;c*v-@=~&6!8aq4ExlZTgaBx(glSuwWk2)qm2LT9kE#gTb0KgDi z;f&-N=2j6hrS^xt=mkx-u5X+Gs@$LDT4|i@JoUHp0{l2}m|KMYw_hgzZ za7m9`ET)yiN`{%!^Zn^{4A`}-b^f-~c{6Cc>}~u4Lu)jn^P`Y1Qr+8PSNPLcJgSRf zt(JPhDX-X!1`I1{r)=|Icqzr7+hX@(*6Ub zDPc(oNLWBTIkaZ^ye@BtRVbZYCAj*>DL0L>tyJ|HAgENJ?-rlxUd||aj9WGE#+Peaw{au>YI2x;1Z9^ ziWnfc-?CH+iAad&^zsHY8}s}rnu8+B_uqy7*9QJ-wzJ*h?N6gp{GIM6G^lCga}tCf zMY@dz+Ld7NnF-d9Q0*s`GB7d1kH&Xs`SnJ}ouFUdi%|$3u!)*=jQTFCjhxJWILg3E zZ|>}Wb##={OsDA0B14h%n``@+RE*R_RQsKakcn>ddQxcmM_?W-P=y=;|0_V>z-*$8 zWa?tZ$roj*2LUTc7!i=8fIy0lFda^kS3LsrJQGi-h)7Ekjmt`XeXVB##bSeu!UgsS zmEKD^I8+!iG0t~_`|sj?jT1azEay$kIpA_enTiQu*w!TICg4-}ocWt=oo1N`1T7A2 z@qRW#m47aQX4f-}mo}yUm0J1#Pq%#t$^-46$c|3YxGI6<;)5C;&2qNTQJd(=71dFG6=wZtNesvR_l9*OHn` zc)1_5lH(plljhFwemY)~pZ%;lI_Fu-CQ1IChAjYzA?w)1K0x9%t*p&7gkZn$u@u6f zI?(FeOhm=%gNaREF>$s%DbZhMW*m=A z5#eON23v6)aNG%xwn)|&BgEx51?ZK%PxsFJFcV;7l6|VQYV?^b!u~D@X@51mJRT~A zrMnG5Yr1dH6EOe3AH{J3fH*&M#&&y718s>si zzbOTtKV5X~c`H_~xV`3-eCQ0W#1iln!i`IPReQ^8cLCXHsc)ixUxSe`wfy9?m4O+D zg;CPtN_4Qrx5D5GFVt06m7H};T_h_ zw~^(lNF5b(Q>m%y%j;5Z;9ODEunhbsfIaKQI3FhK>$-~X$i>!zkUplQzIq!s6T*;0 zc+?-Ri5&w@rMzF#eh#g;wz|aXzkUzbB23<33K?RGDX@~)ARw^@hx7UybPS#0yT_=Z ziAa$T!6X|jT4h%ZNWjz8AyB;bbWG%h#i4|&TrU2E=(Eotl#D16NjBk9d#oDL68%OQ zjs`oiW6Fd(1QrS~*WTr&rMdhQJN!uz*`ZV=0_xzNQGLK|qw(<0chEi~rvOC;O`}=7 zM=~`4GRAF5M{vv>1yv-jAG$e|LIRgDzQ6a(F`l_F;}cjIzz_x(AW<4b3POrLF0 zVtvgBLxtXP1xOkZE1->lLH($V2vCa9;60@Ru`WV(W5B z3dSBcBmr{gx`tPBnpH9k+TNCfMv0niobwDpUJ9M{;5v*D$YUg`SYYC~i5aq2^U-kj z1G>l8QiYl`o!YYlMK~$NX!vsd9oVoBe3QLCKugOMgjf{|dH_ zN`>LcZrP7fhB%ipTv)0d`1oWULAV2b^Zv3d8gi0*a4X9PR+ zdb?}y<+QN$$F^Ib@A3fO>f z{ttg3s+EY%JPTDcF7I%|uq$lgCUV`&=B^5rVlw%q-{fhy+OmvMPs8D`f}c~$=}hO> zj^{(g)4>bPJr;UbX)aK`*`}tV+y#s}|Okh1ovOM}sz89qer65+mu{?7-`HbsWU-<-|jM7{DTStlfI2 zIBH61XOU!Y=lhLYT3E@V9}Wh~rFi7Bl?}KXpr~oeyVlndy>J6|A?rT<)I756ngn`+ zrkIe2kDXHl64SZ_WuNlAH(6{Y=;jK-Ir3VxlQ|LYr!*0w@E4F&wy@0p9*?g7?&&Y4x@b+!V9WQMCNM9dg__p;r zuNQUIO`Ck~`m*uCjq8dFn&Ll&1ZYi%%G(`P>!;ZSK20OO$n{&}E~;&*2?@Ypx28#g zbl?6A=am)-fM3@PStN)Wb`AaFuCus06k{@72ePO7_=zEw@OiAneqKJ(=q00Loa7hh zCjd%eLGkt_*l`&5FONosuNXdZIeD6^jrKZXZ|cap4FyM)&UJ69qqu~l@vJ|3d($~3 ze@kamHfADPV)re9-o?Z$EQKgcDIWropXB_^z7eeE-vGN`*~1RtoIS>fSf8-PS`C6i z5*Nq5@IBN3>SM?ufLsS}kD}S*Hnmq*L{DdW-$d{G*@l*iih0~8GO?!{+z;8tZ+%P% z31hiU1vRCpkuuj?p6RjPZ%bLLHbXbp+->2*Q5tCnFqj(GWt}>2U*v|9+@-G;D$`vL zcf?<)YsVBx@6QAepAQ#i)9QiKU6oq$2N#u2lElL3^Di9u4Ciq8899AzHymBq$e|+7c$i0eJt{-!0V;(Z78jKed{`3=p1yl3PcHK_3k&3*9-`a2_`u=4v~&VH6;}!{<=EIe zHl@0r#dVR)Sa%*=QtaApG{P!N|#L8u>Gg+8bv<(>4N&rJEy=v|N_U zNxrJAhp*P-Kvth<1`+v!-dTx2{oz_H2#-oBDE2x@t$)6Q^Goq%4m9rYC@?{yCIQ_s&bOH0Vvp|a&kY*k5AF~lqQun9OfyGgs@3908w zH>NpXmOu;fRV{@Am4 zvHUzhdrd!G(QQD~SfDcLC;c)FmpV2ss-IL5bE>g)cyG^RUsU!J+@kGxGG?WR#2K2Foo6&XJWD=A_cFsX$h*$~dsx5YQ8jj1gc;!4$X1u%{`Mhp4nampNDy@&1!Qv}_ zNs89DT~q}RnUc>|YO7&b3W`L=Z0B5P*lV0Ev&WrKT>5~(e-XK{uN4|Di zYmbvpULG=HA@(fFH{F}RzPVtUCyG>0A7LC8cOSdA(#=4+_(M^79`p@fX!b}UTfaFP2qg6~+ z)pu4Qe@~CGB^&95eOwyuQrQe%E0ygY`Y1M7kS(WqAac^n;`8cg)NV^1A3^e$(m35W zFAiE7YM0=_(2+3d0i}kk`f5ZFws)uJXsqo@rXBhlNr3*#GaDI()*qCeiaj2X?O6Gl zD|GN9y3gfuq+R6zDzi96kP5zL=etBSIq9_4#IDV=vC~BFb=vv2+5NBZ>QI7aChtWy zUX$#1CqMEVSOI?J<=k$dn7)DekP_pLyW3^9blK5iI4CdYhyB;Qogr+kXHCm%(1E7& z)>fC4^jRDkm=S1;JUjD;p$d3#bRcjv9V&;LYTVvpw)89>04ewo>{H#{C=!Ot zVWJ`&WG5(`sD8DczixCs8u1HnsoCOV8pT8*DkT7tFz}CIJgHCcz%^30yX1nm;Y|~s z>RV^b`FmSiSB<@F??UH!kA{if_&vIn++ADLfYyfgB`}@X;Q8`*)yy~zd*;C0mj8M@ zORJT-%@|c#No+c+T|q@tjs}_OYsGE_k?Svfa6QuF=IB_{%@<@g+1=JY zospS2XMaC@zWS=xi%ek5ndByt%}?H=VKIl4%FDd{I`W3ov=IOd0hWJ$Gt{8{BtN`O4k!oW{VkXL`{+wt<)LbUI$W zWCXZ)hnD>Hb|3HgFfXIrBL$0_{wP&kKAaEwK*`>vdw%JG(hQ#iJgkwes?k4p=?{q< zx8OgA6{W>}w;UX6Qa%Mqd0A0wYPPS)Y0WczGw_E#%ErIYQqE}qP}u7F!|WmvpB-V& zlhExjMjuH_xT@Y4sA13s4<+o6N@*jZRI)3>kxnGQry` z;B?&a)02w~1PgxL{D0DzZx~nXIpZ)Hs<8u4og3Xw3HiwCa3xfnofNYa=YqsTBWP)A z5Oz!{lhXFbhnj60yhO#H51|JQZuFU{WPh>xM@EIhAY;acCQ|QN54CRlI6pQ3TGNXW z4C09P2N#B^9%5u8zpts`1k#wGWaL;t;v(WuDIU!k?u8q5())NzOzeHSw3qmN2dgbtB5DHv|U@=unOghUlxI2*j1YHi#Q zuv$3Qs0j_Dkq)-6(vqbpk_H>`!cIBAhAD4hprZD0;~~aUCX`ELpn{ppaPZMrg1?}N zKEEP8lmdAOD|lPnK>psnJmiAXbLts98SQ5pU%{NC7^_+$??X1n~hXDg-}P z=n#)FEvAbg$_xK@tfKs`+5*N0iG(%1L%mk(1Ug1CVd=(<)rY-p)wM)D;Sx7rkEgCT z@zZBUfhvb5P&=24c~0|bh>piXd>Of{wphWlQmnAJPA)Phvq~`JpNo;|iL|#Q4Ogkl zQof67?%Zq^w#Mz#m``#GzMJlYH@=x^m=ci-8DF9enmevF%>!1~ z#@dPaWmCmP=7qn>DNQs4H=5%2w@7A@fKQE_w^?4ZXD94u(&;aAbC|9-6K^Ad^^-Qw zc^uXgKFy!-7PC^ANz;=fCvasnE@+r1r@9F-Om;E-A@JJitd$#p&7y!BVZz@PVbuNrEz|LEe^u)Fr}1DcX(sMrVsz7KqQL`Ir#%KE z26*^EUM${p`a#(o?s;2UybaYs#u{S)u=f2anrio~A**!-Q%=pt^c|`PFY7w+>?&c# zxch2$zZo4l&&;{I7)|t#05cm6XU_&mTuS(3De#M)$61p4hwADkWVT>nzQ<&m$>hgg zp^1lyde-!jT`kxi=qr4LWKKaL1-))3TdGWU{C9L*6g1S+LIv*Q$YoTe!Tz9-N&HN6 z{_M#UsDuQl0H_^rGU5Yc$>8S&f!C`lN%)K%tr6nAxcqF-{oK~y!w`ZxWGt?$CBMLI zxzhKkmYW-SSNu^1>)9cM^k3M?TwJ6Pdd>Xmh4S4bB$QlUmKg<|C7XvKvFzVjAI3-q zW8pqyvD;89t`Gy9^%j3l46SkbAPng&$NH+M$T&+VXp@RAiNx47a|e8)fQA_=Q5ozb zJ1bCPxd_HEi;Xbm1r?mXmQGN~^AjAHmsd2d*TnZyW^Di~F7!=4w&=sYB$cX25x^k+ ziRLFMCy7*Lk|k=_ z(Wb9#<#d{Oin_hs6u06ODOR+&lw!f%-QC?Cf)$EO zaA>jO#oevAySux)hnsWHIq!Gn-;6cJ9!d7td#*L-?|EAAvtM=nA^YApq`Zqm?&pRt z%O~%8`ioR~J{>;K#mPM4sD_~3YN!Xn?dyftdmlza7B~uNesauF@aFgj@2|%7`pXF@ zC-qyv6e<`BH4@0qcUyHko(s#;)tuc*#r(WYmQGwCczO5P(XaaHa#)kp>+EeUUEpb3 z2&87jI(Cn;Sm5CN{?n^_{qh`Y#B1B?Em-#GJ6|x=-n>UOnJDu;-wS~cY0U!NUX?e$ zq%ywhwoX5c0v*d&4Mdw1AXj-GNy-n_z0XJ_g);UIEd!qH7zk4^u?XVRNFDg9uR{(t zfc|DrB%T63Rq{~Kx6Hvsp7P+Fm*dff0HmfPdzKzgKt*$XKXqNJ1vG#k(D@GGdSS5y zH4crNlHv<>UE{wuKTG{-bbQNV5qxFD|5tOqrU?G@sqJNTG(^&8TXkCmrmf8{NL3}6 z#ZLS2+BQn@?EMjP0BNvX_>D1-ix3hr)igrA%?+Sd#gf}d;94((72WwUM#j9{_F9hr zetFC(>f}<@*{N|sc8dR3!@Ez?>I7A@?RGQ@FO#%h4+a`{M~JE0pUuVJFi>-IT2sYn z>v&Ka@9uoh6D2ZHk_L>9K%NI!xJVYSA$bqJHDI>%l=iFCRKdsFphO40n&&<)0l|io zTI&Y^0=Z(pYNLuD$b!6~Em)%|uoJ=xf@<$K+c-NwHk7y7U3_%FQe ze0>3r17S2e8kbwLhIj<(SVJ{g&jFC9rH~h!6BqoB=OLQ+G^BQsZZ?nN?0~?sgEv8@ zVjI5J>l-jL2d7`vWwy7(NB{dB&kh59{fwLAAn}kVUD9-}8zop4+VJ!nbe8ZWy(1FL z{WG%N&zrR2X4k!-^CoxPp;j%0BnEZ+B9Du;nmIH4I!F#ed028UhC=MwcSAG+c5c5( z0>So&zVh@)6om+SLK+ylWLYZ|vADm7^EhGm6^~Wq?;-)VbIq?G5iv+kYIGIIR@!aH zYIviXAKW0n;R9Go%DCK<56bl2j86P<2GwOgM!-%)HHq!*kZqrl;eI0Qb0g8Y8OqjV z^rh|W{~LElvI5z^_B7OOwzfqC+v1@_{KVx3WXwOpKRqIbQc+Fv<2OL;yE+p0EKJv? zNMs+%)~6?o#s={1b#K=f-d_hIqR^Y$-zE+FB|gX8w}urU8yGOZ=Zb%GZ_b zv7hNRD<3!OAt?w;5B#AlkrWaqzP^62L2WQ1b#*GF8O{TKiV{9U$Xqiv8VKTGnTgSG z6@ybZ1T(XcVs+lwOKQM$k)Y2?5@WRM6$K66*_gyAt(}>Tg^x^CdC6_n7fNpP!Of~a zUtMLx-Zy)l96wTDDOV>;diqaM(pw2D!S~9J76x_8WcNyaX96QjyE$j#pLChqAG%oM zP^h6PCe*c;9SUU=r2fWaA(SM3RystA6SuPu3G_) zS1d#NfDDkk2Uyw|pTkjTHW@7NvZ>c9Z;Dj+9slC>I)<7Iva{PfGlwrT-cY5bJ05%1 zOku(AzMa1$9sj6U`kjz!d^_k&c70`L&D;4+)7I;kBS>D^+0}EYqy0dy3roN&syUq! z@z}RXrASj5?xOj6^^cR&+IBY$okrtDX*sRm-C}cQ7z2aiIdB@6gv^mQ#ZYg?*KQ>x z5?#fD-tXegoK|taF zvaOg0@6z(z2aUcYEV`d5qichpM(rJ0nb<-}<%FBN9Lps9SwsV-}1S#|JF^&9X`@1cX{=TCmFSm0sU7xvQ z9l}?&L%3)2oWRRgEFw|YsTBNAZBI|vFtr5^SI?`5FIm2B`415NFh-C16%!OfwwJdB zGPbPs#Dzm5E%V;srF!qm&Zi~I7y8d?B^Oo_B}}U|$HdVD@sXZBtc@@LshGeKd+12J z{RTd2I&6O-937Q^&KG5b(kTkxR;PRcQXjNl+7p~OW24=dkV&_LTA zR#98|^zd%h!+ZHHr)roUpXPQCGsJkJ`uHD$II#7 zed;}dL0M4X?agy=7?$07QoUeVm%PW_mXO=tCNc4AZ^r*w2>$y?v8KS=E?AnViv*YJ zW$($8#Y<{RugY|yAxobZb8BO9MO z_<(o4g-lyJP*kZtm`3vP*Qf^oFxB9=WH80xI^UZHnID!tKoypxUcVYRS{jdRr%v(F;E_aILJ&0PDVLn7IAU0uVA z&51QS=w$TuVuDWr0q>{5MZr`Q0IT2`Q&GP>#F+31WR3qb*7%v<^?U82@=x)K?9lQ4*^-oo!QpQ!gqMhu3z3fVXZ>p49 zZ+Q-&+x2Q=16-|=hBLlA(yPsl4d0h8WYK=Xdj#$Kp;leH0FaFj=zLyA;Aly69dbGs zHj4}R7t(F7q5mrCIsPJ=u+<$eQ#uRewO)Q*QUpit*q$)=b=NI3m``UAdPbvRAg2Kz za&w3FEs zteK97qrd}*F~qE+v6#<{BP#LNEC|4 z!EFQ$2ebW5ehGudi5KahlfV6xQJ(l}%KUwZ*BA?WcJW?C;H)%U|hB~1IBOi^i@%lptx`Ta9WcYdrZA}7L)RHm-8?CX*iMAfs1@gU z*=I^m`S}5H-@L3kjC&rElabk4YTH|br)ecVIFQr* zICHf9>+S+m6CUY^=F7oa-S@X-yw;&ey9p)D~rEHMRdB`6^@VfJYK86AYpJQ2} zyEcXZJ221=cs9#-IlH4cN`O_^;;dR~#Fj@(G*Q;}7O?=e(mm0>Ut3Qe4%w(hz5Y0k zT$i0~X(TDlSErP~NVyP9-e5%iZuJowzN5#k1ihCQjJ4YZ!hC~nYUw+_(|flCZ3e`4 z#e0R#iF1QoQUi8n+E0cEi;YgM0gKNsEg*PCsfBsxS1JA0>JB4Q|MaeniIF&LA}*Wx zw$^O#qds!HTU|yHd3p5vX`bS3pJBzbi*Fto{7rKNxwok^YyABV0CPPZ{i~(!{_*qQ zJxmHWKY!J}FqAZ8S)U)L|Ti6}2G~XjxjN9n#kMX~a z)q2R4=Q%A%M>(iUCj=Ogtex3s>g%6bq6ah;n%!n7TSepGVnTS2QOYE@ND_E_wR}|K zdZ!H-s;FNY_mbwS1+b@23C{E2Ep!wGhmdmoh z9oRhd5g%b0*uWyuJ?w;mSlJlGg?smACuBgAQ^Ww5(paJd3_vUTF57f{Pp~Y?Lf{&X)%LBVC~;;WILE1vBueINHr8GJ7~$U3Wz&Pe7E z{QfjI3Vd}h8}>NPOV-t}UsHTJVQ64#cU^^XIXt|T(oKy}90_Mj-sO8RSP#;C_i?_X z1Ww2lO(4~~xfQqHDaXSWv#;_pHrs5W8al2RYHkbwUvza={~=mfd^|roBNxpz5gFt! z#m9AfhMSxpcR(ygcKe1XAm~DGJ;@#1JP`3>-fJ2CE8fp%#?aI5^;+vloU{l4XoAET zw!8mb$18BY)5=U8mrboNt*^xs%H|%{757+7`?nY$k8o&Z&8D+jen!IIFQ6-_tJ+RS z<$4%C*}~PKcfUN{vbFSWmYwczseo2|5iuW!z@Lf3pJ`HLhGRlE`Ss-m)y;YMrzsVr zd0{&~y2mfQe|Ar=JV3OR3!uJ!J?{Z<^<5*^!zDl=vAQ;o1R#z`?re$aiR&MT6vy@H>Z`WnEM8;$!$!qD3RFf4%QX;oZQnJ^?lF3ozy_ zXzZJCYuFfw?V>U5^B&`|!GvgGNjQk({)4|cqO@jJal^1XuwcZpwDZz%P^ zZ>GVFelBRXCzj^LUyM8G0fG6|H+TD}*-VD_NANeh+CBM&@hQBt`H&%vE7l?g!ZTgC_=cAK^`JVNCHq zdn$s01=)^Bp)>5M1udyFh%^Lh6kcs*?d14Aymsx8P~lShCvH+!OfTgU_D3(+wfIz3 zm3ZE>h`&ms`z|DTQnot4|@?J(i84%RX@Ka>6<%-y@` zT&9d@u^)`95-@G$W#r)Xi|gcK5{a@HY(jkJDBg|2E0S$Z?$ALV(#^!oVB4#(gk1fr zQ~Njc_b0a=)laf44@~G+4PgK?ga`d=Aq)}QIjz?jh56EuE=qM@qPoYwbd%lg*Hk&P z_W_zsmjmJOVFv;h8;mZq}y((hd!4ahdyYpbo=P*88o_O8bIhaJes zjW_F&hT-`zX{1~UX=-u>ix;;YbNWBtO&7>|*3){6qi{mm!8m^}vA%TBG^V8`oICPr zIGIhw_8fpu2k8c1{!U-r=(D!HY$ntj*ecUuaz(=k;go6^v=9nZEk}HWN2_ z%aU*JfdV$eW-rF@f_7buUKp==9@<~a@G~})ts-UouWu^xR7v#CpM{Ngv+R8wwv!EYx=l9YphBojMlM9S{e9qb7nG<+Rj4k`=; z{8l{)TjgBv@EIA%_G{*;L<`Jd=T79Qfw;B4sl@%cq~y0xPlddlus7{(UD?+>6_Pv5ro|o3@+3-TYCT+avuL`<3xBhWwdb$9x?vGm2NnMKvx>;s z`L;g1tnErFovKj@IdyFP{Fb-;TKs>cPSF`q+|`Z%@cEfbO)cc3aIN7eCo zR~xc9NE_dV@XRUR2&X29pWQXQzB4-y*98T!;o@tX1Dj zs-41l%Sdm~FpG)q@M0V|I+^n_(rjepV4(bw#1=chJdNsJElP`JiDI*Ac6MH0FyHiq zv-9%8lrJOSY|qRU;)+*fGq^&Fk(vmIZRpNT{GhE0i_jwC{Sta-8+74&qv*ND?)(fV zd6vUlnp0ZXGyzNjHr$(~|8V(aPjCGhmjtqb_%mjV^G5>wF>>H&*_~(^T{|rHw`mbk7+8v)nSL-Szrct;BwwEE z^ht27G^eVmOWVW{wAj>qBPpH<^k@rH?v?y|1IE>wh2&J5LT-1<%8a$Yn03aWWU-rW z|IJwv-S++byEQL#qS{rrVo#KJ-%tf3fJ(rIb}28ka%pa$uk))%DvD{&?~h%|1~NoQXM7zMA1+|=QmuBfJz5Af^JHBzE$H~jBNary@r+G z5wsbhun6LS_ck`^miv+ff9YpbN4{TJI9T{tMx1Po{FlAtES8X=n;=fR(Vx~mey7P2 zcBA>)-z2G?;h{w9LWz){aFP-OeW5S#Kha1tyBBqjm-E4pt7M*F%5DT&SLVck?Ii6T zUtnu*ne)!61$C0s(0m1ZU&oQF663}(wz}k`3`Y#jI z=2GW8n}w*hYa}q45IwR^6lF&^<}ynv+W(@UP=Yd<qf36rvX0<8!_A7~oE- z|Azj>Tng!vT;H62Fiq@8IO^5?{nXJMN`VO3r$k(Q8~Txp#DR%40XjY*@4a%-=H-P6 z7Bxz;M+@rjyuqE>3I)?%gud=X$$AGkpR+gf>M|HhW77Fd-DHwf7#84<+k-@clM6*9 z6~UG63|#r6L5A3AJ+5zOV0YT<;8N^JHBV=-<~r>!fmdj0cBf7#1MX> zZ1(bX6wzs5v;;3MJm_CwnvADhXPmtd0d0oIGl7~OM~2$k*8cv=80TCRl&>zKvXtMp zXR%d2XKjvd3D1D6wV?__R)ftKtwA;TT7zt9P5+=@)?}&Di*$& z0GbEn&p>yRwEO9``j%6zTD!&UY;T|Ezj7qffbs|uw_=icT0ZCF-C~^nSmXx{K;W>T z%k=IL&Or3Nrcn~R)nk5yDvhE%`b{BKN%X0%!!LF|F&5=xky_dfUSqG8_he^xX?Hcb z7E)L}vhNM|NIO zujqT(ymU33jJoi1_3Ci(PhsWyV;L#9>7-gxHHc34tQg#(V~b95-JR%(!0{=dzVsws zaDB?tf1tbIr7e+0fc*mfuE6_tv|x7 zzvICj+TLB70aPf@r9bEk7 z9}+b}t*Y`me)>1Lo!j;}z>vKaqv0?JMxy`S5nWu zmeK+A9$$}08Z9KRHdq-Ivc>iN?tOXxOI?j`sDZ$^;alQ-37ZdZSy@t>3poLEjY4SA z*C8P;jFBduxW9N_j;{8$vWh~_ae($&>xOD#(IF1jGf1v(SPAbW zLqRPr+{ZL(t9r?UvNzO)Ws?Ur?OZS_|%P0hzR-j0v+ueVznfIq~ zc1ke1u(q|STGl6jK#2&Sp3Lpp!*(i0duZY-TOC=L(NSNpi-H#QNyZAYx^sOEoB3Po zDj-{Zzsey-6PJxRrR0QeBxLk7H58HtQxeaD$T2F z8`EkVh3G?53XMRP+DKXn+4iJ8&A!tlW`7dWqPy~Jz(fK2%u$DAoaOd~bI9L22D8P7n952v2M&`@-ne8McXM>M!=3r}{>wd!w zXJ$o9K!GxoH2>|W)Wt(0Ng4MCn?{i={oEwCQ$s_-^{4E^Bq_3j5eLga=pQ2MsV`)f zaJn_{)S_c@VZiEZyNw7gZ*HE0e{=^YU&A;cq1~`ONQg>m_{7v(F5hK+f>R+ohb zs3w>2d)Cb!^LwhnJafK6j{x|o_xG?6(S@x3t~nfdLpBipKM(=SpVbv zb;`^NcL-VWQ3SCJn%iW;=xb_r`1?GsCW+;$LM}R-;VqR-4Slt$AO}Pa!AA@Nx)(U< zq=lk4JYPCnY$ikd)4!8Lr3_Y)n>;D_AH>L|Q4rUAuIuEO<2N(Xue=DL_eTP*78eVQ zQIi-=k<-+kQ#hQw5ye0a1wa_;9>hkxY|;~wp~mg6X56_lO45^wWKIoB8m7i&WyV0H zK%f}7%vbx8!}eoGD+P}Y#fyst-Hc5_DQVEhD>`9_nhL?8D0oXurX)^=HOp9!IrNV; zu~*6-8ye0BsRV={c&tI>f$p_%Oo>v+o8GZkmjp3ar07!E17es|E_79GBYQM-GP{Hd zROT*pKVWxUT!gm%xvqY%z4Wss6~Ppb|6?VG>lF)&2B4LOInb8Cbk<=mLU!Ugg^?IB z;|TqL6tuFp3x!C0)iWZD&qazh<;&Nj%jw#2VlNYtHdCSNYRW)E#BTQ8+_UTN`LB&X zsW2Qsk0Nn~gO#~4Y>SSr52O`M&KAET7DT}sYcBmuM8uS@hn-Ogci*}71FJHe3PqQA z?3Gi#n9O$2O5Y}~Jb=XrmxeVXTota%8I4+1%E^d3#hgI6w*ZAOtAN?*alJ!Ao0Ze4st!h%931_LqM>%2v!+;}6-Ef-^XCsED!-4~+3TLJu-Y|La> zbniS|QlD!=b9Du;OYH)&x`vR;z9w`QE@x)qK!T?n;FQh0ua@byy<*?@y#-^NZ_iUk zj@)=E%le%)`wbC()UL2pK96lOWDJ}&v+uI+IQi9j7adGndK}b8Z0VstsE_EQe+3Ac zJ^e`5O211l;(97gIq2{nkb?u9PhWTMb+&X!qctINes=xh;bi3&6clAn&Sq?_3=I#2}6eD0@4e-a4CiOz1K+ zh~M)980lw`wP-n9r~hE*-3Jz$&xMHRyzB;eg7LIJu*&UfPhcp@fyudW|8F&6+(qG^ zOCDn%EHN~HsB)1dayWY(c_)ubzYGv){8ukP41L5}kA*S@J!MOrSSjo6uiT7OL}|;P zfX*i)3$N$><1ckp8NoP{(*FZ;cv}0y$|&TY$Tw7$n&`vxJp5wqtNwK$E?Ytx+w@J1 zYv~U=sqke=uI-2a3IqOk?*EmXCjxw_oa-wTxABPs<9|OUAH2Xl{_?+~FhiF4Sp%2- zwkV3~QUi-#0AI!-S>kV^$bNFM|3jSMqRlzAoBBbaD$_Di{~>2_W5K{+Pukal2wBO` zt!KW+945!fRj+q)h4gpIm8xgYO-48tmH$j^jF~NWzO@q6tvv_s znaUP(Ex!La9O0huurpmYh91UAK3$Qpjc>`D^8t`IKl6J<>b38+uTBCFqUGKcE#P>Z zoJuKQ=a;Il)4!8lL1JgT$E;IfyF;f%`5XSU*5cH_`d?g3=0Fi6|7{TR@4Iu4ue~Sw z(*4phK|+(4h>zfNTlYbk@Pn{B@)@COZC=$f%f_3ec>8VxV%Bdy#?96JF`oL5!^W

ow8 zK5&nKXI6(C+BR8Y2-D8}!5V!RPq*kK0^dEHdH{DB8_VhwAa*~LgePIYUHZAj*~jv% zdQCBY_)+*uQ7?RO5thAiL#NVyrt0Lj@QvA1s(VbVo|fW!N2kiSW*@YbR;AjCZVcnS z2(W^VE57b$&c2SnkM+l#y^SY%VUE27neu)Z+Adlh$2zj`#lBl%Z+Yop=*$%61$483 zIBnoIc868$fTyr8WNN1d^Kj76zhB(tRNvP-0Gl18Dy08-yG^J_8|?hh1}qG4%?zq< z+V7cbzFb+?JG(duvd3-+;20*I2qW^yK;KEt{Yq-ajN`|18kLt=?9(+KsFvB(Hk)Em zhAJww;f^iu;yWD5(H^bU*&a$;glSkAdVXR@(h-=Ww{0&!L2cZN*Ld|+tMr>xKEiw0XV5tZ~q1yQIc=i+hG93oE!!-_t36JHZDIufG?fP!xKN%-I&gehI z5}>GNP3M-uc!5Lpmxk8C>RII2aK)iZ$medKWjj}$D5%z-Uc-sL0^2+6fOLks-ZQBm zIYwUwBr;x75Zv$%k%Dx{O9eS`*D^~>n1yMCIu)3{v zl>^h3*jPs3N`ky=yLKIn(09N0UG=|qp^%U7kz`==siY=;+4z|oy1%`=NGdQ$TjAF> z^bxFl`{e~+FX48Cp*JUTNFhfSrNyqjFx4&eukH9z93E5L)16Q>q()7m)Vmw-FiCd& zFZb)>`&hAs&!@QNU8-GmqLDa3*{$MV>*m@UM+B8bhoM&0%eh09>$OvTc^%wcp(96) zxqZ7gJMu2#8WTzdsjl#3IkqvHc3|9p36Fux!e`AG;-!nM>g8H-3e%r`8rE0ZlOvRr zlhWSWjm^!?X_^SV@GWurJ6%0+@6=0Ce7s|ioYEExOLeYo>*fm*g7ifDX9yuk*Ex6? z>`ppoy1(f0J*7hhx|glrtNgmCC)n0!B2=cBc=LtFn6nO6zuX}diYhhU?Bv$c#t?LK zjV_<1{^zD1-i5@`t@^!kU`oAS0uF05(i=11d#a+vJ(GJ8*Ab7eSRL<$Lm>twL<2MJ zgM_av7ykYI24ty6X$>zEHYOxjYKra|fe1PYR3J26p8|DuTuU*gZ*)N?om|^eT-Sw|v!mJI!6;S>&#N9X_bsQo06Q8doaCx`p=jBhrW_!S8Fk;7< zek2xR(<#cv_^;rs(t#=9wNqE}7@Tq?55UIevvZt}3*-mNvrv(5#q|i&n1cjQ(_g{) zFMRsIR8kQRuSK2`y6S!=PVgW#WsTM>|h!TFAHNsfjSVdEF zAzJ8WF;b`UjPJ4k2&0y~FUime~_s1hRgYp#SO%tL^{-0Os zi)7gJMB@Gs%Rj#B27#Dv@ct(R!#h5|%^#W$8e?4+M}WyTz{H+62Ep7nxtb9n&wu~W zYU5x-t%5n>%tDsba_{c@gHf*Li(2oT9eu00n8!)07UTsBUlMww#N92IxwFtD*t*{P z4#NT2+Ey1PQ!i%6g)~FcBL_@D&hRH(oeD0c&l`qkd5jabNY#sz3>GKyOvUpFk5=dy z$N_t=KPRupOAL=oti>G;EOp;bX>8%{h^_vI0BQ*)W}I$wu?2*q60D{U^z0 z-%KkvZW3SR!la(B)mY6OX_#1(3r3RnL$|vuvB5}@Qm~BN+b0eEp5C9_9-Aw@a>z0a z>K}_(J2x8h>G%n9ZGz%C&nZU%~*!Vi{o$cn$NPBc@%KEx(Hxo4HnswhdL8 zHt^yVXr<0NpjugGoKs#T=U8gH6$T&E+d)nCRJlg1z3`MFxRd1PTN9anFs{a4S3weo z;=}}JPeW|ZbOk%nmL&o~zJ7Yfhm?krVI~Qc^t@Cgszm!#hIYFDj4REwyVd`lii z173T(1B;0=)AG0BZZf(Sb3%37>LFVwv?5YpEaG9k*v6#Y=wniCbCm za2TY)yCu71oG#6=gZ31(kL&SP#TjuD+7V&YHv6ev=ea-W%UFh@1(vCr)Af!qY>4|) z+xOO*A+wqIbnI3J{(FGs%e)Aq5TUC-c>8KPAIH7VV}1c+;nGFA_)6G)iLftz_hmG^ zou!B`ws59fTc3>w@85FMt$sp8u#! zzv0~ay;CGDFijPuqk_Xz zm+irxA+uN`sVNO6Ceh#RYA}5nIIm>rTg(oFmJy3#vV4={?@VQ}V*@j%x0W zELy0FPx1t%yU$!{xKeE{XHjza1bAPUW6i1NpLX9Tapnw6npgN3MF{2`i)y|6Ant3S ze-@dzm6S7Ie8!x2L=Sl(1W%SH2Y_Q5m#9i)m2T4zSwG%4sv+WC`YGJisQ zvWITyQ(hPSdjpN(gq;4t_yF4MOR*-$D5Kga_nSW-x?R)xz^zJls=#h!i^d8r#^hqUJNjpZ+DSBY__uAAvcsR}6UJDg#aX3LMNhQ3ZZ)6y5P|<#>GOf$9H_CO)Y)zC$-gS z)bd-2=KLkoQ9p@l&L#w5LHENd)dWG{&@s*q1Zgm6Zf`kQxDnRWS1qFRl^>ccf@{ZB z=F6hipHeHAC4kus)C?cN2w}Iy@!H?Mg2}@-(_dA~^5+hV5YkJFLq$B3%RoP6K}uDAS(ecEsfS zHRXKXp~|^{vId-g36z!wSj3`EE2m)#ud%b~^}W05B%&-vp(Q3J^3soBxU>t57Zx`= z)P~`cy?Q1yZwTCt-ZO)>!{33*MGVs$R!*k(revcnhYZGgvSbMr$ z(h=XPJ|_0kS33`!#xF0;@$v+uF?}ek+(cFtjCGb9$Jkl#E~HpLQF}5w=aG}MdBDa4 z+Q%8`C}?wrf8=snrIi2lVsl@PdBA7B#VwsFPKTp;@+L1}7EH}9U#6Ym&_4Qbkua`0 z5U=lFYU;77Ww+C2{X#s9{1)HcAA_BV#~pwB3|^NoXv=+Y>_WR z8yi}b_R~0?gW2^-E~E#Val;2W?nXvgSwa2V29yjhBSL?l_%C2V`~NU(l0*Qg#tf?bwY9CBNI|zL|p4u zx#SP$zt`AP4i|n_Tnroh5X^i*)J^X2)w~WAEQ2O8kBPF926aqIw3`Ak?)tHCeShiQ^T}rMS2}YnhrPsfQol--P5DNmSlKYE8?W33oGdaBYIWW6>xw z|GognQOtnHwlNKo(p0N74! zw+%eTzOTr57cRb0?T@+JY~_e$D!S`nWKkUP00d^f>A>w{P+YM*Ytg;xp*H7WEK2y% zhRNcU5wWjt90)KJ<;5T+F$gBYGPvvGv^9QH7F{+<9;#cQCXcL^(~chE$|1|gs6#(R zVNPS!rWXTM6-Fr!yY&UX*r&hF4Od)Y7Pe8HI^leO8Z)+ZQ9S;d;U{kYb4@67Z0ll) z*`7K5DdDSCVq+v`K5mh0ZR{0bvWQHNgb-|^6wdnL6|W`4Z9^=-U4F3ewspvIErt0C z=s@7?JU37QE$cCAcvmj2CK#3?YJ)l{mu5y5J_(Yv}_Xem@hBtOzBpT2aR?~ zrw5oFx3^2}29TwC@$bY&4c&rqL@DjA9?ydv&xjID{LM1UBL|C6Ij%J7D5a{rEtK+I zF8)tCWtdaVE7prs7`@xuBaOlr-^`9ySG2`z4$;ws_TwGM_{!y&L{$&GaXKN_u=Jas zu3q4O_jKT7&5_gm%LL0xz%qidBuxkq2eJM_c93L3i%Q4^M~sQ}zuH?oR#Xpbg2J|+1tDh>9UjTaj10U ziO{=M_;2{JjaQw;{=2}${PU|9IHmIz*fD*{togS!JJyV_k3-sT{rK31a$<$VF4`$^ z+Cd8ivew^ex!zkjQV3iVcmwX24i`%=;`1T5P?{Ce9z${Y{#P^HNsiYY9qvRLPmBAg z+`5^D#34>3GCKJTIO*Q=7$fXXLDe8*fY9OD|DVc0VAfZYw-C4D)J6B=X`-V*e#;V% z^ZPC5A2EjmPgdtXcB4uDB6f|N<;4Z@FK*v#@R+&!=2nOFuLu3lt2aNbe`j<-qgndZ zTlM4wBZl0}RJ-OD#-xWh@uwy0{le;_Vq{QXTXFlo964_7vTU$-je|dTcysGr`WFA@ zj+T!7CqvL;gb^ZOrx}VAQ97E2S_U;K&q&iAq{w$DKidM1JcXeLY^O5DJjSAwKK^=r zgstZ~^wm^H-Y9w8C$DTZ%SCE9YUZOP0KjLigM2CD`V2-dZ@`IHGwt<{eGMyL*9^pF zKs}IqdDQw;?m{zy?^i+GH~;4p#*y#%6}=t%FFX7Cf4;7hkfowHeq{a1?QzCy52zJXxG*?H$wy$H;!-Z3)-g{&VE*v<}9{C&2`3)4gRJ>j=#Bw+W z_zX664A~~U`XpuFcp6U9r7lT~RrP?D{XxLaKJ!t%vmj>oK0}0DBygiF)x@XD(BJgr z0n?H@GZ+e*4m$V>8(_bWujrIY6F#C%Dp+QRf}@(xTBu22xH5gcgrx#E<*` ztPuSds57tyj7@>!o{sfNq2<75JHBNHr|mu!y_W%?lhdPrVkOuAjp|UCOa7|G^l~o1 zDm~xrqe048|NMV_XMu$1lR!{kfkXK+Mz8Yp9~T>rAP_6$fyMpxKTm((pgH^lKA&X6 zbq1*u7_$MfG!{Cx;Ir=!J1@+VZyZ?hY`@OY4r?>XJ35W&Z%WIBuqFPp`1c6d=-eAa zGMHZb=a2qp4*b=QOWF)*@UnjcmA^ot|C4&zpWpnGvi|N->dE{+PWr!pKvWo)njPp^ z4gNft+4eao)PQ^BZ|HmrOrX>MtZjBB{!iTMe=c)fbN_l5ya3b$s8B!lm+S4p^DG8Z z#2JYmSfa)RMFt>)!3}FCEFx***#RiD8g%XsrhE?9anVrB3O|1(Q$Wsz?o`Q#kPlEZ zPSe&=gZ`FN?YIB=u)~4T17+({MDaU0tL)X}0=M4t?*V~`TA9HC8`pdyt~ip(c;tzT z&Q|wA6URSsxsnb9O>ScOgEkPVXM`D8Ae-=*ONPATdZEOMf4yVgsr{Mxs-}wE>XZo| z13j+jeOr7QPQu*v_S<#oQPLkq0IRhpvFw%AB$w9KBMl8M3jlUooSt^C!=GyNP zc^gjXOw6`v_%@@`F7>OT&S?ZnK^*9c5Zcy44GBdpPeef7dkXY%18pgboZDu&8@%Y8 zZ&4K*y(`pqOVzo;_c(Dgdc)r^UxjI5i(#6s$5^N{R*`2nNvrb7b1d4fN9Osqsod2p zucDz`UtRad4I4AcJE(Y>f4zyGU+a)wH+gx(Ay6L+`ef#qzKiBPTCC2-n`-LtLzpA7 z&wcE6gEANCUXQYPTC-chXF*I#zoKyQ52n_%roI5TV#H!e%D}V$REl@^ozv7+$WpJ6 zv3ph{`W8{E$s$d_Ha{ZGJnZ;(AK!(BZV7>r2N~@Qyitd9_kG{G4_lZ>?l!pgKCI<^ zuKkry$nLv2{`j9|Y~PTj#S}|8iSXvZ_n|{#3qBhlrCIp*n)Sbai+{?AMMx0s<>3mY zEsV6-ua5wOIj#2w>(-OD2a##TtNb+y=_WI|FvDPHVpZgk9NHa4nH-$uN0VOB zX7m`xn4x_J*#I;vafRfiY6U8 zB83x&0HNf3KOo#w`yfRqf9xytuK%?-g08b9S)n)$?|yCtKv~RM<0GNO$0<>wPSyoUXx6f}e$U&7~HVLGkKRc@eN>KJyrxL zvVZK1!4QzeG68tp%Ilx-IB?LX`PWFM210expHF=AWw>J3FGJw#BMNuqg3Mq~UOntM z_Cu{+PT%4tab0BwNm{tjt4xA!ImKTdzdtJkl#$Ap~D5H9Y5la zdQW_Ed`a0eUTossc1kilz~&4c8@|Uem2V-iaG&GAy+TlB7sy@uz3>0uqVb)A<54iQ z4NN9`yuOq~fKPiSNVwSZ@~4&`*e_nd_iwxikRJcyklfpSZLv}zk-kN)%!Ta{B;5-l zm;D+JqtDR6Y;8L>f=w9B#|H~3qcYWy&esIIP0UTUt^jkec&cBMo!!Cf1Q5d3`?8^; zu5+>7Eh;pD3$?4gW$m$r$i`?l|omjY8#%p0>qna9q2(7TtmUz*}A zJ$VZOE-~9NQ&%|KDCbooeL%lIjUWyFFNTKd(;KR=wI)PI&P81CWb)?!xO|ZzhP09+ zI_X2xrVEA-1-jxdaiSASb8RLKqCR6^&GLwtzHmv7Q}9OTN`h|G?6+Wk_rv|e@K#Ve zG!xgLCRVO&^~*@o$?xI*8hJ8JxLm7{Q7h!`6ta|lZ*HSV0M<8t$*?&mg7$tYM@msjhV<>kg_<@6oO(kdKh(B#?) zS#&5F7xI#fAmQE-aJWFGs2F4^!Ybkgtle4~vZQoML2{)+{ApcXqq}Q-l>kmV(13k+ zoP#bgGWPp^F7V7(=>E>(S*25rb7AOoy`}gF{PTIGQy$l=GIuoODYLWHd+)bzQ-ZeL z-PCT(7ge+J1iD%hORKh*9T5R)qlG`>rYncdw?T6K&(Z~tJ01DSjb3l3XrvCB^MY~b zM@#H4|FedXB7(;==tD&*CHSd}gQ_C38M_*ORbg}W<@`0J0bMZflBD*R4c-=^nIjgG z+4nbaDsjUJvkCqtl;S!J2UYg|Q=A@hF-j2@j#7o1g?~oss8w-lDMR%mVs`wIB2K;N z6p1_4vjG=`G(absHF#M@^o^|k2bU_V-luUWm0Howd_z%Z@?9>s8rG(~8p{j*PFd#% zUMR#No}q2?&|M6grE0sc0}^7rgIki&m0S#JuVKkhsF(<{D=6I)iGM&Y51##D?79Op zT(3pIezNe?TA`3Qd+<>D{gysQH#@_}UexOUdm4yjbpzx0yc4W}pNO?% zh`qY3BxYnt&Pbv9jW6%7x~A!^i<Fk4oac4E7DPKfQdv zYJH=d!M9~I<+d`+(kl``#dEwO&V|UKi$AgxW=%N|JxE6G30wEEJO%NzH2u=%%BFav zQ+1cjE6|X0S|Fpr-XVspHl|R)WC%0$cE5g2Pfd{UI4|^81idA7_*S{nw~r1{6%vms zh+iMXr=D5eN|AdM}3rDx+w)I@+yhBtA#dQLVUNj;vn%H9)PWX<8h!^&4qW!Z8W&` zXu+_fkwxhI!FuYNMI>$;b)5FB3ug%X=-0F(f%I(dTC-CakmMOVjlN0n?MFIxPPSwo zdlGL&n3B619Gr$L&NR4ml-lMdIJvI<1ytN0oA!X^@({qc7wh(M<6z? z$Z7)wT3q&e&~5H$_)%8uE47^v&}psb5_dt?$el{ZB8kLUujdUkjvS;O_o^8=UeOB; zC%&;bua8>knjQ1qb8%@IcHb92&5aiaJk=?yc3QDKLum~?qCYr% zs7CU$flV=X@kPMX_D*rZpGzfrq<7M4bG+q>%C;4FrI^eK)77F-o7zmK@#-H_C96w2 zaV!<7JUdl$5?AAGPJKaTKiUG}sfqiR#;u2hT2y8ZV>xjyr_}IAuYCU8#SINZ6JN=` zz4PNeT$fDxd^=svTSx_LW9!@mem*z1HQ#etmt4v3G?(@@aTld1*qA|Gs@V%P? zL3@5vNE)ke)1eqHbr$A9d-Em&i|TOH-1G4$g6!VU-K{J?^VEaU0HE{k#*& zvJ^zbo6KHBiR=+sl=H`_#rJ0EQbxN(c>UWrave{9_Nc_(rkRU1QjgFk{z_uHtW(_O zwU|Q%)L$^DYw~phfr%p>mTYUkW7IY?JS~7kLXlO_u-uyBgacir&N5T^&u=6(_j}*ZfO!im4uo2XfejWl^mf&F)hl`osZ(Gv>r$qHqgnYubj8TV?s|ybtBxT> zRQOXEiRGxOcn+)4kbth{RC2K$6mo#_zVm)J2-ZVM^4d(S)mhasKlHA77GJc_WBFhX z7khf7an-I}2-8&QdzIoH5AZ4LC&h=>ze*8-4HWcw;RpDR9%;+oo85 z-{cHLlz?wIHqwDe!{_T(Hm6?gDq9)H_$ghu+kzWwc!}7Vvxj%@Vz%m^DObRR9%BhC zkmry*OxZGI>1?v~C2;GDr55z&MY%r~>M++JdCb>+Tmx8YhPGEX;_KA|Tz(Gj?GQZ$ zpd!5|-X09hsndJ5HXW>TyL)Vk z5Chhp@maOYkMzp%A3@jIU1+W23!8xKGx0ruFaIn?OjRY4Sg{zQ!!UR=)>^|d?Thq# zwhlz%3W+)b)QQB{apeIrRT=g{%XKL=yRjqFwBi&*duCgrH|CLxGPiN@_E*NWgnW`J z)Do+>D|8b-N?KMMk9(Sz4B1I>@Ov}8B5GDlR}G?Py<$5*8s48`I51bV4jae=$vwFJaE z)gX2N=yS0>2w6JyiDc0$s{yQz%9Gn-!mpa~6L4?l9Il^O8FDl1J3?ct_^BbjdbI2d znM4D7d9^Z-%JDK!)r1i-N{X`EKPr)^*cn4k!sj}|xJGVnX0Ez#y8G!~YL3n8fu(rI zKKvLt*&7*YP4_(e`wh$L=bI(Y4sVVpACKpXqx|G8-QqcMSBSnJL|r1XbWx|0pPVnR z@vKnvoG^AQKbdtwTl64`B@Pfio+8mb1(!EBZ4C3s?d>|HSDtkyrpn5I;HV&B>>@U6 z^$Jx>RgtLVRJn98w_b5wn6^J4ExEcFFWbdmX}PTIw-jN~rd0Fs2Xlf~G13E%=Eg`zq0XH6|C1^)!Fit=47LV(1Lll1`e~lvHfW9vaDYEj9 z%89=$#OBf2OSw`u%Nxlxy5xIYTgrOgCBVqBbE5Y{PMk=xiY$xp<)?LY*5h_1Zs(ORE9Z^Y-O;>4m8l zcV0d|gwSe742}vfz}k(zy{~g>L??W@HvPV@1#%Un55(TvCX|KMcYH1Ac*Jiym=ch4P=QFPxEY;A@D3z)E z3~D^kc}t{Hv4JePo$&vF%j;~b09;;e<%7cdj*zMC%)QLh1$es6^icVaa~E6~Tgbbq z35vUrrKi#Qi@OMNWXxSrqVdFCtX-v7XxXi4ADPrwi#_sDmYf&DVUkBoc`3p zf4yz#^UBdot7{nphf+qfbPL~IDSg3?7urrSmwHl9bwTZ>(k*;t&2@XUA=4Bnft)W? zOk-M0uRMW%@ODne#>YrU;klVM7Cvy{utp0aK59AB*2&i`>gXE2a#3xO6h3LV4=}6z z$%Dr-PP%eN_vk3iE$Zk?+K>;Sc5+ipGV&M_Ae|Y@1jat{Sst`T=!CTVH;!$!mH!FL zm){@w{tK30{MpYPm0eb=lW|hu2&R(z+_PssSf@pRK}>Fc{lQl~y8gXbaIu4)f(V>52-Kn0>oSj;$idvb z=OS=-6^~ooUaHkGK=f56E-1kVSb?1_oPHnbzX0$ooq04}mOAD)+}~us&)oEnT$2!Y zH=K+lf(E|oB0}h>h~A?rJP(TPIx*i)(Q9v>%0Ad%ECI>${-xodr3d?8?$Il<{)wuQ zQeclux^_F3SaBa3qK@Ttn$OA1&wJgOFF|+9g08fPZ!{*#^fRd+0zc-@hRAWl)ez&)p1zZFfx^PCNeOz6aFn z-~3BZ;9YFCSf0T&!268W1z+bp&{?WP8?^Pap0SLY06@BE6N2{8pL+(zLR9~RbnKwd zc9yNIk5J>C#3TSHhXX{3=7jjKNT%yaMW9 zF!h}^yp=mvzuLXwr}ywYOyM_*o~(`DhipV5rK*h#5?|GZ;QxSO;53kocKFzk*?xDw z;w(^Qk)$79>l~20;&T`K!fSOfUjR4OeJYIA<{?fe|WhqMJ=6-0pwk# z_1|@;Q)_-__UW1Fby`291(qI_+HbT-cjN&Y8R^w0>vwmwa~xMkJbw%o={H=gUAU*K8fjsk zrKI>i|J2mce_r};oLG(rfWTB=u64it80etGaf|>%A<44zH|ZOQ$j|?4%dlN z1h9repCdDv`@H4or*Rh{0=u}1v$cT=73IeKd|fvtJu&~fw3ydt^!FSmz9RZS%J5&M zr*I(U03&ng_&+D-e=E}dznxGbS-o*yHWOrnak?C~DLbf(7!0MqggyE$1J? zl%&3Vii2qW{JZJxOmt^&y;KJQHu#W8ny& zk)9$6c*k1XLL`_yrW$|mu0Z0oRxt4SX4gFsu=-!{j)8E-!P~!pUe>on_;k)0JF`=6 zwDUcE@vIS={8m`-VnmoOX#&Ym2_`t-^EI7hK2vxM?JcgDmdY7bXS%)3u4sYONcM=- z=jH?rF%>2*OAU+i^@Qk*z;a<#_I_x;af z1di`_MA#fC(yk@Jw^ZG(FsYb(<(HdC&g{D}HJSZ=*?{;;Q03D2IX3Ml5KnsC@$J%J z3l#J$w|G#alXdjdCt+&PybOy7yMdLcV}T4RRt!m-mwF{XB&j3ndvg{7&X;5c{xqq| zINig*lnDf9OCL-d62vB`zVrfBTjrwtuM$ZU=wSJWc?^sVR1Y3R&wB#;B_M9z;7H;Z zVJ8FABsB%7S$?xr?S>@+=SU~B$$!fVjbDT&KcDE;zUnO)XFZJ%*b9V3EQ{)cxq zPFMn^Z~L~4a4{X*N$X5iF}1sdp%d|S?HO;_=Al#0uSyh^yQt>kJJYsk==>I^RujV` zM3HaO$XHsMDuJALRpgV152|#uC=N`@S!v)(<1VLuln!0-z-)Tw$ux`LC42g3PNn2( zR|~3y0=#OuvKJ=&T7fsYS;;=OKKfl%s8fVhwl7UDG)ecVbmgN@M^oi{O8rxW=HcI` z5D~@t=cX}!e8A9J%P32dig4^u`Z51Iu?37Xj$NphaB66NzWJ&ekHub>(JcPQ$#)m0L^L(T>U}lL*uB_68d>{ARE(vV{ky2g(+ZfJep)EY9IH!?ict z5>bsK0(#k>UIoeuBGC%ZdTpfaLeR%NmInN@~BWsmCe%pr;PX5Os0g=^O>Xx^w zUIA5yFZ16+tUR$+co387#BlZ|d$hB|&)E~a)A-=_U@dFap+ww=b6#hgf#A6**ZZ>| zK7xTk5`US!m+#YD1Ik@E_WY4xq|PP%vaUW%m8SqgqxFh=Q{&GocRcP|ynM2@P14Ae4A1XG1kx^zVZQ0*E(0`Fk8;Mm=hJDLS&Bm8);QG7XUeKBM-FZHBbvbwvxI_9G8yd42i)xyBWWeyruQX74ED@z1 zE34Xlc>RTiO{vMWi({fu*kfL15UJUHVaNALp2L0KK-_j=-3YiLyHC;x6h*FnQ&g6>@8nz~n^e316;+nANixwQTlckx2-3NiAanIUjxOd7HB1O0WK4Fztx zVtL7MT#N`c*!9K^OY1ey%wQ7wU$GW~mOMEILc2!Af^+xk<;h6i06M1PW`oKL;N1^E zLA8fWeyEBieN`j zX_d2sDtRhlU{TshR7!qKK)Ycak*0V7jDE}QWfoKaDaUgtZhnjk68eaj2@prw_yyzkdHC_5-%p3g)T%B=Q?-Xj?I9V1L3aPM90|&0a)e^jvdQ7k^o!qoA9S zyZ|o95vNpe*$jE!60)j1{(bwh9bjm9!_H*IZJLJAwLfG{q0Ek-mTIHMK_bg3(wzXI z@?pqVtu<^f|IQo7gIWYbwnGC>EJn2H*T#nzF19;%lT0?iF}7*DUz~v-l&1?TSUK9+ zIJh~by1~!5=>sUML}KLEF`v)3M&3DYP5|XrTR?7dE6&}FYaqB}za2Zo_N$!!B;MP* zmrsJCF%Q{-K~d?IsX0`CP6}HBMN$_0(g09+qDq z{;1FUh{wcnlanR_{wHsK%TPq}1wSSJ$A_Ez54!=}0MnHByJP%`Ie}^Sra1$G;g87l zT-K-u-KaAYLxk;m130$?YCSCai`S)#DI9yKPA424o20!=1*Du<<*Byf53X!{CShAv z^8qS%UnY6JLUYynDiRmpN`7c}aAAcc3{?0I-2N-MEKY37%f$?tNgbJiK-D06QvzeHgK7zBR@9-z#I- zicv`xJ(eL=Zr>iLFo|5LGb}nCeTqvLzyvtbC;c_@RAPX)3^%3-*noMnS+Hu@Z~Z>4 z>!vxvj`LkYB;$x{BH@r~IM5^MqicWi2(RMF(RyXSMBm<04bY&nKezwM$UxMv5}3V= z~+BPzGH=>*-zvO1b^5w1Tzr7``b`nsxqfck;*%qib;A=0(x&AW+Jw z8*r!oRo@2?as6M2!GHz249)+)_y#~G2Pm?RD%-`r=NgqsrFbGnQWOELLBKy_;@x?q zBC)HPx@?)$5Ni_Pl>ynUmjUvhF)#cwCo#h!0J^vbNWZ?9o*qTy*}4-!F}i;iewc;< z4;+waX}2>kOHA^|cq6U>B7^kwnbA_CQaO$ufG6fX+er^^;}hZGQ>`et(NyWY{-#0w z7vWzgIeOs?rZ*6U%c%Kl?EOOL54oELv9^c_F1n*=T%Wm1n@C+(_@(G#Gvuc#P!yv&H3BZ$1@XdS2ldTl+~k1dQ6Kd zE5GV$bnA;KkPjaooB0$aHjl5~Gx21;aQ`#su>!C5^{?Aj?hJIISdoElSqq@QY4qb= zqHUhFlAy}09>UVtVylPdAL~=96Sj*duI5(;xtIfOo&JkjbmRlM3id;5Z}Ng#@t?bOR!nE22_P&oTZo*a67#lQSVEd z*UVR={gv)SQt`dOs#Szo&L7r7Xr61N_JXCRwWR<$=D)>Yq(reXj8;xw;F^rjw^qc^ z$aADq?4#b)1HZl|(tKU9r)FPnb-{+%qCi;rD)q>}ZT$Brm>rFte zi>9I#w-(OW`x$^cH ztA&F4G?o1HlhtoQUA_#zJm9PVupYlpPfnPB9k61LU#CySW;uIGq|0D z{D8f_dd*1tO6*VPYLEa{oD-XOf?!+J6PUt81G(e>64C9PNZ9Prho3sm*6Xk3ovub+ zxNijpZ#KBS8NKTFhb$Y&(~h{WF*|*n5ZrnSpfD9ugoDud(pRcIlrjA3)-eHb>ejAi zR;k~}YJURFgHQeX0QhEfz0?Yb`O!;`S*5nf^$!q^Qb0gm=`4%jpHcn2pJLp?7XyHZ z&vd}9?jAIufAnUr=;6gU@NXt;z!DnHQdzoq^puAIAg9)8yl3nhmxsUkNqt;0zr^Jb zhkNil;SXvJWVJNRM+4aoLMH`nJL@IL6n@v)m|&vO_x`P-`wPOP_Mt+RHbU}xPe}&z z_OJ0f-5|4h5Yr8tOHc_@3%~Pd3~V;4)J1vy1tqp&t?*AI$y}q2uzK0+AV639b?K8u z=*k~S?WLZP`q^I8$xmggQ>vt#STyb}4}7=Z=GRXxvCw9<2^o)386i4ZK9dM;p@}E$ zh85L|_#qk21QE_V>X9YeWLTs}bM?C~9*k6W7?X`3Y*s+MoI85TaYugZ; zmxqU4@jBY7IoZ^79aH4PIQsE^9BITf95zVWk0YZUpjt^ z;ah4}&5aP&t}X|iX5aBjSGA3g>h%IxsY~Fk^TC;#8R59D$w!22wjJWAgkT2DZ^V1b z^0>G8%Ifs-^{PwEc;%T!-3o?`tg^Ibc|#HZcclJQHCNTMbA#%A?7)cL>DC#23Qx7| z>a5$j&`c?!ZI(8Avmm8ve$&k#^zt|C@=wJQn71xnS}Yr3K|M%xFM`axx<6nk zICN2HXRS-dRm9=q%TG3Y?Bklvoa#L*p%UY6GU2w~z^Kk+N^00~lAJ5Mo~k<1W4nuF z({m{nK11BqotfXNT0c^?*X=u4;8C`x7BFD1d$RbWp+NiMT*A!bw;wN19yO-auTmig zS$4^KE#qv3zUtKfT1Xx|)|!gjU`A`EcXuC^wQgvO!obGs6ly&Mnh>|ZV|U+5?5Ys~ zgnH#OP)fakdd9tO&ieX{o8Zl<*F`?ff*;n=q@QbNpiy8yTrE)8VWPCXQoX^^rV>6$ ztUP%WH>yz)(%3zTaQ@;5@6*VxxRkIc)-(dB)Itgs$G7^@7?7X3}j@uAHhP&qnqE3O@MwNRfs!UcWP}R+>Ze!hR}Z`1^v}oMq0r$@sKn)K{Fzw0updy$|4b zreikf^(%<_r2c?S@_`~AOoSh>)Y9N1_qF$o<6H1F5yuBDamE$xyYDjIy*w+Izwh8$ zQ`>NvdOqp+x772hBKw14#~YPDe*t-*hlkP$^M1Sdw`J*UidnefvMDk-aR0_+0eG7C`+ciz#SH0_+@Sxfgd z0g=kxuUrO%Zoz_Y#0vJ0yfO50LN9d?Brav)VS$+_IWLa^vN%x9VK%rpSz}eZZcPnR zvE7+^aUA1yJQgpgxU8ZlVtU>tH^p;Rzi7T$G*j3HP^IeE3W)Y5D7nM(B3m|&N2v6X z^O#0<52Y@x9JZccrc>^_*;*GgsYe?7$M)cD{R0j%dJdhc-6;>b5kldmft72;iD$uw z1ZesPjfsdJR{ZUSEJg5+eF0CahG*IK=D|->YiV?Ypyg`gyLU(fbRoXJyspe=lKEF3 zsa=kH+^D>^T75ge8Eh6N9iGkN(>4}00%ZoQdsw_6o3#Q(Buic;`kkpnOf? z)rVcmazlN=srRWm3zo=dj8xdJBoJ0DC7V79_jaTfKt_sV)>g9PUSQ=9$5Z4sR1jF_97zo#f(YFqU znXb2N>~Z{Tr^M;W)B?9-Z-1cW#2bbXLu44ALN@Zdi}v!6=j1T@<9kj}OP7r>=Q8c7 zvg2PT>3jB}&>PHcbj~h0U9cFmf}7xuXGTcRoV*^dS)$9kq>1qbVn7+Tkt!yV89ktq z2qb2sngkJEsgxTcpqT|-Am^4}zhqS(s_Xn)=nS78J5;W~c$>F&dt7YPYshnyfjz0@ zu$YDT!U^MJ*fTqWm=H5Szu~5eF>#v{+o&7)^0nLZyZ)Hi=Dr76VaaF*Y%cil=y~JI zMUcVRbLn@5Ql*A9@4LjA*QR%|F+z`$3T#ynhx$cZ<2XaV^79TsplHYO_)n}!(K8^I zK}U3y>!5%n=wa~2k$a&g&+z%iObv@r_oU6mmtt8Ut)m-QCEQW(5pPLq#5t#9zY(IR zHp3j-Z%MO$0G$GavIu-#nA`q5^0#uBudQUm#Oca!SeE=+Ef*aiZF!Cjb@?M-zBW+j z?Y#vWHCdt9+5w`o{h4l{D|D?}>hs?)HN7D&pj+l`fjPz=SimjE&QV4s?7KuOzpRZ| z*+dZoPRXNnwp2{Lw!S|AaoT~++qp%9CQIAv_VzYYrIv?Bd7N7rfSNX7Tn6$gKoAs{-Dt>>!73nB(O)l3f(COzwuyTIi}m`0N1C!WRfcGG<@w+qji zZhTLti*v;2a(+xL&Ee&~$K=-*JTKYQJzFt$@?;hZfFPr4wZ-k-87@R^()CiC!kpJ> zD|q&sG*T+hIut7?>DV}5V97fK58}A2J-XVqfg+6FkL@$|$BYk7FV^e5lF5fWw!ETq zAMkoxx#Km_#*Onmi)Gg&BYj~@xm!@>`-QUu;c;jH=L-`34C5t#A$KK7gVr;e_Shox zRh&L&XgpEqv8n-C@Qc9k*VW4sQCn+j*S%MmIdkK`xNn{c+4m%Hb02JAChNs8n_|-& z6A6N*JzXh+I5^6^N1ke`xHCEFWcAESZi)k{<8;w2(eGN}g890S><|_**&N&}>60r@ zte(kgJUJa`fg|@?SFRXswBXdgU@MnMK^$;Olui|#|M=~9ibICeQGOlxSnG^>KMu#t z@fD3?&4&f{OpwF*cls-4G|vtyqhf>Jm-_Jgzwcir9|mVv4H}ry9Q>3XO?f#G^O{r& zN*U5(LTtVyS#&IxJB{`>(e#-ApyE00in+;4D9!`**_n&sEp3Y>Sa=im8~s5i#(F#1 zMpX>zBSe!qgd3ka3m+Xdd(%wnaVnkVzzg-+Q{!OjH3Cm_WkEu>ANih~dnm2%?(#DhyO^e0Gtx<9T?_5ysqO9+L}%o*^jG7&z)5D zG&U|I2GI0<6`Y23cH)@%&sBy49(JvyhBEN5h@e)TJopc<-SjX73mhM&{%QavOPj#R&AtP^t<@%AwHq+U--)W z*y^%H?*~EN#eqbi2A+>m!PqujY$!G~Sho{sMdNvnoG%pRoWdI=cEfz1UHi#r#u8Z; zE!qYR;1uq1&umVd(~Q450uFdoXBalA+%vA%^}AlK@qFjo9`~F**T<3WQK8dxSc@z6 zq-BCB+uC~k8x3O_C0CZgiU}v*1BtH2QOmg!zsP*L_@>7J@}Vt6wO0+M=(J;puH|2I zZwqaq&>DL6d}T^;H_zk>uAMWODu8W#?sm?*$u#4jUS)y@^|iVj!x~ZPUaECkk$~u` zSZBROyK}^!S`>Pn*-N#;KX3NOhpBlJ?hNy&a@U8y&3>b(2Drv0s251XxISpVypsrd z%vT=RRdJ7Z|1qgLip7fDjNf7-&J1`2H;Wix;B|+5_`vRxIbtkkjuxfUs`GZ?wUI_` z2Yc?2=Z#1sj8n1;f+4rs-FO-%lCykAYl-pWtpN^A5F#n`VEVb??u89buDS-!oxUTSz?eu0YDz9<#iYeI%)em44_H zpW#VaEp8iWyauau^J@Q5WlVerP7!(|5QoI>D`9R{%Pk)~Hw60*ZMe6Hessg->t$}r zdOj(FVcP0q#6w7Y&mKP9opx%@>{G>*H90(=5LdL$3nikw=sw zDl46qdW|BP{9M4`t3PqGFqT1_#Sv_8%H8E{87gxs89!Y|o&Ir7U<|kR1Nzw6Xh*#y zQ291Q*Y;d;;hDA7dj}@to6l>z$CZ9A^V+;alPEqA8?>tbF7ze(i+Np>bG4q??Z}oN zsL>D7zuI><+-#04qp)Y@w5!$a7qI2nU@S%pU59U}DFl_i=0GxGK!J_rVu#8`DhL!6 zm{d=yGjAr&ufp`~T~RDe0w!-){81<(Y4f@bFVRI3`RtG%6vw*G*2dzFkNH|~H;*V< zlZ)(IJ0wvogI#wzewcy9trc#kf3sF1=pN!ro<&H~26UI1fH+=Bl{*`s#j?OP`Fb!O zA~mMVt$O^T+o1-!esy~px~#0W_ZEe93?d{2h?6#8_nn^2ndq_f(Mz(m8eU86p-MfL3t*c2H3J)H!oA%>E(D4ERH1USjphPZ z9Rzv1RY5Bx{k5-MTjzKC`Ca<8*UW3L8}tT?OXfTan0~%*bwvWDO^;u{b$e&3#Y|@! z>dZ5%i0IRNJr|i)Pb_|Lf%<3pcSH~j6w#9SfKeM@ zoL_*g`_QyCd~y@0?fJfzs66RA{#59>x@1Ik(^a^}XRP0-n}|nODgg^|T7{Qq9(G4!@+-7r?ZZ0QeQ^E4;<>J$+!-*Z9T?mr*&jj_ zD9eu(CG8rHtZ<-DUCTXG(ypi4F7K>6m{p-eOsjGl_T1$%U;V|??=6L&bUHRRh03Pt zt^(h$>z96&y<=em=EvnDQ_HZ|~m)aj0H%0pA7=q(5J2SDSFJdH-`Ke|*XRPcCBmj1?JnKUk-lLM|m& zWQe+4&Wt6)VDD1z`oEv6%kg|7_$B~9=xZw2e3+=Ny4o=Y8Q?*oF(5Z9r$vmLX6x7sn(I=_!^;8U<+){9Ce3yX9Wt+`FDlnYjlHyo zGYf(e5EX~$dot`He8IZqm>zLCS2coh5CS%MuZ6j09of)e{4--xTCIgBwKk2jPT)6? z(@joSFaGY|8{%?cuWl$aZzGHGcOAb)DLB9XIh1CxmP3K6Q*_1bFRIl^Pm#rUKQTwp z@Z<}&w$*uXFD*@9BRq@gqCs=@=+_hkI*L&Z^1ZCl?$I9+4Eo^dT-8Z#DkO18r+nsK zSabBt_jaWP`*_+{y6VL$t#i7fqDqMXn&5Y&CT-0fP$-Rn=VzPz==ZypN94IU~i>a%u`B6T%WkKi|r7bRZ{hoCL#=6Osc=a}a{|?_b8uHf&Y3nBHJ@cpa zf8U*X*HHz}Bzo^r&u_xy)e_^ddzFPVF#2KM-2Is)p`k$nQG@xysN+}J{w43;YZzJ# zyg4&2s#wYM=dspr?V_)ke;_V>qX0`?&!Qki6(G|9KPc&PAiYb}!1s^gjk$rj4=W_L zkrswmNGZk8r7mF8suZKyIan$+RjU1~?v=az&k-(|k~BIPP^{qoBh>0G!@j{97mPG# zV+kqxA4|Rg*LcBQ!6Iu;h(i{Ob@MGorfRUNe*WTDR5*HywAiycf?eA$(qvlvuJU<2 z=vTCMy}?jN&LWoWGghr2-5N28Bk*V;>_kyHt6o2X;jRM?0Z`)c&zI^G<9V3R#EoKa z5jre12D%+?70;a5$|_}Ty-!B{%@y;K^Ro?w`8{sK9lj8qc*w2^p_I)tQg434qyyN> z&F57bvV&=1*u}V2#rre&9dB_#-U23-+2>VyzUDhnQ7?yD^%>F)n* ztY=*?X#NIRpP;#v$Cm4qIr{A&E1b!u#tDgP@VXPdSkM^{2LwQa4eAy(0fHt1pZ&0^2i9bB#yqc>_FB zezxieZuVvSeLt*MNH*RQ-xjj%#y>s)7TTrxTCFTtF!E4?_*h^auNN{63nqk9rn&vN zbe-^&QbxS>H@&vAouDx9X6stE3_qwKzcr$jRiW1#}PM|^=x zkCEJPBdEsF$5q&i#zITfv?jhBf*GohqHM)cPy!bL#`@CTNOL_zW$BmMJPsseIx4RFv+g3+5>PQn(!;a(n zgW=-=Z4II%O!SHVWKt1J0KZkw871- zS_|06#XdJox9cvU$SFoQqDQD0AxxW?p)=8yKHa{EK)y;w)(l~~yJW)<=Quz#%3vD) zIM-ohVDc2(-|i`bi!F%O7{-hqk9vKyKAOD+=?FIbXbVEPAp_}Hq(IP>npuA-x+;&i zEsD?ABsYFRlkLhHTzL zp_{7S3aZ!TV((r=WPUo14#j$SZs)Rb6p%^3^PKn6o3qxhG9TpHJ|N-KO}82*p-tSg zg1nR{mN-70-QJizR_#DGyJVb=%PBC*jLJe`hd7Mhi=F!PXF-`v!)XCEH&~p92a7;Nm+x8lv z$R9R{O~WqdP=*UO`FL>-mf|KhGX=^is&QOkwnbF)VZ*c!t6?3c#t=?!LN^=r*`hpa zll3<9>NK{wi6R?Ak;o%QO>>8G?0RDFdtfmha;Ul~ZKacc8SKC1uI}~LaOHlfdHF1bh^3(2ynUUY zm!l1Bc<7^=6G4tA$0hQXPTtsc0OJ`i)qdmA!3KA}7#H?BZc|!bJV##i9pA2Azi*dO z;Lrxyn;kmWCyCim@zJeGNV+KPJU3}db*JM9K&!w`M1X18 z8kp@597{l3^ABv(ob|LiCO~k-3flKC=k_u1R2PW|4>tzz()1qd6RFN4E+Wv|NU>tK zb5uYw2)5IvmYHaAZm^6f&Fs|u+U8rDOVh1W)wpBmikV=Vn+X9iYJdCKp8|It9$qoh_pu8)KsARN%67<# zfi}a((&5d@K?6Cz5(b#_Dt*SRfkLCt`iqspq(5gD&+XV-4Bx8ok=Zi=6H{l#aX<8^ z)ldTCfWaNVZhtRlo$K@=xcSZ26L+1I*>);sgTsx=F)xX!A?2CR+7%5B?9#Wq2HPI6 zP;R7J)PU8xg<7GB`o1|aGGXKOCxRn*1ac%2x$oEeindHt9!UmPs#0?LW!7{0ByIyFt)M{$cR>ni@DNsu;=1;<=#kI(aBD% zGcs#tp*A4=5x#hG*@~M&>A(k5_1k{mg(mO3K|1*KE9E zBs8$d$?dAq)aZaNwb}jirH6zwUwvoUFyf^)$Hfh+jN<=9KJ1a6~chR~Q!e{~x!?Nk1 z3Xt2tpZVDq@gKO`ej1i&bNAcL9R)8%Q<|`bU5f+cVk#Yp zxD~6RNRo_(&M#SgVZXNfjHfn}-aj8s={s#nuPR^r9JNS##+sKxSD)bgarn80zy#e~ ze&)sU&_&o9k?nf2j$&r~=423ddEzN8Sm$6;-*Z2E|=#Jas* z?b?OWzC*!CB?NheIFH%P*6n4jb<1F$y#Di*)ua7*$pPlXp;%_*`B?n*>`3a5dqsV1 zIz`QT@v-*a``@~!c!!B-&!UhWyt~GOhnDE9QByY%;v~k-YW`74IveOi#r|#Q_UH1y z-Nvl07@*`In@HUqw_T+**}3H$oK)5z+hsNiQV!gL1d%UDvoMhjkT@Dgo_a3BXbKj` zr1>0OA{^4HB2$$eWR~{czxMr{l`K>4$#fnnF6D;Vrxo3eh@WlU68e}Vy?%CT&rfpO zp8h)QPKG*v@+|w_!K|lqnLjhM^boCC{$a90$h-F2hIk*5l7D8!Nf1pQc`v>R(AfHbaW3 zieXL(QR`3R<24ll4}sEtciY@v@q8~ls!csLkz%@yZ6g{C@jg@|~^^*XmkIMMc~dbVeOX zl@-t3QekBavs75mY>h&!$j)qQYI3FZYe?!dl;vUcgdg|r+sM0}?+w1C*D^eW*lRjOXUXrm6+u6na)xPqIs6>iKIwIH~5OKb7yVc(!}3`Q2@o|A z9F#=*Ikptpw)WYrujf&NI;?lz1|A@#1!~Z@g7$)OZRb&UI>A**&O`4L#e^IU_Dt`Y zDV5qZEd*2WCp5}Hh=RbVD2W0TUCp zWzu=76Bj%tw^7SCpp)EnZnl2Pi|v^bg|;3sb6vPp15+;NISC)PjTC`Xf;m%pc6@x$tya)t5;-U#RG4Y>KmD+(<}U5cs~!$|7Mqz zzL%wgZyL6Z1YFpdx{V)NFU0IN+b+zmddHiJuN)c?a)%15%)urHlo$lAWVwJn7TIw~ z3)>?%%y@kHH;|M+wxg9mrd^FtaeE`F4II;~Y&e%aRBl5qlC?$yp5(TLLZ#*!w&%qz z?0%$zxmoWwiB0S;ug2Y3Wvgw*J@O7pOflDJfjS4&Q10v_`_ga7$35cKp@d;}k8?%X z=<%uq;QV)ti5xA0utWL^)k0>C!P$#=DMrM8kFsnX ztW^doueAklKzInn&a9C)ngI@A8~J=57K+c+x0JM{(BH*PCAwOk+NxrAV+qS!=d!0y zRoV>@dm0p!fDhRTe*^BAg{AmELUMvQ+SLV)okBdk1f2&hA`nA3>E)D`{Ltk(axz^ zXTSIQ={C#V5Gyh}e2d0^ z3b+WkWD0}wi=FHteI_B_;7V#A-Uj)DK!_qZT|RY-h#DD=rk;IJmFmIDYbfJlLUj|o zwMDzQc)yDv9;U74XcjCv>>R|O-Tvbggz(_NZo;}DJlu@A=GUV$M-+3*UQcAIa`3@5 z#0-lX9i;qZ!V{35%d+hjufrnEz9Fq>YwCtZSA1!+OFn-1QV{OR(N|j!n|8rkeAjw5 z4~d9-v*+WP!bXp>M4`}HDB*p_me_F+v?9O3?yNk;;Og}`)W$9{Y+l4QxK2-b6L`xG za7ys>I$6R|wH}=j_%uk|_&Jx$%waB17@?qHtwQXim6OzM;W~phNjOO!rEd zHN=ziwW^g^I{VBi2PU4gcte^+sNah&Udv?BsDFis1@x76W2tnRz%z@ zK30tvB&qayH-T)nMo0MFSBaLW1jxwI(}<0`nlKlP)>!E=%ZHVtr=wbtq-bP{;aHb8 z_ndcQ&-c^Yu#gsp9Ttrx_+a6y_<`+me2*SuD^-;wnS+=vNQ-U?K@lT(@Q=}_s)9YkLq8wcF^v+}qjOuE4 z{&Sr#yuavviUt>Vq3^nYYoe37W{x<$qUHg%mH04y3SMTA`Mw`GUuJD){j#{VR~kg1 zlC)@zx$4l-hQbYZ5cJ3ujNKWhlhk{lo^?J}YZvofV2cC%hVgSH7=gHTsZ z$PplgaO}byo914!Li_%cU*kF1AECJJXg6HTWV+HE2h%gudQ z1^0LNu#ddWx0!zU@ZWE?YGhK-5-WO!vT~==NEUk!V`>@ASW@n|^A>JsDZxY@E4RR@ znwWSl!0Z)D_2J)q;n_-C;p2Npj_947^SSjVK&wfQm~&h?JjXItpF3Hf#n&nxtTb3? z-jrAsf4d>I79^;F1``xy5a2mn)0=^vX{ur+BHVv)eb(}ZJAa8=+P`7?Rg_pKS1V?a zXu}NpnnAYY%>3qkOYff@`OUVYtYm~c$QcHA>t@L8v@z#4a^&IzSn|3%^T-vJCzi>?~mZQyP->3`La}vQQ5JA*eyn?IzqJY}Gn& zTa~_Nu<7$@^h}THY6M4Lu(uKo*t}d?OTHt&n9r* zNx69<1|>RLQ?tJ)VRZfAf?>u3&_kl=Osr#uAqnrO^7dzdvP#1X6BRw$i0ZsBSH3tD ztilLYAFQzPw|4;^G`kDtGYES3JH@vI0{oW;^tsY}@5ljGk7k@aq&EWK)pNfyttPdG z#3PC3C`_p8$96fTD&}J?oOsu7cHDbS8TwPju#N7TIGPSu!Mk)#qtyj$5PXxHu4x-- z3&4~le-dUp-`qinE}#-jjtpY~4S-or-oB*g>alEUYd$EA=z~H4`TUa$#Ea%!NT|ND za|wf{0N)_D@K3O}1Mp7*DR-A$FkCnO4R61Ci0e;3@N`?@Syzfo9$F1y!S_gZ`V&yi zdJTd;PczZ}LM4um()sznW3l3U>NKW%LUUh5P4!*Q+sz0*SziNI^71yX{T1Q8grt>- z{_}YNRR2T(JOY1*f&Z^AdXHDeN*&YSvG0f)6idnB?HStgPjOT%O6Wx>J7*4j4R#KW3>8)n zujUUNFdP%kU|Z%>Ko`bg@2u|=Fm4{t{)2w~4+R*w7k{%-l%zia#S6(EoSxRrKj&YXWzq5V^+=)~5Jvg+JFU&a?%(^p&!U+C%vUVgc8Aa9IbYyIqNIiVW51Z~p!hOT zejoluZ7=8;b%LWEpT0_MOrgHbhrZcK3<0`(ykl>k&;BPvWxhiBodaev6FsFWvz40~ zA<{XymHnM%am8+!l3u1z!t&5W&%L-IC+}LvWugr0?8f&U_no`1%{fcP{gVaVL2~mQ zDfHex)s42zO1EIF%pLOR$5rto#(9t7uMTg@y3uQM?;?YpPx1%*n(!%(SrSC5jFTJf zG{|JSGpns$>is@ieXB{@wb|nYi%=OIW1mUV+QXGDF4B`R2wbfd_iY|2`ld7sKB%l3 zCZ={}U{n0 zd+;qYR03ZFkx2GR-XWq9%Ufg%hL4Pt`C~(GEv1bIWUi`mD;&Cv-JAHbIBCJ)yL7+O z*toMbmPWmQx5|Rvw|j}JKd_V><^~>nQdY%o@q+_ijr|)(wh0@$A^aFskWG2lcDtN9 z80%<)7Gw~GkAxv=3k9=yYqPq#q5njhYtxf#dc1+LWV~c9v zv*G%D?h=+Xbiu9{ov-{d=Moi>c3I}?DXG_c{FDL*p2)*`eD!7kY#UMTt6|e zvw-vZFC#MUYSI`t^Hs3>ZR}%y9q&^RFbM~mxXEg$J1)b%Kj?URuVJ97C_zagQ=sj%DL?*$;yAb?&yw%BuvTU60$#fP=W%ksqc00LuETyy!DchHxNgrL zCn{487+KUO>^eZ0;(dCXB_jfL!>yH$CAe)Ch3cCOl`Lm0XZ`9xSECv>5{`3l6+dep zVM@w3@_5OPW7R?}YQ(Kkb7ZANw~+Jk zJV&h+mTU_i%;nzbs9{PLwMz#TwRW=-P6{$Ce?z2vkNe`+G1j4-?73n!`q(_VA}e{d zcXo2);POmC1nPn)j5Flx0ejEQr{&};e6bN`T~{tc%*y(kY_~6qMKoRz+kcLsWxEi> z#hDK65jC97!?+QfQ#s>aX*1p*Cr@tZew(C)ZnV(#nLUme4y+Pw4Lb%-C$?jXMK#yo zbEj|6CXN7~{_0=yczb#8o3=!rWfnsjzOmMbBaSiY5TAwL7!IlunP3 zrFu@q$45T{Idm)68%appbz&9tg_m@~`A-{;_s+99P-Kg(UoZ76N_o-WvFkSYyo!DA z6NPeCLC~Q;j>FEFQ`D!Ut9d)ITGYLrWa#6}h;UaQrr<8WMQ!#uo$t

w!Q1BKBMAuE&9pNjq@3%b}8#lSQR^lGSC4sJonSZL18C z`@?}6zNIdj4xZ=@*$Tgm(q|lc*;u`iO>S|_&GmwN^KZIfV>qO({@E;LV~J->98k8! z`7Q`b`UB@g4QvPVw{19@N6(0fYb`xJXfGsd?0=KZuJ{D7{{#&AE7W^tI6t6j=XYuO zo-$B>VCggR#fJ*(y+{}-qyFYv8uIxXzFgiWf1S#FJyOFkDt@MZvYH4ph_OE8srctG27l)5>8nuXt@Lkd2x5G^bXZahjqn$To9xI&<_RB zNChJLty2p|9x1@%0l>x1m z_nhR9^aTXN^p^~Xf5u)MHL|aE@Y9p6{V&?SPe1>c0BONVTe>K*c0VU9Rsg3}1>Fkd9gOminv7fq6g_C87T~R-0VR~cyovXnDt6gWa6ZaMb z8CjbPa`stnY2@<14z0eu+U8(tSiI}c2Q_NJ^RmZPF7B8RMinfbQ8B$3>X31bHQ-K6 znobRM4(n4OKCf~&&{*p@$s3}nOyevUuoN(>X`DFnqf?g1vq)fk@jMr9@nO$jT-=%3)u!k>ZU*MH3zf@3>@Cu48XE!f@)xxncQT7x{742$JAr$`!o? z{amN56?M`wHZRn+wJ9b_0+u{q?DNms_H*PiWe}X4na$KQFSiP zE;3~EuT{ZEd-_A6uBZp7f<$kRKSWy=mIKdUWtJ=tj`mMVafvf(!3s3Z*)QOItGTP2 zM1RP&e1r~HM??@sfCu3M20_PwfP3hbi~o)Sf%pDU568;*$9q19_9~LbevD%P0V0PF z2G9zRpYf`f{739<%n)ayf#SrzQuqCRxZD8@Gip2f1;~Q|Uu;nUg7yluU3_9><9ZM_ zrm^EqKRBJ0oG9a6;=P+0kNA2+-71}KjPve2-bV5ZC<{dV0>{xERuarn&M1KBjI4Yh zBssszh&xlm`-yjQ`e-Iky<^7=XJKk6DqyVjEW(`CYY<4R{1PQk<`=8rH=0LE3x%uu zKiEg$KN7m#x@KWg4)C<-t=%k0+J5hg(G!!L0TC`gU_%Fzd{NJ*EL7*5iZ zw}o_-?@DqA24KUqA#myN!>XIrfL_-lg5L-t&cVO0w=&w_eR5_)w6bVPUczz}{h3qV z`%m0(7{@$UQX?uQMq=Uri%ul8U7(bM^qDMpy+-9LcF1&t3q>U&2&fV){pyWb<9u5Q zgun6^9Bse!wORT6b8Qwm2OH|tku{;F6N8E#!9w}Xb``=o8Xq6kX|k%;347DXN93n> z-{CdWtk~8Ss;KP~CzU`Iggjq@-w1J0Ob3b~U0tvU#p*o(>1h~-ddRsPG~Er_9x zo9SqO@a6%ZWdT^e8R$)Sv-OQZ<&||AlU5u-8$AFRLju%^;%t`QqgKb2IT)N>o=BX* zq7k}}>zJ=nv#yuW60fygB*I7f${MWHE>6$RV9Qbs?-$I() z|F#UH4xsxQSLOoFNl$i0`Mg*jCCF*GPCBN48*S~v^4>MUfd}R0eo?S`e%7+psR-xC z9iMx=MdPHGJ5G^R3gPMNb}9ZZC(t5ztS~BoYJN?p`n+}M;=Qlq00`RZ&1`NOqo2G} zQu_e@zleM9sHVPk`x`3?f`Ww(Dk8m!^d^FUbVPa+kRmP82~|Zvy7V4Idhdi1Kzb+C zPy(S7dJBXO??%7PbI-l^j623}y!;1ANcP%0Ywb0k`I*mfbm}hr(0H`}v^*WGXNMVz zv~R&2-bM$!_^2+w18W$GYKlZFu*j4dUDRz8S z5I5qd&4H;xT^8@LepcIq^?&tOT9tuQG)*&w))B#x^wRN#t@52m7zy}_@1+puJ{`ZB zi;nOdb2F>?bDMeQWw^y5g0LB*<>NgpZXYgOV4Jhv_VI#aRv1VKq*2AX-?buyo(8XN z836MOu%R*(0wplE0gOzDol4lZKtZomljOA+w7j6fDEosyq;Dg~7{%q!v9o+3oLhM9 z@|2@uSAqn_P9RX&qTexWnmPnVrEjDh+cEQmZ7A-G3;;8|Y%$E$jG?`-3>ilB_0{cq zl0QK{tA`B7L6eh)Ei5}JNrhP5)Yy5N(jbM-da`VB-@$qr5kRjOgRVGf<`>&MgOcTR zHuJuXM)#);V#xP%Q)l|@ramuyh}6+FLHS5GK3=fOd{;)rQ8XMk2P23QdHO5_j7kC} z?AM4{6Z>$4eu6*^Ap242@^?d*S!@@X#k5c$JPRQZjp)sS=rwgV>u#jdY|xOSS#Q1A zZP?rD_PfC6pyz6YSd^9${~X9i@SLmd+3a{E3t-(B@m6v@@Epg$#;JH6DVMaE6kLx{ zj6q9v#7KYmHYVL!&p|el0`Hf63{)37;WFy7%K6>FZAdiJTtU72|2A_;>x+LhX@j9qZWiK)`-Vcmw;2(+tCBVcq#fKE9@CB6U;M(O=-q zz~Yi5Zg)6tS11QjQ0!;=ddzYVPjOKywWe64GwMwYH)yI%)UBQ7hSmN)yPvq%pgn;B zp^oPTCk-yvH;BIK?sfIsEoaY0fa>dLRIOup6xT4c^z@C{>4$g4KG~V_*&muQc&w41 z1()LrUGzM8S`04X{J=!zqY0|MwPdz+eCV%)ybq5_)9CA-W)&|+b6@qgCg!sAg6CYi zRzNb)cnmxJBm+`&C2;C+>3p-QJXAfZ<}!z+XL<&hXBmv-72n;8zjE%95dx(Fpi~## z24=!e{^Zl8fY+XHWwNAa6dvTVD`}EgV@4sxu zpDYGHPLucgOJlWn-RM8`P&563d4AXHua{keKp(nHZg=bYUVQ{g`}ij`@sAzoZ))W; zGCQEQ2{;e@9Tz!FvCG_xGqUe+fqm_7I_iff3lq2NJdW0&N;Ooo|KlDS*yI1-1=0UV zHT^$6>D6VpYwp4N?>=ROTxN1#GV*r~L)u1YBgIR7lIv++=1(7@Hw0P(#*Q>s?`lf2 zxm9(%*sQ&)E+UAf%iui0l8sgf3^+qI>h@4tdq@Ybq?Sk$!rv7#mmUn$03d3D&oK<$ z;*V=cQ~l_g*|eSI$cw?q?jHMy{F*UmRPgT_EU+WG9%|7JcukQKd4JFtFqGDRdEQrI zz{BvwH;Y0K!u7hRH%4>3;^ot)HTG~NsReVn6B6Y-(v6O;z?o*I*^v zU?Be3Fx@%p<|7DK;;3UHR66EK1B-%Y-eyJ{L7hRU`e-5uHE`}z|YtS>nh)nzPK;1`d05TjL>YTK-J%bt(lE)APBT<(HIs!3E9mbz&gH@^Q} zp^|Q2uu_uyPPUmNAipHOD}h@%O5W^d8VW2I3(wxetdK1F_FC>a<%82^dfx8|>J!$# zm}fH)EI+=Rr$^&?nI}aj9v#FeYbBbO9C*+jHEe=l%8fTpo44y+&ty;fs`tA>77>S5 zKV+{N&{~<=vUJ4Q}{vUL(uXp%m|H*UwPuaUbe zDrvXI5~3<(#+kWLRSpA#*_*sv8^|8};`q~e$4e7MM z*oHn})qE^`O9ACY@Ldf5g0)+ZzC}#y4@Eu>WA{hh4OR8{Z2F}Y?fR-ypJ)$0MLxP- zs}d}CQ!Ss4ck?k*EJHez7bGjP^m7MrN9U@EX9K1fM8pI7YP^$Bfqss(TF~~t6nE&R zz=GnBJgrY-4#2L#{aG*PfB)uwEylvEaX^pbavreDwB)xK-}8C+FVFZd#Du__YT4Wk zkH?=0#qL;f|I5KX1S;cUKQ)=Z(UJe-H2B->e?FA|VXf+af4dL+Sa#GmBLB8wkBtWE zf=mC@O@HJ$3{C6->P@76VD_Ag?>`G>?=5s&_G*Bey3MJr$z$x`yWsCKGr4-EI{oO? zaa>31D;tye@H0~R`sObyy6P(b%`|S%`VYOeqKs|!2o+6OdY6ya2F7}Xv5d2;p*T%yWiK3-hKB;kM2j3S?=vQqi_I; z`1Q>?;RD3hYA7!jN;BcOKXD=2&H7Z;D^dNq;)%-{gk(c--#UG=nRhSeVD*EDy9iip zL+>dGjy9)2D%hKoHvQzKMqZmXUV3azy`8%5v0MGb(cXOs&ffH5A z{7h$g_8J1AGVg7UC z!*khZ*YGezQ~%mu2H0UNIc<%OI`Ekv;g z_ol-bB=5Cis#@bUl*UEm+pCrL-i9TuGN)NBy(w#if4|kal=w{`O#+{c|??lhCJ7=K9(_*0Fck6c=vTC|37&&(ucr^yG2;d(SJa z$O>8L@o_+L&&KL;i$1mawNrZpz<;7!YV#H3P@1}~I286-=-qsM6>=Uw&LK2-kF{<| z%0Y45f_$Qe8Dw6G^{Xt?3GCQ)$(Ve;?BBZ-R@QCnab+QBbE&4&?qq0yEyHILv$v-! zoJtQAF|(dIejg_z=L(>x+4oDHwsI98xY~Ei1-^+uZdha)Hm%MqnCS8DF9B{WaKPuQ zKUfs-o0Z(9ou$}MKD;`6-&5FqG8%Cug=*t1d__I}Y3rYI@iEQz9AG;PPuWy_^>;0S zp91e}F!xs}!M3GKigzDvJ=8T8FtA>u-O|pr+9R;>J*+rF57X9o7IQ1_7iK!ECdb-& zysB%DK{>WsK#e7MxaxAKT^%nDVDf9GW{yN=-FI`0Z=PZEr*isJ;)M%_ual}8L!h_3 zG@m11Ju9p6Fijm>n^*zk^H&MXg9ozx(X6P)vtU6v8KI5SGN;q0rEegCIZ5x43R^Fl zy_>698O5nw_d5uJ>o60s-C7GN?E-22a&Tm@UVPxjT6`>faet@Cn*>d&L9&j@2`#xE)|HV zY)l@-U%2P*dF`!P?$+k2l{kaIV7$9#f}pnJ$M4CkkHt!PKs0>y1gqDUDVel}kmc*Q z#Vx#xNwl>02&l9u=CcWvKIDD&gBVUhvH%LtFi*_Lodl5W;S_U;v@n7k z63Pm}`Nb#M0`X*kP!g+<}%eavofoS0wRBRw+nJe^^+K-OsG8`EM z8Gf>rhb94075-RnNL3$NHO;MV!eDdJK?=vQ>(9DlS-1L3tXM574E1N~Zw(Z3mN_8U z9}6)>n7@s$wRzi{cGLtACFI8ZB_}VftvbvTzw0ltb34@s=|6-F-y?%cbddu#b~^$* zc>A^tZ?TO*dQlz@JSV@GpZ_LmF_J-$I!Z%Giq4e0B%mhxT?4iBOOYv|!u9msSgV_Z zfZC&2J}$~BIO`W1Jqzvxq-OR?0p7sTKt2v!^CE-HQfc5F9-CRP;!}5|y<1)mkVQ)_#XY=*51Jtuwi4FGn zl^>%~VDELbmtVn8S({G9t&&}%x|4q=D-NT2C2D3r0zH!F|6_=*pw^ag;%`i+ zGksS@BBr-A(QtCGIxaK#_0zO#R7EOlvT?vgH_1Q?bZ~G#rHUqQzHdr>oEb5uC;xn6 zA@M|OO^}&MZeFr!Ohw^&;+=C~NQqBbGIwJn$d z7hXKNtn>r)y3cMo)dSSPryt3_%$%kurz z?OAP|+vubx-DIfC$%czVrxxb{Q7irF{20l2<;iQD17{Qmf%kS?ov~pRx;x{EC;Pe+ zFNd`L)EogoS;!w8hm^g(y7uIOPqB~Kq)-)BTmS6TPIm^pYZX|k_jc>)yOlhH5ycc- zuX{l&d5@|}##<_1!0&Rt<#8s zdE6B?6@7HJB}`?4begobx4H96anAAr)#bI4C%2vWJD9=N6$HHfQp zfOdP0%8&-KD>_N$7rQe&y`-+c#M>P54Kkrim+vb|V( zZMIsQbyJsS7ZfeK!g0Ii%Hu)o%WarXFJ(2?rXcsn%YhQK=0qtTNk8n&Pd_GK7fait zoiM)d#ZpOV$qZMO^!dK;5D?4C)M=>_cwa|*$3`NCsfeSP9xC?qk+m$tt07c;-U;ni z_IlSYyrbNIuxa#OQGad8>$@={=fONg18RPd;cL7+v*39F2P#Tedv~Yto`R0!8(0{@ z7H)}}sY+O!t0|z3j%ob>`_;cjmD5VdhNk=6kTO+SPPwf8;;ls;_N{Bqx{|v-0|9eN z%?x!50|8y2vmWE)@mC2X+z(sxoW9P2U3)O*3Th1R-VU`Pf?f1<(PZTcS&~YKm2%6x z=X>@qA?n>6%qnGC^b5d!BvVQ5C|7wUfBd0fr3J0u#W|krX2!?%qxB#y6-s+A^pMKv zy-rL=`j^mc$ZIO=RJ9oUN11l{YJzNs`bPT0*iWAD>__@Mm%1k8h}QJ{8j$`05OoAu zb?4`>o{=nMjy0hnx7hoy?BB5m9KP-1aDQ3yTGaa&^eJ_-LIwN{zDh9jUd4MzQxNQ} zeD6yJ4v-ho9Y%65iyVuN;M|I%H(sj=m$@hj12}ZxZDEwkv)xe#P&Sg1=y3?4SQ465{?hqHHv_J2#xObci5*AS-V4`_ za;)BY+9UrrShU-^zzE@8AagAe23d9aiHu?p>AF`NR>Taw%SuIT{fDn4{LB~Ga7M)h z=re**w%u^%rX1JD>uY&t!W*abgYnG;jE?oegIhV zdM?nkD8XCB6XJ{#V!rLhv)#xfZxxuZ;NRnTv~Ygi2$}Q=0eI8Hr23Tv-Lqp-vid}e zxj3br98bw@p8Z(QaHrBeG|Apoe66J0Z!a+(1M^jc5z3;9Lxb<|&8)xsEtuNVlj^#ifC3?x&KJUHFtTi?zS3iG9?+G9 zAMvw^f*_D#PkuRx{tL_|_t``Xc!cAU)R*QvF1V(GulX<*BUn)w$=OC6pk|r(7;Yh? zOd>ZKiCraP8TU!`Z39{yaTA9_)T5l6Ew}U%96b(cH`GvnbeJ zcHUk*<#oAPIdV2@Dq6erEXk^<9tJi`^yn+pVXe;GvF?_7EJyn7k>uBnc(lvAINlqP zDvyRg-g$pWv4!eLYu08@KLQ2cEFDZ%lem%-1r?*Z`5+Mgy_7>m(<{}QD?1MB=Lqlv z6K$4_DWs%GDOmBKd=R_vaaOh3l(#1jn|Swxa#(2z;`F98ujOVp64R2o-1h0=!6LCi z%ZDZy!96%doEj~Km&3*gz%gCv$|X#GJ`{2*E04G0-R(&6iJ0!k0o^y~srF#gjgcJU z0dayAvyfp~T|-JJw==4L2X=_RLK3VII$hBt?@*sIrDI3?>3*%yw>o3&6G!Q#JuSbz`CBi-ce9# z-}!)6YkUSA`D6Mu{D{6m7f#???(b6#L?2QFi==j`0hj|BqG26u5vUx4*Nyx-1vbL) z0LE8WkRrR;2UT$=!2%(X6)dYbwex0=#Zl*!_rJy<_F%4Neb3+>@^?S?oQIdceC)HbQIj#_tPSHB32TEJze^W(J_wl;IS6Z}{u}0Gtk+ zgf6`iTnEqkmr!VPCoA^9I=oW{#5$U&Jtj_y;d!k0pwf?4kl~DT&!q_yHGOw#5wSp0 zQm4_&2{xh4oPx4Bj<3Yi&}exwc{X64{Wzl6=)sP(d;NTaHx^?oZrUvrvbU+D=``*0>_u}MzX2VL+tl6?XgQT8V8QzDB4E;h(sowq9w9mvax^lUTo zbS8keTJI>iRc|){IPo5Zt*{JN)TRKR?ed+_?xrRT!i@c!{aea%4LFirVV&VYBN6lK z=K#NgFKb#l=ZV8_3uv_@6?bf*`*;7lUyQQQ~`L9vQ*X(*z6Et>J9Jjk#pf=41we2s%O=ejl7Sm z_*0w+RTL`F^X0gnYi0NmOc4ewID~eB`$1VeWnoqI7LC@MFqx|Bo}0YdRe{XkaeZF# z+7Xm{iM=$Ro?0BcAR1_y*nhFUKD~42{^xPvE+Us-Iy zGm;Db7)dlTh<@0-3+v^_=I2h@Hs9`S87=vmI9_5ulTVSf-vWq<^UgK+pv}lfg)KR0 zCN3);V|s$OdA6|@X(?T~Yxc5E0&iF)p`z*=*2Qi_rPZJCZYMo*Jt z(n?7R8Z=n7x10FjIX7?Jp~7@L+y;s#YpfiMi5XM?N4538a8wt*X@T;phcFjk-$OmK zO8h!YcNqf3AE`cWiK?PU6Rs@Ya7MkVML7fl7*&#h!*b(IQG4Ny^DM?qn~^FKVcPjY zLK(e}=sduW15iUv5Z!oFUIINXQ#0dxxQWRR0l@0t(NTIhnFwtQK=ZyP1d84nph0=A$KG{G-B|Bld~n(rn|C$IwL0Hgu_ zgUf*;jNK*!eyQRA-NQ$J5K6vE^EPViXlwsO?fRp=4l$YxstQt@nicck=%T-pqUx`z zk^Vs^p+yRR))menCI46dmQnh5DOCS&vkK3n6OFo^CVz`LDmQsf5JWifFNJCUSuhP1 z>=2Ut?nPOC!UPZN4(wNCQy%<@?exHxsV6BvqXN${BE`hT)$!FXAfUD74*LVEoTRgyi*lxX|pC z6>Sqf3p;fWJ_cD(O$4}fHwPJ(IQq!Mnd?Y?nb>-vt;IXGCGjO>*upf!sw~bdO)5Tf zeVGZNvJWH`_$*H=UH|P0(KUJa`vt(BAlga3`O~Qc}G5kc|-BE zxi9m#yM0>~Ny*i53$h`}*oh)~Mf^m1^+i0JkUJgEdkUSQAfrSrs?FCGMN@@K^4S-$ zUobE+d03=AHBZH+yOa7Ar`bQEO3w!#h?IPb;bHJV+}KyWeNj3fd+{}>T#|EA^HDqI zD%;4UKgE~{zk*6mNbT7Bti~35E1=X35AKf4aY25wPNpw=nqEa5`r0>6y0dNQaVf-# zdS$&gUQ4Yj*FXz()zvC;=`gr$$UM}H#YLL^_iII_`#d4;(;IDvs{>3|312f@r*VTt zTmvv)({90Kc{oKo*NS$JPr2EtCU@B9tBIAN4^(+T` z*t{W8UJs@FZq0&O*AR?w=C}6<4OaI6X74=6?EEN!AEvKi+c5Jf^T4dvlUpR_AF|Ck zRL_Hx;;sBNNJ-!;9(PInvW*jNop$UhO&-sH8$bEafy|-f zuzmf_0%ksw0a7*$``RY6agV7rV#1QtAMlHUfSl&gUbW#+#CXNnj+qCl@c36e#hBX!gvvtl`Nf2*xDi0kQcRCUTI2=Vk$92Znt$c$)&D=Zz7eqm=AolugWh`#mN*5M=WDRWpxQ4Iz*j z_>E_2kWqd#)mbmuYT+ldgx<#BSs=bVr1@zk_&aiy5kQZ6Znf*ii$=*+C>8z7HzHTK zfZ|8I--3A?z7U8zGz4vBX7)uJmX*~W^9jxR_-9`3`N4fq0H7GxqZVFv0s6emn|d39 zR@xag*-;7g@Xx&uHeo{&kS&H;x7vHj}iF;KxzlV)RSHE!qk7I@cr@NxA1fB zh=D=0;B}47zkkf0vfRhV=W;vquaLh#UfBEceA>UW3|6Vf+`Ih`pz;3{Qi#KJs}WO+ z=@C3RLuPEjlnm^>(ZYxNAdi{bNk1_6F8t&FD+_N_Z`2<32yX0D7fSBJa3Up$gg1(K z$3(aM6cYfl4;bseuf4@b5Onu67^Q!9I81`r0R*wMR}%0e$s;6*&ijvOuxlk?QUE}! zzlI}0#QiWOMC5Q2SiJYAynw*gjV8a_Nz0h)K$I@iiyat<$`gHzfuHRIp}jr)Xtz}( z8bM4K7mx^b&dB`y>FxeKbFm%+%TP!>>;`$vdhh7HM^$<=M*qF^#Bcme*gIc(1gT{{ z^tht*>yBzkx?HiNrhCgn_;94nUo_do4S+w60K!UM@g8HLbtk~T#GD>&B-yF4I}$u& zq5*sXm1xNME0Y`$ntJ_Lg+RE!Ai-yl{|WK>01R?GkZQ#*a=a<7xa+Z5k6Yy3gn;K3I?c#&K5S3*S`<74+#%~eCcgkO0J~~Vzavzj z^xVbHE%U>iH*snP@Z0N+);n|8ER7$4uK?#LJ5g8`?wr29^NFZ_lAVQ$r!LKDp=aZp z%LSYcFRy~qzH5ndVVze8uHi(s^hM3@!S(lMDlavK?iIvU&V8(OI2j-TDEDaKI4eCx z@qpx=P?%Dj{gZ-qdXX)^9u_v$0+JC|lMj2UnosYazg>JLx`tbD3FOLNbJ9+sT!Vu% zj{|{Xfa#Jc@H{O*=fOgLj5cp36oXEVnzxGz;0Fq76M|qdAViUo2+n+QXvI%=XmbXf zJh*5BXTF1EZglQ^u?<*baqjf|39;Gz39+e{Ya98Yb&pO{r_ra|?FXVAmPdWGyf>Lb z*32eFTtm%tglmO-q30RFrmeMrZ_REdP~LE^VIvrMFtkcl3BruDU>8P>NH)|meu2X$ zRTX21L#IICT4N`|2O=axY53-GQi1S2fRp>sVYsnf#oAcTo};3#FVbf_xnC2my+A0d zLkvtGGOZZA7rW$V7bETnuYkS3y99Z5UJ(LS0*vj*PWmRCab*vsZIM*sezdxx^CD~m zk0LJ2)KP6@KjBFEHpBEzD1H**xWsr@ac`oLp+!ECGBsjm(4l}5Rmk7Z_fFP3%3uD(r$@whboZo()t zp4|q<%ViuR2@-f;Z6jZ{-9fd>-c2^9J3nu2m9L-LoS{>)8Ov53AFi$5)V=EOAh1(` zR%K*wTmfQJuY*0_W%QzfQ<6K3$Imo9<#ciYfTxyhl-{1=!r0MQe;_k7t3?p zxHp+)%iK#Q2)%@C<(Be5J7@!=nQ3B%rpkYd(pkr=_Ld9!XZ(z9)V=3FVj~By#(oOe zI11bwDu@z3Mpl0+=(se1VL~4KED3MI5-VB(#dPm3fUQ>i$5dP<1C}K*Cb4o2drGwk zNJas&*IiIEPJXVRXPhE`noZ8O6Ranv6e6^r(YC$9V`AGXPxD%l%SaUh@dN9ey8klR zPPEgP>&evM*DyxWBY@uQF&57WaVMDW`gqCej_fB!Kkem;VNSt(9bOF=RK&~$~J^vOr!=h>`pxnQ*7keM%g;lNG@d{W3PXxaP zXt$QI&fa~FVr2A@!9Hwn=V5|Dwi_W)KD~28vP7#Q0d;I!#cmcpc?qk}C2qAGO3d^H z#*{u*qICo3YL&GM3cTOfw_gOrkC(;bGhM$8Be*#`UgPZOZdJB?D8*{l#nO{~BF$PX zvM0W|1K?@K6k5+Wc7wA9Vq(2DO{oM;j9WV(`K!A=1js3fxqyBOgYi)TH3a@z$3#FWtF z3-&6No)&xYYDJUZx{RV$4&aa|0201e(HU;c@K zZ`%xaW!^%q$B)^flQHA#5yjM=R zQd%PTT#}`GxsK+3!zOq*K@W9@1kN1rl_rAFLJlpy2YYhGe{6t2MCy=^DzkhU40`{$ zc)QT_O{xz<0C(t%i=M0n4UZGln0h+$$-c5@_y7gLH%rDQ%;_-=sP+tZJ%f2ei?>c; zRpSY!K6;{#UTDfpiGHBL5e=W#pPV8^jvu>Top4yJFPrJ{MFZdtYho=T-W3)dB!+>_ zMCBxT%H2bI?0$%WntqOkCcC4<1gTxxb@ydu?E>bOc`&_AR(i(;)%%Hs``a!Ka&Fs)8j6KMCZzu5L$nkmCgjK)n(uPeZlY{?g@_Aod%DJ~gC`O-lHTc* zRwlpmGLycpSeeI~MzpG((K)(nScQCCZ*brHRlZ+B?^8M<<8NdLqg|M{Z^ocR@OL_W zA^e{>l24fW=Q>4wdT`y^R7U=zryM;ZV#Jr6JVN1Z009dh#H~Z!f#-DTctF&*xc%;` z*{M)+t?D(JbQjWFyP7TH{aJiejY6NGkID%&9MLp)v5ij)S`C{ga4F{4dkmQ(k9%Bv zSw=Rdw{D5FZHbFTqNmeAWqCYbs&=c%Wj++T)bj{ZD%)7~JoND92{Fonv0hTKc4;ojHz} z2k_%HaFB@IQ-KG>^bt;^GS3&i<{j^|1wVrS_@se;;}=V6-hsEFpq~|(rj$G~w-^93 zrxB^}bjpbs{l=^NRvV^fZWf*ieoZP@JELRto7zW9qU%IL zQOMFSKu)i-OpwhTqVuAS9)R36-h)ZznaS+(8ihlO*v+a#TpZI|Fw5xrI{@ML&e0F8 z8qhh3LEyP|n!y)g_~M4%i2)L7)oR{jo!|@)8`Ksoy9sVbTC*&cwd)_ z$*pfb^Et#Y=vVSNs$Le*7&8#190@q%7A{CJb|1|?1p=1iqbLu;BAQ#eg0FZO_PR~Z zwWvR{DHE%dasR}6nBs~5+$)H~07&>$wRw0n*HLXfw(qFBFg~uoVXA%T0Y(-dfvEcd z$+8DBe8Wdo@0zRqrujSFUG<&qYGIRLG`e)D60E*=_V>6`gCPVc9+demtWUkNj7DxVzGyyHzH2%RlEix$ z=I|QUG4OFWX!X0RUbjB5X}9wuZkN>*DqtUe8)0whJw(!oL7r2ApKsw|jAH?EqIIvX zYJF1lM%|x*1c4s1&2V^*ehBVdDD**s82|UcWTLu4S@)#o6Ey;kn;4#vjv=dWaX_t% zigOz?Xn59bUo`eAnG4HXZ0mGB?j=M3=b?CIeZ&if~Ze?e?Rar zwwe_JZ7Gg_NTt&$wAKeBIA8CsK!%C3e69PQn>oOl39_y==kLJ8DD#OAD7IkkpGvR0 zj+eqj6?cH@$L1H3?#L15H+!&bAB0*k`bwtW@BO$KT|zdH0%xaD7St{hvI`&3tn6@# zP#--h=;^2#B>%Z^0cGQ3^20YvZ{qhF zb(G;2$a|_~=+FiY&uW2uv26fv9GCJ7>NTINl7LgJEAhYf3k!wcSSbRK6rT(;DWacc zD0%+11rj)gsHdK-T2hQDj%Dk4#-5`QMQNn8rcBZdR6HiO?at!MqXygc9zkB4x4847 z3wl7wxY!ifR-GQU6Y8kDEsKMCh2)CO`nX$p~5ew+|>s!F!ZjM`YL z9LF#;0j?gGig6aWOj057VKJGu5GbgoEQm0lUopRWLwjOV?70>&eF8p3AZ=ojV(ziQ zwcCt~V2TAl(7UnML|Hu#eQSwR=TFiLTQJxy%%;nz$NUTeM!=2Iu=2f1MftQ|wme?v z0uXHTgln}@QkMB6a9$l1V1@RQvJ+6WW>rDuKk7VBurMwCVZS-6pM2$Ga@sSFJ1SkH z;m=c>LQ}8YOC=b&8-0nD738IvN&a$nav@|Q%cOkgl?)RUHO<_%{DpC$Tw)+p!$HlgMy`G@Na4?%#HAD;7)j0jBf4DN1} z)avoP^e5|hoZ6@&2e6L1roYNWFP=tKzUWJfAd3i3DN6>-H}y{M#M4IeZ@o;ezvo4h z+Nn(Z@CevClGb!=!)PEv9y6&TSx!lq7uGYO8{Oki%qHAvZ9VsvCe}nZ2?+y%U=H_3 zF8^=X!c4cnOF6Cu^m{Cc6)P?DwVW*0Hs^a>4-eFR&Z(=$Ki==2lx&WAz8wi^;)wX% z>nm9#aeZ0NkCrGAkEO7V!gN9VYmt7XpS2Zj-;JJPD>5J*o~zGOkcToN*C3mZgKse9 zbi}w`+W4^Ay~CVh?5&Dy(JjB>r5}k&Lzo2;NZ80VM4s#p?9#4Rh9rTajb2DFqE$!L z(%C<>QXx?)hTPX?MBv<&UexN$G^=2qQDS+HECzmfa@X$uw>S3pI|t}#af7aT5tP-_ z2(OWfmRwWljv{(K%l5A73IHxLFnY~Phq}n%8ZoZrfgNxLGK~W;umHy#yI3(#lVgxQ za#xtt{n4WK#5>$A*n|x3HqV_cTwq$kX$yCT;~xNeQ|28kTU}AwdV6J~fWRf-7TaD` zi2YG`TrRN;=?qv9h{u^R10lAjUTfI&l4Unzut4@1&WGb)fj7_6{+qH+7bS3y2f&VG zz&$x2{QzR!xl;QVrRe-q%Yy=JV-%M&O5vC6_2J1?I1&s)@o5eEl&A`hSl{Px5R$o?)8ROh|CMhXCrL(q+k9>KGVaTjrb zninAIU%I2BKRo{-tH&;OuZT z{dH>oe>{RMArLT>0Gj*ju>aXH=0OmS(yial;jc>F9lYPp1zh_ra8kX2EA{We10+Q< z;4TSZV*YW0e|45oVgNe&cw$SE9F`6XDrWo%S-gKX(6Q$Jc%+SkGd0ucaO?c+p0|m? z!TFK*_`N3}t?IZ{5?+h|0x5o7FBLr$08r z`{SBTy9SLLpIn%9NX`1$;BLP2AF$Efqc{BEOyh%udBdJ^u=?J@j5c^!?1M}LIov|E zM)_Q82QI=)tion3E{&Vj_PFSp(Ft~6lzq~6E71wD5dW>vVW=?C2#eCzenS_`Jy|2c zqQjM(POtS1P~={Gw@EgGd zeK)X6wds#C2SJ1#x2*S$GUse>G@lEHzlxll!SB(NR8X&kv|{`jZhs(AON04(^Xwcd zP2UsTe;6A(!e6{%Vo7z{3p1#}oESu9p$USq7cGspgbOO2pPricd(ZU&^bWF`<)L}<^@_c}6sInMzATOHjI-@tRxULIU=`2(1 zl85!$ZLzklym`5^UR7(V_dR}Tvf@fdGw@wWo%N1pgeT*HNl&U|7F=1!Dml!#5D!g?gU;}84aizYBe?r8 zr>n?WJ<>esX+lE`jJc^MAH~}ALlO}l_(~@9y!&PTs-^&^pdE6}L;#gC8C$`2-kIrT zfbGw5jNVz7DKOO|P8=!qVVaZtHUfc4ftZG@K$9pp=i|@G4ckwWcA1AusAk?GaP_UV!|rYf?cUfW`Q1k zX=r&yg`|h33OT6=LX+x)8HaG`-1i!v%RP*djR7BH`Xho|Sq0o8MM5+z7a3ZUU`O?} zIp`q1(I=igTSwGYm2h7vZ62#pW*>Qo*6^88E6v$qu?Tb2;I4{bPxh$3Q%vw>7ls*M!8cg4KCURFbjOV?0JM_|xCo5aq zT{tHumKj5(3_V1(`3V-5E4RY9Pm@LTSzf6xDkPjMpc#y%HSoO0d(ZMzPNlPoIyqM;+0dmWqS5QJ926dB0XOc-c+V59e1#c z<~@L@n-D5rnw!6HZx-x+9jQp2)KR|#d0L!IU8dvbWsZMVxSF9@m&$lN&A>0`CWJBb zsj7|#Kk9cHkAB*m*)k<{;_;zB$AZ^9bJwAPH+zSm6zj{9mmze-DO`|dY-z=YzD}+= z>bL$dmS9T}^7-`Mr`*6imR-IG=Azec-pnz6>yHtm%R9nRr~j<>k&|+ zKhVP+YQ>IqzjKv4t~Xej_0;|(#!70~Md*6jhsgVz@7s>4?2&6XYGz4HnY>!h#3rz# z4Pq?uSx#Q_Hwf@aC`XnYy%JBY(t&nID?$O%v>N(+f+j)IX3)#?F%VuR)44k!;q4w- z$GjIXG=Y_)71JD`W+Ip2J;4HRntg$@wA zxQ9NRu2{LT@s(tHNJXn;i(G?AcD#7Zi{{#0_q#uVVd9ETLKF0SxTL~lIhTG-F-yxF z@@A4Mcz0=F~MtqCUgU2Gt(bcI$VlU+9j2lwisBi5+FVA;Gyrop)`v zU_skiAx8&=hxdg=Kwipg$=S_V61T_dD=w_b{@f7ty5%D}4}<8@_5f!+u1OW~#cC&B z25L7az5qlXC#+<^hOCB}w@xGTq`#5crxiOJV@8=U8H5ArYu&_~J}y589v z#%pq^fc$cWhB%o-AUa6m(TJBV%br@%iKDTLxVCfWB>Bs2L75gi>7d*DmqYK&5~IXM z4CQURowegdOXv#IAGbJI`opW!A zq4st5b46yrR=Nbcp|-DXKEXP04c*bE$&ujV0;CSJPQWHl#*kO1Z-ULEMWVp)_-#E6 zfSIUMS#J|zTCb7fYyHtx{sIN;AI2xKG3dzb*ZUCOKwF1U&Jy-OweD3CJ*~}}kKs*D z2`_?0U{gcv?6uR2P&C!4e`(G~2jN3tq9LbxJK=C+l{x8b$+$l$d$v&iMxMp}I6LM8 z)Q{#TqF#g5+g?US(PvL{*VIpYMsKA7wo>L?i}eCNYp0&HN`9cfz}*(V)o|vGs&}(U zhgds1&zdBwrK5SP&hG(d6JwUea9vIAl_(JhxcJ0C6f}z^1)*f%J>k&r{(!XHM$&x@%*XD zx6860#W>YcnfVM!5%SFA=A*5YXp*HcJf!WbFI41&3d|5R zX^v-_r+G@`safSA&CJtbwCaSC9Sj|u!geb&+#XtMo@VR*Zk+47&vo6uKlaD2-@f0^ z?|c2O{eIuq_x=99;a~jbf|@|ptn?N#{7TAo))^&wmMj+w3tlkZ6Lf>;EypfL zVfU%m#(FVvAm)V~kQ4Y$?QWaSD_#dfrwIy2=R8Y6pNX{n1FP?8WwP34J&P4WAPF3& z@e7xc+_Rl%eeF#G^%JHOPAgEX|GKwtjF*{zF8Pk*%!HIRWp5Y8TN8i@y}z3qn2X#v zPY#O}+5basV6Wz9TEOl7?w=0P20Vq$L#gOHF;`CET$CV;BK|S zDDo~0Qe}>_{S2e|Lggd=CeLRH9?%|LCeP5$7Nh>Uaf9H2&+318e*ueupu)gA z+gIw@u#T40&LGrVhvYoDb7K;_AF%A6{{LW^L>tSa-m`ffo@RPH-(av{1%c-%G#@f5 z#%AeC{0&53*Cp=_{(XIN1+=0-=ULdB(W%}2u+h^j?HN~i)Qxv~e2e^{RiuVE;VuQ< z9a~1p?y6>^!qKEClo z623Vc3w4fypx-xni!;2_!TT{8ZuQqxiX<0Z6@Zt#N<=l&S9u=6pLW~ zD0h*>9X}favQ%vdZGDuKdHICg)&NBaK|OnC29GAKa?ljtCg`tJLdzn|!hZwNG2O z<{_mBZS&TYq6&|_Ietqpfz`?$(uizN&{g(=5@7;a-c*k%xOVbIw$VUEAU>(OdM4ut z@Gp23)hSfH99=Y4Gj}h=veWDPwHO%lwWU^hW1Yx-YbCc0?wGxMw)~1saUrbM#MQC1 zzHzENj}m^l7P_oe=cj{em2y{|2#!oBO8|2`7_z}KrR=#19#vf#wzfIpd$09BA`VJ4 z=uejodC1^{%#q}Iix3<~;frzlDNjy%VFtnDNeT2`(hx0qqFlw!X_BZ~N(!}j?UP}n zSQgL^SYsx7nZ9A{VbvH?{#+0f$r#Rf78d&v)3+!`*u}329}v_f0xQ4*oIt0R zdkbZFnV(Xs0a5T$qt-h-q5hFw>;r zNY$>(DARMz53X7*KboBP3LfMlLa@@qHf9@eZjuHKea_r+kN2bVYuNSuj6iXAE;4vAkAc&90L@Y zUU+zdVVyP@NOLU=NqleMRA8mi`5#HW@W-p80 zu4qTkR+BEfuU0sNt(snhiArkb0Ri9S?$`p3;B)`Kv&}8}EpyTFoahen(>cOe9*y1| z>kf#K>=yKvoZ3-A2O8I2Qf%Q%xJ^9?6`!ajldF`$dBietgz*7vA@uH# z|I>g3CJqYSlQ}MhG#ab9N z4rY|PU=KoZ5fWpC?JDvj$i`6w+i?TkR+zYmHSQ>QdWz3*`%Y3aG2ILtCr(ri;KUm1 zEZe7?$ro|IEct8^V0TkVr-yYF6cpMMkf2hanKqW{C5#mS1+PR(ss=J`L3^3$94w*~ z3>kQzK^y>BRLln@9Sv=FSpWb4 From f8093999bc1b2489852fbe933dac4231a9502001 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 5 Mar 2021 07:35:51 -0800 Subject: [PATCH 36/63] Spacing, markup, and missing periods --- .../deploy-a-windows-10-image-using-mdt.md | 62 +++++++++++-------- .../windows-10-subscription-activation.md | 4 +- .../ltsc/whats-new-windows-10-2019.md | 9 +-- 3 files changed, 42 insertions(+), 33 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index db0ffaf0a2..2a53ee6346 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -46,6 +46,7 @@ These steps will show you how to configure an Active Directory account with the On **DC01**: 1. Download the [Set-OUPermissions.ps1 script](https://go.microsoft.com/fwlink/p/?LinkId=619362) and copy it to the **C:\\Setup\\Scripts** directory on **DC01**. This script configures permissions to allow the **MDT_JD** account to manage computer accounts in the contoso > Computers organizational unit. + 2. Create the **MDT_JD** service account by running the following command from an elevated **Windows PowerShell prompt**: ```powershell @@ -383,25 +384,30 @@ On **MDT01**: ### Edit the Windows 10 task sequence 1. Continuing from the previous procedure, right-click the **Windows 10 Enterprise x64 RTM Custom Image** task sequence, and select **Properties**. -2. On the **Task Sequence** tab, configure the **Windows 10 Enterprise x64 RTM Custom Image** task sequence with the following settings: - 1. Preinstall: After the **Enable BitLocker (Offline)** action, add a **Set Task Sequence Variable** action with the following settings: - 1. Name: Set DriverGroup001 - 2. Task Sequence Variable: DriverGroup001 - 3. Value: Windows 10 x64\\%Make%\\%Model% - 2. Configure the **Inject Drivers** action with the following settings: - 1. Choose a selection profile: Nothing - 2. Install all drivers from the selection profile - >[!NOTE] - >The configuration above indicates that MDT should only use drivers from the folder specified by the DriverGroup001 property, which is defined by the "Choose a selection profile: Nothing" setting, and that MDT should not use plug and play to determine which drivers to copy, which is defined by the "Install all drivers from the selection profile" setting. +2. On the **Task Sequence** tab, configure the **Windows 10 Enterprise x64 RTM Custom Image** task sequence with the following settings: + + 1. Preinstall: After the **Enable BitLocker (Offline)** action, add a **Set Task Sequence Variable** action with the following settings: + - Name: Set DriverGroup001 + - Task Sequence Variable: DriverGroup001 + - Value: Windows 10 x64\\%Make%\\%Model% + + 2. Configure the **Inject Drivers** action with the following settings: + - Choose a selection profile: Nothing + - Install all drivers from the selection profile + + > [!NOTE] + > The configuration above indicates that MDT should only use drivers from the folder specified by the DriverGroup001 property, which is defined by the "Choose a selection profile: Nothing" setting, and that MDT should not use plug and play to determine which drivers to copy, which is defined by the "Install all drivers from the selection profile" setting. 3. State Restore. Enable the **Windows Update (Pre-Application Installation)** action. + 4. State Restore. Enable the **Windows Update (Post-Application Installation)** action. + 3. Click **OK**. -![drivergroup](../images/fig6-taskseq.png) + ![drivergroup](../images/fig6-taskseq.png) -The task sequence for production deployment. + The task sequence for production deployment. ## Step 7: Configure the MDT production deployment share @@ -474,12 +480,12 @@ On **MDT01**: In the **Lite Touch Boot Image Settings** area: - 1. Image description: MDT Production x86 - 2. ISO file name: MDT Production x86.iso + - Image description: MDT Production x86 + - ISO file name: MDT Production x86.iso - > [!NOTE] - > - >Because you are going to use Pre-Boot Execution Environment (PXE) later to deploy the machines, you do not need the ISO file; however, we recommend creating ISO files because they are useful when troubleshooting deployments and for quick tests. + > [!NOTE] + > + > Because you are going to use Pre-Boot Execution Environment (PXE) later to deploy the machines, you do not need the ISO file; however, we recommend creating ISO files because they are useful when troubleshooting deployments and for quick tests. 6. On the **Drivers and Patches** sub tab, select the **WinPE x86** selection profile and select the **Include all drivers from the selection profile** option. @@ -488,8 +494,9 @@ On **MDT01**: 8. On the **General** sub tab, configure the following settings: In the **Lite Touch Boot Image Settings** area: - 1. Image description: MDT Production x64 - 2. ISO file name: MDT Production x64.iso + + - Image description: MDT Production x64 + - ISO file name: MDT Production x64.iso 9. In the **Drivers and Patches** sub tab, select the **WinPE x64** selection profile and select the **Include all drivers from the selection profile** option. @@ -497,13 +504,12 @@ On **MDT01**: 11. Click **OK**. ->[!NOTE] ->It will take a while for the Deployment Workbench to create the monitoring database and web service. + >[!NOTE] + >It will take a while for the Deployment Workbench to create the monitoring database and web service. + ![figure 8](../images/mdt-07-fig08.png) -![figure 8](../images/mdt-07-fig08.png) - -The Windows PE tab for the x64 boot image. + The Windows PE tab for the x64 boot image. ### The rules explained @@ -514,6 +520,7 @@ You can optionally remove the **UserID** and **UserPassword** entries from Boots ### The Bootstrap.ini file This is the MDT Production Bootstrap.ini: + ``` [Settings] Priority=Default @@ -529,6 +536,7 @@ SkipBDDWelcome=YES ### The CustomSettings.ini file This is the CustomSettings.ini file with the new join domain information: + ``` [Settings] Priority=Default @@ -734,9 +742,9 @@ On **MDT01**: 3. Right-click the **MDT Production** deployment share folder and select **Update Deployment Share**. 4. After updating the deployment share, use the Windows Deployment Services console to, verify that the multicast namespace was created. -![figure 13](../images/mdt-07-fig15.png) + ![figure 13](../images/mdt-07-fig15.png) -The newly created multicast namespace. + The newly created multicast namespace. ## Use offline media to deploy Windows 10 @@ -822,7 +830,7 @@ On **MDT01**: The ISO that you got when updating the offline media item can be burned to a DVD and used directly (it will be bootable), but it is often more efficient to use USB sticks instead since they are faster and can hold more data. (A dual-layer DVD is limited to 8.5 GB.) >[!TIP] ->In this example, the .wim file is 5.5 GB in size. However, bootable USB sticks are formatted with the FAT32 file system which limits file size to 4.0 GB. You can place the image on a different drive (ex: E:\Deploy\Operating Systems\W10EX64RTM\REFW10X64-001.swm) and then modify E:\Deploy\Control\OperatingSystems.xml to point to it. Alternatively to keep using the USB you must split the .wim file, which can be done using DISM:
 
Dism /Split-Image /ImageFile:D:\MDTOfflinemedia\Content\Deploy\Operating Systems\W10EX64RTM\REFW10X64-001.wim /SWMFile:E:\sources\install.swm /FileSize:3800.
 
Windows Setup automatically installs from this file, provided you name it install.swm. The file names for the next files include numbers, for example: install2.swm, install3.swm.
 
To enable split image in MDT, the Settings.xml file in your deployment share (ex: D:\MDTProduction\Control\Settings.xml) must have the **SkipWimSplit** value set to **False**. By default this value is set to True (\True\), so this must be changed and the offline media content updated. +>In this example, the .wim file is 5.5 GB in size. However, bootable USB sticks are formatted with the FAT32 file system which limits file size to 4.0 GB. You can place the image on a different drive (ex: E:\Deploy\Operating Systems\W10EX64RTM\REFW10X64-001.swm) and then modify E:\Deploy\Control\OperatingSystems.xml to point to it. Alternatively to keep using the USB you must split the .wim file, which can be done using DISM:
 
Dism /Split-Image /ImageFile:D:\MDTOfflinemedia\Content\Deploy\Operating Systems\W10EX64RTM\REFW10X64-001.wim /SWMFile:E:\sources\install.swm /FileSize:3800.
 
Windows Setup automatically installs from this file, provided you name it install.swm. The file names for the next files include numbers, for example: install2.swm, install3.swm.
 
To enable split image in MDT, the Settings.xml file in your deployment share (ex: D:\MDTProduction\Control\Settings.xml) must have the **SkipWimSplit** value set to **False**. By default this value is set to True (`True`), so this must be changed and the offline media content updated. Follow these steps to create a bootable USB stick from the offline media content: diff --git a/windows/deployment/windows-10-subscription-activation.md b/windows/deployment/windows-10-subscription-activation.md index 2c46f21b47..8d39946e05 100644 --- a/windows/deployment/windows-10-subscription-activation.md +++ b/windows/deployment/windows-10-subscription-activation.md @@ -121,7 +121,7 @@ If the device is running Windows 10, version 1809 or later: - Windows 10 Pro Education, version 1903 or later installed on the devices to be upgraded. -- A device with a Windows 10 Pro Education digital license. You can confirm this information in Settings > Update & Security > Activation. +- A device with a Windows 10 Pro Education digital license. You can confirm this information in **Settings > Update & Security > Activation**. - The Education tenant must have an active subscription to Microsoft 365 with a Windows 10 Enterprise license or a Windows 10 Enterprise or Education subscription. @@ -152,7 +152,7 @@ You can benefit by moving to Windows as an online service in the following ways: ## How it works -The device is AAD joined from Settings > Accounts > Access work or school. +The device is AAD joined from **Settings > Accounts > Access work or school**. The IT administrator assigns Windows 10 Enterprise to a user. See the following figure. diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2019.md b/windows/whats-new/ltsc/whats-new-windows-10-2019.md index 592e559c29..456e3466fb 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2019.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2019.md @@ -328,7 +328,7 @@ New command-line switches are also available to control BitLocker: - **Setup.exe /BitLocker ForceKeepActive** - Enable upgrade without suspending BitLocker, but if upgrade does not work, fail the upgrade. -For more information, see [Windows Setup Command-Line Options](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-setup-command-line-options#33) +For more information, see [Windows Setup Command-Line Options](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-setup-command-line-options#33). ### Feature update improvements @@ -426,7 +426,7 @@ If you wish to take advantage of [Kiosk capabilities in Edge](https://docs.micro Intune and Microsoft Endpoint Manager policies have been added to enable hybrid Azure AD-joined authentication. Mobile Device Management (MDM) has added over 150 new policies and settings in this release, including the [MDMWinsOverGP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-controlpolicyconflict) policy, to enable easier transition to cloud-based management. -For more information, see [What's New in MDM enrollment and management](https://docs.microsoft.com/windows/client-management/mdm/new-in-windows-mdm-enrollment-management#whatsnew1803) +For more information, see [What's New in MDM enrollment and management](https://docs.microsoft.com/windows/client-management/mdm/new-in-windows-mdm-enrollment-management#whatsnew1803). ### OS uninstall period @@ -505,7 +505,7 @@ Added policies include: - [Minimum disk size allowed to use Peer Caching](/windows/deployment/update/waas-delivery-optimization#minimum-disk-size-allowed-to-use-peer-caching) - [Minimum Peer Caching Content File Size](/windows/deployment/update/waas-delivery-optimization#minimum-peer-caching-content-file-size) -To check out all the details, see [Configure Delivery Optimization for Windows 10 updates](/windows/deployment/update/waas-delivery-optimization) +To check out all the details, see [Configure Delivery Optimization for Windows 10 updates](/windows/deployment/update/waas-delivery-optimization). ### Uninstalled in-box apps no longer automatically reinstall @@ -615,7 +615,8 @@ If you have a device that has been updated to Windows 10 Enterprise LTSC 2019, t - Windows 10 PCs must be connected to the same enterprise network via Ethernet or a secure Wi-Fi connection. -It is important to note that Miracast over Infrastructure is not a replacement for standard Miracast. Instead, the functionality is complementary, and provides an advantage to users who are part of the enterprise network. Users who are guests to a particular location and don’t have access to the enterprise network will continue to connect using the Wi-Fi Direct connection method. +> [!IMPORTANT] +> Miracast over Infrastructure is not a replacement for standard Miracast. Instead, the functionality is complementary, and provides an advantage to users who are part of the enterprise network. Users who are guests to a particular location and don’t have access to the enterprise network will continue to connect using the Wi-Fi Direct connection method. ## Registry editor improvements From ad4e17d504835cc87f7332da4732767a8a8323a2 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Fri, 5 Mar 2021 09:06:29 -0800 Subject: [PATCH 37/63] Update ios-configure-features.md --- .../microsoft-defender-atp/ios-configure-features.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md b/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md index 01adf69122..764ed7c7d9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md +++ b/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md @@ -100,7 +100,7 @@ Defender for Endpoint for iOS enables admins to configure custom indicators on i Phishing websites impersonate trustworthy websites for the purpose of obtaining your personal or financial information. Visit the [Provide feedback about network protection](https://www.microsoft.com/wdsi/filesubmission/exploitguard/networkprotection) page if you want to report a website that could be a phishing site. -## Battery Consumption issues on iOS when MDE is installed +## Battery Consumption issues on iOS when Microsoft Defender for Endpoint is installed The battery usage by an app is computed by Apple based on a multitude of factors including CPU and Network usage. Microsoft Defender for Endpoint uses a local/loop-back VPN in the background to check web traffic for any malicious websites or connections. Network packets from any app go through this check and Apple wrongly accounts this in computing the battery usage of Microsoft Defender for Endpoint. This gives a false impression to the user. The actual battery consumption of Microsoft Defender for Endpoint is lesser than what is shown on the Battery Settings page on the device. This is based on tests that we have done to understand battery consumption by our app. From 9dfc9f935e5915262caccc1e25d9d61c4d1c152a Mon Sep 17 00:00:00 2001 From: jcaparas Date: Fri, 5 Mar 2021 09:13:22 -0800 Subject: [PATCH 38/63] Update ios-configure-features.md --- .../microsoft-defender-atp/ios-configure-features.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md b/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md index 764ed7c7d9..ce5f2102a5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md +++ b/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md @@ -102,7 +102,7 @@ Phishing websites impersonate trustworthy websites for the purpose of obtaining ## Battery Consumption issues on iOS when Microsoft Defender for Endpoint is installed -The battery usage by an app is computed by Apple based on a multitude of factors including CPU and Network usage. Microsoft Defender for Endpoint uses a local/loop-back VPN in the background to check web traffic for any malicious websites or connections. Network packets from any app go through this check and Apple wrongly accounts this in computing the battery usage of Microsoft Defender for Endpoint. This gives a false impression to the user. The actual battery consumption of Microsoft Defender for Endpoint is lesser than what is shown on the Battery Settings page on the device. This is based on tests that we have done to understand battery consumption by our app. +The battery usage by an app is computed by Apple based on a multitude of factors including CPU and Network usage. Microsoft Defender for Endpoint uses a local/loop-back VPN in the background to check web traffic for any malicious websites or connections. Network packets from any app go through this check and that causes the battery usage of Microsoft Defender for Endpoint to be computed inaccurately. This gives a false impression to the user. The actual battery consumption of Microsoft Defender for Endpoint is lesser than what is shown on the Battery Settings page on the device. This is based on conducted tests done on the Microsoft Defender for Endpoint app to understand battery consumption. Also the VPN used is a local VPN and unlike traditional VPNs, network traffic is not sent outside the device. From 35b35e492b9b89565f59be2fe82f4389062f9f5c Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 5 Mar 2021 09:15:55 -0800 Subject: [PATCH 39/63] More improvements for spacing and markup --- .../set-up-shared-or-guest-pc.md | 2 +- .../deploy-a-windows-10-image-using-mdt.md | 5 +++- .../windows-10-subscription-activation.md | 7 +++++ .../ltsc/whats-new-windows-10-2019.md | 26 +++++++++++++++++-- 4 files changed, 36 insertions(+), 4 deletions(-) diff --git a/windows/configuration/set-up-shared-or-guest-pc.md b/windows/configuration/set-up-shared-or-guest-pc.md index b384589f9d..d84bf41c84 100644 --- a/windows/configuration/set-up-shared-or-guest-pc.md +++ b/windows/configuration/set-up-shared-or-guest-pc.md @@ -228,7 +228,7 @@ On a desktop computer, navigate to **Settings** > **Accounts** > **Work ac * Create exempt accounts before signing out when turning shared pc mode on. * The account management service supports accounts that are exempt from deletion. - * An account can be marked exempt from deletion by adding the account SID to the registry key:`HKEY_LOCAL_MACHINE\SOFTARE\Microsoft\Windows\CurrentVersion\SharedPC\Exemptions\`. + * An account can be marked exempt from deletion by adding the account SID to the registry key: `HKEY_LOCAL_MACHINE\SOFTARE\Microsoft\Windows\CurrentVersion\SharedPC\Exemptions\`. * To add the account SID to the registry key using PowerShell: ```powershell diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 2a53ee6346..ed7461ad5c 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -288,7 +288,10 @@ On **MDT01**: 1. Download **PROWinx64.exe** from Intel.com (ex: [PROWinx64.exe](https://downloadcenter.intel.com/downloads/eula/25016/Intel-Network-Adapter-Driver-for-Windows-10?httpDown=https%3A%2F%2Fdownloadmirror.intel.com%2F25016%2Feng%2FPROWinx64.exe)). -2. Extract **PROWinx64.exe** to a temporary folder - in this example to the **C:\\Tmp\\ProWinx64** folder. Note that extracting the **.exe** file manually requires an extraction utility. You can also run the .exe and it will self-extract files to the **%userprofile%\AppData\Local\Temp\RarSFX0** directory. This directory is temporary and will be deleted when the **.exe** terminates. +2. Extract **PROWinx64.exe** to a temporary folder - in this example to the **C:\\Tmp\\ProWinx64** folder. + + > [!NOTE] + > Extracting the **.exe** file manually requires an extraction utility. You can also run the .exe and it will self-extract files to the **%userprofile%\AppData\Local\Temp\RarSFX0** directory. This directory is temporary and will be deleted when the **.exe** terminates. 3. Using **File Explorer**, create the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. diff --git a/windows/deployment/windows-10-subscription-activation.md b/windows/deployment/windows-10-subscription-activation.md index 8d39946e05..16a70ae7dc 100644 --- a/windows/deployment/windows-10-subscription-activation.md +++ b/windows/deployment/windows-10-subscription-activation.md @@ -68,12 +68,19 @@ The following figure illustrates how deploying Windows 10 has evolved with each ![Illustration of how Windows 10 deployment has evolved](images/sa-evolution.png) - **Windows 7** required you to redeploy the operating system using a full wipe-and-load process if you wanted to change from Windows 7 Professional to Windows 10 Enterprise.
+ - **Windows 8.1** added support for a Windows 8.1 Pro to Windows 8.1 Enterprise in-place upgrade (considered a “repair upgrade” because the OS version was the same before and after).  This was a lot easier than wipe-and-load, but it was still time-consuming.
+ - **Windows 10, version 1507** added the ability to install a new product key using a provisioning package or using MDM to change the SKU.  This required a reboot, which would install the new OS components, and took several minutes to complete. However, it was a lot quicker than in-place upgrade.
+ - **Windows 10, version 1607** made a big leap forward. Now you can just change the product key and the SKU instantly changes from Windows 10 Pro to Windows 10 Enterprise.  In addition to provisioning packages and MDM, you can just inject a key using SLMGR.VBS (which injects the key into WMI), so it became trivial to do this using a command line.
+ - **Windows 10, version 1703** made this “step-up” from Windows 10 Pro to Windows 10 Enterprise automatic for those that subscribed to Windows 10 Enterprise E3 or E5 via the CSP program.
+ - **Windows 10, version 1709** adds support for Windows 10 Subscription Activation, very similar to the CSP support but for large enterprises, enabling the use of Azure AD for assigning licenses to users. When those users sign in on an AD or Azure AD-joined machine, it automatically steps up from Windows 10 Pro to Windows 10 Enterprise.
+ - **Windows 10, version 1803** updates Windows 10 Subscription Activation to enable pulling activation keys directly from firmware for devices that support firmware-embedded keys. It is no longer necessary to run a script to perform the activation step on Windows 10 Pro prior to activating Enterprise. For virtual machines and hosts running Windows 10, version 1803 [Inherited Activation](#inherited-activation) is also enabled.
+ - **Windows 10, version 1903** updates Windows 10 Subscription Activation to enable step up from Windows 10 Pro Education to Windows 10 Education for those with a qualifying Windows 10 or Microsoft 365 subscription. ## Requirements diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2019.md b/windows/whats-new/ltsc/whats-new-windows-10-2019.md index 456e3466fb..1fb4dffbde 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2019.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2019.md @@ -100,24 +100,37 @@ Endpoint detection and response is improved. Enterprise customers can now take a - Historical detection capability ensures new detection rules apply to up to six months of stored data to detect previous attacks that might not have been noticed. **Threat response** is improved when an attack is detected, enabling immediate action by security teams to contain a breach: -- [Take response actions on a machine](/windows/threat-protection/windows-defender-atp/respond-machine-alerts-windows-defender-advanced-threat-protection) - Quickly respond to detected attacks by isolating machines or collecting an investigation package. + - [Take response actions on a machine](/windows/threat-protection/windows-defender-atp/respond-machine-alerts-windows-defender-advanced-threat-protection) - Quickly respond to detected attacks by isolating machines or collecting an investigation package. - [Take response actions on a file](/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection) - Quickly respond to detected attacks by stopping and quarantining files or blocking a file. Additional capabilities have been added to help you gain a holistic view on **investigations** include: + - [Threat analytics](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/threat-analytics) - Threat Analytics is a set of interactive reports published by the Microsoft Defender for Endpoint research team as soon as emerging threats and outbreaks are identified. The reports help security operations teams assess impact on their environment and provides recommended actions to contain, increase organizational resilience, and prevent specific threats. + - [Query data using Advanced hunting in Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/advanced-hunting-windows-defender-advanced-threat-protection) + - [Use Automated investigations to investigate and remediate threats](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/automated-investigations-windows-defender-advanced-threat-protection) + - [Investigate a user account](/windows/threat-protection/windows-defender-atp/investigate-user-windows-defender-advanced-threat-protection) - Identify user accounts with the most active alerts and investigate cases of potential compromised credentials. + - [Alert process tree](/windows/threat-protection/windows-defender-atp/investigate-alerts-windows-defender-advanced-threat-protection#alert-process-tree) - Aggregates multiple detections and related events into a single view to reduce case resolution time. + - [Pull alerts using REST API](/windows/threat-protection/windows-defender-atp/pull-alerts-using-rest-api-windows-defender-advanced-threat-protection) - Use REST API to pull alerts from Microsoft Defender for Endpoint. Other enhanced security features include: + - [Check sensor health state](/windows/threat-protection/windows-defender-atp/check-sensor-status-windows-defender-advanced-threat-protection) - Check an endpoint's ability to provide sensor data and communicate with the Microsoft Defender for Endpoint service and fix known issues. + - [Managed security service provider (MSSP) support](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/mssp-support-windows-defender-advanced-threat-protection) - Microsoft Defender for Endpoint adds support for this scenario by providing MSSP integration. The integration will allow MSSPs to take the following actions: Get access to MSSP customer's Windows Defender Security Center portal, fetch email notifications, and fetch alerts through security information and event management (SIEM) tools. + - [Integration with Azure Defender](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection#integration-with-azure-security-center) - Microsoft Defender for Endpoint integrates with Azure Defender to provide a comprehensive server protection solution. With this integration Azure Defender can leverage the power of Defender for Endpoint to provide improved threat detection for Windows Servers. + - [Integration with Microsoft Cloud App Security](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/microsoft-cloud-app-security-integration) - Microsoft Cloud App Security leverages Microsoft Defender for Endpoint signals to allow direct visibility into cloud application usage including the use of unsupported cloud services (shadow IT) from all Defender for Endpoint monitored machines. + - [Onboard Windows Server 2019](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection#windows-server-version-1803-and-windows-server-2019) - Microsoft Defender for Endpoint now adds support for Windows Server 2019. You'll be able to onboard Windows Server 2019 in the same method available for Windows 10 client machines. + - [Onboard previous versions of Windows](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/onboard-downlevel-windows-defender-advanced-threat-protection) - Onboard supported versions of Windows machines so that they can send sensor data to the Microsoft Defender for Endpoint sensor. + - [Enable conditional access to better protect users, devices, and data](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/conditional-access-windows-defender-advanced-threat-protection) We've also added a new assessment for the Windows time service to the **Device performance & health** section. If we detect that your device’s time is not properly synced with our time servers and the time-syncing service is disabled, we’ll provide the option for you to turn it back on. @@ -192,16 +205,25 @@ Improvements have been added are to Windows Hello for Business and Credential Gu New features in Windows Hello enable a better device lock experience, using multifactor unlock with new location and user proximity signals. Using Bluetooth signals, you can configure your Windows 10 device to automatically lock when you walk away from it, or to prevent others from accessing the device when you are not present. New features in [Windows Hello for Business](/windows/security/identity-protection/hello-for-business/hello-identity-verification.md) include: + - You can now reset a forgotten PIN without deleting company managed data or apps on devices managed by [Microsoft Intune](https://www.microsoft.com/cloud-platform/microsoft-intune). + - For Windows Phone devices, an administrator is able to initiate a remote PIN reset through the Intune portal. + - For Windows desktops, users are able to reset a forgotten PIN through **Settings > Accounts > Sign-in options**. For more details, check out [What if I forget my PIN?](/windows/security/identity-protection/hello-for-business/hello-features#pin-reset). [Windows Hello](https://docs.microsoft.com/windows/security/identity-protection/hello-for-business/hello-features) now supports FIDO 2.0 authentication for Azure AD Joined Windows 10 devices and has enhanced support for shared devices, as described in [Kiosk configuration](#kiosk-configuration). + - Windows Hello is now [password-less on S-mode](https://www.windowslatest.com/2018/02/12/microsoft-make-windows-10-password-less-platform/). + - Support for S/MIME with Windows Hello for Business and APIs for non-Microsoft identity lifecycle management solutions. + - Windows Hello is part of the account protection pillar in Windows Defender Security Center. Account Protection will encourage password users to set up Windows Hello Face, Fingerprint or PIN for faster sign in, and will notify Dynamic lock users if Dynamic lock has stopped working because their phone or device Bluetooth is off. + - You can set up Windows Hello from lock screen for MSA accounts. We’ve made it easier for Microsoft account users to set up Windows Hello on their devices for faster and more secure sign-in. Previously, you had to navigate deep into Settings to find Windows Hello. Now, you can set up Windows Hello Face, Fingerprint or PIN straight from your lock screen by clicking the Windows Hello tile under Sign-in options. + - New [public API](https://docs.microsoft.com/uwp/api/windows.security.authentication.web.core.webauthenticationcoremanager.findallaccountsasync#Windows_Security_Authentication_Web_Core_WebAuthenticationCoreManager_FindAllAccountsAsync_Windows_Security_Credentials_WebAccountProvider_) for secondary account SSO for a particular identity provider. + - It is easier to set up Dynamic lock, and WD SC actionable alerts have been added when Dynamic lock stops working (ex: phone Bluetooth is off). For more information, see: [Windows Hello and FIDO2 Security Keys enable secure and easy authentication for shared devices](https://blogs.windows.com/business/2018/04/17/windows-hello-fido2-security-keys/#OdKBg3pwJQcEKCbJ.97) @@ -288,7 +310,7 @@ For details, see [MBR2GPT.EXE](/windows/deployment/mbr-to-gpt). The following new DISM commands have been added to manage feature updates: - **DISM /Online /Initiate-OSUninstall** - - Initiates a OS uninstall to take the computer back to the previous installation of windows. + - Initiates an OS uninstall to take the computer back to the previous installation of windows. - **DISM /Online /Remove-OSUninstall** - Removes the OS uninstall capability from the computer. From a84714f2ceea1babafe461df9dd8d11ebf00a2a6 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Fri, 5 Mar 2021 19:30:37 +0200 Subject: [PATCH 40/63] Update gov.md Typo with Compliance Manager product name. --- .../security/threat-protection/microsoft-defender-atp/gov.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 98632acbf5..77eb8fddab 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -120,7 +120,7 @@ Spreadsheet of domains list | Description For more information, see [Configure device proxy and Internet connectivity settings](configure-proxy-internet.md). > [!NOTE] -> The spreadsheet contains commercial URLs as well, make sure you check the "US Gov" tabs.
When filtering look for the records labeled as "US Gov" and your specific cloud under the geography column. +> The spreadsheet contains commercial URLs as well, make sure you check the "US Gov" tabs.
When filtering, look for the records labeled as "US Gov" and your specific cloud under the geography column.
@@ -155,7 +155,7 @@ Threat analytics | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/ch Web content filtering | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development Integrations: Azure Sentinel | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development Integrations: Microsoft Cloud App Security | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog -Integrations: Microsoft Compliance Center | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog +Integrations: Microsoft Compliance Manager | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog Integrations: Microsoft Defender for Identity | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog Integrations: Microsoft Defender for Office 365 | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog Integrations: Microsoft Endpoint DLP | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog From 103a244315101d453cd7e4ae3c002edd38f9e765 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Fri, 5 Mar 2021 19:36:54 +0200 Subject: [PATCH 41/63] Update microsoft-cloud-app-security-config.md https://github.com/MicrosoftDocs/windows-itpro-docs/issues/9253 --- .../microsoft-cloud-app-security-config.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md index 6a1580f180..1a91ff9489 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md @@ -1,7 +1,7 @@ --- title: Configure Microsoft Cloud App Security integration ms.reviewer: -description: Learn how to turn on the settings to enable the Microsoft Defender ATP integration with Microsoft Cloud App Security. +description: Learn how to turn on the settings to enable the Microsoft Defender for Endpoint integration with Microsoft Cloud App Security. keywords: cloud, app, security, settings, integration, discovery, report search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -35,7 +35,7 @@ To benefit from Microsoft Defender for Endpoint cloud app discovery signals, tur >[!NOTE] >This feature will be available with an E5 license for [Enterprise Mobility + Security](https://www.microsoft.com/cloud-platform/enterprise-mobility-security) on devices running Windows 10, version 1709 (OS Build 16299.1085 with [KB4493441](https://support.microsoft.com/help/4493441)), Windows 10, version 1803 (OS Build 17134.704 with [KB4493464](https://support.microsoft.com/help/4493464)), Windows 10, version 1809 (OS Build 17763.379 with [KB4489899](https://support.microsoft.com/help/4489899)) or later Windows 10 versions. -> See [Microsoft Defender for Endpoint integration with Microsoft Cloud App Security](https://docs.microsoft.com/cloud-app-security/wdatp-integration) for detailed integration of Microsoft Defender for Endpoint with Microsoft Cloud App Security. +> See [Microsoft Defender for Endpoint integration with Microsoft Cloud App Security](https://docs.microsoft.com/cloud-app-security/mde-integration) for detailed integration of Microsoft Defender for Endpoint with Microsoft Cloud App Security. ## Enable Microsoft Cloud App Security in Microsoft Defender for Endpoint From eea7da1cff7bd98d69aef590814d85e664e6c0da Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Fri, 5 Mar 2021 19:39:06 +0200 Subject: [PATCH 42/63] Update microsoft-cloud-app-security-config.md Acrolinx --- .../microsoft-cloud-app-security-config.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md index 1a91ff9489..54207a51bc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md @@ -52,7 +52,7 @@ To view and access Microsoft Defender for Endpoint data in Microsoft Cloud Apps For more information about cloud discovery, see [Working with discovered apps](https://docs.microsoft.com/cloud-app-security/discovered-apps). -If you are interested in trying Microsoft Cloud App Security, see [Microsoft Cloud App Security Trial](https://signup.microsoft.com/Signup?OfferId=757c4c34-d589-46e4-9579-120bba5c92ed&ali=1). +If you're interested in trying Microsoft Cloud App Security, see [Microsoft Cloud App Security Trial](https://signup.microsoft.com/Signup?OfferId=757c4c34-d589-46e4-9579-120bba5c92ed&ali=1). ## Related topic - [Microsoft Cloud App Security integration](microsoft-cloud-app-security-integration.md) From a6472c18c9d4ae3cd87ef6d57a3a423c76b71351 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 5 Mar 2021 09:54:33 -0800 Subject: [PATCH 43/63] Update configure-md-app-guard.md --- .../configure-md-app-guard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard.md index c07e9023c2..17ea8c1679 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard.md @@ -8,7 +8,7 @@ ms.pagetype: security ms.localizationpriority: medium author: denisebmsft ms.author: deniseb -ms.date: 10/17/2017 +ms.date: 03/05/2021 ms.reviewer: manager: dansimp ms.custom: asr From df2e0e01c8268b4acc8ced552f4cb34b6bed995e Mon Sep 17 00:00:00 2001 From: Jaime Ondrusek Date: Fri, 5 Mar 2021 10:55:16 -0700 Subject: [PATCH 44/63] Update windows-update-resources.md Simplified. --- windows/deployment/update/windows-update-resources.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-update-resources.md b/windows/deployment/update/windows-update-resources.md index 439b4f04e7..364700c9e3 100644 --- a/windows/deployment/update/windows-update-resources.md +++ b/windows/deployment/update/windows-update-resources.md @@ -38,7 +38,7 @@ The following resources provide additional information about using Windows Updat ## Reset Windows Update components manually -1. Open a Windows command prompt as Administrator. To open a command prompt as Administrator, click **Start > Run**. Copy and paste (or type) the following command and then press Ctrl+Shift+Enter to run the command as an Administrator: +1. Open a Windows command prompt as Administrator, and then run this command: ``` console cmd ``` From 3e051a9b1ad68c760ab02aab735f1ec887e467b4 Mon Sep 17 00:00:00 2001 From: Jaime Ondrusek Date: Fri, 5 Mar 2021 10:57:26 -0700 Subject: [PATCH 45/63] Update waas-delivery-optimization.md Corrected grammar. --- windows/deployment/update/waas-delivery-optimization.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index aaf074509d..b092e01f7d 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -69,7 +69,7 @@ For information about setting up Delivery Optimization, including tips for the b - [Dynamic updates](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/the-benefits-of-windows-10-dynamic-update/ba-p/467847) > [!NOTE] -> Volume licensed versions of Office 2019, such as Office Professional Plus 2019, can take advantage of Delivery Optimization, but only for background updates. Delivery Optimization isn't available for installation or for foreground updates. The same applies to volume licensed versions of Project 2019 and Visio 2019. +> Volume-licensed versions of Office 2019, such as Office Professional Plus 2019, can take advantage of Delivery Optimization for background updates. Delivery Optimization isn't available for installation or for foreground updates. The same applies to volume-licensed versions of Project 2019 and Visio 2019. ## Requirements From a15119f99d354c12c63811216153f6d2fda15352 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 5 Mar 2021 10:28:17 -0800 Subject: [PATCH 46/63] Spacing and markup --- .../deploy-a-windows-10-image-using-mdt.md | 34 +++++++++---------- .../windows-10-subscription-activation.md | 2 +- .../hello-feature-pin-reset.md | 2 +- ...Onboard-Windows-10-multi-session-device.md | 2 +- .../ltsc/whats-new-windows-10-2019.md | 2 +- 5 files changed, 21 insertions(+), 21 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index ed7461ad5c..baf64f9c7e 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -61,20 +61,20 @@ On **DC01**: .\Set-OUPermissions.ps1 -Account MDT_JD -TargetOU "OU=Workstations,OU=Computers,OU=Contoso" ``` -The following is a list of the permissions being granted: + The following is a list of the permissions being granted: -- Scope: This object and all descendant objects -- Create Computer objects -- Delete Computer objects -- Scope: Descendant Computer objects -- Read All Properties -- Write All Properties -- Read Permissions -- Modify Permissions -- Change Password -- Reset Password -- Validated write to DNS host name -- Validated write to service principal name + - Scope: This object and all descendant objects + - Create Computer objects + - Delete Computer objects + - Scope: Descendant Computer objects + - Read All Properties + - Write All Properties + - Read Permissions + - Modify Permissions + - Change Password + - Reset Password + - Validated write to DNS host name + - Validated write to service principal name ## Step 2: Set up the MDT production deployment share @@ -288,7 +288,7 @@ On **MDT01**: 1. Download **PROWinx64.exe** from Intel.com (ex: [PROWinx64.exe](https://downloadcenter.intel.com/downloads/eula/25016/Intel-Network-Adapter-Driver-for-Windows-10?httpDown=https%3A%2F%2Fdownloadmirror.intel.com%2F25016%2Feng%2FPROWinx64.exe)). -2. Extract **PROWinx64.exe** to a temporary folder - in this example to the **C:\\Tmp\\ProWinx64** folder. +2. Extract **PROWinx64.exe** to a temporary folder—in this example to the **C:\\Tmp\\ProWinx64** folder. > [!NOTE] > Extracting the **.exe** file manually requires an extraction utility. You can also run the .exe and it will self-extract files to the **%userprofile%\AppData\Local\Temp\RarSFX0** directory. This directory is temporary and will be deleted when the **.exe** terminates. @@ -689,9 +689,9 @@ On **HV01**: 4. Setup now begins and does the following: - 1. Installs the Windows 10 Enterprise operating system. - 2. Installs the added application. - 3. Updates the operating system via your local Windows Server Update Services (WSUS) server. + - Installs the Windows 10 Enterprise operating system. + - Installs the added application. + - Updates the operating system via your local Windows Server Update Services (WSUS) server. ![pc0005 image1](../images/pc0005-vm.png) diff --git a/windows/deployment/windows-10-subscription-activation.md b/windows/deployment/windows-10-subscription-activation.md index 16a70ae7dc..300e9da96e 100644 --- a/windows/deployment/windows-10-subscription-activation.md +++ b/windows/deployment/windows-10-subscription-activation.md @@ -21,7 +21,7 @@ ms.topic: article Starting with Windows 10, version 1703 Windows 10 Pro supports the Subscription Activation feature, enabling users to “step-up” from Windows 10 Pro to **Windows 10 Enterprise** automatically if they are subscribed to Windows 10 Enterprise E3 or E5. -With Windows 10, version 1903 the Subscription Activation feature also supports the ability to step-up from Windows 10 Pro Education to the Enterprise grade edition for educational institutions – **Windows 10 Education**. +With Windows 10, version 1903 the Subscription Activation feature also supports the ability to step-up from Windows 10 Pro Education to the Enterprise grade edition for educational institutions—**Windows 10 Education**. The Subscription Activation feature eliminates the need to manually deploy Windows 10 Enterprise or Education images on each target device, then later standing up on-prem key management services such as KMS or MAK based activation, entering GVLKs, and subsequently rebooting client devices. diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index e0b41cbef2..b06b997753 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -131,7 +131,7 @@ On-premises deployments provide users with the ability to reset forgotten PINs e You may find that PIN reset from settings only works post login, and that the "lock screen" PIN reset function will not work if you have any matching limitation of SSPR password reset from the lock screen. For more information, see [Enable Azure Active Directory self-service password reset at the Windows sign-in screen - **General limitations**](https://docs.microsoft.com/azure/active-directory/authentication/howto-sspr-windows#general-limitations). > [!NOTE] -> Visit the [Windows Hello for Business Videos](https://docs.microsoft.com/windows/security/identity-protection/hello-for-business/hello-videos.md) page and watch the [Windows Hello for Business forgotten PIN user experience](https://docs.microsoft.com/windows/security/identity-protection/hello-for-business/hello-videos#windows-hello-for-business-forgotten-pin-user-experience) video. +> Visit the [Windows Hello for Business Videos](https://docs.microsoft.com/windows/security/identity-protection/hello-for-business/hello-videos.md) page and watch [Windows Hello for Business forgotten PIN user experience](https://docs.microsoft.com/windows/security/identity-protection/hello-for-business/hello-videos#windows-hello-for-business-forgotten-pin-user-experience). ## Related topics diff --git a/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md b/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md index 2950bc11b8..ea3eb1315c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md +++ b/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md @@ -45,7 +45,7 @@ Microsoft recommends onboarding Windows Virtual Desktop as a single entry per vi Microsoft recommends adding the Microsoft Defender for Endpoint onboarding script to the WVD image. This way, you can be sure that this onboarding script runs immediately at first boot. It is executed as a startup script at first boot on all the WVD machines that are provisioned from the WVD golden image. However, if you are using one of the gallery images without modification, place the script in a shared location and call it from either local or domain group policy. > [!NOTE] -> The placement and configuration of the VDI onboarding startup script on the WVD golden image configures it as a startup script that runs when the WVD starts. It is NOT recommended to onboard the actual WVD golden image. Another consideration is the method used to run the script. It should run as early in the startup/provisioning process as possible to reduce the time between the machine being available to receive sessions and the device onboarding to the service. Below scenarios 1 & 2 take this into account. +> The placement and configuration of the VDI onboarding startup script on the WVD golden image configures it as a startup script that runs when the WVD starts. It is _not_ recommended to onboard the actual WVD golden image. Another consideration is the method used to run the script. It should run as early in the startup/provisioning process as possible to reduce the time between the machine being available to receive sessions and the device onboarding to the service. Below scenarios 1 & 2 take this into account. ## Scenarios There are several ways to onboard a WVD host machine: diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2019.md b/windows/whats-new/ltsc/whats-new-windows-10-2019.md index 1fb4dffbde..81161b833f 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2019.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2019.md @@ -337,7 +337,7 @@ It is also now possible to run a script if the user rolls back their version of `/PostRollback [\setuprollback.cmd] [/postrollback {system / admin}]` -For more information, see [Windows Setup Command-Line Options](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-setup-command-line-options#21) +For more information, see [Windows Setup Command-Line Options](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-setup-command-line-options#21). New command-line switches are also available to control BitLocker: From ca07a12ced0098a6283221399867047cb97ff050 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 5 Mar 2021 10:30:32 -0800 Subject: [PATCH 47/63] Update manage-updates-baselines-microsoft-defender-antivirus.md --- ...tes-baselines-microsoft-defender-antivirus.md | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index dba7425369..f1e784ee1e 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -13,7 +13,7 @@ ms.author: deniseb ms.custom: nextgen ms.reviewer: pahuijbr manager: dansimp -ms.date: 02/12/2021 +ms.date: 03/05/2021 ms.technology: mde --- @@ -408,6 +408,20 @@ We recommend updating your Windows 10 (Enterprise, Pro, and Home editions), Wind For more information, see [Microsoft Defender update for Windows operating system installation images](https://support.microsoft.com/help/4568292/defender-update-for-windows-operating-system-installation-images).

+1.1.2103.01 + + Package version: **1.1.2103.01** + Platform version: **4.18.2101.9** + Engine version: **1.17800.5** + Signature version: **1.331.2302.0** + +### Fixes +- None + +### Additional information +- None +
+
1.1.2102.03  Package version: **1.1.2102.03** From 88a20e5872575c3c7934a61968eeff652659eb2a Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 5 Mar 2021 10:44:28 -0800 Subject: [PATCH 48/63] Made alt text unique to satisfy build error --- windows/configuration/set-up-shared-or-guest-pc.md | 2 +- windows/whats-new/ltsc/whats-new-windows-10-2019.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/configuration/set-up-shared-or-guest-pc.md b/windows/configuration/set-up-shared-or-guest-pc.md index d84bf41c84..2d7b4b2b66 100644 --- a/windows/configuration/set-up-shared-or-guest-pc.md +++ b/windows/configuration/set-up-shared-or-guest-pc.md @@ -108,7 +108,7 @@ You can configure Windows to be in shared PC mode in a couple different ways: 8. On the **Configuration settings** page, set the ‘Shared PC Mode’ value to **Enabled**. > [!div class="mx-imgBorder"] - > ![Shared PC settings in ICD](images/shared_pc_3.png) + > ![Shared PC mode in the Configuration settings page](images/shared_pc_3.png) 9. From this point on, you can configure any additional settings you’d like to be part of this policy, and then follow the rest of the set-up flow to its completion by selecting **Create** after **Step 4**. diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2019.md b/windows/whats-new/ltsc/whats-new-windows-10-2019.md index 81161b833f..dd9655ac64 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2019.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2019.md @@ -660,7 +660,7 @@ See the following example: ![Enter your credentials](../images/RDPwBioTime.png "Windows Hello") -![Enter your credentials](../images/RDPwBio2.png "Windows Hello personal") +![Initiate a Remote Desktop connection](../images/RDPwBio2.png "Windows Hello personal") ![Microsoft Hyper-V Server 2016](../images/hyper-v.png "Microsoft Hyper-V Server 2016") From 427a0f072168f868d6dea112d052ccc21dd805dc Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 5 Mar 2021 11:16:40 -0800 Subject: [PATCH 49/63] delete file --- .openpublishing.redirection.json | 5 +++ .../microsoft-defender-atp/manage-edr.md | 43 ------------------- 2 files changed, 5 insertions(+), 43 deletions(-) delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/manage-edr.md diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index c4199cc4dd..90e5c3177c 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -1699,6 +1699,11 @@ "source_path": "windows/security/threat-protection/windows-defender-atp/manage-edr.md", "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/manage-edr", "redirect_document_id": true + }, + { + "source_path": "windows/security/threat-protection/microsoft-defender-atp/manage-edrmanage-edr.md", + "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response", + "redirect_document_id": false }, { "source_path": "windows/security/threat-protection/windows-defender-atp/management-apis.md", diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-edr.md b/windows/security/threat-protection/microsoft-defender-atp/manage-edr.md deleted file mode 100644 index 5ba421a832..0000000000 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-edr.md +++ /dev/null @@ -1,43 +0,0 @@ ---- -title: Manage endpoint detection and response capabilities -description: Manage endpoint detection and response capabilities -ms.reviewer: -keywords: -search.product: eADQiWindows 10XVcnh -search.appverid: met150 -ms.prod: m365-security -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: security -ms.author: macapara -author: mjcaparas -ms.localizationpriority: medium -manager: dansimp -audience: ITPro -ms.collection: - - m365-security-compliance - - m365initiative-defender-endpoint -ms.topic: conceptual -ms.technology: mde ---- - -# Manage endpoint detection and response capabilities - -[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2154037) -- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/p/?linkid=2118804) - -> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) - -Manage the alerts queue, investigate devices in the devices list, take response actions, and hunt for possible threats in your organization using advanced hunting. - - -## In this section -Topic | Description -:---|:--- -[Alerts queue](alerts-queue-endpoint-detection-response.md)| View the alerts surfaced in Microsoft Defender Security Center. -[Devices list](machines-view-overview.md) | Learn how you can view and manage the devices list, manage device groups, and investigate device related alerts. -[Take response actions](response-actions.md)| Take response actions on devices and files to quickly respond to detected attacks and contain threats. -[Query data using advanced hunting](advanced-hunting-query-language.md)| Proactively hunt for possible threats across your organization using a powerful search and query tool. From f1e2552e3fd1ccf804f3c1468d4a587b8d7356f9 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 5 Mar 2021 11:16:58 -0800 Subject: [PATCH 50/63] file rename --- ...n-device.md => Onboard-Windows-10-multi-session-device-new.md} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename windows/security/threat-protection/microsoft-defender-atp/{Onboard-Windows-10-multi-session-device.md => Onboard-Windows-10-multi-session-device-new.md} (100%) diff --git a/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md b/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device-new.md similarity index 100% rename from windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md rename to windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device-new.md From 23196efb969e4c97c8e3b5694b2c95d242b1288d Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 5 Mar 2021 11:17:49 -0800 Subject: [PATCH 51/63] fix file name cap --- ...n-device-new.md => onboard-windows-10-multi-session-device.md} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename windows/security/threat-protection/microsoft-defender-atp/{Onboard-Windows-10-multi-session-device-new.md => onboard-windows-10-multi-session-device.md} (100%) diff --git a/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device-new.md b/windows/security/threat-protection/microsoft-defender-atp/onboard-windows-10-multi-session-device.md similarity index 100% rename from windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device-new.md rename to windows/security/threat-protection/microsoft-defender-atp/onboard-windows-10-multi-session-device.md From 2efba68974ecce297716f273393859f0972062ef Mon Sep 17 00:00:00 2001 From: greg-lindsay Date: Fri, 5 Mar 2021 11:28:12 -0800 Subject: [PATCH 52/63] alt text --- .../mandatory-user-profile.md | 12 +- .../diagnose-mdm-failures-in-windows-10.md | 10 +- windows/client-management/mdm/euiccs-csp.md | 30 --- .../client-management/mdm/euiccs-ddf-file.md | 206 +----------------- .../mdm/policy-csp-timelanguagesettings.md | 4 +- .../set-up-and-test-cortana-in-windows-10.md | 4 +- windows/configuration/images/Shared_PC_1.jpg | Bin 0 -> 40769 bytes .../set-up-shared-or-guest-pc.md | 28 +-- .../deploy-a-windows-10-image-using-mdt.md | 111 +++++----- .../deployment/update/media-dynamic-update.md | 3 - .../update/servicing-stack-updates.md | 7 +- .../update/update-compliance-get-started.md | 3 - .../update/waas-delivery-optimization.md | 9 +- .../update/waas-manage-updates-wufb.md | 9 +- .../update/windows-update-resources.md | 2 +- .../usmt-recognized-environment-variables.md | 12 +- ...ctive-directory-based-activation-client.md | 16 -- .../windows-10-subscription-activation.md | 1 - .../hello-feature-pin-reset.md | 4 +- .../hello-hybrid-key-whfb-settings-policy.md | 4 +- .../change-history-for-threat-protection.md | 2 +- windows/security/threat-protection/index.md | 6 +- .../mbsa-removal-and-guidance.md | 6 +- ...llect-diagnostic-data-update-compliance.md | 2 +- .../collect-diagnostic-data.md | 2 +- ...-arguments-microsoft-defender-antivirus.md | 2 +- ...-reference-microsoft-defender-antivirus.md | 2 +- ...scan-types-microsoft-defender-antivirus.md | 2 +- ...irst-sight-microsoft-defender-antivirus.md | 2 +- ...out-period-microsoft-defender-antivirus.md | 2 +- ...nteraction-microsoft-defender-antivirus.md | 2 +- ...exclusions-microsoft-defender-antivirus.md | 2 +- ...exclusions-microsoft-defender-antivirus.md | 2 +- ...-overrides-microsoft-defender-antivirus.md | 2 +- ...e-microsoft-defender-antivirus-features.md | 2 +- ...onnections-microsoft-defender-antivirus.md | 2 +- ...ifications-microsoft-defender-antivirus.md | 2 +- ...exclusions-microsoft-defender-antivirus.md | 2 +- ...n-features-microsoft-defender-antivirus.md | 2 +- ...protection-microsoft-defender-antivirus.md | 2 +- ...emediation-microsoft-defender-antivirus.md | 2 +- ...exclusions-microsoft-defender-antivirus.md | 2 +- ...iate-scans-microsoft-defender-antivirus.md | 2 +- ...ediate-scans-windows-defender-antivirus.md | 2 +- ...age-report-microsoft-defender-antivirus.md | 2 +- .../deploy-microsoft-defender-antivirus.md | 2 +- ...oyment-vdi-microsoft-defender-antivirus.md | 2 +- ...anted-apps-microsoft-defender-antivirus.md | 2 +- ...protection-microsoft-defender-antivirus.md | 2 +- .../evaluate-microsoft-defender-antivirus.md | 2 +- ...c-scanning-microsoft-defender-antivirus.md | 2 +- ...ed-updates-microsoft-defender-antivirus.md | 2 +- ...-endpoints-microsoft-defender-antivirus.md | 2 +- ...e-schedule-microsoft-defender-antivirus.md | 2 +- ...-baselines-microsoft-defender-antivirus.md | 2 +- ...evices-vms-microsoft-defender-antivirus.md | 2 +- ...rosoft-defender-antivirus-compatibility.md | 18 +- ...rosoft-defender-antivirus-in-windows-10.md | 2 +- ...fender-antivirus-on-windows-server-2016.md | 2 +- .../microsoft-defender-offline.md | 2 +- ...soft-defender-security-center-antivirus.md | 2 +- ...office-365-microsoft-defender-antivirus.md | 2 +- ...ecurity-settings-with-tamper-protection.md | 2 +- ...nteraction-microsoft-defender-antivirus.md | 2 +- ...rt-monitor-microsoft-defender-antivirus.md | 2 +- ...ined-files-microsoft-defender-antivirus.md | 2 +- ...an-results-microsoft-defender-antivirus.md | 2 +- .../run-scan-microsoft-defender-antivirus.md | 2 +- ...h-up-scans-microsoft-defender-antivirus.md | 2 +- ...tion-level-microsoft-defender-antivirus.md | 2 +- ...osoft-defender-antivirus-when-migrating.md | 2 +- ...oubleshoot-microsoft-defender-antivirus.md | 2 +- .../troubleshoot-reporting.md | 2 +- ...oup-policy-microsoft-defender-antivirus.md | 2 +- ...ig-manager-microsoft-defender-antivirus.md | 2 +- ...ll-cmdlets-microsoft-defender-antivirus.md | 2 +- .../use-wmi-microsoft-defender-antivirus.md | 2 +- ...protection-microsoft-defender-antivirus.md | 2 +- .../configure-md-app-guard.md | 7 +- .../faq-md-app-guard.md | 82 +++---- .../install-md-app-guard.md | 2 +- .../test-scenarios-md-app-guard.md | 2 +- ...Onboard-Windows-10-multi-session-device.md | 2 +- .../access-mssp-portal.md | 6 +- .../add-or-remove-machine-tags.md | 4 +- .../advanced-features.md | 4 +- ...nced-hunting-assignedipaddress-function.md | 4 +- .../advanced-hunting-best-practices.md | 4 +- ...dvanced-hunting-devicealertevents-table.md | 4 +- .../advanced-hunting-deviceevents-table.md | 4 +- ...hunting-devicefilecertificateinfo-table.md | 4 +- ...advanced-hunting-devicefileevents-table.md | 4 +- ...ced-hunting-deviceimageloadevents-table.md | 4 +- .../advanced-hunting-deviceinfo-table.md | 4 +- ...dvanced-hunting-devicelogonevents-table.md | 4 +- ...anced-hunting-devicenetworkevents-table.md | 4 +- ...dvanced-hunting-devicenetworkinfo-table.md | 4 +- ...anced-hunting-deviceprocessevents-table.md | 4 +- ...nced-hunting-deviceregistryevents-table.md | 4 +- ...etvmsecureconfigurationassessment-table.md | 4 +- ...vmsecureconfigurationassessmentkb-table.md | 4 +- ...unting-devicetvmsoftwareinventory-table.md | 4 +- ...-devicetvmsoftwarevulnerabilities-table.md | 4 +- ...evicetvmsoftwarevulnerabilitieskb-table.md | 4 +- .../advanced-hunting-errors.md | 4 +- .../advanced-hunting-extend-data.md | 4 +- .../advanced-hunting-fileprofile-function.md | 2 +- .../advanced-hunting-go-hunt.md | 2 +- .../advanced-hunting-limits.md | 2 +- .../advanced-hunting-overview.md | 2 +- .../advanced-hunting-query-language.md | 2 +- .../advanced-hunting-query-results.md | 2 +- .../advanced-hunting-schema-reference.md | 2 +- .../advanced-hunting-shared-queries.md | 4 +- .../advanced-hunting-take-action.md | 4 +- ...lerts-queue-endpoint-detection-response.md | 4 +- .../microsoft-defender-atp/alerts-queue.md | 2 +- .../microsoft-defender-atp/alerts.md | 2 +- .../android-configure.md | 4 +- .../microsoft-defender-atp/android-intune.md | 4 +- .../microsoft-defender-atp/android-privacy.md | 4 +- .../android-support-signin.md | 4 +- .../microsoft-defender-atp/android-terms.md | 4 +- .../microsoft-defender-atp/api-explorer.md | 2 +- .../microsoft-defender-atp/api-hello-world.md | 2 +- .../api-microsoft-flow.md | 4 +- .../api-portal-mapping.md | 4 +- .../microsoft-defender-atp/api-power-bi.md | 4 +- .../api-release-notes.md | 10 +- .../api-terms-of-use.md | 4 +- .../microsoft-defender-atp/apis-intro.md | 6 +- .../assign-portal-access.md | 4 +- .../attack-simulations.md | 4 +- .../attack-surface-reduction-faq.md | 4 +- .../attack-surface-reduction.md | 4 +- .../audit-windows-defender.md | 4 +- .../auto-investigation-action-center.md | 4 +- .../automated-investigations.md | 4 +- .../automation-levels.md | 4 +- .../basic-permissions.md | 4 +- .../batch-update-alerts.md | 2 +- .../behavioral-blocking-containment.md | 4 +- .../check-sensor-status.md | 4 +- .../client-behavioral-blocking.md | 4 +- .../collect-investigation-package.md | 4 +- .../microsoft-defender-atp/community.md | 4 +- .../conditional-access.md | 4 +- .../configure-arcsight.md | 4 +- .../configure-attack-surface-reduction.md | 4 +- ...re-automated-investigations-remediation.md | 4 +- .../configure-conditional-access.md | 4 +- .../configure-email-notifications.md | 4 +- .../configure-endpoints-gp.md | 4 +- .../configure-endpoints-mdm.md | 4 +- .../configure-endpoints-non-windows.md | 4 +- .../configure-endpoints-sccm.md | 4 +- .../configure-endpoints-script.md | 2 +- .../configure-endpoints-vdi.md | 4 +- .../configure-endpoints.md | 4 +- .../configure-machines-asr.md | 4 +- .../configure-machines-onboarding.md | 4 +- .../configure-machines-security-baseline.md | 4 +- .../configure-machines.md | 4 +- .../configure-microsoft-threat-experts.md | 4 +- .../configure-mssp-notifications.md | 4 +- .../configure-mssp-support.md | 4 +- .../configure-proxy-internet.md | 4 +- .../microsoft-defender-atp/configure-siem.md | 4 +- ...igure-vulnerability-email-notifications.md | 2 +- .../connected-applications.md | 4 +- .../contact-support-usgov.md | 2 +- .../microsoft-defender-atp/contact-support.md | 4 +- .../controlled-folders.md | 4 +- .../create-alert-by-reference.md | 4 +- .../custom-detection-rules.md | 4 +- .../custom-detections-manage.md | 4 +- .../customize-attack-surface-reduction.md | 4 +- .../customize-controlled-folders.md | 4 +- .../customize-exploit-protection.md | 4 +- .../data-retention-settings.md | 4 +- .../data-storage-privacy.md | 4 +- .../defender-compatibility.md | 4 +- ...nder-endpoint-false-positives-negatives.md | 4 +- .../delete-ti-indicator-by-id.md | 4 +- .../deployment-phases.md | 4 +- .../deployment-rings.md | 4 +- .../deployment-strategy.md | 4 +- .../device-timeline-event-flag.md | 4 +- .../edr-in-block-mode.md | 4 +- .../enable-attack-surface-reduction.md | 4 +- .../enable-controlled-folders.md | 4 +- .../enable-exploit-protection.md | 5 +- .../enable-network-protection.md | 4 +- .../enable-siem-integration.md | 2 +- .../microsoft-defender-atp/evaluate-atp.md | 6 +- .../evaluate-attack-surface-reduction.md | 4 +- .../evaluate-controlled-folder-access.md | 4 +- .../evaluate-exploit-protection.md | 4 +- .../evaluate-network-protection.md | 4 +- .../microsoft-defender-atp/evaluation-lab.md | 4 +- .../event-error-codes.md | 4 +- .../microsoft-defender-atp/event-views.md | 4 +- .../exploit-protection-reference.md | 4 +- .../exploit-protection.md | 4 +- .../exposed-apis-create-app-nativeapp.md | 2 +- .../exposed-apis-create-app-partners.md | 2 +- .../exposed-apis-create-app-webapp.md | 2 +- .../exposed-apis-full-sample-powershell.md | 2 +- .../exposed-apis-list.md | 2 +- .../exposed-apis-odata-samples.md | 2 +- .../feedback-loop-blocking.md | 2 +- .../fetch-alerts-mssp.md | 2 +- .../microsoft-defender-atp/files.md | 2 +- .../find-machines-by-ip.md | 2 +- .../find-machines-by-tag.md | 2 +- .../fix-unhealthy-sensors.md | 4 +- .../get-alert-info-by-id.md | 2 +- .../get-alert-related-domain-info.md | 2 +- .../get-alert-related-files-info.md | 4 +- .../get-alert-related-ip-info.md | 4 +- .../get-alert-related-machine-info.md | 4 +- .../get-alert-related-user-info.md | 4 +- .../microsoft-defender-atp/get-alerts.md | 4 +- .../get-all-recommendations.md | 4 +- .../get-all-vulnerabilities-by-machines.md | 4 +- .../get-all-vulnerabilities.md | 4 +- .../get-cvekbmap-collection.md | 4 +- .../get-device-secure-score.md | 6 +- .../get-discovered-vulnerabilities.md | 4 +- .../get-domain-related-alerts.md | 4 +- .../get-domain-related-machines.md | 4 +- .../get-domain-statistics.md | 4 +- .../get-exposure-score.md | 4 +- .../get-file-information.md | 4 +- .../get-file-related-alerts.md | 4 +- .../get-file-related-machines.md | 4 +- .../get-file-statistics.md | 4 +- .../get-installed-software.md | 4 +- .../get-investigation-collection.md | 4 +- .../get-investigation-object.md | 4 +- .../get-ip-related-alerts.md | 4 +- .../get-ip-statistics.md | 4 +- .../get-kbinfo-collection.md | 4 +- .../get-machine-by-id.md | 2 +- .../get-machine-group-exposure-score.md | 4 +- .../get-machine-log-on-users.md | 2 +- .../get-machine-related-alerts.md | 2 +- .../get-machineaction-object.md | 2 +- .../get-machineactions-collection.md | 2 +- .../get-machines-by-software.md | 2 +- .../get-machines-by-vulnerability.md | 2 +- .../microsoft-defender-atp/get-machines.md | 2 +- .../get-machinesecuritystates-collection.md | 2 +- .../get-missing-kbs-machine.md | 2 +- .../get-missing-kbs-software.md | 2 +- .../get-package-sas-uri.md | 2 +- .../get-recommendation-by-id.md | 2 +- .../get-recommendation-machines.md | 2 +- .../get-recommendation-software.md | 2 +- .../get-recommendation-vulnerabilities.md | 2 +- .../get-security-recommendations.md | 2 +- .../get-software-by-id.md | 2 +- .../get-software-ver-distribution.md | 2 +- .../microsoft-defender-atp/get-software.md | 2 +- .../get-started-partner-integration.md | 4 +- .../get-ti-indicators-collection.md | 2 +- .../get-user-information.md | 2 +- .../get-user-related-alerts.md | 4 +- .../get-user-related-machines.md | 4 +- .../get-vuln-by-software.md | 4 +- .../get-vulnerability-by-id.md | 4 +- .../microsoft-defender-atp/gov.md | 4 +- .../grant-mssp-access.md | 4 +- .../helpful-resources.md | 4 +- .../images/techniques-cmd.png | Bin 70612 -> 0 bytes .../images/techniques-hunting.png | Bin 40025 -> 0 bytes .../images/techniques-sha1.png | Bin 70616 -> 0 bytes .../images/timeline-columns.png | Bin 154819 -> 0 bytes ...port-export-exploit-protection-emet-xml.md | 4 +- .../import-ti-indicators.md | 2 +- .../indicator-certificates.md | 4 +- .../microsoft-defender-atp/indicator-file.md | 4 +- .../indicator-ip-domain.md | 4 +- .../indicator-manage.md | 4 +- ...ormation-protection-in-windows-overview.md | 4 +- .../information-protection-investigation.md | 4 +- .../initiate-autoir-investigation.md | 4 +- .../investigate-alerts.md | 4 +- .../investigate-behind-proxy.md | 4 +- .../investigate-domain.md | 4 +- .../investigate-files.md | 4 +- .../investigate-incidents.md | 4 +- .../microsoft-defender-atp/investigate-ip.md | 4 +- .../investigate-machines.md | 4 +- .../investigate-user.md | 4 +- .../microsoft-defender-atp/investigation.md | 4 +- .../ios-configure-features.md | 11 +- .../microsoft-defender-atp/ios-install.md | 4 +- .../microsoft-defender-atp/ios-privacy.md | 4 +- .../microsoft-defender-atp/ios-whatsnew.md | 36 --- .../microsoft-defender-atp/isolate-machine.md | 4 +- .../linux-exclusions.md | 4 +- .../linux-install-manually.md | 7 +- .../linux-install-with-ansible.md | 28 +-- .../linux-install-with-puppet.md | 32 +-- .../linux-preferences.md | 14 +- .../microsoft-defender-atp/linux-privacy.md | 4 +- .../microsoft-defender-atp/linux-pua.md | 4 +- .../microsoft-defender-atp/linux-resources.md | 4 +- .../linux-static-proxy-configuration.md | 4 +- .../linux-support-connectivity.md | 4 +- .../linux-support-install.md | 4 +- .../linux-support-perf.md | 4 +- .../microsoft-defender-atp/linux-updates.md | 4 +- .../live-response-command-examples.md | 4 +- .../microsoft-defender-atp/live-response.md | 6 +- .../microsoft-defender-atp/mac-exclusions.md | 4 +- .../mac-install-jamfpro-login.md | 4 +- .../mac-install-manually.md | 4 +- .../mac-install-with-jamf.md | 4 +- .../mac-install-with-other-mdm.md | 4 +- .../mac-jamfpro-device-groups.md | 4 +- .../mac-jamfpro-enroll-devices.md | 4 +- .../microsoft-defender-atp/mac-privacy.md | 4 +- .../microsoft-defender-atp/mac-pua.md | 4 +- .../microsoft-defender-atp/mac-resources.md | 4 +- .../mac-schedule-scan-atp.md | 4 +- .../mac-support-install.md | 4 +- .../mac-support-kext.md | 4 +- .../mac-support-license.md | 4 +- .../mac-support-perf.md | 4 +- .../mac-sysext-policies.md | 4 +- .../mac-sysext-preview.md | 4 +- .../microsoft-defender-atp/mac-updates.md | 4 +- .../microsoft-defender-atp/mac-whatsnew.md | 4 +- .../microsoft-defender-atp/machine-reports.md | 4 +- .../microsoft-defender-atp/machine-tags.md | 4 +- .../microsoft-defender-atp/machine.md | 4 +- .../microsoft-defender-atp/machineaction.md | 4 +- .../machines-view-overview.md | 4 +- .../microsoft-defender-atp/manage-alerts.md | 4 +- ...tp-post-migration-configuration-manager.md | 4 +- ...atp-post-migration-group-policy-objects.md | 4 +- .../manage-atp-post-migration-intune.md | 4 +- .../manage-atp-post-migration-other-tools.md | 4 +- .../manage-atp-post-migration.md | 4 +- .../manage-automation-file-uploads.md | 4 +- .../manage-automation-folder-exclusions.md | 4 +- .../microsoft-defender-atp/manage-edr.md | 4 +- .../manage-incidents.md | 4 +- .../manage-indicators.md | 4 +- .../manage-suppression-rules.md | 4 +- .../microsoft-defender-atp/management-apis.md | 4 +- .../mcafee-to-microsoft-defender-migration.md | 5 +- .../mcafee-to-microsoft-defender-onboard.md | 27 ++- .../mcafee-to-microsoft-defender-prepare.md | 31 ++- .../mcafee-to-microsoft-defender-setup.md | 104 +++++---- .../microsoft-cloud-app-security-config.md | 10 +- ...icrosoft-cloud-app-security-integration.md | 4 +- ...oft-defender-advanced-threat-protection.md | 4 +- .../microsoft-defender-atp-android.md | 4 +- .../microsoft-defender-atp-ios.md | 4 +- .../microsoft-defender-atp-linux.md | 6 +- .../microsoft-defender-atp-mac.md | 4 +- .../microsoft-defender-security-center.md | 4 +- .../microsoft-threat-experts.md | 4 +- .../migration-guides.md | 4 +- .../minimum-requirements.md | 4 +- .../microsoft-defender-atp/mssp-list.md | 4 +- .../microsoft-defender-atp/mssp-support.md | 4 +- .../network-protection.md | 4 +- .../next-gen-threat-and-vuln-mgt.md | 4 +- .../microsoft-defender-atp/non-windows.md | 4 +- .../offboard-machine-api.md | 4 +- .../offboard-machines.md | 4 +- .../onboard-configure.md | 4 +- .../onboard-downlevel.md | 4 +- .../onboard-offline-machines.md | 4 +- .../microsoft-defender-atp/onboard.md | 4 +- ...boarding-endpoint-configuration-manager.md | 4 +- .../onboarding-endpoint-manager.md | 4 +- .../onboarding-notification.md | 4 +- .../microsoft-defender-atp/onboarding.md | 4 +- .../overview-attack-surface-reduction.md | 4 +- .../overview-custom-detections.md | 4 +- .../overview-endpoint-detection-response.md | 4 +- .../overview-hardware-based-isolation.md | 4 +- .../partner-applications.md | 4 +- .../partner-integration.md | 4 +- .../microsoft-defender-atp/portal-overview.md | 4 +- .../post-ti-indicator.md | 4 +- .../preferences-setup.md | 4 +- .../prepare-deployment.md | 4 +- .../preview-settings.md | 4 +- .../microsoft-defender-atp/preview.md | 4 +- .../production-deployment.md | 4 +- .../pull-alerts-using-rest-api.md | 4 +- .../raw-data-export-event-hub.md | 2 +- .../raw-data-export-storage.md | 2 +- .../microsoft-defender-atp/raw-data-export.md | 2 +- .../microsoft-defender-atp/recommendation.md | 2 +- .../respond-file-alerts.md | 2 +- .../respond-machine-alerts.md | 2 +- .../restrict-code-execution.md | 6 +- .../microsoft-defender-atp/review-alerts.md | 2 +- .../run-advanced-query-api.md | 2 +- .../run-advanced-query-sample-powershell.md | 2 +- .../run-advanced-query-sample-python.md | 2 +- .../microsoft-defender-atp/run-av-scan.md | 2 +- .../run-detection-test.md | 4 +- .../microsoft-defender-atp/score.md | 4 +- .../security-operations-dashboard.md | 2 +- .../microsoft-defender-atp/service-status.md | 2 +- .../set-device-value.md | 6 +- .../microsoft-defender-atp/software.md | 6 +- .../stop-and-quarantine-file.md | 2 +- .../switch-to-microsoft-defender-onboard.md | 20 +- .../switch-to-microsoft-defender-prepare.md | 22 +- .../switch-to-microsoft-defender-setup.md | 30 +-- ...tec-to-microsoft-defender-atp-migration.md | 4 +- ...antec-to-microsoft-defender-atp-onboard.md | 26 +-- ...antec-to-microsoft-defender-atp-prepare.md | 22 +- ...ymantec-to-microsoft-defender-atp-setup.md | 10 +- .../techniques-device-timeline.md | 10 +- .../threat-analytics-analyst-reports.md | 4 +- .../threat-analytics.md | 4 +- .../threat-and-vuln-mgt-event-timeline.md | 4 +- .../threat-indicator-concepts.md | 4 +- .../threat-protection-integration.md | 4 +- .../threat-protection-reports.md | 4 +- .../microsoft-defender-atp/ti-indicator.md | 4 +- .../microsoft-defender-atp/time-settings.md | 4 +- .../troubleshoot-asr.md | 4 +- .../troubleshoot-collect-support-log.md | 4 +- ...bleshoot-exploit-protection-mitigations.md | 4 +- .../troubleshoot-live-response.md | 4 +- .../troubleshoot-mdatp.md | 4 +- .../microsoft-defender-atp/troubleshoot-np.md | 4 +- .../troubleshoot-onboarding-error-messages.md | 4 +- .../troubleshoot-onboarding.md | 4 +- .../troubleshoot-siem.md | 4 +- .../tvm-assign-device-value.md | 4 +- .../tvm-dashboard-insights.md | 4 +- .../tvm-end-of-support-software.md | 4 +- .../microsoft-defender-atp/tvm-exception.md | 4 +- .../tvm-exposure-score.md | 4 +- .../tvm-hunt-exposed-devices.md | 4 +- .../tvm-microsoft-secure-score-devices.md | 4 +- .../tvm-prerequisites.md | 4 +- .../microsoft-defender-atp/tvm-remediation.md | 4 +- .../tvm-security-recommendation.md | 4 +- .../tvm-software-inventory.md | 4 +- .../tvm-supported-os.md | 4 +- .../tvm-vulnerable-devices-report.md | 4 +- .../microsoft-defender-atp/tvm-weaknesses.md | 4 +- .../tvm-zero-day-vulnerabilities.md | 4 +- .../unisolate-machine.md | 4 +- .../unrestrict-code-execution.md | 4 +- .../microsoft-defender-atp/update-alert.md | 4 +- .../microsoft-defender-atp/use.md | 4 +- .../microsoft-defender-atp/user-roles.md | 6 +- .../microsoft-defender-atp/user.md | 4 +- .../view-incidents-queue.md | 4 +- .../microsoft-defender-atp/vulnerability.md | 4 +- .../web-content-filtering.md | 4 +- .../web-protection-monitoring.md | 4 +- .../web-protection-overview.md | 4 +- .../web-protection-response.md | 4 +- .../web-threat-protection.md | 4 +- .../whats-new-in-microsoft-defender-atp.md | 4 +- ...e-wdac-policy-for-fully-managed-devices.md | 4 +- .../ltsc/whats-new-windows-10-2019.md | 18 +- .../whats-new-windows-10-version-1709.md | 2 +- 473 files changed, 1100 insertions(+), 1434 deletions(-) create mode 100644 windows/configuration/images/Shared_PC_1.jpg delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/techniques-cmd.png delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/techniques-hunting.png delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/techniques-sha1.png delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/timeline-columns.png delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md diff --git a/windows/client-management/mandatory-user-profile.md b/windows/client-management/mandatory-user-profile.md index b1ce6d51a9..211519bdec 100644 --- a/windows/client-management/mandatory-user-profile.md +++ b/windows/client-management/mandatory-user-profile.md @@ -82,30 +82,22 @@ First, you create a default user profile with the customizations that you want, 1. The sysprep process reboots the PC and starts at the first-run experience screen. Complete the set up, and then sign in to the computer using an account that has local administrator privileges. -1. Right-click **Start**, go to **Control Panel** (view by large or small icons) > **System** > **Advanced system settings**, and click **Settings** in the **User Profiles** section. Alternatively, starting in Windows 10, version 2004, open the **Settings** app and select **Advanced system settings**. - -Starting in Windows 10 version (2004) Open the Settings app and click on Advanced system settings +1. Right-click Start, go to **Control Panel** (view by large or small icons) > **System** > **Advanced system settings**, and click **Settings** in the **User Profiles** section. 1. In **User Profiles**, click **Default Profile**, and then click **Copy To**. - ![Example of UI](images/copy-to.png) 1. In **Copy To**, under **Permitted to use**, click **Change**. ![Example of UI](images/copy-to-change.png) -1. In **Select User or Group**, in the **Enter the object name to select** field, type `everyone` or the group of users that the profile will be assigned to, click **Check Names**, and then click **OK**. +1. In **Select User or Group**, in the **Enter the object name to select** field, type `everyone`, click **Check Names**, and then click **OK**. 1. In **Copy To**, in the **Copy profile to** field, enter the path and folder name where you want to store the mandatory profile. The folder name must use the correct [extension](#profile-extension-for-each-windows-version) for the operating system version. For example, the folder name must end with ".v6" to identify it as a user profile folder for Windows 10, version 1607. - If the device is joined to the domain and you are signed in with an account that has permissions to write to a shared folder on the network, you can enter the shared folder path. - - ![Example of UI](images/copy-to-path.png) - - If the device is not joined to the domain, you can save the profile locally and then copy it to the shared folder location. - - Optionally, you can check the **Mandatory profile** checkbox. This step is not required but will set permissions that are more restrictive and we recommend doing so. - ![Example of UI](images/copy-to-path.png) diff --git a/windows/client-management/mdm/diagnose-mdm-failures-in-windows-10.md b/windows/client-management/mdm/diagnose-mdm-failures-in-windows-10.md index 4f20ca31cd..db52ac149a 100644 --- a/windows/client-management/mdm/diagnose-mdm-failures-in-windows-10.md +++ b/windows/client-management/mdm/diagnose-mdm-failures-in-windows-10.md @@ -112,8 +112,8 @@ Example: Export the Debug logs ``` - -  +  -## Collect logs remotely from Windows 10 Holographic +## Collect logs remotely from Windows 10 Holographic or Windows 10 Mobile devices -For holographic already enrolled in MDM, you can remotely collect MDM logs through the MDM channel using the [DiagnosticLog CSP](diagnosticlog-csp.md). +For holographic or mobile devices already enrolled in MDM, you can remotely collect MDM logs through the MDM channel using the [DiagnosticLog CSP](diagnosticlog-csp.md). You can use the DiagnosticLog CSP to enable the ETW provider. The provider ID is 3DA494E4-0FE2-415C-B895-FB5265C5C83B. The following examples show how to enable the ETW provider: diff --git a/windows/client-management/mdm/euiccs-csp.md b/windows/client-management/mdm/euiccs-csp.md index 3cae935341..1f42e3e43d 100644 --- a/windows/client-management/mdm/euiccs-csp.md +++ b/windows/client-management/mdm/euiccs-csp.md @@ -38,36 +38,6 @@ Required. Indicates whether this eUICC is physically present and active. Updated Supported operation is Get. Value type is boolean. -**_eUICC_/PPR1Allowed** -Required. Indicates whether the download of a profile with PPR1 is allowed. If the eUICC already has a profile (regardless of its origin and policy rules associated with it), the download of a profile with PPR1 is not allowed. - -Supported operation is Get. Value type is boolean. - -**_eUICC_/PPR1AlreadySet** -Required. Indicates whether the eUICC already has a profile with PPR1. - -Supported operation is Get. Value type is boolean. - -**_eUICC_/DownloadServers** -Interior node. Represents default SM-DP+ discovery requests. - -Supported operation is Get. - -**_eUICC_/DownloadServers/_ServerName_** -Interior node. Optional. Node specifying the server name for a discovery operation. The node name is the fully qualified domain name of the SM-DP+ server that will be used for profile discovery. Creation of this subtree triggers a discovery request. - -Supported operations are Add, Get, and Delete. - -**_eUICC_/DownloadServers/_ServerName_/DiscoveryState** -Required. Current state of the discovery operation for the parent ServerName (Requested = 1, Executing = 2, Completed = 3, Failed = 4). Queried by the CSP and only updated by the LPA. - -Supported operation is Get. Value type is integer. Default value is 1. - -**_eUICC_/DownloadServers/_ServerName_/AutoEnable** -Required. Indicates whether the discovered profile must be enabled automatically after install. This must be set by the MDM when the ServerName subtree is created. - -Supported operations are Add, Get, and Replace. Value type is bool. - **_eUICC_/Profiles** Interior node. Required. Represents all enterprise-owned profiles. diff --git a/windows/client-management/mdm/euiccs-ddf-file.md b/windows/client-management/mdm/euiccs-ddf-file.md index 4101bc0f61..38bb8e5f6f 100644 --- a/windows/client-management/mdm/euiccs-ddf-file.md +++ b/windows/client-management/mdm/euiccs-ddf-file.md @@ -49,7 +49,7 @@ The XML below if for Windows 10, version 1803. - com.microsoft/1.2/MDM/eUICCs + com.microsoft/1.1/MDM/eUICCs @@ -58,7 +58,7 @@ The XML below if for Windows 10, version 1803. - Represents information associated with an eUICC. There is one subtree for each known eUICC, created by the Local Profile Assistant (LPA) when the eUICC is first seen. The node name is the eUICC ID (EID). The node name "Default" represents the currently active eUICC. + Represents information associated with an eUICC. There is one subtree for each known eUICC, created by the Local Profile Assistant (LPA) when the eUICC is first seen. The node name is meaningful only to the LPA (which associates it with an eUICC ID (EID) in an implementation-specific manner, e.g., this could be a SHA-256 hash of the EID). The node name "Default" represents the currently active eUICC. @@ -79,7 +79,7 @@ The XML below if for Windows 10, version 1803. - The EID. + Identifies an eUICC in an implementation-specific manner, e.g., this could be a SHA-256 hash of the EID. @@ -118,139 +118,6 @@ The XML below if for Windows 10, version 1803. - - PPR1Allowed - - - - - Indicates whether the download of a profile with PPR1 is allowed. If the eUICC already has a profile (regardless of its origin and policy rules associated with it), the download of a profile with PPR1 is not allowed. - - - - - - - - - - - text/plain - - - - - PPR1AlreadySet - - - - - Indicates whether the eUICC already has a profile with PPR1. - - - - - - - - - - - text/plain - - - - - DownloadServers - - - - - Represents default SM-DP+ discovery requests. - - - - - - - - - - - - - - - - - - - - - - - Node specifying the server name for a discovery operation. The node name is the fully qualified domain name of the SM-DP+ server that will be used for profile discovery. Creation of this subtree triggers a discovery request. - - - - - - - - - - ServerName - - - - - - DiscoveryState - - - - - 1 - Current state of the discovery operation for the parent ServerName (Requested = 1, Executing = 2, Completed = 3, Failed = 4). Queried by the CSP and only updated by the LPA. - - - - - - - - - - - text/plain - - - - - AutoEnable - - - - - - - Indicates whether the discovered profile must be enabled automatically after install. This must be set by the MDM when the ServerName subtree is created. - - - - - - - - - - - text/plain - - - - - Profiles @@ -278,7 +145,6 @@ The XML below if for Windows 10, version 1803. - Node representing an enterprise-owned eUICC profile. The node name is the ICCID of the profile (which is a unique identifier). Creation of this subtree triggers an AddProfile request by the LPA (which installs the profile on the eUICC). Removal of this subtree triggers the LPA to delete the profile (if resident on the eUICC). @@ -301,7 +167,6 @@ The XML below if for Windows 10, version 1803. - Fully qualified domain name of the SM-DP+ that can download this profile. Must be set by the MDM when the ICCID subtree is created. @@ -327,7 +192,6 @@ The XML below if for Windows 10, version 1803. - Matching ID (activation code token) for profile download. Must be set by the MDM when the ICCID subtree is created. @@ -392,70 +256,6 @@ The XML below if for Windows 10, version 1803. - - PPR1Set - - - - - This profile policy rule indicates whether disabling of this profile is not allowed (true if not allowed, false otherwise). - - - - - - - - - - - text/plain - - - - - PPR2Set - - - - - This profile policy rule indicates whether deletion of this profile is not allowed (true if not allowed, false otherwise). - - - - - - - - - - - text/plain - - - - - ErrorDetail - - - - - 0 - Detailed error if the profile download and install procedure failed (None = 0, CardGeneralFailure = 1, ConfirmationCodeMissing = 3, ForbiddenByPolicy = 5, InvalidMatchingId = 6, NoEligibleProfileForThisDevice = 7, NotEnoughSpaceOnCard = 8, ProfileEidMismatch = 10, ProfileNotAvailableForNewBinding = 11, ProfileNotReleasedByOperator = 12, RemoteServerGeneralFailure = 13, RemoteServerUnreachable = 14). - - - - - - - - - - - text/plain - - - diff --git a/windows/client-management/mdm/policy-csp-timelanguagesettings.md b/windows/client-management/mdm/policy-csp-timelanguagesettings.md index 8d2b01f4b1..8ef9349148 100644 --- a/windows/client-management/mdm/policy-csp-timelanguagesettings.md +++ b/windows/client-management/mdm/policy-csp-timelanguagesettings.md @@ -78,8 +78,7 @@ Specifies the time zone to be applied to the device. This is the standard Window -Value type is String. Supported values: -- Name of Standard Time Zone - for example, Pacific Standard Time, Mountain Standard Time. + @@ -102,3 +101,4 @@ Footnotes: - 8 - Available in Windows 10, version 2004. + diff --git a/windows/configuration/cortana-at-work/set-up-and-test-cortana-in-windows-10.md b/windows/configuration/cortana-at-work/set-up-and-test-cortana-in-windows-10.md index 55fc00aed5..da23d57297 100644 --- a/windows/configuration/cortana-at-work/set-up-and-test-cortana-in-windows-10.md +++ b/windows/configuration/cortana-at-work/set-up-and-test-cortana-in-windows-10.md @@ -19,7 +19,7 @@ ms.author: dansimp - **Cortana is regularly updated through the Microsoft Store.** Beginning with Windows 10, version 2004, Cortana is an appx preinstalled with Windows and is regularly updated through the Microsoft Store. To receive the latest updates to Cortana, you will need to [enable updates through the Microsoft Store](https://docs.microsoft.com/windows/configuration/stop-employees-from-using-microsoft-store). ## Set up and configure the Bing Answers feature -Bing Answers provides fast, authoritative results to search queries based on search terms. If you enable this policy setting for the Cortana Windows app or Microsoft Teams display, users can ask Cortana web-related questions such as “What’s the current weather?” or “What time is it in Tokyo?” +Bing Answers provides fast, authoritative results to search queries based on search terms. When the Bing Answers feature is enabled, users will be able to ask Cortana web-related questions in the Cortana in Windows app, such as "What's the current weather?" or "Who is the president of the U.S.?," and get a response, based on public results from Bing.com. The above experience is powered by Microsoft Bing, and Cortana sends the user queries to Bing. The use of Microsoft Bing is governed by the [Microsoft Services Agreement](https://www.microsoft.com/servicesagreement) and [Privacy Statement](https://privacy.microsoft.com/en-US/privacystatement). @@ -46,4 +46,4 @@ When a user enters a search query (by speech or text), Cortana evaluates if the Bing Answers is enabled by default for all users. However, admins can configure and change this for specific users and user groups in their organization. ## How the Bing Answer policy configuration is applied -Before a query is sent to Bing for a search of public results from Bing.com, the Bing Answers service checks with the Office Cloud Policy Service to see if there are any policy configurations that pertain to the user for allowing Bing Answers to respond to questions users ask Cortana. If the user is a member of an AAD group that is assigned that policy configuration, then the appropriate policy settings are applied and a check is made again in 10 minutes. +Before a query is sent to Bing for a search of public results from Bing.com, the Bing Answers service checks with the Office Cloud Policy Service to see if there are any policy configurations that pertain to the user for allowing Bing Answers to respond to questions users ask Cortana. If the user is a member of an AAD group that is assigned that policy configuration, then the appropriate policy settings are applied and a check is made again in 10 minutes. \ No newline at end of file diff --git a/windows/configuration/images/Shared_PC_1.jpg b/windows/configuration/images/Shared_PC_1.jpg new file mode 100644 index 0000000000000000000000000000000000000000..7b993b00a8918f4ad6e00522e458bfeea2927649 GIT binary patch literal 40769 zcmeFa2|SeT-Z(zCB>TRb3Qko8kqm~hWX%#nQ6~Eqld^APCrj4I zZe}FA8CeFi{O_LUInR0OocEmbod55AKfm95Xzouw?p#|o+hjA~{K4##C5)Ke84ILdVJ>B`38>2zjYOTn+m$)cQSfWnX&}_>_i@!qjXTZ zz<>8!Ma<1&|F5t5_S#rU#qI@~p@QBH?Gz(!pf;U8DuYM$r!K|k1EX4z zF7@zzQ@bCRc##Sk(q=$dY#1C`?Xc;Wbr)5c5nf=<8N4RvJf`lND#-HY#Qtzl1EmqV z+)EBdj~5~r(Tlws&<%UK=l}G}+5zmYZOoGekA$AQ$pCVqf&e7he}`x&(Vhw_Evp~5 zthW&&7!x3$m7+PJAF}3Fyj>(*BxXyEgh)j>6%w-v-|Eqf>V{Kfx~4K!BS*0# zl{;e3_m?`DOpoP%)YIIG{CY89gGT)fZ2mVwl|=1W7U4I#*!^|5OlGVsY_4l9UV z=(w$yq$=GdDE{?gV6ceDgVTJey~bwCy_R$AJVtbjH>jYqfs_i=YHl^sF}5Dj$$#SvkCE@ zhY87sWupTx6i?8-+%|LGxd_u%XWrq0HJ-=c4se*uCc3AUg@00cr(JaJd8=#HJMW<` za1q)cVGri^?V1okgdliH?Ab(vr3r=Xu2iNh|1iy)7e+ndaW8j_7)K}~#PulzA6zsJ z>l>fX+`U)ZL2|mxxJADuhspicyy$%`n+jBlGMIRH(tpjo;NH4n$Rvjnn%Sx{!&kDV zS4c*@DwQErg0q`9a0<*mfv8uZf^I{>^C?FLl+d9EouNy7Nxn%ekFXB3sAoI=BdQT8 zCq(mO$+^ldBT_As?_5IR`Z#Mt%uq1t03xgP;fTgF?kR}TNrtna;Seg(SV>5cu%sdKbYgqdk9{JacW1X4M3tVrGEt3>_TrZ z#ybR;!R=jFGmtIJCfqA=)Ql%JMqbtK9U*+%1_cN>$|Ps zXptSXmQ_()EUs3j_w?8?PqFxABtz|Sm_CjQ@^`K_pBg{yD0H>c*17%i`CHH$k#J8_ zLGUX$%?>S571tVywzHOV2?q11^QX=p#NJLesP5Hn9yoq)>+u_&>6n1yqrB_DwD_fO$j;X(O``b#ACv@MIE*2c+DCXArqRalwY=NO7D9W&^jZk92jyN%{ z#e%%qh-89soAji7+c_eTow91_aoRRQEjB=h{(6K+$}^fxR3O|W1AZD`n26Qbv#N1c zci^>UvgPybQ^(pgCog>Qg}`n5(01KHNv%;O$;>tShW#p@rGskfgJT#SRgP0BUrRh) zNZeXUhM&!lpzCKV(~mZgH$yo?x?u@K^6yGAm&vGU&gY?xv5 zgyj3AKAEbyVxJQRY|ll{-c4~HrIS|oYvo-=uv0S05)sd~azSuX^MLJ&dS_ zybhx<`VR0XU339IE_9bYyCZ?bSzBJMh+3X|${%BUJtqUFc6w>v;HGZ_ zDjU&g=i4WPJuXC?nzvoNxj+jo3X>TBV)xRv{iB-mYxa9Y&Yg!aI$U%_2Hv4)u$mvo zd-+2uF==SAza8{p_`?Ufm+sAQ>m3(3Jg^B_%HB}!LJ=mun`x}y4rQ!Oq2>@5Q)&;Iqlmi6TS7EKn2AV%tMJX`>;Dx?AavAIT9`#QGY&>qR6}frGkp0 zsURmyz%o!lV2Fb}1Lb3qNn~r-*9xT3K!$?Dwq`O-$||AN9w)NC-)^FuJ#ezjE`V|v zwmn)egbX3+<2Rc<@@!fS2zOGP#R#5Mkg4AEOA$6Aw$_oHRRDL%MbuxcK5mCu;hGcU z8x%gR-Gi#ua@u&}-0J&9dw=BOs9&qs3T3}&X$rm=q6h~E)U%>hr%PcAMc!ag~)*}wj6W5;;+ zPrKLvc;gdhl3P>MkqTmk8z2b!m@n@P5eGvEQo$BlJf{Zs9lL!77B$Cspqp*a;6l=7 z?u!Fq(=iDrdhXfT`n`6S*f#q(G?YjMl>`^KWz4NwIZQGhol%&Wf66UVD-pvcwAZpE z=la?6kiqLYxI=!&9zyx_cARCjQ@h+V;oy>|y1CTl8nSMC@@e2Ix^8NMEWY4|`q z`{9Ek0ohNrK@VlXCA_wDgW;eML%Kzk$@LG2r}=8ySNlv7FBY?nj-BxM0>U2aBpj8PNQBlH1icmSbsyWk}cs0UOwWvue`fJh#G6GzL2+&l3i{p`v`BgR0b9gE!_)f4B zXV%9Q`_+NGe5IT%0SMGDTN+(HjOt7@GDgQD5c715b=# zqafGJ-1N(~uIi4NxGLXeHyiCtM7@HqusKZkDt?^`3RAa34O@*W7sSqwynXesL}Lke z_)EU6-vut2#Us*mop9kDO`>fBg7!MmK)QUeT2?G&`&Ixsu`7wMO)Z>3@M{ijH5Ihs zP7YB&u%kqb+PRFM422u#43C|`Yp2g|2Xx)OTc~9#a)Y0Kisj`?v)%zC#x~#Y?$jNU z%0RWb4+>`6WTQxYAWI6i>@Z}S2Ry~H7h&B;Ox`LQg8Ys*dw17E`~ioQaq1hUn}uAe zuO}zA?77aIRi5IBq%(&T^N`h3xde_1E5q&3pSwmB<`Ye~rs-w;CJJ=NOcNT>2 z>Hx)rJK zLKcf(H*lLcMMPj$!cqjQ@hjmE^L<>-RgZrCJWgvHN6+~ZY{ZT^4d#H01JA+Xn#6iM zJ7yVms052*(ap0@h;yv8@y`=DTEedoQT#Uk_Lz5kz4H3XV_$lrejS8qhUktdP@k<8 zj_tFA$c?{0Bypy2C;6mXtgBm>J4F~j_+pB@r%}824X%GJf3NAp;2`JYaAg4#u{zUC zkSBC;bVqF#@}9l%ggPgtgRFbG|3F2;7rReFD#;Hc6X?^VTf81v*|m0mcENNn(O~V> zjdKu=M7!pmoO1-m;AP5(N2lk?r-H?c#8047XJ50Y_|j7vC)qXWh-of7!?h?ZlD|F0 zoWK}{G8q4Cbv@|BzKp0TyNOEqa3m1)3el8>Ly6u5{wo6|`UZCO^5UOIE!1yL+??i; zWC@BMr|?;9T#%+~2AnU{uw5gf_)Q8Mf@9vR@Z|*mKybDl`8h#4R;%nwoR^B(7tv#0 z-}DI`84IUaCv{-i$ zImJHWX7IL*5Fb=m)Bm|7DnGkx+S-yk;888RAZRK;@wk;?gUe^B1~4U5ebAE^qyul!6jLzC4_?v(js^N`#UJO74s&v{pvAs zda>ZN_wR#SCe*xPwgGzw4r+4+X&d)|PSCzF2K26px3%U-YZu=j!7}WYL&oY;xlP*y z+o+5by%kgY*R%`qR1mK^_iZ1iov@`sb!|J5nDb~E@xyUP>H_wv2OLIVa%-8Xpk5n1n8Gs%B|R$c zpF%cv88LTs(-7}0FXJ}*tqjvgt7Fw%J3FsPhDpSF&Ag(5_VHtoWNtJQ6*Lt!L@g!LtJWj7WhUsTpoXLlDkusFsS7@_Qsj6k1Zdg$3utBpEdGnsH@qm95G zQmtLMAoM848I$jwW7}WiaM$lyEi?QL%?XWWkWY}(9R1zZQ)%)?JL_oHv&ETs6rZ;1 zXff^|s@n#KmE0lf?OY&g!1X+F@{Ghs1KJr*s{KsUTfL;Vi|HYwC7zp_C2M9OzT%Ez zbj0KM84dXcp`i%*6(w((+cmv&<85U*>BTIaiXP+t4lI zSSyB4Dd7(%saB3qL0aY4`sQ2CM3`PFU%DkA+iJw>IRwNP?N>s*S{IY^oHlD&hF08R zN~QMepOQdjYE2atTIC!?&X;v)zJ`N#*n~gd6C6Bj8}k$se~k-mJdzELhg31hTADa+^^iT4YixE1$6_=WdU8z>^h zX|{&hyqLiE*|`fC(y1OrDZ^K``8C8d@gZnA&oW zW|0q(9UNI*9sx=&{788pA~WlxB4%m}m3lPn=~{dh;EMg#szBm$sDZ+S$66k(wEEzj z<)G4>VkVxJ7GNHYb!t<02S+J+gC7gIPlVx|qG_`HVjKs3*@Lyb%F>kfy?-or^ELRA zTO9Nz&O@on$DR&{7|zD{qB9+l;KgkGUJ~FimW|NrlwfPyOo5ZgOpNt9fk$H<(`R3zRmg)`< zpU~0T-UQueT1qKdsj?qE4HkjR;u%AWsi4nxts@MRABcFVQvbKZYJN9 zsd(}rg3a5k4@|qZP$NFo9RQS6-g#G3*1L2wX##s(B&Iw}%k;A1UX92{I~sHC$3U+c z{-4hG#D;?`4om+I1YH8r0)ibTo~D8Z4gxhu=Q7=ub6*{iAF{c^) z>zcjOefrl>qU6LnD(ErT8mMx@B-4qR*>f++xp78b{rWts>I5WB(It?3l{xr zb9Bk=D18!KC8W1fsZJs-UYWW|6A zLjgQHh1mr{T=$}ac#PLWfOl&xO|GKKSJ{8Q13V0rB~n4N3R7Sb-voj%zrOt^U$MiH zr&mW8YjE&gTk5l5Q$d!Kd!pY!zCc~s?@>YVKCMrwpr4SQL+K{20OXDSoxEmmEGI3- z-)Hc1boRbH)q)8pKj_O&UtkA-3>-y&fj*f2n|VThBJHPzwLcAMdd`A{Z=CW={>0La zI2-+GOI@YBV25Lun&?SgewP^4g*4xO2cb>l7kXR&Q+gLYcp&JEZeQGZb# zKl9h$s*a)A|9%erld`x=ivK=ku}ccTpzcZq;CuXyo!?bZ|EfQ-tDt^RP{#qUi{A$D zx^naM3H{pr%cw5{>P()zZw!u)w%+y-KA)#}RpFW6dC~h$Bl%LzQ-}tsf(KNP+!e&^ zdlR8e2Uk>i&Y*J!wicV%xWb2uf^)wn1|3}GzWOeF@!X{gE~h_}ozgA7A&0wkNz&0E z;L&6HP%@uPZ_o|XBg&Gzz39%CG~-<9!pJAuJf=D~w0Vpe{#efDm=Y)TB5Oot(7N}) zNFzNwy};_1_#VAWrEffL5~#Q$g>J8qBPz=%@gHm&CLfYzTEF*6Z*i_q?g+ZOkY!>k z#YuJB4(z6OR!&@&6M&A$y zzaTXxD-gqs*fV|fpsJ)Z#N${E%Z<=}m$e;3)w=D*;mHLzCZoNDZz6*CUwzf;yEe0Xo&$8piTj$(4}@koDXp*|(cSGr~diL`#hUY2~}qdMi~k=g@_)p>32 zXs;^hGU%P?wgAdJkK$`&W5dM@S(Nb++yZ{yS34XPu4BWAn&!w1BM+Hp@O_&?oI?oEVvmF zVsl_XU0_16=b>j|S949*^l__vbxD)aj+?2jAR2v6A=)^pl>bshw4>&AGL8?@;uOl>G`V^+)Ya zF8jzlO`ggQJwW6~nZIj7(KCz?vkSh#3`u`>Tq$D|ZvCFosdd7|p;u z`$|VdL!(nwa{dBBgTI|WueVc`uhH|yQ@rPDi!@zc+(zVpTr~t^UOdTesh>~G+gP5w z5WKq6R(h<#l1uOK*?@VPeKbF3dAGz@%qv(BA)y~z@M{f`wbX}y|o?oQ`_FR&tlizrbm+gMyE4DBciPbQ>*#B@z zY}Ky+;qW;b59!c%f>x|w%)k#h*gOk8T1Gxml6Mq|Dy^3)W7`)jpXl{cJ~8vgN+3IQ zZ;Pip%LaZ}6ei|h=*R46la~|STwK_us;2E~!I4&?iDFRao|5%E5m4 zanB7_ulbMX-z=*x4j&MKPd28!SbEvRNWy^MQWnb=1C< zU#A5LO1(6DHbN2|T$e>)X411s644Ecvm@ix+wtUybk;_0A?Iz#bP%P=_ctC~p;bA;!F7tOsZ1*zw1E&sv_)g( zcNnb@vsoxPqFn(jS%;kBD+UQx($~1NY;fo^WOOAcgCi$Yv~%#q+CU``m?|dS<7r^dl@SEXR zM+#mh4sjaV^dp-5i6nj^HIA}>-gV1js(mWy-gB@qo>zf+7?c~iIDP?Xs zqZh!>*;&Q!uwR6?t*zN`3L24em>7iZ(rMJkM^?^`=)8ZB2}D4mC? zQ`W$ubGT+Rbj9U0!>8&t>qJ{p2JVEqm_1#;eOfq3`v0;^CYczBsnKnoVEwcfDQ;7R zZ^?FNvUIj-I-D?aTFaEipZ?bM2v;T%_d+1vNq__*gjY(~IX>VQut$&0Lb)Fj%eL(I zjVzerPE@_O-F)W%?e)pXckHw!wW{#D(2xhiK!ZLI2YQ^06)V1I0SUp}v)t+L)ZH!@ z2OmGVRyX~rJCX{bdx(m(5e=Sj%8%r4^16$3?1gJ*KTY(y-L~`YKEx@ zKV*x^hb~YKe3~X8nhdVXZEy0(AY0D&>jepoppA6Dnx> z${>27-G$8e={_;Wm>ARM`w_8v=6huF`gaGgWH!CVb7&C=q)Ld_K{n`1fGn?*O}N@8 zEaVBqY%9@{_-_4XuQqSkQy_ywV|nR&_QM6pezch+rKejpdt?k7(mzq+YKV$G(Ecu- zp2KHvv&}D#;hwT_Wi0spor>(aT3&+atMT=cf&op*PwH)VUKkIl$~EqPxw;n;=^f~* zV5J&b%SdEw9?3|GdXEv6x?CH#GG=8dqvm7iHSzLw8cqXg>*X47>G=G^4s0Zt5-a~Xn>>_yMY+5!#lhbc;k2E8=oR`_QizI*`@c^_yW=z=gqX3zEjzi|Tl%>+9T z&8eU>Vj)zJ-xKY(L|Hf>zO!-2wbEAToQ~;*Yasrc>3<>EJF6X}vqWUim0yy(baz706 z%S@o(k@P=16IZxFI(X~JwO^4bMUtpgg%DJV03tl2f`l-@z6F281Qo>6kAF{jtO4}3 z(*UW%9drfaxkbo#^r*#Podpn`7OhkeEjP(t^H6UzsTrWONvTB z^bz+*Z0i4r=|W+OU^d2%yw?j%p_K*yK=fbPB`C)O0jS91<$%D)=>VyMl0*u9HnI12 zWXpf2SRwe&jFbG!IMII@=MR+s*T<>&u7LhJP9LH{KMlxin0`mq6_OLcr$4Z)?jM;* zHsm|k-S|xq5ST-~h*_E61ObVUot<3c`*(|p#e`#%nZ_?L;kJI+CX zz5Z*V*u~E-eh`tn^7XT^*p-W2x!9G9zjdN^b=va0>rN=yLIfJ4qz2c{1-ki_NI|izoGHEZ!0*ai1%E+$J=_6f0 zEs*wq#AVu#z%`6gD&$vr@8tinV*QuW%)OTwJfThOBM3}c!z4E(q}l+>-@hJ;u?#7V zHmE9>5%w7z=ebxuwTZfVFP@McQF~yRq(&}->w0)%x?Gxy3^CsJ+NB}c&my*@IIUbVl56yU74uBcP=*Aw(OKt<{6fk5W0a!g_8|7hu#x_eFzJ@4Zkr&Wjc$F ziMcNMM5QK*tBVM2xiw94s%zoEbd&)LQ&f)6yT-=(jmo>4=NzVW20NQQjs%Qt-ZZ!c zOWp{sCSJiKr;tHPH74pB9w__!T@MOAWOd{S%fPUwFK7uBc}NiA_uD3ccFu%v1#a9R zek&l3Vx>ai;9OX+i-<$%po32~F~MM;!Qsi7Q3=I!y=h1nO`1Euj%kMIG&OvyWEMf`1ladS!R#^_kQFDP0v(S zP*^AQcFtSE^@ScEY?s|Tx2N&OH)cWR71n+c9PhmEO@t5PlzJ0ooAS_6q<0wxgy(!y z$;pJm(VaV!9!-ps_a^jj_HQ0ihd@-N)Nke!ksG!H>+JjBs)=U^C-6WmWi|Vq(o%~` z%dqP&E;_~nk=Luv>0@R+Vn2<1f0E@PBvc4GDoGd$Q>t+_r+vdQC*)ZYE@J1#)!Etn zPHoCIeC2S;PmgJa+dW54LO(_;Kx)yighG_Oqtjl@NNo;%OaBEUI;mY^xY;bvF!DNS z_8a%k!d7pNn{N5`?m)XZ`Xgii2l0{O^3TBjE8qN8urj_S?lgW&H=40-?KLnP^SYAD zBgBsl=$MCV2LzV;e;cv zCf^tL$uow;>%b0pY0-sL(4;sO6rKqLblJf`N%Q2+G=gBVexrRT#tBl~5@MTgGi*;0 zCfG&rwcIJIs=_Zn-Bjs0kM?8k%3+&%yv*}JaGBVUm;p|EH=%FcITu~M7p{5=mWPA5i zitD-bx$vdq6gR^i7cdnBfiO_cQW}5_nBoYC890#MU=f1=rLgEtU~^+^&QJ43Y%S;^ zza>G+6sVwY-|*0B@Mm+xs;@k$`xycg*b3Bxc~G{%B$FTKS6etvant|1PeJ~{Q~sYc z51h>+UF;!=I7@g(UNNjhTfUw;>cp&*d4AdO#kQFx((zBvqfRu!L?iWmGn-7>m1oXXSb1-^U+ z+o^L0+oY6$1K?-9u}GHB^NHKClOcu6JjF@Q1hIz_T*p4+N)bYkQh@wFk|P=Y4-i`j zAOZZf06h8}sO{P!$^(4_N6}jleu`Z?S#h>M#sP_cPHHu12&*a&f@P>(xYR?9(P{T8i?(C6V zskqOy9X^Zr`-A=f&`-jFqJlK+Nsu2VbB+CyUp*@G-g=-HjOt#n+da6u84oLqY<1>EmD6e^NcVq+_r@Dn3*`uw5Hu z-yaeEFTrL^{85tX5Wh<3*?%mdz+Q6E4be-T2oj0Jzs0!0NB1jR|A_LR_2qZA_T~8_ z54{C{Afmr%8vUUDuKvJK+h}|`{s%SU_p5SVRmt7q7?~Y$o=Ej19JdPS8{|)MxNtu- z&pdi!k*3fVgIMgxL`T?w6V37HW+;cv@L4rW{Ta*ROR*rfeec;ivo)z8i=BHj6EYp1 z&R@gs1YA8V;mVSKSYUtDRCp^M;lIWnvaRosBGM=O&}mOhmc8s1$HWsI;45{cpogvM zP2Pfs4Ze+Ao*x-^$=tbyTohql3r<0ix|0#V=!D2Ws%V|xOh_#X;0u}L-?gIl&y11b z^n*pXto)lLL;S=Tzgei&kY5=g<}Vg7{TITW|4p@;eF9EF00;d&4fHFi{xYxMNG1Lk z)AqNd`cZ=%7W#V{1WNpwpZ-;Q_m83b-M;?{-CqpHKZWkUGTi?Ry1%a<|I?uRzf>2H z?f)IMy4?%t@jtJ6$p4cT1F%i(ga3|J1MC{#ojUgLx}fr@DxS)T2X$P!Y1~?gh|s zhe#TIPmvaZ>NznFnOoO2VQZ)oB?zZO%At}Z+=T(z66pge`VNvMPtWHcQ5ia;OE^3g zzG^sn0@0#EEQ{JeY@4%sd>JlPDOHR-5?6g&Iy-H+WZH8$$}k``u)y@CvvhMw{?fb$ zgkk*&ngcG0_svBpl-E@EEzKmE&VTF;FvL2Qpft!x#B?x`ol-Z5-acxUYSw+TFX~{L zr5mJkTV2?-@v@5t@74jJ1oDg8k1Ix#zZYiy-VHI`{ke>CA*5w;XCJT(OD|klQ2FEH z5V;-x>(^uTR8TpV46OVz#lHf+`O0TQbHtp~;9Xs>E!+-!3vfu=wLw&|ur%BmzrJiY zFw^&`$s#j&_13ed*6CNS*McOD%`%}<+m}zGxChX7zyWDwl!4)s+QUy85-kU<52TgG z8p?hc7aCW(V`9a{sLm$SsOeWnd;$ZuS8VGYU_I6o%@p$tXQUx^C;b(5x5jiZ*h&0q9XSqijHUjmma5F@@O-HulQ_I}4 z%3vLxNK!K>;N*%C(Q@kIh-#C@@s>*T6L&C|(?%)x+-jEx%Y%$CadFmM0cHW~Y`>FZ zu7yZ5I)pDd+aOH(Rrw` zT&`By9M&^&UQV_+_hG8T+q<_tP0wsCJT(*8e9e9YkA6~;-2Hjfh(JG5GFCa@CArp- zqtx{^#8B1A<)a4+n-{?#cpi6+fU2{6QWbWmva-iT%rf|H+sDBkuBPqj_54K0yQ&SSb|GF|#3>+nJp{_5slh3*KM#ORM_a~P6!#a3WmU5 zD#1F-G;Jn$-7CiW=xRB^GJ+kNZYmsU(^;Eh@w0x{czeM!U8@Klb4anYIM>2iz#CE8uJ&_?l{Yc=u-i}qhePrxG`AjiI z5*B#5-&X}L-CrPID7z>>Y0Pih+kVdNvHt}ZE6iIxaSfRQVk&;H6`L58tXorA@iz7( zuBxQ={q^@2V>4{P9Dn53ux846j zD0W{S?899y*rLK|F+`dZ{|1ETB7_S_aZy3c3-6rRlGGKtzRarP`N^H|gjW`KB=IcwGt@ruzL<%5dAvw=bMFX9)YWOwo!xJ{ zEUY9)xCzbSZtdNeu=ycJEA_)|XReUQ%@(0sTH;5Zs!ii!9TA*x7PJe$qvk=pM`VdS zz4d&v@YS-Cl7RV%xdCT$l?xf-xPXo!It}1V3m1|#LHsISwIRoyxj?^BQ({2<%(nY< zqQX&b{d-(S@ANp@?;Xh-^|b!9rW-&yGQr-nzh4;GI;CIuxbXPRuiX{!SYNxkHo+-d z|7$|o4alWXl8B4@!ssZ9ZIT%{EoCfCP;S!pFnh5y-B-v%mg{C-r-03a=u+pBhFaPA zU@aS8TTTIoAt)6vn)*mx>R%JiEEP`ImOt9+pvcwLP}bq!pY+Xzow(TqVbUK zsqbQ3&9yx&_Hd9;%{;_U!j8FZg_MxT8MWJ;B9bA=Q7NUH$ za;R2fe&R@J&^~QDjrf9ht_qbpk#r~N#=O26&x7fTYtG_CvzzEVPZ_dSwrtzewI$qQ zD;fiDe3H1mZQEnSD49i!yMlLV?&fnSJN0TKH_P6a>3uDS)uleqxTA?`)6?V)&O*a0 z{>CH;JR}tE31oEHU^_N|g%1tR%{glEv|nkVB*Y-uD$Eq#SCAE&+>L??SB z=Xx~Xhx`2>a_5fCDGr~a6Kk7}*|e*L_wC&%)NKIj8%m(`&=HGSFvofUq<*76EFF)t z9PJFPDibh$boOBD=slPS-Dxr9H}LZWcHkgFSmB)#VyxtPdh9XA0&U+ zZjYU8tVwXsF@-K4LAz};B7DjfRw@;#Q*ceEN3Kq71>3!O{> zBV|EEUj0N8#C2V%H+Jmz$p(znlI(K9mt>lYIqwgwe)c;a#UyyJMoqgPtk+j?_e)Lr zz^&k8k?s$*60VFVgIJK)89>ngn>NpR)6D_%z69*M<(Z&-y zHL;RxZ4kW57HeR+p*D218iI97j=VBevWT5LPY`VsJcM7U*phVt=byG(in{WuDxj#2 z-Vp|9|4HEFk|&cPXqI)pB0M>LZ?z%L>GHn14BESk$pW6w?|)Pjr~g*vzmfz9;loK@ z`?5-%qT742GbfsQtSqc`#7-JT@Lu-{&zyqN0Oz=52Oq6g!}uH-J=c5mSq7hJehIgf z#CEKnL|m-fhu3?EjCB_Ljq*%$z~L(sNU;|g*9t$sj_`^#f4+W4BKF#<-l6J_jgLU! z-kIPr*i8lLA3!-f668luP(gqjUA15bxSvmla)GM-wnlae@a^3BRX3L{ek`P3{=+Ni z;ttR+qFRU8*z>(#dg%wDkxTX%5aCy0@y^R$R^0@bN6Nv5{r1z4h)c0aK%#)EZd?!54ehsD17`dJIQj+1s#}C=QQDk-*QNL~6W1K3}nGMJB zhx2e?WyN}!fG(@ALhgKfK;c0&>XBT4SmQ~c|HAhkq@lKWL_>N+LneQL=(5caJt_YU z0Qvm`=o-I#C1m=S$E65pO6Zqv@>coxs3azXq6$DR0uBS24;JWybAP%Q@WZFJyx|}D7qgIKi!^A z5i-Of$ebO&ppkbyt9MSPcTRT*Ke@&Xu7%Ekhs#mh%!y;@wk`P|ZvC$?F1<|=ruf@# zc90r(RC$3u7+0XN1}sSh{Y0Q>q5}lza9PupL#%YQ63qsabu)!^Gr`bCM9)#*EyQ!g z9V~iQ4(bZzx~9=T-VEeoSbw12cE9~vI`H|O*zAjAW@LtrW#}%cf9H%{QtwLj|0<~l z^#30fc&6r`Q{X?|4=C{LT?G!9%v}Y(YpZu{HIB6FmhHM_|G)!BZhd$4v4E=|PkcoX z#!0ov(@(;5HZcY>$xb=NT7_u=R#_h|Yi;_88nJnELtTDZPsA6f_XP>IWU4D&P3yn3 zIu7rgzpcEW)t4I{_r%n(1JyRI$p!OTX@Ii8Wz(QRmgA610VB7sJQX#fJ-%L8V_&zH ziQ1PjZr+|zcJFJ?<*eK*ktY`8Yp2q}WsVyGD{k7-WMC6BzVAoR#+&E;;UvRfil1qX zlUT2}*GhgvwmZwTk3DiRSG85QV=Mr<+=&>10JUO?(s@?fI+4(3aJ* zf6ol7?fvp%gYvDN@!m4A`$X>SUk=Zu12+gY`R>P;M&@bp^l16qW^LDY6O6iQcDml$ zaQr&k-bJl~@Z8KCYsF5Q=&@`{z>)D^d)uBB8_^o;Yl9?t{$qZT{cF$CkJ~qvzG{vv zBfCMr{CY4kjr5qbOQjQzJ#3OsQyhMtoa-JPI3Y|RCpPHIN?i)r5T3i6US9oa;?nuY z`m0MeQ?&MUi{yrc+Ee80L&Rjf$HsAj@B)Nm*&V@W0j-~gCF)1-sJPKt?cdjM@YrVw zk^9~pFUc7HYHiB+i{#|wsRK7jMGfcvw>M!^3&x{%klmwr0p zzCB&Y_S#XYx61ee^mtn^&Tc_w*N<-spFkC8 z3QrjN;5Qpp&5r9ma8pTimUw@m`Nij^j0CAzy)Mwh0kbez<3>C2%9P~_*RYf3{)CC0 z#vvJ}9E(<4^>^a$To_C^5{;@8to$c(ohHjv>kU~y&z24ODwoAJnnoT9Sniu}z($HZ z&AM~$;L)eL-BH1Q8uPK`K9)GM$4XF9n0^DlMV4|muVt5ehPH^jgoi>?-p7fX0eQ#T zbT!3*PpzvVvT+ctp#&Kf zzeW__+2bIlIIu3<%}MOrUR|AN@UfPY=R1>lQQ>I1+L_cXkGG5hyh}FH#Gxrf1cbF# zj2K7ZMsgEXMqIefhg;>6?c8rmepz8$e3!o8mN{-9vUZJTotI~P;!~?R+#27KN;qpw z^k!Hn3t!vWyDswta-iW2+o;Lo=OdTA?UZPSdu=>3NN~Jn(F0s)`e4Es?8ptaD%k-S zmPZjr=*jDJtm!8&JIQ09OIr9HoMw$?495Dx>guwzK|@K)3pZz;-T)d{Mhx#Qk*KRF z#WeH4K`}PIBS^+#Du|z*-4HvVk1QsKPCPMBYPS10DLqcV8VEF36rjV9CG3re!0j&| zW3ZDPaxva6nN-l-6R}K!tYt60EVJ+gjFykE8D@gKN)BNb%zgO@DoC6>>s-=Cyh3^3 zx{UquQr0bL8!4mq&-*!_>h7r)#@a2t!WZ_*^TRIpx10fUj(i?#kaNa9w;Ubcn|xC^ z6Dlh)9zk38m4{~Sp0+H!W=D$TSki;IiKc@sU?JgmTnE((*PU&?%p}<<9y2lzv$F*@ z-gm0Rqn3Q|=$0h;&~;IH%Sr@Mw?K#rGA=6bzjwVld|c;Z+Qd1oQ&VClh8I8^UIvYW z)eG0iudCTp;Rge;&J#uN>)+S&cA9n2M|_Os;N}dP(360dcbB+Qga@nDa((+P8ZC%J zO~;*FVUC0IhD=srW`<>Dc9L=?=8wXJQw7`V+g`KZORLtzZS)bf*`v7|IAJeV*4-W^ z$c^|!Hg^?YdC$OEO-PMo!!mX@6jP*qKOtE)*%xr<2#2a9yxz4OO6qH9_a2tTX-GUf z6Zr+jm{9kc-8$_ZTngJI-l{43cBokN46B)LZK#2>=Uq&CJo_0|r~fCqG#NAwNrvbb zNABUgp-p#kN;*H@(g4tm%r4u&NiuJKU2mz5D-$M{Zs4e(;lyT(^~uMz$Cmrmbu)5y z#L@<@G6F>ShT>I zmL=(<&cpAY=u)tcH*G}KOS)GS=2=+I`7P8XsjljT1`K!_8zO>|r+lWTk`RZK#K_Z! zq*-=%A+5_sM|=!`{?!FV8T?B0& z)Jlo7@7XhLzp7G&giy!lZDxj^vsG1~q(4w#p{GK<0T%YXS)%^;Sk~*lB0VvZ^TOo3 zGH{`YtseIEuMt*%f24zfQA5srItD~xKi|u|IF349tTsz(q-?9Sirj0rhM-o0i9s5V~I-$=irx*2~cu< zcoyY~-}oTt)E8>Dbonr(mDOWzusNf=jv&&!ru)f741sf|9H2i?h%fqDpTcjna!cPn zTj17xn&%XbnU>JJwTwEQ-rA6xpV2`ae>p{U2R0qLddn=B$*02l`*2SYJtAWPYVAsU zS9V;o1oZ8;Iv!;7GK>6+=^JT~y{HUy{PD@&pCAXW8GO(@gpc};uhYKz2r(>`w0_tM zbx$T&D6bzjciTEiaCr{#ermXFz`<)bLF}OZOo8d35}HHf&?9Qoe5=LGVxb?wiST8U zp$R@EaV_JbyzBOmx#_U!EAnxJO!W}HH@Ye%zie_>z8{e53w`n$sb0s~gwJzs?feA{ zE;Q<>(NSL0zNlTaPeY;oMiNZ^o@}+iU@r~_fGpGiEeW&=+-B=#^l<2v&5T%WI zM`fY9+Bcjh5AG(@WoPag7PCBp15&5h{L`;yPt<*d^!f;C8HBUd>d-`T(z!aKbST-X zk@3mW#zVNcD9_(LPZtDW<`h>8cl@;l1OB;-W8VS0hVQiKCOk@=N3ii;p=ARm$S!o^ zvQ@uG3lqllt$uK~2tLa+98UCcJ#YW;GaeCpBDE)j2Q#?|2fxj+yzSRc@ ziSwsyTsyVvO*GWCDorO*FqQfQV{Z)^c)TfyFwh7LXpzP^J!uh!OAh5^`uWZ&j_JIvYM<3SfX z0+;u_gBG%#vcq`w%l^Zwd@w$IVqpu@oDRG~y1au$P+o4_KDtV`7d*Epb{**cOz4c_ zzIdGMFonMKwI(uXn7t6Zv^ukxWYzh*FiUv@W4B$9gQdA^69LXMTUfv`rUIKUNoDGd zJ%Ro0#nESFKILAwxSKZ_#yN>24OD^U&IAd$(w7NVp3w&S@gHqJ3Gd#IZXK;}rcC7F zI>w+szsMCt+GW8?N%igxZ^bFj*$GkUDij_HAKq7^4(IWunu3IQspuc%Jw^3;un9}S z-s!b{M!MOHDOGR~qzq1A33Y8X9kq2SdF|JbmpI&`PjbUNAVb+`UsE!nvHDcXUOc4X Ze`5{*ccy(p&3|Z **Windows** > **Configuration profiles** > **Create profile**. - 3. Enter the following properties: + 1. Go to the [Microsoft Endpoint Manager portal](https://endpoint.microsoft.com/#home). + 2. Select **Devices** from the navigation. + 3. Under **Policy**, select **Configuration profiles**. + 4. Select **Create profile**. + 5. From the **Platform** menu, select **Windows 10 and later**. + 6. From the **Profile** menu, select **Shared multi-user device**. - - **Platform**: Select **Windows 10 and later**. - - **Profile**: Select **Templates** > **Shared multi-user device**. + ![custom OMA-URI policy in Intune](images/shared_pc_1.jpg) - 4. Select **Create**. - 5. In **Basics**, enter the following properties: - - - **Name**: Enter a descriptive name for the new profile. - - **Description**: Enter a description for the profile. This setting is optional, but recommended. - - 6. Select **Next**. - 7. In **Configuration settings**, depending on the platform you chose, the settings you can configure are different. Choose your platform for detailed settings: - - 8. On the **Configuration settings** page, set the ‘Shared PC Mode’ value to **Enabled**. + 7. Select **Create**. + 8. Enter a name for the policy (e.g. My Win10 Shared devices policy). You can optionally add a description should you wish to do so. + 9. Select **Next**. + 10. On the **Configuration settings** page, set the ‘Shared PC Mode’ value to **Enabled**. ![Shared PC settings in ICD](images/shared_pc_3.png) - 9. From this point on, you can configure any additional settings you’d like to be part of this policy, and then follow the rest of the set-up flow to its completion by selecting **Create** after **Step 4**. + 11. From this point on, you can configure any additional settings you’d like to be part of this policy, and then follow the rest of the set-up flow to its completion by selecting **Create** after **Step 6**. - A provisioning package created with the Windows Configuration Designer: You can apply a provisioning package when you initially set up the PC (also known as the out-of-box-experience or OOBE), or you can apply the provisioning package to a Windows 10 PC that is already in use. The provisioning package is created in Windows Configuration Designer. Shared PC mode is enabled by the [SharedPC configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/sharedpc-csp), exposed in Windows Configuration Designer as **SharedPC**. diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 355ea08482..2779d317f6 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -21,18 +21,18 @@ ms.topic: article **Applies to** - Windows 10 -This topic will show you how to take your reference image for Windows 10 (that was just [created](create-a-windows-10-reference-image.md)), and deploy that image to your environment using the **Microsoft Deployment Toolkit (MDT)**. +This topic will show you how to take your reference image for Windows 10 (that was just [created](create-a-windows-10-reference-image.md)), and deploy that image to your environment using the Microsoft Deployment Toolkit (MDT). -We will prepare for this by creating an **MDT** deployment share that is used solely for image deployment. Separating the processes of creating reference images from the processes used to deploy them in production allows greater control of both processes. We will configure **Active Directory** permissions, configure the deployment share, create a new task sequence, and add applications, drivers, and rules. +We will prepare for this by creating an MDT deployment share that is used solely for image deployment. Separating the processes of creating reference images from the processes used to deploy them in production allows greater control of on both processes. We will configure Active Directory permissions, configure the deployment share, create a new task sequence, and add applications, drivers, and rules. -For the purposes of this topic, we will use four computers: **DC01**, **MDT01**, **HV01**, and **PC0005**. +For the purposes of this topic, we will use four computers: DC01, MDT01, HV01 and PC0005. -- **DC01** is a domain controller -- **MDT01** is a domain member server -- **HV01** is a Hyper-V server -- **PC0005** is a blank device to which we will deploy Windows 10 +- DC01 is a domain controller +- MDT01 is a domain member server +- HV01 is a Hyper-V server +- PC0005 is a blank device to which we will deploy Windows 10 -**MDT01** and **PC0005** are members of the domain contoso.com for the fictitious Contoso Corporation. **HV01** is used to test the deployment of **PC0005** in a virtual environment. +MDT01 and PC0005 are members of the domain contoso.com for the fictitious Contoso Corporation. HV01 used to test deployment of PC0005 in a virtual environment. ![devices](../images/mdt-07-fig01.png) @@ -45,14 +45,14 @@ These steps will show you how to configure an Active Directory account with the On **DC01**: -1. Download the [Set-OUPermissions.ps1 script](https://go.microsoft.com/fwlink/p/?LinkId=619362) and copy it to the **C:\\Setup\\Scripts** directory on **DC01**. This script configures permissions to allow the **MDT_JD** account to manage computer accounts in the contoso > Computers organizational unit. -2. Create the **MDT_JD** service account by running the following command from an elevated **Windows PowerShell prompt**: +1. Download the [Set-OUPermissions.ps1 script](https://go.microsoft.com/fwlink/p/?LinkId=619362) and copy it to the **C:\\Setup\\Scripts** directory on DC01. This script configures permissions to allow the MDT_JD account to manage computer accounts in the contoso > Computers organizational unit. +2. Create the MDT_JD service account by running the following command from an elevated Windows PowerShell prompt: ```powershell New-ADUser -Name MDT_JD -UserPrincipalName MDT_JD -path "OU=Service Accounts,OU=Accounts,OU=Contoso,DC=CONTOSO,DC=COM" -Description "MDT join domain account" -AccountPassword (ConvertTo-SecureString "pass@word1" -AsPlainText -Force) -ChangePasswordAtLogon $false -PasswordNeverExpires $true -Enabled $true ``` -3. Next, run the **Set-OuPermissions script** to apply permissions to the **MDT\_JD** service account, enabling it to manage computer accounts in the Contoso / Computers OU. Run the following commands from an elevated **Windows PowerShell prompt**: +3. Next, run the Set-OuPermissions script to apply permissions to the **MDT\_JD** service account, enabling it to manage computer accounts in the Contoso / Computers OU. Run the following commands from an elevated Windows PowerShell prompt: ```powershell Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force @@ -76,7 +76,7 @@ The following is a list of the permissions being granted: ## Step 2: Set up the MDT production deployment share -Next, create a new **MDT** deployment share. You should not use the same deployment share that you used to create the reference image for a production deployment. Perform this procedure on the **MDT01** server. +Next, create a new MDT deployment share. You should not use the same deployment share that you used to create the reference image for a production deployment. Perform this procedure on the MDT01 server. ### Create the MDT production deployment share @@ -85,21 +85,21 @@ On **MDT01**: The steps for creating the deployment share for production are the same as when you created the deployment share for creating the custom reference image: 1. Ensure you are signed on as: contoso\administrator. -2. In the **Deployment Workbench** console, right-click **Deployment Shares** and select **New Deployment Share**. +2. In the Deployment Workbench console, right-click **Deployment Shares** and select **New Deployment Share**. 3. On the **Path** page, in the **Deployment share path** text box, type **D:\\MDTProduction** and click **Next**. 4. On the **Share** page, in the **Share name** text box, type **MDTProduction$** and click **Next**. 5. On the **Descriptive Name** page, in the **Deployment share description** text box, type **MDT Production** and click **Next**. 6. On the **Options** page, accept the default settings and click **Next** twice, and then click **Finish**. -7. Using **File Explorer**, verify that you can access the **\\\\MDT01\\MDTProduction$** share. +7. Using File Explorer, verify that you can access the **\\\\MDT01\\MDTProduction$** share. ### Configure permissions for the production deployment share -To read files in the deployment share, you need to assign **NTFS** and **SMB** permissions to the **MDT Build Account (MDT\_BA)** for the **D:\\MDTProduction** folder. +To read files in the deployment share, you need to assign NTFS and SMB permissions to the MDT Build Account (MDT\_BA) for the **D:\\MDTProduction** folder On **MDT01**: 1. Ensure you are signed in as **contoso\\administrator**. -2. Modify the **NTFS** permissions for the **D:\\MDTProduction** folder by running the following command in an elevated **Windows PowerShell prompt**: +2. Modify the NTFS permissions for the **D:\\MDTProduction** folder by running the following command in an elevated Windows PowerShell prompt: ``` powershell icacls "D:\MDTProduction" /grant '"CONTOSO\MDT_BA":(OI)(CI)(M)' @@ -112,33 +112,33 @@ The next step is to add a reference image into the deployment share with the set ### Add the Windows 10 Enterprise x64 RTM custom image -In these steps, we assume that you have completed the steps in the [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) topic, so you have a Windows 10 reference image at **D:\\MDTBuildLab\\Captures\REFW10X64-001.wim** on **MDT01**. +In these steps, we assume that you have completed the steps in the [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) topic, so you have a Windows 10 reference image at **D:\\MDTBuildLab\\Captures\REFW10X64-001.wim** on MDT01. -1. Using the **Deployment Workbench**, expand the **Deployment Shares** node, and then expand **MDT Production**; select the **Operating Systems** node, and create a **folder** named **Windows 10**. +1. Using the Deployment Workbench, expand the **Deployment Shares** node, and then expand **MDT Production**; select the **Operating Systems** node, and create a folder named **Windows 10**. 2. Right-click the **Windows 10** folder and select **Import Operating System**. 3. On the **OS Type** page, select **Custom image file** and click **Next**. 4. On the **Image** page, in the **Source file** text box, browse to **D:\\MDTBuildLab\\Captures\\REFW10X64-001.wim** and click **Next**. 5. On the **Setup** page, select the **Copy Windows 7, Windows Server 2008 R2, or later setup files from the specified path** option; in the **Setup source directory** text box, browse to **D:\\MDTBuildLab\\Operating Systems\\W10EX64RTM** and click **Next**. 6. On the **Destination** page, in the **Destination directory name** text box, type **W10EX64RTM**, click **Next** twice, and then click **Finish**. -7. After adding the **Operating System**, double-click the added **Operating System** name in the **Operating Systems / Windows 10** node and change the name to **Windows 10 Enterprise x64 RTM Custom Image**. +7. After adding the operating system, double-click the added operating system name in the **Operating Systems / Windows 10** node and change the name to **Windows 10 Enterprise x64 RTM Custom Image**. -> [!NOTE] -> The reason for adding the setup files has changed since earlier versions of **MDT**. **MDT 2010** used the setup files to install Windows. **MDT** uses the **DISM** command to apply the image; however, you still need the **setup files** because some components in **roles and features** are stored outside the main image. +>[!NOTE] +>The reason for adding the setup files has changed since earlier versions of MDT. MDT 2010 used the setup files to install Windows. MDT uses DISM to apply the image; however, you still need the setup files because some components in roles and features are stored outside the main image. -![Imported OS](../images/fig2-importedos.png) +![imported OS](../images/fig2-importedos.png) ## Step 4: Add an application -When you configure your **MDT Build Lab deployment** share, you can also add **applications** to the new deployment share before creating your task sequence. This section walks you through the process of adding an application to the **MDT Production deployment** share using **Adobe Reader** as an example. +When you configure your MDT Build Lab deployment share, you can also add applications to the new deployment share before creating your task sequence. This section walks you through the process of adding an application to the MDT Production deployment share using Adobe Reader as an example. ### Create the install: Adobe Reader DC On **MDT01**: -1. Download the Enterprise distribution version of [**Adobe Acrobat Reader DC**](https://get.adobe.com/reader/enterprise/) (AcroRdrDC2100120140_en_US.exe) to **D:\\setup\\adobe** on MDT01. -2. Extract the **.exe** file that you downloaded to a **.msi** (ex: .\AcroRdrDC2100120140_en_US.exe -sfx_o"d:\setup\adobe\install\" -sfx_ne). -3. In the **Deployment Workbench**, expand the **MDT Production** node and navigate to the **Applications** node. +1. Download the Enterprise distribution version of [Adobe Acrobat Reader DC](https://get.adobe.com/reader/enterprise/) (AcroRdrDC1902120058_en_US.exe) to **D:\\setup\\adobe** on MDT01. +2. Extract the .exe file that you downloaded to an .msi (ex: .\AcroRdrDC1902120058_en_US.exe -sfx_o"d:\setup\adobe\install\" -sfx_ne). +3. In the Deployment Workbench, expand the **MDT Production** node and navigate to the **Applications** node. 4. Right-click the **Applications** node, and create a new folder named **Adobe**. 5. In the **Applications** node, right-click the **Adobe** folder and select **New Application**. 6. On the **Application Type** page, select the **Application with source files** option and click **Next**. @@ -153,7 +153,7 @@ The Adobe Reader application added to the Deployment Workbench. ## Step 5: Prepare the drivers repository -In order to deploy Windows 10 with **MDT** successfully, you need drivers for the boot images and for the actual operating system. This section will show you how to add drivers for the boot images and operating system, using the following hardware models as examples: +In order to deploy Windows 10 with MDT successfully, you need drivers for the boot images and for the actual operating system. This section will show you how to add drivers for the boot image and operating system, using the following hardware models as examples: - Lenovo ThinkPad T420 - Dell Latitude 7390 - HP EliteBook 8560w @@ -166,19 +166,19 @@ For boot images, you need to have storage and network drivers; for the operating ### Create the driver source structure in the file system -The key to successful management of drivers for **MDT**, as well as for any other deployment solution, is to have a really good driver repository. From this repository, you import drivers into MDT for deployment, but you should always maintain the repository for future use. +The key to successful management of drivers for MDT, as well as for any other deployment solution, is to have a really good driver repository. From this repository, you import drivers into MDT for deployment, but you should always maintain the repository for future use. On **MDT01**: > [!IMPORTANT] > In the steps below, it is critical that the folder names used for various computer makes and models exactly match the results of **wmic computersystem get model,manufacturer** on the target system. -1. Using **File Explorer**, create the **D:\\drivers** folder. +1. Using File Explorer, create the **D:\\drivers** folder. 2. In the **D:\\drivers** folder, create the following folder structure: - 1. **WinPE x86** - 2. **WinPE x64** - 3. **Windows 10 x64** -3. In the new **Windows 10 x64** folder, create the following folder structure: + 1. WinPE x86 + 2. WinPE x64 + 3. Windows 10 x64 +3. In the new Windows 10 x64 folder, create the following folder structure: - Dell Inc - Latitude E7450 - Hewlett-Packard @@ -193,12 +193,12 @@ On **MDT01**: ### Create the logical driver structure in MDT -When you import drivers to the **MDT driver repository**, **MDT** creates a single instance folder structure based on driver class names. However, you can, and should, mimic the driver structure of your driver source repository in the Deployment Workbench. This is done by creating logical folders in the Deployment Workbench. -1. On **MDT01**, using Deployment Workbench, select the **Out-of-Box Drivers** node. +When you import drivers to the MDT driver repository, MDT creates a single instance folder structure based on driver class names. However, you can, and should, mimic the driver structure of your driver source repository in the Deployment Workbench. This is done by creating logical folders in the Deployment Workbench. +1. On MDT01, using Deployment Workbench, select the **Out-of-Box Drivers** node. 2. In the **Out-Of-Box Drivers** node, create the following folder structure: - 1. **WinPE x86** - 2. **WinPE x64** - 3. **Windows 10 x64** + 1. WinPE x86 + 2. WinPE x64 + 3. Windows 10 x64 3. In the **Windows 10 x64** folder, create the following folder structure: - Dell Inc - Latitude E7450 @@ -209,7 +209,7 @@ When you import drivers to the **MDT driver repository**, **MDT** creates a sing - Microsoft Corporation - Surface Laptop -The preceding folder names should match the actual make and model values that MDT reads from devices during deployment. You can find out the model values for your machines by using the following command in an elevated **Windows PowerShell prompt**: +The preceding folder names should match the actual make and model values that MDT reads from devices during deployment. You can find out the model values for your machines by using the following command in Windows PowerShell: ``` powershell Get-WmiObject -Class:Win32_ComputerSystem @@ -220,7 +220,7 @@ Or, you can use this command in a normal command prompt: wmic csproduct get name ``` -If you want a more standardized naming convention, try the **ModelAliasExit.vbs script** from the Deployment Guys blog post entitled [Using and Extending Model Aliases for Hardware Specific Application Installation](https://go.microsoft.com/fwlink/p/?LinkId=619536). +If you want a more standardized naming convention, try the ModelAliasExit.vbs script from the Deployment Guys blog post entitled [Using and Extending Model Aliases for Hardware Specific Application Installation](https://go.microsoft.com/fwlink/p/?LinkId=619536). ![drivers](../images/fig4-oob-drivers.png) @@ -229,20 +229,20 @@ The Out-of-Box Drivers structure in the Deployment Workbench. ### Create the selection profiles for boot image drivers By default, MDT adds any storage and network drivers that you import to the boot images. However, you should add only the drivers that are necessary to the boot image. You can control which drivers are added by using selection profiles. -The drivers that are used for the boot images (Windows PE) are Windows 10 drivers. If you can’t locate **Windows 10** drivers for your device, a **Windows 7** or **Windows 8.1** driver will most likely work, but Windows 10 drivers should be your first choice. +The drivers that are used for the boot images (Windows PE) are Windows 10 drivers. If you can’t locate Windows 10 drivers for your device, a Windows 7 or Windows 8.1 driver will most likely work, but Windows 10 drivers should be your first choice. On **MDT01**: -1. In the **Deployment Workbench**, under the **MDT Production** node, expand the **Advanced Configuration** node, right-click the **Selection Profiles** node, and select **New Selection Profile**. -2. In the **New Selection Profile Wizard**, create a **selection profile** with the following settings: - 1. Selection Profile name: **WinPE x86** - 2. Folders: Select the **WinPE x86 folder** in **Out-of-Box Drivers**. - 3. Click **Next**, **Next**, and **Finish**. +1. In the Deployment Workbench, under the **MDT Production** node, expand the **Advanced Configuration** node, right-click the **Selection Profiles** node, and select **New Selection Profile**. +2. In the New Selection Profile Wizard, create a selection profile with the following settings: + 1. Selection Profile name: WinPE x86 + 2. Folders: Select the WinPE x86 folder in Out-of-Box Drivers. + 3. Click **Next**, **Next** and **Finish**. 3. Right-click the **Selection Profiles** node again, and select **New Selection Profile**. -4. In the **New Selection Profile Wizard**, create a **selection profile** with the following settings: - 1. Selection Profile name: **WinPE x64** - 2. Folders: Select the **WinPE x64 folder** in **Out-of-Box Drivers**. - 3. Click **Next**, **Next**, and **Finish**. +4. In the New Selection Profile Wizard, create a selection profile with the following settings: + 1. Selection Profile name: WinPE x64 + 2. Folders: Select the WinPE x64 folder in Out-of-Box Drivers. + 3. Click **Next**, **Next** and **Finish**. ![figure 5](../images/fig5-selectprofile.png) @@ -250,21 +250,22 @@ Creating the WinPE x64 selection profile. ### Extract and import drivers for the x64 boot image -**Windows PE** supports all the hardware models that we have, but here you learn how to add boot image drivers to accommodate any new hardware that might require additional drivers. In this example, you add the latest Intel network drivers to the x64 boot image. +Windows PE supports all the hardware models that we have, but here you learn to add boot image drivers to accommodate any new hardware that might require additional drivers. In this example, you add the latest Intel network drivers to the x64 boot image. On **MDT01**: 1. Download **PROWinx64.exe** from Intel.com (ex: [PROWinx64.exe](https://downloadcenter.intel.com/downloads/eula/25016/Intel-Network-Adapter-Driver-for-Windows-10?httpDown=https%3A%2F%2Fdownloadmirror.intel.com%2F25016%2Feng%2FPROWinx64.exe)). -2. Extract **PROWinx64.exe** to a temporary folder - in this example to the **C:\\Tmp\\ProWinx64** folder. Note that extracting the **.exe** file manually requires an extraction utility. You can also run the .exe and it will self-extract files to the **%userprofile%\AppData\Local\Temp\RarSFX0** directory. This directory is temporary and will be deleted when the **.exe** terminates. -3. Using **File Explorer**, create the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. +2. Extract PROWinx64.exe to a temporary folder - in this example to the **C:\\Tmp\\ProWinx64** folder. + a. **Note**: Extracting the .exe file manually requires an extraction utility. You can also run the .exe and it will self-extract files to the **%userprofile%\AppData\Local\Temp\RarSFX0** directory. This directory is temporary and will be deleted when the .exe terminates. +3. Using File Explorer, create the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. 4. Copy the content of the **C:\\Tmp\\PROWinx64\\PRO1000\\Winx64\\NDIS64** folder to the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. -5. In the **Deployment Workbench**, expand the **MDT Production** > **Out-of-Box Drivers** node, right-click the **WinPE x64** node, select **Import Drivers**, and use the following driver source directory to import drivers: **D:\\Drivers\\WinPE x64\\Intel PRO1000**. +5. In the Deployment Workbench, expand the **MDT Production** > **Out-of-Box Drivers** node, right-click the **WinPE x64** node, and select **Import Drivers**, and use the following Driver source directory to import drivers: **D:\\Drivers\\WinPE x64\\Intel PRO1000**. ### Download, extract, and import drivers ### For the Lenovo ThinkStation P500 -For the **ThinkStation P500** model, you use the Lenovo ThinkVantage Update Retriever software to download the drivers. With Update Retriever, you need to specify the correct Lenovo Machine Type for the actual hardware (the first four characters of the model name). As an example, the Lenovo ThinkStation P500 model has the 30A6003TUS model name, meaning the Machine Type is 30A6. +For the ThinkStation P500 model, you use the Lenovo ThinkVantage Update Retriever software to download the drivers. With Update Retriever, you need to specify the correct Lenovo Machine Type for the actual hardware (the first four characters of the model name). As an example, the Lenovo ThinkStation P500 model has the 30A6003TUS model name, meaning the Machine Type is 30A6. ![ThinkStation image](../images/thinkstation.png) diff --git a/windows/deployment/update/media-dynamic-update.md b/windows/deployment/update/media-dynamic-update.md index 74fc796879..ea81420b8b 100644 --- a/windows/deployment/update/media-dynamic-update.md +++ b/windows/deployment/update/media-dynamic-update.md @@ -81,9 +81,6 @@ This table shows the correct sequence for applying the various tasks to the file |Add .NET and .NET cumulative updates | | | 24 | |Export image | 8 | 17 | 25 | -> [!NOTE] -> Starting in February 2021, the latest cumulative update and servicing stack update will be combined and distributed in the Microsoft Update Catalog as a new combined cumulative update. For Steps 1, 9, and 18 that require the servicing stack update for updating the installation media, you should use the combined cumulative update. For more information on the combined cumulative update, see [Servicing stack updates](https://docs.microsoft.com/windows/deployment/update/servicing-stack-updates). - ### Multiple Windows editions The main operating system file (install.wim) contains multiple editions of Windows 10. It’s possible that only an update for a given edition is required to deploy it, based on the index. Or, it might be that all editions need an update. Further, ensure that languages are installed before Features on Demand, and the latest cumulative update is always applied last. diff --git a/windows/deployment/update/servicing-stack-updates.md b/windows/deployment/update/servicing-stack-updates.md index 13487eef17..e2b6404d14 100644 --- a/windows/deployment/update/servicing-stack-updates.md +++ b/windows/deployment/update/servicing-stack-updates.md @@ -29,6 +29,8 @@ Servicing stack updates provide fixes to the servicing stack, the component that Servicing stack updates improve the reliability of the update process to mitigate potential issues while installing the latest quality updates and feature updates. If you don't install the latest servicing stack update, there's a risk that your device can't be updated with the latest Microsoft security fixes. +For information about some changes to servicing stack updates, see [Simplifing Deployment of Servicing Stack Updates](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/simplifying-on-premises-deployment-of-servicing-stack-updates/ba-p/1646039) on the Windows IT Pro blog. + ## When are they released? Servicing stack update are released depending on new issues or vulnerabilities. In rare occasions a servicing stack update may need to be released on demand to address an issue impacting systems installing the monthly security update. Starting in November 2018 new servicing stack updates will be classified as "Security" with a severity rating of "Critical." @@ -42,6 +44,7 @@ Both Windows 10 and Windows Server use the cumulative update mechanism, in which Servicing stack updates must ship separately from the cumulative updates because they modify the component that installs Windows updates. The servicing stack is released separately because the servicing stack itself requires an update. For example, the cumulative update [KB4284880](https://support.microsoft.com/help/4284880/windows-10-update-kb4284880) requires the [May 17, 2018 servicing stack update](https://support.microsoft.com/help/4132216), which includes updates to Windows Update. + ## Is there any special guidance? Microsoft recommends you install the latest servicing stack updates for your operating system before installing the latest cumulative update. @@ -55,7 +58,3 @@ Typically, the improvements are reliability and performance improvements that do * Servicing stack update releases are specific to the operating system version (build number), much like quality updates. * Search to install latest available [Servicing stack update for Windows 10](https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001). * Once a servicing stack update is installed, it cannot be removed or uninstalled from the machine. - - -## Simplifying on-premises deployment of servicing stack updates -With the Windows Update experience, servicing stack updates and cumulative updates are deployed together to the device. The update stack automatically orchestrates the installation, so both are applied correctly. Starting in February 2021, the cumulative update will include the latest servicing stack updates, to provide a single cumulative update payload to both Windows Server Update Services (WSUS) and Microsoft Catalog. If you use an endpoint management tool backed by WSUS, such as Configuration Manager, you will only have to select and deploy the monthly cumulative update. The latest servicing stack updates will automatically be applied correctly. Release notes and file information for cumulative updates, including those related to the servicing stack, will be in a single KB article. The combined monthly cumulative update will be available on Windows 10, version 2004 and later starting with the 2021 2C release, KB4601382. diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index 8bf31e807a..4e77a4d513 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -66,9 +66,6 @@ To find your CommercialID within Azure: Once you've added Update Compliance to a workspace in your Azure subscription, you'll need to configure any devices you want to monitor. There are two ways to configure devices to use Update Compliance. -> [!NOTE] -> If you use or plan to use [Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/overview), follow the steps in [Enroll devices in Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/enroll-devices) to also enroll devices to Update Compliance. You should be aware that the Commercial ID and Log Analytics workspace must be the same for both Desktop Analytics and Update Compliance. - > [!NOTE] > After configuring devices via one of the two methods below, it can take up to 72 hours before devices are visible in the solution. Until then, Update Compliance will indicate it is still assessing devices. diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index b092e01f7d..a9ec6583a1 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -32,8 +32,8 @@ Delivery Optimization is a cloud-managed solution. Access to the Delivery Optimi For information about setting up Delivery Optimization, including tips for the best settings in different scenarios, see [Set up Delivery Optimization for Windows 10 updates](waas-delivery-optimization-setup.md). For a comprehensive list of all Delivery Optimization settings, see [Delivery Optimization reference](waas-delivery-optimization-reference.md). -> [!NOTE] -> WSUS can also use [BranchCache](waas-branchcache.md) for content sharing and caching. If Delivery Optimization is enabled on devices that use BranchCache, Delivery Optimization will be used instead. +>[!NOTE] +>WSUS can also use [BranchCache](waas-branchcache.md) for content sharing and caching. If Delivery Optimization is enabled on devices that use BranchCache, Delivery Optimization will be used instead. ## New in Windows 10, version 2004 @@ -68,9 +68,6 @@ For information about setting up Delivery Optimization, including tips for the b - Edge browser installs and updates - [Dynamic updates](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/the-benefits-of-windows-10-dynamic-update/ba-p/467847) -> [!NOTE] -> Volume-licensed versions of Office 2019, such as Office Professional Plus 2019, can take advantage of Delivery Optimization for background updates. Delivery Optimization isn't available for installation or for foreground updates. The same applies to volume-licensed versions of Project 2019 and Visio 2019. - ## Requirements The following table lists the minimum Windows 10 version that supports Delivery Optimization: @@ -137,7 +134,7 @@ For more details, check out the [Adopting Windows as a Service at Microsoft](htt **Does Delivery Optimization work with WSUS?**: Yes. Devices will obtain the update payloads from the WSUS server, but must also have an internet connection as they communicate with the Delivery Optimization cloud service for coordination. -**Which ports does Delivery Optimization use?**: Delivery Optimization listens on port 7680 for requests from other peers by using TCP/IP. The service will register and open this port on the device, but you might need to set this port to accept inbound and outbound traffic through your firewall yourself. If you don't allow inbound and outbound traffic over port 7680, you can't use the peer-to-peer functionality of Delivery Optimization. However, devices can still successfully download by using HTTP or HTTPS traffic over port 80 (such as for default Windows Update data). +**Which ports does Delivery Optimization use?**: Delivery Optimization listens on port 7680 for requests from other peers by using TCP/IP. The service will register and open this port on the device, but you might need to set this port to accept inbound traffic through your firewall yourself. If you don't allow inbound traffic over port 7680, you can't use the peer-to-peer functionality of Delivery Optimization. However, devices can still successfully download by using HTTP or HTTPS traffic over port 80 (such as for default Windows Update data). If you set up Delivery Optimization to create peer groups that include devices across NATs (or any form of internal subnet that uses gateways or firewalls between subnets), it will use Teredo. For this to work, you must allow inbound TCP/IP traffic over port 3544. Look for a "NAT traversal" setting in your firewall to set this up. diff --git a/windows/deployment/update/waas-manage-updates-wufb.md b/windows/deployment/update/waas-manage-updates-wufb.md index c0367c64cf..5a410e9d8c 100644 --- a/windows/deployment/update/waas-manage-updates-wufb.md +++ b/windows/deployment/update/waas-manage-updates-wufb.md @@ -47,14 +47,11 @@ Windows Update for Business enables an IT administrator to receive and manage a Windows Update for Business provides management policies for several types of updates to Windows 10 devices: - **Feature updates:** Previously referred to as "upgrades," feature updates contain not only security and quality revisions, but also significant feature additions and changes. Feature updates are released semi-annually in the fall and in the spring. -- **Quality updates:** Quality updates are traditional operating system updates, typically released on the second Tuesday of each month (though they can be released at any time). These include security, critical, and driver updates. +- **Quality updates:** Quality updates are traditional operating system updates, typically released on the second Tuesday of each month (though they can be released at any time). These include security, critical, and driver updates. Windows Update for Business also treats non-Windows updates (such as updates for Microsoft Office or Visual Studio) as quality updates. These non-Windows Updates are known as "Microsoft updates" and you can set devices to receive such updates (or not) along with their Windows updates. - **Driver updates:** Updates for non-Microsoft drivers that are relevant to your devices. Driver updates are on by default, but you can use Windows Update for Business policies to turn them off if you prefer. -- **Microsoft product updates:** Updates for other Microsoft products, such as Visual Studio or versions of Microsoft Office that are installed by using Windows Installer (MSI). These updates are treated the same way as quality updates. Microsoft product updates are off by default, but you can turn them on with Windows Update for Business policies. +- **Microsoft product updates**: Updates for other Microsoft products, such as versions of Office that are installed by using Windows Installer (MSI). Versions of Office that are installed by using Click-to-Run can't be updated by using Windows Update for Business. Product updates are off by default. You can turn them on by using Windows Update for Business policies. ->[!NOTE] ->Versions of Office that are installed by using Click-to-Run can't be updated by using Windows Update for Business. - ## Offering You can control when updates are applied, for example by deferring when an update is installed on a device or by pausing updates for a certain period. @@ -129,7 +126,7 @@ The large number of different policies offered for Windows 10 can be overwhelmin The Update Baseline toolkit makes it easy by providing a single command for IT Admins to apply the Update Baseline to devices. You can get the Update Baseline toolkit from the [Download Center](https://www.microsoft.com/download/details.aspx?id=101056). >[!NOTE] ->The Update Baseline toolkit is available only for Group Policy. Update Baseline does not affect your offering policies, whether you’re using deferrals or target version to manage which updates are offered to your devices and when. +>The Update Baseline toolkit is available only for Group Policy. Update Baseline does not affect your offering policies, whether you’re using deferrals or target version to manage which updates are offered to your devices when.